pulumi-vault 7.2.0a1755297899__py3-none-any.whl → 7.3.0a1755586140__py3-none-any.whl

This diff represents the content of publicly available package versions that have been released to one of the supported registries. The information contained in this diff is provided for informational purposes only and reflects changes between package versions as they appear in their respective public registries.
Files changed (27) hide show
  1. pulumi_vault/__init__.py +18 -0
  2. pulumi_vault/_inputs.py +201 -0
  3. pulumi_vault/aws/secret_backend.py +627 -49
  4. pulumi_vault/azure/backend.py +788 -15
  5. pulumi_vault/consul/secret_backend.py +660 -28
  6. pulumi_vault/database/secrets_mount.py +47 -0
  7. pulumi_vault/gcp/secret_backend.py +599 -56
  8. pulumi_vault/jwt/auth_backend.py +47 -0
  9. pulumi_vault/kmip/secret_backend.py +787 -7
  10. pulumi_vault/kubernetes/secret_backend.py +47 -0
  11. pulumi_vault/ldap/secret_backend.py +75 -35
  12. pulumi_vault/mount.py +47 -0
  13. pulumi_vault/nomad_secret_backend.py +660 -21
  14. pulumi_vault/oci_auth_backend.py +683 -0
  15. pulumi_vault/oci_auth_backend_role.py +798 -0
  16. pulumi_vault/outputs.py +153 -0
  17. pulumi_vault/pkisecret/backend_config_scep.py +68 -21
  18. pulumi_vault/pkisecret/get_backend_config_scep.py +21 -1
  19. pulumi_vault/pulumi-plugin.json +1 -1
  20. pulumi_vault/rabbitmq/secret_backend.py +707 -35
  21. pulumi_vault/ssh/secret_backend_ca.py +101 -7
  22. pulumi_vault/terraformcloud/secret_backend.py +707 -28
  23. pulumi_vault/transit/secret_backend_key.py +49 -21
  24. {pulumi_vault-7.2.0a1755297899.dist-info → pulumi_vault-7.3.0a1755586140.dist-info}/METADATA +1 -1
  25. {pulumi_vault-7.2.0a1755297899.dist-info → pulumi_vault-7.3.0a1755586140.dist-info}/RECORD +27 -25
  26. {pulumi_vault-7.2.0a1755297899.dist-info → pulumi_vault-7.3.0a1755586140.dist-info}/WHEEL +0 -0
  27. {pulumi_vault-7.2.0a1755297899.dist-info → pulumi_vault-7.3.0a1755586140.dist-info}/top_level.txt +0 -0
pulumi_vault/ssh/secret_backend_ca.py CHANGED
@@ -23,6 +23,8 @@ class SecretBackendCaArgs:
23
23
  generate_signing_key: Optional[pulumi.Input[_builtins.bool]] = None,
24
24
  key_bits: Optional[pulumi.Input[_builtins.int]] = None,
25
25
  key_type: Optional[pulumi.Input[_builtins.str]] = None,
26
+ managed_key_id: Optional[pulumi.Input[_builtins.str]] = None,
27
+ managed_key_name: Optional[pulumi.Input[_builtins.str]] = None,
26
28
  namespace: Optional[pulumi.Input[_builtins.str]] = None,
27
29
  private_key: Optional[pulumi.Input[_builtins.str]] = None,
28
30
  public_key: Optional[pulumi.Input[_builtins.str]] = None):
@@ -32,11 +34,13 @@ class SecretBackendCaArgs:
32
34
  :param pulumi.Input[_builtins.bool] generate_signing_key: Whether Vault should generate the signing key pair internally. Defaults to true
33
35
  :param pulumi.Input[_builtins.int] key_bits: Specifies the desired key bits for the generated SSH CA key when `generate_signing_key` is set to `true`.
34
36
  :param pulumi.Input[_builtins.str] key_type: Specifies the desired key type for the generated SSH CA key when `generate_signing_key` is set to `true`.
37
+ :param pulumi.Input[_builtins.str] managed_key_id: The id of the managed key to use. When using a managed key, this field or managed_key_name is required.
38
+ :param pulumi.Input[_builtins.str] managed_key_name: The name of the managed key to use. When using a managed key, this field or managed_key_id is required.
35
39
  :param pulumi.Input[_builtins.str] namespace: The namespace to provision the resource in.
36
40
  The value should not contain leading or trailing forward slashes.
37
41
  The `namespace` is always relative to the provider's configured [namespace](https://www.terraform.io/docs/providers/vault/index.html#namespace).
38
42
  *Available only for Vault Enterprise*.
39
- :param pulumi.Input[_builtins.str] private_key: Private key part the SSH CA key pair; required if generate_signing_key is false.
43
+ :param pulumi.Input[_builtins.str] private_key: The private key part the SSH CA key pair; required if generate_signing_key is false.
40
44
  :param pulumi.Input[_builtins.str] public_key: The public key part the SSH CA key pair; required if generate_signing_key is false.
41
45
  """
42
46
  if backend is not None:
@@ -47,6 +51,10 @@ class SecretBackendCaArgs:
47
51
  pulumi.set(__self__, "key_bits", key_bits)
48
52
  if key_type is not None:
49
53
  pulumi.set(__self__, "key_type", key_type)
54
+ if managed_key_id is not None:
55
+ pulumi.set(__self__, "managed_key_id", managed_key_id)
56
+ if managed_key_name is not None:
57
+ pulumi.set(__self__, "managed_key_name", managed_key_name)
50
58
  if namespace is not None:
51
59
  pulumi.set(__self__, "namespace", namespace)
52
60
  if private_key is not None:
@@ -102,6 +110,30 @@ class SecretBackendCaArgs:
102
110
  def key_type(self, value: Optional[pulumi.Input[_builtins.str]]):
103
111
  pulumi.set(self, "key_type", value)
104
112
 
113
+ @_builtins.property
114
+ @pulumi.getter(name="managedKeyId")
115
+ def managed_key_id(self) -> Optional[pulumi.Input[_builtins.str]]:
116
+ """
117
+ The id of the managed key to use. When using a managed key, this field or managed_key_name is required.
118
+ """
119
+ return pulumi.get(self, "managed_key_id")
120
+
121
+ @managed_key_id.setter
122
+ def managed_key_id(self, value: Optional[pulumi.Input[_builtins.str]]):
123
+ pulumi.set(self, "managed_key_id", value)
124
+
125
+ @_builtins.property
126
+ @pulumi.getter(name="managedKeyName")
127
+ def managed_key_name(self) -> Optional[pulumi.Input[_builtins.str]]:
128
+ """
129
+ The name of the managed key to use. When using a managed key, this field or managed_key_id is required.
130
+ """
131
+ return pulumi.get(self, "managed_key_name")
132
+
133
+ @managed_key_name.setter
134
+ def managed_key_name(self, value: Optional[pulumi.Input[_builtins.str]]):
135
+ pulumi.set(self, "managed_key_name", value)
136
+
105
137
  @_builtins.property
106
138
  @pulumi.getter
107
139
  def namespace(self) -> Optional[pulumi.Input[_builtins.str]]:
@@ -121,7 +153,7 @@ class SecretBackendCaArgs:
121
153
  @pulumi.getter(name="privateKey")
122
154
  def private_key(self) -> Optional[pulumi.Input[_builtins.str]]:
123
155
  """
124
- Private key part the SSH CA key pair; required if generate_signing_key is false.
156
+ The private key part the SSH CA key pair; required if generate_signing_key is false.
125
157
  """
126
158
  return pulumi.get(self, "private_key")
127
159
 
@@ -149,6 +181,8 @@ class _SecretBackendCaState:
149
181
  generate_signing_key: Optional[pulumi.Input[_builtins.bool]] = None,
150
182
  key_bits: Optional[pulumi.Input[_builtins.int]] = None,
151
183
  key_type: Optional[pulumi.Input[_builtins.str]] = None,
184
+ managed_key_id: Optional[pulumi.Input[_builtins.str]] = None,
185
+ managed_key_name: Optional[pulumi.Input[_builtins.str]] = None,
152
186
  namespace: Optional[pulumi.Input[_builtins.str]] = None,
153
187
  private_key: Optional[pulumi.Input[_builtins.str]] = None,
154
188
  public_key: Optional[pulumi.Input[_builtins.str]] = None):
@@ -158,11 +192,13 @@ class _SecretBackendCaState:
158
192
  :param pulumi.Input[_builtins.bool] generate_signing_key: Whether Vault should generate the signing key pair internally. Defaults to true
159
193
  :param pulumi.Input[_builtins.int] key_bits: Specifies the desired key bits for the generated SSH CA key when `generate_signing_key` is set to `true`.
160
194
  :param pulumi.Input[_builtins.str] key_type: Specifies the desired key type for the generated SSH CA key when `generate_signing_key` is set to `true`.
195
+ :param pulumi.Input[_builtins.str] managed_key_id: The id of the managed key to use. When using a managed key, this field or managed_key_name is required.
196
+ :param pulumi.Input[_builtins.str] managed_key_name: The name of the managed key to use. When using a managed key, this field or managed_key_id is required.
161
197
  :param pulumi.Input[_builtins.str] namespace: The namespace to provision the resource in.
162
198
  The value should not contain leading or trailing forward slashes.
163
199
  The `namespace` is always relative to the provider's configured [namespace](https://www.terraform.io/docs/providers/vault/index.html#namespace).
164
200
  *Available only for Vault Enterprise*.
165
- :param pulumi.Input[_builtins.str] private_key: Private key part the SSH CA key pair; required if generate_signing_key is false.
201
+ :param pulumi.Input[_builtins.str] private_key: The private key part the SSH CA key pair; required if generate_signing_key is false.
166
202
  :param pulumi.Input[_builtins.str] public_key: The public key part the SSH CA key pair; required if generate_signing_key is false.
167
203
  """
168
204
  if backend is not None:
@@ -173,6 +209,10 @@ class _SecretBackendCaState:
173
209
  pulumi.set(__self__, "key_bits", key_bits)
174
210
  if key_type is not None:
175
211
  pulumi.set(__self__, "key_type", key_type)
212
+ if managed_key_id is not None:
213
+ pulumi.set(__self__, "managed_key_id", managed_key_id)
214
+ if managed_key_name is not None:
215
+ pulumi.set(__self__, "managed_key_name", managed_key_name)
176
216
  if namespace is not None:
177
217
  pulumi.set(__self__, "namespace", namespace)
178
218
  if private_key is not None:
@@ -228,6 +268,30 @@ class _SecretBackendCaState:
228
268
  def key_type(self, value: Optional[pulumi.Input[_builtins.str]]):
229
269
  pulumi.set(self, "key_type", value)
230
270
 
271
+ @_builtins.property
272
+ @pulumi.getter(name="managedKeyId")
273
+ def managed_key_id(self) -> Optional[pulumi.Input[_builtins.str]]:
274
+ """
275
+ The id of the managed key to use. When using a managed key, this field or managed_key_name is required.
276
+ """
277
+ return pulumi.get(self, "managed_key_id")
278
+
279
+ @managed_key_id.setter
280
+ def managed_key_id(self, value: Optional[pulumi.Input[_builtins.str]]):
281
+ pulumi.set(self, "managed_key_id", value)
282
+
283
+ @_builtins.property
284
+ @pulumi.getter(name="managedKeyName")
285
+ def managed_key_name(self) -> Optional[pulumi.Input[_builtins.str]]:
286
+ """
287
+ The name of the managed key to use. When using a managed key, this field or managed_key_id is required.
288
+ """
289
+ return pulumi.get(self, "managed_key_name")
290
+
291
+ @managed_key_name.setter
292
+ def managed_key_name(self, value: Optional[pulumi.Input[_builtins.str]]):
293
+ pulumi.set(self, "managed_key_name", value)
294
+
231
295
  @_builtins.property
232
296
  @pulumi.getter
233
297
  def namespace(self) -> Optional[pulumi.Input[_builtins.str]]:
@@ -247,7 +311,7 @@ class _SecretBackendCaState:
247
311
  @pulumi.getter(name="privateKey")
248
312
  def private_key(self) -> Optional[pulumi.Input[_builtins.str]]:
249
313
  """
250
- Private key part the SSH CA key pair; required if generate_signing_key is false.
314
+ The private key part the SSH CA key pair; required if generate_signing_key is false.
251
315
  """
252
316
  return pulumi.get(self, "private_key")
253
317
 
@@ -278,6 +342,8 @@ class SecretBackendCa(pulumi.CustomResource):
278
342
  generate_signing_key: Optional[pulumi.Input[_builtins.bool]] = None,
279
343
  key_bits: Optional[pulumi.Input[_builtins.int]] = None,
280
344
  key_type: Optional[pulumi.Input[_builtins.str]] = None,
345
+ managed_key_id: Optional[pulumi.Input[_builtins.str]] = None,
346
+ managed_key_name: Optional[pulumi.Input[_builtins.str]] = None,
281
347
  namespace: Optional[pulumi.Input[_builtins.str]] = None,
282
348
  private_key: Optional[pulumi.Input[_builtins.str]] = None,
283
349
  public_key: Optional[pulumi.Input[_builtins.str]] = None,
@@ -310,11 +376,13 @@ class SecretBackendCa(pulumi.CustomResource):
310
376
  :param pulumi.Input[_builtins.bool] generate_signing_key: Whether Vault should generate the signing key pair internally. Defaults to true
311
377
  :param pulumi.Input[_builtins.int] key_bits: Specifies the desired key bits for the generated SSH CA key when `generate_signing_key` is set to `true`.
312
378
  :param pulumi.Input[_builtins.str] key_type: Specifies the desired key type for the generated SSH CA key when `generate_signing_key` is set to `true`.
379
+ :param pulumi.Input[_builtins.str] managed_key_id: The id of the managed key to use. When using a managed key, this field or managed_key_name is required.
380
+ :param pulumi.Input[_builtins.str] managed_key_name: The name of the managed key to use. When using a managed key, this field or managed_key_id is required.
313
381
  :param pulumi.Input[_builtins.str] namespace: The namespace to provision the resource in.
314
382
  The value should not contain leading or trailing forward slashes.
315
383
  The `namespace` is always relative to the provider's configured [namespace](https://www.terraform.io/docs/providers/vault/index.html#namespace).
316
384
  *Available only for Vault Enterprise*.
317
- :param pulumi.Input[_builtins.str] private_key: Private key part the SSH CA key pair; required if generate_signing_key is false.
385
+ :param pulumi.Input[_builtins.str] private_key: The private key part the SSH CA key pair; required if generate_signing_key is false.
318
386
  :param pulumi.Input[_builtins.str] public_key: The public key part the SSH CA key pair; required if generate_signing_key is false.
319
387
  """
320
388
  ...
@@ -364,6 +432,8 @@ class SecretBackendCa(pulumi.CustomResource):
364
432
  generate_signing_key: Optional[pulumi.Input[_builtins.bool]] = None,
365
433
  key_bits: Optional[pulumi.Input[_builtins.int]] = None,
366
434
  key_type: Optional[pulumi.Input[_builtins.str]] = None,
435
+ managed_key_id: Optional[pulumi.Input[_builtins.str]] = None,
436
+ managed_key_name: Optional[pulumi.Input[_builtins.str]] = None,
367
437
  namespace: Optional[pulumi.Input[_builtins.str]] = None,
368
438
  private_key: Optional[pulumi.Input[_builtins.str]] = None,
369
439
  public_key: Optional[pulumi.Input[_builtins.str]] = None,
@@ -380,6 +450,8 @@ class SecretBackendCa(pulumi.CustomResource):
380
450
  __props__.__dict__["generate_signing_key"] = generate_signing_key
381
451
  __props__.__dict__["key_bits"] = key_bits
382
452
  __props__.__dict__["key_type"] = key_type
453
+ __props__.__dict__["managed_key_id"] = managed_key_id
454
+ __props__.__dict__["managed_key_name"] = managed_key_name
383
455
  __props__.__dict__["namespace"] = namespace
384
456
  __props__.__dict__["private_key"] = None if private_key is None else pulumi.Output.secret(private_key)
385
457
  __props__.__dict__["public_key"] = public_key
@@ -399,6 +471,8 @@ class SecretBackendCa(pulumi.CustomResource):
399
471
  generate_signing_key: Optional[pulumi.Input[_builtins.bool]] = None,
400
472
  key_bits: Optional[pulumi.Input[_builtins.int]] = None,
401
473
  key_type: Optional[pulumi.Input[_builtins.str]] = None,
474
+ managed_key_id: Optional[pulumi.Input[_builtins.str]] = None,
475
+ managed_key_name: Optional[pulumi.Input[_builtins.str]] = None,
402
476
  namespace: Optional[pulumi.Input[_builtins.str]] = None,
403
477
  private_key: Optional[pulumi.Input[_builtins.str]] = None,
404
478
  public_key: Optional[pulumi.Input[_builtins.str]] = None) -> 'SecretBackendCa':
@@ -413,11 +487,13 @@ class SecretBackendCa(pulumi.CustomResource):
413
487
  :param pulumi.Input[_builtins.bool] generate_signing_key: Whether Vault should generate the signing key pair internally. Defaults to true
414
488
  :param pulumi.Input[_builtins.int] key_bits: Specifies the desired key bits for the generated SSH CA key when `generate_signing_key` is set to `true`.
415
489
  :param pulumi.Input[_builtins.str] key_type: Specifies the desired key type for the generated SSH CA key when `generate_signing_key` is set to `true`.
490
+ :param pulumi.Input[_builtins.str] managed_key_id: The id of the managed key to use. When using a managed key, this field or managed_key_name is required.
491
+ :param pulumi.Input[_builtins.str] managed_key_name: The name of the managed key to use. When using a managed key, this field or managed_key_id is required.
416
492
  :param pulumi.Input[_builtins.str] namespace: The namespace to provision the resource in.
417
493
  The value should not contain leading or trailing forward slashes.
418
494
  The `namespace` is always relative to the provider's configured [namespace](https://www.terraform.io/docs/providers/vault/index.html#namespace).
419
495
  *Available only for Vault Enterprise*.
420
- :param pulumi.Input[_builtins.str] private_key: Private key part the SSH CA key pair; required if generate_signing_key is false.
496
+ :param pulumi.Input[_builtins.str] private_key: The private key part the SSH CA key pair; required if generate_signing_key is false.
421
497
  :param pulumi.Input[_builtins.str] public_key: The public key part the SSH CA key pair; required if generate_signing_key is false.
422
498
  """
423
499
  opts = pulumi.ResourceOptions.merge(opts, pulumi.ResourceOptions(id=id))
@@ -428,6 +504,8 @@ class SecretBackendCa(pulumi.CustomResource):
428
504
  __props__.__dict__["generate_signing_key"] = generate_signing_key
429
505
  __props__.__dict__["key_bits"] = key_bits
430
506
  __props__.__dict__["key_type"] = key_type
507
+ __props__.__dict__["managed_key_id"] = managed_key_id
508
+ __props__.__dict__["managed_key_name"] = managed_key_name
431
509
  __props__.__dict__["namespace"] = namespace
432
510
  __props__.__dict__["private_key"] = private_key
433
511
  __props__.__dict__["public_key"] = public_key
@@ -465,6 +543,22 @@ class SecretBackendCa(pulumi.CustomResource):
465
543
  """
466
544
  return pulumi.get(self, "key_type")
467
545
 
546
+ @_builtins.property
547
+ @pulumi.getter(name="managedKeyId")
548
+ def managed_key_id(self) -> pulumi.Output[Optional[_builtins.str]]:
549
+ """
550
+ The id of the managed key to use. When using a managed key, this field or managed_key_name is required.
551
+ """
552
+ return pulumi.get(self, "managed_key_id")
553
+
554
+ @_builtins.property
555
+ @pulumi.getter(name="managedKeyName")
556
+ def managed_key_name(self) -> pulumi.Output[Optional[_builtins.str]]:
557
+ """
558
+ The name of the managed key to use. When using a managed key, this field or managed_key_id is required.
559
+ """
560
+ return pulumi.get(self, "managed_key_name")
561
+
468
562
  @_builtins.property
469
563
  @pulumi.getter
470
564
  def namespace(self) -> pulumi.Output[Optional[_builtins.str]]:
@@ -480,7 +574,7 @@ class SecretBackendCa(pulumi.CustomResource):
480
574
  @pulumi.getter(name="privateKey")
481
575
  def private_key(self) -> pulumi.Output[_builtins.str]:
482
576
  """
483
- Private key part the SSH CA key pair; required if generate_signing_key is false.
577
+ The private key part the SSH CA key pair; required if generate_signing_key is false.
484
578
  """
485
579
  return pulumi.get(self, "private_key")
486
580