pulumi-vault 7.6.0a1764657486__py3-none-any.whl

This diff represents the content of publicly available package versions that have been released to one of the supported registries. The information contained in this diff is provided for informational purposes only and reflects changes between package versions as they appear in their respective public registries.
Files changed (274) hide show
  1. pulumi_vault/__init__.py +1399 -0
  2. pulumi_vault/_inputs.py +2701 -0
  3. pulumi_vault/_utilities.py +331 -0
  4. pulumi_vault/ad/__init__.py +12 -0
  5. pulumi_vault/ad/get_access_credentials.py +177 -0
  6. pulumi_vault/ad/secret_backend.py +1916 -0
  7. pulumi_vault/ad/secret_library.py +546 -0
  8. pulumi_vault/ad/secret_role.py +499 -0
  9. pulumi_vault/alicloud/__init__.py +9 -0
  10. pulumi_vault/alicloud/auth_backend_role.py +866 -0
  11. pulumi_vault/approle/__init__.py +12 -0
  12. pulumi_vault/approle/auth_backend_login.py +571 -0
  13. pulumi_vault/approle/auth_backend_role.py +1082 -0
  14. pulumi_vault/approle/auth_backend_role_secret_id.py +796 -0
  15. pulumi_vault/approle/get_auth_backend_role_id.py +169 -0
  16. pulumi_vault/audit.py +499 -0
  17. pulumi_vault/audit_request_header.py +277 -0
  18. pulumi_vault/auth_backend.py +565 -0
  19. pulumi_vault/aws/__init__.py +22 -0
  20. pulumi_vault/aws/auth_backend_cert.py +420 -0
  21. pulumi_vault/aws/auth_backend_client.py +1259 -0
  22. pulumi_vault/aws/auth_backend_config_identity.py +494 -0
  23. pulumi_vault/aws/auth_backend_identity_whitelist.py +380 -0
  24. pulumi_vault/aws/auth_backend_login.py +1046 -0
  25. pulumi_vault/aws/auth_backend_role.py +1961 -0
  26. pulumi_vault/aws/auth_backend_role_tag.py +638 -0
  27. pulumi_vault/aws/auth_backend_roletag_blacklist.py +366 -0
  28. pulumi_vault/aws/auth_backend_sts_role.py +414 -0
  29. pulumi_vault/aws/get_access_credentials.py +369 -0
  30. pulumi_vault/aws/get_static_access_credentials.py +137 -0
  31. pulumi_vault/aws/secret_backend.py +2018 -0
  32. pulumi_vault/aws/secret_backend_role.py +1188 -0
  33. pulumi_vault/aws/secret_backend_static_role.py +639 -0
  34. pulumi_vault/azure/__init__.py +15 -0
  35. pulumi_vault/azure/_inputs.py +108 -0
  36. pulumi_vault/azure/auth_backend_config.py +1096 -0
  37. pulumi_vault/azure/auth_backend_role.py +1176 -0
  38. pulumi_vault/azure/backend.py +1793 -0
  39. pulumi_vault/azure/backend_role.py +883 -0
  40. pulumi_vault/azure/get_access_credentials.py +400 -0
  41. pulumi_vault/azure/outputs.py +107 -0
  42. pulumi_vault/cert_auth_backend_role.py +1539 -0
  43. pulumi_vault/config/__init__.py +9 -0
  44. pulumi_vault/config/__init__.pyi +164 -0
  45. pulumi_vault/config/_inputs.py +73 -0
  46. pulumi_vault/config/outputs.py +1225 -0
  47. pulumi_vault/config/ui_custom_message.py +530 -0
  48. pulumi_vault/config/vars.py +230 -0
  49. pulumi_vault/consul/__init__.py +10 -0
  50. pulumi_vault/consul/secret_backend.py +1517 -0
  51. pulumi_vault/consul/secret_backend_role.py +847 -0
  52. pulumi_vault/database/__init__.py +14 -0
  53. pulumi_vault/database/_inputs.py +11907 -0
  54. pulumi_vault/database/outputs.py +8496 -0
  55. pulumi_vault/database/secret_backend_connection.py +1676 -0
  56. pulumi_vault/database/secret_backend_role.py +840 -0
  57. pulumi_vault/database/secret_backend_static_role.py +881 -0
  58. pulumi_vault/database/secrets_mount.py +2160 -0
  59. pulumi_vault/egp_policy.py +399 -0
  60. pulumi_vault/gcp/__init__.py +17 -0
  61. pulumi_vault/gcp/_inputs.py +441 -0
  62. pulumi_vault/gcp/auth_backend.py +1486 -0
  63. pulumi_vault/gcp/auth_backend_role.py +1235 -0
  64. pulumi_vault/gcp/get_auth_backend_role.py +514 -0
  65. pulumi_vault/gcp/outputs.py +302 -0
  66. pulumi_vault/gcp/secret_backend.py +1807 -0
  67. pulumi_vault/gcp/secret_impersonated_account.py +484 -0
  68. pulumi_vault/gcp/secret_roleset.py +554 -0
  69. pulumi_vault/gcp/secret_static_account.py +557 -0
  70. pulumi_vault/generic/__init__.py +11 -0
  71. pulumi_vault/generic/endpoint.py +786 -0
  72. pulumi_vault/generic/get_secret.py +306 -0
  73. pulumi_vault/generic/secret.py +486 -0
  74. pulumi_vault/get_auth_backend.py +226 -0
  75. pulumi_vault/get_auth_backends.py +170 -0
  76. pulumi_vault/get_namespace.py +226 -0
  77. pulumi_vault/get_namespaces.py +202 -0
  78. pulumi_vault/get_nomad_access_token.py +210 -0
  79. pulumi_vault/get_policy_document.py +160 -0
  80. pulumi_vault/get_raft_autopilot_state.py +267 -0
  81. pulumi_vault/github/__init__.py +13 -0
  82. pulumi_vault/github/_inputs.py +225 -0
  83. pulumi_vault/github/auth_backend.py +1194 -0
  84. pulumi_vault/github/outputs.py +174 -0
  85. pulumi_vault/github/team.py +380 -0
  86. pulumi_vault/github/user.py +380 -0
  87. pulumi_vault/identity/__init__.py +35 -0
  88. pulumi_vault/identity/entity.py +447 -0
  89. pulumi_vault/identity/entity_alias.py +398 -0
  90. pulumi_vault/identity/entity_policies.py +455 -0
  91. pulumi_vault/identity/get_entity.py +384 -0
  92. pulumi_vault/identity/get_group.py +467 -0
  93. pulumi_vault/identity/get_oidc_client_creds.py +175 -0
  94. pulumi_vault/identity/get_oidc_openid_config.py +334 -0
  95. pulumi_vault/identity/get_oidc_public_keys.py +179 -0
  96. pulumi_vault/identity/group.py +805 -0
  97. pulumi_vault/identity/group_alias.py +386 -0
  98. pulumi_vault/identity/group_member_entity_ids.py +444 -0
  99. pulumi_vault/identity/group_member_group_ids.py +467 -0
  100. pulumi_vault/identity/group_policies.py +471 -0
  101. pulumi_vault/identity/mfa_duo.py +674 -0
  102. pulumi_vault/identity/mfa_login_enforcement.py +566 -0
  103. pulumi_vault/identity/mfa_okta.py +626 -0
  104. pulumi_vault/identity/mfa_pingid.py +616 -0
  105. pulumi_vault/identity/mfa_totp.py +758 -0
  106. pulumi_vault/identity/oidc.py +268 -0
  107. pulumi_vault/identity/oidc_assignment.py +375 -0
  108. pulumi_vault/identity/oidc_client.py +667 -0
  109. pulumi_vault/identity/oidc_key.py +474 -0
  110. pulumi_vault/identity/oidc_key_allowed_client_id.py +298 -0
  111. pulumi_vault/identity/oidc_provider.py +550 -0
  112. pulumi_vault/identity/oidc_role.py +543 -0
  113. pulumi_vault/identity/oidc_scope.py +355 -0
  114. pulumi_vault/identity/outputs.py +137 -0
  115. pulumi_vault/jwt/__init__.py +12 -0
  116. pulumi_vault/jwt/_inputs.py +225 -0
  117. pulumi_vault/jwt/auth_backend.py +1347 -0
  118. pulumi_vault/jwt/auth_backend_role.py +1847 -0
  119. pulumi_vault/jwt/outputs.py +174 -0
  120. pulumi_vault/kmip/__init__.py +11 -0
  121. pulumi_vault/kmip/secret_backend.py +1591 -0
  122. pulumi_vault/kmip/secret_role.py +1194 -0
  123. pulumi_vault/kmip/secret_scope.py +372 -0
  124. pulumi_vault/kubernetes/__init__.py +15 -0
  125. pulumi_vault/kubernetes/auth_backend_config.py +654 -0
  126. pulumi_vault/kubernetes/auth_backend_role.py +1031 -0
  127. pulumi_vault/kubernetes/get_auth_backend_config.py +280 -0
  128. pulumi_vault/kubernetes/get_auth_backend_role.py +470 -0
  129. pulumi_vault/kubernetes/get_service_account_token.py +344 -0
  130. pulumi_vault/kubernetes/secret_backend.py +1341 -0
  131. pulumi_vault/kubernetes/secret_backend_role.py +1140 -0
  132. pulumi_vault/kv/__init__.py +18 -0
  133. pulumi_vault/kv/_inputs.py +124 -0
  134. pulumi_vault/kv/get_secret.py +240 -0
  135. pulumi_vault/kv/get_secret_subkeys_v2.py +275 -0
  136. pulumi_vault/kv/get_secret_v2.py +315 -0
  137. pulumi_vault/kv/get_secrets_list.py +186 -0
  138. pulumi_vault/kv/get_secrets_list_v2.py +243 -0
  139. pulumi_vault/kv/outputs.py +102 -0
  140. pulumi_vault/kv/secret.py +397 -0
  141. pulumi_vault/kv/secret_backend_v2.py +455 -0
  142. pulumi_vault/kv/secret_v2.py +970 -0
  143. pulumi_vault/ldap/__init__.py +19 -0
  144. pulumi_vault/ldap/_inputs.py +225 -0
  145. pulumi_vault/ldap/auth_backend.py +2520 -0
  146. pulumi_vault/ldap/auth_backend_group.py +386 -0
  147. pulumi_vault/ldap/auth_backend_user.py +439 -0
  148. pulumi_vault/ldap/get_dynamic_credentials.py +181 -0
  149. pulumi_vault/ldap/get_static_credentials.py +192 -0
  150. pulumi_vault/ldap/outputs.py +174 -0
  151. pulumi_vault/ldap/secret_backend.py +2207 -0
  152. pulumi_vault/ldap/secret_backend_dynamic_role.py +767 -0
  153. pulumi_vault/ldap/secret_backend_library_set.py +552 -0
  154. pulumi_vault/ldap/secret_backend_static_role.py +541 -0
  155. pulumi_vault/managed/__init__.py +11 -0
  156. pulumi_vault/managed/_inputs.py +944 -0
  157. pulumi_vault/managed/keys.py +398 -0
  158. pulumi_vault/managed/outputs.py +667 -0
  159. pulumi_vault/mfa_duo.py +589 -0
  160. pulumi_vault/mfa_okta.py +623 -0
  161. pulumi_vault/mfa_pingid.py +670 -0
  162. pulumi_vault/mfa_totp.py +620 -0
  163. pulumi_vault/mongodbatlas/__init__.py +10 -0
  164. pulumi_vault/mongodbatlas/secret_backend.py +388 -0
  165. pulumi_vault/mongodbatlas/secret_role.py +726 -0
  166. pulumi_vault/mount.py +1262 -0
  167. pulumi_vault/namespace.py +452 -0
  168. pulumi_vault/nomad_secret_backend.py +1559 -0
  169. pulumi_vault/nomad_secret_role.py +489 -0
  170. pulumi_vault/oci_auth_backend.py +676 -0
  171. pulumi_vault/oci_auth_backend_role.py +852 -0
  172. pulumi_vault/okta/__init__.py +13 -0
  173. pulumi_vault/okta/_inputs.py +320 -0
  174. pulumi_vault/okta/auth_backend.py +1231 -0
  175. pulumi_vault/okta/auth_backend_group.py +369 -0
  176. pulumi_vault/okta/auth_backend_user.py +416 -0
  177. pulumi_vault/okta/outputs.py +244 -0
  178. pulumi_vault/outputs.py +502 -0
  179. pulumi_vault/pkisecret/__init__.py +38 -0
  180. pulumi_vault/pkisecret/_inputs.py +270 -0
  181. pulumi_vault/pkisecret/backend_acme_eab.py +550 -0
  182. pulumi_vault/pkisecret/backend_config_acme.py +690 -0
  183. pulumi_vault/pkisecret/backend_config_auto_tidy.py +1370 -0
  184. pulumi_vault/pkisecret/backend_config_cluster.py +370 -0
  185. pulumi_vault/pkisecret/backend_config_cmpv2.py +693 -0
  186. pulumi_vault/pkisecret/backend_config_est.py +756 -0
  187. pulumi_vault/pkisecret/backend_config_scep.py +738 -0
  188. pulumi_vault/pkisecret/get_backend_cert_metadata.py +277 -0
  189. pulumi_vault/pkisecret/get_backend_config_cmpv2.py +226 -0
  190. pulumi_vault/pkisecret/get_backend_config_est.py +251 -0
  191. pulumi_vault/pkisecret/get_backend_config_scep.py +271 -0
  192. pulumi_vault/pkisecret/get_backend_issuer.py +395 -0
  193. pulumi_vault/pkisecret/get_backend_issuers.py +192 -0
  194. pulumi_vault/pkisecret/get_backend_key.py +211 -0
  195. pulumi_vault/pkisecret/get_backend_keys.py +192 -0
  196. pulumi_vault/pkisecret/outputs.py +270 -0
  197. pulumi_vault/pkisecret/secret_backend_cert.py +1315 -0
  198. pulumi_vault/pkisecret/secret_backend_config_ca.py +386 -0
  199. pulumi_vault/pkisecret/secret_backend_config_issuers.py +392 -0
  200. pulumi_vault/pkisecret/secret_backend_config_urls.py +462 -0
  201. pulumi_vault/pkisecret/secret_backend_crl_config.py +846 -0
  202. pulumi_vault/pkisecret/secret_backend_intermediate_cert_request.py +1629 -0
  203. pulumi_vault/pkisecret/secret_backend_intermediate_set_signed.py +444 -0
  204. pulumi_vault/pkisecret/secret_backend_issuer.py +1089 -0
  205. pulumi_vault/pkisecret/secret_backend_key.py +613 -0
  206. pulumi_vault/pkisecret/secret_backend_role.py +2694 -0
  207. pulumi_vault/pkisecret/secret_backend_root_cert.py +2134 -0
  208. pulumi_vault/pkisecret/secret_backend_root_sign_intermediate.py +2031 -0
  209. pulumi_vault/pkisecret/secret_backend_sign.py +1194 -0
  210. pulumi_vault/plugin.py +596 -0
  211. pulumi_vault/plugin_pinned_version.py +299 -0
  212. pulumi_vault/policy.py +279 -0
  213. pulumi_vault/provider.py +781 -0
  214. pulumi_vault/pulumi-plugin.json +5 -0
  215. pulumi_vault/py.typed +0 -0
  216. pulumi_vault/quota_lease_count.py +504 -0
  217. pulumi_vault/quota_rate_limit.py +751 -0
  218. pulumi_vault/rabbitmq/__init__.py +12 -0
  219. pulumi_vault/rabbitmq/_inputs.py +235 -0
  220. pulumi_vault/rabbitmq/outputs.py +144 -0
  221. pulumi_vault/rabbitmq/secret_backend.py +1437 -0
  222. pulumi_vault/rabbitmq/secret_backend_role.py +496 -0
  223. pulumi_vault/raft_autopilot.py +609 -0
  224. pulumi_vault/raft_snapshot_agent_config.py +1591 -0
  225. pulumi_vault/rgp_policy.py +349 -0
  226. pulumi_vault/saml/__init__.py +12 -0
  227. pulumi_vault/saml/_inputs.py +225 -0
  228. pulumi_vault/saml/auth_backend.py +811 -0
  229. pulumi_vault/saml/auth_backend_role.py +1068 -0
  230. pulumi_vault/saml/outputs.py +174 -0
  231. pulumi_vault/scep_auth_backend_role.py +908 -0
  232. pulumi_vault/secrets/__init__.py +18 -0
  233. pulumi_vault/secrets/_inputs.py +110 -0
  234. pulumi_vault/secrets/outputs.py +94 -0
  235. pulumi_vault/secrets/sync_association.py +450 -0
  236. pulumi_vault/secrets/sync_aws_destination.py +780 -0
  237. pulumi_vault/secrets/sync_azure_destination.py +736 -0
  238. pulumi_vault/secrets/sync_config.py +303 -0
  239. pulumi_vault/secrets/sync_gcp_destination.py +572 -0
  240. pulumi_vault/secrets/sync_gh_destination.py +688 -0
  241. pulumi_vault/secrets/sync_github_apps.py +376 -0
  242. pulumi_vault/secrets/sync_vercel_destination.py +603 -0
  243. pulumi_vault/ssh/__init__.py +13 -0
  244. pulumi_vault/ssh/_inputs.py +76 -0
  245. pulumi_vault/ssh/get_secret_backend_sign.py +294 -0
  246. pulumi_vault/ssh/outputs.py +51 -0
  247. pulumi_vault/ssh/secret_backend_ca.py +588 -0
  248. pulumi_vault/ssh/secret_backend_role.py +1493 -0
  249. pulumi_vault/terraformcloud/__init__.py +11 -0
  250. pulumi_vault/terraformcloud/secret_backend.py +1321 -0
  251. pulumi_vault/terraformcloud/secret_creds.py +445 -0
  252. pulumi_vault/terraformcloud/secret_role.py +563 -0
  253. pulumi_vault/token.py +1026 -0
  254. pulumi_vault/tokenauth/__init__.py +9 -0
  255. pulumi_vault/tokenauth/auth_backend_role.py +1135 -0
  256. pulumi_vault/transform/__init__.py +14 -0
  257. pulumi_vault/transform/alphabet.py +348 -0
  258. pulumi_vault/transform/get_decode.py +287 -0
  259. pulumi_vault/transform/get_encode.py +291 -0
  260. pulumi_vault/transform/role.py +350 -0
  261. pulumi_vault/transform/template.py +592 -0
  262. pulumi_vault/transform/transformation.py +608 -0
  263. pulumi_vault/transit/__init__.py +15 -0
  264. pulumi_vault/transit/get_cmac.py +256 -0
  265. pulumi_vault/transit/get_decrypt.py +181 -0
  266. pulumi_vault/transit/get_encrypt.py +174 -0
  267. pulumi_vault/transit/get_sign.py +328 -0
  268. pulumi_vault/transit/get_verify.py +373 -0
  269. pulumi_vault/transit/secret_backend_key.py +1202 -0
  270. pulumi_vault/transit/secret_cache_config.py +302 -0
  271. pulumi_vault-7.6.0a1764657486.dist-info/METADATA +92 -0
  272. pulumi_vault-7.6.0a1764657486.dist-info/RECORD +274 -0
  273. pulumi_vault-7.6.0a1764657486.dist-info/WHEEL +5 -0
  274. pulumi_vault-7.6.0a1764657486.dist-info/top_level.txt +1 -0
@@ -0,0 +1,541 @@
1
+ # coding=utf-8
2
+ # *** WARNING: this file was generated by pulumi-language-python. ***
3
+ # *** Do not edit by hand unless you're certain you know what you are doing! ***
4
+
5
+ import builtins as _builtins
6
+ import warnings
7
+ import sys
8
+ import pulumi
9
+ import pulumi.runtime
10
+ from typing import Any, Mapping, Optional, Sequence, Union, overload
11
+ if sys.version_info >= (3, 11):
12
+ from typing import NotRequired, TypedDict, TypeAlias
13
+ else:
14
+ from typing_extensions import NotRequired, TypedDict, TypeAlias
15
+ from .. import _utilities
16
+
17
+ __all__ = ['SecretBackendStaticRoleArgs', 'SecretBackendStaticRole']
18
+
19
+ @pulumi.input_type
20
+ class SecretBackendStaticRoleArgs:
21
+ def __init__(__self__, *,
22
+ role_name: pulumi.Input[_builtins.str],
23
+ rotation_period: pulumi.Input[_builtins.int],
24
+ username: pulumi.Input[_builtins.str],
25
+ dn: Optional[pulumi.Input[_builtins.str]] = None,
26
+ mount: Optional[pulumi.Input[_builtins.str]] = None,
27
+ namespace: Optional[pulumi.Input[_builtins.str]] = None,
28
+ skip_import_rotation: Optional[pulumi.Input[_builtins.bool]] = None):
29
+ """
30
+ The set of arguments for constructing a SecretBackendStaticRole resource.
31
+ :param pulumi.Input[_builtins.str] role_name: Name of the role.
32
+ :param pulumi.Input[_builtins.int] rotation_period: How often Vault should rotate the password of the user entry.
33
+ :param pulumi.Input[_builtins.str] username: The username of the existing LDAP entry to manage password rotation for.
34
+ :param pulumi.Input[_builtins.str] dn: Distinguished name (DN) of the existing LDAP entry to manage
35
+ password rotation for. If given, it will take precedence over `username` for the LDAP
36
+ search performed during password rotation. Cannot be modified after creation.
37
+ :param pulumi.Input[_builtins.str] mount: The unique path this backend should be mounted at. Must
38
+ not begin or end with a `/`. Defaults to `ldap`.
39
+ :param pulumi.Input[_builtins.str] namespace: The namespace to provision the resource in.
40
+ The value should not contain leading or trailing forward slashes.
41
+ The `namespace` is always relative to the provider's configured [namespace](https://www.terraform.io/docs/providers/vault/index.html#namespace).
42
+ *Available only for Vault Enterprise*.
43
+ :param pulumi.Input[_builtins.bool] skip_import_rotation: Causes vault to skip the initial secret rotation on import. Not applicable to updates.
44
+ Requires Vault 1.16 or above.
45
+ """
46
+ pulumi.set(__self__, "role_name", role_name)
47
+ pulumi.set(__self__, "rotation_period", rotation_period)
48
+ pulumi.set(__self__, "username", username)
49
+ if dn is not None:
50
+ pulumi.set(__self__, "dn", dn)
51
+ if mount is not None:
52
+ pulumi.set(__self__, "mount", mount)
53
+ if namespace is not None:
54
+ pulumi.set(__self__, "namespace", namespace)
55
+ if skip_import_rotation is not None:
56
+ pulumi.set(__self__, "skip_import_rotation", skip_import_rotation)
57
+
58
+ @_builtins.property
59
+ @pulumi.getter(name="roleName")
60
+ def role_name(self) -> pulumi.Input[_builtins.str]:
61
+ """
62
+ Name of the role.
63
+ """
64
+ return pulumi.get(self, "role_name")
65
+
66
+ @role_name.setter
67
+ def role_name(self, value: pulumi.Input[_builtins.str]):
68
+ pulumi.set(self, "role_name", value)
69
+
70
+ @_builtins.property
71
+ @pulumi.getter(name="rotationPeriod")
72
+ def rotation_period(self) -> pulumi.Input[_builtins.int]:
73
+ """
74
+ How often Vault should rotate the password of the user entry.
75
+ """
76
+ return pulumi.get(self, "rotation_period")
77
+
78
+ @rotation_period.setter
79
+ def rotation_period(self, value: pulumi.Input[_builtins.int]):
80
+ pulumi.set(self, "rotation_period", value)
81
+
82
+ @_builtins.property
83
+ @pulumi.getter
84
+ def username(self) -> pulumi.Input[_builtins.str]:
85
+ """
86
+ The username of the existing LDAP entry to manage password rotation for.
87
+ """
88
+ return pulumi.get(self, "username")
89
+
90
+ @username.setter
91
+ def username(self, value: pulumi.Input[_builtins.str]):
92
+ pulumi.set(self, "username", value)
93
+
94
+ @_builtins.property
95
+ @pulumi.getter
96
+ def dn(self) -> Optional[pulumi.Input[_builtins.str]]:
97
+ """
98
+ Distinguished name (DN) of the existing LDAP entry to manage
99
+ password rotation for. If given, it will take precedence over `username` for the LDAP
100
+ search performed during password rotation. Cannot be modified after creation.
101
+ """
102
+ return pulumi.get(self, "dn")
103
+
104
+ @dn.setter
105
+ def dn(self, value: Optional[pulumi.Input[_builtins.str]]):
106
+ pulumi.set(self, "dn", value)
107
+
108
+ @_builtins.property
109
+ @pulumi.getter
110
+ def mount(self) -> Optional[pulumi.Input[_builtins.str]]:
111
+ """
112
+ The unique path this backend should be mounted at. Must
113
+ not begin or end with a `/`. Defaults to `ldap`.
114
+ """
115
+ return pulumi.get(self, "mount")
116
+
117
+ @mount.setter
118
+ def mount(self, value: Optional[pulumi.Input[_builtins.str]]):
119
+ pulumi.set(self, "mount", value)
120
+
121
+ @_builtins.property
122
+ @pulumi.getter
123
+ def namespace(self) -> Optional[pulumi.Input[_builtins.str]]:
124
+ """
125
+ The namespace to provision the resource in.
126
+ The value should not contain leading or trailing forward slashes.
127
+ The `namespace` is always relative to the provider's configured [namespace](https://www.terraform.io/docs/providers/vault/index.html#namespace).
128
+ *Available only for Vault Enterprise*.
129
+ """
130
+ return pulumi.get(self, "namespace")
131
+
132
+ @namespace.setter
133
+ def namespace(self, value: Optional[pulumi.Input[_builtins.str]]):
134
+ pulumi.set(self, "namespace", value)
135
+
136
+ @_builtins.property
137
+ @pulumi.getter(name="skipImportRotation")
138
+ def skip_import_rotation(self) -> Optional[pulumi.Input[_builtins.bool]]:
139
+ """
140
+ Causes vault to skip the initial secret rotation on import. Not applicable to updates.
141
+ Requires Vault 1.16 or above.
142
+ """
143
+ return pulumi.get(self, "skip_import_rotation")
144
+
145
+ @skip_import_rotation.setter
146
+ def skip_import_rotation(self, value: Optional[pulumi.Input[_builtins.bool]]):
147
+ pulumi.set(self, "skip_import_rotation", value)
148
+
149
+
150
+ @pulumi.input_type
151
+ class _SecretBackendStaticRoleState:
152
+ def __init__(__self__, *,
153
+ dn: Optional[pulumi.Input[_builtins.str]] = None,
154
+ mount: Optional[pulumi.Input[_builtins.str]] = None,
155
+ namespace: Optional[pulumi.Input[_builtins.str]] = None,
156
+ role_name: Optional[pulumi.Input[_builtins.str]] = None,
157
+ rotation_period: Optional[pulumi.Input[_builtins.int]] = None,
158
+ skip_import_rotation: Optional[pulumi.Input[_builtins.bool]] = None,
159
+ username: Optional[pulumi.Input[_builtins.str]] = None):
160
+ """
161
+ Input properties used for looking up and filtering SecretBackendStaticRole resources.
162
+ :param pulumi.Input[_builtins.str] dn: Distinguished name (DN) of the existing LDAP entry to manage
163
+ password rotation for. If given, it will take precedence over `username` for the LDAP
164
+ search performed during password rotation. Cannot be modified after creation.
165
+ :param pulumi.Input[_builtins.str] mount: The unique path this backend should be mounted at. Must
166
+ not begin or end with a `/`. Defaults to `ldap`.
167
+ :param pulumi.Input[_builtins.str] namespace: The namespace to provision the resource in.
168
+ The value should not contain leading or trailing forward slashes.
169
+ The `namespace` is always relative to the provider's configured [namespace](https://www.terraform.io/docs/providers/vault/index.html#namespace).
170
+ *Available only for Vault Enterprise*.
171
+ :param pulumi.Input[_builtins.str] role_name: Name of the role.
172
+ :param pulumi.Input[_builtins.int] rotation_period: How often Vault should rotate the password of the user entry.
173
+ :param pulumi.Input[_builtins.bool] skip_import_rotation: Causes vault to skip the initial secret rotation on import. Not applicable to updates.
174
+ Requires Vault 1.16 or above.
175
+ :param pulumi.Input[_builtins.str] username: The username of the existing LDAP entry to manage password rotation for.
176
+ """
177
+ if dn is not None:
178
+ pulumi.set(__self__, "dn", dn)
179
+ if mount is not None:
180
+ pulumi.set(__self__, "mount", mount)
181
+ if namespace is not None:
182
+ pulumi.set(__self__, "namespace", namespace)
183
+ if role_name is not None:
184
+ pulumi.set(__self__, "role_name", role_name)
185
+ if rotation_period is not None:
186
+ pulumi.set(__self__, "rotation_period", rotation_period)
187
+ if skip_import_rotation is not None:
188
+ pulumi.set(__self__, "skip_import_rotation", skip_import_rotation)
189
+ if username is not None:
190
+ pulumi.set(__self__, "username", username)
191
+
192
+ @_builtins.property
193
+ @pulumi.getter
194
+ def dn(self) -> Optional[pulumi.Input[_builtins.str]]:
195
+ """
196
+ Distinguished name (DN) of the existing LDAP entry to manage
197
+ password rotation for. If given, it will take precedence over `username` for the LDAP
198
+ search performed during password rotation. Cannot be modified after creation.
199
+ """
200
+ return pulumi.get(self, "dn")
201
+
202
+ @dn.setter
203
+ def dn(self, value: Optional[pulumi.Input[_builtins.str]]):
204
+ pulumi.set(self, "dn", value)
205
+
206
+ @_builtins.property
207
+ @pulumi.getter
208
+ def mount(self) -> Optional[pulumi.Input[_builtins.str]]:
209
+ """
210
+ The unique path this backend should be mounted at. Must
211
+ not begin or end with a `/`. Defaults to `ldap`.
212
+ """
213
+ return pulumi.get(self, "mount")
214
+
215
+ @mount.setter
216
+ def mount(self, value: Optional[pulumi.Input[_builtins.str]]):
217
+ pulumi.set(self, "mount", value)
218
+
219
+ @_builtins.property
220
+ @pulumi.getter
221
+ def namespace(self) -> Optional[pulumi.Input[_builtins.str]]:
222
+ """
223
+ The namespace to provision the resource in.
224
+ The value should not contain leading or trailing forward slashes.
225
+ The `namespace` is always relative to the provider's configured [namespace](https://www.terraform.io/docs/providers/vault/index.html#namespace).
226
+ *Available only for Vault Enterprise*.
227
+ """
228
+ return pulumi.get(self, "namespace")
229
+
230
+ @namespace.setter
231
+ def namespace(self, value: Optional[pulumi.Input[_builtins.str]]):
232
+ pulumi.set(self, "namespace", value)
233
+
234
+ @_builtins.property
235
+ @pulumi.getter(name="roleName")
236
+ def role_name(self) -> Optional[pulumi.Input[_builtins.str]]:
237
+ """
238
+ Name of the role.
239
+ """
240
+ return pulumi.get(self, "role_name")
241
+
242
+ @role_name.setter
243
+ def role_name(self, value: Optional[pulumi.Input[_builtins.str]]):
244
+ pulumi.set(self, "role_name", value)
245
+
246
+ @_builtins.property
247
+ @pulumi.getter(name="rotationPeriod")
248
+ def rotation_period(self) -> Optional[pulumi.Input[_builtins.int]]:
249
+ """
250
+ How often Vault should rotate the password of the user entry.
251
+ """
252
+ return pulumi.get(self, "rotation_period")
253
+
254
+ @rotation_period.setter
255
+ def rotation_period(self, value: Optional[pulumi.Input[_builtins.int]]):
256
+ pulumi.set(self, "rotation_period", value)
257
+
258
+ @_builtins.property
259
+ @pulumi.getter(name="skipImportRotation")
260
+ def skip_import_rotation(self) -> Optional[pulumi.Input[_builtins.bool]]:
261
+ """
262
+ Causes vault to skip the initial secret rotation on import. Not applicable to updates.
263
+ Requires Vault 1.16 or above.
264
+ """
265
+ return pulumi.get(self, "skip_import_rotation")
266
+
267
+ @skip_import_rotation.setter
268
+ def skip_import_rotation(self, value: Optional[pulumi.Input[_builtins.bool]]):
269
+ pulumi.set(self, "skip_import_rotation", value)
270
+
271
+ @_builtins.property
272
+ @pulumi.getter
273
+ def username(self) -> Optional[pulumi.Input[_builtins.str]]:
274
+ """
275
+ The username of the existing LDAP entry to manage password rotation for.
276
+ """
277
+ return pulumi.get(self, "username")
278
+
279
+ @username.setter
280
+ def username(self, value: Optional[pulumi.Input[_builtins.str]]):
281
+ pulumi.set(self, "username", value)
282
+
283
+
284
+ @pulumi.type_token("vault:ldap/secretBackendStaticRole:SecretBackendStaticRole")
285
+ class SecretBackendStaticRole(pulumi.CustomResource):
286
+ @overload
287
+ def __init__(__self__,
288
+ resource_name: str,
289
+ opts: Optional[pulumi.ResourceOptions] = None,
290
+ dn: Optional[pulumi.Input[_builtins.str]] = None,
291
+ mount: Optional[pulumi.Input[_builtins.str]] = None,
292
+ namespace: Optional[pulumi.Input[_builtins.str]] = None,
293
+ role_name: Optional[pulumi.Input[_builtins.str]] = None,
294
+ rotation_period: Optional[pulumi.Input[_builtins.int]] = None,
295
+ skip_import_rotation: Optional[pulumi.Input[_builtins.bool]] = None,
296
+ username: Optional[pulumi.Input[_builtins.str]] = None,
297
+ __props__=None):
298
+ """
299
+ ## Example Usage
300
+
301
+ ```python
302
+ import pulumi
303
+ import pulumi_vault as vault
304
+
305
+ config = vault.ldap.SecretBackend("config",
306
+ path="my-custom-ldap",
307
+ binddn="CN=Administrator,CN=Users,DC=corp,DC=example,DC=net",
308
+ bindpass="SuperSecretPassw0rd",
309
+ url="ldaps://localhost",
310
+ insecure_tls=True,
311
+ userdn="CN=Users,DC=corp,DC=example,DC=net")
312
+ role = vault.ldap.SecretBackendStaticRole("role",
313
+ mount=config.path,
314
+ username="alice",
315
+ dn="cn=alice,ou=Users,DC=corp,DC=example,DC=net",
316
+ role_name="alice",
317
+ rotation_period=60)
318
+ ```
319
+
320
+ ## Import
321
+
322
+ LDAP secret backend static role can be imported using the full path to the role
323
+ of the form: `<mount_path>/static-role/<role_name>` e.g.
324
+
325
+ ```sh
326
+ $ pulumi import vault:ldap/secretBackendStaticRole:SecretBackendStaticRole role ldap/static-role/example-role
327
+ ```
328
+
329
+ :param str resource_name: The name of the resource.
330
+ :param pulumi.ResourceOptions opts: Options for the resource.
331
+ :param pulumi.Input[_builtins.str] dn: Distinguished name (DN) of the existing LDAP entry to manage
332
+ password rotation for. If given, it will take precedence over `username` for the LDAP
333
+ search performed during password rotation. Cannot be modified after creation.
334
+ :param pulumi.Input[_builtins.str] mount: The unique path this backend should be mounted at. Must
335
+ not begin or end with a `/`. Defaults to `ldap`.
336
+ :param pulumi.Input[_builtins.str] namespace: The namespace to provision the resource in.
337
+ The value should not contain leading or trailing forward slashes.
338
+ The `namespace` is always relative to the provider's configured [namespace](https://www.terraform.io/docs/providers/vault/index.html#namespace).
339
+ *Available only for Vault Enterprise*.
340
+ :param pulumi.Input[_builtins.str] role_name: Name of the role.
341
+ :param pulumi.Input[_builtins.int] rotation_period: How often Vault should rotate the password of the user entry.
342
+ :param pulumi.Input[_builtins.bool] skip_import_rotation: Causes vault to skip the initial secret rotation on import. Not applicable to updates.
343
+ Requires Vault 1.16 or above.
344
+ :param pulumi.Input[_builtins.str] username: The username of the existing LDAP entry to manage password rotation for.
345
+ """
346
+ ...
347
+ @overload
348
+ def __init__(__self__,
349
+ resource_name: str,
350
+ args: SecretBackendStaticRoleArgs,
351
+ opts: Optional[pulumi.ResourceOptions] = None):
352
+ """
353
+ ## Example Usage
354
+
355
+ ```python
356
+ import pulumi
357
+ import pulumi_vault as vault
358
+
359
+ config = vault.ldap.SecretBackend("config",
360
+ path="my-custom-ldap",
361
+ binddn="CN=Administrator,CN=Users,DC=corp,DC=example,DC=net",
362
+ bindpass="SuperSecretPassw0rd",
363
+ url="ldaps://localhost",
364
+ insecure_tls=True,
365
+ userdn="CN=Users,DC=corp,DC=example,DC=net")
366
+ role = vault.ldap.SecretBackendStaticRole("role",
367
+ mount=config.path,
368
+ username="alice",
369
+ dn="cn=alice,ou=Users,DC=corp,DC=example,DC=net",
370
+ role_name="alice",
371
+ rotation_period=60)
372
+ ```
373
+
374
+ ## Import
375
+
376
+ LDAP secret backend static role can be imported using the full path to the role
377
+ of the form: `<mount_path>/static-role/<role_name>` e.g.
378
+
379
+ ```sh
380
+ $ pulumi import vault:ldap/secretBackendStaticRole:SecretBackendStaticRole role ldap/static-role/example-role
381
+ ```
382
+
383
+ :param str resource_name: The name of the resource.
384
+ :param SecretBackendStaticRoleArgs args: The arguments to use to populate this resource's properties.
385
+ :param pulumi.ResourceOptions opts: Options for the resource.
386
+ """
387
+ ...
388
+ def __init__(__self__, resource_name: str, *args, **kwargs):
389
+ resource_args, opts = _utilities.get_resource_args_opts(SecretBackendStaticRoleArgs, pulumi.ResourceOptions, *args, **kwargs)
390
+ if resource_args is not None:
391
+ __self__._internal_init(resource_name, opts, **resource_args.__dict__)
392
+ else:
393
+ __self__._internal_init(resource_name, *args, **kwargs)
394
+
395
+ def _internal_init(__self__,
396
+ resource_name: str,
397
+ opts: Optional[pulumi.ResourceOptions] = None,
398
+ dn: Optional[pulumi.Input[_builtins.str]] = None,
399
+ mount: Optional[pulumi.Input[_builtins.str]] = None,
400
+ namespace: Optional[pulumi.Input[_builtins.str]] = None,
401
+ role_name: Optional[pulumi.Input[_builtins.str]] = None,
402
+ rotation_period: Optional[pulumi.Input[_builtins.int]] = None,
403
+ skip_import_rotation: Optional[pulumi.Input[_builtins.bool]] = None,
404
+ username: Optional[pulumi.Input[_builtins.str]] = None,
405
+ __props__=None):
406
+ opts = pulumi.ResourceOptions.merge(_utilities.get_resource_opts_defaults(), opts)
407
+ if not isinstance(opts, pulumi.ResourceOptions):
408
+ raise TypeError('Expected resource options to be a ResourceOptions instance')
409
+ if opts.id is None:
410
+ if __props__ is not None:
411
+ raise TypeError('__props__ is only valid when passed in combination with a valid opts.id to get an existing resource')
412
+ __props__ = SecretBackendStaticRoleArgs.__new__(SecretBackendStaticRoleArgs)
413
+
414
+ __props__.__dict__["dn"] = dn
415
+ __props__.__dict__["mount"] = mount
416
+ __props__.__dict__["namespace"] = namespace
417
+ if role_name is None and not opts.urn:
418
+ raise TypeError("Missing required property 'role_name'")
419
+ __props__.__dict__["role_name"] = role_name
420
+ if rotation_period is None and not opts.urn:
421
+ raise TypeError("Missing required property 'rotation_period'")
422
+ __props__.__dict__["rotation_period"] = rotation_period
423
+ __props__.__dict__["skip_import_rotation"] = skip_import_rotation
424
+ if username is None and not opts.urn:
425
+ raise TypeError("Missing required property 'username'")
426
+ __props__.__dict__["username"] = username
427
+ super(SecretBackendStaticRole, __self__).__init__(
428
+ 'vault:ldap/secretBackendStaticRole:SecretBackendStaticRole',
429
+ resource_name,
430
+ __props__,
431
+ opts)
432
+
433
+ @staticmethod
434
+ def get(resource_name: str,
435
+ id: pulumi.Input[str],
436
+ opts: Optional[pulumi.ResourceOptions] = None,
437
+ dn: Optional[pulumi.Input[_builtins.str]] = None,
438
+ mount: Optional[pulumi.Input[_builtins.str]] = None,
439
+ namespace: Optional[pulumi.Input[_builtins.str]] = None,
440
+ role_name: Optional[pulumi.Input[_builtins.str]] = None,
441
+ rotation_period: Optional[pulumi.Input[_builtins.int]] = None,
442
+ skip_import_rotation: Optional[pulumi.Input[_builtins.bool]] = None,
443
+ username: Optional[pulumi.Input[_builtins.str]] = None) -> 'SecretBackendStaticRole':
444
+ """
445
+ Get an existing SecretBackendStaticRole resource's state with the given name, id, and optional extra
446
+ properties used to qualify the lookup.
447
+
448
+ :param str resource_name: The unique name of the resulting resource.
449
+ :param pulumi.Input[str] id: The unique provider ID of the resource to lookup.
450
+ :param pulumi.ResourceOptions opts: Options for the resource.
451
+ :param pulumi.Input[_builtins.str] dn: Distinguished name (DN) of the existing LDAP entry to manage
452
+ password rotation for. If given, it will take precedence over `username` for the LDAP
453
+ search performed during password rotation. Cannot be modified after creation.
454
+ :param pulumi.Input[_builtins.str] mount: The unique path this backend should be mounted at. Must
455
+ not begin or end with a `/`. Defaults to `ldap`.
456
+ :param pulumi.Input[_builtins.str] namespace: The namespace to provision the resource in.
457
+ The value should not contain leading or trailing forward slashes.
458
+ The `namespace` is always relative to the provider's configured [namespace](https://www.terraform.io/docs/providers/vault/index.html#namespace).
459
+ *Available only for Vault Enterprise*.
460
+ :param pulumi.Input[_builtins.str] role_name: Name of the role.
461
+ :param pulumi.Input[_builtins.int] rotation_period: How often Vault should rotate the password of the user entry.
462
+ :param pulumi.Input[_builtins.bool] skip_import_rotation: Causes vault to skip the initial secret rotation on import. Not applicable to updates.
463
+ Requires Vault 1.16 or above.
464
+ :param pulumi.Input[_builtins.str] username: The username of the existing LDAP entry to manage password rotation for.
465
+ """
466
+ opts = pulumi.ResourceOptions.merge(opts, pulumi.ResourceOptions(id=id))
467
+
468
+ __props__ = _SecretBackendStaticRoleState.__new__(_SecretBackendStaticRoleState)
469
+
470
+ __props__.__dict__["dn"] = dn
471
+ __props__.__dict__["mount"] = mount
472
+ __props__.__dict__["namespace"] = namespace
473
+ __props__.__dict__["role_name"] = role_name
474
+ __props__.__dict__["rotation_period"] = rotation_period
475
+ __props__.__dict__["skip_import_rotation"] = skip_import_rotation
476
+ __props__.__dict__["username"] = username
477
+ return SecretBackendStaticRole(resource_name, opts=opts, __props__=__props__)
478
+
479
+ @_builtins.property
480
+ @pulumi.getter
481
+ def dn(self) -> pulumi.Output[Optional[_builtins.str]]:
482
+ """
483
+ Distinguished name (DN) of the existing LDAP entry to manage
484
+ password rotation for. If given, it will take precedence over `username` for the LDAP
485
+ search performed during password rotation. Cannot be modified after creation.
486
+ """
487
+ return pulumi.get(self, "dn")
488
+
489
+ @_builtins.property
490
+ @pulumi.getter
491
+ def mount(self) -> pulumi.Output[Optional[_builtins.str]]:
492
+ """
493
+ The unique path this backend should be mounted at. Must
494
+ not begin or end with a `/`. Defaults to `ldap`.
495
+ """
496
+ return pulumi.get(self, "mount")
497
+
498
+ @_builtins.property
499
+ @pulumi.getter
500
+ def namespace(self) -> pulumi.Output[Optional[_builtins.str]]:
501
+ """
502
+ The namespace to provision the resource in.
503
+ The value should not contain leading or trailing forward slashes.
504
+ The `namespace` is always relative to the provider's configured [namespace](https://www.terraform.io/docs/providers/vault/index.html#namespace).
505
+ *Available only for Vault Enterprise*.
506
+ """
507
+ return pulumi.get(self, "namespace")
508
+
509
+ @_builtins.property
510
+ @pulumi.getter(name="roleName")
511
+ def role_name(self) -> pulumi.Output[_builtins.str]:
512
+ """
513
+ Name of the role.
514
+ """
515
+ return pulumi.get(self, "role_name")
516
+
517
+ @_builtins.property
518
+ @pulumi.getter(name="rotationPeriod")
519
+ def rotation_period(self) -> pulumi.Output[_builtins.int]:
520
+ """
521
+ How often Vault should rotate the password of the user entry.
522
+ """
523
+ return pulumi.get(self, "rotation_period")
524
+
525
+ @_builtins.property
526
+ @pulumi.getter(name="skipImportRotation")
527
+ def skip_import_rotation(self) -> pulumi.Output[Optional[_builtins.bool]]:
528
+ """
529
+ Causes vault to skip the initial secret rotation on import. Not applicable to updates.
530
+ Requires Vault 1.16 or above.
531
+ """
532
+ return pulumi.get(self, "skip_import_rotation")
533
+
534
+ @_builtins.property
535
+ @pulumi.getter
536
+ def username(self) -> pulumi.Output[_builtins.str]:
537
+ """
538
+ The username of the existing LDAP entry to manage password rotation for.
539
+ """
540
+ return pulumi.get(self, "username")
541
+
@@ -0,0 +1,11 @@
1
+ # coding=utf-8
2
+ # *** WARNING: this file was generated by pulumi-language-python. ***
3
+ # *** Do not edit by hand unless you're certain you know what you are doing! ***
4
+
5
+ import builtins as _builtins
6
+ from .. import _utilities
7
+ import typing
8
+ # Export this package's modules as members:
9
+ from .keys import *
10
+ from ._inputs import *
11
+ from . import outputs