pulumi-vault 7.6.0a1764657486__py3-none-any.whl
This diff represents the content of publicly available package versions that have been released to one of the supported registries. The information contained in this diff is provided for informational purposes only and reflects changes between package versions as they appear in their respective public registries.
- pulumi_vault/__init__.py +1399 -0
- pulumi_vault/_inputs.py +2701 -0
- pulumi_vault/_utilities.py +331 -0
- pulumi_vault/ad/__init__.py +12 -0
- pulumi_vault/ad/get_access_credentials.py +177 -0
- pulumi_vault/ad/secret_backend.py +1916 -0
- pulumi_vault/ad/secret_library.py +546 -0
- pulumi_vault/ad/secret_role.py +499 -0
- pulumi_vault/alicloud/__init__.py +9 -0
- pulumi_vault/alicloud/auth_backend_role.py +866 -0
- pulumi_vault/approle/__init__.py +12 -0
- pulumi_vault/approle/auth_backend_login.py +571 -0
- pulumi_vault/approle/auth_backend_role.py +1082 -0
- pulumi_vault/approle/auth_backend_role_secret_id.py +796 -0
- pulumi_vault/approle/get_auth_backend_role_id.py +169 -0
- pulumi_vault/audit.py +499 -0
- pulumi_vault/audit_request_header.py +277 -0
- pulumi_vault/auth_backend.py +565 -0
- pulumi_vault/aws/__init__.py +22 -0
- pulumi_vault/aws/auth_backend_cert.py +420 -0
- pulumi_vault/aws/auth_backend_client.py +1259 -0
- pulumi_vault/aws/auth_backend_config_identity.py +494 -0
- pulumi_vault/aws/auth_backend_identity_whitelist.py +380 -0
- pulumi_vault/aws/auth_backend_login.py +1046 -0
- pulumi_vault/aws/auth_backend_role.py +1961 -0
- pulumi_vault/aws/auth_backend_role_tag.py +638 -0
- pulumi_vault/aws/auth_backend_roletag_blacklist.py +366 -0
- pulumi_vault/aws/auth_backend_sts_role.py +414 -0
- pulumi_vault/aws/get_access_credentials.py +369 -0
- pulumi_vault/aws/get_static_access_credentials.py +137 -0
- pulumi_vault/aws/secret_backend.py +2018 -0
- pulumi_vault/aws/secret_backend_role.py +1188 -0
- pulumi_vault/aws/secret_backend_static_role.py +639 -0
- pulumi_vault/azure/__init__.py +15 -0
- pulumi_vault/azure/_inputs.py +108 -0
- pulumi_vault/azure/auth_backend_config.py +1096 -0
- pulumi_vault/azure/auth_backend_role.py +1176 -0
- pulumi_vault/azure/backend.py +1793 -0
- pulumi_vault/azure/backend_role.py +883 -0
- pulumi_vault/azure/get_access_credentials.py +400 -0
- pulumi_vault/azure/outputs.py +107 -0
- pulumi_vault/cert_auth_backend_role.py +1539 -0
- pulumi_vault/config/__init__.py +9 -0
- pulumi_vault/config/__init__.pyi +164 -0
- pulumi_vault/config/_inputs.py +73 -0
- pulumi_vault/config/outputs.py +1225 -0
- pulumi_vault/config/ui_custom_message.py +530 -0
- pulumi_vault/config/vars.py +230 -0
- pulumi_vault/consul/__init__.py +10 -0
- pulumi_vault/consul/secret_backend.py +1517 -0
- pulumi_vault/consul/secret_backend_role.py +847 -0
- pulumi_vault/database/__init__.py +14 -0
- pulumi_vault/database/_inputs.py +11907 -0
- pulumi_vault/database/outputs.py +8496 -0
- pulumi_vault/database/secret_backend_connection.py +1676 -0
- pulumi_vault/database/secret_backend_role.py +840 -0
- pulumi_vault/database/secret_backend_static_role.py +881 -0
- pulumi_vault/database/secrets_mount.py +2160 -0
- pulumi_vault/egp_policy.py +399 -0
- pulumi_vault/gcp/__init__.py +17 -0
- pulumi_vault/gcp/_inputs.py +441 -0
- pulumi_vault/gcp/auth_backend.py +1486 -0
- pulumi_vault/gcp/auth_backend_role.py +1235 -0
- pulumi_vault/gcp/get_auth_backend_role.py +514 -0
- pulumi_vault/gcp/outputs.py +302 -0
- pulumi_vault/gcp/secret_backend.py +1807 -0
- pulumi_vault/gcp/secret_impersonated_account.py +484 -0
- pulumi_vault/gcp/secret_roleset.py +554 -0
- pulumi_vault/gcp/secret_static_account.py +557 -0
- pulumi_vault/generic/__init__.py +11 -0
- pulumi_vault/generic/endpoint.py +786 -0
- pulumi_vault/generic/get_secret.py +306 -0
- pulumi_vault/generic/secret.py +486 -0
- pulumi_vault/get_auth_backend.py +226 -0
- pulumi_vault/get_auth_backends.py +170 -0
- pulumi_vault/get_namespace.py +226 -0
- pulumi_vault/get_namespaces.py +202 -0
- pulumi_vault/get_nomad_access_token.py +210 -0
- pulumi_vault/get_policy_document.py +160 -0
- pulumi_vault/get_raft_autopilot_state.py +267 -0
- pulumi_vault/github/__init__.py +13 -0
- pulumi_vault/github/_inputs.py +225 -0
- pulumi_vault/github/auth_backend.py +1194 -0
- pulumi_vault/github/outputs.py +174 -0
- pulumi_vault/github/team.py +380 -0
- pulumi_vault/github/user.py +380 -0
- pulumi_vault/identity/__init__.py +35 -0
- pulumi_vault/identity/entity.py +447 -0
- pulumi_vault/identity/entity_alias.py +398 -0
- pulumi_vault/identity/entity_policies.py +455 -0
- pulumi_vault/identity/get_entity.py +384 -0
- pulumi_vault/identity/get_group.py +467 -0
- pulumi_vault/identity/get_oidc_client_creds.py +175 -0
- pulumi_vault/identity/get_oidc_openid_config.py +334 -0
- pulumi_vault/identity/get_oidc_public_keys.py +179 -0
- pulumi_vault/identity/group.py +805 -0
- pulumi_vault/identity/group_alias.py +386 -0
- pulumi_vault/identity/group_member_entity_ids.py +444 -0
- pulumi_vault/identity/group_member_group_ids.py +467 -0
- pulumi_vault/identity/group_policies.py +471 -0
- pulumi_vault/identity/mfa_duo.py +674 -0
- pulumi_vault/identity/mfa_login_enforcement.py +566 -0
- pulumi_vault/identity/mfa_okta.py +626 -0
- pulumi_vault/identity/mfa_pingid.py +616 -0
- pulumi_vault/identity/mfa_totp.py +758 -0
- pulumi_vault/identity/oidc.py +268 -0
- pulumi_vault/identity/oidc_assignment.py +375 -0
- pulumi_vault/identity/oidc_client.py +667 -0
- pulumi_vault/identity/oidc_key.py +474 -0
- pulumi_vault/identity/oidc_key_allowed_client_id.py +298 -0
- pulumi_vault/identity/oidc_provider.py +550 -0
- pulumi_vault/identity/oidc_role.py +543 -0
- pulumi_vault/identity/oidc_scope.py +355 -0
- pulumi_vault/identity/outputs.py +137 -0
- pulumi_vault/jwt/__init__.py +12 -0
- pulumi_vault/jwt/_inputs.py +225 -0
- pulumi_vault/jwt/auth_backend.py +1347 -0
- pulumi_vault/jwt/auth_backend_role.py +1847 -0
- pulumi_vault/jwt/outputs.py +174 -0
- pulumi_vault/kmip/__init__.py +11 -0
- pulumi_vault/kmip/secret_backend.py +1591 -0
- pulumi_vault/kmip/secret_role.py +1194 -0
- pulumi_vault/kmip/secret_scope.py +372 -0
- pulumi_vault/kubernetes/__init__.py +15 -0
- pulumi_vault/kubernetes/auth_backend_config.py +654 -0
- pulumi_vault/kubernetes/auth_backend_role.py +1031 -0
- pulumi_vault/kubernetes/get_auth_backend_config.py +280 -0
- pulumi_vault/kubernetes/get_auth_backend_role.py +470 -0
- pulumi_vault/kubernetes/get_service_account_token.py +344 -0
- pulumi_vault/kubernetes/secret_backend.py +1341 -0
- pulumi_vault/kubernetes/secret_backend_role.py +1140 -0
- pulumi_vault/kv/__init__.py +18 -0
- pulumi_vault/kv/_inputs.py +124 -0
- pulumi_vault/kv/get_secret.py +240 -0
- pulumi_vault/kv/get_secret_subkeys_v2.py +275 -0
- pulumi_vault/kv/get_secret_v2.py +315 -0
- pulumi_vault/kv/get_secrets_list.py +186 -0
- pulumi_vault/kv/get_secrets_list_v2.py +243 -0
- pulumi_vault/kv/outputs.py +102 -0
- pulumi_vault/kv/secret.py +397 -0
- pulumi_vault/kv/secret_backend_v2.py +455 -0
- pulumi_vault/kv/secret_v2.py +970 -0
- pulumi_vault/ldap/__init__.py +19 -0
- pulumi_vault/ldap/_inputs.py +225 -0
- pulumi_vault/ldap/auth_backend.py +2520 -0
- pulumi_vault/ldap/auth_backend_group.py +386 -0
- pulumi_vault/ldap/auth_backend_user.py +439 -0
- pulumi_vault/ldap/get_dynamic_credentials.py +181 -0
- pulumi_vault/ldap/get_static_credentials.py +192 -0
- pulumi_vault/ldap/outputs.py +174 -0
- pulumi_vault/ldap/secret_backend.py +2207 -0
- pulumi_vault/ldap/secret_backend_dynamic_role.py +767 -0
- pulumi_vault/ldap/secret_backend_library_set.py +552 -0
- pulumi_vault/ldap/secret_backend_static_role.py +541 -0
- pulumi_vault/managed/__init__.py +11 -0
- pulumi_vault/managed/_inputs.py +944 -0
- pulumi_vault/managed/keys.py +398 -0
- pulumi_vault/managed/outputs.py +667 -0
- pulumi_vault/mfa_duo.py +589 -0
- pulumi_vault/mfa_okta.py +623 -0
- pulumi_vault/mfa_pingid.py +670 -0
- pulumi_vault/mfa_totp.py +620 -0
- pulumi_vault/mongodbatlas/__init__.py +10 -0
- pulumi_vault/mongodbatlas/secret_backend.py +388 -0
- pulumi_vault/mongodbatlas/secret_role.py +726 -0
- pulumi_vault/mount.py +1262 -0
- pulumi_vault/namespace.py +452 -0
- pulumi_vault/nomad_secret_backend.py +1559 -0
- pulumi_vault/nomad_secret_role.py +489 -0
- pulumi_vault/oci_auth_backend.py +676 -0
- pulumi_vault/oci_auth_backend_role.py +852 -0
- pulumi_vault/okta/__init__.py +13 -0
- pulumi_vault/okta/_inputs.py +320 -0
- pulumi_vault/okta/auth_backend.py +1231 -0
- pulumi_vault/okta/auth_backend_group.py +369 -0
- pulumi_vault/okta/auth_backend_user.py +416 -0
- pulumi_vault/okta/outputs.py +244 -0
- pulumi_vault/outputs.py +502 -0
- pulumi_vault/pkisecret/__init__.py +38 -0
- pulumi_vault/pkisecret/_inputs.py +270 -0
- pulumi_vault/pkisecret/backend_acme_eab.py +550 -0
- pulumi_vault/pkisecret/backend_config_acme.py +690 -0
- pulumi_vault/pkisecret/backend_config_auto_tidy.py +1370 -0
- pulumi_vault/pkisecret/backend_config_cluster.py +370 -0
- pulumi_vault/pkisecret/backend_config_cmpv2.py +693 -0
- pulumi_vault/pkisecret/backend_config_est.py +756 -0
- pulumi_vault/pkisecret/backend_config_scep.py +738 -0
- pulumi_vault/pkisecret/get_backend_cert_metadata.py +277 -0
- pulumi_vault/pkisecret/get_backend_config_cmpv2.py +226 -0
- pulumi_vault/pkisecret/get_backend_config_est.py +251 -0
- pulumi_vault/pkisecret/get_backend_config_scep.py +271 -0
- pulumi_vault/pkisecret/get_backend_issuer.py +395 -0
- pulumi_vault/pkisecret/get_backend_issuers.py +192 -0
- pulumi_vault/pkisecret/get_backend_key.py +211 -0
- pulumi_vault/pkisecret/get_backend_keys.py +192 -0
- pulumi_vault/pkisecret/outputs.py +270 -0
- pulumi_vault/pkisecret/secret_backend_cert.py +1315 -0
- pulumi_vault/pkisecret/secret_backend_config_ca.py +386 -0
- pulumi_vault/pkisecret/secret_backend_config_issuers.py +392 -0
- pulumi_vault/pkisecret/secret_backend_config_urls.py +462 -0
- pulumi_vault/pkisecret/secret_backend_crl_config.py +846 -0
- pulumi_vault/pkisecret/secret_backend_intermediate_cert_request.py +1629 -0
- pulumi_vault/pkisecret/secret_backend_intermediate_set_signed.py +444 -0
- pulumi_vault/pkisecret/secret_backend_issuer.py +1089 -0
- pulumi_vault/pkisecret/secret_backend_key.py +613 -0
- pulumi_vault/pkisecret/secret_backend_role.py +2694 -0
- pulumi_vault/pkisecret/secret_backend_root_cert.py +2134 -0
- pulumi_vault/pkisecret/secret_backend_root_sign_intermediate.py +2031 -0
- pulumi_vault/pkisecret/secret_backend_sign.py +1194 -0
- pulumi_vault/plugin.py +596 -0
- pulumi_vault/plugin_pinned_version.py +299 -0
- pulumi_vault/policy.py +279 -0
- pulumi_vault/provider.py +781 -0
- pulumi_vault/pulumi-plugin.json +5 -0
- pulumi_vault/py.typed +0 -0
- pulumi_vault/quota_lease_count.py +504 -0
- pulumi_vault/quota_rate_limit.py +751 -0
- pulumi_vault/rabbitmq/__init__.py +12 -0
- pulumi_vault/rabbitmq/_inputs.py +235 -0
- pulumi_vault/rabbitmq/outputs.py +144 -0
- pulumi_vault/rabbitmq/secret_backend.py +1437 -0
- pulumi_vault/rabbitmq/secret_backend_role.py +496 -0
- pulumi_vault/raft_autopilot.py +609 -0
- pulumi_vault/raft_snapshot_agent_config.py +1591 -0
- pulumi_vault/rgp_policy.py +349 -0
- pulumi_vault/saml/__init__.py +12 -0
- pulumi_vault/saml/_inputs.py +225 -0
- pulumi_vault/saml/auth_backend.py +811 -0
- pulumi_vault/saml/auth_backend_role.py +1068 -0
- pulumi_vault/saml/outputs.py +174 -0
- pulumi_vault/scep_auth_backend_role.py +908 -0
- pulumi_vault/secrets/__init__.py +18 -0
- pulumi_vault/secrets/_inputs.py +110 -0
- pulumi_vault/secrets/outputs.py +94 -0
- pulumi_vault/secrets/sync_association.py +450 -0
- pulumi_vault/secrets/sync_aws_destination.py +780 -0
- pulumi_vault/secrets/sync_azure_destination.py +736 -0
- pulumi_vault/secrets/sync_config.py +303 -0
- pulumi_vault/secrets/sync_gcp_destination.py +572 -0
- pulumi_vault/secrets/sync_gh_destination.py +688 -0
- pulumi_vault/secrets/sync_github_apps.py +376 -0
- pulumi_vault/secrets/sync_vercel_destination.py +603 -0
- pulumi_vault/ssh/__init__.py +13 -0
- pulumi_vault/ssh/_inputs.py +76 -0
- pulumi_vault/ssh/get_secret_backend_sign.py +294 -0
- pulumi_vault/ssh/outputs.py +51 -0
- pulumi_vault/ssh/secret_backend_ca.py +588 -0
- pulumi_vault/ssh/secret_backend_role.py +1493 -0
- pulumi_vault/terraformcloud/__init__.py +11 -0
- pulumi_vault/terraformcloud/secret_backend.py +1321 -0
- pulumi_vault/terraformcloud/secret_creds.py +445 -0
- pulumi_vault/terraformcloud/secret_role.py +563 -0
- pulumi_vault/token.py +1026 -0
- pulumi_vault/tokenauth/__init__.py +9 -0
- pulumi_vault/tokenauth/auth_backend_role.py +1135 -0
- pulumi_vault/transform/__init__.py +14 -0
- pulumi_vault/transform/alphabet.py +348 -0
- pulumi_vault/transform/get_decode.py +287 -0
- pulumi_vault/transform/get_encode.py +291 -0
- pulumi_vault/transform/role.py +350 -0
- pulumi_vault/transform/template.py +592 -0
- pulumi_vault/transform/transformation.py +608 -0
- pulumi_vault/transit/__init__.py +15 -0
- pulumi_vault/transit/get_cmac.py +256 -0
- pulumi_vault/transit/get_decrypt.py +181 -0
- pulumi_vault/transit/get_encrypt.py +174 -0
- pulumi_vault/transit/get_sign.py +328 -0
- pulumi_vault/transit/get_verify.py +373 -0
- pulumi_vault/transit/secret_backend_key.py +1202 -0
- pulumi_vault/transit/secret_cache_config.py +302 -0
- pulumi_vault-7.6.0a1764657486.dist-info/METADATA +92 -0
- pulumi_vault-7.6.0a1764657486.dist-info/RECORD +274 -0
- pulumi_vault-7.6.0a1764657486.dist-info/WHEEL +5 -0
- pulumi_vault-7.6.0a1764657486.dist-info/top_level.txt +1 -0
|
@@ -0,0 +1,541 @@
|
|
|
1
|
+
# coding=utf-8
|
|
2
|
+
# *** WARNING: this file was generated by pulumi-language-python. ***
|
|
3
|
+
# *** Do not edit by hand unless you're certain you know what you are doing! ***
|
|
4
|
+
|
|
5
|
+
import builtins as _builtins
|
|
6
|
+
import warnings
|
|
7
|
+
import sys
|
|
8
|
+
import pulumi
|
|
9
|
+
import pulumi.runtime
|
|
10
|
+
from typing import Any, Mapping, Optional, Sequence, Union, overload
|
|
11
|
+
if sys.version_info >= (3, 11):
|
|
12
|
+
from typing import NotRequired, TypedDict, TypeAlias
|
|
13
|
+
else:
|
|
14
|
+
from typing_extensions import NotRequired, TypedDict, TypeAlias
|
|
15
|
+
from .. import _utilities
|
|
16
|
+
|
|
17
|
+
__all__ = ['SecretBackendStaticRoleArgs', 'SecretBackendStaticRole']
|
|
18
|
+
|
|
19
|
+
@pulumi.input_type
|
|
20
|
+
class SecretBackendStaticRoleArgs:
|
|
21
|
+
def __init__(__self__, *,
|
|
22
|
+
role_name: pulumi.Input[_builtins.str],
|
|
23
|
+
rotation_period: pulumi.Input[_builtins.int],
|
|
24
|
+
username: pulumi.Input[_builtins.str],
|
|
25
|
+
dn: Optional[pulumi.Input[_builtins.str]] = None,
|
|
26
|
+
mount: Optional[pulumi.Input[_builtins.str]] = None,
|
|
27
|
+
namespace: Optional[pulumi.Input[_builtins.str]] = None,
|
|
28
|
+
skip_import_rotation: Optional[pulumi.Input[_builtins.bool]] = None):
|
|
29
|
+
"""
|
|
30
|
+
The set of arguments for constructing a SecretBackendStaticRole resource.
|
|
31
|
+
:param pulumi.Input[_builtins.str] role_name: Name of the role.
|
|
32
|
+
:param pulumi.Input[_builtins.int] rotation_period: How often Vault should rotate the password of the user entry.
|
|
33
|
+
:param pulumi.Input[_builtins.str] username: The username of the existing LDAP entry to manage password rotation for.
|
|
34
|
+
:param pulumi.Input[_builtins.str] dn: Distinguished name (DN) of the existing LDAP entry to manage
|
|
35
|
+
password rotation for. If given, it will take precedence over `username` for the LDAP
|
|
36
|
+
search performed during password rotation. Cannot be modified after creation.
|
|
37
|
+
:param pulumi.Input[_builtins.str] mount: The unique path this backend should be mounted at. Must
|
|
38
|
+
not begin or end with a `/`. Defaults to `ldap`.
|
|
39
|
+
:param pulumi.Input[_builtins.str] namespace: The namespace to provision the resource in.
|
|
40
|
+
The value should not contain leading or trailing forward slashes.
|
|
41
|
+
The `namespace` is always relative to the provider's configured [namespace](https://www.terraform.io/docs/providers/vault/index.html#namespace).
|
|
42
|
+
*Available only for Vault Enterprise*.
|
|
43
|
+
:param pulumi.Input[_builtins.bool] skip_import_rotation: Causes vault to skip the initial secret rotation on import. Not applicable to updates.
|
|
44
|
+
Requires Vault 1.16 or above.
|
|
45
|
+
"""
|
|
46
|
+
pulumi.set(__self__, "role_name", role_name)
|
|
47
|
+
pulumi.set(__self__, "rotation_period", rotation_period)
|
|
48
|
+
pulumi.set(__self__, "username", username)
|
|
49
|
+
if dn is not None:
|
|
50
|
+
pulumi.set(__self__, "dn", dn)
|
|
51
|
+
if mount is not None:
|
|
52
|
+
pulumi.set(__self__, "mount", mount)
|
|
53
|
+
if namespace is not None:
|
|
54
|
+
pulumi.set(__self__, "namespace", namespace)
|
|
55
|
+
if skip_import_rotation is not None:
|
|
56
|
+
pulumi.set(__self__, "skip_import_rotation", skip_import_rotation)
|
|
57
|
+
|
|
58
|
+
@_builtins.property
|
|
59
|
+
@pulumi.getter(name="roleName")
|
|
60
|
+
def role_name(self) -> pulumi.Input[_builtins.str]:
|
|
61
|
+
"""
|
|
62
|
+
Name of the role.
|
|
63
|
+
"""
|
|
64
|
+
return pulumi.get(self, "role_name")
|
|
65
|
+
|
|
66
|
+
@role_name.setter
|
|
67
|
+
def role_name(self, value: pulumi.Input[_builtins.str]):
|
|
68
|
+
pulumi.set(self, "role_name", value)
|
|
69
|
+
|
|
70
|
+
@_builtins.property
|
|
71
|
+
@pulumi.getter(name="rotationPeriod")
|
|
72
|
+
def rotation_period(self) -> pulumi.Input[_builtins.int]:
|
|
73
|
+
"""
|
|
74
|
+
How often Vault should rotate the password of the user entry.
|
|
75
|
+
"""
|
|
76
|
+
return pulumi.get(self, "rotation_period")
|
|
77
|
+
|
|
78
|
+
@rotation_period.setter
|
|
79
|
+
def rotation_period(self, value: pulumi.Input[_builtins.int]):
|
|
80
|
+
pulumi.set(self, "rotation_period", value)
|
|
81
|
+
|
|
82
|
+
@_builtins.property
|
|
83
|
+
@pulumi.getter
|
|
84
|
+
def username(self) -> pulumi.Input[_builtins.str]:
|
|
85
|
+
"""
|
|
86
|
+
The username of the existing LDAP entry to manage password rotation for.
|
|
87
|
+
"""
|
|
88
|
+
return pulumi.get(self, "username")
|
|
89
|
+
|
|
90
|
+
@username.setter
|
|
91
|
+
def username(self, value: pulumi.Input[_builtins.str]):
|
|
92
|
+
pulumi.set(self, "username", value)
|
|
93
|
+
|
|
94
|
+
@_builtins.property
|
|
95
|
+
@pulumi.getter
|
|
96
|
+
def dn(self) -> Optional[pulumi.Input[_builtins.str]]:
|
|
97
|
+
"""
|
|
98
|
+
Distinguished name (DN) of the existing LDAP entry to manage
|
|
99
|
+
password rotation for. If given, it will take precedence over `username` for the LDAP
|
|
100
|
+
search performed during password rotation. Cannot be modified after creation.
|
|
101
|
+
"""
|
|
102
|
+
return pulumi.get(self, "dn")
|
|
103
|
+
|
|
104
|
+
@dn.setter
|
|
105
|
+
def dn(self, value: Optional[pulumi.Input[_builtins.str]]):
|
|
106
|
+
pulumi.set(self, "dn", value)
|
|
107
|
+
|
|
108
|
+
@_builtins.property
|
|
109
|
+
@pulumi.getter
|
|
110
|
+
def mount(self) -> Optional[pulumi.Input[_builtins.str]]:
|
|
111
|
+
"""
|
|
112
|
+
The unique path this backend should be mounted at. Must
|
|
113
|
+
not begin or end with a `/`. Defaults to `ldap`.
|
|
114
|
+
"""
|
|
115
|
+
return pulumi.get(self, "mount")
|
|
116
|
+
|
|
117
|
+
@mount.setter
|
|
118
|
+
def mount(self, value: Optional[pulumi.Input[_builtins.str]]):
|
|
119
|
+
pulumi.set(self, "mount", value)
|
|
120
|
+
|
|
121
|
+
@_builtins.property
|
|
122
|
+
@pulumi.getter
|
|
123
|
+
def namespace(self) -> Optional[pulumi.Input[_builtins.str]]:
|
|
124
|
+
"""
|
|
125
|
+
The namespace to provision the resource in.
|
|
126
|
+
The value should not contain leading or trailing forward slashes.
|
|
127
|
+
The `namespace` is always relative to the provider's configured [namespace](https://www.terraform.io/docs/providers/vault/index.html#namespace).
|
|
128
|
+
*Available only for Vault Enterprise*.
|
|
129
|
+
"""
|
|
130
|
+
return pulumi.get(self, "namespace")
|
|
131
|
+
|
|
132
|
+
@namespace.setter
|
|
133
|
+
def namespace(self, value: Optional[pulumi.Input[_builtins.str]]):
|
|
134
|
+
pulumi.set(self, "namespace", value)
|
|
135
|
+
|
|
136
|
+
@_builtins.property
|
|
137
|
+
@pulumi.getter(name="skipImportRotation")
|
|
138
|
+
def skip_import_rotation(self) -> Optional[pulumi.Input[_builtins.bool]]:
|
|
139
|
+
"""
|
|
140
|
+
Causes vault to skip the initial secret rotation on import. Not applicable to updates.
|
|
141
|
+
Requires Vault 1.16 or above.
|
|
142
|
+
"""
|
|
143
|
+
return pulumi.get(self, "skip_import_rotation")
|
|
144
|
+
|
|
145
|
+
@skip_import_rotation.setter
|
|
146
|
+
def skip_import_rotation(self, value: Optional[pulumi.Input[_builtins.bool]]):
|
|
147
|
+
pulumi.set(self, "skip_import_rotation", value)
|
|
148
|
+
|
|
149
|
+
|
|
150
|
+
@pulumi.input_type
|
|
151
|
+
class _SecretBackendStaticRoleState:
|
|
152
|
+
def __init__(__self__, *,
|
|
153
|
+
dn: Optional[pulumi.Input[_builtins.str]] = None,
|
|
154
|
+
mount: Optional[pulumi.Input[_builtins.str]] = None,
|
|
155
|
+
namespace: Optional[pulumi.Input[_builtins.str]] = None,
|
|
156
|
+
role_name: Optional[pulumi.Input[_builtins.str]] = None,
|
|
157
|
+
rotation_period: Optional[pulumi.Input[_builtins.int]] = None,
|
|
158
|
+
skip_import_rotation: Optional[pulumi.Input[_builtins.bool]] = None,
|
|
159
|
+
username: Optional[pulumi.Input[_builtins.str]] = None):
|
|
160
|
+
"""
|
|
161
|
+
Input properties used for looking up and filtering SecretBackendStaticRole resources.
|
|
162
|
+
:param pulumi.Input[_builtins.str] dn: Distinguished name (DN) of the existing LDAP entry to manage
|
|
163
|
+
password rotation for. If given, it will take precedence over `username` for the LDAP
|
|
164
|
+
search performed during password rotation. Cannot be modified after creation.
|
|
165
|
+
:param pulumi.Input[_builtins.str] mount: The unique path this backend should be mounted at. Must
|
|
166
|
+
not begin or end with a `/`. Defaults to `ldap`.
|
|
167
|
+
:param pulumi.Input[_builtins.str] namespace: The namespace to provision the resource in.
|
|
168
|
+
The value should not contain leading or trailing forward slashes.
|
|
169
|
+
The `namespace` is always relative to the provider's configured [namespace](https://www.terraform.io/docs/providers/vault/index.html#namespace).
|
|
170
|
+
*Available only for Vault Enterprise*.
|
|
171
|
+
:param pulumi.Input[_builtins.str] role_name: Name of the role.
|
|
172
|
+
:param pulumi.Input[_builtins.int] rotation_period: How often Vault should rotate the password of the user entry.
|
|
173
|
+
:param pulumi.Input[_builtins.bool] skip_import_rotation: Causes vault to skip the initial secret rotation on import. Not applicable to updates.
|
|
174
|
+
Requires Vault 1.16 or above.
|
|
175
|
+
:param pulumi.Input[_builtins.str] username: The username of the existing LDAP entry to manage password rotation for.
|
|
176
|
+
"""
|
|
177
|
+
if dn is not None:
|
|
178
|
+
pulumi.set(__self__, "dn", dn)
|
|
179
|
+
if mount is not None:
|
|
180
|
+
pulumi.set(__self__, "mount", mount)
|
|
181
|
+
if namespace is not None:
|
|
182
|
+
pulumi.set(__self__, "namespace", namespace)
|
|
183
|
+
if role_name is not None:
|
|
184
|
+
pulumi.set(__self__, "role_name", role_name)
|
|
185
|
+
if rotation_period is not None:
|
|
186
|
+
pulumi.set(__self__, "rotation_period", rotation_period)
|
|
187
|
+
if skip_import_rotation is not None:
|
|
188
|
+
pulumi.set(__self__, "skip_import_rotation", skip_import_rotation)
|
|
189
|
+
if username is not None:
|
|
190
|
+
pulumi.set(__self__, "username", username)
|
|
191
|
+
|
|
192
|
+
@_builtins.property
|
|
193
|
+
@pulumi.getter
|
|
194
|
+
def dn(self) -> Optional[pulumi.Input[_builtins.str]]:
|
|
195
|
+
"""
|
|
196
|
+
Distinguished name (DN) of the existing LDAP entry to manage
|
|
197
|
+
password rotation for. If given, it will take precedence over `username` for the LDAP
|
|
198
|
+
search performed during password rotation. Cannot be modified after creation.
|
|
199
|
+
"""
|
|
200
|
+
return pulumi.get(self, "dn")
|
|
201
|
+
|
|
202
|
+
@dn.setter
|
|
203
|
+
def dn(self, value: Optional[pulumi.Input[_builtins.str]]):
|
|
204
|
+
pulumi.set(self, "dn", value)
|
|
205
|
+
|
|
206
|
+
@_builtins.property
|
|
207
|
+
@pulumi.getter
|
|
208
|
+
def mount(self) -> Optional[pulumi.Input[_builtins.str]]:
|
|
209
|
+
"""
|
|
210
|
+
The unique path this backend should be mounted at. Must
|
|
211
|
+
not begin or end with a `/`. Defaults to `ldap`.
|
|
212
|
+
"""
|
|
213
|
+
return pulumi.get(self, "mount")
|
|
214
|
+
|
|
215
|
+
@mount.setter
|
|
216
|
+
def mount(self, value: Optional[pulumi.Input[_builtins.str]]):
|
|
217
|
+
pulumi.set(self, "mount", value)
|
|
218
|
+
|
|
219
|
+
@_builtins.property
|
|
220
|
+
@pulumi.getter
|
|
221
|
+
def namespace(self) -> Optional[pulumi.Input[_builtins.str]]:
|
|
222
|
+
"""
|
|
223
|
+
The namespace to provision the resource in.
|
|
224
|
+
The value should not contain leading or trailing forward slashes.
|
|
225
|
+
The `namespace` is always relative to the provider's configured [namespace](https://www.terraform.io/docs/providers/vault/index.html#namespace).
|
|
226
|
+
*Available only for Vault Enterprise*.
|
|
227
|
+
"""
|
|
228
|
+
return pulumi.get(self, "namespace")
|
|
229
|
+
|
|
230
|
+
@namespace.setter
|
|
231
|
+
def namespace(self, value: Optional[pulumi.Input[_builtins.str]]):
|
|
232
|
+
pulumi.set(self, "namespace", value)
|
|
233
|
+
|
|
234
|
+
@_builtins.property
|
|
235
|
+
@pulumi.getter(name="roleName")
|
|
236
|
+
def role_name(self) -> Optional[pulumi.Input[_builtins.str]]:
|
|
237
|
+
"""
|
|
238
|
+
Name of the role.
|
|
239
|
+
"""
|
|
240
|
+
return pulumi.get(self, "role_name")
|
|
241
|
+
|
|
242
|
+
@role_name.setter
|
|
243
|
+
def role_name(self, value: Optional[pulumi.Input[_builtins.str]]):
|
|
244
|
+
pulumi.set(self, "role_name", value)
|
|
245
|
+
|
|
246
|
+
@_builtins.property
|
|
247
|
+
@pulumi.getter(name="rotationPeriod")
|
|
248
|
+
def rotation_period(self) -> Optional[pulumi.Input[_builtins.int]]:
|
|
249
|
+
"""
|
|
250
|
+
How often Vault should rotate the password of the user entry.
|
|
251
|
+
"""
|
|
252
|
+
return pulumi.get(self, "rotation_period")
|
|
253
|
+
|
|
254
|
+
@rotation_period.setter
|
|
255
|
+
def rotation_period(self, value: Optional[pulumi.Input[_builtins.int]]):
|
|
256
|
+
pulumi.set(self, "rotation_period", value)
|
|
257
|
+
|
|
258
|
+
@_builtins.property
|
|
259
|
+
@pulumi.getter(name="skipImportRotation")
|
|
260
|
+
def skip_import_rotation(self) -> Optional[pulumi.Input[_builtins.bool]]:
|
|
261
|
+
"""
|
|
262
|
+
Causes vault to skip the initial secret rotation on import. Not applicable to updates.
|
|
263
|
+
Requires Vault 1.16 or above.
|
|
264
|
+
"""
|
|
265
|
+
return pulumi.get(self, "skip_import_rotation")
|
|
266
|
+
|
|
267
|
+
@skip_import_rotation.setter
|
|
268
|
+
def skip_import_rotation(self, value: Optional[pulumi.Input[_builtins.bool]]):
|
|
269
|
+
pulumi.set(self, "skip_import_rotation", value)
|
|
270
|
+
|
|
271
|
+
@_builtins.property
|
|
272
|
+
@pulumi.getter
|
|
273
|
+
def username(self) -> Optional[pulumi.Input[_builtins.str]]:
|
|
274
|
+
"""
|
|
275
|
+
The username of the existing LDAP entry to manage password rotation for.
|
|
276
|
+
"""
|
|
277
|
+
return pulumi.get(self, "username")
|
|
278
|
+
|
|
279
|
+
@username.setter
|
|
280
|
+
def username(self, value: Optional[pulumi.Input[_builtins.str]]):
|
|
281
|
+
pulumi.set(self, "username", value)
|
|
282
|
+
|
|
283
|
+
|
|
284
|
+
@pulumi.type_token("vault:ldap/secretBackendStaticRole:SecretBackendStaticRole")
|
|
285
|
+
class SecretBackendStaticRole(pulumi.CustomResource):
|
|
286
|
+
@overload
|
|
287
|
+
def __init__(__self__,
|
|
288
|
+
resource_name: str,
|
|
289
|
+
opts: Optional[pulumi.ResourceOptions] = None,
|
|
290
|
+
dn: Optional[pulumi.Input[_builtins.str]] = None,
|
|
291
|
+
mount: Optional[pulumi.Input[_builtins.str]] = None,
|
|
292
|
+
namespace: Optional[pulumi.Input[_builtins.str]] = None,
|
|
293
|
+
role_name: Optional[pulumi.Input[_builtins.str]] = None,
|
|
294
|
+
rotation_period: Optional[pulumi.Input[_builtins.int]] = None,
|
|
295
|
+
skip_import_rotation: Optional[pulumi.Input[_builtins.bool]] = None,
|
|
296
|
+
username: Optional[pulumi.Input[_builtins.str]] = None,
|
|
297
|
+
__props__=None):
|
|
298
|
+
"""
|
|
299
|
+
## Example Usage
|
|
300
|
+
|
|
301
|
+
```python
|
|
302
|
+
import pulumi
|
|
303
|
+
import pulumi_vault as vault
|
|
304
|
+
|
|
305
|
+
config = vault.ldap.SecretBackend("config",
|
|
306
|
+
path="my-custom-ldap",
|
|
307
|
+
binddn="CN=Administrator,CN=Users,DC=corp,DC=example,DC=net",
|
|
308
|
+
bindpass="SuperSecretPassw0rd",
|
|
309
|
+
url="ldaps://localhost",
|
|
310
|
+
insecure_tls=True,
|
|
311
|
+
userdn="CN=Users,DC=corp,DC=example,DC=net")
|
|
312
|
+
role = vault.ldap.SecretBackendStaticRole("role",
|
|
313
|
+
mount=config.path,
|
|
314
|
+
username="alice",
|
|
315
|
+
dn="cn=alice,ou=Users,DC=corp,DC=example,DC=net",
|
|
316
|
+
role_name="alice",
|
|
317
|
+
rotation_period=60)
|
|
318
|
+
```
|
|
319
|
+
|
|
320
|
+
## Import
|
|
321
|
+
|
|
322
|
+
LDAP secret backend static role can be imported using the full path to the role
|
|
323
|
+
of the form: `<mount_path>/static-role/<role_name>` e.g.
|
|
324
|
+
|
|
325
|
+
```sh
|
|
326
|
+
$ pulumi import vault:ldap/secretBackendStaticRole:SecretBackendStaticRole role ldap/static-role/example-role
|
|
327
|
+
```
|
|
328
|
+
|
|
329
|
+
:param str resource_name: The name of the resource.
|
|
330
|
+
:param pulumi.ResourceOptions opts: Options for the resource.
|
|
331
|
+
:param pulumi.Input[_builtins.str] dn: Distinguished name (DN) of the existing LDAP entry to manage
|
|
332
|
+
password rotation for. If given, it will take precedence over `username` for the LDAP
|
|
333
|
+
search performed during password rotation. Cannot be modified after creation.
|
|
334
|
+
:param pulumi.Input[_builtins.str] mount: The unique path this backend should be mounted at. Must
|
|
335
|
+
not begin or end with a `/`. Defaults to `ldap`.
|
|
336
|
+
:param pulumi.Input[_builtins.str] namespace: The namespace to provision the resource in.
|
|
337
|
+
The value should not contain leading or trailing forward slashes.
|
|
338
|
+
The `namespace` is always relative to the provider's configured [namespace](https://www.terraform.io/docs/providers/vault/index.html#namespace).
|
|
339
|
+
*Available only for Vault Enterprise*.
|
|
340
|
+
:param pulumi.Input[_builtins.str] role_name: Name of the role.
|
|
341
|
+
:param pulumi.Input[_builtins.int] rotation_period: How often Vault should rotate the password of the user entry.
|
|
342
|
+
:param pulumi.Input[_builtins.bool] skip_import_rotation: Causes vault to skip the initial secret rotation on import. Not applicable to updates.
|
|
343
|
+
Requires Vault 1.16 or above.
|
|
344
|
+
:param pulumi.Input[_builtins.str] username: The username of the existing LDAP entry to manage password rotation for.
|
|
345
|
+
"""
|
|
346
|
+
...
|
|
347
|
+
@overload
|
|
348
|
+
def __init__(__self__,
|
|
349
|
+
resource_name: str,
|
|
350
|
+
args: SecretBackendStaticRoleArgs,
|
|
351
|
+
opts: Optional[pulumi.ResourceOptions] = None):
|
|
352
|
+
"""
|
|
353
|
+
## Example Usage
|
|
354
|
+
|
|
355
|
+
```python
|
|
356
|
+
import pulumi
|
|
357
|
+
import pulumi_vault as vault
|
|
358
|
+
|
|
359
|
+
config = vault.ldap.SecretBackend("config",
|
|
360
|
+
path="my-custom-ldap",
|
|
361
|
+
binddn="CN=Administrator,CN=Users,DC=corp,DC=example,DC=net",
|
|
362
|
+
bindpass="SuperSecretPassw0rd",
|
|
363
|
+
url="ldaps://localhost",
|
|
364
|
+
insecure_tls=True,
|
|
365
|
+
userdn="CN=Users,DC=corp,DC=example,DC=net")
|
|
366
|
+
role = vault.ldap.SecretBackendStaticRole("role",
|
|
367
|
+
mount=config.path,
|
|
368
|
+
username="alice",
|
|
369
|
+
dn="cn=alice,ou=Users,DC=corp,DC=example,DC=net",
|
|
370
|
+
role_name="alice",
|
|
371
|
+
rotation_period=60)
|
|
372
|
+
```
|
|
373
|
+
|
|
374
|
+
## Import
|
|
375
|
+
|
|
376
|
+
LDAP secret backend static role can be imported using the full path to the role
|
|
377
|
+
of the form: `<mount_path>/static-role/<role_name>` e.g.
|
|
378
|
+
|
|
379
|
+
```sh
|
|
380
|
+
$ pulumi import vault:ldap/secretBackendStaticRole:SecretBackendStaticRole role ldap/static-role/example-role
|
|
381
|
+
```
|
|
382
|
+
|
|
383
|
+
:param str resource_name: The name of the resource.
|
|
384
|
+
:param SecretBackendStaticRoleArgs args: The arguments to use to populate this resource's properties.
|
|
385
|
+
:param pulumi.ResourceOptions opts: Options for the resource.
|
|
386
|
+
"""
|
|
387
|
+
...
|
|
388
|
+
def __init__(__self__, resource_name: str, *args, **kwargs):
|
|
389
|
+
resource_args, opts = _utilities.get_resource_args_opts(SecretBackendStaticRoleArgs, pulumi.ResourceOptions, *args, **kwargs)
|
|
390
|
+
if resource_args is not None:
|
|
391
|
+
__self__._internal_init(resource_name, opts, **resource_args.__dict__)
|
|
392
|
+
else:
|
|
393
|
+
__self__._internal_init(resource_name, *args, **kwargs)
|
|
394
|
+
|
|
395
|
+
def _internal_init(__self__,
|
|
396
|
+
resource_name: str,
|
|
397
|
+
opts: Optional[pulumi.ResourceOptions] = None,
|
|
398
|
+
dn: Optional[pulumi.Input[_builtins.str]] = None,
|
|
399
|
+
mount: Optional[pulumi.Input[_builtins.str]] = None,
|
|
400
|
+
namespace: Optional[pulumi.Input[_builtins.str]] = None,
|
|
401
|
+
role_name: Optional[pulumi.Input[_builtins.str]] = None,
|
|
402
|
+
rotation_period: Optional[pulumi.Input[_builtins.int]] = None,
|
|
403
|
+
skip_import_rotation: Optional[pulumi.Input[_builtins.bool]] = None,
|
|
404
|
+
username: Optional[pulumi.Input[_builtins.str]] = None,
|
|
405
|
+
__props__=None):
|
|
406
|
+
opts = pulumi.ResourceOptions.merge(_utilities.get_resource_opts_defaults(), opts)
|
|
407
|
+
if not isinstance(opts, pulumi.ResourceOptions):
|
|
408
|
+
raise TypeError('Expected resource options to be a ResourceOptions instance')
|
|
409
|
+
if opts.id is None:
|
|
410
|
+
if __props__ is not None:
|
|
411
|
+
raise TypeError('__props__ is only valid when passed in combination with a valid opts.id to get an existing resource')
|
|
412
|
+
__props__ = SecretBackendStaticRoleArgs.__new__(SecretBackendStaticRoleArgs)
|
|
413
|
+
|
|
414
|
+
__props__.__dict__["dn"] = dn
|
|
415
|
+
__props__.__dict__["mount"] = mount
|
|
416
|
+
__props__.__dict__["namespace"] = namespace
|
|
417
|
+
if role_name is None and not opts.urn:
|
|
418
|
+
raise TypeError("Missing required property 'role_name'")
|
|
419
|
+
__props__.__dict__["role_name"] = role_name
|
|
420
|
+
if rotation_period is None and not opts.urn:
|
|
421
|
+
raise TypeError("Missing required property 'rotation_period'")
|
|
422
|
+
__props__.__dict__["rotation_period"] = rotation_period
|
|
423
|
+
__props__.__dict__["skip_import_rotation"] = skip_import_rotation
|
|
424
|
+
if username is None and not opts.urn:
|
|
425
|
+
raise TypeError("Missing required property 'username'")
|
|
426
|
+
__props__.__dict__["username"] = username
|
|
427
|
+
super(SecretBackendStaticRole, __self__).__init__(
|
|
428
|
+
'vault:ldap/secretBackendStaticRole:SecretBackendStaticRole',
|
|
429
|
+
resource_name,
|
|
430
|
+
__props__,
|
|
431
|
+
opts)
|
|
432
|
+
|
|
433
|
+
@staticmethod
|
|
434
|
+
def get(resource_name: str,
|
|
435
|
+
id: pulumi.Input[str],
|
|
436
|
+
opts: Optional[pulumi.ResourceOptions] = None,
|
|
437
|
+
dn: Optional[pulumi.Input[_builtins.str]] = None,
|
|
438
|
+
mount: Optional[pulumi.Input[_builtins.str]] = None,
|
|
439
|
+
namespace: Optional[pulumi.Input[_builtins.str]] = None,
|
|
440
|
+
role_name: Optional[pulumi.Input[_builtins.str]] = None,
|
|
441
|
+
rotation_period: Optional[pulumi.Input[_builtins.int]] = None,
|
|
442
|
+
skip_import_rotation: Optional[pulumi.Input[_builtins.bool]] = None,
|
|
443
|
+
username: Optional[pulumi.Input[_builtins.str]] = None) -> 'SecretBackendStaticRole':
|
|
444
|
+
"""
|
|
445
|
+
Get an existing SecretBackendStaticRole resource's state with the given name, id, and optional extra
|
|
446
|
+
properties used to qualify the lookup.
|
|
447
|
+
|
|
448
|
+
:param str resource_name: The unique name of the resulting resource.
|
|
449
|
+
:param pulumi.Input[str] id: The unique provider ID of the resource to lookup.
|
|
450
|
+
:param pulumi.ResourceOptions opts: Options for the resource.
|
|
451
|
+
:param pulumi.Input[_builtins.str] dn: Distinguished name (DN) of the existing LDAP entry to manage
|
|
452
|
+
password rotation for. If given, it will take precedence over `username` for the LDAP
|
|
453
|
+
search performed during password rotation. Cannot be modified after creation.
|
|
454
|
+
:param pulumi.Input[_builtins.str] mount: The unique path this backend should be mounted at. Must
|
|
455
|
+
not begin or end with a `/`. Defaults to `ldap`.
|
|
456
|
+
:param pulumi.Input[_builtins.str] namespace: The namespace to provision the resource in.
|
|
457
|
+
The value should not contain leading or trailing forward slashes.
|
|
458
|
+
The `namespace` is always relative to the provider's configured [namespace](https://www.terraform.io/docs/providers/vault/index.html#namespace).
|
|
459
|
+
*Available only for Vault Enterprise*.
|
|
460
|
+
:param pulumi.Input[_builtins.str] role_name: Name of the role.
|
|
461
|
+
:param pulumi.Input[_builtins.int] rotation_period: How often Vault should rotate the password of the user entry.
|
|
462
|
+
:param pulumi.Input[_builtins.bool] skip_import_rotation: Causes vault to skip the initial secret rotation on import. Not applicable to updates.
|
|
463
|
+
Requires Vault 1.16 or above.
|
|
464
|
+
:param pulumi.Input[_builtins.str] username: The username of the existing LDAP entry to manage password rotation for.
|
|
465
|
+
"""
|
|
466
|
+
opts = pulumi.ResourceOptions.merge(opts, pulumi.ResourceOptions(id=id))
|
|
467
|
+
|
|
468
|
+
__props__ = _SecretBackendStaticRoleState.__new__(_SecretBackendStaticRoleState)
|
|
469
|
+
|
|
470
|
+
__props__.__dict__["dn"] = dn
|
|
471
|
+
__props__.__dict__["mount"] = mount
|
|
472
|
+
__props__.__dict__["namespace"] = namespace
|
|
473
|
+
__props__.__dict__["role_name"] = role_name
|
|
474
|
+
__props__.__dict__["rotation_period"] = rotation_period
|
|
475
|
+
__props__.__dict__["skip_import_rotation"] = skip_import_rotation
|
|
476
|
+
__props__.__dict__["username"] = username
|
|
477
|
+
return SecretBackendStaticRole(resource_name, opts=opts, __props__=__props__)
|
|
478
|
+
|
|
479
|
+
@_builtins.property
|
|
480
|
+
@pulumi.getter
|
|
481
|
+
def dn(self) -> pulumi.Output[Optional[_builtins.str]]:
|
|
482
|
+
"""
|
|
483
|
+
Distinguished name (DN) of the existing LDAP entry to manage
|
|
484
|
+
password rotation for. If given, it will take precedence over `username` for the LDAP
|
|
485
|
+
search performed during password rotation. Cannot be modified after creation.
|
|
486
|
+
"""
|
|
487
|
+
return pulumi.get(self, "dn")
|
|
488
|
+
|
|
489
|
+
@_builtins.property
|
|
490
|
+
@pulumi.getter
|
|
491
|
+
def mount(self) -> pulumi.Output[Optional[_builtins.str]]:
|
|
492
|
+
"""
|
|
493
|
+
The unique path this backend should be mounted at. Must
|
|
494
|
+
not begin or end with a `/`. Defaults to `ldap`.
|
|
495
|
+
"""
|
|
496
|
+
return pulumi.get(self, "mount")
|
|
497
|
+
|
|
498
|
+
@_builtins.property
|
|
499
|
+
@pulumi.getter
|
|
500
|
+
def namespace(self) -> pulumi.Output[Optional[_builtins.str]]:
|
|
501
|
+
"""
|
|
502
|
+
The namespace to provision the resource in.
|
|
503
|
+
The value should not contain leading or trailing forward slashes.
|
|
504
|
+
The `namespace` is always relative to the provider's configured [namespace](https://www.terraform.io/docs/providers/vault/index.html#namespace).
|
|
505
|
+
*Available only for Vault Enterprise*.
|
|
506
|
+
"""
|
|
507
|
+
return pulumi.get(self, "namespace")
|
|
508
|
+
|
|
509
|
+
@_builtins.property
|
|
510
|
+
@pulumi.getter(name="roleName")
|
|
511
|
+
def role_name(self) -> pulumi.Output[_builtins.str]:
|
|
512
|
+
"""
|
|
513
|
+
Name of the role.
|
|
514
|
+
"""
|
|
515
|
+
return pulumi.get(self, "role_name")
|
|
516
|
+
|
|
517
|
+
@_builtins.property
|
|
518
|
+
@pulumi.getter(name="rotationPeriod")
|
|
519
|
+
def rotation_period(self) -> pulumi.Output[_builtins.int]:
|
|
520
|
+
"""
|
|
521
|
+
How often Vault should rotate the password of the user entry.
|
|
522
|
+
"""
|
|
523
|
+
return pulumi.get(self, "rotation_period")
|
|
524
|
+
|
|
525
|
+
@_builtins.property
|
|
526
|
+
@pulumi.getter(name="skipImportRotation")
|
|
527
|
+
def skip_import_rotation(self) -> pulumi.Output[Optional[_builtins.bool]]:
|
|
528
|
+
"""
|
|
529
|
+
Causes vault to skip the initial secret rotation on import. Not applicable to updates.
|
|
530
|
+
Requires Vault 1.16 or above.
|
|
531
|
+
"""
|
|
532
|
+
return pulumi.get(self, "skip_import_rotation")
|
|
533
|
+
|
|
534
|
+
@_builtins.property
|
|
535
|
+
@pulumi.getter
|
|
536
|
+
def username(self) -> pulumi.Output[_builtins.str]:
|
|
537
|
+
"""
|
|
538
|
+
The username of the existing LDAP entry to manage password rotation for.
|
|
539
|
+
"""
|
|
540
|
+
return pulumi.get(self, "username")
|
|
541
|
+
|
|
@@ -0,0 +1,11 @@
|
|
|
1
|
+
# coding=utf-8
|
|
2
|
+
# *** WARNING: this file was generated by pulumi-language-python. ***
|
|
3
|
+
# *** Do not edit by hand unless you're certain you know what you are doing! ***
|
|
4
|
+
|
|
5
|
+
import builtins as _builtins
|
|
6
|
+
from .. import _utilities
|
|
7
|
+
import typing
|
|
8
|
+
# Export this package's modules as members:
|
|
9
|
+
from .keys import *
|
|
10
|
+
from ._inputs import *
|
|
11
|
+
from . import outputs
|