pulumi-vault 7.6.0a1764657486__py3-none-any.whl

pulumi_vault/managed/keys.py

@@ -0,0 +1,398 @@
+# coding=utf-8
+# *** WARNING: this file was generated by pulumi-language-python. ***
+# *** Do not edit by hand unless you're certain you know what you are doing! ***
+
+import builtins as _builtins
+import warnings
+import sys
+import pulumi
+import pulumi.runtime
+from typing import Any, Mapping, Optional, Sequence, Union, overload
+if sys.version_info >= (3, 11):
+    from typing import NotRequired, TypedDict, TypeAlias
+else:
+    from typing_extensions import NotRequired, TypedDict, TypeAlias
+from .. import _utilities
+from . import outputs
+from ._inputs import *
+
+__all__ = ['KeysArgs', 'Keys']
+
+@pulumi.input_type
+class KeysArgs:
+    def __init__(__self__, *,
+                 aws: Optional[pulumi.Input[Sequence[pulumi.Input['KeysAwArgs']]]] = None,
+                 azures: Optional[pulumi.Input[Sequence[pulumi.Input['KeysAzureArgs']]]] = None,
+                 namespace: Optional[pulumi.Input[_builtins.str]] = None,
+                 pkcs: Optional[pulumi.Input[Sequence[pulumi.Input['KeysPkcArgs']]]] = None):
+        """
+        The set of arguments for constructing a Keys resource.
+        :param pulumi.Input[Sequence[pulumi.Input['KeysAwArgs']]] aws: Configuration block for AWS Managed Keys
+        :param pulumi.Input[Sequence[pulumi.Input['KeysAzureArgs']]] azures: Configuration block for Azure Managed Keys
+        :param pulumi.Input[_builtins.str] namespace: Target namespace. (requires Enterprise)
+        :param pulumi.Input[Sequence[pulumi.Input['KeysPkcArgs']]] pkcs: Configuration block for PKCS Managed Keys
+        """
+        if aws is not None:
+            pulumi.set(__self__, "aws", aws)
+        if azures is not None:
+            pulumi.set(__self__, "azures", azures)
+        if namespace is not None:
+            pulumi.set(__self__, "namespace", namespace)
+        if pkcs is not None:
+            pulumi.set(__self__, "pkcs", pkcs)
+
+    @_builtins.property
+    @pulumi.getter
+    def aws(self) -> Optional[pulumi.Input[Sequence[pulumi.Input['KeysAwArgs']]]]:
+        """
+        Configuration block for AWS Managed Keys
+        """
+        return pulumi.get(self, "aws")
+
+    @aws.setter
+    def aws(self, value: Optional[pulumi.Input[Sequence[pulumi.Input['KeysAwArgs']]]]):
+        pulumi.set(self, "aws", value)
+
+    @_builtins.property
+    @pulumi.getter
+    def azures(self) -> Optional[pulumi.Input[Sequence[pulumi.Input['KeysAzureArgs']]]]:
+        """
+        Configuration block for Azure Managed Keys
+        """
+        return pulumi.get(self, "azures")
+
+    @azures.setter
+    def azures(self, value: Optional[pulumi.Input[Sequence[pulumi.Input['KeysAzureArgs']]]]):
+        pulumi.set(self, "azures", value)
+
+    @_builtins.property
+    @pulumi.getter
+    def namespace(self) -> Optional[pulumi.Input[_builtins.str]]:
+        """
+        Target namespace. (requires Enterprise)
+        """
+        return pulumi.get(self, "namespace")
+
+    @namespace.setter
+    def namespace(self, value: Optional[pulumi.Input[_builtins.str]]):
+        pulumi.set(self, "namespace", value)
+
+    @_builtins.property
+    @pulumi.getter
+    def pkcs(self) -> Optional[pulumi.Input[Sequence[pulumi.Input['KeysPkcArgs']]]]:
+        """
+        Configuration block for PKCS Managed Keys
+        """
+        return pulumi.get(self, "pkcs")
+
+    @pkcs.setter
+    def pkcs(self, value: Optional[pulumi.Input[Sequence[pulumi.Input['KeysPkcArgs']]]]):
+        pulumi.set(self, "pkcs", value)
+
+
+@pulumi.input_type
+class _KeysState:
+    def __init__(__self__, *,
+                 aws: Optional[pulumi.Input[Sequence[pulumi.Input['KeysAwArgs']]]] = None,
+                 azures: Optional[pulumi.Input[Sequence[pulumi.Input['KeysAzureArgs']]]] = None,
+                 namespace: Optional[pulumi.Input[_builtins.str]] = None,
+                 pkcs: Optional[pulumi.Input[Sequence[pulumi.Input['KeysPkcArgs']]]] = None):
+        """
+        Input properties used for looking up and filtering Keys resources.
+        :param pulumi.Input[Sequence[pulumi.Input['KeysAwArgs']]] aws: Configuration block for AWS Managed Keys
+        :param pulumi.Input[Sequence[pulumi.Input['KeysAzureArgs']]] azures: Configuration block for Azure Managed Keys
+        :param pulumi.Input[_builtins.str] namespace: Target namespace. (requires Enterprise)
+        :param pulumi.Input[Sequence[pulumi.Input['KeysPkcArgs']]] pkcs: Configuration block for PKCS Managed Keys
+        """
+        if aws is not None:
+            pulumi.set(__self__, "aws", aws)
+        if azures is not None:
+            pulumi.set(__self__, "azures", azures)
+        if namespace is not None:
+            pulumi.set(__self__, "namespace", namespace)
+        if pkcs is not None:
+            pulumi.set(__self__, "pkcs", pkcs)
+
+    @_builtins.property
+    @pulumi.getter
+    def aws(self) -> Optional[pulumi.Input[Sequence[pulumi.Input['KeysAwArgs']]]]:
+        """
+        Configuration block for AWS Managed Keys
+        """
+        return pulumi.get(self, "aws")
+
+    @aws.setter
+    def aws(self, value: Optional[pulumi.Input[Sequence[pulumi.Input['KeysAwArgs']]]]):
+        pulumi.set(self, "aws", value)
+
+    @_builtins.property
+    @pulumi.getter
+    def azures(self) -> Optional[pulumi.Input[Sequence[pulumi.Input['KeysAzureArgs']]]]:
+        """
+        Configuration block for Azure Managed Keys
+        """
+        return pulumi.get(self, "azures")
+
+    @azures.setter
+    def azures(self, value: Optional[pulumi.Input[Sequence[pulumi.Input['KeysAzureArgs']]]]):
+        pulumi.set(self, "azures", value)
+
+    @_builtins.property
+    @pulumi.getter
+    def namespace(self) -> Optional[pulumi.Input[_builtins.str]]:
+        """
+        Target namespace. (requires Enterprise)
+        """
+        return pulumi.get(self, "namespace")
+
+    @namespace.setter
+    def namespace(self, value: Optional[pulumi.Input[_builtins.str]]):
+        pulumi.set(self, "namespace", value)
+
+    @_builtins.property
+    @pulumi.getter
+    def pkcs(self) -> Optional[pulumi.Input[Sequence[pulumi.Input['KeysPkcArgs']]]]:
+        """
+        Configuration block for PKCS Managed Keys
+        """
+        return pulumi.get(self, "pkcs")
+
+    @pkcs.setter
+    def pkcs(self, value: Optional[pulumi.Input[Sequence[pulumi.Input['KeysPkcArgs']]]]):
+        pulumi.set(self, "pkcs", value)
+
+
+@pulumi.type_token("vault:managed/keys:Keys")
+class Keys(pulumi.CustomResource):
+    @overload
+    def __init__(__self__,
+                 resource_name: str,
+                 opts: Optional[pulumi.ResourceOptions] = None,
+                 aws: Optional[pulumi.Input[Sequence[pulumi.Input[Union['KeysAwArgs', 'KeysAwArgsDict']]]]] = None,
+                 azures: Optional[pulumi.Input[Sequence[pulumi.Input[Union['KeysAzureArgs', 'KeysAzureArgsDict']]]]] = None,
+                 namespace: Optional[pulumi.Input[_builtins.str]] = None,
+                 pkcs: Optional[pulumi.Input[Sequence[pulumi.Input[Union['KeysPkcArgs', 'KeysPkcArgsDict']]]]] = None,
+                 __props__=None):
+        """
+        A resource that manages the lifecycle of all [Managed Keys](https://www.vaultproject.io/docs/enterprise/managed-keys) in Vault.
+
+        **Note** this feature is available only with Vault Enterprise.
+
+        ## Example Usage
+
+        ```python
+        import pulumi
+        import pulumi_vault as vault
+
+        keys = vault.managed.Keys("keys", aws=[
+            {
+                "name": "aws-key-1",
+                "access_key": aws_access_key,
+                "secret_key": aws_secret_key,
+                "key_bits": "2048",
+                "key_type": "RSA",
+                "kms_key": "alias/vault_aws_key_1",
+            },
+            {
+                "name": "aws-key-2",
+                "access_key": aws_access_key,
+                "secret_key": aws_secret_key,
+                "key_bits": "4096",
+                "key_type": "RSA",
+                "kms_key": "alias/vault_aws_key_2",
+            },
+        ])
+        pki = vault.Mount("pki",
+            path="pki",
+            type="pki",
+            description="Example mount for managed keys",
+            default_lease_ttl_seconds=3600,
+            max_lease_ttl_seconds=36000,
+            allowed_managed_keys=[
+                keys.aws[0].name,
+                keys.aws[1].name,
+            ])
+        ```
+
+        ## Caveats
+
+        This single resource handles the lifecycle of _all_ the managed keys that must be created in Vault.
+        There can only be one such resource in the TF state, and if there are already provisioned managed
+        keys in Vault, we recommend using `pulumi import` instead.
+
+        ## Import
+
+        Mounts can be imported using the `id` of `default`, e.g.
+
+        ```sh
+        $ pulumi import vault:managed/keys:Keys keys default
+        ```
+
+        :param str resource_name: The name of the resource.
+        :param pulumi.ResourceOptions opts: Options for the resource.
+        :param pulumi.Input[Sequence[pulumi.Input[Union['KeysAwArgs', 'KeysAwArgsDict']]]] aws: Configuration block for AWS Managed Keys
+        :param pulumi.Input[Sequence[pulumi.Input[Union['KeysAzureArgs', 'KeysAzureArgsDict']]]] azures: Configuration block for Azure Managed Keys
+        :param pulumi.Input[_builtins.str] namespace: Target namespace. (requires Enterprise)
+        :param pulumi.Input[Sequence[pulumi.Input[Union['KeysPkcArgs', 'KeysPkcArgsDict']]]] pkcs: Configuration block for PKCS Managed Keys
+        """
+        ...
+    @overload
+    def __init__(__self__,
+                 resource_name: str,
+                 args: Optional[KeysArgs] = None,
+                 opts: Optional[pulumi.ResourceOptions] = None):
+        """
+        A resource that manages the lifecycle of all [Managed Keys](https://www.vaultproject.io/docs/enterprise/managed-keys) in Vault.
+
+        **Note** this feature is available only with Vault Enterprise.
+
+        ## Example Usage
+
+        ```python
+        import pulumi
+        import pulumi_vault as vault
+
+        keys = vault.managed.Keys("keys", aws=[
+            {
+                "name": "aws-key-1",
+                "access_key": aws_access_key,
+                "secret_key": aws_secret_key,
+                "key_bits": "2048",
+                "key_type": "RSA",
+                "kms_key": "alias/vault_aws_key_1",
+            },
+            {
+                "name": "aws-key-2",
+                "access_key": aws_access_key,
+                "secret_key": aws_secret_key,
+                "key_bits": "4096",
+                "key_type": "RSA",
+                "kms_key": "alias/vault_aws_key_2",
+            },
+        ])
+        pki = vault.Mount("pki",
+            path="pki",
+            type="pki",
+            description="Example mount for managed keys",
+            default_lease_ttl_seconds=3600,
+            max_lease_ttl_seconds=36000,
+            allowed_managed_keys=[
+                keys.aws[0].name,
+                keys.aws[1].name,
+            ])
+        ```
+
+        ## Caveats
+
+        This single resource handles the lifecycle of _all_ the managed keys that must be created in Vault.
+        There can only be one such resource in the TF state, and if there are already provisioned managed
+        keys in Vault, we recommend using `pulumi import` instead.
+
+        ## Import
+
+        Mounts can be imported using the `id` of `default`, e.g.
+
+        ```sh
+        $ pulumi import vault:managed/keys:Keys keys default
+        ```
+
+        :param str resource_name: The name of the resource.
+        :param KeysArgs args: The arguments to use to populate this resource's properties.
+        :param pulumi.ResourceOptions opts: Options for the resource.
+        """
+        ...
+    def __init__(__self__, resource_name: str, *args, **kwargs):
+        resource_args, opts = _utilities.get_resource_args_opts(KeysArgs, pulumi.ResourceOptions, *args, **kwargs)
+        if resource_args is not None:
+            __self__._internal_init(resource_name, opts, **resource_args.__dict__)
+        else:
+            __self__._internal_init(resource_name, *args, **kwargs)
+
+    def _internal_init(__self__,
+                 resource_name: str,
+                 opts: Optional[pulumi.ResourceOptions] = None,
+                 aws: Optional[pulumi.Input[Sequence[pulumi.Input[Union['KeysAwArgs', 'KeysAwArgsDict']]]]] = None,
+                 azures: Optional[pulumi.Input[Sequence[pulumi.Input[Union['KeysAzureArgs', 'KeysAzureArgsDict']]]]] = None,
+                 namespace: Optional[pulumi.Input[_builtins.str]] = None,
+                 pkcs: Optional[pulumi.Input[Sequence[pulumi.Input[Union['KeysPkcArgs', 'KeysPkcArgsDict']]]]] = None,
+                 __props__=None):
+        opts = pulumi.ResourceOptions.merge(_utilities.get_resource_opts_defaults(), opts)
+        if not isinstance(opts, pulumi.ResourceOptions):
+            raise TypeError('Expected resource options to be a ResourceOptions instance')
+        if opts.id is None:
+            if __props__ is not None:
+                raise TypeError('__props__ is only valid when passed in combination with a valid opts.id to get an existing resource')
+            __props__ = KeysArgs.__new__(KeysArgs)
+
+            __props__.__dict__["aws"] = aws
+            __props__.__dict__["azures"] = azures
+            __props__.__dict__["namespace"] = namespace
+            __props__.__dict__["pkcs"] = pkcs
+        super(Keys, __self__).__init__(
+            'vault:managed/keys:Keys',
+            resource_name,
+            __props__,
+            opts)
+
+    @staticmethod
+    def get(resource_name: str,
+            id: pulumi.Input[str],
+            opts: Optional[pulumi.ResourceOptions] = None,
+            aws: Optional[pulumi.Input[Sequence[pulumi.Input[Union['KeysAwArgs', 'KeysAwArgsDict']]]]] = None,
+            azures: Optional[pulumi.Input[Sequence[pulumi.Input[Union['KeysAzureArgs', 'KeysAzureArgsDict']]]]] = None,
+            namespace: Optional[pulumi.Input[_builtins.str]] = None,
+            pkcs: Optional[pulumi.Input[Sequence[pulumi.Input[Union['KeysPkcArgs', 'KeysPkcArgsDict']]]]] = None) -> 'Keys':
+        """
+        Get an existing Keys resource's state with the given name, id, and optional extra
+        properties used to qualify the lookup.
+
+        :param str resource_name: The unique name of the resulting resource.
+        :param pulumi.Input[str] id: The unique provider ID of the resource to lookup.
+        :param pulumi.ResourceOptions opts: Options for the resource.
+        :param pulumi.Input[Sequence[pulumi.Input[Union['KeysAwArgs', 'KeysAwArgsDict']]]] aws: Configuration block for AWS Managed Keys
+        :param pulumi.Input[Sequence[pulumi.Input[Union['KeysAzureArgs', 'KeysAzureArgsDict']]]] azures: Configuration block for Azure Managed Keys
+        :param pulumi.Input[_builtins.str] namespace: Target namespace. (requires Enterprise)
+        :param pulumi.Input[Sequence[pulumi.Input[Union['KeysPkcArgs', 'KeysPkcArgsDict']]]] pkcs: Configuration block for PKCS Managed Keys
+        """
+        opts = pulumi.ResourceOptions.merge(opts, pulumi.ResourceOptions(id=id))
+
+        __props__ = _KeysState.__new__(_KeysState)
+
+        __props__.__dict__["aws"] = aws
+        __props__.__dict__["azures"] = azures
+        __props__.__dict__["namespace"] = namespace
+        __props__.__dict__["pkcs"] = pkcs
+        return Keys(resource_name, opts=opts, __props__=__props__)
+
+    @_builtins.property
+    @pulumi.getter
+    def aws(self) -> pulumi.Output[Optional[Sequence['outputs.KeysAw']]]:
+        """
+        Configuration block for AWS Managed Keys
+        """
+        return pulumi.get(self, "aws")
+
+    @_builtins.property
+    @pulumi.getter
+    def azures(self) -> pulumi.Output[Optional[Sequence['outputs.KeysAzure']]]:
+        """
+        Configuration block for Azure Managed Keys
+        """
+        return pulumi.get(self, "azures")
+
+    @_builtins.property
+    @pulumi.getter
+    def namespace(self) -> pulumi.Output[Optional[_builtins.str]]:
+        """
+        Target namespace. (requires Enterprise)
+        """
+        return pulumi.get(self, "namespace")
+
+    @_builtins.property
+    @pulumi.getter
+    def pkcs(self) -> pulumi.Output[Optional[Sequence['outputs.KeysPkc']]]:
+        """
+        Configuration block for PKCS Managed Keys
+        """
+        return pulumi.get(self, "pkcs")
+