PyPI - pulumi-vault - Versions diffs - 7.6.0a1764657486__py3-none-any.whl - Mend

pulumi-vault 7.6.0a1764657486__py3-none-any.whl

This diff represents the content of publicly available package versions that have been released to one of the supported registries. The information contained in this diff is provided for informational purposes only and reflects changes between package versions as they appear in their respective public registries.

Files changed (274) hide show

pulumi_vault/__init__.py +1399 -0
pulumi_vault/_inputs.py +2701 -0
pulumi_vault/_utilities.py +331 -0
pulumi_vault/ad/__init__.py +12 -0
pulumi_vault/ad/get_access_credentials.py +177 -0
pulumi_vault/ad/secret_backend.py +1916 -0
pulumi_vault/ad/secret_library.py +546 -0
pulumi_vault/ad/secret_role.py +499 -0
pulumi_vault/alicloud/__init__.py +9 -0
pulumi_vault/alicloud/auth_backend_role.py +866 -0
pulumi_vault/approle/__init__.py +12 -0
pulumi_vault/approle/auth_backend_login.py +571 -0
pulumi_vault/approle/auth_backend_role.py +1082 -0
pulumi_vault/approle/auth_backend_role_secret_id.py +796 -0
pulumi_vault/approle/get_auth_backend_role_id.py +169 -0
pulumi_vault/audit.py +499 -0
pulumi_vault/audit_request_header.py +277 -0
pulumi_vault/auth_backend.py +565 -0
pulumi_vault/aws/__init__.py +22 -0
pulumi_vault/aws/auth_backend_cert.py +420 -0
pulumi_vault/aws/auth_backend_client.py +1259 -0
pulumi_vault/aws/auth_backend_config_identity.py +494 -0
pulumi_vault/aws/auth_backend_identity_whitelist.py +380 -0
pulumi_vault/aws/auth_backend_login.py +1046 -0
pulumi_vault/aws/auth_backend_role.py +1961 -0
pulumi_vault/aws/auth_backend_role_tag.py +638 -0
pulumi_vault/aws/auth_backend_roletag_blacklist.py +366 -0
pulumi_vault/aws/auth_backend_sts_role.py +414 -0
pulumi_vault/aws/get_access_credentials.py +369 -0
pulumi_vault/aws/get_static_access_credentials.py +137 -0
pulumi_vault/aws/secret_backend.py +2018 -0
pulumi_vault/aws/secret_backend_role.py +1188 -0
pulumi_vault/aws/secret_backend_static_role.py +639 -0
pulumi_vault/azure/__init__.py +15 -0
pulumi_vault/azure/_inputs.py +108 -0
pulumi_vault/azure/auth_backend_config.py +1096 -0
pulumi_vault/azure/auth_backend_role.py +1176 -0
pulumi_vault/azure/backend.py +1793 -0
pulumi_vault/azure/backend_role.py +883 -0
pulumi_vault/azure/get_access_credentials.py +400 -0
pulumi_vault/azure/outputs.py +107 -0
pulumi_vault/cert_auth_backend_role.py +1539 -0
pulumi_vault/config/__init__.py +9 -0
pulumi_vault/config/__init__.pyi +164 -0
pulumi_vault/config/_inputs.py +73 -0
pulumi_vault/config/outputs.py +1225 -0
pulumi_vault/config/ui_custom_message.py +530 -0
pulumi_vault/config/vars.py +230 -0
pulumi_vault/consul/__init__.py +10 -0
pulumi_vault/consul/secret_backend.py +1517 -0
pulumi_vault/consul/secret_backend_role.py +847 -0
pulumi_vault/database/__init__.py +14 -0
pulumi_vault/database/_inputs.py +11907 -0
pulumi_vault/database/outputs.py +8496 -0
pulumi_vault/database/secret_backend_connection.py +1676 -0
pulumi_vault/database/secret_backend_role.py +840 -0
pulumi_vault/database/secret_backend_static_role.py +881 -0
pulumi_vault/database/secrets_mount.py +2160 -0
pulumi_vault/egp_policy.py +399 -0
pulumi_vault/gcp/__init__.py +17 -0
pulumi_vault/gcp/_inputs.py +441 -0
pulumi_vault/gcp/auth_backend.py +1486 -0
pulumi_vault/gcp/auth_backend_role.py +1235 -0
pulumi_vault/gcp/get_auth_backend_role.py +514 -0
pulumi_vault/gcp/outputs.py +302 -0
pulumi_vault/gcp/secret_backend.py +1807 -0
pulumi_vault/gcp/secret_impersonated_account.py +484 -0
pulumi_vault/gcp/secret_roleset.py +554 -0
pulumi_vault/gcp/secret_static_account.py +557 -0
pulumi_vault/generic/__init__.py +11 -0
pulumi_vault/generic/endpoint.py +786 -0
pulumi_vault/generic/get_secret.py +306 -0
pulumi_vault/generic/secret.py +486 -0
pulumi_vault/get_auth_backend.py +226 -0
pulumi_vault/get_auth_backends.py +170 -0
pulumi_vault/get_namespace.py +226 -0
pulumi_vault/get_namespaces.py +202 -0
pulumi_vault/get_nomad_access_token.py +210 -0
pulumi_vault/get_policy_document.py +160 -0
pulumi_vault/get_raft_autopilot_state.py +267 -0
pulumi_vault/github/__init__.py +13 -0
pulumi_vault/github/_inputs.py +225 -0
pulumi_vault/github/auth_backend.py +1194 -0
pulumi_vault/github/outputs.py +174 -0
pulumi_vault/github/team.py +380 -0
pulumi_vault/github/user.py +380 -0
pulumi_vault/identity/__init__.py +35 -0
pulumi_vault/identity/entity.py +447 -0
pulumi_vault/identity/entity_alias.py +398 -0
pulumi_vault/identity/entity_policies.py +455 -0
pulumi_vault/identity/get_entity.py +384 -0
pulumi_vault/identity/get_group.py +467 -0
pulumi_vault/identity/get_oidc_client_creds.py +175 -0
pulumi_vault/identity/get_oidc_openid_config.py +334 -0
pulumi_vault/identity/get_oidc_public_keys.py +179 -0
pulumi_vault/identity/group.py +805 -0
pulumi_vault/identity/group_alias.py +386 -0
pulumi_vault/identity/group_member_entity_ids.py +444 -0
pulumi_vault/identity/group_member_group_ids.py +467 -0
pulumi_vault/identity/group_policies.py +471 -0
pulumi_vault/identity/mfa_duo.py +674 -0
pulumi_vault/identity/mfa_login_enforcement.py +566 -0
pulumi_vault/identity/mfa_okta.py +626 -0
pulumi_vault/identity/mfa_pingid.py +616 -0
pulumi_vault/identity/mfa_totp.py +758 -0
pulumi_vault/identity/oidc.py +268 -0
pulumi_vault/identity/oidc_assignment.py +375 -0
pulumi_vault/identity/oidc_client.py +667 -0
pulumi_vault/identity/oidc_key.py +474 -0
pulumi_vault/identity/oidc_key_allowed_client_id.py +298 -0
pulumi_vault/identity/oidc_provider.py +550 -0
pulumi_vault/identity/oidc_role.py +543 -0
pulumi_vault/identity/oidc_scope.py +355 -0
pulumi_vault/identity/outputs.py +137 -0
pulumi_vault/jwt/__init__.py +12 -0
pulumi_vault/jwt/_inputs.py +225 -0
pulumi_vault/jwt/auth_backend.py +1347 -0
pulumi_vault/jwt/auth_backend_role.py +1847 -0
pulumi_vault/jwt/outputs.py +174 -0
pulumi_vault/kmip/__init__.py +11 -0
pulumi_vault/kmip/secret_backend.py +1591 -0
pulumi_vault/kmip/secret_role.py +1194 -0
pulumi_vault/kmip/secret_scope.py +372 -0
pulumi_vault/kubernetes/__init__.py +15 -0
pulumi_vault/kubernetes/auth_backend_config.py +654 -0
pulumi_vault/kubernetes/auth_backend_role.py +1031 -0
pulumi_vault/kubernetes/get_auth_backend_config.py +280 -0
pulumi_vault/kubernetes/get_auth_backend_role.py +470 -0
pulumi_vault/kubernetes/get_service_account_token.py +344 -0
pulumi_vault/kubernetes/secret_backend.py +1341 -0
pulumi_vault/kubernetes/secret_backend_role.py +1140 -0
pulumi_vault/kv/__init__.py +18 -0
pulumi_vault/kv/_inputs.py +124 -0
pulumi_vault/kv/get_secret.py +240 -0
pulumi_vault/kv/get_secret_subkeys_v2.py +275 -0
pulumi_vault/kv/get_secret_v2.py +315 -0
pulumi_vault/kv/get_secrets_list.py +186 -0
pulumi_vault/kv/get_secrets_list_v2.py +243 -0
pulumi_vault/kv/outputs.py +102 -0
pulumi_vault/kv/secret.py +397 -0
pulumi_vault/kv/secret_backend_v2.py +455 -0
pulumi_vault/kv/secret_v2.py +970 -0
pulumi_vault/ldap/__init__.py +19 -0
pulumi_vault/ldap/_inputs.py +225 -0
pulumi_vault/ldap/auth_backend.py +2520 -0
pulumi_vault/ldap/auth_backend_group.py +386 -0
pulumi_vault/ldap/auth_backend_user.py +439 -0
pulumi_vault/ldap/get_dynamic_credentials.py +181 -0
pulumi_vault/ldap/get_static_credentials.py +192 -0
pulumi_vault/ldap/outputs.py +174 -0
pulumi_vault/ldap/secret_backend.py +2207 -0
pulumi_vault/ldap/secret_backend_dynamic_role.py +767 -0
pulumi_vault/ldap/secret_backend_library_set.py +552 -0
pulumi_vault/ldap/secret_backend_static_role.py +541 -0
pulumi_vault/managed/__init__.py +11 -0
pulumi_vault/managed/_inputs.py +944 -0
pulumi_vault/managed/keys.py +398 -0
pulumi_vault/managed/outputs.py +667 -0
pulumi_vault/mfa_duo.py +589 -0
pulumi_vault/mfa_okta.py +623 -0
pulumi_vault/mfa_pingid.py +670 -0
pulumi_vault/mfa_totp.py +620 -0
pulumi_vault/mongodbatlas/__init__.py +10 -0
pulumi_vault/mongodbatlas/secret_backend.py +388 -0
pulumi_vault/mongodbatlas/secret_role.py +726 -0
pulumi_vault/mount.py +1262 -0
pulumi_vault/namespace.py +452 -0
pulumi_vault/nomad_secret_backend.py +1559 -0
pulumi_vault/nomad_secret_role.py +489 -0
pulumi_vault/oci_auth_backend.py +676 -0
pulumi_vault/oci_auth_backend_role.py +852 -0
pulumi_vault/okta/__init__.py +13 -0
pulumi_vault/okta/_inputs.py +320 -0
pulumi_vault/okta/auth_backend.py +1231 -0
pulumi_vault/okta/auth_backend_group.py +369 -0
pulumi_vault/okta/auth_backend_user.py +416 -0
pulumi_vault/okta/outputs.py +244 -0
pulumi_vault/outputs.py +502 -0
pulumi_vault/pkisecret/__init__.py +38 -0
pulumi_vault/pkisecret/_inputs.py +270 -0
pulumi_vault/pkisecret/backend_acme_eab.py +550 -0
pulumi_vault/pkisecret/backend_config_acme.py +690 -0
pulumi_vault/pkisecret/backend_config_auto_tidy.py +1370 -0
pulumi_vault/pkisecret/backend_config_cluster.py +370 -0
pulumi_vault/pkisecret/backend_config_cmpv2.py +693 -0
pulumi_vault/pkisecret/backend_config_est.py +756 -0
pulumi_vault/pkisecret/backend_config_scep.py +738 -0
pulumi_vault/pkisecret/get_backend_cert_metadata.py +277 -0
pulumi_vault/pkisecret/get_backend_config_cmpv2.py +226 -0
pulumi_vault/pkisecret/get_backend_config_est.py +251 -0
pulumi_vault/pkisecret/get_backend_config_scep.py +271 -0
pulumi_vault/pkisecret/get_backend_issuer.py +395 -0
pulumi_vault/pkisecret/get_backend_issuers.py +192 -0
pulumi_vault/pkisecret/get_backend_key.py +211 -0
pulumi_vault/pkisecret/get_backend_keys.py +192 -0
pulumi_vault/pkisecret/outputs.py +270 -0
pulumi_vault/pkisecret/secret_backend_cert.py +1315 -0
pulumi_vault/pkisecret/secret_backend_config_ca.py +386 -0
pulumi_vault/pkisecret/secret_backend_config_issuers.py +392 -0
pulumi_vault/pkisecret/secret_backend_config_urls.py +462 -0
pulumi_vault/pkisecret/secret_backend_crl_config.py +846 -0
pulumi_vault/pkisecret/secret_backend_intermediate_cert_request.py +1629 -0
pulumi_vault/pkisecret/secret_backend_intermediate_set_signed.py +444 -0
pulumi_vault/pkisecret/secret_backend_issuer.py +1089 -0
pulumi_vault/pkisecret/secret_backend_key.py +613 -0
pulumi_vault/pkisecret/secret_backend_role.py +2694 -0
pulumi_vault/pkisecret/secret_backend_root_cert.py +2134 -0
pulumi_vault/pkisecret/secret_backend_root_sign_intermediate.py +2031 -0
pulumi_vault/pkisecret/secret_backend_sign.py +1194 -0
pulumi_vault/plugin.py +596 -0
pulumi_vault/plugin_pinned_version.py +299 -0
pulumi_vault/policy.py +279 -0
pulumi_vault/provider.py +781 -0
pulumi_vault/pulumi-plugin.json +5 -0
pulumi_vault/py.typed +0 -0
pulumi_vault/quota_lease_count.py +504 -0
pulumi_vault/quota_rate_limit.py +751 -0
pulumi_vault/rabbitmq/__init__.py +12 -0
pulumi_vault/rabbitmq/_inputs.py +235 -0
pulumi_vault/rabbitmq/outputs.py +144 -0
pulumi_vault/rabbitmq/secret_backend.py +1437 -0
pulumi_vault/rabbitmq/secret_backend_role.py +496 -0
pulumi_vault/raft_autopilot.py +609 -0
pulumi_vault/raft_snapshot_agent_config.py +1591 -0
pulumi_vault/rgp_policy.py +349 -0
pulumi_vault/saml/__init__.py +12 -0
pulumi_vault/saml/_inputs.py +225 -0
pulumi_vault/saml/auth_backend.py +811 -0
pulumi_vault/saml/auth_backend_role.py +1068 -0
pulumi_vault/saml/outputs.py +174 -0
pulumi_vault/scep_auth_backend_role.py +908 -0
pulumi_vault/secrets/__init__.py +18 -0
pulumi_vault/secrets/_inputs.py +110 -0
pulumi_vault/secrets/outputs.py +94 -0
pulumi_vault/secrets/sync_association.py +450 -0
pulumi_vault/secrets/sync_aws_destination.py +780 -0
pulumi_vault/secrets/sync_azure_destination.py +736 -0
pulumi_vault/secrets/sync_config.py +303 -0
pulumi_vault/secrets/sync_gcp_destination.py +572 -0
pulumi_vault/secrets/sync_gh_destination.py +688 -0
pulumi_vault/secrets/sync_github_apps.py +376 -0
pulumi_vault/secrets/sync_vercel_destination.py +603 -0
pulumi_vault/ssh/__init__.py +13 -0
pulumi_vault/ssh/_inputs.py +76 -0
pulumi_vault/ssh/get_secret_backend_sign.py +294 -0
pulumi_vault/ssh/outputs.py +51 -0
pulumi_vault/ssh/secret_backend_ca.py +588 -0
pulumi_vault/ssh/secret_backend_role.py +1493 -0
pulumi_vault/terraformcloud/__init__.py +11 -0
pulumi_vault/terraformcloud/secret_backend.py +1321 -0
pulumi_vault/terraformcloud/secret_creds.py +445 -0
pulumi_vault/terraformcloud/secret_role.py +563 -0
pulumi_vault/token.py +1026 -0
pulumi_vault/tokenauth/__init__.py +9 -0
pulumi_vault/tokenauth/auth_backend_role.py +1135 -0
pulumi_vault/transform/__init__.py +14 -0
pulumi_vault/transform/alphabet.py +348 -0
pulumi_vault/transform/get_decode.py +287 -0
pulumi_vault/transform/get_encode.py +291 -0
pulumi_vault/transform/role.py +350 -0
pulumi_vault/transform/template.py +592 -0
pulumi_vault/transform/transformation.py +608 -0
pulumi_vault/transit/__init__.py +15 -0
pulumi_vault/transit/get_cmac.py +256 -0
pulumi_vault/transit/get_decrypt.py +181 -0
pulumi_vault/transit/get_encrypt.py +174 -0
pulumi_vault/transit/get_sign.py +328 -0
pulumi_vault/transit/get_verify.py +373 -0
pulumi_vault/transit/secret_backend_key.py +1202 -0
pulumi_vault/transit/secret_cache_config.py +302 -0
pulumi_vault-7.6.0a1764657486.dist-info/METADATA +92 -0
pulumi_vault-7.6.0a1764657486.dist-info/RECORD +274 -0
pulumi_vault-7.6.0a1764657486.dist-info/WHEEL +5 -0
pulumi_vault-7.6.0a1764657486.dist-info/top_level.txt +1 -0

pulumi_vault/pkisecret/secret_backend_issuer.py ADDED Viewed

@@ -0,0 +1,1089 @@
+# coding=utf-8
+# *** WARNING: this file was generated by pulumi-language-python. ***
+# *** Do not edit by hand unless you're certain you know what you are doing! ***
+import builtins as _builtins
+import warnings
+import sys
+import pulumi
+import pulumi.runtime
+from typing import Any, Mapping, Optional, Sequence, Union, overload
+if sys.version_info >= (3, 11):
+    from typing import NotRequired, TypedDict, TypeAlias
+else:
+    from typing_extensions import NotRequired, TypedDict, TypeAlias
+from .. import _utilities
+__all__ = ['SecretBackendIssuerArgs', 'SecretBackendIssuer']
+@pulumi.input_type
+class SecretBackendIssuerArgs:
+    def __init__(__self__, *,
+                 backend: pulumi.Input[_builtins.str],
+                 issuer_ref: pulumi.Input[_builtins.str],
+                 crl_distribution_points: Optional[pulumi.Input[Sequence[pulumi.Input[_builtins.str]]]] = None,
+                 disable_critical_extension_checks: Optional[pulumi.Input[_builtins.bool]] = None,
+                 disable_name_checks: Optional[pulumi.Input[_builtins.bool]] = None,
+                 disable_name_constraint_checks: Optional[pulumi.Input[_builtins.bool]] = None,
+                 disable_path_length_checks: Optional[pulumi.Input[_builtins.bool]] = None,
+                 enable_aia_url_templating: Optional[pulumi.Input[_builtins.bool]] = None,
+                 issuer_name: Optional[pulumi.Input[_builtins.str]] = None,
+                 issuing_certificates: Optional[pulumi.Input[Sequence[pulumi.Input[_builtins.str]]]] = None,
+                 leaf_not_after_behavior: Optional[pulumi.Input[_builtins.str]] = None,
+                 manual_chains: Optional[pulumi.Input[Sequence[pulumi.Input[_builtins.str]]]] = None,
+                 namespace: Optional[pulumi.Input[_builtins.str]] = None,
+                 ocsp_servers: Optional[pulumi.Input[Sequence[pulumi.Input[_builtins.str]]]] = None,
+                 revocation_signature_algorithm: Optional[pulumi.Input[_builtins.str]] = None,
+                 usage: Optional[pulumi.Input[_builtins.str]] = None):
+        """
+        The set of arguments for constructing a SecretBackendIssuer resource.
+        :param pulumi.Input[_builtins.str] backend: The path the PKI secret backend is mounted at, with no
+               leading or trailing `/`s.
+        :param pulumi.Input[_builtins.str] issuer_ref: Reference to an existing issuer.
+        :param pulumi.Input[Sequence[pulumi.Input[_builtins.str]]] crl_distribution_points: Specifies the URL values for the CRL
+               Distribution Points field.
+        :param pulumi.Input[_builtins.bool] disable_critical_extension_checks: This determines whether this
+               issuer is able to issue certificates where the chain of trust (including the
+               issued certificate) contain critical extensions not processed by Vault.
+        :param pulumi.Input[_builtins.bool] disable_name_checks: This determines whether this issuer is able
+               to issue certificates where the chain of trust (including the final issued
+               certificate) contains a link in which the subject of the issuing certificate
+               does not match the named issuer of the certificate it signed.
+        :param pulumi.Input[_builtins.bool] disable_name_constraint_checks: This determines whether this
+               issuer is able to issue certificates where the chain of trust (including the
+               final issued certificate) violates the name constraints critical extension of
+               one of the issuer certificates in the chain.
+        :param pulumi.Input[_builtins.bool] disable_path_length_checks: This determines whether this issuer
+               is able to issue certificates where the chain of trust (including the final
+               issued certificate) is longer than allowed by a certificate authority in that
+               chain.
+        :param pulumi.Input[_builtins.bool] enable_aia_url_templating: Specifies that the AIA URL values should
+               be templated.
+        :param pulumi.Input[_builtins.str] issuer_name: Name of the issuer.
+        :param pulumi.Input[Sequence[pulumi.Input[_builtins.str]]] issuing_certificates: Specifies the URL values for the Issuing
+               Certificate field.
+        :param pulumi.Input[_builtins.str] leaf_not_after_behavior: Behavior of a leaf's NotAfter field during
+               issuance.
+        :param pulumi.Input[Sequence[pulumi.Input[_builtins.str]]] manual_chains: Chain of issuer references to build this issuer's
+               computed CAChain field from, when non-empty.
+        :param pulumi.Input[_builtins.str] namespace: The namespace to provision the resource in.
+               The value should not contain leading or trailing forward slashes.
+               The `namespace` is always relative to the provider's configured [namespace](https://www.terraform.io/docs/providers/vault/index.html#namespace).
+               *Available only for Vault Enterprise*.
+        :param pulumi.Input[Sequence[pulumi.Input[_builtins.str]]] ocsp_servers: Specifies the URL values for the OCSP Servers field.
+        :param pulumi.Input[_builtins.str] revocation_signature_algorithm: Which signature algorithm to use
+               when building CRLs.
+        :param pulumi.Input[_builtins.str] usage: Allowed usages for this issuer.
+        """
+        pulumi.set(__self__, "backend", backend)
+        pulumi.set(__self__, "issuer_ref", issuer_ref)
+        if crl_distribution_points is not None:
+            pulumi.set(__self__, "crl_distribution_points", crl_distribution_points)
+        if disable_critical_extension_checks is not None:
+            pulumi.set(__self__, "disable_critical_extension_checks", disable_critical_extension_checks)
+        if disable_name_checks is not None:
+            pulumi.set(__self__, "disable_name_checks", disable_name_checks)
+        if disable_name_constraint_checks is not None:
+            pulumi.set(__self__, "disable_name_constraint_checks", disable_name_constraint_checks)
+        if disable_path_length_checks is not None:
+            pulumi.set(__self__, "disable_path_length_checks", disable_path_length_checks)
+        if enable_aia_url_templating is not None:
+            pulumi.set(__self__, "enable_aia_url_templating", enable_aia_url_templating)
+        if issuer_name is not None:
+            pulumi.set(__self__, "issuer_name", issuer_name)
+        if issuing_certificates is not None:
+            pulumi.set(__self__, "issuing_certificates", issuing_certificates)
+        if leaf_not_after_behavior is not None:
+            pulumi.set(__self__, "leaf_not_after_behavior", leaf_not_after_behavior)
+        if manual_chains is not None:
+            pulumi.set(__self__, "manual_chains", manual_chains)
+        if namespace is not None:
+            pulumi.set(__self__, "namespace", namespace)
+        if ocsp_servers is not None:
+            pulumi.set(__self__, "ocsp_servers", ocsp_servers)
+        if revocation_signature_algorithm is not None:
+            pulumi.set(__self__, "revocation_signature_algorithm", revocation_signature_algorithm)
+        if usage is not None:
+            pulumi.set(__self__, "usage", usage)
+    @_builtins.property
+    @pulumi.getter
+    def backend(self) -> pulumi.Input[_builtins.str]:
+        """
+        The path the PKI secret backend is mounted at, with no
+        leading or trailing `/`s.
+        """
+        return pulumi.get(self, "backend")
+    @backend.setter
+    def backend(self, value: pulumi.Input[_builtins.str]):
+        pulumi.set(self, "backend", value)
+    @_builtins.property
+    @pulumi.getter(name="issuerRef")
+    def issuer_ref(self) -> pulumi.Input[_builtins.str]:
+        """
+        Reference to an existing issuer.
+        """
+        return pulumi.get(self, "issuer_ref")
+    @issuer_ref.setter
+    def issuer_ref(self, value: pulumi.Input[_builtins.str]):
+        pulumi.set(self, "issuer_ref", value)
+    @_builtins.property
+    @pulumi.getter(name="crlDistributionPoints")
+    def crl_distribution_points(self) -> Optional[pulumi.Input[Sequence[pulumi.Input[_builtins.str]]]]:
+        """
+        Specifies the URL values for the CRL
+        Distribution Points field.
+        """
+        return pulumi.get(self, "crl_distribution_points")
+    @crl_distribution_points.setter
+    def crl_distribution_points(self, value: Optional[pulumi.Input[Sequence[pulumi.Input[_builtins.str]]]]):
+        pulumi.set(self, "crl_distribution_points", value)
+    @_builtins.property
+    @pulumi.getter(name="disableCriticalExtensionChecks")
+    def disable_critical_extension_checks(self) -> Optional[pulumi.Input[_builtins.bool]]:
+        """
+        This determines whether this
+        issuer is able to issue certificates where the chain of trust (including the
+        issued certificate) contain critical extensions not processed by Vault.
+        """
+        return pulumi.get(self, "disable_critical_extension_checks")
+    @disable_critical_extension_checks.setter
+    def disable_critical_extension_checks(self, value: Optional[pulumi.Input[_builtins.bool]]):
+        pulumi.set(self, "disable_critical_extension_checks", value)
+    @_builtins.property
+    @pulumi.getter(name="disableNameChecks")
+    def disable_name_checks(self) -> Optional[pulumi.Input[_builtins.bool]]:
+        """
+        This determines whether this issuer is able
+        to issue certificates where the chain of trust (including the final issued
+        certificate) contains a link in which the subject of the issuing certificate
+        does not match the named issuer of the certificate it signed.
+        """
+        return pulumi.get(self, "disable_name_checks")
+    @disable_name_checks.setter
+    def disable_name_checks(self, value: Optional[pulumi.Input[_builtins.bool]]):
+        pulumi.set(self, "disable_name_checks", value)
+    @_builtins.property
+    @pulumi.getter(name="disableNameConstraintChecks")
+    def disable_name_constraint_checks(self) -> Optional[pulumi.Input[_builtins.bool]]:
+        """
+        This determines whether this
+        issuer is able to issue certificates where the chain of trust (including the
+        final issued certificate) violates the name constraints critical extension of
+        one of the issuer certificates in the chain.
+        """
+        return pulumi.get(self, "disable_name_constraint_checks")
+    @disable_name_constraint_checks.setter
+    def disable_name_constraint_checks(self, value: Optional[pulumi.Input[_builtins.bool]]):
+        pulumi.set(self, "disable_name_constraint_checks", value)
+    @_builtins.property
+    @pulumi.getter(name="disablePathLengthChecks")
+    def disable_path_length_checks(self) -> Optional[pulumi.Input[_builtins.bool]]:
+        """
+        This determines whether this issuer
+        is able to issue certificates where the chain of trust (including the final
+        issued certificate) is longer than allowed by a certificate authority in that
+        chain.
+        """
+        return pulumi.get(self, "disable_path_length_checks")
+    @disable_path_length_checks.setter
+    def disable_path_length_checks(self, value: Optional[pulumi.Input[_builtins.bool]]):
+        pulumi.set(self, "disable_path_length_checks", value)
+    @_builtins.property
+    @pulumi.getter(name="enableAiaUrlTemplating")
+    def enable_aia_url_templating(self) -> Optional[pulumi.Input[_builtins.bool]]:
+        """
+        Specifies that the AIA URL values should
+        be templated.
+        """
+        return pulumi.get(self, "enable_aia_url_templating")
+    @enable_aia_url_templating.setter
+    def enable_aia_url_templating(self, value: Optional[pulumi.Input[_builtins.bool]]):
+        pulumi.set(self, "enable_aia_url_templating", value)
+    @_builtins.property
+    @pulumi.getter(name="issuerName")
+    def issuer_name(self) -> Optional[pulumi.Input[_builtins.str]]:
+        """
+        Name of the issuer.
+        """
+        return pulumi.get(self, "issuer_name")
+    @issuer_name.setter
+    def issuer_name(self, value: Optional[pulumi.Input[_builtins.str]]):
+        pulumi.set(self, "issuer_name", value)
+    @_builtins.property
+    @pulumi.getter(name="issuingCertificates")
+    def issuing_certificates(self) -> Optional[pulumi.Input[Sequence[pulumi.Input[_builtins.str]]]]:
+        """
+        Specifies the URL values for the Issuing
+        Certificate field.
+        """
+        return pulumi.get(self, "issuing_certificates")
+    @issuing_certificates.setter
+    def issuing_certificates(self, value: Optional[pulumi.Input[Sequence[pulumi.Input[_builtins.str]]]]):
+        pulumi.set(self, "issuing_certificates", value)
+    @_builtins.property
+    @pulumi.getter(name="leafNotAfterBehavior")
+    def leaf_not_after_behavior(self) -> Optional[pulumi.Input[_builtins.str]]:
+        """
+        Behavior of a leaf's NotAfter field during
+        issuance.
+        """
+        return pulumi.get(self, "leaf_not_after_behavior")
+    @leaf_not_after_behavior.setter
+    def leaf_not_after_behavior(self, value: Optional[pulumi.Input[_builtins.str]]):
+        pulumi.set(self, "leaf_not_after_behavior", value)
+    @_builtins.property
+    @pulumi.getter(name="manualChains")
+    def manual_chains(self) -> Optional[pulumi.Input[Sequence[pulumi.Input[_builtins.str]]]]:
+        """
+        Chain of issuer references to build this issuer's
+        computed CAChain field from, when non-empty.
+        """
+        return pulumi.get(self, "manual_chains")
+    @manual_chains.setter
+    def manual_chains(self, value: Optional[pulumi.Input[Sequence[pulumi.Input[_builtins.str]]]]):
+        pulumi.set(self, "manual_chains", value)
+    @_builtins.property
+    @pulumi.getter
+    def namespace(self) -> Optional[pulumi.Input[_builtins.str]]:
+        """
+        The namespace to provision the resource in.
+        The value should not contain leading or trailing forward slashes.
+        The `namespace` is always relative to the provider's configured [namespace](https://www.terraform.io/docs/providers/vault/index.html#namespace).
+        *Available only for Vault Enterprise*.
+        """
+        return pulumi.get(self, "namespace")
+    @namespace.setter
+    def namespace(self, value: Optional[pulumi.Input[_builtins.str]]):
+        pulumi.set(self, "namespace", value)
+    @_builtins.property
+    @pulumi.getter(name="ocspServers")
+    def ocsp_servers(self) -> Optional[pulumi.Input[Sequence[pulumi.Input[_builtins.str]]]]:
+        """
+        Specifies the URL values for the OCSP Servers field.
+        """
+        return pulumi.get(self, "ocsp_servers")
+    @ocsp_servers.setter
+    def ocsp_servers(self, value: Optional[pulumi.Input[Sequence[pulumi.Input[_builtins.str]]]]):
+        pulumi.set(self, "ocsp_servers", value)
+    @_builtins.property
+    @pulumi.getter(name="revocationSignatureAlgorithm")
+    def revocation_signature_algorithm(self) -> Optional[pulumi.Input[_builtins.str]]:
+        """
+        Which signature algorithm to use
+        when building CRLs.
+        """
+        return pulumi.get(self, "revocation_signature_algorithm")
+    @revocation_signature_algorithm.setter
+    def revocation_signature_algorithm(self, value: Optional[pulumi.Input[_builtins.str]]):
+        pulumi.set(self, "revocation_signature_algorithm", value)
+    @_builtins.property
+    @pulumi.getter
+    def usage(self) -> Optional[pulumi.Input[_builtins.str]]:
+        """
+        Allowed usages for this issuer.
+        """
+        return pulumi.get(self, "usage")
+    @usage.setter
+    def usage(self, value: Optional[pulumi.Input[_builtins.str]]):
+        pulumi.set(self, "usage", value)
+@pulumi.input_type
+class _SecretBackendIssuerState:
+    def __init__(__self__, *,
+                 backend: Optional[pulumi.Input[_builtins.str]] = None,
+                 crl_distribution_points: Optional[pulumi.Input[Sequence[pulumi.Input[_builtins.str]]]] = None,
+                 disable_critical_extension_checks: Optional[pulumi.Input[_builtins.bool]] = None,
+                 disable_name_checks: Optional[pulumi.Input[_builtins.bool]] = None,
+                 disable_name_constraint_checks: Optional[pulumi.Input[_builtins.bool]] = None,
+                 disable_path_length_checks: Optional[pulumi.Input[_builtins.bool]] = None,
+                 enable_aia_url_templating: Optional[pulumi.Input[_builtins.bool]] = None,
+                 issuer_id: Optional[pulumi.Input[_builtins.str]] = None,
+                 issuer_name: Optional[pulumi.Input[_builtins.str]] = None,
+                 issuer_ref: Optional[pulumi.Input[_builtins.str]] = None,
+                 issuing_certificates: Optional[pulumi.Input[Sequence[pulumi.Input[_builtins.str]]]] = None,
+                 leaf_not_after_behavior: Optional[pulumi.Input[_builtins.str]] = None,
+                 manual_chains: Optional[pulumi.Input[Sequence[pulumi.Input[_builtins.str]]]] = None,
+                 namespace: Optional[pulumi.Input[_builtins.str]] = None,
+                 ocsp_servers: Optional[pulumi.Input[Sequence[pulumi.Input[_builtins.str]]]] = None,
+                 revocation_signature_algorithm: Optional[pulumi.Input[_builtins.str]] = None,
+                 usage: Optional[pulumi.Input[_builtins.str]] = None):
+        """
+        Input properties used for looking up and filtering SecretBackendIssuer resources.
+        :param pulumi.Input[_builtins.str] backend: The path the PKI secret backend is mounted at, with no
+               leading or trailing `/`s.
+        :param pulumi.Input[Sequence[pulumi.Input[_builtins.str]]] crl_distribution_points: Specifies the URL values for the CRL
+               Distribution Points field.
+        :param pulumi.Input[_builtins.bool] disable_critical_extension_checks: This determines whether this
+               issuer is able to issue certificates where the chain of trust (including the
+               issued certificate) contain critical extensions not processed by Vault.
+        :param pulumi.Input[_builtins.bool] disable_name_checks: This determines whether this issuer is able
+               to issue certificates where the chain of trust (including the final issued
+               certificate) contains a link in which the subject of the issuing certificate
+               does not match the named issuer of the certificate it signed.
+        :param pulumi.Input[_builtins.bool] disable_name_constraint_checks: This determines whether this
+               issuer is able to issue certificates where the chain of trust (including the
+               final issued certificate) violates the name constraints critical extension of
+               one of the issuer certificates in the chain.
+        :param pulumi.Input[_builtins.bool] disable_path_length_checks: This determines whether this issuer
+               is able to issue certificates where the chain of trust (including the final
+               issued certificate) is longer than allowed by a certificate authority in that
+               chain.
+        :param pulumi.Input[_builtins.bool] enable_aia_url_templating: Specifies that the AIA URL values should
+               be templated.
+        :param pulumi.Input[_builtins.str] issuer_id: ID of the issuer.
+        :param pulumi.Input[_builtins.str] issuer_name: Name of the issuer.
+        :param pulumi.Input[_builtins.str] issuer_ref: Reference to an existing issuer.
+        :param pulumi.Input[Sequence[pulumi.Input[_builtins.str]]] issuing_certificates: Specifies the URL values for the Issuing
+               Certificate field.
+        :param pulumi.Input[_builtins.str] leaf_not_after_behavior: Behavior of a leaf's NotAfter field during
+               issuance.
+        :param pulumi.Input[Sequence[pulumi.Input[_builtins.str]]] manual_chains: Chain of issuer references to build this issuer's
+               computed CAChain field from, when non-empty.
+        :param pulumi.Input[_builtins.str] namespace: The namespace to provision the resource in.
+               The value should not contain leading or trailing forward slashes.
+               The `namespace` is always relative to the provider's configured [namespace](https://www.terraform.io/docs/providers/vault/index.html#namespace).
+               *Available only for Vault Enterprise*.
+        :param pulumi.Input[Sequence[pulumi.Input[_builtins.str]]] ocsp_servers: Specifies the URL values for the OCSP Servers field.
+        :param pulumi.Input[_builtins.str] revocation_signature_algorithm: Which signature algorithm to use
+               when building CRLs.
+        :param pulumi.Input[_builtins.str] usage: Allowed usages for this issuer.
+        """
+        if backend is not None:
+            pulumi.set(__self__, "backend", backend)
+        if crl_distribution_points is not None:
+            pulumi.set(__self__, "crl_distribution_points", crl_distribution_points)
+        if disable_critical_extension_checks is not None:
+            pulumi.set(__self__, "disable_critical_extension_checks", disable_critical_extension_checks)
+        if disable_name_checks is not None:
+            pulumi.set(__self__, "disable_name_checks", disable_name_checks)
+        if disable_name_constraint_checks is not None:
+            pulumi.set(__self__, "disable_name_constraint_checks", disable_name_constraint_checks)
+        if disable_path_length_checks is not None:
+            pulumi.set(__self__, "disable_path_length_checks", disable_path_length_checks)
+        if enable_aia_url_templating is not None:
+            pulumi.set(__self__, "enable_aia_url_templating", enable_aia_url_templating)
+        if issuer_id is not None:
+            pulumi.set(__self__, "issuer_id", issuer_id)
+        if issuer_name is not None:
+            pulumi.set(__self__, "issuer_name", issuer_name)
+        if issuer_ref is not None:
+            pulumi.set(__self__, "issuer_ref", issuer_ref)
+        if issuing_certificates is not None:
+            pulumi.set(__self__, "issuing_certificates", issuing_certificates)
+        if leaf_not_after_behavior is not None:
+            pulumi.set(__self__, "leaf_not_after_behavior", leaf_not_after_behavior)
+        if manual_chains is not None:
+            pulumi.set(__self__, "manual_chains", manual_chains)
+        if namespace is not None:
+            pulumi.set(__self__, "namespace", namespace)
+        if ocsp_servers is not None:
+            pulumi.set(__self__, "ocsp_servers", ocsp_servers)
+        if revocation_signature_algorithm is not None:
+            pulumi.set(__self__, "revocation_signature_algorithm", revocation_signature_algorithm)
+        if usage is not None:
+            pulumi.set(__self__, "usage", usage)
+    @_builtins.property
+    @pulumi.getter
+    def backend(self) -> Optional[pulumi.Input[_builtins.str]]:
+        """
+        The path the PKI secret backend is mounted at, with no
+        leading or trailing `/`s.
+        """
+        return pulumi.get(self, "backend")
+    @backend.setter
+    def backend(self, value: Optional[pulumi.Input[_builtins.str]]):
+        pulumi.set(self, "backend", value)
+    @_builtins.property
+    @pulumi.getter(name="crlDistributionPoints")
+    def crl_distribution_points(self) -> Optional[pulumi.Input[Sequence[pulumi.Input[_builtins.str]]]]:
+        """
+        Specifies the URL values for the CRL
+        Distribution Points field.
+        """
+        return pulumi.get(self, "crl_distribution_points")
+    @crl_distribution_points.setter
+    def crl_distribution_points(self, value: Optional[pulumi.Input[Sequence[pulumi.Input[_builtins.str]]]]):
+        pulumi.set(self, "crl_distribution_points", value)
+    @_builtins.property
+    @pulumi.getter(name="disableCriticalExtensionChecks")
+    def disable_critical_extension_checks(self) -> Optional[pulumi.Input[_builtins.bool]]:
+        """
+        This determines whether this
+        issuer is able to issue certificates where the chain of trust (including the
+        issued certificate) contain critical extensions not processed by Vault.
+        """
+        return pulumi.get(self, "disable_critical_extension_checks")
+    @disable_critical_extension_checks.setter
+    def disable_critical_extension_checks(self, value: Optional[pulumi.Input[_builtins.bool]]):
+        pulumi.set(self, "disable_critical_extension_checks", value)
+    @_builtins.property
+    @pulumi.getter(name="disableNameChecks")
+    def disable_name_checks(self) -> Optional[pulumi.Input[_builtins.bool]]:
+        """
+        This determines whether this issuer is able
+        to issue certificates where the chain of trust (including the final issued
+        certificate) contains a link in which the subject of the issuing certificate
+        does not match the named issuer of the certificate it signed.
+        """
+        return pulumi.get(self, "disable_name_checks")
+    @disable_name_checks.setter
+    def disable_name_checks(self, value: Optional[pulumi.Input[_builtins.bool]]):
+        pulumi.set(self, "disable_name_checks", value)
+    @_builtins.property
+    @pulumi.getter(name="disableNameConstraintChecks")
+    def disable_name_constraint_checks(self) -> Optional[pulumi.Input[_builtins.bool]]:
+        """
+        This determines whether this
+        issuer is able to issue certificates where the chain of trust (including the
+        final issued certificate) violates the name constraints critical extension of
+        one of the issuer certificates in the chain.
+        """
+        return pulumi.get(self, "disable_name_constraint_checks")
+    @disable_name_constraint_checks.setter
+    def disable_name_constraint_checks(self, value: Optional[pulumi.Input[_builtins.bool]]):
+        pulumi.set(self, "disable_name_constraint_checks", value)
+    @_builtins.property
+    @pulumi.getter(name="disablePathLengthChecks")
+    def disable_path_length_checks(self) -> Optional[pulumi.Input[_builtins.bool]]:
+        """
+        This determines whether this issuer
+        is able to issue certificates where the chain of trust (including the final
+        issued certificate) is longer than allowed by a certificate authority in that
+        chain.
+        """
+        return pulumi.get(self, "disable_path_length_checks")
+    @disable_path_length_checks.setter
+    def disable_path_length_checks(self, value: Optional[pulumi.Input[_builtins.bool]]):
+        pulumi.set(self, "disable_path_length_checks", value)
+    @_builtins.property
+    @pulumi.getter(name="enableAiaUrlTemplating")
+    def enable_aia_url_templating(self) -> Optional[pulumi.Input[_builtins.bool]]:
+        """
+        Specifies that the AIA URL values should
+        be templated.
+        """
+        return pulumi.get(self, "enable_aia_url_templating")
+    @enable_aia_url_templating.setter
+    def enable_aia_url_templating(self, value: Optional[pulumi.Input[_builtins.bool]]):
+        pulumi.set(self, "enable_aia_url_templating", value)
+    @_builtins.property
+    @pulumi.getter(name="issuerId")
+    def issuer_id(self) -> Optional[pulumi.Input[_builtins.str]]:
+        """
+        ID of the issuer.
+        """
+        return pulumi.get(self, "issuer_id")
+    @issuer_id.setter
+    def issuer_id(self, value: Optional[pulumi.Input[_builtins.str]]):
+        pulumi.set(self, "issuer_id", value)
+    @_builtins.property
+    @pulumi.getter(name="issuerName")
+    def issuer_name(self) -> Optional[pulumi.Input[_builtins.str]]:
+        """
+        Name of the issuer.
+        """
+        return pulumi.get(self, "issuer_name")
+    @issuer_name.setter
+    def issuer_name(self, value: Optional[pulumi.Input[_builtins.str]]):
+        pulumi.set(self, "issuer_name", value)
+    @_builtins.property
+    @pulumi.getter(name="issuerRef")
+    def issuer_ref(self) -> Optional[pulumi.Input[_builtins.str]]:
+        """
+        Reference to an existing issuer.
+        """
+        return pulumi.get(self, "issuer_ref")
+    @issuer_ref.setter
+    def issuer_ref(self, value: Optional[pulumi.Input[_builtins.str]]):
+        pulumi.set(self, "issuer_ref", value)
+    @_builtins.property
+    @pulumi.getter(name="issuingCertificates")
+    def issuing_certificates(self) -> Optional[pulumi.Input[Sequence[pulumi.Input[_builtins.str]]]]:
+        """
+        Specifies the URL values for the Issuing
+        Certificate field.
+        """
+        return pulumi.get(self, "issuing_certificates")
+    @issuing_certificates.setter
+    def issuing_certificates(self, value: Optional[pulumi.Input[Sequence[pulumi.Input[_builtins.str]]]]):
+        pulumi.set(self, "issuing_certificates", value)
+    @_builtins.property
+    @pulumi.getter(name="leafNotAfterBehavior")
+    def leaf_not_after_behavior(self) -> Optional[pulumi.Input[_builtins.str]]:
+        """
+        Behavior of a leaf's NotAfter field during
+        issuance.
+        """
+        return pulumi.get(self, "leaf_not_after_behavior")
+    @leaf_not_after_behavior.setter
+    def leaf_not_after_behavior(self, value: Optional[pulumi.Input[_builtins.str]]):
+        pulumi.set(self, "leaf_not_after_behavior", value)
+    @_builtins.property
+    @pulumi.getter(name="manualChains")
+    def manual_chains(self) -> Optional[pulumi.Input[Sequence[pulumi.Input[_builtins.str]]]]:
+        """
+        Chain of issuer references to build this issuer's
+        computed CAChain field from, when non-empty.
+        """
+        return pulumi.get(self, "manual_chains")
+    @manual_chains.setter
+    def manual_chains(self, value: Optional[pulumi.Input[Sequence[pulumi.Input[_builtins.str]]]]):
+        pulumi.set(self, "manual_chains", value)
+    @_builtins.property
+    @pulumi.getter
+    def namespace(self) -> Optional[pulumi.Input[_builtins.str]]:
+        """
+        The namespace to provision the resource in.
+        The value should not contain leading or trailing forward slashes.
+        The `namespace` is always relative to the provider's configured [namespace](https://www.terraform.io/docs/providers/vault/index.html#namespace).
+        *Available only for Vault Enterprise*.
+        """
+        return pulumi.get(self, "namespace")
+    @namespace.setter
+    def namespace(self, value: Optional[pulumi.Input[_builtins.str]]):
+        pulumi.set(self, "namespace", value)
+    @_builtins.property
+    @pulumi.getter(name="ocspServers")
+    def ocsp_servers(self) -> Optional[pulumi.Input[Sequence[pulumi.Input[_builtins.str]]]]:
+        """
+        Specifies the URL values for the OCSP Servers field.
+        """
+        return pulumi.get(self, "ocsp_servers")
+    @ocsp_servers.setter
+    def ocsp_servers(self, value: Optional[pulumi.Input[Sequence[pulumi.Input[_builtins.str]]]]):
+        pulumi.set(self, "ocsp_servers", value)
+    @_builtins.property
+    @pulumi.getter(name="revocationSignatureAlgorithm")
+    def revocation_signature_algorithm(self) -> Optional[pulumi.Input[_builtins.str]]:
+        """
+        Which signature algorithm to use
+        when building CRLs.
+        """
+        return pulumi.get(self, "revocation_signature_algorithm")
+    @revocation_signature_algorithm.setter
+    def revocation_signature_algorithm(self, value: Optional[pulumi.Input[_builtins.str]]):
+        pulumi.set(self, "revocation_signature_algorithm", value)
+    @_builtins.property
+    @pulumi.getter
+    def usage(self) -> Optional[pulumi.Input[_builtins.str]]:
+        """
+        Allowed usages for this issuer.
+        """
+        return pulumi.get(self, "usage")
+    @usage.setter
+    def usage(self, value: Optional[pulumi.Input[_builtins.str]]):
+        pulumi.set(self, "usage", value)
+@pulumi.type_token("vault:pkiSecret/secretBackendIssuer:SecretBackendIssuer")
+class SecretBackendIssuer(pulumi.CustomResource):
+    @overload
+    def __init__(__self__,
+                 resource_name: str,
+                 opts: Optional[pulumi.ResourceOptions] = None,
+                 backend: Optional[pulumi.Input[_builtins.str]] = None,
+                 crl_distribution_points: Optional[pulumi.Input[Sequence[pulumi.Input[_builtins.str]]]] = None,
+                 disable_critical_extension_checks: Optional[pulumi.Input[_builtins.bool]] = None,
+                 disable_name_checks: Optional[pulumi.Input[_builtins.bool]] = None,
+                 disable_name_constraint_checks: Optional[pulumi.Input[_builtins.bool]] = None,
+                 disable_path_length_checks: Optional[pulumi.Input[_builtins.bool]] = None,
+                 enable_aia_url_templating: Optional[pulumi.Input[_builtins.bool]] = None,
+                 issuer_name: Optional[pulumi.Input[_builtins.str]] = None,
+                 issuer_ref: Optional[pulumi.Input[_builtins.str]] = None,
+                 issuing_certificates: Optional[pulumi.Input[Sequence[pulumi.Input[_builtins.str]]]] = None,
+                 leaf_not_after_behavior: Optional[pulumi.Input[_builtins.str]] = None,
+                 manual_chains: Optional[pulumi.Input[Sequence[pulumi.Input[_builtins.str]]]] = None,
+                 namespace: Optional[pulumi.Input[_builtins.str]] = None,
+                 ocsp_servers: Optional[pulumi.Input[Sequence[pulumi.Input[_builtins.str]]]] = None,
+                 revocation_signature_algorithm: Optional[pulumi.Input[_builtins.str]] = None,
+                 usage: Optional[pulumi.Input[_builtins.str]] = None,
+                 __props__=None):
+        """
+        ## Example Usage
+        ```python
+        import pulumi
+        import pulumi_vault as vault
+        pki = vault.Mount("pki",
+            path="pki",
+            type="pki",
+            default_lease_ttl_seconds=3600,
+            max_lease_ttl_seconds=86400)
+        root = vault.pkisecret.SecretBackendRootCert("root",
+            backend=pki.path,
+            type="internal",
+            common_name="test",
+            ttl="86400")
+        example = vault.pkisecret.SecretBackendIssuer("example",
+            backend=root.backend,
+            issuer_ref=root.issuer_id,
+            issuer_name="example-issuer")
+        ```
+        ## Import
+        PKI secret backend issuer can be imported using the `id`, e.g.
+        ```sh
+        $ pulumi import vault:pkiSecret/secretBackendIssuer:SecretBackendIssuer example pki/issuer/bf9b0d48-d0dd-652c-30be-77d04fc7e94d
+        ```
+        :param str resource_name: The name of the resource.
+        :param pulumi.ResourceOptions opts: Options for the resource.
+        :param pulumi.Input[_builtins.str] backend: The path the PKI secret backend is mounted at, with no
+               leading or trailing `/`s.
+        :param pulumi.Input[Sequence[pulumi.Input[_builtins.str]]] crl_distribution_points: Specifies the URL values for the CRL
+               Distribution Points field.
+        :param pulumi.Input[_builtins.bool] disable_critical_extension_checks: This determines whether this
+               issuer is able to issue certificates where the chain of trust (including the
+               issued certificate) contain critical extensions not processed by Vault.
+        :param pulumi.Input[_builtins.bool] disable_name_checks: This determines whether this issuer is able
+               to issue certificates where the chain of trust (including the final issued
+               certificate) contains a link in which the subject of the issuing certificate
+               does not match the named issuer of the certificate it signed.
+        :param pulumi.Input[_builtins.bool] disable_name_constraint_checks: This determines whether this
+               issuer is able to issue certificates where the chain of trust (including the
+               final issued certificate) violates the name constraints critical extension of
+               one of the issuer certificates in the chain.
+        :param pulumi.Input[_builtins.bool] disable_path_length_checks: This determines whether this issuer
+               is able to issue certificates where the chain of trust (including the final
+               issued certificate) is longer than allowed by a certificate authority in that
+               chain.
+        :param pulumi.Input[_builtins.bool] enable_aia_url_templating: Specifies that the AIA URL values should
+               be templated.
+        :param pulumi.Input[_builtins.str] issuer_name: Name of the issuer.
+        :param pulumi.Input[_builtins.str] issuer_ref: Reference to an existing issuer.
+        :param pulumi.Input[Sequence[pulumi.Input[_builtins.str]]] issuing_certificates: Specifies the URL values for the Issuing
+               Certificate field.
+        :param pulumi.Input[_builtins.str] leaf_not_after_behavior: Behavior of a leaf's NotAfter field during
+               issuance.
+        :param pulumi.Input[Sequence[pulumi.Input[_builtins.str]]] manual_chains: Chain of issuer references to build this issuer's
+               computed CAChain field from, when non-empty.
+        :param pulumi.Input[_builtins.str] namespace: The namespace to provision the resource in.
+               The value should not contain leading or trailing forward slashes.
+               The `namespace` is always relative to the provider's configured [namespace](https://www.terraform.io/docs/providers/vault/index.html#namespace).
+               *Available only for Vault Enterprise*.
+        :param pulumi.Input[Sequence[pulumi.Input[_builtins.str]]] ocsp_servers: Specifies the URL values for the OCSP Servers field.
+        :param pulumi.Input[_builtins.str] revocation_signature_algorithm: Which signature algorithm to use
+               when building CRLs.
+        :param pulumi.Input[_builtins.str] usage: Allowed usages for this issuer.
+        """
+        ...
+    @overload
+    def __init__(__self__,
+                 resource_name: str,
+                 args: SecretBackendIssuerArgs,
+                 opts: Optional[pulumi.ResourceOptions] = None):
+        """
+        ## Example Usage
+        ```python
+        import pulumi
+        import pulumi_vault as vault
+        pki = vault.Mount("pki",
+            path="pki",
+            type="pki",
+            default_lease_ttl_seconds=3600,
+            max_lease_ttl_seconds=86400)
+        root = vault.pkisecret.SecretBackendRootCert("root",
+            backend=pki.path,
+            type="internal",
+            common_name="test",
+            ttl="86400")
+        example = vault.pkisecret.SecretBackendIssuer("example",
+            backend=root.backend,
+            issuer_ref=root.issuer_id,
+            issuer_name="example-issuer")
+        ```
+        ## Import
+        PKI secret backend issuer can be imported using the `id`, e.g.
+        ```sh
+        $ pulumi import vault:pkiSecret/secretBackendIssuer:SecretBackendIssuer example pki/issuer/bf9b0d48-d0dd-652c-30be-77d04fc7e94d
+        ```
+        :param str resource_name: The name of the resource.
+        :param SecretBackendIssuerArgs args: The arguments to use to populate this resource's properties.
+        :param pulumi.ResourceOptions opts: Options for the resource.
+        """
+        ...
+    def __init__(__self__, resource_name: str, *args, **kwargs):
+        resource_args, opts = _utilities.get_resource_args_opts(SecretBackendIssuerArgs, pulumi.ResourceOptions, *args, **kwargs)
+        if resource_args is not None:
+            __self__._internal_init(resource_name, opts, **resource_args.__dict__)
+        else:
+            __self__._internal_init(resource_name, *args, **kwargs)
+    def _internal_init(__self__,
+                 resource_name: str,
+                 opts: Optional[pulumi.ResourceOptions] = None,
+                 backend: Optional[pulumi.Input[_builtins.str]] = None,
+                 crl_distribution_points: Optional[pulumi.Input[Sequence[pulumi.Input[_builtins.str]]]] = None,
+                 disable_critical_extension_checks: Optional[pulumi.Input[_builtins.bool]] = None,
+                 disable_name_checks: Optional[pulumi.Input[_builtins.bool]] = None,
+                 disable_name_constraint_checks: Optional[pulumi.Input[_builtins.bool]] = None,
+                 disable_path_length_checks: Optional[pulumi.Input[_builtins.bool]] = None,
+                 enable_aia_url_templating: Optional[pulumi.Input[_builtins.bool]] = None,
+                 issuer_name: Optional[pulumi.Input[_builtins.str]] = None,
+                 issuer_ref: Optional[pulumi.Input[_builtins.str]] = None,
+                 issuing_certificates: Optional[pulumi.Input[Sequence[pulumi.Input[_builtins.str]]]] = None,
+                 leaf_not_after_behavior: Optional[pulumi.Input[_builtins.str]] = None,
+                 manual_chains: Optional[pulumi.Input[Sequence[pulumi.Input[_builtins.str]]]] = None,
+                 namespace: Optional[pulumi.Input[_builtins.str]] = None,
+                 ocsp_servers: Optional[pulumi.Input[Sequence[pulumi.Input[_builtins.str]]]] = None,
+                 revocation_signature_algorithm: Optional[pulumi.Input[_builtins.str]] = None,
+                 usage: Optional[pulumi.Input[_builtins.str]] = None,
+                 __props__=None):
+        opts = pulumi.ResourceOptions.merge(_utilities.get_resource_opts_defaults(), opts)
+        if not isinstance(opts, pulumi.ResourceOptions):
+            raise TypeError('Expected resource options to be a ResourceOptions instance')
+        if opts.id is None:
+            if __props__ is not None:
+                raise TypeError('__props__ is only valid when passed in combination with a valid opts.id to get an existing resource')
+            __props__ = SecretBackendIssuerArgs.__new__(SecretBackendIssuerArgs)
+            if backend is None and not opts.urn:
+                raise TypeError("Missing required property 'backend'")
+            __props__.__dict__["backend"] = backend
+            __props__.__dict__["crl_distribution_points"] = crl_distribution_points
+            __props__.__dict__["disable_critical_extension_checks"] = disable_critical_extension_checks
+            __props__.__dict__["disable_name_checks"] = disable_name_checks
+            __props__.__dict__["disable_name_constraint_checks"] = disable_name_constraint_checks
+            __props__.__dict__["disable_path_length_checks"] = disable_path_length_checks
+            __props__.__dict__["enable_aia_url_templating"] = enable_aia_url_templating
+            __props__.__dict__["issuer_name"] = issuer_name
+            if issuer_ref is None and not opts.urn:
+                raise TypeError("Missing required property 'issuer_ref'")
+            __props__.__dict__["issuer_ref"] = issuer_ref
+            __props__.__dict__["issuing_certificates"] = issuing_certificates
+            __props__.__dict__["leaf_not_after_behavior"] = leaf_not_after_behavior
+            __props__.__dict__["manual_chains"] = manual_chains
+            __props__.__dict__["namespace"] = namespace
+            __props__.__dict__["ocsp_servers"] = ocsp_servers
+            __props__.__dict__["revocation_signature_algorithm"] = revocation_signature_algorithm
+            __props__.__dict__["usage"] = usage
+            __props__.__dict__["issuer_id"] = None
+        super(SecretBackendIssuer, __self__).__init__(
+            'vault:pkiSecret/secretBackendIssuer:SecretBackendIssuer',
+            resource_name,
+            __props__,
+            opts)
+    @staticmethod
+    def get(resource_name: str,
+            id: pulumi.Input[str],
+            opts: Optional[pulumi.ResourceOptions] = None,
+            backend: Optional[pulumi.Input[_builtins.str]] = None,
+            crl_distribution_points: Optional[pulumi.Input[Sequence[pulumi.Input[_builtins.str]]]] = None,
+            disable_critical_extension_checks: Optional[pulumi.Input[_builtins.bool]] = None,
+            disable_name_checks: Optional[pulumi.Input[_builtins.bool]] = None,
+            disable_name_constraint_checks: Optional[pulumi.Input[_builtins.bool]] = None,
+            disable_path_length_checks: Optional[pulumi.Input[_builtins.bool]] = None,
+            enable_aia_url_templating: Optional[pulumi.Input[_builtins.bool]] = None,
+            issuer_id: Optional[pulumi.Input[_builtins.str]] = None,
+            issuer_name: Optional[pulumi.Input[_builtins.str]] = None,
+            issuer_ref: Optional[pulumi.Input[_builtins.str]] = None,
+            issuing_certificates: Optional[pulumi.Input[Sequence[pulumi.Input[_builtins.str]]]] = None,
+            leaf_not_after_behavior: Optional[pulumi.Input[_builtins.str]] = None,
+            manual_chains: Optional[pulumi.Input[Sequence[pulumi.Input[_builtins.str]]]] = None,
+            namespace: Optional[pulumi.Input[_builtins.str]] = None,
+            ocsp_servers: Optional[pulumi.Input[Sequence[pulumi.Input[_builtins.str]]]] = None,
+            revocation_signature_algorithm: Optional[pulumi.Input[_builtins.str]] = None,
+            usage: Optional[pulumi.Input[_builtins.str]] = None) -> 'SecretBackendIssuer':
+        """
+        Get an existing SecretBackendIssuer resource's state with the given name, id, and optional extra
+        properties used to qualify the lookup.
+        :param str resource_name: The unique name of the resulting resource.
+        :param pulumi.Input[str] id: The unique provider ID of the resource to lookup.
+        :param pulumi.ResourceOptions opts: Options for the resource.
+        :param pulumi.Input[_builtins.str] backend: The path the PKI secret backend is mounted at, with no
+               leading or trailing `/`s.
+        :param pulumi.Input[Sequence[pulumi.Input[_builtins.str]]] crl_distribution_points: Specifies the URL values for the CRL
+               Distribution Points field.
+        :param pulumi.Input[_builtins.bool] disable_critical_extension_checks: This determines whether this
+               issuer is able to issue certificates where the chain of trust (including the
+               issued certificate) contain critical extensions not processed by Vault.
+        :param pulumi.Input[_builtins.bool] disable_name_checks: This determines whether this issuer is able
+               to issue certificates where the chain of trust (including the final issued
+               certificate) contains a link in which the subject of the issuing certificate
+               does not match the named issuer of the certificate it signed.
+        :param pulumi.Input[_builtins.bool] disable_name_constraint_checks: This determines whether this
+               issuer is able to issue certificates where the chain of trust (including the
+               final issued certificate) violates the name constraints critical extension of
+               one of the issuer certificates in the chain.
+        :param pulumi.Input[_builtins.bool] disable_path_length_checks: This determines whether this issuer
+               is able to issue certificates where the chain of trust (including the final
+               issued certificate) is longer than allowed by a certificate authority in that
+               chain.
+        :param pulumi.Input[_builtins.bool] enable_aia_url_templating: Specifies that the AIA URL values should
+               be templated.
+        :param pulumi.Input[_builtins.str] issuer_id: ID of the issuer.
+        :param pulumi.Input[_builtins.str] issuer_name: Name of the issuer.
+        :param pulumi.Input[_builtins.str] issuer_ref: Reference to an existing issuer.
+        :param pulumi.Input[Sequence[pulumi.Input[_builtins.str]]] issuing_certificates: Specifies the URL values for the Issuing
+               Certificate field.
+        :param pulumi.Input[_builtins.str] leaf_not_after_behavior: Behavior of a leaf's NotAfter field during
+               issuance.
+        :param pulumi.Input[Sequence[pulumi.Input[_builtins.str]]] manual_chains: Chain of issuer references to build this issuer's
+               computed CAChain field from, when non-empty.
+        :param pulumi.Input[_builtins.str] namespace: The namespace to provision the resource in.
+               The value should not contain leading or trailing forward slashes.
+               The `namespace` is always relative to the provider's configured [namespace](https://www.terraform.io/docs/providers/vault/index.html#namespace).
+               *Available only for Vault Enterprise*.
+        :param pulumi.Input[Sequence[pulumi.Input[_builtins.str]]] ocsp_servers: Specifies the URL values for the OCSP Servers field.
+        :param pulumi.Input[_builtins.str] revocation_signature_algorithm: Which signature algorithm to use
+               when building CRLs.
+        :param pulumi.Input[_builtins.str] usage: Allowed usages for this issuer.
+        """
+        opts = pulumi.ResourceOptions.merge(opts, pulumi.ResourceOptions(id=id))
+        __props__ = _SecretBackendIssuerState.__new__(_SecretBackendIssuerState)
+        __props__.__dict__["backend"] = backend
+        __props__.__dict__["crl_distribution_points"] = crl_distribution_points
+        __props__.__dict__["disable_critical_extension_checks"] = disable_critical_extension_checks
+        __props__.__dict__["disable_name_checks"] = disable_name_checks
+        __props__.__dict__["disable_name_constraint_checks"] = disable_name_constraint_checks
+        __props__.__dict__["disable_path_length_checks"] = disable_path_length_checks
+        __props__.__dict__["enable_aia_url_templating"] = enable_aia_url_templating
+        __props__.__dict__["issuer_id"] = issuer_id
+        __props__.__dict__["issuer_name"] = issuer_name
+        __props__.__dict__["issuer_ref"] = issuer_ref
+        __props__.__dict__["issuing_certificates"] = issuing_certificates
+        __props__.__dict__["leaf_not_after_behavior"] = leaf_not_after_behavior
+        __props__.__dict__["manual_chains"] = manual_chains
+        __props__.__dict__["namespace"] = namespace
+        __props__.__dict__["ocsp_servers"] = ocsp_servers
+        __props__.__dict__["revocation_signature_algorithm"] = revocation_signature_algorithm
+        __props__.__dict__["usage"] = usage
+        return SecretBackendIssuer(resource_name, opts=opts, __props__=__props__)
+    @_builtins.property
+    @pulumi.getter
+    def backend(self) -> pulumi.Output[_builtins.str]:
+        """
+        The path the PKI secret backend is mounted at, with no
+        leading or trailing `/`s.
+        """
+        return pulumi.get(self, "backend")
+    @_builtins.property
+    @pulumi.getter(name="crlDistributionPoints")
+    def crl_distribution_points(self) -> pulumi.Output[Optional[Sequence[_builtins.str]]]:
+        """
+        Specifies the URL values for the CRL
+        Distribution Points field.
+        """
+        return pulumi.get(self, "crl_distribution_points")
+    @_builtins.property
+    @pulumi.getter(name="disableCriticalExtensionChecks")
+    def disable_critical_extension_checks(self) -> pulumi.Output[Optional[_builtins.bool]]:
+        """
+        This determines whether this
+        issuer is able to issue certificates where the chain of trust (including the
+        issued certificate) contain critical extensions not processed by Vault.
+        """
+        return pulumi.get(self, "disable_critical_extension_checks")
+    @_builtins.property
+    @pulumi.getter(name="disableNameChecks")
+    def disable_name_checks(self) -> pulumi.Output[Optional[_builtins.bool]]:
+        """
+        This determines whether this issuer is able
+        to issue certificates where the chain of trust (including the final issued
+        certificate) contains a link in which the subject of the issuing certificate
+        does not match the named issuer of the certificate it signed.
+        """
+        return pulumi.get(self, "disable_name_checks")
+    @_builtins.property
+    @pulumi.getter(name="disableNameConstraintChecks")
+    def disable_name_constraint_checks(self) -> pulumi.Output[Optional[_builtins.bool]]:
+        """
+        This determines whether this
+        issuer is able to issue certificates where the chain of trust (including the
+        final issued certificate) violates the name constraints critical extension of
+        one of the issuer certificates in the chain.
+        """
+        return pulumi.get(self, "disable_name_constraint_checks")
+    @_builtins.property
+    @pulumi.getter(name="disablePathLengthChecks")
+    def disable_path_length_checks(self) -> pulumi.Output[Optional[_builtins.bool]]:
+        """
+        This determines whether this issuer
+        is able to issue certificates where the chain of trust (including the final
+        issued certificate) is longer than allowed by a certificate authority in that
+        chain.
+        """
+        return pulumi.get(self, "disable_path_length_checks")
+    @_builtins.property
+    @pulumi.getter(name="enableAiaUrlTemplating")
+    def enable_aia_url_templating(self) -> pulumi.Output[Optional[_builtins.bool]]:
+        """
+        Specifies that the AIA URL values should
+        be templated.
+        """
+        return pulumi.get(self, "enable_aia_url_templating")
+    @_builtins.property
+    @pulumi.getter(name="issuerId")
+    def issuer_id(self) -> pulumi.Output[_builtins.str]:
+        """
+        ID of the issuer.
+        """
+        return pulumi.get(self, "issuer_id")
+    @_builtins.property
+    @pulumi.getter(name="issuerName")
+    def issuer_name(self) -> pulumi.Output[Optional[_builtins.str]]:
+        """
+        Name of the issuer.
+        """
+        return pulumi.get(self, "issuer_name")
+    @_builtins.property
+    @pulumi.getter(name="issuerRef")
+    def issuer_ref(self) -> pulumi.Output[_builtins.str]:
+        """
+        Reference to an existing issuer.
+        """
+        return pulumi.get(self, "issuer_ref")
+    @_builtins.property
+    @pulumi.getter(name="issuingCertificates")
+    def issuing_certificates(self) -> pulumi.Output[Optional[Sequence[_builtins.str]]]:
+        """
+        Specifies the URL values for the Issuing
+        Certificate field.
+        """
+        return pulumi.get(self, "issuing_certificates")
+    @_builtins.property
+    @pulumi.getter(name="leafNotAfterBehavior")
+    def leaf_not_after_behavior(self) -> pulumi.Output[_builtins.str]:
+        """
+        Behavior of a leaf's NotAfter field during
+        issuance.
+        """
+        return pulumi.get(self, "leaf_not_after_behavior")
+    @_builtins.property
+    @pulumi.getter(name="manualChains")
+    def manual_chains(self) -> pulumi.Output[Optional[Sequence[_builtins.str]]]:
+        """
+        Chain of issuer references to build this issuer's
+        computed CAChain field from, when non-empty.
+        """
+        return pulumi.get(self, "manual_chains")
+    @_builtins.property
+    @pulumi.getter
+    def namespace(self) -> pulumi.Output[Optional[_builtins.str]]:
+        """
+        The namespace to provision the resource in.
+        The value should not contain leading or trailing forward slashes.
+        The `namespace` is always relative to the provider's configured [namespace](https://www.terraform.io/docs/providers/vault/index.html#namespace).
+        *Available only for Vault Enterprise*.
+        """
+        return pulumi.get(self, "namespace")
+    @_builtins.property
+    @pulumi.getter(name="ocspServers")
+    def ocsp_servers(self) -> pulumi.Output[Optional[Sequence[_builtins.str]]]:
+        """
+        Specifies the URL values for the OCSP Servers field.
+        """
+        return pulumi.get(self, "ocsp_servers")
+    @_builtins.property
+    @pulumi.getter(name="revocationSignatureAlgorithm")
+    def revocation_signature_algorithm(self) -> pulumi.Output[_builtins.str]:
+        """
+        Which signature algorithm to use
+        when building CRLs.
+        """
+        return pulumi.get(self, "revocation_signature_algorithm")
+    @_builtins.property
+    @pulumi.getter
+    def usage(self) -> pulumi.Output[_builtins.str]:
+        """
+        Allowed usages for this issuer.
+        """
+        return pulumi.get(self, "usage")