pulumi-vault 7.6.0a1764657486__py3-none-any.whl

pulumi_vault/get_namespaces.py

@@ -0,0 +1,202 @@
+# coding=utf-8
+# *** WARNING: this file was generated by pulumi-language-python. ***
+# *** Do not edit by hand unless you're certain you know what you are doing! ***
+
+import builtins as _builtins
+import warnings
+import sys
+import pulumi
+import pulumi.runtime
+from typing import Any, Mapping, Optional, Sequence, Union, overload
+if sys.version_info >= (3, 11):
+    from typing import NotRequired, TypedDict, TypeAlias
+else:
+    from typing_extensions import NotRequired, TypedDict, TypeAlias
+from . import _utilities
+
+__all__ = [
+    'GetNamespacesResult',
+    'AwaitableGetNamespacesResult',
+    'get_namespaces',
+    'get_namespaces_output',
+]
+
+@pulumi.output_type
+class GetNamespacesResult:
+    """
+    A collection of values returned by getNamespaces.
+    """
+    def __init__(__self__, id=None, namespace=None, paths=None, paths_fqs=None, recursive=None):
+        if id and not isinstance(id, str):
+            raise TypeError("Expected argument 'id' to be a str")
+        pulumi.set(__self__, "id", id)
+        if namespace and not isinstance(namespace, str):
+            raise TypeError("Expected argument 'namespace' to be a str")
+        pulumi.set(__self__, "namespace", namespace)
+        if paths and not isinstance(paths, list):
+            raise TypeError("Expected argument 'paths' to be a list")
+        pulumi.set(__self__, "paths", paths)
+        if paths_fqs and not isinstance(paths_fqs, list):
+            raise TypeError("Expected argument 'paths_fqs' to be a list")
+        pulumi.set(__self__, "paths_fqs", paths_fqs)
+        if recursive and not isinstance(recursive, bool):
+            raise TypeError("Expected argument 'recursive' to be a bool")
+        pulumi.set(__self__, "recursive", recursive)
+
+    @_builtins.property
+    @pulumi.getter
+    def id(self) -> _builtins.str:
+        """
+        The provider-assigned unique ID for this managed resource.
+        """
+        return pulumi.get(self, "id")
+
+    @_builtins.property
+    @pulumi.getter
+    def namespace(self) -> Optional[_builtins.str]:
+        return pulumi.get(self, "namespace")
+
+    @_builtins.property
+    @pulumi.getter
+    def paths(self) -> Sequence[_builtins.str]:
+        """
+        Set of the paths of child namespaces.
+        """
+        return pulumi.get(self, "paths")
+
+    @_builtins.property
+    @pulumi.getter(name="pathsFqs")
+    def paths_fqs(self) -> Sequence[_builtins.str]:
+        """
+        Set of the fully qualified paths of child namespaces.
+        """
+        return pulumi.get(self, "paths_fqs")
+
+    @_builtins.property
+    @pulumi.getter
+    def recursive(self) -> Optional[_builtins.bool]:
+        return pulumi.get(self, "recursive")
+
+
+class AwaitableGetNamespacesResult(GetNamespacesResult):
+    # pylint: disable=using-constant-test
+    def __await__(self):
+        if False:
+            yield self
+        return GetNamespacesResult(
+            id=self.id,
+            namespace=self.namespace,
+            paths=self.paths,
+            paths_fqs=self.paths_fqs,
+            recursive=self.recursive)
+
+
+def get_namespaces(namespace: Optional[_builtins.str] = None,
+                   recursive: Optional[_builtins.bool] = None,
+                   opts: Optional[pulumi.InvokeOptions] = None) -> AwaitableGetNamespacesResult:
+    """
+    ## Example Usage
+
+    ### Direct child namespaces
+
+    ```python
+    import pulumi
+    import pulumi_vault as vault
+
+    children = vault.get_namespaces()
+    ```
+
+    ### All child namespaces
+
+    ```python
+    import pulumi
+    import pulumi_vault as vault
+
+    children = vault.get_namespaces(recursive=True)
+    ```
+
+    ### Child namespace details
+
+    To fetch the details of child namespaces:
+
+    ```python
+    import pulumi
+    import pulumi_vault as vault
+
+    children = vault.get_namespaces(namespace="parent")
+    child = {__key: vault.get_namespace(namespace=children.namespace,
+        path=__key) for __key, __value in children.paths}
+    ```
+
+
+    :param _builtins.str namespace: The namespace to provision the resource in.
+           The value should not contain leading or trailing forward slashes.
+           The `namespace` is always relative to the provider's configured [namespace](https://www.terraform.io/docs/providers/vault#namespace).
+    :param _builtins.bool recursive: If `true`, it will returns all child namespaces of the given namespace. Defaults to `false`, which returns only direct child namespaces.
+    """
+    __args__ = dict()
+    __args__['namespace'] = namespace
+    __args__['recursive'] = recursive
+    opts = pulumi.InvokeOptions.merge(_utilities.get_invoke_opts_defaults(), opts)
+    __ret__ = pulumi.runtime.invoke('vault:index/getNamespaces:getNamespaces', __args__, opts=opts, typ=GetNamespacesResult).value
+
+    return AwaitableGetNamespacesResult(
+        id=pulumi.get(__ret__, 'id'),
+        namespace=pulumi.get(__ret__, 'namespace'),
+        paths=pulumi.get(__ret__, 'paths'),
+        paths_fqs=pulumi.get(__ret__, 'paths_fqs'),
+        recursive=pulumi.get(__ret__, 'recursive'))
+def get_namespaces_output(namespace: Optional[pulumi.Input[Optional[_builtins.str]]] = None,
+                          recursive: Optional[pulumi.Input[Optional[_builtins.bool]]] = None,
+                          opts: Optional[Union[pulumi.InvokeOptions, pulumi.InvokeOutputOptions]] = None) -> pulumi.Output[GetNamespacesResult]:
+    """
+    ## Example Usage
+
+    ### Direct child namespaces
+
+    ```python
+    import pulumi
+    import pulumi_vault as vault
+
+    children = vault.get_namespaces()
+    ```
+
+    ### All child namespaces
+
+    ```python
+    import pulumi
+    import pulumi_vault as vault
+
+    children = vault.get_namespaces(recursive=True)
+    ```
+
+    ### Child namespace details
+
+    To fetch the details of child namespaces:
+
+    ```python
+    import pulumi
+    import pulumi_vault as vault
+
+    children = vault.get_namespaces(namespace="parent")
+    child = {__key: vault.get_namespace(namespace=children.namespace,
+        path=__key) for __key, __value in children.paths}
+    ```
+
+
+    :param _builtins.str namespace: The namespace to provision the resource in.
+           The value should not contain leading or trailing forward slashes.
+           The `namespace` is always relative to the provider's configured [namespace](https://www.terraform.io/docs/providers/vault#namespace).
+    :param _builtins.bool recursive: If `true`, it will returns all child namespaces of the given namespace. Defaults to `false`, which returns only direct child namespaces.
+    """
+    __args__ = dict()
+    __args__['namespace'] = namespace
+    __args__['recursive'] = recursive
+    opts = pulumi.InvokeOutputOptions.merge(_utilities.get_invoke_opts_defaults(), opts)
+    __ret__ = pulumi.runtime.invoke_output('vault:index/getNamespaces:getNamespaces', __args__, opts=opts, typ=GetNamespacesResult)
+    return __ret__.apply(lambda __response__: GetNamespacesResult(
+        id=pulumi.get(__response__, 'id'),
+        namespace=pulumi.get(__response__, 'namespace'),
+        paths=pulumi.get(__response__, 'paths'),
+        paths_fqs=pulumi.get(__response__, 'paths_fqs'),
+        recursive=pulumi.get(__response__, 'recursive')))

pulumi_vault/get_nomad_access_token.py

@@ -0,0 +1,210 @@
+# coding=utf-8
+# *** WARNING: this file was generated by pulumi-language-python. ***
+# *** Do not edit by hand unless you're certain you know what you are doing! ***
+
+import builtins as _builtins
+import warnings
+import sys
+import pulumi
+import pulumi.runtime
+from typing import Any, Mapping, Optional, Sequence, Union, overload
+if sys.version_info >= (3, 11):
+    from typing import NotRequired, TypedDict, TypeAlias
+else:
+    from typing_extensions import NotRequired, TypedDict, TypeAlias
+from . import _utilities
+
+__all__ = [
+    'GetNomadAccessTokenResult',
+    'AwaitableGetNomadAccessTokenResult',
+    'get_nomad_access_token',
+    'get_nomad_access_token_output',
+]
+
+@pulumi.output_type
+class GetNomadAccessTokenResult:
+    """
+    A collection of values returned by getNomadAccessToken.
+    """
+    def __init__(__self__, accessor_id=None, backend=None, id=None, namespace=None, role=None, secret_id=None):
+        if accessor_id and not isinstance(accessor_id, str):
+            raise TypeError("Expected argument 'accessor_id' to be a str")
+        pulumi.set(__self__, "accessor_id", accessor_id)
+        if backend and not isinstance(backend, str):
+            raise TypeError("Expected argument 'backend' to be a str")
+        pulumi.set(__self__, "backend", backend)
+        if id and not isinstance(id, str):
+            raise TypeError("Expected argument 'id' to be a str")
+        pulumi.set(__self__, "id", id)
+        if namespace and not isinstance(namespace, str):
+            raise TypeError("Expected argument 'namespace' to be a str")
+        pulumi.set(__self__, "namespace", namespace)
+        if role and not isinstance(role, str):
+            raise TypeError("Expected argument 'role' to be a str")
+        pulumi.set(__self__, "role", role)
+        if secret_id and not isinstance(secret_id, str):
+            raise TypeError("Expected argument 'secret_id' to be a str")
+        pulumi.set(__self__, "secret_id", secret_id)
+
+    @_builtins.property
+    @pulumi.getter(name="accessorId")
+    def accessor_id(self) -> _builtins.str:
+        """
+        The public identifier for a specific token. It can be used 
+        to look up information about a token or to revoke a token.
+        """
+        return pulumi.get(self, "accessor_id")
+
+    @_builtins.property
+    @pulumi.getter
+    def backend(self) -> _builtins.str:
+        return pulumi.get(self, "backend")
+
+    @_builtins.property
+    @pulumi.getter
+    def id(self) -> _builtins.str:
+        """
+        The provider-assigned unique ID for this managed resource.
+        """
+        return pulumi.get(self, "id")
+
+    @_builtins.property
+    @pulumi.getter
+    def namespace(self) -> Optional[_builtins.str]:
+        return pulumi.get(self, "namespace")
+
+    @_builtins.property
+    @pulumi.getter
+    def role(self) -> _builtins.str:
+        return pulumi.get(self, "role")
+
+    @_builtins.property
+    @pulumi.getter(name="secretId")
+    def secret_id(self) -> _builtins.str:
+        """
+        The token to be used when making requests to Nomad and should be kept private.
+        """
+        return pulumi.get(self, "secret_id")
+
+
+class AwaitableGetNomadAccessTokenResult(GetNomadAccessTokenResult):
+    # pylint: disable=using-constant-test
+    def __await__(self):
+        if False:
+            yield self
+        return GetNomadAccessTokenResult(
+            accessor_id=self.accessor_id,
+            backend=self.backend,
+            id=self.id,
+            namespace=self.namespace,
+            role=self.role,
+            secret_id=self.secret_id)
+
+
+def get_nomad_access_token(backend: Optional[_builtins.str] = None,
+                           namespace: Optional[_builtins.str] = None,
+                           role: Optional[_builtins.str] = None,
+                           opts: Optional[pulumi.InvokeOptions] = None) -> AwaitableGetNomadAccessTokenResult:
+    """
+    ## Example Usage
+
+    ```python
+    import pulumi
+    import pulumi_vault as vault
+
+    config = vault.NomadSecretBackend("config",
+        backend="nomad",
+        description="test description",
+        default_lease_ttl_seconds=3600,
+        max_lease_ttl_seconds=7200,
+        address="https://127.0.0.1:4646",
+        token="ae20ceaa-...")
+    test = vault.NomadSecretRole("test",
+        backend=config.backend,
+        role="test",
+        type="client",
+        policies=["readonly"])
+    token = pulumi.Output.all(
+        backend=config.backend,
+        role=test.role
+    ).apply(lambda resolved_outputs: vault.get_nomad_access_token_output(backend=resolved_outputs['backend'],
+        role=resolved_outputs['role']))
+    ```
+
+
+    :param _builtins.str backend: The path to the Nomad secret backend to
+           read credentials from, with no leading or trailing `/`s.
+    :param _builtins.str namespace: The namespace of the target resource.
+           The value should not contain leading or trailing forward slashes.
+           The `namespace` is always relative to the provider's configured [namespace](https://www.terraform.io/docs/providers/vault/index.html#namespace).
+           *Available only for Vault Enterprise*.
+    :param _builtins.str role: The name of the Nomad secret backend role to generate
+           a token for, with no leading or trailing `/`s.
+    """
+    __args__ = dict()
+    __args__['backend'] = backend
+    __args__['namespace'] = namespace
+    __args__['role'] = role
+    opts = pulumi.InvokeOptions.merge(_utilities.get_invoke_opts_defaults(), opts)
+    __ret__ = pulumi.runtime.invoke('vault:index/getNomadAccessToken:getNomadAccessToken', __args__, opts=opts, typ=GetNomadAccessTokenResult).value
+
+    return AwaitableGetNomadAccessTokenResult(
+        accessor_id=pulumi.get(__ret__, 'accessor_id'),
+        backend=pulumi.get(__ret__, 'backend'),
+        id=pulumi.get(__ret__, 'id'),
+        namespace=pulumi.get(__ret__, 'namespace'),
+        role=pulumi.get(__ret__, 'role'),
+        secret_id=pulumi.get(__ret__, 'secret_id'))
+def get_nomad_access_token_output(backend: Optional[pulumi.Input[_builtins.str]] = None,
+                                  namespace: Optional[pulumi.Input[Optional[_builtins.str]]] = None,
+                                  role: Optional[pulumi.Input[_builtins.str]] = None,
+                                  opts: Optional[Union[pulumi.InvokeOptions, pulumi.InvokeOutputOptions]] = None) -> pulumi.Output[GetNomadAccessTokenResult]:
+    """
+    ## Example Usage
+
+    ```python
+    import pulumi
+    import pulumi_vault as vault
+
+    config = vault.NomadSecretBackend("config",
+        backend="nomad",
+        description="test description",
+        default_lease_ttl_seconds=3600,
+        max_lease_ttl_seconds=7200,
+        address="https://127.0.0.1:4646",
+        token="ae20ceaa-...")
+    test = vault.NomadSecretRole("test",
+        backend=config.backend,
+        role="test",
+        type="client",
+        policies=["readonly"])
+    token = pulumi.Output.all(
+        backend=config.backend,
+        role=test.role
+    ).apply(lambda resolved_outputs: vault.get_nomad_access_token_output(backend=resolved_outputs['backend'],
+        role=resolved_outputs['role']))
+    ```
+
+
+    :param _builtins.str backend: The path to the Nomad secret backend to
+           read credentials from, with no leading or trailing `/`s.
+    :param _builtins.str namespace: The namespace of the target resource.
+           The value should not contain leading or trailing forward slashes.
+           The `namespace` is always relative to the provider's configured [namespace](https://www.terraform.io/docs/providers/vault/index.html#namespace).
+           *Available only for Vault Enterprise*.
+    :param _builtins.str role: The name of the Nomad secret backend role to generate
+           a token for, with no leading or trailing `/`s.
+    """
+    __args__ = dict()
+    __args__['backend'] = backend
+    __args__['namespace'] = namespace
+    __args__['role'] = role
+    opts = pulumi.InvokeOutputOptions.merge(_utilities.get_invoke_opts_defaults(), opts)
+    __ret__ = pulumi.runtime.invoke_output('vault:index/getNomadAccessToken:getNomadAccessToken', __args__, opts=opts, typ=GetNomadAccessTokenResult)
+    return __ret__.apply(lambda __response__: GetNomadAccessTokenResult(
+        accessor_id=pulumi.get(__response__, 'accessor_id'),
+        backend=pulumi.get(__response__, 'backend'),
+        id=pulumi.get(__response__, 'id'),
+        namespace=pulumi.get(__response__, 'namespace'),
+        role=pulumi.get(__response__, 'role'),
+        secret_id=pulumi.get(__response__, 'secret_id')))

pulumi_vault/get_policy_document.py

@@ -0,0 +1,160 @@
+# coding=utf-8
+# *** WARNING: this file was generated by pulumi-language-python. ***
+# *** Do not edit by hand unless you're certain you know what you are doing! ***
+
+import builtins as _builtins
+import warnings
+import sys
+import pulumi
+import pulumi.runtime
+from typing import Any, Mapping, Optional, Sequence, Union, overload
+if sys.version_info >= (3, 11):
+    from typing import NotRequired, TypedDict, TypeAlias
+else:
+    from typing_extensions import NotRequired, TypedDict, TypeAlias
+from . import _utilities
+from . import outputs
+from ._inputs import *
+
+__all__ = [
+    'GetPolicyDocumentResult',
+    'AwaitableGetPolicyDocumentResult',
+    'get_policy_document',
+    'get_policy_document_output',
+]
+
+@pulumi.output_type
+class GetPolicyDocumentResult:
+    """
+    A collection of values returned by getPolicyDocument.
+    """
+    def __init__(__self__, hcl=None, id=None, namespace=None, rules=None):
+        if hcl and not isinstance(hcl, str):
+            raise TypeError("Expected argument 'hcl' to be a str")
+        pulumi.set(__self__, "hcl", hcl)
+        if id and not isinstance(id, str):
+            raise TypeError("Expected argument 'id' to be a str")
+        pulumi.set(__self__, "id", id)
+        if namespace and not isinstance(namespace, str):
+            raise TypeError("Expected argument 'namespace' to be a str")
+        pulumi.set(__self__, "namespace", namespace)
+        if rules and not isinstance(rules, list):
+            raise TypeError("Expected argument 'rules' to be a list")
+        pulumi.set(__self__, "rules", rules)
+
+    @_builtins.property
+    @pulumi.getter
+    def hcl(self) -> _builtins.str:
+        """
+        The above arguments serialized as a standard Vault HCL policy document.
+        """
+        return pulumi.get(self, "hcl")
+
+    @_builtins.property
+    @pulumi.getter
+    def id(self) -> _builtins.str:
+        """
+        The provider-assigned unique ID for this managed resource.
+        """
+        return pulumi.get(self, "id")
+
+    @_builtins.property
+    @pulumi.getter
+    def namespace(self) -> Optional[_builtins.str]:
+        return pulumi.get(self, "namespace")
+
+    @_builtins.property
+    @pulumi.getter
+    def rules(self) -> Sequence['outputs.GetPolicyDocumentRuleResult']:
+        return pulumi.get(self, "rules")
+
+
+class AwaitableGetPolicyDocumentResult(GetPolicyDocumentResult):
+    # pylint: disable=using-constant-test
+    def __await__(self):
+        if False:
+            yield self
+        return GetPolicyDocumentResult(
+            hcl=self.hcl,
+            id=self.id,
+            namespace=self.namespace,
+            rules=self.rules)
+
+
+def get_policy_document(namespace: Optional[_builtins.str] = None,
+                        rules: Optional[Sequence[Union['GetPolicyDocumentRuleArgs', 'GetPolicyDocumentRuleArgsDict']]] = None,
+                        opts: Optional[pulumi.InvokeOptions] = None) -> AwaitableGetPolicyDocumentResult:
+    """
+    This is a data source which can be used to construct a HCL representation of an Vault policy document, for use with resources which expect policy documents, such as the `Policy` resource.
+
+    ## Example Usage
+
+    ```python
+    import pulumi
+    import pulumi_vault as vault
+
+    example = vault.get_policy_document(rules=[{
+        "path": "secret/*",
+        "capabilities": [
+            "create",
+            "read",
+            "update",
+            "delete",
+            "list",
+        ],
+        "description": "allow all on secrets",
+    }])
+    example_policy = vault.Policy("example",
+        name="example_policy",
+        policy=example.hcl)
+    ```
+    """
+    __args__ = dict()
+    __args__['namespace'] = namespace
+    __args__['rules'] = rules
+    opts = pulumi.InvokeOptions.merge(_utilities.get_invoke_opts_defaults(), opts)
+    __ret__ = pulumi.runtime.invoke('vault:index/getPolicyDocument:getPolicyDocument', __args__, opts=opts, typ=GetPolicyDocumentResult).value
+
+    return AwaitableGetPolicyDocumentResult(
+        hcl=pulumi.get(__ret__, 'hcl'),
+        id=pulumi.get(__ret__, 'id'),
+        namespace=pulumi.get(__ret__, 'namespace'),
+        rules=pulumi.get(__ret__, 'rules'))
+def get_policy_document_output(namespace: Optional[pulumi.Input[Optional[_builtins.str]]] = None,
+                               rules: Optional[pulumi.Input[Optional[Sequence[Union['GetPolicyDocumentRuleArgs', 'GetPolicyDocumentRuleArgsDict']]]]] = None,
+                               opts: Optional[Union[pulumi.InvokeOptions, pulumi.InvokeOutputOptions]] = None) -> pulumi.Output[GetPolicyDocumentResult]:
+    """
+    This is a data source which can be used to construct a HCL representation of an Vault policy document, for use with resources which expect policy documents, such as the `Policy` resource.
+
+    ## Example Usage
+
+    ```python
+    import pulumi
+    import pulumi_vault as vault
+
+    example = vault.get_policy_document(rules=[{
+        "path": "secret/*",
+        "capabilities": [
+            "create",
+            "read",
+            "update",
+            "delete",
+            "list",
+        ],
+        "description": "allow all on secrets",
+    }])
+    example_policy = vault.Policy("example",
+        name="example_policy",
+        policy=example.hcl)
+    ```
+    """
+    __args__ = dict()
+    __args__['namespace'] = namespace
+    __args__['rules'] = rules
+    opts = pulumi.InvokeOutputOptions.merge(_utilities.get_invoke_opts_defaults(), opts)
+    __ret__ = pulumi.runtime.invoke_output('vault:index/getPolicyDocument:getPolicyDocument', __args__, opts=opts, typ=GetPolicyDocumentResult)
+    return __ret__.apply(lambda __response__: GetPolicyDocumentResult(
+        hcl=pulumi.get(__response__, 'hcl'),
+        id=pulumi.get(__response__, 'id'),
+        namespace=pulumi.get(__response__, 'namespace'),
+        rules=pulumi.get(__response__, 'rules')))