pulumi-vault 7.6.0a1764657486__py3-none-any.whl
This diff represents the content of publicly available package versions that have been released to one of the supported registries. The information contained in this diff is provided for informational purposes only and reflects changes between package versions as they appear in their respective public registries.
- pulumi_vault/__init__.py +1399 -0
- pulumi_vault/_inputs.py +2701 -0
- pulumi_vault/_utilities.py +331 -0
- pulumi_vault/ad/__init__.py +12 -0
- pulumi_vault/ad/get_access_credentials.py +177 -0
- pulumi_vault/ad/secret_backend.py +1916 -0
- pulumi_vault/ad/secret_library.py +546 -0
- pulumi_vault/ad/secret_role.py +499 -0
- pulumi_vault/alicloud/__init__.py +9 -0
- pulumi_vault/alicloud/auth_backend_role.py +866 -0
- pulumi_vault/approle/__init__.py +12 -0
- pulumi_vault/approle/auth_backend_login.py +571 -0
- pulumi_vault/approle/auth_backend_role.py +1082 -0
- pulumi_vault/approle/auth_backend_role_secret_id.py +796 -0
- pulumi_vault/approle/get_auth_backend_role_id.py +169 -0
- pulumi_vault/audit.py +499 -0
- pulumi_vault/audit_request_header.py +277 -0
- pulumi_vault/auth_backend.py +565 -0
- pulumi_vault/aws/__init__.py +22 -0
- pulumi_vault/aws/auth_backend_cert.py +420 -0
- pulumi_vault/aws/auth_backend_client.py +1259 -0
- pulumi_vault/aws/auth_backend_config_identity.py +494 -0
- pulumi_vault/aws/auth_backend_identity_whitelist.py +380 -0
- pulumi_vault/aws/auth_backend_login.py +1046 -0
- pulumi_vault/aws/auth_backend_role.py +1961 -0
- pulumi_vault/aws/auth_backend_role_tag.py +638 -0
- pulumi_vault/aws/auth_backend_roletag_blacklist.py +366 -0
- pulumi_vault/aws/auth_backend_sts_role.py +414 -0
- pulumi_vault/aws/get_access_credentials.py +369 -0
- pulumi_vault/aws/get_static_access_credentials.py +137 -0
- pulumi_vault/aws/secret_backend.py +2018 -0
- pulumi_vault/aws/secret_backend_role.py +1188 -0
- pulumi_vault/aws/secret_backend_static_role.py +639 -0
- pulumi_vault/azure/__init__.py +15 -0
- pulumi_vault/azure/_inputs.py +108 -0
- pulumi_vault/azure/auth_backend_config.py +1096 -0
- pulumi_vault/azure/auth_backend_role.py +1176 -0
- pulumi_vault/azure/backend.py +1793 -0
- pulumi_vault/azure/backend_role.py +883 -0
- pulumi_vault/azure/get_access_credentials.py +400 -0
- pulumi_vault/azure/outputs.py +107 -0
- pulumi_vault/cert_auth_backend_role.py +1539 -0
- pulumi_vault/config/__init__.py +9 -0
- pulumi_vault/config/__init__.pyi +164 -0
- pulumi_vault/config/_inputs.py +73 -0
- pulumi_vault/config/outputs.py +1225 -0
- pulumi_vault/config/ui_custom_message.py +530 -0
- pulumi_vault/config/vars.py +230 -0
- pulumi_vault/consul/__init__.py +10 -0
- pulumi_vault/consul/secret_backend.py +1517 -0
- pulumi_vault/consul/secret_backend_role.py +847 -0
- pulumi_vault/database/__init__.py +14 -0
- pulumi_vault/database/_inputs.py +11907 -0
- pulumi_vault/database/outputs.py +8496 -0
- pulumi_vault/database/secret_backend_connection.py +1676 -0
- pulumi_vault/database/secret_backend_role.py +840 -0
- pulumi_vault/database/secret_backend_static_role.py +881 -0
- pulumi_vault/database/secrets_mount.py +2160 -0
- pulumi_vault/egp_policy.py +399 -0
- pulumi_vault/gcp/__init__.py +17 -0
- pulumi_vault/gcp/_inputs.py +441 -0
- pulumi_vault/gcp/auth_backend.py +1486 -0
- pulumi_vault/gcp/auth_backend_role.py +1235 -0
- pulumi_vault/gcp/get_auth_backend_role.py +514 -0
- pulumi_vault/gcp/outputs.py +302 -0
- pulumi_vault/gcp/secret_backend.py +1807 -0
- pulumi_vault/gcp/secret_impersonated_account.py +484 -0
- pulumi_vault/gcp/secret_roleset.py +554 -0
- pulumi_vault/gcp/secret_static_account.py +557 -0
- pulumi_vault/generic/__init__.py +11 -0
- pulumi_vault/generic/endpoint.py +786 -0
- pulumi_vault/generic/get_secret.py +306 -0
- pulumi_vault/generic/secret.py +486 -0
- pulumi_vault/get_auth_backend.py +226 -0
- pulumi_vault/get_auth_backends.py +170 -0
- pulumi_vault/get_namespace.py +226 -0
- pulumi_vault/get_namespaces.py +202 -0
- pulumi_vault/get_nomad_access_token.py +210 -0
- pulumi_vault/get_policy_document.py +160 -0
- pulumi_vault/get_raft_autopilot_state.py +267 -0
- pulumi_vault/github/__init__.py +13 -0
- pulumi_vault/github/_inputs.py +225 -0
- pulumi_vault/github/auth_backend.py +1194 -0
- pulumi_vault/github/outputs.py +174 -0
- pulumi_vault/github/team.py +380 -0
- pulumi_vault/github/user.py +380 -0
- pulumi_vault/identity/__init__.py +35 -0
- pulumi_vault/identity/entity.py +447 -0
- pulumi_vault/identity/entity_alias.py +398 -0
- pulumi_vault/identity/entity_policies.py +455 -0
- pulumi_vault/identity/get_entity.py +384 -0
- pulumi_vault/identity/get_group.py +467 -0
- pulumi_vault/identity/get_oidc_client_creds.py +175 -0
- pulumi_vault/identity/get_oidc_openid_config.py +334 -0
- pulumi_vault/identity/get_oidc_public_keys.py +179 -0
- pulumi_vault/identity/group.py +805 -0
- pulumi_vault/identity/group_alias.py +386 -0
- pulumi_vault/identity/group_member_entity_ids.py +444 -0
- pulumi_vault/identity/group_member_group_ids.py +467 -0
- pulumi_vault/identity/group_policies.py +471 -0
- pulumi_vault/identity/mfa_duo.py +674 -0
- pulumi_vault/identity/mfa_login_enforcement.py +566 -0
- pulumi_vault/identity/mfa_okta.py +626 -0
- pulumi_vault/identity/mfa_pingid.py +616 -0
- pulumi_vault/identity/mfa_totp.py +758 -0
- pulumi_vault/identity/oidc.py +268 -0
- pulumi_vault/identity/oidc_assignment.py +375 -0
- pulumi_vault/identity/oidc_client.py +667 -0
- pulumi_vault/identity/oidc_key.py +474 -0
- pulumi_vault/identity/oidc_key_allowed_client_id.py +298 -0
- pulumi_vault/identity/oidc_provider.py +550 -0
- pulumi_vault/identity/oidc_role.py +543 -0
- pulumi_vault/identity/oidc_scope.py +355 -0
- pulumi_vault/identity/outputs.py +137 -0
- pulumi_vault/jwt/__init__.py +12 -0
- pulumi_vault/jwt/_inputs.py +225 -0
- pulumi_vault/jwt/auth_backend.py +1347 -0
- pulumi_vault/jwt/auth_backend_role.py +1847 -0
- pulumi_vault/jwt/outputs.py +174 -0
- pulumi_vault/kmip/__init__.py +11 -0
- pulumi_vault/kmip/secret_backend.py +1591 -0
- pulumi_vault/kmip/secret_role.py +1194 -0
- pulumi_vault/kmip/secret_scope.py +372 -0
- pulumi_vault/kubernetes/__init__.py +15 -0
- pulumi_vault/kubernetes/auth_backend_config.py +654 -0
- pulumi_vault/kubernetes/auth_backend_role.py +1031 -0
- pulumi_vault/kubernetes/get_auth_backend_config.py +280 -0
- pulumi_vault/kubernetes/get_auth_backend_role.py +470 -0
- pulumi_vault/kubernetes/get_service_account_token.py +344 -0
- pulumi_vault/kubernetes/secret_backend.py +1341 -0
- pulumi_vault/kubernetes/secret_backend_role.py +1140 -0
- pulumi_vault/kv/__init__.py +18 -0
- pulumi_vault/kv/_inputs.py +124 -0
- pulumi_vault/kv/get_secret.py +240 -0
- pulumi_vault/kv/get_secret_subkeys_v2.py +275 -0
- pulumi_vault/kv/get_secret_v2.py +315 -0
- pulumi_vault/kv/get_secrets_list.py +186 -0
- pulumi_vault/kv/get_secrets_list_v2.py +243 -0
- pulumi_vault/kv/outputs.py +102 -0
- pulumi_vault/kv/secret.py +397 -0
- pulumi_vault/kv/secret_backend_v2.py +455 -0
- pulumi_vault/kv/secret_v2.py +970 -0
- pulumi_vault/ldap/__init__.py +19 -0
- pulumi_vault/ldap/_inputs.py +225 -0
- pulumi_vault/ldap/auth_backend.py +2520 -0
- pulumi_vault/ldap/auth_backend_group.py +386 -0
- pulumi_vault/ldap/auth_backend_user.py +439 -0
- pulumi_vault/ldap/get_dynamic_credentials.py +181 -0
- pulumi_vault/ldap/get_static_credentials.py +192 -0
- pulumi_vault/ldap/outputs.py +174 -0
- pulumi_vault/ldap/secret_backend.py +2207 -0
- pulumi_vault/ldap/secret_backend_dynamic_role.py +767 -0
- pulumi_vault/ldap/secret_backend_library_set.py +552 -0
- pulumi_vault/ldap/secret_backend_static_role.py +541 -0
- pulumi_vault/managed/__init__.py +11 -0
- pulumi_vault/managed/_inputs.py +944 -0
- pulumi_vault/managed/keys.py +398 -0
- pulumi_vault/managed/outputs.py +667 -0
- pulumi_vault/mfa_duo.py +589 -0
- pulumi_vault/mfa_okta.py +623 -0
- pulumi_vault/mfa_pingid.py +670 -0
- pulumi_vault/mfa_totp.py +620 -0
- pulumi_vault/mongodbatlas/__init__.py +10 -0
- pulumi_vault/mongodbatlas/secret_backend.py +388 -0
- pulumi_vault/mongodbatlas/secret_role.py +726 -0
- pulumi_vault/mount.py +1262 -0
- pulumi_vault/namespace.py +452 -0
- pulumi_vault/nomad_secret_backend.py +1559 -0
- pulumi_vault/nomad_secret_role.py +489 -0
- pulumi_vault/oci_auth_backend.py +676 -0
- pulumi_vault/oci_auth_backend_role.py +852 -0
- pulumi_vault/okta/__init__.py +13 -0
- pulumi_vault/okta/_inputs.py +320 -0
- pulumi_vault/okta/auth_backend.py +1231 -0
- pulumi_vault/okta/auth_backend_group.py +369 -0
- pulumi_vault/okta/auth_backend_user.py +416 -0
- pulumi_vault/okta/outputs.py +244 -0
- pulumi_vault/outputs.py +502 -0
- pulumi_vault/pkisecret/__init__.py +38 -0
- pulumi_vault/pkisecret/_inputs.py +270 -0
- pulumi_vault/pkisecret/backend_acme_eab.py +550 -0
- pulumi_vault/pkisecret/backend_config_acme.py +690 -0
- pulumi_vault/pkisecret/backend_config_auto_tidy.py +1370 -0
- pulumi_vault/pkisecret/backend_config_cluster.py +370 -0
- pulumi_vault/pkisecret/backend_config_cmpv2.py +693 -0
- pulumi_vault/pkisecret/backend_config_est.py +756 -0
- pulumi_vault/pkisecret/backend_config_scep.py +738 -0
- pulumi_vault/pkisecret/get_backend_cert_metadata.py +277 -0
- pulumi_vault/pkisecret/get_backend_config_cmpv2.py +226 -0
- pulumi_vault/pkisecret/get_backend_config_est.py +251 -0
- pulumi_vault/pkisecret/get_backend_config_scep.py +271 -0
- pulumi_vault/pkisecret/get_backend_issuer.py +395 -0
- pulumi_vault/pkisecret/get_backend_issuers.py +192 -0
- pulumi_vault/pkisecret/get_backend_key.py +211 -0
- pulumi_vault/pkisecret/get_backend_keys.py +192 -0
- pulumi_vault/pkisecret/outputs.py +270 -0
- pulumi_vault/pkisecret/secret_backend_cert.py +1315 -0
- pulumi_vault/pkisecret/secret_backend_config_ca.py +386 -0
- pulumi_vault/pkisecret/secret_backend_config_issuers.py +392 -0
- pulumi_vault/pkisecret/secret_backend_config_urls.py +462 -0
- pulumi_vault/pkisecret/secret_backend_crl_config.py +846 -0
- pulumi_vault/pkisecret/secret_backend_intermediate_cert_request.py +1629 -0
- pulumi_vault/pkisecret/secret_backend_intermediate_set_signed.py +444 -0
- pulumi_vault/pkisecret/secret_backend_issuer.py +1089 -0
- pulumi_vault/pkisecret/secret_backend_key.py +613 -0
- pulumi_vault/pkisecret/secret_backend_role.py +2694 -0
- pulumi_vault/pkisecret/secret_backend_root_cert.py +2134 -0
- pulumi_vault/pkisecret/secret_backend_root_sign_intermediate.py +2031 -0
- pulumi_vault/pkisecret/secret_backend_sign.py +1194 -0
- pulumi_vault/plugin.py +596 -0
- pulumi_vault/plugin_pinned_version.py +299 -0
- pulumi_vault/policy.py +279 -0
- pulumi_vault/provider.py +781 -0
- pulumi_vault/pulumi-plugin.json +5 -0
- pulumi_vault/py.typed +0 -0
- pulumi_vault/quota_lease_count.py +504 -0
- pulumi_vault/quota_rate_limit.py +751 -0
- pulumi_vault/rabbitmq/__init__.py +12 -0
- pulumi_vault/rabbitmq/_inputs.py +235 -0
- pulumi_vault/rabbitmq/outputs.py +144 -0
- pulumi_vault/rabbitmq/secret_backend.py +1437 -0
- pulumi_vault/rabbitmq/secret_backend_role.py +496 -0
- pulumi_vault/raft_autopilot.py +609 -0
- pulumi_vault/raft_snapshot_agent_config.py +1591 -0
- pulumi_vault/rgp_policy.py +349 -0
- pulumi_vault/saml/__init__.py +12 -0
- pulumi_vault/saml/_inputs.py +225 -0
- pulumi_vault/saml/auth_backend.py +811 -0
- pulumi_vault/saml/auth_backend_role.py +1068 -0
- pulumi_vault/saml/outputs.py +174 -0
- pulumi_vault/scep_auth_backend_role.py +908 -0
- pulumi_vault/secrets/__init__.py +18 -0
- pulumi_vault/secrets/_inputs.py +110 -0
- pulumi_vault/secrets/outputs.py +94 -0
- pulumi_vault/secrets/sync_association.py +450 -0
- pulumi_vault/secrets/sync_aws_destination.py +780 -0
- pulumi_vault/secrets/sync_azure_destination.py +736 -0
- pulumi_vault/secrets/sync_config.py +303 -0
- pulumi_vault/secrets/sync_gcp_destination.py +572 -0
- pulumi_vault/secrets/sync_gh_destination.py +688 -0
- pulumi_vault/secrets/sync_github_apps.py +376 -0
- pulumi_vault/secrets/sync_vercel_destination.py +603 -0
- pulumi_vault/ssh/__init__.py +13 -0
- pulumi_vault/ssh/_inputs.py +76 -0
- pulumi_vault/ssh/get_secret_backend_sign.py +294 -0
- pulumi_vault/ssh/outputs.py +51 -0
- pulumi_vault/ssh/secret_backend_ca.py +588 -0
- pulumi_vault/ssh/secret_backend_role.py +1493 -0
- pulumi_vault/terraformcloud/__init__.py +11 -0
- pulumi_vault/terraformcloud/secret_backend.py +1321 -0
- pulumi_vault/terraformcloud/secret_creds.py +445 -0
- pulumi_vault/terraformcloud/secret_role.py +563 -0
- pulumi_vault/token.py +1026 -0
- pulumi_vault/tokenauth/__init__.py +9 -0
- pulumi_vault/tokenauth/auth_backend_role.py +1135 -0
- pulumi_vault/transform/__init__.py +14 -0
- pulumi_vault/transform/alphabet.py +348 -0
- pulumi_vault/transform/get_decode.py +287 -0
- pulumi_vault/transform/get_encode.py +291 -0
- pulumi_vault/transform/role.py +350 -0
- pulumi_vault/transform/template.py +592 -0
- pulumi_vault/transform/transformation.py +608 -0
- pulumi_vault/transit/__init__.py +15 -0
- pulumi_vault/transit/get_cmac.py +256 -0
- pulumi_vault/transit/get_decrypt.py +181 -0
- pulumi_vault/transit/get_encrypt.py +174 -0
- pulumi_vault/transit/get_sign.py +328 -0
- pulumi_vault/transit/get_verify.py +373 -0
- pulumi_vault/transit/secret_backend_key.py +1202 -0
- pulumi_vault/transit/secret_cache_config.py +302 -0
- pulumi_vault-7.6.0a1764657486.dist-info/METADATA +92 -0
- pulumi_vault-7.6.0a1764657486.dist-info/RECORD +274 -0
- pulumi_vault-7.6.0a1764657486.dist-info/WHEEL +5 -0
- pulumi_vault-7.6.0a1764657486.dist-info/top_level.txt +1 -0
|
@@ -0,0 +1,380 @@
|
|
|
1
|
+
# coding=utf-8
|
|
2
|
+
# *** WARNING: this file was generated by pulumi-language-python. ***
|
|
3
|
+
# *** Do not edit by hand unless you're certain you know what you are doing! ***
|
|
4
|
+
|
|
5
|
+
import builtins as _builtins
|
|
6
|
+
import warnings
|
|
7
|
+
import sys
|
|
8
|
+
import pulumi
|
|
9
|
+
import pulumi.runtime
|
|
10
|
+
from typing import Any, Mapping, Optional, Sequence, Union, overload
|
|
11
|
+
if sys.version_info >= (3, 11):
|
|
12
|
+
from typing import NotRequired, TypedDict, TypeAlias
|
|
13
|
+
else:
|
|
14
|
+
from typing_extensions import NotRequired, TypedDict, TypeAlias
|
|
15
|
+
from .. import _utilities
|
|
16
|
+
|
|
17
|
+
__all__ = ['UserArgs', 'User']
|
|
18
|
+
|
|
19
|
+
@pulumi.input_type
|
|
20
|
+
class UserArgs:
|
|
21
|
+
def __init__(__self__, *,
|
|
22
|
+
user: pulumi.Input[_builtins.str],
|
|
23
|
+
backend: Optional[pulumi.Input[_builtins.str]] = None,
|
|
24
|
+
namespace: Optional[pulumi.Input[_builtins.str]] = None,
|
|
25
|
+
policies: Optional[pulumi.Input[Sequence[pulumi.Input[_builtins.str]]]] = None):
|
|
26
|
+
"""
|
|
27
|
+
The set of arguments for constructing a User resource.
|
|
28
|
+
:param pulumi.Input[_builtins.str] user: GitHub user name.
|
|
29
|
+
:param pulumi.Input[_builtins.str] backend: Path where the github auth backend is mounted. Defaults to `github`
|
|
30
|
+
if not specified.
|
|
31
|
+
:param pulumi.Input[_builtins.str] namespace: The namespace to provision the resource in.
|
|
32
|
+
The value should not contain leading or trailing forward slashes.
|
|
33
|
+
The `namespace` is always relative to the provider's configured [namespace](https://www.terraform.io/docs/providers/vault/index.html#namespace).
|
|
34
|
+
*Available only for Vault Enterprise*.
|
|
35
|
+
:param pulumi.Input[Sequence[pulumi.Input[_builtins.str]]] policies: An array of strings specifying the policies to be set on tokens issued
|
|
36
|
+
using this role.
|
|
37
|
+
"""
|
|
38
|
+
pulumi.set(__self__, "user", user)
|
|
39
|
+
if backend is not None:
|
|
40
|
+
pulumi.set(__self__, "backend", backend)
|
|
41
|
+
if namespace is not None:
|
|
42
|
+
pulumi.set(__self__, "namespace", namespace)
|
|
43
|
+
if policies is not None:
|
|
44
|
+
pulumi.set(__self__, "policies", policies)
|
|
45
|
+
|
|
46
|
+
@_builtins.property
|
|
47
|
+
@pulumi.getter
|
|
48
|
+
def user(self) -> pulumi.Input[_builtins.str]:
|
|
49
|
+
"""
|
|
50
|
+
GitHub user name.
|
|
51
|
+
"""
|
|
52
|
+
return pulumi.get(self, "user")
|
|
53
|
+
|
|
54
|
+
@user.setter
|
|
55
|
+
def user(self, value: pulumi.Input[_builtins.str]):
|
|
56
|
+
pulumi.set(self, "user", value)
|
|
57
|
+
|
|
58
|
+
@_builtins.property
|
|
59
|
+
@pulumi.getter
|
|
60
|
+
def backend(self) -> Optional[pulumi.Input[_builtins.str]]:
|
|
61
|
+
"""
|
|
62
|
+
Path where the github auth backend is mounted. Defaults to `github`
|
|
63
|
+
if not specified.
|
|
64
|
+
"""
|
|
65
|
+
return pulumi.get(self, "backend")
|
|
66
|
+
|
|
67
|
+
@backend.setter
|
|
68
|
+
def backend(self, value: Optional[pulumi.Input[_builtins.str]]):
|
|
69
|
+
pulumi.set(self, "backend", value)
|
|
70
|
+
|
|
71
|
+
@_builtins.property
|
|
72
|
+
@pulumi.getter
|
|
73
|
+
def namespace(self) -> Optional[pulumi.Input[_builtins.str]]:
|
|
74
|
+
"""
|
|
75
|
+
The namespace to provision the resource in.
|
|
76
|
+
The value should not contain leading or trailing forward slashes.
|
|
77
|
+
The `namespace` is always relative to the provider's configured [namespace](https://www.terraform.io/docs/providers/vault/index.html#namespace).
|
|
78
|
+
*Available only for Vault Enterprise*.
|
|
79
|
+
"""
|
|
80
|
+
return pulumi.get(self, "namespace")
|
|
81
|
+
|
|
82
|
+
@namespace.setter
|
|
83
|
+
def namespace(self, value: Optional[pulumi.Input[_builtins.str]]):
|
|
84
|
+
pulumi.set(self, "namespace", value)
|
|
85
|
+
|
|
86
|
+
@_builtins.property
|
|
87
|
+
@pulumi.getter
|
|
88
|
+
def policies(self) -> Optional[pulumi.Input[Sequence[pulumi.Input[_builtins.str]]]]:
|
|
89
|
+
"""
|
|
90
|
+
An array of strings specifying the policies to be set on tokens issued
|
|
91
|
+
using this role.
|
|
92
|
+
"""
|
|
93
|
+
return pulumi.get(self, "policies")
|
|
94
|
+
|
|
95
|
+
@policies.setter
|
|
96
|
+
def policies(self, value: Optional[pulumi.Input[Sequence[pulumi.Input[_builtins.str]]]]):
|
|
97
|
+
pulumi.set(self, "policies", value)
|
|
98
|
+
|
|
99
|
+
|
|
100
|
+
@pulumi.input_type
|
|
101
|
+
class _UserState:
|
|
102
|
+
def __init__(__self__, *,
|
|
103
|
+
backend: Optional[pulumi.Input[_builtins.str]] = None,
|
|
104
|
+
namespace: Optional[pulumi.Input[_builtins.str]] = None,
|
|
105
|
+
policies: Optional[pulumi.Input[Sequence[pulumi.Input[_builtins.str]]]] = None,
|
|
106
|
+
user: Optional[pulumi.Input[_builtins.str]] = None):
|
|
107
|
+
"""
|
|
108
|
+
Input properties used for looking up and filtering User resources.
|
|
109
|
+
:param pulumi.Input[_builtins.str] backend: Path where the github auth backend is mounted. Defaults to `github`
|
|
110
|
+
if not specified.
|
|
111
|
+
:param pulumi.Input[_builtins.str] namespace: The namespace to provision the resource in.
|
|
112
|
+
The value should not contain leading or trailing forward slashes.
|
|
113
|
+
The `namespace` is always relative to the provider's configured [namespace](https://www.terraform.io/docs/providers/vault/index.html#namespace).
|
|
114
|
+
*Available only for Vault Enterprise*.
|
|
115
|
+
:param pulumi.Input[Sequence[pulumi.Input[_builtins.str]]] policies: An array of strings specifying the policies to be set on tokens issued
|
|
116
|
+
using this role.
|
|
117
|
+
:param pulumi.Input[_builtins.str] user: GitHub user name.
|
|
118
|
+
"""
|
|
119
|
+
if backend is not None:
|
|
120
|
+
pulumi.set(__self__, "backend", backend)
|
|
121
|
+
if namespace is not None:
|
|
122
|
+
pulumi.set(__self__, "namespace", namespace)
|
|
123
|
+
if policies is not None:
|
|
124
|
+
pulumi.set(__self__, "policies", policies)
|
|
125
|
+
if user is not None:
|
|
126
|
+
pulumi.set(__self__, "user", user)
|
|
127
|
+
|
|
128
|
+
@_builtins.property
|
|
129
|
+
@pulumi.getter
|
|
130
|
+
def backend(self) -> Optional[pulumi.Input[_builtins.str]]:
|
|
131
|
+
"""
|
|
132
|
+
Path where the github auth backend is mounted. Defaults to `github`
|
|
133
|
+
if not specified.
|
|
134
|
+
"""
|
|
135
|
+
return pulumi.get(self, "backend")
|
|
136
|
+
|
|
137
|
+
@backend.setter
|
|
138
|
+
def backend(self, value: Optional[pulumi.Input[_builtins.str]]):
|
|
139
|
+
pulumi.set(self, "backend", value)
|
|
140
|
+
|
|
141
|
+
@_builtins.property
|
|
142
|
+
@pulumi.getter
|
|
143
|
+
def namespace(self) -> Optional[pulumi.Input[_builtins.str]]:
|
|
144
|
+
"""
|
|
145
|
+
The namespace to provision the resource in.
|
|
146
|
+
The value should not contain leading or trailing forward slashes.
|
|
147
|
+
The `namespace` is always relative to the provider's configured [namespace](https://www.terraform.io/docs/providers/vault/index.html#namespace).
|
|
148
|
+
*Available only for Vault Enterprise*.
|
|
149
|
+
"""
|
|
150
|
+
return pulumi.get(self, "namespace")
|
|
151
|
+
|
|
152
|
+
@namespace.setter
|
|
153
|
+
def namespace(self, value: Optional[pulumi.Input[_builtins.str]]):
|
|
154
|
+
pulumi.set(self, "namespace", value)
|
|
155
|
+
|
|
156
|
+
@_builtins.property
|
|
157
|
+
@pulumi.getter
|
|
158
|
+
def policies(self) -> Optional[pulumi.Input[Sequence[pulumi.Input[_builtins.str]]]]:
|
|
159
|
+
"""
|
|
160
|
+
An array of strings specifying the policies to be set on tokens issued
|
|
161
|
+
using this role.
|
|
162
|
+
"""
|
|
163
|
+
return pulumi.get(self, "policies")
|
|
164
|
+
|
|
165
|
+
@policies.setter
|
|
166
|
+
def policies(self, value: Optional[pulumi.Input[Sequence[pulumi.Input[_builtins.str]]]]):
|
|
167
|
+
pulumi.set(self, "policies", value)
|
|
168
|
+
|
|
169
|
+
@_builtins.property
|
|
170
|
+
@pulumi.getter
|
|
171
|
+
def user(self) -> Optional[pulumi.Input[_builtins.str]]:
|
|
172
|
+
"""
|
|
173
|
+
GitHub user name.
|
|
174
|
+
"""
|
|
175
|
+
return pulumi.get(self, "user")
|
|
176
|
+
|
|
177
|
+
@user.setter
|
|
178
|
+
def user(self, value: Optional[pulumi.Input[_builtins.str]]):
|
|
179
|
+
pulumi.set(self, "user", value)
|
|
180
|
+
|
|
181
|
+
|
|
182
|
+
@pulumi.type_token("vault:github/user:User")
|
|
183
|
+
class User(pulumi.CustomResource):
|
|
184
|
+
@overload
|
|
185
|
+
def __init__(__self__,
|
|
186
|
+
resource_name: str,
|
|
187
|
+
opts: Optional[pulumi.ResourceOptions] = None,
|
|
188
|
+
backend: Optional[pulumi.Input[_builtins.str]] = None,
|
|
189
|
+
namespace: Optional[pulumi.Input[_builtins.str]] = None,
|
|
190
|
+
policies: Optional[pulumi.Input[Sequence[pulumi.Input[_builtins.str]]]] = None,
|
|
191
|
+
user: Optional[pulumi.Input[_builtins.str]] = None,
|
|
192
|
+
__props__=None):
|
|
193
|
+
"""
|
|
194
|
+
Manages policy mappings for Github Users authenticated via Github. See the [Vault
|
|
195
|
+
documentation](https://www.vaultproject.io/docs/auth/github/) for more
|
|
196
|
+
information.
|
|
197
|
+
|
|
198
|
+
## Example Usage
|
|
199
|
+
|
|
200
|
+
```python
|
|
201
|
+
import pulumi
|
|
202
|
+
import pulumi_vault as vault
|
|
203
|
+
|
|
204
|
+
example = vault.github.AuthBackend("example", organization="myorg")
|
|
205
|
+
tf_user = vault.github.User("tf_user",
|
|
206
|
+
backend=example.id,
|
|
207
|
+
user="john.doe",
|
|
208
|
+
policies=[
|
|
209
|
+
"developer",
|
|
210
|
+
"read-only",
|
|
211
|
+
])
|
|
212
|
+
```
|
|
213
|
+
|
|
214
|
+
## Import
|
|
215
|
+
|
|
216
|
+
Github user mappings can be imported using the `path`, e.g.
|
|
217
|
+
|
|
218
|
+
```sh
|
|
219
|
+
$ pulumi import vault:github/user:User tf_user auth/github/map/users/john.doe
|
|
220
|
+
```
|
|
221
|
+
|
|
222
|
+
:param str resource_name: The name of the resource.
|
|
223
|
+
:param pulumi.ResourceOptions opts: Options for the resource.
|
|
224
|
+
:param pulumi.Input[_builtins.str] backend: Path where the github auth backend is mounted. Defaults to `github`
|
|
225
|
+
if not specified.
|
|
226
|
+
:param pulumi.Input[_builtins.str] namespace: The namespace to provision the resource in.
|
|
227
|
+
The value should not contain leading or trailing forward slashes.
|
|
228
|
+
The `namespace` is always relative to the provider's configured [namespace](https://www.terraform.io/docs/providers/vault/index.html#namespace).
|
|
229
|
+
*Available only for Vault Enterprise*.
|
|
230
|
+
:param pulumi.Input[Sequence[pulumi.Input[_builtins.str]]] policies: An array of strings specifying the policies to be set on tokens issued
|
|
231
|
+
using this role.
|
|
232
|
+
:param pulumi.Input[_builtins.str] user: GitHub user name.
|
|
233
|
+
"""
|
|
234
|
+
...
|
|
235
|
+
@overload
|
|
236
|
+
def __init__(__self__,
|
|
237
|
+
resource_name: str,
|
|
238
|
+
args: UserArgs,
|
|
239
|
+
opts: Optional[pulumi.ResourceOptions] = None):
|
|
240
|
+
"""
|
|
241
|
+
Manages policy mappings for Github Users authenticated via Github. See the [Vault
|
|
242
|
+
documentation](https://www.vaultproject.io/docs/auth/github/) for more
|
|
243
|
+
information.
|
|
244
|
+
|
|
245
|
+
## Example Usage
|
|
246
|
+
|
|
247
|
+
```python
|
|
248
|
+
import pulumi
|
|
249
|
+
import pulumi_vault as vault
|
|
250
|
+
|
|
251
|
+
example = vault.github.AuthBackend("example", organization="myorg")
|
|
252
|
+
tf_user = vault.github.User("tf_user",
|
|
253
|
+
backend=example.id,
|
|
254
|
+
user="john.doe",
|
|
255
|
+
policies=[
|
|
256
|
+
"developer",
|
|
257
|
+
"read-only",
|
|
258
|
+
])
|
|
259
|
+
```
|
|
260
|
+
|
|
261
|
+
## Import
|
|
262
|
+
|
|
263
|
+
Github user mappings can be imported using the `path`, e.g.
|
|
264
|
+
|
|
265
|
+
```sh
|
|
266
|
+
$ pulumi import vault:github/user:User tf_user auth/github/map/users/john.doe
|
|
267
|
+
```
|
|
268
|
+
|
|
269
|
+
:param str resource_name: The name of the resource.
|
|
270
|
+
:param UserArgs args: The arguments to use to populate this resource's properties.
|
|
271
|
+
:param pulumi.ResourceOptions opts: Options for the resource.
|
|
272
|
+
"""
|
|
273
|
+
...
|
|
274
|
+
def __init__(__self__, resource_name: str, *args, **kwargs):
|
|
275
|
+
resource_args, opts = _utilities.get_resource_args_opts(UserArgs, pulumi.ResourceOptions, *args, **kwargs)
|
|
276
|
+
if resource_args is not None:
|
|
277
|
+
__self__._internal_init(resource_name, opts, **resource_args.__dict__)
|
|
278
|
+
else:
|
|
279
|
+
__self__._internal_init(resource_name, *args, **kwargs)
|
|
280
|
+
|
|
281
|
+
def _internal_init(__self__,
|
|
282
|
+
resource_name: str,
|
|
283
|
+
opts: Optional[pulumi.ResourceOptions] = None,
|
|
284
|
+
backend: Optional[pulumi.Input[_builtins.str]] = None,
|
|
285
|
+
namespace: Optional[pulumi.Input[_builtins.str]] = None,
|
|
286
|
+
policies: Optional[pulumi.Input[Sequence[pulumi.Input[_builtins.str]]]] = None,
|
|
287
|
+
user: Optional[pulumi.Input[_builtins.str]] = None,
|
|
288
|
+
__props__=None):
|
|
289
|
+
opts = pulumi.ResourceOptions.merge(_utilities.get_resource_opts_defaults(), opts)
|
|
290
|
+
if not isinstance(opts, pulumi.ResourceOptions):
|
|
291
|
+
raise TypeError('Expected resource options to be a ResourceOptions instance')
|
|
292
|
+
if opts.id is None:
|
|
293
|
+
if __props__ is not None:
|
|
294
|
+
raise TypeError('__props__ is only valid when passed in combination with a valid opts.id to get an existing resource')
|
|
295
|
+
__props__ = UserArgs.__new__(UserArgs)
|
|
296
|
+
|
|
297
|
+
__props__.__dict__["backend"] = backend
|
|
298
|
+
__props__.__dict__["namespace"] = namespace
|
|
299
|
+
__props__.__dict__["policies"] = policies
|
|
300
|
+
if user is None and not opts.urn:
|
|
301
|
+
raise TypeError("Missing required property 'user'")
|
|
302
|
+
__props__.__dict__["user"] = user
|
|
303
|
+
super(User, __self__).__init__(
|
|
304
|
+
'vault:github/user:User',
|
|
305
|
+
resource_name,
|
|
306
|
+
__props__,
|
|
307
|
+
opts)
|
|
308
|
+
|
|
309
|
+
@staticmethod
|
|
310
|
+
def get(resource_name: str,
|
|
311
|
+
id: pulumi.Input[str],
|
|
312
|
+
opts: Optional[pulumi.ResourceOptions] = None,
|
|
313
|
+
backend: Optional[pulumi.Input[_builtins.str]] = None,
|
|
314
|
+
namespace: Optional[pulumi.Input[_builtins.str]] = None,
|
|
315
|
+
policies: Optional[pulumi.Input[Sequence[pulumi.Input[_builtins.str]]]] = None,
|
|
316
|
+
user: Optional[pulumi.Input[_builtins.str]] = None) -> 'User':
|
|
317
|
+
"""
|
|
318
|
+
Get an existing User resource's state with the given name, id, and optional extra
|
|
319
|
+
properties used to qualify the lookup.
|
|
320
|
+
|
|
321
|
+
:param str resource_name: The unique name of the resulting resource.
|
|
322
|
+
:param pulumi.Input[str] id: The unique provider ID of the resource to lookup.
|
|
323
|
+
:param pulumi.ResourceOptions opts: Options for the resource.
|
|
324
|
+
:param pulumi.Input[_builtins.str] backend: Path where the github auth backend is mounted. Defaults to `github`
|
|
325
|
+
if not specified.
|
|
326
|
+
:param pulumi.Input[_builtins.str] namespace: The namespace to provision the resource in.
|
|
327
|
+
The value should not contain leading or trailing forward slashes.
|
|
328
|
+
The `namespace` is always relative to the provider's configured [namespace](https://www.terraform.io/docs/providers/vault/index.html#namespace).
|
|
329
|
+
*Available only for Vault Enterprise*.
|
|
330
|
+
:param pulumi.Input[Sequence[pulumi.Input[_builtins.str]]] policies: An array of strings specifying the policies to be set on tokens issued
|
|
331
|
+
using this role.
|
|
332
|
+
:param pulumi.Input[_builtins.str] user: GitHub user name.
|
|
333
|
+
"""
|
|
334
|
+
opts = pulumi.ResourceOptions.merge(opts, pulumi.ResourceOptions(id=id))
|
|
335
|
+
|
|
336
|
+
__props__ = _UserState.__new__(_UserState)
|
|
337
|
+
|
|
338
|
+
__props__.__dict__["backend"] = backend
|
|
339
|
+
__props__.__dict__["namespace"] = namespace
|
|
340
|
+
__props__.__dict__["policies"] = policies
|
|
341
|
+
__props__.__dict__["user"] = user
|
|
342
|
+
return User(resource_name, opts=opts, __props__=__props__)
|
|
343
|
+
|
|
344
|
+
@_builtins.property
|
|
345
|
+
@pulumi.getter
|
|
346
|
+
def backend(self) -> pulumi.Output[Optional[_builtins.str]]:
|
|
347
|
+
"""
|
|
348
|
+
Path where the github auth backend is mounted. Defaults to `github`
|
|
349
|
+
if not specified.
|
|
350
|
+
"""
|
|
351
|
+
return pulumi.get(self, "backend")
|
|
352
|
+
|
|
353
|
+
@_builtins.property
|
|
354
|
+
@pulumi.getter
|
|
355
|
+
def namespace(self) -> pulumi.Output[Optional[_builtins.str]]:
|
|
356
|
+
"""
|
|
357
|
+
The namespace to provision the resource in.
|
|
358
|
+
The value should not contain leading or trailing forward slashes.
|
|
359
|
+
The `namespace` is always relative to the provider's configured [namespace](https://www.terraform.io/docs/providers/vault/index.html#namespace).
|
|
360
|
+
*Available only for Vault Enterprise*.
|
|
361
|
+
"""
|
|
362
|
+
return pulumi.get(self, "namespace")
|
|
363
|
+
|
|
364
|
+
@_builtins.property
|
|
365
|
+
@pulumi.getter
|
|
366
|
+
def policies(self) -> pulumi.Output[Optional[Sequence[_builtins.str]]]:
|
|
367
|
+
"""
|
|
368
|
+
An array of strings specifying the policies to be set on tokens issued
|
|
369
|
+
using this role.
|
|
370
|
+
"""
|
|
371
|
+
return pulumi.get(self, "policies")
|
|
372
|
+
|
|
373
|
+
@_builtins.property
|
|
374
|
+
@pulumi.getter
|
|
375
|
+
def user(self) -> pulumi.Output[_builtins.str]:
|
|
376
|
+
"""
|
|
377
|
+
GitHub user name.
|
|
378
|
+
"""
|
|
379
|
+
return pulumi.get(self, "user")
|
|
380
|
+
|
|
@@ -0,0 +1,35 @@
|
|
|
1
|
+
# coding=utf-8
|
|
2
|
+
# *** WARNING: this file was generated by pulumi-language-python. ***
|
|
3
|
+
# *** Do not edit by hand unless you're certain you know what you are doing! ***
|
|
4
|
+
|
|
5
|
+
import builtins as _builtins
|
|
6
|
+
from .. import _utilities
|
|
7
|
+
import typing
|
|
8
|
+
# Export this package's modules as members:
|
|
9
|
+
from .entity import *
|
|
10
|
+
from .entity_alias import *
|
|
11
|
+
from .entity_policies import *
|
|
12
|
+
from .get_entity import *
|
|
13
|
+
from .get_group import *
|
|
14
|
+
from .get_oidc_client_creds import *
|
|
15
|
+
from .get_oidc_openid_config import *
|
|
16
|
+
from .get_oidc_public_keys import *
|
|
17
|
+
from .group import *
|
|
18
|
+
from .group_alias import *
|
|
19
|
+
from .group_member_entity_ids import *
|
|
20
|
+
from .group_member_group_ids import *
|
|
21
|
+
from .group_policies import *
|
|
22
|
+
from .mfa_duo import *
|
|
23
|
+
from .mfa_login_enforcement import *
|
|
24
|
+
from .mfa_okta import *
|
|
25
|
+
from .mfa_pingid import *
|
|
26
|
+
from .mfa_totp import *
|
|
27
|
+
from .oidc import *
|
|
28
|
+
from .oidc_assignment import *
|
|
29
|
+
from .oidc_client import *
|
|
30
|
+
from .oidc_key import *
|
|
31
|
+
from .oidc_key_allowed_client_id import *
|
|
32
|
+
from .oidc_provider import *
|
|
33
|
+
from .oidc_role import *
|
|
34
|
+
from .oidc_scope import *
|
|
35
|
+
from . import outputs
|