pulumi-venafi 1.10.0a1715766105__py3-none-any.whl → 1.11.0a1736849741__py3-none-any.whl

This diff represents the content of publicly available package versions that have been released to one of the supported registries. The information contained in this diff is provided for informational purposes only and reflects changes between package versions as they appear in their respective public registries.

Potentially problematic release.

This version of pulumi-venafi might be problematic. Click here for more details.

Files changed (18) hide show
  1. pulumi_venafi/__init__.py +11 -0
  2. pulumi_venafi/_utilities.py +41 -5
  3. pulumi_venafi/certificate.py +315 -0
  4. pulumi_venafi/cloud_keystore_installation.py +409 -0
  5. pulumi_venafi/config/__init__.pyi +6 -1
  6. pulumi_venafi/config/vars.py +6 -1
  7. pulumi_venafi/get_cloud_keystore.py +166 -0
  8. pulumi_venafi/get_cloud_provider.py +167 -0
  9. pulumi_venafi/policy.py +5 -0
  10. pulumi_venafi/provider.py +12 -15
  11. pulumi_venafi/pulumi-plugin.json +1 -1
  12. pulumi_venafi/ssh_certificate.py +8 -9
  13. pulumi_venafi/ssh_config.py +5 -0
  14. {pulumi_venafi-1.10.0a1715766105.dist-info → pulumi_venafi-1.11.0a1736849741.dist-info}/METADATA +7 -6
  15. pulumi_venafi-1.11.0a1736849741.dist-info/RECORD +19 -0
  16. {pulumi_venafi-1.10.0a1715766105.dist-info → pulumi_venafi-1.11.0a1736849741.dist-info}/WHEEL +1 -1
  17. pulumi_venafi-1.10.0a1715766105.dist-info/RECORD +0 -16
  18. {pulumi_venafi-1.10.0a1715766105.dist-info → pulumi_venafi-1.11.0a1736849741.dist-info}/top_level.txt +0 -0
pulumi_venafi/certificate.py CHANGED
@@ -4,9 +4,14 @@
4
4
 
5
5
  import copy
6
6
  import warnings
7
+ import sys
7
8
  import pulumi
8
9
  import pulumi.runtime
9
10
  from typing import Any, Mapping, Optional, Sequence, Union, overload
11
+ if sys.version_info >= (3, 11):
12
+ from typing import NotRequired, TypedDict, TypeAlias
13
+ else:
14
+ from typing_extensions import NotRequired, TypedDict, TypeAlias
10
15
  from . import _utilities
11
16
 
12
17
  __all__ = ['CertificateArgs', 'Certificate']
@@ -17,6 +22,7 @@ class CertificateArgs:
17
22
  common_name: pulumi.Input[str],
18
23
  algorithm: Optional[pulumi.Input[str]] = None,
19
24
  certificate_dn: Optional[pulumi.Input[str]] = None,
25
+ country: Optional[pulumi.Input[str]] = None,
20
26
  csr_origin: Optional[pulumi.Input[str]] = None,
21
27
  csr_pem: Optional[pulumi.Input[str]] = None,
22
28
  custom_fields: Optional[pulumi.Input[Mapping[str, pulumi.Input[str]]]] = None,
@@ -24,19 +30,25 @@ class CertificateArgs:
24
30
  expiration_window: Optional[pulumi.Input[int]] = None,
25
31
  issuer_hint: Optional[pulumi.Input[str]] = None,
26
32
  key_password: Optional[pulumi.Input[str]] = None,
33
+ locality: Optional[pulumi.Input[str]] = None,
27
34
  nickname: Optional[pulumi.Input[str]] = None,
35
+ organization: Optional[pulumi.Input[str]] = None,
36
+ organizational_units: Optional[pulumi.Input[Sequence[pulumi.Input[str]]]] = None,
28
37
  pkcs12: Optional[pulumi.Input[str]] = None,
29
38
  private_key_pem: Optional[pulumi.Input[str]] = None,
39
+ renew_required: Optional[pulumi.Input[bool]] = None,
30
40
  rsa_bits: Optional[pulumi.Input[int]] = None,
31
41
  san_dns: Optional[pulumi.Input[Sequence[pulumi.Input[str]]]] = None,
32
42
  san_emails: Optional[pulumi.Input[Sequence[pulumi.Input[str]]]] = None,
33
43
  san_ips: Optional[pulumi.Input[Sequence[pulumi.Input[str]]]] = None,
34
44
  san_uris: Optional[pulumi.Input[Sequence[pulumi.Input[str]]]] = None,
45
+ state: Optional[pulumi.Input[str]] = None,
35
46
  valid_days: Optional[pulumi.Input[int]] = None):
36
47
  """
37
48
  The set of arguments for constructing a Certificate resource.
38
49
  :param pulumi.Input[str] common_name: The common name of the certificate.
39
50
  :param pulumi.Input[str] algorithm: Key encryption algorithm, either RSA or ECDSA. Defaults to `RSA`.
51
+ :param pulumi.Input[str] country: Country of the certificate (C)
40
52
  :param pulumi.Input[str] csr_origin: Whether key-pair generation will be `local` or `service` generated. Default is
41
53
  `local`.
42
54
  :param pulumi.Input[Mapping[str, pulumi.Input[str]]] custom_fields: Collection of Custom Field name-value pairs to assign to the certificate.
@@ -46,11 +58,15 @@ class CertificateArgs:
46
58
  :param pulumi.Input[str] issuer_hint: Used with `valid_days` to indicate the target issuer when using Trust Protection
47
59
  Platform. Relevant values are: `DigiCert`, `Entrust`, and `Microsoft`.
48
60
  :param pulumi.Input[str] key_password: The password used to encrypt the private key.
61
+ :param pulumi.Input[str] locality: Locality/City of the certificate (L)
49
62
  :param pulumi.Input[str] nickname: Use to specify a name for the new certificate object that will be created and placed
50
63
  in a policy. Only valid for Trust Protection Platform.
64
+ :param pulumi.Input[str] organization: Organization of the certificate (O)
65
+ :param pulumi.Input[Sequence[pulumi.Input[str]]] organizational_units: List of Organizational Units of the certificate (OU)
51
66
  :param pulumi.Input[str] pkcs12: A base64-encoded PKCS#12 keystore secured by the `key_password`. Useful when working with resources like
52
67
  azure key_vault_certificate.
53
68
  :param pulumi.Input[str] private_key_pem: The private key in PEM format.
69
+ :param pulumi.Input[bool] renew_required: Indicates the certificate should be reissued. This means the resource will destroyed and recreated
54
70
  :param pulumi.Input[int] rsa_bits: Number of bits to use when generating an RSA key. Applies when algorithm is `RSA`.
55
71
  Defaults to `2048`.
56
72
  :param pulumi.Input[Sequence[pulumi.Input[str]]] san_dns: List of DNS names to use as alternative subjects of the certificate.
@@ -58,6 +74,7 @@ class CertificateArgs:
58
74
  :param pulumi.Input[Sequence[pulumi.Input[str]]] san_ips: List of IP addresses to use as alternative subjects of the certificate.
59
75
  :param pulumi.Input[Sequence[pulumi.Input[str]]] san_uris: List of Uniform Resource Identifiers (URIs) to use as alternative subjects of
60
76
  the certificate.
77
+ :param pulumi.Input[str] state: State of the certificate (S)
61
78
  :param pulumi.Input[int] valid_days: Desired number of days for which the new certificate will be valid.
62
79
  """
63
80
  pulumi.set(__self__, "common_name", common_name)
@@ -65,6 +82,8 @@ class CertificateArgs:
65
82
  pulumi.set(__self__, "algorithm", algorithm)
66
83
  if certificate_dn is not None:
67
84
  pulumi.set(__self__, "certificate_dn", certificate_dn)
85
+ if country is not None:
86
+ pulumi.set(__self__, "country", country)
68
87
  if csr_origin is not None:
69
88
  pulumi.set(__self__, "csr_origin", csr_origin)
70
89
  if csr_pem is not None:
@@ -79,12 +98,20 @@ class CertificateArgs:
79
98
  pulumi.set(__self__, "issuer_hint", issuer_hint)
80
99
  if key_password is not None:
81
100
  pulumi.set(__self__, "key_password", key_password)
101
+ if locality is not None:
102
+ pulumi.set(__self__, "locality", locality)
82
103
  if nickname is not None:
83
104
  pulumi.set(__self__, "nickname", nickname)
105
+ if organization is not None:
106
+ pulumi.set(__self__, "organization", organization)
107
+ if organizational_units is not None:
108
+ pulumi.set(__self__, "organizational_units", organizational_units)
84
109
  if pkcs12 is not None:
85
110
  pulumi.set(__self__, "pkcs12", pkcs12)
86
111
  if private_key_pem is not None:
87
112
  pulumi.set(__self__, "private_key_pem", private_key_pem)
113
+ if renew_required is not None:
114
+ pulumi.set(__self__, "renew_required", renew_required)
88
115
  if rsa_bits is not None:
89
116
  pulumi.set(__self__, "rsa_bits", rsa_bits)
90
117
  if san_dns is not None:
@@ -95,6 +122,8 @@ class CertificateArgs:
95
122
  pulumi.set(__self__, "san_ips", san_ips)
96
123
  if san_uris is not None:
97
124
  pulumi.set(__self__, "san_uris", san_uris)
125
+ if state is not None:
126
+ pulumi.set(__self__, "state", state)
98
127
  if valid_days is not None:
99
128
  pulumi.set(__self__, "valid_days", valid_days)
100
129
 
@@ -131,6 +160,18 @@ class CertificateArgs:
131
160
  def certificate_dn(self, value: Optional[pulumi.Input[str]]):
132
161
  pulumi.set(self, "certificate_dn", value)
133
162
 
163
+ @property
164
+ @pulumi.getter
165
+ def country(self) -> Optional[pulumi.Input[str]]:
166
+ """
167
+ Country of the certificate (C)
168
+ """
169
+ return pulumi.get(self, "country")
170
+
171
+ @country.setter
172
+ def country(self, value: Optional[pulumi.Input[str]]):
173
+ pulumi.set(self, "country", value)
174
+
134
175
  @property
135
176
  @pulumi.getter(name="csrOrigin")
136
177
  def csr_origin(self) -> Optional[pulumi.Input[str]]:
@@ -215,6 +256,18 @@ class CertificateArgs:
215
256
  def key_password(self, value: Optional[pulumi.Input[str]]):
216
257
  pulumi.set(self, "key_password", value)
217
258
 
259
+ @property
260
+ @pulumi.getter
261
+ def locality(self) -> Optional[pulumi.Input[str]]:
262
+ """
263
+ Locality/City of the certificate (L)
264
+ """
265
+ return pulumi.get(self, "locality")
266
+
267
+ @locality.setter
268
+ def locality(self, value: Optional[pulumi.Input[str]]):
269
+ pulumi.set(self, "locality", value)
270
+
218
271
  @property
219
272
  @pulumi.getter
220
273
  def nickname(self) -> Optional[pulumi.Input[str]]:
@@ -228,6 +281,30 @@ class CertificateArgs:
228
281
  def nickname(self, value: Optional[pulumi.Input[str]]):
229
282
  pulumi.set(self, "nickname", value)
230
283
 
284
+ @property
285
+ @pulumi.getter
286
+ def organization(self) -> Optional[pulumi.Input[str]]:
287
+ """
288
+ Organization of the certificate (O)
289
+ """
290
+ return pulumi.get(self, "organization")
291
+
292
+ @organization.setter
293
+ def organization(self, value: Optional[pulumi.Input[str]]):
294
+ pulumi.set(self, "organization", value)
295
+
296
+ @property
297
+ @pulumi.getter(name="organizationalUnits")
298
+ def organizational_units(self) -> Optional[pulumi.Input[Sequence[pulumi.Input[str]]]]:
299
+ """
300
+ List of Organizational Units of the certificate (OU)
301
+ """
302
+ return pulumi.get(self, "organizational_units")
303
+
304
+ @organizational_units.setter
305
+ def organizational_units(self, value: Optional[pulumi.Input[Sequence[pulumi.Input[str]]]]):
306
+ pulumi.set(self, "organizational_units", value)
307
+
231
308
  @property
232
309
  @pulumi.getter
233
310
  def pkcs12(self) -> Optional[pulumi.Input[str]]:
@@ -253,6 +330,18 @@ class CertificateArgs:
253
330
  def private_key_pem(self, value: Optional[pulumi.Input[str]]):
254
331
  pulumi.set(self, "private_key_pem", value)
255
332
 
333
+ @property
334
+ @pulumi.getter(name="renewRequired")
335
+ def renew_required(self) -> Optional[pulumi.Input[bool]]:
336
+ """
337
+ Indicates the certificate should be reissued. This means the resource will destroyed and recreated
338
+ """
339
+ return pulumi.get(self, "renew_required")
340
+
341
+ @renew_required.setter
342
+ def renew_required(self, value: Optional[pulumi.Input[bool]]):
343
+ pulumi.set(self, "renew_required", value)
344
+
256
345
  @property
257
346
  @pulumi.getter(name="rsaBits")
258
347
  def rsa_bits(self) -> Optional[pulumi.Input[int]]:
@@ -315,6 +404,18 @@ class CertificateArgs:
315
404
  def san_uris(self, value: Optional[pulumi.Input[Sequence[pulumi.Input[str]]]]):
316
405
  pulumi.set(self, "san_uris", value)
317
406
 
407
+ @property
408
+ @pulumi.getter
409
+ def state(self) -> Optional[pulumi.Input[str]]:
410
+ """
411
+ State of the certificate (S)
412
+ """
413
+ return pulumi.get(self, "state")
414
+
415
+ @state.setter
416
+ def state(self, value: Optional[pulumi.Input[str]]):
417
+ pulumi.set(self, "state", value)
418
+
318
419
  @property
319
420
  @pulumi.getter(name="validDays")
320
421
  def valid_days(self) -> Optional[pulumi.Input[int]]:
@@ -334,8 +435,10 @@ class _CertificateState:
334
435
  algorithm: Optional[pulumi.Input[str]] = None,
335
436
  certificate: Optional[pulumi.Input[str]] = None,
336
437
  certificate_dn: Optional[pulumi.Input[str]] = None,
438
+ certificate_id: Optional[pulumi.Input[str]] = None,
337
439
  chain: Optional[pulumi.Input[str]] = None,
338
440
  common_name: Optional[pulumi.Input[str]] = None,
441
+ country: Optional[pulumi.Input[str]] = None,
339
442
  csr_origin: Optional[pulumi.Input[str]] = None,
340
443
  csr_pem: Optional[pulumi.Input[str]] = None,
341
444
  custom_fields: Optional[pulumi.Input[Mapping[str, pulumi.Input[str]]]] = None,
@@ -343,21 +446,28 @@ class _CertificateState:
343
446
  expiration_window: Optional[pulumi.Input[int]] = None,
344
447
  issuer_hint: Optional[pulumi.Input[str]] = None,
345
448
  key_password: Optional[pulumi.Input[str]] = None,
449
+ locality: Optional[pulumi.Input[str]] = None,
346
450
  nickname: Optional[pulumi.Input[str]] = None,
451
+ organization: Optional[pulumi.Input[str]] = None,
452
+ organizational_units: Optional[pulumi.Input[Sequence[pulumi.Input[str]]]] = None,
347
453
  pkcs12: Optional[pulumi.Input[str]] = None,
348
454
  private_key_pem: Optional[pulumi.Input[str]] = None,
455
+ renew_required: Optional[pulumi.Input[bool]] = None,
349
456
  rsa_bits: Optional[pulumi.Input[int]] = None,
350
457
  san_dns: Optional[pulumi.Input[Sequence[pulumi.Input[str]]]] = None,
351
458
  san_emails: Optional[pulumi.Input[Sequence[pulumi.Input[str]]]] = None,
352
459
  san_ips: Optional[pulumi.Input[Sequence[pulumi.Input[str]]]] = None,
353
460
  san_uris: Optional[pulumi.Input[Sequence[pulumi.Input[str]]]] = None,
461
+ state: Optional[pulumi.Input[str]] = None,
354
462
  valid_days: Optional[pulumi.Input[int]] = None):
355
463
  """
356
464
  Input properties used for looking up and filtering Certificate resources.
357
465
  :param pulumi.Input[str] algorithm: Key encryption algorithm, either RSA or ECDSA. Defaults to `RSA`.
358
466
  :param pulumi.Input[str] certificate: The X509 certificate in PEM format.
467
+ :param pulumi.Input[str] certificate_id: ID of the issued certificate
359
468
  :param pulumi.Input[str] chain: The trust chain of X509 certificate authority certificates in PEM format concatenated together.
360
469
  :param pulumi.Input[str] common_name: The common name of the certificate.
470
+ :param pulumi.Input[str] country: Country of the certificate (C)
361
471
  :param pulumi.Input[str] csr_origin: Whether key-pair generation will be `local` or `service` generated. Default is
362
472
  `local`.
363
473
  :param pulumi.Input[Mapping[str, pulumi.Input[str]]] custom_fields: Collection of Custom Field name-value pairs to assign to the certificate.
@@ -367,11 +477,15 @@ class _CertificateState:
367
477
  :param pulumi.Input[str] issuer_hint: Used with `valid_days` to indicate the target issuer when using Trust Protection
368
478
  Platform. Relevant values are: `DigiCert`, `Entrust`, and `Microsoft`.
369
479
  :param pulumi.Input[str] key_password: The password used to encrypt the private key.
480
+ :param pulumi.Input[str] locality: Locality/City of the certificate (L)
370
481
  :param pulumi.Input[str] nickname: Use to specify a name for the new certificate object that will be created and placed
371
482
  in a policy. Only valid for Trust Protection Platform.
483
+ :param pulumi.Input[str] organization: Organization of the certificate (O)
484
+ :param pulumi.Input[Sequence[pulumi.Input[str]]] organizational_units: List of Organizational Units of the certificate (OU)
372
485
  :param pulumi.Input[str] pkcs12: A base64-encoded PKCS#12 keystore secured by the `key_password`. Useful when working with resources like
373
486
  azure key_vault_certificate.
374
487
  :param pulumi.Input[str] private_key_pem: The private key in PEM format.
488
+ :param pulumi.Input[bool] renew_required: Indicates the certificate should be reissued. This means the resource will destroyed and recreated
375
489
  :param pulumi.Input[int] rsa_bits: Number of bits to use when generating an RSA key. Applies when algorithm is `RSA`.
376
490
  Defaults to `2048`.
377
491
  :param pulumi.Input[Sequence[pulumi.Input[str]]] san_dns: List of DNS names to use as alternative subjects of the certificate.
@@ -379,6 +493,7 @@ class _CertificateState:
379
493
  :param pulumi.Input[Sequence[pulumi.Input[str]]] san_ips: List of IP addresses to use as alternative subjects of the certificate.
380
494
  :param pulumi.Input[Sequence[pulumi.Input[str]]] san_uris: List of Uniform Resource Identifiers (URIs) to use as alternative subjects of
381
495
  the certificate.
496
+ :param pulumi.Input[str] state: State of the certificate (S)
382
497
  :param pulumi.Input[int] valid_days: Desired number of days for which the new certificate will be valid.
383
498
  """
384
499
  if algorithm is not None:
@@ -387,10 +502,14 @@ class _CertificateState:
387
502
  pulumi.set(__self__, "certificate", certificate)
388
503
  if certificate_dn is not None:
389
504
  pulumi.set(__self__, "certificate_dn", certificate_dn)
505
+ if certificate_id is not None:
506
+ pulumi.set(__self__, "certificate_id", certificate_id)
390
507
  if chain is not None:
391
508
  pulumi.set(__self__, "chain", chain)
392
509
  if common_name is not None:
393
510
  pulumi.set(__self__, "common_name", common_name)
511
+ if country is not None:
512
+ pulumi.set(__self__, "country", country)
394
513
  if csr_origin is not None:
395
514
  pulumi.set(__self__, "csr_origin", csr_origin)
396
515
  if csr_pem is not None:
@@ -405,12 +524,20 @@ class _CertificateState:
405
524
  pulumi.set(__self__, "issuer_hint", issuer_hint)
406
525
  if key_password is not None:
407
526
  pulumi.set(__self__, "key_password", key_password)
527
+ if locality is not None:
528
+ pulumi.set(__self__, "locality", locality)
408
529
  if nickname is not None:
409
530
  pulumi.set(__self__, "nickname", nickname)
531
+ if organization is not None:
532
+ pulumi.set(__self__, "organization", organization)
533
+ if organizational_units is not None:
534
+ pulumi.set(__self__, "organizational_units", organizational_units)
410
535
  if pkcs12 is not None:
411
536
  pulumi.set(__self__, "pkcs12", pkcs12)
412
537
  if private_key_pem is not None:
413
538
  pulumi.set(__self__, "private_key_pem", private_key_pem)
539
+ if renew_required is not None:
540
+ pulumi.set(__self__, "renew_required", renew_required)
414
541
  if rsa_bits is not None:
415
542
  pulumi.set(__self__, "rsa_bits", rsa_bits)
416
543
  if san_dns is not None:
@@ -421,6 +548,8 @@ class _CertificateState:
421
548
  pulumi.set(__self__, "san_ips", san_ips)
422
549
  if san_uris is not None:
423
550
  pulumi.set(__self__, "san_uris", san_uris)
551
+ if state is not None:
552
+ pulumi.set(__self__, "state", state)
424
553
  if valid_days is not None:
425
554
  pulumi.set(__self__, "valid_days", valid_days)
426
555
 
@@ -457,6 +586,18 @@ class _CertificateState:
457
586
  def certificate_dn(self, value: Optional[pulumi.Input[str]]):
458
587
  pulumi.set(self, "certificate_dn", value)
459
588
 
589
+ @property
590
+ @pulumi.getter(name="certificateId")
591
+ def certificate_id(self) -> Optional[pulumi.Input[str]]:
592
+ """
593
+ ID of the issued certificate
594
+ """
595
+ return pulumi.get(self, "certificate_id")
596
+
597
+ @certificate_id.setter
598
+ def certificate_id(self, value: Optional[pulumi.Input[str]]):
599
+ pulumi.set(self, "certificate_id", value)
600
+
460
601
  @property
461
602
  @pulumi.getter
462
603
  def chain(self) -> Optional[pulumi.Input[str]]:
@@ -481,6 +622,18 @@ class _CertificateState:
481
622
  def common_name(self, value: Optional[pulumi.Input[str]]):
482
623
  pulumi.set(self, "common_name", value)
483
624
 
625
+ @property
626
+ @pulumi.getter
627
+ def country(self) -> Optional[pulumi.Input[str]]:
628
+ """
629
+ Country of the certificate (C)
630
+ """
631
+ return pulumi.get(self, "country")
632
+
633
+ @country.setter
634
+ def country(self, value: Optional[pulumi.Input[str]]):
635
+ pulumi.set(self, "country", value)
636
+
484
637
  @property
485
638
  @pulumi.getter(name="csrOrigin")
486
639
  def csr_origin(self) -> Optional[pulumi.Input[str]]:
@@ -565,6 +718,18 @@ class _CertificateState:
565
718
  def key_password(self, value: Optional[pulumi.Input[str]]):
566
719
  pulumi.set(self, "key_password", value)
567
720
 
721
+ @property
722
+ @pulumi.getter
723
+ def locality(self) -> Optional[pulumi.Input[str]]:
724
+ """
725
+ Locality/City of the certificate (L)
726
+ """
727
+ return pulumi.get(self, "locality")
728
+
729
+ @locality.setter
730
+ def locality(self, value: Optional[pulumi.Input[str]]):
731
+ pulumi.set(self, "locality", value)
732
+
568
733
  @property
569
734
  @pulumi.getter
570
735
  def nickname(self) -> Optional[pulumi.Input[str]]:
@@ -578,6 +743,30 @@ class _CertificateState:
578
743
  def nickname(self, value: Optional[pulumi.Input[str]]):
579
744
  pulumi.set(self, "nickname", value)
580
745
 
746
+ @property
747
+ @pulumi.getter
748
+ def organization(self) -> Optional[pulumi.Input[str]]:
749
+ """
750
+ Organization of the certificate (O)
751
+ """
752
+ return pulumi.get(self, "organization")
753
+
754
+ @organization.setter
755
+ def organization(self, value: Optional[pulumi.Input[str]]):
756
+ pulumi.set(self, "organization", value)
757
+
758
+ @property
759
+ @pulumi.getter(name="organizationalUnits")
760
+ def organizational_units(self) -> Optional[pulumi.Input[Sequence[pulumi.Input[str]]]]:
761
+ """
762
+ List of Organizational Units of the certificate (OU)
763
+ """
764
+ return pulumi.get(self, "organizational_units")
765
+
766
+ @organizational_units.setter
767
+ def organizational_units(self, value: Optional[pulumi.Input[Sequence[pulumi.Input[str]]]]):
768
+ pulumi.set(self, "organizational_units", value)
769
+
581
770
  @property
582
771
  @pulumi.getter
583
772
  def pkcs12(self) -> Optional[pulumi.Input[str]]:
@@ -603,6 +792,18 @@ class _CertificateState:
603
792
  def private_key_pem(self, value: Optional[pulumi.Input[str]]):
604
793
  pulumi.set(self, "private_key_pem", value)
605
794
 
795
+ @property
796
+ @pulumi.getter(name="renewRequired")
797
+ def renew_required(self) -> Optional[pulumi.Input[bool]]:
798
+ """
799
+ Indicates the certificate should be reissued. This means the resource will destroyed and recreated
800
+ """
801
+ return pulumi.get(self, "renew_required")
802
+
803
+ @renew_required.setter
804
+ def renew_required(self, value: Optional[pulumi.Input[bool]]):
805
+ pulumi.set(self, "renew_required", value)
806
+
606
807
  @property
607
808
  @pulumi.getter(name="rsaBits")
608
809
  def rsa_bits(self) -> Optional[pulumi.Input[int]]:
@@ -665,6 +866,18 @@ class _CertificateState:
665
866
  def san_uris(self, value: Optional[pulumi.Input[Sequence[pulumi.Input[str]]]]):
666
867
  pulumi.set(self, "san_uris", value)
667
868
 
869
+ @property
870
+ @pulumi.getter
871
+ def state(self) -> Optional[pulumi.Input[str]]:
872
+ """
873
+ State of the certificate (S)
874
+ """
875
+ return pulumi.get(self, "state")
876
+
877
+ @state.setter
878
+ def state(self, value: Optional[pulumi.Input[str]]):
879
+ pulumi.set(self, "state", value)
880
+
668
881
  @property
669
882
  @pulumi.getter(name="validDays")
670
883
  def valid_days(self) -> Optional[pulumi.Input[int]]:
@@ -686,6 +899,7 @@ class Certificate(pulumi.CustomResource):
686
899
  algorithm: Optional[pulumi.Input[str]] = None,
687
900
  certificate_dn: Optional[pulumi.Input[str]] = None,
688
901
  common_name: Optional[pulumi.Input[str]] = None,
902
+ country: Optional[pulumi.Input[str]] = None,
689
903
  csr_origin: Optional[pulumi.Input[str]] = None,
690
904
  csr_pem: Optional[pulumi.Input[str]] = None,
691
905
  custom_fields: Optional[pulumi.Input[Mapping[str, pulumi.Input[str]]]] = None,
@@ -693,14 +907,19 @@ class Certificate(pulumi.CustomResource):
693
907
  expiration_window: Optional[pulumi.Input[int]] = None,
694
908
  issuer_hint: Optional[pulumi.Input[str]] = None,
695
909
  key_password: Optional[pulumi.Input[str]] = None,
910
+ locality: Optional[pulumi.Input[str]] = None,
696
911
  nickname: Optional[pulumi.Input[str]] = None,
912
+ organization: Optional[pulumi.Input[str]] = None,
913
+ organizational_units: Optional[pulumi.Input[Sequence[pulumi.Input[str]]]] = None,
697
914
  pkcs12: Optional[pulumi.Input[str]] = None,
698
915
  private_key_pem: Optional[pulumi.Input[str]] = None,
916
+ renew_required: Optional[pulumi.Input[bool]] = None,
699
917
  rsa_bits: Optional[pulumi.Input[int]] = None,
700
918
  san_dns: Optional[pulumi.Input[Sequence[pulumi.Input[str]]]] = None,
701
919
  san_emails: Optional[pulumi.Input[Sequence[pulumi.Input[str]]]] = None,
702
920
  san_ips: Optional[pulumi.Input[Sequence[pulumi.Input[str]]]] = None,
703
921
  san_uris: Optional[pulumi.Input[Sequence[pulumi.Input[str]]]] = None,
922
+ state: Optional[pulumi.Input[str]] = None,
704
923
  valid_days: Optional[pulumi.Input[int]] = None,
705
924
  __props__=None):
706
925
  """
@@ -709,6 +928,7 @@ class Certificate(pulumi.CustomResource):
709
928
  :param pulumi.ResourceOptions opts: Options for the resource.
710
929
  :param pulumi.Input[str] algorithm: Key encryption algorithm, either RSA or ECDSA. Defaults to `RSA`.
711
930
  :param pulumi.Input[str] common_name: The common name of the certificate.
931
+ :param pulumi.Input[str] country: Country of the certificate (C)
712
932
  :param pulumi.Input[str] csr_origin: Whether key-pair generation will be `local` or `service` generated. Default is
713
933
  `local`.
714
934
  :param pulumi.Input[Mapping[str, pulumi.Input[str]]] custom_fields: Collection of Custom Field name-value pairs to assign to the certificate.
@@ -718,11 +938,15 @@ class Certificate(pulumi.CustomResource):
718
938
  :param pulumi.Input[str] issuer_hint: Used with `valid_days` to indicate the target issuer when using Trust Protection
719
939
  Platform. Relevant values are: `DigiCert`, `Entrust`, and `Microsoft`.
720
940
  :param pulumi.Input[str] key_password: The password used to encrypt the private key.
941
+ :param pulumi.Input[str] locality: Locality/City of the certificate (L)
721
942
  :param pulumi.Input[str] nickname: Use to specify a name for the new certificate object that will be created and placed
722
943
  in a policy. Only valid for Trust Protection Platform.
944
+ :param pulumi.Input[str] organization: Organization of the certificate (O)
945
+ :param pulumi.Input[Sequence[pulumi.Input[str]]] organizational_units: List of Organizational Units of the certificate (OU)
723
946
  :param pulumi.Input[str] pkcs12: A base64-encoded PKCS#12 keystore secured by the `key_password`. Useful when working with resources like
724
947
  azure key_vault_certificate.
725
948
  :param pulumi.Input[str] private_key_pem: The private key in PEM format.
949
+ :param pulumi.Input[bool] renew_required: Indicates the certificate should be reissued. This means the resource will destroyed and recreated
726
950
  :param pulumi.Input[int] rsa_bits: Number of bits to use when generating an RSA key. Applies when algorithm is `RSA`.
727
951
  Defaults to `2048`.
728
952
  :param pulumi.Input[Sequence[pulumi.Input[str]]] san_dns: List of DNS names to use as alternative subjects of the certificate.
@@ -730,6 +954,7 @@ class Certificate(pulumi.CustomResource):
730
954
  :param pulumi.Input[Sequence[pulumi.Input[str]]] san_ips: List of IP addresses to use as alternative subjects of the certificate.
731
955
  :param pulumi.Input[Sequence[pulumi.Input[str]]] san_uris: List of Uniform Resource Identifiers (URIs) to use as alternative subjects of
732
956
  the certificate.
957
+ :param pulumi.Input[str] state: State of the certificate (S)
733
958
  :param pulumi.Input[int] valid_days: Desired number of days for which the new certificate will be valid.
734
959
  """
735
960
  ...
@@ -758,6 +983,7 @@ class Certificate(pulumi.CustomResource):
758
983
  algorithm: Optional[pulumi.Input[str]] = None,
759
984
  certificate_dn: Optional[pulumi.Input[str]] = None,
760
985
  common_name: Optional[pulumi.Input[str]] = None,
986
+ country: Optional[pulumi.Input[str]] = None,
761
987
  csr_origin: Optional[pulumi.Input[str]] = None,
762
988
  csr_pem: Optional[pulumi.Input[str]] = None,
763
989
  custom_fields: Optional[pulumi.Input[Mapping[str, pulumi.Input[str]]]] = None,
@@ -765,14 +991,19 @@ class Certificate(pulumi.CustomResource):
765
991
  expiration_window: Optional[pulumi.Input[int]] = None,
766
992
  issuer_hint: Optional[pulumi.Input[str]] = None,
767
993
  key_password: Optional[pulumi.Input[str]] = None,
994
+ locality: Optional[pulumi.Input[str]] = None,
768
995
  nickname: Optional[pulumi.Input[str]] = None,
996
+ organization: Optional[pulumi.Input[str]] = None,
997
+ organizational_units: Optional[pulumi.Input[Sequence[pulumi.Input[str]]]] = None,
769
998
  pkcs12: Optional[pulumi.Input[str]] = None,
770
999
  private_key_pem: Optional[pulumi.Input[str]] = None,
1000
+ renew_required: Optional[pulumi.Input[bool]] = None,
771
1001
  rsa_bits: Optional[pulumi.Input[int]] = None,
772
1002
  san_dns: Optional[pulumi.Input[Sequence[pulumi.Input[str]]]] = None,
773
1003
  san_emails: Optional[pulumi.Input[Sequence[pulumi.Input[str]]]] = None,
774
1004
  san_ips: Optional[pulumi.Input[Sequence[pulumi.Input[str]]]] = None,
775
1005
  san_uris: Optional[pulumi.Input[Sequence[pulumi.Input[str]]]] = None,
1006
+ state: Optional[pulumi.Input[str]] = None,
776
1007
  valid_days: Optional[pulumi.Input[int]] = None,
777
1008
  __props__=None):
778
1009
  opts = pulumi.ResourceOptions.merge(_utilities.get_resource_opts_defaults(), opts)
@@ -788,6 +1019,7 @@ class Certificate(pulumi.CustomResource):
788
1019
  if common_name is None and not opts.urn:
789
1020
  raise TypeError("Missing required property 'common_name'")
790
1021
  __props__.__dict__["common_name"] = common_name
1022
+ __props__.__dict__["country"] = country
791
1023
  __props__.__dict__["csr_origin"] = csr_origin
792
1024
  __props__.__dict__["csr_pem"] = csr_pem
793
1025
  __props__.__dict__["custom_fields"] = custom_fields
@@ -795,16 +1027,22 @@ class Certificate(pulumi.CustomResource):
795
1027
  __props__.__dict__["expiration_window"] = expiration_window
796
1028
  __props__.__dict__["issuer_hint"] = issuer_hint
797
1029
  __props__.__dict__["key_password"] = None if key_password is None else pulumi.Output.secret(key_password)
1030
+ __props__.__dict__["locality"] = locality
798
1031
  __props__.__dict__["nickname"] = nickname
1032
+ __props__.__dict__["organization"] = organization
1033
+ __props__.__dict__["organizational_units"] = organizational_units
799
1034
  __props__.__dict__["pkcs12"] = pkcs12
800
1035
  __props__.__dict__["private_key_pem"] = None if private_key_pem is None else pulumi.Output.secret(private_key_pem)
1036
+ __props__.__dict__["renew_required"] = renew_required
801
1037
  __props__.__dict__["rsa_bits"] = rsa_bits
802
1038
  __props__.__dict__["san_dns"] = san_dns
803
1039
  __props__.__dict__["san_emails"] = san_emails
804
1040
  __props__.__dict__["san_ips"] = san_ips
805
1041
  __props__.__dict__["san_uris"] = san_uris
1042
+ __props__.__dict__["state"] = state
806
1043
  __props__.__dict__["valid_days"] = valid_days
807
1044
  __props__.__dict__["certificate"] = None
1045
+ __props__.__dict__["certificate_id"] = None
808
1046
  __props__.__dict__["chain"] = None
809
1047
  secret_opts = pulumi.ResourceOptions(additional_secret_outputs=["keyPassword", "privateKeyPem"])
810
1048
  opts = pulumi.ResourceOptions.merge(opts, secret_opts)
@@ -821,8 +1059,10 @@ class Certificate(pulumi.CustomResource):
821
1059
  algorithm: Optional[pulumi.Input[str]] = None,
822
1060
  certificate: Optional[pulumi.Input[str]] = None,
823
1061
  certificate_dn: Optional[pulumi.Input[str]] = None,
1062
+ certificate_id: Optional[pulumi.Input[str]] = None,
824
1063
  chain: Optional[pulumi.Input[str]] = None,
825
1064
  common_name: Optional[pulumi.Input[str]] = None,
1065
+ country: Optional[pulumi.Input[str]] = None,
826
1066
  csr_origin: Optional[pulumi.Input[str]] = None,
827
1067
  csr_pem: Optional[pulumi.Input[str]] = None,
828
1068
  custom_fields: Optional[pulumi.Input[Mapping[str, pulumi.Input[str]]]] = None,
@@ -830,14 +1070,19 @@ class Certificate(pulumi.CustomResource):
830
1070
  expiration_window: Optional[pulumi.Input[int]] = None,
831
1071
  issuer_hint: Optional[pulumi.Input[str]] = None,
832
1072
  key_password: Optional[pulumi.Input[str]] = None,
1073
+ locality: Optional[pulumi.Input[str]] = None,
833
1074
  nickname: Optional[pulumi.Input[str]] = None,
1075
+ organization: Optional[pulumi.Input[str]] = None,
1076
+ organizational_units: Optional[pulumi.Input[Sequence[pulumi.Input[str]]]] = None,
834
1077
  pkcs12: Optional[pulumi.Input[str]] = None,
835
1078
  private_key_pem: Optional[pulumi.Input[str]] = None,
1079
+ renew_required: Optional[pulumi.Input[bool]] = None,
836
1080
  rsa_bits: Optional[pulumi.Input[int]] = None,
837
1081
  san_dns: Optional[pulumi.Input[Sequence[pulumi.Input[str]]]] = None,
838
1082
  san_emails: Optional[pulumi.Input[Sequence[pulumi.Input[str]]]] = None,
839
1083
  san_ips: Optional[pulumi.Input[Sequence[pulumi.Input[str]]]] = None,
840
1084
  san_uris: Optional[pulumi.Input[Sequence[pulumi.Input[str]]]] = None,
1085
+ state: Optional[pulumi.Input[str]] = None,
841
1086
  valid_days: Optional[pulumi.Input[int]] = None) -> 'Certificate':
842
1087
  """
843
1088
  Get an existing Certificate resource's state with the given name, id, and optional extra
@@ -848,8 +1093,10 @@ class Certificate(pulumi.CustomResource):
848
1093
  :param pulumi.ResourceOptions opts: Options for the resource.
849
1094
  :param pulumi.Input[str] algorithm: Key encryption algorithm, either RSA or ECDSA. Defaults to `RSA`.
850
1095
  :param pulumi.Input[str] certificate: The X509 certificate in PEM format.
1096
+ :param pulumi.Input[str] certificate_id: ID of the issued certificate
851
1097
  :param pulumi.Input[str] chain: The trust chain of X509 certificate authority certificates in PEM format concatenated together.
852
1098
  :param pulumi.Input[str] common_name: The common name of the certificate.
1099
+ :param pulumi.Input[str] country: Country of the certificate (C)
853
1100
  :param pulumi.Input[str] csr_origin: Whether key-pair generation will be `local` or `service` generated. Default is
854
1101
  `local`.
855
1102
  :param pulumi.Input[Mapping[str, pulumi.Input[str]]] custom_fields: Collection of Custom Field name-value pairs to assign to the certificate.
@@ -859,11 +1106,15 @@ class Certificate(pulumi.CustomResource):
859
1106
  :param pulumi.Input[str] issuer_hint: Used with `valid_days` to indicate the target issuer when using Trust Protection
860
1107
  Platform. Relevant values are: `DigiCert`, `Entrust`, and `Microsoft`.
861
1108
  :param pulumi.Input[str] key_password: The password used to encrypt the private key.
1109
+ :param pulumi.Input[str] locality: Locality/City of the certificate (L)
862
1110
  :param pulumi.Input[str] nickname: Use to specify a name for the new certificate object that will be created and placed
863
1111
  in a policy. Only valid for Trust Protection Platform.
1112
+ :param pulumi.Input[str] organization: Organization of the certificate (O)
1113
+ :param pulumi.Input[Sequence[pulumi.Input[str]]] organizational_units: List of Organizational Units of the certificate (OU)
864
1114
  :param pulumi.Input[str] pkcs12: A base64-encoded PKCS#12 keystore secured by the `key_password`. Useful when working with resources like
865
1115
  azure key_vault_certificate.
866
1116
  :param pulumi.Input[str] private_key_pem: The private key in PEM format.
1117
+ :param pulumi.Input[bool] renew_required: Indicates the certificate should be reissued. This means the resource will destroyed and recreated
867
1118
  :param pulumi.Input[int] rsa_bits: Number of bits to use when generating an RSA key. Applies when algorithm is `RSA`.
868
1119
  Defaults to `2048`.
869
1120
  :param pulumi.Input[Sequence[pulumi.Input[str]]] san_dns: List of DNS names to use as alternative subjects of the certificate.
@@ -871,6 +1122,7 @@ class Certificate(pulumi.CustomResource):
871
1122
  :param pulumi.Input[Sequence[pulumi.Input[str]]] san_ips: List of IP addresses to use as alternative subjects of the certificate.
872
1123
  :param pulumi.Input[Sequence[pulumi.Input[str]]] san_uris: List of Uniform Resource Identifiers (URIs) to use as alternative subjects of
873
1124
  the certificate.
1125
+ :param pulumi.Input[str] state: State of the certificate (S)
874
1126
  :param pulumi.Input[int] valid_days: Desired number of days for which the new certificate will be valid.
875
1127
  """
876
1128
  opts = pulumi.ResourceOptions.merge(opts, pulumi.ResourceOptions(id=id))
@@ -880,8 +1132,10 @@ class Certificate(pulumi.CustomResource):
880
1132
  __props__.__dict__["algorithm"] = algorithm
881
1133
  __props__.__dict__["certificate"] = certificate
882
1134
  __props__.__dict__["certificate_dn"] = certificate_dn
1135
+ __props__.__dict__["certificate_id"] = certificate_id
883
1136
  __props__.__dict__["chain"] = chain
884
1137
  __props__.__dict__["common_name"] = common_name
1138
+ __props__.__dict__["country"] = country
885
1139
  __props__.__dict__["csr_origin"] = csr_origin
886
1140
  __props__.__dict__["csr_pem"] = csr_pem
887
1141
  __props__.__dict__["custom_fields"] = custom_fields
@@ -889,14 +1143,19 @@ class Certificate(pulumi.CustomResource):
889
1143
  __props__.__dict__["expiration_window"] = expiration_window
890
1144
  __props__.__dict__["issuer_hint"] = issuer_hint
891
1145
  __props__.__dict__["key_password"] = key_password
1146
+ __props__.__dict__["locality"] = locality
892
1147
  __props__.__dict__["nickname"] = nickname
1148
+ __props__.__dict__["organization"] = organization
1149
+ __props__.__dict__["organizational_units"] = organizational_units
893
1150
  __props__.__dict__["pkcs12"] = pkcs12
894
1151
  __props__.__dict__["private_key_pem"] = private_key_pem
1152
+ __props__.__dict__["renew_required"] = renew_required
895
1153
  __props__.__dict__["rsa_bits"] = rsa_bits
896
1154
  __props__.__dict__["san_dns"] = san_dns
897
1155
  __props__.__dict__["san_emails"] = san_emails
898
1156
  __props__.__dict__["san_ips"] = san_ips
899
1157
  __props__.__dict__["san_uris"] = san_uris
1158
+ __props__.__dict__["state"] = state
900
1159
  __props__.__dict__["valid_days"] = valid_days
901
1160
  return Certificate(resource_name, opts=opts, __props__=__props__)
902
1161
 
@@ -921,6 +1180,14 @@ class Certificate(pulumi.CustomResource):
921
1180
  def certificate_dn(self) -> pulumi.Output[str]:
922
1181
  return pulumi.get(self, "certificate_dn")
923
1182
 
1183
+ @property
1184
+ @pulumi.getter(name="certificateId")
1185
+ def certificate_id(self) -> pulumi.Output[str]:
1186
+ """
1187
+ ID of the issued certificate
1188
+ """
1189
+ return pulumi.get(self, "certificate_id")
1190
+
924
1191
  @property
925
1192
  @pulumi.getter
926
1193
  def chain(self) -> pulumi.Output[str]:
@@ -937,6 +1204,14 @@ class Certificate(pulumi.CustomResource):
937
1204
  """
938
1205
  return pulumi.get(self, "common_name")
939
1206
 
1207
+ @property
1208
+ @pulumi.getter
1209
+ def country(self) -> pulumi.Output[Optional[str]]:
1210
+ """
1211
+ Country of the certificate (C)
1212
+ """
1213
+ return pulumi.get(self, "country")
1214
+
940
1215
  @property
941
1216
  @pulumi.getter(name="csrOrigin")
942
1217
  def csr_origin(self) -> pulumi.Output[Optional[str]]:
@@ -993,6 +1268,14 @@ class Certificate(pulumi.CustomResource):
993
1268
  """
994
1269
  return pulumi.get(self, "key_password")
995
1270
 
1271
+ @property
1272
+ @pulumi.getter
1273
+ def locality(self) -> pulumi.Output[Optional[str]]:
1274
+ """
1275
+ Locality/City of the certificate (L)
1276
+ """
1277
+ return pulumi.get(self, "locality")
1278
+
996
1279
  @property
997
1280
  @pulumi.getter
998
1281
  def nickname(self) -> pulumi.Output[Optional[str]]:
@@ -1002,6 +1285,22 @@ class Certificate(pulumi.CustomResource):
1002
1285
  """
1003
1286
  return pulumi.get(self, "nickname")
1004
1287
 
1288
+ @property
1289
+ @pulumi.getter
1290
+ def organization(self) -> pulumi.Output[Optional[str]]:
1291
+ """
1292
+ Organization of the certificate (O)
1293
+ """
1294
+ return pulumi.get(self, "organization")
1295
+
1296
+ @property
1297
+ @pulumi.getter(name="organizationalUnits")
1298
+ def organizational_units(self) -> pulumi.Output[Optional[Sequence[str]]]:
1299
+ """
1300
+ List of Organizational Units of the certificate (OU)
1301
+ """
1302
+ return pulumi.get(self, "organizational_units")
1303
+
1005
1304
  @property
1006
1305
  @pulumi.getter
1007
1306
  def pkcs12(self) -> pulumi.Output[str]:
@@ -1019,6 +1318,14 @@ class Certificate(pulumi.CustomResource):
1019
1318
  """
1020
1319
  return pulumi.get(self, "private_key_pem")
1021
1320
 
1321
+ @property
1322
+ @pulumi.getter(name="renewRequired")
1323
+ def renew_required(self) -> pulumi.Output[Optional[bool]]:
1324
+ """
1325
+ Indicates the certificate should be reissued. This means the resource will destroyed and recreated
1326
+ """
1327
+ return pulumi.get(self, "renew_required")
1328
+
1022
1329
  @property
1023
1330
  @pulumi.getter(name="rsaBits")
1024
1331
  def rsa_bits(self) -> pulumi.Output[Optional[int]]:
@@ -1061,6 +1368,14 @@ class Certificate(pulumi.CustomResource):
1061
1368
  """
1062
1369
  return pulumi.get(self, "san_uris")
1063
1370
 
1371
+ @property
1372
+ @pulumi.getter
1373
+ def state(self) -> pulumi.Output[Optional[str]]:
1374
+ """
1375
+ State of the certificate (S)
1376
+ """
1377
+ return pulumi.get(self, "state")
1378
+
1064
1379
  @property
1065
1380
  @pulumi.getter(name="validDays")
1066
1381
  def valid_days(self) -> pulumi.Output[Optional[int]]: