pulumi-venafi 1.11.3__py3-none-any.whl → 1.11.4a1755056000__py3-none-any.whl
This diff represents the content of publicly available package versions that have been released to one of the supported registries. The information contained in this diff is provided for informational purposes only and reflects changes between package versions as they appear in their respective public registries.
Potentially problematic release.
This version of pulumi-venafi might be problematic. Click here for more details.
- pulumi_venafi/__init__.py +1 -1
- pulumi_venafi/certificate.py +445 -446
- pulumi_venafi/cloud_keystore_installation.py +104 -105
- pulumi_venafi/config/__init__.py +1 -1
- pulumi_venafi/config/__init__.pyi +8 -3
- pulumi_venafi/config/vars.py +24 -17
- pulumi_venafi/get_cloud_keystore.py +19 -20
- pulumi_venafi/get_cloud_provider.py +17 -18
- pulumi_venafi/policy.py +35 -36
- pulumi_venafi/provider.py +170 -139
- pulumi_venafi/pulumi-plugin.json +1 -1
- pulumi_venafi/ssh_certificate.py +345 -346
- pulumi_venafi/ssh_config.py +36 -37
- {pulumi_venafi-1.11.3.dist-info → pulumi_venafi-1.11.4a1755056000.dist-info}/METADATA +1 -1
- pulumi_venafi-1.11.4a1755056000.dist-info/RECORD +19 -0
- pulumi_venafi-1.11.3.dist-info/RECORD +0 -19
- {pulumi_venafi-1.11.3.dist-info → pulumi_venafi-1.11.4a1755056000.dist-info}/WHEEL +0 -0
- {pulumi_venafi-1.11.3.dist-info → pulumi_venafi-1.11.4a1755056000.dist-info}/top_level.txt +0 -0
pulumi_venafi/provider.py
CHANGED
|
@@ -2,8 +2,7 @@
|
|
|
2
2
|
# *** WARNING: this file was generated by pulumi-language-python. ***
|
|
3
3
|
# *** Do not edit by hand unless you're certain you know what you are doing! ***
|
|
4
4
|
|
|
5
|
-
import builtins
|
|
6
|
-
import copy
|
|
5
|
+
import builtins as _builtins
|
|
7
6
|
import warnings
|
|
8
7
|
import sys
|
|
9
8
|
import pulumi
|
|
@@ -20,38 +19,41 @@ __all__ = ['ProviderArgs', 'Provider']
|
|
|
20
19
|
@pulumi.input_type
|
|
21
20
|
class ProviderArgs:
|
|
22
21
|
def __init__(__self__, *,
|
|
23
|
-
access_token: Optional[pulumi.Input[
|
|
24
|
-
api_key: Optional[pulumi.Input[
|
|
25
|
-
client_id: Optional[pulumi.Input[
|
|
26
|
-
dev_mode: Optional[pulumi.Input[
|
|
27
|
-
external_jwt: Optional[pulumi.Input[
|
|
28
|
-
|
|
29
|
-
|
|
30
|
-
|
|
31
|
-
|
|
32
|
-
|
|
33
|
-
|
|
34
|
-
|
|
35
|
-
|
|
36
|
-
|
|
22
|
+
access_token: Optional[pulumi.Input[_builtins.str]] = None,
|
|
23
|
+
api_key: Optional[pulumi.Input[_builtins.str]] = None,
|
|
24
|
+
client_id: Optional[pulumi.Input[_builtins.str]] = None,
|
|
25
|
+
dev_mode: Optional[pulumi.Input[_builtins.bool]] = None,
|
|
26
|
+
external_jwt: Optional[pulumi.Input[_builtins.str]] = None,
|
|
27
|
+
p12_cert_data: Optional[pulumi.Input[_builtins.str]] = None,
|
|
28
|
+
p12_cert_filename: Optional[pulumi.Input[_builtins.str]] = None,
|
|
29
|
+
p12_cert_password: Optional[pulumi.Input[_builtins.str]] = None,
|
|
30
|
+
skip_retirement: Optional[pulumi.Input[_builtins.bool]] = None,
|
|
31
|
+
token_url: Optional[pulumi.Input[_builtins.str]] = None,
|
|
32
|
+
tpp_password: Optional[pulumi.Input[_builtins.str]] = None,
|
|
33
|
+
tpp_username: Optional[pulumi.Input[_builtins.str]] = None,
|
|
34
|
+
trust_bundle: Optional[pulumi.Input[_builtins.str]] = None,
|
|
35
|
+
url: Optional[pulumi.Input[_builtins.str]] = None,
|
|
36
|
+
zone: Optional[pulumi.Input[_builtins.str]] = None):
|
|
37
37
|
"""
|
|
38
38
|
The set of arguments for constructing a Provider resource.
|
|
39
|
-
:param pulumi.Input[
|
|
40
|
-
:param pulumi.Input[
|
|
41
|
-
:param pulumi.Input[
|
|
42
|
-
:param pulumi.Input[
|
|
39
|
+
:param pulumi.Input[_builtins.str] access_token: Access token for Venafi TLSPDC, user should use this for authentication
|
|
40
|
+
:param pulumi.Input[_builtins.str] api_key: API key for Venafi Control Plane. Example: 142231b7-cvb0-412e-886b-6aeght0bc93d
|
|
41
|
+
:param pulumi.Input[_builtins.str] client_id: application that will be using the token
|
|
42
|
+
:param pulumi.Input[_builtins.bool] dev_mode: When set to true, the resulting certificate will be issued by an ephemeral, no trust CA rather than enrolling using
|
|
43
43
|
Venafi as a Service or Trust Protection Platform. Useful for development and testing
|
|
44
|
-
:param pulumi.Input[
|
|
45
|
-
:param pulumi.Input[
|
|
44
|
+
:param pulumi.Input[_builtins.str] external_jwt: JWT of the identity provider associated to the Venafi Control Plane service account that is granting the access token
|
|
45
|
+
:param pulumi.Input[_builtins.str] p12_cert_data: Base64 encoded PKCS#12 keystore containing a client certificate, private key, and chain certificates to authenticate to
|
|
46
46
|
TLSPDC
|
|
47
|
-
:param pulumi.Input[
|
|
48
|
-
|
|
49
|
-
:param pulumi.Input[
|
|
50
|
-
:param pulumi.Input[
|
|
51
|
-
:param pulumi.Input[
|
|
47
|
+
:param pulumi.Input[_builtins.str] p12_cert_filename: Filename of PKCS#12 keystore containing a client certificate, private key, and chain certificates to authenticate to
|
|
48
|
+
TLSPDC
|
|
49
|
+
:param pulumi.Input[_builtins.str] p12_cert_password: Password for the PKCS#12 keystore declared in p12_cert / p12_cert_data
|
|
50
|
+
:param pulumi.Input[_builtins.str] token_url: Endpoint URL to request new Venafi Control Plane access tokens
|
|
51
|
+
:param pulumi.Input[_builtins.str] tpp_password: Password for WebSDK user. Example: password
|
|
52
|
+
:param pulumi.Input[_builtins.str] tpp_username: WebSDK user for Venafi TLSPDC. Example: admin
|
|
53
|
+
:param pulumi.Input[_builtins.str] trust_bundle: Use to specify a PEM-formatted file that contains certificates to be trust anchors for all communications with the
|
|
52
54
|
Venafi Web Service. Example: trust_bundle = "${file("chain.pem")}"
|
|
53
|
-
:param pulumi.Input[
|
|
54
|
-
:param pulumi.Input[
|
|
55
|
+
:param pulumi.Input[_builtins.str] url: The Venafi Platform URL. Example: https://tpp.venafi.example/vedsdk
|
|
56
|
+
:param pulumi.Input[_builtins.str] zone: DN of the Venafi TLSPDC policy folder or name of the Venafi as a Service application plus issuing template alias.
|
|
55
57
|
Example for Platform: testPolicy\\\\vault Example for Venafi as a Service: myApp\\\\Default
|
|
56
58
|
"""
|
|
57
59
|
if access_token is not None:
|
|
@@ -64,6 +66,8 @@ class ProviderArgs:
|
|
|
64
66
|
pulumi.set(__self__, "dev_mode", dev_mode)
|
|
65
67
|
if external_jwt is not None:
|
|
66
68
|
pulumi.set(__self__, "external_jwt", external_jwt)
|
|
69
|
+
if p12_cert_data is not None:
|
|
70
|
+
pulumi.set(__self__, "p12_cert_data", p12_cert_data)
|
|
67
71
|
if p12_cert_filename is not None:
|
|
68
72
|
pulumi.set(__self__, "p12_cert_filename", p12_cert_filename)
|
|
69
73
|
if p12_cert_password is not None:
|
|
@@ -89,45 +93,45 @@ class ProviderArgs:
|
|
|
89
93
|
if zone is not None:
|
|
90
94
|
pulumi.set(__self__, "zone", zone)
|
|
91
95
|
|
|
92
|
-
@property
|
|
96
|
+
@_builtins.property
|
|
93
97
|
@pulumi.getter(name="accessToken")
|
|
94
|
-
def access_token(self) -> Optional[pulumi.Input[
|
|
98
|
+
def access_token(self) -> Optional[pulumi.Input[_builtins.str]]:
|
|
95
99
|
"""
|
|
96
100
|
Access token for Venafi TLSPDC, user should use this for authentication
|
|
97
101
|
"""
|
|
98
102
|
return pulumi.get(self, "access_token")
|
|
99
103
|
|
|
100
104
|
@access_token.setter
|
|
101
|
-
def access_token(self, value: Optional[pulumi.Input[
|
|
105
|
+
def access_token(self, value: Optional[pulumi.Input[_builtins.str]]):
|
|
102
106
|
pulumi.set(self, "access_token", value)
|
|
103
107
|
|
|
104
|
-
@property
|
|
108
|
+
@_builtins.property
|
|
105
109
|
@pulumi.getter(name="apiKey")
|
|
106
|
-
def api_key(self) -> Optional[pulumi.Input[
|
|
110
|
+
def api_key(self) -> Optional[pulumi.Input[_builtins.str]]:
|
|
107
111
|
"""
|
|
108
112
|
API key for Venafi Control Plane. Example: 142231b7-cvb0-412e-886b-6aeght0bc93d
|
|
109
113
|
"""
|
|
110
114
|
return pulumi.get(self, "api_key")
|
|
111
115
|
|
|
112
116
|
@api_key.setter
|
|
113
|
-
def api_key(self, value: Optional[pulumi.Input[
|
|
117
|
+
def api_key(self, value: Optional[pulumi.Input[_builtins.str]]):
|
|
114
118
|
pulumi.set(self, "api_key", value)
|
|
115
119
|
|
|
116
|
-
@property
|
|
120
|
+
@_builtins.property
|
|
117
121
|
@pulumi.getter(name="clientId")
|
|
118
|
-
def client_id(self) -> Optional[pulumi.Input[
|
|
122
|
+
def client_id(self) -> Optional[pulumi.Input[_builtins.str]]:
|
|
119
123
|
"""
|
|
120
124
|
application that will be using the token
|
|
121
125
|
"""
|
|
122
126
|
return pulumi.get(self, "client_id")
|
|
123
127
|
|
|
124
128
|
@client_id.setter
|
|
125
|
-
def client_id(self, value: Optional[pulumi.Input[
|
|
129
|
+
def client_id(self, value: Optional[pulumi.Input[_builtins.str]]):
|
|
126
130
|
pulumi.set(self, "client_id", value)
|
|
127
131
|
|
|
128
|
-
@property
|
|
132
|
+
@_builtins.property
|
|
129
133
|
@pulumi.getter(name="devMode")
|
|
130
|
-
def dev_mode(self) -> Optional[pulumi.Input[
|
|
134
|
+
def dev_mode(self) -> Optional[pulumi.Input[_builtins.bool]]:
|
|
131
135
|
"""
|
|
132
136
|
When set to true, the resulting certificate will be issued by an ephemeral, no trust CA rather than enrolling using
|
|
133
137
|
Venafi as a Service or Trust Protection Platform. Useful for development and testing
|
|
@@ -135,24 +139,37 @@ class ProviderArgs:
|
|
|
135
139
|
return pulumi.get(self, "dev_mode")
|
|
136
140
|
|
|
137
141
|
@dev_mode.setter
|
|
138
|
-
def dev_mode(self, value: Optional[pulumi.Input[
|
|
142
|
+
def dev_mode(self, value: Optional[pulumi.Input[_builtins.bool]]):
|
|
139
143
|
pulumi.set(self, "dev_mode", value)
|
|
140
144
|
|
|
141
|
-
@property
|
|
145
|
+
@_builtins.property
|
|
142
146
|
@pulumi.getter(name="externalJwt")
|
|
143
|
-
def external_jwt(self) -> Optional[pulumi.Input[
|
|
147
|
+
def external_jwt(self) -> Optional[pulumi.Input[_builtins.str]]:
|
|
144
148
|
"""
|
|
145
149
|
JWT of the identity provider associated to the Venafi Control Plane service account that is granting the access token
|
|
146
150
|
"""
|
|
147
151
|
return pulumi.get(self, "external_jwt")
|
|
148
152
|
|
|
149
153
|
@external_jwt.setter
|
|
150
|
-
def external_jwt(self, value: Optional[pulumi.Input[
|
|
154
|
+
def external_jwt(self, value: Optional[pulumi.Input[_builtins.str]]):
|
|
151
155
|
pulumi.set(self, "external_jwt", value)
|
|
152
156
|
|
|
153
|
-
@property
|
|
157
|
+
@_builtins.property
|
|
158
|
+
@pulumi.getter(name="p12CertData")
|
|
159
|
+
def p12_cert_data(self) -> Optional[pulumi.Input[_builtins.str]]:
|
|
160
|
+
"""
|
|
161
|
+
Base64 encoded PKCS#12 keystore containing a client certificate, private key, and chain certificates to authenticate to
|
|
162
|
+
TLSPDC
|
|
163
|
+
"""
|
|
164
|
+
return pulumi.get(self, "p12_cert_data")
|
|
165
|
+
|
|
166
|
+
@p12_cert_data.setter
|
|
167
|
+
def p12_cert_data(self, value: Optional[pulumi.Input[_builtins.str]]):
|
|
168
|
+
pulumi.set(self, "p12_cert_data", value)
|
|
169
|
+
|
|
170
|
+
@_builtins.property
|
|
154
171
|
@pulumi.getter(name="p12CertFilename")
|
|
155
|
-
def p12_cert_filename(self) -> Optional[pulumi.Input[
|
|
172
|
+
def p12_cert_filename(self) -> Optional[pulumi.Input[_builtins.str]]:
|
|
156
173
|
"""
|
|
157
174
|
Filename of PKCS#12 keystore containing a client certificate, private key, and chain certificates to authenticate to
|
|
158
175
|
TLSPDC
|
|
@@ -160,71 +177,71 @@ class ProviderArgs:
|
|
|
160
177
|
return pulumi.get(self, "p12_cert_filename")
|
|
161
178
|
|
|
162
179
|
@p12_cert_filename.setter
|
|
163
|
-
def p12_cert_filename(self, value: Optional[pulumi.Input[
|
|
180
|
+
def p12_cert_filename(self, value: Optional[pulumi.Input[_builtins.str]]):
|
|
164
181
|
pulumi.set(self, "p12_cert_filename", value)
|
|
165
182
|
|
|
166
|
-
@property
|
|
183
|
+
@_builtins.property
|
|
167
184
|
@pulumi.getter(name="p12CertPassword")
|
|
168
|
-
def p12_cert_password(self) -> Optional[pulumi.Input[
|
|
185
|
+
def p12_cert_password(self) -> Optional[pulumi.Input[_builtins.str]]:
|
|
169
186
|
"""
|
|
170
|
-
Password for the PKCS#12 keystore declared in p12_cert
|
|
187
|
+
Password for the PKCS#12 keystore declared in p12_cert / p12_cert_data
|
|
171
188
|
"""
|
|
172
189
|
return pulumi.get(self, "p12_cert_password")
|
|
173
190
|
|
|
174
191
|
@p12_cert_password.setter
|
|
175
|
-
def p12_cert_password(self, value: Optional[pulumi.Input[
|
|
192
|
+
def p12_cert_password(self, value: Optional[pulumi.Input[_builtins.str]]):
|
|
176
193
|
pulumi.set(self, "p12_cert_password", value)
|
|
177
194
|
|
|
178
|
-
@property
|
|
195
|
+
@_builtins.property
|
|
179
196
|
@pulumi.getter(name="skipRetirement")
|
|
180
|
-
def skip_retirement(self) -> Optional[pulumi.Input[
|
|
197
|
+
def skip_retirement(self) -> Optional[pulumi.Input[_builtins.bool]]:
|
|
181
198
|
return pulumi.get(self, "skip_retirement")
|
|
182
199
|
|
|
183
200
|
@skip_retirement.setter
|
|
184
|
-
def skip_retirement(self, value: Optional[pulumi.Input[
|
|
201
|
+
def skip_retirement(self, value: Optional[pulumi.Input[_builtins.bool]]):
|
|
185
202
|
pulumi.set(self, "skip_retirement", value)
|
|
186
203
|
|
|
187
|
-
@property
|
|
204
|
+
@_builtins.property
|
|
188
205
|
@pulumi.getter(name="tokenUrl")
|
|
189
|
-
def token_url(self) -> Optional[pulumi.Input[
|
|
206
|
+
def token_url(self) -> Optional[pulumi.Input[_builtins.str]]:
|
|
190
207
|
"""
|
|
191
208
|
Endpoint URL to request new Venafi Control Plane access tokens
|
|
192
209
|
"""
|
|
193
210
|
return pulumi.get(self, "token_url")
|
|
194
211
|
|
|
195
212
|
@token_url.setter
|
|
196
|
-
def token_url(self, value: Optional[pulumi.Input[
|
|
213
|
+
def token_url(self, value: Optional[pulumi.Input[_builtins.str]]):
|
|
197
214
|
pulumi.set(self, "token_url", value)
|
|
198
215
|
|
|
199
|
-
@property
|
|
216
|
+
@_builtins.property
|
|
200
217
|
@pulumi.getter(name="tppPassword")
|
|
201
218
|
@_utilities.deprecated(""", please use access_token instead""")
|
|
202
|
-
def tpp_password(self) -> Optional[pulumi.Input[
|
|
219
|
+
def tpp_password(self) -> Optional[pulumi.Input[_builtins.str]]:
|
|
203
220
|
"""
|
|
204
221
|
Password for WebSDK user. Example: password
|
|
205
222
|
"""
|
|
206
223
|
return pulumi.get(self, "tpp_password")
|
|
207
224
|
|
|
208
225
|
@tpp_password.setter
|
|
209
|
-
def tpp_password(self, value: Optional[pulumi.Input[
|
|
226
|
+
def tpp_password(self, value: Optional[pulumi.Input[_builtins.str]]):
|
|
210
227
|
pulumi.set(self, "tpp_password", value)
|
|
211
228
|
|
|
212
|
-
@property
|
|
229
|
+
@_builtins.property
|
|
213
230
|
@pulumi.getter(name="tppUsername")
|
|
214
231
|
@_utilities.deprecated(""", please use access_token instead""")
|
|
215
|
-
def tpp_username(self) -> Optional[pulumi.Input[
|
|
232
|
+
def tpp_username(self) -> Optional[pulumi.Input[_builtins.str]]:
|
|
216
233
|
"""
|
|
217
234
|
WebSDK user for Venafi TLSPDC. Example: admin
|
|
218
235
|
"""
|
|
219
236
|
return pulumi.get(self, "tpp_username")
|
|
220
237
|
|
|
221
238
|
@tpp_username.setter
|
|
222
|
-
def tpp_username(self, value: Optional[pulumi.Input[
|
|
239
|
+
def tpp_username(self, value: Optional[pulumi.Input[_builtins.str]]):
|
|
223
240
|
pulumi.set(self, "tpp_username", value)
|
|
224
241
|
|
|
225
|
-
@property
|
|
242
|
+
@_builtins.property
|
|
226
243
|
@pulumi.getter(name="trustBundle")
|
|
227
|
-
def trust_bundle(self) -> Optional[pulumi.Input[
|
|
244
|
+
def trust_bundle(self) -> Optional[pulumi.Input[_builtins.str]]:
|
|
228
245
|
"""
|
|
229
246
|
Use to specify a PEM-formatted file that contains certificates to be trust anchors for all communications with the
|
|
230
247
|
Venafi Web Service. Example: trust_bundle = "${file("chain.pem")}"
|
|
@@ -232,24 +249,24 @@ class ProviderArgs:
|
|
|
232
249
|
return pulumi.get(self, "trust_bundle")
|
|
233
250
|
|
|
234
251
|
@trust_bundle.setter
|
|
235
|
-
def trust_bundle(self, value: Optional[pulumi.Input[
|
|
252
|
+
def trust_bundle(self, value: Optional[pulumi.Input[_builtins.str]]):
|
|
236
253
|
pulumi.set(self, "trust_bundle", value)
|
|
237
254
|
|
|
238
|
-
@property
|
|
255
|
+
@_builtins.property
|
|
239
256
|
@pulumi.getter
|
|
240
|
-
def url(self) -> Optional[pulumi.Input[
|
|
257
|
+
def url(self) -> Optional[pulumi.Input[_builtins.str]]:
|
|
241
258
|
"""
|
|
242
259
|
The Venafi Platform URL. Example: https://tpp.venafi.example/vedsdk
|
|
243
260
|
"""
|
|
244
261
|
return pulumi.get(self, "url")
|
|
245
262
|
|
|
246
263
|
@url.setter
|
|
247
|
-
def url(self, value: Optional[pulumi.Input[
|
|
264
|
+
def url(self, value: Optional[pulumi.Input[_builtins.str]]):
|
|
248
265
|
pulumi.set(self, "url", value)
|
|
249
266
|
|
|
250
|
-
@property
|
|
267
|
+
@_builtins.property
|
|
251
268
|
@pulumi.getter
|
|
252
|
-
def zone(self) -> Optional[pulumi.Input[
|
|
269
|
+
def zone(self) -> Optional[pulumi.Input[_builtins.str]]:
|
|
253
270
|
"""
|
|
254
271
|
DN of the Venafi TLSPDC policy folder or name of the Venafi as a Service application plus issuing template alias.
|
|
255
272
|
Example for Platform: testPolicy\\\\vault Example for Venafi as a Service: myApp\\\\Default
|
|
@@ -257,7 +274,7 @@ class ProviderArgs:
|
|
|
257
274
|
return pulumi.get(self, "zone")
|
|
258
275
|
|
|
259
276
|
@zone.setter
|
|
260
|
-
def zone(self, value: Optional[pulumi.Input[
|
|
277
|
+
def zone(self, value: Optional[pulumi.Input[_builtins.str]]):
|
|
261
278
|
pulumi.set(self, "zone", value)
|
|
262
279
|
|
|
263
280
|
|
|
@@ -267,20 +284,21 @@ class Provider(pulumi.ProviderResource):
|
|
|
267
284
|
def __init__(__self__,
|
|
268
285
|
resource_name: str,
|
|
269
286
|
opts: Optional[pulumi.ResourceOptions] = None,
|
|
270
|
-
access_token: Optional[pulumi.Input[
|
|
271
|
-
api_key: Optional[pulumi.Input[
|
|
272
|
-
client_id: Optional[pulumi.Input[
|
|
273
|
-
dev_mode: Optional[pulumi.Input[
|
|
274
|
-
external_jwt: Optional[pulumi.Input[
|
|
275
|
-
|
|
276
|
-
|
|
277
|
-
|
|
278
|
-
|
|
279
|
-
|
|
280
|
-
|
|
281
|
-
|
|
282
|
-
|
|
283
|
-
|
|
287
|
+
access_token: Optional[pulumi.Input[_builtins.str]] = None,
|
|
288
|
+
api_key: Optional[pulumi.Input[_builtins.str]] = None,
|
|
289
|
+
client_id: Optional[pulumi.Input[_builtins.str]] = None,
|
|
290
|
+
dev_mode: Optional[pulumi.Input[_builtins.bool]] = None,
|
|
291
|
+
external_jwt: Optional[pulumi.Input[_builtins.str]] = None,
|
|
292
|
+
p12_cert_data: Optional[pulumi.Input[_builtins.str]] = None,
|
|
293
|
+
p12_cert_filename: Optional[pulumi.Input[_builtins.str]] = None,
|
|
294
|
+
p12_cert_password: Optional[pulumi.Input[_builtins.str]] = None,
|
|
295
|
+
skip_retirement: Optional[pulumi.Input[_builtins.bool]] = None,
|
|
296
|
+
token_url: Optional[pulumi.Input[_builtins.str]] = None,
|
|
297
|
+
tpp_password: Optional[pulumi.Input[_builtins.str]] = None,
|
|
298
|
+
tpp_username: Optional[pulumi.Input[_builtins.str]] = None,
|
|
299
|
+
trust_bundle: Optional[pulumi.Input[_builtins.str]] = None,
|
|
300
|
+
url: Optional[pulumi.Input[_builtins.str]] = None,
|
|
301
|
+
zone: Optional[pulumi.Input[_builtins.str]] = None,
|
|
284
302
|
__props__=None):
|
|
285
303
|
"""
|
|
286
304
|
The provider type for the venafi package. By default, resources use package-wide configuration
|
|
@@ -290,22 +308,24 @@ class Provider(pulumi.ProviderResource):
|
|
|
290
308
|
|
|
291
309
|
:param str resource_name: The name of the resource.
|
|
292
310
|
:param pulumi.ResourceOptions opts: Options for the resource.
|
|
293
|
-
:param pulumi.Input[
|
|
294
|
-
:param pulumi.Input[
|
|
295
|
-
:param pulumi.Input[
|
|
296
|
-
:param pulumi.Input[
|
|
311
|
+
:param pulumi.Input[_builtins.str] access_token: Access token for Venafi TLSPDC, user should use this for authentication
|
|
312
|
+
:param pulumi.Input[_builtins.str] api_key: API key for Venafi Control Plane. Example: 142231b7-cvb0-412e-886b-6aeght0bc93d
|
|
313
|
+
:param pulumi.Input[_builtins.str] client_id: application that will be using the token
|
|
314
|
+
:param pulumi.Input[_builtins.bool] dev_mode: When set to true, the resulting certificate will be issued by an ephemeral, no trust CA rather than enrolling using
|
|
297
315
|
Venafi as a Service or Trust Protection Platform. Useful for development and testing
|
|
298
|
-
:param pulumi.Input[
|
|
299
|
-
:param pulumi.Input[
|
|
316
|
+
:param pulumi.Input[_builtins.str] external_jwt: JWT of the identity provider associated to the Venafi Control Plane service account that is granting the access token
|
|
317
|
+
:param pulumi.Input[_builtins.str] p12_cert_data: Base64 encoded PKCS#12 keystore containing a client certificate, private key, and chain certificates to authenticate to
|
|
300
318
|
TLSPDC
|
|
301
|
-
:param pulumi.Input[
|
|
302
|
-
|
|
303
|
-
:param pulumi.Input[
|
|
304
|
-
:param pulumi.Input[
|
|
305
|
-
:param pulumi.Input[
|
|
319
|
+
:param pulumi.Input[_builtins.str] p12_cert_filename: Filename of PKCS#12 keystore containing a client certificate, private key, and chain certificates to authenticate to
|
|
320
|
+
TLSPDC
|
|
321
|
+
:param pulumi.Input[_builtins.str] p12_cert_password: Password for the PKCS#12 keystore declared in p12_cert / p12_cert_data
|
|
322
|
+
:param pulumi.Input[_builtins.str] token_url: Endpoint URL to request new Venafi Control Plane access tokens
|
|
323
|
+
:param pulumi.Input[_builtins.str] tpp_password: Password for WebSDK user. Example: password
|
|
324
|
+
:param pulumi.Input[_builtins.str] tpp_username: WebSDK user for Venafi TLSPDC. Example: admin
|
|
325
|
+
:param pulumi.Input[_builtins.str] trust_bundle: Use to specify a PEM-formatted file that contains certificates to be trust anchors for all communications with the
|
|
306
326
|
Venafi Web Service. Example: trust_bundle = "${file("chain.pem")}"
|
|
307
|
-
:param pulumi.Input[
|
|
308
|
-
:param pulumi.Input[
|
|
327
|
+
:param pulumi.Input[_builtins.str] url: The Venafi Platform URL. Example: https://tpp.venafi.example/vedsdk
|
|
328
|
+
:param pulumi.Input[_builtins.str] zone: DN of the Venafi TLSPDC policy folder or name of the Venafi as a Service application plus issuing template alias.
|
|
309
329
|
Example for Platform: testPolicy\\\\vault Example for Venafi as a Service: myApp\\\\Default
|
|
310
330
|
"""
|
|
311
331
|
...
|
|
@@ -335,20 +355,21 @@ class Provider(pulumi.ProviderResource):
|
|
|
335
355
|
def _internal_init(__self__,
|
|
336
356
|
resource_name: str,
|
|
337
357
|
opts: Optional[pulumi.ResourceOptions] = None,
|
|
338
|
-
access_token: Optional[pulumi.Input[
|
|
339
|
-
api_key: Optional[pulumi.Input[
|
|
340
|
-
client_id: Optional[pulumi.Input[
|
|
341
|
-
dev_mode: Optional[pulumi.Input[
|
|
342
|
-
external_jwt: Optional[pulumi.Input[
|
|
343
|
-
|
|
344
|
-
|
|
345
|
-
|
|
346
|
-
|
|
347
|
-
|
|
348
|
-
|
|
349
|
-
|
|
350
|
-
|
|
351
|
-
|
|
358
|
+
access_token: Optional[pulumi.Input[_builtins.str]] = None,
|
|
359
|
+
api_key: Optional[pulumi.Input[_builtins.str]] = None,
|
|
360
|
+
client_id: Optional[pulumi.Input[_builtins.str]] = None,
|
|
361
|
+
dev_mode: Optional[pulumi.Input[_builtins.bool]] = None,
|
|
362
|
+
external_jwt: Optional[pulumi.Input[_builtins.str]] = None,
|
|
363
|
+
p12_cert_data: Optional[pulumi.Input[_builtins.str]] = None,
|
|
364
|
+
p12_cert_filename: Optional[pulumi.Input[_builtins.str]] = None,
|
|
365
|
+
p12_cert_password: Optional[pulumi.Input[_builtins.str]] = None,
|
|
366
|
+
skip_retirement: Optional[pulumi.Input[_builtins.bool]] = None,
|
|
367
|
+
token_url: Optional[pulumi.Input[_builtins.str]] = None,
|
|
368
|
+
tpp_password: Optional[pulumi.Input[_builtins.str]] = None,
|
|
369
|
+
tpp_username: Optional[pulumi.Input[_builtins.str]] = None,
|
|
370
|
+
trust_bundle: Optional[pulumi.Input[_builtins.str]] = None,
|
|
371
|
+
url: Optional[pulumi.Input[_builtins.str]] = None,
|
|
372
|
+
zone: Optional[pulumi.Input[_builtins.str]] = None,
|
|
352
373
|
__props__=None):
|
|
353
374
|
opts = pulumi.ResourceOptions.merge(_utilities.get_resource_opts_defaults(), opts)
|
|
354
375
|
if not isinstance(opts, pulumi.ResourceOptions):
|
|
@@ -363,6 +384,7 @@ class Provider(pulumi.ProviderResource):
|
|
|
363
384
|
__props__.__dict__["client_id"] = client_id
|
|
364
385
|
__props__.__dict__["dev_mode"] = pulumi.Output.from_input(dev_mode).apply(pulumi.runtime.to_json) if dev_mode is not None else None
|
|
365
386
|
__props__.__dict__["external_jwt"] = None if external_jwt is None else pulumi.Output.secret(external_jwt)
|
|
387
|
+
__props__.__dict__["p12_cert_data"] = p12_cert_data
|
|
366
388
|
__props__.__dict__["p12_cert_filename"] = p12_cert_filename
|
|
367
389
|
__props__.__dict__["p12_cert_password"] = None if p12_cert_password is None else pulumi.Output.secret(p12_cert_password)
|
|
368
390
|
__props__.__dict__["skip_retirement"] = pulumi.Output.from_input(skip_retirement).apply(pulumi.runtime.to_json) if skip_retirement is not None else None
|
|
@@ -380,101 +402,110 @@ class Provider(pulumi.ProviderResource):
|
|
|
380
402
|
__props__,
|
|
381
403
|
opts)
|
|
382
404
|
|
|
383
|
-
@property
|
|
405
|
+
@_builtins.property
|
|
384
406
|
@pulumi.getter(name="accessToken")
|
|
385
|
-
def access_token(self) -> pulumi.Output[Optional[
|
|
407
|
+
def access_token(self) -> pulumi.Output[Optional[_builtins.str]]:
|
|
386
408
|
"""
|
|
387
409
|
Access token for Venafi TLSPDC, user should use this for authentication
|
|
388
410
|
"""
|
|
389
411
|
return pulumi.get(self, "access_token")
|
|
390
412
|
|
|
391
|
-
@property
|
|
413
|
+
@_builtins.property
|
|
392
414
|
@pulumi.getter(name="apiKey")
|
|
393
|
-
def api_key(self) -> pulumi.Output[Optional[
|
|
415
|
+
def api_key(self) -> pulumi.Output[Optional[_builtins.str]]:
|
|
394
416
|
"""
|
|
395
417
|
API key for Venafi Control Plane. Example: 142231b7-cvb0-412e-886b-6aeght0bc93d
|
|
396
418
|
"""
|
|
397
419
|
return pulumi.get(self, "api_key")
|
|
398
420
|
|
|
399
|
-
@property
|
|
421
|
+
@_builtins.property
|
|
400
422
|
@pulumi.getter(name="clientId")
|
|
401
|
-
def client_id(self) -> pulumi.Output[Optional[
|
|
423
|
+
def client_id(self) -> pulumi.Output[Optional[_builtins.str]]:
|
|
402
424
|
"""
|
|
403
425
|
application that will be using the token
|
|
404
426
|
"""
|
|
405
427
|
return pulumi.get(self, "client_id")
|
|
406
428
|
|
|
407
|
-
@property
|
|
429
|
+
@_builtins.property
|
|
408
430
|
@pulumi.getter(name="externalJwt")
|
|
409
|
-
def external_jwt(self) -> pulumi.Output[Optional[
|
|
431
|
+
def external_jwt(self) -> pulumi.Output[Optional[_builtins.str]]:
|
|
410
432
|
"""
|
|
411
433
|
JWT of the identity provider associated to the Venafi Control Plane service account that is granting the access token
|
|
412
434
|
"""
|
|
413
435
|
return pulumi.get(self, "external_jwt")
|
|
414
436
|
|
|
415
|
-
@property
|
|
437
|
+
@_builtins.property
|
|
438
|
+
@pulumi.getter(name="p12CertData")
|
|
439
|
+
def p12_cert_data(self) -> pulumi.Output[Optional[_builtins.str]]:
|
|
440
|
+
"""
|
|
441
|
+
Base64 encoded PKCS#12 keystore containing a client certificate, private key, and chain certificates to authenticate to
|
|
442
|
+
TLSPDC
|
|
443
|
+
"""
|
|
444
|
+
return pulumi.get(self, "p12_cert_data")
|
|
445
|
+
|
|
446
|
+
@_builtins.property
|
|
416
447
|
@pulumi.getter(name="p12CertFilename")
|
|
417
|
-
def p12_cert_filename(self) -> pulumi.Output[Optional[
|
|
448
|
+
def p12_cert_filename(self) -> pulumi.Output[Optional[_builtins.str]]:
|
|
418
449
|
"""
|
|
419
450
|
Filename of PKCS#12 keystore containing a client certificate, private key, and chain certificates to authenticate to
|
|
420
451
|
TLSPDC
|
|
421
452
|
"""
|
|
422
453
|
return pulumi.get(self, "p12_cert_filename")
|
|
423
454
|
|
|
424
|
-
@property
|
|
455
|
+
@_builtins.property
|
|
425
456
|
@pulumi.getter(name="p12CertPassword")
|
|
426
|
-
def p12_cert_password(self) -> pulumi.Output[Optional[
|
|
457
|
+
def p12_cert_password(self) -> pulumi.Output[Optional[_builtins.str]]:
|
|
427
458
|
"""
|
|
428
|
-
Password for the PKCS#12 keystore declared in p12_cert
|
|
459
|
+
Password for the PKCS#12 keystore declared in p12_cert / p12_cert_data
|
|
429
460
|
"""
|
|
430
461
|
return pulumi.get(self, "p12_cert_password")
|
|
431
462
|
|
|
432
|
-
@property
|
|
463
|
+
@_builtins.property
|
|
433
464
|
@pulumi.getter(name="tokenUrl")
|
|
434
|
-
def token_url(self) -> pulumi.Output[Optional[
|
|
465
|
+
def token_url(self) -> pulumi.Output[Optional[_builtins.str]]:
|
|
435
466
|
"""
|
|
436
467
|
Endpoint URL to request new Venafi Control Plane access tokens
|
|
437
468
|
"""
|
|
438
469
|
return pulumi.get(self, "token_url")
|
|
439
470
|
|
|
440
|
-
@property
|
|
471
|
+
@_builtins.property
|
|
441
472
|
@pulumi.getter(name="tppPassword")
|
|
442
473
|
@_utilities.deprecated(""", please use access_token instead""")
|
|
443
|
-
def tpp_password(self) -> pulumi.Output[Optional[
|
|
474
|
+
def tpp_password(self) -> pulumi.Output[Optional[_builtins.str]]:
|
|
444
475
|
"""
|
|
445
476
|
Password for WebSDK user. Example: password
|
|
446
477
|
"""
|
|
447
478
|
return pulumi.get(self, "tpp_password")
|
|
448
479
|
|
|
449
|
-
@property
|
|
480
|
+
@_builtins.property
|
|
450
481
|
@pulumi.getter(name="tppUsername")
|
|
451
482
|
@_utilities.deprecated(""", please use access_token instead""")
|
|
452
|
-
def tpp_username(self) -> pulumi.Output[Optional[
|
|
483
|
+
def tpp_username(self) -> pulumi.Output[Optional[_builtins.str]]:
|
|
453
484
|
"""
|
|
454
485
|
WebSDK user for Venafi TLSPDC. Example: admin
|
|
455
486
|
"""
|
|
456
487
|
return pulumi.get(self, "tpp_username")
|
|
457
488
|
|
|
458
|
-
@property
|
|
489
|
+
@_builtins.property
|
|
459
490
|
@pulumi.getter(name="trustBundle")
|
|
460
|
-
def trust_bundle(self) -> pulumi.Output[Optional[
|
|
491
|
+
def trust_bundle(self) -> pulumi.Output[Optional[_builtins.str]]:
|
|
461
492
|
"""
|
|
462
493
|
Use to specify a PEM-formatted file that contains certificates to be trust anchors for all communications with the
|
|
463
494
|
Venafi Web Service. Example: trust_bundle = "${file("chain.pem")}"
|
|
464
495
|
"""
|
|
465
496
|
return pulumi.get(self, "trust_bundle")
|
|
466
497
|
|
|
467
|
-
@property
|
|
498
|
+
@_builtins.property
|
|
468
499
|
@pulumi.getter
|
|
469
|
-
def url(self) -> pulumi.Output[Optional[
|
|
500
|
+
def url(self) -> pulumi.Output[Optional[_builtins.str]]:
|
|
470
501
|
"""
|
|
471
502
|
The Venafi Platform URL. Example: https://tpp.venafi.example/vedsdk
|
|
472
503
|
"""
|
|
473
504
|
return pulumi.get(self, "url")
|
|
474
505
|
|
|
475
|
-
@property
|
|
506
|
+
@_builtins.property
|
|
476
507
|
@pulumi.getter
|
|
477
|
-
def zone(self) -> pulumi.Output[Optional[
|
|
508
|
+
def zone(self) -> pulumi.Output[Optional[_builtins.str]]:
|
|
478
509
|
"""
|
|
479
510
|
DN of the Venafi TLSPDC policy folder or name of the Venafi as a Service application plus issuing template alias.
|
|
480
511
|
Example for Platform: testPolicy\\\\vault Example for Venafi as a Service: myApp\\\\Default
|
|
@@ -488,7 +519,7 @@ class Provider(pulumi.ProviderResource):
|
|
|
488
519
|
raise TypeError("Expected argument 'result' to be a dict")
|
|
489
520
|
pulumi.set(__self__, "result", result)
|
|
490
521
|
|
|
491
|
-
@property
|
|
522
|
+
@_builtins.property
|
|
492
523
|
@pulumi.getter
|
|
493
524
|
def result(self) -> Mapping[str, Any]:
|
|
494
525
|
return pulumi.get(self, "result")
|
pulumi_venafi/pulumi-plugin.json
CHANGED