pulumi-venafi 1.12.0a1752907683__py3-none-any.whl → 1.12.0a1753398192__py3-none-any.whl
This diff represents the content of publicly available package versions that have been released to one of the supported registries. The information contained in this diff is provided for informational purposes only and reflects changes between package versions as they appear in their respective public registries.
Potentially problematic release.
This version of pulumi-venafi might be problematic. Click here for more details.
- pulumi_venafi/__init__.py +1 -1
- pulumi_venafi/certificate.py +445 -446
- pulumi_venafi/cloud_keystore_installation.py +104 -105
- pulumi_venafi/config/__init__.py +1 -1
- pulumi_venafi/config/__init__.pyi +1 -2
- pulumi_venafi/config/vars.py +15 -16
- pulumi_venafi/get_cloud_keystore.py +19 -20
- pulumi_venafi/get_cloud_provider.py +17 -18
- pulumi_venafi/policy.py +35 -36
- pulumi_venafi/provider.py +136 -137
- pulumi_venafi/pulumi-plugin.json +1 -1
- pulumi_venafi/ssh_certificate.py +345 -346
- pulumi_venafi/ssh_config.py +36 -37
- {pulumi_venafi-1.12.0a1752907683.dist-info → pulumi_venafi-1.12.0a1753398192.dist-info}/METADATA +1 -1
- pulumi_venafi-1.12.0a1753398192.dist-info/RECORD +19 -0
- pulumi_venafi-1.12.0a1752907683.dist-info/RECORD +0 -19
- {pulumi_venafi-1.12.0a1752907683.dist-info → pulumi_venafi-1.12.0a1753398192.dist-info}/WHEEL +0 -0
- {pulumi_venafi-1.12.0a1752907683.dist-info → pulumi_venafi-1.12.0a1753398192.dist-info}/top_level.txt +0 -0
|
@@ -2,8 +2,7 @@
|
|
|
2
2
|
# *** WARNING: this file was generated by pulumi-language-python. ***
|
|
3
3
|
# *** Do not edit by hand unless you're certain you know what you are doing! ***
|
|
4
4
|
|
|
5
|
-
import builtins
|
|
6
|
-
import copy
|
|
5
|
+
import builtins as _builtins
|
|
7
6
|
import warnings
|
|
8
7
|
import sys
|
|
9
8
|
import pulumi
|
|
@@ -20,18 +19,18 @@ __all__ = ['CloudKeystoreInstallationArgs', 'CloudKeystoreInstallation']
|
|
|
20
19
|
@pulumi.input_type
|
|
21
20
|
class CloudKeystoreInstallationArgs:
|
|
22
21
|
def __init__(__self__, *,
|
|
23
|
-
certificate_id: pulumi.Input[
|
|
24
|
-
cloud_keystore_id: pulumi.Input[
|
|
25
|
-
arn: Optional[pulumi.Input[
|
|
26
|
-
cloud_certificate_name: Optional[pulumi.Input[
|
|
27
|
-
gcm_cert_scope: Optional[pulumi.Input[
|
|
22
|
+
certificate_id: pulumi.Input[_builtins.str],
|
|
23
|
+
cloud_keystore_id: pulumi.Input[_builtins.str],
|
|
24
|
+
arn: Optional[pulumi.Input[_builtins.str]] = None,
|
|
25
|
+
cloud_certificate_name: Optional[pulumi.Input[_builtins.str]] = None,
|
|
26
|
+
gcm_cert_scope: Optional[pulumi.Input[_builtins.str]] = None):
|
|
28
27
|
"""
|
|
29
28
|
The set of arguments for constructing a CloudKeystoreInstallation resource.
|
|
30
|
-
:param pulumi.Input[
|
|
31
|
-
:param pulumi.Input[
|
|
32
|
-
:param pulumi.Input[
|
|
33
|
-
:param pulumi.Input[
|
|
34
|
-
:param pulumi.Input[
|
|
29
|
+
:param pulumi.Input[_builtins.str] certificate_id: ID of the certificate to be provisioned to the given `keystore_id`.
|
|
30
|
+
:param pulumi.Input[_builtins.str] cloud_keystore_id: ID of the cloud keystore where the certificate will be provisioned.
|
|
31
|
+
:param pulumi.Input[_builtins.str] arn: ARN of the AWS certificate. Use it to provision the VCP certificate to an existing ACM certificate, instead of a new one. Only valid for ACM keystores.
|
|
32
|
+
:param pulumi.Input[_builtins.str] cloud_certificate_name: Name for the provisioned certificate in the keystore. If the name already exists, the provisioning will replace the previous certificate with the one from `certificate_id`. Only valid for AKV and GCM keystores.
|
|
33
|
+
:param pulumi.Input[_builtins.str] gcm_cert_scope: The GCM certificate scope of the certificate. Only valid for GCM keystores. Supported values from GCM API documentation: DEFAULT, EDGE_CACHE, ALL_REGIONS.
|
|
35
34
|
"""
|
|
36
35
|
pulumi.set(__self__, "certificate_id", certificate_id)
|
|
37
36
|
pulumi.set(__self__, "cloud_keystore_id", cloud_keystore_id)
|
|
@@ -42,86 +41,86 @@ class CloudKeystoreInstallationArgs:
|
|
|
42
41
|
if gcm_cert_scope is not None:
|
|
43
42
|
pulumi.set(__self__, "gcm_cert_scope", gcm_cert_scope)
|
|
44
43
|
|
|
45
|
-
@property
|
|
44
|
+
@_builtins.property
|
|
46
45
|
@pulumi.getter(name="certificateId")
|
|
47
|
-
def certificate_id(self) -> pulumi.Input[
|
|
46
|
+
def certificate_id(self) -> pulumi.Input[_builtins.str]:
|
|
48
47
|
"""
|
|
49
48
|
ID of the certificate to be provisioned to the given `keystore_id`.
|
|
50
49
|
"""
|
|
51
50
|
return pulumi.get(self, "certificate_id")
|
|
52
51
|
|
|
53
52
|
@certificate_id.setter
|
|
54
|
-
def certificate_id(self, value: pulumi.Input[
|
|
53
|
+
def certificate_id(self, value: pulumi.Input[_builtins.str]):
|
|
55
54
|
pulumi.set(self, "certificate_id", value)
|
|
56
55
|
|
|
57
|
-
@property
|
|
56
|
+
@_builtins.property
|
|
58
57
|
@pulumi.getter(name="cloudKeystoreId")
|
|
59
|
-
def cloud_keystore_id(self) -> pulumi.Input[
|
|
58
|
+
def cloud_keystore_id(self) -> pulumi.Input[_builtins.str]:
|
|
60
59
|
"""
|
|
61
60
|
ID of the cloud keystore where the certificate will be provisioned.
|
|
62
61
|
"""
|
|
63
62
|
return pulumi.get(self, "cloud_keystore_id")
|
|
64
63
|
|
|
65
64
|
@cloud_keystore_id.setter
|
|
66
|
-
def cloud_keystore_id(self, value: pulumi.Input[
|
|
65
|
+
def cloud_keystore_id(self, value: pulumi.Input[_builtins.str]):
|
|
67
66
|
pulumi.set(self, "cloud_keystore_id", value)
|
|
68
67
|
|
|
69
|
-
@property
|
|
68
|
+
@_builtins.property
|
|
70
69
|
@pulumi.getter
|
|
71
|
-
def arn(self) -> Optional[pulumi.Input[
|
|
70
|
+
def arn(self) -> Optional[pulumi.Input[_builtins.str]]:
|
|
72
71
|
"""
|
|
73
72
|
ARN of the AWS certificate. Use it to provision the VCP certificate to an existing ACM certificate, instead of a new one. Only valid for ACM keystores.
|
|
74
73
|
"""
|
|
75
74
|
return pulumi.get(self, "arn")
|
|
76
75
|
|
|
77
76
|
@arn.setter
|
|
78
|
-
def arn(self, value: Optional[pulumi.Input[
|
|
77
|
+
def arn(self, value: Optional[pulumi.Input[_builtins.str]]):
|
|
79
78
|
pulumi.set(self, "arn", value)
|
|
80
79
|
|
|
81
|
-
@property
|
|
80
|
+
@_builtins.property
|
|
82
81
|
@pulumi.getter(name="cloudCertificateName")
|
|
83
|
-
def cloud_certificate_name(self) -> Optional[pulumi.Input[
|
|
82
|
+
def cloud_certificate_name(self) -> Optional[pulumi.Input[_builtins.str]]:
|
|
84
83
|
"""
|
|
85
84
|
Name for the provisioned certificate in the keystore. If the name already exists, the provisioning will replace the previous certificate with the one from `certificate_id`. Only valid for AKV and GCM keystores.
|
|
86
85
|
"""
|
|
87
86
|
return pulumi.get(self, "cloud_certificate_name")
|
|
88
87
|
|
|
89
88
|
@cloud_certificate_name.setter
|
|
90
|
-
def cloud_certificate_name(self, value: Optional[pulumi.Input[
|
|
89
|
+
def cloud_certificate_name(self, value: Optional[pulumi.Input[_builtins.str]]):
|
|
91
90
|
pulumi.set(self, "cloud_certificate_name", value)
|
|
92
91
|
|
|
93
|
-
@property
|
|
92
|
+
@_builtins.property
|
|
94
93
|
@pulumi.getter(name="gcmCertScope")
|
|
95
|
-
def gcm_cert_scope(self) -> Optional[pulumi.Input[
|
|
94
|
+
def gcm_cert_scope(self) -> Optional[pulumi.Input[_builtins.str]]:
|
|
96
95
|
"""
|
|
97
96
|
The GCM certificate scope of the certificate. Only valid for GCM keystores. Supported values from GCM API documentation: DEFAULT, EDGE_CACHE, ALL_REGIONS.
|
|
98
97
|
"""
|
|
99
98
|
return pulumi.get(self, "gcm_cert_scope")
|
|
100
99
|
|
|
101
100
|
@gcm_cert_scope.setter
|
|
102
|
-
def gcm_cert_scope(self, value: Optional[pulumi.Input[
|
|
101
|
+
def gcm_cert_scope(self, value: Optional[pulumi.Input[_builtins.str]]):
|
|
103
102
|
pulumi.set(self, "gcm_cert_scope", value)
|
|
104
103
|
|
|
105
104
|
|
|
106
105
|
@pulumi.input_type
|
|
107
106
|
class _CloudKeystoreInstallationState:
|
|
108
107
|
def __init__(__self__, *,
|
|
109
|
-
arn: Optional[pulumi.Input[
|
|
110
|
-
certificate_id: Optional[pulumi.Input[
|
|
111
|
-
cloud_certificate_id: Optional[pulumi.Input[
|
|
112
|
-
cloud_certificate_metadata: Optional[pulumi.Input[Mapping[str, pulumi.Input[
|
|
113
|
-
cloud_certificate_name: Optional[pulumi.Input[
|
|
114
|
-
cloud_keystore_id: Optional[pulumi.Input[
|
|
115
|
-
gcm_cert_scope: Optional[pulumi.Input[
|
|
108
|
+
arn: Optional[pulumi.Input[_builtins.str]] = None,
|
|
109
|
+
certificate_id: Optional[pulumi.Input[_builtins.str]] = None,
|
|
110
|
+
cloud_certificate_id: Optional[pulumi.Input[_builtins.str]] = None,
|
|
111
|
+
cloud_certificate_metadata: Optional[pulumi.Input[Mapping[str, pulumi.Input[_builtins.str]]]] = None,
|
|
112
|
+
cloud_certificate_name: Optional[pulumi.Input[_builtins.str]] = None,
|
|
113
|
+
cloud_keystore_id: Optional[pulumi.Input[_builtins.str]] = None,
|
|
114
|
+
gcm_cert_scope: Optional[pulumi.Input[_builtins.str]] = None):
|
|
116
115
|
"""
|
|
117
116
|
Input properties used for looking up and filtering CloudKeystoreInstallation resources.
|
|
118
|
-
:param pulumi.Input[
|
|
119
|
-
:param pulumi.Input[
|
|
120
|
-
:param pulumi.Input[
|
|
121
|
-
:param pulumi.Input[Mapping[str, pulumi.Input[
|
|
122
|
-
:param pulumi.Input[
|
|
123
|
-
:param pulumi.Input[
|
|
124
|
-
:param pulumi.Input[
|
|
117
|
+
:param pulumi.Input[_builtins.str] arn: ARN of the AWS certificate. Use it to provision the VCP certificate to an existing ACM certificate, instead of a new one. Only valid for ACM keystores.
|
|
118
|
+
:param pulumi.Input[_builtins.str] certificate_id: ID of the certificate to be provisioned to the given `keystore_id`.
|
|
119
|
+
:param pulumi.Input[_builtins.str] cloud_certificate_id: The ID of the provisioned certificate within the Cloud Keystore
|
|
120
|
+
:param pulumi.Input[Mapping[str, pulumi.Input[_builtins.str]]] cloud_certificate_metadata: Metadata of the provisioned certificate from the Cloud Keystore
|
|
121
|
+
:param pulumi.Input[_builtins.str] cloud_certificate_name: Name for the provisioned certificate in the keystore. If the name already exists, the provisioning will replace the previous certificate with the one from `certificate_id`. Only valid for AKV and GCM keystores.
|
|
122
|
+
:param pulumi.Input[_builtins.str] cloud_keystore_id: ID of the cloud keystore where the certificate will be provisioned.
|
|
123
|
+
:param pulumi.Input[_builtins.str] gcm_cert_scope: The GCM certificate scope of the certificate. Only valid for GCM keystores. Supported values from GCM API documentation: DEFAULT, EDGE_CACHE, ALL_REGIONS.
|
|
125
124
|
"""
|
|
126
125
|
if arn is not None:
|
|
127
126
|
pulumi.set(__self__, "arn", arn)
|
|
@@ -138,88 +137,88 @@ class _CloudKeystoreInstallationState:
|
|
|
138
137
|
if gcm_cert_scope is not None:
|
|
139
138
|
pulumi.set(__self__, "gcm_cert_scope", gcm_cert_scope)
|
|
140
139
|
|
|
141
|
-
@property
|
|
140
|
+
@_builtins.property
|
|
142
141
|
@pulumi.getter
|
|
143
|
-
def arn(self) -> Optional[pulumi.Input[
|
|
142
|
+
def arn(self) -> Optional[pulumi.Input[_builtins.str]]:
|
|
144
143
|
"""
|
|
145
144
|
ARN of the AWS certificate. Use it to provision the VCP certificate to an existing ACM certificate, instead of a new one. Only valid for ACM keystores.
|
|
146
145
|
"""
|
|
147
146
|
return pulumi.get(self, "arn")
|
|
148
147
|
|
|
149
148
|
@arn.setter
|
|
150
|
-
def arn(self, value: Optional[pulumi.Input[
|
|
149
|
+
def arn(self, value: Optional[pulumi.Input[_builtins.str]]):
|
|
151
150
|
pulumi.set(self, "arn", value)
|
|
152
151
|
|
|
153
|
-
@property
|
|
152
|
+
@_builtins.property
|
|
154
153
|
@pulumi.getter(name="certificateId")
|
|
155
|
-
def certificate_id(self) -> Optional[pulumi.Input[
|
|
154
|
+
def certificate_id(self) -> Optional[pulumi.Input[_builtins.str]]:
|
|
156
155
|
"""
|
|
157
156
|
ID of the certificate to be provisioned to the given `keystore_id`.
|
|
158
157
|
"""
|
|
159
158
|
return pulumi.get(self, "certificate_id")
|
|
160
159
|
|
|
161
160
|
@certificate_id.setter
|
|
162
|
-
def certificate_id(self, value: Optional[pulumi.Input[
|
|
161
|
+
def certificate_id(self, value: Optional[pulumi.Input[_builtins.str]]):
|
|
163
162
|
pulumi.set(self, "certificate_id", value)
|
|
164
163
|
|
|
165
|
-
@property
|
|
164
|
+
@_builtins.property
|
|
166
165
|
@pulumi.getter(name="cloudCertificateId")
|
|
167
|
-
def cloud_certificate_id(self) -> Optional[pulumi.Input[
|
|
166
|
+
def cloud_certificate_id(self) -> Optional[pulumi.Input[_builtins.str]]:
|
|
168
167
|
"""
|
|
169
168
|
The ID of the provisioned certificate within the Cloud Keystore
|
|
170
169
|
"""
|
|
171
170
|
return pulumi.get(self, "cloud_certificate_id")
|
|
172
171
|
|
|
173
172
|
@cloud_certificate_id.setter
|
|
174
|
-
def cloud_certificate_id(self, value: Optional[pulumi.Input[
|
|
173
|
+
def cloud_certificate_id(self, value: Optional[pulumi.Input[_builtins.str]]):
|
|
175
174
|
pulumi.set(self, "cloud_certificate_id", value)
|
|
176
175
|
|
|
177
|
-
@property
|
|
176
|
+
@_builtins.property
|
|
178
177
|
@pulumi.getter(name="cloudCertificateMetadata")
|
|
179
|
-
def cloud_certificate_metadata(self) -> Optional[pulumi.Input[Mapping[str, pulumi.Input[
|
|
178
|
+
def cloud_certificate_metadata(self) -> Optional[pulumi.Input[Mapping[str, pulumi.Input[_builtins.str]]]]:
|
|
180
179
|
"""
|
|
181
180
|
Metadata of the provisioned certificate from the Cloud Keystore
|
|
182
181
|
"""
|
|
183
182
|
return pulumi.get(self, "cloud_certificate_metadata")
|
|
184
183
|
|
|
185
184
|
@cloud_certificate_metadata.setter
|
|
186
|
-
def cloud_certificate_metadata(self, value: Optional[pulumi.Input[Mapping[str, pulumi.Input[
|
|
185
|
+
def cloud_certificate_metadata(self, value: Optional[pulumi.Input[Mapping[str, pulumi.Input[_builtins.str]]]]):
|
|
187
186
|
pulumi.set(self, "cloud_certificate_metadata", value)
|
|
188
187
|
|
|
189
|
-
@property
|
|
188
|
+
@_builtins.property
|
|
190
189
|
@pulumi.getter(name="cloudCertificateName")
|
|
191
|
-
def cloud_certificate_name(self) -> Optional[pulumi.Input[
|
|
190
|
+
def cloud_certificate_name(self) -> Optional[pulumi.Input[_builtins.str]]:
|
|
192
191
|
"""
|
|
193
192
|
Name for the provisioned certificate in the keystore. If the name already exists, the provisioning will replace the previous certificate with the one from `certificate_id`. Only valid for AKV and GCM keystores.
|
|
194
193
|
"""
|
|
195
194
|
return pulumi.get(self, "cloud_certificate_name")
|
|
196
195
|
|
|
197
196
|
@cloud_certificate_name.setter
|
|
198
|
-
def cloud_certificate_name(self, value: Optional[pulumi.Input[
|
|
197
|
+
def cloud_certificate_name(self, value: Optional[pulumi.Input[_builtins.str]]):
|
|
199
198
|
pulumi.set(self, "cloud_certificate_name", value)
|
|
200
199
|
|
|
201
|
-
@property
|
|
200
|
+
@_builtins.property
|
|
202
201
|
@pulumi.getter(name="cloudKeystoreId")
|
|
203
|
-
def cloud_keystore_id(self) -> Optional[pulumi.Input[
|
|
202
|
+
def cloud_keystore_id(self) -> Optional[pulumi.Input[_builtins.str]]:
|
|
204
203
|
"""
|
|
205
204
|
ID of the cloud keystore where the certificate will be provisioned.
|
|
206
205
|
"""
|
|
207
206
|
return pulumi.get(self, "cloud_keystore_id")
|
|
208
207
|
|
|
209
208
|
@cloud_keystore_id.setter
|
|
210
|
-
def cloud_keystore_id(self, value: Optional[pulumi.Input[
|
|
209
|
+
def cloud_keystore_id(self, value: Optional[pulumi.Input[_builtins.str]]):
|
|
211
210
|
pulumi.set(self, "cloud_keystore_id", value)
|
|
212
211
|
|
|
213
|
-
@property
|
|
212
|
+
@_builtins.property
|
|
214
213
|
@pulumi.getter(name="gcmCertScope")
|
|
215
|
-
def gcm_cert_scope(self) -> Optional[pulumi.Input[
|
|
214
|
+
def gcm_cert_scope(self) -> Optional[pulumi.Input[_builtins.str]]:
|
|
216
215
|
"""
|
|
217
216
|
The GCM certificate scope of the certificate. Only valid for GCM keystores. Supported values from GCM API documentation: DEFAULT, EDGE_CACHE, ALL_REGIONS.
|
|
218
217
|
"""
|
|
219
218
|
return pulumi.get(self, "gcm_cert_scope")
|
|
220
219
|
|
|
221
220
|
@gcm_cert_scope.setter
|
|
222
|
-
def gcm_cert_scope(self, value: Optional[pulumi.Input[
|
|
221
|
+
def gcm_cert_scope(self, value: Optional[pulumi.Input[_builtins.str]]):
|
|
223
222
|
pulumi.set(self, "gcm_cert_scope", value)
|
|
224
223
|
|
|
225
224
|
|
|
@@ -229,11 +228,11 @@ class CloudKeystoreInstallation(pulumi.CustomResource):
|
|
|
229
228
|
def __init__(__self__,
|
|
230
229
|
resource_name: str,
|
|
231
230
|
opts: Optional[pulumi.ResourceOptions] = None,
|
|
232
|
-
arn: Optional[pulumi.Input[
|
|
233
|
-
certificate_id: Optional[pulumi.Input[
|
|
234
|
-
cloud_certificate_name: Optional[pulumi.Input[
|
|
235
|
-
cloud_keystore_id: Optional[pulumi.Input[
|
|
236
|
-
gcm_cert_scope: Optional[pulumi.Input[
|
|
231
|
+
arn: Optional[pulumi.Input[_builtins.str]] = None,
|
|
232
|
+
certificate_id: Optional[pulumi.Input[_builtins.str]] = None,
|
|
233
|
+
cloud_certificate_name: Optional[pulumi.Input[_builtins.str]] = None,
|
|
234
|
+
cloud_keystore_id: Optional[pulumi.Input[_builtins.str]] = None,
|
|
235
|
+
gcm_cert_scope: Optional[pulumi.Input[_builtins.str]] = None,
|
|
237
236
|
__props__=None):
|
|
238
237
|
"""
|
|
239
238
|
Provisions a certificate from Venafi Control Plane's inventory to any of the supported Cloud Providers: Amazon
|
|
@@ -270,11 +269,11 @@ class CloudKeystoreInstallation(pulumi.CustomResource):
|
|
|
270
269
|
|
|
271
270
|
:param str resource_name: The name of the resource.
|
|
272
271
|
:param pulumi.ResourceOptions opts: Options for the resource.
|
|
273
|
-
:param pulumi.Input[
|
|
274
|
-
:param pulumi.Input[
|
|
275
|
-
:param pulumi.Input[
|
|
276
|
-
:param pulumi.Input[
|
|
277
|
-
:param pulumi.Input[
|
|
272
|
+
:param pulumi.Input[_builtins.str] arn: ARN of the AWS certificate. Use it to provision the VCP certificate to an existing ACM certificate, instead of a new one. Only valid for ACM keystores.
|
|
273
|
+
:param pulumi.Input[_builtins.str] certificate_id: ID of the certificate to be provisioned to the given `keystore_id`.
|
|
274
|
+
:param pulumi.Input[_builtins.str] cloud_certificate_name: Name for the provisioned certificate in the keystore. If the name already exists, the provisioning will replace the previous certificate with the one from `certificate_id`. Only valid for AKV and GCM keystores.
|
|
275
|
+
:param pulumi.Input[_builtins.str] cloud_keystore_id: ID of the cloud keystore where the certificate will be provisioned.
|
|
276
|
+
:param pulumi.Input[_builtins.str] gcm_cert_scope: The GCM certificate scope of the certificate. Only valid for GCM keystores. Supported values from GCM API documentation: DEFAULT, EDGE_CACHE, ALL_REGIONS.
|
|
278
277
|
"""
|
|
279
278
|
...
|
|
280
279
|
@overload
|
|
@@ -330,11 +329,11 @@ class CloudKeystoreInstallation(pulumi.CustomResource):
|
|
|
330
329
|
def _internal_init(__self__,
|
|
331
330
|
resource_name: str,
|
|
332
331
|
opts: Optional[pulumi.ResourceOptions] = None,
|
|
333
|
-
arn: Optional[pulumi.Input[
|
|
334
|
-
certificate_id: Optional[pulumi.Input[
|
|
335
|
-
cloud_certificate_name: Optional[pulumi.Input[
|
|
336
|
-
cloud_keystore_id: Optional[pulumi.Input[
|
|
337
|
-
gcm_cert_scope: Optional[pulumi.Input[
|
|
332
|
+
arn: Optional[pulumi.Input[_builtins.str]] = None,
|
|
333
|
+
certificate_id: Optional[pulumi.Input[_builtins.str]] = None,
|
|
334
|
+
cloud_certificate_name: Optional[pulumi.Input[_builtins.str]] = None,
|
|
335
|
+
cloud_keystore_id: Optional[pulumi.Input[_builtins.str]] = None,
|
|
336
|
+
gcm_cert_scope: Optional[pulumi.Input[_builtins.str]] = None,
|
|
338
337
|
__props__=None):
|
|
339
338
|
opts = pulumi.ResourceOptions.merge(_utilities.get_resource_opts_defaults(), opts)
|
|
340
339
|
if not isinstance(opts, pulumi.ResourceOptions):
|
|
@@ -365,13 +364,13 @@ class CloudKeystoreInstallation(pulumi.CustomResource):
|
|
|
365
364
|
def get(resource_name: str,
|
|
366
365
|
id: pulumi.Input[str],
|
|
367
366
|
opts: Optional[pulumi.ResourceOptions] = None,
|
|
368
|
-
arn: Optional[pulumi.Input[
|
|
369
|
-
certificate_id: Optional[pulumi.Input[
|
|
370
|
-
cloud_certificate_id: Optional[pulumi.Input[
|
|
371
|
-
cloud_certificate_metadata: Optional[pulumi.Input[Mapping[str, pulumi.Input[
|
|
372
|
-
cloud_certificate_name: Optional[pulumi.Input[
|
|
373
|
-
cloud_keystore_id: Optional[pulumi.Input[
|
|
374
|
-
gcm_cert_scope: Optional[pulumi.Input[
|
|
367
|
+
arn: Optional[pulumi.Input[_builtins.str]] = None,
|
|
368
|
+
certificate_id: Optional[pulumi.Input[_builtins.str]] = None,
|
|
369
|
+
cloud_certificate_id: Optional[pulumi.Input[_builtins.str]] = None,
|
|
370
|
+
cloud_certificate_metadata: Optional[pulumi.Input[Mapping[str, pulumi.Input[_builtins.str]]]] = None,
|
|
371
|
+
cloud_certificate_name: Optional[pulumi.Input[_builtins.str]] = None,
|
|
372
|
+
cloud_keystore_id: Optional[pulumi.Input[_builtins.str]] = None,
|
|
373
|
+
gcm_cert_scope: Optional[pulumi.Input[_builtins.str]] = None) -> 'CloudKeystoreInstallation':
|
|
375
374
|
"""
|
|
376
375
|
Get an existing CloudKeystoreInstallation resource's state with the given name, id, and optional extra
|
|
377
376
|
properties used to qualify the lookup.
|
|
@@ -379,13 +378,13 @@ class CloudKeystoreInstallation(pulumi.CustomResource):
|
|
|
379
378
|
:param str resource_name: The unique name of the resulting resource.
|
|
380
379
|
:param pulumi.Input[str] id: The unique provider ID of the resource to lookup.
|
|
381
380
|
:param pulumi.ResourceOptions opts: Options for the resource.
|
|
382
|
-
:param pulumi.Input[
|
|
383
|
-
:param pulumi.Input[
|
|
384
|
-
:param pulumi.Input[
|
|
385
|
-
:param pulumi.Input[Mapping[str, pulumi.Input[
|
|
386
|
-
:param pulumi.Input[
|
|
387
|
-
:param pulumi.Input[
|
|
388
|
-
:param pulumi.Input[
|
|
381
|
+
:param pulumi.Input[_builtins.str] arn: ARN of the AWS certificate. Use it to provision the VCP certificate to an existing ACM certificate, instead of a new one. Only valid for ACM keystores.
|
|
382
|
+
:param pulumi.Input[_builtins.str] certificate_id: ID of the certificate to be provisioned to the given `keystore_id`.
|
|
383
|
+
:param pulumi.Input[_builtins.str] cloud_certificate_id: The ID of the provisioned certificate within the Cloud Keystore
|
|
384
|
+
:param pulumi.Input[Mapping[str, pulumi.Input[_builtins.str]]] cloud_certificate_metadata: Metadata of the provisioned certificate from the Cloud Keystore
|
|
385
|
+
:param pulumi.Input[_builtins.str] cloud_certificate_name: Name for the provisioned certificate in the keystore. If the name already exists, the provisioning will replace the previous certificate with the one from `certificate_id`. Only valid for AKV and GCM keystores.
|
|
386
|
+
:param pulumi.Input[_builtins.str] cloud_keystore_id: ID of the cloud keystore where the certificate will be provisioned.
|
|
387
|
+
:param pulumi.Input[_builtins.str] gcm_cert_scope: The GCM certificate scope of the certificate. Only valid for GCM keystores. Supported values from GCM API documentation: DEFAULT, EDGE_CACHE, ALL_REGIONS.
|
|
389
388
|
"""
|
|
390
389
|
opts = pulumi.ResourceOptions.merge(opts, pulumi.ResourceOptions(id=id))
|
|
391
390
|
|
|
@@ -400,57 +399,57 @@ class CloudKeystoreInstallation(pulumi.CustomResource):
|
|
|
400
399
|
__props__.__dict__["gcm_cert_scope"] = gcm_cert_scope
|
|
401
400
|
return CloudKeystoreInstallation(resource_name, opts=opts, __props__=__props__)
|
|
402
401
|
|
|
403
|
-
@property
|
|
402
|
+
@_builtins.property
|
|
404
403
|
@pulumi.getter
|
|
405
|
-
def arn(self) -> pulumi.Output[Optional[
|
|
404
|
+
def arn(self) -> pulumi.Output[Optional[_builtins.str]]:
|
|
406
405
|
"""
|
|
407
406
|
ARN of the AWS certificate. Use it to provision the VCP certificate to an existing ACM certificate, instead of a new one. Only valid for ACM keystores.
|
|
408
407
|
"""
|
|
409
408
|
return pulumi.get(self, "arn")
|
|
410
409
|
|
|
411
|
-
@property
|
|
410
|
+
@_builtins.property
|
|
412
411
|
@pulumi.getter(name="certificateId")
|
|
413
|
-
def certificate_id(self) -> pulumi.Output[
|
|
412
|
+
def certificate_id(self) -> pulumi.Output[_builtins.str]:
|
|
414
413
|
"""
|
|
415
414
|
ID of the certificate to be provisioned to the given `keystore_id`.
|
|
416
415
|
"""
|
|
417
416
|
return pulumi.get(self, "certificate_id")
|
|
418
417
|
|
|
419
|
-
@property
|
|
418
|
+
@_builtins.property
|
|
420
419
|
@pulumi.getter(name="cloudCertificateId")
|
|
421
|
-
def cloud_certificate_id(self) -> pulumi.Output[
|
|
420
|
+
def cloud_certificate_id(self) -> pulumi.Output[_builtins.str]:
|
|
422
421
|
"""
|
|
423
422
|
The ID of the provisioned certificate within the Cloud Keystore
|
|
424
423
|
"""
|
|
425
424
|
return pulumi.get(self, "cloud_certificate_id")
|
|
426
425
|
|
|
427
|
-
@property
|
|
426
|
+
@_builtins.property
|
|
428
427
|
@pulumi.getter(name="cloudCertificateMetadata")
|
|
429
|
-
def cloud_certificate_metadata(self) -> pulumi.Output[Mapping[str,
|
|
428
|
+
def cloud_certificate_metadata(self) -> pulumi.Output[Mapping[str, _builtins.str]]:
|
|
430
429
|
"""
|
|
431
430
|
Metadata of the provisioned certificate from the Cloud Keystore
|
|
432
431
|
"""
|
|
433
432
|
return pulumi.get(self, "cloud_certificate_metadata")
|
|
434
433
|
|
|
435
|
-
@property
|
|
434
|
+
@_builtins.property
|
|
436
435
|
@pulumi.getter(name="cloudCertificateName")
|
|
437
|
-
def cloud_certificate_name(self) -> pulumi.Output[Optional[
|
|
436
|
+
def cloud_certificate_name(self) -> pulumi.Output[Optional[_builtins.str]]:
|
|
438
437
|
"""
|
|
439
438
|
Name for the provisioned certificate in the keystore. If the name already exists, the provisioning will replace the previous certificate with the one from `certificate_id`. Only valid for AKV and GCM keystores.
|
|
440
439
|
"""
|
|
441
440
|
return pulumi.get(self, "cloud_certificate_name")
|
|
442
441
|
|
|
443
|
-
@property
|
|
442
|
+
@_builtins.property
|
|
444
443
|
@pulumi.getter(name="cloudKeystoreId")
|
|
445
|
-
def cloud_keystore_id(self) -> pulumi.Output[
|
|
444
|
+
def cloud_keystore_id(self) -> pulumi.Output[_builtins.str]:
|
|
446
445
|
"""
|
|
447
446
|
ID of the cloud keystore where the certificate will be provisioned.
|
|
448
447
|
"""
|
|
449
448
|
return pulumi.get(self, "cloud_keystore_id")
|
|
450
449
|
|
|
451
|
-
@property
|
|
450
|
+
@_builtins.property
|
|
452
451
|
@pulumi.getter(name="gcmCertScope")
|
|
453
|
-
def gcm_cert_scope(self) -> pulumi.Output[Optional[
|
|
452
|
+
def gcm_cert_scope(self) -> pulumi.Output[Optional[_builtins.str]]:
|
|
454
453
|
"""
|
|
455
454
|
The GCM certificate scope of the certificate. Only valid for GCM keystores. Supported values from GCM API documentation: DEFAULT, EDGE_CACHE, ALL_REGIONS.
|
|
456
455
|
"""
|
pulumi_venafi/config/__init__.py
CHANGED
|
@@ -2,8 +2,7 @@
|
|
|
2
2
|
# *** WARNING: this file was generated by pulumi-language-python. ***
|
|
3
3
|
# *** Do not edit by hand unless you're certain you know what you are doing! ***
|
|
4
4
|
|
|
5
|
-
import builtins
|
|
6
|
-
import copy
|
|
5
|
+
import builtins as _builtins
|
|
7
6
|
import warnings
|
|
8
7
|
import sys
|
|
9
8
|
import pulumi
|
pulumi_venafi/config/vars.py
CHANGED
|
@@ -2,8 +2,7 @@
|
|
|
2
2
|
# *** WARNING: this file was generated by pulumi-language-python. ***
|
|
3
3
|
# *** Do not edit by hand unless you're certain you know what you are doing! ***
|
|
4
4
|
|
|
5
|
-
import builtins
|
|
6
|
-
import copy
|
|
5
|
+
import builtins as _builtins
|
|
7
6
|
import warnings
|
|
8
7
|
import sys
|
|
9
8
|
import pulumi
|
|
@@ -21,28 +20,28 @@ __config__ = pulumi.Config('venafi')
|
|
|
21
20
|
|
|
22
21
|
|
|
23
22
|
class _ExportableConfig(types.ModuleType):
|
|
24
|
-
@property
|
|
23
|
+
@_builtins.property
|
|
25
24
|
def access_token(self) -> Optional[str]:
|
|
26
25
|
"""
|
|
27
26
|
Access token for Venafi TLSPDC, user should use this for authentication
|
|
28
27
|
"""
|
|
29
28
|
return __config__.get('accessToken')
|
|
30
29
|
|
|
31
|
-
@property
|
|
30
|
+
@_builtins.property
|
|
32
31
|
def api_key(self) -> Optional[str]:
|
|
33
32
|
"""
|
|
34
33
|
API key for Venafi Control Plane. Example: 142231b7-cvb0-412e-886b-6aeght0bc93d
|
|
35
34
|
"""
|
|
36
35
|
return __config__.get('apiKey')
|
|
37
36
|
|
|
38
|
-
@property
|
|
37
|
+
@_builtins.property
|
|
39
38
|
def client_id(self) -> Optional[str]:
|
|
40
39
|
"""
|
|
41
40
|
application that will be using the token
|
|
42
41
|
"""
|
|
43
42
|
return __config__.get('clientId')
|
|
44
43
|
|
|
45
|
-
@property
|
|
44
|
+
@_builtins.property
|
|
46
45
|
def dev_mode(self) -> Optional[bool]:
|
|
47
46
|
"""
|
|
48
47
|
When set to true, the resulting certificate will be issued by an ephemeral, no trust CA rather than enrolling using
|
|
@@ -50,14 +49,14 @@ class _ExportableConfig(types.ModuleType):
|
|
|
50
49
|
"""
|
|
51
50
|
return __config__.get_bool('devMode')
|
|
52
51
|
|
|
53
|
-
@property
|
|
52
|
+
@_builtins.property
|
|
54
53
|
def external_jwt(self) -> Optional[str]:
|
|
55
54
|
"""
|
|
56
55
|
JWT of the identity provider associated to the Venafi Control Plane service account that is granting the access token
|
|
57
56
|
"""
|
|
58
57
|
return __config__.get('externalJwt')
|
|
59
58
|
|
|
60
|
-
@property
|
|
59
|
+
@_builtins.property
|
|
61
60
|
def p12_cert_filename(self) -> Optional[str]:
|
|
62
61
|
"""
|
|
63
62
|
Filename of PKCS#12 keystore containing a client certificate, private key, and chain certificates to authenticate to
|
|
@@ -65,39 +64,39 @@ class _ExportableConfig(types.ModuleType):
|
|
|
65
64
|
"""
|
|
66
65
|
return __config__.get('p12CertFilename')
|
|
67
66
|
|
|
68
|
-
@property
|
|
67
|
+
@_builtins.property
|
|
69
68
|
def p12_cert_password(self) -> Optional[str]:
|
|
70
69
|
"""
|
|
71
70
|
Password for the PKCS#12 keystore declared in p12_cert
|
|
72
71
|
"""
|
|
73
72
|
return __config__.get('p12CertPassword')
|
|
74
73
|
|
|
75
|
-
@property
|
|
74
|
+
@_builtins.property
|
|
76
75
|
def skip_retirement(self) -> Optional[bool]:
|
|
77
76
|
return __config__.get_bool('skipRetirement')
|
|
78
77
|
|
|
79
|
-
@property
|
|
78
|
+
@_builtins.property
|
|
80
79
|
def token_url(self) -> Optional[str]:
|
|
81
80
|
"""
|
|
82
81
|
Endpoint URL to request new Venafi Control Plane access tokens
|
|
83
82
|
"""
|
|
84
83
|
return __config__.get('tokenUrl')
|
|
85
84
|
|
|
86
|
-
@property
|
|
85
|
+
@_builtins.property
|
|
87
86
|
def tpp_password(self) -> Optional[str]:
|
|
88
87
|
"""
|
|
89
88
|
Password for WebSDK user. Example: password
|
|
90
89
|
"""
|
|
91
90
|
return __config__.get('tppPassword')
|
|
92
91
|
|
|
93
|
-
@property
|
|
92
|
+
@_builtins.property
|
|
94
93
|
def tpp_username(self) -> Optional[str]:
|
|
95
94
|
"""
|
|
96
95
|
WebSDK user for Venafi TLSPDC. Example: admin
|
|
97
96
|
"""
|
|
98
97
|
return __config__.get('tppUsername')
|
|
99
98
|
|
|
100
|
-
@property
|
|
99
|
+
@_builtins.property
|
|
101
100
|
def trust_bundle(self) -> Optional[str]:
|
|
102
101
|
"""
|
|
103
102
|
Use to specify a PEM-formatted file that contains certificates to be trust anchors for all communications with the
|
|
@@ -105,14 +104,14 @@ class _ExportableConfig(types.ModuleType):
|
|
|
105
104
|
"""
|
|
106
105
|
return __config__.get('trustBundle')
|
|
107
106
|
|
|
108
|
-
@property
|
|
107
|
+
@_builtins.property
|
|
109
108
|
def url(self) -> Optional[str]:
|
|
110
109
|
"""
|
|
111
110
|
The Venafi Platform URL. Example: https://tpp.venafi.example/vedsdk
|
|
112
111
|
"""
|
|
113
112
|
return __config__.get('url')
|
|
114
113
|
|
|
115
|
-
@property
|
|
114
|
+
@_builtins.property
|
|
116
115
|
def zone(self) -> Optional[str]:
|
|
117
116
|
"""
|
|
118
117
|
DN of the Venafi TLSPDC policy folder or name of the Venafi as a Service application plus issuing template alias.
|