pulumi-venafi 1.12.0a1753339650__py3-none-any.whl → 1.12.0a1753398192__py3-none-any.whl
This diff represents the content of publicly available package versions that have been released to one of the supported registries. The information contained in this diff is provided for informational purposes only and reflects changes between package versions as they appear in their respective public registries.
Potentially problematic release.
This version of pulumi-venafi might be problematic. Click here for more details.
- pulumi_venafi/__init__.py +1 -1
- pulumi_venafi/certificate.py +445 -446
- pulumi_venafi/cloud_keystore_installation.py +104 -105
- pulumi_venafi/config/__init__.py +1 -1
- pulumi_venafi/config/__init__.pyi +1 -2
- pulumi_venafi/config/vars.py +15 -16
- pulumi_venafi/get_cloud_keystore.py +19 -20
- pulumi_venafi/get_cloud_provider.py +17 -18
- pulumi_venafi/policy.py +35 -36
- pulumi_venafi/provider.py +136 -137
- pulumi_venafi/pulumi-plugin.json +1 -1
- pulumi_venafi/ssh_certificate.py +345 -346
- pulumi_venafi/ssh_config.py +36 -37
- {pulumi_venafi-1.12.0a1753339650.dist-info → pulumi_venafi-1.12.0a1753398192.dist-info}/METADATA +1 -1
- pulumi_venafi-1.12.0a1753398192.dist-info/RECORD +19 -0
- pulumi_venafi-1.12.0a1753339650.dist-info/RECORD +0 -19
- {pulumi_venafi-1.12.0a1753339650.dist-info → pulumi_venafi-1.12.0a1753398192.dist-info}/WHEEL +0 -0
- {pulumi_venafi-1.12.0a1753339650.dist-info → pulumi_venafi-1.12.0a1753398192.dist-info}/top_level.txt +0 -0
pulumi_venafi/ssh_certificate.py
CHANGED
|
@@ -2,8 +2,7 @@
|
|
|
2
2
|
# *** WARNING: this file was generated by pulumi-language-python. ***
|
|
3
3
|
# *** Do not edit by hand unless you're certain you know what you are doing! ***
|
|
4
4
|
|
|
5
|
-
import builtins
|
|
6
|
-
import copy
|
|
5
|
+
import builtins as _builtins
|
|
7
6
|
import warnings
|
|
8
7
|
import sys
|
|
9
8
|
import pulumi
|
|
@@ -20,48 +19,48 @@ __all__ = ['SshCertificateArgs', 'SshCertificate']
|
|
|
20
19
|
@pulumi.input_type
|
|
21
20
|
class SshCertificateArgs:
|
|
22
21
|
def __init__(__self__, *,
|
|
23
|
-
key_id: pulumi.Input[
|
|
24
|
-
template: pulumi.Input[
|
|
25
|
-
destination_addresses: Optional[pulumi.Input[Sequence[pulumi.Input[
|
|
26
|
-
extensions: Optional[pulumi.Input[Sequence[pulumi.Input[
|
|
27
|
-
folder: Optional[pulumi.Input[
|
|
28
|
-
force_command: Optional[pulumi.Input[
|
|
29
|
-
key_passphrase: Optional[pulumi.Input[
|
|
30
|
-
key_size: Optional[pulumi.Input[
|
|
31
|
-
object_name: Optional[pulumi.Input[
|
|
32
|
-
principal: Optional[pulumi.Input[Sequence[pulumi.Input[
|
|
33
|
-
principals: Optional[pulumi.Input[Sequence[pulumi.Input[
|
|
34
|
-
public_key: Optional[pulumi.Input[
|
|
35
|
-
public_key_method: Optional[pulumi.Input[
|
|
36
|
-
source_addresses: Optional[pulumi.Input[Sequence[pulumi.Input[
|
|
37
|
-
valid_hours: Optional[pulumi.Input[
|
|
38
|
-
windows: Optional[pulumi.Input[
|
|
22
|
+
key_id: pulumi.Input[_builtins.str],
|
|
23
|
+
template: pulumi.Input[_builtins.str],
|
|
24
|
+
destination_addresses: Optional[pulumi.Input[Sequence[pulumi.Input[_builtins.str]]]] = None,
|
|
25
|
+
extensions: Optional[pulumi.Input[Sequence[pulumi.Input[_builtins.str]]]] = None,
|
|
26
|
+
folder: Optional[pulumi.Input[_builtins.str]] = None,
|
|
27
|
+
force_command: Optional[pulumi.Input[_builtins.str]] = None,
|
|
28
|
+
key_passphrase: Optional[pulumi.Input[_builtins.str]] = None,
|
|
29
|
+
key_size: Optional[pulumi.Input[_builtins.int]] = None,
|
|
30
|
+
object_name: Optional[pulumi.Input[_builtins.str]] = None,
|
|
31
|
+
principal: Optional[pulumi.Input[Sequence[pulumi.Input[_builtins.str]]]] = None,
|
|
32
|
+
principals: Optional[pulumi.Input[Sequence[pulumi.Input[_builtins.str]]]] = None,
|
|
33
|
+
public_key: Optional[pulumi.Input[_builtins.str]] = None,
|
|
34
|
+
public_key_method: Optional[pulumi.Input[_builtins.str]] = None,
|
|
35
|
+
source_addresses: Optional[pulumi.Input[Sequence[pulumi.Input[_builtins.str]]]] = None,
|
|
36
|
+
valid_hours: Optional[pulumi.Input[_builtins.int]] = None,
|
|
37
|
+
windows: Optional[pulumi.Input[_builtins.bool]] = None):
|
|
39
38
|
"""
|
|
40
39
|
The set of arguments for constructing a SshCertificate resource.
|
|
41
|
-
:param pulumi.Input[
|
|
42
|
-
:param pulumi.Input[
|
|
43
|
-
:param pulumi.Input[Sequence[pulumi.Input[
|
|
40
|
+
:param pulumi.Input[_builtins.str] key_id: The identifier of the requested SSH certificate.
|
|
41
|
+
:param pulumi.Input[_builtins.str] template: The SSH certificate issuing template.
|
|
42
|
+
:param pulumi.Input[Sequence[pulumi.Input[_builtins.str]]] destination_addresses: A list of one or more valid IP or CIDR destination hosts where the
|
|
44
43
|
certificate will authenticate.
|
|
45
|
-
:param pulumi.Input[Sequence[pulumi.Input[
|
|
44
|
+
:param pulumi.Input[Sequence[pulumi.Input[_builtins.str]]] extensions: A list of key-value pairs that contain certificate extensions from the CA
|
|
46
45
|
template for client certificates. Allowed values (case-sensitive): `permit-X11-forwarding`, `permit-agent-forwarding`,
|
|
47
46
|
`permit-port-forwarding`, `permit-pty`, `permit-user-rc`.
|
|
48
|
-
:param pulumi.Input[
|
|
49
|
-
:param pulumi.Input[
|
|
50
|
-
:param pulumi.Input[
|
|
51
|
-
:param pulumi.Input[
|
|
52
|
-
:param pulumi.Input[
|
|
47
|
+
:param pulumi.Input[_builtins.str] folder: The DN of the policy folder where the SSH certificate object will be created.
|
|
48
|
+
:param pulumi.Input[_builtins.str] force_command: A command to run after successful login.
|
|
49
|
+
:param pulumi.Input[_builtins.str] key_passphrase: Passphrase for encrypting the private key.
|
|
50
|
+
:param pulumi.Input[_builtins.int] key_size: Number of bits to use when creating a key pair. (e.g. `3072`).
|
|
51
|
+
:param pulumi.Input[_builtins.str] object_name: The friendly name of the SSH certificate object. When not specified the `key_id`
|
|
53
52
|
is used for the friendly name. If the object already exists the old certificate is archived and the CA issues a new
|
|
54
53
|
certificate.
|
|
55
|
-
:param pulumi.Input[Sequence[pulumi.Input[
|
|
54
|
+
:param pulumi.Input[Sequence[pulumi.Input[_builtins.str]]] principal: [DEPRECATED] - (Optional, set of strings) Use "principals" instead. A list of usernames for whom the
|
|
56
55
|
requested certificate will be valid.
|
|
57
|
-
:param pulumi.Input[Sequence[pulumi.Input[
|
|
58
|
-
:param pulumi.Input[
|
|
59
|
-
:param pulumi.Input[
|
|
56
|
+
:param pulumi.Input[Sequence[pulumi.Input[_builtins.str]]] principals: A list of usernames for whom the requested certificate will be valid.
|
|
57
|
+
:param pulumi.Input[_builtins.str] public_key: The OpenSSH formatted public key that will be used to generate the SSH certificate.
|
|
58
|
+
:param pulumi.Input[_builtins.str] public_key_method: Specifies whether the public key will be `local` (default), `file` or
|
|
60
59
|
`service` generated.
|
|
61
|
-
:param pulumi.Input[Sequence[pulumi.Input[
|
|
60
|
+
:param pulumi.Input[Sequence[pulumi.Input[_builtins.str]]] source_addresses: A list of one or more valid IP or CIDR addresses that can use the SSH
|
|
62
61
|
certificate.
|
|
63
|
-
:param pulumi.Input[
|
|
64
|
-
:param pulumi.Input[
|
|
62
|
+
:param pulumi.Input[_builtins.int] valid_hours: Desired number of hours for which the certificate will be valid.
|
|
63
|
+
:param pulumi.Input[_builtins.bool] windows: Specifies whether the private key will use Windows/DOS style line breaks.
|
|
65
64
|
"""
|
|
66
65
|
pulumi.set(__self__, "key_id", key_id)
|
|
67
66
|
pulumi.set(__self__, "template", template)
|
|
@@ -97,33 +96,33 @@ class SshCertificateArgs:
|
|
|
97
96
|
if windows is not None:
|
|
98
97
|
pulumi.set(__self__, "windows", windows)
|
|
99
98
|
|
|
100
|
-
@property
|
|
99
|
+
@_builtins.property
|
|
101
100
|
@pulumi.getter(name="keyId")
|
|
102
|
-
def key_id(self) -> pulumi.Input[
|
|
101
|
+
def key_id(self) -> pulumi.Input[_builtins.str]:
|
|
103
102
|
"""
|
|
104
103
|
The identifier of the requested SSH certificate.
|
|
105
104
|
"""
|
|
106
105
|
return pulumi.get(self, "key_id")
|
|
107
106
|
|
|
108
107
|
@key_id.setter
|
|
109
|
-
def key_id(self, value: pulumi.Input[
|
|
108
|
+
def key_id(self, value: pulumi.Input[_builtins.str]):
|
|
110
109
|
pulumi.set(self, "key_id", value)
|
|
111
110
|
|
|
112
|
-
@property
|
|
111
|
+
@_builtins.property
|
|
113
112
|
@pulumi.getter
|
|
114
|
-
def template(self) -> pulumi.Input[
|
|
113
|
+
def template(self) -> pulumi.Input[_builtins.str]:
|
|
115
114
|
"""
|
|
116
115
|
The SSH certificate issuing template.
|
|
117
116
|
"""
|
|
118
117
|
return pulumi.get(self, "template")
|
|
119
118
|
|
|
120
119
|
@template.setter
|
|
121
|
-
def template(self, value: pulumi.Input[
|
|
120
|
+
def template(self, value: pulumi.Input[_builtins.str]):
|
|
122
121
|
pulumi.set(self, "template", value)
|
|
123
122
|
|
|
124
|
-
@property
|
|
123
|
+
@_builtins.property
|
|
125
124
|
@pulumi.getter(name="destinationAddresses")
|
|
126
|
-
def destination_addresses(self) -> Optional[pulumi.Input[Sequence[pulumi.Input[
|
|
125
|
+
def destination_addresses(self) -> Optional[pulumi.Input[Sequence[pulumi.Input[_builtins.str]]]]:
|
|
127
126
|
"""
|
|
128
127
|
A list of one or more valid IP or CIDR destination hosts where the
|
|
129
128
|
certificate will authenticate.
|
|
@@ -131,12 +130,12 @@ class SshCertificateArgs:
|
|
|
131
130
|
return pulumi.get(self, "destination_addresses")
|
|
132
131
|
|
|
133
132
|
@destination_addresses.setter
|
|
134
|
-
def destination_addresses(self, value: Optional[pulumi.Input[Sequence[pulumi.Input[
|
|
133
|
+
def destination_addresses(self, value: Optional[pulumi.Input[Sequence[pulumi.Input[_builtins.str]]]]):
|
|
135
134
|
pulumi.set(self, "destination_addresses", value)
|
|
136
135
|
|
|
137
|
-
@property
|
|
136
|
+
@_builtins.property
|
|
138
137
|
@pulumi.getter
|
|
139
|
-
def extensions(self) -> Optional[pulumi.Input[Sequence[pulumi.Input[
|
|
138
|
+
def extensions(self) -> Optional[pulumi.Input[Sequence[pulumi.Input[_builtins.str]]]]:
|
|
140
139
|
"""
|
|
141
140
|
A list of key-value pairs that contain certificate extensions from the CA
|
|
142
141
|
template for client certificates. Allowed values (case-sensitive): `permit-X11-forwarding`, `permit-agent-forwarding`,
|
|
@@ -145,60 +144,60 @@ class SshCertificateArgs:
|
|
|
145
144
|
return pulumi.get(self, "extensions")
|
|
146
145
|
|
|
147
146
|
@extensions.setter
|
|
148
|
-
def extensions(self, value: Optional[pulumi.Input[Sequence[pulumi.Input[
|
|
147
|
+
def extensions(self, value: Optional[pulumi.Input[Sequence[pulumi.Input[_builtins.str]]]]):
|
|
149
148
|
pulumi.set(self, "extensions", value)
|
|
150
149
|
|
|
151
|
-
@property
|
|
150
|
+
@_builtins.property
|
|
152
151
|
@pulumi.getter
|
|
153
|
-
def folder(self) -> Optional[pulumi.Input[
|
|
152
|
+
def folder(self) -> Optional[pulumi.Input[_builtins.str]]:
|
|
154
153
|
"""
|
|
155
154
|
The DN of the policy folder where the SSH certificate object will be created.
|
|
156
155
|
"""
|
|
157
156
|
return pulumi.get(self, "folder")
|
|
158
157
|
|
|
159
158
|
@folder.setter
|
|
160
|
-
def folder(self, value: Optional[pulumi.Input[
|
|
159
|
+
def folder(self, value: Optional[pulumi.Input[_builtins.str]]):
|
|
161
160
|
pulumi.set(self, "folder", value)
|
|
162
161
|
|
|
163
|
-
@property
|
|
162
|
+
@_builtins.property
|
|
164
163
|
@pulumi.getter(name="forceCommand")
|
|
165
|
-
def force_command(self) -> Optional[pulumi.Input[
|
|
164
|
+
def force_command(self) -> Optional[pulumi.Input[_builtins.str]]:
|
|
166
165
|
"""
|
|
167
166
|
A command to run after successful login.
|
|
168
167
|
"""
|
|
169
168
|
return pulumi.get(self, "force_command")
|
|
170
169
|
|
|
171
170
|
@force_command.setter
|
|
172
|
-
def force_command(self, value: Optional[pulumi.Input[
|
|
171
|
+
def force_command(self, value: Optional[pulumi.Input[_builtins.str]]):
|
|
173
172
|
pulumi.set(self, "force_command", value)
|
|
174
173
|
|
|
175
|
-
@property
|
|
174
|
+
@_builtins.property
|
|
176
175
|
@pulumi.getter(name="keyPassphrase")
|
|
177
|
-
def key_passphrase(self) -> Optional[pulumi.Input[
|
|
176
|
+
def key_passphrase(self) -> Optional[pulumi.Input[_builtins.str]]:
|
|
178
177
|
"""
|
|
179
178
|
Passphrase for encrypting the private key.
|
|
180
179
|
"""
|
|
181
180
|
return pulumi.get(self, "key_passphrase")
|
|
182
181
|
|
|
183
182
|
@key_passphrase.setter
|
|
184
|
-
def key_passphrase(self, value: Optional[pulumi.Input[
|
|
183
|
+
def key_passphrase(self, value: Optional[pulumi.Input[_builtins.str]]):
|
|
185
184
|
pulumi.set(self, "key_passphrase", value)
|
|
186
185
|
|
|
187
|
-
@property
|
|
186
|
+
@_builtins.property
|
|
188
187
|
@pulumi.getter(name="keySize")
|
|
189
|
-
def key_size(self) -> Optional[pulumi.Input[
|
|
188
|
+
def key_size(self) -> Optional[pulumi.Input[_builtins.int]]:
|
|
190
189
|
"""
|
|
191
190
|
Number of bits to use when creating a key pair. (e.g. `3072`).
|
|
192
191
|
"""
|
|
193
192
|
return pulumi.get(self, "key_size")
|
|
194
193
|
|
|
195
194
|
@key_size.setter
|
|
196
|
-
def key_size(self, value: Optional[pulumi.Input[
|
|
195
|
+
def key_size(self, value: Optional[pulumi.Input[_builtins.int]]):
|
|
197
196
|
pulumi.set(self, "key_size", value)
|
|
198
197
|
|
|
199
|
-
@property
|
|
198
|
+
@_builtins.property
|
|
200
199
|
@pulumi.getter(name="objectName")
|
|
201
|
-
def object_name(self) -> Optional[pulumi.Input[
|
|
200
|
+
def object_name(self) -> Optional[pulumi.Input[_builtins.str]]:
|
|
202
201
|
"""
|
|
203
202
|
The friendly name of the SSH certificate object. When not specified the `key_id`
|
|
204
203
|
is used for the friendly name. If the object already exists the old certificate is archived and the CA issues a new
|
|
@@ -207,13 +206,13 @@ class SshCertificateArgs:
|
|
|
207
206
|
return pulumi.get(self, "object_name")
|
|
208
207
|
|
|
209
208
|
@object_name.setter
|
|
210
|
-
def object_name(self, value: Optional[pulumi.Input[
|
|
209
|
+
def object_name(self, value: Optional[pulumi.Input[_builtins.str]]):
|
|
211
210
|
pulumi.set(self, "object_name", value)
|
|
212
211
|
|
|
213
|
-
@property
|
|
212
|
+
@_builtins.property
|
|
214
213
|
@pulumi.getter
|
|
215
214
|
@_utilities.deprecated("""This will be removed in the future. Use \"principals\" instead""")
|
|
216
|
-
def principal(self) -> Optional[pulumi.Input[Sequence[pulumi.Input[
|
|
215
|
+
def principal(self) -> Optional[pulumi.Input[Sequence[pulumi.Input[_builtins.str]]]]:
|
|
217
216
|
"""
|
|
218
217
|
[DEPRECATED] - (Optional, set of strings) Use "principals" instead. A list of usernames for whom the
|
|
219
218
|
requested certificate will be valid.
|
|
@@ -221,36 +220,36 @@ class SshCertificateArgs:
|
|
|
221
220
|
return pulumi.get(self, "principal")
|
|
222
221
|
|
|
223
222
|
@principal.setter
|
|
224
|
-
def principal(self, value: Optional[pulumi.Input[Sequence[pulumi.Input[
|
|
223
|
+
def principal(self, value: Optional[pulumi.Input[Sequence[pulumi.Input[_builtins.str]]]]):
|
|
225
224
|
pulumi.set(self, "principal", value)
|
|
226
225
|
|
|
227
|
-
@property
|
|
226
|
+
@_builtins.property
|
|
228
227
|
@pulumi.getter
|
|
229
|
-
def principals(self) -> Optional[pulumi.Input[Sequence[pulumi.Input[
|
|
228
|
+
def principals(self) -> Optional[pulumi.Input[Sequence[pulumi.Input[_builtins.str]]]]:
|
|
230
229
|
"""
|
|
231
230
|
A list of usernames for whom the requested certificate will be valid.
|
|
232
231
|
"""
|
|
233
232
|
return pulumi.get(self, "principals")
|
|
234
233
|
|
|
235
234
|
@principals.setter
|
|
236
|
-
def principals(self, value: Optional[pulumi.Input[Sequence[pulumi.Input[
|
|
235
|
+
def principals(self, value: Optional[pulumi.Input[Sequence[pulumi.Input[_builtins.str]]]]):
|
|
237
236
|
pulumi.set(self, "principals", value)
|
|
238
237
|
|
|
239
|
-
@property
|
|
238
|
+
@_builtins.property
|
|
240
239
|
@pulumi.getter(name="publicKey")
|
|
241
|
-
def public_key(self) -> Optional[pulumi.Input[
|
|
240
|
+
def public_key(self) -> Optional[pulumi.Input[_builtins.str]]:
|
|
242
241
|
"""
|
|
243
242
|
The OpenSSH formatted public key that will be used to generate the SSH certificate.
|
|
244
243
|
"""
|
|
245
244
|
return pulumi.get(self, "public_key")
|
|
246
245
|
|
|
247
246
|
@public_key.setter
|
|
248
|
-
def public_key(self, value: Optional[pulumi.Input[
|
|
247
|
+
def public_key(self, value: Optional[pulumi.Input[_builtins.str]]):
|
|
249
248
|
pulumi.set(self, "public_key", value)
|
|
250
249
|
|
|
251
|
-
@property
|
|
250
|
+
@_builtins.property
|
|
252
251
|
@pulumi.getter(name="publicKeyMethod")
|
|
253
|
-
def public_key_method(self) -> Optional[pulumi.Input[
|
|
252
|
+
def public_key_method(self) -> Optional[pulumi.Input[_builtins.str]]:
|
|
254
253
|
"""
|
|
255
254
|
Specifies whether the public key will be `local` (default), `file` or
|
|
256
255
|
`service` generated.
|
|
@@ -258,12 +257,12 @@ class SshCertificateArgs:
|
|
|
258
257
|
return pulumi.get(self, "public_key_method")
|
|
259
258
|
|
|
260
259
|
@public_key_method.setter
|
|
261
|
-
def public_key_method(self, value: Optional[pulumi.Input[
|
|
260
|
+
def public_key_method(self, value: Optional[pulumi.Input[_builtins.str]]):
|
|
262
261
|
pulumi.set(self, "public_key_method", value)
|
|
263
262
|
|
|
264
|
-
@property
|
|
263
|
+
@_builtins.property
|
|
265
264
|
@pulumi.getter(name="sourceAddresses")
|
|
266
|
-
def source_addresses(self) -> Optional[pulumi.Input[Sequence[pulumi.Input[
|
|
265
|
+
def source_addresses(self) -> Optional[pulumi.Input[Sequence[pulumi.Input[_builtins.str]]]]:
|
|
267
266
|
"""
|
|
268
267
|
A list of one or more valid IP or CIDR addresses that can use the SSH
|
|
269
268
|
certificate.
|
|
@@ -271,95 +270,95 @@ class SshCertificateArgs:
|
|
|
271
270
|
return pulumi.get(self, "source_addresses")
|
|
272
271
|
|
|
273
272
|
@source_addresses.setter
|
|
274
|
-
def source_addresses(self, value: Optional[pulumi.Input[Sequence[pulumi.Input[
|
|
273
|
+
def source_addresses(self, value: Optional[pulumi.Input[Sequence[pulumi.Input[_builtins.str]]]]):
|
|
275
274
|
pulumi.set(self, "source_addresses", value)
|
|
276
275
|
|
|
277
|
-
@property
|
|
276
|
+
@_builtins.property
|
|
278
277
|
@pulumi.getter(name="validHours")
|
|
279
|
-
def valid_hours(self) -> Optional[pulumi.Input[
|
|
278
|
+
def valid_hours(self) -> Optional[pulumi.Input[_builtins.int]]:
|
|
280
279
|
"""
|
|
281
280
|
Desired number of hours for which the certificate will be valid.
|
|
282
281
|
"""
|
|
283
282
|
return pulumi.get(self, "valid_hours")
|
|
284
283
|
|
|
285
284
|
@valid_hours.setter
|
|
286
|
-
def valid_hours(self, value: Optional[pulumi.Input[
|
|
285
|
+
def valid_hours(self, value: Optional[pulumi.Input[_builtins.int]]):
|
|
287
286
|
pulumi.set(self, "valid_hours", value)
|
|
288
287
|
|
|
289
|
-
@property
|
|
288
|
+
@_builtins.property
|
|
290
289
|
@pulumi.getter
|
|
291
|
-
def windows(self) -> Optional[pulumi.Input[
|
|
290
|
+
def windows(self) -> Optional[pulumi.Input[_builtins.bool]]:
|
|
292
291
|
"""
|
|
293
292
|
Specifies whether the private key will use Windows/DOS style line breaks.
|
|
294
293
|
"""
|
|
295
294
|
return pulumi.get(self, "windows")
|
|
296
295
|
|
|
297
296
|
@windows.setter
|
|
298
|
-
def windows(self, value: Optional[pulumi.Input[
|
|
297
|
+
def windows(self, value: Optional[pulumi.Input[_builtins.bool]]):
|
|
299
298
|
pulumi.set(self, "windows", value)
|
|
300
299
|
|
|
301
300
|
|
|
302
301
|
@pulumi.input_type
|
|
303
302
|
class _SshCertificateState:
|
|
304
303
|
def __init__(__self__, *,
|
|
305
|
-
certificate: Optional[pulumi.Input[
|
|
306
|
-
certificate_type: Optional[pulumi.Input[
|
|
307
|
-
destination_addresses: Optional[pulumi.Input[Sequence[pulumi.Input[
|
|
308
|
-
extensions: Optional[pulumi.Input[Sequence[pulumi.Input[
|
|
309
|
-
folder: Optional[pulumi.Input[
|
|
310
|
-
force_command: Optional[pulumi.Input[
|
|
311
|
-
key_id: Optional[pulumi.Input[
|
|
312
|
-
key_passphrase: Optional[pulumi.Input[
|
|
313
|
-
key_size: Optional[pulumi.Input[
|
|
314
|
-
object_name: Optional[pulumi.Input[
|
|
315
|
-
principal: Optional[pulumi.Input[Sequence[pulumi.Input[
|
|
316
|
-
principals: Optional[pulumi.Input[Sequence[pulumi.Input[
|
|
317
|
-
private_key: Optional[pulumi.Input[
|
|
318
|
-
public_key: Optional[pulumi.Input[
|
|
319
|
-
public_key_fingerprint: Optional[pulumi.Input[
|
|
320
|
-
public_key_method: Optional[pulumi.Input[
|
|
321
|
-
serial: Optional[pulumi.Input[
|
|
322
|
-
signing_ca: Optional[pulumi.Input[
|
|
323
|
-
source_addresses: Optional[pulumi.Input[Sequence[pulumi.Input[
|
|
324
|
-
template: Optional[pulumi.Input[
|
|
325
|
-
valid_from: Optional[pulumi.Input[
|
|
326
|
-
valid_hours: Optional[pulumi.Input[
|
|
327
|
-
valid_to: Optional[pulumi.Input[
|
|
328
|
-
windows: Optional[pulumi.Input[
|
|
304
|
+
certificate: Optional[pulumi.Input[_builtins.str]] = None,
|
|
305
|
+
certificate_type: Optional[pulumi.Input[_builtins.str]] = None,
|
|
306
|
+
destination_addresses: Optional[pulumi.Input[Sequence[pulumi.Input[_builtins.str]]]] = None,
|
|
307
|
+
extensions: Optional[pulumi.Input[Sequence[pulumi.Input[_builtins.str]]]] = None,
|
|
308
|
+
folder: Optional[pulumi.Input[_builtins.str]] = None,
|
|
309
|
+
force_command: Optional[pulumi.Input[_builtins.str]] = None,
|
|
310
|
+
key_id: Optional[pulumi.Input[_builtins.str]] = None,
|
|
311
|
+
key_passphrase: Optional[pulumi.Input[_builtins.str]] = None,
|
|
312
|
+
key_size: Optional[pulumi.Input[_builtins.int]] = None,
|
|
313
|
+
object_name: Optional[pulumi.Input[_builtins.str]] = None,
|
|
314
|
+
principal: Optional[pulumi.Input[Sequence[pulumi.Input[_builtins.str]]]] = None,
|
|
315
|
+
principals: Optional[pulumi.Input[Sequence[pulumi.Input[_builtins.str]]]] = None,
|
|
316
|
+
private_key: Optional[pulumi.Input[_builtins.str]] = None,
|
|
317
|
+
public_key: Optional[pulumi.Input[_builtins.str]] = None,
|
|
318
|
+
public_key_fingerprint: Optional[pulumi.Input[_builtins.str]] = None,
|
|
319
|
+
public_key_method: Optional[pulumi.Input[_builtins.str]] = None,
|
|
320
|
+
serial: Optional[pulumi.Input[_builtins.str]] = None,
|
|
321
|
+
signing_ca: Optional[pulumi.Input[_builtins.str]] = None,
|
|
322
|
+
source_addresses: Optional[pulumi.Input[Sequence[pulumi.Input[_builtins.str]]]] = None,
|
|
323
|
+
template: Optional[pulumi.Input[_builtins.str]] = None,
|
|
324
|
+
valid_from: Optional[pulumi.Input[_builtins.str]] = None,
|
|
325
|
+
valid_hours: Optional[pulumi.Input[_builtins.int]] = None,
|
|
326
|
+
valid_to: Optional[pulumi.Input[_builtins.str]] = None,
|
|
327
|
+
windows: Optional[pulumi.Input[_builtins.bool]] = None):
|
|
329
328
|
"""
|
|
330
329
|
Input properties used for looking up and filtering SshCertificate resources.
|
|
331
|
-
:param pulumi.Input[
|
|
332
|
-
:param pulumi.Input[
|
|
333
|
-
:param pulumi.Input[Sequence[pulumi.Input[
|
|
330
|
+
:param pulumi.Input[_builtins.str] certificate: The issued SSH certificate.
|
|
331
|
+
:param pulumi.Input[_builtins.str] certificate_type: Indicates whether the SSH certificate is for client or server authentication.
|
|
332
|
+
:param pulumi.Input[Sequence[pulumi.Input[_builtins.str]]] destination_addresses: A list of one or more valid IP or CIDR destination hosts where the
|
|
334
333
|
certificate will authenticate.
|
|
335
|
-
:param pulumi.Input[Sequence[pulumi.Input[
|
|
334
|
+
:param pulumi.Input[Sequence[pulumi.Input[_builtins.str]]] extensions: A list of key-value pairs that contain certificate extensions from the CA
|
|
336
335
|
template for client certificates. Allowed values (case-sensitive): `permit-X11-forwarding`, `permit-agent-forwarding`,
|
|
337
336
|
`permit-port-forwarding`, `permit-pty`, `permit-user-rc`.
|
|
338
|
-
:param pulumi.Input[
|
|
339
|
-
:param pulumi.Input[
|
|
340
|
-
:param pulumi.Input[
|
|
341
|
-
:param pulumi.Input[
|
|
342
|
-
:param pulumi.Input[
|
|
343
|
-
:param pulumi.Input[
|
|
337
|
+
:param pulumi.Input[_builtins.str] folder: The DN of the policy folder where the SSH certificate object will be created.
|
|
338
|
+
:param pulumi.Input[_builtins.str] force_command: A command to run after successful login.
|
|
339
|
+
:param pulumi.Input[_builtins.str] key_id: The identifier of the requested SSH certificate.
|
|
340
|
+
:param pulumi.Input[_builtins.str] key_passphrase: Passphrase for encrypting the private key.
|
|
341
|
+
:param pulumi.Input[_builtins.int] key_size: Number of bits to use when creating a key pair. (e.g. `3072`).
|
|
342
|
+
:param pulumi.Input[_builtins.str] object_name: The friendly name of the SSH certificate object. When not specified the `key_id`
|
|
344
343
|
is used for the friendly name. If the object already exists the old certificate is archived and the CA issues a new
|
|
345
344
|
certificate.
|
|
346
|
-
:param pulumi.Input[Sequence[pulumi.Input[
|
|
345
|
+
:param pulumi.Input[Sequence[pulumi.Input[_builtins.str]]] principal: [DEPRECATED] - (Optional, set of strings) Use "principals" instead. A list of usernames for whom the
|
|
347
346
|
requested certificate will be valid.
|
|
348
|
-
:param pulumi.Input[Sequence[pulumi.Input[
|
|
349
|
-
:param pulumi.Input[
|
|
350
|
-
:param pulumi.Input[
|
|
351
|
-
:param pulumi.Input[
|
|
352
|
-
:param pulumi.Input[
|
|
347
|
+
:param pulumi.Input[Sequence[pulumi.Input[_builtins.str]]] principals: A list of usernames for whom the requested certificate will be valid.
|
|
348
|
+
:param pulumi.Input[_builtins.str] private_key: The private key for the SSH certificate if generated by Venafi.
|
|
349
|
+
:param pulumi.Input[_builtins.str] public_key: The OpenSSH formatted public key that will be used to generate the SSH certificate.
|
|
350
|
+
:param pulumi.Input[_builtins.str] public_key_fingerprint: The SHA256 fingerprint of the SSH certificate's public key.
|
|
351
|
+
:param pulumi.Input[_builtins.str] public_key_method: Specifies whether the public key will be `local` (default), `file` or
|
|
353
352
|
`service` generated.
|
|
354
|
-
:param pulumi.Input[
|
|
355
|
-
:param pulumi.Input[
|
|
356
|
-
:param pulumi.Input[Sequence[pulumi.Input[
|
|
353
|
+
:param pulumi.Input[_builtins.str] serial: The serial number of the SSH certificate.
|
|
354
|
+
:param pulumi.Input[_builtins.str] signing_ca: The SHA256 fingerprint of the CA that signed the SSH certificate.
|
|
355
|
+
:param pulumi.Input[Sequence[pulumi.Input[_builtins.str]]] source_addresses: A list of one or more valid IP or CIDR addresses that can use the SSH
|
|
357
356
|
certificate.
|
|
358
|
-
:param pulumi.Input[
|
|
359
|
-
:param pulumi.Input[
|
|
360
|
-
:param pulumi.Input[
|
|
361
|
-
:param pulumi.Input[
|
|
362
|
-
:param pulumi.Input[
|
|
357
|
+
:param pulumi.Input[_builtins.str] template: The SSH certificate issuing template.
|
|
358
|
+
:param pulumi.Input[_builtins.str] valid_from: The date the SSH certificate was issued.
|
|
359
|
+
:param pulumi.Input[_builtins.int] valid_hours: Desired number of hours for which the certificate will be valid.
|
|
360
|
+
:param pulumi.Input[_builtins.str] valid_to: The date the SSH certificate will expire.
|
|
361
|
+
:param pulumi.Input[_builtins.bool] windows: Specifies whether the private key will use Windows/DOS style line breaks.
|
|
363
362
|
"""
|
|
364
363
|
if certificate is not None:
|
|
365
364
|
pulumi.set(__self__, "certificate", certificate)
|
|
@@ -413,33 +412,33 @@ class _SshCertificateState:
|
|
|
413
412
|
if windows is not None:
|
|
414
413
|
pulumi.set(__self__, "windows", windows)
|
|
415
414
|
|
|
416
|
-
@property
|
|
415
|
+
@_builtins.property
|
|
417
416
|
@pulumi.getter
|
|
418
|
-
def certificate(self) -> Optional[pulumi.Input[
|
|
417
|
+
def certificate(self) -> Optional[pulumi.Input[_builtins.str]]:
|
|
419
418
|
"""
|
|
420
419
|
The issued SSH certificate.
|
|
421
420
|
"""
|
|
422
421
|
return pulumi.get(self, "certificate")
|
|
423
422
|
|
|
424
423
|
@certificate.setter
|
|
425
|
-
def certificate(self, value: Optional[pulumi.Input[
|
|
424
|
+
def certificate(self, value: Optional[pulumi.Input[_builtins.str]]):
|
|
426
425
|
pulumi.set(self, "certificate", value)
|
|
427
426
|
|
|
428
|
-
@property
|
|
427
|
+
@_builtins.property
|
|
429
428
|
@pulumi.getter(name="certificateType")
|
|
430
|
-
def certificate_type(self) -> Optional[pulumi.Input[
|
|
429
|
+
def certificate_type(self) -> Optional[pulumi.Input[_builtins.str]]:
|
|
431
430
|
"""
|
|
432
431
|
Indicates whether the SSH certificate is for client or server authentication.
|
|
433
432
|
"""
|
|
434
433
|
return pulumi.get(self, "certificate_type")
|
|
435
434
|
|
|
436
435
|
@certificate_type.setter
|
|
437
|
-
def certificate_type(self, value: Optional[pulumi.Input[
|
|
436
|
+
def certificate_type(self, value: Optional[pulumi.Input[_builtins.str]]):
|
|
438
437
|
pulumi.set(self, "certificate_type", value)
|
|
439
438
|
|
|
440
|
-
@property
|
|
439
|
+
@_builtins.property
|
|
441
440
|
@pulumi.getter(name="destinationAddresses")
|
|
442
|
-
def destination_addresses(self) -> Optional[pulumi.Input[Sequence[pulumi.Input[
|
|
441
|
+
def destination_addresses(self) -> Optional[pulumi.Input[Sequence[pulumi.Input[_builtins.str]]]]:
|
|
443
442
|
"""
|
|
444
443
|
A list of one or more valid IP or CIDR destination hosts where the
|
|
445
444
|
certificate will authenticate.
|
|
@@ -447,12 +446,12 @@ class _SshCertificateState:
|
|
|
447
446
|
return pulumi.get(self, "destination_addresses")
|
|
448
447
|
|
|
449
448
|
@destination_addresses.setter
|
|
450
|
-
def destination_addresses(self, value: Optional[pulumi.Input[Sequence[pulumi.Input[
|
|
449
|
+
def destination_addresses(self, value: Optional[pulumi.Input[Sequence[pulumi.Input[_builtins.str]]]]):
|
|
451
450
|
pulumi.set(self, "destination_addresses", value)
|
|
452
451
|
|
|
453
|
-
@property
|
|
452
|
+
@_builtins.property
|
|
454
453
|
@pulumi.getter
|
|
455
|
-
def extensions(self) -> Optional[pulumi.Input[Sequence[pulumi.Input[
|
|
454
|
+
def extensions(self) -> Optional[pulumi.Input[Sequence[pulumi.Input[_builtins.str]]]]:
|
|
456
455
|
"""
|
|
457
456
|
A list of key-value pairs that contain certificate extensions from the CA
|
|
458
457
|
template for client certificates. Allowed values (case-sensitive): `permit-X11-forwarding`, `permit-agent-forwarding`,
|
|
@@ -461,72 +460,72 @@ class _SshCertificateState:
|
|
|
461
460
|
return pulumi.get(self, "extensions")
|
|
462
461
|
|
|
463
462
|
@extensions.setter
|
|
464
|
-
def extensions(self, value: Optional[pulumi.Input[Sequence[pulumi.Input[
|
|
463
|
+
def extensions(self, value: Optional[pulumi.Input[Sequence[pulumi.Input[_builtins.str]]]]):
|
|
465
464
|
pulumi.set(self, "extensions", value)
|
|
466
465
|
|
|
467
|
-
@property
|
|
466
|
+
@_builtins.property
|
|
468
467
|
@pulumi.getter
|
|
469
|
-
def folder(self) -> Optional[pulumi.Input[
|
|
468
|
+
def folder(self) -> Optional[pulumi.Input[_builtins.str]]:
|
|
470
469
|
"""
|
|
471
470
|
The DN of the policy folder where the SSH certificate object will be created.
|
|
472
471
|
"""
|
|
473
472
|
return pulumi.get(self, "folder")
|
|
474
473
|
|
|
475
474
|
@folder.setter
|
|
476
|
-
def folder(self, value: Optional[pulumi.Input[
|
|
475
|
+
def folder(self, value: Optional[pulumi.Input[_builtins.str]]):
|
|
477
476
|
pulumi.set(self, "folder", value)
|
|
478
477
|
|
|
479
|
-
@property
|
|
478
|
+
@_builtins.property
|
|
480
479
|
@pulumi.getter(name="forceCommand")
|
|
481
|
-
def force_command(self) -> Optional[pulumi.Input[
|
|
480
|
+
def force_command(self) -> Optional[pulumi.Input[_builtins.str]]:
|
|
482
481
|
"""
|
|
483
482
|
A command to run after successful login.
|
|
484
483
|
"""
|
|
485
484
|
return pulumi.get(self, "force_command")
|
|
486
485
|
|
|
487
486
|
@force_command.setter
|
|
488
|
-
def force_command(self, value: Optional[pulumi.Input[
|
|
487
|
+
def force_command(self, value: Optional[pulumi.Input[_builtins.str]]):
|
|
489
488
|
pulumi.set(self, "force_command", value)
|
|
490
489
|
|
|
491
|
-
@property
|
|
490
|
+
@_builtins.property
|
|
492
491
|
@pulumi.getter(name="keyId")
|
|
493
|
-
def key_id(self) -> Optional[pulumi.Input[
|
|
492
|
+
def key_id(self) -> Optional[pulumi.Input[_builtins.str]]:
|
|
494
493
|
"""
|
|
495
494
|
The identifier of the requested SSH certificate.
|
|
496
495
|
"""
|
|
497
496
|
return pulumi.get(self, "key_id")
|
|
498
497
|
|
|
499
498
|
@key_id.setter
|
|
500
|
-
def key_id(self, value: Optional[pulumi.Input[
|
|
499
|
+
def key_id(self, value: Optional[pulumi.Input[_builtins.str]]):
|
|
501
500
|
pulumi.set(self, "key_id", value)
|
|
502
501
|
|
|
503
|
-
@property
|
|
502
|
+
@_builtins.property
|
|
504
503
|
@pulumi.getter(name="keyPassphrase")
|
|
505
|
-
def key_passphrase(self) -> Optional[pulumi.Input[
|
|
504
|
+
def key_passphrase(self) -> Optional[pulumi.Input[_builtins.str]]:
|
|
506
505
|
"""
|
|
507
506
|
Passphrase for encrypting the private key.
|
|
508
507
|
"""
|
|
509
508
|
return pulumi.get(self, "key_passphrase")
|
|
510
509
|
|
|
511
510
|
@key_passphrase.setter
|
|
512
|
-
def key_passphrase(self, value: Optional[pulumi.Input[
|
|
511
|
+
def key_passphrase(self, value: Optional[pulumi.Input[_builtins.str]]):
|
|
513
512
|
pulumi.set(self, "key_passphrase", value)
|
|
514
513
|
|
|
515
|
-
@property
|
|
514
|
+
@_builtins.property
|
|
516
515
|
@pulumi.getter(name="keySize")
|
|
517
|
-
def key_size(self) -> Optional[pulumi.Input[
|
|
516
|
+
def key_size(self) -> Optional[pulumi.Input[_builtins.int]]:
|
|
518
517
|
"""
|
|
519
518
|
Number of bits to use when creating a key pair. (e.g. `3072`).
|
|
520
519
|
"""
|
|
521
520
|
return pulumi.get(self, "key_size")
|
|
522
521
|
|
|
523
522
|
@key_size.setter
|
|
524
|
-
def key_size(self, value: Optional[pulumi.Input[
|
|
523
|
+
def key_size(self, value: Optional[pulumi.Input[_builtins.int]]):
|
|
525
524
|
pulumi.set(self, "key_size", value)
|
|
526
525
|
|
|
527
|
-
@property
|
|
526
|
+
@_builtins.property
|
|
528
527
|
@pulumi.getter(name="objectName")
|
|
529
|
-
def object_name(self) -> Optional[pulumi.Input[
|
|
528
|
+
def object_name(self) -> Optional[pulumi.Input[_builtins.str]]:
|
|
530
529
|
"""
|
|
531
530
|
The friendly name of the SSH certificate object. When not specified the `key_id`
|
|
532
531
|
is used for the friendly name. If the object already exists the old certificate is archived and the CA issues a new
|
|
@@ -535,13 +534,13 @@ class _SshCertificateState:
|
|
|
535
534
|
return pulumi.get(self, "object_name")
|
|
536
535
|
|
|
537
536
|
@object_name.setter
|
|
538
|
-
def object_name(self, value: Optional[pulumi.Input[
|
|
537
|
+
def object_name(self, value: Optional[pulumi.Input[_builtins.str]]):
|
|
539
538
|
pulumi.set(self, "object_name", value)
|
|
540
539
|
|
|
541
|
-
@property
|
|
540
|
+
@_builtins.property
|
|
542
541
|
@pulumi.getter
|
|
543
542
|
@_utilities.deprecated("""This will be removed in the future. Use \"principals\" instead""")
|
|
544
|
-
def principal(self) -> Optional[pulumi.Input[Sequence[pulumi.Input[
|
|
543
|
+
def principal(self) -> Optional[pulumi.Input[Sequence[pulumi.Input[_builtins.str]]]]:
|
|
545
544
|
"""
|
|
546
545
|
[DEPRECATED] - (Optional, set of strings) Use "principals" instead. A list of usernames for whom the
|
|
547
546
|
requested certificate will be valid.
|
|
@@ -549,60 +548,60 @@ class _SshCertificateState:
|
|
|
549
548
|
return pulumi.get(self, "principal")
|
|
550
549
|
|
|
551
550
|
@principal.setter
|
|
552
|
-
def principal(self, value: Optional[pulumi.Input[Sequence[pulumi.Input[
|
|
551
|
+
def principal(self, value: Optional[pulumi.Input[Sequence[pulumi.Input[_builtins.str]]]]):
|
|
553
552
|
pulumi.set(self, "principal", value)
|
|
554
553
|
|
|
555
|
-
@property
|
|
554
|
+
@_builtins.property
|
|
556
555
|
@pulumi.getter
|
|
557
|
-
def principals(self) -> Optional[pulumi.Input[Sequence[pulumi.Input[
|
|
556
|
+
def principals(self) -> Optional[pulumi.Input[Sequence[pulumi.Input[_builtins.str]]]]:
|
|
558
557
|
"""
|
|
559
558
|
A list of usernames for whom the requested certificate will be valid.
|
|
560
559
|
"""
|
|
561
560
|
return pulumi.get(self, "principals")
|
|
562
561
|
|
|
563
562
|
@principals.setter
|
|
564
|
-
def principals(self, value: Optional[pulumi.Input[Sequence[pulumi.Input[
|
|
563
|
+
def principals(self, value: Optional[pulumi.Input[Sequence[pulumi.Input[_builtins.str]]]]):
|
|
565
564
|
pulumi.set(self, "principals", value)
|
|
566
565
|
|
|
567
|
-
@property
|
|
566
|
+
@_builtins.property
|
|
568
567
|
@pulumi.getter(name="privateKey")
|
|
569
|
-
def private_key(self) -> Optional[pulumi.Input[
|
|
568
|
+
def private_key(self) -> Optional[pulumi.Input[_builtins.str]]:
|
|
570
569
|
"""
|
|
571
570
|
The private key for the SSH certificate if generated by Venafi.
|
|
572
571
|
"""
|
|
573
572
|
return pulumi.get(self, "private_key")
|
|
574
573
|
|
|
575
574
|
@private_key.setter
|
|
576
|
-
def private_key(self, value: Optional[pulumi.Input[
|
|
575
|
+
def private_key(self, value: Optional[pulumi.Input[_builtins.str]]):
|
|
577
576
|
pulumi.set(self, "private_key", value)
|
|
578
577
|
|
|
579
|
-
@property
|
|
578
|
+
@_builtins.property
|
|
580
579
|
@pulumi.getter(name="publicKey")
|
|
581
|
-
def public_key(self) -> Optional[pulumi.Input[
|
|
580
|
+
def public_key(self) -> Optional[pulumi.Input[_builtins.str]]:
|
|
582
581
|
"""
|
|
583
582
|
The OpenSSH formatted public key that will be used to generate the SSH certificate.
|
|
584
583
|
"""
|
|
585
584
|
return pulumi.get(self, "public_key")
|
|
586
585
|
|
|
587
586
|
@public_key.setter
|
|
588
|
-
def public_key(self, value: Optional[pulumi.Input[
|
|
587
|
+
def public_key(self, value: Optional[pulumi.Input[_builtins.str]]):
|
|
589
588
|
pulumi.set(self, "public_key", value)
|
|
590
589
|
|
|
591
|
-
@property
|
|
590
|
+
@_builtins.property
|
|
592
591
|
@pulumi.getter(name="publicKeyFingerprint")
|
|
593
|
-
def public_key_fingerprint(self) -> Optional[pulumi.Input[
|
|
592
|
+
def public_key_fingerprint(self) -> Optional[pulumi.Input[_builtins.str]]:
|
|
594
593
|
"""
|
|
595
594
|
The SHA256 fingerprint of the SSH certificate's public key.
|
|
596
595
|
"""
|
|
597
596
|
return pulumi.get(self, "public_key_fingerprint")
|
|
598
597
|
|
|
599
598
|
@public_key_fingerprint.setter
|
|
600
|
-
def public_key_fingerprint(self, value: Optional[pulumi.Input[
|
|
599
|
+
def public_key_fingerprint(self, value: Optional[pulumi.Input[_builtins.str]]):
|
|
601
600
|
pulumi.set(self, "public_key_fingerprint", value)
|
|
602
601
|
|
|
603
|
-
@property
|
|
602
|
+
@_builtins.property
|
|
604
603
|
@pulumi.getter(name="publicKeyMethod")
|
|
605
|
-
def public_key_method(self) -> Optional[pulumi.Input[
|
|
604
|
+
def public_key_method(self) -> Optional[pulumi.Input[_builtins.str]]:
|
|
606
605
|
"""
|
|
607
606
|
Specifies whether the public key will be `local` (default), `file` or
|
|
608
607
|
`service` generated.
|
|
@@ -610,36 +609,36 @@ class _SshCertificateState:
|
|
|
610
609
|
return pulumi.get(self, "public_key_method")
|
|
611
610
|
|
|
612
611
|
@public_key_method.setter
|
|
613
|
-
def public_key_method(self, value: Optional[pulumi.Input[
|
|
612
|
+
def public_key_method(self, value: Optional[pulumi.Input[_builtins.str]]):
|
|
614
613
|
pulumi.set(self, "public_key_method", value)
|
|
615
614
|
|
|
616
|
-
@property
|
|
615
|
+
@_builtins.property
|
|
617
616
|
@pulumi.getter
|
|
618
|
-
def serial(self) -> Optional[pulumi.Input[
|
|
617
|
+
def serial(self) -> Optional[pulumi.Input[_builtins.str]]:
|
|
619
618
|
"""
|
|
620
619
|
The serial number of the SSH certificate.
|
|
621
620
|
"""
|
|
622
621
|
return pulumi.get(self, "serial")
|
|
623
622
|
|
|
624
623
|
@serial.setter
|
|
625
|
-
def serial(self, value: Optional[pulumi.Input[
|
|
624
|
+
def serial(self, value: Optional[pulumi.Input[_builtins.str]]):
|
|
626
625
|
pulumi.set(self, "serial", value)
|
|
627
626
|
|
|
628
|
-
@property
|
|
627
|
+
@_builtins.property
|
|
629
628
|
@pulumi.getter(name="signingCa")
|
|
630
|
-
def signing_ca(self) -> Optional[pulumi.Input[
|
|
629
|
+
def signing_ca(self) -> Optional[pulumi.Input[_builtins.str]]:
|
|
631
630
|
"""
|
|
632
631
|
The SHA256 fingerprint of the CA that signed the SSH certificate.
|
|
633
632
|
"""
|
|
634
633
|
return pulumi.get(self, "signing_ca")
|
|
635
634
|
|
|
636
635
|
@signing_ca.setter
|
|
637
|
-
def signing_ca(self, value: Optional[pulumi.Input[
|
|
636
|
+
def signing_ca(self, value: Optional[pulumi.Input[_builtins.str]]):
|
|
638
637
|
pulumi.set(self, "signing_ca", value)
|
|
639
638
|
|
|
640
|
-
@property
|
|
639
|
+
@_builtins.property
|
|
641
640
|
@pulumi.getter(name="sourceAddresses")
|
|
642
|
-
def source_addresses(self) -> Optional[pulumi.Input[Sequence[pulumi.Input[
|
|
641
|
+
def source_addresses(self) -> Optional[pulumi.Input[Sequence[pulumi.Input[_builtins.str]]]]:
|
|
643
642
|
"""
|
|
644
643
|
A list of one or more valid IP or CIDR addresses that can use the SSH
|
|
645
644
|
certificate.
|
|
@@ -647,67 +646,67 @@ class _SshCertificateState:
|
|
|
647
646
|
return pulumi.get(self, "source_addresses")
|
|
648
647
|
|
|
649
648
|
@source_addresses.setter
|
|
650
|
-
def source_addresses(self, value: Optional[pulumi.Input[Sequence[pulumi.Input[
|
|
649
|
+
def source_addresses(self, value: Optional[pulumi.Input[Sequence[pulumi.Input[_builtins.str]]]]):
|
|
651
650
|
pulumi.set(self, "source_addresses", value)
|
|
652
651
|
|
|
653
|
-
@property
|
|
652
|
+
@_builtins.property
|
|
654
653
|
@pulumi.getter
|
|
655
|
-
def template(self) -> Optional[pulumi.Input[
|
|
654
|
+
def template(self) -> Optional[pulumi.Input[_builtins.str]]:
|
|
656
655
|
"""
|
|
657
656
|
The SSH certificate issuing template.
|
|
658
657
|
"""
|
|
659
658
|
return pulumi.get(self, "template")
|
|
660
659
|
|
|
661
660
|
@template.setter
|
|
662
|
-
def template(self, value: Optional[pulumi.Input[
|
|
661
|
+
def template(self, value: Optional[pulumi.Input[_builtins.str]]):
|
|
663
662
|
pulumi.set(self, "template", value)
|
|
664
663
|
|
|
665
|
-
@property
|
|
664
|
+
@_builtins.property
|
|
666
665
|
@pulumi.getter(name="validFrom")
|
|
667
|
-
def valid_from(self) -> Optional[pulumi.Input[
|
|
666
|
+
def valid_from(self) -> Optional[pulumi.Input[_builtins.str]]:
|
|
668
667
|
"""
|
|
669
668
|
The date the SSH certificate was issued.
|
|
670
669
|
"""
|
|
671
670
|
return pulumi.get(self, "valid_from")
|
|
672
671
|
|
|
673
672
|
@valid_from.setter
|
|
674
|
-
def valid_from(self, value: Optional[pulumi.Input[
|
|
673
|
+
def valid_from(self, value: Optional[pulumi.Input[_builtins.str]]):
|
|
675
674
|
pulumi.set(self, "valid_from", value)
|
|
676
675
|
|
|
677
|
-
@property
|
|
676
|
+
@_builtins.property
|
|
678
677
|
@pulumi.getter(name="validHours")
|
|
679
|
-
def valid_hours(self) -> Optional[pulumi.Input[
|
|
678
|
+
def valid_hours(self) -> Optional[pulumi.Input[_builtins.int]]:
|
|
680
679
|
"""
|
|
681
680
|
Desired number of hours for which the certificate will be valid.
|
|
682
681
|
"""
|
|
683
682
|
return pulumi.get(self, "valid_hours")
|
|
684
683
|
|
|
685
684
|
@valid_hours.setter
|
|
686
|
-
def valid_hours(self, value: Optional[pulumi.Input[
|
|
685
|
+
def valid_hours(self, value: Optional[pulumi.Input[_builtins.int]]):
|
|
687
686
|
pulumi.set(self, "valid_hours", value)
|
|
688
687
|
|
|
689
|
-
@property
|
|
688
|
+
@_builtins.property
|
|
690
689
|
@pulumi.getter(name="validTo")
|
|
691
|
-
def valid_to(self) -> Optional[pulumi.Input[
|
|
690
|
+
def valid_to(self) -> Optional[pulumi.Input[_builtins.str]]:
|
|
692
691
|
"""
|
|
693
692
|
The date the SSH certificate will expire.
|
|
694
693
|
"""
|
|
695
694
|
return pulumi.get(self, "valid_to")
|
|
696
695
|
|
|
697
696
|
@valid_to.setter
|
|
698
|
-
def valid_to(self, value: Optional[pulumi.Input[
|
|
697
|
+
def valid_to(self, value: Optional[pulumi.Input[_builtins.str]]):
|
|
699
698
|
pulumi.set(self, "valid_to", value)
|
|
700
699
|
|
|
701
|
-
@property
|
|
700
|
+
@_builtins.property
|
|
702
701
|
@pulumi.getter
|
|
703
|
-
def windows(self) -> Optional[pulumi.Input[
|
|
702
|
+
def windows(self) -> Optional[pulumi.Input[_builtins.bool]]:
|
|
704
703
|
"""
|
|
705
704
|
Specifies whether the private key will use Windows/DOS style line breaks.
|
|
706
705
|
"""
|
|
707
706
|
return pulumi.get(self, "windows")
|
|
708
707
|
|
|
709
708
|
@windows.setter
|
|
710
|
-
def windows(self, value: Optional[pulumi.Input[
|
|
709
|
+
def windows(self, value: Optional[pulumi.Input[_builtins.bool]]):
|
|
711
710
|
pulumi.set(self, "windows", value)
|
|
712
711
|
|
|
713
712
|
|
|
@@ -717,22 +716,22 @@ class SshCertificate(pulumi.CustomResource):
|
|
|
717
716
|
def __init__(__self__,
|
|
718
717
|
resource_name: str,
|
|
719
718
|
opts: Optional[pulumi.ResourceOptions] = None,
|
|
720
|
-
destination_addresses: Optional[pulumi.Input[Sequence[pulumi.Input[
|
|
721
|
-
extensions: Optional[pulumi.Input[Sequence[pulumi.Input[
|
|
722
|
-
folder: Optional[pulumi.Input[
|
|
723
|
-
force_command: Optional[pulumi.Input[
|
|
724
|
-
key_id: Optional[pulumi.Input[
|
|
725
|
-
key_passphrase: Optional[pulumi.Input[
|
|
726
|
-
key_size: Optional[pulumi.Input[
|
|
727
|
-
object_name: Optional[pulumi.Input[
|
|
728
|
-
principal: Optional[pulumi.Input[Sequence[pulumi.Input[
|
|
729
|
-
principals: Optional[pulumi.Input[Sequence[pulumi.Input[
|
|
730
|
-
public_key: Optional[pulumi.Input[
|
|
731
|
-
public_key_method: Optional[pulumi.Input[
|
|
732
|
-
source_addresses: Optional[pulumi.Input[Sequence[pulumi.Input[
|
|
733
|
-
template: Optional[pulumi.Input[
|
|
734
|
-
valid_hours: Optional[pulumi.Input[
|
|
735
|
-
windows: Optional[pulumi.Input[
|
|
719
|
+
destination_addresses: Optional[pulumi.Input[Sequence[pulumi.Input[_builtins.str]]]] = None,
|
|
720
|
+
extensions: Optional[pulumi.Input[Sequence[pulumi.Input[_builtins.str]]]] = None,
|
|
721
|
+
folder: Optional[pulumi.Input[_builtins.str]] = None,
|
|
722
|
+
force_command: Optional[pulumi.Input[_builtins.str]] = None,
|
|
723
|
+
key_id: Optional[pulumi.Input[_builtins.str]] = None,
|
|
724
|
+
key_passphrase: Optional[pulumi.Input[_builtins.str]] = None,
|
|
725
|
+
key_size: Optional[pulumi.Input[_builtins.int]] = None,
|
|
726
|
+
object_name: Optional[pulumi.Input[_builtins.str]] = None,
|
|
727
|
+
principal: Optional[pulumi.Input[Sequence[pulumi.Input[_builtins.str]]]] = None,
|
|
728
|
+
principals: Optional[pulumi.Input[Sequence[pulumi.Input[_builtins.str]]]] = None,
|
|
729
|
+
public_key: Optional[pulumi.Input[_builtins.str]] = None,
|
|
730
|
+
public_key_method: Optional[pulumi.Input[_builtins.str]] = None,
|
|
731
|
+
source_addresses: Optional[pulumi.Input[Sequence[pulumi.Input[_builtins.str]]]] = None,
|
|
732
|
+
template: Optional[pulumi.Input[_builtins.str]] = None,
|
|
733
|
+
valid_hours: Optional[pulumi.Input[_builtins.int]] = None,
|
|
734
|
+
windows: Optional[pulumi.Input[_builtins.bool]] = None,
|
|
736
735
|
__props__=None):
|
|
737
736
|
"""
|
|
738
737
|
Provides access to request and retrieve SSH certificates from *Venafi Trust Protection Platform*.
|
|
@@ -755,30 +754,30 @@ class SshCertificate(pulumi.CustomResource):
|
|
|
755
754
|
|
|
756
755
|
:param str resource_name: The name of the resource.
|
|
757
756
|
:param pulumi.ResourceOptions opts: Options for the resource.
|
|
758
|
-
:param pulumi.Input[Sequence[pulumi.Input[
|
|
757
|
+
:param pulumi.Input[Sequence[pulumi.Input[_builtins.str]]] destination_addresses: A list of one or more valid IP or CIDR destination hosts where the
|
|
759
758
|
certificate will authenticate.
|
|
760
|
-
:param pulumi.Input[Sequence[pulumi.Input[
|
|
759
|
+
:param pulumi.Input[Sequence[pulumi.Input[_builtins.str]]] extensions: A list of key-value pairs that contain certificate extensions from the CA
|
|
761
760
|
template for client certificates. Allowed values (case-sensitive): `permit-X11-forwarding`, `permit-agent-forwarding`,
|
|
762
761
|
`permit-port-forwarding`, `permit-pty`, `permit-user-rc`.
|
|
763
|
-
:param pulumi.Input[
|
|
764
|
-
:param pulumi.Input[
|
|
765
|
-
:param pulumi.Input[
|
|
766
|
-
:param pulumi.Input[
|
|
767
|
-
:param pulumi.Input[
|
|
768
|
-
:param pulumi.Input[
|
|
762
|
+
:param pulumi.Input[_builtins.str] folder: The DN of the policy folder where the SSH certificate object will be created.
|
|
763
|
+
:param pulumi.Input[_builtins.str] force_command: A command to run after successful login.
|
|
764
|
+
:param pulumi.Input[_builtins.str] key_id: The identifier of the requested SSH certificate.
|
|
765
|
+
:param pulumi.Input[_builtins.str] key_passphrase: Passphrase for encrypting the private key.
|
|
766
|
+
:param pulumi.Input[_builtins.int] key_size: Number of bits to use when creating a key pair. (e.g. `3072`).
|
|
767
|
+
:param pulumi.Input[_builtins.str] object_name: The friendly name of the SSH certificate object. When not specified the `key_id`
|
|
769
768
|
is used for the friendly name. If the object already exists the old certificate is archived and the CA issues a new
|
|
770
769
|
certificate.
|
|
771
|
-
:param pulumi.Input[Sequence[pulumi.Input[
|
|
770
|
+
:param pulumi.Input[Sequence[pulumi.Input[_builtins.str]]] principal: [DEPRECATED] - (Optional, set of strings) Use "principals" instead. A list of usernames for whom the
|
|
772
771
|
requested certificate will be valid.
|
|
773
|
-
:param pulumi.Input[Sequence[pulumi.Input[
|
|
774
|
-
:param pulumi.Input[
|
|
775
|
-
:param pulumi.Input[
|
|
772
|
+
:param pulumi.Input[Sequence[pulumi.Input[_builtins.str]]] principals: A list of usernames for whom the requested certificate will be valid.
|
|
773
|
+
:param pulumi.Input[_builtins.str] public_key: The OpenSSH formatted public key that will be used to generate the SSH certificate.
|
|
774
|
+
:param pulumi.Input[_builtins.str] public_key_method: Specifies whether the public key will be `local` (default), `file` or
|
|
776
775
|
`service` generated.
|
|
777
|
-
:param pulumi.Input[Sequence[pulumi.Input[
|
|
776
|
+
:param pulumi.Input[Sequence[pulumi.Input[_builtins.str]]] source_addresses: A list of one or more valid IP or CIDR addresses that can use the SSH
|
|
778
777
|
certificate.
|
|
779
|
-
:param pulumi.Input[
|
|
780
|
-
:param pulumi.Input[
|
|
781
|
-
:param pulumi.Input[
|
|
778
|
+
:param pulumi.Input[_builtins.str] template: The SSH certificate issuing template.
|
|
779
|
+
:param pulumi.Input[_builtins.int] valid_hours: Desired number of hours for which the certificate will be valid.
|
|
780
|
+
:param pulumi.Input[_builtins.bool] windows: Specifies whether the private key will use Windows/DOS style line breaks.
|
|
782
781
|
"""
|
|
783
782
|
...
|
|
784
783
|
@overload
|
|
@@ -820,22 +819,22 @@ class SshCertificate(pulumi.CustomResource):
|
|
|
820
819
|
def _internal_init(__self__,
|
|
821
820
|
resource_name: str,
|
|
822
821
|
opts: Optional[pulumi.ResourceOptions] = None,
|
|
823
|
-
destination_addresses: Optional[pulumi.Input[Sequence[pulumi.Input[
|
|
824
|
-
extensions: Optional[pulumi.Input[Sequence[pulumi.Input[
|
|
825
|
-
folder: Optional[pulumi.Input[
|
|
826
|
-
force_command: Optional[pulumi.Input[
|
|
827
|
-
key_id: Optional[pulumi.Input[
|
|
828
|
-
key_passphrase: Optional[pulumi.Input[
|
|
829
|
-
key_size: Optional[pulumi.Input[
|
|
830
|
-
object_name: Optional[pulumi.Input[
|
|
831
|
-
principal: Optional[pulumi.Input[Sequence[pulumi.Input[
|
|
832
|
-
principals: Optional[pulumi.Input[Sequence[pulumi.Input[
|
|
833
|
-
public_key: Optional[pulumi.Input[
|
|
834
|
-
public_key_method: Optional[pulumi.Input[
|
|
835
|
-
source_addresses: Optional[pulumi.Input[Sequence[pulumi.Input[
|
|
836
|
-
template: Optional[pulumi.Input[
|
|
837
|
-
valid_hours: Optional[pulumi.Input[
|
|
838
|
-
windows: Optional[pulumi.Input[
|
|
822
|
+
destination_addresses: Optional[pulumi.Input[Sequence[pulumi.Input[_builtins.str]]]] = None,
|
|
823
|
+
extensions: Optional[pulumi.Input[Sequence[pulumi.Input[_builtins.str]]]] = None,
|
|
824
|
+
folder: Optional[pulumi.Input[_builtins.str]] = None,
|
|
825
|
+
force_command: Optional[pulumi.Input[_builtins.str]] = None,
|
|
826
|
+
key_id: Optional[pulumi.Input[_builtins.str]] = None,
|
|
827
|
+
key_passphrase: Optional[pulumi.Input[_builtins.str]] = None,
|
|
828
|
+
key_size: Optional[pulumi.Input[_builtins.int]] = None,
|
|
829
|
+
object_name: Optional[pulumi.Input[_builtins.str]] = None,
|
|
830
|
+
principal: Optional[pulumi.Input[Sequence[pulumi.Input[_builtins.str]]]] = None,
|
|
831
|
+
principals: Optional[pulumi.Input[Sequence[pulumi.Input[_builtins.str]]]] = None,
|
|
832
|
+
public_key: Optional[pulumi.Input[_builtins.str]] = None,
|
|
833
|
+
public_key_method: Optional[pulumi.Input[_builtins.str]] = None,
|
|
834
|
+
source_addresses: Optional[pulumi.Input[Sequence[pulumi.Input[_builtins.str]]]] = None,
|
|
835
|
+
template: Optional[pulumi.Input[_builtins.str]] = None,
|
|
836
|
+
valid_hours: Optional[pulumi.Input[_builtins.int]] = None,
|
|
837
|
+
windows: Optional[pulumi.Input[_builtins.bool]] = None,
|
|
839
838
|
__props__=None):
|
|
840
839
|
opts = pulumi.ResourceOptions.merge(_utilities.get_resource_opts_defaults(), opts)
|
|
841
840
|
if not isinstance(opts, pulumi.ResourceOptions):
|
|
@@ -885,30 +884,30 @@ class SshCertificate(pulumi.CustomResource):
|
|
|
885
884
|
def get(resource_name: str,
|
|
886
885
|
id: pulumi.Input[str],
|
|
887
886
|
opts: Optional[pulumi.ResourceOptions] = None,
|
|
888
|
-
certificate: Optional[pulumi.Input[
|
|
889
|
-
certificate_type: Optional[pulumi.Input[
|
|
890
|
-
destination_addresses: Optional[pulumi.Input[Sequence[pulumi.Input[
|
|
891
|
-
extensions: Optional[pulumi.Input[Sequence[pulumi.Input[
|
|
892
|
-
folder: Optional[pulumi.Input[
|
|
893
|
-
force_command: Optional[pulumi.Input[
|
|
894
|
-
key_id: Optional[pulumi.Input[
|
|
895
|
-
key_passphrase: Optional[pulumi.Input[
|
|
896
|
-
key_size: Optional[pulumi.Input[
|
|
897
|
-
object_name: Optional[pulumi.Input[
|
|
898
|
-
principal: Optional[pulumi.Input[Sequence[pulumi.Input[
|
|
899
|
-
principals: Optional[pulumi.Input[Sequence[pulumi.Input[
|
|
900
|
-
private_key: Optional[pulumi.Input[
|
|
901
|
-
public_key: Optional[pulumi.Input[
|
|
902
|
-
public_key_fingerprint: Optional[pulumi.Input[
|
|
903
|
-
public_key_method: Optional[pulumi.Input[
|
|
904
|
-
serial: Optional[pulumi.Input[
|
|
905
|
-
signing_ca: Optional[pulumi.Input[
|
|
906
|
-
source_addresses: Optional[pulumi.Input[Sequence[pulumi.Input[
|
|
907
|
-
template: Optional[pulumi.Input[
|
|
908
|
-
valid_from: Optional[pulumi.Input[
|
|
909
|
-
valid_hours: Optional[pulumi.Input[
|
|
910
|
-
valid_to: Optional[pulumi.Input[
|
|
911
|
-
windows: Optional[pulumi.Input[
|
|
887
|
+
certificate: Optional[pulumi.Input[_builtins.str]] = None,
|
|
888
|
+
certificate_type: Optional[pulumi.Input[_builtins.str]] = None,
|
|
889
|
+
destination_addresses: Optional[pulumi.Input[Sequence[pulumi.Input[_builtins.str]]]] = None,
|
|
890
|
+
extensions: Optional[pulumi.Input[Sequence[pulumi.Input[_builtins.str]]]] = None,
|
|
891
|
+
folder: Optional[pulumi.Input[_builtins.str]] = None,
|
|
892
|
+
force_command: Optional[pulumi.Input[_builtins.str]] = None,
|
|
893
|
+
key_id: Optional[pulumi.Input[_builtins.str]] = None,
|
|
894
|
+
key_passphrase: Optional[pulumi.Input[_builtins.str]] = None,
|
|
895
|
+
key_size: Optional[pulumi.Input[_builtins.int]] = None,
|
|
896
|
+
object_name: Optional[pulumi.Input[_builtins.str]] = None,
|
|
897
|
+
principal: Optional[pulumi.Input[Sequence[pulumi.Input[_builtins.str]]]] = None,
|
|
898
|
+
principals: Optional[pulumi.Input[Sequence[pulumi.Input[_builtins.str]]]] = None,
|
|
899
|
+
private_key: Optional[pulumi.Input[_builtins.str]] = None,
|
|
900
|
+
public_key: Optional[pulumi.Input[_builtins.str]] = None,
|
|
901
|
+
public_key_fingerprint: Optional[pulumi.Input[_builtins.str]] = None,
|
|
902
|
+
public_key_method: Optional[pulumi.Input[_builtins.str]] = None,
|
|
903
|
+
serial: Optional[pulumi.Input[_builtins.str]] = None,
|
|
904
|
+
signing_ca: Optional[pulumi.Input[_builtins.str]] = None,
|
|
905
|
+
source_addresses: Optional[pulumi.Input[Sequence[pulumi.Input[_builtins.str]]]] = None,
|
|
906
|
+
template: Optional[pulumi.Input[_builtins.str]] = None,
|
|
907
|
+
valid_from: Optional[pulumi.Input[_builtins.str]] = None,
|
|
908
|
+
valid_hours: Optional[pulumi.Input[_builtins.int]] = None,
|
|
909
|
+
valid_to: Optional[pulumi.Input[_builtins.str]] = None,
|
|
910
|
+
windows: Optional[pulumi.Input[_builtins.bool]] = None) -> 'SshCertificate':
|
|
912
911
|
"""
|
|
913
912
|
Get an existing SshCertificate resource's state with the given name, id, and optional extra
|
|
914
913
|
properties used to qualify the lookup.
|
|
@@ -916,38 +915,38 @@ class SshCertificate(pulumi.CustomResource):
|
|
|
916
915
|
:param str resource_name: The unique name of the resulting resource.
|
|
917
916
|
:param pulumi.Input[str] id: The unique provider ID of the resource to lookup.
|
|
918
917
|
:param pulumi.ResourceOptions opts: Options for the resource.
|
|
919
|
-
:param pulumi.Input[
|
|
920
|
-
:param pulumi.Input[
|
|
921
|
-
:param pulumi.Input[Sequence[pulumi.Input[
|
|
918
|
+
:param pulumi.Input[_builtins.str] certificate: The issued SSH certificate.
|
|
919
|
+
:param pulumi.Input[_builtins.str] certificate_type: Indicates whether the SSH certificate is for client or server authentication.
|
|
920
|
+
:param pulumi.Input[Sequence[pulumi.Input[_builtins.str]]] destination_addresses: A list of one or more valid IP or CIDR destination hosts where the
|
|
922
921
|
certificate will authenticate.
|
|
923
|
-
:param pulumi.Input[Sequence[pulumi.Input[
|
|
922
|
+
:param pulumi.Input[Sequence[pulumi.Input[_builtins.str]]] extensions: A list of key-value pairs that contain certificate extensions from the CA
|
|
924
923
|
template for client certificates. Allowed values (case-sensitive): `permit-X11-forwarding`, `permit-agent-forwarding`,
|
|
925
924
|
`permit-port-forwarding`, `permit-pty`, `permit-user-rc`.
|
|
926
|
-
:param pulumi.Input[
|
|
927
|
-
:param pulumi.Input[
|
|
928
|
-
:param pulumi.Input[
|
|
929
|
-
:param pulumi.Input[
|
|
930
|
-
:param pulumi.Input[
|
|
931
|
-
:param pulumi.Input[
|
|
925
|
+
:param pulumi.Input[_builtins.str] folder: The DN of the policy folder where the SSH certificate object will be created.
|
|
926
|
+
:param pulumi.Input[_builtins.str] force_command: A command to run after successful login.
|
|
927
|
+
:param pulumi.Input[_builtins.str] key_id: The identifier of the requested SSH certificate.
|
|
928
|
+
:param pulumi.Input[_builtins.str] key_passphrase: Passphrase for encrypting the private key.
|
|
929
|
+
:param pulumi.Input[_builtins.int] key_size: Number of bits to use when creating a key pair. (e.g. `3072`).
|
|
930
|
+
:param pulumi.Input[_builtins.str] object_name: The friendly name of the SSH certificate object. When not specified the `key_id`
|
|
932
931
|
is used for the friendly name. If the object already exists the old certificate is archived and the CA issues a new
|
|
933
932
|
certificate.
|
|
934
|
-
:param pulumi.Input[Sequence[pulumi.Input[
|
|
933
|
+
:param pulumi.Input[Sequence[pulumi.Input[_builtins.str]]] principal: [DEPRECATED] - (Optional, set of strings) Use "principals" instead. A list of usernames for whom the
|
|
935
934
|
requested certificate will be valid.
|
|
936
|
-
:param pulumi.Input[Sequence[pulumi.Input[
|
|
937
|
-
:param pulumi.Input[
|
|
938
|
-
:param pulumi.Input[
|
|
939
|
-
:param pulumi.Input[
|
|
940
|
-
:param pulumi.Input[
|
|
935
|
+
:param pulumi.Input[Sequence[pulumi.Input[_builtins.str]]] principals: A list of usernames for whom the requested certificate will be valid.
|
|
936
|
+
:param pulumi.Input[_builtins.str] private_key: The private key for the SSH certificate if generated by Venafi.
|
|
937
|
+
:param pulumi.Input[_builtins.str] public_key: The OpenSSH formatted public key that will be used to generate the SSH certificate.
|
|
938
|
+
:param pulumi.Input[_builtins.str] public_key_fingerprint: The SHA256 fingerprint of the SSH certificate's public key.
|
|
939
|
+
:param pulumi.Input[_builtins.str] public_key_method: Specifies whether the public key will be `local` (default), `file` or
|
|
941
940
|
`service` generated.
|
|
942
|
-
:param pulumi.Input[
|
|
943
|
-
:param pulumi.Input[
|
|
944
|
-
:param pulumi.Input[Sequence[pulumi.Input[
|
|
941
|
+
:param pulumi.Input[_builtins.str] serial: The serial number of the SSH certificate.
|
|
942
|
+
:param pulumi.Input[_builtins.str] signing_ca: The SHA256 fingerprint of the CA that signed the SSH certificate.
|
|
943
|
+
:param pulumi.Input[Sequence[pulumi.Input[_builtins.str]]] source_addresses: A list of one or more valid IP or CIDR addresses that can use the SSH
|
|
945
944
|
certificate.
|
|
946
|
-
:param pulumi.Input[
|
|
947
|
-
:param pulumi.Input[
|
|
948
|
-
:param pulumi.Input[
|
|
949
|
-
:param pulumi.Input[
|
|
950
|
-
:param pulumi.Input[
|
|
945
|
+
:param pulumi.Input[_builtins.str] template: The SSH certificate issuing template.
|
|
946
|
+
:param pulumi.Input[_builtins.str] valid_from: The date the SSH certificate was issued.
|
|
947
|
+
:param pulumi.Input[_builtins.int] valid_hours: Desired number of hours for which the certificate will be valid.
|
|
948
|
+
:param pulumi.Input[_builtins.str] valid_to: The date the SSH certificate will expire.
|
|
949
|
+
:param pulumi.Input[_builtins.bool] windows: Specifies whether the private key will use Windows/DOS style line breaks.
|
|
951
950
|
"""
|
|
952
951
|
opts = pulumi.ResourceOptions.merge(opts, pulumi.ResourceOptions(id=id))
|
|
953
952
|
|
|
@@ -979,34 +978,34 @@ class SshCertificate(pulumi.CustomResource):
|
|
|
979
978
|
__props__.__dict__["windows"] = windows
|
|
980
979
|
return SshCertificate(resource_name, opts=opts, __props__=__props__)
|
|
981
980
|
|
|
982
|
-
@property
|
|
981
|
+
@_builtins.property
|
|
983
982
|
@pulumi.getter
|
|
984
|
-
def certificate(self) -> pulumi.Output[
|
|
983
|
+
def certificate(self) -> pulumi.Output[_builtins.str]:
|
|
985
984
|
"""
|
|
986
985
|
The issued SSH certificate.
|
|
987
986
|
"""
|
|
988
987
|
return pulumi.get(self, "certificate")
|
|
989
988
|
|
|
990
|
-
@property
|
|
989
|
+
@_builtins.property
|
|
991
990
|
@pulumi.getter(name="certificateType")
|
|
992
|
-
def certificate_type(self) -> pulumi.Output[
|
|
991
|
+
def certificate_type(self) -> pulumi.Output[_builtins.str]:
|
|
993
992
|
"""
|
|
994
993
|
Indicates whether the SSH certificate is for client or server authentication.
|
|
995
994
|
"""
|
|
996
995
|
return pulumi.get(self, "certificate_type")
|
|
997
996
|
|
|
998
|
-
@property
|
|
997
|
+
@_builtins.property
|
|
999
998
|
@pulumi.getter(name="destinationAddresses")
|
|
1000
|
-
def destination_addresses(self) -> pulumi.Output[Optional[Sequence[
|
|
999
|
+
def destination_addresses(self) -> pulumi.Output[Optional[Sequence[_builtins.str]]]:
|
|
1001
1000
|
"""
|
|
1002
1001
|
A list of one or more valid IP or CIDR destination hosts where the
|
|
1003
1002
|
certificate will authenticate.
|
|
1004
1003
|
"""
|
|
1005
1004
|
return pulumi.get(self, "destination_addresses")
|
|
1006
1005
|
|
|
1007
|
-
@property
|
|
1006
|
+
@_builtins.property
|
|
1008
1007
|
@pulumi.getter
|
|
1009
|
-
def extensions(self) -> pulumi.Output[Optional[Sequence[
|
|
1008
|
+
def extensions(self) -> pulumi.Output[Optional[Sequence[_builtins.str]]]:
|
|
1010
1009
|
"""
|
|
1011
1010
|
A list of key-value pairs that contain certificate extensions from the CA
|
|
1012
1011
|
template for client certificates. Allowed values (case-sensitive): `permit-X11-forwarding`, `permit-agent-forwarding`,
|
|
@@ -1014,49 +1013,49 @@ class SshCertificate(pulumi.CustomResource):
|
|
|
1014
1013
|
"""
|
|
1015
1014
|
return pulumi.get(self, "extensions")
|
|
1016
1015
|
|
|
1017
|
-
@property
|
|
1016
|
+
@_builtins.property
|
|
1018
1017
|
@pulumi.getter
|
|
1019
|
-
def folder(self) -> pulumi.Output[Optional[
|
|
1018
|
+
def folder(self) -> pulumi.Output[Optional[_builtins.str]]:
|
|
1020
1019
|
"""
|
|
1021
1020
|
The DN of the policy folder where the SSH certificate object will be created.
|
|
1022
1021
|
"""
|
|
1023
1022
|
return pulumi.get(self, "folder")
|
|
1024
1023
|
|
|
1025
|
-
@property
|
|
1024
|
+
@_builtins.property
|
|
1026
1025
|
@pulumi.getter(name="forceCommand")
|
|
1027
|
-
def force_command(self) -> pulumi.Output[Optional[
|
|
1026
|
+
def force_command(self) -> pulumi.Output[Optional[_builtins.str]]:
|
|
1028
1027
|
"""
|
|
1029
1028
|
A command to run after successful login.
|
|
1030
1029
|
"""
|
|
1031
1030
|
return pulumi.get(self, "force_command")
|
|
1032
1031
|
|
|
1033
|
-
@property
|
|
1032
|
+
@_builtins.property
|
|
1034
1033
|
@pulumi.getter(name="keyId")
|
|
1035
|
-
def key_id(self) -> pulumi.Output[
|
|
1034
|
+
def key_id(self) -> pulumi.Output[_builtins.str]:
|
|
1036
1035
|
"""
|
|
1037
1036
|
The identifier of the requested SSH certificate.
|
|
1038
1037
|
"""
|
|
1039
1038
|
return pulumi.get(self, "key_id")
|
|
1040
1039
|
|
|
1041
|
-
@property
|
|
1040
|
+
@_builtins.property
|
|
1042
1041
|
@pulumi.getter(name="keyPassphrase")
|
|
1043
|
-
def key_passphrase(self) -> pulumi.Output[Optional[
|
|
1042
|
+
def key_passphrase(self) -> pulumi.Output[Optional[_builtins.str]]:
|
|
1044
1043
|
"""
|
|
1045
1044
|
Passphrase for encrypting the private key.
|
|
1046
1045
|
"""
|
|
1047
1046
|
return pulumi.get(self, "key_passphrase")
|
|
1048
1047
|
|
|
1049
|
-
@property
|
|
1048
|
+
@_builtins.property
|
|
1050
1049
|
@pulumi.getter(name="keySize")
|
|
1051
|
-
def key_size(self) -> pulumi.Output[Optional[
|
|
1050
|
+
def key_size(self) -> pulumi.Output[Optional[_builtins.int]]:
|
|
1052
1051
|
"""
|
|
1053
1052
|
Number of bits to use when creating a key pair. (e.g. `3072`).
|
|
1054
1053
|
"""
|
|
1055
1054
|
return pulumi.get(self, "key_size")
|
|
1056
1055
|
|
|
1057
|
-
@property
|
|
1056
|
+
@_builtins.property
|
|
1058
1057
|
@pulumi.getter(name="objectName")
|
|
1059
|
-
def object_name(self) -> pulumi.Output[Optional[
|
|
1058
|
+
def object_name(self) -> pulumi.Output[Optional[_builtins.str]]:
|
|
1060
1059
|
"""
|
|
1061
1060
|
The friendly name of the SSH certificate object. When not specified the `key_id`
|
|
1062
1061
|
is used for the friendly name. If the object already exists the old certificate is archived and the CA issues a new
|
|
@@ -1064,117 +1063,117 @@ class SshCertificate(pulumi.CustomResource):
|
|
|
1064
1063
|
"""
|
|
1065
1064
|
return pulumi.get(self, "object_name")
|
|
1066
1065
|
|
|
1067
|
-
@property
|
|
1066
|
+
@_builtins.property
|
|
1068
1067
|
@pulumi.getter
|
|
1069
1068
|
@_utilities.deprecated("""This will be removed in the future. Use \"principals\" instead""")
|
|
1070
|
-
def principal(self) -> pulumi.Output[Optional[Sequence[
|
|
1069
|
+
def principal(self) -> pulumi.Output[Optional[Sequence[_builtins.str]]]:
|
|
1071
1070
|
"""
|
|
1072
1071
|
[DEPRECATED] - (Optional, set of strings) Use "principals" instead. A list of usernames for whom the
|
|
1073
1072
|
requested certificate will be valid.
|
|
1074
1073
|
"""
|
|
1075
1074
|
return pulumi.get(self, "principal")
|
|
1076
1075
|
|
|
1077
|
-
@property
|
|
1076
|
+
@_builtins.property
|
|
1078
1077
|
@pulumi.getter
|
|
1079
|
-
def principals(self) -> pulumi.Output[Optional[Sequence[
|
|
1078
|
+
def principals(self) -> pulumi.Output[Optional[Sequence[_builtins.str]]]:
|
|
1080
1079
|
"""
|
|
1081
1080
|
A list of usernames for whom the requested certificate will be valid.
|
|
1082
1081
|
"""
|
|
1083
1082
|
return pulumi.get(self, "principals")
|
|
1084
1083
|
|
|
1085
|
-
@property
|
|
1084
|
+
@_builtins.property
|
|
1086
1085
|
@pulumi.getter(name="privateKey")
|
|
1087
|
-
def private_key(self) -> pulumi.Output[
|
|
1086
|
+
def private_key(self) -> pulumi.Output[_builtins.str]:
|
|
1088
1087
|
"""
|
|
1089
1088
|
The private key for the SSH certificate if generated by Venafi.
|
|
1090
1089
|
"""
|
|
1091
1090
|
return pulumi.get(self, "private_key")
|
|
1092
1091
|
|
|
1093
|
-
@property
|
|
1092
|
+
@_builtins.property
|
|
1094
1093
|
@pulumi.getter(name="publicKey")
|
|
1095
|
-
def public_key(self) -> pulumi.Output[Optional[
|
|
1094
|
+
def public_key(self) -> pulumi.Output[Optional[_builtins.str]]:
|
|
1096
1095
|
"""
|
|
1097
1096
|
The OpenSSH formatted public key that will be used to generate the SSH certificate.
|
|
1098
1097
|
"""
|
|
1099
1098
|
return pulumi.get(self, "public_key")
|
|
1100
1099
|
|
|
1101
|
-
@property
|
|
1100
|
+
@_builtins.property
|
|
1102
1101
|
@pulumi.getter(name="publicKeyFingerprint")
|
|
1103
|
-
def public_key_fingerprint(self) -> pulumi.Output[
|
|
1102
|
+
def public_key_fingerprint(self) -> pulumi.Output[_builtins.str]:
|
|
1104
1103
|
"""
|
|
1105
1104
|
The SHA256 fingerprint of the SSH certificate's public key.
|
|
1106
1105
|
"""
|
|
1107
1106
|
return pulumi.get(self, "public_key_fingerprint")
|
|
1108
1107
|
|
|
1109
|
-
@property
|
|
1108
|
+
@_builtins.property
|
|
1110
1109
|
@pulumi.getter(name="publicKeyMethod")
|
|
1111
|
-
def public_key_method(self) -> pulumi.Output[Optional[
|
|
1110
|
+
def public_key_method(self) -> pulumi.Output[Optional[_builtins.str]]:
|
|
1112
1111
|
"""
|
|
1113
1112
|
Specifies whether the public key will be `local` (default), `file` or
|
|
1114
1113
|
`service` generated.
|
|
1115
1114
|
"""
|
|
1116
1115
|
return pulumi.get(self, "public_key_method")
|
|
1117
1116
|
|
|
1118
|
-
@property
|
|
1117
|
+
@_builtins.property
|
|
1119
1118
|
@pulumi.getter
|
|
1120
|
-
def serial(self) -> pulumi.Output[
|
|
1119
|
+
def serial(self) -> pulumi.Output[_builtins.str]:
|
|
1121
1120
|
"""
|
|
1122
1121
|
The serial number of the SSH certificate.
|
|
1123
1122
|
"""
|
|
1124
1123
|
return pulumi.get(self, "serial")
|
|
1125
1124
|
|
|
1126
|
-
@property
|
|
1125
|
+
@_builtins.property
|
|
1127
1126
|
@pulumi.getter(name="signingCa")
|
|
1128
|
-
def signing_ca(self) -> pulumi.Output[
|
|
1127
|
+
def signing_ca(self) -> pulumi.Output[_builtins.str]:
|
|
1129
1128
|
"""
|
|
1130
1129
|
The SHA256 fingerprint of the CA that signed the SSH certificate.
|
|
1131
1130
|
"""
|
|
1132
1131
|
return pulumi.get(self, "signing_ca")
|
|
1133
1132
|
|
|
1134
|
-
@property
|
|
1133
|
+
@_builtins.property
|
|
1135
1134
|
@pulumi.getter(name="sourceAddresses")
|
|
1136
|
-
def source_addresses(self) -> pulumi.Output[Optional[Sequence[
|
|
1135
|
+
def source_addresses(self) -> pulumi.Output[Optional[Sequence[_builtins.str]]]:
|
|
1137
1136
|
"""
|
|
1138
1137
|
A list of one or more valid IP or CIDR addresses that can use the SSH
|
|
1139
1138
|
certificate.
|
|
1140
1139
|
"""
|
|
1141
1140
|
return pulumi.get(self, "source_addresses")
|
|
1142
1141
|
|
|
1143
|
-
@property
|
|
1142
|
+
@_builtins.property
|
|
1144
1143
|
@pulumi.getter
|
|
1145
|
-
def template(self) -> pulumi.Output[
|
|
1144
|
+
def template(self) -> pulumi.Output[_builtins.str]:
|
|
1146
1145
|
"""
|
|
1147
1146
|
The SSH certificate issuing template.
|
|
1148
1147
|
"""
|
|
1149
1148
|
return pulumi.get(self, "template")
|
|
1150
1149
|
|
|
1151
|
-
@property
|
|
1150
|
+
@_builtins.property
|
|
1152
1151
|
@pulumi.getter(name="validFrom")
|
|
1153
|
-
def valid_from(self) -> pulumi.Output[
|
|
1152
|
+
def valid_from(self) -> pulumi.Output[_builtins.str]:
|
|
1154
1153
|
"""
|
|
1155
1154
|
The date the SSH certificate was issued.
|
|
1156
1155
|
"""
|
|
1157
1156
|
return pulumi.get(self, "valid_from")
|
|
1158
1157
|
|
|
1159
|
-
@property
|
|
1158
|
+
@_builtins.property
|
|
1160
1159
|
@pulumi.getter(name="validHours")
|
|
1161
|
-
def valid_hours(self) -> pulumi.Output[Optional[
|
|
1160
|
+
def valid_hours(self) -> pulumi.Output[Optional[_builtins.int]]:
|
|
1162
1161
|
"""
|
|
1163
1162
|
Desired number of hours for which the certificate will be valid.
|
|
1164
1163
|
"""
|
|
1165
1164
|
return pulumi.get(self, "valid_hours")
|
|
1166
1165
|
|
|
1167
|
-
@property
|
|
1166
|
+
@_builtins.property
|
|
1168
1167
|
@pulumi.getter(name="validTo")
|
|
1169
|
-
def valid_to(self) -> pulumi.Output[
|
|
1168
|
+
def valid_to(self) -> pulumi.Output[_builtins.str]:
|
|
1170
1169
|
"""
|
|
1171
1170
|
The date the SSH certificate will expire.
|
|
1172
1171
|
"""
|
|
1173
1172
|
return pulumi.get(self, "valid_to")
|
|
1174
1173
|
|
|
1175
|
-
@property
|
|
1174
|
+
@_builtins.property
|
|
1176
1175
|
@pulumi.getter
|
|
1177
|
-
def windows(self) -> pulumi.Output[Optional[
|
|
1176
|
+
def windows(self) -> pulumi.Output[Optional[_builtins.bool]]:
|
|
1178
1177
|
"""
|
|
1179
1178
|
Specifies whether the private key will use Windows/DOS style line breaks.
|
|
1180
1179
|
"""
|