pulumi-venafi 1.8.0a1710160781__py3-none-any.whl → 1.11.0a1736835975__py3-none-any.whl

pulumi_venafi/provider.py

@@ -4,9 +4,14 @@
 
 import copy
 import warnings
+import sys
 import pulumi
 import pulumi.runtime
 from typing import Any, Mapping, Optional, Sequence, Union, overload
+if sys.version_info >= (3, 11):
+    from typing import NotRequired, TypedDict, TypeAlias
+else:
+    from typing_extensions import NotRequired, TypedDict, TypeAlias
 from . import _utilities
 
 __all__ = ['ProviderArgs', 'Provider']
@@ -18,9 +23,11 @@ class ProviderArgs:
                  api_key: Optional[pulumi.Input[str]] = None,
                  client_id: Optional[pulumi.Input[str]] = None,
                  dev_mode: Optional[pulumi.Input[bool]] = None,
+                 external_jwt: Optional[pulumi.Input[str]] = None,
                  p12_cert_filename: Optional[pulumi.Input[str]] = None,
                  p12_cert_password: Optional[pulumi.Input[str]] = None,
                  skip_retirement: Optional[pulumi.Input[bool]] = None,
+                 token_url: Optional[pulumi.Input[str]] = None,
                  tpp_password: Optional[pulumi.Input[str]] = None,
                  tpp_username: Optional[pulumi.Input[str]] = None,
                  trust_bundle: Optional[pulumi.Input[str]] = None,
@@ -29,14 +36,15 @@ class ProviderArgs:
         """
         The set of arguments for constructing a Provider resource.
         :param pulumi.Input[str] access_token: Access token for Venafi TLSPDC, user should use this for authentication
-        :param pulumi.Input[str] api_key: API key for Venafi as a Service. Example: 142231b7-cvb0-412e-886b-6aeght0bc93d
+        :param pulumi.Input[str] api_key: API key for Venafi Control Plane. Example: 142231b7-cvb0-412e-886b-6aeght0bc93d
         :param pulumi.Input[str] client_id: application that will be using the token
         :param pulumi.Input[bool] dev_mode: When set to true, the resulting certificate will be issued by an ephemeral, no trust CA rather than enrolling using
-               Venafi as a Service or Trust Protection Platform. Useful for development and testing.
+               Venafi as a Service or Trust Protection Platform. Useful for development and testing
+        :param pulumi.Input[str] external_jwt: JWT of the identity provider associated to the Venafi Control Plane service account that is granting the access token
         :param pulumi.Input[str] p12_cert_filename: Filename of PKCS#12 keystore containing a client certificate, private key, and chain certificates to authenticate to
                TLSPDC
         :param pulumi.Input[str] p12_cert_password: Password for the PKCS#12 keystore declared in p12_cert
-        :param pulumi.Input[bool] skip_retirement: When true, certificates will not be retired on Venafi platforms when terraform destroy is run. Default is false.
+        :param pulumi.Input[str] token_url: Endpoint URL to request new Venafi Control Plane access tokens
         :param pulumi.Input[str] tpp_password: Password for WebSDK user. Example: password
         :param pulumi.Input[str] tpp_username: WebSDK user for Venafi TLSPDC. Example: admin
         :param pulumi.Input[str] trust_bundle: Use to specify a PEM-formatted file that contains certificates to be trust anchors for all communications with the
@@ -53,12 +61,16 @@ class ProviderArgs:
             pulumi.set(__self__, "client_id", client_id)
         if dev_mode is not None:
             pulumi.set(__self__, "dev_mode", dev_mode)
+        if external_jwt is not None:
+            pulumi.set(__self__, "external_jwt", external_jwt)
         if p12_cert_filename is not None:
             pulumi.set(__self__, "p12_cert_filename", p12_cert_filename)
         if p12_cert_password is not None:
             pulumi.set(__self__, "p12_cert_password", p12_cert_password)
         if skip_retirement is not None:
             pulumi.set(__self__, "skip_retirement", skip_retirement)
+        if token_url is not None:
+            pulumi.set(__self__, "token_url", token_url)
         if tpp_password is not None:
             warnings.warn(""", please use access_token instead""", DeprecationWarning)
             pulumi.log.warn("""tpp_password is deprecated: , please use access_token instead""")
@@ -92,7 +104,7 @@ class ProviderArgs:
     @pulumi.getter(name="apiKey")
     def api_key(self) -> Optional[pulumi.Input[str]]:
         """
-        API key for Venafi as a Service. Example: 142231b7-cvb0-412e-886b-6aeght0bc93d
+        API key for Venafi Control Plane. Example: 142231b7-cvb0-412e-886b-6aeght0bc93d
         """
         return pulumi.get(self, "api_key")
 
@@ -117,7 +129,7 @@ class ProviderArgs:
     def dev_mode(self) -> Optional[pulumi.Input[bool]]:
         """
         When set to true, the resulting certificate will be issued by an ephemeral, no trust CA rather than enrolling using
-        Venafi as a Service or Trust Protection Platform. Useful for development and testing.
+        Venafi as a Service or Trust Protection Platform. Useful for development and testing
         """
         return pulumi.get(self, "dev_mode")
 
@@ -125,6 +137,18 @@ class ProviderArgs:
     def dev_mode(self, value: Optional[pulumi.Input[bool]]):
         pulumi.set(self, "dev_mode", value)
 
+    @property
+    @pulumi.getter(name="externalJwt")
+    def external_jwt(self) -> Optional[pulumi.Input[str]]:
+        """
+        JWT of the identity provider associated to the Venafi Control Plane service account that is granting the access token
+        """
+        return pulumi.get(self, "external_jwt")
+
+    @external_jwt.setter
+    def external_jwt(self, value: Optional[pulumi.Input[str]]):
+        pulumi.set(self, "external_jwt", value)
+
     @property
     @pulumi.getter(name="p12CertFilename")
     def p12_cert_filename(self) -> Optional[pulumi.Input[str]]:
@@ -153,24 +177,31 @@ class ProviderArgs:
     @property
     @pulumi.getter(name="skipRetirement")
     def skip_retirement(self) -> Optional[pulumi.Input[bool]]:
-        """
-        When true, certificates will not be retired on Venafi platforms when terraform destroy is run. Default is false.
-        """
         return pulumi.get(self, "skip_retirement")
 
     @skip_retirement.setter
     def skip_retirement(self, value: Optional[pulumi.Input[bool]]):
         pulumi.set(self, "skip_retirement", value)
 
+    @property
+    @pulumi.getter(name="tokenUrl")
+    def token_url(self) -> Optional[pulumi.Input[str]]:
+        """
+        Endpoint URL to request new Venafi Control Plane access tokens
+        """
+        return pulumi.get(self, "token_url")
+
+    @token_url.setter
+    def token_url(self, value: Optional[pulumi.Input[str]]):
+        pulumi.set(self, "token_url", value)
+
     @property
     @pulumi.getter(name="tppPassword")
+    @_utilities.deprecated(""", please use access_token instead""")
     def tpp_password(self) -> Optional[pulumi.Input[str]]:
         """
         Password for WebSDK user. Example: password
         """
-        warnings.warn(""", please use access_token instead""", DeprecationWarning)
-        pulumi.log.warn("""tpp_password is deprecated: , please use access_token instead""")
-
         return pulumi.get(self, "tpp_password")
 
     @tpp_password.setter
@@ -179,13 +210,11 @@ class ProviderArgs:
 
     @property
     @pulumi.getter(name="tppUsername")
+    @_utilities.deprecated(""", please use access_token instead""")
     def tpp_username(self) -> Optional[pulumi.Input[str]]:
         """
         WebSDK user for Venafi TLSPDC. Example: admin
         """
-        warnings.warn(""", please use access_token instead""", DeprecationWarning)
-        pulumi.log.warn("""tpp_username is deprecated: , please use access_token instead""")
-
         return pulumi.get(self, "tpp_username")
 
     @tpp_username.setter
@@ -240,9 +269,11 @@ class Provider(pulumi.ProviderResource):
                  api_key: Optional[pulumi.Input[str]] = None,
                  client_id: Optional[pulumi.Input[str]] = None,
                  dev_mode: Optional[pulumi.Input[bool]] = None,
+                 external_jwt: Optional[pulumi.Input[str]] = None,
                  p12_cert_filename: Optional[pulumi.Input[str]] = None,
                  p12_cert_password: Optional[pulumi.Input[str]] = None,
                  skip_retirement: Optional[pulumi.Input[bool]] = None,
+                 token_url: Optional[pulumi.Input[str]] = None,
                  tpp_password: Optional[pulumi.Input[str]] = None,
                  tpp_username: Optional[pulumi.Input[str]] = None,
                  trust_bundle: Optional[pulumi.Input[str]] = None,
@@ -258,14 +289,15 @@ class Provider(pulumi.ProviderResource):
         :param str resource_name: The name of the resource.
         :param pulumi.ResourceOptions opts: Options for the resource.
         :param pulumi.Input[str] access_token: Access token for Venafi TLSPDC, user should use this for authentication
-        :param pulumi.Input[str] api_key: API key for Venafi as a Service. Example: 142231b7-cvb0-412e-886b-6aeght0bc93d
+        :param pulumi.Input[str] api_key: API key for Venafi Control Plane. Example: 142231b7-cvb0-412e-886b-6aeght0bc93d
         :param pulumi.Input[str] client_id: application that will be using the token
         :param pulumi.Input[bool] dev_mode: When set to true, the resulting certificate will be issued by an ephemeral, no trust CA rather than enrolling using
-               Venafi as a Service or Trust Protection Platform. Useful for development and testing.
+               Venafi as a Service or Trust Protection Platform. Useful for development and testing
+        :param pulumi.Input[str] external_jwt: JWT of the identity provider associated to the Venafi Control Plane service account that is granting the access token
         :param pulumi.Input[str] p12_cert_filename: Filename of PKCS#12 keystore containing a client certificate, private key, and chain certificates to authenticate to
                TLSPDC
         :param pulumi.Input[str] p12_cert_password: Password for the PKCS#12 keystore declared in p12_cert
-        :param pulumi.Input[bool] skip_retirement: When true, certificates will not be retired on Venafi platforms when terraform destroy is run. Default is false.
+        :param pulumi.Input[str] token_url: Endpoint URL to request new Venafi Control Plane access tokens
         :param pulumi.Input[str] tpp_password: Password for WebSDK user. Example: password
         :param pulumi.Input[str] tpp_username: WebSDK user for Venafi TLSPDC. Example: admin
         :param pulumi.Input[str] trust_bundle: Use to specify a PEM-formatted file that contains certificates to be trust anchors for all communications with the
@@ -305,9 +337,11 @@ class Provider(pulumi.ProviderResource):
                  api_key: Optional[pulumi.Input[str]] = None,
                  client_id: Optional[pulumi.Input[str]] = None,
                  dev_mode: Optional[pulumi.Input[bool]] = None,
+                 external_jwt: Optional[pulumi.Input[str]] = None,
                  p12_cert_filename: Optional[pulumi.Input[str]] = None,
                  p12_cert_password: Optional[pulumi.Input[str]] = None,
                  skip_retirement: Optional[pulumi.Input[bool]] = None,
+                 token_url: Optional[pulumi.Input[str]] = None,
                  tpp_password: Optional[pulumi.Input[str]] = None,
                  tpp_username: Optional[pulumi.Input[str]] = None,
                  trust_bundle: Optional[pulumi.Input[str]] = None,
@@ -326,15 +360,17 @@ class Provider(pulumi.ProviderResource):
             __props__.__dict__["api_key"] = None if api_key is None else pulumi.Output.secret(api_key)
             __props__.__dict__["client_id"] = client_id
             __props__.__dict__["dev_mode"] = pulumi.Output.from_input(dev_mode).apply(pulumi.runtime.to_json) if dev_mode is not None else None
+            __props__.__dict__["external_jwt"] = None if external_jwt is None else pulumi.Output.secret(external_jwt)
             __props__.__dict__["p12_cert_filename"] = p12_cert_filename
             __props__.__dict__["p12_cert_password"] = None if p12_cert_password is None else pulumi.Output.secret(p12_cert_password)
             __props__.__dict__["skip_retirement"] = pulumi.Output.from_input(skip_retirement).apply(pulumi.runtime.to_json) if skip_retirement is not None else None
+            __props__.__dict__["token_url"] = None if token_url is None else pulumi.Output.secret(token_url)
             __props__.__dict__["tpp_password"] = None if tpp_password is None else pulumi.Output.secret(tpp_password)
             __props__.__dict__["tpp_username"] = tpp_username
             __props__.__dict__["trust_bundle"] = trust_bundle
             __props__.__dict__["url"] = url
             __props__.__dict__["zone"] = zone
-        secret_opts = pulumi.ResourceOptions(additional_secret_outputs=["accessToken", "apiKey", "p12CertPassword", "tppPassword"])
+        secret_opts = pulumi.ResourceOptions(additional_secret_outputs=["accessToken", "apiKey", "externalJwt", "p12CertPassword", "tokenUrl", "tppPassword"])
         opts = pulumi.ResourceOptions.merge(opts, secret_opts)
         super(Provider, __self__).__init__(
             'venafi',
@@ -354,7 +390,7 @@ class Provider(pulumi.ProviderResource):
     @pulumi.getter(name="apiKey")
     def api_key(self) -> pulumi.Output[Optional[str]]:
         """
-        API key for Venafi as a Service. Example: 142231b7-cvb0-412e-886b-6aeght0bc93d
+        API key for Venafi Control Plane. Example: 142231b7-cvb0-412e-886b-6aeght0bc93d
         """
         return pulumi.get(self, "api_key")
 
@@ -366,6 +402,14 @@ class Provider(pulumi.ProviderResource):
         """
         return pulumi.get(self, "client_id")
 
+    @property
+    @pulumi.getter(name="externalJwt")
+    def external_jwt(self) -> pulumi.Output[Optional[str]]:
+        """
+        JWT of the identity provider associated to the Venafi Control Plane service account that is granting the access token
+        """
+        return pulumi.get(self, "external_jwt")
+
     @property
     @pulumi.getter(name="p12CertFilename")
     def p12_cert_filename(self) -> pulumi.Output[Optional[str]]:
@@ -383,26 +427,30 @@ class Provider(pulumi.ProviderResource):
         """
         return pulumi.get(self, "p12_cert_password")
 
+    @property
+    @pulumi.getter(name="tokenUrl")
+    def token_url(self) -> pulumi.Output[Optional[str]]:
+        """
+        Endpoint URL to request new Venafi Control Plane access tokens
+        """
+        return pulumi.get(self, "token_url")
+
     @property
     @pulumi.getter(name="tppPassword")
+    @_utilities.deprecated(""", please use access_token instead""")
     def tpp_password(self) -> pulumi.Output[Optional[str]]:
         """
         Password for WebSDK user. Example: password
         """
-        warnings.warn(""", please use access_token instead""", DeprecationWarning)
-        pulumi.log.warn("""tpp_password is deprecated: , please use access_token instead""")
-
         return pulumi.get(self, "tpp_password")
 
     @property
     @pulumi.getter(name="tppUsername")
+    @_utilities.deprecated(""", please use access_token instead""")
     def tpp_username(self) -> pulumi.Output[Optional[str]]:
         """
         WebSDK user for Venafi TLSPDC. Example: admin
         """
-        warnings.warn(""", please use access_token instead""", DeprecationWarning)
-        pulumi.log.warn("""tpp_username is deprecated: , please use access_token instead""")
-
         return pulumi.get(self, "tpp_username")
 
     @property

pulumi_venafi/pulumi-plugin.json

@@ -1,4 +1,5 @@
 {
   "resource": true,
-  "name": "venafi"
+  "name": "venafi",
+  "version": "1.11.0-alpha.1736835975"
 }