pulumi-venafi 1.8.0a1710160781__py3-none-any.whl → 1.11.0a1736835975__py3-none-any.whl

This diff represents the content of publicly available package versions that have been released to one of the supported registries. The information contained in this diff is provided for informational purposes only and reflects changes between package versions as they appear in their respective public registries.

Potentially problematic release.

This version of pulumi-venafi might be problematic. Click here for more details.

Files changed (18) hide show
  1. pulumi_venafi/__init__.py +11 -0
  2. pulumi_venafi/_utilities.py +41 -5
  3. pulumi_venafi/certificate.py +459 -190
  4. pulumi_venafi/cloud_keystore_installation.py +409 -0
  5. pulumi_venafi/config/__init__.pyi +17 -2
  6. pulumi_venafi/config/vars.py +21 -2
  7. pulumi_venafi/get_cloud_keystore.py +166 -0
  8. pulumi_venafi/get_cloud_provider.py +167 -0
  9. pulumi_venafi/policy.py +58 -65
  10. pulumi_venafi/provider.py +73 -25
  11. pulumi_venafi/pulumi-plugin.json +2 -1
  12. pulumi_venafi/ssh_certificate.py +126 -75
  13. pulumi_venafi/ssh_config.py +5 -4
  14. {pulumi_venafi-1.8.0a1710160781.dist-info → pulumi_venafi-1.11.0a1736835975.dist-info}/METADATA +7 -6
  15. pulumi_venafi-1.11.0a1736835975.dist-info/RECORD +19 -0
  16. {pulumi_venafi-1.8.0a1710160781.dist-info → pulumi_venafi-1.11.0a1736835975.dist-info}/WHEEL +1 -1
  17. pulumi_venafi-1.8.0a1710160781.dist-info/RECORD +0 -16
  18. {pulumi_venafi-1.8.0a1710160781.dist-info → pulumi_venafi-1.11.0a1736835975.dist-info}/top_level.txt +0 -0
pulumi_venafi/ssh_certificate.py CHANGED
@@ -4,9 +4,14 @@
4
4
 
5
5
  import copy
6
6
  import warnings
7
+ import sys
7
8
  import pulumi
8
9
  import pulumi.runtime
9
10
  from typing import Any, Mapping, Optional, Sequence, Union, overload
11
+ if sys.version_info >= (3, 11):
12
+ from typing import NotRequired, TypedDict, TypeAlias
13
+ else:
14
+ from typing_extensions import NotRequired, TypedDict, TypeAlias
10
15
  from . import _utilities
11
16
 
12
17
  __all__ = ['SshCertificateArgs', 'SshCertificate']
@@ -34,18 +39,26 @@ class SshCertificateArgs:
34
39
  The set of arguments for constructing a SshCertificate resource.
35
40
  :param pulumi.Input[str] key_id: The identifier of the requested SSH certificate.
36
41
  :param pulumi.Input[str] template: The SSH certificate issuing template.
37
- :param pulumi.Input[Sequence[pulumi.Input[str]]] destination_addresses: A list of one or more valid IP or CIDR destination hosts where the certificate will authenticate.
38
- :param pulumi.Input[Sequence[pulumi.Input[str]]] extensions: A list of key-value pairs that contain certificate extensions from the CA template for client certificates. Allowed values (case-sensitive): *permit-X11-forwarding, permit-agent-forwarding, permit-port-forwarding, permit-pty, permit-user-rc*
42
+ :param pulumi.Input[Sequence[pulumi.Input[str]]] destination_addresses: A list of one or more valid IP or CIDR destination hosts where the
43
+ certificate will authenticate.
44
+ :param pulumi.Input[Sequence[pulumi.Input[str]]] extensions: A list of key-value pairs that contain certificate extensions from the CA
45
+ template for client certificates. Allowed values (case-sensitive): `permit-X11-forwarding`, `permit-agent-forwarding`,
46
+ `permit-port-forwarding`, `permit-pty`, `permit-user-rc`.
39
47
  :param pulumi.Input[str] folder: The DN of the policy folder where the SSH certificate object will be created.
40
48
  :param pulumi.Input[str] force_command: A command to run after successful login.
41
49
  :param pulumi.Input[str] key_passphrase: Passphrase for encrypting the private key.
42
- :param pulumi.Input[int] key_size: Number of bits to use when creating a key pair. (e.g. 3072)
43
- :param pulumi.Input[str] object_name: The friendly name of the SSH certificate object. When not specified the `key_id` is used for the friendly name. If the object already exists the old certificate is archived and the CA issues a new certificate.
44
- :param pulumi.Input[Sequence[pulumi.Input[str]]] principal: [DEPRECATED] - (Optional, set of strings) Use "principals" instead. A list of user names for whom the requested certificate will be valid.
45
- :param pulumi.Input[Sequence[pulumi.Input[str]]] principals: A list of user names for whom the requested certificate will be valid.
50
+ :param pulumi.Input[int] key_size: Number of bits to use when creating a key pair. (e.g. `3072`).
51
+ :param pulumi.Input[str] object_name: The friendly name of the SSH certificate object. When not specified the `key_id`
52
+ is used for the friendly name. If the object already exists the old certificate is archived and the CA issues a new
53
+ certificate.
54
+ :param pulumi.Input[Sequence[pulumi.Input[str]]] principal: [DEPRECATED] - (Optional, set of strings) Use "principals" instead. A list of usernames for whom the
55
+ requested certificate will be valid.
56
+ :param pulumi.Input[Sequence[pulumi.Input[str]]] principals: A list of usernames for whom the requested certificate will be valid.
46
57
  :param pulumi.Input[str] public_key: The OpenSSH formatted public key that will be used to generate the SSH certificate.
47
- :param pulumi.Input[str] public_key_method: Specifies whether the public key will be "local" (default), "file" or "service" generated.
48
- :param pulumi.Input[Sequence[pulumi.Input[str]]] source_addresses: A list of one or more valid IP or CIDR addresses that can use the SSH certificate.
58
+ :param pulumi.Input[str] public_key_method: Specifies whether the public key will be `local` (default), `file` or
59
+ `service` generated.
60
+ :param pulumi.Input[Sequence[pulumi.Input[str]]] source_addresses: A list of one or more valid IP or CIDR addresses that can use the SSH
61
+ certificate.
49
62
  :param pulumi.Input[int] valid_hours: Desired number of hours for which the certificate will be valid.
50
63
  :param pulumi.Input[bool] windows: Specifies whether the private key will use Windows/DOS style line breaks.
51
64
  """
@@ -111,7 +124,8 @@ class SshCertificateArgs:
111
124
  @pulumi.getter(name="destinationAddresses")
112
125
  def destination_addresses(self) -> Optional[pulumi.Input[Sequence[pulumi.Input[str]]]]:
113
126
  """
114
- A list of one or more valid IP or CIDR destination hosts where the certificate will authenticate.
127
+ A list of one or more valid IP or CIDR destination hosts where the
128
+ certificate will authenticate.
115
129
  """
116
130
  return pulumi.get(self, "destination_addresses")
117
131
 
@@ -123,7 +137,9 @@ class SshCertificateArgs:
123
137
  @pulumi.getter
124
138
  def extensions(self) -> Optional[pulumi.Input[Sequence[pulumi.Input[str]]]]:
125
139
  """
126
- A list of key-value pairs that contain certificate extensions from the CA template for client certificates. Allowed values (case-sensitive): *permit-X11-forwarding, permit-agent-forwarding, permit-port-forwarding, permit-pty, permit-user-rc*
140
+ A list of key-value pairs that contain certificate extensions from the CA
141
+ template for client certificates. Allowed values (case-sensitive): `permit-X11-forwarding`, `permit-agent-forwarding`,
142
+ `permit-port-forwarding`, `permit-pty`, `permit-user-rc`.
127
143
  """
128
144
  return pulumi.get(self, "extensions")
129
145
 
@@ -171,7 +187,7 @@ class SshCertificateArgs:
171
187
  @pulumi.getter(name="keySize")
172
188
  def key_size(self) -> Optional[pulumi.Input[int]]:
173
189
  """
174
- Number of bits to use when creating a key pair. (e.g. 3072)
190
+ Number of bits to use when creating a key pair. (e.g. `3072`).
175
191
  """
176
192
  return pulumi.get(self, "key_size")
177
193
 
@@ -183,7 +199,9 @@ class SshCertificateArgs:
183
199
  @pulumi.getter(name="objectName")
184
200
  def object_name(self) -> Optional[pulumi.Input[str]]:
185
201
  """
186
- The friendly name of the SSH certificate object. When not specified the `key_id` is used for the friendly name. If the object already exists the old certificate is archived and the CA issues a new certificate.
202
+ The friendly name of the SSH certificate object. When not specified the `key_id`
203
+ is used for the friendly name. If the object already exists the old certificate is archived and the CA issues a new
204
+ certificate.
187
205
  """
188
206
  return pulumi.get(self, "object_name")
189
207
 
@@ -193,13 +211,12 @@ class SshCertificateArgs:
193
211
 
194
212
  @property
195
213
  @pulumi.getter
214
+ @_utilities.deprecated("""This will be removed in the future. Use \"principals\" instead""")
196
215
  def principal(self) -> Optional[pulumi.Input[Sequence[pulumi.Input[str]]]]:
197
216
  """
198
- [DEPRECATED] - (Optional, set of strings) Use "principals" instead. A list of user names for whom the requested certificate will be valid.
217
+ [DEPRECATED] - (Optional, set of strings) Use "principals" instead. A list of usernames for whom the
218
+ requested certificate will be valid.
199
219
  """
200
- warnings.warn("""This will be removed in the future. Use \"principals\" instead""", DeprecationWarning)
201
- pulumi.log.warn("""principal is deprecated: This will be removed in the future. Use \"principals\" instead""")
202
-
203
220
  return pulumi.get(self, "principal")
204
221
 
205
222
  @principal.setter
@@ -210,7 +227,7 @@ class SshCertificateArgs:
210
227
  @pulumi.getter
211
228
  def principals(self) -> Optional[pulumi.Input[Sequence[pulumi.Input[str]]]]:
212
229
  """
213
- A list of user names for whom the requested certificate will be valid.
230
+ A list of usernames for whom the requested certificate will be valid.
214
231
  """
215
232
  return pulumi.get(self, "principals")
216
233
 
@@ -234,7 +251,8 @@ class SshCertificateArgs:
234
251
  @pulumi.getter(name="publicKeyMethod")
235
252
  def public_key_method(self) -> Optional[pulumi.Input[str]]:
236
253
  """
237
- Specifies whether the public key will be "local" (default), "file" or "service" generated.
254
+ Specifies whether the public key will be `local` (default), `file` or
255
+ `service` generated.
238
256
  """
239
257
  return pulumi.get(self, "public_key_method")
240
258
 
@@ -246,7 +264,8 @@ class SshCertificateArgs:
246
264
  @pulumi.getter(name="sourceAddresses")
247
265
  def source_addresses(self) -> Optional[pulumi.Input[Sequence[pulumi.Input[str]]]]:
248
266
  """
249
- A list of one or more valid IP or CIDR addresses that can use the SSH certificate.
267
+ A list of one or more valid IP or CIDR addresses that can use the SSH
268
+ certificate.
250
269
  """
251
270
  return pulumi.get(self, "source_addresses")
252
271
 
@@ -310,23 +329,31 @@ class _SshCertificateState:
310
329
  Input properties used for looking up and filtering SshCertificate resources.
311
330
  :param pulumi.Input[str] certificate: The issued SSH certificate.
312
331
  :param pulumi.Input[str] certificate_type: Indicates whether the SSH certificate is for client or server authentication.
313
- :param pulumi.Input[Sequence[pulumi.Input[str]]] destination_addresses: A list of one or more valid IP or CIDR destination hosts where the certificate will authenticate.
314
- :param pulumi.Input[Sequence[pulumi.Input[str]]] extensions: A list of key-value pairs that contain certificate extensions from the CA template for client certificates. Allowed values (case-sensitive): *permit-X11-forwarding, permit-agent-forwarding, permit-port-forwarding, permit-pty, permit-user-rc*
332
+ :param pulumi.Input[Sequence[pulumi.Input[str]]] destination_addresses: A list of one or more valid IP or CIDR destination hosts where the
333
+ certificate will authenticate.
334
+ :param pulumi.Input[Sequence[pulumi.Input[str]]] extensions: A list of key-value pairs that contain certificate extensions from the CA
335
+ template for client certificates. Allowed values (case-sensitive): `permit-X11-forwarding`, `permit-agent-forwarding`,
336
+ `permit-port-forwarding`, `permit-pty`, `permit-user-rc`.
315
337
  :param pulumi.Input[str] folder: The DN of the policy folder where the SSH certificate object will be created.
316
338
  :param pulumi.Input[str] force_command: A command to run after successful login.
317
339
  :param pulumi.Input[str] key_id: The identifier of the requested SSH certificate.
318
340
  :param pulumi.Input[str] key_passphrase: Passphrase for encrypting the private key.
319
- :param pulumi.Input[int] key_size: Number of bits to use when creating a key pair. (e.g. 3072)
320
- :param pulumi.Input[str] object_name: The friendly name of the SSH certificate object. When not specified the `key_id` is used for the friendly name. If the object already exists the old certificate is archived and the CA issues a new certificate.
321
- :param pulumi.Input[Sequence[pulumi.Input[str]]] principal: [DEPRECATED] - (Optional, set of strings) Use "principals" instead. A list of user names for whom the requested certificate will be valid.
322
- :param pulumi.Input[Sequence[pulumi.Input[str]]] principals: A list of user names for whom the requested certificate will be valid.
341
+ :param pulumi.Input[int] key_size: Number of bits to use when creating a key pair. (e.g. `3072`).
342
+ :param pulumi.Input[str] object_name: The friendly name of the SSH certificate object. When not specified the `key_id`
343
+ is used for the friendly name. If the object already exists the old certificate is archived and the CA issues a new
344
+ certificate.
345
+ :param pulumi.Input[Sequence[pulumi.Input[str]]] principal: [DEPRECATED] - (Optional, set of strings) Use "principals" instead. A list of usernames for whom the
346
+ requested certificate will be valid.
347
+ :param pulumi.Input[Sequence[pulumi.Input[str]]] principals: A list of usernames for whom the requested certificate will be valid.
323
348
  :param pulumi.Input[str] private_key: The private key for the SSH certificate if generated by Venafi.
324
349
  :param pulumi.Input[str] public_key: The OpenSSH formatted public key that will be used to generate the SSH certificate.
325
350
  :param pulumi.Input[str] public_key_fingerprint: The SHA256 fingerprint of the SSH certificate's public key.
326
- :param pulumi.Input[str] public_key_method: Specifies whether the public key will be "local" (default), "file" or "service" generated.
351
+ :param pulumi.Input[str] public_key_method: Specifies whether the public key will be `local` (default), `file` or
352
+ `service` generated.
327
353
  :param pulumi.Input[str] serial: The serial number of the SSH certificate.
328
354
  :param pulumi.Input[str] signing_ca: The SHA256 fingerprint of the CA that signed the SSH certificate.
329
- :param pulumi.Input[Sequence[pulumi.Input[str]]] source_addresses: A list of one or more valid IP or CIDR addresses that can use the SSH certificate.
355
+ :param pulumi.Input[Sequence[pulumi.Input[str]]] source_addresses: A list of one or more valid IP or CIDR addresses that can use the SSH
356
+ certificate.
330
357
  :param pulumi.Input[str] template: The SSH certificate issuing template.
331
358
  :param pulumi.Input[str] valid_from: The date the SSH certificate was issued.
332
359
  :param pulumi.Input[int] valid_hours: Desired number of hours for which the certificate will be valid.
@@ -413,7 +440,8 @@ class _SshCertificateState:
413
440
  @pulumi.getter(name="destinationAddresses")
414
441
  def destination_addresses(self) -> Optional[pulumi.Input[Sequence[pulumi.Input[str]]]]:
415
442
  """
416
- A list of one or more valid IP or CIDR destination hosts where the certificate will authenticate.
443
+ A list of one or more valid IP or CIDR destination hosts where the
444
+ certificate will authenticate.
417
445
  """
418
446
  return pulumi.get(self, "destination_addresses")
419
447
 
@@ -425,7 +453,9 @@ class _SshCertificateState:
425
453
  @pulumi.getter
426
454
  def extensions(self) -> Optional[pulumi.Input[Sequence[pulumi.Input[str]]]]:
427
455
  """
428
- A list of key-value pairs that contain certificate extensions from the CA template for client certificates. Allowed values (case-sensitive): *permit-X11-forwarding, permit-agent-forwarding, permit-port-forwarding, permit-pty, permit-user-rc*
456
+ A list of key-value pairs that contain certificate extensions from the CA
457
+ template for client certificates. Allowed values (case-sensitive): `permit-X11-forwarding`, `permit-agent-forwarding`,
458
+ `permit-port-forwarding`, `permit-pty`, `permit-user-rc`.
429
459
  """
430
460
  return pulumi.get(self, "extensions")
431
461
 
@@ -485,7 +515,7 @@ class _SshCertificateState:
485
515
  @pulumi.getter(name="keySize")
486
516
  def key_size(self) -> Optional[pulumi.Input[int]]:
487
517
  """
488
- Number of bits to use when creating a key pair. (e.g. 3072)
518
+ Number of bits to use when creating a key pair. (e.g. `3072`).
489
519
  """
490
520
  return pulumi.get(self, "key_size")
491
521
 
@@ -497,7 +527,9 @@ class _SshCertificateState:
497
527
  @pulumi.getter(name="objectName")
498
528
  def object_name(self) -> Optional[pulumi.Input[str]]:
499
529
  """
500
- The friendly name of the SSH certificate object. When not specified the `key_id` is used for the friendly name. If the object already exists the old certificate is archived and the CA issues a new certificate.
530
+ The friendly name of the SSH certificate object. When not specified the `key_id`
531
+ is used for the friendly name. If the object already exists the old certificate is archived and the CA issues a new
532
+ certificate.
501
533
  """
502
534
  return pulumi.get(self, "object_name")
503
535
 
@@ -507,13 +539,12 @@ class _SshCertificateState:
507
539
 
508
540
  @property
509
541
  @pulumi.getter
542
+ @_utilities.deprecated("""This will be removed in the future. Use \"principals\" instead""")
510
543
  def principal(self) -> Optional[pulumi.Input[Sequence[pulumi.Input[str]]]]:
511
544
  """
512
- [DEPRECATED] - (Optional, set of strings) Use "principals" instead. A list of user names for whom the requested certificate will be valid.
545
+ [DEPRECATED] - (Optional, set of strings) Use "principals" instead. A list of usernames for whom the
546
+ requested certificate will be valid.
513
547
  """
514
- warnings.warn("""This will be removed in the future. Use \"principals\" instead""", DeprecationWarning)
515
- pulumi.log.warn("""principal is deprecated: This will be removed in the future. Use \"principals\" instead""")
516
-
517
548
  return pulumi.get(self, "principal")
518
549
 
519
550
  @principal.setter
@@ -524,7 +555,7 @@ class _SshCertificateState:
524
555
  @pulumi.getter
525
556
  def principals(self) -> Optional[pulumi.Input[Sequence[pulumi.Input[str]]]]:
526
557
  """
527
- A list of user names for whom the requested certificate will be valid.
558
+ A list of usernames for whom the requested certificate will be valid.
528
559
  """
529
560
  return pulumi.get(self, "principals")
530
561
 
@@ -572,7 +603,8 @@ class _SshCertificateState:
572
603
  @pulumi.getter(name="publicKeyMethod")
573
604
  def public_key_method(self) -> Optional[pulumi.Input[str]]:
574
605
  """
575
- Specifies whether the public key will be "local" (default), "file" or "service" generated.
606
+ Specifies whether the public key will be `local` (default), `file` or
607
+ `service` generated.
576
608
  """
577
609
  return pulumi.get(self, "public_key_method")
578
610
 
@@ -608,7 +640,8 @@ class _SshCertificateState:
608
640
  @pulumi.getter(name="sourceAddresses")
609
641
  def source_addresses(self) -> Optional[pulumi.Input[Sequence[pulumi.Input[str]]]]:
610
642
  """
611
- A list of one or more valid IP or CIDR addresses that can use the SSH certificate.
643
+ A list of one or more valid IP or CIDR addresses that can use the SSH
644
+ certificate.
612
645
  """
613
646
  return pulumi.get(self, "source_addresses")
614
647
 
@@ -704,37 +737,43 @@ class SshCertificate(pulumi.CustomResource):
704
737
 
705
738
  ## Example Usage
706
739
 
707
- <!--Start PulumiCodeChooser -->
708
740
  ```python
709
741
  import pulumi
710
742
  import pulumi_venafi as venafi
711
743
 
712
- ssh_cert = venafi.SshCertificate("sshCert",
744
+ ssh_cert = venafi.SshCertificate("ssh_cert",
713
745
  key_id="my-first-ssh-certificate",
746
+ template="Sample SSH CA",
747
+ public_key_method="local",
714
748
  key_passphrase="passw0rd",
715
749
  key_size=3072,
716
750
  principals=["seamus"],
717
- public_key_method="local",
718
- template="Sample SSH CA",
719
751
  valid_hours=24)
720
752
  ```
721
- <!--End PulumiCodeChooser -->
722
753
 
723
754
  :param str resource_name: The name of the resource.
724
755
  :param pulumi.ResourceOptions opts: Options for the resource.
725
- :param pulumi.Input[Sequence[pulumi.Input[str]]] destination_addresses: A list of one or more valid IP or CIDR destination hosts where the certificate will authenticate.
726
- :param pulumi.Input[Sequence[pulumi.Input[str]]] extensions: A list of key-value pairs that contain certificate extensions from the CA template for client certificates. Allowed values (case-sensitive): *permit-X11-forwarding, permit-agent-forwarding, permit-port-forwarding, permit-pty, permit-user-rc*
756
+ :param pulumi.Input[Sequence[pulumi.Input[str]]] destination_addresses: A list of one or more valid IP or CIDR destination hosts where the
757
+ certificate will authenticate.
758
+ :param pulumi.Input[Sequence[pulumi.Input[str]]] extensions: A list of key-value pairs that contain certificate extensions from the CA
759
+ template for client certificates. Allowed values (case-sensitive): `permit-X11-forwarding`, `permit-agent-forwarding`,
760
+ `permit-port-forwarding`, `permit-pty`, `permit-user-rc`.
727
761
  :param pulumi.Input[str] folder: The DN of the policy folder where the SSH certificate object will be created.
728
762
  :param pulumi.Input[str] force_command: A command to run after successful login.
729
763
  :param pulumi.Input[str] key_id: The identifier of the requested SSH certificate.
730
764
  :param pulumi.Input[str] key_passphrase: Passphrase for encrypting the private key.
731
- :param pulumi.Input[int] key_size: Number of bits to use when creating a key pair. (e.g. 3072)
732
- :param pulumi.Input[str] object_name: The friendly name of the SSH certificate object. When not specified the `key_id` is used for the friendly name. If the object already exists the old certificate is archived and the CA issues a new certificate.
733
- :param pulumi.Input[Sequence[pulumi.Input[str]]] principal: [DEPRECATED] - (Optional, set of strings) Use "principals" instead. A list of user names for whom the requested certificate will be valid.
734
- :param pulumi.Input[Sequence[pulumi.Input[str]]] principals: A list of user names for whom the requested certificate will be valid.
765
+ :param pulumi.Input[int] key_size: Number of bits to use when creating a key pair. (e.g. `3072`).
766
+ :param pulumi.Input[str] object_name: The friendly name of the SSH certificate object. When not specified the `key_id`
767
+ is used for the friendly name. If the object already exists the old certificate is archived and the CA issues a new
768
+ certificate.
769
+ :param pulumi.Input[Sequence[pulumi.Input[str]]] principal: [DEPRECATED] - (Optional, set of strings) Use "principals" instead. A list of usernames for whom the
770
+ requested certificate will be valid.
771
+ :param pulumi.Input[Sequence[pulumi.Input[str]]] principals: A list of usernames for whom the requested certificate will be valid.
735
772
  :param pulumi.Input[str] public_key: The OpenSSH formatted public key that will be used to generate the SSH certificate.
736
- :param pulumi.Input[str] public_key_method: Specifies whether the public key will be "local" (default), "file" or "service" generated.
737
- :param pulumi.Input[Sequence[pulumi.Input[str]]] source_addresses: A list of one or more valid IP or CIDR addresses that can use the SSH certificate.
773
+ :param pulumi.Input[str] public_key_method: Specifies whether the public key will be `local` (default), `file` or
774
+ `service` generated.
775
+ :param pulumi.Input[Sequence[pulumi.Input[str]]] source_addresses: A list of one or more valid IP or CIDR addresses that can use the SSH
776
+ certificate.
738
777
  :param pulumi.Input[str] template: The SSH certificate issuing template.
739
778
  :param pulumi.Input[int] valid_hours: Desired number of hours for which the certificate will be valid.
740
779
  :param pulumi.Input[bool] windows: Specifies whether the private key will use Windows/DOS style line breaks.
@@ -750,21 +789,19 @@ class SshCertificate(pulumi.CustomResource):
750
789
 
751
790
  ## Example Usage
752
791
 
753
- <!--Start PulumiCodeChooser -->
754
792
  ```python
755
793
  import pulumi
756
794
  import pulumi_venafi as venafi
757
795
 
758
- ssh_cert = venafi.SshCertificate("sshCert",
796
+ ssh_cert = venafi.SshCertificate("ssh_cert",
759
797
  key_id="my-first-ssh-certificate",
798
+ template="Sample SSH CA",
799
+ public_key_method="local",
760
800
  key_passphrase="passw0rd",
761
801
  key_size=3072,
762
802
  principals=["seamus"],
763
- public_key_method="local",
764
- template="Sample SSH CA",
765
803
  valid_hours=24)
766
804
  ```
767
- <!--End PulumiCodeChooser -->
768
805
 
769
806
  :param str resource_name: The name of the resource.
770
807
  :param SshCertificateArgs args: The arguments to use to populate this resource's properties.
@@ -879,23 +916,31 @@ class SshCertificate(pulumi.CustomResource):
879
916
  :param pulumi.ResourceOptions opts: Options for the resource.
880
917
  :param pulumi.Input[str] certificate: The issued SSH certificate.
881
918
  :param pulumi.Input[str] certificate_type: Indicates whether the SSH certificate is for client or server authentication.
882
- :param pulumi.Input[Sequence[pulumi.Input[str]]] destination_addresses: A list of one or more valid IP or CIDR destination hosts where the certificate will authenticate.
883
- :param pulumi.Input[Sequence[pulumi.Input[str]]] extensions: A list of key-value pairs that contain certificate extensions from the CA template for client certificates. Allowed values (case-sensitive): *permit-X11-forwarding, permit-agent-forwarding, permit-port-forwarding, permit-pty, permit-user-rc*
919
+ :param pulumi.Input[Sequence[pulumi.Input[str]]] destination_addresses: A list of one or more valid IP or CIDR destination hosts where the
920
+ certificate will authenticate.
921
+ :param pulumi.Input[Sequence[pulumi.Input[str]]] extensions: A list of key-value pairs that contain certificate extensions from the CA
922
+ template for client certificates. Allowed values (case-sensitive): `permit-X11-forwarding`, `permit-agent-forwarding`,
923
+ `permit-port-forwarding`, `permit-pty`, `permit-user-rc`.
884
924
  :param pulumi.Input[str] folder: The DN of the policy folder where the SSH certificate object will be created.
885
925
  :param pulumi.Input[str] force_command: A command to run after successful login.
886
926
  :param pulumi.Input[str] key_id: The identifier of the requested SSH certificate.
887
927
  :param pulumi.Input[str] key_passphrase: Passphrase for encrypting the private key.
888
- :param pulumi.Input[int] key_size: Number of bits to use when creating a key pair. (e.g. 3072)
889
- :param pulumi.Input[str] object_name: The friendly name of the SSH certificate object. When not specified the `key_id` is used for the friendly name. If the object already exists the old certificate is archived and the CA issues a new certificate.
890
- :param pulumi.Input[Sequence[pulumi.Input[str]]] principal: [DEPRECATED] - (Optional, set of strings) Use "principals" instead. A list of user names for whom the requested certificate will be valid.
891
- :param pulumi.Input[Sequence[pulumi.Input[str]]] principals: A list of user names for whom the requested certificate will be valid.
928
+ :param pulumi.Input[int] key_size: Number of bits to use when creating a key pair. (e.g. `3072`).
929
+ :param pulumi.Input[str] object_name: The friendly name of the SSH certificate object. When not specified the `key_id`
930
+ is used for the friendly name. If the object already exists the old certificate is archived and the CA issues a new
931
+ certificate.
932
+ :param pulumi.Input[Sequence[pulumi.Input[str]]] principal: [DEPRECATED] - (Optional, set of strings) Use "principals" instead. A list of usernames for whom the
933
+ requested certificate will be valid.
934
+ :param pulumi.Input[Sequence[pulumi.Input[str]]] principals: A list of usernames for whom the requested certificate will be valid.
892
935
  :param pulumi.Input[str] private_key: The private key for the SSH certificate if generated by Venafi.
893
936
  :param pulumi.Input[str] public_key: The OpenSSH formatted public key that will be used to generate the SSH certificate.
894
937
  :param pulumi.Input[str] public_key_fingerprint: The SHA256 fingerprint of the SSH certificate's public key.
895
- :param pulumi.Input[str] public_key_method: Specifies whether the public key will be "local" (default), "file" or "service" generated.
938
+ :param pulumi.Input[str] public_key_method: Specifies whether the public key will be `local` (default), `file` or
939
+ `service` generated.
896
940
  :param pulumi.Input[str] serial: The serial number of the SSH certificate.
897
941
  :param pulumi.Input[str] signing_ca: The SHA256 fingerprint of the CA that signed the SSH certificate.
898
- :param pulumi.Input[Sequence[pulumi.Input[str]]] source_addresses: A list of one or more valid IP or CIDR addresses that can use the SSH certificate.
942
+ :param pulumi.Input[Sequence[pulumi.Input[str]]] source_addresses: A list of one or more valid IP or CIDR addresses that can use the SSH
943
+ certificate.
899
944
  :param pulumi.Input[str] template: The SSH certificate issuing template.
900
945
  :param pulumi.Input[str] valid_from: The date the SSH certificate was issued.
901
946
  :param pulumi.Input[int] valid_hours: Desired number of hours for which the certificate will be valid.
@@ -952,7 +997,8 @@ class SshCertificate(pulumi.CustomResource):
952
997
  @pulumi.getter(name="destinationAddresses")
953
998
  def destination_addresses(self) -> pulumi.Output[Optional[Sequence[str]]]:
954
999
  """
955
- A list of one or more valid IP or CIDR destination hosts where the certificate will authenticate.
1000
+ A list of one or more valid IP or CIDR destination hosts where the
1001
+ certificate will authenticate.
956
1002
  """
957
1003
  return pulumi.get(self, "destination_addresses")
958
1004
 
@@ -960,7 +1006,9 @@ class SshCertificate(pulumi.CustomResource):
960
1006
  @pulumi.getter
961
1007
  def extensions(self) -> pulumi.Output[Optional[Sequence[str]]]:
962
1008
  """
963
- A list of key-value pairs that contain certificate extensions from the CA template for client certificates. Allowed values (case-sensitive): *permit-X11-forwarding, permit-agent-forwarding, permit-port-forwarding, permit-pty, permit-user-rc*
1009
+ A list of key-value pairs that contain certificate extensions from the CA
1010
+ template for client certificates. Allowed values (case-sensitive): `permit-X11-forwarding`, `permit-agent-forwarding`,
1011
+ `permit-port-forwarding`, `permit-pty`, `permit-user-rc`.
964
1012
  """
965
1013
  return pulumi.get(self, "extensions")
966
1014
 
@@ -1000,7 +1048,7 @@ class SshCertificate(pulumi.CustomResource):
1000
1048
  @pulumi.getter(name="keySize")
1001
1049
  def key_size(self) -> pulumi.Output[Optional[int]]:
1002
1050
  """
1003
- Number of bits to use when creating a key pair. (e.g. 3072)
1051
+ Number of bits to use when creating a key pair. (e.g. `3072`).
1004
1052
  """
1005
1053
  return pulumi.get(self, "key_size")
1006
1054
 
@@ -1008,26 +1056,27 @@ class SshCertificate(pulumi.CustomResource):
1008
1056
  @pulumi.getter(name="objectName")
1009
1057
  def object_name(self) -> pulumi.Output[Optional[str]]:
1010
1058
  """
1011
- The friendly name of the SSH certificate object. When not specified the `key_id` is used for the friendly name. If the object already exists the old certificate is archived and the CA issues a new certificate.
1059
+ The friendly name of the SSH certificate object. When not specified the `key_id`
1060
+ is used for the friendly name. If the object already exists the old certificate is archived and the CA issues a new
1061
+ certificate.
1012
1062
  """
1013
1063
  return pulumi.get(self, "object_name")
1014
1064
 
1015
1065
  @property
1016
1066
  @pulumi.getter
1067
+ @_utilities.deprecated("""This will be removed in the future. Use \"principals\" instead""")
1017
1068
  def principal(self) -> pulumi.Output[Optional[Sequence[str]]]:
1018
1069
  """
1019
- [DEPRECATED] - (Optional, set of strings) Use "principals" instead. A list of user names for whom the requested certificate will be valid.
1070
+ [DEPRECATED] - (Optional, set of strings) Use "principals" instead. A list of usernames for whom the
1071
+ requested certificate will be valid.
1020
1072
  """
1021
- warnings.warn("""This will be removed in the future. Use \"principals\" instead""", DeprecationWarning)
1022
- pulumi.log.warn("""principal is deprecated: This will be removed in the future. Use \"principals\" instead""")
1023
-
1024
1073
  return pulumi.get(self, "principal")
1025
1074
 
1026
1075
  @property
1027
1076
  @pulumi.getter
1028
1077
  def principals(self) -> pulumi.Output[Optional[Sequence[str]]]:
1029
1078
  """
1030
- A list of user names for whom the requested certificate will be valid.
1079
+ A list of usernames for whom the requested certificate will be valid.
1031
1080
  """
1032
1081
  return pulumi.get(self, "principals")
1033
1082
 
@@ -1059,7 +1108,8 @@ class SshCertificate(pulumi.CustomResource):
1059
1108
  @pulumi.getter(name="publicKeyMethod")
1060
1109
  def public_key_method(self) -> pulumi.Output[Optional[str]]:
1061
1110
  """
1062
- Specifies whether the public key will be "local" (default), "file" or "service" generated.
1111
+ Specifies whether the public key will be `local` (default), `file` or
1112
+ `service` generated.
1063
1113
  """
1064
1114
  return pulumi.get(self, "public_key_method")
1065
1115
 
@@ -1083,7 +1133,8 @@ class SshCertificate(pulumi.CustomResource):
1083
1133
  @pulumi.getter(name="sourceAddresses")
1084
1134
  def source_addresses(self) -> pulumi.Output[Optional[Sequence[str]]]:
1085
1135
  """
1086
- A list of one or more valid IP or CIDR addresses that can use the SSH certificate.
1136
+ A list of one or more valid IP or CIDR addresses that can use the SSH
1137
+ certificate.
1087
1138
  """
1088
1139
  return pulumi.get(self, "source_addresses")
1089
1140
 
pulumi_venafi/ssh_config.py CHANGED
@@ -4,9 +4,14 @@
4
4
 
5
5
  import copy
6
6
  import warnings
7
+ import sys
7
8
  import pulumi
8
9
  import pulumi.runtime
9
10
  from typing import Any, Mapping, Optional, Sequence, Union, overload
11
+ if sys.version_info >= (3, 11):
12
+ from typing import NotRequired, TypedDict, TypeAlias
13
+ else:
14
+ from typing_extensions import NotRequired, TypedDict, TypeAlias
10
15
  from . import _utilities
11
16
 
12
17
  __all__ = ['SshConfigArgs', 'SshConfig']
@@ -102,14 +107,12 @@ class SshConfig(pulumi.CustomResource):
102
107
 
103
108
  ## Example Usage
104
109
 
105
- <!--Start PulumiCodeChooser -->
106
110
  ```python
107
111
  import pulumi
108
112
  import pulumi_venafi as venafi
109
113
 
110
114
  cit = venafi.SshConfig("cit", template="devops-terraform-cit")
111
115
  ```
112
- <!--End PulumiCodeChooser -->
113
116
 
114
117
  :param str resource_name: The name of the resource.
115
118
  :param pulumi.ResourceOptions opts: Options for the resource.
@@ -126,14 +129,12 @@ class SshConfig(pulumi.CustomResource):
126
129
 
127
130
  ## Example Usage
128
131
 
129
- <!--Start PulumiCodeChooser -->
130
132
  ```python
131
133
  import pulumi
132
134
  import pulumi_venafi as venafi
133
135
 
134
136
  cit = venafi.SshConfig("cit", template="devops-terraform-cit")
135
137
  ```
136
- <!--End PulumiCodeChooser -->
137
138
 
138
139
  :param str resource_name: The name of the resource.
139
140
  :param SshConfigArgs args: The arguments to use to populate this resource's properties.
{pulumi_venafi-1.8.0a1710160781.dist-info → pulumi_venafi-1.11.0a1736835975.dist-info}/METADATA RENAMED
@@ -1,16 +1,17 @@
1
- Metadata-Version: 2.1
1
+ Metadata-Version: 2.2
2
2
  Name: pulumi_venafi
3
- Version: 1.8.0a1710160781
3
+ Version: 1.11.0a1736835975
4
4
  Summary: A Pulumi package for creating and managing venafi cloud resources.
5
5
  License: Apache-2.0
6
6
  Project-URL: Homepage, https://pulumi.io
7
7
  Project-URL: Repository, https://github.com/pulumi/pulumi-venafi
8
8
  Keywords: pulumi,venafi
9
- Requires-Python: >=3.8
9
+ Requires-Python: >=3.9
10
10
  Description-Content-Type: text/markdown
11
- Requires-Dist: parver >=0.2.1
12
- Requires-Dist: pulumi <4.0.0,>=3.0.0
13
- Requires-Dist: semver >=2.8.1
11
+ Requires-Dist: parver>=0.2.1
12
+ Requires-Dist: pulumi<4.0.0,>=3.142.0
13
+ Requires-Dist: semver>=2.8.1
14
+ Requires-Dist: typing-extensions>=4.11; python_version < "3.11"
14
15
 
15
16
  [![Actions Status](https://github.com/pulumi/pulumi-venafi/workflows/master/badge.svg)](https://github.com/pulumi/pulumi-venafi/actions)
16
17
  [![Slack](http://www.pulumi.com/images/docs/badges/slack.svg)](https://slack.pulumi.com)
pulumi_venafi-1.11.0a1736835975.dist-info/RECORD ADDED
@@ -0,0 +1,19 @@
1
+ pulumi_venafi/__init__.py,sha256=h34J0B4E1v2um3rbsc0yu3ambi9FGoY4e_Js6aMydbc,1729
2
+ pulumi_venafi/_utilities.py,sha256=-gxwnD6__OYdSf8jJgJijNuu-UHUwi5pJ1H7-eIHDhg,10504
3
+ pulumi_venafi/certificate.py,sha256=wh_8L_1Xxiy7iFl_79zuba2qCojOh9rFZGig0ibCpKk,61938
4
+ pulumi_venafi/cloud_keystore_installation.py,sha256=jSV-g393cN0zwUzubC77DQTJIbsOosknQH67PTgARLo,20516
5
+ pulumi_venafi/get_cloud_keystore.py,sha256=mGEcyk4Rd04AujY0cv-bWDTsljS0z-l30R_VlITUFUE,6871
6
+ pulumi_venafi/get_cloud_provider.py,sha256=tO4Xzpg1OfwaePAD3Xm9lzwZC7U4U8fGF4wyn4TTXUM,6022
7
+ pulumi_venafi/policy.py,sha256=EMDu8zmiIeeljAOtJzG_hPg9Qyhscdw11SquUJEb4ug,11884
8
+ pulumi_venafi/provider.py,sha256=8TK_cQI0SxuFz1Za3vtNIc_MkH3FnzxKOJlKqrHMFCA,23047
9
+ pulumi_venafi/pulumi-plugin.json,sha256=Ne4uL6RASA_H6Eg9qNcAa_ITZ1THiMJlgtdR2bm_dQA,83
10
+ pulumi_venafi/py.typed,sha256=47DEQpj8HBSa-_TImW-5JCeuQeRkm5NMpJWZG3hSuFU,0
11
+ pulumi_venafi/ssh_certificate.py,sha256=mVU6fhoxFZ91B3uTl33S_Azatlb6DSfG1lq7oA_BecU,54158
12
+ pulumi_venafi/ssh_config.py,sha256=O2JVh-ifRcavYl11OIND9qgaaF-NCc2u6ZhAP1RIFAU,8680
13
+ pulumi_venafi/config/__init__.py,sha256=cfY0smRZD3fDVc93ZIAxEl_IM2pynmXB52n3Ahzi030,285
14
+ pulumi_venafi/config/__init__.pyi,sha256=TR27dlJJIXfnn3ONjd8C2SIHUY3Qi2L-GXm_JHtmy44,2298
15
+ pulumi_venafi/config/vars.py,sha256=SoSoX8n1kUOxlPGwrrSTgperPr5jSBB1SIuPGLxB3rY,3807
16
+ pulumi_venafi-1.11.0a1736835975.dist-info/METADATA,sha256=vV5YpAiIWIlmNq94WUylF6-ISLo_8LsvDjEePujYxE0,3674
17
+ pulumi_venafi-1.11.0a1736835975.dist-info/WHEEL,sha256=In9FTNxeP60KnTkGw7wk6mJPYd_dQSjEZmXdBdMCI-8,91
18
+ pulumi_venafi-1.11.0a1736835975.dist-info/top_level.txt,sha256=Ail5lbFaPXJp8zJFZ3jJASt8lnXFrCD0SBlJWooalBM,14
19
+ pulumi_venafi-1.11.0a1736835975.dist-info/RECORD,,
{pulumi_venafi-1.8.0a1710160781.dist-info → pulumi_venafi-1.11.0a1736835975.dist-info}/WHEEL RENAMED
@@ -1,5 +1,5 @@
1
1
  Wheel-Version: 1.0
2
- Generator: bdist_wheel (0.42.0)
2
+ Generator: setuptools (75.8.0)
3
3
  Root-Is-Purelib: true
4
4
  Tag: py3-none-any
5
5
 
pulumi_venafi-1.8.0a1710160781.dist-info/RECORD DELETED
@@ -1,16 +0,0 @@
1
- pulumi_venafi/__init__.py,sha256=xjOmXfhTo-d0Ib4k3UOCfFeJuCM9mRyBs62ckc1-PW0,1404
2
- pulumi_venafi/_utilities.py,sha256=b6gJn0IIeM1t6Q7EVjqw3yhuGyP-uENQhtL5yp7aHR8,9248
3
- pulumi_venafi/certificate.py,sha256=jGUTu09ZGUsRgJcwQPzNlVoor75OygJaYxgEgEKogrY,48936
4
- pulumi_venafi/policy.py,sha256=Z8rkkhDYDeOVwqSRQ_N_StWNsc5x9eI6jn72bvASQZo,11857
5
- pulumi_venafi/provider.py,sha256=__pkBiGGFAbKB2Yy1j8XFiTQ1XoKzNn2UpnaPHRsHe0,21014
6
- pulumi_venafi/pulumi-plugin.json,sha256=l4LdZcdoA9Q7i6lLq1A4RD0saDiZewwpHkOwA2OOtKU,43
7
- pulumi_venafi/py.typed,sha256=47DEQpj8HBSa-_TImW-5JCeuQeRkm5NMpJWZG3hSuFU,0
8
- pulumi_venafi/ssh_certificate.py,sha256=3UnU7BlLsMiPWcozMIhyEdyQ5Wwo4dC_YfCfdUNlUXw,53759
9
- pulumi_venafi/ssh_config.py,sha256=4Ezm4IJfN22eSA8gTrRcnyk7vYDzHjfhidh97Y3GksY,8662
10
- pulumi_venafi/config/__init__.py,sha256=cfY0smRZD3fDVc93ZIAxEl_IM2pynmXB52n3Ahzi030,285
11
- pulumi_venafi/config/__init__.pyi,sha256=WdBlnmRdiaKdoYuBb-Say0D9mS3jrqO-fSlSbNDzoyE,1874
12
- pulumi_venafi/config/vars.py,sha256=Wki_862YSKrSUI4QZxle8BiqeobsKxqPkXwv77KE4QI,3184
13
- pulumi_venafi-1.8.0a1710160781.dist-info/METADATA,sha256=0MANYNotT3MqeSzHUwlcDRtpUzTDXPQPcULgyHnJgGE,3610
14
- pulumi_venafi-1.8.0a1710160781.dist-info/WHEEL,sha256=oiQVh_5PnQM0E3gPdiz09WCNmwiHDMaGer_elqB3coM,92
15
- pulumi_venafi-1.8.0a1710160781.dist-info/top_level.txt,sha256=Ail5lbFaPXJp8zJFZ3jJASt8lnXFrCD0SBlJWooalBM,14
16
- pulumi_venafi-1.8.0a1710160781.dist-info/RECORD,,