Random Bytes Args
data class RandomBytesArgs(val keepers: Output<Map<String, String>>? = null, val length: Output<Int>? = null) : ConvertibleToJava<RandomBytesArgs>
The resource random.RandomBytes
generates random bytes that are intended to be used as a secret, or key. Use this in preference to random.RandomId
when the output is considered sensitive, and should not be displayed in the CLI. This resource does use a cryptographic random number generator.
Example Usage
import * as pulumi from "@pulumi/pulumi";
import * as azurerm from "@pulumi/azurerm";
import * as random from "@pulumi/random";
const jwtSecret = new random.RandomBytes("jwt_secret", {length: 64});
const jwtSecretKeyVaultSecret = new azurerm.index.KeyVaultSecret("jwt_secret", {
keyVaultId: "some-azure-key-vault-id",
name: "JwtSecret",
value: jwtSecret.base64,
});
Content copied to clipboard
import pulumi
import pulumi_azurerm as azurerm
import pulumi_random as random
jwt_secret = random.RandomBytes("jwt_secret", length=64)
jwt_secret_key_vault_secret = azurerm.index.KeyVaultSecret("jwt_secret",
key_vault_id=some-azure-key-vault-id,
name=JwtSecret,
value=jwt_secret.base64)
Content copied to clipboard
using System.Collections.Generic;
using System.Linq;
using Pulumi;
using Azurerm = Pulumi.Azurerm;
using Random = Pulumi.Random;
return await Deployment.RunAsync(() =>
{
var jwtSecret = new Random.RandomBytes("jwt_secret", new()
{
Length = 64,
});
var jwtSecretKeyVaultSecret = new Azurerm.Index.KeyVaultSecret("jwt_secret", new()
{
KeyVaultId = "some-azure-key-vault-id",
Name = "JwtSecret",
Value = jwtSecret.Base64,
});
});
Content copied to clipboard
package main
import (
"github.com/pulumi/pulumi-azurerm/sdk/go/azurerm"
"github.com/pulumi/pulumi-random/sdk/v4/go/random"
"github.com/pulumi/pulumi/sdk/v3/go/pulumi"
)
func main() {
pulumi.Run(func(ctx *pulumi.Context) error {
jwtSecret, err := random.NewRandomBytes(ctx, "jwt_secret", &random.RandomBytesArgs{
Length: pulumi.Int(64),
})
if err != nil {
return err
}
_, err = azurerm.NewKeyVaultSecret(ctx, "jwt_secret", &azurerm.KeyVaultSecretArgs{
KeyVaultId: "some-azure-key-vault-id",
Name: "JwtSecret",
Value: jwtSecret.Base64,
})
if err != nil {
return err
}
return nil
})
}
Content copied to clipboard
package generated_program;
import com.pulumi.Context;
import com.pulumi.Pulumi;
import com.pulumi.core.Output;
import com.pulumi.random.RandomBytes;
import com.pulumi.random.RandomBytesArgs;
import com.pulumi.azurerm.keyVaultSecret;
import com.pulumi.azurerm.keyVaultSecretArgs;
import java.util.List;
import java.util.ArrayList;
import java.util.Map;
import java.io.File;
import java.nio.file.Files;
import java.nio.file.Paths;
public class App {
public static void main(String[] args) {
Pulumi.run(App::stack);
}
public static void stack(Context ctx) {
var jwtSecret = new RandomBytes("jwtSecret", RandomBytesArgs.builder()
.length(64)
.build());
var jwtSecretKeyVaultSecret = new KeyVaultSecret("jwtSecretKeyVaultSecret", KeyVaultSecretArgs.builder()
.keyVaultId("some-azure-key-vault-id")
.name("JwtSecret")
.value(jwtSecret.base64())
.build());
}
}
Content copied to clipboard
resources:
jwtSecret:
type: random:RandomBytes
name: jwt_secret
properties:
length: 64
jwtSecretKeyVaultSecret:
type: azurerm:keyVaultSecret
name: jwt_secret
properties:
keyVaultId: some-azure-key-vault-id
name: JwtSecret
value: ${jwtSecret.base64}
Content copied to clipboard
Import
Random bytes can be imported by specifying the value as base64 string.
$ pulumi import random:index/randomBytes:RandomBytes basic "8/fu3q+2DcgSJ19i0jZ5Cw=="
Content copied to clipboard