pulumi-vault-kotlin/com.pulumi.vault.identity.kotlin/OidcClientArgs

OidcClientArgs

data class OidcClientArgs(val accessTokenTtl: Output<Int>? = null, val assignments: Output<List<String>>? = null, val clientType: Output<String>? = null, val idTokenTtl: Output<Int>? = null, val key: Output<String>? = null, val name: Output<String>? = null, val namespace: Output<String>? = null, val redirectUris: Output<List<String>>? = null) : ConvertibleToJava<OidcClientArgs>

Manages OIDC Clients in a Vault server. See the Vault documentation for more information.

Example Usage

import * as pulumi from "@pulumi/pulumi";
import * as vault from "@pulumi/vault";
const test = new vault.identity.OidcAssignment("test", {
    name: "my-assignment",
    entityIds: ["ascbascas-2231a-sdfaa"],
    groupIds: ["sajkdsad-32414-sfsada"],
});
const testOidcClient = new vault.identity.OidcClient("test", {
    name: "my-app",
    redirectUris: [
        "http://127.0.0.1:9200/v1/auth-methods/oidc:authenticate:callback",
        "http://127.0.0.1:8251/callback",
        "http://127.0.0.1:8080/callback",
    ],
    assignments: [test&#46;name],
    idTokenTtl: 2400,
    accessTokenTtl: 7200,
});
Content copied to clipboard
import pulumi
import pulumi_vault as vault
test = vault.identity.OidcAssignment("test",
    name="my-assignment",
    entity_ids=["ascbascas-2231a-sdfaa"],
    group_ids=["sajkdsad-32414-sfsada"])
test_oidc_client = vault.identity.OidcClient("test",
    name="my-app",
    redirect_uris=[
        "http://127.0.0.1:9200/v1/auth-methods/oidc:authenticate:callback",
        "http://127.0.0.1:8251/callback",
        "http://127.0.0.1:8080/callback",
    ],
    assignments=[test&#46;name],
    id_token_ttl=2400,
    access_token_ttl=7200)
Content copied to clipboard
using System.Collections.Generic;
using System.Linq;
using Pulumi;
using Vault = Pulumi.Vault;
return await Deployment.RunAsync(() =>
{
    var test = new Vault.Identity.OidcAssignment("test", new()
    {
        Name = "my-assignment",
        EntityIds = new[]
        {
            "ascbascas-2231a-sdfaa",
        },
        GroupIds = new[]
        {
            "sajkdsad-32414-sfsada",
        },
    });
    var testOidcClient = new Vault.Identity.OidcClient("test", new()
    {
        Name = "my-app",
        RedirectUris = new[]
        {
            "http://127.0.0.1:9200/v1/auth-methods/oidc:authenticate:callback",
            "http://127.0.0.1:8251/callback",
            "http://127.0.0.1:8080/callback",
        },
        Assignments = new[]
        {
            test.Name,
        },
        IdTokenTtl = 2400,
        AccessTokenTtl = 7200,
    });
});
Content copied to clipboard
package main
import (
	"github.com/pulumi/pulumi-vault/sdk/v6/go/vault/identity"
	"github.com/pulumi/pulumi/sdk/v3/go/pulumi"
)
func main() {
	pulumi.Run(func(ctx *pulumi.Context) error {
		test, err := identity.NewOidcAssignment(ctx, "test", &identity.OidcAssignmentArgs{
			Name: pulumi.String("my-assignment"),
			EntityIds: pulumi.StringArray{
				pulumi.String("ascbascas-2231a-sdfaa"),
			},
			GroupIds: pulumi.StringArray{
				pulumi.String("sajkdsad-32414-sfsada"),
			},
		})
		if err != nil {
			return err
		}
		_, err = identity.NewOidcClient(ctx, "test", &identity.OidcClientArgs{
			Name: pulumi.String("my-app"),
			RedirectUris: pulumi.StringArray{
				pulumi.String("http://127.0.0.1:9200/v1/auth-methods/oidc:authenticate:callback"),
				pulumi.String("http://127.0.0.1:8251/callback"),
				pulumi.String("http://127.0.0.1:8080/callback"),
			},
			Assignments: pulumi.StringArray{
				test.Name,
			},
			IdTokenTtl:     pulumi.Int(2400),
			AccessTokenTtl: pulumi.Int(7200),
		})
		if err != nil {
			return err
		}
		return nil
	})
}
Content copied to clipboard
package generated_program;
import com.pulumi.Context;
import com.pulumi.Pulumi;
import com.pulumi.core.Output;
import com.pulumi.vault.identity.OidcAssignment;
import com.pulumi.vault.identity.OidcAssignmentArgs;
import com.pulumi.vault.identity.OidcClient;
import com.pulumi.vault.identity.OidcClientArgs;
import java.util.List;
import java.util.ArrayList;
import java.util.Map;
import java.io.File;
import java.nio.file.Files;
import java.nio.file.Paths;
public class App {
    public static void main(String[] args) {
        Pulumi.run(App::stack);
    }
    public static void stack(Context ctx) {
        var test = new OidcAssignment("test", OidcAssignmentArgs.builder()
            .name("my-assignment")
            .entityIds("ascbascas-2231a-sdfaa")
            .groupIds("sajkdsad-32414-sfsada")
            .build());
        var testOidcClient = new OidcClient("testOidcClient", OidcClientArgs.builder()
            .name("my-app")
            .redirectUris(
                "http://127.0.0.1:9200/v1/auth-methods/oidc:authenticate:callback",
                "http://127.0.0.1:8251/callback",
                "http://127.0.0.1:8080/callback")
            .assignments(test.name())
            .idTokenTtl(2400)
            .accessTokenTtl(7200)
            .build());
    }
}
Content copied to clipboard
resources:
  test:
    type: vault:identity:OidcAssignment
    properties:
      name: my-assignment
      entityIds:
        - ascbascas-2231a-sdfaa
      groupIds:
        - sajkdsad-32414-sfsada
  testOidcClient:
    type: vault:identity:OidcClient
    name: test
    properties:
      name: my-app
      redirectUris:
        - http://127.0.0.1:9200/v1/auth-methods/oidc:authenticate:callback
        - http://127.0.0.1:8251/callback
        - http://127.0.0.1:8080/callback
      assignments:
        - ${test.name}
      idTokenTtl: 2400
      accessTokenTtl: 7200
Content copied to clipboard

Import

OIDC Clients can be imported using the name, e.g.

$ pulumi import vault:identity/oidcClient:OidcClient test my-app
Content copied to clipboard

Constructors

Link copied to clipboard
constructor(accessTokenTtl: Output<Int>? = null, assignments: Output<List<String>>? = null, clientType: Output<String>? = null, idTokenTtl: Output<Int>? = null, key: Output<String>? = null, name: Output<String>? = null, namespace: Output<String>? = null, redirectUris: Output<List<String>>? = null)

Properties

Link copied to clipboard
val accessTokenTtl: Output<Int>? = null

The time-to-live for access tokens obtained by the client.

Link copied to clipboard
val assignments: Output<List<String>>? = null

A list of assignment resources associated with the client.

Link copied to clipboard
val clientType: Output<String>? = null

The client type based on its ability to maintain confidentiality of credentials. The following client types are supported: confidential, public. Defaults to confidential.

Link copied to clipboard
val idTokenTtl: Output<Int>? = null

The time-to-live for ID tokens obtained by the client. The value should be less than the verification_ttl on the key.

Link copied to clipboard
val key: Output<String>? = null

A reference to a named key resource in Vault. This cannot be modified after creation. If not provided, the default key is used.

Link copied to clipboard
val name: Output<String>? = null

The name of the client.

Link copied to clipboard
val namespace: Output<String>? = null

The namespace to provision the resource in. The value should not contain leading or trailing forward slashes. The namespace is always relative to the provider's configured namespace. Available only for Vault Enterprise.

Link copied to clipboard
val redirectUris: Output<List<String>>? = null

Redirection URI values used by the client. One of these values must exactly match the redirect_uri parameter value used in each authentication request.

Functions

Link copied to clipboard
open override fun toJava(): OidcClientArgs