pulumi-vault-kotlin/com.pulumi.vault.identity.kotlin

Package-level declarations

Types

class Entity : KotlinCustomResource

class EntityAlias : KotlinCustomResource

data class EntityAliasArgs(val canonicalId: Output<String>? = null, val customMetadata: Output<Map<String, String>>? = null, val mountAccessor: Output<String>? = null, val name: Output<String>? = null, val namespace: Output<String>? = null) : ConvertibleToJava<EntityAliasArgs>

EntityAliasArgsBuilder

class EntityAliasArgsBuilder

Builder for EntityAliasArgs.

EntityAliasMapper

object EntityAliasMapper : ResourceMapper<EntityAlias>

EntityAliasResourceBuilder

class EntityAliasResourceBuilder

Builder for EntityAlias.

EntityArgs

data class EntityArgs(val disabled: Output<Boolean>? = null, val externalPolicies: Output<Boolean>? = null, val metadata: Output<Map<String, String>>? = null, val name: Output<String>? = null, val namespace: Output<String>? = null, val policies: Output<List<String>>? = null) : ConvertibleToJava<EntityArgs>

EntityArgsBuilder

class EntityArgsBuilder

Builder for EntityArgs.

EntityMapper

object EntityMapper : ResourceMapper<Entity>

EntityPolicies

class EntityPolicies : KotlinCustomResource

Manages policies for an Identity Entity for Vault. The Identity secrets engine is the identity management solution for Vault.

EntityPoliciesArgs

data class EntityPoliciesArgs(val entityId: Output<String>? = null, val exclusive: Output<Boolean>? = null, val namespace: Output<String>? = null, val policies: Output<List<String>>? = null) : ConvertibleToJava<EntityPoliciesArgs>

Manages policies for an Identity Entity for Vault. The Identity secrets engine is the identity management solution for Vault.

EntityPoliciesArgsBuilder

class EntityPoliciesArgsBuilder

Builder for EntityPoliciesArgs.

EntityPoliciesMapper

object EntityPoliciesMapper : ResourceMapper<EntityPolicies>

EntityPoliciesResourceBuilder

class EntityPoliciesResourceBuilder

Builder for EntityPolicies.

EntityResourceBuilder

class EntityResourceBuilder

Builder for Entity.

Group

class Group : KotlinCustomResource

Creates an Identity Group for Vault. The Identity secrets engine is the identity management solution for Vault. A group can contain multiple entities as its members. A group can also have subgroups. Policies set on the group is granted to all members of the group. During request time, when the token's entity ID is being evaluated for the policies that it has access to; along with the policies on the entity itself, policies that are inherited due to group memberships are also granted.

GroupAlias

class GroupAlias : KotlinCustomResource

Creates an Identity Group Alias for Vault. The Identity secrets engine is the identity management solution for Vault. Group aliases allows entity membership in external groups to be managed semi-automatically. External group serves as a mapping to a group that is outside of the identity store. External groups can have one (and only one) alias. This alias should map to a notion of group that is outside of the identity store. For example, groups in LDAP, and teams in GitHub. A username in LDAP, belonging to a group in LDAP, can get its entity ID added as a member of a group in Vault automatically during logins and token renewals. This works only if the group in Vault is an external group and has an alias that maps to the group in LDAP. If the user is removed from the group in LDAP, that change gets reflected in Vault only upon the subsequent login or renewal operation.

GroupAliasArgs

data class GroupAliasArgs(val canonicalId: Output<String>? = null, val mountAccessor: Output<String>? = null, val name: Output<String>? = null, val namespace: Output<String>? = null) : ConvertibleToJava<GroupAliasArgs>

GroupAliasArgsBuilder

class GroupAliasArgsBuilder

Builder for GroupAliasArgs.

GroupAliasMapper

object GroupAliasMapper : ResourceMapper<GroupAlias>

GroupAliasResourceBuilder

class GroupAliasResourceBuilder

Builder for GroupAlias.

GroupArgs

data class GroupArgs(val externalMemberEntityIds: Output<Boolean>? = null, val externalMemberGroupIds: Output<Boolean>? = null, val externalPolicies: Output<Boolean>? = null, val memberEntityIds: Output<List<String>>? = null, val memberGroupIds: Output<List<String>>? = null, val metadata: Output<Map<String, String>>? = null, val name: Output<String>? = null, val namespace: Output<String>? = null, val policies: Output<List<String>>? = null, val type: Output<String>? = null) : ConvertibleToJava<GroupArgs>

GroupArgsBuilder

class GroupArgsBuilder

Builder for GroupArgs.

GroupMapper

object GroupMapper : ResourceMapper<Group>

GroupMemberEntityIds

class GroupMemberEntityIds : KotlinCustomResource

Manages member entities for an Identity Group for Vault. The Identity secrets engine is the identity management solution for Vault.

GroupMemberEntityIdsArgs

data class GroupMemberEntityIdsArgs(val exclusive: Output<Boolean>? = null, val groupId: Output<String>? = null, val memberEntityIds: Output<List<String>>? = null, val namespace: Output<String>? = null) : ConvertibleToJava<GroupMemberEntityIdsArgs>

Manages member entities for an Identity Group for Vault. The Identity secrets engine is the identity management solution for Vault.

GroupMemberEntityIdsArgsBuilder

class GroupMemberEntityIdsArgsBuilder

Builder for GroupMemberEntityIdsArgs.

GroupMemberEntityIdsMapper

object GroupMemberEntityIdsMapper : ResourceMapper<GroupMemberEntityIds>

GroupMemberEntityIdsResourceBuilder

class GroupMemberEntityIdsResourceBuilder

Builder for GroupMemberEntityIds.

GroupMemberGroupIds

class GroupMemberGroupIds : KotlinCustomResource

Manages member groups for an Identity Group for Vault. The Identity secrets engine is the identity management solution for Vault.

GroupMemberGroupIdsArgs

data class GroupMemberGroupIdsArgs(val exclusive: Output<Boolean>? = null, val groupId: Output<String>? = null, val memberGroupIds: Output<List<String>>? = null, val namespace: Output<String>? = null) : ConvertibleToJava<GroupMemberGroupIdsArgs>

Manages member groups for an Identity Group for Vault. The Identity secrets engine is the identity management solution for Vault.

GroupMemberGroupIdsArgsBuilder

class GroupMemberGroupIdsArgsBuilder

Builder for GroupMemberGroupIdsArgs.

GroupMemberGroupIdsMapper

object GroupMemberGroupIdsMapper : ResourceMapper<GroupMemberGroupIds>

GroupMemberGroupIdsResourceBuilder

class GroupMemberGroupIdsResourceBuilder

Builder for GroupMemberGroupIds.

GroupPolicies

class GroupPolicies : KotlinCustomResource

Manages policies for an Identity Group for Vault. The Identity secrets engine is the identity management solution for Vault.

GroupPoliciesArgs

data class GroupPoliciesArgs(val exclusive: Output<Boolean>? = null, val groupId: Output<String>? = null, val namespace: Output<String>? = null, val policies: Output<List<String>>? = null) : ConvertibleToJava<GroupPoliciesArgs>

Manages policies for an Identity Group for Vault. The Identity secrets engine is the identity management solution for Vault.

GroupPoliciesArgsBuilder

class GroupPoliciesArgsBuilder

Builder for GroupPoliciesArgs.

GroupPoliciesMapper

object GroupPoliciesMapper : ResourceMapper<GroupPolicies>

GroupPoliciesResourceBuilder

class GroupPoliciesResourceBuilder

Builder for GroupPolicies.

GroupResourceBuilder

class GroupResourceBuilder

Builder for Group.

IdentityFunctions

object IdentityFunctions

MfaDuo

class MfaDuo : KotlinCustomResource

Resource for configuring the duo MFA method.

MfaDuoArgs

data class MfaDuoArgs(val apiHostname: Output<String>? = null, val integrationKey: Output<String>? = null, val namespace: Output<String>? = null, val pushInfo: Output<String>? = null, val secretKey: Output<String>? = null, val usePasscode: Output<Boolean>? = null, val usernameFormat: Output<String>? = null) : ConvertibleToJava<MfaDuoArgs>

Resource for configuring the duo MFA method.

MfaDuoArgsBuilder

class MfaDuoArgsBuilder

Builder for MfaDuoArgs.

MfaDuoMapper

object MfaDuoMapper : ResourceMapper<MfaDuo>

MfaDuoResourceBuilder

class MfaDuoResourceBuilder

Builder for MfaDuo.

MfaLoginEnforcement

class MfaLoginEnforcement : KotlinCustomResource

Resource for configuring MFA login-enforcement

MfaLoginEnforcementArgs

data class MfaLoginEnforcementArgs(val authMethodAccessors: Output<List<String>>? = null, val authMethodTypes: Output<List<String>>? = null, val identityEntityIds: Output<List<String>>? = null, val identityGroupIds: Output<List<String>>? = null, val mfaMethodIds: Output<List<String>>? = null, val name: Output<String>? = null, val namespace: Output<String>? = null) : ConvertibleToJava<MfaLoginEnforcementArgs>

Resource for configuring MFA login-enforcement

MfaLoginEnforcementArgsBuilder

class MfaLoginEnforcementArgsBuilder

Builder for MfaLoginEnforcementArgs.

MfaLoginEnforcementMapper

object MfaLoginEnforcementMapper : ResourceMapper<MfaLoginEnforcement>

MfaLoginEnforcementResourceBuilder

class MfaLoginEnforcementResourceBuilder

Builder for MfaLoginEnforcement.

MfaOkta

class MfaOkta : KotlinCustomResource

Resource for configuring the okta MFA method.

MfaOktaArgs

data class MfaOktaArgs(val apiToken: Output<String>? = null, val baseUrl: Output<String>? = null, val namespace: Output<String>? = null, val orgName: Output<String>? = null, val primaryEmail: Output<Boolean>? = null, val usernameFormat: Output<String>? = null) : ConvertibleToJava<MfaOktaArgs>

Resource for configuring the okta MFA method.

MfaOktaArgsBuilder

class MfaOktaArgsBuilder

Builder for MfaOktaArgs.

MfaOktaMapper

object MfaOktaMapper : ResourceMapper<MfaOkta>

MfaOktaResourceBuilder

class MfaOktaResourceBuilder

Builder for MfaOkta.

MfaPingid

class MfaPingid : KotlinCustomResource

Resource for configuring the pingid MFA method.

MfaPingidArgs

data class MfaPingidArgs(val namespace: Output<String>? = null, val settingsFileBase64: Output<String>? = null, val usernameFormat: Output<String>? = null) : ConvertibleToJava<MfaPingidArgs>

Resource for configuring the pingid MFA method.

MfaPingidArgsBuilder

class MfaPingidArgsBuilder

Builder for MfaPingidArgs.

MfaPingidMapper

object MfaPingidMapper : ResourceMapper<MfaPingid>

MfaPingidResourceBuilder

class MfaPingidResourceBuilder

Builder for MfaPingid.

MfaTotp

class MfaTotp : KotlinCustomResource

Resource for configuring the totp MFA method.

MfaTotpArgs

data class MfaTotpArgs(val algorithm: Output<String>? = null, val digits: Output<Int>? = null, val issuer: Output<String>? = null, val keySize: Output<Int>? = null, val maxValidationAttempts: Output<Int>? = null, val namespace: Output<String>? = null, val period: Output<Int>? = null, val qrSize: Output<Int>? = null, val skew: Output<Int>? = null) : ConvertibleToJava<MfaTotpArgs>

Resource for configuring the totp MFA method.

MfaTotpArgsBuilder

class MfaTotpArgsBuilder

Builder for MfaTotpArgs.

MfaTotpMapper

object MfaTotpMapper : ResourceMapper<MfaTotp>

MfaTotpResourceBuilder

class MfaTotpResourceBuilder

Builder for MfaTotp.

Oidc

class Oidc : KotlinCustomResource

Configure the Identity Tokens Backend. The Identity secrets engine is the identity management solution for Vault. It internally maintains the clients who are recognized by Vault.

OidcArgs

data class OidcArgs(val issuer: Output<String>? = null, val namespace: Output<String>? = null) : ConvertibleToJava<OidcArgs>

Configure the Identity Tokens Backend. The Identity secrets engine is the identity management solution for Vault. It internally maintains the clients who are recognized by Vault.

OidcArgsBuilder

class OidcArgsBuilder

Builder for OidcArgs.

OidcAssignment

class OidcAssignment : KotlinCustomResource

Manages OIDC Assignments in a Vault server. See the Vault documentation for more information.

OidcAssignmentArgs

data class OidcAssignmentArgs(val entityIds: Output<List<String>>? = null, val groupIds: Output<List<String>>? = null, val name: Output<String>? = null, val namespace: Output<String>? = null) : ConvertibleToJava<OidcAssignmentArgs>

Manages OIDC Assignments in a Vault server. See the Vault documentation for more information.

OidcAssignmentArgsBuilder

class OidcAssignmentArgsBuilder

Builder for OidcAssignmentArgs.

OidcAssignmentMapper

object OidcAssignmentMapper : ResourceMapper<OidcAssignment>

OidcAssignmentResourceBuilder

class OidcAssignmentResourceBuilder

Builder for OidcAssignment.

OidcClient

class OidcClient : KotlinCustomResource

Manages OIDC Clients in a Vault server. See the Vault documentation for more information.

OidcClientArgs

data class OidcClientArgs(val accessTokenTtl: Output<Int>? = null, val assignments: Output<List<String>>? = null, val clientType: Output<String>? = null, val idTokenTtl: Output<Int>? = null, val key: Output<String>? = null, val name: Output<String>? = null, val namespace: Output<String>? = null, val redirectUris: Output<List<String>>? = null) : ConvertibleToJava<OidcClientArgs>

Manages OIDC Clients in a Vault server. See the Vault documentation for more information.

OidcClientArgsBuilder

class OidcClientArgsBuilder

Builder for OidcClientArgs.

OidcClientMapper

object OidcClientMapper : ResourceMapper<OidcClient>

OidcClientResourceBuilder

class OidcClientResourceBuilder

Builder for OidcClient.

OidcKey

class OidcKey : KotlinCustomResource

OidcKeyAllowedClientID

class OidcKeyAllowedClientID : KotlinCustomResource

OidcKeyAllowedClientIDArgs

data class OidcKeyAllowedClientIDArgs(val allowedClientId: Output<String>? = null, val keyName: Output<String>? = null, val namespace: Output<String>? = null) : ConvertibleToJava<OidcKeyAllowedClientIDArgs>

OidcKeyAllowedClientIDArgsBuilder

class OidcKeyAllowedClientIDArgsBuilder

Builder for OidcKeyAllowedClientIDArgs.

OidcKeyAllowedClientIDMapper

object OidcKeyAllowedClientIDMapper : ResourceMapper<OidcKeyAllowedClientID>

OidcKeyAllowedClientIDResourceBuilder

class OidcKeyAllowedClientIDResourceBuilder

Builder for OidcKeyAllowedClientID.

OidcKeyArgs

data class OidcKeyArgs(val algorithm: Output<String>? = null, val allowedClientIds: Output<List<String>>? = null, val name: Output<String>? = null, val namespace: Output<String>? = null, val rotationPeriod: Output<Int>? = null, val verificationTtl: Output<Int>? = null) : ConvertibleToJava<OidcKeyArgs>

OidcKeyArgsBuilder

class OidcKeyArgsBuilder

Builder for OidcKeyArgs.

OidcKeyMapper

object OidcKeyMapper : ResourceMapper<OidcKey>

OidcKeyResourceBuilder

class OidcKeyResourceBuilder

Builder for OidcKey.

OidcMapper

object OidcMapper : ResourceMapper<Oidc>

OidcProvider

class OidcProvider : KotlinCustomResource

Manages OIDC Providers in a Vault server. See the Vault documentation for more information.

OidcProviderArgs

data class OidcProviderArgs(val allowedClientIds: Output<List<String>>? = null, val httpsEnabled: Output<Boolean>? = null, val issuerHost: Output<String>? = null, val name: Output<String>? = null, val namespace: Output<String>? = null, val scopesSupporteds: Output<List<String>>? = null) : ConvertibleToJava<OidcProviderArgs>

Manages OIDC Providers in a Vault server. See the Vault documentation for more information.

OidcProviderArgsBuilder

class OidcProviderArgsBuilder

Builder for OidcProviderArgs.

OidcProviderMapper

object OidcProviderMapper : ResourceMapper<OidcProvider>

OidcProviderResourceBuilder

class OidcProviderResourceBuilder

Builder for OidcProvider.

OidcResourceBuilder

class OidcResourceBuilder

Builder for Oidc.

OidcRole

class OidcRole : KotlinCustomResource

You need to create a role with a named key. At creation time, the key can be created independently of the role. However, the key must exist before the role can be used to issue tokens. You must also configure the key with the role's Client ID to allow the role to use the key.

OidcRoleArgs

data class OidcRoleArgs(val clientId: Output<String>? = null, val key: Output<String>? = null, val name: Output<String>? = null, val namespace: Output<String>? = null, val template: Output<String>? = null, val ttl: Output<Int>? = null) : ConvertibleToJava<OidcRoleArgs>

OidcRoleArgsBuilder

class OidcRoleArgsBuilder

Builder for OidcRoleArgs.

OidcRoleMapper

object OidcRoleMapper : ResourceMapper<OidcRole>

OidcRoleResourceBuilder

class OidcRoleResourceBuilder

Builder for OidcRole.

OidcScope

class OidcScope : KotlinCustomResource

Manages OIDC Scopes in a Vault server. See the Vault documentation for more information.

OidcScopeArgs

data class OidcScopeArgs(val description: Output<String>? = null, val name: Output<String>? = null, val namespace: Output<String>? = null, val template: Output<String>? = null) : ConvertibleToJava<OidcScopeArgs>

Manages OIDC Scopes in a Vault server. See the Vault documentation for more information.

OidcScopeArgsBuilder

class OidcScopeArgsBuilder

Builder for OidcScopeArgs.

OidcScopeMapper

object OidcScopeMapper : ResourceMapper<OidcScope>

OidcScopeResourceBuilder

class OidcScopeResourceBuilder

Builder for OidcScope.

Functions

entity

fun entity(name: String): Entity

suspend fun entity(name: String, block: suspend EntityResourceBuilder.() -> Unit): Entity

entityAlias

fun entityAlias(name: String): EntityAlias

suspend fun entityAlias(name: String, block: suspend EntityAliasResourceBuilder.() -> Unit): EntityAlias

entityPolicies

fun entityPolicies(name: String): EntityPolicies

suspend fun entityPolicies(name: String, block: suspend EntityPoliciesResourceBuilder.() -> Unit): EntityPolicies

group

fun group(name: String): Group

suspend fun group(name: String, block: suspend GroupResourceBuilder.() -> Unit): Group

groupAlias

fun groupAlias(name: String): GroupAlias

suspend fun groupAlias(name: String, block: suspend GroupAliasResourceBuilder.() -> Unit): GroupAlias

groupMemberEntityIds

fun groupMemberEntityIds(name: String): GroupMemberEntityIds

suspend fun groupMemberEntityIds(name: String, block: suspend GroupMemberEntityIdsResourceBuilder.() -> Unit): GroupMemberEntityIds

groupMemberGroupIds

fun groupMemberGroupIds(name: String): GroupMemberGroupIds

suspend fun groupMemberGroupIds(name: String, block: suspend GroupMemberGroupIdsResourceBuilder.() -> Unit): GroupMemberGroupIds

groupPolicies

fun groupPolicies(name: String): GroupPolicies

suspend fun groupPolicies(name: String, block: suspend GroupPoliciesResourceBuilder.() -> Unit): GroupPolicies

mfaDuo

fun mfaDuo(name: String): MfaDuo

suspend fun mfaDuo(name: String, block: suspend MfaDuoResourceBuilder.() -> Unit): MfaDuo

mfaLoginEnforcement

fun mfaLoginEnforcement(name: String): MfaLoginEnforcement

suspend fun mfaLoginEnforcement(name: String, block: suspend MfaLoginEnforcementResourceBuilder.() -> Unit): MfaLoginEnforcement

mfaOkta

fun mfaOkta(name: String): MfaOkta

suspend fun mfaOkta(name: String, block: suspend MfaOktaResourceBuilder.() -> Unit): MfaOkta

mfaPingid

fun mfaPingid(name: String): MfaPingid

suspend fun mfaPingid(name: String, block: suspend MfaPingidResourceBuilder.() -> Unit): MfaPingid

mfaTotp

fun mfaTotp(name: String): MfaTotp

suspend fun mfaTotp(name: String, block: suspend MfaTotpResourceBuilder.() -> Unit): MfaTotp

oidc

fun oidc(name: String): Oidc

suspend fun oidc(name: String, block: suspend OidcResourceBuilder.() -> Unit): Oidc

oidcAssignment

fun oidcAssignment(name: String): OidcAssignment

suspend fun oidcAssignment(name: String, block: suspend OidcAssignmentResourceBuilder.() -> Unit): OidcAssignment

oidcClient

fun oidcClient(name: String): OidcClient

suspend fun oidcClient(name: String, block: suspend OidcClientResourceBuilder.() -> Unit): OidcClient

oidcKey

fun oidcKey(name: String): OidcKey

suspend fun oidcKey(name: String, block: suspend OidcKeyResourceBuilder.() -> Unit): OidcKey

oidcKeyAllowedClientID

fun oidcKeyAllowedClientID(name: String): OidcKeyAllowedClientID

suspend fun oidcKeyAllowedClientID(name: String, block: suspend OidcKeyAllowedClientIDResourceBuilder.() -> Unit): OidcKeyAllowedClientID

oidcProvider

fun oidcProvider(name: String): OidcProvider

suspend fun oidcProvider(name: String, block: suspend OidcProviderResourceBuilder.() -> Unit): OidcProvider

oidcRole

fun oidcRole(name: String): OidcRole

suspend fun oidcRole(name: String, block: suspend OidcRoleResourceBuilder.() -> Unit): OidcRole

oidcScope

fun oidcScope(name: String): OidcScope

suspend fun oidcScope(name: String, block: suspend OidcScopeResourceBuilder.() -> Unit): OidcScope