pulumi-vault-kotlin/com.pulumi.vault.kv.kotlin/SecretBackendV2

SecretBackendV2

class SecretBackendV2 : KotlinCustomResource

Configures KV-V2 backend level settings that are applied to every key in the key-value store. For more information on Vault's KV-V2 secret backend see here.

Example Usage

import * as pulumi from "@pulumi/pulumi";
import * as vault from "@pulumi/vault";
const kvv2 = new vault.Mount("kvv2", {
    path: "kvv2",
    type: "kv",
    options: {
        version: "2",
    },
    description: "KV Version 2 secret engine mount",
});
const example = new vault.kv.SecretBackendV2("example", {
    mount: kvv2.path,
    maxVersions: 5,
    deleteVersionAfter: 12600,
    casRequired: true,
});

import pulumi
import pulumi_vault as vault
kvv2 = vault.Mount("kvv2",
    path="kvv2",
    type="kv",
    options={
        "version": "2",
    },
    description="KV Version 2 secret engine mount")
example = vault.kv.SecretBackendV2("example",
    mount=kvv2.path,
    max_versions=5,
    delete_version_after=12600,
    cas_required=True)

using System.Collections.Generic;
using System.Linq;
using Pulumi;
using Vault = Pulumi.Vault;
return await Deployment.RunAsync(() =>
{
    var kvv2 = new Vault.Mount("kvv2", new()
    {
        Path = "kvv2",
        Type = "kv",
        Options =
        {
            { "version", "2" },
        },
        Description = "KV Version 2 secret engine mount",
    });
    var example = new Vault.Kv.SecretBackendV2("example", new()
    {
        Mount = kvv2.Path,
        MaxVersions = 5,
        DeleteVersionAfter = 12600,
        CasRequired = true,
    });
});

package main
import (
	"github.com/pulumi/pulumi-vault/sdk/v6/go/vault"
	"github.com/pulumi/pulumi-vault/sdk/v6/go/vault/kv"
	"github.com/pulumi/pulumi/sdk/v3/go/pulumi"
)
func main() {
	pulumi.Run(func(ctx *pulumi.Context) error {
		kvv2, err := vault.NewMount(ctx, "kvv2", &vault.MountArgs{
			Path: pulumi.String("kvv2"),
			Type: pulumi.String("kv"),
			Options: pulumi.StringMap{
				"version": pulumi.String("2"),
			},
			Description: pulumi.String("KV Version 2 secret engine mount"),
		})
		if err != nil {
			return err
		}
		_, err = kv.NewSecretBackendV2(ctx, "example", &kv.SecretBackendV2Args{
			Mount:              kvv2.Path,
			MaxVersions:        pulumi.Int(5),
			DeleteVersionAfter: pulumi.Int(12600),
			CasRequired:        pulumi.Bool(true),
		})
		if err != nil {
			return err
		}
		return nil
	})
}

package generated_program;
import com.pulumi.Context;
import com.pulumi.Pulumi;
import com.pulumi.core.Output;
import com.pulumi.vault.Mount;
import com.pulumi.vault.MountArgs;
import com.pulumi.vault.kv.SecretBackendV2;
import com.pulumi.vault.kv.SecretBackendV2Args;
import java.util.List;
import java.util.ArrayList;
import java.util.Map;
import java.io.File;
import java.nio.file.Files;
import java.nio.file.Paths;
public class App {
    public static void main(String[] args) {
        Pulumi.run(App::stack);
    }
    public static void stack(Context ctx) {
        var kvv2 = new Mount("kvv2", MountArgs.builder()
            .path("kvv2")
            .type("kv")
            .options(Map.of("version", "2"))
            .description("KV Version 2 secret engine mount")
            .build());
        var example = new SecretBackendV2("example", SecretBackendV2Args.builder()
            .mount(kvv2.path())
            .maxVersions(5)
            .deleteVersionAfter(12600)
            .casRequired(true)
            .build());
    }
}

resources:
  kvv2:
    type: vault:Mount
    properties:
      path: kvv2
      type: kv
      options:
        version: '2'
      description: KV Version 2 secret engine mount
  example:
    type: vault:kv:SecretBackendV2
    properties:
      mount: ${kvv2.path}
      maxVersions: 5
      deleteVersionAfter: 12600
      casRequired: true

Required Vault Capabilities

Use of this resource requires the create or update capability (depending on whether the resource already exists) on the given path, the delete capability if the resource is removed from configuration, and the read capability for drift detection (by default).

Import

The KV-V2 secret backend can be imported using its unique ID, the ${mount}/config, e.g.

$ pulumi import vault:kv/secretBackendV2:SecretBackendV2 example kvv2/config

Properties

casRequired

val casRequired: Output<Boolean>

If true, all keys will require the cas parameter to be set on all write requests.

deleteVersionAfter

val deleteVersionAfter: Output<Int>?

If set, specifies the length of time before a version is deleted. Accepts duration in integer seconds.

val id: Output<String>

maxVersions

val maxVersions: Output<Int>

The number of versions to keep per key.

mount

val mount: Output<String>

Path where KV-V2 engine is mounted.

namespace

val namespace: Output<String>?

The namespace to provision the resource in. The value should not contain leading or trailing forward slashes. The namespace is always relative to the provider's configured namespace. Available only for Vault Enterprise.

pulumiChildResources

val pulumiChildResources: Set<KotlinResource>

pulumiResourceName

val pulumiResourceName: String

pulumiResourceType

val pulumiResourceType: String

urn

val urn: Output<String>