Secret Backend Cert Args
data class SecretBackendCertArgs(val altNames: Output<List<String>>? = null, val autoRenew: Output<Boolean>? = null, val backend: Output<String>? = null, val certMetadata: Output<String>? = null, val commonName: Output<String>? = null, val excludeCnFromSans: Output<Boolean>? = null, val format: Output<String>? = null, val ipSans: Output<List<String>>? = null, val issuerRef: Output<String>? = null, val minSecondsRemaining: Output<Int>? = null, val name: Output<String>? = null, val namespace: Output<String>? = null, val notAfter: Output<String>? = null, val otherSans: Output<List<String>>? = null, val privateKeyFormat: Output<String>? = null, val revoke: Output<Boolean>? = null, val revokeWithKey: Output<Boolean>? = null, val ttl: Output<String>? = null, val uriSans: Output<List<String>>? = null, val userIds: Output<List<String>>? = null) : ConvertibleToJava<SecretBackendCertArgs>
Example Usage
import * as pulumi from "@pulumi/pulumi";
import * as vault from "@pulumi/vault";
const app = new vault.pkisecret.SecretBackendCert("app", {
backend: intermediate.path,
name: test.name,
commonName: "app.my.domain",
}, {
dependsOn: [admin],
});
Content copied to clipboard
import pulumi
import pulumi_vault as vault
app = vault.pki_secret.SecretBackendCert("app",
backend=intermediate["path"],
name=test["name"],
common_name="app.my.domain",
opts = pulumi.ResourceOptions(depends_on=[admin]))
Content copied to clipboard
using System.Collections.Generic;
using System.Linq;
using Pulumi;
using Vault = Pulumi.Vault;
return await Deployment.RunAsync(() =>
{
var app = new Vault.PkiSecret.SecretBackendCert("app", new()
{
Backend = intermediate.Path,
Name = test.Name,
CommonName = "app.my.domain",
}, new CustomResourceOptions
{
DependsOn =
{
admin,
},
});
});
Content copied to clipboard
package main
import (
"github.com/pulumi/pulumi-vault/sdk/v6/go/vault/pkisecret"
"github.com/pulumi/pulumi/sdk/v3/go/pulumi"
)
func main() {
pulumi.Run(func(ctx *pulumi.Context) error {
_, err := pkisecret.NewSecretBackendCert(ctx, "app", &pkisecret.SecretBackendCertArgs{
Backend: pulumi.Any(intermediate.Path),
Name: pulumi.Any(test.Name),
CommonName: pulumi.String("app.my.domain"),
}, pulumi.DependsOn([]pulumi.Resource{
admin,
}))
if err != nil {
return err
}
return nil
})
}
Content copied to clipboard
package generated_program;
import com.pulumi.Context;
import com.pulumi.Pulumi;
import com.pulumi.core.Output;
import com.pulumi.vault.pkiSecret.SecretBackendCert;
import com.pulumi.vault.pkiSecret.SecretBackendCertArgs;
import com.pulumi.resources.CustomResourceOptions;
import java.util.List;
import java.util.ArrayList;
import java.util.Map;
import java.io.File;
import java.nio.file.Files;
import java.nio.file.Paths;
public class App {
public static void main(String[] args) {
Pulumi.run(App::stack);
}
public static void stack(Context ctx) {
var app = new SecretBackendCert("app", SecretBackendCertArgs.builder()
.backend(intermediate.path())
.name(test.name())
.commonName("app.my.domain")
.build(), CustomResourceOptions.builder()
.dependsOn(admin)
.build());
}
}
Content copied to clipboard
resources:
app:
type: vault:pkiSecret:SecretBackendCert
properties:
backend: ${intermediate.path}
name: ${test.name}
commonName: app.my.domain
options:
dependsOn:
- ${admin}
Content copied to clipboard
Constructors
Link copied to clipboard
constructor(altNames: Output<List<String>>? = null, autoRenew: Output<Boolean>? = null, backend: Output<String>? = null, certMetadata: Output<String>? = null, commonName: Output<String>? = null, excludeCnFromSans: Output<Boolean>? = null, format: Output<String>? = null, ipSans: Output<List<String>>? = null, issuerRef: Output<String>? = null, minSecondsRemaining: Output<Int>? = null, name: Output<String>? = null, namespace: Output<String>? = null, notAfter: Output<String>? = null, otherSans: Output<List<String>>? = null, privateKeyFormat: Output<String>? = null, revoke: Output<Boolean>? = null, revokeWithKey: Output<Boolean>? = null, ttl: Output<String>? = null, uriSans: Output<List<String>>? = null, userIds: Output<List<String>>? = null)
Properties
Link copied to clipboard
A base 64 encoded value or an empty string to associate with the certificate's serial number. The role's no_store_metadata must be set to false, otherwise an error is returned when specified.
Link copied to clipboard
CN of certificate to create
Link copied to clipboard
Flag to exclude CN from SANs
Link copied to clipboard
Generate a new certificate when the expiration is within this number of seconds, default is 604800 (7 days)
Link copied to clipboard
The private key format
Link copied to clipboard
If set to true
, the certificate will be revoked on resource destruction using the revoke-with-key
PKI API. Conflicts with revoke
. Default false