pulumi-vault-kotlin/com.pulumi.vault.database.kotlin.inputs/SecretsMountPostgresqlArgs

SecretsMountPostgresqlArgs

data class SecretsMountPostgresqlArgs(val allowedRoles: Output<List<String>>? = null, val authType: Output<String>? = null, val connectionUrl: Output<String>? = null, val data: Output<Map<String, String>>? = null, val disableAutomatedRotation: Output<Boolean>? = null, val disableEscaping: Output<Boolean>? = null, val maxConnectionLifetime: Output<Int>? = null, val maxIdleConnections: Output<Int>? = null, val maxOpenConnections: Output<Int>? = null, val name: Output<String>, val password: Output<String>? = null, val passwordAuthentication: Output<String>? = null, val pluginName: Output<String>? = null, val privateKey: Output<String>? = null, val rootRotationStatements: Output<List<String>>? = null, val rotationPeriod: Output<Int>? = null, val rotationSchedule: Output<String>? = null, val rotationWindow: Output<Int>? = null, val selfManaged: Output<Boolean>? = null, val serviceAccountJson: Output<String>? = null, val tlsCa: Output<String>? = null, val tlsCertificate: Output<String>? = null, val username: Output<String>? = null, val usernameTemplate: Output<String>? = null, val verifyConnection: Output<Boolean>? = null) : ConvertibleToJava<SecretsMountPostgresqlArgs>

Constructors

constructor(allowedRoles: Output<List<String>>? = null, authType: Output<String>? = null, connectionUrl: Output<String>? = null, data: Output<Map<String, String>>? = null, disableAutomatedRotation: Output<Boolean>? = null, disableEscaping: Output<Boolean>? = null, maxConnectionLifetime: Output<Int>? = null, maxIdleConnections: Output<Int>? = null, maxOpenConnections: Output<Int>? = null, name: Output<String>, password: Output<String>? = null, passwordAuthentication: Output<String>? = null, pluginName: Output<String>? = null, privateKey: Output<String>? = null, rootRotationStatements: Output<List<String>>? = null, rotationPeriod: Output<Int>? = null, rotationSchedule: Output<String>? = null, rotationWindow: Output<Int>? = null, selfManaged: Output<Boolean>? = null, serviceAccountJson: Output<String>? = null, tlsCa: Output<String>? = null, tlsCertificate: Output<String>? = null, username: Output<String>? = null, usernameTemplate: Output<String>? = null, verifyConnection: Output<Boolean>? = null)

Properties

allowedRoles

val allowedRoles: Output<List<String>>? = null

A list of roles that are allowed to use this connection.

authType

val authType: Output<String>? = null

Specify alternative authorization type. (Only 'gcp_iam' is valid currently)

connectionUrl

val connectionUrl: Output<String>? = null

Connection string to use to connect to the database.

data

val data: Output<Map<String, String>>? = null

A map of sensitive data to pass to the endpoint. Useful for templated connection strings.

disableAutomatedRotation

val disableAutomatedRotation: Output<Boolean>? = null

Cancels all upcoming rotations of the root credential until unset. Requires Vault Enterprise 1.19+. Supported list of database secrets engines that can be configured:

disableEscaping

val disableEscaping: Output<Boolean>? = null

Disable special character escaping in username and password

maxConnectionLifetime

val maxConnectionLifetime: Output<Int>? = null

Maximum number of seconds a connection may be reused.

maxIdleConnections

val maxIdleConnections: Output<Int>? = null

Maximum number of idle connections to the database.

maxOpenConnections

val maxOpenConnections: Output<Int>? = null

Maximum number of open connections to the database.

name

val name: Output<String>

Name of the database connection.

password

val password: Output<String>? = null

The root credential password used in the connection URL

passwordAuthentication

val passwordAuthentication: Output<String>? = null

When set to scram-sha-256, passwords will be hashed by Vault before being sent to PostgreSQL.

pluginName

val pluginName: Output<String>? = null

Specifies the name of the plugin to use.

privateKey

val privateKey: Output<String>? = null

The secret key used for the x509 client certificate. Must be PEM encoded.

rootRotationStatements

val rootRotationStatements: Output<List<String>>? = null

A list of database statements to be executed to rotate the root user's credentials.

rotationPeriod

val rotationPeriod: Output<Int>? = null

The amount of time in seconds Vault should wait before rotating the root credential. A zero value tells Vault not to rotate the root credential. The minimum rotation period is 10 seconds. Requires Vault Enterprise 1.19+.

rotationSchedule

val rotationSchedule: Output<String>? = null

The schedule, in cron-style time format, defining the schedule on which Vault should rotate the root token. Requires Vault Enterprise 1.19+.

rotationWindow

val rotationWindow: Output<Int>? = null

The maximum amount of time in seconds allowed to complete a rotation when a scheduled token rotation occurs. The default rotation window is unbound and the minimum allowable window is 3600. Requires Vault Enterprise 1.19+.

selfManaged

val selfManaged: Output<Boolean>? = null

If set, allows onboarding static roles with a rootless connection configuration.

serviceAccountJson

val serviceAccountJson: Output<String>? = null

A JSON encoded credential for use with IAM authorization

tlsCa

val tlsCa: Output<String>? = null

The x509 CA file for validating the certificate presented by the PostgreSQL server. Must be PEM encoded.

tlsCertificate

val tlsCertificate: Output<String>? = null

The x509 client certificate for connecting to the database. Must be PEM encoded.