pulumi-vault-kotlin/com.pulumi.vault.kubernetes.kotlin/KubernetesFunctions/getAuthBackendConfig

getAuthBackendConfig

suspend fun getAuthBackendConfig(argument: GetAuthBackendConfigPlainArgs): GetAuthBackendConfigResult

Reads the Role of an Kubernetes from a Vault server. See the [Vault

  • documentation](https://www.vaultproject.io/api-docs/auth/kubernetes#read-config) for more information.

Return

A collection of values returned by getAuthBackendConfig.

Parameters

argument

A collection of arguments for invoking getAuthBackendConfig.

suspend fun getAuthBackendConfig(backend: String? = null, disableIssValidation: Boolean? = null, disableLocalCaJwt: Boolean? = null, issuer: String? = null, kubernetesCaCert: String? = null, kubernetesHost: String? = null, namespace: String? = null, pemKeys: List<String>? = null, useAnnotationsAsAliasMetadata: Boolean? = null): GetAuthBackendConfigResult

Return

A collection of values returned by getAuthBackendConfig.

Parameters

backend

The unique name for the Kubernetes backend the config to retrieve Role attributes for resides in. Defaults to "kubernetes".

disableIssValidation

(Optional) Disable JWT issuer validation. Allows to skip ISS validation. Requires Vault v1.5.4+ or Vault auth kubernetes plugin v0.7.1+

disableLocalCaJwt

(Optional) Disable defaulting to the local CA cert and service account JWT when running in a Kubernetes pod. Requires Vault v1.5.4+ or Vault auth kubernetes plugin v0.7.1+

issuer

Optional JWT issuer. If no issuer is specified, kubernetes.io/serviceaccount will be used as the default issuer.

kubernetesCaCert

PEM encoded CA cert for use by the TLS client used to talk with the Kubernetes API.

kubernetesHost

Host must be a host string, a host:port pair, or a URL to the base of the Kubernetes API server.

namespace

The namespace of the target resource. The value should not contain leading or trailing forward slashes. The namespace is always relative to the provider's configured namespace. Available only for Vault Enterprise.

pemKeys

Optional list of PEM-formatted public keys or certificates used to verify the signatures of Kubernetes service account JWTs. If a certificate is given, its public key will be extracted. Not every installation of Kubernetes exposes these keys.

useAnnotationsAsAliasMetadata

(Optional) Use annotations from the client token's associated service account as alias metadata for the Vault entity. Requires Vault v1.16+ or Vault auth kubernetes plugin v0.18.0+

See also

.

suspend fun getAuthBackendConfig(argument: suspend GetAuthBackendConfigPlainArgsBuilder.() -> Unit): GetAuthBackendConfigResult

Return

A collection of values returned by getAuthBackendConfig.

Parameters

argument

Builder for com.pulumi.vault.kubernetes.kotlin.inputs.GetAuthBackendConfigPlainArgs.

See also

.