pulumi-vault-kotlin/com.pulumi.vault.pkiSecret.kotlin.outputs/GetBackendConfigEstResult

GetBackendConfigEstResult

data class GetBackendConfigEstResult(val auditFields: List<String>, val authenticators: List<GetBackendConfigEstAuthenticator>, val backend: String, val defaultMount: Boolean, val defaultPathPolicy: String, val enableSentinelParsing: Boolean, val enabled: Boolean, val id: String, val labelToPathPolicy: Map<String, String>, val lastUpdated: String, val namespace: String? = null)

A collection of values returned by getBackendConfigEst.

Constructors

constructor(auditFields: List<String>, authenticators: List<GetBackendConfigEstAuthenticator>, backend: String, defaultMount: Boolean, defaultPathPolicy: String, enableSentinelParsing: Boolean, enabled: Boolean, id: String, labelToPathPolicy: Map<String, String>, lastUpdated: String, namespace: String? = null)

Types

Companion

object Companion

Properties

auditFields

val auditFields: List<String>

Fields parsed from the CSR that appear in the audit and can be used by sentinel policies.

authenticators

val authenticators: List<GetBackendConfigEstAuthenticator>

Lists the mount accessors EST should delegate authentication requests towards (see below for nested schema).

backend

val backend: String

defaultMount

val defaultMount: Boolean

If set, this mount is registered as the default .well-known/est URL path. Only a single mount can enable this across a Vault cluster.

defaultPathPolicy

val defaultPathPolicy: String

Required to be set if default_mount is enabled. Specifies the behavior for requests using the default EST label. Can be sign-verbatim or a role given by role:.

enabled

val enabled: Boolean

Specifies whether EST is enabled.

enableSentinelParsing

val enableSentinelParsing: Boolean

If set, parse out fields from the provided CSR making them available for Sentinel policies.

val id: String

The provider-assigned unique ID for this managed resource.

labelToPathPolicy

val labelToPathPolicy: Map<String, String>

A pairing of an EST label with the redirected behavior for requests hitting that role. The path policy can be sign-verbatim or a role given by role:. Labels must be unique across Vault cluster, and will register .well-known/est/ URL paths.

lastUpdated

val lastUpdated: String

A read-only timestamp representing the last time the configuration was updated.

namespace

val namespace: String? = null