BackendConfigCmpv2Args

data class BackendConfigCmpv2Args(val auditFields: Output<List<String>>? = null, val authenticators: Output<BackendConfigCmpv2AuthenticatorsArgs>? = null, val backend: Output<String>? = null, val defaultPathPolicy: Output<String>? = null, val disabledValidations: Output<List<String>>? = null, val enableSentinelParsing: Output<Boolean>? = null, val enabled: Output<Boolean>? = null, val namespace: Output<String>? = null) : ConvertibleToJava<BackendConfigCmpv2Args>

Allows setting the CMPv2 configuration on a PKI Secret Backend

Import

The PKI config cluster can be imported using the resource's id. In the case of the example above the id would be pki-root/config/cmpv2, where the pki-root component is the resource's backend, e.g.

$ pulumi import vault:pkiSecret/backendConfigCmpv2:BackendConfigCmpv2 example pki-root/config/cmpv2

Constructors

Link copied to clipboard
constructor(auditFields: Output<List<String>>? = null, authenticators: Output<BackendConfigCmpv2AuthenticatorsArgs>? = null, backend: Output<String>? = null, defaultPathPolicy: Output<String>? = null, disabledValidations: Output<List<String>>? = null, enableSentinelParsing: Output<Boolean>? = null, enabled: Output<Boolean>? = null, namespace: Output<String>? = null)

Properties

Link copied to clipboard
val auditFields: Output<List<String>>? = null

Fields parsed from the CSR that appear in the audit and can be used by sentinel policies.

Link copied to clipboard

Lists the mount accessors CMPv2 should delegate authentication requests towards (see below for nested schema).

Link copied to clipboard
val backend: Output<String>? = null

The path to the PKI secret backend to read the CMPv2 configuration from, with no leading or trailing /s.

Link copied to clipboard
val defaultPathPolicy: Output<String>? = null

Specifies the behavior for requests using the non-role-qualified CMPv2 requests. Can be sign-verbatim or a role given by role:.

Link copied to clipboard
val disabledValidations: Output<List<String>>? = null

A comma-separated list of validations not to perform on CMPv2 messages.

Link copied to clipboard
val enabled: Output<Boolean>? = null

Specifies whether CMPv2 is enabled.

Link copied to clipboard
val enableSentinelParsing: Output<Boolean>? = null

If set, parse out fields from the provided CSR making them available for Sentinel policies.

Link copied to clipboard
val namespace: Output<String>? = null

The namespace of the target resource. The value should not contain leading or trailing forward slashes. The namespace is always relative to the provider's configured namespace. Available only for Vault Enterprise.

Functions

Link copied to clipboard
open override fun toJava(): BackendConfigCmpv2Args