SecretBackendCert

class SecretBackendCert : KotlinCustomResource

Example Usage

import * as pulumi from "@pulumi/pulumi";
import * as vault from "@pulumi/vault";
const app = new vault.pkisecret.SecretBackendCert("app", {
backend: intermediate.path,
name: test.name,
commonName: "app.my.domain",
}, {
dependsOn: [admin],
});
import pulumi
import pulumi_vault as vault
app = vault.pki_secret.SecretBackendCert("app",
backend=intermediate["path"],
name=test["name"],
common_name="app.my.domain",
opts = pulumi.ResourceOptions(depends_on=[admin]))
using System.Collections.Generic;
using System.Linq;
using Pulumi;
using Vault = Pulumi.Vault;
return await Deployment.RunAsync(() =>
{
var app = new Vault.PkiSecret.SecretBackendCert("app", new()
{
Backend = intermediate.Path,
Name = test.Name,
CommonName = "app.my.domain",
}, new CustomResourceOptions
{
DependsOn =
{
admin,
},
});
});
package main
import (
"github.com/pulumi/pulumi-vault/sdk/v6/go/vault/pkisecret"
"github.com/pulumi/pulumi/sdk/v3/go/pulumi"
)
func main() {
pulumi.Run(func(ctx *pulumi.Context) error {
_, err := pkisecret.NewSecretBackendCert(ctx, "app", &pkisecret.SecretBackendCertArgs{
Backend: pulumi.Any(intermediate.Path),
Name: pulumi.Any(test.Name),
CommonName: pulumi.String("app.my.domain"),
}, pulumi.DependsOn([]pulumi.Resource{
admin,
}))
if err != nil {
return err
}
return nil
})
}
package generated_program;
import com.pulumi.Context;
import com.pulumi.Pulumi;
import com.pulumi.core.Output;
import com.pulumi.vault.pkiSecret.SecretBackendCert;
import com.pulumi.vault.pkiSecret.SecretBackendCertArgs;
import com.pulumi.resources.CustomResourceOptions;
import java.util.List;
import java.util.ArrayList;
import java.util.Map;
import java.io.File;
import java.nio.file.Files;
import java.nio.file.Paths;
public class App {
public static void main(String[] args) {
Pulumi.run(App::stack);
}
public static void stack(Context ctx) {
var app = new SecretBackendCert("app", SecretBackendCertArgs.builder()
.backend(intermediate.path())
.name(test.name())
.commonName("app.my.domain")
.build(), CustomResourceOptions.builder()
.dependsOn(admin)
.build());
}
}
resources:
app:
type: vault:pkiSecret:SecretBackendCert
properties:
backend: ${intermediate.path}
name: ${test.name}
commonName: app.my.domain
options:
dependsOn:
- ${admin}

Properties

Link copied to clipboard
val altNames: Output<List<String>>?

List of alternative names

Link copied to clipboard
val autoRenew: Output<Boolean>?

If set to true, certs will be renewed if the expiration is within min_seconds_remaining. Default false

Link copied to clipboard
val backend: Output<String>

The PKI secret backend the resource belongs to.

Link copied to clipboard
val caChain: Output<String>

The CA chain

Link copied to clipboard
val certificate: Output<String>

The certificate

Link copied to clipboard
val certMetadata: Output<String>?

A base 64 encoded value or an empty string to associate with the certificate's serial number. The role's no_store_metadata must be set to false, otherwise an error is returned when specified.

Link copied to clipboard
val commonName: Output<String>

CN of certificate to create

Link copied to clipboard

Flag to exclude CN from SANs

Link copied to clipboard
val expiration: Output<Int>

The expiration date of the certificate in unix epoch format

Link copied to clipboard
val format: Output<String>?

The format of data

Link copied to clipboard
val id: Output<String>
Link copied to clipboard
val ipSans: Output<List<String>>?

List of alternative IPs

Link copied to clipboard
val issuerRef: Output<String>?

Specifies the default issuer of this request.

Link copied to clipboard
val issuingCa: Output<String>

The issuing CA

Link copied to clipboard
val minSecondsRemaining: Output<Int>?

Generate a new certificate when the expiration is within this number of seconds, default is 604800 (7 days)

Link copied to clipboard
val name: Output<String>

Name of the role to create the certificate against

Link copied to clipboard
val namespace: Output<String>?

The namespace to provision the resource in. The value should not contain leading or trailing forward slashes. The namespace is always relative to the provider's configured namespace. Available only for Vault Enterprise.

Link copied to clipboard
val notAfter: Output<String>?

Set the Not After field of the certificate with specified date value. The value format should be given in UTC format YYYY-MM-ddTHH:MM:SSZ. Supports the Y10K end date for IEEE 802.1AR-2018 standard devices, 9999-12-31T23:59:59Z.

Link copied to clipboard
val otherSans: Output<List<String>>?

List of other SANs

Link copied to clipboard
val privateKey: Output<String>

The private key

Link copied to clipboard
val privateKeyFormat: Output<String>?

The private key format

Link copied to clipboard
val privateKeyType: Output<String>

The private key type

Link copied to clipboard
val pulumiChildResources: Set<KotlinResource>
Link copied to clipboard
Link copied to clipboard
Link copied to clipboard
val renewPending: Output<Boolean>

true if the current time (during refresh) is after the start of the early renewal window declared by min_seconds_remaining, and false otherwise; if auto_renew is set to true then the provider will plan to replace the certificate once renewal is pending.

Link copied to clipboard
val revoke: Output<Boolean>?

If set to true, the certificate will be revoked on resource destruction using the revoke PKI API. Conflicts with revoke_with_key. Default false.

Link copied to clipboard
val revokeWithKey: Output<Boolean>?

If set to true, the certificate will be revoked on resource destruction using the revoke-with-key PKI API. Conflicts with revoke. Default false

Link copied to clipboard
val serialNumber: Output<String>

The serial number

Link copied to clipboard
val ttl: Output<String>?

Time to live

Link copied to clipboard
val uriSans: Output<List<String>>?

List of alternative URIs

Link copied to clipboard
val urn: Output<String>
Link copied to clipboard
val userIds: Output<List<String>>?

List of Subject User IDs