Namespace Pulumi.Vault.Gcp

Classes

AuthBackend

Provides a resource to configure the GCP auth backend within Vault.

Example Usage

using System.IO;
using Pulumi;
using Vault = Pulumi.Vault;

class MyStack : Stack
{
public MyStack()
{
    var gcp = new Vault.Gcp.AuthBackend("gcp", new Vault.Gcp.AuthBackendArgs
    {
        Credentials = File.ReadAllText("vault-gcp-credentials.json"),
    });
}

}

AuthBackendArgs

AuthBackendRole

Provides a resource to create a role in an GCP auth backend within Vault.

AuthBackendRoleArgs

AuthBackendRoleState

AuthBackendState

SecretBackend

SecretBackendArgs

SecretBackendState

SecretRoleset

Creates a Roleset in the GCP Secrets Engine for Vault.

Each Roleset is tied to a Service Account, and can have one or more bindings associated with it.

Example Usage

using System.IO;
using Pulumi;
using Vault = Pulumi.Vault;

class MyStack : Stack
{
public MyStack()
{
    var project = "my-awesome-project";
    var gcp = new Vault.Gcp.SecretBackend("gcp", new Vault.Gcp.SecretBackendArgs
    {
        Credentials = File.ReadAllText("credentials.json"),
        Path = "gcp",
    });
    var roleset = new Vault.Gcp.SecretRoleset("roleset", new Vault.Gcp.SecretRolesetArgs
    {
        Backend = gcp.Path,
        Bindings = 
        {
            new Vault.Gcp.Inputs.SecretRolesetBindingArgs
            {
                Resource = $"//cloudresourcemanager.googleapis.com/projects/{project}",
                Roles = 
                {
                    "roles/viewer",
                },
            },
        },
        Project = project,
        Roleset = "project_viewer",
        SecretType = "access_token",
        TokenScopes = 
        {
            "https://www.googleapis.com/auth/cloud-platform",
        },
    });
}

}

SecretRolesetArgs

SecretRolesetState