Class AuthBackendRoleState

Inheritance

System.Object

InputArgs

ResourceArgs

AuthBackendRoleState

Inherited Members

ResourceArgs.Empty

System.Object.Equals(System.Object)

System.Object.Equals(System.Object, System.Object)

System.Object.GetHashCode()

System.Object.GetType()

System.Object.MemberwiseClone()

System.Object.ReferenceEquals(System.Object, System.Object)

System.Object.ToString()

Namespace: Pulumi.Vault.Kubernetes

Assembly: Pulumi.Vault.dll

Syntax

public sealed class AuthBackendRoleState : ResourceArgs

Constructors

AuthBackendRoleState()

Declaration

public AuthBackendRoleState()

Properties

Audience

Audience claim to verify in the JWT.

Declaration

public Input<string> Audience { get; set; }

Property Value

Type	Description
Input<System.String>

Backend

Unique name of the kubernetes backend to configure.

Declaration

public Input<string> Backend { get; set; }

Property Value

Type	Description
Input<System.String>

BoundCidrs

If set, a list of CIDRs valid as the source address for login requests. This value is also encoded into any resulting token.

Declaration

[Obsolete("use `token_bound_cidrs` instead if you are running Vault >= 1.2")]
public InputList<string> BoundCidrs { get; set; }

Property Value

Type	Description
InputList<System.String>

BoundServiceAccountNames

List of service account names able to access this role. If set to ["*"] all names are allowed, both this and bound_service_account_namespaces can not be "*".

Declaration

public InputList<string> BoundServiceAccountNames { get; set; }

Property Value

Type	Description
InputList<System.String>

BoundServiceAccountNamespaces

List of namespaces allowed to access this role. If set to ["*"] all namespaces are allowed, both this and bound_service_account_names can not be set to "*".

Declaration

public InputList<string> BoundServiceAccountNamespaces { get; set; }

Property Value

Type	Description
InputList<System.String>

MaxTtl

The maximum allowed lifetime of tokens issued using this role, provided as a number of seconds.

Declaration

public Input<int> MaxTtl { get; set; }

Property Value

Type	Description
Input<System.Int32>

NumUses

If set, puts a use-count limitation on the issued token.

Declaration

public Input<int> NumUses { get; set; }

Property Value

Type	Description
Input<System.Int32>

Period

If set, indicates that the token generated using this role should never expire. The token should be renewed within the duration specified by this value. At each renewal, the token's TTL will be set to the value of this field. Specified in seconds.

Declaration

public Input<int> Period { get; set; }

Property Value

Type	Description
Input<System.Int32>

Policies

An array of strings specifying the policies to be set on tokens issued using this role.

Declaration

[Obsolete("use `token_policies` instead if you are running Vault >= 1.2")]
public InputList<string> Policies { get; set; }

Property Value

Type	Description
InputList<System.String>

RoleName

Name of the role.

Declaration

public Input<string> RoleName { get; set; }

Property Value

Type	Description
Input<System.String>

TokenBoundCidrs

List of CIDR blocks; if set, specifies blocks of IP addresses which can authenticate successfully, and ties the resulting token to these blocks as well.

Declaration

public InputList<string> TokenBoundCidrs { get; set; }

Property Value

Type	Description
InputList<System.String>

TokenExplicitMaxTtl

If set, will encode an explicit max TTL onto the token in number of seconds. This is a hard cap even if token_ttl and token_max_ttl would otherwise allow a renewal.

Declaration

public Input<int> TokenExplicitMaxTtl { get; set; }

Property Value

Type	Description
Input<System.Int32>

TokenMaxTtl

The maximum lifetime for generated tokens in number of seconds. Its current value will be referenced at renewal time.

Declaration

public Input<int> TokenMaxTtl { get; set; }

Property Value

Type	Description
Input<System.Int32>

TokenNoDefaultPolicy

If set, the default policy will not be set on generated tokens; otherwise it will be added to the policies set in token_policies.

Declaration

public Input<bool> TokenNoDefaultPolicy { get; set; }

Property Value

Type	Description
Input<System.Boolean>

TokenNumUses

The period, if any, in number of seconds to set on the token.

Declaration

public Input<int> TokenNumUses { get; set; }

Property Value

Type	Description
Input<System.Int32>

TokenPeriod

If set, indicates that the token generated using this role should never expire. The token should be renewed within the duration specified by this value. At each renewal, the token's TTL will be set to the value of this field. Specified in seconds.

Declaration

public Input<int> TokenPeriod { get; set; }

Property Value

Type	Description
Input<System.Int32>

TokenPolicies

List of policies to encode onto generated tokens. Depending on the auth method, this list may be supplemented by user/group/other values.

Declaration

public InputList<string> TokenPolicies { get; set; }

Property Value

Type	Description
InputList<System.String>

TokenTtl

The incremental lifetime for generated tokens in number of seconds. Its current value will be referenced at renewal time.

Declaration

public Input<int> TokenTtl { get; set; }

Property Value

Type	Description
Input<System.Int32>

TokenType

The type of token that should be generated. Can be service, batch, or default to use the mount's tuned default (which unless changed will be service tokens). For token store roles, there are two additional possibilities: default-service and default-batch which specify the type to return unless the client requests a different type at generation time.

Declaration

public Input<string> TokenType { get; set; }

Property Value

Type	Description
Input<System.String>

Ttl

The TTL period of tokens issued using this role, provided as a number of seconds.

Declaration

public Input<int> Ttl { get; set; }

Property Value

Type	Description
Input<System.Int32>