Class AuthBackendState
Inheritance
System.Object
AuthBackendState
Inherited Members
System.Object.Equals(System.Object)
System.Object.Equals(System.Object, System.Object)
System.Object.GetHashCode()
System.Object.GetType()
System.Object.MemberwiseClone()
System.Object.ReferenceEquals(System.Object, System.Object)
System.Object.ToString()
Assembly: Pulumi.Vault.dll
Syntax
public sealed class AuthBackendState : ResourceArgs
Constructors
View Source
AuthBackendState()
Declaration
public AuthBackendState()
Properties
View Source
Accessor
The accessor for this auth mount.
Declaration
public Input<string> Accessor { get; set; }
Property Value
| Type |
Description |
| Input<System.String> |
|
View Source
Binddn
DN of object to bind when performing user search
Declaration
public Input<string> Binddn { get; set; }
Property Value
| Type |
Description |
| Input<System.String> |
|
View Source
Bindpass
Password to use with binddn when performing user search
Declaration
public Input<string> Bindpass { get; set; }
Property Value
| Type |
Description |
| Input<System.String> |
|
View Source
Certificate
Trusted CA to validate TLS certificate
Declaration
public Input<string> Certificate { get; set; }
Property Value
| Type |
Description |
| Input<System.String> |
|
View Source
DenyNullBind
Declaration
public Input<bool> DenyNullBind { get; set; }
Property Value
| Type |
Description |
| Input<System.Boolean> |
|
View Source
Description
Description for the LDAP auth backend mount
Declaration
public Input<string> Description { get; set; }
Property Value
| Type |
Description |
| Input<System.String> |
|
View Source
Discoverdn
Declaration
public Input<bool> Discoverdn { get; set; }
Property Value
| Type |
Description |
| Input<System.Boolean> |
|
View Source
Groupattr
LDAP attribute to follow on objects returned by groupfilter
Declaration
public Input<string> Groupattr { get; set; }
Property Value
| Type |
Description |
| Input<System.String> |
|
View Source
Groupdn
Base DN under which to perform group search
Declaration
public Input<string> Groupdn { get; set; }
Property Value
| Type |
Description |
| Input<System.String> |
|
View Source
Groupfilter
Go template used to construct group membership query
Declaration
public Input<string> Groupfilter { get; set; }
Property Value
| Type |
Description |
| Input<System.String> |
|
View Source
InsecureTls
Control whether or TLS certificates must be validated
Declaration
public Input<bool> InsecureTls { get; set; }
Property Value
| Type |
Description |
| Input<System.Boolean> |
|
View Source
Path
Path to mount the LDAP auth backend under
Declaration
public Input<string> Path { get; set; }
Property Value
| Type |
Description |
| Input<System.String> |
|
View Source
Starttls
Control use of TLS when conecting to LDAP
Declaration
public Input<bool> Starttls { get; set; }
Property Value
| Type |
Description |
| Input<System.Boolean> |
|
View Source
TlsMaxVersion
Maximum acceptable version of TLS
Declaration
public Input<string> TlsMaxVersion { get; set; }
Property Value
| Type |
Description |
| Input<System.String> |
|
View Source
TlsMinVersion
Minimum acceptable version of TLS
Declaration
public Input<string> TlsMinVersion { get; set; }
Property Value
| Type |
Description |
| Input<System.String> |
|
View Source
TokenBoundCidrs
List of CIDR blocks; if set, specifies blocks of IP
addresses which can authenticate successfully, and ties the resulting token to these blocks
as well.
Declaration
public InputList<string> TokenBoundCidrs { get; set; }
Property Value
View Source
TokenExplicitMaxTtl
If set, will encode an
explicit max TTL
onto the token in number of seconds. This is a hard cap even if token_ttl and
token_max_ttl would otherwise allow a renewal.
Declaration
public Input<int> TokenExplicitMaxTtl { get; set; }
Property Value
| Type |
Description |
| Input<System.Int32> |
|
View Source
TokenMaxTtl
The maximum lifetime for generated tokens in number of seconds.
Its current value will be referenced at renewal time.
Declaration
public Input<int> TokenMaxTtl { get; set; }
Property Value
| Type |
Description |
| Input<System.Int32> |
|
View Source
TokenNoDefaultPolicy
If set, the default policy will not be set on
generated tokens; otherwise it will be added to the policies set in token_policies.
Declaration
public Input<bool> TokenNoDefaultPolicy { get; set; }
Property Value
| Type |
Description |
| Input<System.Boolean> |
|
View Source
TokenNumUses
The
period,
if any, in number of seconds to set on the token.
Declaration
public Input<int> TokenNumUses { get; set; }
Property Value
| Type |
Description |
| Input<System.Int32> |
|
View Source
TokenPeriod
If set, indicates that the
token generated using this role should never expire. The token should be renewed within the
duration specified by this value. At each renewal, the token's TTL will be set to the
value of this field. Specified in seconds.
Declaration
public Input<int> TokenPeriod { get; set; }
Property Value
| Type |
Description |
| Input<System.Int32> |
|
View Source
TokenPolicies
List of policies to encode onto generated tokens. Depending
on the auth method, this list may be supplemented by user/group/other values.
Declaration
public InputList<string> TokenPolicies { get; set; }
Property Value
View Source
TokenTtl
The incremental lifetime for generated tokens in number of seconds.
Its current value will be referenced at renewal time.
Declaration
public Input<int> TokenTtl { get; set; }
Property Value
| Type |
Description |
| Input<System.Int32> |
|
View Source
TokenType
The type of token that should be generated. Can be service,
batch, or default to use the mount's tuned default (which unless changed will be
service tokens). For token store roles, there are two additional possibilities:
default-service and default-batch which specify the type to return unless the client
requests a different type at generation time.
Declaration
public Input<string> TokenType { get; set; }
Property Value
| Type |
Description |
| Input<System.String> |
|
View Source
Upndomain
The userPrincipalDomain used to construct UPN string
Declaration
public Input<string> Upndomain { get; set; }
Property Value
| Type |
Description |
| Input<System.String> |
|
View Source
Url
The URL of the LDAP server
Declaration
public Input<string> Url { get; set; }
Property Value
| Type |
Description |
| Input<System.String> |
|
View Source
Userattr
Attribute on user object matching username passed in
Declaration
public Input<string> Userattr { get; set; }
Property Value
| Type |
Description |
| Input<System.String> |
|
View Source
Userdn
Base DN under which to perform user search
Declaration
public Input<string> Userdn { get; set; }
Property Value
| Type |
Description |
| Input<System.String> |
|
View Source
UseTokenGroups
Use the Active Directory tokenGroups constructed attribute of the user to find the group memberships
Declaration
public Input<bool> UseTokenGroups { get; set; }
Property Value
| Type |
Description |
| Input<System.Boolean> |
|