SecretBackendRootCert

Create a SecretBackendRootCert Resource

new SecretBackendRootCert(name: string, args: SecretBackendRootCertArgs, opts?: CustomResourceOptions);

def SecretBackendRootCert(resource_name, opts=None, alt_names=None, backend=None, common_name=None, country=None, exclude_cn_from_sans=None, format=None, ip_sans=None, key_bits=None, key_type=None, locality=None, max_path_length=None, organization=None, other_sans=None, ou=None, permitted_dns_domains=None, postal_code=None, private_key_format=None, province=None, street_address=None, ttl=None, type=None, uri_sans=None, __props__=None);

func NewSecretBackendRootCert(ctx *Context, name string, args SecretBackendRootCertArgs, opts ...ResourceOption) (*SecretBackendRootCert, error)

public SecretBackendRootCert(string name, SecretBackendRootCertArgs args, CustomResourceOptions? opts = null)

name string: The unique name of the resource.
args SecretBackendRootCertArgs: The arguments to resource properties.
opts CustomResourceOptions: Bag of options to control resource's behavior.

resource_name str: The unique name of the resource.
opts ResourceOptions: A bag of options that control this resource's behavior.

ctx Context: Context object for the current deployment.
name string: The unique name of the resource.
args SecretBackendRootCertArgs: The arguments to resource properties.
opts ResourceOption: Bag of options to control resource's behavior.

name string: The unique name of the resource.
args SecretBackendRootCertArgs: The arguments to resource properties.
opts CustomResourceOptions: Bag of options to control resource's behavior.

SecretBackendRootCert Resource Properties

To learn more about resource properties and how to use them, see Inputs and Outputs in the Programming Model docs.

Inputs

The SecretBackendRootCert resource accepts the following input properties:

Backend string: The PKI secret backend the resource belongs to.
CommonName string: CN of intermediate to create
Type string: Type of intermediate to create. Must be either \“exported\” or \“internal\”
AltNames List<string>: List of alternative names
Country string: The country
ExcludeCnFromSans bool: Flag to exclude CN from SANs
Format string: The format of data
IpSans List<string>: List of alternative IPs
KeyBits int: The number of bits to use
KeyType string: The desired key type
Locality string: The locality
MaxPathLength int: The maximum path length to encode in the generated certificate
Organization string: The organization
OtherSans List<string>: List of other SANs
Ou string: The organization unit
PermittedDnsDomains List<string>: List of domains for which certificates are allowed to be issued
PostalCode string: The postal code
PrivateKeyFormat string: The private key format
Province string: The province
StreetAddress string: The street address
Ttl string: Time to live
UriSans List<string>: List of alternative URIs

Backend string: The PKI secret backend the resource belongs to.
CommonName string: CN of intermediate to create
Type string: Type of intermediate to create. Must be either \“exported\” or \“internal\”
AltNames []string: List of alternative names
Country string: The country
ExcludeCnFromSans bool: Flag to exclude CN from SANs
Format string: The format of data
IpSans []string: List of alternative IPs
KeyBits int: The number of bits to use
KeyType string: The desired key type
Locality string: The locality
MaxPathLength int: The maximum path length to encode in the generated certificate
Organization string: The organization
OtherSans []string: List of other SANs
Ou string: The organization unit
PermittedDnsDomains []string: List of domains for which certificates are allowed to be issued
PostalCode string: The postal code
PrivateKeyFormat string: The private key format
Province string: The province
StreetAddress string: The street address
Ttl string: Time to live
UriSans []string: List of alternative URIs

backend string: The PKI secret backend the resource belongs to.
commonName string: CN of intermediate to create
type string: Type of intermediate to create. Must be either \“exported\” or \“internal\”
altNames string[]: List of alternative names
country string: The country
excludeCnFromSans boolean: Flag to exclude CN from SANs
format string: The format of data
ipSans string[]: List of alternative IPs
keyBits number: The number of bits to use
keyType string: The desired key type
locality string: The locality
maxPathLength number: The maximum path length to encode in the generated certificate
organization string: The organization
otherSans string[]: List of other SANs
ou string: The organization unit
permittedDnsDomains string[]: List of domains for which certificates are allowed to be issued
postalCode string: The postal code
privateKeyFormat string: The private key format
province string: The province
streetAddress string: The street address
ttl string: Time to live
uriSans string[]: List of alternative URIs

backend str: The PKI secret backend the resource belongs to.
common_name str: CN of intermediate to create
type str: Type of intermediate to create. Must be either \“exported\” or \“internal\”
alt_names List[str]: List of alternative names
country str: The country
exclude_cn_from_sans bool: Flag to exclude CN from SANs
format str: The format of data
ip_sans List[str]: List of alternative IPs
key_bits float: The number of bits to use
key_type str: The desired key type
locality str: The locality
max_path_length float: The maximum path length to encode in the generated certificate
organization str: The organization
other_sans List[str]: List of other SANs
ou str: The organization unit
permitted_dns_domains List[str]: List of domains for which certificates are allowed to be issued
postal_code str: The postal code
private_key_format str: The private key format
province str: The province
street_address str: The street address
ttl str: Time to live
uri_sans List[str]: List of alternative URIs

Outputs

All input properties are implicitly available as output properties. Additionally, the SecretBackendRootCert resource produces the following output properties:

Certificate string: The certificate
Id string: The provider-assigned unique ID for this managed resource.
IssuingCa string: The issuing CA
Serial string: The serial

Certificate string: The certificate
Id string: The provider-assigned unique ID for this managed resource.
IssuingCa string: The issuing CA
Serial string: The serial

certificate string: The certificate
id string: The provider-assigned unique ID for this managed resource.
issuingCa string: The issuing CA
serial string: The serial

certificate str: The certificate
id str: The provider-assigned unique ID for this managed resource.
issuing_ca str: The issuing CA
serial str: The serial

Look up an Existing SecretBackendRootCert Resource

Get an existing SecretBackendRootCert resource’s state with the given name, ID, and optional extra properties used to qualify the lookup.

public static get(name: string, id: Input<ID>, state?: SecretBackendRootCertState, opts?: CustomResourceOptions): SecretBackendRootCert

static get(resource_name, id, opts=None, alt_names=None, backend=None, certificate=None, common_name=None, country=None, exclude_cn_from_sans=None, format=None, ip_sans=None, issuing_ca=None, key_bits=None, key_type=None, locality=None, max_path_length=None, organization=None, other_sans=None, ou=None, permitted_dns_domains=None, postal_code=None, private_key_format=None, province=None, serial=None, street_address=None, ttl=None, type=None, uri_sans=None, __props__=None);

func GetSecretBackendRootCert(ctx *Context, name string, id IDInput, state *SecretBackendRootCertState, opts ...ResourceOption) (*SecretBackendRootCert, error)

public static SecretBackendRootCert Get(string name, Input<string> id, SecretBackendRootCertState? state, CustomResourceOptions? opts = null)

name: The unique name of the resulting resource.
id: The unique provider ID of the resource to lookup.
state: Any extra arguments used during the lookup.
opts: A bag of options that control this resource's behavior.

resource_name: The unique name of the resulting resource.
id: The unique provider ID of the resource to lookup.

name: The unique name of the resulting resource.
id: The unique provider ID of the resource to lookup.
state: Any extra arguments used during the lookup.
opts: A bag of options that control this resource's behavior.

name: The unique name of the resulting resource.
id: The unique provider ID of the resource to lookup.
state: Any extra arguments used during the lookup.
opts: A bag of options that control this resource's behavior.

The following state arguments are supported:

AltNames List<string>: List of alternative names
Backend string: The PKI secret backend the resource belongs to.
Certificate string: The certificate
CommonName string: CN of intermediate to create
Country string: The country
ExcludeCnFromSans bool: Flag to exclude CN from SANs
Format string: The format of data
IpSans List<string>: List of alternative IPs
IssuingCa string: The issuing CA
KeyBits int: The number of bits to use
KeyType string: The desired key type
Locality string: The locality
MaxPathLength int: The maximum path length to encode in the generated certificate
Organization string: The organization
OtherSans List<string>: List of other SANs
Ou string: The organization unit
PermittedDnsDomains List<string>: List of domains for which certificates are allowed to be issued
PostalCode string: The postal code
PrivateKeyFormat string: The private key format
Province string: The province
Serial string: The serial
StreetAddress string: The street address
Ttl string: Time to live
Type string: Type of intermediate to create. Must be either \“exported\” or \“internal\”
UriSans List<string>: List of alternative URIs

AltNames []string: List of alternative names
Backend string: The PKI secret backend the resource belongs to.
Certificate string: The certificate
CommonName string: CN of intermediate to create
Country string: The country
ExcludeCnFromSans bool: Flag to exclude CN from SANs
Format string: The format of data
IpSans []string: List of alternative IPs
IssuingCa string: The issuing CA
KeyBits int: The number of bits to use
KeyType string: The desired key type
Locality string: The locality
MaxPathLength int: The maximum path length to encode in the generated certificate
Organization string: The organization
OtherSans []string: List of other SANs
Ou string: The organization unit
PermittedDnsDomains []string: List of domains for which certificates are allowed to be issued
PostalCode string: The postal code
PrivateKeyFormat string: The private key format
Province string: The province
Serial string: The serial
StreetAddress string: The street address
Ttl string: Time to live
Type string: Type of intermediate to create. Must be either \“exported\” or \“internal\”
UriSans []string: List of alternative URIs

altNames string[]: List of alternative names
backend string: The PKI secret backend the resource belongs to.
certificate string: The certificate
commonName string: CN of intermediate to create
country string: The country
excludeCnFromSans boolean: Flag to exclude CN from SANs
format string: The format of data
ipSans string[]: List of alternative IPs
issuingCa string: The issuing CA
keyBits number: The number of bits to use
keyType string: The desired key type
locality string: The locality
maxPathLength number: The maximum path length to encode in the generated certificate
organization string: The organization
otherSans string[]: List of other SANs
ou string: The organization unit
permittedDnsDomains string[]: List of domains for which certificates are allowed to be issued
postalCode string: The postal code
privateKeyFormat string: The private key format
province string: The province
serial string: The serial
streetAddress string: The street address
ttl string: Time to live
type string: Type of intermediate to create. Must be either \“exported\” or \“internal\”
uriSans string[]: List of alternative URIs

alt_names List[str]: List of alternative names
backend str: The PKI secret backend the resource belongs to.
certificate str: The certificate
common_name str: CN of intermediate to create
country str: The country
exclude_cn_from_sans bool: Flag to exclude CN from SANs
format str: The format of data
ip_sans List[str]: List of alternative IPs
issuing_ca str: The issuing CA
key_bits float: The number of bits to use
key_type str: The desired key type
locality str: The locality
max_path_length float: The maximum path length to encode in the generated certificate
organization str: The organization
other_sans List[str]: List of other SANs
ou str: The organization unit
permitted_dns_domains List[str]: List of domains for which certificates are allowed to be issued
postal_code str: The postal code
private_key_format str: The private key format
province str: The province
serial str: The serial
street_address str: The street address
ttl str: Time to live
type str: Type of intermediate to create. Must be either \“exported\” or \“internal\”
uri_sans List[str]: List of alternative URIs

Package Details

Repository: https://github.com/pulumi/pulumi-vault
License: Apache-2.0
Notes: This Pulumi package is based on the vault Terraform Provider.

The Pulumi Platform

Get Started

Migrate to Pulumi

Solutions for All Teams and Engineers

Any Code

Any Cloud