UNPKG

@pulumi/scm

Version:

A Pulumi package for managing resources on Strata Cloud Manager.. Based on terraform-provider-scm: version v0.2.1

279 lines (278 loc) 8.7 kB
import * as pulumi from "@pulumi/pulumi"; import * as inputs from "./types/input"; import * as outputs from "./types/output"; /** * CertificateProfile resource * * ## Example Usage * * ```typescript * import * as pulumi from "@pulumi/pulumi"; * import * as scm from "@pulumi/scm"; * * const scmCp1 = new scm.CertificateProfile("scm_cp_1", { * folder: "Shared", * name: "scm_cp_1", * domain: "test", * useCrl: true, * useOcsp: true, * blockUnknownCert: true, * blockTimeoutCert: true, * blockUnauthenticatedCert: true, * blockExpiredCert: true, * crlReceiveTimeout: "5", * ocspReceiveTimeout: "5", * certStatusTimeout: "5", * caCertificates: [{ * name: "Forward-Trust-CA", * defaultOcspUrl: "http://test.com", * ocspVerifyCert: "Forward-Trust-CA-ECDSA", * templateName: "something", * }], * usernameField: { * subject: "common-name", * }, * }); * ``` */ export declare class CertificateProfile extends pulumi.CustomResource { /** * Get an existing CertificateProfile resource's state with the given name, ID, and optional extra * properties used to qualify the lookup. * * @param name The _unique_ name of the resulting resource. * @param id The _unique_ provider ID of the resource to lookup. * @param state Any extra arguments used during the lookup. * @param opts Optional settings to control the behavior of the CustomResource. */ static get(name: string, id: pulumi.Input<pulumi.ID>, state?: CertificateProfileState, opts?: pulumi.CustomResourceOptions): CertificateProfile; /** * Returns true if the given object is an instance of CertificateProfile. This is designed to work even * when multiple copies of the Pulumi SDK have been loaded into the same process. */ static isInstance(obj: any): obj is CertificateProfile; /** * Block sessions with expired certificates? */ readonly blockExpiredCert: pulumi.Output<boolean | undefined>; /** * Block session if certificate status cannot be retrieved within timeout? */ readonly blockTimeoutCert: pulumi.Output<boolean | undefined>; /** * Block session if the certificate was not issued to the authenticating device? */ readonly blockUnauthenticatedCert: pulumi.Output<boolean | undefined>; /** * Block session if certificate status is unknown? */ readonly blockUnknownCert: pulumi.Output<boolean | undefined>; /** * An ordered list of CA certificates */ readonly caCertificates: pulumi.Output<outputs.CertificateProfileCaCertificate[]>; /** * Certificate status timeout */ readonly certStatusTimeout: pulumi.Output<string | undefined>; /** * CRL receive timeout (seconds) */ readonly crlReceiveTimeout: pulumi.Output<string | undefined>; /** * The device in which the resource is defined */ readonly device: pulumi.Output<string | undefined>; /** * User domain */ readonly domain: pulumi.Output<string | undefined>; /** * The folder in which the resource is defined * * > ℹ️ **Note:** You must specify exactly one of `device`, `folder`, and `snippet`. */ readonly folder: pulumi.Output<string | undefined>; /** * The name of the certificate profile */ readonly name: pulumi.Output<string>; /** * OCSP receive timeout (seconds) */ readonly ocspReceiveTimeout: pulumi.Output<string | undefined>; /** * The snippet in which the resource is defined * * > ℹ️ **Note:** You must specify exactly one of `device`, `folder`, and `snippet`. */ readonly snippet: pulumi.Output<string | undefined>; readonly tfid: pulumi.Output<string>; /** * Use CRL? */ readonly useCrl: pulumi.Output<boolean | undefined>; /** * Use OCSP? */ readonly useOcsp: pulumi.Output<boolean | undefined>; /** * Certificate username field */ readonly usernameField: pulumi.Output<outputs.CertificateProfileUsernameField | undefined>; /** * Create a CertificateProfile resource with the given unique name, arguments, and options. * * @param name The _unique_ name of the resource. * @param args The arguments to use to populate this resource's properties. * @param opts A bag of options that control this resource's behavior. */ constructor(name: string, args: CertificateProfileArgs, opts?: pulumi.CustomResourceOptions); } /** * Input properties used for looking up and filtering CertificateProfile resources. */ export interface CertificateProfileState { /** * Block sessions with expired certificates? */ blockExpiredCert?: pulumi.Input<boolean>; /** * Block session if certificate status cannot be retrieved within timeout? */ blockTimeoutCert?: pulumi.Input<boolean>; /** * Block session if the certificate was not issued to the authenticating device? */ blockUnauthenticatedCert?: pulumi.Input<boolean>; /** * Block session if certificate status is unknown? */ blockUnknownCert?: pulumi.Input<boolean>; /** * An ordered list of CA certificates */ caCertificates?: pulumi.Input<pulumi.Input<inputs.CertificateProfileCaCertificate>[]>; /** * Certificate status timeout */ certStatusTimeout?: pulumi.Input<string>; /** * CRL receive timeout (seconds) */ crlReceiveTimeout?: pulumi.Input<string>; /** * The device in which the resource is defined */ device?: pulumi.Input<string>; /** * User domain */ domain?: pulumi.Input<string>; /** * The folder in which the resource is defined * * > ℹ️ **Note:** You must specify exactly one of `device`, `folder`, and `snippet`. */ folder?: pulumi.Input<string>; /** * The name of the certificate profile */ name?: pulumi.Input<string>; /** * OCSP receive timeout (seconds) */ ocspReceiveTimeout?: pulumi.Input<string>; /** * The snippet in which the resource is defined * * > ℹ️ **Note:** You must specify exactly one of `device`, `folder`, and `snippet`. */ snippet?: pulumi.Input<string>; tfid?: pulumi.Input<string>; /** * Use CRL? */ useCrl?: pulumi.Input<boolean>; /** * Use OCSP? */ useOcsp?: pulumi.Input<boolean>; /** * Certificate username field */ usernameField?: pulumi.Input<inputs.CertificateProfileUsernameField>; } /** * The set of arguments for constructing a CertificateProfile resource. */ export interface CertificateProfileArgs { /** * Block sessions with expired certificates? */ blockExpiredCert?: pulumi.Input<boolean>; /** * Block session if certificate status cannot be retrieved within timeout? */ blockTimeoutCert?: pulumi.Input<boolean>; /** * Block session if the certificate was not issued to the authenticating device? */ blockUnauthenticatedCert?: pulumi.Input<boolean>; /** * Block session if certificate status is unknown? */ blockUnknownCert?: pulumi.Input<boolean>; /** * An ordered list of CA certificates */ caCertificates: pulumi.Input<pulumi.Input<inputs.CertificateProfileCaCertificate>[]>; /** * Certificate status timeout */ certStatusTimeout?: pulumi.Input<string>; /** * CRL receive timeout (seconds) */ crlReceiveTimeout?: pulumi.Input<string>; /** * The device in which the resource is defined */ device?: pulumi.Input<string>; /** * User domain */ domain?: pulumi.Input<string>; /** * The folder in which the resource is defined * * > ℹ️ **Note:** You must specify exactly one of `device`, `folder`, and `snippet`. */ folder?: pulumi.Input<string>; /** * The name of the certificate profile */ name?: pulumi.Input<string>; /** * OCSP receive timeout (seconds) */ ocspReceiveTimeout?: pulumi.Input<string>; /** * The snippet in which the resource is defined * * > ℹ️ **Note:** You must specify exactly one of `device`, `folder`, and `snippet`. */ snippet?: pulumi.Input<string>; /** * Use CRL? */ useCrl?: pulumi.Input<boolean>; /** * Use OCSP? */ useOcsp?: pulumi.Input<boolean>; /** * Certificate username field */ usernameField?: pulumi.Input<inputs.CertificateProfileUsernameField>; }