import * as pulumi from "@pulumi/pulumi"; import * as inputs from "./types/input"; import * as outputs from "./types/output"; export declare class IdentityTlsCertAuth extends pulumi.CustomResource { /** * Get an existing IdentityTlsCertAuth resource's state with the given name, ID, and optional extra * properties used to qualify the lookup. * * @param name The _unique_ name of the resulting resource. * @param id The _unique_ provider ID of the resource to lookup. * @param state Any extra arguments used during the lookup. * @param opts Optional settings to control the behavior of the CustomResource. */ static get(name: string, id: pulumi.Input, state?: IdentityTlsCertAuthState, opts?: pulumi.CustomResourceOptions): IdentityTlsCertAuth; /** * Returns true if the given object is an instance of IdentityTlsCertAuth. This is designed to work even * when multiple copies of the Pulumi SDK have been loaded into the same process. */ static isInstance(obj: any): obj is IdentityTlsCertAuth; /** * The maximum lifetime for an access token in seconds. This value will be referenced at renewal time. Default: 2592000 */ readonly accessTokenMaxTtl: pulumi.Output; /** * The maximum number of times that an access token can be used; a value of 0 implies infinite number of uses. Default:0 */ readonly accessTokenNumUsesLimit: pulumi.Output; /** * A list of IPs or CIDR ranges that access tokens can be used from. You can use 0.0.0.0/0, to allow usage from any network address.. */ readonly accessTokenTrustedIps: pulumi.Output; /** * The lifetime for an access token in seconds. This value will be referenced at renewal time. Default: 2592000 */ readonly accessTokenTtl: pulumi.Output; /** * List of trusted common names that client certificates must have to authenticate with Infisical. When omitted, any common name is accepted. */ readonly allowedCommonNames: pulumi.Output; /** * List of trusted subject alternative names that client certificates must have to authenticate with Infisical. Non-DNS entries must be prefixed with their type (e.g. `URI:spiffe://example.org/service`, `IP:10.0.0.1`, `EMAIL:svc@example.com`). When omitted, any subject alternative name is accepted. */ readonly allowedSubjectAltNames: pulumi.Output; /** * The PEM-encoded CA certificate that client certificates must be issued by to authenticate with Infisical. */ readonly caCertificate: pulumi.Output; /** * The ID of the identity to attach the configuration onto. */ readonly identityId: pulumi.Output; /** * Whether to build and verify the full certificate chain presented by the client up to the configured CA certificate, instead of requiring the client certificate to be signed directly by it. Default: false */ readonly verifyClientCertificateChain: pulumi.Output; /** * Create a IdentityTlsCertAuth resource with the given unique name, arguments, and options. * * @param name The _unique_ name of the resource. * @param args The arguments to use to populate this resource's properties. * @param opts A bag of options that control this resource's behavior. */ constructor(name: string, args: IdentityTlsCertAuthArgs, opts?: pulumi.CustomResourceOptions); } /** * Input properties used for looking up and filtering IdentityTlsCertAuth resources. */ export interface IdentityTlsCertAuthState { /** * The maximum lifetime for an access token in seconds. This value will be referenced at renewal time. Default: 2592000 */ accessTokenMaxTtl?: pulumi.Input; /** * The maximum number of times that an access token can be used; a value of 0 implies infinite number of uses. Default:0 */ accessTokenNumUsesLimit?: pulumi.Input; /** * A list of IPs or CIDR ranges that access tokens can be used from. You can use 0.0.0.0/0, to allow usage from any network address.. */ accessTokenTrustedIps?: pulumi.Input[] | undefined>; /** * The lifetime for an access token in seconds. This value will be referenced at renewal time. Default: 2592000 */ accessTokenTtl?: pulumi.Input; /** * List of trusted common names that client certificates must have to authenticate with Infisical. When omitted, any common name is accepted. */ allowedCommonNames?: pulumi.Input[] | undefined>; /** * List of trusted subject alternative names that client certificates must have to authenticate with Infisical. Non-DNS entries must be prefixed with their type (e.g. `URI:spiffe://example.org/service`, `IP:10.0.0.1`, `EMAIL:svc@example.com`). When omitted, any subject alternative name is accepted. */ allowedSubjectAltNames?: pulumi.Input[] | undefined>; /** * The PEM-encoded CA certificate that client certificates must be issued by to authenticate with Infisical. */ caCertificate?: pulumi.Input; /** * The ID of the identity to attach the configuration onto. */ identityId?: pulumi.Input; /** * Whether to build and verify the full certificate chain presented by the client up to the configured CA certificate, instead of requiring the client certificate to be signed directly by it. Default: false */ verifyClientCertificateChain?: pulumi.Input; } /** * The set of arguments for constructing a IdentityTlsCertAuth resource. */ export interface IdentityTlsCertAuthArgs { /** * The maximum lifetime for an access token in seconds. This value will be referenced at renewal time. Default: 2592000 */ accessTokenMaxTtl?: pulumi.Input; /** * The maximum number of times that an access token can be used; a value of 0 implies infinite number of uses. Default:0 */ accessTokenNumUsesLimit?: pulumi.Input; /** * A list of IPs or CIDR ranges that access tokens can be used from. You can use 0.0.0.0/0, to allow usage from any network address.. */ accessTokenTrustedIps?: pulumi.Input[] | undefined>; /** * The lifetime for an access token in seconds. This value will be referenced at renewal time. Default: 2592000 */ accessTokenTtl?: pulumi.Input; /** * List of trusted common names that client certificates must have to authenticate with Infisical. When omitted, any common name is accepted. */ allowedCommonNames?: pulumi.Input[] | undefined>; /** * List of trusted subject alternative names that client certificates must have to authenticate with Infisical. Non-DNS entries must be prefixed with their type (e.g. `URI:spiffe://example.org/service`, `IP:10.0.0.1`, `EMAIL:svc@example.com`). When omitted, any subject alternative name is accepted. */ allowedSubjectAltNames?: pulumi.Input[] | undefined>; /** * The PEM-encoded CA certificate that client certificates must be issued by to authenticate with Infisical. */ caCertificate: pulumi.Input; /** * The ID of the identity to attach the configuration onto. */ identityId: pulumi.Input; /** * Whether to build and verify the full certificate chain presented by the client up to the configured CA certificate, instead of requiring the client certificate to be signed directly by it. Default: false */ verifyClientCertificateChain?: pulumi.Input; } //# sourceMappingURL=identityTlsCertAuth.d.ts.map