# coding=utf-8 # *** WARNING: this file was generated by pulumi-language-python. *** # *** Do not edit by hand unless you're certain you know what you are doing! *** import builtins as _builtins import warnings import sys import pulumi import pulumi.runtime from typing import Any, Mapping, Optional, Sequence, Union, overload if sys.version_info >= (3, 11): from typing import NotRequired, TypedDict, TypeAlias else: from typing_extensions import NotRequired, TypedDict, TypeAlias from . import _utilities __all__ = ['VaultProviderArgs', 'VaultProvider'] @pulumi.input_type class VaultProviderArgs: def __init__(__self__, *, assignments: pulumi.Input[_builtins.str], config: pulumi.Input[_builtins.str], name: pulumi.Input[Optional[_builtins.str]] = None): """ The set of arguments for constructing a VaultProvider resource. :param pulumi.Input[_builtins.str] assignments: JSON array scoping which projects or environments may resolve secrets from this provider. Pass `jsonencode([])` to leave it unscoped. :param pulumi.Input[_builtins.str] config: Provider credentials as a JSON object, including the `providerType` discriminator. :param pulumi.Input[_builtins.str] name: Name of the connection, unique within the organization. """ pulumi.set(__self__, "assignments", assignments) pulumi.set(__self__, "config", config) if name is not None: pulumi.set(__self__, "name", name) @_builtins.property @pulumi.getter def assignments(self) -> pulumi.Input[_builtins.str]: """ JSON array scoping which projects or environments may resolve secrets from this provider. Pass `jsonencode([])` to leave it unscoped. """ return pulumi.get(self, "assignments") @assignments.setter def assignments(self, value: pulumi.Input[_builtins.str]): pulumi.set(self, "assignments", value) @_builtins.property @pulumi.getter def config(self) -> pulumi.Input[_builtins.str]: """ Provider credentials as a JSON object, including the `providerType` discriminator. """ return pulumi.get(self, "config") @config.setter def config(self, value: pulumi.Input[_builtins.str]): pulumi.set(self, "config", value) @_builtins.property @pulumi.getter def name(self) -> pulumi.Input[Optional[_builtins.str]]: """ Name of the connection, unique within the organization. """ return pulumi.get(self, "name") @name.setter def name(self, value: pulumi.Input[Optional[_builtins.str]]): pulumi.set(self, "name", value) @pulumi.input_type class _VaultProviderState: def __init__(__self__, *, assignments: pulumi.Input[Optional[_builtins.str]] = None, config: pulumi.Input[Optional[_builtins.str]] = None, created_at: pulumi.Input[Optional[_builtins.str]] = None, name: pulumi.Input[Optional[_builtins.str]] = None, organization_id: pulumi.Input[Optional[_builtins.str]] = None, provider_type: pulumi.Input[Optional[_builtins.str]] = None): """ Input properties used for looking up and filtering VaultProvider resources. :param pulumi.Input[_builtins.str] assignments: JSON array scoping which projects or environments may resolve secrets from this provider. Pass `jsonencode([])` to leave it unscoped. :param pulumi.Input[_builtins.str] config: Provider credentials as a JSON object, including the `providerType` discriminator. :param pulumi.Input[_builtins.str] created_at: RFC 3339 timestamp of when the connection was created. :param pulumi.Input[_builtins.str] name: Name of the connection, unique within the organization. :param pulumi.Input[_builtins.str] organization_id: Organization that owns the connection. :param pulumi.Input[_builtins.str] provider_type: Provider kind derived from `config`. """ if assignments is not None: pulumi.set(__self__, "assignments", assignments) if config is not None: pulumi.set(__self__, "config", config) if created_at is not None: pulumi.set(__self__, "created_at", created_at) if name is not None: pulumi.set(__self__, "name", name) if organization_id is not None: pulumi.set(__self__, "organization_id", organization_id) if provider_type is not None: pulumi.set(__self__, "provider_type", provider_type) @_builtins.property @pulumi.getter def assignments(self) -> pulumi.Input[Optional[_builtins.str]]: """ JSON array scoping which projects or environments may resolve secrets from this provider. Pass `jsonencode([])` to leave it unscoped. """ return pulumi.get(self, "assignments") @assignments.setter def assignments(self, value: pulumi.Input[Optional[_builtins.str]]): pulumi.set(self, "assignments", value) @_builtins.property @pulumi.getter def config(self) -> pulumi.Input[Optional[_builtins.str]]: """ Provider credentials as a JSON object, including the `providerType` discriminator. """ return pulumi.get(self, "config") @config.setter def config(self, value: pulumi.Input[Optional[_builtins.str]]): pulumi.set(self, "config", value) @_builtins.property @pulumi.getter(name="createdAt") def created_at(self) -> pulumi.Input[Optional[_builtins.str]]: """ RFC 3339 timestamp of when the connection was created. """ return pulumi.get(self, "created_at") @created_at.setter def created_at(self, value: pulumi.Input[Optional[_builtins.str]]): pulumi.set(self, "created_at", value) @_builtins.property @pulumi.getter def name(self) -> pulumi.Input[Optional[_builtins.str]]: """ Name of the connection, unique within the organization. """ return pulumi.get(self, "name") @name.setter def name(self, value: pulumi.Input[Optional[_builtins.str]]): pulumi.set(self, "name", value) @_builtins.property @pulumi.getter(name="organizationId") def organization_id(self) -> pulumi.Input[Optional[_builtins.str]]: """ Organization that owns the connection. """ return pulumi.get(self, "organization_id") @organization_id.setter def organization_id(self, value: pulumi.Input[Optional[_builtins.str]]): pulumi.set(self, "organization_id", value) @_builtins.property @pulumi.getter(name="providerType") def provider_type(self) -> pulumi.Input[Optional[_builtins.str]]: """ Provider kind derived from `config`. """ return pulumi.get(self, "provider_type") @provider_type.setter def provider_type(self, value: pulumi.Input[Optional[_builtins.str]]): pulumi.set(self, "provider_type", value) @pulumi.type_token("dokploy:index/vaultProvider:VaultProvider") class VaultProvider(pulumi.CustomResource): @overload def __init__(__self__, resource_name: str, opts: Optional[pulumi.ResourceOptions] = None, assignments: pulumi.Input[Optional[_builtins.str]] = None, config: pulumi.Input[Optional[_builtins.str]] = None, name: pulumi.Input[Optional[_builtins.str]] = None, __props__=None): """ An external secret manager Dokploy resolves environment variables from at deploy time. Reference a secret from any `env` value with `${{vault..}}`. The value is fetched when the deployment runs and is never stored in Dokploy — so rotating it in the vault takes effect on the next deploy with no Terraform change. Supported `providerType` values: `hashicorp` (Vault/OpenBao), `infisical`, `aws` (Secrets Manager), `doppler`, `azure` (Key Vault) and `scaleway`. :param str resource_name: The name of the resource. :param pulumi.ResourceOptions opts: Options for the resource. :param pulumi.Input[_builtins.str] assignments: JSON array scoping which projects or environments may resolve secrets from this provider. Pass `jsonencode([])` to leave it unscoped. :param pulumi.Input[_builtins.str] config: Provider credentials as a JSON object, including the `providerType` discriminator. :param pulumi.Input[_builtins.str] name: Name of the connection, unique within the organization. """ ... @overload def __init__(__self__, resource_name: str, args: VaultProviderArgs, opts: Optional[pulumi.ResourceOptions] = None): """ An external secret manager Dokploy resolves environment variables from at deploy time. Reference a secret from any `env` value with `${{vault..}}`. The value is fetched when the deployment runs and is never stored in Dokploy — so rotating it in the vault takes effect on the next deploy with no Terraform change. Supported `providerType` values: `hashicorp` (Vault/OpenBao), `infisical`, `aws` (Secrets Manager), `doppler`, `azure` (Key Vault) and `scaleway`. :param str resource_name: The name of the resource. :param VaultProviderArgs args: The arguments to use to populate this resource's properties. :param pulumi.ResourceOptions opts: Options for the resource. """ ... def __init__(__self__, resource_name: str, *args, **kwargs): resource_args, opts = _utilities.get_resource_args_opts(VaultProviderArgs, pulumi.ResourceOptions, *args, **kwargs) if resource_args is not None: __self__._internal_init(resource_name, opts, **resource_args.__dict__) else: __self__._internal_init(resource_name, *args, **kwargs) def _internal_init(__self__, resource_name: str, opts: Optional[pulumi.ResourceOptions] = None, assignments: pulumi.Input[Optional[_builtins.str]] = None, config: pulumi.Input[Optional[_builtins.str]] = None, name: pulumi.Input[Optional[_builtins.str]] = None, __props__=None): opts = pulumi.ResourceOptions.merge(_utilities.get_resource_opts_defaults(), opts) if not isinstance(opts, pulumi.ResourceOptions): raise TypeError('Expected resource options to be a ResourceOptions instance') if opts.id is None: if __props__ is not None: raise TypeError('__props__ is only valid when passed in combination with a valid opts.id to get an existing resource') __props__ = VaultProviderArgs.__new__(VaultProviderArgs) if assignments is None and not opts.urn: raise TypeError("Missing required property 'assignments'") __props__.__dict__["assignments"] = assignments if config is None and not opts.urn: raise TypeError("Missing required property 'config'") __props__.__dict__["config"] = None if config is None else pulumi.Output.secret(config) __props__.__dict__["name"] = name __props__.__dict__["created_at"] = None __props__.__dict__["organization_id"] = None __props__.__dict__["provider_type"] = None secret_opts = pulumi.ResourceOptions(additional_secret_outputs=["config"]) opts = pulumi.ResourceOptions.merge(opts, secret_opts) super(VaultProvider, __self__).__init__( 'dokploy:index/vaultProvider:VaultProvider', resource_name, __props__, opts) @staticmethod def get(resource_name: str, id: pulumi.Input[str], opts: Optional[pulumi.ResourceOptions] = None, assignments: pulumi.Input[Optional[_builtins.str]] = None, config: pulumi.Input[Optional[_builtins.str]] = None, created_at: pulumi.Input[Optional[_builtins.str]] = None, name: pulumi.Input[Optional[_builtins.str]] = None, organization_id: pulumi.Input[Optional[_builtins.str]] = None, provider_type: pulumi.Input[Optional[_builtins.str]] = None) -> 'VaultProvider': """ Get an existing VaultProvider resource's state with the given name, id, and optional extra properties used to qualify the lookup. :param str resource_name: The unique name of the resulting resource. :param pulumi.Input[str] id: The unique provider ID of the resource to lookup. :param pulumi.ResourceOptions opts: Options for the resource. :param pulumi.Input[_builtins.str] assignments: JSON array scoping which projects or environments may resolve secrets from this provider. Pass `jsonencode([])` to leave it unscoped. :param pulumi.Input[_builtins.str] config: Provider credentials as a JSON object, including the `providerType` discriminator. :param pulumi.Input[_builtins.str] created_at: RFC 3339 timestamp of when the connection was created. :param pulumi.Input[_builtins.str] name: Name of the connection, unique within the organization. :param pulumi.Input[_builtins.str] organization_id: Organization that owns the connection. :param pulumi.Input[_builtins.str] provider_type: Provider kind derived from `config`. """ opts = pulumi.ResourceOptions.merge(opts, pulumi.ResourceOptions(id=id)) __props__ = _VaultProviderState.__new__(_VaultProviderState) __props__.__dict__["assignments"] = assignments __props__.__dict__["config"] = config __props__.__dict__["created_at"] = created_at __props__.__dict__["name"] = name __props__.__dict__["organization_id"] = organization_id __props__.__dict__["provider_type"] = provider_type return VaultProvider(resource_name, opts=opts, __props__=__props__) @_builtins.property @pulumi.getter def assignments(self) -> pulumi.Output[_builtins.str]: """ JSON array scoping which projects or environments may resolve secrets from this provider. Pass `jsonencode([])` to leave it unscoped. """ return pulumi.get(self, "assignments") @_builtins.property @pulumi.getter def config(self) -> pulumi.Output[_builtins.str]: """ Provider credentials as a JSON object, including the `providerType` discriminator. """ return pulumi.get(self, "config") @_builtins.property @pulumi.getter(name="createdAt") def created_at(self) -> pulumi.Output[_builtins.str]: """ RFC 3339 timestamp of when the connection was created. """ return pulumi.get(self, "created_at") @_builtins.property @pulumi.getter def name(self) -> pulumi.Output[_builtins.str]: """ Name of the connection, unique within the organization. """ return pulumi.get(self, "name") @_builtins.property @pulumi.getter(name="organizationId") def organization_id(self) -> pulumi.Output[_builtins.str]: """ Organization that owns the connection. """ return pulumi.get(self, "organization_id") @_builtins.property @pulumi.getter(name="providerType") def provider_type(self) -> pulumi.Output[_builtins.str]: """ Provider kind derived from `config`. """ return pulumi.get(self, "provider_type")