`kubernetesSecretBackend` Submodule

Constructs

KubernetesSecretBackend

Represents a {@link https://registry.terraform.io/providers/hashicorp/vault/4.5.0/docs/resources/kubernetes_secret_backend vault_kubernetes_secret_backend}.

Initializers

using HashiCorp.Cdktf.Providers.Vault;

new KubernetesSecretBackend(Construct Scope, string Id, KubernetesSecretBackendConfig Config);

Name	Type	Description
`Scope`	`Constructs.Construct`	The scope in which to define this construct.
`Id`	`string`	The scoped construct ID.
`Config`	`KubernetesSecretBackendConfig`	No description.

`Scope`^Required

Type: Constructs.Construct

The scope in which to define this construct.

`Id`^Required

Type: string

The scoped construct ID.

Must be unique amongst siblings in the same scope

`Config`^Required

Type: KubernetesSecretBackendConfig

Methods

Name	Description
`ToString`	Returns a string representation of this construct.
`AddOverride`	No description.
`OverrideLogicalId`	Overrides the auto-generated logical ID with a specific ID.
`ResetOverrideLogicalId`	Resets a previously passed logical Id to use the auto-generated logical id again.
`ToHclTerraform`	No description.
`ToMetadata`	No description.
`ToTerraform`	Adds this resource to the terraform JSON output.
`AddMoveTarget`	Adds a user defined moveTarget string to this resource to be later used in .moveTo(moveTarget) to resolve the location of the move.
`GetAnyMapAttribute`	No description.
`GetBooleanAttribute`	No description.
`GetBooleanMapAttribute`	No description.
`GetListAttribute`	No description.
`GetNumberAttribute`	No description.
`GetNumberListAttribute`	No description.
`GetNumberMapAttribute`	No description.
`GetStringAttribute`	No description.
`GetStringMapAttribute`	No description.
`HasResourceMove`	No description.
`ImportFrom`	No description.
`InterpolationForAttribute`	No description.
`MoveFromId`	Move the resource corresponding to "id" to this resource.
`MoveTo`	Moves this resource to the target resource given by moveTarget.
`MoveToId`	Moves this resource to the resource corresponding to "id".
`ResetAllowedManagedKeys`	No description.
`ResetAllowedResponseHeaders`	No description.
`ResetAuditNonHmacRequestKeys`	No description.
`ResetAuditNonHmacResponseKeys`	No description.
`ResetDefaultLeaseTtlSeconds`	No description.
`ResetDelegatedAuthAccessors`	No description.
`ResetDescription`	No description.
`ResetDisableLocalCaJwt`	No description.
`ResetExternalEntropyAccess`	No description.
`ResetId`	No description.
`ResetIdentityTokenKey`	No description.
`ResetKubernetesCaCert`	No description.
`ResetKubernetesHost`	No description.
`ResetListingVisibility`	No description.
`ResetLocal`	No description.
`ResetMaxLeaseTtlSeconds`	No description.
`ResetNamespace`	No description.
`ResetOptions`	No description.
`ResetPassthroughRequestHeaders`	No description.
`ResetPluginVersion`	No description.
`ResetSealWrap`	No description.
`ResetServiceAccountJwt`	No description.

`ToString`

private string ToString()

Returns a string representation of this construct.

`AddOverride`

private void AddOverride(string Path, object Value)

`Path`^Required

Type: string

`Value`^Required

Type: object

`OverrideLogicalId`

private void OverrideLogicalId(string NewLogicalId)

Overrides the auto-generated logical ID with a specific ID.

`NewLogicalId`^Required

Type: string

The new logical ID to use for this stack element.

`ResetOverrideLogicalId`

private void ResetOverrideLogicalId()

Resets a previously passed logical Id to use the auto-generated logical id again.

`ToHclTerraform`

private object ToHclTerraform()

`ToMetadata`

private object ToMetadata()

`ToTerraform`

private object ToTerraform()

Adds this resource to the terraform JSON output.

`AddMoveTarget`

private void AddMoveTarget(string MoveTarget)

Adds a user defined moveTarget string to this resource to be later used in .moveTo(moveTarget) to resolve the location of the move.

`MoveTarget`^Required

Type: string

The string move target that will correspond to this resource.

`GetAnyMapAttribute`

private System.Collections.Generic.IDictionary<string, object> GetAnyMapAttribute(string TerraformAttribute)

`TerraformAttribute`^Required

Type: string

`GetBooleanAttribute`

private IResolvable GetBooleanAttribute(string TerraformAttribute)

`TerraformAttribute`^Required

Type: string

`GetBooleanMapAttribute`

private System.Collections.Generic.IDictionary<string, bool> GetBooleanMapAttribute(string TerraformAttribute)

`TerraformAttribute`^Required

Type: string

`GetListAttribute`

private string[] GetListAttribute(string TerraformAttribute)

`TerraformAttribute`^Required

Type: string

`GetNumberAttribute`

private double GetNumberAttribute(string TerraformAttribute)

`TerraformAttribute`^Required

Type: string

`GetNumberListAttribute`

private double[] GetNumberListAttribute(string TerraformAttribute)

`TerraformAttribute`^Required

Type: string

`GetNumberMapAttribute`

private System.Collections.Generic.IDictionary<string, double> GetNumberMapAttribute(string TerraformAttribute)

`TerraformAttribute`^Required

Type: string

`GetStringAttribute`

private string GetStringAttribute(string TerraformAttribute)

`TerraformAttribute`^Required

Type: string

`GetStringMapAttribute`

private System.Collections.Generic.IDictionary<string, string> GetStringMapAttribute(string TerraformAttribute)

`TerraformAttribute`^Required

Type: string

`HasResourceMove`

private object HasResourceMove()

`ImportFrom`

private void ImportFrom(string Id, TerraformProvider Provider = null)

`Id`^Required

Type: string

`Provider`^Optional

Type: HashiCorp.Cdktf.TerraformProvider

`InterpolationForAttribute`

private IResolvable InterpolationForAttribute(string TerraformAttribute)

`TerraformAttribute`^Required

Type: string

`MoveFromId`

private void MoveFromId(string Id)

Move the resource corresponding to "id" to this resource.

Note that the resource being moved from must be marked as moved using it's instance function.

`Id`^Required

Type: string

Full id of resource being moved from, e.g. "aws_s3_bucket.example".

`MoveTo`

private void MoveTo(string MoveTarget, object Index = null)

Moves this resource to the target resource given by moveTarget.

`MoveTarget`^Required

Type: string

The previously set user defined string set by .addMoveTarget() corresponding to the resource to move to.

`Index`^Optional

Type: object

Optional The index corresponding to the key the resource is to appear in the foreach of a resource to move to.

`MoveToId`

private void MoveToId(string Id)

Moves this resource to the resource corresponding to "id".

`Id`^Required

Type: string

Full id of resource to move to, e.g. "aws_s3_bucket.example".

`ResetAllowedManagedKeys`

private void ResetAllowedManagedKeys()

`ResetAllowedResponseHeaders`

private void ResetAllowedResponseHeaders()

`ResetAuditNonHmacRequestKeys`

private void ResetAuditNonHmacRequestKeys()

`ResetAuditNonHmacResponseKeys`

private void ResetAuditNonHmacResponseKeys()

`ResetDefaultLeaseTtlSeconds`

private void ResetDefaultLeaseTtlSeconds()

`ResetDelegatedAuthAccessors`

private void ResetDelegatedAuthAccessors()

`ResetDescription`

private void ResetDescription()

`ResetDisableLocalCaJwt`

private void ResetDisableLocalCaJwt()

`ResetExternalEntropyAccess`

private void ResetExternalEntropyAccess()

`ResetId`

private void ResetId()

`ResetIdentityTokenKey`

private void ResetIdentityTokenKey()

`ResetKubernetesCaCert`

private void ResetKubernetesCaCert()

`ResetKubernetesHost`

private void ResetKubernetesHost()

`ResetListingVisibility`

private void ResetListingVisibility()

`ResetLocal`

private void ResetLocal()

`ResetMaxLeaseTtlSeconds`

private void ResetMaxLeaseTtlSeconds()

`ResetNamespace`

private void ResetNamespace()

`ResetOptions`

private void ResetOptions()

`ResetPassthroughRequestHeaders`

private void ResetPassthroughRequestHeaders()

`ResetPluginVersion`

private void ResetPluginVersion()

`ResetSealWrap`

private void ResetSealWrap()

`ResetServiceAccountJwt`

private void ResetServiceAccountJwt()

Static Functions

Name	Description
`IsConstruct`	Checks if `x` is a construct.
`IsTerraformElement`	No description.
`IsTerraformResource`	No description.
`GenerateConfigForImport`	Generates CDKTF code for importing a KubernetesSecretBackend resource upon running "cdktf plan ".

`IsConstruct`

using HashiCorp.Cdktf.Providers.Vault;

KubernetesSecretBackend.IsConstruct(object X);

Checks if x is a construct.

Use this method instead of instanceof to properly detect Construct instances, even when the construct library is symlinked.

Explanation: in JavaScript, multiple copies of the constructs library on disk are seen as independent, completely different libraries. As a consequence, the class Construct in each copy of the constructs library is seen as a different class, and an instance of one class will not test as instanceof the other class. npm install will not create installations like this, but users may manually symlink construct libraries together or use a monorepo tool: in those cases, multiple copies of the constructs library can be accidentally installed, and instanceof will behave unpredictably. It is safest to avoid using instanceof, and using this type-testing method instead.

`X`^Required

Type: object

Any object.

`IsTerraformElement`

using HashiCorp.Cdktf.Providers.Vault;

KubernetesSecretBackend.IsTerraformElement(object X);

`X`^Required

Type: object

`IsTerraformResource`

using HashiCorp.Cdktf.Providers.Vault;

KubernetesSecretBackend.IsTerraformResource(object X);

`X`^Required

Type: object

`GenerateConfigForImport`

using HashiCorp.Cdktf.Providers.Vault;

KubernetesSecretBackend.GenerateConfigForImport(Construct Scope, string ImportToId, string ImportFromId, TerraformProvider Provider = null);

Generates CDKTF code for importing a KubernetesSecretBackend resource upon running "cdktf plan ".

`Scope`^Required

Type: Constructs.Construct

The scope in which to define this construct.

`ImportToId`^Required

Type: string

The construct id used in the generated config for the KubernetesSecretBackend to import.

`ImportFromId`^Required

Type: string

The id of the existing KubernetesSecretBackend that should be imported.

Refer to the {@link https://registry.terraform.io/providers/hashicorp/vault/4.5.0/docs/resources/kubernetes_secret_backend#import import section} in the documentation of this resource for the id to use

`Provider`^Optional

Type: HashiCorp.Cdktf.TerraformProvider

? Optional instance of the provider where the KubernetesSecretBackend to import is found.

Properties

Name	Type	Description
`Node`	`Constructs.Node`	The tree node.
`CdktfStack`	`HashiCorp.Cdktf.TerraformStack`	No description.
`Fqn`	`string`	No description.
`FriendlyUniqueId`	`string`	No description.
`TerraformMetaArguments`	`System.Collections.Generic.IDictionary<string, object>`	No description.
`TerraformResourceType`	`string`	No description.
`TerraformGeneratorMetadata`	`HashiCorp.Cdktf.TerraformProviderGeneratorMetadata`	No description.
`Connection`	`object`	No description.
`Count`	`object`	No description.
`DependsOn`	`string[]`	No description.
`ForEach`	`HashiCorp.Cdktf.ITerraformIterator`	No description.
`Lifecycle`	`HashiCorp.Cdktf.TerraformResourceLifecycle`	No description.
`Provider`	`HashiCorp.Cdktf.TerraformProvider`	No description.
`Provisioners`	`object[]`	No description.
`Accessor`	`string`	No description.
`AllowedManagedKeysInput`	`string[]`	No description.
`AllowedResponseHeadersInput`	`string[]`	No description.
`AuditNonHmacRequestKeysInput`	`string[]`	No description.
`AuditNonHmacResponseKeysInput`	`string[]`	No description.
`DefaultLeaseTtlSecondsInput`	`double`	No description.
`DelegatedAuthAccessorsInput`	`string[]`	No description.
`DescriptionInput`	`string`	No description.
`DisableLocalCaJwtInput`	`object`	No description.
`ExternalEntropyAccessInput`	`object`	No description.
`IdentityTokenKeyInput`	`string`	No description.
`IdInput`	`string`	No description.
`KubernetesCaCertInput`	`string`	No description.
`KubernetesHostInput`	`string`	No description.
`ListingVisibilityInput`	`string`	No description.
`LocalInput`	`object`	No description.
`MaxLeaseTtlSecondsInput`	`double`	No description.
`NamespaceInput`	`string`	No description.
`OptionsInput`	`System.Collections.Generic.IDictionary<string, string>`	No description.
`PassthroughRequestHeadersInput`	`string[]`	No description.
`PathInput`	`string`	No description.
`PluginVersionInput`	`string`	No description.
`SealWrapInput`	`object`	No description.
`ServiceAccountJwtInput`	`string`	No description.
`AllowedManagedKeys`	`string[]`	No description.
`AllowedResponseHeaders`	`string[]`	No description.
`AuditNonHmacRequestKeys`	`string[]`	No description.
`AuditNonHmacResponseKeys`	`string[]`	No description.
`DefaultLeaseTtlSeconds`	`double`	No description.
`DelegatedAuthAccessors`	`string[]`	No description.
`Description`	`string`	No description.
`DisableLocalCaJwt`	`object`	No description.
`ExternalEntropyAccess`	`object`	No description.
`Id`	`string`	No description.
`IdentityTokenKey`	`string`	No description.
`KubernetesCaCert`	`string`	No description.
`KubernetesHost`	`string`	No description.
`ListingVisibility`	`string`	No description.
`Local`	`object`	No description.
`MaxLeaseTtlSeconds`	`double`	No description.
`Namespace`	`string`	No description.
`Options`	`System.Collections.Generic.IDictionary<string, string>`	No description.
`PassthroughRequestHeaders`	`string[]`	No description.
`Path`	`string`	No description.
`PluginVersion`	`string`	No description.
`SealWrap`	`object`	No description.
`ServiceAccountJwt`	`string`	No description.

`Node`^Required

public Node Node { get; }

Type: Constructs.Node

The tree node.

`CdktfStack`^Required

public TerraformStack CdktfStack { get; }

Type: HashiCorp.Cdktf.TerraformStack

`Fqn`^Required

public string Fqn { get; }

Type: string

`FriendlyUniqueId`^Required

public string FriendlyUniqueId { get; }

Type: string

`TerraformMetaArguments`^Required

public System.Collections.Generic.IDictionary<string, object> TerraformMetaArguments { get; }

Type: System.Collections.Generic.IDictionary<string, object>

`TerraformResourceType`^Required

public string TerraformResourceType { get; }

Type: string

`TerraformGeneratorMetadata`^Optional

public TerraformProviderGeneratorMetadata TerraformGeneratorMetadata { get; }

Type: HashiCorp.Cdktf.TerraformProviderGeneratorMetadata

`Connection`^Optional

public object Connection { get; }

Type: object

`Count`^Optional

public object Count { get; }

Type: object

`DependsOn`^Optional

public string[] DependsOn { get; }

Type: string[]

`ForEach`^Optional

public ITerraformIterator ForEach { get; }

Type: HashiCorp.Cdktf.ITerraformIterator

`Lifecycle`^Optional

public TerraformResourceLifecycle Lifecycle { get; }

Type: HashiCorp.Cdktf.TerraformResourceLifecycle

`Provider`^Optional

public TerraformProvider Provider { get; }

Type: HashiCorp.Cdktf.TerraformProvider

`Provisioners`^Optional

public object[] Provisioners { get; }

Type: object[]

`Accessor`^Required

public string Accessor { get; }

Type: string

`AllowedManagedKeysInput`^Optional

public string[] AllowedManagedKeysInput { get; }

Type: string[]

`AllowedResponseHeadersInput`^Optional

public string[] AllowedResponseHeadersInput { get; }

Type: string[]

`AuditNonHmacRequestKeysInput`^Optional

public string[] AuditNonHmacRequestKeysInput { get; }

Type: string[]

`AuditNonHmacResponseKeysInput`^Optional

public string[] AuditNonHmacResponseKeysInput { get; }

Type: string[]

`DefaultLeaseTtlSecondsInput`^Optional

public double DefaultLeaseTtlSecondsInput { get; }

Type: double

`DelegatedAuthAccessorsInput`^Optional

public string[] DelegatedAuthAccessorsInput { get; }

Type: string[]

`DescriptionInput`^Optional

public string DescriptionInput { get; }

Type: string

`DisableLocalCaJwtInput`^Optional

public object DisableLocalCaJwtInput { get; }

Type: object

`ExternalEntropyAccessInput`^Optional

public object ExternalEntropyAccessInput { get; }

Type: object

`IdentityTokenKeyInput`^Optional

public string IdentityTokenKeyInput { get; }

Type: string

`IdInput`^Optional

public string IdInput { get; }

Type: string

`KubernetesCaCertInput`^Optional

public string KubernetesCaCertInput { get; }

Type: string

`KubernetesHostInput`^Optional

public string KubernetesHostInput { get; }

Type: string

`ListingVisibilityInput`^Optional

public string ListingVisibilityInput { get; }

Type: string

`LocalInput`^Optional

public object LocalInput { get; }

Type: object

`MaxLeaseTtlSecondsInput`^Optional

public double MaxLeaseTtlSecondsInput { get; }

Type: double

`NamespaceInput`^Optional

public string NamespaceInput { get; }

Type: string

`OptionsInput`^Optional

public System.Collections.Generic.IDictionary<string, string> OptionsInput { get; }

Type: System.Collections.Generic.IDictionary<string, string>

`PassthroughRequestHeadersInput`^Optional

public string[] PassthroughRequestHeadersInput { get; }

Type: string[]

`PathInput`^Optional

public string PathInput { get; }

Type: string

`PluginVersionInput`^Optional

public string PluginVersionInput { get; }

Type: string

`SealWrapInput`^Optional

public object SealWrapInput { get; }

Type: object

`ServiceAccountJwtInput`^Optional

public string ServiceAccountJwtInput { get; }

Type: string

`AllowedManagedKeys`^Required

public string[] AllowedManagedKeys { get; }

Type: string[]

`AllowedResponseHeaders`^Required

public string[] AllowedResponseHeaders { get; }

Type: string[]

`AuditNonHmacRequestKeys`^Required

public string[] AuditNonHmacRequestKeys { get; }

Type: string[]

`AuditNonHmacResponseKeys`^Required

public string[] AuditNonHmacResponseKeys { get; }

Type: string[]

`DefaultLeaseTtlSeconds`^Required

public double DefaultLeaseTtlSeconds { get; }

Type: double

`DelegatedAuthAccessors`^Required

public string[] DelegatedAuthAccessors { get; }

Type: string[]

`Description`^Required

public string Description { get; }

Type: string

`DisableLocalCaJwt`^Required

public object DisableLocalCaJwt { get; }

Type: object

`ExternalEntropyAccess`^Required

public object ExternalEntropyAccess { get; }

Type: object

`Id`^Required

public string Id { get; }

Type: string

`IdentityTokenKey`^Required

public string IdentityTokenKey { get; }

Type: string

`KubernetesCaCert`^Required

public string KubernetesCaCert { get; }

Type: string

`KubernetesHost`^Required

public string KubernetesHost { get; }

Type: string

`ListingVisibility`^Required

public string ListingVisibility { get; }

Type: string

`Local`^Required

public object Local { get; }

Type: object

`MaxLeaseTtlSeconds`^Required

public double MaxLeaseTtlSeconds { get; }

Type: double

`Namespace`^Required

public string Namespace { get; }

Type: string

`Options`^Required

public System.Collections.Generic.IDictionary<string, string> Options { get; }

Type: System.Collections.Generic.IDictionary<string, string>

`PassthroughRequestHeaders`^Required

public string[] PassthroughRequestHeaders { get; }

Type: string[]

`Path`^Required

public string Path { get; }

Type: string

`PluginVersion`^Required

public string PluginVersion { get; }

Type: string

`SealWrap`^Required

public object SealWrap { get; }

Type: object

`ServiceAccountJwt`^Required

public string ServiceAccountJwt { get; }

Type: string

Constants

Name	Type	Description
`TfResourceType`	`string`	No description.

`TfResourceType`^Required

public string TfResourceType { get; }

Type: string

Structs

KubernetesSecretBackendConfig

Initializer

using HashiCorp.Cdktf.Providers.Vault;

new KubernetesSecretBackendConfig {
    object Connection = null,
    object Count = null,
    ITerraformDependable[] DependsOn = null,
    ITerraformIterator ForEach = null,
    TerraformResourceLifecycle Lifecycle = null,
    TerraformProvider Provider = null,
    object[] Provisioners = null,
    string Path,
    string[] AllowedManagedKeys = null,
    string[] AllowedResponseHeaders = null,
    string[] AuditNonHmacRequestKeys = null,
    string[] AuditNonHmacResponseKeys = null,
    double DefaultLeaseTtlSeconds = null,
    string[] DelegatedAuthAccessors = null,
    string Description = null,
    object DisableLocalCaJwt = null,
    object ExternalEntropyAccess = null,
    string Id = null,
    string IdentityTokenKey = null,
    string KubernetesCaCert = null,
    string KubernetesHost = null,
    string ListingVisibility = null,
    object Local = null,
    double MaxLeaseTtlSeconds = null,
    string Namespace = null,
    System.Collections.Generic.IDictionary<string, string> Options = null,
    string[] PassthroughRequestHeaders = null,
    string PluginVersion = null,
    object SealWrap = null,
    string ServiceAccountJwt = null
};

Properties

Name	Type	Description
`Connection`	`object`	No description.
`Count`	`object`	No description.
`DependsOn`	`HashiCorp.Cdktf.ITerraformDependable[]`	No description.
`ForEach`	`HashiCorp.Cdktf.ITerraformIterator`	No description.
`Lifecycle`	`HashiCorp.Cdktf.TerraformResourceLifecycle`	No description.
`Provider`	`HashiCorp.Cdktf.TerraformProvider`	No description.
`Provisioners`	`object[]`	No description.
`Path`	`string`	Where the secret backend will be mounted.
`AllowedManagedKeys`	`string[]`	List of managed key registry entry names that the mount in question is allowed to access.
`AllowedResponseHeaders`	`string[]`	List of headers to allow and pass from the request to the plugin.
`AuditNonHmacRequestKeys`	`string[]`	Specifies the list of keys that will not be HMAC'd by audit devices in the request data object.
`AuditNonHmacResponseKeys`	`string[]`	Specifies the list of keys that will not be HMAC'd by audit devices in the response data object.
`DefaultLeaseTtlSeconds`	`double`	Default lease duration for tokens and secrets in seconds.
`DelegatedAuthAccessors`	`string[]`	List of headers to allow and pass from the request to the plugin.
`Description`	`string`	Human-friendly description of the mount.
`DisableLocalCaJwt`	`object`	Disable defaulting to the local CA certificate and service account JWT when running in a Kubernetes pod.
`ExternalEntropyAccess`	`object`	Enable the secrets engine to access Vault's external entropy source.
`Id`	`string`	Docs at Terraform Registry: {@link https://registry.terraform.io/providers/hashicorp/vault/4.5.0/docs/resources/kubernetes_secret_backend#id KubernetesSecretBackend#id}.
`IdentityTokenKey`	`string`	The key to use for signing plugin workload identity tokens.
`KubernetesCaCert`	`string`	A PEM-encoded CA certificate used by the secret engine to verify the Kubernetes API server certificate.
`KubernetesHost`	`string`	The Kubernetes API URL to connect to.
`ListingVisibility`	`string`	Specifies whether to show this mount in the UI-specific listing endpoint.
`Local`	`object`	Local mount flag that can be explicitly set to true to enforce local mount in HA environment.
`MaxLeaseTtlSeconds`	`double`	Maximum possible lease duration for tokens and secrets in seconds.
`Namespace`	`string`	Target namespace. (requires Enterprise).
`Options`	`System.Collections.Generic.IDictionary<string, string>`	Specifies mount type specific options that are passed to the backend.
`PassthroughRequestHeaders`	`string[]`	List of headers to allow and pass from the request to the plugin.
`PluginVersion`	`string`	Specifies the semantic version of the plugin to use, e.g. 'v1.0.0'.
`SealWrap`	`object`	Enable seal wrapping for the mount, causing values stored by the mount to be wrapped by the seal's encryption capability.
`ServiceAccountJwt`	`string`	The JSON web token of the service account used by the secrets engine to manage Kubernetes credentials.

`Connection`^Optional

public object Connection { get; set; }

Type: object

`Count`^Optional

public object Count { get; set; }

Type: object

`DependsOn`^Optional

public ITerraformDependable[] DependsOn { get; set; }

Type: HashiCorp.Cdktf.ITerraformDependable[]

`ForEach`^Optional

public ITerraformIterator ForEach { get; set; }

Type: HashiCorp.Cdktf.ITerraformIterator

`Lifecycle`^Optional

public TerraformResourceLifecycle Lifecycle { get; set; }

Type: HashiCorp.Cdktf.TerraformResourceLifecycle

`Provider`^Optional

public TerraformProvider Provider { get; set; }

Type: HashiCorp.Cdktf.TerraformProvider

`Provisioners`^Optional

public object[] Provisioners { get; set; }

Type: object[]

`Path`^Required

public string Path { get; set; }

Type: string

Where the secret backend will be mounted.

Docs at Terraform Registry: {@link https://registry.terraform.io/providers/hashicorp/vault/4.5.0/docs/resources/kubernetes_secret_backend#path KubernetesSecretBackend#path}

`AllowedManagedKeys`^Optional

public string[] AllowedManagedKeys { get; set; }

Type: string[]

List of managed key registry entry names that the mount in question is allowed to access.

Docs at Terraform Registry: {@link https://registry.terraform.io/providers/hashicorp/vault/4.5.0/docs/resources/kubernetes_secret_backend#allowed_managed_keys KubernetesSecretBackend#allowed_managed_keys}

`AllowedResponseHeaders`^Optional

public string[] AllowedResponseHeaders { get; set; }

Type: string[]

List of headers to allow and pass from the request to the plugin.

Docs at Terraform Registry: {@link https://registry.terraform.io/providers/hashicorp/vault/4.5.0/docs/resources/kubernetes_secret_backend#allowed_response_headers KubernetesSecretBackend#allowed_response_headers}

`AuditNonHmacRequestKeys`^Optional

public string[] AuditNonHmacRequestKeys { get; set; }

Type: string[]

Specifies the list of keys that will not be HMAC'd by audit devices in the request data object.

Docs at Terraform Registry: {@link https://registry.terraform.io/providers/hashicorp/vault/4.5.0/docs/resources/kubernetes_secret_backend#audit_non_hmac_request_keys KubernetesSecretBackend#audit_non_hmac_request_keys}

`AuditNonHmacResponseKeys`^Optional

public string[] AuditNonHmacResponseKeys { get; set; }

Type: string[]

Specifies the list of keys that will not be HMAC'd by audit devices in the response data object.

Docs at Terraform Registry: {@link https://registry.terraform.io/providers/hashicorp/vault/4.5.0/docs/resources/kubernetes_secret_backend#audit_non_hmac_response_keys KubernetesSecretBackend#audit_non_hmac_response_keys}

`DefaultLeaseTtlSeconds`^Optional

public double DefaultLeaseTtlSeconds { get; set; }

Type: double

Default lease duration for tokens and secrets in seconds.

Docs at Terraform Registry: {@link https://registry.terraform.io/providers/hashicorp/vault/4.5.0/docs/resources/kubernetes_secret_backend#default_lease_ttl_seconds KubernetesSecretBackend#default_lease_ttl_seconds}

`DelegatedAuthAccessors`^Optional

public string[] DelegatedAuthAccessors { get; set; }

Type: string[]

List of headers to allow and pass from the request to the plugin.

Docs at Terraform Registry: {@link https://registry.terraform.io/providers/hashicorp/vault/4.5.0/docs/resources/kubernetes_secret_backend#delegated_auth_accessors KubernetesSecretBackend#delegated_auth_accessors}

`Description`^Optional

public string Description { get; set; }

Type: string

Human-friendly description of the mount.

Docs at Terraform Registry: {@link https://registry.terraform.io/providers/hashicorp/vault/4.5.0/docs/resources/kubernetes_secret_backend#description KubernetesSecretBackend#description}

`DisableLocalCaJwt`^Optional

public object DisableLocalCaJwt { get; set; }

Type: object

Disable defaulting to the local CA certificate and service account JWT when running in a Kubernetes pod.

Docs at Terraform Registry: {@link https://registry.terraform.io/providers/hashicorp/vault/4.5.0/docs/resources/kubernetes_secret_backend#disable_local_ca_jwt KubernetesSecretBackend#disable_local_ca_jwt}

`ExternalEntropyAccess`^Optional

public object ExternalEntropyAccess { get; set; }

Type: object

Enable the secrets engine to access Vault's external entropy source.

Docs at Terraform Registry: {@link https://registry.terraform.io/providers/hashicorp/vault/4.5.0/docs/resources/kubernetes_secret_backend#external_entropy_access KubernetesSecretBackend#external_entropy_access}

`Id`^Optional

public string Id { get; set; }

Type: string

Docs at Terraform Registry: {@link https://registry.terraform.io/providers/hashicorp/vault/4.5.0/docs/resources/kubernetes_secret_backend#id KubernetesSecretBackend#id}.

Please be aware that the id field is automatically added to all resources in Terraform providers using a Terraform provider SDK version below 2. If you experience problems setting this value it might not be settable. Please take a look at the provider documentation to ensure it should be settable.

`IdentityTokenKey`^Optional

public string IdentityTokenKey { get; set; }

Type: string

The key to use for signing plugin workload identity tokens.

Docs at Terraform Registry: {@link https://registry.terraform.io/providers/hashicorp/vault/4.5.0/docs/resources/kubernetes_secret_backend#identity_token_key KubernetesSecretBackend#identity_token_key}

`KubernetesCaCert`^Optional

public string KubernetesCaCert { get; set; }

Type: string

A PEM-encoded CA certificate used by the secret engine to verify the Kubernetes API server certificate.

Defaults to the local pod’s CA if found, or otherwise the host's root CA set.

Docs at Terraform Registry: {@link https://registry.terraform.io/providers/hashicorp/vault/4.5.0/docs/resources/kubernetes_secret_backend#kubernetes_ca_cert KubernetesSecretBackend#kubernetes_ca_cert}

`KubernetesHost`^Optional

public string KubernetesHost { get; set; }

Type: string

The Kubernetes API URL to connect to.

Docs at Terraform Registry: {@link https://registry.terraform.io/providers/hashicorp/vault/4.5.0/docs/resources/kubernetes_secret_backend#kubernetes_host KubernetesSecretBackend#kubernetes_host}

`ListingVisibility`^Optional

public string ListingVisibility { get; set; }

Type: string

Specifies whether to show this mount in the UI-specific listing endpoint.

Docs at Terraform Registry: {@link https://registry.terraform.io/providers/hashicorp/vault/4.5.0/docs/resources/kubernetes_secret_backend#listing_visibility KubernetesSecretBackend#listing_visibility}

`Local`^Optional

public object Local { get; set; }

Type: object

Local mount flag that can be explicitly set to true to enforce local mount in HA environment.

Docs at Terraform Registry: {@link https://registry.terraform.io/providers/hashicorp/vault/4.5.0/docs/resources/kubernetes_secret_backend#local KubernetesSecretBackend#local}

`MaxLeaseTtlSeconds`^Optional

public double MaxLeaseTtlSeconds { get; set; }

Type: double

Maximum possible lease duration for tokens and secrets in seconds.

Docs at Terraform Registry: {@link https://registry.terraform.io/providers/hashicorp/vault/4.5.0/docs/resources/kubernetes_secret_backend#max_lease_ttl_seconds KubernetesSecretBackend#max_lease_ttl_seconds}

`Namespace`^Optional

public string Namespace { get; set; }

Type: string

Target namespace. (requires Enterprise).

Docs at Terraform Registry: {@link https://registry.terraform.io/providers/hashicorp/vault/4.5.0/docs/resources/kubernetes_secret_backend#namespace KubernetesSecretBackend#namespace}

`Options`^Optional

public System.Collections.Generic.IDictionary<string, string> Options { get; set; }

Type: System.Collections.Generic.IDictionary<string, string>

Specifies mount type specific options that are passed to the backend.

Docs at Terraform Registry: {@link https://registry.terraform.io/providers/hashicorp/vault/4.5.0/docs/resources/kubernetes_secret_backend#options KubernetesSecretBackend#options}

`PassthroughRequestHeaders`^Optional

public string[] PassthroughRequestHeaders { get; set; }

Type: string[]

List of headers to allow and pass from the request to the plugin.

Docs at Terraform Registry: {@link https://registry.terraform.io/providers/hashicorp/vault/4.5.0/docs/resources/kubernetes_secret_backend#passthrough_request_headers KubernetesSecretBackend#passthrough_request_headers}

`PluginVersion`^Optional

public string PluginVersion { get; set; }

Type: string

Specifies the semantic version of the plugin to use, e.g. 'v1.0.0'.

Docs at Terraform Registry: {@link https://registry.terraform.io/providers/hashicorp/vault/4.5.0/docs/resources/kubernetes_secret_backend#plugin_version KubernetesSecretBackend#plugin_version}

`SealWrap`^Optional

public object SealWrap { get; set; }

Type: object

Enable seal wrapping for the mount, causing values stored by the mount to be wrapped by the seal's encryption capability.

Docs at Terraform Registry: {@link https://registry.terraform.io/providers/hashicorp/vault/4.5.0/docs/resources/kubernetes_secret_backend#seal_wrap KubernetesSecretBackend#seal_wrap}

`ServiceAccountJwt`^Optional

public string ServiceAccountJwt { get; set; }

Type: string

The JSON web token of the service account used by the secrets engine to manage Kubernetes credentials.

Defaults to the local pod’s JWT if found.

Docs at Terraform Registry: {@link https://registry.terraform.io/providers/hashicorp/vault/4.5.0/docs/resources/kubernetes_secret_backend#service_account_jwt KubernetesSecretBackend#service_account_jwt}

Files

kubernetesSecretBackend.csharp.md

Latest commit

History

kubernetesSecretBackend.csharp.md

File metadata and controls

kubernetesSecretBackend Submodule

Constructs