Skip to content

Latest commit

 

History

History
2386 lines (1514 loc) · 99.3 KB

ldapSecretBackend.csharp.md

File metadata and controls

2386 lines (1514 loc) · 99.3 KB

ldapSecretBackend Submodule

Constructs

LdapSecretBackend

Represents a {@link https://registry.terraform.io/providers/hashicorp/vault/4.5.0/docs/resources/ldap_secret_backend vault_ldap_secret_backend}.

Initializers

using HashiCorp.Cdktf.Providers.Vault;

new LdapSecretBackend(Construct Scope, string Id, LdapSecretBackendConfig Config);
Name Type Description
Scope Constructs.Construct The scope in which to define this construct.
Id string The scoped construct ID.
Config LdapSecretBackendConfig No description.

ScopeRequired
  • Type: Constructs.Construct

The scope in which to define this construct.


IdRequired
  • Type: string

The scoped construct ID.

Must be unique amongst siblings in the same scope


ConfigRequired

Methods

Name Description
ToString Returns a string representation of this construct.
AddOverride No description.
OverrideLogicalId Overrides the auto-generated logical ID with a specific ID.
ResetOverrideLogicalId Resets a previously passed logical Id to use the auto-generated logical id again.
ToHclTerraform No description.
ToMetadata No description.
ToTerraform Adds this resource to the terraform JSON output.
AddMoveTarget Adds a user defined moveTarget string to this resource to be later used in .moveTo(moveTarget) to resolve the location of the move.
GetAnyMapAttribute No description.
GetBooleanAttribute No description.
GetBooleanMapAttribute No description.
GetListAttribute No description.
GetNumberAttribute No description.
GetNumberListAttribute No description.
GetNumberMapAttribute No description.
GetStringAttribute No description.
GetStringMapAttribute No description.
HasResourceMove No description.
ImportFrom No description.
InterpolationForAttribute No description.
MoveFromId Move the resource corresponding to "id" to this resource.
MoveTo Moves this resource to the target resource given by moveTarget.
MoveToId Moves this resource to the resource corresponding to "id".
ResetAllowedManagedKeys No description.
ResetAllowedResponseHeaders No description.
ResetAuditNonHmacRequestKeys No description.
ResetAuditNonHmacResponseKeys No description.
ResetCertificate No description.
ResetClientTlsCert No description.
ResetClientTlsKey No description.
ResetConnectionTimeout No description.
ResetDefaultLeaseTtlSeconds No description.
ResetDelegatedAuthAccessors No description.
ResetDescription No description.
ResetDisableRemount No description.
ResetExternalEntropyAccess No description.
ResetId No description.
ResetIdentityTokenKey No description.
ResetInsecureTls No description.
ResetListingVisibility No description.
ResetLocal No description.
ResetMaxLeaseTtlSeconds No description.
ResetNamespace No description.
ResetOptions No description.
ResetPassthroughRequestHeaders No description.
ResetPasswordPolicy No description.
ResetPath No description.
ResetPluginVersion No description.
ResetRequestTimeout No description.
ResetSchema No description.
ResetSealWrap No description.
ResetSkipStaticRoleImportRotation No description.
ResetStarttls No description.
ResetUpndomain No description.
ResetUrl No description.
ResetUserattr No description.
ResetUserdn No description.

ToString
private string ToString()

Returns a string representation of this construct.

AddOverride
private void AddOverride(string Path, object Value)
PathRequired
  • Type: string

ValueRequired
  • Type: object

OverrideLogicalId
private void OverrideLogicalId(string NewLogicalId)

Overrides the auto-generated logical ID with a specific ID.

NewLogicalIdRequired
  • Type: string

The new logical ID to use for this stack element.


ResetOverrideLogicalId
private void ResetOverrideLogicalId()

Resets a previously passed logical Id to use the auto-generated logical id again.

ToHclTerraform
private object ToHclTerraform()
ToMetadata
private object ToMetadata()
ToTerraform
private object ToTerraform()

Adds this resource to the terraform JSON output.

AddMoveTarget
private void AddMoveTarget(string MoveTarget)

Adds a user defined moveTarget string to this resource to be later used in .moveTo(moveTarget) to resolve the location of the move.

MoveTargetRequired
  • Type: string

The string move target that will correspond to this resource.


GetAnyMapAttribute
private System.Collections.Generic.IDictionary<string, object> GetAnyMapAttribute(string TerraformAttribute)
TerraformAttributeRequired
  • Type: string

GetBooleanAttribute
private IResolvable GetBooleanAttribute(string TerraformAttribute)
TerraformAttributeRequired
  • Type: string

GetBooleanMapAttribute
private System.Collections.Generic.IDictionary<string, bool> GetBooleanMapAttribute(string TerraformAttribute)
TerraformAttributeRequired
  • Type: string

GetListAttribute
private string[] GetListAttribute(string TerraformAttribute)
TerraformAttributeRequired
  • Type: string

GetNumberAttribute
private double GetNumberAttribute(string TerraformAttribute)
TerraformAttributeRequired
  • Type: string

GetNumberListAttribute
private double[] GetNumberListAttribute(string TerraformAttribute)
TerraformAttributeRequired
  • Type: string

GetNumberMapAttribute
private System.Collections.Generic.IDictionary<string, double> GetNumberMapAttribute(string TerraformAttribute)
TerraformAttributeRequired
  • Type: string

GetStringAttribute
private string GetStringAttribute(string TerraformAttribute)
TerraformAttributeRequired
  • Type: string

GetStringMapAttribute
private System.Collections.Generic.IDictionary<string, string> GetStringMapAttribute(string TerraformAttribute)
TerraformAttributeRequired
  • Type: string

HasResourceMove
private object HasResourceMove()
ImportFrom
private void ImportFrom(string Id, TerraformProvider Provider = null)
IdRequired
  • Type: string

ProviderOptional
  • Type: HashiCorp.Cdktf.TerraformProvider

InterpolationForAttribute
private IResolvable InterpolationForAttribute(string TerraformAttribute)
TerraformAttributeRequired
  • Type: string

MoveFromId
private void MoveFromId(string Id)

Move the resource corresponding to "id" to this resource.

Note that the resource being moved from must be marked as moved using it's instance function.

IdRequired
  • Type: string

Full id of resource being moved from, e.g. "aws_s3_bucket.example".


MoveTo
private void MoveTo(string MoveTarget, object Index = null)

Moves this resource to the target resource given by moveTarget.

MoveTargetRequired
  • Type: string

The previously set user defined string set by .addMoveTarget() corresponding to the resource to move to.


IndexOptional
  • Type: object

Optional The index corresponding to the key the resource is to appear in the foreach of a resource to move to.


MoveToId
private void MoveToId(string Id)

Moves this resource to the resource corresponding to "id".

IdRequired
  • Type: string

Full id of resource to move to, e.g. "aws_s3_bucket.example".


ResetAllowedManagedKeys
private void ResetAllowedManagedKeys()
ResetAllowedResponseHeaders
private void ResetAllowedResponseHeaders()
ResetAuditNonHmacRequestKeys
private void ResetAuditNonHmacRequestKeys()
ResetAuditNonHmacResponseKeys
private void ResetAuditNonHmacResponseKeys()
ResetCertificate
private void ResetCertificate()
ResetClientTlsCert
private void ResetClientTlsCert()
ResetClientTlsKey
private void ResetClientTlsKey()
ResetConnectionTimeout
private void ResetConnectionTimeout()
ResetDefaultLeaseTtlSeconds
private void ResetDefaultLeaseTtlSeconds()
ResetDelegatedAuthAccessors
private void ResetDelegatedAuthAccessors()
ResetDescription
private void ResetDescription()
ResetDisableRemount
private void ResetDisableRemount()
ResetExternalEntropyAccess
private void ResetExternalEntropyAccess()
ResetId
private void ResetId()
ResetIdentityTokenKey
private void ResetIdentityTokenKey()
ResetInsecureTls
private void ResetInsecureTls()
ResetListingVisibility
private void ResetListingVisibility()
ResetLocal
private void ResetLocal()
ResetMaxLeaseTtlSeconds
private void ResetMaxLeaseTtlSeconds()
ResetNamespace
private void ResetNamespace()
ResetOptions
private void ResetOptions()
ResetPassthroughRequestHeaders
private void ResetPassthroughRequestHeaders()
ResetPasswordPolicy
private void ResetPasswordPolicy()
ResetPath
private void ResetPath()
ResetPluginVersion
private void ResetPluginVersion()
ResetRequestTimeout
private void ResetRequestTimeout()
ResetSchema
private void ResetSchema()
ResetSealWrap
private void ResetSealWrap()
ResetSkipStaticRoleImportRotation
private void ResetSkipStaticRoleImportRotation()
ResetStarttls
private void ResetStarttls()
ResetUpndomain
private void ResetUpndomain()
ResetUrl
private void ResetUrl()
ResetUserattr
private void ResetUserattr()
ResetUserdn
private void ResetUserdn()

Static Functions

Name Description
IsConstruct Checks if x is a construct.
IsTerraformElement No description.
IsTerraformResource No description.
GenerateConfigForImport Generates CDKTF code for importing a LdapSecretBackend resource upon running "cdktf plan ".

IsConstruct
using HashiCorp.Cdktf.Providers.Vault;

LdapSecretBackend.IsConstruct(object X);

Checks if x is a construct.

Use this method instead of instanceof to properly detect Construct instances, even when the construct library is symlinked.

Explanation: in JavaScript, multiple copies of the constructs library on disk are seen as independent, completely different libraries. As a consequence, the class Construct in each copy of the constructs library is seen as a different class, and an instance of one class will not test as instanceof the other class. npm install will not create installations like this, but users may manually symlink construct libraries together or use a monorepo tool: in those cases, multiple copies of the constructs library can be accidentally installed, and instanceof will behave unpredictably. It is safest to avoid using instanceof, and using this type-testing method instead.

XRequired
  • Type: object

Any object.


IsTerraformElement
using HashiCorp.Cdktf.Providers.Vault;

LdapSecretBackend.IsTerraformElement(object X);
XRequired
  • Type: object

IsTerraformResource
using HashiCorp.Cdktf.Providers.Vault;

LdapSecretBackend.IsTerraformResource(object X);
XRequired
  • Type: object

GenerateConfigForImport
using HashiCorp.Cdktf.Providers.Vault;

LdapSecretBackend.GenerateConfigForImport(Construct Scope, string ImportToId, string ImportFromId, TerraformProvider Provider = null);

Generates CDKTF code for importing a LdapSecretBackend resource upon running "cdktf plan ".

ScopeRequired
  • Type: Constructs.Construct

The scope in which to define this construct.


ImportToIdRequired
  • Type: string

The construct id used in the generated config for the LdapSecretBackend to import.


ImportFromIdRequired
  • Type: string

The id of the existing LdapSecretBackend that should be imported.

Refer to the {@link https://registry.terraform.io/providers/hashicorp/vault/4.5.0/docs/resources/ldap_secret_backend#import import section} in the documentation of this resource for the id to use


ProviderOptional
  • Type: HashiCorp.Cdktf.TerraformProvider

? Optional instance of the provider where the LdapSecretBackend to import is found.


Properties

Name Type Description
Node Constructs.Node The tree node.
CdktfStack HashiCorp.Cdktf.TerraformStack No description.
Fqn string No description.
FriendlyUniqueId string No description.
TerraformMetaArguments System.Collections.Generic.IDictionary<string, object> No description.
TerraformResourceType string No description.
TerraformGeneratorMetadata HashiCorp.Cdktf.TerraformProviderGeneratorMetadata No description.
Connection object No description.
Count object No description.
DependsOn string[] No description.
ForEach HashiCorp.Cdktf.ITerraformIterator No description.
Lifecycle HashiCorp.Cdktf.TerraformResourceLifecycle No description.
Provider HashiCorp.Cdktf.TerraformProvider No description.
Provisioners object[] No description.
Accessor string No description.
AllowedManagedKeysInput string[] No description.
AllowedResponseHeadersInput string[] No description.
AuditNonHmacRequestKeysInput string[] No description.
AuditNonHmacResponseKeysInput string[] No description.
BinddnInput string No description.
BindpassInput string No description.
CertificateInput string No description.
ClientTlsCertInput string No description.
ClientTlsKeyInput string No description.
ConnectionTimeoutInput double No description.
DefaultLeaseTtlSecondsInput double No description.
DelegatedAuthAccessorsInput string[] No description.
DescriptionInput string No description.
DisableRemountInput object No description.
ExternalEntropyAccessInput object No description.
IdentityTokenKeyInput string No description.
IdInput string No description.
InsecureTlsInput object No description.
ListingVisibilityInput string No description.
LocalInput object No description.
MaxLeaseTtlSecondsInput double No description.
NamespaceInput string No description.
OptionsInput System.Collections.Generic.IDictionary<string, string> No description.
PassthroughRequestHeadersInput string[] No description.
PasswordPolicyInput string No description.
PathInput string No description.
PluginVersionInput string No description.
RequestTimeoutInput double No description.
SchemaInput string No description.
SealWrapInput object No description.
SkipStaticRoleImportRotationInput object No description.
StarttlsInput object No description.
UpndomainInput string No description.
UrlInput string No description.
UserattrInput string No description.
UserdnInput string No description.
AllowedManagedKeys string[] No description.
AllowedResponseHeaders string[] No description.
AuditNonHmacRequestKeys string[] No description.
AuditNonHmacResponseKeys string[] No description.
Binddn string No description.
Bindpass string No description.
Certificate string No description.
ClientTlsCert string No description.
ClientTlsKey string No description.
ConnectionTimeout double No description.
DefaultLeaseTtlSeconds double No description.
DelegatedAuthAccessors string[] No description.
Description string No description.
DisableRemount object No description.
ExternalEntropyAccess object No description.
Id string No description.
IdentityTokenKey string No description.
InsecureTls object No description.
ListingVisibility string No description.
Local object No description.
MaxLeaseTtlSeconds double No description.
Namespace string No description.
Options System.Collections.Generic.IDictionary<string, string> No description.
PassthroughRequestHeaders string[] No description.
PasswordPolicy string No description.
Path string No description.
PluginVersion string No description.
RequestTimeout double No description.
Schema string No description.
SealWrap object No description.
SkipStaticRoleImportRotation object No description.
Starttls object No description.
Upndomain string No description.
Url string No description.
Userattr string No description.
Userdn string No description.

NodeRequired
public Node Node { get; }
  • Type: Constructs.Node

The tree node.


CdktfStackRequired
public TerraformStack CdktfStack { get; }
  • Type: HashiCorp.Cdktf.TerraformStack

FqnRequired
public string Fqn { get; }
  • Type: string

FriendlyUniqueIdRequired
public string FriendlyUniqueId { get; }
  • Type: string

TerraformMetaArgumentsRequired
public System.Collections.Generic.IDictionary<string, object> TerraformMetaArguments { get; }
  • Type: System.Collections.Generic.IDictionary<string, object>

TerraformResourceTypeRequired
public string TerraformResourceType { get; }
  • Type: string

TerraformGeneratorMetadataOptional
public TerraformProviderGeneratorMetadata TerraformGeneratorMetadata { get; }
  • Type: HashiCorp.Cdktf.TerraformProviderGeneratorMetadata

ConnectionOptional
public object Connection { get; }
  • Type: object

CountOptional
public object Count { get; }
  • Type: object

DependsOnOptional
public string[] DependsOn { get; }
  • Type: string[]

ForEachOptional
public ITerraformIterator ForEach { get; }
  • Type: HashiCorp.Cdktf.ITerraformIterator

LifecycleOptional
public TerraformResourceLifecycle Lifecycle { get; }
  • Type: HashiCorp.Cdktf.TerraformResourceLifecycle

ProviderOptional
public TerraformProvider Provider { get; }
  • Type: HashiCorp.Cdktf.TerraformProvider

ProvisionersOptional
public object[] Provisioners { get; }
  • Type: object[]

AccessorRequired
public string Accessor { get; }
  • Type: string

AllowedManagedKeysInputOptional
public string[] AllowedManagedKeysInput { get; }
  • Type: string[]

AllowedResponseHeadersInputOptional
public string[] AllowedResponseHeadersInput { get; }
  • Type: string[]

AuditNonHmacRequestKeysInputOptional
public string[] AuditNonHmacRequestKeysInput { get; }
  • Type: string[]

AuditNonHmacResponseKeysInputOptional
public string[] AuditNonHmacResponseKeysInput { get; }
  • Type: string[]

BinddnInputOptional
public string BinddnInput { get; }
  • Type: string

BindpassInputOptional
public string BindpassInput { get; }
  • Type: string

CertificateInputOptional
public string CertificateInput { get; }
  • Type: string

ClientTlsCertInputOptional
public string ClientTlsCertInput { get; }
  • Type: string

ClientTlsKeyInputOptional
public string ClientTlsKeyInput { get; }
  • Type: string

ConnectionTimeoutInputOptional
public double ConnectionTimeoutInput { get; }
  • Type: double

DefaultLeaseTtlSecondsInputOptional
public double DefaultLeaseTtlSecondsInput { get; }
  • Type: double

DelegatedAuthAccessorsInputOptional
public string[] DelegatedAuthAccessorsInput { get; }
  • Type: string[]

DescriptionInputOptional
public string DescriptionInput { get; }
  • Type: string

DisableRemountInputOptional
public object DisableRemountInput { get; }
  • Type: object

ExternalEntropyAccessInputOptional
public object ExternalEntropyAccessInput { get; }
  • Type: object

IdentityTokenKeyInputOptional
public string IdentityTokenKeyInput { get; }
  • Type: string

IdInputOptional
public string IdInput { get; }
  • Type: string

InsecureTlsInputOptional
public object InsecureTlsInput { get; }
  • Type: object

ListingVisibilityInputOptional
public string ListingVisibilityInput { get; }
  • Type: string

LocalInputOptional
public object LocalInput { get; }
  • Type: object

MaxLeaseTtlSecondsInputOptional
public double MaxLeaseTtlSecondsInput { get; }
  • Type: double

NamespaceInputOptional
public string NamespaceInput { get; }
  • Type: string

OptionsInputOptional
public System.Collections.Generic.IDictionary<string, string> OptionsInput { get; }
  • Type: System.Collections.Generic.IDictionary<string, string>

PassthroughRequestHeadersInputOptional
public string[] PassthroughRequestHeadersInput { get; }
  • Type: string[]

PasswordPolicyInputOptional
public string PasswordPolicyInput { get; }
  • Type: string

PathInputOptional
public string PathInput { get; }
  • Type: string

PluginVersionInputOptional
public string PluginVersionInput { get; }
  • Type: string

RequestTimeoutInputOptional
public double RequestTimeoutInput { get; }
  • Type: double

SchemaInputOptional
public string SchemaInput { get; }
  • Type: string

SealWrapInputOptional
public object SealWrapInput { get; }
  • Type: object

SkipStaticRoleImportRotationInputOptional
public object SkipStaticRoleImportRotationInput { get; }
  • Type: object

StarttlsInputOptional
public object StarttlsInput { get; }
  • Type: object

UpndomainInputOptional
public string UpndomainInput { get; }
  • Type: string

UrlInputOptional
public string UrlInput { get; }
  • Type: string

UserattrInputOptional
public string UserattrInput { get; }
  • Type: string

UserdnInputOptional
public string UserdnInput { get; }
  • Type: string

AllowedManagedKeysRequired
public string[] AllowedManagedKeys { get; }
  • Type: string[]

AllowedResponseHeadersRequired
public string[] AllowedResponseHeaders { get; }
  • Type: string[]

AuditNonHmacRequestKeysRequired
public string[] AuditNonHmacRequestKeys { get; }
  • Type: string[]

AuditNonHmacResponseKeysRequired
public string[] AuditNonHmacResponseKeys { get; }
  • Type: string[]

BinddnRequired
public string Binddn { get; }
  • Type: string

BindpassRequired
public string Bindpass { get; }
  • Type: string

CertificateRequired
public string Certificate { get; }
  • Type: string

ClientTlsCertRequired
public string ClientTlsCert { get; }
  • Type: string

ClientTlsKeyRequired
public string ClientTlsKey { get; }
  • Type: string

ConnectionTimeoutRequired
public double ConnectionTimeout { get; }
  • Type: double

DefaultLeaseTtlSecondsRequired
public double DefaultLeaseTtlSeconds { get; }
  • Type: double

DelegatedAuthAccessorsRequired
public string[] DelegatedAuthAccessors { get; }
  • Type: string[]

DescriptionRequired
public string Description { get; }
  • Type: string

DisableRemountRequired
public object DisableRemount { get; }
  • Type: object

ExternalEntropyAccessRequired
public object ExternalEntropyAccess { get; }
  • Type: object

IdRequired
public string Id { get; }
  • Type: string

IdentityTokenKeyRequired
public string IdentityTokenKey { get; }
  • Type: string

InsecureTlsRequired
public object InsecureTls { get; }
  • Type: object

ListingVisibilityRequired
public string ListingVisibility { get; }
  • Type: string

LocalRequired
public object Local { get; }
  • Type: object

MaxLeaseTtlSecondsRequired
public double MaxLeaseTtlSeconds { get; }
  • Type: double

NamespaceRequired
public string Namespace { get; }
  • Type: string

OptionsRequired
public System.Collections.Generic.IDictionary<string, string> Options { get; }
  • Type: System.Collections.Generic.IDictionary<string, string>

PassthroughRequestHeadersRequired
public string[] PassthroughRequestHeaders { get; }
  • Type: string[]

PasswordPolicyRequired
public string PasswordPolicy { get; }
  • Type: string

PathRequired
public string Path { get; }
  • Type: string

PluginVersionRequired
public string PluginVersion { get; }
  • Type: string

RequestTimeoutRequired
public double RequestTimeout { get; }
  • Type: double

SchemaRequired
public string Schema { get; }
  • Type: string

SealWrapRequired
public object SealWrap { get; }
  • Type: object

SkipStaticRoleImportRotationRequired
public object SkipStaticRoleImportRotation { get; }
  • Type: object

StarttlsRequired
public object Starttls { get; }
  • Type: object

UpndomainRequired
public string Upndomain { get; }
  • Type: string

UrlRequired
public string Url { get; }
  • Type: string

UserattrRequired
public string Userattr { get; }
  • Type: string

UserdnRequired
public string Userdn { get; }
  • Type: string

Constants

Name Type Description
TfResourceType string No description.

TfResourceTypeRequired
public string TfResourceType { get; }
  • Type: string

Structs

LdapSecretBackendConfig

Initializer

using HashiCorp.Cdktf.Providers.Vault;

new LdapSecretBackendConfig {
    object Connection = null,
    object Count = null,
    ITerraformDependable[] DependsOn = null,
    ITerraformIterator ForEach = null,
    TerraformResourceLifecycle Lifecycle = null,
    TerraformProvider Provider = null,
    object[] Provisioners = null,
    string Binddn,
    string Bindpass,
    string[] AllowedManagedKeys = null,
    string[] AllowedResponseHeaders = null,
    string[] AuditNonHmacRequestKeys = null,
    string[] AuditNonHmacResponseKeys = null,
    string Certificate = null,
    string ClientTlsCert = null,
    string ClientTlsKey = null,
    double ConnectionTimeout = null,
    double DefaultLeaseTtlSeconds = null,
    string[] DelegatedAuthAccessors = null,
    string Description = null,
    object DisableRemount = null,
    object ExternalEntropyAccess = null,
    string Id = null,
    string IdentityTokenKey = null,
    object InsecureTls = null,
    string ListingVisibility = null,
    object Local = null,
    double MaxLeaseTtlSeconds = null,
    string Namespace = null,
    System.Collections.Generic.IDictionary<string, string> Options = null,
    string[] PassthroughRequestHeaders = null,
    string PasswordPolicy = null,
    string Path = null,
    string PluginVersion = null,
    double RequestTimeout = null,
    string Schema = null,
    object SealWrap = null,
    object SkipStaticRoleImportRotation = null,
    object Starttls = null,
    string Upndomain = null,
    string Url = null,
    string Userattr = null,
    string Userdn = null
};

Properties

Name Type Description
Connection object No description.
Count object No description.
DependsOn HashiCorp.Cdktf.ITerraformDependable[] No description.
ForEach HashiCorp.Cdktf.ITerraformIterator No description.
Lifecycle HashiCorp.Cdktf.TerraformResourceLifecycle No description.
Provider HashiCorp.Cdktf.TerraformProvider No description.
Provisioners object[] No description.
Binddn string Distinguished name of object to bind when performing user and group search.
Bindpass string LDAP password for searching for the user DN.
AllowedManagedKeys string[] List of managed key registry entry names that the mount in question is allowed to access.
AllowedResponseHeaders string[] List of headers to allow and pass from the request to the plugin.
AuditNonHmacRequestKeys string[] Specifies the list of keys that will not be HMAC'd by audit devices in the request data object.
AuditNonHmacResponseKeys string[] Specifies the list of keys that will not be HMAC'd by audit devices in the response data object.
Certificate string CA certificate to use when verifying LDAP server certificate, must be x509 PEM encoded.
ClientTlsCert string Client certificate to provide to the LDAP server, must be x509 PEM encoded.
ClientTlsKey string Client certificate key to provide to the LDAP server, must be x509 PEM encoded.
ConnectionTimeout double Timeout, in seconds, when attempting to connect to the LDAP server before trying the next URL in the configuration.
DefaultLeaseTtlSeconds double Default lease duration for tokens and secrets in seconds.
DelegatedAuthAccessors string[] List of headers to allow and pass from the request to the plugin.
Description string Human-friendly description of the mount.
DisableRemount object If set, opts out of mount migration on path updates.
ExternalEntropyAccess object Enable the secrets engine to access Vault's external entropy source.
Id string Docs at Terraform Registry: {@link https://registry.terraform.io/providers/hashicorp/vault/4.5.0/docs/resources/ldap_secret_backend#id LdapSecretBackend#id}.
IdentityTokenKey string The key to use for signing plugin workload identity tokens.
InsecureTls object Skip LDAP server SSL Certificate verification - insecure and not recommended for production use.
ListingVisibility string Specifies whether to show this mount in the UI-specific listing endpoint.
Local object Local mount flag that can be explicitly set to true to enforce local mount in HA environment.
MaxLeaseTtlSeconds double Maximum possible lease duration for tokens and secrets in seconds.
Namespace string Target namespace. (requires Enterprise).
Options System.Collections.Generic.IDictionary<string, string> Specifies mount type specific options that are passed to the backend.
PassthroughRequestHeaders string[] List of headers to allow and pass from the request to the plugin.
PasswordPolicy string Name of the password policy to use to generate passwords.
Path string The path where the LDAP secrets backend is mounted.
PluginVersion string Specifies the semantic version of the plugin to use, e.g. 'v1.0.0'.
RequestTimeout double Timeout, in seconds, for the connection when making requests against the server before returning back an error.
Schema string The LDAP schema to use when storing entry passwords. Valid schemas include openldap, ad, and racf.
SealWrap object Enable seal wrapping for the mount, causing values stored by the mount to be wrapped by the seal's encryption capability.
SkipStaticRoleImportRotation object Skip rotation of static role secrets on import.
Starttls object Issue a StartTLS command after establishing unencrypted connection.
Upndomain string Enables userPrincipalDomain login with [username]@UPNDomain.
Url string LDAP URL to connect to (default: ldap://127.0.0.1). Multiple URLs can be specified by concatenating them with commas; they will be tried in-order.
Userattr string Attribute used for users (default: cn).
Userdn string LDAP domain to use for users (eg: ou=People,dc=example,dc=org).

ConnectionOptional
public object Connection { get; set; }
  • Type: object

CountOptional
public object Count { get; set; }
  • Type: object

DependsOnOptional
public ITerraformDependable[] DependsOn { get; set; }
  • Type: HashiCorp.Cdktf.ITerraformDependable[]

ForEachOptional
public ITerraformIterator ForEach { get; set; }
  • Type: HashiCorp.Cdktf.ITerraformIterator

LifecycleOptional
public TerraformResourceLifecycle Lifecycle { get; set; }
  • Type: HashiCorp.Cdktf.TerraformResourceLifecycle

ProviderOptional
public TerraformProvider Provider { get; set; }
  • Type: HashiCorp.Cdktf.TerraformProvider

ProvisionersOptional
public object[] Provisioners { get; set; }
  • Type: object[]

BinddnRequired
public string Binddn { get; set; }
  • Type: string

Distinguished name of object to bind when performing user and group search.

Docs at Terraform Registry: {@link https://registry.terraform.io/providers/hashicorp/vault/4.5.0/docs/resources/ldap_secret_backend#binddn LdapSecretBackend#binddn}


BindpassRequired
public string Bindpass { get; set; }
  • Type: string

LDAP password for searching for the user DN.

Docs at Terraform Registry: {@link https://registry.terraform.io/providers/hashicorp/vault/4.5.0/docs/resources/ldap_secret_backend#bindpass LdapSecretBackend#bindpass}


AllowedManagedKeysOptional
public string[] AllowedManagedKeys { get; set; }
  • Type: string[]

List of managed key registry entry names that the mount in question is allowed to access.

Docs at Terraform Registry: {@link https://registry.terraform.io/providers/hashicorp/vault/4.5.0/docs/resources/ldap_secret_backend#allowed_managed_keys LdapSecretBackend#allowed_managed_keys}


AllowedResponseHeadersOptional
public string[] AllowedResponseHeaders { get; set; }
  • Type: string[]

List of headers to allow and pass from the request to the plugin.

Docs at Terraform Registry: {@link https://registry.terraform.io/providers/hashicorp/vault/4.5.0/docs/resources/ldap_secret_backend#allowed_response_headers LdapSecretBackend#allowed_response_headers}


AuditNonHmacRequestKeysOptional
public string[] AuditNonHmacRequestKeys { get; set; }
  • Type: string[]

Specifies the list of keys that will not be HMAC'd by audit devices in the request data object.

Docs at Terraform Registry: {@link https://registry.terraform.io/providers/hashicorp/vault/4.5.0/docs/resources/ldap_secret_backend#audit_non_hmac_request_keys LdapSecretBackend#audit_non_hmac_request_keys}


AuditNonHmacResponseKeysOptional
public string[] AuditNonHmacResponseKeys { get; set; }
  • Type: string[]

Specifies the list of keys that will not be HMAC'd by audit devices in the response data object.

Docs at Terraform Registry: {@link https://registry.terraform.io/providers/hashicorp/vault/4.5.0/docs/resources/ldap_secret_backend#audit_non_hmac_response_keys LdapSecretBackend#audit_non_hmac_response_keys}


CertificateOptional
public string Certificate { get; set; }
  • Type: string

CA certificate to use when verifying LDAP server certificate, must be x509 PEM encoded.

Docs at Terraform Registry: {@link https://registry.terraform.io/providers/hashicorp/vault/4.5.0/docs/resources/ldap_secret_backend#certificate LdapSecretBackend#certificate}


ClientTlsCertOptional
public string ClientTlsCert { get; set; }
  • Type: string

Client certificate to provide to the LDAP server, must be x509 PEM encoded.

Docs at Terraform Registry: {@link https://registry.terraform.io/providers/hashicorp/vault/4.5.0/docs/resources/ldap_secret_backend#client_tls_cert LdapSecretBackend#client_tls_cert}


ClientTlsKeyOptional
public string ClientTlsKey { get; set; }
  • Type: string

Client certificate key to provide to the LDAP server, must be x509 PEM encoded.

Docs at Terraform Registry: {@link https://registry.terraform.io/providers/hashicorp/vault/4.5.0/docs/resources/ldap_secret_backend#client_tls_key LdapSecretBackend#client_tls_key}


ConnectionTimeoutOptional
public double ConnectionTimeout { get; set; }
  • Type: double

Timeout, in seconds, when attempting to connect to the LDAP server before trying the next URL in the configuration.

Docs at Terraform Registry: {@link https://registry.terraform.io/providers/hashicorp/vault/4.5.0/docs/resources/ldap_secret_backend#connection_timeout LdapSecretBackend#connection_timeout}


DefaultLeaseTtlSecondsOptional
public double DefaultLeaseTtlSeconds { get; set; }
  • Type: double

Default lease duration for tokens and secrets in seconds.

Docs at Terraform Registry: {@link https://registry.terraform.io/providers/hashicorp/vault/4.5.0/docs/resources/ldap_secret_backend#default_lease_ttl_seconds LdapSecretBackend#default_lease_ttl_seconds}


DelegatedAuthAccessorsOptional
public string[] DelegatedAuthAccessors { get; set; }
  • Type: string[]

List of headers to allow and pass from the request to the plugin.

Docs at Terraform Registry: {@link https://registry.terraform.io/providers/hashicorp/vault/4.5.0/docs/resources/ldap_secret_backend#delegated_auth_accessors LdapSecretBackend#delegated_auth_accessors}


DescriptionOptional
public string Description { get; set; }
  • Type: string

Human-friendly description of the mount.

Docs at Terraform Registry: {@link https://registry.terraform.io/providers/hashicorp/vault/4.5.0/docs/resources/ldap_secret_backend#description LdapSecretBackend#description}


DisableRemountOptional
public object DisableRemount { get; set; }
  • Type: object

If set, opts out of mount migration on path updates.

Docs at Terraform Registry: {@link https://registry.terraform.io/providers/hashicorp/vault/4.5.0/docs/resources/ldap_secret_backend#disable_remount LdapSecretBackend#disable_remount}


ExternalEntropyAccessOptional
public object ExternalEntropyAccess { get; set; }
  • Type: object

Enable the secrets engine to access Vault's external entropy source.

Docs at Terraform Registry: {@link https://registry.terraform.io/providers/hashicorp/vault/4.5.0/docs/resources/ldap_secret_backend#external_entropy_access LdapSecretBackend#external_entropy_access}


IdOptional
public string Id { get; set; }
  • Type: string

Docs at Terraform Registry: {@link https://registry.terraform.io/providers/hashicorp/vault/4.5.0/docs/resources/ldap_secret_backend#id LdapSecretBackend#id}.

Please be aware that the id field is automatically added to all resources in Terraform providers using a Terraform provider SDK version below 2. If you experience problems setting this value it might not be settable. Please take a look at the provider documentation to ensure it should be settable.


IdentityTokenKeyOptional
public string IdentityTokenKey { get; set; }
  • Type: string

The key to use for signing plugin workload identity tokens.

Docs at Terraform Registry: {@link https://registry.terraform.io/providers/hashicorp/vault/4.5.0/docs/resources/ldap_secret_backend#identity_token_key LdapSecretBackend#identity_token_key}


InsecureTlsOptional
public object InsecureTls { get; set; }
  • Type: object

Skip LDAP server SSL Certificate verification - insecure and not recommended for production use.

Docs at Terraform Registry: {@link https://registry.terraform.io/providers/hashicorp/vault/4.5.0/docs/resources/ldap_secret_backend#insecure_tls LdapSecretBackend#insecure_tls}


ListingVisibilityOptional
public string ListingVisibility { get; set; }
  • Type: string

Specifies whether to show this mount in the UI-specific listing endpoint.

Docs at Terraform Registry: {@link https://registry.terraform.io/providers/hashicorp/vault/4.5.0/docs/resources/ldap_secret_backend#listing_visibility LdapSecretBackend#listing_visibility}


LocalOptional
public object Local { get; set; }
  • Type: object

Local mount flag that can be explicitly set to true to enforce local mount in HA environment.

Docs at Terraform Registry: {@link https://registry.terraform.io/providers/hashicorp/vault/4.5.0/docs/resources/ldap_secret_backend#local LdapSecretBackend#local}


MaxLeaseTtlSecondsOptional
public double MaxLeaseTtlSeconds { get; set; }
  • Type: double

Maximum possible lease duration for tokens and secrets in seconds.

Docs at Terraform Registry: {@link https://registry.terraform.io/providers/hashicorp/vault/4.5.0/docs/resources/ldap_secret_backend#max_lease_ttl_seconds LdapSecretBackend#max_lease_ttl_seconds}


NamespaceOptional
public string Namespace { get; set; }
  • Type: string

Target namespace. (requires Enterprise).

Docs at Terraform Registry: {@link https://registry.terraform.io/providers/hashicorp/vault/4.5.0/docs/resources/ldap_secret_backend#namespace LdapSecretBackend#namespace}


OptionsOptional
public System.Collections.Generic.IDictionary<string, string> Options { get; set; }
  • Type: System.Collections.Generic.IDictionary<string, string>

Specifies mount type specific options that are passed to the backend.

Docs at Terraform Registry: {@link https://registry.terraform.io/providers/hashicorp/vault/4.5.0/docs/resources/ldap_secret_backend#options LdapSecretBackend#options}


PassthroughRequestHeadersOptional
public string[] PassthroughRequestHeaders { get; set; }
  • Type: string[]

List of headers to allow and pass from the request to the plugin.

Docs at Terraform Registry: {@link https://registry.terraform.io/providers/hashicorp/vault/4.5.0/docs/resources/ldap_secret_backend#passthrough_request_headers LdapSecretBackend#passthrough_request_headers}


PasswordPolicyOptional
public string PasswordPolicy { get; set; }
  • Type: string

Name of the password policy to use to generate passwords.

Docs at Terraform Registry: {@link https://registry.terraform.io/providers/hashicorp/vault/4.5.0/docs/resources/ldap_secret_backend#password_policy LdapSecretBackend#password_policy}


PathOptional
public string Path { get; set; }
  • Type: string

The path where the LDAP secrets backend is mounted.

Docs at Terraform Registry: {@link https://registry.terraform.io/providers/hashicorp/vault/4.5.0/docs/resources/ldap_secret_backend#path LdapSecretBackend#path}


PluginVersionOptional
public string PluginVersion { get; set; }
  • Type: string

Specifies the semantic version of the plugin to use, e.g. 'v1.0.0'.

Docs at Terraform Registry: {@link https://registry.terraform.io/providers/hashicorp/vault/4.5.0/docs/resources/ldap_secret_backend#plugin_version LdapSecretBackend#plugin_version}


RequestTimeoutOptional
public double RequestTimeout { get; set; }
  • Type: double

Timeout, in seconds, for the connection when making requests against the server before returning back an error.

Docs at Terraform Registry: {@link https://registry.terraform.io/providers/hashicorp/vault/4.5.0/docs/resources/ldap_secret_backend#request_timeout LdapSecretBackend#request_timeout}


SchemaOptional
public string Schema { get; set; }
  • Type: string

The LDAP schema to use when storing entry passwords. Valid schemas include openldap, ad, and racf.

Docs at Terraform Registry: {@link https://registry.terraform.io/providers/hashicorp/vault/4.5.0/docs/resources/ldap_secret_backend#schema LdapSecretBackend#schema}


SealWrapOptional
public object SealWrap { get; set; }
  • Type: object

Enable seal wrapping for the mount, causing values stored by the mount to be wrapped by the seal's encryption capability.

Docs at Terraform Registry: {@link https://registry.terraform.io/providers/hashicorp/vault/4.5.0/docs/resources/ldap_secret_backend#seal_wrap LdapSecretBackend#seal_wrap}


SkipStaticRoleImportRotationOptional
public object SkipStaticRoleImportRotation { get; set; }
  • Type: object

Skip rotation of static role secrets on import.

Docs at Terraform Registry: {@link https://registry.terraform.io/providers/hashicorp/vault/4.5.0/docs/resources/ldap_secret_backend#skip_static_role_import_rotation LdapSecretBackend#skip_static_role_import_rotation}


StarttlsOptional
public object Starttls { get; set; }
  • Type: object

Issue a StartTLS command after establishing unencrypted connection.

Docs at Terraform Registry: {@link https://registry.terraform.io/providers/hashicorp/vault/4.5.0/docs/resources/ldap_secret_backend#starttls LdapSecretBackend#starttls}


UpndomainOptional
public string Upndomain { get; set; }
  • Type: string

Enables userPrincipalDomain login with [username]@UPNDomain.

Docs at Terraform Registry: {@link https://registry.terraform.io/providers/hashicorp/vault/4.5.0/docs/resources/ldap_secret_backend#upndomain LdapSecretBackend#upndomain}


UrlOptional
public string Url { get; set; }
  • Type: string

LDAP URL to connect to (default: ldap://127.0.0.1). Multiple URLs can be specified by concatenating them with commas; they will be tried in-order.

Docs at Terraform Registry: {@link https://registry.terraform.io/providers/hashicorp/vault/4.5.0/docs/resources/ldap_secret_backend#url LdapSecretBackend#url}


UserattrOptional
public string Userattr { get; set; }
  • Type: string

Attribute used for users (default: cn).

Docs at Terraform Registry: {@link https://registry.terraform.io/providers/hashicorp/vault/4.5.0/docs/resources/ldap_secret_backend#userattr LdapSecretBackend#userattr}


UserdnOptional
public string Userdn { get; set; }
  • Type: string

LDAP domain to use for users (eg: ou=People,dc=example,dc=org).

Docs at Terraform Registry: {@link https://registry.terraform.io/providers/hashicorp/vault/4.5.0/docs/resources/ldap_secret_backend#userdn LdapSecretBackend#userdn}