SecretBackendStaticRole - upbound/provider-vault@v3.0.9

You are viewing an outdated version of provider-vault.

SecretBackendStaticRoleSecretBackendStaticRole is the Schema for the SecretBackendStaticRoles API. Configures a database secret backend static role for Vault.

TypeMR

Providerprovider-vault

Groupdatabase.vault.m.upbound.io

Scopenamespaced

Versionv1alpha1

1apiVersion: database.vault.m.upbound.io/v1alpha1

2kind: SecretBackendStaticRole

string

string

object

object

SecretBackendStaticRoleSpec defines the desired state of SecretBackendStaticRole

forProvider

required

object

required

object

(No description available)

backend

string

backendRef

object

Reference to a Mount in vault to populate backend.

name

required

string

namespace

string

policy

object

Policies for referencing.

resolution

string

resolve

string

backendSelector

object

Selector for a Mount in vault to populate backend.

boolean

object

string

object

Policies for selection.

string

string

object

string

string

object

Reference to a SecretBackendConnection in database to populate dbName.

name

required

string

namespace

string

policy

object

Policies for referencing.

resolution

string

resolve

string

dbNameSelector

object

Selector for a SecretBackendConnection in database to populate dbName.

boolean

object

string

object

Policies for selection.

string

string

string

string

number

string

array

Database statements to execute to rotate the password for the configured database user. Database statements to execute to rotate the password for the configured database user.

rotationWindow

number

selfManagedPasswordSecretRef

object

The password corresponding to the username in the database. Required when using the Rootless Password Rotation workflow for static roles. Only enabled for select DB engines (Postgres). Requires Vault 1.18+ Enterprise. The password corresponding to the username in the database. Required when using the Rootless Password Rotation workflow for static roles.

key

required

string

name

required

string

skipImportRotation

boolean

username

string

initProvider

object

THIS IS A BETA FIELD. It will be honored unless the Management Policies feature flag is disabled. InitProvider holds the same fields as ForProvider, with the exception of Identifier and other resource reference fields. The fields that are in InitProvider are merged into ForProvider when the resource is created. The same fields are also added to the terraform ignore_changes hook, to avoid updating them after creation. This is useful for fields that are required on creation, but we do not desire to update them after creation, for example because of an external controller is managing them, like an autoscaler.

backend

string

backendRef

object

Reference to a Mount in vault to populate backend.

name

required

string

namespace

string

policy

object

Policies for referencing.

resolution

string

resolve

string

backendSelector

object

Selector for a Mount in vault to populate backend.

boolean

object

string

object

Policies for selection.

string

string

object

string

string

object

Reference to a SecretBackendConnection in database to populate dbName.

name

required

string

namespace

string

policy

object

Policies for referencing.

resolution

string

resolve

string

dbNameSelector

object

Selector for a SecretBackendConnection in database to populate dbName.

boolean

object

string

object

Policies for selection.

string

string

string

string

number

string

array

Database statements to execute to rotate the password for the configured database user. Database statements to execute to rotate the password for the configured database user.

rotationWindow

number

selfManagedPasswordSecretRef

object

key

required

string

name

required

string

skipImportRotation

boolean

username

string

managementPolicies

array

THIS IS A BETA FIELD. It is on by default but can be opted out through a Crossplane feature flag. ManagementPolicies specify the array of actions Crossplane is allowed to take on the managed and external resources. See the design doc for more information: https://github.com/crossplane/crossplane/blob/499895a25d1a1a0ba1604944ef98ac7a1a71f197/design/design-doc-observe-only-resources.md?plain=1#L223 and this one: https://github.com/crossplane/crossplane/blob/444267e84783136daa93568b364a5f01228cacbe/design/one-pager-ignore-changes.md

providerConfigRef

object

ProviderConfigReference specifies how the provider that will be used to create, observe, update, and delete this managed resource should be configured.

kind

required

string

name

required

string

writeConnectionSecretToRef

object

WriteConnectionSecretToReference specifies the namespace and name of a Secret to which any connection details for this managed resource should be written. Connection details frequently include the endpoint, username, and password required to connect to the managed resource.

name

required

string

status

object

SecretBackendStaticRoleStatus defines the observed state of SecretBackendStaticRole.

atProvider

object

(No description available)

string

object

string

string

string

string

number

string

array

Database statements to execute to rotate the password for the configured database user. Database statements to execute to rotate the password for the configured database user.

number

boolean

string

array

Conditions of the resource.

lastTransitionTime

required

string