Resource IdentityJwtAuth in pulumi-infisical.
Pulumi type: infisical:index/identityJwtAuth:IdentityJwtAuth.
name is the Pulumi resource name. Nested object fields are documented under that object. They are not arguments of this resource.
Example#
Only required arguments are set. A string in angle brackets stands in for that argument. Any other value is an option or example written in the SDK description.
Arguments#
| Property | Type | Required | Description |
|---|---|---|---|
accessTokenMaxTtl | number | no | The maximum lifetime for an access token in seconds. This value will be referenced at renewal time. Default: 2592000 |
accessTokenNumUsesLimit | number | no | The maximum number of times that an access token can be used; a value of 0 implies infinite number of uses. Default: 0 |
accessTokenTrustedIps | IdentityJwtAuthAccessTokenTrustedIp (input)[] | no | A list of IPs or CIDR ranges that access tokens can be used from. You can use 0.0.0.0/0, to allow usage from any network address. |
accessTokenTtl | number | no | The lifetime for an access token in seconds. This value will be referenced at renewal time. Default: 2592000 |
boundAudiences | string[] | no | The list of intended recipients. |
boundClaims | { [key: string]: string } | no | The attributes that should be present in the JWT for it to be valid. |
boundIssuer | string | no | The unique identifier of the identity provider issuing the JWTs. |
boundSubject | string | no | The expected principal that is the subject of the JWT. |
configurationType | string | yes | The configuration type of the JWT auth. Must be 'jwks' or 'static'. |
identityId | string | yes | The ID of the identity to attach the configuration onto. |
jwksCaCert | string | no | The PEM-encoded CA certificate for validating the TLS connection to the JWKS URL. |
jwksUrl | string | no | The URL used to retrieve the JSON Web Key Set (JWKS) for verifying JWTs. Required when configurationType is 'jwks'. |
publicKeys | string[] | no | A list of PEM-encoded public keys used to verify JWTs. Required when configurationType is 'static'. |
Outputs#
Computed outputs are produced by the provider. They are not constructor arguments.
| Property | Type | Computed | Description |
|---|---|---|---|
accessTokenMaxTtl | number | no | The maximum lifetime for an access token in seconds. This value will be referenced at renewal time. Default: 2592000 |
accessTokenNumUsesLimit | number | no | The maximum number of times that an access token can be used; a value of 0 implies infinite number of uses. Default: 0 |
accessTokenTrustedIps | IdentityJwtAuthAccessTokenTrustedIp (output)[] | no | A list of IPs or CIDR ranges that access tokens can be used from. You can use 0.0.0.0/0, to allow usage from any network address. |
accessTokenTtl | number | no | The lifetime for an access token in seconds. This value will be referenced at renewal time. Default: 2592000 |
boundAudiences | string[] | no | The list of intended recipients. |
boundClaims | { [key: string]: string } | no | The attributes that should be present in the JWT for it to be valid. |
boundIssuer | string | no | The unique identifier of the identity provider issuing the JWTs. |
boundSubject | string | no | The expected principal that is the subject of the JWT. |
configurationType | string | no | The configuration type of the JWT auth. Must be 'jwks' or 'static'. |
identityId | string | no | The ID of the identity to attach the configuration onto. |
jwksCaCert | string | no | The PEM-encoded CA certificate for validating the TLS connection to the JWKS URL. |
jwksUrl | string | no | The URL used to retrieve the JSON Web Key Set (JWKS) for verifying JWTs. Required when configurationType is 'jwks'. |
publicKeys | string[] | no | A list of PEM-encoded public keys used to verify JWTs. Required when configurationType is 'static'. |
IdentityJwtAuthAccessTokenTrustedIp (input)#
Input object IdentityJwtAuthAccessTokenTrustedIp. Fields below belong to this object, not to the parent.
| Property | Type | Required | Description |
|---|---|---|---|
ipAddress | string | no |
IdentityJwtAuthAccessTokenTrustedIp (output)#
Output object IdentityJwtAuthAccessTokenTrustedIp. Fields below belong to this object.
| Property | Type | Always present | Description |
|---|---|---|---|
ipAddress | string | yes |