import * as pulumi from "@pulumi/pulumi"; import * as inputs from "../types/input"; import * as outputs from "../types/output"; /** * A `KeyRingImportJob` can be used to create `CryptoKeys` and `CryptoKeyVersions` using pre-existing * key material, generated outside of Cloud KMS. A `KeyRingImportJob` expires 3 days after it is created. * Once expired, Cloud KMS will no longer be able to import or unwrap any key material that * was wrapped with the `KeyRingImportJob`'s public key. * * > **Note:** KeyRingImportJobs cannot be deleted from Google Cloud Platform. * Destroying a provider-managed KeyRingImportJob will remove it from state but * *will not delete the resource from the project.* * * To get more information about KeyRingImportJob, see: * * * [API documentation](https://cloud.google.com/kms/docs/reference/rest/v1/projects.locations.keyRings.importJobs) * * How-to Guides * * [Importing a key](https://cloud.google.com/kms/docs/importing-a-key) * * ## Example Usage * * ## Import * * KeyRingImportJob can be imported using any of these accepted formats: * * * `{{name}}` * * When using the `pulumi import` command, KeyRingImportJob can be imported using one of the formats above. For example: * * ```sh * $ pulumi import gcp:kms/keyRingImportJob:KeyRingImportJob default {{name}} * ``` */ export declare class KeyRingImportJob extends pulumi.CustomResource { /** * Get an existing KeyRingImportJob resource's state with the given name, ID, and optional extra * properties used to qualify the lookup. * * @param name The _unique_ name of the resulting resource. * @param id The _unique_ provider ID of the resource to lookup. * @param state Any extra arguments used during the lookup. * @param opts Optional settings to control the behavior of the CustomResource. */ static get(name: string, id: pulumi.Input, state?: KeyRingImportJobState, opts?: pulumi.CustomResourceOptions): KeyRingImportJob; /** * Returns true if the given object is an instance of KeyRingImportJob. This is designed to work even * when multiple copies of the Pulumi SDK have been loaded into the same process. */ static isInstance(obj: any): obj is KeyRingImportJob; /** * Statement that was generated and signed by the key creator (for example, an HSM) at key creation time. * Use this statement to verify attributes of the key as stored on the HSM, independently of Google. * Only present if the chosen ImportMethod is one with a protection level of HSM. * Structure is documented below. */ readonly attestations: pulumi.Output; /** * Whether Terraform will be prevented from destroying the resource. Defaults to DELETE. * When a 'terraform destroy' or 'pulumi up' would delete the resource, * the command will fail if this field is set to "PREVENT" in Terraform state. * When set to "ABANDON", the command will remove the resource from Terraform * management without updating or deleting the resource in the API. * When set to "DELETE", deleting the resource is allowed. */ readonly deletionPolicy: pulumi.Output; /** * The time at which this resource is scheduled for expiration and can no longer be used. * This is in RFC3339 text format. */ readonly expireTime: pulumi.Output; /** * It must be unique within a KeyRing and match the regular expression [a-zA-Z0-9_-]{1,63} */ readonly importJobId: pulumi.Output; /** * The wrapping method to be used for incoming key material. * Possible values are: `RSA_OAEP_3072_SHA1_AES_256`, `RSA_OAEP_4096_SHA1_AES_256`, `RSA_OAEP_3072_SHA256_AES_256`, `RSA_OAEP_4096_SHA256_AES_256`, `RSA_OAEP_3072_SHA256`, `RSA_OAEP_4096_SHA256`. */ readonly importMethod: pulumi.Output; /** * The KeyRing that this import job belongs to. * Format: `'projects/{{project}}/locations/{{location}}/keyRings/{{keyRing}}'`. */ readonly keyRing: pulumi.Output; /** * The resource name for this ImportJob in the format projects/*/locations/*/keyRings/*/importJobs/*. */ readonly name: pulumi.Output; /** * The protection level of the ImportJob. This must match the protectionLevel of the * versionTemplate on the CryptoKey you attempt to import into. * Possible values are: `SOFTWARE`, `HSM`, `EXTERNAL`. */ readonly protectionLevel: pulumi.Output; /** * The public key with which to wrap key material prior to import. Only returned if state is `ACTIVE`. * Structure is documented below. */ readonly publicKeys: pulumi.Output; /** * The current state of the ImportJob, indicating if it can be used. */ readonly state: pulumi.Output; /** * Create a KeyRingImportJob resource with the given unique name, arguments, and options. * * @param name The _unique_ name of the resource. * @param args The arguments to use to populate this resource's properties. * @param opts A bag of options that control this resource's behavior. */ constructor(name: string, args: KeyRingImportJobArgs, opts?: pulumi.CustomResourceOptions); } /** * Input properties used for looking up and filtering KeyRingImportJob resources. */ export interface KeyRingImportJobState { /** * Statement that was generated and signed by the key creator (for example, an HSM) at key creation time. * Use this statement to verify attributes of the key as stored on the HSM, independently of Google. * Only present if the chosen ImportMethod is one with a protection level of HSM. * Structure is documented below. */ attestations?: pulumi.Input[] | undefined>; /** * Whether Terraform will be prevented from destroying the resource. Defaults to DELETE. * When a 'terraform destroy' or 'pulumi up' would delete the resource, * the command will fail if this field is set to "PREVENT" in Terraform state. * When set to "ABANDON", the command will remove the resource from Terraform * management without updating or deleting the resource in the API. * When set to "DELETE", deleting the resource is allowed. */ deletionPolicy?: pulumi.Input; /** * The time at which this resource is scheduled for expiration and can no longer be used. * This is in RFC3339 text format. */ expireTime?: pulumi.Input; /** * It must be unique within a KeyRing and match the regular expression [a-zA-Z0-9_-]{1,63} */ importJobId?: pulumi.Input; /** * The wrapping method to be used for incoming key material. * Possible values are: `RSA_OAEP_3072_SHA1_AES_256`, `RSA_OAEP_4096_SHA1_AES_256`, `RSA_OAEP_3072_SHA256_AES_256`, `RSA_OAEP_4096_SHA256_AES_256`, `RSA_OAEP_3072_SHA256`, `RSA_OAEP_4096_SHA256`. */ importMethod?: pulumi.Input; /** * The KeyRing that this import job belongs to. * Format: `'projects/{{project}}/locations/{{location}}/keyRings/{{keyRing}}'`. */ keyRing?: pulumi.Input; /** * The resource name for this ImportJob in the format projects/*/locations/*/keyRings/*/importJobs/*. */ name?: pulumi.Input; /** * The protection level of the ImportJob. This must match the protectionLevel of the * versionTemplate on the CryptoKey you attempt to import into. * Possible values are: `SOFTWARE`, `HSM`, `EXTERNAL`. */ protectionLevel?: pulumi.Input; /** * The public key with which to wrap key material prior to import. Only returned if state is `ACTIVE`. * Structure is documented below. */ publicKeys?: pulumi.Input[] | undefined>; /** * The current state of the ImportJob, indicating if it can be used. */ state?: pulumi.Input; } /** * The set of arguments for constructing a KeyRingImportJob resource. */ export interface KeyRingImportJobArgs { /** * Whether Terraform will be prevented from destroying the resource. Defaults to DELETE. * When a 'terraform destroy' or 'pulumi up' would delete the resource, * the command will fail if this field is set to "PREVENT" in Terraform state. * When set to "ABANDON", the command will remove the resource from Terraform * management without updating or deleting the resource in the API. * When set to "DELETE", deleting the resource is allowed. */ deletionPolicy?: pulumi.Input; /** * It must be unique within a KeyRing and match the regular expression [a-zA-Z0-9_-]{1,63} */ importJobId: pulumi.Input; /** * The wrapping method to be used for incoming key material. * Possible values are: `RSA_OAEP_3072_SHA1_AES_256`, `RSA_OAEP_4096_SHA1_AES_256`, `RSA_OAEP_3072_SHA256_AES_256`, `RSA_OAEP_4096_SHA256_AES_256`, `RSA_OAEP_3072_SHA256`, `RSA_OAEP_4096_SHA256`. */ importMethod: pulumi.Input; /** * The KeyRing that this import job belongs to. * Format: `'projects/{{project}}/locations/{{location}}/keyRings/{{keyRing}}'`. */ keyRing: pulumi.Input; /** * The protection level of the ImportJob. This must match the protectionLevel of the * versionTemplate on the CryptoKey you attempt to import into. * Possible values are: `SOFTWARE`, `HSM`, `EXTERNAL`. */ protectionLevel: pulumi.Input; } //# sourceMappingURL=keyRingImportJob.d.ts.map