IdentityVaultKey

konnect 3.28.0, Nov 6 26

Viewing docs for konnect 3.28.0
published on Friday, Nov 6, 2026 by kong

Schema (JSON)

kong/terraform-provider-konnect

konnect

Viewing docs for konnect 3.28.0
published on Friday, Nov 6, 2026 by kong

Schema (JSON)

kong/terraform-provider-konnect

Example Usage

import * as pulumi from "@pulumi/pulumi";
import * as konnect from "@pulumi/konnect";

const myIdentityvaultkey = new konnect.IdentityVaultKey("my_identityvaultkey", {
    directoryId: "5f9fd312-a987-4628-b4c5-bb4f4fddd5f7",
    name: "...my_name...",
    publicKey: `-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA...
-----END PUBLIC KEY-----`,
});

import pulumi
import pulumi_konnect as konnect

my_identityvaultkey = konnect.IdentityVaultKey("my_identityvaultkey",
    directory_id="5f9fd312-a987-4628-b4c5-bb4f4fddd5f7",
    name="...my_name...",
    public_key="""-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA...
-----END PUBLIC KEY-----""")

package main

import (
	"github.com/pulumi/pulumi-terraform-provider/sdks/go/konnect/v3/konnect"
	"github.com/pulumi/pulumi/sdk/v3/go/pulumi"
)

func main() {
	pulumi.Run(func(ctx *pulumi.Context) error {
		_, err := konnect.NewIdentityVaultKey(ctx, "my_identityvaultkey", &konnect.IdentityVaultKeyArgs{
			DirectoryId: pulumi.String("5f9fd312-a987-4628-b4c5-bb4f4fddd5f7"),
			Name:        pulumi.String("...my_name..."),
			PublicKey:   pulumi.String("-----BEGIN PUBLIC KEY-----\nMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA...\n-----END PUBLIC KEY-----"),
		})
		if err != nil {
			return err
		}
		return nil
	})
}

using System.Collections.Generic;
using System.Linq;
using Pulumi;
using Konnect = Pulumi.Konnect;

return await Deployment.RunAsync(() => 
{
    var myIdentityvaultkey = new Konnect.IdentityVaultKey("my_identityvaultkey", new()
    {
        DirectoryId = "5f9fd312-a987-4628-b4c5-bb4f4fddd5f7",
        Name = "...my_name...",
        PublicKey = @"-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA...
-----END PUBLIC KEY-----",
    });

});

package generated_program;

import com.pulumi.Context;
import com.pulumi.Pulumi;
import com.pulumi.core.Output;
import com.pulumi.konnect.IdentityVaultKey;
import com.pulumi.konnect.IdentityVaultKeyArgs;
import java.util.List;
import java.util.ArrayList;
import java.util.Map;
import java.io.File;
import java.nio.file.Files;
import java.nio.file.Paths;

public class App {
    public static void main(String[] args) {
        Pulumi.run(App::stack);
    }

    public static void stack(Context ctx) {
        var myIdentityvaultkey = new IdentityVaultKey("myIdentityvaultkey", IdentityVaultKeyArgs.builder()
            .directoryId("5f9fd312-a987-4628-b4c5-bb4f4fddd5f7")
            .name("...my_name...")
            .publicKey("""
-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA...
-----END PUBLIC KEY-----            """)
            .build());

    }
}

resources:
  myIdentityvaultkey:
    type: konnect:IdentityVaultKey
    name: my_identityvaultkey
    properties:
      directoryId: 5f9fd312-a987-4628-b4c5-bb4f4fddd5f7
      name: '...my_name...'
      publicKey: |-
        -----BEGIN PUBLIC KEY-----
        MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA...
        -----END PUBLIC KEY-----

Example coming soon!

Create IdentityVaultKey Resource

Resources are created with functions called constructors. To learn more about declaring and configuring resources, see Resources.

Constructor syntax

new IdentityVaultKey(name: string, args: IdentityVaultKeyArgs, opts?: CustomResourceOptions);

@overload
def IdentityVaultKey(resource_name: str,
                     args: IdentityVaultKeyArgs,
                     opts: Optional[ResourceOptions] = None)

@overload
def IdentityVaultKey(resource_name: str,
                     opts: Optional[ResourceOptions] = None,
                     directory_id: Optional[str] = None,
                     public_key: Optional[str] = None,
                     name: Optional[str] = None)

func NewIdentityVaultKey(ctx *Context, name string, args IdentityVaultKeyArgs, opts ...ResourceOption) (*IdentityVaultKey, error)

public IdentityVaultKey(string name, IdentityVaultKeyArgs args, CustomResourceOptions? opts = null)

public IdentityVaultKey(String name, IdentityVaultKeyArgs args)
public IdentityVaultKey(String name, IdentityVaultKeyArgs args, CustomResourceOptions options)

type: konnect:IdentityVaultKey
properties: # The arguments to resource properties.
options: # Bag of options to control resource's behavior.

resource "konnect_identity_vault_key" "name" {
    # resource properties
}

Parameters

name string: The unique name of the resource.
args IdentityVaultKeyArgs: The arguments to resource properties.
opts CustomResourceOptions: Bag of options to control resource's behavior.

resource_name str: The unique name of the resource.
args IdentityVaultKeyArgs: The arguments to resource properties.
opts ResourceOptions: Bag of options to control resource's behavior.

ctx Context: Context object for the current deployment.
name string: The unique name of the resource.
args IdentityVaultKeyArgs: The arguments to resource properties.
opts ResourceOption: Bag of options to control resource's behavior.

name string: The unique name of the resource.
args IdentityVaultKeyArgs: The arguments to resource properties.
opts CustomResourceOptions: Bag of options to control resource's behavior.

name String: The unique name of the resource.
args IdentityVaultKeyArgs: The arguments to resource properties.
options CustomResourceOptions: Bag of options to control resource's behavior.

Constructor example

The following reference example uses placeholder values for all input properties.

var identityVaultKeyResource = new Konnect.IdentityVaultKey("identityVaultKeyResource", new()
{
    DirectoryId = "string",
    PublicKey = "string",
    Name = "string",
});

example, err := konnect.NewIdentityVaultKey(ctx, "identityVaultKeyResource", &konnect.IdentityVaultKeyArgs{
	DirectoryId: pulumi.String("string"),
	PublicKey:   pulumi.String("string"),
	Name:        pulumi.String("string"),
})

resource "konnect_identity_vault_key" "identityVaultKeyResource" {
  lifecycle {
    create_before_destroy = true
  }
  directory_id = "string"
  public_key   = "string"
  name         = "string"
}

var identityVaultKeyResource = new IdentityVaultKey("identityVaultKeyResource", IdentityVaultKeyArgs.builder()
    .directoryId("string")
    .publicKey("string")
    .name("string")
    .build());

identity_vault_key_resource = konnect.IdentityVaultKey("identityVaultKeyResource",
    directory_id="string",
    public_key="string",
    name="string")

const identityVaultKeyResource = new konnect.IdentityVaultKey("identityVaultKeyResource", {
    directoryId: "string",
    publicKey: "string",
    name: "string",
});

type: konnect:IdentityVaultKey
properties:
    directoryId: string
    name: string
    publicKey: string

IdentityVaultKey Resource Properties

To learn more about resource properties and how to use them, see Inputs and Outputs in the Architecture and Concepts docs.

Inputs

In Python, inputs that are objects can be passed either as argument classes or as dictionary literals.

The IdentityVaultKey resource accepts the following input properties:

DirectoryId string: ID of the directory
PublicKey string: PEM-encoded RSA or EC public key used to encrypt token vault data. Keys must be at least 2048 bits (RSA) or 256 bits (EC). Requires replacement if changed.
Name string

DirectoryId string: ID of the directory
PublicKey string: PEM-encoded RSA or EC public key used to encrypt token vault data. Keys must be at least 2048 bits (RSA) or 256 bits (EC). Requires replacement if changed.
Name string

directory_id string: ID of the directory
public_key string: PEM-encoded RSA or EC public key used to encrypt token vault data. Keys must be at least 2048 bits (RSA) or 256 bits (EC). Requires replacement if changed.
name string

directoryId String: ID of the directory
publicKey String: PEM-encoded RSA or EC public key used to encrypt token vault data. Keys must be at least 2048 bits (RSA) or 256 bits (EC). Requires replacement if changed.
name String

directoryId string: ID of the directory
publicKey string: PEM-encoded RSA or EC public key used to encrypt token vault data. Keys must be at least 2048 bits (RSA) or 256 bits (EC). Requires replacement if changed.
name string

directory_id str: ID of the directory
public_key str: PEM-encoded RSA or EC public key used to encrypt token vault data. Keys must be at least 2048 bits (RSA) or 256 bits (EC). Requires replacement if changed.
name str

directoryId String: ID of the directory
publicKey String: PEM-encoded RSA or EC public key used to encrypt token vault data. Keys must be at least 2048 bits (RSA) or 256 bits (EC). Requires replacement if changed.
name String

Outputs

All input properties are implicitly available as output properties. Additionally, the IdentityVaultKey resource produces the following output properties:

Algorithm string: The asymmetric algorithm of the vault key.
CreatedAt string: An ISO-8601 timestamp representation of entity creation date.
Id string: The provider-assigned unique ID for this managed resource.
KeySize double: Size of the key in bits (for example 2048 for RSA, 256 for EC P-256).
Kid string: RFC 7638 JWK thumbprint (base64url-encoded SHA-256 digest) of the public key.
UpdatedAt string: An ISO-8601 timestamp representation of entity update date.

Algorithm string: The asymmetric algorithm of the vault key.
CreatedAt string: An ISO-8601 timestamp representation of entity creation date.
Id string: The provider-assigned unique ID for this managed resource.
KeySize float64: Size of the key in bits (for example 2048 for RSA, 256 for EC P-256).
Kid string: RFC 7638 JWK thumbprint (base64url-encoded SHA-256 digest) of the public key.
UpdatedAt string: An ISO-8601 timestamp representation of entity update date.

algorithm string: The asymmetric algorithm of the vault key.
created_at string: An ISO-8601 timestamp representation of entity creation date.
id string: The provider-assigned unique ID for this managed resource.
key_size number: Size of the key in bits (for example 2048 for RSA, 256 for EC P-256).
kid string: RFC 7638 JWK thumbprint (base64url-encoded SHA-256 digest) of the public key.
updated_at string: An ISO-8601 timestamp representation of entity update date.

algorithm String: The asymmetric algorithm of the vault key.
createdAt String: An ISO-8601 timestamp representation of entity creation date.
id String: The provider-assigned unique ID for this managed resource.
keySize Double: Size of the key in bits (for example 2048 for RSA, 256 for EC P-256).
kid String: RFC 7638 JWK thumbprint (base64url-encoded SHA-256 digest) of the public key.
updatedAt String: An ISO-8601 timestamp representation of entity update date.

algorithm string: The asymmetric algorithm of the vault key.
createdAt string: An ISO-8601 timestamp representation of entity creation date.
id string: The provider-assigned unique ID for this managed resource.
keySize number: Size of the key in bits (for example 2048 for RSA, 256 for EC P-256).
kid string: RFC 7638 JWK thumbprint (base64url-encoded SHA-256 digest) of the public key.
updatedAt string: An ISO-8601 timestamp representation of entity update date.

algorithm str: The asymmetric algorithm of the vault key.
created_at str: An ISO-8601 timestamp representation of entity creation date.
id str: The provider-assigned unique ID for this managed resource.
key_size float: Size of the key in bits (for example 2048 for RSA, 256 for EC P-256).
kid str: RFC 7638 JWK thumbprint (base64url-encoded SHA-256 digest) of the public key.
updated_at str: An ISO-8601 timestamp representation of entity update date.

algorithm String: The asymmetric algorithm of the vault key.
createdAt String: An ISO-8601 timestamp representation of entity creation date.
id String: The provider-assigned unique ID for this managed resource.
keySize Number: Size of the key in bits (for example 2048 for RSA, 256 for EC P-256).
kid String: RFC 7638 JWK thumbprint (base64url-encoded SHA-256 digest) of the public key.
updatedAt String: An ISO-8601 timestamp representation of entity update date.

Look up Existing IdentityVaultKey Resource

Get an existing IdentityVaultKey resource’s state with the given name, ID, and optional extra properties used to qualify the lookup.

public static get(name: string, id: Input<ID>, state?: IdentityVaultKeyState, opts?: CustomResourceOptions): IdentityVaultKey

@staticmethod
def get(resource_name: str,
        id: str,
        opts: Optional[ResourceOptions] = None,
        algorithm: Optional[str] = None,
        created_at: Optional[str] = None,
        directory_id: Optional[str] = None,
        key_size: Optional[float] = None,
        kid: Optional[str] = None,
        name: Optional[str] = None,
        public_key: Optional[str] = None,
        updated_at: Optional[str] = None) -> IdentityVaultKey

func GetIdentityVaultKey(ctx *Context, name string, id IDInput, state *IdentityVaultKeyState, opts ...ResourceOption) (*IdentityVaultKey, error)

public static IdentityVaultKey Get(string name, Input<string> id, IdentityVaultKeyState? state, CustomResourceOptions? opts = null)

public static IdentityVaultKey get(String name, Output<String> id, IdentityVaultKeyState state, CustomResourceOptions options)

resources:  _:    type: konnect:IdentityVaultKey    get:      id: ${id}

import {
  to = konnect_identity_vault_key.example
  id = "${id}"
}

name: The unique name of the resulting resource.
id: The unique provider ID of the resource to lookup.
state: Any extra arguments used during the lookup.
opts: A bag of options that control this resource's behavior.

resource_name: The unique name of the resulting resource.
id: The unique provider ID of the resource to lookup.

name: The unique name of the resulting resource.
id: The unique provider ID of the resource to lookup.
state: Any extra arguments used during the lookup.
opts: A bag of options that control this resource's behavior.

name: The unique name of the resulting resource.
id: The unique provider ID of the resource to lookup.
state: Any extra arguments used during the lookup.
opts: A bag of options that control this resource's behavior.

name: The unique name of the resulting resource.
id: The unique provider ID of the resource to lookup.
state: Any extra arguments used during the lookup.
opts: A bag of options that control this resource's behavior.

The following state arguments are supported:

Algorithm string: The asymmetric algorithm of the vault key.
CreatedAt string: An ISO-8601 timestamp representation of entity creation date.
DirectoryId string: ID of the directory
KeySize double: Size of the key in bits (for example 2048 for RSA, 256 for EC P-256).
Kid string: RFC 7638 JWK thumbprint (base64url-encoded SHA-256 digest) of the public key.
Name string
PublicKey string: PEM-encoded RSA or EC public key used to encrypt token vault data. Keys must be at least 2048 bits (RSA) or 256 bits (EC). Requires replacement if changed.
UpdatedAt string: An ISO-8601 timestamp representation of entity update date.

Algorithm string: The asymmetric algorithm of the vault key.
CreatedAt string: An ISO-8601 timestamp representation of entity creation date.
DirectoryId string: ID of the directory
KeySize float64: Size of the key in bits (for example 2048 for RSA, 256 for EC P-256).
Kid string: RFC 7638 JWK thumbprint (base64url-encoded SHA-256 digest) of the public key.
Name string
PublicKey string: PEM-encoded RSA or EC public key used to encrypt token vault data. Keys must be at least 2048 bits (RSA) or 256 bits (EC). Requires replacement if changed.
UpdatedAt string: An ISO-8601 timestamp representation of entity update date.

algorithm string: The asymmetric algorithm of the vault key.
created_at string: An ISO-8601 timestamp representation of entity creation date.
directory_id string: ID of the directory
key_size number: Size of the key in bits (for example 2048 for RSA, 256 for EC P-256).
kid string: RFC 7638 JWK thumbprint (base64url-encoded SHA-256 digest) of the public key.
name string
public_key string: PEM-encoded RSA or EC public key used to encrypt token vault data. Keys must be at least 2048 bits (RSA) or 256 bits (EC). Requires replacement if changed.
updated_at string: An ISO-8601 timestamp representation of entity update date.

algorithm String: The asymmetric algorithm of the vault key.
createdAt String: An ISO-8601 timestamp representation of entity creation date.
directoryId String: ID of the directory
keySize Double: Size of the key in bits (for example 2048 for RSA, 256 for EC P-256).
kid String: RFC 7638 JWK thumbprint (base64url-encoded SHA-256 digest) of the public key.
name String
publicKey String: PEM-encoded RSA or EC public key used to encrypt token vault data. Keys must be at least 2048 bits (RSA) or 256 bits (EC). Requires replacement if changed.
updatedAt String: An ISO-8601 timestamp representation of entity update date.

algorithm string: The asymmetric algorithm of the vault key.
createdAt string: An ISO-8601 timestamp representation of entity creation date.
directoryId string: ID of the directory
keySize number: Size of the key in bits (for example 2048 for RSA, 256 for EC P-256).
kid string: RFC 7638 JWK thumbprint (base64url-encoded SHA-256 digest) of the public key.
name string
publicKey string: PEM-encoded RSA or EC public key used to encrypt token vault data. Keys must be at least 2048 bits (RSA) or 256 bits (EC). Requires replacement if changed.
updatedAt string: An ISO-8601 timestamp representation of entity update date.

algorithm str: The asymmetric algorithm of the vault key.
created_at str: An ISO-8601 timestamp representation of entity creation date.
directory_id str: ID of the directory
key_size float: Size of the key in bits (for example 2048 for RSA, 256 for EC P-256).
kid str: RFC 7638 JWK thumbprint (base64url-encoded SHA-256 digest) of the public key.
name str
public_key str: PEM-encoded RSA or EC public key used to encrypt token vault data. Keys must be at least 2048 bits (RSA) or 256 bits (EC). Requires replacement if changed.
updated_at str: An ISO-8601 timestamp representation of entity update date.

algorithm String: The asymmetric algorithm of the vault key.
createdAt String: An ISO-8601 timestamp representation of entity creation date.
directoryId String: ID of the directory
keySize Number: Size of the key in bits (for example 2048 for RSA, 256 for EC P-256).
kid String: RFC 7638 JWK thumbprint (base64url-encoded SHA-256 digest) of the public key.
name String
publicKey String: PEM-encoded RSA or EC public key used to encrypt token vault data. Keys must be at least 2048 bits (RSA) or 256 bits (EC). Requires replacement if changed.
updatedAt String: An ISO-8601 timestamp representation of entity update date.

Import

In Terraform v1.5.0 and later, the import block can be used with the id attribute, for example:

terraform

import {

to = konnect_identity_vault_key.my_konnect_identity_vault_key

id = jsonencode({

directory_id = "..."

id           = "..."

})

}

The pulumi import command can be used, for example:

$ pulumi import konnect:index/identityVaultKey:IdentityVaultKey my_konnect_identity_vault_key '{"directory_id": "...", "id": "..."}'

To learn more about importing existing cloud resources, see Importing resources.

Package Details

Repository: konnect kong/terraform-provider-konnect
License
Notes: This Pulumi package is based on the konnect Terraform Provider.

konnect

Viewing docs for konnect 3.28.0
published on Friday, Nov 6, 2026 by kong

Schema (JSON)

kong/terraform-provider-konnect

konnect.IdentityVaultKey

On this page

On this page

Example Usage

Create IdentityVaultKey Resource

Constructor syntax

Parameters

Constructor example

IdentityVaultKey Resource Properties

Inputs

Outputs

Look up Existing IdentityVaultKey Resource

Import

Package Details

On this page

On this page

Try Pulumi Cloud free.
Your team will thank you.

konnect.IdentityVaultKey

On this page

On this page

Example Usage

Create IdentityVaultKey Resource

Constructor syntax

Parameters

Constructor example

IdentityVaultKey Resource Properties

Inputs

Outputs

Look up Existing IdentityVaultKey Resource

Import

Package Details

On this page

On this page

Try Pulumi Cloud free.Your team will thank you.

Try Pulumi Cloud free.
Your team will thank you.