Skip to content

Latest commit

 

History

History
1392 lines (874 loc) · 60.7 KB

pkiSecretBackendCrlConfig.go.md

File metadata and controls

1392 lines (874 loc) · 60.7 KB

pkiSecretBackendCrlConfig Submodule

Constructs

PkiSecretBackendCrlConfig

Represents a {@link https://registry.terraform.io/providers/hashicorp/vault/4.2.0/docs/resources/pki_secret_backend_crl_config vault_pki_secret_backend_crl_config}.

Initializers

import "github.com/cdktf/cdktf-provider-vault-go/vault/v13/pkisecretbackendcrlconfig"

pkisecretbackendcrlconfig.NewPkiSecretBackendCrlConfig(scope Construct, id *string, config PkiSecretBackendCrlConfigConfig) PkiSecretBackendCrlConfig
Name Type Description
scope github.com/aws/constructs-go/constructs/v10.Construct The scope in which to define this construct.
id *string The scoped construct ID.
config PkiSecretBackendCrlConfigConfig No description.

scopeRequired
  • Type: github.com/aws/constructs-go/constructs/v10.Construct

The scope in which to define this construct.


idRequired
  • Type: *string

The scoped construct ID.

Must be unique amongst siblings in the same scope


configRequired

Methods

Name Description
ToString Returns a string representation of this construct.
AddOverride No description.
OverrideLogicalId Overrides the auto-generated logical ID with a specific ID.
ResetOverrideLogicalId Resets a previously passed logical Id to use the auto-generated logical id again.
ToHclTerraform No description.
ToMetadata No description.
ToTerraform Adds this resource to the terraform JSON output.
AddMoveTarget Adds a user defined moveTarget string to this resource to be later used in .moveTo(moveTarget) to resolve the location of the move.
GetAnyMapAttribute No description.
GetBooleanAttribute No description.
GetBooleanMapAttribute No description.
GetListAttribute No description.
GetNumberAttribute No description.
GetNumberListAttribute No description.
GetNumberMapAttribute No description.
GetStringAttribute No description.
GetStringMapAttribute No description.
HasResourceMove No description.
ImportFrom No description.
InterpolationForAttribute No description.
MoveFromId Move the resource corresponding to "id" to this resource.
MoveTo Moves this resource to the target resource given by moveTarget.
MoveToId Moves this resource to the resource corresponding to "id".
ResetAutoRebuild No description.
ResetAutoRebuildGracePeriod No description.
ResetCrossClusterRevocation No description.
ResetDeltaRebuildInterval No description.
ResetDisable No description.
ResetEnableDelta No description.
ResetExpiry No description.
ResetId No description.
ResetNamespace No description.
ResetOcspDisable No description.
ResetOcspExpiry No description.
ResetUnifiedCrl No description.
ResetUnifiedCrlOnExistingPaths No description.

ToString
func ToString() *string

Returns a string representation of this construct.

AddOverride
func AddOverride(path *string, value interface{})
pathRequired
  • Type: *string

valueRequired
  • Type: interface{}

OverrideLogicalId
func OverrideLogicalId(newLogicalId *string)

Overrides the auto-generated logical ID with a specific ID.

newLogicalIdRequired
  • Type: *string

The new logical ID to use for this stack element.


ResetOverrideLogicalId
func ResetOverrideLogicalId()

Resets a previously passed logical Id to use the auto-generated logical id again.

ToHclTerraform
func ToHclTerraform() interface{}
ToMetadata
func ToMetadata() interface{}
ToTerraform
func ToTerraform() interface{}

Adds this resource to the terraform JSON output.

AddMoveTarget
func AddMoveTarget(moveTarget *string)

Adds a user defined moveTarget string to this resource to be later used in .moveTo(moveTarget) to resolve the location of the move.

moveTargetRequired
  • Type: *string

The string move target that will correspond to this resource.


GetAnyMapAttribute
func GetAnyMapAttribute(terraformAttribute *string) *map[string]interface{}
terraformAttributeRequired
  • Type: *string

GetBooleanAttribute
func GetBooleanAttribute(terraformAttribute *string) IResolvable
terraformAttributeRequired
  • Type: *string

GetBooleanMapAttribute
func GetBooleanMapAttribute(terraformAttribute *string) *map[string]*bool
terraformAttributeRequired
  • Type: *string

GetListAttribute
func GetListAttribute(terraformAttribute *string) *[]*string
terraformAttributeRequired
  • Type: *string

GetNumberAttribute
func GetNumberAttribute(terraformAttribute *string) *f64
terraformAttributeRequired
  • Type: *string

GetNumberListAttribute
func GetNumberListAttribute(terraformAttribute *string) *[]*f64
terraformAttributeRequired
  • Type: *string

GetNumberMapAttribute
func GetNumberMapAttribute(terraformAttribute *string) *map[string]*f64
terraformAttributeRequired
  • Type: *string

GetStringAttribute
func GetStringAttribute(terraformAttribute *string) *string
terraformAttributeRequired
  • Type: *string

GetStringMapAttribute
func GetStringMapAttribute(terraformAttribute *string) *map[string]*string
terraformAttributeRequired
  • Type: *string

HasResourceMove
func HasResourceMove() interface{}
ImportFrom
func ImportFrom(id *string, provider TerraformProvider)
idRequired
  • Type: *string

providerOptional
  • Type: github.com/hashicorp/terraform-cdk-go/cdktf.TerraformProvider

InterpolationForAttribute
func InterpolationForAttribute(terraformAttribute *string) IResolvable
terraformAttributeRequired
  • Type: *string

MoveFromId
func MoveFromId(id *string)

Move the resource corresponding to "id" to this resource.

Note that the resource being moved from must be marked as moved using it's instance function.

idRequired
  • Type: *string

Full id of resource being moved from, e.g. "aws_s3_bucket.example".


MoveTo
func MoveTo(moveTarget *string, index interface{})

Moves this resource to the target resource given by moveTarget.

moveTargetRequired
  • Type: *string

The previously set user defined string set by .addMoveTarget() corresponding to the resource to move to.


indexOptional
  • Type: interface{}

Optional The index corresponding to the key the resource is to appear in the foreach of a resource to move to.


MoveToId
func MoveToId(id *string)

Moves this resource to the resource corresponding to "id".

idRequired
  • Type: *string

Full id of resource to move to, e.g. "aws_s3_bucket.example".


ResetAutoRebuild
func ResetAutoRebuild()
ResetAutoRebuildGracePeriod
func ResetAutoRebuildGracePeriod()
ResetCrossClusterRevocation
func ResetCrossClusterRevocation()
ResetDeltaRebuildInterval
func ResetDeltaRebuildInterval()
ResetDisable
func ResetDisable()
ResetEnableDelta
func ResetEnableDelta()
ResetExpiry
func ResetExpiry()
ResetId
func ResetId()
ResetNamespace
func ResetNamespace()
ResetOcspDisable
func ResetOcspDisable()
ResetOcspExpiry
func ResetOcspExpiry()
ResetUnifiedCrl
func ResetUnifiedCrl()
ResetUnifiedCrlOnExistingPaths
func ResetUnifiedCrlOnExistingPaths()

Static Functions

Name Description
IsConstruct Checks if x is a construct.
IsTerraformElement No description.
IsTerraformResource No description.
GenerateConfigForImport Generates CDKTF code for importing a PkiSecretBackendCrlConfig resource upon running "cdktf plan ".

IsConstruct
import "github.com/cdktf/cdktf-provider-vault-go/vault/v13/pkisecretbackendcrlconfig"

pkisecretbackendcrlconfig.PkiSecretBackendCrlConfig_IsConstruct(x interface{}) *bool

Checks if x is a construct.

Use this method instead of instanceof to properly detect Construct instances, even when the construct library is symlinked.

Explanation: in JavaScript, multiple copies of the constructs library on disk are seen as independent, completely different libraries. As a consequence, the class Construct in each copy of the constructs library is seen as a different class, and an instance of one class will not test as instanceof the other class. npm install will not create installations like this, but users may manually symlink construct libraries together or use a monorepo tool: in those cases, multiple copies of the constructs library can be accidentally installed, and instanceof will behave unpredictably. It is safest to avoid using instanceof, and using this type-testing method instead.

xRequired
  • Type: interface{}

Any object.


IsTerraformElement
import "github.com/cdktf/cdktf-provider-vault-go/vault/v13/pkisecretbackendcrlconfig"

pkisecretbackendcrlconfig.PkiSecretBackendCrlConfig_IsTerraformElement(x interface{}) *bool
xRequired
  • Type: interface{}

IsTerraformResource
import "github.com/cdktf/cdktf-provider-vault-go/vault/v13/pkisecretbackendcrlconfig"

pkisecretbackendcrlconfig.PkiSecretBackendCrlConfig_IsTerraformResource(x interface{}) *bool
xRequired
  • Type: interface{}

GenerateConfigForImport
import "github.com/cdktf/cdktf-provider-vault-go/vault/v13/pkisecretbackendcrlconfig"

pkisecretbackendcrlconfig.PkiSecretBackendCrlConfig_GenerateConfigForImport(scope Construct, importToId *string, importFromId *string, provider TerraformProvider) ImportableResource

Generates CDKTF code for importing a PkiSecretBackendCrlConfig resource upon running "cdktf plan ".

scopeRequired
  • Type: github.com/aws/constructs-go/constructs/v10.Construct

The scope in which to define this construct.


importToIdRequired
  • Type: *string

The construct id used in the generated config for the PkiSecretBackendCrlConfig to import.


importFromIdRequired
  • Type: *string

The id of the existing PkiSecretBackendCrlConfig that should be imported.

Refer to the {@link https://registry.terraform.io/providers/hashicorp/vault/4.2.0/docs/resources/pki_secret_backend_crl_config#import import section} in the documentation of this resource for the id to use


providerOptional
  • Type: github.com/hashicorp/terraform-cdk-go/cdktf.TerraformProvider

? Optional instance of the provider where the PkiSecretBackendCrlConfig to import is found.


Properties

Name Type Description
Node github.com/aws/constructs-go/constructs/v10.Node The tree node.
CdktfStack github.com/hashicorp/terraform-cdk-go/cdktf.TerraformStack No description.
Fqn *string No description.
FriendlyUniqueId *string No description.
TerraformMetaArguments *map[string]interface{} No description.
TerraformResourceType *string No description.
TerraformGeneratorMetadata github.com/hashicorp/terraform-cdk-go/cdktf.TerraformProviderGeneratorMetadata No description.
Connection interface{} No description.
Count interface{} No description.
DependsOn *[]*string No description.
ForEach github.com/hashicorp/terraform-cdk-go/cdktf.ITerraformIterator No description.
Lifecycle github.com/hashicorp/terraform-cdk-go/cdktf.TerraformResourceLifecycle No description.
Provider github.com/hashicorp/terraform-cdk-go/cdktf.TerraformProvider No description.
Provisioners *[]interface{} No description.
AutoRebuildGracePeriodInput *string No description.
AutoRebuildInput interface{} No description.
BackendInput *string No description.
CrossClusterRevocationInput interface{} No description.
DeltaRebuildIntervalInput *string No description.
DisableInput interface{} No description.
EnableDeltaInput interface{} No description.
ExpiryInput *string No description.
IdInput *string No description.
NamespaceInput *string No description.
OcspDisableInput interface{} No description.
OcspExpiryInput *string No description.
UnifiedCrlInput interface{} No description.
UnifiedCrlOnExistingPathsInput interface{} No description.
AutoRebuild interface{} No description.
AutoRebuildGracePeriod *string No description.
Backend *string No description.
CrossClusterRevocation interface{} No description.
DeltaRebuildInterval *string No description.
Disable interface{} No description.
EnableDelta interface{} No description.
Expiry *string No description.
Id *string No description.
Namespace *string No description.
OcspDisable interface{} No description.
OcspExpiry *string No description.
UnifiedCrl interface{} No description.
UnifiedCrlOnExistingPaths interface{} No description.

NodeRequired
func Node() Node
  • Type: github.com/aws/constructs-go/constructs/v10.Node

The tree node.


CdktfStackRequired
func CdktfStack() TerraformStack
  • Type: github.com/hashicorp/terraform-cdk-go/cdktf.TerraformStack

FqnRequired
func Fqn() *string
  • Type: *string

FriendlyUniqueIdRequired
func FriendlyUniqueId() *string
  • Type: *string

TerraformMetaArgumentsRequired
func TerraformMetaArguments() *map[string]interface{}
  • Type: *map[string]interface{}

TerraformResourceTypeRequired
func TerraformResourceType() *string
  • Type: *string

TerraformGeneratorMetadataOptional
func TerraformGeneratorMetadata() TerraformProviderGeneratorMetadata
  • Type: github.com/hashicorp/terraform-cdk-go/cdktf.TerraformProviderGeneratorMetadata

ConnectionOptional
func Connection() interface{}
  • Type: interface{}

CountOptional
func Count() interface{}
  • Type: interface{}

DependsOnOptional
func DependsOn() *[]*string
  • Type: *[]*string

ForEachOptional
func ForEach() ITerraformIterator
  • Type: github.com/hashicorp/terraform-cdk-go/cdktf.ITerraformIterator

LifecycleOptional
func Lifecycle() TerraformResourceLifecycle
  • Type: github.com/hashicorp/terraform-cdk-go/cdktf.TerraformResourceLifecycle

ProviderOptional
func Provider() TerraformProvider
  • Type: github.com/hashicorp/terraform-cdk-go/cdktf.TerraformProvider

ProvisionersOptional
func Provisioners() *[]interface{}
  • Type: *[]interface{}

AutoRebuildGracePeriodInputOptional
func AutoRebuildGracePeriodInput() *string
  • Type: *string

AutoRebuildInputOptional
func AutoRebuildInput() interface{}
  • Type: interface{}

BackendInputOptional
func BackendInput() *string
  • Type: *string

CrossClusterRevocationInputOptional
func CrossClusterRevocationInput() interface{}
  • Type: interface{}

DeltaRebuildIntervalInputOptional
func DeltaRebuildIntervalInput() *string
  • Type: *string

DisableInputOptional
func DisableInput() interface{}
  • Type: interface{}

EnableDeltaInputOptional
func EnableDeltaInput() interface{}
  • Type: interface{}

ExpiryInputOptional
func ExpiryInput() *string
  • Type: *string

IdInputOptional
func IdInput() *string
  • Type: *string

NamespaceInputOptional
func NamespaceInput() *string
  • Type: *string

OcspDisableInputOptional
func OcspDisableInput() interface{}
  • Type: interface{}

OcspExpiryInputOptional
func OcspExpiryInput() *string
  • Type: *string

UnifiedCrlInputOptional
func UnifiedCrlInput() interface{}
  • Type: interface{}

UnifiedCrlOnExistingPathsInputOptional
func UnifiedCrlOnExistingPathsInput() interface{}
  • Type: interface{}

AutoRebuildRequired
func AutoRebuild() interface{}
  • Type: interface{}

AutoRebuildGracePeriodRequired
func AutoRebuildGracePeriod() *string
  • Type: *string

BackendRequired
func Backend() *string
  • Type: *string

CrossClusterRevocationRequired
func CrossClusterRevocation() interface{}
  • Type: interface{}

DeltaRebuildIntervalRequired
func DeltaRebuildInterval() *string
  • Type: *string

DisableRequired
func Disable() interface{}
  • Type: interface{}

EnableDeltaRequired
func EnableDelta() interface{}
  • Type: interface{}

ExpiryRequired
func Expiry() *string
  • Type: *string

IdRequired
func Id() *string
  • Type: *string

NamespaceRequired
func Namespace() *string
  • Type: *string

OcspDisableRequired
func OcspDisable() interface{}
  • Type: interface{}

OcspExpiryRequired
func OcspExpiry() *string
  • Type: *string

UnifiedCrlRequired
func UnifiedCrl() interface{}
  • Type: interface{}

UnifiedCrlOnExistingPathsRequired
func UnifiedCrlOnExistingPaths() interface{}
  • Type: interface{}

Constants

Name Type Description
TfResourceType *string No description.

TfResourceTypeRequired
func TfResourceType() *string
  • Type: *string

Structs

PkiSecretBackendCrlConfigConfig

Initializer

import "github.com/cdktf/cdktf-provider-vault-go/vault/v13/pkisecretbackendcrlconfig"

&pkisecretbackendcrlconfig.PkiSecretBackendCrlConfigConfig {
	Connection: interface{},
	Count: interface{},
	DependsOn: *[]github.com/hashicorp/terraform-cdk-go/cdktf.ITerraformDependable,
	ForEach: github.com/hashicorp/terraform-cdk-go/cdktf.ITerraformIterator,
	Lifecycle: github.com/hashicorp/terraform-cdk-go/cdktf.TerraformResourceLifecycle,
	Provider: github.com/hashicorp/terraform-cdk-go/cdktf.TerraformProvider,
	Provisioners: *[]interface{},
	Backend: *string,
	AutoRebuild: interface{},
	AutoRebuildGracePeriod: *string,
	CrossClusterRevocation: interface{},
	DeltaRebuildInterval: *string,
	Disable: interface{},
	EnableDelta: interface{},
	Expiry: *string,
	Id: *string,
	Namespace: *string,
	OcspDisable: interface{},
	OcspExpiry: *string,
	UnifiedCrl: interface{},
	UnifiedCrlOnExistingPaths: interface{},
}

Properties

Name Type Description
Connection interface{} No description.
Count interface{} No description.
DependsOn *[]github.com/hashicorp/terraform-cdk-go/cdktf.ITerraformDependable No description.
ForEach github.com/hashicorp/terraform-cdk-go/cdktf.ITerraformIterator No description.
Lifecycle github.com/hashicorp/terraform-cdk-go/cdktf.TerraformResourceLifecycle No description.
Provider github.com/hashicorp/terraform-cdk-go/cdktf.TerraformProvider No description.
Provisioners *[]interface{} No description.
Backend *string The path of the PKI secret backend the resource belongs to.
AutoRebuild interface{} Enables or disables periodic rebuilding of the CRL upon expiry.
AutoRebuildGracePeriod *string Grace period before CRL expiry to attempt rebuild of CRL.
CrossClusterRevocation interface{} Enable cross-cluster revocation request queues.
DeltaRebuildInterval *string Interval to check for new revocations on, to regenerate the delta CRL.
Disable interface{} Disables or enables CRL building.
EnableDelta interface{} Enables or disables building of delta CRLs with up-to-date revocation information, augmenting the last complete CRL.
Expiry *string Specifies the time until expiration.
Id *string Docs at Terraform Registry: {@link https://registry.terraform.io/providers/hashicorp/vault/4.2.0/docs/resources/pki_secret_backend_crl_config#id PkiSecretBackendCrlConfig#id}.
Namespace *string Target namespace. (requires Enterprise).
OcspDisable interface{} Disables or enables the OCSP responder in Vault.
OcspExpiry *string The amount of time an OCSP response can be cached for, useful for OCSP stapling refresh durations.
UnifiedCrl interface{} Enables unified CRL and OCSP building.
UnifiedCrlOnExistingPaths interface{} Enables serving the unified CRL and OCSP on the existing, previously cluster-local paths.

ConnectionOptional
Connection interface{}
  • Type: interface{}

CountOptional
Count interface{}
  • Type: interface{}

DependsOnOptional
DependsOn *[]ITerraformDependable
  • Type: *[]github.com/hashicorp/terraform-cdk-go/cdktf.ITerraformDependable

ForEachOptional
ForEach ITerraformIterator
  • Type: github.com/hashicorp/terraform-cdk-go/cdktf.ITerraformIterator

LifecycleOptional
Lifecycle TerraformResourceLifecycle
  • Type: github.com/hashicorp/terraform-cdk-go/cdktf.TerraformResourceLifecycle

ProviderOptional
Provider TerraformProvider
  • Type: github.com/hashicorp/terraform-cdk-go/cdktf.TerraformProvider

ProvisionersOptional
Provisioners *[]interface{}
  • Type: *[]interface{}

BackendRequired
Backend *string
  • Type: *string

The path of the PKI secret backend the resource belongs to.

Docs at Terraform Registry: {@link https://registry.terraform.io/providers/hashicorp/vault/4.2.0/docs/resources/pki_secret_backend_crl_config#backend PkiSecretBackendCrlConfig#backend}


AutoRebuildOptional
AutoRebuild interface{}
  • Type: interface{}

Enables or disables periodic rebuilding of the CRL upon expiry.

Docs at Terraform Registry: {@link https://registry.terraform.io/providers/hashicorp/vault/4.2.0/docs/resources/pki_secret_backend_crl_config#auto_rebuild PkiSecretBackendCrlConfig#auto_rebuild}


AutoRebuildGracePeriodOptional
AutoRebuildGracePeriod *string
  • Type: *string

Grace period before CRL expiry to attempt rebuild of CRL.

Docs at Terraform Registry: {@link https://registry.terraform.io/providers/hashicorp/vault/4.2.0/docs/resources/pki_secret_backend_crl_config#auto_rebuild_grace_period PkiSecretBackendCrlConfig#auto_rebuild_grace_period}


CrossClusterRevocationOptional
CrossClusterRevocation interface{}
  • Type: interface{}

Enable cross-cluster revocation request queues.

Docs at Terraform Registry: {@link https://registry.terraform.io/providers/hashicorp/vault/4.2.0/docs/resources/pki_secret_backend_crl_config#cross_cluster_revocation PkiSecretBackendCrlConfig#cross_cluster_revocation}


DeltaRebuildIntervalOptional
DeltaRebuildInterval *string
  • Type: *string

Interval to check for new revocations on, to regenerate the delta CRL.

Docs at Terraform Registry: {@link https://registry.terraform.io/providers/hashicorp/vault/4.2.0/docs/resources/pki_secret_backend_crl_config#delta_rebuild_interval PkiSecretBackendCrlConfig#delta_rebuild_interval}


DisableOptional
Disable interface{}
  • Type: interface{}

Disables or enables CRL building.

Docs at Terraform Registry: {@link https://registry.terraform.io/providers/hashicorp/vault/4.2.0/docs/resources/pki_secret_backend_crl_config#disable PkiSecretBackendCrlConfig#disable}


EnableDeltaOptional
EnableDelta interface{}
  • Type: interface{}

Enables or disables building of delta CRLs with up-to-date revocation information, augmenting the last complete CRL.

Docs at Terraform Registry: {@link https://registry.terraform.io/providers/hashicorp/vault/4.2.0/docs/resources/pki_secret_backend_crl_config#enable_delta PkiSecretBackendCrlConfig#enable_delta}


ExpiryOptional
Expiry *string
  • Type: *string

Specifies the time until expiration.

Docs at Terraform Registry: {@link https://registry.terraform.io/providers/hashicorp/vault/4.2.0/docs/resources/pki_secret_backend_crl_config#expiry PkiSecretBackendCrlConfig#expiry}


IdOptional
Id *string
  • Type: *string

Docs at Terraform Registry: {@link https://registry.terraform.io/providers/hashicorp/vault/4.2.0/docs/resources/pki_secret_backend_crl_config#id PkiSecretBackendCrlConfig#id}.

Please be aware that the id field is automatically added to all resources in Terraform providers using a Terraform provider SDK version below 2. If you experience problems setting this value it might not be settable. Please take a look at the provider documentation to ensure it should be settable.


NamespaceOptional
Namespace *string
  • Type: *string

Target namespace. (requires Enterprise).

Docs at Terraform Registry: {@link https://registry.terraform.io/providers/hashicorp/vault/4.2.0/docs/resources/pki_secret_backend_crl_config#namespace PkiSecretBackendCrlConfig#namespace}


OcspDisableOptional
OcspDisable interface{}
  • Type: interface{}

Disables or enables the OCSP responder in Vault.

Docs at Terraform Registry: {@link https://registry.terraform.io/providers/hashicorp/vault/4.2.0/docs/resources/pki_secret_backend_crl_config#ocsp_disable PkiSecretBackendCrlConfig#ocsp_disable}


OcspExpiryOptional
OcspExpiry *string
  • Type: *string

The amount of time an OCSP response can be cached for, useful for OCSP stapling refresh durations.

Docs at Terraform Registry: {@link https://registry.terraform.io/providers/hashicorp/vault/4.2.0/docs/resources/pki_secret_backend_crl_config#ocsp_expiry PkiSecretBackendCrlConfig#ocsp_expiry}


UnifiedCrlOptional
UnifiedCrl interface{}
  • Type: interface{}

Enables unified CRL and OCSP building.

Docs at Terraform Registry: {@link https://registry.terraform.io/providers/hashicorp/vault/4.2.0/docs/resources/pki_secret_backend_crl_config#unified_crl PkiSecretBackendCrlConfig#unified_crl}


UnifiedCrlOnExistingPathsOptional
UnifiedCrlOnExistingPaths interface{}
  • Type: interface{}

Enables serving the unified CRL and OCSP on the existing, previously cluster-local paths.

Docs at Terraform Registry: {@link https://registry.terraform.io/providers/hashicorp/vault/4.2.0/docs/resources/pki_secret_backend_crl_config#unified_crl_on_existing_paths PkiSecretBackendCrlConfig#unified_crl_on_existing_paths}