kubernetesSecretBackend.csharp.md

kubernetesSecretBackend Submodule

Constructs

KubernetesSecretBackend

Represents a {@link https://registry.terraform.io/providers/hashicorp/vault/4.2.0/docs/resources/kubernetes_secret_backend vault_kubernetes_secret_backend}.

Initializers

using HashiCorp.Cdktf.Providers.Vault;

new KubernetesSecretBackend(Construct Scope, string Id, KubernetesSecretBackendConfig Config);

Name	Type	Description
Scope	Constructs.Construct	The scope in which to define this construct.
Id	string	The scoped construct ID.
Config	KubernetesSecretBackendConfig	No description.

---

Scope^Required

• Type: Constructs.Construct

The scope in which to define this construct.

---

Id^Required

• Type: string

The scoped construct ID.

Must be unique amongst siblings in the same scope

---

Config^Required

• Type: KubernetesSecretBackendConfig

---

Methods

Name	Description
ToString	Returns a string representation of this construct.
AddOverride	No description.
OverrideLogicalId	Overrides the auto-generated logical ID with a specific ID.
ResetOverrideLogicalId	Resets a previously passed logical Id to use the auto-generated logical id again.
ToHclTerraform	No description.
ToMetadata	No description.
ToTerraform	Adds this resource to the terraform JSON output.
AddMoveTarget	Adds a user defined moveTarget string to this resource to be later used in .moveTo(moveTarget) to resolve the location of the move.
GetAnyMapAttribute	No description.
GetBooleanAttribute	No description.
GetBooleanMapAttribute	No description.
GetListAttribute	No description.
GetNumberAttribute	No description.
GetNumberListAttribute	No description.
GetNumberMapAttribute	No description.
GetStringAttribute	No description.
GetStringMapAttribute	No description.
HasResourceMove	No description.
ImportFrom	No description.
InterpolationForAttribute	No description.
MoveFromId	Move the resource corresponding to "id" to this resource.
MoveTo	Moves this resource to the target resource given by moveTarget.
MoveToId	Moves this resource to the resource corresponding to "id".
ResetAllowedManagedKeys	No description.
ResetAuditNonHmacRequestKeys	No description.
ResetAuditNonHmacResponseKeys	No description.
ResetDefaultLeaseTtlSeconds	No description.
ResetDescription	No description.
ResetDisableLocalCaJwt	No description.
ResetExternalEntropyAccess	No description.
ResetId	No description.
ResetKubernetesCaCert	No description.
ResetKubernetesHost	No description.
ResetLocal	No description.
ResetMaxLeaseTtlSeconds	No description.
ResetNamespace	No description.
ResetOptions	No description.
ResetSealWrap	No description.
ResetServiceAccountJwt	No description.

---

ToString

private string ToString()

Returns a string representation of this construct.

AddOverride

private void AddOverride(string Path, object Value)

Path^Required

• Type: string

---

Value^Required

• Type: object

---

OverrideLogicalId

private void OverrideLogicalId(string NewLogicalId)

Overrides the auto-generated logical ID with a specific ID.

NewLogicalId^Required

• Type: string

The new logical ID to use for this stack element.

---

ResetOverrideLogicalId

private void ResetOverrideLogicalId()

Resets a previously passed logical Id to use the auto-generated logical id again.

ToHclTerraform

private object ToHclTerraform()

ToMetadata

private object ToMetadata()

ToTerraform

private object ToTerraform()

Adds this resource to the terraform JSON output.

AddMoveTarget

private void AddMoveTarget(string MoveTarget)

Adds a user defined moveTarget string to this resource to be later used in .moveTo(moveTarget) to resolve the location of the move.

MoveTarget^Required

• Type: string

The string move target that will correspond to this resource.

---

GetAnyMapAttribute

private System.Collections.Generic.IDictionary<string, object> GetAnyMapAttribute(string TerraformAttribute)

TerraformAttribute^Required

• Type: string

---

GetBooleanAttribute

private IResolvable GetBooleanAttribute(string TerraformAttribute)

TerraformAttribute^Required

• Type: string

---

GetBooleanMapAttribute

private System.Collections.Generic.IDictionary<string, bool> GetBooleanMapAttribute(string TerraformAttribute)

TerraformAttribute^Required

• Type: string

---

GetListAttribute

private string[] GetListAttribute(string TerraformAttribute)

TerraformAttribute^Required

• Type: string

---

GetNumberAttribute

private double GetNumberAttribute(string TerraformAttribute)

TerraformAttribute^Required

• Type: string

---

GetNumberListAttribute

private double[] GetNumberListAttribute(string TerraformAttribute)

TerraformAttribute^Required

• Type: string

---

GetNumberMapAttribute

private System.Collections.Generic.IDictionary<string, double> GetNumberMapAttribute(string TerraformAttribute)

TerraformAttribute^Required

• Type: string

---

GetStringAttribute

private string GetStringAttribute(string TerraformAttribute)

TerraformAttribute^Required

• Type: string

---

GetStringMapAttribute

private System.Collections.Generic.IDictionary<string, string> GetStringMapAttribute(string TerraformAttribute)

TerraformAttribute^Required

• Type: string

---

HasResourceMove

private object HasResourceMove()

ImportFrom

private void ImportFrom(string Id, TerraformProvider Provider = null)

Id^Required

• Type: string

---

Provider^Optional

• Type: HashiCorp.Cdktf.TerraformProvider

---

InterpolationForAttribute

private IResolvable InterpolationForAttribute(string TerraformAttribute)

TerraformAttribute^Required

• Type: string

---

MoveFromId

private void MoveFromId(string Id)

Move the resource corresponding to "id" to this resource.

Note that the resource being moved from must be marked as moved using it's instance function.

Id^Required

• Type: string

Full id of resource being moved from, e.g. "aws_s3_bucket.example".

---

MoveTo

private void MoveTo(string MoveTarget, object Index = null)

Moves this resource to the target resource given by moveTarget.

MoveTarget^Required

• Type: string

The previously set user defined string set by .addMoveTarget() corresponding to the resource to move to.

---

Index^Optional

• Type: object

Optional The index corresponding to the key the resource is to appear in the foreach of a resource to move to.

---

MoveToId

private void MoveToId(string Id)

Moves this resource to the resource corresponding to "id".

Id^Required

• Type: string

Full id of resource to move to, e.g. "aws_s3_bucket.example".

---

ResetAllowedManagedKeys

private void ResetAllowedManagedKeys()

ResetAuditNonHmacRequestKeys

private void ResetAuditNonHmacRequestKeys()

ResetAuditNonHmacResponseKeys

private void ResetAuditNonHmacResponseKeys()

ResetDefaultLeaseTtlSeconds

private void ResetDefaultLeaseTtlSeconds()

ResetDescription

private void ResetDescription()

ResetDisableLocalCaJwt

private void ResetDisableLocalCaJwt()

ResetExternalEntropyAccess

private void ResetExternalEntropyAccess()

ResetId

private void ResetId()

ResetKubernetesCaCert

private void ResetKubernetesCaCert()

ResetKubernetesHost

private void ResetKubernetesHost()

ResetLocal

private void ResetLocal()

ResetMaxLeaseTtlSeconds

private void ResetMaxLeaseTtlSeconds()

ResetNamespace

private void ResetNamespace()

ResetOptions

private void ResetOptions()

ResetSealWrap

private void ResetSealWrap()

ResetServiceAccountJwt

private void ResetServiceAccountJwt()

Static Functions

Name	Description
IsConstruct	Checks if x is a construct.
IsTerraformElement	No description.
IsTerraformResource	No description.
GenerateConfigForImport	Generates CDKTF code for importing a KubernetesSecretBackend resource upon running "cdktf plan ".

---

IsConstruct

using HashiCorp.Cdktf.Providers.Vault;

KubernetesSecretBackend.IsConstruct(object X);

Checks if x is a construct.

Use this method instead of instanceof to properly detect Construct instances, even when the construct library is symlinked.

Explanation: in JavaScript, multiple copies of the constructs library on disk are seen as independent, completely different libraries. As a consequence, the class Construct in each copy of the constructs library is seen as a different class, and an instance of one class will not test as instanceof the other class. npm install will not create installations like this, but users may manually symlink construct libraries together or use a monorepo tool: in those cases, multiple copies of the constructs library can be accidentally installed, and instanceof will behave unpredictably. It is safest to avoid using instanceof, and using this type-testing method instead.

X^Required

• Type: object

Any object.

---

IsTerraformElement

using HashiCorp.Cdktf.Providers.Vault;

KubernetesSecretBackend.IsTerraformElement(object X);

X^Required

• Type: object

---

IsTerraformResource

using HashiCorp.Cdktf.Providers.Vault;

KubernetesSecretBackend.IsTerraformResource(object X);

X^Required

• Type: object

---

GenerateConfigForImport

using HashiCorp.Cdktf.Providers.Vault;

KubernetesSecretBackend.GenerateConfigForImport(Construct Scope, string ImportToId, string ImportFromId, TerraformProvider Provider = null);

Generates CDKTF code for importing a KubernetesSecretBackend resource upon running "cdktf plan ".

Scope^Required

• Type: Constructs.Construct

The scope in which to define this construct.

---

ImportToId^Required

• Type: string

The construct id used in the generated config for the KubernetesSecretBackend to import.

---

ImportFromId^Required

• Type: string

The id of the existing KubernetesSecretBackend that should be imported.

Refer to the {@link https://registry.terraform.io/providers/hashicorp/vault/4.2.0/docs/resources/kubernetes_secret_backend#import import section} in the documentation of this resource for the id to use

---

Provider^Optional

• Type: HashiCorp.Cdktf.TerraformProvider

? Optional instance of the provider where the KubernetesSecretBackend to import is found.

---

Properties

Name	Type	Description
Node	Constructs.Node	The tree node.
CdktfStack	HashiCorp.Cdktf.TerraformStack	No description.
Fqn	string	No description.
FriendlyUniqueId	string	No description.
TerraformMetaArguments	System.Collections.Generic.IDictionary<string, object>	No description.
TerraformResourceType	string	No description.
TerraformGeneratorMetadata	HashiCorp.Cdktf.TerraformProviderGeneratorMetadata	No description.
Connection	object	No description.
Count	object	No description.
DependsOn	string[]	No description.
ForEach	HashiCorp.Cdktf.ITerraformIterator	No description.
Lifecycle	HashiCorp.Cdktf.TerraformResourceLifecycle	No description.
Provider	HashiCorp.Cdktf.TerraformProvider	No description.
Provisioners	object[]	No description.
Accessor	string	No description.
AllowedManagedKeysInput	string[]	No description.
AuditNonHmacRequestKeysInput	string[]	No description.
AuditNonHmacResponseKeysInput	string[]	No description.
DefaultLeaseTtlSecondsInput	double	No description.
DescriptionInput	string	No description.
DisableLocalCaJwtInput	object	No description.
ExternalEntropyAccessInput	object	No description.
IdInput	string	No description.
KubernetesCaCertInput	string	No description.
KubernetesHostInput	string	No description.
LocalInput	object	No description.
MaxLeaseTtlSecondsInput	double	No description.
NamespaceInput	string	No description.
OptionsInput	System.Collections.Generic.IDictionary<string, string>	No description.
PathInput	string	No description.
SealWrapInput	object	No description.
ServiceAccountJwtInput	string	No description.
AllowedManagedKeys	string[]	No description.
AuditNonHmacRequestKeys	string[]	No description.
AuditNonHmacResponseKeys	string[]	No description.
DefaultLeaseTtlSeconds	double	No description.
Description	string	No description.
DisableLocalCaJwt	object	No description.
ExternalEntropyAccess	object	No description.
Id	string	No description.
KubernetesCaCert	string	No description.
KubernetesHost	string	No description.
Local	object	No description.
MaxLeaseTtlSeconds	double	No description.
Namespace	string	No description.
Options	System.Collections.Generic.IDictionary<string, string>	No description.
Path	string	No description.
SealWrap	object	No description.
ServiceAccountJwt	string	No description.

---

Node^Required

public Node Node { get; }

• Type: Constructs.Node

The tree node.

---

CdktfStack^Required

public TerraformStack CdktfStack { get; }

• Type: HashiCorp.Cdktf.TerraformStack

---

Fqn^Required

public string Fqn { get; }

• Type: string

---

FriendlyUniqueId^Required

public string FriendlyUniqueId { get; }

• Type: string

---

TerraformMetaArguments^Required

public System.Collections.Generic.IDictionary<string, object> TerraformMetaArguments { get; }

• Type: System.Collections.Generic.IDictionary<string, object>

---

TerraformResourceType^Required

public string TerraformResourceType { get; }

• Type: string

---

TerraformGeneratorMetadata^Optional

public TerraformProviderGeneratorMetadata TerraformGeneratorMetadata { get; }

• Type: HashiCorp.Cdktf.TerraformProviderGeneratorMetadata

---

Connection^Optional

public object Connection { get; }

• Type: object

---

Count^Optional

public object Count { get; }

• Type: object

---

DependsOn^Optional

public string[] DependsOn { get; }

• Type: string[]

---

ForEach^Optional

public ITerraformIterator ForEach { get; }

• Type: HashiCorp.Cdktf.ITerraformIterator

---

Lifecycle^Optional

public TerraformResourceLifecycle Lifecycle { get; }

• Type: HashiCorp.Cdktf.TerraformResourceLifecycle

---

Provider^Optional

public TerraformProvider Provider { get; }

• Type: HashiCorp.Cdktf.TerraformProvider

---

Provisioners^Optional

public object[] Provisioners { get; }

• Type: object[]

---

Accessor^Required

public string Accessor { get; }

• Type: string

---

AllowedManagedKeysInput^Optional

public string[] AllowedManagedKeysInput { get; }

• Type: string[]

---

AuditNonHmacRequestKeysInput^Optional

public string[] AuditNonHmacRequestKeysInput { get; }

• Type: string[]

---

AuditNonHmacResponseKeysInput^Optional

public string[] AuditNonHmacResponseKeysInput { get; }

• Type: string[]

---

DefaultLeaseTtlSecondsInput^Optional

public double DefaultLeaseTtlSecondsInput { get; }

• Type: double

---

DescriptionInput^Optional

public string DescriptionInput { get; }

• Type: string

---

DisableLocalCaJwtInput^Optional

public object DisableLocalCaJwtInput { get; }

• Type: object

---

ExternalEntropyAccessInput^Optional

public object ExternalEntropyAccessInput { get; }

• Type: object

---

IdInput^Optional

public string IdInput { get; }

• Type: string

---

KubernetesCaCertInput^Optional

public string KubernetesCaCertInput { get; }

• Type: string

---

KubernetesHostInput^Optional

public string KubernetesHostInput { get; }

• Type: string

---

LocalInput^Optional

public object LocalInput { get; }

• Type: object

---

MaxLeaseTtlSecondsInput^Optional

public double MaxLeaseTtlSecondsInput { get; }

• Type: double

---

NamespaceInput^Optional

public string NamespaceInput { get; }

• Type: string

---

OptionsInput^Optional

public System.Collections.Generic.IDictionary<string, string> OptionsInput { get; }

• Type: System.Collections.Generic.IDictionary<string, string>

---

PathInput^Optional

public string PathInput { get; }

• Type: string

---

SealWrapInput^Optional

public object SealWrapInput { get; }

• Type: object

---

ServiceAccountJwtInput^Optional

public string ServiceAccountJwtInput { get; }

• Type: string

---

AllowedManagedKeys^Required

public string[] AllowedManagedKeys { get; }

• Type: string[]

---

AuditNonHmacRequestKeys^Required

public string[] AuditNonHmacRequestKeys { get; }

• Type: string[]

---

AuditNonHmacResponseKeys^Required

public string[] AuditNonHmacResponseKeys { get; }

• Type: string[]

---

DefaultLeaseTtlSeconds^Required

public double DefaultLeaseTtlSeconds { get; }

• Type: double

---

Description^Required

public string Description { get; }

• Type: string

---

DisableLocalCaJwt^Required

public object DisableLocalCaJwt { get; }

• Type: object

---

ExternalEntropyAccess^Required

public object ExternalEntropyAccess { get; }

• Type: object

---

Id^Required

public string Id { get; }

• Type: string

---

KubernetesCaCert^Required

public string KubernetesCaCert { get; }

• Type: string

---

KubernetesHost^Required

public string KubernetesHost { get; }

• Type: string

---

Local^Required

public object Local { get; }

• Type: object

---

MaxLeaseTtlSeconds^Required

public double MaxLeaseTtlSeconds { get; }

• Type: double

---

Namespace^Required

public string Namespace { get; }

• Type: string

---

Options^Required

public System.Collections.Generic.IDictionary<string, string> Options { get; }

• Type: System.Collections.Generic.IDictionary<string, string>

---

Path^Required

public string Path { get; }

• Type: string

---

SealWrap^Required

public object SealWrap { get; }

• Type: object

---

ServiceAccountJwt^Required

public string ServiceAccountJwt { get; }

• Type: string

---

Constants

Name	Type	Description
TfResourceType	string	No description.

---

TfResourceType^Required

public string TfResourceType { get; }

• Type: string

---

Structs

KubernetesSecretBackendConfig

Initializer

using HashiCorp.Cdktf.Providers.Vault;

new KubernetesSecretBackendConfig {
    object Connection = null,
    object Count = null,
    ITerraformDependable[] DependsOn = null,
    ITerraformIterator ForEach = null,
    TerraformResourceLifecycle Lifecycle = null,
    TerraformProvider Provider = null,
    object[] Provisioners = null,
    string Path,
    string[] AllowedManagedKeys = null,
    string[] AuditNonHmacRequestKeys = null,
    string[] AuditNonHmacResponseKeys = null,
    double DefaultLeaseTtlSeconds = null,
    string Description = null,
    object DisableLocalCaJwt = null,
    object ExternalEntropyAccess = null,
    string Id = null,
    string KubernetesCaCert = null,
    string KubernetesHost = null,
    object Local = null,
    double MaxLeaseTtlSeconds = null,
    string Namespace = null,
    System.Collections.Generic.IDictionary<string, string> Options = null,
    object SealWrap = null,
    string ServiceAccountJwt = null
};

Properties

Name	Type	Description
Connection	object	No description.
Count	object	No description.
DependsOn	HashiCorp.Cdktf.ITerraformDependable[]	No description.
ForEach	HashiCorp.Cdktf.ITerraformIterator	No description.
Lifecycle	HashiCorp.Cdktf.TerraformResourceLifecycle	No description.
Provider	HashiCorp.Cdktf.TerraformProvider	No description.
Provisioners	object[]	No description.
Path	string	Where the secret backend will be mounted.
AllowedManagedKeys	string[]	List of managed key registry entry names that the mount in question is allowed to access.
AuditNonHmacRequestKeys	string[]	Specifies the list of keys that will not be HMAC'd by audit devices in the request data object.
AuditNonHmacResponseKeys	string[]	Specifies the list of keys that will not be HMAC'd by audit devices in the response data object.
DefaultLeaseTtlSeconds	double	Default lease duration for tokens and secrets in seconds.
Description	string	Human-friendly description of the mount.
DisableLocalCaJwt	object	Disable defaulting to the local CA certificate and service account JWT when running in a Kubernetes pod.
ExternalEntropyAccess	object	Enable the secrets engine to access Vault's external entropy source.
Id	string	Docs at Terraform Registry: {@link https://registry.terraform.io/providers/hashicorp/vault/4.2.0/docs/resources/kubernetes_secret_backend#id KubernetesSecretBackend#id}.
KubernetesCaCert	string	A PEM-encoded CA certificate used by the secret engine to verify the Kubernetes API server certificate.
KubernetesHost	string	The Kubernetes API URL to connect to.
Local	object	Local mount flag that can be explicitly set to true to enforce local mount in HA environment.
MaxLeaseTtlSeconds	double	Maximum possible lease duration for tokens and secrets in seconds.
Namespace	string	Target namespace. (requires Enterprise).
Options	System.Collections.Generic.IDictionary<string, string>	Specifies mount type specific options that are passed to the backend.
SealWrap	object	Enable seal wrapping for the mount, causing values stored by the mount to be wrapped by the seal's encryption capability.
ServiceAccountJwt	string	The JSON web token of the service account used by the secrets engine to manage Kubernetes credentials.

---

Connection^Optional

public object Connection { get; set; }

• Type: object

---

Count^Optional

public object Count { get; set; }

• Type: object

---

DependsOn^Optional

public ITerraformDependable[] DependsOn { get; set; }

• Type: HashiCorp.Cdktf.ITerraformDependable[]

---

ForEach^Optional

public ITerraformIterator ForEach { get; set; }

• Type: HashiCorp.Cdktf.ITerraformIterator

---

Lifecycle^Optional

public TerraformResourceLifecycle Lifecycle { get; set; }

• Type: HashiCorp.Cdktf.TerraformResourceLifecycle

---

Provider^Optional

public TerraformProvider Provider { get; set; }

• Type: HashiCorp.Cdktf.TerraformProvider

---

Provisioners^Optional

public object[] Provisioners { get; set; }

• Type: object[]

---

Path^Required

public string Path { get; set; }

• Type: string

Where the secret backend will be mounted.

Docs at Terraform Registry: {@link https://registry.terraform.io/providers/hashicorp/vault/4.2.0/docs/resources/kubernetes_secret_backend#path KubernetesSecretBackend#path}

---

AllowedManagedKeys^Optional

public string[] AllowedManagedKeys { get; set; }

• Type: string[]

List of managed key registry entry names that the mount in question is allowed to access.

Docs at Terraform Registry: {@link https://registry.terraform.io/providers/hashicorp/vault/4.2.0/docs/resources/kubernetes_secret_backend#allowed_managed_keys KubernetesSecretBackend#allowed_managed_keys}

---

AuditNonHmacRequestKeys^Optional

public string[] AuditNonHmacRequestKeys { get; set; }

• Type: string[]

Specifies the list of keys that will not be HMAC'd by audit devices in the request data object.

Docs at Terraform Registry: {@link https://registry.terraform.io/providers/hashicorp/vault/4.2.0/docs/resources/kubernetes_secret_backend#audit_non_hmac_request_keys KubernetesSecretBackend#audit_non_hmac_request_keys}

---

AuditNonHmacResponseKeys^Optional

public string[] AuditNonHmacResponseKeys { get; set; }

• Type: string[]

Specifies the list of keys that will not be HMAC'd by audit devices in the response data object.

Docs at Terraform Registry: {@link https://registry.terraform.io/providers/hashicorp/vault/4.2.0/docs/resources/kubernetes_secret_backend#audit_non_hmac_response_keys KubernetesSecretBackend#audit_non_hmac_response_keys}

---

DefaultLeaseTtlSeconds^Optional

public double DefaultLeaseTtlSeconds { get; set; }

• Type: double

Default lease duration for tokens and secrets in seconds.

Docs at Terraform Registry: {@link https://registry.terraform.io/providers/hashicorp/vault/4.2.0/docs/resources/kubernetes_secret_backend#default_lease_ttl_seconds KubernetesSecretBackend#default_lease_ttl_seconds}

---

Description^Optional

public string Description { get; set; }

• Type: string

Human-friendly description of the mount.

Docs at Terraform Registry: {@link https://registry.terraform.io/providers/hashicorp/vault/4.2.0/docs/resources/kubernetes_secret_backend#description KubernetesSecretBackend#description}

---

DisableLocalCaJwt^Optional

public object DisableLocalCaJwt { get; set; }

• Type: object

Disable defaulting to the local CA certificate and service account JWT when running in a Kubernetes pod.

Docs at Terraform Registry: {@link https://registry.terraform.io/providers/hashicorp/vault/4.2.0/docs/resources/kubernetes_secret_backend#disable_local_ca_jwt KubernetesSecretBackend#disable_local_ca_jwt}

---

ExternalEntropyAccess^Optional

public object ExternalEntropyAccess { get; set; }

• Type: object

Enable the secrets engine to access Vault's external entropy source.

Docs at Terraform Registry: {@link https://registry.terraform.io/providers/hashicorp/vault/4.2.0/docs/resources/kubernetes_secret_backend#external_entropy_access KubernetesSecretBackend#external_entropy_access}

---

Id^Optional

public string Id { get; set; }

• Type: string

Docs at Terraform Registry: {@link https://registry.terraform.io/providers/hashicorp/vault/4.2.0/docs/resources/kubernetes_secret_backend#id KubernetesSecretBackend#id}.

Please be aware that the id field is automatically added to all resources in Terraform providers using a Terraform provider SDK version below 2. If you experience problems setting this value it might not be settable. Please take a look at the provider documentation to ensure it should be settable.

---

KubernetesCaCert^Optional

public string KubernetesCaCert { get; set; }

• Type: string

A PEM-encoded CA certificate used by the secret engine to verify the Kubernetes API server certificate.

Defaults to the local pod’s CA if found, or otherwise the host's root CA set.

Docs at Terraform Registry: {@link https://registry.terraform.io/providers/hashicorp/vault/4.2.0/docs/resources/kubernetes_secret_backend#kubernetes_ca_cert KubernetesSecretBackend#kubernetes_ca_cert}

---

KubernetesHost^Optional

public string KubernetesHost { get; set; }

• Type: string

The Kubernetes API URL to connect to.

Docs at Terraform Registry: {@link https://registry.terraform.io/providers/hashicorp/vault/4.2.0/docs/resources/kubernetes_secret_backend#kubernetes_host KubernetesSecretBackend#kubernetes_host}

---

Local^Optional

public object Local { get; set; }

• Type: object

Local mount flag that can be explicitly set to true to enforce local mount in HA environment.

Docs at Terraform Registry: {@link https://registry.terraform.io/providers/hashicorp/vault/4.2.0/docs/resources/kubernetes_secret_backend#local KubernetesSecretBackend#local}

---

MaxLeaseTtlSeconds^Optional

public double MaxLeaseTtlSeconds { get; set; }

• Type: double

Maximum possible lease duration for tokens and secrets in seconds.

Docs at Terraform Registry: {@link https://registry.terraform.io/providers/hashicorp/vault/4.2.0/docs/resources/kubernetes_secret_backend#max_lease_ttl_seconds KubernetesSecretBackend#max_lease_ttl_seconds}

---

Namespace^Optional

public string Namespace { get; set; }

• Type: string

Target namespace. (requires Enterprise).

Docs at Terraform Registry: {@link https://registry.terraform.io/providers/hashicorp/vault/4.2.0/docs/resources/kubernetes_secret_backend#namespace KubernetesSecretBackend#namespace}

---

Options^Optional

public System.Collections.Generic.IDictionary<string, string> Options { get; set; }

• Type: System.Collections.Generic.IDictionary<string, string>

Specifies mount type specific options that are passed to the backend.

Docs at Terraform Registry: {@link https://registry.terraform.io/providers/hashicorp/vault/4.2.0/docs/resources/kubernetes_secret_backend#options KubernetesSecretBackend#options}

---

SealWrap^Optional

public object SealWrap { get; set; }

• Type: object

Enable seal wrapping for the mount, causing values stored by the mount to be wrapped by the seal's encryption capability.

Docs at Terraform Registry: {@link https://registry.terraform.io/providers/hashicorp/vault/4.2.0/docs/resources/kubernetes_secret_backend#seal_wrap KubernetesSecretBackend#seal_wrap}

---

ServiceAccountJwt^Optional

public string ServiceAccountJwt { get; set; }

• Type: string

The JSON web token of the service account used by the secrets engine to manage Kubernetes credentials.

Defaults to the local pod’s JWT if found.

Docs at Terraform Registry: {@link https://registry.terraform.io/providers/hashicorp/vault/4.2.0/docs/resources/kubernetes_secret_backend#service_account_jwt KubernetesSecretBackend#service_account_jwt}

---