Docs Home Pulumi IaC Pulumi ESC Pulumi Insights Pulumi Cloud Packages Tutorials
  1. Packages
  2. HashiCorp Vault Provider
  3. API Docs
  4. Token
HashiCorp Vault v6.7.1 published on Friday, May 2, 2025 by Pulumi
pulumi/pulumi-vault

vault.Token

Explore with Pulumi AI

vault logo
HashiCorp Vault v6.7.1 published on Friday, May 2, 2025 by Pulumi
pulumi/pulumi-vault

    Example Usage

    import * as pulumi from "@pulumi/pulumi";
import * as vault from "@pulumi/vault";

const example = new vault.Token("example", {
    roleName: "app",
    policies: [
        "policy1",
        "policy2",
    ],
    renewable: true,
    ttl: "24h",
    renewMinLease: 43200,
    renewIncrement: 86400,
    metadata: {
        purpose: "service-account",
    },
});

    import pulumi
import pulumi_vault as vault

example = vault.Token("example",
    role_name="app",
    policies=[
        "policy1",
        "policy2",
    ],
    renewable=True,
    ttl="24h",
    renew_min_lease=43200,
    renew_increment=86400,
    metadata={
        "purpose": "service-account",
    })

    package main

import (
	"github.com/pulumi/pulumi-vault/sdk/v6/go/vault"
	"github.com/pulumi/pulumi/sdk/v3/go/pulumi"
)

func main() {
	pulumi.Run(func(ctx *pulumi.Context) error {
		_, err := vault.NewToken(ctx, "example", &vault.TokenArgs{
			RoleName: pulumi.String("app"),
			Policies: pulumi.StringArray{
				pulumi.String("policy1"),
				pulumi.String("policy2"),
			},
			Renewable:      pulumi.Bool(true),
			Ttl:            pulumi.String("24h"),
			RenewMinLease:  pulumi.Int(43200),
			RenewIncrement: pulumi.Int(86400),
			Metadata: pulumi.StringMap{
				"purpose": pulumi.String("service-account"),
			},
		})
		if err != nil {
			return err
		}
		return nil
	})
}

    using System.Collections.Generic;
using System.Linq;
using Pulumi;
using Vault = Pulumi.Vault;

return await Deployment.RunAsync(() => 
{
    var example = new Vault.Token("example", new()
    {
        RoleName = "app",
        Policies = new[]
        {
            "policy1",
            "policy2",
        },
        Renewable = true,
        Ttl = "24h",
        RenewMinLease = 43200,
        RenewIncrement = 86400,
        Metadata = 
        {
            { "purpose", "service-account" },
        },
    });

});

    package generated_program;

import com.pulumi.Context;
import com.pulumi.Pulumi;
import com.pulumi.core.Output;
import com.pulumi.vault.Token;
import com.pulumi.vault.TokenArgs;
import java.util.List;
import java.util.ArrayList;
import java.util.Map;
import java.io.File;
import java.nio.file.Files;
import java.nio.file.Paths;

public class App {
    public static void main(String[] args) {
        Pulumi.run(App::stack);
    }

    public static void stack(Context ctx) {
        var example = new Token("example", TokenArgs.builder()
            .roleName("app")
            .policies(            
                "policy1",
                "policy2")
            .renewable(true)
            .ttl("24h")
            .renewMinLease(43200)
            .renewIncrement(86400)
            .metadata(Map.of("purpose", "service-account"))
            .build());

    }
}

    resources:
  example:
    type: vault:Token
    properties:
      roleName: app
      policies:
        - policy1
        - policy2
      renewable: true
      ttl: 24h
      renewMinLease: 43200
      renewIncrement: 86400
      metadata:
        purpose: service-account

    Create Token Resource

    Resources are created with functions called constructors. To learn more about declaring and configuring resources, see Resources.

    Constructor syntax

    new Token(name: string, args?: TokenArgs, opts?: CustomResourceOptions);
    @overload
def Token(resource_name: str,
          args: Optional[TokenArgs] = None,
          opts: Optional[ResourceOptions] = None)

@overload
def Token(resource_name: str,
          opts: Optional[ResourceOptions] = None,
          display_name: Optional[str] = None,
          explicit_max_ttl: Optional[str] = None,
          metadata: Optional[Mapping[str, str]] = None,
          namespace: Optional[str] = None,
          no_default_policy: Optional[bool] = None,
          no_parent: Optional[bool] = None,
          num_uses: Optional[int] = None,
          period: Optional[str] = None,
          policies: Optional[Sequence[str]] = None,
          renew_increment: Optional[int] = None,
          renew_min_lease: Optional[int] = None,
          renewable: Optional[bool] = None,
          role_name: Optional[str] = None,
          ttl: Optional[str] = None,
          wrapping_ttl: Optional[str] = None)
    func NewToken(ctx *Context, name string, args *TokenArgs, opts ...ResourceOption) (*Token, error)
    public Token(string name, TokenArgs? args = null, CustomResourceOptions? opts = null)
    public Token(String name, TokenArgs args)
public Token(String name, TokenArgs args, CustomResourceOptions options)

    type: vault:Token
properties: # The arguments to resource properties.
options: # Bag of options to control resource's behavior.

    Parameters

    name string
    The unique name of the resource.
    args TokenArgs
    The arguments to resource properties.
    opts CustomResourceOptions
    Bag of options to control resource's behavior.
    resource_name str
    The unique name of the resource.
    args TokenArgs
    The arguments to resource properties.
    opts ResourceOptions
    Bag of options to control resource's behavior.
    ctx Context
    Context object for the current deployment.
    name string
    The unique name of the resource.
    args TokenArgs
    The arguments to resource properties.
    opts ResourceOption
    Bag of options to control resource's behavior.
    name string
    The unique name of the resource.
    args TokenArgs
    The arguments to resource properties.
    opts CustomResourceOptions
    Bag of options to control resource's behavior.
    name String
    The unique name of the resource.
    args TokenArgs
    The arguments to resource properties.
    options CustomResourceOptions
    Bag of options to control resource's behavior.

    Constructor example

    The following reference example uses placeholder values for all input properties.

    var tokenResource = new Vault.Token("tokenResource", new()
{
    DisplayName = "string",
    ExplicitMaxTtl = "string",
    Metadata = 
    {
        { "string", "string" },
    },
    Namespace = "string",
    NoDefaultPolicy = false,
    NoParent = false,
    NumUses = 0,
    Period = "string",
    Policies = new[]
    {
        "string",
    },
    RenewIncrement = 0,
    RenewMinLease = 0,
    Renewable = false,
    RoleName = "string",
    Ttl = "string",
    WrappingTtl = "string",
});

    example, err := vault.NewToken(ctx, "tokenResource", &vault.TokenArgs{
	DisplayName:    pulumi.String("string"),
	ExplicitMaxTtl: pulumi.String("string"),
	Metadata: pulumi.StringMap{
		"string": pulumi.String("string"),
	},
	Namespace:       pulumi.String("string"),
	NoDefaultPolicy: pulumi.Bool(false),
	NoParent:        pulumi.Bool(false),
	NumUses:         pulumi.Int(0),
	Period:          pulumi.String("string"),
	Policies: pulumi.StringArray{
		pulumi.String("string"),
	},
	RenewIncrement: pulumi.Int(0),
	RenewMinLease:  pulumi.Int(0),
	Renewable:      pulumi.Bool(false),
	RoleName:       pulumi.String("string"),
	Ttl:            pulumi.String("string"),
	WrappingTtl:    pulumi.String("string"),
})

    var tokenResource = new Token("tokenResource", TokenArgs.builder()
    .displayName("string")
    .explicitMaxTtl("string")
    .metadata(Map.of("string", "string"))
    .namespace("string")
    .noDefaultPolicy(false)
    .noParent(false)
    .numUses(0)
    .period("string")
    .policies("string")
    .renewIncrement(0)
    .renewMinLease(0)
    .renewable(false)
    .roleName("string")
    .ttl("string")
    .wrappingTtl("string")
    .build());

    token_resource = vault.Token("tokenResource",
    display_name="string",
    explicit_max_ttl="string",
    metadata={
        "string": "string",
    },
    namespace="string",
    no_default_policy=False,
    no_parent=False,
    num_uses=0,
    period="string",
    policies=["string"],
    renew_increment=0,
    renew_min_lease=0,
    renewable=False,
    role_name="string",
    ttl="string",
    wrapping_ttl="string")

    const tokenResource = new vault.Token("tokenResource", {
    displayName: "string",
    explicitMaxTtl: "string",
    metadata: {
        string: "string",
    },
    namespace: "string",
    noDefaultPolicy: false,
    noParent: false,
    numUses: 0,
    period: "string",
    policies: ["string"],
    renewIncrement: 0,
    renewMinLease: 0,
    renewable: false,
    roleName: "string",
    ttl: "string",
    wrappingTtl: "string",
});

    type: vault:Token
properties:
    displayName: string
    explicitMaxTtl: string
    metadata:
        string: string
    namespace: string
    noDefaultPolicy: false
    noParent: false
    numUses: 0
    period: string
    policies:
        - string
    renewIncrement: 0
    renewMinLease: 0
    renewable: false
    roleName: string
    ttl: string
    wrappingTtl: string

    Token Resource Properties

    To learn more about resource properties and how to use them, see Inputs and Outputs in the Architecture and Concepts docs.

    Inputs

    In Python, inputs that are objects can be passed either as argument classes or as dictionary literals.

    The Token resource accepts the following input properties:

    DisplayName string
    String containing the token display name
    ExplicitMaxTtl string
    The explicit max TTL of this token. This is specified as a numeric string with suffix like "30s" ro "5m"
    Metadata Dictionary<string, string>
    Metadata to be set on this token
    Namespace string
    The namespace to provision the resource in. The value should not contain leading or trailing forward slashes. The namespace is always relative to the provider's configured namespace. Available only for Vault Enterprise.
    NoDefaultPolicy bool
    Flag to not attach the default policy to this token
    NoParent bool
    Flag to create a token without parent
    NumUses int
    The number of allowed uses of this token
    Period string
    The period of this token. This is specified as a numeric string with suffix like "30s" ro "5m"
    Policies List<string>
    List of policies to attach to this token
    RenewIncrement int
    The renew increment. This is specified in seconds
    RenewMinLease int
    The minimal lease to renew this token
    Renewable bool
    Flag to allow to renew this token
    RoleName string
    The token role name
    Ttl string
    The TTL period of this token. This is specified as a numeric string with suffix like "30s" ro "5m"
    WrappingTtl string
    The TTL period of the wrapped token.
    DisplayName string
    String containing the token display name
    ExplicitMaxTtl string
    The explicit max TTL of this token. This is specified as a numeric string with suffix like "30s" ro "5m"
    Metadata map[string]string
    Metadata to be set on this token
    Namespace string
    The namespace to provision the resource in. The value should not contain leading or trailing forward slashes. The namespace is always relative to the provider's configured namespace. Available only for Vault Enterprise.
    NoDefaultPolicy bool
    Flag to not attach the default policy to this token
    NoParent bool
    Flag to create a token without parent
    NumUses int
    The number of allowed uses of this token
    Period string
    The period of this token. This is specified as a numeric string with suffix like "30s" ro "5m"
    Policies []string
    List of policies to attach to this token
    RenewIncrement int
    The renew increment. This is specified in seconds
    RenewMinLease int
    The minimal lease to renew this token
    Renewable bool
    Flag to allow to renew this token
    RoleName string
    The token role name
    Ttl string
    The TTL period of this token. This is specified as a numeric string with suffix like "30s" ro "5m"
    WrappingTtl string
    The TTL period of the wrapped token.
    displayName String
    String containing the token display name
    explicitMaxTtl String
    The explicit max TTL of this token. This is specified as a numeric string with suffix like "30s" ro "5m"
    metadata Map<String,String>
    Metadata to be set on this token
    namespace String
    The namespace to provision the resource in. The value should not contain leading or trailing forward slashes. The namespace is always relative to the provider's configured namespace. Available only for Vault Enterprise.
    noDefaultPolicy Boolean
    Flag to not attach the default policy to this token
    noParent Boolean
    Flag to create a token without parent
    numUses Integer
    The number of allowed uses of this token
    period String
    The period of this token. This is specified as a numeric string with suffix like "30s" ro "5m"
    policies List<String>
    List of policies to attach to this token
    renewIncrement Integer
    The renew increment. This is specified in seconds
    renewMinLease Integer
    The minimal lease to renew this token
    renewable Boolean
    Flag to allow to renew this token
    roleName String
    The token role name
    ttl String
    The TTL period of this token. This is specified as a numeric string with suffix like "30s" ro "5m"
    wrappingTtl String
    The TTL period of the wrapped token.
    displayName string
    String containing the token display name
    explicitMaxTtl string
    The explicit max TTL of this token. This is specified as a numeric string with suffix like "30s" ro "5m"
    metadata {[key: string]: string}
    Metadata to be set on this token
    namespace string
    The namespace to provision the resource in. The value should not contain leading or trailing forward slashes. The namespace is always relative to the provider's configured namespace. Available only for Vault Enterprise.
    noDefaultPolicy boolean
    Flag to not attach the default policy to this token
    noParent boolean
    Flag to create a token without parent
    numUses number
    The number of allowed uses of this token
    period string
    The period of this token. This is specified as a numeric string with suffix like "30s" ro "5m"
    policies string[]
    List of policies to attach to this token
    renewIncrement number
    The renew increment. This is specified in seconds
    renewMinLease number
    The minimal lease to renew this token
    renewable boolean
    Flag to allow to renew this token
    roleName string
    The token role name
    ttl string
    The TTL period of this token. This is specified as a numeric string with suffix like "30s" ro "5m"
    wrappingTtl string
    The TTL period of the wrapped token.
    display_name str
    String containing the token display name
    explicit_max_ttl str
    The explicit max TTL of this token. This is specified as a numeric string with suffix like "30s" ro "5m"
    metadata Mapping[str, str]
    Metadata to be set on this token
    namespace str
    The namespace to provision the resource in. The value should not contain leading or trailing forward slashes. The namespace is always relative to the provider's configured namespace. Available only for Vault Enterprise.
    no_default_policy bool
    Flag to not attach the default policy to this token
    no_parent bool
    Flag to create a token without parent
    num_uses int
    The number of allowed uses of this token
    period str
    The period of this token. This is specified as a numeric string with suffix like "30s" ro "5m"
    policies Sequence[str]
    List of policies to attach to this token
    renew_increment int
    The renew increment. This is specified in seconds
    renew_min_lease int
    The minimal lease to renew this token
    renewable bool
    Flag to allow to renew this token
    role_name str
    The token role name
    ttl str
    The TTL period of this token. This is specified as a numeric string with suffix like "30s" ro "5m"
    wrapping_ttl str
    The TTL period of the wrapped token.
    displayName String
    String containing the token display name
    explicitMaxTtl String
    The explicit max TTL of this token. This is specified as a numeric string with suffix like "30s" ro "5m"
    metadata Map<String>
    Metadata to be set on this token
    namespace String
    The namespace to provision the resource in. The value should not contain leading or trailing forward slashes. The namespace is always relative to the provider's configured namespace. Available only for Vault Enterprise.
    noDefaultPolicy Boolean
    Flag to not attach the default policy to this token
    noParent Boolean
    Flag to create a token without parent
    numUses Number
    The number of allowed uses of this token
    period String
    The period of this token. This is specified as a numeric string with suffix like "30s" ro "5m"
    policies List<String>
    List of policies to attach to this token
    renewIncrement Number
    The renew increment. This is specified in seconds
    renewMinLease Number
    The minimal lease to renew this token
    renewable Boolean
    Flag to allow to renew this token
    roleName String
    The token role name
    ttl String
    The TTL period of this token. This is specified as a numeric string with suffix like "30s" ro "5m"
    wrappingTtl String
    The TTL period of the wrapped token.

    Outputs

    All input properties are implicitly available as output properties. Additionally, the Token resource produces the following output properties:

    ClientToken string
    String containing the client token if stored in present file
    Id string
    The provider-assigned unique ID for this managed resource.
    LeaseDuration int
    String containing the token lease duration if present in state file
    LeaseStarted string
    String containing the token lease started time if present in state file
    WrappedToken string
    The client wrapped token.
    WrappingAccessor string
    The client wrapping accessor.
    ClientToken string
    String containing the client token if stored in present file
    Id string
    The provider-assigned unique ID for this managed resource.
    LeaseDuration int
    String containing the token lease duration if present in state file
    LeaseStarted string
    String containing the token lease started time if present in state file
    WrappedToken string
    The client wrapped token.
    WrappingAccessor string
    The client wrapping accessor.
    clientToken String
    String containing the client token if stored in present file
    id String
    The provider-assigned unique ID for this managed resource.
    leaseDuration Integer
    String containing the token lease duration if present in state file
    leaseStarted String
    String containing the token lease started time if present in state file
    wrappedToken String
    The client wrapped token.
    wrappingAccessor String
    The client wrapping accessor.
    clientToken string
    String containing the client token if stored in present file
    id string
    The provider-assigned unique ID for this managed resource.
    leaseDuration number
    String containing the token lease duration if present in state file
    leaseStarted string
    String containing the token lease started time if present in state file
    wrappedToken string
    The client wrapped token.
    wrappingAccessor string
    The client wrapping accessor.
    client_token str
    String containing the client token if stored in present file
    id str
    The provider-assigned unique ID for this managed resource.
    lease_duration int
    String containing the token lease duration if present in state file
    lease_started str
    String containing the token lease started time if present in state file
    wrapped_token str
    The client wrapped token.
    wrapping_accessor str
    The client wrapping accessor.
    clientToken String
    String containing the client token if stored in present file
    id String
    The provider-assigned unique ID for this managed resource.
    leaseDuration Number
    String containing the token lease duration if present in state file
    leaseStarted String
    String containing the token lease started time if present in state file
    wrappedToken String
    The client wrapped token.
    wrappingAccessor String
    The client wrapping accessor.

    Look up Existing Token Resource

    Get an existing Token resource’s state with the given name, ID, and optional extra properties used to qualify the lookup.

    public static get(name: string, id: Input<ID>, state?: TokenState, opts?: CustomResourceOptions): Token
    @staticmethod
def get(resource_name: str,
        id: str,
        opts: Optional[ResourceOptions] = None,
        client_token: Optional[str] = None,
        display_name: Optional[str] = None,
        explicit_max_ttl: Optional[str] = None,
        lease_duration: Optional[int] = None,
        lease_started: Optional[str] = None,
        metadata: Optional[Mapping[str, str]] = None,
        namespace: Optional[str] = None,
        no_default_policy: Optional[bool] = None,
        no_parent: Optional[bool] = None,
        num_uses: Optional[int] = None,
        period: Optional[str] = None,
        policies: Optional[Sequence[str]] = None,
        renew_increment: Optional[int] = None,
        renew_min_lease: Optional[int] = None,
        renewable: Optional[bool] = None,
        role_name: Optional[str] = None,
        ttl: Optional[str] = None,
        wrapped_token: Optional[str] = None,
        wrapping_accessor: Optional[str] = None,
        wrapping_ttl: Optional[str] = None) -> Token
    func GetToken(ctx *Context, name string, id IDInput, state *TokenState, opts ...ResourceOption) (*Token, error)
    public static Token Get(string name, Input<string> id, TokenState? state, CustomResourceOptions? opts = null)
    public static Token get(String name, Output<String> id, TokenState state, CustomResourceOptions options)
    resources:  _:    type: vault:Token    get:      id: ${id}
    name
    The unique name of the resulting resource.
    id
    The unique provider ID of the resource to lookup.
    state
    Any extra arguments used during the lookup.
    opts
    A bag of options that control this resource's behavior.
    resource_name
    The unique name of the resulting resource.
    id
    The unique provider ID of the resource to lookup.
    name
    The unique name of the resulting resource.
    id
    The unique provider ID of the resource to lookup.
    state
    Any extra arguments used during the lookup.
    opts
    A bag of options that control this resource's behavior.
    name
    The unique name of the resulting resource.
    id
    The unique provider ID of the resource to lookup.
    state
    Any extra arguments used during the lookup.
    opts
    A bag of options that control this resource's behavior.
    name
    The unique name of the resulting resource.
    id
    The unique provider ID of the resource to lookup.
    state
    Any extra arguments used during the lookup.
    opts
    A bag of options that control this resource's behavior.
    The following state arguments are supported:
    ClientToken string
    String containing the client token if stored in present file
    DisplayName string
    String containing the token display name
    ExplicitMaxTtl string
    The explicit max TTL of this token. This is specified as a numeric string with suffix like "30s" ro "5m"
    LeaseDuration int
    String containing the token lease duration if present in state file
    LeaseStarted string
    String containing the token lease started time if present in state file
    Metadata Dictionary<string, string>
    Metadata to be set on this token
    Namespace string
    The namespace to provision the resource in. The value should not contain leading or trailing forward slashes. The namespace is always relative to the provider's configured namespace. Available only for Vault Enterprise.
    NoDefaultPolicy bool
    Flag to not attach the default policy to this token
    NoParent bool
    Flag to create a token without parent
    NumUses int
    The number of allowed uses of this token
    Period string
    The period of this token. This is specified as a numeric string with suffix like "30s" ro "5m"
    Policies List<string>
    List of policies to attach to this token
    RenewIncrement int
    The renew increment. This is specified in seconds
    RenewMinLease int
    The minimal lease to renew this token
    Renewable bool
    Flag to allow to renew this token
    RoleName string
    The token role name
    Ttl string
    The TTL period of this token. This is specified as a numeric string with suffix like "30s" ro "5m"
    WrappedToken string
    The client wrapped token.
    WrappingAccessor string
    The client wrapping accessor.
    WrappingTtl string
    The TTL period of the wrapped token.
    ClientToken string
    String containing the client token if stored in present file
    DisplayName string
    String containing the token display name
    ExplicitMaxTtl string
    The explicit max TTL of this token. This is specified as a numeric string with suffix like "30s" ro "5m"
    LeaseDuration int
    String containing the token lease duration if present in state file
    LeaseStarted string
    String containing the token lease started time if present in state file
    Metadata map[string]string
    Metadata to be set on this token
    Namespace string
    The namespace to provision the resource in. The value should not contain leading or trailing forward slashes. The namespace is always relative to the provider's configured namespace. Available only for Vault Enterprise.
    NoDefaultPolicy bool
    Flag to not attach the default policy to this token
    NoParent bool
    Flag to create a token without parent
    NumUses int
    The number of allowed uses of this token
    Period string
    The period of this token. This is specified as a numeric string with suffix like "30s" ro "5m"
    Policies []string
    List of policies to attach to this token
    RenewIncrement int
    The renew increment. This is specified in seconds
    RenewMinLease int
    The minimal lease to renew this token
    Renewable bool
    Flag to allow to renew this token
    RoleName string
    The token role name
    Ttl string
    The TTL period of this token. This is specified as a numeric string with suffix like "30s" ro "5m"
    WrappedToken string
    The client wrapped token.
    WrappingAccessor string
    The client wrapping accessor.
    WrappingTtl string
    The TTL period of the wrapped token.
    clientToken String
    String containing the client token if stored in present file
    displayName String
    String containing the token display name
    explicitMaxTtl String
    The explicit max TTL of this token. This is specified as a numeric string with suffix like "30s" ro "5m"
    leaseDuration Integer
    String containing the token lease duration if present in state file
    leaseStarted String
    String containing the token lease started time if present in state file
    metadata Map<String,String>
    Metadata to be set on this token
    namespace String
    The namespace to provision the resource in. The value should not contain leading or trailing forward slashes. The namespace is always relative to the provider's configured namespace. Available only for Vault Enterprise.
    noDefaultPolicy Boolean
    Flag to not attach the default policy to this token
    noParent Boolean
    Flag to create a token without parent
    numUses Integer
    The number of allowed uses of this token
    period String
    The period of this token. This is specified as a numeric string with suffix like "30s" ro "5m"
    policies List<String>
    List of policies to attach to this token
    renewIncrement Integer
    The renew increment. This is specified in seconds
    renewMinLease Integer
    The minimal lease to renew this token
    renewable Boolean
    Flag to allow to renew this token
    roleName String
    The token role name
    ttl String
    The TTL period of this token. This is specified as a numeric string with suffix like "30s" ro "5m"
    wrappedToken String
    The client wrapped token.
    wrappingAccessor String
    The client wrapping accessor.
    wrappingTtl String
    The TTL period of the wrapped token.
    clientToken string
    String containing the client token if stored in present file
    displayName string
    String containing the token display name
    explicitMaxTtl string
    The explicit max TTL of this token. This is specified as a numeric string with suffix like "30s" ro "5m"
    leaseDuration number
    String containing the token lease duration if present in state file
    leaseStarted string
    String containing the token lease started time if present in state file
    metadata {[key: string]: string}
    Metadata to be set on this token
    namespace string
    The namespace to provision the resource in. The value should not contain leading or trailing forward slashes. The namespace is always relative to the provider's configured namespace. Available only for Vault Enterprise.
    noDefaultPolicy boolean
    Flag to not attach the default policy to this token
    noParent boolean
    Flag to create a token without parent
    numUses number
    The number of allowed uses of this token
    period string
    The period of this token. This is specified as a numeric string with suffix like "30s" ro "5m"
    policies string[]
    List of policies to attach to this token
    renewIncrement number
    The renew increment. This is specified in seconds
    renewMinLease number
    The minimal lease to renew this token
    renewable boolean
    Flag to allow to renew this token
    roleName string
    The token role name
    ttl string
    The TTL period of this token. This is specified as a numeric string with suffix like "30s" ro "5m"
    wrappedToken string
    The client wrapped token.
    wrappingAccessor string
    The client wrapping accessor.
    wrappingTtl string
    The TTL period of the wrapped token.
    client_token str
    String containing the client token if stored in present file
    display_name str
    String containing the token display name
    explicit_max_ttl str
    The explicit max TTL of this token. This is specified as a numeric string with suffix like "30s" ro "5m"
    lease_duration int
    String containing the token lease duration if present in state file
    lease_started str
    String containing the token lease started time if present in state file
    metadata Mapping[str, str]
    Metadata to be set on this token
    namespace str
    The namespace to provision the resource in. The value should not contain leading or trailing forward slashes. The namespace is always relative to the provider's configured namespace. Available only for Vault Enterprise.
    no_default_policy bool
    Flag to not attach the default policy to this token
    no_parent bool
    Flag to create a token without parent
    num_uses int
    The number of allowed uses of this token
    period str
    The period of this token. This is specified as a numeric string with suffix like "30s" ro "5m"
    policies Sequence[str]
    List of policies to attach to this token
    renew_increment int
    The renew increment. This is specified in seconds
    renew_min_lease int
    The minimal lease to renew this token
    renewable bool
    Flag to allow to renew this token
    role_name str
    The token role name
    ttl str
    The TTL period of this token. This is specified as a numeric string with suffix like "30s" ro "5m"
    wrapped_token str
    The client wrapped token.
    wrapping_accessor str
    The client wrapping accessor.
    wrapping_ttl str
    The TTL period of the wrapped token.
    clientToken String
    String containing the client token if stored in present file
    displayName String
    String containing the token display name
    explicitMaxTtl String
    The explicit max TTL of this token. This is specified as a numeric string with suffix like "30s" ro "5m"
    leaseDuration Number
    String containing the token lease duration if present in state file
    leaseStarted String
    String containing the token lease started time if present in state file
    metadata Map<String>
    Metadata to be set on this token
    namespace String
    The namespace to provision the resource in. The value should not contain leading or trailing forward slashes. The namespace is always relative to the provider's configured namespace. Available only for Vault Enterprise.
    noDefaultPolicy Boolean
    Flag to not attach the default policy to this token
    noParent Boolean
    Flag to create a token without parent
    numUses Number
    The number of allowed uses of this token
    period String
    The period of this token. This is specified as a numeric string with suffix like "30s" ro "5m"
    policies List<String>
    List of policies to attach to this token
    renewIncrement Number
    The renew increment. This is specified in seconds
    renewMinLease Number
    The minimal lease to renew this token
    renewable Boolean
    Flag to allow to renew this token
    roleName String
    The token role name
    ttl String
    The TTL period of this token. This is specified as a numeric string with suffix like "30s" ro "5m"
    wrappedToken String
    The client wrapped token.
    wrappingAccessor String
    The client wrapping accessor.
    wrappingTtl String
    The TTL period of the wrapped token.

    Import

    Tokens can be imported using its id as accessor id, e.g.

    $ pulumi import vault:index/token:Token example <accessor_id>

    To learn more about importing existing cloud resources, see Importing resources.

    Package Details

    Repository
    Vault pulumi/pulumi-vault
    License
    Apache-2.0
    Notes
    This Pulumi package is based on the vault Terraform Provider.
    vault logo
    HashiCorp Vault v6.7.1 published on Friday, May 2, 2025 by Pulumi
    pulumi/pulumi-vault