Lookup an Identity Entity for Vault. The Identity secrets engine is the identity management solution for Vault. It internally maintains the clients who are recognized by Vault.
data "vault_identity_entity" "entity" {
entity_name = "entity_12345"
}
The following arguments are supported:
namespace
- (Optional) The namespace of the target resource.
The value should not contain leading or trailing forward slashes.
The namespace
is always relative to the provider's configured namespace.
Available only for Vault Enterprise.
entity_name
- (Optional) Name of the entity.
entity_id
- (Optional) ID of the entity.
alias_id
- (Optional) ID of the alias.
alias_name
- (Optional) Name of the alias. This should be supplied in conjunction with
alias_mount_accessor
.
alias_mount_accessor
- (Optional) Accessor of the mount to which the alias belongs to.
This should be supplied in conjunction with alias_name
.
The lookup criteria can be entity_name
, entity_id
, alias_id
, or a combination of
alias_name
and alias_mount_accessor
.
Use of this resource requires the create
capability on /identity/lookup/entity
.
The following attributes are exported:
data_json
- A string containing the full data payload retrieved from
Vault, serialized in JSON format.
creation_time
- Creation timestamp of the entity
direct_group_ids
- List of Group IDs of which the entity is directly a member of
disabled
- Whether the entity is disabled
group_ids
- List of all Group IDs of which the entity is a member of
inherited_group_ids
- List of all Group IDs of which the entity is a member of transitively
last_update_time
- Last updated time of the entity
merged_entity_ids
- Other entity IDs which is merged with this entity
metadata
- Arbitrary metadata
namespace_id
- Namespace of which the entity is part of
policies
- List of policies attached to the entity
aliases
- A list of entity alias. Structure is documented below.
canonical_id
- Canonical ID of the Alias
creation_time
- Creation time of the Alias
id
- ID of the alias
last_update_time
- Last update time of the alias
merged_from_canonical_ids
- List of canonical IDs merged with this alias
metadata
- Arbitrary metadata
mount_accessor
- Authentication mount acccessor which this alias belongs to
mount_path
- Authentication mount path which this alias belongs to
mount_type
- Authentication mount type which this alias belongs to
name
- Name of the alias