strongdm 15.22.0 → 15.25.0

checksums.yaml

@@ -1,7 +1,7 @@
 ---
 SHA256:
-  metadata.gz: aa8fc9ea08bf2b9ca6e753658fbaf88c28e9c501dbdcd8e91bbaf901133912e4
-  data.tar.gz: 72a2b523cb8a1fe63c3c33b3c1fd39b4a8f259f260be8c6a2ceba34ffb333414
+  metadata.gz: 1b3ee8403b96900984ff1b6a5b5e80bef413d633a538ebd5db04af7cc84d0ea9
+  data.tar.gz: c00dccaa63df6126e060fcfe5ff74678567cadb82d323375748b51fd2290bfb5
 SHA512:
-  metadata.gz: 70ce82e399099e5d9d2075d9c56250c1acc200fdb418ceceec6a2aeaeaca1a37c02589250397a4b067a749a5cb65357e7881f9759e8f837a3906c707f26098f1
-  data.tar.gz: ac0ed67c94900e5c10cb30a684257303960bbc3094352a3c8fe95bd8c9cb0ace169730003d5c4a96c54f8dd847eb599607005fb9de8a6ee0fcefd4e4e4c8a0e8
+  metadata.gz: 58126539def4f8328fceed2e0587f77ed1f1617f55284ec8ab7f5cae44cfebc7550c24afc663dcb0605a6da41a9c052d52092647fd59f5b21779e0c0e67ed243
+  data.tar.gz: ae3295116b34c358c16bd6b983358002d89d2942088ead582d1a837cdc90b07126c1ee089907394a5359da536f49abf0ca852d6a742aa9151dcf19b2f622c627

data/.git/ORIG_HEAD

@@ -1 +1 @@
-229557ff8902458028f43d084b6fdff298486d99
+1fb12400f09101921542776d3887b93103dd9c5f

data/.git/logs/HEAD

@@ -1,3 +1,3 @@
-0000000000000000000000000000000000000000 229557ff8902458028f43d084b6fdff298486d99 root <root@999b4da96dac.(none)> 1760346076 +0000	clone: from github.com:strongdm/strongdm-sdk-ruby.git
-229557ff8902458028f43d084b6fdff298486d99 229557ff8902458028f43d084b6fdff298486d99 root <root@999b4da96dac.(none)> 1760346076 +0000	checkout: moving from master to master
-229557ff8902458028f43d084b6fdff298486d99 dbc1e295841d51376c44f987d9eecf5c8427c478 root <root@999b4da96dac.(none)> 1760346076 +0000	merge origin/development: Fast-forward
+0000000000000000000000000000000000000000 1fb12400f09101921542776d3887b93103dd9c5f root <root@02efd9f1f92d.(none)> 1760946048 +0000	clone: from github.com:strongdm/strongdm-sdk-ruby.git
+1fb12400f09101921542776d3887b93103dd9c5f 1fb12400f09101921542776d3887b93103dd9c5f root <root@02efd9f1f92d.(none)> 1760946048 +0000	checkout: moving from master to master
+1fb12400f09101921542776d3887b93103dd9c5f a4fd017725511cf32effc6426ca74b714644d37d root <root@02efd9f1f92d.(none)> 1760946048 +0000	merge origin/development: Fast-forward

data/.git/logs/refs/heads/master

@@ -1,2 +1,2 @@
-0000000000000000000000000000000000000000 229557ff8902458028f43d084b6fdff298486d99 root <root@999b4da96dac.(none)> 1760346076 +0000	clone: from github.com:strongdm/strongdm-sdk-ruby.git
-229557ff8902458028f43d084b6fdff298486d99 dbc1e295841d51376c44f987d9eecf5c8427c478 root <root@999b4da96dac.(none)> 1760346076 +0000	merge origin/development: Fast-forward
+0000000000000000000000000000000000000000 1fb12400f09101921542776d3887b93103dd9c5f root <root@02efd9f1f92d.(none)> 1760946048 +0000	clone: from github.com:strongdm/strongdm-sdk-ruby.git
+1fb12400f09101921542776d3887b93103dd9c5f a4fd017725511cf32effc6426ca74b714644d37d root <root@02efd9f1f92d.(none)> 1760946048 +0000	merge origin/development: Fast-forward

data/.git/logs/refs/remotes/origin/HEAD

@@ -1 +1 @@
-0000000000000000000000000000000000000000 229557ff8902458028f43d084b6fdff298486d99 root <root@999b4da96dac.(none)> 1760346076 +0000	clone: from github.com:strongdm/strongdm-sdk-ruby.git
+0000000000000000000000000000000000000000 1fb12400f09101921542776d3887b93103dd9c5f root <root@02efd9f1f92d.(none)> 1760946048 +0000	clone: from github.com:strongdm/strongdm-sdk-ruby.git

data/.git/packed-refs

@@ -1,6 +1,6 @@
 # pack-refs with: peeled fully-peeled sorted 
-dbc1e295841d51376c44f987d9eecf5c8427c478 refs/remotes/origin/development
-229557ff8902458028f43d084b6fdff298486d99 refs/remotes/origin/master
+a4fd017725511cf32effc6426ca74b714644d37d refs/remotes/origin/development
+1fb12400f09101921542776d3887b93103dd9c5f refs/remotes/origin/master
 2e4fe8087177ddea9b3991ca499f758384839c89 refs/tags/untagged-84fd83a4484c785cce63
 04f604866214fab4d5663b5171a3e596331577bd refs/tags/v0.9.4
 6f9a7b75b345c65fb554884907b7060680c807b7 refs/tags/v0.9.5
@@ -113,6 +113,8 @@ ac9b86121b9542f28b614f897f7a61f34363410b refs/tags/v15.10.0
 95ca84ab082b3f19fa3b0d1799ac55e4beebea64 refs/tags/v15.2.0
 7cf936aad61c58434bf735f826e7cfcf71b9ce8a refs/tags/v15.20.0
 229557ff8902458028f43d084b6fdff298486d99 refs/tags/v15.21.0
+dbc1e295841d51376c44f987d9eecf5c8427c478 refs/tags/v15.22.0
+1fb12400f09101921542776d3887b93103dd9c5f refs/tags/v15.23.0
 cf3b15b82cb0c4229609c07c870c6cb4fd38ef75 refs/tags/v15.4.0
 0be2c5e7f7a90c49077548cb3a9bce234219b9f0 refs/tags/v15.5.0
 4b9cd43c5dda3f369b82b6a56132a5470ff9ff53 refs/tags/v15.6.0

data/.git/refs/heads/master

@@ -1 +1 @@
-dbc1e295841d51376c44f987d9eecf5c8427c478
+a4fd017725511cf32effc6426ca74b714644d37d

data/lib/grpc/plumbing.rb

@@ -927,6 +927,8 @@ module SDM
       porcelain.id = (plumbing.id)
       porcelain.name = (plumbing.name)
       porcelain.region = (plumbing.region)
+      porcelain.role_arn = (plumbing.role_arn)
+      porcelain.role_external_id = (plumbing.role_external_id)
       porcelain.tags = convert_tags_to_porcelain(plumbing.tags)
       porcelain
     end
@@ -939,6 +941,8 @@ module SDM
       plumbing.id = (porcelain.id)
       plumbing.name = (porcelain.name)
       plumbing.region = (porcelain.region)
+      plumbing.role_arn = (porcelain.role_arn)
+      plumbing.role_external_id = (porcelain.role_external_id)
       plumbing.tags = convert_tags_to_plumbing(porcelain.tags)
       plumbing
     end
@@ -16730,6 +16734,9 @@ module SDM
       if porcelain.instance_of? KeyfactorX509Store
         plumbing.keyfactor_x_509 = convert_keyfactor_x_509_store_to_plumbing(porcelain)
       end
+      if porcelain.instance_of? StrongVaultStore
+        plumbing.strong_vault = convert_strong_vault_store_to_plumbing(porcelain)
+      end
       if porcelain.instance_of? VaultAppRoleStore
         plumbing.vault_app_role = convert_vault_app_role_store_to_plumbing(porcelain)
       end
@@ -16742,9 +16749,21 @@ module SDM
       if porcelain.instance_of? VaultAWSEC2Store
         plumbing.vault_awsec_2 = convert_vault_awsec_2_store_to_plumbing(porcelain)
       end
+      if porcelain.instance_of? VaultAWSEC2CertSSHStore
+        plumbing.vault_awsec_2_cert_ssh = convert_vault_awsec_2_cert_ssh_store_to_plumbing(porcelain)
+      end
+      if porcelain.instance_of? VaultAWSEC2CertX509Store
+        plumbing.vault_awsec_2_cert_x_509 = convert_vault_awsec_2_cert_x_509_store_to_plumbing(porcelain)
+      end
       if porcelain.instance_of? VaultAWSIAMStore
         plumbing.vault_awsiam = convert_vault_awsiam_store_to_plumbing(porcelain)
       end
+      if porcelain.instance_of? VaultAWSIAMCertSSHStore
+        plumbing.vault_awsiam_cert_ssh = convert_vault_awsiam_cert_ssh_store_to_plumbing(porcelain)
+      end
+      if porcelain.instance_of? VaultAWSIAMCertX509Store
+        plumbing.vault_awsiam_cert_x_509 = convert_vault_awsiam_cert_x_509_store_to_plumbing(porcelain)
+      end
       if porcelain.instance_of? VaultTLSStore
         plumbing.vault_tls = convert_vault_tls_store_to_plumbing(porcelain)
       end
@@ -16806,6 +16825,9 @@ module SDM
       if plumbing.keyfactor_x_509 != nil
         return convert_keyfactor_x_509_store_to_porcelain(plumbing.keyfactor_x_509)
       end
+      if plumbing.strong_vault != nil
+        return convert_strong_vault_store_to_porcelain(plumbing.strong_vault)
+      end
       if plumbing.vault_app_role != nil
         return convert_vault_app_role_store_to_porcelain(plumbing.vault_app_role)
       end
@@ -16818,9 +16840,21 @@ module SDM
       if plumbing.vault_awsec_2 != nil
         return convert_vault_awsec_2_store_to_porcelain(plumbing.vault_awsec_2)
       end
+      if plumbing.vault_awsec_2_cert_ssh != nil
+        return convert_vault_awsec_2_cert_ssh_store_to_porcelain(plumbing.vault_awsec_2_cert_ssh)
+      end
+      if plumbing.vault_awsec_2_cert_x_509 != nil
+        return convert_vault_awsec_2_cert_x_509_store_to_porcelain(plumbing.vault_awsec_2_cert_x_509)
+      end
       if plumbing.vault_awsiam != nil
         return convert_vault_awsiam_store_to_porcelain(plumbing.vault_awsiam)
       end
+      if plumbing.vault_awsiam_cert_ssh != nil
+        return convert_vault_awsiam_cert_ssh_store_to_porcelain(plumbing.vault_awsiam_cert_ssh)
+      end
+      if plumbing.vault_awsiam_cert_x_509 != nil
+        return convert_vault_awsiam_cert_x_509_store_to_porcelain(plumbing.vault_awsiam_cert_x_509)
+      end
       if plumbing.vault_tls != nil
         return convert_vault_tls_store_to_porcelain(plumbing.vault_tls)
       end
@@ -17392,6 +17426,44 @@ module SDM
       end
       items
     end
+    def self.convert_strong_vault_store_to_porcelain(plumbing)
+      if plumbing == nil
+        return nil
+      end
+      porcelain = StrongVaultStore.new()
+      porcelain.id = (plumbing.id)
+      porcelain.name = (plumbing.name)
+      porcelain.tags = convert_tags_to_porcelain(plumbing.tags)
+      porcelain
+    end
+
+    def self.convert_strong_vault_store_to_plumbing(porcelain)
+      if porcelain == nil
+        return nil
+      end
+      plumbing = V1::StrongVaultStore.new()
+      plumbing.id = (porcelain.id)
+      plumbing.name = (porcelain.name)
+      plumbing.tags = convert_tags_to_plumbing(porcelain.tags)
+      plumbing
+    end
+    def self.convert_repeated_strong_vault_store_to_plumbing(porcelains)
+      items = Array.new
+      porcelains.each do |porcelain|
+        plumbing = convert_strong_vault_store_to_plumbing(porcelain)
+        items.append(plumbing)
+      end
+      items
+    end
+
+    def self.convert_repeated_strong_vault_store_to_porcelain(plumbings)
+      items = Array.new
+      plumbings.each do |plumbing|
+        porcelain = convert_strong_vault_store_to_porcelain(plumbing)
+        items.append(porcelain)
+      end
+      items
+    end
     def self.convert_sybase_to_porcelain(plumbing)
       if plumbing == nil
         return nil
@@ -17810,6 +17882,102 @@ module SDM
       end
       items
     end
+    def self.convert_vault_awsec_2_cert_ssh_store_to_porcelain(plumbing)
+      if plumbing == nil
+        return nil
+      end
+      porcelain = VaultAWSEC2CertSSHStore.new()
+      porcelain.id = (plumbing.id)
+      porcelain.issuedcertttlminutes = (plumbing.issuedCertTTLMinutes)
+      porcelain.name = (plumbing.name)
+      porcelain.namespace = (plumbing.namespace)
+      porcelain.server_address = (plumbing.server_address)
+      porcelain.signing_role = (plumbing.signing_role)
+      porcelain.ssh_mount_point = (plumbing.ssh_mount_point)
+      porcelain.tags = convert_tags_to_porcelain(plumbing.tags)
+      porcelain
+    end
+
+    def self.convert_vault_awsec_2_cert_ssh_store_to_plumbing(porcelain)
+      if porcelain == nil
+        return nil
+      end
+      plumbing = V1::VaultAWSEC2CertSSHStore.new()
+      plumbing.id = (porcelain.id)
+      plumbing.issuedCertTTLMinutes = (porcelain.issuedcertttlminutes)
+      plumbing.name = (porcelain.name)
+      plumbing.namespace = (porcelain.namespace)
+      plumbing.server_address = (porcelain.server_address)
+      plumbing.signing_role = (porcelain.signing_role)
+      plumbing.ssh_mount_point = (porcelain.ssh_mount_point)
+      plumbing.tags = convert_tags_to_plumbing(porcelain.tags)
+      plumbing
+    end
+    def self.convert_repeated_vault_awsec_2_cert_ssh_store_to_plumbing(porcelains)
+      items = Array.new
+      porcelains.each do |porcelain|
+        plumbing = convert_vault_awsec_2_cert_ssh_store_to_plumbing(porcelain)
+        items.append(plumbing)
+      end
+      items
+    end
+
+    def self.convert_repeated_vault_awsec_2_cert_ssh_store_to_porcelain(plumbings)
+      items = Array.new
+      plumbings.each do |plumbing|
+        porcelain = convert_vault_awsec_2_cert_ssh_store_to_porcelain(plumbing)
+        items.append(porcelain)
+      end
+      items
+    end
+    def self.convert_vault_awsec_2_cert_x_509_store_to_porcelain(plumbing)
+      if plumbing == nil
+        return nil
+      end
+      porcelain = VaultAWSEC2CertX509Store.new()
+      porcelain.id = (plumbing.id)
+      porcelain.issuedcertttlminutes = (plumbing.issuedCertTTLMinutes)
+      porcelain.name = (plumbing.name)
+      porcelain.namespace = (plumbing.namespace)
+      porcelain.pki_mount_point = (plumbing.pki_mount_point)
+      porcelain.server_address = (plumbing.server_address)
+      porcelain.signing_role = (plumbing.signing_role)
+      porcelain.tags = convert_tags_to_porcelain(plumbing.tags)
+      porcelain
+    end
+
+    def self.convert_vault_awsec_2_cert_x_509_store_to_plumbing(porcelain)
+      if porcelain == nil
+        return nil
+      end
+      plumbing = V1::VaultAWSEC2CertX509Store.new()
+      plumbing.id = (porcelain.id)
+      plumbing.issuedCertTTLMinutes = (porcelain.issuedcertttlminutes)
+      plumbing.name = (porcelain.name)
+      plumbing.namespace = (porcelain.namespace)
+      plumbing.pki_mount_point = (porcelain.pki_mount_point)
+      plumbing.server_address = (porcelain.server_address)
+      plumbing.signing_role = (porcelain.signing_role)
+      plumbing.tags = convert_tags_to_plumbing(porcelain.tags)
+      plumbing
+    end
+    def self.convert_repeated_vault_awsec_2_cert_x_509_store_to_plumbing(porcelains)
+      items = Array.new
+      porcelains.each do |porcelain|
+        plumbing = convert_vault_awsec_2_cert_x_509_store_to_plumbing(porcelain)
+        items.append(plumbing)
+      end
+      items
+    end
+
+    def self.convert_repeated_vault_awsec_2_cert_x_509_store_to_porcelain(plumbings)
+      items = Array.new
+      plumbings.each do |plumbing|
+        porcelain = convert_vault_awsec_2_cert_x_509_store_to_porcelain(plumbing)
+        items.append(porcelain)
+      end
+      items
+    end
     def self.convert_vault_awsec_2_store_to_porcelain(plumbing)
       if plumbing == nil
         return nil
@@ -17852,6 +18020,102 @@ module SDM
       end
       items
     end
+    def self.convert_vault_awsiam_cert_ssh_store_to_porcelain(plumbing)
+      if plumbing == nil
+        return nil
+      end
+      porcelain = VaultAWSIAMCertSSHStore.new()
+      porcelain.id = (plumbing.id)
+      porcelain.issuedcertttlminutes = (plumbing.issuedCertTTLMinutes)
+      porcelain.name = (plumbing.name)
+      porcelain.namespace = (plumbing.namespace)
+      porcelain.server_address = (plumbing.server_address)
+      porcelain.signing_role = (plumbing.signing_role)
+      porcelain.ssh_mount_point = (plumbing.ssh_mount_point)
+      porcelain.tags = convert_tags_to_porcelain(plumbing.tags)
+      porcelain
+    end
+
+    def self.convert_vault_awsiam_cert_ssh_store_to_plumbing(porcelain)
+      if porcelain == nil
+        return nil
+      end
+      plumbing = V1::VaultAWSIAMCertSSHStore.new()
+      plumbing.id = (porcelain.id)
+      plumbing.issuedCertTTLMinutes = (porcelain.issuedcertttlminutes)
+      plumbing.name = (porcelain.name)
+      plumbing.namespace = (porcelain.namespace)
+      plumbing.server_address = (porcelain.server_address)
+      plumbing.signing_role = (porcelain.signing_role)
+      plumbing.ssh_mount_point = (porcelain.ssh_mount_point)
+      plumbing.tags = convert_tags_to_plumbing(porcelain.tags)
+      plumbing
+    end
+    def self.convert_repeated_vault_awsiam_cert_ssh_store_to_plumbing(porcelains)
+      items = Array.new
+      porcelains.each do |porcelain|
+        plumbing = convert_vault_awsiam_cert_ssh_store_to_plumbing(porcelain)
+        items.append(plumbing)
+      end
+      items
+    end
+
+    def self.convert_repeated_vault_awsiam_cert_ssh_store_to_porcelain(plumbings)
+      items = Array.new
+      plumbings.each do |plumbing|
+        porcelain = convert_vault_awsiam_cert_ssh_store_to_porcelain(plumbing)
+        items.append(porcelain)
+      end
+      items
+    end
+    def self.convert_vault_awsiam_cert_x_509_store_to_porcelain(plumbing)
+      if plumbing == nil
+        return nil
+      end
+      porcelain = VaultAWSIAMCertX509Store.new()
+      porcelain.id = (plumbing.id)
+      porcelain.issuedcertttlminutes = (plumbing.issuedCertTTLMinutes)
+      porcelain.name = (plumbing.name)
+      porcelain.namespace = (plumbing.namespace)
+      porcelain.pki_mount_point = (plumbing.pki_mount_point)
+      porcelain.server_address = (plumbing.server_address)
+      porcelain.signing_role = (plumbing.signing_role)
+      porcelain.tags = convert_tags_to_porcelain(plumbing.tags)
+      porcelain
+    end
+
+    def self.convert_vault_awsiam_cert_x_509_store_to_plumbing(porcelain)
+      if porcelain == nil
+        return nil
+      end
+      plumbing = V1::VaultAWSIAMCertX509Store.new()
+      plumbing.id = (porcelain.id)
+      plumbing.issuedCertTTLMinutes = (porcelain.issuedcertttlminutes)
+      plumbing.name = (porcelain.name)
+      plumbing.namespace = (porcelain.namespace)
+      plumbing.pki_mount_point = (porcelain.pki_mount_point)
+      plumbing.server_address = (porcelain.server_address)
+      plumbing.signing_role = (porcelain.signing_role)
+      plumbing.tags = convert_tags_to_plumbing(porcelain.tags)
+      plumbing
+    end
+    def self.convert_repeated_vault_awsiam_cert_x_509_store_to_plumbing(porcelains)
+      items = Array.new
+      porcelains.each do |porcelain|
+        plumbing = convert_vault_awsiam_cert_x_509_store_to_plumbing(porcelain)
+        items.append(plumbing)
+      end
+      items
+    end
+
+    def self.convert_repeated_vault_awsiam_cert_x_509_store_to_porcelain(plumbings)
+      items = Array.new
+      plumbings.each do |plumbing|
+        porcelain = convert_vault_awsiam_cert_x_509_store_to_porcelain(plumbing)
+        items.append(porcelain)
+      end
+      items
+    end
     def self.convert_vault_awsiam_store_to_porcelain(plumbing)
       if plumbing == nil
         return nil

data/lib/grpc/secret_store_types_pb.rb

@@ -36,8 +36,13 @@ Google::Protobuf::DescriptorPool.generated_pool.build do
         optional :gcp_cert_x_509, :message, 202, "v1.GCPCertX509Store"
         optional :keyfactor_ssh, :message, 210, "v1.KeyfactorSSHStore"
         optional :keyfactor_x_509, :message, 200, "v1.KeyfactorX509Store"
+        optional :strong_vault, :message, 400, "v1.StrongVaultStore"
         optional :vault_awsec_2, :message, 97, "v1.VaultAWSEC2Store"
+        optional :vault_awsec_2_cert_ssh, :message, 98, "v1.VaultAWSEC2CertSSHStore"
+        optional :vault_awsec_2_cert_x_509, :message, 100, "v1.VaultAWSEC2CertX509Store"
         optional :vault_awsiam, :message, 96, "v1.VaultAWSIAMStore"
+        optional :vault_awsiam_cert_ssh, :message, 99, "v1.VaultAWSIAMCertSSHStore"
+        optional :vault_awsiam_cert_x_509, :message, 102, "v1.VaultAWSIAMCertX509Store"
         optional :vault_app_role, :message, 4, "v1.VaultAppRoleStore"
         optional :vault_app_role_cert_ssh, :message, 94, "v1.VaultAppRoleCertSSHStore"
         optional :vault_app_role_cert_x_509, :message, 95, "v1.VaultAppRoleCertX509Store"
@@ -53,6 +58,8 @@ Google::Protobuf::DescriptorPool.generated_pool.build do
       optional :id, :string, 1
       optional :name, :string, 2
       optional :region, :string, 3
+      optional :role_arn, :string, 5
+      optional :role_external_id, :string, 6
       optional :tags, :message, 4, "v1.Tags"
     end
     add_message "v1.AWSCertX509Store" do
@@ -146,6 +153,11 @@ Google::Protobuf::DescriptorPool.generated_pool.build do
       optional :server_address, :string, 3
       optional :tags, :message, 32771, "v1.Tags"
     end
+    add_message "v1.StrongVaultStore" do
+      optional :id, :string, 1
+      optional :name, :string, 2
+      optional :tags, :message, 3, "v1.Tags"
+    end
     add_message "v1.VaultAWSEC2Store" do
       optional :id, :string, 1
       optional :name, :string, 2
@@ -153,6 +165,26 @@ Google::Protobuf::DescriptorPool.generated_pool.build do
       optional :server_address, :string, 3
       optional :tags, :message, 8, "v1.Tags"
     end
+    add_message "v1.VaultAWSEC2CertSSHStore" do
+      optional :id, :string, 1
+      optional :name, :string, 2
+      optional :issuedCertTTLMinutes, :int32, 9
+      optional :namespace, :string, 5
+      optional :server_address, :string, 3
+      optional :signing_role, :string, 7
+      optional :ssh_mount_point, :string, 6
+      optional :tags, :message, 4, "v1.Tags"
+    end
+    add_message "v1.VaultAWSEC2CertX509Store" do
+      optional :id, :string, 1
+      optional :name, :string, 2
+      optional :issuedCertTTLMinutes, :int32, 9
+      optional :namespace, :string, 5
+      optional :pki_mount_point, :string, 6
+      optional :server_address, :string, 3
+      optional :signing_role, :string, 7
+      optional :tags, :message, 4, "v1.Tags"
+    end
     add_message "v1.VaultAWSIAMStore" do
       optional :id, :string, 1
       optional :name, :string, 2
@@ -160,6 +192,26 @@ Google::Protobuf::DescriptorPool.generated_pool.build do
       optional :server_address, :string, 3
       optional :tags, :message, 8, "v1.Tags"
     end
+    add_message "v1.VaultAWSIAMCertSSHStore" do
+      optional :id, :string, 1
+      optional :name, :string, 2
+      optional :issuedCertTTLMinutes, :int32, 9
+      optional :namespace, :string, 5
+      optional :server_address, :string, 3
+      optional :signing_role, :string, 7
+      optional :ssh_mount_point, :string, 6
+      optional :tags, :message, 4, "v1.Tags"
+    end
+    add_message "v1.VaultAWSIAMCertX509Store" do
+      optional :id, :string, 1
+      optional :name, :string, 2
+      optional :issuedCertTTLMinutes, :int32, 9
+      optional :namespace, :string, 5
+      optional :pki_mount_point, :string, 6
+      optional :server_address, :string, 3
+      optional :signing_role, :string, 7
+      optional :tags, :message, 4, "v1.Tags"
+    end
     add_message "v1.VaultAppRoleStore" do
       optional :id, :string, 1
       optional :name, :string, 2
@@ -267,8 +319,13 @@ module V1
   GCPCertX509Store = ::Google::Protobuf::DescriptorPool.generated_pool.lookup("v1.GCPCertX509Store").msgclass
   KeyfactorSSHStore = ::Google::Protobuf::DescriptorPool.generated_pool.lookup("v1.KeyfactorSSHStore").msgclass
   KeyfactorX509Store = ::Google::Protobuf::DescriptorPool.generated_pool.lookup("v1.KeyfactorX509Store").msgclass
+  StrongVaultStore = ::Google::Protobuf::DescriptorPool.generated_pool.lookup("v1.StrongVaultStore").msgclass
   VaultAWSEC2Store = ::Google::Protobuf::DescriptorPool.generated_pool.lookup("v1.VaultAWSEC2Store").msgclass
+  VaultAWSEC2CertSSHStore = ::Google::Protobuf::DescriptorPool.generated_pool.lookup("v1.VaultAWSEC2CertSSHStore").msgclass
+  VaultAWSEC2CertX509Store = ::Google::Protobuf::DescriptorPool.generated_pool.lookup("v1.VaultAWSEC2CertX509Store").msgclass
   VaultAWSIAMStore = ::Google::Protobuf::DescriptorPool.generated_pool.lookup("v1.VaultAWSIAMStore").msgclass
+  VaultAWSIAMCertSSHStore = ::Google::Protobuf::DescriptorPool.generated_pool.lookup("v1.VaultAWSIAMCertSSHStore").msgclass
+  VaultAWSIAMCertX509Store = ::Google::Protobuf::DescriptorPool.generated_pool.lookup("v1.VaultAWSIAMCertX509Store").msgclass
   VaultAppRoleStore = ::Google::Protobuf::DescriptorPool.generated_pool.lookup("v1.VaultAppRoleStore").msgclass
   VaultAppRoleCertSSHStore = ::Google::Protobuf::DescriptorPool.generated_pool.lookup("v1.VaultAppRoleCertSSHStore").msgclass
   VaultAppRoleCertX509Store = ::Google::Protobuf::DescriptorPool.generated_pool.lookup("v1.VaultAppRoleCertX509Store").msgclass

data/lib/models/porcelain.rb

@@ -884,6 +884,10 @@ module SDM
     attr_accessor :name
     # The AWS region to target e.g. us-east-1
     attr_accessor :region
+    # The role to assume after logging in.
+    attr_accessor :role_arn
+    # The external ID to associate with assume role requests. Does nothing if a role ARN is not provided.
+    attr_accessor :role_external_id
     # Tags is a map of key, value pairs.
     attr_accessor :tags
 
@@ -891,11 +895,15 @@ module SDM
       id: nil,
       name: nil,
       region: nil,
+      role_arn: nil,
+      role_external_id: nil,
       tags: nil
     )
       @id = id == nil ? "" : id
       @name = name == nil ? "" : name
       @region = region == nil ? "" : region
+      @role_arn = role_arn == nil ? "" : role_arn
+      @role_external_id = role_external_id == nil ? "" : role_external_id
       @tags = tags == nil ? SDM::_porcelain_zero_value_tags() : tags
     end
 
@@ -15814,6 +15822,34 @@ module SDM
     end
   end
 
+  # StrongVaultStore is currently unstable, and its API may change, or it may be removed, without a major version bump.
+  class StrongVaultStore
+    # Unique identifier of the SecretStore.
+    attr_accessor :id
+    # Unique human-readable name of the SecretStore.
+    attr_accessor :name
+    # Tags is a map of key, value pairs.
+    attr_accessor :tags
+
+    def initialize(
+      id: nil,
+      name: nil,
+      tags: nil
+    )
+      @id = id == nil ? "" : id
+      @name = name == nil ? "" : name
+      @tags = tags == nil ? SDM::_porcelain_zero_value_tags() : tags
+    end
+
+    def to_json(options = {})
+      hash = {}
+      self.instance_variables.each do |var|
+        hash[var.id2name.delete_prefix("@")] = self.instance_variable_get var
+      end
+      hash.to_json
+    end
+  end
+
   class Sybase
     # The bind interface is the IP address to which the port override of a resource is bound (for example, 127.0.0.1). It is automatically generated if not provided and may also be set to one of the ResourceIPAllocationMode constants to select between VNM, loopback, or default allocation.
     attr_accessor :bind_interface
@@ -16264,6 +16300,102 @@ module SDM
     end
   end
 
+  # VaultAWSEC2CertSSHStore is currently unstable, and its API may change, or it may be removed, without a major version bump.
+  class VaultAWSEC2CertSSHStore
+    # Unique identifier of the SecretStore.
+    attr_accessor :id
+    # The lifetime of certificates issued by this CA in minutes. Recommended value is 5.
+    attr_accessor :issuedcertttlminutes
+    # Unique human-readable name of the SecretStore.
+    attr_accessor :name
+    # The namespace to make requests within
+    attr_accessor :namespace
+    # The URL of the Vault to target
+    attr_accessor :server_address
+    # The signing role to be used for signing certificates
+    attr_accessor :signing_role
+    # The mount point of the SSH engine configured with the desired CA
+    attr_accessor :ssh_mount_point
+    # Tags is a map of key, value pairs.
+    attr_accessor :tags
+
+    def initialize(
+      id: nil,
+      issuedcertttlminutes: nil,
+      name: nil,
+      namespace: nil,
+      server_address: nil,
+      signing_role: nil,
+      ssh_mount_point: nil,
+      tags: nil
+    )
+      @id = id == nil ? "" : id
+      @issuedcertttlminutes = issuedcertttlminutes == nil ? 0 : issuedcertttlminutes
+      @name = name == nil ? "" : name
+      @namespace = namespace == nil ? "" : namespace
+      @server_address = server_address == nil ? "" : server_address
+      @signing_role = signing_role == nil ? "" : signing_role
+      @ssh_mount_point = ssh_mount_point == nil ? "" : ssh_mount_point
+      @tags = tags == nil ? SDM::_porcelain_zero_value_tags() : tags
+    end
+
+    def to_json(options = {})
+      hash = {}
+      self.instance_variables.each do |var|
+        hash[var.id2name.delete_prefix("@")] = self.instance_variable_get var
+      end
+      hash.to_json
+    end
+  end
+
+  # VaultAWSEC2CertX509Store is currently unstable, and its API may change, or it may be removed, without a major version bump.
+  class VaultAWSEC2CertX509Store
+    # Unique identifier of the SecretStore.
+    attr_accessor :id
+    # The lifetime of certificates issued by this CA represented in minutes.
+    attr_accessor :issuedcertttlminutes
+    # Unique human-readable name of the SecretStore.
+    attr_accessor :name
+    # The namespace to make requests within
+    attr_accessor :namespace
+    # The mount point of the PKI engine configured with the desired CA
+    attr_accessor :pki_mount_point
+    # The URL of the Vault to target
+    attr_accessor :server_address
+    # The signing role to be used for signing certificates
+    attr_accessor :signing_role
+    # Tags is a map of key, value pairs.
+    attr_accessor :tags
+
+    def initialize(
+      id: nil,
+      issuedcertttlminutes: nil,
+      name: nil,
+      namespace: nil,
+      pki_mount_point: nil,
+      server_address: nil,
+      signing_role: nil,
+      tags: nil
+    )
+      @id = id == nil ? "" : id
+      @issuedcertttlminutes = issuedcertttlminutes == nil ? 0 : issuedcertttlminutes
+      @name = name == nil ? "" : name
+      @namespace = namespace == nil ? "" : namespace
+      @pki_mount_point = pki_mount_point == nil ? "" : pki_mount_point
+      @server_address = server_address == nil ? "" : server_address
+      @signing_role = signing_role == nil ? "" : signing_role
+      @tags = tags == nil ? SDM::_porcelain_zero_value_tags() : tags
+    end
+
+    def to_json(options = {})
+      hash = {}
+      self.instance_variables.each do |var|
+        hash[var.id2name.delete_prefix("@")] = self.instance_variable_get var
+      end
+      hash.to_json
+    end
+  end
+
   class VaultAWSEC2Store
     # Unique identifier of the SecretStore.
     attr_accessor :id
@@ -16299,6 +16431,102 @@ module SDM
     end
   end
 
+  # VaultAWSIAMCertSSHStore is currently unstable, and its API may change, or it may be removed, without a major version bump.
+  class VaultAWSIAMCertSSHStore
+    # Unique identifier of the SecretStore.
+    attr_accessor :id
+    # The lifetime of certificates issued by this CA in minutes. Recommended value is 5.
+    attr_accessor :issuedcertttlminutes
+    # Unique human-readable name of the SecretStore.
+    attr_accessor :name
+    # The namespace to make requests within
+    attr_accessor :namespace
+    # The URL of the Vault to target
+    attr_accessor :server_address
+    # The signing role to be used for signing certificates
+    attr_accessor :signing_role
+    # The mount point of the SSH engine configured with the desired CA
+    attr_accessor :ssh_mount_point
+    # Tags is a map of key, value pairs.
+    attr_accessor :tags
+
+    def initialize(
+      id: nil,
+      issuedcertttlminutes: nil,
+      name: nil,
+      namespace: nil,
+      server_address: nil,
+      signing_role: nil,
+      ssh_mount_point: nil,
+      tags: nil
+    )
+      @id = id == nil ? "" : id
+      @issuedcertttlminutes = issuedcertttlminutes == nil ? 0 : issuedcertttlminutes
+      @name = name == nil ? "" : name
+      @namespace = namespace == nil ? "" : namespace
+      @server_address = server_address == nil ? "" : server_address
+      @signing_role = signing_role == nil ? "" : signing_role
+      @ssh_mount_point = ssh_mount_point == nil ? "" : ssh_mount_point
+      @tags = tags == nil ? SDM::_porcelain_zero_value_tags() : tags
+    end
+
+    def to_json(options = {})
+      hash = {}
+      self.instance_variables.each do |var|
+        hash[var.id2name.delete_prefix("@")] = self.instance_variable_get var
+      end
+      hash.to_json
+    end
+  end
+
+  # VaultAWSIAMCertX509Store is currently unstable, and its API may change, or it may be removed, without a major version bump.
+  class VaultAWSIAMCertX509Store
+    # Unique identifier of the SecretStore.
+    attr_accessor :id
+    # The lifetime of certificates issued by this CA represented in minutes.
+    attr_accessor :issuedcertttlminutes
+    # Unique human-readable name of the SecretStore.
+    attr_accessor :name
+    # The namespace to make requests within
+    attr_accessor :namespace
+    # The mount point of the PKI engine configured with the desired CA
+    attr_accessor :pki_mount_point
+    # The URL of the Vault to target
+    attr_accessor :server_address
+    # The signing role to be used for signing certificates
+    attr_accessor :signing_role
+    # Tags is a map of key, value pairs.
+    attr_accessor :tags
+
+    def initialize(
+      id: nil,
+      issuedcertttlminutes: nil,
+      name: nil,
+      namespace: nil,
+      pki_mount_point: nil,
+      server_address: nil,
+      signing_role: nil,
+      tags: nil
+    )
+      @id = id == nil ? "" : id
+      @issuedcertttlminutes = issuedcertttlminutes == nil ? 0 : issuedcertttlminutes
+      @name = name == nil ? "" : name
+      @namespace = namespace == nil ? "" : namespace
+      @pki_mount_point = pki_mount_point == nil ? "" : pki_mount_point
+      @server_address = server_address == nil ? "" : server_address
+      @signing_role = signing_role == nil ? "" : signing_role
+      @tags = tags == nil ? SDM::_porcelain_zero_value_tags() : tags
+    end
+
+    def to_json(options = {})
+      hash = {}
+      self.instance_variables.each do |var|
+        hash[var.id2name.delete_prefix("@")] = self.instance_variable_get var
+      end
+      hash.to_json
+    end
+  end
+
   class VaultAWSIAMStore
     # Unique identifier of the SecretStore.
     attr_accessor :id

data/lib/strongdm.rb

@@ -30,7 +30,7 @@ module SDM #:nodoc:
     DEFAULT_RETRY_FACTOR = 1.6
     DEFAULT_RETRY_JITTER = 0.2
     API_VERSION = "2025-04-14"
-    USER_AGENT = "strongdm-sdk-ruby/15.22.0"
+    USER_AGENT = "strongdm-sdk-ruby/15.25.0"
     private_constant :DEFAULT_BASE_RETRY_DELAY, :DEFAULT_MAX_RETRY_DELAY, :DEFAULT_RETRY_FACTOR, :DEFAULT_RETRY_JITTER, :API_VERSION, :USER_AGENT
 
     # Creates a new strongDM API client.

data/lib/svc.rb

@@ -6642,11 +6642,16 @@ module SDM #:nodoc:
   # {GCPCertX509Store}
   # {KeyfactorSSHStore}
   # {KeyfactorX509Store}
+  # {StrongVaultStore}
   # {VaultAppRoleStore}
   # {VaultAppRoleCertSSHStore}
   # {VaultAppRoleCertX509Store}
   # {VaultAWSEC2Store}
+  # {VaultAWSEC2CertSSHStore}
+  # {VaultAWSEC2CertX509Store}
   # {VaultAWSIAMStore}
+  # {VaultAWSIAMCertSSHStore}
+  # {VaultAWSIAMCertX509Store}
   # {VaultTLSStore}
   # {VaultTLSCertSSHStore}
   # {VaultTLSCertX509Store}

data/lib/version

@@ -13,5 +13,5 @@
 # limitations under the License.
 #
 module SDM
-  VERSION = "15.22.0"
+  VERSION = "15.25.0"
 end

data/lib/version.rb

@@ -13,5 +13,5 @@
 # limitations under the License.
 #
 module SDM
-  VERSION = "15.22.0"
+  VERSION = "15.25.0"
 end

metadata

@@ -1,14 +1,14 @@
 --- !ruby/object:Gem::Specification
 name: strongdm
 version: !ruby/object:Gem::Version
-  version: 15.22.0
+  version: 15.25.0
 platform: ruby
 authors:
 - strongDM Team
 autorequire: 
 bindir: bin
 cert_chain: []
-date: 2025-10-13 00:00:00.000000000 Z
+date: 2025-10-20 00:00:00.000000000 Z
 dependencies:
 - !ruby/object:Gem::Dependency
   name: grpc
@@ -81,8 +81,8 @@ files:
 - "./.git/logs/HEAD"
 - "./.git/logs/refs/heads/master"
 - "./.git/logs/refs/remotes/origin/HEAD"
-- "./.git/objects/pack/pack-102044dd10f7a14cf9558e47f1b2bf49750dce45.idx"
-- "./.git/objects/pack/pack-102044dd10f7a14cf9558e47f1b2bf49750dce45.pack"
+- "./.git/objects/pack/pack-e9a6bf671b19a0423972e795cd3ba2b74e58d27d.idx"
+- "./.git/objects/pack/pack-e9a6bf671b19a0423972e795cd3ba2b74e58d27d.pack"
 - "./.git/packed-refs"
 - "./.git/refs/heads/master"
 - "./.git/refs/remotes/origin/HEAD"