strongdm 18.4.0 → 18.6.0

checksums.yaml

@@ -1,7 +1,7 @@
 ---
 SHA256:
-  metadata.gz: 6e312c55afaacd140b73b092c2777b01df7d5ff90dd4328fc738ff2248229f99
-  data.tar.gz: 70d26fc1ac2f46b39f610d0f00a956214f162b8636c906b793d7e50d8a49afaa
+  metadata.gz: 520379cac507035abbc6077e6fd28492eff7f6f83e1d1ad79a791b631533aab9
+  data.tar.gz: c017a9fdcd12fc426f2d242f9efe02a8b0b74cef560d528077b2a0dc1339681e
 SHA512:
-  metadata.gz: f110a79f2233c1e799dd08ec7896ab3bc8345cdc55ef4b4ef0031edb81306f8decfb07f8aa24d80fc1f4144a677bf7e8b920d082b76e6deed15dc260a2574bed
-  data.tar.gz: e494440b05f144ac85b3ffe544978d5c61fc942a0a5f1f86c5688db0086b3da0e29714e04629646e17c470dda1d8130e739cfd5976fb2dcc9709ac11f4864fbb
+  metadata.gz: 90162e2fc2fdf0716ee19f9b754419ee692441f35e390173914f5c19853feb116627ee8b3c86f7a3da57064fcf492a50164fd663032bc2e60803fad70df981fa
+  data.tar.gz: b0371c53119321585084a2400e1aa165d6e206dd3c655b93229110ea24d9434f30dcad70d00b00b4e030fe0eb6ef57989746c5725b3fa71001504cbce693451f

data/.git/ORIG_HEAD

@@ -1 +1 @@
-655074ce1cea21d379c7ce989a6b50a43798799c
+444f5f29aed1e539854f76d00874109e790caaf0

data/.git/logs/HEAD

@@ -1,3 +1,3 @@
-0000000000000000000000000000000000000000 655074ce1cea21d379c7ce989a6b50a43798799c root <root@28cc30da8972.(none)> 1792083819 +0000	clone: from github.com:strongdm/strongdm-sdk-ruby.git
-655074ce1cea21d379c7ce989a6b50a43798799c 655074ce1cea21d379c7ce989a6b50a43798799c root <root@28cc30da8972.(none)> 1792083819 +0000	checkout: moving from master to master
-655074ce1cea21d379c7ce989a6b50a43798799c 444f5f29aed1e539854f76d00874109e790caaf0 root <root@28cc30da8972.(none)> 1792083819 +0000	merge origin/development: Fast-forward
+0000000000000000000000000000000000000000 444f5f29aed1e539854f76d00874109e790caaf0 root <root@fd6b4b9a21e5.(none)> 1793806389 +0000	clone: from github.com:strongdm/strongdm-sdk-ruby.git
+444f5f29aed1e539854f76d00874109e790caaf0 444f5f29aed1e539854f76d00874109e790caaf0 root <root@fd6b4b9a21e5.(none)> 1793806389 +0000	checkout: moving from master to master
+444f5f29aed1e539854f76d00874109e790caaf0 a6b441d983548cb71021ef4cfc6929e95cbb7c2d root <root@fd6b4b9a21e5.(none)> 1793806389 +0000	merge origin/development: Fast-forward

data/.git/logs/refs/heads/master

@@ -1,2 +1,2 @@
-0000000000000000000000000000000000000000 655074ce1cea21d379c7ce989a6b50a43798799c root <root@28cc30da8972.(none)> 1792083819 +0000	clone: from github.com:strongdm/strongdm-sdk-ruby.git
-655074ce1cea21d379c7ce989a6b50a43798799c 444f5f29aed1e539854f76d00874109e790caaf0 root <root@28cc30da8972.(none)> 1792083819 +0000	merge origin/development: Fast-forward
+0000000000000000000000000000000000000000 444f5f29aed1e539854f76d00874109e790caaf0 root <root@fd6b4b9a21e5.(none)> 1793806389 +0000	clone: from github.com:strongdm/strongdm-sdk-ruby.git
+444f5f29aed1e539854f76d00874109e790caaf0 a6b441d983548cb71021ef4cfc6929e95cbb7c2d root <root@fd6b4b9a21e5.(none)> 1793806389 +0000	merge origin/development: Fast-forward

data/.git/logs/refs/remotes/origin/HEAD

@@ -1 +1 @@
-0000000000000000000000000000000000000000 655074ce1cea21d379c7ce989a6b50a43798799c root <root@28cc30da8972.(none)> 1792083819 +0000	clone: from github.com:strongdm/strongdm-sdk-ruby.git
+0000000000000000000000000000000000000000 444f5f29aed1e539854f76d00874109e790caaf0 root <root@fd6b4b9a21e5.(none)> 1793806389 +0000	clone: from github.com:strongdm/strongdm-sdk-ruby.git

data/.git/packed-refs

@@ -1,6 +1,6 @@
 # pack-refs with: peeled fully-peeled sorted 
-444f5f29aed1e539854f76d00874109e790caaf0 refs/remotes/origin/development
-655074ce1cea21d379c7ce989a6b50a43798799c refs/remotes/origin/master
+a6b441d983548cb71021ef4cfc6929e95cbb7c2d refs/remotes/origin/development
+444f5f29aed1e539854f76d00874109e790caaf0 refs/remotes/origin/master
 2e4fe8087177ddea9b3991ca499f758384839c89 refs/tags/untagged-84fd83a4484c785cce63
 04f604866214fab4d5663b5171a3e596331577bd refs/tags/v0.9.4
 6f9a7b75b345c65fb554884907b7060680c807b7 refs/tags/v0.9.5
@@ -171,6 +171,7 @@ a9461772e0fec378935e8a68e03da0ab162f747b refs/tags/v18.0.0
 16822777e56defbbd7db369a97fae005424ce340 refs/tags/v18.1.0
 5878fda8566d2784daf5d1ebccabe2665272e846 refs/tags/v18.2.0
 655074ce1cea21d379c7ce989a6b50a43798799c refs/tags/v18.3.0
+444f5f29aed1e539854f76d00874109e790caaf0 refs/tags/v18.4.0
 e0b1ec0134c7015ccb8c14464cc713c20034159e refs/tags/v2.0.0
 62a146d9d56852b2ad14ec5d2796cad158d66e1c refs/tags/v2.1.0
 9de04e628082f4ad0eb9511311479a089d302008 refs/tags/v2.2.0

data/.git/refs/heads/master

@@ -1 +1 @@
-444f5f29aed1e539854f76d00874109e790caaf0
+a6b441d983548cb71021ef4cfc6929e95cbb7c2d

data/lib/grpc/nodes_pb.rb

@@ -130,6 +130,7 @@ Google::Protobuf::DescriptorPool.generated_pool.build do
       optional :tags, :message, 4, "v1.Tags"
       repeated :maintenance_windows, :message, 5, "v1.NodeMaintenanceWindow"
       optional :certificate_authority_id, :string, 6
+      optional :tls_mode, :string, 7
     end
     add_message "v1.NodeMaintenanceWindow" do
       optional :cron_schedule, :string, 1

data/lib/grpc/plumbing.rb

@@ -2991,6 +2991,7 @@ module SDM
       porcelain.max_backoff_duration = convert_duration_to_porcelain(plumbing.max_backoff_duration)
       porcelain.name = (plumbing.name)
       porcelain.node_selector = (plumbing.node_selector)
+      porcelain.path_credentials = (plumbing.path_credentials)
       porcelain.policy = convert_secret_engine_policy_to_porcelain(plumbing.policy)
       porcelain.public_key = (plumbing.public_key)
       porcelain.request_timeout = (plumbing.request_timeout)
@@ -3022,6 +3023,7 @@ module SDM
       plumbing.max_backoff_duration = convert_duration_to_plumbing(porcelain.max_backoff_duration)
       plumbing.name = (porcelain.name)
       plumbing.node_selector = (porcelain.node_selector)
+      plumbing.path_credentials = (porcelain.path_credentials)
       plumbing.policy = convert_secret_engine_policy_to_plumbing(porcelain.policy)
       plumbing.public_key = (porcelain.public_key)
       plumbing.request_timeout = (porcelain.request_timeout)
@@ -13254,6 +13256,7 @@ module SDM
       porcelain.name = (plumbing.name)
       porcelain.node_selector = (plumbing.node_selector)
       porcelain.password = (plumbing.password)
+      porcelain.path_credentials = (plumbing.path_credentials)
       porcelain.policy = convert_secret_engine_policy_to_porcelain(plumbing.policy)
       porcelain.port = (plumbing.port)
       porcelain.public_key = (plumbing.public_key)
@@ -13280,6 +13283,7 @@ module SDM
       plumbing.name = (porcelain.name)
       plumbing.node_selector = (porcelain.node_selector)
       plumbing.password = (porcelain.password)
+      plumbing.path_credentials = (porcelain.path_credentials)
       plumbing.policy = convert_secret_engine_policy_to_plumbing(porcelain.policy)
       plumbing.port = (porcelain.port)
       plumbing.public_key = (porcelain.public_key)
@@ -15163,6 +15167,7 @@ module SDM
       porcelain.name = (plumbing.name)
       porcelain.node_selector = (plumbing.node_selector)
       porcelain.password = (plumbing.password)
+      porcelain.path_credentials = (plumbing.path_credentials)
       porcelain.policy = convert_secret_engine_policy_to_porcelain(plumbing.policy)
       porcelain.port = (plumbing.port)
       porcelain.public_key = (plumbing.public_key)
@@ -15188,6 +15193,7 @@ module SDM
       plumbing.name = (porcelain.name)
       plumbing.node_selector = (porcelain.node_selector)
       plumbing.password = (porcelain.password)
+      plumbing.path_credentials = (porcelain.path_credentials)
       plumbing.policy = convert_secret_engine_policy_to_plumbing(porcelain.policy)
       plumbing.port = (porcelain.port)
       plumbing.public_key = (porcelain.public_key)
@@ -20072,6 +20078,7 @@ module SDM
       porcelain.name = (plumbing.name)
       porcelain.node_selector = (plumbing.node_selector)
       porcelain.password = (plumbing.password)
+      porcelain.path_credentials = (plumbing.path_credentials)
       porcelain.policy = convert_secret_engine_policy_to_porcelain(plumbing.policy)
       porcelain.port = (plumbing.port)
       porcelain.public_key = (plumbing.public_key)
@@ -20098,6 +20105,7 @@ module SDM
       plumbing.name = (porcelain.name)
       plumbing.node_selector = (porcelain.node_selector)
       plumbing.password = (porcelain.password)
+      plumbing.path_credentials = (porcelain.path_credentials)
       plumbing.policy = convert_secret_engine_policy_to_plumbing(porcelain.policy)
       plumbing.port = (porcelain.port)
       plumbing.public_key = (porcelain.public_key)

data/lib/grpc/roles_pb.rb

@@ -74,9 +74,9 @@ Google::Protobuf::DescriptorPool.generated_pool.build do
       optional :tags, :message, 4, "v1.Tags"
       optional :access_rules, :string, 5
       optional :managed_by, :string, 6
-      optional :scope, :message, 7, "v1.RoleScope"
+      optional :conditions, :message, 7, "v1.RoleConditions"
     end
-    add_message "v1.RoleScope" do
+    add_message "v1.RoleConditions" do
       optional :type, :string, 1
       repeated :agents, :string, 2
     end
@@ -95,5 +95,5 @@ module V1
   RoleListRequest = ::Google::Protobuf::DescriptorPool.generated_pool.lookup("v1.RoleListRequest").msgclass
   RoleListResponse = ::Google::Protobuf::DescriptorPool.generated_pool.lookup("v1.RoleListResponse").msgclass
   Role = ::Google::Protobuf::DescriptorPool.generated_pool.lookup("v1.Role").msgclass
-  RoleScope = ::Google::Protobuf::DescriptorPool.generated_pool.lookup("v1.RoleScope").msgclass
+  RoleConditions = ::Google::Protobuf::DescriptorPool.generated_pool.lookup("v1.RoleConditions").msgclass
 end

data/lib/grpc/secret_engine_types_pb.rb

@@ -42,6 +42,7 @@ Google::Protobuf::DescriptorPool.generated_pool.build do
       optional :do_not_validate_timestamps, :bool, 1015
       optional :insecure_tls, :bool, 106
       optional :max_backoff_duration, :message, 1016, "google.protobuf.Duration"
+      optional :path_credentials, :bool, 1017
       optional :policy, :message, 1014, "v1.SecretEnginePolicy"
       optional :request_timeout, :uint32, 104
       optional :start_tls, :bool, 105
@@ -75,6 +76,7 @@ Google::Protobuf::DescriptorPool.generated_pool.build do
       optional :database, :string, 108
       optional :hostname, :string, 101
       optional :password, :string, 103
+      optional :path_credentials, :bool, 1011
       optional :policy, :message, 107, "v1.SecretEnginePolicy"
       optional :port, :uint32, 104
       optional :tls, :bool, 109
@@ -96,6 +98,7 @@ Google::Protobuf::DescriptorPool.generated_pool.build do
       optional :database, :string, 108
       optional :hostname, :string, 101
       optional :password, :string, 103
+      optional :path_credentials, :bool, 1010
       optional :policy, :message, 107, "v1.SecretEnginePolicy"
       optional :port, :uint32, 104
       optional :tls, :bool, 109
@@ -116,6 +119,7 @@ Google::Protobuf::DescriptorPool.generated_pool.build do
       optional :database, :string, 108
       optional :hostname, :string, 101
       optional :password, :string, 103
+      optional :path_credentials, :bool, 1011
       optional :policy, :message, 107, "v1.SecretEnginePolicy"
       optional :port, :uint32, 104
       optional :tls, :bool, 109

data/lib/models/porcelain.rb

@@ -2308,9 +2308,9 @@ module SDM
   class ActiveDirectoryEngine
     # The default time-to-live duration of the password after it's read. Once the ttl has passed, a password will be rotated.
     attr_accessor :after_read_ttl
-    # Distinguished name of object to bind when performing user and group search. Example: cn=vault,ou=Users,dc=example,dc=com
+    # Distinguished name of object to bind when performing user and group search. Example: cn=vault,ou=Users,dc=example,dc=com. With path_credentials it is a secret store path in the resource format path?key=username, otherwise it is the literal username.
     attr_accessor :binddn
-    # Password to use along with binddn when performing user search.
+    # Bindpass is the password to use along with binddn when performing user search. With path_credentials it is a secret store path in the resource format path?key=password, otherwise it is the literal password.
     attr_accessor :bindpass
     # CA certificate to use when verifying LDAP server certificate, must be x509 PEM encoded.
     attr_accessor :certificate
@@ -2331,6 +2331,8 @@ module SDM
     attr_accessor :name
     # node selector is used to narrow down the nodes used to communicate with with secret engine
     attr_accessor :node_selector
+    # PathCredentials is true when username and password are secret store paths, which the control plane stores. When false, they are literal values and the password is rotated and kept in the engine's secret store.
+    attr_accessor :path_credentials
     # Policy for password creation
     attr_accessor :policy
     # Public key linked with a secret engine
@@ -2367,6 +2369,7 @@ module SDM
       max_backoff_duration: nil,
       name: nil,
       node_selector: nil,
+      path_credentials: nil,
       policy: nil,
       public_key: nil,
       request_timeout: nil,
@@ -2391,6 +2394,7 @@ module SDM
       @max_backoff_duration = max_backoff_duration == nil ? nil : max_backoff_duration
       @name = name == nil ? "" : name
       @node_selector = node_selector == nil ? "" : node_selector
+      @path_credentials = path_credentials == nil ? false : path_credentials
       @policy = policy == nil ? nil : policy
       @public_key = public_key == nil ? "" : public_key
       @request_timeout = request_timeout == nil ? 0 : request_timeout
@@ -12504,8 +12508,10 @@ module SDM
     attr_accessor :name
     # node selector is used to narrow down the nodes used to communicate with with secret engine
     attr_accessor :node_selector
-    # Password is the password to connect to the MySQL server.
+    # Password is the password to connect to the MySQL server. With path_credentials it is a secret store path in the resource format path?key=password, otherwise it is the literal password.
     attr_accessor :password
+    # PathCredentials is true when username and password are secret store paths, which the control plane stores. When false, they are literal values and the password is rotated and kept in the engine's secret store.
+    attr_accessor :path_credentials
     # Policy for password creation
     attr_accessor :policy
     # Port is the port number of the MySQL server.
@@ -12524,7 +12530,7 @@ module SDM
     attr_accessor :tls_skip_verify
     # The default password time-to-live duration. Once the ttl has passed, a password will be rotated the next time it's requested.
     attr_accessor :ttl
-    # Username is the username to connect to the MySQL server.
+    # Username is the username to connect to the MySQL server. With path_credentials it is a secret store path in the resource format path?key=username, otherwise it is the literal username.
     attr_accessor :username
 
     def initialize(
@@ -12536,6 +12542,7 @@ module SDM
       name: nil,
       node_selector: nil,
       password: nil,
+      path_credentials: nil,
       policy: nil,
       port: nil,
       public_key: nil,
@@ -12555,6 +12562,7 @@ module SDM
       @name = name == nil ? "" : name
       @node_selector = node_selector == nil ? "" : node_selector
       @password = password == nil ? "" : password
+      @path_credentials = path_credentials == nil ? false : path_credentials
       @policy = policy == nil ? nil : policy
       @port = port == nil ? 0 : port
       @public_key = public_key == nil ? "" : public_key
@@ -14180,8 +14188,10 @@ module SDM
     attr_accessor :name
     # node selector is used to narrow down the nodes used to communicate with with secret engine
     attr_accessor :node_selector
-    # Password is the password to connect to the Postgres server.
+    # Password is the password to connect to the Postgres server. With path_credentials it is a secret store path in the resource format path?key=password, otherwise it is the literal password.
     attr_accessor :password
+    # PathCredentials is true when username and password are secret store paths, which the control plane stores. When false, they are literal values and the password is rotated and kept in the engine's secret store.
+    attr_accessor :path_credentials
     # Policy for password creation
     attr_accessor :policy
     # Port is the port number of the Postgres server.
@@ -14198,7 +14208,7 @@ module SDM
     attr_accessor :tls
     # The default password time-to-live duration. Once the ttl has passed, a password will be rotated the next time it's requested.
     attr_accessor :ttl
-    # Username is the username to connect to the Postgres server.
+    # Username is the username to connect to the Postgres server. With path_credentials it is a secret store path in the resource format path?key=username, otherwise it is the literal username.
     attr_accessor :username
 
     def initialize(
@@ -14210,6 +14220,7 @@ module SDM
       name: nil,
       node_selector: nil,
       password: nil,
+      path_credentials: nil,
       policy: nil,
       port: nil,
       public_key: nil,
@@ -14228,6 +14239,7 @@ module SDM
       @name = name == nil ? "" : name
       @node_selector = node_selector == nil ? "" : node_selector
       @password = password == nil ? "" : password
+      @path_credentials = path_credentials == nil ? false : path_credentials
       @policy = policy == nil ? nil : policy
       @port = port == nil ? 0 : port
       @public_key = public_key == nil ? "" : public_key
@@ -18005,8 +18017,10 @@ module SDM
     attr_accessor :name
     # node selector is used to narrow down the nodes used to communicate with with secret engine
     attr_accessor :node_selector
-    # Password is the password to connect to the SQL Server server.
+    # Password is the password to connect to the SQL Server server. With path_credentials it is a secret store path in the resource format path?key=password, otherwise it is the literal password.
     attr_accessor :password
+    # PathCredentials is true when username and password are secret store paths, which the control plane stores. When false, they are literal values and the password is rotated and kept in the engine's secret store.
+    attr_accessor :path_credentials
     # Policy for password creation
     attr_accessor :policy
     # Port is the port number of the SQL Server server.
@@ -18025,7 +18039,7 @@ module SDM
     attr_accessor :tls_skip_verify
     # The default password time-to-live duration. Once the ttl has passed, a password will be rotated the next time it's requested.
     attr_accessor :ttl
-    # Username is the username to connect to the SQL Server.
+    # Username is the username to connect to the SQL Server. With path_credentials it is a secret store path in the resource format path?key=username, otherwise it is the literal username.
     attr_accessor :username
 
     def initialize(
@@ -18037,6 +18051,7 @@ module SDM
       name: nil,
       node_selector: nil,
       password: nil,
+      path_credentials: nil,
       policy: nil,
       port: nil,
       public_key: nil,
@@ -18056,6 +18071,7 @@ module SDM
       @name = name == nil ? "" : name
       @node_selector = node_selector == nil ? "" : node_selector
       @password = password == nil ? "" : password
+      @path_credentials = path_credentials == nil ? false : path_credentials
       @policy = policy == nil ? nil : policy
       @port = port == nil ? 0 : port
       @public_key = public_key == nil ? "" : public_key

data/lib/strongdm.rb

@@ -31,7 +31,7 @@ module SDM #:nodoc:
     DEFAULT_RETRY_FACTOR = 1.6
     DEFAULT_RETRY_JITTER = 0.2
     API_VERSION = "2025-04-14"
-    USER_AGENT = "strongdm-sdk-ruby/18.4.0"
+    USER_AGENT = "strongdm-sdk-ruby/18.6.0"
     private_constant :DEFAULT_BASE_RETRY_DELAY, :DEFAULT_MAX_RETRY_DELAY, :DEFAULT_RETRY_FACTOR, :DEFAULT_RETRY_JITTER, :API_VERSION, :USER_AGENT
 
     # Creates a new strongDM API client.

data/lib/version

@@ -13,5 +13,5 @@
 # limitations under the License.
 #
 module SDM
-  VERSION = "18.4.0"
+  VERSION = "18.6.0"
 end

data/lib/version.rb

@@ -13,5 +13,5 @@
 # limitations under the License.
 #
 module SDM
-  VERSION = "18.4.0"
+  VERSION = "18.6.0"
 end

metadata

@@ -1,14 +1,14 @@
 --- !ruby/object:Gem::Specification
 name: strongdm
 version: !ruby/object:Gem::Version
-  version: 18.4.0
+  version: 18.6.0
 platform: ruby
 authors:
 - strongDM Team
 autorequire: 
 bindir: bin
 cert_chain: []
-date: 2026-10-15 00:00:00.000000000 Z
+date: 2026-11-04 00:00:00.000000000 Z
 dependencies:
 - !ruby/object:Gem::Dependency
   name: grpc
@@ -81,8 +81,8 @@ files:
 - "./.git/logs/HEAD"
 - "./.git/logs/refs/heads/master"
 - "./.git/logs/refs/remotes/origin/HEAD"
-- "./.git/objects/pack/pack-7e5671efcfb8a5c0f815b05ce9f9652ce3dbdf50.idx"
-- "./.git/objects/pack/pack-7e5671efcfb8a5c0f815b05ce9f9652ce3dbdf50.pack"
+- "./.git/objects/pack/pack-0d1809e029f678c98f624d3ed52cd8853ccdcfc1.idx"
+- "./.git/objects/pack/pack-0d1809e029f678c98f624d3ed52cd8853ccdcfc1.pack"
 - "./.git/packed-refs"
 - "./.git/refs/heads/master"
 - "./.git/refs/remotes/origin/HEAD"