@atensec/pulumi-thoth 0.1.0

package/governance/approvalDecision.ts

@@ -0,0 +1,141 @@
+// *** WARNING: this file was generated by pulumi-language-nodejs. ***
+// *** Do not edit by hand unless you're certain you know what you are doing! ***
+
+import * as pulumi from "@pulumi/pulumi";
+import * as utilities from "../utilities";
+
+export class ApprovalDecision extends pulumi.CustomResource {
+    /**
+     * Get an existing ApprovalDecision resource's state with the given name, ID, and optional extra
+     * properties used to qualify the lookup.
+     *
+     * @param name The _unique_ name of the resulting resource.
+     * @param id The _unique_ provider ID of the resource to lookup.
+     * @param state Any extra arguments used during the lookup.
+     * @param opts Optional settings to control the behavior of the CustomResource.
+     */
+    public static get(name: string, id: pulumi.Input<pulumi.ID>, state?: ApprovalDecisionState, opts?: pulumi.CustomResourceOptions): ApprovalDecision {
+        return new ApprovalDecision(name, <any>state, { ...opts, id: id });
+    }
+
+    /** @internal */
+    public static readonly __pulumiType = 'thoth:governance/approvalDecision:ApprovalDecision';
+
+    /**
+     * Returns true if the given object is an instance of ApprovalDecision.  This is designed to work even
+     * when multiple copies of the Pulumi SDK have been loaded into the same process.
+     */
+    public static isInstance(obj: any): obj is ApprovalDecision {
+        if (obj === undefined || obj === null) {
+            return false;
+        }
+        return obj['__pulumiType'] === ApprovalDecision.__pulumiType;
+    }
+
+    /**
+     * Approval ID to resolve.
+     */
+    declare public readonly approvalId: pulumi.Output<string>;
+    /**
+     * Decision value: approve or deny.
+     */
+    declare public readonly decision: pulumi.Output<string>;
+    /**
+     * Observed approval reason.
+     */
+    declare public /*out*/ readonly reason: pulumi.Output<string>;
+    /**
+     * Resolver identity returned by GovAPI.
+     */
+    declare public /*out*/ readonly resolvedBy: pulumi.Output<string>;
+    /**
+     * Observed approval status from approvals list endpoint.
+     */
+    declare public /*out*/ readonly status: pulumi.Output<string>;
+    /**
+     * Tenant ID from provider configuration.
+     */
+    declare public /*out*/ readonly tenantId: pulumi.Output<string>;
+
+    /**
+     * Create a ApprovalDecision resource with the given unique name, arguments, and options.
+     *
+     * @param name The _unique_ name of the resource.
+     * @param args The arguments to use to populate this resource's properties.
+     * @param opts A bag of options that control this resource's behavior.
+     */
+    constructor(name: string, args: ApprovalDecisionArgs, opts?: pulumi.CustomResourceOptions)
+    constructor(name: string, argsOrState?: ApprovalDecisionArgs | ApprovalDecisionState, opts?: pulumi.CustomResourceOptions) {
+        let resourceInputs: pulumi.Inputs = {};
+        opts = opts || {};
+        if (opts.id) {
+            const state = argsOrState as ApprovalDecisionState | undefined;
+            resourceInputs["approvalId"] = state?.approvalId;
+            resourceInputs["decision"] = state?.decision;
+            resourceInputs["reason"] = state?.reason;
+            resourceInputs["resolvedBy"] = state?.resolvedBy;
+            resourceInputs["status"] = state?.status;
+            resourceInputs["tenantId"] = state?.tenantId;
+        } else {
+            const args = argsOrState as ApprovalDecisionArgs | undefined;
+            if (args?.approvalId === undefined && !opts.urn) {
+                throw new Error("Missing required property 'approvalId'");
+            }
+            if (args?.decision === undefined && !opts.urn) {
+                throw new Error("Missing required property 'decision'");
+            }
+            resourceInputs["approvalId"] = args?.approvalId;
+            resourceInputs["decision"] = args?.decision;
+            resourceInputs["reason"] = undefined /*out*/;
+            resourceInputs["resolvedBy"] = undefined /*out*/;
+            resourceInputs["status"] = undefined /*out*/;
+            resourceInputs["tenantId"] = undefined /*out*/;
+        }
+        opts = pulumi.mergeOptions(utilities.resourceOptsDefaults(), opts);
+        super(ApprovalDecision.__pulumiType, name, resourceInputs, opts);
+    }
+}
+
+/**
+ * Input properties used for looking up and filtering ApprovalDecision resources.
+ */
+export interface ApprovalDecisionState {
+    /**
+     * Approval ID to resolve.
+     */
+    approvalId?: pulumi.Input<string | undefined>;
+    /**
+     * Decision value: approve or deny.
+     */
+    decision?: pulumi.Input<string | undefined>;
+    /**
+     * Observed approval reason.
+     */
+    reason?: pulumi.Input<string | undefined>;
+    /**
+     * Resolver identity returned by GovAPI.
+     */
+    resolvedBy?: pulumi.Input<string | undefined>;
+    /**
+     * Observed approval status from approvals list endpoint.
+     */
+    status?: pulumi.Input<string | undefined>;
+    /**
+     * Tenant ID from provider configuration.
+     */
+    tenantId?: pulumi.Input<string | undefined>;
+}
+
+/**
+ * The set of arguments for constructing a ApprovalDecision resource.
+ */
+export interface ApprovalDecisionArgs {
+    /**
+     * Approval ID to resolve.
+     */
+    approvalId: pulumi.Input<string>;
+    /**
+     * Decision value: approve or deny.
+     */
+    decision: pulumi.Input<string>;
+}

package/governance/getFeed.ts

@@ -0,0 +1,102 @@
+// *** WARNING: this file was generated by pulumi-language-nodejs. ***
+// *** Do not edit by hand unless you're certain you know what you are doing! ***
+
+import * as pulumi from "@pulumi/pulumi";
+import * as utilities from "../utilities";
+
+export function getFeed(args?: GetFeedArgs, opts?: pulumi.InvokeOptions): Promise<GetFeedResult> {
+    args = args || {};
+    opts = pulumi.mergeOptions(utilities.resourceOptsDefaults(), opts || {});
+    return pulumi.runtime.invoke("thoth:governance/getFeed:getFeed", {
+        "agentId": args.agentId,
+        "callerAgentId": args.callerAgentId,
+        "decision": args.decision,
+        "from": args.from,
+        "page": args.page,
+        "perPage": args.perPage,
+        "reasonCode": args.reasonCode,
+        "search": args.search,
+        "sortBy": args.sortBy,
+        "sortDir": args.sortDir,
+        "to": args.to,
+        "toolName": args.toolName,
+    }, opts);
+}
+
+/**
+ * A collection of arguments for invoking getFeed.
+ */
+export interface GetFeedArgs {
+    agentId?: string;
+    callerAgentId?: string;
+    decision?: string;
+    from?: string;
+    page?: number;
+    perPage?: number;
+    reasonCode?: string;
+    search?: string;
+    sortBy?: string;
+    sortDir?: string;
+    to?: string;
+    toolName?: string;
+}
+
+/**
+ * A collection of values returned by getFeed.
+ */
+export interface GetFeedResult {
+    readonly agentId?: string;
+    readonly callerAgentId?: string;
+    readonly dataJson: string;
+    readonly decision?: string;
+    readonly from?: string;
+    /**
+     * The provider-assigned unique ID for this managed resource.
+     */
+    readonly id: string;
+    readonly page?: number;
+    readonly perPage?: number;
+    readonly reasonCode?: string;
+    readonly search?: string;
+    readonly sortBy?: string;
+    readonly sortDir?: string;
+    readonly to?: string;
+    readonly toolName?: string;
+    readonly total: number;
+}
+export function getFeedOutput(args?: GetFeedOutputArgs, opts?: pulumi.InvokeOutputOptions): pulumi.Output<GetFeedResult> {
+    args = args || {};
+    opts = pulumi.mergeOptions(utilities.resourceOptsDefaults(), opts || {});
+    return pulumi.runtime.invokeOutput("thoth:governance/getFeed:getFeed", {
+        "agentId": args.agentId,
+        "callerAgentId": args.callerAgentId,
+        "decision": args.decision,
+        "from": args.from,
+        "page": args.page,
+        "perPage": args.perPage,
+        "reasonCode": args.reasonCode,
+        "search": args.search,
+        "sortBy": args.sortBy,
+        "sortDir": args.sortDir,
+        "to": args.to,
+        "toolName": args.toolName,
+    }, opts);
+}
+
+/**
+ * A collection of arguments for invoking getFeed.
+ */
+export interface GetFeedOutputArgs {
+    agentId?: pulumi.Input<string | undefined>;
+    callerAgentId?: pulumi.Input<string | undefined>;
+    decision?: pulumi.Input<string | undefined>;
+    from?: pulumi.Input<string | undefined>;
+    page?: pulumi.Input<number | undefined>;
+    perPage?: pulumi.Input<number | undefined>;
+    reasonCode?: pulumi.Input<string | undefined>;
+    search?: pulumi.Input<string | undefined>;
+    sortBy?: pulumi.Input<string | undefined>;
+    sortDir?: pulumi.Input<string | undefined>;
+    to?: pulumi.Input<string | undefined>;
+    toolName?: pulumi.Input<string | undefined>;
+}

package/governance/getTenantSettings.ts

@@ -0,0 +1,33 @@
+// *** WARNING: this file was generated by pulumi-language-nodejs. ***
+// *** Do not edit by hand unless you're certain you know what you are doing! ***
+
+import * as pulumi from "@pulumi/pulumi";
+import * as utilities from "../utilities";
+
+export function getTenantSettings(opts?: pulumi.InvokeOptions): Promise<GetTenantSettingsResult> {
+    opts = pulumi.mergeOptions(utilities.resourceOptsDefaults(), opts || {});
+    return pulumi.runtime.invoke("thoth:governance/getTenantSettings:getTenantSettings", {
+    }, opts);
+}
+
+/**
+ * A collection of values returned by getTenantSettings.
+ */
+export interface GetTenantSettingsResult {
+    readonly complianceProfile: string;
+    /**
+     * The provider-assigned unique ID for this managed resource.
+     */
+    readonly id: string;
+    readonly settingsJson: string;
+    readonly tenantId: string;
+    readonly toolRiskOverrides: {[key: string]: string};
+    readonly updatedAt: string;
+    readonly webhookEnabled: boolean;
+    readonly webhookUrl: string;
+}
+export function getTenantSettingsOutput(opts?: pulumi.InvokeOutputOptions): pulumi.Output<GetTenantSettingsResult> {
+    opts = pulumi.mergeOptions(utilities.resourceOptsDefaults(), opts || {});
+    return pulumi.runtime.invokeOutput("thoth:governance/getTenantSettings:getTenantSettings", {
+    }, opts);
+}

package/governance/getTools.ts

@@ -0,0 +1,52 @@
+// *** WARNING: this file was generated by pulumi-language-nodejs. ***
+// *** Do not edit by hand unless you're certain you know what you are doing! ***
+
+import * as pulumi from "@pulumi/pulumi";
+import * as utilities from "../utilities";
+
+export function getTools(args?: GetToolsArgs, opts?: pulumi.InvokeOptions): Promise<GetToolsResult> {
+    args = args || {};
+    opts = pulumi.mergeOptions(utilities.resourceOptsDefaults(), opts || {});
+    return pulumi.runtime.invoke("thoth:governance/getTools:getTools", {
+        "limit": args.limit,
+        "windowHours": args.windowHours,
+    }, opts);
+}
+
+/**
+ * A collection of arguments for invoking getTools.
+ */
+export interface GetToolsArgs {
+    limit?: number;
+    windowHours?: number;
+}
+
+/**
+ * A collection of values returned by getTools.
+ */
+export interface GetToolsResult {
+    readonly dataJson: string;
+    /**
+     * The provider-assigned unique ID for this managed resource.
+     */
+    readonly id: string;
+    readonly limit?: number;
+    readonly total: number;
+    readonly windowHours?: number;
+}
+export function getToolsOutput(args?: GetToolsOutputArgs, opts?: pulumi.InvokeOutputOptions): pulumi.Output<GetToolsResult> {
+    args = args || {};
+    opts = pulumi.mergeOptions(utilities.resourceOptsDefaults(), opts || {});
+    return pulumi.runtime.invokeOutput("thoth:governance/getTools:getTools", {
+        "limit": args.limit,
+        "windowHours": args.windowHours,
+    }, opts);
+}
+
+/**
+ * A collection of arguments for invoking getTools.
+ */
+export interface GetToolsOutputArgs {
+    limit?: pulumi.Input<number | undefined>;
+    windowHours?: pulumi.Input<number | undefined>;
+}

package/governance/index.ts

@@ -0,0 +1,72 @@
+// *** WARNING: this file was generated by pulumi-language-nodejs. ***
+// *** Do not edit by hand unless you're certain you know what you are doing! ***
+
+import * as pulumi from "@pulumi/pulumi";
+import * as utilities from "../utilities";
+
+// Export members:
+export { ApprovalDecisionArgs, ApprovalDecisionState } from "./approvalDecision";
+export type ApprovalDecision = import("./approvalDecision").ApprovalDecision;
+export const ApprovalDecision: typeof import("./approvalDecision").ApprovalDecision = null as any;
+utilities.lazyLoad(exports, ["ApprovalDecision"], () => require("./approvalDecision"));
+
+export { GetFeedArgs, GetFeedResult, GetFeedOutputArgs } from "./getFeed";
+export const getFeed: typeof import("./getFeed").getFeed = null as any;
+export const getFeedOutput: typeof import("./getFeed").getFeedOutput = null as any;
+utilities.lazyLoad(exports, ["getFeed","getFeedOutput"], () => require("./getFeed"));
+
+export { GetTenantSettingsResult } from "./getTenantSettings";
+export const getTenantSettings: typeof import("./getTenantSettings").getTenantSettings = null as any;
+export const getTenantSettingsOutput: typeof import("./getTenantSettings").getTenantSettingsOutput = null as any;
+utilities.lazyLoad(exports, ["getTenantSettings","getTenantSettingsOutput"], () => require("./getTenantSettings"));
+
+export { GetToolsArgs, GetToolsResult, GetToolsOutputArgs } from "./getTools";
+export const getTools: typeof import("./getTools").getTools = null as any;
+export const getToolsOutput: typeof import("./getTools").getToolsOutput = null as any;
+utilities.lazyLoad(exports, ["getTools","getToolsOutput"], () => require("./getTools"));
+
+export { PackAssignmentArgs, PackAssignmentState } from "./packAssignment";
+export type PackAssignment = import("./packAssignment").PackAssignment;
+export const PackAssignment: typeof import("./packAssignment").PackAssignment = null as any;
+utilities.lazyLoad(exports, ["PackAssignment"], () => require("./packAssignment"));
+
+export { PolicySyncArgs, PolicySyncState } from "./policySync";
+export type PolicySync = import("./policySync").PolicySync;
+export const PolicySync: typeof import("./policySync").PolicySync = null as any;
+utilities.lazyLoad(exports, ["PolicySync"], () => require("./policySync"));
+
+export { TenantSettingsArgs, TenantSettingsState } from "./tenantSettings";
+export type TenantSettings = import("./tenantSettings").TenantSettings;
+export const TenantSettings: typeof import("./tenantSettings").TenantSettings = null as any;
+utilities.lazyLoad(exports, ["TenantSettings"], () => require("./tenantSettings"));
+
+export { WebhookTestArgs, WebhookTestState } from "./webhookTest";
+export type WebhookTest = import("./webhookTest").WebhookTest;
+export const WebhookTest: typeof import("./webhookTest").WebhookTest = null as any;
+utilities.lazyLoad(exports, ["WebhookTest"], () => require("./webhookTest"));
+
+
+const _module = {
+    version: utilities.getVersion(),
+    construct: (name: string, type: string, urn: string): pulumi.Resource => {
+        switch (type) {
+            case "thoth:governance/approvalDecision:ApprovalDecision":
+                return new ApprovalDecision(name, <any>undefined, { urn })
+            case "thoth:governance/packAssignment:PackAssignment":
+                return new PackAssignment(name, <any>undefined, { urn })
+            case "thoth:governance/policySync:PolicySync":
+                return new PolicySync(name, <any>undefined, { urn })
+            case "thoth:governance/tenantSettings:TenantSettings":
+                return new TenantSettings(name, <any>undefined, { urn })
+            case "thoth:governance/webhookTest:WebhookTest":
+                return new WebhookTest(name, <any>undefined, { urn })
+            default:
+                throw new Error(`unknown resource type ${type}`);
+        }
+    },
+};
+pulumi.runtime.registerResourceModule("thoth", "governance/approvalDecision", _module)
+pulumi.runtime.registerResourceModule("thoth", "governance/packAssignment", _module)
+pulumi.runtime.registerResourceModule("thoth", "governance/policySync", _module)
+pulumi.runtime.registerResourceModule("thoth", "governance/tenantSettings", _module)
+pulumi.runtime.registerResourceModule("thoth", "governance/webhookTest", _module)

package/governance/packAssignment.ts

@@ -0,0 +1,213 @@
+// *** WARNING: this file was generated by pulumi-language-nodejs. ***
+// *** Do not edit by hand unless you're certain you know what you are doing! ***
+
+import * as pulumi from "@pulumi/pulumi";
+import * as utilities from "../utilities";
+
+export class PackAssignment extends pulumi.CustomResource {
+    /**
+     * Get an existing PackAssignment resource's state with the given name, ID, and optional extra
+     * properties used to qualify the lookup.
+     *
+     * @param name The _unique_ name of the resulting resource.
+     * @param id The _unique_ provider ID of the resource to lookup.
+     * @param state Any extra arguments used during the lookup.
+     * @param opts Optional settings to control the behavior of the CustomResource.
+     */
+    public static get(name: string, id: pulumi.Input<pulumi.ID>, state?: PackAssignmentState, opts?: pulumi.CustomResourceOptions): PackAssignment {
+        return new PackAssignment(name, <any>state, { ...opts, id: id });
+    }
+
+    /** @internal */
+    public static readonly __pulumiType = 'thoth:governance/packAssignment:PackAssignment';
+
+    /**
+     * Returns true if the given object is an instance of PackAssignment.  This is designed to work even
+     * when multiple copies of the Pulumi SDK have been loaded into the same process.
+     */
+    public static isInstance(obj: any): obj is PackAssignment {
+        if (obj === undefined || obj === null) {
+            return false;
+        }
+        return obj['__pulumiType'] === PackAssignment.__pulumiType;
+    }
+
+    /**
+     * Target agent ID.
+     */
+    declare public readonly agentId: pulumi.Output<string>;
+    /**
+     * Apply timestamp.
+     */
+    declare public /*out*/ readonly appliedAt: pulumi.Output<string>;
+    /**
+     * Principal that applied the pack.
+     */
+    declare public /*out*/ readonly appliedBy: pulumi.Output<string>;
+    /**
+     * Approval policy ID for pack application.
+     */
+    declare public readonly approvalPolicyId: pulumi.Output<string | undefined>;
+    /**
+     * Environment: dev or prod.
+     */
+    declare public readonly environment: pulumi.Output<string | undefined>;
+    /**
+     * Pack override JSON object.
+     */
+    declare public readonly overridesJson: pulumi.Output<string | undefined>;
+    /**
+     * Compliance pack identifier.
+     */
+    declare public readonly packId: pulumi.Output<string>;
+    /**
+     * Regulation family for applied pack.
+     */
+    declare public /*out*/ readonly regulation: pulumi.Output<string>;
+    /**
+     * Revoke timestamp when assignment is removed.
+     */
+    declare public /*out*/ readonly revokedAt: pulumi.Output<string>;
+    /**
+     * Rule version applied by enforcer.
+     */
+    declare public /*out*/ readonly ruleVersion: pulumi.Output<number>;
+    /**
+     * Current assignment status.
+     */
+    declare public /*out*/ readonly status: pulumi.Output<string>;
+    /**
+     * Tenant ID from provider configuration.
+     */
+    declare public /*out*/ readonly tenantId: pulumi.Output<string>;
+
+    /**
+     * Create a PackAssignment resource with the given unique name, arguments, and options.
+     *
+     * @param name The _unique_ name of the resource.
+     * @param args The arguments to use to populate this resource's properties.
+     * @param opts A bag of options that control this resource's behavior.
+     */
+    constructor(name: string, args: PackAssignmentArgs, opts?: pulumi.CustomResourceOptions)
+    constructor(name: string, argsOrState?: PackAssignmentArgs | PackAssignmentState, opts?: pulumi.CustomResourceOptions) {
+        let resourceInputs: pulumi.Inputs = {};
+        opts = opts || {};
+        if (opts.id) {
+            const state = argsOrState as PackAssignmentState | undefined;
+            resourceInputs["agentId"] = state?.agentId;
+            resourceInputs["appliedAt"] = state?.appliedAt;
+            resourceInputs["appliedBy"] = state?.appliedBy;
+            resourceInputs["approvalPolicyId"] = state?.approvalPolicyId;
+            resourceInputs["environment"] = state?.environment;
+            resourceInputs["overridesJson"] = state?.overridesJson;
+            resourceInputs["packId"] = state?.packId;
+            resourceInputs["regulation"] = state?.regulation;
+            resourceInputs["revokedAt"] = state?.revokedAt;
+            resourceInputs["ruleVersion"] = state?.ruleVersion;
+            resourceInputs["status"] = state?.status;
+            resourceInputs["tenantId"] = state?.tenantId;
+        } else {
+            const args = argsOrState as PackAssignmentArgs | undefined;
+            if (args?.agentId === undefined && !opts.urn) {
+                throw new Error("Missing required property 'agentId'");
+            }
+            if (args?.packId === undefined && !opts.urn) {
+                throw new Error("Missing required property 'packId'");
+            }
+            resourceInputs["agentId"] = args?.agentId;
+            resourceInputs["approvalPolicyId"] = args?.approvalPolicyId;
+            resourceInputs["environment"] = args?.environment;
+            resourceInputs["overridesJson"] = args?.overridesJson;
+            resourceInputs["packId"] = args?.packId;
+            resourceInputs["appliedAt"] = undefined /*out*/;
+            resourceInputs["appliedBy"] = undefined /*out*/;
+            resourceInputs["regulation"] = undefined /*out*/;
+            resourceInputs["revokedAt"] = undefined /*out*/;
+            resourceInputs["ruleVersion"] = undefined /*out*/;
+            resourceInputs["status"] = undefined /*out*/;
+            resourceInputs["tenantId"] = undefined /*out*/;
+        }
+        opts = pulumi.mergeOptions(utilities.resourceOptsDefaults(), opts);
+        super(PackAssignment.__pulumiType, name, resourceInputs, opts);
+    }
+}
+
+/**
+ * Input properties used for looking up and filtering PackAssignment resources.
+ */
+export interface PackAssignmentState {
+    /**
+     * Target agent ID.
+     */
+    agentId?: pulumi.Input<string | undefined>;
+    /**
+     * Apply timestamp.
+     */
+    appliedAt?: pulumi.Input<string | undefined>;
+    /**
+     * Principal that applied the pack.
+     */
+    appliedBy?: pulumi.Input<string | undefined>;
+    /**
+     * Approval policy ID for pack application.
+     */
+    approvalPolicyId?: pulumi.Input<string | undefined>;
+    /**
+     * Environment: dev or prod.
+     */
+    environment?: pulumi.Input<string | undefined>;
+    /**
+     * Pack override JSON object.
+     */
+    overridesJson?: pulumi.Input<string | undefined>;
+    /**
+     * Compliance pack identifier.
+     */
+    packId?: pulumi.Input<string | undefined>;
+    /**
+     * Regulation family for applied pack.
+     */
+    regulation?: pulumi.Input<string | undefined>;
+    /**
+     * Revoke timestamp when assignment is removed.
+     */
+    revokedAt?: pulumi.Input<string | undefined>;
+    /**
+     * Rule version applied by enforcer.
+     */
+    ruleVersion?: pulumi.Input<number | undefined>;
+    /**
+     * Current assignment status.
+     */
+    status?: pulumi.Input<string | undefined>;
+    /**
+     * Tenant ID from provider configuration.
+     */
+    tenantId?: pulumi.Input<string | undefined>;
+}
+
+/**
+ * The set of arguments for constructing a PackAssignment resource.
+ */
+export interface PackAssignmentArgs {
+    /**
+     * Target agent ID.
+     */
+    agentId: pulumi.Input<string>;
+    /**
+     * Approval policy ID for pack application.
+     */
+    approvalPolicyId?: pulumi.Input<string | undefined>;
+    /**
+     * Environment: dev or prod.
+     */
+    environment?: pulumi.Input<string | undefined>;
+    /**
+     * Pack override JSON object.
+     */
+    overridesJson?: pulumi.Input<string | undefined>;
+    /**
+     * Compliance pack identifier.
+     */
+    packId: pulumi.Input<string>;
+}