@atensec/pulumi-thoth 0.1.1 → 0.1.3

package/config/vars.ts

@@ -62,6 +62,28 @@ Object.defineProperty(exports, "insecureSkipTlsVerify", {
     enumerable: true,
 });
 
+/**
+ * Organization API key used for non-interactive CI/CD control-plane operations.
+ */
+export declare const orgApiKey: string | undefined;
+Object.defineProperty(exports, "orgApiKey", {
+    get() {
+        return __config.get("orgApiKey");
+    },
+    enumerable: true,
+});
+
+/**
+ * Path to a file containing the organization API key.
+ */
+export declare const orgApiKeyFile: string | undefined;
+Object.defineProperty(exports, "orgApiKeyFile", {
+    get() {
+        return __config.get("orgApiKeyFile");
+    },
+    enumerable: true,
+});
+
 /**
  * Per-request timeout in seconds.
  */

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@atensec/pulumi-thoth",
-  "version": "0.1.1",
+  "version": "0.1.3",
   "description": "Pulumi provider for Aten Security Thoth AI governance control plane.",
   "keywords": [
     "pulumi",

package/provider.ts

@@ -41,6 +41,14 @@ export class Provider extends pulumi.ProviderResource {
      * GovAPI base URL override. When omitted, provider derives https://grid.<tenant_id>.<apex_domain>.
      */
     declare public readonly apiBaseUrl: pulumi.Output<string | undefined>;
+    /**
+     * Organization API key used for non-interactive CI/CD control-plane operations.
+     */
+    declare public readonly orgApiKey: pulumi.Output<string | undefined>;
+    /**
+     * Path to a file containing the organization API key.
+     */
+    declare public readonly orgApiKeyFile: pulumi.Output<string | undefined>;
     /**
      * Tenant slug used in GovAPI route scoping.
      */
@@ -65,6 +73,8 @@ export class Provider extends pulumi.ProviderResource {
             resourceInputs["apexDomain"] = args?.apexDomain;
             resourceInputs["apiBaseUrl"] = args?.apiBaseUrl;
             resourceInputs["insecureSkipTlsVerify"] = pulumi.output(args?.insecureSkipTlsVerify).apply(JSON.stringify);
+            resourceInputs["orgApiKey"] = args?.orgApiKey ? pulumi.secret(args.orgApiKey) : undefined;
+            resourceInputs["orgApiKeyFile"] = args?.orgApiKeyFile;
             resourceInputs["requestTimeoutSeconds"] = pulumi.output(args?.requestTimeoutSeconds).apply(JSON.stringify);
             resourceInputs["retryBaseDelayMs"] = pulumi.output(args?.retryBaseDelayMs).apply(JSON.stringify);
             resourceInputs["retryMaxAttempts"] = pulumi.output(args?.retryMaxAttempts).apply(JSON.stringify);
@@ -72,7 +82,7 @@ export class Provider extends pulumi.ProviderResource {
             resourceInputs["tenantId"] = args?.tenantId;
         }
         opts = pulumi.mergeOptions(utilities.resourceOptsDefaults(), opts);
-        const secretOpts = { additionalSecretOutputs: ["adminBearerToken"] };
+        const secretOpts = { additionalSecretOutputs: ["adminBearerToken", "orgApiKey"] };
         opts = pulumi.mergeOptions(opts, secretOpts);
         super(Provider.__pulumiType, name, resourceInputs, opts);
     }
@@ -111,6 +121,14 @@ export interface ProviderArgs {
      * Skip TLS certificate verification (development/testing only).
      */
     insecureSkipTlsVerify?: pulumi.Input<boolean | undefined>;
+    /**
+     * Organization API key used for non-interactive CI/CD control-plane operations.
+     */
+    orgApiKey?: pulumi.Input<string | undefined>;
+    /**
+     * Path to a file containing the organization API key.
+     */
+    orgApiKeyFile?: pulumi.Input<string | undefined>;
     /**
      * Per-request timeout in seconds.
      */