@firestartr/cli 2.11.0-snapshot-patch-claims-5 → 2.11.0-snapshot-org-secrets-03

package/build/index.js

@@ -1,4 +1,4 @@
 [diffend] Oversized file quarantined before diffing.
 name: package/build/index.js
-size: 52664222 bytes
-sha256: 104451a4708f9b6e6b6555bf7271974a155e779cb14d40f376bf4e851cfd3a24
+size: 52712960 bytes
+sha256: c8194ff5dd3d4fd89d78ca815075ad7d323eb80e7bd4f3ea0e3f1c244b1e4063

package/build/packages/cdk8s_renderer/imports/firestartr.dev.d.ts

@@ -522,6 +522,497 @@ export declare enum FirestartrGithubMembershipSpecContextProviderRefKind {
     /** FirestartrProviderConfig */
     FIRESTARTR_PROVIDER_CONFIG = "FirestartrProviderConfig"
 }
+/**
+ * A resource to handle GitHub Organization Actions Secrets.
+ *
+ * @schema FirestartrGithubOrganizationSecretSection
+ */
+export declare class FirestartrGithubOrganizationSecretSection extends ApiObject {
+    /**
+     * Returns the apiVersion and kind for "FirestartrGithubOrganizationSecretSection"
+     */
+    static readonly GVK: GroupVersionKind;
+    /**
+     * Renders a Kubernetes manifest for "FirestartrGithubOrganizationSecretSection".
+     *
+     * This can be used to inline resource manifests inside other objects (e.g. as templates).
+     *
+     * @param props initialization props
+     */
+    static manifest(props: FirestartrGithubOrganizationSecretSectionProps): any;
+    /**
+     * Defines a "FirestartrGithubOrganizationSecretSection" API object
+     * @param scope the scope in which to define this object
+     * @param id a scope-local name for the object
+     * @param props initialization props
+     */
+    constructor(scope: Construct, id: string, props: FirestartrGithubOrganizationSecretSectionProps);
+    /**
+     * Renders the object to Kubernetes JSON.
+     */
+    toJson(): any;
+}
+/**
+ * A resource to handle GitHub Organization Actions Secrets.
+ *
+ * @schema FirestartrGithubOrganizationSecretSection
+ */
+export interface FirestartrGithubOrganizationSecretSectionProps {
+    /**
+     * @schema FirestartrGithubOrganizationSecretSection#metadata
+     */
+    readonly metadata: ApiObjectMetadata;
+    /**
+     * @schema FirestartrGithubOrganizationSecretSection#spec
+     */
+    readonly spec: FirestartrGithubOrganizationSecretSectionSpec;
+}
+/**
+ * Converts an object of type 'FirestartrGithubOrganizationSecretSectionProps' to JSON representation.
+ */
+export declare function toJson_FirestartrGithubOrganizationSecretSectionProps(obj: FirestartrGithubOrganizationSecretSectionProps | undefined): Record<string, any> | undefined;
+/**
+ * @schema FirestartrGithubOrganizationSecretSectionSpec
+ */
+export interface FirestartrGithubOrganizationSecretSectionSpec {
+    /**
+     * GitHub organization targeted by this resource
+     *
+     * @schema FirestartrGithubOrganizationSecretSectionSpec#org
+     */
+    readonly org: string;
+    /**
+     * A map of secret types, each containing a list of secrets.
+     *
+     * @schema FirestartrGithubOrganizationSecretSectionSpec#secrets
+     */
+    readonly secrets: FirestartrGithubOrganizationSecretSectionSpecSecrets;
+    /**
+     * @schema FirestartrGithubOrganizationSecretSectionSpec#context
+     */
+    readonly context: FirestartrGithubOrganizationSecretSectionSpecContext;
+    /**
+     * @schema FirestartrGithubOrganizationSecretSectionSpec#firestartr
+     */
+    readonly firestartr: FirestartrGithubOrganizationSecretSectionSpecFirestartr;
+    /**
+     * @schema FirestartrGithubOrganizationSecretSectionSpec#writeConnectionSecretToRef
+     */
+    readonly writeConnectionSecretToRef: FirestartrGithubOrganizationSecretSectionSpecWriteConnectionSecretToRef;
+}
+/**
+ * Converts an object of type 'FirestartrGithubOrganizationSecretSectionSpec' to JSON representation.
+ */
+export declare function toJson_FirestartrGithubOrganizationSecretSectionSpec(obj: FirestartrGithubOrganizationSecretSectionSpec | undefined): Record<string, any> | undefined;
+/**
+ * A map of secret types, each containing a list of secrets.
+ *
+ * @schema FirestartrGithubOrganizationSecretSectionSpecSecrets
+ */
+export interface FirestartrGithubOrganizationSecretSectionSpecSecrets {
+    /**
+     * @schema FirestartrGithubOrganizationSecretSectionSpecSecrets#actions
+     */
+    readonly actions?: FirestartrGithubOrganizationSecretSectionSpecSecretsActions[];
+    /**
+     * @schema FirestartrGithubOrganizationSecretSectionSpecSecrets#codespaces
+     */
+    readonly codespaces?: FirestartrGithubOrganizationSecretSectionSpecSecretsCodespaces[];
+    /**
+     * @schema FirestartrGithubOrganizationSecretSectionSpecSecrets#dependabot
+     */
+    readonly dependabot?: FirestartrGithubOrganizationSecretSectionSpecSecretsDependabot[];
+}
+/**
+ * Converts an object of type 'FirestartrGithubOrganizationSecretSectionSpecSecrets' to JSON representation.
+ */
+export declare function toJson_FirestartrGithubOrganizationSecretSectionSpecSecrets(obj: FirestartrGithubOrganizationSecretSectionSpecSecrets | undefined): Record<string, any> | undefined;
+/**
+ * @schema FirestartrGithubOrganizationSecretSectionSpecContext
+ */
+export interface FirestartrGithubOrganizationSecretSectionSpecContext {
+    /**
+     * @schema FirestartrGithubOrganizationSecretSectionSpecContext#backend
+     */
+    readonly backend: FirestartrGithubOrganizationSecretSectionSpecContextBackend;
+    /**
+     * @schema FirestartrGithubOrganizationSecretSectionSpecContext#provider
+     */
+    readonly provider: FirestartrGithubOrganizationSecretSectionSpecContextProvider;
+}
+/**
+ * Converts an object of type 'FirestartrGithubOrganizationSecretSectionSpecContext' to JSON representation.
+ */
+export declare function toJson_FirestartrGithubOrganizationSecretSectionSpecContext(obj: FirestartrGithubOrganizationSecretSectionSpecContext | undefined): Record<string, any> | undefined;
+/**
+ * @schema FirestartrGithubOrganizationSecretSectionSpecFirestartr
+ */
+export interface FirestartrGithubOrganizationSecretSectionSpecFirestartr {
+    /**
+     * @schema FirestartrGithubOrganizationSecretSectionSpecFirestartr#tfStateKey
+     */
+    readonly tfStateKey: string;
+}
+/**
+ * Converts an object of type 'FirestartrGithubOrganizationSecretSectionSpecFirestartr' to JSON representation.
+ */
+export declare function toJson_FirestartrGithubOrganizationSecretSectionSpecFirestartr(obj: FirestartrGithubOrganizationSecretSectionSpecFirestartr | undefined): Record<string, any> | undefined;
+/**
+ * @schema FirestartrGithubOrganizationSecretSectionSpecWriteConnectionSecretToRef
+ */
+export interface FirestartrGithubOrganizationSecretSectionSpecWriteConnectionSecretToRef {
+    /**
+     * @schema FirestartrGithubOrganizationSecretSectionSpecWriteConnectionSecretToRef#name
+     */
+    readonly name: string;
+    /**
+     * @schema FirestartrGithubOrganizationSecretSectionSpecWriteConnectionSecretToRef#outputs
+     */
+    readonly outputs: FirestartrGithubOrganizationSecretSectionSpecWriteConnectionSecretToRefOutputs[];
+}
+/**
+ * Converts an object of type 'FirestartrGithubOrganizationSecretSectionSpecWriteConnectionSecretToRef' to JSON representation.
+ */
+export declare function toJson_FirestartrGithubOrganizationSecretSectionSpecWriteConnectionSecretToRef(obj: FirestartrGithubOrganizationSecretSectionSpecWriteConnectionSecretToRef | undefined): Record<string, any> | undefined;
+/**
+ * @schema FirestartrGithubOrganizationSecretSectionSpecSecretsActions
+ */
+export interface FirestartrGithubOrganizationSecretSectionSpecSecretsActions {
+    /**
+     * The name of the secret.
+     *
+     * @schema FirestartrGithubOrganizationSecretSectionSpecSecretsActions#name
+     */
+    readonly name: string;
+    /**
+     * A reference to the Kubernetes Secret resource that contains the value.
+     *
+     * @schema FirestartrGithubOrganizationSecretSectionSpecSecretsActions#ref
+     */
+    readonly ref: FirestartrGithubOrganizationSecretSectionSpecSecretsActionsRef;
+    /**
+     * Which repositories can access the secret.
+     *
+     * @schema FirestartrGithubOrganizationSecretSectionSpecSecretsActions#visibility
+     */
+    readonly visibility?: FirestartrGithubOrganizationSecretSectionSpecSecretsActionsVisibility;
+    /**
+     * List of repository names when visibility is selected.
+     *
+     * @schema FirestartrGithubOrganizationSecretSectionSpecSecretsActions#selectedRepositories
+     */
+    readonly selectedRepositories?: string[];
+}
+/**
+ * Converts an object of type 'FirestartrGithubOrganizationSecretSectionSpecSecretsActions' to JSON representation.
+ */
+export declare function toJson_FirestartrGithubOrganizationSecretSectionSpecSecretsActions(obj: FirestartrGithubOrganizationSecretSectionSpecSecretsActions | undefined): Record<string, any> | undefined;
+/**
+ * @schema FirestartrGithubOrganizationSecretSectionSpecSecretsCodespaces
+ */
+export interface FirestartrGithubOrganizationSecretSectionSpecSecretsCodespaces {
+    /**
+     * The name of the secret.
+     *
+     * @schema FirestartrGithubOrganizationSecretSectionSpecSecretsCodespaces#name
+     */
+    readonly name: string;
+    /**
+     * A reference to the Kubernetes Secret resource that contains the value.
+     *
+     * @schema FirestartrGithubOrganizationSecretSectionSpecSecretsCodespaces#ref
+     */
+    readonly ref: FirestartrGithubOrganizationSecretSectionSpecSecretsCodespacesRef;
+    /**
+     * Which repositories can access the secret.
+     *
+     * @schema FirestartrGithubOrganizationSecretSectionSpecSecretsCodespaces#visibility
+     */
+    readonly visibility?: FirestartrGithubOrganizationSecretSectionSpecSecretsCodespacesVisibility;
+    /**
+     * List of repository names when visibility is selected.
+     *
+     * @schema FirestartrGithubOrganizationSecretSectionSpecSecretsCodespaces#selectedRepositories
+     */
+    readonly selectedRepositories?: string[];
+}
+/**
+ * Converts an object of type 'FirestartrGithubOrganizationSecretSectionSpecSecretsCodespaces' to JSON representation.
+ */
+export declare function toJson_FirestartrGithubOrganizationSecretSectionSpecSecretsCodespaces(obj: FirestartrGithubOrganizationSecretSectionSpecSecretsCodespaces | undefined): Record<string, any> | undefined;
+/**
+ * @schema FirestartrGithubOrganizationSecretSectionSpecSecretsDependabot
+ */
+export interface FirestartrGithubOrganizationSecretSectionSpecSecretsDependabot {
+    /**
+     * The name of the secret.
+     *
+     * @schema FirestartrGithubOrganizationSecretSectionSpecSecretsDependabot#name
+     */
+    readonly name: string;
+    /**
+     * A reference to the Kubernetes Secret resource that contains the value.
+     *
+     * @schema FirestartrGithubOrganizationSecretSectionSpecSecretsDependabot#ref
+     */
+    readonly ref: FirestartrGithubOrganizationSecretSectionSpecSecretsDependabotRef;
+    /**
+     * Which repositories can access the secret.
+     *
+     * @schema FirestartrGithubOrganizationSecretSectionSpecSecretsDependabot#visibility
+     */
+    readonly visibility?: FirestartrGithubOrganizationSecretSectionSpecSecretsDependabotVisibility;
+    /**
+     * List of repository names when visibility is selected.
+     *
+     * @schema FirestartrGithubOrganizationSecretSectionSpecSecretsDependabot#selectedRepositories
+     */
+    readonly selectedRepositories?: string[];
+}
+/**
+ * Converts an object of type 'FirestartrGithubOrganizationSecretSectionSpecSecretsDependabot' to JSON representation.
+ */
+export declare function toJson_FirestartrGithubOrganizationSecretSectionSpecSecretsDependabot(obj: FirestartrGithubOrganizationSecretSectionSpecSecretsDependabot | undefined): Record<string, any> | undefined;
+/**
+ * @schema FirestartrGithubOrganizationSecretSectionSpecContextBackend
+ */
+export interface FirestartrGithubOrganizationSecretSectionSpecContextBackend {
+    /**
+     * @schema FirestartrGithubOrganizationSecretSectionSpecContextBackend#ref
+     */
+    readonly ref: FirestartrGithubOrganizationSecretSectionSpecContextBackendRef;
+}
+/**
+ * Converts an object of type 'FirestartrGithubOrganizationSecretSectionSpecContextBackend' to JSON representation.
+ */
+export declare function toJson_FirestartrGithubOrganizationSecretSectionSpecContextBackend(obj: FirestartrGithubOrganizationSecretSectionSpecContextBackend | undefined): Record<string, any> | undefined;
+/**
+ * @schema FirestartrGithubOrganizationSecretSectionSpecContextProvider
+ */
+export interface FirestartrGithubOrganizationSecretSectionSpecContextProvider {
+    /**
+     * @schema FirestartrGithubOrganizationSecretSectionSpecContextProvider#ref
+     */
+    readonly ref: FirestartrGithubOrganizationSecretSectionSpecContextProviderRef;
+}
+/**
+ * Converts an object of type 'FirestartrGithubOrganizationSecretSectionSpecContextProvider' to JSON representation.
+ */
+export declare function toJson_FirestartrGithubOrganizationSecretSectionSpecContextProvider(obj: FirestartrGithubOrganizationSecretSectionSpecContextProvider | undefined): Record<string, any> | undefined;
+/**
+ * @schema FirestartrGithubOrganizationSecretSectionSpecWriteConnectionSecretToRefOutputs
+ */
+export interface FirestartrGithubOrganizationSecretSectionSpecWriteConnectionSecretToRefOutputs {
+    /**
+     * @schema FirestartrGithubOrganizationSecretSectionSpecWriteConnectionSecretToRefOutputs#key
+     */
+    readonly key: string;
+}
+/**
+ * Converts an object of type 'FirestartrGithubOrganizationSecretSectionSpecWriteConnectionSecretToRefOutputs' to JSON representation.
+ */
+export declare function toJson_FirestartrGithubOrganizationSecretSectionSpecWriteConnectionSecretToRefOutputs(obj: FirestartrGithubOrganizationSecretSectionSpecWriteConnectionSecretToRefOutputs | undefined): Record<string, any> | undefined;
+/**
+ * A reference to the Kubernetes Secret resource that contains the value.
+ *
+ * @schema FirestartrGithubOrganizationSecretSectionSpecSecretsActionsRef
+ */
+export interface FirestartrGithubOrganizationSecretSectionSpecSecretsActionsRef {
+    /**
+     * The type of Kubernetes resource to reference.
+     *
+     * @schema FirestartrGithubOrganizationSecretSectionSpecSecretsActionsRef#kind
+     */
+    readonly kind: FirestartrGithubOrganizationSecretSectionSpecSecretsActionsRefKind;
+    /**
+     * The name of the Kubernetes Secret resource.
+     *
+     * @schema FirestartrGithubOrganizationSecretSectionSpecSecretsActionsRef#name
+     */
+    readonly name: string;
+    /**
+     * The key within the Kubernetes Secret data.
+     *
+     * @schema FirestartrGithubOrganizationSecretSectionSpecSecretsActionsRef#key
+     */
+    readonly key: string;
+}
+/**
+ * Converts an object of type 'FirestartrGithubOrganizationSecretSectionSpecSecretsActionsRef' to JSON representation.
+ */
+export declare function toJson_FirestartrGithubOrganizationSecretSectionSpecSecretsActionsRef(obj: FirestartrGithubOrganizationSecretSectionSpecSecretsActionsRef | undefined): Record<string, any> | undefined;
+/**
+ * Which repositories can access the secret.
+ *
+ * @schema FirestartrGithubOrganizationSecretSectionSpecSecretsActionsVisibility
+ */
+export declare enum FirestartrGithubOrganizationSecretSectionSpecSecretsActionsVisibility {
+    /** all */
+    ALL = "all",
+    /** selected */
+    SELECTED = "selected",
+    /** private */
+    PRIVATE = "private"
+}
+/**
+ * A reference to the Kubernetes Secret resource that contains the value.
+ *
+ * @schema FirestartrGithubOrganizationSecretSectionSpecSecretsCodespacesRef
+ */
+export interface FirestartrGithubOrganizationSecretSectionSpecSecretsCodespacesRef {
+    /**
+     * The type of Kubernetes resource to reference.
+     *
+     * @schema FirestartrGithubOrganizationSecretSectionSpecSecretsCodespacesRef#kind
+     */
+    readonly kind: FirestartrGithubOrganizationSecretSectionSpecSecretsCodespacesRefKind;
+    /**
+     * The name of the Kubernetes Secret resource.
+     *
+     * @schema FirestartrGithubOrganizationSecretSectionSpecSecretsCodespacesRef#name
+     */
+    readonly name: string;
+    /**
+     * The key within the Kubernetes Secret data.
+     *
+     * @schema FirestartrGithubOrganizationSecretSectionSpecSecretsCodespacesRef#key
+     */
+    readonly key: string;
+}
+/**
+ * Converts an object of type 'FirestartrGithubOrganizationSecretSectionSpecSecretsCodespacesRef' to JSON representation.
+ */
+export declare function toJson_FirestartrGithubOrganizationSecretSectionSpecSecretsCodespacesRef(obj: FirestartrGithubOrganizationSecretSectionSpecSecretsCodespacesRef | undefined): Record<string, any> | undefined;
+/**
+ * Which repositories can access the secret.
+ *
+ * @schema FirestartrGithubOrganizationSecretSectionSpecSecretsCodespacesVisibility
+ */
+export declare enum FirestartrGithubOrganizationSecretSectionSpecSecretsCodespacesVisibility {
+    /** all */
+    ALL = "all",
+    /** selected */
+    SELECTED = "selected",
+    /** private */
+    PRIVATE = "private"
+}
+/**
+ * A reference to the Kubernetes Secret resource that contains the value.
+ *
+ * @schema FirestartrGithubOrganizationSecretSectionSpecSecretsDependabotRef
+ */
+export interface FirestartrGithubOrganizationSecretSectionSpecSecretsDependabotRef {
+    /**
+     * The type of Kubernetes resource to reference.
+     *
+     * @schema FirestartrGithubOrganizationSecretSectionSpecSecretsDependabotRef#kind
+     */
+    readonly kind: FirestartrGithubOrganizationSecretSectionSpecSecretsDependabotRefKind;
+    /**
+     * The name of the Kubernetes Secret resource.
+     *
+     * @schema FirestartrGithubOrganizationSecretSectionSpecSecretsDependabotRef#name
+     */
+    readonly name: string;
+    /**
+     * The key within the Kubernetes Secret data.
+     *
+     * @schema FirestartrGithubOrganizationSecretSectionSpecSecretsDependabotRef#key
+     */
+    readonly key: string;
+}
+/**
+ * Converts an object of type 'FirestartrGithubOrganizationSecretSectionSpecSecretsDependabotRef' to JSON representation.
+ */
+export declare function toJson_FirestartrGithubOrganizationSecretSectionSpecSecretsDependabotRef(obj: FirestartrGithubOrganizationSecretSectionSpecSecretsDependabotRef | undefined): Record<string, any> | undefined;
+/**
+ * Which repositories can access the secret.
+ *
+ * @schema FirestartrGithubOrganizationSecretSectionSpecSecretsDependabotVisibility
+ */
+export declare enum FirestartrGithubOrganizationSecretSectionSpecSecretsDependabotVisibility {
+    /** all */
+    ALL = "all",
+    /** selected */
+    SELECTED = "selected",
+    /** private */
+    PRIVATE = "private"
+}
+/**
+ * @schema FirestartrGithubOrganizationSecretSectionSpecContextBackendRef
+ */
+export interface FirestartrGithubOrganizationSecretSectionSpecContextBackendRef {
+    /**
+     * @schema FirestartrGithubOrganizationSecretSectionSpecContextBackendRef#kind
+     */
+    readonly kind: FirestartrGithubOrganizationSecretSectionSpecContextBackendRefKind;
+    /**
+     * @schema FirestartrGithubOrganizationSecretSectionSpecContextBackendRef#name
+     */
+    readonly name: string;
+}
+/**
+ * Converts an object of type 'FirestartrGithubOrganizationSecretSectionSpecContextBackendRef' to JSON representation.
+ */
+export declare function toJson_FirestartrGithubOrganizationSecretSectionSpecContextBackendRef(obj: FirestartrGithubOrganizationSecretSectionSpecContextBackendRef | undefined): Record<string, any> | undefined;
+/**
+ * @schema FirestartrGithubOrganizationSecretSectionSpecContextProviderRef
+ */
+export interface FirestartrGithubOrganizationSecretSectionSpecContextProviderRef {
+    /**
+     * @schema FirestartrGithubOrganizationSecretSectionSpecContextProviderRef#kind
+     */
+    readonly kind: FirestartrGithubOrganizationSecretSectionSpecContextProviderRefKind;
+    /**
+     * @schema FirestartrGithubOrganizationSecretSectionSpecContextProviderRef#name
+     */
+    readonly name: string;
+}
+/**
+ * Converts an object of type 'FirestartrGithubOrganizationSecretSectionSpecContextProviderRef' to JSON representation.
+ */
+export declare function toJson_FirestartrGithubOrganizationSecretSectionSpecContextProviderRef(obj: FirestartrGithubOrganizationSecretSectionSpecContextProviderRef | undefined): Record<string, any> | undefined;
+/**
+ * The type of Kubernetes resource to reference.
+ *
+ * @schema FirestartrGithubOrganizationSecretSectionSpecSecretsActionsRefKind
+ */
+export declare enum FirestartrGithubOrganizationSecretSectionSpecSecretsActionsRefKind {
+    /** Secret */
+    SECRET = "Secret"
+}
+/**
+ * The type of Kubernetes resource to reference.
+ *
+ * @schema FirestartrGithubOrganizationSecretSectionSpecSecretsCodespacesRefKind
+ */
+export declare enum FirestartrGithubOrganizationSecretSectionSpecSecretsCodespacesRefKind {
+    /** Secret */
+    SECRET = "Secret"
+}
+/**
+ * The type of Kubernetes resource to reference.
+ *
+ * @schema FirestartrGithubOrganizationSecretSectionSpecSecretsDependabotRefKind
+ */
+export declare enum FirestartrGithubOrganizationSecretSectionSpecSecretsDependabotRefKind {
+    /** Secret */
+    SECRET = "Secret"
+}
+/**
+ * @schema FirestartrGithubOrganizationSecretSectionSpecContextBackendRefKind
+ */
+export declare enum FirestartrGithubOrganizationSecretSectionSpecContextBackendRefKind {
+    /** FirestartrProviderConfig */
+    FIRESTARTR_PROVIDER_CONFIG = "FirestartrProviderConfig"
+}
+/**
+ * @schema FirestartrGithubOrganizationSecretSectionSpecContextProviderRefKind
+ */
+export declare enum FirestartrGithubOrganizationSecretSectionSpecContextProviderRefKind {
+    /** FirestartrProviderConfig */
+    FIRESTARTR_PROVIDER_CONFIG = "FirestartrProviderConfig"
+}
 /**
  * A resource to handle GitHub Organization Settings.
  *

package/build/packages/cdk8s_renderer/src/charts/catalog/groupChart.d.ts

@@ -12,7 +12,7 @@ export declare class CatalogGroupChart extends BaseCatalogChart {
             };
         };
         spec: {
-            type: "business-unit" | "team";
+            type: "team" | "business-unit";
             profile: {
                 displayName: string;
                 email: string;

package/build/packages/cdk8s_renderer/src/charts/github/index.d.ts

@@ -4,3 +4,4 @@ export { GithubRepositoryChart } from './repositoryChart';
 export { GithubOrgWebhookChart } from './orgWebhookChart';
 export { GithubOrgSettingsChart } from './orgSettingsChart';
 export { GithubOrgVariableSectionChart } from './orgVariableSectionChart';
+export { GithubOrgSecretSectionChart } from './orgSecretSectionChart';

package/build/packages/cdk8s_renderer/src/charts/github/orgSecretSectionChart.d.ts

@@ -0,0 +1,8 @@
+import { FirestartrGithubOrganizationSecretSection, FirestartrGithubOrganizationSecretSectionProps } from '../../../imports/firestartr.dev';
+import { IUnitializedStateKey } from '../../claims/base';
+import { BaseGithubChart } from './base';
+export declare class GithubOrgSecretSectionChart extends BaseGithubChart {
+    template(): FirestartrGithubOrganizationSecretSectionProps | IUnitializedStateKey;
+    gvk(): import("cdk8s").GroupVersionKind;
+    instanceApiObject(template: any): FirestartrGithubOrganizationSecretSection;
+}

package/build/packages/cdk8s_renderer/src/charts/index.d.ts

@@ -1,4 +1,4 @@
-import { GithubGroupChart, GithubMembershipChart, GithubRepositoryChart, GithubOrgWebhookChart, GithubOrgSettingsChart, GithubOrgVariableSectionChart } from './github';
+import { GithubGroupChart, GithubMembershipChart, GithubRepositoryChart, GithubOrgWebhookChart, GithubOrgSettingsChart, GithubOrgVariableSectionChart, GithubOrgSecretSectionChart } from './github';
 import { CatalogComponentChart, CatalogDomainChart, CatalogGroupChart, CatalogSystemChart, CatalogUserChart, CatalogTFWorkspaceChart, CatalogArgoDeployChart, CatalogSecretsChart, CatalogOrgWebhookChart, CatalogApiChart } from './catalog';
 import { TFWorkspaceChart } from './workspaces/tfworkspaceChart';
 import { ArgoDeployChart } from './argocd/argodeployChart';
@@ -23,5 +23,6 @@ declare const _default: {
     GithubOrgWebhookChart: typeof GithubOrgWebhookChart;
     GithubOrgSettingsChart: typeof GithubOrgSettingsChart;
     GithubOrgVariableSectionChart: typeof GithubOrgVariableSectionChart;
+    GithubOrgSecretSectionChart: typeof GithubOrgSecretSectionChart;
 };
 export default _default;

package/build/packages/cdk8s_renderer/src/claims/base/schemas/index.d.ts

@@ -998,6 +998,30 @@ declare const schemas: {
                                 }[];
                             };
                         };
+                        org_secrets: {
+                            type: string;
+                            properties: {
+                                actions: {
+                                    type: string;
+                                    items: {
+                                        $ref: string;
+                                    };
+                                };
+                                codespaces: {
+                                    type: string;
+                                    items: {
+                                        $ref: string;
+                                    };
+                                };
+                                dependabot: {
+                                    type: string;
+                                    items: {
+                                        $ref: string;
+                                    };
+                                };
+                            };
+                            additionalProperties: boolean;
+                        };
                     };
                     additionalProperties: boolean;
                     required: string[];
@@ -1168,6 +1192,71 @@ declare const schemas: {
                 };
             };
         };
+    } | {
+        $schema: string;
+        $id: string;
+        definitions: {
+            GithubOrgClaimSecrets: {
+                $id: string;
+                type: string;
+                description: string;
+                properties: {
+                    actions: {
+                        type: string;
+                        items: {
+                            $ref: string;
+                        };
+                    };
+                    codespaces: {
+                        type: string;
+                        items: {
+                            $ref: string;
+                        };
+                    };
+                    dependabot: {
+                        type: string;
+                        items: {
+                            $ref: string;
+                        };
+                    };
+                };
+                additionalProperties: boolean;
+            };
+            GithubOrgClaimSecretRef: {
+                $id: string;
+                type: string;
+                description: string;
+                pattern: string;
+            };
+            GithubOrgClaimSecret: {
+                $id: string;
+                type: string;
+                description: string;
+                properties: {
+                    name: {
+                        type: string;
+                        description: string;
+                    };
+                    value: {
+                        $ref: string;
+                    };
+                    visibility: {
+                        type: string;
+                        enum: string[];
+                        description: string;
+                    };
+                    selected_repositories: {
+                        type: string;
+                        items: {
+                            type: string;
+                        };
+                        description: string;
+                    };
+                };
+                required: string[];
+                additionalProperties: boolean;
+            };
+        };
     })[] | {
         $id: string;
         definitions: {

package/build/packages/cdk8s_renderer/src/claims/github/index.d.ts

@@ -529,6 +529,30 @@ export declare const GithubSchemas: ({
                             }[];
                         };
                     };
+                    org_secrets: {
+                        type: string;
+                        properties: {
+                            actions: {
+                                type: string;
+                                items: {
+                                    $ref: string;
+                                };
+                            };
+                            codespaces: {
+                                type: string;
+                                items: {
+                                    $ref: string;
+                                };
+                            };
+                            dependabot: {
+                                type: string;
+                                items: {
+                                    $ref: string;
+                                };
+                            };
+                        };
+                        additionalProperties: boolean;
+                    };
                 };
                 additionalProperties: boolean;
                 required: string[];
@@ -699,4 +723,69 @@ export declare const GithubSchemas: ({
             };
         };
     };
+} | {
+    $schema: string;
+    $id: string;
+    definitions: {
+        GithubOrgClaimSecrets: {
+            $id: string;
+            type: string;
+            description: string;
+            properties: {
+                actions: {
+                    type: string;
+                    items: {
+                        $ref: string;
+                    };
+                };
+                codespaces: {
+                    type: string;
+                    items: {
+                        $ref: string;
+                    };
+                };
+                dependabot: {
+                    type: string;
+                    items: {
+                        $ref: string;
+                    };
+                };
+            };
+            additionalProperties: boolean;
+        };
+        GithubOrgClaimSecretRef: {
+            $id: string;
+            type: string;
+            description: string;
+            pattern: string;
+        };
+        GithubOrgClaimSecret: {
+            $id: string;
+            type: string;
+            description: string;
+            properties: {
+                name: {
+                    type: string;
+                    description: string;
+                };
+                value: {
+                    $ref: string;
+                };
+                visibility: {
+                    type: string;
+                    enum: string[];
+                    description: string;
+                };
+                selected_repositories: {
+                    type: string;
+                    items: {
+                        type: string;
+                    };
+                    description: string;
+                };
+            };
+            required: string[];
+            additionalProperties: boolean;
+        };
+    };
 })[];

package/build/packages/cdk8s_renderer/src/claims/github/orgSecrets.schema.d.ts

@@ -0,0 +1,67 @@
+declare const _default: {
+    $schema: string;
+    $id: string;
+    definitions: {
+        GithubOrgClaimSecrets: {
+            $id: string;
+            type: string;
+            description: string;
+            properties: {
+                actions: {
+                    type: string;
+                    items: {
+                        $ref: string;
+                    };
+                };
+                codespaces: {
+                    type: string;
+                    items: {
+                        $ref: string;
+                    };
+                };
+                dependabot: {
+                    type: string;
+                    items: {
+                        $ref: string;
+                    };
+                };
+            };
+            additionalProperties: boolean;
+        };
+        GithubOrgClaimSecretRef: {
+            $id: string;
+            type: string;
+            description: string;
+            pattern: string;
+        };
+        GithubOrgClaimSecret: {
+            $id: string;
+            type: string;
+            description: string;
+            properties: {
+                name: {
+                    type: string;
+                    description: string;
+                };
+                value: {
+                    $ref: string;
+                };
+                visibility: {
+                    type: string;
+                    enum: string[];
+                    description: string;
+                };
+                selected_repositories: {
+                    type: string;
+                    items: {
+                        type: string;
+                    };
+                    description: string;
+                };
+            };
+            required: string[];
+            additionalProperties: boolean;
+        };
+    };
+};
+export default _default;

package/build/packages/cdk8s_renderer/src/claims/github/orgSettings.d.ts

@@ -35,6 +35,26 @@ export interface IGithubOrgSettingsClaim extends IOrgSettingsClaim {
                 visibility: 'all' | 'private' | 'selected';
                 selected_repositories?: string[];
             }[];
+            org_secrets?: {
+                actions?: {
+                    name: string;
+                    value: string;
+                    visibility?: 'all' | 'private' | 'selected';
+                    selected_repositories?: string[];
+                }[];
+                codespaces?: {
+                    name: string;
+                    value: string;
+                    visibility?: 'all' | 'private' | 'selected';
+                    selected_repositories?: string[];
+                }[];
+                dependabot?: {
+                    name: string;
+                    value: string;
+                    visibility?: 'all' | 'private' | 'selected';
+                    selected_repositories?: string[];
+                }[];
+            };
         };
     };
 }

package/build/packages/cdk8s_renderer/src/claims/github/orgsettings.schema.d.ts

@@ -146,6 +146,30 @@ declare const _default: {
                             }[];
                         };
                     };
+                    org_secrets: {
+                        type: string;
+                        properties: {
+                            actions: {
+                                type: string;
+                                items: {
+                                    $ref: string;
+                                };
+                            };
+                            codespaces: {
+                                type: string;
+                                items: {
+                                    $ref: string;
+                                };
+                            };
+                            dependabot: {
+                                type: string;
+                                items: {
+                                    $ref: string;
+                                };
+                            };
+                        };
+                        additionalProperties: boolean;
+                    };
                 };
                 additionalProperties: boolean;
                 required: string[];

package/build/packages/cdk8s_renderer/src/renderer/claims-render.d.ts

@@ -8,5 +8,5 @@ export declare function renderClaims(catalogScope: Construct, firestartrScope: C
     crs: any;
     renames?: IRenameResult[];
 }): Promise<RenderedCrMap>;
-export declare function renderClaim(catalogScope: Construct, firestartrScope: Construct, claim: any, patches: ICustomResourcePatch[], previousCR?: any | null, claimPath?: string, variableSectionPreviousCR?: any | false, variableSectionPatches?: ICustomResourcePatch[], crs?: any): Promise<IRenderClaimResult>;
+export declare function renderClaim(catalogScope: Construct, firestartrScope: Construct, claim: any, patches: ICustomResourcePatch[], previousCR?: any | null, claimPath?: string, variableSectionPreviousCR?: any | false, variableSectionPatches?: ICustomResourcePatch[], crs?: any, secretSectionPreviousCR?: any | false, secretSectionPatches?: ICustomResourcePatch[]): Promise<IRenderClaimResult>;
 export declare function renameVariantCrFiles(outputDir: string, renderedMap: RenderedCrMap): void;

package/build/packages/cdk8s_renderer/src/validations/githubOrgSecretSection.d.ts

@@ -0,0 +1,4 @@
+import { RenderClaims, RenderedCrMap } from '../renderer/types';
+export declare function validateGithubOrgSecretSectionSingleton(crs: RenderedCrMap): void;
+export declare function validateSecretNamesUniqueness(crs: RenderedCrMap): void;
+export declare function validateOrgSecretsCrossReferences(renderClaims: RenderClaims): void;

package/build/packages/gh_provisioner/src/entities/ghorgsecretsection/index.d.ts

@@ -0,0 +1,7 @@
+import { Entity } from '../base';
+export declare class EntityGHOrgSecretSection extends Entity {
+    constructor(artifact: any);
+    loadResources(tfOp: string): Promise<void>;
+    postProvision(_tfOp: string): Promise<void>;
+    loadAddressesToImport(): Promise<void>;
+}

package/build/packages/gh_provisioner/src/entities/ghorgsecretsection/secrets.d.ts

@@ -0,0 +1,16 @@
+import type { EntityGHOrgSecretSection } from '.';
+import { type OrgSecretsSection } from 'github';
+export type SecretEntry = {
+    name: string;
+    ref: {
+        kind: string;
+        name: string;
+        key: string;
+    };
+    visibility: string;
+    selectedRepositories?: string[];
+};
+declare const SECTIONS: OrgSecretsSection[];
+export { SECTIONS };
+export declare function provisionOrgSecrets(entity: EntityGHOrgSecretSection, secrets: Record<string, SecretEntry[]>): Promise<void>;
+export declare function adoptSecretsIfNeeded(entity: EntityGHOrgSecretSection, secrets: Record<string, SecretEntry[]>): Promise<void>;

package/build/packages/github/index.d.ts

@@ -2,7 +2,9 @@ import { createCheckRun } from './src/check_run';
 import { upsertMultiPartStickyComments } from './src/sticky_comment';
 import { getOctokitForOrg, getGithubAppToken, getOctokitFromPat } from './src/auth';
 import { encryptRepoSecret, getRepoPublicKey } from './src/encrypt';
+import { getOrgPublicKey, encryptOrgSecret, getOrgSecret } from './src/orgSecrets';
 import type { RepoSecretsSection } from './src/encrypt';
+import type { OrgSecretsSection } from './src/orgSecrets';
 import type { WorkflowCompletionResult, WorkflowDispatchInputs, WorkflowRunConclusion, WorkflowRunStatus, WorkflowRunStatusFilter, WorkflowRunSummary } from './src/workflow';
 import { withProfile } from './src/with_profile';
 import { createProfile } from './src/profile';
@@ -103,10 +105,14 @@ declare const _default: {
     encryption: {
         encryptRepoSecret: typeof encryptRepoSecret;
         getRepoPublicKey: typeof getRepoPublicKey;
+        getOrgPublicKey: typeof getOrgPublicKey;
+        encryptOrgSecret: typeof encryptOrgSecret;
+        getOrgSecret: typeof getOrgSecret;
     };
     withProfile: typeof withProfile;
     createProfile: typeof createProfile;
 };
 export default _default;
-export { RepoSecretsSection, createProfile };
+export { createProfile };
+export type { RepoSecretsSection, OrgSecretsSection };
 export type { WorkflowCompletionResult, WorkflowDispatchInputs, WorkflowRunConclusion, WorkflowRunStatus, WorkflowRunStatusFilter, WorkflowRunSummary, };

package/build/packages/github/src/orgSecrets.d.ts

@@ -0,0 +1,10 @@
+export type OrgSecretsSection = 'actions' | 'dependabot' | 'codespaces';
+export declare function getOrgPublicKey(org: string, section: OrgSecretsSection, octokit?: any): Promise<any>;
+export declare function encryptOrgSecret(org: string, section: OrgSecretsSection, plaintextValue: string, preFetchedKey?: {
+    key_id: string;
+    key: string;
+}, octokit?: any): Promise<{
+    key_id: any;
+    encrypted_value: string;
+}>;
+export declare function getOrgSecret(org: string, section: OrgSecretsSection, name: string, octokit?: any): Promise<any>;

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@firestartr/cli",
-  "version": "2.11.0-snapshot-patch-claims-5",
+  "version": "2.11.0-snapshot-org-secrets-03",
   "private": false,
   "description": "Commandline tool",
   "main": "build/main.js",