@homeflare/distilled-openbao 0.2.0

package/dist/services/approle.d.ts

@@ -0,0 +1,918 @@
+import * as S from "@distilled.cloud/core/schema";
+import * as API from "@distilled.cloud/core/api";
+import { type OpenBaoOpError, type OpenBaoOpContext } from "../protocol.ts";
+export type { OpenBaoOpError, OpenBaoOpContext };
+export interface AppRoleDeleteBindSecretIdRequest {
+    /** Path that the backend was mounted at */
+    approle_mount_path: string;
+    /** Name of the role. Must be less than 4096 bytes. */
+    role_name: string;
+}
+export declare const AppRoleDeleteBindSecretIdRequest: S.Schema<AppRoleDeleteBindSecretIdRequest>;
+export interface AppRoleDeleteBindSecretIdResponse {
+}
+export declare const AppRoleDeleteBindSecretIdResponse: S.Schema<AppRoleDeleteBindSecretIdResponse>;
+export interface AppRoleDeleteBoundCidrListRequest {
+    /** Path that the backend was mounted at */
+    approle_mount_path: string;
+    /** Name of the role. Must be less than 4096 bytes. */
+    role_name: string;
+}
+export declare const AppRoleDeleteBoundCidrListRequest: S.Schema<AppRoleDeleteBoundCidrListRequest>;
+export interface AppRoleDeleteBoundCidrListResponse {
+}
+export declare const AppRoleDeleteBoundCidrListResponse: S.Schema<AppRoleDeleteBoundCidrListResponse>;
+export interface AppRoleDeletePeriodRequest {
+    /** Path that the backend was mounted at */
+    approle_mount_path: string;
+    /** Name of the role. Must be less than 4096 bytes. */
+    role_name: string;
+}
+export declare const AppRoleDeletePeriodRequest: S.Schema<AppRoleDeletePeriodRequest>;
+export interface AppRoleDeletePeriodResponse {
+}
+export declare const AppRoleDeletePeriodResponse: S.Schema<AppRoleDeletePeriodResponse>;
+export interface AppRoleDeletePoliciesRequest {
+    /** Path that the backend was mounted at */
+    approle_mount_path: string;
+    /** Name of the role. Must be less than 4096 bytes. */
+    role_name: string;
+}
+export declare const AppRoleDeletePoliciesRequest: S.Schema<AppRoleDeletePoliciesRequest>;
+export interface AppRoleDeletePoliciesResponse {
+}
+export declare const AppRoleDeletePoliciesResponse: S.Schema<AppRoleDeletePoliciesResponse>;
+export interface AppRoleDeleteRoleRequest {
+    /** Path that the backend was mounted at */
+    approle_mount_path: string;
+    /** Name of the role. Must be less than 4096 bytes. */
+    role_name: string;
+}
+export declare const AppRoleDeleteRoleRequest: S.Schema<AppRoleDeleteRoleRequest>;
+export interface AppRoleDeleteRoleResponse {
+}
+export declare const AppRoleDeleteRoleResponse: S.Schema<AppRoleDeleteRoleResponse>;
+export interface AppRoleDeleteSecretIdBoundCidrsRequest {
+    /** Path that the backend was mounted at */
+    approle_mount_path: string;
+    /** Name of the role. Must be less than 4096 bytes. */
+    role_name: string;
+}
+export declare const AppRoleDeleteSecretIdBoundCidrsRequest: S.Schema<AppRoleDeleteSecretIdBoundCidrsRequest>;
+export interface AppRoleDeleteSecretIdBoundCidrsResponse {
+}
+export declare const AppRoleDeleteSecretIdBoundCidrsResponse: S.Schema<AppRoleDeleteSecretIdBoundCidrsResponse>;
+export interface AppRoleDeleteSecretIdNumUsesRequest {
+    /** Path that the backend was mounted at */
+    approle_mount_path: string;
+    /** Name of the role. Must be less than 4096 bytes. */
+    role_name: string;
+}
+export declare const AppRoleDeleteSecretIdNumUsesRequest: S.Schema<AppRoleDeleteSecretIdNumUsesRequest>;
+export interface AppRoleDeleteSecretIdNumUsesResponse {
+}
+export declare const AppRoleDeleteSecretIdNumUsesResponse: S.Schema<AppRoleDeleteSecretIdNumUsesResponse>;
+export interface AppRoleDeleteSecretIdTtlRequest {
+    /** Path that the backend was mounted at */
+    approle_mount_path: string;
+    /** Name of the role. Must be less than 4096 bytes. */
+    role_name: string;
+}
+export declare const AppRoleDeleteSecretIdTtlRequest: S.Schema<AppRoleDeleteSecretIdTtlRequest>;
+export interface AppRoleDeleteSecretIdTtlResponse {
+}
+export declare const AppRoleDeleteSecretIdTtlResponse: S.Schema<AppRoleDeleteSecretIdTtlResponse>;
+export interface AppRoleDeleteTokenBoundCidrsRequest {
+    /** Path that the backend was mounted at */
+    approle_mount_path: string;
+    /** Name of the role. Must be less than 4096 bytes. */
+    role_name: string;
+}
+export declare const AppRoleDeleteTokenBoundCidrsRequest: S.Schema<AppRoleDeleteTokenBoundCidrsRequest>;
+export interface AppRoleDeleteTokenBoundCidrsResponse {
+}
+export declare const AppRoleDeleteTokenBoundCidrsResponse: S.Schema<AppRoleDeleteTokenBoundCidrsResponse>;
+export interface AppRoleDeleteTokenMaxTtlRequest {
+    /** Path that the backend was mounted at */
+    approle_mount_path: string;
+    /** Name of the role. Must be less than 4096 bytes. */
+    role_name: string;
+}
+export declare const AppRoleDeleteTokenMaxTtlRequest: S.Schema<AppRoleDeleteTokenMaxTtlRequest>;
+export interface AppRoleDeleteTokenMaxTtlResponse {
+}
+export declare const AppRoleDeleteTokenMaxTtlResponse: S.Schema<AppRoleDeleteTokenMaxTtlResponse>;
+export interface AppRoleDeleteTokenNumUsesRequest {
+    /** Path that the backend was mounted at */
+    approle_mount_path: string;
+    /** Name of the role. Must be less than 4096 bytes. */
+    role_name: string;
+}
+export declare const AppRoleDeleteTokenNumUsesRequest: S.Schema<AppRoleDeleteTokenNumUsesRequest>;
+export interface AppRoleDeleteTokenNumUsesResponse {
+}
+export declare const AppRoleDeleteTokenNumUsesResponse: S.Schema<AppRoleDeleteTokenNumUsesResponse>;
+export interface AppRoleDeleteTokenTtlRequest {
+    /** Path that the backend was mounted at */
+    approle_mount_path: string;
+    /** Name of the role. Must be less than 4096 bytes. */
+    role_name: string;
+}
+export declare const AppRoleDeleteTokenTtlRequest: S.Schema<AppRoleDeleteTokenTtlRequest>;
+export interface AppRoleDeleteTokenTtlResponse {
+}
+export declare const AppRoleDeleteTokenTtlResponse: S.Schema<AppRoleDeleteTokenTtlResponse>;
+export interface AppRoleDestroySecretIdRequest {
+    /** Path that the backend was mounted at */
+    approle_mount_path: string;
+    /** Name of the role. Must be less than 4096 bytes. */
+    role_name: string;
+    /** SecretID attached to the role. */
+    secret_id?: string;
+}
+export declare const AppRoleDestroySecretIdRequest: S.Schema<AppRoleDestroySecretIdRequest>;
+export interface AppRoleDestroySecretIdResponse {
+}
+export declare const AppRoleDestroySecretIdResponse: S.Schema<AppRoleDestroySecretIdResponse>;
+export interface AppRoleDestroySecretId2Request {
+    /** Path that the backend was mounted at */
+    approle_mount_path: string;
+    /** Name of the role. Must be less than 4096 bytes. */
+    role_name: string;
+}
+export declare const AppRoleDestroySecretId2Request: S.Schema<AppRoleDestroySecretId2Request>;
+export interface AppRoleDestroySecretId2Response {
+}
+export declare const AppRoleDestroySecretId2Response: S.Schema<AppRoleDestroySecretId2Response>;
+export interface AppRoleDestroySecretIdByAccessorRequest {
+    /** Path that the backend was mounted at */
+    approle_mount_path: string;
+    /** Name of the role. Must be less than 4096 bytes. */
+    role_name: string;
+    /** Accessor of the SecretID */
+    secret_id_accessor?: string;
+}
+export declare const AppRoleDestroySecretIdByAccessorRequest: S.Schema<AppRoleDestroySecretIdByAccessorRequest>;
+export interface AppRoleDestroySecretIdByAccessorResponse {
+}
+export declare const AppRoleDestroySecretIdByAccessorResponse: S.Schema<AppRoleDestroySecretIdByAccessorResponse>;
+export interface AppRoleDestroySecretIdByAccessor2Request {
+    /** Path that the backend was mounted at */
+    approle_mount_path: string;
+    /** Name of the role. Must be less than 4096 bytes. */
+    role_name: string;
+}
+export declare const AppRoleDestroySecretIdByAccessor2Request: S.Schema<AppRoleDestroySecretIdByAccessor2Request>;
+export interface AppRoleDestroySecretIdByAccessor2Response {
+}
+export declare const AppRoleDestroySecretIdByAccessor2Response: S.Schema<AppRoleDestroySecretIdByAccessor2Response>;
+export type AppRoleListRolesRequestList = "true";
+export declare const AppRoleListRolesRequestList: any;
+export interface AppRoleListRolesRequest {
+    /** Path that the backend was mounted at */
+    approle_mount_path: string;
+    /** Must be set to `true` */
+    list: AppRoleListRolesRequestList | (string & {});
+}
+export declare const AppRoleListRolesRequest: S.Schema<AppRoleListRolesRequest>;
+export type AppRoleListRolesResponseKeysList = Array<string>;
+export declare const AppRoleListRolesResponseKeysList: S.Schema<AppRoleListRolesResponseKeysList>;
+export interface AppRoleListRolesResponse {
+    keys?: AppRoleListRolesResponseKeysList;
+}
+export declare const AppRoleListRolesResponse: S.Schema<AppRoleListRolesResponse>;
+export type AppRoleListSecretIdsRequestList = "true";
+export declare const AppRoleListSecretIdsRequestList: any;
+export interface AppRoleListSecretIdsRequest {
+    /** Path that the backend was mounted at */
+    approle_mount_path: string;
+    /** Name of the role. Must be less than 4096 bytes. */
+    role_name: string;
+    /** Must be set to `true` */
+    list: AppRoleListSecretIdsRequestList | (string & {});
+}
+export declare const AppRoleListSecretIdsRequest: S.Schema<AppRoleListSecretIdsRequest>;
+export type AppRoleListSecretIdsResponseKeysList = Array<string>;
+export declare const AppRoleListSecretIdsResponseKeysList: S.Schema<AppRoleListSecretIdsResponseKeysList>;
+export interface AppRoleListSecretIdsResponse {
+    keys?: AppRoleListSecretIdsResponseKeysList;
+}
+export declare const AppRoleListSecretIdsResponse: S.Schema<AppRoleListSecretIdsResponse>;
+export interface AppRoleLookUpSecretIdRequest {
+    /** Path that the backend was mounted at */
+    approle_mount_path: string;
+    /** Name of the role. Must be less than 4096 bytes. */
+    role_name: string;
+    /** SecretID attached to the role. */
+    secret_id?: string;
+}
+export declare const AppRoleLookUpSecretIdRequest: S.Schema<AppRoleLookUpSecretIdRequest>;
+/** List of CIDR blocks enforcing secret IDs to be used from specific set of IP addresses. If 'bound_cidr_list' is set on the role, then the list of CIDR blocks listed here should be a subset of the CIDR blocks listed on the role. */
+export type AppRoleLookUpSecretIdResponseCidrListList = Array<string>;
+export declare const AppRoleLookUpSecretIdResponseCidrListList: S.Schema<AppRoleLookUpSecretIdResponseCidrListList>;
+/** List of CIDR blocks. If set, specifies the blocks of IP addresses which can use the returned token. Should be a subset of the token CIDR blocks listed on the role, if any. */
+export type AppRoleLookUpSecretIdResponseTokenBoundCidrsList = Array<string>;
+export declare const AppRoleLookUpSecretIdResponseTokenBoundCidrsList: S.Schema<AppRoleLookUpSecretIdResponseTokenBoundCidrsList>;
+export interface AppRoleLookUpSecretIdResponse {
+    /** List of CIDR blocks enforcing secret IDs to be used from specific set of IP addresses. If 'bound_cidr_list' is set on the role, then the list of CIDR blocks listed here should be a subset of the CIDR blocks listed on the role. */
+    cidr_list?: AppRoleLookUpSecretIdResponseCidrListList;
+    creation_time?: string;
+    expiration_time?: string;
+    last_updated_time?: string;
+    metadata?: unknown;
+    /** Accessor of the secret ID */
+    secret_id_accessor?: string;
+    /** Number of times a secret ID can access the role, after which the secret ID will expire. */
+    secret_id_num_uses?: number;
+    /** Duration in seconds after which the issued secret ID expires. */
+    secret_id_ttl?: number;
+    /** List of CIDR blocks. If set, specifies the blocks of IP addresses which can use the returned token. Should be a subset of the token CIDR blocks listed on the role, if any. */
+    token_bound_cidrs?: AppRoleLookUpSecretIdResponseTokenBoundCidrsList;
+}
+export declare const AppRoleLookUpSecretIdResponse: S.Schema<AppRoleLookUpSecretIdResponse>;
+export interface AppRoleLookUpSecretIdByAccessorRequest {
+    /** Path that the backend was mounted at */
+    approle_mount_path: string;
+    /** Name of the role. Must be less than 4096 bytes. */
+    role_name: string;
+    /** Accessor of the SecretID */
+    secret_id_accessor?: string;
+}
+export declare const AppRoleLookUpSecretIdByAccessorRequest: S.Schema<AppRoleLookUpSecretIdByAccessorRequest>;
+/** List of CIDR blocks enforcing secret IDs to be used from specific set of IP addresses. If 'bound_cidr_list' is set on the role, then the list of CIDR blocks listed here should be a subset of the CIDR blocks listed on the role. */
+export type AppRoleLookUpSecretIdByAccessorResponseCidrListList = Array<string>;
+export declare const AppRoleLookUpSecretIdByAccessorResponseCidrListList: S.Schema<AppRoleLookUpSecretIdByAccessorResponseCidrListList>;
+/** List of CIDR blocks. If set, specifies the blocks of IP addresses which can use the returned token. Should be a subset of the token CIDR blocks listed on the role, if any. */
+export type AppRoleLookUpSecretIdByAccessorResponseTokenBoundCidrsList = Array<string>;
+export declare const AppRoleLookUpSecretIdByAccessorResponseTokenBoundCidrsList: S.Schema<AppRoleLookUpSecretIdByAccessorResponseTokenBoundCidrsList>;
+export interface AppRoleLookUpSecretIdByAccessorResponse {
+    /** List of CIDR blocks enforcing secret IDs to be used from specific set of IP addresses. If 'bound_cidr_list' is set on the role, then the list of CIDR blocks listed here should be a subset of the CIDR blocks listed on the role. */
+    cidr_list?: AppRoleLookUpSecretIdByAccessorResponseCidrListList;
+    creation_time?: string;
+    expiration_time?: string;
+    last_updated_time?: string;
+    metadata?: unknown;
+    /** Accessor of the secret ID */
+    secret_id_accessor?: string;
+    /** Number of times a secret ID can access the role, after which the secret ID will expire. */
+    secret_id_num_uses?: number;
+    /** Duration in seconds after which the issued secret ID expires. */
+    secret_id_ttl?: number;
+    /** List of CIDR blocks. If set, specifies the blocks of IP addresses which can use the returned token. Should be a subset of the token CIDR blocks listed on the role, if any. */
+    token_bound_cidrs?: AppRoleLookUpSecretIdByAccessorResponseTokenBoundCidrsList;
+}
+export declare const AppRoleLookUpSecretIdByAccessorResponse: S.Schema<AppRoleLookUpSecretIdByAccessorResponse>;
+export interface AppRoleReadBindSecretIdRequest {
+    /** Path that the backend was mounted at */
+    approle_mount_path: string;
+    /** Name of the role. Must be less than 4096 bytes. */
+    role_name: string;
+}
+export declare const AppRoleReadBindSecretIdRequest: S.Schema<AppRoleReadBindSecretIdRequest>;
+export interface AppRoleReadBindSecretIdResponse {
+    /** Impose secret_id to be presented when logging in using this role. Defaults to 'true'. */
+    bind_secret_id?: boolean;
+}
+export declare const AppRoleReadBindSecretIdResponse: S.Schema<AppRoleReadBindSecretIdResponse>;
+export interface AppRoleReadBoundCidrListRequest {
+    /** Path that the backend was mounted at */
+    approle_mount_path: string;
+    /** Name of the role. Must be less than 4096 bytes. */
+    role_name: string;
+}
+export declare const AppRoleReadBoundCidrListRequest: S.Schema<AppRoleReadBoundCidrListRequest>;
+/** Deprecated: Please use "secret_id_bound_cidrs" instead. Comma separated string or list of CIDR blocks. If set, specifies the blocks of IP addresses which can perform the login operation. */
+export type AppRoleReadBoundCidrListResponseBoundCidrListList = Array<string>;
+export declare const AppRoleReadBoundCidrListResponseBoundCidrListList: S.Schema<AppRoleReadBoundCidrListResponseBoundCidrListList>;
+export interface AppRoleReadBoundCidrListResponse {
+    /** Deprecated: Please use "secret_id_bound_cidrs" instead. Comma separated string or list of CIDR blocks. If set, specifies the blocks of IP addresses which can perform the login operation. */
+    bound_cidr_list?: AppRoleReadBoundCidrListResponseBoundCidrListList;
+}
+export declare const AppRoleReadBoundCidrListResponse: S.Schema<AppRoleReadBoundCidrListResponse>;
+export interface AppRoleReadLocalSecretIdsRequest {
+    /** Path that the backend was mounted at */
+    approle_mount_path: string;
+    /** Name of the role. Must be less than 4096 bytes. */
+    role_name: string;
+}
+export declare const AppRoleReadLocalSecretIdsRequest: S.Schema<AppRoleReadLocalSecretIdsRequest>;
+export interface AppRoleReadLocalSecretIdsResponse {
+    /** If true, the secret identifiers generated using this role will be cluster local. This can only be set during role creation and once set, it can't be reset later */
+    local_secret_ids?: boolean;
+}
+export declare const AppRoleReadLocalSecretIdsResponse: S.Schema<AppRoleReadLocalSecretIdsResponse>;
+export interface AppRoleReadPeriodRequest {
+    /** Path that the backend was mounted at */
+    approle_mount_path: string;
+    /** Name of the role. Must be less than 4096 bytes. */
+    role_name: string;
+}
+export declare const AppRoleReadPeriodRequest: S.Schema<AppRoleReadPeriodRequest>;
+export interface AppRoleReadPeriodResponse {
+    /** Use "token_period" instead. If this and "token_period" are both specified, only "token_period" will be used. */
+    period?: number;
+    /** If set, tokens created via this role will have no max lifetime; instead, their renewal period will be fixed to this value. This takes an integer number of seconds, or a string duration (e.g. "24h"). */
+    token_period?: number;
+}
+export declare const AppRoleReadPeriodResponse: S.Schema<AppRoleReadPeriodResponse>;
+export interface AppRoleReadPoliciesRequest {
+    /** Path that the backend was mounted at */
+    approle_mount_path: string;
+    /** Name of the role. Must be less than 4096 bytes. */
+    role_name: string;
+}
+export declare const AppRoleReadPoliciesRequest: S.Schema<AppRoleReadPoliciesRequest>;
+/** Use "token_policies" instead. If this and "token_policies" are both specified, only "token_policies" will be used. */
+export type AppRoleReadPoliciesResponsePoliciesList = Array<string>;
+export declare const AppRoleReadPoliciesResponsePoliciesList: S.Schema<AppRoleReadPoliciesResponsePoliciesList>;
+/** Comma-separated list of policies */
+export type AppRoleReadPoliciesResponseTokenPoliciesList = Array<string>;
+export declare const AppRoleReadPoliciesResponseTokenPoliciesList: S.Schema<AppRoleReadPoliciesResponseTokenPoliciesList>;
+export interface AppRoleReadPoliciesResponse {
+    /** Use "token_policies" instead. If this and "token_policies" are both specified, only "token_policies" will be used. */
+    policies?: AppRoleReadPoliciesResponsePoliciesList;
+    /** Comma-separated list of policies */
+    token_policies?: AppRoleReadPoliciesResponseTokenPoliciesList;
+}
+export declare const AppRoleReadPoliciesResponse: S.Schema<AppRoleReadPoliciesResponse>;
+export interface AppRoleReadRoleRequest {
+    /** Path that the backend was mounted at */
+    approle_mount_path: string;
+    /** Name of the role. Must be less than 4096 bytes. */
+    role_name: string;
+}
+export declare const AppRoleReadRoleRequest: S.Schema<AppRoleReadRoleRequest>;
+/** Use "token_policies" instead. If this and "token_policies" are both specified, only "token_policies" will be used. */
+export type AppRoleReadRoleResponsePoliciesList = Array<string>;
+export declare const AppRoleReadRoleResponsePoliciesList: S.Schema<AppRoleReadRoleResponsePoliciesList>;
+/** Comma separated string or list of CIDR blocks. If set, specifies the blocks of IP addresses which can perform the login operation. */
+export type AppRoleReadRoleResponseSecretIdBoundCidrsList = Array<string>;
+export declare const AppRoleReadRoleResponseSecretIdBoundCidrsList: S.Schema<AppRoleReadRoleResponseSecretIdBoundCidrsList>;
+/** Comma separated string or JSON list of CIDR blocks. If set, specifies the blocks of IP addresses which are allowed to use the generated token. */
+export type AppRoleReadRoleResponseTokenBoundCidrsList = Array<string>;
+export declare const AppRoleReadRoleResponseTokenBoundCidrsList: S.Schema<AppRoleReadRoleResponseTokenBoundCidrsList>;
+/** Comma-separated list of policies */
+export type AppRoleReadRoleResponseTokenPoliciesList = Array<string>;
+export declare const AppRoleReadRoleResponseTokenPoliciesList: S.Schema<AppRoleReadRoleResponseTokenPoliciesList>;
+export interface AppRoleReadRoleResponse {
+    /** Impose secret ID to be presented when logging in using this role. */
+    bind_secret_id?: boolean;
+    /** If true, the secret identifiers generated using this role will be cluster local. This can only be set during role creation and once set, it can't be reset later */
+    local_secret_ids?: boolean;
+    /** Use "token_period" instead. If this and "token_period" are both specified, only "token_period" will be used. */
+    period?: number;
+    /** Use "token_policies" instead. If this and "token_policies" are both specified, only "token_policies" will be used. */
+    policies?: AppRoleReadRoleResponsePoliciesList;
+    /** Comma separated string or list of CIDR blocks. If set, specifies the blocks of IP addresses which can perform the login operation. */
+    secret_id_bound_cidrs?: AppRoleReadRoleResponseSecretIdBoundCidrsList;
+    /** Number of times a secret ID can access the role, after which the secret ID will expire. */
+    secret_id_num_uses?: number;
+    /** Duration in seconds after which the issued secret ID expires. */
+    secret_id_ttl?: number;
+    /** Comma separated string or JSON list of CIDR blocks. If set, specifies the blocks of IP addresses which are allowed to use the generated token. */
+    token_bound_cidrs?: AppRoleReadRoleResponseTokenBoundCidrsList;
+    /** If set, tokens created via this role carry an explicit maximum TTL. During renewal, the current maximum TTL values of the role and the mount are not checked for changes, and any updates to these values will have no effect on the token being renewed. */
+    token_explicit_max_ttl?: number;
+    /** The maximum lifetime of the generated token */
+    token_max_ttl?: number;
+    /** If true, the 'default' policy will not automatically be added to generated tokens */
+    token_no_default_policy?: boolean;
+    /** The maximum number of times a token may be used, a value of zero means unlimited */
+    token_num_uses?: number;
+    /** If set, tokens created via this role will have no max lifetime; instead, their renewal period will be fixed to this value. */
+    token_period?: number;
+    /** Comma-separated list of policies */
+    token_policies?: AppRoleReadRoleResponseTokenPoliciesList;
+    /** If true, CIDRs for the token will be strictly bound to the source IP address of the login request */
+    token_strictly_bind_ip?: boolean;
+    /** The initial ttl of the token to generate */
+    token_ttl?: number;
+    /** The type of token to generate, service or batch */
+    token_type?: string;
+}
+export declare const AppRoleReadRoleResponse: S.Schema<AppRoleReadRoleResponse>;
+export interface AppRoleReadRoleIdRequest {
+    /** Path that the backend was mounted at */
+    approle_mount_path: string;
+    /** Name of the role. Must be less than 4096 bytes. */
+    role_name: string;
+}
+export declare const AppRoleReadRoleIdRequest: S.Schema<AppRoleReadRoleIdRequest>;
+export interface AppRoleReadRoleIdResponse {
+    /** Identifier of the role. Defaults to a UUID. */
+    role_id?: string;
+}
+export declare const AppRoleReadRoleIdResponse: S.Schema<AppRoleReadRoleIdResponse>;
+export interface AppRoleReadSecretIdBoundCidrsRequest {
+    /** Path that the backend was mounted at */
+    approle_mount_path: string;
+    /** Name of the role. Must be less than 4096 bytes. */
+    role_name: string;
+}
+export declare const AppRoleReadSecretIdBoundCidrsRequest: S.Schema<AppRoleReadSecretIdBoundCidrsRequest>;
+/** Comma separated string or list of CIDR blocks. If set, specifies the blocks of IP addresses which can perform the login operation. */
+export type AppRoleReadSecretIdBoundCidrsResponseSecretIdBoundCidrsList = Array<string>;
+export declare const AppRoleReadSecretIdBoundCidrsResponseSecretIdBoundCidrsList: S.Schema<AppRoleReadSecretIdBoundCidrsResponseSecretIdBoundCidrsList>;
+export interface AppRoleReadSecretIdBoundCidrsResponse {
+    /** Comma separated string or list of CIDR blocks. If set, specifies the blocks of IP addresses which can perform the login operation. */
+    secret_id_bound_cidrs?: AppRoleReadSecretIdBoundCidrsResponseSecretIdBoundCidrsList;
+}
+export declare const AppRoleReadSecretIdBoundCidrsResponse: S.Schema<AppRoleReadSecretIdBoundCidrsResponse>;
+export interface AppRoleReadSecretIdNumUsesRequest {
+    /** Path that the backend was mounted at */
+    approle_mount_path: string;
+    /** Name of the role. Must be less than 4096 bytes. */
+    role_name: string;
+}
+export declare const AppRoleReadSecretIdNumUsesRequest: S.Schema<AppRoleReadSecretIdNumUsesRequest>;
+export interface AppRoleReadSecretIdNumUsesResponse {
+    /** Number of times a secret ID can access the role, after which the SecretID will expire. Defaults to 0 meaning that the secret ID is of unlimited use. */
+    secret_id_num_uses?: number;
+}
+export declare const AppRoleReadSecretIdNumUsesResponse: S.Schema<AppRoleReadSecretIdNumUsesResponse>;
+export interface AppRoleReadSecretIdTtlRequest {
+    /** Path that the backend was mounted at */
+    approle_mount_path: string;
+    /** Name of the role. Must be less than 4096 bytes. */
+    role_name: string;
+}
+export declare const AppRoleReadSecretIdTtlRequest: S.Schema<AppRoleReadSecretIdTtlRequest>;
+export interface AppRoleReadSecretIdTtlResponse {
+    /** Duration in seconds after which the issued secret ID should expire. Defaults to 0, meaning no expiration. */
+    secret_id_ttl?: number;
+}
+export declare const AppRoleReadSecretIdTtlResponse: S.Schema<AppRoleReadSecretIdTtlResponse>;
+export interface AppRoleReadTokenBoundCidrsRequest {
+    /** Path that the backend was mounted at */
+    approle_mount_path: string;
+    /** Name of the role. Must be less than 4096 bytes. */
+    role_name: string;
+}
+export declare const AppRoleReadTokenBoundCidrsRequest: S.Schema<AppRoleReadTokenBoundCidrsRequest>;
+/** Comma separated string or list of CIDR blocks. If set, specifies the blocks of IP addresses which can use the returned token. Should be a subset of the token CIDR blocks listed on the role, if any. */
+export type AppRoleReadTokenBoundCidrsResponseTokenBoundCidrsList = Array<string>;
+export declare const AppRoleReadTokenBoundCidrsResponseTokenBoundCidrsList: S.Schema<AppRoleReadTokenBoundCidrsResponseTokenBoundCidrsList>;
+export interface AppRoleReadTokenBoundCidrsResponse {
+    /** Comma separated string or list of CIDR blocks. If set, specifies the blocks of IP addresses which can use the returned token. Should be a subset of the token CIDR blocks listed on the role, if any. */
+    token_bound_cidrs?: AppRoleReadTokenBoundCidrsResponseTokenBoundCidrsList;
+}
+export declare const AppRoleReadTokenBoundCidrsResponse: S.Schema<AppRoleReadTokenBoundCidrsResponse>;
+export interface AppRoleReadTokenMaxTtlRequest {
+    /** Path that the backend was mounted at */
+    approle_mount_path: string;
+    /** Name of the role. Must be less than 4096 bytes. */
+    role_name: string;
+}
+export declare const AppRoleReadTokenMaxTtlRequest: S.Schema<AppRoleReadTokenMaxTtlRequest>;
+export interface AppRoleReadTokenMaxTtlResponse {
+    /** The maximum lifetime of the generated token */
+    token_max_ttl?: number;
+}
+export declare const AppRoleReadTokenMaxTtlResponse: S.Schema<AppRoleReadTokenMaxTtlResponse>;
+export interface AppRoleReadTokenNumUsesRequest {
+    /** Path that the backend was mounted at */
+    approle_mount_path: string;
+    /** Name of the role. Must be less than 4096 bytes. */
+    role_name: string;
+}
+export declare const AppRoleReadTokenNumUsesRequest: S.Schema<AppRoleReadTokenNumUsesRequest>;
+export interface AppRoleReadTokenNumUsesResponse {
+    /** The maximum number of times a token may be used, a value of zero means unlimited */
+    token_num_uses?: number;
+}
+export declare const AppRoleReadTokenNumUsesResponse: S.Schema<AppRoleReadTokenNumUsesResponse>;
+export interface AppRoleReadTokenTtlRequest {
+    /** Path that the backend was mounted at */
+    approle_mount_path: string;
+    /** Name of the role. Must be less than 4096 bytes. */
+    role_name: string;
+}
+export declare const AppRoleReadTokenTtlRequest: S.Schema<AppRoleReadTokenTtlRequest>;
+export interface AppRoleReadTokenTtlResponse {
+    /** The initial ttl of the token to generate */
+    token_ttl?: number;
+}
+export declare const AppRoleReadTokenTtlResponse: S.Schema<AppRoleReadTokenTtlResponse>;
+export interface AppRoleTidySecretIdRequest {
+    /** Path that the backend was mounted at */
+    approle_mount_path: string;
+}
+export declare const AppRoleTidySecretIdRequest: S.Schema<AppRoleTidySecretIdRequest>;
+export interface AppRoleTidySecretIdResponse {
+}
+export declare const AppRoleTidySecretIdResponse: S.Schema<AppRoleTidySecretIdResponse>;
+export interface AppRoleWriteBindSecretIdRequest {
+    /** Path that the backend was mounted at */
+    approle_mount_path: string;
+    /** Name of the role. Must be less than 4096 bytes. */
+    role_name: string;
+    /** Impose secret_id to be presented when logging in using this role. */
+    bind_secret_id?: boolean;
+}
+export declare const AppRoleWriteBindSecretIdRequest: S.Schema<AppRoleWriteBindSecretIdRequest>;
+export interface AppRoleWriteBindSecretIdResponse {
+}
+export declare const AppRoleWriteBindSecretIdResponse: S.Schema<AppRoleWriteBindSecretIdResponse>;
+/** Comma separated string or list of CIDR blocks enforcing secret IDs to be used from specific set of IP addresses. If 'bound_cidr_list' is set on the role, then the list of CIDR blocks listed here should be a subset of the CIDR blocks listed on the role. */
+export type AppRoleWriteCustomSecretIdRequestCidrListList = Array<string>;
+export declare const AppRoleWriteCustomSecretIdRequestCidrListList: S.Schema<AppRoleWriteCustomSecretIdRequestCidrListList>;
+/** Comma separated string or list of CIDR blocks. If set, specifies the blocks of IP addresses which can use the returned token. Should be a subset of the token CIDR blocks listed on the role, if any. */
+export type AppRoleWriteCustomSecretIdRequestTokenBoundCidrsList = Array<string>;
+export declare const AppRoleWriteCustomSecretIdRequestTokenBoundCidrsList: S.Schema<AppRoleWriteCustomSecretIdRequestTokenBoundCidrsList>;
+export interface AppRoleWriteCustomSecretIdRequest {
+    /** Path that the backend was mounted at */
+    approle_mount_path: string;
+    /** Name of the role. Must be less than 4096 bytes. */
+    role_name: string;
+    /** Comma separated string or list of CIDR blocks enforcing secret IDs to be used from specific set of IP addresses. If 'bound_cidr_list' is set on the role, then the list of CIDR blocks listed here should be a subset of the CIDR blocks listed on the role. */
+    cidr_list?: AppRoleWriteCustomSecretIdRequestCidrListList;
+    /** Metadata to be tied to the SecretID. This should be a JSON formatted string containing metadata in key value pairs. */
+    metadata?: string;
+    /** Number of times this SecretID can be used, after which the SecretID expires. Overrides secret_id_num_uses role option when supplied. May not be higher than role's secret_id_num_uses. */
+    num_uses?: number;
+    /** SecretID to be attached to the role. */
+    secret_id?: string;
+    /** Comma separated string or list of CIDR blocks. If set, specifies the blocks of IP addresses which can use the returned token. Should be a subset of the token CIDR blocks listed on the role, if any. */
+    token_bound_cidrs?: AppRoleWriteCustomSecretIdRequestTokenBoundCidrsList;
+    /** Duration in seconds after which this SecretID expires. Overrides secret_id_ttl role option when supplied. May not be longer than role's secret_id_ttl. */
+    ttl?: number;
+}
+export declare const AppRoleWriteCustomSecretIdRequest: S.Schema<AppRoleWriteCustomSecretIdRequest>;
+export interface AppRoleWriteCustomSecretIdResponse {
+    /** Secret ID attached to the role. */
+    secret_id?: string;
+    /** Accessor of the secret ID */
+    secret_id_accessor?: string;
+    /** Number of times a secret ID can access the role, after which the secret ID will expire. */
+    secret_id_num_uses?: number;
+    /** Duration in seconds after which the issued secret ID expires. */
+    secret_id_ttl?: number;
+}
+export declare const AppRoleWriteCustomSecretIdResponse: S.Schema<AppRoleWriteCustomSecretIdResponse>;
+export interface AppRoleWritePeriodRequest {
+    /** Path that the backend was mounted at */
+    approle_mount_path: string;
+    /** Name of the role. Must be less than 4096 bytes. */
+    role_name: string;
+    /** Use "token_period" instead. If this and "token_period" are both specified, only "token_period" will be used. */
+    period?: number;
+    /** If set, tokens created via this role will have no max lifetime; instead, their renewal period will be fixed to this value. This takes an integer number of seconds, or a string duration (e.g. "24h"). */
+    token_period?: number;
+}
+export declare const AppRoleWritePeriodRequest: S.Schema<AppRoleWritePeriodRequest>;
+export interface AppRoleWritePeriodResponse {
+}
+export declare const AppRoleWritePeriodResponse: S.Schema<AppRoleWritePeriodResponse>;
+/** Use "token_policies" instead. If this and "token_policies" are both specified, only "token_policies" will be used. */
+export type AppRoleWritePoliciesRequestPoliciesList = Array<string>;
+export declare const AppRoleWritePoliciesRequestPoliciesList: S.Schema<AppRoleWritePoliciesRequestPoliciesList>;
+/** Comma-separated list of policies */
+export type AppRoleWritePoliciesRequestTokenPoliciesList = Array<string>;
+export declare const AppRoleWritePoliciesRequestTokenPoliciesList: S.Schema<AppRoleWritePoliciesRequestTokenPoliciesList>;
+export interface AppRoleWritePoliciesRequest {
+    /** Path that the backend was mounted at */
+    approle_mount_path: string;
+    /** Name of the role. Must be less than 4096 bytes. */
+    role_name: string;
+    /** Use "token_policies" instead. If this and "token_policies" are both specified, only "token_policies" will be used. */
+    policies?: AppRoleWritePoliciesRequestPoliciesList;
+    /** Comma-separated list of policies */
+    token_policies?: AppRoleWritePoliciesRequestTokenPoliciesList;
+}
+export declare const AppRoleWritePoliciesRequest: S.Schema<AppRoleWritePoliciesRequest>;
+export interface AppRoleWritePoliciesResponse {
+}
+export declare const AppRoleWritePoliciesResponse: S.Schema<AppRoleWritePoliciesResponse>;
+/** Use "secret_id_bound_cidrs" instead. */
+export type AppRoleWriteRoleRequestBoundCidrListList = Array<string>;
+export declare const AppRoleWriteRoleRequestBoundCidrListList: S.Schema<AppRoleWriteRoleRequestBoundCidrListList>;
+/** Use "token_policies" instead. If this and "token_policies" are both specified, only "token_policies" will be used. */
+export type AppRoleWriteRoleRequestPoliciesList = Array<string>;
+export declare const AppRoleWriteRoleRequestPoliciesList: S.Schema<AppRoleWriteRoleRequestPoliciesList>;
+/** Comma separated string or list of CIDR blocks. If set, specifies the blocks of IP addresses which can perform the login operation. */
+export type AppRoleWriteRoleRequestSecretIdBoundCidrsList = Array<string>;
+export declare const AppRoleWriteRoleRequestSecretIdBoundCidrsList: S.Schema<AppRoleWriteRoleRequestSecretIdBoundCidrsList>;
+/** Comma separated string or JSON list of CIDR blocks. If set, specifies the blocks of IP addresses which are allowed to use the generated token. */
+export type AppRoleWriteRoleRequestTokenBoundCidrsList = Array<string>;
+export declare const AppRoleWriteRoleRequestTokenBoundCidrsList: S.Schema<AppRoleWriteRoleRequestTokenBoundCidrsList>;
+/** Comma-separated list of policies */
+export type AppRoleWriteRoleRequestTokenPoliciesList = Array<string>;
+export declare const AppRoleWriteRoleRequestTokenPoliciesList: S.Schema<AppRoleWriteRoleRequestTokenPoliciesList>;
+export interface AppRoleWriteRoleRequest {
+    /** Path that the backend was mounted at */
+    approle_mount_path: string;
+    /** Name of the role. Must be less than 4096 bytes. */
+    role_name: string;
+    /** Impose secret_id to be presented when logging in using this role. Defaults to 'true'. */
+    bind_secret_id?: boolean;
+    /** Use "secret_id_bound_cidrs" instead. */
+    bound_cidr_list?: AppRoleWriteRoleRequestBoundCidrListList;
+    /** If set, the secret IDs generated using this role will be cluster local. This can only be set during role creation and once set, it can't be reset later. */
+    local_secret_ids?: boolean;
+    /** Use "token_period" instead. If this and "token_period" are both specified, only "token_period" will be used. */
+    period?: number;
+    /** Use "token_policies" instead. If this and "token_policies" are both specified, only "token_policies" will be used. */
+    policies?: AppRoleWriteRoleRequestPoliciesList;
+    /** Identifier of the role. Defaults to a UUID. */
+    role_id?: string;
+    /** Comma separated string or list of CIDR blocks. If set, specifies the blocks of IP addresses which can perform the login operation. */
+    secret_id_bound_cidrs?: AppRoleWriteRoleRequestSecretIdBoundCidrsList;
+    /** Number of times a SecretID can access the role, after which the SecretID will expire. Defaults to 0 meaning that the the secret_id is of unlimited use. */
+    secret_id_num_uses?: number;
+    /** Duration in seconds after which the issued SecretID should expire. Defaults to 0, meaning no expiration. */
+    secret_id_ttl?: number;
+    /** Comma separated string or JSON list of CIDR blocks. If set, specifies the blocks of IP addresses which are allowed to use the generated token. */
+    token_bound_cidrs?: AppRoleWriteRoleRequestTokenBoundCidrsList;
+    /** If set, tokens created via this role carry an explicit maximum TTL. During renewal, the current maximum TTL values of the role and the mount are not checked for changes, and any updates to these values will have no effect on the token being renewed. */
+    token_explicit_max_ttl?: number;
+    /** The maximum lifetime of the generated token */
+    token_max_ttl?: number;
+    /** If true, the 'default' policy will not automatically be added to generated tokens */
+    token_no_default_policy?: boolean;
+    /** The maximum number of times a token may be used, a value of zero means unlimited */
+    token_num_uses?: number;
+    /** If set, tokens created via this role will have no max lifetime; instead, their renewal period will be fixed to this value. This takes an integer number of seconds, or a string duration (e.g. "24h"). */
+    token_period?: number;
+    /** Comma-separated list of policies */
+    token_policies?: AppRoleWriteRoleRequestTokenPoliciesList;
+    /** If true, CIDRs for the token will be strictly bound to the source IP address of the login request */
+    token_strictly_bind_ip?: boolean;
+    /** The initial ttl of the token to generate */
+    token_ttl?: number;
+    /** The type of token to generate, service or batch */
+    token_type?: string;
+}
+export declare const AppRoleWriteRoleRequest: S.Schema<AppRoleWriteRoleRequest>;
+export interface AppRoleWriteRoleResponse {
+}
+export declare const AppRoleWriteRoleResponse: S.Schema<AppRoleWriteRoleResponse>;
+export interface AppRoleWriteRoleIdRequest {
+    /** Path that the backend was mounted at */
+    approle_mount_path: string;
+    /** Name of the role. Must be less than 4096 bytes. */
+    role_name: string;
+    /** Identifier of the role. Defaults to a UUID. */
+    role_id?: string;
+}
+export declare const AppRoleWriteRoleIdRequest: S.Schema<AppRoleWriteRoleIdRequest>;
+export interface AppRoleWriteRoleIdResponse {
+}
+export declare const AppRoleWriteRoleIdResponse: S.Schema<AppRoleWriteRoleIdResponse>;
+/** Comma separated string or list of CIDR blocks enforcing secret IDs to be used from specific set of IP addresses. If 'bound_cidr_list' is set on the role, then the list of CIDR blocks listed here should be a subset of the CIDR blocks listed on the role. */
+export type AppRoleWriteSecretIdRequestCidrListList = Array<string>;
+export declare const AppRoleWriteSecretIdRequestCidrListList: S.Schema<AppRoleWriteSecretIdRequestCidrListList>;
+/** Comma separated string or JSON list of CIDR blocks. If set, specifies the blocks of IP addresses which are allowed to use the generated token. */
+export type AppRoleWriteSecretIdRequestTokenBoundCidrsList = Array<string>;
+export declare const AppRoleWriteSecretIdRequestTokenBoundCidrsList: S.Schema<AppRoleWriteSecretIdRequestTokenBoundCidrsList>;
+export interface AppRoleWriteSecretIdRequest {
+    /** Path that the backend was mounted at */
+    approle_mount_path: string;
+    /** Name of the role. Must be less than 4096 bytes. */
+    role_name: string;
+    /** Optional entry to list begin listing after, not required to exist. Only used in list operations. */
+    after?: string;
+    /** Comma separated string or list of CIDR blocks enforcing secret IDs to be used from specific set of IP addresses. If 'bound_cidr_list' is set on the role, then the list of CIDR blocks listed here should be a subset of the CIDR blocks listed on the role. */
+    cidr_list?: AppRoleWriteSecretIdRequestCidrListList;
+    /** Optional number of entries to return; defaults to all entries. Only used in list operations. */
+    limit?: number;
+    /** Metadata to be tied to the SecretID. This should be a JSON formatted string containing the metadata in key value pairs. */
+    metadata?: string;
+    /** Number of times this SecretID can be used, after which the SecretID expires. Overrides secret_id_num_uses role option when supplied. May not be higher than role's secret_id_num_uses. */
+    num_uses?: number;
+    /** Comma separated string or JSON list of CIDR blocks. If set, specifies the blocks of IP addresses which are allowed to use the generated token. */
+    token_bound_cidrs?: AppRoleWriteSecretIdRequestTokenBoundCidrsList;
+    /** Duration in seconds after which this SecretID expires. Overrides secret_id_ttl role option when supplied. May not be longer than role's secret_id_ttl. */
+    ttl?: number;
+}
+export declare const AppRoleWriteSecretIdRequest: S.Schema<AppRoleWriteSecretIdRequest>;
+export interface AppRoleWriteSecretIdResponse {
+    /** Secret ID attached to the role. */
+    secret_id?: string;
+    /** Accessor of the secret ID */
+    secret_id_accessor?: string;
+    /** Number of times a secret ID can access the role, after which the secret ID will expire. */
+    secret_id_num_uses?: number;
+    /** Duration in seconds after which the issued secret ID expires. */
+    secret_id_ttl?: number;
+}
+export declare const AppRoleWriteSecretIdResponse: S.Schema<AppRoleWriteSecretIdResponse>;
+/** Comma separated string or list of CIDR blocks. If set, specifies the blocks of IP addresses which can perform the login operation. */
+export type AppRoleWriteSecretIdBoundCidrsRequestSecretIdBoundCidrsList = Array<string>;
+export declare const AppRoleWriteSecretIdBoundCidrsRequestSecretIdBoundCidrsList: S.Schema<AppRoleWriteSecretIdBoundCidrsRequestSecretIdBoundCidrsList>;
+export interface AppRoleWriteSecretIdBoundCidrsRequest {
+    /** Path that the backend was mounted at */
+    approle_mount_path: string;
+    /** Name of the role. Must be less than 4096 bytes. */
+    role_name: string;
+    /** Comma separated string or list of CIDR blocks. If set, specifies the blocks of IP addresses which can perform the login operation. */
+    secret_id_bound_cidrs?: AppRoleWriteSecretIdBoundCidrsRequestSecretIdBoundCidrsList;
+}
+export declare const AppRoleWriteSecretIdBoundCidrsRequest: S.Schema<AppRoleWriteSecretIdBoundCidrsRequest>;
+export interface AppRoleWriteSecretIdBoundCidrsResponse {
+}
+export declare const AppRoleWriteSecretIdBoundCidrsResponse: S.Schema<AppRoleWriteSecretIdBoundCidrsResponse>;
+export interface AppRoleWriteSecretIdNumUsesRequest {
+    /** Path that the backend was mounted at */
+    approle_mount_path: string;
+    /** Name of the role. Must be less than 4096 bytes. */
+    role_name: string;
+    /** Number of times a SecretID can access the role, after which the SecretID will expire. */
+    secret_id_num_uses?: number;
+}
+export declare const AppRoleWriteSecretIdNumUsesRequest: S.Schema<AppRoleWriteSecretIdNumUsesRequest>;
+export interface AppRoleWriteSecretIdNumUsesResponse {
+}
+export declare const AppRoleWriteSecretIdNumUsesResponse: S.Schema<AppRoleWriteSecretIdNumUsesResponse>;
+export interface AppRoleWriteSecretIdTtlRequest {
+    /** Path that the backend was mounted at */
+    approle_mount_path: string;
+    /** Name of the role. Must be less than 4096 bytes. */
+    role_name: string;
+    /** Duration in seconds after which the issued SecretID should expire. Defaults to 0, meaning no expiration. */
+    secret_id_ttl?: number;
+}
+export declare const AppRoleWriteSecretIdTtlRequest: S.Schema<AppRoleWriteSecretIdTtlRequest>;
+export interface AppRoleWriteSecretIdTtlResponse {
+}
+export declare const AppRoleWriteSecretIdTtlResponse: S.Schema<AppRoleWriteSecretIdTtlResponse>;
+/** Comma separated string or JSON list of CIDR blocks. If set, specifies the blocks of IP addresses which are allowed to use the generated token. */
+export type AppRoleWriteTokenBoundCidrsRequestTokenBoundCidrsList = Array<string>;
+export declare const AppRoleWriteTokenBoundCidrsRequestTokenBoundCidrsList: S.Schema<AppRoleWriteTokenBoundCidrsRequestTokenBoundCidrsList>;
+export interface AppRoleWriteTokenBoundCidrsRequest {
+    /** Path that the backend was mounted at */
+    approle_mount_path: string;
+    /** Name of the role. Must be less than 4096 bytes. */
+    role_name: string;
+    /** Comma separated string or JSON list of CIDR blocks. If set, specifies the blocks of IP addresses which are allowed to use the generated token. */
+    token_bound_cidrs?: AppRoleWriteTokenBoundCidrsRequestTokenBoundCidrsList;
+}
+export declare const AppRoleWriteTokenBoundCidrsRequest: S.Schema<AppRoleWriteTokenBoundCidrsRequest>;
+export interface AppRoleWriteTokenBoundCidrsResponse {
+}
+export declare const AppRoleWriteTokenBoundCidrsResponse: S.Schema<AppRoleWriteTokenBoundCidrsResponse>;
+export interface AppRoleWriteTokenMaxTtlRequest {
+    /** Path that the backend was mounted at */
+    approle_mount_path: string;
+    /** Name of the role. Must be less than 4096 bytes. */
+    role_name: string;
+    /** The maximum lifetime of the generated token */
+    token_max_ttl?: number;
+}
+export declare const AppRoleWriteTokenMaxTtlRequest: S.Schema<AppRoleWriteTokenMaxTtlRequest>;
+export interface AppRoleWriteTokenMaxTtlResponse {
+}
+export declare const AppRoleWriteTokenMaxTtlResponse: S.Schema<AppRoleWriteTokenMaxTtlResponse>;
+export interface AppRoleWriteTokenNumUsesRequest {
+    /** Path that the backend was mounted at */
+    approle_mount_path: string;
+    /** Name of the role. Must be less than 4096 bytes. */
+    role_name: string;
+    /** The maximum number of times a token may be used, a value of zero means unlimited */
+    token_num_uses?: number;
+}
+export declare const AppRoleWriteTokenNumUsesRequest: S.Schema<AppRoleWriteTokenNumUsesRequest>;
+export interface AppRoleWriteTokenNumUsesResponse {
+}
+export declare const AppRoleWriteTokenNumUsesResponse: S.Schema<AppRoleWriteTokenNumUsesResponse>;
+export interface AppRoleWriteTokenTtlRequest {
+    /** Path that the backend was mounted at */
+    approle_mount_path: string;
+    /** Name of the role. Must be less than 4096 bytes. */
+    role_name: string;
+    /** The initial ttl of the token to generate */
+    token_ttl?: number;
+}
+export declare const AppRoleWriteTokenTtlRequest: S.Schema<AppRoleWriteTokenTtlRequest>;
+export interface AppRoleWriteTokenTtlResponse {
+}
+export declare const AppRoleWriteTokenTtlResponse: S.Schema<AppRoleWriteTokenTtlResponse>;
+/** Deprecated: Please use "secret_id_bound_cidrs" instead. Comma separated string or list of CIDR blocks. If set, specifies the blocks of IP addresses which can perform the login operation. */
+export type ListAppRoleWriteBoundCidrRequestBoundCidrListList = Array<string>;
+export declare const ListAppRoleWriteBoundCidrRequestBoundCidrListList: S.Schema<ListAppRoleWriteBoundCidrRequestBoundCidrListList>;
+export interface ListAppRoleWriteBoundCidrRequest {
+    /** Path that the backend was mounted at */
+    approle_mount_path: string;
+    /** Name of the role. Must be less than 4096 bytes. */
+    role_name: string;
+    /** Deprecated: Please use "secret_id_bound_cidrs" instead. Comma separated string or list of CIDR blocks. If set, specifies the blocks of IP addresses which can perform the login operation. */
+    bound_cidr_list?: ListAppRoleWriteBoundCidrRequestBoundCidrListList;
+}
+export declare const ListAppRoleWriteBoundCidrRequest: S.Schema<ListAppRoleWriteBoundCidrRequest>;
+export interface ListAppRoleWriteBoundCidrResponse {
+}
+export declare const ListAppRoleWriteBoundCidrResponse: S.Schema<ListAppRoleWriteBoundCidrResponse>;
+export interface LoginAppRoleRequest {
+    /** Path that the backend was mounted at */
+    approle_mount_path: string;
+    /** Unique identifier of the Role. Required to be supplied when the 'bind_secret_id' constraint is set. */
+    role_id?: string;
+    /** SecretID belong to the App role */
+    secret_id?: string;
+}
+export declare const LoginAppRoleRequest: S.Schema<LoginAppRoleRequest>;
+export interface LoginAppRoleResponse {
+}
+export declare const LoginAppRoleResponse: S.Schema<LoginAppRoleResponse>;
+export type AppRoleDeleteBindSecretIdError = OpenBaoOpError;
+export declare const appRoleDeleteBindSecretId: API.OperationMethod<AppRoleDeleteBindSecretIdRequest, AppRoleDeleteBindSecretIdResponse, AppRoleDeleteBindSecretIdError, OpenBaoOpContext>;
+export type AppRoleDeleteBoundCidrListError = OpenBaoOpError;
+export declare const appRoleDeleteBoundCidrList: API.OperationMethod<AppRoleDeleteBoundCidrListRequest, AppRoleDeleteBoundCidrListResponse, AppRoleDeleteBoundCidrListError, OpenBaoOpContext>;
+export type AppRoleDeletePeriodError = OpenBaoOpError;
+export declare const appRoleDeletePeriod: API.OperationMethod<AppRoleDeletePeriodRequest, AppRoleDeletePeriodResponse, AppRoleDeletePeriodError, OpenBaoOpContext>;
+export type AppRoleDeletePoliciesError = OpenBaoOpError;
+export declare const appRoleDeletePolicies: API.OperationMethod<AppRoleDeletePoliciesRequest, AppRoleDeletePoliciesResponse, AppRoleDeletePoliciesError, OpenBaoOpContext>;
+export type AppRoleDeleteRoleError = OpenBaoOpError;
+export declare const appRoleDeleteRole: API.OperationMethod<AppRoleDeleteRoleRequest, AppRoleDeleteRoleResponse, AppRoleDeleteRoleError, OpenBaoOpContext>;
+export type AppRoleDeleteSecretIdBoundCidrsError = OpenBaoOpError;
+export declare const appRoleDeleteSecretIdBoundCidrs: API.OperationMethod<AppRoleDeleteSecretIdBoundCidrsRequest, AppRoleDeleteSecretIdBoundCidrsResponse, AppRoleDeleteSecretIdBoundCidrsError, OpenBaoOpContext>;
+export type AppRoleDeleteSecretIdNumUsesError = OpenBaoOpError;
+export declare const appRoleDeleteSecretIdNumUses: API.OperationMethod<AppRoleDeleteSecretIdNumUsesRequest, AppRoleDeleteSecretIdNumUsesResponse, AppRoleDeleteSecretIdNumUsesError, OpenBaoOpContext>;
+export type AppRoleDeleteSecretIdTtlError = OpenBaoOpError;
+export declare const appRoleDeleteSecretIdTtl: API.OperationMethod<AppRoleDeleteSecretIdTtlRequest, AppRoleDeleteSecretIdTtlResponse, AppRoleDeleteSecretIdTtlError, OpenBaoOpContext>;
+export type AppRoleDeleteTokenBoundCidrsError = OpenBaoOpError;
+export declare const appRoleDeleteTokenBoundCidrs: API.OperationMethod<AppRoleDeleteTokenBoundCidrsRequest, AppRoleDeleteTokenBoundCidrsResponse, AppRoleDeleteTokenBoundCidrsError, OpenBaoOpContext>;
+export type AppRoleDeleteTokenMaxTtlError = OpenBaoOpError;
+export declare const appRoleDeleteTokenMaxTtl: API.OperationMethod<AppRoleDeleteTokenMaxTtlRequest, AppRoleDeleteTokenMaxTtlResponse, AppRoleDeleteTokenMaxTtlError, OpenBaoOpContext>;
+export type AppRoleDeleteTokenNumUsesError = OpenBaoOpError;
+export declare const appRoleDeleteTokenNumUses: API.OperationMethod<AppRoleDeleteTokenNumUsesRequest, AppRoleDeleteTokenNumUsesResponse, AppRoleDeleteTokenNumUsesError, OpenBaoOpContext>;
+export type AppRoleDeleteTokenTtlError = OpenBaoOpError;
+export declare const appRoleDeleteTokenTtl: API.OperationMethod<AppRoleDeleteTokenTtlRequest, AppRoleDeleteTokenTtlResponse, AppRoleDeleteTokenTtlError, OpenBaoOpContext>;
+export type AppRoleDestroySecretIdError = OpenBaoOpError;
+export declare const appRoleDestroySecretId: API.OperationMethod<AppRoleDestroySecretIdRequest, AppRoleDestroySecretIdResponse, AppRoleDestroySecretIdError, OpenBaoOpContext>;
+export type AppRoleDestroySecretId2Error = OpenBaoOpError;
+export declare const appRoleDestroySecretId2: API.OperationMethod<AppRoleDestroySecretId2Request, AppRoleDestroySecretId2Response, AppRoleDestroySecretId2Error, OpenBaoOpContext>;
+export type AppRoleDestroySecretIdByAccessorError = OpenBaoOpError;
+export declare const appRoleDestroySecretIdByAccessor: API.OperationMethod<AppRoleDestroySecretIdByAccessorRequest, AppRoleDestroySecretIdByAccessorResponse, AppRoleDestroySecretIdByAccessorError, OpenBaoOpContext>;
+export type AppRoleDestroySecretIdByAccessor2Error = OpenBaoOpError;
+export declare const appRoleDestroySecretIdByAccessor2: API.OperationMethod<AppRoleDestroySecretIdByAccessor2Request, AppRoleDestroySecretIdByAccessor2Response, AppRoleDestroySecretIdByAccessor2Error, OpenBaoOpContext>;
+export type AppRoleListRolesError = OpenBaoOpError;
+export declare const appRoleListRoles: API.OperationMethod<AppRoleListRolesRequest, AppRoleListRolesResponse, AppRoleListRolesError, OpenBaoOpContext>;
+export type AppRoleListSecretIdsError = OpenBaoOpError;
+export declare const appRoleListSecretIds: API.OperationMethod<AppRoleListSecretIdsRequest, AppRoleListSecretIdsResponse, AppRoleListSecretIdsError, OpenBaoOpContext>;
+export type AppRoleLookUpSecretIdError = OpenBaoOpError;
+export declare const appRoleLookUpSecretId: API.OperationMethod<AppRoleLookUpSecretIdRequest, AppRoleLookUpSecretIdResponse, AppRoleLookUpSecretIdError, OpenBaoOpContext>;
+export type AppRoleLookUpSecretIdByAccessorError = OpenBaoOpError;
+export declare const appRoleLookUpSecretIdByAccessor: API.OperationMethod<AppRoleLookUpSecretIdByAccessorRequest, AppRoleLookUpSecretIdByAccessorResponse, AppRoleLookUpSecretIdByAccessorError, OpenBaoOpContext>;
+export type AppRoleReadBindSecretIdError = OpenBaoOpError;
+export declare const appRoleReadBindSecretId: API.OperationMethod<AppRoleReadBindSecretIdRequest, AppRoleReadBindSecretIdResponse, AppRoleReadBindSecretIdError, OpenBaoOpContext>;
+export type AppRoleReadBoundCidrListError = OpenBaoOpError;
+export declare const appRoleReadBoundCidrList: API.OperationMethod<AppRoleReadBoundCidrListRequest, AppRoleReadBoundCidrListResponse, AppRoleReadBoundCidrListError, OpenBaoOpContext>;
+export type AppRoleReadLocalSecretIdsError = OpenBaoOpError;
+export declare const appRoleReadLocalSecretIds: API.OperationMethod<AppRoleReadLocalSecretIdsRequest, AppRoleReadLocalSecretIdsResponse, AppRoleReadLocalSecretIdsError, OpenBaoOpContext>;
+export type AppRoleReadPeriodError = OpenBaoOpError;
+export declare const appRoleReadPeriod: API.OperationMethod<AppRoleReadPeriodRequest, AppRoleReadPeriodResponse, AppRoleReadPeriodError, OpenBaoOpContext>;
+export type AppRoleReadPoliciesError = OpenBaoOpError;
+export declare const appRoleReadPolicies: API.OperationMethod<AppRoleReadPoliciesRequest, AppRoleReadPoliciesResponse, AppRoleReadPoliciesError, OpenBaoOpContext>;
+export type AppRoleReadRoleError = OpenBaoOpError;
+export declare const appRoleReadRole: API.OperationMethod<AppRoleReadRoleRequest, AppRoleReadRoleResponse, AppRoleReadRoleError, OpenBaoOpContext>;
+export type AppRoleReadRoleIdError = OpenBaoOpError;
+export declare const appRoleReadRoleId: API.OperationMethod<AppRoleReadRoleIdRequest, AppRoleReadRoleIdResponse, AppRoleReadRoleIdError, OpenBaoOpContext>;
+export type AppRoleReadSecretIdBoundCidrsError = OpenBaoOpError;
+export declare const appRoleReadSecretIdBoundCidrs: API.OperationMethod<AppRoleReadSecretIdBoundCidrsRequest, AppRoleReadSecretIdBoundCidrsResponse, AppRoleReadSecretIdBoundCidrsError, OpenBaoOpContext>;
+export type AppRoleReadSecretIdNumUsesError = OpenBaoOpError;
+export declare const appRoleReadSecretIdNumUses: API.OperationMethod<AppRoleReadSecretIdNumUsesRequest, AppRoleReadSecretIdNumUsesResponse, AppRoleReadSecretIdNumUsesError, OpenBaoOpContext>;
+export type AppRoleReadSecretIdTtlError = OpenBaoOpError;
+export declare const appRoleReadSecretIdTtl: API.OperationMethod<AppRoleReadSecretIdTtlRequest, AppRoleReadSecretIdTtlResponse, AppRoleReadSecretIdTtlError, OpenBaoOpContext>;
+export type AppRoleReadTokenBoundCidrsError = OpenBaoOpError;
+export declare const appRoleReadTokenBoundCidrs: API.OperationMethod<AppRoleReadTokenBoundCidrsRequest, AppRoleReadTokenBoundCidrsResponse, AppRoleReadTokenBoundCidrsError, OpenBaoOpContext>;
+export type AppRoleReadTokenMaxTtlError = OpenBaoOpError;
+export declare const appRoleReadTokenMaxTtl: API.OperationMethod<AppRoleReadTokenMaxTtlRequest, AppRoleReadTokenMaxTtlResponse, AppRoleReadTokenMaxTtlError, OpenBaoOpContext>;
+export type AppRoleReadTokenNumUsesError = OpenBaoOpError;
+export declare const appRoleReadTokenNumUses: API.OperationMethod<AppRoleReadTokenNumUsesRequest, AppRoleReadTokenNumUsesResponse, AppRoleReadTokenNumUsesError, OpenBaoOpContext>;
+export type AppRoleReadTokenTtlError = OpenBaoOpError;
+export declare const appRoleReadTokenTtl: API.OperationMethod<AppRoleReadTokenTtlRequest, AppRoleReadTokenTtlResponse, AppRoleReadTokenTtlError, OpenBaoOpContext>;
+export type AppRoleTidySecretIdError = OpenBaoOpError;
+export declare const appRoleTidySecretId: API.OperationMethod<AppRoleTidySecretIdRequest, AppRoleTidySecretIdResponse, AppRoleTidySecretIdError, OpenBaoOpContext>;
+export type AppRoleWriteBindSecretIdError = OpenBaoOpError;
+export declare const appRoleWriteBindSecretId: API.OperationMethod<AppRoleWriteBindSecretIdRequest, AppRoleWriteBindSecretIdResponse, AppRoleWriteBindSecretIdError, OpenBaoOpContext>;
+export type AppRoleWriteCustomSecretIdError = OpenBaoOpError;
+export declare const appRoleWriteCustomSecretId: API.OperationMethod<AppRoleWriteCustomSecretIdRequest, AppRoleWriteCustomSecretIdResponse, AppRoleWriteCustomSecretIdError, OpenBaoOpContext>;
+export type AppRoleWritePeriodError = OpenBaoOpError;
+export declare const appRoleWritePeriod: API.OperationMethod<AppRoleWritePeriodRequest, AppRoleWritePeriodResponse, AppRoleWritePeriodError, OpenBaoOpContext>;
+export type AppRoleWritePoliciesError = OpenBaoOpError;
+export declare const appRoleWritePolicies: API.OperationMethod<AppRoleWritePoliciesRequest, AppRoleWritePoliciesResponse, AppRoleWritePoliciesError, OpenBaoOpContext>;
+export type AppRoleWriteRoleError = OpenBaoOpError;
+export declare const appRoleWriteRole: API.OperationMethod<AppRoleWriteRoleRequest, AppRoleWriteRoleResponse, AppRoleWriteRoleError, OpenBaoOpContext>;
+export type AppRoleWriteRoleIdError = OpenBaoOpError;
+export declare const appRoleWriteRoleId: API.OperationMethod<AppRoleWriteRoleIdRequest, AppRoleWriteRoleIdResponse, AppRoleWriteRoleIdError, OpenBaoOpContext>;
+export type AppRoleWriteSecretIdError = OpenBaoOpError;
+export declare const appRoleWriteSecretId: API.OperationMethod<AppRoleWriteSecretIdRequest, AppRoleWriteSecretIdResponse, AppRoleWriteSecretIdError, OpenBaoOpContext>;
+export type AppRoleWriteSecretIdBoundCidrsError = OpenBaoOpError;
+export declare const appRoleWriteSecretIdBoundCidrs: API.OperationMethod<AppRoleWriteSecretIdBoundCidrsRequest, AppRoleWriteSecretIdBoundCidrsResponse, AppRoleWriteSecretIdBoundCidrsError, OpenBaoOpContext>;
+export type AppRoleWriteSecretIdNumUsesError = OpenBaoOpError;
+export declare const appRoleWriteSecretIdNumUses: API.OperationMethod<AppRoleWriteSecretIdNumUsesRequest, AppRoleWriteSecretIdNumUsesResponse, AppRoleWriteSecretIdNumUsesError, OpenBaoOpContext>;
+export type AppRoleWriteSecretIdTtlError = OpenBaoOpError;
+export declare const appRoleWriteSecretIdTtl: API.OperationMethod<AppRoleWriteSecretIdTtlRequest, AppRoleWriteSecretIdTtlResponse, AppRoleWriteSecretIdTtlError, OpenBaoOpContext>;
+export type AppRoleWriteTokenBoundCidrsError = OpenBaoOpError;
+export declare const appRoleWriteTokenBoundCidrs: API.OperationMethod<AppRoleWriteTokenBoundCidrsRequest, AppRoleWriteTokenBoundCidrsResponse, AppRoleWriteTokenBoundCidrsError, OpenBaoOpContext>;
+export type AppRoleWriteTokenMaxTtlError = OpenBaoOpError;
+export declare const appRoleWriteTokenMaxTtl: API.OperationMethod<AppRoleWriteTokenMaxTtlRequest, AppRoleWriteTokenMaxTtlResponse, AppRoleWriteTokenMaxTtlError, OpenBaoOpContext>;
+export type AppRoleWriteTokenNumUsesError = OpenBaoOpError;
+export declare const appRoleWriteTokenNumUses: API.OperationMethod<AppRoleWriteTokenNumUsesRequest, AppRoleWriteTokenNumUsesResponse, AppRoleWriteTokenNumUsesError, OpenBaoOpContext>;
+export type AppRoleWriteTokenTtlError = OpenBaoOpError;
+export declare const appRoleWriteTokenTtl: API.OperationMethod<AppRoleWriteTokenTtlRequest, AppRoleWriteTokenTtlResponse, AppRoleWriteTokenTtlError, OpenBaoOpContext>;
+export type ListAppRoleWriteBoundCidrError = OpenBaoOpError;
+export declare const listAppRoleWriteBoundCidr: API.OperationMethod<ListAppRoleWriteBoundCidrRequest, ListAppRoleWriteBoundCidrResponse, ListAppRoleWriteBoundCidrError, OpenBaoOpContext>;
+export type LoginAppRoleError = OpenBaoOpError;
+export declare const loginAppRole: API.OperationMethod<LoginAppRoleRequest, LoginAppRoleResponse, LoginAppRoleError, OpenBaoOpContext>;
+//# sourceMappingURL=approle.d.ts.map