@incident-io/pulumi 0.1.0-alpha.1

package/scheduleSyncTarget.d.ts

@@ -0,0 +1,108 @@
+import * as pulumi from "@pulumi/pulumi";
+import * as inputs from "./types/input";
+import * as outputs from "./types/output";
+/**
+ * Manage schedule sync targets (Slack user groups that schedules can sync to).
+ *
+ * ## Example Usage
+ *
+ * ```typescript
+ * import * as pulumi from "@pulumi/pulumi";
+ * import * as incident from "@incident-io/pulumi";
+ *
+ * // Create a new Slack user group as a sync target
+ * const platformOncall = new incident.ScheduleSyncTarget("platform_oncall", {
+ *     addBotToGroup: true,
+ *     newSlackUserGroup: {
+ *         name: "Platform On-Call",
+ *         handle: "platform-oncall",
+ *         description: "Current on-call engineers for the Platform team",
+ *     },
+ * });
+ * // Or use an existing Slack user group
+ * const existingGroup = new incident.ScheduleSyncTarget("existing_group", {
+ *     addBotToGroup: true,
+ *     slackUserGroupId: "S0123456789",
+ * });
+ * ```
+ */
+export declare class ScheduleSyncTarget extends pulumi.CustomResource {
+    /**
+     * Get an existing ScheduleSyncTarget resource's state with the given name, ID, and optional extra
+     * properties used to qualify the lookup.
+     *
+     * @param name The _unique_ name of the resulting resource.
+     * @param id The _unique_ provider ID of the resource to lookup.
+     * @param state Any extra arguments used during the lookup.
+     * @param opts Optional settings to control the behavior of the CustomResource.
+     */
+    static get(name: string, id: pulumi.Input<pulumi.ID>, state?: ScheduleSyncTargetState, opts?: pulumi.CustomResourceOptions): ScheduleSyncTarget;
+    /**
+     * Returns true if the given object is an instance of ScheduleSyncTarget.  This is designed to work even
+     * when multiple copies of the Pulumi SDK have been loaded into the same process.
+     */
+    static isInstance(obj: any): obj is ScheduleSyncTarget;
+    /**
+     * Whether the incident.io bot should be added to the group as a member. This is needed for some Slack configurations to let us manage the group's membership.
+     */
+    readonly addBotToGroup: pulumi.Output<boolean>;
+    /**
+     * Configuration for creating a new Slack user group. Mutually exclusive with `slackUserGroupId`.
+     */
+    readonly newSlackUserGroup: pulumi.Output<outputs.ScheduleSyncTargetNewSlackUserGroup | undefined>;
+    /**
+     * Slack team (workspace) ID the user group lives in. On Enterprise Grid this identifies which workspace within the org the group belongs to.
+     */
+    readonly slackTeamId: pulumi.Output<string>;
+    /**
+     * Slack ID of the user group whose membership is kept in sync. This is the Slack-assigned group ID (starting with 'S'), not the @-handle.
+     */
+    readonly slackUserGroupId: pulumi.Output<string>;
+    /**
+     * Create a ScheduleSyncTarget resource with the given unique name, arguments, and options.
+     *
+     * @param name The _unique_ name of the resource.
+     * @param args The arguments to use to populate this resource's properties.
+     * @param opts A bag of options that control this resource's behavior.
+     */
+    constructor(name: string, args: ScheduleSyncTargetArgs, opts?: pulumi.CustomResourceOptions);
+}
+/**
+ * Input properties used for looking up and filtering ScheduleSyncTarget resources.
+ */
+export interface ScheduleSyncTargetState {
+    /**
+     * Whether the incident.io bot should be added to the group as a member. This is needed for some Slack configurations to let us manage the group's membership.
+     */
+    addBotToGroup?: pulumi.Input<boolean | undefined>;
+    /**
+     * Configuration for creating a new Slack user group. Mutually exclusive with `slackUserGroupId`.
+     */
+    newSlackUserGroup?: pulumi.Input<inputs.ScheduleSyncTargetNewSlackUserGroup | undefined>;
+    /**
+     * Slack team (workspace) ID the user group lives in. On Enterprise Grid this identifies which workspace within the org the group belongs to.
+     */
+    slackTeamId?: pulumi.Input<string | undefined>;
+    /**
+     * Slack ID of the user group whose membership is kept in sync. This is the Slack-assigned group ID (starting with 'S'), not the @-handle.
+     */
+    slackUserGroupId?: pulumi.Input<string | undefined>;
+}
+/**
+ * The set of arguments for constructing a ScheduleSyncTarget resource.
+ */
+export interface ScheduleSyncTargetArgs {
+    /**
+     * Whether the incident.io bot should be added to the group as a member. This is needed for some Slack configurations to let us manage the group's membership.
+     */
+    addBotToGroup: pulumi.Input<boolean>;
+    /**
+     * Configuration for creating a new Slack user group. Mutually exclusive with `slackUserGroupId`.
+     */
+    newSlackUserGroup?: pulumi.Input<inputs.ScheduleSyncTargetNewSlackUserGroup | undefined>;
+    /**
+     * Slack ID of the user group whose membership is kept in sync. This is the Slack-assigned group ID (starting with 'S'), not the @-handle.
+     */
+    slackUserGroupId?: pulumi.Input<string | undefined>;
+}
+//# sourceMappingURL=scheduleSyncTarget.d.ts.map

package/scheduleSyncTarget.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"scheduleSyncTarget.d.ts","sourceRoot":"","sources":["../scheduleSyncTarget.ts"],"names":[],"mappings":"AAGA,OAAO,KAAK,MAAM,MAAM,gBAAgB,CAAC;AACzC,OAAO,KAAK,MAAM,MAAM,eAAe,CAAC;AACxC,OAAO,KAAK,OAAO,MAAM,gBAAgB,CAAC;AAG1C;;;;;;;;;;;;;;;;;;;;;;;;GAwBG;AACH,qBAAa,kBAAmB,SAAQ,MAAM,CAAC,cAAc;IACzD;;;;;;;;OAQG;WACW,GAAG,CAAC,IAAI,EAAE,MAAM,EAAE,EAAE,EAAE,MAAM,CAAC,KAAK,CAAC,MAAM,CAAC,EAAE,CAAC,EAAE,KAAK,CAAC,EAAE,uBAAuB,EAAE,IAAI,CAAC,EAAE,MAAM,CAAC,qBAAqB,GAAG,kBAAkB;IAOtJ;;;OAGG;WACW,UAAU,CAAC,GAAG,EAAE,GAAG,GAAG,GAAG,IAAI,kBAAkB;IAO7D;;OAEG;IACH,SAAwB,aAAa,EAAE,MAAM,CAAC,MAAM,CAAC,OAAO,CAAC,CAAC;IAC9D;;OAEG;IACH,SAAwB,iBAAiB,EAAE,MAAM,CAAC,MAAM,CAAC,OAAO,CAAC,mCAAmC,GAAG,SAAS,CAAC,CAAC;IAClH;;OAEG;IACH,SAAgC,WAAW,EAAE,MAAM,CAAC,MAAM,CAAC,MAAM,CAAC,CAAC;IACnE;;OAEG;IACH,SAAwB,gBAAgB,EAAE,MAAM,CAAC,MAAM,CAAC,MAAM,CAAC,CAAC;IAEhE;;;;;;OAMG;gBACS,IAAI,EAAE,MAAM,EAAE,IAAI,EAAE,sBAAsB,EAAE,IAAI,CAAC,EAAE,MAAM,CAAC,qBAAqB;CAuB9F;AAED;;GAEG;AACH,MAAM,WAAW,uBAAuB;IACpC;;OAEG;IACH,aAAa,CAAC,EAAE,MAAM,CAAC,KAAK,CAAC,OAAO,GAAG,SAAS,CAAC,CAAC;IAClD;;OAEG;IACH,iBAAiB,CAAC,EAAE,MAAM,CAAC,KAAK,CAAC,MAAM,CAAC,mCAAmC,GAAG,SAAS,CAAC,CAAC;IACzF;;OAEG;IACH,WAAW,CAAC,EAAE,MAAM,CAAC,KAAK,CAAC,MAAM,GAAG,SAAS,CAAC,CAAC;IAC/C;;OAEG;IACH,gBAAgB,CAAC,EAAE,MAAM,CAAC,KAAK,CAAC,MAAM,GAAG,SAAS,CAAC,CAAC;CACvD;AAED;;GAEG;AACH,MAAM,WAAW,sBAAsB;IACnC;;OAEG;IACH,aAAa,EAAE,MAAM,CAAC,KAAK,CAAC,OAAO,CAAC,CAAC;IACrC;;OAEG;IACH,iBAAiB,CAAC,EAAE,MAAM,CAAC,KAAK,CAAC,MAAM,CAAC,mCAAmC,GAAG,SAAS,CAAC,CAAC;IACzF;;OAEG;IACH,gBAAgB,CAAC,EAAE,MAAM,CAAC,KAAK,CAAC,MAAM,GAAG,SAAS,CAAC,CAAC;CACvD"}

package/scheduleSyncTarget.js

@@ -0,0 +1,106 @@
+"use strict";
+// *** WARNING: this file was generated by pulumi-language-nodejs. ***
+// *** Do not edit by hand unless you're certain you know what you are doing! ***
+var __createBinding = (this && this.__createBinding) || (Object.create ? (function(o, m, k, k2) {
+    if (k2 === undefined) k2 = k;
+    var desc = Object.getOwnPropertyDescriptor(m, k);
+    if (!desc || ("get" in desc ? !m.__esModule : desc.writable || desc.configurable)) {
+      desc = { enumerable: true, get: function() { return m[k]; } };
+    }
+    Object.defineProperty(o, k2, desc);
+}) : (function(o, m, k, k2) {
+    if (k2 === undefined) k2 = k;
+    o[k2] = m[k];
+}));
+var __setModuleDefault = (this && this.__setModuleDefault) || (Object.create ? (function(o, v) {
+    Object.defineProperty(o, "default", { enumerable: true, value: v });
+}) : function(o, v) {
+    o["default"] = v;
+});
+var __importStar = (this && this.__importStar) || function (mod) {
+    if (mod && mod.__esModule) return mod;
+    var result = {};
+    if (mod != null) for (var k in mod) if (k !== "default" && Object.prototype.hasOwnProperty.call(mod, k)) __createBinding(result, mod, k);
+    __setModuleDefault(result, mod);
+    return result;
+};
+Object.defineProperty(exports, "__esModule", { value: true });
+exports.ScheduleSyncTarget = void 0;
+const pulumi = __importStar(require("@pulumi/pulumi"));
+const utilities = __importStar(require("./utilities"));
+/**
+ * Manage schedule sync targets (Slack user groups that schedules can sync to).
+ *
+ * ## Example Usage
+ *
+ * ```typescript
+ * import * as pulumi from "@pulumi/pulumi";
+ * import * as incident from "@incident-io/pulumi";
+ *
+ * // Create a new Slack user group as a sync target
+ * const platformOncall = new incident.ScheduleSyncTarget("platform_oncall", {
+ *     addBotToGroup: true,
+ *     newSlackUserGroup: {
+ *         name: "Platform On-Call",
+ *         handle: "platform-oncall",
+ *         description: "Current on-call engineers for the Platform team",
+ *     },
+ * });
+ * // Or use an existing Slack user group
+ * const existingGroup = new incident.ScheduleSyncTarget("existing_group", {
+ *     addBotToGroup: true,
+ *     slackUserGroupId: "S0123456789",
+ * });
+ * ```
+ */
+class ScheduleSyncTarget extends pulumi.CustomResource {
+    /**
+     * Get an existing ScheduleSyncTarget resource's state with the given name, ID, and optional extra
+     * properties used to qualify the lookup.
+     *
+     * @param name The _unique_ name of the resulting resource.
+     * @param id The _unique_ provider ID of the resource to lookup.
+     * @param state Any extra arguments used during the lookup.
+     * @param opts Optional settings to control the behavior of the CustomResource.
+     */
+    static get(name, id, state, opts) {
+        return new ScheduleSyncTarget(name, state, { ...opts, id: id });
+    }
+    /** @internal */
+    static __pulumiType = 'incident:index/scheduleSyncTarget:ScheduleSyncTarget';
+    /**
+     * Returns true if the given object is an instance of ScheduleSyncTarget.  This is designed to work even
+     * when multiple copies of the Pulumi SDK have been loaded into the same process.
+     */
+    static isInstance(obj) {
+        if (obj === undefined || obj === null) {
+            return false;
+        }
+        return obj['__pulumiType'] === ScheduleSyncTarget.__pulumiType;
+    }
+    constructor(name, argsOrState, opts) {
+        let resourceInputs = {};
+        opts = opts || {};
+        if (opts.id) {
+            const state = argsOrState;
+            resourceInputs["addBotToGroup"] = state?.addBotToGroup;
+            resourceInputs["newSlackUserGroup"] = state?.newSlackUserGroup;
+            resourceInputs["slackTeamId"] = state?.slackTeamId;
+            resourceInputs["slackUserGroupId"] = state?.slackUserGroupId;
+        }
+        else {
+            const args = argsOrState;
+            if (args?.addBotToGroup === undefined && !opts.urn) {
+                throw new Error("Missing required property 'addBotToGroup'");
+            }
+            resourceInputs["addBotToGroup"] = args?.addBotToGroup;
+            resourceInputs["newSlackUserGroup"] = args?.newSlackUserGroup;
+            resourceInputs["slackUserGroupId"] = args?.slackUserGroupId;
+            resourceInputs["slackTeamId"] = undefined /*out*/;
+        }
+        opts = pulumi.mergeOptions(utilities.resourceOptsDefaults(), opts);
+        super(ScheduleSyncTarget.__pulumiType, name, resourceInputs, opts);
+    }
+}
+exports.ScheduleSyncTarget = ScheduleSyncTarget;
+//# sourceMappingURL=scheduleSyncTarget.js.map

package/scheduleSyncTarget.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"scheduleSyncTarget.js","sourceRoot":"","sources":["../scheduleSyncTarget.ts"],"names":[],"mappings":";AAAA,sEAAsE;AACtE,iFAAiF;;;;;;;;;;;;;;;;;;;;;;;;;;AAEjF,uDAAyC;AAGzC,uDAAyC;AAEzC;;;;;;;;;;;;;;;;;;;;;;;;GAwBG;AACH,MAAa,kBAAmB,SAAQ,MAAM,CAAC,cAAc;IACzD;;;;;;;;OAQG;IACI,MAAM,CAAC,GAAG,CAAC,IAAY,EAAE,EAA2B,EAAE,KAA+B,EAAE,IAAmC;QAC7H,OAAO,IAAI,kBAAkB,CAAC,IAAI,EAAO,KAAK,EAAE,EAAE,GAAG,IAAI,EAAE,EAAE,EAAE,EAAE,EAAE,CAAC,CAAC;IACzE,CAAC;IAED,gBAAgB;IACT,MAAM,CAAU,YAAY,GAAG,sDAAsD,CAAC;IAE7F;;;OAGG;IACI,MAAM,CAAC,UAAU,CAAC,GAAQ;QAC7B,IAAI,GAAG,KAAK,SAAS,IAAI,GAAG,KAAK,IAAI,EAAE;YACnC,OAAO,KAAK,CAAC;SAChB;QACD,OAAO,GAAG,CAAC,cAAc,CAAC,KAAK,kBAAkB,CAAC,YAAY,CAAC;IACnE,CAAC;IA2BD,YAAY,IAAY,EAAE,WAA8D,EAAE,IAAmC;QACzH,IAAI,cAAc,GAAkB,EAAE,CAAC;QACvC,IAAI,GAAG,IAAI,IAAI,EAAE,CAAC;QAClB,IAAI,IAAI,CAAC,EAAE,EAAE;YACT,MAAM,KAAK,GAAG,WAAkD,CAAC;YACjE,cAAc,CAAC,eAAe,CAAC,GAAG,KAAK,EAAE,aAAa,CAAC;YACvD,cAAc,CAAC,mBAAmB,CAAC,GAAG,KAAK,EAAE,iBAAiB,CAAC;YAC/D,cAAc,CAAC,aAAa,CAAC,GAAG,KAAK,EAAE,WAAW,CAAC;YACnD,cAAc,CAAC,kBAAkB,CAAC,GAAG,KAAK,EAAE,gBAAgB,CAAC;SAChE;aAAM;YACH,MAAM,IAAI,GAAG,WAAiD,CAAC;YAC/D,IAAI,IAAI,EAAE,aAAa,KAAK,SAAS,IAAI,CAAC,IAAI,CAAC,GAAG,EAAE;gBAChD,MAAM,IAAI,KAAK,CAAC,2CAA2C,CAAC,CAAC;aAChE;YACD,cAAc,CAAC,eAAe,CAAC,GAAG,IAAI,EAAE,aAAa,CAAC;YACtD,cAAc,CAAC,mBAAmB,CAAC,GAAG,IAAI,EAAE,iBAAiB,CAAC;YAC9D,cAAc,CAAC,kBAAkB,CAAC,GAAG,IAAI,EAAE,gBAAgB,CAAC;YAC5D,cAAc,CAAC,aAAa,CAAC,GAAG,SAAS,CAAC,OAAO,CAAC;SACrD;QACD,IAAI,GAAG,MAAM,CAAC,YAAY,CAAC,SAAS,CAAC,oBAAoB,EAAE,EAAE,IAAI,CAAC,CAAC;QACnE,KAAK,CAAC,kBAAkB,CAAC,YAAY,EAAE,IAAI,EAAE,cAAc,EAAE,IAAI,CAAC,CAAC;IACvE,CAAC;;AA1EL,gDA2EC"}

package/secret.d.ts

@@ -0,0 +1,276 @@
+import * as pulumi from "@pulumi/pulumi";
+/**
+ * Manage secrets: named credentials that workflows can reference. A secret's value can be set and rotated but is never returned by the API.
+ *
+ * A secret's value is write-only: incident.io stores it encrypted and never returns it, so
+ * Terraform cannot read it back to compare against your configuration. Set it with `valueWo`, a
+ * write-only attribute,
+ * which needs Terraform 1.11 or OpenTofu 1.11 and above. The value is never written to state or to a
+ * plan file.
+ *
+ * Because the value is invisible to Terraform, changing `valueWo` on its own does nothing. Rotating a
+ * secret means changing `valueWoVersion` as well, conventionally by incrementing it: that is the
+ * change Terraform can see, and it is what asks incident.io to rotate. A rotation replaces the value
+ * and advances `version`; the previous value is retired and cannot be recovered.
+ *
+ * Both value attributes are optional after the secret exists, so Terraform can own a secret's name,
+ * description and owning teams while something else rotates it. Leave them unset and the value is
+ * never touched.
+ *
+ * ## Example - Manage a secret
+ *
+ * ```typescript
+ * import * as pulumi from "@pulumi/pulumi";
+ * import * as incident from "@incident-io/pulumi";
+ *
+ * const config = new pulumi.Config();
+ * const pagerdutyWebhookToken = config.require("pagerdutyWebhookToken");
+ * const pagerdutyWebhookTokenSecret = new incident.Secret("pagerduty_webhook_token", {
+ *     name: "PagerDuty webhook token",
+ *     description: "Auth token for the PagerDuty outgoing webhook",
+ *     valueWo: pagerdutyWebhookToken,
+ *     valueWoVersion: 1,
+ * });
+ * const billingApiKey = config.require("billingApiKey");
+ * const billingApiKeySecret = new incident.Secret("billing_api_key", {
+ *     name: "Billing API key",
+ *     valueWo: billingApiKey,
+ *     valueWoVersion: 1,
+ *     owningTeamIds: ["01G0J1EXE7AXZ2C93K61WBPYEH"],
+ * });
+ * // Terraform doesn't have to own the value. Leave both value attributes off an existing
+ * // secret and Terraform manages its name, description and owning teams while something
+ * // else - the dashboard, or a rotation job - looks after the value.
+ * const rotatedElsewhere = new incident.Secret("rotated_elsewhere", {
+ *     name: "Datadog API key",
+ *     description: "Rotated nightly by our key-rotation job",
+ * });
+ * ```
+ *
+ * ## Example - Use a secret in a workflow's webhook step
+ *
+ * ```typescript
+ * import * as pulumi from "@pulumi/pulumi";
+ * import * as incident from "@incident-io/pulumi";
+ *
+ * const config = new pulumi.Config();
+ * const partnerWebhookToken = config.require("partnerWebhookToken");
+ * const partnerWebhookTokenSecret = new incident.Secret("partner_webhook_token", {
+ *     name: "Partner webhook token",
+ *     description: "Bearer token for the partner's incident webhook",
+ *     valueWo: partnerWebhookToken,
+ *     valueWoVersion: 1,
+ * });
+ * // The first way: put the secret's value inside a field's text.
+ * //
+ * // A field whose feature set ends in `_with_secrets` - which the webhook step's headers do -
+ * // accepts a variable naming a secret by ID, and incident.io substitutes the value when the
+ * // workflow runs. Write it as `{{ <secret id> }}` and reference the secret's `id`, never its
+ * // value: Terraform is arranging for the value to be used, not handling it.
+ * const authorizationHeader = incident.getRichTextOutput({
+ *     markdown: pulumi.interpolate`Authorization: Bearer {{ ${partnerWebhookTokenSecret.id} }}`,
+ *     featureSet: "plain_single_line_with_secrets",
+ * });
+ * const contentTypeHeader = incident.getRichText({
+ *     markdown: "Content-Type: application/json",
+ *     featureSet: "plain_single_line_with_secrets",
+ * });
+ * const webhookEndpoint = incident.getRichText({
+ *     markdown: "https://partner.example.com/hooks/incident",
+ *     featureSet: "plain_single_line",
+ * });
+ * const webhookBody = incident.getRichText({
+ *     markdown: "{{ incident.name }} is now {{ incident.status }} at severity {{ incident.severity }}.\n",
+ *     featureSet: "rich",
+ * });
+ * const notifyPartner = new incident.Workflow("notify_partner", {
+ *     name: "Notify our partner of incident updates",
+ *     trigger: "incident.updated",
+ *     expressions: [],
+ *     conditionGroups: [],
+ *     steps: [{
+ *         id: "01K5TSNDBF7KBZY9AFDKYXJM3N",
+ *         name: "webhook.send",
+ *         paramBindings: [
+ *             {
+ *                 valueLiteral: webhookEndpoint.then(webhookEndpoint => webhookEndpoint.json),
+ *             },
+ *             {
+ *                 valueLiteral: "POST",
+ *             },
+ *             {
+ *                 values: [
+ *                     authorizationHeader.json,
+ *                     contentTypeHeader.then(contentTypeHeader => contentTypeHeader.json),
+ *                 ],
+ *             },
+ *             {
+ *                 valueLiteral: webhookBody.then(webhookBody => webhookBody.json),
+ *             },
+ *             {
+ *                 valueLiteral: partnerWebhookTokenSecret.id,
+ *             },
+ *             {},
+ *             {},
+ *         ],
+ *     }],
+ *     onceFors: ["incident"],
+ *     privateIncidentScope: "none",
+ *     continueOnStepError: false,
+ *     runsOnIncidents: "newly_created_and_active",
+ *     runsOnIncidentModes: ["standard"],
+ *     state: "draft",
+ * });
+ * ```
+ *
+ * ## Import
+ *
+ * Import is supported using an `import` block or the `pulumi import` command:
+ *
+ * The `pulumi import` command can be used, for example:
+ *
+ * !/bin/bash
+ *
+ * Import a secret using its ID
+ * Replace the ID with a real ID from your incident.io organization
+ *
+ * ```sh
+ * $ pulumi import incident:index/secret:Secret example 01ABC123DEF456GHI789JKL
+ * ```
+ *
+ * An imported secret has no value_wo_version, because the value it already holds didn't
+ * come from your configuration. If your config sets valueWo and value_wo_version, the
+ * first apply after importing will rotate the secret to that value - the plan says so.
+ * To adopt a secret without touching its value, leave both attributes unset.
+ */
+export declare class Secret extends pulumi.CustomResource {
+    /**
+     * Get an existing Secret resource's state with the given name, ID, and optional extra
+     * properties used to qualify the lookup.
+     *
+     * @param name The _unique_ name of the resulting resource.
+     * @param id The _unique_ provider ID of the resource to lookup.
+     * @param state Any extra arguments used during the lookup.
+     * @param opts Optional settings to control the behavior of the CustomResource.
+     */
+    static get(name: string, id: pulumi.Input<pulumi.ID>, state?: SecretState, opts?: pulumi.CustomResourceOptions): Secret;
+    /**
+     * Returns true if the given object is an instance of Secret.  This is designed to work even
+     * when multiple copies of the Pulumi SDK have been loaded into the same process.
+     */
+    static isInstance(obj: any): obj is Secret;
+    /**
+     * When this secret was created.
+     */
+    readonly createdAt: pulumi.Output<string>;
+    /**
+     * Optional description of what this secret is for
+     */
+    readonly description: pulumi.Output<string | undefined>;
+    /**
+     * The last four characters of the current value, for masked display. Absent when the value is four characters or shorter.
+     */
+    readonly lastFourChars: pulumi.Output<string>;
+    /**
+     * Human-readable name, unique within the organisation amongst unarchived secrets. At most 1024 bytes, counted in bytes rather than characters, so a name using multi-byte characters reaches the limit sooner.
+     */
+    readonly name: pulumi.Output<string>;
+    /**
+     * IDs of the teams that own this secret. Empty means the secret is owned by the whole organisation.
+     */
+    readonly owningTeamIds: pulumi.Output<string[]>;
+    /**
+     * When this secret was last changed, which includes being rotated as well as having its metadata edited.
+     */
+    readonly updatedAt: pulumi.Output<string>;
+    /**
+     * **NOTE:** This field is write-only and its value will not be updated in state as part of read operations.
+     * The secret's plaintext value, as a [write-only attribute](https://developer.hashicorp.com/terraform/language/resources/ephemeral/write-only): it is sent to incident.io and never written to state or to a plan file. Required when creating a secret. Changing it alone has no effect, as Terraform cannot see that it changed: change `valueWoVersion` to rotate the secret.
+     */
+    readonly valueWo: pulumi.Output<string | undefined>;
+    /**
+     * The version of `valueWo` this configuration holds. Terraform stores this number, so changing it - conventionally by incrementing it - is what asks incident.io to rotate the secret to the current `valueWo`. It is your own counter, unrelated to the `version` incident.io reports.
+     */
+    readonly valueWoVersion: pulumi.Output<number | undefined>;
+    /**
+     * The current version number, incremented on each rotation
+     */
+    readonly version: pulumi.Output<number>;
+    /**
+     * Create a Secret resource with the given unique name, arguments, and options.
+     *
+     * @param name The _unique_ name of the resource.
+     * @param args The arguments to use to populate this resource's properties.
+     * @param opts A bag of options that control this resource's behavior.
+     */
+    constructor(name: string, args?: SecretArgs, opts?: pulumi.CustomResourceOptions);
+}
+/**
+ * Input properties used for looking up and filtering Secret resources.
+ */
+export interface SecretState {
+    /**
+     * When this secret was created.
+     */
+    createdAt?: pulumi.Input<string | undefined>;
+    /**
+     * Optional description of what this secret is for
+     */
+    description?: pulumi.Input<string | undefined>;
+    /**
+     * The last four characters of the current value, for masked display. Absent when the value is four characters or shorter.
+     */
+    lastFourChars?: pulumi.Input<string | undefined>;
+    /**
+     * Human-readable name, unique within the organisation amongst unarchived secrets. At most 1024 bytes, counted in bytes rather than characters, so a name using multi-byte characters reaches the limit sooner.
+     */
+    name?: pulumi.Input<string | undefined>;
+    /**
+     * IDs of the teams that own this secret. Empty means the secret is owned by the whole organisation.
+     */
+    owningTeamIds?: pulumi.Input<pulumi.Input<string>[] | undefined>;
+    /**
+     * When this secret was last changed, which includes being rotated as well as having its metadata edited.
+     */
+    updatedAt?: pulumi.Input<string | undefined>;
+    /**
+     * **NOTE:** This field is write-only and its value will not be updated in state as part of read operations.
+     * The secret's plaintext value, as a [write-only attribute](https://developer.hashicorp.com/terraform/language/resources/ephemeral/write-only): it is sent to incident.io and never written to state or to a plan file. Required when creating a secret. Changing it alone has no effect, as Terraform cannot see that it changed: change `valueWoVersion` to rotate the secret.
+     */
+    valueWo?: pulumi.Input<string | undefined>;
+    /**
+     * The version of `valueWo` this configuration holds. Terraform stores this number, so changing it - conventionally by incrementing it - is what asks incident.io to rotate the secret to the current `valueWo`. It is your own counter, unrelated to the `version` incident.io reports.
+     */
+    valueWoVersion?: pulumi.Input<number | undefined>;
+    /**
+     * The current version number, incremented on each rotation
+     */
+    version?: pulumi.Input<number | undefined>;
+}
+/**
+ * The set of arguments for constructing a Secret resource.
+ */
+export interface SecretArgs {
+    /**
+     * Optional description of what this secret is for
+     */
+    description?: pulumi.Input<string | undefined>;
+    /**
+     * Human-readable name, unique within the organisation amongst unarchived secrets. At most 1024 bytes, counted in bytes rather than characters, so a name using multi-byte characters reaches the limit sooner.
+     */
+    name?: pulumi.Input<string | undefined>;
+    /**
+     * IDs of the teams that own this secret. Empty means the secret is owned by the whole organisation.
+     */
+    owningTeamIds?: pulumi.Input<pulumi.Input<string>[] | undefined>;
+    /**
+     * **NOTE:** This field is write-only and its value will not be updated in state as part of read operations.
+     * The secret's plaintext value, as a [write-only attribute](https://developer.hashicorp.com/terraform/language/resources/ephemeral/write-only): it is sent to incident.io and never written to state or to a plan file. Required when creating a secret. Changing it alone has no effect, as Terraform cannot see that it changed: change `valueWoVersion` to rotate the secret.
+     */
+    valueWo?: pulumi.Input<string | undefined>;
+    /**
+     * The version of `valueWo` this configuration holds. Terraform stores this number, so changing it - conventionally by incrementing it - is what asks incident.io to rotate the secret to the current `valueWo`. It is your own counter, unrelated to the `version` incident.io reports.
+     */
+    valueWoVersion?: pulumi.Input<number | undefined>;
+}
+//# sourceMappingURL=secret.d.ts.map

package/secret.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"secret.d.ts","sourceRoot":"","sources":["../secret.ts"],"names":[],"mappings":"AAGA,OAAO,KAAK,MAAM,MAAM,gBAAgB,CAAC;AAGzC;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;GA+IG;AACH,qBAAa,MAAO,SAAQ,MAAM,CAAC,cAAc;IAC7C;;;;;;;;OAQG;WACW,GAAG,CAAC,IAAI,EAAE,MAAM,EAAE,EAAE,EAAE,MAAM,CAAC,KAAK,CAAC,MAAM,CAAC,EAAE,CAAC,EAAE,KAAK,CAAC,EAAE,WAAW,EAAE,IAAI,CAAC,EAAE,MAAM,CAAC,qBAAqB,GAAG,MAAM;IAO9H;;;OAGG;WACW,UAAU,CAAC,GAAG,EAAE,GAAG,GAAG,GAAG,IAAI,MAAM;IAOjD;;OAEG;IACH,SAAgC,SAAS,EAAE,MAAM,CAAC,MAAM,CAAC,MAAM,CAAC,CAAC;IACjE;;OAEG;IACH,SAAwB,WAAW,EAAE,MAAM,CAAC,MAAM,CAAC,MAAM,GAAG,SAAS,CAAC,CAAC;IACvE;;OAEG;IACH,SAAgC,aAAa,EAAE,MAAM,CAAC,MAAM,CAAC,MAAM,CAAC,CAAC;IACrE;;OAEG;IACH,SAAwB,IAAI,EAAE,MAAM,CAAC,MAAM,CAAC,MAAM,CAAC,CAAC;IACpD;;OAEG;IACH,SAAwB,aAAa,EAAE,MAAM,CAAC,MAAM,CAAC,MAAM,EAAE,CAAC,CAAC;IAC/D;;OAEG;IACH,SAAgC,SAAS,EAAE,MAAM,CAAC,MAAM,CAAC,MAAM,CAAC,CAAC;IACjE;;;OAGG;IACH,SAAwB,OAAO,EAAE,MAAM,CAAC,MAAM,CAAC,MAAM,GAAG,SAAS,CAAC,CAAC;IACnE;;OAEG;IACH,SAAwB,cAAc,EAAE,MAAM,CAAC,MAAM,CAAC,MAAM,GAAG,SAAS,CAAC,CAAC;IAC1E;;OAEG;IACH,SAAgC,OAAO,EAAE,MAAM,CAAC,MAAM,CAAC,MAAM,CAAC,CAAC;IAE/D;;;;;;OAMG;gBACS,IAAI,EAAE,MAAM,EAAE,IAAI,CAAC,EAAE,UAAU,EAAE,IAAI,CAAC,EAAE,MAAM,CAAC,qBAAqB;CAgCnF;AAED;;GAEG;AACH,MAAM,WAAW,WAAW;IACxB;;OAEG;IACH,SAAS,CAAC,EAAE,MAAM,CAAC,KAAK,CAAC,MAAM,GAAG,SAAS,CAAC,CAAC;IAC7C;;OAEG;IACH,WAAW,CAAC,EAAE,MAAM,CAAC,KAAK,CAAC,MAAM,GAAG,SAAS,CAAC,CAAC;IAC/C;;OAEG;IACH,aAAa,CAAC,EAAE,MAAM,CAAC,KAAK,CAAC,MAAM,GAAG,SAAS,CAAC,CAAC;IACjD;;OAEG;IACH,IAAI,CAAC,EAAE,MAAM,CAAC,KAAK,CAAC,MAAM,GAAG,SAAS,CAAC,CAAC;IACxC;;OAEG;IACH,aAAa,CAAC,EAAE,MAAM,CAAC,KAAK,CAAC,MAAM,CAAC,KAAK,CAAC,MAAM,CAAC,EAAE,GAAG,SAAS,CAAC,CAAC;IACjE;;OAEG;IACH,SAAS,CAAC,EAAE,MAAM,CAAC,KAAK,CAAC,MAAM,GAAG,SAAS,CAAC,CAAC;IAC7C;;;OAGG;IACH,OAAO,CAAC,EAAE,MAAM,CAAC,KAAK,CAAC,MAAM,GAAG,SAAS,CAAC,CAAC;IAC3C;;OAEG;IACH,cAAc,CAAC,EAAE,MAAM,CAAC,KAAK,CAAC,MAAM,GAAG,SAAS,CAAC,CAAC;IAClD;;OAEG;IACH,OAAO,CAAC,EAAE,MAAM,CAAC,KAAK,CAAC,MAAM,GAAG,SAAS,CAAC,CAAC;CAC9C;AAED;;GAEG;AACH,MAAM,WAAW,UAAU;IACvB;;OAEG;IACH,WAAW,CAAC,EAAE,MAAM,CAAC,KAAK,CAAC,MAAM,GAAG,SAAS,CAAC,CAAC;IAC/C;;OAEG;IACH,IAAI,CAAC,EAAE,MAAM,CAAC,KAAK,CAAC,MAAM,GAAG,SAAS,CAAC,CAAC;IACxC;;OAEG;IACH,aAAa,CAAC,EAAE,MAAM,CAAC,KAAK,CAAC,MAAM,CAAC,KAAK,CAAC,MAAM,CAAC,EAAE,GAAG,SAAS,CAAC,CAAC;IACjE;;;OAGG;IACH,OAAO,CAAC,EAAE,MAAM,CAAC,KAAK,CAAC,MAAM,GAAG,SAAS,CAAC,CAAC;IAC3C;;OAEG;IACH,cAAc,CAAC,EAAE,MAAM,CAAC,KAAK,CAAC,MAAM,GAAG,SAAS,CAAC,CAAC;CACrD"}