@kong-ui-public/entities-vaults 4.0.15-pr.2781.b1238e65f.0 → 4.0.15

package/dist/entities-vaults.es.js

@@ -0,0 +1,2877 @@
+import { defineComponent as ce, ref as $, computed as w, watch as ke, onBeforeMount as we, resolveComponent as J, createElementBlock as W, openBlock as V, createVNode as u, unref as e, createSlots as Ke, withCtx as m, createTextVNode as ue, toDisplayString as H, createElementVNode as x, createBlock as D, Teleport as Ye, createCommentVNode as B, reactive as ye, resolveDynamicComponent as Pe, TransitionGroup as Xe, Fragment as qe, renderList as et, mergeProps as je, normalizeClass as tt, nextTick as lt, renderSlot as ot } from "vue";
+import { useRouter as Ee } from "vue-router";
+import { BookIcon as Me, AddIcon as Re, SecurityIcon as at, ConjourIcon as rt, AzureIcon as it, HashicorpIcon as nt, GoogleCloudIcon as st, AwsIcon as dt, CodeIcon as ut, KongIcon as ct } from "@kong/icons";
+import { useAxios as _e, useTableState as ft, useFetcher as We, useDeleteUrlBuilder as De, FetcherStatus as Be, EntityBaseTable as Je, PermissionsWrapper as ge, TableTags as pt, EntityFilter as Le, EntityDeleteModal as ze, EntityTypes as Ge, useErrors as Ze, EntityBaseFormType as Ve, useGatewayFeatureSupported as mt, EntityBaseForm as Qe, SupportedEntityType as Ue, EntityFormSection as Ae, useStringHelpers as vt, useHelpers as gt, ConfigurationSchemaType as Se, ConfigurationSchemaSection as Ne, EntityBaseConfigCard as bt, ConfigCardItem as _t, useDebouncedFilter as Fe } from "@kong-ui-public/entities-shared";
+import { createI18n as ht, i18nTComponent as yt } from "@kong-ui-public/i18n";
+const Vt = {
+  create: "New vault",
+  copy_id: "Copy ID",
+  copy_json: "Copy JSON",
+  edit: "Edit",
+  delete: "Delete",
+  view: "View Details",
+  loading: "Loading..."
+}, kt = {
+  general: "Vaults could not be retrieved",
+  delete: "The vault could not be deleted at this time.",
+  copy: "Failed to copy to clipboard"
+}, Ct = {
+  placeholder_for_vaults: {
+    konnect: "Filter by exact prefix or ID"
+  },
+  placeholder_for_secrets: {
+    konnect: "Filter by exact key"
+  }
+}, wt = {
+  title: "Vaults",
+  list: {
+    toolbar_actions: {
+      new_vault: "New vault"
+    },
+    table_headers: {
+      prefix: "Prefix",
+      name: "Vault Type",
+      description: "Description",
+      tags: "Tags",
+      id: "ID"
+    },
+    empty_state: {
+      title: "Configure a New Vault",
+      description: "Improve the security of your Kong Gateway deployment with centralized secrets."
+    },
+    empty_state_v2: {
+      title: "Configure your first vault",
+      group: "Vaults created in gateways within this group will automatically appear here.",
+      description: "Vaults securely and centrally store sensitive information, such as credentials, tokens, and keys, to simplify secrets management.",
+      create_cta: "New vault",
+      learn_more: "Learn more"
+    }
+  }
+}, St = {
+  title: "Secrets",
+  list: {
+    toolbar_actions: {
+      new_secret: "Store New Secret"
+    },
+    table_headers: {
+      key: "Secret Key",
+      updated_at: "Updated At"
+    },
+    empty_state: {
+      title: "No Secrets Stored",
+      description: "Improve the security of your Kong Gateway deployment with centralized secrets."
+    }
+  },
+  form: {
+    info: {
+      title: "Secret",
+      description: "Enter the secret key and secret value to be stored in Konnect vault"
+    },
+    fields: {
+      key: {
+        label: "Key",
+        placeholder: "Enter key"
+      },
+      value: {
+        label: "Value",
+        placeholder: "Enter value here, can be simple values or multi-line"
+      }
+    },
+    hint: "Once saved, the secret value will not be visible"
+  }
+}, It = {
+  success: "Copied {val} to clipboard",
+  success_brief: "Successfully copied to clipboard"
+}, xt = {
+  vault_type: "Vault Type"
+}, Rt = {
+  sections: {
+    general: {
+      title: "General Information",
+      description: "General information helps identify and manage this Vault instance."
+    },
+    config: {
+      title: "Vault Configuration",
+      description: "Select a type of Vault and configure properties specific to each type of Vault."
+    }
+  },
+  fields: {
+    prefix: {
+      label: "Prefix",
+      placeholder: "Enter a unique prefix for this vault",
+      help: "e.g. my-vault",
+      tooltip: "The reference prefix. You need this prefix to access secrets stored in this vault. For example, {vault://<your-prefix>/<some-secret>}."
+    },
+    description: {
+      label: "Description",
+      placeholder: "Enter some description for this vault"
+    },
+    tags: {
+      label: "Tags",
+      placeholder: "Enter a list of tags separated by comma",
+      help: "e.g. tag1, tag2, tag3"
+    }
+  },
+  config: {
+    konnect: {
+      label: "Konnect",
+      description: "Access secrets stored directly in Konnect's unified platform to easily reference in Kong Gateway configuration."
+    },
+    env: {
+      label: "Environment Variables",
+      description: "Access secrets stored via variables to be made available in Kong Gateway at runtime.",
+      fields: {
+        prefix: {
+          label: "Environment Variable Prefix",
+          placeholder: "Enter your environment variable vault prefix",
+          tooltip: "Data plane will access all the environment variables starting with this prefix."
+        }
+      }
+    },
+    aws: {
+      label: "AWS Secrets Manager",
+      description: "Access secrets stored in AWS Secrets Manager for Kong Gateway configuration.",
+      fields: {
+        region: {
+          label: "Region",
+          placeholder: "Select an AWS region",
+          tooltip: "The AWS region your vault is located in",
+          locations: {
+            "us-east-1": {
+              location: "N. Virginia"
+            },
+            "us-east-2": {
+              location: "Ohio"
+            },
+            "us-west-1": {
+              location: "N. California"
+            },
+            "us-west-2": {
+              location: "Oregon"
+            },
+            "af-south-1": {
+              location: "Cape Town"
+            },
+            "ap-east-1": {
+              location: "Hong Kong"
+            },
+            "ap-southeast-3": {
+              location: "Jakarta"
+            },
+            "ap-south-1": {
+              location: "Mumbai"
+            },
+            "ap-northeast-1": {
+              location: "Tokyo"
+            },
+            "ap-northeast-2": {
+              location: "Seoul"
+            },
+            "ap-northeast-3": {
+              location: "Osaka"
+            },
+            "ap-southeast-1": {
+              location: "Singapore"
+            },
+            "ap-southeast-2": {
+              location: "Sydney"
+            },
+            "ca-central-1": {
+              location: "Canada"
+            },
+            "eu-central-1": {
+              location: "Frankfurt"
+            },
+            "eu-west-1": {
+              location: "Ireland"
+            },
+            "eu-west-2": {
+              location: "London"
+            },
+            "eu-west-3": {
+              location: "Paris"
+            },
+            "eu-south-1": {
+              location: "Milan"
+            },
+            "eu-north-1": {
+              location: "Stockholm"
+            },
+            "me-south-1": {
+              location: "Bahrain"
+            },
+            "sa-east-1": {
+              location: "São Paulo"
+            },
+            "us-gov-east-1": {
+              location: "US East"
+            },
+            "us-gov-west-1": {
+              location: "US West"
+            }
+          }
+        },
+        endpoint_url: {
+          label: "Endpoint URL",
+          tooltip: 'The AWS SecretsManager service endpoint url. If not specified, the value used by vault will be the official AWS SecretsManager service url which is `https://secretsmanager.<region>.amazonaws.com`. You can specify a complete URL(including the "http/https" scheme) to override the endpoint that vault will connect to.'
+        },
+        assume_role_arn: {
+          label: "Assume Role ARN",
+          tooltip: "The target AWS IAM role ARN that will be assumed. Typically this is used for operating between multiple roles or cross-accounts. If you are not using assume role you should not specify this value."
+        },
+        role_session_name: {
+          label: "Role Session Name",
+          tooltip: "The role session name used for role assuming."
+        },
+        sts_endpoint_url: {
+          label: "STS Endpoint URL",
+          tooltip: "The custom STS endpoint URL used for role assuming in AWS Vault. Note that this value will override the default STS endpoint URL(which should be `https: //sts.amazonaws.com`, or `https: //sts.<region>.amazonaws.com` if you have `AWS_STS_REGIONAL_ENDPOINTS` set to `regional`). If you are not using private VPC endpoint for STS service, you should not specify this value."
+        }
+      }
+    },
+    gcp: {
+      label: "Google Secret Manager",
+      description: "Access secrets stored in Google Secret Manager for Kong Gateway configuration.",
+      fields: {
+        project_id: {
+          label: "Project ID",
+          placeholder: "Enter your Google Cloud Project ID",
+          tooltip: {
+            text: "Visit your Google API Console and select {italic-text} in the projects list to see your project ID",
+            italicText: "Manage all projects"
+          }
+        }
+      }
+    },
+    hcv: {
+      label: "HashiCorp Vault",
+      description: "Access secrets stored in HashiCorp Vault for Kong Gateway configuration.",
+      fields: {
+        protocol: {
+          label: "Protocol"
+        },
+        host: {
+          label: "Host"
+        },
+        port: {
+          label: "Port"
+        },
+        mount: {
+          label: "Mount"
+        },
+        kv: {
+          label: "Kv"
+        },
+        namespace: {
+          label: "Namespace"
+        },
+        auth_method: {
+          label: "Authentication Method"
+        },
+        token: {
+          label: "Token"
+        },
+        kube_role: {
+          label: "Kubernetes Role"
+        },
+        kube_auth_path: {
+          label: "Kubernetes Auth Path"
+        },
+        kube_api_token_file: {
+          label: "Kubernetes API Token File"
+        },
+        approle_auth_path: {
+          label: "App Role Auth Path"
+        },
+        approle_role_id: {
+          label: "App Role Role ID"
+        },
+        approle_secret_id: {
+          label: "App Role Secret ID"
+        },
+        approle_secret_id_file: {
+          label: "App Role Secret ID File"
+        },
+        approle_response_wrapping: {
+          label: "App Role Response Wrapping"
+        },
+        cert_auth_cert: {
+          label: "Cert"
+        },
+        cert_auth_cert_key: {
+          label: "Cert Key"
+        },
+        cert_auth_role_name: {
+          label: "Role Name"
+        },
+        oauth2_audiences: {
+          label: "OAuth2 Audiences",
+          tooltip: "Comma-separated list of OAuth2 audiences."
+        },
+        oauth2_client_id: {
+          label: "OAuth2 Client ID"
+        },
+        oauth2_client_secret: {
+          label: "OAuth2 Client Secret"
+        },
+        jwt_role: {
+          label: "JWT Role",
+          tooltip: "The configured role name in HashiCorp Vault for JWT auth. When creating the role in HashiCorp Vault, make sure that the `role_type` is `jwt` and the `token_policies` have permissions to read the secrets."
+        },
+        oauth2_token_endpoint: {
+          label: "OAuth2 Token Endpoint"
+        }
+      }
+    },
+    azure: {
+      label: "Azure Vault",
+      description: "Access secrets stored in Azure Key Vault for Kong Gateway configuration.",
+      fields: {
+        location: {
+          label: "Location"
+        },
+        vault_uri: {
+          label: "Vault URI"
+        },
+        credential_prefix: {
+          label: "Credential Prefix"
+        },
+        type: {
+          label: "Type",
+          placeholder: "Select a type"
+        },
+        client_id: {
+          label: "Client ID"
+        },
+        tenant_id: {
+          label: "Tenant ID"
+        }
+      }
+    },
+    conjur: {
+      label: "Conjur Vault",
+      description: "Access secrets stored in Conjur Key Vault for Kong Gateway configuration.",
+      fields: {
+        endpoint_url: {
+          label: "Conjur Server",
+          tooltip: "The CyberArk Conjur backend url. Accepts http or https."
+        },
+        login: {
+          label: "Workload Identity",
+          tooltip: "Identity of the workload or host authenticating to Conjur. In this case Kong is the workload/host."
+        },
+        api_key: {
+          label: "API Key",
+          tooltip: "The API key issued to the workload."
+        },
+        account: {
+          label: "Conjur Account",
+          tooltip: "The Conjur account for which the token will be issued. This is the identifier provided during conjur configuration."
+        }
+      }
+    },
+    advancedFields: {
+      title: "View Advanced Fields",
+      ttl: "TTL",
+      ttlTooltip: `Time-to-live (in seconds) of a secret from the vault when it's cached. The special value of 0 means "no rotation" and it's the default. When using non-zero values, it is recommended that they're at least 1 minute.`,
+      negTtl: "Negative TTL",
+      negTtlTooltip: "Time-to-live (in seconds) of a vault miss (no secret). Negatively cached secrets will remain valid until neg_ttl is reached, after which Kong will attempt to refresh the secret again. The default value for neg_ttl is 0, meaning no negative caching occurs.",
+      resurrectTtl: "Resurrect TTL",
+      resurrectTtlTooltip: "Time (in seconds) for how long secrets will remain in use after they are expired (config.ttl is over). This is useful when a vault becomes unreachable, or when a secret is deleted from the Vault and isn't replaced immediately. On both cases, the Gateway will keep trying to refresh the secret for resurrect_ttl seconds. After that, it will stop trying to refresh. We recommend assigning a sufficiently high value to this configuration option to ensure a seamless transition in case there are unexpected issues with the Vault. The default value for resurrect_ttl is 1e8 seconds, which is about 3 years."
+    },
+    commonFields: {
+      base64_decode: {
+        label: "Base64 Decode",
+        tooltip: "Decode all secrets in this vault as base64, useful for binary data. If some of the secrets are not base64 encoded, an error will occur when using them. It's recommended to create a separate vault for base64 secrets."
+      }
+    }
+  },
+  unavailable: "This vault provider is available on Enterprise."
+}, At = {
+  title: "Look up Key in Vault",
+  vault: {
+    label: "Vault",
+    placeholder: "Select a vault"
+  },
+  secret_id: {
+    label: "Secret ID",
+    input_placeholder: "Enter a secret ID",
+    select_placeholder: "Select or enter a complete secret ID"
+  },
+  optional_secret_key: {
+    label: "Secret Key",
+    placeholder: "Enter the key or key path to access a nested secret value",
+    help: "Optional. e.g. tokens, tokens/refresh_token"
+  },
+  fetch_error: {
+    vaults: "Could not fetch available vaults",
+    secrets: "Could not fetch available secrets",
+    vaults_and_secrets: "Could not fetch available vaults and secrets"
+  },
+  no_results: "No results found",
+  actions: {
+    use_key: "Use Key"
+  },
+  provider: {
+    complete_action: "Look up {cta}",
+    cta: "key in vault"
+  }
+}, Et = {
+  actions: Vt,
+  delete: {
+    title: "Delete a Vault",
+    title_for_secret: "Delete a Secret",
+    description: "This action cannot be reversed."
+  },
+  errors: kt,
+  search: Ct,
+  vaults: wt,
+  secrets: St,
+  copy: It,
+  labels: xt,
+  form: Rt,
+  vault_secret_picker: At
+};
+function Ut() {
+  const o = ht("en-us", Et);
+  return {
+    i18n: o,
+    i18nT: yt(o)
+    // Translation component <i18n-t>
+  };
+}
+const he = {
+  useI18n: Ut
+}, Ie = "/v2/control-planes/{controlPlaneId}/core-entities", Oe = "/v2/control-planes/{controlPlaneId}/config-stores", xe = "/{workspace}", pe = {
+  list: {
+    konnect: {
+      getAll: `${Ie}/vaults`,
+      deleteConfigStore: `${Oe}/{id}?force=true`
+    },
+    kongManager: {
+      getAll: `${xe}/vaults`
+    }
+  },
+  form: {
+    konnect: {
+      create: `${Ie}/vaults`,
+      createConfigStore: Oe,
+      edit: `${Ie}/vaults/{id}`
+    },
+    kongManager: {
+      create: `${xe}/vaults`,
+      edit: `${xe}/vaults/{id}`
+    }
+  }
+}, Tt = { class: "kong-ui-entities-vaults-list" }, Ht = { class: "button-row" }, $t = { class: "table-content-overflow-wrapper" }, Kt = { class: "table-content-overflow-wrapper" }, Pt = /* @__PURE__ */ ce({
+  __name: "VaultList",
+  props: {
+    /** The base konnect or kongManger config. Pass additional config props in the shared entity component as needed. */
+    config: {
+      type: Object,
+      required: !0,
+      validator: (o) => !(!o || !["konnect", "kongManager"].includes(o == null ? void 0 : o.app) || !o.createRoute || !o.getViewRoute || !o.getEditRoute || o.app === "kongManager" && !o.isExactMatch && !o.filterSchema)
+    },
+    // used to override the default identifier for the cache entry
+    cacheIdentifier: {
+      type: String,
+      default: ""
+    },
+    /** A synchronous or asynchronous function, that returns a boolean, that evaluates if the user can create a new entity */
+    canCreate: {
+      type: Function,
+      required: !1,
+      default: async () => !0
+    },
+    /** A synchronous or asynchronous function, that returns a boolean, that evaluates if the user can delete a given entity */
+    canDelete: {
+      type: Function,
+      required: !1,
+      default: async () => !0
+    },
+    /** A synchronous or asynchronous function, that returns a boolean, that evaluates if the user can edit a given entity */
+    canEdit: {
+      type: Function,
+      required: !1,
+      default: async () => !0
+    },
+    /** A synchronous or asynchronous function, that returns a boolean, that evaluates if the user can retrieve (view details) a given entity */
+    canRetrieve: {
+      type: Function,
+      required: !1,
+      default: async () => !0
+    },
+    /** default to false, setting to true will teleport the toolbar button to the destination in the consuming app */
+    useActionOutside: {
+      type: Boolean,
+      default: !1
+    }
+  },
+  emits: ["error", "click:learn-more", "copy:success", "copy:error", "delete:success"],
+  setup(o, { emit: S }) {
+    var fe;
+    const c = S, d = o, { i18n: { t: p } } = he.useI18n(), a = Ee(), { axiosInstance: K } = _e((fe = d.config) == null ? void 0 : fe.axiosRequestConfig), { hasRecords: I, handleStateChange: h } = ft(() => Q.value), n = w(() => I.value && d.config.app === "konnect"), g = w(() => d.config.app !== "kongManager" || !!d.config.disableSorting), f = {
+      // the Prefix column is non-hidable
+      prefix: { label: p("vaults.list.table_headers.prefix"), searchable: !0, sortable: !0, hidable: !1 },
+      // it's "Vault Type" on display, but we still use "name" to fit API schema
+      name: { label: p("vaults.list.table_headers.name"), searchable: !0, sortable: !0 },
+      description: { label: p("vaults.list.table_headers.description"), sortable: !1 },
+      tags: { label: p("vaults.list.table_headers.tags"), sortable: !1 }
+    }, N = f, X = w(() => {
+      var E, U;
+      let k = `${d.config.apiBaseUrl}${pe.list[d.config.app].getAll}`;
+      return d.config.app === "konnect" ? k = k.replace(/{controlPlaneId}/gi, ((E = d.config) == null ? void 0 : E.controlPlaneId) || "") : d.config.app === "kongManager" && (k = k.replace(/\/{workspace}/gi, (U = d.config) != null && U.workspace ? `/${d.config.workspace}` : "")), k;
+    }), Q = $(""), Y = w(() => {
+      if (d.config.app === "konnect" || d.config.isExactMatch)
+        return {
+          isExactMatch: !0,
+          placeholder: p("search.placeholder_for_vaults.konnect")
+        };
+      const { prefix: E, name: U } = f;
+      return {
+        isExactMatch: !1,
+        fields: { name: U, prefix: E },
+        schema: d.config.filterSchema
+      };
+    }), {
+      fetcher: O,
+      fetcherState: l,
+      fetcherCacheKey: ae
+    } = We(w(() => ({ ...d.config, cacheIdentifier: d.cacheIdentifier })), X), z = () => {
+      Q.value = "";
+    }, ee = () => {
+      ae.value++;
+    }, G = $(null), y = async (k, E) => {
+      const U = k.id;
+      if (!await E(U)) {
+        c("copy:error", {
+          entity: k,
+          field: "id",
+          message: p("errors.copy")
+        });
+        return;
+      }
+      c("copy:success", {
+        entity: k,
+        field: "id",
+        message: p("copy.success", { val: U })
+      });
+    }, F = async (k, E) => {
+      const U = JSON.stringify(k);
+      if (!await E(U)) {
+        c("copy:error", {
+          entity: k,
+          message: p("errors.copy")
+        });
+        return;
+      }
+      c("copy:success", {
+        entity: k,
+        message: p("copy.success_brief")
+      });
+    }, re = async (k) => {
+      var U;
+      await ((U = d.canRetrieve) == null ? void 0 : U.call(d, k)) && a.push(d.config.getViewRoute(k.id));
+    }, ne = (k) => ({
+      label: p("actions.view"),
+      to: d.config.getViewRoute(k)
+    }), le = (k) => ({
+      label: p("actions.edit"),
+      to: d.config.getEditRoute(k)
+    }), q = $(void 0), ie = $(!1), T = $(!1), Z = $(""), te = De(d.config, X.value), b = (k) => {
+      q.value = k, ie.value = !0;
+    }, v = () => {
+      ie.value = !1;
+    }, P = async (k) => {
+      const { apiBaseUrl: E, app: U, controlPlaneId: s } = d.config, r = `${E}${pe.list[U].deleteConfigStore}`.replace(/{controlPlaneId}/gi, s || "").replace(/{id}/gi, k);
+      try {
+        await K.delete(r);
+      } catch {
+      }
+    }, M = async () => {
+      var k, E, U, s;
+      if ((k = q.value) != null && k.id) {
+        T.value = !0;
+        try {
+          await K.delete(te(q.value.id)), d.config.app === "konnect" && ((E = q.value.config) != null && E.config_store_id) && P(q.value.config.config_store_id), T.value = !1, ie.value = !1, ae.value++, c("delete:success", q.value);
+        } catch (r) {
+          Z.value = ((s = (U = r.response) == null ? void 0 : U.data) == null ? void 0 : s.message) || r.message || p("errors.delete"), c("error", r);
+        } finally {
+          T.value = !1;
+        }
+      }
+    }, se = () => {
+      a.push(d.config.createRoute);
+    };
+    ke(l, (k) => {
+      var E, U, s;
+      if (k.status === Be.Error) {
+        G.value = {
+          title: p("errors.general")
+        }, (s = (U = (E = k.error) == null ? void 0 : E.response) == null ? void 0 : U.data) != null && s.message && (G.value.message = k.error.response.data.message), c("error", k.error);
+        return;
+      }
+      G.value = null;
+    });
+    const j = $({
+      ctaPath: d.config.createRoute,
+      ctaText: void 0,
+      message: `${p("vaults.list.empty_state.description")}${d.config.additionMessageForEmptyState ? ` ${d.config.additionMessageForEmptyState}` : ""}`,
+      title: p("vaults.title")
+    }), R = $(!1);
+    return we(async () => {
+      R.value = await d.canCreate(), R.value && (j.value.title = p("vaults.list.empty_state.title"), j.value.ctaText = p("actions.create"));
+    }), (k, E) => {
+      const U = J("KButton"), s = J("KEmptyState"), r = J("KDropdownItem"), L = J("KClipboardProvider");
+      return V(), W("div", Tt, [
+        u(e(Je), {
+          "cache-identifier": o.cacheIdentifier,
+          "disable-sorting": g.value,
+          "empty-state-options": j.value,
+          "enable-entity-actions": "",
+          "error-message": G.value,
+          fetcher: e(O),
+          "fetcher-cache-key": e(ae),
+          "pagination-type": "offset",
+          "preferences-storage-key": "kong-ui-entities-vaults-list",
+          query: Q.value,
+          "table-headers": e(N),
+          onClearSearchInput: z,
+          "onClick:row": E[3] || (E[3] = (C) => re(C)),
+          onSort: ee,
+          onState: e(h)
+        }, Ke({
+          "toolbar-filter": m(() => [
+            u(e(Le), {
+              modelValue: Q.value,
+              "onUpdate:modelValue": E[0] || (E[0] = (C) => Q.value = C),
+              config: Y.value
+            }, null, 8, ["modelValue", "config"])
+          ]),
+          "toolbar-button": m(() => [
+            (V(), D(Ye, {
+              disabled: !o.useActionOutside,
+              to: "#kong-ui-app-page-header-action-button"
+            }, [
+              x("div", Ht, [
+                n.value ? (V(), D(U, {
+                  key: 0,
+                  appearance: "secondary",
+                  class: "open-learning-hub",
+                  "data-testid": "vault-learn-more-button",
+                  icon: "",
+                  onClick: E[1] || (E[1] = (C) => k.$emit("click:learn-more"))
+                }, {
+                  default: m(() => [
+                    u(e(Me), { decorative: "" })
+                  ]),
+                  _: 1
+                })) : B("", !0),
+                u(e(ge), {
+                  "auth-function": () => o.canCreate()
+                }, {
+                  default: m(() => [
+                    u(U, {
+                      appearance: "primary",
+                      "data-testid": "toolbar-add-vault",
+                      size: o.useActionOutside ? "medium" : "large",
+                      to: o.config.createRoute
+                    }, {
+                      default: m(() => [
+                        u(e(Re)),
+                        ue(" " + H(e(p)("vaults.list.toolbar_actions.new_vault")), 1)
+                      ]),
+                      _: 1
+                    }, 8, ["size", "to"])
+                  ]),
+                  _: 1
+                }, 8, ["auth-function"])
+              ])
+            ], 8, ["disabled"]))
+          ]),
+          prefix: m(({ rowValue: C }) => [
+            x("div", $t, [
+              x("b", null, H(C ?? "-"), 1)
+            ])
+          ]),
+          name: m(({ rowValue: C }) => [
+            x("b", null, H(C ?? "-"), 1)
+          ]),
+          description: m(({ rowValue: C }) => [
+            x("div", Kt, H(C ?? "-"), 1)
+          ]),
+          tags: m(({ rowValue: C }) => [
+            u(e(pt), { tags: C }, null, 8, ["tags"])
+          ]),
+          actions: m(({ row: C }) => [
+            u(L, null, {
+              default: m(({ copyToClipboard: _ }) => [
+                u(r, {
+                  "data-testid": "action-entity-copy-id",
+                  onClick: (oe) => y(C, _)
+                }, {
+                  default: m(() => [
+                    ue(H(e(p)("actions.copy_id")), 1)
+                  ]),
+                  _: 1
+                }, 8, ["onClick"])
+              ]),
+              _: 2
+            }, 1024),
+            u(L, null, {
+              default: m(({ copyToClipboard: _ }) => [
+                u(r, {
+                  "data-testid": "action-entity-copy-json",
+                  onClick: (oe) => F(C, _)
+                }, {
+                  default: m(() => [
+                    ue(H(e(p)("actions.copy_json")), 1)
+                  ]),
+                  _: 1
+                }, 8, ["onClick"])
+              ]),
+              _: 2
+            }, 1024),
+            u(e(ge), {
+              "auth-function": () => o.canRetrieve(C)
+            }, {
+              default: m(() => [
+                u(r, {
+                  "data-testid": "action-entity-view",
+                  "has-divider": "",
+                  item: ne(C.id)
+                }, null, 8, ["item"])
+              ]),
+              _: 2
+            }, 1032, ["auth-function"]),
+            u(e(ge), {
+              "auth-function": () => o.canEdit(C)
+            }, {
+              default: m(() => [
+                u(r, {
+                  "data-testid": "action-entity-edit",
+                  item: le(C.id)
+                }, null, 8, ["item"])
+              ]),
+              _: 2
+            }, 1032, ["auth-function"]),
+            u(e(ge), {
+              "auth-function": () => o.canDelete(C)
+            }, {
+              default: m(() => [
+                u(r, {
+                  danger: "",
+                  "data-testid": "action-entity-delete",
+                  "has-divider": "",
+                  onClick: (_) => b(C)
+                }, {
+                  default: m(() => [
+                    ue(H(e(p)("actions.delete")), 1)
+                  ]),
+                  _: 1
+                }, 8, ["onClick"])
+              ]),
+              _: 2
+            }, 1032, ["auth-function"])
+          ]),
+          _: 2
+        }, [
+          !Q.value && o.config.app === "konnect" ? {
+            name: "empty-state",
+            fn: m(() => {
+              var C;
+              return [
+                u(s, {
+                  "data-testid": "vaults-entity-empty-state",
+                  "icon-background": "",
+                  message: e(p)("vaults.list.empty_state_v2.description"),
+                  title: e(p)("vaults.list.empty_state_v2.title")
+                }, Ke({
+                  icon: m(() => [
+                    u(e(at), { decorative: "" })
+                  ]),
+                  action: m(() => [
+                    R.value ? (V(), D(U, {
+                      key: 0,
+                      "data-testid": "entity-create-button",
+                      onClick: se
+                    }, {
+                      default: m(() => [
+                        u(e(Re), { decorative: "" }),
+                        ue(" " + H(e(p)("vaults.list.empty_state_v2.create_cta")), 1)
+                      ]),
+                      _: 1
+                    })) : B("", !0),
+                    u(U, {
+                      appearance: "secondary",
+                      "data-testid": "entity-learn-more-button",
+                      onClick: E[2] || (E[2] = (_) => k.$emit("click:learn-more"))
+                    }, {
+                      default: m(() => [
+                        u(e(Me), { decorative: "" }),
+                        ue(" " + H(e(p)("vaults.list.empty_state_v2.learn_more")), 1)
+                      ]),
+                      _: 1
+                    })
+                  ]),
+                  _: 2
+                }, [
+                  (C = o.config) != null && C.isControlPlaneGroup ? {
+                    name: "default",
+                    fn: m(() => [
+                      ue(H(e(p)("vaults.list.empty_state_v2.group")), 1)
+                    ]),
+                    key: "0"
+                  } : void 0
+                ]), 1032, ["message", "title"])
+              ];
+            }),
+            key: "0"
+          } : void 0
+        ]), 1032, ["cache-identifier", "disable-sorting", "empty-state-options", "error-message", "fetcher", "fetcher-cache-key", "query", "table-headers", "onState"]),
+        u(e(ze), {
+          "action-pending": T.value,
+          description: e(p)("delete.description"),
+          "entity-name": q.value && (q.value.prefix || q.value.id),
+          "entity-type": e(Ge).Vault,
+          error: Z.value,
+          title: e(p)("delete.title"),
+          visible: ie.value,
+          onCancel: v,
+          onProceed: M
+        }, null, 8, ["action-pending", "description", "entity-name", "entity-type", "error", "title", "visible"])
+      ]);
+    };
+  }
+}), me = (o, S) => {
+  const c = o.__vccOpts || o;
+  for (const [d, p] of S)
+    c[d] = p;
+  return c;
+}, El = /* @__PURE__ */ me(Pt, [["__scopeId", "data-v-0f7e9fff"]]);
+var t = /* @__PURE__ */ ((o) => (o.AWS = "aws", o.GCP = "gcp", o.HCV = "hcv", o.ENV = "env", o.AZURE = "azure", o.KONNECT = "konnect", o.CONJUR = "conjur", o))(t || {}), A = /* @__PURE__ */ ((o) => (o.TOKEN = "token", o.K8S = "kubernetes", o.APP_ROLE = "approle", o.CERT = "cert", o.JWT = "jwt", o))(A || {});
+const Mt = { class: "kong-ui-entities-vault-form" }, Nt = { class: "vault-form-provider-cards-container" }, Ft = ["data-testid"], Ot = { class: "provider-item-title-container" }, qt = { class: "provider-item-title" }, jt = { class: "provider-item-description" }, Wt = {
+  key: "kong-vault-config-fields",
+  class: "vault-form-config-fields-container"
+}, Dt = {
+  key: 0,
+  class: "vault-form-config-auth-method-container"
+}, Bt = {
+  key: 1,
+  class: "vault-form-config-auth-method-container"
+}, Jt = {
+  key: 2,
+  class: "vault-form-config-auth-method-container"
+}, Lt = {
+  key: 3,
+  class: "vault-form-config-auth-method-container"
+}, zt = {
+  key: 4,
+  class: "vault-form-config-auth-method-container"
+}, Gt = { key: 6 }, Zt = { class: "wrapper" }, Qt = { class: "item-50" }, Yt = { class: "item-50" }, Xt = { class: "wrapper" }, el = { class: "item-100" }, tl = /* @__PURE__ */ ce({
+  __name: "VaultForm",
+  props: {
+    /** The base konnect or kongManger config. Pass additional config props in the shared entity component as needed. */
+    config: {
+      type: Object,
+      required: !0,
+      validator: (o) => !(!o || !["konnect", "kongManager"].includes(o == null ? void 0 : o.app) || (o == null ? void 0 : o.app) === "konnect" && !(o != null && o.controlPlaneId) || (o == null ? void 0 : o.app) === "kongManager" && typeof (o == null ? void 0 : o.workspace) != "string" || !(o != null && o.cancelRoute))
+    },
+    /** If a valid vaultId is provided, it will put the form in Edit mode instead of Create */
+    vaultId: {
+      type: String,
+      required: !1,
+      default: ""
+    }
+  },
+  emits: ["update", "error", "loading"],
+  setup(o, { emit: S }) {
+    var U;
+    const c = o, d = S, { i18nT: p, i18n: { t: a } } = he.useI18n(), K = Ee(), { axiosInstance: I } = _e((U = c.config) == null ? void 0 : U.axiosRequestConfig), { getMessageFromError: h } = Ze(), n = ye({
+      fields: {
+        prefix: "",
+        description: "",
+        tags: ""
+      },
+      isReadonly: !1,
+      errorMessage: ""
+    }), g = ye({
+      prefix: "",
+      description: "",
+      tags: ""
+    }), f = $(c.config.app === "konnect" ? t.KONNECT : t.ENV), N = $(null), X = $(), Q = w(() => [t.AWS, t.GCP, t.HCV, t.AZURE, t.CONJUR].includes(f.value)), Y = w(() => [
+      ...c.config.app === "konnect" ? [{
+        label: a("form.config.konnect.label"),
+        value: t.KONNECT
+      }] : [],
+      {
+        label: a("form.config.env.label"),
+        value: t.ENV
+      },
+      {
+        label: a("form.config.aws.label"),
+        value: t.AWS,
+        disabled: !le.value
+      },
+      {
+        label: a("form.config.gcp.label"),
+        value: t.GCP,
+        disabled: !le.value
+      },
+      {
+        label: a("form.config.hcv.label"),
+        value: t.HCV,
+        disabled: !le.value
+      },
+      ...c.config.azureVaultProviderAvailable ? [{
+        label: a("form.config.azure.label"),
+        value: t.AZURE,
+        disabled: !le.value
+      }] : [],
+      ...c.config.conjurVaultProviderAvailable ? [{
+        label: a("form.config.conjur.label"),
+        value: t.CONJUR,
+        disabled: !le.value
+      }] : []
+    ]), O = c.config.base64FieldAvailable ? { base64_decode: !1 } : {}, l = ye({
+      [t.KONNECT]: {},
+      [t.ENV]: {
+        prefix: "",
+        ...O
+      },
+      [t.AWS]: {
+        region: "",
+        endpoint_url: "",
+        assume_role_arn: "",
+        role_session_name: "KongVault",
+        ...O
+      },
+      [t.GCP]: {
+        project_id: "",
+        ...O
+      },
+      [t.HCV]: {
+        protocol: "http",
+        host: "127.0.0.1",
+        port: 8200,
+        mount: "secret",
+        kv: "v1",
+        namespace: "",
+        auth_method: A.TOKEN,
+        token: "",
+        kube_role: "",
+        kube_auth_path: "",
+        kube_api_token_file: "",
+        approle_auth_path: "",
+        approle_role_id: "",
+        approle_secret_id: "",
+        approle_secret_id_file: "",
+        approle_response_wrapping: !1,
+        cert_auth_cert: "",
+        cert_auth_cert_key: "",
+        cert_auth_role_name: "",
+        oauth2_client_id: "",
+        oauth2_client_secret: "",
+        jwt_role: "",
+        oauth2_token_endpoint: "",
+        oauth2_audiences: "",
+        ...O
+      },
+      [t.AZURE]: {
+        location: "",
+        vault_uri: "",
+        type: "secrets",
+        credentials_prefix: "AZURE",
+        client_id: "",
+        tenant_id: "",
+        ...O
+      },
+      [t.CONJUR]: {
+        endpoint_url: "",
+        auth_method: "api_key",
+        ...O
+      }
+    }), ae = ye({
+      [t.KONNECT]: {},
+      [t.ENV]: {
+        prefix: "",
+        ...O
+      },
+      [t.AWS]: {
+        region: "",
+        endpoint_url: "",
+        assume_role_arn: "",
+        role_session_name: "KongVault",
+        ...O
+      },
+      [t.GCP]: {
+        project_id: "",
+        ...O
+      },
+      [t.HCV]: {
+        protocol: "http",
+        host: "127.0.0.1",
+        port: 8200,
+        mount: "secret",
+        kv: "v1",
+        namespace: "",
+        auth_method: A.TOKEN,
+        token: "",
+        kube_role: "",
+        kube_auth_path: "",
+        kube_api_token_file: "",
+        approle_auth_path: "",
+        approle_role_id: "",
+        approle_secret_id: "",
+        approle_secret_id_file: "",
+        approle_response_wrapping: !1,
+        ...O
+      },
+      [t.AZURE]: {
+        location: "",
+        vault_uri: "",
+        type: "secrets",
+        credentials_prefix: "AZURE",
+        client_id: "",
+        tenant_id: "",
+        ...O
+      },
+      [t.CONJUR]: {
+        endpoint_url: "",
+        auth_method: "api_key",
+        ...O
+      }
+    }), z = [
+      { label: `${a("form.config.aws.fields.region.locations.us-east-1.location")} (us-east-1)`, value: "us-east-1" },
+      { label: `${a("form.config.aws.fields.region.locations.us-east-2.location")} (us-east-2)`, value: "us-east-2" },
+      { label: `${a("form.config.aws.fields.region.locations.us-west-1.location")} (us-west-1)`, value: "us-west-1" },
+      { label: `${a("form.config.aws.fields.region.locations.us-west-2.location")} (us-west-2)`, value: "us-west-2" },
+      { label: `${a("form.config.aws.fields.region.locations.af-south-1.location")} (af-south-1)`, value: "af-south-1" },
+      { label: `${a("form.config.aws.fields.region.locations.ap-east-1.location")} (ap-east-1)`, value: "ap-east-1" },
+      { label: `${a("form.config.aws.fields.region.locations.ap-southeast-3.location")} (ap-southeast-3)`, value: "ap-southeast-3" },
+      { label: `${a("form.config.aws.fields.region.locations.ap-south-1.location")} (ap-south-1)`, value: "ap-south-1" },
+      { label: `${a("form.config.aws.fields.region.locations.ap-northeast-1.location")} (ap-northeast-1)`, value: "ap-northeast-1" },
+      { label: `${a("form.config.aws.fields.region.locations.ap-northeast-2.location")} (ap-northeast-2)`, value: "ap-northeast-2" },
+      { label: `${a("form.config.aws.fields.region.locations.ap-northeast-3.location")} (ap-northeast-3)`, value: "ap-northeast-3" },
+      { label: `${a("form.config.aws.fields.region.locations.ap-southeast-1.location")} (ap-southeast-1)`, value: "ap-southeast-1" },
+      { label: `${a("form.config.aws.fields.region.locations.ap-southeast-2.location")} (ap-southeast-2)`, value: "ap-southeast-2" },
+      { label: `${a("form.config.aws.fields.region.locations.ca-central-1.location")} (ca-central-1)`, value: "ca-central-1" },
+      { label: `${a("form.config.aws.fields.region.locations.eu-central-1.location")} (eu-central-1)`, value: "eu-central-1" },
+      { label: `${a("form.config.aws.fields.region.locations.eu-west-1.location")} (eu-west-1)`, value: "eu-west-1" },
+      { label: `${a("form.config.aws.fields.region.locations.eu-west-2.location")} (eu-west-2)`, value: "eu-west-2" },
+      { label: `${a("form.config.aws.fields.region.locations.eu-west-3.location")} (eu-west-3)`, value: "eu-west-3" },
+      { label: `${a("form.config.aws.fields.region.locations.eu-south-1.location")} (eu-south-1)`, value: "eu-south-1" },
+      { label: `${a("form.config.aws.fields.region.locations.eu-north-1.location")} (eu-north-1)`, value: "eu-north-1" },
+      { label: `${a("form.config.aws.fields.region.locations.me-south-1.location")} (me-south-1)`, value: "me-south-1" },
+      { label: `${a("form.config.aws.fields.region.locations.sa-east-1.location")} (sa-east-1)`, value: "sa-east-1" },
+      { label: `${a("form.config.aws.fields.region.locations.us-gov-east-1.location")} (us-gov-east-1)`, value: "us-gov-east-1" },
+      { label: `${a("form.config.aws.fields.region.locations.us-gov-west-1.location")} (us-gov-west-1)`, value: "us-gov-west-1" }
+    ], ee = [{ label: "secrets", value: "secrets" }], G = [{ label: "http", value: "http" }, { label: "https", value: "https" }], y = [{ label: "v1", value: "v1" }, { label: "v2", value: "v2" }], F = w(() => c.vaultId ? Ve.Edit : Ve.Create), re = w(() => {
+      var s, r;
+      return (r = pe.form[(s = c.config) == null ? void 0 : s.app]) == null ? void 0 : r.edit;
+    }), ne = w(() => F.value === Ve.Edit && c.config.app === "kongManager"), le = w(() => c.config.app === "konnect" || mt({
+      gatewayInfo: c.config.gatewayInfo,
+      // vault name can only be `env` in Gateway Community Edition
+      supportedRange: {
+        enterprise: []
+      }
+    })), q = () => {
+      var s;
+      K.push(((s = c.config) == null ? void 0 : s.cancelRoute) || { name: "vault-list" });
+    }, ie = (s) => {
+      d("loading", s);
+    }, T = (s) => {
+      d("error", s);
+    }, Z = (s) => {
+      switch (s) {
+        case t.KONNECT:
+          return ct;
+        case t.ENV:
+          return ut;
+        case t.AWS:
+          return dt;
+        case t.GCP:
+          return st;
+        case t.HCV:
+          return nt;
+        case t.AZURE:
+          return it;
+        case t.CONJUR:
+          return rt;
+      }
+    }, te = (s) => {
+      switch (s) {
+        case t.KONNECT:
+          return a("form.config.konnect.description");
+        case t.ENV:
+          return a("form.config.env.description");
+        case t.AWS:
+          return a("form.config.aws.description");
+        case t.GCP:
+          return a("form.config.gcp.description");
+        case t.HCV:
+          return a("form.config.hcv.description");
+        case t.AZURE:
+          return a("form.config.azure.description");
+        case t.CONJUR:
+          return a("form.config.conjur.description");
+      }
+    }, b = (s) => {
+      var C, _, oe, de, ve, i;
+      n.fields.prefix = ((C = s == null ? void 0 : s.item) == null ? void 0 : C.prefix) || (s == null ? void 0 : s.prefix) || "", n.fields.description = ((_ = s == null ? void 0 : s.item) == null ? void 0 : _.description) || (s == null ? void 0 : s.description) || "";
+      const r = ((oe = s == null ? void 0 : s.item) == null ? void 0 : oe.tags) || (s == null ? void 0 : s.tags) || [];
+      n.fields.tags = (r == null ? void 0 : r.join(", ")) || "", Object.assign(g, n.fields);
+      const L = ((de = s == null ? void 0 : s.item) == null ? void 0 : de.config) || (s == null ? void 0 : s.config) || null;
+      L && (Object.keys(L).length || (s == null ? void 0 : s.name) === t.KONNECT) ? (f.value = ((ve = s == null ? void 0 : s.item) == null ? void 0 : ve.name) || (s == null ? void 0 : s.name) || "", N.value = f.value, X.value = ((i = s == null ? void 0 : s.config) == null ? void 0 : i.config_store_id) || void 0, Object.assign(l[f.value], L), Object.assign(ae[f.value], L)) : n.errorMessage = "Error loading vault config";
+    }, v = (s) => s === "" || s == null, P = w(() => f.value === t.HCV ? !Object.keys(l[t.HCV]).filter((s) => [
+      "namespace",
+      "ttl",
+      "neg_ttl",
+      "resurrect_ttl",
+      "kube_auth_path",
+      "approle_auth_path",
+      "approle_secret_id",
+      "approle_secret_id_file",
+      "oauth2_audiences"
+    ].includes(s) || l[t.HCV].auth_method !== A.K8S && (s === "kube_role" || s === "kube_api_token_file") || l[t.HCV].auth_method !== A.TOKEN && s === "token" || l[t.HCV].auth_method !== A.APP_ROLE && (s === "approle_role_id" || s === "approle_response_wrapping") || l[t.HCV].auth_method === A.APP_ROLE && s === "approle_response_wrapping" && typeof l[f.value][s] == "boolean" || l[t.HCV].auth_method !== A.CERT && ["cert_auth_role_name", "cert_auth_cert", "cert_auth_cert_key"].includes(s) || l[t.HCV].auth_method !== A.JWT && ["oauth2_client_id", "oauth2_client_secret", "jwt_role", "oauth2_token_endpoint"].includes(s) ? !1 : v(l[f.value][s])).length : f.value === t.AZURE ? !Object.keys(l[t.AZURE]).filter((s) => ["client_id", "tenant_id", "ttl", "neg_ttl", "resurrect_ttl"].includes(s) ? !1 : v(l[f.value][s])).length : f.value === t.AWS ? !Object.keys(l[t.AWS]).filter((s) => ["endpoint_url", "assume_role_arn", "ttl", "neg_ttl", "resurrect_ttl", "sts_endpoint_url"].includes(s) ? !1 : v(l[f.value][s])).length : !Object.keys(l[f.value]).filter((s) => ["ttl", "neg_ttl", "resurrect_ttl"].includes(s) ? !1 : v(l[f.value][s])).length), M = w(() => !!n.fields.prefix && P.value), se = w(() => JSON.stringify(n.fields) !== JSON.stringify(g) || f.value !== N.value || JSON.stringify(l[f.value]) !== JSON.stringify(ae[f.value])), j = w(() => {
+      var r, L;
+      let s = `${c.config.apiBaseUrl}${pe.form[c.config.app][F.value]}`;
+      return c.config.app === "konnect" ? s = s.replace(/{controlPlaneId}/gi, ((r = c.config) == null ? void 0 : r.controlPlaneId) || "") : c.config.app === "kongManager" && (s = s.replace(/\/{workspace}/gi, (L = c.config) != null && L.workspace ? `/${c.config.workspace}` : "")), s = s.replace(/{id}/gi, c.vaultId), s;
+    }), R = w(() => {
+      var de, ve;
+      const s = {
+        protocol: l[t.HCV].protocol,
+        host: l[t.HCV].host,
+        port: parseInt(l[t.HCV].port.toString()),
+        mount: l[t.HCV].mount,
+        kv: l[t.HCV].kv,
+        namespace: l[t.HCV].namespace || null,
+        auth_method: l[t.HCV].auth_method,
+        ...c.config.base64FieldAvailable && { base64_decode: l[t.HCV].base64_decode },
+        ...l[t.HCV].auth_method === A.TOKEN && { token: l[t.HCV].token },
+        // For Kong Admin API, when auth_method is kubernetes, token must be in the request body and its value has to be null
+        ...l[t.HCV].auth_method === A.K8S && {
+          kube_role: l[t.HCV].kube_role,
+          kube_auth_path: l[t.HCV].kube_auth_path || void 0,
+          kube_api_token_file: l[t.HCV].kube_api_token_file,
+          token: null
+        },
+        ...l[t.HCV].auth_method === A.APP_ROLE && {
+          approle_auth_path: l[t.HCV].approle_auth_path || void 0,
+          approle_role_id: l[t.HCV].approle_role_id,
+          approle_secret_id: l[t.HCV].approle_secret_id || void 0,
+          approle_secret_id_file: l[t.HCV].approle_secret_id_file || void 0,
+          approle_response_wrapping: l[t.HCV].approle_response_wrapping ?? !1
+        },
+        ...l[t.HCV].auth_method === A.CERT && {
+          cert_auth_role_name: l[t.HCV].cert_auth_role_name,
+          cert_auth_cert: l[t.HCV].cert_auth_cert,
+          cert_auth_cert_key: l[t.HCV].cert_auth_cert_key
+        },
+        ...l[t.HCV].auth_method === A.JWT && {
+          oauth2_audiences: l[t.HCV].oauth2_audiences || null,
+          oauth2_client_id: l[t.HCV].oauth2_client_id,
+          oauth2_client_secret: l[t.HCV].oauth2_client_secret,
+          jwt_role: l[t.HCV].jwt_role,
+          oauth2_token_endpoint: l[t.HCV].oauth2_token_endpoint
+        }
+      }, r = {
+        ...l[f.value],
+        client_id: l[f.value].client_id || null,
+        tenant_id: l[f.value].tenant_id || null
+      }, L = {
+        ...l[f.value],
+        endpoint_url: l[f.value].endpoint_url || null,
+        assume_role_arn: l[f.value].assume_role_arn || null,
+        ...c.config.awsStsEndpointUrlAvailable ? { sts_endpoint_url: l[f.value].sts_endpoint_url || null } : {}
+      };
+      let C = l[f.value];
+      f.value === t.HCV ? C = s : f.value === t.AZURE ? C = r : f.value === t.AWS && (C = L);
+      let _ = {};
+      if (![t.KONNECT, t.ENV].includes(f.value)) {
+        const i = l[f.value], Te = i.ttl, He = i.neg_ttl, $e = i.resurrect_ttl;
+        _ = {
+          ttl: Te ? parseInt(Te.toString(), 10) : null,
+          neg_ttl: He ? parseInt(He.toString(), 10) : null,
+          resurrect_ttl: $e ? parseInt($e.toString(), 10) : null
+        };
+      }
+      return {
+        prefix: n.fields.prefix,
+        description: n.fields.description || null,
+        tags: (ve = (de = n.fields.tags.split(",")) == null ? void 0 : de.map((i) => String(i || "").trim())) == null ? void 0 : ve.filter((i) => i !== ""),
+        name: f.value,
+        config: {
+          ...C,
+          ..._
+        }
+      };
+    }), fe = w(() => ({
+      ...R.value,
+      config: {
+        ...R.value.config,
+        config_store_id: X.value
+      }
+    })), k = async () => {
+      var s;
+      try {
+        n.isReadonly = !0;
+        const r = `${c.config.apiBaseUrl}${pe.form.konnect.createConfigStore}`.replace(/{controlPlaneId}/gi, ((s = c.config) == null ? void 0 : s.controlPlaneId) || ""), L = await I.post(r);
+        return L == null ? void 0 : L.data.id;
+      } catch (r) {
+        n.errorMessage = h(r), d("error", r);
+      } finally {
+        n.isReadonly = !1;
+      }
+    }, E = async () => {
+      var s;
+      try {
+        n.isReadonly = !0;
+        let r;
+        F.value === "create" ? f.value === t.KONNECT ? (X.value = await k(), r = await I.post(j.value, fe.value)) : r = await I.post(j.value, R.value) : F.value === "edit" && (f.value === t.KONNECT && !X.value ? (X.value = await k(), r = await I.put(j.value, fe.value)) : r = ((s = c.config) == null ? void 0 : s.app) === "konnect" ? await I.put(j.value, fe.value) : await I.patch(j.value, R.value)), b(r == null ? void 0 : r.data), d("update", r == null ? void 0 : r.data);
+      } catch (r) {
+        n.errorMessage = h(r), d("error", r);
+      } finally {
+        n.isReadonly = !1;
+      }
+    };
+    return (s, r) => {
+      const L = J("KTooltip"), C = J("KSelect"), _ = J("KInput"), oe = J("KCheckbox"), de = J("KTextArea"), ve = J("KCollapse");
+      return V(), W("div", Mt, [
+        u(e(Qe), {
+          "can-submit": M.value && se.value,
+          config: o.config,
+          "edit-id": o.vaultId,
+          "entity-type": e(Ue).Vault,
+          "error-message": n.errorMessage,
+          "fetch-url": re.value,
+          "form-fields": R.value,
+          "is-readonly": n.isReadonly,
+          onCancel: q,
+          "onFetch:error": T,
+          "onFetch:success": b,
+          onLoading: ie,
+          onSubmit: E
+        }, {
+          default: m(() => [
+            u(e(Ae), {
+              description: e(a)("form.sections.config.description"),
+              title: e(a)("form.sections.config.title")
+            }, {
+              default: m(() => [
+                x("div", Nt, [
+                  u(C, {
+                    modelValue: f.value,
+                    "onUpdate:modelValue": r[0] || (r[0] = (i) => f.value = i),
+                    "data-testid": "provider-select",
+                    disabled: ne.value,
+                    "dropdown-max-height": "500",
+                    items: Y.value,
+                    readonly: n.isReadonly
+                  }, {
+                    "selected-item-template": m(({ item: i }) => [
+                      (V(), D(Pe(Z(i.value)))),
+                      x("span", null, H(i == null ? void 0 : i.label), 1)
+                    ]),
+                    "item-template": m(({ item: i }) => [
+                      u(L, {
+                        placement: "top",
+                        text: i.disabled ? e(a)("form.unavailable") : ""
+                      }, {
+                        default: m(() => [
+                          x("div", {
+                            class: "provider-item",
+                            "data-testid": `vault-form-provider-${i.value}`
+                          }, [
+                            (V(), D(Pe(Z(i.value)))),
+                            x("div", Ot, [
+                              x("span", qt, H(i == null ? void 0 : i.label), 1),
+                              x("span", jt, H(te(i.value)), 1)
+                            ])
+                          ], 8, Ft)
+                        ]),
+                        _: 2
+                      }, 1032, ["text"])
+                    ]),
+                    _: 1
+                  }, 8, ["modelValue", "disabled", "items", "readonly"])
+                ]),
+                u(Xe, { name: "appear" }, {
+                  default: m(() => [
+                    f.value === e(t).ENV ? (V(), W("div", Wt, [
+                      u(_, {
+                        modelValue: l[e(t).ENV].prefix,
+                        "onUpdate:modelValue": r[1] || (r[1] = (i) => l[e(t).ENV].prefix = i),
+                        modelModifiers: { trim: !0 },
+                        autocomplete: "off",
+                        "data-testid": "vault-form-config-kong-prefix",
+                        label: e(a)("form.config.env.fields.prefix.label"),
+                        "label-attributes": {
+                          info: e(a)("form.config.env.fields.prefix.tooltip"),
+                          tooltipAttributes: { maxWidth: "400" }
+                        },
+                        placeholder: e(a)("form.config.env.fields.prefix.placeholder"),
+                        readonly: n.isReadonly,
+                        required: "",
+                        type: "text"
+                      }, null, 8, ["modelValue", "label", "label-attributes", "placeholder", "readonly"]),
+                      o.config.base64FieldAvailable ? (V(), D(oe, {
+                        key: 0,
+                        modelValue: l[e(t).ENV].base64_decode,
+                        "onUpdate:modelValue": r[2] || (r[2] = (i) => l[e(t).ENV].base64_decode = i),
+                        "data-testid": "vault-form-config-env-base64_decode",
+                        label: e(a)("form.config.commonFields.base64_decode.label"),
+                        "label-attributes": {
+                          info: e(a)("form.config.commonFields.base64_decode.tooltip"),
+                          tooltipAttributes: { maxWidth: "400" }
+                        },
+                        readonly: n.isReadonly
+                      }, null, 8, ["modelValue", "label", "label-attributes", "readonly"])) : B("", !0)
+                    ])) : B("", !0),
+                    f.value === e(t).AWS ? (V(), W("div", {
+                      key: `${e(t).AWS}-vault-config-fields`,
+                      class: "vault-form-config-fields-container"
+                    }, [
+                      u(C, {
+                        modelValue: l[e(t).AWS].region,
+                        "onUpdate:modelValue": r[3] || (r[3] = (i) => l[e(t).AWS].region = i),
+                        "data-testid": "vault-form-config-aws-region",
+                        items: z,
+                        label: e(a)("form.config.aws.fields.region.label"),
+                        "label-attributes": { info: e(a)("form.config.aws.fields.region.tooltip") },
+                        placeholder: e(a)("form.config.aws.fields.region.placeholder"),
+                        readonly: n.isReadonly,
+                        required: "",
+                        width: "100%"
+                      }, null, 8, ["modelValue", "label", "label-attributes", "placeholder", "readonly"]),
+                      u(_, {
+                        modelValue: l[e(t).AWS].endpoint_url,
+                        "onUpdate:modelValue": r[4] || (r[4] = (i) => l[e(t).AWS].endpoint_url = i),
+                        modelModifiers: { trim: !0 },
+                        autocomplete: "off",
+                        "data-testid": "vault-form-config-aws-endpoint_url",
+                        label: e(a)("form.config.aws.fields.endpoint_url.label"),
+                        "label-attributes": {
+                          info: e(a)("form.config.aws.fields.endpoint_url.tooltip"),
+                          tooltipAttributes: { maxWidth: "400" }
+                        },
+                        readonly: n.isReadonly,
+                        type: "text"
+                      }, null, 8, ["modelValue", "label", "label-attributes", "readonly"]),
+                      u(_, {
+                        modelValue: l[e(t).AWS].assume_role_arn,
+                        "onUpdate:modelValue": r[5] || (r[5] = (i) => l[e(t).AWS].assume_role_arn = i),
+                        modelModifiers: { trim: !0 },
+                        autocomplete: "off",
+                        "data-testid": "vault-form-config-aws-assume_role_arn",
+                        label: e(a)("form.config.aws.fields.assume_role_arn.label"),
+                        "label-attributes": {
+                          info: e(a)("form.config.aws.fields.assume_role_arn.tooltip"),
+                          tooltipAttributes: { maxWidth: "400" }
+                        },
+                        readonly: n.isReadonly,
+                        type: "text"
+                      }, null, 8, ["modelValue", "label", "label-attributes", "readonly"]),
+                      u(_, {
+                        modelValue: l[e(t).AWS].role_session_name,
+                        "onUpdate:modelValue": r[6] || (r[6] = (i) => l[e(t).AWS].role_session_name = i),
+                        modelModifiers: { trim: !0 },
+                        autocomplete: "off",
+                        "data-testid": "vault-form-config-aws-role_session_name",
+                        label: e(a)("form.config.aws.fields.role_session_name.label"),
+                        "label-attributes": {
+                          info: e(a)("form.config.aws.fields.role_session_name.tooltip"),
+                          tooltipAttributes: { maxWidth: "400" }
+                        },
+                        readonly: n.isReadonly,
+                        required: "",
+                        type: "text"
+                      }, null, 8, ["modelValue", "label", "label-attributes", "readonly"]),
+                      o.config.awsStsEndpointUrlAvailable ? (V(), D(_, {
+                        key: 0,
+                        modelValue: l[e(t).AWS].sts_endpoint_url,
+                        "onUpdate:modelValue": r[7] || (r[7] = (i) => l[e(t).AWS].sts_endpoint_url = i),
+                        modelModifiers: { trim: !0 },
+                        autocomplete: "off",
+                        "data-testid": "vault-form-config-aws-sts_endpoint_url",
+                        label: e(a)("form.config.aws.fields.sts_endpoint_url.label"),
+                        "label-attributes": {
+                          info: e(a)("form.config.aws.fields.sts_endpoint_url.tooltip"),
+                          tooltipAttributes: { maxWidth: "400" }
+                        },
+                        readonly: n.isReadonly,
+                        type: "text"
+                      }, null, 8, ["modelValue", "label", "label-attributes", "readonly"])) : B("", !0),
+                      o.config.base64FieldAvailable ? (V(), D(oe, {
+                        key: 1,
+                        modelValue: l[e(t).AWS].base64_decode,
+                        "onUpdate:modelValue": r[8] || (r[8] = (i) => l[e(t).AWS].base64_decode = i),
+                        "data-testid": "vault-form-config-aws-base64_decode",
+                        label: e(a)("form.config.commonFields.base64_decode.label"),
+                        "label-attributes": {
+                          info: e(a)("form.config.commonFields.base64_decode.tooltip"),
+                          tooltipAttributes: { maxWidth: "400" }
+                        },
+                        readonly: n.isReadonly
+                      }, null, 8, ["modelValue", "label", "label-attributes", "readonly"])) : B("", !0)
+                    ])) : B("", !0),
+                    f.value === e(t).GCP ? (V(), W("div", {
+                      key: `${e(t).GCP}-vault-config-fields`,
+                      class: "vault-form-config-fields-container"
+                    }, [
+                      u(_, {
+                        modelValue: l[e(t).GCP].project_id,
+                        "onUpdate:modelValue": r[9] || (r[9] = (i) => l[e(t).GCP].project_id = i),
+                        modelModifiers: { trim: !0 },
+                        autocomplete: "off",
+                        "data-testid": "vault-form-config-gcp-project-id",
+                        label: e(a)("form.config.gcp.fields.project_id.label"),
+                        placeholder: e(a)("form.config.gcp.fields.project_id.placeholder"),
+                        readonly: n.isReadonly,
+                        required: "",
+                        type: "text"
+                      }, {
+                        "label-tooltip": m(() => [
+                          u(e(p), {
+                            keypath: "form.config.gcp.fields.project_id.tooltip.text",
+                            scope: "global"
+                          }, {
+                            "italic-text": m(() => [
+                              x("em", null, H(e(a)("form.config.gcp.fields.project_id.tooltip.italicText")), 1)
+                            ]),
+                            _: 1
+                          })
+                        ]),
+                        _: 1
+                      }, 8, ["modelValue", "label", "placeholder", "readonly"]),
+                      o.config.base64FieldAvailable ? (V(), D(oe, {
+                        key: 0,
+                        modelValue: l[e(t).GCP].base64_decode,
+                        "onUpdate:modelValue": r[10] || (r[10] = (i) => l[e(t).GCP].base64_decode = i),
+                        "data-testid": "vault-form-config-gcp-base64_decode",
+                        label: e(a)("form.config.commonFields.base64_decode.label"),
+                        "label-attributes": {
+                          info: e(a)("form.config.commonFields.base64_decode.tooltip"),
+                          tooltipAttributes: { maxWidth: "400" }
+                        },
+                        readonly: n.isReadonly
+                      }, null, 8, ["modelValue", "label", "label-attributes", "readonly"])) : B("", !0)
+                    ])) : B("", !0),
+                    f.value === e(t).HCV ? (V(), W("div", {
+                      key: `${e(t).HCV}-vault-config-fields`,
+                      class: "vault-form-config-fields-container"
+                    }, [
+                      u(C, {
+                        modelValue: l[e(t).HCV].protocol,
+                        "onUpdate:modelValue": r[11] || (r[11] = (i) => l[e(t).HCV].protocol = i),
+                        "data-testid": "vault-form-config-hcv-protocol",
+                        items: G,
+                        label: e(a)("form.config.hcv.fields.protocol.label"),
+                        readonly: n.isReadonly,
+                        required: "",
+                        width: "100%"
+                      }, null, 8, ["modelValue", "label", "readonly"]),
+                      u(_, {
+                        modelValue: l[e(t).HCV].host,
+                        "onUpdate:modelValue": r[12] || (r[12] = (i) => l[e(t).HCV].host = i),
+                        modelModifiers: { trim: !0 },
+                        autocomplete: "off",
+                        "data-testid": "vault-form-config-hcv-host",
+                        label: e(a)("form.config.hcv.fields.host.label"),
+                        readonly: n.isReadonly,
+                        required: "",
+                        type: "text"
+                      }, null, 8, ["modelValue", "label", "readonly"]),
+                      u(_, {
+                        modelValue: l[e(t).HCV].port,
+                        "onUpdate:modelValue": r[13] || (r[13] = (i) => l[e(t).HCV].port = i),
+                        autocomplete: "off",
+                        "data-testid": "vault-form-config-hcv-port",
+                        label: e(a)("form.config.hcv.fields.port.label"),
+                        min: "0",
+                        readonly: n.isReadonly,
+                        required: "",
+                        type: "number"
+                      }, null, 8, ["modelValue", "label", "readonly"]),
+                      u(_, {
+                        modelValue: l[e(t).HCV].mount,
+                        "onUpdate:modelValue": r[14] || (r[14] = (i) => l[e(t).HCV].mount = i),
+                        modelModifiers: { trim: !0 },
+                        autocomplete: "off",
+                        "data-testid": "vault-form-config-hcv-mount",
+                        label: e(a)("form.config.hcv.fields.mount.label"),
+                        readonly: n.isReadonly,
+                        required: "",
+                        type: "text"
+                      }, null, 8, ["modelValue", "label", "readonly"]),
+                      u(C, {
+                        modelValue: l[e(t).HCV].kv,
+                        "onUpdate:modelValue": r[15] || (r[15] = (i) => l[e(t).HCV].kv = i),
+                        "data-testid": "vault-form-config-hcv-kv",
+                        items: y,
+                        label: e(a)("form.config.hcv.fields.kv.label"),
+                        readonly: n.isReadonly,
+                        required: "",
+                        width: "100%"
+                      }, null, 8, ["modelValue", "label", "readonly"]),
+                      u(_, {
+                        modelValue: l[e(t).HCV].namespace,
+                        "onUpdate:modelValue": r[16] || (r[16] = (i) => l[e(t).HCV].namespace = i),
+                        modelModifiers: { trim: !0 },
+                        autocomplete: "off",
+                        "data-testid": "vault-form-config-hcv-namespace",
+                        label: e(a)("form.config.hcv.fields.namespace.label"),
+                        readonly: n.isReadonly,
+                        type: "text"
+                      }, null, 8, ["modelValue", "label", "readonly"]),
+                      u(C, {
+                        modelValue: l[e(t).HCV].auth_method,
+                        "onUpdate:modelValue": r[17] || (r[17] = (i) => l[e(t).HCV].auth_method = i),
+                        "data-testid": "vault-form-config-hcv-auth_method",
+                        items: [
+                          { label: e(A).TOKEN, value: e(A).TOKEN },
+                          { label: e(A).K8S, value: e(A).K8S },
+                          ...o.config.hcvAppRoleMethodAvailable ? [{ label: e(A).APP_ROLE, value: e(A).APP_ROLE }] : [],
+                          ...o.config.hcvCertMethodAvailable ? [{ label: e(A).CERT, value: e(A).CERT }] : [],
+                          ...o.config.hcvJwtMethodAvailable ? [{ label: e(A).JWT, value: e(A).JWT }] : []
+                        ],
+                        label: e(a)("form.config.hcv.fields.auth_method.label"),
+                        readonly: n.isReadonly,
+                        required: "",
+                        width: "100%"
+                      }, null, 8, ["modelValue", "items", "label", "readonly"]),
+                      l[e(t).HCV].auth_method === e(A).TOKEN ? (V(), W("div", Dt, [
+                        u(_, {
+                          modelValue: l[e(t).HCV].token,
+                          "onUpdate:modelValue": r[18] || (r[18] = (i) => l[e(t).HCV].token = i),
+                          modelModifiers: { trim: !0 },
+                          autocomplete: "off",
+                          "data-testid": "vault-form-config-hcv-token",
+                          label: e(a)("form.config.hcv.fields.token.label"),
+                          readonly: n.isReadonly,
+                          required: "",
+                          "show-password-mask-toggle": "",
+                          type: "password"
+                        }, null, 8, ["modelValue", "label", "readonly"])
+                      ])) : l[e(t).HCV].auth_method === e(A).K8S ? (V(), W("div", Bt, [
+                        u(_, {
+                          modelValue: l[e(t).HCV].kube_role,
+                          "onUpdate:modelValue": r[19] || (r[19] = (i) => l[e(t).HCV].kube_role = i),
+                          modelModifiers: { trim: !0 },
+                          autocomplete: "off",
+                          "data-testid": "vault-form-config-hcv-kube_role",
+                          label: e(a)("form.config.hcv.fields.kube_role.label"),
+                          readonly: n.isReadonly,
+                          required: "",
+                          type: "text"
+                        }, null, 8, ["modelValue", "label", "readonly"]),
+                        u(_, {
+                          modelValue: l[e(t).HCV].kube_auth_path,
+                          "onUpdate:modelValue": r[20] || (r[20] = (i) => l[e(t).HCV].kube_auth_path = i),
+                          modelModifiers: { trim: !0 },
+                          autocomplete: "off",
+                          "data-testid": "vault-form-config-hcv-kube_auth_path",
+                          label: e(a)("form.config.hcv.fields.kube_auth_path.label"),
+                          readonly: n.isReadonly,
+                          type: "text"
+                        }, null, 8, ["modelValue", "label", "readonly"]),
+                        u(_, {
+                          modelValue: l[e(t).HCV].kube_api_token_file,
+                          "onUpdate:modelValue": r[21] || (r[21] = (i) => l[e(t).HCV].kube_api_token_file = i),
+                          modelModifiers: { trim: !0 },
+                          autocomplete: "off",
+                          "data-testid": "vault-form-config-hcv-kube_api_token_file",
+                          label: e(a)("form.config.hcv.fields.kube_api_token_file.label"),
+                          readonly: n.isReadonly,
+                          required: "",
+                          type: "text"
+                        }, null, 8, ["modelValue", "label", "readonly"])
+                      ])) : l[e(t).HCV].auth_method === e(A).APP_ROLE ? (V(), W("div", Jt, [
+                        u(_, {
+                          modelValue: l[e(t).HCV].approle_auth_path,
+                          "onUpdate:modelValue": r[22] || (r[22] = (i) => l[e(t).HCV].approle_auth_path = i),
+                          modelModifiers: { trim: !0 },
+                          autocomplete: "off",
+                          "data-testid": "vault-form-config-hcv-approle_auth_path",
+                          label: e(a)("form.config.hcv.fields.approle_auth_path.label"),
+                          readonly: n.isReadonly,
+                          type: "text"
+                        }, null, 8, ["modelValue", "label", "readonly"]),
+                        u(_, {
+                          modelValue: l[e(t).HCV].approle_role_id,
+                          "onUpdate:modelValue": r[23] || (r[23] = (i) => l[e(t).HCV].approle_role_id = i),
+                          modelModifiers: { trim: !0 },
+                          autocomplete: "off",
+                          "data-testid": "vault-form-config-hcv-approle_role_id",
+                          label: e(a)("form.config.hcv.fields.approle_role_id.label"),
+                          readonly: n.isReadonly,
+                          required: "",
+                          type: "text"
+                        }, null, 8, ["modelValue", "label", "readonly"]),
+                        u(_, {
+                          modelValue: l[e(t).HCV].approle_secret_id,
+                          "onUpdate:modelValue": r[24] || (r[24] = (i) => l[e(t).HCV].approle_secret_id = i),
+                          modelModifiers: { trim: !0 },
+                          autocomplete: "off",
+                          "data-testid": "vault-form-config-hcv-approle_secret_id",
+                          label: e(a)("form.config.hcv.fields.approle_secret_id.label"),
+                          readonly: n.isReadonly,
+                          "show-password-mask-toggle": "",
+                          type: "password"
+                        }, null, 8, ["modelValue", "label", "readonly"]),
+                        u(_, {
+                          modelValue: l[e(t).HCV].approle_secret_id_file,
+                          "onUpdate:modelValue": r[25] || (r[25] = (i) => l[e(t).HCV].approle_secret_id_file = i),
+                          modelModifiers: { trim: !0 },
+                          autocomplete: "off",
+                          "data-testid": "vault-form-config-hcv-approle_secret_id_file",
+                          label: e(a)("form.config.hcv.fields.approle_secret_id_file.label"),
+                          readonly: n.isReadonly,
+                          type: "text"
+                        }, null, 8, ["modelValue", "label", "readonly"]),
+                        u(oe, {
+                          modelValue: l[e(t).HCV].approle_response_wrapping,
+                          "onUpdate:modelValue": r[26] || (r[26] = (i) => l[e(t).HCV].approle_response_wrapping = i),
+                          "data-testid": "vault-form-config-hcv-approle_response_wrapping",
+                          label: e(a)("form.config.hcv.fields.approle_response_wrapping.label")
+                        }, null, 8, ["modelValue", "label"])
+                      ])) : l[e(t).HCV].auth_method === e(A).CERT ? (V(), W("div", Lt, [
+                        u(_, {
+                          modelValue: l[e(t).HCV].cert_auth_role_name,
+                          "onUpdate:modelValue": r[27] || (r[27] = (i) => l[e(t).HCV].cert_auth_role_name = i),
+                          modelModifiers: { trim: !0 },
+                          autocomplete: "off",
+                          "data-testid": "vault-form-config-hcv-cert_auth_role_name",
+                          label: e(a)("form.config.hcv.fields.cert_auth_role_name.label"),
+                          readonly: n.isReadonly,
+                          required: ""
+                        }, null, 8, ["modelValue", "label", "readonly"]),
+                        u(de, {
+                          modelValue: l[e(t).HCV].cert_auth_cert,
+                          "onUpdate:modelValue": r[28] || (r[28] = (i) => l[e(t).HCV].cert_auth_cert = i),
+                          modelModifiers: { trim: !0 },
+                          autocomplete: "off",
+                          "data-testid": "vault-form-config-hcv-cert_auth_cert",
+                          label: e(a)("form.config.hcv.fields.cert_auth_cert.label"),
+                          readonly: n.isReadonly,
+                          required: ""
+                        }, null, 8, ["modelValue", "label", "readonly"]),
+                        u(de, {
+                          modelValue: l[e(t).HCV].cert_auth_cert_key,
+                          "onUpdate:modelValue": r[29] || (r[29] = (i) => l[e(t).HCV].cert_auth_cert_key = i),
+                          modelModifiers: { trim: !0 },
+                          autocomplete: "off",
+                          "data-testid": "vault-form-config-hcv-cert_auth_cert_key",
+                          label: e(a)("form.config.hcv.fields.cert_auth_cert_key.label"),
+                          readonly: n.isReadonly,
+                          required: ""
+                        }, null, 8, ["modelValue", "label", "readonly"])
+                      ])) : l[e(t).HCV].auth_method === e(A).JWT ? (V(), W("div", zt, [
+                        u(_, {
+                          modelValue: l[e(t).HCV].oauth2_client_id,
+                          "onUpdate:modelValue": r[30] || (r[30] = (i) => l[e(t).HCV].oauth2_client_id = i),
+                          modelModifiers: { trim: !0 },
+                          autocomplete: "off",
+                          "data-testid": "vault-form-config-hcv-oauth2_client_id",
+                          label: e(a)("form.config.hcv.fields.oauth2_client_id.label"),
+                          readonly: n.isReadonly,
+                          required: ""
+                        }, null, 8, ["modelValue", "label", "readonly"]),
+                        u(_, {
+                          modelValue: l[e(t).HCV].oauth2_client_secret,
+                          "onUpdate:modelValue": r[31] || (r[31] = (i) => l[e(t).HCV].oauth2_client_secret = i),
+                          modelModifiers: { trim: !0 },
+                          autocomplete: "off",
+                          "data-testid": "vault-form-config-hcv-oauth2_client_secret",
+                          label: e(a)("form.config.hcv.fields.oauth2_client_secret.label"),
+                          readonly: n.isReadonly,
+                          required: "",
+                          "show-password-mask-toggle": "",
+                          type: "password"
+                        }, null, 8, ["modelValue", "label", "readonly"]),
+                        u(_, {
+                          modelValue: l[e(t).HCV].jwt_role,
+                          "onUpdate:modelValue": r[32] || (r[32] = (i) => l[e(t).HCV].jwt_role = i),
+                          modelModifiers: { trim: !0 },
+                          autocomplete: "off",
+                          "data-testid": "vault-form-config-hcv-jwt_role",
+                          label: e(a)("form.config.hcv.fields.jwt_role.label"),
+                          "label-attributes": {
+                            info: e(a)("form.config.hcv.fields.jwt_role.tooltip"),
+                            tooltipAttributes: { maxWidth: "400" }
+                          },
+                          readonly: n.isReadonly,
+                          required: ""
+                        }, null, 8, ["modelValue", "label", "label-attributes", "readonly"]),
+                        u(_, {
+                          modelValue: l[e(t).HCV].oauth2_token_endpoint,
+                          "onUpdate:modelValue": r[33] || (r[33] = (i) => l[e(t).HCV].oauth2_token_endpoint = i),
+                          modelModifiers: { trim: !0 },
+                          autocomplete: "off",
+                          "data-testid": "vault-form-config-hcv-oauth2_token_endpoint",
+                          label: e(a)("form.config.hcv.fields.oauth2_token_endpoint.label"),
+                          readonly: n.isReadonly,
+                          required: ""
+                        }, null, 8, ["modelValue", "label", "readonly"]),
+                        u(_, {
+                          modelValue: l[e(t).HCV].oauth2_audiences,
+                          "onUpdate:modelValue": r[34] || (r[34] = (i) => l[e(t).HCV].oauth2_audiences = i),
+                          modelModifiers: { trim: !0 },
+                          autocomplete: "off",
+                          "data-testid": "vault-form-config-hcv-oauth2_audiences",
+                          label: e(a)("form.config.hcv.fields.oauth2_audiences.label"),
+                          "label-attributes": {
+                            info: e(a)("form.config.hcv.fields.oauth2_audiences.tooltip"),
+                            tooltipAttributes: { maxWidth: "400" }
+                          },
+                          readonly: n.isReadonly
+                        }, null, 8, ["modelValue", "label", "label-attributes", "readonly"])
+                      ])) : B("", !0),
+                      o.config.base64FieldAvailable ? (V(), D(oe, {
+                        key: 5,
+                        modelValue: l[e(t).HCV].base64_decode,
+                        "onUpdate:modelValue": r[35] || (r[35] = (i) => l[e(t).HCV].base64_decode = i),
+                        "data-testid": "vault-form-config-hcv-base64_decode",
+                        label: e(a)("form.config.commonFields.base64_decode.label"),
+                        "label-attributes": {
+                          info: e(a)("form.config.commonFields.base64_decode.tooltip"),
+                          tooltipAttributes: { maxWidth: "400" }
+                        },
+                        readonly: n.isReadonly
+                      }, null, 8, ["modelValue", "label", "label-attributes", "readonly"])) : B("", !0)
+                    ])) : B("", !0),
+                    f.value === e(t).AZURE ? (V(), W("div", {
+                      key: `${e(t).AZURE}-vault-config-fields`,
+                      class: "vault-form-config-fields-container"
+                    }, [
+                      u(_, {
+                        modelValue: l[e(t).AZURE].location,
+                        "onUpdate:modelValue": r[36] || (r[36] = (i) => l[e(t).AZURE].location = i),
+                        modelModifiers: { trim: !0 },
+                        autocomplete: "off",
+                        "data-testid": "vault-form-config-azure-location",
+                        label: e(a)("form.config.azure.fields.location.label"),
+                        readonly: n.isReadonly,
+                        required: "",
+                        type: "text"
+                      }, null, 8, ["modelValue", "label", "readonly"]),
+                      u(_, {
+                        modelValue: l[e(t).AZURE].vault_uri,
+                        "onUpdate:modelValue": r[37] || (r[37] = (i) => l[e(t).AZURE].vault_uri = i),
+                        modelModifiers: { trim: !0 },
+                        autocomplete: "off",
+                        "data-testid": "vault-form-config-azure-uri",
+                        label: e(a)("form.config.azure.fields.vault_uri.label"),
+                        readonly: n.isReadonly,
+                        required: "",
+                        type: "text"
+                      }, null, 8, ["modelValue", "label", "readonly"]),
+                      u(_, {
+                        modelValue: l[e(t).AZURE].credentials_prefix,
+                        "onUpdate:modelValue": r[38] || (r[38] = (i) => l[e(t).AZURE].credentials_prefix = i),
+                        modelModifiers: { trim: !0 },
+                        autocomplete: "off",
+                        "data-testid": "vault-form-config-azure-prefix",
+                        label: e(a)("form.config.azure.fields.credential_prefix.label"),
+                        readonly: n.isReadonly,
+                        required: "",
+                        type: "text"
+                      }, null, 8, ["modelValue", "label", "readonly"]),
+                      u(C, {
+                        modelValue: l[e(t).AZURE].type,
+                        "onUpdate:modelValue": r[39] || (r[39] = (i) => l[e(t).AZURE].type = i),
+                        "data-testid": "vault-form-config-azure-type",
+                        items: ee,
+                        label: e(a)("form.config.azure.fields.type.label"),
+                        placeholder: e(a)("form.config.azure.fields.type.placeholder"),
+                        readonly: n.isReadonly,
+                        required: "",
+                        width: "100%"
+                      }, null, 8, ["modelValue", "label", "placeholder", "readonly"]),
+                      u(_, {
+                        modelValue: l[e(t).AZURE].client_id,
+                        "onUpdate:modelValue": r[40] || (r[40] = (i) => l[e(t).AZURE].client_id = i),
+                        modelModifiers: { trim: !0 },
+                        autocomplete: "off",
+                        "data-testid": "vault-form-config-azure-client-id",
+                        label: e(a)("form.config.azure.fields.client_id.label"),
+                        readonly: n.isReadonly,
+                        type: "text"
+                      }, null, 8, ["modelValue", "label", "readonly"]),
+                      u(_, {
+                        modelValue: l[e(t).AZURE].tenant_id,
+                        "onUpdate:modelValue": r[41] || (r[41] = (i) => l[e(t).AZURE].tenant_id = i),
+                        modelModifiers: { trim: !0 },
+                        autocomplete: "off",
+                        "data-testid": "vault-form-config-azure-tenant-id",
+                        label: e(a)("form.config.azure.fields.tenant_id.label"),
+                        readonly: n.isReadonly,
+                        type: "text"
+                      }, null, 8, ["modelValue", "label", "readonly"]),
+                      o.config.base64FieldAvailable ? (V(), D(oe, {
+                        key: 0,
+                        modelValue: l[e(t).AZURE].base64_decode,
+                        "onUpdate:modelValue": r[42] || (r[42] = (i) => l[e(t).AZURE].base64_decode = i),
+                        "data-testid": "vault-form-config-azure-base64_decode",
+                        label: e(a)("form.config.commonFields.base64_decode.label"),
+                        "label-attributes": {
+                          info: e(a)("form.config.commonFields.base64_decode.tooltip"),
+                          tooltipAttributes: { maxWidth: "400" }
+                        },
+                        readonly: n.isReadonly
+                      }, null, 8, ["modelValue", "label", "label-attributes", "readonly"])) : B("", !0)
+                    ])) : B("", !0),
+                    f.value === e(t).CONJUR ? (V(), W("div", {
+                      key: `${e(t).CONJUR}-vault-config-fields`,
+                      class: "vault-form-config-fields-container"
+                    }, [
+                      u(_, {
+                        modelValue: l[e(t).CONJUR].endpoint_url,
+                        "onUpdate:modelValue": r[43] || (r[43] = (i) => l[e(t).CONJUR].endpoint_url = i),
+                        modelModifiers: { trim: !0 },
+                        autocomplete: "off",
+                        "data-testid": "vault-form-config-conjur-endpoint_url",
+                        label: e(a)("form.config.conjur.fields.endpoint_url.label"),
+                        "label-attributes": {
+                          info: e(a)("form.config.conjur.fields.endpoint_url.tooltip"),
+                          tooltipAttributes: { maxWidth: "400" }
+                        },
+                        readonly: n.isReadonly,
+                        required: "",
+                        type: "text"
+                      }, null, 8, ["modelValue", "label", "label-attributes", "readonly"]),
+                      u(_, {
+                        modelValue: l[e(t).CONJUR].login,
+                        "onUpdate:modelValue": r[44] || (r[44] = (i) => l[e(t).CONJUR].login = i),
+                        modelModifiers: { trim: !0 },
+                        autocomplete: "off",
+                        "data-testid": "vault-form-config-conjur-login",
+                        label: e(a)("form.config.conjur.fields.login.label"),
+                        "label-attributes": {
+                          info: e(a)("form.config.conjur.fields.login.tooltip"),
+                          tooltipAttributes: { maxWidth: "400" }
+                        },
+                        readonly: n.isReadonly,
+                        required: "",
+                        type: "text"
+                      }, null, 8, ["modelValue", "label", "label-attributes", "readonly"]),
+                      u(_, {
+                        modelValue: l[e(t).CONJUR].account,
+                        "onUpdate:modelValue": r[45] || (r[45] = (i) => l[e(t).CONJUR].account = i),
+                        modelModifiers: { trim: !0 },
+                        autocomplete: "off",
+                        "data-testid": "vault-form-config-conjur-account",
+                        label: e(a)("form.config.conjur.fields.account.label"),
+                        "label-attributes": {
+                          info: e(a)("form.config.conjur.fields.account.tooltip"),
+                          tooltipAttributes: { maxWidth: "400" }
+                        },
+                        readonly: n.isReadonly,
+                        required: "",
+                        type: "text"
+                      }, null, 8, ["modelValue", "label", "label-attributes", "readonly"]),
+                      u(_, {
+                        modelValue: l[e(t).CONJUR].api_key,
+                        "onUpdate:modelValue": r[46] || (r[46] = (i) => l[e(t).CONJUR].api_key = i),
+                        modelModifiers: { trim: !0 },
+                        autocomplete: "off",
+                        "data-testid": "vault-form-config-conjur-api_key",
+                        label: e(a)("form.config.conjur.fields.api_key.label"),
+                        "label-attributes": {
+                          info: e(a)("form.config.conjur.fields.api_key.tooltip"),
+                          tooltipAttributes: { maxWidth: "400" }
+                        },
+                        readonly: n.isReadonly,
+                        required: "",
+                        "show-password-mask-toggle": "",
+                        type: "password"
+                      }, null, 8, ["modelValue", "label", "label-attributes", "readonly"]),
+                      o.config.base64FieldAvailable ? (V(), D(oe, {
+                        key: 0,
+                        modelValue: l[e(t).CONJUR].base64_decode,
+                        "onUpdate:modelValue": r[47] || (r[47] = (i) => l[e(t).CONJUR].base64_decode = i),
+                        "data-testid": "vault-form-config-env-base64_decode",
+                        label: e(a)("form.config.commonFields.base64_decode.label"),
+                        "label-attributes": {
+                          info: e(a)("form.config.commonFields.base64_decode.tooltip"),
+                          tooltipAttributes: { maxWidth: "400" }
+                        },
+                        readonly: n.isReadonly
+                      }, null, 8, ["modelValue", "label", "label-attributes", "readonly"])) : B("", !0)
+                    ])) : B("", !0),
+                    o.config.ttl ? (V(), W("div", Gt, [
+                      Q.value ? (V(), D(ve, {
+                        key: 0,
+                        class: "advanced-fields-collapse",
+                        "data-testid": "advanced-fields-collapse",
+                        "trigger-alignment": "leading",
+                        "trigger-label": e(a)("form.config.advancedFields.title")
+                      }, {
+                        default: m(() => [
+                          x("div", Zt, [
+                            x("div", Qt, [
+                              u(_, {
+                                modelValue: l[f.value].ttl,
+                                "onUpdate:modelValue": r[48] || (r[48] = (i) => l[f.value].ttl = i),
+                                "data-testid": "vault-ttl-input",
+                                label: e(a)("form.config.advancedFields.ttl"),
+                                "label-attributes": {
+                                  info: e(a)("form.config.advancedFields.ttlTooltip"),
+                                  tooltipAttributes: { maxWidth: "400" }
+                                },
+                                type: "number"
+                              }, null, 8, ["modelValue", "label", "label-attributes"])
+                            ]),
+                            x("div", Yt, [
+                              u(_, {
+                                modelValue: l[f.value].neg_ttl,
+                                "onUpdate:modelValue": r[49] || (r[49] = (i) => l[f.value].neg_ttl = i),
+                                "data-testid": "vault-neg-ttl-input",
+                                label: e(a)("form.config.advancedFields.negTtl"),
+                                "label-attributes": {
+                                  info: e(a)("form.config.advancedFields.negTtlTooltip"),
+                                  tooltipAttributes: { maxWidth: "400" }
+                                },
+                                type: "number"
+                              }, null, 8, ["modelValue", "label", "label-attributes"])
+                            ])
+                          ]),
+                          x("div", Xt, [
+                            x("div", el, [
+                              u(_, {
+                                modelValue: l[f.value].resurrect_ttl,
+                                "onUpdate:modelValue": r[50] || (r[50] = (i) => l[f.value].resurrect_ttl = i),
+                                "data-testid": "vault-resurrect-ttl-input",
+                                label: e(a)("form.config.advancedFields.resurrectTtl"),
+                                "label-attributes": {
+                                  info: e(a)("form.config.advancedFields.resurrectTtlTooltip"),
+                                  tooltipAttributes: { maxWidth: "400" }
+                                },
+                                type: "number"
+                              }, null, 8, ["modelValue", "label", "label-attributes"])
+                            ])
+                          ])
+                        ]),
+                        _: 1
+                      }, 8, ["trigger-label"])) : B("", !0)
+                    ])) : B("", !0)
+                  ]),
+                  _: 1
+                })
+              ]),
+              _: 1
+            }, 8, ["description", "title"]),
+            u(e(Ae), {
+              description: e(a)("form.sections.general.description"),
+              title: e(a)("form.sections.general.title")
+            }, {
+              default: m(() => [
+                u(_, {
+                  modelValue: n.fields.prefix,
+                  "onUpdate:modelValue": r[51] || (r[51] = (i) => n.fields.prefix = i),
+                  modelModifiers: { trim: !0 },
+                  autocomplete: "off",
+                  "data-testid": "vault-form-prefix",
+                  help: e(a)("form.fields.prefix.help"),
+                  label: e(a)("form.fields.prefix.label"),
+                  "label-attributes": {
+                    info: e(a)("form.fields.prefix.tooltip"),
+                    tooltipAttributes: { maxWidth: "400" }
+                  },
+                  placeholder: e(a)("form.fields.prefix.placeholder"),
+                  readonly: n.isReadonly,
+                  required: "",
+                  type: "text"
+                }, null, 8, ["modelValue", "help", "label", "label-attributes", "placeholder", "readonly"]),
+                u(de, {
+                  modelValue: n.fields.description,
+                  "onUpdate:modelValue": r[52] || (r[52] = (i) => n.fields.description = i),
+                  modelModifiers: { trim: !0 },
+                  "character-limit": 1e3,
+                  class: "vault-form-textarea",
+                  "data-testid": "vault-form-description",
+                  label: e(a)("form.fields.description.label"),
+                  placeholder: e(a)("form.fields.description.placeholder"),
+                  readonly: n.isReadonly
+                }, null, 8, ["modelValue", "label", "placeholder", "readonly"]),
+                u(_, {
+                  modelValue: n.fields.tags,
+                  "onUpdate:modelValue": r[53] || (r[53] = (i) => n.fields.tags = i),
+                  modelModifiers: { trim: !0 },
+                  autocomplete: "off",
+                  "data-testid": "vault-form-tags",
+                  help: e(a)("form.fields.tags.help"),
+                  label: e(a)("form.fields.tags.label"),
+                  placeholder: e(a)("form.fields.tags.placeholder"),
+                  readonly: n.isReadonly,
+                  type: "text"
+                }, null, 8, ["modelValue", "help", "label", "placeholder", "readonly"])
+              ]),
+              _: 1
+            }, 8, ["description", "title"])
+          ]),
+          _: 1
+        }, 8, ["can-submit", "config", "edit-id", "entity-type", "error-message", "fetch-url", "form-fields", "is-readonly"])
+      ]);
+    };
+  }
+}), Ul = /* @__PURE__ */ me(tl, [["__scopeId", "data-v-69c9b94d"]]), ll = { class: "kong-ui-vault-entity-config-card" }, Tl = /* @__PURE__ */ ce({
+  __name: "VaultConfigCard",
+  props: {
+    /** The base konnect or kongManger config. Pass additional config props in the shared entity component as needed. */
+    config: {
+      type: Object,
+      required: !0,
+      validator: (o) => !(!o || !["konnect", "kongManager"].includes(o == null ? void 0 : o.app) || o.app === "konnect" && !o.controlPlaneId || o.app === "kongManager" && typeof o.workspace != "string" || !o.entityId)
+    },
+    /**
+     * External link for documentation that determines visibility of Documentation button
+     */
+    configCardDoc: {
+      type: String,
+      default: "",
+      required: !1
+    },
+    /**
+     * Control visibility of card title content
+     */
+    hideTitle: {
+      type: Boolean,
+      default: !1
+    }
+  },
+  emits: ["loading", "fetch:error", "fetch:success"],
+  setup(o) {
+    const S = o, c = ["token", "approle_secret_id", "api_key"], d = w(() => {
+      var n, g;
+      return (g = pe.form[(n = S.config) == null ? void 0 : n.app]) == null ? void 0 : g.edit;
+    }), { i18n: { t: p } } = he.useI18n(), { convertKeyToTitle: a } = vt(), { getPropValue: K } = gt(), I = $({
+      id: {},
+      name: {
+        label: p("labels.vault_type")
+      },
+      updated_at: {},
+      created_at: {},
+      prefix: {
+        order: 5,
+        section: Ne.Basic
+      },
+      description: {
+        order: 6,
+        section: Ne.Basic
+      },
+      tags: {
+        order: 7
+      },
+      config: {
+        order: 8,
+        type: Se.Json
+      }
+    }), h = (n) => {
+      var g, f;
+      return ((f = (g = I.value) == null ? void 0 : g[n]) == null ? void 0 : f.label) || a(n);
+    };
+    return (n, g) => (V(), W("div", ll, [
+      u(e(bt), {
+        config: o.config,
+        "config-card-doc": o.configCardDoc,
+        "config-schema": I.value,
+        "entity-type": e(Ue).Vault,
+        "fetch-url": d.value,
+        "hide-title": o.hideTitle,
+        "onFetch:error": g[0] || (g[0] = (f) => n.$emit("fetch:error", f)),
+        "onFetch:success": g[1] || (g[1] = (f) => n.$emit("fetch:success", f)),
+        onLoading: g[2] || (g[2] = (f) => n.$emit("loading", f))
+      }, {
+        config: m(({ rowValue: f }) => [
+          (V(!0), W(qe, null, et(Object.keys(f).sort(), (N) => (V(), D(e(_t), {
+            key: N,
+            item: {
+              key: N,
+              value: e(K)(N, f),
+              label: h(N),
+              type: c.includes(N) ? e(Se).Redacted : e(Se).Text
+            }
+          }, null, 8, ["item"]))), 128))
+        ]),
+        _: 1
+      }, 8, ["config", "config-card-doc", "config-schema", "entity-type", "fetch-url", "hide-title"])
+    ]));
+  }
+}), Ce = "/v2/control-planes/{controlPlaneId}", be = {
+  getVault: {
+    konnect: `${Ce}/core-entities/vaults/{id}`
+  },
+  list: {
+    konnect: `${Ce}/config-stores/{id}/secrets`
+  },
+  form: {
+    konnect: {
+      create: `${Ce}/config-stores/{id}/secrets`,
+      edit: `${Ce}/config-stores/{id}/secrets/{secretId}`
+    }
+  }
+}, ol = { class: "table-content-overflow-wrapper" }, al = /* @__PURE__ */ ce({
+  inheritAttrs: !1,
+  __name: "SecretListInner",
+  props: {
+    /** The base konnect config. Pass additional config props in the shared entity component as needed. */
+    config: {
+      type: Object,
+      required: !0,
+      validator: (o) => !(!o || (o == null ? void 0 : o.app) !== "konnect" || !o.createRoute || !o.getEditRoute)
+    },
+    // The config store id for the secrets
+    configStoreId: {
+      type: String,
+      required: !0
+    },
+    // used to override the default identifier for the cache entry
+    cacheIdentifier: {
+      type: String,
+      default: ""
+    },
+    /** A synchronous or asynchronous function, that returns a boolean, that evaluates if the user can create a new entity */
+    canCreate: {
+      type: Function,
+      required: !1,
+      default: async () => !0
+    },
+    /** A synchronous or asynchronous function, that returns a boolean, that evaluates if the user can delete a given entity */
+    canDelete: {
+      type: Function,
+      required: !1,
+      default: async () => !0
+    },
+    /** A synchronous or asynchronous function, that returns a boolean, that evaluates if the user can edit a given entity */
+    canEdit: {
+      type: Function,
+      required: !1,
+      default: async () => !0
+    }
+  },
+  emits: ["error", "delete:success"],
+  setup(o, { emit: S }) {
+    var ie;
+    const c = S, d = o, { i18n: { t: p, formatUnixTimeStamp: a } } = he.useI18n(), { axiosInstance: K } = _e((ie = d.config) == null ? void 0 : ie.axiosRequestConfig), h = {
+      // the Secret Key column is non-hidable
+      key: { label: p("secrets.list.table_headers.key"), sortable: !1, hidable: !1 },
+      updated_at: { label: p("secrets.list.table_headers.updated_at"), sortable: !1 }
+    }, n = (T) => ({
+      "data-testid": T.key
+    }), g = w(() => {
+      var T;
+      return `${d.config.apiBaseUrl}${be.list[d.config.app]}`.replace(/{controlPlaneId}/gi, ((T = d.config) == null ? void 0 : T.controlPlaneId) || "").replace(/{id}/gi, d.configStoreId || "");
+    }), f = $(""), N = {
+      isExactMatch: !0,
+      placeholder: p("search.placeholder_for_secrets.konnect")
+    }, {
+      fetcher: X,
+      fetcherState: Q,
+      fetcherCacheKey: Y
+    } = We(w(() => ({ ...d.config, cacheIdentifier: d.cacheIdentifier })), g), O = () => {
+      f.value = "";
+    }, l = $(null), ae = (T) => ({
+      label: p("actions.edit"),
+      to: d.config.getEditRoute(T)
+    }), z = $(void 0), ee = $(!1), G = $(!1), y = $(""), F = De(d.config, g.value), re = (T) => {
+      z.value = T, ee.value = !0;
+    }, ne = () => {
+      ee.value = !1;
+    }, le = async () => {
+      var T, Z, te;
+      if ((T = z.value) != null && T.key) {
+        G.value = !0;
+        try {
+          await K.delete(F(z.value.key)), G.value = !1, ee.value = !1, Y.value++, c("delete:success", z.value);
+        } catch (b) {
+          y.value = ((te = (Z = b.response) == null ? void 0 : Z.data) == null ? void 0 : te.message) || b.message || p("errors.delete"), c("error", b);
+        } finally {
+          G.value = !1;
+        }
+      }
+    };
+    ke(Q, (T) => {
+      var Z, te, b;
+      if (T.status === Be.Error) {
+        l.value = {
+          title: p("errors.general")
+        }, (b = (te = (Z = T.error) == null ? void 0 : Z.response) == null ? void 0 : te.data) != null && b.message && (l.value.message = T.error.response.data.message), c("error", T.error);
+        return;
+      }
+      l.value = null;
+    });
+    const q = $({
+      ctaPath: d.config.createRoute,
+      ctaText: void 0,
+      message: `${p("secrets.list.empty_state.description")}${d.config.additionMessageForEmptyState ? ` ${d.config.additionMessageForEmptyState}` : ""}`,
+      title: p("secrets.title")
+    });
+    return we(async () => {
+      await d.canCreate() && (q.value.title = p("secrets.list.empty_state.title"), q.value.ctaText = p("secrets.list.toolbar_actions.new_secret"));
+    }), (T, Z) => {
+      const te = J("KButton"), b = J("KDropdownItem");
+      return V(), W(qe, null, [
+        u(e(Je), {
+          "cache-identifier": o.cacheIdentifier,
+          "disable-sorting": "",
+          "empty-state-options": q.value,
+          "enable-entity-actions": "",
+          "error-message": l.value,
+          fetcher: e(X),
+          "fetcher-cache-key": e(Y),
+          "pagination-type": "offset",
+          "preferences-storage-key": "kong-ui-entities-secrets-list",
+          query: f.value,
+          "row-attributes": n,
+          "table-headers": e(h),
+          onClearSearchInput: O
+        }, {
+          "toolbar-filter": m(() => [
+            u(e(Le), {
+              modelValue: f.value,
+              "onUpdate:modelValue": Z[0] || (Z[0] = (v) => f.value = v),
+              config: N
+            }, null, 8, ["modelValue"])
+          ]),
+          "toolbar-button": m(() => [
+            u(e(ge), {
+              "auth-function": () => o.canCreate()
+            }, {
+              default: m(() => [
+                u(te, {
+                  appearance: "primary",
+                  "data-testid": "toolbar-add-secret",
+                  size: "large",
+                  to: o.config.createRoute
+                }, {
+                  default: m(() => [
+                    u(e(Re)),
+                    ue(" " + H(e(p)("secrets.list.toolbar_actions.new_secret")), 1)
+                  ]),
+                  _: 1
+                }, 8, ["to"])
+              ]),
+              _: 1
+            }, 8, ["auth-function"])
+          ]),
+          key: m(({ rowValue: v }) => [
+            x("div", ol, [
+              x("b", null, H(v ?? "-"), 1)
+            ])
+          ]),
+          updated_at: m(({ rowValue: v }) => [
+            x("span", null, H(v ? e(a)(new Date(v).getTime() / 1e3) : "-"), 1)
+          ]),
+          actions: m(({ row: v }) => [
+            u(e(ge), {
+              "auth-function": () => o.canEdit(v)
+            }, {
+              default: m(() => [
+                u(b, {
+                  "data-testid": "action-entity-edit",
+                  item: ae(v.key)
+                }, null, 8, ["item"])
+              ]),
+              _: 2
+            }, 1032, ["auth-function"]),
+            u(e(ge), {
+              "auth-function": () => o.canDelete(v)
+            }, {
+              default: m(() => [
+                u(b, {
+                  danger: "",
+                  "data-testid": "action-entity-delete",
+                  "has-divider": "",
+                  onClick: (P) => re(v)
+                }, {
+                  default: m(() => [
+                    ue(H(e(p)("actions.delete")), 1)
+                  ]),
+                  _: 1
+                }, 8, ["onClick"])
+              ]),
+              _: 2
+            }, 1032, ["auth-function"])
+          ]),
+          _: 1
+        }, 8, ["cache-identifier", "empty-state-options", "error-message", "fetcher", "fetcher-cache-key", "query", "table-headers"]),
+        u(e(ze), {
+          "action-pending": G.value,
+          description: e(p)("delete.description"),
+          "entity-name": z.value && z.value.key,
+          "entity-type": e(Ge).Secret,
+          error: y.value,
+          title: e(p)("delete.title_for_secret"),
+          visible: ee.value,
+          onCancel: ne,
+          onProceed: le
+        }, null, 8, ["action-pending", "description", "entity-name", "entity-type", "error", "title", "visible"])
+      ], 64);
+    };
+  }
+}), rl = /* @__PURE__ */ me(al, [["__scopeId", "data-v-904390fc"]]), il = { class: "kong-ui-entities-secrets-list" }, nl = /* @__PURE__ */ ce({
+  __name: "SecretList",
+  props: {
+    /** The base konnect config. Pass additional config props in the shared entity component as needed. */
+    config: {
+      type: Object,
+      required: !0,
+      validator: (o) => !(!o || (o == null ? void 0 : o.app) !== "konnect" || !o.createRoute || !o.getEditRoute)
+    },
+    // The vault id for the secrets
+    vaultId: {
+      type: String,
+      required: !0
+    },
+    // used to override the default identifier for the cache entry
+    cacheIdentifier: {
+      type: String,
+      default: ""
+    },
+    /** A synchronous or asynchronous function, that returns a boolean, that evaluates if the user can create a new entity */
+    canCreate: {
+      type: Function,
+      required: !1,
+      default: async () => !0
+    },
+    /** A synchronous or asynchronous function, that returns a boolean, that evaluates if the user can delete a given entity */
+    canDelete: {
+      type: Function,
+      required: !1,
+      default: async () => !0
+    },
+    /** A synchronous or asynchronous function, that returns a boolean, that evaluates if the user can edit a given entity */
+    canEdit: {
+      type: Function,
+      required: !1,
+      default: async () => !0
+    }
+  },
+  emits: ["error", "delete:success"],
+  setup(o, { emit: S }) {
+    var n;
+    const c = S, d = o, p = (g) => {
+      c("error", g);
+    }, a = (g) => {
+      c("delete:success", g);
+    }, { axiosInstance: K } = _e((n = d.config) == null ? void 0 : n.axiosRequestConfig), I = $(""), h = w(() => {
+      var g;
+      return `${d.config.apiBaseUrl}${be.getVault[d.config.app]}`.replace(/{controlPlaneId}/gi, ((g = d.config) == null ? void 0 : g.controlPlaneId) || "").replace(/{id}/gi, d.vaultId);
+    });
+    return we(async () => {
+      var g;
+      try {
+        const { data: f } = await K.get(h.value);
+        I.value = (g = f == null ? void 0 : f.config) == null ? void 0 : g.config_store_id;
+      } catch (f) {
+        c("error", f);
+      }
+    }), (g, f) => (V(), W("div", il, [
+      I.value ? (V(), D(rl, je({ key: 0 }, d, {
+        "config-store-id": I.value,
+        "onDelete:success": a,
+        onError: p
+      }), null, 16, ["config-store-id"])) : B("", !0)
+    ]));
+  }
+}), Hl = /* @__PURE__ */ me(nl, [["__scopeId", "data-v-f5aa5636"]]), sl = /* @__PURE__ */ ce({
+  inheritAttrs: !1,
+  __name: "SecretFormInner",
+  props: {
+    /** The base konnect or kongManger config. Pass additional config props in the shared entity component as needed. */
+    config: {
+      type: Object,
+      required: !0,
+      validator: (o) => !(!o || o.app !== "konnect" || !o.controlPlaneId || !o.cancelRoute)
+    },
+    /** Current config store ID */
+    configStoreId: {
+      type: String,
+      required: !0
+    },
+    /** If a valid secretId is provided, it will put the form in Edit mode instead of Create */
+    secretId: {
+      type: String,
+      required: !1,
+      default: ""
+    }
+  },
+  emits: ["update", "error", "loading"],
+  setup(o, { emit: S }) {
+    var G;
+    const c = o, d = S, { i18n: { t: p } } = he.useI18n(), a = Ee(), { axiosInstance: K } = _e((G = c.config) == null ? void 0 : G.axiosRequestConfig), { getMessageFromError: I } = Ze(), h = ye({
+      fields: {
+        key: "",
+        value: ""
+      },
+      readonly: !1,
+      errorMessage: ""
+    }), n = ye({
+      key: "",
+      value: ""
+    }), g = w(
+      () => {
+        var y, F;
+        return (F = be.form[(y = c.config) == null ? void 0 : y.app]) == null ? void 0 : F.edit.replace(/{id}/gi, c.configStoreId).replace(/{secretId}/gi, c.secretId);
+      }
+    ), f = () => {
+      var y;
+      a.push(((y = c.config) == null ? void 0 : y.cancelRoute) || { name: "secret-list" });
+    }, N = (y) => {
+      d("loading", y);
+    }, X = (y) => {
+      d("error", y);
+    }, Q = (y) => {
+      var F, re;
+      h.fields.key = ((F = y == null ? void 0 : y.item) == null ? void 0 : F.key) || (y == null ? void 0 : y.key) || "", h.fields.value = ((re = y == null ? void 0 : y.item) == null ? void 0 : re.value) || (y == null ? void 0 : y.value) || "", Object.assign(n, h.fields);
+    }, Y = w(() => c.secretId ? Ve.Edit : Ve.Create), O = w(() => {
+      var y;
+      return `${c.config.apiBaseUrl}${be.form[c.config.app][Y.value]}`.replace(/{controlPlaneId}/gi, ((y = c.config) == null ? void 0 : y.controlPlaneId) || "").replace(/{id}/gi, c.configStoreId).replace(/{secretId}/gi, c.secretId);
+    }), l = w(() => !!h.fields.key && !!h.fields.value), ae = w(() => JSON.stringify(h.fields) !== JSON.stringify(n)), z = w(() => ({
+      key: h.fields.key,
+      value: h.fields.value
+    })), ee = async () => {
+      try {
+        h.readonly = !0;
+        let y;
+        Y.value === "create" ? y = await K.post(O.value, z.value) : Y.value === "edit" && (y = await K.put(O.value, z.value)), Q(y == null ? void 0 : y.data), d("update", y == null ? void 0 : y.data);
+      } catch (y) {
+        h.errorMessage = I(y), d("error", y);
+      } finally {
+        h.readonly = !1;
+      }
+    };
+    return (y, F) => {
+      const re = J("KInput"), ne = J("KTextArea"), le = J("KAlert");
+      return V(), D(e(Qe), {
+        "can-submit": l.value && ae.value,
+        config: o.config,
+        "edit-id": o.secretId,
+        "entity-type": e(Ue).Other,
+        "error-message": h.errorMessage,
+        "fetch-url": g.value,
+        "form-fields": z.value,
+        "is-readonly": h.readonly,
+        onCancel: f,
+        "onFetch:error": X,
+        "onFetch:success": Q,
+        onLoading: N,
+        onSubmit: ee
+      }, {
+        default: m(() => [
+          x("div", null, [
+            u(e(Ae), {
+              description: e(p)("secrets.form.info.description"),
+              "has-divider": "",
+              title: e(p)("secrets.form.info.title")
+            }, {
+              default: m(() => [
+                u(re, {
+                  modelValue: h.fields.key,
+                  "onUpdate:modelValue": F[0] || (F[0] = (q) => h.fields.key = q),
+                  modelModifiers: { trim: !0 },
+                  autocomplete: "off",
+                  class: "key-field",
+                  "data-testid": "secret-form-key",
+                  disabled: Y.value === e(Ve).Edit,
+                  label: e(p)("secrets.form.fields.key.label"),
+                  placeholder: e(p)("secrets.form.fields.key.placeholder"),
+                  readonly: h.readonly,
+                  required: "",
+                  type: "text"
+                }, null, 8, ["modelValue", "disabled", "label", "placeholder", "readonly"]),
+                u(ne, {
+                  modelValue: h.fields.value,
+                  "onUpdate:modelValue": F[1] || (F[1] = (q) => h.fields.value = q),
+                  modelModifiers: { trim: !0 },
+                  autocomplete: "off",
+                  "data-testid": "secret-form-value",
+                  label: e(p)("secrets.form.fields.value.label"),
+                  placeholder: e(p)("secrets.form.fields.value.placeholder"),
+                  readonly: h.readonly,
+                  required: "",
+                  resizable: "",
+                  type: "text"
+                }, null, 8, ["modelValue", "label", "placeholder", "readonly"]),
+                u(le, {
+                  appearance: "warning",
+                  message: e(p)("secrets.form.hint")
+                }, null, 8, ["message"])
+              ]),
+              _: 1
+            }, 8, ["description", "title"])
+          ])
+        ]),
+        _: 1
+      }, 8, ["can-submit", "config", "edit-id", "entity-type", "error-message", "fetch-url", "form-fields", "is-readonly"]);
+    };
+  }
+}), dl = /* @__PURE__ */ me(sl, [["__scopeId", "data-v-5ee165bf"]]), ul = { class: "kong-ui-entities-secret-form" }, cl = /* @__PURE__ */ ce({
+  __name: "SecretForm",
+  props: {
+    /** The base konnect or kongManger config. Pass additional config props in the shared entity component as needed. */
+    config: {
+      type: Object,
+      required: !0,
+      validator: (o) => !(!o || o.app !== "konnect" || !o.controlPlaneId || !o.cancelRoute)
+    },
+    /** Current vault ID */
+    vaultId: {
+      type: String,
+      required: !0
+    },
+    /** If a valid secretId is provided, it will put the form in Edit mode instead of Create */
+    secretId: {
+      type: String,
+      required: !1,
+      default: ""
+    }
+  },
+  emits: ["update", "error", "loading"],
+  setup(o, { emit: S }) {
+    var g;
+    const c = o, d = S, p = (f) => {
+      d("update", f);
+    }, a = (f) => {
+      d("error", f);
+    }, K = (f) => {
+      d("loading", f);
+    }, { axiosInstance: I } = _e((g = c.config) == null ? void 0 : g.axiosRequestConfig), h = $(""), n = w(() => {
+      var f;
+      return `${c.config.apiBaseUrl}${be.getVault[c.config.app]}`.replace(/{controlPlaneId}/gi, ((f = c.config) == null ? void 0 : f.controlPlaneId) || "").replace(/{id}/gi, c.vaultId);
+    });
+    return we(async () => {
+      var f;
+      try {
+        const { data: N } = await I.get(n.value);
+        h.value = (f = N == null ? void 0 : N.config) == null ? void 0 : f.config_store_id;
+      } catch (N) {
+        d("error", N);
+      }
+    }), (f, N) => (V(), W("div", ul, [
+      h.value ? (V(), D(dl, je({ key: 0 }, c, {
+        "config-store-id": h.value,
+        onError: a,
+        onLoading: K,
+        onUpdate: p
+      }), null, 16, ["config-store-id"])) : B("", !0)
+    ]));
+  }
+}), $l = /* @__PURE__ */ me(cl, [["__scopeId", "data-v-754ddb2f"]]), fl = {
+  class: "vault-secret-picker-provider"
+}, pl = /* @__PURE__ */ ce({
+  __name: "VaultSecretPickerProvider",
+  props: {
+    value: {},
+    disabled: {
+      type: Boolean
+    },
+    update: {
+      type: Function
+    }
+  },
+  emits: ["open"],
+  setup(o, {
+    emit: S
+  }) {
+    const c = o, d = S, {
+      i18n: {
+        t: p
+      },
+      i18nT: a
+    } = he.useI18n();
+    return (K, I) => (V(), W("div", fl, [u(e(a), {
+      keypath: "vault_secret_picker.provider.complete_action",
+      scope: "global"
+    }, {
+      cta: m(() => [x("span", {
+        class: tt({
+          "vault-secret-picker-provider-action": !0,
+          disabled: c.disabled
+        }),
+        onClick: I[0] || (I[0] = () => !c.disabled && d("open", c.value, c.update))
+      }, H(e(p)("vault_secret_picker.provider.cta")), 3)]),
+      _: 1
+    })]));
+  }
+}), Kl = /* @__PURE__ */ me(pl, [["__scopeId", "data-v-66a1e406"]]), ml = (o) => {
+  let S = o.trim();
+  if (!S.startsWith("{") || !S.endsWith("}"))
+    throw new Error("Invalid secret reference: must be enclosed in curly braces");
+  if (S = S.substring(1, S.length - 1).trim(), !S.startsWith("vault://"))
+    throw new Error("Invalid secret reference: must start with vault://");
+  const c = new URL(`http://${S.substring(8)}`);
+  if (!c)
+    throw new Error("Invalid secret reference: must have a vault prefix");
+  const d = c.host, [, p, ...a] = c.pathname.split("/");
+  if (!d)
+    throw new Error("Invalid secret reference: must have a vault prefix");
+  return {
+    vaultPrefix: d,
+    secretId: p || void 0,
+    // Non-empty string or undefined
+    optionalSecretKey: a == null ? void 0 : a.join("/")
+    // Non-empty string or undefined
+  };
+}, vl = (o) => {
+  if (!o.vaultPrefix)
+    throw new Error("Invalid secret reference: must have a vault prefix");
+  let S = `vault://${o.vaultPrefix}`;
+  return o.secretId && (S = `${S}/${o.secretId}`), o.optionalSecretKey && (S = `${S}/${o.optionalSecretKey}`), `{${S}}`;
+}, gl = {
+  key: 1,
+  class: "inputs-wrapper"
+}, bl = { "data-testid": "no-search-results" }, _l = { class: "k-select-selected-item-label" }, hl = { class: "vault-secret-picker-vault-dropdown-item" }, yl = { class: "select-item-label" }, Vl = { class: "select-item-description" }, kl = { class: "select-item-description" }, Cl = { "data-testid": "no-search-results" }, wl = /* @__PURE__ */ ce({
+  __name: "VaultSecretPicker",
+  props: {
+    config: {
+      type: Object,
+      required: !0,
+      validator: (o) => !(!o || !["konnect", "kongManager"].includes(o == null ? void 0 : o.app) || o.app === "konnect" && !o.controlPlaneId || o.app === "kongManager" && typeof o.workspace != "string")
+    },
+    setup: {
+      type: null,
+      required: !1,
+      default: !1
+    },
+    title: {
+      type: String,
+      required: !1,
+      default: void 0
+    },
+    proceedButtonText: {
+      type: String,
+      required: !1,
+      default: void 0
+    },
+    additionalDisabled: {
+      type: Boolean,
+      required: !1,
+      default: !1
+    }
+  },
+  emits: ["proceed", "cancel"],
+  setup(o, { emit: S }) {
+    var te;
+    const { i18n: { t: c } } = he.useI18n(), d = o, p = S, { axiosInstance: a } = _e({
+      // 404 errors are allowed in this components
+      validateStatus: (b) => b === 404 || b >= 200 && b < 300,
+      // Spread the passed-in config later to allow overriding
+      ...(te = d.config) == null ? void 0 : te.axiosRequestConfig
+    }), K = $(!1), I = $(""), h = $(""), n = $(""), g = $(), f = w(() => {
+      var b, v;
+      return d.config.app === "konnect" ? be.list[d.config.app].replace(/{id}/gi, ((v = (b = g.value) == null ? void 0 : b.config) == null ? void 0 : v.config_store_id) ?? "") : "<not_applicable>";
+    }), N = w(() => {
+      if (Y && ee)
+        return c("vault_secret_picker.fetch_error.vaults_and_secrets");
+      if (Y)
+        return c("vault_secret_picker.fetch_error.vaults");
+      if (ee)
+        return c("vault_secret_picker.fetch_error.secrets");
+    }), {
+      debouncedQueryChange: X,
+      loading: Q,
+      error: Y,
+      loadItems: O,
+      results: l
+    } = Fe(d.config, pe.list[d.config.app].getAll, void 0, {
+      fetchedItemsKey: "data",
+      searchKeys: ["prefix"]
+    }), {
+      debouncedQueryChange: ae,
+      loading: z,
+      error: ee,
+      loadItems: G,
+      results: y
+    } = Fe(d.config, f, void 0, {
+      fetchedItemsKey: "data",
+      searchKeys: ["key"],
+      exactMatchKey: "key"
+    }), F = w(() => {
+      var P;
+      let b = !1;
+      const v = ((P = l.value) == null ? void 0 : P.map((M) => (M.prefix === I.value && (b = !0), { label: M.prefix, value: M.prefix, vault: M }))) ?? [];
+      return !b && g.value && v.push({
+        label: g.value.prefix,
+        value: g.value.prefix,
+        vault: g.value
+      }), v;
+    }), re = w(() => {
+      var P;
+      let b = !1;
+      const v = ((P = y.value) == null ? void 0 : P.map((M) => (M.key === h.value && (b = !0), { label: M.key, value: M.key }))) ?? [];
+      return !b && h.value && v.push({ label: h.value, value: h.value }), v;
+    }), ne = w(() => {
+      var b;
+      return ((b = g == null ? void 0 : g.value) == null ? void 0 : b.name) === "konnect";
+    }), le = w(() => !!g.value && !!h.value && !d.additionalDisabled), q = (b) => b.label ? `${b.label} - (${b.vault.name} - ${b.vault.id})` : b.value, ie = (b) => {
+      var P, M;
+      let v = `${d.config.apiBaseUrl}${pe.form[d.config.app].edit}`;
+      return d.config.app === "konnect" ? v = v.replace(/{controlPlaneId}/gi, ((P = d.config) == null ? void 0 : P.controlPlaneId) || "") : d.config.app === "kongManager" && (v = v.replace(/\/{workspace}/gi, (M = d.config) != null && M.workspace ? `/${d.config.workspace}` : "")), v.replace(/{id}/gi, b);
+    }, T = (b, v) => {
+      var P;
+      return d.config.app !== "konnect" ? "<not_applicable>" : `${d.config.apiBaseUrl}${be.form[d.config.app].edit}`.replace(/{controlPlaneId}/gi, ((P = d.config) == null ? void 0 : P.controlPlaneId) || "").replace(/{id}/gi, v).replace(/{secretId}/gi, b);
+    }, Z = () => {
+      p("proceed", vl({
+        vaultPrefix: I.value,
+        secretId: h.value || void 0,
+        // Either a non-empty string or undefined
+        optionalSecretKey: n.value || void 0
+        // Either a non-empty string or undefined
+      }));
+    };
+    return ke(() => d.setup, async (b) => {
+      if (b !== !1) {
+        if (K.value = !0, I.value = "", g.value = void 0, h.value = "", n.value = "", typeof b == "string" && b.trim().length > 0)
+          try {
+            let v, P = "", M = "", se = "";
+            const j = ml(b), { data: R } = await a.get(ie(j.vaultPrefix));
+            if (R != null && R.name)
+              if (v = R, P = j.vaultPrefix, v.name === "konnect") {
+                if (j.secretId) {
+                  const { data: fe } = await a.get(T(j.secretId, R.config.config_store_id));
+                  fe.key === j.secretId && (M = j.secretId, se = j.optionalSecretKey ?? "");
+                }
+              } else
+                M = j.secretId ?? "", se = j.optionalSecretKey ?? "";
+            await lt(() => {
+              I.value = P, g.value = v, h.value = M, n.value = se;
+            });
+          } catch (v) {
+            console.debug(v);
+          }
+        K.value = !1, await O();
+      }
+    }, { immediate: !0 }), ke(I, async (b, v) => {
+      var P;
+      K.value || b === v || (g.value = (P = F.value.find((M) => M.value === b)) == null ? void 0 : P.vault, h.value = "", n.value = "");
+    }), ke(f, async () => {
+      ne.value && await G();
+    }, { immediate: !0 }), (b, v) => {
+      const P = J("KEmptyState"), M = J("KSelect"), se = J("KInput"), j = J("KModal");
+      return V(), D(j, {
+        "action-button-disabled": !le.value,
+        "action-button-text": o.proceedButtonText || e(c)("vault_secret_picker.actions.use_key"),
+        class: "vault-secret-picker",
+        "data-testid": "vault-secret-picker-modal",
+        title: o.title || e(c)("vault_secret_picker.title"),
+        visible: d.setup !== !1,
+        onCancel: v[4] || (v[4] = () => p("cancel")),
+        onProceed: Z
+      }, {
+        default: m(() => [
+          e(Y) || e(ee) ? (V(), D(P, {
+            key: 0,
+            "data-testid": "vault-secret-picker-fetch-error",
+            "icon-variant": "error",
+            message: N.value
+          }, null, 8, ["message"])) : (V(), W("div", gl, [
+            ot(b.$slots, "form-prefix", {}, void 0, !0),
+            u(M, {
+              modelValue: I.value,
+              "onUpdate:modelValue": v[0] || (v[0] = (R) => I.value = R),
+              clearable: "",
+              "data-testid": "vault-secret-picker-vault-select",
+              disabled: K.value,
+              "enable-filtering": "",
+              "filter-function": () => !0,
+              items: F.value,
+              "kpop-attributes": { "data-testid": "vault-secret-picker-vault-popover" },
+              label: e(c)("vault_secret_picker.vault.label"),
+              loading: e(Q),
+              placeholder: e(c)("vault_secret_picker.vault.placeholder"),
+              required: "",
+              "reuse-item-template": "",
+              width: "100%",
+              onQueryChange: e(X)
+            }, {
+              loading: m(() => [
+                x("div", null, H(e(c)("actions.loading")), 1)
+              ]),
+              empty: m(() => [
+                x("div", bl, H(e(c)("vault_secret_picker.no_results")), 1)
+              ]),
+              "selected-item-template": m(({ item: R }) => [
+                x("span", _l, H(q(R)), 1)
+              ]),
+              "item-template": m(({ item: R }) => [
+                x("div", hl, [
+                  x("span", yl, H(R.label), 1),
+                  x("span", Vl, H(R.vault.name), 1),
+                  x("span", kl, H(R.vault.id), 1)
+                ])
+              ]),
+              _: 1
+            }, 8, ["modelValue", "disabled", "items", "label", "loading", "placeholder", "onQueryChange"]),
+            ne.value ? (V(), D(M, {
+              key: 0,
+              modelValue: h.value,
+              "onUpdate:modelValue": v[1] || (v[1] = (R) => h.value = R),
+              clearable: "",
+              "data-testid": "vault-secret-picker-secret-id-select",
+              disabled: K.value || !g.value,
+              "enable-filtering": "",
+              "filter-function": () => !0,
+              items: re.value,
+              "kpop-attributes": { "data-testid": "vault-secret-picker-secret-id-popover" },
+              label: e(c)("vault_secret_picker.secret_id.label"),
+              loading: e(z),
+              placeholder: e(c)("vault_secret_picker.secret_id.select_placeholder"),
+              required: "",
+              "reuse-item-template": "",
+              width: "100%",
+              onQueryChange: e(ae)
+            }, {
+              loading: m(() => [
+                x("div", null, H(e(c)("actions.loading")), 1)
+              ]),
+              empty: m(() => [
+                x("div", Cl, H(e(c)("vault_secret_picker.no_results")), 1)
+              ]),
+              _: 1
+            }, 8, ["modelValue", "disabled", "items", "label", "loading", "placeholder", "onQueryChange"])) : (V(), D(se, {
+              key: 1,
+              modelValue: h.value,
+              "onUpdate:modelValue": v[2] || (v[2] = (R) => h.value = R),
+              modelModifiers: { trim: !0 },
+              autocomplete: "off",
+              "data-testid": "vault-secret-picker-secret-id-input",
+              disabled: K.value || !g.value,
+              label: e(c)("vault_secret_picker.secret_id.label"),
+              placeholder: e(c)("vault_secret_picker.secret_id.input_placeholder"),
+              required: "",
+              type: "text"
+            }, null, 8, ["modelValue", "disabled", "label", "placeholder"])),
+            u(se, {
+              modelValue: n.value,
+              "onUpdate:modelValue": v[3] || (v[3] = (R) => n.value = R),
+              modelModifiers: { trim: !0 },
+              autocomplete: "off",
+              "data-testid": "vault-secret-picker-secret-key-input",
+              disabled: K.value || !g.value,
+              help: e(c)("vault_secret_picker.optional_secret_key.help"),
+              label: e(c)("vault_secret_picker.optional_secret_key.label"),
+              placeholder: e(c)("vault_secret_picker.optional_secret_key.placeholder"),
+              type: "text"
+            }, null, 8, ["modelValue", "disabled", "help", "label", "placeholder"])
+          ]))
+        ]),
+        _: 3
+      }, 8, ["action-button-disabled", "action-button-text", "title", "visible"]);
+    };
+  }
+}), Pl = /* @__PURE__ */ me(wl, [["__scopeId", "data-v-9ee12676"]]);
+export {
+  $l as SecretForm,
+  Hl as SecretList,
+  A as VaultAuthMethods,
+  Tl as VaultConfigCard,
+  Ul as VaultForm,
+  El as VaultList,
+  t as VaultProviders,
+  Pl as VaultSecretPicker,
+  Kl as VaultSecretPickerProvider,
+  be as secretsEndpoints,
+  pe as vaultsEndpoints
+};