@pierskarsenbarg/sdm 1.11.0 → 1.12.0
This diff represents the content of publicly available package versions that have been released to one of the supported registries. The information contained in this diff is provided for informational purposes only and reflects changes between package versions as they appear in their respective public registries.
- package/account.d.ts +2 -3
- package/account.js +2 -3
- package/account.js.map +1 -1
- package/accountAttachment.d.ts +0 -2
- package/accountAttachment.js +0 -2
- package/accountAttachment.js.map +1 -1
- package/approvalWorkflow.d.ts +0 -2
- package/approvalWorkflow.js +0 -2
- package/approvalWorkflow.js.map +1 -1
- package/approvalWorkflowApprover.d.ts +0 -2
- package/approvalWorkflowApprover.js +0 -2
- package/approvalWorkflowApprover.js.map +1 -1
- package/approvalWorkflowStep.d.ts +0 -2
- package/approvalWorkflowStep.js +0 -2
- package/approvalWorkflowStep.js.map +1 -1
- package/getAccount.d.ts +49 -11
- package/getAccount.js +22 -6
- package/getAccount.js.map +1 -1
- package/getAccountAttachment.d.ts +0 -4
- package/getAccountAttachment.js +0 -4
- package/getAccountAttachment.js.map +1 -1
- package/getApprovalWorkflow.d.ts +0 -4
- package/getApprovalWorkflow.js +0 -4
- package/getApprovalWorkflow.js.map +1 -1
- package/getApprovalWorkflowApprover.d.ts +0 -4
- package/getApprovalWorkflowApprover.js +0 -4
- package/getApprovalWorkflowApprover.js.map +1 -1
- package/getApprovalWorkflowStep.d.ts +0 -4
- package/getApprovalWorkflowStep.js +0 -4
- package/getApprovalWorkflowStep.js.map +1 -1
- package/getNode.d.ts +0 -4
- package/getNode.js +0 -4
- package/getNode.js.map +1 -1
- package/getRemoteIdentity.d.ts +0 -4
- package/getRemoteIdentity.js +0 -4
- package/getRemoteIdentity.js.map +1 -1
- package/getRemoteIdentityGroup.d.ts +0 -4
- package/getRemoteIdentityGroup.js +0 -4
- package/getRemoteIdentityGroup.js.map +1 -1
- package/getResource.d.ts +0 -4
- package/getResource.js +0 -4
- package/getResource.js.map +1 -1
- package/getSshCaPubkey.d.ts +0 -4
- package/getSshCaPubkey.js +0 -4
- package/getSshCaPubkey.js.map +1 -1
- package/getWorkflow.d.ts +0 -4
- package/getWorkflow.js +0 -4
- package/getWorkflow.js.map +1 -1
- package/getWorkflowApprover.d.ts +0 -4
- package/getWorkflowApprover.js +0 -4
- package/getWorkflowApprover.js.map +1 -1
- package/getWorkflowRole.d.ts +0 -4
- package/getWorkflowRole.js +0 -4
- package/getWorkflowRole.js.map +1 -1
- package/node.d.ts +0 -2
- package/node.js +0 -2
- package/node.js.map +1 -1
- package/package.json +1 -1
- package/role.d.ts +0 -2
- package/role.js +0 -2
- package/role.js.map +1 -1
- package/secretStore.d.ts +3 -0
- package/secretStore.js +2 -0
- package/secretStore.js.map +1 -1
- package/types/input.d.ts +52 -0
- package/types/output.d.ts +156 -3
- package/workflow.d.ts +0 -2
- package/workflow.js +0 -2
- package/workflow.js.map +1 -1
- package/workflowApprover.d.ts +0 -2
- package/workflowApprover.js +0 -2
- package/workflowApprover.js.map +1 -1
- package/workflowRole.d.ts +0 -2
- package/workflowRole.js +0 -2
- package/workflowRole.js.map +1 -1
package/getWorkflowRole.js
CHANGED
|
@@ -10,7 +10,6 @@ const utilities = require("./utilities");
|
|
|
10
10
|
* to request access to a resource via the workflow.
|
|
11
11
|
* ## Example Usage
|
|
12
12
|
*
|
|
13
|
-
* <!--Start PulumiCodeChooser -->
|
|
14
13
|
* ```typescript
|
|
15
14
|
* import * as pulumi from "@pulumi/pulumi";
|
|
16
15
|
* import * as sdm from "@pulumi/sdm";
|
|
@@ -20,7 +19,6 @@ const utilities = require("./utilities");
|
|
|
20
19
|
* workflowId: "aw-7935485",
|
|
21
20
|
* });
|
|
22
21
|
* ```
|
|
23
|
-
* <!--End PulumiCodeChooser -->
|
|
24
22
|
*/
|
|
25
23
|
function getWorkflowRole(args, opts) {
|
|
26
24
|
args = args || {};
|
|
@@ -37,7 +35,6 @@ exports.getWorkflowRole = getWorkflowRole;
|
|
|
37
35
|
* to request access to a resource via the workflow.
|
|
38
36
|
* ## Example Usage
|
|
39
37
|
*
|
|
40
|
-
* <!--Start PulumiCodeChooser -->
|
|
41
38
|
* ```typescript
|
|
42
39
|
* import * as pulumi from "@pulumi/pulumi";
|
|
43
40
|
* import * as sdm from "@pulumi/sdm";
|
|
@@ -47,7 +44,6 @@ exports.getWorkflowRole = getWorkflowRole;
|
|
|
47
44
|
* workflowId: "aw-7935485",
|
|
48
45
|
* });
|
|
49
46
|
* ```
|
|
50
|
-
* <!--End PulumiCodeChooser -->
|
|
51
47
|
*/
|
|
52
48
|
function getWorkflowRoleOutput(args, opts) {
|
|
53
49
|
return pulumi.output(args).apply((a) => getWorkflowRole(a, opts));
|
package/getWorkflowRole.js.map
CHANGED
|
@@ -1 +1 @@
|
|
|
1
|
-
{"version":3,"file":"getWorkflowRole.js","sourceRoot":"","sources":["../getWorkflowRole.ts"],"names":[],"mappings":";AAAA,wFAAwF;AACxF,iFAAiF;;;AAEjF,yCAAyC;AAGzC,yCAAyC;AAEzC
|
|
1
|
+
{"version":3,"file":"getWorkflowRole.js","sourceRoot":"","sources":["../getWorkflowRole.ts"],"names":[],"mappings":";AAAA,wFAAwF;AACxF,iFAAiF;;;AAEjF,yCAAyC;AAGzC,yCAAyC;AAEzC;;;;;;;;;;;;;;GAcG;AACH,SAAgB,eAAe,CAAC,IAA0B,EAAE,IAA2B;IACnF,IAAI,GAAG,IAAI,IAAI,EAAE,CAAC;IAElB,IAAI,GAAG,MAAM,CAAC,YAAY,CAAC,SAAS,CAAC,oBAAoB,EAAE,EAAE,IAAI,IAAI,EAAE,CAAC,CAAC;IACzE,OAAO,MAAM,CAAC,OAAO,CAAC,MAAM,CAAC,2CAA2C,EAAE;QACtE,IAAI,EAAE,IAAI,CAAC,EAAE;QACb,QAAQ,EAAE,IAAI,CAAC,MAAM;QACrB,YAAY,EAAE,IAAI,CAAC,UAAU;KAChC,EAAE,IAAI,CAAC,CAAC;AACb,CAAC;AATD,0CASC;AA6CD;;;;;;;;;;;;;;GAcG;AACH,SAAgB,qBAAqB,CAAC,IAAgC,EAAE,IAA2B;IAC/F,OAAO,MAAM,CAAC,MAAM,CAAC,IAAI,CAAC,CAAC,KAAK,CAAC,CAAC,CAAM,EAAE,EAAE,CAAC,eAAe,CAAC,CAAC,EAAE,IAAI,CAAC,CAAC,CAAA;AAC1E,CAAC;AAFD,sDAEC"}
|
package/node.d.ts
CHANGED
|
@@ -8,7 +8,6 @@ import * as outputs from "./types/output";
|
|
|
8
8
|
* 2. **Gateways:** a relay that also listens for connections from strongDM clients
|
|
9
9
|
* ## Example Usage
|
|
10
10
|
*
|
|
11
|
-
* <!--Start PulumiCodeChooser -->
|
|
12
11
|
* ```typescript
|
|
13
12
|
* import * as pulumi from "@pulumi/pulumi";
|
|
14
13
|
* import * as sdm from "@pierskarsenbarg/sdm";
|
|
@@ -30,7 +29,6 @@ import * as outputs from "./types/output";
|
|
|
30
29
|
* },
|
|
31
30
|
* }});
|
|
32
31
|
* ```
|
|
33
|
-
* <!--End PulumiCodeChooser -->
|
|
34
32
|
* This resource can be imported using the import command.
|
|
35
33
|
*
|
|
36
34
|
* ## Import
|
package/node.js
CHANGED
|
@@ -12,7 +12,6 @@ const utilities = require("./utilities");
|
|
|
12
12
|
* 2. **Gateways:** a relay that also listens for connections from strongDM clients
|
|
13
13
|
* ## Example Usage
|
|
14
14
|
*
|
|
15
|
-
* <!--Start PulumiCodeChooser -->
|
|
16
15
|
* ```typescript
|
|
17
16
|
* import * as pulumi from "@pulumi/pulumi";
|
|
18
17
|
* import * as sdm from "@pierskarsenbarg/sdm";
|
|
@@ -34,7 +33,6 @@ const utilities = require("./utilities");
|
|
|
34
33
|
* },
|
|
35
34
|
* }});
|
|
36
35
|
* ```
|
|
37
|
-
* <!--End PulumiCodeChooser -->
|
|
38
36
|
* This resource can be imported using the import command.
|
|
39
37
|
*
|
|
40
38
|
* ## Import
|
package/node.js.map
CHANGED
|
@@ -1 +1 @@
|
|
|
1
|
-
{"version":3,"file":"node.js","sourceRoot":"","sources":["../node.ts"],"names":[],"mappings":";AAAA,wFAAwF;AACxF,iFAAiF;;;AAEjF,yCAAyC;AAGzC,yCAAyC;AAEzC
|
|
1
|
+
{"version":3,"file":"node.js","sourceRoot":"","sources":["../node.ts"],"names":[],"mappings":";AAAA,wFAAwF;AACxF,iFAAiF;;;AAEjF,yCAAyC;AAGzC,yCAAyC;AAEzC;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;GAqCG;AACH,MAAa,IAAK,SAAQ,MAAM,CAAC,cAAc;IAC3C;;;;;;;;OAQG;IACI,MAAM,CAAC,GAAG,CAAC,IAAY,EAAE,EAA2B,EAAE,KAAiB,EAAE,IAAmC;QAC/G,OAAO,IAAI,IAAI,CAAC,IAAI,EAAO,KAAK,kCAAO,IAAI,KAAE,EAAE,EAAE,EAAE,IAAG,CAAC;IAC3D,CAAC;IAKD;;;OAGG;IACI,MAAM,CAAC,UAAU,CAAC,GAAQ;QAC7B,IAAI,GAAG,KAAK,SAAS,IAAI,GAAG,KAAK,IAAI,EAAE;YACnC,OAAO,KAAK,CAAC;SAChB;QACD,OAAO,GAAG,CAAC,cAAc,CAAC,KAAK,IAAI,CAAC,YAAY,CAAC;IACrD,CAAC;IAmBD,YAAY,IAAY,EAAE,WAAkC,EAAE,IAAmC;QAC7F,IAAI,cAAc,GAAkB,EAAE,CAAC;QACvC,IAAI,GAAG,IAAI,IAAI,EAAE,CAAC;QAClB,IAAI,IAAI,CAAC,EAAE,EAAE;YACT,MAAM,KAAK,GAAG,WAAoC,CAAC;YACnD,cAAc,CAAC,SAAS,CAAC,GAAG,KAAK,CAAC,CAAC,CAAC,KAAK,CAAC,OAAO,CAAC,CAAC,CAAC,SAAS,CAAC;YAC9D,cAAc,CAAC,OAAO,CAAC,GAAG,KAAK,CAAC,CAAC,CAAC,KAAK,CAAC,KAAK,CAAC,CAAC,CAAC,SAAS,CAAC;SAC7D;aAAM;YACH,MAAM,IAAI,GAAG,WAAmC,CAAC;YACjD,cAAc,CAAC,SAAS,CAAC,GAAG,IAAI,CAAC,CAAC,CAAC,IAAI,CAAC,OAAO,CAAC,CAAC,CAAC,SAAS,CAAC;YAC5D,cAAc,CAAC,OAAO,CAAC,GAAG,IAAI,CAAC,CAAC,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC,CAAC,SAAS,CAAC;SAC3D;QACD,IAAI,GAAG,MAAM,CAAC,YAAY,CAAC,SAAS,CAAC,oBAAoB,EAAE,EAAE,IAAI,CAAC,CAAC;QACnE,KAAK,CAAC,IAAI,CAAC,YAAY,EAAE,IAAI,EAAE,cAAc,EAAE,IAAI,CAAC,CAAC;IACzD,CAAC;;AA3DL,oBA4DC;AA9CG,gBAAgB;AACO,iBAAY,GAAG,qBAAqB,CAAC"}
|
package/package.json
CHANGED
package/role.d.ts
CHANGED
|
@@ -5,7 +5,6 @@ import * as pulumi from "@pulumi/pulumi";
|
|
|
5
5
|
* AccountAttachments.
|
|
6
6
|
* ## Example Usage
|
|
7
7
|
*
|
|
8
|
-
* <!--Start PulumiCodeChooser -->
|
|
9
8
|
* ```typescript
|
|
10
9
|
* import * as pulumi from "@pulumi/pulumi";
|
|
11
10
|
* import * as sdm from "@pierskarsenbarg/sdm";
|
|
@@ -31,7 +30,6 @@ import * as pulumi from "@pulumi/pulumi";
|
|
|
31
30
|
* },
|
|
32
31
|
* ])});
|
|
33
32
|
* ```
|
|
34
|
-
* <!--End PulumiCodeChooser -->
|
|
35
33
|
* This resource can be imported using the import command.
|
|
36
34
|
*
|
|
37
35
|
* ## Import
|
package/role.js
CHANGED
|
@@ -11,7 +11,6 @@ const utilities = require("./utilities");
|
|
|
11
11
|
* AccountAttachments.
|
|
12
12
|
* ## Example Usage
|
|
13
13
|
*
|
|
14
|
-
* <!--Start PulumiCodeChooser -->
|
|
15
14
|
* ```typescript
|
|
16
15
|
* import * as pulumi from "@pulumi/pulumi";
|
|
17
16
|
* import * as sdm from "@pierskarsenbarg/sdm";
|
|
@@ -37,7 +36,6 @@ const utilities = require("./utilities");
|
|
|
37
36
|
* },
|
|
38
37
|
* ])});
|
|
39
38
|
* ```
|
|
40
|
-
* <!--End PulumiCodeChooser -->
|
|
41
39
|
* This resource can be imported using the import command.
|
|
42
40
|
*
|
|
43
41
|
* ## Import
|
package/role.js.map
CHANGED
|
@@ -1 +1 @@
|
|
|
1
|
-
{"version":3,"file":"role.js","sourceRoot":"","sources":["../role.ts"],"names":[],"mappings":";AAAA,wFAAwF;AACxF,iFAAiF;;;AAEjF,yCAAyC;AACzC,yCAAyC;AAEzC
|
|
1
|
+
{"version":3,"file":"role.js","sourceRoot":"","sources":["../role.ts"],"names":[],"mappings":";AAAA,wFAAwF;AACxF,iFAAiF;;;AAEjF,yCAAyC;AACzC,yCAAyC;AAEzC;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;GAwCG;AACH,MAAa,IAAK,SAAQ,MAAM,CAAC,cAAc;IAC3C;;;;;;;;OAQG;IACI,MAAM,CAAC,GAAG,CAAC,IAAY,EAAE,EAA2B,EAAE,KAAiB,EAAE,IAAmC;QAC/G,OAAO,IAAI,IAAI,CAAC,IAAI,EAAO,KAAK,kCAAO,IAAI,KAAE,EAAE,EAAE,EAAE,IAAG,CAAC;IAC3D,CAAC;IAKD;;;OAGG;IACI,MAAM,CAAC,UAAU,CAAC,GAAQ;QAC7B,IAAI,GAAG,KAAK,SAAS,IAAI,GAAG,KAAK,IAAI,EAAE;YACnC,OAAO,KAAK,CAAC;SAChB;QACD,OAAO,GAAG,CAAC,cAAc,CAAC,KAAK,IAAI,CAAC,YAAY,CAAC;IACrD,CAAC;IA2BD,YAAY,IAAY,EAAE,WAAkC,EAAE,IAAmC;QAC7F,IAAI,cAAc,GAAkB,EAAE,CAAC;QACvC,IAAI,GAAG,IAAI,IAAI,EAAE,CAAC;QAClB,IAAI,IAAI,CAAC,EAAE,EAAE;YACT,MAAM,KAAK,GAAG,WAAoC,CAAC;YACnD,cAAc,CAAC,aAAa,CAAC,GAAG,KAAK,CAAC,CAAC,CAAC,KAAK,CAAC,WAAW,CAAC,CAAC,CAAC,SAAS,CAAC;YACtE,cAAc,CAAC,WAAW,CAAC,GAAG,KAAK,CAAC,CAAC,CAAC,KAAK,CAAC,SAAS,CAAC,CAAC,CAAC,SAAS,CAAC;YAClE,cAAc,CAAC,MAAM,CAAC,GAAG,KAAK,CAAC,CAAC,CAAC,KAAK,CAAC,IAAI,CAAC,CAAC,CAAC,SAAS,CAAC;YACxD,cAAc,CAAC,MAAM,CAAC,GAAG,KAAK,CAAC,CAAC,CAAC,KAAK,CAAC,IAAI,CAAC,CAAC,CAAC,SAAS,CAAC;SAC3D;aAAM;YACH,MAAM,IAAI,GAAG,WAAmC,CAAC;YACjD,cAAc,CAAC,aAAa,CAAC,GAAG,IAAI,CAAC,CAAC,CAAC,IAAI,CAAC,WAAW,CAAC,CAAC,CAAC,SAAS,CAAC;YACpE,cAAc,CAAC,MAAM,CAAC,GAAG,IAAI,CAAC,CAAC,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC,CAAC,SAAS,CAAC;YACtD,cAAc,CAAC,MAAM,CAAC,GAAG,IAAI,CAAC,CAAC,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC,CAAC,SAAS,CAAC;YACtD,cAAc,CAAC,WAAW,CAAC,GAAG,SAAS,CAAC,OAAO,CAAC;SACnD;QACD,IAAI,GAAG,MAAM,CAAC,YAAY,CAAC,SAAS,CAAC,oBAAoB,EAAE,EAAE,IAAI,CAAC,CAAC;QACnE,KAAK,CAAC,IAAI,CAAC,YAAY,EAAE,IAAI,EAAE,cAAc,EAAE,IAAI,CAAC,CAAC;IACzD,CAAC;;AAvEL,oBAwEC;AA1DG,gBAAgB;AACO,iBAAY,GAAG,qBAAqB,CAAC"}
|
package/secretStore.d.ts
CHANGED
|
@@ -44,6 +44,7 @@ export declare class SecretStore extends pulumi.CustomResource {
|
|
|
44
44
|
readonly delineaStore: pulumi.Output<outputs.SecretStoreDelineaStore | undefined>;
|
|
45
45
|
readonly gcpCertX509Store: pulumi.Output<outputs.SecretStoreGcpCertX509Store | undefined>;
|
|
46
46
|
readonly gcpStore: pulumi.Output<outputs.SecretStoreGcpStore | undefined>;
|
|
47
|
+
readonly keyfactorX509Store: pulumi.Output<outputs.SecretStoreKeyfactorX509Store | undefined>;
|
|
47
48
|
readonly vaultApprole: pulumi.Output<outputs.SecretStoreVaultApprole | undefined>;
|
|
48
49
|
readonly vaultApproleCertSsh: pulumi.Output<outputs.SecretStoreVaultApproleCertSsh | undefined>;
|
|
49
50
|
readonly vaultApproleCertX509: pulumi.Output<outputs.SecretStoreVaultApproleCertX509 | undefined>;
|
|
@@ -80,6 +81,7 @@ export interface SecretStoreState {
|
|
|
80
81
|
delineaStore?: pulumi.Input<inputs.SecretStoreDelineaStore>;
|
|
81
82
|
gcpCertX509Store?: pulumi.Input<inputs.SecretStoreGcpCertX509Store>;
|
|
82
83
|
gcpStore?: pulumi.Input<inputs.SecretStoreGcpStore>;
|
|
84
|
+
keyfactorX509Store?: pulumi.Input<inputs.SecretStoreKeyfactorX509Store>;
|
|
83
85
|
vaultApprole?: pulumi.Input<inputs.SecretStoreVaultApprole>;
|
|
84
86
|
vaultApproleCertSsh?: pulumi.Input<inputs.SecretStoreVaultApproleCertSsh>;
|
|
85
87
|
vaultApproleCertX509?: pulumi.Input<inputs.SecretStoreVaultApproleCertX509>;
|
|
@@ -108,6 +110,7 @@ export interface SecretStoreArgs {
|
|
|
108
110
|
delineaStore?: pulumi.Input<inputs.SecretStoreDelineaStore>;
|
|
109
111
|
gcpCertX509Store?: pulumi.Input<inputs.SecretStoreGcpCertX509Store>;
|
|
110
112
|
gcpStore?: pulumi.Input<inputs.SecretStoreGcpStore>;
|
|
113
|
+
keyfactorX509Store?: pulumi.Input<inputs.SecretStoreKeyfactorX509Store>;
|
|
111
114
|
vaultApprole?: pulumi.Input<inputs.SecretStoreVaultApprole>;
|
|
112
115
|
vaultApproleCertSsh?: pulumi.Input<inputs.SecretStoreVaultApproleCertSsh>;
|
|
113
116
|
vaultApproleCertX509?: pulumi.Input<inputs.SecretStoreVaultApproleCertX509>;
|
package/secretStore.js
CHANGED
|
@@ -56,6 +56,7 @@ class SecretStore extends pulumi.CustomResource {
|
|
|
56
56
|
resourceInputs["delineaStore"] = state ? state.delineaStore : undefined;
|
|
57
57
|
resourceInputs["gcpCertX509Store"] = state ? state.gcpCertX509Store : undefined;
|
|
58
58
|
resourceInputs["gcpStore"] = state ? state.gcpStore : undefined;
|
|
59
|
+
resourceInputs["keyfactorX509Store"] = state ? state.keyfactorX509Store : undefined;
|
|
59
60
|
resourceInputs["vaultApprole"] = state ? state.vaultApprole : undefined;
|
|
60
61
|
resourceInputs["vaultApproleCertSsh"] = state ? state.vaultApproleCertSsh : undefined;
|
|
61
62
|
resourceInputs["vaultApproleCertX509"] = state ? state.vaultApproleCertX509 : undefined;
|
|
@@ -78,6 +79,7 @@ class SecretStore extends pulumi.CustomResource {
|
|
|
78
79
|
resourceInputs["delineaStore"] = args ? args.delineaStore : undefined;
|
|
79
80
|
resourceInputs["gcpCertX509Store"] = args ? args.gcpCertX509Store : undefined;
|
|
80
81
|
resourceInputs["gcpStore"] = args ? args.gcpStore : undefined;
|
|
82
|
+
resourceInputs["keyfactorX509Store"] = args ? args.keyfactorX509Store : undefined;
|
|
81
83
|
resourceInputs["vaultApprole"] = args ? args.vaultApprole : undefined;
|
|
82
84
|
resourceInputs["vaultApproleCertSsh"] = args ? args.vaultApproleCertSsh : undefined;
|
|
83
85
|
resourceInputs["vaultApproleCertX509"] = args ? args.vaultApproleCertX509 : undefined;
|
package/secretStore.js.map
CHANGED
|
@@ -1 +1 @@
|
|
|
1
|
-
{"version":3,"file":"secretStore.js","sourceRoot":"","sources":["../secretStore.ts"],"names":[],"mappings":";AAAA,wFAAwF;AACxF,iFAAiF;;;AAEjF,yCAAyC;AAGzC,yCAAyC;AAEzC;;;;;;;;;;;;GAYG;AACH,MAAa,WAAY,SAAQ,MAAM,CAAC,cAAc;IAClD;;;;;;;;OAQG;IACI,MAAM,CAAC,GAAG,CAAC,IAAY,EAAE,EAA2B,EAAE,KAAwB,EAAE,IAAmC;QACtH,OAAO,IAAI,WAAW,CAAC,IAAI,EAAO,KAAK,kCAAO,IAAI,KAAE,EAAE,EAAE,EAAE,IAAG,CAAC;IAClE,CAAC;IAKD;;;OAGG;IACI,MAAM,CAAC,UAAU,CAAC,GAAQ;QAC7B,IAAI,GAAG,KAAK,SAAS,IAAI,GAAG,KAAK,IAAI,EAAE;YACnC,OAAO,KAAK,CAAC;SAChB;QACD,OAAO,GAAG,CAAC,cAAc,CAAC,KAAK,WAAW,CAAC,YAAY,CAAC;IAC5D,CAAC;
|
|
1
|
+
{"version":3,"file":"secretStore.js","sourceRoot":"","sources":["../secretStore.ts"],"names":[],"mappings":";AAAA,wFAAwF;AACxF,iFAAiF;;;AAEjF,yCAAyC;AAGzC,yCAAyC;AAEzC;;;;;;;;;;;;GAYG;AACH,MAAa,WAAY,SAAQ,MAAM,CAAC,cAAc;IAClD;;;;;;;;OAQG;IACI,MAAM,CAAC,GAAG,CAAC,IAAY,EAAE,EAA2B,EAAE,KAAwB,EAAE,IAAmC;QACtH,OAAO,IAAI,WAAW,CAAC,IAAI,EAAO,KAAK,kCAAO,IAAI,KAAE,EAAE,EAAE,EAAE,IAAG,CAAC;IAClE,CAAC;IAKD;;;OAGG;IACI,MAAM,CAAC,UAAU,CAAC,GAAQ;QAC7B,IAAI,GAAG,KAAK,SAAS,IAAI,GAAG,KAAK,IAAI,EAAE;YACnC,OAAO,KAAK,CAAC;SAChB;QACD,OAAO,GAAG,CAAC,cAAc,CAAC,KAAK,WAAW,CAAC,YAAY,CAAC;IAC5D,CAAC;IAmCD,YAAY,IAAY,EAAE,WAAgD,EAAE,IAAmC;QAC3G,IAAI,cAAc,GAAkB,EAAE,CAAC;QACvC,IAAI,GAAG,IAAI,IAAI,EAAE,CAAC;QAClB,IAAI,IAAI,CAAC,EAAE,EAAE;YACT,MAAM,KAAK,GAAG,WAA2C,CAAC;YAC1D,cAAc,CAAC,sBAAsB,CAAC,GAAG,KAAK,CAAC,CAAC,CAAC,KAAK,CAAC,oBAAoB,CAAC,CAAC,CAAC,SAAS,CAAC;YACxF,cAAc,CAAC,KAAK,CAAC,GAAG,KAAK,CAAC,CAAC,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC,CAAC,SAAS,CAAC;YACtD,cAAc,CAAC,aAAa,CAAC,GAAG,KAAK,CAAC,CAAC,CAAC,KAAK,CAAC,WAAW,CAAC,CAAC,CAAC,SAAS,CAAC;YACtE,cAAc,CAAC,YAAY,CAAC,GAAG,KAAK,CAAC,CAAC,CAAC,KAAK,CAAC,UAAU,CAAC,CAAC,CAAC,SAAS,CAAC;YACpE,cAAc,CAAC,gBAAgB,CAAC,GAAG,KAAK,CAAC,CAAC,CAAC,KAAK,CAAC,cAAc,CAAC,CAAC,CAAC,SAAS,CAAC;YAC5E,cAAc,CAAC,aAAa,CAAC,GAAG,KAAK,CAAC,CAAC,CAAC,KAAK,CAAC,WAAW,CAAC,CAAC,CAAC,SAAS,CAAC;YACtE,cAAc,CAAC,yBAAyB,CAAC,GAAG,KAAK,CAAC,CAAC,CAAC,KAAK,CAAC,uBAAuB,CAAC,CAAC,CAAC,SAAS,CAAC;YAC9F,cAAc,CAAC,cAAc,CAAC,GAAG,KAAK,CAAC,CAAC,CAAC,KAAK,CAAC,YAAY,CAAC,CAAC,CAAC,SAAS,CAAC;YACxE,cAAc,CAAC,kBAAkB,CAAC,GAAG,KAAK,CAAC,CAAC,CAAC,KAAK,CAAC,gBAAgB,CAAC,CAAC,CAAC,SAAS,CAAC;YAChF,cAAc,CAAC,UAAU,CAAC,GAAG,KAAK,CAAC,CAAC,CAAC,KAAK,CAAC,QAAQ,CAAC,CAAC,CAAC,SAAS,CAAC;YAChE,cAAc,CAAC,oBAAoB,CAAC,GAAG,KAAK,CAAC,CAAC,CAAC,KAAK,CAAC,kBAAkB,CAAC,CAAC,CAAC,SAAS,CAAC;YACpF,cAAc,CAAC,cAAc,CAAC,GAAG,KAAK,CAAC,CAAC,CAAC,KAAK,CAAC,YAAY,CAAC,CAAC,CAAC,SAAS,CAAC;YACxE,cAAc,CAAC,qBAAqB,CAAC,GAAG,KAAK,CAAC,CAAC,CAAC,KAAK,CAAC,mBAAmB,CAAC,CAAC,CAAC,SAAS,CAAC;YACtF,cAAc,CAAC,sBAAsB,CAAC,GAAG,KAAK,CAAC,CAAC,CAAC,KAAK,CAAC,oBAAoB,CAAC,CAAC,CAAC,SAAS,CAAC;YACxF,cAAc,CAAC,UAAU,CAAC,GAAG,KAAK,CAAC,CAAC,CAAC,KAAK,CAAC,QAAQ,CAAC,CAAC,CAAC,SAAS,CAAC;YAChE,cAAc,CAAC,iBAAiB,CAAC,GAAG,KAAK,CAAC,CAAC,CAAC,KAAK,CAAC,eAAe,CAAC,CAAC,CAAC,SAAS,CAAC;YAC9E,cAAc,CAAC,kBAAkB,CAAC,GAAG,KAAK,CAAC,CAAC,CAAC,KAAK,CAAC,gBAAgB,CAAC,CAAC,CAAC,SAAS,CAAC;YAChF,cAAc,CAAC,YAAY,CAAC,GAAG,KAAK,CAAC,CAAC,CAAC,KAAK,CAAC,UAAU,CAAC,CAAC,CAAC,SAAS,CAAC;YACpE,cAAc,CAAC,mBAAmB,CAAC,GAAG,KAAK,CAAC,CAAC,CAAC,KAAK,CAAC,iBAAiB,CAAC,CAAC,CAAC,SAAS,CAAC;YAClF,cAAc,CAAC,oBAAoB,CAAC,GAAG,KAAK,CAAC,CAAC,CAAC,KAAK,CAAC,kBAAkB,CAAC,CAAC,CAAC,SAAS,CAAC;SACvF;aAAM;YACH,MAAM,IAAI,GAAG,WAA0C,CAAC;YACxD,cAAc,CAAC,sBAAsB,CAAC,GAAG,IAAI,CAAC,CAAC,CAAC,IAAI,CAAC,oBAAoB,CAAC,CAAC,CAAC,SAAS,CAAC;YACtF,cAAc,CAAC,KAAK,CAAC,GAAG,IAAI,CAAC,CAAC,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC,CAAC,SAAS,CAAC;YACpD,cAAc,CAAC,aAAa,CAAC,GAAG,IAAI,CAAC,CAAC,CAAC,IAAI,CAAC,WAAW,CAAC,CAAC,CAAC,SAAS,CAAC;YACpE,cAAc,CAAC,YAAY,CAAC,GAAG,IAAI,CAAC,CAAC,CAAC,IAAI,CAAC,UAAU,CAAC,CAAC,CAAC,SAAS,CAAC;YAClE,cAAc,CAAC,gBAAgB,CAAC,GAAG,IAAI,CAAC,CAAC,CAAC,IAAI,CAAC,cAAc,CAAC,CAAC,CAAC,SAAS,CAAC;YAC1E,cAAc,CAAC,aAAa,CAAC,GAAG,IAAI,CAAC,CAAC,CAAC,IAAI,CAAC,WAAW,CAAC,CAAC,CAAC,SAAS,CAAC;YACpE,cAAc,CAAC,yBAAyB,CAAC,GAAG,IAAI,CAAC,CAAC,CAAC,IAAI,CAAC,uBAAuB,CAAC,CAAC,CAAC,SAAS,CAAC;YAC5F,cAAc,CAAC,cAAc,CAAC,GAAG,IAAI,CAAC,CAAC,CAAC,IAAI,CAAC,YAAY,CAAC,CAAC,CAAC,SAAS,CAAC;YACtE,cAAc,CAAC,kBAAkB,CAAC,GAAG,IAAI,CAAC,CAAC,CAAC,IAAI,CAAC,gBAAgB,CAAC,CAAC,CAAC,SAAS,CAAC;YAC9E,cAAc,CAAC,UAAU,CAAC,GAAG,IAAI,CAAC,CAAC,CAAC,IAAI,CAAC,QAAQ,CAAC,CAAC,CAAC,SAAS,CAAC;YAC9D,cAAc,CAAC,oBAAoB,CAAC,GAAG,IAAI,CAAC,CAAC,CAAC,IAAI,CAAC,kBAAkB,CAAC,CAAC,CAAC,SAAS,CAAC;YAClF,cAAc,CAAC,cAAc,CAAC,GAAG,IAAI,CAAC,CAAC,CAAC,IAAI,CAAC,YAAY,CAAC,CAAC,CAAC,SAAS,CAAC;YACtE,cAAc,CAAC,qBAAqB,CAAC,GAAG,IAAI,CAAC,CAAC,CAAC,IAAI,CAAC,mBAAmB,CAAC,CAAC,CAAC,SAAS,CAAC;YACpF,cAAc,CAAC,sBAAsB,CAAC,GAAG,IAAI,CAAC,CAAC,CAAC,IAAI,CAAC,oBAAoB,CAAC,CAAC,CAAC,SAAS,CAAC;YACtF,cAAc,CAAC,UAAU,CAAC,GAAG,IAAI,CAAC,CAAC,CAAC,IAAI,CAAC,QAAQ,CAAC,CAAC,CAAC,SAAS,CAAC;YAC9D,cAAc,CAAC,iBAAiB,CAAC,GAAG,IAAI,CAAC,CAAC,CAAC,IAAI,CAAC,eAAe,CAAC,CAAC,CAAC,SAAS,CAAC;YAC5E,cAAc,CAAC,kBAAkB,CAAC,GAAG,IAAI,CAAC,CAAC,CAAC,IAAI,CAAC,gBAAgB,CAAC,CAAC,CAAC,SAAS,CAAC;YAC9E,cAAc,CAAC,YAAY,CAAC,GAAG,IAAI,CAAC,CAAC,CAAC,IAAI,CAAC,UAAU,CAAC,CAAC,CAAC,SAAS,CAAC;YAClE,cAAc,CAAC,mBAAmB,CAAC,GAAG,IAAI,CAAC,CAAC,CAAC,IAAI,CAAC,iBAAiB,CAAC,CAAC,CAAC,SAAS,CAAC;YAChF,cAAc,CAAC,oBAAoB,CAAC,GAAG,IAAI,CAAC,CAAC,CAAC,IAAI,CAAC,kBAAkB,CAAC,CAAC,CAAC,SAAS,CAAC;SACrF;QACD,IAAI,GAAG,MAAM,CAAC,YAAY,CAAC,SAAS,CAAC,oBAAoB,EAAE,EAAE,IAAI,CAAC,CAAC;QACnE,KAAK,CAAC,WAAW,CAAC,YAAY,EAAE,IAAI,EAAE,cAAc,EAAE,IAAI,CAAC,CAAC;IAChE,CAAC;;AA/GL,kCAgHC;AAlGG,gBAAgB;AACO,wBAAY,GAAG,mCAAmC,CAAC"}
|
package/types/input.d.ts
CHANGED
|
@@ -5039,6 +5039,58 @@ export interface SecretStoreGcpStore {
|
|
|
5039
5039
|
[key: string]: pulumi.Input<string>;
|
|
5040
5040
|
}>;
|
|
5041
5041
|
}
|
|
5042
|
+
export interface SecretStoreKeyfactorX509Store {
|
|
5043
|
+
/**
|
|
5044
|
+
* Path to the root CA that signed the certificate passed to the client for HTTPS connection. This is not required if the CA is trusted by the host operating system. This should be a PEM formatted certificate, and doesn't necessarily have to be the CA that signed CertificateFile.
|
|
5045
|
+
*/
|
|
5046
|
+
caFilePath?: pulumi.Input<string>;
|
|
5047
|
+
/**
|
|
5048
|
+
* Path to client certificate in PEM format. This certificate must contain a client certificate that is recognized by the EJBCA instance represented by Hostname. This PEM file may also contain the private key associated with the certificate, but KeyFile can also be set to configure the private key.
|
|
5049
|
+
*/
|
|
5050
|
+
certificateFilePath: pulumi.Input<string>;
|
|
5051
|
+
/**
|
|
5052
|
+
* Name of EJBCA certificate authority that will enroll CSR.
|
|
5053
|
+
*/
|
|
5054
|
+
defaultCertificateAuthorityName: pulumi.Input<string>;
|
|
5055
|
+
/**
|
|
5056
|
+
* Certificate profile name that EJBCA will enroll the CSR with.
|
|
5057
|
+
*/
|
|
5058
|
+
defaultCertificateProfileName: pulumi.Input<string>;
|
|
5059
|
+
/**
|
|
5060
|
+
* End entity profile that EJBCA will enroll the CSR with.
|
|
5061
|
+
*/
|
|
5062
|
+
defaultEndEntityProfileName: pulumi.Input<string>;
|
|
5063
|
+
/**
|
|
5064
|
+
* code used by EJBCA during enrollment. May be left blank if no code is required.
|
|
5065
|
+
*/
|
|
5066
|
+
enrollmentCodeEnvVar?: pulumi.Input<string>;
|
|
5067
|
+
/**
|
|
5068
|
+
* username that used by the EJBCA during enrollment. This can be left out. If so, the username must be auto-generated on the Keyfactor side.
|
|
5069
|
+
*/
|
|
5070
|
+
enrollmentUsernameEnvVar?: pulumi.Input<string>;
|
|
5071
|
+
/**
|
|
5072
|
+
* Path to private key in PEM format. This file should contain the private key associated with the client certificate configured in CertificateFile.
|
|
5073
|
+
*/
|
|
5074
|
+
keyFilePath?: pulumi.Input<string>;
|
|
5075
|
+
/**
|
|
5076
|
+
* optional environment variable housing the password that is used to decrypt the key file.
|
|
5077
|
+
*/
|
|
5078
|
+
keyPasswordEnvVar?: pulumi.Input<string>;
|
|
5079
|
+
/**
|
|
5080
|
+
* Unique human-readable name of the SecretStore.
|
|
5081
|
+
*/
|
|
5082
|
+
name: pulumi.Input<string>;
|
|
5083
|
+
/**
|
|
5084
|
+
* The URL of the Vault to target
|
|
5085
|
+
*/
|
|
5086
|
+
serverAddress: pulumi.Input<string>;
|
|
5087
|
+
/**
|
|
5088
|
+
* Tags is a map of key, value pairs.
|
|
5089
|
+
*/
|
|
5090
|
+
tags?: pulumi.Input<{
|
|
5091
|
+
[key: string]: pulumi.Input<string>;
|
|
5092
|
+
}>;
|
|
5093
|
+
}
|
|
5042
5094
|
export interface SecretStoreVaultApprole {
|
|
5043
5095
|
/**
|
|
5044
5096
|
* Unique human-readable name of the SecretStore.
|
package/types/output.d.ts
CHANGED
|
@@ -57,6 +57,10 @@ export interface GetAccountAccount {
|
|
|
57
57
|
* A Service is a service account that can connect to resources they are granted directly, or granted via roles. Services are typically automated jobs.
|
|
58
58
|
*/
|
|
59
59
|
services: outputs.GetAccountAccountService[];
|
|
60
|
+
/**
|
|
61
|
+
* A Token is an account providing tokenized access for automation or integration use. Tokens include admin tokens, API keys, and SCIM tokens.
|
|
62
|
+
*/
|
|
63
|
+
tokens: outputs.GetAccountAccountToken[];
|
|
60
64
|
/**
|
|
61
65
|
* A User can connect to resources they are granted directly, or granted via roles.
|
|
62
66
|
*/
|
|
@@ -68,11 +72,51 @@ export interface GetAccountAccountService {
|
|
|
68
72
|
*/
|
|
69
73
|
id?: string;
|
|
70
74
|
/**
|
|
71
|
-
* Unique human-readable name of the
|
|
75
|
+
* Unique human-readable name of the Token.
|
|
72
76
|
*/
|
|
73
77
|
name?: string;
|
|
74
78
|
/**
|
|
75
|
-
*
|
|
79
|
+
* Reserved for future use. Always false for tokens.
|
|
80
|
+
*/
|
|
81
|
+
suspended?: boolean;
|
|
82
|
+
/**
|
|
83
|
+
* Tags is a map of key, value pairs.
|
|
84
|
+
*/
|
|
85
|
+
tags?: {
|
|
86
|
+
[key: string]: string;
|
|
87
|
+
};
|
|
88
|
+
}
|
|
89
|
+
export interface GetAccountAccountToken {
|
|
90
|
+
/**
|
|
91
|
+
* Corresponds to the type of token, e.g. api or admin-token.
|
|
92
|
+
*/
|
|
93
|
+
accountType?: string;
|
|
94
|
+
/**
|
|
95
|
+
* The timestamp when the Token will expire.
|
|
96
|
+
*/
|
|
97
|
+
deadline?: string;
|
|
98
|
+
/**
|
|
99
|
+
* Duration from token creation to expiration.
|
|
100
|
+
*/
|
|
101
|
+
duration?: string;
|
|
102
|
+
/**
|
|
103
|
+
* Unique identifier of the User.
|
|
104
|
+
*/
|
|
105
|
+
id?: string;
|
|
106
|
+
/**
|
|
107
|
+
* Unique human-readable name of the Token.
|
|
108
|
+
*/
|
|
109
|
+
name?: string;
|
|
110
|
+
/**
|
|
111
|
+
* Permissions assigned to the token, e.g. role:create.
|
|
112
|
+
*/
|
|
113
|
+
permissions?: string[];
|
|
114
|
+
/**
|
|
115
|
+
* The timestamp when the Token was last rekeyed.
|
|
116
|
+
*/
|
|
117
|
+
rekeyed?: string;
|
|
118
|
+
/**
|
|
119
|
+
* Reserved for future use. Always false for tokens.
|
|
76
120
|
*/
|
|
77
121
|
suspended?: boolean;
|
|
78
122
|
/**
|
|
@@ -112,7 +156,7 @@ export interface GetAccountAccountUser {
|
|
|
112
156
|
*/
|
|
113
157
|
permissionLevel?: string;
|
|
114
158
|
/**
|
|
115
|
-
*
|
|
159
|
+
* Reserved for future use. Always false for tokens.
|
|
116
160
|
*/
|
|
117
161
|
suspended: boolean;
|
|
118
162
|
/**
|
|
@@ -5527,6 +5571,7 @@ export interface GetSecretStoreSecretStore {
|
|
|
5527
5571
|
delineaStores: outputs.GetSecretStoreSecretStoreDelineaStore[];
|
|
5528
5572
|
gcpCertX509Stores: outputs.GetSecretStoreSecretStoreGcpCertX509Store[];
|
|
5529
5573
|
gcpStores: outputs.GetSecretStoreSecretStoreGcpStore[];
|
|
5574
|
+
keyfactorX509Stores: outputs.GetSecretStoreSecretStoreKeyfactorX509Store[];
|
|
5530
5575
|
vaultApproleCertSshes: outputs.GetSecretStoreSecretStoreVaultApproleCertSsh[];
|
|
5531
5576
|
vaultApproleCertX509s: outputs.GetSecretStoreSecretStoreVaultApproleCertX509[];
|
|
5532
5577
|
vaultApproles: outputs.GetSecretStoreSecretStoreVaultApprole[];
|
|
@@ -5775,6 +5820,62 @@ export interface GetSecretStoreSecretStoreGcpStore {
|
|
|
5775
5820
|
[key: string]: string;
|
|
5776
5821
|
};
|
|
5777
5822
|
}
|
|
5823
|
+
export interface GetSecretStoreSecretStoreKeyfactorX509Store {
|
|
5824
|
+
/**
|
|
5825
|
+
* Path to the root CA that signed the certificate passed to the client for HTTPS connection. This is not required if the CA is trusted by the host operating system. This should be a PEM formatted certificate, and doesn't necessarily have to be the CA that signed CertificateFile.
|
|
5826
|
+
*/
|
|
5827
|
+
caFilePath?: string;
|
|
5828
|
+
/**
|
|
5829
|
+
* Path to client certificate in PEM format. This certificate must contain a client certificate that is recognized by the EJBCA instance represented by Hostname. This PEM file may also contain the private key associated with the certificate, but KeyFile can also be set to configure the private key.
|
|
5830
|
+
*/
|
|
5831
|
+
certificateFilePath?: string;
|
|
5832
|
+
/**
|
|
5833
|
+
* Name of EJBCA certificate authority that will enroll CSR.
|
|
5834
|
+
*/
|
|
5835
|
+
defaultCertificateAuthorityName?: string;
|
|
5836
|
+
/**
|
|
5837
|
+
* Certificate profile name that EJBCA will enroll the CSR with.
|
|
5838
|
+
*/
|
|
5839
|
+
defaultCertificateProfileName?: string;
|
|
5840
|
+
/**
|
|
5841
|
+
* End entity profile that EJBCA will enroll the CSR with.
|
|
5842
|
+
*/
|
|
5843
|
+
defaultEndEntityProfileName?: string;
|
|
5844
|
+
/**
|
|
5845
|
+
* code used by EJBCA during enrollment. May be left blank if no code is required.
|
|
5846
|
+
*/
|
|
5847
|
+
enrollmentCodeEnvVar?: string;
|
|
5848
|
+
/**
|
|
5849
|
+
* username that used by the EJBCA during enrollment. This can be left out. If so, the username must be auto-generated on the Keyfactor side.
|
|
5850
|
+
*/
|
|
5851
|
+
enrollmentUsernameEnvVar?: string;
|
|
5852
|
+
/**
|
|
5853
|
+
* Unique identifier of the SecretStore.
|
|
5854
|
+
*/
|
|
5855
|
+
id?: string;
|
|
5856
|
+
/**
|
|
5857
|
+
* Path to private key in PEM format. This file should contain the private key associated with the client certificate configured in CertificateFile.
|
|
5858
|
+
*/
|
|
5859
|
+
keyFilePath?: string;
|
|
5860
|
+
/**
|
|
5861
|
+
* optional environment variable housing the password that is used to decrypt the key file.
|
|
5862
|
+
*/
|
|
5863
|
+
keyPasswordEnvVar?: string;
|
|
5864
|
+
/**
|
|
5865
|
+
* Unique human-readable name of the SecretStore.
|
|
5866
|
+
*/
|
|
5867
|
+
name?: string;
|
|
5868
|
+
/**
|
|
5869
|
+
* The URL of the Vault to target
|
|
5870
|
+
*/
|
|
5871
|
+
serverAddress?: string;
|
|
5872
|
+
/**
|
|
5873
|
+
* Tags is a map of key, value pairs.
|
|
5874
|
+
*/
|
|
5875
|
+
tags?: {
|
|
5876
|
+
[key: string]: string;
|
|
5877
|
+
};
|
|
5878
|
+
}
|
|
5778
5879
|
export interface GetSecretStoreSecretStoreVaultApprole {
|
|
5779
5880
|
/**
|
|
5780
5881
|
* Unique identifier of the SecretStore.
|
|
@@ -11151,6 +11252,58 @@ export interface SecretStoreGcpStore {
|
|
|
11151
11252
|
[key: string]: string;
|
|
11152
11253
|
};
|
|
11153
11254
|
}
|
|
11255
|
+
export interface SecretStoreKeyfactorX509Store {
|
|
11256
|
+
/**
|
|
11257
|
+
* Path to the root CA that signed the certificate passed to the client for HTTPS connection. This is not required if the CA is trusted by the host operating system. This should be a PEM formatted certificate, and doesn't necessarily have to be the CA that signed CertificateFile.
|
|
11258
|
+
*/
|
|
11259
|
+
caFilePath?: string;
|
|
11260
|
+
/**
|
|
11261
|
+
* Path to client certificate in PEM format. This certificate must contain a client certificate that is recognized by the EJBCA instance represented by Hostname. This PEM file may also contain the private key associated with the certificate, but KeyFile can also be set to configure the private key.
|
|
11262
|
+
*/
|
|
11263
|
+
certificateFilePath: string;
|
|
11264
|
+
/**
|
|
11265
|
+
* Name of EJBCA certificate authority that will enroll CSR.
|
|
11266
|
+
*/
|
|
11267
|
+
defaultCertificateAuthorityName: string;
|
|
11268
|
+
/**
|
|
11269
|
+
* Certificate profile name that EJBCA will enroll the CSR with.
|
|
11270
|
+
*/
|
|
11271
|
+
defaultCertificateProfileName: string;
|
|
11272
|
+
/**
|
|
11273
|
+
* End entity profile that EJBCA will enroll the CSR with.
|
|
11274
|
+
*/
|
|
11275
|
+
defaultEndEntityProfileName: string;
|
|
11276
|
+
/**
|
|
11277
|
+
* code used by EJBCA during enrollment. May be left blank if no code is required.
|
|
11278
|
+
*/
|
|
11279
|
+
enrollmentCodeEnvVar?: string;
|
|
11280
|
+
/**
|
|
11281
|
+
* username that used by the EJBCA during enrollment. This can be left out. If so, the username must be auto-generated on the Keyfactor side.
|
|
11282
|
+
*/
|
|
11283
|
+
enrollmentUsernameEnvVar?: string;
|
|
11284
|
+
/**
|
|
11285
|
+
* Path to private key in PEM format. This file should contain the private key associated with the client certificate configured in CertificateFile.
|
|
11286
|
+
*/
|
|
11287
|
+
keyFilePath?: string;
|
|
11288
|
+
/**
|
|
11289
|
+
* optional environment variable housing the password that is used to decrypt the key file.
|
|
11290
|
+
*/
|
|
11291
|
+
keyPasswordEnvVar?: string;
|
|
11292
|
+
/**
|
|
11293
|
+
* Unique human-readable name of the SecretStore.
|
|
11294
|
+
*/
|
|
11295
|
+
name: string;
|
|
11296
|
+
/**
|
|
11297
|
+
* The URL of the Vault to target
|
|
11298
|
+
*/
|
|
11299
|
+
serverAddress: string;
|
|
11300
|
+
/**
|
|
11301
|
+
* Tags is a map of key, value pairs.
|
|
11302
|
+
*/
|
|
11303
|
+
tags?: {
|
|
11304
|
+
[key: string]: string;
|
|
11305
|
+
};
|
|
11306
|
+
}
|
|
11154
11307
|
export interface SecretStoreVaultApprole {
|
|
11155
11308
|
/**
|
|
11156
11309
|
* Unique human-readable name of the SecretStore.
|
package/workflow.d.ts
CHANGED
|
@@ -5,7 +5,6 @@ import * as pulumi from "@pulumi/pulumi";
|
|
|
5
5
|
* but automatic approval or a set of users authorized to approve the requests.
|
|
6
6
|
* ## Example Usage
|
|
7
7
|
*
|
|
8
|
-
* <!--Start PulumiCodeChooser -->
|
|
9
8
|
* ```typescript
|
|
10
9
|
* import * as pulumi from "@pulumi/pulumi";
|
|
11
10
|
* import * as sdm from "@pierskarsenbarg/sdm";
|
|
@@ -30,7 +29,6 @@ import * as pulumi from "@pulumi/pulumi";
|
|
|
30
29
|
* }]),
|
|
31
30
|
* });
|
|
32
31
|
* ```
|
|
33
|
-
* <!--End PulumiCodeChooser -->
|
|
34
32
|
* This resource can be imported using the import command.
|
|
35
33
|
*
|
|
36
34
|
* ## Import
|
package/workflow.js
CHANGED
|
@@ -11,7 +11,6 @@ const utilities = require("./utilities");
|
|
|
11
11
|
* but automatic approval or a set of users authorized to approve the requests.
|
|
12
12
|
* ## Example Usage
|
|
13
13
|
*
|
|
14
|
-
* <!--Start PulumiCodeChooser -->
|
|
15
14
|
* ```typescript
|
|
16
15
|
* import * as pulumi from "@pulumi/pulumi";
|
|
17
16
|
* import * as sdm from "@pierskarsenbarg/sdm";
|
|
@@ -36,7 +35,6 @@ const utilities = require("./utilities");
|
|
|
36
35
|
* }]),
|
|
37
36
|
* });
|
|
38
37
|
* ```
|
|
39
|
-
* <!--End PulumiCodeChooser -->
|
|
40
38
|
* This resource can be imported using the import command.
|
|
41
39
|
*
|
|
42
40
|
* ## Import
|
package/workflow.js.map
CHANGED
|
@@ -1 +1 @@
|
|
|
1
|
-
{"version":3,"file":"workflow.js","sourceRoot":"","sources":["../workflow.ts"],"names":[],"mappings":";AAAA,wFAAwF;AACxF,iFAAiF;;;AAEjF,yCAAyC;AACzC,yCAAyC;AAEzC
|
|
1
|
+
{"version":3,"file":"workflow.js","sourceRoot":"","sources":["../workflow.ts"],"names":[],"mappings":";AAAA,wFAAwF;AACxF,iFAAiF;;;AAEjF,yCAAyC;AACzC,yCAAyC;AAEzC;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;GAuCG;AACH,MAAa,QAAS,SAAQ,MAAM,CAAC,cAAc;IAC/C;;;;;;;;OAQG;IACI,MAAM,CAAC,GAAG,CAAC,IAAY,EAAE,EAA2B,EAAE,KAAqB,EAAE,IAAmC;QACnH,OAAO,IAAI,QAAQ,CAAC,IAAI,EAAO,KAAK,kCAAO,IAAI,KAAE,EAAE,EAAE,EAAE,IAAG,CAAC;IAC/D,CAAC;IAKD;;;OAGG;IACI,MAAM,CAAC,UAAU,CAAC,GAAQ;QAC7B,IAAI,GAAG,KAAK,SAAS,IAAI,GAAG,KAAK,IAAI,EAAE;YACnC,OAAO,KAAK,CAAC;SAChB;QACD,OAAO,GAAG,CAAC,cAAc,CAAC,KAAK,QAAQ,CAAC,YAAY,CAAC;IACzD,CAAC;IAuCD,YAAY,IAAY,EAAE,WAA0C,EAAE,IAAmC;QACrG,IAAI,cAAc,GAAkB,EAAE,CAAC;QACvC,IAAI,GAAG,IAAI,IAAI,EAAE,CAAC;QAClB,IAAI,IAAI,CAAC,EAAE,EAAE;YACT,MAAM,KAAK,GAAG,WAAwC,CAAC;YACvD,cAAc,CAAC,aAAa,CAAC,GAAG,KAAK,CAAC,CAAC,CAAC,KAAK,CAAC,WAAW,CAAC,CAAC,CAAC,SAAS,CAAC;YACtE,cAAc,CAAC,gBAAgB,CAAC,GAAG,KAAK,CAAC,CAAC,CAAC,KAAK,CAAC,cAAc,CAAC,CAAC,CAAC,SAAS,CAAC;YAC5E,cAAc,CAAC,WAAW,CAAC,GAAG,KAAK,CAAC,CAAC,CAAC,KAAK,CAAC,SAAS,CAAC,CAAC,CAAC,SAAS,CAAC;YAClE,cAAc,CAAC,aAAa,CAAC,GAAG,KAAK,CAAC,CAAC,CAAC,KAAK,CAAC,WAAW,CAAC,CAAC,CAAC,SAAS,CAAC;YACtE,cAAc,CAAC,SAAS,CAAC,GAAG,KAAK,CAAC,CAAC,CAAC,KAAK,CAAC,OAAO,CAAC,CAAC,CAAC,SAAS,CAAC;YAC9D,cAAc,CAAC,MAAM,CAAC,GAAG,KAAK,CAAC,CAAC,CAAC,KAAK,CAAC,IAAI,CAAC,CAAC,CAAC,SAAS,CAAC;YACxD,cAAc,CAAC,QAAQ,CAAC,GAAG,KAAK,CAAC,CAAC,CAAC,KAAK,CAAC,MAAM,CAAC,CAAC,CAAC,SAAS,CAAC;SAC/D;aAAM;YACH,MAAM,IAAI,GAAG,WAAuC,CAAC;YACrD,cAAc,CAAC,aAAa,CAAC,GAAG,IAAI,CAAC,CAAC,CAAC,IAAI,CAAC,WAAW,CAAC,CAAC,CAAC,SAAS,CAAC;YACpE,cAAc,CAAC,gBAAgB,CAAC,GAAG,IAAI,CAAC,CAAC,CAAC,IAAI,CAAC,cAAc,CAAC,CAAC,CAAC,SAAS,CAAC;YAC1E,cAAc,CAAC,WAAW,CAAC,GAAG,IAAI,CAAC,CAAC,CAAC,IAAI,CAAC,SAAS,CAAC,CAAC,CAAC,SAAS,CAAC;YAChE,cAAc,CAAC,aAAa,CAAC,GAAG,IAAI,CAAC,CAAC,CAAC,IAAI,CAAC,WAAW,CAAC,CAAC,CAAC,SAAS,CAAC;YACpE,cAAc,CAAC,SAAS,CAAC,GAAG,IAAI,CAAC,CAAC,CAAC,IAAI,CAAC,OAAO,CAAC,CAAC,CAAC,SAAS,CAAC;YAC5D,cAAc,CAAC,MAAM,CAAC,GAAG,IAAI,CAAC,CAAC,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC,CAAC,SAAS,CAAC;YACtD,cAAc,CAAC,QAAQ,CAAC,GAAG,IAAI,CAAC,CAAC,CAAC,IAAI,CAAC,MAAM,CAAC,CAAC,CAAC,SAAS,CAAC;SAC7D;QACD,IAAI,GAAG,MAAM,CAAC,YAAY,CAAC,SAAS,CAAC,oBAAoB,EAAE,EAAE,IAAI,CAAC,CAAC;QACnE,KAAK,CAAC,QAAQ,CAAC,YAAY,EAAE,IAAI,EAAE,cAAc,EAAE,IAAI,CAAC,CAAC;IAC7D,CAAC;;AAzFL,4BA0FC;AA5EG,gBAAgB;AACO,qBAAY,GAAG,6BAA6B,CAAC"}
|
package/workflowApprover.d.ts
CHANGED
|
@@ -3,7 +3,6 @@ import * as pulumi from "@pulumi/pulumi";
|
|
|
3
3
|
* WorkflowApprover is an account or a role with the ability to approve requests bound to a workflow.
|
|
4
4
|
* ## Example Usage
|
|
5
5
|
*
|
|
6
|
-
* <!--Start PulumiCodeChooser -->
|
|
7
6
|
* ```typescript
|
|
8
7
|
* import * as pulumi from "@pulumi/pulumi";
|
|
9
8
|
* import * as sdm from "@pierskarsenbarg/sdm";
|
|
@@ -17,7 +16,6 @@ import * as pulumi from "@pulumi/pulumi";
|
|
|
17
16
|
* workflowId: "aw-1935694",
|
|
18
17
|
* });
|
|
19
18
|
* ```
|
|
20
|
-
* <!--End PulumiCodeChooser -->
|
|
21
19
|
* This resource can be imported using the import command.
|
|
22
20
|
*
|
|
23
21
|
* ## Import
|
package/workflowApprover.js
CHANGED
|
@@ -9,7 +9,6 @@ const utilities = require("./utilities");
|
|
|
9
9
|
* WorkflowApprover is an account or a role with the ability to approve requests bound to a workflow.
|
|
10
10
|
* ## Example Usage
|
|
11
11
|
*
|
|
12
|
-
* <!--Start PulumiCodeChooser -->
|
|
13
12
|
* ```typescript
|
|
14
13
|
* import * as pulumi from "@pulumi/pulumi";
|
|
15
14
|
* import * as sdm from "@pierskarsenbarg/sdm";
|
|
@@ -23,7 +22,6 @@ const utilities = require("./utilities");
|
|
|
23
22
|
* workflowId: "aw-1935694",
|
|
24
23
|
* });
|
|
25
24
|
* ```
|
|
26
|
-
* <!--End PulumiCodeChooser -->
|
|
27
25
|
* This resource can be imported using the import command.
|
|
28
26
|
*
|
|
29
27
|
* ## Import
|
package/workflowApprover.js.map
CHANGED
|
@@ -1 +1 @@
|
|
|
1
|
-
{"version":3,"file":"workflowApprover.js","sourceRoot":"","sources":["../workflowApprover.ts"],"names":[],"mappings":";AAAA,wFAAwF;AACxF,iFAAiF;;;AAEjF,yCAAyC;AACzC,yCAAyC;AAEzC
|
|
1
|
+
{"version":3,"file":"workflowApprover.js","sourceRoot":"","sources":["../workflowApprover.ts"],"names":[],"mappings":";AAAA,wFAAwF;AACxF,iFAAiF;;;AAEjF,yCAAyC;AACzC,yCAAyC;AAEzC;;;;;;;;;;;;;;;;;;;;;;;;;;GA0BG;AACH,MAAa,gBAAiB,SAAQ,MAAM,CAAC,cAAc;IACvD;;;;;;;;OAQG;IACI,MAAM,CAAC,GAAG,CAAC,IAAY,EAAE,EAA2B,EAAE,KAA6B,EAAE,IAAmC;QAC3H,OAAO,IAAI,gBAAgB,CAAC,IAAI,EAAO,KAAK,kCAAO,IAAI,KAAE,EAAE,EAAE,EAAE,IAAG,CAAC;IACvE,CAAC;IAKD;;;OAGG;IACI,MAAM,CAAC,UAAU,CAAC,GAAQ;QAC7B,IAAI,GAAG,KAAK,SAAS,IAAI,GAAG,KAAK,IAAI,EAAE;YACnC,OAAO,KAAK,CAAC;SAChB;QACD,OAAO,GAAG,CAAC,cAAc,CAAC,KAAK,gBAAgB,CAAC,YAAY,CAAC;IACjE,CAAC;IAuBD,YAAY,IAAY,EAAE,WAA0D,EAAE,IAAmC;QACrH,IAAI,cAAc,GAAkB,EAAE,CAAC;QACvC,IAAI,GAAG,IAAI,IAAI,EAAE,CAAC;QAClB,IAAI,IAAI,CAAC,EAAE,EAAE;YACT,MAAM,KAAK,GAAG,WAAgD,CAAC;YAC/D,cAAc,CAAC,WAAW,CAAC,GAAG,KAAK,CAAC,CAAC,CAAC,KAAK,CAAC,SAAS,CAAC,CAAC,CAAC,SAAS,CAAC;YAClE,cAAc,CAAC,QAAQ,CAAC,GAAG,KAAK,CAAC,CAAC,CAAC,KAAK,CAAC,MAAM,CAAC,CAAC,CAAC,SAAS,CAAC;YAC5D,cAAc,CAAC,YAAY,CAAC,GAAG,KAAK,CAAC,CAAC,CAAC,KAAK,CAAC,UAAU,CAAC,CAAC,CAAC,SAAS,CAAC;SACvE;aAAM;YACH,MAAM,IAAI,GAAG,WAA+C,CAAC;YAC7D,IAAI,CAAC,CAAC,IAAI,IAAI,IAAI,CAAC,UAAU,KAAK,SAAS,CAAC,IAAI,CAAC,IAAI,CAAC,GAAG,EAAE;gBACvD,MAAM,IAAI,KAAK,CAAC,wCAAwC,CAAC,CAAC;aAC7D;YACD,cAAc,CAAC,WAAW,CAAC,GAAG,IAAI,CAAC,CAAC,CAAC,IAAI,CAAC,SAAS,CAAC,CAAC,CAAC,SAAS,CAAC;YAChE,cAAc,CAAC,QAAQ,CAAC,GAAG,IAAI,CAAC,CAAC,CAAC,IAAI,CAAC,MAAM,CAAC,CAAC,CAAC,SAAS,CAAC;YAC1D,cAAc,CAAC,YAAY,CAAC,GAAG,IAAI,CAAC,CAAC,CAAC,IAAI,CAAC,UAAU,CAAC,CAAC,CAAC,SAAS,CAAC;SACrE;QACD,IAAI,GAAG,MAAM,CAAC,YAAY,CAAC,SAAS,CAAC,oBAAoB,EAAE,EAAE,IAAI,CAAC,CAAC;QACnE,KAAK,CAAC,gBAAgB,CAAC,YAAY,EAAE,IAAI,EAAE,cAAc,EAAE,IAAI,CAAC,CAAC;IACrE,CAAC;;AApEL,4CAqEC;AAvDG,gBAAgB;AACO,6BAAY,GAAG,6CAA6C,CAAC"}
|
package/workflowRole.d.ts
CHANGED
|
@@ -4,7 +4,6 @@ import * as pulumi from "@pulumi/pulumi";
|
|
|
4
4
|
* to request access to a resource via the workflow.
|
|
5
5
|
* ## Example Usage
|
|
6
6
|
*
|
|
7
|
-
* <!--Start PulumiCodeChooser -->
|
|
8
7
|
* ```typescript
|
|
9
8
|
* import * as pulumi from "@pulumi/pulumi";
|
|
10
9
|
* import * as sdm from "@pierskarsenbarg/sdm";
|
|
@@ -14,7 +13,6 @@ import * as pulumi from "@pulumi/pulumi";
|
|
|
14
13
|
* workflowId: "aw-343865",
|
|
15
14
|
* });
|
|
16
15
|
* ```
|
|
17
|
-
* <!--End PulumiCodeChooser -->
|
|
18
16
|
* This resource can be imported using the import command.
|
|
19
17
|
*
|
|
20
18
|
* ## Import
|
package/workflowRole.js
CHANGED
|
@@ -10,7 +10,6 @@ const utilities = require("./utilities");
|
|
|
10
10
|
* to request access to a resource via the workflow.
|
|
11
11
|
* ## Example Usage
|
|
12
12
|
*
|
|
13
|
-
* <!--Start PulumiCodeChooser -->
|
|
14
13
|
* ```typescript
|
|
15
14
|
* import * as pulumi from "@pulumi/pulumi";
|
|
16
15
|
* import * as sdm from "@pierskarsenbarg/sdm";
|
|
@@ -20,7 +19,6 @@ const utilities = require("./utilities");
|
|
|
20
19
|
* workflowId: "aw-343865",
|
|
21
20
|
* });
|
|
22
21
|
* ```
|
|
23
|
-
* <!--End PulumiCodeChooser -->
|
|
24
22
|
* This resource can be imported using the import command.
|
|
25
23
|
*
|
|
26
24
|
* ## Import
|
package/workflowRole.js.map
CHANGED
|
@@ -1 +1 @@
|
|
|
1
|
-
{"version":3,"file":"workflowRole.js","sourceRoot":"","sources":["../workflowRole.ts"],"names":[],"mappings":";AAAA,wFAAwF;AACxF,iFAAiF;;;AAEjF,yCAAyC;AACzC,yCAAyC;AAEzC
|
|
1
|
+
{"version":3,"file":"workflowRole.js","sourceRoot":"","sources":["../workflowRole.ts"],"names":[],"mappings":";AAAA,wFAAwF;AACxF,iFAAiF;;;AAEjF,yCAAyC;AACzC,yCAAyC;AAEzC;;;;;;;;;;;;;;;;;;;;;;;GAuBG;AACH,MAAa,YAAa,SAAQ,MAAM,CAAC,cAAc;IACnD;;;;;;;;OAQG;IACI,MAAM,CAAC,GAAG,CAAC,IAAY,EAAE,EAA2B,EAAE,KAAyB,EAAE,IAAmC;QACvH,OAAO,IAAI,YAAY,CAAC,IAAI,EAAO,KAAK,kCAAO,IAAI,KAAE,EAAE,EAAE,EAAE,IAAG,CAAC;IACnE,CAAC;IAKD;;;OAGG;IACI,MAAM,CAAC,UAAU,CAAC,GAAQ;QAC7B,IAAI,GAAG,KAAK,SAAS,IAAI,GAAG,KAAK,IAAI,EAAE;YACnC,OAAO,KAAK,CAAC;SAChB;QACD,OAAO,GAAG,CAAC,cAAc,CAAC,KAAK,YAAY,CAAC,YAAY,CAAC;IAC7D,CAAC;IAmBD,YAAY,IAAY,EAAE,WAAkD,EAAE,IAAmC;QAC7G,IAAI,cAAc,GAAkB,EAAE,CAAC;QACvC,IAAI,GAAG,IAAI,IAAI,EAAE,CAAC;QAClB,IAAI,IAAI,CAAC,EAAE,EAAE;YACT,MAAM,KAAK,GAAG,WAA4C,CAAC;YAC3D,cAAc,CAAC,QAAQ,CAAC,GAAG,KAAK,CAAC,CAAC,CAAC,KAAK,CAAC,MAAM,CAAC,CAAC,CAAC,SAAS,CAAC;YAC5D,cAAc,CAAC,YAAY,CAAC,GAAG,KAAK,CAAC,CAAC,CAAC,KAAK,CAAC,UAAU,CAAC,CAAC,CAAC,SAAS,CAAC;SACvE;aAAM;YACH,MAAM,IAAI,GAAG,WAA2C,CAAC;YACzD,IAAI,CAAC,CAAC,IAAI,IAAI,IAAI,CAAC,MAAM,KAAK,SAAS,CAAC,IAAI,CAAC,IAAI,CAAC,GAAG,EAAE;gBACnD,MAAM,IAAI,KAAK,CAAC,oCAAoC,CAAC,CAAC;aACzD;YACD,IAAI,CAAC,CAAC,IAAI,IAAI,IAAI,CAAC,UAAU,KAAK,SAAS,CAAC,IAAI,CAAC,IAAI,CAAC,GAAG,EAAE;gBACvD,MAAM,IAAI,KAAK,CAAC,wCAAwC,CAAC,CAAC;aAC7D;YACD,cAAc,CAAC,QAAQ,CAAC,GAAG,IAAI,CAAC,CAAC,CAAC,IAAI,CAAC,MAAM,CAAC,CAAC,CAAC,SAAS,CAAC;YAC1D,cAAc,CAAC,YAAY,CAAC,GAAG,IAAI,CAAC,CAAC,CAAC,IAAI,CAAC,UAAU,CAAC,CAAC,CAAC,SAAS,CAAC;SACrE;QACD,IAAI,GAAG,MAAM,CAAC,YAAY,CAAC,SAAS,CAAC,oBAAoB,EAAE,EAAE,IAAI,CAAC,CAAC;QACnE,KAAK,CAAC,YAAY,CAAC,YAAY,EAAE,IAAI,EAAE,cAAc,EAAE,IAAI,CAAC,CAAC;IACjE,CAAC;;AAjEL,oCAkEC;AApDG,gBAAgB;AACO,yBAAY,GAAG,qCAAqC,CAAC"}
|