@pierskarsenbarg/sdm 1.32.0 → 1.33.0
This diff represents the content of publicly available package versions that have been released to one of the supported registries. The information contained in this diff is provided for informational purposes only and reflects changes between package versions as they appear in their respective public registries.
- package/account.d.ts +4 -4
- package/account.js +4 -4
- package/accountAttachment.d.ts +1 -1
- package/accountAttachment.js +1 -1
- package/accountGroup.d.ts +4 -4
- package/accountGroup.js +4 -4
- package/approvalWorkflow.d.ts +10 -6
- package/approvalWorkflow.js +10 -6
- package/approvalWorkflow.js.map +1 -1
- package/getAccount.d.ts +8 -8
- package/getAccount.js +8 -8
- package/getAccountGroup.d.ts +4 -4
- package/getAccountGroup.js +4 -4
- package/getApprovalWorkflow.d.ts +4 -4
- package/getApprovalWorkflow.js +4 -4
- package/getGroupRole.d.ts +4 -4
- package/getGroupRole.js +4 -4
- package/getNode.d.ts +4 -4
- package/getNode.js +4 -4
- package/getResource.d.ts +4 -4
- package/getResource.js +4 -4
- package/getRole.d.ts +2 -0
- package/getRole.js +2 -0
- package/getRole.js.map +1 -1
- package/getWorkflow.d.ts +6 -0
- package/getWorkflow.js +6 -0
- package/getWorkflow.js.map +1 -1
- package/getWorkflowRole.d.ts +6 -2
- package/getWorkflowRole.js +6 -2
- package/getWorkflowRole.js.map +1 -1
- package/group.d.ts +8 -5
- package/group.js +8 -5
- package/group.js.map +1 -1
- package/groupRole.d.ts +4 -4
- package/groupRole.js +4 -4
- package/identityAlias.d.ts +13 -0
- package/identityAlias.js +13 -0
- package/identityAlias.js.map +1 -1
- package/identitySet.d.ts +1 -1
- package/identitySet.js +1 -1
- package/node.d.ts +4 -4
- package/node.js +4 -4
- package/package.json +1 -1
- package/policy.d.ts +3 -4
- package/policy.js +3 -4
- package/policy.js.map +1 -1
- package/proxyClusterKey.d.ts +1 -1
- package/proxyClusterKey.js +1 -1
- package/remoteIdentity.d.ts +13 -0
- package/remoteIdentity.js +13 -0
- package/remoteIdentity.js.map +1 -1
- package/role.d.ts +57 -45
- package/role.js +57 -45
- package/role.js.map +1 -1
- package/secretStore.d.ts +60 -0
- package/secretStore.js +10 -0
- package/secretStore.js.map +1 -1
- package/types/input.d.ts +148 -0
- package/types/output.d.ts +321 -0
- package/workflow.d.ts +10 -4
- package/workflow.js +10 -4
- package/workflow.js.map +1 -1
- package/workflowRole.d.ts +4 -4
- package/workflowRole.js +4 -4
package/types/output.d.ts
CHANGED
|
@@ -8115,10 +8115,15 @@ export interface GetSecretStoreSecretStore {
|
|
|
8115
8115
|
gcpStores: outputs.GetSecretStoreSecretStoreGcpStore[];
|
|
8116
8116
|
keyfactorSshStores: outputs.GetSecretStoreSecretStoreKeyfactorSshStore[];
|
|
8117
8117
|
keyfactorX509Stores: outputs.GetSecretStoreSecretStoreKeyfactorX509Store[];
|
|
8118
|
+
strongVaults: outputs.GetSecretStoreSecretStoreStrongVault[];
|
|
8118
8119
|
vaultApproleCertSshes: outputs.GetSecretStoreSecretStoreVaultApproleCertSsh[];
|
|
8119
8120
|
vaultApproleCertX509s: outputs.GetSecretStoreSecretStoreVaultApproleCertX509[];
|
|
8120
8121
|
vaultApproles: outputs.GetSecretStoreSecretStoreVaultApprole[];
|
|
8122
|
+
vaultAwsEc2CertSshes: outputs.GetSecretStoreSecretStoreVaultAwsEc2CertSsh[];
|
|
8123
|
+
vaultAwsEc2CertX509s: outputs.GetSecretStoreSecretStoreVaultAwsEc2CertX509[];
|
|
8121
8124
|
vaultAwsEc2s: outputs.GetSecretStoreSecretStoreVaultAwsEc2[];
|
|
8125
|
+
vaultAwsIamCertSshes: outputs.GetSecretStoreSecretStoreVaultAwsIamCertSsh[];
|
|
8126
|
+
vaultAwsIamCertX509s: outputs.GetSecretStoreSecretStoreVaultAwsIamCertX509[];
|
|
8122
8127
|
vaultAwsIams: outputs.GetSecretStoreSecretStoreVaultAwsIam[];
|
|
8123
8128
|
vaultTls: outputs.GetSecretStoreSecretStoreVaultTl[];
|
|
8124
8129
|
vaultTlsCertSshes: outputs.GetSecretStoreSecretStoreVaultTlsCertSsh[];
|
|
@@ -8160,6 +8165,14 @@ export interface GetSecretStoreSecretStoreAw {
|
|
|
8160
8165
|
* The AWS region to target e.g. us-east-1
|
|
8161
8166
|
*/
|
|
8162
8167
|
region?: string;
|
|
8168
|
+
/**
|
|
8169
|
+
* The role to assume after logging in.
|
|
8170
|
+
*/
|
|
8171
|
+
roleArn?: string;
|
|
8172
|
+
/**
|
|
8173
|
+
* The external ID to associate with assume role requests. Does nothing if a role ARN is not provided.
|
|
8174
|
+
*/
|
|
8175
|
+
roleExternalId?: string;
|
|
8163
8176
|
/**
|
|
8164
8177
|
* Tags is a map of key, value pairs.
|
|
8165
8178
|
*/
|
|
@@ -8469,6 +8482,22 @@ export interface GetSecretStoreSecretStoreKeyfactorX509Store {
|
|
|
8469
8482
|
[key: string]: string;
|
|
8470
8483
|
};
|
|
8471
8484
|
}
|
|
8485
|
+
export interface GetSecretStoreSecretStoreStrongVault {
|
|
8486
|
+
/**
|
|
8487
|
+
* Unique identifier of the SecretStore.
|
|
8488
|
+
*/
|
|
8489
|
+
id?: string;
|
|
8490
|
+
/**
|
|
8491
|
+
* Unique human-readable name of the SecretStore.
|
|
8492
|
+
*/
|
|
8493
|
+
name?: string;
|
|
8494
|
+
/**
|
|
8495
|
+
* Tags is a map of key, value pairs.
|
|
8496
|
+
*/
|
|
8497
|
+
tags?: {
|
|
8498
|
+
[key: string]: string;
|
|
8499
|
+
};
|
|
8500
|
+
}
|
|
8472
8501
|
export interface GetSecretStoreSecretStoreVaultApprole {
|
|
8473
8502
|
/**
|
|
8474
8503
|
* Unique identifier of the SecretStore.
|
|
@@ -8589,6 +8618,78 @@ export interface GetSecretStoreSecretStoreVaultAwsEc2 {
|
|
|
8589
8618
|
[key: string]: string;
|
|
8590
8619
|
};
|
|
8591
8620
|
}
|
|
8621
|
+
export interface GetSecretStoreSecretStoreVaultAwsEc2CertSsh {
|
|
8622
|
+
/**
|
|
8623
|
+
* Unique identifier of the SecretStore.
|
|
8624
|
+
*/
|
|
8625
|
+
id?: string;
|
|
8626
|
+
/**
|
|
8627
|
+
* The lifetime of certificates issued by this CA represented in minutes.
|
|
8628
|
+
*/
|
|
8629
|
+
issuedCertTtlMinutes?: number;
|
|
8630
|
+
/**
|
|
8631
|
+
* Unique human-readable name of the SecretStore.
|
|
8632
|
+
*/
|
|
8633
|
+
name?: string;
|
|
8634
|
+
/**
|
|
8635
|
+
* The namespace to make requests within
|
|
8636
|
+
*/
|
|
8637
|
+
namespace?: string;
|
|
8638
|
+
/**
|
|
8639
|
+
* The URL of the Vault to target
|
|
8640
|
+
*/
|
|
8641
|
+
serverAddress?: string;
|
|
8642
|
+
/**
|
|
8643
|
+
* The signing role to be used for signing certificates
|
|
8644
|
+
*/
|
|
8645
|
+
signingRole?: string;
|
|
8646
|
+
/**
|
|
8647
|
+
* The mount point of the SSH engine configured with the desired CA
|
|
8648
|
+
*/
|
|
8649
|
+
sshMountPoint?: string;
|
|
8650
|
+
/**
|
|
8651
|
+
* Tags is a map of key, value pairs.
|
|
8652
|
+
*/
|
|
8653
|
+
tags?: {
|
|
8654
|
+
[key: string]: string;
|
|
8655
|
+
};
|
|
8656
|
+
}
|
|
8657
|
+
export interface GetSecretStoreSecretStoreVaultAwsEc2CertX509 {
|
|
8658
|
+
/**
|
|
8659
|
+
* Unique identifier of the SecretStore.
|
|
8660
|
+
*/
|
|
8661
|
+
id?: string;
|
|
8662
|
+
/**
|
|
8663
|
+
* The lifetime of certificates issued by this CA represented in minutes.
|
|
8664
|
+
*/
|
|
8665
|
+
issuedCertTtlMinutes?: number;
|
|
8666
|
+
/**
|
|
8667
|
+
* Unique human-readable name of the SecretStore.
|
|
8668
|
+
*/
|
|
8669
|
+
name?: string;
|
|
8670
|
+
/**
|
|
8671
|
+
* The namespace to make requests within
|
|
8672
|
+
*/
|
|
8673
|
+
namespace?: string;
|
|
8674
|
+
/**
|
|
8675
|
+
* The mount point of the PKI engine configured with the desired CA
|
|
8676
|
+
*/
|
|
8677
|
+
pkiMountPoint?: string;
|
|
8678
|
+
/**
|
|
8679
|
+
* The URL of the Vault to target
|
|
8680
|
+
*/
|
|
8681
|
+
serverAddress?: string;
|
|
8682
|
+
/**
|
|
8683
|
+
* The signing role to be used for signing certificates
|
|
8684
|
+
*/
|
|
8685
|
+
signingRole?: string;
|
|
8686
|
+
/**
|
|
8687
|
+
* Tags is a map of key, value pairs.
|
|
8688
|
+
*/
|
|
8689
|
+
tags?: {
|
|
8690
|
+
[key: string]: string;
|
|
8691
|
+
};
|
|
8692
|
+
}
|
|
8592
8693
|
export interface GetSecretStoreSecretStoreVaultAwsIam {
|
|
8593
8694
|
/**
|
|
8594
8695
|
* Unique identifier of the SecretStore.
|
|
@@ -8613,6 +8714,78 @@ export interface GetSecretStoreSecretStoreVaultAwsIam {
|
|
|
8613
8714
|
[key: string]: string;
|
|
8614
8715
|
};
|
|
8615
8716
|
}
|
|
8717
|
+
export interface GetSecretStoreSecretStoreVaultAwsIamCertSsh {
|
|
8718
|
+
/**
|
|
8719
|
+
* Unique identifier of the SecretStore.
|
|
8720
|
+
*/
|
|
8721
|
+
id?: string;
|
|
8722
|
+
/**
|
|
8723
|
+
* The lifetime of certificates issued by this CA represented in minutes.
|
|
8724
|
+
*/
|
|
8725
|
+
issuedCertTtlMinutes?: number;
|
|
8726
|
+
/**
|
|
8727
|
+
* Unique human-readable name of the SecretStore.
|
|
8728
|
+
*/
|
|
8729
|
+
name?: string;
|
|
8730
|
+
/**
|
|
8731
|
+
* The namespace to make requests within
|
|
8732
|
+
*/
|
|
8733
|
+
namespace?: string;
|
|
8734
|
+
/**
|
|
8735
|
+
* The URL of the Vault to target
|
|
8736
|
+
*/
|
|
8737
|
+
serverAddress?: string;
|
|
8738
|
+
/**
|
|
8739
|
+
* The signing role to be used for signing certificates
|
|
8740
|
+
*/
|
|
8741
|
+
signingRole?: string;
|
|
8742
|
+
/**
|
|
8743
|
+
* The mount point of the SSH engine configured with the desired CA
|
|
8744
|
+
*/
|
|
8745
|
+
sshMountPoint?: string;
|
|
8746
|
+
/**
|
|
8747
|
+
* Tags is a map of key, value pairs.
|
|
8748
|
+
*/
|
|
8749
|
+
tags?: {
|
|
8750
|
+
[key: string]: string;
|
|
8751
|
+
};
|
|
8752
|
+
}
|
|
8753
|
+
export interface GetSecretStoreSecretStoreVaultAwsIamCertX509 {
|
|
8754
|
+
/**
|
|
8755
|
+
* Unique identifier of the SecretStore.
|
|
8756
|
+
*/
|
|
8757
|
+
id?: string;
|
|
8758
|
+
/**
|
|
8759
|
+
* The lifetime of certificates issued by this CA represented in minutes.
|
|
8760
|
+
*/
|
|
8761
|
+
issuedCertTtlMinutes?: number;
|
|
8762
|
+
/**
|
|
8763
|
+
* Unique human-readable name of the SecretStore.
|
|
8764
|
+
*/
|
|
8765
|
+
name?: string;
|
|
8766
|
+
/**
|
|
8767
|
+
* The namespace to make requests within
|
|
8768
|
+
*/
|
|
8769
|
+
namespace?: string;
|
|
8770
|
+
/**
|
|
8771
|
+
* The mount point of the PKI engine configured with the desired CA
|
|
8772
|
+
*/
|
|
8773
|
+
pkiMountPoint?: string;
|
|
8774
|
+
/**
|
|
8775
|
+
* The URL of the Vault to target
|
|
8776
|
+
*/
|
|
8777
|
+
serverAddress?: string;
|
|
8778
|
+
/**
|
|
8779
|
+
* The signing role to be used for signing certificates
|
|
8780
|
+
*/
|
|
8781
|
+
signingRole?: string;
|
|
8782
|
+
/**
|
|
8783
|
+
* Tags is a map of key, value pairs.
|
|
8784
|
+
*/
|
|
8785
|
+
tags?: {
|
|
8786
|
+
[key: string]: string;
|
|
8787
|
+
};
|
|
8788
|
+
}
|
|
8616
8789
|
export interface GetSecretStoreSecretStoreVaultTl {
|
|
8617
8790
|
/**
|
|
8618
8791
|
* A path to a CA file accessible by a Node
|
|
@@ -15857,6 +16030,14 @@ export interface SecretStoreAws {
|
|
|
15857
16030
|
* The AWS region to target e.g. us-east-1
|
|
15858
16031
|
*/
|
|
15859
16032
|
region: string;
|
|
16033
|
+
/**
|
|
16034
|
+
* The role to assume after logging in.
|
|
16035
|
+
*/
|
|
16036
|
+
roleArn?: string;
|
|
16037
|
+
/**
|
|
16038
|
+
* The external ID to associate with assume role requests. Does nothing if a role ARN is not provided.
|
|
16039
|
+
*/
|
|
16040
|
+
roleExternalId?: string;
|
|
15860
16041
|
/**
|
|
15861
16042
|
* Tags is a map of key, value pairs.
|
|
15862
16043
|
*/
|
|
@@ -16126,6 +16307,18 @@ export interface SecretStoreKeyfactorX509Store {
|
|
|
16126
16307
|
[key: string]: string;
|
|
16127
16308
|
};
|
|
16128
16309
|
}
|
|
16310
|
+
export interface SecretStoreStrongVault {
|
|
16311
|
+
/**
|
|
16312
|
+
* Unique human-readable name of the SecretStore.
|
|
16313
|
+
*/
|
|
16314
|
+
name: string;
|
|
16315
|
+
/**
|
|
16316
|
+
* Tags is a map of key, value pairs.
|
|
16317
|
+
*/
|
|
16318
|
+
tags?: {
|
|
16319
|
+
[key: string]: string;
|
|
16320
|
+
};
|
|
16321
|
+
}
|
|
16129
16322
|
export interface SecretStoreVaultApprole {
|
|
16130
16323
|
/**
|
|
16131
16324
|
* Unique human-readable name of the SecretStore.
|
|
@@ -16230,6 +16423,70 @@ export interface SecretStoreVaultAwsEc2 {
|
|
|
16230
16423
|
[key: string]: string;
|
|
16231
16424
|
};
|
|
16232
16425
|
}
|
|
16426
|
+
export interface SecretStoreVaultAwsEc2CertSsh {
|
|
16427
|
+
/**
|
|
16428
|
+
* The lifetime of certificates issued by this CA represented in minutes.
|
|
16429
|
+
*/
|
|
16430
|
+
issuedCertTtlMinutes: number;
|
|
16431
|
+
/**
|
|
16432
|
+
* Unique human-readable name of the SecretStore.
|
|
16433
|
+
*/
|
|
16434
|
+
name: string;
|
|
16435
|
+
/**
|
|
16436
|
+
* The namespace to make requests within
|
|
16437
|
+
*/
|
|
16438
|
+
namespace?: string;
|
|
16439
|
+
/**
|
|
16440
|
+
* The URL of the Vault to target
|
|
16441
|
+
*/
|
|
16442
|
+
serverAddress: string;
|
|
16443
|
+
/**
|
|
16444
|
+
* The signing role to be used for signing certificates
|
|
16445
|
+
*/
|
|
16446
|
+
signingRole: string;
|
|
16447
|
+
/**
|
|
16448
|
+
* The mount point of the SSH engine configured with the desired CA
|
|
16449
|
+
*/
|
|
16450
|
+
sshMountPoint: string;
|
|
16451
|
+
/**
|
|
16452
|
+
* Tags is a map of key, value pairs.
|
|
16453
|
+
*/
|
|
16454
|
+
tags?: {
|
|
16455
|
+
[key: string]: string;
|
|
16456
|
+
};
|
|
16457
|
+
}
|
|
16458
|
+
export interface SecretStoreVaultAwsEc2CertX509 {
|
|
16459
|
+
/**
|
|
16460
|
+
* The lifetime of certificates issued by this CA represented in minutes.
|
|
16461
|
+
*/
|
|
16462
|
+
issuedCertTtlMinutes: number;
|
|
16463
|
+
/**
|
|
16464
|
+
* Unique human-readable name of the SecretStore.
|
|
16465
|
+
*/
|
|
16466
|
+
name: string;
|
|
16467
|
+
/**
|
|
16468
|
+
* The namespace to make requests within
|
|
16469
|
+
*/
|
|
16470
|
+
namespace?: string;
|
|
16471
|
+
/**
|
|
16472
|
+
* The mount point of the PKI engine configured with the desired CA
|
|
16473
|
+
*/
|
|
16474
|
+
pkiMountPoint: string;
|
|
16475
|
+
/**
|
|
16476
|
+
* The URL of the Vault to target
|
|
16477
|
+
*/
|
|
16478
|
+
serverAddress: string;
|
|
16479
|
+
/**
|
|
16480
|
+
* The signing role to be used for signing certificates
|
|
16481
|
+
*/
|
|
16482
|
+
signingRole: string;
|
|
16483
|
+
/**
|
|
16484
|
+
* Tags is a map of key, value pairs.
|
|
16485
|
+
*/
|
|
16486
|
+
tags?: {
|
|
16487
|
+
[key: string]: string;
|
|
16488
|
+
};
|
|
16489
|
+
}
|
|
16233
16490
|
export interface SecretStoreVaultAwsIam {
|
|
16234
16491
|
/**
|
|
16235
16492
|
* Unique human-readable name of the SecretStore.
|
|
@@ -16250,6 +16507,70 @@ export interface SecretStoreVaultAwsIam {
|
|
|
16250
16507
|
[key: string]: string;
|
|
16251
16508
|
};
|
|
16252
16509
|
}
|
|
16510
|
+
export interface SecretStoreVaultAwsIamCertSsh {
|
|
16511
|
+
/**
|
|
16512
|
+
* The lifetime of certificates issued by this CA represented in minutes.
|
|
16513
|
+
*/
|
|
16514
|
+
issuedCertTtlMinutes: number;
|
|
16515
|
+
/**
|
|
16516
|
+
* Unique human-readable name of the SecretStore.
|
|
16517
|
+
*/
|
|
16518
|
+
name: string;
|
|
16519
|
+
/**
|
|
16520
|
+
* The namespace to make requests within
|
|
16521
|
+
*/
|
|
16522
|
+
namespace?: string;
|
|
16523
|
+
/**
|
|
16524
|
+
* The URL of the Vault to target
|
|
16525
|
+
*/
|
|
16526
|
+
serverAddress: string;
|
|
16527
|
+
/**
|
|
16528
|
+
* The signing role to be used for signing certificates
|
|
16529
|
+
*/
|
|
16530
|
+
signingRole: string;
|
|
16531
|
+
/**
|
|
16532
|
+
* The mount point of the SSH engine configured with the desired CA
|
|
16533
|
+
*/
|
|
16534
|
+
sshMountPoint: string;
|
|
16535
|
+
/**
|
|
16536
|
+
* Tags is a map of key, value pairs.
|
|
16537
|
+
*/
|
|
16538
|
+
tags?: {
|
|
16539
|
+
[key: string]: string;
|
|
16540
|
+
};
|
|
16541
|
+
}
|
|
16542
|
+
export interface SecretStoreVaultAwsIamCertX509 {
|
|
16543
|
+
/**
|
|
16544
|
+
* The lifetime of certificates issued by this CA represented in minutes.
|
|
16545
|
+
*/
|
|
16546
|
+
issuedCertTtlMinutes: number;
|
|
16547
|
+
/**
|
|
16548
|
+
* Unique human-readable name of the SecretStore.
|
|
16549
|
+
*/
|
|
16550
|
+
name: string;
|
|
16551
|
+
/**
|
|
16552
|
+
* The namespace to make requests within
|
|
16553
|
+
*/
|
|
16554
|
+
namespace?: string;
|
|
16555
|
+
/**
|
|
16556
|
+
* The mount point of the PKI engine configured with the desired CA
|
|
16557
|
+
*/
|
|
16558
|
+
pkiMountPoint: string;
|
|
16559
|
+
/**
|
|
16560
|
+
* The URL of the Vault to target
|
|
16561
|
+
*/
|
|
16562
|
+
serverAddress: string;
|
|
16563
|
+
/**
|
|
16564
|
+
* The signing role to be used for signing certificates
|
|
16565
|
+
*/
|
|
16566
|
+
signingRole: string;
|
|
16567
|
+
/**
|
|
16568
|
+
* Tags is a map of key, value pairs.
|
|
16569
|
+
*/
|
|
16570
|
+
tags?: {
|
|
16571
|
+
[key: string]: string;
|
|
16572
|
+
};
|
|
16573
|
+
}
|
|
16253
16574
|
export interface SecretStoreVaultTls {
|
|
16254
16575
|
/**
|
|
16255
16576
|
* A path to a CA file accessible by a Node
|
package/workflow.d.ts
CHANGED
|
@@ -10,8 +10,12 @@ import * as pulumi from "@pulumi/pulumi";
|
|
|
10
10
|
* import * as sdm from "@pierskarsenbarg/sdm";
|
|
11
11
|
*
|
|
12
12
|
* // Create approval workflows first
|
|
13
|
-
* const autoGrant = new sdm.ApprovalWorkflow("
|
|
14
|
-
*
|
|
13
|
+
* const autoGrant = new sdm.ApprovalWorkflow("auto_grant", {
|
|
14
|
+
* name: "Auto Grant Example",
|
|
15
|
+
* approvalMode: "automatic",
|
|
16
|
+
* });
|
|
17
|
+
* const manualApproval = new sdm.ApprovalWorkflow("manual_approval", {
|
|
18
|
+
* name: "Manual Approval Example",
|
|
15
19
|
* approvalMode: "manual",
|
|
16
20
|
* approvalSteps: [{
|
|
17
21
|
* quantifier: "any",
|
|
@@ -22,7 +26,8 @@ import * as pulumi from "@pulumi/pulumi";
|
|
|
22
26
|
* }],
|
|
23
27
|
* });
|
|
24
28
|
* // Create workflows that reference the approval workflows
|
|
25
|
-
* const autoGrantWorkflow = new sdm.Workflow("
|
|
29
|
+
* const autoGrantWorkflow = new sdm.Workflow("auto_grant_workflow", {
|
|
30
|
+
* name: "auto grant workflow example",
|
|
26
31
|
* approvalFlowId: autoGrant.id,
|
|
27
32
|
* enabled: true,
|
|
28
33
|
* accessRules: JSON.stringify([{
|
|
@@ -32,7 +37,8 @@ import * as pulumi from "@pulumi/pulumi";
|
|
|
32
37
|
* },
|
|
33
38
|
* }]),
|
|
34
39
|
* });
|
|
35
|
-
* const manualApprovalWorkflow = new sdm.Workflow("
|
|
40
|
+
* const manualApprovalWorkflow = new sdm.Workflow("manual_approval_workflow", {
|
|
41
|
+
* name: "manual approval workflow example",
|
|
36
42
|
* approvalFlowId: manualApproval.id,
|
|
37
43
|
* enabled: true,
|
|
38
44
|
* accessRules: JSON.stringify([{
|
package/workflow.js
CHANGED
|
@@ -16,8 +16,12 @@ const utilities = require("./utilities");
|
|
|
16
16
|
* import * as sdm from "@pierskarsenbarg/sdm";
|
|
17
17
|
*
|
|
18
18
|
* // Create approval workflows first
|
|
19
|
-
* const autoGrant = new sdm.ApprovalWorkflow("
|
|
20
|
-
*
|
|
19
|
+
* const autoGrant = new sdm.ApprovalWorkflow("auto_grant", {
|
|
20
|
+
* name: "Auto Grant Example",
|
|
21
|
+
* approvalMode: "automatic",
|
|
22
|
+
* });
|
|
23
|
+
* const manualApproval = new sdm.ApprovalWorkflow("manual_approval", {
|
|
24
|
+
* name: "Manual Approval Example",
|
|
21
25
|
* approvalMode: "manual",
|
|
22
26
|
* approvalSteps: [{
|
|
23
27
|
* quantifier: "any",
|
|
@@ -28,7 +32,8 @@ const utilities = require("./utilities");
|
|
|
28
32
|
* }],
|
|
29
33
|
* });
|
|
30
34
|
* // Create workflows that reference the approval workflows
|
|
31
|
-
* const autoGrantWorkflow = new sdm.Workflow("
|
|
35
|
+
* const autoGrantWorkflow = new sdm.Workflow("auto_grant_workflow", {
|
|
36
|
+
* name: "auto grant workflow example",
|
|
32
37
|
* approvalFlowId: autoGrant.id,
|
|
33
38
|
* enabled: true,
|
|
34
39
|
* accessRules: JSON.stringify([{
|
|
@@ -38,7 +43,8 @@ const utilities = require("./utilities");
|
|
|
38
43
|
* },
|
|
39
44
|
* }]),
|
|
40
45
|
* });
|
|
41
|
-
* const manualApprovalWorkflow = new sdm.Workflow("
|
|
46
|
+
* const manualApprovalWorkflow = new sdm.Workflow("manual_approval_workflow", {
|
|
47
|
+
* name: "manual approval workflow example",
|
|
42
48
|
* approvalFlowId: manualApproval.id,
|
|
43
49
|
* enabled: true,
|
|
44
50
|
* accessRules: JSON.stringify([{
|
package/workflow.js.map
CHANGED
|
@@ -1 +1 @@
|
|
|
1
|
-
{"version":3,"file":"workflow.js","sourceRoot":"","sources":["../workflow.ts"],"names":[],"mappings":";AAAA,sEAAsE;AACtE,iFAAiF;;;AAEjF,yCAAyC;AACzC,yCAAyC;AAEzC
|
|
1
|
+
{"version":3,"file":"workflow.js","sourceRoot":"","sources":["../workflow.ts"],"names":[],"mappings":";AAAA,sEAAsE;AACtE,iFAAiF;;;AAEjF,yCAAyC;AACzC,yCAAyC;AAEzC;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;GA2DG;AACH,MAAa,QAAS,SAAQ,MAAM,CAAC,cAAc;IAC/C;;;;;;;;OAQG;IACI,MAAM,CAAC,GAAG,CAAC,IAAY,EAAE,EAA2B,EAAE,KAAqB,EAAE,IAAmC;QACnH,OAAO,IAAI,QAAQ,CAAC,IAAI,EAAO,KAAK,EAAE,EAAE,GAAG,IAAI,EAAE,EAAE,EAAE,EAAE,EAAE,CAAC,CAAC;IAC/D,CAAC;IAKD;;;OAGG;IACI,MAAM,CAAC,UAAU,CAAC,GAAQ;QAC7B,IAAI,GAAG,KAAK,SAAS,IAAI,GAAG,KAAK,IAAI,EAAE;YACnC,OAAO,KAAK,CAAC;SAChB;QACD,OAAO,GAAG,CAAC,cAAc,CAAC,KAAK,QAAQ,CAAC,YAAY,CAAC;IACzD,CAAC;IAiDD,YAAY,IAAY,EAAE,WAA0C,EAAE,IAAmC;QACrG,IAAI,cAAc,GAAkB,EAAE,CAAC;QACvC,IAAI,GAAG,IAAI,IAAI,EAAE,CAAC;QAClB,IAAI,IAAI,CAAC,EAAE,EAAE;YACT,MAAM,KAAK,GAAG,WAAwC,CAAC;YACvD,cAAc,CAAC,4BAA4B,CAAC,GAAG,KAAK,EAAE,0BAA0B,CAAC;YACjF,cAAc,CAAC,0BAA0B,CAAC,GAAG,KAAK,EAAE,wBAAwB,CAAC;YAC7E,cAAc,CAAC,aAAa,CAAC,GAAG,KAAK,EAAE,WAAW,CAAC;YACnD,cAAc,CAAC,gBAAgB,CAAC,GAAG,KAAK,EAAE,cAAc,CAAC;YACzD,cAAc,CAAC,WAAW,CAAC,GAAG,KAAK,EAAE,SAAS,CAAC;YAC/C,cAAc,CAAC,aAAa,CAAC,GAAG,KAAK,EAAE,WAAW,CAAC;YACnD,cAAc,CAAC,SAAS,CAAC,GAAG,KAAK,EAAE,OAAO,CAAC;YAC3C,cAAc,CAAC,MAAM,CAAC,GAAG,KAAK,EAAE,IAAI,CAAC;YACrC,cAAc,CAAC,QAAQ,CAAC,GAAG,KAAK,EAAE,MAAM,CAAC;SAC5C;aAAM;YACH,MAAM,IAAI,GAAG,WAAuC,CAAC;YACrD,cAAc,CAAC,4BAA4B,CAAC,GAAG,IAAI,EAAE,0BAA0B,CAAC;YAChF,cAAc,CAAC,0BAA0B,CAAC,GAAG,IAAI,EAAE,wBAAwB,CAAC;YAC5E,cAAc,CAAC,aAAa,CAAC,GAAG,IAAI,EAAE,WAAW,CAAC;YAClD,cAAc,CAAC,gBAAgB,CAAC,GAAG,IAAI,EAAE,cAAc,CAAC;YACxD,cAAc,CAAC,WAAW,CAAC,GAAG,IAAI,EAAE,SAAS,CAAC;YAC9C,cAAc,CAAC,aAAa,CAAC,GAAG,IAAI,EAAE,WAAW,CAAC;YAClD,cAAc,CAAC,SAAS,CAAC,GAAG,IAAI,EAAE,OAAO,CAAC;YAC1C,cAAc,CAAC,MAAM,CAAC,GAAG,IAAI,EAAE,IAAI,CAAC;YACpC,cAAc,CAAC,QAAQ,CAAC,GAAG,IAAI,EAAE,MAAM,CAAC;SAC3C;QACD,IAAI,GAAG,MAAM,CAAC,YAAY,CAAC,SAAS,CAAC,oBAAoB,EAAE,EAAE,IAAI,CAAC,CAAC;QACnE,KAAK,CAAC,QAAQ,CAAC,YAAY,EAAE,IAAI,EAAE,cAAc,EAAE,IAAI,CAAC,CAAC;IAC7D,CAAC;;AAvGL,4BAwGC;AA1FG,gBAAgB;AACO,qBAAY,GAAG,6BAA6B,CAAC"}
|
package/workflowRole.d.ts
CHANGED
|
@@ -8,11 +8,11 @@ import * as pulumi from "@pulumi/pulumi";
|
|
|
8
8
|
* import * as pulumi from "@pulumi/pulumi";
|
|
9
9
|
* import * as sdm from "@pierskarsenbarg/sdm";
|
|
10
10
|
*
|
|
11
|
-
* const workflowRoleExample = new sdm.WorkflowRole("
|
|
12
|
-
* workflowId:
|
|
13
|
-
* roleId:
|
|
11
|
+
* const workflowRoleExample = new sdm.WorkflowRole("workflow_role_example", {
|
|
12
|
+
* workflowId: manualApprovalWorkflow.id,
|
|
13
|
+
* roleId: developers.id,
|
|
14
14
|
* });
|
|
15
|
-
* const workflowRoleWithIds = new sdm.WorkflowRole("
|
|
15
|
+
* const workflowRoleWithIds = new sdm.WorkflowRole("workflow_role_with_ids", {
|
|
16
16
|
* workflowId: "w-1234567890abcdef",
|
|
17
17
|
* roleId: "r-1234567890abcdef",
|
|
18
18
|
* });
|
package/workflowRole.js
CHANGED
|
@@ -14,11 +14,11 @@ const utilities = require("./utilities");
|
|
|
14
14
|
* import * as pulumi from "@pulumi/pulumi";
|
|
15
15
|
* import * as sdm from "@pierskarsenbarg/sdm";
|
|
16
16
|
*
|
|
17
|
-
* const workflowRoleExample = new sdm.WorkflowRole("
|
|
18
|
-
* workflowId:
|
|
19
|
-
* roleId:
|
|
17
|
+
* const workflowRoleExample = new sdm.WorkflowRole("workflow_role_example", {
|
|
18
|
+
* workflowId: manualApprovalWorkflow.id,
|
|
19
|
+
* roleId: developers.id,
|
|
20
20
|
* });
|
|
21
|
-
* const workflowRoleWithIds = new sdm.WorkflowRole("
|
|
21
|
+
* const workflowRoleWithIds = new sdm.WorkflowRole("workflow_role_with_ids", {
|
|
22
22
|
* workflowId: "w-1234567890abcdef",
|
|
23
23
|
* roleId: "r-1234567890abcdef",
|
|
24
24
|
* });
|