@ptfm/chainguard 0.1.28

package/bin/getVersions.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"getVersions.js","sourceRoot":"","sources":["../getVersions.ts"],"names":[],"mappings":";AAAA,sEAAsE;AACtE,iFAAiF;;;AAEjF,yCAAyC;AAGzC,yCAAyC;AAEzC,SAAgB,WAAW,CAAC,IAAqB,EAAE,IAA2B;IAC1E,IAAI,GAAG,MAAM,CAAC,YAAY,CAAC,SAAS,CAAC,oBAAoB,EAAE,EAAE,IAAI,IAAI,EAAE,CAAC,CAAC;IACzE,OAAO,MAAM,CAAC,OAAO,CAAC,MAAM,CAAC,0CAA0C,EAAE;QACrE,SAAS,EAAE,IAAI,CAAC,OAAO;QACvB,SAAS,EAAE,IAAI,CAAC,OAAO;KAC1B,EAAE,IAAI,EAAE,SAAS,CAAC,UAAU,EAAE,CAAC,CAAC;AACrC,CAAC;AAND,kCAMC;AAwBD,SAAgB,iBAAiB,CAAC,IAA2B,EAAE,IAAiC;IAC5F,IAAI,GAAG,MAAM,CAAC,YAAY,CAAC,SAAS,CAAC,oBAAoB,EAAE,EAAE,IAAI,IAAI,EAAE,CAAC,CAAC;IACzE,OAAO,MAAM,CAAC,OAAO,CAAC,YAAY,CAAC,0CAA0C,EAAE;QAC3E,SAAS,EAAE,IAAI,CAAC,OAAO;QACvB,SAAS,EAAE,IAAI,CAAC,OAAO;KAC1B,EAAE,IAAI,EAAE,SAAS,CAAC,UAAU,EAAE,CAAC,CAAC;AACrC,CAAC;AAND,8CAMC"}

package/bin/group.d.ts

@@ -0,0 +1,87 @@
+import * as pulumi from "@pulumi/pulumi";
+export declare class Group extends pulumi.CustomResource {
+    /**
+     * Get an existing Group resource's state with the given name, ID, and optional extra
+     * properties used to qualify the lookup.
+     *
+     * @param name The _unique_ name of the resulting resource.
+     * @param id The _unique_ provider ID of the resource to lookup.
+     * @param state Any extra arguments used during the lookup.
+     * @param opts Optional settings to control the behavior of the CustomResource.
+     */
+    static get(name: string, id: pulumi.Input<pulumi.ID>, state?: GroupState, opts?: pulumi.CustomResourceOptions): Group;
+    /**
+     * Returns true if the given object is an instance of Group.  This is designed to work even
+     * when multiple copies of the Pulumi SDK have been loaded into the same process.
+     */
+    static isInstance(obj: any): obj is Group;
+    /**
+     * Description of this IAM group.
+     */
+    readonly description: pulumi.Output<string | undefined>;
+    /**
+     * Name of this IAM group.
+     */
+    readonly name: pulumi.Output<string>;
+    /**
+     * Parent IAM group of this group. If not set, this group is assumed to be a root group.
+     */
+    readonly parentId: pulumi.Output<string | undefined>;
+    /**
+     * Whether the organization has been verified by a Chainguardian. Only applicable to root groups.
+     */
+    readonly verified: pulumi.Output<boolean | undefined>;
+    readonly verifiedProtection: pulumi.Output<boolean>;
+    /**
+     * Create a Group resource with the given unique name, arguments, and options.
+     *
+     * @param name The _unique_ name of the resource.
+     * @param args The arguments to use to populate this resource's properties.
+     * @param opts A bag of options that control this resource's behavior.
+     */
+    constructor(name: string, args?: GroupArgs, opts?: pulumi.CustomResourceOptions);
+}
+/**
+ * Input properties used for looking up and filtering Group resources.
+ */
+export interface GroupState {
+    /**
+     * Description of this IAM group.
+     */
+    description?: pulumi.Input<string>;
+    /**
+     * Name of this IAM group.
+     */
+    name?: pulumi.Input<string>;
+    /**
+     * Parent IAM group of this group. If not set, this group is assumed to be a root group.
+     */
+    parentId?: pulumi.Input<string>;
+    /**
+     * Whether the organization has been verified by a Chainguardian. Only applicable to root groups.
+     */
+    verified?: pulumi.Input<boolean>;
+    verifiedProtection?: pulumi.Input<boolean>;
+}
+/**
+ * The set of arguments for constructing a Group resource.
+ */
+export interface GroupArgs {
+    /**
+     * Description of this IAM group.
+     */
+    description?: pulumi.Input<string>;
+    /**
+     * Name of this IAM group.
+     */
+    name?: pulumi.Input<string>;
+    /**
+     * Parent IAM group of this group. If not set, this group is assumed to be a root group.
+     */
+    parentId?: pulumi.Input<string>;
+    /**
+     * Whether the organization has been verified by a Chainguardian. Only applicable to root groups.
+     */
+    verified?: pulumi.Input<boolean>;
+    verifiedProtection?: pulumi.Input<boolean>;
+}

package/bin/group.js

@@ -0,0 +1,57 @@
+"use strict";
+// *** WARNING: this file was generated by pulumi-language-nodejs. ***
+// *** Do not edit by hand unless you're certain you know what you are doing! ***
+Object.defineProperty(exports, "__esModule", { value: true });
+exports.Group = void 0;
+const pulumi = require("@pulumi/pulumi");
+const utilities = require("./utilities");
+class Group extends pulumi.CustomResource {
+    /**
+     * Get an existing Group resource's state with the given name, ID, and optional extra
+     * properties used to qualify the lookup.
+     *
+     * @param name The _unique_ name of the resulting resource.
+     * @param id The _unique_ provider ID of the resource to lookup.
+     * @param state Any extra arguments used during the lookup.
+     * @param opts Optional settings to control the behavior of the CustomResource.
+     */
+    static get(name, id, state, opts) {
+        return new Group(name, state, Object.assign(Object.assign({}, opts), { id: id }));
+    }
+    /**
+     * Returns true if the given object is an instance of Group.  This is designed to work even
+     * when multiple copies of the Pulumi SDK have been loaded into the same process.
+     */
+    static isInstance(obj) {
+        if (obj === undefined || obj === null) {
+            return false;
+        }
+        return obj['__pulumiType'] === Group.__pulumiType;
+    }
+    constructor(name, argsOrState, opts) {
+        let resourceInputs = {};
+        opts = opts || {};
+        if (opts.id) {
+            const state = argsOrState;
+            resourceInputs["description"] = state ? state.description : undefined;
+            resourceInputs["name"] = state ? state.name : undefined;
+            resourceInputs["parentId"] = state ? state.parentId : undefined;
+            resourceInputs["verified"] = state ? state.verified : undefined;
+            resourceInputs["verifiedProtection"] = state ? state.verifiedProtection : undefined;
+        }
+        else {
+            const args = argsOrState;
+            resourceInputs["description"] = args ? args.description : undefined;
+            resourceInputs["name"] = args ? args.name : undefined;
+            resourceInputs["parentId"] = args ? args.parentId : undefined;
+            resourceInputs["verified"] = args ? args.verified : undefined;
+            resourceInputs["verifiedProtection"] = args ? args.verifiedProtection : undefined;
+        }
+        opts = pulumi.mergeOptions(utilities.resourceOptsDefaults(), opts);
+        super(Group.__pulumiType, name, resourceInputs, opts, false /*dependency*/, utilities.getPackage());
+    }
+}
+exports.Group = Group;
+/** @internal */
+Group.__pulumiType = 'chainguard:index/group:Group';
+//# sourceMappingURL=group.js.map

package/bin/group.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"group.js","sourceRoot":"","sources":["../group.ts"],"names":[],"mappings":";AAAA,sEAAsE;AACtE,iFAAiF;;;AAEjF,yCAAyC;AACzC,yCAAyC;AAEzC,MAAa,KAAM,SAAQ,MAAM,CAAC,cAAc;IAC5C;;;;;;;;OAQG;IACI,MAAM,CAAC,GAAG,CAAC,IAAY,EAAE,EAA2B,EAAE,KAAkB,EAAE,IAAmC;QAChH,OAAO,IAAI,KAAK,CAAC,IAAI,EAAO,KAAK,kCAAO,IAAI,KAAE,EAAE,EAAE,EAAE,IAAG,CAAC;IAC5D,CAAC;IAKD;;;OAGG;IACI,MAAM,CAAC,UAAU,CAAC,GAAQ;QAC7B,IAAI,GAAG,KAAK,SAAS,IAAI,GAAG,KAAK,IAAI,EAAE;YACnC,OAAO,KAAK,CAAC;SAChB;QACD,OAAO,GAAG,CAAC,cAAc,CAAC,KAAK,KAAK,CAAC,YAAY,CAAC;IACtD,CAAC;IA4BD,YAAY,IAAY,EAAE,WAAoC,EAAE,IAAmC;QAC/F,IAAI,cAAc,GAAkB,EAAE,CAAC;QACvC,IAAI,GAAG,IAAI,IAAI,EAAE,CAAC;QAClB,IAAI,IAAI,CAAC,EAAE,EAAE;YACT,MAAM,KAAK,GAAG,WAAqC,CAAC;YACpD,cAAc,CAAC,aAAa,CAAC,GAAG,KAAK,CAAC,CAAC,CAAC,KAAK,CAAC,WAAW,CAAC,CAAC,CAAC,SAAS,CAAC;YACtE,cAAc,CAAC,MAAM,CAAC,GAAG,KAAK,CAAC,CAAC,CAAC,KAAK,CAAC,IAAI,CAAC,CAAC,CAAC,SAAS,CAAC;YACxD,cAAc,CAAC,UAAU,CAAC,GAAG,KAAK,CAAC,CAAC,CAAC,KAAK,CAAC,QAAQ,CAAC,CAAC,CAAC,SAAS,CAAC;YAChE,cAAc,CAAC,UAAU,CAAC,GAAG,KAAK,CAAC,CAAC,CAAC,KAAK,CAAC,QAAQ,CAAC,CAAC,CAAC,SAAS,CAAC;YAChE,cAAc,CAAC,oBAAoB,CAAC,GAAG,KAAK,CAAC,CAAC,CAAC,KAAK,CAAC,kBAAkB,CAAC,CAAC,CAAC,SAAS,CAAC;SACvF;aAAM;YACH,MAAM,IAAI,GAAG,WAAoC,CAAC;YAClD,cAAc,CAAC,aAAa,CAAC,GAAG,IAAI,CAAC,CAAC,CAAC,IAAI,CAAC,WAAW,CAAC,CAAC,CAAC,SAAS,CAAC;YACpE,cAAc,CAAC,MAAM,CAAC,GAAG,IAAI,CAAC,CAAC,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC,CAAC,SAAS,CAAC;YACtD,cAAc,CAAC,UAAU,CAAC,GAAG,IAAI,CAAC,CAAC,CAAC,IAAI,CAAC,QAAQ,CAAC,CAAC,CAAC,SAAS,CAAC;YAC9D,cAAc,CAAC,UAAU,CAAC,GAAG,IAAI,CAAC,CAAC,CAAC,IAAI,CAAC,QAAQ,CAAC,CAAC,CAAC,SAAS,CAAC;YAC9D,cAAc,CAAC,oBAAoB,CAAC,GAAG,IAAI,CAAC,CAAC,CAAC,IAAI,CAAC,kBAAkB,CAAC,CAAC,CAAC,SAAS,CAAC;SACrF;QACD,IAAI,GAAG,MAAM,CAAC,YAAY,CAAC,SAAS,CAAC,oBAAoB,EAAE,EAAE,IAAI,CAAC,CAAC;QACnE,KAAK,CAAC,KAAK,CAAC,YAAY,EAAE,IAAI,EAAE,cAAc,EAAE,IAAI,EAAE,KAAK,CAAC,cAAc,EAAE,SAAS,CAAC,UAAU,EAAE,CAAC,CAAC;IACxG,CAAC;;AA1EL,sBA2EC;AA7DG,gBAAgB;AACO,kBAAY,GAAG,8BAA8B,CAAC"}

package/bin/groupInvite.d.ts

@@ -0,0 +1,92 @@
+import * as pulumi from "@pulumi/pulumi";
+export declare class GroupInvite extends pulumi.CustomResource {
+    /**
+     * Get an existing GroupInvite resource's state with the given name, ID, and optional extra
+     * properties used to qualify the lookup.
+     *
+     * @param name The _unique_ name of the resulting resource.
+     * @param id The _unique_ provider ID of the resource to lookup.
+     * @param state Any extra arguments used during the lookup.
+     * @param opts Optional settings to control the behavior of the CustomResource.
+     */
+    static get(name: string, id: pulumi.Input<pulumi.ID>, state?: GroupInviteState, opts?: pulumi.CustomResourceOptions): GroupInvite;
+    /**
+     * Returns true if the given object is an instance of GroupInvite.  This is designed to work even
+     * when multiple copies of the Pulumi SDK have been loaded into the same process.
+     */
+    static isInstance(obj: any): obj is GroupInvite;
+    /**
+     * A time-bounded token that may be used at registration to obtain access to a prespecified group with a prespecified role.
+     */
+    readonly code: pulumi.Output<string>;
+    /**
+     * The email address of the identity that is allowed to accept this invite code.
+     */
+    readonly email: pulumi.Output<string | undefined>;
+    /**
+     * The RFC3339 encoded date and time at which this invitation will no longer be valid.
+     */
+    readonly expiration: pulumi.Output<string>;
+    /**
+     * The Group to which this invite code grants access.
+     */
+    readonly group: pulumi.Output<string>;
+    /**
+     * The role that this invite code grants.
+     */
+    readonly role: pulumi.Output<string>;
+    /**
+     * Create a GroupInvite resource with the given unique name, arguments, and options.
+     *
+     * @param name The _unique_ name of the resource.
+     * @param args The arguments to use to populate this resource's properties.
+     * @param opts A bag of options that control this resource's behavior.
+     */
+    constructor(name: string, args: GroupInviteArgs, opts?: pulumi.CustomResourceOptions);
+}
+/**
+ * Input properties used for looking up and filtering GroupInvite resources.
+ */
+export interface GroupInviteState {
+    /**
+     * A time-bounded token that may be used at registration to obtain access to a prespecified group with a prespecified role.
+     */
+    code?: pulumi.Input<string>;
+    /**
+     * The email address of the identity that is allowed to accept this invite code.
+     */
+    email?: pulumi.Input<string>;
+    /**
+     * The RFC3339 encoded date and time at which this invitation will no longer be valid.
+     */
+    expiration?: pulumi.Input<string>;
+    /**
+     * The Group to which this invite code grants access.
+     */
+    group?: pulumi.Input<string>;
+    /**
+     * The role that this invite code grants.
+     */
+    role?: pulumi.Input<string>;
+}
+/**
+ * The set of arguments for constructing a GroupInvite resource.
+ */
+export interface GroupInviteArgs {
+    /**
+     * The email address of the identity that is allowed to accept this invite code.
+     */
+    email?: pulumi.Input<string>;
+    /**
+     * The RFC3339 encoded date and time at which this invitation will no longer be valid.
+     */
+    expiration: pulumi.Input<string>;
+    /**
+     * The Group to which this invite code grants access.
+     */
+    group: pulumi.Input<string>;
+    /**
+     * The role that this invite code grants.
+     */
+    role: pulumi.Input<string>;
+}

package/bin/groupInvite.js

@@ -0,0 +1,68 @@
+"use strict";
+// *** WARNING: this file was generated by pulumi-language-nodejs. ***
+// *** Do not edit by hand unless you're certain you know what you are doing! ***
+Object.defineProperty(exports, "__esModule", { value: true });
+exports.GroupInvite = void 0;
+const pulumi = require("@pulumi/pulumi");
+const utilities = require("./utilities");
+class GroupInvite extends pulumi.CustomResource {
+    /**
+     * Get an existing GroupInvite resource's state with the given name, ID, and optional extra
+     * properties used to qualify the lookup.
+     *
+     * @param name The _unique_ name of the resulting resource.
+     * @param id The _unique_ provider ID of the resource to lookup.
+     * @param state Any extra arguments used during the lookup.
+     * @param opts Optional settings to control the behavior of the CustomResource.
+     */
+    static get(name, id, state, opts) {
+        return new GroupInvite(name, state, Object.assign(Object.assign({}, opts), { id: id }));
+    }
+    /**
+     * Returns true if the given object is an instance of GroupInvite.  This is designed to work even
+     * when multiple copies of the Pulumi SDK have been loaded into the same process.
+     */
+    static isInstance(obj) {
+        if (obj === undefined || obj === null) {
+            return false;
+        }
+        return obj['__pulumiType'] === GroupInvite.__pulumiType;
+    }
+    constructor(name, argsOrState, opts) {
+        let resourceInputs = {};
+        opts = opts || {};
+        if (opts.id) {
+            const state = argsOrState;
+            resourceInputs["code"] = state ? state.code : undefined;
+            resourceInputs["email"] = state ? state.email : undefined;
+            resourceInputs["expiration"] = state ? state.expiration : undefined;
+            resourceInputs["group"] = state ? state.group : undefined;
+            resourceInputs["role"] = state ? state.role : undefined;
+        }
+        else {
+            const args = argsOrState;
+            if ((!args || args.expiration === undefined) && !opts.urn) {
+                throw new Error("Missing required property 'expiration'");
+            }
+            if ((!args || args.group === undefined) && !opts.urn) {
+                throw new Error("Missing required property 'group'");
+            }
+            if ((!args || args.role === undefined) && !opts.urn) {
+                throw new Error("Missing required property 'role'");
+            }
+            resourceInputs["email"] = args ? args.email : undefined;
+            resourceInputs["expiration"] = args ? args.expiration : undefined;
+            resourceInputs["group"] = args ? args.group : undefined;
+            resourceInputs["role"] = args ? args.role : undefined;
+            resourceInputs["code"] = undefined /*out*/;
+        }
+        opts = pulumi.mergeOptions(utilities.resourceOptsDefaults(), opts);
+        const secretOpts = { additionalSecretOutputs: ["code"] };
+        opts = pulumi.mergeOptions(opts, secretOpts);
+        super(GroupInvite.__pulumiType, name, resourceInputs, opts, false /*dependency*/, utilities.getPackage());
+    }
+}
+exports.GroupInvite = GroupInvite;
+/** @internal */
+GroupInvite.__pulumiType = 'chainguard:index/groupInvite:GroupInvite';
+//# sourceMappingURL=groupInvite.js.map

package/bin/groupInvite.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"groupInvite.js","sourceRoot":"","sources":["../groupInvite.ts"],"names":[],"mappings":";AAAA,sEAAsE;AACtE,iFAAiF;;;AAEjF,yCAAyC;AACzC,yCAAyC;AAEzC,MAAa,WAAY,SAAQ,MAAM,CAAC,cAAc;IAClD;;;;;;;;OAQG;IACI,MAAM,CAAC,GAAG,CAAC,IAAY,EAAE,EAA2B,EAAE,KAAwB,EAAE,IAAmC;QACtH,OAAO,IAAI,WAAW,CAAC,IAAI,EAAO,KAAK,kCAAO,IAAI,KAAE,EAAE,EAAE,EAAE,IAAG,CAAC;IAClE,CAAC;IAKD;;;OAGG;IACI,MAAM,CAAC,UAAU,CAAC,GAAQ;QAC7B,IAAI,GAAG,KAAK,SAAS,IAAI,GAAG,KAAK,IAAI,EAAE;YACnC,OAAO,KAAK,CAAC;SAChB;QACD,OAAO,GAAG,CAAC,cAAc,CAAC,KAAK,WAAW,CAAC,YAAY,CAAC;IAC5D,CAAC;IA+BD,YAAY,IAAY,EAAE,WAAgD,EAAE,IAAmC;QAC3G,IAAI,cAAc,GAAkB,EAAE,CAAC;QACvC,IAAI,GAAG,IAAI,IAAI,EAAE,CAAC;QAClB,IAAI,IAAI,CAAC,EAAE,EAAE;YACT,MAAM,KAAK,GAAG,WAA2C,CAAC;YAC1D,cAAc,CAAC,MAAM,CAAC,GAAG,KAAK,CAAC,CAAC,CAAC,KAAK,CAAC,IAAI,CAAC,CAAC,CAAC,SAAS,CAAC;YACxD,cAAc,CAAC,OAAO,CAAC,GAAG,KAAK,CAAC,CAAC,CAAC,KAAK,CAAC,KAAK,CAAC,CAAC,CAAC,SAAS,CAAC;YAC1D,cAAc,CAAC,YAAY,CAAC,GAAG,KAAK,CAAC,CAAC,CAAC,KAAK,CAAC,UAAU,CAAC,CAAC,CAAC,SAAS,CAAC;YACpE,cAAc,CAAC,OAAO,CAAC,GAAG,KAAK,CAAC,CAAC,CAAC,KAAK,CAAC,KAAK,CAAC,CAAC,CAAC,SAAS,CAAC;YAC1D,cAAc,CAAC,MAAM,CAAC,GAAG,KAAK,CAAC,CAAC,CAAC,KAAK,CAAC,IAAI,CAAC,CAAC,CAAC,SAAS,CAAC;SAC3D;aAAM;YACH,MAAM,IAAI,GAAG,WAA0C,CAAC;YACxD,IAAI,CAAC,CAAC,IAAI,IAAI,IAAI,CAAC,UAAU,KAAK,SAAS,CAAC,IAAI,CAAC,IAAI,CAAC,GAAG,EAAE;gBACvD,MAAM,IAAI,KAAK,CAAC,wCAAwC,CAAC,CAAC;aAC7D;YACD,IAAI,CAAC,CAAC,IAAI,IAAI,IAAI,CAAC,KAAK,KAAK,SAAS,CAAC,IAAI,CAAC,IAAI,CAAC,GAAG,EAAE;gBAClD,MAAM,IAAI,KAAK,CAAC,mCAAmC,CAAC,CAAC;aACxD;YACD,IAAI,CAAC,CAAC,IAAI,IAAI,IAAI,CAAC,IAAI,KAAK,SAAS,CAAC,IAAI,CAAC,IAAI,CAAC,GAAG,EAAE;gBACjD,MAAM,IAAI,KAAK,CAAC,kCAAkC,CAAC,CAAC;aACvD;YACD,cAAc,CAAC,OAAO,CAAC,GAAG,IAAI,CAAC,CAAC,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC,CAAC,SAAS,CAAC;YACxD,cAAc,CAAC,YAAY,CAAC,GAAG,IAAI,CAAC,CAAC,CAAC,IAAI,CAAC,UAAU,CAAC,CAAC,CAAC,SAAS,CAAC;YAClE,cAAc,CAAC,OAAO,CAAC,GAAG,IAAI,CAAC,CAAC,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC,CAAC,SAAS,CAAC;YACxD,cAAc,CAAC,MAAM,CAAC,GAAG,IAAI,CAAC,CAAC,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC,CAAC,SAAS,CAAC;YACtD,cAAc,CAAC,MAAM,CAAC,GAAG,SAAS,CAAC,OAAO,CAAC;SAC9C;QACD,IAAI,GAAG,MAAM,CAAC,YAAY,CAAC,SAAS,CAAC,oBAAoB,EAAE,EAAE,IAAI,CAAC,CAAC;QACnE,MAAM,UAAU,GAAG,EAAE,uBAAuB,EAAE,CAAC,MAAM,CAAC,EAAE,CAAC;QACzD,IAAI,GAAG,MAAM,CAAC,YAAY,CAAC,IAAI,EAAE,UAAU,CAAC,CAAC;QAC7C,KAAK,CAAC,WAAW,CAAC,YAAY,EAAE,IAAI,EAAE,cAAc,EAAE,IAAI,EAAE,KAAK,CAAC,cAAc,EAAE,SAAS,CAAC,UAAU,EAAE,CAAC,CAAC;IAC9G,CAAC;;AAxFL,kCAyFC;AA3EG,gBAAgB;AACO,wBAAY,GAAG,0CAA0C,CAAC"}

package/bin/identity.d.ts

@@ -0,0 +1,122 @@
+import * as pulumi from "@pulumi/pulumi";
+import * as inputs from "./types/input";
+import * as outputs from "./types/output";
+export declare class Identity extends pulumi.CustomResource {
+    /**
+     * Get an existing Identity resource's state with the given name, ID, and optional extra
+     * properties used to qualify the lookup.
+     *
+     * @param name The _unique_ name of the resulting resource.
+     * @param id The _unique_ provider ID of the resource to lookup.
+     * @param state Any extra arguments used during the lookup.
+     * @param opts Optional settings to control the behavior of the CustomResource.
+     */
+    static get(name: string, id: pulumi.Input<pulumi.ID>, state?: IdentityState, opts?: pulumi.CustomResourceOptions): Identity;
+    /**
+     * Returns true if the given object is an instance of Identity.  This is designed to work even
+     * when multiple copies of the Pulumi SDK have been loaded into the same process.
+     */
+    static isInstance(obj: any): obj is Identity;
+    /**
+     * An identity that may be assumed by an AWS identity satisfying the following contains on its GetCallerIdentity values
+     */
+    readonly awsIdentity: pulumi.Output<outputs.IdentityAwsIdentity | undefined>;
+    /**
+     * An identity that may be assumed when its claims satisfy these constraints.
+     */
+    readonly claimMatch: pulumi.Output<outputs.IdentityClaimMatch | undefined>;
+    /**
+     * A longer description of the purpose of this identity.
+     */
+    readonly description: pulumi.Output<string | undefined>;
+    /**
+     * The name of this identity.
+     */
+    readonly name: pulumi.Output<string>;
+    /**
+     * The id of the group containing this identity.
+     */
+    readonly parentId: pulumi.Output<string>;
+    /**
+     * An identity that may be assumed by a particular Chainguard service.
+     */
+    readonly servicePrincipal: pulumi.Output<string | undefined>;
+    /**
+     * An identity that is verified by OIDC, with pre-registered verification keys.
+     */
+    readonly static: pulumi.Output<outputs.IdentityStatic | undefined>;
+    /**
+     * Create a Identity resource with the given unique name, arguments, and options.
+     *
+     * @param name The _unique_ name of the resource.
+     * @param args The arguments to use to populate this resource's properties.
+     * @param opts A bag of options that control this resource's behavior.
+     */
+    constructor(name: string, args: IdentityArgs, opts?: pulumi.CustomResourceOptions);
+}
+/**
+ * Input properties used for looking up and filtering Identity resources.
+ */
+export interface IdentityState {
+    /**
+     * An identity that may be assumed by an AWS identity satisfying the following contains on its GetCallerIdentity values
+     */
+    awsIdentity?: pulumi.Input<inputs.IdentityAwsIdentity>;
+    /**
+     * An identity that may be assumed when its claims satisfy these constraints.
+     */
+    claimMatch?: pulumi.Input<inputs.IdentityClaimMatch>;
+    /**
+     * A longer description of the purpose of this identity.
+     */
+    description?: pulumi.Input<string>;
+    /**
+     * The name of this identity.
+     */
+    name?: pulumi.Input<string>;
+    /**
+     * The id of the group containing this identity.
+     */
+    parentId?: pulumi.Input<string>;
+    /**
+     * An identity that may be assumed by a particular Chainguard service.
+     */
+    servicePrincipal?: pulumi.Input<string>;
+    /**
+     * An identity that is verified by OIDC, with pre-registered verification keys.
+     */
+    static?: pulumi.Input<inputs.IdentityStatic>;
+}
+/**
+ * The set of arguments for constructing a Identity resource.
+ */
+export interface IdentityArgs {
+    /**
+     * An identity that may be assumed by an AWS identity satisfying the following contains on its GetCallerIdentity values
+     */
+    awsIdentity?: pulumi.Input<inputs.IdentityAwsIdentity>;
+    /**
+     * An identity that may be assumed when its claims satisfy these constraints.
+     */
+    claimMatch?: pulumi.Input<inputs.IdentityClaimMatch>;
+    /**
+     * A longer description of the purpose of this identity.
+     */
+    description?: pulumi.Input<string>;
+    /**
+     * The name of this identity.
+     */
+    name?: pulumi.Input<string>;
+    /**
+     * The id of the group containing this identity.
+     */
+    parentId: pulumi.Input<string>;
+    /**
+     * An identity that may be assumed by a particular Chainguard service.
+     */
+    servicePrincipal?: pulumi.Input<string>;
+    /**
+     * An identity that is verified by OIDC, with pre-registered verification keys.
+     */
+    static?: pulumi.Input<inputs.IdentityStatic>;
+}

package/bin/identity.js

@@ -0,0 +1,64 @@
+"use strict";
+// *** WARNING: this file was generated by pulumi-language-nodejs. ***
+// *** Do not edit by hand unless you're certain you know what you are doing! ***
+Object.defineProperty(exports, "__esModule", { value: true });
+exports.Identity = void 0;
+const pulumi = require("@pulumi/pulumi");
+const utilities = require("./utilities");
+class Identity extends pulumi.CustomResource {
+    /**
+     * Get an existing Identity resource's state with the given name, ID, and optional extra
+     * properties used to qualify the lookup.
+     *
+     * @param name The _unique_ name of the resulting resource.
+     * @param id The _unique_ provider ID of the resource to lookup.
+     * @param state Any extra arguments used during the lookup.
+     * @param opts Optional settings to control the behavior of the CustomResource.
+     */
+    static get(name, id, state, opts) {
+        return new Identity(name, state, Object.assign(Object.assign({}, opts), { id: id }));
+    }
+    /**
+     * Returns true if the given object is an instance of Identity.  This is designed to work even
+     * when multiple copies of the Pulumi SDK have been loaded into the same process.
+     */
+    static isInstance(obj) {
+        if (obj === undefined || obj === null) {
+            return false;
+        }
+        return obj['__pulumiType'] === Identity.__pulumiType;
+    }
+    constructor(name, argsOrState, opts) {
+        let resourceInputs = {};
+        opts = opts || {};
+        if (opts.id) {
+            const state = argsOrState;
+            resourceInputs["awsIdentity"] = state ? state.awsIdentity : undefined;
+            resourceInputs["claimMatch"] = state ? state.claimMatch : undefined;
+            resourceInputs["description"] = state ? state.description : undefined;
+            resourceInputs["name"] = state ? state.name : undefined;
+            resourceInputs["parentId"] = state ? state.parentId : undefined;
+            resourceInputs["servicePrincipal"] = state ? state.servicePrincipal : undefined;
+            resourceInputs["static"] = state ? state.static : undefined;
+        }
+        else {
+            const args = argsOrState;
+            if ((!args || args.parentId === undefined) && !opts.urn) {
+                throw new Error("Missing required property 'parentId'");
+            }
+            resourceInputs["awsIdentity"] = args ? args.awsIdentity : undefined;
+            resourceInputs["claimMatch"] = args ? args.claimMatch : undefined;
+            resourceInputs["description"] = args ? args.description : undefined;
+            resourceInputs["name"] = args ? args.name : undefined;
+            resourceInputs["parentId"] = args ? args.parentId : undefined;
+            resourceInputs["servicePrincipal"] = args ? args.servicePrincipal : undefined;
+            resourceInputs["static"] = args ? args.static : undefined;
+        }
+        opts = pulumi.mergeOptions(utilities.resourceOptsDefaults(), opts);
+        super(Identity.__pulumiType, name, resourceInputs, opts, false /*dependency*/, utilities.getPackage());
+    }
+}
+exports.Identity = Identity;
+/** @internal */
+Identity.__pulumiType = 'chainguard:index/identity:Identity';
+//# sourceMappingURL=identity.js.map

package/bin/identity.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"identity.js","sourceRoot":"","sources":["../identity.ts"],"names":[],"mappings":";AAAA,sEAAsE;AACtE,iFAAiF;;;AAEjF,yCAAyC;AAGzC,yCAAyC;AAEzC,MAAa,QAAS,SAAQ,MAAM,CAAC,cAAc;IAC/C;;;;;;;;OAQG;IACI,MAAM,CAAC,GAAG,CAAC,IAAY,EAAE,EAA2B,EAAE,KAAqB,EAAE,IAAmC;QACnH,OAAO,IAAI,QAAQ,CAAC,IAAI,EAAO,KAAK,kCAAO,IAAI,KAAE,EAAE,EAAE,EAAE,IAAG,CAAC;IAC/D,CAAC;IAKD;;;OAGG;IACI,MAAM,CAAC,UAAU,CAAC,GAAQ;QAC7B,IAAI,GAAG,KAAK,SAAS,IAAI,GAAG,KAAK,IAAI,EAAE;YACnC,OAAO,KAAK,CAAC;SAChB;QACD,OAAO,GAAG,CAAC,cAAc,CAAC,KAAK,QAAQ,CAAC,YAAY,CAAC;IACzD,CAAC;IAuCD,YAAY,IAAY,EAAE,WAA0C,EAAE,IAAmC;QACrG,IAAI,cAAc,GAAkB,EAAE,CAAC;QACvC,IAAI,GAAG,IAAI,IAAI,EAAE,CAAC;QAClB,IAAI,IAAI,CAAC,EAAE,EAAE;YACT,MAAM,KAAK,GAAG,WAAwC,CAAC;YACvD,cAAc,CAAC,aAAa,CAAC,GAAG,KAAK,CAAC,CAAC,CAAC,KAAK,CAAC,WAAW,CAAC,CAAC,CAAC,SAAS,CAAC;YACtE,cAAc,CAAC,YAAY,CAAC,GAAG,KAAK,CAAC,CAAC,CAAC,KAAK,CAAC,UAAU,CAAC,CAAC,CAAC,SAAS,CAAC;YACpE,cAAc,CAAC,aAAa,CAAC,GAAG,KAAK,CAAC,CAAC,CAAC,KAAK,CAAC,WAAW,CAAC,CAAC,CAAC,SAAS,CAAC;YACtE,cAAc,CAAC,MAAM,CAAC,GAAG,KAAK,CAAC,CAAC,CAAC,KAAK,CAAC,IAAI,CAAC,CAAC,CAAC,SAAS,CAAC;YACxD,cAAc,CAAC,UAAU,CAAC,GAAG,KAAK,CAAC,CAAC,CAAC,KAAK,CAAC,QAAQ,CAAC,CAAC,CAAC,SAAS,CAAC;YAChE,cAAc,CAAC,kBAAkB,CAAC,GAAG,KAAK,CAAC,CAAC,CAAC,KAAK,CAAC,gBAAgB,CAAC,CAAC,CAAC,SAAS,CAAC;YAChF,cAAc,CAAC,QAAQ,CAAC,GAAG,KAAK,CAAC,CAAC,CAAC,KAAK,CAAC,MAAM,CAAC,CAAC,CAAC,SAAS,CAAC;SAC/D;aAAM;YACH,MAAM,IAAI,GAAG,WAAuC,CAAC;YACrD,IAAI,CAAC,CAAC,IAAI,IAAI,IAAI,CAAC,QAAQ,KAAK,SAAS,CAAC,IAAI,CAAC,IAAI,CAAC,GAAG,EAAE;gBACrD,MAAM,IAAI,KAAK,CAAC,sCAAsC,CAAC,CAAC;aAC3D;YACD,cAAc,CAAC,aAAa,CAAC,GAAG,IAAI,CAAC,CAAC,CAAC,IAAI,CAAC,WAAW,CAAC,CAAC,CAAC,SAAS,CAAC;YACpE,cAAc,CAAC,YAAY,CAAC,GAAG,IAAI,CAAC,CAAC,CAAC,IAAI,CAAC,UAAU,CAAC,CAAC,CAAC,SAAS,CAAC;YAClE,cAAc,CAAC,aAAa,CAAC,GAAG,IAAI,CAAC,CAAC,CAAC,IAAI,CAAC,WAAW,CAAC,CAAC,CAAC,SAAS,CAAC;YACpE,cAAc,CAAC,MAAM,CAAC,GAAG,IAAI,CAAC,CAAC,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC,CAAC,SAAS,CAAC;YACtD,cAAc,CAAC,UAAU,CAAC,GAAG,IAAI,CAAC,CAAC,CAAC,IAAI,CAAC,QAAQ,CAAC,CAAC,CAAC,SAAS,CAAC;YAC9D,cAAc,CAAC,kBAAkB,CAAC,GAAG,IAAI,CAAC,CAAC,CAAC,IAAI,CAAC,gBAAgB,CAAC,CAAC,CAAC,SAAS,CAAC;YAC9E,cAAc,CAAC,QAAQ,CAAC,GAAG,IAAI,CAAC,CAAC,CAAC,IAAI,CAAC,MAAM,CAAC,CAAC,CAAC,SAAS,CAAC;SAC7D;QACD,IAAI,GAAG,MAAM,CAAC,YAAY,CAAC,SAAS,CAAC,oBAAoB,EAAE,EAAE,IAAI,CAAC,CAAC;QACnE,KAAK,CAAC,QAAQ,CAAC,YAAY,EAAE,IAAI,EAAE,cAAc,EAAE,IAAI,EAAE,KAAK,CAAC,cAAc,EAAE,SAAS,CAAC,UAAU,EAAE,CAAC,CAAC;IAC3G,CAAC;;AA5FL,4BA6FC;AA/EG,gBAAgB;AACO,qBAAY,GAAG,oCAAoC,CAAC"}

package/bin/identityProvider.d.ts

@@ -0,0 +1,98 @@
+import * as pulumi from "@pulumi/pulumi";
+import * as inputs from "./types/input";
+import * as outputs from "./types/output";
+export declare class IdentityProvider extends pulumi.CustomResource {
+    /**
+     * Get an existing IdentityProvider resource's state with the given name, ID, and optional extra
+     * properties used to qualify the lookup.
+     *
+     * @param name The _unique_ name of the resulting resource.
+     * @param id The _unique_ provider ID of the resource to lookup.
+     * @param state Any extra arguments used during the lookup.
+     * @param opts Optional settings to control the behavior of the CustomResource.
+     */
+    static get(name: string, id: pulumi.Input<pulumi.ID>, state?: IdentityProviderState, opts?: pulumi.CustomResourceOptions): IdentityProvider;
+    /**
+     * Returns true if the given object is an instance of IdentityProvider.  This is designed to work even
+     * when multiple copies of the Pulumi SDK have been loaded into the same process.
+     */
+    static isInstance(obj: any): obj is IdentityProvider;
+    /**
+     * The id of the role new users are bound to on first login.
+     */
+    readonly defaultRole: pulumi.Output<string>;
+    /**
+     * A longer description of the purpose of this identity provider.
+     */
+    readonly description: pulumi.Output<string | undefined>;
+    /**
+     * The name of this identity provider.
+     */
+    readonly name: pulumi.Output<string>;
+    /**
+     * OIDC configuration of this identity provider
+     */
+    readonly oidc: pulumi.Output<outputs.IdentityProviderOidc | undefined>;
+    /**
+     * The group containing this identity provider.
+     */
+    readonly parentId: pulumi.Output<string>;
+    /**
+     * Create a IdentityProvider resource with the given unique name, arguments, and options.
+     *
+     * @param name The _unique_ name of the resource.
+     * @param args The arguments to use to populate this resource's properties.
+     * @param opts A bag of options that control this resource's behavior.
+     */
+    constructor(name: string, args: IdentityProviderArgs, opts?: pulumi.CustomResourceOptions);
+}
+/**
+ * Input properties used for looking up and filtering IdentityProvider resources.
+ */
+export interface IdentityProviderState {
+    /**
+     * The id of the role new users are bound to on first login.
+     */
+    defaultRole?: pulumi.Input<string>;
+    /**
+     * A longer description of the purpose of this identity provider.
+     */
+    description?: pulumi.Input<string>;
+    /**
+     * The name of this identity provider.
+     */
+    name?: pulumi.Input<string>;
+    /**
+     * OIDC configuration of this identity provider
+     */
+    oidc?: pulumi.Input<inputs.IdentityProviderOidc>;
+    /**
+     * The group containing this identity provider.
+     */
+    parentId?: pulumi.Input<string>;
+}
+/**
+ * The set of arguments for constructing a IdentityProvider resource.
+ */
+export interface IdentityProviderArgs {
+    /**
+     * The id of the role new users are bound to on first login.
+     */
+    defaultRole: pulumi.Input<string>;
+    /**
+     * A longer description of the purpose of this identity provider.
+     */
+    description?: pulumi.Input<string>;
+    /**
+     * The name of this identity provider.
+     */
+    name?: pulumi.Input<string>;
+    /**
+     * OIDC configuration of this identity provider
+     */
+    oidc?: pulumi.Input<inputs.IdentityProviderOidc>;
+    /**
+     * The group containing this identity provider.
+     */
+    parentId: pulumi.Input<string>;
+}