@pulumi/confluentcloud 1.37.0-alpha.1710156163 → 1.37.0
This diff represents the content of publicly available package versions that have been released to one of the supported registries. The information contained in this diff is provided for informational purposes only and reflects changes between package versions as they appear in their respective public registries.
- package/flinkStatement.d.ts +2 -2
- package/flinkStatement.js +2 -2
- package/getSchema.d.ts +24 -0
- package/getSchema.js +2 -0
- package/getSchema.js.map +1 -1
- package/getSchemaRegistryDek.d.ts +43 -0
- package/getSchemaRegistryDek.js.map +1 -1
- package/getSchemaRegistryKek.d.ts +40 -0
- package/getSchemaRegistryKek.js.map +1 -1
- package/package.json +1 -1
- package/schema.d.ts +24 -0
- package/schema.js +4 -0
- package/schema.js.map +1 -1
- package/schemaRegistryDek.d.ts +71 -6
- package/schemaRegistryDek.js +17 -0
- package/schemaRegistryDek.js.map +1 -1
- package/schemaRegistryKek.d.ts +84 -7
- package/schemaRegistryKek.js +17 -0
- package/schemaRegistryKek.js.map +1 -1
- package/types/input.d.ts +390 -20
- package/types/output.d.ts +264 -15
package/flinkStatement.d.ts
CHANGED
|
@@ -8,9 +8,9 @@ import * as outputs from "./types/output";
|
|
|
8
8
|
*
|
|
9
9
|
* Option #1: Manage multiple Flink Compute Pools in the same Terraform workspace
|
|
10
10
|
*
|
|
11
|
-
* $ export
|
|
11
|
+
* $ export IMPORT_CONFLUENT_ORGANIZATION_ID="<organization_id>"
|
|
12
12
|
*
|
|
13
|
-
* $ export
|
|
13
|
+
* $ export IMPORT_CONFLUENT_ENVIRONMENT_ID="<environment_id>"
|
|
14
14
|
*
|
|
15
15
|
* $ export IMPORT_FLINK_COMPUTE_POOL_ID="<flink_compute_pool_id>"
|
|
16
16
|
*
|
package/flinkStatement.js
CHANGED
|
@@ -12,9 +12,9 @@ const utilities = require("./utilities");
|
|
|
12
12
|
*
|
|
13
13
|
* Option #1: Manage multiple Flink Compute Pools in the same Terraform workspace
|
|
14
14
|
*
|
|
15
|
-
* $ export
|
|
15
|
+
* $ export IMPORT_CONFLUENT_ORGANIZATION_ID="<organization_id>"
|
|
16
16
|
*
|
|
17
|
-
* $ export
|
|
17
|
+
* $ export IMPORT_CONFLUENT_ENVIRONMENT_ID="<environment_id>"
|
|
18
18
|
*
|
|
19
19
|
* $ export IMPORT_FLINK_COMPUTE_POOL_ID="<flink_compute_pool_id>"
|
|
20
20
|
*
|
package/getSchema.d.ts
CHANGED
|
@@ -7,10 +7,18 @@ export declare function getSchema(args: GetSchemaArgs, opts?: pulumi.InvokeOptio
|
|
|
7
7
|
*/
|
|
8
8
|
export interface GetSchemaArgs {
|
|
9
9
|
credentials?: inputs.GetSchemaCredentials;
|
|
10
|
+
/**
|
|
11
|
+
* (Optional Block) See [here](https://docs.confluent.io/platform/7.5/schema-registry/fundamentals/data-contracts.html) for more details. Supports the following:
|
|
12
|
+
*/
|
|
13
|
+
metadata?: inputs.GetSchemaMetadata;
|
|
10
14
|
/**
|
|
11
15
|
* The REST endpoint of the Schema Registry cluster, for example, `https://psrc-00000.us-central1.gcp.confluent.cloud:443`).
|
|
12
16
|
*/
|
|
13
17
|
restEndpoint?: string;
|
|
18
|
+
/**
|
|
19
|
+
* (Optional Block) The list of schema rules. See [Data Contracts for Schema Registry](https://docs.confluent.io/platform/7.5/schema-registry/fundamentals/data-contracts.html#rules) for more details. For example, these rules can enforce that a field that contains sensitive information must be encrypted, or that a message containing an invalid age must be sent to a dead letter queue.
|
|
20
|
+
*/
|
|
21
|
+
ruleset?: inputs.GetSchemaRuleset;
|
|
14
22
|
/**
|
|
15
23
|
* The globally unique ID of the Schema, for example, `100003`. If the same schema is registered under a different subject, the same identifier will be returned. However, the `version` of the schema may be different under different subjects.
|
|
16
24
|
*
|
|
@@ -37,8 +45,16 @@ export interface GetSchemaResult {
|
|
|
37
45
|
* The provider-assigned unique ID for this managed resource.
|
|
38
46
|
*/
|
|
39
47
|
readonly id: string;
|
|
48
|
+
/**
|
|
49
|
+
* (Optional Block) See [here](https://docs.confluent.io/platform/7.5/schema-registry/fundamentals/data-contracts.html) for more details. Supports the following:
|
|
50
|
+
*/
|
|
51
|
+
readonly metadata: outputs.GetSchemaMetadata;
|
|
40
52
|
readonly recreateOnUpdate: boolean;
|
|
41
53
|
readonly restEndpoint?: string;
|
|
54
|
+
/**
|
|
55
|
+
* (Optional Block) The list of schema rules. See [Data Contracts for Schema Registry](https://docs.confluent.io/platform/7.5/schema-registry/fundamentals/data-contracts.html#rules) for more details. For example, these rules can enforce that a field that contains sensitive information must be encrypted, or that a message containing an invalid age must be sent to a dead letter queue.
|
|
56
|
+
*/
|
|
57
|
+
readonly ruleset: outputs.GetSchemaRuleset;
|
|
42
58
|
/**
|
|
43
59
|
* (Required String) The schema string, for example, `file("./schema_version_1.avsc")`.
|
|
44
60
|
*/
|
|
@@ -64,10 +80,18 @@ export declare function getSchemaOutput(args: GetSchemaOutputArgs, opts?: pulumi
|
|
|
64
80
|
*/
|
|
65
81
|
export interface GetSchemaOutputArgs {
|
|
66
82
|
credentials?: pulumi.Input<inputs.GetSchemaCredentialsArgs>;
|
|
83
|
+
/**
|
|
84
|
+
* (Optional Block) See [here](https://docs.confluent.io/platform/7.5/schema-registry/fundamentals/data-contracts.html) for more details. Supports the following:
|
|
85
|
+
*/
|
|
86
|
+
metadata?: pulumi.Input<inputs.GetSchemaMetadataArgs>;
|
|
67
87
|
/**
|
|
68
88
|
* The REST endpoint of the Schema Registry cluster, for example, `https://psrc-00000.us-central1.gcp.confluent.cloud:443`).
|
|
69
89
|
*/
|
|
70
90
|
restEndpoint?: pulumi.Input<string>;
|
|
91
|
+
/**
|
|
92
|
+
* (Optional Block) The list of schema rules. See [Data Contracts for Schema Registry](https://docs.confluent.io/platform/7.5/schema-registry/fundamentals/data-contracts.html#rules) for more details. For example, these rules can enforce that a field that contains sensitive information must be encrypted, or that a message containing an invalid age must be sent to a dead letter queue.
|
|
93
|
+
*/
|
|
94
|
+
ruleset?: pulumi.Input<inputs.GetSchemaRulesetArgs>;
|
|
71
95
|
/**
|
|
72
96
|
* The globally unique ID of the Schema, for example, `100003`. If the same schema is registered under a different subject, the same identifier will be returned. However, the `version` of the schema may be different under different subjects.
|
|
73
97
|
*
|
package/getSchema.js
CHANGED
|
@@ -9,7 +9,9 @@ function getSchema(args, opts) {
|
|
|
9
9
|
opts = pulumi.mergeOptions(utilities.resourceOptsDefaults(), opts || {});
|
|
10
10
|
return pulumi.runtime.invoke("confluentcloud:index/getSchema:getSchema", {
|
|
11
11
|
"credentials": args.credentials,
|
|
12
|
+
"metadata": args.metadata,
|
|
12
13
|
"restEndpoint": args.restEndpoint,
|
|
14
|
+
"ruleset": args.ruleset,
|
|
13
15
|
"schemaIdentifier": args.schemaIdentifier,
|
|
14
16
|
"schemaRegistryCluster": args.schemaRegistryCluster,
|
|
15
17
|
"subjectName": args.subjectName,
|
package/getSchema.js.map
CHANGED
|
@@ -1 +1 @@
|
|
|
1
|
-
{"version":3,"file":"getSchema.js","sourceRoot":"","sources":["../getSchema.ts"],"names":[],"mappings":";AAAA,wFAAwF;AACxF,iFAAiF;;;AAEjF,yCAAyC;AAGzC,yCAAyC;AAEzC,SAAgB,SAAS,CAAC,IAAmB,EAAE,IAA2B;IAEtE,IAAI,GAAG,MAAM,CAAC,YAAY,CAAC,SAAS,CAAC,oBAAoB,EAAE,EAAE,IAAI,IAAI,EAAE,CAAC,CAAC;IACzE,OAAO,MAAM,CAAC,OAAO,CAAC,MAAM,CAAC,0CAA0C,EAAE;QACrE,aAAa,EAAE,IAAI,CAAC,WAAW;QAC/B,cAAc,EAAE,IAAI,CAAC,YAAY;QACjC,kBAAkB,EAAE,IAAI,CAAC,gBAAgB;QACzC,uBAAuB,EAAE,IAAI,CAAC,qBAAqB;QACnD,aAAa,EAAE,IAAI,CAAC,WAAW;KAClC,EAAE,IAAI,CAAC,CAAC;AACb,CAAC;
|
|
1
|
+
{"version":3,"file":"getSchema.js","sourceRoot":"","sources":["../getSchema.ts"],"names":[],"mappings":";AAAA,wFAAwF;AACxF,iFAAiF;;;AAEjF,yCAAyC;AAGzC,yCAAyC;AAEzC,SAAgB,SAAS,CAAC,IAAmB,EAAE,IAA2B;IAEtE,IAAI,GAAG,MAAM,CAAC,YAAY,CAAC,SAAS,CAAC,oBAAoB,EAAE,EAAE,IAAI,IAAI,EAAE,CAAC,CAAC;IACzE,OAAO,MAAM,CAAC,OAAO,CAAC,MAAM,CAAC,0CAA0C,EAAE;QACrE,aAAa,EAAE,IAAI,CAAC,WAAW;QAC/B,UAAU,EAAE,IAAI,CAAC,QAAQ;QACzB,cAAc,EAAE,IAAI,CAAC,YAAY;QACjC,SAAS,EAAE,IAAI,CAAC,OAAO;QACvB,kBAAkB,EAAE,IAAI,CAAC,gBAAgB;QACzC,uBAAuB,EAAE,IAAI,CAAC,qBAAqB;QACnD,aAAa,EAAE,IAAI,CAAC,WAAW;KAClC,EAAE,IAAI,CAAC,CAAC;AACb,CAAC;AAZD,8BAYC;AA2ED,SAAgB,eAAe,CAAC,IAAyB,EAAE,IAA2B;IAClF,OAAO,MAAM,CAAC,MAAM,CAAC,IAAI,CAAC,CAAC,KAAK,CAAC,CAAC,CAAM,EAAE,EAAE,CAAC,SAAS,CAAC,CAAC,EAAE,IAAI,CAAC,CAAC,CAAA;AACpE,CAAC;AAFD,0CAEC"}
|
|
@@ -6,12 +6,29 @@ export declare function getSchemaRegistryDek(args: GetSchemaRegistryDekArgs, opt
|
|
|
6
6
|
* A collection of arguments for invoking getSchemaRegistryDek.
|
|
7
7
|
*/
|
|
8
8
|
export interface GetSchemaRegistryDekArgs {
|
|
9
|
+
/**
|
|
10
|
+
* Accepted values are: `AES128_GCM`, `AES256_GCM`, and `AES256_SIV`. Defaults to `AES256_GCM`.
|
|
11
|
+
*
|
|
12
|
+
* > **Note:** A Schema Registry API key consists of a key and a secret. Schema Registry API keys are required to interact with Schema Registry clusters in Confluent Cloud. Each Schema Registry API key is valid for one specific Schema Registry cluster.
|
|
13
|
+
*/
|
|
9
14
|
algorithm?: string;
|
|
10
15
|
credentials?: inputs.GetSchemaRegistryDekCredentials;
|
|
16
|
+
/**
|
|
17
|
+
* The name of the KEK used to encrypt this DEK.
|
|
18
|
+
*/
|
|
11
19
|
kekName: string;
|
|
20
|
+
/**
|
|
21
|
+
* The REST endpoint of the Schema Registry cluster, for example, `https://psrc-00000.us-central1.gcp.confluent.cloud:443`).
|
|
22
|
+
*/
|
|
12
23
|
restEndpoint?: string;
|
|
13
24
|
schemaRegistryCluster?: inputs.GetSchemaRegistryDekSchemaRegistryCluster;
|
|
25
|
+
/**
|
|
26
|
+
* The subject for this DEK.
|
|
27
|
+
*/
|
|
14
28
|
subjectName: string;
|
|
29
|
+
/**
|
|
30
|
+
* The version of this DEK. Defaults to `1`.
|
|
31
|
+
*/
|
|
15
32
|
version?: number;
|
|
16
33
|
}
|
|
17
34
|
/**
|
|
@@ -20,13 +37,22 @@ export interface GetSchemaRegistryDekArgs {
|
|
|
20
37
|
export interface GetSchemaRegistryDekResult {
|
|
21
38
|
readonly algorithm?: string;
|
|
22
39
|
readonly credentials?: outputs.GetSchemaRegistryDekCredentials;
|
|
40
|
+
/**
|
|
41
|
+
* (Optional String) The encrypted key material for the DEK.
|
|
42
|
+
*/
|
|
23
43
|
readonly encryptedKeyMaterial: string;
|
|
44
|
+
/**
|
|
45
|
+
* (Optional Boolean) An optional flag to control whether a dek should be soft or hard deleted.
|
|
46
|
+
*/
|
|
24
47
|
readonly hardDelete: boolean;
|
|
25
48
|
/**
|
|
26
49
|
* The provider-assigned unique ID for this managed resource.
|
|
27
50
|
*/
|
|
28
51
|
readonly id: string;
|
|
29
52
|
readonly kekName: string;
|
|
53
|
+
/**
|
|
54
|
+
* (Optional String) The decrypted version of encrypted key material.
|
|
55
|
+
*/
|
|
30
56
|
readonly keyMaterial: string;
|
|
31
57
|
readonly restEndpoint?: string;
|
|
32
58
|
readonly schemaRegistryCluster?: outputs.GetSchemaRegistryDekSchemaRegistryCluster;
|
|
@@ -38,11 +64,28 @@ export declare function getSchemaRegistryDekOutput(args: GetSchemaRegistryDekOut
|
|
|
38
64
|
* A collection of arguments for invoking getSchemaRegistryDek.
|
|
39
65
|
*/
|
|
40
66
|
export interface GetSchemaRegistryDekOutputArgs {
|
|
67
|
+
/**
|
|
68
|
+
* Accepted values are: `AES128_GCM`, `AES256_GCM`, and `AES256_SIV`. Defaults to `AES256_GCM`.
|
|
69
|
+
*
|
|
70
|
+
* > **Note:** A Schema Registry API key consists of a key and a secret. Schema Registry API keys are required to interact with Schema Registry clusters in Confluent Cloud. Each Schema Registry API key is valid for one specific Schema Registry cluster.
|
|
71
|
+
*/
|
|
41
72
|
algorithm?: pulumi.Input<string>;
|
|
42
73
|
credentials?: pulumi.Input<inputs.GetSchemaRegistryDekCredentialsArgs>;
|
|
74
|
+
/**
|
|
75
|
+
* The name of the KEK used to encrypt this DEK.
|
|
76
|
+
*/
|
|
43
77
|
kekName: pulumi.Input<string>;
|
|
78
|
+
/**
|
|
79
|
+
* The REST endpoint of the Schema Registry cluster, for example, `https://psrc-00000.us-central1.gcp.confluent.cloud:443`).
|
|
80
|
+
*/
|
|
44
81
|
restEndpoint?: pulumi.Input<string>;
|
|
45
82
|
schemaRegistryCluster?: pulumi.Input<inputs.GetSchemaRegistryDekSchemaRegistryClusterArgs>;
|
|
83
|
+
/**
|
|
84
|
+
* The subject for this DEK.
|
|
85
|
+
*/
|
|
46
86
|
subjectName: pulumi.Input<string>;
|
|
87
|
+
/**
|
|
88
|
+
* The version of this DEK. Defaults to `1`.
|
|
89
|
+
*/
|
|
47
90
|
version?: pulumi.Input<number>;
|
|
48
91
|
}
|
|
@@ -1 +1 @@
|
|
|
1
|
-
{"version":3,"file":"getSchemaRegistryDek.js","sourceRoot":"","sources":["../getSchemaRegistryDek.ts"],"names":[],"mappings":";AAAA,wFAAwF;AACxF,iFAAiF;;;AAEjF,yCAAyC;AAGzC,yCAAyC;AAEzC,SAAgB,oBAAoB,CAAC,IAA8B,EAAE,IAA2B;IAE5F,IAAI,GAAG,MAAM,CAAC,YAAY,CAAC,SAAS,CAAC,oBAAoB,EAAE,EAAE,IAAI,IAAI,EAAE,CAAC,CAAC;IACzE,OAAO,MAAM,CAAC,OAAO,CAAC,MAAM,CAAC,gEAAgE,EAAE;QAC3F,WAAW,EAAE,IAAI,CAAC,SAAS;QAC3B,aAAa,EAAE,IAAI,CAAC,WAAW;QAC/B,SAAS,EAAE,IAAI,CAAC,OAAO;QACvB,cAAc,EAAE,IAAI,CAAC,YAAY;QACjC,uBAAuB,EAAE,IAAI,CAAC,qBAAqB;QACnD,aAAa,EAAE,IAAI,CAAC,WAAW;QAC/B,SAAS,EAAE,IAAI,CAAC,OAAO;KAC1B,EAAE,IAAI,CAAC,CAAC;AACb,CAAC;AAZD,oDAYC;
|
|
1
|
+
{"version":3,"file":"getSchemaRegistryDek.js","sourceRoot":"","sources":["../getSchemaRegistryDek.ts"],"names":[],"mappings":";AAAA,wFAAwF;AACxF,iFAAiF;;;AAEjF,yCAAyC;AAGzC,yCAAyC;AAEzC,SAAgB,oBAAoB,CAAC,IAA8B,EAAE,IAA2B;IAE5F,IAAI,GAAG,MAAM,CAAC,YAAY,CAAC,SAAS,CAAC,oBAAoB,EAAE,EAAE,IAAI,IAAI,EAAE,CAAC,CAAC;IACzE,OAAO,MAAM,CAAC,OAAO,CAAC,MAAM,CAAC,gEAAgE,EAAE;QAC3F,WAAW,EAAE,IAAI,CAAC,SAAS;QAC3B,aAAa,EAAE,IAAI,CAAC,WAAW;QAC/B,SAAS,EAAE,IAAI,CAAC,OAAO;QACvB,cAAc,EAAE,IAAI,CAAC,YAAY;QACjC,uBAAuB,EAAE,IAAI,CAAC,qBAAqB;QACnD,aAAa,EAAE,IAAI,CAAC,WAAW;QAC/B,SAAS,EAAE,IAAI,CAAC,OAAO;KAC1B,EAAE,IAAI,CAAC,CAAC;AACb,CAAC;AAZD,oDAYC;AA4DD,SAAgB,0BAA0B,CAAC,IAAoC,EAAE,IAA2B;IACxG,OAAO,MAAM,CAAC,MAAM,CAAC,IAAI,CAAC,CAAC,KAAK,CAAC,CAAC,CAAM,EAAE,EAAE,CAAC,oBAAoB,CAAC,CAAC,EAAE,IAAI,CAAC,CAAC,CAAA;AAC/E,CAAC;AAFD,gEAEC"}
|
|
@@ -7,7 +7,15 @@ export declare function getSchemaRegistryKek(args: GetSchemaRegistryKekArgs, opt
|
|
|
7
7
|
*/
|
|
8
8
|
export interface GetSchemaRegistryKekArgs {
|
|
9
9
|
credentials?: inputs.GetSchemaRegistryKekCredentials;
|
|
10
|
+
/**
|
|
11
|
+
* The name for the KEK.
|
|
12
|
+
*
|
|
13
|
+
* > **Note:** A Schema Registry API key consists of a key and a secret. Schema Registry API keys are required to interact with Schema Registry clusters in Confluent Cloud. Each Schema Registry API key is valid for one specific Schema Registry cluster.
|
|
14
|
+
*/
|
|
10
15
|
name: string;
|
|
16
|
+
/**
|
|
17
|
+
* The REST endpoint of the Schema Registry cluster, for example, `https://psrc-00000.us-central1.gcp.confluent.cloud:443`).
|
|
18
|
+
*/
|
|
11
19
|
restEndpoint?: string;
|
|
12
20
|
schemaRegistryCluster?: inputs.GetSchemaRegistryKekSchemaRegistryCluster;
|
|
13
21
|
}
|
|
@@ -16,20 +24,44 @@ export interface GetSchemaRegistryKekArgs {
|
|
|
16
24
|
*/
|
|
17
25
|
export interface GetSchemaRegistryKekResult {
|
|
18
26
|
readonly credentials?: outputs.GetSchemaRegistryKekCredentials;
|
|
27
|
+
/**
|
|
28
|
+
* (Optional String) The optional description for the KEK.
|
|
29
|
+
*/
|
|
19
30
|
readonly doc: string;
|
|
31
|
+
/**
|
|
32
|
+
* (Optional Boolean) The optional flag to control whether a kek should be soft or hard deleted. Defaults to `false`.
|
|
33
|
+
*/
|
|
20
34
|
readonly hardDelete: boolean;
|
|
21
35
|
/**
|
|
22
36
|
* The provider-assigned unique ID for this managed resource.
|
|
23
37
|
*/
|
|
24
38
|
readonly id: string;
|
|
39
|
+
/**
|
|
40
|
+
* (Required String) The ID of the key from KMS.
|
|
41
|
+
* - When using the AWS KMS, this is an ARN, for example, `arn:aws:kms:us-east-1:123456789012:key/12345678-1234-1234-1234-123456789abc`.
|
|
42
|
+
* - When using the Azure Key Vault, this is a Key Identifier (URI), for example, `https://test-keyvault1.vault.azure.net/keys/test-key1/1234567890abcdef1234567890abcdef`.
|
|
43
|
+
* - When using the GCP KMS, this is a resource name, for example, `projects/test-project1/locations/us-central1/keyRings/test-keyRing1/cryptoKeys/test-key1`.
|
|
44
|
+
*/
|
|
25
45
|
readonly kmsKeyId: string;
|
|
46
|
+
/**
|
|
47
|
+
* (Required String) The type of Key Management Service (KMS). The supported values include `aws-kms`, `azure-kms`, and `gcp-kms`. Additionally, custom KMS types are supported as well.
|
|
48
|
+
*/
|
|
26
49
|
readonly kmsType: string;
|
|
50
|
+
/**
|
|
51
|
+
* (Required String) The custom property name (for example, `KeyUsage`).
|
|
52
|
+
*/
|
|
27
53
|
readonly name: string;
|
|
54
|
+
/**
|
|
55
|
+
* (Optional Map) The custom properties to set (for example, `KeyUsage=ENCRYPT_DECRYPT`, `KeyState=Enabled`):
|
|
56
|
+
*/
|
|
28
57
|
readonly properties: {
|
|
29
58
|
[key: string]: string;
|
|
30
59
|
};
|
|
31
60
|
readonly restEndpoint?: string;
|
|
32
61
|
readonly schemaRegistryCluster?: outputs.GetSchemaRegistryKekSchemaRegistryCluster;
|
|
62
|
+
/**
|
|
63
|
+
* (Optional Boolean) The optional flag to control whether the DEK Registry has shared access to the KMS. Defaults to `false`.
|
|
64
|
+
*/
|
|
33
65
|
readonly shared: boolean;
|
|
34
66
|
}
|
|
35
67
|
export declare function getSchemaRegistryKekOutput(args: GetSchemaRegistryKekOutputArgs, opts?: pulumi.InvokeOptions): pulumi.Output<GetSchemaRegistryKekResult>;
|
|
@@ -38,7 +70,15 @@ export declare function getSchemaRegistryKekOutput(args: GetSchemaRegistryKekOut
|
|
|
38
70
|
*/
|
|
39
71
|
export interface GetSchemaRegistryKekOutputArgs {
|
|
40
72
|
credentials?: pulumi.Input<inputs.GetSchemaRegistryKekCredentialsArgs>;
|
|
73
|
+
/**
|
|
74
|
+
* The name for the KEK.
|
|
75
|
+
*
|
|
76
|
+
* > **Note:** A Schema Registry API key consists of a key and a secret. Schema Registry API keys are required to interact with Schema Registry clusters in Confluent Cloud. Each Schema Registry API key is valid for one specific Schema Registry cluster.
|
|
77
|
+
*/
|
|
41
78
|
name: pulumi.Input<string>;
|
|
79
|
+
/**
|
|
80
|
+
* The REST endpoint of the Schema Registry cluster, for example, `https://psrc-00000.us-central1.gcp.confluent.cloud:443`).
|
|
81
|
+
*/
|
|
42
82
|
restEndpoint?: pulumi.Input<string>;
|
|
43
83
|
schemaRegistryCluster?: pulumi.Input<inputs.GetSchemaRegistryKekSchemaRegistryClusterArgs>;
|
|
44
84
|
}
|
|
@@ -1 +1 @@
|
|
|
1
|
-
{"version":3,"file":"getSchemaRegistryKek.js","sourceRoot":"","sources":["../getSchemaRegistryKek.ts"],"names":[],"mappings":";AAAA,wFAAwF;AACxF,iFAAiF;;;AAEjF,yCAAyC;AAGzC,yCAAyC;AAEzC,SAAgB,oBAAoB,CAAC,IAA8B,EAAE,IAA2B;IAE5F,IAAI,GAAG,MAAM,CAAC,YAAY,CAAC,SAAS,CAAC,oBAAoB,EAAE,EAAE,IAAI,IAAI,EAAE,CAAC,CAAC;IACzE,OAAO,MAAM,CAAC,OAAO,CAAC,MAAM,CAAC,gEAAgE,EAAE;QAC3F,aAAa,EAAE,IAAI,CAAC,WAAW;QAC/B,MAAM,EAAE,IAAI,CAAC,IAAI;QACjB,cAAc,EAAE,IAAI,CAAC,YAAY;QACjC,uBAAuB,EAAE,IAAI,CAAC,qBAAqB;KACtD,EAAE,IAAI,CAAC,CAAC;AACb,CAAC;AATD,oDASC;AA+
|
|
1
|
+
{"version":3,"file":"getSchemaRegistryKek.js","sourceRoot":"","sources":["../getSchemaRegistryKek.ts"],"names":[],"mappings":";AAAA,wFAAwF;AACxF,iFAAiF;;;AAEjF,yCAAyC;AAGzC,yCAAyC;AAEzC,SAAgB,oBAAoB,CAAC,IAA8B,EAAE,IAA2B;IAE5F,IAAI,GAAG,MAAM,CAAC,YAAY,CAAC,SAAS,CAAC,oBAAoB,EAAE,EAAE,IAAI,IAAI,EAAE,CAAC,CAAC;IACzE,OAAO,MAAM,CAAC,OAAO,CAAC,MAAM,CAAC,gEAAgE,EAAE;QAC3F,aAAa,EAAE,IAAI,CAAC,WAAW;QAC/B,MAAM,EAAE,IAAI,CAAC,IAAI;QACjB,cAAc,EAAE,IAAI,CAAC,YAAY;QACjC,uBAAuB,EAAE,IAAI,CAAC,qBAAqB;KACtD,EAAE,IAAI,CAAC,CAAC;AACb,CAAC;AATD,oDASC;AA+DD,SAAgB,0BAA0B,CAAC,IAAoC,EAAE,IAA2B;IACxG,OAAO,MAAM,CAAC,MAAM,CAAC,IAAI,CAAC,CAAC,KAAK,CAAC,CAAC,CAAM,EAAE,EAAE,CAAC,oBAAoB,CAAC,CAAC,EAAE,IAAI,CAAC,CAAC,CAAA;AAC/E,CAAC;AAFD,gEAEC"}
|
package/package.json
CHANGED
package/schema.d.ts
CHANGED
|
@@ -64,6 +64,10 @@ export declare class Schema extends pulumi.CustomResource {
|
|
|
64
64
|
* An optional flag to control whether a schema should be soft or hard deleted. Set it to `true` if you want to hard delete a schema on destroy (see [Schema Deletion Guidelines](https://docs.confluent.io/platform/current/schema-registry/schema-deletion-guidelines.html#schema-deletion-guidelines) for more details). Must be unset when importing. Defaults to `false` (soft delete).
|
|
65
65
|
*/
|
|
66
66
|
readonly hardDelete: pulumi.Output<boolean | undefined>;
|
|
67
|
+
/**
|
|
68
|
+
* See [here](https://docs.confluent.io/platform/7.5/schema-registry/fundamentals/data-contracts.html) for more details. Supports the following:
|
|
69
|
+
*/
|
|
70
|
+
readonly metadata: pulumi.Output<outputs.SchemaMetadata>;
|
|
67
71
|
/**
|
|
68
72
|
* An optional flag to control whether a schema should be recreated on an update. Set it to `true` if you want to manage different schema versions using different resource instances. Must be set to the target value when importing. Defaults to `false`, which manages the latest schema version only. The resource instance always points to the latest schema version by supporting in-place updates.
|
|
69
73
|
*/
|
|
@@ -72,6 +76,10 @@ export declare class Schema extends pulumi.CustomResource {
|
|
|
72
76
|
* The REST endpoint of the Schema Registry cluster, for example, `https://psrc-00000.us-central1.gcp.confluent.cloud:443`).
|
|
73
77
|
*/
|
|
74
78
|
readonly restEndpoint: pulumi.Output<string | undefined>;
|
|
79
|
+
/**
|
|
80
|
+
* The list of schema rules. See [Data Contracts for Schema Registry](https://docs.confluent.io/platform/7.5/schema-registry/fundamentals/data-contracts.html#rules) for more details. For example, these rules can enforce that a field that contains sensitive information must be encrypted, or that a message containing an invalid age must be sent to a dead letter queue.
|
|
81
|
+
*/
|
|
82
|
+
readonly ruleset: pulumi.Output<outputs.SchemaRuleset>;
|
|
75
83
|
/**
|
|
76
84
|
* The schema string, for example, `file("./schema_version_1.avsc")`.
|
|
77
85
|
*/
|
|
@@ -118,6 +126,10 @@ export interface SchemaState {
|
|
|
118
126
|
* An optional flag to control whether a schema should be soft or hard deleted. Set it to `true` if you want to hard delete a schema on destroy (see [Schema Deletion Guidelines](https://docs.confluent.io/platform/current/schema-registry/schema-deletion-guidelines.html#schema-deletion-guidelines) for more details). Must be unset when importing. Defaults to `false` (soft delete).
|
|
119
127
|
*/
|
|
120
128
|
hardDelete?: pulumi.Input<boolean>;
|
|
129
|
+
/**
|
|
130
|
+
* See [here](https://docs.confluent.io/platform/7.5/schema-registry/fundamentals/data-contracts.html) for more details. Supports the following:
|
|
131
|
+
*/
|
|
132
|
+
metadata?: pulumi.Input<inputs.SchemaMetadata>;
|
|
121
133
|
/**
|
|
122
134
|
* An optional flag to control whether a schema should be recreated on an update. Set it to `true` if you want to manage different schema versions using different resource instances. Must be set to the target value when importing. Defaults to `false`, which manages the latest schema version only. The resource instance always points to the latest schema version by supporting in-place updates.
|
|
123
135
|
*/
|
|
@@ -126,6 +138,10 @@ export interface SchemaState {
|
|
|
126
138
|
* The REST endpoint of the Schema Registry cluster, for example, `https://psrc-00000.us-central1.gcp.confluent.cloud:443`).
|
|
127
139
|
*/
|
|
128
140
|
restEndpoint?: pulumi.Input<string>;
|
|
141
|
+
/**
|
|
142
|
+
* The list of schema rules. See [Data Contracts for Schema Registry](https://docs.confluent.io/platform/7.5/schema-registry/fundamentals/data-contracts.html#rules) for more details. For example, these rules can enforce that a field that contains sensitive information must be encrypted, or that a message containing an invalid age must be sent to a dead letter queue.
|
|
143
|
+
*/
|
|
144
|
+
ruleset?: pulumi.Input<inputs.SchemaRuleset>;
|
|
129
145
|
/**
|
|
130
146
|
* The schema string, for example, `file("./schema_version_1.avsc")`.
|
|
131
147
|
*/
|
|
@@ -164,6 +180,10 @@ export interface SchemaArgs {
|
|
|
164
180
|
* An optional flag to control whether a schema should be soft or hard deleted. Set it to `true` if you want to hard delete a schema on destroy (see [Schema Deletion Guidelines](https://docs.confluent.io/platform/current/schema-registry/schema-deletion-guidelines.html#schema-deletion-guidelines) for more details). Must be unset when importing. Defaults to `false` (soft delete).
|
|
165
181
|
*/
|
|
166
182
|
hardDelete?: pulumi.Input<boolean>;
|
|
183
|
+
/**
|
|
184
|
+
* See [here](https://docs.confluent.io/platform/7.5/schema-registry/fundamentals/data-contracts.html) for more details. Supports the following:
|
|
185
|
+
*/
|
|
186
|
+
metadata?: pulumi.Input<inputs.SchemaMetadata>;
|
|
167
187
|
/**
|
|
168
188
|
* An optional flag to control whether a schema should be recreated on an update. Set it to `true` if you want to manage different schema versions using different resource instances. Must be set to the target value when importing. Defaults to `false`, which manages the latest schema version only. The resource instance always points to the latest schema version by supporting in-place updates.
|
|
169
189
|
*/
|
|
@@ -172,6 +192,10 @@ export interface SchemaArgs {
|
|
|
172
192
|
* The REST endpoint of the Schema Registry cluster, for example, `https://psrc-00000.us-central1.gcp.confluent.cloud:443`).
|
|
173
193
|
*/
|
|
174
194
|
restEndpoint?: pulumi.Input<string>;
|
|
195
|
+
/**
|
|
196
|
+
* The list of schema rules. See [Data Contracts for Schema Registry](https://docs.confluent.io/platform/7.5/schema-registry/fundamentals/data-contracts.html#rules) for more details. For example, these rules can enforce that a field that contains sensitive information must be encrypted, or that a message containing an invalid age must be sent to a dead letter queue.
|
|
197
|
+
*/
|
|
198
|
+
ruleset?: pulumi.Input<inputs.SchemaRuleset>;
|
|
175
199
|
/**
|
|
176
200
|
* The schema string, for example, `file("./schema_version_1.avsc")`.
|
|
177
201
|
*/
|
package/schema.js
CHANGED
|
@@ -71,8 +71,10 @@ class Schema extends pulumi.CustomResource {
|
|
|
71
71
|
resourceInputs["credentials"] = state ? state.credentials : undefined;
|
|
72
72
|
resourceInputs["format"] = state ? state.format : undefined;
|
|
73
73
|
resourceInputs["hardDelete"] = state ? state.hardDelete : undefined;
|
|
74
|
+
resourceInputs["metadata"] = state ? state.metadata : undefined;
|
|
74
75
|
resourceInputs["recreateOnUpdate"] = state ? state.recreateOnUpdate : undefined;
|
|
75
76
|
resourceInputs["restEndpoint"] = state ? state.restEndpoint : undefined;
|
|
77
|
+
resourceInputs["ruleset"] = state ? state.ruleset : undefined;
|
|
76
78
|
resourceInputs["schema"] = state ? state.schema : undefined;
|
|
77
79
|
resourceInputs["schemaIdentifier"] = state ? state.schemaIdentifier : undefined;
|
|
78
80
|
resourceInputs["schemaReferences"] = state ? state.schemaReferences : undefined;
|
|
@@ -91,8 +93,10 @@ class Schema extends pulumi.CustomResource {
|
|
|
91
93
|
resourceInputs["credentials"] = (args === null || args === void 0 ? void 0 : args.credentials) ? pulumi.secret(args.credentials) : undefined;
|
|
92
94
|
resourceInputs["format"] = args ? args.format : undefined;
|
|
93
95
|
resourceInputs["hardDelete"] = args ? args.hardDelete : undefined;
|
|
96
|
+
resourceInputs["metadata"] = args ? args.metadata : undefined;
|
|
94
97
|
resourceInputs["recreateOnUpdate"] = args ? args.recreateOnUpdate : undefined;
|
|
95
98
|
resourceInputs["restEndpoint"] = args ? args.restEndpoint : undefined;
|
|
99
|
+
resourceInputs["ruleset"] = args ? args.ruleset : undefined;
|
|
96
100
|
resourceInputs["schema"] = args ? args.schema : undefined;
|
|
97
101
|
resourceInputs["schemaReferences"] = args ? args.schemaReferences : undefined;
|
|
98
102
|
resourceInputs["schemaRegistryCluster"] = args ? args.schemaRegistryCluster : undefined;
|
package/schema.js.map
CHANGED
|
@@ -1 +1 @@
|
|
|
1
|
-
{"version":3,"file":"schema.js","sourceRoot":"","sources":["../schema.ts"],"names":[],"mappings":";AAAA,wFAAwF;AACxF,iFAAiF;;;AAEjF,yCAAyC;AAGzC,yCAAyC;AAEzC;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;GAkCG;AACH,MAAa,MAAO,SAAQ,MAAM,CAAC,cAAc;IAC7C;;;;;;;;OAQG;IACI,MAAM,CAAC,GAAG,CAAC,IAAY,EAAE,EAA2B,EAAE,KAAmB,EAAE,IAAmC;QACjH,OAAO,IAAI,MAAM,CAAC,IAAI,EAAO,KAAK,kCAAO,IAAI,KAAE,EAAE,EAAE,EAAE,IAAG,CAAC;IAC7D,CAAC;IAKD;;;OAGG;IACI,MAAM,CAAC,UAAU,CAAC,GAAQ;QAC7B,IAAI,GAAG,KAAK,SAAS,IAAI,GAAG,KAAK,IAAI,EAAE;YACnC,OAAO,KAAK,CAAC;SAChB;QACD,OAAO,GAAG,CAAC,cAAc,CAAC,KAAK,MAAM,CAAC,YAAY,CAAC;IACvD,CAAC;
|
|
1
|
+
{"version":3,"file":"schema.js","sourceRoot":"","sources":["../schema.ts"],"names":[],"mappings":";AAAA,wFAAwF;AACxF,iFAAiF;;;AAEjF,yCAAyC;AAGzC,yCAAyC;AAEzC;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;GAkCG;AACH,MAAa,MAAO,SAAQ,MAAM,CAAC,cAAc;IAC7C;;;;;;;;OAQG;IACI,MAAM,CAAC,GAAG,CAAC,IAAY,EAAE,EAA2B,EAAE,KAAmB,EAAE,IAAmC;QACjH,OAAO,IAAI,MAAM,CAAC,IAAI,EAAO,KAAK,kCAAO,IAAI,KAAE,EAAE,EAAE,EAAE,IAAG,CAAC;IAC7D,CAAC;IAKD;;;OAGG;IACI,MAAM,CAAC,UAAU,CAAC,GAAQ;QAC7B,IAAI,GAAG,KAAK,SAAS,IAAI,GAAG,KAAK,IAAI,EAAE;YACnC,OAAO,KAAK,CAAC;SAChB;QACD,OAAO,GAAG,CAAC,cAAc,CAAC,KAAK,MAAM,CAAC,YAAY,CAAC;IACvD,CAAC;IA4DD,YAAY,IAAY,EAAE,WAAsC,EAAE,IAAmC;QACjG,IAAI,cAAc,GAAkB,EAAE,CAAC;QACvC,IAAI,GAAG,IAAI,IAAI,EAAE,CAAC;QAClB,IAAI,IAAI,CAAC,EAAE,EAAE;YACT,MAAM,KAAK,GAAG,WAAsC,CAAC;YACrD,cAAc,CAAC,aAAa,CAAC,GAAG,KAAK,CAAC,CAAC,CAAC,KAAK,CAAC,WAAW,CAAC,CAAC,CAAC,SAAS,CAAC;YACtE,cAAc,CAAC,QAAQ,CAAC,GAAG,KAAK,CAAC,CAAC,CAAC,KAAK,CAAC,MAAM,CAAC,CAAC,CAAC,SAAS,CAAC;YAC5D,cAAc,CAAC,YAAY,CAAC,GAAG,KAAK,CAAC,CAAC,CAAC,KAAK,CAAC,UAAU,CAAC,CAAC,CAAC,SAAS,CAAC;YACpE,cAAc,CAAC,UAAU,CAAC,GAAG,KAAK,CAAC,CAAC,CAAC,KAAK,CAAC,QAAQ,CAAC,CAAC,CAAC,SAAS,CAAC;YAChE,cAAc,CAAC,kBAAkB,CAAC,GAAG,KAAK,CAAC,CAAC,CAAC,KAAK,CAAC,gBAAgB,CAAC,CAAC,CAAC,SAAS,CAAC;YAChF,cAAc,CAAC,cAAc,CAAC,GAAG,KAAK,CAAC,CAAC,CAAC,KAAK,CAAC,YAAY,CAAC,CAAC,CAAC,SAAS,CAAC;YACxE,cAAc,CAAC,SAAS,CAAC,GAAG,KAAK,CAAC,CAAC,CAAC,KAAK,CAAC,OAAO,CAAC,CAAC,CAAC,SAAS,CAAC;YAC9D,cAAc,CAAC,QAAQ,CAAC,GAAG,KAAK,CAAC,CAAC,CAAC,KAAK,CAAC,MAAM,CAAC,CAAC,CAAC,SAAS,CAAC;YAC5D,cAAc,CAAC,kBAAkB,CAAC,GAAG,KAAK,CAAC,CAAC,CAAC,KAAK,CAAC,gBAAgB,CAAC,CAAC,CAAC,SAAS,CAAC;YAChF,cAAc,CAAC,kBAAkB,CAAC,GAAG,KAAK,CAAC,CAAC,CAAC,KAAK,CAAC,gBAAgB,CAAC,CAAC,CAAC,SAAS,CAAC;YAChF,cAAc,CAAC,uBAAuB,CAAC,GAAG,KAAK,CAAC,CAAC,CAAC,KAAK,CAAC,qBAAqB,CAAC,CAAC,CAAC,SAAS,CAAC;YAC1F,cAAc,CAAC,aAAa,CAAC,GAAG,KAAK,CAAC,CAAC,CAAC,KAAK,CAAC,WAAW,CAAC,CAAC,CAAC,SAAS,CAAC;YACtE,cAAc,CAAC,SAAS,CAAC,GAAG,KAAK,CAAC,CAAC,CAAC,KAAK,CAAC,OAAO,CAAC,CAAC,CAAC,SAAS,CAAC;SACjE;aAAM;YACH,MAAM,IAAI,GAAG,WAAqC,CAAC;YACnD,IAAI,CAAC,CAAC,IAAI,IAAI,IAAI,CAAC,MAAM,KAAK,SAAS,CAAC,IAAI,CAAC,IAAI,CAAC,GAAG,EAAE;gBACnD,MAAM,IAAI,KAAK,CAAC,oCAAoC,CAAC,CAAC;aACzD;YACD,IAAI,CAAC,CAAC,IAAI,IAAI,IAAI,CAAC,WAAW,KAAK,SAAS,CAAC,IAAI,CAAC,IAAI,CAAC,GAAG,EAAE;gBACxD,MAAM,IAAI,KAAK,CAAC,yCAAyC,CAAC,CAAC;aAC9D;YACD,cAAc,CAAC,aAAa,CAAC,GAAG,CAAA,IAAI,aAAJ,IAAI,uBAAJ,IAAI,CAAE,WAAW,EAAC,CAAC,CAAC,MAAM,CAAC,MAAM,CAAC,IAAI,CAAC,WAAW,CAAC,CAAC,CAAC,CAAC,SAAS,CAAC;YAChG,cAAc,CAAC,QAAQ,CAAC,GAAG,IAAI,CAAC,CAAC,CAAC,IAAI,CAAC,MAAM,CAAC,CAAC,CAAC,SAAS,CAAC;YAC1D,cAAc,CAAC,YAAY,CAAC,GAAG,IAAI,CAAC,CAAC,CAAC,IAAI,CAAC,UAAU,CAAC,CAAC,CAAC,SAAS,CAAC;YAClE,cAAc,CAAC,UAAU,CAAC,GAAG,IAAI,CAAC,CAAC,CAAC,IAAI,CAAC,QAAQ,CAAC,CAAC,CAAC,SAAS,CAAC;YAC9D,cAAc,CAAC,kBAAkB,CAAC,GAAG,IAAI,CAAC,CAAC,CAAC,IAAI,CAAC,gBAAgB,CAAC,CAAC,CAAC,SAAS,CAAC;YAC9E,cAAc,CAAC,cAAc,CAAC,GAAG,IAAI,CAAC,CAAC,CAAC,IAAI,CAAC,YAAY,CAAC,CAAC,CAAC,SAAS,CAAC;YACtE,cAAc,CAAC,SAAS,CAAC,GAAG,IAAI,CAAC,CAAC,CAAC,IAAI,CAAC,OAAO,CAAC,CAAC,CAAC,SAAS,CAAC;YAC5D,cAAc,CAAC,QAAQ,CAAC,GAAG,IAAI,CAAC,CAAC,CAAC,IAAI,CAAC,MAAM,CAAC,CAAC,CAAC,SAAS,CAAC;YAC1D,cAAc,CAAC,kBAAkB,CAAC,GAAG,IAAI,CAAC,CAAC,CAAC,IAAI,CAAC,gBAAgB,CAAC,CAAC,CAAC,SAAS,CAAC;YAC9E,cAAc,CAAC,uBAAuB,CAAC,GAAG,IAAI,CAAC,CAAC,CAAC,IAAI,CAAC,qBAAqB,CAAC,CAAC,CAAC,SAAS,CAAC;YACxF,cAAc,CAAC,aAAa,CAAC,GAAG,IAAI,CAAC,CAAC,CAAC,IAAI,CAAC,WAAW,CAAC,CAAC,CAAC,SAAS,CAAC;YACpE,cAAc,CAAC,kBAAkB,CAAC,GAAG,SAAS,CAAC,OAAO,CAAC;YACvD,cAAc,CAAC,SAAS,CAAC,GAAG,SAAS,CAAC,OAAO,CAAC;SACjD;QACD,IAAI,GAAG,MAAM,CAAC,YAAY,CAAC,SAAS,CAAC,oBAAoB,EAAE,EAAE,IAAI,CAAC,CAAC;QACnE,MAAM,UAAU,GAAG,EAAE,uBAAuB,EAAE,CAAC,aAAa,CAAC,EAAE,CAAC;QAChE,IAAI,GAAG,MAAM,CAAC,YAAY,CAAC,IAAI,EAAE,UAAU,CAAC,CAAC;QAC7C,KAAK,CAAC,MAAM,CAAC,YAAY,EAAE,IAAI,EAAE,cAAc,EAAE,IAAI,CAAC,CAAC;IAC3D,CAAC;;AAlIL,wBAmIC;AArHG,gBAAgB;AACO,mBAAY,GAAG,oCAAoC,CAAC"}
|
package/schemaRegistryDek.d.ts
CHANGED
|
@@ -1,6 +1,23 @@
|
|
|
1
1
|
import * as pulumi from "@pulumi/pulumi";
|
|
2
2
|
import * as inputs from "./types/input";
|
|
3
3
|
import * as outputs from "./types/output";
|
|
4
|
+
/**
|
|
5
|
+
* ## Import
|
|
6
|
+
*
|
|
7
|
+
* You can import a Schema Registry Key by using the Schema Registry cluster ID, KEK name, Subject, Version and Algorithm in the format `<Schema Registry Cluster Id>/<Schema Registry KEK Name>/<Subject>/<Version>/<Algorithm>`, for example:
|
|
8
|
+
*
|
|
9
|
+
* $ export IMPORT_SCHEMA_REGISTRY_API_KEY="<schema_registry_api_key>"
|
|
10
|
+
*
|
|
11
|
+
* $ export IMPORT_SCHEMA_REGISTRY_API_SECRET="<schema_registry_api_secret>"
|
|
12
|
+
*
|
|
13
|
+
* $ export IMPORT_SCHEMA_REGISTRY_REST_ENDPOINT="<schema_registry_rest_endpoint>"
|
|
14
|
+
*
|
|
15
|
+
* ```sh
|
|
16
|
+
* $ pulumi import confluentcloud:index/schemaRegistryDek:SchemaRegistryDek my_dek lsrc-8wrx70/testkek/ts/1/AES256_GCM
|
|
17
|
+
* ```
|
|
18
|
+
*
|
|
19
|
+
* !> **Warning:** Do not forget to delete terminal command history afterwards for security purposes.
|
|
20
|
+
*/
|
|
4
21
|
export declare class SchemaRegistryDek extends pulumi.CustomResource {
|
|
5
22
|
/**
|
|
6
23
|
* Get an existing SchemaRegistryDek resource's state with the given name, ID, and optional extra
|
|
@@ -17,26 +34,43 @@ export declare class SchemaRegistryDek extends pulumi.CustomResource {
|
|
|
17
34
|
* when multiple copies of the Pulumi SDK have been loaded into the same process.
|
|
18
35
|
*/
|
|
19
36
|
static isInstance(obj: any): obj is SchemaRegistryDek;
|
|
37
|
+
/**
|
|
38
|
+
* Accepted values are: `AES128_GCM`, `AES256_GCM`, and `AES256_SIV`. Defaults to `AES256_GCM`.
|
|
39
|
+
*/
|
|
20
40
|
readonly algorithm: pulumi.Output<string | undefined>;
|
|
21
41
|
/**
|
|
22
42
|
* The Cluster API Credentials.
|
|
23
43
|
*/
|
|
24
44
|
readonly credentials: pulumi.Output<outputs.SchemaRegistryDekCredentials | undefined>;
|
|
45
|
+
/**
|
|
46
|
+
* The encrypted key material for the DEK.
|
|
47
|
+
*/
|
|
25
48
|
readonly encryptedKeyMaterial: pulumi.Output<string>;
|
|
26
49
|
/**
|
|
27
50
|
* Controls whether a dek should be soft or hard deleted. Set it to `true` if you want to hard delete a schema registry dek
|
|
28
51
|
* on destroy. Defaults to `false` (soft delete).
|
|
29
52
|
*/
|
|
30
53
|
readonly hardDelete: pulumi.Output<boolean | undefined>;
|
|
54
|
+
/**
|
|
55
|
+
* The name of the KEK used to encrypt this DEK.
|
|
56
|
+
*/
|
|
31
57
|
readonly kekName: pulumi.Output<string>;
|
|
58
|
+
/**
|
|
59
|
+
* (Optional String) The decrypted version of encrypted key material.
|
|
60
|
+
*/
|
|
32
61
|
readonly keyMaterial: pulumi.Output<string>;
|
|
33
62
|
/**
|
|
34
|
-
* The REST endpoint of the Schema Registry cluster, for example,
|
|
35
|
-
* `https://psrc-00000.us-central1.gcp.confluent.cloud:443`).
|
|
63
|
+
* The REST endpoint of the Schema Registry cluster, for example, `https://psrc-00000.us-central1.gcp.confluent.cloud:443`).
|
|
36
64
|
*/
|
|
37
65
|
readonly restEndpoint: pulumi.Output<string | undefined>;
|
|
38
66
|
readonly schemaRegistryCluster: pulumi.Output<outputs.SchemaRegistryDekSchemaRegistryCluster | undefined>;
|
|
67
|
+
/**
|
|
68
|
+
* The subject for this DEK.
|
|
69
|
+
*/
|
|
39
70
|
readonly subjectName: pulumi.Output<string>;
|
|
71
|
+
/**
|
|
72
|
+
* The version of this DEK. Defaults to `1`.
|
|
73
|
+
*/
|
|
40
74
|
readonly version: pulumi.Output<number | undefined>;
|
|
41
75
|
/**
|
|
42
76
|
* Create a SchemaRegistryDek resource with the given unique name, arguments, and options.
|
|
@@ -51,50 +85,81 @@ export declare class SchemaRegistryDek extends pulumi.CustomResource {
|
|
|
51
85
|
* Input properties used for looking up and filtering SchemaRegistryDek resources.
|
|
52
86
|
*/
|
|
53
87
|
export interface SchemaRegistryDekState {
|
|
88
|
+
/**
|
|
89
|
+
* Accepted values are: `AES128_GCM`, `AES256_GCM`, and `AES256_SIV`. Defaults to `AES256_GCM`.
|
|
90
|
+
*/
|
|
54
91
|
algorithm?: pulumi.Input<string>;
|
|
55
92
|
/**
|
|
56
93
|
* The Cluster API Credentials.
|
|
57
94
|
*/
|
|
58
95
|
credentials?: pulumi.Input<inputs.SchemaRegistryDekCredentials>;
|
|
96
|
+
/**
|
|
97
|
+
* The encrypted key material for the DEK.
|
|
98
|
+
*/
|
|
59
99
|
encryptedKeyMaterial?: pulumi.Input<string>;
|
|
60
100
|
/**
|
|
61
101
|
* Controls whether a dek should be soft or hard deleted. Set it to `true` if you want to hard delete a schema registry dek
|
|
62
102
|
* on destroy. Defaults to `false` (soft delete).
|
|
63
103
|
*/
|
|
64
104
|
hardDelete?: pulumi.Input<boolean>;
|
|
105
|
+
/**
|
|
106
|
+
* The name of the KEK used to encrypt this DEK.
|
|
107
|
+
*/
|
|
65
108
|
kekName?: pulumi.Input<string>;
|
|
109
|
+
/**
|
|
110
|
+
* (Optional String) The decrypted version of encrypted key material.
|
|
111
|
+
*/
|
|
66
112
|
keyMaterial?: pulumi.Input<string>;
|
|
67
113
|
/**
|
|
68
|
-
* The REST endpoint of the Schema Registry cluster, for example,
|
|
69
|
-
* `https://psrc-00000.us-central1.gcp.confluent.cloud:443`).
|
|
114
|
+
* The REST endpoint of the Schema Registry cluster, for example, `https://psrc-00000.us-central1.gcp.confluent.cloud:443`).
|
|
70
115
|
*/
|
|
71
116
|
restEndpoint?: pulumi.Input<string>;
|
|
72
117
|
schemaRegistryCluster?: pulumi.Input<inputs.SchemaRegistryDekSchemaRegistryCluster>;
|
|
118
|
+
/**
|
|
119
|
+
* The subject for this DEK.
|
|
120
|
+
*/
|
|
73
121
|
subjectName?: pulumi.Input<string>;
|
|
122
|
+
/**
|
|
123
|
+
* The version of this DEK. Defaults to `1`.
|
|
124
|
+
*/
|
|
74
125
|
version?: pulumi.Input<number>;
|
|
75
126
|
}
|
|
76
127
|
/**
|
|
77
128
|
* The set of arguments for constructing a SchemaRegistryDek resource.
|
|
78
129
|
*/
|
|
79
130
|
export interface SchemaRegistryDekArgs {
|
|
131
|
+
/**
|
|
132
|
+
* Accepted values are: `AES128_GCM`, `AES256_GCM`, and `AES256_SIV`. Defaults to `AES256_GCM`.
|
|
133
|
+
*/
|
|
80
134
|
algorithm?: pulumi.Input<string>;
|
|
81
135
|
/**
|
|
82
136
|
* The Cluster API Credentials.
|
|
83
137
|
*/
|
|
84
138
|
credentials?: pulumi.Input<inputs.SchemaRegistryDekCredentials>;
|
|
139
|
+
/**
|
|
140
|
+
* The encrypted key material for the DEK.
|
|
141
|
+
*/
|
|
85
142
|
encryptedKeyMaterial?: pulumi.Input<string>;
|
|
86
143
|
/**
|
|
87
144
|
* Controls whether a dek should be soft or hard deleted. Set it to `true` if you want to hard delete a schema registry dek
|
|
88
145
|
* on destroy. Defaults to `false` (soft delete).
|
|
89
146
|
*/
|
|
90
147
|
hardDelete?: pulumi.Input<boolean>;
|
|
148
|
+
/**
|
|
149
|
+
* The name of the KEK used to encrypt this DEK.
|
|
150
|
+
*/
|
|
91
151
|
kekName: pulumi.Input<string>;
|
|
92
152
|
/**
|
|
93
|
-
* The REST endpoint of the Schema Registry cluster, for example,
|
|
94
|
-
* `https://psrc-00000.us-central1.gcp.confluent.cloud:443`).
|
|
153
|
+
* The REST endpoint of the Schema Registry cluster, for example, `https://psrc-00000.us-central1.gcp.confluent.cloud:443`).
|
|
95
154
|
*/
|
|
96
155
|
restEndpoint?: pulumi.Input<string>;
|
|
97
156
|
schemaRegistryCluster?: pulumi.Input<inputs.SchemaRegistryDekSchemaRegistryCluster>;
|
|
157
|
+
/**
|
|
158
|
+
* The subject for this DEK.
|
|
159
|
+
*/
|
|
98
160
|
subjectName: pulumi.Input<string>;
|
|
161
|
+
/**
|
|
162
|
+
* The version of this DEK. Defaults to `1`.
|
|
163
|
+
*/
|
|
99
164
|
version?: pulumi.Input<number>;
|
|
100
165
|
}
|
package/schemaRegistryDek.js
CHANGED
|
@@ -5,6 +5,23 @@ Object.defineProperty(exports, "__esModule", { value: true });
|
|
|
5
5
|
exports.SchemaRegistryDek = void 0;
|
|
6
6
|
const pulumi = require("@pulumi/pulumi");
|
|
7
7
|
const utilities = require("./utilities");
|
|
8
|
+
/**
|
|
9
|
+
* ## Import
|
|
10
|
+
*
|
|
11
|
+
* You can import a Schema Registry Key by using the Schema Registry cluster ID, KEK name, Subject, Version and Algorithm in the format `<Schema Registry Cluster Id>/<Schema Registry KEK Name>/<Subject>/<Version>/<Algorithm>`, for example:
|
|
12
|
+
*
|
|
13
|
+
* $ export IMPORT_SCHEMA_REGISTRY_API_KEY="<schema_registry_api_key>"
|
|
14
|
+
*
|
|
15
|
+
* $ export IMPORT_SCHEMA_REGISTRY_API_SECRET="<schema_registry_api_secret>"
|
|
16
|
+
*
|
|
17
|
+
* $ export IMPORT_SCHEMA_REGISTRY_REST_ENDPOINT="<schema_registry_rest_endpoint>"
|
|
18
|
+
*
|
|
19
|
+
* ```sh
|
|
20
|
+
* $ pulumi import confluentcloud:index/schemaRegistryDek:SchemaRegistryDek my_dek lsrc-8wrx70/testkek/ts/1/AES256_GCM
|
|
21
|
+
* ```
|
|
22
|
+
*
|
|
23
|
+
* !> **Warning:** Do not forget to delete terminal command history afterwards for security purposes.
|
|
24
|
+
*/
|
|
8
25
|
class SchemaRegistryDek extends pulumi.CustomResource {
|
|
9
26
|
/**
|
|
10
27
|
* Get an existing SchemaRegistryDek resource's state with the given name, ID, and optional extra
|
package/schemaRegistryDek.js.map
CHANGED
|
@@ -1 +1 @@
|
|
|
1
|
-
{"version":3,"file":"schemaRegistryDek.js","sourceRoot":"","sources":["../schemaRegistryDek.ts"],"names":[],"mappings":";AAAA,wFAAwF;AACxF,iFAAiF;;;AAEjF,yCAAyC;AAGzC,yCAAyC;AAEzC,MAAa,iBAAkB,SAAQ,MAAM,CAAC,cAAc;IACxD;;;;;;;;OAQG;IACI,MAAM,CAAC,GAAG,CAAC,IAAY,EAAE,EAA2B,EAAE,KAA8B,EAAE,IAAmC;QAC5H,OAAO,IAAI,iBAAiB,CAAC,IAAI,EAAO,KAAK,kCAAO,IAAI,KAAE,EAAE,EAAE,EAAE,IAAG,CAAC;IACxE,CAAC;IAKD;;;OAGG;IACI,MAAM,CAAC,UAAU,CAAC,GAAQ;QAC7B,IAAI,GAAG,KAAK,SAAS,IAAI,GAAG,KAAK,IAAI,EAAE;YACnC,OAAO,KAAK,CAAC;SAChB;QACD,OAAO,GAAG,CAAC,cAAc,CAAC,KAAK,iBAAiB,CAAC,YAAY,CAAC;IAClE,CAAC;
|
|
1
|
+
{"version":3,"file":"schemaRegistryDek.js","sourceRoot":"","sources":["../schemaRegistryDek.ts"],"names":[],"mappings":";AAAA,wFAAwF;AACxF,iFAAiF;;;AAEjF,yCAAyC;AAGzC,yCAAyC;AAEzC;;;;;;;;;;;;;;;;GAgBG;AACH,MAAa,iBAAkB,SAAQ,MAAM,CAAC,cAAc;IACxD;;;;;;;;OAQG;IACI,MAAM,CAAC,GAAG,CAAC,IAAY,EAAE,EAA2B,EAAE,KAA8B,EAAE,IAAmC;QAC5H,OAAO,IAAI,iBAAiB,CAAC,IAAI,EAAO,KAAK,kCAAO,IAAI,KAAE,EAAE,EAAE,EAAE,IAAG,CAAC;IACxE,CAAC;IAKD;;;OAGG;IACI,MAAM,CAAC,UAAU,CAAC,GAAQ;QAC7B,IAAI,GAAG,KAAK,SAAS,IAAI,GAAG,KAAK,IAAI,EAAE;YACnC,OAAO,KAAK,CAAC;SAChB;QACD,OAAO,GAAG,CAAC,cAAc,CAAC,KAAK,iBAAiB,CAAC,YAAY,CAAC;IAClE,CAAC;IAiDD,YAAY,IAAY,EAAE,WAA4D,EAAE,IAAmC;QACvH,IAAI,cAAc,GAAkB,EAAE,CAAC;QACvC,IAAI,GAAG,IAAI,IAAI,EAAE,CAAC;QAClB,IAAI,IAAI,CAAC,EAAE,EAAE;YACT,MAAM,KAAK,GAAG,WAAiD,CAAC;YAChE,cAAc,CAAC,WAAW,CAAC,GAAG,KAAK,CAAC,CAAC,CAAC,KAAK,CAAC,SAAS,CAAC,CAAC,CAAC,SAAS,CAAC;YAClE,cAAc,CAAC,aAAa,CAAC,GAAG,KAAK,CAAC,CAAC,CAAC,KAAK,CAAC,WAAW,CAAC,CAAC,CAAC,SAAS,CAAC;YACtE,cAAc,CAAC,sBAAsB,CAAC,GAAG,KAAK,CAAC,CAAC,CAAC,KAAK,CAAC,oBAAoB,CAAC,CAAC,CAAC,SAAS,CAAC;YACxF,cAAc,CAAC,YAAY,CAAC,GAAG,KAAK,CAAC,CAAC,CAAC,KAAK,CAAC,UAAU,CAAC,CAAC,CAAC,SAAS,CAAC;YACpE,cAAc,CAAC,SAAS,CAAC,GAAG,KAAK,CAAC,CAAC,CAAC,KAAK,CAAC,OAAO,CAAC,CAAC,CAAC,SAAS,CAAC;YAC9D,cAAc,CAAC,aAAa,CAAC,GAAG,KAAK,CAAC,CAAC,CAAC,KAAK,CAAC,WAAW,CAAC,CAAC,CAAC,SAAS,CAAC;YACtE,cAAc,CAAC,cAAc,CAAC,GAAG,KAAK,CAAC,CAAC,CAAC,KAAK,CAAC,YAAY,CAAC,CAAC,CAAC,SAAS,CAAC;YACxE,cAAc,CAAC,uBAAuB,CAAC,GAAG,KAAK,CAAC,CAAC,CAAC,KAAK,CAAC,qBAAqB,CAAC,CAAC,CAAC,SAAS,CAAC;YAC1F,cAAc,CAAC,aAAa,CAAC,GAAG,KAAK,CAAC,CAAC,CAAC,KAAK,CAAC,WAAW,CAAC,CAAC,CAAC,SAAS,CAAC;YACtE,cAAc,CAAC,SAAS,CAAC,GAAG,KAAK,CAAC,CAAC,CAAC,KAAK,CAAC,OAAO,CAAC,CAAC,CAAC,SAAS,CAAC;SACjE;aAAM;YACH,MAAM,IAAI,GAAG,WAAgD,CAAC;YAC9D,IAAI,CAAC,CAAC,IAAI,IAAI,IAAI,CAAC,OAAO,KAAK,SAAS,CAAC,IAAI,CAAC,IAAI,CAAC,GAAG,EAAE;gBACpD,MAAM,IAAI,KAAK,CAAC,qCAAqC,CAAC,CAAC;aAC1D;YACD,IAAI,CAAC,CAAC,IAAI,IAAI,IAAI,CAAC,WAAW,KAAK,SAAS,CAAC,IAAI,CAAC,IAAI,CAAC,GAAG,EAAE;gBACxD,MAAM,IAAI,KAAK,CAAC,yCAAyC,CAAC,CAAC;aAC9D;YACD,cAAc,CAAC,WAAW,CAAC,GAAG,IAAI,CAAC,CAAC,CAAC,IAAI,CAAC,SAAS,CAAC,CAAC,CAAC,SAAS,CAAC;YAChE,cAAc,CAAC,aAAa,CAAC,GAAG,CAAA,IAAI,aAAJ,IAAI,uBAAJ,IAAI,CAAE,WAAW,EAAC,CAAC,CAAC,MAAM,CAAC,MAAM,CAAC,IAAI,CAAC,WAAW,CAAC,CAAC,CAAC,CAAC,SAAS,CAAC;YAChG,cAAc,CAAC,sBAAsB,CAAC,GAAG,IAAI,CAAC,CAAC,CAAC,IAAI,CAAC,oBAAoB,CAAC,CAAC,CAAC,SAAS,CAAC;YACtF,cAAc,CAAC,YAAY,CAAC,GAAG,IAAI,CAAC,CAAC,CAAC,IAAI,CAAC,UAAU,CAAC,CAAC,CAAC,SAAS,CAAC;YAClE,cAAc,CAAC,SAAS,CAAC,GAAG,IAAI,CAAC,CAAC,CAAC,IAAI,CAAC,OAAO,CAAC,CAAC,CAAC,SAAS,CAAC;YAC5D,cAAc,CAAC,cAAc,CAAC,GAAG,IAAI,CAAC,CAAC,CAAC,IAAI,CAAC,YAAY,CAAC,CAAC,CAAC,SAAS,CAAC;YACtE,cAAc,CAAC,uBAAuB,CAAC,GAAG,IAAI,CAAC,CAAC,CAAC,IAAI,CAAC,qBAAqB,CAAC,CAAC,CAAC,SAAS,CAAC;YACxF,cAAc,CAAC,aAAa,CAAC,GAAG,IAAI,CAAC,CAAC,CAAC,IAAI,CAAC,WAAW,CAAC,CAAC,CAAC,SAAS,CAAC;YACpE,cAAc,CAAC,SAAS,CAAC,GAAG,IAAI,CAAC,CAAC,CAAC,IAAI,CAAC,OAAO,CAAC,CAAC,CAAC,SAAS,CAAC;YAC5D,cAAc,CAAC,aAAa,CAAC,GAAG,SAAS,CAAC,OAAO,CAAC;SACrD;QACD,IAAI,GAAG,MAAM,CAAC,YAAY,CAAC,SAAS,CAAC,oBAAoB,EAAE,EAAE,IAAI,CAAC,CAAC;QACnE,MAAM,UAAU,GAAG,EAAE,uBAAuB,EAAE,CAAC,aAAa,CAAC,EAAE,CAAC;QAChE,IAAI,GAAG,MAAM,CAAC,YAAY,CAAC,IAAI,EAAE,UAAU,CAAC,CAAC;QAC7C,KAAK,CAAC,iBAAiB,CAAC,YAAY,EAAE,IAAI,EAAE,cAAc,EAAE,IAAI,CAAC,CAAC;IACtE,CAAC;;AAjHL,8CAkHC;AApGG,gBAAgB;AACO,8BAAY,GAAG,0DAA0D,CAAC"}
|