@pulumi/confluentcloud 2.58.0 → 2.59.0-alpha.1770934913

package/gateway.d.ts

@@ -32,13 +32,13 @@ import * as outputs from "./types/output";
  *
  * ## Import
  *
+ * > **Note:** `CONFLUENT_CLOUD_API_KEY` and `CONFLUENT_CLOUD_API_SECRET` environment variables must be set before importing a Gateway.
+ *
  * You can import a Gateway by using Environment ID and Gateway ID, in the format `<Environment ID>/<Gateway ID>`. The following example shows how to import a Gateway:
  *
+ * ```sh
  * $ export CONFLUENT_CLOUD_API_KEY="<cloud_api_key>"
- *
  * $ export CONFLUENT_CLOUD_API_SECRET="<cloud_api_secret>"
- *
- * ```sh
  * $ pulumi import confluentcloud:index/gateway:Gateway main env-abc123/gw-abc123
  * ```
  *

package/gateway.js

@@ -36,13 +36,13 @@ const utilities = require("./utilities");
  *
  * ## Import
  *
+ * > **Note:** `CONFLUENT_CLOUD_API_KEY` and `CONFLUENT_CLOUD_API_SECRET` environment variables must be set before importing a Gateway.
+ *
  * You can import a Gateway by using Environment ID and Gateway ID, in the format `<Environment ID>/<Gateway ID>`. The following example shows how to import a Gateway:
  *
+ * ```sh
  * $ export CONFLUENT_CLOUD_API_KEY="<cloud_api_key>"
- *
  * $ export CONFLUENT_CLOUD_API_SECRET="<cloud_api_secret>"
- *
- * ```sh
  * $ pulumi import confluentcloud:index/gateway:Gateway main env-abc123/gw-abc123
  * ```
  *

package/getNetwork.d.ts

@@ -2,6 +2,22 @@ import * as pulumi from "@pulumi/pulumi";
 import * as inputs from "./types/input";
 import * as outputs from "./types/output";
 /**
+ * ##
+ *
+ * ***
+ * # generated by https://github.com/hashicorp/terraform-plugin-docs
+ * page_title: "confluentcloud.Network " pulumi-lang-dotnet="Data Source - terraform-provider-confluent"
+ * subcategory: ""
+ * description: |-
+ *
+ * ***
+ *
+ * # confluentcloud.Network Data Source
+ *
+ * [![General Availability](https://img.shields.io/badge/Lifecycle%20Stage-General%20Availability-%2345c6e8)](https://docs.confluent.io/cloud/current/api.html#section/Versioning/API-Lifecycle-Policy)
+ *
+ * `confluentcloud.Network` describes a Network data source.
+ *
  * ## Example Usage
  *
  * ```typescript
@@ -142,6 +158,22 @@ export interface GetNetworkResult {
     readonly zones: string[];
 }
 /**
+ * ##
+ *
+ * ***
+ * # generated by https://github.com/hashicorp/terraform-plugin-docs
+ * page_title: "confluentcloud.Network " pulumi-lang-dotnet="Data Source - terraform-provider-confluent"
+ * subcategory: ""
+ * description: |-
+ *
+ * ***
+ *
+ * # confluentcloud.Network Data Source
+ *
+ * [![General Availability](https://img.shields.io/badge/Lifecycle%20Stage-General%20Availability-%2345c6e8)](https://docs.confluent.io/cloud/current/api.html#section/Versioning/API-Lifecycle-Policy)
+ *
+ * `confluentcloud.Network` describes a Network data source.
+ *
  * ## Example Usage
  *
  * ```typescript

package/getNetwork.js

@@ -6,6 +6,22 @@ exports.getNetworkOutput = exports.getNetwork = void 0;
 const pulumi = require("@pulumi/pulumi");
 const utilities = require("./utilities");
 /**
+ * ##
+ *
+ * ***
+ * # generated by https://github.com/hashicorp/terraform-plugin-docs
+ * page_title: "confluentcloud.Network " pulumi-lang-dotnet="Data Source - terraform-provider-confluent"
+ * subcategory: ""
+ * description: |-
+ *
+ * ***
+ *
+ * # confluentcloud.Network Data Source
+ *
+ * [![General Availability](https://img.shields.io/badge/Lifecycle%20Stage-General%20Availability-%2345c6e8)](https://docs.confluent.io/cloud/current/api.html#section/Versioning/API-Lifecycle-Policy)
+ *
+ * `confluentcloud.Network` describes a Network data source.
+ *
  * ## Example Usage
  *
  * ```typescript
@@ -49,6 +65,22 @@ function getNetwork(args, opts) {
 }
 exports.getNetwork = getNetwork;
 /**
+ * ##
+ *
+ * ***
+ * # generated by https://github.com/hashicorp/terraform-plugin-docs
+ * page_title: "confluentcloud.Network " pulumi-lang-dotnet="Data Source - terraform-provider-confluent"
+ * subcategory: ""
+ * description: |-
+ *
+ * ***
+ *
+ * # confluentcloud.Network Data Source
+ *
+ * [![General Availability](https://img.shields.io/badge/Lifecycle%20Stage-General%20Availability-%2345c6e8)](https://docs.confluent.io/cloud/current/api.html#section/Versioning/API-Lifecycle-Policy)
+ *
+ * `confluentcloud.Network` describes a Network data source.
+ *
  * ## Example Usage
  *
  * ```typescript

package/getNetwork.js.map

@@ -1 +1 @@
-{"version":3,"file":"getNetwork.js","sourceRoot":"","sources":["../getNetwork.ts"],"names":[],"mappings":";AAAA,sEAAsE;AACtE,iFAAiF;;;AAEjF,yCAAyC;AAGzC,yCAAyC;AAEzC;;;;;;;;;;;;;;;;;;;;;;;;;;;;;GA6BG;AACH,SAAgB,UAAU,CAAC,IAAoB,EAAE,IAA2B;IACxE,IAAI,GAAG,MAAM,CAAC,YAAY,CAAC,SAAS,CAAC,oBAAoB,EAAE,EAAE,IAAI,IAAI,EAAE,CAAC,CAAC;IACzE,OAAO,MAAM,CAAC,OAAO,CAAC,MAAM,CAAC,4CAA4C,EAAE;QACvE,KAAK,EAAE,IAAI,CAAC,GAAG;QACf,QAAQ,EAAE,IAAI,CAAC,MAAM;QACrB,aAAa,EAAE,IAAI,CAAC,WAAW;QAC/B,YAAY,EAAE,IAAI,CAAC,UAAU;QAC7B,aAAa,EAAE,IAAI,CAAC,WAAW;QAC/B,MAAM,EAAE,IAAI,CAAC,IAAI;QACjB,IAAI,EAAE,IAAI,CAAC,EAAE;KAChB,EAAE,IAAI,CAAC,CAAC;AACb,CAAC;AAXD,gCAWC;AA8GD;;;;;;;;;;;;;;;;;;;;;;;;;;;;;GA6BG;AACH,SAAgB,gBAAgB,CAAC,IAA0B,EAAE,IAAiC;IAC1F,IAAI,GAAG,MAAM,CAAC,YAAY,CAAC,SAAS,CAAC,oBAAoB,EAAE,EAAE,IAAI,IAAI,EAAE,CAAC,CAAC;IACzE,OAAO,MAAM,CAAC,OAAO,CAAC,YAAY,CAAC,4CAA4C,EAAE;QAC7E,KAAK,EAAE,IAAI,CAAC,GAAG;QACf,QAAQ,EAAE,IAAI,CAAC,MAAM;QACrB,aAAa,EAAE,IAAI,CAAC,WAAW;QAC/B,YAAY,EAAE,IAAI,CAAC,UAAU;QAC7B,aAAa,EAAE,IAAI,CAAC,WAAW;QAC/B,MAAM,EAAE,IAAI,CAAC,IAAI;QACjB,IAAI,EAAE,IAAI,CAAC,EAAE;KAChB,EAAE,IAAI,CAAC,CAAC;AACb,CAAC;AAXD,4CAWC"}
+{"version":3,"file":"getNetwork.js","sourceRoot":"","sources":["../getNetwork.ts"],"names":[],"mappings":";AAAA,sEAAsE;AACtE,iFAAiF;;;AAEjF,yCAAyC;AAGzC,yCAAyC;AAEzC;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;GA6CG;AACH,SAAgB,UAAU,CAAC,IAAoB,EAAE,IAA2B;IACxE,IAAI,GAAG,MAAM,CAAC,YAAY,CAAC,SAAS,CAAC,oBAAoB,EAAE,EAAE,IAAI,IAAI,EAAE,CAAC,CAAC;IACzE,OAAO,MAAM,CAAC,OAAO,CAAC,MAAM,CAAC,4CAA4C,EAAE;QACvE,KAAK,EAAE,IAAI,CAAC,GAAG;QACf,QAAQ,EAAE,IAAI,CAAC,MAAM;QACrB,aAAa,EAAE,IAAI,CAAC,WAAW;QAC/B,YAAY,EAAE,IAAI,CAAC,UAAU;QAC7B,aAAa,EAAE,IAAI,CAAC,WAAW;QAC/B,MAAM,EAAE,IAAI,CAAC,IAAI;QACjB,IAAI,EAAE,IAAI,CAAC,EAAE;KAChB,EAAE,IAAI,CAAC,CAAC;AACb,CAAC;AAXD,gCAWC;AA8GD;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;GA6CG;AACH,SAAgB,gBAAgB,CAAC,IAA0B,EAAE,IAAiC;IAC1F,IAAI,GAAG,MAAM,CAAC,YAAY,CAAC,SAAS,CAAC,oBAAoB,EAAE,EAAE,IAAI,IAAI,EAAE,CAAC,CAAC;IACzE,OAAO,MAAM,CAAC,OAAO,CAAC,YAAY,CAAC,4CAA4C,EAAE;QAC7E,KAAK,EAAE,IAAI,CAAC,GAAG;QACf,QAAQ,EAAE,IAAI,CAAC,MAAM;QACrB,aAAa,EAAE,IAAI,CAAC,WAAW;QAC/B,YAAY,EAAE,IAAI,CAAC,UAAU;QAC7B,aAAa,EAAE,IAAI,CAAC,WAAW;QAC/B,MAAM,EAAE,IAAI,CAAC,IAAI;QACjB,IAAI,EAAE,IAAI,CAAC,EAAE;KAChB,EAAE,IAAI,CAAC,CAAC;AACb,CAAC;AAXD,4CAWC"}

package/getProviderIntegrationAuthorization.d.ts

@@ -1,6 +1,136 @@
 import * as pulumi from "@pulumi/pulumi";
 import * as inputs from "./types/input";
 import * as outputs from "./types/output";
+/**
+ * [![General Availability](https://img.shields.io/badge/Lifecycle%20Stage-General%20Availability-%2345c6e8)](https://docs.confluent.io/cloud/current/api.html#section/Versioning/API-Lifecycle-Policy)
+ *
+ * `confluentcloud.ProviderIntegrationAuthorization` describes the authorization configuration for a Cloud Service Provider (CSP) integration, including cloud-specific setup information like Azure multi-tenant app IDs or GCP service accounts.
+ *
+ * ## Example Usage
+ *
+ * ### Azure Provider Integration Authorization
+ *
+ * You can use the authorization data source with either approach:
+ *
+ * ### Option 1: With Azure Terraform Provider
+ *
+ * ```typescript
+ * import * as pulumi from "@pulumi/pulumi";
+ * import * as azuread from "@pulumi/azuread";
+ * import * as confluentcloud from "@pulumi/confluentcloud";
+ *
+ * // Get the authorization data
+ * const azure = confluentcloud.getProviderIntegrationAuthorization({
+ *     id: "cspi-abc123",
+ *     environment: {
+ *         id: "env-xyz456",
+ *     },
+ * });
+ * // Create the service principal using Azure Terraform Provider
+ * const confluent = new azuread.index.ServicePrincipal("confluent", {clientId: azure.azures?.[0]?.confluentMultiTenantAppId});
+ * export const azureAppId = azure.then(azure => azure.azures?.[0]?.confluentMultiTenantAppId);
+ * export const servicePrincipalObjectId = confluent.objectId;
+ * ```
+ *
+ * ### Option 2: With CLI Commands
+ *
+ * ```typescript
+ * import * as pulumi from "@pulumi/pulumi";
+ * import * as confluentcloud from "@pulumi/confluentcloud";
+ *
+ * // Get the authorization data
+ * const azure = confluentcloud.getProviderIntegrationAuthorization({
+ *     id: "cspi-abc123",
+ *     environment: {
+ *         id: "env-xyz456",
+ *     },
+ * });
+ * export const azureSetupCommand = azure.then(azure => `az ad sp create --id ${azure.azures?.[0]?.confluentMultiTenantAppId}`);
+ * ```
+ *
+ * ### GCP Provider Integration Authorization
+ *
+ * You can use the authorization data source with either approach:
+ *
+ * ### Option 1: With Google Terraform Provider
+ *
+ * ```typescript
+ * import * as pulumi from "@pulumi/pulumi";
+ * import * as confluentcloud from "@pulumi/confluentcloud";
+ * import * as google from "@pulumi/google";
+ *
+ * // Get the authorization data
+ * const gcp = confluentcloud.getProviderIntegrationAuthorization({
+ *     id: "cspi-def456",
+ *     environment: {
+ *         id: "env-xyz456",
+ *     },
+ * });
+ * // Grant IAM permissions using Google Terraform Provider
+ * const confluentTokenCreator = new google.index.ProjectIamMember("confluent_token_creator", {
+ *     project: gcpProjectId,
+ *     role: "roles/iam.serviceAccountTokenCreator",
+ *     member: `serviceAccount:${gcp.gcps?.[0]?.googleServiceAccount}`,
+ *     condition: [{
+ *         title: "Confluent Cloud Access",
+ *         description: "Allow Confluent Cloud to impersonate the customer service account",
+ *         expression: `request.auth.claims.sub == '${gcp.gcps?.[0]?.googleServiceAccount}'`,
+ *     }],
+ * });
+ * export const confluentServiceAccount = gcp.then(gcp => gcp.gcps?.[0]?.googleServiceAccount);
+ * export const customerServiceAccount = gcp.then(gcp => gcp.gcps?.[0]?.customerGoogleServiceAccount);
+ * ```
+ *
+ * ### Option 2: With gcloud CLI Commands
+ *
+ * ```typescript
+ * import * as pulumi from "@pulumi/pulumi";
+ * import * as confluentcloud from "@pulumi/confluentcloud";
+ *
+ * // Get the authorization data
+ * const gcp = confluentcloud.getProviderIntegrationAuthorization({
+ *     id: "cspi-def456",
+ *     environment: {
+ *         id: "env-xyz456",
+ *     },
+ * });
+ * export const gcpIamCommand = Promise.all([gcp, gcp]).then(([gcp, gcp1]) => `gcloud projects add-iam-policy-binding YOUR_PROJECT_ID --member="serviceAccount:${gcp.gcps?.[0]?.googleServiceAccount}" --role="roles/iam.serviceAccountTokenCreator" --condition="expression=request.auth.claims.sub=='${gcp1.gcps?.[0]?.googleServiceAccount}'"`);
+ * export const confluentServiceAccount = gcp.then(gcp => gcp.gcps?.[0]?.googleServiceAccount);
+ * ```
+ *
+ * ### Using with Integration Data Source
+ *
+ * ```typescript
+ * import * as pulumi from "@pulumi/pulumi";
+ * import * as confluentcloud from "@pulumi/confluentcloud";
+ *
+ * const main = confluentcloud.getProviderIntegrationSetup({
+ *     displayName: "my-integration",
+ *     environment: {
+ *         id: "env-xyz456",
+ *     },
+ * });
+ * const mainGetProviderIntegrationAuthorization = main.then(main => confluentcloud.getProviderIntegrationAuthorization({
+ *     id: main.id,
+ *     environment: {
+ *         id: "env-xyz456",
+ *     },
+ * }));
+ * export const setupInfo = Promise.all([main, mainGetProviderIntegrationAuthorization, mainGetProviderIntegrationAuthorization, mainGetProviderIntegrationAuthorization, mainGetProviderIntegrationAuthorization]).then(([main, mainGetProviderIntegrationAuthorization, mainGetProviderIntegrationAuthorization1, mainGetProviderIntegrationAuthorization2, mainGetProviderIntegrationAuthorization3]) => main.cloud == "AZURE" ? {
+ *     appId: mainGetProviderIntegrationAuthorization.azures?.[0]?.confluentMultiTenantAppId,
+ *     command: `az ad sp create --id ${mainGetProviderIntegrationAuthorization1.azures?.[0]?.confluentMultiTenantAppId}`,
+ * } : {
+ *     confluentSa: mainGetProviderIntegrationAuthorization2.gcps?.[0]?.googleServiceAccount,
+ *     customerSa: mainGetProviderIntegrationAuthorization3.gcps?.[0]?.customerGoogleServiceAccount,
+ * });
+ * ```
+ *
+ * ## Getting Started
+ *
+ * The following end-to-end examples might help to get started with `confluentcloud.ProviderIntegrationAuthorization` data source:
+ * * provider-integration-azure: Complete Azure Provider Integration setup
+ * * provider-integration-gcp: Complete GCP Provider Integration setup
+ */
 export declare function getProviderIntegrationAuthorization(args: GetProviderIntegrationAuthorizationArgs, opts?: pulumi.InvokeOptions): Promise<GetProviderIntegrationAuthorizationResult>;
 /**
  * A collection of arguments for invoking getProviderIntegrationAuthorization.
@@ -40,6 +170,136 @@ export interface GetProviderIntegrationAuthorizationResult {
      */
     readonly providerIntegrationId: string;
 }
+/**
+ * [![General Availability](https://img.shields.io/badge/Lifecycle%20Stage-General%20Availability-%2345c6e8)](https://docs.confluent.io/cloud/current/api.html#section/Versioning/API-Lifecycle-Policy)
+ *
+ * `confluentcloud.ProviderIntegrationAuthorization` describes the authorization configuration for a Cloud Service Provider (CSP) integration, including cloud-specific setup information like Azure multi-tenant app IDs or GCP service accounts.
+ *
+ * ## Example Usage
+ *
+ * ### Azure Provider Integration Authorization
+ *
+ * You can use the authorization data source with either approach:
+ *
+ * ### Option 1: With Azure Terraform Provider
+ *
+ * ```typescript
+ * import * as pulumi from "@pulumi/pulumi";
+ * import * as azuread from "@pulumi/azuread";
+ * import * as confluentcloud from "@pulumi/confluentcloud";
+ *
+ * // Get the authorization data
+ * const azure = confluentcloud.getProviderIntegrationAuthorization({
+ *     id: "cspi-abc123",
+ *     environment: {
+ *         id: "env-xyz456",
+ *     },
+ * });
+ * // Create the service principal using Azure Terraform Provider
+ * const confluent = new azuread.index.ServicePrincipal("confluent", {clientId: azure.azures?.[0]?.confluentMultiTenantAppId});
+ * export const azureAppId = azure.then(azure => azure.azures?.[0]?.confluentMultiTenantAppId);
+ * export const servicePrincipalObjectId = confluent.objectId;
+ * ```
+ *
+ * ### Option 2: With CLI Commands
+ *
+ * ```typescript
+ * import * as pulumi from "@pulumi/pulumi";
+ * import * as confluentcloud from "@pulumi/confluentcloud";
+ *
+ * // Get the authorization data
+ * const azure = confluentcloud.getProviderIntegrationAuthorization({
+ *     id: "cspi-abc123",
+ *     environment: {
+ *         id: "env-xyz456",
+ *     },
+ * });
+ * export const azureSetupCommand = azure.then(azure => `az ad sp create --id ${azure.azures?.[0]?.confluentMultiTenantAppId}`);
+ * ```
+ *
+ * ### GCP Provider Integration Authorization
+ *
+ * You can use the authorization data source with either approach:
+ *
+ * ### Option 1: With Google Terraform Provider
+ *
+ * ```typescript
+ * import * as pulumi from "@pulumi/pulumi";
+ * import * as confluentcloud from "@pulumi/confluentcloud";
+ * import * as google from "@pulumi/google";
+ *
+ * // Get the authorization data
+ * const gcp = confluentcloud.getProviderIntegrationAuthorization({
+ *     id: "cspi-def456",
+ *     environment: {
+ *         id: "env-xyz456",
+ *     },
+ * });
+ * // Grant IAM permissions using Google Terraform Provider
+ * const confluentTokenCreator = new google.index.ProjectIamMember("confluent_token_creator", {
+ *     project: gcpProjectId,
+ *     role: "roles/iam.serviceAccountTokenCreator",
+ *     member: `serviceAccount:${gcp.gcps?.[0]?.googleServiceAccount}`,
+ *     condition: [{
+ *         title: "Confluent Cloud Access",
+ *         description: "Allow Confluent Cloud to impersonate the customer service account",
+ *         expression: `request.auth.claims.sub == '${gcp.gcps?.[0]?.googleServiceAccount}'`,
+ *     }],
+ * });
+ * export const confluentServiceAccount = gcp.then(gcp => gcp.gcps?.[0]?.googleServiceAccount);
+ * export const customerServiceAccount = gcp.then(gcp => gcp.gcps?.[0]?.customerGoogleServiceAccount);
+ * ```
+ *
+ * ### Option 2: With gcloud CLI Commands
+ *
+ * ```typescript
+ * import * as pulumi from "@pulumi/pulumi";
+ * import * as confluentcloud from "@pulumi/confluentcloud";
+ *
+ * // Get the authorization data
+ * const gcp = confluentcloud.getProviderIntegrationAuthorization({
+ *     id: "cspi-def456",
+ *     environment: {
+ *         id: "env-xyz456",
+ *     },
+ * });
+ * export const gcpIamCommand = Promise.all([gcp, gcp]).then(([gcp, gcp1]) => `gcloud projects add-iam-policy-binding YOUR_PROJECT_ID --member="serviceAccount:${gcp.gcps?.[0]?.googleServiceAccount}" --role="roles/iam.serviceAccountTokenCreator" --condition="expression=request.auth.claims.sub=='${gcp1.gcps?.[0]?.googleServiceAccount}'"`);
+ * export const confluentServiceAccount = gcp.then(gcp => gcp.gcps?.[0]?.googleServiceAccount);
+ * ```
+ *
+ * ### Using with Integration Data Source
+ *
+ * ```typescript
+ * import * as pulumi from "@pulumi/pulumi";
+ * import * as confluentcloud from "@pulumi/confluentcloud";
+ *
+ * const main = confluentcloud.getProviderIntegrationSetup({
+ *     displayName: "my-integration",
+ *     environment: {
+ *         id: "env-xyz456",
+ *     },
+ * });
+ * const mainGetProviderIntegrationAuthorization = main.then(main => confluentcloud.getProviderIntegrationAuthorization({
+ *     id: main.id,
+ *     environment: {
+ *         id: "env-xyz456",
+ *     },
+ * }));
+ * export const setupInfo = Promise.all([main, mainGetProviderIntegrationAuthorization, mainGetProviderIntegrationAuthorization, mainGetProviderIntegrationAuthorization, mainGetProviderIntegrationAuthorization]).then(([main, mainGetProviderIntegrationAuthorization, mainGetProviderIntegrationAuthorization1, mainGetProviderIntegrationAuthorization2, mainGetProviderIntegrationAuthorization3]) => main.cloud == "AZURE" ? {
+ *     appId: mainGetProviderIntegrationAuthorization.azures?.[0]?.confluentMultiTenantAppId,
+ *     command: `az ad sp create --id ${mainGetProviderIntegrationAuthorization1.azures?.[0]?.confluentMultiTenantAppId}`,
+ * } : {
+ *     confluentSa: mainGetProviderIntegrationAuthorization2.gcps?.[0]?.googleServiceAccount,
+ *     customerSa: mainGetProviderIntegrationAuthorization3.gcps?.[0]?.customerGoogleServiceAccount,
+ * });
+ * ```
+ *
+ * ## Getting Started
+ *
+ * The following end-to-end examples might help to get started with `confluentcloud.ProviderIntegrationAuthorization` data source:
+ * * provider-integration-azure: Complete Azure Provider Integration setup
+ * * provider-integration-gcp: Complete GCP Provider Integration setup
+ */
 export declare function getProviderIntegrationAuthorizationOutput(args: GetProviderIntegrationAuthorizationOutputArgs, opts?: pulumi.InvokeOutputOptions): pulumi.Output<GetProviderIntegrationAuthorizationResult>;
 /**
  * A collection of arguments for invoking getProviderIntegrationAuthorization.

package/getProviderIntegrationAuthorization.js

@@ -5,6 +5,136 @@ Object.defineProperty(exports, "__esModule", { value: true });
 exports.getProviderIntegrationAuthorizationOutput = exports.getProviderIntegrationAuthorization = void 0;
 const pulumi = require("@pulumi/pulumi");
 const utilities = require("./utilities");
+/**
+ * [![General Availability](https://img.shields.io/badge/Lifecycle%20Stage-General%20Availability-%2345c6e8)](https://docs.confluent.io/cloud/current/api.html#section/Versioning/API-Lifecycle-Policy)
+ *
+ * `confluentcloud.ProviderIntegrationAuthorization` describes the authorization configuration for a Cloud Service Provider (CSP) integration, including cloud-specific setup information like Azure multi-tenant app IDs or GCP service accounts.
+ *
+ * ## Example Usage
+ *
+ * ### Azure Provider Integration Authorization
+ *
+ * You can use the authorization data source with either approach:
+ *
+ * ### Option 1: With Azure Terraform Provider
+ *
+ * ```typescript
+ * import * as pulumi from "@pulumi/pulumi";
+ * import * as azuread from "@pulumi/azuread";
+ * import * as confluentcloud from "@pulumi/confluentcloud";
+ *
+ * // Get the authorization data
+ * const azure = confluentcloud.getProviderIntegrationAuthorization({
+ *     id: "cspi-abc123",
+ *     environment: {
+ *         id: "env-xyz456",
+ *     },
+ * });
+ * // Create the service principal using Azure Terraform Provider
+ * const confluent = new azuread.index.ServicePrincipal("confluent", {clientId: azure.azures?.[0]?.confluentMultiTenantAppId});
+ * export const azureAppId = azure.then(azure => azure.azures?.[0]?.confluentMultiTenantAppId);
+ * export const servicePrincipalObjectId = confluent.objectId;
+ * ```
+ *
+ * ### Option 2: With CLI Commands
+ *
+ * ```typescript
+ * import * as pulumi from "@pulumi/pulumi";
+ * import * as confluentcloud from "@pulumi/confluentcloud";
+ *
+ * // Get the authorization data
+ * const azure = confluentcloud.getProviderIntegrationAuthorization({
+ *     id: "cspi-abc123",
+ *     environment: {
+ *         id: "env-xyz456",
+ *     },
+ * });
+ * export const azureSetupCommand = azure.then(azure => `az ad sp create --id ${azure.azures?.[0]?.confluentMultiTenantAppId}`);
+ * ```
+ *
+ * ### GCP Provider Integration Authorization
+ *
+ * You can use the authorization data source with either approach:
+ *
+ * ### Option 1: With Google Terraform Provider
+ *
+ * ```typescript
+ * import * as pulumi from "@pulumi/pulumi";
+ * import * as confluentcloud from "@pulumi/confluentcloud";
+ * import * as google from "@pulumi/google";
+ *
+ * // Get the authorization data
+ * const gcp = confluentcloud.getProviderIntegrationAuthorization({
+ *     id: "cspi-def456",
+ *     environment: {
+ *         id: "env-xyz456",
+ *     },
+ * });
+ * // Grant IAM permissions using Google Terraform Provider
+ * const confluentTokenCreator = new google.index.ProjectIamMember("confluent_token_creator", {
+ *     project: gcpProjectId,
+ *     role: "roles/iam.serviceAccountTokenCreator",
+ *     member: `serviceAccount:${gcp.gcps?.[0]?.googleServiceAccount}`,
+ *     condition: [{
+ *         title: "Confluent Cloud Access",
+ *         description: "Allow Confluent Cloud to impersonate the customer service account",
+ *         expression: `request.auth.claims.sub == '${gcp.gcps?.[0]?.googleServiceAccount}'`,
+ *     }],
+ * });
+ * export const confluentServiceAccount = gcp.then(gcp => gcp.gcps?.[0]?.googleServiceAccount);
+ * export const customerServiceAccount = gcp.then(gcp => gcp.gcps?.[0]?.customerGoogleServiceAccount);
+ * ```
+ *
+ * ### Option 2: With gcloud CLI Commands
+ *
+ * ```typescript
+ * import * as pulumi from "@pulumi/pulumi";
+ * import * as confluentcloud from "@pulumi/confluentcloud";
+ *
+ * // Get the authorization data
+ * const gcp = confluentcloud.getProviderIntegrationAuthorization({
+ *     id: "cspi-def456",
+ *     environment: {
+ *         id: "env-xyz456",
+ *     },
+ * });
+ * export const gcpIamCommand = Promise.all([gcp, gcp]).then(([gcp, gcp1]) => `gcloud projects add-iam-policy-binding YOUR_PROJECT_ID --member="serviceAccount:${gcp.gcps?.[0]?.googleServiceAccount}" --role="roles/iam.serviceAccountTokenCreator" --condition="expression=request.auth.claims.sub=='${gcp1.gcps?.[0]?.googleServiceAccount}'"`);
+ * export const confluentServiceAccount = gcp.then(gcp => gcp.gcps?.[0]?.googleServiceAccount);
+ * ```
+ *
+ * ### Using with Integration Data Source
+ *
+ * ```typescript
+ * import * as pulumi from "@pulumi/pulumi";
+ * import * as confluentcloud from "@pulumi/confluentcloud";
+ *
+ * const main = confluentcloud.getProviderIntegrationSetup({
+ *     displayName: "my-integration",
+ *     environment: {
+ *         id: "env-xyz456",
+ *     },
+ * });
+ * const mainGetProviderIntegrationAuthorization = main.then(main => confluentcloud.getProviderIntegrationAuthorization({
+ *     id: main.id,
+ *     environment: {
+ *         id: "env-xyz456",
+ *     },
+ * }));
+ * export const setupInfo = Promise.all([main, mainGetProviderIntegrationAuthorization, mainGetProviderIntegrationAuthorization, mainGetProviderIntegrationAuthorization, mainGetProviderIntegrationAuthorization]).then(([main, mainGetProviderIntegrationAuthorization, mainGetProviderIntegrationAuthorization1, mainGetProviderIntegrationAuthorization2, mainGetProviderIntegrationAuthorization3]) => main.cloud == "AZURE" ? {
+ *     appId: mainGetProviderIntegrationAuthorization.azures?.[0]?.confluentMultiTenantAppId,
+ *     command: `az ad sp create --id ${mainGetProviderIntegrationAuthorization1.azures?.[0]?.confluentMultiTenantAppId}`,
+ * } : {
+ *     confluentSa: mainGetProviderIntegrationAuthorization2.gcps?.[0]?.googleServiceAccount,
+ *     customerSa: mainGetProviderIntegrationAuthorization3.gcps?.[0]?.customerGoogleServiceAccount,
+ * });
+ * ```
+ *
+ * ## Getting Started
+ *
+ * The following end-to-end examples might help to get started with `confluentcloud.ProviderIntegrationAuthorization` data source:
+ * * provider-integration-azure: Complete Azure Provider Integration setup
+ * * provider-integration-gcp: Complete GCP Provider Integration setup
+ */
 function getProviderIntegrationAuthorization(args, opts) {
     opts = pulumi.mergeOptions(utilities.resourceOptsDefaults(), opts || {});
     return pulumi.runtime.invoke("confluentcloud:index/getProviderIntegrationAuthorization:getProviderIntegrationAuthorization", {
@@ -13,6 +143,136 @@ function getProviderIntegrationAuthorization(args, opts) {
     }, opts);
 }
 exports.getProviderIntegrationAuthorization = getProviderIntegrationAuthorization;
+/**
+ * [![General Availability](https://img.shields.io/badge/Lifecycle%20Stage-General%20Availability-%2345c6e8)](https://docs.confluent.io/cloud/current/api.html#section/Versioning/API-Lifecycle-Policy)
+ *
+ * `confluentcloud.ProviderIntegrationAuthorization` describes the authorization configuration for a Cloud Service Provider (CSP) integration, including cloud-specific setup information like Azure multi-tenant app IDs or GCP service accounts.
+ *
+ * ## Example Usage
+ *
+ * ### Azure Provider Integration Authorization
+ *
+ * You can use the authorization data source with either approach:
+ *
+ * ### Option 1: With Azure Terraform Provider
+ *
+ * ```typescript
+ * import * as pulumi from "@pulumi/pulumi";
+ * import * as azuread from "@pulumi/azuread";
+ * import * as confluentcloud from "@pulumi/confluentcloud";
+ *
+ * // Get the authorization data
+ * const azure = confluentcloud.getProviderIntegrationAuthorization({
+ *     id: "cspi-abc123",
+ *     environment: {
+ *         id: "env-xyz456",
+ *     },
+ * });
+ * // Create the service principal using Azure Terraform Provider
+ * const confluent = new azuread.index.ServicePrincipal("confluent", {clientId: azure.azures?.[0]?.confluentMultiTenantAppId});
+ * export const azureAppId = azure.then(azure => azure.azures?.[0]?.confluentMultiTenantAppId);
+ * export const servicePrincipalObjectId = confluent.objectId;
+ * ```
+ *
+ * ### Option 2: With CLI Commands
+ *
+ * ```typescript
+ * import * as pulumi from "@pulumi/pulumi";
+ * import * as confluentcloud from "@pulumi/confluentcloud";
+ *
+ * // Get the authorization data
+ * const azure = confluentcloud.getProviderIntegrationAuthorization({
+ *     id: "cspi-abc123",
+ *     environment: {
+ *         id: "env-xyz456",
+ *     },
+ * });
+ * export const azureSetupCommand = azure.then(azure => `az ad sp create --id ${azure.azures?.[0]?.confluentMultiTenantAppId}`);
+ * ```
+ *
+ * ### GCP Provider Integration Authorization
+ *
+ * You can use the authorization data source with either approach:
+ *
+ * ### Option 1: With Google Terraform Provider
+ *
+ * ```typescript
+ * import * as pulumi from "@pulumi/pulumi";
+ * import * as confluentcloud from "@pulumi/confluentcloud";
+ * import * as google from "@pulumi/google";
+ *
+ * // Get the authorization data
+ * const gcp = confluentcloud.getProviderIntegrationAuthorization({
+ *     id: "cspi-def456",
+ *     environment: {
+ *         id: "env-xyz456",
+ *     },
+ * });
+ * // Grant IAM permissions using Google Terraform Provider
+ * const confluentTokenCreator = new google.index.ProjectIamMember("confluent_token_creator", {
+ *     project: gcpProjectId,
+ *     role: "roles/iam.serviceAccountTokenCreator",
+ *     member: `serviceAccount:${gcp.gcps?.[0]?.googleServiceAccount}`,
+ *     condition: [{
+ *         title: "Confluent Cloud Access",
+ *         description: "Allow Confluent Cloud to impersonate the customer service account",
+ *         expression: `request.auth.claims.sub == '${gcp.gcps?.[0]?.googleServiceAccount}'`,
+ *     }],
+ * });
+ * export const confluentServiceAccount = gcp.then(gcp => gcp.gcps?.[0]?.googleServiceAccount);
+ * export const customerServiceAccount = gcp.then(gcp => gcp.gcps?.[0]?.customerGoogleServiceAccount);
+ * ```
+ *
+ * ### Option 2: With gcloud CLI Commands
+ *
+ * ```typescript
+ * import * as pulumi from "@pulumi/pulumi";
+ * import * as confluentcloud from "@pulumi/confluentcloud";
+ *
+ * // Get the authorization data
+ * const gcp = confluentcloud.getProviderIntegrationAuthorization({
+ *     id: "cspi-def456",
+ *     environment: {
+ *         id: "env-xyz456",
+ *     },
+ * });
+ * export const gcpIamCommand = Promise.all([gcp, gcp]).then(([gcp, gcp1]) => `gcloud projects add-iam-policy-binding YOUR_PROJECT_ID --member="serviceAccount:${gcp.gcps?.[0]?.googleServiceAccount}" --role="roles/iam.serviceAccountTokenCreator" --condition="expression=request.auth.claims.sub=='${gcp1.gcps?.[0]?.googleServiceAccount}'"`);
+ * export const confluentServiceAccount = gcp.then(gcp => gcp.gcps?.[0]?.googleServiceAccount);
+ * ```
+ *
+ * ### Using with Integration Data Source
+ *
+ * ```typescript
+ * import * as pulumi from "@pulumi/pulumi";
+ * import * as confluentcloud from "@pulumi/confluentcloud";
+ *
+ * const main = confluentcloud.getProviderIntegrationSetup({
+ *     displayName: "my-integration",
+ *     environment: {
+ *         id: "env-xyz456",
+ *     },
+ * });
+ * const mainGetProviderIntegrationAuthorization = main.then(main => confluentcloud.getProviderIntegrationAuthorization({
+ *     id: main.id,
+ *     environment: {
+ *         id: "env-xyz456",
+ *     },
+ * }));
+ * export const setupInfo = Promise.all([main, mainGetProviderIntegrationAuthorization, mainGetProviderIntegrationAuthorization, mainGetProviderIntegrationAuthorization, mainGetProviderIntegrationAuthorization]).then(([main, mainGetProviderIntegrationAuthorization, mainGetProviderIntegrationAuthorization1, mainGetProviderIntegrationAuthorization2, mainGetProviderIntegrationAuthorization3]) => main.cloud == "AZURE" ? {
+ *     appId: mainGetProviderIntegrationAuthorization.azures?.[0]?.confluentMultiTenantAppId,
+ *     command: `az ad sp create --id ${mainGetProviderIntegrationAuthorization1.azures?.[0]?.confluentMultiTenantAppId}`,
+ * } : {
+ *     confluentSa: mainGetProviderIntegrationAuthorization2.gcps?.[0]?.googleServiceAccount,
+ *     customerSa: mainGetProviderIntegrationAuthorization3.gcps?.[0]?.customerGoogleServiceAccount,
+ * });
+ * ```
+ *
+ * ## Getting Started
+ *
+ * The following end-to-end examples might help to get started with `confluentcloud.ProviderIntegrationAuthorization` data source:
+ * * provider-integration-azure: Complete Azure Provider Integration setup
+ * * provider-integration-gcp: Complete GCP Provider Integration setup
+ */
 function getProviderIntegrationAuthorizationOutput(args, opts) {
     opts = pulumi.mergeOptions(utilities.resourceOptsDefaults(), opts || {});
     return pulumi.runtime.invokeOutput("confluentcloud:index/getProviderIntegrationAuthorization:getProviderIntegrationAuthorization", {