@pulumi/gitlab 10.2.0-alpha.1787648737 → 10.2.0

package/projectServiceAccountAccessToken.d.ts

@@ -0,0 +1,230 @@
+import * as pulumi from "@pulumi/pulumi";
+import * as inputs from "./types/input";
+import * as outputs from "./types/output";
+/**
+ * The `gitlab.ProjectServiceAccountAccessToken` resource manages the lifecycle of a project service account access token.
+ *
+ * > Use of the `timestamp()` function with expiresAt will cause the resource to be re-created with every apply, it's recommended to use `plantimestamp()` or a static value instead.
+ *
+ * > Reading the access token status of a service account requires an admin token. As a result, this resource will ignore permission errors when attempting to read the token status, and will rely on the values in state instead. This can lead to apply-time failures if the token configured for the provider doesn't have permissions to rotate tokens for the service account.
+ *
+ * > Use `rotationConfiguration` to automatically rotate tokens instead of using `timestamp()` as timestamp will cause changes with every plan. `pulumi up` must still be run to rotate the token.
+ *
+ * **Upstream API**: [GitLab API docs](https://docs.gitlab.com/api/service_accounts/#create-a-personal-access-token-for-a-project-service-account)
+ *
+ * ## Example Usage
+ *
+ * ```typescript
+ * import * as pulumi from "@pulumi/pulumi";
+ * import * as gitlab from "@pulumi/gitlab";
+ *
+ * const example = new gitlab.Project("example", {
+ *     name: "example",
+ *     description: "An example project",
+ * });
+ * // The service account against the project
+ * const exampleSa = new gitlab.ProjectServiceAccount("example_sa", {
+ *     project: example.id,
+ *     name: "example-name",
+ *     username: "example-username",
+ * });
+ * // To assign the service account to a project as a member
+ * const exampleMembership = new gitlab.ProjectMembership("example_membership", {
+ *     project: example.id,
+ *     userId: exampleSa.serviceAccountId.apply(x =>Number(x)),
+ *     accessLevel: "developer",
+ *     expiresAt: "2020-03-14",
+ * });
+ * // The service account access token with no expiry
+ * const exampleSaTokenNoExpiry = new gitlab.ProjectServiceAccountAccessToken("example_sa_token_no_expiry", {
+ *     project: example.id,
+ *     userId: exampleSa.serviceAccountId.apply(x =>Number(x)),
+ *     name: "Example service account access token",
+ *     scopes: ["api"],
+ * });
+ * // The service account access token with expires at
+ * const exampleSaTokenExpiresAt = new gitlab.ProjectServiceAccountAccessToken("example_sa_token_expires_at", {
+ *     project: example.id,
+ *     userId: exampleSa.serviceAccountId.apply(x =>Number(x)),
+ *     name: "Example service account access token",
+ *     expiresAt: "2020-03-14",
+ *     scopes: ["api"],
+ * });
+ * // The service account access token with rotation configuration
+ * const exampleSaTokenRotationConfiguration = new gitlab.ProjectServiceAccountAccessToken("example_sa_token_rotation_configuration", {
+ *     project: example.id,
+ *     userId: exampleSa.serviceAccountId.apply(x =>Number(x)),
+ *     name: "Example service account access token",
+ *     rotationConfiguration: {
+ *         rotateBeforeDays: 2,
+ *         expirationDays: 7,
+ *     },
+ *     scopes: ["api"],
+ * });
+ * ```
+ *
+ * ## Import
+ *
+ * Starting in Terraform v1.5.0, you can use an import block to import `gitlab.ProjectServiceAccountAccessToken`. For example:
+ *
+ * Importing using the CLI is supported with the following syntax:
+ *
+ * `id` is in the form of <project_id>:<service_account_id>:<access_token_id>
+ * Importing an access token does not import the access token value.
+ *
+ * ```sh
+ * $ pulumi import gitlab:index/projectServiceAccountAccessToken:ProjectServiceAccountAccessToken example 1:2:3
+ * ```
+ */
+export declare class ProjectServiceAccountAccessToken extends pulumi.CustomResource {
+    /**
+     * Get an existing ProjectServiceAccountAccessToken resource's state with the given name, ID, and optional extra
+     * properties used to qualify the lookup.
+     *
+     * @param name The _unique_ name of the resulting resource.
+     * @param id The _unique_ provider ID of the resource to lookup.
+     * @param state Any extra arguments used during the lookup.
+     * @param opts Optional settings to control the behavior of the CustomResource.
+     */
+    static get(name: string, id: pulumi.Input<pulumi.ID>, state?: ProjectServiceAccountAccessTokenState, opts?: pulumi.CustomResourceOptions): ProjectServiceAccountAccessToken;
+    /**
+     * Returns true if the given object is an instance of ProjectServiceAccountAccessToken.  This is designed to work even
+     * when multiple copies of the Pulumi SDK have been loaded into the same process.
+     */
+    static isInstance(obj: any): obj is ProjectServiceAccountAccessToken;
+    /**
+     * True if the token is active.
+     */
+    readonly active: pulumi.Output<boolean>;
+    /**
+     * Time the token has been created, RFC3339 format.
+     */
+    readonly createdAt: pulumi.Output<string>;
+    /**
+     * The service account access token expiry date. When left blank, the token follows the standard rule of expiry for personal access tokens.
+     */
+    readonly expiresAt: pulumi.Output<string>;
+    /**
+     * The name of the personal access token.
+     */
+    readonly name: pulumi.Output<string>;
+    /**
+     * The ID or URL-encoded path of the project containing the service account.
+     */
+    readonly project: pulumi.Output<string>;
+    /**
+     * True if the token is revoked.
+     */
+    readonly revoked: pulumi.Output<boolean>;
+    /**
+     * The configuration for when to rotate a token automatically. Will not rotate a token until `pulumi up` is run.
+     */
+    readonly rotationConfiguration: pulumi.Output<outputs.ProjectServiceAccountAccessTokenRotationConfiguration | undefined>;
+    /**
+     * The scopes of the project service account access token. Valid values are: `api`, `readUser`, `readApi`, `readRepository`, `writeRepository`, `readRegistry`, `writeRegistry`, `readVirtualRegistry`, `writeVirtualRegistry`, `sudo`, `adminMode`, `createRunner`, `manageRunner`, `aiFeatures`, `k8sProxy`, `selfRotate`, `readServicePing`. If `selfRotate` is included, you must also provide either `expiresAt` or `rotationConfiguration`.
+     */
+    readonly scopes: pulumi.Output<string[]>;
+    /**
+     * The token of the project service account access token. **Note**: the token is not available for imported resources.
+     */
+    readonly token: pulumi.Output<string>;
+    /**
+     * The ID of a service account user.
+     */
+    readonly userId: pulumi.Output<number>;
+    /**
+     * Whether to validate if the expiration date is in the future.
+     */
+    readonly validatePastExpirationDate: pulumi.Output<boolean>;
+    /**
+     * Create a ProjectServiceAccountAccessToken resource with the given unique name, arguments, and options.
+     *
+     * @param name The _unique_ name of the resource.
+     * @param args The arguments to use to populate this resource's properties.
+     * @param opts A bag of options that control this resource's behavior.
+     */
+    constructor(name: string, args: ProjectServiceAccountAccessTokenArgs, opts?: pulumi.CustomResourceOptions);
+}
+/**
+ * Input properties used for looking up and filtering ProjectServiceAccountAccessToken resources.
+ */
+export interface ProjectServiceAccountAccessTokenState {
+    /**
+     * True if the token is active.
+     */
+    active?: pulumi.Input<boolean | undefined>;
+    /**
+     * Time the token has been created, RFC3339 format.
+     */
+    createdAt?: pulumi.Input<string | undefined>;
+    /**
+     * The service account access token expiry date. When left blank, the token follows the standard rule of expiry for personal access tokens.
+     */
+    expiresAt?: pulumi.Input<string | undefined>;
+    /**
+     * The name of the personal access token.
+     */
+    name?: pulumi.Input<string | undefined>;
+    /**
+     * The ID or URL-encoded path of the project containing the service account.
+     */
+    project?: pulumi.Input<string | undefined>;
+    /**
+     * True if the token is revoked.
+     */
+    revoked?: pulumi.Input<boolean | undefined>;
+    /**
+     * The configuration for when to rotate a token automatically. Will not rotate a token until `pulumi up` is run.
+     */
+    rotationConfiguration?: pulumi.Input<inputs.ProjectServiceAccountAccessTokenRotationConfiguration | undefined>;
+    /**
+     * The scopes of the project service account access token. Valid values are: `api`, `readUser`, `readApi`, `readRepository`, `writeRepository`, `readRegistry`, `writeRegistry`, `readVirtualRegistry`, `writeVirtualRegistry`, `sudo`, `adminMode`, `createRunner`, `manageRunner`, `aiFeatures`, `k8sProxy`, `selfRotate`, `readServicePing`. If `selfRotate` is included, you must also provide either `expiresAt` or `rotationConfiguration`.
+     */
+    scopes?: pulumi.Input<pulumi.Input<string>[] | undefined>;
+    /**
+     * The token of the project service account access token. **Note**: the token is not available for imported resources.
+     */
+    token?: pulumi.Input<string | undefined>;
+    /**
+     * The ID of a service account user.
+     */
+    userId?: pulumi.Input<number | undefined>;
+    /**
+     * Whether to validate if the expiration date is in the future.
+     */
+    validatePastExpirationDate?: pulumi.Input<boolean | undefined>;
+}
+/**
+ * The set of arguments for constructing a ProjectServiceAccountAccessToken resource.
+ */
+export interface ProjectServiceAccountAccessTokenArgs {
+    /**
+     * The service account access token expiry date. When left blank, the token follows the standard rule of expiry for personal access tokens.
+     */
+    expiresAt?: pulumi.Input<string | undefined>;
+    /**
+     * The name of the personal access token.
+     */
+    name?: pulumi.Input<string | undefined>;
+    /**
+     * The ID or URL-encoded path of the project containing the service account.
+     */
+    project: pulumi.Input<string>;
+    /**
+     * The configuration for when to rotate a token automatically. Will not rotate a token until `pulumi up` is run.
+     */
+    rotationConfiguration?: pulumi.Input<inputs.ProjectServiceAccountAccessTokenRotationConfiguration | undefined>;
+    /**
+     * The scopes of the project service account access token. Valid values are: `api`, `readUser`, `readApi`, `readRepository`, `writeRepository`, `readRegistry`, `writeRegistry`, `readVirtualRegistry`, `writeVirtualRegistry`, `sudo`, `adminMode`, `createRunner`, `manageRunner`, `aiFeatures`, `k8sProxy`, `selfRotate`, `readServicePing`. If `selfRotate` is included, you must also provide either `expiresAt` or `rotationConfiguration`.
+     */
+    scopes: pulumi.Input<pulumi.Input<string>[]>;
+    /**
+     * The ID of a service account user.
+     */
+    userId: pulumi.Input<number>;
+    /**
+     * Whether to validate if the expiration date is in the future.
+     */
+    validatePastExpirationDate?: pulumi.Input<boolean | undefined>;
+}
+//# sourceMappingURL=projectServiceAccountAccessToken.d.ts.map

package/projectServiceAccountAccessToken.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"projectServiceAccountAccessToken.d.ts","sourceRoot":"","sources":["../projectServiceAccountAccessToken.ts"],"names":[],"mappings":"AAGA,OAAO,KAAK,MAAM,MAAM,gBAAgB,CAAC;AACzC,OAAO,KAAK,MAAM,MAAM,eAAe,CAAC;AACxC,OAAO,KAAK,OAAO,MAAM,gBAAgB,CAAC;AAG1C;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;GA0EG;AACH,qBAAa,gCAAiC,SAAQ,MAAM,CAAC,cAAc;IACvE;;;;;;;;OAQG;WACW,GAAG,CAAC,IAAI,EAAE,MAAM,EAAE,EAAE,EAAE,MAAM,CAAC,KAAK,CAAC,MAAM,CAAC,EAAE,CAAC,EAAE,KAAK,CAAC,EAAE,qCAAqC,EAAE,IAAI,CAAC,EAAE,MAAM,CAAC,qBAAqB,GAAG,gCAAgC;IAOlL;;;OAGG;WACW,UAAU,CAAC,GAAG,EAAE,GAAG,GAAG,GAAG,IAAI,gCAAgC;IAO3E;;OAEG;IACH,SAAgC,MAAM,EAAE,MAAM,CAAC,MAAM,CAAC,OAAO,CAAC,CAAC;IAC/D;;OAEG;IACH,SAAgC,SAAS,EAAE,MAAM,CAAC,MAAM,CAAC,MAAM,CAAC,CAAC;IACjE;;OAEG;IACH,SAAwB,SAAS,EAAE,MAAM,CAAC,MAAM,CAAC,MAAM,CAAC,CAAC;IACzD;;OAEG;IACH,SAAwB,IAAI,EAAE,MAAM,CAAC,MAAM,CAAC,MAAM,CAAC,CAAC;IACpD;;OAEG;IACH,SAAwB,OAAO,EAAE,MAAM,CAAC,MAAM,CAAC,MAAM,CAAC,CAAC;IACvD;;OAEG;IACH,SAAgC,OAAO,EAAE,MAAM,CAAC,MAAM,CAAC,OAAO,CAAC,CAAC;IAChE;;OAEG;IACH,SAAwB,qBAAqB,EAAE,MAAM,CAAC,MAAM,CAAC,OAAO,CAAC,qDAAqD,GAAG,SAAS,CAAC,CAAC;IACxI;;OAEG;IACH,SAAwB,MAAM,EAAE,MAAM,CAAC,MAAM,CAAC,MAAM,EAAE,CAAC,CAAC;IACxD;;OAEG;IACH,SAAgC,KAAK,EAAE,MAAM,CAAC,MAAM,CAAC,MAAM,CAAC,CAAC;IAC7D;;OAEG;IACH,SAAwB,MAAM,EAAE,MAAM,CAAC,MAAM,CAAC,MAAM,CAAC,CAAC;IACtD;;OAEG;IACH,SAAwB,0BAA0B,EAAE,MAAM,CAAC,MAAM,CAAC,OAAO,CAAC,CAAC;IAE3E;;;;;;OAMG;gBACS,IAAI,EAAE,MAAM,EAAE,IAAI,EAAE,oCAAoC,EAAE,IAAI,CAAC,EAAE,MAAM,CAAC,qBAAqB;CA6C5G;AAED;;GAEG;AACH,MAAM,WAAW,qCAAqC;IAClD;;OAEG;IACH,MAAM,CAAC,EAAE,MAAM,CAAC,KAAK,CAAC,OAAO,GAAG,SAAS,CAAC,CAAC;IAC3C;;OAEG;IACH,SAAS,CAAC,EAAE,MAAM,CAAC,KAAK,CAAC,MAAM,GAAG,SAAS,CAAC,CAAC;IAC7C;;OAEG;IACH,SAAS,CAAC,EAAE,MAAM,CAAC,KAAK,CAAC,MAAM,GAAG,SAAS,CAAC,CAAC;IAC7C;;OAEG;IACH,IAAI,CAAC,EAAE,MAAM,CAAC,KAAK,CAAC,MAAM,GAAG,SAAS,CAAC,CAAC;IACxC;;OAEG;IACH,OAAO,CAAC,EAAE,MAAM,CAAC,KAAK,CAAC,MAAM,GAAG,SAAS,CAAC,CAAC;IAC3C;;OAEG;IACH,OAAO,CAAC,EAAE,MAAM,CAAC,KAAK,CAAC,OAAO,GAAG,SAAS,CAAC,CAAC;IAC5C;;OAEG;IACH,qBAAqB,CAAC,EAAE,MAAM,CAAC,KAAK,CAAC,MAAM,CAAC,qDAAqD,GAAG,SAAS,CAAC,CAAC;IAC/G;;OAEG;IACH,MAAM,CAAC,EAAE,MAAM,CAAC,KAAK,CAAC,MAAM,CAAC,KAAK,CAAC,MAAM,CAAC,EAAE,GAAG,SAAS,CAAC,CAAC;IAC1D;;OAEG;IACH,KAAK,CAAC,EAAE,MAAM,CAAC,KAAK,CAAC,MAAM,GAAG,SAAS,CAAC,CAAC;IACzC;;OAEG;IACH,MAAM,CAAC,EAAE,MAAM,CAAC,KAAK,CAAC,MAAM,GAAG,SAAS,CAAC,CAAC;IAC1C;;OAEG;IACH,0BAA0B,CAAC,EAAE,MAAM,CAAC,KAAK,CAAC,OAAO,GAAG,SAAS,CAAC,CAAC;CAClE;AAED;;GAEG;AACH,MAAM,WAAW,oCAAoC;IACjD;;OAEG;IACH,SAAS,CAAC,EAAE,MAAM,CAAC,KAAK,CAAC,MAAM,GAAG,SAAS,CAAC,CAAC;IAC7C;;OAEG;IACH,IAAI,CAAC,EAAE,MAAM,CAAC,KAAK,CAAC,MAAM,GAAG,SAAS,CAAC,CAAC;IACxC;;OAEG;IACH,OAAO,EAAE,MAAM,CAAC,KAAK,CAAC,MAAM,CAAC,CAAC;IAC9B;;OAEG;IACH,qBAAqB,CAAC,EAAE,MAAM,CAAC,KAAK,CAAC,MAAM,CAAC,qDAAqD,GAAG,SAAS,CAAC,CAAC;IAC/G;;OAEG;IACH,MAAM,EAAE,MAAM,CAAC,KAAK,CAAC,MAAM,CAAC,KAAK,CAAC,MAAM,CAAC,EAAE,CAAC,CAAC;IAC7C;;OAEG;IACH,MAAM,EAAE,MAAM,CAAC,KAAK,CAAC,MAAM,CAAC,CAAC;IAC7B;;OAEG;IACH,0BAA0B,CAAC,EAAE,MAAM,CAAC,KAAK,CAAC,OAAO,GAAG,SAAS,CAAC,CAAC;CAClE"}

package/projectServiceAccountAccessToken.js

@@ -0,0 +1,178 @@
+"use strict";
+// *** WARNING: this file was generated by pulumi-language-nodejs. ***
+// *** Do not edit by hand unless you're certain you know what you are doing! ***
+var __createBinding = (this && this.__createBinding) || (Object.create ? (function(o, m, k, k2) {
+    if (k2 === undefined) k2 = k;
+    var desc = Object.getOwnPropertyDescriptor(m, k);
+    if (!desc || ("get" in desc ? !m.__esModule : desc.writable || desc.configurable)) {
+      desc = { enumerable: true, get: function() { return m[k]; } };
+    }
+    Object.defineProperty(o, k2, desc);
+}) : (function(o, m, k, k2) {
+    if (k2 === undefined) k2 = k;
+    o[k2] = m[k];
+}));
+var __setModuleDefault = (this && this.__setModuleDefault) || (Object.create ? (function(o, v) {
+    Object.defineProperty(o, "default", { enumerable: true, value: v });
+}) : function(o, v) {
+    o["default"] = v;
+});
+var __importStar = (this && this.__importStar) || function (mod) {
+    if (mod && mod.__esModule) return mod;
+    var result = {};
+    if (mod != null) for (var k in mod) if (k !== "default" && Object.prototype.hasOwnProperty.call(mod, k)) __createBinding(result, mod, k);
+    __setModuleDefault(result, mod);
+    return result;
+};
+Object.defineProperty(exports, "__esModule", { value: true });
+exports.ProjectServiceAccountAccessToken = void 0;
+const pulumi = __importStar(require("@pulumi/pulumi"));
+const utilities = __importStar(require("./utilities"));
+/**
+ * The `gitlab.ProjectServiceAccountAccessToken` resource manages the lifecycle of a project service account access token.
+ *
+ * > Use of the `timestamp()` function with expiresAt will cause the resource to be re-created with every apply, it's recommended to use `plantimestamp()` or a static value instead.
+ *
+ * > Reading the access token status of a service account requires an admin token. As a result, this resource will ignore permission errors when attempting to read the token status, and will rely on the values in state instead. This can lead to apply-time failures if the token configured for the provider doesn't have permissions to rotate tokens for the service account.
+ *
+ * > Use `rotationConfiguration` to automatically rotate tokens instead of using `timestamp()` as timestamp will cause changes with every plan. `pulumi up` must still be run to rotate the token.
+ *
+ * **Upstream API**: [GitLab API docs](https://docs.gitlab.com/api/service_accounts/#create-a-personal-access-token-for-a-project-service-account)
+ *
+ * ## Example Usage
+ *
+ * ```typescript
+ * import * as pulumi from "@pulumi/pulumi";
+ * import * as gitlab from "@pulumi/gitlab";
+ *
+ * const example = new gitlab.Project("example", {
+ *     name: "example",
+ *     description: "An example project",
+ * });
+ * // The service account against the project
+ * const exampleSa = new gitlab.ProjectServiceAccount("example_sa", {
+ *     project: example.id,
+ *     name: "example-name",
+ *     username: "example-username",
+ * });
+ * // To assign the service account to a project as a member
+ * const exampleMembership = new gitlab.ProjectMembership("example_membership", {
+ *     project: example.id,
+ *     userId: exampleSa.serviceAccountId.apply(x =>Number(x)),
+ *     accessLevel: "developer",
+ *     expiresAt: "2020-03-14",
+ * });
+ * // The service account access token with no expiry
+ * const exampleSaTokenNoExpiry = new gitlab.ProjectServiceAccountAccessToken("example_sa_token_no_expiry", {
+ *     project: example.id,
+ *     userId: exampleSa.serviceAccountId.apply(x =>Number(x)),
+ *     name: "Example service account access token",
+ *     scopes: ["api"],
+ * });
+ * // The service account access token with expires at
+ * const exampleSaTokenExpiresAt = new gitlab.ProjectServiceAccountAccessToken("example_sa_token_expires_at", {
+ *     project: example.id,
+ *     userId: exampleSa.serviceAccountId.apply(x =>Number(x)),
+ *     name: "Example service account access token",
+ *     expiresAt: "2020-03-14",
+ *     scopes: ["api"],
+ * });
+ * // The service account access token with rotation configuration
+ * const exampleSaTokenRotationConfiguration = new gitlab.ProjectServiceAccountAccessToken("example_sa_token_rotation_configuration", {
+ *     project: example.id,
+ *     userId: exampleSa.serviceAccountId.apply(x =>Number(x)),
+ *     name: "Example service account access token",
+ *     rotationConfiguration: {
+ *         rotateBeforeDays: 2,
+ *         expirationDays: 7,
+ *     },
+ *     scopes: ["api"],
+ * });
+ * ```
+ *
+ * ## Import
+ *
+ * Starting in Terraform v1.5.0, you can use an import block to import `gitlab.ProjectServiceAccountAccessToken`. For example:
+ *
+ * Importing using the CLI is supported with the following syntax:
+ *
+ * `id` is in the form of <project_id>:<service_account_id>:<access_token_id>
+ * Importing an access token does not import the access token value.
+ *
+ * ```sh
+ * $ pulumi import gitlab:index/projectServiceAccountAccessToken:ProjectServiceAccountAccessToken example 1:2:3
+ * ```
+ */
+class ProjectServiceAccountAccessToken extends pulumi.CustomResource {
+    /**
+     * Get an existing ProjectServiceAccountAccessToken resource's state with the given name, ID, and optional extra
+     * properties used to qualify the lookup.
+     *
+     * @param name The _unique_ name of the resulting resource.
+     * @param id The _unique_ provider ID of the resource to lookup.
+     * @param state Any extra arguments used during the lookup.
+     * @param opts Optional settings to control the behavior of the CustomResource.
+     */
+    static get(name, id, state, opts) {
+        return new ProjectServiceAccountAccessToken(name, state, { ...opts, id: id });
+    }
+    /** @internal */
+    static __pulumiType = 'gitlab:index/projectServiceAccountAccessToken:ProjectServiceAccountAccessToken';
+    /**
+     * Returns true if the given object is an instance of ProjectServiceAccountAccessToken.  This is designed to work even
+     * when multiple copies of the Pulumi SDK have been loaded into the same process.
+     */
+    static isInstance(obj) {
+        if (obj === undefined || obj === null) {
+            return false;
+        }
+        return obj['__pulumiType'] === ProjectServiceAccountAccessToken.__pulumiType;
+    }
+    constructor(name, argsOrState, opts) {
+        let resourceInputs = {};
+        opts = opts || {};
+        if (opts.id) {
+            const state = argsOrState;
+            resourceInputs["active"] = state?.active;
+            resourceInputs["createdAt"] = state?.createdAt;
+            resourceInputs["expiresAt"] = state?.expiresAt;
+            resourceInputs["name"] = state?.name;
+            resourceInputs["project"] = state?.project;
+            resourceInputs["revoked"] = state?.revoked;
+            resourceInputs["rotationConfiguration"] = state?.rotationConfiguration;
+            resourceInputs["scopes"] = state?.scopes;
+            resourceInputs["token"] = state?.token;
+            resourceInputs["userId"] = state?.userId;
+            resourceInputs["validatePastExpirationDate"] = state?.validatePastExpirationDate;
+        }
+        else {
+            const args = argsOrState;
+            if (args?.project === undefined && !opts.urn) {
+                throw new Error("Missing required property 'project'");
+            }
+            if (args?.scopes === undefined && !opts.urn) {
+                throw new Error("Missing required property 'scopes'");
+            }
+            if (args?.userId === undefined && !opts.urn) {
+                throw new Error("Missing required property 'userId'");
+            }
+            resourceInputs["expiresAt"] = args?.expiresAt;
+            resourceInputs["name"] = args?.name;
+            resourceInputs["project"] = args?.project;
+            resourceInputs["rotationConfiguration"] = args?.rotationConfiguration;
+            resourceInputs["scopes"] = args?.scopes;
+            resourceInputs["userId"] = args?.userId;
+            resourceInputs["validatePastExpirationDate"] = args?.validatePastExpirationDate;
+            resourceInputs["active"] = undefined /*out*/;
+            resourceInputs["createdAt"] = undefined /*out*/;
+            resourceInputs["revoked"] = undefined /*out*/;
+            resourceInputs["token"] = undefined /*out*/;
+        }
+        opts = pulumi.mergeOptions(utilities.resourceOptsDefaults(), opts);
+        const secretOpts = { additionalSecretOutputs: ["token"] };
+        opts = pulumi.mergeOptions(opts, secretOpts);
+        super(ProjectServiceAccountAccessToken.__pulumiType, name, resourceInputs, opts);
+    }
+}
+exports.ProjectServiceAccountAccessToken = ProjectServiceAccountAccessToken;
+//# sourceMappingURL=projectServiceAccountAccessToken.js.map

package/projectServiceAccountAccessToken.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"projectServiceAccountAccessToken.js","sourceRoot":"","sources":["../projectServiceAccountAccessToken.ts"],"names":[],"mappings":";AAAA,sEAAsE;AACtE,iFAAiF;;;;;;;;;;;;;;;;;;;;;;;;;;AAEjF,uDAAyC;AAGzC,uDAAyC;AAEzC;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;GA0EG;AACH,MAAa,gCAAiC,SAAQ,MAAM,CAAC,cAAc;IACvE;;;;;;;;OAQG;IACI,MAAM,CAAC,GAAG,CAAC,IAAY,EAAE,EAA2B,EAAE,KAA6C,EAAE,IAAmC;QAC3I,OAAO,IAAI,gCAAgC,CAAC,IAAI,EAAO,KAAK,EAAE,EAAE,GAAG,IAAI,EAAE,EAAE,EAAE,EAAE,EAAE,CAAC,CAAC;IACvF,CAAC;IAED,gBAAgB;IACT,MAAM,CAAU,YAAY,GAAG,gFAAgF,CAAC;IAEvH;;;OAGG;IACI,MAAM,CAAC,UAAU,CAAC,GAAQ;QAC7B,IAAI,GAAG,KAAK,SAAS,IAAI,GAAG,KAAK,IAAI,EAAE;YACnC,OAAO,KAAK,CAAC;SAChB;QACD,OAAO,GAAG,CAAC,cAAc,CAAC,KAAK,gCAAgC,CAAC,YAAY,CAAC;IACjF,CAAC;IAuDD,YAAY,IAAY,EAAE,WAA0F,EAAE,IAAmC;QACrJ,IAAI,cAAc,GAAkB,EAAE,CAAC;QACvC,IAAI,GAAG,IAAI,IAAI,EAAE,CAAC;QAClB,IAAI,IAAI,CAAC,EAAE,EAAE;YACT,MAAM,KAAK,GAAG,WAAgE,CAAC;YAC/E,cAAc,CAAC,QAAQ,CAAC,GAAG,KAAK,EAAE,MAAM,CAAC;YACzC,cAAc,CAAC,WAAW,CAAC,GAAG,KAAK,EAAE,SAAS,CAAC;YAC/C,cAAc,CAAC,WAAW,CAAC,GAAG,KAAK,EAAE,SAAS,CAAC;YAC/C,cAAc,CAAC,MAAM,CAAC,GAAG,KAAK,EAAE,IAAI,CAAC;YACrC,cAAc,CAAC,SAAS,CAAC,GAAG,KAAK,EAAE,OAAO,CAAC;YAC3C,cAAc,CAAC,SAAS,CAAC,GAAG,KAAK,EAAE,OAAO,CAAC;YAC3C,cAAc,CAAC,uBAAuB,CAAC,GAAG,KAAK,EAAE,qBAAqB,CAAC;YACvE,cAAc,CAAC,QAAQ,CAAC,GAAG,KAAK,EAAE,MAAM,CAAC;YACzC,cAAc,CAAC,OAAO,CAAC,GAAG,KAAK,EAAE,KAAK,CAAC;YACvC,cAAc,CAAC,QAAQ,CAAC,GAAG,KAAK,EAAE,MAAM,CAAC;YACzC,cAAc,CAAC,4BAA4B,CAAC,GAAG,KAAK,EAAE,0BAA0B,CAAC;SACpF;aAAM;YACH,MAAM,IAAI,GAAG,WAA+D,CAAC;YAC7E,IAAI,IAAI,EAAE,OAAO,KAAK,SAAS,IAAI,CAAC,IAAI,CAAC,GAAG,EAAE;gBAC1C,MAAM,IAAI,KAAK,CAAC,qCAAqC,CAAC,CAAC;aAC1D;YACD,IAAI,IAAI,EAAE,MAAM,KAAK,SAAS,IAAI,CAAC,IAAI,CAAC,GAAG,EAAE;gBACzC,MAAM,IAAI,KAAK,CAAC,oCAAoC,CAAC,CAAC;aACzD;YACD,IAAI,IAAI,EAAE,MAAM,KAAK,SAAS,IAAI,CAAC,IAAI,CAAC,GAAG,EAAE;gBACzC,MAAM,IAAI,KAAK,CAAC,oCAAoC,CAAC,CAAC;aACzD;YACD,cAAc,CAAC,WAAW,CAAC,GAAG,IAAI,EAAE,SAAS,CAAC;YAC9C,cAAc,CAAC,MAAM,CAAC,GAAG,IAAI,EAAE,IAAI,CAAC;YACpC,cAAc,CAAC,SAAS,CAAC,GAAG,IAAI,EAAE,OAAO,CAAC;YAC1C,cAAc,CAAC,uBAAuB,CAAC,GAAG,IAAI,EAAE,qBAAqB,CAAC;YACtE,cAAc,CAAC,QAAQ,CAAC,GAAG,IAAI,EAAE,MAAM,CAAC;YACxC,cAAc,CAAC,QAAQ,CAAC,GAAG,IAAI,EAAE,MAAM,CAAC;YACxC,cAAc,CAAC,4BAA4B,CAAC,GAAG,IAAI,EAAE,0BAA0B,CAAC;YAChF,cAAc,CAAC,QAAQ,CAAC,GAAG,SAAS,CAAC,OAAO,CAAC;YAC7C,cAAc,CAAC,WAAW,CAAC,GAAG,SAAS,CAAC,OAAO,CAAC;YAChD,cAAc,CAAC,SAAS,CAAC,GAAG,SAAS,CAAC,OAAO,CAAC;YAC9C,cAAc,CAAC,OAAO,CAAC,GAAG,SAAS,CAAC,OAAO,CAAC;SAC/C;QACD,IAAI,GAAG,MAAM,CAAC,YAAY,CAAC,SAAS,CAAC,oBAAoB,EAAE,EAAE,IAAI,CAAC,CAAC;QACnE,MAAM,UAAU,GAAG,EAAE,uBAAuB,EAAE,CAAC,OAAO,CAAC,EAAE,CAAC;QAC1D,IAAI,GAAG,MAAM,CAAC,YAAY,CAAC,IAAI,EAAE,UAAU,CAAC,CAAC;QAC7C,KAAK,CAAC,gCAAgC,CAAC,YAAY,EAAE,IAAI,EAAE,cAAc,EAAE,IAAI,CAAC,CAAC;IACrF,CAAC;;AA5HL,4EA6HC"}

package/types/input.d.ts

@@ -126,6 +126,60 @@ export interface BranchProtectionAllowedToUnprotect {
      */
     userId?: pulumi.Input<number | undefined>;
 }
+export interface ComplianceRequirementExternalControl {
+    /**
+     * Name of the external control.
+     */
+    externalControlName?: pulumi.Input<string | undefined>;
+    /**
+     * External URL for external controls.
+     */
+    externalUrl: pulumi.Input<string>;
+    /**
+     * Compliance requirements control ID.
+     */
+    id?: pulumi.Input<string | undefined>;
+    /**
+     * Name of the control.  Set to `externalControl` from the API.
+     */
+    name?: pulumi.Input<string | undefined>;
+    /**
+     * Whether ping is enabled for external controls.
+     */
+    pingEnabled: pulumi.Input<boolean>;
+    /**
+     * Secret token for external controls. The `secretToken` is not available in imported resources.
+     */
+    secretToken: pulumi.Input<string>;
+}
+export interface ComplianceRequirementInternalControl {
+    /**
+     * Expression for internal controls.
+     */
+    expression: pulumi.Input<inputs.ComplianceRequirementInternalControlExpression>;
+    /**
+     * Compliance requirements control ID.
+     */
+    id?: pulumi.Input<string | undefined>;
+    /**
+     * Name of the control, from the list of Control IDs here: [GitLab Compliance Controls](https://docs.gitlab.com/user/compliance/compliance_frameworks/#gitlab-compliance-controls)
+     */
+    name: pulumi.Input<string>;
+}
+export interface ComplianceRequirementInternalControlExpression {
+    /**
+     * The field to evaluate (e.g., `scannerDepScanningRunning`).
+     */
+    field: pulumi.Input<string>;
+    /**
+     * The operator for comparison. Valid values are `=`, `!=`, `>`, `<`, `>=`, `<=`.
+     */
+    operator: pulumi.Input<string>;
+    /**
+     * The value to compare against. Use `true` or `false` for boolean values.
+     */
+    value: pulumi.Input<string>;
+}
 export interface GetGroupProvisionedUsersProvisionedUser {
     /**
      * The avatar URL of the provisioned user.
@@ -1072,6 +1126,55 @@ export interface ProjectContainerTagProtectionTimeouts {
      */
     create?: pulumi.Input<string | undefined>;
 }
+export interface ProjectFeatureFlagStrategy {
+    /**
+     * The name of the strategy. Valid values are: `default`, `gradualRolloutUserId`, `userWithId`, `flexibleRollout`, `gitlabUserList`.
+     */
+    name: pulumi.Input<string>;
+    /**
+     * Parameters for the strategy. Required fields depend on the strategy name:
+     *   - gradualRolloutUserId: set percentage (required); groupId defaults to "default" if omitted.
+     *   - userWithId: set userIds (required, comma-separated).
+     *   - flexibleRollout: set rollout, group_id, and stickiness.
+     */
+    parameters?: pulumi.Input<inputs.ProjectFeatureFlagStrategyParameters | undefined>;
+    /**
+     * Scopes define which environments the strategy applies to.
+     */
+    scopes?: pulumi.Input<pulumi.Input<inputs.ProjectFeatureFlagStrategyScope>[] | undefined>;
+    /**
+     * The ID of the `gitlab.ProjectFeatureFlagUserList` to bind to this strategy (its `listId` attribute, not `iid`). Required when `name` is `gitlabUserList`, and not usable otherwise.
+     */
+    userListId?: pulumi.Input<number | undefined>;
+}
+export interface ProjectFeatureFlagStrategyParameters {
+    /**
+     * The Unleash group ID. Used by `gradualRolloutUserId` and `flexibleRollout`. Computed when omitted.
+     */
+    groupId?: pulumi.Input<string | undefined>;
+    /**
+     * Percentage (as a string) of users to activate. Used by `gradualRolloutUserId` and `flexibleRollout`.
+     */
+    percentage?: pulumi.Input<string | undefined>;
+    /**
+     * Rollout percentage for `flexibleRollout`.
+     */
+    rollout?: pulumi.Input<string | undefined>;
+    /**
+     * Stickiness setting for `flexibleRollout`. Computed when omitted.
+     */
+    stickiness?: pulumi.Input<string | undefined>;
+    /**
+     * Comma-separated list of user IDs. Used by `userWithId`.
+     */
+    userIds?: pulumi.Input<string | undefined>;
+}
+export interface ProjectFeatureFlagStrategyScope {
+    /**
+     * The environment scope, e.g. `*`, `production`, `staging`.
+     */
+    environmentScope: pulumi.Input<string>;
+}
 export interface ProjectHookCustomHeader {
     /**
      * Key of the custom header.
@@ -1256,6 +1359,16 @@ export interface ProjectPushRules {
      */
     rejectUnsignedCommits?: pulumi.Input<boolean | undefined>;
 }
+export interface ProjectServiceAccountAccessTokenRotationConfiguration {
+    /**
+     * The duration (in days) the new token should be valid for.
+     */
+    expirationDays?: pulumi.Input<number | undefined>;
+    /**
+     * The duration (in days) before the expiration when the token should be rotated. As an example, if set to 7 days, the token will rotate 7 days before the expiration date, but only when `pulumi up` is run in that timeframe.
+     */
+    rotateBeforeDays: pulumi.Input<number>;
+}
 export interface ProjectServiceAccountTimeouts {
     /**
      * How long to wait for the service account to be fully deleted. Defaults to 10 minutes.