@pulumi/harness 0.14.0-alpha.1780470930 → 0.14.0

package/package.json

@@ -1,6 +1,6 @@
 {
     "name": "@pulumi/harness",
-    "version": "0.14.0-alpha.1780470930",
+    "version": "0.14.0",
     "description": "A Pulumi package for creating and managing Harness  resources.",
     "keywords": [
         "pulumi",
@@ -23,7 +23,7 @@
     "pulumi": {
         "resource": true,
         "name": "harness",
-        "version": "0.14.0-alpha.1780470930",
+        "version": "0.14.0",
         "server": "github://api.github.com/pulumi"
     }
 }

package/platform/getHarRegistry.d.ts

@@ -48,7 +48,7 @@ export interface GetHarRegistryArgs {
         [key: string]: string;
     };
     /**
-     * Type of package (DOCKER, HELM, MAVEN, etc.)
+     * Type of package (DOCKER, HELM, MAVEN, PYTHON, GENERIC, NUGET, NPM, RPM, CARGO, RAW, PUPPET)
      */
     packageType?: string;
     /**
@@ -99,7 +99,7 @@ export interface GetHarRegistryResult {
         [key: string]: string;
     };
     /**
-     * Type of package (DOCKER, HELM, MAVEN, etc.)
+     * Type of package (DOCKER, HELM, MAVEN, PYTHON, GENERIC, NUGET, NPM, RPM, CARGO, RAW, PUPPET)
      */
     readonly packageType?: string;
     /**
@@ -162,7 +162,7 @@ export interface GetHarRegistryOutputArgs {
         [key: string]: pulumi.Input<string>;
     } | undefined>;
     /**
-     * Type of package (DOCKER, HELM, MAVEN, etc.)
+     * Type of package (DOCKER, HELM, MAVEN, PYTHON, GENERIC, NUGET, NPM, RPM, CARGO, RAW, PUPPET)
      */
     packageType?: pulumi.Input<string | undefined>;
     /**

package/platform/gitOpsRepoCred.d.ts

@@ -85,7 +85,7 @@ export declare class GitOpsRepoCred extends pulumi.CustomResource {
     /**
      * credential details.
      */
-    readonly creds: pulumi.Output<outputs.platform.GitOpsRepoCredCred[]>;
+    readonly creds: pulumi.Output<outputs.platform.GitOpsRepoCredCred[] | undefined>;
     /**
      * Identifier of the Repository Credentials.
      */

package/platform/gitOpsRepoCred.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"gitOpsRepoCred.d.ts","sourceRoot":"","sources":["../../platform/gitOpsRepoCred.ts"],"names":[],"mappings":"AAGA,OAAO,KAAK,MAAM,MAAM,gBAAgB,CAAC;AACzC,OAAO,KAAK,MAAM,MAAM,gBAAgB,CAAC;AACzC,OAAO,KAAK,OAAO,MAAM,iBAAiB,CAAC;AAG3C;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;GAsDG;AACH,qBAAa,cAAe,SAAQ,MAAM,CAAC,cAAc;IACrD;;;;;;;;OAQG;WACW,GAAG,CAAC,IAAI,EAAE,MAAM,EAAE,EAAE,EAAE,MAAM,CAAC,KAAK,CAAC,MAAM,CAAC,EAAE,CAAC,EAAE,KAAK,CAAC,EAAE,mBAAmB,EAAE,IAAI,CAAC,EAAE,MAAM,CAAC,qBAAqB,GAAG,cAAc;IAO9I;;;OAGG;WACW,UAAU,CAAC,GAAG,EAAE,GAAG,GAAG,GAAG,IAAI,cAAc;IAOzD;;;;OAIG;IACH,SAAwB,SAAS,EAAE,MAAM,CAAC,MAAM,CAAC,MAAM,CAAC,CAAC;IACzD;;OAEG;IACH,SAAwB,OAAO,EAAE,MAAM,CAAC,MAAM,CAAC,MAAM,CAAC,CAAC;IACvD;;OAEG;IACH,SAAwB,KAAK,EAAE,MAAM,CAAC,MAAM,CAAC,OAAO,CAAC,QAAQ,CAAC,kBAAkB,EAAE,CAAC,CAAC;IACpF;;OAEG;IACH,SAAwB,UAAU,EAAE,MAAM,CAAC,MAAM,CAAC,MAAM,CAAC,CAAC;IAC1D;;OAEG;IACH,SAAwB,KAAK,EAAE,MAAM,CAAC,MAAM,CAAC,MAAM,GAAG,SAAS,CAAC,CAAC;IACjE;;OAEG;IACH,SAAwB,SAAS,EAAE,MAAM,CAAC,MAAM,CAAC,MAAM,GAAG,SAAS,CAAC,CAAC;IACrE;;OAEG;IACH,SAAwB,MAAM,EAAE,MAAM,CAAC,MAAM,CAAC,OAAO,GAAG,SAAS,CAAC,CAAC;IAEnE;;;;;;OAMG;gBACS,IAAI,EAAE,MAAM,EAAE,IAAI,EAAE,kBAAkB,EAAE,IAAI,CAAC,EAAE,MAAM,CAAC,qBAAqB;CAgC1F;AAED;;GAEG;AACH,MAAM,WAAW,mBAAmB;IAChC;;;;OAIG;IACH,SAAS,CAAC,EAAE,MAAM,CAAC,KAAK,CAAC,MAAM,GAAG,SAAS,CAAC,CAAC;IAC7C;;OAEG;IACH,OAAO,CAAC,EAAE,MAAM,CAAC,KAAK,CAAC,MAAM,GAAG,SAAS,CAAC,CAAC;IAC3C;;OAEG;IACH,KAAK,CAAC,EAAE,MAAM,CAAC,KAAK,CAAC,MAAM,CAAC,KAAK,CAAC,MAAM,CAAC,QAAQ,CAAC,kBAAkB,CAAC,EAAE,GAAG,SAAS,CAAC,CAAC;IACrF;;OAEG;IACH,UAAU,CAAC,EAAE,MAAM,CAAC,KAAK,CAAC,MAAM,GAAG,SAAS,CAAC,CAAC;IAC9C;;OAEG;IACH,KAAK,CAAC,EAAE,MAAM,CAAC,KAAK,CAAC,MAAM,GAAG,SAAS,CAAC,CAAC;IACzC;;OAEG;IACH,SAAS,CAAC,EAAE,MAAM,CAAC,KAAK,CAAC,MAAM,GAAG,SAAS,CAAC,CAAC;IAC7C;;OAEG;IACH,MAAM,CAAC,EAAE,MAAM,CAAC,KAAK,CAAC,OAAO,GAAG,SAAS,CAAC,CAAC;CAC9C;AAED;;GAEG;AACH,MAAM,WAAW,kBAAkB;IAC/B;;;;OAIG;IACH,SAAS,CAAC,EAAE,MAAM,CAAC,KAAK,CAAC,MAAM,GAAG,SAAS,CAAC,CAAC;IAC7C;;OAEG;IACH,OAAO,EAAE,MAAM,CAAC,KAAK,CAAC,MAAM,CAAC,CAAC;IAC9B;;OAEG;IACH,KAAK,CAAC,EAAE,MAAM,CAAC,KAAK,CAAC,MAAM,CAAC,KAAK,CAAC,MAAM,CAAC,QAAQ,CAAC,kBAAkB,CAAC,EAAE,GAAG,SAAS,CAAC,CAAC;IACrF;;OAEG;IACH,UAAU,EAAE,MAAM,CAAC,KAAK,CAAC,MAAM,CAAC,CAAC;IACjC;;OAEG;IACH,KAAK,CAAC,EAAE,MAAM,CAAC,KAAK,CAAC,MAAM,GAAG,SAAS,CAAC,CAAC;IACzC;;OAEG;IACH,SAAS,CAAC,EAAE,MAAM,CAAC,KAAK,CAAC,MAAM,GAAG,SAAS,CAAC,CAAC;IAC7C;;OAEG;IACH,MAAM,CAAC,EAAE,MAAM,CAAC,KAAK,CAAC,OAAO,GAAG,SAAS,CAAC,CAAC;CAC9C"}
+{"version":3,"file":"gitOpsRepoCred.d.ts","sourceRoot":"","sources":["../../platform/gitOpsRepoCred.ts"],"names":[],"mappings":"AAGA,OAAO,KAAK,MAAM,MAAM,gBAAgB,CAAC;AACzC,OAAO,KAAK,MAAM,MAAM,gBAAgB,CAAC;AACzC,OAAO,KAAK,OAAO,MAAM,iBAAiB,CAAC;AAG3C;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;GAsDG;AACH,qBAAa,cAAe,SAAQ,MAAM,CAAC,cAAc;IACrD;;;;;;;;OAQG;WACW,GAAG,CAAC,IAAI,EAAE,MAAM,EAAE,EAAE,EAAE,MAAM,CAAC,KAAK,CAAC,MAAM,CAAC,EAAE,CAAC,EAAE,KAAK,CAAC,EAAE,mBAAmB,EAAE,IAAI,CAAC,EAAE,MAAM,CAAC,qBAAqB,GAAG,cAAc;IAO9I;;;OAGG;WACW,UAAU,CAAC,GAAG,EAAE,GAAG,GAAG,GAAG,IAAI,cAAc;IAOzD;;;;OAIG;IACH,SAAwB,SAAS,EAAE,MAAM,CAAC,MAAM,CAAC,MAAM,CAAC,CAAC;IACzD;;OAEG;IACH,SAAwB,OAAO,EAAE,MAAM,CAAC,MAAM,CAAC,MAAM,CAAC,CAAC;IACvD;;OAEG;IACH,SAAwB,KAAK,EAAE,MAAM,CAAC,MAAM,CAAC,OAAO,CAAC,QAAQ,CAAC,kBAAkB,EAAE,GAAG,SAAS,CAAC,CAAC;IAChG;;OAEG;IACH,SAAwB,UAAU,EAAE,MAAM,CAAC,MAAM,CAAC,MAAM,CAAC,CAAC;IAC1D;;OAEG;IACH,SAAwB,KAAK,EAAE,MAAM,CAAC,MAAM,CAAC,MAAM,GAAG,SAAS,CAAC,CAAC;IACjE;;OAEG;IACH,SAAwB,SAAS,EAAE,MAAM,CAAC,MAAM,CAAC,MAAM,GAAG,SAAS,CAAC,CAAC;IACrE;;OAEG;IACH,SAAwB,MAAM,EAAE,MAAM,CAAC,MAAM,CAAC,OAAO,GAAG,SAAS,CAAC,CAAC;IAEnE;;;;;;OAMG;gBACS,IAAI,EAAE,MAAM,EAAE,IAAI,EAAE,kBAAkB,EAAE,IAAI,CAAC,EAAE,MAAM,CAAC,qBAAqB;CAgC1F;AAED;;GAEG;AACH,MAAM,WAAW,mBAAmB;IAChC;;;;OAIG;IACH,SAAS,CAAC,EAAE,MAAM,CAAC,KAAK,CAAC,MAAM,GAAG,SAAS,CAAC,CAAC;IAC7C;;OAEG;IACH,OAAO,CAAC,EAAE,MAAM,CAAC,KAAK,CAAC,MAAM,GAAG,SAAS,CAAC,CAAC;IAC3C;;OAEG;IACH,KAAK,CAAC,EAAE,MAAM,CAAC,KAAK,CAAC,MAAM,CAAC,KAAK,CAAC,MAAM,CAAC,QAAQ,CAAC,kBAAkB,CAAC,EAAE,GAAG,SAAS,CAAC,CAAC;IACrF;;OAEG;IACH,UAAU,CAAC,EAAE,MAAM,CAAC,KAAK,CAAC,MAAM,GAAG,SAAS,CAAC,CAAC;IAC9C;;OAEG;IACH,KAAK,CAAC,EAAE,MAAM,CAAC,KAAK,CAAC,MAAM,GAAG,SAAS,CAAC,CAAC;IACzC;;OAEG;IACH,SAAS,CAAC,EAAE,MAAM,CAAC,KAAK,CAAC,MAAM,GAAG,SAAS,CAAC,CAAC;IAC7C;;OAEG;IACH,MAAM,CAAC,EAAE,MAAM,CAAC,KAAK,CAAC,OAAO,GAAG,SAAS,CAAC,CAAC;CAC9C;AAED;;GAEG;AACH,MAAM,WAAW,kBAAkB;IAC/B;;;;OAIG;IACH,SAAS,CAAC,EAAE,MAAM,CAAC,KAAK,CAAC,MAAM,GAAG,SAAS,CAAC,CAAC;IAC7C;;OAEG;IACH,OAAO,EAAE,MAAM,CAAC,KAAK,CAAC,MAAM,CAAC,CAAC;IAC9B;;OAEG;IACH,KAAK,CAAC,EAAE,MAAM,CAAC,KAAK,CAAC,MAAM,CAAC,KAAK,CAAC,MAAM,CAAC,QAAQ,CAAC,kBAAkB,CAAC,EAAE,GAAG,SAAS,CAAC,CAAC;IACrF;;OAEG;IACH,UAAU,EAAE,MAAM,CAAC,KAAK,CAAC,MAAM,CAAC,CAAC;IACjC;;OAEG;IACH,KAAK,CAAC,EAAE,MAAM,CAAC,KAAK,CAAC,MAAM,GAAG,SAAS,CAAC,CAAC;IACzC;;OAEG;IACH,SAAS,CAAC,EAAE,MAAM,CAAC,KAAK,CAAC,MAAM,GAAG,SAAS,CAAC,CAAC;IAC7C;;OAEG;IACH,MAAM,CAAC,EAAE,MAAM,CAAC,KAAK,CAAC,OAAO,GAAG,SAAS,CAAC,CAAC;CAC9C"}

package/platform/gitOpsRepository.d.ts

@@ -70,7 +70,7 @@ export declare class GitOpsRepository extends pulumi.CustomResource {
     readonly gcrGen: pulumi.Output<outputs.platform.GitOpsRepositoryGcrGen | undefined>;
     /**
      * Default: "UNSET"
-     * Enum: "UNSET" "AWS*ECR" "GOOGLE*GCR"
+     * Enum: "UNSET" "AWS_ECR" "GOOGLE_GCR"
      */
     readonly genType: pulumi.Output<string | undefined>;
     /**
@@ -144,7 +144,7 @@ export interface GitOpsRepositoryState {
     gcrGen?: pulumi.Input<inputs.platform.GitOpsRepositoryGcrGen | undefined>;
     /**
      * Default: "UNSET"
-     * Enum: "UNSET" "AWS*ECR" "GOOGLE*GCR"
+     * Enum: "UNSET" "AWS_ECR" "GOOGLE_GCR"
      */
     genType?: pulumi.Input<string | undefined>;
     /**
@@ -210,7 +210,7 @@ export interface GitOpsRepositoryArgs {
     gcrGen?: pulumi.Input<inputs.platform.GitOpsRepositoryGcrGen | undefined>;
     /**
      * Default: "UNSET"
-     * Enum: "UNSET" "AWS*ECR" "GOOGLE*GCR"
+     * Enum: "UNSET" "AWS_ECR" "GOOGLE_GCR"
      */
     genType?: pulumi.Input<string | undefined>;
     /**

package/platform/harRegistry.d.ts

@@ -122,7 +122,7 @@ export declare class HarRegistry extends pulumi.CustomResource {
         [key: string]: string;
     } | undefined>;
     /**
-     * Type of package (DOCKER, HELM, MAVEN, etc.)
+     * Type of package (DOCKER, HELM, MAVEN, PYTHON, GENERIC, NUGET, NPM, RPM, CARGO, RAW, PUPPET)
      */
     readonly packageType: pulumi.Output<string>;
     /**
@@ -181,7 +181,7 @@ export interface HarRegistryState {
         [key: string]: pulumi.Input<string>;
     } | undefined>;
     /**
-     * Type of package (DOCKER, HELM, MAVEN, etc.)
+     * Type of package (DOCKER, HELM, MAVEN, PYTHON, GENERIC, NUGET, NPM, RPM, CARGO, RAW, PUPPET)
      */
     packageType?: pulumi.Input<string | undefined>;
     /**
@@ -228,7 +228,7 @@ export interface HarRegistryArgs {
         [key: string]: pulumi.Input<string>;
     } | undefined>;
     /**
-     * Type of package (DOCKER, HELM, MAVEN, etc.)
+     * Type of package (DOCKER, HELM, MAVEN, PYTHON, GENERIC, NUGET, NPM, RPM, CARGO, RAW, PUPPET)
      */
     packageType: pulumi.Input<string>;
     /**

package/types/input.d.ts

@@ -6036,6 +6036,10 @@ export declare namespace platform {
          * Authentication types for JDBC connector
          */
         authType?: pulumi.Input<string | undefined>;
+        /**
+         * Authenticate using credentials inherited from the Harness delegate runtime identity (e.g. GCP ADC, AWS IAM).
+         */
+        inheritFromDelegate?: pulumi.Input<inputs.platform.ConnectorJdbcCredentialsInheritFromDelegate | undefined>;
         /**
          * Authenticate using key pair.
          */
@@ -6065,6 +6069,16 @@ export declare namespace platform {
          */
         usernameRef?: pulumi.Input<string | undefined>;
     }
+    interface ConnectorJdbcCredentialsInheritFromDelegate {
+        /**
+         * Username to use for authentication.
+         */
+        username?: pulumi.Input<string | undefined>;
+        /**
+         * Reference to a secret containing the username to use for authentication. To reference a secret at the organization scope, prefix 'org' to the expression: org.{identifier}. To reference a secret at the account scope, prefix 'account` to the expression: account.{identifier}.
+         */
+        usernameRef?: pulumi.Input<string | undefined>;
+    }
     interface ConnectorJdbcCredentialsKeyPair {
         /**
          * Reference to a secret containing the private key file to use for authentication. To reference a secret at the organization scope, prefix 'org' to the expression: org.{identifier}. To reference a secret at the account scope, prefix 'account` to the expression: account.{identifier}.
@@ -6085,9 +6099,9 @@ export declare namespace platform {
     }
     interface ConnectorJdbcCredentialsOidc {
         /**
-         * GCP OIDC configuration.
+         * GCP OIDC configuration. Required when provider*type is Gcp.
          */
-        gcpOidc: pulumi.Input<inputs.platform.ConnectorJdbcCredentialsOidcGcpOidc>;
+        gcpOidc?: pulumi.Input<inputs.platform.ConnectorJdbcCredentialsOidcGcpOidc | undefined>;
         /**
          * The OIDC provider type. Currently supported: Gcp.
          */
@@ -8904,9 +8918,18 @@ export declare namespace platform {
          */
         awsClusterName?: pulumi.Input<string | undefined>;
         /**
-         * Bearer authentication token the cluster.
+         * Bearer authentication token the cluster. Use bearerTokenWo for write-only support (Terraform >= 1.11).
          */
         bearerToken?: pulumi.Input<string | undefined>;
+        /**
+         * **NOTE:** This field is write-only and its value will not be updated in state as part of read operations.
+         * Bearer authentication token for the cluster. Write-only: never stored in state. Requires Terraform >= 1.11.
+         */
+        bearerTokenWo?: pulumi.Input<string | undefined>;
+        /**
+         * Increment to rotate the credential when using bearer_token_wo.
+         */
+        bearerTokenWoVersion?: pulumi.Input<number | undefined>;
         /**
          * Identifies the authentication method used to connect to the cluster.
          */
@@ -8920,9 +8943,18 @@ export declare namespace platform {
          */
         execProviderConfigs?: pulumi.Input<pulumi.Input<inputs.platform.GitOpsClusterRequestClusterConfigExecProviderConfig>[] | undefined>;
         /**
-         * Password of the server of the cluster.
+         * Password of the server of the cluster. Use passwordWo for write-only support (Terraform >= 1.11).
          */
         password?: pulumi.Input<string | undefined>;
+        /**
+         * **NOTE:** This field is write-only and its value will not be updated in state as part of read operations.
+         * Password of the server of the cluster. Write-only: never stored in state. Requires Terraform >= 1.11.
+         */
+        passwordWo?: pulumi.Input<string | undefined>;
+        /**
+         * Increment to rotate the credential when using password_wo.
+         */
+        passwordWoVersion?: pulumi.Input<number | undefined>;
         /**
          * The URL to the proxy to be used for all requests send to the cluster's API server
          */
@@ -8966,21 +8998,48 @@ export declare namespace platform {
     }
     interface GitOpsClusterRequestClusterConfigTlsClientConfig {
         /**
-         * CA data holds PEM-encoded bytes (typically read from a root certificates bundle). Use this if you are using self-signed certificates. CAData takes precedence over CAFile. The value should be base64 encoded.
+         * CA data holds PEM-encoded bytes (typically read from a root certificates bundle). Use this if you are using self-signed certificates. CAData takes precedence over CAFile. The value should be base64 encoded. Use caDataWo for write-only support (Terraform >= 1.11).
          */
         caData?: pulumi.Input<string | undefined>;
         /**
-         * Certificate data holds PEM-encoded bytes (typically read from a client certificate file). CertData takes precedence over CertFile. Use this if you are using mTLS. The value should be base64 encoded.
+         * **NOTE:** This field is write-only and its value will not be updated in state as part of read operations.
+         * CA data holds PEM-encoded bytes. Write-only: never stored in state. Requires Terraform >= 1.11.
+         */
+        caDataWo?: pulumi.Input<string | undefined>;
+        /**
+         * Increment to rotate the credential when using ca_data_wo.
+         */
+        caDataWoVersion?: pulumi.Input<number | undefined>;
+        /**
+         * Certificate data holds PEM-encoded bytes (typically read from a client certificate file). CertData takes precedence over CertFile. Use this if you are using mTLS. The value should be base64 encoded. Use certDataWo for write-only support (Terraform >= 1.11).
          */
         certData?: pulumi.Input<string | undefined>;
+        /**
+         * **NOTE:** This field is write-only and its value will not be updated in state as part of read operations.
+         * Certificate data for mTLS authentication. Write-only: never stored in state. Requires Terraform >= 1.11.
+         */
+        certDataWo?: pulumi.Input<string | undefined>;
+        /**
+         * Increment to rotate the credential when using cert_data_wo.
+         */
+        certDataWoVersion?: pulumi.Input<number | undefined>;
         /**
          * Indicates if the TLS connection to the cluster should be insecure.
          */
         insecure?: pulumi.Input<boolean | undefined>;
         /**
-         * Key data holds PEM-encoded bytes (typically read from a client certificate key file). KeyData takes precedence over KeyFile. Use this if you are using mTLS. The value should be base64 encoded.
+         * Key data holds PEM-encoded bytes (typically read from a client certificate key file). KeyData takes precedence over KeyFile. Use this if you are using mTLS. The value should be base64 encoded. Use keyDataWo for write-only support (Terraform >= 1.11).
          */
         keyData?: pulumi.Input<string | undefined>;
+        /**
+         * **NOTE:** This field is write-only and its value will not be updated in state as part of read operations.
+         * Key data for mTLS authentication. Write-only: never stored in state. Requires Terraform >= 1.11.
+         */
+        keyDataWo?: pulumi.Input<string | undefined>;
+        /**
+         * Increment to rotate the credential when using key_data_wo.
+         */
+        keyDataWoVersion?: pulumi.Input<number | undefined>;
         /**
          * Server name for SNI in the client to check server certificates against. If ServerName is empty, the hostname used to contact the server is used.
          */
@@ -9170,25 +9229,70 @@ export declare namespace platform {
          */
         githubAppInstallationId?: pulumi.Input<string | undefined>;
         /**
-         * github*app*private_key specifies the private key PEM data for authentication via GitHub app.
+         * github_app_private_key specifies the private key PEM data for authentication via GitHub app. Use githubAppPrivateKeyWo for write-only support (Terraform >= 1.11).
          */
         githubAppPrivateKey?: pulumi.Input<string | undefined>;
         /**
-         * Password or PAT to be used for authenticating the remote repository.
+         * **NOTE:** This field is write-only and its value will not be updated in state as part of read operations.
+         * GitHub app private key PEM data. Write-only: never stored in state. Requires Terraform >= 1.11.
+         */
+        githubAppPrivateKeyWo?: pulumi.Input<string | undefined>;
+        /**
+         * Increment to rotate the credential when using github_app_private_key_wo.
+         */
+        githubAppPrivateKeyWoVersion?: pulumi.Input<number | undefined>;
+        /**
+         * Password or PAT to be used for authenticating the remote repository. Use passwordWo for write-only support (Terraform >= 1.11).
          */
         password?: pulumi.Input<string | undefined>;
         /**
-         * SSH Key in PEM format for authenticating the repository. Used only for Git repository.
+         * **NOTE:** This field is write-only and its value will not be updated in state as part of read operations.
+         * Password or PAT for authenticating the remote repository. Write-only: never stored in state. Requires Terraform >= 1.11.
+         */
+        passwordWo?: pulumi.Input<string | undefined>;
+        /**
+         * Increment to rotate the credential when using password_wo.
+         */
+        passwordWoVersion?: pulumi.Input<number | undefined>;
+        /**
+         * SSH Key in PEM format for authenticating the repository. Used only for Git repository. Use sshPrivateKeyWo for write-only support (Terraform >= 1.11).
          */
         sshPrivateKey?: pulumi.Input<string | undefined>;
         /**
-         * Certificate in PEM format for authenticating at the repo server. This is used for mTLS.
+         * **NOTE:** This field is write-only and its value will not be updated in state as part of read operations.
+         * SSH Key in PEM format for authenticating the repository. Write-only: never stored in state. Requires Terraform >= 1.11.
+         */
+        sshPrivateKeyWo?: pulumi.Input<string | undefined>;
+        /**
+         * Increment to rotate the credential when using ssh_private_key_wo.
+         */
+        sshPrivateKeyWoVersion?: pulumi.Input<number | undefined>;
+        /**
+         * Certificate in PEM format for authenticating at the repo server. This is used for mTLS. Use tlsClientCertDataWo for write-only support (Terraform >= 1.11).
          */
         tlsClientCertData?: pulumi.Input<string | undefined>;
         /**
-         * Private key in PEM format for authenticating at the repo server. This is used for mTLS.
+         * **NOTE:** This field is write-only and its value will not be updated in state as part of read operations.
+         * Certificate in PEM format for authenticating at the repo server (mTLS). Write-only: never stored in state. Requires Terraform >= 1.11.
+         */
+        tlsClientCertDataWo?: pulumi.Input<string | undefined>;
+        /**
+         * Increment to rotate the credential when using tls_client_cert_data_wo.
+         */
+        tlsClientCertDataWoVersion?: pulumi.Input<number | undefined>;
+        /**
+         * Private key in PEM format for authenticating at the repo server. This is used for mTLS. Use tlsClientCertKeyWo for write-only support (Terraform >= 1.11).
          */
         tlsClientCertKey?: pulumi.Input<string | undefined>;
+        /**
+         * **NOTE:** This field is write-only and its value will not be updated in state as part of read operations.
+         * Private key in PEM format for authenticating at the repo server (mTLS). Write-only: never stored in state. Requires Terraform >= 1.11.
+         */
+        tlsClientCertKeyWo?: pulumi.Input<string | undefined>;
+        /**
+         * Increment to rotate the credential when using tls_client_cert_key_wo.
+         */
+        tlsClientCertKeyWoVersion?: pulumi.Input<number | undefined>;
         /**
          * Type specifies the type of the repoCreds.Can be either 'git' or 'helm. 'git' is assumed if empty or absent
          */
@@ -9316,9 +9420,18 @@ export declare namespace platform {
          */
         githubAppInstallationId?: pulumi.Input<string | undefined>;
         /**
-         * GitHub app private key PEM data.
+         * GitHub app private key PEM data. Use githubAppPrivateKeyWo for write-only support (Terraform >= 1.11).
          */
         githubAppPrivateKey?: pulumi.Input<string | undefined>;
+        /**
+         * **NOTE:** This field is write-only and its value will not be updated in state as part of read operations.
+         * GitHub app private key PEM data. Write-only: never stored in state. Requires Terraform >= 1.11.
+         */
+        githubAppPrivateKeyWo?: pulumi.Input<string | undefined>;
+        /**
+         * Increment to rotate the credential when using github_app_private_key_wo.
+         */
+        githubAppPrivateKeyWoVersion?: pulumi.Input<number | undefined>;
         /**
          * Indicates if the credentials were inherited from a repository credential.
          */
@@ -9336,9 +9449,18 @@ export declare namespace platform {
          */
         name?: pulumi.Input<string | undefined>;
         /**
-         * Password or PAT to be used for authenticating the remote repository.
+         * Password or PAT to be used for authenticating the remote repository. Use passwordWo for write-only support (Terraform >= 1.11).
          */
         password?: pulumi.Input<string | undefined>;
+        /**
+         * **NOTE:** This field is write-only and its value will not be updated in state as part of read operations.
+         * Password or PAT for authenticating the remote repository. Write-only: never stored in state. Requires Terraform >= 1.11.
+         */
+        passwordWo?: pulumi.Input<string | undefined>;
+        /**
+         * Increment to rotate the credential when using password_wo.
+         */
+        passwordWoVersion?: pulumi.Input<number | undefined>;
         /**
          * The ArgoCD project name corresponding to this GitOps repository. An empty string means that the GitOps repository belongs to the default project created by Harness.
          */
@@ -9352,17 +9474,44 @@ export declare namespace platform {
          */
         repo: pulumi.Input<string>;
         /**
-         * SSH Key in PEM format for authenticating the repository. Used only for Git repository.
+         * SSH Key in PEM format for authenticating the repository. Used only for Git repository. Use sshPrivateKeyWo for write-only support (Terraform >= 1.11).
          */
         sshPrivateKey?: pulumi.Input<string | undefined>;
         /**
-         * Certificate in PEM format for authenticating at the repo server. This is used for mTLS. The value should be base64 encoded.
+         * **NOTE:** This field is write-only and its value will not be updated in state as part of read operations.
+         * SSH Key in PEM format for authenticating the repository. Write-only: never stored in state. Requires Terraform >= 1.11.
+         */
+        sshPrivateKeyWo?: pulumi.Input<string | undefined>;
+        /**
+         * Increment to rotate the credential when using ssh_private_key_wo.
+         */
+        sshPrivateKeyWoVersion?: pulumi.Input<number | undefined>;
+        /**
+         * Certificate in PEM format for authenticating at the repo server. This is used for mTLS. The value should be base64 encoded. Use tlsClientCertDataWo for write-only support (Terraform >= 1.11).
          */
         tlsClientCertData?: pulumi.Input<string | undefined>;
         /**
-         * Private key in PEM format for authenticating at the repo server. This is used for mTLS. The value should be base64 encoded.
+         * **NOTE:** This field is write-only and its value will not be updated in state as part of read operations.
+         * Certificate in PEM format for authenticating at the repo server (mTLS). Write-only: never stored in state. Requires Terraform >= 1.11.
+         */
+        tlsClientCertDataWo?: pulumi.Input<string | undefined>;
+        /**
+         * Increment to rotate the credential when using tls_client_cert_data_wo.
+         */
+        tlsClientCertDataWoVersion?: pulumi.Input<number | undefined>;
+        /**
+         * Private key in PEM format for authenticating at the repo server. This is used for mTLS. The value should be base64 encoded. Use tlsClientCertKeyWo for write-only support (Terraform >= 1.11).
          */
         tlsClientCertKey?: pulumi.Input<string | undefined>;
+        /**
+         * **NOTE:** This field is write-only and its value will not be updated in state as part of read operations.
+         * Private key in PEM format for authenticating at the repo server (mTLS). Write-only: never stored in state. Requires Terraform >= 1.11.
+         */
+        tlsClientCertKeyWo?: pulumi.Input<string | undefined>;
+        /**
+         * Increment to rotate the credential when using tls_client_cert_key_wo.
+         */
+        tlsClientCertKeyWoVersion?: pulumi.Input<number | undefined>;
         /**
          * Type specifies the type of the repo. Can be either "git" or "helm. "git" is assumed if empty or absent.
          */
@@ -9864,7 +10013,7 @@ export declare namespace platform {
          */
         strategy?: pulumi.Input<inputs.platform.GitopsApplicationsetApplicationsetSpecStrategy | undefined>;
         /**
-         * Application Set sync policy
+         * Sync policy configures how generated Applications will relate to their ApplicationSet.
          */
         syncPolicy?: pulumi.Input<inputs.platform.GitopsApplicationsetApplicationsetSpecSyncPolicy | undefined>;
         /**