@pulumi/harness 0.16.7 → 0.16.8
This diff represents the content of publicly available package versions that have been released to one of the supported registries. The information contained in this diff is provided for informational purposes only and reflects changes between package versions as they appear in their respective public registries.
- package/autostopping/alert.d.ts +2 -2
- package/autostopping/alert.js +2 -2
- package/autostopping/gcpProxy.d.ts +4 -4
- package/autostopping/gcpProxy.js +4 -4
- package/autostopping/ruleEcs.d.ts +4 -4
- package/autostopping/ruleEcs.js +4 -4
- package/autostopping/ruleRds.d.ts +5 -5
- package/autostopping/ruleRds.js +5 -5
- package/autostopping/ruleScaleGroup.d.ts +12 -12
- package/autostopping/ruleScaleGroup.js +12 -12
- package/autostopping/ruleVm.d.ts +22 -22
- package/autostopping/ruleVm.js +22 -22
- package/chaos/actionTemplate.d.ts +55 -55
- package/chaos/actionTemplate.js +55 -55
- package/chaos/experimentTemplate.d.ts +84 -84
- package/chaos/experimentTemplate.js +84 -84
- package/chaos/faultTemplate.d.ts +124 -124
- package/chaos/faultTemplate.js +124 -124
- package/chaos/imageRegistry.d.ts +6 -6
- package/chaos/imageRegistry.js +6 -6
- package/chaos/securityGovernanceCondition.d.ts +19 -19
- package/chaos/securityGovernanceCondition.js +19 -19
- package/chaos/securityGovernanceConditionV3.d.ts +13 -13
- package/chaos/securityGovernanceConditionV3.js +13 -13
- package/chaos/securityGovernanceRule.d.ts +21 -21
- package/chaos/securityGovernanceRule.js +21 -21
- package/chaos/securityGovernanceRuleV3.d.ts +9 -9
- package/chaos/securityGovernanceRuleV3.js +9 -9
- package/cluster/orchestrator.d.ts +1 -1
- package/cluster/orchestrator.js +1 -1
- package/cluster/orchestratorConfig.d.ts +9 -9
- package/cluster/orchestratorConfig.js +9 -9
- package/encryptedText.d.ts +3 -3
- package/encryptedText.js +3 -3
- package/environment.d.ts +7 -7
- package/environment.js +7 -7
- package/infrastructureDefinition.d.ts +13 -13
- package/infrastructureDefinition.js +13 -13
- package/package.json +2 -2
- package/platform/appDynamicsConnector.d.ts +8 -8
- package/platform/appDynamicsConnector.js +8 -8
- package/platform/artifactoryConnector.d.ts +12 -12
- package/platform/artifactoryConnector.js +12 -12
- package/platform/awsCCConnector.d.ts +4 -4
- package/platform/awsCCConnector.js +4 -4
- package/platform/azureCloudCostConnector.d.ts +12 -12
- package/platform/azureCloudCostConnector.js +12 -12
- package/platform/azureCloudProviderConnector.d.ts +31 -31
- package/platform/azureCloudProviderConnector.js +31 -31
- package/platform/bitbucketConnector.d.ts +27 -27
- package/platform/bitbucketConnector.js +27 -27
- package/platform/connectorCustomhealthsource.d.ts +6 -6
- package/platform/connectorCustomhealthsource.js +6 -6
- package/platform/connectorGcpKms.d.ts +15 -15
- package/platform/connectorGcpKms.js +15 -15
- package/platform/connectorRancher.d.ts +3 -3
- package/platform/connectorRancher.js +3 -3
- package/platform/dbSchema.d.ts +32 -32
- package/platform/dbSchema.js +32 -32
- package/platform/elasticsearchConnector.d.ts +8 -8
- package/platform/elasticsearchConnector.js +8 -8
- package/platform/environment.d.ts +11 -11
- package/platform/environment.js +11 -11
- package/platform/environmentClustersMapping.d.ts +6 -6
- package/platform/environmentClustersMapping.js +6 -6
- package/platform/filters.d.ts +4 -4
- package/platform/filters.js +4 -4
- package/platform/gcpCloudCostConnector.d.ts +4 -4
- package/platform/gcpCloudCostConnector.js +4 -4
- package/platform/gcpSecretManagerConnector.d.ts +8 -8
- package/platform/gcpSecretManagerConnector.js +8 -8
- package/platform/getEnvironmentClustersMapping.d.ts +12 -12
- package/platform/getEnvironmentClustersMapping.js +12 -12
- package/platform/getPolicySet.d.ts +8 -8
- package/platform/getPolicySet.js +8 -8
- package/platform/gitOpsAgent.d.ts +4 -4
- package/platform/gitOpsAgent.js +4 -4
- package/platform/gitOpsApplications.d.ts +9 -9
- package/platform/gitOpsApplications.js +9 -9
- package/platform/gitOpsGnupg.d.ts +3 -3
- package/platform/gitOpsGnupg.js +3 -3
- package/platform/gitOpsRepoCert.d.ts +1 -1
- package/platform/gitOpsRepoCert.js +1 -1
- package/platform/gitOpsRepoCred.d.ts +5 -5
- package/platform/gitOpsRepoCred.js +5 -5
- package/platform/gitopsAppProjectMapping.d.ts +12 -0
- package/platform/gitopsAppProjectMapping.d.ts.map +1 -1
- package/platform/gitopsAppProjectMapping.js +2 -0
- package/platform/gitopsAppProjectMapping.js.map +1 -1
- package/platform/gitopsApplicationset.d.ts +59 -59
- package/platform/gitopsApplicationset.js +59 -59
- package/platform/harLifecycleRule.d.ts +20 -20
- package/platform/harLifecycleRule.js +20 -20
- package/platform/harRegistry.d.ts +69 -69
- package/platform/harRegistry.js +69 -69
- package/platform/iacmAnsibleInventory.d.ts +11 -11
- package/platform/iacmAnsibleInventory.js +11 -11
- package/platform/iacmAnsiblePlaybook.d.ts +10 -10
- package/platform/iacmAnsiblePlaybook.js +10 -10
- package/platform/idpScorecard.d.ts +14 -14
- package/platform/idpScorecard.js +14 -14
- package/platform/idpScorecardCheck.d.ts +9 -9
- package/platform/idpScorecardCheck.js +9 -9
- package/platform/infraVariableSet.d.ts +21 -21
- package/platform/infraVariableSet.js +21 -21
- package/platform/infrastructure.d.ts +7 -7
- package/platform/infrastructure.js +7 -7
- package/platform/kubernetesConnector.d.ts +17 -17
- package/platform/kubernetesConnector.js +17 -17
- package/platform/monitoredService.d.ts +123 -123
- package/platform/monitoredService.js +123 -123
- package/platform/notificationRule.d.ts +10 -10
- package/platform/notificationRule.js +10 -10
- package/platform/pipeline.d.ts +9 -9
- package/platform/pipeline.js +9 -9
- package/platform/pipelineCentralNotificationRule.d.ts +22 -22
- package/platform/pipelineCentralNotificationRule.js +22 -22
- package/platform/pipelineFilters.d.ts +43 -43
- package/platform/pipelineFilters.js +43 -43
- package/platform/prometheusConnector.d.ts +6 -6
- package/platform/prometheusConnector.js +6 -6
- package/platform/repo.d.ts +4 -4
- package/platform/repo.js +4 -4
- package/platform/resourceGroup.d.ts +23 -23
- package/platform/resourceGroup.js +23 -23
- package/platform/secretFile.d.ts +10 -10
- package/platform/secretFile.js +10 -10
- package/platform/secretText.d.ts +13 -13
- package/platform/secretText.js +13 -13
- package/platform/secretWinrm.d.ts +89 -89
- package/platform/secretWinrm.js +89 -89
- package/platform/service.d.ts +10 -10
- package/platform/service.js +10 -10
- package/platform/slo.d.ts +17 -17
- package/platform/slo.js +17 -17
- package/platform/splunkConnector.d.ts +11 -11
- package/platform/splunkConnector.js +11 -11
- package/platform/templateFilters.d.ts +4 -4
- package/platform/templateFilters.js +4 -4
- package/platform/usergroup.d.ts +21 -21
- package/platform/usergroup.js +21 -21
- package/platform/variables.d.ts +4 -4
- package/platform/variables.js +4 -4
- package/platform/workspace.d.ts +32 -32
- package/platform/workspace.js +32 -32
- package/platformCcmFilters.d.ts +4 -4
- package/platformCcmFilters.js +4 -4
- package/service/discoveryAgent.d.ts +62 -62
- package/service/discoveryAgent.js +62 -62
- package/service/discoverySetting.d.ts +2 -2
- package/service/discoverySetting.js +2 -2
- package/service/kubernetes.d.ts +4 -4
- package/service/kubernetes.js +4 -4
- package/sshCredential.d.ts +3 -3
- package/sshCredential.js +3 -3
- package/userGroup.d.ts +6 -6
- package/userGroup.js +6 -6
package/platform/secretFile.d.ts
CHANGED
|
@@ -26,32 +26,32 @@ import * as outputs from "../types/output";
|
|
|
26
26
|
* });
|
|
27
27
|
* // With AWS Secret Manager KMS Key
|
|
28
28
|
* const awsSecretManager = new harness.platform.SecretFile("aws_secret_manager", {
|
|
29
|
-
* identifier: "identifier",
|
|
30
|
-
* name: "name",
|
|
31
|
-
* description: "example",
|
|
32
|
-
* tags: ["foo:bar"],
|
|
33
|
-
* filePath: "file_path",
|
|
34
|
-
* secretManagerIdentifier: "awsSecretManager",
|
|
35
29
|
* additionalMetadatas: [{
|
|
36
30
|
* values: [{
|
|
37
31
|
* kmsKeyId: "kmsKeyId",
|
|
38
32
|
* }],
|
|
39
33
|
* }],
|
|
40
|
-
* });
|
|
41
|
-
* // With GCP Secret Manager project ID and region
|
|
42
|
-
* const gcpSecretManager = new harness.platform.SecretFile("gcp_secret_manager", {
|
|
43
34
|
* identifier: "identifier",
|
|
44
35
|
* name: "name",
|
|
45
36
|
* description: "example",
|
|
46
37
|
* tags: ["foo:bar"],
|
|
47
38
|
* filePath: "file_path",
|
|
48
|
-
* secretManagerIdentifier: "
|
|
39
|
+
* secretManagerIdentifier: "awsSecretManager",
|
|
40
|
+
* });
|
|
41
|
+
* // With GCP Secret Manager project ID and region
|
|
42
|
+
* const gcpSecretManager = new harness.platform.SecretFile("gcp_secret_manager", {
|
|
49
43
|
* additionalMetadatas: [{
|
|
50
44
|
* values: [{
|
|
51
45
|
* regions: "us-east1",
|
|
52
46
|
* gcpProjectId: "my-gcp-project-id",
|
|
53
47
|
* }],
|
|
54
48
|
* }],
|
|
49
|
+
* identifier: "identifier",
|
|
50
|
+
* name: "name",
|
|
51
|
+
* description: "example",
|
|
52
|
+
* tags: ["foo:bar"],
|
|
53
|
+
* filePath: "file_path",
|
|
54
|
+
* secretManagerIdentifier: "gcpSecretManager",
|
|
55
55
|
* });
|
|
56
56
|
* ```
|
|
57
57
|
*
|
package/platform/secretFile.js
CHANGED
|
@@ -53,32 +53,32 @@ const utilities = __importStar(require("../utilities"));
|
|
|
53
53
|
* });
|
|
54
54
|
* // With AWS Secret Manager KMS Key
|
|
55
55
|
* const awsSecretManager = new harness.platform.SecretFile("aws_secret_manager", {
|
|
56
|
-
* identifier: "identifier",
|
|
57
|
-
* name: "name",
|
|
58
|
-
* description: "example",
|
|
59
|
-
* tags: ["foo:bar"],
|
|
60
|
-
* filePath: "file_path",
|
|
61
|
-
* secretManagerIdentifier: "awsSecretManager",
|
|
62
56
|
* additionalMetadatas: [{
|
|
63
57
|
* values: [{
|
|
64
58
|
* kmsKeyId: "kmsKeyId",
|
|
65
59
|
* }],
|
|
66
60
|
* }],
|
|
67
|
-
* });
|
|
68
|
-
* // With GCP Secret Manager project ID and region
|
|
69
|
-
* const gcpSecretManager = new harness.platform.SecretFile("gcp_secret_manager", {
|
|
70
61
|
* identifier: "identifier",
|
|
71
62
|
* name: "name",
|
|
72
63
|
* description: "example",
|
|
73
64
|
* tags: ["foo:bar"],
|
|
74
65
|
* filePath: "file_path",
|
|
75
|
-
* secretManagerIdentifier: "
|
|
66
|
+
* secretManagerIdentifier: "awsSecretManager",
|
|
67
|
+
* });
|
|
68
|
+
* // With GCP Secret Manager project ID and region
|
|
69
|
+
* const gcpSecretManager = new harness.platform.SecretFile("gcp_secret_manager", {
|
|
76
70
|
* additionalMetadatas: [{
|
|
77
71
|
* values: [{
|
|
78
72
|
* regions: "us-east1",
|
|
79
73
|
* gcpProjectId: "my-gcp-project-id",
|
|
80
74
|
* }],
|
|
81
75
|
* }],
|
|
76
|
+
* identifier: "identifier",
|
|
77
|
+
* name: "name",
|
|
78
|
+
* description: "example",
|
|
79
|
+
* tags: ["foo:bar"],
|
|
80
|
+
* filePath: "file_path",
|
|
81
|
+
* secretManagerIdentifier: "gcpSecretManager",
|
|
82
82
|
* });
|
|
83
83
|
* ```
|
|
84
84
|
*
|
package/platform/secretText.d.ts
CHANGED
|
@@ -34,6 +34,11 @@ import * as outputs from "../types/output";
|
|
|
34
34
|
* value: "secret",
|
|
35
35
|
* });
|
|
36
36
|
* const gcpSecretManagerReference = new harness.platform.SecretText("gcp_secret_manager_reference", {
|
|
37
|
+
* additionalMetadatas: [{
|
|
38
|
+
* values: [{
|
|
39
|
+
* version: "1",
|
|
40
|
+
* }],
|
|
41
|
+
* }],
|
|
37
42
|
* identifier: "identifier",
|
|
38
43
|
* name: "name",
|
|
39
44
|
* description: "example",
|
|
@@ -41,14 +46,15 @@ import * as outputs from "../types/output";
|
|
|
41
46
|
* secretManagerIdentifier: "gcpSecretManager",
|
|
42
47
|
* valueType: "Reference",
|
|
43
48
|
* value: "secret",
|
|
49
|
+
* });
|
|
50
|
+
* // GCP Secret Manager with project ID and region (for secrets in a different GCP project)
|
|
51
|
+
* const gcpSecretManagerWithProject = new harness.platform.SecretText("gcp_secret_manager_with_project", {
|
|
44
52
|
* additionalMetadatas: [{
|
|
45
53
|
* values: [{
|
|
46
|
-
*
|
|
54
|
+
* regions: "us-east1",
|
|
55
|
+
* gcpProjectId: "my-gcp-project-id",
|
|
47
56
|
* }],
|
|
48
57
|
* }],
|
|
49
|
-
* });
|
|
50
|
-
* // GCP Secret Manager with project ID and region (for secrets in a different GCP project)
|
|
51
|
-
* const gcpSecretManagerWithProject = new harness.platform.SecretText("gcp_secret_manager_with_project", {
|
|
52
58
|
* identifier: "identifier",
|
|
53
59
|
* name: "name",
|
|
54
60
|
* description: "example",
|
|
@@ -56,14 +62,13 @@ import * as outputs from "../types/output";
|
|
|
56
62
|
* secretManagerIdentifier: "gcpSecretManager",
|
|
57
63
|
* valueType: "Inline",
|
|
58
64
|
* value: "secret",
|
|
65
|
+
* });
|
|
66
|
+
* const awsSecretManager = new harness.platform.SecretText("aws_secret_manager", {
|
|
59
67
|
* additionalMetadatas: [{
|
|
60
68
|
* values: [{
|
|
61
|
-
*
|
|
62
|
-
* gcpProjectId: "my-gcp-project-id",
|
|
69
|
+
* kmsKeyId: "kmsKeyId",
|
|
63
70
|
* }],
|
|
64
71
|
* }],
|
|
65
|
-
* });
|
|
66
|
-
* const awsSecretManager = new harness.platform.SecretText("aws_secret_manager", {
|
|
67
72
|
* identifier: "identifier",
|
|
68
73
|
* name: "name",
|
|
69
74
|
* description: "example",
|
|
@@ -71,11 +76,6 @@ import * as outputs from "../types/output";
|
|
|
71
76
|
* secretManagerIdentifier: "awsSecretManager",
|
|
72
77
|
* valueType: "Inline",
|
|
73
78
|
* value: "secret",
|
|
74
|
-
* additionalMetadatas: [{
|
|
75
|
-
* values: [{
|
|
76
|
-
* kmsKeyId: "kmsKeyId",
|
|
77
|
-
* }],
|
|
78
|
-
* }],
|
|
79
79
|
* });
|
|
80
80
|
* ```
|
|
81
81
|
*
|
package/platform/secretText.js
CHANGED
|
@@ -61,6 +61,11 @@ const utilities = __importStar(require("../utilities"));
|
|
|
61
61
|
* value: "secret",
|
|
62
62
|
* });
|
|
63
63
|
* const gcpSecretManagerReference = new harness.platform.SecretText("gcp_secret_manager_reference", {
|
|
64
|
+
* additionalMetadatas: [{
|
|
65
|
+
* values: [{
|
|
66
|
+
* version: "1",
|
|
67
|
+
* }],
|
|
68
|
+
* }],
|
|
64
69
|
* identifier: "identifier",
|
|
65
70
|
* name: "name",
|
|
66
71
|
* description: "example",
|
|
@@ -68,14 +73,15 @@ const utilities = __importStar(require("../utilities"));
|
|
|
68
73
|
* secretManagerIdentifier: "gcpSecretManager",
|
|
69
74
|
* valueType: "Reference",
|
|
70
75
|
* value: "secret",
|
|
76
|
+
* });
|
|
77
|
+
* // GCP Secret Manager with project ID and region (for secrets in a different GCP project)
|
|
78
|
+
* const gcpSecretManagerWithProject = new harness.platform.SecretText("gcp_secret_manager_with_project", {
|
|
71
79
|
* additionalMetadatas: [{
|
|
72
80
|
* values: [{
|
|
73
|
-
*
|
|
81
|
+
* regions: "us-east1",
|
|
82
|
+
* gcpProjectId: "my-gcp-project-id",
|
|
74
83
|
* }],
|
|
75
84
|
* }],
|
|
76
|
-
* });
|
|
77
|
-
* // GCP Secret Manager with project ID and region (for secrets in a different GCP project)
|
|
78
|
-
* const gcpSecretManagerWithProject = new harness.platform.SecretText("gcp_secret_manager_with_project", {
|
|
79
85
|
* identifier: "identifier",
|
|
80
86
|
* name: "name",
|
|
81
87
|
* description: "example",
|
|
@@ -83,14 +89,13 @@ const utilities = __importStar(require("../utilities"));
|
|
|
83
89
|
* secretManagerIdentifier: "gcpSecretManager",
|
|
84
90
|
* valueType: "Inline",
|
|
85
91
|
* value: "secret",
|
|
92
|
+
* });
|
|
93
|
+
* const awsSecretManager = new harness.platform.SecretText("aws_secret_manager", {
|
|
86
94
|
* additionalMetadatas: [{
|
|
87
95
|
* values: [{
|
|
88
|
-
*
|
|
89
|
-
* gcpProjectId: "my-gcp-project-id",
|
|
96
|
+
* kmsKeyId: "kmsKeyId",
|
|
90
97
|
* }],
|
|
91
98
|
* }],
|
|
92
|
-
* });
|
|
93
|
-
* const awsSecretManager = new harness.platform.SecretText("aws_secret_manager", {
|
|
94
99
|
* identifier: "identifier",
|
|
95
100
|
* name: "name",
|
|
96
101
|
* description: "example",
|
|
@@ -98,11 +103,6 @@ const utilities = __importStar(require("../utilities"));
|
|
|
98
103
|
* secretManagerIdentifier: "awsSecretManager",
|
|
99
104
|
* valueType: "Inline",
|
|
100
105
|
* value: "secret",
|
|
101
|
-
* additionalMetadatas: [{
|
|
102
|
-
* values: [{
|
|
103
|
-
* kmsKeyId: "kmsKeyId",
|
|
104
|
-
* }],
|
|
105
|
-
* }],
|
|
106
106
|
* });
|
|
107
107
|
* ```
|
|
108
108
|
*
|
|
@@ -23,14 +23,6 @@ import * as outputs from "../types/output";
|
|
|
23
23
|
* value: "account_ntlm_pass",
|
|
24
24
|
* });
|
|
25
25
|
* const accountNtlm = new harness.platform.SecretWinrm("account_ntlm", {
|
|
26
|
-
* identifier: "account_ntlm_v3",
|
|
27
|
-
* name: "Account NTLM v3",
|
|
28
|
-
* description: "Account-level WinRM with NTLM",
|
|
29
|
-
* tags: [
|
|
30
|
-
* "scope:account",
|
|
31
|
-
* "auth:ntlm",
|
|
32
|
-
* ],
|
|
33
|
-
* port: 5986,
|
|
34
26
|
* ntlm: {
|
|
35
27
|
* domain: "example.com",
|
|
36
28
|
* username: "admin",
|
|
@@ -39,28 +31,36 @@ import * as outputs from "../types/output";
|
|
|
39
31
|
* skipCertCheck: false,
|
|
40
32
|
* useNoProfile: true,
|
|
41
33
|
* },
|
|
42
|
-
*
|
|
43
|
-
*
|
|
44
|
-
*
|
|
45
|
-
* identifier: "account_kerberos_keytab_v3",
|
|
46
|
-
* name: "Account Kerberos KeyTab v3",
|
|
47
|
-
* description: "Account-level WinRM with Kerberos KeyTab",
|
|
34
|
+
* identifier: "account_ntlm_v3",
|
|
35
|
+
* name: "Account NTLM v3",
|
|
36
|
+
* description: "Account-level WinRM with NTLM",
|
|
48
37
|
* tags: [
|
|
49
38
|
* "scope:account",
|
|
50
|
-
* "auth:
|
|
39
|
+
* "auth:ntlm",
|
|
51
40
|
* ],
|
|
52
41
|
* port: 5986,
|
|
42
|
+
* });
|
|
43
|
+
* // 2. Account-level Kerberos with KeyTab
|
|
44
|
+
* const accountKerberosKeytab = new harness.platform.SecretWinrm("account_kerberos_keytab", {
|
|
53
45
|
* kerberos: {
|
|
46
|
+
* tgtKeyTabFilePathSpec: {
|
|
47
|
+
* keyPath: "/etc/krb5.keytab",
|
|
48
|
+
* },
|
|
54
49
|
* principal: "service@EXAMPLE.COM",
|
|
55
50
|
* realm: "EXAMPLE.COM",
|
|
56
51
|
* tgtGenerationMethod: "KeyTabFilePath",
|
|
57
52
|
* useSsl: true,
|
|
58
53
|
* skipCertCheck: true,
|
|
59
54
|
* useNoProfile: true,
|
|
60
|
-
* tgtKeyTabFilePathSpec: {
|
|
61
|
-
* keyPath: "/etc/krb5.keytab",
|
|
62
|
-
* },
|
|
63
55
|
* },
|
|
56
|
+
* identifier: "account_kerberos_keytab_v3",
|
|
57
|
+
* name: "Account Kerberos KeyTab v3",
|
|
58
|
+
* description: "Account-level WinRM with Kerberos KeyTab",
|
|
59
|
+
* tags: [
|
|
60
|
+
* "scope:account",
|
|
61
|
+
* "auth:kerberos-keytab",
|
|
62
|
+
* ],
|
|
63
|
+
* port: 5986,
|
|
64
64
|
* });
|
|
65
65
|
* // 3. Account-level Kerberos with Password
|
|
66
66
|
* const accountKerberosPassword1 = new harness.platform.SecretText("account_kerberos_password_1", {
|
|
@@ -72,25 +72,25 @@ import * as outputs from "../types/output";
|
|
|
72
72
|
* value: "account_kerberos_pass",
|
|
73
73
|
* });
|
|
74
74
|
* const accountKerberosPassword1SecretWinrm = new harness.platform.SecretWinrm("account_kerberos_password_1", {
|
|
75
|
-
* identifier: "account_kerb_winrm_20251111",
|
|
76
|
-
* name: "Account Kerberos WinRM 20251111",
|
|
77
|
-
* description: "Account-level WinRM with Kerberos Password",
|
|
78
|
-
* tags: [
|
|
79
|
-
* "scope:account",
|
|
80
|
-
* "auth:kerberos-password",
|
|
81
|
-
* ],
|
|
82
|
-
* port: 5986,
|
|
83
75
|
* kerberos: {
|
|
76
|
+
* tgtPasswordSpec: {
|
|
77
|
+
* passwordRef: pulumi.interpolate`account.${accountKerberosPassword1.id}`,
|
|
78
|
+
* },
|
|
84
79
|
* principal: "user@EXAMPLE.COM",
|
|
85
80
|
* realm: "EXAMPLE.COM",
|
|
86
81
|
* tgtGenerationMethod: "Password",
|
|
87
82
|
* useSsl: true,
|
|
88
83
|
* skipCertCheck: false,
|
|
89
84
|
* useNoProfile: true,
|
|
90
|
-
* tgtPasswordSpec: {
|
|
91
|
-
* passwordRef: pulumi.interpolate`account.${accountKerberosPassword1.id}`,
|
|
92
|
-
* },
|
|
93
85
|
* },
|
|
86
|
+
* identifier: "account_kerb_winrm_20251111",
|
|
87
|
+
* name: "Account Kerberos WinRM 20251111",
|
|
88
|
+
* description: "Account-level WinRM with Kerberos Password",
|
|
89
|
+
* tags: [
|
|
90
|
+
* "scope:account",
|
|
91
|
+
* "auth:kerberos-password",
|
|
92
|
+
* ],
|
|
93
|
+
* port: 5986,
|
|
94
94
|
* });
|
|
95
95
|
* // ============================================================================
|
|
96
96
|
* // ORGANIZATION LEVEL TESTS (3 scenarios)
|
|
@@ -106,6 +106,14 @@ import * as outputs from "../types/output";
|
|
|
106
106
|
* value: "org_ntlm_pass",
|
|
107
107
|
* });
|
|
108
108
|
* const orgNtlm = new harness.platform.SecretWinrm("org_ntlm", {
|
|
109
|
+
* ntlm: {
|
|
110
|
+
* domain: "org.example.com",
|
|
111
|
+
* username: "orgadmin",
|
|
112
|
+
* passwordRef: pulumi.interpolate`org.${orgNtlmPassword.id}`,
|
|
113
|
+
* useSsl: false,
|
|
114
|
+
* skipCertCheck: false,
|
|
115
|
+
* useNoProfile: true,
|
|
116
|
+
* },
|
|
109
117
|
* identifier: "org_ntlm_v3",
|
|
110
118
|
* name: "Org NTLM v3",
|
|
111
119
|
* description: "Org-level WinRM with NTLM",
|
|
@@ -115,17 +123,20 @@ import * as outputs from "../types/output";
|
|
|
115
123
|
* "auth:ntlm",
|
|
116
124
|
* ],
|
|
117
125
|
* port: 5985,
|
|
118
|
-
* ntlm: {
|
|
119
|
-
* domain: "org.example.com",
|
|
120
|
-
* username: "orgadmin",
|
|
121
|
-
* passwordRef: pulumi.interpolate`org.${orgNtlmPassword.id}`,
|
|
122
|
-
* useSsl: false,
|
|
123
|
-
* skipCertCheck: false,
|
|
124
|
-
* useNoProfile: true,
|
|
125
|
-
* },
|
|
126
126
|
* });
|
|
127
127
|
* // 5. Org-level Kerberos with KeyTab
|
|
128
128
|
* const orgKerberosKeytab = new harness.platform.SecretWinrm("org_kerberos_keytab", {
|
|
129
|
+
* kerberos: {
|
|
130
|
+
* tgtKeyTabFilePathSpec: {
|
|
131
|
+
* keyPath: "/etc/org.keytab",
|
|
132
|
+
* },
|
|
133
|
+
* principal: "orgservice@EXAMPLE.COM",
|
|
134
|
+
* realm: "EXAMPLE.COM",
|
|
135
|
+
* tgtGenerationMethod: "KeyTabFilePath",
|
|
136
|
+
* useSsl: true,
|
|
137
|
+
* skipCertCheck: true,
|
|
138
|
+
* useNoProfile: true,
|
|
139
|
+
* },
|
|
129
140
|
* identifier: "org_kerberos_keytab_v3",
|
|
130
141
|
* name: "Org Kerberos KeyTab v3",
|
|
131
142
|
* description: "Org-level WinRM with Kerberos KeyTab",
|
|
@@ -135,17 +146,6 @@ import * as outputs from "../types/output";
|
|
|
135
146
|
* "auth:kerberos-keytab",
|
|
136
147
|
* ],
|
|
137
148
|
* port: 5986,
|
|
138
|
-
* kerberos: {
|
|
139
|
-
* principal: "orgservice@EXAMPLE.COM",
|
|
140
|
-
* realm: "EXAMPLE.COM",
|
|
141
|
-
* tgtGenerationMethod: "KeyTabFilePath",
|
|
142
|
-
* useSsl: true,
|
|
143
|
-
* skipCertCheck: true,
|
|
144
|
-
* useNoProfile: true,
|
|
145
|
-
* tgtKeyTabFilePathSpec: {
|
|
146
|
-
* keyPath: "/etc/org.keytab",
|
|
147
|
-
* },
|
|
148
|
-
* },
|
|
149
149
|
* });
|
|
150
150
|
* // 6. Org-level Kerberos with Password
|
|
151
151
|
* const orgKerberosPassword = new harness.platform.SecretText("org_kerberos_password", {
|
|
@@ -158,6 +158,17 @@ import * as outputs from "../types/output";
|
|
|
158
158
|
* value: "org_kerberos_pass",
|
|
159
159
|
* });
|
|
160
160
|
* const orgKerberosPasswordSecretWinrm = new harness.platform.SecretWinrm("org_kerberos_password", {
|
|
161
|
+
* kerberos: {
|
|
162
|
+
* tgtPasswordSpec: {
|
|
163
|
+
* passwordRef: pulumi.interpolate`org.${orgKerberosPassword.id}`,
|
|
164
|
+
* },
|
|
165
|
+
* principal: "orguser@EXAMPLE.COM",
|
|
166
|
+
* realm: "EXAMPLE.COM",
|
|
167
|
+
* tgtGenerationMethod: "Password",
|
|
168
|
+
* useSsl: true,
|
|
169
|
+
* skipCertCheck: false,
|
|
170
|
+
* useNoProfile: true,
|
|
171
|
+
* },
|
|
161
172
|
* identifier: "org_kerb_winrm_v3",
|
|
162
173
|
* name: "Org Kerberos WinRM v3",
|
|
163
174
|
* description: "Org-level WinRM with Kerberos Password",
|
|
@@ -167,17 +178,6 @@ import * as outputs from "../types/output";
|
|
|
167
178
|
* "auth:kerberos-password",
|
|
168
179
|
* ],
|
|
169
180
|
* port: 5986,
|
|
170
|
-
* kerberos: {
|
|
171
|
-
* principal: "orguser@EXAMPLE.COM",
|
|
172
|
-
* realm: "EXAMPLE.COM",
|
|
173
|
-
* tgtGenerationMethod: "Password",
|
|
174
|
-
* useSsl: true,
|
|
175
|
-
* skipCertCheck: false,
|
|
176
|
-
* useNoProfile: true,
|
|
177
|
-
* tgtPasswordSpec: {
|
|
178
|
-
* passwordRef: pulumi.interpolate`org.${orgKerberosPassword.id}`,
|
|
179
|
-
* },
|
|
180
|
-
* },
|
|
181
181
|
* });
|
|
182
182
|
* // ============================================================================
|
|
183
183
|
* // PROJECT LEVEL TESTS (3 scenarios)
|
|
@@ -194,6 +194,14 @@ import * as outputs from "../types/output";
|
|
|
194
194
|
* value: "project_ntlm_pass",
|
|
195
195
|
* });
|
|
196
196
|
* const projectNtlm = new harness.platform.SecretWinrm("project_ntlm", {
|
|
197
|
+
* ntlm: {
|
|
198
|
+
* domain: "project.example.com",
|
|
199
|
+
* username: "projectadmin",
|
|
200
|
+
* passwordRef: projectNtlmPassword.id,
|
|
201
|
+
* useSsl: true,
|
|
202
|
+
* skipCertCheck: false,
|
|
203
|
+
* useNoProfile: false,
|
|
204
|
+
* },
|
|
197
205
|
* identifier: "proj_ntlm_winrm_v3",
|
|
198
206
|
* name: "Project NTLM WinRM v3",
|
|
199
207
|
* description: "Project-level WinRM with NTLM",
|
|
@@ -204,17 +212,20 @@ import * as outputs from "../types/output";
|
|
|
204
212
|
* "auth:ntlm",
|
|
205
213
|
* ],
|
|
206
214
|
* port: 5986,
|
|
207
|
-
* ntlm: {
|
|
208
|
-
* domain: "project.example.com",
|
|
209
|
-
* username: "projectadmin",
|
|
210
|
-
* passwordRef: projectNtlmPassword.id,
|
|
211
|
-
* useSsl: true,
|
|
212
|
-
* skipCertCheck: false,
|
|
213
|
-
* useNoProfile: false,
|
|
214
|
-
* },
|
|
215
215
|
* });
|
|
216
216
|
* // 8. Project-level Kerberos with KeyTab
|
|
217
217
|
* const projectKerberosKeytab = new harness.platform.SecretWinrm("project_kerberos_keytab", {
|
|
218
|
+
* kerberos: {
|
|
219
|
+
* tgtKeyTabFilePathSpec: {
|
|
220
|
+
* keyPath: "/etc/project.keytab",
|
|
221
|
+
* },
|
|
222
|
+
* principal: "projectservice@EXAMPLE.COM",
|
|
223
|
+
* realm: "EXAMPLE.COM",
|
|
224
|
+
* tgtGenerationMethod: "KeyTabFilePath",
|
|
225
|
+
* useSsl: false,
|
|
226
|
+
* skipCertCheck: false,
|
|
227
|
+
* useNoProfile: false,
|
|
228
|
+
* },
|
|
218
229
|
* identifier: "proj_kerb_keytab_v3",
|
|
219
230
|
* name: "Project Kerberos KeyTab v3",
|
|
220
231
|
* description: "Project-level WinRM with Kerberos KeyTab",
|
|
@@ -225,17 +236,6 @@ import * as outputs from "../types/output";
|
|
|
225
236
|
* "auth:kerberos-keytab",
|
|
226
237
|
* ],
|
|
227
238
|
* port: 5986,
|
|
228
|
-
* kerberos: {
|
|
229
|
-
* principal: "projectservice@EXAMPLE.COM",
|
|
230
|
-
* realm: "EXAMPLE.COM",
|
|
231
|
-
* tgtGenerationMethod: "KeyTabFilePath",
|
|
232
|
-
* useSsl: false,
|
|
233
|
-
* skipCertCheck: false,
|
|
234
|
-
* useNoProfile: false,
|
|
235
|
-
* tgtKeyTabFilePathSpec: {
|
|
236
|
-
* keyPath: "/etc/project.keytab",
|
|
237
|
-
* },
|
|
238
|
-
* },
|
|
239
239
|
* });
|
|
240
240
|
* // 9. Project-level Kerberos with Password
|
|
241
241
|
* const projectKerberosPassword = new harness.platform.SecretText("project_kerberos_password", {
|
|
@@ -249,6 +249,17 @@ import * as outputs from "../types/output";
|
|
|
249
249
|
* value: "project_kerberos_pass",
|
|
250
250
|
* });
|
|
251
251
|
* const projectKerberosPasswordSecretWinrm = new harness.platform.SecretWinrm("project_kerberos_password", {
|
|
252
|
+
* kerberos: {
|
|
253
|
+
* tgtPasswordSpec: {
|
|
254
|
+
* passwordRef: projectKerberosPassword.id,
|
|
255
|
+
* },
|
|
256
|
+
* principal: "projectuser@EXAMPLE.COM",
|
|
257
|
+
* realm: "EXAMPLE.COM",
|
|
258
|
+
* tgtGenerationMethod: "Password",
|
|
259
|
+
* useSsl: false,
|
|
260
|
+
* skipCertCheck: true,
|
|
261
|
+
* useNoProfile: true,
|
|
262
|
+
* },
|
|
252
263
|
* identifier: "proj_kerb_winrm_v3",
|
|
253
264
|
* name: "Project Kerberos WinRM v3",
|
|
254
265
|
* description: "Project-level WinRM with Kerberos Password",
|
|
@@ -259,17 +270,6 @@ import * as outputs from "../types/output";
|
|
|
259
270
|
* "auth:kerberos-password",
|
|
260
271
|
* ],
|
|
261
272
|
* port: 5986,
|
|
262
|
-
* kerberos: {
|
|
263
|
-
* principal: "projectuser@EXAMPLE.COM",
|
|
264
|
-
* realm: "EXAMPLE.COM",
|
|
265
|
-
* tgtGenerationMethod: "Password",
|
|
266
|
-
* useSsl: false,
|
|
267
|
-
* skipCertCheck: true,
|
|
268
|
-
* useNoProfile: true,
|
|
269
|
-
* tgtPasswordSpec: {
|
|
270
|
-
* passwordRef: projectKerberosPassword.id,
|
|
271
|
-
* },
|
|
272
|
-
* },
|
|
273
273
|
* });
|
|
274
274
|
* ```
|
|
275
275
|
*
|