@three14/pulumi-argocd 0.1.0

package/project.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"project.js","sourceRoot":"","sources":["../project.ts"],"names":[],"mappings":";AAAA,wFAAwF;AACxF,iFAAiF;;;AAEjF,yCAAyC;AAGzC,yCAAyC;AAEzC;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;GAuIG;AACH,MAAa,OAAQ,SAAQ,MAAM,CAAC,cAAc;IAC9C;;;;;;;;OAQG;IACI,MAAM,CAAC,GAAG,CAAC,IAAY,EAAE,EAA2B,EAAE,KAAoB,EAAE,IAAmC;QAClH,OAAO,IAAI,OAAO,CAAC,IAAI,EAAO,KAAK,kCAAO,IAAI,KAAE,EAAE,EAAE,EAAE,IAAG,CAAC;IAC9D,CAAC;IAKD;;;OAGG;IACI,MAAM,CAAC,UAAU,CAAC,GAAQ;QAC7B,IAAI,GAAG,KAAK,SAAS,IAAI,GAAG,KAAK,IAAI,EAAE;YACnC,OAAO,KAAK,CAAC;SAChB;QACD,OAAO,GAAG,CAAC,cAAc,CAAC,KAAK,OAAO,CAAC,YAAY,CAAC;IACxD,CAAC;IAmBD,YAAY,IAAY,EAAE,WAAwC,EAAE,IAAmC;QACnG,IAAI,cAAc,GAAkB,EAAE,CAAC;QACvC,IAAI,GAAG,IAAI,IAAI,EAAE,CAAC;QAClB,IAAI,IAAI,CAAC,EAAE,EAAE;YACT,MAAM,KAAK,GAAG,WAAuC,CAAC;YACtD,cAAc,CAAC,UAAU,CAAC,GAAG,KAAK,CAAC,CAAC,CAAC,KAAK,CAAC,QAAQ,CAAC,CAAC,CAAC,SAAS,CAAC;YAChE,cAAc,CAAC,MAAM,CAAC,GAAG,KAAK,CAAC,CAAC,CAAC,KAAK,CAAC,IAAI,CAAC,CAAC,CAAC,SAAS,CAAC;SAC3D;aAAM;YACH,MAAM,IAAI,GAAG,WAAsC,CAAC;YACpD,IAAI,CAAC,CAAC,IAAI,IAAI,IAAI,CAAC,QAAQ,KAAK,SAAS,CAAC,IAAI,CAAC,IAAI,CAAC,GAAG,EAAE;gBACrD,MAAM,IAAI,KAAK,CAAC,sCAAsC,CAAC,CAAC;aAC3D;YACD,IAAI,CAAC,CAAC,IAAI,IAAI,IAAI,CAAC,IAAI,KAAK,SAAS,CAAC,IAAI,CAAC,IAAI,CAAC,GAAG,EAAE;gBACjD,MAAM,IAAI,KAAK,CAAC,kCAAkC,CAAC,CAAC;aACvD;YACD,cAAc,CAAC,UAAU,CAAC,GAAG,IAAI,CAAC,CAAC,CAAC,IAAI,CAAC,QAAQ,CAAC,CAAC,CAAC,SAAS,CAAC;YAC9D,cAAc,CAAC,MAAM,CAAC,GAAG,IAAI,CAAC,CAAC,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC,CAAC,SAAS,CAAC;SACzD;QACD,IAAI,GAAG,MAAM,CAAC,YAAY,CAAC,SAAS,CAAC,oBAAoB,EAAE,EAAE,IAAI,CAAC,CAAC;QACnE,KAAK,CAAC,OAAO,CAAC,YAAY,EAAE,IAAI,EAAE,cAAc,EAAE,IAAI,CAAC,CAAC;IAC5D,CAAC;;AAjEL,0BAkEC;AApDG,gBAAgB;AACO,oBAAY,GAAG,8BAA8B,CAAC"}

package/projectToken.d.ts

@@ -0,0 +1,150 @@
+import * as pulumi from "@pulumi/pulumi";
+/**
+ * Manages ArgoCD project role JWT tokens. See [Project Roles](https://argo-cd.readthedocs.io/en/stable/user-guide/projects/#project-roles) for more info.
+ *
+ * ## Example Usage
+ *
+ * ```typescript
+ * import * as pulumi from "@pulumi/pulumi";
+ * import * as argocd from "@three14/pulumi-argocd";
+ *
+ * const secret = new argocd.ProjectToken("secret", {
+ *     project: "someproject",
+ *     role: "foobar",
+ *     description: "short lived token",
+ *     expiresIn: "1h",
+ *     renewBefore: "30m",
+ * });
+ * ```
+ */
+export declare class ProjectToken extends pulumi.CustomResource {
+    /**
+     * Get an existing ProjectToken resource's state with the given name, ID, and optional extra
+     * properties used to qualify the lookup.
+     *
+     * @param name The _unique_ name of the resulting resource.
+     * @param id The _unique_ provider ID of the resource to lookup.
+     * @param state Any extra arguments used during the lookup.
+     * @param opts Optional settings to control the behavior of the CustomResource.
+     */
+    static get(name: string, id: pulumi.Input<pulumi.ID>, state?: ProjectTokenState, opts?: pulumi.CustomResourceOptions): ProjectToken;
+    /**
+     * Returns true if the given object is an instance of ProjectToken.  This is designed to work even
+     * when multiple copies of the Pulumi SDK have been loaded into the same process.
+     */
+    static isInstance(obj: any): obj is ProjectToken;
+    /**
+     * Description of the token.
+     */
+    readonly description: pulumi.Output<string | undefined>;
+    /**
+     * If `expiresIn` is set, Unix timestamp upon which the token will expire.
+     */
+    readonly expiresAt: pulumi.Output<string>;
+    /**
+     * Duration before the token will expire. Valid time units are `ns`, `us` (or `µs`), `ms`, `s`, `m`, `h`. E.g. `12h`, `7d`. Default: No expiration.
+     */
+    readonly expiresIn: pulumi.Output<string | undefined>;
+    /**
+     * Unix timestamp at which the token was issued.
+     */
+    readonly issuedAt: pulumi.Output<string>;
+    /**
+     * The raw JWT.
+     */
+    readonly jwt: pulumi.Output<string>;
+    /**
+     * The project associated with the token.
+     */
+    readonly project: pulumi.Output<string>;
+    /**
+     * Duration to control token silent regeneration based on token age. Valid time units are `ns`, `us` (or `µs`), `ms`, `s`, `m`, `h`. If set, then the token will be regenerated if it is older than `renewAfter`. I.e. if `currentDate - issuedAt > renewAfter`.
+     */
+    readonly renewAfter: pulumi.Output<string | undefined>;
+    /**
+     * Duration to control token silent regeneration based on remaining token lifetime. If `expiresIn` is set, the provider will regenerate the token if `expiresAt - currentDate < renewBefore`. Valid time units are `ns`, `us` (or `µs`), `ms`, `s`, `m`, `h`.
+     */
+    readonly renewBefore: pulumi.Output<string | undefined>;
+    /**
+     * The name of the role in the project associated with the token.
+     */
+    readonly role: pulumi.Output<string>;
+    /**
+     * Create a ProjectToken resource with the given unique name, arguments, and options.
+     *
+     * @param name The _unique_ name of the resource.
+     * @param args The arguments to use to populate this resource's properties.
+     * @param opts A bag of options that control this resource's behavior.
+     */
+    constructor(name: string, args: ProjectTokenArgs, opts?: pulumi.CustomResourceOptions);
+}
+/**
+ * Input properties used for looking up and filtering ProjectToken resources.
+ */
+export interface ProjectTokenState {
+    /**
+     * Description of the token.
+     */
+    description?: pulumi.Input<string>;
+    /**
+     * If `expiresIn` is set, Unix timestamp upon which the token will expire.
+     */
+    expiresAt?: pulumi.Input<string>;
+    /**
+     * Duration before the token will expire. Valid time units are `ns`, `us` (or `µs`), `ms`, `s`, `m`, `h`. E.g. `12h`, `7d`. Default: No expiration.
+     */
+    expiresIn?: pulumi.Input<string>;
+    /**
+     * Unix timestamp at which the token was issued.
+     */
+    issuedAt?: pulumi.Input<string>;
+    /**
+     * The raw JWT.
+     */
+    jwt?: pulumi.Input<string>;
+    /**
+     * The project associated with the token.
+     */
+    project?: pulumi.Input<string>;
+    /**
+     * Duration to control token silent regeneration based on token age. Valid time units are `ns`, `us` (or `µs`), `ms`, `s`, `m`, `h`. If set, then the token will be regenerated if it is older than `renewAfter`. I.e. if `currentDate - issuedAt > renewAfter`.
+     */
+    renewAfter?: pulumi.Input<string>;
+    /**
+     * Duration to control token silent regeneration based on remaining token lifetime. If `expiresIn` is set, the provider will regenerate the token if `expiresAt - currentDate < renewBefore`. Valid time units are `ns`, `us` (or `µs`), `ms`, `s`, `m`, `h`.
+     */
+    renewBefore?: pulumi.Input<string>;
+    /**
+     * The name of the role in the project associated with the token.
+     */
+    role?: pulumi.Input<string>;
+}
+/**
+ * The set of arguments for constructing a ProjectToken resource.
+ */
+export interface ProjectTokenArgs {
+    /**
+     * Description of the token.
+     */
+    description?: pulumi.Input<string>;
+    /**
+     * Duration before the token will expire. Valid time units are `ns`, `us` (or `µs`), `ms`, `s`, `m`, `h`. E.g. `12h`, `7d`. Default: No expiration.
+     */
+    expiresIn?: pulumi.Input<string>;
+    /**
+     * The project associated with the token.
+     */
+    project: pulumi.Input<string>;
+    /**
+     * Duration to control token silent regeneration based on token age. Valid time units are `ns`, `us` (or `µs`), `ms`, `s`, `m`, `h`. If set, then the token will be regenerated if it is older than `renewAfter`. I.e. if `currentDate - issuedAt > renewAfter`.
+     */
+    renewAfter?: pulumi.Input<string>;
+    /**
+     * Duration to control token silent regeneration based on remaining token lifetime. If `expiresIn` is set, the provider will regenerate the token if `expiresAt - currentDate < renewBefore`. Valid time units are `ns`, `us` (or `µs`), `ms`, `s`, `m`, `h`.
+     */
+    renewBefore?: pulumi.Input<string>;
+    /**
+     * The name of the role in the project associated with the token.
+     */
+    role: pulumi.Input<string>;
+}

package/projectToken.js

@@ -0,0 +1,91 @@
+"use strict";
+// *** WARNING: this file was generated by the Pulumi Terraform Bridge (tfgen) Tool. ***
+// *** Do not edit by hand unless you're certain you know what you are doing! ***
+Object.defineProperty(exports, "__esModule", { value: true });
+exports.ProjectToken = void 0;
+const pulumi = require("@pulumi/pulumi");
+const utilities = require("./utilities");
+/**
+ * Manages ArgoCD project role JWT tokens. See [Project Roles](https://argo-cd.readthedocs.io/en/stable/user-guide/projects/#project-roles) for more info.
+ *
+ * ## Example Usage
+ *
+ * ```typescript
+ * import * as pulumi from "@pulumi/pulumi";
+ * import * as argocd from "@three14/pulumi-argocd";
+ *
+ * const secret = new argocd.ProjectToken("secret", {
+ *     project: "someproject",
+ *     role: "foobar",
+ *     description: "short lived token",
+ *     expiresIn: "1h",
+ *     renewBefore: "30m",
+ * });
+ * ```
+ */
+class ProjectToken extends pulumi.CustomResource {
+    /**
+     * Get an existing ProjectToken resource's state with the given name, ID, and optional extra
+     * properties used to qualify the lookup.
+     *
+     * @param name The _unique_ name of the resulting resource.
+     * @param id The _unique_ provider ID of the resource to lookup.
+     * @param state Any extra arguments used during the lookup.
+     * @param opts Optional settings to control the behavior of the CustomResource.
+     */
+    static get(name, id, state, opts) {
+        return new ProjectToken(name, state, Object.assign(Object.assign({}, opts), { id: id }));
+    }
+    /**
+     * Returns true if the given object is an instance of ProjectToken.  This is designed to work even
+     * when multiple copies of the Pulumi SDK have been loaded into the same process.
+     */
+    static isInstance(obj) {
+        if (obj === undefined || obj === null) {
+            return false;
+        }
+        return obj['__pulumiType'] === ProjectToken.__pulumiType;
+    }
+    constructor(name, argsOrState, opts) {
+        let resourceInputs = {};
+        opts = opts || {};
+        if (opts.id) {
+            const state = argsOrState;
+            resourceInputs["description"] = state ? state.description : undefined;
+            resourceInputs["expiresAt"] = state ? state.expiresAt : undefined;
+            resourceInputs["expiresIn"] = state ? state.expiresIn : undefined;
+            resourceInputs["issuedAt"] = state ? state.issuedAt : undefined;
+            resourceInputs["jwt"] = state ? state.jwt : undefined;
+            resourceInputs["project"] = state ? state.project : undefined;
+            resourceInputs["renewAfter"] = state ? state.renewAfter : undefined;
+            resourceInputs["renewBefore"] = state ? state.renewBefore : undefined;
+            resourceInputs["role"] = state ? state.role : undefined;
+        }
+        else {
+            const args = argsOrState;
+            if ((!args || args.project === undefined) && !opts.urn) {
+                throw new Error("Missing required property 'project'");
+            }
+            if ((!args || args.role === undefined) && !opts.urn) {
+                throw new Error("Missing required property 'role'");
+            }
+            resourceInputs["description"] = args ? args.description : undefined;
+            resourceInputs["expiresIn"] = args ? args.expiresIn : undefined;
+            resourceInputs["project"] = args ? args.project : undefined;
+            resourceInputs["renewAfter"] = args ? args.renewAfter : undefined;
+            resourceInputs["renewBefore"] = args ? args.renewBefore : undefined;
+            resourceInputs["role"] = args ? args.role : undefined;
+            resourceInputs["expiresAt"] = undefined /*out*/;
+            resourceInputs["issuedAt"] = undefined /*out*/;
+            resourceInputs["jwt"] = undefined /*out*/;
+        }
+        opts = pulumi.mergeOptions(utilities.resourceOptsDefaults(), opts);
+        const secretOpts = { additionalSecretOutputs: ["jwt"] };
+        opts = pulumi.mergeOptions(opts, secretOpts);
+        super(ProjectToken.__pulumiType, name, resourceInputs, opts);
+    }
+}
+exports.ProjectToken = ProjectToken;
+/** @internal */
+ProjectToken.__pulumiType = 'argocd:index/projectToken:ProjectToken';
+//# sourceMappingURL=projectToken.js.map

package/projectToken.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"projectToken.js","sourceRoot":"","sources":["../projectToken.ts"],"names":[],"mappings":";AAAA,wFAAwF;AACxF,iFAAiF;;;AAEjF,yCAAyC;AACzC,yCAAyC;AAEzC;;;;;;;;;;;;;;;;;GAiBG;AACH,MAAa,YAAa,SAAQ,MAAM,CAAC,cAAc;IACnD;;;;;;;;OAQG;IACI,MAAM,CAAC,GAAG,CAAC,IAAY,EAAE,EAA2B,EAAE,KAAyB,EAAE,IAAmC;QACvH,OAAO,IAAI,YAAY,CAAC,IAAI,EAAO,KAAK,kCAAO,IAAI,KAAE,EAAE,EAAE,EAAE,IAAG,CAAC;IACnE,CAAC;IAKD;;;OAGG;IACI,MAAM,CAAC,UAAU,CAAC,GAAQ;QAC7B,IAAI,GAAG,KAAK,SAAS,IAAI,GAAG,KAAK,IAAI,EAAE;YACnC,OAAO,KAAK,CAAC;SAChB;QACD,OAAO,GAAG,CAAC,cAAc,CAAC,KAAK,YAAY,CAAC,YAAY,CAAC;IAC7D,CAAC;IA+CD,YAAY,IAAY,EAAE,WAAkD,EAAE,IAAmC;QAC7G,IAAI,cAAc,GAAkB,EAAE,CAAC;QACvC,IAAI,GAAG,IAAI,IAAI,EAAE,CAAC;QAClB,IAAI,IAAI,CAAC,EAAE,EAAE;YACT,MAAM,KAAK,GAAG,WAA4C,CAAC;YAC3D,cAAc,CAAC,aAAa,CAAC,GAAG,KAAK,CAAC,CAAC,CAAC,KAAK,CAAC,WAAW,CAAC,CAAC,CAAC,SAAS,CAAC;YACtE,cAAc,CAAC,WAAW,CAAC,GAAG,KAAK,CAAC,CAAC,CAAC,KAAK,CAAC,SAAS,CAAC,CAAC,CAAC,SAAS,CAAC;YAClE,cAAc,CAAC,WAAW,CAAC,GAAG,KAAK,CAAC,CAAC,CAAC,KAAK,CAAC,SAAS,CAAC,CAAC,CAAC,SAAS,CAAC;YAClE,cAAc,CAAC,UAAU,CAAC,GAAG,KAAK,CAAC,CAAC,CAAC,KAAK,CAAC,QAAQ,CAAC,CAAC,CAAC,SAAS,CAAC;YAChE,cAAc,CAAC,KAAK,CAAC,GAAG,KAAK,CAAC,CAAC,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC,CAAC,SAAS,CAAC;YACtD,cAAc,CAAC,SAAS,CAAC,GAAG,KAAK,CAAC,CAAC,CAAC,KAAK,CAAC,OAAO,CAAC,CAAC,CAAC,SAAS,CAAC;YAC9D,cAAc,CAAC,YAAY,CAAC,GAAG,KAAK,CAAC,CAAC,CAAC,KAAK,CAAC,UAAU,CAAC,CAAC,CAAC,SAAS,CAAC;YACpE,cAAc,CAAC,aAAa,CAAC,GAAG,KAAK,CAAC,CAAC,CAAC,KAAK,CAAC,WAAW,CAAC,CAAC,CAAC,SAAS,CAAC;YACtE,cAAc,CAAC,MAAM,CAAC,GAAG,KAAK,CAAC,CAAC,CAAC,KAAK,CAAC,IAAI,CAAC,CAAC,CAAC,SAAS,CAAC;SAC3D;aAAM;YACH,MAAM,IAAI,GAAG,WAA2C,CAAC;YACzD,IAAI,CAAC,CAAC,IAAI,IAAI,IAAI,CAAC,OAAO,KAAK,SAAS,CAAC,IAAI,CAAC,IAAI,CAAC,GAAG,EAAE;gBACpD,MAAM,IAAI,KAAK,CAAC,qCAAqC,CAAC,CAAC;aAC1D;YACD,IAAI,CAAC,CAAC,IAAI,IAAI,IAAI,CAAC,IAAI,KAAK,SAAS,CAAC,IAAI,CAAC,IAAI,CAAC,GAAG,EAAE;gBACjD,MAAM,IAAI,KAAK,CAAC,kCAAkC,CAAC,CAAC;aACvD;YACD,cAAc,CAAC,aAAa,CAAC,GAAG,IAAI,CAAC,CAAC,CAAC,IAAI,CAAC,WAAW,CAAC,CAAC,CAAC,SAAS,CAAC;YACpE,cAAc,CAAC,WAAW,CAAC,GAAG,IAAI,CAAC,CAAC,CAAC,IAAI,CAAC,SAAS,CAAC,CAAC,CAAC,SAAS,CAAC;YAChE,cAAc,CAAC,SAAS,CAAC,GAAG,IAAI,CAAC,CAAC,CAAC,IAAI,CAAC,OAAO,CAAC,CAAC,CAAC,SAAS,CAAC;YAC5D,cAAc,CAAC,YAAY,CAAC,GAAG,IAAI,CAAC,CAAC,CAAC,IAAI,CAAC,UAAU,CAAC,CAAC,CAAC,SAAS,CAAC;YAClE,cAAc,CAAC,aAAa,CAAC,GAAG,IAAI,CAAC,CAAC,CAAC,IAAI,CAAC,WAAW,CAAC,CAAC,CAAC,SAAS,CAAC;YACpE,cAAc,CAAC,MAAM,CAAC,GAAG,IAAI,CAAC,CAAC,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC,CAAC,SAAS,CAAC;YACtD,cAAc,CAAC,WAAW,CAAC,GAAG,SAAS,CAAC,OAAO,CAAC;YAChD,cAAc,CAAC,UAAU,CAAC,GAAG,SAAS,CAAC,OAAO,CAAC;YAC/C,cAAc,CAAC,KAAK,CAAC,GAAG,SAAS,CAAC,OAAO,CAAC;SAC7C;QACD,IAAI,GAAG,MAAM,CAAC,YAAY,CAAC,SAAS,CAAC,oBAAoB,EAAE,EAAE,IAAI,CAAC,CAAC;QACnE,MAAM,UAAU,GAAG,EAAE,uBAAuB,EAAE,CAAC,KAAK,CAAC,EAAE,CAAC;QACxD,IAAI,GAAG,MAAM,CAAC,YAAY,CAAC,IAAI,EAAE,UAAU,CAAC,CAAC;QAC7C,KAAK,CAAC,YAAY,CAAC,YAAY,EAAE,IAAI,EAAE,cAAc,EAAE,IAAI,CAAC,CAAC;IACjE,CAAC;;AA7GL,oCA8GC;AAhGG,gBAAgB;AACO,yBAAY,GAAG,wCAAwC,CAAC"}

package/provider.d.ts

@@ -0,0 +1,174 @@
+import * as pulumi from "@pulumi/pulumi";
+import * as inputs from "./types/input";
+/**
+ * The provider type for the argocd package. By default, resources use package-wide configuration
+ * settings, however an explicit `Provider` instance may be created and passed during resource
+ * construction to achieve fine-grained programmatic control over provider settings. See the
+ * [documentation](https://www.pulumi.com/docs/reference/programming-model/#providers) for more information.
+ */
+export declare class Provider extends pulumi.ProviderResource {
+    /**
+     * Returns true if the given object is an instance of Provider.  This is designed to work even
+     * when multiple copies of the Pulumi SDK have been loaded into the same process.
+     */
+    static isInstance(obj: any): obj is Provider;
+    /**
+     * ArgoCD authentication token, takes precedence over `username`/`password`. Can be set through the `ARGOCD_AUTH_TOKEN`
+     * environment variable.
+     */
+    readonly authToken: pulumi.Output<string | undefined>;
+    /**
+     * Additional root CA certificates file to add to the client TLS connection pool.
+     */
+    readonly certFile: pulumi.Output<string | undefined>;
+    /**
+     * Client certificate.
+     */
+    readonly clientCertFile: pulumi.Output<string | undefined>;
+    /**
+     * Client certificate key.
+     */
+    readonly clientCertKey: pulumi.Output<string | undefined>;
+    /**
+     * Override the default config path of `$HOME/.config/argocd/config`. Only relevant when `useLocalConfig`. Can be set
+     * through the `ARGOCD_CONFIG_PATH` environment variable.
+     */
+    readonly configPath: pulumi.Output<string | undefined>;
+    /**
+     * Context to choose when using a local ArgoCD config file. Only relevant when `useLocalConfig`. Can be set through
+     * `ARGOCD_CONTEXT` environment variable.
+     */
+    readonly context: pulumi.Output<string | undefined>;
+    /**
+     * Use the gRPC web proxy client and set the web root, e.g. `argo-cd`. Useful if the Argo CD server is behind a proxy at a
+     * non-root path.
+     */
+    readonly grpcWebRootPath: pulumi.Output<string | undefined>;
+    /**
+     * Authentication password. Can be set through the `ARGOCD_AUTH_PASSWORD` environment variable.
+     */
+    readonly password: pulumi.Output<string | undefined>;
+    /**
+     * Namespace name which should be used for port forwarding.
+     */
+    readonly portForwardWithNamespace: pulumi.Output<string | undefined>;
+    /**
+     * ArgoCD server address with port. Can be set through the `ARGOCD_SERVER` environment variable.
+     */
+    readonly serverAddr: pulumi.Output<string | undefined>;
+    /**
+     * User-Agent request header override.
+     */
+    readonly userAgent: pulumi.Output<string | undefined>;
+    /**
+     * Authentication username. Can be set through the `ARGOCD_AUTH_USERNAME` environment variable.
+     */
+    readonly username: pulumi.Output<string | undefined>;
+    /**
+     * Create a Provider resource with the given unique name, arguments, and options.
+     *
+     * @param name The _unique_ name of the resource.
+     * @param args The arguments to use to populate this resource's properties.
+     * @param opts A bag of options that control this resource's behavior.
+     */
+    constructor(name: string, args?: ProviderArgs, opts?: pulumi.ResourceOptions);
+}
+/**
+ * The set of arguments for constructing a Provider resource.
+ */
+export interface ProviderArgs {
+    /**
+     * ArgoCD authentication token, takes precedence over `username`/`password`. Can be set through the `ARGOCD_AUTH_TOKEN`
+     * environment variable.
+     */
+    authToken?: pulumi.Input<string>;
+    /**
+     * Additional root CA certificates file to add to the client TLS connection pool.
+     */
+    certFile?: pulumi.Input<string>;
+    /**
+     * Client certificate.
+     */
+    clientCertFile?: pulumi.Input<string>;
+    /**
+     * Client certificate key.
+     */
+    clientCertKey?: pulumi.Input<string>;
+    /**
+     * Override the default config path of `$HOME/.config/argocd/config`. Only relevant when `useLocalConfig`. Can be set
+     * through the `ARGOCD_CONFIG_PATH` environment variable.
+     */
+    configPath?: pulumi.Input<string>;
+    /**
+     * Context to choose when using a local ArgoCD config file. Only relevant when `useLocalConfig`. Can be set through
+     * `ARGOCD_CONTEXT` environment variable.
+     */
+    context?: pulumi.Input<string>;
+    /**
+     * Configure direct access using Kubernetes API server. **Warning**: this feature works by starting a local ArgoCD API
+     * server that talks directly to the Kubernetes API using the **current context in the default kubeconfig**
+     * (`~/.kube/config`). This behavior cannot be overridden using either environment variables or the `kubernetes` block in
+     * the provider configuration at present). If the server fails to start (e.g. your kubeconfig is misconfigured) then the
+     * provider will fail as a result of the `argocd` module forcing it to exit and no logs will be available to help you debug
+     * this. The error message will be similar to > `The plugin encountered an error, and failed to respond to the
+     * plugin.(*GRPCProvider).ReadResource call. The plugin logs may contain more details.` To debug this, you will need to
+     * login via the ArgoCD CLI using `argocd login --core` and then running an operation. E.g. `argocd app list`.
+     */
+    core?: pulumi.Input<boolean>;
+    /**
+     * Whether to use gRPC web proxy client. Useful if Argo CD server is behind proxy which does not support HTTP2.
+     */
+    grpcWeb?: pulumi.Input<boolean>;
+    /**
+     * Use the gRPC web proxy client and set the web root, e.g. `argo-cd`. Useful if the Argo CD server is behind a proxy at a
+     * non-root path.
+     */
+    grpcWebRootPath?: pulumi.Input<string>;
+    /**
+     * Additional headers to add to each request to the ArgoCD server.
+     */
+    headers?: pulumi.Input<pulumi.Input<string>[]>;
+    /**
+     * Whether to skip TLS server certificate. Can be set through the `ARGOCD_INSECURE` environment variable.
+     */
+    insecure?: pulumi.Input<boolean>;
+    /**
+     * Kubernetes configuration overrides. Only relevant when `portForward = true` or `portForwardWithNamespace = "foo"`. The
+     * kubeconfig file that is used can be overridden using the [`KUBECONFIG` environment
+     * variable](https://kubernetes.io/docs/concepts/configuration/organize-cluster-access-kubeconfig/#the-kubeconfig-environment-variable)).
+     */
+    kubernetes?: pulumi.Input<inputs.ProviderKubernetes>;
+    /**
+     * Authentication password. Can be set through the `ARGOCD_AUTH_PASSWORD` environment variable.
+     */
+    password?: pulumi.Input<string>;
+    /**
+     * Whether to initiate an unencrypted connection to ArgoCD server.
+     */
+    plainText?: pulumi.Input<boolean>;
+    /**
+     * Connect to a random argocd-server port using port forwarding.
+     */
+    portForward?: pulumi.Input<boolean>;
+    /**
+     * Namespace name which should be used for port forwarding.
+     */
+    portForwardWithNamespace?: pulumi.Input<string>;
+    /**
+     * ArgoCD server address with port. Can be set through the `ARGOCD_SERVER` environment variable.
+     */
+    serverAddr?: pulumi.Input<string>;
+    /**
+     * Use the authentication settings found in the local config file. Useful when you have previously logged in using SSO.
+     * Conflicts with `authToken`, `username` and `password`.
+     */
+    useLocalConfig?: pulumi.Input<boolean>;
+    /**
+     * User-Agent request header override.
+     */
+    userAgent?: pulumi.Input<string>;
+    /**
+     * Authentication username. Can be set through the `ARGOCD_AUTH_USERNAME` environment variable.
+     */
+    username?: pulumi.Input<string>;
+}

package/provider.js

@@ -0,0 +1,66 @@
+"use strict";
+// *** WARNING: this file was generated by the Pulumi Terraform Bridge (tfgen) Tool. ***
+// *** Do not edit by hand unless you're certain you know what you are doing! ***
+Object.defineProperty(exports, "__esModule", { value: true });
+exports.Provider = void 0;
+const pulumi = require("@pulumi/pulumi");
+const utilities = require("./utilities");
+/**
+ * The provider type for the argocd package. By default, resources use package-wide configuration
+ * settings, however an explicit `Provider` instance may be created and passed during resource
+ * construction to achieve fine-grained programmatic control over provider settings. See the
+ * [documentation](https://www.pulumi.com/docs/reference/programming-model/#providers) for more information.
+ */
+class Provider extends pulumi.ProviderResource {
+    /**
+     * Returns true if the given object is an instance of Provider.  This is designed to work even
+     * when multiple copies of the Pulumi SDK have been loaded into the same process.
+     */
+    static isInstance(obj) {
+        if (obj === undefined || obj === null) {
+            return false;
+        }
+        return obj['__pulumiType'] === "pulumi:providers:" + Provider.__pulumiType;
+    }
+    /**
+     * Create a Provider resource with the given unique name, arguments, and options.
+     *
+     * @param name The _unique_ name of the resource.
+     * @param args The arguments to use to populate this resource's properties.
+     * @param opts A bag of options that control this resource's behavior.
+     */
+    constructor(name, args, opts) {
+        let resourceInputs = {};
+        opts = opts || {};
+        {
+            resourceInputs["authToken"] = (args === null || args === void 0 ? void 0 : args.authToken) ? pulumi.secret(args.authToken) : undefined;
+            resourceInputs["certFile"] = args ? args.certFile : undefined;
+            resourceInputs["clientCertFile"] = args ? args.clientCertFile : undefined;
+            resourceInputs["clientCertKey"] = args ? args.clientCertKey : undefined;
+            resourceInputs["configPath"] = args ? args.configPath : undefined;
+            resourceInputs["context"] = args ? args.context : undefined;
+            resourceInputs["core"] = pulumi.output(args ? args.core : undefined).apply(JSON.stringify);
+            resourceInputs["grpcWeb"] = pulumi.output(args ? args.grpcWeb : undefined).apply(JSON.stringify);
+            resourceInputs["grpcWebRootPath"] = args ? args.grpcWebRootPath : undefined;
+            resourceInputs["headers"] = pulumi.output(args ? args.headers : undefined).apply(JSON.stringify);
+            resourceInputs["insecure"] = pulumi.output(args ? args.insecure : undefined).apply(JSON.stringify);
+            resourceInputs["kubernetes"] = pulumi.output(args ? args.kubernetes : undefined).apply(JSON.stringify);
+            resourceInputs["password"] = (args === null || args === void 0 ? void 0 : args.password) ? pulumi.secret(args.password) : undefined;
+            resourceInputs["plainText"] = pulumi.output(args ? args.plainText : undefined).apply(JSON.stringify);
+            resourceInputs["portForward"] = pulumi.output(args ? args.portForward : undefined).apply(JSON.stringify);
+            resourceInputs["portForwardWithNamespace"] = args ? args.portForwardWithNamespace : undefined;
+            resourceInputs["serverAddr"] = args ? args.serverAddr : undefined;
+            resourceInputs["useLocalConfig"] = pulumi.output(args ? args.useLocalConfig : undefined).apply(JSON.stringify);
+            resourceInputs["userAgent"] = args ? args.userAgent : undefined;
+            resourceInputs["username"] = args ? args.username : undefined;
+        }
+        opts = pulumi.mergeOptions(utilities.resourceOptsDefaults(), opts);
+        const secretOpts = { additionalSecretOutputs: ["authToken", "password"] };
+        opts = pulumi.mergeOptions(opts, secretOpts);
+        super(Provider.__pulumiType, name, resourceInputs, opts);
+    }
+}
+exports.Provider = Provider;
+/** @internal */
+Provider.__pulumiType = 'argocd';
+//# sourceMappingURL=provider.js.map

package/provider.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"provider.js","sourceRoot":"","sources":["../provider.ts"],"names":[],"mappings":";AAAA,wFAAwF;AACxF,iFAAiF;;;AAEjF,yCAAyC;AAGzC,yCAAyC;AAEzC;;;;;GAKG;AACH,MAAa,QAAS,SAAQ,MAAM,CAAC,gBAAgB;IAIjD;;;OAGG;IACI,MAAM,CAAC,UAAU,CAAC,GAAQ;QAC7B,IAAI,GAAG,KAAK,SAAS,IAAI,GAAG,KAAK,IAAI,EAAE;YACnC,OAAO,KAAK,CAAC;SAChB;QACD,OAAO,GAAG,CAAC,cAAc,CAAC,KAAK,mBAAmB,GAAG,QAAQ,CAAC,YAAY,CAAC;IAC/E,CAAC;IAuDD;;;;;;OAMG;IACH,YAAY,IAAY,EAAE,IAAmB,EAAE,IAA6B;QACxE,IAAI,cAAc,GAAkB,EAAE,CAAC;QACvC,IAAI,GAAG,IAAI,IAAI,EAAE,CAAC;QAClB;YACI,cAAc,CAAC,WAAW,CAAC,GAAG,CAAA,IAAI,aAAJ,IAAI,uBAAJ,IAAI,CAAE,SAAS,EAAC,CAAC,CAAC,MAAM,CAAC,MAAM,CAAC,IAAI,CAAC,SAAS,CAAC,CAAC,CAAC,CAAC,SAAS,CAAC;YAC1F,cAAc,CAAC,UAAU,CAAC,GAAG,IAAI,CAAC,CAAC,CAAC,IAAI,CAAC,QAAQ,CAAC,CAAC,CAAC,SAAS,CAAC;YAC9D,cAAc,CAAC,gBAAgB,CAAC,GAAG,IAAI,CAAC,CAAC,CAAC,IAAI,CAAC,cAAc,CAAC,CAAC,CAAC,SAAS,CAAC;YAC1E,cAAc,CAAC,eAAe,CAAC,GAAG,IAAI,CAAC,CAAC,CAAC,IAAI,CAAC,aAAa,CAAC,CAAC,CAAC,SAAS,CAAC;YACxE,cAAc,CAAC,YAAY,CAAC,GAAG,IAAI,CAAC,CAAC,CAAC,IAAI,CAAC,UAAU,CAAC,CAAC,CAAC,SAAS,CAAC;YAClE,cAAc,CAAC,SAAS,CAAC,GAAG,IAAI,CAAC,CAAC,CAAC,IAAI,CAAC,OAAO,CAAC,CAAC,CAAC,SAAS,CAAC;YAC5D,cAAc,CAAC,MAAM,CAAC,GAAG,MAAM,CAAC,MAAM,CAAC,IAAI,CAAC,CAAC,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC,CAAC,SAAS,CAAC,CAAC,KAAK,CAAC,IAAI,CAAC,SAAS,CAAC,CAAC;YAC3F,cAAc,CAAC,SAAS,CAAC,GAAG,MAAM,CAAC,MAAM,CAAC,IAAI,CAAC,CAAC,CAAC,IAAI,CAAC,OAAO,CAAC,CAAC,CAAC,SAAS,CAAC,CAAC,KAAK,CAAC,IAAI,CAAC,SAAS,CAAC,CAAC;YACjG,cAAc,CAAC,iBAAiB,CAAC,GAAG,IAAI,CAAC,CAAC,CAAC,IAAI,CAAC,eAAe,CAAC,CAAC,CAAC,SAAS,CAAC;YAC5E,cAAc,CAAC,SAAS,CAAC,GAAG,MAAM,CAAC,MAAM,CAAC,IAAI,CAAC,CAAC,CAAC,IAAI,CAAC,OAAO,CAAC,CAAC,CAAC,SAAS,CAAC,CAAC,KAAK,CAAC,IAAI,CAAC,SAAS,CAAC,CAAC;YACjG,cAAc,CAAC,UAAU,CAAC,GAAG,MAAM,CAAC,MAAM,CAAC,IAAI,CAAC,CAAC,CAAC,IAAI,CAAC,QAAQ,CAAC,CAAC,CAAC,SAAS,CAAC,CAAC,KAAK,CAAC,IAAI,CAAC,SAAS,CAAC,CAAC;YACnG,cAAc,CAAC,YAAY,CAAC,GAAG,MAAM,CAAC,MAAM,CAAC,IAAI,CAAC,CAAC,CAAC,IAAI,CAAC,UAAU,CAAC,CAAC,CAAC,SAAS,CAAC,CAAC,KAAK,CAAC,IAAI,CAAC,SAAS,CAAC,CAAC;YACvG,cAAc,CAAC,UAAU,CAAC,GAAG,CAAA,IAAI,aAAJ,IAAI,uBAAJ,IAAI,CAAE,QAAQ,EAAC,CAAC,CAAC,MAAM,CAAC,MAAM,CAAC,IAAI,CAAC,QAAQ,CAAC,CAAC,CAAC,CAAC,SAAS,CAAC;YACvF,cAAc,CAAC,WAAW,CAAC,GAAG,MAAM,CAAC,MAAM,CAAC,IAAI,CAAC,CAAC,CAAC,IAAI,CAAC,SAAS,CAAC,CAAC,CAAC,SAAS,CAAC,CAAC,KAAK,CAAC,IAAI,CAAC,SAAS,CAAC,CAAC;YACrG,cAAc,CAAC,aAAa,CAAC,GAAG,MAAM,CAAC,MAAM,CAAC,IAAI,CAAC,CAAC,CAAC,IAAI,CAAC,WAAW,CAAC,CAAC,CAAC,SAAS,CAAC,CAAC,KAAK,CAAC,IAAI,CAAC,SAAS,CAAC,CAAC;YACzG,cAAc,CAAC,0BAA0B,CAAC,GAAG,IAAI,CAAC,CAAC,CAAC,IAAI,CAAC,wBAAwB,CAAC,CAAC,CAAC,SAAS,CAAC;YAC9F,cAAc,CAAC,YAAY,CAAC,GAAG,IAAI,CAAC,CAAC,CAAC,IAAI,CAAC,UAAU,CAAC,CAAC,CAAC,SAAS,CAAC;YAClE,cAAc,CAAC,gBAAgB,CAAC,GAAG,MAAM,CAAC,MAAM,CAAC,IAAI,CAAC,CAAC,CAAC,IAAI,CAAC,cAAc,CAAC,CAAC,CAAC,SAAS,CAAC,CAAC,KAAK,CAAC,IAAI,CAAC,SAAS,CAAC,CAAC;YAC/G,cAAc,CAAC,WAAW,CAAC,GAAG,IAAI,CAAC,CAAC,CAAC,IAAI,CAAC,SAAS,CAAC,CAAC,CAAC,SAAS,CAAC;YAChE,cAAc,CAAC,UAAU,CAAC,GAAG,IAAI,CAAC,CAAC,CAAC,IAAI,CAAC,QAAQ,CAAC,CAAC,CAAC,SAAS,CAAC;SACjE;QACD,IAAI,GAAG,MAAM,CAAC,YAAY,CAAC,SAAS,CAAC,oBAAoB,EAAE,EAAE,IAAI,CAAC,CAAC;QACnE,MAAM,UAAU,GAAG,EAAE,uBAAuB,EAAE,CAAC,WAAW,EAAE,UAAU,CAAC,EAAE,CAAC;QAC1E,IAAI,GAAG,MAAM,CAAC,YAAY,CAAC,IAAI,EAAE,UAAU,CAAC,CAAC;QAC7C,KAAK,CAAC,QAAQ,CAAC,YAAY,EAAE,IAAI,EAAE,cAAc,EAAE,IAAI,CAAC,CAAC;IAC7D,CAAC;;AAxGL,4BAyGC;AAxGG,gBAAgB;AACO,qBAAY,GAAG,QAAQ,CAAC"}