@three14/pulumi-argocd 1.0.1 → 1.1.0
This diff represents the content of publicly available package versions that have been released to one of the supported registries. The information contained in this diff is provided for informational purposes only and reflects changes between package versions as they appear in their respective public registries.
- package/accountToken.d.ts +5 -3
- package/accountToken.js +15 -13
- package/accountToken.js.map +1 -1
- package/application.d.ts +15 -1
- package/application.js +20 -16
- package/application.js.map +1 -1
- package/applicationSet.d.ts +83 -0
- package/applicationSet.js +91 -8
- package/applicationSet.js.map +1 -1
- package/cluster.d.ts +2 -2
- package/cluster.js +20 -20
- package/cluster.js.map +1 -1
- package/config/index.js +1 -1
- package/config/index.js.map +1 -1
- package/config/vars.d.ts +14 -21
- package/config/vars.js +1 -1
- package/config/vars.js.map +1 -1
- package/index.d.ts +1 -18
- package/index.js +19 -30
- package/index.js.map +1 -1
- package/package.json +3 -3
- package/provider.d.ts +32 -29
- package/provider.js +29 -21
- package/provider.js.map +1 -1
- package/types/index.js +1 -1
- package/types/index.js.map +1 -1
- package/types/input.d.ts +9877 -5776
- package/types/input.js +1 -1
- package/types/input.js.map +1 -1
- package/types/output.d.ts +10481 -6380
- package/types/output.js +1 -1
- package/types/output.js.map +1 -1
- package/utilities.d.ts +0 -4
- package/utilities.js +20 -30
- package/utilities.js.map +1 -1
- package/project.d.ts +0 -198
- package/project.js +0 -193
- package/project.js.map +0 -1
- package/projectToken.d.ts +0 -150
- package/projectToken.js +0 -91
- package/projectToken.js.map +0 -1
- package/repository.d.ts +0 -291
- package/repository.js +0 -135
- package/repository.js.map +0 -1
- package/repositoryCertificate.d.ts +0 -84
- package/repositoryCertificate.js +0 -73
- package/repositoryCertificate.js.map +0 -1
- package/repositoryCredentials.d.ts +0 -207
- package/repositoryCredentials.js +0 -113
- package/repositoryCredentials.js.map +0 -1
package/types/output.js
CHANGED
|
@@ -1,5 +1,5 @@
|
|
|
1
1
|
"use strict";
|
|
2
|
-
// *** WARNING: this file was generated by
|
|
2
|
+
// *** WARNING: this file was generated by pulumi-language-nodejs. ***
|
|
3
3
|
// *** Do not edit by hand unless you're certain you know what you are doing! ***
|
|
4
4
|
Object.defineProperty(exports, "__esModule", { value: true });
|
|
5
5
|
//# sourceMappingURL=output.js.map
|
package/types/output.js.map
CHANGED
|
@@ -1 +1 @@
|
|
|
1
|
-
{"version":3,"file":"output.js","sourceRoot":"","sources":["../../types/output.ts"],"names":[],"mappings":";AAAA,
|
|
1
|
+
{"version":3,"file":"output.js","sourceRoot":"","sources":["../../types/output.ts"],"names":[],"mappings":";AAAA,sEAAsE;AACtE,iFAAiF"}
|
package/utilities.d.ts
CHANGED
|
@@ -1,8 +1,4 @@
|
|
|
1
|
-
import * as pulumi from "@pulumi/pulumi";
|
|
2
1
|
export declare function getEnv(...vars: string[]): string | undefined;
|
|
3
2
|
export declare function getEnvBoolean(...vars: string[]): boolean | undefined;
|
|
4
3
|
export declare function getEnvNumber(...vars: string[]): number | undefined;
|
|
5
4
|
export declare function getVersion(): string;
|
|
6
|
-
export declare function callAsync<T>(tok: string, props: pulumi.Inputs, res?: pulumi.Resource, opts?: {
|
|
7
|
-
property?: string;
|
|
8
|
-
}): Promise<T>;
|
package/utilities.js
CHANGED
|
@@ -1,15 +1,6 @@
|
|
|
1
1
|
"use strict";
|
|
2
|
-
// *** WARNING: this file was generated by
|
|
2
|
+
// *** WARNING: this file was generated by pulumi-language-nodejs. ***
|
|
3
3
|
// *** Do not edit by hand unless you're certain you know what you are doing! ***
|
|
4
|
-
var __awaiter = (this && this.__awaiter) || function (thisArg, _arguments, P, generator) {
|
|
5
|
-
function adopt(value) { return value instanceof P ? value : new P(function (resolve) { resolve(value); }); }
|
|
6
|
-
return new (P || (P = Promise))(function (resolve, reject) {
|
|
7
|
-
function fulfilled(value) { try { step(generator.next(value)); } catch (e) { reject(e); } }
|
|
8
|
-
function rejected(value) { try { step(generator["throw"](value)); } catch (e) { reject(e); } }
|
|
9
|
-
function step(result) { result.done ? resolve(result.value) : adopt(result.value).then(fulfilled, rejected); }
|
|
10
|
-
step((generator = generator.apply(thisArg, _arguments || [])).next());
|
|
11
|
-
});
|
|
12
|
-
};
|
|
13
4
|
Object.defineProperty(exports, "__esModule", { value: true });
|
|
14
5
|
exports.callAsync = exports.lazyLoad = exports.resourceOptsDefaults = exports.getVersion = exports.getEnvNumber = exports.getEnvBoolean = exports.getEnv = void 0;
|
|
15
6
|
const runtime = require("@pulumi/pulumi/runtime");
|
|
@@ -76,26 +67,25 @@ function lazyLoad(exports, props, loadModule) {
|
|
|
76
67
|
}
|
|
77
68
|
}
|
|
78
69
|
exports.lazyLoad = lazyLoad;
|
|
79
|
-
|
|
80
|
-
|
|
81
|
-
|
|
82
|
-
|
|
83
|
-
|
|
84
|
-
|
|
85
|
-
|
|
86
|
-
|
|
87
|
-
|
|
88
|
-
|
|
89
|
-
|
|
90
|
-
|
|
91
|
-
|
|
92
|
-
|
|
93
|
-
|
|
94
|
-
|
|
95
|
-
|
|
96
|
-
|
|
97
|
-
|
|
98
|
-
});
|
|
70
|
+
/** @internal */
|
|
71
|
+
async function callAsync(tok, props, res, opts) {
|
|
72
|
+
const o = runtime.call(tok, props, res);
|
|
73
|
+
const value = await o.promise(true /*withUnknowns*/);
|
|
74
|
+
const isKnown = await o.isKnown;
|
|
75
|
+
const isSecret = await o.isSecret;
|
|
76
|
+
const problem = !isKnown ? "an unknown value"
|
|
77
|
+
: isSecret ? "a secret value"
|
|
78
|
+
: undefined;
|
|
79
|
+
// Ingoring o.resources silently. They are typically non-empty, r.f() calls include r as a dependency.
|
|
80
|
+
if (problem) {
|
|
81
|
+
throw new Error(`Plain resource method "${tok}" incorrectly returned ${problem}. ` +
|
|
82
|
+
"This is an error in the provider, please report this to the provider developer.");
|
|
83
|
+
}
|
|
84
|
+
// Extract a single property if requested.
|
|
85
|
+
if (opts && opts.property) {
|
|
86
|
+
return value[opts.property];
|
|
87
|
+
}
|
|
88
|
+
return value;
|
|
99
89
|
}
|
|
100
90
|
exports.callAsync = callAsync;
|
|
101
91
|
//# sourceMappingURL=utilities.js.map
|
package/utilities.js.map
CHANGED
|
@@ -1 +1 @@
|
|
|
1
|
-
{"version":3,"file":"utilities.js","sourceRoot":"","sources":["../utilities.ts"],"names":[],"mappings":";AAAA,
|
|
1
|
+
{"version":3,"file":"utilities.js","sourceRoot":"","sources":["../utilities.ts"],"names":[],"mappings":";AAAA,sEAAsE;AACtE,iFAAiF;;;AAGjF,kDAAkD;AAGlD,SAAgB,MAAM,CAAC,GAAG,IAAc;IACpC,KAAK,MAAM,CAAC,IAAI,IAAI,EAAE;QAClB,MAAM,KAAK,GAAG,OAAO,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC;QAC7B,IAAI,KAAK,EAAE;YACP,OAAO,KAAK,CAAC;SAChB;KACJ;IACD,OAAO,SAAS,CAAC;AACrB,CAAC;AARD,wBAQC;AAED,SAAgB,aAAa,CAAC,GAAG,IAAc;IAC3C,MAAM,CAAC,GAAG,MAAM,CAAC,GAAG,IAAI,CAAC,CAAC;IAC1B,IAAI,CAAC,KAAK,SAAS,EAAE;QACjB,uGAAuG;QACvG,yDAAyD;QACzD,IAAI,CAAC,GAAG,EAAE,GAAG,EAAE,GAAG,EAAE,MAAM,EAAE,MAAM,EAAE,MAAM,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,KAAK,CAAC,CAAC,KAAK,SAAS,EAAE;YAC1E,OAAO,IAAI,CAAC;SACf;QACD,IAAI,CAAC,GAAG,EAAE,GAAG,EAAE,GAAG,EAAE,OAAO,EAAE,OAAO,EAAE,OAAO,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,KAAK,CAAC,CAAC,KAAK,SAAS,EAAE;YAC7E,OAAO,KAAK,CAAC;SAChB;KACJ;IACD,OAAO,SAAS,CAAC;AACrB,CAAC;AAbD,sCAaC;AAED,SAAgB,YAAY,CAAC,GAAG,IAAc;IAC1C,MAAM,CAAC,GAAG,MAAM,CAAC,GAAG,IAAI,CAAC,CAAC;IAC1B,IAAI,CAAC,KAAK,SAAS,EAAE;QACjB,MAAM,CAAC,GAAG,UAAU,CAAC,CAAC,CAAC,CAAC;QACxB,IAAI,CAAC,KAAK,CAAC,CAAC,CAAC,EAAE;YACX,OAAO,CAAC,CAAC;SACZ;KACJ;IACD,OAAO,SAAS,CAAC;AACrB,CAAC;AATD,oCASC;AAED,SAAgB,UAAU;IACtB,IAAI,OAAO,GAAG,OAAO,CAAC,gBAAgB,CAAC,CAAC,OAAO,CAAC;IAChD,6EAA6E;IAC7E,iCAAiC;IACjC,IAAI,OAAO,CAAC,OAAO,CAAC,GAAG,CAAC,KAAK,CAAC,EAAE;QAC5B,OAAO,GAAG,OAAO,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC;KAC9B;IACD,OAAO,OAAO,CAAC;AACnB,CAAC;AARD,gCAQC;AAED,gBAAgB;AAChB,SAAgB,oBAAoB;IAChC,OAAO,EAAE,OAAO,EAAE,UAAU,EAAE,EAAE,iBAAiB,EAAE,0EAA0E,EAAE,CAAC;AACpI,CAAC;AAFD,oDAEC;AAED,gBAAgB;AAChB,SAAgB,QAAQ,CAAC,OAAY,EAAE,KAAe,EAAE,UAAe;IACnE,KAAK,IAAI,QAAQ,IAAI,KAAK,EAAE;QACxB,MAAM,CAAC,cAAc,CAAC,OAAO,EAAE,QAAQ,EAAE;YACrC,UAAU,EAAE,IAAI;YAChB,GAAG,EAAE;gBACD,OAAO,UAAU,EAAE,CAAC,QAAQ,CAAC,CAAC;YAClC,CAAC;SACJ,CAAC,CAAC;KACN;AACL,CAAC;AATD,4BASC;AAED,gBAAgB;AACT,KAAK,UAAU,SAAS,CAC3B,GAAW,EACX,KAAoB,EACpB,GAAqB,EACrB,IAA0B;IAE1B,MAAM,CAAC,GAAQ,OAAO,CAAC,IAAI,CAAI,GAAG,EAAE,KAAK,EAAE,GAAG,CAAC,CAAC;IAChD,MAAM,KAAK,GAAG,MAAM,CAAC,CAAC,OAAO,CAAC,IAAI,CAAC,gBAAgB,CAAC,CAAC;IACrD,MAAM,OAAO,GAAG,MAAM,CAAC,CAAC,OAAO,CAAC;IAChC,MAAM,QAAQ,GAAG,MAAM,CAAC,CAAC,QAAQ,CAAC;IAClC,MAAM,OAAO,GACT,CAAC,OAAO,CAAC,CAAC,CAAC,kBAAkB;QAC7B,CAAC,CAAC,QAAQ,CAAC,CAAC,CAAC,gBAAgB;YAC7B,CAAC,CAAC,SAAS,CAAC;IAChB,sGAAsG;IACtG,IAAI,OAAO,EAAE;QACT,MAAM,IAAI,KAAK,CAAC,0BAA0B,GAAG,0BAA0B,OAAO,IAAI;YAC9E,iFAAiF,CAAC,CAAC;KAC1F;IACD,0CAA0C;IAC1C,IAAI,IAAI,IAAI,IAAI,CAAC,QAAQ,EAAE;QACvB,OAAO,KAAK,CAAC,IAAI,CAAC,QAAQ,CAAC,CAAC;KAC/B;IACD,OAAO,KAAK,CAAC;AACjB,CAAC;AAxBD,8BAwBC"}
|
package/project.d.ts
DELETED
|
@@ -1,198 +0,0 @@
|
|
|
1
|
-
import * as pulumi from "@pulumi/pulumi";
|
|
2
|
-
import * as inputs from "./types/input";
|
|
3
|
-
import * as outputs from "./types/output";
|
|
4
|
-
/**
|
|
5
|
-
* Manages [projects](https://argo-cd.readthedocs.io/en/stable/user-guide/projects/) within ArgoCD.
|
|
6
|
-
*
|
|
7
|
-
* ## Example Usage
|
|
8
|
-
*
|
|
9
|
-
* ```typescript
|
|
10
|
-
* import * as pulumi from "@pulumi/pulumi";
|
|
11
|
-
* import * as argocd from "@three14/pulumi-argocd";
|
|
12
|
-
*
|
|
13
|
-
* const myproject = new argocd.Project("myproject", {
|
|
14
|
-
* metadata: {
|
|
15
|
-
* name: "myproject",
|
|
16
|
-
* namespace: "argocd",
|
|
17
|
-
* labels: {
|
|
18
|
-
* acceptance: "true",
|
|
19
|
-
* },
|
|
20
|
-
* annotations: {
|
|
21
|
-
* "this.is.a.really.long.nested.key": "yes, really!",
|
|
22
|
-
* },
|
|
23
|
-
* },
|
|
24
|
-
* spec: {
|
|
25
|
-
* description: "simple project",
|
|
26
|
-
* sourceNamespaces: ["argocd"],
|
|
27
|
-
* sourceRepos: ["*"],
|
|
28
|
-
* destinations: [
|
|
29
|
-
* {
|
|
30
|
-
* server: "https://kubernetes.default.svc",
|
|
31
|
-
* namespace: "default",
|
|
32
|
-
* },
|
|
33
|
-
* {
|
|
34
|
-
* server: "https://kubernetes.default.svc",
|
|
35
|
-
* namespace: "foo",
|
|
36
|
-
* },
|
|
37
|
-
* {
|
|
38
|
-
* name: "anothercluster",
|
|
39
|
-
* namespace: "bar",
|
|
40
|
-
* },
|
|
41
|
-
* ],
|
|
42
|
-
* clusterResourceBlacklists: [{
|
|
43
|
-
* group: "*",
|
|
44
|
-
* kind: "*",
|
|
45
|
-
* }],
|
|
46
|
-
* clusterResourceWhitelists: [
|
|
47
|
-
* {
|
|
48
|
-
* group: "rbac.authorization.k8s.io",
|
|
49
|
-
* kind: "ClusterRoleBinding",
|
|
50
|
-
* },
|
|
51
|
-
* {
|
|
52
|
-
* group: "rbac.authorization.k8s.io",
|
|
53
|
-
* kind: "ClusterRole",
|
|
54
|
-
* },
|
|
55
|
-
* ],
|
|
56
|
-
* namespaceResourceBlacklists: [{
|
|
57
|
-
* group: "networking.k8s.io",
|
|
58
|
-
* kind: "Ingress",
|
|
59
|
-
* }],
|
|
60
|
-
* namespaceResourceWhitelists: [{
|
|
61
|
-
* group: "*",
|
|
62
|
-
* kind: "*",
|
|
63
|
-
* }],
|
|
64
|
-
* orphanedResources: {
|
|
65
|
-
* warn: true,
|
|
66
|
-
* ignores: [
|
|
67
|
-
* {
|
|
68
|
-
* group: "apps/v1",
|
|
69
|
-
* kind: "Deployment",
|
|
70
|
-
* name: "ignored1",
|
|
71
|
-
* },
|
|
72
|
-
* {
|
|
73
|
-
* group: "apps/v1",
|
|
74
|
-
* kind: "Deployment",
|
|
75
|
-
* name: "ignored2",
|
|
76
|
-
* },
|
|
77
|
-
* ],
|
|
78
|
-
* },
|
|
79
|
-
* roles: [
|
|
80
|
-
* {
|
|
81
|
-
* name: "testrole",
|
|
82
|
-
* policies: [
|
|
83
|
-
* "p, proj:myproject:testrole, applications, override, myproject/*, allow",
|
|
84
|
-
* "p, proj:myproject:testrole, applications, sync, myproject/*, allow",
|
|
85
|
-
* "p, proj:myproject:testrole, clusters, get, myproject/*, allow",
|
|
86
|
-
* "p, proj:myproject:testrole, repositories, create, myproject/*, allow",
|
|
87
|
-
* "p, proj:myproject:testrole, repositories, delete, myproject/*, allow",
|
|
88
|
-
* "p, proj:myproject:testrole, repositories, update, myproject/*, allow",
|
|
89
|
-
* "p, proj:myproject:testrole, logs, get, myproject/*, allow",
|
|
90
|
-
* "p, proj:myproject:testrole, exec, create, myproject/*, allow",
|
|
91
|
-
* ],
|
|
92
|
-
* },
|
|
93
|
-
* {
|
|
94
|
-
* name: "anotherrole",
|
|
95
|
-
* policies: [
|
|
96
|
-
* "p, proj:myproject:testrole, applications, get, myproject/*, allow",
|
|
97
|
-
* "p, proj:myproject:testrole, applications, sync, myproject/*, deny",
|
|
98
|
-
* ],
|
|
99
|
-
* },
|
|
100
|
-
* ],
|
|
101
|
-
* syncWindows: [
|
|
102
|
-
* {
|
|
103
|
-
* kind: "allow",
|
|
104
|
-
* applications: ["api-*"],
|
|
105
|
-
* clusters: ["*"],
|
|
106
|
-
* namespaces: ["*"],
|
|
107
|
-
* duration: "3600s",
|
|
108
|
-
* schedule: "10 1 * * *",
|
|
109
|
-
* manualSync: true,
|
|
110
|
-
* },
|
|
111
|
-
* {
|
|
112
|
-
* kind: "deny",
|
|
113
|
-
* applications: ["foo"],
|
|
114
|
-
* clusters: ["in-cluster"],
|
|
115
|
-
* namespaces: ["default"],
|
|
116
|
-
* duration: "12h",
|
|
117
|
-
* schedule: "22 1 5 * *",
|
|
118
|
-
* manualSync: false,
|
|
119
|
-
* timezone: "Europe/London",
|
|
120
|
-
* },
|
|
121
|
-
* ],
|
|
122
|
-
* signatureKeys: [
|
|
123
|
-
* "4AEE18F83AFDEB23",
|
|
124
|
-
* "07E34825A909B250",
|
|
125
|
-
* ],
|
|
126
|
-
* },
|
|
127
|
-
* });
|
|
128
|
-
* ```
|
|
129
|
-
*
|
|
130
|
-
* ## Import
|
|
131
|
-
*
|
|
132
|
-
* Projects can be imported using the project name.
|
|
133
|
-
*
|
|
134
|
-
* Example:
|
|
135
|
-
*
|
|
136
|
-
* ```sh
|
|
137
|
-
* $ pulumi import argocd:index/project:Project myproject myproject
|
|
138
|
-
* ```
|
|
139
|
-
*/
|
|
140
|
-
export declare class Project extends pulumi.CustomResource {
|
|
141
|
-
/**
|
|
142
|
-
* Get an existing Project resource's state with the given name, ID, and optional extra
|
|
143
|
-
* properties used to qualify the lookup.
|
|
144
|
-
*
|
|
145
|
-
* @param name The _unique_ name of the resulting resource.
|
|
146
|
-
* @param id The _unique_ provider ID of the resource to lookup.
|
|
147
|
-
* @param state Any extra arguments used during the lookup.
|
|
148
|
-
* @param opts Optional settings to control the behavior of the CustomResource.
|
|
149
|
-
*/
|
|
150
|
-
static get(name: string, id: pulumi.Input<pulumi.ID>, state?: ProjectState, opts?: pulumi.CustomResourceOptions): Project;
|
|
151
|
-
/**
|
|
152
|
-
* Returns true if the given object is an instance of Project. This is designed to work even
|
|
153
|
-
* when multiple copies of the Pulumi SDK have been loaded into the same process.
|
|
154
|
-
*/
|
|
155
|
-
static isInstance(obj: any): obj is Project;
|
|
156
|
-
/**
|
|
157
|
-
* Standard Kubernetes object metadata. For more info see the [Kubernetes reference](https://github.com/kubernetes/community/blob/master/contributors/devel/sig-architecture/api-conventions.md#metadata).
|
|
158
|
-
*/
|
|
159
|
-
readonly metadata: pulumi.Output<outputs.ProjectMetadata>;
|
|
160
|
-
/**
|
|
161
|
-
* ArgoCD AppProject spec.
|
|
162
|
-
*/
|
|
163
|
-
readonly spec: pulumi.Output<outputs.ProjectSpec>;
|
|
164
|
-
/**
|
|
165
|
-
* Create a Project resource with the given unique name, arguments, and options.
|
|
166
|
-
*
|
|
167
|
-
* @param name The _unique_ name of the resource.
|
|
168
|
-
* @param args The arguments to use to populate this resource's properties.
|
|
169
|
-
* @param opts A bag of options that control this resource's behavior.
|
|
170
|
-
*/
|
|
171
|
-
constructor(name: string, args: ProjectArgs, opts?: pulumi.CustomResourceOptions);
|
|
172
|
-
}
|
|
173
|
-
/**
|
|
174
|
-
* Input properties used for looking up and filtering Project resources.
|
|
175
|
-
*/
|
|
176
|
-
export interface ProjectState {
|
|
177
|
-
/**
|
|
178
|
-
* Standard Kubernetes object metadata. For more info see the [Kubernetes reference](https://github.com/kubernetes/community/blob/master/contributors/devel/sig-architecture/api-conventions.md#metadata).
|
|
179
|
-
*/
|
|
180
|
-
metadata?: pulumi.Input<inputs.ProjectMetadata>;
|
|
181
|
-
/**
|
|
182
|
-
* ArgoCD AppProject spec.
|
|
183
|
-
*/
|
|
184
|
-
spec?: pulumi.Input<inputs.ProjectSpec>;
|
|
185
|
-
}
|
|
186
|
-
/**
|
|
187
|
-
* The set of arguments for constructing a Project resource.
|
|
188
|
-
*/
|
|
189
|
-
export interface ProjectArgs {
|
|
190
|
-
/**
|
|
191
|
-
* Standard Kubernetes object metadata. For more info see the [Kubernetes reference](https://github.com/kubernetes/community/blob/master/contributors/devel/sig-architecture/api-conventions.md#metadata).
|
|
192
|
-
*/
|
|
193
|
-
metadata: pulumi.Input<inputs.ProjectMetadata>;
|
|
194
|
-
/**
|
|
195
|
-
* ArgoCD AppProject spec.
|
|
196
|
-
*/
|
|
197
|
-
spec: pulumi.Input<inputs.ProjectSpec>;
|
|
198
|
-
}
|
package/project.js
DELETED
|
@@ -1,193 +0,0 @@
|
|
|
1
|
-
"use strict";
|
|
2
|
-
// *** WARNING: this file was generated by the Pulumi Terraform Bridge (tfgen) Tool. ***
|
|
3
|
-
// *** Do not edit by hand unless you're certain you know what you are doing! ***
|
|
4
|
-
Object.defineProperty(exports, "__esModule", { value: true });
|
|
5
|
-
exports.Project = void 0;
|
|
6
|
-
const pulumi = require("@pulumi/pulumi");
|
|
7
|
-
const utilities = require("./utilities");
|
|
8
|
-
/**
|
|
9
|
-
* Manages [projects](https://argo-cd.readthedocs.io/en/stable/user-guide/projects/) within ArgoCD.
|
|
10
|
-
*
|
|
11
|
-
* ## Example Usage
|
|
12
|
-
*
|
|
13
|
-
* ```typescript
|
|
14
|
-
* import * as pulumi from "@pulumi/pulumi";
|
|
15
|
-
* import * as argocd from "@three14/pulumi-argocd";
|
|
16
|
-
*
|
|
17
|
-
* const myproject = new argocd.Project("myproject", {
|
|
18
|
-
* metadata: {
|
|
19
|
-
* name: "myproject",
|
|
20
|
-
* namespace: "argocd",
|
|
21
|
-
* labels: {
|
|
22
|
-
* acceptance: "true",
|
|
23
|
-
* },
|
|
24
|
-
* annotations: {
|
|
25
|
-
* "this.is.a.really.long.nested.key": "yes, really!",
|
|
26
|
-
* },
|
|
27
|
-
* },
|
|
28
|
-
* spec: {
|
|
29
|
-
* description: "simple project",
|
|
30
|
-
* sourceNamespaces: ["argocd"],
|
|
31
|
-
* sourceRepos: ["*"],
|
|
32
|
-
* destinations: [
|
|
33
|
-
* {
|
|
34
|
-
* server: "https://kubernetes.default.svc",
|
|
35
|
-
* namespace: "default",
|
|
36
|
-
* },
|
|
37
|
-
* {
|
|
38
|
-
* server: "https://kubernetes.default.svc",
|
|
39
|
-
* namespace: "foo",
|
|
40
|
-
* },
|
|
41
|
-
* {
|
|
42
|
-
* name: "anothercluster",
|
|
43
|
-
* namespace: "bar",
|
|
44
|
-
* },
|
|
45
|
-
* ],
|
|
46
|
-
* clusterResourceBlacklists: [{
|
|
47
|
-
* group: "*",
|
|
48
|
-
* kind: "*",
|
|
49
|
-
* }],
|
|
50
|
-
* clusterResourceWhitelists: [
|
|
51
|
-
* {
|
|
52
|
-
* group: "rbac.authorization.k8s.io",
|
|
53
|
-
* kind: "ClusterRoleBinding",
|
|
54
|
-
* },
|
|
55
|
-
* {
|
|
56
|
-
* group: "rbac.authorization.k8s.io",
|
|
57
|
-
* kind: "ClusterRole",
|
|
58
|
-
* },
|
|
59
|
-
* ],
|
|
60
|
-
* namespaceResourceBlacklists: [{
|
|
61
|
-
* group: "networking.k8s.io",
|
|
62
|
-
* kind: "Ingress",
|
|
63
|
-
* }],
|
|
64
|
-
* namespaceResourceWhitelists: [{
|
|
65
|
-
* group: "*",
|
|
66
|
-
* kind: "*",
|
|
67
|
-
* }],
|
|
68
|
-
* orphanedResources: {
|
|
69
|
-
* warn: true,
|
|
70
|
-
* ignores: [
|
|
71
|
-
* {
|
|
72
|
-
* group: "apps/v1",
|
|
73
|
-
* kind: "Deployment",
|
|
74
|
-
* name: "ignored1",
|
|
75
|
-
* },
|
|
76
|
-
* {
|
|
77
|
-
* group: "apps/v1",
|
|
78
|
-
* kind: "Deployment",
|
|
79
|
-
* name: "ignored2",
|
|
80
|
-
* },
|
|
81
|
-
* ],
|
|
82
|
-
* },
|
|
83
|
-
* roles: [
|
|
84
|
-
* {
|
|
85
|
-
* name: "testrole",
|
|
86
|
-
* policies: [
|
|
87
|
-
* "p, proj:myproject:testrole, applications, override, myproject/*, allow",
|
|
88
|
-
* "p, proj:myproject:testrole, applications, sync, myproject/*, allow",
|
|
89
|
-
* "p, proj:myproject:testrole, clusters, get, myproject/*, allow",
|
|
90
|
-
* "p, proj:myproject:testrole, repositories, create, myproject/*, allow",
|
|
91
|
-
* "p, proj:myproject:testrole, repositories, delete, myproject/*, allow",
|
|
92
|
-
* "p, proj:myproject:testrole, repositories, update, myproject/*, allow",
|
|
93
|
-
* "p, proj:myproject:testrole, logs, get, myproject/*, allow",
|
|
94
|
-
* "p, proj:myproject:testrole, exec, create, myproject/*, allow",
|
|
95
|
-
* ],
|
|
96
|
-
* },
|
|
97
|
-
* {
|
|
98
|
-
* name: "anotherrole",
|
|
99
|
-
* policies: [
|
|
100
|
-
* "p, proj:myproject:testrole, applications, get, myproject/*, allow",
|
|
101
|
-
* "p, proj:myproject:testrole, applications, sync, myproject/*, deny",
|
|
102
|
-
* ],
|
|
103
|
-
* },
|
|
104
|
-
* ],
|
|
105
|
-
* syncWindows: [
|
|
106
|
-
* {
|
|
107
|
-
* kind: "allow",
|
|
108
|
-
* applications: ["api-*"],
|
|
109
|
-
* clusters: ["*"],
|
|
110
|
-
* namespaces: ["*"],
|
|
111
|
-
* duration: "3600s",
|
|
112
|
-
* schedule: "10 1 * * *",
|
|
113
|
-
* manualSync: true,
|
|
114
|
-
* },
|
|
115
|
-
* {
|
|
116
|
-
* kind: "deny",
|
|
117
|
-
* applications: ["foo"],
|
|
118
|
-
* clusters: ["in-cluster"],
|
|
119
|
-
* namespaces: ["default"],
|
|
120
|
-
* duration: "12h",
|
|
121
|
-
* schedule: "22 1 5 * *",
|
|
122
|
-
* manualSync: false,
|
|
123
|
-
* timezone: "Europe/London",
|
|
124
|
-
* },
|
|
125
|
-
* ],
|
|
126
|
-
* signatureKeys: [
|
|
127
|
-
* "4AEE18F83AFDEB23",
|
|
128
|
-
* "07E34825A909B250",
|
|
129
|
-
* ],
|
|
130
|
-
* },
|
|
131
|
-
* });
|
|
132
|
-
* ```
|
|
133
|
-
*
|
|
134
|
-
* ## Import
|
|
135
|
-
*
|
|
136
|
-
* Projects can be imported using the project name.
|
|
137
|
-
*
|
|
138
|
-
* Example:
|
|
139
|
-
*
|
|
140
|
-
* ```sh
|
|
141
|
-
* $ pulumi import argocd:index/project:Project myproject myproject
|
|
142
|
-
* ```
|
|
143
|
-
*/
|
|
144
|
-
class Project extends pulumi.CustomResource {
|
|
145
|
-
/**
|
|
146
|
-
* Get an existing Project resource's state with the given name, ID, and optional extra
|
|
147
|
-
* properties used to qualify the lookup.
|
|
148
|
-
*
|
|
149
|
-
* @param name The _unique_ name of the resulting resource.
|
|
150
|
-
* @param id The _unique_ provider ID of the resource to lookup.
|
|
151
|
-
* @param state Any extra arguments used during the lookup.
|
|
152
|
-
* @param opts Optional settings to control the behavior of the CustomResource.
|
|
153
|
-
*/
|
|
154
|
-
static get(name, id, state, opts) {
|
|
155
|
-
return new Project(name, state, Object.assign(Object.assign({}, opts), { id: id }));
|
|
156
|
-
}
|
|
157
|
-
/**
|
|
158
|
-
* Returns true if the given object is an instance of Project. This is designed to work even
|
|
159
|
-
* when multiple copies of the Pulumi SDK have been loaded into the same process.
|
|
160
|
-
*/
|
|
161
|
-
static isInstance(obj) {
|
|
162
|
-
if (obj === undefined || obj === null) {
|
|
163
|
-
return false;
|
|
164
|
-
}
|
|
165
|
-
return obj['__pulumiType'] === Project.__pulumiType;
|
|
166
|
-
}
|
|
167
|
-
constructor(name, argsOrState, opts) {
|
|
168
|
-
let resourceInputs = {};
|
|
169
|
-
opts = opts || {};
|
|
170
|
-
if (opts.id) {
|
|
171
|
-
const state = argsOrState;
|
|
172
|
-
resourceInputs["metadata"] = state ? state.metadata : undefined;
|
|
173
|
-
resourceInputs["spec"] = state ? state.spec : undefined;
|
|
174
|
-
}
|
|
175
|
-
else {
|
|
176
|
-
const args = argsOrState;
|
|
177
|
-
if ((!args || args.metadata === undefined) && !opts.urn) {
|
|
178
|
-
throw new Error("Missing required property 'metadata'");
|
|
179
|
-
}
|
|
180
|
-
if ((!args || args.spec === undefined) && !opts.urn) {
|
|
181
|
-
throw new Error("Missing required property 'spec'");
|
|
182
|
-
}
|
|
183
|
-
resourceInputs["metadata"] = args ? args.metadata : undefined;
|
|
184
|
-
resourceInputs["spec"] = args ? args.spec : undefined;
|
|
185
|
-
}
|
|
186
|
-
opts = pulumi.mergeOptions(utilities.resourceOptsDefaults(), opts);
|
|
187
|
-
super(Project.__pulumiType, name, resourceInputs, opts);
|
|
188
|
-
}
|
|
189
|
-
}
|
|
190
|
-
exports.Project = Project;
|
|
191
|
-
/** @internal */
|
|
192
|
-
Project.__pulumiType = 'argocd:index/project:Project';
|
|
193
|
-
//# sourceMappingURL=project.js.map
|
package/project.js.map
DELETED
|
@@ -1 +0,0 @@
|
|
|
1
|
-
{"version":3,"file":"project.js","sourceRoot":"","sources":["../project.ts"],"names":[],"mappings":";AAAA,wFAAwF;AACxF,iFAAiF;;;AAEjF,yCAAyC;AAGzC,yCAAyC;AAEzC;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;GAuIG;AACH,MAAa,OAAQ,SAAQ,MAAM,CAAC,cAAc;IAC9C;;;;;;;;OAQG;IACI,MAAM,CAAC,GAAG,CAAC,IAAY,EAAE,EAA2B,EAAE,KAAoB,EAAE,IAAmC;QAClH,OAAO,IAAI,OAAO,CAAC,IAAI,EAAO,KAAK,kCAAO,IAAI,KAAE,EAAE,EAAE,EAAE,IAAG,CAAC;IAC9D,CAAC;IAKD;;;OAGG;IACI,MAAM,CAAC,UAAU,CAAC,GAAQ;QAC7B,IAAI,GAAG,KAAK,SAAS,IAAI,GAAG,KAAK,IAAI,EAAE;YACnC,OAAO,KAAK,CAAC;SAChB;QACD,OAAO,GAAG,CAAC,cAAc,CAAC,KAAK,OAAO,CAAC,YAAY,CAAC;IACxD,CAAC;IAmBD,YAAY,IAAY,EAAE,WAAwC,EAAE,IAAmC;QACnG,IAAI,cAAc,GAAkB,EAAE,CAAC;QACvC,IAAI,GAAG,IAAI,IAAI,EAAE,CAAC;QAClB,IAAI,IAAI,CAAC,EAAE,EAAE;YACT,MAAM,KAAK,GAAG,WAAuC,CAAC;YACtD,cAAc,CAAC,UAAU,CAAC,GAAG,KAAK,CAAC,CAAC,CAAC,KAAK,CAAC,QAAQ,CAAC,CAAC,CAAC,SAAS,CAAC;YAChE,cAAc,CAAC,MAAM,CAAC,GAAG,KAAK,CAAC,CAAC,CAAC,KAAK,CAAC,IAAI,CAAC,CAAC,CAAC,SAAS,CAAC;SAC3D;aAAM;YACH,MAAM,IAAI,GAAG,WAAsC,CAAC;YACpD,IAAI,CAAC,CAAC,IAAI,IAAI,IAAI,CAAC,QAAQ,KAAK,SAAS,CAAC,IAAI,CAAC,IAAI,CAAC,GAAG,EAAE;gBACrD,MAAM,IAAI,KAAK,CAAC,sCAAsC,CAAC,CAAC;aAC3D;YACD,IAAI,CAAC,CAAC,IAAI,IAAI,IAAI,CAAC,IAAI,KAAK,SAAS,CAAC,IAAI,CAAC,IAAI,CAAC,GAAG,EAAE;gBACjD,MAAM,IAAI,KAAK,CAAC,kCAAkC,CAAC,CAAC;aACvD;YACD,cAAc,CAAC,UAAU,CAAC,GAAG,IAAI,CAAC,CAAC,CAAC,IAAI,CAAC,QAAQ,CAAC,CAAC,CAAC,SAAS,CAAC;YAC9D,cAAc,CAAC,MAAM,CAAC,GAAG,IAAI,CAAC,CAAC,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC,CAAC,SAAS,CAAC;SACzD;QACD,IAAI,GAAG,MAAM,CAAC,YAAY,CAAC,SAAS,CAAC,oBAAoB,EAAE,EAAE,IAAI,CAAC,CAAC;QACnE,KAAK,CAAC,OAAO,CAAC,YAAY,EAAE,IAAI,EAAE,cAAc,EAAE,IAAI,CAAC,CAAC;IAC5D,CAAC;;AAjEL,0BAkEC;AApDG,gBAAgB;AACO,oBAAY,GAAG,8BAA8B,CAAC"}
|
package/projectToken.d.ts
DELETED
|
@@ -1,150 +0,0 @@
|
|
|
1
|
-
import * as pulumi from "@pulumi/pulumi";
|
|
2
|
-
/**
|
|
3
|
-
* Manages ArgoCD project role JWT tokens. See [Project Roles](https://argo-cd.readthedocs.io/en/stable/user-guide/projects/#project-roles) for more info.
|
|
4
|
-
*
|
|
5
|
-
* ## Example Usage
|
|
6
|
-
*
|
|
7
|
-
* ```typescript
|
|
8
|
-
* import * as pulumi from "@pulumi/pulumi";
|
|
9
|
-
* import * as argocd from "@three14/pulumi-argocd";
|
|
10
|
-
*
|
|
11
|
-
* const secret = new argocd.ProjectToken("secret", {
|
|
12
|
-
* project: "someproject",
|
|
13
|
-
* role: "foobar",
|
|
14
|
-
* description: "short lived token",
|
|
15
|
-
* expiresIn: "1h",
|
|
16
|
-
* renewBefore: "30m",
|
|
17
|
-
* });
|
|
18
|
-
* ```
|
|
19
|
-
*/
|
|
20
|
-
export declare class ProjectToken extends pulumi.CustomResource {
|
|
21
|
-
/**
|
|
22
|
-
* Get an existing ProjectToken resource's state with the given name, ID, and optional extra
|
|
23
|
-
* properties used to qualify the lookup.
|
|
24
|
-
*
|
|
25
|
-
* @param name The _unique_ name of the resulting resource.
|
|
26
|
-
* @param id The _unique_ provider ID of the resource to lookup.
|
|
27
|
-
* @param state Any extra arguments used during the lookup.
|
|
28
|
-
* @param opts Optional settings to control the behavior of the CustomResource.
|
|
29
|
-
*/
|
|
30
|
-
static get(name: string, id: pulumi.Input<pulumi.ID>, state?: ProjectTokenState, opts?: pulumi.CustomResourceOptions): ProjectToken;
|
|
31
|
-
/**
|
|
32
|
-
* Returns true if the given object is an instance of ProjectToken. This is designed to work even
|
|
33
|
-
* when multiple copies of the Pulumi SDK have been loaded into the same process.
|
|
34
|
-
*/
|
|
35
|
-
static isInstance(obj: any): obj is ProjectToken;
|
|
36
|
-
/**
|
|
37
|
-
* Description of the token.
|
|
38
|
-
*/
|
|
39
|
-
readonly description: pulumi.Output<string | undefined>;
|
|
40
|
-
/**
|
|
41
|
-
* If `expiresIn` is set, Unix timestamp upon which the token will expire.
|
|
42
|
-
*/
|
|
43
|
-
readonly expiresAt: pulumi.Output<string>;
|
|
44
|
-
/**
|
|
45
|
-
* Duration before the token will expire. Valid time units are `ns`, `us` (or `µs`), `ms`, `s`, `m`, `h`. E.g. `12h`, `7d`. Default: No expiration.
|
|
46
|
-
*/
|
|
47
|
-
readonly expiresIn: pulumi.Output<string | undefined>;
|
|
48
|
-
/**
|
|
49
|
-
* Unix timestamp at which the token was issued.
|
|
50
|
-
*/
|
|
51
|
-
readonly issuedAt: pulumi.Output<string>;
|
|
52
|
-
/**
|
|
53
|
-
* The raw JWT.
|
|
54
|
-
*/
|
|
55
|
-
readonly jwt: pulumi.Output<string>;
|
|
56
|
-
/**
|
|
57
|
-
* The project associated with the token.
|
|
58
|
-
*/
|
|
59
|
-
readonly project: pulumi.Output<string>;
|
|
60
|
-
/**
|
|
61
|
-
* Duration to control token silent regeneration based on token age. Valid time units are `ns`, `us` (or `µs`), `ms`, `s`, `m`, `h`. If set, then the token will be regenerated if it is older than `renewAfter`. I.e. if `currentDate - issuedAt > renewAfter`.
|
|
62
|
-
*/
|
|
63
|
-
readonly renewAfter: pulumi.Output<string | undefined>;
|
|
64
|
-
/**
|
|
65
|
-
* Duration to control token silent regeneration based on remaining token lifetime. If `expiresIn` is set, the provider will regenerate the token if `expiresAt - currentDate < renewBefore`. Valid time units are `ns`, `us` (or `µs`), `ms`, `s`, `m`, `h`.
|
|
66
|
-
*/
|
|
67
|
-
readonly renewBefore: pulumi.Output<string | undefined>;
|
|
68
|
-
/**
|
|
69
|
-
* The name of the role in the project associated with the token.
|
|
70
|
-
*/
|
|
71
|
-
readonly role: pulumi.Output<string>;
|
|
72
|
-
/**
|
|
73
|
-
* Create a ProjectToken resource with the given unique name, arguments, and options.
|
|
74
|
-
*
|
|
75
|
-
* @param name The _unique_ name of the resource.
|
|
76
|
-
* @param args The arguments to use to populate this resource's properties.
|
|
77
|
-
* @param opts A bag of options that control this resource's behavior.
|
|
78
|
-
*/
|
|
79
|
-
constructor(name: string, args: ProjectTokenArgs, opts?: pulumi.CustomResourceOptions);
|
|
80
|
-
}
|
|
81
|
-
/**
|
|
82
|
-
* Input properties used for looking up and filtering ProjectToken resources.
|
|
83
|
-
*/
|
|
84
|
-
export interface ProjectTokenState {
|
|
85
|
-
/**
|
|
86
|
-
* Description of the token.
|
|
87
|
-
*/
|
|
88
|
-
description?: pulumi.Input<string>;
|
|
89
|
-
/**
|
|
90
|
-
* If `expiresIn` is set, Unix timestamp upon which the token will expire.
|
|
91
|
-
*/
|
|
92
|
-
expiresAt?: pulumi.Input<string>;
|
|
93
|
-
/**
|
|
94
|
-
* Duration before the token will expire. Valid time units are `ns`, `us` (or `µs`), `ms`, `s`, `m`, `h`. E.g. `12h`, `7d`. Default: No expiration.
|
|
95
|
-
*/
|
|
96
|
-
expiresIn?: pulumi.Input<string>;
|
|
97
|
-
/**
|
|
98
|
-
* Unix timestamp at which the token was issued.
|
|
99
|
-
*/
|
|
100
|
-
issuedAt?: pulumi.Input<string>;
|
|
101
|
-
/**
|
|
102
|
-
* The raw JWT.
|
|
103
|
-
*/
|
|
104
|
-
jwt?: pulumi.Input<string>;
|
|
105
|
-
/**
|
|
106
|
-
* The project associated with the token.
|
|
107
|
-
*/
|
|
108
|
-
project?: pulumi.Input<string>;
|
|
109
|
-
/**
|
|
110
|
-
* Duration to control token silent regeneration based on token age. Valid time units are `ns`, `us` (or `µs`), `ms`, `s`, `m`, `h`. If set, then the token will be regenerated if it is older than `renewAfter`. I.e. if `currentDate - issuedAt > renewAfter`.
|
|
111
|
-
*/
|
|
112
|
-
renewAfter?: pulumi.Input<string>;
|
|
113
|
-
/**
|
|
114
|
-
* Duration to control token silent regeneration based on remaining token lifetime. If `expiresIn` is set, the provider will regenerate the token if `expiresAt - currentDate < renewBefore`. Valid time units are `ns`, `us` (or `µs`), `ms`, `s`, `m`, `h`.
|
|
115
|
-
*/
|
|
116
|
-
renewBefore?: pulumi.Input<string>;
|
|
117
|
-
/**
|
|
118
|
-
* The name of the role in the project associated with the token.
|
|
119
|
-
*/
|
|
120
|
-
role?: pulumi.Input<string>;
|
|
121
|
-
}
|
|
122
|
-
/**
|
|
123
|
-
* The set of arguments for constructing a ProjectToken resource.
|
|
124
|
-
*/
|
|
125
|
-
export interface ProjectTokenArgs {
|
|
126
|
-
/**
|
|
127
|
-
* Description of the token.
|
|
128
|
-
*/
|
|
129
|
-
description?: pulumi.Input<string>;
|
|
130
|
-
/**
|
|
131
|
-
* Duration before the token will expire. Valid time units are `ns`, `us` (or `µs`), `ms`, `s`, `m`, `h`. E.g. `12h`, `7d`. Default: No expiration.
|
|
132
|
-
*/
|
|
133
|
-
expiresIn?: pulumi.Input<string>;
|
|
134
|
-
/**
|
|
135
|
-
* The project associated with the token.
|
|
136
|
-
*/
|
|
137
|
-
project: pulumi.Input<string>;
|
|
138
|
-
/**
|
|
139
|
-
* Duration to control token silent regeneration based on token age. Valid time units are `ns`, `us` (or `µs`), `ms`, `s`, `m`, `h`. If set, then the token will be regenerated if it is older than `renewAfter`. I.e. if `currentDate - issuedAt > renewAfter`.
|
|
140
|
-
*/
|
|
141
|
-
renewAfter?: pulumi.Input<string>;
|
|
142
|
-
/**
|
|
143
|
-
* Duration to control token silent regeneration based on remaining token lifetime. If `expiresIn` is set, the provider will regenerate the token if `expiresAt - currentDate < renewBefore`. Valid time units are `ns`, `us` (or `µs`), `ms`, `s`, `m`, `h`.
|
|
144
|
-
*/
|
|
145
|
-
renewBefore?: pulumi.Input<string>;
|
|
146
|
-
/**
|
|
147
|
-
* The name of the role in the project associated with the token.
|
|
148
|
-
*/
|
|
149
|
-
role: pulumi.Input<string>;
|
|
150
|
-
}
|