@three14/pulumi-argocd 1.1.0 → 1.1.1

package/repository.d.ts

@@ -0,0 +1,352 @@
+import * as pulumi from "@pulumi/pulumi";
+/**
+ * Manages [repositories](https://argo-cd.readthedocs.io/en/stable/operator-manual/declarative-setup/#repositories) within ArgoCD.
+ *
+ * ## Example Usage
+ *
+ * ```typescript
+ * import * as pulumi from "@pulumi/pulumi";
+ * import * as argocd from "@three14/pulumi-argocd";
+ *
+ * // Public Helm repository
+ * const publicNginxHelm = new argocd.Repository("public_nginx_helm", {
+ *     repo: "https://helm.nginx.com/stable",
+ *     name: "nginx-stable",
+ *     type: "helm",
+ * });
+ * // Public Git repository
+ * const publicGit = new argocd.Repository("public_git", {repo: "git@github.com:user/somerepo.git"});
+ * // Private Git repository
+ * const _private = new argocd.Repository("private", {
+ *     repo: "git@private-git-repository.local:somerepo.git",
+ *     username: "git",
+ *     sshPrivateKey: `-----BEGIN OPENSSH PRIVATE KEY-----
+ * foo
+ * bar
+ * -----END OPENSSH PRIVATE KEY-----`,
+ *     insecure: true,
+ * });
+ * // Repository with proxy configuration
+ * const withProxy = new argocd.Repository("with_proxy", {
+ *     repo: "https://github.com/example/repo.git",
+ *     username: "git",
+ *     password: "my-token",
+ *     proxy: "http://proxy.example.com:8080",
+ *     noProxy: "*.internal.example.com,localhost",
+ * });
+ * // OCI repository (e.g., for Helm charts stored in OCI registries)
+ * const ociRegistry = new argocd.Repository("oci_registry", {
+ *     repo: "oci://ghcr.io/argoproj/argo-helm/argo-cd",
+ *     name: "argocd-oci",
+ *     type: "oci",
+ *     username: "my-username",
+ *     password: "my-token",
+ * });
+ * ```
+ *
+ * ## Import
+ *
+ * The `pulumi import` command can be used, for example:
+ *
+ * Repositories can be imported using the repository URL.
+ *
+ * Note: as the ArgoCD API does not return any sensitive information, a
+ * subsequent `pulumi up` should be executed to make the `password`,
+ * `sshPrivateKey` and `tlsClientCertKey` attributes converge to their
+ * expected values defined within the plan.
+ *
+ * ```sh
+ * $ pulumi import argocd:index/repository:Repository myrepo git@private-git-repository.local:somerepo.git
+ * ```
+ */
+export declare class Repository extends pulumi.CustomResource {
+    /**
+     * Get an existing Repository resource's state with the given name, ID, and optional extra
+     * properties used to qualify the lookup.
+     *
+     * @param name The _unique_ name of the resulting resource.
+     * @param id The _unique_ provider ID of the resource to lookup.
+     * @param state Any extra arguments used during the lookup.
+     * @param opts Optional settings to control the behavior of the CustomResource.
+     */
+    static get(name: string, id: pulumi.Input<pulumi.ID>, state?: RepositoryState, opts?: pulumi.CustomResourceOptions): Repository;
+    /**
+     * Returns true if the given object is an instance of Repository.  This is designed to work even
+     * when multiple copies of the Pulumi SDK have been loaded into the same process.
+     */
+    static isInstance(obj: any): obj is Repository;
+    /**
+     * BearerToken contains the bearer token used for Git BitBucket Data Center auth at the repo server
+     */
+    readonly bearerToken: pulumi.Output<string | undefined>;
+    /**
+     * Contains information about the current state of connection to the repository server.
+     */
+    readonly connectionStateStatus: pulumi.Output<string>;
+    /**
+     * Whether `git-lfs` support should be enabled for this repository.
+     */
+    readonly enableLfs: pulumi.Output<boolean>;
+    /**
+     * Whether `helm-oci` support should be enabled for this repository.
+     */
+    readonly enableOci: pulumi.Output<boolean>;
+    /**
+     * GitHub API URL for GitHub app authentication.
+     */
+    readonly githubappEnterpriseBaseUrl: pulumi.Output<string>;
+    /**
+     * ID of the GitHub app used to access the repo.
+     */
+    readonly githubappId: pulumi.Output<string>;
+    /**
+     * The installation ID of the GitHub App used to access the repo.
+     */
+    readonly githubappInstallationId: pulumi.Output<string>;
+    /**
+     * Private key data (PEM) for authentication via GitHub app.
+     */
+    readonly githubappPrivateKey: pulumi.Output<string | undefined>;
+    /**
+     * Whether credentials were inherited from a credential set.
+     */
+    readonly inheritedCreds: pulumi.Output<boolean>;
+    /**
+     * Whether the connection to the repository ignores any errors when verifying TLS certificates or SSH host keys.
+     */
+    readonly insecure: pulumi.Output<boolean>;
+    /**
+     * Name to be used for this repo. Only used with Helm repos.
+     */
+    readonly name: pulumi.Output<string>;
+    /**
+     * Comma-separated list of hostnames that should be excluded from proxying.
+     */
+    readonly noProxy: pulumi.Output<string | undefined>;
+    /**
+     * Password or PAT used for authenticating at the remote repository.
+     */
+    readonly password: pulumi.Output<string | undefined>;
+    /**
+     * The project name, in case the repository is project scoped.
+     */
+    readonly project: pulumi.Output<string | undefined>;
+    /**
+     * HTTP/HTTPS proxy to access the repository.
+     */
+    readonly proxy: pulumi.Output<string | undefined>;
+    /**
+     * URL of the repository.
+     */
+    readonly repo: pulumi.Output<string>;
+    /**
+     * PEM data for authenticating at the repo server. Only used with Git repos.
+     */
+    readonly sshPrivateKey: pulumi.Output<string | undefined>;
+    /**
+     * TLS client certificate in PEM format for authenticating at the repo server.
+     */
+    readonly tlsClientCertData: pulumi.Output<string | undefined>;
+    /**
+     * TLS client certificate private key in PEM format for authenticating at the repo server.
+     */
+    readonly tlsClientCertKey: pulumi.Output<string | undefined>;
+    /**
+     * Type of the repo. Can be either `git`, `helm` or `oci`. `git` is assumed if empty or absent.
+     */
+    readonly type: pulumi.Output<string>;
+    /**
+     * Whether `Azure-Workload-identity` should be enabled for this repository.
+     */
+    readonly useAzureWorkloadIdentity: pulumi.Output<boolean>;
+    /**
+     * Username used for authenticating at the remote repository.
+     */
+    readonly username: pulumi.Output<string | undefined>;
+    /**
+     * Create a Repository resource with the given unique name, arguments, and options.
+     *
+     * @param name The _unique_ name of the resource.
+     * @param args The arguments to use to populate this resource's properties.
+     * @param opts A bag of options that control this resource's behavior.
+     */
+    constructor(name: string, args: RepositoryArgs, opts?: pulumi.CustomResourceOptions);
+}
+/**
+ * Input properties used for looking up and filtering Repository resources.
+ */
+export interface RepositoryState {
+    /**
+     * BearerToken contains the bearer token used for Git BitBucket Data Center auth at the repo server
+     */
+    bearerToken?: pulumi.Input<string>;
+    /**
+     * Contains information about the current state of connection to the repository server.
+     */
+    connectionStateStatus?: pulumi.Input<string>;
+    /**
+     * Whether `git-lfs` support should be enabled for this repository.
+     */
+    enableLfs?: pulumi.Input<boolean>;
+    /**
+     * Whether `helm-oci` support should be enabled for this repository.
+     */
+    enableOci?: pulumi.Input<boolean>;
+    /**
+     * GitHub API URL for GitHub app authentication.
+     */
+    githubappEnterpriseBaseUrl?: pulumi.Input<string>;
+    /**
+     * ID of the GitHub app used to access the repo.
+     */
+    githubappId?: pulumi.Input<string>;
+    /**
+     * The installation ID of the GitHub App used to access the repo.
+     */
+    githubappInstallationId?: pulumi.Input<string>;
+    /**
+     * Private key data (PEM) for authentication via GitHub app.
+     */
+    githubappPrivateKey?: pulumi.Input<string>;
+    /**
+     * Whether credentials were inherited from a credential set.
+     */
+    inheritedCreds?: pulumi.Input<boolean>;
+    /**
+     * Whether the connection to the repository ignores any errors when verifying TLS certificates or SSH host keys.
+     */
+    insecure?: pulumi.Input<boolean>;
+    /**
+     * Name to be used for this repo. Only used with Helm repos.
+     */
+    name?: pulumi.Input<string>;
+    /**
+     * Comma-separated list of hostnames that should be excluded from proxying.
+     */
+    noProxy?: pulumi.Input<string>;
+    /**
+     * Password or PAT used for authenticating at the remote repository.
+     */
+    password?: pulumi.Input<string>;
+    /**
+     * The project name, in case the repository is project scoped.
+     */
+    project?: pulumi.Input<string>;
+    /**
+     * HTTP/HTTPS proxy to access the repository.
+     */
+    proxy?: pulumi.Input<string>;
+    /**
+     * URL of the repository.
+     */
+    repo?: pulumi.Input<string>;
+    /**
+     * PEM data for authenticating at the repo server. Only used with Git repos.
+     */
+    sshPrivateKey?: pulumi.Input<string>;
+    /**
+     * TLS client certificate in PEM format for authenticating at the repo server.
+     */
+    tlsClientCertData?: pulumi.Input<string>;
+    /**
+     * TLS client certificate private key in PEM format for authenticating at the repo server.
+     */
+    tlsClientCertKey?: pulumi.Input<string>;
+    /**
+     * Type of the repo. Can be either `git`, `helm` or `oci`. `git` is assumed if empty or absent.
+     */
+    type?: pulumi.Input<string>;
+    /**
+     * Whether `Azure-Workload-identity` should be enabled for this repository.
+     */
+    useAzureWorkloadIdentity?: pulumi.Input<boolean>;
+    /**
+     * Username used for authenticating at the remote repository.
+     */
+    username?: pulumi.Input<string>;
+}
+/**
+ * The set of arguments for constructing a Repository resource.
+ */
+export interface RepositoryArgs {
+    /**
+     * BearerToken contains the bearer token used for Git BitBucket Data Center auth at the repo server
+     */
+    bearerToken?: pulumi.Input<string>;
+    /**
+     * Whether `git-lfs` support should be enabled for this repository.
+     */
+    enableLfs?: pulumi.Input<boolean>;
+    /**
+     * Whether `helm-oci` support should be enabled for this repository.
+     */
+    enableOci?: pulumi.Input<boolean>;
+    /**
+     * GitHub API URL for GitHub app authentication.
+     */
+    githubappEnterpriseBaseUrl?: pulumi.Input<string>;
+    /**
+     * ID of the GitHub app used to access the repo.
+     */
+    githubappId?: pulumi.Input<string>;
+    /**
+     * The installation ID of the GitHub App used to access the repo.
+     */
+    githubappInstallationId?: pulumi.Input<string>;
+    /**
+     * Private key data (PEM) for authentication via GitHub app.
+     */
+    githubappPrivateKey?: pulumi.Input<string>;
+    /**
+     * Whether the connection to the repository ignores any errors when verifying TLS certificates or SSH host keys.
+     */
+    insecure?: pulumi.Input<boolean>;
+    /**
+     * Name to be used for this repo. Only used with Helm repos.
+     */
+    name?: pulumi.Input<string>;
+    /**
+     * Comma-separated list of hostnames that should be excluded from proxying.
+     */
+    noProxy?: pulumi.Input<string>;
+    /**
+     * Password or PAT used for authenticating at the remote repository.
+     */
+    password?: pulumi.Input<string>;
+    /**
+     * The project name, in case the repository is project scoped.
+     */
+    project?: pulumi.Input<string>;
+    /**
+     * HTTP/HTTPS proxy to access the repository.
+     */
+    proxy?: pulumi.Input<string>;
+    /**
+     * URL of the repository.
+     */
+    repo: pulumi.Input<string>;
+    /**
+     * PEM data for authenticating at the repo server. Only used with Git repos.
+     */
+    sshPrivateKey?: pulumi.Input<string>;
+    /**
+     * TLS client certificate in PEM format for authenticating at the repo server.
+     */
+    tlsClientCertData?: pulumi.Input<string>;
+    /**
+     * TLS client certificate private key in PEM format for authenticating at the repo server.
+     */
+    tlsClientCertKey?: pulumi.Input<string>;
+    /**
+     * Type of the repo. Can be either `git`, `helm` or `oci`. `git` is assumed if empty or absent.
+     */
+    type?: pulumi.Input<string>;
+    /**
+     * Whether `Azure-Workload-identity` should be enabled for this repository.
+     */
+    useAzureWorkloadIdentity?: pulumi.Input<boolean>;
+    /**
+     * Username used for authenticating at the remote repository.
+     */
+    username?: pulumi.Input<string>;
+}

package/repository.js

@@ -0,0 +1,156 @@
+"use strict";
+// *** WARNING: this file was generated by pulumi-language-nodejs. ***
+// *** Do not edit by hand unless you're certain you know what you are doing! ***
+Object.defineProperty(exports, "__esModule", { value: true });
+exports.Repository = void 0;
+const pulumi = require("@pulumi/pulumi");
+const utilities = require("./utilities");
+/**
+ * Manages [repositories](https://argo-cd.readthedocs.io/en/stable/operator-manual/declarative-setup/#repositories) within ArgoCD.
+ *
+ * ## Example Usage
+ *
+ * ```typescript
+ * import * as pulumi from "@pulumi/pulumi";
+ * import * as argocd from "@three14/pulumi-argocd";
+ *
+ * // Public Helm repository
+ * const publicNginxHelm = new argocd.Repository("public_nginx_helm", {
+ *     repo: "https://helm.nginx.com/stable",
+ *     name: "nginx-stable",
+ *     type: "helm",
+ * });
+ * // Public Git repository
+ * const publicGit = new argocd.Repository("public_git", {repo: "git@github.com:user/somerepo.git"});
+ * // Private Git repository
+ * const _private = new argocd.Repository("private", {
+ *     repo: "git@private-git-repository.local:somerepo.git",
+ *     username: "git",
+ *     sshPrivateKey: `-----BEGIN OPENSSH PRIVATE KEY-----
+ * foo
+ * bar
+ * -----END OPENSSH PRIVATE KEY-----`,
+ *     insecure: true,
+ * });
+ * // Repository with proxy configuration
+ * const withProxy = new argocd.Repository("with_proxy", {
+ *     repo: "https://github.com/example/repo.git",
+ *     username: "git",
+ *     password: "my-token",
+ *     proxy: "http://proxy.example.com:8080",
+ *     noProxy: "*.internal.example.com,localhost",
+ * });
+ * // OCI repository (e.g., for Helm charts stored in OCI registries)
+ * const ociRegistry = new argocd.Repository("oci_registry", {
+ *     repo: "oci://ghcr.io/argoproj/argo-helm/argo-cd",
+ *     name: "argocd-oci",
+ *     type: "oci",
+ *     username: "my-username",
+ *     password: "my-token",
+ * });
+ * ```
+ *
+ * ## Import
+ *
+ * The `pulumi import` command can be used, for example:
+ *
+ * Repositories can be imported using the repository URL.
+ *
+ * Note: as the ArgoCD API does not return any sensitive information, a
+ * subsequent `pulumi up` should be executed to make the `password`,
+ * `sshPrivateKey` and `tlsClientCertKey` attributes converge to their
+ * expected values defined within the plan.
+ *
+ * ```sh
+ * $ pulumi import argocd:index/repository:Repository myrepo git@private-git-repository.local:somerepo.git
+ * ```
+ */
+class Repository extends pulumi.CustomResource {
+    /**
+     * Get an existing Repository resource's state with the given name, ID, and optional extra
+     * properties used to qualify the lookup.
+     *
+     * @param name The _unique_ name of the resulting resource.
+     * @param id The _unique_ provider ID of the resource to lookup.
+     * @param state Any extra arguments used during the lookup.
+     * @param opts Optional settings to control the behavior of the CustomResource.
+     */
+    static get(name, id, state, opts) {
+        return new Repository(name, state, { ...opts, id: id });
+    }
+    /**
+     * Returns true if the given object is an instance of Repository.  This is designed to work even
+     * when multiple copies of the Pulumi SDK have been loaded into the same process.
+     */
+    static isInstance(obj) {
+        if (obj === undefined || obj === null) {
+            return false;
+        }
+        return obj['__pulumiType'] === Repository.__pulumiType;
+    }
+    constructor(name, argsOrState, opts) {
+        let resourceInputs = {};
+        opts = opts || {};
+        if (opts.id) {
+            const state = argsOrState;
+            resourceInputs["bearerToken"] = state?.bearerToken;
+            resourceInputs["connectionStateStatus"] = state?.connectionStateStatus;
+            resourceInputs["enableLfs"] = state?.enableLfs;
+            resourceInputs["enableOci"] = state?.enableOci;
+            resourceInputs["githubappEnterpriseBaseUrl"] = state?.githubappEnterpriseBaseUrl;
+            resourceInputs["githubappId"] = state?.githubappId;
+            resourceInputs["githubappInstallationId"] = state?.githubappInstallationId;
+            resourceInputs["githubappPrivateKey"] = state?.githubappPrivateKey;
+            resourceInputs["inheritedCreds"] = state?.inheritedCreds;
+            resourceInputs["insecure"] = state?.insecure;
+            resourceInputs["name"] = state?.name;
+            resourceInputs["noProxy"] = state?.noProxy;
+            resourceInputs["password"] = state?.password;
+            resourceInputs["project"] = state?.project;
+            resourceInputs["proxy"] = state?.proxy;
+            resourceInputs["repo"] = state?.repo;
+            resourceInputs["sshPrivateKey"] = state?.sshPrivateKey;
+            resourceInputs["tlsClientCertData"] = state?.tlsClientCertData;
+            resourceInputs["tlsClientCertKey"] = state?.tlsClientCertKey;
+            resourceInputs["type"] = state?.type;
+            resourceInputs["useAzureWorkloadIdentity"] = state?.useAzureWorkloadIdentity;
+            resourceInputs["username"] = state?.username;
+        }
+        else {
+            const args = argsOrState;
+            if (args?.repo === undefined && !opts.urn) {
+                throw new Error("Missing required property 'repo'");
+            }
+            resourceInputs["bearerToken"] = args?.bearerToken ? pulumi.secret(args.bearerToken) : undefined;
+            resourceInputs["enableLfs"] = args?.enableLfs;
+            resourceInputs["enableOci"] = args?.enableOci;
+            resourceInputs["githubappEnterpriseBaseUrl"] = args?.githubappEnterpriseBaseUrl;
+            resourceInputs["githubappId"] = args?.githubappId;
+            resourceInputs["githubappInstallationId"] = args?.githubappInstallationId;
+            resourceInputs["githubappPrivateKey"] = args?.githubappPrivateKey ? pulumi.secret(args.githubappPrivateKey) : undefined;
+            resourceInputs["insecure"] = args?.insecure;
+            resourceInputs["name"] = args?.name;
+            resourceInputs["noProxy"] = args?.noProxy;
+            resourceInputs["password"] = args?.password ? pulumi.secret(args.password) : undefined;
+            resourceInputs["project"] = args?.project;
+            resourceInputs["proxy"] = args?.proxy;
+            resourceInputs["repo"] = args?.repo;
+            resourceInputs["sshPrivateKey"] = args?.sshPrivateKey ? pulumi.secret(args.sshPrivateKey) : undefined;
+            resourceInputs["tlsClientCertData"] = args?.tlsClientCertData;
+            resourceInputs["tlsClientCertKey"] = args?.tlsClientCertKey ? pulumi.secret(args.tlsClientCertKey) : undefined;
+            resourceInputs["type"] = args?.type;
+            resourceInputs["useAzureWorkloadIdentity"] = args?.useAzureWorkloadIdentity;
+            resourceInputs["username"] = args?.username;
+            resourceInputs["connectionStateStatus"] = undefined /*out*/;
+            resourceInputs["inheritedCreds"] = undefined /*out*/;
+        }
+        opts = pulumi.mergeOptions(utilities.resourceOptsDefaults(), opts);
+        const secretOpts = { additionalSecretOutputs: ["bearerToken", "githubappPrivateKey", "password", "sshPrivateKey", "tlsClientCertKey"] };
+        opts = pulumi.mergeOptions(opts, secretOpts);
+        super(Repository.__pulumiType, name, resourceInputs, opts);
+    }
+}
+exports.Repository = Repository;
+/** @internal */
+Repository.__pulumiType = 'argocd:index/repository:Repository';
+//# sourceMappingURL=repository.js.map

package/repository.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"repository.js","sourceRoot":"","sources":["../repository.ts"],"names":[],"mappings":";AAAA,sEAAsE;AACtE,iFAAiF;;;AAEjF,yCAAyC;AACzC,yCAAyC;AAEzC;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;GA2DG;AACH,MAAa,UAAW,SAAQ,MAAM,CAAC,cAAc;IACjD;;;;;;;;OAQG;IACI,MAAM,CAAC,GAAG,CAAC,IAAY,EAAE,EAA2B,EAAE,KAAuB,EAAE,IAAmC;QACrH,OAAO,IAAI,UAAU,CAAC,IAAI,EAAO,KAAK,EAAE,EAAE,GAAG,IAAI,EAAE,EAAE,EAAE,EAAE,EAAE,CAAC,CAAC;IACjE,CAAC;IAKD;;;OAGG;IACI,MAAM,CAAC,UAAU,CAAC,GAAQ;QAC7B,IAAI,GAAG,KAAK,SAAS,IAAI,GAAG,KAAK,IAAI,EAAE;YACnC,OAAO,KAAK,CAAC;SAChB;QACD,OAAO,GAAG,CAAC,cAAc,CAAC,KAAK,UAAU,CAAC,YAAY,CAAC;IAC3D,CAAC;IAmGD,YAAY,IAAY,EAAE,WAA8C,EAAE,IAAmC;QACzG,IAAI,cAAc,GAAkB,EAAE,CAAC;QACvC,IAAI,GAAG,IAAI,IAAI,EAAE,CAAC;QAClB,IAAI,IAAI,CAAC,EAAE,EAAE;YACT,MAAM,KAAK,GAAG,WAA0C,CAAC;YACzD,cAAc,CAAC,aAAa,CAAC,GAAG,KAAK,EAAE,WAAW,CAAC;YACnD,cAAc,CAAC,uBAAuB,CAAC,GAAG,KAAK,EAAE,qBAAqB,CAAC;YACvE,cAAc,CAAC,WAAW,CAAC,GAAG,KAAK,EAAE,SAAS,CAAC;YAC/C,cAAc,CAAC,WAAW,CAAC,GAAG,KAAK,EAAE,SAAS,CAAC;YAC/C,cAAc,CAAC,4BAA4B,CAAC,GAAG,KAAK,EAAE,0BAA0B,CAAC;YACjF,cAAc,CAAC,aAAa,CAAC,GAAG,KAAK,EAAE,WAAW,CAAC;YACnD,cAAc,CAAC,yBAAyB,CAAC,GAAG,KAAK,EAAE,uBAAuB,CAAC;YAC3E,cAAc,CAAC,qBAAqB,CAAC,GAAG,KAAK,EAAE,mBAAmB,CAAC;YACnE,cAAc,CAAC,gBAAgB,CAAC,GAAG,KAAK,EAAE,cAAc,CAAC;YACzD,cAAc,CAAC,UAAU,CAAC,GAAG,KAAK,EAAE,QAAQ,CAAC;YAC7C,cAAc,CAAC,MAAM,CAAC,GAAG,KAAK,EAAE,IAAI,CAAC;YACrC,cAAc,CAAC,SAAS,CAAC,GAAG,KAAK,EAAE,OAAO,CAAC;YAC3C,cAAc,CAAC,UAAU,CAAC,GAAG,KAAK,EAAE,QAAQ,CAAC;YAC7C,cAAc,CAAC,SAAS,CAAC,GAAG,KAAK,EAAE,OAAO,CAAC;YAC3C,cAAc,CAAC,OAAO,CAAC,GAAG,KAAK,EAAE,KAAK,CAAC;YACvC,cAAc,CAAC,MAAM,CAAC,GAAG,KAAK,EAAE,IAAI,CAAC;YACrC,cAAc,CAAC,eAAe,CAAC,GAAG,KAAK,EAAE,aAAa,CAAC;YACvD,cAAc,CAAC,mBAAmB,CAAC,GAAG,KAAK,EAAE,iBAAiB,CAAC;YAC/D,cAAc,CAAC,kBAAkB,CAAC,GAAG,KAAK,EAAE,gBAAgB,CAAC;YAC7D,cAAc,CAAC,MAAM,CAAC,GAAG,KAAK,EAAE,IAAI,CAAC;YACrC,cAAc,CAAC,0BAA0B,CAAC,GAAG,KAAK,EAAE,wBAAwB,CAAC;YAC7E,cAAc,CAAC,UAAU,CAAC,GAAG,KAAK,EAAE,QAAQ,CAAC;SAChD;aAAM;YACH,MAAM,IAAI,GAAG,WAAyC,CAAC;YACvD,IAAI,IAAI,EAAE,IAAI,KAAK,SAAS,IAAI,CAAC,IAAI,CAAC,GAAG,EAAE;gBACvC,MAAM,IAAI,KAAK,CAAC,kCAAkC,CAAC,CAAC;aACvD;YACD,cAAc,CAAC,aAAa,CAAC,GAAG,IAAI,EAAE,WAAW,CAAC,CAAC,CAAC,MAAM,CAAC,MAAM,CAAC,IAAI,CAAC,WAAW,CAAC,CAAC,CAAC,CAAC,SAAS,CAAC;YAChG,cAAc,CAAC,WAAW,CAAC,GAAG,IAAI,EAAE,SAAS,CAAC;YAC9C,cAAc,CAAC,WAAW,CAAC,GAAG,IAAI,EAAE,SAAS,CAAC;YAC9C,cAAc,CAAC,4BAA4B,CAAC,GAAG,IAAI,EAAE,0BAA0B,CAAC;YAChF,cAAc,CAAC,aAAa,CAAC,GAAG,IAAI,EAAE,WAAW,CAAC;YAClD,cAAc,CAAC,yBAAyB,CAAC,GAAG,IAAI,EAAE,uBAAuB,CAAC;YAC1E,cAAc,CAAC,qBAAqB,CAAC,GAAG,IAAI,EAAE,mBAAmB,CAAC,CAAC,CAAC,MAAM,CAAC,MAAM,CAAC,IAAI,CAAC,mBAAmB,CAAC,CAAC,CAAC,CAAC,SAAS,CAAC;YACxH,cAAc,CAAC,UAAU,CAAC,GAAG,IAAI,EAAE,QAAQ,CAAC;YAC5C,cAAc,CAAC,MAAM,CAAC,GAAG,IAAI,EAAE,IAAI,CAAC;YACpC,cAAc,CAAC,SAAS,CAAC,GAAG,IAAI,EAAE,OAAO,CAAC;YAC1C,cAAc,CAAC,UAAU,CAAC,GAAG,IAAI,EAAE,QAAQ,CAAC,CAAC,CAAC,MAAM,CAAC,MAAM,CAAC,IAAI,CAAC,QAAQ,CAAC,CAAC,CAAC,CAAC,SAAS,CAAC;YACvF,cAAc,CAAC,SAAS,CAAC,GAAG,IAAI,EAAE,OAAO,CAAC;YAC1C,cAAc,CAAC,OAAO,CAAC,GAAG,IAAI,EAAE,KAAK,CAAC;YACtC,cAAc,CAAC,MAAM,CAAC,GAAG,IAAI,EAAE,IAAI,CAAC;YACpC,cAAc,CAAC,eAAe,CAAC,GAAG,IAAI,EAAE,aAAa,CAAC,CAAC,CAAC,MAAM,CAAC,MAAM,CAAC,IAAI,CAAC,aAAa,CAAC,CAAC,CAAC,CAAC,SAAS,CAAC;YACtG,cAAc,CAAC,mBAAmB,CAAC,GAAG,IAAI,EAAE,iBAAiB,CAAC;YAC9D,cAAc,CAAC,kBAAkB,CAAC,GAAG,IAAI,EAAE,gBAAgB,CAAC,CAAC,CAAC,MAAM,CAAC,MAAM,CAAC,IAAI,CAAC,gBAAgB,CAAC,CAAC,CAAC,CAAC,SAAS,CAAC;YAC/G,cAAc,CAAC,MAAM,CAAC,GAAG,IAAI,EAAE,IAAI,CAAC;YACpC,cAAc,CAAC,0BAA0B,CAAC,GAAG,IAAI,EAAE,wBAAwB,CAAC;YAC5E,cAAc,CAAC,UAAU,CAAC,GAAG,IAAI,EAAE,QAAQ,CAAC;YAC5C,cAAc,CAAC,uBAAuB,CAAC,GAAG,SAAS,CAAC,OAAO,CAAC;YAC5D,cAAc,CAAC,gBAAgB,CAAC,GAAG,SAAS,CAAC,OAAO,CAAC;SACxD;QACD,IAAI,GAAG,MAAM,CAAC,YAAY,CAAC,SAAS,CAAC,oBAAoB,EAAE,EAAE,IAAI,CAAC,CAAC;QACnE,MAAM,UAAU,GAAG,EAAE,uBAAuB,EAAE,CAAC,aAAa,EAAE,qBAAqB,EAAE,UAAU,EAAE,eAAe,EAAE,kBAAkB,CAAC,EAAE,CAAC;QACxI,IAAI,GAAG,MAAM,CAAC,YAAY,CAAC,IAAI,EAAE,UAAU,CAAC,CAAC;QAC7C,KAAK,CAAC,UAAU,CAAC,YAAY,EAAE,IAAI,EAAE,cAAc,EAAE,IAAI,CAAC,CAAC;IAC/D,CAAC;;AAxLL,gCAyLC;AA3KG,gBAAgB;AACO,uBAAY,GAAG,oCAAoC,CAAC"}

package/repositoryCertificate.d.ts

@@ -0,0 +1,84 @@
+import * as pulumi from "@pulumi/pulumi";
+import * as inputs from "./types/input";
+import * as outputs from "./types/output";
+/**
+ * Manages [custom TLS certificates](https://argo-cd.readthedocs.io/en/stable/user-guide/private-repositories/#self-signed-untrusted-tls-certificates) used by ArgoCD for connecting Git repositories.
+ *
+ * ## Example Usage
+ *
+ * ```typescript
+ * import * as pulumi from "@pulumi/pulumi";
+ * import * as argocd from "@three14/pulumi-argocd";
+ *
+ * // HTTPS certificate
+ * const private_git_repository_https = new argocd.RepositoryCertificate("private-git-repository-https", {https: [{
+ *     serverName: "private-git-repository.local",
+ *     certData: "-----BEGIN CERTIFICATE-----\\nfoo\\nbar\\n-----END CERTIFICATE-----\n",
+ * }]});
+ * // SSH certificate
+ * const private_git_repository_ssh = new argocd.RepositoryCertificate("private-git-repository-ssh", {sshes: [{
+ *     serverName: "private-git-repository.local",
+ *     certSubtype: "ssh-rsa",
+ *     certData: "AAAAB3NzaC1yc2EAAAADAQABAAABgQCiPZAufKgxwRgxP9qy2Gtub0FI8qJGtL8Ldb7KatBeRUQQPn8QK7ZYjzYDvP1GOutFMaQT0rKIqaGImIBsztNCno...\n",
+ * }]});
+ * ```
+ */
+export declare class RepositoryCertificate extends pulumi.CustomResource {
+    /**
+     * Get an existing RepositoryCertificate resource's state with the given name, ID, and optional extra
+     * properties used to qualify the lookup.
+     *
+     * @param name The _unique_ name of the resulting resource.
+     * @param id The _unique_ provider ID of the resource to lookup.
+     * @param state Any extra arguments used during the lookup.
+     * @param opts Optional settings to control the behavior of the CustomResource.
+     */
+    static get(name: string, id: pulumi.Input<pulumi.ID>, state?: RepositoryCertificateState, opts?: pulumi.CustomResourceOptions): RepositoryCertificate;
+    /**
+     * Returns true if the given object is an instance of RepositoryCertificate.  This is designed to work even
+     * when multiple copies of the Pulumi SDK have been loaded into the same process.
+     */
+    static isInstance(obj: any): obj is RepositoryCertificate;
+    /**
+     * HTTPS certificate configuration
+     */
+    readonly https: pulumi.Output<outputs.RepositoryCertificateHttp[] | undefined>;
+    /**
+     * SSH certificate configuration
+     */
+    readonly sshes: pulumi.Output<outputs.RepositoryCertificateSsh[] | undefined>;
+    /**
+     * Create a RepositoryCertificate resource with the given unique name, arguments, and options.
+     *
+     * @param name The _unique_ name of the resource.
+     * @param args The arguments to use to populate this resource's properties.
+     * @param opts A bag of options that control this resource's behavior.
+     */
+    constructor(name: string, args?: RepositoryCertificateArgs, opts?: pulumi.CustomResourceOptions);
+}
+/**
+ * Input properties used for looking up and filtering RepositoryCertificate resources.
+ */
+export interface RepositoryCertificateState {
+    /**
+     * HTTPS certificate configuration
+     */
+    https?: pulumi.Input<pulumi.Input<inputs.RepositoryCertificateHttp>[]>;
+    /**
+     * SSH certificate configuration
+     */
+    sshes?: pulumi.Input<pulumi.Input<inputs.RepositoryCertificateSsh>[]>;
+}
+/**
+ * The set of arguments for constructing a RepositoryCertificate resource.
+ */
+export interface RepositoryCertificateArgs {
+    /**
+     * HTTPS certificate configuration
+     */
+    https?: pulumi.Input<pulumi.Input<inputs.RepositoryCertificateHttp>[]>;
+    /**
+     * SSH certificate configuration
+     */
+    sshes?: pulumi.Input<pulumi.Input<inputs.RepositoryCertificateSsh>[]>;
+}

package/repositoryCertificate.js

@@ -0,0 +1,73 @@
+"use strict";
+// *** WARNING: this file was generated by pulumi-language-nodejs. ***
+// *** Do not edit by hand unless you're certain you know what you are doing! ***
+Object.defineProperty(exports, "__esModule", { value: true });
+exports.RepositoryCertificate = void 0;
+const pulumi = require("@pulumi/pulumi");
+const utilities = require("./utilities");
+/**
+ * Manages [custom TLS certificates](https://argo-cd.readthedocs.io/en/stable/user-guide/private-repositories/#self-signed-untrusted-tls-certificates) used by ArgoCD for connecting Git repositories.
+ *
+ * ## Example Usage
+ *
+ * ```typescript
+ * import * as pulumi from "@pulumi/pulumi";
+ * import * as argocd from "@three14/pulumi-argocd";
+ *
+ * // HTTPS certificate
+ * const private_git_repository_https = new argocd.RepositoryCertificate("private-git-repository-https", {https: [{
+ *     serverName: "private-git-repository.local",
+ *     certData: "-----BEGIN CERTIFICATE-----\\nfoo\\nbar\\n-----END CERTIFICATE-----\n",
+ * }]});
+ * // SSH certificate
+ * const private_git_repository_ssh = new argocd.RepositoryCertificate("private-git-repository-ssh", {sshes: [{
+ *     serverName: "private-git-repository.local",
+ *     certSubtype: "ssh-rsa",
+ *     certData: "AAAAB3NzaC1yc2EAAAADAQABAAABgQCiPZAufKgxwRgxP9qy2Gtub0FI8qJGtL8Ldb7KatBeRUQQPn8QK7ZYjzYDvP1GOutFMaQT0rKIqaGImIBsztNCno...\n",
+ * }]});
+ * ```
+ */
+class RepositoryCertificate extends pulumi.CustomResource {
+    /**
+     * Get an existing RepositoryCertificate resource's state with the given name, ID, and optional extra
+     * properties used to qualify the lookup.
+     *
+     * @param name The _unique_ name of the resulting resource.
+     * @param id The _unique_ provider ID of the resource to lookup.
+     * @param state Any extra arguments used during the lookup.
+     * @param opts Optional settings to control the behavior of the CustomResource.
+     */
+    static get(name, id, state, opts) {
+        return new RepositoryCertificate(name, state, { ...opts, id: id });
+    }
+    /**
+     * Returns true if the given object is an instance of RepositoryCertificate.  This is designed to work even
+     * when multiple copies of the Pulumi SDK have been loaded into the same process.
+     */
+    static isInstance(obj) {
+        if (obj === undefined || obj === null) {
+            return false;
+        }
+        return obj['__pulumiType'] === RepositoryCertificate.__pulumiType;
+    }
+    constructor(name, argsOrState, opts) {
+        let resourceInputs = {};
+        opts = opts || {};
+        if (opts.id) {
+            const state = argsOrState;
+            resourceInputs["https"] = state?.https;
+            resourceInputs["sshes"] = state?.sshes;
+        }
+        else {
+            const args = argsOrState;
+            resourceInputs["https"] = args?.https;
+            resourceInputs["sshes"] = args?.sshes;
+        }
+        opts = pulumi.mergeOptions(utilities.resourceOptsDefaults(), opts);
+        super(RepositoryCertificate.__pulumiType, name, resourceInputs, opts);
+    }
+}
+exports.RepositoryCertificate = RepositoryCertificate;
+/** @internal */
+RepositoryCertificate.__pulumiType = 'argocd:index/repositoryCertificate:RepositoryCertificate';
+//# sourceMappingURL=repositoryCertificate.js.map

package/repositoryCertificate.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"repositoryCertificate.js","sourceRoot":"","sources":["../repositoryCertificate.ts"],"names":[],"mappings":";AAAA,sEAAsE;AACtE,iFAAiF;;;AAEjF,yCAAyC;AAGzC,yCAAyC;AAEzC;;;;;;;;;;;;;;;;;;;;;GAqBG;AACH,MAAa,qBAAsB,SAAQ,MAAM,CAAC,cAAc;IAC5D;;;;;;;;OAQG;IACI,MAAM,CAAC,GAAG,CAAC,IAAY,EAAE,EAA2B,EAAE,KAAkC,EAAE,IAAmC;QAChI,OAAO,IAAI,qBAAqB,CAAC,IAAI,EAAO,KAAK,EAAE,EAAE,GAAG,IAAI,EAAE,EAAE,EAAE,EAAE,EAAE,CAAC,CAAC;IAC5E,CAAC;IAKD;;;OAGG;IACI,MAAM,CAAC,UAAU,CAAC,GAAQ;QAC7B,IAAI,GAAG,KAAK,SAAS,IAAI,GAAG,KAAK,IAAI,EAAE;YACnC,OAAO,KAAK,CAAC;SAChB;QACD,OAAO,GAAG,CAAC,cAAc,CAAC,KAAK,qBAAqB,CAAC,YAAY,CAAC;IACtE,CAAC;IAmBD,YAAY,IAAY,EAAE,WAAoE,EAAE,IAAmC;QAC/H,IAAI,cAAc,GAAkB,EAAE,CAAC;QACvC,IAAI,GAAG,IAAI,IAAI,EAAE,CAAC;QAClB,IAAI,IAAI,CAAC,EAAE,EAAE;YACT,MAAM,KAAK,GAAG,WAAqD,CAAC;YACpE,cAAc,CAAC,OAAO,CAAC,GAAG,KAAK,EAAE,KAAK,CAAC;YACvC,cAAc,CAAC,OAAO,CAAC,GAAG,KAAK,EAAE,KAAK,CAAC;SAC1C;aAAM;YACH,MAAM,IAAI,GAAG,WAAoD,CAAC;YAClE,cAAc,CAAC,OAAO,CAAC,GAAG,IAAI,EAAE,KAAK,CAAC;YACtC,cAAc,CAAC,OAAO,CAAC,GAAG,IAAI,EAAE,KAAK,CAAC;SACzC;QACD,IAAI,GAAG,MAAM,CAAC,YAAY,CAAC,SAAS,CAAC,oBAAoB,EAAE,EAAE,IAAI,CAAC,CAAC;QACnE,KAAK,CAAC,qBAAqB,CAAC,YAAY,EAAE,IAAI,EAAE,cAAc,EAAE,IAAI,CAAC,CAAC;IAC1E,CAAC;;AA3DL,sDA4DC;AA9CG,gBAAgB;AACO,kCAAY,GAAG,0DAA0D,CAAC"}