@three14/pulumi-argocd 1.1.0 → 1.1.1

package/repositoryCredentials.d.ts

@@ -0,0 +1,228 @@
+import * as pulumi from "@pulumi/pulumi";
+/**
+ * Manages [repository credentials](https://argo-cd.readthedocs.io/en/stable/user-guide/private-repositories/#credentials) within ArgoCD.
+ *
+ * **Note**: due to restrictions in the ArgoCD API the provider is unable to track drift in this resource to fields other than `username`. I.e. the provider is unable to detect changes to repository credentials that are made outside of Pulumi (e.g. manual updates to the underlying Kubernetes Secrets).
+ *
+ * ## Example Usage
+ *
+ * ```typescript
+ * import * as pulumi from "@pulumi/pulumi";
+ * import * as argocd from "@three14/pulumi-argocd";
+ *
+ * const _private = new argocd.RepositoryCredentials("private", {
+ *     url: "git@private-git-repository.local",
+ *     username: "git",
+ *     sshPrivateKey: `-----BEGIN OPENSSH PRIVATE KEY-----
+ * foo
+ * bar
+ * -----END OPENSSH PRIVATE KEY-----`,
+ * });
+ * ```
+ *
+ * ## Import
+ *
+ * The `pulumi import` command can be used, for example:
+ *
+ * Repository credentials can be imported using the repository URL.
+ *
+ * Note: as the ArgoCD API does not return any sensitive information, a
+ * subsequent `pulumi up` should be executed to make the `password`,
+ * `sshPrivateKey` and `tlsClientCertKey` attributes converge to their
+ * expected values defined within the plan.
+ *
+ * ```sh
+ * $ pulumi import argocd:index/repositoryCredentials:RepositoryCredentials myrepocreds git@private-git-repository.local:somerepo.git
+ * ```
+ */
+export declare class RepositoryCredentials extends pulumi.CustomResource {
+    /**
+     * Get an existing RepositoryCredentials resource's state with the given name, ID, and optional extra
+     * properties used to qualify the lookup.
+     *
+     * @param name The _unique_ name of the resulting resource.
+     * @param id The _unique_ provider ID of the resource to lookup.
+     * @param state Any extra arguments used during the lookup.
+     * @param opts Optional settings to control the behavior of the CustomResource.
+     */
+    static get(name: string, id: pulumi.Input<pulumi.ID>, state?: RepositoryCredentialsState, opts?: pulumi.CustomResourceOptions): RepositoryCredentials;
+    /**
+     * Returns true if the given object is an instance of RepositoryCredentials.  This is designed to work even
+     * when multiple copies of the Pulumi SDK have been loaded into the same process.
+     */
+    static isInstance(obj: any): obj is RepositoryCredentials;
+    /**
+     * Whether `helm-oci` support should be enabled for this repo. Can only be set to `true` when `type` is `helm`.
+     */
+    readonly enableOci: pulumi.Output<boolean>;
+    /**
+     * GitHub API URL for GitHub app authentication
+     */
+    readonly githubappEnterpriseBaseUrl: pulumi.Output<string | undefined>;
+    /**
+     * GitHub App ID of the app used to access the repo for GitHub app authentication
+     */
+    readonly githubappId: pulumi.Output<string | undefined>;
+    /**
+     * ID of the installed GitHub App for GitHub app authentication
+     */
+    readonly githubappInstallationId: pulumi.Output<string | undefined>;
+    /**
+     * Private key data (PEM) for authentication via GitHub app
+     */
+    readonly githubappPrivateKey: pulumi.Output<string | undefined>;
+    /**
+     * Password for authenticating at the repo server
+     */
+    readonly password: pulumi.Output<string | undefined>;
+    /**
+     * Private key data for authenticating at the repo server using SSH (only Git repos)
+     */
+    readonly sshPrivateKey: pulumi.Output<string | undefined>;
+    /**
+     * TLS client cert data for authenticating at the repo server
+     */
+    readonly tlsClientCertData: pulumi.Output<string | undefined>;
+    /**
+     * TLS client cert key for authenticating at the repo server
+     */
+    readonly tlsClientCertKey: pulumi.Output<string | undefined>;
+    /**
+     * Type of the repository credentials. Can be either `git`, `oci` or `helm`. `git` is assumed if empty or absent.
+     */
+    readonly type: pulumi.Output<string>;
+    /**
+     * URL that these credentials match to
+     */
+    readonly url: pulumi.Output<string>;
+    /**
+     * Whether `Azure-Workload-identity` should be enabled for this repository.
+     */
+    readonly useAzureWorkloadIdentity: pulumi.Output<boolean>;
+    /**
+     * Username for authenticating at the repo server
+     */
+    readonly username: pulumi.Output<string | undefined>;
+    /**
+     * Create a RepositoryCredentials resource with the given unique name, arguments, and options.
+     *
+     * @param name The _unique_ name of the resource.
+     * @param args The arguments to use to populate this resource's properties.
+     * @param opts A bag of options that control this resource's behavior.
+     */
+    constructor(name: string, args: RepositoryCredentialsArgs, opts?: pulumi.CustomResourceOptions);
+}
+/**
+ * Input properties used for looking up and filtering RepositoryCredentials resources.
+ */
+export interface RepositoryCredentialsState {
+    /**
+     * Whether `helm-oci` support should be enabled for this repo. Can only be set to `true` when `type` is `helm`.
+     */
+    enableOci?: pulumi.Input<boolean>;
+    /**
+     * GitHub API URL for GitHub app authentication
+     */
+    githubappEnterpriseBaseUrl?: pulumi.Input<string>;
+    /**
+     * GitHub App ID of the app used to access the repo for GitHub app authentication
+     */
+    githubappId?: pulumi.Input<string>;
+    /**
+     * ID of the installed GitHub App for GitHub app authentication
+     */
+    githubappInstallationId?: pulumi.Input<string>;
+    /**
+     * Private key data (PEM) for authentication via GitHub app
+     */
+    githubappPrivateKey?: pulumi.Input<string>;
+    /**
+     * Password for authenticating at the repo server
+     */
+    password?: pulumi.Input<string>;
+    /**
+     * Private key data for authenticating at the repo server using SSH (only Git repos)
+     */
+    sshPrivateKey?: pulumi.Input<string>;
+    /**
+     * TLS client cert data for authenticating at the repo server
+     */
+    tlsClientCertData?: pulumi.Input<string>;
+    /**
+     * TLS client cert key for authenticating at the repo server
+     */
+    tlsClientCertKey?: pulumi.Input<string>;
+    /**
+     * Type of the repository credentials. Can be either `git`, `oci` or `helm`. `git` is assumed if empty or absent.
+     */
+    type?: pulumi.Input<string>;
+    /**
+     * URL that these credentials match to
+     */
+    url?: pulumi.Input<string>;
+    /**
+     * Whether `Azure-Workload-identity` should be enabled for this repository.
+     */
+    useAzureWorkloadIdentity?: pulumi.Input<boolean>;
+    /**
+     * Username for authenticating at the repo server
+     */
+    username?: pulumi.Input<string>;
+}
+/**
+ * The set of arguments for constructing a RepositoryCredentials resource.
+ */
+export interface RepositoryCredentialsArgs {
+    /**
+     * Whether `helm-oci` support should be enabled for this repo. Can only be set to `true` when `type` is `helm`.
+     */
+    enableOci?: pulumi.Input<boolean>;
+    /**
+     * GitHub API URL for GitHub app authentication
+     */
+    githubappEnterpriseBaseUrl?: pulumi.Input<string>;
+    /**
+     * GitHub App ID of the app used to access the repo for GitHub app authentication
+     */
+    githubappId?: pulumi.Input<string>;
+    /**
+     * ID of the installed GitHub App for GitHub app authentication
+     */
+    githubappInstallationId?: pulumi.Input<string>;
+    /**
+     * Private key data (PEM) for authentication via GitHub app
+     */
+    githubappPrivateKey?: pulumi.Input<string>;
+    /**
+     * Password for authenticating at the repo server
+     */
+    password?: pulumi.Input<string>;
+    /**
+     * Private key data for authenticating at the repo server using SSH (only Git repos)
+     */
+    sshPrivateKey?: pulumi.Input<string>;
+    /**
+     * TLS client cert data for authenticating at the repo server
+     */
+    tlsClientCertData?: pulumi.Input<string>;
+    /**
+     * TLS client cert key for authenticating at the repo server
+     */
+    tlsClientCertKey?: pulumi.Input<string>;
+    /**
+     * Type of the repository credentials. Can be either `git`, `oci` or `helm`. `git` is assumed if empty or absent.
+     */
+    type?: pulumi.Input<string>;
+    /**
+     * URL that these credentials match to
+     */
+    url: pulumi.Input<string>;
+    /**
+     * Whether `Azure-Workload-identity` should be enabled for this repository.
+     */
+    useAzureWorkloadIdentity?: pulumi.Input<boolean>;
+    /**
+     * Username for authenticating at the repo server
+     */
+    username?: pulumi.Input<string>;
+}

package/repositoryCredentials.js

@@ -0,0 +1,114 @@
+"use strict";
+// *** WARNING: this file was generated by pulumi-language-nodejs. ***
+// *** Do not edit by hand unless you're certain you know what you are doing! ***
+Object.defineProperty(exports, "__esModule", { value: true });
+exports.RepositoryCredentials = void 0;
+const pulumi = require("@pulumi/pulumi");
+const utilities = require("./utilities");
+/**
+ * Manages [repository credentials](https://argo-cd.readthedocs.io/en/stable/user-guide/private-repositories/#credentials) within ArgoCD.
+ *
+ * **Note**: due to restrictions in the ArgoCD API the provider is unable to track drift in this resource to fields other than `username`. I.e. the provider is unable to detect changes to repository credentials that are made outside of Pulumi (e.g. manual updates to the underlying Kubernetes Secrets).
+ *
+ * ## Example Usage
+ *
+ * ```typescript
+ * import * as pulumi from "@pulumi/pulumi";
+ * import * as argocd from "@three14/pulumi-argocd";
+ *
+ * const _private = new argocd.RepositoryCredentials("private", {
+ *     url: "git@private-git-repository.local",
+ *     username: "git",
+ *     sshPrivateKey: `-----BEGIN OPENSSH PRIVATE KEY-----
+ * foo
+ * bar
+ * -----END OPENSSH PRIVATE KEY-----`,
+ * });
+ * ```
+ *
+ * ## Import
+ *
+ * The `pulumi import` command can be used, for example:
+ *
+ * Repository credentials can be imported using the repository URL.
+ *
+ * Note: as the ArgoCD API does not return any sensitive information, a
+ * subsequent `pulumi up` should be executed to make the `password`,
+ * `sshPrivateKey` and `tlsClientCertKey` attributes converge to their
+ * expected values defined within the plan.
+ *
+ * ```sh
+ * $ pulumi import argocd:index/repositoryCredentials:RepositoryCredentials myrepocreds git@private-git-repository.local:somerepo.git
+ * ```
+ */
+class RepositoryCredentials extends pulumi.CustomResource {
+    /**
+     * Get an existing RepositoryCredentials resource's state with the given name, ID, and optional extra
+     * properties used to qualify the lookup.
+     *
+     * @param name The _unique_ name of the resulting resource.
+     * @param id The _unique_ provider ID of the resource to lookup.
+     * @param state Any extra arguments used during the lookup.
+     * @param opts Optional settings to control the behavior of the CustomResource.
+     */
+    static get(name, id, state, opts) {
+        return new RepositoryCredentials(name, state, { ...opts, id: id });
+    }
+    /**
+     * Returns true if the given object is an instance of RepositoryCredentials.  This is designed to work even
+     * when multiple copies of the Pulumi SDK have been loaded into the same process.
+     */
+    static isInstance(obj) {
+        if (obj === undefined || obj === null) {
+            return false;
+        }
+        return obj['__pulumiType'] === RepositoryCredentials.__pulumiType;
+    }
+    constructor(name, argsOrState, opts) {
+        let resourceInputs = {};
+        opts = opts || {};
+        if (opts.id) {
+            const state = argsOrState;
+            resourceInputs["enableOci"] = state?.enableOci;
+            resourceInputs["githubappEnterpriseBaseUrl"] = state?.githubappEnterpriseBaseUrl;
+            resourceInputs["githubappId"] = state?.githubappId;
+            resourceInputs["githubappInstallationId"] = state?.githubappInstallationId;
+            resourceInputs["githubappPrivateKey"] = state?.githubappPrivateKey;
+            resourceInputs["password"] = state?.password;
+            resourceInputs["sshPrivateKey"] = state?.sshPrivateKey;
+            resourceInputs["tlsClientCertData"] = state?.tlsClientCertData;
+            resourceInputs["tlsClientCertKey"] = state?.tlsClientCertKey;
+            resourceInputs["type"] = state?.type;
+            resourceInputs["url"] = state?.url;
+            resourceInputs["useAzureWorkloadIdentity"] = state?.useAzureWorkloadIdentity;
+            resourceInputs["username"] = state?.username;
+        }
+        else {
+            const args = argsOrState;
+            if (args?.url === undefined && !opts.urn) {
+                throw new Error("Missing required property 'url'");
+            }
+            resourceInputs["enableOci"] = args?.enableOci;
+            resourceInputs["githubappEnterpriseBaseUrl"] = args?.githubappEnterpriseBaseUrl;
+            resourceInputs["githubappId"] = args?.githubappId;
+            resourceInputs["githubappInstallationId"] = args?.githubappInstallationId;
+            resourceInputs["githubappPrivateKey"] = args?.githubappPrivateKey ? pulumi.secret(args.githubappPrivateKey) : undefined;
+            resourceInputs["password"] = args?.password ? pulumi.secret(args.password) : undefined;
+            resourceInputs["sshPrivateKey"] = args?.sshPrivateKey ? pulumi.secret(args.sshPrivateKey) : undefined;
+            resourceInputs["tlsClientCertData"] = args?.tlsClientCertData;
+            resourceInputs["tlsClientCertKey"] = args?.tlsClientCertKey ? pulumi.secret(args.tlsClientCertKey) : undefined;
+            resourceInputs["type"] = args?.type;
+            resourceInputs["url"] = args?.url;
+            resourceInputs["useAzureWorkloadIdentity"] = args?.useAzureWorkloadIdentity;
+            resourceInputs["username"] = args?.username;
+        }
+        opts = pulumi.mergeOptions(utilities.resourceOptsDefaults(), opts);
+        const secretOpts = { additionalSecretOutputs: ["githubappPrivateKey", "password", "sshPrivateKey", "tlsClientCertKey"] };
+        opts = pulumi.mergeOptions(opts, secretOpts);
+        super(RepositoryCredentials.__pulumiType, name, resourceInputs, opts);
+    }
+}
+exports.RepositoryCredentials = RepositoryCredentials;
+/** @internal */
+RepositoryCredentials.__pulumiType = 'argocd:index/repositoryCredentials:RepositoryCredentials';
+//# sourceMappingURL=repositoryCredentials.js.map

package/repositoryCredentials.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"repositoryCredentials.js","sourceRoot":"","sources":["../repositoryCredentials.ts"],"names":[],"mappings":";AAAA,sEAAsE;AACtE,iFAAiF;;;AAEjF,yCAAyC;AACzC,yCAAyC;AAEzC;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;GAmCG;AACH,MAAa,qBAAsB,SAAQ,MAAM,CAAC,cAAc;IAC5D;;;;;;;;OAQG;IACI,MAAM,CAAC,GAAG,CAAC,IAAY,EAAE,EAA2B,EAAE,KAAkC,EAAE,IAAmC;QAChI,OAAO,IAAI,qBAAqB,CAAC,IAAI,EAAO,KAAK,EAAE,EAAE,GAAG,IAAI,EAAE,EAAE,EAAE,EAAE,EAAE,CAAC,CAAC;IAC5E,CAAC;IAKD;;;OAGG;IACI,MAAM,CAAC,UAAU,CAAC,GAAQ;QAC7B,IAAI,GAAG,KAAK,SAAS,IAAI,GAAG,KAAK,IAAI,EAAE;YACnC,OAAO,KAAK,CAAC;SAChB;QACD,OAAO,GAAG,CAAC,cAAc,CAAC,KAAK,qBAAqB,CAAC,YAAY,CAAC;IACtE,CAAC;IA+DD,YAAY,IAAY,EAAE,WAAoE,EAAE,IAAmC;QAC/H,IAAI,cAAc,GAAkB,EAAE,CAAC;QACvC,IAAI,GAAG,IAAI,IAAI,EAAE,CAAC;QAClB,IAAI,IAAI,CAAC,EAAE,EAAE;YACT,MAAM,KAAK,GAAG,WAAqD,CAAC;YACpE,cAAc,CAAC,WAAW,CAAC,GAAG,KAAK,EAAE,SAAS,CAAC;YAC/C,cAAc,CAAC,4BAA4B,CAAC,GAAG,KAAK,EAAE,0BAA0B,CAAC;YACjF,cAAc,CAAC,aAAa,CAAC,GAAG,KAAK,EAAE,WAAW,CAAC;YACnD,cAAc,CAAC,yBAAyB,CAAC,GAAG,KAAK,EAAE,uBAAuB,CAAC;YAC3E,cAAc,CAAC,qBAAqB,CAAC,GAAG,KAAK,EAAE,mBAAmB,CAAC;YACnE,cAAc,CAAC,UAAU,CAAC,GAAG,KAAK,EAAE,QAAQ,CAAC;YAC7C,cAAc,CAAC,eAAe,CAAC,GAAG,KAAK,EAAE,aAAa,CAAC;YACvD,cAAc,CAAC,mBAAmB,CAAC,GAAG,KAAK,EAAE,iBAAiB,CAAC;YAC/D,cAAc,CAAC,kBAAkB,CAAC,GAAG,KAAK,EAAE,gBAAgB,CAAC;YAC7D,cAAc,CAAC,MAAM,CAAC,GAAG,KAAK,EAAE,IAAI,CAAC;YACrC,cAAc,CAAC,KAAK,CAAC,GAAG,KAAK,EAAE,GAAG,CAAC;YACnC,cAAc,CAAC,0BAA0B,CAAC,GAAG,KAAK,EAAE,wBAAwB,CAAC;YAC7E,cAAc,CAAC,UAAU,CAAC,GAAG,KAAK,EAAE,QAAQ,CAAC;SAChD;aAAM;YACH,MAAM,IAAI,GAAG,WAAoD,CAAC;YAClE,IAAI,IAAI,EAAE,GAAG,KAAK,SAAS,IAAI,CAAC,IAAI,CAAC,GAAG,EAAE;gBACtC,MAAM,IAAI,KAAK,CAAC,iCAAiC,CAAC,CAAC;aACtD;YACD,cAAc,CAAC,WAAW,CAAC,GAAG,IAAI,EAAE,SAAS,CAAC;YAC9C,cAAc,CAAC,4BAA4B,CAAC,GAAG,IAAI,EAAE,0BAA0B,CAAC;YAChF,cAAc,CAAC,aAAa,CAAC,GAAG,IAAI,EAAE,WAAW,CAAC;YAClD,cAAc,CAAC,yBAAyB,CAAC,GAAG,IAAI,EAAE,uBAAuB,CAAC;YAC1E,cAAc,CAAC,qBAAqB,CAAC,GAAG,IAAI,EAAE,mBAAmB,CAAC,CAAC,CAAC,MAAM,CAAC,MAAM,CAAC,IAAI,CAAC,mBAAmB,CAAC,CAAC,CAAC,CAAC,SAAS,CAAC;YACxH,cAAc,CAAC,UAAU,CAAC,GAAG,IAAI,EAAE,QAAQ,CAAC,CAAC,CAAC,MAAM,CAAC,MAAM,CAAC,IAAI,CAAC,QAAQ,CAAC,CAAC,CAAC,CAAC,SAAS,CAAC;YACvF,cAAc,CAAC,eAAe,CAAC,GAAG,IAAI,EAAE,aAAa,CAAC,CAAC,CAAC,MAAM,CAAC,MAAM,CAAC,IAAI,CAAC,aAAa,CAAC,CAAC,CAAC,CAAC,SAAS,CAAC;YACtG,cAAc,CAAC,mBAAmB,CAAC,GAAG,IAAI,EAAE,iBAAiB,CAAC;YAC9D,cAAc,CAAC,kBAAkB,CAAC,GAAG,IAAI,EAAE,gBAAgB,CAAC,CAAC,CAAC,MAAM,CAAC,MAAM,CAAC,IAAI,CAAC,gBAAgB,CAAC,CAAC,CAAC,CAAC,SAAS,CAAC;YAC/G,cAAc,CAAC,MAAM,CAAC,GAAG,IAAI,EAAE,IAAI,CAAC;YACpC,cAAc,CAAC,KAAK,CAAC,GAAG,IAAI,EAAE,GAAG,CAAC;YAClC,cAAc,CAAC,0BAA0B,CAAC,GAAG,IAAI,EAAE,wBAAwB,CAAC;YAC5E,cAAc,CAAC,UAAU,CAAC,GAAG,IAAI,EAAE,QAAQ,CAAC;SAC/C;QACD,IAAI,GAAG,MAAM,CAAC,YAAY,CAAC,SAAS,CAAC,oBAAoB,EAAE,EAAE,IAAI,CAAC,CAAC;QACnE,MAAM,UAAU,GAAG,EAAE,uBAAuB,EAAE,CAAC,qBAAqB,EAAE,UAAU,EAAE,eAAe,EAAE,kBAAkB,CAAC,EAAE,CAAC;QACzH,IAAI,GAAG,MAAM,CAAC,YAAY,CAAC,IAAI,EAAE,UAAU,CAAC,CAAC;QAC7C,KAAK,CAAC,qBAAqB,CAAC,YAAY,EAAE,IAAI,EAAE,cAAc,EAAE,IAAI,CAAC,CAAC;IAC1E,CAAC;;AAlIL,sDAmIC;AArHG,gBAAgB;AACO,kCAAY,GAAG,0DAA0D,CAAC"}