pulumi-github 6.11.0a1768966924__py3-none-any.whl → 6.12.0__py3-none-any.whl
This diff represents the content of publicly available package versions that have been released to one of the supported registries. The information contained in this diff is provided for informational purposes only and reflects changes between package versions as they appear in their respective public registries.
- pulumi_github/__init__.py +28 -0
- pulumi_github/_inputs.py +324 -19
- pulumi_github/actions_environment_secret.py +141 -12
- pulumi_github/actions_environment_variable.py +71 -37
- pulumi_github/actions_organization_permissions.py +50 -3
- pulumi_github/actions_organization_secret.py +164 -55
- pulumi_github/actions_organization_secret_repositories.py +44 -28
- pulumi_github/actions_organization_secret_repository.py +44 -28
- pulumi_github/actions_organization_variable.py +44 -47
- pulumi_github/actions_organization_variable_repositories.py +262 -0
- pulumi_github/actions_organization_variable_repository.py +262 -0
- pulumi_github/actions_repository_permissions.py +50 -3
- pulumi_github/actions_secret.py +176 -41
- pulumi_github/actions_variable.py +65 -33
- pulumi_github/app_installation_repositories.py +6 -6
- pulumi_github/app_installation_repository.py +6 -6
- pulumi_github/dependabot_organization_secret.py +128 -59
- pulumi_github/dependabot_organization_secret_repositories.py +44 -36
- pulumi_github/dependabot_organization_secret_repository.py +262 -0
- pulumi_github/dependabot_secret.py +154 -41
- pulumi_github/emu_group_mapping.py +64 -4
- pulumi_github/get_release_asset.py +370 -0
- pulumi_github/organization_ruleset.py +11 -17
- pulumi_github/outputs.py +234 -13
- pulumi_github/pulumi-plugin.json +1 -1
- pulumi_github/repository.py +32 -27
- pulumi_github/repository_ruleset.py +7 -7
- {pulumi_github-6.11.0a1768966924.dist-info → pulumi_github-6.12.0.dist-info}/METADATA +1 -1
- {pulumi_github-6.11.0a1768966924.dist-info → pulumi_github-6.12.0.dist-info}/RECORD +31 -27
- {pulumi_github-6.11.0a1768966924.dist-info → pulumi_github-6.12.0.dist-info}/WHEEL +1 -1
- {pulumi_github-6.11.0a1768966924.dist-info → pulumi_github-6.12.0.dist-info}/top_level.txt +0 -0
|
@@ -22,23 +22,29 @@ class DependabotOrganizationSecretArgs:
|
|
|
22
22
|
secret_name: pulumi.Input[_builtins.str],
|
|
23
23
|
visibility: pulumi.Input[_builtins.str],
|
|
24
24
|
encrypted_value: Optional[pulumi.Input[_builtins.str]] = None,
|
|
25
|
+
key_id: Optional[pulumi.Input[_builtins.str]] = None,
|
|
25
26
|
plaintext_value: Optional[pulumi.Input[_builtins.str]] = None,
|
|
26
27
|
selected_repository_ids: Optional[pulumi.Input[Sequence[pulumi.Input[_builtins.int]]]] = None):
|
|
27
28
|
"""
|
|
28
29
|
The set of arguments for constructing a DependabotOrganizationSecret resource.
|
|
29
|
-
:param pulumi.Input[_builtins.str] secret_name: Name of the secret
|
|
30
|
-
:param pulumi.Input[_builtins.str] visibility: Configures the access that repositories have to the organization secret
|
|
31
|
-
Must be one of `all`, `private`, `selected`. `selected_repository_ids` is required if set to `selected`.
|
|
30
|
+
:param pulumi.Input[_builtins.str] secret_name: Name of the secret.
|
|
31
|
+
:param pulumi.Input[_builtins.str] visibility: Configures the access that repositories have to the organization secret; must be one of `all`, `private`, or `selected`.
|
|
32
32
|
:param pulumi.Input[_builtins.str] encrypted_value: Encrypted value of the secret using the GitHub public key in Base64 format.
|
|
33
|
-
:param pulumi.Input[_builtins.str]
|
|
34
|
-
:param pulumi.Input[
|
|
33
|
+
:param pulumi.Input[_builtins.str] key_id: ID of the public key used to encrypt the secret. This should be provided when setting `encrypted_value`; if it isn't then the current public key will be looked up, which could cause a missmatch. This conflicts with `plaintext_value`.
|
|
34
|
+
:param pulumi.Input[_builtins.str] plaintext_value: Plaintext value of the secret to be encrypted.
|
|
35
|
+
:param pulumi.Input[Sequence[pulumi.Input[_builtins.int]]] selected_repository_ids: An array of repository IDs that can access the organization variable; this requires `visibility` to be set to `selected`.
|
|
35
36
|
"""
|
|
36
37
|
pulumi.set(__self__, "secret_name", secret_name)
|
|
37
38
|
pulumi.set(__self__, "visibility", visibility)
|
|
38
39
|
if encrypted_value is not None:
|
|
39
40
|
pulumi.set(__self__, "encrypted_value", encrypted_value)
|
|
41
|
+
if key_id is not None:
|
|
42
|
+
pulumi.set(__self__, "key_id", key_id)
|
|
40
43
|
if plaintext_value is not None:
|
|
41
44
|
pulumi.set(__self__, "plaintext_value", plaintext_value)
|
|
45
|
+
if selected_repository_ids is not None:
|
|
46
|
+
warnings.warn("""This field is deprecated and will be removed in a future release. Please use the `DependabotOrganizationSecretRepositories` or `DependabotOrganizationSecretRepository` resources to manage repository access to organization secrets.""", DeprecationWarning)
|
|
47
|
+
pulumi.log.warn("""selected_repository_ids is deprecated: This field is deprecated and will be removed in a future release. Please use the `DependabotOrganizationSecretRepositories` or `DependabotOrganizationSecretRepository` resources to manage repository access to organization secrets.""")
|
|
42
48
|
if selected_repository_ids is not None:
|
|
43
49
|
pulumi.set(__self__, "selected_repository_ids", selected_repository_ids)
|
|
44
50
|
|
|
@@ -46,7 +52,7 @@ class DependabotOrganizationSecretArgs:
|
|
|
46
52
|
@pulumi.getter(name="secretName")
|
|
47
53
|
def secret_name(self) -> pulumi.Input[_builtins.str]:
|
|
48
54
|
"""
|
|
49
|
-
Name of the secret
|
|
55
|
+
Name of the secret.
|
|
50
56
|
"""
|
|
51
57
|
return pulumi.get(self, "secret_name")
|
|
52
58
|
|
|
@@ -58,8 +64,7 @@ class DependabotOrganizationSecretArgs:
|
|
|
58
64
|
@pulumi.getter
|
|
59
65
|
def visibility(self) -> pulumi.Input[_builtins.str]:
|
|
60
66
|
"""
|
|
61
|
-
Configures the access that repositories have to the organization secret
|
|
62
|
-
Must be one of `all`, `private`, `selected`. `selected_repository_ids` is required if set to `selected`.
|
|
67
|
+
Configures the access that repositories have to the organization secret; must be one of `all`, `private`, or `selected`.
|
|
63
68
|
"""
|
|
64
69
|
return pulumi.get(self, "visibility")
|
|
65
70
|
|
|
@@ -79,11 +84,23 @@ class DependabotOrganizationSecretArgs:
|
|
|
79
84
|
def encrypted_value(self, value: Optional[pulumi.Input[_builtins.str]]):
|
|
80
85
|
pulumi.set(self, "encrypted_value", value)
|
|
81
86
|
|
|
87
|
+
@_builtins.property
|
|
88
|
+
@pulumi.getter(name="keyId")
|
|
89
|
+
def key_id(self) -> Optional[pulumi.Input[_builtins.str]]:
|
|
90
|
+
"""
|
|
91
|
+
ID of the public key used to encrypt the secret. This should be provided when setting `encrypted_value`; if it isn't then the current public key will be looked up, which could cause a missmatch. This conflicts with `plaintext_value`.
|
|
92
|
+
"""
|
|
93
|
+
return pulumi.get(self, "key_id")
|
|
94
|
+
|
|
95
|
+
@key_id.setter
|
|
96
|
+
def key_id(self, value: Optional[pulumi.Input[_builtins.str]]):
|
|
97
|
+
pulumi.set(self, "key_id", value)
|
|
98
|
+
|
|
82
99
|
@_builtins.property
|
|
83
100
|
@pulumi.getter(name="plaintextValue")
|
|
84
101
|
def plaintext_value(self) -> Optional[pulumi.Input[_builtins.str]]:
|
|
85
102
|
"""
|
|
86
|
-
Plaintext value of the secret to be encrypted
|
|
103
|
+
Plaintext value of the secret to be encrypted.
|
|
87
104
|
"""
|
|
88
105
|
return pulumi.get(self, "plaintext_value")
|
|
89
106
|
|
|
@@ -93,9 +110,10 @@ class DependabotOrganizationSecretArgs:
|
|
|
93
110
|
|
|
94
111
|
@_builtins.property
|
|
95
112
|
@pulumi.getter(name="selectedRepositoryIds")
|
|
113
|
+
@_utilities.deprecated("""This field is deprecated and will be removed in a future release. Please use the `DependabotOrganizationSecretRepositories` or `DependabotOrganizationSecretRepository` resources to manage repository access to organization secrets.""")
|
|
96
114
|
def selected_repository_ids(self) -> Optional[pulumi.Input[Sequence[pulumi.Input[_builtins.int]]]]:
|
|
97
115
|
"""
|
|
98
|
-
An array of repository
|
|
116
|
+
An array of repository IDs that can access the organization variable; this requires `visibility` to be set to `selected`.
|
|
99
117
|
"""
|
|
100
118
|
return pulumi.get(self, "selected_repository_ids")
|
|
101
119
|
|
|
@@ -109,30 +127,40 @@ class _DependabotOrganizationSecretState:
|
|
|
109
127
|
def __init__(__self__, *,
|
|
110
128
|
created_at: Optional[pulumi.Input[_builtins.str]] = None,
|
|
111
129
|
encrypted_value: Optional[pulumi.Input[_builtins.str]] = None,
|
|
130
|
+
key_id: Optional[pulumi.Input[_builtins.str]] = None,
|
|
112
131
|
plaintext_value: Optional[pulumi.Input[_builtins.str]] = None,
|
|
132
|
+
remote_updated_at: Optional[pulumi.Input[_builtins.str]] = None,
|
|
113
133
|
secret_name: Optional[pulumi.Input[_builtins.str]] = None,
|
|
114
134
|
selected_repository_ids: Optional[pulumi.Input[Sequence[pulumi.Input[_builtins.int]]]] = None,
|
|
115
135
|
updated_at: Optional[pulumi.Input[_builtins.str]] = None,
|
|
116
136
|
visibility: Optional[pulumi.Input[_builtins.str]] = None):
|
|
117
137
|
"""
|
|
118
138
|
Input properties used for looking up and filtering DependabotOrganizationSecret resources.
|
|
119
|
-
:param pulumi.Input[_builtins.str] created_at: Date
|
|
139
|
+
:param pulumi.Input[_builtins.str] created_at: Date the secret was created.
|
|
120
140
|
:param pulumi.Input[_builtins.str] encrypted_value: Encrypted value of the secret using the GitHub public key in Base64 format.
|
|
121
|
-
:param pulumi.Input[_builtins.str]
|
|
122
|
-
:param pulumi.Input[_builtins.str]
|
|
123
|
-
:param pulumi.Input[
|
|
124
|
-
:param pulumi.Input[_builtins.str]
|
|
125
|
-
:param pulumi.Input[_builtins.
|
|
126
|
-
|
|
141
|
+
:param pulumi.Input[_builtins.str] key_id: ID of the public key used to encrypt the secret. This should be provided when setting `encrypted_value`; if it isn't then the current public key will be looked up, which could cause a missmatch. This conflicts with `plaintext_value`.
|
|
142
|
+
:param pulumi.Input[_builtins.str] plaintext_value: Plaintext value of the secret to be encrypted.
|
|
143
|
+
:param pulumi.Input[_builtins.str] remote_updated_at: Date the secret was last updated in GitHub.
|
|
144
|
+
:param pulumi.Input[_builtins.str] secret_name: Name of the secret.
|
|
145
|
+
:param pulumi.Input[Sequence[pulumi.Input[_builtins.int]]] selected_repository_ids: An array of repository IDs that can access the organization variable; this requires `visibility` to be set to `selected`.
|
|
146
|
+
:param pulumi.Input[_builtins.str] updated_at: Date the secret was last updated by the provider.
|
|
147
|
+
:param pulumi.Input[_builtins.str] visibility: Configures the access that repositories have to the organization secret; must be one of `all`, `private`, or `selected`.
|
|
127
148
|
"""
|
|
128
149
|
if created_at is not None:
|
|
129
150
|
pulumi.set(__self__, "created_at", created_at)
|
|
130
151
|
if encrypted_value is not None:
|
|
131
152
|
pulumi.set(__self__, "encrypted_value", encrypted_value)
|
|
153
|
+
if key_id is not None:
|
|
154
|
+
pulumi.set(__self__, "key_id", key_id)
|
|
132
155
|
if plaintext_value is not None:
|
|
133
156
|
pulumi.set(__self__, "plaintext_value", plaintext_value)
|
|
157
|
+
if remote_updated_at is not None:
|
|
158
|
+
pulumi.set(__self__, "remote_updated_at", remote_updated_at)
|
|
134
159
|
if secret_name is not None:
|
|
135
160
|
pulumi.set(__self__, "secret_name", secret_name)
|
|
161
|
+
if selected_repository_ids is not None:
|
|
162
|
+
warnings.warn("""This field is deprecated and will be removed in a future release. Please use the `DependabotOrganizationSecretRepositories` or `DependabotOrganizationSecretRepository` resources to manage repository access to organization secrets.""", DeprecationWarning)
|
|
163
|
+
pulumi.log.warn("""selected_repository_ids is deprecated: This field is deprecated and will be removed in a future release. Please use the `DependabotOrganizationSecretRepositories` or `DependabotOrganizationSecretRepository` resources to manage repository access to organization secrets.""")
|
|
136
164
|
if selected_repository_ids is not None:
|
|
137
165
|
pulumi.set(__self__, "selected_repository_ids", selected_repository_ids)
|
|
138
166
|
if updated_at is not None:
|
|
@@ -144,7 +172,7 @@ class _DependabotOrganizationSecretState:
|
|
|
144
172
|
@pulumi.getter(name="createdAt")
|
|
145
173
|
def created_at(self) -> Optional[pulumi.Input[_builtins.str]]:
|
|
146
174
|
"""
|
|
147
|
-
Date
|
|
175
|
+
Date the secret was created.
|
|
148
176
|
"""
|
|
149
177
|
return pulumi.get(self, "created_at")
|
|
150
178
|
|
|
@@ -164,11 +192,23 @@ class _DependabotOrganizationSecretState:
|
|
|
164
192
|
def encrypted_value(self, value: Optional[pulumi.Input[_builtins.str]]):
|
|
165
193
|
pulumi.set(self, "encrypted_value", value)
|
|
166
194
|
|
|
195
|
+
@_builtins.property
|
|
196
|
+
@pulumi.getter(name="keyId")
|
|
197
|
+
def key_id(self) -> Optional[pulumi.Input[_builtins.str]]:
|
|
198
|
+
"""
|
|
199
|
+
ID of the public key used to encrypt the secret. This should be provided when setting `encrypted_value`; if it isn't then the current public key will be looked up, which could cause a missmatch. This conflicts with `plaintext_value`.
|
|
200
|
+
"""
|
|
201
|
+
return pulumi.get(self, "key_id")
|
|
202
|
+
|
|
203
|
+
@key_id.setter
|
|
204
|
+
def key_id(self, value: Optional[pulumi.Input[_builtins.str]]):
|
|
205
|
+
pulumi.set(self, "key_id", value)
|
|
206
|
+
|
|
167
207
|
@_builtins.property
|
|
168
208
|
@pulumi.getter(name="plaintextValue")
|
|
169
209
|
def plaintext_value(self) -> Optional[pulumi.Input[_builtins.str]]:
|
|
170
210
|
"""
|
|
171
|
-
Plaintext value of the secret to be encrypted
|
|
211
|
+
Plaintext value of the secret to be encrypted.
|
|
172
212
|
"""
|
|
173
213
|
return pulumi.get(self, "plaintext_value")
|
|
174
214
|
|
|
@@ -176,11 +216,23 @@ class _DependabotOrganizationSecretState:
|
|
|
176
216
|
def plaintext_value(self, value: Optional[pulumi.Input[_builtins.str]]):
|
|
177
217
|
pulumi.set(self, "plaintext_value", value)
|
|
178
218
|
|
|
219
|
+
@_builtins.property
|
|
220
|
+
@pulumi.getter(name="remoteUpdatedAt")
|
|
221
|
+
def remote_updated_at(self) -> Optional[pulumi.Input[_builtins.str]]:
|
|
222
|
+
"""
|
|
223
|
+
Date the secret was last updated in GitHub.
|
|
224
|
+
"""
|
|
225
|
+
return pulumi.get(self, "remote_updated_at")
|
|
226
|
+
|
|
227
|
+
@remote_updated_at.setter
|
|
228
|
+
def remote_updated_at(self, value: Optional[pulumi.Input[_builtins.str]]):
|
|
229
|
+
pulumi.set(self, "remote_updated_at", value)
|
|
230
|
+
|
|
179
231
|
@_builtins.property
|
|
180
232
|
@pulumi.getter(name="secretName")
|
|
181
233
|
def secret_name(self) -> Optional[pulumi.Input[_builtins.str]]:
|
|
182
234
|
"""
|
|
183
|
-
Name of the secret
|
|
235
|
+
Name of the secret.
|
|
184
236
|
"""
|
|
185
237
|
return pulumi.get(self, "secret_name")
|
|
186
238
|
|
|
@@ -190,9 +242,10 @@ class _DependabotOrganizationSecretState:
|
|
|
190
242
|
|
|
191
243
|
@_builtins.property
|
|
192
244
|
@pulumi.getter(name="selectedRepositoryIds")
|
|
245
|
+
@_utilities.deprecated("""This field is deprecated and will be removed in a future release. Please use the `DependabotOrganizationSecretRepositories` or `DependabotOrganizationSecretRepository` resources to manage repository access to organization secrets.""")
|
|
193
246
|
def selected_repository_ids(self) -> Optional[pulumi.Input[Sequence[pulumi.Input[_builtins.int]]]]:
|
|
194
247
|
"""
|
|
195
|
-
An array of repository
|
|
248
|
+
An array of repository IDs that can access the organization variable; this requires `visibility` to be set to `selected`.
|
|
196
249
|
"""
|
|
197
250
|
return pulumi.get(self, "selected_repository_ids")
|
|
198
251
|
|
|
@@ -204,7 +257,7 @@ class _DependabotOrganizationSecretState:
|
|
|
204
257
|
@pulumi.getter(name="updatedAt")
|
|
205
258
|
def updated_at(self) -> Optional[pulumi.Input[_builtins.str]]:
|
|
206
259
|
"""
|
|
207
|
-
Date
|
|
260
|
+
Date the secret was last updated by the provider.
|
|
208
261
|
"""
|
|
209
262
|
return pulumi.get(self, "updated_at")
|
|
210
263
|
|
|
@@ -216,8 +269,7 @@ class _DependabotOrganizationSecretState:
|
|
|
216
269
|
@pulumi.getter
|
|
217
270
|
def visibility(self) -> Optional[pulumi.Input[_builtins.str]]:
|
|
218
271
|
"""
|
|
219
|
-
Configures the access that repositories have to the organization secret
|
|
220
|
-
Must be one of `all`, `private`, `selected`. `selected_repository_ids` is required if set to `selected`.
|
|
272
|
+
Configures the access that repositories have to the organization secret; must be one of `all`, `private`, or `selected`.
|
|
221
273
|
"""
|
|
222
274
|
return pulumi.get(self, "visibility")
|
|
223
275
|
|
|
@@ -233,34 +285,31 @@ class DependabotOrganizationSecret(pulumi.CustomResource):
|
|
|
233
285
|
resource_name: str,
|
|
234
286
|
opts: Optional[pulumi.ResourceOptions] = None,
|
|
235
287
|
encrypted_value: Optional[pulumi.Input[_builtins.str]] = None,
|
|
288
|
+
key_id: Optional[pulumi.Input[_builtins.str]] = None,
|
|
236
289
|
plaintext_value: Optional[pulumi.Input[_builtins.str]] = None,
|
|
237
290
|
secret_name: Optional[pulumi.Input[_builtins.str]] = None,
|
|
238
291
|
selected_repository_ids: Optional[pulumi.Input[Sequence[pulumi.Input[_builtins.int]]]] = None,
|
|
239
292
|
visibility: Optional[pulumi.Input[_builtins.str]] = None,
|
|
240
293
|
__props__=None):
|
|
241
294
|
"""
|
|
242
|
-
## Example Usage
|
|
243
|
-
|
|
244
295
|
## Import
|
|
245
296
|
|
|
246
|
-
|
|
297
|
+
### Import Command
|
|
298
|
+
|
|
299
|
+
The following command imports a GitHub Dependabot organization secret named `mysecret` to a `github_dependabot_organization_secret` resource named `example`.
|
|
247
300
|
|
|
248
301
|
```sh
|
|
249
|
-
$ pulumi import github:index/dependabotOrganizationSecret:DependabotOrganizationSecret
|
|
302
|
+
$ pulumi import github:index/dependabotOrganizationSecret:DependabotOrganizationSecret example mysecret
|
|
250
303
|
```
|
|
251
304
|
|
|
252
|
-
NOTE: the implementation is limited in that it won't fetch the value of the
|
|
253
|
-
|
|
254
|
-
`plaintext_value` or `encrypted_value` fields when importing. You may need to ignore changes for these as a workaround.
|
|
255
|
-
|
|
256
305
|
:param str resource_name: The name of the resource.
|
|
257
306
|
:param pulumi.ResourceOptions opts: Options for the resource.
|
|
258
307
|
:param pulumi.Input[_builtins.str] encrypted_value: Encrypted value of the secret using the GitHub public key in Base64 format.
|
|
259
|
-
:param pulumi.Input[_builtins.str]
|
|
260
|
-
:param pulumi.Input[_builtins.str]
|
|
261
|
-
:param pulumi.Input[
|
|
262
|
-
:param pulumi.Input[_builtins.
|
|
263
|
-
|
|
308
|
+
:param pulumi.Input[_builtins.str] key_id: ID of the public key used to encrypt the secret. This should be provided when setting `encrypted_value`; if it isn't then the current public key will be looked up, which could cause a missmatch. This conflicts with `plaintext_value`.
|
|
309
|
+
:param pulumi.Input[_builtins.str] plaintext_value: Plaintext value of the secret to be encrypted.
|
|
310
|
+
:param pulumi.Input[_builtins.str] secret_name: Name of the secret.
|
|
311
|
+
:param pulumi.Input[Sequence[pulumi.Input[_builtins.int]]] selected_repository_ids: An array of repository IDs that can access the organization variable; this requires `visibility` to be set to `selected`.
|
|
312
|
+
:param pulumi.Input[_builtins.str] visibility: Configures the access that repositories have to the organization secret; must be one of `all`, `private`, or `selected`.
|
|
264
313
|
"""
|
|
265
314
|
...
|
|
266
315
|
@overload
|
|
@@ -269,20 +318,16 @@ class DependabotOrganizationSecret(pulumi.CustomResource):
|
|
|
269
318
|
args: DependabotOrganizationSecretArgs,
|
|
270
319
|
opts: Optional[pulumi.ResourceOptions] = None):
|
|
271
320
|
"""
|
|
272
|
-
## Example Usage
|
|
273
|
-
|
|
274
321
|
## Import
|
|
275
322
|
|
|
276
|
-
|
|
323
|
+
### Import Command
|
|
324
|
+
|
|
325
|
+
The following command imports a GitHub Dependabot organization secret named `mysecret` to a `github_dependabot_organization_secret` resource named `example`.
|
|
277
326
|
|
|
278
327
|
```sh
|
|
279
|
-
$ pulumi import github:index/dependabotOrganizationSecret:DependabotOrganizationSecret
|
|
328
|
+
$ pulumi import github:index/dependabotOrganizationSecret:DependabotOrganizationSecret example mysecret
|
|
280
329
|
```
|
|
281
330
|
|
|
282
|
-
NOTE: the implementation is limited in that it won't fetch the value of the
|
|
283
|
-
|
|
284
|
-
`plaintext_value` or `encrypted_value` fields when importing. You may need to ignore changes for these as a workaround.
|
|
285
|
-
|
|
286
331
|
:param str resource_name: The name of the resource.
|
|
287
332
|
:param DependabotOrganizationSecretArgs args: The arguments to use to populate this resource's properties.
|
|
288
333
|
:param pulumi.ResourceOptions opts: Options for the resource.
|
|
@@ -299,6 +344,7 @@ class DependabotOrganizationSecret(pulumi.CustomResource):
|
|
|
299
344
|
resource_name: str,
|
|
300
345
|
opts: Optional[pulumi.ResourceOptions] = None,
|
|
301
346
|
encrypted_value: Optional[pulumi.Input[_builtins.str]] = None,
|
|
347
|
+
key_id: Optional[pulumi.Input[_builtins.str]] = None,
|
|
302
348
|
plaintext_value: Optional[pulumi.Input[_builtins.str]] = None,
|
|
303
349
|
secret_name: Optional[pulumi.Input[_builtins.str]] = None,
|
|
304
350
|
selected_repository_ids: Optional[pulumi.Input[Sequence[pulumi.Input[_builtins.int]]]] = None,
|
|
@@ -313,6 +359,7 @@ class DependabotOrganizationSecret(pulumi.CustomResource):
|
|
|
313
359
|
__props__ = DependabotOrganizationSecretArgs.__new__(DependabotOrganizationSecretArgs)
|
|
314
360
|
|
|
315
361
|
__props__.__dict__["encrypted_value"] = None if encrypted_value is None else pulumi.Output.secret(encrypted_value)
|
|
362
|
+
__props__.__dict__["key_id"] = key_id
|
|
316
363
|
__props__.__dict__["plaintext_value"] = None if plaintext_value is None else pulumi.Output.secret(plaintext_value)
|
|
317
364
|
if secret_name is None and not opts.urn:
|
|
318
365
|
raise TypeError("Missing required property 'secret_name'")
|
|
@@ -322,6 +369,7 @@ class DependabotOrganizationSecret(pulumi.CustomResource):
|
|
|
322
369
|
raise TypeError("Missing required property 'visibility'")
|
|
323
370
|
__props__.__dict__["visibility"] = visibility
|
|
324
371
|
__props__.__dict__["created_at"] = None
|
|
372
|
+
__props__.__dict__["remote_updated_at"] = None
|
|
325
373
|
__props__.__dict__["updated_at"] = None
|
|
326
374
|
secret_opts = pulumi.ResourceOptions(additional_secret_outputs=["encryptedValue", "plaintextValue"])
|
|
327
375
|
opts = pulumi.ResourceOptions.merge(opts, secret_opts)
|
|
@@ -337,7 +385,9 @@ class DependabotOrganizationSecret(pulumi.CustomResource):
|
|
|
337
385
|
opts: Optional[pulumi.ResourceOptions] = None,
|
|
338
386
|
created_at: Optional[pulumi.Input[_builtins.str]] = None,
|
|
339
387
|
encrypted_value: Optional[pulumi.Input[_builtins.str]] = None,
|
|
388
|
+
key_id: Optional[pulumi.Input[_builtins.str]] = None,
|
|
340
389
|
plaintext_value: Optional[pulumi.Input[_builtins.str]] = None,
|
|
390
|
+
remote_updated_at: Optional[pulumi.Input[_builtins.str]] = None,
|
|
341
391
|
secret_name: Optional[pulumi.Input[_builtins.str]] = None,
|
|
342
392
|
selected_repository_ids: Optional[pulumi.Input[Sequence[pulumi.Input[_builtins.int]]]] = None,
|
|
343
393
|
updated_at: Optional[pulumi.Input[_builtins.str]] = None,
|
|
@@ -349,14 +399,15 @@ class DependabotOrganizationSecret(pulumi.CustomResource):
|
|
|
349
399
|
:param str resource_name: The unique name of the resulting resource.
|
|
350
400
|
:param pulumi.Input[str] id: The unique provider ID of the resource to lookup.
|
|
351
401
|
:param pulumi.ResourceOptions opts: Options for the resource.
|
|
352
|
-
:param pulumi.Input[_builtins.str] created_at: Date
|
|
402
|
+
:param pulumi.Input[_builtins.str] created_at: Date the secret was created.
|
|
353
403
|
:param pulumi.Input[_builtins.str] encrypted_value: Encrypted value of the secret using the GitHub public key in Base64 format.
|
|
354
|
-
:param pulumi.Input[_builtins.str]
|
|
355
|
-
:param pulumi.Input[_builtins.str]
|
|
356
|
-
:param pulumi.Input[
|
|
357
|
-
:param pulumi.Input[_builtins.str]
|
|
358
|
-
:param pulumi.Input[_builtins.
|
|
359
|
-
|
|
404
|
+
:param pulumi.Input[_builtins.str] key_id: ID of the public key used to encrypt the secret. This should be provided when setting `encrypted_value`; if it isn't then the current public key will be looked up, which could cause a missmatch. This conflicts with `plaintext_value`.
|
|
405
|
+
:param pulumi.Input[_builtins.str] plaintext_value: Plaintext value of the secret to be encrypted.
|
|
406
|
+
:param pulumi.Input[_builtins.str] remote_updated_at: Date the secret was last updated in GitHub.
|
|
407
|
+
:param pulumi.Input[_builtins.str] secret_name: Name of the secret.
|
|
408
|
+
:param pulumi.Input[Sequence[pulumi.Input[_builtins.int]]] selected_repository_ids: An array of repository IDs that can access the organization variable; this requires `visibility` to be set to `selected`.
|
|
409
|
+
:param pulumi.Input[_builtins.str] updated_at: Date the secret was last updated by the provider.
|
|
410
|
+
:param pulumi.Input[_builtins.str] visibility: Configures the access that repositories have to the organization secret; must be one of `all`, `private`, or `selected`.
|
|
360
411
|
"""
|
|
361
412
|
opts = pulumi.ResourceOptions.merge(opts, pulumi.ResourceOptions(id=id))
|
|
362
413
|
|
|
@@ -364,7 +415,9 @@ class DependabotOrganizationSecret(pulumi.CustomResource):
|
|
|
364
415
|
|
|
365
416
|
__props__.__dict__["created_at"] = created_at
|
|
366
417
|
__props__.__dict__["encrypted_value"] = encrypted_value
|
|
418
|
+
__props__.__dict__["key_id"] = key_id
|
|
367
419
|
__props__.__dict__["plaintext_value"] = plaintext_value
|
|
420
|
+
__props__.__dict__["remote_updated_at"] = remote_updated_at
|
|
368
421
|
__props__.__dict__["secret_name"] = secret_name
|
|
369
422
|
__props__.__dict__["selected_repository_ids"] = selected_repository_ids
|
|
370
423
|
__props__.__dict__["updated_at"] = updated_at
|
|
@@ -375,7 +428,7 @@ class DependabotOrganizationSecret(pulumi.CustomResource):
|
|
|
375
428
|
@pulumi.getter(name="createdAt")
|
|
376
429
|
def created_at(self) -> pulumi.Output[_builtins.str]:
|
|
377
430
|
"""
|
|
378
|
-
Date
|
|
431
|
+
Date the secret was created.
|
|
379
432
|
"""
|
|
380
433
|
return pulumi.get(self, "created_at")
|
|
381
434
|
|
|
@@ -387,27 +440,44 @@ class DependabotOrganizationSecret(pulumi.CustomResource):
|
|
|
387
440
|
"""
|
|
388
441
|
return pulumi.get(self, "encrypted_value")
|
|
389
442
|
|
|
443
|
+
@_builtins.property
|
|
444
|
+
@pulumi.getter(name="keyId")
|
|
445
|
+
def key_id(self) -> pulumi.Output[_builtins.str]:
|
|
446
|
+
"""
|
|
447
|
+
ID of the public key used to encrypt the secret. This should be provided when setting `encrypted_value`; if it isn't then the current public key will be looked up, which could cause a missmatch. This conflicts with `plaintext_value`.
|
|
448
|
+
"""
|
|
449
|
+
return pulumi.get(self, "key_id")
|
|
450
|
+
|
|
390
451
|
@_builtins.property
|
|
391
452
|
@pulumi.getter(name="plaintextValue")
|
|
392
453
|
def plaintext_value(self) -> pulumi.Output[Optional[_builtins.str]]:
|
|
393
454
|
"""
|
|
394
|
-
Plaintext value of the secret to be encrypted
|
|
455
|
+
Plaintext value of the secret to be encrypted.
|
|
395
456
|
"""
|
|
396
457
|
return pulumi.get(self, "plaintext_value")
|
|
397
458
|
|
|
459
|
+
@_builtins.property
|
|
460
|
+
@pulumi.getter(name="remoteUpdatedAt")
|
|
461
|
+
def remote_updated_at(self) -> pulumi.Output[_builtins.str]:
|
|
462
|
+
"""
|
|
463
|
+
Date the secret was last updated in GitHub.
|
|
464
|
+
"""
|
|
465
|
+
return pulumi.get(self, "remote_updated_at")
|
|
466
|
+
|
|
398
467
|
@_builtins.property
|
|
399
468
|
@pulumi.getter(name="secretName")
|
|
400
469
|
def secret_name(self) -> pulumi.Output[_builtins.str]:
|
|
401
470
|
"""
|
|
402
|
-
Name of the secret
|
|
471
|
+
Name of the secret.
|
|
403
472
|
"""
|
|
404
473
|
return pulumi.get(self, "secret_name")
|
|
405
474
|
|
|
406
475
|
@_builtins.property
|
|
407
476
|
@pulumi.getter(name="selectedRepositoryIds")
|
|
477
|
+
@_utilities.deprecated("""This field is deprecated and will be removed in a future release. Please use the `DependabotOrganizationSecretRepositories` or `DependabotOrganizationSecretRepository` resources to manage repository access to organization secrets.""")
|
|
408
478
|
def selected_repository_ids(self) -> pulumi.Output[Optional[Sequence[_builtins.int]]]:
|
|
409
479
|
"""
|
|
410
|
-
An array of repository
|
|
480
|
+
An array of repository IDs that can access the organization variable; this requires `visibility` to be set to `selected`.
|
|
411
481
|
"""
|
|
412
482
|
return pulumi.get(self, "selected_repository_ids")
|
|
413
483
|
|
|
@@ -415,7 +485,7 @@ class DependabotOrganizationSecret(pulumi.CustomResource):
|
|
|
415
485
|
@pulumi.getter(name="updatedAt")
|
|
416
486
|
def updated_at(self) -> pulumi.Output[_builtins.str]:
|
|
417
487
|
"""
|
|
418
|
-
Date
|
|
488
|
+
Date the secret was last updated by the provider.
|
|
419
489
|
"""
|
|
420
490
|
return pulumi.get(self, "updated_at")
|
|
421
491
|
|
|
@@ -423,8 +493,7 @@ class DependabotOrganizationSecret(pulumi.CustomResource):
|
|
|
423
493
|
@pulumi.getter
|
|
424
494
|
def visibility(self) -> pulumi.Output[_builtins.str]:
|
|
425
495
|
"""
|
|
426
|
-
Configures the access that repositories have to the organization secret
|
|
427
|
-
Must be one of `all`, `private`, `selected`. `selected_repository_ids` is required if set to `selected`.
|
|
496
|
+
Configures the access that repositories have to the organization secret; must be one of `all`, `private`, or `selected`.
|
|
428
497
|
"""
|
|
429
498
|
return pulumi.get(self, "visibility")
|
|
430
499
|
|
|
@@ -23,8 +23,8 @@ class DependabotOrganizationSecretRepositoriesArgs:
|
|
|
23
23
|
selected_repository_ids: pulumi.Input[Sequence[pulumi.Input[_builtins.int]]]):
|
|
24
24
|
"""
|
|
25
25
|
The set of arguments for constructing a DependabotOrganizationSecretRepositories resource.
|
|
26
|
-
:param pulumi.Input[_builtins.str] secret_name: Name of the
|
|
27
|
-
:param pulumi.Input[Sequence[pulumi.Input[_builtins.int]]] selected_repository_ids:
|
|
26
|
+
:param pulumi.Input[_builtins.str] secret_name: Name of the Dependabot organization secret.
|
|
27
|
+
:param pulumi.Input[Sequence[pulumi.Input[_builtins.int]]] selected_repository_ids: List of IDs for the repositories that should be able to access the secret.
|
|
28
28
|
"""
|
|
29
29
|
pulumi.set(__self__, "secret_name", secret_name)
|
|
30
30
|
pulumi.set(__self__, "selected_repository_ids", selected_repository_ids)
|
|
@@ -33,7 +33,7 @@ class DependabotOrganizationSecretRepositoriesArgs:
|
|
|
33
33
|
@pulumi.getter(name="secretName")
|
|
34
34
|
def secret_name(self) -> pulumi.Input[_builtins.str]:
|
|
35
35
|
"""
|
|
36
|
-
Name of the
|
|
36
|
+
Name of the Dependabot organization secret.
|
|
37
37
|
"""
|
|
38
38
|
return pulumi.get(self, "secret_name")
|
|
39
39
|
|
|
@@ -45,7 +45,7 @@ class DependabotOrganizationSecretRepositoriesArgs:
|
|
|
45
45
|
@pulumi.getter(name="selectedRepositoryIds")
|
|
46
46
|
def selected_repository_ids(self) -> pulumi.Input[Sequence[pulumi.Input[_builtins.int]]]:
|
|
47
47
|
"""
|
|
48
|
-
|
|
48
|
+
List of IDs for the repositories that should be able to access the secret.
|
|
49
49
|
"""
|
|
50
50
|
return pulumi.get(self, "selected_repository_ids")
|
|
51
51
|
|
|
@@ -61,8 +61,8 @@ class _DependabotOrganizationSecretRepositoriesState:
|
|
|
61
61
|
selected_repository_ids: Optional[pulumi.Input[Sequence[pulumi.Input[_builtins.int]]]] = None):
|
|
62
62
|
"""
|
|
63
63
|
Input properties used for looking up and filtering DependabotOrganizationSecretRepositories resources.
|
|
64
|
-
:param pulumi.Input[_builtins.str] secret_name: Name of the
|
|
65
|
-
:param pulumi.Input[Sequence[pulumi.Input[_builtins.int]]] selected_repository_ids:
|
|
64
|
+
:param pulumi.Input[_builtins.str] secret_name: Name of the Dependabot organization secret.
|
|
65
|
+
:param pulumi.Input[Sequence[pulumi.Input[_builtins.int]]] selected_repository_ids: List of IDs for the repositories that should be able to access the secret.
|
|
66
66
|
"""
|
|
67
67
|
if secret_name is not None:
|
|
68
68
|
pulumi.set(__self__, "secret_name", secret_name)
|
|
@@ -73,7 +73,7 @@ class _DependabotOrganizationSecretRepositoriesState:
|
|
|
73
73
|
@pulumi.getter(name="secretName")
|
|
74
74
|
def secret_name(self) -> Optional[pulumi.Input[_builtins.str]]:
|
|
75
75
|
"""
|
|
76
|
-
Name of the
|
|
76
|
+
Name of the Dependabot organization secret.
|
|
77
77
|
"""
|
|
78
78
|
return pulumi.get(self, "secret_name")
|
|
79
79
|
|
|
@@ -85,7 +85,7 @@ class _DependabotOrganizationSecretRepositoriesState:
|
|
|
85
85
|
@pulumi.getter(name="selectedRepositoryIds")
|
|
86
86
|
def selected_repository_ids(self) -> Optional[pulumi.Input[Sequence[pulumi.Input[_builtins.int]]]]:
|
|
87
87
|
"""
|
|
88
|
-
|
|
88
|
+
List of IDs for the repositories that should be able to access the secret.
|
|
89
89
|
"""
|
|
90
90
|
return pulumi.get(self, "selected_repository_ids")
|
|
91
91
|
|
|
@@ -104,7 +104,7 @@ class DependabotOrganizationSecretRepositories(pulumi.CustomResource):
|
|
|
104
104
|
selected_repository_ids: Optional[pulumi.Input[Sequence[pulumi.Input[_builtins.int]]]] = None,
|
|
105
105
|
__props__=None):
|
|
106
106
|
"""
|
|
107
|
-
This resource allows you to manage the
|
|
107
|
+
This resource allows you to manage the repositories allowed to access a Dependabot secret within your GitHub organization.
|
|
108
108
|
You must have write access to an organization secret to use this resource.
|
|
109
109
|
|
|
110
110
|
This resource is only applicable when `visibility` of the existing organization secret has been set to `selected`.
|
|
@@ -115,28 +115,32 @@ class DependabotOrganizationSecretRepositories(pulumi.CustomResource):
|
|
|
115
115
|
import pulumi
|
|
116
116
|
import pulumi_github as github
|
|
117
117
|
|
|
118
|
-
|
|
119
|
-
|
|
120
|
-
|
|
121
|
-
visibility="
|
|
122
|
-
|
|
123
|
-
|
|
124
|
-
|
|
125
|
-
|
|
118
|
+
example = github.DependabotOrganizationSecret("example",
|
|
119
|
+
secret_name="mysecret",
|
|
120
|
+
plaintext_value="foo",
|
|
121
|
+
visibility="selected")
|
|
122
|
+
example_repository = github.Repository("example",
|
|
123
|
+
name="myrepo",
|
|
124
|
+
visibility="public")
|
|
125
|
+
example_dependabot_organization_secret_repositories = github.DependabotOrganizationSecretRepositories("example",
|
|
126
|
+
secret_name=example.name,
|
|
127
|
+
selected_repository_ids=[example_repository.repo_id])
|
|
126
128
|
```
|
|
127
129
|
|
|
128
130
|
## Import
|
|
129
131
|
|
|
130
|
-
|
|
132
|
+
### Import Command
|
|
133
|
+
|
|
134
|
+
The following command imports the repositories able to access the Dependabot organization secret named `mysecret` to a `github_dependabot_organization_secret_repositories` resource named `example`.
|
|
131
135
|
|
|
132
136
|
```sh
|
|
133
|
-
$ pulumi import github:index/dependabotOrganizationSecretRepositories:DependabotOrganizationSecretRepositories
|
|
137
|
+
$ pulumi import github:index/dependabotOrganizationSecretRepositories:DependabotOrganizationSecretRepositories example mysecret
|
|
134
138
|
```
|
|
135
139
|
|
|
136
140
|
:param str resource_name: The name of the resource.
|
|
137
141
|
:param pulumi.ResourceOptions opts: Options for the resource.
|
|
138
|
-
:param pulumi.Input[_builtins.str] secret_name: Name of the
|
|
139
|
-
:param pulumi.Input[Sequence[pulumi.Input[_builtins.int]]] selected_repository_ids:
|
|
142
|
+
:param pulumi.Input[_builtins.str] secret_name: Name of the Dependabot organization secret.
|
|
143
|
+
:param pulumi.Input[Sequence[pulumi.Input[_builtins.int]]] selected_repository_ids: List of IDs for the repositories that should be able to access the secret.
|
|
140
144
|
"""
|
|
141
145
|
...
|
|
142
146
|
@overload
|
|
@@ -145,7 +149,7 @@ class DependabotOrganizationSecretRepositories(pulumi.CustomResource):
|
|
|
145
149
|
args: DependabotOrganizationSecretRepositoriesArgs,
|
|
146
150
|
opts: Optional[pulumi.ResourceOptions] = None):
|
|
147
151
|
"""
|
|
148
|
-
This resource allows you to manage the
|
|
152
|
+
This resource allows you to manage the repositories allowed to access a Dependabot secret within your GitHub organization.
|
|
149
153
|
You must have write access to an organization secret to use this resource.
|
|
150
154
|
|
|
151
155
|
This resource is only applicable when `visibility` of the existing organization secret has been set to `selected`.
|
|
@@ -156,22 +160,26 @@ class DependabotOrganizationSecretRepositories(pulumi.CustomResource):
|
|
|
156
160
|
import pulumi
|
|
157
161
|
import pulumi_github as github
|
|
158
162
|
|
|
159
|
-
|
|
160
|
-
|
|
161
|
-
|
|
162
|
-
visibility="
|
|
163
|
-
|
|
164
|
-
|
|
165
|
-
|
|
166
|
-
|
|
163
|
+
example = github.DependabotOrganizationSecret("example",
|
|
164
|
+
secret_name="mysecret",
|
|
165
|
+
plaintext_value="foo",
|
|
166
|
+
visibility="selected")
|
|
167
|
+
example_repository = github.Repository("example",
|
|
168
|
+
name="myrepo",
|
|
169
|
+
visibility="public")
|
|
170
|
+
example_dependabot_organization_secret_repositories = github.DependabotOrganizationSecretRepositories("example",
|
|
171
|
+
secret_name=example.name,
|
|
172
|
+
selected_repository_ids=[example_repository.repo_id])
|
|
167
173
|
```
|
|
168
174
|
|
|
169
175
|
## Import
|
|
170
176
|
|
|
171
|
-
|
|
177
|
+
### Import Command
|
|
178
|
+
|
|
179
|
+
The following command imports the repositories able to access the Dependabot organization secret named `mysecret` to a `github_dependabot_organization_secret_repositories` resource named `example`.
|
|
172
180
|
|
|
173
181
|
```sh
|
|
174
|
-
$ pulumi import github:index/dependabotOrganizationSecretRepositories:DependabotOrganizationSecretRepositories
|
|
182
|
+
$ pulumi import github:index/dependabotOrganizationSecretRepositories:DependabotOrganizationSecretRepositories example mysecret
|
|
175
183
|
```
|
|
176
184
|
|
|
177
185
|
:param str resource_name: The name of the resource.
|
|
@@ -225,8 +233,8 @@ class DependabotOrganizationSecretRepositories(pulumi.CustomResource):
|
|
|
225
233
|
:param str resource_name: The unique name of the resulting resource.
|
|
226
234
|
:param pulumi.Input[str] id: The unique provider ID of the resource to lookup.
|
|
227
235
|
:param pulumi.ResourceOptions opts: Options for the resource.
|
|
228
|
-
:param pulumi.Input[_builtins.str] secret_name: Name of the
|
|
229
|
-
:param pulumi.Input[Sequence[pulumi.Input[_builtins.int]]] selected_repository_ids:
|
|
236
|
+
:param pulumi.Input[_builtins.str] secret_name: Name of the Dependabot organization secret.
|
|
237
|
+
:param pulumi.Input[Sequence[pulumi.Input[_builtins.int]]] selected_repository_ids: List of IDs for the repositories that should be able to access the secret.
|
|
230
238
|
"""
|
|
231
239
|
opts = pulumi.ResourceOptions.merge(opts, pulumi.ResourceOptions(id=id))
|
|
232
240
|
|
|
@@ -240,7 +248,7 @@ class DependabotOrganizationSecretRepositories(pulumi.CustomResource):
|
|
|
240
248
|
@pulumi.getter(name="secretName")
|
|
241
249
|
def secret_name(self) -> pulumi.Output[_builtins.str]:
|
|
242
250
|
"""
|
|
243
|
-
Name of the
|
|
251
|
+
Name of the Dependabot organization secret.
|
|
244
252
|
"""
|
|
245
253
|
return pulumi.get(self, "secret_name")
|
|
246
254
|
|
|
@@ -248,7 +256,7 @@ class DependabotOrganizationSecretRepositories(pulumi.CustomResource):
|
|
|
248
256
|
@pulumi.getter(name="selectedRepositoryIds")
|
|
249
257
|
def selected_repository_ids(self) -> pulumi.Output[Sequence[_builtins.int]]:
|
|
250
258
|
"""
|
|
251
|
-
|
|
259
|
+
List of IDs for the repositories that should be able to access the secret.
|
|
252
260
|
"""
|
|
253
261
|
return pulumi.get(self, "selected_repository_ids")
|
|
254
262
|
|