pulumi-github 6.12.0__py3-none-any.whl → 6.12.0a1769172728__py3-none-any.whl
This diff represents the content of publicly available package versions that have been released to one of the supported registries. The information contained in this diff is provided for informational purposes only and reflects changes between package versions as they appear in their respective public registries.
- pulumi_github/__init__.py +0 -28
- pulumi_github/_inputs.py +19 -324
- pulumi_github/actions_environment_secret.py +12 -141
- pulumi_github/actions_environment_variable.py +37 -71
- pulumi_github/actions_organization_permissions.py +3 -50
- pulumi_github/actions_organization_secret.py +55 -164
- pulumi_github/actions_organization_secret_repositories.py +28 -44
- pulumi_github/actions_organization_secret_repository.py +28 -44
- pulumi_github/actions_organization_variable.py +47 -44
- pulumi_github/actions_repository_permissions.py +3 -50
- pulumi_github/actions_secret.py +41 -176
- pulumi_github/actions_variable.py +33 -65
- pulumi_github/app_installation_repositories.py +6 -6
- pulumi_github/app_installation_repository.py +6 -6
- pulumi_github/dependabot_organization_secret.py +59 -128
- pulumi_github/dependabot_organization_secret_repositories.py +36 -44
- pulumi_github/dependabot_secret.py +41 -154
- pulumi_github/emu_group_mapping.py +4 -64
- pulumi_github/organization_ruleset.py +17 -11
- pulumi_github/outputs.py +13 -234
- pulumi_github/pulumi-plugin.json +1 -1
- pulumi_github/repository.py +27 -32
- pulumi_github/repository_ruleset.py +7 -7
- {pulumi_github-6.12.0.dist-info → pulumi_github-6.12.0a1769172728.dist-info}/METADATA +1 -1
- {pulumi_github-6.12.0.dist-info → pulumi_github-6.12.0a1769172728.dist-info}/RECORD +27 -31
- {pulumi_github-6.12.0.dist-info → pulumi_github-6.12.0a1769172728.dist-info}/WHEEL +1 -1
- pulumi_github/actions_organization_variable_repositories.py +0 -262
- pulumi_github/actions_organization_variable_repository.py +0 -262
- pulumi_github/dependabot_organization_secret_repository.py +0 -262
- pulumi_github/get_release_asset.py +0 -370
- {pulumi_github-6.12.0.dist-info → pulumi_github-6.12.0a1769172728.dist-info}/top_level.txt +0 -0
|
@@ -23,37 +23,25 @@ class ActionsOrganizationSecretArgs:
|
|
|
23
23
|
visibility: pulumi.Input[_builtins.str],
|
|
24
24
|
destroy_on_drift: Optional[pulumi.Input[_builtins.bool]] = None,
|
|
25
25
|
encrypted_value: Optional[pulumi.Input[_builtins.str]] = None,
|
|
26
|
-
key_id: Optional[pulumi.Input[_builtins.str]] = None,
|
|
27
26
|
plaintext_value: Optional[pulumi.Input[_builtins.str]] = None,
|
|
28
27
|
selected_repository_ids: Optional[pulumi.Input[Sequence[pulumi.Input[_builtins.int]]]] = None):
|
|
29
28
|
"""
|
|
30
29
|
The set of arguments for constructing a ActionsOrganizationSecret resource.
|
|
31
|
-
:param pulumi.Input[_builtins.str] secret_name: Name of the secret
|
|
32
|
-
:param pulumi.Input[_builtins.str] visibility: Configures the access that repositories have to the organization secret
|
|
33
|
-
|
|
34
|
-
|
|
35
|
-
> **Note**: One of either `encrypted_value` or `plaintext_value` must be specified.
|
|
30
|
+
:param pulumi.Input[_builtins.str] secret_name: Name of the secret
|
|
31
|
+
:param pulumi.Input[_builtins.str] visibility: Configures the access that repositories have to the organization secret.
|
|
32
|
+
Must be one of `all`, `private`, `selected`. `selected_repository_ids` is required if set to `selected`.
|
|
36
33
|
:param pulumi.Input[_builtins.str] encrypted_value: Encrypted value of the secret using the GitHub public key in Base64 format.
|
|
37
|
-
:param pulumi.Input[_builtins.str]
|
|
38
|
-
:param pulumi.Input[_builtins.
|
|
39
|
-
:param pulumi.Input[Sequence[pulumi.Input[_builtins.int]]] selected_repository_ids: An array of repository IDs that can access the organization variable; this requires `visibility` to be set to `selected`.
|
|
34
|
+
:param pulumi.Input[_builtins.str] plaintext_value: Plaintext value of the secret to be encrypted
|
|
35
|
+
:param pulumi.Input[Sequence[pulumi.Input[_builtins.int]]] selected_repository_ids: An array of repository ids that can access the organization secret.
|
|
40
36
|
"""
|
|
41
37
|
pulumi.set(__self__, "secret_name", secret_name)
|
|
42
38
|
pulumi.set(__self__, "visibility", visibility)
|
|
43
|
-
if destroy_on_drift is not None:
|
|
44
|
-
warnings.warn("""This is no longer required and will be removed in a future release. Drift detection is now always performed, and external changes will result in the secret being updated to match the Terraform configuration. If you want to ignore external changes, you can use the `lifecycle` block with `ignore_changes` on the `remote_updated_at` field.""", DeprecationWarning)
|
|
45
|
-
pulumi.log.warn("""destroy_on_drift is deprecated: This is no longer required and will be removed in a future release. Drift detection is now always performed, and external changes will result in the secret being updated to match the Terraform configuration. If you want to ignore external changes, you can use the `lifecycle` block with `ignore_changes` on the `remote_updated_at` field.""")
|
|
46
39
|
if destroy_on_drift is not None:
|
|
47
40
|
pulumi.set(__self__, "destroy_on_drift", destroy_on_drift)
|
|
48
41
|
if encrypted_value is not None:
|
|
49
42
|
pulumi.set(__self__, "encrypted_value", encrypted_value)
|
|
50
|
-
if key_id is not None:
|
|
51
|
-
pulumi.set(__self__, "key_id", key_id)
|
|
52
43
|
if plaintext_value is not None:
|
|
53
44
|
pulumi.set(__self__, "plaintext_value", plaintext_value)
|
|
54
|
-
if selected_repository_ids is not None:
|
|
55
|
-
warnings.warn("""This field is deprecated and will be removed in a future release. Please use the `ActionsOrganizationSecretRepositories` or `ActionsOrganizationSecretRepository` resources to manage repository access to organization secrets.""", DeprecationWarning)
|
|
56
|
-
pulumi.log.warn("""selected_repository_ids is deprecated: This field is deprecated and will be removed in a future release. Please use the `ActionsOrganizationSecretRepositories` or `ActionsOrganizationSecretRepository` resources to manage repository access to organization secrets.""")
|
|
57
45
|
if selected_repository_ids is not None:
|
|
58
46
|
pulumi.set(__self__, "selected_repository_ids", selected_repository_ids)
|
|
59
47
|
|
|
@@ -61,7 +49,7 @@ class ActionsOrganizationSecretArgs:
|
|
|
61
49
|
@pulumi.getter(name="secretName")
|
|
62
50
|
def secret_name(self) -> pulumi.Input[_builtins.str]:
|
|
63
51
|
"""
|
|
64
|
-
Name of the secret
|
|
52
|
+
Name of the secret
|
|
65
53
|
"""
|
|
66
54
|
return pulumi.get(self, "secret_name")
|
|
67
55
|
|
|
@@ -73,7 +61,8 @@ class ActionsOrganizationSecretArgs:
|
|
|
73
61
|
@pulumi.getter
|
|
74
62
|
def visibility(self) -> pulumi.Input[_builtins.str]:
|
|
75
63
|
"""
|
|
76
|
-
Configures the access that repositories have to the organization secret
|
|
64
|
+
Configures the access that repositories have to the organization secret.
|
|
65
|
+
Must be one of `all`, `private`, `selected`. `selected_repository_ids` is required if set to `selected`.
|
|
77
66
|
"""
|
|
78
67
|
return pulumi.get(self, "visibility")
|
|
79
68
|
|
|
@@ -83,13 +72,7 @@ class ActionsOrganizationSecretArgs:
|
|
|
83
72
|
|
|
84
73
|
@_builtins.property
|
|
85
74
|
@pulumi.getter(name="destroyOnDrift")
|
|
86
|
-
@_utilities.deprecated("""This is no longer required and will be removed in a future release. Drift detection is now always performed, and external changes will result in the secret being updated to match the Terraform configuration. If you want to ignore external changes, you can use the `lifecycle` block with `ignore_changes` on the `remote_updated_at` field.""")
|
|
87
75
|
def destroy_on_drift(self) -> Optional[pulumi.Input[_builtins.bool]]:
|
|
88
|
-
"""
|
|
89
|
-
(Optional) This is ignored as drift detection is built into the resource.
|
|
90
|
-
|
|
91
|
-
> **Note**: One of either `encrypted_value` or `plaintext_value` must be specified.
|
|
92
|
-
"""
|
|
93
76
|
return pulumi.get(self, "destroy_on_drift")
|
|
94
77
|
|
|
95
78
|
@destroy_on_drift.setter
|
|
@@ -108,23 +91,11 @@ class ActionsOrganizationSecretArgs:
|
|
|
108
91
|
def encrypted_value(self, value: Optional[pulumi.Input[_builtins.str]]):
|
|
109
92
|
pulumi.set(self, "encrypted_value", value)
|
|
110
93
|
|
|
111
|
-
@_builtins.property
|
|
112
|
-
@pulumi.getter(name="keyId")
|
|
113
|
-
def key_id(self) -> Optional[pulumi.Input[_builtins.str]]:
|
|
114
|
-
"""
|
|
115
|
-
ID of the public key used to encrypt the secret. This should be provided when setting `encrypted_value`; if it isn't then the current public key will be looked up, which could cause a missmatch. This conflicts with `plaintext_value`.
|
|
116
|
-
"""
|
|
117
|
-
return pulumi.get(self, "key_id")
|
|
118
|
-
|
|
119
|
-
@key_id.setter
|
|
120
|
-
def key_id(self, value: Optional[pulumi.Input[_builtins.str]]):
|
|
121
|
-
pulumi.set(self, "key_id", value)
|
|
122
|
-
|
|
123
94
|
@_builtins.property
|
|
124
95
|
@pulumi.getter(name="plaintextValue")
|
|
125
96
|
def plaintext_value(self) -> Optional[pulumi.Input[_builtins.str]]:
|
|
126
97
|
"""
|
|
127
|
-
Plaintext value of the secret to be encrypted
|
|
98
|
+
Plaintext value of the secret to be encrypted
|
|
128
99
|
"""
|
|
129
100
|
return pulumi.get(self, "plaintext_value")
|
|
130
101
|
|
|
@@ -134,10 +105,9 @@ class ActionsOrganizationSecretArgs:
|
|
|
134
105
|
|
|
135
106
|
@_builtins.property
|
|
136
107
|
@pulumi.getter(name="selectedRepositoryIds")
|
|
137
|
-
@_utilities.deprecated("""This field is deprecated and will be removed in a future release. Please use the `ActionsOrganizationSecretRepositories` or `ActionsOrganizationSecretRepository` resources to manage repository access to organization secrets.""")
|
|
138
108
|
def selected_repository_ids(self) -> Optional[pulumi.Input[Sequence[pulumi.Input[_builtins.int]]]]:
|
|
139
109
|
"""
|
|
140
|
-
An array of repository
|
|
110
|
+
An array of repository ids that can access the organization secret.
|
|
141
111
|
"""
|
|
142
112
|
return pulumi.get(self, "selected_repository_ids")
|
|
143
113
|
|
|
@@ -152,48 +122,32 @@ class _ActionsOrganizationSecretState:
|
|
|
152
122
|
created_at: Optional[pulumi.Input[_builtins.str]] = None,
|
|
153
123
|
destroy_on_drift: Optional[pulumi.Input[_builtins.bool]] = None,
|
|
154
124
|
encrypted_value: Optional[pulumi.Input[_builtins.str]] = None,
|
|
155
|
-
key_id: Optional[pulumi.Input[_builtins.str]] = None,
|
|
156
125
|
plaintext_value: Optional[pulumi.Input[_builtins.str]] = None,
|
|
157
|
-
remote_updated_at: Optional[pulumi.Input[_builtins.str]] = None,
|
|
158
126
|
secret_name: Optional[pulumi.Input[_builtins.str]] = None,
|
|
159
127
|
selected_repository_ids: Optional[pulumi.Input[Sequence[pulumi.Input[_builtins.int]]]] = None,
|
|
160
128
|
updated_at: Optional[pulumi.Input[_builtins.str]] = None,
|
|
161
129
|
visibility: Optional[pulumi.Input[_builtins.str]] = None):
|
|
162
130
|
"""
|
|
163
131
|
Input properties used for looking up and filtering ActionsOrganizationSecret resources.
|
|
164
|
-
:param pulumi.Input[_builtins.str] created_at: Date
|
|
165
|
-
:param pulumi.Input[_builtins.bool] destroy_on_drift: (Optional) This is ignored as drift detection is built into the resource.
|
|
166
|
-
|
|
167
|
-
> **Note**: One of either `encrypted_value` or `plaintext_value` must be specified.
|
|
132
|
+
:param pulumi.Input[_builtins.str] created_at: Date of actions_secret creation.
|
|
168
133
|
:param pulumi.Input[_builtins.str] encrypted_value: Encrypted value of the secret using the GitHub public key in Base64 format.
|
|
169
|
-
:param pulumi.Input[_builtins.str]
|
|
170
|
-
:param pulumi.Input[_builtins.str]
|
|
171
|
-
:param pulumi.Input[_builtins.
|
|
172
|
-
:param pulumi.Input[_builtins.str]
|
|
173
|
-
:param pulumi.Input[
|
|
174
|
-
|
|
175
|
-
:param pulumi.Input[_builtins.str] visibility: Configures the access that repositories have to the organization secret; must be one of `all`, `private`, or `selected`.
|
|
134
|
+
:param pulumi.Input[_builtins.str] plaintext_value: Plaintext value of the secret to be encrypted
|
|
135
|
+
:param pulumi.Input[_builtins.str] secret_name: Name of the secret
|
|
136
|
+
:param pulumi.Input[Sequence[pulumi.Input[_builtins.int]]] selected_repository_ids: An array of repository ids that can access the organization secret.
|
|
137
|
+
:param pulumi.Input[_builtins.str] updated_at: Date of actions_secret update.
|
|
138
|
+
:param pulumi.Input[_builtins.str] visibility: Configures the access that repositories have to the organization secret.
|
|
139
|
+
Must be one of `all`, `private`, `selected`. `selected_repository_ids` is required if set to `selected`.
|
|
176
140
|
"""
|
|
177
141
|
if created_at is not None:
|
|
178
142
|
pulumi.set(__self__, "created_at", created_at)
|
|
179
|
-
if destroy_on_drift is not None:
|
|
180
|
-
warnings.warn("""This is no longer required and will be removed in a future release. Drift detection is now always performed, and external changes will result in the secret being updated to match the Terraform configuration. If you want to ignore external changes, you can use the `lifecycle` block with `ignore_changes` on the `remote_updated_at` field.""", DeprecationWarning)
|
|
181
|
-
pulumi.log.warn("""destroy_on_drift is deprecated: This is no longer required and will be removed in a future release. Drift detection is now always performed, and external changes will result in the secret being updated to match the Terraform configuration. If you want to ignore external changes, you can use the `lifecycle` block with `ignore_changes` on the `remote_updated_at` field.""")
|
|
182
143
|
if destroy_on_drift is not None:
|
|
183
144
|
pulumi.set(__self__, "destroy_on_drift", destroy_on_drift)
|
|
184
145
|
if encrypted_value is not None:
|
|
185
146
|
pulumi.set(__self__, "encrypted_value", encrypted_value)
|
|
186
|
-
if key_id is not None:
|
|
187
|
-
pulumi.set(__self__, "key_id", key_id)
|
|
188
147
|
if plaintext_value is not None:
|
|
189
148
|
pulumi.set(__self__, "plaintext_value", plaintext_value)
|
|
190
|
-
if remote_updated_at is not None:
|
|
191
|
-
pulumi.set(__self__, "remote_updated_at", remote_updated_at)
|
|
192
149
|
if secret_name is not None:
|
|
193
150
|
pulumi.set(__self__, "secret_name", secret_name)
|
|
194
|
-
if selected_repository_ids is not None:
|
|
195
|
-
warnings.warn("""This field is deprecated and will be removed in a future release. Please use the `ActionsOrganizationSecretRepositories` or `ActionsOrganizationSecretRepository` resources to manage repository access to organization secrets.""", DeprecationWarning)
|
|
196
|
-
pulumi.log.warn("""selected_repository_ids is deprecated: This field is deprecated and will be removed in a future release. Please use the `ActionsOrganizationSecretRepositories` or `ActionsOrganizationSecretRepository` resources to manage repository access to organization secrets.""")
|
|
197
151
|
if selected_repository_ids is not None:
|
|
198
152
|
pulumi.set(__self__, "selected_repository_ids", selected_repository_ids)
|
|
199
153
|
if updated_at is not None:
|
|
@@ -205,7 +159,7 @@ class _ActionsOrganizationSecretState:
|
|
|
205
159
|
@pulumi.getter(name="createdAt")
|
|
206
160
|
def created_at(self) -> Optional[pulumi.Input[_builtins.str]]:
|
|
207
161
|
"""
|
|
208
|
-
Date
|
|
162
|
+
Date of actions_secret creation.
|
|
209
163
|
"""
|
|
210
164
|
return pulumi.get(self, "created_at")
|
|
211
165
|
|
|
@@ -215,13 +169,7 @@ class _ActionsOrganizationSecretState:
|
|
|
215
169
|
|
|
216
170
|
@_builtins.property
|
|
217
171
|
@pulumi.getter(name="destroyOnDrift")
|
|
218
|
-
@_utilities.deprecated("""This is no longer required and will be removed in a future release. Drift detection is now always performed, and external changes will result in the secret being updated to match the Terraform configuration. If you want to ignore external changes, you can use the `lifecycle` block with `ignore_changes` on the `remote_updated_at` field.""")
|
|
219
172
|
def destroy_on_drift(self) -> Optional[pulumi.Input[_builtins.bool]]:
|
|
220
|
-
"""
|
|
221
|
-
(Optional) This is ignored as drift detection is built into the resource.
|
|
222
|
-
|
|
223
|
-
> **Note**: One of either `encrypted_value` or `plaintext_value` must be specified.
|
|
224
|
-
"""
|
|
225
173
|
return pulumi.get(self, "destroy_on_drift")
|
|
226
174
|
|
|
227
175
|
@destroy_on_drift.setter
|
|
@@ -240,23 +188,11 @@ class _ActionsOrganizationSecretState:
|
|
|
240
188
|
def encrypted_value(self, value: Optional[pulumi.Input[_builtins.str]]):
|
|
241
189
|
pulumi.set(self, "encrypted_value", value)
|
|
242
190
|
|
|
243
|
-
@_builtins.property
|
|
244
|
-
@pulumi.getter(name="keyId")
|
|
245
|
-
def key_id(self) -> Optional[pulumi.Input[_builtins.str]]:
|
|
246
|
-
"""
|
|
247
|
-
ID of the public key used to encrypt the secret. This should be provided when setting `encrypted_value`; if it isn't then the current public key will be looked up, which could cause a missmatch. This conflicts with `plaintext_value`.
|
|
248
|
-
"""
|
|
249
|
-
return pulumi.get(self, "key_id")
|
|
250
|
-
|
|
251
|
-
@key_id.setter
|
|
252
|
-
def key_id(self, value: Optional[pulumi.Input[_builtins.str]]):
|
|
253
|
-
pulumi.set(self, "key_id", value)
|
|
254
|
-
|
|
255
191
|
@_builtins.property
|
|
256
192
|
@pulumi.getter(name="plaintextValue")
|
|
257
193
|
def plaintext_value(self) -> Optional[pulumi.Input[_builtins.str]]:
|
|
258
194
|
"""
|
|
259
|
-
Plaintext value of the secret to be encrypted
|
|
195
|
+
Plaintext value of the secret to be encrypted
|
|
260
196
|
"""
|
|
261
197
|
return pulumi.get(self, "plaintext_value")
|
|
262
198
|
|
|
@@ -264,23 +200,11 @@ class _ActionsOrganizationSecretState:
|
|
|
264
200
|
def plaintext_value(self, value: Optional[pulumi.Input[_builtins.str]]):
|
|
265
201
|
pulumi.set(self, "plaintext_value", value)
|
|
266
202
|
|
|
267
|
-
@_builtins.property
|
|
268
|
-
@pulumi.getter(name="remoteUpdatedAt")
|
|
269
|
-
def remote_updated_at(self) -> Optional[pulumi.Input[_builtins.str]]:
|
|
270
|
-
"""
|
|
271
|
-
Date the secret was last updated in GitHub.
|
|
272
|
-
"""
|
|
273
|
-
return pulumi.get(self, "remote_updated_at")
|
|
274
|
-
|
|
275
|
-
@remote_updated_at.setter
|
|
276
|
-
def remote_updated_at(self, value: Optional[pulumi.Input[_builtins.str]]):
|
|
277
|
-
pulumi.set(self, "remote_updated_at", value)
|
|
278
|
-
|
|
279
203
|
@_builtins.property
|
|
280
204
|
@pulumi.getter(name="secretName")
|
|
281
205
|
def secret_name(self) -> Optional[pulumi.Input[_builtins.str]]:
|
|
282
206
|
"""
|
|
283
|
-
Name of the secret
|
|
207
|
+
Name of the secret
|
|
284
208
|
"""
|
|
285
209
|
return pulumi.get(self, "secret_name")
|
|
286
210
|
|
|
@@ -290,10 +214,9 @@ class _ActionsOrganizationSecretState:
|
|
|
290
214
|
|
|
291
215
|
@_builtins.property
|
|
292
216
|
@pulumi.getter(name="selectedRepositoryIds")
|
|
293
|
-
@_utilities.deprecated("""This field is deprecated and will be removed in a future release. Please use the `ActionsOrganizationSecretRepositories` or `ActionsOrganizationSecretRepository` resources to manage repository access to organization secrets.""")
|
|
294
217
|
def selected_repository_ids(self) -> Optional[pulumi.Input[Sequence[pulumi.Input[_builtins.int]]]]:
|
|
295
218
|
"""
|
|
296
|
-
An array of repository
|
|
219
|
+
An array of repository ids that can access the organization secret.
|
|
297
220
|
"""
|
|
298
221
|
return pulumi.get(self, "selected_repository_ids")
|
|
299
222
|
|
|
@@ -305,7 +228,7 @@ class _ActionsOrganizationSecretState:
|
|
|
305
228
|
@pulumi.getter(name="updatedAt")
|
|
306
229
|
def updated_at(self) -> Optional[pulumi.Input[_builtins.str]]:
|
|
307
230
|
"""
|
|
308
|
-
Date
|
|
231
|
+
Date of actions_secret update.
|
|
309
232
|
"""
|
|
310
233
|
return pulumi.get(self, "updated_at")
|
|
311
234
|
|
|
@@ -317,7 +240,8 @@ class _ActionsOrganizationSecretState:
|
|
|
317
240
|
@pulumi.getter
|
|
318
241
|
def visibility(self) -> Optional[pulumi.Input[_builtins.str]]:
|
|
319
242
|
"""
|
|
320
|
-
Configures the access that repositories have to the organization secret
|
|
243
|
+
Configures the access that repositories have to the organization secret.
|
|
244
|
+
Must be one of `all`, `private`, `selected`. `selected_repository_ids` is required if set to `selected`.
|
|
321
245
|
"""
|
|
322
246
|
return pulumi.get(self, "visibility")
|
|
323
247
|
|
|
@@ -334,34 +258,32 @@ class ActionsOrganizationSecret(pulumi.CustomResource):
|
|
|
334
258
|
opts: Optional[pulumi.ResourceOptions] = None,
|
|
335
259
|
destroy_on_drift: Optional[pulumi.Input[_builtins.bool]] = None,
|
|
336
260
|
encrypted_value: Optional[pulumi.Input[_builtins.str]] = None,
|
|
337
|
-
key_id: Optional[pulumi.Input[_builtins.str]] = None,
|
|
338
261
|
plaintext_value: Optional[pulumi.Input[_builtins.str]] = None,
|
|
339
262
|
secret_name: Optional[pulumi.Input[_builtins.str]] = None,
|
|
340
263
|
selected_repository_ids: Optional[pulumi.Input[Sequence[pulumi.Input[_builtins.int]]]] = None,
|
|
341
264
|
visibility: Optional[pulumi.Input[_builtins.str]] = None,
|
|
342
265
|
__props__=None):
|
|
343
266
|
"""
|
|
344
|
-
##
|
|
267
|
+
## Example Usage
|
|
345
268
|
|
|
346
|
-
|
|
269
|
+
## Import
|
|
347
270
|
|
|
348
|
-
|
|
271
|
+
This resource can be imported using an ID made up of the secret name:
|
|
349
272
|
|
|
350
273
|
```sh
|
|
351
|
-
$ pulumi import github:index/actionsOrganizationSecret:ActionsOrganizationSecret
|
|
274
|
+
$ pulumi import github:index/actionsOrganizationSecret:ActionsOrganizationSecret test_secret test_secret_name
|
|
352
275
|
```
|
|
276
|
+
NOTE: the implementation is limited in that it won't fetch the value of the
|
|
277
|
+
`plaintext_value` or `encrypted_value` fields when importing. You may need to ignore changes for these as a workaround.
|
|
353
278
|
|
|
354
279
|
:param str resource_name: The name of the resource.
|
|
355
280
|
:param pulumi.ResourceOptions opts: Options for the resource.
|
|
356
|
-
:param pulumi.Input[_builtins.bool] destroy_on_drift: (Optional) This is ignored as drift detection is built into the resource.
|
|
357
|
-
|
|
358
|
-
> **Note**: One of either `encrypted_value` or `plaintext_value` must be specified.
|
|
359
281
|
:param pulumi.Input[_builtins.str] encrypted_value: Encrypted value of the secret using the GitHub public key in Base64 format.
|
|
360
|
-
:param pulumi.Input[_builtins.str]
|
|
361
|
-
:param pulumi.Input[_builtins.str]
|
|
362
|
-
:param pulumi.Input[_builtins.
|
|
363
|
-
:param pulumi.Input[
|
|
364
|
-
|
|
282
|
+
:param pulumi.Input[_builtins.str] plaintext_value: Plaintext value of the secret to be encrypted
|
|
283
|
+
:param pulumi.Input[_builtins.str] secret_name: Name of the secret
|
|
284
|
+
:param pulumi.Input[Sequence[pulumi.Input[_builtins.int]]] selected_repository_ids: An array of repository ids that can access the organization secret.
|
|
285
|
+
:param pulumi.Input[_builtins.str] visibility: Configures the access that repositories have to the organization secret.
|
|
286
|
+
Must be one of `all`, `private`, `selected`. `selected_repository_ids` is required if set to `selected`.
|
|
365
287
|
"""
|
|
366
288
|
...
|
|
367
289
|
@overload
|
|
@@ -370,15 +292,17 @@ class ActionsOrganizationSecret(pulumi.CustomResource):
|
|
|
370
292
|
args: ActionsOrganizationSecretArgs,
|
|
371
293
|
opts: Optional[pulumi.ResourceOptions] = None):
|
|
372
294
|
"""
|
|
373
|
-
##
|
|
295
|
+
## Example Usage
|
|
374
296
|
|
|
375
|
-
|
|
297
|
+
## Import
|
|
376
298
|
|
|
377
|
-
|
|
299
|
+
This resource can be imported using an ID made up of the secret name:
|
|
378
300
|
|
|
379
301
|
```sh
|
|
380
|
-
$ pulumi import github:index/actionsOrganizationSecret:ActionsOrganizationSecret
|
|
302
|
+
$ pulumi import github:index/actionsOrganizationSecret:ActionsOrganizationSecret test_secret test_secret_name
|
|
381
303
|
```
|
|
304
|
+
NOTE: the implementation is limited in that it won't fetch the value of the
|
|
305
|
+
`plaintext_value` or `encrypted_value` fields when importing. You may need to ignore changes for these as a workaround.
|
|
382
306
|
|
|
383
307
|
:param str resource_name: The name of the resource.
|
|
384
308
|
:param ActionsOrganizationSecretArgs args: The arguments to use to populate this resource's properties.
|
|
@@ -397,7 +321,6 @@ class ActionsOrganizationSecret(pulumi.CustomResource):
|
|
|
397
321
|
opts: Optional[pulumi.ResourceOptions] = None,
|
|
398
322
|
destroy_on_drift: Optional[pulumi.Input[_builtins.bool]] = None,
|
|
399
323
|
encrypted_value: Optional[pulumi.Input[_builtins.str]] = None,
|
|
400
|
-
key_id: Optional[pulumi.Input[_builtins.str]] = None,
|
|
401
324
|
plaintext_value: Optional[pulumi.Input[_builtins.str]] = None,
|
|
402
325
|
secret_name: Optional[pulumi.Input[_builtins.str]] = None,
|
|
403
326
|
selected_repository_ids: Optional[pulumi.Input[Sequence[pulumi.Input[_builtins.int]]]] = None,
|
|
@@ -413,7 +336,6 @@ class ActionsOrganizationSecret(pulumi.CustomResource):
|
|
|
413
336
|
|
|
414
337
|
__props__.__dict__["destroy_on_drift"] = destroy_on_drift
|
|
415
338
|
__props__.__dict__["encrypted_value"] = None if encrypted_value is None else pulumi.Output.secret(encrypted_value)
|
|
416
|
-
__props__.__dict__["key_id"] = key_id
|
|
417
339
|
__props__.__dict__["plaintext_value"] = None if plaintext_value is None else pulumi.Output.secret(plaintext_value)
|
|
418
340
|
if secret_name is None and not opts.urn:
|
|
419
341
|
raise TypeError("Missing required property 'secret_name'")
|
|
@@ -423,7 +345,6 @@ class ActionsOrganizationSecret(pulumi.CustomResource):
|
|
|
423
345
|
raise TypeError("Missing required property 'visibility'")
|
|
424
346
|
__props__.__dict__["visibility"] = visibility
|
|
425
347
|
__props__.__dict__["created_at"] = None
|
|
426
|
-
__props__.__dict__["remote_updated_at"] = None
|
|
427
348
|
__props__.__dict__["updated_at"] = None
|
|
428
349
|
secret_opts = pulumi.ResourceOptions(additional_secret_outputs=["encryptedValue", "plaintextValue"])
|
|
429
350
|
opts = pulumi.ResourceOptions.merge(opts, secret_opts)
|
|
@@ -440,9 +361,7 @@ class ActionsOrganizationSecret(pulumi.CustomResource):
|
|
|
440
361
|
created_at: Optional[pulumi.Input[_builtins.str]] = None,
|
|
441
362
|
destroy_on_drift: Optional[pulumi.Input[_builtins.bool]] = None,
|
|
442
363
|
encrypted_value: Optional[pulumi.Input[_builtins.str]] = None,
|
|
443
|
-
key_id: Optional[pulumi.Input[_builtins.str]] = None,
|
|
444
364
|
plaintext_value: Optional[pulumi.Input[_builtins.str]] = None,
|
|
445
|
-
remote_updated_at: Optional[pulumi.Input[_builtins.str]] = None,
|
|
446
365
|
secret_name: Optional[pulumi.Input[_builtins.str]] = None,
|
|
447
366
|
selected_repository_ids: Optional[pulumi.Input[Sequence[pulumi.Input[_builtins.int]]]] = None,
|
|
448
367
|
updated_at: Optional[pulumi.Input[_builtins.str]] = None,
|
|
@@ -454,18 +373,14 @@ class ActionsOrganizationSecret(pulumi.CustomResource):
|
|
|
454
373
|
:param str resource_name: The unique name of the resulting resource.
|
|
455
374
|
:param pulumi.Input[str] id: The unique provider ID of the resource to lookup.
|
|
456
375
|
:param pulumi.ResourceOptions opts: Options for the resource.
|
|
457
|
-
:param pulumi.Input[_builtins.str] created_at: Date
|
|
458
|
-
:param pulumi.Input[_builtins.bool] destroy_on_drift: (Optional) This is ignored as drift detection is built into the resource.
|
|
459
|
-
|
|
460
|
-
> **Note**: One of either `encrypted_value` or `plaintext_value` must be specified.
|
|
376
|
+
:param pulumi.Input[_builtins.str] created_at: Date of actions_secret creation.
|
|
461
377
|
:param pulumi.Input[_builtins.str] encrypted_value: Encrypted value of the secret using the GitHub public key in Base64 format.
|
|
462
|
-
:param pulumi.Input[_builtins.str]
|
|
463
|
-
:param pulumi.Input[_builtins.str]
|
|
464
|
-
:param pulumi.Input[_builtins.
|
|
465
|
-
:param pulumi.Input[_builtins.str]
|
|
466
|
-
:param pulumi.Input[
|
|
467
|
-
|
|
468
|
-
:param pulumi.Input[_builtins.str] visibility: Configures the access that repositories have to the organization secret; must be one of `all`, `private`, or `selected`.
|
|
378
|
+
:param pulumi.Input[_builtins.str] plaintext_value: Plaintext value of the secret to be encrypted
|
|
379
|
+
:param pulumi.Input[_builtins.str] secret_name: Name of the secret
|
|
380
|
+
:param pulumi.Input[Sequence[pulumi.Input[_builtins.int]]] selected_repository_ids: An array of repository ids that can access the organization secret.
|
|
381
|
+
:param pulumi.Input[_builtins.str] updated_at: Date of actions_secret update.
|
|
382
|
+
:param pulumi.Input[_builtins.str] visibility: Configures the access that repositories have to the organization secret.
|
|
383
|
+
Must be one of `all`, `private`, `selected`. `selected_repository_ids` is required if set to `selected`.
|
|
469
384
|
"""
|
|
470
385
|
opts = pulumi.ResourceOptions.merge(opts, pulumi.ResourceOptions(id=id))
|
|
471
386
|
|
|
@@ -474,9 +389,7 @@ class ActionsOrganizationSecret(pulumi.CustomResource):
|
|
|
474
389
|
__props__.__dict__["created_at"] = created_at
|
|
475
390
|
__props__.__dict__["destroy_on_drift"] = destroy_on_drift
|
|
476
391
|
__props__.__dict__["encrypted_value"] = encrypted_value
|
|
477
|
-
__props__.__dict__["key_id"] = key_id
|
|
478
392
|
__props__.__dict__["plaintext_value"] = plaintext_value
|
|
479
|
-
__props__.__dict__["remote_updated_at"] = remote_updated_at
|
|
480
393
|
__props__.__dict__["secret_name"] = secret_name
|
|
481
394
|
__props__.__dict__["selected_repository_ids"] = selected_repository_ids
|
|
482
395
|
__props__.__dict__["updated_at"] = updated_at
|
|
@@ -487,19 +400,13 @@ class ActionsOrganizationSecret(pulumi.CustomResource):
|
|
|
487
400
|
@pulumi.getter(name="createdAt")
|
|
488
401
|
def created_at(self) -> pulumi.Output[_builtins.str]:
|
|
489
402
|
"""
|
|
490
|
-
Date
|
|
403
|
+
Date of actions_secret creation.
|
|
491
404
|
"""
|
|
492
405
|
return pulumi.get(self, "created_at")
|
|
493
406
|
|
|
494
407
|
@_builtins.property
|
|
495
408
|
@pulumi.getter(name="destroyOnDrift")
|
|
496
|
-
@_utilities.deprecated("""This is no longer required and will be removed in a future release. Drift detection is now always performed, and external changes will result in the secret being updated to match the Terraform configuration. If you want to ignore external changes, you can use the `lifecycle` block with `ignore_changes` on the `remote_updated_at` field.""")
|
|
497
409
|
def destroy_on_drift(self) -> pulumi.Output[Optional[_builtins.bool]]:
|
|
498
|
-
"""
|
|
499
|
-
(Optional) This is ignored as drift detection is built into the resource.
|
|
500
|
-
|
|
501
|
-
> **Note**: One of either `encrypted_value` or `plaintext_value` must be specified.
|
|
502
|
-
"""
|
|
503
410
|
return pulumi.get(self, "destroy_on_drift")
|
|
504
411
|
|
|
505
412
|
@_builtins.property
|
|
@@ -510,44 +417,27 @@ class ActionsOrganizationSecret(pulumi.CustomResource):
|
|
|
510
417
|
"""
|
|
511
418
|
return pulumi.get(self, "encrypted_value")
|
|
512
419
|
|
|
513
|
-
@_builtins.property
|
|
514
|
-
@pulumi.getter(name="keyId")
|
|
515
|
-
def key_id(self) -> pulumi.Output[_builtins.str]:
|
|
516
|
-
"""
|
|
517
|
-
ID of the public key used to encrypt the secret. This should be provided when setting `encrypted_value`; if it isn't then the current public key will be looked up, which could cause a missmatch. This conflicts with `plaintext_value`.
|
|
518
|
-
"""
|
|
519
|
-
return pulumi.get(self, "key_id")
|
|
520
|
-
|
|
521
420
|
@_builtins.property
|
|
522
421
|
@pulumi.getter(name="plaintextValue")
|
|
523
422
|
def plaintext_value(self) -> pulumi.Output[Optional[_builtins.str]]:
|
|
524
423
|
"""
|
|
525
|
-
Plaintext value of the secret to be encrypted
|
|
424
|
+
Plaintext value of the secret to be encrypted
|
|
526
425
|
"""
|
|
527
426
|
return pulumi.get(self, "plaintext_value")
|
|
528
427
|
|
|
529
|
-
@_builtins.property
|
|
530
|
-
@pulumi.getter(name="remoteUpdatedAt")
|
|
531
|
-
def remote_updated_at(self) -> pulumi.Output[_builtins.str]:
|
|
532
|
-
"""
|
|
533
|
-
Date the secret was last updated in GitHub.
|
|
534
|
-
"""
|
|
535
|
-
return pulumi.get(self, "remote_updated_at")
|
|
536
|
-
|
|
537
428
|
@_builtins.property
|
|
538
429
|
@pulumi.getter(name="secretName")
|
|
539
430
|
def secret_name(self) -> pulumi.Output[_builtins.str]:
|
|
540
431
|
"""
|
|
541
|
-
Name of the secret
|
|
432
|
+
Name of the secret
|
|
542
433
|
"""
|
|
543
434
|
return pulumi.get(self, "secret_name")
|
|
544
435
|
|
|
545
436
|
@_builtins.property
|
|
546
437
|
@pulumi.getter(name="selectedRepositoryIds")
|
|
547
|
-
@_utilities.deprecated("""This field is deprecated and will be removed in a future release. Please use the `ActionsOrganizationSecretRepositories` or `ActionsOrganizationSecretRepository` resources to manage repository access to organization secrets.""")
|
|
548
438
|
def selected_repository_ids(self) -> pulumi.Output[Optional[Sequence[_builtins.int]]]:
|
|
549
439
|
"""
|
|
550
|
-
An array of repository
|
|
440
|
+
An array of repository ids that can access the organization secret.
|
|
551
441
|
"""
|
|
552
442
|
return pulumi.get(self, "selected_repository_ids")
|
|
553
443
|
|
|
@@ -555,7 +445,7 @@ class ActionsOrganizationSecret(pulumi.CustomResource):
|
|
|
555
445
|
@pulumi.getter(name="updatedAt")
|
|
556
446
|
def updated_at(self) -> pulumi.Output[_builtins.str]:
|
|
557
447
|
"""
|
|
558
|
-
Date
|
|
448
|
+
Date of actions_secret update.
|
|
559
449
|
"""
|
|
560
450
|
return pulumi.get(self, "updated_at")
|
|
561
451
|
|
|
@@ -563,7 +453,8 @@ class ActionsOrganizationSecret(pulumi.CustomResource):
|
|
|
563
453
|
@pulumi.getter
|
|
564
454
|
def visibility(self) -> pulumi.Output[_builtins.str]:
|
|
565
455
|
"""
|
|
566
|
-
Configures the access that repositories have to the organization secret
|
|
456
|
+
Configures the access that repositories have to the organization secret.
|
|
457
|
+
Must be one of `all`, `private`, `selected`. `selected_repository_ids` is required if set to `selected`.
|
|
567
458
|
"""
|
|
568
459
|
return pulumi.get(self, "visibility")
|
|
569
460
|
|