pulumi-github 6.12.0__py3-none-any.whl → 6.12.0a1769172728__py3-none-any.whl
This diff represents the content of publicly available package versions that have been released to one of the supported registries. The information contained in this diff is provided for informational purposes only and reflects changes between package versions as they appear in their respective public registries.
- pulumi_github/__init__.py +0 -28
- pulumi_github/_inputs.py +19 -324
- pulumi_github/actions_environment_secret.py +12 -141
- pulumi_github/actions_environment_variable.py +37 -71
- pulumi_github/actions_organization_permissions.py +3 -50
- pulumi_github/actions_organization_secret.py +55 -164
- pulumi_github/actions_organization_secret_repositories.py +28 -44
- pulumi_github/actions_organization_secret_repository.py +28 -44
- pulumi_github/actions_organization_variable.py +47 -44
- pulumi_github/actions_repository_permissions.py +3 -50
- pulumi_github/actions_secret.py +41 -176
- pulumi_github/actions_variable.py +33 -65
- pulumi_github/app_installation_repositories.py +6 -6
- pulumi_github/app_installation_repository.py +6 -6
- pulumi_github/dependabot_organization_secret.py +59 -128
- pulumi_github/dependabot_organization_secret_repositories.py +36 -44
- pulumi_github/dependabot_secret.py +41 -154
- pulumi_github/emu_group_mapping.py +4 -64
- pulumi_github/organization_ruleset.py +17 -11
- pulumi_github/outputs.py +13 -234
- pulumi_github/pulumi-plugin.json +1 -1
- pulumi_github/repository.py +27 -32
- pulumi_github/repository_ruleset.py +7 -7
- {pulumi_github-6.12.0.dist-info → pulumi_github-6.12.0a1769172728.dist-info}/METADATA +1 -1
- {pulumi_github-6.12.0.dist-info → pulumi_github-6.12.0a1769172728.dist-info}/RECORD +27 -31
- {pulumi_github-6.12.0.dist-info → pulumi_github-6.12.0a1769172728.dist-info}/WHEEL +1 -1
- pulumi_github/actions_organization_variable_repositories.py +0 -262
- pulumi_github/actions_organization_variable_repository.py +0 -262
- pulumi_github/dependabot_organization_secret_repository.py +0 -262
- pulumi_github/get_release_asset.py +0 -370
- {pulumi_github-6.12.0.dist-info → pulumi_github-6.12.0a1769172728.dist-info}/top_level.txt +0 -0
|
@@ -22,29 +22,23 @@ class DependabotOrganizationSecretArgs:
|
|
|
22
22
|
secret_name: pulumi.Input[_builtins.str],
|
|
23
23
|
visibility: pulumi.Input[_builtins.str],
|
|
24
24
|
encrypted_value: Optional[pulumi.Input[_builtins.str]] = None,
|
|
25
|
-
key_id: Optional[pulumi.Input[_builtins.str]] = None,
|
|
26
25
|
plaintext_value: Optional[pulumi.Input[_builtins.str]] = None,
|
|
27
26
|
selected_repository_ids: Optional[pulumi.Input[Sequence[pulumi.Input[_builtins.int]]]] = None):
|
|
28
27
|
"""
|
|
29
28
|
The set of arguments for constructing a DependabotOrganizationSecret resource.
|
|
30
|
-
:param pulumi.Input[_builtins.str] secret_name: Name of the secret
|
|
31
|
-
:param pulumi.Input[_builtins.str] visibility: Configures the access that repositories have to the organization secret
|
|
29
|
+
:param pulumi.Input[_builtins.str] secret_name: Name of the secret
|
|
30
|
+
:param pulumi.Input[_builtins.str] visibility: Configures the access that repositories have to the organization secret.
|
|
31
|
+
Must be one of `all`, `private`, `selected`. `selected_repository_ids` is required if set to `selected`.
|
|
32
32
|
:param pulumi.Input[_builtins.str] encrypted_value: Encrypted value of the secret using the GitHub public key in Base64 format.
|
|
33
|
-
:param pulumi.Input[_builtins.str]
|
|
34
|
-
:param pulumi.Input[_builtins.
|
|
35
|
-
:param pulumi.Input[Sequence[pulumi.Input[_builtins.int]]] selected_repository_ids: An array of repository IDs that can access the organization variable; this requires `visibility` to be set to `selected`.
|
|
33
|
+
:param pulumi.Input[_builtins.str] plaintext_value: Plaintext value of the secret to be encrypted
|
|
34
|
+
:param pulumi.Input[Sequence[pulumi.Input[_builtins.int]]] selected_repository_ids: An array of repository ids that can access the organization secret.
|
|
36
35
|
"""
|
|
37
36
|
pulumi.set(__self__, "secret_name", secret_name)
|
|
38
37
|
pulumi.set(__self__, "visibility", visibility)
|
|
39
38
|
if encrypted_value is not None:
|
|
40
39
|
pulumi.set(__self__, "encrypted_value", encrypted_value)
|
|
41
|
-
if key_id is not None:
|
|
42
|
-
pulumi.set(__self__, "key_id", key_id)
|
|
43
40
|
if plaintext_value is not None:
|
|
44
41
|
pulumi.set(__self__, "plaintext_value", plaintext_value)
|
|
45
|
-
if selected_repository_ids is not None:
|
|
46
|
-
warnings.warn("""This field is deprecated and will be removed in a future release. Please use the `DependabotOrganizationSecretRepositories` or `DependabotOrganizationSecretRepository` resources to manage repository access to organization secrets.""", DeprecationWarning)
|
|
47
|
-
pulumi.log.warn("""selected_repository_ids is deprecated: This field is deprecated and will be removed in a future release. Please use the `DependabotOrganizationSecretRepositories` or `DependabotOrganizationSecretRepository` resources to manage repository access to organization secrets.""")
|
|
48
42
|
if selected_repository_ids is not None:
|
|
49
43
|
pulumi.set(__self__, "selected_repository_ids", selected_repository_ids)
|
|
50
44
|
|
|
@@ -52,7 +46,7 @@ class DependabotOrganizationSecretArgs:
|
|
|
52
46
|
@pulumi.getter(name="secretName")
|
|
53
47
|
def secret_name(self) -> pulumi.Input[_builtins.str]:
|
|
54
48
|
"""
|
|
55
|
-
Name of the secret
|
|
49
|
+
Name of the secret
|
|
56
50
|
"""
|
|
57
51
|
return pulumi.get(self, "secret_name")
|
|
58
52
|
|
|
@@ -64,7 +58,8 @@ class DependabotOrganizationSecretArgs:
|
|
|
64
58
|
@pulumi.getter
|
|
65
59
|
def visibility(self) -> pulumi.Input[_builtins.str]:
|
|
66
60
|
"""
|
|
67
|
-
Configures the access that repositories have to the organization secret
|
|
61
|
+
Configures the access that repositories have to the organization secret.
|
|
62
|
+
Must be one of `all`, `private`, `selected`. `selected_repository_ids` is required if set to `selected`.
|
|
68
63
|
"""
|
|
69
64
|
return pulumi.get(self, "visibility")
|
|
70
65
|
|
|
@@ -84,23 +79,11 @@ class DependabotOrganizationSecretArgs:
|
|
|
84
79
|
def encrypted_value(self, value: Optional[pulumi.Input[_builtins.str]]):
|
|
85
80
|
pulumi.set(self, "encrypted_value", value)
|
|
86
81
|
|
|
87
|
-
@_builtins.property
|
|
88
|
-
@pulumi.getter(name="keyId")
|
|
89
|
-
def key_id(self) -> Optional[pulumi.Input[_builtins.str]]:
|
|
90
|
-
"""
|
|
91
|
-
ID of the public key used to encrypt the secret. This should be provided when setting `encrypted_value`; if it isn't then the current public key will be looked up, which could cause a missmatch. This conflicts with `plaintext_value`.
|
|
92
|
-
"""
|
|
93
|
-
return pulumi.get(self, "key_id")
|
|
94
|
-
|
|
95
|
-
@key_id.setter
|
|
96
|
-
def key_id(self, value: Optional[pulumi.Input[_builtins.str]]):
|
|
97
|
-
pulumi.set(self, "key_id", value)
|
|
98
|
-
|
|
99
82
|
@_builtins.property
|
|
100
83
|
@pulumi.getter(name="plaintextValue")
|
|
101
84
|
def plaintext_value(self) -> Optional[pulumi.Input[_builtins.str]]:
|
|
102
85
|
"""
|
|
103
|
-
Plaintext value of the secret to be encrypted
|
|
86
|
+
Plaintext value of the secret to be encrypted
|
|
104
87
|
"""
|
|
105
88
|
return pulumi.get(self, "plaintext_value")
|
|
106
89
|
|
|
@@ -110,10 +93,9 @@ class DependabotOrganizationSecretArgs:
|
|
|
110
93
|
|
|
111
94
|
@_builtins.property
|
|
112
95
|
@pulumi.getter(name="selectedRepositoryIds")
|
|
113
|
-
@_utilities.deprecated("""This field is deprecated and will be removed in a future release. Please use the `DependabotOrganizationSecretRepositories` or `DependabotOrganizationSecretRepository` resources to manage repository access to organization secrets.""")
|
|
114
96
|
def selected_repository_ids(self) -> Optional[pulumi.Input[Sequence[pulumi.Input[_builtins.int]]]]:
|
|
115
97
|
"""
|
|
116
|
-
An array of repository
|
|
98
|
+
An array of repository ids that can access the organization secret.
|
|
117
99
|
"""
|
|
118
100
|
return pulumi.get(self, "selected_repository_ids")
|
|
119
101
|
|
|
@@ -127,40 +109,30 @@ class _DependabotOrganizationSecretState:
|
|
|
127
109
|
def __init__(__self__, *,
|
|
128
110
|
created_at: Optional[pulumi.Input[_builtins.str]] = None,
|
|
129
111
|
encrypted_value: Optional[pulumi.Input[_builtins.str]] = None,
|
|
130
|
-
key_id: Optional[pulumi.Input[_builtins.str]] = None,
|
|
131
112
|
plaintext_value: Optional[pulumi.Input[_builtins.str]] = None,
|
|
132
|
-
remote_updated_at: Optional[pulumi.Input[_builtins.str]] = None,
|
|
133
113
|
secret_name: Optional[pulumi.Input[_builtins.str]] = None,
|
|
134
114
|
selected_repository_ids: Optional[pulumi.Input[Sequence[pulumi.Input[_builtins.int]]]] = None,
|
|
135
115
|
updated_at: Optional[pulumi.Input[_builtins.str]] = None,
|
|
136
116
|
visibility: Optional[pulumi.Input[_builtins.str]] = None):
|
|
137
117
|
"""
|
|
138
118
|
Input properties used for looking up and filtering DependabotOrganizationSecret resources.
|
|
139
|
-
:param pulumi.Input[_builtins.str] created_at: Date
|
|
119
|
+
:param pulumi.Input[_builtins.str] created_at: Date of dependabot_secret creation.
|
|
140
120
|
:param pulumi.Input[_builtins.str] encrypted_value: Encrypted value of the secret using the GitHub public key in Base64 format.
|
|
141
|
-
:param pulumi.Input[_builtins.str]
|
|
142
|
-
:param pulumi.Input[_builtins.str]
|
|
143
|
-
:param pulumi.Input[_builtins.
|
|
144
|
-
:param pulumi.Input[_builtins.str]
|
|
145
|
-
:param pulumi.Input[
|
|
146
|
-
|
|
147
|
-
:param pulumi.Input[_builtins.str] visibility: Configures the access that repositories have to the organization secret; must be one of `all`, `private`, or `selected`.
|
|
121
|
+
:param pulumi.Input[_builtins.str] plaintext_value: Plaintext value of the secret to be encrypted
|
|
122
|
+
:param pulumi.Input[_builtins.str] secret_name: Name of the secret
|
|
123
|
+
:param pulumi.Input[Sequence[pulumi.Input[_builtins.int]]] selected_repository_ids: An array of repository ids that can access the organization secret.
|
|
124
|
+
:param pulumi.Input[_builtins.str] updated_at: Date of dependabot_secret update.
|
|
125
|
+
:param pulumi.Input[_builtins.str] visibility: Configures the access that repositories have to the organization secret.
|
|
126
|
+
Must be one of `all`, `private`, `selected`. `selected_repository_ids` is required if set to `selected`.
|
|
148
127
|
"""
|
|
149
128
|
if created_at is not None:
|
|
150
129
|
pulumi.set(__self__, "created_at", created_at)
|
|
151
130
|
if encrypted_value is not None:
|
|
152
131
|
pulumi.set(__self__, "encrypted_value", encrypted_value)
|
|
153
|
-
if key_id is not None:
|
|
154
|
-
pulumi.set(__self__, "key_id", key_id)
|
|
155
132
|
if plaintext_value is not None:
|
|
156
133
|
pulumi.set(__self__, "plaintext_value", plaintext_value)
|
|
157
|
-
if remote_updated_at is not None:
|
|
158
|
-
pulumi.set(__self__, "remote_updated_at", remote_updated_at)
|
|
159
134
|
if secret_name is not None:
|
|
160
135
|
pulumi.set(__self__, "secret_name", secret_name)
|
|
161
|
-
if selected_repository_ids is not None:
|
|
162
|
-
warnings.warn("""This field is deprecated and will be removed in a future release. Please use the `DependabotOrganizationSecretRepositories` or `DependabotOrganizationSecretRepository` resources to manage repository access to organization secrets.""", DeprecationWarning)
|
|
163
|
-
pulumi.log.warn("""selected_repository_ids is deprecated: This field is deprecated and will be removed in a future release. Please use the `DependabotOrganizationSecretRepositories` or `DependabotOrganizationSecretRepository` resources to manage repository access to organization secrets.""")
|
|
164
136
|
if selected_repository_ids is not None:
|
|
165
137
|
pulumi.set(__self__, "selected_repository_ids", selected_repository_ids)
|
|
166
138
|
if updated_at is not None:
|
|
@@ -172,7 +144,7 @@ class _DependabotOrganizationSecretState:
|
|
|
172
144
|
@pulumi.getter(name="createdAt")
|
|
173
145
|
def created_at(self) -> Optional[pulumi.Input[_builtins.str]]:
|
|
174
146
|
"""
|
|
175
|
-
Date
|
|
147
|
+
Date of dependabot_secret creation.
|
|
176
148
|
"""
|
|
177
149
|
return pulumi.get(self, "created_at")
|
|
178
150
|
|
|
@@ -192,23 +164,11 @@ class _DependabotOrganizationSecretState:
|
|
|
192
164
|
def encrypted_value(self, value: Optional[pulumi.Input[_builtins.str]]):
|
|
193
165
|
pulumi.set(self, "encrypted_value", value)
|
|
194
166
|
|
|
195
|
-
@_builtins.property
|
|
196
|
-
@pulumi.getter(name="keyId")
|
|
197
|
-
def key_id(self) -> Optional[pulumi.Input[_builtins.str]]:
|
|
198
|
-
"""
|
|
199
|
-
ID of the public key used to encrypt the secret. This should be provided when setting `encrypted_value`; if it isn't then the current public key will be looked up, which could cause a missmatch. This conflicts with `plaintext_value`.
|
|
200
|
-
"""
|
|
201
|
-
return pulumi.get(self, "key_id")
|
|
202
|
-
|
|
203
|
-
@key_id.setter
|
|
204
|
-
def key_id(self, value: Optional[pulumi.Input[_builtins.str]]):
|
|
205
|
-
pulumi.set(self, "key_id", value)
|
|
206
|
-
|
|
207
167
|
@_builtins.property
|
|
208
168
|
@pulumi.getter(name="plaintextValue")
|
|
209
169
|
def plaintext_value(self) -> Optional[pulumi.Input[_builtins.str]]:
|
|
210
170
|
"""
|
|
211
|
-
Plaintext value of the secret to be encrypted
|
|
171
|
+
Plaintext value of the secret to be encrypted
|
|
212
172
|
"""
|
|
213
173
|
return pulumi.get(self, "plaintext_value")
|
|
214
174
|
|
|
@@ -216,23 +176,11 @@ class _DependabotOrganizationSecretState:
|
|
|
216
176
|
def plaintext_value(self, value: Optional[pulumi.Input[_builtins.str]]):
|
|
217
177
|
pulumi.set(self, "plaintext_value", value)
|
|
218
178
|
|
|
219
|
-
@_builtins.property
|
|
220
|
-
@pulumi.getter(name="remoteUpdatedAt")
|
|
221
|
-
def remote_updated_at(self) -> Optional[pulumi.Input[_builtins.str]]:
|
|
222
|
-
"""
|
|
223
|
-
Date the secret was last updated in GitHub.
|
|
224
|
-
"""
|
|
225
|
-
return pulumi.get(self, "remote_updated_at")
|
|
226
|
-
|
|
227
|
-
@remote_updated_at.setter
|
|
228
|
-
def remote_updated_at(self, value: Optional[pulumi.Input[_builtins.str]]):
|
|
229
|
-
pulumi.set(self, "remote_updated_at", value)
|
|
230
|
-
|
|
231
179
|
@_builtins.property
|
|
232
180
|
@pulumi.getter(name="secretName")
|
|
233
181
|
def secret_name(self) -> Optional[pulumi.Input[_builtins.str]]:
|
|
234
182
|
"""
|
|
235
|
-
Name of the secret
|
|
183
|
+
Name of the secret
|
|
236
184
|
"""
|
|
237
185
|
return pulumi.get(self, "secret_name")
|
|
238
186
|
|
|
@@ -242,10 +190,9 @@ class _DependabotOrganizationSecretState:
|
|
|
242
190
|
|
|
243
191
|
@_builtins.property
|
|
244
192
|
@pulumi.getter(name="selectedRepositoryIds")
|
|
245
|
-
@_utilities.deprecated("""This field is deprecated and will be removed in a future release. Please use the `DependabotOrganizationSecretRepositories` or `DependabotOrganizationSecretRepository` resources to manage repository access to organization secrets.""")
|
|
246
193
|
def selected_repository_ids(self) -> Optional[pulumi.Input[Sequence[pulumi.Input[_builtins.int]]]]:
|
|
247
194
|
"""
|
|
248
|
-
An array of repository
|
|
195
|
+
An array of repository ids that can access the organization secret.
|
|
249
196
|
"""
|
|
250
197
|
return pulumi.get(self, "selected_repository_ids")
|
|
251
198
|
|
|
@@ -257,7 +204,7 @@ class _DependabotOrganizationSecretState:
|
|
|
257
204
|
@pulumi.getter(name="updatedAt")
|
|
258
205
|
def updated_at(self) -> Optional[pulumi.Input[_builtins.str]]:
|
|
259
206
|
"""
|
|
260
|
-
Date
|
|
207
|
+
Date of dependabot_secret update.
|
|
261
208
|
"""
|
|
262
209
|
return pulumi.get(self, "updated_at")
|
|
263
210
|
|
|
@@ -269,7 +216,8 @@ class _DependabotOrganizationSecretState:
|
|
|
269
216
|
@pulumi.getter
|
|
270
217
|
def visibility(self) -> Optional[pulumi.Input[_builtins.str]]:
|
|
271
218
|
"""
|
|
272
|
-
Configures the access that repositories have to the organization secret
|
|
219
|
+
Configures the access that repositories have to the organization secret.
|
|
220
|
+
Must be one of `all`, `private`, `selected`. `selected_repository_ids` is required if set to `selected`.
|
|
273
221
|
"""
|
|
274
222
|
return pulumi.get(self, "visibility")
|
|
275
223
|
|
|
@@ -285,31 +233,34 @@ class DependabotOrganizationSecret(pulumi.CustomResource):
|
|
|
285
233
|
resource_name: str,
|
|
286
234
|
opts: Optional[pulumi.ResourceOptions] = None,
|
|
287
235
|
encrypted_value: Optional[pulumi.Input[_builtins.str]] = None,
|
|
288
|
-
key_id: Optional[pulumi.Input[_builtins.str]] = None,
|
|
289
236
|
plaintext_value: Optional[pulumi.Input[_builtins.str]] = None,
|
|
290
237
|
secret_name: Optional[pulumi.Input[_builtins.str]] = None,
|
|
291
238
|
selected_repository_ids: Optional[pulumi.Input[Sequence[pulumi.Input[_builtins.int]]]] = None,
|
|
292
239
|
visibility: Optional[pulumi.Input[_builtins.str]] = None,
|
|
293
240
|
__props__=None):
|
|
294
241
|
"""
|
|
295
|
-
##
|
|
242
|
+
## Example Usage
|
|
296
243
|
|
|
297
|
-
|
|
244
|
+
## Import
|
|
298
245
|
|
|
299
|
-
|
|
246
|
+
This resource can be imported using an ID made up of the secret name:
|
|
300
247
|
|
|
301
248
|
```sh
|
|
302
|
-
$ pulumi import github:index/dependabotOrganizationSecret:DependabotOrganizationSecret
|
|
249
|
+
$ pulumi import github:index/dependabotOrganizationSecret:DependabotOrganizationSecret test_secret test_secret_name
|
|
303
250
|
```
|
|
304
251
|
|
|
252
|
+
NOTE: the implementation is limited in that it won't fetch the value of the
|
|
253
|
+
|
|
254
|
+
`plaintext_value` or `encrypted_value` fields when importing. You may need to ignore changes for these as a workaround.
|
|
255
|
+
|
|
305
256
|
:param str resource_name: The name of the resource.
|
|
306
257
|
:param pulumi.ResourceOptions opts: Options for the resource.
|
|
307
258
|
:param pulumi.Input[_builtins.str] encrypted_value: Encrypted value of the secret using the GitHub public key in Base64 format.
|
|
308
|
-
:param pulumi.Input[_builtins.str]
|
|
309
|
-
:param pulumi.Input[_builtins.str]
|
|
310
|
-
:param pulumi.Input[_builtins.
|
|
311
|
-
:param pulumi.Input[
|
|
312
|
-
|
|
259
|
+
:param pulumi.Input[_builtins.str] plaintext_value: Plaintext value of the secret to be encrypted
|
|
260
|
+
:param pulumi.Input[_builtins.str] secret_name: Name of the secret
|
|
261
|
+
:param pulumi.Input[Sequence[pulumi.Input[_builtins.int]]] selected_repository_ids: An array of repository ids that can access the organization secret.
|
|
262
|
+
:param pulumi.Input[_builtins.str] visibility: Configures the access that repositories have to the organization secret.
|
|
263
|
+
Must be one of `all`, `private`, `selected`. `selected_repository_ids` is required if set to `selected`.
|
|
313
264
|
"""
|
|
314
265
|
...
|
|
315
266
|
@overload
|
|
@@ -318,16 +269,20 @@ class DependabotOrganizationSecret(pulumi.CustomResource):
|
|
|
318
269
|
args: DependabotOrganizationSecretArgs,
|
|
319
270
|
opts: Optional[pulumi.ResourceOptions] = None):
|
|
320
271
|
"""
|
|
321
|
-
##
|
|
272
|
+
## Example Usage
|
|
322
273
|
|
|
323
|
-
|
|
274
|
+
## Import
|
|
324
275
|
|
|
325
|
-
|
|
276
|
+
This resource can be imported using an ID made up of the secret name:
|
|
326
277
|
|
|
327
278
|
```sh
|
|
328
|
-
$ pulumi import github:index/dependabotOrganizationSecret:DependabotOrganizationSecret
|
|
279
|
+
$ pulumi import github:index/dependabotOrganizationSecret:DependabotOrganizationSecret test_secret test_secret_name
|
|
329
280
|
```
|
|
330
281
|
|
|
282
|
+
NOTE: the implementation is limited in that it won't fetch the value of the
|
|
283
|
+
|
|
284
|
+
`plaintext_value` or `encrypted_value` fields when importing. You may need to ignore changes for these as a workaround.
|
|
285
|
+
|
|
331
286
|
:param str resource_name: The name of the resource.
|
|
332
287
|
:param DependabotOrganizationSecretArgs args: The arguments to use to populate this resource's properties.
|
|
333
288
|
:param pulumi.ResourceOptions opts: Options for the resource.
|
|
@@ -344,7 +299,6 @@ class DependabotOrganizationSecret(pulumi.CustomResource):
|
|
|
344
299
|
resource_name: str,
|
|
345
300
|
opts: Optional[pulumi.ResourceOptions] = None,
|
|
346
301
|
encrypted_value: Optional[pulumi.Input[_builtins.str]] = None,
|
|
347
|
-
key_id: Optional[pulumi.Input[_builtins.str]] = None,
|
|
348
302
|
plaintext_value: Optional[pulumi.Input[_builtins.str]] = None,
|
|
349
303
|
secret_name: Optional[pulumi.Input[_builtins.str]] = None,
|
|
350
304
|
selected_repository_ids: Optional[pulumi.Input[Sequence[pulumi.Input[_builtins.int]]]] = None,
|
|
@@ -359,7 +313,6 @@ class DependabotOrganizationSecret(pulumi.CustomResource):
|
|
|
359
313
|
__props__ = DependabotOrganizationSecretArgs.__new__(DependabotOrganizationSecretArgs)
|
|
360
314
|
|
|
361
315
|
__props__.__dict__["encrypted_value"] = None if encrypted_value is None else pulumi.Output.secret(encrypted_value)
|
|
362
|
-
__props__.__dict__["key_id"] = key_id
|
|
363
316
|
__props__.__dict__["plaintext_value"] = None if plaintext_value is None else pulumi.Output.secret(plaintext_value)
|
|
364
317
|
if secret_name is None and not opts.urn:
|
|
365
318
|
raise TypeError("Missing required property 'secret_name'")
|
|
@@ -369,7 +322,6 @@ class DependabotOrganizationSecret(pulumi.CustomResource):
|
|
|
369
322
|
raise TypeError("Missing required property 'visibility'")
|
|
370
323
|
__props__.__dict__["visibility"] = visibility
|
|
371
324
|
__props__.__dict__["created_at"] = None
|
|
372
|
-
__props__.__dict__["remote_updated_at"] = None
|
|
373
325
|
__props__.__dict__["updated_at"] = None
|
|
374
326
|
secret_opts = pulumi.ResourceOptions(additional_secret_outputs=["encryptedValue", "plaintextValue"])
|
|
375
327
|
opts = pulumi.ResourceOptions.merge(opts, secret_opts)
|
|
@@ -385,9 +337,7 @@ class DependabotOrganizationSecret(pulumi.CustomResource):
|
|
|
385
337
|
opts: Optional[pulumi.ResourceOptions] = None,
|
|
386
338
|
created_at: Optional[pulumi.Input[_builtins.str]] = None,
|
|
387
339
|
encrypted_value: Optional[pulumi.Input[_builtins.str]] = None,
|
|
388
|
-
key_id: Optional[pulumi.Input[_builtins.str]] = None,
|
|
389
340
|
plaintext_value: Optional[pulumi.Input[_builtins.str]] = None,
|
|
390
|
-
remote_updated_at: Optional[pulumi.Input[_builtins.str]] = None,
|
|
391
341
|
secret_name: Optional[pulumi.Input[_builtins.str]] = None,
|
|
392
342
|
selected_repository_ids: Optional[pulumi.Input[Sequence[pulumi.Input[_builtins.int]]]] = None,
|
|
393
343
|
updated_at: Optional[pulumi.Input[_builtins.str]] = None,
|
|
@@ -399,15 +349,14 @@ class DependabotOrganizationSecret(pulumi.CustomResource):
|
|
|
399
349
|
:param str resource_name: The unique name of the resulting resource.
|
|
400
350
|
:param pulumi.Input[str] id: The unique provider ID of the resource to lookup.
|
|
401
351
|
:param pulumi.ResourceOptions opts: Options for the resource.
|
|
402
|
-
:param pulumi.Input[_builtins.str] created_at: Date
|
|
352
|
+
:param pulumi.Input[_builtins.str] created_at: Date of dependabot_secret creation.
|
|
403
353
|
:param pulumi.Input[_builtins.str] encrypted_value: Encrypted value of the secret using the GitHub public key in Base64 format.
|
|
404
|
-
:param pulumi.Input[_builtins.str]
|
|
405
|
-
:param pulumi.Input[_builtins.str]
|
|
406
|
-
:param pulumi.Input[_builtins.
|
|
407
|
-
:param pulumi.Input[_builtins.str]
|
|
408
|
-
:param pulumi.Input[
|
|
409
|
-
|
|
410
|
-
:param pulumi.Input[_builtins.str] visibility: Configures the access that repositories have to the organization secret; must be one of `all`, `private`, or `selected`.
|
|
354
|
+
:param pulumi.Input[_builtins.str] plaintext_value: Plaintext value of the secret to be encrypted
|
|
355
|
+
:param pulumi.Input[_builtins.str] secret_name: Name of the secret
|
|
356
|
+
:param pulumi.Input[Sequence[pulumi.Input[_builtins.int]]] selected_repository_ids: An array of repository ids that can access the organization secret.
|
|
357
|
+
:param pulumi.Input[_builtins.str] updated_at: Date of dependabot_secret update.
|
|
358
|
+
:param pulumi.Input[_builtins.str] visibility: Configures the access that repositories have to the organization secret.
|
|
359
|
+
Must be one of `all`, `private`, `selected`. `selected_repository_ids` is required if set to `selected`.
|
|
411
360
|
"""
|
|
412
361
|
opts = pulumi.ResourceOptions.merge(opts, pulumi.ResourceOptions(id=id))
|
|
413
362
|
|
|
@@ -415,9 +364,7 @@ class DependabotOrganizationSecret(pulumi.CustomResource):
|
|
|
415
364
|
|
|
416
365
|
__props__.__dict__["created_at"] = created_at
|
|
417
366
|
__props__.__dict__["encrypted_value"] = encrypted_value
|
|
418
|
-
__props__.__dict__["key_id"] = key_id
|
|
419
367
|
__props__.__dict__["plaintext_value"] = plaintext_value
|
|
420
|
-
__props__.__dict__["remote_updated_at"] = remote_updated_at
|
|
421
368
|
__props__.__dict__["secret_name"] = secret_name
|
|
422
369
|
__props__.__dict__["selected_repository_ids"] = selected_repository_ids
|
|
423
370
|
__props__.__dict__["updated_at"] = updated_at
|
|
@@ -428,7 +375,7 @@ class DependabotOrganizationSecret(pulumi.CustomResource):
|
|
|
428
375
|
@pulumi.getter(name="createdAt")
|
|
429
376
|
def created_at(self) -> pulumi.Output[_builtins.str]:
|
|
430
377
|
"""
|
|
431
|
-
Date
|
|
378
|
+
Date of dependabot_secret creation.
|
|
432
379
|
"""
|
|
433
380
|
return pulumi.get(self, "created_at")
|
|
434
381
|
|
|
@@ -440,44 +387,27 @@ class DependabotOrganizationSecret(pulumi.CustomResource):
|
|
|
440
387
|
"""
|
|
441
388
|
return pulumi.get(self, "encrypted_value")
|
|
442
389
|
|
|
443
|
-
@_builtins.property
|
|
444
|
-
@pulumi.getter(name="keyId")
|
|
445
|
-
def key_id(self) -> pulumi.Output[_builtins.str]:
|
|
446
|
-
"""
|
|
447
|
-
ID of the public key used to encrypt the secret. This should be provided when setting `encrypted_value`; if it isn't then the current public key will be looked up, which could cause a missmatch. This conflicts with `plaintext_value`.
|
|
448
|
-
"""
|
|
449
|
-
return pulumi.get(self, "key_id")
|
|
450
|
-
|
|
451
390
|
@_builtins.property
|
|
452
391
|
@pulumi.getter(name="plaintextValue")
|
|
453
392
|
def plaintext_value(self) -> pulumi.Output[Optional[_builtins.str]]:
|
|
454
393
|
"""
|
|
455
|
-
Plaintext value of the secret to be encrypted
|
|
394
|
+
Plaintext value of the secret to be encrypted
|
|
456
395
|
"""
|
|
457
396
|
return pulumi.get(self, "plaintext_value")
|
|
458
397
|
|
|
459
|
-
@_builtins.property
|
|
460
|
-
@pulumi.getter(name="remoteUpdatedAt")
|
|
461
|
-
def remote_updated_at(self) -> pulumi.Output[_builtins.str]:
|
|
462
|
-
"""
|
|
463
|
-
Date the secret was last updated in GitHub.
|
|
464
|
-
"""
|
|
465
|
-
return pulumi.get(self, "remote_updated_at")
|
|
466
|
-
|
|
467
398
|
@_builtins.property
|
|
468
399
|
@pulumi.getter(name="secretName")
|
|
469
400
|
def secret_name(self) -> pulumi.Output[_builtins.str]:
|
|
470
401
|
"""
|
|
471
|
-
Name of the secret
|
|
402
|
+
Name of the secret
|
|
472
403
|
"""
|
|
473
404
|
return pulumi.get(self, "secret_name")
|
|
474
405
|
|
|
475
406
|
@_builtins.property
|
|
476
407
|
@pulumi.getter(name="selectedRepositoryIds")
|
|
477
|
-
@_utilities.deprecated("""This field is deprecated and will be removed in a future release. Please use the `DependabotOrganizationSecretRepositories` or `DependabotOrganizationSecretRepository` resources to manage repository access to organization secrets.""")
|
|
478
408
|
def selected_repository_ids(self) -> pulumi.Output[Optional[Sequence[_builtins.int]]]:
|
|
479
409
|
"""
|
|
480
|
-
An array of repository
|
|
410
|
+
An array of repository ids that can access the organization secret.
|
|
481
411
|
"""
|
|
482
412
|
return pulumi.get(self, "selected_repository_ids")
|
|
483
413
|
|
|
@@ -485,7 +415,7 @@ class DependabotOrganizationSecret(pulumi.CustomResource):
|
|
|
485
415
|
@pulumi.getter(name="updatedAt")
|
|
486
416
|
def updated_at(self) -> pulumi.Output[_builtins.str]:
|
|
487
417
|
"""
|
|
488
|
-
Date
|
|
418
|
+
Date of dependabot_secret update.
|
|
489
419
|
"""
|
|
490
420
|
return pulumi.get(self, "updated_at")
|
|
491
421
|
|
|
@@ -493,7 +423,8 @@ class DependabotOrganizationSecret(pulumi.CustomResource):
|
|
|
493
423
|
@pulumi.getter
|
|
494
424
|
def visibility(self) -> pulumi.Output[_builtins.str]:
|
|
495
425
|
"""
|
|
496
|
-
Configures the access that repositories have to the organization secret
|
|
426
|
+
Configures the access that repositories have to the organization secret.
|
|
427
|
+
Must be one of `all`, `private`, `selected`. `selected_repository_ids` is required if set to `selected`.
|
|
497
428
|
"""
|
|
498
429
|
return pulumi.get(self, "visibility")
|
|
499
430
|
|
|
@@ -23,8 +23,8 @@ class DependabotOrganizationSecretRepositoriesArgs:
|
|
|
23
23
|
selected_repository_ids: pulumi.Input[Sequence[pulumi.Input[_builtins.int]]]):
|
|
24
24
|
"""
|
|
25
25
|
The set of arguments for constructing a DependabotOrganizationSecretRepositories resource.
|
|
26
|
-
:param pulumi.Input[_builtins.str] secret_name: Name of the
|
|
27
|
-
:param pulumi.Input[Sequence[pulumi.Input[_builtins.int]]] selected_repository_ids:
|
|
26
|
+
:param pulumi.Input[_builtins.str] secret_name: Name of the existing secret
|
|
27
|
+
:param pulumi.Input[Sequence[pulumi.Input[_builtins.int]]] selected_repository_ids: An array of repository ids that can access the organization secret.
|
|
28
28
|
"""
|
|
29
29
|
pulumi.set(__self__, "secret_name", secret_name)
|
|
30
30
|
pulumi.set(__self__, "selected_repository_ids", selected_repository_ids)
|
|
@@ -33,7 +33,7 @@ class DependabotOrganizationSecretRepositoriesArgs:
|
|
|
33
33
|
@pulumi.getter(name="secretName")
|
|
34
34
|
def secret_name(self) -> pulumi.Input[_builtins.str]:
|
|
35
35
|
"""
|
|
36
|
-
Name of the
|
|
36
|
+
Name of the existing secret
|
|
37
37
|
"""
|
|
38
38
|
return pulumi.get(self, "secret_name")
|
|
39
39
|
|
|
@@ -45,7 +45,7 @@ class DependabotOrganizationSecretRepositoriesArgs:
|
|
|
45
45
|
@pulumi.getter(name="selectedRepositoryIds")
|
|
46
46
|
def selected_repository_ids(self) -> pulumi.Input[Sequence[pulumi.Input[_builtins.int]]]:
|
|
47
47
|
"""
|
|
48
|
-
|
|
48
|
+
An array of repository ids that can access the organization secret.
|
|
49
49
|
"""
|
|
50
50
|
return pulumi.get(self, "selected_repository_ids")
|
|
51
51
|
|
|
@@ -61,8 +61,8 @@ class _DependabotOrganizationSecretRepositoriesState:
|
|
|
61
61
|
selected_repository_ids: Optional[pulumi.Input[Sequence[pulumi.Input[_builtins.int]]]] = None):
|
|
62
62
|
"""
|
|
63
63
|
Input properties used for looking up and filtering DependabotOrganizationSecretRepositories resources.
|
|
64
|
-
:param pulumi.Input[_builtins.str] secret_name: Name of the
|
|
65
|
-
:param pulumi.Input[Sequence[pulumi.Input[_builtins.int]]] selected_repository_ids:
|
|
64
|
+
:param pulumi.Input[_builtins.str] secret_name: Name of the existing secret
|
|
65
|
+
:param pulumi.Input[Sequence[pulumi.Input[_builtins.int]]] selected_repository_ids: An array of repository ids that can access the organization secret.
|
|
66
66
|
"""
|
|
67
67
|
if secret_name is not None:
|
|
68
68
|
pulumi.set(__self__, "secret_name", secret_name)
|
|
@@ -73,7 +73,7 @@ class _DependabotOrganizationSecretRepositoriesState:
|
|
|
73
73
|
@pulumi.getter(name="secretName")
|
|
74
74
|
def secret_name(self) -> Optional[pulumi.Input[_builtins.str]]:
|
|
75
75
|
"""
|
|
76
|
-
Name of the
|
|
76
|
+
Name of the existing secret
|
|
77
77
|
"""
|
|
78
78
|
return pulumi.get(self, "secret_name")
|
|
79
79
|
|
|
@@ -85,7 +85,7 @@ class _DependabotOrganizationSecretRepositoriesState:
|
|
|
85
85
|
@pulumi.getter(name="selectedRepositoryIds")
|
|
86
86
|
def selected_repository_ids(self) -> Optional[pulumi.Input[Sequence[pulumi.Input[_builtins.int]]]]:
|
|
87
87
|
"""
|
|
88
|
-
|
|
88
|
+
An array of repository ids that can access the organization secret.
|
|
89
89
|
"""
|
|
90
90
|
return pulumi.get(self, "selected_repository_ids")
|
|
91
91
|
|
|
@@ -104,7 +104,7 @@ class DependabotOrganizationSecretRepositories(pulumi.CustomResource):
|
|
|
104
104
|
selected_repository_ids: Optional[pulumi.Input[Sequence[pulumi.Input[_builtins.int]]]] = None,
|
|
105
105
|
__props__=None):
|
|
106
106
|
"""
|
|
107
|
-
This resource allows you to manage the
|
|
107
|
+
This resource allows you to manage the repository allow list for existing GitHub Dependabot secrets within your GitHub organization.
|
|
108
108
|
You must have write access to an organization secret to use this resource.
|
|
109
109
|
|
|
110
110
|
This resource is only applicable when `visibility` of the existing organization secret has been set to `selected`.
|
|
@@ -115,32 +115,28 @@ class DependabotOrganizationSecretRepositories(pulumi.CustomResource):
|
|
|
115
115
|
import pulumi
|
|
116
116
|
import pulumi_github as github
|
|
117
117
|
|
|
118
|
-
|
|
119
|
-
|
|
120
|
-
|
|
121
|
-
visibility="
|
|
122
|
-
|
|
123
|
-
|
|
124
|
-
|
|
125
|
-
|
|
126
|
-
secret_name=example.name,
|
|
127
|
-
selected_repository_ids=[example_repository.repo_id])
|
|
118
|
+
repo = github.get_repository(full_name="my-org/repo")
|
|
119
|
+
example_secret = github.DependabotOrganizationSecret("example_secret",
|
|
120
|
+
secret_name="example_secret_name",
|
|
121
|
+
visibility="private",
|
|
122
|
+
plaintext_value=some_secret_string)
|
|
123
|
+
org_secret_repos = github.DependabotOrganizationSecretRepositories("org_secret_repos",
|
|
124
|
+
secret_name=example_secret.secret_name,
|
|
125
|
+
selected_repository_ids=[repo.repo_id])
|
|
128
126
|
```
|
|
129
127
|
|
|
130
128
|
## Import
|
|
131
129
|
|
|
132
|
-
|
|
133
|
-
|
|
134
|
-
The following command imports the repositories able to access the Dependabot organization secret named `mysecret` to a `github_dependabot_organization_secret_repositories` resource named `example`.
|
|
130
|
+
This resource can be imported using an ID made up of the secret name:
|
|
135
131
|
|
|
136
132
|
```sh
|
|
137
|
-
$ pulumi import github:index/dependabotOrganizationSecretRepositories:DependabotOrganizationSecretRepositories
|
|
133
|
+
$ pulumi import github:index/dependabotOrganizationSecretRepositories:DependabotOrganizationSecretRepositories test_secret_repos test_secret_name
|
|
138
134
|
```
|
|
139
135
|
|
|
140
136
|
:param str resource_name: The name of the resource.
|
|
141
137
|
:param pulumi.ResourceOptions opts: Options for the resource.
|
|
142
|
-
:param pulumi.Input[_builtins.str] secret_name: Name of the
|
|
143
|
-
:param pulumi.Input[Sequence[pulumi.Input[_builtins.int]]] selected_repository_ids:
|
|
138
|
+
:param pulumi.Input[_builtins.str] secret_name: Name of the existing secret
|
|
139
|
+
:param pulumi.Input[Sequence[pulumi.Input[_builtins.int]]] selected_repository_ids: An array of repository ids that can access the organization secret.
|
|
144
140
|
"""
|
|
145
141
|
...
|
|
146
142
|
@overload
|
|
@@ -149,7 +145,7 @@ class DependabotOrganizationSecretRepositories(pulumi.CustomResource):
|
|
|
149
145
|
args: DependabotOrganizationSecretRepositoriesArgs,
|
|
150
146
|
opts: Optional[pulumi.ResourceOptions] = None):
|
|
151
147
|
"""
|
|
152
|
-
This resource allows you to manage the
|
|
148
|
+
This resource allows you to manage the repository allow list for existing GitHub Dependabot secrets within your GitHub organization.
|
|
153
149
|
You must have write access to an organization secret to use this resource.
|
|
154
150
|
|
|
155
151
|
This resource is only applicable when `visibility` of the existing organization secret has been set to `selected`.
|
|
@@ -160,26 +156,22 @@ class DependabotOrganizationSecretRepositories(pulumi.CustomResource):
|
|
|
160
156
|
import pulumi
|
|
161
157
|
import pulumi_github as github
|
|
162
158
|
|
|
163
|
-
|
|
164
|
-
|
|
165
|
-
|
|
166
|
-
visibility="
|
|
167
|
-
|
|
168
|
-
|
|
169
|
-
|
|
170
|
-
|
|
171
|
-
secret_name=example.name,
|
|
172
|
-
selected_repository_ids=[example_repository.repo_id])
|
|
159
|
+
repo = github.get_repository(full_name="my-org/repo")
|
|
160
|
+
example_secret = github.DependabotOrganizationSecret("example_secret",
|
|
161
|
+
secret_name="example_secret_name",
|
|
162
|
+
visibility="private",
|
|
163
|
+
plaintext_value=some_secret_string)
|
|
164
|
+
org_secret_repos = github.DependabotOrganizationSecretRepositories("org_secret_repos",
|
|
165
|
+
secret_name=example_secret.secret_name,
|
|
166
|
+
selected_repository_ids=[repo.repo_id])
|
|
173
167
|
```
|
|
174
168
|
|
|
175
169
|
## Import
|
|
176
170
|
|
|
177
|
-
|
|
178
|
-
|
|
179
|
-
The following command imports the repositories able to access the Dependabot organization secret named `mysecret` to a `github_dependabot_organization_secret_repositories` resource named `example`.
|
|
171
|
+
This resource can be imported using an ID made up of the secret name:
|
|
180
172
|
|
|
181
173
|
```sh
|
|
182
|
-
$ pulumi import github:index/dependabotOrganizationSecretRepositories:DependabotOrganizationSecretRepositories
|
|
174
|
+
$ pulumi import github:index/dependabotOrganizationSecretRepositories:DependabotOrganizationSecretRepositories test_secret_repos test_secret_name
|
|
183
175
|
```
|
|
184
176
|
|
|
185
177
|
:param str resource_name: The name of the resource.
|
|
@@ -233,8 +225,8 @@ class DependabotOrganizationSecretRepositories(pulumi.CustomResource):
|
|
|
233
225
|
:param str resource_name: The unique name of the resulting resource.
|
|
234
226
|
:param pulumi.Input[str] id: The unique provider ID of the resource to lookup.
|
|
235
227
|
:param pulumi.ResourceOptions opts: Options for the resource.
|
|
236
|
-
:param pulumi.Input[_builtins.str] secret_name: Name of the
|
|
237
|
-
:param pulumi.Input[Sequence[pulumi.Input[_builtins.int]]] selected_repository_ids:
|
|
228
|
+
:param pulumi.Input[_builtins.str] secret_name: Name of the existing secret
|
|
229
|
+
:param pulumi.Input[Sequence[pulumi.Input[_builtins.int]]] selected_repository_ids: An array of repository ids that can access the organization secret.
|
|
238
230
|
"""
|
|
239
231
|
opts = pulumi.ResourceOptions.merge(opts, pulumi.ResourceOptions(id=id))
|
|
240
232
|
|
|
@@ -248,7 +240,7 @@ class DependabotOrganizationSecretRepositories(pulumi.CustomResource):
|
|
|
248
240
|
@pulumi.getter(name="secretName")
|
|
249
241
|
def secret_name(self) -> pulumi.Output[_builtins.str]:
|
|
250
242
|
"""
|
|
251
|
-
Name of the
|
|
243
|
+
Name of the existing secret
|
|
252
244
|
"""
|
|
253
245
|
return pulumi.get(self, "secret_name")
|
|
254
246
|
|
|
@@ -256,7 +248,7 @@ class DependabotOrganizationSecretRepositories(pulumi.CustomResource):
|
|
|
256
248
|
@pulumi.getter(name="selectedRepositoryIds")
|
|
257
249
|
def selected_repository_ids(self) -> pulumi.Output[Sequence[_builtins.int]]:
|
|
258
250
|
"""
|
|
259
|
-
|
|
251
|
+
An array of repository ids that can access the organization secret.
|
|
260
252
|
"""
|
|
261
253
|
return pulumi.get(self, "selected_repository_ids")
|
|
262
254
|
|