pulumi-harness 0.6.0a1741326556__py3-none-any.whl → 0.6.0a1741494185__py3-none-any.whl

This diff represents the content of publicly available package versions that have been released to one of the supported registries. The information contained in this diff is provided for informational purposes only and reflects changes between package versions as they appear in their respective public registries.

Potentially problematic release.

This version of pulumi-harness might be problematic. Click here for more details.

Files changed (19) hide show
  1. pulumi_harness/platform/__init__.py +1 -0
  2. pulumi_harness/platform/_inputs.py +182 -101
  3. pulumi_harness/platform/environment.py +17 -17
  4. pulumi_harness/platform/environment_group.py +14 -14
  5. pulumi_harness/platform/feature_flag.py +47 -0
  6. pulumi_harness/platform/get_gitops_agent_operator_yaml.py +250 -0
  7. pulumi_harness/platform/get_vault_connector.py +57 -1
  8. pulumi_harness/platform/har_registry.py +105 -56
  9. pulumi_harness/platform/infrastructure.py +17 -17
  10. pulumi_harness/platform/outputs.py +134 -85
  11. pulumi_harness/platform/service.py +14 -14
  12. pulumi_harness/platform/template.py +17 -17
  13. pulumi_harness/platform/terraform_cloud_connector.py +47 -0
  14. pulumi_harness/platform/vault_connector.py +254 -10
  15. pulumi_harness/pulumi-plugin.json +1 -1
  16. {pulumi_harness-0.6.0a1741326556.dist-info → pulumi_harness-0.6.0a1741494185.dist-info}/METADATA +1 -1
  17. {pulumi_harness-0.6.0a1741326556.dist-info → pulumi_harness-0.6.0a1741494185.dist-info}/RECORD +19 -18
  18. {pulumi_harness-0.6.0a1741326556.dist-info → pulumi_harness-0.6.0a1741494185.dist-info}/WHEEL +1 -1
  19. {pulumi_harness-0.6.0a1741326556.dist-info → pulumi_harness-0.6.0a1741494185.dist-info}/top_level.txt +0 -0
pulumi_harness/platform/vault_connector.py CHANGED
@@ -30,6 +30,7 @@ class VaultConnectorArgs:
30
30
  default: Optional[pulumi.Input[bool]] = None,
31
31
  delegate_selectors: Optional[pulumi.Input[Sequence[pulumi.Input[str]]]] = None,
32
32
  description: Optional[pulumi.Input[str]] = None,
33
+ execute_on_delegate: Optional[pulumi.Input[bool]] = None,
33
34
  is_default: Optional[pulumi.Input[bool]] = None,
34
35
  is_read_only: Optional[pulumi.Input[bool]] = None,
35
36
  k8s_auth_endpoint: Optional[pulumi.Input[str]] = None,
@@ -47,9 +48,12 @@ class VaultConnectorArgs:
47
48
  sink_path: Optional[pulumi.Input[str]] = None,
48
49
  tags: Optional[pulumi.Input[Sequence[pulumi.Input[str]]]] = None,
49
50
  use_aws_iam: Optional[pulumi.Input[bool]] = None,
51
+ use_jwt_auth: Optional[pulumi.Input[bool]] = None,
50
52
  use_k8s_auth: Optional[pulumi.Input[bool]] = None,
51
53
  use_vault_agent: Optional[pulumi.Input[bool]] = None,
52
54
  vault_aws_iam_role: Optional[pulumi.Input[str]] = None,
55
+ vault_jwt_auth_path: Optional[pulumi.Input[str]] = None,
56
+ vault_jwt_auth_role: Optional[pulumi.Input[str]] = None,
53
57
  vault_k8s_auth_role: Optional[pulumi.Input[str]] = None,
54
58
  xvault_aws_iam_server_id: Optional[pulumi.Input[str]] = None):
55
59
  """
@@ -65,6 +69,7 @@ class VaultConnectorArgs:
65
69
  :param pulumi.Input[bool] default: Is default or not.
66
70
  :param pulumi.Input[Sequence[pulumi.Input[str]]] delegate_selectors: List of Delegate Selectors that belong to the same Delegate and are used to connect to the Secret Manager.
67
71
  :param pulumi.Input[str] description: Description of the resource.
72
+ :param pulumi.Input[bool] execute_on_delegate: Execute on delegate or not.
68
73
  :param pulumi.Input[bool] is_default: Is default or not.
69
74
  :param pulumi.Input[bool] is_read_only: Read only or not.
70
75
  :param pulumi.Input[str] k8s_auth_endpoint: The path where Kubernetes Auth is enabled in Vault.
@@ -82,9 +87,12 @@ class VaultConnectorArgs:
82
87
  :param pulumi.Input[str] sink_path: The location from which the authentication token should be read.
83
88
  :param pulumi.Input[Sequence[pulumi.Input[str]]] tags: Tags to associate with the resource.
84
89
  :param pulumi.Input[bool] use_aws_iam: Boolean value to indicate if AWS IAM is used for authentication.
90
+ :param pulumi.Input[bool] use_jwt_auth: Boolean value to indicate if JWT is used for authentication.
85
91
  :param pulumi.Input[bool] use_k8s_auth: Boolean value to indicate if K8s Auth is used for authentication.
86
92
  :param pulumi.Input[bool] use_vault_agent: Boolean value to indicate if Vault Agent is used for authentication.
87
93
  :param pulumi.Input[str] vault_aws_iam_role: The Vault role defined to bind to aws iam account/role being accessed.
94
+ :param pulumi.Input[str] vault_jwt_auth_path: Custom path at with JWT auth in enabled for Vault.
95
+ :param pulumi.Input[str] vault_jwt_auth_role: The Vault role defined with JWT auth type for accessing Vault as per policies binded.
88
96
  :param pulumi.Input[str] vault_k8s_auth_role: The role where K8s Auth will happen.
89
97
  :param pulumi.Input[str] xvault_aws_iam_server_id: The AWS IAM Header Server ID that has been configured for this AWS IAM instance.
90
98
  """
@@ -107,6 +115,8 @@ class VaultConnectorArgs:
107
115
  pulumi.set(__self__, "delegate_selectors", delegate_selectors)
108
116
  if description is not None:
109
117
  pulumi.set(__self__, "description", description)
118
+ if execute_on_delegate is not None:
119
+ pulumi.set(__self__, "execute_on_delegate", execute_on_delegate)
110
120
  if is_default is not None:
111
121
  pulumi.set(__self__, "is_default", is_default)
112
122
  if is_read_only is not None:
@@ -141,12 +151,18 @@ class VaultConnectorArgs:
141
151
  pulumi.set(__self__, "tags", tags)
142
152
  if use_aws_iam is not None:
143
153
  pulumi.set(__self__, "use_aws_iam", use_aws_iam)
154
+ if use_jwt_auth is not None:
155
+ pulumi.set(__self__, "use_jwt_auth", use_jwt_auth)
144
156
  if use_k8s_auth is not None:
145
157
  pulumi.set(__self__, "use_k8s_auth", use_k8s_auth)
146
158
  if use_vault_agent is not None:
147
159
  pulumi.set(__self__, "use_vault_agent", use_vault_agent)
148
160
  if vault_aws_iam_role is not None:
149
161
  pulumi.set(__self__, "vault_aws_iam_role", vault_aws_iam_role)
162
+ if vault_jwt_auth_path is not None:
163
+ pulumi.set(__self__, "vault_jwt_auth_path", vault_jwt_auth_path)
164
+ if vault_jwt_auth_role is not None:
165
+ pulumi.set(__self__, "vault_jwt_auth_role", vault_jwt_auth_role)
150
166
  if vault_k8s_auth_role is not None:
151
167
  pulumi.set(__self__, "vault_k8s_auth_role", vault_k8s_auth_role)
152
168
  if xvault_aws_iam_server_id is not None:
@@ -284,6 +300,18 @@ class VaultConnectorArgs:
284
300
  def description(self, value: Optional[pulumi.Input[str]]):
285
301
  pulumi.set(self, "description", value)
286
302
 
303
+ @property
304
+ @pulumi.getter(name="executeOnDelegate")
305
+ def execute_on_delegate(self) -> Optional[pulumi.Input[bool]]:
306
+ """
307
+ Execute on delegate or not.
308
+ """
309
+ return pulumi.get(self, "execute_on_delegate")
310
+
311
+ @execute_on_delegate.setter
312
+ def execute_on_delegate(self, value: Optional[pulumi.Input[bool]]):
313
+ pulumi.set(self, "execute_on_delegate", value)
314
+
287
315
  @property
288
316
  @pulumi.getter(name="isDefault")
289
317
  def is_default(self) -> Optional[pulumi.Input[bool]]:
@@ -488,6 +516,18 @@ class VaultConnectorArgs:
488
516
  def use_aws_iam(self, value: Optional[pulumi.Input[bool]]):
489
517
  pulumi.set(self, "use_aws_iam", value)
490
518
 
519
+ @property
520
+ @pulumi.getter(name="useJwtAuth")
521
+ def use_jwt_auth(self) -> Optional[pulumi.Input[bool]]:
522
+ """
523
+ Boolean value to indicate if JWT is used for authentication.
524
+ """
525
+ return pulumi.get(self, "use_jwt_auth")
526
+
527
+ @use_jwt_auth.setter
528
+ def use_jwt_auth(self, value: Optional[pulumi.Input[bool]]):
529
+ pulumi.set(self, "use_jwt_auth", value)
530
+
491
531
  @property
492
532
  @pulumi.getter(name="useK8sAuth")
493
533
  def use_k8s_auth(self) -> Optional[pulumi.Input[bool]]:
@@ -524,6 +564,30 @@ class VaultConnectorArgs:
524
564
  def vault_aws_iam_role(self, value: Optional[pulumi.Input[str]]):
525
565
  pulumi.set(self, "vault_aws_iam_role", value)
526
566
 
567
+ @property
568
+ @pulumi.getter(name="vaultJwtAuthPath")
569
+ def vault_jwt_auth_path(self) -> Optional[pulumi.Input[str]]:
570
+ """
571
+ Custom path at with JWT auth in enabled for Vault.
572
+ """
573
+ return pulumi.get(self, "vault_jwt_auth_path")
574
+
575
+ @vault_jwt_auth_path.setter
576
+ def vault_jwt_auth_path(self, value: Optional[pulumi.Input[str]]):
577
+ pulumi.set(self, "vault_jwt_auth_path", value)
578
+
579
+ @property
580
+ @pulumi.getter(name="vaultJwtAuthRole")
581
+ def vault_jwt_auth_role(self) -> Optional[pulumi.Input[str]]:
582
+ """
583
+ The Vault role defined with JWT auth type for accessing Vault as per policies binded.
584
+ """
585
+ return pulumi.get(self, "vault_jwt_auth_role")
586
+
587
+ @vault_jwt_auth_role.setter
588
+ def vault_jwt_auth_role(self, value: Optional[pulumi.Input[str]]):
589
+ pulumi.set(self, "vault_jwt_auth_role", value)
590
+
527
591
  @property
528
592
  @pulumi.getter(name="vaultK8sAuthRole")
529
593
  def vault_k8s_auth_role(self) -> Optional[pulumi.Input[str]]:
@@ -560,6 +624,7 @@ class _VaultConnectorState:
560
624
  default: Optional[pulumi.Input[bool]] = None,
561
625
  delegate_selectors: Optional[pulumi.Input[Sequence[pulumi.Input[str]]]] = None,
562
626
  description: Optional[pulumi.Input[str]] = None,
627
+ execute_on_delegate: Optional[pulumi.Input[bool]] = None,
563
628
  identifier: Optional[pulumi.Input[str]] = None,
564
629
  is_default: Optional[pulumi.Input[bool]] = None,
565
630
  is_read_only: Optional[pulumi.Input[bool]] = None,
@@ -579,9 +644,12 @@ class _VaultConnectorState:
579
644
  sink_path: Optional[pulumi.Input[str]] = None,
580
645
  tags: Optional[pulumi.Input[Sequence[pulumi.Input[str]]]] = None,
581
646
  use_aws_iam: Optional[pulumi.Input[bool]] = None,
647
+ use_jwt_auth: Optional[pulumi.Input[bool]] = None,
582
648
  use_k8s_auth: Optional[pulumi.Input[bool]] = None,
583
649
  use_vault_agent: Optional[pulumi.Input[bool]] = None,
584
650
  vault_aws_iam_role: Optional[pulumi.Input[str]] = None,
651
+ vault_jwt_auth_path: Optional[pulumi.Input[str]] = None,
652
+ vault_jwt_auth_role: Optional[pulumi.Input[str]] = None,
585
653
  vault_k8s_auth_role: Optional[pulumi.Input[str]] = None,
586
654
  vault_url: Optional[pulumi.Input[str]] = None,
587
655
  xvault_aws_iam_server_id: Optional[pulumi.Input[str]] = None):
@@ -595,6 +663,7 @@ class _VaultConnectorState:
595
663
  :param pulumi.Input[bool] default: Is default or not.
596
664
  :param pulumi.Input[Sequence[pulumi.Input[str]]] delegate_selectors: List of Delegate Selectors that belong to the same Delegate and are used to connect to the Secret Manager.
597
665
  :param pulumi.Input[str] description: Description of the resource.
666
+ :param pulumi.Input[bool] execute_on_delegate: Execute on delegate or not.
598
667
  :param pulumi.Input[str] identifier: Unique identifier of the resource.
599
668
  :param pulumi.Input[bool] is_default: Is default or not.
600
669
  :param pulumi.Input[bool] is_read_only: Read only or not.
@@ -614,9 +683,12 @@ class _VaultConnectorState:
614
683
  :param pulumi.Input[str] sink_path: The location from which the authentication token should be read.
615
684
  :param pulumi.Input[Sequence[pulumi.Input[str]]] tags: Tags to associate with the resource.
616
685
  :param pulumi.Input[bool] use_aws_iam: Boolean value to indicate if AWS IAM is used for authentication.
686
+ :param pulumi.Input[bool] use_jwt_auth: Boolean value to indicate if JWT is used for authentication.
617
687
  :param pulumi.Input[bool] use_k8s_auth: Boolean value to indicate if K8s Auth is used for authentication.
618
688
  :param pulumi.Input[bool] use_vault_agent: Boolean value to indicate if Vault Agent is used for authentication.
619
689
  :param pulumi.Input[str] vault_aws_iam_role: The Vault role defined to bind to aws iam account/role being accessed.
690
+ :param pulumi.Input[str] vault_jwt_auth_path: Custom path at with JWT auth in enabled for Vault.
691
+ :param pulumi.Input[str] vault_jwt_auth_role: The Vault role defined with JWT auth type for accessing Vault as per policies binded.
620
692
  :param pulumi.Input[str] vault_k8s_auth_role: The role where K8s Auth will happen.
621
693
  :param pulumi.Input[str] vault_url: URL of the HashiCorp Vault.
622
694
  :param pulumi.Input[str] xvault_aws_iam_server_id: The AWS IAM Header Server ID that has been configured for this AWS IAM instance.
@@ -637,6 +709,8 @@ class _VaultConnectorState:
637
709
  pulumi.set(__self__, "delegate_selectors", delegate_selectors)
638
710
  if description is not None:
639
711
  pulumi.set(__self__, "description", description)
712
+ if execute_on_delegate is not None:
713
+ pulumi.set(__self__, "execute_on_delegate", execute_on_delegate)
640
714
  if identifier is not None:
641
715
  pulumi.set(__self__, "identifier", identifier)
642
716
  if is_default is not None:
@@ -675,12 +749,18 @@ class _VaultConnectorState:
675
749
  pulumi.set(__self__, "tags", tags)
676
750
  if use_aws_iam is not None:
677
751
  pulumi.set(__self__, "use_aws_iam", use_aws_iam)
752
+ if use_jwt_auth is not None:
753
+ pulumi.set(__self__, "use_jwt_auth", use_jwt_auth)
678
754
  if use_k8s_auth is not None:
679
755
  pulumi.set(__self__, "use_k8s_auth", use_k8s_auth)
680
756
  if use_vault_agent is not None:
681
757
  pulumi.set(__self__, "use_vault_agent", use_vault_agent)
682
758
  if vault_aws_iam_role is not None:
683
759
  pulumi.set(__self__, "vault_aws_iam_role", vault_aws_iam_role)
760
+ if vault_jwt_auth_path is not None:
761
+ pulumi.set(__self__, "vault_jwt_auth_path", vault_jwt_auth_path)
762
+ if vault_jwt_auth_role is not None:
763
+ pulumi.set(__self__, "vault_jwt_auth_role", vault_jwt_auth_role)
684
764
  if vault_k8s_auth_role is not None:
685
765
  pulumi.set(__self__, "vault_k8s_auth_role", vault_k8s_auth_role)
686
766
  if vault_url is not None:
@@ -784,6 +864,18 @@ class _VaultConnectorState:
784
864
  def description(self, value: Optional[pulumi.Input[str]]):
785
865
  pulumi.set(self, "description", value)
786
866
 
867
+ @property
868
+ @pulumi.getter(name="executeOnDelegate")
869
+ def execute_on_delegate(self) -> Optional[pulumi.Input[bool]]:
870
+ """
871
+ Execute on delegate or not.
872
+ """
873
+ return pulumi.get(self, "execute_on_delegate")
874
+
875
+ @execute_on_delegate.setter
876
+ def execute_on_delegate(self, value: Optional[pulumi.Input[bool]]):
877
+ pulumi.set(self, "execute_on_delegate", value)
878
+
787
879
  @property
788
880
  @pulumi.getter
789
881
  def identifier(self) -> Optional[pulumi.Input[str]]:
@@ -1012,6 +1104,18 @@ class _VaultConnectorState:
1012
1104
  def use_aws_iam(self, value: Optional[pulumi.Input[bool]]):
1013
1105
  pulumi.set(self, "use_aws_iam", value)
1014
1106
 
1107
+ @property
1108
+ @pulumi.getter(name="useJwtAuth")
1109
+ def use_jwt_auth(self) -> Optional[pulumi.Input[bool]]:
1110
+ """
1111
+ Boolean value to indicate if JWT is used for authentication.
1112
+ """
1113
+ return pulumi.get(self, "use_jwt_auth")
1114
+
1115
+ @use_jwt_auth.setter
1116
+ def use_jwt_auth(self, value: Optional[pulumi.Input[bool]]):
1117
+ pulumi.set(self, "use_jwt_auth", value)
1118
+
1015
1119
  @property
1016
1120
  @pulumi.getter(name="useK8sAuth")
1017
1121
  def use_k8s_auth(self) -> Optional[pulumi.Input[bool]]:
@@ -1048,6 +1152,30 @@ class _VaultConnectorState:
1048
1152
  def vault_aws_iam_role(self, value: Optional[pulumi.Input[str]]):
1049
1153
  pulumi.set(self, "vault_aws_iam_role", value)
1050
1154
 
1155
+ @property
1156
+ @pulumi.getter(name="vaultJwtAuthPath")
1157
+ def vault_jwt_auth_path(self) -> Optional[pulumi.Input[str]]:
1158
+ """
1159
+ Custom path at with JWT auth in enabled for Vault.
1160
+ """
1161
+ return pulumi.get(self, "vault_jwt_auth_path")
1162
+
1163
+ @vault_jwt_auth_path.setter
1164
+ def vault_jwt_auth_path(self, value: Optional[pulumi.Input[str]]):
1165
+ pulumi.set(self, "vault_jwt_auth_path", value)
1166
+
1167
+ @property
1168
+ @pulumi.getter(name="vaultJwtAuthRole")
1169
+ def vault_jwt_auth_role(self) -> Optional[pulumi.Input[str]]:
1170
+ """
1171
+ The Vault role defined with JWT auth type for accessing Vault as per policies binded.
1172
+ """
1173
+ return pulumi.get(self, "vault_jwt_auth_role")
1174
+
1175
+ @vault_jwt_auth_role.setter
1176
+ def vault_jwt_auth_role(self, value: Optional[pulumi.Input[str]]):
1177
+ pulumi.set(self, "vault_jwt_auth_role", value)
1178
+
1051
1179
  @property
1052
1180
  @pulumi.getter(name="vaultK8sAuthRole")
1053
1181
  def vault_k8s_auth_role(self) -> Optional[pulumi.Input[str]]:
@@ -1098,6 +1226,7 @@ class VaultConnector(pulumi.CustomResource):
1098
1226
  default: Optional[pulumi.Input[bool]] = None,
1099
1227
  delegate_selectors: Optional[pulumi.Input[Sequence[pulumi.Input[str]]]] = None,
1100
1228
  description: Optional[pulumi.Input[str]] = None,
1229
+ execute_on_delegate: Optional[pulumi.Input[bool]] = None,
1101
1230
  identifier: Optional[pulumi.Input[str]] = None,
1102
1231
  is_default: Optional[pulumi.Input[bool]] = None,
1103
1232
  is_read_only: Optional[pulumi.Input[bool]] = None,
@@ -1117,9 +1246,12 @@ class VaultConnector(pulumi.CustomResource):
1117
1246
  sink_path: Optional[pulumi.Input[str]] = None,
1118
1247
  tags: Optional[pulumi.Input[Sequence[pulumi.Input[str]]]] = None,
1119
1248
  use_aws_iam: Optional[pulumi.Input[bool]] = None,
1249
+ use_jwt_auth: Optional[pulumi.Input[bool]] = None,
1120
1250
  use_k8s_auth: Optional[pulumi.Input[bool]] = None,
1121
1251
  use_vault_agent: Optional[pulumi.Input[bool]] = None,
1122
1252
  vault_aws_iam_role: Optional[pulumi.Input[str]] = None,
1253
+ vault_jwt_auth_path: Optional[pulumi.Input[str]] = None,
1254
+ vault_jwt_auth_role: Optional[pulumi.Input[str]] = None,
1123
1255
  vault_k8s_auth_role: Optional[pulumi.Input[str]] = None,
1124
1256
  vault_url: Optional[pulumi.Input[str]] = None,
1125
1257
  xvault_aws_iam_server_id: Optional[pulumi.Input[str]] = None,
@@ -1151,7 +1283,8 @@ class VaultConnector(pulumi.CustomResource):
1151
1283
  use_k8s_auth=False,
1152
1284
  use_vault_agent=False,
1153
1285
  delegate_selectors=["harness-delegate"],
1154
- vault_url="https://vault_url.com")
1286
+ vault_url="https://vault_url.com",
1287
+ use_jwt_auth=False)
1155
1288
  app_role = harness.platform.VaultConnector("app_role",
1156
1289
  identifier="identifier",
1157
1290
  name="name",
@@ -1172,7 +1305,8 @@ class VaultConnector(pulumi.CustomResource):
1172
1305
  use_vault_agent=False,
1173
1306
  renew_app_role_token=True,
1174
1307
  delegate_selectors=["harness-delegate"],
1175
- vault_url="https://vault_url.com")
1308
+ vault_url="https://vault_url.com",
1309
+ use_jwt_auth=False)
1176
1310
  k8s_auth = harness.platform.VaultConnector("k8s_auth",
1177
1311
  identifier="identifier",
1178
1312
  name="name",
@@ -1196,7 +1330,8 @@ class VaultConnector(pulumi.CustomResource):
1196
1330
  vault_k8s_auth_role="vault_k8s_auth_role",
1197
1331
  vault_aws_iam_role="vault_aws_iam_role",
1198
1332
  delegate_selectors=["harness-delegate"],
1199
- vault_url="https://vault_url.com")
1333
+ vault_url="https://vault_url.com",
1334
+ use_jwt_auth=False)
1200
1335
  vault_agent = harness.platform.VaultConnector("vault_agent",
1201
1336
  identifier="identifier",
1202
1337
  name="name",
@@ -1217,7 +1352,8 @@ class VaultConnector(pulumi.CustomResource):
1217
1352
  use_vault_agent=True,
1218
1353
  sink_path="sink_path",
1219
1354
  delegate_selectors=["harness-delegate"],
1220
- vault_url="https://vault_url.com")
1355
+ vault_url="https://vault_url.com",
1356
+ use_jwt_auth=False)
1221
1357
  token = harness.platform.VaultConnector("token",
1222
1358
  identifier="identifier",
1223
1359
  name="name",
@@ -1235,7 +1371,31 @@ class VaultConnector(pulumi.CustomResource):
1235
1371
  secret_engine_version=2,
1236
1372
  use_aws_iam=False,
1237
1373
  use_k8s_auth=False,
1238
- vault_url="https://vault_url.com")
1374
+ vault_url="https://vault_url.com",
1375
+ use_jwt_auth=False)
1376
+ jwt = harness.platform.VaultConnector("jwt",
1377
+ identifier="identifier",
1378
+ name="name",
1379
+ description="test",
1380
+ tags=["foo:bar"],
1381
+ base_path="base_path",
1382
+ access_type="JWT",
1383
+ default=False,
1384
+ read_only=True,
1385
+ renewal_interval_minutes=60,
1386
+ secret_engine_manually_configured=True,
1387
+ secret_engine_name="secret_engine_name",
1388
+ secret_engine_version=2,
1389
+ use_aws_iam=False,
1390
+ use_k8s_auth=False,
1391
+ use_vault_agent=False,
1392
+ renew_app_role_token=False,
1393
+ delegate_selectors=["harness-delegate"],
1394
+ vault_url="https://vault_url.com",
1395
+ use_jwt_auth=True,
1396
+ vault_jwt_auth_role="vault_jwt_auth_role",
1397
+ vault_jwt_auth_path="vault_jwt_auth_path",
1398
+ execute_on_delegate=True)
1239
1399
  ```
1240
1400
 
1241
1401
  ## Import
@@ -1268,6 +1428,7 @@ class VaultConnector(pulumi.CustomResource):
1268
1428
  :param pulumi.Input[bool] default: Is default or not.
1269
1429
  :param pulumi.Input[Sequence[pulumi.Input[str]]] delegate_selectors: List of Delegate Selectors that belong to the same Delegate and are used to connect to the Secret Manager.
1270
1430
  :param pulumi.Input[str] description: Description of the resource.
1431
+ :param pulumi.Input[bool] execute_on_delegate: Execute on delegate or not.
1271
1432
  :param pulumi.Input[str] identifier: Unique identifier of the resource.
1272
1433
  :param pulumi.Input[bool] is_default: Is default or not.
1273
1434
  :param pulumi.Input[bool] is_read_only: Read only or not.
@@ -1287,9 +1448,12 @@ class VaultConnector(pulumi.CustomResource):
1287
1448
  :param pulumi.Input[str] sink_path: The location from which the authentication token should be read.
1288
1449
  :param pulumi.Input[Sequence[pulumi.Input[str]]] tags: Tags to associate with the resource.
1289
1450
  :param pulumi.Input[bool] use_aws_iam: Boolean value to indicate if AWS IAM is used for authentication.
1451
+ :param pulumi.Input[bool] use_jwt_auth: Boolean value to indicate if JWT is used for authentication.
1290
1452
  :param pulumi.Input[bool] use_k8s_auth: Boolean value to indicate if K8s Auth is used for authentication.
1291
1453
  :param pulumi.Input[bool] use_vault_agent: Boolean value to indicate if Vault Agent is used for authentication.
1292
1454
  :param pulumi.Input[str] vault_aws_iam_role: The Vault role defined to bind to aws iam account/role being accessed.
1455
+ :param pulumi.Input[str] vault_jwt_auth_path: Custom path at with JWT auth in enabled for Vault.
1456
+ :param pulumi.Input[str] vault_jwt_auth_role: The Vault role defined with JWT auth type for accessing Vault as per policies binded.
1293
1457
  :param pulumi.Input[str] vault_k8s_auth_role: The role where K8s Auth will happen.
1294
1458
  :param pulumi.Input[str] vault_url: URL of the HashiCorp Vault.
1295
1459
  :param pulumi.Input[str] xvault_aws_iam_server_id: The AWS IAM Header Server ID that has been configured for this AWS IAM instance.
@@ -1327,7 +1491,8 @@ class VaultConnector(pulumi.CustomResource):
1327
1491
  use_k8s_auth=False,
1328
1492
  use_vault_agent=False,
1329
1493
  delegate_selectors=["harness-delegate"],
1330
- vault_url="https://vault_url.com")
1494
+ vault_url="https://vault_url.com",
1495
+ use_jwt_auth=False)
1331
1496
  app_role = harness.platform.VaultConnector("app_role",
1332
1497
  identifier="identifier",
1333
1498
  name="name",
@@ -1348,7 +1513,8 @@ class VaultConnector(pulumi.CustomResource):
1348
1513
  use_vault_agent=False,
1349
1514
  renew_app_role_token=True,
1350
1515
  delegate_selectors=["harness-delegate"],
1351
- vault_url="https://vault_url.com")
1516
+ vault_url="https://vault_url.com",
1517
+ use_jwt_auth=False)
1352
1518
  k8s_auth = harness.platform.VaultConnector("k8s_auth",
1353
1519
  identifier="identifier",
1354
1520
  name="name",
@@ -1372,7 +1538,8 @@ class VaultConnector(pulumi.CustomResource):
1372
1538
  vault_k8s_auth_role="vault_k8s_auth_role",
1373
1539
  vault_aws_iam_role="vault_aws_iam_role",
1374
1540
  delegate_selectors=["harness-delegate"],
1375
- vault_url="https://vault_url.com")
1541
+ vault_url="https://vault_url.com",
1542
+ use_jwt_auth=False)
1376
1543
  vault_agent = harness.platform.VaultConnector("vault_agent",
1377
1544
  identifier="identifier",
1378
1545
  name="name",
@@ -1393,7 +1560,8 @@ class VaultConnector(pulumi.CustomResource):
1393
1560
  use_vault_agent=True,
1394
1561
  sink_path="sink_path",
1395
1562
  delegate_selectors=["harness-delegate"],
1396
- vault_url="https://vault_url.com")
1563
+ vault_url="https://vault_url.com",
1564
+ use_jwt_auth=False)
1397
1565
  token = harness.platform.VaultConnector("token",
1398
1566
  identifier="identifier",
1399
1567
  name="name",
@@ -1411,7 +1579,31 @@ class VaultConnector(pulumi.CustomResource):
1411
1579
  secret_engine_version=2,
1412
1580
  use_aws_iam=False,
1413
1581
  use_k8s_auth=False,
1414
- vault_url="https://vault_url.com")
1582
+ vault_url="https://vault_url.com",
1583
+ use_jwt_auth=False)
1584
+ jwt = harness.platform.VaultConnector("jwt",
1585
+ identifier="identifier",
1586
+ name="name",
1587
+ description="test",
1588
+ tags=["foo:bar"],
1589
+ base_path="base_path",
1590
+ access_type="JWT",
1591
+ default=False,
1592
+ read_only=True,
1593
+ renewal_interval_minutes=60,
1594
+ secret_engine_manually_configured=True,
1595
+ secret_engine_name="secret_engine_name",
1596
+ secret_engine_version=2,
1597
+ use_aws_iam=False,
1598
+ use_k8s_auth=False,
1599
+ use_vault_agent=False,
1600
+ renew_app_role_token=False,
1601
+ delegate_selectors=["harness-delegate"],
1602
+ vault_url="https://vault_url.com",
1603
+ use_jwt_auth=True,
1604
+ vault_jwt_auth_role="vault_jwt_auth_role",
1605
+ vault_jwt_auth_path="vault_jwt_auth_path",
1606
+ execute_on_delegate=True)
1415
1607
  ```
1416
1608
 
1417
1609
  ## Import
@@ -1457,6 +1649,7 @@ class VaultConnector(pulumi.CustomResource):
1457
1649
  default: Optional[pulumi.Input[bool]] = None,
1458
1650
  delegate_selectors: Optional[pulumi.Input[Sequence[pulumi.Input[str]]]] = None,
1459
1651
  description: Optional[pulumi.Input[str]] = None,
1652
+ execute_on_delegate: Optional[pulumi.Input[bool]] = None,
1460
1653
  identifier: Optional[pulumi.Input[str]] = None,
1461
1654
  is_default: Optional[pulumi.Input[bool]] = None,
1462
1655
  is_read_only: Optional[pulumi.Input[bool]] = None,
@@ -1476,9 +1669,12 @@ class VaultConnector(pulumi.CustomResource):
1476
1669
  sink_path: Optional[pulumi.Input[str]] = None,
1477
1670
  tags: Optional[pulumi.Input[Sequence[pulumi.Input[str]]]] = None,
1478
1671
  use_aws_iam: Optional[pulumi.Input[bool]] = None,
1672
+ use_jwt_auth: Optional[pulumi.Input[bool]] = None,
1479
1673
  use_k8s_auth: Optional[pulumi.Input[bool]] = None,
1480
1674
  use_vault_agent: Optional[pulumi.Input[bool]] = None,
1481
1675
  vault_aws_iam_role: Optional[pulumi.Input[str]] = None,
1676
+ vault_jwt_auth_path: Optional[pulumi.Input[str]] = None,
1677
+ vault_jwt_auth_role: Optional[pulumi.Input[str]] = None,
1482
1678
  vault_k8s_auth_role: Optional[pulumi.Input[str]] = None,
1483
1679
  vault_url: Optional[pulumi.Input[str]] = None,
1484
1680
  xvault_aws_iam_server_id: Optional[pulumi.Input[str]] = None,
@@ -1499,6 +1695,7 @@ class VaultConnector(pulumi.CustomResource):
1499
1695
  __props__.__dict__["default"] = default
1500
1696
  __props__.__dict__["delegate_selectors"] = delegate_selectors
1501
1697
  __props__.__dict__["description"] = description
1698
+ __props__.__dict__["execute_on_delegate"] = execute_on_delegate
1502
1699
  if identifier is None and not opts.urn:
1503
1700
  raise TypeError("Missing required property 'identifier'")
1504
1701
  __props__.__dict__["identifier"] = identifier
@@ -1522,9 +1719,12 @@ class VaultConnector(pulumi.CustomResource):
1522
1719
  __props__.__dict__["sink_path"] = sink_path
1523
1720
  __props__.__dict__["tags"] = tags
1524
1721
  __props__.__dict__["use_aws_iam"] = use_aws_iam
1722
+ __props__.__dict__["use_jwt_auth"] = use_jwt_auth
1525
1723
  __props__.__dict__["use_k8s_auth"] = use_k8s_auth
1526
1724
  __props__.__dict__["use_vault_agent"] = use_vault_agent
1527
1725
  __props__.__dict__["vault_aws_iam_role"] = vault_aws_iam_role
1726
+ __props__.__dict__["vault_jwt_auth_path"] = vault_jwt_auth_path
1727
+ __props__.__dict__["vault_jwt_auth_role"] = vault_jwt_auth_role
1528
1728
  __props__.__dict__["vault_k8s_auth_role"] = vault_k8s_auth_role
1529
1729
  if vault_url is None and not opts.urn:
1530
1730
  raise TypeError("Missing required property 'vault_url'")
@@ -1548,6 +1748,7 @@ class VaultConnector(pulumi.CustomResource):
1548
1748
  default: Optional[pulumi.Input[bool]] = None,
1549
1749
  delegate_selectors: Optional[pulumi.Input[Sequence[pulumi.Input[str]]]] = None,
1550
1750
  description: Optional[pulumi.Input[str]] = None,
1751
+ execute_on_delegate: Optional[pulumi.Input[bool]] = None,
1551
1752
  identifier: Optional[pulumi.Input[str]] = None,
1552
1753
  is_default: Optional[pulumi.Input[bool]] = None,
1553
1754
  is_read_only: Optional[pulumi.Input[bool]] = None,
@@ -1567,9 +1768,12 @@ class VaultConnector(pulumi.CustomResource):
1567
1768
  sink_path: Optional[pulumi.Input[str]] = None,
1568
1769
  tags: Optional[pulumi.Input[Sequence[pulumi.Input[str]]]] = None,
1569
1770
  use_aws_iam: Optional[pulumi.Input[bool]] = None,
1771
+ use_jwt_auth: Optional[pulumi.Input[bool]] = None,
1570
1772
  use_k8s_auth: Optional[pulumi.Input[bool]] = None,
1571
1773
  use_vault_agent: Optional[pulumi.Input[bool]] = None,
1572
1774
  vault_aws_iam_role: Optional[pulumi.Input[str]] = None,
1775
+ vault_jwt_auth_path: Optional[pulumi.Input[str]] = None,
1776
+ vault_jwt_auth_role: Optional[pulumi.Input[str]] = None,
1573
1777
  vault_k8s_auth_role: Optional[pulumi.Input[str]] = None,
1574
1778
  vault_url: Optional[pulumi.Input[str]] = None,
1575
1779
  xvault_aws_iam_server_id: Optional[pulumi.Input[str]] = None) -> 'VaultConnector':
@@ -1588,6 +1792,7 @@ class VaultConnector(pulumi.CustomResource):
1588
1792
  :param pulumi.Input[bool] default: Is default or not.
1589
1793
  :param pulumi.Input[Sequence[pulumi.Input[str]]] delegate_selectors: List of Delegate Selectors that belong to the same Delegate and are used to connect to the Secret Manager.
1590
1794
  :param pulumi.Input[str] description: Description of the resource.
1795
+ :param pulumi.Input[bool] execute_on_delegate: Execute on delegate or not.
1591
1796
  :param pulumi.Input[str] identifier: Unique identifier of the resource.
1592
1797
  :param pulumi.Input[bool] is_default: Is default or not.
1593
1798
  :param pulumi.Input[bool] is_read_only: Read only or not.
@@ -1607,9 +1812,12 @@ class VaultConnector(pulumi.CustomResource):
1607
1812
  :param pulumi.Input[str] sink_path: The location from which the authentication token should be read.
1608
1813
  :param pulumi.Input[Sequence[pulumi.Input[str]]] tags: Tags to associate with the resource.
1609
1814
  :param pulumi.Input[bool] use_aws_iam: Boolean value to indicate if AWS IAM is used for authentication.
1815
+ :param pulumi.Input[bool] use_jwt_auth: Boolean value to indicate if JWT is used for authentication.
1610
1816
  :param pulumi.Input[bool] use_k8s_auth: Boolean value to indicate if K8s Auth is used for authentication.
1611
1817
  :param pulumi.Input[bool] use_vault_agent: Boolean value to indicate if Vault Agent is used for authentication.
1612
1818
  :param pulumi.Input[str] vault_aws_iam_role: The Vault role defined to bind to aws iam account/role being accessed.
1819
+ :param pulumi.Input[str] vault_jwt_auth_path: Custom path at with JWT auth in enabled for Vault.
1820
+ :param pulumi.Input[str] vault_jwt_auth_role: The Vault role defined with JWT auth type for accessing Vault as per policies binded.
1613
1821
  :param pulumi.Input[str] vault_k8s_auth_role: The role where K8s Auth will happen.
1614
1822
  :param pulumi.Input[str] vault_url: URL of the HashiCorp Vault.
1615
1823
  :param pulumi.Input[str] xvault_aws_iam_server_id: The AWS IAM Header Server ID that has been configured for this AWS IAM instance.
@@ -1626,6 +1834,7 @@ class VaultConnector(pulumi.CustomResource):
1626
1834
  __props__.__dict__["default"] = default
1627
1835
  __props__.__dict__["delegate_selectors"] = delegate_selectors
1628
1836
  __props__.__dict__["description"] = description
1837
+ __props__.__dict__["execute_on_delegate"] = execute_on_delegate
1629
1838
  __props__.__dict__["identifier"] = identifier
1630
1839
  __props__.__dict__["is_default"] = is_default
1631
1840
  __props__.__dict__["is_read_only"] = is_read_only
@@ -1645,9 +1854,12 @@ class VaultConnector(pulumi.CustomResource):
1645
1854
  __props__.__dict__["sink_path"] = sink_path
1646
1855
  __props__.__dict__["tags"] = tags
1647
1856
  __props__.__dict__["use_aws_iam"] = use_aws_iam
1857
+ __props__.__dict__["use_jwt_auth"] = use_jwt_auth
1648
1858
  __props__.__dict__["use_k8s_auth"] = use_k8s_auth
1649
1859
  __props__.__dict__["use_vault_agent"] = use_vault_agent
1650
1860
  __props__.__dict__["vault_aws_iam_role"] = vault_aws_iam_role
1861
+ __props__.__dict__["vault_jwt_auth_path"] = vault_jwt_auth_path
1862
+ __props__.__dict__["vault_jwt_auth_role"] = vault_jwt_auth_role
1651
1863
  __props__.__dict__["vault_k8s_auth_role"] = vault_k8s_auth_role
1652
1864
  __props__.__dict__["vault_url"] = vault_url
1653
1865
  __props__.__dict__["xvault_aws_iam_server_id"] = xvault_aws_iam_server_id
@@ -1717,6 +1929,14 @@ class VaultConnector(pulumi.CustomResource):
1717
1929
  """
1718
1930
  return pulumi.get(self, "description")
1719
1931
 
1932
+ @property
1933
+ @pulumi.getter(name="executeOnDelegate")
1934
+ def execute_on_delegate(self) -> pulumi.Output[Optional[bool]]:
1935
+ """
1936
+ Execute on delegate or not.
1937
+ """
1938
+ return pulumi.get(self, "execute_on_delegate")
1939
+
1720
1940
  @property
1721
1941
  @pulumi.getter
1722
1942
  def identifier(self) -> pulumi.Output[str]:
@@ -1869,6 +2089,14 @@ class VaultConnector(pulumi.CustomResource):
1869
2089
  """
1870
2090
  return pulumi.get(self, "use_aws_iam")
1871
2091
 
2092
+ @property
2093
+ @pulumi.getter(name="useJwtAuth")
2094
+ def use_jwt_auth(self) -> pulumi.Output[Optional[bool]]:
2095
+ """
2096
+ Boolean value to indicate if JWT is used for authentication.
2097
+ """
2098
+ return pulumi.get(self, "use_jwt_auth")
2099
+
1872
2100
  @property
1873
2101
  @pulumi.getter(name="useK8sAuth")
1874
2102
  def use_k8s_auth(self) -> pulumi.Output[Optional[bool]]:
@@ -1893,6 +2121,22 @@ class VaultConnector(pulumi.CustomResource):
1893
2121
  """
1894
2122
  return pulumi.get(self, "vault_aws_iam_role")
1895
2123
 
2124
+ @property
2125
+ @pulumi.getter(name="vaultJwtAuthPath")
2126
+ def vault_jwt_auth_path(self) -> pulumi.Output[Optional[str]]:
2127
+ """
2128
+ Custom path at with JWT auth in enabled for Vault.
2129
+ """
2130
+ return pulumi.get(self, "vault_jwt_auth_path")
2131
+
2132
+ @property
2133
+ @pulumi.getter(name="vaultJwtAuthRole")
2134
+ def vault_jwt_auth_role(self) -> pulumi.Output[Optional[str]]:
2135
+ """
2136
+ The Vault role defined with JWT auth type for accessing Vault as per policies binded.
2137
+ """
2138
+ return pulumi.get(self, "vault_jwt_auth_role")
2139
+
1896
2140
  @property
1897
2141
  @pulumi.getter(name="vaultK8sAuthRole")
1898
2142
  def vault_k8s_auth_role(self) -> pulumi.Output[Optional[str]]:
pulumi_harness/pulumi-plugin.json CHANGED
@@ -1,6 +1,6 @@
1
1
  {
2
2
  "resource": true,
3
3
  "name": "harness",
4
- "version": "0.6.0-alpha.1741326556",
4
+ "version": "0.6.0-alpha.1741494185",
5
5
  "server": "github://api.github.com/pulumi"
6
6
  }
{pulumi_harness-0.6.0a1741326556.dist-info → pulumi_harness-0.6.0a1741494185.dist-info}/METADATA RENAMED
@@ -1,6 +1,6 @@
1
1
  Metadata-Version: 2.2
2
2
  Name: pulumi_harness
3
- Version: 0.6.0a1741326556
3
+ Version: 0.6.0a1741494185
4
4
  Summary: A Pulumi package for creating and managing Harness resources.
5
5
  License: Apache-2.0
6
6
  Project-URL: Homepage, https://www.pulumi.com