strongdm 13.0.0__zip → 13.2.0__zip

{strongdm-13.0.0 → strongdm-13.2.0}/strongdm/models.py

@@ -6030,10 +6030,6 @@ class Athena:
 
 
 class AthenaIAM:
-    '''
-    AthenaIAM is currently unstable, and its API may change, or it may be removed,
-    without a major version bump.
-    '''
     __slots__ = [
         'bind_interface',
         'egress_filter',
@@ -14518,6 +14514,146 @@ class KubernetesBasicAuth:
         )
 
 
+class KubernetesPodIdentity:
+    __slots__ = [
+        'allow_resource_role_bypass',
+        'bind_interface',
+        'certificate_authority',
+        'egress_filter',
+        'healthcheck_namespace',
+        'healthy',
+        'id',
+        'name',
+        'port_override',
+        'proxy_cluster_id',
+        'secret_store_id',
+        'subdomain',
+        'tags',
+    ]
+
+    def __init__(
+        self,
+        allow_resource_role_bypass=None,
+        bind_interface=None,
+        certificate_authority=None,
+        egress_filter=None,
+        healthcheck_namespace=None,
+        healthy=None,
+        id=None,
+        name=None,
+        port_override=None,
+        proxy_cluster_id=None,
+        secret_store_id=None,
+        subdomain=None,
+        tags=None,
+    ):
+        self.allow_resource_role_bypass = allow_resource_role_bypass if allow_resource_role_bypass is not None else False
+        '''
+         If true, allows users to fallback to the existing authentication mode (Leased Credential or Identity Set)
+         when a resource role is not provided.
+        '''
+        self.bind_interface = bind_interface if bind_interface is not None else ''
+        '''
+         The bind interface is the IP address to which the port override of a resource is bound (for example, 127.0.0.1). It is automatically generated if not provided.
+        '''
+        self.certificate_authority = certificate_authority if certificate_authority is not None else ''
+        '''
+         The CA to authenticate TLS connections with.
+        '''
+        self.egress_filter = egress_filter if egress_filter is not None else ''
+        '''
+         A filter applied to the routing logic to pin datasource to nodes.
+        '''
+        self.healthcheck_namespace = healthcheck_namespace if healthcheck_namespace is not None else ''
+        '''
+         The path used to check the health of your connection.  Defaults to `default`.
+        '''
+        self.healthy = healthy if healthy is not None else False
+        '''
+         True if the datasource is reachable and the credentials are valid.
+        '''
+        self.id = id if id is not None else ''
+        '''
+         Unique identifier of the Resource.
+        '''
+        self.name = name if name is not None else ''
+        '''
+         Unique human-readable name of the Resource.
+        '''
+        self.port_override = port_override if port_override is not None else 0
+        '''
+         The local port used by clients to connect to this resource.
+        '''
+        self.proxy_cluster_id = proxy_cluster_id if proxy_cluster_id is not None else ''
+        '''
+         ID of the proxy cluster for this resource, if any.
+        '''
+        self.secret_store_id = secret_store_id if secret_store_id is not None else ''
+        '''
+         ID of the secret store containing credentials for this resource, if any.
+        '''
+        self.subdomain = subdomain if subdomain is not None else ''
+        '''
+         Subdomain is the local DNS address.  (e.g. app-prod1 turns into app-prod1.your-org-name.sdm.network)
+        '''
+        self.tags = tags if tags is not None else _porcelain_zero_value_tags()
+        '''
+         Tags is a map of key, value pairs.
+        '''
+
+    def __repr__(self):
+        return '<sdm.KubernetesPodIdentity ' + \
+            'allow_resource_role_bypass: ' + repr(self.allow_resource_role_bypass) + ' ' +\
+            'bind_interface: ' + repr(self.bind_interface) + ' ' +\
+            'certificate_authority: ' + repr(self.certificate_authority) + ' ' +\
+            'egress_filter: ' + repr(self.egress_filter) + ' ' +\
+            'healthcheck_namespace: ' + repr(self.healthcheck_namespace) + ' ' +\
+            'healthy: ' + repr(self.healthy) + ' ' +\
+            'id: ' + repr(self.id) + ' ' +\
+            'name: ' + repr(self.name) + ' ' +\
+            'port_override: ' + repr(self.port_override) + ' ' +\
+            'proxy_cluster_id: ' + repr(self.proxy_cluster_id) + ' ' +\
+            'secret_store_id: ' + repr(self.secret_store_id) + ' ' +\
+            'subdomain: ' + repr(self.subdomain) + ' ' +\
+            'tags: ' + repr(self.tags) + ' ' +\
+            '>'
+
+    def to_dict(self):
+        return {
+            'allow_resource_role_bypass': self.allow_resource_role_bypass,
+            'bind_interface': self.bind_interface,
+            'certificate_authority': self.certificate_authority,
+            'egress_filter': self.egress_filter,
+            'healthcheck_namespace': self.healthcheck_namespace,
+            'healthy': self.healthy,
+            'id': self.id,
+            'name': self.name,
+            'port_override': self.port_override,
+            'proxy_cluster_id': self.proxy_cluster_id,
+            'secret_store_id': self.secret_store_id,
+            'subdomain': self.subdomain,
+            'tags': self.tags,
+        }
+
+    @classmethod
+    def from_dict(cls, d):
+        return cls(
+            allow_resource_role_bypass=d.get('allow_resource_role_bypass'),
+            bind_interface=d.get('bind_interface'),
+            certificate_authority=d.get('certificate_authority'),
+            egress_filter=d.get('egress_filter'),
+            healthcheck_namespace=d.get('healthcheck_namespace'),
+            healthy=d.get('healthy'),
+            id=d.get('id'),
+            name=d.get('name'),
+            port_override=d.get('port_override'),
+            proxy_cluster_id=d.get('proxy_cluster_id'),
+            secret_store_id=d.get('secret_store_id'),
+            subdomain=d.get('subdomain'),
+            tags=d.get('tags'),
+        )
+
+
 class KubernetesServiceAccount:
     __slots__ = [
         'allow_resource_role_bypass',

{strongdm-13.0.0 → strongdm-13.2.0}/strongdm/plumbing.py

@@ -6748,6 +6748,62 @@ def convert_repeated_kubernetes_basic_auth_to_porcelain(plumbings):
     ]
 
 
+def convert_kubernetes_pod_identity_to_porcelain(plumbing):
+    if plumbing is None:
+        return None
+    porcelain = models.KubernetesPodIdentity()
+    porcelain.allow_resource_role_bypass = (
+        plumbing.allow_resource_role_bypass)
+    porcelain.bind_interface = (plumbing.bind_interface)
+    porcelain.certificate_authority = (plumbing.certificate_authority)
+    porcelain.egress_filter = (plumbing.egress_filter)
+    porcelain.healthcheck_namespace = (plumbing.healthcheck_namespace)
+    porcelain.healthy = (plumbing.healthy)
+    porcelain.id = (plumbing.id)
+    porcelain.name = (plumbing.name)
+    porcelain.port_override = (plumbing.port_override)
+    porcelain.proxy_cluster_id = (plumbing.proxy_cluster_id)
+    porcelain.secret_store_id = (plumbing.secret_store_id)
+    porcelain.subdomain = (plumbing.subdomain)
+    porcelain.tags = convert_tags_to_porcelain(plumbing.tags)
+    return porcelain
+
+
+def convert_kubernetes_pod_identity_to_plumbing(porcelain):
+    plumbing = KubernetesPodIdentity()
+    if porcelain is None:
+        return plumbing
+    plumbing.allow_resource_role_bypass = (
+        porcelain.allow_resource_role_bypass)
+    plumbing.bind_interface = (porcelain.bind_interface)
+    plumbing.certificate_authority = (porcelain.certificate_authority)
+    plumbing.egress_filter = (porcelain.egress_filter)
+    plumbing.healthcheck_namespace = (porcelain.healthcheck_namespace)
+    plumbing.healthy = (porcelain.healthy)
+    plumbing.id = (porcelain.id)
+    plumbing.name = (porcelain.name)
+    plumbing.port_override = (porcelain.port_override)
+    plumbing.proxy_cluster_id = (porcelain.proxy_cluster_id)
+    plumbing.secret_store_id = (porcelain.secret_store_id)
+    plumbing.subdomain = (porcelain.subdomain)
+    plumbing.tags.CopyFrom(convert_tags_to_plumbing(porcelain.tags))
+    return plumbing
+
+
+def convert_repeated_kubernetes_pod_identity_to_plumbing(porcelains):
+    return [
+        convert_kubernetes_pod_identity_to_plumbing(porcelain)
+        for porcelain in porcelains
+    ]
+
+
+def convert_repeated_kubernetes_pod_identity_to_porcelain(plumbings):
+    return [
+        convert_kubernetes_pod_identity_to_porcelain(plumbing)
+        for plumbing in plumbings
+    ]
+
+
 def convert_kubernetes_service_account_to_porcelain(plumbing):
     if plumbing is None:
         return None
@@ -10523,6 +10579,9 @@ def convert_resource_to_plumbing(porcelain):
     if isinstance(porcelain, models.KubernetesBasicAuth):
         plumbing.kubernetes_basic_auth.CopyFrom(
             convert_kubernetes_basic_auth_to_plumbing(porcelain))
+    if isinstance(porcelain, models.KubernetesPodIdentity):
+        plumbing.kubernetes_pod_identity.CopyFrom(
+            convert_kubernetes_pod_identity_to_plumbing(porcelain))
     if isinstance(porcelain, models.KubernetesServiceAccount):
         plumbing.kubernetes_service_account.CopyFrom(
             convert_kubernetes_service_account_to_plumbing(porcelain))
@@ -10761,6 +10820,9 @@ def convert_resource_to_porcelain(plumbing):
     if plumbing.HasField('kubernetes_basic_auth'):
         return convert_kubernetes_basic_auth_to_porcelain(
             plumbing.kubernetes_basic_auth)
+    if plumbing.HasField('kubernetes_pod_identity'):
+        return convert_kubernetes_pod_identity_to_porcelain(
+            plumbing.kubernetes_pod_identity)
     if plumbing.HasField('kubernetes_service_account'):
         return convert_kubernetes_service_account_to_porcelain(
             plumbing.kubernetes_service_account)

{strongdm-13.0.0 → strongdm-13.2.0}/strongdm/svc.py

@@ -4512,6 +4512,7 @@ class Resources:
     `strongdm.models.HTTPNoAuth`
     `strongdm.models.Kubernetes`
     `strongdm.models.KubernetesBasicAuth`
+    `strongdm.models.KubernetesPodIdentity`
     `strongdm.models.KubernetesServiceAccount`
     `strongdm.models.KubernetesServiceAccountUserImpersonation`
     `strongdm.models.KubernetesUserImpersonation`

{strongdm-13.0.0 → strongdm-13.2.0}/strongdm.egg-info/PKG-INFO

@@ -1,12 +1,12 @@
 Metadata-Version: 2.1
 Name: strongdm
-Version: 13.0.0
+Version: 13.2.0
 Summary: strongDM SDK for the Python programming language.
 Home-page: https://github.com/strongdm/strongdm-sdk-python
 Author: strongDM Team
 Author-email: sdk-feedback@strongdm.com
 License: apache-2.0
-Download-URL: https://github.com/strongdm/strongdm-sdk-python/archive/v13.0.0.tar.gz
+Download-URL: https://github.com/strongdm/strongdm-sdk-python/archive/v13.2.0.tar.gz
 Keywords: strongDM,sdm,api,automation,security,audit,database,server,ssh,rdp
 Platform: UNKNOWN
 Classifier: Development Status :: 4 - Beta