// *** WARNING: this file was generated by pulumi-language-dotnet. ***
// *** Do not edit by hand unless you're certain you know what you are doing! ***

using System;
using System.Collections.Generic;
using System.Collections.Immutable;
using System.Threading.Tasks;
using Pulumi.Serialization;
using Pulumi;

namespace Maxvojtkov.Dokploy
{
    /// <summary>
    /// An external secret manager Dokploy resolves environment variables from at deploy time.
    /// 
    /// Reference a secret from any `Env` value with `${{vault.&lt;scope&gt;.&lt;key&gt;}}`. The value is fetched when the deployment runs and is never stored in Dokploy — so rotating it in the vault takes effect on the next deploy with no Terraform change.
    /// 
    /// Supported `providerType` values: `Hashicorp` (Vault/OpenBao), `Infisical`, `Aws` (Secrets Manager), `Doppler`, `Azure` (Key Vault) and `Scaleway`.
    /// </summary>
    [DokployResourceType("dokploy:index/vaultProvider:VaultProvider")]
    public partial class VaultProvider : global::Pulumi.CustomResource
    {
        /// <summary>
        /// JSON array scoping which projects or environments may resolve secrets from this provider. Pass `jsonencode([])` to leave it unscoped.
        /// </summary>
        [Output("assignments")]
        public Output<string> Assignments { get; private set; } = null!;

        /// <summary>
        /// Provider credentials as a JSON object, including the `providerType` discriminator.
        /// </summary>
        [Output("config")]
        public Output<string> Config { get; private set; } = null!;

        /// <summary>
        /// RFC 3339 timestamp of when the connection was created.
        /// </summary>
        [Output("createdAt")]
        public Output<string> CreatedAt { get; private set; } = null!;

        /// <summary>
        /// Name of the connection, unique within the organization.
        /// </summary>
        [Output("name")]
        public Output<string> Name { get; private set; } = null!;

        /// <summary>
        /// Organization that owns the connection.
        /// </summary>
        [Output("organizationId")]
        public Output<string> OrganizationId { get; private set; } = null!;

        /// <summary>
        /// Provider kind derived from `Config`.
        /// </summary>
        [Output("providerType")]
        public Output<string> ProviderType { get; private set; } = null!;


        /// <summary>
        /// Create a VaultProvider resource with the given unique name, arguments, and options.
        /// </summary>
        ///
        /// <param name="name">The unique name of the resource</param>
        /// <param name="args">The arguments used to populate this resource's properties</param>
        /// <param name="options">A bag of options that control this resource's behavior</param>
        public VaultProvider(string name, VaultProviderArgs args, CustomResourceOptions? options = null)
            : base("dokploy:index/vaultProvider:VaultProvider", name, args ?? new VaultProviderArgs(), MakeResourceOptions(options, ""))
        {
        }

        private VaultProvider(string name, Input<string> id, VaultProviderState? state = null, CustomResourceOptions? options = null)
            : base("dokploy:index/vaultProvider:VaultProvider", name, state, MakeResourceOptions(options, id))
        {
        }

        private static CustomResourceOptions MakeResourceOptions(CustomResourceOptions? options, Input<string>? id)
        {
            var defaultOptions = new CustomResourceOptions
            {
                Version = Utilities.Version,
                PluginDownloadURL = "https://gitea.coolify.vojtkov.dev/usr_unknown/pulumi-dokploy/releases/download/v${VERSION}",
                AdditionalSecretOutputs =
                {
                    "config",
                },
            };
            var merged = CustomResourceOptions.Merge(defaultOptions, options);
            // Override the ID if one was specified for consistency with other language SDKs.
            merged.Id = id ?? merged.Id;
            return merged;
        }
        /// <summary>
        /// Get an existing VaultProvider resource's state with the given name, ID, and optional extra
        /// properties used to qualify the lookup.
        /// </summary>
        ///
        /// <param name="name">The unique name of the resulting resource.</param>
        /// <param name="id">The unique provider ID of the resource to lookup.</param>
        /// <param name="state">Any extra arguments used during the lookup.</param>
        /// <param name="options">A bag of options that control this resource's behavior</param>
        public static VaultProvider Get(string name, Input<string> id, VaultProviderState? state = null, CustomResourceOptions? options = null)
        {
            return new VaultProvider(name, id, state, options);
        }
    }

    public sealed class VaultProviderArgs : global::Pulumi.ResourceArgs
    {
        /// <summary>
        /// JSON array scoping which projects or environments may resolve secrets from this provider. Pass `jsonencode([])` to leave it unscoped.
        /// </summary>
        [Input("assignments", required: true)]
        public Input<string> Assignments { get; set; } = null!;

        [Input("config", required: true)]
        private Input<string>? _config;

        /// <summary>
        /// Provider credentials as a JSON object, including the `providerType` discriminator.
        /// </summary>
        public Input<string>? Config
        {
            get => _config;
            set
            {
                var emptySecret = Output.CreateSecret(0);
                _config = Output.Tuple<Input<string>?, int>(value, emptySecret).Apply(t => t.Item1);
            }
        }

        /// <summary>
        /// Name of the connection, unique within the organization.
        /// </summary>
        [Input("name")]
        public Input<string>? Name { get; set; }

        public VaultProviderArgs()
        {
        }
        public static new VaultProviderArgs Empty => new VaultProviderArgs();
    }

    public sealed class VaultProviderState : global::Pulumi.ResourceArgs
    {
        /// <summary>
        /// JSON array scoping which projects or environments may resolve secrets from this provider. Pass `jsonencode([])` to leave it unscoped.
        /// </summary>
        [Input("assignments")]
        public Input<string>? Assignments { get; set; }

        [Input("config")]
        private Input<string>? _config;

        /// <summary>
        /// Provider credentials as a JSON object, including the `providerType` discriminator.
        /// </summary>
        public Input<string>? Config
        {
            get => _config;
            set
            {
                var emptySecret = Output.CreateSecret(0);
                _config = Output.Tuple<Input<string>?, int>(value, emptySecret).Apply(t => t.Item1);
            }
        }

        /// <summary>
        /// RFC 3339 timestamp of when the connection was created.
        /// </summary>
        [Input("createdAt")]
        public Input<string>? CreatedAt { get; set; }

        /// <summary>
        /// Name of the connection, unique within the organization.
        /// </summary>
        [Input("name")]
        public Input<string>? Name { get; set; }

        /// <summary>
        /// Organization that owns the connection.
        /// </summary>
        [Input("organizationId")]
        public Input<string>? OrganizationId { get; set; }

        /// <summary>
        /// Provider kind derived from `Config`.
        /// </summary>
        [Input("providerType")]
        public Input<string>? ProviderType { get; set; }

        public VaultProviderState()
        {
        }
        public static new VaultProviderState Empty => new VaultProviderState();
    }
}