Files
pulumi-dokploy/sdk/python/pulumi_dokploy/vault_provider.py
T
max-voitcov 73386ba0ff
build / build (push) Failing after 11m22s
release / plugin (push) Failing after 31m35s
release / sdks (push) Has been skipped
Bridge what Dokploy v0.30 added, and let the docs through
Six new resources from terraform-provider-dokploy v0.2.0 -- Network,
DnsProvider, VaultProvider, Schedule, VolumeBackup and Libsql -- plus the new
properties on Domain (`enabled`), Compose (`serviceNetworks`, `createEnvFile`,
`icon`) and Application. Verified with `pulumi up` against a live v0.30.2
instance: create, preview-clean, and destroy.

The upstream provider also now refuses a volume Mount with no `volumeName`,
which Dokploy would otherwise turn into an anonymous Docker volume recreated
on every deploy. That surfaces here at preview time, before anything exists.

Two things made that fix nearly invisible to Pulumi users, so this commit
fixes the second one: the bridge resolves the upstream `docs/` through the Go
module cache, where a locally `replace`d dependency never lands, so tfgen was
emitting every resource with no description at all. UpstreamRepoPath now
points at the checkout and all 445 inputs carry documentation -- with names
rendered per language, so Python readers see `volume_name` where TypeScript
readers see `volumeName`.
2026-08-26 00:46:32 +03:00

346 lines
15 KiB
Python
Generated

# coding=utf-8
# *** WARNING: this file was generated by pulumi-language-python. ***
# *** Do not edit by hand unless you're certain you know what you are doing! ***
import builtins as _builtins
import warnings
import sys
import pulumi
import pulumi.runtime
from typing import Any, Mapping, Optional, Sequence, Union, overload
if sys.version_info >= (3, 11):
from typing import NotRequired, TypedDict, TypeAlias
else:
from typing_extensions import NotRequired, TypedDict, TypeAlias
from . import _utilities
__all__ = ['VaultProviderArgs', 'VaultProvider']
@pulumi.input_type
class VaultProviderArgs:
def __init__(__self__, *,
assignments: pulumi.Input[_builtins.str],
config: pulumi.Input[_builtins.str],
name: pulumi.Input[Optional[_builtins.str]] = None):
"""
The set of arguments for constructing a VaultProvider resource.
:param pulumi.Input[_builtins.str] assignments: JSON array scoping which projects or environments may resolve secrets from this provider. Pass `jsonencode([])` to leave it unscoped.
:param pulumi.Input[_builtins.str] config: Provider credentials as a JSON object, including the `providerType` discriminator.
:param pulumi.Input[_builtins.str] name: Name of the connection, unique within the organization.
"""
pulumi.set(__self__, "assignments", assignments)
pulumi.set(__self__, "config", config)
if name is not None:
pulumi.set(__self__, "name", name)
@_builtins.property
@pulumi.getter
def assignments(self) -> pulumi.Input[_builtins.str]:
"""
JSON array scoping which projects or environments may resolve secrets from this provider. Pass `jsonencode([])` to leave it unscoped.
"""
return pulumi.get(self, "assignments")
@assignments.setter
def assignments(self, value: pulumi.Input[_builtins.str]):
pulumi.set(self, "assignments", value)
@_builtins.property
@pulumi.getter
def config(self) -> pulumi.Input[_builtins.str]:
"""
Provider credentials as a JSON object, including the `providerType` discriminator.
"""
return pulumi.get(self, "config")
@config.setter
def config(self, value: pulumi.Input[_builtins.str]):
pulumi.set(self, "config", value)
@_builtins.property
@pulumi.getter
def name(self) -> pulumi.Input[Optional[_builtins.str]]:
"""
Name of the connection, unique within the organization.
"""
return pulumi.get(self, "name")
@name.setter
def name(self, value: pulumi.Input[Optional[_builtins.str]]):
pulumi.set(self, "name", value)
@pulumi.input_type
class _VaultProviderState:
def __init__(__self__, *,
assignments: pulumi.Input[Optional[_builtins.str]] = None,
config: pulumi.Input[Optional[_builtins.str]] = None,
created_at: pulumi.Input[Optional[_builtins.str]] = None,
name: pulumi.Input[Optional[_builtins.str]] = None,
organization_id: pulumi.Input[Optional[_builtins.str]] = None,
provider_type: pulumi.Input[Optional[_builtins.str]] = None):
"""
Input properties used for looking up and filtering VaultProvider resources.
:param pulumi.Input[_builtins.str] assignments: JSON array scoping which projects or environments may resolve secrets from this provider. Pass `jsonencode([])` to leave it unscoped.
:param pulumi.Input[_builtins.str] config: Provider credentials as a JSON object, including the `providerType` discriminator.
:param pulumi.Input[_builtins.str] created_at: RFC 3339 timestamp of when the connection was created.
:param pulumi.Input[_builtins.str] name: Name of the connection, unique within the organization.
:param pulumi.Input[_builtins.str] organization_id: Organization that owns the connection.
:param pulumi.Input[_builtins.str] provider_type: Provider kind derived from `config`.
"""
if assignments is not None:
pulumi.set(__self__, "assignments", assignments)
if config is not None:
pulumi.set(__self__, "config", config)
if created_at is not None:
pulumi.set(__self__, "created_at", created_at)
if name is not None:
pulumi.set(__self__, "name", name)
if organization_id is not None:
pulumi.set(__self__, "organization_id", organization_id)
if provider_type is not None:
pulumi.set(__self__, "provider_type", provider_type)
@_builtins.property
@pulumi.getter
def assignments(self) -> pulumi.Input[Optional[_builtins.str]]:
"""
JSON array scoping which projects or environments may resolve secrets from this provider. Pass `jsonencode([])` to leave it unscoped.
"""
return pulumi.get(self, "assignments")
@assignments.setter
def assignments(self, value: pulumi.Input[Optional[_builtins.str]]):
pulumi.set(self, "assignments", value)
@_builtins.property
@pulumi.getter
def config(self) -> pulumi.Input[Optional[_builtins.str]]:
"""
Provider credentials as a JSON object, including the `providerType` discriminator.
"""
return pulumi.get(self, "config")
@config.setter
def config(self, value: pulumi.Input[Optional[_builtins.str]]):
pulumi.set(self, "config", value)
@_builtins.property
@pulumi.getter(name="createdAt")
def created_at(self) -> pulumi.Input[Optional[_builtins.str]]:
"""
RFC 3339 timestamp of when the connection was created.
"""
return pulumi.get(self, "created_at")
@created_at.setter
def created_at(self, value: pulumi.Input[Optional[_builtins.str]]):
pulumi.set(self, "created_at", value)
@_builtins.property
@pulumi.getter
def name(self) -> pulumi.Input[Optional[_builtins.str]]:
"""
Name of the connection, unique within the organization.
"""
return pulumi.get(self, "name")
@name.setter
def name(self, value: pulumi.Input[Optional[_builtins.str]]):
pulumi.set(self, "name", value)
@_builtins.property
@pulumi.getter(name="organizationId")
def organization_id(self) -> pulumi.Input[Optional[_builtins.str]]:
"""
Organization that owns the connection.
"""
return pulumi.get(self, "organization_id")
@organization_id.setter
def organization_id(self, value: pulumi.Input[Optional[_builtins.str]]):
pulumi.set(self, "organization_id", value)
@_builtins.property
@pulumi.getter(name="providerType")
def provider_type(self) -> pulumi.Input[Optional[_builtins.str]]:
"""
Provider kind derived from `config`.
"""
return pulumi.get(self, "provider_type")
@provider_type.setter
def provider_type(self, value: pulumi.Input[Optional[_builtins.str]]):
pulumi.set(self, "provider_type", value)
@pulumi.type_token("dokploy:index/vaultProvider:VaultProvider")
class VaultProvider(pulumi.CustomResource):
@overload
def __init__(__self__,
resource_name: str,
opts: Optional[pulumi.ResourceOptions] = None,
assignments: pulumi.Input[Optional[_builtins.str]] = None,
config: pulumi.Input[Optional[_builtins.str]] = None,
name: pulumi.Input[Optional[_builtins.str]] = None,
__props__=None):
"""
An external secret manager Dokploy resolves environment variables from at deploy time.
Reference a secret from any `env` value with `${{vault.<scope>.<key>}}`. The value is fetched when the deployment runs and is never stored in Dokploy — so rotating it in the vault takes effect on the next deploy with no Terraform change.
Supported `providerType` values: `hashicorp` (Vault/OpenBao), `infisical`, `aws` (Secrets Manager), `doppler`, `azure` (Key Vault) and `scaleway`.
:param str resource_name: The name of the resource.
:param pulumi.ResourceOptions opts: Options for the resource.
:param pulumi.Input[_builtins.str] assignments: JSON array scoping which projects or environments may resolve secrets from this provider. Pass `jsonencode([])` to leave it unscoped.
:param pulumi.Input[_builtins.str] config: Provider credentials as a JSON object, including the `providerType` discriminator.
:param pulumi.Input[_builtins.str] name: Name of the connection, unique within the organization.
"""
...
@overload
def __init__(__self__,
resource_name: str,
args: VaultProviderArgs,
opts: Optional[pulumi.ResourceOptions] = None):
"""
An external secret manager Dokploy resolves environment variables from at deploy time.
Reference a secret from any `env` value with `${{vault.<scope>.<key>}}`. The value is fetched when the deployment runs and is never stored in Dokploy — so rotating it in the vault takes effect on the next deploy with no Terraform change.
Supported `providerType` values: `hashicorp` (Vault/OpenBao), `infisical`, `aws` (Secrets Manager), `doppler`, `azure` (Key Vault) and `scaleway`.
:param str resource_name: The name of the resource.
:param VaultProviderArgs args: The arguments to use to populate this resource's properties.
:param pulumi.ResourceOptions opts: Options for the resource.
"""
...
def __init__(__self__, resource_name: str, *args, **kwargs):
resource_args, opts = _utilities.get_resource_args_opts(VaultProviderArgs, pulumi.ResourceOptions, *args, **kwargs)
if resource_args is not None:
__self__._internal_init(resource_name, opts, **resource_args.__dict__)
else:
__self__._internal_init(resource_name, *args, **kwargs)
def _internal_init(__self__,
resource_name: str,
opts: Optional[pulumi.ResourceOptions] = None,
assignments: pulumi.Input[Optional[_builtins.str]] = None,
config: pulumi.Input[Optional[_builtins.str]] = None,
name: pulumi.Input[Optional[_builtins.str]] = None,
__props__=None):
opts = pulumi.ResourceOptions.merge(_utilities.get_resource_opts_defaults(), opts)
if not isinstance(opts, pulumi.ResourceOptions):
raise TypeError('Expected resource options to be a ResourceOptions instance')
if opts.id is None:
if __props__ is not None:
raise TypeError('__props__ is only valid when passed in combination with a valid opts.id to get an existing resource')
__props__ = VaultProviderArgs.__new__(VaultProviderArgs)
if assignments is None and not opts.urn:
raise TypeError("Missing required property 'assignments'")
__props__.__dict__["assignments"] = assignments
if config is None and not opts.urn:
raise TypeError("Missing required property 'config'")
__props__.__dict__["config"] = None if config is None else pulumi.Output.secret(config)
__props__.__dict__["name"] = name
__props__.__dict__["created_at"] = None
__props__.__dict__["organization_id"] = None
__props__.__dict__["provider_type"] = None
secret_opts = pulumi.ResourceOptions(additional_secret_outputs=["config"])
opts = pulumi.ResourceOptions.merge(opts, secret_opts)
super(VaultProvider, __self__).__init__(
'dokploy:index/vaultProvider:VaultProvider',
resource_name,
__props__,
opts)
@staticmethod
def get(resource_name: str,
id: pulumi.Input[str],
opts: Optional[pulumi.ResourceOptions] = None,
assignments: pulumi.Input[Optional[_builtins.str]] = None,
config: pulumi.Input[Optional[_builtins.str]] = None,
created_at: pulumi.Input[Optional[_builtins.str]] = None,
name: pulumi.Input[Optional[_builtins.str]] = None,
organization_id: pulumi.Input[Optional[_builtins.str]] = None,
provider_type: pulumi.Input[Optional[_builtins.str]] = None) -> 'VaultProvider':
"""
Get an existing VaultProvider resource's state with the given name, id, and optional extra
properties used to qualify the lookup.
:param str resource_name: The unique name of the resulting resource.
:param pulumi.Input[str] id: The unique provider ID of the resource to lookup.
:param pulumi.ResourceOptions opts: Options for the resource.
:param pulumi.Input[_builtins.str] assignments: JSON array scoping which projects or environments may resolve secrets from this provider. Pass `jsonencode([])` to leave it unscoped.
:param pulumi.Input[_builtins.str] config: Provider credentials as a JSON object, including the `providerType` discriminator.
:param pulumi.Input[_builtins.str] created_at: RFC 3339 timestamp of when the connection was created.
:param pulumi.Input[_builtins.str] name: Name of the connection, unique within the organization.
:param pulumi.Input[_builtins.str] organization_id: Organization that owns the connection.
:param pulumi.Input[_builtins.str] provider_type: Provider kind derived from `config`.
"""
opts = pulumi.ResourceOptions.merge(opts, pulumi.ResourceOptions(id=id))
__props__ = _VaultProviderState.__new__(_VaultProviderState)
__props__.__dict__["assignments"] = assignments
__props__.__dict__["config"] = config
__props__.__dict__["created_at"] = created_at
__props__.__dict__["name"] = name
__props__.__dict__["organization_id"] = organization_id
__props__.__dict__["provider_type"] = provider_type
return VaultProvider(resource_name, opts=opts, __props__=__props__)
@_builtins.property
@pulumi.getter
def assignments(self) -> pulumi.Output[_builtins.str]:
"""
JSON array scoping which projects or environments may resolve secrets from this provider. Pass `jsonencode([])` to leave it unscoped.
"""
return pulumi.get(self, "assignments")
@_builtins.property
@pulumi.getter
def config(self) -> pulumi.Output[_builtins.str]:
"""
Provider credentials as a JSON object, including the `providerType` discriminator.
"""
return pulumi.get(self, "config")
@_builtins.property
@pulumi.getter(name="createdAt")
def created_at(self) -> pulumi.Output[_builtins.str]:
"""
RFC 3339 timestamp of when the connection was created.
"""
return pulumi.get(self, "created_at")
@_builtins.property
@pulumi.getter
def name(self) -> pulumi.Output[_builtins.str]:
"""
Name of the connection, unique within the organization.
"""
return pulumi.get(self, "name")
@_builtins.property
@pulumi.getter(name="organizationId")
def organization_id(self) -> pulumi.Output[_builtins.str]:
"""
Organization that owns the connection.
"""
return pulumi.get(self, "organization_id")
@_builtins.property
@pulumi.getter(name="providerType")
def provider_type(self) -> pulumi.Output[_builtins.str]:
"""
Provider kind derived from `config`.
"""
return pulumi.get(self, "provider_type")