From d73b51ef4309adb999dd8619d9ff2e9c762114bc Mon Sep 17 00:00:00 2001 From: zofskeez <24611656+zofskeez@users.noreply.github.com> Date: Fri, 28 Aug 2026 16:06:15 +0000 Subject: [PATCH 1/2] auto: openapi spec update --- openapi.json | 1000 ++++++++++++++++++++++++++++++++++++++++++-------- 1 file changed, 844 insertions(+), 156 deletions(-) diff --git a/openapi.json b/openapi.json index cd83737..1503b58 100644 --- a/openapi.json +++ b/openapi.json @@ -2240,17 +2240,26 @@ ], "x-vault-createSupported": true, "get": { + "summary": "Return the configured AWS public certificate.", "operationId": "aws-read-certificate-configuration", "tags": [ "auth" ], "responses": { "200": { - "description": "OK" + "description": "OK", + "content": { + "application/json": { + "schema": { + "$ref": "#/components/schemas/AwsReadCertificateConfigurationResponse" + } + } + } } } }, "post": { + "summary": "Configure an AWS public key for PKCS7 or identity-document verification.", "operationId": "aws-configure-certificate", "tags": [ "auth" @@ -2266,19 +2275,20 @@ } }, "responses": { - "200": { - "description": "OK" + "204": { + "description": "No Content" } } }, "delete": { + "summary": "Delete the configured AWS public certificate.", "operationId": "aws-delete-certificate-configuration", "tags": [ "auth" ], "responses": { "204": { - "description": "empty body" + "description": "No Content" } } } @@ -2298,6 +2308,7 @@ } ], "get": { + "summary": "List the configured AWS public certificates.", "operationId": "aws-list-certificate-configurations", "tags": [ "auth" @@ -2346,17 +2357,26 @@ ], "x-vault-createSupported": true, "get": { + "summary": "Return the configured AWS client credentials.", "operationId": "aws-read-client-configuration", "tags": [ "auth" ], "responses": { "200": { - "description": "OK" + "description": "OK", + "content": { + "application/json": { + "schema": { + "$ref": "#/components/schemas/AwsReadClientConfigurationResponse" + } + } + } } } }, "post": { + "summary": "Configure AWS IAM credentials used to query instance and role details.", "operationId": "aws-configure-client", "tags": [ "auth" @@ -2372,19 +2392,20 @@ } }, "responses": { - "200": { - "description": "OK" + "204": { + "description": "No Content" } } }, "delete": { + "summary": "Delete the AWS client configuration.", "operationId": "aws-delete-client-configuration", "tags": [ "auth" ], "responses": { "204": { - "description": "empty body" + "description": "No Content" } } } @@ -2404,17 +2425,26 @@ } ], "get": { + "summary": "Return the AWS identity integration configuration.", "operationId": "aws-read-identity-integration-configuration", "tags": [ "auth" ], "responses": { "200": { - "description": "OK" + "description": "OK", + "content": { + "application/json": { + "schema": { + "$ref": "#/components/schemas/AwsReadIdentityIntegrationConfigurationResponse" + } + } + } } } }, "post": { + "summary": "Configure the AWS identity integration settings.", "operationId": "aws-configure-identity-integration", "tags": [ "auth" @@ -2430,8 +2460,8 @@ } }, "responses": { - "200": { - "description": "OK" + "204": { + "description": "No Content" } } } @@ -2451,13 +2481,21 @@ } ], "post": { + "summary": "Rotate the AWS credentials used by Vault for this auth mount.", "operationId": "aws-rotate-root-credentials", "tags": [ "auth" ], "responses": { "200": { - "description": "OK" + "description": "OK", + "content": { + "application/json": { + "schema": { + "$ref": "#/components/schemas/AwsRotateRootCredentialsResponse" + } + } + } } } } @@ -2477,6 +2515,7 @@ } ], "get": { + "summary": "List the configured STS roles for all AWS accounts.", "operationId": "aws-list-sts-role-relationships", "tags": [ "auth" @@ -2534,17 +2573,26 @@ ], "x-vault-createSupported": true, "get": { + "summary": "Return the configured STS role for a given AWS account.", "operationId": "aws-read-sts-role", "tags": [ "auth" ], "responses": { "200": { - "description": "OK" + "description": "OK", + "content": { + "application/json": { + "schema": { + "$ref": "#/components/schemas/AwsReadStsRoleResponse" + } + } + } } } }, "post": { + "summary": "Configure an STS role for a given AWS account.", "operationId": "aws-write-sts-role", "tags": [ "auth" @@ -2560,19 +2608,20 @@ } }, "responses": { - "200": { - "description": "OK" + "204": { + "description": "No Content" } } }, "delete": { + "summary": "Delete the configured STS role for a given AWS account.", "operationId": "aws-delete-sts-role", "tags": [ "auth" ], "responses": { "204": { - "description": "empty body" + "description": "No Content" } } } @@ -2593,17 +2642,26 @@ ], "x-vault-createSupported": true, "get": { + "summary": "Return the identity access-list tidy configuration.", "operationId": "aws-read-identity-access-list-tidy-settings", "tags": [ "auth" ], "responses": { "200": { - "description": "OK" + "description": "OK", + "content": { + "application/json": { + "schema": { + "$ref": "#/components/schemas/AwsReadIdentityAccessListTidySettingsResponse" + } + } + } } } }, "post": { + "summary": "Configure the identity access-list tidy operation.", "operationId": "aws-configure-identity-access-list-tidy-operation", "tags": [ "auth" @@ -2619,19 +2677,20 @@ } }, "responses": { - "200": { - "description": "OK" + "204": { + "description": "No Content" } } }, "delete": { + "summary": "Delete the identity access-list tidy configuration.", "operationId": "aws-delete-identity-access-list-tidy-settings", "tags": [ "auth" ], "responses": { "204": { - "description": "empty body" + "description": "No Content" } } } @@ -2652,17 +2711,26 @@ ], "x-vault-createSupported": true, "get": { + "summary": "Return the identity access-list tidy configuration.", "operationId": "aws-read-identity-whitelist-tidy-settings", "tags": [ "auth" ], "responses": { "200": { - "description": "OK" + "description": "OK", + "content": { + "application/json": { + "schema": { + "$ref": "#/components/schemas/AwsReadIdentityWhitelistTidySettingsResponse" + } + } + } } } }, "post": { + "summary": "Configure the identity access-list tidy operation.", "operationId": "aws-configure-identity-whitelist-tidy-operation", "tags": [ "auth" @@ -2678,19 +2746,20 @@ } }, "responses": { - "200": { - "description": "OK" + "204": { + "description": "No Content" } } }, "delete": { + "summary": "Delete the identity access-list tidy configuration.", "operationId": "aws-delete-identity-whitelist-tidy-settings", "tags": [ "auth" ], "responses": { "204": { - "description": "empty body" + "description": "No Content" } } } @@ -2711,17 +2780,26 @@ ], "x-vault-createSupported": true, "get": { + "summary": "Return the role-tag deny-list tidy configuration.", "operationId": "aws-read-role-tag-blacklist-tidy-settings", "tags": [ "auth" ], "responses": { "200": { - "description": "OK" + "description": "OK", + "content": { + "application/json": { + "schema": { + "$ref": "#/components/schemas/AwsReadRoleTagBlacklistTidySettingsResponse" + } + } + } } } }, "post": { + "summary": "Configure the role-tag deny-list tidy operation.", "operationId": "aws-configure-role-tag-blacklist-tidy-operation", "tags": [ "auth" @@ -2737,19 +2815,20 @@ } }, "responses": { - "200": { - "description": "OK" + "204": { + "description": "No Content" } } }, "delete": { + "summary": "Delete the role-tag deny-list tidy configuration.", "operationId": "aws-delete-role-tag-blacklist-tidy-settings", "tags": [ "auth" ], "responses": { "204": { - "description": "empty body" + "description": "No Content" } } } @@ -2770,17 +2849,26 @@ ], "x-vault-createSupported": true, "get": { + "summary": "Return the role-tag deny-list tidy configuration.", "operationId": "aws-read-role-tag-deny-list-tidy-settings", "tags": [ "auth" ], "responses": { "200": { - "description": "OK" + "description": "OK", + "content": { + "application/json": { + "schema": { + "$ref": "#/components/schemas/AwsReadRoleTagDenyListTidySettingsResponse" + } + } + } } } }, "post": { + "summary": "Configure the role-tag deny-list tidy operation.", "operationId": "aws-configure-role-tag-deny-list-tidy-operation", "tags": [ "auth" @@ -2796,19 +2884,20 @@ } }, "responses": { - "200": { - "description": "OK" + "204": { + "description": "No Content" } } }, "delete": { + "summary": "Delete the role-tag deny-list tidy configuration.", "operationId": "aws-delete-role-tag-deny-list-tidy-settings", "tags": [ "auth" ], "responses": { "204": { - "description": "empty body" + "description": "No Content" } } } @@ -2828,6 +2917,7 @@ } ], "get": { + "summary": "List the EC2 instance IDs in the identity access list.", "operationId": "aws-list-identity-access-list", "tags": [ "auth" @@ -2884,24 +2974,33 @@ } ], "get": { + "summary": "Return the access-list entry for the given EC2 instance ID.", "operationId": "aws-read-identity-access-list", "tags": [ "auth" ], "responses": { "200": { - "description": "OK" + "description": "OK", + "content": { + "application/json": { + "schema": { + "$ref": "#/components/schemas/AwsReadIdentityAccessListResponse" + } + } + } } } }, "delete": { + "summary": "Delete the access-list entry for the given EC2 instance ID.", "operationId": "aws-delete-identity-access-list", "tags": [ "auth" ], "responses": { "204": { - "description": "empty body" + "description": "No Content" } } } @@ -2921,6 +3020,7 @@ } ], "get": { + "summary": "List the EC2 instance IDs in the identity access list.", "operationId": "aws-list-identity-whitelist", "tags": [ "auth" @@ -2977,24 +3077,33 @@ } ], "get": { + "summary": "Return the access-list entry for the given EC2 instance ID.", "operationId": "aws-read-identity-whitelist", "tags": [ "auth" ], "responses": { "200": { - "description": "OK" + "description": "OK", + "content": { + "application/json": { + "schema": { + "$ref": "#/components/schemas/AwsReadIdentityWhitelistResponse" + } + } + } } } }, "delete": { + "summary": "Delete the access-list entry for the given EC2 instance ID.", "operationId": "aws-delete-identity-whitelist", "tags": [ "auth" ], "responses": { "204": { - "description": "empty body" + "description": "No Content" } } } @@ -3015,6 +3124,7 @@ ], "x-vault-unauthenticated": true, "post": { + "summary": "Authenticate to Vault using AWS credentials.", "operationId": "aws-login", "tags": [ "auth" @@ -3031,7 +3141,14 @@ }, "responses": { "200": { - "description": "OK" + "description": "OK", + "content": { + "application/json": { + "schema": { + "$ref": "#/components/schemas/AwsLoginResponse" + } + } + } } } } @@ -3051,6 +3168,7 @@ } ], "get": { + "summary": "List the configured AWS auth roles.", "operationId": "aws-list-auth-roles", "tags": [ "auth" @@ -3108,17 +3226,26 @@ ], "x-vault-createSupported": true, "get": { + "summary": "Return the configuration for a named AWS auth role.", "operationId": "aws-read-auth-role", "tags": [ "auth" ], "responses": { "200": { - "description": "OK" + "description": "OK", + "content": { + "application/json": { + "schema": { + "$ref": "#/components/schemas/AwsReadAuthRoleResponse" + } + } + } } } }, "post": { + "summary": "Create or update an AWS auth role.", "operationId": "aws-write-auth-role", "tags": [ "auth" @@ -3134,19 +3261,20 @@ } }, "responses": { - "200": { - "description": "OK" + "204": { + "description": "No Content" } } }, "delete": { + "summary": "Delete a named AWS auth role.", "operationId": "aws-delete-auth-role", "tags": [ "auth" ], "responses": { "204": { - "description": "empty body" + "description": "No Content" } } } @@ -3175,6 +3303,7 @@ } ], "post": { + "summary": "Generate a role tag for an EC2 instance.", "operationId": "aws-write-role-tag", "tags": [ "auth" @@ -3189,53 +3318,13 @@ } } }, - "responses": { - "200": { - "description": "OK" - } - } - } - }, - "/auth/{aws_mount_path}/roles/": { - "description": "Lists all the roles that are registered with Vault.", - "parameters": [ - { - "name": "aws_mount_path", - "description": "Path that the backend was mounted at", - "in": "path", - "schema": { - "type": "string", - "default": "aws" - }, - "required": true - } - ], - "get": { - "operationId": "aws-list-auth-roles2", - "tags": [ - "auth" - ], - "parameters": [ - { - "name": "list", - "description": "Must be set to `true`", - "in": "query", - "schema": { - "type": "string", - "enum": [ - "true" - ] - }, - "required": true - } - ], "responses": { "200": { "description": "OK", "content": { "application/json": { "schema": { - "$ref": "#/components/schemas/StandardListResponse" + "$ref": "#/components/schemas/AwsWriteRoleTagResponse" } } } @@ -3243,8 +3332,8 @@ } } }, - "/auth/{aws_mount_path}/roletag-blacklist/": { - "description": "Lists the deny list role tags.", + "/auth/{aws_mount_path}/roles/": { + "description": "Lists all the roles that are registered with Vault.", "parameters": [ { "name": "aws_mount_path", @@ -3258,7 +3347,8 @@ } ], "get": { - "operationId": "aws-list-role-tag-blacklists", + "summary": "List the configured AWS auth roles.", + "operationId": "aws-list-auth-roles2", "tags": [ "auth" ], @@ -3290,64 +3380,7 @@ } } }, - "/auth/{aws_mount_path}/roletag-blacklist/{role_tag}": { - "description": "Blacklist a previously created role tag.", - "parameters": [ - { - "name": "role_tag", - "description": "Role tag to be deny listed. The tag can be supplied as-is. In order to avoid any encoding problems, it can be base64 encoded.", - "in": "path", - "schema": { - "type": "string" - }, - "required": true - }, - { - "name": "aws_mount_path", - "description": "Path that the backend was mounted at", - "in": "path", - "schema": { - "type": "string", - "default": "aws" - }, - "required": true - } - ], - "get": { - "operationId": "aws-read-role-tag-blacklist", - "tags": [ - "auth" - ], - "responses": { - "200": { - "description": "OK" - } - } - }, - "post": { - "operationId": "aws-write-role-tag-blacklist", - "tags": [ - "auth" - ], - "responses": { - "200": { - "description": "OK" - } - } - }, - "delete": { - "operationId": "aws-delete-role-tag-blacklist", - "tags": [ - "auth" - ], - "responses": { - "204": { - "description": "empty body" - } - } - } - }, - "/auth/{aws_mount_path}/roletag-denylist/": { + "/auth/{aws_mount_path}/roletag-blacklist/": { "description": "Lists the deny list role tags.", "parameters": [ { @@ -3362,7 +3395,123 @@ } ], "get": { - "operationId": "aws-list-role-tag-deny-lists", + "summary": "List the deny-listed role tags.", + "operationId": "aws-list-role-tag-blacklists", + "tags": [ + "auth" + ], + "parameters": [ + { + "name": "list", + "description": "Must be set to `true`", + "in": "query", + "schema": { + "type": "string", + "enum": [ + "true" + ] + }, + "required": true + } + ], + "responses": { + "200": { + "description": "OK", + "content": { + "application/json": { + "schema": { + "$ref": "#/components/schemas/StandardListResponse" + } + } + } + } + } + } + }, + "/auth/{aws_mount_path}/roletag-blacklist/{role_tag}": { + "description": "Blacklist a previously created role tag.", + "parameters": [ + { + "name": "role_tag", + "description": "Role tag to be deny listed. The tag can be supplied as-is. In order to avoid any encoding problems, it can be base64 encoded.", + "in": "path", + "schema": { + "type": "string" + }, + "required": true + }, + { + "name": "aws_mount_path", + "description": "Path that the backend was mounted at", + "in": "path", + "schema": { + "type": "string", + "default": "aws" + }, + "required": true + } + ], + "get": { + "summary": "Return the deny-list entry for the given role tag.", + "operationId": "aws-read-role-tag-blacklist", + "tags": [ + "auth" + ], + "responses": { + "200": { + "description": "OK", + "content": { + "application/json": { + "schema": { + "$ref": "#/components/schemas/AwsReadRoleTagBlacklistResponse" + } + } + } + } + } + }, + "post": { + "summary": "Add a role tag to the deny list.", + "operationId": "aws-write-role-tag-blacklist", + "tags": [ + "auth" + ], + "responses": { + "204": { + "description": "No Content" + } + } + }, + "delete": { + "summary": "Delete the deny-list entry for the given role tag.", + "operationId": "aws-delete-role-tag-blacklist", + "tags": [ + "auth" + ], + "responses": { + "204": { + "description": "No Content" + } + } + } + }, + "/auth/{aws_mount_path}/roletag-denylist/": { + "description": "Lists the deny list role tags.", + "parameters": [ + { + "name": "aws_mount_path", + "description": "Path that the backend was mounted at", + "in": "path", + "schema": { + "type": "string", + "default": "aws" + }, + "required": true + } + ], + "get": { + "summary": "List the deny-listed role tags.", + "operationId": "aws-list-role-tag-deny-lists", "tags": [ "auth" ], @@ -3418,35 +3567,45 @@ } ], "get": { + "summary": "Return the deny-list entry for the given role tag.", "operationId": "aws-read-role-tag-deny-list", "tags": [ "auth" ], "responses": { "200": { - "description": "OK" + "description": "OK", + "content": { + "application/json": { + "schema": { + "$ref": "#/components/schemas/AwsReadRoleTagDenyListResponse" + } + } + } } } }, "post": { + "summary": "Add a role tag to the deny list.", "operationId": "aws-write-role-tag-deny-list", "tags": [ "auth" ], "responses": { - "200": { - "description": "OK" + "204": { + "description": "No Content" } } }, "delete": { + "summary": "Delete the deny-list entry for the given role tag.", "operationId": "aws-delete-role-tag-deny-list", "tags": [ "auth" ], "responses": { "204": { - "description": "empty body" + "description": "No Content" } } } @@ -3466,6 +3625,7 @@ } ], "post": { + "summary": "Tidy expired entries from the identity access list.", "operationId": "aws-tidy-identity-access-list", "tags": [ "auth" @@ -3481,8 +3641,8 @@ } }, "responses": { - "200": { - "description": "OK" + "202": { + "description": "Accepted" } } } @@ -3502,6 +3662,7 @@ } ], "post": { + "summary": "Tidy expired entries from the identity access list.", "operationId": "aws-tidy-identity-whitelist", "tags": [ "auth" @@ -3517,8 +3678,8 @@ } }, "responses": { - "200": { - "description": "OK" + "202": { + "description": "Accepted" } } } @@ -3538,6 +3699,7 @@ } ], "post": { + "summary": "Tidy expired entries from the role-tag deny list.", "operationId": "aws-tidy-role-tag-blacklist", "tags": [ "auth" @@ -3553,8 +3715,8 @@ } }, "responses": { - "200": { - "description": "OK" + "202": { + "description": "Accepted" } } } @@ -3574,6 +3736,7 @@ } ], "post": { + "summary": "Tidy expired entries from the role-tag deny list.", "operationId": "aws-tidy-role-tag-deny-list", "tags": [ "auth" @@ -3589,8 +3752,8 @@ } }, "responses": { - "200": { - "description": "OK" + "202": { + "description": "Accepted" } } } @@ -50527,6 +50690,484 @@ } } }, + "AwsLoginResponse": { + "type": "object", + "properties": { + "accessor": { + "type": "string", + "description": "Accessor for the client token." + }, + "client_token": { + "type": "string", + "description": "Token issued by Vault for the authenticated client." + }, + "entity_id": { + "type": "string", + "description": "Entity ID associated with the token." + }, + "lease_duration": { + "type": "integer", + "description": "Lease duration in seconds.", + "format": "int64" + }, + "metadata": { + "type": "object", + "description": "Metadata associated with the token.", + "format": "map" + }, + "mfa_requirement": { + "type": "object", + "description": "MFA requirement information.", + "format": "map" + }, + "num_uses": { + "type": "integer", + "description": "Number of uses remaining for the token." + }, + "orphan": { + "type": "boolean", + "description": "Whether the token is an orphan." + }, + "policies": { + "type": "array", + "description": "List of policies associated with the token.", + "items": { + "type": "string" + } + }, + "renewable": { + "type": "boolean", + "description": "Whether the token is renewable." + }, + "token_policies": { + "type": "array", + "description": "List of token policies.", + "items": { + "type": "string" + } + }, + "token_type": { + "type": "string", + "description": "Type of the token." + } + } + }, + "AwsReadAuthRoleResponse": { + "type": "object", + "properties": { + "allow_instance_migration": { + "type": "boolean", + "description": "Whether instance migration is allowed." + }, + "auth_type": { + "type": "string", + "description": "Auth type permitted to authenticate to this role." + }, + "bound_account_id": { + "type": "array", + "description": "AWS account IDs that instances must belong to.", + "items": { + "type": "object" + } + }, + "bound_ami_id": { + "type": "array", + "description": "AMI IDs that instances must use to authenticate.", + "items": { + "type": "object" + } + }, + "bound_ec2_instance_id": { + "type": "array", + "description": "EC2 instance IDs that are allowed to authenticate.", + "items": { + "type": "object" + } + }, + "bound_iam_instance_profile_arn": { + "type": "array", + "description": "IAM instance profile ARN prefixes that instances must match.", + "items": { + "type": "object" + } + }, + "bound_iam_principal_arn": { + "type": "array", + "description": "IAM principal ARNs bound to this role.", + "items": { + "type": "object" + } + }, + "bound_iam_principal_id": { + "type": "array", + "description": "Resolved unique IDs for IAM principal ARNs.", + "items": { + "type": "object" + } + }, + "bound_iam_role_arn": { + "type": "array", + "description": "IAM role ARNs that instances must match.", + "items": { + "type": "object" + } + }, + "bound_region": { + "type": "array", + "description": "AWS regions that instances must be in.", + "items": { + "type": "object" + } + }, + "bound_subnet_id": { + "type": "array", + "description": "VPC subnet IDs that instances must be in.", + "items": { + "type": "object" + } + }, + "bound_vpc_id": { + "type": "array", + "description": "VPC IDs that instances must be in.", + "items": { + "type": "object" + } + }, + "disallow_reauthentication": { + "type": "boolean", + "description": "Whether reauthentication is disallowed." + }, + "inferred_aws_region": { + "type": "string", + "description": "AWS region used when inferring the entity type." + }, + "inferred_entity_type": { + "type": "string", + "description": "Entity type inferred from the authenticated principal." + }, + "resolve_aws_unique_ids": { + "type": "boolean", + "description": "Whether IAM ARNs are resolved to unique IDs." + }, + "role_id": { + "type": "string", + "description": "Unique ID of the role." + }, + "role_tag": { + "type": "string", + "description": "EC2 instance tag key for role tags." + }, + "token_bound_cidrs": { + "type": "array", + "description": "CIDR blocks that tokens are restricted to.", + "items": { + "type": "object" + } + }, + "token_explicit_max_ttl": { + "type": "integer", + "description": "Explicit maximum TTL for tokens." + }, + "token_max_ttl": { + "type": "integer", + "description": "Maximum TTL for tokens." + }, + "token_no_default_policy": { + "type": "boolean", + "description": "Whether the default policy is not added to tokens." + }, + "token_num_uses": { + "type": "integer", + "description": "Maximum number of token uses." + }, + "token_period": { + "type": "integer", + "description": "Renewal period for tokens." + }, + "token_policies": { + "type": "array", + "description": "Policies applied to tokens.", + "items": { + "type": "object" + } + }, + "token_ttl": { + "type": "integer", + "description": "TTL for tokens." + }, + "token_type": { + "type": "string", + "description": "Type of tokens generated." + } + } + }, + "AwsReadCertificateConfigurationResponse": { + "type": "object", + "properties": { + "aws_public_cert": { + "type": "string", + "description": "Base64-encoded AWS public certificate used to verify PKCS7 signatures." + }, + "type": { + "type": "string", + "description": "Type of document the certificate verifies, either pkcs7 or identity." + } + } + }, + "AwsReadClientConfigurationResponse": { + "type": "object", + "properties": { + "access_key": { + "type": "string", + "description": "AWS access key ID." + }, + "allowed_sts_header_values": { + "type": "array", + "description": "Allowed additional headers in AWS STS request headers.", + "items": { + "type": "object" + } + }, + "disable_automated_rotation": { + "type": "boolean", + "description": "Whether automated rotation is disabled." + }, + "endpoint": { + "type": "string", + "description": "Custom endpoint URL for AWS EC2 API calls." + }, + "iam_endpoint": { + "type": "string", + "description": "Custom endpoint URL for AWS IAM API calls." + }, + "iam_server_id_header_value": { + "type": "string", + "description": "Required value for the X-Vault-AWS-IAM-Server-ID request header." + }, + "identity_token_audience": { + "type": "string", + "description": "Audience for plugin identity tokens." + }, + "identity_token_ttl": { + "type": "string", + "description": "Time-to-live for plugin identity tokens in seconds.", + "format": "duration" + }, + "max_retries": { + "type": "integer", + "description": "Maximum number of retries for AWS API calls." + }, + "role_arn": { + "type": "string", + "description": "Role ARN for plugin identity token federation." + }, + "rotation_period": { + "type": "string", + "description": "Period in seconds between automated credential rotations.", + "format": "duration" + }, + "rotation_policy": { + "type": "string", + "description": "Name of the rotation policy to use." + }, + "rotation_schedule": { + "type": "string", + "description": "Automated rotation schedule in cron format." + }, + "rotation_window": { + "type": "string", + "description": "Window in seconds during which automated rotation may occur.", + "format": "duration" + }, + "sts_endpoint": { + "type": "string", + "description": "Custom endpoint URL for AWS STS API calls." + }, + "sts_region": { + "type": "string", + "description": "Region for the STS endpoint." + }, + "use_sts_region_from_client": { + "type": "boolean", + "description": "Whether to use the STS region from client requests." + } + } + }, + "AwsReadIdentityAccessListResponse": { + "type": "object", + "properties": { + "client_nonce": { + "type": "string", + "description": "Client nonce used during the login." + }, + "creation_time": { + "type": "string", + "description": "Time the access-list entry was created, in RFC3339 format." + }, + "disallow_reauthentication": { + "type": "boolean", + "description": "Whether reauthentication is disallowed for this instance." + }, + "expiration_time": { + "type": "string", + "description": "Time the access-list entry expires, in RFC3339 format." + }, + "last_updated_time": { + "type": "string", + "description": "Time the access-list entry was last updated, in RFC3339 format." + }, + "pending_time": { + "type": "string", + "description": "The pendingTime field from the instance identity document." + }, + "role": { + "type": "string", + "description": "Name of the role used during the last successful login." + } + } + }, + "AwsReadIdentityAccessListTidySettingsResponse": { + "type": "object", + "properties": { + "disable_periodic_tidy": { + "type": "boolean", + "description": "Whether periodic tidying of identity access-list entries is disabled." + }, + "safety_buffer": { + "type": "string", + "description": "Duration past expiration before identities are removed from storage.", + "format": "duration" + } + } + }, + "AwsReadIdentityIntegrationConfigurationResponse": { + "type": "object", + "properties": { + "ec2_alias": { + "type": "string", + "description": "How EC2 instances are mapped to identity aliases." + }, + "ec2_metadata": { + "type": "array", + "description": "Metadata fields to include on EC2 auth tokens.", + "items": { + "type": "object" + } + }, + "iam_alias": { + "type": "string", + "description": "How IAM principals are mapped to identity aliases." + }, + "iam_metadata": { + "type": "array", + "description": "Metadata fields to include on IAM auth tokens.", + "items": { + "type": "object" + } + } + } + }, + "AwsReadIdentityWhitelistResponse": { + "type": "object", + "properties": { + "client_nonce": { + "type": "string", + "description": "Client nonce used during the login." + }, + "creation_time": { + "type": "string", + "description": "Time the access-list entry was created, in RFC3339 format." + }, + "disallow_reauthentication": { + "type": "boolean", + "description": "Whether reauthentication is disallowed for this instance." + }, + "expiration_time": { + "type": "string", + "description": "Time the access-list entry expires, in RFC3339 format." + }, + "last_updated_time": { + "type": "string", + "description": "Time the access-list entry was last updated, in RFC3339 format." + }, + "pending_time": { + "type": "string", + "description": "The pendingTime field from the instance identity document." + }, + "role": { + "type": "string", + "description": "Name of the role used during the last successful login." + } + } + }, + "AwsReadIdentityWhitelistTidySettingsResponse": { + "type": "object", + "properties": { + "disable_periodic_tidy": { + "type": "boolean", + "description": "Whether periodic tidying of identity access-list entries is disabled." + }, + "safety_buffer": { + "type": "string", + "description": "Duration past expiration before identities are removed from storage.", + "format": "duration" + } + } + }, + "AwsReadRoleTagBlacklistResponse": { + "type": "object", + "properties": { + "creation_time": { + "type": "string", + "description": "Time the deny-list entry was created, in RFC3339 format." + }, + "expiration_time": { + "type": "string", + "description": "Time the deny-list entry expires, in RFC3339 format." + } + } + }, + "AwsReadRoleTagBlacklistTidySettingsResponse": { + "type": "object", + "properties": { + "disable_periodic_tidy": { + "type": "boolean", + "description": "Whether periodic tidying of deny-listed role tag entries is disabled." + }, + "safety_buffer": { + "type": "string", + "description": "Duration past expiration before role tags are removed from storage.", + "format": "duration" + } + } + }, + "AwsReadRoleTagDenyListResponse": { + "type": "object", + "properties": { + "creation_time": { + "type": "string", + "description": "Time the deny-list entry was created, in RFC3339 format." + }, + "expiration_time": { + "type": "string", + "description": "Time the deny-list entry expires, in RFC3339 format." + } + } + }, + "AwsReadRoleTagDenyListTidySettingsResponse": { + "type": "object", + "properties": { + "disable_periodic_tidy": { + "type": "boolean", + "description": "Whether periodic tidying of deny-listed role tag entries is disabled." + }, + "safety_buffer": { + "type": "string", + "description": "Duration past expiration before role tags are removed from storage.", + "format": "duration" + } + } + }, "AwsReadStaticCredsNameResponse": { "type": "object", "properties": { @@ -50570,6 +51211,28 @@ } } }, + "AwsReadStsRoleResponse": { + "type": "object", + "properties": { + "external_id": { + "type": "string", + "description": "External ID used when assuming the STS role." + }, + "sts_role": { + "type": "string", + "description": "AWS ARN of the STS role to assume for the account." + } + } + }, + "AwsRotateRootCredentialsResponse": { + "type": "object", + "properties": { + "access_key": { + "type": "string", + "description": "New access key ID of the rotated root IAM credential." + } + } + }, "AwsTidyIdentityAccessListRequest": { "type": "object", "properties": { @@ -50987,6 +51650,19 @@ } } }, + "AwsWriteRoleTagResponse": { + "type": "object", + "properties": { + "tag_key": { + "type": "string", + "description": "The key to use for the role tag on the EC2 instance." + }, + "tag_value": { + "type": "string", + "description": "The value to use for the role tag on the EC2 instance." + } + } + }, "AwsWriteStaticRolesNameRequest": { "type": "object", "properties": { @@ -75371,6 +76047,10 @@ "type": "string", "description": "ID of the registration. If set, updates the corresponding existing registration." }, + "local": { + "type": "boolean", + "description": "Whether the agent registration should not be replicated globally and should be local to the current cluster." + }, "no_default_ceiling_policy": { "type": "boolean", "description": "Opt out of automatically adding the default ceiling policies to this agent registration." @@ -75428,6 +76108,10 @@ "type": "string", "description": "Entity ID representing this agent." }, + "local": { + "type": "boolean", + "description": "Whether the agent registration should not be replicated globally and should be local to the current cluster." + }, "no_default_ceiling_policy": { "type": "boolean", "description": "Opt out of automatically adding the default ceiling policies to this agent registration." @@ -75468,6 +76152,10 @@ "type": "string", "description": "ID of the registration. If set, updates the corresponding existing registration." }, + "local": { + "type": "boolean", + "description": "Whether the agent registration should not be replicated globally and should be local to the current cluster." + }, "no_default_ceiling_policy": { "type": "boolean", "description": "Opt out of automatically adding the default ceiling policies to this agent registration." From f8d30b438b4b1cc2b978938a27386c06cc7fd364 Mon Sep 17 00:00:00 2001 From: hc-github-team-secure-vault-core <82990506+hc-github-team-secure-vault-core@users.noreply.github.com> Date: Fri, 28 Aug 2026 16:07:07 +0000 Subject: [PATCH 2/2] auto: generated client updates --- .openapi-generator/FILES | 16 + src/apis/AuthApi.ts | 246 +++++++++++++--- src/models/AwsLoginResponse.ts | 157 ++++++++++ src/models/AwsReadAuthRoleResponse.ts | 277 ++++++++++++++++++ ...AwsReadCertificateConfigurationResponse.ts | 77 +++++ .../AwsReadClientConfigurationResponse.ts | 197 +++++++++++++ .../AwsReadIdentityAccessListResponse.ts | 117 ++++++++ ...dIdentityAccessListTidySettingsResponse.ts | 77 +++++ ...dentityIntegrationConfigurationResponse.ts | 93 ++++++ .../AwsReadIdentityWhitelistResponse.ts | 117 ++++++++ ...adIdentityWhitelistTidySettingsResponse.ts | 77 +++++ src/models/AwsReadRoleTagBlacklistResponse.ts | 77 +++++ ...eadRoleTagBlacklistTidySettingsResponse.ts | 77 +++++ src/models/AwsReadRoleTagDenyListResponse.ts | 77 +++++ ...ReadRoleTagDenyListTidySettingsResponse.ts | 77 +++++ src/models/AwsReadStsRoleResponse.ts | 77 +++++ .../AwsRotateRootCredentialsResponse.ts | 69 +++++ src/models/AwsWriteRoleTagResponse.ts | 77 +++++ src/models/RegisterCreateRequest.ts | 8 + src/models/RegistrationUpdateByIdRequest.ts | 8 + src/models/RegistrationUpdateByNameRequest.ts | 8 + src/models/index.ts | 16 + 22 files changed, 1974 insertions(+), 48 deletions(-) create mode 100644 src/models/AwsLoginResponse.ts create mode 100644 src/models/AwsReadAuthRoleResponse.ts create mode 100644 src/models/AwsReadCertificateConfigurationResponse.ts create mode 100644 src/models/AwsReadClientConfigurationResponse.ts create mode 100644 src/models/AwsReadIdentityAccessListResponse.ts create mode 100644 src/models/AwsReadIdentityAccessListTidySettingsResponse.ts create mode 100644 src/models/AwsReadIdentityIntegrationConfigurationResponse.ts create mode 100644 src/models/AwsReadIdentityWhitelistResponse.ts create mode 100644 src/models/AwsReadIdentityWhitelistTidySettingsResponse.ts create mode 100644 src/models/AwsReadRoleTagBlacklistResponse.ts create mode 100644 src/models/AwsReadRoleTagBlacklistTidySettingsResponse.ts create mode 100644 src/models/AwsReadRoleTagDenyListResponse.ts create mode 100644 src/models/AwsReadRoleTagDenyListTidySettingsResponse.ts create mode 100644 src/models/AwsReadStsRoleResponse.ts create mode 100644 src/models/AwsRotateRootCredentialsResponse.ts create mode 100644 src/models/AwsWriteRoleTagResponse.ts diff --git a/.openapi-generator/FILES b/.openapi-generator/FILES index eae03e5..984b5e0 100644 --- a/.openapi-generator/FILES +++ b/.openapi-generator/FILES @@ -72,8 +72,23 @@ src/models/AwsConfigureRootIamCredentialsRequest.ts src/models/AwsGenerateCredentialsWithParametersRequest.ts src/models/AwsGenerateStsCredentialsWithParametersRequest.ts src/models/AwsLoginRequest.ts +src/models/AwsLoginResponse.ts +src/models/AwsReadAuthRoleResponse.ts +src/models/AwsReadCertificateConfigurationResponse.ts +src/models/AwsReadClientConfigurationResponse.ts +src/models/AwsReadIdentityAccessListResponse.ts +src/models/AwsReadIdentityAccessListTidySettingsResponse.ts +src/models/AwsReadIdentityIntegrationConfigurationResponse.ts +src/models/AwsReadIdentityWhitelistResponse.ts +src/models/AwsReadIdentityWhitelistTidySettingsResponse.ts +src/models/AwsReadRoleTagBlacklistResponse.ts +src/models/AwsReadRoleTagBlacklistTidySettingsResponse.ts +src/models/AwsReadRoleTagDenyListResponse.ts +src/models/AwsReadRoleTagDenyListTidySettingsResponse.ts src/models/AwsReadStaticCredsNameResponse.ts src/models/AwsReadStaticRolesNameResponse.ts +src/models/AwsReadStsRoleResponse.ts +src/models/AwsRotateRootCredentialsResponse.ts src/models/AwsTidyIdentityAccessListRequest.ts src/models/AwsTidyIdentityWhitelistRequest.ts src/models/AwsTidyRoleTagBlacklistRequest.ts @@ -81,6 +96,7 @@ src/models/AwsTidyRoleTagDenyListRequest.ts src/models/AwsWriteAuthRoleRequest.ts src/models/AwsWriteRoleRequest.ts src/models/AwsWriteRoleTagRequest.ts +src/models/AwsWriteRoleTagResponse.ts src/models/AwsWriteStaticRolesNameRequest.ts src/models/AwsWriteStaticRolesNameResponse.ts src/models/AwsWriteStsRoleRequest.ts diff --git a/src/apis/AuthApi.ts b/src/apis/AuthApi.ts index 0e3e046..97ad0d4 100644 --- a/src/apis/AuthApi.ts +++ b/src/apis/AuthApi.ts @@ -67,12 +67,28 @@ import type { AwsConfigureRoleTagBlacklistTidyOperationRequest, AwsConfigureRoleTagDenyListTidyOperationRequest, AwsLoginRequest, + AwsLoginResponse, + AwsReadAuthRoleResponse, + AwsReadCertificateConfigurationResponse, + AwsReadClientConfigurationResponse, + AwsReadIdentityAccessListResponse, + AwsReadIdentityAccessListTidySettingsResponse, + AwsReadIdentityIntegrationConfigurationResponse, + AwsReadIdentityWhitelistResponse, + AwsReadIdentityWhitelistTidySettingsResponse, + AwsReadRoleTagBlacklistResponse, + AwsReadRoleTagBlacklistTidySettingsResponse, + AwsReadRoleTagDenyListResponse, + AwsReadRoleTagDenyListTidySettingsResponse, + AwsReadStsRoleResponse, + AwsRotateRootCredentialsResponse, AwsTidyIdentityAccessListRequest, AwsTidyIdentityWhitelistRequest, AwsTidyRoleTagBlacklistRequest, AwsTidyRoleTagDenyListRequest, AwsWriteAuthRoleRequest, AwsWriteRoleTagRequest, + AwsWriteRoleTagResponse, AwsWriteStsRoleRequest, AzureConfigureAuthRequest, AzureLoginRequest, @@ -257,6 +273,36 @@ import { AwsConfigureRoleTagDenyListTidyOperationRequestToJSON, AwsLoginRequestFromJSON, AwsLoginRequestToJSON, + AwsLoginResponseFromJSON, + AwsLoginResponseToJSON, + AwsReadAuthRoleResponseFromJSON, + AwsReadAuthRoleResponseToJSON, + AwsReadCertificateConfigurationResponseFromJSON, + AwsReadCertificateConfigurationResponseToJSON, + AwsReadClientConfigurationResponseFromJSON, + AwsReadClientConfigurationResponseToJSON, + AwsReadIdentityAccessListResponseFromJSON, + AwsReadIdentityAccessListResponseToJSON, + AwsReadIdentityAccessListTidySettingsResponseFromJSON, + AwsReadIdentityAccessListTidySettingsResponseToJSON, + AwsReadIdentityIntegrationConfigurationResponseFromJSON, + AwsReadIdentityIntegrationConfigurationResponseToJSON, + AwsReadIdentityWhitelistResponseFromJSON, + AwsReadIdentityWhitelistResponseToJSON, + AwsReadIdentityWhitelistTidySettingsResponseFromJSON, + AwsReadIdentityWhitelistTidySettingsResponseToJSON, + AwsReadRoleTagBlacklistResponseFromJSON, + AwsReadRoleTagBlacklistResponseToJSON, + AwsReadRoleTagBlacklistTidySettingsResponseFromJSON, + AwsReadRoleTagBlacklistTidySettingsResponseToJSON, + AwsReadRoleTagDenyListResponseFromJSON, + AwsReadRoleTagDenyListResponseToJSON, + AwsReadRoleTagDenyListTidySettingsResponseFromJSON, + AwsReadRoleTagDenyListTidySettingsResponseToJSON, + AwsReadStsRoleResponseFromJSON, + AwsReadStsRoleResponseToJSON, + AwsRotateRootCredentialsResponseFromJSON, + AwsRotateRootCredentialsResponseToJSON, AwsTidyIdentityAccessListRequestFromJSON, AwsTidyIdentityAccessListRequestToJSON, AwsTidyIdentityWhitelistRequestFromJSON, @@ -269,6 +315,8 @@ import { AwsWriteAuthRoleRequestToJSON, AwsWriteRoleTagRequestFromJSON, AwsWriteRoleTagRequestToJSON, + AwsWriteRoleTagResponseFromJSON, + AwsWriteRoleTagResponseToJSON, AwsWriteStsRoleRequestFromJSON, AwsWriteStsRoleRequestToJSON, AzureConfigureAuthRequestFromJSON, @@ -4331,6 +4379,7 @@ export class AuthApi extends runtime.BaseAPI { } /** + * Configure an AWS public key for PKCS7 or identity-document verification. */ async awsConfigureCertificateRaw(requestParameters: AuthApiAwsConfigureCertificateOperationRequest, initOverrides?: RequestInit | runtime.InitOverrideFunction): Promise> { if (requestParameters['cert_name'] == null) { @@ -4373,6 +4422,7 @@ export class AuthApi extends runtime.BaseAPI { } /** + * Configure an AWS public key for PKCS7 or identity-document verification. */ async awsConfigureCertificate(cert_name: string, aws_mount_path: string, AwsConfigureCertificateRequest: AwsConfigureCertificateRequest, initOverrides?: RequestInit | runtime.InitOverrideFunction): Promise { const response = await this.awsConfigureCertificateRaw({ cert_name: cert_name, aws_mount_path: aws_mount_path, AwsConfigureCertificateRequest: AwsConfigureCertificateRequest }, initOverrides); @@ -4380,6 +4430,7 @@ export class AuthApi extends runtime.BaseAPI { } /** + * Configure AWS IAM credentials used to query instance and role details. */ async awsConfigureClientRaw(requestParameters: AuthApiAwsConfigureClientOperationRequest, initOverrides?: RequestInit | runtime.InitOverrideFunction): Promise> { if (requestParameters['aws_mount_path'] == null) { @@ -4415,6 +4466,7 @@ export class AuthApi extends runtime.BaseAPI { } /** + * Configure AWS IAM credentials used to query instance and role details. */ async awsConfigureClient(aws_mount_path: string, AwsConfigureClientRequest: AwsConfigureClientRequest, initOverrides?: RequestInit | runtime.InitOverrideFunction): Promise { const response = await this.awsConfigureClientRaw({ aws_mount_path: aws_mount_path, AwsConfigureClientRequest: AwsConfigureClientRequest }, initOverrides); @@ -4422,6 +4474,7 @@ export class AuthApi extends runtime.BaseAPI { } /** + * Configure the identity access-list tidy operation. */ async awsConfigureIdentityAccessListTidyOperationRaw(requestParameters: AuthApiAwsConfigureIdentityAccessListTidyOperationOperationRequest, initOverrides?: RequestInit | runtime.InitOverrideFunction): Promise> { if (requestParameters['aws_mount_path'] == null) { @@ -4457,6 +4510,7 @@ export class AuthApi extends runtime.BaseAPI { } /** + * Configure the identity access-list tidy operation. */ async awsConfigureIdentityAccessListTidyOperation(aws_mount_path: string, AwsConfigureIdentityAccessListTidyOperationRequest: AwsConfigureIdentityAccessListTidyOperationRequest, initOverrides?: RequestInit | runtime.InitOverrideFunction): Promise { const response = await this.awsConfigureIdentityAccessListTidyOperationRaw({ aws_mount_path: aws_mount_path, AwsConfigureIdentityAccessListTidyOperationRequest: AwsConfigureIdentityAccessListTidyOperationRequest }, initOverrides); @@ -4464,6 +4518,7 @@ export class AuthApi extends runtime.BaseAPI { } /** + * Configure the AWS identity integration settings. */ async awsConfigureIdentityIntegrationRaw(requestParameters: AuthApiAwsConfigureIdentityIntegrationOperationRequest, initOverrides?: RequestInit | runtime.InitOverrideFunction): Promise> { if (requestParameters['aws_mount_path'] == null) { @@ -4499,6 +4554,7 @@ export class AuthApi extends runtime.BaseAPI { } /** + * Configure the AWS identity integration settings. */ async awsConfigureIdentityIntegration(aws_mount_path: string, AwsConfigureIdentityIntegrationRequest: AwsConfigureIdentityIntegrationRequest, initOverrides?: RequestInit | runtime.InitOverrideFunction): Promise { const response = await this.awsConfigureIdentityIntegrationRaw({ aws_mount_path: aws_mount_path, AwsConfigureIdentityIntegrationRequest: AwsConfigureIdentityIntegrationRequest }, initOverrides); @@ -4506,6 +4562,7 @@ export class AuthApi extends runtime.BaseAPI { } /** + * Configure the identity access-list tidy operation. */ async awsConfigureIdentityWhitelistTidyOperationRaw(requestParameters: AuthApiAwsConfigureIdentityWhitelistTidyOperationOperationRequest, initOverrides?: RequestInit | runtime.InitOverrideFunction): Promise> { if (requestParameters['aws_mount_path'] == null) { @@ -4541,6 +4598,7 @@ export class AuthApi extends runtime.BaseAPI { } /** + * Configure the identity access-list tidy operation. */ async awsConfigureIdentityWhitelistTidyOperation(aws_mount_path: string, AwsConfigureIdentityWhitelistTidyOperationRequest: AwsConfigureIdentityWhitelistTidyOperationRequest, initOverrides?: RequestInit | runtime.InitOverrideFunction): Promise { const response = await this.awsConfigureIdentityWhitelistTidyOperationRaw({ aws_mount_path: aws_mount_path, AwsConfigureIdentityWhitelistTidyOperationRequest: AwsConfigureIdentityWhitelistTidyOperationRequest }, initOverrides); @@ -4548,6 +4606,7 @@ export class AuthApi extends runtime.BaseAPI { } /** + * Configure the role-tag deny-list tidy operation. */ async awsConfigureRoleTagBlacklistTidyOperationRaw(requestParameters: AuthApiAwsConfigureRoleTagBlacklistTidyOperationOperationRequest, initOverrides?: RequestInit | runtime.InitOverrideFunction): Promise> { if (requestParameters['aws_mount_path'] == null) { @@ -4583,6 +4642,7 @@ export class AuthApi extends runtime.BaseAPI { } /** + * Configure the role-tag deny-list tidy operation. */ async awsConfigureRoleTagBlacklistTidyOperation(aws_mount_path: string, AwsConfigureRoleTagBlacklistTidyOperationRequest: AwsConfigureRoleTagBlacklistTidyOperationRequest, initOverrides?: RequestInit | runtime.InitOverrideFunction): Promise { const response = await this.awsConfigureRoleTagBlacklistTidyOperationRaw({ aws_mount_path: aws_mount_path, AwsConfigureRoleTagBlacklistTidyOperationRequest: AwsConfigureRoleTagBlacklistTidyOperationRequest }, initOverrides); @@ -4590,6 +4650,7 @@ export class AuthApi extends runtime.BaseAPI { } /** + * Configure the role-tag deny-list tidy operation. */ async awsConfigureRoleTagDenyListTidyOperationRaw(requestParameters: AuthApiAwsConfigureRoleTagDenyListTidyOperationOperationRequest, initOverrides?: RequestInit | runtime.InitOverrideFunction): Promise> { if (requestParameters['aws_mount_path'] == null) { @@ -4625,6 +4686,7 @@ export class AuthApi extends runtime.BaseAPI { } /** + * Configure the role-tag deny-list tidy operation. */ async awsConfigureRoleTagDenyListTidyOperation(aws_mount_path: string, AwsConfigureRoleTagDenyListTidyOperationRequest: AwsConfigureRoleTagDenyListTidyOperationRequest, initOverrides?: RequestInit | runtime.InitOverrideFunction): Promise { const response = await this.awsConfigureRoleTagDenyListTidyOperationRaw({ aws_mount_path: aws_mount_path, AwsConfigureRoleTagDenyListTidyOperationRequest: AwsConfigureRoleTagDenyListTidyOperationRequest }, initOverrides); @@ -4632,6 +4694,7 @@ export class AuthApi extends runtime.BaseAPI { } /** + * Delete a named AWS auth role. */ async awsDeleteAuthRoleRaw(requestParameters: AuthApiAwsDeleteAuthRoleRequest, initOverrides?: RequestInit | runtime.InitOverrideFunction): Promise> { if (requestParameters['role'] == null) { @@ -4664,6 +4727,7 @@ export class AuthApi extends runtime.BaseAPI { } /** + * Delete a named AWS auth role. */ async awsDeleteAuthRole(role: string, aws_mount_path: string, initOverrides?: RequestInit | runtime.InitOverrideFunction): Promise { const response = await this.awsDeleteAuthRoleRaw({ role: role, aws_mount_path: aws_mount_path }, initOverrides); @@ -4671,6 +4735,7 @@ export class AuthApi extends runtime.BaseAPI { } /** + * Delete the configured AWS public certificate. */ async awsDeleteCertificateConfigurationRaw(requestParameters: AuthApiAwsDeleteCertificateConfigurationRequest, initOverrides?: RequestInit | runtime.InitOverrideFunction): Promise> { if (requestParameters['cert_name'] == null) { @@ -4703,6 +4768,7 @@ export class AuthApi extends runtime.BaseAPI { } /** + * Delete the configured AWS public certificate. */ async awsDeleteCertificateConfiguration(cert_name: string, aws_mount_path: string, initOverrides?: RequestInit | runtime.InitOverrideFunction): Promise { const response = await this.awsDeleteCertificateConfigurationRaw({ cert_name: cert_name, aws_mount_path: aws_mount_path }, initOverrides); @@ -4710,6 +4776,7 @@ export class AuthApi extends runtime.BaseAPI { } /** + * Delete the AWS client configuration. */ async awsDeleteClientConfigurationRaw(requestParameters: AuthApiAwsDeleteClientConfigurationRequest, initOverrides?: RequestInit | runtime.InitOverrideFunction): Promise> { if (requestParameters['aws_mount_path'] == null) { @@ -4735,6 +4802,7 @@ export class AuthApi extends runtime.BaseAPI { } /** + * Delete the AWS client configuration. */ async awsDeleteClientConfiguration(aws_mount_path: string, initOverrides?: RequestInit | runtime.InitOverrideFunction): Promise { const response = await this.awsDeleteClientConfigurationRaw({ aws_mount_path: aws_mount_path }, initOverrides); @@ -4742,6 +4810,7 @@ export class AuthApi extends runtime.BaseAPI { } /** + * Delete the access-list entry for the given EC2 instance ID. */ async awsDeleteIdentityAccessListRaw(requestParameters: AuthApiAwsDeleteIdentityAccessListRequest, initOverrides?: RequestInit | runtime.InitOverrideFunction): Promise> { if (requestParameters['instance_id'] == null) { @@ -4774,6 +4843,7 @@ export class AuthApi extends runtime.BaseAPI { } /** + * Delete the access-list entry for the given EC2 instance ID. */ async awsDeleteIdentityAccessList(instance_id: string, aws_mount_path: string, initOverrides?: RequestInit | runtime.InitOverrideFunction): Promise { const response = await this.awsDeleteIdentityAccessListRaw({ instance_id: instance_id, aws_mount_path: aws_mount_path }, initOverrides); @@ -4781,6 +4851,7 @@ export class AuthApi extends runtime.BaseAPI { } /** + * Delete the identity access-list tidy configuration. */ async awsDeleteIdentityAccessListTidySettingsRaw(requestParameters: AuthApiAwsDeleteIdentityAccessListTidySettingsRequest, initOverrides?: RequestInit | runtime.InitOverrideFunction): Promise> { if (requestParameters['aws_mount_path'] == null) { @@ -4806,6 +4877,7 @@ export class AuthApi extends runtime.BaseAPI { } /** + * Delete the identity access-list tidy configuration. */ async awsDeleteIdentityAccessListTidySettings(aws_mount_path: string, initOverrides?: RequestInit | runtime.InitOverrideFunction): Promise { const response = await this.awsDeleteIdentityAccessListTidySettingsRaw({ aws_mount_path: aws_mount_path }, initOverrides); @@ -4813,6 +4885,7 @@ export class AuthApi extends runtime.BaseAPI { } /** + * Delete the access-list entry for the given EC2 instance ID. */ async awsDeleteIdentityWhitelistRaw(requestParameters: AuthApiAwsDeleteIdentityWhitelistRequest, initOverrides?: RequestInit | runtime.InitOverrideFunction): Promise> { if (requestParameters['instance_id'] == null) { @@ -4845,6 +4918,7 @@ export class AuthApi extends runtime.BaseAPI { } /** + * Delete the access-list entry for the given EC2 instance ID. */ async awsDeleteIdentityWhitelist(instance_id: string, aws_mount_path: string, initOverrides?: RequestInit | runtime.InitOverrideFunction): Promise { const response = await this.awsDeleteIdentityWhitelistRaw({ instance_id: instance_id, aws_mount_path: aws_mount_path }, initOverrides); @@ -4852,6 +4926,7 @@ export class AuthApi extends runtime.BaseAPI { } /** + * Delete the identity access-list tidy configuration. */ async awsDeleteIdentityWhitelistTidySettingsRaw(requestParameters: AuthApiAwsDeleteIdentityWhitelistTidySettingsRequest, initOverrides?: RequestInit | runtime.InitOverrideFunction): Promise> { if (requestParameters['aws_mount_path'] == null) { @@ -4877,6 +4952,7 @@ export class AuthApi extends runtime.BaseAPI { } /** + * Delete the identity access-list tidy configuration. */ async awsDeleteIdentityWhitelistTidySettings(aws_mount_path: string, initOverrides?: RequestInit | runtime.InitOverrideFunction): Promise { const response = await this.awsDeleteIdentityWhitelistTidySettingsRaw({ aws_mount_path: aws_mount_path }, initOverrides); @@ -4884,6 +4960,7 @@ export class AuthApi extends runtime.BaseAPI { } /** + * Delete the deny-list entry for the given role tag. */ async awsDeleteRoleTagBlacklistRaw(requestParameters: AuthApiAwsDeleteRoleTagBlacklistRequest, initOverrides?: RequestInit | runtime.InitOverrideFunction): Promise> { if (requestParameters['role_tag'] == null) { @@ -4916,6 +4993,7 @@ export class AuthApi extends runtime.BaseAPI { } /** + * Delete the deny-list entry for the given role tag. */ async awsDeleteRoleTagBlacklist(role_tag: string, aws_mount_path: string, initOverrides?: RequestInit | runtime.InitOverrideFunction): Promise { const response = await this.awsDeleteRoleTagBlacklistRaw({ role_tag: role_tag, aws_mount_path: aws_mount_path }, initOverrides); @@ -4923,6 +5001,7 @@ export class AuthApi extends runtime.BaseAPI { } /** + * Delete the role-tag deny-list tidy configuration. */ async awsDeleteRoleTagBlacklistTidySettingsRaw(requestParameters: AuthApiAwsDeleteRoleTagBlacklistTidySettingsRequest, initOverrides?: RequestInit | runtime.InitOverrideFunction): Promise> { if (requestParameters['aws_mount_path'] == null) { @@ -4948,6 +5027,7 @@ export class AuthApi extends runtime.BaseAPI { } /** + * Delete the role-tag deny-list tidy configuration. */ async awsDeleteRoleTagBlacklistTidySettings(aws_mount_path: string, initOverrides?: RequestInit | runtime.InitOverrideFunction): Promise { const response = await this.awsDeleteRoleTagBlacklistTidySettingsRaw({ aws_mount_path: aws_mount_path }, initOverrides); @@ -4955,6 +5035,7 @@ export class AuthApi extends runtime.BaseAPI { } /** + * Delete the deny-list entry for the given role tag. */ async awsDeleteRoleTagDenyListRaw(requestParameters: AuthApiAwsDeleteRoleTagDenyListRequest, initOverrides?: RequestInit | runtime.InitOverrideFunction): Promise> { if (requestParameters['role_tag'] == null) { @@ -4987,6 +5068,7 @@ export class AuthApi extends runtime.BaseAPI { } /** + * Delete the deny-list entry for the given role tag. */ async awsDeleteRoleTagDenyList(role_tag: string, aws_mount_path: string, initOverrides?: RequestInit | runtime.InitOverrideFunction): Promise { const response = await this.awsDeleteRoleTagDenyListRaw({ role_tag: role_tag, aws_mount_path: aws_mount_path }, initOverrides); @@ -4994,6 +5076,7 @@ export class AuthApi extends runtime.BaseAPI { } /** + * Delete the role-tag deny-list tidy configuration. */ async awsDeleteRoleTagDenyListTidySettingsRaw(requestParameters: AuthApiAwsDeleteRoleTagDenyListTidySettingsRequest, initOverrides?: RequestInit | runtime.InitOverrideFunction): Promise> { if (requestParameters['aws_mount_path'] == null) { @@ -5019,6 +5102,7 @@ export class AuthApi extends runtime.BaseAPI { } /** + * Delete the role-tag deny-list tidy configuration. */ async awsDeleteRoleTagDenyListTidySettings(aws_mount_path: string, initOverrides?: RequestInit | runtime.InitOverrideFunction): Promise { const response = await this.awsDeleteRoleTagDenyListTidySettingsRaw({ aws_mount_path: aws_mount_path }, initOverrides); @@ -5026,6 +5110,7 @@ export class AuthApi extends runtime.BaseAPI { } /** + * Delete the configured STS role for a given AWS account. */ async awsDeleteStsRoleRaw(requestParameters: AuthApiAwsDeleteStsRoleRequest, initOverrides?: RequestInit | runtime.InitOverrideFunction): Promise> { if (requestParameters['account_id'] == null) { @@ -5058,6 +5143,7 @@ export class AuthApi extends runtime.BaseAPI { } /** + * Delete the configured STS role for a given AWS account. */ async awsDeleteStsRole(account_id: string, aws_mount_path: string, initOverrides?: RequestInit | runtime.InitOverrideFunction): Promise { const response = await this.awsDeleteStsRoleRaw({ account_id: account_id, aws_mount_path: aws_mount_path }, initOverrides); @@ -5065,6 +5151,7 @@ export class AuthApi extends runtime.BaseAPI { } /** + * List the configured AWS auth roles. */ async awsListAuthRolesRaw(requestParameters: AuthApiAwsListAuthRolesRequest, initOverrides?: RequestInit | runtime.InitOverrideFunction): Promise> { if (requestParameters['aws_mount_path'] == null) { @@ -5101,6 +5188,7 @@ export class AuthApi extends runtime.BaseAPI { } /** + * List the configured AWS auth roles. */ async awsListAuthRoles(aws_mount_path: string, list: AuthApiAwsListAuthRolesListEnum, initOverrides?: RequestInit | runtime.InitOverrideFunction): Promise { const response = await this.awsListAuthRolesRaw({ aws_mount_path: aws_mount_path, list: list }, initOverrides); @@ -5108,6 +5196,7 @@ export class AuthApi extends runtime.BaseAPI { } /** + * List the configured AWS auth roles. */ async awsListAuthRoles2Raw(requestParameters: AuthApiAwsListAuthRoles2Request, initOverrides?: RequestInit | runtime.InitOverrideFunction): Promise> { if (requestParameters['aws_mount_path'] == null) { @@ -5144,6 +5233,7 @@ export class AuthApi extends runtime.BaseAPI { } /** + * List the configured AWS auth roles. */ async awsListAuthRoles2(aws_mount_path: string, list: AuthApiAwsListAuthRoles2ListEnum, initOverrides?: RequestInit | runtime.InitOverrideFunction): Promise { const response = await this.awsListAuthRoles2Raw({ aws_mount_path: aws_mount_path, list: list }, initOverrides); @@ -5151,6 +5241,7 @@ export class AuthApi extends runtime.BaseAPI { } /** + * List the configured AWS public certificates. */ async awsListCertificateConfigurationsRaw(requestParameters: AuthApiAwsListCertificateConfigurationsRequest, initOverrides?: RequestInit | runtime.InitOverrideFunction): Promise> { if (requestParameters['aws_mount_path'] == null) { @@ -5187,6 +5278,7 @@ export class AuthApi extends runtime.BaseAPI { } /** + * List the configured AWS public certificates. */ async awsListCertificateConfigurations(aws_mount_path: string, list: AuthApiAwsListCertificateConfigurationsListEnum, initOverrides?: RequestInit | runtime.InitOverrideFunction): Promise { const response = await this.awsListCertificateConfigurationsRaw({ aws_mount_path: aws_mount_path, list: list }, initOverrides); @@ -5194,6 +5286,7 @@ export class AuthApi extends runtime.BaseAPI { } /** + * List the EC2 instance IDs in the identity access list. */ async awsListIdentityAccessListRaw(requestParameters: AuthApiAwsListIdentityAccessListRequest, initOverrides?: RequestInit | runtime.InitOverrideFunction): Promise> { if (requestParameters['aws_mount_path'] == null) { @@ -5230,6 +5323,7 @@ export class AuthApi extends runtime.BaseAPI { } /** + * List the EC2 instance IDs in the identity access list. */ async awsListIdentityAccessList(aws_mount_path: string, list: AuthApiAwsListIdentityAccessListListEnum, initOverrides?: RequestInit | runtime.InitOverrideFunction): Promise { const response = await this.awsListIdentityAccessListRaw({ aws_mount_path: aws_mount_path, list: list }, initOverrides); @@ -5237,6 +5331,7 @@ export class AuthApi extends runtime.BaseAPI { } /** + * List the EC2 instance IDs in the identity access list. */ async awsListIdentityWhitelistRaw(requestParameters: AuthApiAwsListIdentityWhitelistRequest, initOverrides?: RequestInit | runtime.InitOverrideFunction): Promise> { if (requestParameters['aws_mount_path'] == null) { @@ -5273,6 +5368,7 @@ export class AuthApi extends runtime.BaseAPI { } /** + * List the EC2 instance IDs in the identity access list. */ async awsListIdentityWhitelist(aws_mount_path: string, list: AuthApiAwsListIdentityWhitelistListEnum, initOverrides?: RequestInit | runtime.InitOverrideFunction): Promise { const response = await this.awsListIdentityWhitelistRaw({ aws_mount_path: aws_mount_path, list: list }, initOverrides); @@ -5280,6 +5376,7 @@ export class AuthApi extends runtime.BaseAPI { } /** + * List the deny-listed role tags. */ async awsListRoleTagBlacklistsRaw(requestParameters: AuthApiAwsListRoleTagBlacklistsRequest, initOverrides?: RequestInit | runtime.InitOverrideFunction): Promise> { if (requestParameters['aws_mount_path'] == null) { @@ -5316,6 +5413,7 @@ export class AuthApi extends runtime.BaseAPI { } /** + * List the deny-listed role tags. */ async awsListRoleTagBlacklists(aws_mount_path: string, list: AuthApiAwsListRoleTagBlacklistsListEnum, initOverrides?: RequestInit | runtime.InitOverrideFunction): Promise { const response = await this.awsListRoleTagBlacklistsRaw({ aws_mount_path: aws_mount_path, list: list }, initOverrides); @@ -5323,6 +5421,7 @@ export class AuthApi extends runtime.BaseAPI { } /** + * List the deny-listed role tags. */ async awsListRoleTagDenyListsRaw(requestParameters: AuthApiAwsListRoleTagDenyListsRequest, initOverrides?: RequestInit | runtime.InitOverrideFunction): Promise> { if (requestParameters['aws_mount_path'] == null) { @@ -5359,6 +5458,7 @@ export class AuthApi extends runtime.BaseAPI { } /** + * List the deny-listed role tags. */ async awsListRoleTagDenyLists(aws_mount_path: string, list: AuthApiAwsListRoleTagDenyListsListEnum, initOverrides?: RequestInit | runtime.InitOverrideFunction): Promise { const response = await this.awsListRoleTagDenyListsRaw({ aws_mount_path: aws_mount_path, list: list }, initOverrides); @@ -5366,6 +5466,7 @@ export class AuthApi extends runtime.BaseAPI { } /** + * List the configured STS roles for all AWS accounts. */ async awsListStsRoleRelationshipsRaw(requestParameters: AuthApiAwsListStsRoleRelationshipsRequest, initOverrides?: RequestInit | runtime.InitOverrideFunction): Promise> { if (requestParameters['aws_mount_path'] == null) { @@ -5402,6 +5503,7 @@ export class AuthApi extends runtime.BaseAPI { } /** + * List the configured STS roles for all AWS accounts. */ async awsListStsRoleRelationships(aws_mount_path: string, list: AuthApiAwsListStsRoleRelationshipsListEnum, initOverrides?: RequestInit | runtime.InitOverrideFunction): Promise { const response = await this.awsListStsRoleRelationshipsRaw({ aws_mount_path: aws_mount_path, list: list }, initOverrides); @@ -5409,8 +5511,9 @@ export class AuthApi extends runtime.BaseAPI { } /** + * Authenticate to Vault using AWS credentials. */ - async awsLoginRaw(requestParameters: AuthApiAwsLoginOperationRequest, initOverrides?: RequestInit | runtime.InitOverrideFunction): Promise> { + async awsLoginRaw(requestParameters: AuthApiAwsLoginOperationRequest, initOverrides?: RequestInit | runtime.InitOverrideFunction): Promise> { if (requestParameters['aws_mount_path'] == null) { throw new runtime.RequiredError( 'aws_mount_path', @@ -5440,19 +5543,21 @@ export class AuthApi extends runtime.BaseAPI { body: AwsLoginRequestToJSON(requestParameters['AwsLoginRequest']), }, initOverrides); - return new runtime.VoidApiResponse(response); + return new runtime.JSONApiResponse(response, (jsonValue) => AwsLoginResponseFromJSON(jsonValue)); } /** + * Authenticate to Vault using AWS credentials. */ - async awsLogin(aws_mount_path: string, AwsLoginRequest: AwsLoginRequest, initOverrides?: RequestInit | runtime.InitOverrideFunction): Promise { + async awsLogin(aws_mount_path: string, AwsLoginRequest: AwsLoginRequest, initOverrides?: RequestInit | runtime.InitOverrideFunction): Promise { const response = await this.awsLoginRaw({ aws_mount_path: aws_mount_path, AwsLoginRequest: AwsLoginRequest }, initOverrides); return await response.value(); } /** + * Return the configuration for a named AWS auth role. */ - async awsReadAuthRoleRaw(requestParameters: AuthApiAwsReadAuthRoleRequest, initOverrides?: RequestInit | runtime.InitOverrideFunction): Promise> { + async awsReadAuthRoleRaw(requestParameters: AuthApiAwsReadAuthRoleRequest, initOverrides?: RequestInit | runtime.InitOverrideFunction): Promise> { if (requestParameters['role'] == null) { throw new runtime.RequiredError( 'role', @@ -5479,19 +5584,21 @@ export class AuthApi extends runtime.BaseAPI { query: queryParameters, }, initOverrides); - return new runtime.VoidApiResponse(response); + return new runtime.JSONApiResponse(response, (jsonValue) => AwsReadAuthRoleResponseFromJSON(jsonValue)); } /** + * Return the configuration for a named AWS auth role. */ - async awsReadAuthRole(role: string, aws_mount_path: string, initOverrides?: RequestInit | runtime.InitOverrideFunction): Promise { + async awsReadAuthRole(role: string, aws_mount_path: string, initOverrides?: RequestInit | runtime.InitOverrideFunction): Promise { const response = await this.awsReadAuthRoleRaw({ role: role, aws_mount_path: aws_mount_path }, initOverrides); return await response.value(); } /** + * Return the configured AWS public certificate. */ - async awsReadCertificateConfigurationRaw(requestParameters: AuthApiAwsReadCertificateConfigurationRequest, initOverrides?: RequestInit | runtime.InitOverrideFunction): Promise> { + async awsReadCertificateConfigurationRaw(requestParameters: AuthApiAwsReadCertificateConfigurationRequest, initOverrides?: RequestInit | runtime.InitOverrideFunction): Promise> { if (requestParameters['cert_name'] == null) { throw new runtime.RequiredError( 'cert_name', @@ -5518,19 +5625,21 @@ export class AuthApi extends runtime.BaseAPI { query: queryParameters, }, initOverrides); - return new runtime.VoidApiResponse(response); + return new runtime.JSONApiResponse(response, (jsonValue) => AwsReadCertificateConfigurationResponseFromJSON(jsonValue)); } /** + * Return the configured AWS public certificate. */ - async awsReadCertificateConfiguration(cert_name: string, aws_mount_path: string, initOverrides?: RequestInit | runtime.InitOverrideFunction): Promise { + async awsReadCertificateConfiguration(cert_name: string, aws_mount_path: string, initOverrides?: RequestInit | runtime.InitOverrideFunction): Promise { const response = await this.awsReadCertificateConfigurationRaw({ cert_name: cert_name, aws_mount_path: aws_mount_path }, initOverrides); return await response.value(); } /** + * Return the configured AWS client credentials. */ - async awsReadClientConfigurationRaw(requestParameters: AuthApiAwsReadClientConfigurationRequest, initOverrides?: RequestInit | runtime.InitOverrideFunction): Promise> { + async awsReadClientConfigurationRaw(requestParameters: AuthApiAwsReadClientConfigurationRequest, initOverrides?: RequestInit | runtime.InitOverrideFunction): Promise> { if (requestParameters['aws_mount_path'] == null) { throw new runtime.RequiredError( 'aws_mount_path', @@ -5550,19 +5659,21 @@ export class AuthApi extends runtime.BaseAPI { query: queryParameters, }, initOverrides); - return new runtime.VoidApiResponse(response); + return new runtime.JSONApiResponse(response, (jsonValue) => AwsReadClientConfigurationResponseFromJSON(jsonValue)); } /** + * Return the configured AWS client credentials. */ - async awsReadClientConfiguration(aws_mount_path: string, initOverrides?: RequestInit | runtime.InitOverrideFunction): Promise { + async awsReadClientConfiguration(aws_mount_path: string, initOverrides?: RequestInit | runtime.InitOverrideFunction): Promise { const response = await this.awsReadClientConfigurationRaw({ aws_mount_path: aws_mount_path }, initOverrides); return await response.value(); } /** + * Return the access-list entry for the given EC2 instance ID. */ - async awsReadIdentityAccessListRaw(requestParameters: AuthApiAwsReadIdentityAccessListRequest, initOverrides?: RequestInit | runtime.InitOverrideFunction): Promise> { + async awsReadIdentityAccessListRaw(requestParameters: AuthApiAwsReadIdentityAccessListRequest, initOverrides?: RequestInit | runtime.InitOverrideFunction): Promise> { if (requestParameters['instance_id'] == null) { throw new runtime.RequiredError( 'instance_id', @@ -5589,19 +5700,21 @@ export class AuthApi extends runtime.BaseAPI { query: queryParameters, }, initOverrides); - return new runtime.VoidApiResponse(response); + return new runtime.JSONApiResponse(response, (jsonValue) => AwsReadIdentityAccessListResponseFromJSON(jsonValue)); } /** + * Return the access-list entry for the given EC2 instance ID. */ - async awsReadIdentityAccessList(instance_id: string, aws_mount_path: string, initOverrides?: RequestInit | runtime.InitOverrideFunction): Promise { + async awsReadIdentityAccessList(instance_id: string, aws_mount_path: string, initOverrides?: RequestInit | runtime.InitOverrideFunction): Promise { const response = await this.awsReadIdentityAccessListRaw({ instance_id: instance_id, aws_mount_path: aws_mount_path }, initOverrides); return await response.value(); } /** + * Return the identity access-list tidy configuration. */ - async awsReadIdentityAccessListTidySettingsRaw(requestParameters: AuthApiAwsReadIdentityAccessListTidySettingsRequest, initOverrides?: RequestInit | runtime.InitOverrideFunction): Promise> { + async awsReadIdentityAccessListTidySettingsRaw(requestParameters: AuthApiAwsReadIdentityAccessListTidySettingsRequest, initOverrides?: RequestInit | runtime.InitOverrideFunction): Promise> { if (requestParameters['aws_mount_path'] == null) { throw new runtime.RequiredError( 'aws_mount_path', @@ -5621,19 +5734,21 @@ export class AuthApi extends runtime.BaseAPI { query: queryParameters, }, initOverrides); - return new runtime.VoidApiResponse(response); + return new runtime.JSONApiResponse(response, (jsonValue) => AwsReadIdentityAccessListTidySettingsResponseFromJSON(jsonValue)); } /** + * Return the identity access-list tidy configuration. */ - async awsReadIdentityAccessListTidySettings(aws_mount_path: string, initOverrides?: RequestInit | runtime.InitOverrideFunction): Promise { + async awsReadIdentityAccessListTidySettings(aws_mount_path: string, initOverrides?: RequestInit | runtime.InitOverrideFunction): Promise { const response = await this.awsReadIdentityAccessListTidySettingsRaw({ aws_mount_path: aws_mount_path }, initOverrides); return await response.value(); } /** + * Return the AWS identity integration configuration. */ - async awsReadIdentityIntegrationConfigurationRaw(requestParameters: AuthApiAwsReadIdentityIntegrationConfigurationRequest, initOverrides?: RequestInit | runtime.InitOverrideFunction): Promise> { + async awsReadIdentityIntegrationConfigurationRaw(requestParameters: AuthApiAwsReadIdentityIntegrationConfigurationRequest, initOverrides?: RequestInit | runtime.InitOverrideFunction): Promise> { if (requestParameters['aws_mount_path'] == null) { throw new runtime.RequiredError( 'aws_mount_path', @@ -5653,19 +5768,21 @@ export class AuthApi extends runtime.BaseAPI { query: queryParameters, }, initOverrides); - return new runtime.VoidApiResponse(response); + return new runtime.JSONApiResponse(response, (jsonValue) => AwsReadIdentityIntegrationConfigurationResponseFromJSON(jsonValue)); } /** + * Return the AWS identity integration configuration. */ - async awsReadIdentityIntegrationConfiguration(aws_mount_path: string, initOverrides?: RequestInit | runtime.InitOverrideFunction): Promise { + async awsReadIdentityIntegrationConfiguration(aws_mount_path: string, initOverrides?: RequestInit | runtime.InitOverrideFunction): Promise { const response = await this.awsReadIdentityIntegrationConfigurationRaw({ aws_mount_path: aws_mount_path }, initOverrides); return await response.value(); } /** + * Return the access-list entry for the given EC2 instance ID. */ - async awsReadIdentityWhitelistRaw(requestParameters: AuthApiAwsReadIdentityWhitelistRequest, initOverrides?: RequestInit | runtime.InitOverrideFunction): Promise> { + async awsReadIdentityWhitelistRaw(requestParameters: AuthApiAwsReadIdentityWhitelistRequest, initOverrides?: RequestInit | runtime.InitOverrideFunction): Promise> { if (requestParameters['instance_id'] == null) { throw new runtime.RequiredError( 'instance_id', @@ -5692,19 +5809,21 @@ export class AuthApi extends runtime.BaseAPI { query: queryParameters, }, initOverrides); - return new runtime.VoidApiResponse(response); + return new runtime.JSONApiResponse(response, (jsonValue) => AwsReadIdentityWhitelistResponseFromJSON(jsonValue)); } /** + * Return the access-list entry for the given EC2 instance ID. */ - async awsReadIdentityWhitelist(instance_id: string, aws_mount_path: string, initOverrides?: RequestInit | runtime.InitOverrideFunction): Promise { + async awsReadIdentityWhitelist(instance_id: string, aws_mount_path: string, initOverrides?: RequestInit | runtime.InitOverrideFunction): Promise { const response = await this.awsReadIdentityWhitelistRaw({ instance_id: instance_id, aws_mount_path: aws_mount_path }, initOverrides); return await response.value(); } /** + * Return the identity access-list tidy configuration. */ - async awsReadIdentityWhitelistTidySettingsRaw(requestParameters: AuthApiAwsReadIdentityWhitelistTidySettingsRequest, initOverrides?: RequestInit | runtime.InitOverrideFunction): Promise> { + async awsReadIdentityWhitelistTidySettingsRaw(requestParameters: AuthApiAwsReadIdentityWhitelistTidySettingsRequest, initOverrides?: RequestInit | runtime.InitOverrideFunction): Promise> { if (requestParameters['aws_mount_path'] == null) { throw new runtime.RequiredError( 'aws_mount_path', @@ -5724,19 +5843,21 @@ export class AuthApi extends runtime.BaseAPI { query: queryParameters, }, initOverrides); - return new runtime.VoidApiResponse(response); + return new runtime.JSONApiResponse(response, (jsonValue) => AwsReadIdentityWhitelistTidySettingsResponseFromJSON(jsonValue)); } /** + * Return the identity access-list tidy configuration. */ - async awsReadIdentityWhitelistTidySettings(aws_mount_path: string, initOverrides?: RequestInit | runtime.InitOverrideFunction): Promise { + async awsReadIdentityWhitelistTidySettings(aws_mount_path: string, initOverrides?: RequestInit | runtime.InitOverrideFunction): Promise { const response = await this.awsReadIdentityWhitelistTidySettingsRaw({ aws_mount_path: aws_mount_path }, initOverrides); return await response.value(); } /** + * Return the deny-list entry for the given role tag. */ - async awsReadRoleTagBlacklistRaw(requestParameters: AuthApiAwsReadRoleTagBlacklistRequest, initOverrides?: RequestInit | runtime.InitOverrideFunction): Promise> { + async awsReadRoleTagBlacklistRaw(requestParameters: AuthApiAwsReadRoleTagBlacklistRequest, initOverrides?: RequestInit | runtime.InitOverrideFunction): Promise> { if (requestParameters['role_tag'] == null) { throw new runtime.RequiredError( 'role_tag', @@ -5763,19 +5884,21 @@ export class AuthApi extends runtime.BaseAPI { query: queryParameters, }, initOverrides); - return new runtime.VoidApiResponse(response); + return new runtime.JSONApiResponse(response, (jsonValue) => AwsReadRoleTagBlacklistResponseFromJSON(jsonValue)); } /** + * Return the deny-list entry for the given role tag. */ - async awsReadRoleTagBlacklist(role_tag: string, aws_mount_path: string, initOverrides?: RequestInit | runtime.InitOverrideFunction): Promise { + async awsReadRoleTagBlacklist(role_tag: string, aws_mount_path: string, initOverrides?: RequestInit | runtime.InitOverrideFunction): Promise { const response = await this.awsReadRoleTagBlacklistRaw({ role_tag: role_tag, aws_mount_path: aws_mount_path }, initOverrides); return await response.value(); } /** + * Return the role-tag deny-list tidy configuration. */ - async awsReadRoleTagBlacklistTidySettingsRaw(requestParameters: AuthApiAwsReadRoleTagBlacklistTidySettingsRequest, initOverrides?: RequestInit | runtime.InitOverrideFunction): Promise> { + async awsReadRoleTagBlacklistTidySettingsRaw(requestParameters: AuthApiAwsReadRoleTagBlacklistTidySettingsRequest, initOverrides?: RequestInit | runtime.InitOverrideFunction): Promise> { if (requestParameters['aws_mount_path'] == null) { throw new runtime.RequiredError( 'aws_mount_path', @@ -5795,19 +5918,21 @@ export class AuthApi extends runtime.BaseAPI { query: queryParameters, }, initOverrides); - return new runtime.VoidApiResponse(response); + return new runtime.JSONApiResponse(response, (jsonValue) => AwsReadRoleTagBlacklistTidySettingsResponseFromJSON(jsonValue)); } /** + * Return the role-tag deny-list tidy configuration. */ - async awsReadRoleTagBlacklistTidySettings(aws_mount_path: string, initOverrides?: RequestInit | runtime.InitOverrideFunction): Promise { + async awsReadRoleTagBlacklistTidySettings(aws_mount_path: string, initOverrides?: RequestInit | runtime.InitOverrideFunction): Promise { const response = await this.awsReadRoleTagBlacklistTidySettingsRaw({ aws_mount_path: aws_mount_path }, initOverrides); return await response.value(); } /** + * Return the deny-list entry for the given role tag. */ - async awsReadRoleTagDenyListRaw(requestParameters: AuthApiAwsReadRoleTagDenyListRequest, initOverrides?: RequestInit | runtime.InitOverrideFunction): Promise> { + async awsReadRoleTagDenyListRaw(requestParameters: AuthApiAwsReadRoleTagDenyListRequest, initOverrides?: RequestInit | runtime.InitOverrideFunction): Promise> { if (requestParameters['role_tag'] == null) { throw new runtime.RequiredError( 'role_tag', @@ -5834,19 +5959,21 @@ export class AuthApi extends runtime.BaseAPI { query: queryParameters, }, initOverrides); - return new runtime.VoidApiResponse(response); + return new runtime.JSONApiResponse(response, (jsonValue) => AwsReadRoleTagDenyListResponseFromJSON(jsonValue)); } /** + * Return the deny-list entry for the given role tag. */ - async awsReadRoleTagDenyList(role_tag: string, aws_mount_path: string, initOverrides?: RequestInit | runtime.InitOverrideFunction): Promise { + async awsReadRoleTagDenyList(role_tag: string, aws_mount_path: string, initOverrides?: RequestInit | runtime.InitOverrideFunction): Promise { const response = await this.awsReadRoleTagDenyListRaw({ role_tag: role_tag, aws_mount_path: aws_mount_path }, initOverrides); return await response.value(); } /** + * Return the role-tag deny-list tidy configuration. */ - async awsReadRoleTagDenyListTidySettingsRaw(requestParameters: AuthApiAwsReadRoleTagDenyListTidySettingsRequest, initOverrides?: RequestInit | runtime.InitOverrideFunction): Promise> { + async awsReadRoleTagDenyListTidySettingsRaw(requestParameters: AuthApiAwsReadRoleTagDenyListTidySettingsRequest, initOverrides?: RequestInit | runtime.InitOverrideFunction): Promise> { if (requestParameters['aws_mount_path'] == null) { throw new runtime.RequiredError( 'aws_mount_path', @@ -5866,19 +5993,21 @@ export class AuthApi extends runtime.BaseAPI { query: queryParameters, }, initOverrides); - return new runtime.VoidApiResponse(response); + return new runtime.JSONApiResponse(response, (jsonValue) => AwsReadRoleTagDenyListTidySettingsResponseFromJSON(jsonValue)); } /** + * Return the role-tag deny-list tidy configuration. */ - async awsReadRoleTagDenyListTidySettings(aws_mount_path: string, initOverrides?: RequestInit | runtime.InitOverrideFunction): Promise { + async awsReadRoleTagDenyListTidySettings(aws_mount_path: string, initOverrides?: RequestInit | runtime.InitOverrideFunction): Promise { const response = await this.awsReadRoleTagDenyListTidySettingsRaw({ aws_mount_path: aws_mount_path }, initOverrides); return await response.value(); } /** + * Return the configured STS role for a given AWS account. */ - async awsReadStsRoleRaw(requestParameters: AuthApiAwsReadStsRoleRequest, initOverrides?: RequestInit | runtime.InitOverrideFunction): Promise> { + async awsReadStsRoleRaw(requestParameters: AuthApiAwsReadStsRoleRequest, initOverrides?: RequestInit | runtime.InitOverrideFunction): Promise> { if (requestParameters['account_id'] == null) { throw new runtime.RequiredError( 'account_id', @@ -5905,19 +6034,21 @@ export class AuthApi extends runtime.BaseAPI { query: queryParameters, }, initOverrides); - return new runtime.VoidApiResponse(response); + return new runtime.JSONApiResponse(response, (jsonValue) => AwsReadStsRoleResponseFromJSON(jsonValue)); } /** + * Return the configured STS role for a given AWS account. */ - async awsReadStsRole(account_id: string, aws_mount_path: string, initOverrides?: RequestInit | runtime.InitOverrideFunction): Promise { + async awsReadStsRole(account_id: string, aws_mount_path: string, initOverrides?: RequestInit | runtime.InitOverrideFunction): Promise { const response = await this.awsReadStsRoleRaw({ account_id: account_id, aws_mount_path: aws_mount_path }, initOverrides); return await response.value(); } /** + * Rotate the AWS credentials used by Vault for this auth mount. */ - async awsRotateRootCredentialsRaw(requestParameters: AuthApiAwsRotateRootCredentialsRequest, initOverrides?: RequestInit | runtime.InitOverrideFunction): Promise> { + async awsRotateRootCredentialsRaw(requestParameters: AuthApiAwsRotateRootCredentialsRequest, initOverrides?: RequestInit | runtime.InitOverrideFunction): Promise> { if (requestParameters['aws_mount_path'] == null) { throw new runtime.RequiredError( 'aws_mount_path', @@ -5937,17 +6068,19 @@ export class AuthApi extends runtime.BaseAPI { query: queryParameters, }, initOverrides); - return new runtime.VoidApiResponse(response); + return new runtime.JSONApiResponse(response, (jsonValue) => AwsRotateRootCredentialsResponseFromJSON(jsonValue)); } /** + * Rotate the AWS credentials used by Vault for this auth mount. */ - async awsRotateRootCredentials(aws_mount_path: string, initOverrides?: RequestInit | runtime.InitOverrideFunction): Promise { + async awsRotateRootCredentials(aws_mount_path: string, initOverrides?: RequestInit | runtime.InitOverrideFunction): Promise { const response = await this.awsRotateRootCredentialsRaw({ aws_mount_path: aws_mount_path }, initOverrides); return await response.value(); } /** + * Tidy expired entries from the identity access list. */ async awsTidyIdentityAccessListRaw(requestParameters: AuthApiAwsTidyIdentityAccessListOperationRequest, initOverrides?: RequestInit | runtime.InitOverrideFunction): Promise> { if (requestParameters['aws_mount_path'] == null) { @@ -5983,6 +6116,7 @@ export class AuthApi extends runtime.BaseAPI { } /** + * Tidy expired entries from the identity access list. */ async awsTidyIdentityAccessList(aws_mount_path: string, AwsTidyIdentityAccessListRequest: AwsTidyIdentityAccessListRequest, initOverrides?: RequestInit | runtime.InitOverrideFunction): Promise { const response = await this.awsTidyIdentityAccessListRaw({ aws_mount_path: aws_mount_path, AwsTidyIdentityAccessListRequest: AwsTidyIdentityAccessListRequest }, initOverrides); @@ -5990,6 +6124,7 @@ export class AuthApi extends runtime.BaseAPI { } /** + * Tidy expired entries from the identity access list. */ async awsTidyIdentityWhitelistRaw(requestParameters: AuthApiAwsTidyIdentityWhitelistOperationRequest, initOverrides?: RequestInit | runtime.InitOverrideFunction): Promise> { if (requestParameters['aws_mount_path'] == null) { @@ -6025,6 +6160,7 @@ export class AuthApi extends runtime.BaseAPI { } /** + * Tidy expired entries from the identity access list. */ async awsTidyIdentityWhitelist(aws_mount_path: string, AwsTidyIdentityWhitelistRequest: AwsTidyIdentityWhitelistRequest, initOverrides?: RequestInit | runtime.InitOverrideFunction): Promise { const response = await this.awsTidyIdentityWhitelistRaw({ aws_mount_path: aws_mount_path, AwsTidyIdentityWhitelistRequest: AwsTidyIdentityWhitelistRequest }, initOverrides); @@ -6032,6 +6168,7 @@ export class AuthApi extends runtime.BaseAPI { } /** + * Tidy expired entries from the role-tag deny list. */ async awsTidyRoleTagBlacklistRaw(requestParameters: AuthApiAwsTidyRoleTagBlacklistOperationRequest, initOverrides?: RequestInit | runtime.InitOverrideFunction): Promise> { if (requestParameters['aws_mount_path'] == null) { @@ -6067,6 +6204,7 @@ export class AuthApi extends runtime.BaseAPI { } /** + * Tidy expired entries from the role-tag deny list. */ async awsTidyRoleTagBlacklist(aws_mount_path: string, AwsTidyRoleTagBlacklistRequest: AwsTidyRoleTagBlacklistRequest, initOverrides?: RequestInit | runtime.InitOverrideFunction): Promise { const response = await this.awsTidyRoleTagBlacklistRaw({ aws_mount_path: aws_mount_path, AwsTidyRoleTagBlacklistRequest: AwsTidyRoleTagBlacklistRequest }, initOverrides); @@ -6074,6 +6212,7 @@ export class AuthApi extends runtime.BaseAPI { } /** + * Tidy expired entries from the role-tag deny list. */ async awsTidyRoleTagDenyListRaw(requestParameters: AuthApiAwsTidyRoleTagDenyListOperationRequest, initOverrides?: RequestInit | runtime.InitOverrideFunction): Promise> { if (requestParameters['aws_mount_path'] == null) { @@ -6109,6 +6248,7 @@ export class AuthApi extends runtime.BaseAPI { } /** + * Tidy expired entries from the role-tag deny list. */ async awsTidyRoleTagDenyList(aws_mount_path: string, AwsTidyRoleTagDenyListRequest: AwsTidyRoleTagDenyListRequest, initOverrides?: RequestInit | runtime.InitOverrideFunction): Promise { const response = await this.awsTidyRoleTagDenyListRaw({ aws_mount_path: aws_mount_path, AwsTidyRoleTagDenyListRequest: AwsTidyRoleTagDenyListRequest }, initOverrides); @@ -6116,6 +6256,7 @@ export class AuthApi extends runtime.BaseAPI { } /** + * Create or update an AWS auth role. */ async awsWriteAuthRoleRaw(requestParameters: AuthApiAwsWriteAuthRoleOperationRequest, initOverrides?: RequestInit | runtime.InitOverrideFunction): Promise> { if (requestParameters['role'] == null) { @@ -6158,6 +6299,7 @@ export class AuthApi extends runtime.BaseAPI { } /** + * Create or update an AWS auth role. */ async awsWriteAuthRole(role: string, aws_mount_path: string, AwsWriteAuthRoleRequest: AwsWriteAuthRoleRequest, initOverrides?: RequestInit | runtime.InitOverrideFunction): Promise { const response = await this.awsWriteAuthRoleRaw({ role: role, aws_mount_path: aws_mount_path, AwsWriteAuthRoleRequest: AwsWriteAuthRoleRequest }, initOverrides); @@ -6165,8 +6307,9 @@ export class AuthApi extends runtime.BaseAPI { } /** + * Generate a role tag for an EC2 instance. */ - async awsWriteRoleTagRaw(requestParameters: AuthApiAwsWriteRoleTagOperationRequest, initOverrides?: RequestInit | runtime.InitOverrideFunction): Promise> { + async awsWriteRoleTagRaw(requestParameters: AuthApiAwsWriteRoleTagOperationRequest, initOverrides?: RequestInit | runtime.InitOverrideFunction): Promise> { if (requestParameters['role'] == null) { throw new runtime.RequiredError( 'role', @@ -6203,17 +6346,19 @@ export class AuthApi extends runtime.BaseAPI { body: AwsWriteRoleTagRequestToJSON(requestParameters['AwsWriteRoleTagRequest']), }, initOverrides); - return new runtime.VoidApiResponse(response); + return new runtime.JSONApiResponse(response, (jsonValue) => AwsWriteRoleTagResponseFromJSON(jsonValue)); } /** + * Generate a role tag for an EC2 instance. */ - async awsWriteRoleTag(role: string, aws_mount_path: string, AwsWriteRoleTagRequest: AwsWriteRoleTagRequest, initOverrides?: RequestInit | runtime.InitOverrideFunction): Promise { + async awsWriteRoleTag(role: string, aws_mount_path: string, AwsWriteRoleTagRequest: AwsWriteRoleTagRequest, initOverrides?: RequestInit | runtime.InitOverrideFunction): Promise { const response = await this.awsWriteRoleTagRaw({ role: role, aws_mount_path: aws_mount_path, AwsWriteRoleTagRequest: AwsWriteRoleTagRequest }, initOverrides); return await response.value(); } /** + * Add a role tag to the deny list. */ async awsWriteRoleTagBlacklistRaw(requestParameters: AuthApiAwsWriteRoleTagBlacklistRequest, initOverrides?: RequestInit | runtime.InitOverrideFunction): Promise> { if (requestParameters['role_tag'] == null) { @@ -6246,6 +6391,7 @@ export class AuthApi extends runtime.BaseAPI { } /** + * Add a role tag to the deny list. */ async awsWriteRoleTagBlacklist(role_tag: string, aws_mount_path: string, initOverrides?: RequestInit | runtime.InitOverrideFunction): Promise { const response = await this.awsWriteRoleTagBlacklistRaw({ role_tag: role_tag, aws_mount_path: aws_mount_path }, initOverrides); @@ -6253,6 +6399,7 @@ export class AuthApi extends runtime.BaseAPI { } /** + * Add a role tag to the deny list. */ async awsWriteRoleTagDenyListRaw(requestParameters: AuthApiAwsWriteRoleTagDenyListRequest, initOverrides?: RequestInit | runtime.InitOverrideFunction): Promise> { if (requestParameters['role_tag'] == null) { @@ -6285,6 +6432,7 @@ export class AuthApi extends runtime.BaseAPI { } /** + * Add a role tag to the deny list. */ async awsWriteRoleTagDenyList(role_tag: string, aws_mount_path: string, initOverrides?: RequestInit | runtime.InitOverrideFunction): Promise { const response = await this.awsWriteRoleTagDenyListRaw({ role_tag: role_tag, aws_mount_path: aws_mount_path }, initOverrides); @@ -6292,6 +6440,7 @@ export class AuthApi extends runtime.BaseAPI { } /** + * Configure an STS role for a given AWS account. */ async awsWriteStsRoleRaw(requestParameters: AuthApiAwsWriteStsRoleOperationRequest, initOverrides?: RequestInit | runtime.InitOverrideFunction): Promise> { if (requestParameters['account_id'] == null) { @@ -6334,6 +6483,7 @@ export class AuthApi extends runtime.BaseAPI { } /** + * Configure an STS role for a given AWS account. */ async awsWriteStsRole(account_id: string, aws_mount_path: string, AwsWriteStsRoleRequest: AwsWriteStsRoleRequest, initOverrides?: RequestInit | runtime.InitOverrideFunction): Promise { const response = await this.awsWriteStsRoleRaw({ account_id: account_id, aws_mount_path: aws_mount_path, AwsWriteStsRoleRequest: AwsWriteStsRoleRequest }, initOverrides); diff --git a/src/models/AwsLoginResponse.ts b/src/models/AwsLoginResponse.ts new file mode 100644 index 0000000..fb117b5 --- /dev/null +++ b/src/models/AwsLoginResponse.ts @@ -0,0 +1,157 @@ +/** + * Copyright IBM Corp. 2025, 2026 + */ + +/* tslint:disable */ +/* eslint-disable */ +/** + * HashiCorp Vault API + * HTTP API that gives you full access to Vault. All API routes are prefixed with `/v1/`. + * + * The version of the OpenAPI document: 2.2.0 + * + * + * NOTE: This class is auto generated by OpenAPI Generator (https://openapi-generator.tech). + * https://openapi-generator.tech + * Do not edit the class manually. + */ + +import { mapValues } from '../runtime'; +/** + * + * @export + * @interface AwsLoginResponse + */ +export interface AwsLoginResponse { + /** + * Accessor for the client token. + * @type {string} + * @memberof AwsLoginResponse + */ + accessor?: string; + /** + * Token issued by Vault for the authenticated client. + * @type {string} + * @memberof AwsLoginResponse + */ + client_token?: string; + /** + * Entity ID associated with the token. + * @type {string} + * @memberof AwsLoginResponse + */ + entity_id?: string; + /** + * Lease duration in seconds. + * @type {number} + * @memberof AwsLoginResponse + */ + lease_duration?: number; + /** + * Metadata associated with the token. + * @type {object} + * @memberof AwsLoginResponse + */ + metadata?: object; + /** + * MFA requirement information. + * @type {object} + * @memberof AwsLoginResponse + */ + mfa_requirement?: object; + /** + * Number of uses remaining for the token. + * @type {number} + * @memberof AwsLoginResponse + */ + num_uses?: number; + /** + * Whether the token is an orphan. + * @type {boolean} + * @memberof AwsLoginResponse + */ + orphan?: boolean; + /** + * List of policies associated with the token. + * @type {Array} + * @memberof AwsLoginResponse + */ + policies?: Array; + /** + * Whether the token is renewable. + * @type {boolean} + * @memberof AwsLoginResponse + */ + renewable?: boolean; + /** + * List of token policies. + * @type {Array} + * @memberof AwsLoginResponse + */ + token_policies?: Array; + /** + * Type of the token. + * @type {string} + * @memberof AwsLoginResponse + */ + token_type?: string; +} + +/** + * Check if a given object implements the AwsLoginResponse interface. + */ +export function instanceOfAwsLoginResponse(value: object): value is AwsLoginResponse { + return true; +} + +export function AwsLoginResponseFromJSON(json: any): AwsLoginResponse { + return AwsLoginResponseFromJSONTyped(json, false); +} + +export function AwsLoginResponseFromJSONTyped(json: any, ignoreDiscriminator: boolean): AwsLoginResponse { + if (json == null) { + return json; + } + return { + + 'accessor': json['accessor'] == null ? undefined : json['accessor'], + 'client_token': json['client_token'] == null ? undefined : json['client_token'], + 'entity_id': json['entity_id'] == null ? undefined : json['entity_id'], + 'lease_duration': json['lease_duration'] == null ? undefined : json['lease_duration'], + 'metadata': json['metadata'] == null ? undefined : json['metadata'], + 'mfa_requirement': json['mfa_requirement'] == null ? undefined : json['mfa_requirement'], + 'num_uses': json['num_uses'] == null ? undefined : json['num_uses'], + 'orphan': json['orphan'] == null ? undefined : json['orphan'], + 'policies': json['policies'] == null ? undefined : json['policies'], + 'renewable': json['renewable'] == null ? undefined : json['renewable'], + 'token_policies': json['token_policies'] == null ? undefined : json['token_policies'], + 'token_type': json['token_type'] == null ? undefined : json['token_type'], + }; +} + +export function AwsLoginResponseToJSON(json: any): AwsLoginResponse { + return AwsLoginResponseToJSONTyped(json, false); +} + +export function AwsLoginResponseToJSONTyped(value?: AwsLoginResponse | null, ignoreDiscriminator: boolean = false): any { + if (value == null) { + return value; + } + + return { + + 'accessor': value['accessor'], + 'client_token': value['client_token'], + 'entity_id': value['entity_id'], + 'lease_duration': value['lease_duration'], + 'metadata': value['metadata'], + 'mfa_requirement': value['mfa_requirement'], + 'num_uses': value['num_uses'], + 'orphan': value['orphan'], + 'policies': value['policies'], + 'renewable': value['renewable'], + 'token_policies': value['token_policies'], + 'token_type': value['token_type'], + }; +} + diff --git a/src/models/AwsReadAuthRoleResponse.ts b/src/models/AwsReadAuthRoleResponse.ts new file mode 100644 index 0000000..8040020 --- /dev/null +++ b/src/models/AwsReadAuthRoleResponse.ts @@ -0,0 +1,277 @@ +/** + * Copyright IBM Corp. 2025, 2026 + */ + +/* tslint:disable */ +/* eslint-disable */ +/** + * HashiCorp Vault API + * HTTP API that gives you full access to Vault. All API routes are prefixed with `/v1/`. + * + * The version of the OpenAPI document: 2.2.0 + * + * + * NOTE: This class is auto generated by OpenAPI Generator (https://openapi-generator.tech). + * https://openapi-generator.tech + * Do not edit the class manually. + */ + +import { mapValues } from '../runtime'; +/** + * + * @export + * @interface AwsReadAuthRoleResponse + */ +export interface AwsReadAuthRoleResponse { + /** + * Whether instance migration is allowed. + * @type {boolean} + * @memberof AwsReadAuthRoleResponse + */ + allow_instance_migration?: boolean; + /** + * Auth type permitted to authenticate to this role. + * @type {string} + * @memberof AwsReadAuthRoleResponse + */ + auth_type?: string; + /** + * AWS account IDs that instances must belong to. + * @type {Array} + * @memberof AwsReadAuthRoleResponse + */ + bound_account_id?: Array; + /** + * AMI IDs that instances must use to authenticate. + * @type {Array} + * @memberof AwsReadAuthRoleResponse + */ + bound_ami_id?: Array; + /** + * EC2 instance IDs that are allowed to authenticate. + * @type {Array} + * @memberof AwsReadAuthRoleResponse + */ + bound_ec2_instance_id?: Array; + /** + * IAM instance profile ARN prefixes that instances must match. + * @type {Array} + * @memberof AwsReadAuthRoleResponse + */ + bound_iam_instance_profile_arn?: Array; + /** + * IAM principal ARNs bound to this role. + * @type {Array} + * @memberof AwsReadAuthRoleResponse + */ + bound_iam_principal_arn?: Array; + /** + * Resolved unique IDs for IAM principal ARNs. + * @type {Array} + * @memberof AwsReadAuthRoleResponse + */ + bound_iam_principal_id?: Array; + /** + * IAM role ARNs that instances must match. + * @type {Array} + * @memberof AwsReadAuthRoleResponse + */ + bound_iam_role_arn?: Array; + /** + * AWS regions that instances must be in. + * @type {Array} + * @memberof AwsReadAuthRoleResponse + */ + bound_region?: Array; + /** + * VPC subnet IDs that instances must be in. + * @type {Array} + * @memberof AwsReadAuthRoleResponse + */ + bound_subnet_id?: Array; + /** + * VPC IDs that instances must be in. + * @type {Array} + * @memberof AwsReadAuthRoleResponse + */ + bound_vpc_id?: Array; + /** + * Whether reauthentication is disallowed. + * @type {boolean} + * @memberof AwsReadAuthRoleResponse + */ + disallow_reauthentication?: boolean; + /** + * AWS region used when inferring the entity type. + * @type {string} + * @memberof AwsReadAuthRoleResponse + */ + inferred_aws_region?: string; + /** + * Entity type inferred from the authenticated principal. + * @type {string} + * @memberof AwsReadAuthRoleResponse + */ + inferred_entity_type?: string; + /** + * Whether IAM ARNs are resolved to unique IDs. + * @type {boolean} + * @memberof AwsReadAuthRoleResponse + */ + resolve_aws_unique_ids?: boolean; + /** + * Unique ID of the role. + * @type {string} + * @memberof AwsReadAuthRoleResponse + */ + role_id?: string; + /** + * EC2 instance tag key for role tags. + * @type {string} + * @memberof AwsReadAuthRoleResponse + */ + role_tag?: string; + /** + * CIDR blocks that tokens are restricted to. + * @type {Array} + * @memberof AwsReadAuthRoleResponse + */ + token_bound_cidrs?: Array; + /** + * Explicit maximum TTL for tokens. + * @type {number} + * @memberof AwsReadAuthRoleResponse + */ + token_explicit_max_ttl?: number; + /** + * Maximum TTL for tokens. + * @type {number} + * @memberof AwsReadAuthRoleResponse + */ + token_max_ttl?: number; + /** + * Whether the default policy is not added to tokens. + * @type {boolean} + * @memberof AwsReadAuthRoleResponse + */ + token_no_default_policy?: boolean; + /** + * Maximum number of token uses. + * @type {number} + * @memberof AwsReadAuthRoleResponse + */ + token_num_uses?: number; + /** + * Renewal period for tokens. + * @type {number} + * @memberof AwsReadAuthRoleResponse + */ + token_period?: number; + /** + * Policies applied to tokens. + * @type {Array} + * @memberof AwsReadAuthRoleResponse + */ + token_policies?: Array; + /** + * TTL for tokens. + * @type {number} + * @memberof AwsReadAuthRoleResponse + */ + token_ttl?: number; + /** + * Type of tokens generated. + * @type {string} + * @memberof AwsReadAuthRoleResponse + */ + token_type?: string; +} + +/** + * Check if a given object implements the AwsReadAuthRoleResponse interface. + */ +export function instanceOfAwsReadAuthRoleResponse(value: object): value is AwsReadAuthRoleResponse { + return true; +} + +export function AwsReadAuthRoleResponseFromJSON(json: any): AwsReadAuthRoleResponse { + return AwsReadAuthRoleResponseFromJSONTyped(json, false); +} + +export function AwsReadAuthRoleResponseFromJSONTyped(json: any, ignoreDiscriminator: boolean): AwsReadAuthRoleResponse { + if (json == null) { + return json; + } + return { + + 'allow_instance_migration': json['allow_instance_migration'] == null ? undefined : json['allow_instance_migration'], + 'auth_type': json['auth_type'] == null ? undefined : json['auth_type'], + 'bound_account_id': json['bound_account_id'] == null ? undefined : json['bound_account_id'], + 'bound_ami_id': json['bound_ami_id'] == null ? undefined : json['bound_ami_id'], + 'bound_ec2_instance_id': json['bound_ec2_instance_id'] == null ? undefined : json['bound_ec2_instance_id'], + 'bound_iam_instance_profile_arn': json['bound_iam_instance_profile_arn'] == null ? undefined : json['bound_iam_instance_profile_arn'], + 'bound_iam_principal_arn': json['bound_iam_principal_arn'] == null ? undefined : json['bound_iam_principal_arn'], + 'bound_iam_principal_id': json['bound_iam_principal_id'] == null ? undefined : json['bound_iam_principal_id'], + 'bound_iam_role_arn': json['bound_iam_role_arn'] == null ? undefined : json['bound_iam_role_arn'], + 'bound_region': json['bound_region'] == null ? undefined : json['bound_region'], + 'bound_subnet_id': json['bound_subnet_id'] == null ? undefined : json['bound_subnet_id'], + 'bound_vpc_id': json['bound_vpc_id'] == null ? undefined : json['bound_vpc_id'], + 'disallow_reauthentication': json['disallow_reauthentication'] == null ? undefined : json['disallow_reauthentication'], + 'inferred_aws_region': json['inferred_aws_region'] == null ? undefined : json['inferred_aws_region'], + 'inferred_entity_type': json['inferred_entity_type'] == null ? undefined : json['inferred_entity_type'], + 'resolve_aws_unique_ids': json['resolve_aws_unique_ids'] == null ? undefined : json['resolve_aws_unique_ids'], + 'role_id': json['role_id'] == null ? undefined : json['role_id'], + 'role_tag': json['role_tag'] == null ? undefined : json['role_tag'], + 'token_bound_cidrs': json['token_bound_cidrs'] == null ? undefined : json['token_bound_cidrs'], + 'token_explicit_max_ttl': json['token_explicit_max_ttl'] == null ? undefined : json['token_explicit_max_ttl'], + 'token_max_ttl': json['token_max_ttl'] == null ? undefined : json['token_max_ttl'], + 'token_no_default_policy': json['token_no_default_policy'] == null ? undefined : json['token_no_default_policy'], + 'token_num_uses': json['token_num_uses'] == null ? undefined : json['token_num_uses'], + 'token_period': json['token_period'] == null ? undefined : json['token_period'], + 'token_policies': json['token_policies'] == null ? undefined : json['token_policies'], + 'token_ttl': json['token_ttl'] == null ? undefined : json['token_ttl'], + 'token_type': json['token_type'] == null ? undefined : json['token_type'], + }; +} + +export function AwsReadAuthRoleResponseToJSON(json: any): AwsReadAuthRoleResponse { + return AwsReadAuthRoleResponseToJSONTyped(json, false); +} + +export function AwsReadAuthRoleResponseToJSONTyped(value?: AwsReadAuthRoleResponse | null, ignoreDiscriminator: boolean = false): any { + if (value == null) { + return value; + } + + return { + + 'allow_instance_migration': value['allow_instance_migration'], + 'auth_type': value['auth_type'], + 'bound_account_id': value['bound_account_id'], + 'bound_ami_id': value['bound_ami_id'], + 'bound_ec2_instance_id': value['bound_ec2_instance_id'], + 'bound_iam_instance_profile_arn': value['bound_iam_instance_profile_arn'], + 'bound_iam_principal_arn': value['bound_iam_principal_arn'], + 'bound_iam_principal_id': value['bound_iam_principal_id'], + 'bound_iam_role_arn': value['bound_iam_role_arn'], + 'bound_region': value['bound_region'], + 'bound_subnet_id': value['bound_subnet_id'], + 'bound_vpc_id': value['bound_vpc_id'], + 'disallow_reauthentication': value['disallow_reauthentication'], + 'inferred_aws_region': value['inferred_aws_region'], + 'inferred_entity_type': value['inferred_entity_type'], + 'resolve_aws_unique_ids': value['resolve_aws_unique_ids'], + 'role_id': value['role_id'], + 'role_tag': value['role_tag'], + 'token_bound_cidrs': value['token_bound_cidrs'], + 'token_explicit_max_ttl': value['token_explicit_max_ttl'], + 'token_max_ttl': value['token_max_ttl'], + 'token_no_default_policy': value['token_no_default_policy'], + 'token_num_uses': value['token_num_uses'], + 'token_period': value['token_period'], + 'token_policies': value['token_policies'], + 'token_ttl': value['token_ttl'], + 'token_type': value['token_type'], + }; +} + diff --git a/src/models/AwsReadCertificateConfigurationResponse.ts b/src/models/AwsReadCertificateConfigurationResponse.ts new file mode 100644 index 0000000..89e1a67 --- /dev/null +++ b/src/models/AwsReadCertificateConfigurationResponse.ts @@ -0,0 +1,77 @@ +/** + * Copyright IBM Corp. 2025, 2026 + */ + +/* tslint:disable */ +/* eslint-disable */ +/** + * HashiCorp Vault API + * HTTP API that gives you full access to Vault. All API routes are prefixed with `/v1/`. + * + * The version of the OpenAPI document: 2.2.0 + * + * + * NOTE: This class is auto generated by OpenAPI Generator (https://openapi-generator.tech). + * https://openapi-generator.tech + * Do not edit the class manually. + */ + +import { mapValues } from '../runtime'; +/** + * + * @export + * @interface AwsReadCertificateConfigurationResponse + */ +export interface AwsReadCertificateConfigurationResponse { + /** + * Base64-encoded AWS public certificate used to verify PKCS7 signatures. + * @type {string} + * @memberof AwsReadCertificateConfigurationResponse + */ + aws_public_cert?: string; + /** + * Type of document the certificate verifies, either pkcs7 or identity. + * @type {string} + * @memberof AwsReadCertificateConfigurationResponse + */ + type?: string; +} + +/** + * Check if a given object implements the AwsReadCertificateConfigurationResponse interface. + */ +export function instanceOfAwsReadCertificateConfigurationResponse(value: object): value is AwsReadCertificateConfigurationResponse { + return true; +} + +export function AwsReadCertificateConfigurationResponseFromJSON(json: any): AwsReadCertificateConfigurationResponse { + return AwsReadCertificateConfigurationResponseFromJSONTyped(json, false); +} + +export function AwsReadCertificateConfigurationResponseFromJSONTyped(json: any, ignoreDiscriminator: boolean): AwsReadCertificateConfigurationResponse { + if (json == null) { + return json; + } + return { + + 'aws_public_cert': json['aws_public_cert'] == null ? undefined : json['aws_public_cert'], + 'type': json['type'] == null ? undefined : json['type'], + }; +} + +export function AwsReadCertificateConfigurationResponseToJSON(json: any): AwsReadCertificateConfigurationResponse { + return AwsReadCertificateConfigurationResponseToJSONTyped(json, false); +} + +export function AwsReadCertificateConfigurationResponseToJSONTyped(value?: AwsReadCertificateConfigurationResponse | null, ignoreDiscriminator: boolean = false): any { + if (value == null) { + return value; + } + + return { + + 'aws_public_cert': value['aws_public_cert'], + 'type': value['type'], + }; +} + diff --git a/src/models/AwsReadClientConfigurationResponse.ts b/src/models/AwsReadClientConfigurationResponse.ts new file mode 100644 index 0000000..72634a8 --- /dev/null +++ b/src/models/AwsReadClientConfigurationResponse.ts @@ -0,0 +1,197 @@ +/** + * Copyright IBM Corp. 2025, 2026 + */ + +/* tslint:disable */ +/* eslint-disable */ +/** + * HashiCorp Vault API + * HTTP API that gives you full access to Vault. All API routes are prefixed with `/v1/`. + * + * The version of the OpenAPI document: 2.2.0 + * + * + * NOTE: This class is auto generated by OpenAPI Generator (https://openapi-generator.tech). + * https://openapi-generator.tech + * Do not edit the class manually. + */ + +import { mapValues } from '../runtime'; +/** + * + * @export + * @interface AwsReadClientConfigurationResponse + */ +export interface AwsReadClientConfigurationResponse { + /** + * AWS access key ID. + * @type {string} + * @memberof AwsReadClientConfigurationResponse + */ + access_key?: string; + /** + * Allowed additional headers in AWS STS request headers. + * @type {Array} + * @memberof AwsReadClientConfigurationResponse + */ + allowed_sts_header_values?: Array; + /** + * Whether automated rotation is disabled. + * @type {boolean} + * @memberof AwsReadClientConfigurationResponse + */ + disable_automated_rotation?: boolean; + /** + * Custom endpoint URL for AWS EC2 API calls. + * @type {string} + * @memberof AwsReadClientConfigurationResponse + */ + endpoint?: string; + /** + * Custom endpoint URL for AWS IAM API calls. + * @type {string} + * @memberof AwsReadClientConfigurationResponse + */ + iam_endpoint?: string; + /** + * Required value for the X-Vault-AWS-IAM-Server-ID request header. + * @type {string} + * @memberof AwsReadClientConfigurationResponse + */ + iam_server_id_header_value?: string; + /** + * Audience for plugin identity tokens. + * @type {string} + * @memberof AwsReadClientConfigurationResponse + */ + identity_token_audience?: string; + /** + * Time-to-live for plugin identity tokens in seconds. + * @type {string} + * @memberof AwsReadClientConfigurationResponse + */ + identity_token_ttl?: string; + /** + * Maximum number of retries for AWS API calls. + * @type {number} + * @memberof AwsReadClientConfigurationResponse + */ + max_retries?: number; + /** + * Role ARN for plugin identity token federation. + * @type {string} + * @memberof AwsReadClientConfigurationResponse + */ + role_arn?: string; + /** + * Period in seconds between automated credential rotations. + * @type {string} + * @memberof AwsReadClientConfigurationResponse + */ + rotation_period?: string; + /** + * Name of the rotation policy to use. + * @type {string} + * @memberof AwsReadClientConfigurationResponse + */ + rotation_policy?: string; + /** + * Automated rotation schedule in cron format. + * @type {string} + * @memberof AwsReadClientConfigurationResponse + */ + rotation_schedule?: string; + /** + * Window in seconds during which automated rotation may occur. + * @type {string} + * @memberof AwsReadClientConfigurationResponse + */ + rotation_window?: string; + /** + * Custom endpoint URL for AWS STS API calls. + * @type {string} + * @memberof AwsReadClientConfigurationResponse + */ + sts_endpoint?: string; + /** + * Region for the STS endpoint. + * @type {string} + * @memberof AwsReadClientConfigurationResponse + */ + sts_region?: string; + /** + * Whether to use the STS region from client requests. + * @type {boolean} + * @memberof AwsReadClientConfigurationResponse + */ + use_sts_region_from_client?: boolean; +} + +/** + * Check if a given object implements the AwsReadClientConfigurationResponse interface. + */ +export function instanceOfAwsReadClientConfigurationResponse(value: object): value is AwsReadClientConfigurationResponse { + return true; +} + +export function AwsReadClientConfigurationResponseFromJSON(json: any): AwsReadClientConfigurationResponse { + return AwsReadClientConfigurationResponseFromJSONTyped(json, false); +} + +export function AwsReadClientConfigurationResponseFromJSONTyped(json: any, ignoreDiscriminator: boolean): AwsReadClientConfigurationResponse { + if (json == null) { + return json; + } + return { + + 'access_key': json['access_key'] == null ? undefined : json['access_key'], + 'allowed_sts_header_values': json['allowed_sts_header_values'] == null ? undefined : json['allowed_sts_header_values'], + 'disable_automated_rotation': json['disable_automated_rotation'] == null ? undefined : json['disable_automated_rotation'], + 'endpoint': json['endpoint'] == null ? undefined : json['endpoint'], + 'iam_endpoint': json['iam_endpoint'] == null ? undefined : json['iam_endpoint'], + 'iam_server_id_header_value': json['iam_server_id_header_value'] == null ? undefined : json['iam_server_id_header_value'], + 'identity_token_audience': json['identity_token_audience'] == null ? undefined : json['identity_token_audience'], + 'identity_token_ttl': json['identity_token_ttl'] == null ? undefined : json['identity_token_ttl'], + 'max_retries': json['max_retries'] == null ? undefined : json['max_retries'], + 'role_arn': json['role_arn'] == null ? undefined : json['role_arn'], + 'rotation_period': json['rotation_period'] == null ? undefined : json['rotation_period'], + 'rotation_policy': json['rotation_policy'] == null ? undefined : json['rotation_policy'], + 'rotation_schedule': json['rotation_schedule'] == null ? undefined : json['rotation_schedule'], + 'rotation_window': json['rotation_window'] == null ? undefined : json['rotation_window'], + 'sts_endpoint': json['sts_endpoint'] == null ? undefined : json['sts_endpoint'], + 'sts_region': json['sts_region'] == null ? undefined : json['sts_region'], + 'use_sts_region_from_client': json['use_sts_region_from_client'] == null ? undefined : json['use_sts_region_from_client'], + }; +} + +export function AwsReadClientConfigurationResponseToJSON(json: any): AwsReadClientConfigurationResponse { + return AwsReadClientConfigurationResponseToJSONTyped(json, false); +} + +export function AwsReadClientConfigurationResponseToJSONTyped(value?: AwsReadClientConfigurationResponse | null, ignoreDiscriminator: boolean = false): any { + if (value == null) { + return value; + } + + return { + + 'access_key': value['access_key'], + 'allowed_sts_header_values': value['allowed_sts_header_values'], + 'disable_automated_rotation': value['disable_automated_rotation'], + 'endpoint': value['endpoint'], + 'iam_endpoint': value['iam_endpoint'], + 'iam_server_id_header_value': value['iam_server_id_header_value'], + 'identity_token_audience': value['identity_token_audience'], + 'identity_token_ttl': value['identity_token_ttl'], + 'max_retries': value['max_retries'], + 'role_arn': value['role_arn'], + 'rotation_period': value['rotation_period'], + 'rotation_policy': value['rotation_policy'], + 'rotation_schedule': value['rotation_schedule'], + 'rotation_window': value['rotation_window'], + 'sts_endpoint': value['sts_endpoint'], + 'sts_region': value['sts_region'], + 'use_sts_region_from_client': value['use_sts_region_from_client'], + }; +} + diff --git a/src/models/AwsReadIdentityAccessListResponse.ts b/src/models/AwsReadIdentityAccessListResponse.ts new file mode 100644 index 0000000..2baad6d --- /dev/null +++ b/src/models/AwsReadIdentityAccessListResponse.ts @@ -0,0 +1,117 @@ +/** + * Copyright IBM Corp. 2025, 2026 + */ + +/* tslint:disable */ +/* eslint-disable */ +/** + * HashiCorp Vault API + * HTTP API that gives you full access to Vault. All API routes are prefixed with `/v1/`. + * + * The version of the OpenAPI document: 2.2.0 + * + * + * NOTE: This class is auto generated by OpenAPI Generator (https://openapi-generator.tech). + * https://openapi-generator.tech + * Do not edit the class manually. + */ + +import { mapValues } from '../runtime'; +/** + * + * @export + * @interface AwsReadIdentityAccessListResponse + */ +export interface AwsReadIdentityAccessListResponse { + /** + * Client nonce used during the login. + * @type {string} + * @memberof AwsReadIdentityAccessListResponse + */ + client_nonce?: string; + /** + * Time the access-list entry was created, in RFC3339 format. + * @type {string} + * @memberof AwsReadIdentityAccessListResponse + */ + creation_time?: string; + /** + * Whether reauthentication is disallowed for this instance. + * @type {boolean} + * @memberof AwsReadIdentityAccessListResponse + */ + disallow_reauthentication?: boolean; + /** + * Time the access-list entry expires, in RFC3339 format. + * @type {string} + * @memberof AwsReadIdentityAccessListResponse + */ + expiration_time?: string; + /** + * Time the access-list entry was last updated, in RFC3339 format. + * @type {string} + * @memberof AwsReadIdentityAccessListResponse + */ + last_updated_time?: string; + /** + * The pendingTime field from the instance identity document. + * @type {string} + * @memberof AwsReadIdentityAccessListResponse + */ + pending_time?: string; + /** + * Name of the role used during the last successful login. + * @type {string} + * @memberof AwsReadIdentityAccessListResponse + */ + role?: string; +} + +/** + * Check if a given object implements the AwsReadIdentityAccessListResponse interface. + */ +export function instanceOfAwsReadIdentityAccessListResponse(value: object): value is AwsReadIdentityAccessListResponse { + return true; +} + +export function AwsReadIdentityAccessListResponseFromJSON(json: any): AwsReadIdentityAccessListResponse { + return AwsReadIdentityAccessListResponseFromJSONTyped(json, false); +} + +export function AwsReadIdentityAccessListResponseFromJSONTyped(json: any, ignoreDiscriminator: boolean): AwsReadIdentityAccessListResponse { + if (json == null) { + return json; + } + return { + + 'client_nonce': json['client_nonce'] == null ? undefined : json['client_nonce'], + 'creation_time': json['creation_time'] == null ? undefined : json['creation_time'], + 'disallow_reauthentication': json['disallow_reauthentication'] == null ? undefined : json['disallow_reauthentication'], + 'expiration_time': json['expiration_time'] == null ? undefined : json['expiration_time'], + 'last_updated_time': json['last_updated_time'] == null ? undefined : json['last_updated_time'], + 'pending_time': json['pending_time'] == null ? undefined : json['pending_time'], + 'role': json['role'] == null ? undefined : json['role'], + }; +} + +export function AwsReadIdentityAccessListResponseToJSON(json: any): AwsReadIdentityAccessListResponse { + return AwsReadIdentityAccessListResponseToJSONTyped(json, false); +} + +export function AwsReadIdentityAccessListResponseToJSONTyped(value?: AwsReadIdentityAccessListResponse | null, ignoreDiscriminator: boolean = false): any { + if (value == null) { + return value; + } + + return { + + 'client_nonce': value['client_nonce'], + 'creation_time': value['creation_time'], + 'disallow_reauthentication': value['disallow_reauthentication'], + 'expiration_time': value['expiration_time'], + 'last_updated_time': value['last_updated_time'], + 'pending_time': value['pending_time'], + 'role': value['role'], + }; +} + diff --git a/src/models/AwsReadIdentityAccessListTidySettingsResponse.ts b/src/models/AwsReadIdentityAccessListTidySettingsResponse.ts new file mode 100644 index 0000000..260d64b --- /dev/null +++ b/src/models/AwsReadIdentityAccessListTidySettingsResponse.ts @@ -0,0 +1,77 @@ +/** + * Copyright IBM Corp. 2025, 2026 + */ + +/* tslint:disable */ +/* eslint-disable */ +/** + * HashiCorp Vault API + * HTTP API that gives you full access to Vault. All API routes are prefixed with `/v1/`. + * + * The version of the OpenAPI document: 2.2.0 + * + * + * NOTE: This class is auto generated by OpenAPI Generator (https://openapi-generator.tech). + * https://openapi-generator.tech + * Do not edit the class manually. + */ + +import { mapValues } from '../runtime'; +/** + * + * @export + * @interface AwsReadIdentityAccessListTidySettingsResponse + */ +export interface AwsReadIdentityAccessListTidySettingsResponse { + /** + * Whether periodic tidying of identity access-list entries is disabled. + * @type {boolean} + * @memberof AwsReadIdentityAccessListTidySettingsResponse + */ + disable_periodic_tidy?: boolean; + /** + * Duration past expiration before identities are removed from storage. + * @type {string} + * @memberof AwsReadIdentityAccessListTidySettingsResponse + */ + safety_buffer?: string; +} + +/** + * Check if a given object implements the AwsReadIdentityAccessListTidySettingsResponse interface. + */ +export function instanceOfAwsReadIdentityAccessListTidySettingsResponse(value: object): value is AwsReadIdentityAccessListTidySettingsResponse { + return true; +} + +export function AwsReadIdentityAccessListTidySettingsResponseFromJSON(json: any): AwsReadIdentityAccessListTidySettingsResponse { + return AwsReadIdentityAccessListTidySettingsResponseFromJSONTyped(json, false); +} + +export function AwsReadIdentityAccessListTidySettingsResponseFromJSONTyped(json: any, ignoreDiscriminator: boolean): AwsReadIdentityAccessListTidySettingsResponse { + if (json == null) { + return json; + } + return { + + 'disable_periodic_tidy': json['disable_periodic_tidy'] == null ? undefined : json['disable_periodic_tidy'], + 'safety_buffer': json['safety_buffer'] == null ? undefined : json['safety_buffer'], + }; +} + +export function AwsReadIdentityAccessListTidySettingsResponseToJSON(json: any): AwsReadIdentityAccessListTidySettingsResponse { + return AwsReadIdentityAccessListTidySettingsResponseToJSONTyped(json, false); +} + +export function AwsReadIdentityAccessListTidySettingsResponseToJSONTyped(value?: AwsReadIdentityAccessListTidySettingsResponse | null, ignoreDiscriminator: boolean = false): any { + if (value == null) { + return value; + } + + return { + + 'disable_periodic_tidy': value['disable_periodic_tidy'], + 'safety_buffer': value['safety_buffer'], + }; +} + diff --git a/src/models/AwsReadIdentityIntegrationConfigurationResponse.ts b/src/models/AwsReadIdentityIntegrationConfigurationResponse.ts new file mode 100644 index 0000000..dbf3f11 --- /dev/null +++ b/src/models/AwsReadIdentityIntegrationConfigurationResponse.ts @@ -0,0 +1,93 @@ +/** + * Copyright IBM Corp. 2025, 2026 + */ + +/* tslint:disable */ +/* eslint-disable */ +/** + * HashiCorp Vault API + * HTTP API that gives you full access to Vault. All API routes are prefixed with `/v1/`. + * + * The version of the OpenAPI document: 2.2.0 + * + * + * NOTE: This class is auto generated by OpenAPI Generator (https://openapi-generator.tech). + * https://openapi-generator.tech + * Do not edit the class manually. + */ + +import { mapValues } from '../runtime'; +/** + * + * @export + * @interface AwsReadIdentityIntegrationConfigurationResponse + */ +export interface AwsReadIdentityIntegrationConfigurationResponse { + /** + * How EC2 instances are mapped to identity aliases. + * @type {string} + * @memberof AwsReadIdentityIntegrationConfigurationResponse + */ + ec2_alias?: string; + /** + * Metadata fields to include on EC2 auth tokens. + * @type {Array} + * @memberof AwsReadIdentityIntegrationConfigurationResponse + */ + ec2_metadata?: Array; + /** + * How IAM principals are mapped to identity aliases. + * @type {string} + * @memberof AwsReadIdentityIntegrationConfigurationResponse + */ + iam_alias?: string; + /** + * Metadata fields to include on IAM auth tokens. + * @type {Array} + * @memberof AwsReadIdentityIntegrationConfigurationResponse + */ + iam_metadata?: Array; +} + +/** + * Check if a given object implements the AwsReadIdentityIntegrationConfigurationResponse interface. + */ +export function instanceOfAwsReadIdentityIntegrationConfigurationResponse(value: object): value is AwsReadIdentityIntegrationConfigurationResponse { + return true; +} + +export function AwsReadIdentityIntegrationConfigurationResponseFromJSON(json: any): AwsReadIdentityIntegrationConfigurationResponse { + return AwsReadIdentityIntegrationConfigurationResponseFromJSONTyped(json, false); +} + +export function AwsReadIdentityIntegrationConfigurationResponseFromJSONTyped(json: any, ignoreDiscriminator: boolean): AwsReadIdentityIntegrationConfigurationResponse { + if (json == null) { + return json; + } + return { + + 'ec2_alias': json['ec2_alias'] == null ? undefined : json['ec2_alias'], + 'ec2_metadata': json['ec2_metadata'] == null ? undefined : json['ec2_metadata'], + 'iam_alias': json['iam_alias'] == null ? undefined : json['iam_alias'], + 'iam_metadata': json['iam_metadata'] == null ? undefined : json['iam_metadata'], + }; +} + +export function AwsReadIdentityIntegrationConfigurationResponseToJSON(json: any): AwsReadIdentityIntegrationConfigurationResponse { + return AwsReadIdentityIntegrationConfigurationResponseToJSONTyped(json, false); +} + +export function AwsReadIdentityIntegrationConfigurationResponseToJSONTyped(value?: AwsReadIdentityIntegrationConfigurationResponse | null, ignoreDiscriminator: boolean = false): any { + if (value == null) { + return value; + } + + return { + + 'ec2_alias': value['ec2_alias'], + 'ec2_metadata': value['ec2_metadata'], + 'iam_alias': value['iam_alias'], + 'iam_metadata': value['iam_metadata'], + }; +} + diff --git a/src/models/AwsReadIdentityWhitelistResponse.ts b/src/models/AwsReadIdentityWhitelistResponse.ts new file mode 100644 index 0000000..62f2d93 --- /dev/null +++ b/src/models/AwsReadIdentityWhitelistResponse.ts @@ -0,0 +1,117 @@ +/** + * Copyright IBM Corp. 2025, 2026 + */ + +/* tslint:disable */ +/* eslint-disable */ +/** + * HashiCorp Vault API + * HTTP API that gives you full access to Vault. All API routes are prefixed with `/v1/`. + * + * The version of the OpenAPI document: 2.2.0 + * + * + * NOTE: This class is auto generated by OpenAPI Generator (https://openapi-generator.tech). + * https://openapi-generator.tech + * Do not edit the class manually. + */ + +import { mapValues } from '../runtime'; +/** + * + * @export + * @interface AwsReadIdentityWhitelistResponse + */ +export interface AwsReadIdentityWhitelistResponse { + /** + * Client nonce used during the login. + * @type {string} + * @memberof AwsReadIdentityWhitelistResponse + */ + client_nonce?: string; + /** + * Time the access-list entry was created, in RFC3339 format. + * @type {string} + * @memberof AwsReadIdentityWhitelistResponse + */ + creation_time?: string; + /** + * Whether reauthentication is disallowed for this instance. + * @type {boolean} + * @memberof AwsReadIdentityWhitelistResponse + */ + disallow_reauthentication?: boolean; + /** + * Time the access-list entry expires, in RFC3339 format. + * @type {string} + * @memberof AwsReadIdentityWhitelistResponse + */ + expiration_time?: string; + /** + * Time the access-list entry was last updated, in RFC3339 format. + * @type {string} + * @memberof AwsReadIdentityWhitelistResponse + */ + last_updated_time?: string; + /** + * The pendingTime field from the instance identity document. + * @type {string} + * @memberof AwsReadIdentityWhitelistResponse + */ + pending_time?: string; + /** + * Name of the role used during the last successful login. + * @type {string} + * @memberof AwsReadIdentityWhitelistResponse + */ + role?: string; +} + +/** + * Check if a given object implements the AwsReadIdentityWhitelistResponse interface. + */ +export function instanceOfAwsReadIdentityWhitelistResponse(value: object): value is AwsReadIdentityWhitelistResponse { + return true; +} + +export function AwsReadIdentityWhitelistResponseFromJSON(json: any): AwsReadIdentityWhitelistResponse { + return AwsReadIdentityWhitelistResponseFromJSONTyped(json, false); +} + +export function AwsReadIdentityWhitelistResponseFromJSONTyped(json: any, ignoreDiscriminator: boolean): AwsReadIdentityWhitelistResponse { + if (json == null) { + return json; + } + return { + + 'client_nonce': json['client_nonce'] == null ? undefined : json['client_nonce'], + 'creation_time': json['creation_time'] == null ? undefined : json['creation_time'], + 'disallow_reauthentication': json['disallow_reauthentication'] == null ? undefined : json['disallow_reauthentication'], + 'expiration_time': json['expiration_time'] == null ? undefined : json['expiration_time'], + 'last_updated_time': json['last_updated_time'] == null ? undefined : json['last_updated_time'], + 'pending_time': json['pending_time'] == null ? undefined : json['pending_time'], + 'role': json['role'] == null ? undefined : json['role'], + }; +} + +export function AwsReadIdentityWhitelistResponseToJSON(json: any): AwsReadIdentityWhitelistResponse { + return AwsReadIdentityWhitelistResponseToJSONTyped(json, false); +} + +export function AwsReadIdentityWhitelistResponseToJSONTyped(value?: AwsReadIdentityWhitelistResponse | null, ignoreDiscriminator: boolean = false): any { + if (value == null) { + return value; + } + + return { + + 'client_nonce': value['client_nonce'], + 'creation_time': value['creation_time'], + 'disallow_reauthentication': value['disallow_reauthentication'], + 'expiration_time': value['expiration_time'], + 'last_updated_time': value['last_updated_time'], + 'pending_time': value['pending_time'], + 'role': value['role'], + }; +} + diff --git a/src/models/AwsReadIdentityWhitelistTidySettingsResponse.ts b/src/models/AwsReadIdentityWhitelistTidySettingsResponse.ts new file mode 100644 index 0000000..9356306 --- /dev/null +++ b/src/models/AwsReadIdentityWhitelistTidySettingsResponse.ts @@ -0,0 +1,77 @@ +/** + * Copyright IBM Corp. 2025, 2026 + */ + +/* tslint:disable */ +/* eslint-disable */ +/** + * HashiCorp Vault API + * HTTP API that gives you full access to Vault. All API routes are prefixed with `/v1/`. + * + * The version of the OpenAPI document: 2.2.0 + * + * + * NOTE: This class is auto generated by OpenAPI Generator (https://openapi-generator.tech). + * https://openapi-generator.tech + * Do not edit the class manually. + */ + +import { mapValues } from '../runtime'; +/** + * + * @export + * @interface AwsReadIdentityWhitelistTidySettingsResponse + */ +export interface AwsReadIdentityWhitelistTidySettingsResponse { + /** + * Whether periodic tidying of identity access-list entries is disabled. + * @type {boolean} + * @memberof AwsReadIdentityWhitelistTidySettingsResponse + */ + disable_periodic_tidy?: boolean; + /** + * Duration past expiration before identities are removed from storage. + * @type {string} + * @memberof AwsReadIdentityWhitelistTidySettingsResponse + */ + safety_buffer?: string; +} + +/** + * Check if a given object implements the AwsReadIdentityWhitelistTidySettingsResponse interface. + */ +export function instanceOfAwsReadIdentityWhitelistTidySettingsResponse(value: object): value is AwsReadIdentityWhitelistTidySettingsResponse { + return true; +} + +export function AwsReadIdentityWhitelistTidySettingsResponseFromJSON(json: any): AwsReadIdentityWhitelistTidySettingsResponse { + return AwsReadIdentityWhitelistTidySettingsResponseFromJSONTyped(json, false); +} + +export function AwsReadIdentityWhitelistTidySettingsResponseFromJSONTyped(json: any, ignoreDiscriminator: boolean): AwsReadIdentityWhitelistTidySettingsResponse { + if (json == null) { + return json; + } + return { + + 'disable_periodic_tidy': json['disable_periodic_tidy'] == null ? undefined : json['disable_periodic_tidy'], + 'safety_buffer': json['safety_buffer'] == null ? undefined : json['safety_buffer'], + }; +} + +export function AwsReadIdentityWhitelistTidySettingsResponseToJSON(json: any): AwsReadIdentityWhitelistTidySettingsResponse { + return AwsReadIdentityWhitelistTidySettingsResponseToJSONTyped(json, false); +} + +export function AwsReadIdentityWhitelistTidySettingsResponseToJSONTyped(value?: AwsReadIdentityWhitelistTidySettingsResponse | null, ignoreDiscriminator: boolean = false): any { + if (value == null) { + return value; + } + + return { + + 'disable_periodic_tidy': value['disable_periodic_tidy'], + 'safety_buffer': value['safety_buffer'], + }; +} + diff --git a/src/models/AwsReadRoleTagBlacklistResponse.ts b/src/models/AwsReadRoleTagBlacklistResponse.ts new file mode 100644 index 0000000..3ccecb5 --- /dev/null +++ b/src/models/AwsReadRoleTagBlacklistResponse.ts @@ -0,0 +1,77 @@ +/** + * Copyright IBM Corp. 2025, 2026 + */ + +/* tslint:disable */ +/* eslint-disable */ +/** + * HashiCorp Vault API + * HTTP API that gives you full access to Vault. All API routes are prefixed with `/v1/`. + * + * The version of the OpenAPI document: 2.2.0 + * + * + * NOTE: This class is auto generated by OpenAPI Generator (https://openapi-generator.tech). + * https://openapi-generator.tech + * Do not edit the class manually. + */ + +import { mapValues } from '../runtime'; +/** + * + * @export + * @interface AwsReadRoleTagBlacklistResponse + */ +export interface AwsReadRoleTagBlacklistResponse { + /** + * Time the deny-list entry was created, in RFC3339 format. + * @type {string} + * @memberof AwsReadRoleTagBlacklistResponse + */ + creation_time?: string; + /** + * Time the deny-list entry expires, in RFC3339 format. + * @type {string} + * @memberof AwsReadRoleTagBlacklistResponse + */ + expiration_time?: string; +} + +/** + * Check if a given object implements the AwsReadRoleTagBlacklistResponse interface. + */ +export function instanceOfAwsReadRoleTagBlacklistResponse(value: object): value is AwsReadRoleTagBlacklistResponse { + return true; +} + +export function AwsReadRoleTagBlacklistResponseFromJSON(json: any): AwsReadRoleTagBlacklistResponse { + return AwsReadRoleTagBlacklistResponseFromJSONTyped(json, false); +} + +export function AwsReadRoleTagBlacklistResponseFromJSONTyped(json: any, ignoreDiscriminator: boolean): AwsReadRoleTagBlacklistResponse { + if (json == null) { + return json; + } + return { + + 'creation_time': json['creation_time'] == null ? undefined : json['creation_time'], + 'expiration_time': json['expiration_time'] == null ? undefined : json['expiration_time'], + }; +} + +export function AwsReadRoleTagBlacklistResponseToJSON(json: any): AwsReadRoleTagBlacklistResponse { + return AwsReadRoleTagBlacklistResponseToJSONTyped(json, false); +} + +export function AwsReadRoleTagBlacklistResponseToJSONTyped(value?: AwsReadRoleTagBlacklistResponse | null, ignoreDiscriminator: boolean = false): any { + if (value == null) { + return value; + } + + return { + + 'creation_time': value['creation_time'], + 'expiration_time': value['expiration_time'], + }; +} + diff --git a/src/models/AwsReadRoleTagBlacklistTidySettingsResponse.ts b/src/models/AwsReadRoleTagBlacklistTidySettingsResponse.ts new file mode 100644 index 0000000..bde8022 --- /dev/null +++ b/src/models/AwsReadRoleTagBlacklistTidySettingsResponse.ts @@ -0,0 +1,77 @@ +/** + * Copyright IBM Corp. 2025, 2026 + */ + +/* tslint:disable */ +/* eslint-disable */ +/** + * HashiCorp Vault API + * HTTP API that gives you full access to Vault. All API routes are prefixed with `/v1/`. + * + * The version of the OpenAPI document: 2.2.0 + * + * + * NOTE: This class is auto generated by OpenAPI Generator (https://openapi-generator.tech). + * https://openapi-generator.tech + * Do not edit the class manually. + */ + +import { mapValues } from '../runtime'; +/** + * + * @export + * @interface AwsReadRoleTagBlacklistTidySettingsResponse + */ +export interface AwsReadRoleTagBlacklistTidySettingsResponse { + /** + * Whether periodic tidying of deny-listed role tag entries is disabled. + * @type {boolean} + * @memberof AwsReadRoleTagBlacklistTidySettingsResponse + */ + disable_periodic_tidy?: boolean; + /** + * Duration past expiration before role tags are removed from storage. + * @type {string} + * @memberof AwsReadRoleTagBlacklistTidySettingsResponse + */ + safety_buffer?: string; +} + +/** + * Check if a given object implements the AwsReadRoleTagBlacklistTidySettingsResponse interface. + */ +export function instanceOfAwsReadRoleTagBlacklistTidySettingsResponse(value: object): value is AwsReadRoleTagBlacklistTidySettingsResponse { + return true; +} + +export function AwsReadRoleTagBlacklistTidySettingsResponseFromJSON(json: any): AwsReadRoleTagBlacklistTidySettingsResponse { + return AwsReadRoleTagBlacklistTidySettingsResponseFromJSONTyped(json, false); +} + +export function AwsReadRoleTagBlacklistTidySettingsResponseFromJSONTyped(json: any, ignoreDiscriminator: boolean): AwsReadRoleTagBlacklistTidySettingsResponse { + if (json == null) { + return json; + } + return { + + 'disable_periodic_tidy': json['disable_periodic_tidy'] == null ? undefined : json['disable_periodic_tidy'], + 'safety_buffer': json['safety_buffer'] == null ? undefined : json['safety_buffer'], + }; +} + +export function AwsReadRoleTagBlacklistTidySettingsResponseToJSON(json: any): AwsReadRoleTagBlacklistTidySettingsResponse { + return AwsReadRoleTagBlacklistTidySettingsResponseToJSONTyped(json, false); +} + +export function AwsReadRoleTagBlacklistTidySettingsResponseToJSONTyped(value?: AwsReadRoleTagBlacklistTidySettingsResponse | null, ignoreDiscriminator: boolean = false): any { + if (value == null) { + return value; + } + + return { + + 'disable_periodic_tidy': value['disable_periodic_tidy'], + 'safety_buffer': value['safety_buffer'], + }; +} + diff --git a/src/models/AwsReadRoleTagDenyListResponse.ts b/src/models/AwsReadRoleTagDenyListResponse.ts new file mode 100644 index 0000000..f7c5bd4 --- /dev/null +++ b/src/models/AwsReadRoleTagDenyListResponse.ts @@ -0,0 +1,77 @@ +/** + * Copyright IBM Corp. 2025, 2026 + */ + +/* tslint:disable */ +/* eslint-disable */ +/** + * HashiCorp Vault API + * HTTP API that gives you full access to Vault. All API routes are prefixed with `/v1/`. + * + * The version of the OpenAPI document: 2.2.0 + * + * + * NOTE: This class is auto generated by OpenAPI Generator (https://openapi-generator.tech). + * https://openapi-generator.tech + * Do not edit the class manually. + */ + +import { mapValues } from '../runtime'; +/** + * + * @export + * @interface AwsReadRoleTagDenyListResponse + */ +export interface AwsReadRoleTagDenyListResponse { + /** + * Time the deny-list entry was created, in RFC3339 format. + * @type {string} + * @memberof AwsReadRoleTagDenyListResponse + */ + creation_time?: string; + /** + * Time the deny-list entry expires, in RFC3339 format. + * @type {string} + * @memberof AwsReadRoleTagDenyListResponse + */ + expiration_time?: string; +} + +/** + * Check if a given object implements the AwsReadRoleTagDenyListResponse interface. + */ +export function instanceOfAwsReadRoleTagDenyListResponse(value: object): value is AwsReadRoleTagDenyListResponse { + return true; +} + +export function AwsReadRoleTagDenyListResponseFromJSON(json: any): AwsReadRoleTagDenyListResponse { + return AwsReadRoleTagDenyListResponseFromJSONTyped(json, false); +} + +export function AwsReadRoleTagDenyListResponseFromJSONTyped(json: any, ignoreDiscriminator: boolean): AwsReadRoleTagDenyListResponse { + if (json == null) { + return json; + } + return { + + 'creation_time': json['creation_time'] == null ? undefined : json['creation_time'], + 'expiration_time': json['expiration_time'] == null ? undefined : json['expiration_time'], + }; +} + +export function AwsReadRoleTagDenyListResponseToJSON(json: any): AwsReadRoleTagDenyListResponse { + return AwsReadRoleTagDenyListResponseToJSONTyped(json, false); +} + +export function AwsReadRoleTagDenyListResponseToJSONTyped(value?: AwsReadRoleTagDenyListResponse | null, ignoreDiscriminator: boolean = false): any { + if (value == null) { + return value; + } + + return { + + 'creation_time': value['creation_time'], + 'expiration_time': value['expiration_time'], + }; +} + diff --git a/src/models/AwsReadRoleTagDenyListTidySettingsResponse.ts b/src/models/AwsReadRoleTagDenyListTidySettingsResponse.ts new file mode 100644 index 0000000..13fa3ef --- /dev/null +++ b/src/models/AwsReadRoleTagDenyListTidySettingsResponse.ts @@ -0,0 +1,77 @@ +/** + * Copyright IBM Corp. 2025, 2026 + */ + +/* tslint:disable */ +/* eslint-disable */ +/** + * HashiCorp Vault API + * HTTP API that gives you full access to Vault. All API routes are prefixed with `/v1/`. + * + * The version of the OpenAPI document: 2.2.0 + * + * + * NOTE: This class is auto generated by OpenAPI Generator (https://openapi-generator.tech). + * https://openapi-generator.tech + * Do not edit the class manually. + */ + +import { mapValues } from '../runtime'; +/** + * + * @export + * @interface AwsReadRoleTagDenyListTidySettingsResponse + */ +export interface AwsReadRoleTagDenyListTidySettingsResponse { + /** + * Whether periodic tidying of deny-listed role tag entries is disabled. + * @type {boolean} + * @memberof AwsReadRoleTagDenyListTidySettingsResponse + */ + disable_periodic_tidy?: boolean; + /** + * Duration past expiration before role tags are removed from storage. + * @type {string} + * @memberof AwsReadRoleTagDenyListTidySettingsResponse + */ + safety_buffer?: string; +} + +/** + * Check if a given object implements the AwsReadRoleTagDenyListTidySettingsResponse interface. + */ +export function instanceOfAwsReadRoleTagDenyListTidySettingsResponse(value: object): value is AwsReadRoleTagDenyListTidySettingsResponse { + return true; +} + +export function AwsReadRoleTagDenyListTidySettingsResponseFromJSON(json: any): AwsReadRoleTagDenyListTidySettingsResponse { + return AwsReadRoleTagDenyListTidySettingsResponseFromJSONTyped(json, false); +} + +export function AwsReadRoleTagDenyListTidySettingsResponseFromJSONTyped(json: any, ignoreDiscriminator: boolean): AwsReadRoleTagDenyListTidySettingsResponse { + if (json == null) { + return json; + } + return { + + 'disable_periodic_tidy': json['disable_periodic_tidy'] == null ? undefined : json['disable_periodic_tidy'], + 'safety_buffer': json['safety_buffer'] == null ? undefined : json['safety_buffer'], + }; +} + +export function AwsReadRoleTagDenyListTidySettingsResponseToJSON(json: any): AwsReadRoleTagDenyListTidySettingsResponse { + return AwsReadRoleTagDenyListTidySettingsResponseToJSONTyped(json, false); +} + +export function AwsReadRoleTagDenyListTidySettingsResponseToJSONTyped(value?: AwsReadRoleTagDenyListTidySettingsResponse | null, ignoreDiscriminator: boolean = false): any { + if (value == null) { + return value; + } + + return { + + 'disable_periodic_tidy': value['disable_periodic_tidy'], + 'safety_buffer': value['safety_buffer'], + }; +} + diff --git a/src/models/AwsReadStsRoleResponse.ts b/src/models/AwsReadStsRoleResponse.ts new file mode 100644 index 0000000..478b846 --- /dev/null +++ b/src/models/AwsReadStsRoleResponse.ts @@ -0,0 +1,77 @@ +/** + * Copyright IBM Corp. 2025, 2026 + */ + +/* tslint:disable */ +/* eslint-disable */ +/** + * HashiCorp Vault API + * HTTP API that gives you full access to Vault. All API routes are prefixed with `/v1/`. + * + * The version of the OpenAPI document: 2.2.0 + * + * + * NOTE: This class is auto generated by OpenAPI Generator (https://openapi-generator.tech). + * https://openapi-generator.tech + * Do not edit the class manually. + */ + +import { mapValues } from '../runtime'; +/** + * + * @export + * @interface AwsReadStsRoleResponse + */ +export interface AwsReadStsRoleResponse { + /** + * External ID used when assuming the STS role. + * @type {string} + * @memberof AwsReadStsRoleResponse + */ + external_id?: string; + /** + * AWS ARN of the STS role to assume for the account. + * @type {string} + * @memberof AwsReadStsRoleResponse + */ + sts_role?: string; +} + +/** + * Check if a given object implements the AwsReadStsRoleResponse interface. + */ +export function instanceOfAwsReadStsRoleResponse(value: object): value is AwsReadStsRoleResponse { + return true; +} + +export function AwsReadStsRoleResponseFromJSON(json: any): AwsReadStsRoleResponse { + return AwsReadStsRoleResponseFromJSONTyped(json, false); +} + +export function AwsReadStsRoleResponseFromJSONTyped(json: any, ignoreDiscriminator: boolean): AwsReadStsRoleResponse { + if (json == null) { + return json; + } + return { + + 'external_id': json['external_id'] == null ? undefined : json['external_id'], + 'sts_role': json['sts_role'] == null ? undefined : json['sts_role'], + }; +} + +export function AwsReadStsRoleResponseToJSON(json: any): AwsReadStsRoleResponse { + return AwsReadStsRoleResponseToJSONTyped(json, false); +} + +export function AwsReadStsRoleResponseToJSONTyped(value?: AwsReadStsRoleResponse | null, ignoreDiscriminator: boolean = false): any { + if (value == null) { + return value; + } + + return { + + 'external_id': value['external_id'], + 'sts_role': value['sts_role'], + }; +} + diff --git a/src/models/AwsRotateRootCredentialsResponse.ts b/src/models/AwsRotateRootCredentialsResponse.ts new file mode 100644 index 0000000..d9e1a84 --- /dev/null +++ b/src/models/AwsRotateRootCredentialsResponse.ts @@ -0,0 +1,69 @@ +/** + * Copyright IBM Corp. 2025, 2026 + */ + +/* tslint:disable */ +/* eslint-disable */ +/** + * HashiCorp Vault API + * HTTP API that gives you full access to Vault. All API routes are prefixed with `/v1/`. + * + * The version of the OpenAPI document: 2.2.0 + * + * + * NOTE: This class is auto generated by OpenAPI Generator (https://openapi-generator.tech). + * https://openapi-generator.tech + * Do not edit the class manually. + */ + +import { mapValues } from '../runtime'; +/** + * + * @export + * @interface AwsRotateRootCredentialsResponse + */ +export interface AwsRotateRootCredentialsResponse { + /** + * New access key ID of the rotated root IAM credential. + * @type {string} + * @memberof AwsRotateRootCredentialsResponse + */ + access_key?: string; +} + +/** + * Check if a given object implements the AwsRotateRootCredentialsResponse interface. + */ +export function instanceOfAwsRotateRootCredentialsResponse(value: object): value is AwsRotateRootCredentialsResponse { + return true; +} + +export function AwsRotateRootCredentialsResponseFromJSON(json: any): AwsRotateRootCredentialsResponse { + return AwsRotateRootCredentialsResponseFromJSONTyped(json, false); +} + +export function AwsRotateRootCredentialsResponseFromJSONTyped(json: any, ignoreDiscriminator: boolean): AwsRotateRootCredentialsResponse { + if (json == null) { + return json; + } + return { + + 'access_key': json['access_key'] == null ? undefined : json['access_key'], + }; +} + +export function AwsRotateRootCredentialsResponseToJSON(json: any): AwsRotateRootCredentialsResponse { + return AwsRotateRootCredentialsResponseToJSONTyped(json, false); +} + +export function AwsRotateRootCredentialsResponseToJSONTyped(value?: AwsRotateRootCredentialsResponse | null, ignoreDiscriminator: boolean = false): any { + if (value == null) { + return value; + } + + return { + + 'access_key': value['access_key'], + }; +} + diff --git a/src/models/AwsWriteRoleTagResponse.ts b/src/models/AwsWriteRoleTagResponse.ts new file mode 100644 index 0000000..612bbb7 --- /dev/null +++ b/src/models/AwsWriteRoleTagResponse.ts @@ -0,0 +1,77 @@ +/** + * Copyright IBM Corp. 2025, 2026 + */ + +/* tslint:disable */ +/* eslint-disable */ +/** + * HashiCorp Vault API + * HTTP API that gives you full access to Vault. All API routes are prefixed with `/v1/`. + * + * The version of the OpenAPI document: 2.2.0 + * + * + * NOTE: This class is auto generated by OpenAPI Generator (https://openapi-generator.tech). + * https://openapi-generator.tech + * Do not edit the class manually. + */ + +import { mapValues } from '../runtime'; +/** + * + * @export + * @interface AwsWriteRoleTagResponse + */ +export interface AwsWriteRoleTagResponse { + /** + * The key to use for the role tag on the EC2 instance. + * @type {string} + * @memberof AwsWriteRoleTagResponse + */ + tag_key?: string; + /** + * The value to use for the role tag on the EC2 instance. + * @type {string} + * @memberof AwsWriteRoleTagResponse + */ + tag_value?: string; +} + +/** + * Check if a given object implements the AwsWriteRoleTagResponse interface. + */ +export function instanceOfAwsWriteRoleTagResponse(value: object): value is AwsWriteRoleTagResponse { + return true; +} + +export function AwsWriteRoleTagResponseFromJSON(json: any): AwsWriteRoleTagResponse { + return AwsWriteRoleTagResponseFromJSONTyped(json, false); +} + +export function AwsWriteRoleTagResponseFromJSONTyped(json: any, ignoreDiscriminator: boolean): AwsWriteRoleTagResponse { + if (json == null) { + return json; + } + return { + + 'tag_key': json['tag_key'] == null ? undefined : json['tag_key'], + 'tag_value': json['tag_value'] == null ? undefined : json['tag_value'], + }; +} + +export function AwsWriteRoleTagResponseToJSON(json: any): AwsWriteRoleTagResponse { + return AwsWriteRoleTagResponseToJSONTyped(json, false); +} + +export function AwsWriteRoleTagResponseToJSONTyped(value?: AwsWriteRoleTagResponse | null, ignoreDiscriminator: boolean = false): any { + if (value == null) { + return value; + } + + return { + + 'tag_key': value['tag_key'], + 'tag_value': value['tag_value'], + }; +} + diff --git a/src/models/RegisterCreateRequest.ts b/src/models/RegisterCreateRequest.ts index 7a1f9ed..6804bda 100644 --- a/src/models/RegisterCreateRequest.ts +++ b/src/models/RegisterCreateRequest.ts @@ -53,6 +53,12 @@ export interface RegisterCreateRequest { * @memberof RegisterCreateRequest */ id?: string; + /** + * Whether the agent registration should not be replicated globally and should be local to the current cluster. + * @type {boolean} + * @memberof RegisterCreateRequest + */ + local?: boolean; /** * Opt out of automatically adding the default ceiling policies to this agent registration. * @type {boolean} @@ -97,6 +103,7 @@ export function RegisterCreateRequestFromJSONTyped(json: any, ignoreDiscriminato 'display_name': json['display_name'], 'entity_id': json['entity_id'], 'id': json['id'] == null ? undefined : json['id'], + 'local': json['local'] == null ? undefined : json['local'], 'no_default_ceiling_policy': json['no_default_ceiling_policy'] == null ? undefined : json['no_default_ceiling_policy'], 'optional_authorization_details': json['optional_authorization_details'] == null ? undefined : json['optional_authorization_details'], 'owner': json['owner'] == null ? undefined : json['owner'], @@ -119,6 +126,7 @@ export function RegisterCreateRequestToJSONTyped(value?: RegisterCreateRequest | 'display_name': value['display_name'], 'entity_id': value['entity_id'], 'id': value['id'], + 'local': value['local'], 'no_default_ceiling_policy': value['no_default_ceiling_policy'], 'optional_authorization_details': value['optional_authorization_details'], 'owner': value['owner'], diff --git a/src/models/RegistrationUpdateByIdRequest.ts b/src/models/RegistrationUpdateByIdRequest.ts index 97079a4..bf3adb3 100644 --- a/src/models/RegistrationUpdateByIdRequest.ts +++ b/src/models/RegistrationUpdateByIdRequest.ts @@ -47,6 +47,12 @@ export interface RegistrationUpdateByIdRequest { * @memberof RegistrationUpdateByIdRequest */ entity_id: string; + /** + * Whether the agent registration should not be replicated globally and should be local to the current cluster. + * @type {boolean} + * @memberof RegistrationUpdateByIdRequest + */ + local?: boolean; /** * Opt out of automatically adding the default ceiling policies to this agent registration. * @type {boolean} @@ -90,6 +96,7 @@ export function RegistrationUpdateByIdRequestFromJSONTyped(json: any, ignoreDisc 'description': json['description'] == null ? undefined : json['description'], 'display_name': json['display_name'], 'entity_id': json['entity_id'], + 'local': json['local'] == null ? undefined : json['local'], 'no_default_ceiling_policy': json['no_default_ceiling_policy'] == null ? undefined : json['no_default_ceiling_policy'], 'optional_authorization_details': json['optional_authorization_details'] == null ? undefined : json['optional_authorization_details'], 'owner': json['owner'] == null ? undefined : json['owner'], @@ -111,6 +118,7 @@ export function RegistrationUpdateByIdRequestToJSONTyped(value?: RegistrationUpd 'description': value['description'], 'display_name': value['display_name'], 'entity_id': value['entity_id'], + 'local': value['local'], 'no_default_ceiling_policy': value['no_default_ceiling_policy'], 'optional_authorization_details': value['optional_authorization_details'], 'owner': value['owner'], diff --git a/src/models/RegistrationUpdateByNameRequest.ts b/src/models/RegistrationUpdateByNameRequest.ts index 1a12595..ad14d83 100644 --- a/src/models/RegistrationUpdateByNameRequest.ts +++ b/src/models/RegistrationUpdateByNameRequest.ts @@ -47,6 +47,12 @@ export interface RegistrationUpdateByNameRequest { * @memberof RegistrationUpdateByNameRequest */ id?: string; + /** + * Whether the agent registration should not be replicated globally and should be local to the current cluster. + * @type {boolean} + * @memberof RegistrationUpdateByNameRequest + */ + local?: boolean; /** * Opt out of automatically adding the default ceiling policies to this agent registration. * @type {boolean} @@ -89,6 +95,7 @@ export function RegistrationUpdateByNameRequestFromJSONTyped(json: any, ignoreDi 'description': json['description'] == null ? undefined : json['description'], 'entity_id': json['entity_id'], 'id': json['id'] == null ? undefined : json['id'], + 'local': json['local'] == null ? undefined : json['local'], 'no_default_ceiling_policy': json['no_default_ceiling_policy'] == null ? undefined : json['no_default_ceiling_policy'], 'optional_authorization_details': json['optional_authorization_details'] == null ? undefined : json['optional_authorization_details'], 'owner': json['owner'] == null ? undefined : json['owner'], @@ -110,6 +117,7 @@ export function RegistrationUpdateByNameRequestToJSONTyped(value?: RegistrationU 'description': value['description'], 'entity_id': value['entity_id'], 'id': value['id'], + 'local': value['local'], 'no_default_ceiling_policy': value['no_default_ceiling_policy'], 'optional_authorization_details': value['optional_authorization_details'], 'owner': value['owner'], diff --git a/src/models/index.ts b/src/models/index.ts index c52b2cf..5a138ea 100644 --- a/src/models/index.ts +++ b/src/models/index.ts @@ -70,8 +70,23 @@ export * from './AwsConfigureRootIamCredentialsRequest'; export * from './AwsGenerateCredentialsWithParametersRequest'; export * from './AwsGenerateStsCredentialsWithParametersRequest'; export * from './AwsLoginRequest'; +export * from './AwsLoginResponse'; +export * from './AwsReadAuthRoleResponse'; +export * from './AwsReadCertificateConfigurationResponse'; +export * from './AwsReadClientConfigurationResponse'; +export * from './AwsReadIdentityAccessListResponse'; +export * from './AwsReadIdentityAccessListTidySettingsResponse'; +export * from './AwsReadIdentityIntegrationConfigurationResponse'; +export * from './AwsReadIdentityWhitelistResponse'; +export * from './AwsReadIdentityWhitelistTidySettingsResponse'; +export * from './AwsReadRoleTagBlacklistResponse'; +export * from './AwsReadRoleTagBlacklistTidySettingsResponse'; +export * from './AwsReadRoleTagDenyListResponse'; +export * from './AwsReadRoleTagDenyListTidySettingsResponse'; export * from './AwsReadStaticCredsNameResponse'; export * from './AwsReadStaticRolesNameResponse'; +export * from './AwsReadStsRoleResponse'; +export * from './AwsRotateRootCredentialsResponse'; export * from './AwsTidyIdentityAccessListRequest'; export * from './AwsTidyIdentityWhitelistRequest'; export * from './AwsTidyRoleTagBlacklistRequest'; @@ -79,6 +94,7 @@ export * from './AwsTidyRoleTagDenyListRequest'; export * from './AwsWriteAuthRoleRequest'; export * from './AwsWriteRoleRequest'; export * from './AwsWriteRoleTagRequest'; +export * from './AwsWriteRoleTagResponse'; export * from './AwsWriteStaticRolesNameRequest'; export * from './AwsWriteStaticRolesNameResponse'; export * from './AwsWriteStsRoleRequest';