From fe474d57707986ab250b9a64354f4e6ee5ccdf76 Mon Sep 17 00:00:00 2001 From: zofskeez <24611656+zofskeez@users.noreply.github.com> Date: Mon, 31 Aug 2026 12:15:41 +0000 Subject: [PATCH 1/2] auto: openapi spec update --- openapi.json | 1817 +++++++++++++++++++++++++++++++++++++++----------- 1 file changed, 1429 insertions(+), 388 deletions(-) diff --git a/openapi.json b/openapi.json index cd83737..07e573a 100644 --- a/openapi.json +++ b/openapi.json @@ -2240,17 +2240,26 @@ ], "x-vault-createSupported": true, "get": { + "summary": "Return the configured AWS public certificate.", "operationId": "aws-read-certificate-configuration", "tags": [ "auth" ], "responses": { "200": { - "description": "OK" + "description": "OK", + "content": { + "application/json": { + "schema": { + "$ref": "#/components/schemas/AwsReadCertificateConfigurationResponse" + } + } + } } } }, "post": { + "summary": "Configure an AWS public key for PKCS7 or identity-document verification.", "operationId": "aws-configure-certificate", "tags": [ "auth" @@ -2266,19 +2275,20 @@ } }, "responses": { - "200": { - "description": "OK" + "204": { + "description": "No Content" } } }, "delete": { + "summary": "Delete the configured AWS public certificate.", "operationId": "aws-delete-certificate-configuration", "tags": [ "auth" ], "responses": { "204": { - "description": "empty body" + "description": "No Content" } } } @@ -2298,6 +2308,7 @@ } ], "get": { + "summary": "List the configured AWS public certificates.", "operationId": "aws-list-certificate-configurations", "tags": [ "auth" @@ -2346,17 +2357,26 @@ ], "x-vault-createSupported": true, "get": { + "summary": "Return the configured AWS client credentials.", "operationId": "aws-read-client-configuration", "tags": [ "auth" ], "responses": { "200": { - "description": "OK" + "description": "OK", + "content": { + "application/json": { + "schema": { + "$ref": "#/components/schemas/AwsReadClientConfigurationResponse" + } + } + } } } }, "post": { + "summary": "Configure AWS IAM credentials used to query instance and role details.", "operationId": "aws-configure-client", "tags": [ "auth" @@ -2372,19 +2392,20 @@ } }, "responses": { - "200": { - "description": "OK" + "204": { + "description": "No Content" } } }, "delete": { + "summary": "Delete the AWS client configuration.", "operationId": "aws-delete-client-configuration", "tags": [ "auth" ], "responses": { "204": { - "description": "empty body" + "description": "No Content" } } } @@ -2404,17 +2425,26 @@ } ], "get": { + "summary": "Return the AWS identity integration configuration.", "operationId": "aws-read-identity-integration-configuration", "tags": [ "auth" ], "responses": { "200": { - "description": "OK" + "description": "OK", + "content": { + "application/json": { + "schema": { + "$ref": "#/components/schemas/AwsReadIdentityIntegrationConfigurationResponse" + } + } + } } } }, "post": { + "summary": "Configure the AWS identity integration settings.", "operationId": "aws-configure-identity-integration", "tags": [ "auth" @@ -2430,8 +2460,8 @@ } }, "responses": { - "200": { - "description": "OK" + "204": { + "description": "No Content" } } } @@ -2451,13 +2481,21 @@ } ], "post": { + "summary": "Rotate the AWS credentials used by Vault for this auth mount.", "operationId": "aws-rotate-root-credentials", "tags": [ "auth" ], "responses": { "200": { - "description": "OK" + "description": "OK", + "content": { + "application/json": { + "schema": { + "$ref": "#/components/schemas/AwsRotateRootCredentialsResponse" + } + } + } } } } @@ -2477,6 +2515,7 @@ } ], "get": { + "summary": "List the configured STS roles for all AWS accounts.", "operationId": "aws-list-sts-role-relationships", "tags": [ "auth" @@ -2534,17 +2573,26 @@ ], "x-vault-createSupported": true, "get": { + "summary": "Return the configured STS role for a given AWS account.", "operationId": "aws-read-sts-role", "tags": [ "auth" ], "responses": { "200": { - "description": "OK" + "description": "OK", + "content": { + "application/json": { + "schema": { + "$ref": "#/components/schemas/AwsReadStsRoleResponse" + } + } + } } } }, "post": { + "summary": "Configure an STS role for a given AWS account.", "operationId": "aws-write-sts-role", "tags": [ "auth" @@ -2560,19 +2608,20 @@ } }, "responses": { - "200": { - "description": "OK" + "204": { + "description": "No Content" } } }, "delete": { + "summary": "Delete the configured STS role for a given AWS account.", "operationId": "aws-delete-sts-role", "tags": [ "auth" ], "responses": { "204": { - "description": "empty body" + "description": "No Content" } } } @@ -2593,17 +2642,26 @@ ], "x-vault-createSupported": true, "get": { + "summary": "Return the identity access-list tidy configuration.", "operationId": "aws-read-identity-access-list-tidy-settings", "tags": [ "auth" ], "responses": { "200": { - "description": "OK" + "description": "OK", + "content": { + "application/json": { + "schema": { + "$ref": "#/components/schemas/AwsReadIdentityAccessListTidySettingsResponse" + } + } + } } } }, "post": { + "summary": "Configure the identity access-list tidy operation.", "operationId": "aws-configure-identity-access-list-tidy-operation", "tags": [ "auth" @@ -2619,19 +2677,20 @@ } }, "responses": { - "200": { - "description": "OK" + "204": { + "description": "No Content" } } }, "delete": { + "summary": "Delete the identity access-list tidy configuration.", "operationId": "aws-delete-identity-access-list-tidy-settings", "tags": [ "auth" ], "responses": { "204": { - "description": "empty body" + "description": "No Content" } } } @@ -2652,17 +2711,26 @@ ], "x-vault-createSupported": true, "get": { + "summary": "Return the identity access-list tidy configuration.", "operationId": "aws-read-identity-whitelist-tidy-settings", "tags": [ "auth" ], "responses": { "200": { - "description": "OK" + "description": "OK", + "content": { + "application/json": { + "schema": { + "$ref": "#/components/schemas/AwsReadIdentityWhitelistTidySettingsResponse" + } + } + } } } }, "post": { + "summary": "Configure the identity access-list tidy operation.", "operationId": "aws-configure-identity-whitelist-tidy-operation", "tags": [ "auth" @@ -2678,19 +2746,20 @@ } }, "responses": { - "200": { - "description": "OK" + "204": { + "description": "No Content" } } }, "delete": { + "summary": "Delete the identity access-list tidy configuration.", "operationId": "aws-delete-identity-whitelist-tidy-settings", "tags": [ "auth" ], "responses": { "204": { - "description": "empty body" + "description": "No Content" } } } @@ -2711,17 +2780,26 @@ ], "x-vault-createSupported": true, "get": { + "summary": "Return the role-tag deny-list tidy configuration.", "operationId": "aws-read-role-tag-blacklist-tidy-settings", "tags": [ "auth" ], "responses": { "200": { - "description": "OK" + "description": "OK", + "content": { + "application/json": { + "schema": { + "$ref": "#/components/schemas/AwsReadRoleTagBlacklistTidySettingsResponse" + } + } + } } } }, "post": { + "summary": "Configure the role-tag deny-list tidy operation.", "operationId": "aws-configure-role-tag-blacklist-tidy-operation", "tags": [ "auth" @@ -2737,19 +2815,20 @@ } }, "responses": { - "200": { - "description": "OK" + "204": { + "description": "No Content" } } }, "delete": { + "summary": "Delete the role-tag deny-list tidy configuration.", "operationId": "aws-delete-role-tag-blacklist-tidy-settings", "tags": [ "auth" ], "responses": { "204": { - "description": "empty body" + "description": "No Content" } } } @@ -2770,17 +2849,26 @@ ], "x-vault-createSupported": true, "get": { + "summary": "Return the role-tag deny-list tidy configuration.", "operationId": "aws-read-role-tag-deny-list-tidy-settings", "tags": [ "auth" ], "responses": { "200": { - "description": "OK" + "description": "OK", + "content": { + "application/json": { + "schema": { + "$ref": "#/components/schemas/AwsReadRoleTagDenyListTidySettingsResponse" + } + } + } } } }, "post": { + "summary": "Configure the role-tag deny-list tidy operation.", "operationId": "aws-configure-role-tag-deny-list-tidy-operation", "tags": [ "auth" @@ -2796,19 +2884,20 @@ } }, "responses": { - "200": { - "description": "OK" + "204": { + "description": "No Content" } } }, "delete": { + "summary": "Delete the role-tag deny-list tidy configuration.", "operationId": "aws-delete-role-tag-deny-list-tidy-settings", "tags": [ "auth" ], "responses": { "204": { - "description": "empty body" + "description": "No Content" } } } @@ -2828,6 +2917,7 @@ } ], "get": { + "summary": "List the EC2 instance IDs in the identity access list.", "operationId": "aws-list-identity-access-list", "tags": [ "auth" @@ -2884,24 +2974,33 @@ } ], "get": { + "summary": "Return the access-list entry for the given EC2 instance ID.", "operationId": "aws-read-identity-access-list", "tags": [ "auth" ], "responses": { "200": { - "description": "OK" + "description": "OK", + "content": { + "application/json": { + "schema": { + "$ref": "#/components/schemas/AwsReadIdentityAccessListResponse" + } + } + } } } }, "delete": { + "summary": "Delete the access-list entry for the given EC2 instance ID.", "operationId": "aws-delete-identity-access-list", "tags": [ "auth" ], "responses": { "204": { - "description": "empty body" + "description": "No Content" } } } @@ -2921,6 +3020,7 @@ } ], "get": { + "summary": "List the EC2 instance IDs in the identity access list.", "operationId": "aws-list-identity-whitelist", "tags": [ "auth" @@ -2977,24 +3077,33 @@ } ], "get": { + "summary": "Return the access-list entry for the given EC2 instance ID.", "operationId": "aws-read-identity-whitelist", "tags": [ "auth" ], "responses": { "200": { - "description": "OK" + "description": "OK", + "content": { + "application/json": { + "schema": { + "$ref": "#/components/schemas/AwsReadIdentityWhitelistResponse" + } + } + } } } }, "delete": { + "summary": "Delete the access-list entry for the given EC2 instance ID.", "operationId": "aws-delete-identity-whitelist", "tags": [ "auth" ], "responses": { "204": { - "description": "empty body" + "description": "No Content" } } } @@ -3015,6 +3124,7 @@ ], "x-vault-unauthenticated": true, "post": { + "summary": "Authenticate to Vault using AWS credentials.", "operationId": "aws-login", "tags": [ "auth" @@ -3031,7 +3141,14 @@ }, "responses": { "200": { - "description": "OK" + "description": "OK", + "content": { + "application/json": { + "schema": { + "$ref": "#/components/schemas/AwsLoginResponse" + } + } + } } } } @@ -3051,6 +3168,7 @@ } ], "get": { + "summary": "List the configured AWS auth roles.", "operationId": "aws-list-auth-roles", "tags": [ "auth" @@ -3108,17 +3226,26 @@ ], "x-vault-createSupported": true, "get": { + "summary": "Return the configuration for a named AWS auth role.", "operationId": "aws-read-auth-role", "tags": [ "auth" ], "responses": { "200": { - "description": "OK" + "description": "OK", + "content": { + "application/json": { + "schema": { + "$ref": "#/components/schemas/AwsReadAuthRoleResponse" + } + } + } } } }, "post": { + "summary": "Create or update an AWS auth role.", "operationId": "aws-write-auth-role", "tags": [ "auth" @@ -3134,19 +3261,20 @@ } }, "responses": { - "200": { - "description": "OK" + "204": { + "description": "No Content" } } }, "delete": { + "summary": "Delete a named AWS auth role.", "operationId": "aws-delete-auth-role", "tags": [ "auth" ], "responses": { "204": { - "description": "empty body" + "description": "No Content" } } } @@ -3175,6 +3303,7 @@ } ], "post": { + "summary": "Generate a role tag for an EC2 instance.", "operationId": "aws-write-role-tag", "tags": [ "auth" @@ -3191,7 +3320,14 @@ }, "responses": { "200": { - "description": "OK" + "description": "OK", + "content": { + "application/json": { + "schema": { + "$ref": "#/components/schemas/AwsWriteRoleTagResponse" + } + } + } } } } @@ -3211,6 +3347,7 @@ } ], "get": { + "summary": "List the configured AWS auth roles.", "operationId": "aws-list-auth-roles2", "tags": [ "auth" @@ -3258,6 +3395,7 @@ } ], "get": { + "summary": "List the deny-listed role tags.", "operationId": "aws-list-role-tag-blacklists", "tags": [ "auth" @@ -3314,35 +3452,45 @@ } ], "get": { + "summary": "Return the deny-list entry for the given role tag.", "operationId": "aws-read-role-tag-blacklist", "tags": [ "auth" ], "responses": { "200": { - "description": "OK" + "description": "OK", + "content": { + "application/json": { + "schema": { + "$ref": "#/components/schemas/AwsReadRoleTagBlacklistResponse" + } + } + } } } }, "post": { + "summary": "Add a role tag to the deny list.", "operationId": "aws-write-role-tag-blacklist", "tags": [ "auth" ], "responses": { - "200": { - "description": "OK" + "204": { + "description": "No Content" } } }, "delete": { + "summary": "Delete the deny-list entry for the given role tag.", "operationId": "aws-delete-role-tag-blacklist", "tags": [ "auth" ], "responses": { "204": { - "description": "empty body" + "description": "No Content" } } } @@ -3362,6 +3510,7 @@ } ], "get": { + "summary": "List the deny-listed role tags.", "operationId": "aws-list-role-tag-deny-lists", "tags": [ "auth" @@ -3418,35 +3567,45 @@ } ], "get": { + "summary": "Return the deny-list entry for the given role tag.", "operationId": "aws-read-role-tag-deny-list", "tags": [ "auth" ], "responses": { "200": { - "description": "OK" + "description": "OK", + "content": { + "application/json": { + "schema": { + "$ref": "#/components/schemas/AwsReadRoleTagDenyListResponse" + } + } + } } } }, "post": { + "summary": "Add a role tag to the deny list.", "operationId": "aws-write-role-tag-deny-list", "tags": [ "auth" ], "responses": { - "200": { - "description": "OK" + "204": { + "description": "No Content" } } }, "delete": { + "summary": "Delete the deny-list entry for the given role tag.", "operationId": "aws-delete-role-tag-deny-list", "tags": [ "auth" ], "responses": { "204": { - "description": "empty body" + "description": "No Content" } } } @@ -3466,6 +3625,7 @@ } ], "post": { + "summary": "Tidy expired entries from the identity access list.", "operationId": "aws-tidy-identity-access-list", "tags": [ "auth" @@ -3481,8 +3641,8 @@ } }, "responses": { - "200": { - "description": "OK" + "202": { + "description": "Accepted" } } } @@ -3502,6 +3662,7 @@ } ], "post": { + "summary": "Tidy expired entries from the identity access list.", "operationId": "aws-tidy-identity-whitelist", "tags": [ "auth" @@ -3517,8 +3678,8 @@ } }, "responses": { - "200": { - "description": "OK" + "202": { + "description": "Accepted" } } } @@ -3538,6 +3699,7 @@ } ], "post": { + "summary": "Tidy expired entries from the role-tag deny list.", "operationId": "aws-tidy-role-tag-blacklist", "tags": [ "auth" @@ -3553,8 +3715,8 @@ } }, "responses": { - "200": { - "description": "OK" + "202": { + "description": "Accepted" } } } @@ -3574,6 +3736,7 @@ } ], "post": { + "summary": "Tidy expired entries from the role-tag deny list.", "operationId": "aws-tidy-role-tag-deny-list", "tags": [ "auth" @@ -3589,8 +3752,8 @@ } }, "responses": { - "200": { - "description": "OK" + "202": { + "description": "Accepted" } } } @@ -6891,6 +7054,7 @@ } }, "/auth/{okta_mount_path}/verify/{nonce}": { + "description": "Retrieve the number verification challenge for a pending Okta login request.", "parameters": [ { "name": "nonce", @@ -12780,21 +12944,6 @@ } } }, - "/sys/activation-flags/enable-scim/activate": { - "description": "Returns information about Vault's features that require a one-time activation step.", - "post": { - "summary": "Activate a flagged feature.", - "operationId": "activation-flags-activate", - "tags": [ - "system" - ], - "responses": { - "200": { - "description": "OK" - } - } - } - }, "/sys/activation-flags/force-identity-deduplication/activate": { "description": "Returns information about Vault's features that require a one-time activation step.", "post": { @@ -23106,17 +23255,26 @@ } ], "get": { + "summary": "Return the default lease configuration for generated credentials.", "operationId": "aws-read-lease-configuration", "tags": [ "secrets" ], "responses": { "200": { - "description": "OK" + "description": "OK", + "content": { + "application/json": { + "schema": { + "$ref": "#/components/schemas/AwsReadLeaseConfigurationResponse" + } + } + } } } }, "post": { + "summary": "Configure the default lease for generated credentials.", "operationId": "aws-configure-lease", "tags": [ "secrets" @@ -23132,8 +23290,8 @@ } }, "responses": { - "200": { - "description": "OK" + "204": { + "description": "No Content" } } } @@ -23154,17 +23312,26 @@ ], "x-vault-createSupported": true, "get": { + "summary": "Return the root IAM credentials configuration.", "operationId": "aws-read-root-iam-credentials-configuration", "tags": [ "secrets" ], "responses": { "200": { - "description": "OK" + "description": "OK", + "content": { + "application/json": { + "schema": { + "$ref": "#/components/schemas/AwsReadRootIamCredentialsConfigurationResponse" + } + } + } } } }, "post": { + "summary": "Configure the root IAM credentials.", "operationId": "aws-configure-root-iam-credentials", "tags": [ "secrets" @@ -23180,8 +23347,8 @@ } }, "responses": { - "200": { - "description": "OK" + "204": { + "description": "No Content" } } } @@ -23201,13 +23368,21 @@ } ], "post": { + "summary": "Rotate the root IAM credentials used by Vault for this secrets mount.", "operationId": "aws-rotate-root-iam-credentials", "tags": [ "secrets" ], "responses": { "200": { - "description": "OK" + "description": "OK", + "content": { + "application/json": { + "schema": { + "$ref": "#/components/schemas/AwsRotateRootIamCredentialsResponse" + } + } + } } } } @@ -23236,6 +23411,7 @@ } ], "get": { + "summary": "Generate AWS credentials for a given role.", "operationId": "aws-generate-credentials", "tags": [ "secrets" @@ -23269,11 +23445,19 @@ ], "responses": { "200": { - "description": "OK" + "description": "OK", + "content": { + "application/json": { + "schema": { + "$ref": "#/components/schemas/AwsGenerateCredentialsResponse" + } + } + } } } }, "post": { + "summary": "Generate AWS credentials for a given role.", "operationId": "aws-generate-credentials-with-parameters", "tags": [ "secrets" @@ -23290,7 +23474,14 @@ }, "responses": { "200": { - "description": "OK" + "description": "OK", + "content": { + "application/json": { + "schema": { + "$ref": "#/components/schemas/AwsGenerateCredentialsWithParametersResponse" + } + } + } } } } @@ -23370,19 +23561,26 @@ } ], "get": { - "summary": "Read, write and reference IAM policies that access keys can be made for.", + "summary": "Return the configuration for a named IAM role.", "operationId": "aws-read-role", "tags": [ "secrets" ], "responses": { "200": { - "description": "OK" + "description": "OK", + "content": { + "application/json": { + "schema": { + "$ref": "#/components/schemas/AwsReadRoleResponse" + } + } + } } } }, "post": { - "summary": "Read, write and reference IAM policies that access keys can be made for.", + "summary": "Create or update a named IAM role.", "operationId": "aws-write-role", "tags": [ "secrets" @@ -23398,20 +23596,20 @@ } }, "responses": { - "200": { - "description": "OK" + "204": { + "description": "No Content" } } }, "delete": { - "summary": "Read, write and reference IAM policies that access keys can be made for.", + "summary": "Delete a named IAM role.", "operationId": "aws-delete-role", "tags": [ "secrets" ], "responses": { "204": { - "description": "empty body" + "description": "No Content" } } } @@ -23440,6 +23638,7 @@ } ], "get": { + "summary": "Retrieve the current credentials for a named static IAM role.", "operationId": "aws-read-static-creds-name", "tags": [ "secrets" @@ -23473,6 +23672,7 @@ } ], "get": { + "summary": "List the configured static IAM roles.", "operationId": "aws-list-static-roles", "tags": [ "secrets" @@ -23529,6 +23729,7 @@ } ], "get": { + "summary": "Return the configuration for a named static IAM role.", "operationId": "aws-read-static-roles-name", "tags": [ "secrets" @@ -23547,6 +23748,7 @@ } }, "post": { + "summary": "Create or update a named static IAM role.", "operationId": "aws-write-static-roles-name", "tags": [ "secrets" @@ -23575,6 +23777,7 @@ } }, "delete": { + "summary": "Delete a named static IAM role.", "operationId": "aws-delete-static-roles-name", "tags": [ "secrets" @@ -23610,6 +23813,7 @@ } ], "get": { + "summary": "Generate AWS credentials for a given role.", "operationId": "aws-generate-sts-credentials", "tags": [ "secrets" @@ -23643,11 +23847,19 @@ ], "responses": { "200": { - "description": "OK" + "description": "OK", + "content": { + "application/json": { + "schema": { + "$ref": "#/components/schemas/AwsGenerateStsCredentialsResponse" + } + } + } } } }, "post": { + "summary": "Generate AWS credentials for a given role.", "operationId": "aws-generate-sts-credentials-with-parameters", "tags": [ "secrets" @@ -23664,7 +23876,14 @@ }, "responses": { "200": { - "description": "OK" + "description": "OK", + "content": { + "application/json": { + "schema": { + "$ref": "#/components/schemas/AwsGenerateStsCredentialsWithParametersResponse" + } + } + } } } } @@ -48008,7 +48227,6 @@ } ], "post": { - "summary": "Rotate named encryption key", "operationId": "transit-rotate-key", "tags": [ "secrets" @@ -50064,6 +50282,10 @@ "type": "string", "description": "The semantic version of the plugin to use, or image tag if oci_image is provided." }, + "seal_wrap": { + "type": "boolean", + "description": "Whether to turn on seal wrapping for the mount." + }, "token_type": { "type": "string", "description": "The type of token to issue (service or batch)." @@ -50440,6 +50662,35 @@ } } }, + "AwsGenerateCredentialsResponse": { + "type": "object", + "properties": { + "access_key": { + "type": "string", + "description": "AWS access key ID." + }, + "arn": { + "type": "string", + "description": "ARN of the assumed role (only set for assumed_role credential type)." + }, + "secret_key": { + "type": "string", + "description": "AWS secret access key." + }, + "security_token": { + "type": "string", + "description": "AWS security token for STS credentials. Deprecated; use session_token." + }, + "session_token": { + "type": "string", + "description": "AWS session token for STS credentials." + }, + "ttl": { + "type": "integer", + "description": "TTL of the credentials in seconds (only set for STS credential types)." + } + } + }, "AwsGenerateCredentialsWithParametersRequest": { "type": "object", "properties": { @@ -50463,6 +50714,64 @@ } } }, + "AwsGenerateCredentialsWithParametersResponse": { + "type": "object", + "properties": { + "access_key": { + "type": "string", + "description": "AWS access key ID." + }, + "arn": { + "type": "string", + "description": "ARN of the assumed role (only set for assumed_role credential type)." + }, + "secret_key": { + "type": "string", + "description": "AWS secret access key." + }, + "security_token": { + "type": "string", + "description": "AWS security token for STS credentials. Deprecated; use session_token." + }, + "session_token": { + "type": "string", + "description": "AWS session token for STS credentials." + }, + "ttl": { + "type": "integer", + "description": "TTL of the credentials in seconds (only set for STS credential types)." + } + } + }, + "AwsGenerateStsCredentialsResponse": { + "type": "object", + "properties": { + "access_key": { + "type": "string", + "description": "AWS access key ID." + }, + "arn": { + "type": "string", + "description": "ARN of the assumed role (only set for assumed_role credential type)." + }, + "secret_key": { + "type": "string", + "description": "AWS secret access key." + }, + "security_token": { + "type": "string", + "description": "AWS security token for STS credentials. Deprecated; use session_token." + }, + "session_token": { + "type": "string", + "description": "AWS session token for STS credentials." + }, + "ttl": { + "type": "integer", + "description": "TTL of the credentials in seconds (only set for STS credential types)." + } + } + }, "AwsGenerateStsCredentialsWithParametersRequest": { "type": "object", "properties": { @@ -50486,6 +50795,35 @@ } } }, + "AwsGenerateStsCredentialsWithParametersResponse": { + "type": "object", + "properties": { + "access_key": { + "type": "string", + "description": "AWS access key ID." + }, + "arn": { + "type": "string", + "description": "ARN of the assumed role (only set for assumed_role credential type)." + }, + "secret_key": { + "type": "string", + "description": "AWS secret access key." + }, + "security_token": { + "type": "string", + "description": "AWS security token for STS credentials. Deprecated; use session_token." + }, + "session_token": { + "type": "string", + "description": "AWS session token for STS credentials." + }, + "ttl": { + "type": "integer", + "description": "TTL of the credentials in seconds (only set for STS credential types)." + } + } + }, "AwsLoginRequest": { "type": "object", "properties": { @@ -50527,6 +50865,649 @@ } } }, + "AwsLoginResponse": { + "type": "object", + "properties": { + "accessor": { + "type": "string", + "description": "Accessor for the client token." + }, + "client_token": { + "type": "string", + "description": "Token issued by Vault for the authenticated client." + }, + "entity_id": { + "type": "string", + "description": "Entity ID associated with the token." + }, + "lease_duration": { + "type": "integer", + "description": "Lease duration in seconds.", + "format": "int64" + }, + "metadata": { + "type": "object", + "description": "Metadata associated with the token.", + "format": "map" + }, + "mfa_requirement": { + "type": "object", + "description": "MFA requirement information.", + "format": "map" + }, + "num_uses": { + "type": "integer", + "description": "Number of uses remaining for the token." + }, + "orphan": { + "type": "boolean", + "description": "Whether the token is an orphan." + }, + "policies": { + "type": "array", + "description": "List of policies associated with the token.", + "items": { + "type": "string" + } + }, + "renewable": { + "type": "boolean", + "description": "Whether the token is renewable." + }, + "token_policies": { + "type": "array", + "description": "List of token policies.", + "items": { + "type": "string" + } + }, + "token_type": { + "type": "string", + "description": "Type of the token." + } + } + }, + "AwsReadAuthRoleResponse": { + "type": "object", + "properties": { + "allow_instance_migration": { + "type": "boolean", + "description": "Whether instance migration is allowed." + }, + "auth_type": { + "type": "string", + "description": "Auth type permitted to authenticate to this role." + }, + "bound_account_id": { + "type": "array", + "description": "AWS account IDs that instances must belong to.", + "items": { + "type": "object" + } + }, + "bound_ami_id": { + "type": "array", + "description": "AMI IDs that instances must use to authenticate.", + "items": { + "type": "object" + } + }, + "bound_ec2_instance_id": { + "type": "array", + "description": "EC2 instance IDs that are allowed to authenticate.", + "items": { + "type": "object" + } + }, + "bound_iam_instance_profile_arn": { + "type": "array", + "description": "IAM instance profile ARN prefixes that instances must match.", + "items": { + "type": "object" + } + }, + "bound_iam_principal_arn": { + "type": "array", + "description": "IAM principal ARNs bound to this role.", + "items": { + "type": "object" + } + }, + "bound_iam_principal_id": { + "type": "array", + "description": "Resolved unique IDs for IAM principal ARNs.", + "items": { + "type": "object" + } + }, + "bound_iam_role_arn": { + "type": "array", + "description": "IAM role ARNs that instances must match.", + "items": { + "type": "object" + } + }, + "bound_region": { + "type": "array", + "description": "AWS regions that instances must be in.", + "items": { + "type": "object" + } + }, + "bound_subnet_id": { + "type": "array", + "description": "VPC subnet IDs that instances must be in.", + "items": { + "type": "object" + } + }, + "bound_vpc_id": { + "type": "array", + "description": "VPC IDs that instances must be in.", + "items": { + "type": "object" + } + }, + "disallow_reauthentication": { + "type": "boolean", + "description": "Whether reauthentication is disallowed." + }, + "inferred_aws_region": { + "type": "string", + "description": "AWS region used when inferring the entity type." + }, + "inferred_entity_type": { + "type": "string", + "description": "Entity type inferred from the authenticated principal." + }, + "resolve_aws_unique_ids": { + "type": "boolean", + "description": "Whether IAM ARNs are resolved to unique IDs." + }, + "role_id": { + "type": "string", + "description": "Unique ID of the role." + }, + "role_tag": { + "type": "string", + "description": "EC2 instance tag key for role tags." + }, + "token_bound_cidrs": { + "type": "array", + "description": "CIDR blocks that tokens are restricted to.", + "items": { + "type": "object" + } + }, + "token_explicit_max_ttl": { + "type": "integer", + "description": "Explicit maximum TTL for tokens." + }, + "token_max_ttl": { + "type": "integer", + "description": "Maximum TTL for tokens." + }, + "token_no_default_policy": { + "type": "boolean", + "description": "Whether the default policy is not added to tokens." + }, + "token_num_uses": { + "type": "integer", + "description": "Maximum number of token uses." + }, + "token_period": { + "type": "integer", + "description": "Renewal period for tokens." + }, + "token_policies": { + "type": "array", + "description": "Policies applied to tokens.", + "items": { + "type": "object" + } + }, + "token_ttl": { + "type": "integer", + "description": "TTL for tokens." + }, + "token_type": { + "type": "string", + "description": "Type of tokens generated." + } + } + }, + "AwsReadCertificateConfigurationResponse": { + "type": "object", + "properties": { + "aws_public_cert": { + "type": "string", + "description": "Base64-encoded AWS public certificate used to verify PKCS7 signatures." + }, + "type": { + "type": "string", + "description": "Type of document the certificate verifies, either pkcs7 or identity." + } + } + }, + "AwsReadClientConfigurationResponse": { + "type": "object", + "properties": { + "access_key": { + "type": "string", + "description": "AWS access key ID." + }, + "allowed_sts_header_values": { + "type": "array", + "description": "Allowed additional headers in AWS STS request headers.", + "items": { + "type": "object" + } + }, + "disable_automated_rotation": { + "type": "boolean", + "description": "Whether automated rotation is disabled." + }, + "endpoint": { + "type": "string", + "description": "Custom endpoint URL for AWS EC2 API calls." + }, + "iam_endpoint": { + "type": "string", + "description": "Custom endpoint URL for AWS IAM API calls." + }, + "iam_server_id_header_value": { + "type": "string", + "description": "Required value for the X-Vault-AWS-IAM-Server-ID request header." + }, + "identity_token_audience": { + "type": "string", + "description": "Audience for plugin identity tokens." + }, + "identity_token_ttl": { + "type": "string", + "description": "Time-to-live for plugin identity tokens in seconds.", + "format": "duration" + }, + "max_retries": { + "type": "integer", + "description": "Maximum number of retries for AWS API calls." + }, + "role_arn": { + "type": "string", + "description": "Role ARN for plugin identity token federation." + }, + "rotation_period": { + "type": "string", + "description": "Period in seconds between automated credential rotations.", + "format": "duration" + }, + "rotation_policy": { + "type": "string", + "description": "Name of the rotation policy to use." + }, + "rotation_schedule": { + "type": "string", + "description": "Automated rotation schedule in cron format." + }, + "rotation_window": { + "type": "string", + "description": "Window in seconds during which automated rotation may occur.", + "format": "duration" + }, + "sts_endpoint": { + "type": "string", + "description": "Custom endpoint URL for AWS STS API calls." + }, + "sts_region": { + "type": "string", + "description": "Region for the STS endpoint." + }, + "use_sts_region_from_client": { + "type": "boolean", + "description": "Whether to use the STS region from client requests." + } + } + }, + "AwsReadIdentityAccessListResponse": { + "type": "object", + "properties": { + "client_nonce": { + "type": "string", + "description": "Client nonce used during the login." + }, + "creation_time": { + "type": "string", + "description": "Time the access-list entry was created, in RFC3339 format." + }, + "disallow_reauthentication": { + "type": "boolean", + "description": "Whether reauthentication is disallowed for this instance." + }, + "expiration_time": { + "type": "string", + "description": "Time the access-list entry expires, in RFC3339 format." + }, + "last_updated_time": { + "type": "string", + "description": "Time the access-list entry was last updated, in RFC3339 format." + }, + "pending_time": { + "type": "string", + "description": "The pendingTime field from the instance identity document." + }, + "role": { + "type": "string", + "description": "Name of the role used during the last successful login." + } + } + }, + "AwsReadIdentityAccessListTidySettingsResponse": { + "type": "object", + "properties": { + "disable_periodic_tidy": { + "type": "boolean", + "description": "Whether periodic tidying of identity access-list entries is disabled." + }, + "safety_buffer": { + "type": "string", + "description": "Duration past expiration before identities are removed from storage.", + "format": "duration" + } + } + }, + "AwsReadIdentityIntegrationConfigurationResponse": { + "type": "object", + "properties": { + "ec2_alias": { + "type": "string", + "description": "How EC2 instances are mapped to identity aliases." + }, + "ec2_metadata": { + "type": "array", + "description": "Metadata fields to include on EC2 auth tokens.", + "items": { + "type": "object" + } + }, + "iam_alias": { + "type": "string", + "description": "How IAM principals are mapped to identity aliases." + }, + "iam_metadata": { + "type": "array", + "description": "Metadata fields to include on IAM auth tokens.", + "items": { + "type": "object" + } + } + } + }, + "AwsReadIdentityWhitelistResponse": { + "type": "object", + "properties": { + "client_nonce": { + "type": "string", + "description": "Client nonce used during the login." + }, + "creation_time": { + "type": "string", + "description": "Time the access-list entry was created, in RFC3339 format." + }, + "disallow_reauthentication": { + "type": "boolean", + "description": "Whether reauthentication is disallowed for this instance." + }, + "expiration_time": { + "type": "string", + "description": "Time the access-list entry expires, in RFC3339 format." + }, + "last_updated_time": { + "type": "string", + "description": "Time the access-list entry was last updated, in RFC3339 format." + }, + "pending_time": { + "type": "string", + "description": "The pendingTime field from the instance identity document." + }, + "role": { + "type": "string", + "description": "Name of the role used during the last successful login." + } + } + }, + "AwsReadIdentityWhitelistTidySettingsResponse": { + "type": "object", + "properties": { + "disable_periodic_tidy": { + "type": "boolean", + "description": "Whether periodic tidying of identity access-list entries is disabled." + }, + "safety_buffer": { + "type": "string", + "description": "Duration past expiration before identities are removed from storage.", + "format": "duration" + } + } + }, + "AwsReadLeaseConfigurationResponse": { + "type": "object", + "properties": { + "lease": { + "type": "string", + "description": "Default lease duration for credentials." + }, + "lease_max": { + "type": "string", + "description": "Maximum lease duration for credentials." + } + } + }, + "AwsReadRoleResponse": { + "type": "object", + "properties": { + "credential_type": { + "type": "string", + "description": "Type of credentials generated by this role." + }, + "default_sts_ttl": { + "type": "string", + "description": "Default TTL for STS credentials in seconds.", + "format": "duration" + }, + "external_id": { + "type": "string", + "description": "External ID used when assuming a role." + }, + "iam_groups": { + "type": "array", + "description": "IAM groups that generated users are added to.", + "items": { + "type": "object" + } + }, + "iam_tags": { + "type": "object", + "description": "IAM tags applied to generated users.", + "format": "map" + }, + "max_sts_ttl": { + "type": "string", + "description": "Maximum allowed TTL for STS credentials in seconds.", + "format": "duration" + }, + "mfa_serial_number": { + "type": "string", + "description": "Serial number or ARN of the MFA device." + }, + "permissions_boundary_arn": { + "type": "string", + "description": "ARN of the permissions boundary policy attached to generated IAM users." + }, + "policy_arns": { + "type": "array", + "description": "ARNs of AWS managed policies attached to the role.", + "items": { + "type": "object" + } + }, + "policy_document": { + "type": "string", + "description": "JSON-encoded inline IAM policy document." + }, + "role_arns": { + "type": "array", + "description": "ARNs of AWS roles that can be assumed.", + "items": { + "type": "object" + } + }, + "session_tags": { + "type": "object", + "description": "Session tags applied to assumed-role credentials.", + "format": "map" + }, + "user_path": { + "type": "string", + "description": "Path for generated IAM users." + } + } + }, + "AwsReadRoleTagBlacklistResponse": { + "type": "object", + "properties": { + "creation_time": { + "type": "string", + "description": "Time the deny-list entry was created, in RFC3339 format." + }, + "expiration_time": { + "type": "string", + "description": "Time the deny-list entry expires, in RFC3339 format." + } + } + }, + "AwsReadRoleTagBlacklistTidySettingsResponse": { + "type": "object", + "properties": { + "disable_periodic_tidy": { + "type": "boolean", + "description": "Whether periodic tidying of deny-listed role tag entries is disabled." + }, + "safety_buffer": { + "type": "string", + "description": "Duration past expiration before role tags are removed from storage.", + "format": "duration" + } + } + }, + "AwsReadRoleTagDenyListResponse": { + "type": "object", + "properties": { + "creation_time": { + "type": "string", + "description": "Time the deny-list entry was created, in RFC3339 format." + }, + "expiration_time": { + "type": "string", + "description": "Time the deny-list entry expires, in RFC3339 format." + } + } + }, + "AwsReadRoleTagDenyListTidySettingsResponse": { + "type": "object", + "properties": { + "disable_periodic_tidy": { + "type": "boolean", + "description": "Whether periodic tidying of deny-listed role tag entries is disabled." + }, + "safety_buffer": { + "type": "string", + "description": "Duration past expiration before role tags are removed from storage.", + "format": "duration" + } + } + }, + "AwsReadRootIamCredentialsConfigurationResponse": { + "type": "object", + "properties": { + "access_key": { + "type": "string", + "description": "AWS access key ID." + }, + "disable_automated_rotation": { + "type": "boolean", + "description": "Whether automated rotation is disabled." + }, + "iam_endpoint": { + "type": "string", + "description": "Custom endpoint for AWS IAM API calls." + }, + "identity_token_audience": { + "type": "string", + "description": "Audience for plugin identity tokens." + }, + "identity_token_ttl": { + "type": "string", + "description": "Time-to-live for plugin identity tokens in seconds.", + "format": "duration" + }, + "max_retries": { + "type": "integer", + "description": "Maximum number of retries for AWS API calls." + }, + "region": { + "type": "string", + "description": "AWS region for API calls." + }, + "role_arn": { + "type": "string", + "description": "Role ARN for plugin identity token federation." + }, + "rotation_period": { + "type": "string", + "description": "Period in seconds between automated credential rotations.", + "format": "duration" + }, + "rotation_policy": { + "type": "string", + "description": "Name of the rotation policy to use." + }, + "rotation_schedule": { + "type": "string", + "description": "Automated rotation schedule in cron format." + }, + "rotation_window": { + "type": "string", + "description": "Window in seconds during which automated rotation may occur.", + "format": "duration" + }, + "sts_endpoint": { + "type": "string", + "description": "Custom endpoint for AWS STS API calls." + }, + "sts_fallback_endpoints": { + "type": "array", + "description": "Fallback endpoints if sts_endpoint is unreachable.", + "items": { + "type": "object" + } + }, + "sts_fallback_regions": { + "type": "array", + "description": "Fallback regions if sts_region is unreachable.", + "items": { + "type": "object" + } + }, + "sts_region": { + "type": "string", + "description": "Specific region for STS API calls." + }, + "username_template": { + "type": "string", + "description": "Template used to generate IAM usernames." + } + } + }, "AwsReadStaticCredsNameResponse": { "type": "object", "properties": { @@ -50570,6 +51551,37 @@ } } }, + "AwsReadStsRoleResponse": { + "type": "object", + "properties": { + "external_id": { + "type": "string", + "description": "External ID used when assuming the STS role." + }, + "sts_role": { + "type": "string", + "description": "AWS ARN of the STS role to assume for the account." + } + } + }, + "AwsRotateRootCredentialsResponse": { + "type": "object", + "properties": { + "access_key": { + "type": "string", + "description": "New access key ID of the rotated root IAM credential." + } + } + }, + "AwsRotateRootIamCredentialsResponse": { + "type": "object", + "properties": { + "access_key": { + "type": "string", + "description": "New access key ID of the rotated root IAM credential." + } + } + }, "AwsTidyIdentityAccessListRequest": { "type": "object", "properties": { @@ -50987,6 +51999,19 @@ } } }, + "AwsWriteRoleTagResponse": { + "type": "object", + "properties": { + "tag_key": { + "type": "string", + "description": "The key to use for the role tag on the EC2 instance." + }, + "tag_value": { + "type": "string", + "description": "The value to use for the role tag on the EC2 instance." + } + } + }, "AwsWriteStaticRolesNameRequest": { "type": "object", "properties": { @@ -59075,300 +60100,308 @@ "type": "string", "description": "The semantic version of the plugin to use, or image tag if oci_image is provided." }, - "token_type": { - "type": "string", - "description": "The type of token to issue (service or batch)." - }, - "trim_request_trailing_slashes": { - "type": "boolean" - }, - "user_lockout_config": { - "type": "object", - "description": "The user lockout configuration to pass into the backend. Should be a json object with string keys and values.", - "format": "map" - } - } - }, - "MountsEnableSecretsEngineRequest": { - "type": "object", - "properties": { - "config": { - "type": "object", - "description": "Configuration for this mount, such as default_lease_ttl and max_lease_ttl.", - "format": "map" - }, - "description": { - "type": "string", - "description": "User-friendly description for this mount." - }, - "external_entropy_access": { - "type": "boolean", - "description": "Whether to give the mount access to Vault's external entropy.", - "default": false - }, - "local": { - "type": "boolean", - "description": "Mark the mount as a local mount, which is not replicated and is unaffected by replication.", - "default": false - }, - "options": { - "type": "object", - "description": "The options to pass into the backend. Should be a json object with string keys and values.", - "format": "kvpairs" - }, - "plugin_name": { - "type": "string", - "description": "Name of the plugin to mount based from the name registered in the plugin catalog." - }, - "plugin_version": { - "type": "string", - "description": "The semantic version of the plugin to use, or image tag if oci_image is provided." - }, "seal_wrap": { "type": "boolean", - "description": "Whether to turn on seal wrapping for the mount.", - "default": false - }, - "type": { - "type": "string", - "description": "The type of the backend. Example: \"passthrough\"" - } - } - }, - "MountsReadConfigurationResponse": { - "type": "object", - "properties": { - "accessor": { - "type": "string" - }, - "config": { - "type": "object", - "description": "Configuration for this mount, such as default_lease_ttl and max_lease_ttl.", - "format": "map" - }, - "deprecation_status": { - "type": "string" - }, - "description": { - "type": "string", - "description": "User-friendly description for this mount." - }, - "external_entropy_access": { - "type": "boolean" - }, - "local": { - "type": "boolean", - "description": "Mark the mount as a local mount, which is not replicated and is unaffected by replication.", - "default": false - }, - "options": { - "type": "object", - "description": "The options to pass into the backend. Should be a json object with string keys and values.", - "format": "kvpairs" - }, - "plugin_version": { - "type": "string", - "description": "The semantic version of the plugin to use, or image tag if oci_image is provided." - }, - "running_plugin_version": { - "type": "string" - }, - "running_sha256": { - "type": "string" - }, - "seal_wrap": { - "type": "boolean", - "description": "Whether to turn on seal wrapping for the mount.", - "default": false - }, - "type": { - "type": "string", - "description": "The type of the backend. Example: \"passthrough\"" - }, - "uuid": { - "type": "string" - } - } - }, - "MountsReadTuningInformationResponse": { - "type": "object", - "properties": { - "allowed_managed_keys": { - "type": "array", - "items": { - "type": "string" - } - }, - "allowed_response_headers": { - "type": "array", - "description": "A list of headers to whitelist and allow a plugin to set on responses.", - "items": { - "type": "string" - } - }, - "audit_non_hmac_request_keys": { - "type": "array", - "items": { - "type": "string" - } - }, - "audit_non_hmac_response_keys": { - "type": "array", - "items": { - "type": "string" - } - }, - "default_lease_ttl": { - "type": "integer", - "description": "The default lease TTL for this mount." - }, - "delegated_auth_accessors": { - "type": "array", - "description": "A list of auth accessors that the mount is allowed to delegate authentication too", - "items": { - "type": "string" - } - }, - "description": { - "type": "string", - "description": "User-friendly description for this credential backend." - }, - "external_entropy_access": { - "type": "boolean" - }, - "force_no_cache": { - "type": "boolean" - }, - "identity_token_key": { - "type": "string" - }, - "listing_visibility": { - "type": "string" - }, - "max_lease_ttl": { - "type": "integer", - "description": "The max lease TTL for this mount." - }, - "options": { - "type": "object", - "description": "The options to pass into the backend. Should be a json object with string keys and values.", - "format": "kvpairs" - }, - "override_pinned_version": { - "type": "boolean", - "description": "If true, plugin_version will override the pinned version", - "default": false - }, - "passthrough_request_headers": { - "type": "array", - "items": { - "type": "string" - } - }, - "plugin_version": { - "type": "string", - "description": "The semantic version of the plugin to use, or image tag if oci_image is provided." - }, - "token_type": { - "type": "string", - "description": "The type of token to issue (service or batch)." - }, - "trim_request_trailing_slashes": { - "type": "boolean" - }, - "user_lockout_counter_reset_duration": { - "type": "integer", - "format": "int64" - }, - "user_lockout_disable": { - "type": "boolean" - }, - "user_lockout_duration": { - "type": "integer", - "format": "int64" - }, - "user_lockout_threshold": { - "type": "integer", - "format": "int64" - } - } - }, - "MountsTuneConfigurationParametersRequest": { - "type": "object", - "properties": { - "allowed_managed_keys": { - "type": "array", - "items": { - "type": "string" - } - }, - "allowed_response_headers": { - "type": "array", - "description": "A list of headers to whitelist and allow a plugin to set on responses.", - "items": { - "type": "string" - } - }, - "audit_non_hmac_request_keys": { - "type": "array", - "description": "The list of keys in the request data object that will not be HMAC'd by audit devices.", - "items": { - "type": "string" - } - }, - "audit_non_hmac_response_keys": { - "type": "array", - "description": "The list of keys in the response data object that will not be HMAC'd by audit devices.", - "items": { - "type": "string" - } - }, - "default_lease_ttl": { - "type": "string", - "description": "The default lease TTL for this mount." - }, - "delegated_auth_accessors": { - "type": "array", - "items": { - "type": "string" - } - }, - "description": { - "type": "string", - "description": "User-friendly description for this credential backend." - }, - "identity_token_key": { - "type": "string", - "description": "The name of the key used to sign plugin identity tokens. Defaults to the default key." - }, - "listing_visibility": { - "type": "string", - "description": "Determines the visibility of the mount in the UI-specific listing endpoint. Accepted value are 'unauth' and 'hidden', with the empty default ('') behaving like 'hidden'." - }, - "max_lease_ttl": { - "type": "string", - "description": "The max lease TTL for this mount." - }, - "options": { - "type": "object", - "description": "The options to pass into the backend. Should be a json object with string keys and values.", - "format": "kvpairs" - }, - "override_pinned_version": { - "type": "boolean", - "description": "If true, plugin_version will override the pinned version", - "default": false - }, - "passthrough_request_headers": { - "type": "array", - "description": "A list of headers to whitelist and pass from the request to the plugin.", - "items": { - "type": "string" - } - }, - "plugin_version": { - "type": "string", - "description": "The semantic version of the plugin to use, or image tag if oci_image is provided." + "description": "Whether to turn on seal wrapping for the mount." + }, + "token_type": { + "type": "string", + "description": "The type of token to issue (service or batch)." + }, + "trim_request_trailing_slashes": { + "type": "boolean" + }, + "user_lockout_config": { + "type": "object", + "description": "The user lockout configuration to pass into the backend. Should be a json object with string keys and values.", + "format": "map" + } + } + }, + "MountsEnableSecretsEngineRequest": { + "type": "object", + "properties": { + "config": { + "type": "object", + "description": "Configuration for this mount, such as default_lease_ttl and max_lease_ttl.", + "format": "map" + }, + "description": { + "type": "string", + "description": "User-friendly description for this mount." + }, + "external_entropy_access": { + "type": "boolean", + "description": "Whether to give the mount access to Vault's external entropy.", + "default": false + }, + "local": { + "type": "boolean", + "description": "Mark the mount as a local mount, which is not replicated and is unaffected by replication.", + "default": false + }, + "options": { + "type": "object", + "description": "The options to pass into the backend. Should be a json object with string keys and values.", + "format": "kvpairs" + }, + "plugin_name": { + "type": "string", + "description": "Name of the plugin to mount based from the name registered in the plugin catalog." + }, + "plugin_version": { + "type": "string", + "description": "The semantic version of the plugin to use, or image tag if oci_image is provided." + }, + "seal_wrap": { + "type": "boolean", + "description": "Whether to turn on seal wrapping for the mount.", + "default": false + }, + "type": { + "type": "string", + "description": "The type of the backend. Example: \"passthrough\"" + } + } + }, + "MountsReadConfigurationResponse": { + "type": "object", + "properties": { + "accessor": { + "type": "string" + }, + "config": { + "type": "object", + "description": "Configuration for this mount, such as default_lease_ttl and max_lease_ttl.", + "format": "map" + }, + "deprecation_status": { + "type": "string" + }, + "description": { + "type": "string", + "description": "User-friendly description for this mount." + }, + "external_entropy_access": { + "type": "boolean" + }, + "local": { + "type": "boolean", + "description": "Mark the mount as a local mount, which is not replicated and is unaffected by replication.", + "default": false + }, + "options": { + "type": "object", + "description": "The options to pass into the backend. Should be a json object with string keys and values.", + "format": "kvpairs" + }, + "plugin_version": { + "type": "string", + "description": "The semantic version of the plugin to use, or image tag if oci_image is provided." + }, + "running_plugin_version": { + "type": "string" + }, + "running_sha256": { + "type": "string" + }, + "seal_wrap": { + "type": "boolean", + "description": "Whether to turn on seal wrapping for the mount.", + "default": false + }, + "type": { + "type": "string", + "description": "The type of the backend. Example: \"passthrough\"" + }, + "uuid": { + "type": "string" + } + } + }, + "MountsReadTuningInformationResponse": { + "type": "object", + "properties": { + "allowed_managed_keys": { + "type": "array", + "items": { + "type": "string" + } + }, + "allowed_response_headers": { + "type": "array", + "description": "A list of headers to whitelist and allow a plugin to set on responses.", + "items": { + "type": "string" + } + }, + "audit_non_hmac_request_keys": { + "type": "array", + "items": { + "type": "string" + } + }, + "audit_non_hmac_response_keys": { + "type": "array", + "items": { + "type": "string" + } + }, + "default_lease_ttl": { + "type": "integer", + "description": "The default lease TTL for this mount." + }, + "delegated_auth_accessors": { + "type": "array", + "description": "A list of auth accessors that the mount is allowed to delegate authentication too", + "items": { + "type": "string" + } + }, + "description": { + "type": "string", + "description": "User-friendly description for this credential backend." + }, + "external_entropy_access": { + "type": "boolean" + }, + "force_no_cache": { + "type": "boolean" + }, + "identity_token_key": { + "type": "string" + }, + "listing_visibility": { + "type": "string" + }, + "max_lease_ttl": { + "type": "integer", + "description": "The max lease TTL for this mount." + }, + "options": { + "type": "object", + "description": "The options to pass into the backend. Should be a json object with string keys and values.", + "format": "kvpairs" + }, + "override_pinned_version": { + "type": "boolean", + "description": "If true, plugin_version will override the pinned version", + "default": false + }, + "passthrough_request_headers": { + "type": "array", + "items": { + "type": "string" + } + }, + "plugin_version": { + "type": "string", + "description": "The semantic version of the plugin to use, or image tag if oci_image is provided." + }, + "token_type": { + "type": "string", + "description": "The type of token to issue (service or batch)." + }, + "trim_request_trailing_slashes": { + "type": "boolean" + }, + "user_lockout_counter_reset_duration": { + "type": "integer", + "format": "int64" + }, + "user_lockout_disable": { + "type": "boolean" + }, + "user_lockout_duration": { + "type": "integer", + "format": "int64" + }, + "user_lockout_threshold": { + "type": "integer", + "format": "int64" + } + } + }, + "MountsTuneConfigurationParametersRequest": { + "type": "object", + "properties": { + "allowed_managed_keys": { + "type": "array", + "items": { + "type": "string" + } + }, + "allowed_response_headers": { + "type": "array", + "description": "A list of headers to whitelist and allow a plugin to set on responses.", + "items": { + "type": "string" + } + }, + "audit_non_hmac_request_keys": { + "type": "array", + "description": "The list of keys in the request data object that will not be HMAC'd by audit devices.", + "items": { + "type": "string" + } + }, + "audit_non_hmac_response_keys": { + "type": "array", + "description": "The list of keys in the response data object that will not be HMAC'd by audit devices.", + "items": { + "type": "string" + } + }, + "default_lease_ttl": { + "type": "string", + "description": "The default lease TTL for this mount." + }, + "delegated_auth_accessors": { + "type": "array", + "items": { + "type": "string" + } + }, + "description": { + "type": "string", + "description": "User-friendly description for this credential backend." + }, + "identity_token_key": { + "type": "string", + "description": "The name of the key used to sign plugin identity tokens. Defaults to the default key." + }, + "listing_visibility": { + "type": "string", + "description": "Determines the visibility of the mount in the UI-specific listing endpoint. Accepted value are 'unauth' and 'hidden', with the empty default ('') behaving like 'hidden'." + }, + "max_lease_ttl": { + "type": "string", + "description": "The max lease TTL for this mount." + }, + "options": { + "type": "object", + "description": "The options to pass into the backend. Should be a json object with string keys and values.", + "format": "kvpairs" + }, + "override_pinned_version": { + "type": "boolean", + "description": "If true, plugin_version will override the pinned version", + "default": false + }, + "passthrough_request_headers": { + "type": "array", + "description": "A list of headers to whitelist and pass from the request to the plugin.", + "items": { + "type": "string" + } + }, + "plugin_version": { + "type": "string", + "description": "The semantic version of the plugin to use, or image tag if oci_image is provided." + }, + "seal_wrap": { + "type": "boolean", + "description": "Whether to turn on seal wrapping for the mount." }, "token_type": { "type": "string", @@ -75371,6 +76404,10 @@ "type": "string", "description": "ID of the registration. If set, updates the corresponding existing registration." }, + "local": { + "type": "boolean", + "description": "Whether the agent registration should not be replicated globally and should be local to the current cluster." + }, "no_default_ceiling_policy": { "type": "boolean", "description": "Opt out of automatically adding the default ceiling policies to this agent registration." @@ -75428,6 +76465,10 @@ "type": "string", "description": "Entity ID representing this agent." }, + "local": { + "type": "boolean", + "description": "Whether the agent registration should not be replicated globally and should be local to the current cluster." + }, "no_default_ceiling_policy": { "type": "boolean", "description": "Opt out of automatically adding the default ceiling policies to this agent registration." @@ -75468,6 +76509,10 @@ "type": "string", "description": "ID of the registration. If set, updates the corresponding existing registration." }, + "local": { + "type": "boolean", + "description": "Whether the agent registration should not be replicated globally and should be local to the current cluster." + }, "no_default_ceiling_policy": { "type": "boolean", "description": "Opt out of automatically adding the default ceiling policies to this agent registration." @@ -81445,10 +82490,6 @@ "TpmgroupUpdateByNameRequest": { "type": "object", "properties": { - "id": { - "type": "string", - "description": "ID of the TPMGroup. If set, updates the corresponding existing TPMGroup." - }, "member_tpm_ids": { "type": "array", "description": "TPM IDs to be assigned as group members.", From 3e6b608189863b10b47a0b2ec043330cf3ddb473 Mon Sep 17 00:00:00 2001 From: hc-github-team-secure-vault-core <82990506+hc-github-team-secure-vault-core@users.noreply.github.com> Date: Mon, 31 Aug 2026 12:16:38 +0000 Subject: [PATCH 2/2] auto: generated client updates --- .openapi-generator/FILES | 24 ++ src/apis/AuthApi.ts | 246 +++++++++++++--- src/apis/SecretsApi.ts | 114 +++++-- src/apis/SystemApi.ts | 65 ++-- .../AuthTuneConfigurationParametersRequest.ts | 8 + src/models/AwsGenerateCredentialsResponse.ts | 109 +++++++ ...nerateCredentialsWithParametersResponse.ts | 109 +++++++ .../AwsGenerateStsCredentialsResponse.ts | 109 +++++++ ...ateStsCredentialsWithParametersResponse.ts | 109 +++++++ src/models/AwsLoginResponse.ts | 157 ++++++++++ src/models/AwsReadAuthRoleResponse.ts | 277 ++++++++++++++++++ ...AwsReadCertificateConfigurationResponse.ts | 77 +++++ .../AwsReadClientConfigurationResponse.ts | 197 +++++++++++++ .../AwsReadIdentityAccessListResponse.ts | 117 ++++++++ ...dIdentityAccessListTidySettingsResponse.ts | 77 +++++ ...dentityIntegrationConfigurationResponse.ts | 93 ++++++ .../AwsReadIdentityWhitelistResponse.ts | 117 ++++++++ ...adIdentityWhitelistTidySettingsResponse.ts | 77 +++++ .../AwsReadLeaseConfigurationResponse.ts | 77 +++++ src/models/AwsReadRoleResponse.ts | 165 +++++++++++ src/models/AwsReadRoleTagBlacklistResponse.ts | 77 +++++ ...eadRoleTagBlacklistTidySettingsResponse.ts | 77 +++++ src/models/AwsReadRoleTagDenyListResponse.ts | 77 +++++ ...ReadRoleTagDenyListTidySettingsResponse.ts | 77 +++++ ...RootIamCredentialsConfigurationResponse.ts | 197 +++++++++++++ src/models/AwsReadStsRoleResponse.ts | 77 +++++ .../AwsRotateRootCredentialsResponse.ts | 69 +++++ .../AwsRotateRootIamCredentialsResponse.ts | 69 +++++ src/models/AwsWriteRoleTagResponse.ts | 77 +++++ ...sAuthTuneConfigurationParametersRequest.ts | 8 + ...ountsTuneConfigurationParametersRequest.ts | 8 + src/models/RegisterCreateRequest.ts | 8 + src/models/RegistrationUpdateByIdRequest.ts | 8 + src/models/RegistrationUpdateByNameRequest.ts | 8 + src/models/TpmgroupUpdateByNameRequest.ts | 8 - src/models/index.ts | 24 ++ 36 files changed, 3059 insertions(+), 134 deletions(-) create mode 100644 src/models/AwsGenerateCredentialsResponse.ts create mode 100644 src/models/AwsGenerateCredentialsWithParametersResponse.ts create mode 100644 src/models/AwsGenerateStsCredentialsResponse.ts create mode 100644 src/models/AwsGenerateStsCredentialsWithParametersResponse.ts create mode 100644 src/models/AwsLoginResponse.ts create mode 100644 src/models/AwsReadAuthRoleResponse.ts create mode 100644 src/models/AwsReadCertificateConfigurationResponse.ts create mode 100644 src/models/AwsReadClientConfigurationResponse.ts create mode 100644 src/models/AwsReadIdentityAccessListResponse.ts create mode 100644 src/models/AwsReadIdentityAccessListTidySettingsResponse.ts create mode 100644 src/models/AwsReadIdentityIntegrationConfigurationResponse.ts create mode 100644 src/models/AwsReadIdentityWhitelistResponse.ts create mode 100644 src/models/AwsReadIdentityWhitelistTidySettingsResponse.ts create mode 100644 src/models/AwsReadLeaseConfigurationResponse.ts create mode 100644 src/models/AwsReadRoleResponse.ts create mode 100644 src/models/AwsReadRoleTagBlacklistResponse.ts create mode 100644 src/models/AwsReadRoleTagBlacklistTidySettingsResponse.ts create mode 100644 src/models/AwsReadRoleTagDenyListResponse.ts create mode 100644 src/models/AwsReadRoleTagDenyListTidySettingsResponse.ts create mode 100644 src/models/AwsReadRootIamCredentialsConfigurationResponse.ts create mode 100644 src/models/AwsReadStsRoleResponse.ts create mode 100644 src/models/AwsRotateRootCredentialsResponse.ts create mode 100644 src/models/AwsRotateRootIamCredentialsResponse.ts create mode 100644 src/models/AwsWriteRoleTagResponse.ts diff --git a/.openapi-generator/FILES b/.openapi-generator/FILES index eae03e5..3903572 100644 --- a/.openapi-generator/FILES +++ b/.openapi-generator/FILES @@ -69,11 +69,34 @@ src/models/AwsConfigureLeaseRequest.ts src/models/AwsConfigureRoleTagBlacklistTidyOperationRequest.ts src/models/AwsConfigureRoleTagDenyListTidyOperationRequest.ts src/models/AwsConfigureRootIamCredentialsRequest.ts +src/models/AwsGenerateCredentialsResponse.ts src/models/AwsGenerateCredentialsWithParametersRequest.ts +src/models/AwsGenerateCredentialsWithParametersResponse.ts +src/models/AwsGenerateStsCredentialsResponse.ts src/models/AwsGenerateStsCredentialsWithParametersRequest.ts +src/models/AwsGenerateStsCredentialsWithParametersResponse.ts src/models/AwsLoginRequest.ts +src/models/AwsLoginResponse.ts +src/models/AwsReadAuthRoleResponse.ts +src/models/AwsReadCertificateConfigurationResponse.ts +src/models/AwsReadClientConfigurationResponse.ts +src/models/AwsReadIdentityAccessListResponse.ts +src/models/AwsReadIdentityAccessListTidySettingsResponse.ts +src/models/AwsReadIdentityIntegrationConfigurationResponse.ts +src/models/AwsReadIdentityWhitelistResponse.ts +src/models/AwsReadIdentityWhitelistTidySettingsResponse.ts +src/models/AwsReadLeaseConfigurationResponse.ts +src/models/AwsReadRoleResponse.ts +src/models/AwsReadRoleTagBlacklistResponse.ts +src/models/AwsReadRoleTagBlacklistTidySettingsResponse.ts +src/models/AwsReadRoleTagDenyListResponse.ts +src/models/AwsReadRoleTagDenyListTidySettingsResponse.ts +src/models/AwsReadRootIamCredentialsConfigurationResponse.ts src/models/AwsReadStaticCredsNameResponse.ts src/models/AwsReadStaticRolesNameResponse.ts +src/models/AwsReadStsRoleResponse.ts +src/models/AwsRotateRootCredentialsResponse.ts +src/models/AwsRotateRootIamCredentialsResponse.ts src/models/AwsTidyIdentityAccessListRequest.ts src/models/AwsTidyIdentityWhitelistRequest.ts src/models/AwsTidyRoleTagBlacklistRequest.ts @@ -81,6 +104,7 @@ src/models/AwsTidyRoleTagDenyListRequest.ts src/models/AwsWriteAuthRoleRequest.ts src/models/AwsWriteRoleRequest.ts src/models/AwsWriteRoleTagRequest.ts +src/models/AwsWriteRoleTagResponse.ts src/models/AwsWriteStaticRolesNameRequest.ts src/models/AwsWriteStaticRolesNameResponse.ts src/models/AwsWriteStsRoleRequest.ts diff --git a/src/apis/AuthApi.ts b/src/apis/AuthApi.ts index 0e3e046..97ad0d4 100644 --- a/src/apis/AuthApi.ts +++ b/src/apis/AuthApi.ts @@ -67,12 +67,28 @@ import type { AwsConfigureRoleTagBlacklistTidyOperationRequest, AwsConfigureRoleTagDenyListTidyOperationRequest, AwsLoginRequest, + AwsLoginResponse, + AwsReadAuthRoleResponse, + AwsReadCertificateConfigurationResponse, + AwsReadClientConfigurationResponse, + AwsReadIdentityAccessListResponse, + AwsReadIdentityAccessListTidySettingsResponse, + AwsReadIdentityIntegrationConfigurationResponse, + AwsReadIdentityWhitelistResponse, + AwsReadIdentityWhitelistTidySettingsResponse, + AwsReadRoleTagBlacklistResponse, + AwsReadRoleTagBlacklistTidySettingsResponse, + AwsReadRoleTagDenyListResponse, + AwsReadRoleTagDenyListTidySettingsResponse, + AwsReadStsRoleResponse, + AwsRotateRootCredentialsResponse, AwsTidyIdentityAccessListRequest, AwsTidyIdentityWhitelistRequest, AwsTidyRoleTagBlacklistRequest, AwsTidyRoleTagDenyListRequest, AwsWriteAuthRoleRequest, AwsWriteRoleTagRequest, + AwsWriteRoleTagResponse, AwsWriteStsRoleRequest, AzureConfigureAuthRequest, AzureLoginRequest, @@ -257,6 +273,36 @@ import { AwsConfigureRoleTagDenyListTidyOperationRequestToJSON, AwsLoginRequestFromJSON, AwsLoginRequestToJSON, + AwsLoginResponseFromJSON, + AwsLoginResponseToJSON, + AwsReadAuthRoleResponseFromJSON, + AwsReadAuthRoleResponseToJSON, + AwsReadCertificateConfigurationResponseFromJSON, + AwsReadCertificateConfigurationResponseToJSON, + AwsReadClientConfigurationResponseFromJSON, + AwsReadClientConfigurationResponseToJSON, + AwsReadIdentityAccessListResponseFromJSON, + AwsReadIdentityAccessListResponseToJSON, + AwsReadIdentityAccessListTidySettingsResponseFromJSON, + AwsReadIdentityAccessListTidySettingsResponseToJSON, + AwsReadIdentityIntegrationConfigurationResponseFromJSON, + AwsReadIdentityIntegrationConfigurationResponseToJSON, + AwsReadIdentityWhitelistResponseFromJSON, + AwsReadIdentityWhitelistResponseToJSON, + AwsReadIdentityWhitelistTidySettingsResponseFromJSON, + AwsReadIdentityWhitelistTidySettingsResponseToJSON, + AwsReadRoleTagBlacklistResponseFromJSON, + AwsReadRoleTagBlacklistResponseToJSON, + AwsReadRoleTagBlacklistTidySettingsResponseFromJSON, + AwsReadRoleTagBlacklistTidySettingsResponseToJSON, + AwsReadRoleTagDenyListResponseFromJSON, + AwsReadRoleTagDenyListResponseToJSON, + AwsReadRoleTagDenyListTidySettingsResponseFromJSON, + AwsReadRoleTagDenyListTidySettingsResponseToJSON, + AwsReadStsRoleResponseFromJSON, + AwsReadStsRoleResponseToJSON, + AwsRotateRootCredentialsResponseFromJSON, + AwsRotateRootCredentialsResponseToJSON, AwsTidyIdentityAccessListRequestFromJSON, AwsTidyIdentityAccessListRequestToJSON, AwsTidyIdentityWhitelistRequestFromJSON, @@ -269,6 +315,8 @@ import { AwsWriteAuthRoleRequestToJSON, AwsWriteRoleTagRequestFromJSON, AwsWriteRoleTagRequestToJSON, + AwsWriteRoleTagResponseFromJSON, + AwsWriteRoleTagResponseToJSON, AwsWriteStsRoleRequestFromJSON, AwsWriteStsRoleRequestToJSON, AzureConfigureAuthRequestFromJSON, @@ -4331,6 +4379,7 @@ export class AuthApi extends runtime.BaseAPI { } /** + * Configure an AWS public key for PKCS7 or identity-document verification. */ async awsConfigureCertificateRaw(requestParameters: AuthApiAwsConfigureCertificateOperationRequest, initOverrides?: RequestInit | runtime.InitOverrideFunction): Promise> { if (requestParameters['cert_name'] == null) { @@ -4373,6 +4422,7 @@ export class AuthApi extends runtime.BaseAPI { } /** + * Configure an AWS public key for PKCS7 or identity-document verification. */ async awsConfigureCertificate(cert_name: string, aws_mount_path: string, AwsConfigureCertificateRequest: AwsConfigureCertificateRequest, initOverrides?: RequestInit | runtime.InitOverrideFunction): Promise { const response = await this.awsConfigureCertificateRaw({ cert_name: cert_name, aws_mount_path: aws_mount_path, AwsConfigureCertificateRequest: AwsConfigureCertificateRequest }, initOverrides); @@ -4380,6 +4430,7 @@ export class AuthApi extends runtime.BaseAPI { } /** + * Configure AWS IAM credentials used to query instance and role details. */ async awsConfigureClientRaw(requestParameters: AuthApiAwsConfigureClientOperationRequest, initOverrides?: RequestInit | runtime.InitOverrideFunction): Promise> { if (requestParameters['aws_mount_path'] == null) { @@ -4415,6 +4466,7 @@ export class AuthApi extends runtime.BaseAPI { } /** + * Configure AWS IAM credentials used to query instance and role details. */ async awsConfigureClient(aws_mount_path: string, AwsConfigureClientRequest: AwsConfigureClientRequest, initOverrides?: RequestInit | runtime.InitOverrideFunction): Promise { const response = await this.awsConfigureClientRaw({ aws_mount_path: aws_mount_path, AwsConfigureClientRequest: AwsConfigureClientRequest }, initOverrides); @@ -4422,6 +4474,7 @@ export class AuthApi extends runtime.BaseAPI { } /** + * Configure the identity access-list tidy operation. */ async awsConfigureIdentityAccessListTidyOperationRaw(requestParameters: AuthApiAwsConfigureIdentityAccessListTidyOperationOperationRequest, initOverrides?: RequestInit | runtime.InitOverrideFunction): Promise> { if (requestParameters['aws_mount_path'] == null) { @@ -4457,6 +4510,7 @@ export class AuthApi extends runtime.BaseAPI { } /** + * Configure the identity access-list tidy operation. */ async awsConfigureIdentityAccessListTidyOperation(aws_mount_path: string, AwsConfigureIdentityAccessListTidyOperationRequest: AwsConfigureIdentityAccessListTidyOperationRequest, initOverrides?: RequestInit | runtime.InitOverrideFunction): Promise { const response = await this.awsConfigureIdentityAccessListTidyOperationRaw({ aws_mount_path: aws_mount_path, AwsConfigureIdentityAccessListTidyOperationRequest: AwsConfigureIdentityAccessListTidyOperationRequest }, initOverrides); @@ -4464,6 +4518,7 @@ export class AuthApi extends runtime.BaseAPI { } /** + * Configure the AWS identity integration settings. */ async awsConfigureIdentityIntegrationRaw(requestParameters: AuthApiAwsConfigureIdentityIntegrationOperationRequest, initOverrides?: RequestInit | runtime.InitOverrideFunction): Promise> { if (requestParameters['aws_mount_path'] == null) { @@ -4499,6 +4554,7 @@ export class AuthApi extends runtime.BaseAPI { } /** + * Configure the AWS identity integration settings. */ async awsConfigureIdentityIntegration(aws_mount_path: string, AwsConfigureIdentityIntegrationRequest: AwsConfigureIdentityIntegrationRequest, initOverrides?: RequestInit | runtime.InitOverrideFunction): Promise { const response = await this.awsConfigureIdentityIntegrationRaw({ aws_mount_path: aws_mount_path, AwsConfigureIdentityIntegrationRequest: AwsConfigureIdentityIntegrationRequest }, initOverrides); @@ -4506,6 +4562,7 @@ export class AuthApi extends runtime.BaseAPI { } /** + * Configure the identity access-list tidy operation. */ async awsConfigureIdentityWhitelistTidyOperationRaw(requestParameters: AuthApiAwsConfigureIdentityWhitelistTidyOperationOperationRequest, initOverrides?: RequestInit | runtime.InitOverrideFunction): Promise> { if (requestParameters['aws_mount_path'] == null) { @@ -4541,6 +4598,7 @@ export class AuthApi extends runtime.BaseAPI { } /** + * Configure the identity access-list tidy operation. */ async awsConfigureIdentityWhitelistTidyOperation(aws_mount_path: string, AwsConfigureIdentityWhitelistTidyOperationRequest: AwsConfigureIdentityWhitelistTidyOperationRequest, initOverrides?: RequestInit | runtime.InitOverrideFunction): Promise { const response = await this.awsConfigureIdentityWhitelistTidyOperationRaw({ aws_mount_path: aws_mount_path, AwsConfigureIdentityWhitelistTidyOperationRequest: AwsConfigureIdentityWhitelistTidyOperationRequest }, initOverrides); @@ -4548,6 +4606,7 @@ export class AuthApi extends runtime.BaseAPI { } /** + * Configure the role-tag deny-list tidy operation. */ async awsConfigureRoleTagBlacklistTidyOperationRaw(requestParameters: AuthApiAwsConfigureRoleTagBlacklistTidyOperationOperationRequest, initOverrides?: RequestInit | runtime.InitOverrideFunction): Promise> { if (requestParameters['aws_mount_path'] == null) { @@ -4583,6 +4642,7 @@ export class AuthApi extends runtime.BaseAPI { } /** + * Configure the role-tag deny-list tidy operation. */ async awsConfigureRoleTagBlacklistTidyOperation(aws_mount_path: string, AwsConfigureRoleTagBlacklistTidyOperationRequest: AwsConfigureRoleTagBlacklistTidyOperationRequest, initOverrides?: RequestInit | runtime.InitOverrideFunction): Promise { const response = await this.awsConfigureRoleTagBlacklistTidyOperationRaw({ aws_mount_path: aws_mount_path, AwsConfigureRoleTagBlacklistTidyOperationRequest: AwsConfigureRoleTagBlacklistTidyOperationRequest }, initOverrides); @@ -4590,6 +4650,7 @@ export class AuthApi extends runtime.BaseAPI { } /** + * Configure the role-tag deny-list tidy operation. */ async awsConfigureRoleTagDenyListTidyOperationRaw(requestParameters: AuthApiAwsConfigureRoleTagDenyListTidyOperationOperationRequest, initOverrides?: RequestInit | runtime.InitOverrideFunction): Promise> { if (requestParameters['aws_mount_path'] == null) { @@ -4625,6 +4686,7 @@ export class AuthApi extends runtime.BaseAPI { } /** + * Configure the role-tag deny-list tidy operation. */ async awsConfigureRoleTagDenyListTidyOperation(aws_mount_path: string, AwsConfigureRoleTagDenyListTidyOperationRequest: AwsConfigureRoleTagDenyListTidyOperationRequest, initOverrides?: RequestInit | runtime.InitOverrideFunction): Promise { const response = await this.awsConfigureRoleTagDenyListTidyOperationRaw({ aws_mount_path: aws_mount_path, AwsConfigureRoleTagDenyListTidyOperationRequest: AwsConfigureRoleTagDenyListTidyOperationRequest }, initOverrides); @@ -4632,6 +4694,7 @@ export class AuthApi extends runtime.BaseAPI { } /** + * Delete a named AWS auth role. */ async awsDeleteAuthRoleRaw(requestParameters: AuthApiAwsDeleteAuthRoleRequest, initOverrides?: RequestInit | runtime.InitOverrideFunction): Promise> { if (requestParameters['role'] == null) { @@ -4664,6 +4727,7 @@ export class AuthApi extends runtime.BaseAPI { } /** + * Delete a named AWS auth role. */ async awsDeleteAuthRole(role: string, aws_mount_path: string, initOverrides?: RequestInit | runtime.InitOverrideFunction): Promise { const response = await this.awsDeleteAuthRoleRaw({ role: role, aws_mount_path: aws_mount_path }, initOverrides); @@ -4671,6 +4735,7 @@ export class AuthApi extends runtime.BaseAPI { } /** + * Delete the configured AWS public certificate. */ async awsDeleteCertificateConfigurationRaw(requestParameters: AuthApiAwsDeleteCertificateConfigurationRequest, initOverrides?: RequestInit | runtime.InitOverrideFunction): Promise> { if (requestParameters['cert_name'] == null) { @@ -4703,6 +4768,7 @@ export class AuthApi extends runtime.BaseAPI { } /** + * Delete the configured AWS public certificate. */ async awsDeleteCertificateConfiguration(cert_name: string, aws_mount_path: string, initOverrides?: RequestInit | runtime.InitOverrideFunction): Promise { const response = await this.awsDeleteCertificateConfigurationRaw({ cert_name: cert_name, aws_mount_path: aws_mount_path }, initOverrides); @@ -4710,6 +4776,7 @@ export class AuthApi extends runtime.BaseAPI { } /** + * Delete the AWS client configuration. */ async awsDeleteClientConfigurationRaw(requestParameters: AuthApiAwsDeleteClientConfigurationRequest, initOverrides?: RequestInit | runtime.InitOverrideFunction): Promise> { if (requestParameters['aws_mount_path'] == null) { @@ -4735,6 +4802,7 @@ export class AuthApi extends runtime.BaseAPI { } /** + * Delete the AWS client configuration. */ async awsDeleteClientConfiguration(aws_mount_path: string, initOverrides?: RequestInit | runtime.InitOverrideFunction): Promise { const response = await this.awsDeleteClientConfigurationRaw({ aws_mount_path: aws_mount_path }, initOverrides); @@ -4742,6 +4810,7 @@ export class AuthApi extends runtime.BaseAPI { } /** + * Delete the access-list entry for the given EC2 instance ID. */ async awsDeleteIdentityAccessListRaw(requestParameters: AuthApiAwsDeleteIdentityAccessListRequest, initOverrides?: RequestInit | runtime.InitOverrideFunction): Promise> { if (requestParameters['instance_id'] == null) { @@ -4774,6 +4843,7 @@ export class AuthApi extends runtime.BaseAPI { } /** + * Delete the access-list entry for the given EC2 instance ID. */ async awsDeleteIdentityAccessList(instance_id: string, aws_mount_path: string, initOverrides?: RequestInit | runtime.InitOverrideFunction): Promise { const response = await this.awsDeleteIdentityAccessListRaw({ instance_id: instance_id, aws_mount_path: aws_mount_path }, initOverrides); @@ -4781,6 +4851,7 @@ export class AuthApi extends runtime.BaseAPI { } /** + * Delete the identity access-list tidy configuration. */ async awsDeleteIdentityAccessListTidySettingsRaw(requestParameters: AuthApiAwsDeleteIdentityAccessListTidySettingsRequest, initOverrides?: RequestInit | runtime.InitOverrideFunction): Promise> { if (requestParameters['aws_mount_path'] == null) { @@ -4806,6 +4877,7 @@ export class AuthApi extends runtime.BaseAPI { } /** + * Delete the identity access-list tidy configuration. */ async awsDeleteIdentityAccessListTidySettings(aws_mount_path: string, initOverrides?: RequestInit | runtime.InitOverrideFunction): Promise { const response = await this.awsDeleteIdentityAccessListTidySettingsRaw({ aws_mount_path: aws_mount_path }, initOverrides); @@ -4813,6 +4885,7 @@ export class AuthApi extends runtime.BaseAPI { } /** + * Delete the access-list entry for the given EC2 instance ID. */ async awsDeleteIdentityWhitelistRaw(requestParameters: AuthApiAwsDeleteIdentityWhitelistRequest, initOverrides?: RequestInit | runtime.InitOverrideFunction): Promise> { if (requestParameters['instance_id'] == null) { @@ -4845,6 +4918,7 @@ export class AuthApi extends runtime.BaseAPI { } /** + * Delete the access-list entry for the given EC2 instance ID. */ async awsDeleteIdentityWhitelist(instance_id: string, aws_mount_path: string, initOverrides?: RequestInit | runtime.InitOverrideFunction): Promise { const response = await this.awsDeleteIdentityWhitelistRaw({ instance_id: instance_id, aws_mount_path: aws_mount_path }, initOverrides); @@ -4852,6 +4926,7 @@ export class AuthApi extends runtime.BaseAPI { } /** + * Delete the identity access-list tidy configuration. */ async awsDeleteIdentityWhitelistTidySettingsRaw(requestParameters: AuthApiAwsDeleteIdentityWhitelistTidySettingsRequest, initOverrides?: RequestInit | runtime.InitOverrideFunction): Promise> { if (requestParameters['aws_mount_path'] == null) { @@ -4877,6 +4952,7 @@ export class AuthApi extends runtime.BaseAPI { } /** + * Delete the identity access-list tidy configuration. */ async awsDeleteIdentityWhitelistTidySettings(aws_mount_path: string, initOverrides?: RequestInit | runtime.InitOverrideFunction): Promise { const response = await this.awsDeleteIdentityWhitelistTidySettingsRaw({ aws_mount_path: aws_mount_path }, initOverrides); @@ -4884,6 +4960,7 @@ export class AuthApi extends runtime.BaseAPI { } /** + * Delete the deny-list entry for the given role tag. */ async awsDeleteRoleTagBlacklistRaw(requestParameters: AuthApiAwsDeleteRoleTagBlacklistRequest, initOverrides?: RequestInit | runtime.InitOverrideFunction): Promise> { if (requestParameters['role_tag'] == null) { @@ -4916,6 +4993,7 @@ export class AuthApi extends runtime.BaseAPI { } /** + * Delete the deny-list entry for the given role tag. */ async awsDeleteRoleTagBlacklist(role_tag: string, aws_mount_path: string, initOverrides?: RequestInit | runtime.InitOverrideFunction): Promise { const response = await this.awsDeleteRoleTagBlacklistRaw({ role_tag: role_tag, aws_mount_path: aws_mount_path }, initOverrides); @@ -4923,6 +5001,7 @@ export class AuthApi extends runtime.BaseAPI { } /** + * Delete the role-tag deny-list tidy configuration. */ async awsDeleteRoleTagBlacklistTidySettingsRaw(requestParameters: AuthApiAwsDeleteRoleTagBlacklistTidySettingsRequest, initOverrides?: RequestInit | runtime.InitOverrideFunction): Promise> { if (requestParameters['aws_mount_path'] == null) { @@ -4948,6 +5027,7 @@ export class AuthApi extends runtime.BaseAPI { } /** + * Delete the role-tag deny-list tidy configuration. */ async awsDeleteRoleTagBlacklistTidySettings(aws_mount_path: string, initOverrides?: RequestInit | runtime.InitOverrideFunction): Promise { const response = await this.awsDeleteRoleTagBlacklistTidySettingsRaw({ aws_mount_path: aws_mount_path }, initOverrides); @@ -4955,6 +5035,7 @@ export class AuthApi extends runtime.BaseAPI { } /** + * Delete the deny-list entry for the given role tag. */ async awsDeleteRoleTagDenyListRaw(requestParameters: AuthApiAwsDeleteRoleTagDenyListRequest, initOverrides?: RequestInit | runtime.InitOverrideFunction): Promise> { if (requestParameters['role_tag'] == null) { @@ -4987,6 +5068,7 @@ export class AuthApi extends runtime.BaseAPI { } /** + * Delete the deny-list entry for the given role tag. */ async awsDeleteRoleTagDenyList(role_tag: string, aws_mount_path: string, initOverrides?: RequestInit | runtime.InitOverrideFunction): Promise { const response = await this.awsDeleteRoleTagDenyListRaw({ role_tag: role_tag, aws_mount_path: aws_mount_path }, initOverrides); @@ -4994,6 +5076,7 @@ export class AuthApi extends runtime.BaseAPI { } /** + * Delete the role-tag deny-list tidy configuration. */ async awsDeleteRoleTagDenyListTidySettingsRaw(requestParameters: AuthApiAwsDeleteRoleTagDenyListTidySettingsRequest, initOverrides?: RequestInit | runtime.InitOverrideFunction): Promise> { if (requestParameters['aws_mount_path'] == null) { @@ -5019,6 +5102,7 @@ export class AuthApi extends runtime.BaseAPI { } /** + * Delete the role-tag deny-list tidy configuration. */ async awsDeleteRoleTagDenyListTidySettings(aws_mount_path: string, initOverrides?: RequestInit | runtime.InitOverrideFunction): Promise { const response = await this.awsDeleteRoleTagDenyListTidySettingsRaw({ aws_mount_path: aws_mount_path }, initOverrides); @@ -5026,6 +5110,7 @@ export class AuthApi extends runtime.BaseAPI { } /** + * Delete the configured STS role for a given AWS account. */ async awsDeleteStsRoleRaw(requestParameters: AuthApiAwsDeleteStsRoleRequest, initOverrides?: RequestInit | runtime.InitOverrideFunction): Promise> { if (requestParameters['account_id'] == null) { @@ -5058,6 +5143,7 @@ export class AuthApi extends runtime.BaseAPI { } /** + * Delete the configured STS role for a given AWS account. */ async awsDeleteStsRole(account_id: string, aws_mount_path: string, initOverrides?: RequestInit | runtime.InitOverrideFunction): Promise { const response = await this.awsDeleteStsRoleRaw({ account_id: account_id, aws_mount_path: aws_mount_path }, initOverrides); @@ -5065,6 +5151,7 @@ export class AuthApi extends runtime.BaseAPI { } /** + * List the configured AWS auth roles. */ async awsListAuthRolesRaw(requestParameters: AuthApiAwsListAuthRolesRequest, initOverrides?: RequestInit | runtime.InitOverrideFunction): Promise> { if (requestParameters['aws_mount_path'] == null) { @@ -5101,6 +5188,7 @@ export class AuthApi extends runtime.BaseAPI { } /** + * List the configured AWS auth roles. */ async awsListAuthRoles(aws_mount_path: string, list: AuthApiAwsListAuthRolesListEnum, initOverrides?: RequestInit | runtime.InitOverrideFunction): Promise { const response = await this.awsListAuthRolesRaw({ aws_mount_path: aws_mount_path, list: list }, initOverrides); @@ -5108,6 +5196,7 @@ export class AuthApi extends runtime.BaseAPI { } /** + * List the configured AWS auth roles. */ async awsListAuthRoles2Raw(requestParameters: AuthApiAwsListAuthRoles2Request, initOverrides?: RequestInit | runtime.InitOverrideFunction): Promise> { if (requestParameters['aws_mount_path'] == null) { @@ -5144,6 +5233,7 @@ export class AuthApi extends runtime.BaseAPI { } /** + * List the configured AWS auth roles. */ async awsListAuthRoles2(aws_mount_path: string, list: AuthApiAwsListAuthRoles2ListEnum, initOverrides?: RequestInit | runtime.InitOverrideFunction): Promise { const response = await this.awsListAuthRoles2Raw({ aws_mount_path: aws_mount_path, list: list }, initOverrides); @@ -5151,6 +5241,7 @@ export class AuthApi extends runtime.BaseAPI { } /** + * List the configured AWS public certificates. */ async awsListCertificateConfigurationsRaw(requestParameters: AuthApiAwsListCertificateConfigurationsRequest, initOverrides?: RequestInit | runtime.InitOverrideFunction): Promise> { if (requestParameters['aws_mount_path'] == null) { @@ -5187,6 +5278,7 @@ export class AuthApi extends runtime.BaseAPI { } /** + * List the configured AWS public certificates. */ async awsListCertificateConfigurations(aws_mount_path: string, list: AuthApiAwsListCertificateConfigurationsListEnum, initOverrides?: RequestInit | runtime.InitOverrideFunction): Promise { const response = await this.awsListCertificateConfigurationsRaw({ aws_mount_path: aws_mount_path, list: list }, initOverrides); @@ -5194,6 +5286,7 @@ export class AuthApi extends runtime.BaseAPI { } /** + * List the EC2 instance IDs in the identity access list. */ async awsListIdentityAccessListRaw(requestParameters: AuthApiAwsListIdentityAccessListRequest, initOverrides?: RequestInit | runtime.InitOverrideFunction): Promise> { if (requestParameters['aws_mount_path'] == null) { @@ -5230,6 +5323,7 @@ export class AuthApi extends runtime.BaseAPI { } /** + * List the EC2 instance IDs in the identity access list. */ async awsListIdentityAccessList(aws_mount_path: string, list: AuthApiAwsListIdentityAccessListListEnum, initOverrides?: RequestInit | runtime.InitOverrideFunction): Promise { const response = await this.awsListIdentityAccessListRaw({ aws_mount_path: aws_mount_path, list: list }, initOverrides); @@ -5237,6 +5331,7 @@ export class AuthApi extends runtime.BaseAPI { } /** + * List the EC2 instance IDs in the identity access list. */ async awsListIdentityWhitelistRaw(requestParameters: AuthApiAwsListIdentityWhitelistRequest, initOverrides?: RequestInit | runtime.InitOverrideFunction): Promise> { if (requestParameters['aws_mount_path'] == null) { @@ -5273,6 +5368,7 @@ export class AuthApi extends runtime.BaseAPI { } /** + * List the EC2 instance IDs in the identity access list. */ async awsListIdentityWhitelist(aws_mount_path: string, list: AuthApiAwsListIdentityWhitelistListEnum, initOverrides?: RequestInit | runtime.InitOverrideFunction): Promise { const response = await this.awsListIdentityWhitelistRaw({ aws_mount_path: aws_mount_path, list: list }, initOverrides); @@ -5280,6 +5376,7 @@ export class AuthApi extends runtime.BaseAPI { } /** + * List the deny-listed role tags. */ async awsListRoleTagBlacklistsRaw(requestParameters: AuthApiAwsListRoleTagBlacklistsRequest, initOverrides?: RequestInit | runtime.InitOverrideFunction): Promise> { if (requestParameters['aws_mount_path'] == null) { @@ -5316,6 +5413,7 @@ export class AuthApi extends runtime.BaseAPI { } /** + * List the deny-listed role tags. */ async awsListRoleTagBlacklists(aws_mount_path: string, list: AuthApiAwsListRoleTagBlacklistsListEnum, initOverrides?: RequestInit | runtime.InitOverrideFunction): Promise { const response = await this.awsListRoleTagBlacklistsRaw({ aws_mount_path: aws_mount_path, list: list }, initOverrides); @@ -5323,6 +5421,7 @@ export class AuthApi extends runtime.BaseAPI { } /** + * List the deny-listed role tags. */ async awsListRoleTagDenyListsRaw(requestParameters: AuthApiAwsListRoleTagDenyListsRequest, initOverrides?: RequestInit | runtime.InitOverrideFunction): Promise> { if (requestParameters['aws_mount_path'] == null) { @@ -5359,6 +5458,7 @@ export class AuthApi extends runtime.BaseAPI { } /** + * List the deny-listed role tags. */ async awsListRoleTagDenyLists(aws_mount_path: string, list: AuthApiAwsListRoleTagDenyListsListEnum, initOverrides?: RequestInit | runtime.InitOverrideFunction): Promise { const response = await this.awsListRoleTagDenyListsRaw({ aws_mount_path: aws_mount_path, list: list }, initOverrides); @@ -5366,6 +5466,7 @@ export class AuthApi extends runtime.BaseAPI { } /** + * List the configured STS roles for all AWS accounts. */ async awsListStsRoleRelationshipsRaw(requestParameters: AuthApiAwsListStsRoleRelationshipsRequest, initOverrides?: RequestInit | runtime.InitOverrideFunction): Promise> { if (requestParameters['aws_mount_path'] == null) { @@ -5402,6 +5503,7 @@ export class AuthApi extends runtime.BaseAPI { } /** + * List the configured STS roles for all AWS accounts. */ async awsListStsRoleRelationships(aws_mount_path: string, list: AuthApiAwsListStsRoleRelationshipsListEnum, initOverrides?: RequestInit | runtime.InitOverrideFunction): Promise { const response = await this.awsListStsRoleRelationshipsRaw({ aws_mount_path: aws_mount_path, list: list }, initOverrides); @@ -5409,8 +5511,9 @@ export class AuthApi extends runtime.BaseAPI { } /** + * Authenticate to Vault using AWS credentials. */ - async awsLoginRaw(requestParameters: AuthApiAwsLoginOperationRequest, initOverrides?: RequestInit | runtime.InitOverrideFunction): Promise> { + async awsLoginRaw(requestParameters: AuthApiAwsLoginOperationRequest, initOverrides?: RequestInit | runtime.InitOverrideFunction): Promise> { if (requestParameters['aws_mount_path'] == null) { throw new runtime.RequiredError( 'aws_mount_path', @@ -5440,19 +5543,21 @@ export class AuthApi extends runtime.BaseAPI { body: AwsLoginRequestToJSON(requestParameters['AwsLoginRequest']), }, initOverrides); - return new runtime.VoidApiResponse(response); + return new runtime.JSONApiResponse(response, (jsonValue) => AwsLoginResponseFromJSON(jsonValue)); } /** + * Authenticate to Vault using AWS credentials. */ - async awsLogin(aws_mount_path: string, AwsLoginRequest: AwsLoginRequest, initOverrides?: RequestInit | runtime.InitOverrideFunction): Promise { + async awsLogin(aws_mount_path: string, AwsLoginRequest: AwsLoginRequest, initOverrides?: RequestInit | runtime.InitOverrideFunction): Promise { const response = await this.awsLoginRaw({ aws_mount_path: aws_mount_path, AwsLoginRequest: AwsLoginRequest }, initOverrides); return await response.value(); } /** + * Return the configuration for a named AWS auth role. */ - async awsReadAuthRoleRaw(requestParameters: AuthApiAwsReadAuthRoleRequest, initOverrides?: RequestInit | runtime.InitOverrideFunction): Promise> { + async awsReadAuthRoleRaw(requestParameters: AuthApiAwsReadAuthRoleRequest, initOverrides?: RequestInit | runtime.InitOverrideFunction): Promise> { if (requestParameters['role'] == null) { throw new runtime.RequiredError( 'role', @@ -5479,19 +5584,21 @@ export class AuthApi extends runtime.BaseAPI { query: queryParameters, }, initOverrides); - return new runtime.VoidApiResponse(response); + return new runtime.JSONApiResponse(response, (jsonValue) => AwsReadAuthRoleResponseFromJSON(jsonValue)); } /** + * Return the configuration for a named AWS auth role. */ - async awsReadAuthRole(role: string, aws_mount_path: string, initOverrides?: RequestInit | runtime.InitOverrideFunction): Promise { + async awsReadAuthRole(role: string, aws_mount_path: string, initOverrides?: RequestInit | runtime.InitOverrideFunction): Promise { const response = await this.awsReadAuthRoleRaw({ role: role, aws_mount_path: aws_mount_path }, initOverrides); return await response.value(); } /** + * Return the configured AWS public certificate. */ - async awsReadCertificateConfigurationRaw(requestParameters: AuthApiAwsReadCertificateConfigurationRequest, initOverrides?: RequestInit | runtime.InitOverrideFunction): Promise> { + async awsReadCertificateConfigurationRaw(requestParameters: AuthApiAwsReadCertificateConfigurationRequest, initOverrides?: RequestInit | runtime.InitOverrideFunction): Promise> { if (requestParameters['cert_name'] == null) { throw new runtime.RequiredError( 'cert_name', @@ -5518,19 +5625,21 @@ export class AuthApi extends runtime.BaseAPI { query: queryParameters, }, initOverrides); - return new runtime.VoidApiResponse(response); + return new runtime.JSONApiResponse(response, (jsonValue) => AwsReadCertificateConfigurationResponseFromJSON(jsonValue)); } /** + * Return the configured AWS public certificate. */ - async awsReadCertificateConfiguration(cert_name: string, aws_mount_path: string, initOverrides?: RequestInit | runtime.InitOverrideFunction): Promise { + async awsReadCertificateConfiguration(cert_name: string, aws_mount_path: string, initOverrides?: RequestInit | runtime.InitOverrideFunction): Promise { const response = await this.awsReadCertificateConfigurationRaw({ cert_name: cert_name, aws_mount_path: aws_mount_path }, initOverrides); return await response.value(); } /** + * Return the configured AWS client credentials. */ - async awsReadClientConfigurationRaw(requestParameters: AuthApiAwsReadClientConfigurationRequest, initOverrides?: RequestInit | runtime.InitOverrideFunction): Promise> { + async awsReadClientConfigurationRaw(requestParameters: AuthApiAwsReadClientConfigurationRequest, initOverrides?: RequestInit | runtime.InitOverrideFunction): Promise> { if (requestParameters['aws_mount_path'] == null) { throw new runtime.RequiredError( 'aws_mount_path', @@ -5550,19 +5659,21 @@ export class AuthApi extends runtime.BaseAPI { query: queryParameters, }, initOverrides); - return new runtime.VoidApiResponse(response); + return new runtime.JSONApiResponse(response, (jsonValue) => AwsReadClientConfigurationResponseFromJSON(jsonValue)); } /** + * Return the configured AWS client credentials. */ - async awsReadClientConfiguration(aws_mount_path: string, initOverrides?: RequestInit | runtime.InitOverrideFunction): Promise { + async awsReadClientConfiguration(aws_mount_path: string, initOverrides?: RequestInit | runtime.InitOverrideFunction): Promise { const response = await this.awsReadClientConfigurationRaw({ aws_mount_path: aws_mount_path }, initOverrides); return await response.value(); } /** + * Return the access-list entry for the given EC2 instance ID. */ - async awsReadIdentityAccessListRaw(requestParameters: AuthApiAwsReadIdentityAccessListRequest, initOverrides?: RequestInit | runtime.InitOverrideFunction): Promise> { + async awsReadIdentityAccessListRaw(requestParameters: AuthApiAwsReadIdentityAccessListRequest, initOverrides?: RequestInit | runtime.InitOverrideFunction): Promise> { if (requestParameters['instance_id'] == null) { throw new runtime.RequiredError( 'instance_id', @@ -5589,19 +5700,21 @@ export class AuthApi extends runtime.BaseAPI { query: queryParameters, }, initOverrides); - return new runtime.VoidApiResponse(response); + return new runtime.JSONApiResponse(response, (jsonValue) => AwsReadIdentityAccessListResponseFromJSON(jsonValue)); } /** + * Return the access-list entry for the given EC2 instance ID. */ - async awsReadIdentityAccessList(instance_id: string, aws_mount_path: string, initOverrides?: RequestInit | runtime.InitOverrideFunction): Promise { + async awsReadIdentityAccessList(instance_id: string, aws_mount_path: string, initOverrides?: RequestInit | runtime.InitOverrideFunction): Promise { const response = await this.awsReadIdentityAccessListRaw({ instance_id: instance_id, aws_mount_path: aws_mount_path }, initOverrides); return await response.value(); } /** + * Return the identity access-list tidy configuration. */ - async awsReadIdentityAccessListTidySettingsRaw(requestParameters: AuthApiAwsReadIdentityAccessListTidySettingsRequest, initOverrides?: RequestInit | runtime.InitOverrideFunction): Promise> { + async awsReadIdentityAccessListTidySettingsRaw(requestParameters: AuthApiAwsReadIdentityAccessListTidySettingsRequest, initOverrides?: RequestInit | runtime.InitOverrideFunction): Promise> { if (requestParameters['aws_mount_path'] == null) { throw new runtime.RequiredError( 'aws_mount_path', @@ -5621,19 +5734,21 @@ export class AuthApi extends runtime.BaseAPI { query: queryParameters, }, initOverrides); - return new runtime.VoidApiResponse(response); + return new runtime.JSONApiResponse(response, (jsonValue) => AwsReadIdentityAccessListTidySettingsResponseFromJSON(jsonValue)); } /** + * Return the identity access-list tidy configuration. */ - async awsReadIdentityAccessListTidySettings(aws_mount_path: string, initOverrides?: RequestInit | runtime.InitOverrideFunction): Promise { + async awsReadIdentityAccessListTidySettings(aws_mount_path: string, initOverrides?: RequestInit | runtime.InitOverrideFunction): Promise { const response = await this.awsReadIdentityAccessListTidySettingsRaw({ aws_mount_path: aws_mount_path }, initOverrides); return await response.value(); } /** + * Return the AWS identity integration configuration. */ - async awsReadIdentityIntegrationConfigurationRaw(requestParameters: AuthApiAwsReadIdentityIntegrationConfigurationRequest, initOverrides?: RequestInit | runtime.InitOverrideFunction): Promise> { + async awsReadIdentityIntegrationConfigurationRaw(requestParameters: AuthApiAwsReadIdentityIntegrationConfigurationRequest, initOverrides?: RequestInit | runtime.InitOverrideFunction): Promise> { if (requestParameters['aws_mount_path'] == null) { throw new runtime.RequiredError( 'aws_mount_path', @@ -5653,19 +5768,21 @@ export class AuthApi extends runtime.BaseAPI { query: queryParameters, }, initOverrides); - return new runtime.VoidApiResponse(response); + return new runtime.JSONApiResponse(response, (jsonValue) => AwsReadIdentityIntegrationConfigurationResponseFromJSON(jsonValue)); } /** + * Return the AWS identity integration configuration. */ - async awsReadIdentityIntegrationConfiguration(aws_mount_path: string, initOverrides?: RequestInit | runtime.InitOverrideFunction): Promise { + async awsReadIdentityIntegrationConfiguration(aws_mount_path: string, initOverrides?: RequestInit | runtime.InitOverrideFunction): Promise { const response = await this.awsReadIdentityIntegrationConfigurationRaw({ aws_mount_path: aws_mount_path }, initOverrides); return await response.value(); } /** + * Return the access-list entry for the given EC2 instance ID. */ - async awsReadIdentityWhitelistRaw(requestParameters: AuthApiAwsReadIdentityWhitelistRequest, initOverrides?: RequestInit | runtime.InitOverrideFunction): Promise> { + async awsReadIdentityWhitelistRaw(requestParameters: AuthApiAwsReadIdentityWhitelistRequest, initOverrides?: RequestInit | runtime.InitOverrideFunction): Promise> { if (requestParameters['instance_id'] == null) { throw new runtime.RequiredError( 'instance_id', @@ -5692,19 +5809,21 @@ export class AuthApi extends runtime.BaseAPI { query: queryParameters, }, initOverrides); - return new runtime.VoidApiResponse(response); + return new runtime.JSONApiResponse(response, (jsonValue) => AwsReadIdentityWhitelistResponseFromJSON(jsonValue)); } /** + * Return the access-list entry for the given EC2 instance ID. */ - async awsReadIdentityWhitelist(instance_id: string, aws_mount_path: string, initOverrides?: RequestInit | runtime.InitOverrideFunction): Promise { + async awsReadIdentityWhitelist(instance_id: string, aws_mount_path: string, initOverrides?: RequestInit | runtime.InitOverrideFunction): Promise { const response = await this.awsReadIdentityWhitelistRaw({ instance_id: instance_id, aws_mount_path: aws_mount_path }, initOverrides); return await response.value(); } /** + * Return the identity access-list tidy configuration. */ - async awsReadIdentityWhitelistTidySettingsRaw(requestParameters: AuthApiAwsReadIdentityWhitelistTidySettingsRequest, initOverrides?: RequestInit | runtime.InitOverrideFunction): Promise> { + async awsReadIdentityWhitelistTidySettingsRaw(requestParameters: AuthApiAwsReadIdentityWhitelistTidySettingsRequest, initOverrides?: RequestInit | runtime.InitOverrideFunction): Promise> { if (requestParameters['aws_mount_path'] == null) { throw new runtime.RequiredError( 'aws_mount_path', @@ -5724,19 +5843,21 @@ export class AuthApi extends runtime.BaseAPI { query: queryParameters, }, initOverrides); - return new runtime.VoidApiResponse(response); + return new runtime.JSONApiResponse(response, (jsonValue) => AwsReadIdentityWhitelistTidySettingsResponseFromJSON(jsonValue)); } /** + * Return the identity access-list tidy configuration. */ - async awsReadIdentityWhitelistTidySettings(aws_mount_path: string, initOverrides?: RequestInit | runtime.InitOverrideFunction): Promise { + async awsReadIdentityWhitelistTidySettings(aws_mount_path: string, initOverrides?: RequestInit | runtime.InitOverrideFunction): Promise { const response = await this.awsReadIdentityWhitelistTidySettingsRaw({ aws_mount_path: aws_mount_path }, initOverrides); return await response.value(); } /** + * Return the deny-list entry for the given role tag. */ - async awsReadRoleTagBlacklistRaw(requestParameters: AuthApiAwsReadRoleTagBlacklistRequest, initOverrides?: RequestInit | runtime.InitOverrideFunction): Promise> { + async awsReadRoleTagBlacklistRaw(requestParameters: AuthApiAwsReadRoleTagBlacklistRequest, initOverrides?: RequestInit | runtime.InitOverrideFunction): Promise> { if (requestParameters['role_tag'] == null) { throw new runtime.RequiredError( 'role_tag', @@ -5763,19 +5884,21 @@ export class AuthApi extends runtime.BaseAPI { query: queryParameters, }, initOverrides); - return new runtime.VoidApiResponse(response); + return new runtime.JSONApiResponse(response, (jsonValue) => AwsReadRoleTagBlacklistResponseFromJSON(jsonValue)); } /** + * Return the deny-list entry for the given role tag. */ - async awsReadRoleTagBlacklist(role_tag: string, aws_mount_path: string, initOverrides?: RequestInit | runtime.InitOverrideFunction): Promise { + async awsReadRoleTagBlacklist(role_tag: string, aws_mount_path: string, initOverrides?: RequestInit | runtime.InitOverrideFunction): Promise { const response = await this.awsReadRoleTagBlacklistRaw({ role_tag: role_tag, aws_mount_path: aws_mount_path }, initOverrides); return await response.value(); } /** + * Return the role-tag deny-list tidy configuration. */ - async awsReadRoleTagBlacklistTidySettingsRaw(requestParameters: AuthApiAwsReadRoleTagBlacklistTidySettingsRequest, initOverrides?: RequestInit | runtime.InitOverrideFunction): Promise> { + async awsReadRoleTagBlacklistTidySettingsRaw(requestParameters: AuthApiAwsReadRoleTagBlacklistTidySettingsRequest, initOverrides?: RequestInit | runtime.InitOverrideFunction): Promise> { if (requestParameters['aws_mount_path'] == null) { throw new runtime.RequiredError( 'aws_mount_path', @@ -5795,19 +5918,21 @@ export class AuthApi extends runtime.BaseAPI { query: queryParameters, }, initOverrides); - return new runtime.VoidApiResponse(response); + return new runtime.JSONApiResponse(response, (jsonValue) => AwsReadRoleTagBlacklistTidySettingsResponseFromJSON(jsonValue)); } /** + * Return the role-tag deny-list tidy configuration. */ - async awsReadRoleTagBlacklistTidySettings(aws_mount_path: string, initOverrides?: RequestInit | runtime.InitOverrideFunction): Promise { + async awsReadRoleTagBlacklistTidySettings(aws_mount_path: string, initOverrides?: RequestInit | runtime.InitOverrideFunction): Promise { const response = await this.awsReadRoleTagBlacklistTidySettingsRaw({ aws_mount_path: aws_mount_path }, initOverrides); return await response.value(); } /** + * Return the deny-list entry for the given role tag. */ - async awsReadRoleTagDenyListRaw(requestParameters: AuthApiAwsReadRoleTagDenyListRequest, initOverrides?: RequestInit | runtime.InitOverrideFunction): Promise> { + async awsReadRoleTagDenyListRaw(requestParameters: AuthApiAwsReadRoleTagDenyListRequest, initOverrides?: RequestInit | runtime.InitOverrideFunction): Promise> { if (requestParameters['role_tag'] == null) { throw new runtime.RequiredError( 'role_tag', @@ -5834,19 +5959,21 @@ export class AuthApi extends runtime.BaseAPI { query: queryParameters, }, initOverrides); - return new runtime.VoidApiResponse(response); + return new runtime.JSONApiResponse(response, (jsonValue) => AwsReadRoleTagDenyListResponseFromJSON(jsonValue)); } /** + * Return the deny-list entry for the given role tag. */ - async awsReadRoleTagDenyList(role_tag: string, aws_mount_path: string, initOverrides?: RequestInit | runtime.InitOverrideFunction): Promise { + async awsReadRoleTagDenyList(role_tag: string, aws_mount_path: string, initOverrides?: RequestInit | runtime.InitOverrideFunction): Promise { const response = await this.awsReadRoleTagDenyListRaw({ role_tag: role_tag, aws_mount_path: aws_mount_path }, initOverrides); return await response.value(); } /** + * Return the role-tag deny-list tidy configuration. */ - async awsReadRoleTagDenyListTidySettingsRaw(requestParameters: AuthApiAwsReadRoleTagDenyListTidySettingsRequest, initOverrides?: RequestInit | runtime.InitOverrideFunction): Promise> { + async awsReadRoleTagDenyListTidySettingsRaw(requestParameters: AuthApiAwsReadRoleTagDenyListTidySettingsRequest, initOverrides?: RequestInit | runtime.InitOverrideFunction): Promise> { if (requestParameters['aws_mount_path'] == null) { throw new runtime.RequiredError( 'aws_mount_path', @@ -5866,19 +5993,21 @@ export class AuthApi extends runtime.BaseAPI { query: queryParameters, }, initOverrides); - return new runtime.VoidApiResponse(response); + return new runtime.JSONApiResponse(response, (jsonValue) => AwsReadRoleTagDenyListTidySettingsResponseFromJSON(jsonValue)); } /** + * Return the role-tag deny-list tidy configuration. */ - async awsReadRoleTagDenyListTidySettings(aws_mount_path: string, initOverrides?: RequestInit | runtime.InitOverrideFunction): Promise { + async awsReadRoleTagDenyListTidySettings(aws_mount_path: string, initOverrides?: RequestInit | runtime.InitOverrideFunction): Promise { const response = await this.awsReadRoleTagDenyListTidySettingsRaw({ aws_mount_path: aws_mount_path }, initOverrides); return await response.value(); } /** + * Return the configured STS role for a given AWS account. */ - async awsReadStsRoleRaw(requestParameters: AuthApiAwsReadStsRoleRequest, initOverrides?: RequestInit | runtime.InitOverrideFunction): Promise> { + async awsReadStsRoleRaw(requestParameters: AuthApiAwsReadStsRoleRequest, initOverrides?: RequestInit | runtime.InitOverrideFunction): Promise> { if (requestParameters['account_id'] == null) { throw new runtime.RequiredError( 'account_id', @@ -5905,19 +6034,21 @@ export class AuthApi extends runtime.BaseAPI { query: queryParameters, }, initOverrides); - return new runtime.VoidApiResponse(response); + return new runtime.JSONApiResponse(response, (jsonValue) => AwsReadStsRoleResponseFromJSON(jsonValue)); } /** + * Return the configured STS role for a given AWS account. */ - async awsReadStsRole(account_id: string, aws_mount_path: string, initOverrides?: RequestInit | runtime.InitOverrideFunction): Promise { + async awsReadStsRole(account_id: string, aws_mount_path: string, initOverrides?: RequestInit | runtime.InitOverrideFunction): Promise { const response = await this.awsReadStsRoleRaw({ account_id: account_id, aws_mount_path: aws_mount_path }, initOverrides); return await response.value(); } /** + * Rotate the AWS credentials used by Vault for this auth mount. */ - async awsRotateRootCredentialsRaw(requestParameters: AuthApiAwsRotateRootCredentialsRequest, initOverrides?: RequestInit | runtime.InitOverrideFunction): Promise> { + async awsRotateRootCredentialsRaw(requestParameters: AuthApiAwsRotateRootCredentialsRequest, initOverrides?: RequestInit | runtime.InitOverrideFunction): Promise> { if (requestParameters['aws_mount_path'] == null) { throw new runtime.RequiredError( 'aws_mount_path', @@ -5937,17 +6068,19 @@ export class AuthApi extends runtime.BaseAPI { query: queryParameters, }, initOverrides); - return new runtime.VoidApiResponse(response); + return new runtime.JSONApiResponse(response, (jsonValue) => AwsRotateRootCredentialsResponseFromJSON(jsonValue)); } /** + * Rotate the AWS credentials used by Vault for this auth mount. */ - async awsRotateRootCredentials(aws_mount_path: string, initOverrides?: RequestInit | runtime.InitOverrideFunction): Promise { + async awsRotateRootCredentials(aws_mount_path: string, initOverrides?: RequestInit | runtime.InitOverrideFunction): Promise { const response = await this.awsRotateRootCredentialsRaw({ aws_mount_path: aws_mount_path }, initOverrides); return await response.value(); } /** + * Tidy expired entries from the identity access list. */ async awsTidyIdentityAccessListRaw(requestParameters: AuthApiAwsTidyIdentityAccessListOperationRequest, initOverrides?: RequestInit | runtime.InitOverrideFunction): Promise> { if (requestParameters['aws_mount_path'] == null) { @@ -5983,6 +6116,7 @@ export class AuthApi extends runtime.BaseAPI { } /** + * Tidy expired entries from the identity access list. */ async awsTidyIdentityAccessList(aws_mount_path: string, AwsTidyIdentityAccessListRequest: AwsTidyIdentityAccessListRequest, initOverrides?: RequestInit | runtime.InitOverrideFunction): Promise { const response = await this.awsTidyIdentityAccessListRaw({ aws_mount_path: aws_mount_path, AwsTidyIdentityAccessListRequest: AwsTidyIdentityAccessListRequest }, initOverrides); @@ -5990,6 +6124,7 @@ export class AuthApi extends runtime.BaseAPI { } /** + * Tidy expired entries from the identity access list. */ async awsTidyIdentityWhitelistRaw(requestParameters: AuthApiAwsTidyIdentityWhitelistOperationRequest, initOverrides?: RequestInit | runtime.InitOverrideFunction): Promise> { if (requestParameters['aws_mount_path'] == null) { @@ -6025,6 +6160,7 @@ export class AuthApi extends runtime.BaseAPI { } /** + * Tidy expired entries from the identity access list. */ async awsTidyIdentityWhitelist(aws_mount_path: string, AwsTidyIdentityWhitelistRequest: AwsTidyIdentityWhitelistRequest, initOverrides?: RequestInit | runtime.InitOverrideFunction): Promise { const response = await this.awsTidyIdentityWhitelistRaw({ aws_mount_path: aws_mount_path, AwsTidyIdentityWhitelistRequest: AwsTidyIdentityWhitelistRequest }, initOverrides); @@ -6032,6 +6168,7 @@ export class AuthApi extends runtime.BaseAPI { } /** + * Tidy expired entries from the role-tag deny list. */ async awsTidyRoleTagBlacklistRaw(requestParameters: AuthApiAwsTidyRoleTagBlacklistOperationRequest, initOverrides?: RequestInit | runtime.InitOverrideFunction): Promise> { if (requestParameters['aws_mount_path'] == null) { @@ -6067,6 +6204,7 @@ export class AuthApi extends runtime.BaseAPI { } /** + * Tidy expired entries from the role-tag deny list. */ async awsTidyRoleTagBlacklist(aws_mount_path: string, AwsTidyRoleTagBlacklistRequest: AwsTidyRoleTagBlacklistRequest, initOverrides?: RequestInit | runtime.InitOverrideFunction): Promise { const response = await this.awsTidyRoleTagBlacklistRaw({ aws_mount_path: aws_mount_path, AwsTidyRoleTagBlacklistRequest: AwsTidyRoleTagBlacklistRequest }, initOverrides); @@ -6074,6 +6212,7 @@ export class AuthApi extends runtime.BaseAPI { } /** + * Tidy expired entries from the role-tag deny list. */ async awsTidyRoleTagDenyListRaw(requestParameters: AuthApiAwsTidyRoleTagDenyListOperationRequest, initOverrides?: RequestInit | runtime.InitOverrideFunction): Promise> { if (requestParameters['aws_mount_path'] == null) { @@ -6109,6 +6248,7 @@ export class AuthApi extends runtime.BaseAPI { } /** + * Tidy expired entries from the role-tag deny list. */ async awsTidyRoleTagDenyList(aws_mount_path: string, AwsTidyRoleTagDenyListRequest: AwsTidyRoleTagDenyListRequest, initOverrides?: RequestInit | runtime.InitOverrideFunction): Promise { const response = await this.awsTidyRoleTagDenyListRaw({ aws_mount_path: aws_mount_path, AwsTidyRoleTagDenyListRequest: AwsTidyRoleTagDenyListRequest }, initOverrides); @@ -6116,6 +6256,7 @@ export class AuthApi extends runtime.BaseAPI { } /** + * Create or update an AWS auth role. */ async awsWriteAuthRoleRaw(requestParameters: AuthApiAwsWriteAuthRoleOperationRequest, initOverrides?: RequestInit | runtime.InitOverrideFunction): Promise> { if (requestParameters['role'] == null) { @@ -6158,6 +6299,7 @@ export class AuthApi extends runtime.BaseAPI { } /** + * Create or update an AWS auth role. */ async awsWriteAuthRole(role: string, aws_mount_path: string, AwsWriteAuthRoleRequest: AwsWriteAuthRoleRequest, initOverrides?: RequestInit | runtime.InitOverrideFunction): Promise { const response = await this.awsWriteAuthRoleRaw({ role: role, aws_mount_path: aws_mount_path, AwsWriteAuthRoleRequest: AwsWriteAuthRoleRequest }, initOverrides); @@ -6165,8 +6307,9 @@ export class AuthApi extends runtime.BaseAPI { } /** + * Generate a role tag for an EC2 instance. */ - async awsWriteRoleTagRaw(requestParameters: AuthApiAwsWriteRoleTagOperationRequest, initOverrides?: RequestInit | runtime.InitOverrideFunction): Promise> { + async awsWriteRoleTagRaw(requestParameters: AuthApiAwsWriteRoleTagOperationRequest, initOverrides?: RequestInit | runtime.InitOverrideFunction): Promise> { if (requestParameters['role'] == null) { throw new runtime.RequiredError( 'role', @@ -6203,17 +6346,19 @@ export class AuthApi extends runtime.BaseAPI { body: AwsWriteRoleTagRequestToJSON(requestParameters['AwsWriteRoleTagRequest']), }, initOverrides); - return new runtime.VoidApiResponse(response); + return new runtime.JSONApiResponse(response, (jsonValue) => AwsWriteRoleTagResponseFromJSON(jsonValue)); } /** + * Generate a role tag for an EC2 instance. */ - async awsWriteRoleTag(role: string, aws_mount_path: string, AwsWriteRoleTagRequest: AwsWriteRoleTagRequest, initOverrides?: RequestInit | runtime.InitOverrideFunction): Promise { + async awsWriteRoleTag(role: string, aws_mount_path: string, AwsWriteRoleTagRequest: AwsWriteRoleTagRequest, initOverrides?: RequestInit | runtime.InitOverrideFunction): Promise { const response = await this.awsWriteRoleTagRaw({ role: role, aws_mount_path: aws_mount_path, AwsWriteRoleTagRequest: AwsWriteRoleTagRequest }, initOverrides); return await response.value(); } /** + * Add a role tag to the deny list. */ async awsWriteRoleTagBlacklistRaw(requestParameters: AuthApiAwsWriteRoleTagBlacklistRequest, initOverrides?: RequestInit | runtime.InitOverrideFunction): Promise> { if (requestParameters['role_tag'] == null) { @@ -6246,6 +6391,7 @@ export class AuthApi extends runtime.BaseAPI { } /** + * Add a role tag to the deny list. */ async awsWriteRoleTagBlacklist(role_tag: string, aws_mount_path: string, initOverrides?: RequestInit | runtime.InitOverrideFunction): Promise { const response = await this.awsWriteRoleTagBlacklistRaw({ role_tag: role_tag, aws_mount_path: aws_mount_path }, initOverrides); @@ -6253,6 +6399,7 @@ export class AuthApi extends runtime.BaseAPI { } /** + * Add a role tag to the deny list. */ async awsWriteRoleTagDenyListRaw(requestParameters: AuthApiAwsWriteRoleTagDenyListRequest, initOverrides?: RequestInit | runtime.InitOverrideFunction): Promise> { if (requestParameters['role_tag'] == null) { @@ -6285,6 +6432,7 @@ export class AuthApi extends runtime.BaseAPI { } /** + * Add a role tag to the deny list. */ async awsWriteRoleTagDenyList(role_tag: string, aws_mount_path: string, initOverrides?: RequestInit | runtime.InitOverrideFunction): Promise { const response = await this.awsWriteRoleTagDenyListRaw({ role_tag: role_tag, aws_mount_path: aws_mount_path }, initOverrides); @@ -6292,6 +6440,7 @@ export class AuthApi extends runtime.BaseAPI { } /** + * Configure an STS role for a given AWS account. */ async awsWriteStsRoleRaw(requestParameters: AuthApiAwsWriteStsRoleOperationRequest, initOverrides?: RequestInit | runtime.InitOverrideFunction): Promise> { if (requestParameters['account_id'] == null) { @@ -6334,6 +6483,7 @@ export class AuthApi extends runtime.BaseAPI { } /** + * Configure an STS role for a given AWS account. */ async awsWriteStsRole(account_id: string, aws_mount_path: string, AwsWriteStsRoleRequest: AwsWriteStsRoleRequest, initOverrides?: RequestInit | runtime.InitOverrideFunction): Promise { const response = await this.awsWriteStsRoleRaw({ account_id: account_id, aws_mount_path: aws_mount_path, AwsWriteStsRoleRequest: AwsWriteStsRoleRequest }, initOverrides); diff --git a/src/apis/SecretsApi.ts b/src/apis/SecretsApi.ts index 1e531d4..6f91c50 100644 --- a/src/apis/SecretsApi.ts +++ b/src/apis/SecretsApi.ts @@ -23,10 +23,18 @@ import type { AliCloudWriteRoleRequest, AwsConfigureLeaseRequest, AwsConfigureRootIamCredentialsRequest, + AwsGenerateCredentialsResponse, AwsGenerateCredentialsWithParametersRequest, + AwsGenerateCredentialsWithParametersResponse, + AwsGenerateStsCredentialsResponse, AwsGenerateStsCredentialsWithParametersRequest, + AwsGenerateStsCredentialsWithParametersResponse, + AwsReadLeaseConfigurationResponse, + AwsReadRoleResponse, + AwsReadRootIamCredentialsConfigurationResponse, AwsReadStaticCredsNameResponse, AwsReadStaticRolesNameResponse, + AwsRotateRootIamCredentialsResponse, AwsWriteRoleRequest, AwsWriteStaticRolesNameRequest, AwsWriteStaticRolesNameResponse, @@ -482,14 +490,30 @@ import { AwsConfigureLeaseRequestToJSON, AwsConfigureRootIamCredentialsRequestFromJSON, AwsConfigureRootIamCredentialsRequestToJSON, + AwsGenerateCredentialsResponseFromJSON, + AwsGenerateCredentialsResponseToJSON, AwsGenerateCredentialsWithParametersRequestFromJSON, AwsGenerateCredentialsWithParametersRequestToJSON, + AwsGenerateCredentialsWithParametersResponseFromJSON, + AwsGenerateCredentialsWithParametersResponseToJSON, + AwsGenerateStsCredentialsResponseFromJSON, + AwsGenerateStsCredentialsResponseToJSON, AwsGenerateStsCredentialsWithParametersRequestFromJSON, AwsGenerateStsCredentialsWithParametersRequestToJSON, + AwsGenerateStsCredentialsWithParametersResponseFromJSON, + AwsGenerateStsCredentialsWithParametersResponseToJSON, + AwsReadLeaseConfigurationResponseFromJSON, + AwsReadLeaseConfigurationResponseToJSON, + AwsReadRoleResponseFromJSON, + AwsReadRoleResponseToJSON, + AwsReadRootIamCredentialsConfigurationResponseFromJSON, + AwsReadRootIamCredentialsConfigurationResponseToJSON, AwsReadStaticCredsNameResponseFromJSON, AwsReadStaticCredsNameResponseToJSON, AwsReadStaticRolesNameResponseFromJSON, AwsReadStaticRolesNameResponseToJSON, + AwsRotateRootIamCredentialsResponseFromJSON, + AwsRotateRootIamCredentialsResponseToJSON, AwsWriteRoleRequestFromJSON, AwsWriteRoleRequestToJSON, AwsWriteStaticRolesNameRequestFromJSON, @@ -5553,6 +5577,7 @@ export class SecretsApi extends runtime.BaseAPI { } /** + * Configure the default lease for generated credentials. */ async awsConfigureLeaseRaw(requestParameters: SecretsApiAwsConfigureLeaseOperationRequest, initOverrides?: RequestInit | runtime.InitOverrideFunction): Promise> { if (requestParameters['aws_mount_path'] == null) { @@ -5588,6 +5613,7 @@ export class SecretsApi extends runtime.BaseAPI { } /** + * Configure the default lease for generated credentials. */ async awsConfigureLease(aws_mount_path: string, AwsConfigureLeaseRequest: AwsConfigureLeaseRequest, initOverrides?: RequestInit | runtime.InitOverrideFunction): Promise { const response = await this.awsConfigureLeaseRaw({ aws_mount_path: aws_mount_path, AwsConfigureLeaseRequest: AwsConfigureLeaseRequest }, initOverrides); @@ -5595,6 +5621,7 @@ export class SecretsApi extends runtime.BaseAPI { } /** + * Configure the root IAM credentials. */ async awsConfigureRootIamCredentialsRaw(requestParameters: SecretsApiAwsConfigureRootIamCredentialsOperationRequest, initOverrides?: RequestInit | runtime.InitOverrideFunction): Promise> { if (requestParameters['aws_mount_path'] == null) { @@ -5630,6 +5657,7 @@ export class SecretsApi extends runtime.BaseAPI { } /** + * Configure the root IAM credentials. */ async awsConfigureRootIamCredentials(aws_mount_path: string, AwsConfigureRootIamCredentialsRequest: AwsConfigureRootIamCredentialsRequest, initOverrides?: RequestInit | runtime.InitOverrideFunction): Promise { const response = await this.awsConfigureRootIamCredentialsRaw({ aws_mount_path: aws_mount_path, AwsConfigureRootIamCredentialsRequest: AwsConfigureRootIamCredentialsRequest }, initOverrides); @@ -5637,7 +5665,7 @@ export class SecretsApi extends runtime.BaseAPI { } /** - * Read, write and reference IAM policies that access keys can be made for. + * Delete a named IAM role. */ async awsDeleteRoleRaw(requestParameters: SecretsApiAwsDeleteRoleRequest, initOverrides?: RequestInit | runtime.InitOverrideFunction): Promise> { if (requestParameters['name'] == null) { @@ -5670,7 +5698,7 @@ export class SecretsApi extends runtime.BaseAPI { } /** - * Read, write and reference IAM policies that access keys can be made for. + * Delete a named IAM role. */ async awsDeleteRole(name: string, aws_mount_path: string, initOverrides?: RequestInit | runtime.InitOverrideFunction): Promise { const response = await this.awsDeleteRoleRaw({ name: name, aws_mount_path: aws_mount_path }, initOverrides); @@ -5678,6 +5706,7 @@ export class SecretsApi extends runtime.BaseAPI { } /** + * Delete a named static IAM role. */ async awsDeleteStaticRolesNameRaw(requestParameters: SecretsApiAwsDeleteStaticRolesNameRequest, initOverrides?: RequestInit | runtime.InitOverrideFunction): Promise> { if (requestParameters['name'] == null) { @@ -5710,6 +5739,7 @@ export class SecretsApi extends runtime.BaseAPI { } /** + * Delete a named static IAM role. */ async awsDeleteStaticRolesName(name: string, aws_mount_path: string, initOverrides?: RequestInit | runtime.InitOverrideFunction): Promise { const response = await this.awsDeleteStaticRolesNameRaw({ name: name, aws_mount_path: aws_mount_path }, initOverrides); @@ -5717,8 +5747,9 @@ export class SecretsApi extends runtime.BaseAPI { } /** + * Generate AWS credentials for a given role. */ - async awsGenerateCredentialsRaw(requestParameters: SecretsApiAwsGenerateCredentialsRequest, initOverrides?: RequestInit | runtime.InitOverrideFunction): Promise> { + async awsGenerateCredentialsRaw(requestParameters: SecretsApiAwsGenerateCredentialsRequest, initOverrides?: RequestInit | runtime.InitOverrideFunction): Promise> { if (requestParameters['name'] == null) { throw new runtime.RequiredError( 'name', @@ -5757,19 +5788,21 @@ export class SecretsApi extends runtime.BaseAPI { query: queryParameters, }, initOverrides); - return new runtime.VoidApiResponse(response); + return new runtime.JSONApiResponse(response, (jsonValue) => AwsGenerateCredentialsResponseFromJSON(jsonValue)); } /** + * Generate AWS credentials for a given role. */ - async awsGenerateCredentials(name: string, aws_mount_path: string, role_arn?: string, role_session_name?: string, ttl?: string, initOverrides?: RequestInit | runtime.InitOverrideFunction): Promise { + async awsGenerateCredentials(name: string, aws_mount_path: string, role_arn?: string, role_session_name?: string, ttl?: string, initOverrides?: RequestInit | runtime.InitOverrideFunction): Promise { const response = await this.awsGenerateCredentialsRaw({ name: name, aws_mount_path: aws_mount_path, role_arn: role_arn, role_session_name: role_session_name, ttl: ttl }, initOverrides); return await response.value(); } /** + * Generate AWS credentials for a given role. */ - async awsGenerateCredentialsWithParametersRaw(requestParameters: SecretsApiAwsGenerateCredentialsWithParametersOperationRequest, initOverrides?: RequestInit | runtime.InitOverrideFunction): Promise> { + async awsGenerateCredentialsWithParametersRaw(requestParameters: SecretsApiAwsGenerateCredentialsWithParametersOperationRequest, initOverrides?: RequestInit | runtime.InitOverrideFunction): Promise> { if (requestParameters['name'] == null) { throw new runtime.RequiredError( 'name', @@ -5806,19 +5839,21 @@ export class SecretsApi extends runtime.BaseAPI { body: AwsGenerateCredentialsWithParametersRequestToJSON(requestParameters['AwsGenerateCredentialsWithParametersRequest']), }, initOverrides); - return new runtime.VoidApiResponse(response); + return new runtime.JSONApiResponse(response, (jsonValue) => AwsGenerateCredentialsWithParametersResponseFromJSON(jsonValue)); } /** + * Generate AWS credentials for a given role. */ - async awsGenerateCredentialsWithParameters(name: string, aws_mount_path: string, AwsGenerateCredentialsWithParametersRequest: AwsGenerateCredentialsWithParametersRequest, initOverrides?: RequestInit | runtime.InitOverrideFunction): Promise { + async awsGenerateCredentialsWithParameters(name: string, aws_mount_path: string, AwsGenerateCredentialsWithParametersRequest: AwsGenerateCredentialsWithParametersRequest, initOverrides?: RequestInit | runtime.InitOverrideFunction): Promise { const response = await this.awsGenerateCredentialsWithParametersRaw({ name: name, aws_mount_path: aws_mount_path, AwsGenerateCredentialsWithParametersRequest: AwsGenerateCredentialsWithParametersRequest }, initOverrides); return await response.value(); } /** + * Generate AWS credentials for a given role. */ - async awsGenerateStsCredentialsRaw(requestParameters: SecretsApiAwsGenerateStsCredentialsRequest, initOverrides?: RequestInit | runtime.InitOverrideFunction): Promise> { + async awsGenerateStsCredentialsRaw(requestParameters: SecretsApiAwsGenerateStsCredentialsRequest, initOverrides?: RequestInit | runtime.InitOverrideFunction): Promise> { if (requestParameters['name'] == null) { throw new runtime.RequiredError( 'name', @@ -5857,19 +5892,21 @@ export class SecretsApi extends runtime.BaseAPI { query: queryParameters, }, initOverrides); - return new runtime.VoidApiResponse(response); + return new runtime.JSONApiResponse(response, (jsonValue) => AwsGenerateStsCredentialsResponseFromJSON(jsonValue)); } /** + * Generate AWS credentials for a given role. */ - async awsGenerateStsCredentials(name: string, aws_mount_path: string, role_arn?: string, role_session_name?: string, ttl?: string, initOverrides?: RequestInit | runtime.InitOverrideFunction): Promise { + async awsGenerateStsCredentials(name: string, aws_mount_path: string, role_arn?: string, role_session_name?: string, ttl?: string, initOverrides?: RequestInit | runtime.InitOverrideFunction): Promise { const response = await this.awsGenerateStsCredentialsRaw({ name: name, aws_mount_path: aws_mount_path, role_arn: role_arn, role_session_name: role_session_name, ttl: ttl }, initOverrides); return await response.value(); } /** + * Generate AWS credentials for a given role. */ - async awsGenerateStsCredentialsWithParametersRaw(requestParameters: SecretsApiAwsGenerateStsCredentialsWithParametersOperationRequest, initOverrides?: RequestInit | runtime.InitOverrideFunction): Promise> { + async awsGenerateStsCredentialsWithParametersRaw(requestParameters: SecretsApiAwsGenerateStsCredentialsWithParametersOperationRequest, initOverrides?: RequestInit | runtime.InitOverrideFunction): Promise> { if (requestParameters['name'] == null) { throw new runtime.RequiredError( 'name', @@ -5906,12 +5943,13 @@ export class SecretsApi extends runtime.BaseAPI { body: AwsGenerateStsCredentialsWithParametersRequestToJSON(requestParameters['AwsGenerateStsCredentialsWithParametersRequest']), }, initOverrides); - return new runtime.VoidApiResponse(response); + return new runtime.JSONApiResponse(response, (jsonValue) => AwsGenerateStsCredentialsWithParametersResponseFromJSON(jsonValue)); } /** + * Generate AWS credentials for a given role. */ - async awsGenerateStsCredentialsWithParameters(name: string, aws_mount_path: string, AwsGenerateStsCredentialsWithParametersRequest: AwsGenerateStsCredentialsWithParametersRequest, initOverrides?: RequestInit | runtime.InitOverrideFunction): Promise { + async awsGenerateStsCredentialsWithParameters(name: string, aws_mount_path: string, AwsGenerateStsCredentialsWithParametersRequest: AwsGenerateStsCredentialsWithParametersRequest, initOverrides?: RequestInit | runtime.InitOverrideFunction): Promise { const response = await this.awsGenerateStsCredentialsWithParametersRaw({ name: name, aws_mount_path: aws_mount_path, AwsGenerateStsCredentialsWithParametersRequest: AwsGenerateStsCredentialsWithParametersRequest }, initOverrides); return await response.value(); } @@ -5962,6 +6000,7 @@ export class SecretsApi extends runtime.BaseAPI { } /** + * List the configured static IAM roles. */ async awsListStaticRolesRaw(requestParameters: SecretsApiAwsListStaticRolesRequest, initOverrides?: RequestInit | runtime.InitOverrideFunction): Promise> { if (requestParameters['aws_mount_path'] == null) { @@ -5998,6 +6037,7 @@ export class SecretsApi extends runtime.BaseAPI { } /** + * List the configured static IAM roles. */ async awsListStaticRoles(aws_mount_path: string, list: SecretsApiAwsListStaticRolesListEnum, initOverrides?: RequestInit | runtime.InitOverrideFunction): Promise { const response = await this.awsListStaticRolesRaw({ aws_mount_path: aws_mount_path, list: list }, initOverrides); @@ -6005,8 +6045,9 @@ export class SecretsApi extends runtime.BaseAPI { } /** + * Return the default lease configuration for generated credentials. */ - async awsReadLeaseConfigurationRaw(requestParameters: SecretsApiAwsReadLeaseConfigurationRequest, initOverrides?: RequestInit | runtime.InitOverrideFunction): Promise> { + async awsReadLeaseConfigurationRaw(requestParameters: SecretsApiAwsReadLeaseConfigurationRequest, initOverrides?: RequestInit | runtime.InitOverrideFunction): Promise> { if (requestParameters['aws_mount_path'] == null) { throw new runtime.RequiredError( 'aws_mount_path', @@ -6026,20 +6067,21 @@ export class SecretsApi extends runtime.BaseAPI { query: queryParameters, }, initOverrides); - return new runtime.VoidApiResponse(response); + return new runtime.JSONApiResponse(response, (jsonValue) => AwsReadLeaseConfigurationResponseFromJSON(jsonValue)); } /** + * Return the default lease configuration for generated credentials. */ - async awsReadLeaseConfiguration(aws_mount_path: string, initOverrides?: RequestInit | runtime.InitOverrideFunction): Promise { + async awsReadLeaseConfiguration(aws_mount_path: string, initOverrides?: RequestInit | runtime.InitOverrideFunction): Promise { const response = await this.awsReadLeaseConfigurationRaw({ aws_mount_path: aws_mount_path }, initOverrides); return await response.value(); } /** - * Read, write and reference IAM policies that access keys can be made for. + * Return the configuration for a named IAM role. */ - async awsReadRoleRaw(requestParameters: SecretsApiAwsReadRoleRequest, initOverrides?: RequestInit | runtime.InitOverrideFunction): Promise> { + async awsReadRoleRaw(requestParameters: SecretsApiAwsReadRoleRequest, initOverrides?: RequestInit | runtime.InitOverrideFunction): Promise> { if (requestParameters['name'] == null) { throw new runtime.RequiredError( 'name', @@ -6066,20 +6108,21 @@ export class SecretsApi extends runtime.BaseAPI { query: queryParameters, }, initOverrides); - return new runtime.VoidApiResponse(response); + return new runtime.JSONApiResponse(response, (jsonValue) => AwsReadRoleResponseFromJSON(jsonValue)); } /** - * Read, write and reference IAM policies that access keys can be made for. + * Return the configuration for a named IAM role. */ - async awsReadRole(name: string, aws_mount_path: string, initOverrides?: RequestInit | runtime.InitOverrideFunction): Promise { + async awsReadRole(name: string, aws_mount_path: string, initOverrides?: RequestInit | runtime.InitOverrideFunction): Promise { const response = await this.awsReadRoleRaw({ name: name, aws_mount_path: aws_mount_path }, initOverrides); return await response.value(); } /** + * Return the root IAM credentials configuration. */ - async awsReadRootIamCredentialsConfigurationRaw(requestParameters: SecretsApiAwsReadRootIamCredentialsConfigurationRequest, initOverrides?: RequestInit | runtime.InitOverrideFunction): Promise> { + async awsReadRootIamCredentialsConfigurationRaw(requestParameters: SecretsApiAwsReadRootIamCredentialsConfigurationRequest, initOverrides?: RequestInit | runtime.InitOverrideFunction): Promise> { if (requestParameters['aws_mount_path'] == null) { throw new runtime.RequiredError( 'aws_mount_path', @@ -6099,17 +6142,19 @@ export class SecretsApi extends runtime.BaseAPI { query: queryParameters, }, initOverrides); - return new runtime.VoidApiResponse(response); + return new runtime.JSONApiResponse(response, (jsonValue) => AwsReadRootIamCredentialsConfigurationResponseFromJSON(jsonValue)); } /** + * Return the root IAM credentials configuration. */ - async awsReadRootIamCredentialsConfiguration(aws_mount_path: string, initOverrides?: RequestInit | runtime.InitOverrideFunction): Promise { + async awsReadRootIamCredentialsConfiguration(aws_mount_path: string, initOverrides?: RequestInit | runtime.InitOverrideFunction): Promise { const response = await this.awsReadRootIamCredentialsConfigurationRaw({ aws_mount_path: aws_mount_path }, initOverrides); return await response.value(); } /** + * Retrieve the current credentials for a named static IAM role. */ async awsReadStaticCredsNameRaw(requestParameters: SecretsApiAwsReadStaticCredsNameRequest, initOverrides?: RequestInit | runtime.InitOverrideFunction): Promise> { if (requestParameters['name'] == null) { @@ -6142,6 +6187,7 @@ export class SecretsApi extends runtime.BaseAPI { } /** + * Retrieve the current credentials for a named static IAM role. */ async awsReadStaticCredsName(name: string, aws_mount_path: string, initOverrides?: RequestInit | runtime.InitOverrideFunction): Promise { const response = await this.awsReadStaticCredsNameRaw({ name: name, aws_mount_path: aws_mount_path }, initOverrides); @@ -6149,6 +6195,7 @@ export class SecretsApi extends runtime.BaseAPI { } /** + * Return the configuration for a named static IAM role. */ async awsReadStaticRolesNameRaw(requestParameters: SecretsApiAwsReadStaticRolesNameRequest, initOverrides?: RequestInit | runtime.InitOverrideFunction): Promise> { if (requestParameters['name'] == null) { @@ -6181,6 +6228,7 @@ export class SecretsApi extends runtime.BaseAPI { } /** + * Return the configuration for a named static IAM role. */ async awsReadStaticRolesName(name: string, aws_mount_path: string, initOverrides?: RequestInit | runtime.InitOverrideFunction): Promise { const response = await this.awsReadStaticRolesNameRaw({ name: name, aws_mount_path: aws_mount_path }, initOverrides); @@ -6188,8 +6236,9 @@ export class SecretsApi extends runtime.BaseAPI { } /** + * Rotate the root IAM credentials used by Vault for this secrets mount. */ - async awsRotateRootIamCredentialsRaw(requestParameters: SecretsApiAwsRotateRootIamCredentialsRequest, initOverrides?: RequestInit | runtime.InitOverrideFunction): Promise> { + async awsRotateRootIamCredentialsRaw(requestParameters: SecretsApiAwsRotateRootIamCredentialsRequest, initOverrides?: RequestInit | runtime.InitOverrideFunction): Promise> { if (requestParameters['aws_mount_path'] == null) { throw new runtime.RequiredError( 'aws_mount_path', @@ -6209,18 +6258,19 @@ export class SecretsApi extends runtime.BaseAPI { query: queryParameters, }, initOverrides); - return new runtime.VoidApiResponse(response); + return new runtime.JSONApiResponse(response, (jsonValue) => AwsRotateRootIamCredentialsResponseFromJSON(jsonValue)); } /** + * Rotate the root IAM credentials used by Vault for this secrets mount. */ - async awsRotateRootIamCredentials(aws_mount_path: string, initOverrides?: RequestInit | runtime.InitOverrideFunction): Promise { + async awsRotateRootIamCredentials(aws_mount_path: string, initOverrides?: RequestInit | runtime.InitOverrideFunction): Promise { const response = await this.awsRotateRootIamCredentialsRaw({ aws_mount_path: aws_mount_path }, initOverrides); return await response.value(); } /** - * Read, write and reference IAM policies that access keys can be made for. + * Create or update a named IAM role. */ async awsWriteRoleRaw(requestParameters: SecretsApiAwsWriteRoleOperationRequest, initOverrides?: RequestInit | runtime.InitOverrideFunction): Promise> { if (requestParameters['name'] == null) { @@ -6263,7 +6313,7 @@ export class SecretsApi extends runtime.BaseAPI { } /** - * Read, write and reference IAM policies that access keys can be made for. + * Create or update a named IAM role. */ async awsWriteRole(name: string, aws_mount_path: string, AwsWriteRoleRequest: AwsWriteRoleRequest, initOverrides?: RequestInit | runtime.InitOverrideFunction): Promise { const response = await this.awsWriteRoleRaw({ name: name, aws_mount_path: aws_mount_path, AwsWriteRoleRequest: AwsWriteRoleRequest }, initOverrides); @@ -6271,6 +6321,7 @@ export class SecretsApi extends runtime.BaseAPI { } /** + * Create or update a named static IAM role. */ async awsWriteStaticRolesNameRaw(requestParameters: SecretsApiAwsWriteStaticRolesNameOperationRequest, initOverrides?: RequestInit | runtime.InitOverrideFunction): Promise> { if (requestParameters['name'] == null) { @@ -6313,6 +6364,7 @@ export class SecretsApi extends runtime.BaseAPI { } /** + * Create or update a named static IAM role. */ async awsWriteStaticRolesName(name: string, aws_mount_path: string, AwsWriteStaticRolesNameRequest: AwsWriteStaticRolesNameRequest, initOverrides?: RequestInit | runtime.InitOverrideFunction): Promise { const response = await this.awsWriteStaticRolesNameRaw({ name: name, aws_mount_path: aws_mount_path, AwsWriteStaticRolesNameRequest: AwsWriteStaticRolesNameRequest }, initOverrides); @@ -35951,7 +36003,6 @@ export class SecretsApi extends runtime.BaseAPI { } /** - * Rotate named encryption key */ async transitRotateKeyRaw(requestParameters: SecretsApiTransitRotateKeyOperationRequest, initOverrides?: RequestInit | runtime.InitOverrideFunction): Promise> { if (requestParameters['name'] == null) { @@ -35994,7 +36045,6 @@ export class SecretsApi extends runtime.BaseAPI { } /** - * Rotate named encryption key */ async transitRotateKey(name: string, transit_mount_path: string, TransitRotateKeyRequest: TransitRotateKeyRequest, initOverrides?: RequestInit | runtime.InitOverrideFunction): Promise { const response = await this.transitRotateKeyRaw({ name: name, transit_mount_path: transit_mount_path, TransitRotateKeyRequest: TransitRotateKeyRequest }, initOverrides); diff --git a/src/apis/SystemApi.ts b/src/apis/SystemApi.ts index c6a5d0c..56f5441 100644 --- a/src/apis/SystemApi.ts +++ b/src/apis/SystemApi.ts @@ -2154,7 +2154,7 @@ export class SystemApi extends runtime.BaseAPI { const headerParameters: runtime.HTTPHeaders = {}; - const builtPath = `/sys/activation-flags/enable-scim/activate`; + const builtPath = `/sys/activation-flags/force-identity-deduplication/activate`; const response = await this.request({ path: builtPath.replace(/\/\/+/g, '/'), method: 'POST', @@ -2181,7 +2181,7 @@ export class SystemApi extends runtime.BaseAPI { const headerParameters: runtime.HTTPHeaders = {}; - const builtPath = `/sys/activation-flags/force-identity-deduplication/activate`; + const builtPath = `/sys/activation-flags/secrets-import/activate`; const response = await this.request({ path: builtPath.replace(/\/\/+/g, '/'), method: 'POST', @@ -2208,7 +2208,7 @@ export class SystemApi extends runtime.BaseAPI { const headerParameters: runtime.HTTPHeaders = {}; - const builtPath = `/sys/activation-flags/secrets-import/activate`; + const builtPath = `/sys/activation-flags/secrets-sync/activate`; const response = await this.request({ path: builtPath.replace(/\/\/+/g, '/'), method: 'POST', @@ -2227,33 +2227,6 @@ export class SystemApi extends runtime.BaseAPI { return await response.value(); } - /** - * Activate a flagged feature. - */ - async activationFlagsActivate_4Raw(initOverrides?: RequestInit | runtime.InitOverrideFunction): Promise> { - const queryParameters: any = {}; - - const headerParameters: runtime.HTTPHeaders = {}; - - const builtPath = `/sys/activation-flags/secrets-sync/activate`; - const response = await this.request({ - path: builtPath.replace(/\/\/+/g, '/'), - method: 'POST', - headers: headerParameters, - query: queryParameters, - }, initOverrides); - - return new runtime.VoidApiResponse(response); - } - - /** - * Activate a flagged feature. - */ - async activationFlagsActivate_4(initOverrides?: RequestInit | runtime.InitOverrideFunction): Promise { - const response = await this.activationFlagsActivate_4Raw(initOverrides); - return await response.value(); - } - /** */ async auditingCalculateHashRaw(requestParameters: SystemApiAuditingCalculateHashOperationRequest, initOverrides?: RequestInit | runtime.InitOverrideFunction): Promise> { @@ -5592,11 +5565,11 @@ export class SystemApi extends runtime.BaseAPI { * Returns metadata, semantics, and examples for one authorization_details type. * Read detailed metadata for a supported OAuth Resource Server authorization_details type. */ - async oauthResourceServerAuthorizationDetailsTypesRead_5Raw(requestParameters: SystemApiOauthResourceServerAuthorizationDetailsTypesRead0Request, initOverrides?: RequestInit | runtime.InitOverrideFunction): Promise> { + async oauthResourceServerAuthorizationDetailsTypesRead_4Raw(requestParameters: SystemApiOauthResourceServerAuthorizationDetailsTypesRead0Request, initOverrides?: RequestInit | runtime.InitOverrideFunction): Promise> { if (requestParameters['type'] == null) { throw new runtime.RequiredError( 'type', - 'Required parameter "type" was null or undefined when calling oauthResourceServerAuthorizationDetailsTypesRead_5().' + 'Required parameter "type" was null or undefined when calling oauthResourceServerAuthorizationDetailsTypesRead_4().' ); } @@ -5619,8 +5592,8 @@ export class SystemApi extends runtime.BaseAPI { * Returns metadata, semantics, and examples for one authorization_details type. * Read detailed metadata for a supported OAuth Resource Server authorization_details type. */ - async oauthResourceServerAuthorizationDetailsTypesRead_5(type: string, initOverrides?: RequestInit | runtime.InitOverrideFunction): Promise { - const response = await this.oauthResourceServerAuthorizationDetailsTypesRead_5Raw({ type: type }, initOverrides); + async oauthResourceServerAuthorizationDetailsTypesRead_4(type: string, initOverrides?: RequestInit | runtime.InitOverrideFunction): Promise { + const response = await this.oauthResourceServerAuthorizationDetailsTypesRead_4Raw({ type: type }, initOverrides); return await response.value(); } @@ -6386,11 +6359,11 @@ export class SystemApi extends runtime.BaseAPI { /** */ - async pluginsRuntimesCatalogListPluginsRuntimes_6Raw(requestParameters: SystemApiPluginsRuntimesCatalogListPluginsRuntimes0Request, initOverrides?: RequestInit | runtime.InitOverrideFunction): Promise> { + async pluginsRuntimesCatalogListPluginsRuntimes_5Raw(requestParameters: SystemApiPluginsRuntimesCatalogListPluginsRuntimes0Request, initOverrides?: RequestInit | runtime.InitOverrideFunction): Promise> { if (requestParameters['list'] == null) { throw new runtime.RequiredError( 'list', - 'Required parameter "list" was null or undefined when calling pluginsRuntimesCatalogListPluginsRuntimes_6().' + 'Required parameter "list" was null or undefined when calling pluginsRuntimesCatalogListPluginsRuntimes_5().' ); } @@ -6415,8 +6388,8 @@ export class SystemApi extends runtime.BaseAPI { /** */ - async pluginsRuntimesCatalogListPluginsRuntimes_6(list: SystemApiPluginsRuntimesCatalogListPluginsRuntimes0ListEnum, initOverrides?: RequestInit | runtime.InitOverrideFunction): Promise { - const response = await this.pluginsRuntimesCatalogListPluginsRuntimes_6Raw({ list: list }, initOverrides); + async pluginsRuntimesCatalogListPluginsRuntimes_5(list: SystemApiPluginsRuntimesCatalogListPluginsRuntimes0ListEnum, initOverrides?: RequestInit | runtime.InitOverrideFunction): Promise { + const response = await this.pluginsRuntimesCatalogListPluginsRuntimes_5Raw({ list: list }, initOverrides); return await response.value(); } @@ -8093,7 +8066,7 @@ export class SystemApi extends runtime.BaseAPI { /** * Read the current status of the request limiter. */ - async readVerbosityLevelFor_7Raw(initOverrides?: RequestInit | runtime.InitOverrideFunction): Promise> { + async readVerbosityLevelFor_6Raw(initOverrides?: RequestInit | runtime.InitOverrideFunction): Promise> { const queryParameters: any = {}; const headerParameters: runtime.HTTPHeaders = {}; @@ -8112,8 +8085,8 @@ export class SystemApi extends runtime.BaseAPI { /** * Read the current status of the request limiter. */ - async readVerbosityLevelFor_7(initOverrides?: RequestInit | runtime.InitOverrideFunction): Promise { - const response = await this.readVerbosityLevelFor_7Raw(initOverrides); + async readVerbosityLevelFor_6(initOverrides?: RequestInit | runtime.InitOverrideFunction): Promise { + const response = await this.readVerbosityLevelFor_6Raw(initOverrides); return await response.value(); } @@ -9447,18 +9420,18 @@ export class SystemApi extends runtime.BaseAPI { /** * Deletes the specified event notification subscription and stops sending event notifications to it. */ - async subscriptionsCreate_8Raw(requestParameters: SystemApiSubscriptionsCreate0Request, initOverrides?: RequestInit | runtime.InitOverrideFunction): Promise> { + async subscriptionsCreate_7Raw(requestParameters: SystemApiSubscriptionsCreate0Request, initOverrides?: RequestInit | runtime.InitOverrideFunction): Promise> { if (requestParameters['id'] == null) { throw new runtime.RequiredError( 'id', - 'Required parameter "id" was null or undefined when calling subscriptionsCreate_8().' + 'Required parameter "id" was null or undefined when calling subscriptionsCreate_7().' ); } if (requestParameters['plugin'] == null) { throw new runtime.RequiredError( 'plugin', - 'Required parameter "plugin" was null or undefined when calling subscriptionsCreate_8().' + 'Required parameter "plugin" was null or undefined when calling subscriptionsCreate_7().' ); } @@ -9480,8 +9453,8 @@ export class SystemApi extends runtime.BaseAPI { /** * Deletes the specified event notification subscription and stops sending event notifications to it. */ - async subscriptionsCreate_8(id: string, plugin: string, initOverrides?: RequestInit | runtime.InitOverrideFunction): Promise { - const response = await this.subscriptionsCreate_8Raw({ id: id, plugin: plugin }, initOverrides); + async subscriptionsCreate_7(id: string, plugin: string, initOverrides?: RequestInit | runtime.InitOverrideFunction): Promise { + const response = await this.subscriptionsCreate_7Raw({ id: id, plugin: plugin }, initOverrides); return await response.value(); } diff --git a/src/models/AuthTuneConfigurationParametersRequest.ts b/src/models/AuthTuneConfigurationParametersRequest.ts index faeee7e..86b6169 100644 --- a/src/models/AuthTuneConfigurationParametersRequest.ts +++ b/src/models/AuthTuneConfigurationParametersRequest.ts @@ -95,6 +95,12 @@ export interface AuthTuneConfigurationParametersRequest { * @memberof AuthTuneConfigurationParametersRequest */ plugin_version?: string; + /** + * Whether to turn on seal wrapping for the mount. + * @type {boolean} + * @memberof AuthTuneConfigurationParametersRequest + */ + seal_wrap?: boolean; /** * The type of token to issue (service or batch). * @type {string} @@ -144,6 +150,7 @@ export function AuthTuneConfigurationParametersRequestFromJSONTyped(json: any, i 'override_pinned_version': json['override_pinned_version'] == null ? undefined : json['override_pinned_version'], 'passthrough_request_headers': json['passthrough_request_headers'] == null ? undefined : json['passthrough_request_headers'], 'plugin_version': json['plugin_version'] == null ? undefined : json['plugin_version'], + 'seal_wrap': json['seal_wrap'] == null ? undefined : json['seal_wrap'], 'token_type': json['token_type'] == null ? undefined : json['token_type'], 'trim_request_trailing_slashes': json['trim_request_trailing_slashes'] == null ? undefined : json['trim_request_trailing_slashes'], 'user_lockout_config': json['user_lockout_config'] == null ? undefined : json['user_lockout_config'], @@ -173,6 +180,7 @@ export function AuthTuneConfigurationParametersRequestToJSONTyped(value?: AuthTu 'override_pinned_version': value['override_pinned_version'], 'passthrough_request_headers': value['passthrough_request_headers'], 'plugin_version': value['plugin_version'], + 'seal_wrap': value['seal_wrap'], 'token_type': value['token_type'], 'trim_request_trailing_slashes': value['trim_request_trailing_slashes'], 'user_lockout_config': value['user_lockout_config'], diff --git a/src/models/AwsGenerateCredentialsResponse.ts b/src/models/AwsGenerateCredentialsResponse.ts new file mode 100644 index 0000000..697abda --- /dev/null +++ b/src/models/AwsGenerateCredentialsResponse.ts @@ -0,0 +1,109 @@ +/** + * Copyright IBM Corp. 2025, 2026 + */ + +/* tslint:disable */ +/* eslint-disable */ +/** + * HashiCorp Vault API + * HTTP API that gives you full access to Vault. All API routes are prefixed with `/v1/`. + * + * The version of the OpenAPI document: 2.2.0 + * + * + * NOTE: This class is auto generated by OpenAPI Generator (https://openapi-generator.tech). + * https://openapi-generator.tech + * Do not edit the class manually. + */ + +import { mapValues } from '../runtime'; +/** + * + * @export + * @interface AwsGenerateCredentialsResponse + */ +export interface AwsGenerateCredentialsResponse { + /** + * AWS access key ID. + * @type {string} + * @memberof AwsGenerateCredentialsResponse + */ + access_key?: string; + /** + * ARN of the assumed role (only set for assumed_role credential type). + * @type {string} + * @memberof AwsGenerateCredentialsResponse + */ + arn?: string; + /** + * AWS secret access key. + * @type {string} + * @memberof AwsGenerateCredentialsResponse + */ + secret_key?: string; + /** + * AWS security token for STS credentials. Deprecated; use session_token. + * @type {string} + * @memberof AwsGenerateCredentialsResponse + */ + security_token?: string; + /** + * AWS session token for STS credentials. + * @type {string} + * @memberof AwsGenerateCredentialsResponse + */ + session_token?: string; + /** + * TTL of the credentials in seconds (only set for STS credential types). + * @type {number} + * @memberof AwsGenerateCredentialsResponse + */ + ttl?: number; +} + +/** + * Check if a given object implements the AwsGenerateCredentialsResponse interface. + */ +export function instanceOfAwsGenerateCredentialsResponse(value: object): value is AwsGenerateCredentialsResponse { + return true; +} + +export function AwsGenerateCredentialsResponseFromJSON(json: any): AwsGenerateCredentialsResponse { + return AwsGenerateCredentialsResponseFromJSONTyped(json, false); +} + +export function AwsGenerateCredentialsResponseFromJSONTyped(json: any, ignoreDiscriminator: boolean): AwsGenerateCredentialsResponse { + if (json == null) { + return json; + } + return { + + 'access_key': json['access_key'] == null ? undefined : json['access_key'], + 'arn': json['arn'] == null ? undefined : json['arn'], + 'secret_key': json['secret_key'] == null ? undefined : json['secret_key'], + 'security_token': json['security_token'] == null ? undefined : json['security_token'], + 'session_token': json['session_token'] == null ? undefined : json['session_token'], + 'ttl': json['ttl'] == null ? undefined : json['ttl'], + }; +} + +export function AwsGenerateCredentialsResponseToJSON(json: any): AwsGenerateCredentialsResponse { + return AwsGenerateCredentialsResponseToJSONTyped(json, false); +} + +export function AwsGenerateCredentialsResponseToJSONTyped(value?: AwsGenerateCredentialsResponse | null, ignoreDiscriminator: boolean = false): any { + if (value == null) { + return value; + } + + return { + + 'access_key': value['access_key'], + 'arn': value['arn'], + 'secret_key': value['secret_key'], + 'security_token': value['security_token'], + 'session_token': value['session_token'], + 'ttl': value['ttl'], + }; +} + diff --git a/src/models/AwsGenerateCredentialsWithParametersResponse.ts b/src/models/AwsGenerateCredentialsWithParametersResponse.ts new file mode 100644 index 0000000..7784699 --- /dev/null +++ b/src/models/AwsGenerateCredentialsWithParametersResponse.ts @@ -0,0 +1,109 @@ +/** + * Copyright IBM Corp. 2025, 2026 + */ + +/* tslint:disable */ +/* eslint-disable */ +/** + * HashiCorp Vault API + * HTTP API that gives you full access to Vault. All API routes are prefixed with `/v1/`. + * + * The version of the OpenAPI document: 2.2.0 + * + * + * NOTE: This class is auto generated by OpenAPI Generator (https://openapi-generator.tech). + * https://openapi-generator.tech + * Do not edit the class manually. + */ + +import { mapValues } from '../runtime'; +/** + * + * @export + * @interface AwsGenerateCredentialsWithParametersResponse + */ +export interface AwsGenerateCredentialsWithParametersResponse { + /** + * AWS access key ID. + * @type {string} + * @memberof AwsGenerateCredentialsWithParametersResponse + */ + access_key?: string; + /** + * ARN of the assumed role (only set for assumed_role credential type). + * @type {string} + * @memberof AwsGenerateCredentialsWithParametersResponse + */ + arn?: string; + /** + * AWS secret access key. + * @type {string} + * @memberof AwsGenerateCredentialsWithParametersResponse + */ + secret_key?: string; + /** + * AWS security token for STS credentials. Deprecated; use session_token. + * @type {string} + * @memberof AwsGenerateCredentialsWithParametersResponse + */ + security_token?: string; + /** + * AWS session token for STS credentials. + * @type {string} + * @memberof AwsGenerateCredentialsWithParametersResponse + */ + session_token?: string; + /** + * TTL of the credentials in seconds (only set for STS credential types). + * @type {number} + * @memberof AwsGenerateCredentialsWithParametersResponse + */ + ttl?: number; +} + +/** + * Check if a given object implements the AwsGenerateCredentialsWithParametersResponse interface. + */ +export function instanceOfAwsGenerateCredentialsWithParametersResponse(value: object): value is AwsGenerateCredentialsWithParametersResponse { + return true; +} + +export function AwsGenerateCredentialsWithParametersResponseFromJSON(json: any): AwsGenerateCredentialsWithParametersResponse { + return AwsGenerateCredentialsWithParametersResponseFromJSONTyped(json, false); +} + +export function AwsGenerateCredentialsWithParametersResponseFromJSONTyped(json: any, ignoreDiscriminator: boolean): AwsGenerateCredentialsWithParametersResponse { + if (json == null) { + return json; + } + return { + + 'access_key': json['access_key'] == null ? undefined : json['access_key'], + 'arn': json['arn'] == null ? undefined : json['arn'], + 'secret_key': json['secret_key'] == null ? undefined : json['secret_key'], + 'security_token': json['security_token'] == null ? undefined : json['security_token'], + 'session_token': json['session_token'] == null ? undefined : json['session_token'], + 'ttl': json['ttl'] == null ? undefined : json['ttl'], + }; +} + +export function AwsGenerateCredentialsWithParametersResponseToJSON(json: any): AwsGenerateCredentialsWithParametersResponse { + return AwsGenerateCredentialsWithParametersResponseToJSONTyped(json, false); +} + +export function AwsGenerateCredentialsWithParametersResponseToJSONTyped(value?: AwsGenerateCredentialsWithParametersResponse | null, ignoreDiscriminator: boolean = false): any { + if (value == null) { + return value; + } + + return { + + 'access_key': value['access_key'], + 'arn': value['arn'], + 'secret_key': value['secret_key'], + 'security_token': value['security_token'], + 'session_token': value['session_token'], + 'ttl': value['ttl'], + }; +} + diff --git a/src/models/AwsGenerateStsCredentialsResponse.ts b/src/models/AwsGenerateStsCredentialsResponse.ts new file mode 100644 index 0000000..f53ec3e --- /dev/null +++ b/src/models/AwsGenerateStsCredentialsResponse.ts @@ -0,0 +1,109 @@ +/** + * Copyright IBM Corp. 2025, 2026 + */ + +/* tslint:disable */ +/* eslint-disable */ +/** + * HashiCorp Vault API + * HTTP API that gives you full access to Vault. All API routes are prefixed with `/v1/`. + * + * The version of the OpenAPI document: 2.2.0 + * + * + * NOTE: This class is auto generated by OpenAPI Generator (https://openapi-generator.tech). + * https://openapi-generator.tech + * Do not edit the class manually. + */ + +import { mapValues } from '../runtime'; +/** + * + * @export + * @interface AwsGenerateStsCredentialsResponse + */ +export interface AwsGenerateStsCredentialsResponse { + /** + * AWS access key ID. + * @type {string} + * @memberof AwsGenerateStsCredentialsResponse + */ + access_key?: string; + /** + * ARN of the assumed role (only set for assumed_role credential type). + * @type {string} + * @memberof AwsGenerateStsCredentialsResponse + */ + arn?: string; + /** + * AWS secret access key. + * @type {string} + * @memberof AwsGenerateStsCredentialsResponse + */ + secret_key?: string; + /** + * AWS security token for STS credentials. Deprecated; use session_token. + * @type {string} + * @memberof AwsGenerateStsCredentialsResponse + */ + security_token?: string; + /** + * AWS session token for STS credentials. + * @type {string} + * @memberof AwsGenerateStsCredentialsResponse + */ + session_token?: string; + /** + * TTL of the credentials in seconds (only set for STS credential types). + * @type {number} + * @memberof AwsGenerateStsCredentialsResponse + */ + ttl?: number; +} + +/** + * Check if a given object implements the AwsGenerateStsCredentialsResponse interface. + */ +export function instanceOfAwsGenerateStsCredentialsResponse(value: object): value is AwsGenerateStsCredentialsResponse { + return true; +} + +export function AwsGenerateStsCredentialsResponseFromJSON(json: any): AwsGenerateStsCredentialsResponse { + return AwsGenerateStsCredentialsResponseFromJSONTyped(json, false); +} + +export function AwsGenerateStsCredentialsResponseFromJSONTyped(json: any, ignoreDiscriminator: boolean): AwsGenerateStsCredentialsResponse { + if (json == null) { + return json; + } + return { + + 'access_key': json['access_key'] == null ? undefined : json['access_key'], + 'arn': json['arn'] == null ? undefined : json['arn'], + 'secret_key': json['secret_key'] == null ? undefined : json['secret_key'], + 'security_token': json['security_token'] == null ? undefined : json['security_token'], + 'session_token': json['session_token'] == null ? undefined : json['session_token'], + 'ttl': json['ttl'] == null ? undefined : json['ttl'], + }; +} + +export function AwsGenerateStsCredentialsResponseToJSON(json: any): AwsGenerateStsCredentialsResponse { + return AwsGenerateStsCredentialsResponseToJSONTyped(json, false); +} + +export function AwsGenerateStsCredentialsResponseToJSONTyped(value?: AwsGenerateStsCredentialsResponse | null, ignoreDiscriminator: boolean = false): any { + if (value == null) { + return value; + } + + return { + + 'access_key': value['access_key'], + 'arn': value['arn'], + 'secret_key': value['secret_key'], + 'security_token': value['security_token'], + 'session_token': value['session_token'], + 'ttl': value['ttl'], + }; +} + diff --git a/src/models/AwsGenerateStsCredentialsWithParametersResponse.ts b/src/models/AwsGenerateStsCredentialsWithParametersResponse.ts new file mode 100644 index 0000000..a257d7b --- /dev/null +++ b/src/models/AwsGenerateStsCredentialsWithParametersResponse.ts @@ -0,0 +1,109 @@ +/** + * Copyright IBM Corp. 2025, 2026 + */ + +/* tslint:disable */ +/* eslint-disable */ +/** + * HashiCorp Vault API + * HTTP API that gives you full access to Vault. All API routes are prefixed with `/v1/`. + * + * The version of the OpenAPI document: 2.2.0 + * + * + * NOTE: This class is auto generated by OpenAPI Generator (https://openapi-generator.tech). + * https://openapi-generator.tech + * Do not edit the class manually. + */ + +import { mapValues } from '../runtime'; +/** + * + * @export + * @interface AwsGenerateStsCredentialsWithParametersResponse + */ +export interface AwsGenerateStsCredentialsWithParametersResponse { + /** + * AWS access key ID. + * @type {string} + * @memberof AwsGenerateStsCredentialsWithParametersResponse + */ + access_key?: string; + /** + * ARN of the assumed role (only set for assumed_role credential type). + * @type {string} + * @memberof AwsGenerateStsCredentialsWithParametersResponse + */ + arn?: string; + /** + * AWS secret access key. + * @type {string} + * @memberof AwsGenerateStsCredentialsWithParametersResponse + */ + secret_key?: string; + /** + * AWS security token for STS credentials. Deprecated; use session_token. + * @type {string} + * @memberof AwsGenerateStsCredentialsWithParametersResponse + */ + security_token?: string; + /** + * AWS session token for STS credentials. + * @type {string} + * @memberof AwsGenerateStsCredentialsWithParametersResponse + */ + session_token?: string; + /** + * TTL of the credentials in seconds (only set for STS credential types). + * @type {number} + * @memberof AwsGenerateStsCredentialsWithParametersResponse + */ + ttl?: number; +} + +/** + * Check if a given object implements the AwsGenerateStsCredentialsWithParametersResponse interface. + */ +export function instanceOfAwsGenerateStsCredentialsWithParametersResponse(value: object): value is AwsGenerateStsCredentialsWithParametersResponse { + return true; +} + +export function AwsGenerateStsCredentialsWithParametersResponseFromJSON(json: any): AwsGenerateStsCredentialsWithParametersResponse { + return AwsGenerateStsCredentialsWithParametersResponseFromJSONTyped(json, false); +} + +export function AwsGenerateStsCredentialsWithParametersResponseFromJSONTyped(json: any, ignoreDiscriminator: boolean): AwsGenerateStsCredentialsWithParametersResponse { + if (json == null) { + return json; + } + return { + + 'access_key': json['access_key'] == null ? undefined : json['access_key'], + 'arn': json['arn'] == null ? undefined : json['arn'], + 'secret_key': json['secret_key'] == null ? undefined : json['secret_key'], + 'security_token': json['security_token'] == null ? undefined : json['security_token'], + 'session_token': json['session_token'] == null ? undefined : json['session_token'], + 'ttl': json['ttl'] == null ? undefined : json['ttl'], + }; +} + +export function AwsGenerateStsCredentialsWithParametersResponseToJSON(json: any): AwsGenerateStsCredentialsWithParametersResponse { + return AwsGenerateStsCredentialsWithParametersResponseToJSONTyped(json, false); +} + +export function AwsGenerateStsCredentialsWithParametersResponseToJSONTyped(value?: AwsGenerateStsCredentialsWithParametersResponse | null, ignoreDiscriminator: boolean = false): any { + if (value == null) { + return value; + } + + return { + + 'access_key': value['access_key'], + 'arn': value['arn'], + 'secret_key': value['secret_key'], + 'security_token': value['security_token'], + 'session_token': value['session_token'], + 'ttl': value['ttl'], + }; +} + diff --git a/src/models/AwsLoginResponse.ts b/src/models/AwsLoginResponse.ts new file mode 100644 index 0000000..fb117b5 --- /dev/null +++ b/src/models/AwsLoginResponse.ts @@ -0,0 +1,157 @@ +/** + * Copyright IBM Corp. 2025, 2026 + */ + +/* tslint:disable */ +/* eslint-disable */ +/** + * HashiCorp Vault API + * HTTP API that gives you full access to Vault. All API routes are prefixed with `/v1/`. + * + * The version of the OpenAPI document: 2.2.0 + * + * + * NOTE: This class is auto generated by OpenAPI Generator (https://openapi-generator.tech). + * https://openapi-generator.tech + * Do not edit the class manually. + */ + +import { mapValues } from '../runtime'; +/** + * + * @export + * @interface AwsLoginResponse + */ +export interface AwsLoginResponse { + /** + * Accessor for the client token. + * @type {string} + * @memberof AwsLoginResponse + */ + accessor?: string; + /** + * Token issued by Vault for the authenticated client. + * @type {string} + * @memberof AwsLoginResponse + */ + client_token?: string; + /** + * Entity ID associated with the token. + * @type {string} + * @memberof AwsLoginResponse + */ + entity_id?: string; + /** + * Lease duration in seconds. + * @type {number} + * @memberof AwsLoginResponse + */ + lease_duration?: number; + /** + * Metadata associated with the token. + * @type {object} + * @memberof AwsLoginResponse + */ + metadata?: object; + /** + * MFA requirement information. + * @type {object} + * @memberof AwsLoginResponse + */ + mfa_requirement?: object; + /** + * Number of uses remaining for the token. + * @type {number} + * @memberof AwsLoginResponse + */ + num_uses?: number; + /** + * Whether the token is an orphan. + * @type {boolean} + * @memberof AwsLoginResponse + */ + orphan?: boolean; + /** + * List of policies associated with the token. + * @type {Array} + * @memberof AwsLoginResponse + */ + policies?: Array; + /** + * Whether the token is renewable. + * @type {boolean} + * @memberof AwsLoginResponse + */ + renewable?: boolean; + /** + * List of token policies. + * @type {Array} + * @memberof AwsLoginResponse + */ + token_policies?: Array; + /** + * Type of the token. + * @type {string} + * @memberof AwsLoginResponse + */ + token_type?: string; +} + +/** + * Check if a given object implements the AwsLoginResponse interface. + */ +export function instanceOfAwsLoginResponse(value: object): value is AwsLoginResponse { + return true; +} + +export function AwsLoginResponseFromJSON(json: any): AwsLoginResponse { + return AwsLoginResponseFromJSONTyped(json, false); +} + +export function AwsLoginResponseFromJSONTyped(json: any, ignoreDiscriminator: boolean): AwsLoginResponse { + if (json == null) { + return json; + } + return { + + 'accessor': json['accessor'] == null ? undefined : json['accessor'], + 'client_token': json['client_token'] == null ? undefined : json['client_token'], + 'entity_id': json['entity_id'] == null ? undefined : json['entity_id'], + 'lease_duration': json['lease_duration'] == null ? undefined : json['lease_duration'], + 'metadata': json['metadata'] == null ? undefined : json['metadata'], + 'mfa_requirement': json['mfa_requirement'] == null ? undefined : json['mfa_requirement'], + 'num_uses': json['num_uses'] == null ? undefined : json['num_uses'], + 'orphan': json['orphan'] == null ? undefined : json['orphan'], + 'policies': json['policies'] == null ? undefined : json['policies'], + 'renewable': json['renewable'] == null ? undefined : json['renewable'], + 'token_policies': json['token_policies'] == null ? undefined : json['token_policies'], + 'token_type': json['token_type'] == null ? undefined : json['token_type'], + }; +} + +export function AwsLoginResponseToJSON(json: any): AwsLoginResponse { + return AwsLoginResponseToJSONTyped(json, false); +} + +export function AwsLoginResponseToJSONTyped(value?: AwsLoginResponse | null, ignoreDiscriminator: boolean = false): any { + if (value == null) { + return value; + } + + return { + + 'accessor': value['accessor'], + 'client_token': value['client_token'], + 'entity_id': value['entity_id'], + 'lease_duration': value['lease_duration'], + 'metadata': value['metadata'], + 'mfa_requirement': value['mfa_requirement'], + 'num_uses': value['num_uses'], + 'orphan': value['orphan'], + 'policies': value['policies'], + 'renewable': value['renewable'], + 'token_policies': value['token_policies'], + 'token_type': value['token_type'], + }; +} + diff --git a/src/models/AwsReadAuthRoleResponse.ts b/src/models/AwsReadAuthRoleResponse.ts new file mode 100644 index 0000000..8040020 --- /dev/null +++ b/src/models/AwsReadAuthRoleResponse.ts @@ -0,0 +1,277 @@ +/** + * Copyright IBM Corp. 2025, 2026 + */ + +/* tslint:disable */ +/* eslint-disable */ +/** + * HashiCorp Vault API + * HTTP API that gives you full access to Vault. All API routes are prefixed with `/v1/`. + * + * The version of the OpenAPI document: 2.2.0 + * + * + * NOTE: This class is auto generated by OpenAPI Generator (https://openapi-generator.tech). + * https://openapi-generator.tech + * Do not edit the class manually. + */ + +import { mapValues } from '../runtime'; +/** + * + * @export + * @interface AwsReadAuthRoleResponse + */ +export interface AwsReadAuthRoleResponse { + /** + * Whether instance migration is allowed. + * @type {boolean} + * @memberof AwsReadAuthRoleResponse + */ + allow_instance_migration?: boolean; + /** + * Auth type permitted to authenticate to this role. + * @type {string} + * @memberof AwsReadAuthRoleResponse + */ + auth_type?: string; + /** + * AWS account IDs that instances must belong to. + * @type {Array} + * @memberof AwsReadAuthRoleResponse + */ + bound_account_id?: Array; + /** + * AMI IDs that instances must use to authenticate. + * @type {Array} + * @memberof AwsReadAuthRoleResponse + */ + bound_ami_id?: Array; + /** + * EC2 instance IDs that are allowed to authenticate. + * @type {Array} + * @memberof AwsReadAuthRoleResponse + */ + bound_ec2_instance_id?: Array; + /** + * IAM instance profile ARN prefixes that instances must match. + * @type {Array} + * @memberof AwsReadAuthRoleResponse + */ + bound_iam_instance_profile_arn?: Array; + /** + * IAM principal ARNs bound to this role. + * @type {Array} + * @memberof AwsReadAuthRoleResponse + */ + bound_iam_principal_arn?: Array; + /** + * Resolved unique IDs for IAM principal ARNs. + * @type {Array} + * @memberof AwsReadAuthRoleResponse + */ + bound_iam_principal_id?: Array; + /** + * IAM role ARNs that instances must match. + * @type {Array} + * @memberof AwsReadAuthRoleResponse + */ + bound_iam_role_arn?: Array; + /** + * AWS regions that instances must be in. + * @type {Array} + * @memberof AwsReadAuthRoleResponse + */ + bound_region?: Array; + /** + * VPC subnet IDs that instances must be in. + * @type {Array} + * @memberof AwsReadAuthRoleResponse + */ + bound_subnet_id?: Array; + /** + * VPC IDs that instances must be in. + * @type {Array} + * @memberof AwsReadAuthRoleResponse + */ + bound_vpc_id?: Array; + /** + * Whether reauthentication is disallowed. + * @type {boolean} + * @memberof AwsReadAuthRoleResponse + */ + disallow_reauthentication?: boolean; + /** + * AWS region used when inferring the entity type. + * @type {string} + * @memberof AwsReadAuthRoleResponse + */ + inferred_aws_region?: string; + /** + * Entity type inferred from the authenticated principal. + * @type {string} + * @memberof AwsReadAuthRoleResponse + */ + inferred_entity_type?: string; + /** + * Whether IAM ARNs are resolved to unique IDs. + * @type {boolean} + * @memberof AwsReadAuthRoleResponse + */ + resolve_aws_unique_ids?: boolean; + /** + * Unique ID of the role. + * @type {string} + * @memberof AwsReadAuthRoleResponse + */ + role_id?: string; + /** + * EC2 instance tag key for role tags. + * @type {string} + * @memberof AwsReadAuthRoleResponse + */ + role_tag?: string; + /** + * CIDR blocks that tokens are restricted to. + * @type {Array} + * @memberof AwsReadAuthRoleResponse + */ + token_bound_cidrs?: Array; + /** + * Explicit maximum TTL for tokens. + * @type {number} + * @memberof AwsReadAuthRoleResponse + */ + token_explicit_max_ttl?: number; + /** + * Maximum TTL for tokens. + * @type {number} + * @memberof AwsReadAuthRoleResponse + */ + token_max_ttl?: number; + /** + * Whether the default policy is not added to tokens. + * @type {boolean} + * @memberof AwsReadAuthRoleResponse + */ + token_no_default_policy?: boolean; + /** + * Maximum number of token uses. + * @type {number} + * @memberof AwsReadAuthRoleResponse + */ + token_num_uses?: number; + /** + * Renewal period for tokens. + * @type {number} + * @memberof AwsReadAuthRoleResponse + */ + token_period?: number; + /** + * Policies applied to tokens. + * @type {Array} + * @memberof AwsReadAuthRoleResponse + */ + token_policies?: Array; + /** + * TTL for tokens. + * @type {number} + * @memberof AwsReadAuthRoleResponse + */ + token_ttl?: number; + /** + * Type of tokens generated. + * @type {string} + * @memberof AwsReadAuthRoleResponse + */ + token_type?: string; +} + +/** + * Check if a given object implements the AwsReadAuthRoleResponse interface. + */ +export function instanceOfAwsReadAuthRoleResponse(value: object): value is AwsReadAuthRoleResponse { + return true; +} + +export function AwsReadAuthRoleResponseFromJSON(json: any): AwsReadAuthRoleResponse { + return AwsReadAuthRoleResponseFromJSONTyped(json, false); +} + +export function AwsReadAuthRoleResponseFromJSONTyped(json: any, ignoreDiscriminator: boolean): AwsReadAuthRoleResponse { + if (json == null) { + return json; + } + return { + + 'allow_instance_migration': json['allow_instance_migration'] == null ? undefined : json['allow_instance_migration'], + 'auth_type': json['auth_type'] == null ? undefined : json['auth_type'], + 'bound_account_id': json['bound_account_id'] == null ? undefined : json['bound_account_id'], + 'bound_ami_id': json['bound_ami_id'] == null ? undefined : json['bound_ami_id'], + 'bound_ec2_instance_id': json['bound_ec2_instance_id'] == null ? undefined : json['bound_ec2_instance_id'], + 'bound_iam_instance_profile_arn': json['bound_iam_instance_profile_arn'] == null ? undefined : json['bound_iam_instance_profile_arn'], + 'bound_iam_principal_arn': json['bound_iam_principal_arn'] == null ? undefined : json['bound_iam_principal_arn'], + 'bound_iam_principal_id': json['bound_iam_principal_id'] == null ? undefined : json['bound_iam_principal_id'], + 'bound_iam_role_arn': json['bound_iam_role_arn'] == null ? undefined : json['bound_iam_role_arn'], + 'bound_region': json['bound_region'] == null ? undefined : json['bound_region'], + 'bound_subnet_id': json['bound_subnet_id'] == null ? undefined : json['bound_subnet_id'], + 'bound_vpc_id': json['bound_vpc_id'] == null ? undefined : json['bound_vpc_id'], + 'disallow_reauthentication': json['disallow_reauthentication'] == null ? undefined : json['disallow_reauthentication'], + 'inferred_aws_region': json['inferred_aws_region'] == null ? undefined : json['inferred_aws_region'], + 'inferred_entity_type': json['inferred_entity_type'] == null ? undefined : json['inferred_entity_type'], + 'resolve_aws_unique_ids': json['resolve_aws_unique_ids'] == null ? undefined : json['resolve_aws_unique_ids'], + 'role_id': json['role_id'] == null ? undefined : json['role_id'], + 'role_tag': json['role_tag'] == null ? undefined : json['role_tag'], + 'token_bound_cidrs': json['token_bound_cidrs'] == null ? undefined : json['token_bound_cidrs'], + 'token_explicit_max_ttl': json['token_explicit_max_ttl'] == null ? undefined : json['token_explicit_max_ttl'], + 'token_max_ttl': json['token_max_ttl'] == null ? undefined : json['token_max_ttl'], + 'token_no_default_policy': json['token_no_default_policy'] == null ? undefined : json['token_no_default_policy'], + 'token_num_uses': json['token_num_uses'] == null ? undefined : json['token_num_uses'], + 'token_period': json['token_period'] == null ? undefined : json['token_period'], + 'token_policies': json['token_policies'] == null ? undefined : json['token_policies'], + 'token_ttl': json['token_ttl'] == null ? undefined : json['token_ttl'], + 'token_type': json['token_type'] == null ? undefined : json['token_type'], + }; +} + +export function AwsReadAuthRoleResponseToJSON(json: any): AwsReadAuthRoleResponse { + return AwsReadAuthRoleResponseToJSONTyped(json, false); +} + +export function AwsReadAuthRoleResponseToJSONTyped(value?: AwsReadAuthRoleResponse | null, ignoreDiscriminator: boolean = false): any { + if (value == null) { + return value; + } + + return { + + 'allow_instance_migration': value['allow_instance_migration'], + 'auth_type': value['auth_type'], + 'bound_account_id': value['bound_account_id'], + 'bound_ami_id': value['bound_ami_id'], + 'bound_ec2_instance_id': value['bound_ec2_instance_id'], + 'bound_iam_instance_profile_arn': value['bound_iam_instance_profile_arn'], + 'bound_iam_principal_arn': value['bound_iam_principal_arn'], + 'bound_iam_principal_id': value['bound_iam_principal_id'], + 'bound_iam_role_arn': value['bound_iam_role_arn'], + 'bound_region': value['bound_region'], + 'bound_subnet_id': value['bound_subnet_id'], + 'bound_vpc_id': value['bound_vpc_id'], + 'disallow_reauthentication': value['disallow_reauthentication'], + 'inferred_aws_region': value['inferred_aws_region'], + 'inferred_entity_type': value['inferred_entity_type'], + 'resolve_aws_unique_ids': value['resolve_aws_unique_ids'], + 'role_id': value['role_id'], + 'role_tag': value['role_tag'], + 'token_bound_cidrs': value['token_bound_cidrs'], + 'token_explicit_max_ttl': value['token_explicit_max_ttl'], + 'token_max_ttl': value['token_max_ttl'], + 'token_no_default_policy': value['token_no_default_policy'], + 'token_num_uses': value['token_num_uses'], + 'token_period': value['token_period'], + 'token_policies': value['token_policies'], + 'token_ttl': value['token_ttl'], + 'token_type': value['token_type'], + }; +} + diff --git a/src/models/AwsReadCertificateConfigurationResponse.ts b/src/models/AwsReadCertificateConfigurationResponse.ts new file mode 100644 index 0000000..89e1a67 --- /dev/null +++ b/src/models/AwsReadCertificateConfigurationResponse.ts @@ -0,0 +1,77 @@ +/** + * Copyright IBM Corp. 2025, 2026 + */ + +/* tslint:disable */ +/* eslint-disable */ +/** + * HashiCorp Vault API + * HTTP API that gives you full access to Vault. All API routes are prefixed with `/v1/`. + * + * The version of the OpenAPI document: 2.2.0 + * + * + * NOTE: This class is auto generated by OpenAPI Generator (https://openapi-generator.tech). + * https://openapi-generator.tech + * Do not edit the class manually. + */ + +import { mapValues } from '../runtime'; +/** + * + * @export + * @interface AwsReadCertificateConfigurationResponse + */ +export interface AwsReadCertificateConfigurationResponse { + /** + * Base64-encoded AWS public certificate used to verify PKCS7 signatures. + * @type {string} + * @memberof AwsReadCertificateConfigurationResponse + */ + aws_public_cert?: string; + /** + * Type of document the certificate verifies, either pkcs7 or identity. + * @type {string} + * @memberof AwsReadCertificateConfigurationResponse + */ + type?: string; +} + +/** + * Check if a given object implements the AwsReadCertificateConfigurationResponse interface. + */ +export function instanceOfAwsReadCertificateConfigurationResponse(value: object): value is AwsReadCertificateConfigurationResponse { + return true; +} + +export function AwsReadCertificateConfigurationResponseFromJSON(json: any): AwsReadCertificateConfigurationResponse { + return AwsReadCertificateConfigurationResponseFromJSONTyped(json, false); +} + +export function AwsReadCertificateConfigurationResponseFromJSONTyped(json: any, ignoreDiscriminator: boolean): AwsReadCertificateConfigurationResponse { + if (json == null) { + return json; + } + return { + + 'aws_public_cert': json['aws_public_cert'] == null ? undefined : json['aws_public_cert'], + 'type': json['type'] == null ? undefined : json['type'], + }; +} + +export function AwsReadCertificateConfigurationResponseToJSON(json: any): AwsReadCertificateConfigurationResponse { + return AwsReadCertificateConfigurationResponseToJSONTyped(json, false); +} + +export function AwsReadCertificateConfigurationResponseToJSONTyped(value?: AwsReadCertificateConfigurationResponse | null, ignoreDiscriminator: boolean = false): any { + if (value == null) { + return value; + } + + return { + + 'aws_public_cert': value['aws_public_cert'], + 'type': value['type'], + }; +} + diff --git a/src/models/AwsReadClientConfigurationResponse.ts b/src/models/AwsReadClientConfigurationResponse.ts new file mode 100644 index 0000000..72634a8 --- /dev/null +++ b/src/models/AwsReadClientConfigurationResponse.ts @@ -0,0 +1,197 @@ +/** + * Copyright IBM Corp. 2025, 2026 + */ + +/* tslint:disable */ +/* eslint-disable */ +/** + * HashiCorp Vault API + * HTTP API that gives you full access to Vault. All API routes are prefixed with `/v1/`. + * + * The version of the OpenAPI document: 2.2.0 + * + * + * NOTE: This class is auto generated by OpenAPI Generator (https://openapi-generator.tech). + * https://openapi-generator.tech + * Do not edit the class manually. + */ + +import { mapValues } from '../runtime'; +/** + * + * @export + * @interface AwsReadClientConfigurationResponse + */ +export interface AwsReadClientConfigurationResponse { + /** + * AWS access key ID. + * @type {string} + * @memberof AwsReadClientConfigurationResponse + */ + access_key?: string; + /** + * Allowed additional headers in AWS STS request headers. + * @type {Array} + * @memberof AwsReadClientConfigurationResponse + */ + allowed_sts_header_values?: Array; + /** + * Whether automated rotation is disabled. + * @type {boolean} + * @memberof AwsReadClientConfigurationResponse + */ + disable_automated_rotation?: boolean; + /** + * Custom endpoint URL for AWS EC2 API calls. + * @type {string} + * @memberof AwsReadClientConfigurationResponse + */ + endpoint?: string; + /** + * Custom endpoint URL for AWS IAM API calls. + * @type {string} + * @memberof AwsReadClientConfigurationResponse + */ + iam_endpoint?: string; + /** + * Required value for the X-Vault-AWS-IAM-Server-ID request header. + * @type {string} + * @memberof AwsReadClientConfigurationResponse + */ + iam_server_id_header_value?: string; + /** + * Audience for plugin identity tokens. + * @type {string} + * @memberof AwsReadClientConfigurationResponse + */ + identity_token_audience?: string; + /** + * Time-to-live for plugin identity tokens in seconds. + * @type {string} + * @memberof AwsReadClientConfigurationResponse + */ + identity_token_ttl?: string; + /** + * Maximum number of retries for AWS API calls. + * @type {number} + * @memberof AwsReadClientConfigurationResponse + */ + max_retries?: number; + /** + * Role ARN for plugin identity token federation. + * @type {string} + * @memberof AwsReadClientConfigurationResponse + */ + role_arn?: string; + /** + * Period in seconds between automated credential rotations. + * @type {string} + * @memberof AwsReadClientConfigurationResponse + */ + rotation_period?: string; + /** + * Name of the rotation policy to use. + * @type {string} + * @memberof AwsReadClientConfigurationResponse + */ + rotation_policy?: string; + /** + * Automated rotation schedule in cron format. + * @type {string} + * @memberof AwsReadClientConfigurationResponse + */ + rotation_schedule?: string; + /** + * Window in seconds during which automated rotation may occur. + * @type {string} + * @memberof AwsReadClientConfigurationResponse + */ + rotation_window?: string; + /** + * Custom endpoint URL for AWS STS API calls. + * @type {string} + * @memberof AwsReadClientConfigurationResponse + */ + sts_endpoint?: string; + /** + * Region for the STS endpoint. + * @type {string} + * @memberof AwsReadClientConfigurationResponse + */ + sts_region?: string; + /** + * Whether to use the STS region from client requests. + * @type {boolean} + * @memberof AwsReadClientConfigurationResponse + */ + use_sts_region_from_client?: boolean; +} + +/** + * Check if a given object implements the AwsReadClientConfigurationResponse interface. + */ +export function instanceOfAwsReadClientConfigurationResponse(value: object): value is AwsReadClientConfigurationResponse { + return true; +} + +export function AwsReadClientConfigurationResponseFromJSON(json: any): AwsReadClientConfigurationResponse { + return AwsReadClientConfigurationResponseFromJSONTyped(json, false); +} + +export function AwsReadClientConfigurationResponseFromJSONTyped(json: any, ignoreDiscriminator: boolean): AwsReadClientConfigurationResponse { + if (json == null) { + return json; + } + return { + + 'access_key': json['access_key'] == null ? undefined : json['access_key'], + 'allowed_sts_header_values': json['allowed_sts_header_values'] == null ? undefined : json['allowed_sts_header_values'], + 'disable_automated_rotation': json['disable_automated_rotation'] == null ? undefined : json['disable_automated_rotation'], + 'endpoint': json['endpoint'] == null ? undefined : json['endpoint'], + 'iam_endpoint': json['iam_endpoint'] == null ? undefined : json['iam_endpoint'], + 'iam_server_id_header_value': json['iam_server_id_header_value'] == null ? undefined : json['iam_server_id_header_value'], + 'identity_token_audience': json['identity_token_audience'] == null ? undefined : json['identity_token_audience'], + 'identity_token_ttl': json['identity_token_ttl'] == null ? undefined : json['identity_token_ttl'], + 'max_retries': json['max_retries'] == null ? undefined : json['max_retries'], + 'role_arn': json['role_arn'] == null ? undefined : json['role_arn'], + 'rotation_period': json['rotation_period'] == null ? undefined : json['rotation_period'], + 'rotation_policy': json['rotation_policy'] == null ? undefined : json['rotation_policy'], + 'rotation_schedule': json['rotation_schedule'] == null ? undefined : json['rotation_schedule'], + 'rotation_window': json['rotation_window'] == null ? undefined : json['rotation_window'], + 'sts_endpoint': json['sts_endpoint'] == null ? undefined : json['sts_endpoint'], + 'sts_region': json['sts_region'] == null ? undefined : json['sts_region'], + 'use_sts_region_from_client': json['use_sts_region_from_client'] == null ? undefined : json['use_sts_region_from_client'], + }; +} + +export function AwsReadClientConfigurationResponseToJSON(json: any): AwsReadClientConfigurationResponse { + return AwsReadClientConfigurationResponseToJSONTyped(json, false); +} + +export function AwsReadClientConfigurationResponseToJSONTyped(value?: AwsReadClientConfigurationResponse | null, ignoreDiscriminator: boolean = false): any { + if (value == null) { + return value; + } + + return { + + 'access_key': value['access_key'], + 'allowed_sts_header_values': value['allowed_sts_header_values'], + 'disable_automated_rotation': value['disable_automated_rotation'], + 'endpoint': value['endpoint'], + 'iam_endpoint': value['iam_endpoint'], + 'iam_server_id_header_value': value['iam_server_id_header_value'], + 'identity_token_audience': value['identity_token_audience'], + 'identity_token_ttl': value['identity_token_ttl'], + 'max_retries': value['max_retries'], + 'role_arn': value['role_arn'], + 'rotation_period': value['rotation_period'], + 'rotation_policy': value['rotation_policy'], + 'rotation_schedule': value['rotation_schedule'], + 'rotation_window': value['rotation_window'], + 'sts_endpoint': value['sts_endpoint'], + 'sts_region': value['sts_region'], + 'use_sts_region_from_client': value['use_sts_region_from_client'], + }; +} + diff --git a/src/models/AwsReadIdentityAccessListResponse.ts b/src/models/AwsReadIdentityAccessListResponse.ts new file mode 100644 index 0000000..2baad6d --- /dev/null +++ b/src/models/AwsReadIdentityAccessListResponse.ts @@ -0,0 +1,117 @@ +/** + * Copyright IBM Corp. 2025, 2026 + */ + +/* tslint:disable */ +/* eslint-disable */ +/** + * HashiCorp Vault API + * HTTP API that gives you full access to Vault. All API routes are prefixed with `/v1/`. + * + * The version of the OpenAPI document: 2.2.0 + * + * + * NOTE: This class is auto generated by OpenAPI Generator (https://openapi-generator.tech). + * https://openapi-generator.tech + * Do not edit the class manually. + */ + +import { mapValues } from '../runtime'; +/** + * + * @export + * @interface AwsReadIdentityAccessListResponse + */ +export interface AwsReadIdentityAccessListResponse { + /** + * Client nonce used during the login. + * @type {string} + * @memberof AwsReadIdentityAccessListResponse + */ + client_nonce?: string; + /** + * Time the access-list entry was created, in RFC3339 format. + * @type {string} + * @memberof AwsReadIdentityAccessListResponse + */ + creation_time?: string; + /** + * Whether reauthentication is disallowed for this instance. + * @type {boolean} + * @memberof AwsReadIdentityAccessListResponse + */ + disallow_reauthentication?: boolean; + /** + * Time the access-list entry expires, in RFC3339 format. + * @type {string} + * @memberof AwsReadIdentityAccessListResponse + */ + expiration_time?: string; + /** + * Time the access-list entry was last updated, in RFC3339 format. + * @type {string} + * @memberof AwsReadIdentityAccessListResponse + */ + last_updated_time?: string; + /** + * The pendingTime field from the instance identity document. + * @type {string} + * @memberof AwsReadIdentityAccessListResponse + */ + pending_time?: string; + /** + * Name of the role used during the last successful login. + * @type {string} + * @memberof AwsReadIdentityAccessListResponse + */ + role?: string; +} + +/** + * Check if a given object implements the AwsReadIdentityAccessListResponse interface. + */ +export function instanceOfAwsReadIdentityAccessListResponse(value: object): value is AwsReadIdentityAccessListResponse { + return true; +} + +export function AwsReadIdentityAccessListResponseFromJSON(json: any): AwsReadIdentityAccessListResponse { + return AwsReadIdentityAccessListResponseFromJSONTyped(json, false); +} + +export function AwsReadIdentityAccessListResponseFromJSONTyped(json: any, ignoreDiscriminator: boolean): AwsReadIdentityAccessListResponse { + if (json == null) { + return json; + } + return { + + 'client_nonce': json['client_nonce'] == null ? undefined : json['client_nonce'], + 'creation_time': json['creation_time'] == null ? undefined : json['creation_time'], + 'disallow_reauthentication': json['disallow_reauthentication'] == null ? undefined : json['disallow_reauthentication'], + 'expiration_time': json['expiration_time'] == null ? undefined : json['expiration_time'], + 'last_updated_time': json['last_updated_time'] == null ? undefined : json['last_updated_time'], + 'pending_time': json['pending_time'] == null ? undefined : json['pending_time'], + 'role': json['role'] == null ? undefined : json['role'], + }; +} + +export function AwsReadIdentityAccessListResponseToJSON(json: any): AwsReadIdentityAccessListResponse { + return AwsReadIdentityAccessListResponseToJSONTyped(json, false); +} + +export function AwsReadIdentityAccessListResponseToJSONTyped(value?: AwsReadIdentityAccessListResponse | null, ignoreDiscriminator: boolean = false): any { + if (value == null) { + return value; + } + + return { + + 'client_nonce': value['client_nonce'], + 'creation_time': value['creation_time'], + 'disallow_reauthentication': value['disallow_reauthentication'], + 'expiration_time': value['expiration_time'], + 'last_updated_time': value['last_updated_time'], + 'pending_time': value['pending_time'], + 'role': value['role'], + }; +} + diff --git a/src/models/AwsReadIdentityAccessListTidySettingsResponse.ts b/src/models/AwsReadIdentityAccessListTidySettingsResponse.ts new file mode 100644 index 0000000..260d64b --- /dev/null +++ b/src/models/AwsReadIdentityAccessListTidySettingsResponse.ts @@ -0,0 +1,77 @@ +/** + * Copyright IBM Corp. 2025, 2026 + */ + +/* tslint:disable */ +/* eslint-disable */ +/** + * HashiCorp Vault API + * HTTP API that gives you full access to Vault. All API routes are prefixed with `/v1/`. + * + * The version of the OpenAPI document: 2.2.0 + * + * + * NOTE: This class is auto generated by OpenAPI Generator (https://openapi-generator.tech). + * https://openapi-generator.tech + * Do not edit the class manually. + */ + +import { mapValues } from '../runtime'; +/** + * + * @export + * @interface AwsReadIdentityAccessListTidySettingsResponse + */ +export interface AwsReadIdentityAccessListTidySettingsResponse { + /** + * Whether periodic tidying of identity access-list entries is disabled. + * @type {boolean} + * @memberof AwsReadIdentityAccessListTidySettingsResponse + */ + disable_periodic_tidy?: boolean; + /** + * Duration past expiration before identities are removed from storage. + * @type {string} + * @memberof AwsReadIdentityAccessListTidySettingsResponse + */ + safety_buffer?: string; +} + +/** + * Check if a given object implements the AwsReadIdentityAccessListTidySettingsResponse interface. + */ +export function instanceOfAwsReadIdentityAccessListTidySettingsResponse(value: object): value is AwsReadIdentityAccessListTidySettingsResponse { + return true; +} + +export function AwsReadIdentityAccessListTidySettingsResponseFromJSON(json: any): AwsReadIdentityAccessListTidySettingsResponse { + return AwsReadIdentityAccessListTidySettingsResponseFromJSONTyped(json, false); +} + +export function AwsReadIdentityAccessListTidySettingsResponseFromJSONTyped(json: any, ignoreDiscriminator: boolean): AwsReadIdentityAccessListTidySettingsResponse { + if (json == null) { + return json; + } + return { + + 'disable_periodic_tidy': json['disable_periodic_tidy'] == null ? undefined : json['disable_periodic_tidy'], + 'safety_buffer': json['safety_buffer'] == null ? undefined : json['safety_buffer'], + }; +} + +export function AwsReadIdentityAccessListTidySettingsResponseToJSON(json: any): AwsReadIdentityAccessListTidySettingsResponse { + return AwsReadIdentityAccessListTidySettingsResponseToJSONTyped(json, false); +} + +export function AwsReadIdentityAccessListTidySettingsResponseToJSONTyped(value?: AwsReadIdentityAccessListTidySettingsResponse | null, ignoreDiscriminator: boolean = false): any { + if (value == null) { + return value; + } + + return { + + 'disable_periodic_tidy': value['disable_periodic_tidy'], + 'safety_buffer': value['safety_buffer'], + }; +} + diff --git a/src/models/AwsReadIdentityIntegrationConfigurationResponse.ts b/src/models/AwsReadIdentityIntegrationConfigurationResponse.ts new file mode 100644 index 0000000..dbf3f11 --- /dev/null +++ b/src/models/AwsReadIdentityIntegrationConfigurationResponse.ts @@ -0,0 +1,93 @@ +/** + * Copyright IBM Corp. 2025, 2026 + */ + +/* tslint:disable */ +/* eslint-disable */ +/** + * HashiCorp Vault API + * HTTP API that gives you full access to Vault. All API routes are prefixed with `/v1/`. + * + * The version of the OpenAPI document: 2.2.0 + * + * + * NOTE: This class is auto generated by OpenAPI Generator (https://openapi-generator.tech). + * https://openapi-generator.tech + * Do not edit the class manually. + */ + +import { mapValues } from '../runtime'; +/** + * + * @export + * @interface AwsReadIdentityIntegrationConfigurationResponse + */ +export interface AwsReadIdentityIntegrationConfigurationResponse { + /** + * How EC2 instances are mapped to identity aliases. + * @type {string} + * @memberof AwsReadIdentityIntegrationConfigurationResponse + */ + ec2_alias?: string; + /** + * Metadata fields to include on EC2 auth tokens. + * @type {Array} + * @memberof AwsReadIdentityIntegrationConfigurationResponse + */ + ec2_metadata?: Array; + /** + * How IAM principals are mapped to identity aliases. + * @type {string} + * @memberof AwsReadIdentityIntegrationConfigurationResponse + */ + iam_alias?: string; + /** + * Metadata fields to include on IAM auth tokens. + * @type {Array} + * @memberof AwsReadIdentityIntegrationConfigurationResponse + */ + iam_metadata?: Array; +} + +/** + * Check if a given object implements the AwsReadIdentityIntegrationConfigurationResponse interface. + */ +export function instanceOfAwsReadIdentityIntegrationConfigurationResponse(value: object): value is AwsReadIdentityIntegrationConfigurationResponse { + return true; +} + +export function AwsReadIdentityIntegrationConfigurationResponseFromJSON(json: any): AwsReadIdentityIntegrationConfigurationResponse { + return AwsReadIdentityIntegrationConfigurationResponseFromJSONTyped(json, false); +} + +export function AwsReadIdentityIntegrationConfigurationResponseFromJSONTyped(json: any, ignoreDiscriminator: boolean): AwsReadIdentityIntegrationConfigurationResponse { + if (json == null) { + return json; + } + return { + + 'ec2_alias': json['ec2_alias'] == null ? undefined : json['ec2_alias'], + 'ec2_metadata': json['ec2_metadata'] == null ? undefined : json['ec2_metadata'], + 'iam_alias': json['iam_alias'] == null ? undefined : json['iam_alias'], + 'iam_metadata': json['iam_metadata'] == null ? undefined : json['iam_metadata'], + }; +} + +export function AwsReadIdentityIntegrationConfigurationResponseToJSON(json: any): AwsReadIdentityIntegrationConfigurationResponse { + return AwsReadIdentityIntegrationConfigurationResponseToJSONTyped(json, false); +} + +export function AwsReadIdentityIntegrationConfigurationResponseToJSONTyped(value?: AwsReadIdentityIntegrationConfigurationResponse | null, ignoreDiscriminator: boolean = false): any { + if (value == null) { + return value; + } + + return { + + 'ec2_alias': value['ec2_alias'], + 'ec2_metadata': value['ec2_metadata'], + 'iam_alias': value['iam_alias'], + 'iam_metadata': value['iam_metadata'], + }; +} + diff --git a/src/models/AwsReadIdentityWhitelistResponse.ts b/src/models/AwsReadIdentityWhitelistResponse.ts new file mode 100644 index 0000000..62f2d93 --- /dev/null +++ b/src/models/AwsReadIdentityWhitelistResponse.ts @@ -0,0 +1,117 @@ +/** + * Copyright IBM Corp. 2025, 2026 + */ + +/* tslint:disable */ +/* eslint-disable */ +/** + * HashiCorp Vault API + * HTTP API that gives you full access to Vault. All API routes are prefixed with `/v1/`. + * + * The version of the OpenAPI document: 2.2.0 + * + * + * NOTE: This class is auto generated by OpenAPI Generator (https://openapi-generator.tech). + * https://openapi-generator.tech + * Do not edit the class manually. + */ + +import { mapValues } from '../runtime'; +/** + * + * @export + * @interface AwsReadIdentityWhitelistResponse + */ +export interface AwsReadIdentityWhitelistResponse { + /** + * Client nonce used during the login. + * @type {string} + * @memberof AwsReadIdentityWhitelistResponse + */ + client_nonce?: string; + /** + * Time the access-list entry was created, in RFC3339 format. + * @type {string} + * @memberof AwsReadIdentityWhitelistResponse + */ + creation_time?: string; + /** + * Whether reauthentication is disallowed for this instance. + * @type {boolean} + * @memberof AwsReadIdentityWhitelistResponse + */ + disallow_reauthentication?: boolean; + /** + * Time the access-list entry expires, in RFC3339 format. + * @type {string} + * @memberof AwsReadIdentityWhitelistResponse + */ + expiration_time?: string; + /** + * Time the access-list entry was last updated, in RFC3339 format. + * @type {string} + * @memberof AwsReadIdentityWhitelistResponse + */ + last_updated_time?: string; + /** + * The pendingTime field from the instance identity document. + * @type {string} + * @memberof AwsReadIdentityWhitelistResponse + */ + pending_time?: string; + /** + * Name of the role used during the last successful login. + * @type {string} + * @memberof AwsReadIdentityWhitelistResponse + */ + role?: string; +} + +/** + * Check if a given object implements the AwsReadIdentityWhitelistResponse interface. + */ +export function instanceOfAwsReadIdentityWhitelistResponse(value: object): value is AwsReadIdentityWhitelistResponse { + return true; +} + +export function AwsReadIdentityWhitelistResponseFromJSON(json: any): AwsReadIdentityWhitelistResponse { + return AwsReadIdentityWhitelistResponseFromJSONTyped(json, false); +} + +export function AwsReadIdentityWhitelistResponseFromJSONTyped(json: any, ignoreDiscriminator: boolean): AwsReadIdentityWhitelistResponse { + if (json == null) { + return json; + } + return { + + 'client_nonce': json['client_nonce'] == null ? undefined : json['client_nonce'], + 'creation_time': json['creation_time'] == null ? undefined : json['creation_time'], + 'disallow_reauthentication': json['disallow_reauthentication'] == null ? undefined : json['disallow_reauthentication'], + 'expiration_time': json['expiration_time'] == null ? undefined : json['expiration_time'], + 'last_updated_time': json['last_updated_time'] == null ? undefined : json['last_updated_time'], + 'pending_time': json['pending_time'] == null ? undefined : json['pending_time'], + 'role': json['role'] == null ? undefined : json['role'], + }; +} + +export function AwsReadIdentityWhitelistResponseToJSON(json: any): AwsReadIdentityWhitelistResponse { + return AwsReadIdentityWhitelistResponseToJSONTyped(json, false); +} + +export function AwsReadIdentityWhitelistResponseToJSONTyped(value?: AwsReadIdentityWhitelistResponse | null, ignoreDiscriminator: boolean = false): any { + if (value == null) { + return value; + } + + return { + + 'client_nonce': value['client_nonce'], + 'creation_time': value['creation_time'], + 'disallow_reauthentication': value['disallow_reauthentication'], + 'expiration_time': value['expiration_time'], + 'last_updated_time': value['last_updated_time'], + 'pending_time': value['pending_time'], + 'role': value['role'], + }; +} + diff --git a/src/models/AwsReadIdentityWhitelistTidySettingsResponse.ts b/src/models/AwsReadIdentityWhitelistTidySettingsResponse.ts new file mode 100644 index 0000000..9356306 --- /dev/null +++ b/src/models/AwsReadIdentityWhitelistTidySettingsResponse.ts @@ -0,0 +1,77 @@ +/** + * Copyright IBM Corp. 2025, 2026 + */ + +/* tslint:disable */ +/* eslint-disable */ +/** + * HashiCorp Vault API + * HTTP API that gives you full access to Vault. All API routes are prefixed with `/v1/`. + * + * The version of the OpenAPI document: 2.2.0 + * + * + * NOTE: This class is auto generated by OpenAPI Generator (https://openapi-generator.tech). + * https://openapi-generator.tech + * Do not edit the class manually. + */ + +import { mapValues } from '../runtime'; +/** + * + * @export + * @interface AwsReadIdentityWhitelistTidySettingsResponse + */ +export interface AwsReadIdentityWhitelistTidySettingsResponse { + /** + * Whether periodic tidying of identity access-list entries is disabled. + * @type {boolean} + * @memberof AwsReadIdentityWhitelistTidySettingsResponse + */ + disable_periodic_tidy?: boolean; + /** + * Duration past expiration before identities are removed from storage. + * @type {string} + * @memberof AwsReadIdentityWhitelistTidySettingsResponse + */ + safety_buffer?: string; +} + +/** + * Check if a given object implements the AwsReadIdentityWhitelistTidySettingsResponse interface. + */ +export function instanceOfAwsReadIdentityWhitelistTidySettingsResponse(value: object): value is AwsReadIdentityWhitelistTidySettingsResponse { + return true; +} + +export function AwsReadIdentityWhitelistTidySettingsResponseFromJSON(json: any): AwsReadIdentityWhitelistTidySettingsResponse { + return AwsReadIdentityWhitelistTidySettingsResponseFromJSONTyped(json, false); +} + +export function AwsReadIdentityWhitelistTidySettingsResponseFromJSONTyped(json: any, ignoreDiscriminator: boolean): AwsReadIdentityWhitelistTidySettingsResponse { + if (json == null) { + return json; + } + return { + + 'disable_periodic_tidy': json['disable_periodic_tidy'] == null ? undefined : json['disable_periodic_tidy'], + 'safety_buffer': json['safety_buffer'] == null ? undefined : json['safety_buffer'], + }; +} + +export function AwsReadIdentityWhitelistTidySettingsResponseToJSON(json: any): AwsReadIdentityWhitelistTidySettingsResponse { + return AwsReadIdentityWhitelistTidySettingsResponseToJSONTyped(json, false); +} + +export function AwsReadIdentityWhitelistTidySettingsResponseToJSONTyped(value?: AwsReadIdentityWhitelistTidySettingsResponse | null, ignoreDiscriminator: boolean = false): any { + if (value == null) { + return value; + } + + return { + + 'disable_periodic_tidy': value['disable_periodic_tidy'], + 'safety_buffer': value['safety_buffer'], + }; +} + diff --git a/src/models/AwsReadLeaseConfigurationResponse.ts b/src/models/AwsReadLeaseConfigurationResponse.ts new file mode 100644 index 0000000..85c97c4 --- /dev/null +++ b/src/models/AwsReadLeaseConfigurationResponse.ts @@ -0,0 +1,77 @@ +/** + * Copyright IBM Corp. 2025, 2026 + */ + +/* tslint:disable */ +/* eslint-disable */ +/** + * HashiCorp Vault API + * HTTP API that gives you full access to Vault. All API routes are prefixed with `/v1/`. + * + * The version of the OpenAPI document: 2.2.0 + * + * + * NOTE: This class is auto generated by OpenAPI Generator (https://openapi-generator.tech). + * https://openapi-generator.tech + * Do not edit the class manually. + */ + +import { mapValues } from '../runtime'; +/** + * + * @export + * @interface AwsReadLeaseConfigurationResponse + */ +export interface AwsReadLeaseConfigurationResponse { + /** + * Default lease duration for credentials. + * @type {string} + * @memberof AwsReadLeaseConfigurationResponse + */ + lease?: string; + /** + * Maximum lease duration for credentials. + * @type {string} + * @memberof AwsReadLeaseConfigurationResponse + */ + lease_max?: string; +} + +/** + * Check if a given object implements the AwsReadLeaseConfigurationResponse interface. + */ +export function instanceOfAwsReadLeaseConfigurationResponse(value: object): value is AwsReadLeaseConfigurationResponse { + return true; +} + +export function AwsReadLeaseConfigurationResponseFromJSON(json: any): AwsReadLeaseConfigurationResponse { + return AwsReadLeaseConfigurationResponseFromJSONTyped(json, false); +} + +export function AwsReadLeaseConfigurationResponseFromJSONTyped(json: any, ignoreDiscriminator: boolean): AwsReadLeaseConfigurationResponse { + if (json == null) { + return json; + } + return { + + 'lease': json['lease'] == null ? undefined : json['lease'], + 'lease_max': json['lease_max'] == null ? undefined : json['lease_max'], + }; +} + +export function AwsReadLeaseConfigurationResponseToJSON(json: any): AwsReadLeaseConfigurationResponse { + return AwsReadLeaseConfigurationResponseToJSONTyped(json, false); +} + +export function AwsReadLeaseConfigurationResponseToJSONTyped(value?: AwsReadLeaseConfigurationResponse | null, ignoreDiscriminator: boolean = false): any { + if (value == null) { + return value; + } + + return { + + 'lease': value['lease'], + 'lease_max': value['lease_max'], + }; +} + diff --git a/src/models/AwsReadRoleResponse.ts b/src/models/AwsReadRoleResponse.ts new file mode 100644 index 0000000..204f900 --- /dev/null +++ b/src/models/AwsReadRoleResponse.ts @@ -0,0 +1,165 @@ +/** + * Copyright IBM Corp. 2025, 2026 + */ + +/* tslint:disable */ +/* eslint-disable */ +/** + * HashiCorp Vault API + * HTTP API that gives you full access to Vault. All API routes are prefixed with `/v1/`. + * + * The version of the OpenAPI document: 2.2.0 + * + * + * NOTE: This class is auto generated by OpenAPI Generator (https://openapi-generator.tech). + * https://openapi-generator.tech + * Do not edit the class manually. + */ + +import { mapValues } from '../runtime'; +/** + * + * @export + * @interface AwsReadRoleResponse + */ +export interface AwsReadRoleResponse { + /** + * Type of credentials generated by this role. + * @type {string} + * @memberof AwsReadRoleResponse + */ + credential_type?: string; + /** + * Default TTL for STS credentials in seconds. + * @type {string} + * @memberof AwsReadRoleResponse + */ + default_sts_ttl?: string; + /** + * External ID used when assuming a role. + * @type {string} + * @memberof AwsReadRoleResponse + */ + external_id?: string; + /** + * IAM groups that generated users are added to. + * @type {Array} + * @memberof AwsReadRoleResponse + */ + iam_groups?: Array; + /** + * IAM tags applied to generated users. + * @type {object} + * @memberof AwsReadRoleResponse + */ + iam_tags?: object; + /** + * Maximum allowed TTL for STS credentials in seconds. + * @type {string} + * @memberof AwsReadRoleResponse + */ + max_sts_ttl?: string; + /** + * Serial number or ARN of the MFA device. + * @type {string} + * @memberof AwsReadRoleResponse + */ + mfa_serial_number?: string; + /** + * ARN of the permissions boundary policy attached to generated IAM users. + * @type {string} + * @memberof AwsReadRoleResponse + */ + permissions_boundary_arn?: string; + /** + * ARNs of AWS managed policies attached to the role. + * @type {Array} + * @memberof AwsReadRoleResponse + */ + policy_arns?: Array; + /** + * JSON-encoded inline IAM policy document. + * @type {string} + * @memberof AwsReadRoleResponse + */ + policy_document?: string; + /** + * ARNs of AWS roles that can be assumed. + * @type {Array} + * @memberof AwsReadRoleResponse + */ + role_arns?: Array; + /** + * Session tags applied to assumed-role credentials. + * @type {object} + * @memberof AwsReadRoleResponse + */ + session_tags?: object; + /** + * Path for generated IAM users. + * @type {string} + * @memberof AwsReadRoleResponse + */ + user_path?: string; +} + +/** + * Check if a given object implements the AwsReadRoleResponse interface. + */ +export function instanceOfAwsReadRoleResponse(value: object): value is AwsReadRoleResponse { + return true; +} + +export function AwsReadRoleResponseFromJSON(json: any): AwsReadRoleResponse { + return AwsReadRoleResponseFromJSONTyped(json, false); +} + +export function AwsReadRoleResponseFromJSONTyped(json: any, ignoreDiscriminator: boolean): AwsReadRoleResponse { + if (json == null) { + return json; + } + return { + + 'credential_type': json['credential_type'] == null ? undefined : json['credential_type'], + 'default_sts_ttl': json['default_sts_ttl'] == null ? undefined : json['default_sts_ttl'], + 'external_id': json['external_id'] == null ? undefined : json['external_id'], + 'iam_groups': json['iam_groups'] == null ? undefined : json['iam_groups'], + 'iam_tags': json['iam_tags'] == null ? undefined : json['iam_tags'], + 'max_sts_ttl': json['max_sts_ttl'] == null ? undefined : json['max_sts_ttl'], + 'mfa_serial_number': json['mfa_serial_number'] == null ? undefined : json['mfa_serial_number'], + 'permissions_boundary_arn': json['permissions_boundary_arn'] == null ? undefined : json['permissions_boundary_arn'], + 'policy_arns': json['policy_arns'] == null ? undefined : json['policy_arns'], + 'policy_document': json['policy_document'] == null ? undefined : json['policy_document'], + 'role_arns': json['role_arns'] == null ? undefined : json['role_arns'], + 'session_tags': json['session_tags'] == null ? undefined : json['session_tags'], + 'user_path': json['user_path'] == null ? undefined : json['user_path'], + }; +} + +export function AwsReadRoleResponseToJSON(json: any): AwsReadRoleResponse { + return AwsReadRoleResponseToJSONTyped(json, false); +} + +export function AwsReadRoleResponseToJSONTyped(value?: AwsReadRoleResponse | null, ignoreDiscriminator: boolean = false): any { + if (value == null) { + return value; + } + + return { + + 'credential_type': value['credential_type'], + 'default_sts_ttl': value['default_sts_ttl'], + 'external_id': value['external_id'], + 'iam_groups': value['iam_groups'], + 'iam_tags': value['iam_tags'], + 'max_sts_ttl': value['max_sts_ttl'], + 'mfa_serial_number': value['mfa_serial_number'], + 'permissions_boundary_arn': value['permissions_boundary_arn'], + 'policy_arns': value['policy_arns'], + 'policy_document': value['policy_document'], + 'role_arns': value['role_arns'], + 'session_tags': value['session_tags'], + 'user_path': value['user_path'], + }; +} + diff --git a/src/models/AwsReadRoleTagBlacklistResponse.ts b/src/models/AwsReadRoleTagBlacklistResponse.ts new file mode 100644 index 0000000..3ccecb5 --- /dev/null +++ b/src/models/AwsReadRoleTagBlacklistResponse.ts @@ -0,0 +1,77 @@ +/** + * Copyright IBM Corp. 2025, 2026 + */ + +/* tslint:disable */ +/* eslint-disable */ +/** + * HashiCorp Vault API + * HTTP API that gives you full access to Vault. All API routes are prefixed with `/v1/`. + * + * The version of the OpenAPI document: 2.2.0 + * + * + * NOTE: This class is auto generated by OpenAPI Generator (https://openapi-generator.tech). + * https://openapi-generator.tech + * Do not edit the class manually. + */ + +import { mapValues } from '../runtime'; +/** + * + * @export + * @interface AwsReadRoleTagBlacklistResponse + */ +export interface AwsReadRoleTagBlacklistResponse { + /** + * Time the deny-list entry was created, in RFC3339 format. + * @type {string} + * @memberof AwsReadRoleTagBlacklistResponse + */ + creation_time?: string; + /** + * Time the deny-list entry expires, in RFC3339 format. + * @type {string} + * @memberof AwsReadRoleTagBlacklistResponse + */ + expiration_time?: string; +} + +/** + * Check if a given object implements the AwsReadRoleTagBlacklistResponse interface. + */ +export function instanceOfAwsReadRoleTagBlacklistResponse(value: object): value is AwsReadRoleTagBlacklistResponse { + return true; +} + +export function AwsReadRoleTagBlacklistResponseFromJSON(json: any): AwsReadRoleTagBlacklistResponse { + return AwsReadRoleTagBlacklistResponseFromJSONTyped(json, false); +} + +export function AwsReadRoleTagBlacklistResponseFromJSONTyped(json: any, ignoreDiscriminator: boolean): AwsReadRoleTagBlacklistResponse { + if (json == null) { + return json; + } + return { + + 'creation_time': json['creation_time'] == null ? undefined : json['creation_time'], + 'expiration_time': json['expiration_time'] == null ? undefined : json['expiration_time'], + }; +} + +export function AwsReadRoleTagBlacklistResponseToJSON(json: any): AwsReadRoleTagBlacklistResponse { + return AwsReadRoleTagBlacklistResponseToJSONTyped(json, false); +} + +export function AwsReadRoleTagBlacklistResponseToJSONTyped(value?: AwsReadRoleTagBlacklistResponse | null, ignoreDiscriminator: boolean = false): any { + if (value == null) { + return value; + } + + return { + + 'creation_time': value['creation_time'], + 'expiration_time': value['expiration_time'], + }; +} + diff --git a/src/models/AwsReadRoleTagBlacklistTidySettingsResponse.ts b/src/models/AwsReadRoleTagBlacklistTidySettingsResponse.ts new file mode 100644 index 0000000..bde8022 --- /dev/null +++ b/src/models/AwsReadRoleTagBlacklistTidySettingsResponse.ts @@ -0,0 +1,77 @@ +/** + * Copyright IBM Corp. 2025, 2026 + */ + +/* tslint:disable */ +/* eslint-disable */ +/** + * HashiCorp Vault API + * HTTP API that gives you full access to Vault. All API routes are prefixed with `/v1/`. + * + * The version of the OpenAPI document: 2.2.0 + * + * + * NOTE: This class is auto generated by OpenAPI Generator (https://openapi-generator.tech). + * https://openapi-generator.tech + * Do not edit the class manually. + */ + +import { mapValues } from '../runtime'; +/** + * + * @export + * @interface AwsReadRoleTagBlacklistTidySettingsResponse + */ +export interface AwsReadRoleTagBlacklistTidySettingsResponse { + /** + * Whether periodic tidying of deny-listed role tag entries is disabled. + * @type {boolean} + * @memberof AwsReadRoleTagBlacklistTidySettingsResponse + */ + disable_periodic_tidy?: boolean; + /** + * Duration past expiration before role tags are removed from storage. + * @type {string} + * @memberof AwsReadRoleTagBlacklistTidySettingsResponse + */ + safety_buffer?: string; +} + +/** + * Check if a given object implements the AwsReadRoleTagBlacklistTidySettingsResponse interface. + */ +export function instanceOfAwsReadRoleTagBlacklistTidySettingsResponse(value: object): value is AwsReadRoleTagBlacklistTidySettingsResponse { + return true; +} + +export function AwsReadRoleTagBlacklistTidySettingsResponseFromJSON(json: any): AwsReadRoleTagBlacklistTidySettingsResponse { + return AwsReadRoleTagBlacklistTidySettingsResponseFromJSONTyped(json, false); +} + +export function AwsReadRoleTagBlacklistTidySettingsResponseFromJSONTyped(json: any, ignoreDiscriminator: boolean): AwsReadRoleTagBlacklistTidySettingsResponse { + if (json == null) { + return json; + } + return { + + 'disable_periodic_tidy': json['disable_periodic_tidy'] == null ? undefined : json['disable_periodic_tidy'], + 'safety_buffer': json['safety_buffer'] == null ? undefined : json['safety_buffer'], + }; +} + +export function AwsReadRoleTagBlacklistTidySettingsResponseToJSON(json: any): AwsReadRoleTagBlacklistTidySettingsResponse { + return AwsReadRoleTagBlacklistTidySettingsResponseToJSONTyped(json, false); +} + +export function AwsReadRoleTagBlacklistTidySettingsResponseToJSONTyped(value?: AwsReadRoleTagBlacklistTidySettingsResponse | null, ignoreDiscriminator: boolean = false): any { + if (value == null) { + return value; + } + + return { + + 'disable_periodic_tidy': value['disable_periodic_tidy'], + 'safety_buffer': value['safety_buffer'], + }; +} + diff --git a/src/models/AwsReadRoleTagDenyListResponse.ts b/src/models/AwsReadRoleTagDenyListResponse.ts new file mode 100644 index 0000000..f7c5bd4 --- /dev/null +++ b/src/models/AwsReadRoleTagDenyListResponse.ts @@ -0,0 +1,77 @@ +/** + * Copyright IBM Corp. 2025, 2026 + */ + +/* tslint:disable */ +/* eslint-disable */ +/** + * HashiCorp Vault API + * HTTP API that gives you full access to Vault. All API routes are prefixed with `/v1/`. + * + * The version of the OpenAPI document: 2.2.0 + * + * + * NOTE: This class is auto generated by OpenAPI Generator (https://openapi-generator.tech). + * https://openapi-generator.tech + * Do not edit the class manually. + */ + +import { mapValues } from '../runtime'; +/** + * + * @export + * @interface AwsReadRoleTagDenyListResponse + */ +export interface AwsReadRoleTagDenyListResponse { + /** + * Time the deny-list entry was created, in RFC3339 format. + * @type {string} + * @memberof AwsReadRoleTagDenyListResponse + */ + creation_time?: string; + /** + * Time the deny-list entry expires, in RFC3339 format. + * @type {string} + * @memberof AwsReadRoleTagDenyListResponse + */ + expiration_time?: string; +} + +/** + * Check if a given object implements the AwsReadRoleTagDenyListResponse interface. + */ +export function instanceOfAwsReadRoleTagDenyListResponse(value: object): value is AwsReadRoleTagDenyListResponse { + return true; +} + +export function AwsReadRoleTagDenyListResponseFromJSON(json: any): AwsReadRoleTagDenyListResponse { + return AwsReadRoleTagDenyListResponseFromJSONTyped(json, false); +} + +export function AwsReadRoleTagDenyListResponseFromJSONTyped(json: any, ignoreDiscriminator: boolean): AwsReadRoleTagDenyListResponse { + if (json == null) { + return json; + } + return { + + 'creation_time': json['creation_time'] == null ? undefined : json['creation_time'], + 'expiration_time': json['expiration_time'] == null ? undefined : json['expiration_time'], + }; +} + +export function AwsReadRoleTagDenyListResponseToJSON(json: any): AwsReadRoleTagDenyListResponse { + return AwsReadRoleTagDenyListResponseToJSONTyped(json, false); +} + +export function AwsReadRoleTagDenyListResponseToJSONTyped(value?: AwsReadRoleTagDenyListResponse | null, ignoreDiscriminator: boolean = false): any { + if (value == null) { + return value; + } + + return { + + 'creation_time': value['creation_time'], + 'expiration_time': value['expiration_time'], + }; +} + diff --git a/src/models/AwsReadRoleTagDenyListTidySettingsResponse.ts b/src/models/AwsReadRoleTagDenyListTidySettingsResponse.ts new file mode 100644 index 0000000..13fa3ef --- /dev/null +++ b/src/models/AwsReadRoleTagDenyListTidySettingsResponse.ts @@ -0,0 +1,77 @@ +/** + * Copyright IBM Corp. 2025, 2026 + */ + +/* tslint:disable */ +/* eslint-disable */ +/** + * HashiCorp Vault API + * HTTP API that gives you full access to Vault. All API routes are prefixed with `/v1/`. + * + * The version of the OpenAPI document: 2.2.0 + * + * + * NOTE: This class is auto generated by OpenAPI Generator (https://openapi-generator.tech). + * https://openapi-generator.tech + * Do not edit the class manually. + */ + +import { mapValues } from '../runtime'; +/** + * + * @export + * @interface AwsReadRoleTagDenyListTidySettingsResponse + */ +export interface AwsReadRoleTagDenyListTidySettingsResponse { + /** + * Whether periodic tidying of deny-listed role tag entries is disabled. + * @type {boolean} + * @memberof AwsReadRoleTagDenyListTidySettingsResponse + */ + disable_periodic_tidy?: boolean; + /** + * Duration past expiration before role tags are removed from storage. + * @type {string} + * @memberof AwsReadRoleTagDenyListTidySettingsResponse + */ + safety_buffer?: string; +} + +/** + * Check if a given object implements the AwsReadRoleTagDenyListTidySettingsResponse interface. + */ +export function instanceOfAwsReadRoleTagDenyListTidySettingsResponse(value: object): value is AwsReadRoleTagDenyListTidySettingsResponse { + return true; +} + +export function AwsReadRoleTagDenyListTidySettingsResponseFromJSON(json: any): AwsReadRoleTagDenyListTidySettingsResponse { + return AwsReadRoleTagDenyListTidySettingsResponseFromJSONTyped(json, false); +} + +export function AwsReadRoleTagDenyListTidySettingsResponseFromJSONTyped(json: any, ignoreDiscriminator: boolean): AwsReadRoleTagDenyListTidySettingsResponse { + if (json == null) { + return json; + } + return { + + 'disable_periodic_tidy': json['disable_periodic_tidy'] == null ? undefined : json['disable_periodic_tidy'], + 'safety_buffer': json['safety_buffer'] == null ? undefined : json['safety_buffer'], + }; +} + +export function AwsReadRoleTagDenyListTidySettingsResponseToJSON(json: any): AwsReadRoleTagDenyListTidySettingsResponse { + return AwsReadRoleTagDenyListTidySettingsResponseToJSONTyped(json, false); +} + +export function AwsReadRoleTagDenyListTidySettingsResponseToJSONTyped(value?: AwsReadRoleTagDenyListTidySettingsResponse | null, ignoreDiscriminator: boolean = false): any { + if (value == null) { + return value; + } + + return { + + 'disable_periodic_tidy': value['disable_periodic_tidy'], + 'safety_buffer': value['safety_buffer'], + }; +} + diff --git a/src/models/AwsReadRootIamCredentialsConfigurationResponse.ts b/src/models/AwsReadRootIamCredentialsConfigurationResponse.ts new file mode 100644 index 0000000..5cb1ad7 --- /dev/null +++ b/src/models/AwsReadRootIamCredentialsConfigurationResponse.ts @@ -0,0 +1,197 @@ +/** + * Copyright IBM Corp. 2025, 2026 + */ + +/* tslint:disable */ +/* eslint-disable */ +/** + * HashiCorp Vault API + * HTTP API that gives you full access to Vault. All API routes are prefixed with `/v1/`. + * + * The version of the OpenAPI document: 2.2.0 + * + * + * NOTE: This class is auto generated by OpenAPI Generator (https://openapi-generator.tech). + * https://openapi-generator.tech + * Do not edit the class manually. + */ + +import { mapValues } from '../runtime'; +/** + * + * @export + * @interface AwsReadRootIamCredentialsConfigurationResponse + */ +export interface AwsReadRootIamCredentialsConfigurationResponse { + /** + * AWS access key ID. + * @type {string} + * @memberof AwsReadRootIamCredentialsConfigurationResponse + */ + access_key?: string; + /** + * Whether automated rotation is disabled. + * @type {boolean} + * @memberof AwsReadRootIamCredentialsConfigurationResponse + */ + disable_automated_rotation?: boolean; + /** + * Custom endpoint for AWS IAM API calls. + * @type {string} + * @memberof AwsReadRootIamCredentialsConfigurationResponse + */ + iam_endpoint?: string; + /** + * Audience for plugin identity tokens. + * @type {string} + * @memberof AwsReadRootIamCredentialsConfigurationResponse + */ + identity_token_audience?: string; + /** + * Time-to-live for plugin identity tokens in seconds. + * @type {string} + * @memberof AwsReadRootIamCredentialsConfigurationResponse + */ + identity_token_ttl?: string; + /** + * Maximum number of retries for AWS API calls. + * @type {number} + * @memberof AwsReadRootIamCredentialsConfigurationResponse + */ + max_retries?: number; + /** + * AWS region for API calls. + * @type {string} + * @memberof AwsReadRootIamCredentialsConfigurationResponse + */ + region?: string; + /** + * Role ARN for plugin identity token federation. + * @type {string} + * @memberof AwsReadRootIamCredentialsConfigurationResponse + */ + role_arn?: string; + /** + * Period in seconds between automated credential rotations. + * @type {string} + * @memberof AwsReadRootIamCredentialsConfigurationResponse + */ + rotation_period?: string; + /** + * Name of the rotation policy to use. + * @type {string} + * @memberof AwsReadRootIamCredentialsConfigurationResponse + */ + rotation_policy?: string; + /** + * Automated rotation schedule in cron format. + * @type {string} + * @memberof AwsReadRootIamCredentialsConfigurationResponse + */ + rotation_schedule?: string; + /** + * Window in seconds during which automated rotation may occur. + * @type {string} + * @memberof AwsReadRootIamCredentialsConfigurationResponse + */ + rotation_window?: string; + /** + * Custom endpoint for AWS STS API calls. + * @type {string} + * @memberof AwsReadRootIamCredentialsConfigurationResponse + */ + sts_endpoint?: string; + /** + * Fallback endpoints if sts_endpoint is unreachable. + * @type {Array} + * @memberof AwsReadRootIamCredentialsConfigurationResponse + */ + sts_fallback_endpoints?: Array; + /** + * Fallback regions if sts_region is unreachable. + * @type {Array} + * @memberof AwsReadRootIamCredentialsConfigurationResponse + */ + sts_fallback_regions?: Array; + /** + * Specific region for STS API calls. + * @type {string} + * @memberof AwsReadRootIamCredentialsConfigurationResponse + */ + sts_region?: string; + /** + * Template used to generate IAM usernames. + * @type {string} + * @memberof AwsReadRootIamCredentialsConfigurationResponse + */ + username_template?: string; +} + +/** + * Check if a given object implements the AwsReadRootIamCredentialsConfigurationResponse interface. + */ +export function instanceOfAwsReadRootIamCredentialsConfigurationResponse(value: object): value is AwsReadRootIamCredentialsConfigurationResponse { + return true; +} + +export function AwsReadRootIamCredentialsConfigurationResponseFromJSON(json: any): AwsReadRootIamCredentialsConfigurationResponse { + return AwsReadRootIamCredentialsConfigurationResponseFromJSONTyped(json, false); +} + +export function AwsReadRootIamCredentialsConfigurationResponseFromJSONTyped(json: any, ignoreDiscriminator: boolean): AwsReadRootIamCredentialsConfigurationResponse { + if (json == null) { + return json; + } + return { + + 'access_key': json['access_key'] == null ? undefined : json['access_key'], + 'disable_automated_rotation': json['disable_automated_rotation'] == null ? undefined : json['disable_automated_rotation'], + 'iam_endpoint': json['iam_endpoint'] == null ? undefined : json['iam_endpoint'], + 'identity_token_audience': json['identity_token_audience'] == null ? undefined : json['identity_token_audience'], + 'identity_token_ttl': json['identity_token_ttl'] == null ? undefined : json['identity_token_ttl'], + 'max_retries': json['max_retries'] == null ? undefined : json['max_retries'], + 'region': json['region'] == null ? undefined : json['region'], + 'role_arn': json['role_arn'] == null ? undefined : json['role_arn'], + 'rotation_period': json['rotation_period'] == null ? undefined : json['rotation_period'], + 'rotation_policy': json['rotation_policy'] == null ? undefined : json['rotation_policy'], + 'rotation_schedule': json['rotation_schedule'] == null ? undefined : json['rotation_schedule'], + 'rotation_window': json['rotation_window'] == null ? undefined : json['rotation_window'], + 'sts_endpoint': json['sts_endpoint'] == null ? undefined : json['sts_endpoint'], + 'sts_fallback_endpoints': json['sts_fallback_endpoints'] == null ? undefined : json['sts_fallback_endpoints'], + 'sts_fallback_regions': json['sts_fallback_regions'] == null ? undefined : json['sts_fallback_regions'], + 'sts_region': json['sts_region'] == null ? undefined : json['sts_region'], + 'username_template': json['username_template'] == null ? undefined : json['username_template'], + }; +} + +export function AwsReadRootIamCredentialsConfigurationResponseToJSON(json: any): AwsReadRootIamCredentialsConfigurationResponse { + return AwsReadRootIamCredentialsConfigurationResponseToJSONTyped(json, false); +} + +export function AwsReadRootIamCredentialsConfigurationResponseToJSONTyped(value?: AwsReadRootIamCredentialsConfigurationResponse | null, ignoreDiscriminator: boolean = false): any { + if (value == null) { + return value; + } + + return { + + 'access_key': value['access_key'], + 'disable_automated_rotation': value['disable_automated_rotation'], + 'iam_endpoint': value['iam_endpoint'], + 'identity_token_audience': value['identity_token_audience'], + 'identity_token_ttl': value['identity_token_ttl'], + 'max_retries': value['max_retries'], + 'region': value['region'], + 'role_arn': value['role_arn'], + 'rotation_period': value['rotation_period'], + 'rotation_policy': value['rotation_policy'], + 'rotation_schedule': value['rotation_schedule'], + 'rotation_window': value['rotation_window'], + 'sts_endpoint': value['sts_endpoint'], + 'sts_fallback_endpoints': value['sts_fallback_endpoints'], + 'sts_fallback_regions': value['sts_fallback_regions'], + 'sts_region': value['sts_region'], + 'username_template': value['username_template'], + }; +} + diff --git a/src/models/AwsReadStsRoleResponse.ts b/src/models/AwsReadStsRoleResponse.ts new file mode 100644 index 0000000..478b846 --- /dev/null +++ b/src/models/AwsReadStsRoleResponse.ts @@ -0,0 +1,77 @@ +/** + * Copyright IBM Corp. 2025, 2026 + */ + +/* tslint:disable */ +/* eslint-disable */ +/** + * HashiCorp Vault API + * HTTP API that gives you full access to Vault. All API routes are prefixed with `/v1/`. + * + * The version of the OpenAPI document: 2.2.0 + * + * + * NOTE: This class is auto generated by OpenAPI Generator (https://openapi-generator.tech). + * https://openapi-generator.tech + * Do not edit the class manually. + */ + +import { mapValues } from '../runtime'; +/** + * + * @export + * @interface AwsReadStsRoleResponse + */ +export interface AwsReadStsRoleResponse { + /** + * External ID used when assuming the STS role. + * @type {string} + * @memberof AwsReadStsRoleResponse + */ + external_id?: string; + /** + * AWS ARN of the STS role to assume for the account. + * @type {string} + * @memberof AwsReadStsRoleResponse + */ + sts_role?: string; +} + +/** + * Check if a given object implements the AwsReadStsRoleResponse interface. + */ +export function instanceOfAwsReadStsRoleResponse(value: object): value is AwsReadStsRoleResponse { + return true; +} + +export function AwsReadStsRoleResponseFromJSON(json: any): AwsReadStsRoleResponse { + return AwsReadStsRoleResponseFromJSONTyped(json, false); +} + +export function AwsReadStsRoleResponseFromJSONTyped(json: any, ignoreDiscriminator: boolean): AwsReadStsRoleResponse { + if (json == null) { + return json; + } + return { + + 'external_id': json['external_id'] == null ? undefined : json['external_id'], + 'sts_role': json['sts_role'] == null ? undefined : json['sts_role'], + }; +} + +export function AwsReadStsRoleResponseToJSON(json: any): AwsReadStsRoleResponse { + return AwsReadStsRoleResponseToJSONTyped(json, false); +} + +export function AwsReadStsRoleResponseToJSONTyped(value?: AwsReadStsRoleResponse | null, ignoreDiscriminator: boolean = false): any { + if (value == null) { + return value; + } + + return { + + 'external_id': value['external_id'], + 'sts_role': value['sts_role'], + }; +} + diff --git a/src/models/AwsRotateRootCredentialsResponse.ts b/src/models/AwsRotateRootCredentialsResponse.ts new file mode 100644 index 0000000..d9e1a84 --- /dev/null +++ b/src/models/AwsRotateRootCredentialsResponse.ts @@ -0,0 +1,69 @@ +/** + * Copyright IBM Corp. 2025, 2026 + */ + +/* tslint:disable */ +/* eslint-disable */ +/** + * HashiCorp Vault API + * HTTP API that gives you full access to Vault. All API routes are prefixed with `/v1/`. + * + * The version of the OpenAPI document: 2.2.0 + * + * + * NOTE: This class is auto generated by OpenAPI Generator (https://openapi-generator.tech). + * https://openapi-generator.tech + * Do not edit the class manually. + */ + +import { mapValues } from '../runtime'; +/** + * + * @export + * @interface AwsRotateRootCredentialsResponse + */ +export interface AwsRotateRootCredentialsResponse { + /** + * New access key ID of the rotated root IAM credential. + * @type {string} + * @memberof AwsRotateRootCredentialsResponse + */ + access_key?: string; +} + +/** + * Check if a given object implements the AwsRotateRootCredentialsResponse interface. + */ +export function instanceOfAwsRotateRootCredentialsResponse(value: object): value is AwsRotateRootCredentialsResponse { + return true; +} + +export function AwsRotateRootCredentialsResponseFromJSON(json: any): AwsRotateRootCredentialsResponse { + return AwsRotateRootCredentialsResponseFromJSONTyped(json, false); +} + +export function AwsRotateRootCredentialsResponseFromJSONTyped(json: any, ignoreDiscriminator: boolean): AwsRotateRootCredentialsResponse { + if (json == null) { + return json; + } + return { + + 'access_key': json['access_key'] == null ? undefined : json['access_key'], + }; +} + +export function AwsRotateRootCredentialsResponseToJSON(json: any): AwsRotateRootCredentialsResponse { + return AwsRotateRootCredentialsResponseToJSONTyped(json, false); +} + +export function AwsRotateRootCredentialsResponseToJSONTyped(value?: AwsRotateRootCredentialsResponse | null, ignoreDiscriminator: boolean = false): any { + if (value == null) { + return value; + } + + return { + + 'access_key': value['access_key'], + }; +} + diff --git a/src/models/AwsRotateRootIamCredentialsResponse.ts b/src/models/AwsRotateRootIamCredentialsResponse.ts new file mode 100644 index 0000000..c1da106 --- /dev/null +++ b/src/models/AwsRotateRootIamCredentialsResponse.ts @@ -0,0 +1,69 @@ +/** + * Copyright IBM Corp. 2025, 2026 + */ + +/* tslint:disable */ +/* eslint-disable */ +/** + * HashiCorp Vault API + * HTTP API that gives you full access to Vault. All API routes are prefixed with `/v1/`. + * + * The version of the OpenAPI document: 2.2.0 + * + * + * NOTE: This class is auto generated by OpenAPI Generator (https://openapi-generator.tech). + * https://openapi-generator.tech + * Do not edit the class manually. + */ + +import { mapValues } from '../runtime'; +/** + * + * @export + * @interface AwsRotateRootIamCredentialsResponse + */ +export interface AwsRotateRootIamCredentialsResponse { + /** + * New access key ID of the rotated root IAM credential. + * @type {string} + * @memberof AwsRotateRootIamCredentialsResponse + */ + access_key?: string; +} + +/** + * Check if a given object implements the AwsRotateRootIamCredentialsResponse interface. + */ +export function instanceOfAwsRotateRootIamCredentialsResponse(value: object): value is AwsRotateRootIamCredentialsResponse { + return true; +} + +export function AwsRotateRootIamCredentialsResponseFromJSON(json: any): AwsRotateRootIamCredentialsResponse { + return AwsRotateRootIamCredentialsResponseFromJSONTyped(json, false); +} + +export function AwsRotateRootIamCredentialsResponseFromJSONTyped(json: any, ignoreDiscriminator: boolean): AwsRotateRootIamCredentialsResponse { + if (json == null) { + return json; + } + return { + + 'access_key': json['access_key'] == null ? undefined : json['access_key'], + }; +} + +export function AwsRotateRootIamCredentialsResponseToJSON(json: any): AwsRotateRootIamCredentialsResponse { + return AwsRotateRootIamCredentialsResponseToJSONTyped(json, false); +} + +export function AwsRotateRootIamCredentialsResponseToJSONTyped(value?: AwsRotateRootIamCredentialsResponse | null, ignoreDiscriminator: boolean = false): any { + if (value == null) { + return value; + } + + return { + + 'access_key': value['access_key'], + }; +} + diff --git a/src/models/AwsWriteRoleTagResponse.ts b/src/models/AwsWriteRoleTagResponse.ts new file mode 100644 index 0000000..612bbb7 --- /dev/null +++ b/src/models/AwsWriteRoleTagResponse.ts @@ -0,0 +1,77 @@ +/** + * Copyright IBM Corp. 2025, 2026 + */ + +/* tslint:disable */ +/* eslint-disable */ +/** + * HashiCorp Vault API + * HTTP API that gives you full access to Vault. All API routes are prefixed with `/v1/`. + * + * The version of the OpenAPI document: 2.2.0 + * + * + * NOTE: This class is auto generated by OpenAPI Generator (https://openapi-generator.tech). + * https://openapi-generator.tech + * Do not edit the class manually. + */ + +import { mapValues } from '../runtime'; +/** + * + * @export + * @interface AwsWriteRoleTagResponse + */ +export interface AwsWriteRoleTagResponse { + /** + * The key to use for the role tag on the EC2 instance. + * @type {string} + * @memberof AwsWriteRoleTagResponse + */ + tag_key?: string; + /** + * The value to use for the role tag on the EC2 instance. + * @type {string} + * @memberof AwsWriteRoleTagResponse + */ + tag_value?: string; +} + +/** + * Check if a given object implements the AwsWriteRoleTagResponse interface. + */ +export function instanceOfAwsWriteRoleTagResponse(value: object): value is AwsWriteRoleTagResponse { + return true; +} + +export function AwsWriteRoleTagResponseFromJSON(json: any): AwsWriteRoleTagResponse { + return AwsWriteRoleTagResponseFromJSONTyped(json, false); +} + +export function AwsWriteRoleTagResponseFromJSONTyped(json: any, ignoreDiscriminator: boolean): AwsWriteRoleTagResponse { + if (json == null) { + return json; + } + return { + + 'tag_key': json['tag_key'] == null ? undefined : json['tag_key'], + 'tag_value': json['tag_value'] == null ? undefined : json['tag_value'], + }; +} + +export function AwsWriteRoleTagResponseToJSON(json: any): AwsWriteRoleTagResponse { + return AwsWriteRoleTagResponseToJSONTyped(json, false); +} + +export function AwsWriteRoleTagResponseToJSONTyped(value?: AwsWriteRoleTagResponse | null, ignoreDiscriminator: boolean = false): any { + if (value == null) { + return value; + } + + return { + + 'tag_key': value['tag_key'], + 'tag_value': value['tag_value'], + }; +} + diff --git a/src/models/MountsAuthTuneConfigurationParametersRequest.ts b/src/models/MountsAuthTuneConfigurationParametersRequest.ts index 9012d20..45e1de0 100644 --- a/src/models/MountsAuthTuneConfigurationParametersRequest.ts +++ b/src/models/MountsAuthTuneConfigurationParametersRequest.ts @@ -95,6 +95,12 @@ export interface MountsAuthTuneConfigurationParametersRequest { * @memberof MountsAuthTuneConfigurationParametersRequest */ plugin_version?: string; + /** + * Whether to turn on seal wrapping for the mount. + * @type {boolean} + * @memberof MountsAuthTuneConfigurationParametersRequest + */ + seal_wrap?: boolean; /** * The type of token to issue (service or batch). * @type {string} @@ -144,6 +150,7 @@ export function MountsAuthTuneConfigurationParametersRequestFromJSONTyped(json: 'override_pinned_version': json['override_pinned_version'] == null ? undefined : json['override_pinned_version'], 'passthrough_request_headers': json['passthrough_request_headers'] == null ? undefined : json['passthrough_request_headers'], 'plugin_version': json['plugin_version'] == null ? undefined : json['plugin_version'], + 'seal_wrap': json['seal_wrap'] == null ? undefined : json['seal_wrap'], 'token_type': json['token_type'] == null ? undefined : json['token_type'], 'trim_request_trailing_slashes': json['trim_request_trailing_slashes'] == null ? undefined : json['trim_request_trailing_slashes'], 'user_lockout_config': json['user_lockout_config'] == null ? undefined : json['user_lockout_config'], @@ -173,6 +180,7 @@ export function MountsAuthTuneConfigurationParametersRequestToJSONTyped(value?: 'override_pinned_version': value['override_pinned_version'], 'passthrough_request_headers': value['passthrough_request_headers'], 'plugin_version': value['plugin_version'], + 'seal_wrap': value['seal_wrap'], 'token_type': value['token_type'], 'trim_request_trailing_slashes': value['trim_request_trailing_slashes'], 'user_lockout_config': value['user_lockout_config'], diff --git a/src/models/MountsTuneConfigurationParametersRequest.ts b/src/models/MountsTuneConfigurationParametersRequest.ts index bf6d704..4718f82 100644 --- a/src/models/MountsTuneConfigurationParametersRequest.ts +++ b/src/models/MountsTuneConfigurationParametersRequest.ts @@ -107,6 +107,12 @@ export interface MountsTuneConfigurationParametersRequest { * @memberof MountsTuneConfigurationParametersRequest */ plugin_version?: string; + /** + * Whether to turn on seal wrapping for the mount. + * @type {boolean} + * @memberof MountsTuneConfigurationParametersRequest + */ + seal_wrap?: boolean; /** * The type of token to issue (service or batch). * @type {string} @@ -158,6 +164,7 @@ export function MountsTuneConfigurationParametersRequestFromJSONTyped(json: any, 'override_pinned_version': json['override_pinned_version'] == null ? undefined : json['override_pinned_version'], 'passthrough_request_headers': json['passthrough_request_headers'] == null ? undefined : json['passthrough_request_headers'], 'plugin_version': json['plugin_version'] == null ? undefined : json['plugin_version'], + 'seal_wrap': json['seal_wrap'] == null ? undefined : json['seal_wrap'], 'token_type': json['token_type'] == null ? undefined : json['token_type'], 'trim_request_trailing_slashes': json['trim_request_trailing_slashes'] == null ? undefined : json['trim_request_trailing_slashes'], 'user_lockout_config': json['user_lockout_config'] == null ? undefined : json['user_lockout_config'], @@ -189,6 +196,7 @@ export function MountsTuneConfigurationParametersRequestToJSONTyped(value?: Moun 'override_pinned_version': value['override_pinned_version'], 'passthrough_request_headers': value['passthrough_request_headers'], 'plugin_version': value['plugin_version'], + 'seal_wrap': value['seal_wrap'], 'token_type': value['token_type'], 'trim_request_trailing_slashes': value['trim_request_trailing_slashes'], 'user_lockout_config': value['user_lockout_config'], diff --git a/src/models/RegisterCreateRequest.ts b/src/models/RegisterCreateRequest.ts index 7a1f9ed..6804bda 100644 --- a/src/models/RegisterCreateRequest.ts +++ b/src/models/RegisterCreateRequest.ts @@ -53,6 +53,12 @@ export interface RegisterCreateRequest { * @memberof RegisterCreateRequest */ id?: string; + /** + * Whether the agent registration should not be replicated globally and should be local to the current cluster. + * @type {boolean} + * @memberof RegisterCreateRequest + */ + local?: boolean; /** * Opt out of automatically adding the default ceiling policies to this agent registration. * @type {boolean} @@ -97,6 +103,7 @@ export function RegisterCreateRequestFromJSONTyped(json: any, ignoreDiscriminato 'display_name': json['display_name'], 'entity_id': json['entity_id'], 'id': json['id'] == null ? undefined : json['id'], + 'local': json['local'] == null ? undefined : json['local'], 'no_default_ceiling_policy': json['no_default_ceiling_policy'] == null ? undefined : json['no_default_ceiling_policy'], 'optional_authorization_details': json['optional_authorization_details'] == null ? undefined : json['optional_authorization_details'], 'owner': json['owner'] == null ? undefined : json['owner'], @@ -119,6 +126,7 @@ export function RegisterCreateRequestToJSONTyped(value?: RegisterCreateRequest | 'display_name': value['display_name'], 'entity_id': value['entity_id'], 'id': value['id'], + 'local': value['local'], 'no_default_ceiling_policy': value['no_default_ceiling_policy'], 'optional_authorization_details': value['optional_authorization_details'], 'owner': value['owner'], diff --git a/src/models/RegistrationUpdateByIdRequest.ts b/src/models/RegistrationUpdateByIdRequest.ts index 97079a4..bf3adb3 100644 --- a/src/models/RegistrationUpdateByIdRequest.ts +++ b/src/models/RegistrationUpdateByIdRequest.ts @@ -47,6 +47,12 @@ export interface RegistrationUpdateByIdRequest { * @memberof RegistrationUpdateByIdRequest */ entity_id: string; + /** + * Whether the agent registration should not be replicated globally and should be local to the current cluster. + * @type {boolean} + * @memberof RegistrationUpdateByIdRequest + */ + local?: boolean; /** * Opt out of automatically adding the default ceiling policies to this agent registration. * @type {boolean} @@ -90,6 +96,7 @@ export function RegistrationUpdateByIdRequestFromJSONTyped(json: any, ignoreDisc 'description': json['description'] == null ? undefined : json['description'], 'display_name': json['display_name'], 'entity_id': json['entity_id'], + 'local': json['local'] == null ? undefined : json['local'], 'no_default_ceiling_policy': json['no_default_ceiling_policy'] == null ? undefined : json['no_default_ceiling_policy'], 'optional_authorization_details': json['optional_authorization_details'] == null ? undefined : json['optional_authorization_details'], 'owner': json['owner'] == null ? undefined : json['owner'], @@ -111,6 +118,7 @@ export function RegistrationUpdateByIdRequestToJSONTyped(value?: RegistrationUpd 'description': value['description'], 'display_name': value['display_name'], 'entity_id': value['entity_id'], + 'local': value['local'], 'no_default_ceiling_policy': value['no_default_ceiling_policy'], 'optional_authorization_details': value['optional_authorization_details'], 'owner': value['owner'], diff --git a/src/models/RegistrationUpdateByNameRequest.ts b/src/models/RegistrationUpdateByNameRequest.ts index 1a12595..ad14d83 100644 --- a/src/models/RegistrationUpdateByNameRequest.ts +++ b/src/models/RegistrationUpdateByNameRequest.ts @@ -47,6 +47,12 @@ export interface RegistrationUpdateByNameRequest { * @memberof RegistrationUpdateByNameRequest */ id?: string; + /** + * Whether the agent registration should not be replicated globally and should be local to the current cluster. + * @type {boolean} + * @memberof RegistrationUpdateByNameRequest + */ + local?: boolean; /** * Opt out of automatically adding the default ceiling policies to this agent registration. * @type {boolean} @@ -89,6 +95,7 @@ export function RegistrationUpdateByNameRequestFromJSONTyped(json: any, ignoreDi 'description': json['description'] == null ? undefined : json['description'], 'entity_id': json['entity_id'], 'id': json['id'] == null ? undefined : json['id'], + 'local': json['local'] == null ? undefined : json['local'], 'no_default_ceiling_policy': json['no_default_ceiling_policy'] == null ? undefined : json['no_default_ceiling_policy'], 'optional_authorization_details': json['optional_authorization_details'] == null ? undefined : json['optional_authorization_details'], 'owner': json['owner'] == null ? undefined : json['owner'], @@ -110,6 +117,7 @@ export function RegistrationUpdateByNameRequestToJSONTyped(value?: RegistrationU 'description': value['description'], 'entity_id': value['entity_id'], 'id': value['id'], + 'local': value['local'], 'no_default_ceiling_policy': value['no_default_ceiling_policy'], 'optional_authorization_details': value['optional_authorization_details'], 'owner': value['owner'], diff --git a/src/models/TpmgroupUpdateByNameRequest.ts b/src/models/TpmgroupUpdateByNameRequest.ts index 72a0e3b..67f9899 100644 --- a/src/models/TpmgroupUpdateByNameRequest.ts +++ b/src/models/TpmgroupUpdateByNameRequest.ts @@ -23,12 +23,6 @@ import { mapValues } from '../runtime'; * @interface TpmgroupUpdateByNameRequest */ export interface TpmgroupUpdateByNameRequest { - /** - * ID of the TPMGroup. If set, updates the corresponding existing TPMGroup. - * @type {string} - * @memberof TpmgroupUpdateByNameRequest - */ - id?: string; /** * TPM IDs to be assigned as group members. * @type {Array} @@ -60,7 +54,6 @@ export function TpmgroupUpdateByNameRequestFromJSONTyped(json: any, ignoreDiscri } return { - 'id': json['id'] == null ? undefined : json['id'], 'member_tpm_ids': json['member_tpm_ids'] == null ? undefined : json['member_tpm_ids'], 'metadata': json['metadata'] == null ? undefined : json['metadata'], }; @@ -77,7 +70,6 @@ export function TpmgroupUpdateByNameRequestToJSONTyped(value?: TpmgroupUpdateByN return { - 'id': value['id'], 'member_tpm_ids': value['member_tpm_ids'], 'metadata': value['metadata'], }; diff --git a/src/models/index.ts b/src/models/index.ts index c52b2cf..880c5f4 100644 --- a/src/models/index.ts +++ b/src/models/index.ts @@ -67,11 +67,34 @@ export * from './AwsConfigureLeaseRequest'; export * from './AwsConfigureRoleTagBlacklistTidyOperationRequest'; export * from './AwsConfigureRoleTagDenyListTidyOperationRequest'; export * from './AwsConfigureRootIamCredentialsRequest'; +export * from './AwsGenerateCredentialsResponse'; export * from './AwsGenerateCredentialsWithParametersRequest'; +export * from './AwsGenerateCredentialsWithParametersResponse'; +export * from './AwsGenerateStsCredentialsResponse'; export * from './AwsGenerateStsCredentialsWithParametersRequest'; +export * from './AwsGenerateStsCredentialsWithParametersResponse'; export * from './AwsLoginRequest'; +export * from './AwsLoginResponse'; +export * from './AwsReadAuthRoleResponse'; +export * from './AwsReadCertificateConfigurationResponse'; +export * from './AwsReadClientConfigurationResponse'; +export * from './AwsReadIdentityAccessListResponse'; +export * from './AwsReadIdentityAccessListTidySettingsResponse'; +export * from './AwsReadIdentityIntegrationConfigurationResponse'; +export * from './AwsReadIdentityWhitelistResponse'; +export * from './AwsReadIdentityWhitelistTidySettingsResponse'; +export * from './AwsReadLeaseConfigurationResponse'; +export * from './AwsReadRoleResponse'; +export * from './AwsReadRoleTagBlacklistResponse'; +export * from './AwsReadRoleTagBlacklistTidySettingsResponse'; +export * from './AwsReadRoleTagDenyListResponse'; +export * from './AwsReadRoleTagDenyListTidySettingsResponse'; +export * from './AwsReadRootIamCredentialsConfigurationResponse'; export * from './AwsReadStaticCredsNameResponse'; export * from './AwsReadStaticRolesNameResponse'; +export * from './AwsReadStsRoleResponse'; +export * from './AwsRotateRootCredentialsResponse'; +export * from './AwsRotateRootIamCredentialsResponse'; export * from './AwsTidyIdentityAccessListRequest'; export * from './AwsTidyIdentityWhitelistRequest'; export * from './AwsTidyRoleTagBlacklistRequest'; @@ -79,6 +102,7 @@ export * from './AwsTidyRoleTagDenyListRequest'; export * from './AwsWriteAuthRoleRequest'; export * from './AwsWriteRoleRequest'; export * from './AwsWriteRoleTagRequest'; +export * from './AwsWriteRoleTagResponse'; export * from './AwsWriteStaticRolesNameRequest'; export * from './AwsWriteStaticRolesNameResponse'; export * from './AwsWriteStsRoleRequest';