[Automated] Updated OpenAPI Spec from Vault Enterprise

.openapi-generator/FILES

@@ -704,6 +704,7 @@ src/models/ScepLoginRequest.ts
 src/models/ScepWriteRoleRoleRequest.ts
 src/models/ScimUpdateClientLinkGroupRequest.ts
 src/models/ScimUpdateClientRequest.ts
+src/models/ScimUpdateClientUnlinkEntityRequest.ts
 src/models/ScimUpdateClientUnlinkGroupRequest.ts
 src/models/SealStatusResponse.ts
 src/models/SpiffeConfigureRequest.ts

openapi.json

@@ -11550,6 +11550,40 @@
         }
       }
     },
+    "/identity/scim/client/{client_name}/unlink-entity": {
+      "parameters": [
+        {
+          "name": "client_name",
+          "description": "Name of the SCIM client.",
+          "in": "path",
+          "schema": {
+            "type": "string"
+          },
+          "required": true
+        }
+      ],
+      "post": {
+        "operationId": "scim-update-client-unlink-entity",
+        "tags": [
+          "identity"
+        ],
+        "requestBody": {
+          "required": true,
+          "content": {
+            "application/json": {
+              "schema": {
+                "$ref": "#/components/schemas/ScimUpdateClientUnlinkEntityRequest"
+              }
+            }
+          }
+        },
+        "responses": {
+          "200": {
+            "description": "OK"
+          }
+        }
+      }
+    },
     "/identity/scim/client/{client_name}/unlink-group": {
       "parameters": [
         {
@@ -14543,6 +14577,30 @@
         }
       }
     },
+    "/sys/health-check/last/{path}": {
+      "parameters": [
+        {
+          "name": "path",
+          "description": "Full resource path (e.g., ldap/config or ldap/static-role/alice)",
+          "in": "path",
+          "schema": {
+            "type": "string"
+          },
+          "required": true
+        }
+      ],
+      "get": {
+        "operationId": "system-read-health-check-last-path",
+        "tags": [
+          "system"
+        ],
+        "responses": {
+          "200": {
+            "description": "OK"
+          }
+        }
+      }
+    },
     "/sys/host-info": {
       "description": "Information about the host instance that this Vault server is running on.",
       "get": {
@@ -50957,6 +51015,10 @@
       "AzureConfigureAuthRequest": {
         "type": "object",
         "properties": {
+          "auth_type": {
+            "type": "string",
+            "description": "Specifies how Vault authenticates to Azure for resource metadata lookups. Valid values: root_creds, plugin_wif, aks_wi, msi. If not specified, defaults to existing discovery logic for backward compatibility."
+          },
           "client_id": {
             "type": "string",
             "description": "The OAuth2 client id to connection to Azure. This value can also be provided with the AZURE_CLIENT_ID environment variable.",
@@ -52384,10 +52446,15 @@
           "activation_token": {
             "type": "string",
             "description": "The activation token for enrolling with the control hub."
+          },
+          "hostname": {
+            "type": "string",
+            "description": "The control hub hostname for enrolling this Vault instance."
           }
         },
         "required": [
-          "activation_token"
+          "activation_token",
+          "hostname"
         ]
       },
       "CorsConfigureRequest": {
@@ -76361,6 +76428,31 @@
           "default_schema_version": {
             "type": "string",
             "description": "Optional. The Vault SCIM extension schema version ('2.0' or '2.1') used for responses when a request does not specify an extension schema. Defaults to '2.1' for newly created clients; clients created before this field existed behave as '2.0'."
+          },
+          "delete-linked-resources": {
+            "type": "boolean",
+            "description": "If set to true, deletes all SCIM-managed resources (groups, entities, aliases) owned by the client before removing the client itself."
+          },
+          "unlink-resources": {
+            "type": "boolean",
+            "description": "If set to true, removes the SCIM client association from all owned resources without deleting them, then removes the client."
+          }
+        }
+      },
+      "ScimUpdateClientUnlinkEntityRequest": {
+        "type": "object",
+        "properties": {
+          "entity_id": {
+            "type": "string",
+            "description": "ID of the Vault entity to unlink from this SCIM client."
+          },
+          "remove_memberships": {
+            "type": "boolean",
+            "description": "Required when the entity is a member of SCIM-managed groups. Consent to removing those group memberships."
+          },
+          "unlink_aliases": {
+            "type": "boolean",
+            "description": "Required when the entity has SCIM-managed aliases. Consent to making all managed aliases unmanaged."
           }
         }
       },
@@ -78404,6 +78496,10 @@
             "type": "string",
             "description": "For ECDSA keys, the desired elliptic curve if the key is to be generated, either P256, P384, or P521."
           },
+          "encryption_mode": {
+            "type": "string",
+            "description": "Encryption mode for the key: \"envelope\" (default) for AES-GCM envelope encryption, or \"raw\" to encrypt directly with the KMS key."
+          },
           "endpoint": {
             "type": "string",
             "description": "The AWS endpoint to use"
@@ -81810,9 +81906,10 @@
           },
           "hybrid_key_type_pqc": {
             "type": "string",
-            "description": "The post-quantum key type to use for hybrid signature schemes. Supported types are: ml-dsa.",
+            "description": "The post-quantum key type to use for hybrid signature schemes. Supported types are: ml-dsa and slh-dsa.",
             "enum": [
-              "ml-dsa"
+              "ml-dsa",
+              "slh-dsa"
             ]
           },
           "key_size": {
@@ -82373,9 +82470,10 @@
           },
           "hybrid_key_type_pqc": {
             "type": "string",
-            "description": "The post-quantum key type to use for hybrid signature schemes. Supported types are: ml-dsa.",
+            "description": "The post-quantum key type to use for hybrid signature schemes. Supported types are: ml-dsa and slh-dsa.",
             "enum": [
-              "ml-dsa"
+              "ml-dsa",
+              "slh-dsa"
             ]
           },
           "imported_key": {

src/apis/IdentityApi.ts

@@ -77,6 +77,7 @@ import type {
   PersonaUpdateByIdRequest,
   ScimUpdateClientLinkGroupRequest,
   ScimUpdateClientRequest,
+  ScimUpdateClientUnlinkEntityRequest,
   ScimUpdateClientUnlinkGroupRequest,
   StandardListResponse,
   TpmCreateRequest,
@@ -204,6 +205,8 @@ import {
     ScimUpdateClientLinkGroupRequestToJSON,
     ScimUpdateClientRequestFromJSON,
     ScimUpdateClientRequestToJSON,
+    ScimUpdateClientUnlinkEntityRequestFromJSON,
+    ScimUpdateClientUnlinkEntityRequestToJSON,
     ScimUpdateClientUnlinkGroupRequestFromJSON,
     ScimUpdateClientUnlinkGroupRequestToJSON,
     StandardListResponseFromJSON,
@@ -820,6 +823,11 @@ export interface IdentityApiScimUpdateClientLinkGroupOperationRequest {
     ScimUpdateClientLinkGroupRequest: ScimUpdateClientLinkGroupRequest;
 }
 
+export interface IdentityApiScimUpdateClientUnlinkEntityOperationRequest {
+    client_name: string;
+    ScimUpdateClientUnlinkEntityRequest: ScimUpdateClientUnlinkEntityRequest;
+}
+
 export interface IdentityApiScimUpdateClientUnlinkGroupOperationRequest {
     client_name: string;
     ScimUpdateClientUnlinkGroupRequest: ScimUpdateClientUnlinkGroupRequest;
@@ -6181,6 +6189,48 @@ export class IdentityApi extends runtime.BaseAPI {
         return await response.value();
     }
 
+    /**
+     */
+    async scimUpdateClientUnlinkEntityRaw(requestParameters: IdentityApiScimUpdateClientUnlinkEntityOperationRequest, initOverrides?: RequestInit | runtime.InitOverrideFunction): Promise<runtime.ApiResponse<runtime.VoidResponse>> {
+        if (requestParameters['client_name'] == null) {
+            throw new runtime.RequiredError(
+                'client_name',
+                'Required parameter "client_name" was null or undefined when calling scimUpdateClientUnlinkEntity().'
+            );
+        }
+
+        if (requestParameters['ScimUpdateClientUnlinkEntityRequest'] == null) {
+            throw new runtime.RequiredError(
+                'ScimUpdateClientUnlinkEntityRequest',
+                'Required parameter "ScimUpdateClientUnlinkEntityRequest" was null or undefined when calling scimUpdateClientUnlinkEntity().'
+            );
+        }
+
+        const queryParameters: any = {};
+
+        const headerParameters: runtime.HTTPHeaders = {};
+
+        headerParameters['Content-Type'] = 'application/json';
+
+        const builtPath = `/identity/scim/client/{client_name}/unlink-entity`.replace(`{${"client_name"}}`, encodeURIComponent(String(requestParameters['client_name']).replace(/\/+$/, '')));
+        const response = await this.request({
+            path: builtPath.replace(/\/\/+/g, '/'),
+            method: 'POST',
+            headers: headerParameters,
+            query: queryParameters,
+            body: ScimUpdateClientUnlinkEntityRequestToJSON(requestParameters['ScimUpdateClientUnlinkEntityRequest']),
+        }, initOverrides);
+
+        return new runtime.VoidApiResponse(response);
+    }
+
+    /**
+     */
+    async scimUpdateClientUnlinkEntity(client_name: string, ScimUpdateClientUnlinkEntityRequest: ScimUpdateClientUnlinkEntityRequest, initOverrides?: RequestInit | runtime.InitOverrideFunction): Promise<runtime.VoidResponse> {
+        const response = await this.scimUpdateClientUnlinkEntityRaw({ client_name: client_name, ScimUpdateClientUnlinkEntityRequest: ScimUpdateClientUnlinkEntityRequest }, initOverrides);
+        return await response.value();
+    }
+
     /**
      */
     async scimUpdateClientUnlinkGroupRaw(requestParameters: IdentityApiScimUpdateClientUnlinkGroupOperationRequest, initOverrides?: RequestInit | runtime.InitOverrideFunction): Promise<runtime.ApiResponse<runtime.VoidResponse>> {

src/apis/SystemApi.ts

@@ -1653,6 +1653,10 @@ export interface SystemApiSystemReadHealthCheckExecPathRequest {
     path: string;
 }
 
+export interface SystemApiSystemReadHealthCheckLastPathRequest {
+    path: string;
+}
+
 export interface SystemApiSystemReadManagedKeysTypeNameRequest {
     name: string;
     type: string;
@@ -11273,6 +11277,38 @@ export class SystemApi extends runtime.BaseAPI {
         return await response.value();
     }
 
+    /**
+     */
+    async systemReadHealthCheckLastPathRaw(requestParameters: SystemApiSystemReadHealthCheckLastPathRequest, initOverrides?: RequestInit | runtime.InitOverrideFunction): Promise<runtime.ApiResponse<runtime.VoidResponse>> {
+        if (requestParameters['path'] == null) {
+            throw new runtime.RequiredError(
+                'path',
+                'Required parameter "path" was null or undefined when calling systemReadHealthCheckLastPath().'
+            );
+        }
+
+        const queryParameters: any = {};
+
+        const headerParameters: runtime.HTTPHeaders = {};
+
+        const builtPath = `/sys/health-check/last/{path}`.replace(`{${"path"}}`, encodeURIComponent(String(requestParameters['path']).replace(/\/+$/, '')));
+        const response = await this.request({
+            path: builtPath.replace(/\/\/+/g, '/'),
+            method: 'GET',
+            headers: headerParameters,
+            query: queryParameters,
+        }, initOverrides);
+
+        return new runtime.VoidApiResponse(response);
+    }
+
+    /**
+     */
+    async systemReadHealthCheckLastPath(path: string, initOverrides?: RequestInit | runtime.InitOverrideFunction): Promise<runtime.VoidResponse> {
+        const response = await this.systemReadHealthCheckLastPathRaw({ path: path }, initOverrides);
+        return await response.value();
+    }
+
     /**
      * The path responds to the following HTTP methods.      GET /         Returns information on the installed license      POST         Sets the license for the server
      */

src/models/AzureConfigureAuthRequest.ts

@@ -23,6 +23,12 @@ import { mapValues } from '../runtime';
  * @interface AzureConfigureAuthRequest
  */
 export interface AzureConfigureAuthRequest {
+    /**
+     * Specifies how Vault authenticates to Azure for resource metadata lookups. Valid values: root_creds, plugin_wif, aks_wi, msi. If not specified, defaults to existing discovery logic for backward compatibility.
+     * @type {string}
+     * @memberof AzureConfigureAuthRequest
+     */
+    auth_type?: string;
     /**
      * The OAuth2 client id to connection to Azure. This value can also be provided with the AZURE_CLIENT_ID environment variable.
      * @type {string}
@@ -138,6 +144,7 @@ export function AzureConfigureAuthRequestFromJSONTyped(json: any, ignoreDiscrimi
     }
     return {
 
+        'auth_type': json['auth_type'] == null ? undefined : json['auth_type'],
         'client_id': json['client_id'] == null ? undefined : json['client_id'],
         'client_secret': json['client_secret'] == null ? undefined : json['client_secret'],
         'disable_automated_rotation': json['disable_automated_rotation'] == null ? undefined : json['disable_automated_rotation'],
@@ -168,6 +175,7 @@ export function AzureConfigureAuthRequestToJSONTyped(value?: AzureConfigureAuthR
 
     return {
 
+        'auth_type': value['auth_type'],
         'client_id': value['client_id'],
         'client_secret': value['client_secret'],
         'disable_automated_rotation': value['disable_automated_rotation'],

src/models/ControlHubEnrollRequest.ts

@@ -29,13 +29,20 @@ export interface ControlHubEnrollRequest {
      * @memberof ControlHubEnrollRequest
      */
     activation_token: string;
+    /**
+     * The control hub hostname for enrolling this Vault instance.
+     * @type {string}
+     * @memberof ControlHubEnrollRequest
+     */
+    hostname: string;
 }
 
 /**
  * Check if a given object implements the ControlHubEnrollRequest interface.
  */
 export function instanceOfControlHubEnrollRequest(value: object): value is ControlHubEnrollRequest {
     if (!('activation_token' in value) || value['activation_token'] === undefined) return false;
+    if (!('hostname' in value) || value['hostname'] === undefined) return false;
     return true;
 }
 
@@ -50,6 +57,7 @@ export function ControlHubEnrollRequestFromJSONTyped(json: any, ignoreDiscrimina
     return {
 
         'activation_token': json['activation_token'],
+        'hostname': json['hostname'],
     };
 }
 
@@ -65,6 +73,7 @@ export function ControlHubEnrollRequestToJSONTyped(value?: ControlHubEnrollReque
     return {
 
         'activation_token': value['activation_token'],
+        'hostname': value['hostname'],
     };
 }