Sync OpenAPI: Miscellaneous changes from Vault 1.15.0-dev (#230)

* Sync OpenAPI: Miscellaneous changes from Vault 1.15.0-dev Reminder: we are still carrying a local modification to the Vault source tree when generating OpenAPI of ``` go get github.com/hashicorp/vault-plugin-{secrets-{gcp,kv},auth-jwt}@main go mod tidy ``` whilst we wait for those plugins to be updated in the main Vault tree. * Sync further changes from Vault * Sync further changes from Vault
hashicorp · Sep 11, 2023 · 1bad0b3 · 1bad0b3
1 parent 44cd051
commit 1bad0b3
Show file tree

Hide file tree

Showing 51 changed files with 1,137 additions and 57 deletions.
diff --git a/api_secrets.go b/api_secrets.go
diff --git a/api_system.go b/api_system.go
diff --git a/docs/AuthEnableMethodRequest.md b/docs/AuthEnableMethodRequest.md
@@ -11,7 +11,7 @@ Name | Type | Description | Notes
 **Local** | Pointer to **bool** | Mark the mount as a local mount, which is not replicated and is unaffected by replication. | [optional] [default to false]
 **Options** | Pointer to **map[string]interface{}** | The options to pass into the backend. Should be a json object with string keys and values. | [optional] 
 **PluginName** | Pointer to **string** | Name of the auth plugin to use based from the name in the plugin catalog. | [optional] 
-**PluginVersion** | Pointer to **string** | The semantic version of the plugin to use. | [optional] 
+**PluginVersion** | Pointer to **string** | The semantic version of the plugin to use, or image tag if oci_image is provided. | [optional] 
 **SealWrap** | Pointer to **bool** | Whether to turn on seal wrapping for the mount. | [optional] [default to false]
 **Type** | Pointer to **string** | The type of the backend. Example: \&quot;userpass\&quot; | [optional] 
 

diff --git a/docs/AuthTuneConfigurationParametersRequest.md b/docs/AuthTuneConfigurationParametersRequest.md
@@ -14,7 +14,7 @@ Name | Type | Description | Notes
 **MaxLeaseTtl** | Pointer to **string** | The max lease TTL for this mount. | [optional] 
 **Options** | Pointer to **map[string]interface{}** | The options to pass into the backend. Should be a json object with string keys and values. | [optional] 
 **PassthroughRequestHeaders** | Pointer to **[]string** | A list of headers to whitelist and pass from the request to the plugin. | [optional] 
-**PluginVersion** | Pointer to **string** | The semantic version of the plugin to use. | [optional] 
+**PluginVersion** | Pointer to **string** | The semantic version of the plugin to use, or image tag if oci_image is provided. | [optional] 
 **TokenType** | Pointer to **string** | The type of token to issue (service or batch). | [optional] 
 **UserLockoutConfig** | Pointer to **map[string]interface{}** | The user lockout configuration to pass into the backend. Should be a json object with string keys and values. | [optional] 
 

diff --git a/docs/AwsConfigureClientRequest.md b/docs/AwsConfigureClientRequest.md
@@ -14,6 +14,7 @@ Name | Type | Description | Notes
 **SecretKey** | Pointer to **string** | AWS Secret Access Key for the account used to make AWS API requests. | [optional] [default to ""]
 **StsEndpoint** | Pointer to **string** | URL to override the default generated endpoint for making AWS STS API calls. | [optional] [default to ""]
 **StsRegion** | Pointer to **string** | The region ID for the sts_endpoint, if set. | [optional] [default to ""]
+**UseStsRegionFromClient** | Pointer to **bool** | Uses the STS region from client requests for making AWS STS API calls. | [optional] [default to false]
 
 
 

diff --git a/docs/AwsLoginRequest.md b/docs/AwsLoginRequest.md
@@ -5,7 +5,7 @@
 
 Name | Type | Description | Notes
 ------------ | ------------- | ------------- | -------------
-**IamHttpRequestMethod** | Pointer to **string** | HTTP method to use for the AWS request when auth_type is iam. This must match what has been signed in the presigned request. Currently, POST is the only supported value | [optional] 
+**IamHttpRequestMethod** | Pointer to **string** | HTTP method to use for the AWS request when auth_type is iam. This must match what has been signed in the presigned request. | [optional] 
 **IamRequestBody** | Pointer to **string** | Base64-encoded request body when auth_type is iam. This must match the request body included in the signature. | [optional] 
 **IamRequestHeaders** | Pointer to **string** | Key/value pairs of headers for use in the sts:GetCallerIdentity HTTP requests headers when auth_type is iam. Can be either a Base64-encoded, JSON-serialized string, or a JSON object of key/value pairs. This must at a minimum include the headers over which AWS has included a signature. | [optional] 
 **IamRequestUrl** | Pointer to **string** | Base64-encoded full URL against which to make the AWS request when using iam auth_type. | [optional] 

diff --git a/docs/DatabaseWriteStaticRoleRequest.md b/docs/DatabaseWriteStaticRoleRequest.md
@@ -8,8 +8,10 @@ Name | Type | Description | Notes
 **CredentialConfig** | Pointer to **map[string]interface{}** | The configuration for the given credential_type. | [optional] 
 **CredentialType** | Pointer to **string** | The type of credential to manage. Options include: &#x27;password&#x27;, &#x27;rsa_private_key&#x27;. Defaults to &#x27;password&#x27;. | [optional] [default to "password"]
 **DbName** | Pointer to **string** | Name of the database this role acts on. | [optional] 
-**RotationPeriod** | Pointer to **string** | Period for automatic credential rotation of the given username. Not valid unless used with \&quot;username\&quot;. | [optional] 
+**RotationPeriod** | Pointer to **string** | Period for automatic credential rotation of the given username. Not valid unless used with \&quot;username\&quot;. Mutually exclusive with \&quot;rotation_schedule.\&quot; | [optional] 
+**RotationSchedule** | Pointer to **string** | Schedule for automatic credential rotation of the given username. Mutually exclusive with \&quot;rotation_period.\&quot; | [optional] 
 **RotationStatements** | Pointer to **[]string** | Specifies the database statements to be executed to rotate the accounts credentials. Not every plugin type will support this functionality. See the plugin&#x27;s API page for more information on support and formatting for this parameter. | [optional] 
+**RotationWindow** | Pointer to **string** | The window of time in which rotations are allowed to occur starting from a given \&quot;rotation_schedule\&quot;. Requires \&quot;rotation_schedule\&quot; to be specified | [optional] 
 **Username** | Pointer to **string** | Name of the static user account for Vault to manage. Requires \&quot;rotation_period\&quot; to be specified | [optional] 
 
 

diff --git a/docs/MountsEnableSecretsEngineRequest.md b/docs/MountsEnableSecretsEngineRequest.md
@@ -11,7 +11,7 @@ Name | Type | Description | Notes
 **Local** | Pointer to **bool** | Mark the mount as a local mount, which is not replicated and is unaffected by replication. | [optional] [default to false]
 **Options** | Pointer to **map[string]interface{}** | The options to pass into the backend. Should be a json object with string keys and values. | [optional] 
 **PluginName** | Pointer to **string** | Name of the plugin to mount based from the name registered in the plugin catalog. | [optional] 
-**PluginVersion** | Pointer to **string** | The semantic version of the plugin to use. | [optional] 
+**PluginVersion** | Pointer to **string** | The semantic version of the plugin to use, or image tag if oci_image is provided. | [optional] 
 **SealWrap** | Pointer to **bool** | Whether to turn on seal wrapping for the mount. | [optional] [default to false]
 **Type** | Pointer to **string** | The type of the backend. Example: \&quot;passthrough\&quot; | [optional] 
 

diff --git a/docs/MountsReadConfigurationResponse.md b/docs/MountsReadConfigurationResponse.md
@@ -12,7 +12,7 @@ Name | Type | Description | Notes
 **ExternalEntropyAccess** | Pointer to **bool** |  | [optional] 
 **Local** | Pointer to **bool** | Mark the mount as a local mount, which is not replicated and is unaffected by replication. | [optional] [default to false]
 **Options** | Pointer to **map[string]interface{}** | The options to pass into the backend. Should be a json object with string keys and values. | [optional] 
-**PluginVersion** | Pointer to **string** | The semantic version of the plugin to use. | [optional] 
+**PluginVersion** | Pointer to **string** | The semantic version of the plugin to use, or image tag if oci_image is provided. | [optional] 
 **RunningPluginVersion** | Pointer to **string** |  | [optional] 
 **RunningSha256** | Pointer to **string** |  | [optional] 
 **SealWrap** | Pointer to **bool** | Whether to turn on seal wrapping for the mount. | [optional] [default to false]

diff --git a/docs/MountsReadTuningInformationResponse.md b/docs/MountsReadTuningInformationResponse.md
@@ -17,7 +17,7 @@ Name | Type | Description | Notes
 **MaxLeaseTtl** | Pointer to **int32** | The max lease TTL for this mount. | [optional] 
 **Options** | Pointer to **map[string]interface{}** | The options to pass into the backend. Should be a json object with string keys and values. | [optional] 
 **PassthroughRequestHeaders** | Pointer to **[]string** |  | [optional] 
-**PluginVersion** | Pointer to **string** | The semantic version of the plugin to use. | [optional] 
+**PluginVersion** | Pointer to **string** | The semantic version of the plugin to use, or image tag if oci_image is provided. | [optional] 
 **TokenType** | Pointer to **string** | The type of token to issue (service or batch). | [optional] 
 **UserLockoutCounterResetDuration** | Pointer to **int64** |  | [optional] 
 **UserLockoutDisable** | Pointer to **bool** |  | [optional] 

diff --git a/docs/MountsTuneConfigurationParametersRequest.md b/docs/MountsTuneConfigurationParametersRequest.md
@@ -15,7 +15,7 @@ Name | Type | Description | Notes
 **MaxLeaseTtl** | Pointer to **string** | The max lease TTL for this mount. | [optional] 
 **Options** | Pointer to **map[string]interface{}** | The options to pass into the backend. Should be a json object with string keys and values. | [optional] 
 **PassthroughRequestHeaders** | Pointer to **[]string** | A list of headers to whitelist and pass from the request to the plugin. | [optional] 
-**PluginVersion** | Pointer to **string** | The semantic version of the plugin to use. | [optional] 
+**PluginVersion** | Pointer to **string** | The semantic version of the plugin to use, or image tag if oci_image is provided. | [optional] 
 **TokenType** | Pointer to **string** | The type of token to issue (service or batch). | [optional] 
 **UserLockoutConfig** | Pointer to **map[string]interface{}** | The user lockout configuration to pass into the backend. Should be a json object with string keys and values. | [optional] 
 

diff --git a/docs/PkiPatchIssuerResponse.md b/docs/PkiPatchIssuerResponse.md
@@ -15,7 +15,7 @@ Name | Type | Description | Notes
 **KeyId** | Pointer to **string** | Key Id | [optional] 
 **LeafNotAfterBehavior** | Pointer to **string** | Leaf Not After Behavior | [optional] 
 **ManualChain** | Pointer to **[]string** | Manual Chain | [optional] 
-**OcspServers** | Pointer to **[]string** | OSCP Servers | [optional] 
+**OcspServers** | Pointer to **[]string** | OCSP Servers | [optional] 
 **RevocationSignatureAlgorithm** | Pointer to **string** | Revocation Signature Alogrithm | [optional] 
 **RevocationTime** | Pointer to **int32** |  | [optional] 
 **RevocationTimeRfc3339** | Pointer to **string** |  | [optional] 

diff --git a/docs/PkiReadIssuerResponse.md b/docs/PkiReadIssuerResponse.md
@@ -15,7 +15,7 @@ Name | Type | Description | Notes
 **KeyId** | Pointer to **string** | Key Id | [optional] 
 **LeafNotAfterBehavior** | Pointer to **string** | Leaf Not After Behavior | [optional] 
 **ManualChain** | Pointer to **[]string** | Manual Chain | [optional] 
-**OcspServers** | Pointer to **[]string** | OSCP Servers | [optional] 
+**OcspServers** | Pointer to **[]string** | OCSP Servers | [optional] 
 **RevocationSignatureAlgorithm** | Pointer to **string** | Revocation Signature Alogrithm | [optional] 
 **RevocationTime** | Pointer to **int32** |  | [optional] 
 **RevocationTimeRfc3339** | Pointer to **string** |  | [optional] 

diff --git a/docs/PkiWriteIssuerResponse.md b/docs/PkiWriteIssuerResponse.md
@@ -15,7 +15,7 @@ Name | Type | Description | Notes
 **KeyId** | Pointer to **string** | Key Id | [optional] 
 **LeafNotAfterBehavior** | Pointer to **string** | Leaf Not After Behavior | [optional] 
 **ManualChain** | Pointer to **[]string** | Manual Chain | [optional] 
-**OcspServers** | Pointer to **[]string** | OSCP Servers | [optional] 
+**OcspServers** | Pointer to **[]string** | OCSP Servers | [optional] 
 **RevocationSignatureAlgorithm** | Pointer to **string** | Revocation Signature Alogrithm | [optional] 
 **RevocationTime** | Pointer to **int32** |  | [optional] 
 **RevocationTimeRfc3339** | Pointer to **string** |  | [optional] 

diff --git a/docs/PluginsCatalogReadPluginConfigurationResponse.md b/docs/PluginsCatalogReadPluginConfigurationResponse.md
@@ -10,8 +10,9 @@ Name | Type | Description | Notes
 **Command** | Pointer to **string** | The command used to start the plugin. The executable defined in this command must exist in vault&#x27;s plugin directory. | [optional] 
 **DeprecationStatus** | Pointer to **string** |  | [optional] 
 **Name** | Pointer to **string** | The name of the plugin | [optional] 
-**Sha256** | Pointer to **string** | The SHA256 sum of the executable used in the command field. This should be HEX encoded. | [optional] 
-**Version** | Pointer to **string** | The semantic version of the plugin to use. | [optional] 
+**OciImage** | Pointer to **string** | The name of the OCI image to be run, without the tag or SHA256. Must already be present on the machine. | [optional] 
+**Sha256** | Pointer to **string** | The SHA256 sum of the executable or container to be run. This should be HEX encoded. | [optional] 
+**Version** | Pointer to **string** | The semantic version of the plugin to use, or image tag if oci_image is provided. | [optional] 
 
 
 

diff --git a/docs/PluginsCatalogReadPluginConfigurationWithTypeResponse.md b/docs/PluginsCatalogReadPluginConfigurationWithTypeResponse.md
@@ -10,8 +10,9 @@ Name | Type | Description | Notes
 **Command** | Pointer to **string** | The command used to start the plugin. The executable defined in this command must exist in vault&#x27;s plugin directory. | [optional] 
 **DeprecationStatus** | Pointer to **string** |  | [optional] 
 **Name** | Pointer to **string** | The name of the plugin | [optional] 
-**Sha256** | Pointer to **string** | The SHA256 sum of the executable used in the command field. This should be HEX encoded. | [optional] 
-**Version** | Pointer to **string** | The semantic version of the plugin to use. | [optional] 
+**OciImage** | Pointer to **string** | The name of the OCI image to be run, without the tag or SHA256. Must already be present on the machine. | [optional] 
+**Sha256** | Pointer to **string** | The SHA256 sum of the executable or container to be run. This should be HEX encoded. | [optional] 
+**Version** | Pointer to **string** | The semantic version of the plugin to use, or image tag if oci_image is provided. | [optional]