1extend type Query {
2 """
3 clusterSecret returns a clusters secret
4 """
5 clusterSecret(
6 """
7 clusterEdgeID of the expected cluster
8 """
9 clusterEdgeID: String! @hasClusterAccess(field: "clusterEdgeID")
10 """
11 secretType is the type of secret to return
12 """
13 secretType: ClusterSecretType!
14 """
15 version is the secret manager secret version to query.
16 If one is not provide, the latest value will be returned.
17 """
18 version: String
19 ): String! @hasRole(roles: [EDGE_ORG_ADMIN, EDGE_BANNER_ADMIN, EDGE_BANNER_OPERATOR])
20
21 """
22 clusterSecretVersions returns a list of available clusters secret versions
23 """
24 clusterSecretVersions(
25 """
26 clusterEdgeID of the expected cluster
27 """
28 clusterEdgeID: String! @hasClusterAccess(field: "clusterEdgeID")
29 """
30 secretType is the type of secret to return
31 """
32 secretType: ClusterSecretType!
33 ): [ClusterSecretVersionInfo!]! @hasRole(roles: [EDGE_ORG_ADMIN, EDGE_BANNER_ADMIN, EDGE_BANNER_OPERATOR])
34
35 """
36 clusterSecretLease returns lease info for a cluster secret
37 """
38 clusterSecretLease(
39 """
40 clusterEdgeID of the expected cluster
41 """
42 clusterEdgeID: String! @hasClusterAccess(field: "clusterEdgeID")
43 """
44 secretType is the secret type to search lease for
45 """
46 secretType: ClusterSecretType!
47 ): ClusterSecretLease! @hasRole(roles: [EDGE_ORG_ADMIN, EDGE_BANNER_ADMIN, EDGE_BANNER_OPERATOR])
48}
49
50extend type Mutation {
51 """
52 updateClusterSecret updates a clusters secrets
53 """
54 updateClusterSecret(
55 clusterEdgeId: String! @hasClusterAccess(field: "clusterEdgeId")
56 """
57 secretType is the type of secret to return
58 """
59 secretType: ClusterSecretType!
60 """
61 secretValue is the new value of the secret
62 """
63 secretValue: String!
64 ): Boolean! @hasRole(roles: [EDGE_ORG_ADMIN, EDGE_BANNER_ADMIN, EDGE_BANNER_OPERATOR])
65
66 """
67 releaseClusterSecretLease releases current user from cluster secret lease ownership
68 """
69 releaseClusterSecretLease(
70 clusterEdgeId: String! @hasClusterAccess(field: "clusterEdgeId")
71 """
72 secretType is the type of secret to return
73 """
74 secretType: ClusterSecretType!
75 ): Boolean! @hasRole(roles: [EDGE_ORG_ADMIN, EDGE_BANNER_ADMIN, EDGE_BANNER_OPERATOR])
76
77 """
78 revokeClusterSecretLease revokes an edge users access for cluster secret
79 """
80 revokeClusterSecretLease(
81 clusterEdgeId: String! @hasClusterAccess(field: "clusterEdgeId")
82 """
83 secretType is the type of secret to return
84 """
85 secretType: ClusterSecretType!
86 """
87 username is the name of the user to revoke access to cluster secrets to
88 """
89 username: String!
90 ): Boolean! @hasRole(roles: [EDGE_ORG_ADMIN, EDGE_BANNER_ADMIN])
91}View as plain text