extend type Query {
  """
  clusterSecret returns a clusters secret
  """
  clusterSecret(
    """
    clusterEdgeID of the expected cluster
    """
    clusterEdgeID: String! @hasClusterAccess(field: "clusterEdgeID")
    """
    secretType is the type of secret to return
    """
    secretType: ClusterSecretType!
    """
    version is the secret manager secret version to query.
    If one is not provide, the latest value will be returned.
    """
    version: String
  ): String! @hasRole(roles: [EDGE_ORG_ADMIN, EDGE_BANNER_ADMIN, EDGE_BANNER_OPERATOR])

  """
  clusterSecretVersions returns a list of available clusters secret versions
  """
  clusterSecretVersions(
    """
    clusterEdgeID of the expected cluster
    """
    clusterEdgeID: String! @hasClusterAccess(field: "clusterEdgeID")
    """
    secretType is the type of secret to return
    """
    secretType: ClusterSecretType!
  ): [ClusterSecretVersionInfo!]! @hasRole(roles: [EDGE_ORG_ADMIN, EDGE_BANNER_ADMIN, EDGE_BANNER_OPERATOR])

  """
  clusterSecretLease returns lease info for a cluster secret
  """
  clusterSecretLease(
    """
    clusterEdgeID of the expected cluster
    """
    clusterEdgeID: String! @hasClusterAccess(field: "clusterEdgeID")
    """
    secretType is the secret type to search lease for
    """
    secretType: ClusterSecretType!
  ): ClusterSecretLease! @hasRole(roles: [EDGE_ORG_ADMIN, EDGE_BANNER_ADMIN, EDGE_BANNER_OPERATOR])
}

extend type Mutation {
  """
  updateClusterSecret updates a clusters secrets
  """
  updateClusterSecret(
    clusterEdgeId: String! @hasClusterAccess(field: "clusterEdgeId")
    """
    secretType is the type of secret to return
    """
    secretType: ClusterSecretType!
    """
    secretValue is the new value of the secret
    """
    secretValue: String!
  ): Boolean! @hasRole(roles: [EDGE_ORG_ADMIN, EDGE_BANNER_ADMIN, EDGE_BANNER_OPERATOR])

  """
  releaseClusterSecretLease releases current user from cluster secret lease ownership
  """
  releaseClusterSecretLease(
    clusterEdgeId: String! @hasClusterAccess(field: "clusterEdgeId")
    """
    secretType is the type of secret to return
    """
    secretType: ClusterSecretType!
  ): Boolean! @hasRole(roles: [EDGE_ORG_ADMIN, EDGE_BANNER_ADMIN, EDGE_BANNER_OPERATOR])

  """
  revokeClusterSecretLease revokes an edge users access for cluster secret
  """
  revokeClusterSecretLease(
    clusterEdgeId: String! @hasClusterAccess(field: "clusterEdgeId")
    """
    secretType is the type of secret to return
    """
    secretType: ClusterSecretType!
    """
    username is the name of the user to revoke access to cluster secrets to
    """
    username: String!
  ): Boolean! @hasRole(roles: [EDGE_ORG_ADMIN, EDGE_BANNER_ADMIN])
}