Skip to content

Commit 8509972

Browse files
VarunAthreyashivaygupta-dotcomharshadixit12
authored
Release/3.21.0 (#469)
* feat: add support to organization pat settings (#460) * feat: openapi changes * feat: generated providers and docs * feat: add example and acceptance test * feat: update personal access token settings to include SystemAccountAccessToken * feat: update hostname in portal custom domain tests to fix collision issue * feat: add changelog entry for konnect_organization_personal_access_token_settings resource * chore: deprecate portal appearance resource (#461) * openapi changes * generated provider and docs * chore: update changelog * Feat/portal automation dev app reg (#467) * feat: Updated OpenAPI to include changes. * feat: Added test and scenario examples. * test: Updated test for reg update case * feat: Updated openAPI * feat: Updated openAPI with review changes of application_id. * test: Updated tests files as needed. * test: Updated OpenAPI for inlining resource id's * feat: Added resource files. * chore: Added changelog. * chore: resolved review comments. * feat: updated openapi with review changes. * feat: updated resource files. * style: rename path params and regenerate --------- Co-authored-by: Harsha Dixit <harsha.dixit@konghq.com> * chore: release v3.21.0 * chroe: update release date in CHANGELOG.md * feat: add support for auth server client secrets (#470) * feat: updated openapi spec * feat: generate tf resource and docs * feat: add example and tests * chore: update CHANGELOG.md * Feat: user assigned roles (#472) * tests: user assigned roles * OpenAPI changes * Generated provider and docs * Add example * Update CHANGELOG.md * chore: update release date and enhance feature descriptions in CHANGELOG.md --------- Co-authored-by: shivaygupta <shivay.gupta@konghq.com> Co-authored-by: Harsha Dixit <harsha.dixit@konghq.com>
1 parent e070531 commit 8509972

156 files changed

Lines changed: 18566 additions & 896 deletions

File tree

Some content is hidden

Large Commits have some content hidden by default. Use the searchbox below for content that may be hidden.

.speakeasy/gen.lock

Lines changed: 774 additions & 130 deletions
Large diffs are not rendered by default.

CHANGELOG.md

Lines changed: 12 additions & 0 deletions
Original file line numberDiff line numberDiff line change
@@ -1,5 +1,17 @@
11
# Changelog
22

3+
## 3.21.0
4+
> Released 2026/08/04
5+
6+
# Features
7+
* Add support for `konnect_organization_personal_access_token_settings` resource, using which you can control organization-wide personal access token (PAT) policies, such as enabling PATs and setting the maximum token expiration period.
8+
* Add support for `konnect_portal_developer`, `konnect_portal_application` and `konnect_portal_application_registration` resources, using which you can manage developer accounts in a portal, the applications owned by those developers, and the registration of those applications against APIs published to the portal.
9+
* Add support for `konnect_identity_auth_server_client_secret` resource, using which you can create and rotate client secrets for an identity auth server client.
10+
* Add support for `konnect_user_role` resource, using which you can assign a role to a user scoped to a specific entity (for example, granting the `Viewer` role on a control plane).
11+
12+
# Bug Fixes
13+
* Deprecate `konnect_portal_appearance` resource.
14+
315
## 3.20.0
416
> Released 2026/07/06
517

docs/data-sources/mesh_control_planes.md

Lines changed: 47 additions & 0 deletions
Original file line numberDiff line numberDiff line change
@@ -14,16 +14,63 @@ MeshControlPlanes DataSource
1414

1515
```terraform
1616
data "konnect_mesh_control_planes" "my_meshcontrolplanes" {
17+
filter = {
18+
labels = {
19+
contains = "...my_contains..."
20+
eq = "...my_eq..."
21+
neq = "...my_neq..."
22+
ocontains = "...my_ocontains..."
23+
oeq = "...my_oeq..."
24+
}
25+
name = {
26+
contains = "...my_contains..."
27+
eq = "...my_eq..."
28+
}
29+
}
1730
}
1831
```
1932

2033
<!-- schema generated by tfplugindocs -->
2134
## Schema
2235

36+
### Optional
37+
38+
- `filter` (Attributes) Filters a collection of control planes. (see [below for nested schema](#nestedatt--filter))
39+
2340
### Read-Only
2441

2542
- `data` (Attributes List) (see [below for nested schema](#nestedatt--data))
2643

44+
<a id="nestedatt--filter"></a>
45+
### Nested Schema for `filter`
46+
47+
Optional:
48+
49+
- `labels` (Attributes) Filter using **one** of the following operators: `eq`, `oeq`, `neq`, `contains`, `ocontains` (see [below for nested schema](#nestedatt--filter--labels))
50+
- `name` (Attributes) Filter using **one** of the following operators: `eq`, `contains` (see [below for nested schema](#nestedatt--filter--name))
51+
52+
<a id="nestedatt--filter--labels"></a>
53+
### Nested Schema for `filter.labels`
54+
55+
Optional:
56+
57+
- `contains` (String) The field contains the provided value.
58+
- `eq` (String) The field exactly matches the provided value.
59+
- `neq` (String) The field does not match the provided value.
60+
- `ocontains` (String) The field contains any of the provided values.
61+
- `oeq` (String) The field matches any of the provided values.
62+
63+
64+
<a id="nestedatt--filter--name"></a>
65+
### Nested Schema for `filter.name`
66+
67+
Optional:
68+
69+
- `contains` (String) The field contains the provided value.
70+
- `eq` (String) The field exactly matches the provided value.
71+
72+
73+
2774
<a id="nestedatt--data"></a>
2875
### Nested Schema for `data`
2976

docs/index.md

Lines changed: 1 addition & 1 deletion
Original file line numberDiff line numberDiff line change
@@ -16,7 +16,7 @@ terraform {
1616
required_providers {
1717
konnect = {
1818
source = "kong/konnect"
19-
version = "3.20.0"
19+
version = "3.21.0"
2020
}
2121
}
2222
}

docs/resources/application_auth_strategy.md

Lines changed: 31 additions & 6 deletions
Original file line numberDiff line numberDiff line change
@@ -30,7 +30,10 @@ resource "konnect_application_auth_strategy" "my_applicationauthstrategy" {
3030
labels = {
3131
key = "value"
3232
}
33-
name = "...my_name..."
33+
name = "...my_name..."
34+
principals = {
35+
enabled = false
36+
}
3437
strategy_type = "key_auth"
3538
}
3639
}
@@ -68,6 +71,9 @@ Optional:
6871
Keys must be of length 1-63 characters, and cannot start with "kong", "konnect", "mesh", "kic", or "_".
6972
Requires replacement if changed.
7073
- `name` (String) The name of the auth strategy. This is used to identify the auth strategy in the Konnect UI. Not Null; Requires replacement if changed.
74+
- `principals` (Attributes) Application principal settings for this auth strategy. Runtime effect applies to V3 API Catalog (ACE) portals and
75+
applications; stored values may be set for any auth strategy in the organization.
76+
Requires replacement if changed. (see [below for nested schema](#nestedatt--key_auth--principals))
7177
- `strategy_type` (String) Not Null; must be "key_auth"; Requires replacement if changed.
7278

7379
Read-Only:
@@ -86,8 +92,8 @@ Default: true
8692

8793
Optional:
8894

89-
- `key_auth` (Attributes) The most basic mode to configure an Application Auth Strategy for an API Product Version.
90-
Using this mode will allow developers to generate API keys that will authenticate their application requests.
95+
- `key_auth` (Attributes) The most basic mode to configure an Application Auth Strategy for an API Product Version.
96+
Using this mode will allow developers to generate API keys that will authenticate their application requests.
9197
Once authenticated, an application will be granted access to any Product Version it is registered for that is configured for Key Auth.
9298
Not Null; Requires replacement if changed. (see [below for nested schema](#nestedatt--key_auth--configs--key_auth))
9399

@@ -110,6 +116,14 @@ Optional:
110116

111117

112118

119+
<a id="nestedatt--key_auth--principals"></a>
120+
### Nested Schema for `key_auth.principals`
121+
122+
Optional:
123+
124+
- `enabled` (Boolean) Whether application principals are enabled for this auth strategy. Default: false; Requires replacement if changed.
125+
126+
113127
<a id="nestedatt--key_auth--dcr_provider"></a>
114128
### Nested Schema for `key_auth.dcr_provider`
115129

@@ -135,6 +149,9 @@ Optional:
135149
Keys must be of length 1-63 characters, and cannot start with "kong", "konnect", "mesh", "kic", or "_".
136150
Requires replacement if changed.
137151
- `name` (String) The name of the auth strategy. This is used to identify the auth strategy in the Konnect UI. Not Null; Requires replacement if changed.
152+
- `principals` (Attributes) Application principal settings for this auth strategy. Runtime effect applies to V3 API Catalog (ACE) portals and
153+
applications; stored values may be set for any auth strategy in the organization.
154+
Requires replacement if changed. (see [below for nested schema](#nestedatt--openid_connect--principals))
138155
- `strategy_type` (String) Not Null; must be "openid_connect"; Requires replacement if changed.
139156

140157
Read-Only:
@@ -153,9 +170,9 @@ Read-Only:
153170

154171
Optional:
155172

156-
- `openid_connect` (Attributes) A more advanced mode to configure an API Product Version’s Application Auth Strategy.
157-
Using this mode will allow developers to use API credentials issued from an external IdP that will authenticate their application requests.
158-
Once authenticated, an application will be granted access to any Product Version it is registered for that is configured for the same Auth Strategy.
173+
- `openid_connect` (Attributes) A more advanced mode to configure an API Product Version’s Application Auth Strategy.
174+
Using this mode will allow developers to use API credentials issued from an external IdP that will authenticate their application requests.
175+
Once authenticated, an application will be granted access to any Product Version it is registered for that is configured for the same Auth Strategy.
159176
An OIDC strategy may be used in conjunction with a DCR provider to automatically create the IdP application.
160177
Not Null; Requires replacement if changed. (see [below for nested schema](#nestedatt--openid_connect--configs--openid_connect))
161178

@@ -172,6 +189,14 @@ Optional:
172189

173190

174191

192+
<a id="nestedatt--openid_connect--principals"></a>
193+
### Nested Schema for `openid_connect.principals`
194+
195+
Optional:
196+
197+
- `enabled` (Boolean) Whether application principals are enabled for this auth strategy. Default: false; Requires replacement if changed.
198+
199+
175200
<a id="nestedatt--openid_connect--dcr_provider"></a>
176201
### Nested Schema for `openid_connect.dcr_provider`
177202

docs/resources/cloud_gateway_configuration.md

Lines changed: 1 addition & 0 deletions
Original file line numberDiff line numberDiff line change
@@ -95,6 +95,7 @@ Read-Only:
9595

9696
- `created_at` (String) An RFC-3339 timestamp representation of data-plane group creation date.
9797
- `egress_ip_addresses` (List of String) List of egress IP addresses for the network that this data-plane group runs on.
98+
- `hostnames` (List of String) List of hostnames for proxying to the data-plane group.
9899
- `id` (String) ID of the data-plane group that represents a deployment target for a set of data-planes.
99100
- `private_ip_addresses` (List of String) List of private IP addresses of the internal load balancer that proxies traffic to this data-plane group.
100101
- `state` (String) State of the data-plane group.

docs/resources/gateway_plugin_key_auth.md

Lines changed: 1 addition & 1 deletion
Original file line numberDiff line numberDiff line change
@@ -125,7 +125,7 @@ Optional:
125125

126126
- `id` (String) A string representing a UUID (universally unique identifier).
127127
- `region` (String)
128-
- `scope` (String) possible known values include one of ["cp", "realm"]
128+
- `scope` (String) possible known values include one of ["cp", "realm"]; Default: "cp"
129129

130130

131131
<a id="nestedatt--config--principals"></a>
Lines changed: 64 additions & 0 deletions
Original file line numberDiff line numberDiff line change
@@ -0,0 +1,64 @@
1+
---
2+
# generated by https://github.com/hashicorp/terraform-plugin-docs
3+
page_title: "konnect_identity_auth_server_client_secret Resource - terraform-provider-konnect"
4+
subcategory: ""
5+
description: |-
6+
IdentityAuthServerClientSecret Resource
7+
---
8+
9+
# konnect_identity_auth_server_client_secret (Resource)
10+
11+
IdentityAuthServerClientSecret Resource
12+
13+
## Example Usage
14+
15+
```terraform
16+
resource "konnect_identity_auth_server_client_secret" "my_identityauthserverclientsecret" {
17+
auth_server_id = "d32d905a-ed33-46a3-a093-d8f536af9a8a"
18+
client_id = "kYa9iQFU5xPDSIUH9z1z"
19+
enabled = true
20+
secret = "YAzsyUlNZ5gNGeKS9H3VAdxVPzhPo4ae"
21+
}
22+
```
23+
24+
<!-- schema generated by tfplugindocs -->
25+
## Schema
26+
27+
### Required
28+
29+
- `auth_server_id` (String) The auth server ID
30+
- `client_id` (String) The OAuth 2.0 client ID
31+
32+
### Optional
33+
34+
- `enabled` (Boolean) Specifies whether the secret is enabled. If the secret is not enabled, it will not be usable during authentication phase. Default: true
35+
- `secret` (String, Sensitive) The OAuth 2.0 client secret. Requires replacement if changed.
36+
37+
### Read-Only
38+
39+
- `created_at` (String) An ISO-8601 timestamp representation of entity creation date.
40+
- `id` (String) The ID of the client secret
41+
- `updated_at` (String) An ISO-8601 timestamp representation of entity update date.
42+
43+
## Import
44+
45+
Import is supported using the following syntax:
46+
47+
In Terraform v1.5.0 and later, the [`import` block](https://developer.hashicorp.com/terraform/language/import) can be used with the `id` attribute, for example:
48+
49+
```terraform
50+
import {
51+
to = konnect_identity_auth_server_client_secret.my_konnect_identity_auth_server_client_secret
52+
id = jsonencode({
53+
auth_server_id = "d32d905a-ed33-46a3-a093-d8f536af9a8a"
54+
client_id = "kYa9iQFU5xPDSIUH9z1z"
55+
id = "07d05309-45cc-4b37-92fb-1524846deec3"
56+
})
57+
}
58+
```
59+
60+
The [`terraform import` command](https://developer.hashicorp.com/terraform/cli/commands/import) can be used, for example:
61+
62+
```shell
63+
terraform import konnect_identity_auth_server_client_secret.my_konnect_identity_auth_server_client_secret '{"auth_server_id": "d32d905a-ed33-46a3-a093-d8f536af9a8a", "client_id": "kYa9iQFU5xPDSIUH9z1z", "id": "07d05309-45cc-4b37-92fb-1524846deec3"}'
64+
```
Lines changed: 52 additions & 0 deletions
Original file line numberDiff line numberDiff line change
@@ -0,0 +1,52 @@
1+
---
2+
# generated by https://github.com/hashicorp/terraform-plugin-docs
3+
page_title: "konnect_organization_personal_access_token_settings Resource - terraform-provider-konnect"
4+
subcategory: ""
5+
description: |-
6+
OrganizationPersonalAccessTokenSettings Resource
7+
---
8+
9+
# konnect_organization_personal_access_token_settings (Resource)
10+
11+
OrganizationPersonalAccessTokenSettings Resource
12+
13+
## Example Usage
14+
15+
```terraform
16+
resource "konnect_organization_personal_access_token_settings" "my_organizationpersonalaccesstokensettings" {
17+
max_expiration_period_days = 170
18+
organization_id = "5f9fd312-a987-4628-b4c5-bb4f4fddd5f7"
19+
pats_enabled = true
20+
}
21+
```
22+
23+
<!-- schema generated by tfplugindocs -->
24+
## Schema
25+
26+
### Required
27+
28+
- `organization_id` (String) A UUID representing an organization.
29+
30+
### Optional
31+
32+
- `max_expiration_period_days` (Number)
33+
- `pats_enabled` (Boolean)
34+
35+
## Import
36+
37+
Import is supported using the following syntax:
38+
39+
In Terraform v1.5.0 and later, the [`import` block](https://developer.hashicorp.com/terraform/language/import) can be used with the `id` attribute, for example:
40+
41+
```terraform
42+
import {
43+
to = konnect_organization_personal_access_token_settings.my_konnect_organization_personal_access_token_settings
44+
id = "5f9fd312-a987-4628-b4c5-bb4f4fddd5f7"
45+
}
46+
```
47+
48+
The [`terraform import` command](https://developer.hashicorp.com/terraform/cli/commands/import) can be used, for example:
49+
50+
```shell
51+
terraform import konnect_organization_personal_access_token_settings.my_konnect_organization_personal_access_token_settings "5f9fd312-a987-4628-b4c5-bb4f4fddd5f7"
52+
```

docs/resources/portal_appearance.md

Lines changed: 6 additions & 6 deletions
Original file line numberDiff line numberDiff line change
@@ -132,12 +132,12 @@ resource "konnect_portal_appearance" "my_portalappearance" {
132132

133133
### Optional
134134

135-
- `custom_fonts` (Attributes) Font selections to render text in the portal user interface. Must set use_custom_fonts to true to enable using custom font values. (see [below for nested schema](#nestedatt--custom_fonts))
136-
- `custom_theme` (Attributes) Groups of variables for configuring visual details of the portal user interface. Set theme_name to 'custom' to use custom values for theme variables. (see [below for nested schema](#nestedatt--custom_theme))
137-
- `images` (Attributes) A collection of binary image data to customize images in the portal (see [below for nested schema](#nestedatt--images))
138-
- `text` (Attributes) Values to display for customizable text in the portal user interface (see [below for nested schema](#nestedatt--text))
139-
- `theme_name` (String) Select a pre-existing default theme or specify 'custom' to use custom_theme variables. possible known values include one of ["mint_rocket", "dark_mode", "custom"]
140-
- `use_custom_fonts` (Boolean) If true, fonts in custom_fonts will be used over the theme's default fonts
135+
- `custom_fonts` (Attributes, Deprecated) Font selections to render text in the portal user interface. Must set use_custom_fonts to true to enable using custom font values. (see [below for nested schema](#nestedatt--custom_fonts))
136+
- `custom_theme` (Attributes, Deprecated) Groups of variables for configuring visual details of the portal user interface. Set theme_name to 'custom' to use custom values for theme variables. (see [below for nested schema](#nestedatt--custom_theme))
137+
- `images` (Attributes, Deprecated) A collection of binary image data to customize images in the portal (see [below for nested schema](#nestedatt--images))
138+
- `text` (Attributes, Deprecated) Values to display for customizable text in the portal user interface (see [below for nested schema](#nestedatt--text))
139+
- `theme_name` (String, Deprecated) Select a pre-existing default theme or specify 'custom' to use custom_theme variables. possible known values include one of ["mint_rocket", "dark_mode", "custom"]
140+
- `use_custom_fonts` (Boolean, Deprecated) If true, fonts in custom_fonts will be used over the theme's default fonts
141141

142142
<a id="nestedatt--custom_fonts"></a>
143143
### Nested Schema for `custom_fonts`

0 commit comments

Comments
 (0)