cdktf: update documentation

Author: sebasslash

website/docs/cdktf/csharp/d/ip_ranges.html.markdown

@@ -41,8 +41,7 @@ The following attributes are exported:
 
 * `Api` - The list of IP ranges in CIDR notation used for connections from user site to HCP Terraform APIs.
 * `Notifications` - The list of IP ranges in CIDR notation used for notifications.
-* `Sentinel` - The list of IP ranges in CIDR notation used for outbound requests from Sentinel policies.
+* `Sentinel` - The list of IP ranges in CIDR notation used for outbound requests from Sentinel policies. Applicable for [Policy Checks](https://developer.hashicorp.com/terraform/cloud-docs/policy-enforcement/manage-policy-sets#policy-checks) mode only (also known as Legacy mode). 
 * `Vcs` - The list of IP ranges in CIDR notation used for connecting to VCS providers.
 
-
-<!-- cache-key: cdktf-0.17.0-pre.15 input-987ff1291f7652480885c8426decd8b28172ee0aede7d6f52322a9845caec7e4 -->
+<!-- cache-key: cdktf-0.17.0-pre.15 input-c9c4fa079084ce6fc5f646edebfeaf7e0fb8b889f834f6f8469103fcbdb27d3e -->

website/docs/cdktf/csharp/d/project.html.markdown

@@ -47,5 +47,6 @@ In addition to all arguments above, the following attributes are exported:
 * `Id` - The project ID.
 * `WorkspaceIds` - IDs of the workspaces that are associated with the project.
 * `WorkspaceNames` - Names of the workspaces that are associated with the project.
+* `EffectiveTags` - A map of key-value tags associated with the project.
 
-<!-- cache-key: cdktf-0.17.0-pre.15 input-c0fb226c1ac838d85660d99cb036d77ac141264beb3f94ffd4b3e2369f67b971 -->
+<!-- cache-key: cdktf-0.17.0-pre.15 input-d6ced138e71a16de8ba95b284a41c0a5b1ee88185ba1da147742ea5af9e97163 -->

website/docs/cdktf/csharp/d/registry_module.html.markdown

@@ -0,0 +1,87 @@
+---
+layout: "tfe"
+page_title: "Terraform Enterprise: tfe_registry_module"
+description: |-
+  Get information on a registry module
+---
+
+
+<!-- Please do not edit this file, it is generated. -->
+# Data Source: tfe_registry_module
+
+Use this data source to get information about a registry module.
+
+## Example Usage
+
+Basic usage:
+
+Since modules have a [required naming convention](https://developer.hashicorp.com/terraform/registry/modules/publish#requirements), you can get these values from your module repository (`Terraform-<moduleProvider>-<name>`). 
+
+```hcl
+data "tfe_registry_module" "example" {
+  organization    = var.organization_name
+  name            = "no-code-ssm"
+  module_provider = "aws"
+}
+```
+
+## Argument Reference
+
+The following arguments are required:
+
+* `Organization` - (Required) The name of the organization associated with the registry module.
+* `Name` - (Required) The name of the module. Can be found from repository name convention `Terraform-<provider>-<name>`
+* `ModuleProvider` - (Required) The provider associated with the module. Can be found from repository name convention `Terraform-<provider>-<name>`
+
+The following arguments are supported:
+
+* `Namespace` - (Optional) The namespace of a registry module. Typically this is the same as the organization name. Defaults to `Organization` value.
+* `RegistryName` - (Optional) The registry name of a registry module. Valid options: "public", "private". Defaults to "private".
+
+## Attributes Reference
+
+* `Id` - The ID of the registry module.
+* `NoCodeModuleId` - The ID of the no-code module, if enabled.
+* `NoCodeModuleSource` - The source value of the no-code module (`<ORGANIZATION>/<REGISTRY_NAME>/<NAMESPACE>/<REGISTRY MODULE NAME>/<REGISTRY MODULE PROVIDER>`).
+* `NoCode` - Boolean value if no-code module is enabled.
+* `PublishingMechanism` - The publishing mechanism used when releasing new versions of the module.
+* `VcsRepo` - Settings for the registry module's VCS repository. 
+* `Permissions` - The permissions on a module.
+* `Status` - Current status of registry module.
+* `TestConfig` - Test configuration indicating module testing setup.
+* `VersionStatuses` - Version information for a given module.
+* `CreatedAt` - Date module was created.
+* `UpdatedAt` - Date module was last updated.
+
+The `VcsRepo` block supports:
+
+* `DisplayIdentifier` - The display identifier for your VCS repository.
+  For most VCS providers outside of BitBucket Cloud and Azure DevOps, this will match the `Identifier`
+  string.
+* `Identifier` - A reference to your VCS repository in the format
+  `<organization>/<repository>` where `<organization>` and `<repository>` refer to the organization (or project key, for Bitbucket Data Center)
+  and repository in your VCS provider. The format for Azure DevOps is `<ado organization>/<ado project>/_git/<ado repository>`.
+* `OauthTokenId` - Token ID of the VCS Connection (OAuth Connection Token) to use. This conflicts with `GithubAppInstallationId` and can only be used if `GithubAppInstallationId` is not used.
+* `GithubAppInstallationId` - The installation id of the Github App. This conflicts with `OauthTokenId` and can only be used if `OauthTokenId` is not used.
+* `Branch` - The git branch used for publishing when using branch-based publishing for the registry module. When a `Branch` is set, `Tags` will be returned as `False`.
+* `Tags` - Specifies whether tag based publishing is enabled for the registry module. When `Tags` is set to `True`, the `Branch` must be set to an empty value.
+* `SourceDirectory` - (Optional) The path to the module configuration files within the VCS repository. This feature is currently in beta and is not available to all users.
+* `TagPrefix` - (Optional) The prefix to filter repository Git tags when using the tag-based publishing type in a repository that contains code for multiple modules. Without a prefix, HCP Terraform and Terraform Enterprise publish new versions for all modules with valid Git tags that use semantic versioning. This feature is currently in beta and is not available to all users.
+
+The `Permissions` block supports:
+
+- `CanDelete` - Can delete.
+- `CanResync` - Can resync.
+- `CanRetry` -  Can retry.
+
+The `TestConfig` block supports:
+
+- `TestsEnabled` - Indicates whether tests are enabled for a module
+
+The `VersionStatuses` block supports:
+
+- `Version` - Version of the module.
+- `Status` - Status of the module at specific version.
+- `Error` - Error message reported by module at specific version.
+
+<!-- cache-key: cdktf-0.17.0-pre.15 input-4e070a783ac5323a3d4e4695e30e82f9ea41c06d28727cb2d440dd13a23e049f -->

website/docs/cdktf/csharp/d/ssh_key.html.markdown

@@ -5,6 +5,8 @@ description: |-
   Get information on a SSH key.
 ---
 
+
+<!-- Please do not edit this file, it is generated. -->
 # Data Source: tfe_ssh_key
 
 Use this data source to get information about a SSH key.
@@ -34,12 +36,13 @@ class MyConvertedCode : TerraformStack
 The following arguments are supported:
 
 * `Name` - (Required) Name of the SSH key.
-* `Organization` - (Required) Name of the organization.
+* `Organization` - (Optional) Name of the organization. If omitted, organization
+  must be defined in the provider config.
 
 ## Attributes Reference
 
 In addition to all arguments above, the following attributes are exported:
 
 * `Id` - The ID of the SSH key.
 
-<!-- cache-key: cdktf-0.17.0-pre.15 input-806b3725b385ea145f9913c0e0d9cd7b045ae9faf7bb22bbddfa40eda1fb10e3 -->
+<!-- cache-key: cdktf-0.17.0-pre.15 input-eb29ed64f702678fe5f4e16b19cee416f189775eb585e2b64df226614d29f489 -->

website/docs/cdktf/csharp/d/workspace.html.markdown

@@ -69,6 +69,7 @@ In addition to all arguments above, the following attributes are exported:
 * `SpeculativeEnabled` - Indicates whether this workspace allows speculative plans.
 * `SshKeyId` - The ID of an SSH key assigned to the workspace.
 * `StructuredRunOutputEnabled` - Indicates whether runs in this workspace use the enhanced apply UI.
+* `EffectiveTags` - A map of key-value tags associated with the workspace, including any inherited tags from the parent project.
 * `TagNames` - The names of tags added to this workspace.
 * `TerraformVersion` - The version (or version constraint) of Terraform used for this workspace.
 * `TriggerPrefixes` - List of trigger prefixes that describe the paths HCP Terraform monitors for changes, in addition to the working directory. Trigger prefixes are always appended to the root directory of the repository.
@@ -91,4 +92,4 @@ The `VcsRepo` block contains:
 * `OauthTokenId` - OAuth token ID of the configured VCS connection.
 * `TagsRegex` - A regular expression used to trigger a Workspace run for matching Git tags.
 
-<!-- cache-key: cdktf-0.17.0-pre.15 input-d80e2cf72aa52f98270a38620225ac1ef8a4810885e13dedc294ad2c1d21c880 -->
+<!-- cache-key: cdktf-0.17.0-pre.15 input-00e997c6f8d35b250c70aa4e4630b8d9ed6e2e553f58e34786b6567776e4a1ef -->

website/docs/cdktf/csharp/d/workspace_ids.html.markdown

@@ -5,6 +5,8 @@ description: |-
   Get information on workspace IDs.
 ---
 
+
+<!-- Please do not edit this file, it is generated. -->
 # Data Source: tfe_workspace_ids
 
 Use this data source to get a map of workspace IDs.
@@ -29,6 +31,33 @@ class MyConvertedCode : TerraformStack
             Names = new [] { "app-frontend-prod", "app-frontend-dev1", "app-frontend-staging" },
             Organization = "my-org-name"
         });
+        new DataTfeWorkspaceIds.DataTfeWorkspaceIds(this, "dev_env_tags_only", new DataTfeWorkspaceIdsConfig {
+            Organization = "my-org-name",
+            TagFilters = new DataTfeWorkspaceIdsTagFilters {
+                Include = new Dictionary<string, string> {
+                    { "environment", "dev" }
+                }
+            }
+        });
+        new DataTfeWorkspaceIds.DataTfeWorkspaceIds(this, "exclude_all_matching_key", new DataTfeWorkspaceIdsConfig {
+            Organization = "my-org-name",
+            TagFilters = new DataTfeWorkspaceIdsTagFilters {
+                Exclude = new Dictionary<string, string> {
+                    { "bad_key", "*" }
+                }
+            }
+        });
+        new DataTfeWorkspaceIds.DataTfeWorkspaceIds(this, "include_and_exclude", new DataTfeWorkspaceIdsConfig {
+            Organization = "my-org-name",
+            TagFilters = new DataTfeWorkspaceIdsTagFilters {
+                Exclude = new Dictionary<string, string> {
+                    { "team", "prodsec" }
+                },
+                Include = new Dictionary<string, string> {
+                    { "region", "us-east-1" }
+                }
+            }
+        });
         new DataTfeWorkspaceIds.DataTfeWorkspaceIds(this, "prod-apps", new DataTfeWorkspaceIdsConfig {
             Organization = "my-org-name",
             TagNames = new [] { "prod", "app", "aws" }
@@ -51,15 +80,21 @@ The following arguments are supported. At least one of `Names` or `TagNames` mus
 
     To select _all_ workspaces for an organization, provide a list with a single
     asterisk, like `["*"]`. The asterisk also supports partial matching on prefix and/or suffix, like `[*Prod]`, `[test-*]`, `[*dev*]`.
-* `TagNames` - (Optional) A list of tag names to search for.
-* `ExcludeTags` - (Optional) A list of tag names to exclude when searching.
+* `TagFilters` - (Optional) A set of key-value tag filters to search for workspaces.
+* `TagNames` - (Optional) **Deprecated** A list of tag names to search for.
+* `ExcludeTags` - (Optional) **Deprecated** A list of tag names to exclude when searching.
 * `Organization` - (Required) Name of the organization.
 
+The `TagFilters` block supports:
+
+* `Include`: (Optional) A map of key-value tags the workspaces must contain. Each tag included here will be combined using a logical AND when filtering results.
+* `Exclude`: (Optional) A map of key-value tags to exclude workspaces from the returned list. To exclude all workspaces containing a specific key, use `"*"` as the value.
+
 ## Attributes Reference
 
 In addition to all arguments above, the following attributes are exported:
 
 * `FullNames` - A map of workspace names and their full names, which look like `<ORGANIZATION>/<WORKSPACE>`.
 * `Ids` - A map of workspace names and their opaque, immutable IDs, which look like `ws-<RANDOM STRING>`.
 
-<!-- cache-key: cdktf-0.17.0-pre.15 input-a50ddfd1d990de8d1cbdba1a7182f9b5d086fbc397439bdd1d0bd057263938e3 -->
+<!-- cache-key: cdktf-0.17.0-pre.15 input-59fc5c7e05bb6177bb75c0977a805249523a5ecc467f69e0c8d67905a2b343a2 -->

website/docs/cdktf/csharp/ephemeral-resources/outputs.html.markdown

@@ -0,0 +1,64 @@
+---
+layout: "tfe"
+page_title: "Terraform Enterprise: Ephemeral: tfe_outputs"
+description: |-
+  Get output values from another organization/workspace without writing
+  sensitive data to state.
+---
+
+
+<!-- Please do not edit this file, it is generated. -->
+# Ephemeral: tfe_outputs
+
+This ephemeral resource is used to retrieve the state outputs for a given workspace.
+It enables output values in one Terraform configuration to be used in another.
+The retrieved output values are guaranteed not to be written to state.
+
+~> **NOTE:** Ephemeral resources are a new feature and may evolve as we continue to explore their most effective uses. [Learn more](https://developer.hashicorp.com/terraform/language/v1.10.x/resources/ephemeral).
+
+---
+
+~> **NOTE:** Regardless of the sensitivity of the output values as set in HCP
+Terraform, the `Values` and `NonsensitiveValues` attributes in this ephemeral
+resource are both treated as sensitive.
+
+## Example Usage
+
+Using the `TfeOutputs` ephemeral resource, the outputs `VaultRoleId` and `VaultSecretId` can be used to configure a vault provider instance as seen below:
+
+In the example below, assume we have outputs defined in a `MyOrg/myWorkspace`:
+
+```hcl
+ephemeral "tfe_outputs" "foo" {
+  organization = "my-org"
+  workspace = "my-workspace"
+}
+
+provider "vault" {
+  auth_login {
+    path = "auth/approle/login"
+
+    parameters = {
+      role_id   = ephemeral_tfe_outputs.foo.values.vault_role_id
+      secret_id = ephemeral_tfe_outputs.foo.values.vault_secret_id
+    }
+  }
+}
+```
+
+## Argument Reference
+
+The following arguments are supported:
+
+* `Organization` - (Optional) The name of the organization. If omitted, the
+  organization must be defined in the provider config.
+* `Workspace` - (Required) The name of the workspace.
+
+## Attributes Reference
+
+The following attributes are exported:
+
+* `Values` - The current output values for the specified workspace.
+* `NonsensitiveValues` - The current non-sensitive output values for the specified workspace, this is a subset of all output values.
+
+<!-- cache-key: cdktf-0.17.0-pre.15 input-25868a462b51b850499a9e695e33687f8cb610c5427b2aba1ca0998eac2049fc -->

website/docs/cdktf/csharp/ephemeral-resources/team_token.html.markdown

@@ -0,0 +1,59 @@
+---
+layout: "tfe"
+page_title: "Terraform Enterprise: Ephemeral: tfe_team_token"
+description: |-
+  Generates an ephemeral team token.
+---
+
+
+<!-- Please do not edit this file, it is generated. -->
+# Ephemeral: tfe_team_token
+
+Generates an ephemeral team token for use during a Terraform run.
+
+Ephemeral team tokens are only valid within the context of a single run, and
+are not stored in Terraform state.
+
+Ephemeral resources are provisioned during the plan phase of a run as well as
+the apply phase.
+
+If you need the team token to remain valid for long-lived use, consider using the
+`TfeTeamToken` managed resource instead.
+
+~> **NOTE:** Ephemeral resources are a new feature and may evolve as we continue to explore their most effective uses. [Learn more](https://developer.hashicorp.com/terraform/language/v1.10.x/resources/ephemeral).
+
+## Example Usage
+
+### Generate a new team token:
+
+This will invalidate any existing team token.
+
+```hcl
+resource "tfe_team" "example" {
+  organization = "my-org-name"
+  name = "my-team-name"
+}
+
+ephemeral "tfe_team_token" "example" {
+  team_id = tfe_team.example.id
+}
+```
+
+## Argument Reference
+
+The following arguments are required:
+
+* `TeamId` - (Required) ID of the team.
+
+The following arguments are optional:
+
+* `ExpiredAt` - (Optional) The token's expiration date. The expiration date must be a date/time string in RFC3339 
+format (e.g., "2024-12-31T23:59:59Z"). If no expiration date is supplied, the expiration date will default to null and 
+never expire.
+
+This ephemeral resource exports the following attributes in addition to the arguments above:
+
+* `Token` - The generated token. This value is sensitive and will not be stored
+  in state.
+
+<!-- cache-key: cdktf-0.17.0-pre.15 input-392968ac0f012ea80837f8853f23ad92cb0723053dd23744b461934c5de20dd9 -->