published on Thursday, Jun 11, 2026 by Pulumi
published on Thursday, Jun 11, 2026 by Pulumi
Resource for managing a Harness Gitops Repository Credentials.
Example Usage
import * as pulumi from "@pulumi/pulumi";
import * as harness from "@pulumi/harness";
const test = new harness.platform.GitOpsRepoCred("test", {
identifier: "identifier",
accountId: "account_id",
agentId: "agent_id",
projectId: "project_id",
orgId: "org_id",
creds: [{
type: "git",
url: "git@github.com:yourorg",
sshPrivateKey: `----- BEGIN OPENSSH PRIVATE KEY-----
XXXXX
XXXXX
XXXXX
-----END OPENSSH PRIVATE KEY -----
`,
}],
}, {
ignoreChanges: [
"accountId",
"creds[0].sshPrivateKey",
],
});
import pulumi
import pulumi_harness as harness
test = harness.platform.GitOpsRepoCred("test",
identifier="identifier",
account_id="account_id",
agent_id="agent_id",
project_id="project_id",
org_id="org_id",
creds=[{
"type": "git",
"url": "git@github.com:yourorg",
"ssh_private_key": """----- BEGIN OPENSSH PRIVATE KEY-----
XXXXX
XXXXX
XXXXX
-----END OPENSSH PRIVATE KEY -----
""",
}],
opts = pulumi.ResourceOptions(ignore_changes=[
"accountId",
"creds[0].sshPrivateKey",
]))
package main
import (
"github.com/pulumi/pulumi-harness/sdk/go/harness/platform"
"github.com/pulumi/pulumi/sdk/v3/go/pulumi"
)
func main() {
pulumi.Run(func(ctx *pulumi.Context) error {
_, err := platform.NewGitOpsRepoCred(ctx, "test", &platform.GitOpsRepoCredArgs{
Identifier: pulumi.String("identifier"),
AccountId: pulumi.String("account_id"),
AgentId: pulumi.String("agent_id"),
ProjectId: pulumi.String("project_id"),
OrgId: pulumi.String("org_id"),
Creds: platform.GitOpsRepoCredCredArray{
&platform.GitOpsRepoCredCredArgs{
Type: pulumi.String("git"),
Url: pulumi.String("git@github.com:yourorg"),
SshPrivateKey: pulumi.String(`----- BEGIN OPENSSH PRIVATE KEY-----
XXXXX
XXXXX
XXXXX
-----END OPENSSH PRIVATE KEY -----
`),
},
},
}, pulumi.IgnoreChanges([]string{
"accountId",
"creds[0].sshPrivateKey",
}))
if err != nil {
return err
}
return nil
})
}
using System.Collections.Generic;
using System.Linq;
using Pulumi;
using Harness = Pulumi.Harness;
return await Deployment.RunAsync(() =>
{
var test = new Harness.Platform.GitOpsRepoCred("test", new()
{
Identifier = "identifier",
AccountId = "account_id",
AgentId = "agent_id",
ProjectId = "project_id",
OrgId = "org_id",
Creds = new[]
{
new Harness.Platform.Inputs.GitOpsRepoCredCredArgs
{
Type = "git",
Url = "git@github.com:yourorg",
SshPrivateKey = @"----- BEGIN OPENSSH PRIVATE KEY-----
XXXXX
XXXXX
XXXXX
-----END OPENSSH PRIVATE KEY -----
",
},
},
}, new CustomResourceOptions
{
IgnoreChanges =
{
"accountId",
"creds[0].sshPrivateKey",
},
});
});
package generated_program;
import com.pulumi.Context;
import com.pulumi.Pulumi;
import com.pulumi.core.Output;
import com.pulumi.harness.platform.GitOpsRepoCred;
import com.pulumi.harness.platform.GitOpsRepoCredArgs;
import com.pulumi.harness.platform.inputs.GitOpsRepoCredCredArgs;
import com.pulumi.resources.CustomResourceOptions;
import java.util.ArrayList;
import java.util.Arrays;
import java.util.Map;
import java.io.File;
import java.nio.file.Files;
import java.nio.file.Paths;
public class App {
public static void main(String[] args) {
Pulumi.run(App::stack);
}
public static void stack(Context ctx) {
var test = new GitOpsRepoCred("test", GitOpsRepoCredArgs.builder()
.identifier("identifier")
.accountId("account_id")
.agentId("agent_id")
.projectId("project_id")
.orgId("org_id")
.creds(GitOpsRepoCredCredArgs.builder()
.type("git")
.url("git@github.com:yourorg")
.sshPrivateKey("""
----- BEGIN OPENSSH PRIVATE KEY-----
XXXXX
XXXXX
XXXXX
-----END OPENSSH PRIVATE KEY -----
""")
.build())
.build(), CustomResourceOptions.builder()
.ignoreChanges("accountId", "creds[0].sshPrivateKey")
.build());
}
}
resources:
test:
type: harness:platform:GitOpsRepoCred
properties:
identifier: identifier
accountId: account_id
agentId: agent_id
projectId: project_id
orgId: org_id
creds:
- type: git
url: git@github.com:yourorg
sshPrivateKey: |
----- BEGIN OPENSSH PRIVATE KEY-----
XXXXX
XXXXX
XXXXX
-----END OPENSSH PRIVATE KEY -----
options:
ignoreChanges:
- accountId
- creds[0].sshPrivateKey
pulumi {
required_providers {
harness = {
source = "pulumi/harness"
}
}
}
resource "harness_platform_gitopsrepocred" "test" {
lifecycle {
ignore_changes = [accountId, creds[0].sshPrivateKey]
}
identifier = "identifier"
account_id = "account_id"
agent_id = "agent_id"
project_id = "project_id"
org_id = "org_id"
creds {
type = "git"
url = "git@github.com:yourorg"
ssh_private_key = "----- BEGIN OPENSSH PRIVATE KEY-----\nXXXXX\nXXXXX\nXXXXX\n-----END OPENSSH PRIVATE KEY -----\n"
}
}
Create GitOpsRepoCred Resource
Resources are created with functions called constructors. To learn more about declaring and configuring resources, see Resources.
Constructor syntax
new GitOpsRepoCred(name: string, args: GitOpsRepoCredArgs, opts?: CustomResourceOptions);@overload
def GitOpsRepoCred(resource_name: str,
args: GitOpsRepoCredArgs,
opts: Optional[ResourceOptions] = None)
@overload
def GitOpsRepoCred(resource_name: str,
opts: Optional[ResourceOptions] = None,
agent_id: Optional[str] = None,
identifier: Optional[str] = None,
account_id: Optional[str] = None,
creds: Optional[Sequence[GitOpsRepoCredCredArgs]] = None,
org_id: Optional[str] = None,
project_id: Optional[str] = None,
upsert: Optional[bool] = None)func NewGitOpsRepoCred(ctx *Context, name string, args GitOpsRepoCredArgs, opts ...ResourceOption) (*GitOpsRepoCred, error)public GitOpsRepoCred(string name, GitOpsRepoCredArgs args, CustomResourceOptions? opts = null)
public GitOpsRepoCred(String name, GitOpsRepoCredArgs args)
public GitOpsRepoCred(String name, GitOpsRepoCredArgs args, CustomResourceOptions options)
type: harness:platform:GitOpsRepoCred
properties: # The arguments to resource properties.
options: # Bag of options to control resource's behavior.
resource "harness_platform_gitopsrepocred" "name" {
# resource properties
}Parameters
- name string
- The unique name of the resource.
- args GitOpsRepoCredArgs
- The arguments to resource properties.
- opts CustomResourceOptions
- Bag of options to control resource's behavior.
- resource_name str
- The unique name of the resource.
- args GitOpsRepoCredArgs
- The arguments to resource properties.
- opts ResourceOptions
- Bag of options to control resource's behavior.
- ctx Context
- Context object for the current deployment.
- name string
- The unique name of the resource.
- args GitOpsRepoCredArgs
- The arguments to resource properties.
- opts ResourceOption
- Bag of options to control resource's behavior.
- name string
- The unique name of the resource.
- args GitOpsRepoCredArgs
- The arguments to resource properties.
- opts CustomResourceOptions
- Bag of options to control resource's behavior.
- name String
- The unique name of the resource.
- args GitOpsRepoCredArgs
- The arguments to resource properties.
- options CustomResourceOptions
- Bag of options to control resource's behavior.
Constructor example
The following reference example uses placeholder values for all input properties.
var gitOpsRepoCredResource = new Harness.Platform.GitOpsRepoCred("gitOpsRepoCredResource", new()
{
AgentId = "string",
Identifier = "string",
Creds = new[]
{
new Harness.Platform.Inputs.GitOpsRepoCredCredArgs
{
EnableOci = false,
GithubAppEnterpriseBaseUrl = "string",
GithubAppId = "string",
GithubAppInstallationId = "string",
GithubAppPrivateKey = "string",
GithubAppPrivateKeyWo = "string",
GithubAppPrivateKeyWoVersion = 0,
Password = "string",
PasswordWo = "string",
PasswordWoVersion = 0,
SshPrivateKey = "string",
SshPrivateKeyWo = "string",
SshPrivateKeyWoVersion = 0,
TlsClientCertData = "string",
TlsClientCertDataWo = "string",
TlsClientCertDataWoVersion = 0,
TlsClientCertKey = "string",
TlsClientCertKeyWo = "string",
TlsClientCertKeyWoVersion = 0,
Type = "string",
Url = "string",
Username = "string",
},
},
OrgId = "string",
ProjectId = "string",
Upsert = false,
});
example, err := platform.NewGitOpsRepoCred(ctx, "gitOpsRepoCredResource", &platform.GitOpsRepoCredArgs{
AgentId: pulumi.String("string"),
Identifier: pulumi.String("string"),
Creds: platform.GitOpsRepoCredCredArray{
&platform.GitOpsRepoCredCredArgs{
EnableOci: pulumi.Bool(false),
GithubAppEnterpriseBaseUrl: pulumi.String("string"),
GithubAppId: pulumi.String("string"),
GithubAppInstallationId: pulumi.String("string"),
GithubAppPrivateKey: pulumi.String("string"),
GithubAppPrivateKeyWo: pulumi.String("string"),
GithubAppPrivateKeyWoVersion: pulumi.Int(0),
Password: pulumi.String("string"),
PasswordWo: pulumi.String("string"),
PasswordWoVersion: pulumi.Int(0),
SshPrivateKey: pulumi.String("string"),
SshPrivateKeyWo: pulumi.String("string"),
SshPrivateKeyWoVersion: pulumi.Int(0),
TlsClientCertData: pulumi.String("string"),
TlsClientCertDataWo: pulumi.String("string"),
TlsClientCertDataWoVersion: pulumi.Int(0),
TlsClientCertKey: pulumi.String("string"),
TlsClientCertKeyWo: pulumi.String("string"),
TlsClientCertKeyWoVersion: pulumi.Int(0),
Type: pulumi.String("string"),
Url: pulumi.String("string"),
Username: pulumi.String("string"),
},
},
OrgId: pulumi.String("string"),
ProjectId: pulumi.String("string"),
Upsert: pulumi.Bool(false),
})
resource "harness_platform_gitopsrepocred" "gitOpsRepoCredResource" {
agent_id = "string"
identifier = "string"
creds {
enable_oci = false
github_app_enterprise_base_url = "string"
github_app_id = "string"
github_app_installation_id = "string"
github_app_private_key = "string"
github_app_private_key_wo = "string"
github_app_private_key_wo_version = 0
password = "string"
password_wo = "string"
password_wo_version = 0
ssh_private_key = "string"
ssh_private_key_wo = "string"
ssh_private_key_wo_version = 0
tls_client_cert_data = "string"
tls_client_cert_data_wo = "string"
tls_client_cert_data_wo_version = 0
tls_client_cert_key = "string"
tls_client_cert_key_wo = "string"
tls_client_cert_key_wo_version = 0
type = "string"
url = "string"
username = "string"
}
org_id = "string"
project_id = "string"
upsert = false
}
var gitOpsRepoCredResource = new GitOpsRepoCred("gitOpsRepoCredResource", GitOpsRepoCredArgs.builder()
.agentId("string")
.identifier("string")
.creds(GitOpsRepoCredCredArgs.builder()
.enableOci(false)
.githubAppEnterpriseBaseUrl("string")
.githubAppId("string")
.githubAppInstallationId("string")
.githubAppPrivateKey("string")
.githubAppPrivateKeyWo("string")
.githubAppPrivateKeyWoVersion(0)
.password("string")
.passwordWo("string")
.passwordWoVersion(0)
.sshPrivateKey("string")
.sshPrivateKeyWo("string")
.sshPrivateKeyWoVersion(0)
.tlsClientCertData("string")
.tlsClientCertDataWo("string")
.tlsClientCertDataWoVersion(0)
.tlsClientCertKey("string")
.tlsClientCertKeyWo("string")
.tlsClientCertKeyWoVersion(0)
.type("string")
.url("string")
.username("string")
.build())
.orgId("string")
.projectId("string")
.upsert(false)
.build());
git_ops_repo_cred_resource = harness.platform.GitOpsRepoCred("gitOpsRepoCredResource",
agent_id="string",
identifier="string",
creds=[{
"enable_oci": False,
"github_app_enterprise_base_url": "string",
"github_app_id": "string",
"github_app_installation_id": "string",
"github_app_private_key": "string",
"github_app_private_key_wo": "string",
"github_app_private_key_wo_version": 0,
"password": "string",
"password_wo": "string",
"password_wo_version": 0,
"ssh_private_key": "string",
"ssh_private_key_wo": "string",
"ssh_private_key_wo_version": 0,
"tls_client_cert_data": "string",
"tls_client_cert_data_wo": "string",
"tls_client_cert_data_wo_version": 0,
"tls_client_cert_key": "string",
"tls_client_cert_key_wo": "string",
"tls_client_cert_key_wo_version": 0,
"type": "string",
"url": "string",
"username": "string",
}],
org_id="string",
project_id="string",
upsert=False)
const gitOpsRepoCredResource = new harness.platform.GitOpsRepoCred("gitOpsRepoCredResource", {
agentId: "string",
identifier: "string",
creds: [{
enableOci: false,
githubAppEnterpriseBaseUrl: "string",
githubAppId: "string",
githubAppInstallationId: "string",
githubAppPrivateKey: "string",
githubAppPrivateKeyWo: "string",
githubAppPrivateKeyWoVersion: 0,
password: "string",
passwordWo: "string",
passwordWoVersion: 0,
sshPrivateKey: "string",
sshPrivateKeyWo: "string",
sshPrivateKeyWoVersion: 0,
tlsClientCertData: "string",
tlsClientCertDataWo: "string",
tlsClientCertDataWoVersion: 0,
tlsClientCertKey: "string",
tlsClientCertKeyWo: "string",
tlsClientCertKeyWoVersion: 0,
type: "string",
url: "string",
username: "string",
}],
orgId: "string",
projectId: "string",
upsert: false,
});
type: harness:platform:GitOpsRepoCred
properties:
agentId: string
creds:
- enableOci: false
githubAppEnterpriseBaseUrl: string
githubAppId: string
githubAppInstallationId: string
githubAppPrivateKey: string
githubAppPrivateKeyWo: string
githubAppPrivateKeyWoVersion: 0
password: string
passwordWo: string
passwordWoVersion: 0
sshPrivateKey: string
sshPrivateKeyWo: string
sshPrivateKeyWoVersion: 0
tlsClientCertData: string
tlsClientCertDataWo: string
tlsClientCertDataWoVersion: 0
tlsClientCertKey: string
tlsClientCertKeyWo: string
tlsClientCertKeyWoVersion: 0
type: string
url: string
username: string
identifier: string
orgId: string
projectId: string
upsert: false
GitOpsRepoCred Resource Properties
To learn more about resource properties and how to use them, see Inputs and Outputs in the Architecture and Concepts docs.
Inputs
In Python, inputs that are objects can be passed either as argument classes or as dictionary literals.
The GitOpsRepoCred resource accepts the following input properties:
- Agent
Id string - Agent identifier of the Repository Credentials.
- Identifier string
- Identifier of the Repository Credentials.
- Account
Id string - Account identifier of the Repository Credentials.
- Creds
List<Git
Ops Repo Cred Cred> - credential details.
- Org
Id string - Organization identifier of the Repository Credentials.
- Project
Id string - Project identifier of the Repository Credentials.
- Upsert bool
- Indicates if the GitOps repository credential should be updated if existing and inserted if not.
- Agent
Id string - Agent identifier of the Repository Credentials.
- Identifier string
- Identifier of the Repository Credentials.
- Account
Id string - Account identifier of the Repository Credentials.
- Creds
[]Git
Ops Repo Cred Cred Args - credential details.
- Org
Id string - Organization identifier of the Repository Credentials.
- Project
Id string - Project identifier of the Repository Credentials.
- Upsert bool
- Indicates if the GitOps repository credential should be updated if existing and inserted if not.
- agent_
id string - Agent identifier of the Repository Credentials.
- identifier string
- Identifier of the Repository Credentials.
- account_
id string - Account identifier of the Repository Credentials.
- creds list(object)
- credential details.
- org_
id string - Organization identifier of the Repository Credentials.
- project_
id string - Project identifier of the Repository Credentials.
- upsert bool
- Indicates if the GitOps repository credential should be updated if existing and inserted if not.
- agent
Id String - Agent identifier of the Repository Credentials.
- identifier String
- Identifier of the Repository Credentials.
- account
Id String - Account identifier of the Repository Credentials.
- creds
List<Git
Ops Repo Cred Cred> - credential details.
- org
Id String - Organization identifier of the Repository Credentials.
- project
Id String - Project identifier of the Repository Credentials.
- upsert Boolean
- Indicates if the GitOps repository credential should be updated if existing and inserted if not.
- agent
Id string - Agent identifier of the Repository Credentials.
- identifier string
- Identifier of the Repository Credentials.
- account
Id string - Account identifier of the Repository Credentials.
- creds
Git
Ops Repo Cred Cred[] - credential details.
- org
Id string - Organization identifier of the Repository Credentials.
- project
Id string - Project identifier of the Repository Credentials.
- upsert boolean
- Indicates if the GitOps repository credential should be updated if existing and inserted if not.
- agent_
id str - Agent identifier of the Repository Credentials.
- identifier str
- Identifier of the Repository Credentials.
- account_
id str - Account identifier of the Repository Credentials.
- creds
Sequence[Git
Ops Repo Cred Cred Args] - credential details.
- org_
id str - Organization identifier of the Repository Credentials.
- project_
id str - Project identifier of the Repository Credentials.
- upsert bool
- Indicates if the GitOps repository credential should be updated if existing and inserted if not.
- agent
Id String - Agent identifier of the Repository Credentials.
- identifier String
- Identifier of the Repository Credentials.
- account
Id String - Account identifier of the Repository Credentials.
- creds List<Property Map>
- credential details.
- org
Id String - Organization identifier of the Repository Credentials.
- project
Id String - Project identifier of the Repository Credentials.
- upsert Boolean
- Indicates if the GitOps repository credential should be updated if existing and inserted if not.
Outputs
All input properties are implicitly available as output properties. Additionally, the GitOpsRepoCred resource produces the following output properties:
- Id string
- The provider-assigned unique ID for this managed resource.
- Id string
- The provider-assigned unique ID for this managed resource.
- id string
- The provider-assigned unique ID for this managed resource.
- id String
- The provider-assigned unique ID for this managed resource.
- id string
- The provider-assigned unique ID for this managed resource.
- id str
- The provider-assigned unique ID for this managed resource.
- id String
- The provider-assigned unique ID for this managed resource.
Look up Existing GitOpsRepoCred Resource
Get an existing GitOpsRepoCred resource’s state with the given name, ID, and optional extra properties used to qualify the lookup.
public static get(name: string, id: Input<ID>, state?: GitOpsRepoCredState, opts?: CustomResourceOptions): GitOpsRepoCred@staticmethod
def get(resource_name: str,
id: str,
opts: Optional[ResourceOptions] = None,
account_id: Optional[str] = None,
agent_id: Optional[str] = None,
creds: Optional[Sequence[GitOpsRepoCredCredArgs]] = None,
identifier: Optional[str] = None,
org_id: Optional[str] = None,
project_id: Optional[str] = None,
upsert: Optional[bool] = None) -> GitOpsRepoCredfunc GetGitOpsRepoCred(ctx *Context, name string, id IDInput, state *GitOpsRepoCredState, opts ...ResourceOption) (*GitOpsRepoCred, error)public static GitOpsRepoCred Get(string name, Input<string> id, GitOpsRepoCredState? state, CustomResourceOptions? opts = null)public static GitOpsRepoCred get(String name, Output<String> id, GitOpsRepoCredState state, CustomResourceOptions options)resources: _: type: harness:platform:GitOpsRepoCred get: id: ${id}import {
to = harness_platform_gitopsrepocred.example
id = "${id}"
}
- name
- The unique name of the resulting resource.
- id
- The unique provider ID of the resource to lookup.
- state
- Any extra arguments used during the lookup.
- opts
- A bag of options that control this resource's behavior.
- resource_name
- The unique name of the resulting resource.
- id
- The unique provider ID of the resource to lookup.
- name
- The unique name of the resulting resource.
- id
- The unique provider ID of the resource to lookup.
- state
- Any extra arguments used during the lookup.
- opts
- A bag of options that control this resource's behavior.
- name
- The unique name of the resulting resource.
- id
- The unique provider ID of the resource to lookup.
- state
- Any extra arguments used during the lookup.
- opts
- A bag of options that control this resource's behavior.
- name
- The unique name of the resulting resource.
- id
- The unique provider ID of the resource to lookup.
- state
- Any extra arguments used during the lookup.
- opts
- A bag of options that control this resource's behavior.
- Account
Id string - Account identifier of the Repository Credentials.
- Agent
Id string - Agent identifier of the Repository Credentials.
- Creds
List<Git
Ops Repo Cred Cred> - credential details.
- Identifier string
- Identifier of the Repository Credentials.
- Org
Id string - Organization identifier of the Repository Credentials.
- Project
Id string - Project identifier of the Repository Credentials.
- Upsert bool
- Indicates if the GitOps repository credential should be updated if existing and inserted if not.
- Account
Id string - Account identifier of the Repository Credentials.
- Agent
Id string - Agent identifier of the Repository Credentials.
- Creds
[]Git
Ops Repo Cred Cred Args - credential details.
- Identifier string
- Identifier of the Repository Credentials.
- Org
Id string - Organization identifier of the Repository Credentials.
- Project
Id string - Project identifier of the Repository Credentials.
- Upsert bool
- Indicates if the GitOps repository credential should be updated if existing and inserted if not.
- account_
id string - Account identifier of the Repository Credentials.
- agent_
id string - Agent identifier of the Repository Credentials.
- creds list(object)
- credential details.
- identifier string
- Identifier of the Repository Credentials.
- org_
id string - Organization identifier of the Repository Credentials.
- project_
id string - Project identifier of the Repository Credentials.
- upsert bool
- Indicates if the GitOps repository credential should be updated if existing and inserted if not.
- account
Id String - Account identifier of the Repository Credentials.
- agent
Id String - Agent identifier of the Repository Credentials.
- creds
List<Git
Ops Repo Cred Cred> - credential details.
- identifier String
- Identifier of the Repository Credentials.
- org
Id String - Organization identifier of the Repository Credentials.
- project
Id String - Project identifier of the Repository Credentials.
- upsert Boolean
- Indicates if the GitOps repository credential should be updated if existing and inserted if not.
- account
Id string - Account identifier of the Repository Credentials.
- agent
Id string - Agent identifier of the Repository Credentials.
- creds
Git
Ops Repo Cred Cred[] - credential details.
- identifier string
- Identifier of the Repository Credentials.
- org
Id string - Organization identifier of the Repository Credentials.
- project
Id string - Project identifier of the Repository Credentials.
- upsert boolean
- Indicates if the GitOps repository credential should be updated if existing and inserted if not.
- account_
id str - Account identifier of the Repository Credentials.
- agent_
id str - Agent identifier of the Repository Credentials.
- creds
Sequence[Git
Ops Repo Cred Cred Args] - credential details.
- identifier str
- Identifier of the Repository Credentials.
- org_
id str - Organization identifier of the Repository Credentials.
- project_
id str - Project identifier of the Repository Credentials.
- upsert bool
- Indicates if the GitOps repository credential should be updated if existing and inserted if not.
- account
Id String - Account identifier of the Repository Credentials.
- agent
Id String - Agent identifier of the Repository Credentials.
- creds List<Property Map>
- credential details.
- identifier String
- Identifier of the Repository Credentials.
- org
Id String - Organization identifier of the Repository Credentials.
- project
Id String - Project identifier of the Repository Credentials.
- upsert Boolean
- Indicates if the GitOps repository credential should be updated if existing and inserted if not.
Supporting Types
GitOpsRepoCredCred, GitOpsRepoCredCredArgs
- Enable
Oci bool - Specifies whether helm-oci support should be enabled for this repo.
- Github
App stringEnterprise Base Url - Specifies the GitHub API URL for GitHub app authentication.
- Github
App stringId - Specifies the Github App ID of the app used to access the repo for GitHub app authentication.
- Github
App stringInstallation Id - Specifies the ID of the installed GitHub App for GitHub app authentication.
- Github
App stringPrivate Key - github_app_private_key specifies the private key PEM data for authentication via GitHub app. Use githubAppPrivateKeyWo for write-only support (Terraform >= 1.11).
- Github
App stringPrivate Key Wo - NOTE: This field is write-only and its value will not be updated in state as part of read operations. GitHub app private key PEM data. Write-only: never stored in state. Requires Terraform >= 1.11.
- Github
App intPrivate Key Wo Version - Increment to rotate the credential when using github_app_private_key_wo.
- Password string
- Password or PAT to be used for authenticating the remote repository. Use passwordWo for write-only support (Terraform >= 1.11).
- Password
Wo string - NOTE: This field is write-only and its value will not be updated in state as part of read operations. Password or PAT for authenticating the remote repository. Write-only: never stored in state. Requires Terraform >= 1.11.
- Password
Wo intVersion - Increment to rotate the credential when using password_wo.
- Ssh
Private stringKey - SSH Key in PEM format for authenticating the repository. Used only for Git repository. Use sshPrivateKeyWo for write-only support (Terraform >= 1.11).
- Ssh
Private stringKey Wo - NOTE: This field is write-only and its value will not be updated in state as part of read operations. SSH Key in PEM format for authenticating the repository. Write-only: never stored in state. Requires Terraform >= 1.11.
- Ssh
Private intKey Wo Version - Increment to rotate the credential when using ssh_private_key_wo.
- Tls
Client stringCert Data - Certificate in PEM format for authenticating at the repo server. This is used for mTLS. Use tlsClientCertDataWo for write-only support (Terraform >= 1.11).
- Tls
Client stringCert Data Wo - NOTE: This field is write-only and its value will not be updated in state as part of read operations. Certificate in PEM format for authenticating at the repo server (mTLS). Write-only: never stored in state. Requires Terraform >= 1.11.
- Tls
Client intCert Data Wo Version - Increment to rotate the credential when using tls_client_cert_data_wo.
- Tls
Client stringCert Key - Private key in PEM format for authenticating at the repo server. This is used for mTLS. Use tlsClientCertKeyWo for write-only support (Terraform >= 1.11).
- Tls
Client stringCert Key Wo - NOTE: This field is write-only and its value will not be updated in state as part of read operations. Private key in PEM format for authenticating at the repo server (mTLS). Write-only: never stored in state. Requires Terraform >= 1.11.
- Tls
Client intCert Key Wo Version - Increment to rotate the credential when using tls_client_cert_key_wo.
- Type string
- Type specifies the type of the repoCreds.Can be either 'git' or 'helm. 'git' is assumed if empty or absent
- Url string
- URL of the remote repository. Make sure you pass at least an org, this will not work if you just provide the host, for eg. "https://github.com"
- Username string
- Username to be used for authenticating the remote repository.
- Enable
Oci bool - Specifies whether helm-oci support should be enabled for this repo.
- Github
App stringEnterprise Base Url - Specifies the GitHub API URL for GitHub app authentication.
- Github
App stringId - Specifies the Github App ID of the app used to access the repo for GitHub app authentication.
- Github
App stringInstallation Id - Specifies the ID of the installed GitHub App for GitHub app authentication.
- Github
App stringPrivate Key - github_app_private_key specifies the private key PEM data for authentication via GitHub app. Use githubAppPrivateKeyWo for write-only support (Terraform >= 1.11).
- Github
App stringPrivate Key Wo - NOTE: This field is write-only and its value will not be updated in state as part of read operations. GitHub app private key PEM data. Write-only: never stored in state. Requires Terraform >= 1.11.
- Github
App intPrivate Key Wo Version - Increment to rotate the credential when using github_app_private_key_wo.
- Password string
- Password or PAT to be used for authenticating the remote repository. Use passwordWo for write-only support (Terraform >= 1.11).
- Password
Wo string - NOTE: This field is write-only and its value will not be updated in state as part of read operations. Password or PAT for authenticating the remote repository. Write-only: never stored in state. Requires Terraform >= 1.11.
- Password
Wo intVersion - Increment to rotate the credential when using password_wo.
- Ssh
Private stringKey - SSH Key in PEM format for authenticating the repository. Used only for Git repository. Use sshPrivateKeyWo for write-only support (Terraform >= 1.11).
- Ssh
Private stringKey Wo - NOTE: This field is write-only and its value will not be updated in state as part of read operations. SSH Key in PEM format for authenticating the repository. Write-only: never stored in state. Requires Terraform >= 1.11.
- Ssh
Private intKey Wo Version - Increment to rotate the credential when using ssh_private_key_wo.
- Tls
Client stringCert Data - Certificate in PEM format for authenticating at the repo server. This is used for mTLS. Use tlsClientCertDataWo for write-only support (Terraform >= 1.11).
- Tls
Client stringCert Data Wo - NOTE: This field is write-only and its value will not be updated in state as part of read operations. Certificate in PEM format for authenticating at the repo server (mTLS). Write-only: never stored in state. Requires Terraform >= 1.11.
- Tls
Client intCert Data Wo Version - Increment to rotate the credential when using tls_client_cert_data_wo.
- Tls
Client stringCert Key - Private key in PEM format for authenticating at the repo server. This is used for mTLS. Use tlsClientCertKeyWo for write-only support (Terraform >= 1.11).
- Tls
Client stringCert Key Wo - NOTE: This field is write-only and its value will not be updated in state as part of read operations. Private key in PEM format for authenticating at the repo server (mTLS). Write-only: never stored in state. Requires Terraform >= 1.11.
- Tls
Client intCert Key Wo Version - Increment to rotate the credential when using tls_client_cert_key_wo.
- Type string
- Type specifies the type of the repoCreds.Can be either 'git' or 'helm. 'git' is assumed if empty or absent
- Url string
- URL of the remote repository. Make sure you pass at least an org, this will not work if you just provide the host, for eg. "https://github.com"
- Username string
- Username to be used for authenticating the remote repository.
- enable_
oci bool - Specifies whether helm-oci support should be enabled for this repo.
- github_
app_ stringenterprise_ base_ url - Specifies the GitHub API URL for GitHub app authentication.
- github_
app_ stringid - Specifies the Github App ID of the app used to access the repo for GitHub app authentication.
- github_
app_ stringinstallation_ id - Specifies the ID of the installed GitHub App for GitHub app authentication.
- github_
app_ stringprivate_ key - github_app_private_key specifies the private key PEM data for authentication via GitHub app. Use githubAppPrivateKeyWo for write-only support (Terraform >= 1.11).
- github_
app_ stringprivate_ key_ wo - NOTE: This field is write-only and its value will not be updated in state as part of read operations. GitHub app private key PEM data. Write-only: never stored in state. Requires Terraform >= 1.11.
- github_
app_ numberprivate_ key_ wo_ version - Increment to rotate the credential when using github_app_private_key_wo.
- password string
- Password or PAT to be used for authenticating the remote repository. Use passwordWo for write-only support (Terraform >= 1.11).
- password_
wo string - NOTE: This field is write-only and its value will not be updated in state as part of read operations. Password or PAT for authenticating the remote repository. Write-only: never stored in state. Requires Terraform >= 1.11.
- password_
wo_ numberversion - Increment to rotate the credential when using password_wo.
- ssh_
private_ stringkey - SSH Key in PEM format for authenticating the repository. Used only for Git repository. Use sshPrivateKeyWo for write-only support (Terraform >= 1.11).
- ssh_
private_ stringkey_ wo - NOTE: This field is write-only and its value will not be updated in state as part of read operations. SSH Key in PEM format for authenticating the repository. Write-only: never stored in state. Requires Terraform >= 1.11.
- ssh_
private_ numberkey_ wo_ version - Increment to rotate the credential when using ssh_private_key_wo.
- tls_
client_ stringcert_ data - Certificate in PEM format for authenticating at the repo server. This is used for mTLS. Use tlsClientCertDataWo for write-only support (Terraform >= 1.11).
- tls_
client_ stringcert_ data_ wo - NOTE: This field is write-only and its value will not be updated in state as part of read operations. Certificate in PEM format for authenticating at the repo server (mTLS). Write-only: never stored in state. Requires Terraform >= 1.11.
- tls_
client_ numbercert_ data_ wo_ version - Increment to rotate the credential when using tls_client_cert_data_wo.
- tls_
client_ stringcert_ key - Private key in PEM format for authenticating at the repo server. This is used for mTLS. Use tlsClientCertKeyWo for write-only support (Terraform >= 1.11).
- tls_
client_ stringcert_ key_ wo - NOTE: This field is write-only and its value will not be updated in state as part of read operations. Private key in PEM format for authenticating at the repo server (mTLS). Write-only: never stored in state. Requires Terraform >= 1.11.
- tls_
client_ numbercert_ key_ wo_ version - Increment to rotate the credential when using tls_client_cert_key_wo.
- type string
- Type specifies the type of the repoCreds.Can be either 'git' or 'helm. 'git' is assumed if empty or absent
- url string
- URL of the remote repository. Make sure you pass at least an org, this will not work if you just provide the host, for eg. "https://github.com"
- username string
- Username to be used for authenticating the remote repository.
- enable
Oci Boolean - Specifies whether helm-oci support should be enabled for this repo.
- github
App StringEnterprise Base Url - Specifies the GitHub API URL for GitHub app authentication.
- github
App StringId - Specifies the Github App ID of the app used to access the repo for GitHub app authentication.
- github
App StringInstallation Id - Specifies the ID of the installed GitHub App for GitHub app authentication.
- github
App StringPrivate Key - github_app_private_key specifies the private key PEM data for authentication via GitHub app. Use githubAppPrivateKeyWo for write-only support (Terraform >= 1.11).
- github
App StringPrivate Key Wo - NOTE: This field is write-only and its value will not be updated in state as part of read operations. GitHub app private key PEM data. Write-only: never stored in state. Requires Terraform >= 1.11.
- github
App IntegerPrivate Key Wo Version - Increment to rotate the credential when using github_app_private_key_wo.
- password String
- Password or PAT to be used for authenticating the remote repository. Use passwordWo for write-only support (Terraform >= 1.11).
- password
Wo String - NOTE: This field is write-only and its value will not be updated in state as part of read operations. Password or PAT for authenticating the remote repository. Write-only: never stored in state. Requires Terraform >= 1.11.
- password
Wo IntegerVersion - Increment to rotate the credential when using password_wo.
- ssh
Private StringKey - SSH Key in PEM format for authenticating the repository. Used only for Git repository. Use sshPrivateKeyWo for write-only support (Terraform >= 1.11).
- ssh
Private StringKey Wo - NOTE: This field is write-only and its value will not be updated in state as part of read operations. SSH Key in PEM format for authenticating the repository. Write-only: never stored in state. Requires Terraform >= 1.11.
- ssh
Private IntegerKey Wo Version - Increment to rotate the credential when using ssh_private_key_wo.
- tls
Client StringCert Data - Certificate in PEM format for authenticating at the repo server. This is used for mTLS. Use tlsClientCertDataWo for write-only support (Terraform >= 1.11).
- tls
Client StringCert Data Wo - NOTE: This field is write-only and its value will not be updated in state as part of read operations. Certificate in PEM format for authenticating at the repo server (mTLS). Write-only: never stored in state. Requires Terraform >= 1.11.
- tls
Client IntegerCert Data Wo Version - Increment to rotate the credential when using tls_client_cert_data_wo.
- tls
Client StringCert Key - Private key in PEM format for authenticating at the repo server. This is used for mTLS. Use tlsClientCertKeyWo for write-only support (Terraform >= 1.11).
- tls
Client StringCert Key Wo - NOTE: This field is write-only and its value will not be updated in state as part of read operations. Private key in PEM format for authenticating at the repo server (mTLS). Write-only: never stored in state. Requires Terraform >= 1.11.
- tls
Client IntegerCert Key Wo Version - Increment to rotate the credential when using tls_client_cert_key_wo.
- type String
- Type specifies the type of the repoCreds.Can be either 'git' or 'helm. 'git' is assumed if empty or absent
- url String
- URL of the remote repository. Make sure you pass at least an org, this will not work if you just provide the host, for eg. "https://github.com"
- username String
- Username to be used for authenticating the remote repository.
- enable
Oci boolean - Specifies whether helm-oci support should be enabled for this repo.
- github
App stringEnterprise Base Url - Specifies the GitHub API URL for GitHub app authentication.
- github
App stringId - Specifies the Github App ID of the app used to access the repo for GitHub app authentication.
- github
App stringInstallation Id - Specifies the ID of the installed GitHub App for GitHub app authentication.
- github
App stringPrivate Key - github_app_private_key specifies the private key PEM data for authentication via GitHub app. Use githubAppPrivateKeyWo for write-only support (Terraform >= 1.11).
- github
App stringPrivate Key Wo - NOTE: This field is write-only and its value will not be updated in state as part of read operations. GitHub app private key PEM data. Write-only: never stored in state. Requires Terraform >= 1.11.
- github
App numberPrivate Key Wo Version - Increment to rotate the credential when using github_app_private_key_wo.
- password string
- Password or PAT to be used for authenticating the remote repository. Use passwordWo for write-only support (Terraform >= 1.11).
- password
Wo string - NOTE: This field is write-only and its value will not be updated in state as part of read operations. Password or PAT for authenticating the remote repository. Write-only: never stored in state. Requires Terraform >= 1.11.
- password
Wo numberVersion - Increment to rotate the credential when using password_wo.
- ssh
Private stringKey - SSH Key in PEM format for authenticating the repository. Used only for Git repository. Use sshPrivateKeyWo for write-only support (Terraform >= 1.11).
- ssh
Private stringKey Wo - NOTE: This field is write-only and its value will not be updated in state as part of read operations. SSH Key in PEM format for authenticating the repository. Write-only: never stored in state. Requires Terraform >= 1.11.
- ssh
Private numberKey Wo Version - Increment to rotate the credential when using ssh_private_key_wo.
- tls
Client stringCert Data - Certificate in PEM format for authenticating at the repo server. This is used for mTLS. Use tlsClientCertDataWo for write-only support (Terraform >= 1.11).
- tls
Client stringCert Data Wo - NOTE: This field is write-only and its value will not be updated in state as part of read operations. Certificate in PEM format for authenticating at the repo server (mTLS). Write-only: never stored in state. Requires Terraform >= 1.11.
- tls
Client numberCert Data Wo Version - Increment to rotate the credential when using tls_client_cert_data_wo.
- tls
Client stringCert Key - Private key in PEM format for authenticating at the repo server. This is used for mTLS. Use tlsClientCertKeyWo for write-only support (Terraform >= 1.11).
- tls
Client stringCert Key Wo - NOTE: This field is write-only and its value will not be updated in state as part of read operations. Private key in PEM format for authenticating at the repo server (mTLS). Write-only: never stored in state. Requires Terraform >= 1.11.
- tls
Client numberCert Key Wo Version - Increment to rotate the credential when using tls_client_cert_key_wo.
- type string
- Type specifies the type of the repoCreds.Can be either 'git' or 'helm. 'git' is assumed if empty or absent
- url string
- URL of the remote repository. Make sure you pass at least an org, this will not work if you just provide the host, for eg. "https://github.com"
- username string
- Username to be used for authenticating the remote repository.
- enable_
oci bool - Specifies whether helm-oci support should be enabled for this repo.
- github_
app_ strenterprise_ base_ url - Specifies the GitHub API URL for GitHub app authentication.
- github_
app_ strid - Specifies the Github App ID of the app used to access the repo for GitHub app authentication.
- github_
app_ strinstallation_ id - Specifies the ID of the installed GitHub App for GitHub app authentication.
- github_
app_ strprivate_ key - github_app_private_key specifies the private key PEM data for authentication via GitHub app. Use githubAppPrivateKeyWo for write-only support (Terraform >= 1.11).
- github_
app_ strprivate_ key_ wo - NOTE: This field is write-only and its value will not be updated in state as part of read operations. GitHub app private key PEM data. Write-only: never stored in state. Requires Terraform >= 1.11.
- github_
app_ intprivate_ key_ wo_ version - Increment to rotate the credential when using github_app_private_key_wo.
- password str
- Password or PAT to be used for authenticating the remote repository. Use passwordWo for write-only support (Terraform >= 1.11).
- password_
wo str - NOTE: This field is write-only and its value will not be updated in state as part of read operations. Password or PAT for authenticating the remote repository. Write-only: never stored in state. Requires Terraform >= 1.11.
- password_
wo_ intversion - Increment to rotate the credential when using password_wo.
- ssh_
private_ strkey - SSH Key in PEM format for authenticating the repository. Used only for Git repository. Use sshPrivateKeyWo for write-only support (Terraform >= 1.11).
- ssh_
private_ strkey_ wo - NOTE: This field is write-only and its value will not be updated in state as part of read operations. SSH Key in PEM format for authenticating the repository. Write-only: never stored in state. Requires Terraform >= 1.11.
- ssh_
private_ intkey_ wo_ version - Increment to rotate the credential when using ssh_private_key_wo.
- tls_
client_ strcert_ data - Certificate in PEM format for authenticating at the repo server. This is used for mTLS. Use tlsClientCertDataWo for write-only support (Terraform >= 1.11).
- tls_
client_ strcert_ data_ wo - NOTE: This field is write-only and its value will not be updated in state as part of read operations. Certificate in PEM format for authenticating at the repo server (mTLS). Write-only: never stored in state. Requires Terraform >= 1.11.
- tls_
client_ intcert_ data_ wo_ version - Increment to rotate the credential when using tls_client_cert_data_wo.
- tls_
client_ strcert_ key - Private key in PEM format for authenticating at the repo server. This is used for mTLS. Use tlsClientCertKeyWo for write-only support (Terraform >= 1.11).
- tls_
client_ strcert_ key_ wo - NOTE: This field is write-only and its value will not be updated in state as part of read operations. Private key in PEM format for authenticating at the repo server (mTLS). Write-only: never stored in state. Requires Terraform >= 1.11.
- tls_
client_ intcert_ key_ wo_ version - Increment to rotate the credential when using tls_client_cert_key_wo.
- type str
- Type specifies the type of the repoCreds.Can be either 'git' or 'helm. 'git' is assumed if empty or absent
- url str
- URL of the remote repository. Make sure you pass at least an org, this will not work if you just provide the host, for eg. "https://github.com"
- username str
- Username to be used for authenticating the remote repository.
- enable
Oci Boolean - Specifies whether helm-oci support should be enabled for this repo.
- github
App StringEnterprise Base Url - Specifies the GitHub API URL for GitHub app authentication.
- github
App StringId - Specifies the Github App ID of the app used to access the repo for GitHub app authentication.
- github
App StringInstallation Id - Specifies the ID of the installed GitHub App for GitHub app authentication.
- github
App StringPrivate Key - github_app_private_key specifies the private key PEM data for authentication via GitHub app. Use githubAppPrivateKeyWo for write-only support (Terraform >= 1.11).
- github
App StringPrivate Key Wo - NOTE: This field is write-only and its value will not be updated in state as part of read operations. GitHub app private key PEM data. Write-only: never stored in state. Requires Terraform >= 1.11.
- github
App NumberPrivate Key Wo Version - Increment to rotate the credential when using github_app_private_key_wo.
- password String
- Password or PAT to be used for authenticating the remote repository. Use passwordWo for write-only support (Terraform >= 1.11).
- password
Wo String - NOTE: This field is write-only and its value will not be updated in state as part of read operations. Password or PAT for authenticating the remote repository. Write-only: never stored in state. Requires Terraform >= 1.11.
- password
Wo NumberVersion - Increment to rotate the credential when using password_wo.
- ssh
Private StringKey - SSH Key in PEM format for authenticating the repository. Used only for Git repository. Use sshPrivateKeyWo for write-only support (Terraform >= 1.11).
- ssh
Private StringKey Wo - NOTE: This field is write-only and its value will not be updated in state as part of read operations. SSH Key in PEM format for authenticating the repository. Write-only: never stored in state. Requires Terraform >= 1.11.
- ssh
Private NumberKey Wo Version - Increment to rotate the credential when using ssh_private_key_wo.
- tls
Client StringCert Data - Certificate in PEM format for authenticating at the repo server. This is used for mTLS. Use tlsClientCertDataWo for write-only support (Terraform >= 1.11).
- tls
Client StringCert Data Wo - NOTE: This field is write-only and its value will not be updated in state as part of read operations. Certificate in PEM format for authenticating at the repo server (mTLS). Write-only: never stored in state. Requires Terraform >= 1.11.
- tls
Client NumberCert Data Wo Version - Increment to rotate the credential when using tls_client_cert_data_wo.
- tls
Client StringCert Key - Private key in PEM format for authenticating at the repo server. This is used for mTLS. Use tlsClientCertKeyWo for write-only support (Terraform >= 1.11).
- tls
Client StringCert Key Wo - NOTE: This field is write-only and its value will not be updated in state as part of read operations. Private key in PEM format for authenticating at the repo server (mTLS). Write-only: never stored in state. Requires Terraform >= 1.11.
- tls
Client NumberCert Key Wo Version - Increment to rotate the credential when using tls_client_cert_key_wo.
- type String
- Type specifies the type of the repoCreds.Can be either 'git' or 'helm. 'git' is assumed if empty or absent
- url String
- URL of the remote repository. Make sure you pass at least an org, this will not work if you just provide the host, for eg. "https://github.com"
- username String
- Username to be used for authenticating the remote repository.
Import
The pulumi import command can be used, for example:
Import an Account level Gitops Repository Credentials
$ pulumi import harness:platform/gitOpsRepoCred:GitOpsRepoCred example <agent_id>/<repocred_id>
Import an Org level Gitops Repository Credentials
$ pulumi import harness:platform/gitOpsRepoCred:GitOpsRepoCred example <organization_id>/<agent_id>/<repocred_id>
Import a Project level Gitops Repository Credentials
$ pulumi import harness:platform/gitOpsRepoCred:GitOpsRepoCred example <organization_id>/<project_id>/<agent_id>/<repocred_id>
To learn more about importing existing cloud resources, see Importing resources.
Package Details
- Repository
- harness pulumi/pulumi-harness
- License
- Apache-2.0
- Notes
- This Pulumi package is based on the
harnessTerraform Provider.
published on Thursday, Jun 11, 2026 by Pulumi