import * as pulumi from "@pulumi/pulumi";
/**
 * The provider type for the oci package. By default, resources use package-wide configuration
 * settings, however an explicit `Provider` instance may be created and passed during resource
 * construction to achieve fine-grained programmatic control over provider settings. See the
 * [documentation](https://www.pulumi.com/docs/reference/programming-model/#providers) for more information.
 */
export declare class Provider extends pulumi.ProviderResource {
    /**
     * Returns true if the given object is an instance of Provider.  This is designed to work even
     * when multiple copies of the Pulumi SDK have been loaded into the same process.
     */
    static isInstance(obj: any): obj is Provider;
    /**
     * (Optional) The type of auth to use. Options are 'ApiKey', 'InstancePrincipal', 'InstancePrincipalWithCerts', 'SecurityToken', 'ResourcePrincipal', 'OKEWorkloadIdentity', 'WorkloadIdentityFederation'. By default, 'ApiKey' will be used.
     */
    readonly auth: pulumi.Output<string | undefined>;
    /**
     * (Optional) The profile name to be used from config file, if not set it will be DEFAULT.
     */
    readonly configFileProfile: pulumi.Output<string | undefined>;
    /**
     * (Optional) The fingerprint for the user's RSA key. This can be found in user settings in the Oracle Cloud Infrastructure console. Required if auth is set to 'ApiKey', ignored otherwise.
     */
    readonly fingerprint: pulumi.Output<string | undefined>;
    /**
     * (Optional) A PEM formatted RSA private key for the user.
     * A privateKey or a privateKeyPath must be provided if auth is set to 'ApiKey', ignored otherwise.
     */
    readonly privateKey: pulumi.Output<string | undefined>;
    /**
     * (Optional) The password used to secure the private key.
     */
    readonly privateKeyPassword: pulumi.Output<string | undefined>;
    /**
     * (Optional) The path to the user's PEM formatted private key.
     * A privateKey or a privateKeyPath must be provided if auth is set to 'ApiKey', ignored otherwise.
     */
    readonly privateKeyPath: pulumi.Output<string | undefined>;
    /**
     * (Required) The region for API connections (e.g. us-ashburn-1).
     */
    readonly region: pulumi.Output<string | undefined>;
    /**
     * (Optional) Config file which has the configuration for 4xx and 5xx retries in JSON format
     */
    readonly retriesConfigFile: pulumi.Output<string | undefined>;
    /**
     * (Optional) The tenancy OCID for a user. The tenancy OCID can be found at the bottom of user settings in the Oracle Cloud Infrastructure console. Required if auth is set to 'ApiKey', ignored otherwise.
     */
    readonly tenancyOcid: pulumi.Output<string | undefined>;
    readonly testTimeMaintenanceRebootDue: pulumi.Output<string | undefined>;
    /**
     * (Optional) Authentication method for the token-exchange client. Valid values are 'OAuthClientCredentials' and 'InstancePrincipal'. Used only if auth is set to 'WorkloadIdentityFederation'. Defaults to 'OAuthClientCredentials'.
     */
    readonly tokenExchangeAuth: pulumi.Output<string | undefined>;
    /**
     * (Optional) Token-exchange client ID. Required when auth is set to 'WorkloadIdentityFederation' and tokenExchangeAuth is 'OAuthClientCredentials', ignored otherwise.
     */
    readonly tokenExchangeClientId: pulumi.Output<string | undefined>;
    /**
     * (Optional) Token-exchange client secret. Required when auth is set to 'WorkloadIdentityFederation' and tokenExchangeAuth is 'OAuthClientCredentials', ignored otherwise.
     */
    readonly tokenExchangeClientSecret: pulumi.Output<string | undefined>;
    /**
     * (Optional) OCI IAM identity domain URL for token exchange. Required if auth is set to 'WorkloadIdentityFederation', ignored otherwise.
     */
    readonly tokenExchangeDomainUrl: pulumi.Output<string | undefined>;
    /**
     * (Optional) Public key used by the token-exchange flow, where applicable. Used only if auth is set to 'WorkloadIdentityFederation'.
     */
    readonly tokenExchangePublicKey: pulumi.Output<string | undefined>;
    /**
     * (Optional) Requested token type for token exchange. Required if auth is set to 'WorkloadIdentityFederation', ignored otherwise.
     */
    readonly tokenExchangeRequestedTokenType: pulumi.Output<string | undefined>;
    /**
     * (Optional) Resource type used during token exchange. Required if auth is set to 'WorkloadIdentityFederation', ignored otherwise.
     */
    readonly tokenExchangeResourceType: pulumi.Output<string | undefined>;
    /**
     * (Optional) Requested RPST expiration for token exchange. Used only if auth is set to 'WorkloadIdentityFederation'.
     */
    readonly tokenExchangeRpstExp: pulumi.Output<string | undefined>;
    /**
     * (Optional) Subject token type for the Kubernetes service account JWT. Required if auth is set to 'WorkloadIdentityFederation', ignored otherwise.
     */
    readonly tokenExchangeSubjectTokenType: pulumi.Output<string | undefined>;
    /**
     * (Optional) The user OCID. This can be found in user settings in the Oracle Cloud Infrastructure console. Required if auth is set to 'ApiKey', ignored otherwise.
     */
    readonly userOcid: pulumi.Output<string | undefined>;
    /**
     * (Optional) Path to the projected Kubernetes service account token. Required if auth is set to 'WorkloadIdentityFederation', ignored otherwise.
     */
    readonly workloadIdentityTokenPath: pulumi.Output<string | undefined>;
    /**
     * Create a Provider resource with the given unique name, arguments, and options.
     *
     * @param name The _unique_ name of the resource.
     * @param args The arguments to use to populate this resource's properties.
     * @param opts A bag of options that control this resource's behavior.
     */
    constructor(name: string, args?: ProviderArgs, opts?: pulumi.ResourceOptions);
    /**
     * This function returns a Terraform config object with terraform-namecased keys,to be used with the Terraform Module Provider.
     */
    terraformConfig(): pulumi.Output<Provider.TerraformConfigResult>;
}
/**
 * The set of arguments for constructing a Provider resource.
 */
export interface ProviderArgs {
    /**
     * (Optional) The type of auth to use. Options are 'ApiKey', 'InstancePrincipal', 'InstancePrincipalWithCerts', 'SecurityToken', 'ResourcePrincipal', 'OKEWorkloadIdentity', 'WorkloadIdentityFederation'. By default, 'ApiKey' will be used.
     */
    auth?: pulumi.Input<string | undefined>;
    /**
     * (Optional) The profile name to be used from config file, if not set it will be DEFAULT.
     */
    configFileProfile?: pulumi.Input<string | undefined>;
    /**
     * (Optional) Disable automatic retries for retriable errors.
     * Automatic retries were introduced to solve some eventual consistency problems but it also introduced performance issues on destroy operations.
     */
    disableAutoRetries?: pulumi.Input<boolean | undefined>;
    /**
     * (Optional) flags to enable Dual Stack endpoint.
     */
    dualStackEndpointEnabled?: pulumi.Input<boolean | undefined>;
    /**
     * (Optional) The fingerprint for the user's RSA key. This can be found in user settings in the Oracle Cloud Infrastructure console. Required if auth is set to 'ApiKey', ignored otherwise.
     */
    fingerprint?: pulumi.Input<string | undefined>;
    /**
     * (Optional) List of defined tags keys that Terraform should ignore when planning creates and updates to the associated remote object
     */
    ignoreDefinedTags?: pulumi.Input<pulumi.Input<string>[] | undefined>;
    /**
     * (Optional) A PEM formatted RSA private key for the user.
     * A privateKey or a privateKeyPath must be provided if auth is set to 'ApiKey', ignored otherwise.
     */
    privateKey?: pulumi.Input<string | undefined>;
    /**
     * (Optional) The password used to secure the private key.
     */
    privateKeyPassword?: pulumi.Input<string | undefined>;
    /**
     * (Optional) The path to the user's PEM formatted private key.
     * A privateKey or a privateKeyPath must be provided if auth is set to 'ApiKey', ignored otherwise.
     */
    privateKeyPath?: pulumi.Input<string | undefined>;
    /**
     * (Optional) flags to enable realm specific service endpoint.
     */
    realmSpecificServiceEndpointTemplateEnabled?: pulumi.Input<boolean | undefined>;
    /**
     * (Required) The region for API connections (e.g. us-ashburn-1).
     */
    region?: pulumi.Input<string | undefined>;
    /**
     * (Optional) Config file which has the configuration for 4xx and 5xx retries in JSON format
     */
    retriesConfigFile?: pulumi.Input<string | undefined>;
    /**
     * (Optional) The minimum duration (in seconds) to retry a resource operation in response to an error.
     * The actual retry duration may be longer due to jittering of retry operations. This value is ignored if the `disableAutoRetries` field is set to true.
     */
    retryDurationSeconds?: pulumi.Input<number | undefined>;
    /**
     * (Optional) The tenancy OCID for a user. The tenancy OCID can be found at the bottom of user settings in the Oracle Cloud Infrastructure console. Required if auth is set to 'ApiKey', ignored otherwise.
     */
    tenancyOcid?: pulumi.Input<string | undefined>;
    testTimeMaintenanceRebootDue?: pulumi.Input<string | undefined>;
    /**
     * (Optional) Authentication method for the token-exchange client. Valid values are 'OAuthClientCredentials' and 'InstancePrincipal'. Used only if auth is set to 'WorkloadIdentityFederation'. Defaults to 'OAuthClientCredentials'.
     */
    tokenExchangeAuth?: pulumi.Input<string | undefined>;
    /**
     * (Optional) Token-exchange client ID. Required when auth is set to 'WorkloadIdentityFederation' and tokenExchangeAuth is 'OAuthClientCredentials', ignored otherwise.
     */
    tokenExchangeClientId?: pulumi.Input<string | undefined>;
    /**
     * (Optional) Token-exchange client secret. Required when auth is set to 'WorkloadIdentityFederation' and tokenExchangeAuth is 'OAuthClientCredentials', ignored otherwise.
     */
    tokenExchangeClientSecret?: pulumi.Input<string | undefined>;
    /**
     * (Optional) OCI IAM identity domain URL for token exchange. Required if auth is set to 'WorkloadIdentityFederation', ignored otherwise.
     */
    tokenExchangeDomainUrl?: pulumi.Input<string | undefined>;
    /**
     * (Optional) Public key used by the token-exchange flow, where applicable. Used only if auth is set to 'WorkloadIdentityFederation'.
     */
    tokenExchangePublicKey?: pulumi.Input<string | undefined>;
    /**
     * (Optional) Requested token type for token exchange. Required if auth is set to 'WorkloadIdentityFederation', ignored otherwise.
     */
    tokenExchangeRequestedTokenType?: pulumi.Input<string | undefined>;
    /**
     * (Optional) Resource type used during token exchange. Required if auth is set to 'WorkloadIdentityFederation', ignored otherwise.
     */
    tokenExchangeResourceType?: pulumi.Input<string | undefined>;
    /**
     * (Optional) Requested RPST expiration for token exchange. Used only if auth is set to 'WorkloadIdentityFederation'.
     */
    tokenExchangeRpstExp?: pulumi.Input<string | undefined>;
    /**
     * (Optional) Subject token type for the Kubernetes service account JWT. Required if auth is set to 'WorkloadIdentityFederation', ignored otherwise.
     */
    tokenExchangeSubjectTokenType?: pulumi.Input<string | undefined>;
    /**
     * (Optional) The user OCID. This can be found in user settings in the Oracle Cloud Infrastructure console. Required if auth is set to 'ApiKey', ignored otherwise.
     */
    userOcid?: pulumi.Input<string | undefined>;
    /**
     * (Optional) Path to the projected Kubernetes service account token. Required if auth is set to 'WorkloadIdentityFederation', ignored otherwise.
     */
    workloadIdentityTokenPath?: pulumi.Input<string | undefined>;
}
export declare namespace Provider {
    /**
     * The results of the Provider.terraformConfig method.
     */
    interface TerraformConfigResult {
        readonly result: {
            [key: string]: any;
        };
    }
}
//# sourceMappingURL=provider.d.ts.map