Radius SecretStores API

openapi: 3.2.0
info:
  title: Applications.Core Management APIs ApiVersions Secret Stores API
  version: 2023-10-01-preview
  description: REST APIs for Applications.Core
  x-typespec-generated:
  - emitter: '@azure-tools/typespec-autorest'
servers:
- url: https://management.azure.com
security:
- azure_auth:
  - user_impersonation
tags:
- name: SecretStores
paths:
  /{rootScope}/providers/Applications.Core/secretStores:
    get:
      operationId: SecretStores_ListByScope
      tags:
      - SecretStores
      description: List SecretStoreResource resources by Scope
      parameters:
      - $ref: ../../../../../common-types/resource-management/v3/types.json#/parameters/ApiVersionParameter
      - $ref: '#/components/parameters/RootScopeParameter'
      responses:
        '200':
          description: Azure operation completed successfully.
          content:
            application/json:
              schema:
                $ref: '#/components/schemas/SecretStoreResourceListResult'
        default:
          description: An unexpected error response.
          content:
            application/json:
              schema:
                $ref: ../../../../../common-types/resource-management/v3/types.json#/definitions/ErrorResponse
      x-ms-examples:
        List secret stores:
          $ref: ./examples/SecretStores_List.json
      x-ms-pageable:
        nextLinkName: nextLink
  /{rootScope}/providers/Applications.Core/secretStores/{secretStoreName}:
    get:
      operationId: SecretStores_Get
      tags:
      - SecretStores
      description: Get a SecretStoreResource
      parameters:
      - $ref: ../../../../../common-types/resource-management/v3/types.json#/parameters/ApiVersionParameter
      - $ref: '#/components/parameters/RootScopeParameter'
      - name: secretStoreName
        in: path
        description: SecretStore name
        required: true
        schema:
          type: string
          maxLength: 63
          pattern: ^[A-Za-z]([-A-Za-z0-9]*[A-Za-z0-9])?$
      responses:
        '200':
          description: Azure operation completed successfully.
          content:
            application/json:
              schema:
                $ref: '#/components/schemas/SecretStoreResource'
        default:
          description: An unexpected error response.
          content:
            application/json:
              schema:
                $ref: ../../../../../common-types/resource-management/v3/types.json#/definitions/ErrorResponse
      x-ms-examples:
        Get a secret store:
          $ref: ./examples/SecretStores_Get.json
        Get a secret store for Azure Keyvault:
          $ref: ./examples/SecretStores_Get_AzureKeyVault.json
    put:
      operationId: SecretStores_CreateOrUpdate
      tags:
      - SecretStores
      description: Create a SecretStoreResource
      parameters:
      - $ref: ../../../../../common-types/resource-management/v3/types.json#/parameters/ApiVersionParameter
      - $ref: '#/components/parameters/RootScopeParameter'
      - name: secretStoreName
        in: path
        description: SecretStore name
        required: true
        schema:
          type: string
          maxLength: 63
          pattern: ^[A-Za-z]([-A-Za-z0-9]*[A-Za-z0-9])?$
      responses:
        '200':
          description: Resource 'SecretStoreResource' update operation succeeded
          content:
            application/json:
              schema:
                $ref: '#/components/schemas/SecretStoreResource'
        '201':
          description: Resource 'SecretStoreResource' create operation succeeded
          headers:
            Azure-AsyncOperation:
              description: A link to the status monitor
              schema:
                type: string
            Retry-After:
              description: The Retry-After header can indicate how long the client should wait before polling the operation status.
              schema:
                type: integer
                format: int32
          content:
            application/json:
              schema:
                $ref: '#/components/schemas/SecretStoreResource'
        default:
          description: An unexpected error response.
          content:
            application/json:
              schema:
                $ref: ../../../../../common-types/resource-management/v3/types.json#/definitions/ErrorResponse
      x-ms-examples:
        Create or Update a secret store resource with azure keyvault:
          $ref: ./examples/SecretStores_CreateOrUpdate.json
        Create or Update a secret store resource with global scope:
          $ref: ./examples/SecretStores_CreateOrUpdate_GlobalScope.json
        Create or Update a secret store resource with valueFrom:
          $ref: ./examples/SecretStores_CreateOrUpdateValueFrom.json
      x-ms-long-running-operation-options:
        final-state-via: azure-async-operation
      x-ms-long-running-operation: true
      requestBody:
        content:
          application/json:
            schema:
              $ref: '#/components/schemas/SecretStoreResource'
        description: Resource create parameters.
        required: true
    patch:
      operationId: SecretStores_Update
      tags:
      - SecretStores
      description: Update a SecretStoreResource
      parameters:
      - $ref: ../../../../../common-types/resource-management/v3/types.json#/parameters/ApiVersionParameter
      - $ref: '#/components/parameters/RootScopeParameter'
      - name: secretStoreName
        in: path
        description: SecretStore name
        required: true
        schema:
          type: string
          maxLength: 63
          pattern: ^[A-Za-z]([-A-Za-z0-9]*[A-Za-z0-9])?$
      responses:
        '200':
          description: Azure operation completed successfully.
          content:
            application/json:
              schema:
                $ref: '#/components/schemas/SecretStoreResource'
        '202':
          description: Resource update request accepted.
          headers:
            Location:
              description: The Location header contains the URL where the status of the long running operation can be checked.
              schema:
                type: string
            Retry-After:
              description: The Retry-After header can indicate how long the client should wait before polling the operation status.
              schema:
                type: integer
                format: int32
        default:
          description: An unexpected error response.
          content:
            application/json:
              schema:
                $ref: ../../../../../common-types/resource-management/v3/types.json#/definitions/ErrorResponse
      x-ms-examples:
        Update a secret store:
          $ref: ./examples/SecretStores_Update.json
        Update a secret store resource:
          $ref: ./examples/SecretStores_Delete.json
      x-ms-long-running-operation-options:
        final-state-via: location
      x-ms-long-running-operation: true
      requestBody:
        content:
          application/json:
            schema:
              $ref: '#/components/schemas/SecretStoreResourceUpdate'
        description: The resource properties to be updated.
        required: true
    delete:
      operationId: SecretStores_Delete
      tags:
      - SecretStores
      description: Delete a SecretStoreResource
      parameters:
      - $ref: ../../../../../common-types/resource-management/v3/types.json#/parameters/ApiVersionParameter
      - $ref: '#/components/parameters/RootScopeParameter'
      - name: secretStoreName
        in: path
        description: SecretStore name
        required: true
        schema:
          type: string
          maxLength: 63
          pattern: ^[A-Za-z]([-A-Za-z0-9]*[A-Za-z0-9])?$
      responses:
        '202':
          description: Resource deletion accepted.
          headers:
            Location:
              description: The Location header contains the URL where the status of the long running operation can be checked.
              schema:
                type: string
            Retry-After:
              description: The Retry-After header can indicate how long the client should wait before polling the operation status.
              schema:
                type: integer
                format: int32
        '204':
          description: Resource does not exist.
        default:
          description: An unexpected error response.
          content:
            application/json:
              schema:
                $ref: ../../../../../common-types/resource-management/v3/types.json#/definitions/ErrorResponse
      x-ms-long-running-operation-options:
        final-state-via: location
      x-ms-long-running-operation: true
  /{rootScope}/providers/Applications.Core/secretStores/{secretStoreName}/listSecrets:
    post:
      operationId: SecretStores_ListSecrets
      tags:
      - SecretStores
      description: List the secrets of a secret stores.
      parameters:
      - $ref: ../../../../../common-types/resource-management/v3/types.json#/parameters/ApiVersionParameter
      - $ref: '#/components/parameters/RootScopeParameter'
      - name: secretStoreName
        in: path
        description: SecretStore name
        required: true
        schema:
          type: string
          maxLength: 63
          pattern: ^[A-Za-z]([-A-Za-z0-9]*[A-Za-z0-9])?$
      responses:
        '200':
          description: Azure operation completed successfully.
          content:
            application/json:
              schema:
                $ref: '#/components/schemas/SecretStoreListSecretsResult'
        default:
          description: An unexpected error response.
          content:
            application/json:
              schema:
                $ref: ../../../../../common-types/resource-management/v3/types.json#/definitions/ErrorResponse
      x-ms-examples:
        List secret stores:
          $ref: ./examples/SecretStores_ListSecrets.json
      requestBody:
        content:
          application/json:
            schema:
              type: object
        description: The content of the action request
        required: true
  /{rootScope}/providers/Applications.Dapr/secretStores:
    get:
      operationId: SecretStores_ListByScope
      tags:
      - SecretStores
      description: List DaprSecretStoreResource resources by Scope
      parameters:
      - $ref: ../../../../../common-types/resource-management/v3/types.json#/parameters/ApiVersionParameter
      - $ref: '#/components/parameters/RootScopeParameter'
      responses:
        '200':
          description: Azure operation completed successfully.
          content:
            application/json:
              schema:
                $ref: '#/components/schemas/DaprSecretStoreResourceListResult'
        default:
          description: An unexpected error response.
          content:
            application/json:
              schema:
                $ref: ../../../../../common-types/resource-management/v3/types.json#/definitions/ErrorResponse
      x-ms-examples:
        List SecretStore resources by resource group:
          $ref: ./examples/SecretStores_List.json
        List SecretStore resources by rootScope:
          $ref: ./examples/SecretStores_ListByRootScope.json
      x-ms-pageable:
        nextLinkName: nextLink
  /{rootScope}/providers/Applications.Dapr/secretStores/{secretStoreName}:
    get:
      operationId: SecretStores_Get
      tags:
      - SecretStores
      description: Get a DaprSecretStoreResource
      parameters:
      - $ref: ../../../../../common-types/resource-management/v3/types.json#/parameters/ApiVersionParameter
      - $ref: '#/components/parameters/RootScopeParameter'
      - name: secretStoreName
        in: path
        description: SecretStore name
        required: true
        schema:
          type: string
          maxLength: 63
          pattern: ^[A-Za-z]([-A-Za-z0-9]*[A-Za-z0-9])?$
      responses:
        '200':
          description: Azure operation completed successfully.
          content:
            application/json:
              schema:
                $ref: '#/components/schemas/DaprSecretStoreResource'
        default:
          description: An unexpected error response.
          content:
            application/json:
              schema:
                $ref: ../../../../../common-types/resource-management/v3/types.json#/definitions/ErrorResponse
      x-ms-examples:
        Get a SecretStore resource:
          $ref: ./examples/SecretStores_Get.json
    put:
      operationId: SecretStores_CreateOrUpdate
      tags:
      - SecretStores
      description: Create a DaprSecretStoreResource
      parameters:
      - $ref: ../../../../../common-types/resource-management/v3/types.json#/parameters/ApiVersionParameter
      - $ref: '#/components/parameters/RootScopeParameter'
      - name: secretStoreName
        in: path
        description: SecretStore name
        required: true
        schema:
          type: string
          maxLength: 63
          pattern: ^[A-Za-z]([-A-Za-z0-9]*[A-Za-z0-9])?$
      responses:
        '200':
          description: Resource 'DaprSecretStoreResource' update operation succeeded
          content:
            application/json:
              schema:
                $ref: '#/components/schemas/DaprSecretStoreResource'
        '201':
          description: Resource 'DaprSecretStoreResource' create operation succeeded
          headers:
            Azure-AsyncOperation:
              description: A link to the status monitor
              schema:
                type: string
            Retry-After:
              description: The Retry-After header can indicate how long the client should wait before polling the operation status.
              schema:
                type: integer
                format: int32
          content:
            application/json:
              schema:
                $ref: '#/components/schemas/DaprSecretStoreResource'
        default:
          description: An unexpected error response.
          content:
            application/json:
              schema:
                $ref: ../../../../../common-types/resource-management/v3/types.json#/definitions/ErrorResponse
      x-ms-examples:
        Create or update an SecretStore resource:
          $ref: ./examples/SecretStores_CreateOrUpdate.json
      x-ms-long-running-operation-options:
        final-state-via: azure-async-operation
      x-ms-long-running-operation: true
      requestBody:
        content:
          application/json:
            schema:
              $ref: '#/components/schemas/DaprSecretStoreResource'
        description: Resource create parameters.
        required: true
    patch:
      operationId: SecretStores_Update
      tags:
      - SecretStores
      description: Update a DaprSecretStoreResource
      parameters:
      - $ref: ../../../../../common-types/resource-management/v3/types.json#/parameters/ApiVersionParameter
      - $ref: '#/components/parameters/RootScopeParameter'
      - name: secretStoreName
        in: path
        description: SecretStore name
        required: true
        schema:
          type: string
          maxLength: 63
          pattern: ^[A-Za-z]([-A-Za-z0-9]*[A-Za-z0-9])?$
      responses:
        '200':
          description: Azure operation completed successfully.
          content:
            application/json:
              schema:
                $ref: '#/components/schemas/DaprSecretStoreResource'
        '202':
          description: Resource update request accepted.
          headers:
            Location:
              description: The Location header contains the URL where the status of the long running operation can be checked.
              schema:
                type: string
            Retry-After:
              description: The Retry-After header can indicate how long the client should wait before polling the operation status.
              schema:
                type: integer
                format: int32
        default:
          description: An unexpected error response.
          content:
            application/json:
              schema:
                $ref: ../../../../../common-types/resource-management/v3/types.json#/definitions/ErrorResponse
      x-ms-examples:
        Update an SecretStore resource:
          $ref: ./examples/SecretStores_Update.json
      x-ms-long-running-operation-options:
        final-state-via: location
      x-ms-long-running-operation: true
      requestBody:
        content:
          application/json:
            schema:
              $ref: '#/components/schemas/DaprSecretStoreResourceUpdate'
        description: The resource properties to be updated.
        required: true
    delete:
      operationId: SecretStores_Delete
      tags:
      - SecretStores
      description: Delete a DaprSecretStoreResource
      parameters:
      - $ref: ../../../../../common-types/resource-management/v3/types.json#/parameters/ApiVersionParameter
      - $ref: '#/components/parameters/RootScopeParameter'
      - name: secretStoreName
        in: path
        description: SecretStore name
        required: true
        schema:
          type: string
          maxLength: 63
          pattern: ^[A-Za-z]([-A-Za-z0-9]*[A-Za-z0-9])?$
      responses:
        '202':
          description: Resource deletion accepted.
          headers:
            Location:
              description: The Location header contains the URL where the status of the long running operation can be checked.
              schema:
                type: string
            Retry-After:
              description: The Retry-After header can indicate how long the client should wait before polling the operation status.
              schema:
                type: integer
                format: int32
        '204':
          description: Resource does not exist.
        default:
          description: An unexpected error response.
          content:
            application/json:
              schema:
                $ref: ../../../../../common-types/resource-management/v3/types.json#/definitions/ErrorResponse
      x-ms-examples:
        Delete a SecretStore resource:
          $ref: ./examples/SecretStores_Delete.json
      x-ms-long-running-operation-options:
        final-state-via: location
      x-ms-long-running-operation: true
components:
  schemas:
    SecretStoreDataType:
      type: string
      description: The type of SecretStore data
      enum:
      - generic
      - certificate
      - basicAuthentication
      - azureWorkloadIdentity
      - awsIRSA
      x-ms-enum:
        name: SecretStoreDataType
        modelAsString: false
        values:
        - name: generic
          value: generic
          description: Generic secret data type
        - name: certificate
          value: certificate
          description: Certificate secret data type
        - name: basicAuthentication
          value: basicAuthentication
          description: basicAuthentication type is used to represent username and password based authentication and the secretstore resource is expected to have the keys 'username' and 'password'.
        - name: azureWorkloadIdentity
          value: azureWorkloadIdentity
          description: azureWorkloadIdentity type is used to represent authentication using azure federated identity and the secretstore resource is expected to have the keys 'clientId' and 'tenantId'.
        - name: awsIRSA
          value: awsIRSA
          description: awsIRSA type is used to represent authentication using AWS IRSA (IAM Roles for Service accounts) and the secretstore resource is expected to have the key 'roleARN'.
    DaprSecretStoreResource:
      type: object
      description: Dapr SecretStore portable resource
      properties:
        properties:
          $ref: '#/components/schemas/DaprSecretStoreProperties'
          description: The resource-specific properties for this resource.
          x-ms-client-flatten: true
          x-ms-mutability:
          - read
          - create
      required:
      - properties
      allOf:
      - $ref: ../../../../../common-types/resource-management/v3/types.json#/definitions/TrackedResource
    MetadataValueFromSecret:
      type: object
      description: A reference of a value in a secret store component.
      properties:
        name:
          type: string
          description: Secret name in the secret store component
        key:
          type: string
          description: The field to select in the secret value. If the secret value is a string, it should be equal to the secret name
      required:
      - name
      - key
    ValueFromProperties:
      type: object
      description: The Secret value source properties
      properties:
        name:
          type: string
          description: The name of the referenced secret.
        version:
          type: string
          description: The version of the referenced secret.
      required:
      - name
    SecretValueProperties:
      type: object
      description: The properties of SecretValue
      properties:
        encoding:
          type: string
          description: The encoding of value
          default: raw
          enum:
          - raw
          - base64
          x-ms-enum:
            name: SecretValueEncoding
            modelAsString: false
            values:
            - name: raw
              value: raw
              description: The raw secret value
            - name: base64
              value: base64
              description: The base64-encoded secret value
        value:
          type: string
          format: password
          description: The value of secret.
          x-ms-secret: true
        valueFrom:
          $ref: '#/components/schemas/ValueFromProperties'
          description: The referenced secret in properties.resource
    DaprSecretStoreResourceUpdate:
      type: object
      description: Dapr SecretStore portable resource
      allOf:
      - $ref: '#/components/schemas/Azure.ResourceManager.CommonTypes.TrackedResourceUpdate'
    SecretStoreResourceListResult:
      type: object
      description: The response of a SecretStoreResource list operation.
      properties:
        value:
          type: array
          description: The SecretStoreResource items on this page
          items:
            $ref: '#/components/schemas/SecretStoreResource'
        nextLink:
          type: string
          format: uri
          description: The link to the next page of items
      required:
      - value
    ResourceProvisioning:
      type: string
      description: Specifies how the underlying service/resource is provisioned and managed. Available values are 'recipe', where Radius manages the lifecycle of the resource through a Recipe, and 'manual', where a user manages the resource and provides the values.
      enum:
      - recipe
      - manual
      x-ms-enum:
        name: ResourceProvisioning
        modelAsString: false
        values:
        - name: recipe
          value: recipe
          description: The resource lifecycle will be managed by Radius
        - name: manual
          value: manual
          description: The resource lifecycle will be managed by the user
    MetadataValue:
      type: object
      description: A single metadata for a Dapr component object
      properties:
        value:
          type: string
          description: The plain text value of the metadata
        secretKeyRef:
          $ref: '#/components/schemas/MetadataValueFromSecret'
          description: A reference of a value in a secret store component
    EnvironmentCompute:
      type: object
      description: Represents backing compute resource
      properties:
        kind:
          type: string
          description: Discriminator property for EnvironmentCompute.
        resourceId:
          type: string
          description: The resource id of the compute resource for application environment.
        identity:
          $ref: '#/components/schemas/IdentitySettings'
          description: Configuration for supported external identity providers
      discriminator:
        propertyName: kind
      required:
      - kind
    OutputResource:
      type: object
      description: Properties of an output resource.
      properties:
        localId:
          type: string
          description: The logical identifier scoped to the owning Radius resource. This is only needed or used when a resource has a dependency relationship. LocalIDs do not have any particular format or meaning beyond being compared to determine dependency relationships.
        id:
          type: string
          description: The UCP resource ID of the underlying resource.
        radiusManaged:
          type: boolean
          description: Determines whether Radius manages the lifecycle of the underlying resource.
    IdentitySettingKind:
      type: string
      description: IdentitySettingKind is the kind of supported external identity setting
      enum:
      - undefined
      - azure.com.workload
      - userAssigned
      - systemAssigned
      - systemAssignedUserAssigned
      x-ms-enum:
        name: IdentitySettingKind
        modelAsString: false
        values:
        - name: undefined
          value: undefined
          description: undefined identity
        - name: azure.com.workload
          value: azure.com.workload
          description: azure ad workload identity
        - name: userAssigned
          value: userAssigned
          description: User assigned managed identity
        - name: systemAssigned
          value: systemAssigned
          description: System assigned managed identity
        - name: systemAssignedUserAssigned
          value: systemAssignedUserAssigned
          description: System assigned and user assigned managed identity
    DaprSecretStoreResourceListResult:
      type: object
      description: The response of a DaprSecretStoreResource list operation.
      properties:
        value:
          type: array
          description: The DaprSecretStoreResource items on this page
          items:
            $ref: '#/components/schemas/DaprSecretStoreResource'
        nextLink:
          type: string
          format: uri
          description: The link to the next page of items
      required:
      - value
    ResourceStatus:
      type: object
      description: Status of a resource.
      properties:
        compute:
          $ref: '#/components/schemas/EnvironmentCompute'
          description: The compute resource associated with the resource.
        recipe:
          $ref: '#/components/schemas/RecipeStatus'
          description: The recipe data at the time of deployment
          readOnly: true
        outputResources:
          type: array
          description: Properties of an output resource
          items:
            $ref: '#/components/schemas/OutputResource'
          x-ms-identifiers: []
    SecretStoreProperties:
      type: object
      description: The properties of SecretStore
      properties:
        environment:
          type: string
          description: Fully qualified resource ID for the environment that the application is linked to
        application:
          type: string
          description: Fully qualified resource ID for the application
        provisioningState:
          $ref: '#/components/schemas/ProvisioningState'
          description: The status of the asynchronous operation.
          readOnly: true
        status:
          $ref: '#/components/schemas/ResourceStatus'
          description: Status of a resource.
          readOnly: true
        type:
          type: string
          description: The type of secret store data
          default: generic
          enum:
          - generic
          - certificate
          - basicAuthentication
          - azureWorkloadIdentity
          - awsIRSA
          x-ms-enum:
            name: SecretStoreDataType
            modelAsString: false
            values:
            - name: generic
              value: generic
              description: Generic secret data type
            - name: certificate
              value: certificate
              description: Certificate secret data type
            - name: basicAuthentication
              value: basicAuthentication
              description: basicAuthentication type is used to represent username and password based authentication and the secretstore resource is expected to have the keys 'username' and 'password'.
            - name: azureWorkloadIdentity
              value: azureWorkloadIdentity
              description: azureWorkloadIdentity type is used to represent authentication using azure federated identity and the secretstore resource is expected to have the keys 'clientId' and 'tenantId'.
            - name: awsIRSA
              value: awsIRSA
              description: awsIRSA type is used to represent authentication using AWS IRSA (IAM Roles for Service accounts) and the secretstore resource is expected to have the key 'roleARN'.
        data:
          type: object
          description: An object to represent key-value type secrets
          additionalProperties:
            $ref: '#/components/schemas/SecretValueProperties'
        resource:
          type: string
          description: The resource id of external secret store.
      required:
      - data
    DaprSecretStoreProperties:
      type: object
      description: Dapr SecretStore portable resource properties
      properties:
        environment:
          type: string
          description: Fully qualified resource ID for the environment that the portable resource is linked to
        application:
          type: string
          description: Fully qualified resource ID for the application that the portable resource is consumed by (if applicable)
        provisioningState:
          $ref: '#/components/schemas/ProvisioningState'
          description: The status of the asynchronous operation.
          readOnly: true
        status:
          $ref: '#/components/schemas/ResourceStatus'
          description: Status of a resource.
          readOnly: true
        componentName:
          type: string
          description: The name of the Dapr component object. Use this value in your code when interacting with the Dapr client to use the Dapr component.
          readOnly: true
        metadata:
          type: object
          description: The metadata for Dapr resource which must match the values specified in Dapr component spec
          additionalProperties:
            $ref: '#/components/schemas/MetadataValue'
        type:
          type: string
          description: Dapr component type which must matches the format used by Dapr Kubernetes configuration format
        version:
          type: string
          description: Dapr component version
        recipe:
          $ref: '#/components/schemas/Recipe'
          description: The recipe used to automatically deploy underlying infrastructure for the resource
        resourceProvisioning:
          $ref: '#/components/schemas/ResourceProvisioning'
          description: Specifies how the underlying service/resource is provisioned and managed.
      required:
      - environment
    SecretStoreListSecretsResult:
      type: object
      description: The list of secrets
      properties:
        type:
          $ref: '#/components/schemas/SecretStoreDataType'
          description: The type of secret store data
        data:
          type: object
          description: An object to represent key-value type secrets
          additionalProperties:
            $ref: '#/components/schemas/SecretValueProperties'
      required:
      - type
      - data
    Recipe:
      type: object
      description: The recipe used to automatically deploy underlying infrastructure for a portable resource
      properties:
        name:
          type: string
          description: The name of the recipe within the environment to use
        parameters:
          type: object
          description: Key/value parameters to pass into the recipe at deployment
      required:
      - name
    SecretStoreResourceUpdate:
      type: object
      description: Concrete tracked resource types can be created by aliasing this type using a specific property type.
      allOf:
      - $ref: '#/components/schemas/Azure.ResourceManager.CommonTypes.TrackedResourceUpdate'
    RecipeStatus:
      type: object
      description: Recipe status at deployment time for a resource.
      properties:
        templateKind:
          type: string
   

# --- truncated at 32 KB (36 KB total) ---
# Full source: https://raw.githubusercontent.com/api-evangelist/radius/refs/heads/main/openapi/radius-secretstores-api-openapi.yml