@pulumi/azuread 5.22.0 → 5.23.0-alpha.1654861096
This diff represents the content of publicly available package versions that have been released to one of the supported registries. The information contained in this diff is provided for informational purposes only and reflects changes between package versions as they appear in their respective public registries.
- package/claimsMappingPolicy.d.ts +1 -1
- package/claimsMappingPolicy.js +1 -1
- package/conditionalAccessPolicy.d.ts +5 -13
- package/conditionalAccessPolicy.js +5 -13
- package/conditionalAccessPolicy.js.map +1 -1
- package/config/vars.d.ts +14 -0
- package/config/vars.js +18 -0
- package/config/vars.js.map +1 -1
- package/package.json +2 -2
- package/package.json.dev +2 -2
- package/provider.d.ts +24 -0
- package/provider.js +3 -0
- package/provider.js.map +1 -1
package/claimsMappingPolicy.d.ts
CHANGED
|
@@ -6,7 +6,7 @@ import * as pulumi from "@pulumi/pulumi";
|
|
|
6
6
|
*
|
|
7
7
|
* The following API permissions are required in order to use this resource.
|
|
8
8
|
*
|
|
9
|
-
* When authenticated with a service principal, this resource requires the following application roles: `Policy.ReadWrite.ApplicationConfiguration`
|
|
9
|
+
* When authenticated with a service principal, this resource requires the following application roles: `Policy.ReadWrite.ApplicationConfiguration` and `Policy.Read.All`
|
|
10
10
|
*
|
|
11
11
|
* When authenticated with a user principal, this resource requires one of the following directory roles: `Application Administrator` or `Global Administrator`
|
|
12
12
|
*
|
package/claimsMappingPolicy.js
CHANGED
|
@@ -12,7 +12,7 @@ const utilities = require("./utilities");
|
|
|
12
12
|
*
|
|
13
13
|
* The following API permissions are required in order to use this resource.
|
|
14
14
|
*
|
|
15
|
-
* When authenticated with a service principal, this resource requires the following application roles: `Policy.ReadWrite.ApplicationConfiguration`
|
|
15
|
+
* When authenticated with a service principal, this resource requires the following application roles: `Policy.ReadWrite.ApplicationConfiguration` and `Policy.Read.All`
|
|
16
16
|
*
|
|
17
17
|
* When authenticated with a user principal, this resource requires one of the following directory roles: `Application Administrator` or `Global Administrator`
|
|
18
18
|
*
|
|
@@ -20,7 +20,7 @@ import { input as inputs, output as outputs } from "./types";
|
|
|
20
20
|
* const example = new azuread.ConditionalAccessPolicy("example", {
|
|
21
21
|
* conditions: {
|
|
22
22
|
* applications: {
|
|
23
|
-
* excludedApplications: [
|
|
23
|
+
* excludedApplications: [],
|
|
24
24
|
* includedApplications: ["All"],
|
|
25
25
|
* },
|
|
26
26
|
* clientAppTypes: ["all"],
|
|
@@ -51,18 +51,10 @@ import { input as inputs, output as outputs } from "./types";
|
|
|
51
51
|
* operator: "OR",
|
|
52
52
|
* },
|
|
53
53
|
* sessionControls: {
|
|
54
|
-
*
|
|
55
|
-
*
|
|
56
|
-
*
|
|
57
|
-
*
|
|
58
|
-
* cloudAppSecurityType: "monitorOnly",
|
|
59
|
-
* enabled: true,
|
|
60
|
-
* }],
|
|
61
|
-
* signInFrequency: [{
|
|
62
|
-
* enabled: true,
|
|
63
|
-
* type: "hours",
|
|
64
|
-
* value: 10,
|
|
65
|
-
* }],
|
|
54
|
+
* applicationEnforcedRestrictionsEnabled: true,
|
|
55
|
+
* cloudAppSecurityPolicy: "monitorOnly",
|
|
56
|
+
* signInFrequency: 10,
|
|
57
|
+
* signInFrequencyPeriod: "hours",
|
|
66
58
|
* },
|
|
67
59
|
* state: "disabled",
|
|
68
60
|
* });
|
|
@@ -25,7 +25,7 @@ const utilities = require("./utilities");
|
|
|
25
25
|
* const example = new azuread.ConditionalAccessPolicy("example", {
|
|
26
26
|
* conditions: {
|
|
27
27
|
* applications: {
|
|
28
|
-
* excludedApplications: [
|
|
28
|
+
* excludedApplications: [],
|
|
29
29
|
* includedApplications: ["All"],
|
|
30
30
|
* },
|
|
31
31
|
* clientAppTypes: ["all"],
|
|
@@ -56,18 +56,10 @@ const utilities = require("./utilities");
|
|
|
56
56
|
* operator: "OR",
|
|
57
57
|
* },
|
|
58
58
|
* sessionControls: {
|
|
59
|
-
*
|
|
60
|
-
*
|
|
61
|
-
*
|
|
62
|
-
*
|
|
63
|
-
* cloudAppSecurityType: "monitorOnly",
|
|
64
|
-
* enabled: true,
|
|
65
|
-
* }],
|
|
66
|
-
* signInFrequency: [{
|
|
67
|
-
* enabled: true,
|
|
68
|
-
* type: "hours",
|
|
69
|
-
* value: 10,
|
|
70
|
-
* }],
|
|
59
|
+
* applicationEnforcedRestrictionsEnabled: true,
|
|
60
|
+
* cloudAppSecurityPolicy: "monitorOnly",
|
|
61
|
+
* signInFrequency: 10,
|
|
62
|
+
* signInFrequencyPeriod: "hours",
|
|
71
63
|
* },
|
|
72
64
|
* state: "disabled",
|
|
73
65
|
* });
|
|
@@ -1 +1 @@
|
|
|
1
|
-
{"version":3,"file":"conditionalAccessPolicy.js","sourceRoot":"","sources":["../conditionalAccessPolicy.ts"],"names":[],"mappings":";AAAA,wFAAwF;AACxF,iFAAiF;;;AAEjF,yCAAyC;AAEzC,yCAAyC;AAEzC
|
|
1
|
+
{"version":3,"file":"conditionalAccessPolicy.js","sourceRoot":"","sources":["../conditionalAccessPolicy.ts"],"names":[],"mappings":";AAAA,wFAAwF;AACxF,iFAAiF;;;AAEjF,yCAAyC;AAEzC,yCAAyC;AAEzC;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;GAmEG;AACH,MAAa,uBAAwB,SAAQ,MAAM,CAAC,cAAc;IAyD9D,YAAY,IAAY,EAAE,WAAwE,EAAE,IAAmC;QACnI,IAAI,cAAc,GAAkB,EAAE,CAAC;QACvC,IAAI,GAAG,IAAI,IAAI,EAAE,CAAC;QAClB,IAAI,IAAI,CAAC,EAAE,EAAE;YACT,MAAM,KAAK,GAAG,WAAuD,CAAC;YACtE,cAAc,CAAC,YAAY,CAAC,GAAG,KAAK,CAAC,CAAC,CAAC,KAAK,CAAC,UAAU,CAAC,CAAC,CAAC,SAAS,CAAC;YACpE,cAAc,CAAC,aAAa,CAAC,GAAG,KAAK,CAAC,CAAC,CAAC,KAAK,CAAC,WAAW,CAAC,CAAC,CAAC,SAAS,CAAC;YACtE,cAAc,CAAC,eAAe,CAAC,GAAG,KAAK,CAAC,CAAC,CAAC,KAAK,CAAC,aAAa,CAAC,CAAC,CAAC,SAAS,CAAC;YAC1E,cAAc,CAAC,iBAAiB,CAAC,GAAG,KAAK,CAAC,CAAC,CAAC,KAAK,CAAC,eAAe,CAAC,CAAC,CAAC,SAAS,CAAC;YAC9E,cAAc,CAAC,OAAO,CAAC,GAAG,KAAK,CAAC,CAAC,CAAC,KAAK,CAAC,KAAK,CAAC,CAAC,CAAC,SAAS,CAAC;SAC7D;aAAM;YACH,MAAM,IAAI,GAAG,WAAsD,CAAC;YACpE,IAAI,CAAC,CAAC,IAAI,IAAI,IAAI,CAAC,UAAU,KAAK,SAAS,CAAC,IAAI,CAAC,IAAI,CAAC,GAAG,EAAE;gBACvD,MAAM,IAAI,KAAK,CAAC,wCAAwC,CAAC,CAAC;aAC7D;YACD,IAAI,CAAC,CAAC,IAAI,IAAI,IAAI,CAAC,WAAW,KAAK,SAAS,CAAC,IAAI,CAAC,IAAI,CAAC,GAAG,EAAE;gBACxD,MAAM,IAAI,KAAK,CAAC,yCAAyC,CAAC,CAAC;aAC9D;YACD,IAAI,CAAC,CAAC,IAAI,IAAI,IAAI,CAAC,aAAa,KAAK,SAAS,CAAC,IAAI,CAAC,IAAI,CAAC,GAAG,EAAE;gBAC1D,MAAM,IAAI,KAAK,CAAC,2CAA2C,CAAC,CAAC;aAChE;YACD,IAAI,CAAC,CAAC,IAAI,IAAI,IAAI,CAAC,KAAK,KAAK,SAAS,CAAC,IAAI,CAAC,IAAI,CAAC,GAAG,EAAE;gBAClD,MAAM,IAAI,KAAK,CAAC,mCAAmC,CAAC,CAAC;aACxD;YACD,cAAc,CAAC,YAAY,CAAC,GAAG,IAAI,CAAC,CAAC,CAAC,IAAI,CAAC,UAAU,CAAC,CAAC,CAAC,SAAS,CAAC;YAClE,cAAc,CAAC,aAAa,CAAC,GAAG,IAAI,CAAC,CAAC,CAAC,IAAI,CAAC,WAAW,CAAC,CAAC,CAAC,SAAS,CAAC;YACpE,cAAc,CAAC,eAAe,CAAC,GAAG,IAAI,CAAC,CAAC,CAAC,IAAI,CAAC,aAAa,CAAC,CAAC,CAAC,SAAS,CAAC;YACxE,cAAc,CAAC,iBAAiB,CAAC,GAAG,IAAI,CAAC,CAAC,CAAC,IAAI,CAAC,eAAe,CAAC,CAAC,CAAC,SAAS,CAAC;YAC5E,cAAc,CAAC,OAAO,CAAC,GAAG,IAAI,CAAC,CAAC,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC,CAAC,SAAS,CAAC;SAC3D;QACD,IAAI,GAAG,MAAM,CAAC,YAAY,CAAC,SAAS,CAAC,oBAAoB,EAAE,EAAE,IAAI,CAAC,CAAC;QACnE,KAAK,CAAC,uBAAuB,CAAC,YAAY,EAAE,IAAI,EAAE,cAAc,EAAE,IAAI,CAAC,CAAC;IAC5E,CAAC;IAxFD;;;;;;;;OAQG;IACI,MAAM,CAAC,GAAG,CAAC,IAAY,EAAE,EAA2B,EAAE,KAAoC,EAAE,IAAmC;QAClI,OAAO,IAAI,uBAAuB,CAAC,IAAI,EAAO,KAAK,kCAAO,IAAI,KAAE,EAAE,EAAE,EAAE,IAAG,CAAC;IAC9E,CAAC;IAKD;;;OAGG;IACI,MAAM,CAAC,UAAU,CAAC,GAAQ;QAC7B,IAAI,GAAG,KAAK,SAAS,IAAI,GAAG,KAAK,IAAI,EAAE;YACnC,OAAO,KAAK,CAAC;SAChB;QACD,OAAO,GAAG,CAAC,cAAc,CAAC,KAAK,uBAAuB,CAAC,YAAY,CAAC;IACxE,CAAC;;AA1BL,0DA0FC;AA5EG,gBAAgB;AACO,oCAAY,GAAG,+DAA+D,CAAC"}
|
package/config/vars.d.ts
CHANGED
|
@@ -33,6 +33,16 @@ export declare const environment: string;
|
|
|
33
33
|
* The path to a custom endpoint for Managed Identity - in most circumstances this should be detected automatically
|
|
34
34
|
*/
|
|
35
35
|
export declare const msiEndpoint: string | undefined;
|
|
36
|
+
/**
|
|
37
|
+
* The bearer token for the request to the OIDC provider. For use when authenticating as a Service Principal using OpenID
|
|
38
|
+
* Connect.
|
|
39
|
+
*/
|
|
40
|
+
export declare const oidcRequestToken: string | undefined;
|
|
41
|
+
/**
|
|
42
|
+
* The URL for the OIDC provider from which to request an ID token. For use when authenticating as a Service Principal
|
|
43
|
+
* using OpenID Connect.
|
|
44
|
+
*/
|
|
45
|
+
export declare const oidcRequestUrl: string | undefined;
|
|
36
46
|
/**
|
|
37
47
|
* A GUID/UUID that is registered with Microsoft to facilitate partner resource usage attribution
|
|
38
48
|
*/
|
|
@@ -49,3 +59,7 @@ export declare const useCli: boolean | undefined;
|
|
|
49
59
|
* Allow Managed Identity to be used for Authentication
|
|
50
60
|
*/
|
|
51
61
|
export declare const useMsi: boolean;
|
|
62
|
+
/**
|
|
63
|
+
* Allow OpenID Connect to be used for authentication
|
|
64
|
+
*/
|
|
65
|
+
export declare const useOidc: boolean | undefined;
|
package/config/vars.js
CHANGED
|
@@ -55,6 +55,18 @@ Object.defineProperty(exports, "msiEndpoint", {
|
|
|
55
55
|
},
|
|
56
56
|
enumerable: true,
|
|
57
57
|
});
|
|
58
|
+
Object.defineProperty(exports, "oidcRequestToken", {
|
|
59
|
+
get() {
|
|
60
|
+
return __config.get("oidcRequestToken");
|
|
61
|
+
},
|
|
62
|
+
enumerable: true,
|
|
63
|
+
});
|
|
64
|
+
Object.defineProperty(exports, "oidcRequestUrl", {
|
|
65
|
+
get() {
|
|
66
|
+
return __config.get("oidcRequestUrl");
|
|
67
|
+
},
|
|
68
|
+
enumerable: true,
|
|
69
|
+
});
|
|
58
70
|
Object.defineProperty(exports, "partnerId", {
|
|
59
71
|
get() {
|
|
60
72
|
return __config.get("partnerId");
|
|
@@ -80,4 +92,10 @@ Object.defineProperty(exports, "useMsi", {
|
|
|
80
92
|
},
|
|
81
93
|
enumerable: true,
|
|
82
94
|
});
|
|
95
|
+
Object.defineProperty(exports, "useOidc", {
|
|
96
|
+
get() {
|
|
97
|
+
return __config.getObject("useOidc");
|
|
98
|
+
},
|
|
99
|
+
enumerable: true,
|
|
100
|
+
});
|
|
83
101
|
//# sourceMappingURL=vars.js.map
|
package/config/vars.js.map
CHANGED
|
@@ -1 +1 @@
|
|
|
1
|
-
{"version":3,"file":"vars.js","sourceRoot":"","sources":["../../config/vars.ts"],"names":[],"mappings":";AAAA,wFAAwF;AACxF,iFAAiF;;AAEjF,yCAAyC;AACzC,0CAA0C;AAG1C,MAAM,QAAQ,GAAG,IAAI,MAAM,CAAC,MAAM,CAAC,SAAS,CAAC,CAAC;AAM9C,MAAM,CAAC,cAAc,CAAC,OAAO,EAAE,mBAAmB,EAAE;IAChD,GAAG;QACC,OAAO,QAAQ,CAAC,GAAG,CAAC,mBAAmB,CAAC,CAAC;IAC7C,CAAC;IACD,UAAU,EAAE,IAAI;CACnB,CAAC,CAAC;AAOH,MAAM,CAAC,cAAc,CAAC,OAAO,EAAE,2BAA2B,EAAE;IACxD,GAAG;QACC,OAAO,QAAQ,CAAC,GAAG,CAAC,2BAA2B,CAAC,CAAC;IACrD,CAAC;IACD,UAAU,EAAE,IAAI;CACnB,CAAC,CAAC;AAOH,MAAM,CAAC,cAAc,CAAC,OAAO,EAAE,uBAAuB,EAAE;IACpD,GAAG;QACC,OAAO,QAAQ,CAAC,GAAG,CAAC,uBAAuB,CAAC,CAAC;IACjD,CAAC;IACD,UAAU,EAAE,IAAI;CACnB,CAAC,CAAC;AAMH,MAAM,CAAC,cAAc,CAAC,OAAO,EAAE,UAAU,EAAE;IACvC,GAAG;QACC,OAAO,QAAQ,CAAC,GAAG,CAAC,UAAU,CAAC,CAAC;IACpC,CAAC;IACD,UAAU,EAAE,IAAI;CACnB,CAAC,CAAC;AAMH,MAAM,CAAC,cAAc,CAAC,OAAO,EAAE,cAAc,EAAE;IAC3C,GAAG;QACC,OAAO,QAAQ,CAAC,GAAG,CAAC,cAAc,CAAC,CAAC;IACxC,CAAC;IACD,UAAU,EAAE,IAAI;CACnB,CAAC,CAAC;AAMH,MAAM,CAAC,cAAc,CAAC,OAAO,EAAE,2BAA2B,EAAE;IACxD,GAAG;QACC,OAAO,QAAQ,CAAC,SAAS,CAAU,2BAA2B,CAAC,CAAC;IACpE,CAAC;IACD,UAAU,EAAE,IAAI;CACnB,CAAC,CAAC;AAOH,MAAM,CAAC,cAAc,CAAC,OAAO,EAAE,aAAa,EAAE;IAC1C,GAAG;;QACC,OAAO,MAAA,QAAQ,CAAC,GAAG,CAAC,aAAa,CAAC,mCAAI,CAAC,SAAS,CAAC,MAAM,CAAC,iBAAiB,CAAC,IAAI,QAAQ,CAAC,CAAC;IAC5F,CAAC;IACD,UAAU,EAAE,IAAI;CACnB,CAAC,CAAC;AAMH,MAAM,CAAC,cAAc,CAAC,OAAO,EAAE,aAAa,EAAE;IAC1C,GAAG;;QACC,OAAO,MAAA,QAAQ,CAAC,GAAG,CAAC,aAAa,CAAC,mCAAI,SAAS,CAAC,MAAM,CAAC,kBAAkB,CAAC,CAAC;IAC/E,CAAC;IACD,UAAU,EAAE,IAAI;CACnB,CAAC,CAAC;AAMH,MAAM,CAAC,cAAc,CAAC,OAAO,EAAE,WAAW,EAAE;IACxC,GAAG;QACC,OAAO,QAAQ,CAAC,GAAG,CAAC,WAAW,CAAC,CAAC;IACrC,CAAC;IACD,UAAU,EAAE,IAAI;CACnB,CAAC,CAAC;AAMH,MAAM,CAAC,cAAc,CAAC,OAAO,EAAE,UAAU,EAAE;IACvC,GAAG;QACC,OAAO,QAAQ,CAAC,GAAG,CAAC,UAAU,CAAC,CAAC;IACpC,CAAC;IACD,UAAU,EAAE,IAAI;CACnB,CAAC,CAAC;AAMH,MAAM,CAAC,cAAc,CAAC,OAAO,EAAE,QAAQ,EAAE;IACrC,GAAG;QACC,OAAO,QAAQ,CAAC,SAAS,CAAU,QAAQ,CAAC,CAAC;IACjD,CAAC;IACD,UAAU,EAAE,IAAI;CACnB,CAAC,CAAC;AAMH,MAAM,CAAC,cAAc,CAAC,OAAO,EAAE,QAAQ,EAAE;IACrC,GAAG;;QACC,OAAO,MAAA,QAAQ,CAAC,SAAS,CAAU,QAAQ,CAAC,mCAAI,CAAC,SAAS,CAAC,aAAa,CAAC,aAAa,CAAC,IAAI,KAAK,CAAC,CAAC;IACtG,CAAC;IACD,UAAU,EAAE,IAAI;CACnB,CAAC,CAAC"}
|
|
1
|
+
{"version":3,"file":"vars.js","sourceRoot":"","sources":["../../config/vars.ts"],"names":[],"mappings":";AAAA,wFAAwF;AACxF,iFAAiF;;AAEjF,yCAAyC;AACzC,0CAA0C;AAG1C,MAAM,QAAQ,GAAG,IAAI,MAAM,CAAC,MAAM,CAAC,SAAS,CAAC,CAAC;AAM9C,MAAM,CAAC,cAAc,CAAC,OAAO,EAAE,mBAAmB,EAAE;IAChD,GAAG;QACC,OAAO,QAAQ,CAAC,GAAG,CAAC,mBAAmB,CAAC,CAAC;IAC7C,CAAC;IACD,UAAU,EAAE,IAAI;CACnB,CAAC,CAAC;AAOH,MAAM,CAAC,cAAc,CAAC,OAAO,EAAE,2BAA2B,EAAE;IACxD,GAAG;QACC,OAAO,QAAQ,CAAC,GAAG,CAAC,2BAA2B,CAAC,CAAC;IACrD,CAAC;IACD,UAAU,EAAE,IAAI;CACnB,CAAC,CAAC;AAOH,MAAM,CAAC,cAAc,CAAC,OAAO,EAAE,uBAAuB,EAAE;IACpD,GAAG;QACC,OAAO,QAAQ,CAAC,GAAG,CAAC,uBAAuB,CAAC,CAAC;IACjD,CAAC;IACD,UAAU,EAAE,IAAI;CACnB,CAAC,CAAC;AAMH,MAAM,CAAC,cAAc,CAAC,OAAO,EAAE,UAAU,EAAE;IACvC,GAAG;QACC,OAAO,QAAQ,CAAC,GAAG,CAAC,UAAU,CAAC,CAAC;IACpC,CAAC;IACD,UAAU,EAAE,IAAI;CACnB,CAAC,CAAC;AAMH,MAAM,CAAC,cAAc,CAAC,OAAO,EAAE,cAAc,EAAE;IAC3C,GAAG;QACC,OAAO,QAAQ,CAAC,GAAG,CAAC,cAAc,CAAC,CAAC;IACxC,CAAC;IACD,UAAU,EAAE,IAAI;CACnB,CAAC,CAAC;AAMH,MAAM,CAAC,cAAc,CAAC,OAAO,EAAE,2BAA2B,EAAE;IACxD,GAAG;QACC,OAAO,QAAQ,CAAC,SAAS,CAAU,2BAA2B,CAAC,CAAC;IACpE,CAAC;IACD,UAAU,EAAE,IAAI;CACnB,CAAC,CAAC;AAOH,MAAM,CAAC,cAAc,CAAC,OAAO,EAAE,aAAa,EAAE;IAC1C,GAAG;;QACC,OAAO,MAAA,QAAQ,CAAC,GAAG,CAAC,aAAa,CAAC,mCAAI,CAAC,SAAS,CAAC,MAAM,CAAC,iBAAiB,CAAC,IAAI,QAAQ,CAAC,CAAC;IAC5F,CAAC;IACD,UAAU,EAAE,IAAI;CACnB,CAAC,CAAC;AAMH,MAAM,CAAC,cAAc,CAAC,OAAO,EAAE,aAAa,EAAE;IAC1C,GAAG;;QACC,OAAO,MAAA,QAAQ,CAAC,GAAG,CAAC,aAAa,CAAC,mCAAI,SAAS,CAAC,MAAM,CAAC,kBAAkB,CAAC,CAAC;IAC/E,CAAC;IACD,UAAU,EAAE,IAAI;CACnB,CAAC,CAAC;AAOH,MAAM,CAAC,cAAc,CAAC,OAAO,EAAE,kBAAkB,EAAE;IAC/C,GAAG;QACC,OAAO,QAAQ,CAAC,GAAG,CAAC,kBAAkB,CAAC,CAAC;IAC5C,CAAC;IACD,UAAU,EAAE,IAAI;CACnB,CAAC,CAAC;AAOH,MAAM,CAAC,cAAc,CAAC,OAAO,EAAE,gBAAgB,EAAE;IAC7C,GAAG;QACC,OAAO,QAAQ,CAAC,GAAG,CAAC,gBAAgB,CAAC,CAAC;IAC1C,CAAC;IACD,UAAU,EAAE,IAAI;CACnB,CAAC,CAAC;AAMH,MAAM,CAAC,cAAc,CAAC,OAAO,EAAE,WAAW,EAAE;IACxC,GAAG;QACC,OAAO,QAAQ,CAAC,GAAG,CAAC,WAAW,CAAC,CAAC;IACrC,CAAC;IACD,UAAU,EAAE,IAAI;CACnB,CAAC,CAAC;AAMH,MAAM,CAAC,cAAc,CAAC,OAAO,EAAE,UAAU,EAAE;IACvC,GAAG;QACC,OAAO,QAAQ,CAAC,GAAG,CAAC,UAAU,CAAC,CAAC;IACpC,CAAC;IACD,UAAU,EAAE,IAAI;CACnB,CAAC,CAAC;AAMH,MAAM,CAAC,cAAc,CAAC,OAAO,EAAE,QAAQ,EAAE;IACrC,GAAG;QACC,OAAO,QAAQ,CAAC,SAAS,CAAU,QAAQ,CAAC,CAAC;IACjD,CAAC;IACD,UAAU,EAAE,IAAI;CACnB,CAAC,CAAC;AAMH,MAAM,CAAC,cAAc,CAAC,OAAO,EAAE,QAAQ,EAAE;IACrC,GAAG;;QACC,OAAO,MAAA,QAAQ,CAAC,SAAS,CAAU,QAAQ,CAAC,mCAAI,CAAC,SAAS,CAAC,aAAa,CAAC,aAAa,CAAC,IAAI,KAAK,CAAC,CAAC;IACtG,CAAC;IACD,UAAU,EAAE,IAAI;CACnB,CAAC,CAAC;AAMH,MAAM,CAAC,cAAc,CAAC,OAAO,EAAE,SAAS,EAAE;IACtC,GAAG;QACC,OAAO,QAAQ,CAAC,SAAS,CAAU,SAAS,CAAC,CAAC;IAClD,CAAC;IACD,UAAU,EAAE,IAAI;CACnB,CAAC,CAAC"}
|
package/package.json
CHANGED
|
@@ -1,6 +1,6 @@
|
|
|
1
1
|
{
|
|
2
2
|
"name": "@pulumi/azuread",
|
|
3
|
-
"version": "v5.
|
|
3
|
+
"version": "v5.23.0-alpha.1654861096+b6263bab",
|
|
4
4
|
"description": "A Pulumi package for creating and managing azuread cloud resources.",
|
|
5
5
|
"keywords": [
|
|
6
6
|
"pulumi",
|
|
@@ -11,7 +11,7 @@
|
|
|
11
11
|
"license": "Apache-2.0",
|
|
12
12
|
"scripts": {
|
|
13
13
|
"build": "tsc",
|
|
14
|
-
"install": "node scripts/install-pulumi-plugin.js resource azuread v5.
|
|
14
|
+
"install": "node scripts/install-pulumi-plugin.js resource azuread v5.23.0-alpha.1654861096+b6263bab"
|
|
15
15
|
},
|
|
16
16
|
"dependencies": {
|
|
17
17
|
"@pulumi/pulumi": "^3.0.0"
|
package/package.json.dev
CHANGED
|
@@ -1,6 +1,6 @@
|
|
|
1
1
|
{
|
|
2
2
|
"name": "@pulumi/azuread",
|
|
3
|
-
"version": "v5.
|
|
3
|
+
"version": "v5.23.0-alpha.1654861096+b6263bab",
|
|
4
4
|
"description": "A Pulumi package for creating and managing azuread cloud resources.",
|
|
5
5
|
"keywords": [
|
|
6
6
|
"pulumi",
|
|
@@ -11,7 +11,7 @@
|
|
|
11
11
|
"license": "Apache-2.0",
|
|
12
12
|
"scripts": {
|
|
13
13
|
"build": "tsc",
|
|
14
|
-
"install": "node scripts/install-pulumi-plugin.js resource azuread v5.
|
|
14
|
+
"install": "node scripts/install-pulumi-plugin.js resource azuread v5.23.0-alpha.1654861096+b6263bab"
|
|
15
15
|
},
|
|
16
16
|
"dependencies": {
|
|
17
17
|
"@pulumi/pulumi": "^3.0.0"
|
package/provider.d.ts
CHANGED
|
@@ -42,6 +42,16 @@ export declare class Provider extends pulumi.ProviderResource {
|
|
|
42
42
|
* The path to a custom endpoint for Managed Identity - in most circumstances this should be detected automatically
|
|
43
43
|
*/
|
|
44
44
|
readonly msiEndpoint: pulumi.Output<string | undefined>;
|
|
45
|
+
/**
|
|
46
|
+
* The bearer token for the request to the OIDC provider. For use when authenticating as a Service Principal using OpenID
|
|
47
|
+
* Connect.
|
|
48
|
+
*/
|
|
49
|
+
readonly oidcRequestToken: pulumi.Output<string | undefined>;
|
|
50
|
+
/**
|
|
51
|
+
* The URL for the OIDC provider from which to request an ID token. For use when authenticating as a Service Principal
|
|
52
|
+
* using OpenID Connect.
|
|
53
|
+
*/
|
|
54
|
+
readonly oidcRequestUrl: pulumi.Output<string | undefined>;
|
|
45
55
|
/**
|
|
46
56
|
* A GUID/UUID that is registered with Microsoft to facilitate partner resource usage attribution
|
|
47
57
|
*/
|
|
@@ -98,6 +108,16 @@ export interface ProviderArgs {
|
|
|
98
108
|
* The path to a custom endpoint for Managed Identity - in most circumstances this should be detected automatically
|
|
99
109
|
*/
|
|
100
110
|
msiEndpoint?: pulumi.Input<string>;
|
|
111
|
+
/**
|
|
112
|
+
* The bearer token for the request to the OIDC provider. For use when authenticating as a Service Principal using OpenID
|
|
113
|
+
* Connect.
|
|
114
|
+
*/
|
|
115
|
+
oidcRequestToken?: pulumi.Input<string>;
|
|
116
|
+
/**
|
|
117
|
+
* The URL for the OIDC provider from which to request an ID token. For use when authenticating as a Service Principal
|
|
118
|
+
* using OpenID Connect.
|
|
119
|
+
*/
|
|
120
|
+
oidcRequestUrl?: pulumi.Input<string>;
|
|
101
121
|
/**
|
|
102
122
|
* A GUID/UUID that is registered with Microsoft to facilitate partner resource usage attribution
|
|
103
123
|
*/
|
|
@@ -114,4 +134,8 @@ export interface ProviderArgs {
|
|
|
114
134
|
* Allow Managed Identity to be used for Authentication
|
|
115
135
|
*/
|
|
116
136
|
useMsi?: pulumi.Input<boolean>;
|
|
137
|
+
/**
|
|
138
|
+
* Allow OpenID Connect to be used for authentication
|
|
139
|
+
*/
|
|
140
|
+
useOidc?: pulumi.Input<boolean>;
|
|
117
141
|
}
|
package/provider.js
CHANGED
|
@@ -32,10 +32,13 @@ class Provider extends pulumi.ProviderResource {
|
|
|
32
32
|
resourceInputs["disableTerraformPartnerId"] = pulumi.output(args ? args.disableTerraformPartnerId : undefined).apply(JSON.stringify);
|
|
33
33
|
resourceInputs["environment"] = (_a = (args ? args.environment : undefined)) !== null && _a !== void 0 ? _a : (utilities.getEnv("ARM_ENVIRONMENT") || "public");
|
|
34
34
|
resourceInputs["msiEndpoint"] = (_b = (args ? args.msiEndpoint : undefined)) !== null && _b !== void 0 ? _b : utilities.getEnv("ARM_MSI_ENDPOINT");
|
|
35
|
+
resourceInputs["oidcRequestToken"] = args ? args.oidcRequestToken : undefined;
|
|
36
|
+
resourceInputs["oidcRequestUrl"] = args ? args.oidcRequestUrl : undefined;
|
|
35
37
|
resourceInputs["partnerId"] = args ? args.partnerId : undefined;
|
|
36
38
|
resourceInputs["tenantId"] = args ? args.tenantId : undefined;
|
|
37
39
|
resourceInputs["useCli"] = pulumi.output(args ? args.useCli : undefined).apply(JSON.stringify);
|
|
38
40
|
resourceInputs["useMsi"] = pulumi.output((_c = (args ? args.useMsi : undefined)) !== null && _c !== void 0 ? _c : (utilities.getEnvBoolean("ARM_USE_MSI") || false)).apply(JSON.stringify);
|
|
41
|
+
resourceInputs["useOidc"] = pulumi.output(args ? args.useOidc : undefined).apply(JSON.stringify);
|
|
39
42
|
}
|
|
40
43
|
opts = pulumi.mergeOptions(utilities.resourceOptsDefaults(), opts);
|
|
41
44
|
super(Provider.__pulumiType, name, resourceInputs, opts);
|
package/provider.js.map
CHANGED
|
@@ -1 +1 @@
|
|
|
1
|
-
{"version":3,"file":"provider.js","sourceRoot":"","sources":["../provider.ts"],"names":[],"mappings":";AAAA,wFAAwF;AACxF,iFAAiF;;;AAEjF,yCAAyC;AACzC,yCAAyC;AAEzC;;;;;GAKG;AACH,MAAa,QAAS,SAAQ,MAAM,CAAC,gBAAgB;
|
|
1
|
+
{"version":3,"file":"provider.js","sourceRoot":"","sources":["../provider.ts"],"names":[],"mappings":";AAAA,wFAAwF;AACxF,iFAAiF;;;AAEjF,yCAAyC;AACzC,yCAAyC;AAEzC;;;;;GAKG;AACH,MAAa,QAAS,SAAQ,MAAM,CAAC,gBAAgB;IAiEjD;;;;;;OAMG;IACH,YAAY,IAAY,EAAE,IAAmB,EAAE,IAA6B;;QACxE,IAAI,cAAc,GAAkB,EAAE,CAAC;QACvC,IAAI,GAAG,IAAI,IAAI,EAAE,CAAC;QAClB;YACI,cAAc,CAAC,mBAAmB,CAAC,GAAG,IAAI,CAAC,CAAC,CAAC,IAAI,CAAC,iBAAiB,CAAC,CAAC,CAAC,SAAS,CAAC;YAChF,cAAc,CAAC,2BAA2B,CAAC,GAAG,IAAI,CAAC,CAAC,CAAC,IAAI,CAAC,yBAAyB,CAAC,CAAC,CAAC,SAAS,CAAC;YAChG,cAAc,CAAC,uBAAuB,CAAC,GAAG,IAAI,CAAC,CAAC,CAAC,IAAI,CAAC,qBAAqB,CAAC,CAAC,CAAC,SAAS,CAAC;YACxF,cAAc,CAAC,UAAU,CAAC,GAAG,IAAI,CAAC,CAAC,CAAC,IAAI,CAAC,QAAQ,CAAC,CAAC,CAAC,SAAS,CAAC;YAC9D,cAAc,CAAC,cAAc,CAAC,GAAG,IAAI,CAAC,CAAC,CAAC,IAAI,CAAC,YAAY,CAAC,CAAC,CAAC,SAAS,CAAC;YACtE,cAAc,CAAC,2BAA2B,CAAC,GAAG,MAAM,CAAC,MAAM,CAAC,IAAI,CAAC,CAAC,CAAC,IAAI,CAAC,yBAAyB,CAAC,CAAC,CAAC,SAAS,CAAC,CAAC,KAAK,CAAC,IAAI,CAAC,SAAS,CAAC,CAAC;YACrI,cAAc,CAAC,aAAa,CAAC,GAAG,MAAA,CAAC,IAAI,CAAC,CAAC,CAAC,IAAI,CAAC,WAAW,CAAC,CAAC,CAAC,SAAS,CAAC,mCAAI,CAAC,SAAS,CAAC,MAAM,CAAC,iBAAiB,CAAC,IAAI,QAAQ,CAAC,CAAC;YAC3H,cAAc,CAAC,aAAa,CAAC,GAAG,MAAA,CAAC,IAAI,CAAC,CAAC,CAAC,IAAI,CAAC,WAAW,CAAC,CAAC,CAAC,SAAS,CAAC,mCAAI,SAAS,CAAC,MAAM,CAAC,kBAAkB,CAAC,CAAC;YAC9G,cAAc,CAAC,kBAAkB,CAAC,GAAG,IAAI,CAAC,CAAC,CAAC,IAAI,CAAC,gBAAgB,CAAC,CAAC,CAAC,SAAS,CAAC;YAC9E,cAAc,CAAC,gBAAgB,CAAC,GAAG,IAAI,CAAC,CAAC,CAAC,IAAI,CAAC,cAAc,CAAC,CAAC,CAAC,SAAS,CAAC;YAC1E,cAAc,CAAC,WAAW,CAAC,GAAG,IAAI,CAAC,CAAC,CAAC,IAAI,CAAC,SAAS,CAAC,CAAC,CAAC,SAAS,CAAC;YAChE,cAAc,CAAC,UAAU,CAAC,GAAG,IAAI,CAAC,CAAC,CAAC,IAAI,CAAC,QAAQ,CAAC,CAAC,CAAC,SAAS,CAAC;YAC9D,cAAc,CAAC,QAAQ,CAAC,GAAG,MAAM,CAAC,MAAM,CAAC,IAAI,CAAC,CAAC,CAAC,IAAI,CAAC,MAAM,CAAC,CAAC,CAAC,SAAS,CAAC,CAAC,KAAK,CAAC,IAAI,CAAC,SAAS,CAAC,CAAC;YAC/F,cAAc,CAAC,QAAQ,CAAC,GAAG,MAAM,CAAC,MAAM,CAAC,MAAA,CAAC,IAAI,CAAC,CAAC,CAAC,IAAI,CAAC,MAAM,CAAC,CAAC,CAAC,SAAS,CAAC,mCAAI,CAAC,SAAS,CAAC,aAAa,CAAC,aAAa,CAAC,IAAI,KAAK,CAAC,CAAC,CAAC,KAAK,CAAC,IAAI,CAAC,SAAS,CAAC,CAAC;YACtJ,cAAc,CAAC,SAAS,CAAC,GAAG,MAAM,CAAC,MAAM,CAAC,IAAI,CAAC,CAAC,CAAC,IAAI,CAAC,OAAO,CAAC,CAAC,CAAC,SAAS,CAAC,CAAC,KAAK,CAAC,IAAI,CAAC,SAAS,CAAC,CAAC;SACpG;QACD,IAAI,GAAG,MAAM,CAAC,YAAY,CAAC,SAAS,CAAC,oBAAoB,EAAE,EAAE,IAAI,CAAC,CAAC;QACnE,KAAK,CAAC,QAAQ,CAAC,YAAY,EAAE,IAAI,EAAE,cAAc,EAAE,IAAI,CAAC,CAAC;IAC7D,CAAC;IA1FD;;;OAGG;IACI,MAAM,CAAC,UAAU,CAAC,GAAQ;QAC7B,IAAI,GAAG,KAAK,SAAS,IAAI,GAAG,KAAK,IAAI,EAAE;YACnC,OAAO,KAAK,CAAC;SAChB;QACD,OAAO,GAAG,CAAC,cAAc,CAAC,KAAK,QAAQ,CAAC,YAAY,CAAC;IACzD,CAAC;;AAbL,4BA+FC;AA9FG,gBAAgB;AACO,qBAAY,GAAG,SAAS,CAAC"}
|