@pulumi/gcp 6.15.0 → 6.15.1
This diff represents the content of publicly available package versions that have been released to one of the supported registries. The information contained in this diff is provided for informational purposes only and reflects changes between package versions as they appear in their respective public registries.
- package/billing/accountIamBinding.d.ts +105 -0
- package/billing/accountIamBinding.js +75 -0
- package/billing/accountIamBinding.js.map +1 -1
- package/billing/accountIamMember.d.ts +105 -0
- package/billing/accountIamMember.js +75 -0
- package/billing/accountIamMember.js.map +1 -1
- package/billing/accountIamPolicy.d.ts +99 -0
- package/billing/accountIamPolicy.js +75 -0
- package/billing/accountIamPolicy.js.map +1 -1
- package/cloudfunctions/functionIamBinding.d.ts +142 -0
- package/cloudfunctions/functionIamBinding.js +85 -0
- package/cloudfunctions/functionIamBinding.js.map +1 -1
- package/cloudfunctions/functionIamMember.d.ts +142 -0
- package/cloudfunctions/functionIamMember.js +85 -0
- package/cloudfunctions/functionIamMember.js.map +1 -1
- package/cloudfunctions/functionIamPolicy.d.ts +139 -0
- package/cloudfunctions/functionIamPolicy.js +85 -0
- package/cloudfunctions/functionIamPolicy.js.map +1 -1
- package/compute/backendServiceIamBinding.d.ts +79 -0
- package/compute/backendServiceIamBinding.js +25 -0
- package/compute/backendServiceIamBinding.js.map +1 -1
- package/compute/backendServiceIamMember.d.ts +79 -0
- package/compute/backendServiceIamMember.js +25 -0
- package/compute/backendServiceIamMember.js.map +1 -1
- package/compute/backendServiceIamPolicy.d.ts +64 -0
- package/compute/backendServiceIamPolicy.js +25 -0
- package/compute/backendServiceIamPolicy.js.map +1 -1
- package/compute/mangedSslCertificate.d.ts +157 -27
- package/compute/mangedSslCertificate.js +97 -0
- package/compute/mangedSslCertificate.js.map +1 -1
- package/compute/regionBackendServiceIamBinding.d.ts +100 -0
- package/compute/regionBackendServiceIamBinding.js +25 -0
- package/compute/regionBackendServiceIamBinding.js.map +1 -1
- package/compute/regionBackendServiceIamMember.d.ts +100 -0
- package/compute/regionBackendServiceIamMember.js +25 -0
- package/compute/regionBackendServiceIamMember.js.map +1 -1
- package/compute/regionBackendServiceIamPolicy.d.ts +85 -0
- package/compute/regionBackendServiceIamPolicy.js +25 -0
- package/compute/regionBackendServiceIamPolicy.js.map +1 -1
- package/datacatalog/tagTemplateIamBinding.d.ts +121 -0
- package/datacatalog/tagTemplateIamBinding.js +79 -0
- package/datacatalog/tagTemplateIamBinding.js.map +1 -1
- package/datacatalog/tagTemplateIamMember.d.ts +121 -0
- package/datacatalog/tagTemplateIamMember.js +79 -0
- package/datacatalog/tagTemplateIamMember.js.map +1 -1
- package/datacatalog/tagTemplateIamPolicy.d.ts +118 -0
- package/datacatalog/tagTemplateIamPolicy.js +79 -0
- package/datacatalog/tagTemplateIamPolicy.js.map +1 -1
- package/folder/iamAuditConfig.d.ts +200 -8
- package/folder/iamAuditConfig.js +183 -0
- package/folder/iamAuditConfig.js.map +1 -1
- package/folder/iammember.d.ts +225 -0
- package/folder/iammember.js +183 -0
- package/folder/iammember.js.map +1 -1
- package/folder/iampolicy.d.ts +213 -0
- package/folder/iampolicy.js +183 -0
- package/folder/iampolicy.js.map +1 -1
- package/kms/registry.d.ts +149 -18
- package/kms/registry.js +89 -0
- package/kms/registry.js.map +1 -1
- package/monitoring/getSecretVersion.d.ts +52 -0
- package/monitoring/getSecretVersion.js +14 -0
- package/monitoring/getSecretVersion.js.map +1 -1
- package/organizations/iammember.d.ts +228 -3
- package/organizations/iammember.js +186 -0
- package/organizations/iammember.js.map +1 -1
- package/organizations/iampolicy.d.ts +216 -3
- package/organizations/iampolicy.js +186 -0
- package/organizations/iampolicy.js.map +1 -1
- package/package.json +2 -2
- package/package.json.dev +2 -2
- package/sourcerepo/getRepository.d.ts +29 -0
- package/sourcerepo/getRepository.js +17 -0
- package/sourcerepo/getRepository.js.map +1 -1
- package/types/input.d.ts +77 -0
- package/types/output.d.ts +77 -0
|
@@ -1,4 +1,190 @@
|
|
|
1
1
|
import * as pulumi from "@pulumi/pulumi";
|
|
2
|
+
/**
|
|
3
|
+
* Four different resources help you manage your IAM policy for a organization. Each of these resources serves a different use case:
|
|
4
|
+
*
|
|
5
|
+
* * `gcp.organizations.IAMPolicy`: Authoritative. Sets the IAM policy for the organization and replaces any existing policy already attached.
|
|
6
|
+
* * `gcp.organizations.IAMBinding`: Authoritative for a given role. Updates the IAM policy to grant a role to a list of members. Other roles within the IAM policy for the organization are preserved.
|
|
7
|
+
* * `gcp.organizations.IAMMember`: Non-authoritative. Updates the IAM policy to grant a role to a new member. Other members for the role for the organization are preserved.
|
|
8
|
+
* * `gcp.organizations.IamAuditConfig`: Authoritative for a given service. Updates the IAM policy to enable audit logging for the given service.
|
|
9
|
+
*
|
|
10
|
+
* > **Note:** `gcp.organizations.IAMPolicy` **cannot** be used in conjunction with `gcp.organizations.IAMBinding`, `gcp.organizations.IAMMember`, or `gcp.organizations.IamAuditConfig` or they will fight over what your policy should be.
|
|
11
|
+
*
|
|
12
|
+
* > **Note:** `gcp.organizations.IAMBinding` resources **can be** used in conjunction with `gcp.organizations.IAMMember` resources **only if** they do not grant privilege to the same role.
|
|
13
|
+
*
|
|
14
|
+
* ## google\_organization\_iam\_policy
|
|
15
|
+
*
|
|
16
|
+
* !> **Warning:** New organizations have several default policies which will,
|
|
17
|
+
* without extreme caution, be **overwritten** by use of this resource.
|
|
18
|
+
* The safest alternative is to use multiple `gcp.organizations.IAMBinding`
|
|
19
|
+
* resources. This resource makes it easy to remove your own access to
|
|
20
|
+
* an organization, which will require a call to Google Support to have
|
|
21
|
+
* fixed, and can take multiple days to resolve.
|
|
22
|
+
*
|
|
23
|
+
* In general, this resource should only be used with organizations
|
|
24
|
+
* fully managed by this provider.I f you do use this resource,
|
|
25
|
+
* the best way to be sure that you are not making dangerous changes is to start
|
|
26
|
+
* by **importing** your existing policy, and examining the diff very closely.
|
|
27
|
+
*
|
|
28
|
+
* ```typescript
|
|
29
|
+
* import * as pulumi from "@pulumi/pulumi";
|
|
30
|
+
* import * as gcp from "@pulumi/gcp";
|
|
31
|
+
*
|
|
32
|
+
* const admin = gcp.organizations.getIAMPolicy({
|
|
33
|
+
* bindings: [{
|
|
34
|
+
* role: "roles/editor",
|
|
35
|
+
* members: ["user:jane@example.com"],
|
|
36
|
+
* }],
|
|
37
|
+
* });
|
|
38
|
+
* const organization = new gcp.organizations.IAMPolicy("organization", {
|
|
39
|
+
* orgId: "your-organization-id",
|
|
40
|
+
* policyData: admin.then(admin => admin.policyData),
|
|
41
|
+
* });
|
|
42
|
+
* ```
|
|
43
|
+
*
|
|
44
|
+
* With IAM Conditions:
|
|
45
|
+
*
|
|
46
|
+
* ```typescript
|
|
47
|
+
* import * as pulumi from "@pulumi/pulumi";
|
|
48
|
+
* import * as gcp from "@pulumi/gcp";
|
|
49
|
+
*
|
|
50
|
+
* const admin = pulumi.output(gcp.organizations.getIAMPolicy({
|
|
51
|
+
* bindings: [{
|
|
52
|
+
* condition: {
|
|
53
|
+
* description: "Expiring at midnight of 2019-12-31",
|
|
54
|
+
* expression: "request.time < timestamp(\"2020-01-01T00:00:00Z\")",
|
|
55
|
+
* title: "expires_after_2019_12_31",
|
|
56
|
+
* },
|
|
57
|
+
* members: ["user:jane@example.com"],
|
|
58
|
+
* role: "roles/editor",
|
|
59
|
+
* }],
|
|
60
|
+
* }));
|
|
61
|
+
* const organization = new gcp.organizations.IAMPolicy("organization", {
|
|
62
|
+
* orgId: "your-organization-id",
|
|
63
|
+
* policyData: admin.policyData,
|
|
64
|
+
* });
|
|
65
|
+
* ```
|
|
66
|
+
*
|
|
67
|
+
* ## google\_organization\_iam\_binding
|
|
68
|
+
*
|
|
69
|
+
* > **Note:** If `role` is set to `roles/owner` and you don't specify a user or service account you have access to in `members`, you can lock yourself out of your organization.
|
|
70
|
+
*
|
|
71
|
+
* ```typescript
|
|
72
|
+
* import * as pulumi from "@pulumi/pulumi";
|
|
73
|
+
* import * as gcp from "@pulumi/gcp";
|
|
74
|
+
*
|
|
75
|
+
* const organization = new gcp.organizations.IAMBinding("organization", {
|
|
76
|
+
* members: ["user:jane@example.com"],
|
|
77
|
+
* orgId: "your-organization-id",
|
|
78
|
+
* role: "roles/editor",
|
|
79
|
+
* });
|
|
80
|
+
* ```
|
|
81
|
+
*
|
|
82
|
+
* With IAM Conditions:
|
|
83
|
+
*
|
|
84
|
+
* ```typescript
|
|
85
|
+
* import * as pulumi from "@pulumi/pulumi";
|
|
86
|
+
* import * as gcp from "@pulumi/gcp";
|
|
87
|
+
*
|
|
88
|
+
* const organization = new gcp.organizations.IAMBinding("organization", {
|
|
89
|
+
* condition: {
|
|
90
|
+
* description: "Expiring at midnight of 2019-12-31",
|
|
91
|
+
* expression: "request.time < timestamp(\"2020-01-01T00:00:00Z\")",
|
|
92
|
+
* title: "expires_after_2019_12_31",
|
|
93
|
+
* },
|
|
94
|
+
* members: ["user:jane@example.com"],
|
|
95
|
+
* orgId: "your-organization-id",
|
|
96
|
+
* role: "roles/editor",
|
|
97
|
+
* });
|
|
98
|
+
* ```
|
|
99
|
+
*
|
|
100
|
+
* ## google\_organization\_iam\_member
|
|
101
|
+
*
|
|
102
|
+
* ```typescript
|
|
103
|
+
* import * as pulumi from "@pulumi/pulumi";
|
|
104
|
+
* import * as gcp from "@pulumi/gcp";
|
|
105
|
+
*
|
|
106
|
+
* const organization = new gcp.organizations.IAMMember("organization", {
|
|
107
|
+
* member: "user:jane@example.com",
|
|
108
|
+
* orgId: "your-organization-id",
|
|
109
|
+
* role: "roles/editor",
|
|
110
|
+
* });
|
|
111
|
+
* ```
|
|
112
|
+
*
|
|
113
|
+
* With IAM Conditions:
|
|
114
|
+
*
|
|
115
|
+
* ```typescript
|
|
116
|
+
* import * as pulumi from "@pulumi/pulumi";
|
|
117
|
+
* import * as gcp from "@pulumi/gcp";
|
|
118
|
+
*
|
|
119
|
+
* const organization = new gcp.organizations.IAMMember("organization", {
|
|
120
|
+
* condition: {
|
|
121
|
+
* description: "Expiring at midnight of 2019-12-31",
|
|
122
|
+
* expression: "request.time < timestamp(\"2020-01-01T00:00:00Z\")",
|
|
123
|
+
* title: "expires_after_2019_12_31",
|
|
124
|
+
* },
|
|
125
|
+
* member: "user:jane@example.com",
|
|
126
|
+
* orgId: "your-organization-id",
|
|
127
|
+
* role: "roles/editor",
|
|
128
|
+
* });
|
|
129
|
+
* ```
|
|
130
|
+
*
|
|
131
|
+
* ## google\_organization\_iam\_audit\_config
|
|
132
|
+
*
|
|
133
|
+
* ```typescript
|
|
134
|
+
* import * as pulumi from "@pulumi/pulumi";
|
|
135
|
+
* import * as gcp from "@pulumi/gcp";
|
|
136
|
+
*
|
|
137
|
+
* const organization = new gcp.organizations.IamAuditConfig("organization", {
|
|
138
|
+
* auditLogConfigs: [
|
|
139
|
+
* {
|
|
140
|
+
* logType: "ADMIN_READ",
|
|
141
|
+
* },
|
|
142
|
+
* {
|
|
143
|
+
* exemptedMembers: ["user:joebloggs@hashicorp.com"],
|
|
144
|
+
* logType: "DATA_READ",
|
|
145
|
+
* },
|
|
146
|
+
* ],
|
|
147
|
+
* orgId: "your-organization-id",
|
|
148
|
+
* service: "allServices",
|
|
149
|
+
* });
|
|
150
|
+
* ```
|
|
151
|
+
*
|
|
152
|
+
* ## Import
|
|
153
|
+
*
|
|
154
|
+
* IAM member imports use space-delimited identifiers; the resource in question, the role, and the account.
|
|
155
|
+
*
|
|
156
|
+
* This member resource can be imported using the `org_id`, role, and member e.g.
|
|
157
|
+
*
|
|
158
|
+
* ```sh
|
|
159
|
+
* $ pulumi import gcp:organizations/iAMPolicy:IAMPolicy my_organization "your-orgid roles/viewer user:foo@example.com"
|
|
160
|
+
* ```
|
|
161
|
+
*
|
|
162
|
+
* IAM binding imports use space-delimited identifiers; the resource in question and the role.
|
|
163
|
+
*
|
|
164
|
+
* This binding resource can be imported using the `org_id` and role, e.g.
|
|
165
|
+
*
|
|
166
|
+
* ```sh
|
|
167
|
+
* $ pulumi import gcp:organizations/iAMPolicy:IAMPolicy my_organization "your-org-id roles/viewer"
|
|
168
|
+
* ```
|
|
169
|
+
*
|
|
170
|
+
* IAM policy imports use the identifier of the resource in question.
|
|
171
|
+
*
|
|
172
|
+
* This policy resource can be imported using the `org_id`.
|
|
173
|
+
*
|
|
174
|
+
* ```sh
|
|
175
|
+
* $ pulumi import gcp:organizations/iAMPolicy:IAMPolicy my_organization your-org-id
|
|
176
|
+
* ```
|
|
177
|
+
*
|
|
178
|
+
* IAM audit config imports use the identifier of the resource in question and the service, e.g.
|
|
179
|
+
*
|
|
180
|
+
* ```sh
|
|
181
|
+
* $ pulumi import gcp:organizations/iAMPolicy:IAMPolicy my_organization "your-organization-id foo.googleapis.com"
|
|
182
|
+
* ```
|
|
183
|
+
*
|
|
184
|
+
* -> **Custom Roles**If you're importing a IAM resource with a custom role, make sure to use the
|
|
185
|
+
*
|
|
186
|
+
* full name of the custom role, e.g. `organizations/{{org_id}}/roles/{{role_id}}`.
|
|
187
|
+
*/
|
|
2
188
|
export declare class IAMPolicy extends pulumi.CustomResource {
|
|
3
189
|
/**
|
|
4
190
|
* Get an existing IAMPolicy resource's state with the given name, ID, and optional extra
|
|
@@ -15,11 +201,21 @@ export declare class IAMPolicy extends pulumi.CustomResource {
|
|
|
15
201
|
* when multiple copies of the Pulumi SDK have been loaded into the same process.
|
|
16
202
|
*/
|
|
17
203
|
static isInstance(obj: any): obj is IAMPolicy;
|
|
204
|
+
/**
|
|
205
|
+
* (Computed) The etag of the organization's IAM policy.
|
|
206
|
+
*/
|
|
18
207
|
readonly etag: pulumi.Output<string>;
|
|
19
208
|
/**
|
|
20
|
-
* The
|
|
209
|
+
* The organization ID. If not specified for `gcp.organizations.IAMBinding`, `gcp.organizations.IAMMember`, or `gcp.organizations.IamAuditConfig`, uses the ID of the organization configured with the provider.
|
|
210
|
+
* Required for `gcp.organizations.IAMPolicy` - you must explicitly set the organization, and it
|
|
211
|
+
* will not be inferred from the provider.
|
|
21
212
|
*/
|
|
22
213
|
readonly orgId: pulumi.Output<string>;
|
|
214
|
+
/**
|
|
215
|
+
* The `gcp.organizations.getIAMPolicy` data source that represents
|
|
216
|
+
* the IAM policy that will be applied to the organization. The policy will be
|
|
217
|
+
* merged with any existing policy applied to the organization.
|
|
218
|
+
*/
|
|
23
219
|
readonly policyData: pulumi.Output<string>;
|
|
24
220
|
/**
|
|
25
221
|
* Create a IAMPolicy resource with the given unique name, arguments, and options.
|
|
@@ -34,11 +230,21 @@ export declare class IAMPolicy extends pulumi.CustomResource {
|
|
|
34
230
|
* Input properties used for looking up and filtering IAMPolicy resources.
|
|
35
231
|
*/
|
|
36
232
|
export interface IAMPolicyState {
|
|
233
|
+
/**
|
|
234
|
+
* (Computed) The etag of the organization's IAM policy.
|
|
235
|
+
*/
|
|
37
236
|
etag?: pulumi.Input<string>;
|
|
38
237
|
/**
|
|
39
|
-
* The
|
|
238
|
+
* The organization ID. If not specified for `gcp.organizations.IAMBinding`, `gcp.organizations.IAMMember`, or `gcp.organizations.IamAuditConfig`, uses the ID of the organization configured with the provider.
|
|
239
|
+
* Required for `gcp.organizations.IAMPolicy` - you must explicitly set the organization, and it
|
|
240
|
+
* will not be inferred from the provider.
|
|
40
241
|
*/
|
|
41
242
|
orgId?: pulumi.Input<string>;
|
|
243
|
+
/**
|
|
244
|
+
* The `gcp.organizations.getIAMPolicy` data source that represents
|
|
245
|
+
* the IAM policy that will be applied to the organization. The policy will be
|
|
246
|
+
* merged with any existing policy applied to the organization.
|
|
247
|
+
*/
|
|
42
248
|
policyData?: pulumi.Input<string>;
|
|
43
249
|
}
|
|
44
250
|
/**
|
|
@@ -46,8 +252,15 @@ export interface IAMPolicyState {
|
|
|
46
252
|
*/
|
|
47
253
|
export interface IAMPolicyArgs {
|
|
48
254
|
/**
|
|
49
|
-
* The
|
|
255
|
+
* The organization ID. If not specified for `gcp.organizations.IAMBinding`, `gcp.organizations.IAMMember`, or `gcp.organizations.IamAuditConfig`, uses the ID of the organization configured with the provider.
|
|
256
|
+
* Required for `gcp.organizations.IAMPolicy` - you must explicitly set the organization, and it
|
|
257
|
+
* will not be inferred from the provider.
|
|
50
258
|
*/
|
|
51
259
|
orgId: pulumi.Input<string>;
|
|
260
|
+
/**
|
|
261
|
+
* The `gcp.organizations.getIAMPolicy` data source that represents
|
|
262
|
+
* the IAM policy that will be applied to the organization. The policy will be
|
|
263
|
+
* merged with any existing policy applied to the organization.
|
|
264
|
+
*/
|
|
52
265
|
policyData: pulumi.Input<string>;
|
|
53
266
|
}
|
|
@@ -5,6 +5,192 @@ Object.defineProperty(exports, "__esModule", { value: true });
|
|
|
5
5
|
exports.IAMPolicy = void 0;
|
|
6
6
|
const pulumi = require("@pulumi/pulumi");
|
|
7
7
|
const utilities = require("../utilities");
|
|
8
|
+
/**
|
|
9
|
+
* Four different resources help you manage your IAM policy for a organization. Each of these resources serves a different use case:
|
|
10
|
+
*
|
|
11
|
+
* * `gcp.organizations.IAMPolicy`: Authoritative. Sets the IAM policy for the organization and replaces any existing policy already attached.
|
|
12
|
+
* * `gcp.organizations.IAMBinding`: Authoritative for a given role. Updates the IAM policy to grant a role to a list of members. Other roles within the IAM policy for the organization are preserved.
|
|
13
|
+
* * `gcp.organizations.IAMMember`: Non-authoritative. Updates the IAM policy to grant a role to a new member. Other members for the role for the organization are preserved.
|
|
14
|
+
* * `gcp.organizations.IamAuditConfig`: Authoritative for a given service. Updates the IAM policy to enable audit logging for the given service.
|
|
15
|
+
*
|
|
16
|
+
* > **Note:** `gcp.organizations.IAMPolicy` **cannot** be used in conjunction with `gcp.organizations.IAMBinding`, `gcp.organizations.IAMMember`, or `gcp.organizations.IamAuditConfig` or they will fight over what your policy should be.
|
|
17
|
+
*
|
|
18
|
+
* > **Note:** `gcp.organizations.IAMBinding` resources **can be** used in conjunction with `gcp.organizations.IAMMember` resources **only if** they do not grant privilege to the same role.
|
|
19
|
+
*
|
|
20
|
+
* ## google\_organization\_iam\_policy
|
|
21
|
+
*
|
|
22
|
+
* !> **Warning:** New organizations have several default policies which will,
|
|
23
|
+
* without extreme caution, be **overwritten** by use of this resource.
|
|
24
|
+
* The safest alternative is to use multiple `gcp.organizations.IAMBinding`
|
|
25
|
+
* resources. This resource makes it easy to remove your own access to
|
|
26
|
+
* an organization, which will require a call to Google Support to have
|
|
27
|
+
* fixed, and can take multiple days to resolve.
|
|
28
|
+
*
|
|
29
|
+
* In general, this resource should only be used with organizations
|
|
30
|
+
* fully managed by this provider.I f you do use this resource,
|
|
31
|
+
* the best way to be sure that you are not making dangerous changes is to start
|
|
32
|
+
* by **importing** your existing policy, and examining the diff very closely.
|
|
33
|
+
*
|
|
34
|
+
* ```typescript
|
|
35
|
+
* import * as pulumi from "@pulumi/pulumi";
|
|
36
|
+
* import * as gcp from "@pulumi/gcp";
|
|
37
|
+
*
|
|
38
|
+
* const admin = gcp.organizations.getIAMPolicy({
|
|
39
|
+
* bindings: [{
|
|
40
|
+
* role: "roles/editor",
|
|
41
|
+
* members: ["user:jane@example.com"],
|
|
42
|
+
* }],
|
|
43
|
+
* });
|
|
44
|
+
* const organization = new gcp.organizations.IAMPolicy("organization", {
|
|
45
|
+
* orgId: "your-organization-id",
|
|
46
|
+
* policyData: admin.then(admin => admin.policyData),
|
|
47
|
+
* });
|
|
48
|
+
* ```
|
|
49
|
+
*
|
|
50
|
+
* With IAM Conditions:
|
|
51
|
+
*
|
|
52
|
+
* ```typescript
|
|
53
|
+
* import * as pulumi from "@pulumi/pulumi";
|
|
54
|
+
* import * as gcp from "@pulumi/gcp";
|
|
55
|
+
*
|
|
56
|
+
* const admin = pulumi.output(gcp.organizations.getIAMPolicy({
|
|
57
|
+
* bindings: [{
|
|
58
|
+
* condition: {
|
|
59
|
+
* description: "Expiring at midnight of 2019-12-31",
|
|
60
|
+
* expression: "request.time < timestamp(\"2020-01-01T00:00:00Z\")",
|
|
61
|
+
* title: "expires_after_2019_12_31",
|
|
62
|
+
* },
|
|
63
|
+
* members: ["user:jane@example.com"],
|
|
64
|
+
* role: "roles/editor",
|
|
65
|
+
* }],
|
|
66
|
+
* }));
|
|
67
|
+
* const organization = new gcp.organizations.IAMPolicy("organization", {
|
|
68
|
+
* orgId: "your-organization-id",
|
|
69
|
+
* policyData: admin.policyData,
|
|
70
|
+
* });
|
|
71
|
+
* ```
|
|
72
|
+
*
|
|
73
|
+
* ## google\_organization\_iam\_binding
|
|
74
|
+
*
|
|
75
|
+
* > **Note:** If `role` is set to `roles/owner` and you don't specify a user or service account you have access to in `members`, you can lock yourself out of your organization.
|
|
76
|
+
*
|
|
77
|
+
* ```typescript
|
|
78
|
+
* import * as pulumi from "@pulumi/pulumi";
|
|
79
|
+
* import * as gcp from "@pulumi/gcp";
|
|
80
|
+
*
|
|
81
|
+
* const organization = new gcp.organizations.IAMBinding("organization", {
|
|
82
|
+
* members: ["user:jane@example.com"],
|
|
83
|
+
* orgId: "your-organization-id",
|
|
84
|
+
* role: "roles/editor",
|
|
85
|
+
* });
|
|
86
|
+
* ```
|
|
87
|
+
*
|
|
88
|
+
* With IAM Conditions:
|
|
89
|
+
*
|
|
90
|
+
* ```typescript
|
|
91
|
+
* import * as pulumi from "@pulumi/pulumi";
|
|
92
|
+
* import * as gcp from "@pulumi/gcp";
|
|
93
|
+
*
|
|
94
|
+
* const organization = new gcp.organizations.IAMBinding("organization", {
|
|
95
|
+
* condition: {
|
|
96
|
+
* description: "Expiring at midnight of 2019-12-31",
|
|
97
|
+
* expression: "request.time < timestamp(\"2020-01-01T00:00:00Z\")",
|
|
98
|
+
* title: "expires_after_2019_12_31",
|
|
99
|
+
* },
|
|
100
|
+
* members: ["user:jane@example.com"],
|
|
101
|
+
* orgId: "your-organization-id",
|
|
102
|
+
* role: "roles/editor",
|
|
103
|
+
* });
|
|
104
|
+
* ```
|
|
105
|
+
*
|
|
106
|
+
* ## google\_organization\_iam\_member
|
|
107
|
+
*
|
|
108
|
+
* ```typescript
|
|
109
|
+
* import * as pulumi from "@pulumi/pulumi";
|
|
110
|
+
* import * as gcp from "@pulumi/gcp";
|
|
111
|
+
*
|
|
112
|
+
* const organization = new gcp.organizations.IAMMember("organization", {
|
|
113
|
+
* member: "user:jane@example.com",
|
|
114
|
+
* orgId: "your-organization-id",
|
|
115
|
+
* role: "roles/editor",
|
|
116
|
+
* });
|
|
117
|
+
* ```
|
|
118
|
+
*
|
|
119
|
+
* With IAM Conditions:
|
|
120
|
+
*
|
|
121
|
+
* ```typescript
|
|
122
|
+
* import * as pulumi from "@pulumi/pulumi";
|
|
123
|
+
* import * as gcp from "@pulumi/gcp";
|
|
124
|
+
*
|
|
125
|
+
* const organization = new gcp.organizations.IAMMember("organization", {
|
|
126
|
+
* condition: {
|
|
127
|
+
* description: "Expiring at midnight of 2019-12-31",
|
|
128
|
+
* expression: "request.time < timestamp(\"2020-01-01T00:00:00Z\")",
|
|
129
|
+
* title: "expires_after_2019_12_31",
|
|
130
|
+
* },
|
|
131
|
+
* member: "user:jane@example.com",
|
|
132
|
+
* orgId: "your-organization-id",
|
|
133
|
+
* role: "roles/editor",
|
|
134
|
+
* });
|
|
135
|
+
* ```
|
|
136
|
+
*
|
|
137
|
+
* ## google\_organization\_iam\_audit\_config
|
|
138
|
+
*
|
|
139
|
+
* ```typescript
|
|
140
|
+
* import * as pulumi from "@pulumi/pulumi";
|
|
141
|
+
* import * as gcp from "@pulumi/gcp";
|
|
142
|
+
*
|
|
143
|
+
* const organization = new gcp.organizations.IamAuditConfig("organization", {
|
|
144
|
+
* auditLogConfigs: [
|
|
145
|
+
* {
|
|
146
|
+
* logType: "ADMIN_READ",
|
|
147
|
+
* },
|
|
148
|
+
* {
|
|
149
|
+
* exemptedMembers: ["user:joebloggs@hashicorp.com"],
|
|
150
|
+
* logType: "DATA_READ",
|
|
151
|
+
* },
|
|
152
|
+
* ],
|
|
153
|
+
* orgId: "your-organization-id",
|
|
154
|
+
* service: "allServices",
|
|
155
|
+
* });
|
|
156
|
+
* ```
|
|
157
|
+
*
|
|
158
|
+
* ## Import
|
|
159
|
+
*
|
|
160
|
+
* IAM member imports use space-delimited identifiers; the resource in question, the role, and the account.
|
|
161
|
+
*
|
|
162
|
+
* This member resource can be imported using the `org_id`, role, and member e.g.
|
|
163
|
+
*
|
|
164
|
+
* ```sh
|
|
165
|
+
* $ pulumi import gcp:organizations/iAMPolicy:IAMPolicy my_organization "your-orgid roles/viewer user:foo@example.com"
|
|
166
|
+
* ```
|
|
167
|
+
*
|
|
168
|
+
* IAM binding imports use space-delimited identifiers; the resource in question and the role.
|
|
169
|
+
*
|
|
170
|
+
* This binding resource can be imported using the `org_id` and role, e.g.
|
|
171
|
+
*
|
|
172
|
+
* ```sh
|
|
173
|
+
* $ pulumi import gcp:organizations/iAMPolicy:IAMPolicy my_organization "your-org-id roles/viewer"
|
|
174
|
+
* ```
|
|
175
|
+
*
|
|
176
|
+
* IAM policy imports use the identifier of the resource in question.
|
|
177
|
+
*
|
|
178
|
+
* This policy resource can be imported using the `org_id`.
|
|
179
|
+
*
|
|
180
|
+
* ```sh
|
|
181
|
+
* $ pulumi import gcp:organizations/iAMPolicy:IAMPolicy my_organization your-org-id
|
|
182
|
+
* ```
|
|
183
|
+
*
|
|
184
|
+
* IAM audit config imports use the identifier of the resource in question and the service, e.g.
|
|
185
|
+
*
|
|
186
|
+
* ```sh
|
|
187
|
+
* $ pulumi import gcp:organizations/iAMPolicy:IAMPolicy my_organization "your-organization-id foo.googleapis.com"
|
|
188
|
+
* ```
|
|
189
|
+
*
|
|
190
|
+
* -> **Custom Roles**If you're importing a IAM resource with a custom role, make sure to use the
|
|
191
|
+
*
|
|
192
|
+
* full name of the custom role, e.g. `organizations/{{org_id}}/roles/{{role_id}}`.
|
|
193
|
+
*/
|
|
8
194
|
class IAMPolicy extends pulumi.CustomResource {
|
|
9
195
|
constructor(name, argsOrState, opts) {
|
|
10
196
|
let resourceInputs = {};
|
|
@@ -1 +1 @@
|
|
|
1
|
-
{"version":3,"file":"iampolicy.js","sourceRoot":"","sources":["../../organizations/iampolicy.ts"],"names":[],"mappings":";AAAA,wFAAwF;AACxF,iFAAiF;;;AAEjF,yCAAyC;AACzC,0CAA0C;AAE1C,MAAa,SAAU,SAAQ,MAAM,CAAC,cAAc;
|
|
1
|
+
{"version":3,"file":"iampolicy.js","sourceRoot":"","sources":["../../organizations/iampolicy.ts"],"names":[],"mappings":";AAAA,wFAAwF;AACxF,iFAAiF;;;AAEjF,yCAAyC;AACzC,0CAA0C;AAE1C;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;GAyLG;AACH,MAAa,SAAU,SAAQ,MAAM,CAAC,cAAc;IAqDhD,YAAY,IAAY,EAAE,WAA4C,EAAE,IAAmC;QACvG,IAAI,cAAc,GAAkB,EAAE,CAAC;QACvC,IAAI,GAAG,IAAI,IAAI,EAAE,CAAC;QAClB,IAAI,IAAI,CAAC,EAAE,EAAE;YACT,MAAM,KAAK,GAAG,WAAyC,CAAC;YACxD,cAAc,CAAC,MAAM,CAAC,GAAG,KAAK,CAAC,CAAC,CAAC,KAAK,CAAC,IAAI,CAAC,CAAC,CAAC,SAAS,CAAC;YACxD,cAAc,CAAC,OAAO,CAAC,GAAG,KAAK,CAAC,CAAC,CAAC,KAAK,CAAC,KAAK,CAAC,CAAC,CAAC,SAAS,CAAC;YAC1D,cAAc,CAAC,YAAY,CAAC,GAAG,KAAK,CAAC,CAAC,CAAC,KAAK,CAAC,UAAU,CAAC,CAAC,CAAC,SAAS,CAAC;SACvE;aAAM;YACH,MAAM,IAAI,GAAG,WAAwC,CAAC;YACtD,IAAI,CAAC,CAAC,IAAI,IAAI,IAAI,CAAC,KAAK,KAAK,SAAS,CAAC,IAAI,CAAC,IAAI,CAAC,GAAG,EAAE;gBAClD,MAAM,IAAI,KAAK,CAAC,mCAAmC,CAAC,CAAC;aACxD;YACD,IAAI,CAAC,CAAC,IAAI,IAAI,IAAI,CAAC,UAAU,KAAK,SAAS,CAAC,IAAI,CAAC,IAAI,CAAC,GAAG,EAAE;gBACvD,MAAM,IAAI,KAAK,CAAC,wCAAwC,CAAC,CAAC;aAC7D;YACD,cAAc,CAAC,OAAO,CAAC,GAAG,IAAI,CAAC,CAAC,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC,CAAC,SAAS,CAAC;YACxD,cAAc,CAAC,YAAY,CAAC,GAAG,IAAI,CAAC,CAAC,CAAC,IAAI,CAAC,UAAU,CAAC,CAAC,CAAC,SAAS,CAAC;YAClE,cAAc,CAAC,MAAM,CAAC,GAAG,SAAS,CAAC,OAAO,CAAC;SAC9C;QACD,IAAI,GAAG,MAAM,CAAC,YAAY,CAAC,SAAS,CAAC,oBAAoB,EAAE,EAAE,IAAI,CAAC,CAAC;QACnE,KAAK,CAAC,SAAS,CAAC,YAAY,EAAE,IAAI,EAAE,cAAc,EAAE,IAAI,CAAC,CAAC;IAC9D,CAAC;IA1ED;;;;;;;;OAQG;IACI,MAAM,CAAC,GAAG,CAAC,IAAY,EAAE,EAA2B,EAAE,KAAsB,EAAE,IAAmC;QACpH,OAAO,IAAI,SAAS,CAAC,IAAI,EAAO,KAAK,kCAAO,IAAI,KAAE,EAAE,EAAE,EAAE,IAAG,CAAC;IAChE,CAAC;IAKD;;;OAGG;IACI,MAAM,CAAC,UAAU,CAAC,GAAQ;QAC7B,IAAI,GAAG,KAAK,SAAS,IAAI,GAAG,KAAK,IAAI,EAAE;YACnC,OAAO,KAAK,CAAC;SAChB;QACD,OAAO,GAAG,CAAC,cAAc,CAAC,KAAK,SAAS,CAAC,YAAY,CAAC;IAC1D,CAAC;;AA1BL,8BA4EC;AA9DG,gBAAgB;AACO,sBAAY,GAAG,uCAAuC,CAAC"}
|
package/package.json
CHANGED
|
@@ -1,6 +1,6 @@
|
|
|
1
1
|
{
|
|
2
2
|
"name": "@pulumi/gcp",
|
|
3
|
-
"version": "v6.15.
|
|
3
|
+
"version": "v6.15.1",
|
|
4
4
|
"description": "A Pulumi package for creating and managing Google Cloud Platform resources.",
|
|
5
5
|
"keywords": [
|
|
6
6
|
"pulumi",
|
|
@@ -11,7 +11,7 @@
|
|
|
11
11
|
"license": "Apache-2.0",
|
|
12
12
|
"scripts": {
|
|
13
13
|
"build": "tsc",
|
|
14
|
-
"install": "node scripts/install-pulumi-plugin.js resource gcp v6.15.
|
|
14
|
+
"install": "node scripts/install-pulumi-plugin.js resource gcp v6.15.1"
|
|
15
15
|
},
|
|
16
16
|
"dependencies": {
|
|
17
17
|
"@pulumi/pulumi": "^3.0.0",
|
package/package.json.dev
CHANGED
|
@@ -1,6 +1,6 @@
|
|
|
1
1
|
{
|
|
2
2
|
"name": "@pulumi/gcp",
|
|
3
|
-
"version": "v6.15.
|
|
3
|
+
"version": "v6.15.1",
|
|
4
4
|
"description": "A Pulumi package for creating and managing Google Cloud Platform resources.",
|
|
5
5
|
"keywords": [
|
|
6
6
|
"pulumi",
|
|
@@ -11,7 +11,7 @@
|
|
|
11
11
|
"license": "Apache-2.0",
|
|
12
12
|
"scripts": {
|
|
13
13
|
"build": "tsc",
|
|
14
|
-
"install": "node scripts/install-pulumi-plugin.js resource gcp v6.15.
|
|
14
|
+
"install": "node scripts/install-pulumi-plugin.js resource gcp v6.15.1"
|
|
15
15
|
},
|
|
16
16
|
"dependencies": {
|
|
17
17
|
"@pulumi/pulumi": "^3.0.0",
|
|
@@ -1,11 +1,34 @@
|
|
|
1
1
|
import * as pulumi from "@pulumi/pulumi";
|
|
2
2
|
import { output as outputs } from "../types";
|
|
3
|
+
/**
|
|
4
|
+
* Get infomation about an existing Google Cloud Source Repository.
|
|
5
|
+
* For more information see [the official documentation](https://cloud.google.com/source-repositories)
|
|
6
|
+
* and
|
|
7
|
+
* [API](https://cloud.google.com/source-repositories/docs/reference/rest/v1/projects.repos).
|
|
8
|
+
*
|
|
9
|
+
* ## Example Usage
|
|
10
|
+
*
|
|
11
|
+
* ```typescript
|
|
12
|
+
* import * as pulumi from "@pulumi/pulumi";
|
|
13
|
+
* import * as gcp from "@pulumi/gcp";
|
|
14
|
+
*
|
|
15
|
+
* const my_repo = pulumi.output(gcp.sourcerepo.getRepository({
|
|
16
|
+
* name: "my-repository",
|
|
17
|
+
* }));
|
|
18
|
+
* ```
|
|
19
|
+
*/
|
|
3
20
|
export declare function getRepository(args: GetRepositoryArgs, opts?: pulumi.InvokeOptions): Promise<GetRepositoryResult>;
|
|
4
21
|
/**
|
|
5
22
|
* A collection of arguments for invoking getRepository.
|
|
6
23
|
*/
|
|
7
24
|
export interface GetRepositoryArgs {
|
|
25
|
+
/**
|
|
26
|
+
* Resource name of the repository. The repo name may contain slashes. eg, `name/with/slash`
|
|
27
|
+
*/
|
|
8
28
|
name: string;
|
|
29
|
+
/**
|
|
30
|
+
* The ID of the project in which the resource belongs. If it is not provided, the provider project is used.
|
|
31
|
+
*/
|
|
9
32
|
project?: string;
|
|
10
33
|
}
|
|
11
34
|
/**
|
|
@@ -27,6 +50,12 @@ export declare function getRepositoryOutput(args: GetRepositoryOutputArgs, opts?
|
|
|
27
50
|
* A collection of arguments for invoking getRepository.
|
|
28
51
|
*/
|
|
29
52
|
export interface GetRepositoryOutputArgs {
|
|
53
|
+
/**
|
|
54
|
+
* Resource name of the repository. The repo name may contain slashes. eg, `name/with/slash`
|
|
55
|
+
*/
|
|
30
56
|
name: pulumi.Input<string>;
|
|
57
|
+
/**
|
|
58
|
+
* The ID of the project in which the resource belongs. If it is not provided, the provider project is used.
|
|
59
|
+
*/
|
|
31
60
|
project?: pulumi.Input<string>;
|
|
32
61
|
}
|
|
@@ -5,6 +5,23 @@ Object.defineProperty(exports, "__esModule", { value: true });
|
|
|
5
5
|
exports.getRepositoryOutput = exports.getRepository = void 0;
|
|
6
6
|
const pulumi = require("@pulumi/pulumi");
|
|
7
7
|
const utilities = require("../utilities");
|
|
8
|
+
/**
|
|
9
|
+
* Get infomation about an existing Google Cloud Source Repository.
|
|
10
|
+
* For more information see [the official documentation](https://cloud.google.com/source-repositories)
|
|
11
|
+
* and
|
|
12
|
+
* [API](https://cloud.google.com/source-repositories/docs/reference/rest/v1/projects.repos).
|
|
13
|
+
*
|
|
14
|
+
* ## Example Usage
|
|
15
|
+
*
|
|
16
|
+
* ```typescript
|
|
17
|
+
* import * as pulumi from "@pulumi/pulumi";
|
|
18
|
+
* import * as gcp from "@pulumi/gcp";
|
|
19
|
+
*
|
|
20
|
+
* const my_repo = pulumi.output(gcp.sourcerepo.getRepository({
|
|
21
|
+
* name: "my-repository",
|
|
22
|
+
* }));
|
|
23
|
+
* ```
|
|
24
|
+
*/
|
|
8
25
|
function getRepository(args, opts) {
|
|
9
26
|
if (!opts) {
|
|
10
27
|
opts = {};
|
|
@@ -1 +1 @@
|
|
|
1
|
-
{"version":3,"file":"getRepository.js","sourceRoot":"","sources":["../../sourcerepo/getRepository.ts"],"names":[],"mappings":";AAAA,wFAAwF;AACxF,iFAAiF;;;AAEjF,yCAAyC;AAEzC,0CAA0C;AAE1C,SAAgB,aAAa,CAAC,IAAuB,EAAE,IAA2B;IAC9E,IAAI,CAAC,IAAI,EAAE;QACP,IAAI,GAAG,EAAE,CAAA;KACZ;IAED,IAAI,GAAG,MAAM,CAAC,YAAY,CAAC,SAAS,CAAC,oBAAoB,EAAE,EAAE,IAAI,CAAC,CAAC;IACnE,OAAO,MAAM,CAAC,OAAO,CAAC,MAAM,CAAC,4CAA4C,EAAE;QACvE,MAAM,EAAE,IAAI,CAAC,IAAI;QACjB,SAAS,EAAE,IAAI,CAAC,OAAO;KAC1B,EAAE,IAAI,CAAC,CAAC;AACb,CAAC;AAVD,sCAUC;
|
|
1
|
+
{"version":3,"file":"getRepository.js","sourceRoot":"","sources":["../../sourcerepo/getRepository.ts"],"names":[],"mappings":";AAAA,wFAAwF;AACxF,iFAAiF;;;AAEjF,yCAAyC;AAEzC,0CAA0C;AAE1C;;;;;;;;;;;;;;;;GAgBG;AACH,SAAgB,aAAa,CAAC,IAAuB,EAAE,IAA2B;IAC9E,IAAI,CAAC,IAAI,EAAE;QACP,IAAI,GAAG,EAAE,CAAA;KACZ;IAED,IAAI,GAAG,MAAM,CAAC,YAAY,CAAC,SAAS,CAAC,oBAAoB,EAAE,EAAE,IAAI,CAAC,CAAC;IACnE,OAAO,MAAM,CAAC,OAAO,CAAC,MAAM,CAAC,4CAA4C,EAAE;QACvE,MAAM,EAAE,IAAI,CAAC,IAAI;QACjB,SAAS,EAAE,IAAI,CAAC,OAAO;KAC1B,EAAE,IAAI,CAAC,CAAC;AACb,CAAC;AAVD,sCAUC;AA+BD,SAAgB,mBAAmB,CAAC,IAA6B,EAAE,IAA2B;IAC1F,OAAO,MAAM,CAAC,MAAM,CAAC,IAAI,CAAC,CAAC,KAAK,CAAC,CAAC,CAAC,EAAE,CAAC,aAAa,CAAC,CAAC,EAAE,IAAI,CAAC,CAAC,CAAA;AACjE,CAAC;AAFD,kDAEC"}
|