@volcengine/pulumi-volcenginecc 0.0.5 → 0.0.6

package/vke/getPermission.d.ts

@@ -0,0 +1,108 @@
+import * as pulumi from "@pulumi/pulumi";
+/**
+ * Data Source schema for Volcengine::VKE::Permission
+ */
+export declare function getPermission(args: GetPermissionArgs, opts?: pulumi.InvokeOptions): Promise<GetPermissionResult>;
+/**
+ * A collection of arguments for invoking getPermission.
+ */
+export interface GetPermissionArgs {
+    /**
+     * Uniquely identifies the resource.
+     */
+    id: string;
+}
+/**
+ * A collection of values returned by getPermission.
+ */
+export interface GetPermissionResult {
+    /**
+     * RBAC 权限策略资源被授权的时间。
+     */
+    readonly authorizedAt: string;
+    /**
+     * 授权者的 ID。可以是 IAM 用户 ID，也可以是 IAM 角色 ID。
+     */
+    readonly authorizerId: number;
+    /**
+     * 授权者名称
+     */
+    readonly authorizerName: string;
+    /**
+     * 授权者的类型，取值如下：User：IAM 用户。Role：IAM 角色。Account：账号。
+     */
+    readonly authorizerType: string;
+    /**
+     * 需要授权给 IAM 用户或角色的集群 ID。roleDomain为namespace或cluster时必须填写该参数值。
+     */
+    readonly clusterId: string;
+    /**
+     * RBAC 权限策略资源创建的时间。
+     */
+    readonly createdTime: string;
+    /**
+     * 被授权者的 ID。可以是 IAM 用户 ID，也可以是 IAM 角色 ID。
+     */
+    readonly granteeId: number;
+    /**
+     * 被授权者的类型，取值如下：User：IAM 用户。Role：IAM 角色。Account：账号。
+     */
+    readonly granteeType: string;
+    /**
+     * Uniquely identifies the resource.
+     */
+    readonly id: string;
+    /**
+     * 给被授权者授予的 RBAC 角色是否为自定义角色，取值如下：true：自定义角色。false：（默认值）系统预置的角色。
+     */
+    readonly isCustomRole: boolean;
+    /**
+     * RBAC 权限策略资源在 Kubernetes 中的对象名称。
+     */
+    readonly kubeRoleBindingName: string;
+    /**
+     * 授权详细消息。
+     */
+    readonly message: string;
+    /**
+     * 需要授权给 IAM 用户或角色的名空间名称。roleDomain等于namespace时必须填写该参数值。roleDomain不等于namespace时，填写该参数值不生效。
+     */
+    readonly namespace: string;
+    /**
+     * RBAC 权限策略资源 ID。
+     */
+    readonly permissionId: string;
+    /**
+     * 项目选择器
+     */
+    readonly projectSelector: string;
+    /**
+     * 撤销授权的时间。
+     */
+    readonly revokedAt: string;
+    /**
+     * 为 IAM 用户或角色授予的权限类型，取值如下：namespace：授予命名空间级别的权限。cluster：授予集群级别的权限。all_clusters：授予当前账号下全部集群级别的权限。
+     */
+    readonly roleDomain: string;
+    /**
+     * 给被授权者授予的 RBAC 角色名称。目前必须填写该参数。当roleDomain为all_clusters时，不可以自定义角色名称。
+     */
+    readonly roleName: string;
+    /**
+     * RBAC 权限访问策略资源的状态，取值如下：Success：授权成功。Failed：授权失败。Pending：授权中。PartialSuccess：部分授权成功。
+     */
+    readonly status: string;
+}
+/**
+ * Data Source schema for Volcengine::VKE::Permission
+ */
+export declare function getPermissionOutput(args: GetPermissionOutputArgs, opts?: pulumi.InvokeOutputOptions): pulumi.Output<GetPermissionResult>;
+/**
+ * A collection of arguments for invoking getPermission.
+ */
+export interface GetPermissionOutputArgs {
+    /**
+     * Uniquely identifies the resource.
+     */
+    id: pulumi.Input<string>;
+}

package/vke/getPermission.js

@@ -0,0 +1,28 @@
+"use strict";
+// *** WARNING: this file was generated by the Pulumi Terraform Bridge (tfgen) Tool. ***
+// *** Do not edit by hand unless you're certain you know what you are doing! ***
+Object.defineProperty(exports, "__esModule", { value: true });
+exports.getPermissionOutput = exports.getPermission = void 0;
+const pulumi = require("@pulumi/pulumi");
+const utilities = require("../utilities");
+/**
+ * Data Source schema for Volcengine::VKE::Permission
+ */
+function getPermission(args, opts) {
+    opts = pulumi.mergeOptions(utilities.resourceOptsDefaults(), opts || {});
+    return pulumi.runtime.invoke("volcenginecc:vke/getPermission:getPermission", {
+        "id": args.id,
+    }, opts);
+}
+exports.getPermission = getPermission;
+/**
+ * Data Source schema for Volcengine::VKE::Permission
+ */
+function getPermissionOutput(args, opts) {
+    opts = pulumi.mergeOptions(utilities.resourceOptsDefaults(), opts || {});
+    return pulumi.runtime.invokeOutput("volcenginecc:vke/getPermission:getPermission", {
+        "id": args.id,
+    }, opts);
+}
+exports.getPermissionOutput = getPermissionOutput;
+//# sourceMappingURL=getPermission.js.map

package/vke/getPermission.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"getPermission.js","sourceRoot":"","sources":["../../vke/getPermission.ts"],"names":[],"mappings":";AAAA,wFAAwF;AACxF,iFAAiF;;;AAEjF,yCAAyC;AACzC,0CAA0C;AAE1C;;GAEG;AACH,SAAgB,aAAa,CAAC,IAAuB,EAAE,IAA2B;IAC9E,IAAI,GAAG,MAAM,CAAC,YAAY,CAAC,SAAS,CAAC,oBAAoB,EAAE,EAAE,IAAI,IAAI,EAAE,CAAC,CAAC;IACzE,OAAO,MAAM,CAAC,OAAO,CAAC,MAAM,CAAC,8CAA8C,EAAE;QACzE,IAAI,EAAE,IAAI,CAAC,EAAE;KAChB,EAAE,IAAI,CAAC,CAAC;AACb,CAAC;AALD,sCAKC;AA6FD;;GAEG;AACH,SAAgB,mBAAmB,CAAC,IAA6B,EAAE,IAAiC;IAChG,IAAI,GAAG,MAAM,CAAC,YAAY,CAAC,SAAS,CAAC,oBAAoB,EAAE,EAAE,IAAI,IAAI,EAAE,CAAC,CAAC;IACzE,OAAO,MAAM,CAAC,OAAO,CAAC,YAAY,CAAC,8CAA8C,EAAE;QAC/E,IAAI,EAAE,IAAI,CAAC,EAAE;KAChB,EAAE,IAAI,CAAC,CAAC;AACb,CAAC;AALD,kDAKC"}

package/vke/getPermissions.d.ts

@@ -0,0 +1,22 @@
+import * as pulumi from "@pulumi/pulumi";
+/**
+ * Plural Data Source schema for Volcengine::VKE::Permission
+ */
+export declare function getPermissions(opts?: pulumi.InvokeOptions): Promise<GetPermissionsResult>;
+/**
+ * A collection of values returned by getPermissions.
+ */
+export interface GetPermissionsResult {
+    /**
+     * Uniquely identifies the data source.
+     */
+    readonly id: string;
+    /**
+     * Set of Resource Identifiers.
+     */
+    readonly ids: string[];
+}
+/**
+ * Plural Data Source schema for Volcengine::VKE::Permission
+ */
+export declare function getPermissionsOutput(opts?: pulumi.InvokeOutputOptions): pulumi.Output<GetPermissionsResult>;

package/vke/getPermissions.js

@@ -0,0 +1,24 @@
+"use strict";
+// *** WARNING: this file was generated by the Pulumi Terraform Bridge (tfgen) Tool. ***
+// *** Do not edit by hand unless you're certain you know what you are doing! ***
+Object.defineProperty(exports, "__esModule", { value: true });
+exports.getPermissionsOutput = exports.getPermissions = void 0;
+const pulumi = require("@pulumi/pulumi");
+const utilities = require("../utilities");
+/**
+ * Plural Data Source schema for Volcengine::VKE::Permission
+ */
+function getPermissions(opts) {
+    opts = pulumi.mergeOptions(utilities.resourceOptsDefaults(), opts || {});
+    return pulumi.runtime.invoke("volcenginecc:vke/getPermissions:getPermissions", {}, opts);
+}
+exports.getPermissions = getPermissions;
+/**
+ * Plural Data Source schema for Volcengine::VKE::Permission
+ */
+function getPermissionsOutput(opts) {
+    opts = pulumi.mergeOptions(utilities.resourceOptsDefaults(), opts || {});
+    return pulumi.runtime.invokeOutput("volcenginecc:vke/getPermissions:getPermissions", {}, opts);
+}
+exports.getPermissionsOutput = getPermissionsOutput;
+//# sourceMappingURL=getPermissions.js.map

package/vke/getPermissions.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"getPermissions.js","sourceRoot":"","sources":["../../vke/getPermissions.ts"],"names":[],"mappings":";AAAA,wFAAwF;AACxF,iFAAiF;;;AAEjF,yCAAyC;AACzC,0CAA0C;AAE1C;;GAEG;AACH,SAAgB,cAAc,CAAC,IAA2B;IACtD,IAAI,GAAG,MAAM,CAAC,YAAY,CAAC,SAAS,CAAC,oBAAoB,EAAE,EAAE,IAAI,IAAI,EAAE,CAAC,CAAC;IACzE,OAAO,MAAM,CAAC,OAAO,CAAC,MAAM,CAAC,gDAAgD,EAAE,EAC9E,EAAE,IAAI,CAAC,CAAC;AACb,CAAC;AAJD,wCAIC;AAeD;;GAEG;AACH,SAAgB,oBAAoB,CAAC,IAAiC;IAClE,IAAI,GAAG,MAAM,CAAC,YAAY,CAAC,SAAS,CAAC,oBAAoB,EAAE,EAAE,IAAI,IAAI,EAAE,CAAC,CAAC;IACzE,OAAO,MAAM,CAAC,OAAO,CAAC,YAAY,CAAC,gDAAgD,EAAE,EACpF,EAAE,IAAI,CAAC,CAAC;AACb,CAAC;AAJD,oDAIC"}

package/vke/index.d.ts

@@ -7,3 +7,12 @@ export declare const getAddonOutput: typeof import("./getAddon").getAddonOutput;
 export { GetAddonsResult } from "./getAddons";
 export declare const getAddons: typeof import("./getAddons").getAddons;
 export declare const getAddonsOutput: typeof import("./getAddons").getAddonsOutput;
+export { GetPermissionArgs, GetPermissionResult, GetPermissionOutputArgs } from "./getPermission";
+export declare const getPermission: typeof import("./getPermission").getPermission;
+export declare const getPermissionOutput: typeof import("./getPermission").getPermissionOutput;
+export { GetPermissionsResult } from "./getPermissions";
+export declare const getPermissions: typeof import("./getPermissions").getPermissions;
+export declare const getPermissionsOutput: typeof import("./getPermissions").getPermissionsOutput;
+export { PermissionArgs, PermissionState } from "./permission";
+export type Permission = import("./permission").Permission;
+export declare const Permission: typeof import("./permission").Permission;

package/vke/index.js

@@ -2,7 +2,7 @@
 // *** WARNING: this file was generated by the Pulumi Terraform Bridge (tfgen) Tool. ***
 // *** Do not edit by hand unless you're certain you know what you are doing! ***
 Object.defineProperty(exports, "__esModule", { value: true });
-exports.getAddonsOutput = exports.getAddons = exports.getAddonOutput = exports.getAddon = exports.Addon = void 0;
+exports.Permission = exports.getPermissionsOutput = exports.getPermissions = exports.getPermissionOutput = exports.getPermission = exports.getAddonsOutput = exports.getAddons = exports.getAddonOutput = exports.getAddon = exports.Addon = void 0;
 const pulumi = require("@pulumi/pulumi");
 const utilities = require("../utilities");
 exports.Addon = null;
@@ -13,16 +13,27 @@ utilities.lazyLoad(exports, ["getAddon", "getAddonOutput"], () => require("./get
 exports.getAddons = null;
 exports.getAddonsOutput = null;
 utilities.lazyLoad(exports, ["getAddons", "getAddonsOutput"], () => require("./getAddons"));
+exports.getPermission = null;
+exports.getPermissionOutput = null;
+utilities.lazyLoad(exports, ["getPermission", "getPermissionOutput"], () => require("./getPermission"));
+exports.getPermissions = null;
+exports.getPermissionsOutput = null;
+utilities.lazyLoad(exports, ["getPermissions", "getPermissionsOutput"], () => require("./getPermissions"));
+exports.Permission = null;
+utilities.lazyLoad(exports, ["Permission"], () => require("./permission"));
 const _module = {
     version: utilities.getVersion(),
     construct: (name, type, urn) => {
         switch (type) {
             case "volcenginecc:vke/addon:Addon":
                 return new exports.Addon(name, undefined, { urn });
+            case "volcenginecc:vke/permission:Permission":
+                return new exports.Permission(name, undefined, { urn });
             default:
                 throw new Error(`unknown resource type ${type}`);
         }
     },
 };
 pulumi.runtime.registerResourceModule("volcenginecc", "vke/addon", _module);
+pulumi.runtime.registerResourceModule("volcenginecc", "vke/permission", _module);
 //# sourceMappingURL=index.js.map

package/vke/index.js.map

@@ -1 +1 @@
-{"version":3,"file":"index.js","sourceRoot":"","sources":["../../vke/index.ts"],"names":[],"mappings":";AAAA,wFAAwF;AACxF,iFAAiF;;;AAEjF,yCAAyC;AACzC,0CAA0C;AAK7B,QAAA,KAAK,GAAmC,IAAW,CAAC;AACjE,SAAS,CAAC,QAAQ,CAAC,OAAO,EAAE,CAAC,OAAO,CAAC,EAAE,GAAG,EAAE,CAAC,OAAO,CAAC,SAAS,CAAC,CAAC,CAAC;AAGpD,QAAA,QAAQ,GAAyC,IAAW,CAAC;AAC7D,QAAA,cAAc,GAA+C,IAAW,CAAC;AACtF,SAAS,CAAC,QAAQ,CAAC,OAAO,EAAE,CAAC,UAAU,EAAC,gBAAgB,CAAC,EAAE,GAAG,EAAE,CAAC,OAAO,CAAC,YAAY,CAAC,CAAC,CAAC;AAG3E,QAAA,SAAS,GAA2C,IAAW,CAAC;AAChE,QAAA,eAAe,GAAiD,IAAW,CAAC;AACzF,SAAS,CAAC,QAAQ,CAAC,OAAO,EAAE,CAAC,WAAW,EAAC,iBAAiB,CAAC,EAAE,GAAG,EAAE,CAAC,OAAO,CAAC,aAAa,CAAC,CAAC,CAAC;AAG3F,MAAM,OAAO,GAAG;IACZ,OAAO,EAAE,SAAS,CAAC,UAAU,EAAE;IAC/B,SAAS,EAAE,CAAC,IAAY,EAAE,IAAY,EAAE,GAAW,EAAmB,EAAE;QACpE,QAAQ,IAAI,EAAE;YACV,KAAK,8BAA8B;gBAC/B,OAAO,IAAI,aAAK,CAAC,IAAI,EAAO,SAAS,EAAE,EAAE,GAAG,EAAE,CAAC,CAAA;YACnD;gBACI,MAAM,IAAI,KAAK,CAAC,yBAAyB,IAAI,EAAE,CAAC,CAAC;SACxD;IACL,CAAC;CACJ,CAAC;AACF,MAAM,CAAC,OAAO,CAAC,sBAAsB,CAAC,cAAc,EAAE,WAAW,EAAE,OAAO,CAAC,CAAA"}
+{"version":3,"file":"index.js","sourceRoot":"","sources":["../../vke/index.ts"],"names":[],"mappings":";AAAA,wFAAwF;AACxF,iFAAiF;;;AAEjF,yCAAyC;AACzC,0CAA0C;AAK7B,QAAA,KAAK,GAAmC,IAAW,CAAC;AACjE,SAAS,CAAC,QAAQ,CAAC,OAAO,EAAE,CAAC,OAAO,CAAC,EAAE,GAAG,EAAE,CAAC,OAAO,CAAC,SAAS,CAAC,CAAC,CAAC;AAGpD,QAAA,QAAQ,GAAyC,IAAW,CAAC;AAC7D,QAAA,cAAc,GAA+C,IAAW,CAAC;AACtF,SAAS,CAAC,QAAQ,CAAC,OAAO,EAAE,CAAC,UAAU,EAAC,gBAAgB,CAAC,EAAE,GAAG,EAAE,CAAC,OAAO,CAAC,YAAY,CAAC,CAAC,CAAC;AAG3E,QAAA,SAAS,GAA2C,IAAW,CAAC;AAChE,QAAA,eAAe,GAAiD,IAAW,CAAC;AACzF,SAAS,CAAC,QAAQ,CAAC,OAAO,EAAE,CAAC,WAAW,EAAC,iBAAiB,CAAC,EAAE,GAAG,EAAE,CAAC,OAAO,CAAC,aAAa,CAAC,CAAC,CAAC;AAG9E,QAAA,aAAa,GAAmD,IAAW,CAAC;AAC5E,QAAA,mBAAmB,GAAyD,IAAW,CAAC;AACrG,SAAS,CAAC,QAAQ,CAAC,OAAO,EAAE,CAAC,eAAe,EAAC,qBAAqB,CAAC,EAAE,GAAG,EAAE,CAAC,OAAO,CAAC,iBAAiB,CAAC,CAAC,CAAC;AAG1F,QAAA,cAAc,GAAqD,IAAW,CAAC;AAC/E,QAAA,oBAAoB,GAA2D,IAAW,CAAC;AACxG,SAAS,CAAC,QAAQ,CAAC,OAAO,EAAE,CAAC,gBAAgB,EAAC,sBAAsB,CAAC,EAAE,GAAG,EAAE,CAAC,OAAO,CAAC,kBAAkB,CAAC,CAAC,CAAC;AAI7F,QAAA,UAAU,GAA6C,IAAW,CAAC;AAChF,SAAS,CAAC,QAAQ,CAAC,OAAO,EAAE,CAAC,YAAY,CAAC,EAAE,GAAG,EAAE,CAAC,OAAO,CAAC,cAAc,CAAC,CAAC,CAAC;AAG3E,MAAM,OAAO,GAAG;IACZ,OAAO,EAAE,SAAS,CAAC,UAAU,EAAE;IAC/B,SAAS,EAAE,CAAC,IAAY,EAAE,IAAY,EAAE,GAAW,EAAmB,EAAE;QACpE,QAAQ,IAAI,EAAE;YACV,KAAK,8BAA8B;gBAC/B,OAAO,IAAI,aAAK,CAAC,IAAI,EAAO,SAAS,EAAE,EAAE,GAAG,EAAE,CAAC,CAAA;YACnD,KAAK,wCAAwC;gBACzC,OAAO,IAAI,kBAAU,CAAC,IAAI,EAAO,SAAS,EAAE,EAAE,GAAG,EAAE,CAAC,CAAA;YACxD;gBACI,MAAM,IAAI,KAAK,CAAC,yBAAyB,IAAI,EAAE,CAAC,CAAC;SACxD;IACL,CAAC;CACJ,CAAC;AACF,MAAM,CAAC,OAAO,CAAC,sBAAsB,CAAC,cAAc,EAAE,WAAW,EAAE,OAAO,CAAC,CAAA;AAC3E,MAAM,CAAC,OAAO,CAAC,sBAAsB,CAAC,cAAc,EAAE,gBAAgB,EAAE,OAAO,CAAC,CAAA"}

package/vke/permission.d.ts

@@ -0,0 +1,242 @@
+import * as pulumi from "@pulumi/pulumi";
+/**
+ * 容器服务提供集群 RBAC 授权功能，为 IAM 用户或角色授予 RBAC 访问权限，包括可访问的资源、权限的作用范围、预置的角色类型等，从而更好地管理集群的安全访问控制，满足企业用户细粒度的资源访问权限控制需求。
+ *
+ * ## Example Usage
+ *
+ * ```typescript
+ * import * as pulumi from "@pulumi/pulumi";
+ * import * as volcenginecc from "@volcengine/pulumi-volcenginecc";
+ *
+ * const vKEPermissionDemo = new volcenginecc.vke.Permission("VKEPermissionDemo", {
+ *     roleDomain: "namespace",
+ *     clusterId: "cd48m3cb1b2ba7l6ebgp0xxxxx",
+ *     namespace: "kube-public",
+ *     roleName: "vke:visitor",
+ *     isCustomRole: false,
+ *     granteeId: 59433888,
+ *     granteeType: "User",
+ * });
+ * ```
+ *
+ * ## Import
+ *
+ * ```sh
+ * $ pulumi import volcenginecc:vke/permission:Permission example "permission_id"
+ * ```
+ */
+export declare class Permission extends pulumi.CustomResource {
+    /**
+     * Get an existing Permission resource's state with the given name, ID, and optional extra
+     * properties used to qualify the lookup.
+     *
+     * @param name The _unique_ name of the resulting resource.
+     * @param id The _unique_ provider ID of the resource to lookup.
+     * @param state Any extra arguments used during the lookup.
+     * @param opts Optional settings to control the behavior of the CustomResource.
+     */
+    static get(name: string, id: pulumi.Input<pulumi.ID>, state?: PermissionState, opts?: pulumi.CustomResourceOptions): Permission;
+    /**
+     * Returns true if the given object is an instance of Permission.  This is designed to work even
+     * when multiple copies of the Pulumi SDK have been loaded into the same process.
+     */
+    static isInstance(obj: any): obj is Permission;
+    /**
+     * RBAC 权限策略资源被授权的时间。
+     */
+    readonly authorizedAt: pulumi.Output<string>;
+    /**
+     * 授权者的 ID。可以是 IAM 用户 ID，也可以是 IAM 角色 ID。
+     */
+    readonly authorizerId: pulumi.Output<number>;
+    /**
+     * 授权者名称
+     */
+    readonly authorizerName: pulumi.Output<string>;
+    /**
+     * 授权者的类型，取值如下：User：IAM 用户。Role：IAM 角色。Account：账号。
+     */
+    readonly authorizerType: pulumi.Output<string>;
+    /**
+     * 需要授权给 IAM 用户或角色的集群 ID。roleDomain为namespace或cluster时必须填写该参数值。
+     */
+    readonly clusterId: pulumi.Output<string>;
+    /**
+     * RBAC 权限策略资源创建的时间。
+     */
+    readonly createdTime: pulumi.Output<string>;
+    /**
+     * 被授权者的 ID。可以是 IAM 用户 ID，也可以是 IAM 角色 ID。
+     */
+    readonly granteeId: pulumi.Output<number>;
+    /**
+     * 被授权者的类型，取值如下：User：IAM 用户。Role：IAM 角色。Account：账号。
+     */
+    readonly granteeType: pulumi.Output<string>;
+    /**
+     * 给被授权者授予的 RBAC 角色是否为自定义角色，取值如下：true：自定义角色。false：（默认值）系统预置的角色。
+     */
+    readonly isCustomRole: pulumi.Output<boolean>;
+    /**
+     * RBAC 权限策略资源在 Kubernetes 中的对象名称。
+     */
+    readonly kubeRoleBindingName: pulumi.Output<string>;
+    /**
+     * 授权详细消息。
+     */
+    readonly message: pulumi.Output<string>;
+    /**
+     * 需要授权给 IAM 用户或角色的名空间名称。roleDomain等于namespace时必须填写该参数值。roleDomain不等于namespace时，填写该参数值不生效。
+     */
+    readonly namespace: pulumi.Output<string>;
+    /**
+     * RBAC 权限策略资源 ID。
+     */
+    readonly permissionId: pulumi.Output<string>;
+    /**
+     * 项目选择器
+     */
+    readonly projectSelector: pulumi.Output<string>;
+    /**
+     * 撤销授权的时间。
+     */
+    readonly revokedAt: pulumi.Output<string>;
+    /**
+     * 为 IAM 用户或角色授予的权限类型，取值如下：namespace：授予命名空间级别的权限。cluster：授予集群级别的权限。all_clusters：授予当前账号下全部集群级别的权限。
+     */
+    readonly roleDomain: pulumi.Output<string>;
+    /**
+     * 给被授权者授予的 RBAC 角色名称。目前必须填写该参数。当roleDomain为all_clusters时，不可以自定义角色名称。
+     */
+    readonly roleName: pulumi.Output<string>;
+    /**
+     * RBAC 权限访问策略资源的状态，取值如下：Success：授权成功。Failed：授权失败。Pending：授权中。PartialSuccess：部分授权成功。
+     */
+    readonly status: pulumi.Output<string>;
+    /**
+     * Create a Permission resource with the given unique name, arguments, and options.
+     *
+     * @param name The _unique_ name of the resource.
+     * @param args The arguments to use to populate this resource's properties.
+     * @param opts A bag of options that control this resource's behavior.
+     */
+    constructor(name: string, args?: PermissionArgs, opts?: pulumi.CustomResourceOptions);
+}
+/**
+ * Input properties used for looking up and filtering Permission resources.
+ */
+export interface PermissionState {
+    /**
+     * RBAC 权限策略资源被授权的时间。
+     */
+    authorizedAt?: pulumi.Input<string>;
+    /**
+     * 授权者的 ID。可以是 IAM 用户 ID，也可以是 IAM 角色 ID。
+     */
+    authorizerId?: pulumi.Input<number>;
+    /**
+     * 授权者名称
+     */
+    authorizerName?: pulumi.Input<string>;
+    /**
+     * 授权者的类型，取值如下：User：IAM 用户。Role：IAM 角色。Account：账号。
+     */
+    authorizerType?: pulumi.Input<string>;
+    /**
+     * 需要授权给 IAM 用户或角色的集群 ID。roleDomain为namespace或cluster时必须填写该参数值。
+     */
+    clusterId?: pulumi.Input<string>;
+    /**
+     * RBAC 权限策略资源创建的时间。
+     */
+    createdTime?: pulumi.Input<string>;
+    /**
+     * 被授权者的 ID。可以是 IAM 用户 ID，也可以是 IAM 角色 ID。
+     */
+    granteeId?: pulumi.Input<number>;
+    /**
+     * 被授权者的类型，取值如下：User：IAM 用户。Role：IAM 角色。Account：账号。
+     */
+    granteeType?: pulumi.Input<string>;
+    /**
+     * 给被授权者授予的 RBAC 角色是否为自定义角色，取值如下：true：自定义角色。false：（默认值）系统预置的角色。
+     */
+    isCustomRole?: pulumi.Input<boolean>;
+    /**
+     * RBAC 权限策略资源在 Kubernetes 中的对象名称。
+     */
+    kubeRoleBindingName?: pulumi.Input<string>;
+    /**
+     * 授权详细消息。
+     */
+    message?: pulumi.Input<string>;
+    /**
+     * 需要授权给 IAM 用户或角色的名空间名称。roleDomain等于namespace时必须填写该参数值。roleDomain不等于namespace时，填写该参数值不生效。
+     */
+    namespace?: pulumi.Input<string>;
+    /**
+     * RBAC 权限策略资源 ID。
+     */
+    permissionId?: pulumi.Input<string>;
+    /**
+     * 项目选择器
+     */
+    projectSelector?: pulumi.Input<string>;
+    /**
+     * 撤销授权的时间。
+     */
+    revokedAt?: pulumi.Input<string>;
+    /**
+     * 为 IAM 用户或角色授予的权限类型，取值如下：namespace：授予命名空间级别的权限。cluster：授予集群级别的权限。all_clusters：授予当前账号下全部集群级别的权限。
+     */
+    roleDomain?: pulumi.Input<string>;
+    /**
+     * 给被授权者授予的 RBAC 角色名称。目前必须填写该参数。当roleDomain为all_clusters时，不可以自定义角色名称。
+     */
+    roleName?: pulumi.Input<string>;
+    /**
+     * RBAC 权限访问策略资源的状态，取值如下：Success：授权成功。Failed：授权失败。Pending：授权中。PartialSuccess：部分授权成功。
+     */
+    status?: pulumi.Input<string>;
+}
+/**
+ * The set of arguments for constructing a Permission resource.
+ */
+export interface PermissionArgs {
+    /**
+     * 授权者的 ID。可以是 IAM 用户 ID，也可以是 IAM 角色 ID。
+     */
+    authorizerId?: pulumi.Input<number>;
+    /**
+     * 授权者的类型，取值如下：User：IAM 用户。Role：IAM 角色。Account：账号。
+     */
+    authorizerType?: pulumi.Input<string>;
+    /**
+     * 需要授权给 IAM 用户或角色的集群 ID。roleDomain为namespace或cluster时必须填写该参数值。
+     */
+    clusterId?: pulumi.Input<string>;
+    /**
+     * 被授权者的 ID。可以是 IAM 用户 ID，也可以是 IAM 角色 ID。
+     */
+    granteeId?: pulumi.Input<number>;
+    /**
+     * 被授权者的类型，取值如下：User：IAM 用户。Role：IAM 角色。Account：账号。
+     */
+    granteeType?: pulumi.Input<string>;
+    /**
+     * 给被授权者授予的 RBAC 角色是否为自定义角色，取值如下：true：自定义角色。false：（默认值）系统预置的角色。
+     */
+    isCustomRole?: pulumi.Input<boolean>;
+    /**
+     * 需要授权给 IAM 用户或角色的名空间名称。roleDomain等于namespace时必须填写该参数值。roleDomain不等于namespace时，填写该参数值不生效。
+     */
+    namespace?: pulumi.Input<string>;
+    /**
+     * 为 IAM 用户或角色授予的权限类型，取值如下：namespace：授予命名空间级别的权限。cluster：授予集群级别的权限。all_clusters：授予当前账号下全部集群级别的权限。
+     */
+    roleDomain?: pulumi.Input<string>;
+    /**
+     * 给被授权者授予的 RBAC 角色名称。目前必须填写该参数。当roleDomain为all_clusters时，不可以自定义角色名称。
+     */
+    roleName?: pulumi.Input<string>;
+}

package/vke/permission.js

@@ -0,0 +1,109 @@
+"use strict";
+// *** WARNING: this file was generated by the Pulumi Terraform Bridge (tfgen) Tool. ***
+// *** Do not edit by hand unless you're certain you know what you are doing! ***
+Object.defineProperty(exports, "__esModule", { value: true });
+exports.Permission = void 0;
+const pulumi = require("@pulumi/pulumi");
+const utilities = require("../utilities");
+/**
+ * 容器服务提供集群 RBAC 授权功能，为 IAM 用户或角色授予 RBAC 访问权限，包括可访问的资源、权限的作用范围、预置的角色类型等，从而更好地管理集群的安全访问控制，满足企业用户细粒度的资源访问权限控制需求。
+ *
+ * ## Example Usage
+ *
+ * ```typescript
+ * import * as pulumi from "@pulumi/pulumi";
+ * import * as volcenginecc from "@volcengine/pulumi-volcenginecc";
+ *
+ * const vKEPermissionDemo = new volcenginecc.vke.Permission("VKEPermissionDemo", {
+ *     roleDomain: "namespace",
+ *     clusterId: "cd48m3cb1b2ba7l6ebgp0xxxxx",
+ *     namespace: "kube-public",
+ *     roleName: "vke:visitor",
+ *     isCustomRole: false,
+ *     granteeId: 59433888,
+ *     granteeType: "User",
+ * });
+ * ```
+ *
+ * ## Import
+ *
+ * ```sh
+ * $ pulumi import volcenginecc:vke/permission:Permission example "permission_id"
+ * ```
+ */
+class Permission extends pulumi.CustomResource {
+    /**
+     * Get an existing Permission resource's state with the given name, ID, and optional extra
+     * properties used to qualify the lookup.
+     *
+     * @param name The _unique_ name of the resulting resource.
+     * @param id The _unique_ provider ID of the resource to lookup.
+     * @param state Any extra arguments used during the lookup.
+     * @param opts Optional settings to control the behavior of the CustomResource.
+     */
+    static get(name, id, state, opts) {
+        return new Permission(name, state, Object.assign(Object.assign({}, opts), { id: id }));
+    }
+    /**
+     * Returns true if the given object is an instance of Permission.  This is designed to work even
+     * when multiple copies of the Pulumi SDK have been loaded into the same process.
+     */
+    static isInstance(obj) {
+        if (obj === undefined || obj === null) {
+            return false;
+        }
+        return obj['__pulumiType'] === Permission.__pulumiType;
+    }
+    constructor(name, argsOrState, opts) {
+        let resourceInputs = {};
+        opts = opts || {};
+        if (opts.id) {
+            const state = argsOrState;
+            resourceInputs["authorizedAt"] = state ? state.authorizedAt : undefined;
+            resourceInputs["authorizerId"] = state ? state.authorizerId : undefined;
+            resourceInputs["authorizerName"] = state ? state.authorizerName : undefined;
+            resourceInputs["authorizerType"] = state ? state.authorizerType : undefined;
+            resourceInputs["clusterId"] = state ? state.clusterId : undefined;
+            resourceInputs["createdTime"] = state ? state.createdTime : undefined;
+            resourceInputs["granteeId"] = state ? state.granteeId : undefined;
+            resourceInputs["granteeType"] = state ? state.granteeType : undefined;
+            resourceInputs["isCustomRole"] = state ? state.isCustomRole : undefined;
+            resourceInputs["kubeRoleBindingName"] = state ? state.kubeRoleBindingName : undefined;
+            resourceInputs["message"] = state ? state.message : undefined;
+            resourceInputs["namespace"] = state ? state.namespace : undefined;
+            resourceInputs["permissionId"] = state ? state.permissionId : undefined;
+            resourceInputs["projectSelector"] = state ? state.projectSelector : undefined;
+            resourceInputs["revokedAt"] = state ? state.revokedAt : undefined;
+            resourceInputs["roleDomain"] = state ? state.roleDomain : undefined;
+            resourceInputs["roleName"] = state ? state.roleName : undefined;
+            resourceInputs["status"] = state ? state.status : undefined;
+        }
+        else {
+            const args = argsOrState;
+            resourceInputs["authorizerId"] = args ? args.authorizerId : undefined;
+            resourceInputs["authorizerType"] = args ? args.authorizerType : undefined;
+            resourceInputs["clusterId"] = args ? args.clusterId : undefined;
+            resourceInputs["granteeId"] = args ? args.granteeId : undefined;
+            resourceInputs["granteeType"] = args ? args.granteeType : undefined;
+            resourceInputs["isCustomRole"] = args ? args.isCustomRole : undefined;
+            resourceInputs["namespace"] = args ? args.namespace : undefined;
+            resourceInputs["roleDomain"] = args ? args.roleDomain : undefined;
+            resourceInputs["roleName"] = args ? args.roleName : undefined;
+            resourceInputs["authorizedAt"] = undefined /*out*/;
+            resourceInputs["authorizerName"] = undefined /*out*/;
+            resourceInputs["createdTime"] = undefined /*out*/;
+            resourceInputs["kubeRoleBindingName"] = undefined /*out*/;
+            resourceInputs["message"] = undefined /*out*/;
+            resourceInputs["permissionId"] = undefined /*out*/;
+            resourceInputs["projectSelector"] = undefined /*out*/;
+            resourceInputs["revokedAt"] = undefined /*out*/;
+            resourceInputs["status"] = undefined /*out*/;
+        }
+        opts = pulumi.mergeOptions(utilities.resourceOptsDefaults(), opts);
+        super(Permission.__pulumiType, name, resourceInputs, opts);
+    }
+}
+exports.Permission = Permission;
+/** @internal */
+Permission.__pulumiType = 'volcenginecc:vke/permission:Permission';
+//# sourceMappingURL=permission.js.map

package/vke/permission.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"permission.js","sourceRoot":"","sources":["../../vke/permission.ts"],"names":[],"mappings":";AAAA,wFAAwF;AACxF,iFAAiF;;;AAEjF,yCAAyC;AACzC,0CAA0C;AAE1C;;;;;;;;;;;;;;;;;;;;;;;;;GAyBG;AACH,MAAa,UAAW,SAAQ,MAAM,CAAC,cAAc;IACjD;;;;;;;;OAQG;IACI,MAAM,CAAC,GAAG,CAAC,IAAY,EAAE,EAA2B,EAAE,KAAuB,EAAE,IAAmC;QACrH,OAAO,IAAI,UAAU,CAAC,IAAI,EAAO,KAAK,kCAAO,IAAI,KAAE,EAAE,EAAE,EAAE,IAAG,CAAC;IACjE,CAAC;IAKD;;;OAGG;IACI,MAAM,CAAC,UAAU,CAAC,GAAQ;QAC7B,IAAI,GAAG,KAAK,SAAS,IAAI,GAAG,KAAK,IAAI,EAAE;YACnC,OAAO,KAAK,CAAC;SAChB;QACD,OAAO,GAAG,CAAC,cAAc,CAAC,KAAK,UAAU,CAAC,YAAY,CAAC;IAC3D,CAAC;IAmFD,YAAY,IAAY,EAAE,WAA8C,EAAE,IAAmC;QACzG,IAAI,cAAc,GAAkB,EAAE,CAAC;QACvC,IAAI,GAAG,IAAI,IAAI,EAAE,CAAC;QAClB,IAAI,IAAI,CAAC,EAAE,EAAE;YACT,MAAM,KAAK,GAAG,WAA0C,CAAC;YACzD,cAAc,CAAC,cAAc,CAAC,GAAG,KAAK,CAAC,CAAC,CAAC,KAAK,CAAC,YAAY,CAAC,CAAC,CAAC,SAAS,CAAC;YACxE,cAAc,CAAC,cAAc,CAAC,GAAG,KAAK,CAAC,CAAC,CAAC,KAAK,CAAC,YAAY,CAAC,CAAC,CAAC,SAAS,CAAC;YACxE,cAAc,CAAC,gBAAgB,CAAC,GAAG,KAAK,CAAC,CAAC,CAAC,KAAK,CAAC,cAAc,CAAC,CAAC,CAAC,SAAS,CAAC;YAC5E,cAAc,CAAC,gBAAgB,CAAC,GAAG,KAAK,CAAC,CAAC,CAAC,KAAK,CAAC,cAAc,CAAC,CAAC,CAAC,SAAS,CAAC;YAC5E,cAAc,CAAC,WAAW,CAAC,GAAG,KAAK,CAAC,CAAC,CAAC,KAAK,CAAC,SAAS,CAAC,CAAC,CAAC,SAAS,CAAC;YAClE,cAAc,CAAC,aAAa,CAAC,GAAG,KAAK,CAAC,CAAC,CAAC,KAAK,CAAC,WAAW,CAAC,CAAC,CAAC,SAAS,CAAC;YACtE,cAAc,CAAC,WAAW,CAAC,GAAG,KAAK,CAAC,CAAC,CAAC,KAAK,CAAC,SAAS,CAAC,CAAC,CAAC,SAAS,CAAC;YAClE,cAAc,CAAC,aAAa,CAAC,GAAG,KAAK,CAAC,CAAC,CAAC,KAAK,CAAC,WAAW,CAAC,CAAC,CAAC,SAAS,CAAC;YACtE,cAAc,CAAC,cAAc,CAAC,GAAG,KAAK,CAAC,CAAC,CAAC,KAAK,CAAC,YAAY,CAAC,CAAC,CAAC,SAAS,CAAC;YACxE,cAAc,CAAC,qBAAqB,CAAC,GAAG,KAAK,CAAC,CAAC,CAAC,KAAK,CAAC,mBAAmB,CAAC,CAAC,CAAC,SAAS,CAAC;YACtF,cAAc,CAAC,SAAS,CAAC,GAAG,KAAK,CAAC,CAAC,CAAC,KAAK,CAAC,OAAO,CAAC,CAAC,CAAC,SAAS,CAAC;YAC9D,cAAc,CAAC,WAAW,CAAC,GAAG,KAAK,CAAC,CAAC,CAAC,KAAK,CAAC,SAAS,CAAC,CAAC,CAAC,SAAS,CAAC;YAClE,cAAc,CAAC,cAAc,CAAC,GAAG,KAAK,CAAC,CAAC,CAAC,KAAK,CAAC,YAAY,CAAC,CAAC,CAAC,SAAS,CAAC;YACxE,cAAc,CAAC,iBAAiB,CAAC,GAAG,KAAK,CAAC,CAAC,CAAC,KAAK,CAAC,eAAe,CAAC,CAAC,CAAC,SAAS,CAAC;YAC9E,cAAc,CAAC,WAAW,CAAC,GAAG,KAAK,CAAC,CAAC,CAAC,KAAK,CAAC,SAAS,CAAC,CAAC,CAAC,SAAS,CAAC;YAClE,cAAc,CAAC,YAAY,CAAC,GAAG,KAAK,CAAC,CAAC,CAAC,KAAK,CAAC,UAAU,CAAC,CAAC,CAAC,SAAS,CAAC;YACpE,cAAc,CAAC,UAAU,CAAC,GAAG,KAAK,CAAC,CAAC,CAAC,KAAK,CAAC,QAAQ,CAAC,CAAC,CAAC,SAAS,CAAC;YAChE,cAAc,CAAC,QAAQ,CAAC,GAAG,KAAK,CAAC,CAAC,CAAC,KAAK,CAAC,MAAM,CAAC,CAAC,CAAC,SAAS,CAAC;SAC/D;aAAM;YACH,MAAM,IAAI,GAAG,WAAyC,CAAC;YACvD,cAAc,CAAC,cAAc,CAAC,GAAG,IAAI,CAAC,CAAC,CAAC,IAAI,CAAC,YAAY,CAAC,CAAC,CAAC,SAAS,CAAC;YACtE,cAAc,CAAC,gBAAgB,CAAC,GAAG,IAAI,CAAC,CAAC,CAAC,IAAI,CAAC,cAAc,CAAC,CAAC,CAAC,SAAS,CAAC;YAC1E,cAAc,CAAC,WAAW,CAAC,GAAG,IAAI,CAAC,CAAC,CAAC,IAAI,CAAC,SAAS,CAAC,CAAC,CAAC,SAAS,CAAC;YAChE,cAAc,CAAC,WAAW,CAAC,GAAG,IAAI,CAAC,CAAC,CAAC,IAAI,CAAC,SAAS,CAAC,CAAC,CAAC,SAAS,CAAC;YAChE,cAAc,CAAC,aAAa,CAAC,GAAG,IAAI,CAAC,CAAC,CAAC,IAAI,CAAC,WAAW,CAAC,CAAC,CAAC,SAAS,CAAC;YACpE,cAAc,CAAC,cAAc,CAAC,GAAG,IAAI,CAAC,CAAC,CAAC,IAAI,CAAC,YAAY,CAAC,CAAC,CAAC,SAAS,CAAC;YACtE,cAAc,CAAC,WAAW,CAAC,GAAG,IAAI,CAAC,CAAC,CAAC,IAAI,CAAC,SAAS,CAAC,CAAC,CAAC,SAAS,CAAC;YAChE,cAAc,CAAC,YAAY,CAAC,GAAG,IAAI,CAAC,CAAC,CAAC,IAAI,CAAC,UAAU,CAAC,CAAC,CAAC,SAAS,CAAC;YAClE,cAAc,CAAC,UAAU,CAAC,GAAG,IAAI,CAAC,CAAC,CAAC,IAAI,CAAC,QAAQ,CAAC,CAAC,CAAC,SAAS,CAAC;YAC9D,cAAc,CAAC,cAAc,CAAC,GAAG,SAAS,CAAC,OAAO,CAAC;YACnD,cAAc,CAAC,gBAAgB,CAAC,GAAG,SAAS,CAAC,OAAO,CAAC;YACrD,cAAc,CAAC,aAAa,CAAC,GAAG,SAAS,CAAC,OAAO,CAAC;YAClD,cAAc,CAAC,qBAAqB,CAAC,GAAG,SAAS,CAAC,OAAO,CAAC;YAC1D,cAAc,CAAC,SAAS,CAAC,GAAG,SAAS,CAAC,OAAO,CAAC;YAC9C,cAAc,CAAC,cAAc,CAAC,GAAG,SAAS,CAAC,OAAO,CAAC;YACnD,cAAc,CAAC,iBAAiB,CAAC,GAAG,SAAS,CAAC,OAAO,CAAC;YACtD,cAAc,CAAC,WAAW,CAAC,GAAG,SAAS,CAAC,OAAO,CAAC;YAChD,cAAc,CAAC,QAAQ,CAAC,GAAG,SAAS,CAAC,OAAO,CAAC;SAChD;QACD,IAAI,GAAG,MAAM,CAAC,YAAY,CAAC,SAAS,CAAC,oBAAoB,EAAE,EAAE,IAAI,CAAC,CAAC;QACnE,KAAK,CAAC,UAAU,CAAC,YAAY,EAAE,IAAI,EAAE,cAAc,EAAE,IAAI,CAAC,CAAC;IAC/D,CAAC;;AA3JL,gCA4JC;AA9IG,gBAAgB;AACO,uBAAY,GAAG,wCAAwC,CAAC"}