pulumi-aiven 6.37.0a1744255932__py3-none-any.whl → 6.38.0__py3-none-any.whl
This diff represents the content of publicly available package versions that have been released to one of the supported registries. The information contained in this diff is provided for informational purposes only and reflects changes between package versions as they appear in their respective public registries.
Potentially problematic release.
This version of pulumi-aiven might be problematic. Click here for more details.
- pulumi_aiven/__init__.py +9 -0
- pulumi_aiven/_inputs.py +1302 -160
- pulumi_aiven/account.py +1 -0
- pulumi_aiven/account_authentication.py +1 -0
- pulumi_aiven/account_team.py +1 -0
- pulumi_aiven/account_team_member.py +1 -0
- pulumi_aiven/account_team_project.py +1 -0
- pulumi_aiven/alloydbomni.py +1 -0
- pulumi_aiven/alloydbomni_database.py +1 -0
- pulumi_aiven/alloydbomni_user.py +1 -0
- pulumi_aiven/aws_org_vpc_peering_connection.py +1 -0
- pulumi_aiven/aws_privatelink.py +1 -0
- pulumi_aiven/aws_vpc_peering_connection.py +1 -0
- pulumi_aiven/azure_org_vpc_peering_connection.py +1 -0
- pulumi_aiven/azure_privatelink.py +1 -0
- pulumi_aiven/azure_privatelink_connection_approval.py +1 -0
- pulumi_aiven/azure_vpc_peering_connection.py +1 -0
- pulumi_aiven/billing_group.py +1 -0
- pulumi_aiven/cassandra.py +1 -0
- pulumi_aiven/cassandra_user.py +1 -0
- pulumi_aiven/clickhouse.py +1 -0
- pulumi_aiven/clickhouse_database.py +1 -0
- pulumi_aiven/clickhouse_grant.py +19 -0
- pulumi_aiven/clickhouse_role.py +1 -0
- pulumi_aiven/clickhouse_user.py +1 -0
- pulumi_aiven/connection_pool.py +1 -0
- pulumi_aiven/dragonfly.py +1 -0
- pulumi_aiven/flink.py +1 -0
- pulumi_aiven/flink_application.py +1 -0
- pulumi_aiven/flink_application_deployment.py +1 -0
- pulumi_aiven/flink_application_version.py +1 -0
- pulumi_aiven/flink_jar_application.py +1 -0
- pulumi_aiven/flink_jar_application_deployment.py +1 -0
- pulumi_aiven/flink_jar_application_version.py +1 -0
- pulumi_aiven/gcp_org_vpc_peering_connection.py +1 -0
- pulumi_aiven/gcp_privatelink.py +1 -0
- pulumi_aiven/gcp_privatelink_connection_approval.py +1 -0
- pulumi_aiven/gcp_vpc_peering_connection.py +1 -0
- pulumi_aiven/get_external_identity.py +5 -5
- pulumi_aiven/get_open_search.py +7 -7
- pulumi_aiven/get_open_search_acl_config.py +7 -7
- pulumi_aiven/get_open_search_acl_rule.py +19 -19
- pulumi_aiven/get_opensearch_security_plugin_config.py +7 -7
- pulumi_aiven/get_opensearch_user.py +13 -13
- pulumi_aiven/get_organization.py +24 -6
- pulumi_aiven/get_organization_address.py +52 -29
- pulumi_aiven/get_organization_billing_group.py +38 -15
- pulumi_aiven/get_organization_billing_group_list.py +40 -12
- pulumi_aiven/get_organization_project.py +50 -14
- pulumi_aiven/governance_access.py +418 -0
- pulumi_aiven/grafana.py +1 -0
- pulumi_aiven/influx_db.py +1 -0
- pulumi_aiven/influxdb_database.py +1 -0
- pulumi_aiven/influxdb_user.py +1 -0
- pulumi_aiven/kafka.py +1 -0
- pulumi_aiven/kafka_acl.py +1 -0
- pulumi_aiven/kafka_connect.py +1 -0
- pulumi_aiven/kafka_connector.py +1 -0
- pulumi_aiven/kafka_mirror_maker.py +1 -0
- pulumi_aiven/kafka_native_acl.py +1 -0
- pulumi_aiven/kafka_quota.py +1 -0
- pulumi_aiven/kafka_schema.py +1 -0
- pulumi_aiven/kafka_schema_configuration.py +1 -0
- pulumi_aiven/kafka_schema_registry_acl.py +1 -0
- pulumi_aiven/kafka_topic.py +1 -0
- pulumi_aiven/kafka_user.py +1 -0
- pulumi_aiven/m3_aggregator.py +1 -0
- pulumi_aiven/m3_db.py +1 -0
- pulumi_aiven/m3db_user.py +1 -0
- pulumi_aiven/mirror_maker_replication_flow.py +1 -0
- pulumi_aiven/my_sql.py +1 -0
- pulumi_aiven/mysql_database.py +1 -0
- pulumi_aiven/mysql_user.py +1 -0
- pulumi_aiven/open_search.py +18 -19
- pulumi_aiven/open_search_acl_config.py +30 -41
- pulumi_aiven/open_search_acl_rule.py +48 -47
- pulumi_aiven/opensearch_security_plugin_config.py +15 -42
- pulumi_aiven/opensearch_user.py +33 -32
- pulumi_aiven/organization.py +25 -19
- pulumi_aiven/organization_address.py +103 -96
- pulumi_aiven/organization_application_user.py +10 -0
- pulumi_aiven/organization_application_user_token.py +1 -0
- pulumi_aiven/organization_billing_group.py +67 -60
- pulumi_aiven/organization_group_project.py +1 -0
- pulumi_aiven/organization_permission.py +1 -0
- pulumi_aiven/organization_project.py +112 -62
- pulumi_aiven/organization_user.py +1 -0
- pulumi_aiven/organization_user_group.py +1 -0
- pulumi_aiven/organization_user_group_member.py +1 -0
- pulumi_aiven/organization_vpc.py +1 -0
- pulumi_aiven/organizational_unit.py +1 -0
- pulumi_aiven/outputs.py +1039 -189
- pulumi_aiven/pg.py +1 -0
- pulumi_aiven/pg_database.py +1 -0
- pulumi_aiven/pg_user.py +1 -0
- pulumi_aiven/project.py +1 -0
- pulumi_aiven/project_user.py +1 -0
- pulumi_aiven/project_vpc.py +1 -0
- pulumi_aiven/provider.py +21 -0
- pulumi_aiven/pulumi-plugin.json +1 -1
- pulumi_aiven/redis.py +1 -0
- pulumi_aiven/redis_user.py +1 -0
- pulumi_aiven/service_integration.py +1 -0
- pulumi_aiven/service_integration_endpoint.py +1 -0
- pulumi_aiven/static_ip.py +1 -0
- pulumi_aiven/thanos.py +1 -0
- pulumi_aiven/transit_gateway_vpc_attachment.py +1 -0
- pulumi_aiven/valkey.py +1 -0
- pulumi_aiven/valkey_user.py +1 -0
- {pulumi_aiven-6.37.0a1744255932.dist-info → pulumi_aiven-6.38.0.dist-info}/METADATA +3 -3
- pulumi_aiven-6.38.0.dist-info/RECORD +189 -0
- {pulumi_aiven-6.37.0a1744255932.dist-info → pulumi_aiven-6.38.0.dist-info}/WHEEL +1 -1
- pulumi_aiven-6.37.0a1744255932.dist-info/RECORD +0 -188
- {pulumi_aiven-6.37.0a1744255932.dist-info → pulumi_aiven-6.38.0.dist-info}/top_level.txt +0 -0
pulumi_aiven/open_search.py
CHANGED
|
@@ -49,7 +49,7 @@ class OpenSearchArgs:
|
|
|
49
49
|
:param pulumi.Input[builtins.str] maintenance_window_dow: Day of week when maintenance operations should be performed. One monday, tuesday, wednesday, etc.
|
|
50
50
|
:param pulumi.Input[builtins.str] maintenance_window_time: Time of day when maintenance operations should be performed. UTC time in HH:mm:ss format.
|
|
51
51
|
:param pulumi.Input['OpenSearchOpensearchUserConfigArgs'] opensearch_user_config: Opensearch user configurable settings. **Warning:** There's no way to reset advanced configuration options to default. Options that you add cannot be removed later
|
|
52
|
-
:param pulumi.Input[Sequence[pulumi.Input['OpenSearchOpensearchArgs']]] opensearches: OpenSearch server
|
|
52
|
+
:param pulumi.Input[Sequence[pulumi.Input['OpenSearchOpensearchArgs']]] opensearches: Values provided by the OpenSearch server.
|
|
53
53
|
:param pulumi.Input[builtins.str] project_vpc_id: Specifies the VPC the service should run in. If the value is not set the service is not run inside a VPC. When set, the value should be given as a reference to set up dependencies correctly and the VPC must be in the same cloud and region as the service itself. Project can be freely moved to and from VPC after creation but doing so triggers migration to new servers so the operation can take significant amount of time to complete if the service has a lot of data.
|
|
54
54
|
:param pulumi.Input[Sequence[pulumi.Input['OpenSearchServiceIntegrationArgs']]] service_integrations: Service integrations to specify when creating a service. Not applied after initial service creation
|
|
55
55
|
:param pulumi.Input[Sequence[pulumi.Input[builtins.str]]] static_ips: Static IPs that are going to be associated with this service. Please assign a value using the 'toset' function. Once a static ip resource is in the 'assigned' state it cannot be unbound from the node again
|
|
@@ -203,7 +203,7 @@ class OpenSearchArgs:
|
|
|
203
203
|
@pulumi.getter
|
|
204
204
|
def opensearches(self) -> Optional[pulumi.Input[Sequence[pulumi.Input['OpenSearchOpensearchArgs']]]]:
|
|
205
205
|
"""
|
|
206
|
-
OpenSearch server
|
|
206
|
+
Values provided by the OpenSearch server.
|
|
207
207
|
"""
|
|
208
208
|
return pulumi.get(self, "opensearches")
|
|
209
209
|
|
|
@@ -328,7 +328,7 @@ class _OpenSearchState:
|
|
|
328
328
|
:param pulumi.Input[builtins.str] maintenance_window_dow: Day of week when maintenance operations should be performed. One monday, tuesday, wednesday, etc.
|
|
329
329
|
:param pulumi.Input[builtins.str] maintenance_window_time: Time of day when maintenance operations should be performed. UTC time in HH:mm:ss format.
|
|
330
330
|
:param pulumi.Input['OpenSearchOpensearchUserConfigArgs'] opensearch_user_config: Opensearch user configurable settings. **Warning:** There's no way to reset advanced configuration options to default. Options that you add cannot be removed later
|
|
331
|
-
:param pulumi.Input[Sequence[pulumi.Input['OpenSearchOpensearchArgs']]] opensearches: OpenSearch server
|
|
331
|
+
:param pulumi.Input[Sequence[pulumi.Input['OpenSearchOpensearchArgs']]] opensearches: Values provided by the OpenSearch server.
|
|
332
332
|
:param pulumi.Input[builtins.str] plan: Defines what kind of computing resources are allocated for the service. It can be changed after creation, though there are some restrictions when going to a smaller plan such as the new plan must have sufficient amount of disk space to store all current data and switching to a plan with fewer nodes might not be supported. The basic plan names are `hobbyist`, `startup-x`, `business-x` and `premium-x` where `x` is (roughly) the amount of memory on each node (also other attributes like number of CPUs and amount of disk space varies but naming is based on memory). The available options can be seen from the [Aiven pricing page](https://aiven.io/pricing).
|
|
333
333
|
:param pulumi.Input[builtins.str] project: The name of the project this resource belongs to. To set up proper dependencies please refer to this variable as a reference. Changing this property forces recreation of the resource.
|
|
334
334
|
:param pulumi.Input[builtins.str] project_vpc_id: Specifies the VPC the service should run in. If the value is not set the service is not run inside a VPC. When set, the value should be given as a reference to set up dependencies correctly and the VPC must be in the same cloud and region as the service itself. Project can be freely moved to and from VPC after creation but doing so triggers migration to new servers so the operation can take significant amount of time to complete if the service has a lot of data.
|
|
@@ -546,7 +546,7 @@ class _OpenSearchState:
|
|
|
546
546
|
@pulumi.getter
|
|
547
547
|
def opensearches(self) -> Optional[pulumi.Input[Sequence[pulumi.Input['OpenSearchOpensearchArgs']]]]:
|
|
548
548
|
"""
|
|
549
|
-
OpenSearch server
|
|
549
|
+
Values provided by the OpenSearch server.
|
|
550
550
|
"""
|
|
551
551
|
return pulumi.get(self, "opensearches")
|
|
552
552
|
|
|
@@ -744,6 +744,7 @@ class _OpenSearchState:
|
|
|
744
744
|
pulumi.set(self, "termination_protection", value)
|
|
745
745
|
|
|
746
746
|
|
|
747
|
+
@pulumi.type_token("aiven:index/openSearch:OpenSearch")
|
|
747
748
|
class OpenSearch(pulumi.CustomResource):
|
|
748
749
|
@overload
|
|
749
750
|
def __init__(__self__,
|
|
@@ -767,7 +768,7 @@ class OpenSearch(pulumi.CustomResource):
|
|
|
767
768
|
termination_protection: Optional[pulumi.Input[builtins.bool]] = None,
|
|
768
769
|
__props__=None):
|
|
769
770
|
"""
|
|
770
|
-
|
|
771
|
+
Creates and manages an [Aiven for OpenSearch®](https://aiven.io/docs/products/opensearch) service.
|
|
771
772
|
|
|
772
773
|
## Example Usage
|
|
773
774
|
|
|
@@ -775,15 +776,14 @@ class OpenSearch(pulumi.CustomResource):
|
|
|
775
776
|
import pulumi
|
|
776
777
|
import pulumi_aiven as aiven
|
|
777
778
|
|
|
778
|
-
|
|
779
|
-
project=
|
|
779
|
+
example_opensearch = aiven.OpenSearch("example_opensearch",
|
|
780
|
+
project=example_project["project"],
|
|
780
781
|
cloud_name="google-europe-west1",
|
|
781
782
|
plan="startup-4",
|
|
782
|
-
service_name="
|
|
783
|
+
service_name="example-opensearch",
|
|
783
784
|
maintenance_window_dow="monday",
|
|
784
785
|
maintenance_window_time="10:00:00",
|
|
785
786
|
opensearch_user_config={
|
|
786
|
-
"opensearch_version": "1",
|
|
787
787
|
"opensearch_dashboards": {
|
|
788
788
|
"enabled": True,
|
|
789
789
|
"opensearch_request_timeout": 30000,
|
|
@@ -798,7 +798,7 @@ class OpenSearch(pulumi.CustomResource):
|
|
|
798
798
|
## Import
|
|
799
799
|
|
|
800
800
|
```sh
|
|
801
|
-
$ pulumi import aiven:index/openSearch:OpenSearch
|
|
801
|
+
$ pulumi import aiven:index/openSearch:OpenSearch example_opensearch PROJECT/SERVICE_NAME
|
|
802
802
|
```
|
|
803
803
|
|
|
804
804
|
:param str resource_name: The name of the resource.
|
|
@@ -809,7 +809,7 @@ class OpenSearch(pulumi.CustomResource):
|
|
|
809
809
|
:param pulumi.Input[builtins.str] maintenance_window_dow: Day of week when maintenance operations should be performed. One monday, tuesday, wednesday, etc.
|
|
810
810
|
:param pulumi.Input[builtins.str] maintenance_window_time: Time of day when maintenance operations should be performed. UTC time in HH:mm:ss format.
|
|
811
811
|
:param pulumi.Input[Union['OpenSearchOpensearchUserConfigArgs', 'OpenSearchOpensearchUserConfigArgsDict']] opensearch_user_config: Opensearch user configurable settings. **Warning:** There's no way to reset advanced configuration options to default. Options that you add cannot be removed later
|
|
812
|
-
:param pulumi.Input[Sequence[pulumi.Input[Union['OpenSearchOpensearchArgs', 'OpenSearchOpensearchArgsDict']]]] opensearches: OpenSearch server
|
|
812
|
+
:param pulumi.Input[Sequence[pulumi.Input[Union['OpenSearchOpensearchArgs', 'OpenSearchOpensearchArgsDict']]]] opensearches: Values provided by the OpenSearch server.
|
|
813
813
|
:param pulumi.Input[builtins.str] plan: Defines what kind of computing resources are allocated for the service. It can be changed after creation, though there are some restrictions when going to a smaller plan such as the new plan must have sufficient amount of disk space to store all current data and switching to a plan with fewer nodes might not be supported. The basic plan names are `hobbyist`, `startup-x`, `business-x` and `premium-x` where `x` is (roughly) the amount of memory on each node (also other attributes like number of CPUs and amount of disk space varies but naming is based on memory). The available options can be seen from the [Aiven pricing page](https://aiven.io/pricing).
|
|
814
814
|
:param pulumi.Input[builtins.str] project: The name of the project this resource belongs to. To set up proper dependencies please refer to this variable as a reference. Changing this property forces recreation of the resource.
|
|
815
815
|
:param pulumi.Input[builtins.str] project_vpc_id: Specifies the VPC the service should run in. If the value is not set the service is not run inside a VPC. When set, the value should be given as a reference to set up dependencies correctly and the VPC must be in the same cloud and region as the service itself. Project can be freely moved to and from VPC after creation but doing so triggers migration to new servers so the operation can take significant amount of time to complete if the service has a lot of data.
|
|
@@ -827,7 +827,7 @@ class OpenSearch(pulumi.CustomResource):
|
|
|
827
827
|
args: OpenSearchArgs,
|
|
828
828
|
opts: Optional[pulumi.ResourceOptions] = None):
|
|
829
829
|
"""
|
|
830
|
-
|
|
830
|
+
Creates and manages an [Aiven for OpenSearch®](https://aiven.io/docs/products/opensearch) service.
|
|
831
831
|
|
|
832
832
|
## Example Usage
|
|
833
833
|
|
|
@@ -835,15 +835,14 @@ class OpenSearch(pulumi.CustomResource):
|
|
|
835
835
|
import pulumi
|
|
836
836
|
import pulumi_aiven as aiven
|
|
837
837
|
|
|
838
|
-
|
|
839
|
-
project=
|
|
838
|
+
example_opensearch = aiven.OpenSearch("example_opensearch",
|
|
839
|
+
project=example_project["project"],
|
|
840
840
|
cloud_name="google-europe-west1",
|
|
841
841
|
plan="startup-4",
|
|
842
|
-
service_name="
|
|
842
|
+
service_name="example-opensearch",
|
|
843
843
|
maintenance_window_dow="monday",
|
|
844
844
|
maintenance_window_time="10:00:00",
|
|
845
845
|
opensearch_user_config={
|
|
846
|
-
"opensearch_version": "1",
|
|
847
846
|
"opensearch_dashboards": {
|
|
848
847
|
"enabled": True,
|
|
849
848
|
"opensearch_request_timeout": 30000,
|
|
@@ -858,7 +857,7 @@ class OpenSearch(pulumi.CustomResource):
|
|
|
858
857
|
## Import
|
|
859
858
|
|
|
860
859
|
```sh
|
|
861
|
-
$ pulumi import aiven:index/openSearch:OpenSearch
|
|
860
|
+
$ pulumi import aiven:index/openSearch:OpenSearch example_opensearch PROJECT/SERVICE_NAME
|
|
862
861
|
```
|
|
863
862
|
|
|
864
863
|
:param str resource_name: The name of the resource.
|
|
@@ -993,7 +992,7 @@ class OpenSearch(pulumi.CustomResource):
|
|
|
993
992
|
:param pulumi.Input[builtins.str] maintenance_window_dow: Day of week when maintenance operations should be performed. One monday, tuesday, wednesday, etc.
|
|
994
993
|
:param pulumi.Input[builtins.str] maintenance_window_time: Time of day when maintenance operations should be performed. UTC time in HH:mm:ss format.
|
|
995
994
|
:param pulumi.Input[Union['OpenSearchOpensearchUserConfigArgs', 'OpenSearchOpensearchUserConfigArgsDict']] opensearch_user_config: Opensearch user configurable settings. **Warning:** There's no way to reset advanced configuration options to default. Options that you add cannot be removed later
|
|
996
|
-
:param pulumi.Input[Sequence[pulumi.Input[Union['OpenSearchOpensearchArgs', 'OpenSearchOpensearchArgsDict']]]] opensearches: OpenSearch server
|
|
995
|
+
:param pulumi.Input[Sequence[pulumi.Input[Union['OpenSearchOpensearchArgs', 'OpenSearchOpensearchArgsDict']]]] opensearches: Values provided by the OpenSearch server.
|
|
997
996
|
:param pulumi.Input[builtins.str] plan: Defines what kind of computing resources are allocated for the service. It can be changed after creation, though there are some restrictions when going to a smaller plan such as the new plan must have sufficient amount of disk space to store all current data and switching to a plan with fewer nodes might not be supported. The basic plan names are `hobbyist`, `startup-x`, `business-x` and `premium-x` where `x` is (roughly) the amount of memory on each node (also other attributes like number of CPUs and amount of disk space varies but naming is based on memory). The available options can be seen from the [Aiven pricing page](https://aiven.io/pricing).
|
|
998
997
|
:param pulumi.Input[builtins.str] project: The name of the project this resource belongs to. To set up proper dependencies please refer to this variable as a reference. Changing this property forces recreation of the resource.
|
|
999
998
|
:param pulumi.Input[builtins.str] project_vpc_id: Specifies the VPC the service should run in. If the value is not set the service is not run inside a VPC. When set, the value should be given as a reference to set up dependencies correctly and the VPC must be in the same cloud and region as the service itself. Project can be freely moved to and from VPC after creation but doing so triggers migration to new servers so the operation can take significant amount of time to complete if the service has a lot of data.
|
|
@@ -1138,7 +1137,7 @@ class OpenSearch(pulumi.CustomResource):
|
|
|
1138
1137
|
@pulumi.getter
|
|
1139
1138
|
def opensearches(self) -> pulumi.Output[Sequence['outputs.OpenSearchOpensearch']]:
|
|
1140
1139
|
"""
|
|
1141
|
-
OpenSearch server
|
|
1140
|
+
Values provided by the OpenSearch server.
|
|
1142
1141
|
"""
|
|
1143
1142
|
return pulumi.get(self, "opensearches")
|
|
1144
1143
|
|
|
@@ -28,7 +28,7 @@ class OpenSearchAclConfigArgs:
|
|
|
28
28
|
The set of arguments for constructing a OpenSearchAclConfig resource.
|
|
29
29
|
:param pulumi.Input[builtins.str] project: The name of the project this resource belongs to. To set up proper dependencies please refer to this variable as a reference. Changing this property forces recreation of the resource.
|
|
30
30
|
:param pulumi.Input[builtins.str] service_name: The name of the service that this resource belongs to. To set up proper dependencies please refer to this variable as a reference. Changing this property forces recreation of the resource.
|
|
31
|
-
:param pulumi.Input[builtins.bool] enabled: Enable OpenSearch ACLs. When disabled authenticated service users have unrestricted access. The default value is `true`.
|
|
31
|
+
:param pulumi.Input[builtins.bool] enabled: Enable OpenSearch ACLs. When disabled, authenticated service users have unrestricted access. The default value is `true`.
|
|
32
32
|
:param pulumi.Input[builtins.bool] extended_acl: Index rules can be applied in a limited fashion to the _mget, _msearch and _bulk APIs (and only those) by enabling the ExtendedAcl option for the service. When it is enabled, users can use these APIs as long as all operations only target indexes they have been granted access to. The default value is `true`.
|
|
33
33
|
"""
|
|
34
34
|
pulumi.set(__self__, "project", project)
|
|
@@ -66,7 +66,7 @@ class OpenSearchAclConfigArgs:
|
|
|
66
66
|
@pulumi.getter
|
|
67
67
|
def enabled(self) -> Optional[pulumi.Input[builtins.bool]]:
|
|
68
68
|
"""
|
|
69
|
-
Enable OpenSearch ACLs. When disabled authenticated service users have unrestricted access. The default value is `true`.
|
|
69
|
+
Enable OpenSearch ACLs. When disabled, authenticated service users have unrestricted access. The default value is `true`.
|
|
70
70
|
"""
|
|
71
71
|
return pulumi.get(self, "enabled")
|
|
72
72
|
|
|
@@ -96,7 +96,7 @@ class _OpenSearchAclConfigState:
|
|
|
96
96
|
service_name: Optional[pulumi.Input[builtins.str]] = None):
|
|
97
97
|
"""
|
|
98
98
|
Input properties used for looking up and filtering OpenSearchAclConfig resources.
|
|
99
|
-
:param pulumi.Input[builtins.bool] enabled: Enable OpenSearch ACLs. When disabled authenticated service users have unrestricted access. The default value is `true`.
|
|
99
|
+
:param pulumi.Input[builtins.bool] enabled: Enable OpenSearch ACLs. When disabled, authenticated service users have unrestricted access. The default value is `true`.
|
|
100
100
|
:param pulumi.Input[builtins.bool] extended_acl: Index rules can be applied in a limited fashion to the _mget, _msearch and _bulk APIs (and only those) by enabling the ExtendedAcl option for the service. When it is enabled, users can use these APIs as long as all operations only target indexes they have been granted access to. The default value is `true`.
|
|
101
101
|
:param pulumi.Input[builtins.str] project: The name of the project this resource belongs to. To set up proper dependencies please refer to this variable as a reference. Changing this property forces recreation of the resource.
|
|
102
102
|
:param pulumi.Input[builtins.str] service_name: The name of the service that this resource belongs to. To set up proper dependencies please refer to this variable as a reference. Changing this property forces recreation of the resource.
|
|
@@ -114,7 +114,7 @@ class _OpenSearchAclConfigState:
|
|
|
114
114
|
@pulumi.getter
|
|
115
115
|
def enabled(self) -> Optional[pulumi.Input[builtins.bool]]:
|
|
116
116
|
"""
|
|
117
|
-
Enable OpenSearch ACLs. When disabled authenticated service users have unrestricted access. The default value is `true`.
|
|
117
|
+
Enable OpenSearch ACLs. When disabled, authenticated service users have unrestricted access. The default value is `true`.
|
|
118
118
|
"""
|
|
119
119
|
return pulumi.get(self, "enabled")
|
|
120
120
|
|
|
@@ -159,6 +159,7 @@ class _OpenSearchAclConfigState:
|
|
|
159
159
|
pulumi.set(self, "service_name", value)
|
|
160
160
|
|
|
161
161
|
|
|
162
|
+
@pulumi.type_token("aiven:index/openSearchAclConfig:OpenSearchAclConfig")
|
|
162
163
|
class OpenSearchAclConfig(pulumi.CustomResource):
|
|
163
164
|
@overload
|
|
164
165
|
def __init__(__self__,
|
|
@@ -170,7 +171,11 @@ class OpenSearchAclConfig(pulumi.CustomResource):
|
|
|
170
171
|
service_name: Optional[pulumi.Input[builtins.str]] = None,
|
|
171
172
|
__props__=None):
|
|
172
173
|
"""
|
|
173
|
-
|
|
174
|
+
Enables access control for an Aiven for OpenSearch® service.
|
|
175
|
+
|
|
176
|
+
By default, service users are granted full access rights. To limit their access, you can enable access control and create ACLs
|
|
177
|
+
that define permissions and patterns. Alternatively, you can enable OpenSearch Security management
|
|
178
|
+
to manage users and permissions with the OpenSearch Security dashboard.
|
|
174
179
|
|
|
175
180
|
## Example Usage
|
|
176
181
|
|
|
@@ -178,32 +183,22 @@ class OpenSearchAclConfig(pulumi.CustomResource):
|
|
|
178
183
|
import pulumi
|
|
179
184
|
import pulumi_aiven as aiven
|
|
180
185
|
|
|
181
|
-
|
|
182
|
-
|
|
183
|
-
|
|
184
|
-
cloud_name="google-europe-west1",
|
|
185
|
-
plan="startup-4",
|
|
186
|
-
service_name="example_service_name",
|
|
187
|
-
maintenance_window_dow="monday",
|
|
188
|
-
maintenance_window_time="10:00:00")
|
|
189
|
-
foo_opensearch_user = aiven.OpensearchUser("foo",
|
|
190
|
-
service_name=bar.service_name,
|
|
191
|
-
project=foo.project,
|
|
192
|
-
username="user-example")
|
|
193
|
-
foo_open_search_acl_config = aiven.OpenSearchAclConfig("foo",
|
|
194
|
-
project=foo.project,
|
|
195
|
-
service_name=bar.service_name,
|
|
186
|
+
main = aiven.OpenSearchAclConfig("main",
|
|
187
|
+
project=example_project["project"],
|
|
188
|
+
service_name=example_opensearch["serviceName"],
|
|
196
189
|
enabled=True,
|
|
197
190
|
extended_acl=False)
|
|
198
191
|
```
|
|
199
192
|
|
|
200
193
|
## Import
|
|
201
194
|
|
|
202
|
-
|
|
195
|
+
```sh
|
|
196
|
+
$ pulumi import aiven:index/openSearchAclConfig:OpenSearchAclConfig main PROJECT/SERVICE_NAME
|
|
197
|
+
```
|
|
203
198
|
|
|
204
199
|
:param str resource_name: The name of the resource.
|
|
205
200
|
:param pulumi.ResourceOptions opts: Options for the resource.
|
|
206
|
-
:param pulumi.Input[builtins.bool] enabled: Enable OpenSearch ACLs. When disabled authenticated service users have unrestricted access. The default value is `true`.
|
|
201
|
+
:param pulumi.Input[builtins.bool] enabled: Enable OpenSearch ACLs. When disabled, authenticated service users have unrestricted access. The default value is `true`.
|
|
207
202
|
:param pulumi.Input[builtins.bool] extended_acl: Index rules can be applied in a limited fashion to the _mget, _msearch and _bulk APIs (and only those) by enabling the ExtendedAcl option for the service. When it is enabled, users can use these APIs as long as all operations only target indexes they have been granted access to. The default value is `true`.
|
|
208
203
|
:param pulumi.Input[builtins.str] project: The name of the project this resource belongs to. To set up proper dependencies please refer to this variable as a reference. Changing this property forces recreation of the resource.
|
|
209
204
|
:param pulumi.Input[builtins.str] service_name: The name of the service that this resource belongs to. To set up proper dependencies please refer to this variable as a reference. Changing this property forces recreation of the resource.
|
|
@@ -215,7 +210,11 @@ class OpenSearchAclConfig(pulumi.CustomResource):
|
|
|
215
210
|
args: OpenSearchAclConfigArgs,
|
|
216
211
|
opts: Optional[pulumi.ResourceOptions] = None):
|
|
217
212
|
"""
|
|
218
|
-
|
|
213
|
+
Enables access control for an Aiven for OpenSearch® service.
|
|
214
|
+
|
|
215
|
+
By default, service users are granted full access rights. To limit their access, you can enable access control and create ACLs
|
|
216
|
+
that define permissions and patterns. Alternatively, you can enable OpenSearch Security management
|
|
217
|
+
to manage users and permissions with the OpenSearch Security dashboard.
|
|
219
218
|
|
|
220
219
|
## Example Usage
|
|
221
220
|
|
|
@@ -223,28 +222,18 @@ class OpenSearchAclConfig(pulumi.CustomResource):
|
|
|
223
222
|
import pulumi
|
|
224
223
|
import pulumi_aiven as aiven
|
|
225
224
|
|
|
226
|
-
|
|
227
|
-
|
|
228
|
-
|
|
229
|
-
cloud_name="google-europe-west1",
|
|
230
|
-
plan="startup-4",
|
|
231
|
-
service_name="example_service_name",
|
|
232
|
-
maintenance_window_dow="monday",
|
|
233
|
-
maintenance_window_time="10:00:00")
|
|
234
|
-
foo_opensearch_user = aiven.OpensearchUser("foo",
|
|
235
|
-
service_name=bar.service_name,
|
|
236
|
-
project=foo.project,
|
|
237
|
-
username="user-example")
|
|
238
|
-
foo_open_search_acl_config = aiven.OpenSearchAclConfig("foo",
|
|
239
|
-
project=foo.project,
|
|
240
|
-
service_name=bar.service_name,
|
|
225
|
+
main = aiven.OpenSearchAclConfig("main",
|
|
226
|
+
project=example_project["project"],
|
|
227
|
+
service_name=example_opensearch["serviceName"],
|
|
241
228
|
enabled=True,
|
|
242
229
|
extended_acl=False)
|
|
243
230
|
```
|
|
244
231
|
|
|
245
232
|
## Import
|
|
246
233
|
|
|
247
|
-
|
|
234
|
+
```sh
|
|
235
|
+
$ pulumi import aiven:index/openSearchAclConfig:OpenSearchAclConfig main PROJECT/SERVICE_NAME
|
|
236
|
+
```
|
|
248
237
|
|
|
249
238
|
:param str resource_name: The name of the resource.
|
|
250
239
|
:param OpenSearchAclConfigArgs args: The arguments to use to populate this resource's properties.
|
|
@@ -303,7 +292,7 @@ class OpenSearchAclConfig(pulumi.CustomResource):
|
|
|
303
292
|
:param str resource_name: The unique name of the resulting resource.
|
|
304
293
|
:param pulumi.Input[str] id: The unique provider ID of the resource to lookup.
|
|
305
294
|
:param pulumi.ResourceOptions opts: Options for the resource.
|
|
306
|
-
:param pulumi.Input[builtins.bool] enabled: Enable OpenSearch ACLs. When disabled authenticated service users have unrestricted access. The default value is `true`.
|
|
295
|
+
:param pulumi.Input[builtins.bool] enabled: Enable OpenSearch ACLs. When disabled, authenticated service users have unrestricted access. The default value is `true`.
|
|
307
296
|
:param pulumi.Input[builtins.bool] extended_acl: Index rules can be applied in a limited fashion to the _mget, _msearch and _bulk APIs (and only those) by enabling the ExtendedAcl option for the service. When it is enabled, users can use these APIs as long as all operations only target indexes they have been granted access to. The default value is `true`.
|
|
308
297
|
:param pulumi.Input[builtins.str] project: The name of the project this resource belongs to. To set up proper dependencies please refer to this variable as a reference. Changing this property forces recreation of the resource.
|
|
309
298
|
:param pulumi.Input[builtins.str] service_name: The name of the service that this resource belongs to. To set up proper dependencies please refer to this variable as a reference. Changing this property forces recreation of the resource.
|
|
@@ -322,7 +311,7 @@ class OpenSearchAclConfig(pulumi.CustomResource):
|
|
|
322
311
|
@pulumi.getter
|
|
323
312
|
def enabled(self) -> pulumi.Output[Optional[builtins.bool]]:
|
|
324
313
|
"""
|
|
325
|
-
Enable OpenSearch ACLs. When disabled authenticated service users have unrestricted access. The default value is `true`.
|
|
314
|
+
Enable OpenSearch ACLs. When disabled, authenticated service users have unrestricted access. The default value is `true`.
|
|
326
315
|
"""
|
|
327
316
|
return pulumi.get(self, "enabled")
|
|
328
317
|
|
|
@@ -27,11 +27,11 @@ class OpenSearchAclRuleArgs:
|
|
|
27
27
|
username: pulumi.Input[builtins.str]):
|
|
28
28
|
"""
|
|
29
29
|
The set of arguments for constructing a OpenSearchAclRule resource.
|
|
30
|
-
:param pulumi.Input[builtins.str] index: The index pattern for this ACL
|
|
31
|
-
:param pulumi.Input[builtins.str] permission: The permissions for this ACL
|
|
30
|
+
:param pulumi.Input[builtins.str] index: The index pattern for this ACL rule. Maximum length: `249`. Changing this property forces recreation of the resource.
|
|
31
|
+
:param pulumi.Input[builtins.str] permission: The permissions for this ACL rule. The possible values are `admin`, `deny`, `read`, `readwrite` and `write`.
|
|
32
32
|
:param pulumi.Input[builtins.str] project: The name of the project this resource belongs to. To set up proper dependencies please refer to this variable as a reference. Changing this property forces recreation of the resource.
|
|
33
33
|
:param pulumi.Input[builtins.str] service_name: The name of the service that this resource belongs to. To set up proper dependencies please refer to this variable as a reference. Changing this property forces recreation of the resource.
|
|
34
|
-
:param pulumi.Input[builtins.str] username: The username for the ACL
|
|
34
|
+
:param pulumi.Input[builtins.str] username: The username for the OpenSearch user this ACL rule applies to. Maximum length: `40`. To set up proper dependencies please refer to this variable as a reference. Changing this property forces recreation of the resource.
|
|
35
35
|
"""
|
|
36
36
|
pulumi.set(__self__, "index", index)
|
|
37
37
|
pulumi.set(__self__, "permission", permission)
|
|
@@ -43,7 +43,7 @@ class OpenSearchAclRuleArgs:
|
|
|
43
43
|
@pulumi.getter
|
|
44
44
|
def index(self) -> pulumi.Input[builtins.str]:
|
|
45
45
|
"""
|
|
46
|
-
The index pattern for this ACL
|
|
46
|
+
The index pattern for this ACL rule. Maximum length: `249`. Changing this property forces recreation of the resource.
|
|
47
47
|
"""
|
|
48
48
|
return pulumi.get(self, "index")
|
|
49
49
|
|
|
@@ -55,7 +55,7 @@ class OpenSearchAclRuleArgs:
|
|
|
55
55
|
@pulumi.getter
|
|
56
56
|
def permission(self) -> pulumi.Input[builtins.str]:
|
|
57
57
|
"""
|
|
58
|
-
The permissions for this ACL
|
|
58
|
+
The permissions for this ACL rule. The possible values are `admin`, `deny`, `read`, `readwrite` and `write`.
|
|
59
59
|
"""
|
|
60
60
|
return pulumi.get(self, "permission")
|
|
61
61
|
|
|
@@ -91,7 +91,7 @@ class OpenSearchAclRuleArgs:
|
|
|
91
91
|
@pulumi.getter
|
|
92
92
|
def username(self) -> pulumi.Input[builtins.str]:
|
|
93
93
|
"""
|
|
94
|
-
The username for the ACL
|
|
94
|
+
The username for the OpenSearch user this ACL rule applies to. Maximum length: `40`. To set up proper dependencies please refer to this variable as a reference. Changing this property forces recreation of the resource.
|
|
95
95
|
"""
|
|
96
96
|
return pulumi.get(self, "username")
|
|
97
97
|
|
|
@@ -110,11 +110,11 @@ class _OpenSearchAclRuleState:
|
|
|
110
110
|
username: Optional[pulumi.Input[builtins.str]] = None):
|
|
111
111
|
"""
|
|
112
112
|
Input properties used for looking up and filtering OpenSearchAclRule resources.
|
|
113
|
-
:param pulumi.Input[builtins.str] index: The index pattern for this ACL
|
|
114
|
-
:param pulumi.Input[builtins.str] permission: The permissions for this ACL
|
|
113
|
+
:param pulumi.Input[builtins.str] index: The index pattern for this ACL rule. Maximum length: `249`. Changing this property forces recreation of the resource.
|
|
114
|
+
:param pulumi.Input[builtins.str] permission: The permissions for this ACL rule. The possible values are `admin`, `deny`, `read`, `readwrite` and `write`.
|
|
115
115
|
:param pulumi.Input[builtins.str] project: The name of the project this resource belongs to. To set up proper dependencies please refer to this variable as a reference. Changing this property forces recreation of the resource.
|
|
116
116
|
:param pulumi.Input[builtins.str] service_name: The name of the service that this resource belongs to. To set up proper dependencies please refer to this variable as a reference. Changing this property forces recreation of the resource.
|
|
117
|
-
:param pulumi.Input[builtins.str] username: The username for the ACL
|
|
117
|
+
:param pulumi.Input[builtins.str] username: The username for the OpenSearch user this ACL rule applies to. Maximum length: `40`. To set up proper dependencies please refer to this variable as a reference. Changing this property forces recreation of the resource.
|
|
118
118
|
"""
|
|
119
119
|
if index is not None:
|
|
120
120
|
pulumi.set(__self__, "index", index)
|
|
@@ -131,7 +131,7 @@ class _OpenSearchAclRuleState:
|
|
|
131
131
|
@pulumi.getter
|
|
132
132
|
def index(self) -> Optional[pulumi.Input[builtins.str]]:
|
|
133
133
|
"""
|
|
134
|
-
The index pattern for this ACL
|
|
134
|
+
The index pattern for this ACL rule. Maximum length: `249`. Changing this property forces recreation of the resource.
|
|
135
135
|
"""
|
|
136
136
|
return pulumi.get(self, "index")
|
|
137
137
|
|
|
@@ -143,7 +143,7 @@ class _OpenSearchAclRuleState:
|
|
|
143
143
|
@pulumi.getter
|
|
144
144
|
def permission(self) -> Optional[pulumi.Input[builtins.str]]:
|
|
145
145
|
"""
|
|
146
|
-
The permissions for this ACL
|
|
146
|
+
The permissions for this ACL rule. The possible values are `admin`, `deny`, `read`, `readwrite` and `write`.
|
|
147
147
|
"""
|
|
148
148
|
return pulumi.get(self, "permission")
|
|
149
149
|
|
|
@@ -179,7 +179,7 @@ class _OpenSearchAclRuleState:
|
|
|
179
179
|
@pulumi.getter
|
|
180
180
|
def username(self) -> Optional[pulumi.Input[builtins.str]]:
|
|
181
181
|
"""
|
|
182
|
-
The username for the ACL
|
|
182
|
+
The username for the OpenSearch user this ACL rule applies to. Maximum length: `40`. To set up proper dependencies please refer to this variable as a reference. Changing this property forces recreation of the resource.
|
|
183
183
|
"""
|
|
184
184
|
return pulumi.get(self, "username")
|
|
185
185
|
|
|
@@ -188,6 +188,7 @@ class _OpenSearchAclRuleState:
|
|
|
188
188
|
pulumi.set(self, "username", value)
|
|
189
189
|
|
|
190
190
|
|
|
191
|
+
@pulumi.type_token("aiven:index/openSearchAclRule:OpenSearchAclRule")
|
|
191
192
|
class OpenSearchAclRule(pulumi.CustomResource):
|
|
192
193
|
@overload
|
|
193
194
|
def __init__(__self__,
|
|
@@ -200,7 +201,7 @@ class OpenSearchAclRule(pulumi.CustomResource):
|
|
|
200
201
|
username: Optional[pulumi.Input[builtins.str]] = None,
|
|
201
202
|
__props__=None):
|
|
202
203
|
"""
|
|
203
|
-
|
|
204
|
+
Create an access control list (ACL) rule for indexes in an Aiven for OpenSearch® service. ACLs apply only to indexes and don't control access to other OpenSearch APIs such as OpenSearch Dashboards.
|
|
204
205
|
|
|
205
206
|
## Example Usage
|
|
206
207
|
|
|
@@ -208,32 +209,32 @@ class OpenSearchAclRule(pulumi.CustomResource):
|
|
|
208
209
|
import pulumi
|
|
209
210
|
import pulumi_aiven as aiven
|
|
210
211
|
|
|
211
|
-
|
|
212
|
-
project=
|
|
213
|
-
service_name=
|
|
212
|
+
os_user1 = aiven.OpensearchUser("os_user_1",
|
|
213
|
+
project=example_project["project"],
|
|
214
|
+
service_name=example_opensearch["serviceName"],
|
|
214
215
|
username="documentation-user-1")
|
|
215
216
|
os_user2 = aiven.OpensearchUser("os_user_2",
|
|
216
|
-
project=
|
|
217
|
-
service_name=
|
|
217
|
+
project=example_project["project"],
|
|
218
|
+
service_name=example_opensearch["serviceName"],
|
|
218
219
|
username="documentation-user-2")
|
|
219
220
|
os_acls_config = aiven.OpenSearchAclConfig("os_acls_config",
|
|
220
|
-
project=
|
|
221
|
-
service_name=
|
|
221
|
+
project=example_project["project"],
|
|
222
|
+
service_name=example_opensearch["serviceName"],
|
|
222
223
|
enabled=True,
|
|
223
224
|
extended_acl=False)
|
|
224
225
|
acl_rules = [
|
|
225
226
|
{
|
|
226
|
-
"username":
|
|
227
|
+
"username": os_user1.username,
|
|
227
228
|
"index": "index2",
|
|
228
229
|
"permission": "readwrite",
|
|
229
230
|
},
|
|
230
231
|
{
|
|
231
|
-
"username":
|
|
232
|
+
"username": os_user1.username,
|
|
232
233
|
"index": "index3",
|
|
233
234
|
"permission": "read",
|
|
234
235
|
},
|
|
235
236
|
{
|
|
236
|
-
"username":
|
|
237
|
+
"username": os_user1.username,
|
|
237
238
|
"index": "index5",
|
|
238
239
|
"permission": "deny",
|
|
239
240
|
},
|
|
@@ -252,8 +253,8 @@ class OpenSearchAclRule(pulumi.CustomResource):
|
|
|
252
253
|
def create_os_acl_rule(range_body):
|
|
253
254
|
for range in [{"key": k, "value": v} for [k, v] in enumerate(range_body)]:
|
|
254
255
|
os_acl_rule.append(aiven.OpenSearchAclRule(f"os_acl_rule-{range['key']}",
|
|
255
|
-
project=
|
|
256
|
-
service_name=
|
|
256
|
+
project=example_project["project"],
|
|
257
|
+
service_name=example_opensearch["serviceName"],
|
|
257
258
|
username=range["value"]["username"],
|
|
258
259
|
index=range["value"]["index"],
|
|
259
260
|
permission=range["value"]["permission"]))
|
|
@@ -269,11 +270,11 @@ class OpenSearchAclRule(pulumi.CustomResource):
|
|
|
269
270
|
|
|
270
271
|
:param str resource_name: The name of the resource.
|
|
271
272
|
:param pulumi.ResourceOptions opts: Options for the resource.
|
|
272
|
-
:param pulumi.Input[builtins.str] index: The index pattern for this ACL
|
|
273
|
-
:param pulumi.Input[builtins.str] permission: The permissions for this ACL
|
|
273
|
+
:param pulumi.Input[builtins.str] index: The index pattern for this ACL rule. Maximum length: `249`. Changing this property forces recreation of the resource.
|
|
274
|
+
:param pulumi.Input[builtins.str] permission: The permissions for this ACL rule. The possible values are `admin`, `deny`, `read`, `readwrite` and `write`.
|
|
274
275
|
:param pulumi.Input[builtins.str] project: The name of the project this resource belongs to. To set up proper dependencies please refer to this variable as a reference. Changing this property forces recreation of the resource.
|
|
275
276
|
:param pulumi.Input[builtins.str] service_name: The name of the service that this resource belongs to. To set up proper dependencies please refer to this variable as a reference. Changing this property forces recreation of the resource.
|
|
276
|
-
:param pulumi.Input[builtins.str] username: The username for the ACL
|
|
277
|
+
:param pulumi.Input[builtins.str] username: The username for the OpenSearch user this ACL rule applies to. Maximum length: `40`. To set up proper dependencies please refer to this variable as a reference. Changing this property forces recreation of the resource.
|
|
277
278
|
"""
|
|
278
279
|
...
|
|
279
280
|
@overload
|
|
@@ -282,7 +283,7 @@ class OpenSearchAclRule(pulumi.CustomResource):
|
|
|
282
283
|
args: OpenSearchAclRuleArgs,
|
|
283
284
|
opts: Optional[pulumi.ResourceOptions] = None):
|
|
284
285
|
"""
|
|
285
|
-
|
|
286
|
+
Create an access control list (ACL) rule for indexes in an Aiven for OpenSearch® service. ACLs apply only to indexes and don't control access to other OpenSearch APIs such as OpenSearch Dashboards.
|
|
286
287
|
|
|
287
288
|
## Example Usage
|
|
288
289
|
|
|
@@ -290,32 +291,32 @@ class OpenSearchAclRule(pulumi.CustomResource):
|
|
|
290
291
|
import pulumi
|
|
291
292
|
import pulumi_aiven as aiven
|
|
292
293
|
|
|
293
|
-
|
|
294
|
-
project=
|
|
295
|
-
service_name=
|
|
294
|
+
os_user1 = aiven.OpensearchUser("os_user_1",
|
|
295
|
+
project=example_project["project"],
|
|
296
|
+
service_name=example_opensearch["serviceName"],
|
|
296
297
|
username="documentation-user-1")
|
|
297
298
|
os_user2 = aiven.OpensearchUser("os_user_2",
|
|
298
|
-
project=
|
|
299
|
-
service_name=
|
|
299
|
+
project=example_project["project"],
|
|
300
|
+
service_name=example_opensearch["serviceName"],
|
|
300
301
|
username="documentation-user-2")
|
|
301
302
|
os_acls_config = aiven.OpenSearchAclConfig("os_acls_config",
|
|
302
|
-
project=
|
|
303
|
-
service_name=
|
|
303
|
+
project=example_project["project"],
|
|
304
|
+
service_name=example_opensearch["serviceName"],
|
|
304
305
|
enabled=True,
|
|
305
306
|
extended_acl=False)
|
|
306
307
|
acl_rules = [
|
|
307
308
|
{
|
|
308
|
-
"username":
|
|
309
|
+
"username": os_user1.username,
|
|
309
310
|
"index": "index2",
|
|
310
311
|
"permission": "readwrite",
|
|
311
312
|
},
|
|
312
313
|
{
|
|
313
|
-
"username":
|
|
314
|
+
"username": os_user1.username,
|
|
314
315
|
"index": "index3",
|
|
315
316
|
"permission": "read",
|
|
316
317
|
},
|
|
317
318
|
{
|
|
318
|
-
"username":
|
|
319
|
+
"username": os_user1.username,
|
|
319
320
|
"index": "index5",
|
|
320
321
|
"permission": "deny",
|
|
321
322
|
},
|
|
@@ -334,8 +335,8 @@ class OpenSearchAclRule(pulumi.CustomResource):
|
|
|
334
335
|
def create_os_acl_rule(range_body):
|
|
335
336
|
for range in [{"key": k, "value": v} for [k, v] in enumerate(range_body)]:
|
|
336
337
|
os_acl_rule.append(aiven.OpenSearchAclRule(f"os_acl_rule-{range['key']}",
|
|
337
|
-
project=
|
|
338
|
-
service_name=
|
|
338
|
+
project=example_project["project"],
|
|
339
|
+
service_name=example_opensearch["serviceName"],
|
|
339
340
|
username=range["value"]["username"],
|
|
340
341
|
index=range["value"]["index"],
|
|
341
342
|
permission=range["value"]["permission"]))
|
|
@@ -415,11 +416,11 @@ class OpenSearchAclRule(pulumi.CustomResource):
|
|
|
415
416
|
:param str resource_name: The unique name of the resulting resource.
|
|
416
417
|
:param pulumi.Input[str] id: The unique provider ID of the resource to lookup.
|
|
417
418
|
:param pulumi.ResourceOptions opts: Options for the resource.
|
|
418
|
-
:param pulumi.Input[builtins.str] index: The index pattern for this ACL
|
|
419
|
-
:param pulumi.Input[builtins.str] permission: The permissions for this ACL
|
|
419
|
+
:param pulumi.Input[builtins.str] index: The index pattern for this ACL rule. Maximum length: `249`. Changing this property forces recreation of the resource.
|
|
420
|
+
:param pulumi.Input[builtins.str] permission: The permissions for this ACL rule. The possible values are `admin`, `deny`, `read`, `readwrite` and `write`.
|
|
420
421
|
:param pulumi.Input[builtins.str] project: The name of the project this resource belongs to. To set up proper dependencies please refer to this variable as a reference. Changing this property forces recreation of the resource.
|
|
421
422
|
:param pulumi.Input[builtins.str] service_name: The name of the service that this resource belongs to. To set up proper dependencies please refer to this variable as a reference. Changing this property forces recreation of the resource.
|
|
422
|
-
:param pulumi.Input[builtins.str] username: The username for the ACL
|
|
423
|
+
:param pulumi.Input[builtins.str] username: The username for the OpenSearch user this ACL rule applies to. Maximum length: `40`. To set up proper dependencies please refer to this variable as a reference. Changing this property forces recreation of the resource.
|
|
423
424
|
"""
|
|
424
425
|
opts = pulumi.ResourceOptions.merge(opts, pulumi.ResourceOptions(id=id))
|
|
425
426
|
|
|
@@ -436,7 +437,7 @@ class OpenSearchAclRule(pulumi.CustomResource):
|
|
|
436
437
|
@pulumi.getter
|
|
437
438
|
def index(self) -> pulumi.Output[builtins.str]:
|
|
438
439
|
"""
|
|
439
|
-
The index pattern for this ACL
|
|
440
|
+
The index pattern for this ACL rule. Maximum length: `249`. Changing this property forces recreation of the resource.
|
|
440
441
|
"""
|
|
441
442
|
return pulumi.get(self, "index")
|
|
442
443
|
|
|
@@ -444,7 +445,7 @@ class OpenSearchAclRule(pulumi.CustomResource):
|
|
|
444
445
|
@pulumi.getter
|
|
445
446
|
def permission(self) -> pulumi.Output[builtins.str]:
|
|
446
447
|
"""
|
|
447
|
-
The permissions for this ACL
|
|
448
|
+
The permissions for this ACL rule. The possible values are `admin`, `deny`, `read`, `readwrite` and `write`.
|
|
448
449
|
"""
|
|
449
450
|
return pulumi.get(self, "permission")
|
|
450
451
|
|
|
@@ -468,7 +469,7 @@ class OpenSearchAclRule(pulumi.CustomResource):
|
|
|
468
469
|
@pulumi.getter
|
|
469
470
|
def username(self) -> pulumi.Output[builtins.str]:
|
|
470
471
|
"""
|
|
471
|
-
The username for the ACL
|
|
472
|
+
The username for the OpenSearch user this ACL rule applies to. Maximum length: `40`. To set up proper dependencies please refer to this variable as a reference. Changing this property forces recreation of the resource.
|
|
472
473
|
"""
|
|
473
474
|
return pulumi.get(self, "username")
|
|
474
475
|
|