pulumi-aiven 6.38.0a1747372094__py3-none-any.whl → 6.39.0a1747890420__py3-none-any.whl
This diff represents the content of publicly available package versions that have been released to one of the supported registries. The information contained in this diff is provided for informational purposes only and reflects changes between package versions as they appear in their respective public registries.
Potentially problematic release.
This version of pulumi-aiven might be problematic. Click here for more details.
- pulumi_aiven/__init__.py +9 -0
- pulumi_aiven/_inputs.py +1302 -160
- pulumi_aiven/clickhouse_grant.py +18 -0
- pulumi_aiven/get_external_identity.py +5 -5
- pulumi_aiven/get_open_search.py +7 -7
- pulumi_aiven/get_open_search_acl_config.py +7 -7
- pulumi_aiven/get_open_search_acl_rule.py +19 -19
- pulumi_aiven/get_opensearch_security_plugin_config.py +7 -7
- pulumi_aiven/get_opensearch_user.py +13 -13
- pulumi_aiven/get_organization.py +24 -6
- pulumi_aiven/get_organization_address.py +52 -29
- pulumi_aiven/get_organization_billing_group.py +38 -15
- pulumi_aiven/get_organization_billing_group_list.py +40 -12
- pulumi_aiven/get_organization_project.py +50 -14
- pulumi_aiven/governance_access.py +418 -0
- pulumi_aiven/open_search.py +17 -19
- pulumi_aiven/open_search_acl_config.py +29 -41
- pulumi_aiven/open_search_acl_rule.py +47 -47
- pulumi_aiven/opensearch_security_plugin_config.py +14 -42
- pulumi_aiven/opensearch_user.py +32 -32
- pulumi_aiven/organization.py +24 -19
- pulumi_aiven/organization_address.py +102 -96
- pulumi_aiven/organization_application_user.py +9 -0
- pulumi_aiven/organization_billing_group.py +66 -60
- pulumi_aiven/organization_project.py +111 -62
- pulumi_aiven/outputs.py +1039 -189
- pulumi_aiven/pulumi-plugin.json +1 -1
- {pulumi_aiven-6.38.0a1747372094.dist-info → pulumi_aiven-6.39.0a1747890420.dist-info}/METADATA +1 -1
- {pulumi_aiven-6.38.0a1747372094.dist-info → pulumi_aiven-6.39.0a1747890420.dist-info}/RECORD +31 -30
- {pulumi_aiven-6.38.0a1747372094.dist-info → pulumi_aiven-6.39.0a1747890420.dist-info}/WHEEL +1 -1
- {pulumi_aiven-6.38.0a1747372094.dist-info → pulumi_aiven-6.39.0a1747890420.dist-info}/top_level.txt +0 -0
pulumi_aiven/open_search.py
CHANGED
|
@@ -49,7 +49,7 @@ class OpenSearchArgs:
|
|
|
49
49
|
:param pulumi.Input[builtins.str] maintenance_window_dow: Day of week when maintenance operations should be performed. One monday, tuesday, wednesday, etc.
|
|
50
50
|
:param pulumi.Input[builtins.str] maintenance_window_time: Time of day when maintenance operations should be performed. UTC time in HH:mm:ss format.
|
|
51
51
|
:param pulumi.Input['OpenSearchOpensearchUserConfigArgs'] opensearch_user_config: Opensearch user configurable settings. **Warning:** There's no way to reset advanced configuration options to default. Options that you add cannot be removed later
|
|
52
|
-
:param pulumi.Input[Sequence[pulumi.Input['OpenSearchOpensearchArgs']]] opensearches: OpenSearch server
|
|
52
|
+
:param pulumi.Input[Sequence[pulumi.Input['OpenSearchOpensearchArgs']]] opensearches: Values provided by the OpenSearch server.
|
|
53
53
|
:param pulumi.Input[builtins.str] project_vpc_id: Specifies the VPC the service should run in. If the value is not set the service is not run inside a VPC. When set, the value should be given as a reference to set up dependencies correctly and the VPC must be in the same cloud and region as the service itself. Project can be freely moved to and from VPC after creation but doing so triggers migration to new servers so the operation can take significant amount of time to complete if the service has a lot of data.
|
|
54
54
|
:param pulumi.Input[Sequence[pulumi.Input['OpenSearchServiceIntegrationArgs']]] service_integrations: Service integrations to specify when creating a service. Not applied after initial service creation
|
|
55
55
|
:param pulumi.Input[Sequence[pulumi.Input[builtins.str]]] static_ips: Static IPs that are going to be associated with this service. Please assign a value using the 'toset' function. Once a static ip resource is in the 'assigned' state it cannot be unbound from the node again
|
|
@@ -203,7 +203,7 @@ class OpenSearchArgs:
|
|
|
203
203
|
@pulumi.getter
|
|
204
204
|
def opensearches(self) -> Optional[pulumi.Input[Sequence[pulumi.Input['OpenSearchOpensearchArgs']]]]:
|
|
205
205
|
"""
|
|
206
|
-
OpenSearch server
|
|
206
|
+
Values provided by the OpenSearch server.
|
|
207
207
|
"""
|
|
208
208
|
return pulumi.get(self, "opensearches")
|
|
209
209
|
|
|
@@ -328,7 +328,7 @@ class _OpenSearchState:
|
|
|
328
328
|
:param pulumi.Input[builtins.str] maintenance_window_dow: Day of week when maintenance operations should be performed. One monday, tuesday, wednesday, etc.
|
|
329
329
|
:param pulumi.Input[builtins.str] maintenance_window_time: Time of day when maintenance operations should be performed. UTC time in HH:mm:ss format.
|
|
330
330
|
:param pulumi.Input['OpenSearchOpensearchUserConfigArgs'] opensearch_user_config: Opensearch user configurable settings. **Warning:** There's no way to reset advanced configuration options to default. Options that you add cannot be removed later
|
|
331
|
-
:param pulumi.Input[Sequence[pulumi.Input['OpenSearchOpensearchArgs']]] opensearches: OpenSearch server
|
|
331
|
+
:param pulumi.Input[Sequence[pulumi.Input['OpenSearchOpensearchArgs']]] opensearches: Values provided by the OpenSearch server.
|
|
332
332
|
:param pulumi.Input[builtins.str] plan: Defines what kind of computing resources are allocated for the service. It can be changed after creation, though there are some restrictions when going to a smaller plan such as the new plan must have sufficient amount of disk space to store all current data and switching to a plan with fewer nodes might not be supported. The basic plan names are `hobbyist`, `startup-x`, `business-x` and `premium-x` where `x` is (roughly) the amount of memory on each node (also other attributes like number of CPUs and amount of disk space varies but naming is based on memory). The available options can be seen from the [Aiven pricing page](https://aiven.io/pricing).
|
|
333
333
|
:param pulumi.Input[builtins.str] project: The name of the project this resource belongs to. To set up proper dependencies please refer to this variable as a reference. Changing this property forces recreation of the resource.
|
|
334
334
|
:param pulumi.Input[builtins.str] project_vpc_id: Specifies the VPC the service should run in. If the value is not set the service is not run inside a VPC. When set, the value should be given as a reference to set up dependencies correctly and the VPC must be in the same cloud and region as the service itself. Project can be freely moved to and from VPC after creation but doing so triggers migration to new servers so the operation can take significant amount of time to complete if the service has a lot of data.
|
|
@@ -546,7 +546,7 @@ class _OpenSearchState:
|
|
|
546
546
|
@pulumi.getter
|
|
547
547
|
def opensearches(self) -> Optional[pulumi.Input[Sequence[pulumi.Input['OpenSearchOpensearchArgs']]]]:
|
|
548
548
|
"""
|
|
549
|
-
OpenSearch server
|
|
549
|
+
Values provided by the OpenSearch server.
|
|
550
550
|
"""
|
|
551
551
|
return pulumi.get(self, "opensearches")
|
|
552
552
|
|
|
@@ -768,7 +768,7 @@ class OpenSearch(pulumi.CustomResource):
|
|
|
768
768
|
termination_protection: Optional[pulumi.Input[builtins.bool]] = None,
|
|
769
769
|
__props__=None):
|
|
770
770
|
"""
|
|
771
|
-
|
|
771
|
+
Creates and manages an [Aiven for OpenSearch®](https://aiven.io/docs/products/opensearch) service.
|
|
772
772
|
|
|
773
773
|
## Example Usage
|
|
774
774
|
|
|
@@ -776,15 +776,14 @@ class OpenSearch(pulumi.CustomResource):
|
|
|
776
776
|
import pulumi
|
|
777
777
|
import pulumi_aiven as aiven
|
|
778
778
|
|
|
779
|
-
|
|
780
|
-
project=
|
|
779
|
+
example_opensearch = aiven.OpenSearch("example_opensearch",
|
|
780
|
+
project=example_project["project"],
|
|
781
781
|
cloud_name="google-europe-west1",
|
|
782
782
|
plan="startup-4",
|
|
783
|
-
service_name="
|
|
783
|
+
service_name="example-opensearch",
|
|
784
784
|
maintenance_window_dow="monday",
|
|
785
785
|
maintenance_window_time="10:00:00",
|
|
786
786
|
opensearch_user_config={
|
|
787
|
-
"opensearch_version": "1",
|
|
788
787
|
"opensearch_dashboards": {
|
|
789
788
|
"enabled": True,
|
|
790
789
|
"opensearch_request_timeout": 30000,
|
|
@@ -799,7 +798,7 @@ class OpenSearch(pulumi.CustomResource):
|
|
|
799
798
|
## Import
|
|
800
799
|
|
|
801
800
|
```sh
|
|
802
|
-
$ pulumi import aiven:index/openSearch:OpenSearch
|
|
801
|
+
$ pulumi import aiven:index/openSearch:OpenSearch example_opensearch PROJECT/SERVICE_NAME
|
|
803
802
|
```
|
|
804
803
|
|
|
805
804
|
:param str resource_name: The name of the resource.
|
|
@@ -810,7 +809,7 @@ class OpenSearch(pulumi.CustomResource):
|
|
|
810
809
|
:param pulumi.Input[builtins.str] maintenance_window_dow: Day of week when maintenance operations should be performed. One monday, tuesday, wednesday, etc.
|
|
811
810
|
:param pulumi.Input[builtins.str] maintenance_window_time: Time of day when maintenance operations should be performed. UTC time in HH:mm:ss format.
|
|
812
811
|
:param pulumi.Input[Union['OpenSearchOpensearchUserConfigArgs', 'OpenSearchOpensearchUserConfigArgsDict']] opensearch_user_config: Opensearch user configurable settings. **Warning:** There's no way to reset advanced configuration options to default. Options that you add cannot be removed later
|
|
813
|
-
:param pulumi.Input[Sequence[pulumi.Input[Union['OpenSearchOpensearchArgs', 'OpenSearchOpensearchArgsDict']]]] opensearches: OpenSearch server
|
|
812
|
+
:param pulumi.Input[Sequence[pulumi.Input[Union['OpenSearchOpensearchArgs', 'OpenSearchOpensearchArgsDict']]]] opensearches: Values provided by the OpenSearch server.
|
|
814
813
|
:param pulumi.Input[builtins.str] plan: Defines what kind of computing resources are allocated for the service. It can be changed after creation, though there are some restrictions when going to a smaller plan such as the new plan must have sufficient amount of disk space to store all current data and switching to a plan with fewer nodes might not be supported. The basic plan names are `hobbyist`, `startup-x`, `business-x` and `premium-x` where `x` is (roughly) the amount of memory on each node (also other attributes like number of CPUs and amount of disk space varies but naming is based on memory). The available options can be seen from the [Aiven pricing page](https://aiven.io/pricing).
|
|
815
814
|
:param pulumi.Input[builtins.str] project: The name of the project this resource belongs to. To set up proper dependencies please refer to this variable as a reference. Changing this property forces recreation of the resource.
|
|
816
815
|
:param pulumi.Input[builtins.str] project_vpc_id: Specifies the VPC the service should run in. If the value is not set the service is not run inside a VPC. When set, the value should be given as a reference to set up dependencies correctly and the VPC must be in the same cloud and region as the service itself. Project can be freely moved to and from VPC after creation but doing so triggers migration to new servers so the operation can take significant amount of time to complete if the service has a lot of data.
|
|
@@ -828,7 +827,7 @@ class OpenSearch(pulumi.CustomResource):
|
|
|
828
827
|
args: OpenSearchArgs,
|
|
829
828
|
opts: Optional[pulumi.ResourceOptions] = None):
|
|
830
829
|
"""
|
|
831
|
-
|
|
830
|
+
Creates and manages an [Aiven for OpenSearch®](https://aiven.io/docs/products/opensearch) service.
|
|
832
831
|
|
|
833
832
|
## Example Usage
|
|
834
833
|
|
|
@@ -836,15 +835,14 @@ class OpenSearch(pulumi.CustomResource):
|
|
|
836
835
|
import pulumi
|
|
837
836
|
import pulumi_aiven as aiven
|
|
838
837
|
|
|
839
|
-
|
|
840
|
-
project=
|
|
838
|
+
example_opensearch = aiven.OpenSearch("example_opensearch",
|
|
839
|
+
project=example_project["project"],
|
|
841
840
|
cloud_name="google-europe-west1",
|
|
842
841
|
plan="startup-4",
|
|
843
|
-
service_name="
|
|
842
|
+
service_name="example-opensearch",
|
|
844
843
|
maintenance_window_dow="monday",
|
|
845
844
|
maintenance_window_time="10:00:00",
|
|
846
845
|
opensearch_user_config={
|
|
847
|
-
"opensearch_version": "1",
|
|
848
846
|
"opensearch_dashboards": {
|
|
849
847
|
"enabled": True,
|
|
850
848
|
"opensearch_request_timeout": 30000,
|
|
@@ -859,7 +857,7 @@ class OpenSearch(pulumi.CustomResource):
|
|
|
859
857
|
## Import
|
|
860
858
|
|
|
861
859
|
```sh
|
|
862
|
-
$ pulumi import aiven:index/openSearch:OpenSearch
|
|
860
|
+
$ pulumi import aiven:index/openSearch:OpenSearch example_opensearch PROJECT/SERVICE_NAME
|
|
863
861
|
```
|
|
864
862
|
|
|
865
863
|
:param str resource_name: The name of the resource.
|
|
@@ -994,7 +992,7 @@ class OpenSearch(pulumi.CustomResource):
|
|
|
994
992
|
:param pulumi.Input[builtins.str] maintenance_window_dow: Day of week when maintenance operations should be performed. One monday, tuesday, wednesday, etc.
|
|
995
993
|
:param pulumi.Input[builtins.str] maintenance_window_time: Time of day when maintenance operations should be performed. UTC time in HH:mm:ss format.
|
|
996
994
|
:param pulumi.Input[Union['OpenSearchOpensearchUserConfigArgs', 'OpenSearchOpensearchUserConfigArgsDict']] opensearch_user_config: Opensearch user configurable settings. **Warning:** There's no way to reset advanced configuration options to default. Options that you add cannot be removed later
|
|
997
|
-
:param pulumi.Input[Sequence[pulumi.Input[Union['OpenSearchOpensearchArgs', 'OpenSearchOpensearchArgsDict']]]] opensearches: OpenSearch server
|
|
995
|
+
:param pulumi.Input[Sequence[pulumi.Input[Union['OpenSearchOpensearchArgs', 'OpenSearchOpensearchArgsDict']]]] opensearches: Values provided by the OpenSearch server.
|
|
998
996
|
:param pulumi.Input[builtins.str] plan: Defines what kind of computing resources are allocated for the service. It can be changed after creation, though there are some restrictions when going to a smaller plan such as the new plan must have sufficient amount of disk space to store all current data and switching to a plan with fewer nodes might not be supported. The basic plan names are `hobbyist`, `startup-x`, `business-x` and `premium-x` where `x` is (roughly) the amount of memory on each node (also other attributes like number of CPUs and amount of disk space varies but naming is based on memory). The available options can be seen from the [Aiven pricing page](https://aiven.io/pricing).
|
|
999
997
|
:param pulumi.Input[builtins.str] project: The name of the project this resource belongs to. To set up proper dependencies please refer to this variable as a reference. Changing this property forces recreation of the resource.
|
|
1000
998
|
:param pulumi.Input[builtins.str] project_vpc_id: Specifies the VPC the service should run in. If the value is not set the service is not run inside a VPC. When set, the value should be given as a reference to set up dependencies correctly and the VPC must be in the same cloud and region as the service itself. Project can be freely moved to and from VPC after creation but doing so triggers migration to new servers so the operation can take significant amount of time to complete if the service has a lot of data.
|
|
@@ -1139,7 +1137,7 @@ class OpenSearch(pulumi.CustomResource):
|
|
|
1139
1137
|
@pulumi.getter
|
|
1140
1138
|
def opensearches(self) -> pulumi.Output[Sequence['outputs.OpenSearchOpensearch']]:
|
|
1141
1139
|
"""
|
|
1142
|
-
OpenSearch server
|
|
1140
|
+
Values provided by the OpenSearch server.
|
|
1143
1141
|
"""
|
|
1144
1142
|
return pulumi.get(self, "opensearches")
|
|
1145
1143
|
|
|
@@ -28,7 +28,7 @@ class OpenSearchAclConfigArgs:
|
|
|
28
28
|
The set of arguments for constructing a OpenSearchAclConfig resource.
|
|
29
29
|
:param pulumi.Input[builtins.str] project: The name of the project this resource belongs to. To set up proper dependencies please refer to this variable as a reference. Changing this property forces recreation of the resource.
|
|
30
30
|
:param pulumi.Input[builtins.str] service_name: The name of the service that this resource belongs to. To set up proper dependencies please refer to this variable as a reference. Changing this property forces recreation of the resource.
|
|
31
|
-
:param pulumi.Input[builtins.bool] enabled: Enable OpenSearch ACLs. When disabled authenticated service users have unrestricted access. The default value is `true`.
|
|
31
|
+
:param pulumi.Input[builtins.bool] enabled: Enable OpenSearch ACLs. When disabled, authenticated service users have unrestricted access. The default value is `true`.
|
|
32
32
|
:param pulumi.Input[builtins.bool] extended_acl: Index rules can be applied in a limited fashion to the _mget, _msearch and _bulk APIs (and only those) by enabling the ExtendedAcl option for the service. When it is enabled, users can use these APIs as long as all operations only target indexes they have been granted access to. The default value is `true`.
|
|
33
33
|
"""
|
|
34
34
|
pulumi.set(__self__, "project", project)
|
|
@@ -66,7 +66,7 @@ class OpenSearchAclConfigArgs:
|
|
|
66
66
|
@pulumi.getter
|
|
67
67
|
def enabled(self) -> Optional[pulumi.Input[builtins.bool]]:
|
|
68
68
|
"""
|
|
69
|
-
Enable OpenSearch ACLs. When disabled authenticated service users have unrestricted access. The default value is `true`.
|
|
69
|
+
Enable OpenSearch ACLs. When disabled, authenticated service users have unrestricted access. The default value is `true`.
|
|
70
70
|
"""
|
|
71
71
|
return pulumi.get(self, "enabled")
|
|
72
72
|
|
|
@@ -96,7 +96,7 @@ class _OpenSearchAclConfigState:
|
|
|
96
96
|
service_name: Optional[pulumi.Input[builtins.str]] = None):
|
|
97
97
|
"""
|
|
98
98
|
Input properties used for looking up and filtering OpenSearchAclConfig resources.
|
|
99
|
-
:param pulumi.Input[builtins.bool] enabled: Enable OpenSearch ACLs. When disabled authenticated service users have unrestricted access. The default value is `true`.
|
|
99
|
+
:param pulumi.Input[builtins.bool] enabled: Enable OpenSearch ACLs. When disabled, authenticated service users have unrestricted access. The default value is `true`.
|
|
100
100
|
:param pulumi.Input[builtins.bool] extended_acl: Index rules can be applied in a limited fashion to the _mget, _msearch and _bulk APIs (and only those) by enabling the ExtendedAcl option for the service. When it is enabled, users can use these APIs as long as all operations only target indexes they have been granted access to. The default value is `true`.
|
|
101
101
|
:param pulumi.Input[builtins.str] project: The name of the project this resource belongs to. To set up proper dependencies please refer to this variable as a reference. Changing this property forces recreation of the resource.
|
|
102
102
|
:param pulumi.Input[builtins.str] service_name: The name of the service that this resource belongs to. To set up proper dependencies please refer to this variable as a reference. Changing this property forces recreation of the resource.
|
|
@@ -114,7 +114,7 @@ class _OpenSearchAclConfigState:
|
|
|
114
114
|
@pulumi.getter
|
|
115
115
|
def enabled(self) -> Optional[pulumi.Input[builtins.bool]]:
|
|
116
116
|
"""
|
|
117
|
-
Enable OpenSearch ACLs. When disabled authenticated service users have unrestricted access. The default value is `true`.
|
|
117
|
+
Enable OpenSearch ACLs. When disabled, authenticated service users have unrestricted access. The default value is `true`.
|
|
118
118
|
"""
|
|
119
119
|
return pulumi.get(self, "enabled")
|
|
120
120
|
|
|
@@ -171,7 +171,11 @@ class OpenSearchAclConfig(pulumi.CustomResource):
|
|
|
171
171
|
service_name: Optional[pulumi.Input[builtins.str]] = None,
|
|
172
172
|
__props__=None):
|
|
173
173
|
"""
|
|
174
|
-
|
|
174
|
+
Enables access control for an Aiven for OpenSearch® service.
|
|
175
|
+
|
|
176
|
+
By default, service users are granted full access rights. To limit their access, you can enable access control and create ACLs
|
|
177
|
+
that define permissions and patterns. Alternatively, you can enable OpenSearch Security management
|
|
178
|
+
to manage users and permissions with the OpenSearch Security dashboard.
|
|
175
179
|
|
|
176
180
|
## Example Usage
|
|
177
181
|
|
|
@@ -179,32 +183,22 @@ class OpenSearchAclConfig(pulumi.CustomResource):
|
|
|
179
183
|
import pulumi
|
|
180
184
|
import pulumi_aiven as aiven
|
|
181
185
|
|
|
182
|
-
|
|
183
|
-
|
|
184
|
-
|
|
185
|
-
cloud_name="google-europe-west1",
|
|
186
|
-
plan="startup-4",
|
|
187
|
-
service_name="example_service_name",
|
|
188
|
-
maintenance_window_dow="monday",
|
|
189
|
-
maintenance_window_time="10:00:00")
|
|
190
|
-
foo_opensearch_user = aiven.OpensearchUser("foo",
|
|
191
|
-
service_name=bar.service_name,
|
|
192
|
-
project=foo.project,
|
|
193
|
-
username="user-example")
|
|
194
|
-
foo_open_search_acl_config = aiven.OpenSearchAclConfig("foo",
|
|
195
|
-
project=foo.project,
|
|
196
|
-
service_name=bar.service_name,
|
|
186
|
+
main = aiven.OpenSearchAclConfig("main",
|
|
187
|
+
project=example_project["project"],
|
|
188
|
+
service_name=example_opensearch["serviceName"],
|
|
197
189
|
enabled=True,
|
|
198
190
|
extended_acl=False)
|
|
199
191
|
```
|
|
200
192
|
|
|
201
193
|
## Import
|
|
202
194
|
|
|
203
|
-
|
|
195
|
+
```sh
|
|
196
|
+
$ pulumi import aiven:index/openSearchAclConfig:OpenSearchAclConfig main PROJECT/SERVICE_NAME
|
|
197
|
+
```
|
|
204
198
|
|
|
205
199
|
:param str resource_name: The name of the resource.
|
|
206
200
|
:param pulumi.ResourceOptions opts: Options for the resource.
|
|
207
|
-
:param pulumi.Input[builtins.bool] enabled: Enable OpenSearch ACLs. When disabled authenticated service users have unrestricted access. The default value is `true`.
|
|
201
|
+
:param pulumi.Input[builtins.bool] enabled: Enable OpenSearch ACLs. When disabled, authenticated service users have unrestricted access. The default value is `true`.
|
|
208
202
|
:param pulumi.Input[builtins.bool] extended_acl: Index rules can be applied in a limited fashion to the _mget, _msearch and _bulk APIs (and only those) by enabling the ExtendedAcl option for the service. When it is enabled, users can use these APIs as long as all operations only target indexes they have been granted access to. The default value is `true`.
|
|
209
203
|
:param pulumi.Input[builtins.str] project: The name of the project this resource belongs to. To set up proper dependencies please refer to this variable as a reference. Changing this property forces recreation of the resource.
|
|
210
204
|
:param pulumi.Input[builtins.str] service_name: The name of the service that this resource belongs to. To set up proper dependencies please refer to this variable as a reference. Changing this property forces recreation of the resource.
|
|
@@ -216,7 +210,11 @@ class OpenSearchAclConfig(pulumi.CustomResource):
|
|
|
216
210
|
args: OpenSearchAclConfigArgs,
|
|
217
211
|
opts: Optional[pulumi.ResourceOptions] = None):
|
|
218
212
|
"""
|
|
219
|
-
|
|
213
|
+
Enables access control for an Aiven for OpenSearch® service.
|
|
214
|
+
|
|
215
|
+
By default, service users are granted full access rights. To limit their access, you can enable access control and create ACLs
|
|
216
|
+
that define permissions and patterns. Alternatively, you can enable OpenSearch Security management
|
|
217
|
+
to manage users and permissions with the OpenSearch Security dashboard.
|
|
220
218
|
|
|
221
219
|
## Example Usage
|
|
222
220
|
|
|
@@ -224,28 +222,18 @@ class OpenSearchAclConfig(pulumi.CustomResource):
|
|
|
224
222
|
import pulumi
|
|
225
223
|
import pulumi_aiven as aiven
|
|
226
224
|
|
|
227
|
-
|
|
228
|
-
|
|
229
|
-
|
|
230
|
-
cloud_name="google-europe-west1",
|
|
231
|
-
plan="startup-4",
|
|
232
|
-
service_name="example_service_name",
|
|
233
|
-
maintenance_window_dow="monday",
|
|
234
|
-
maintenance_window_time="10:00:00")
|
|
235
|
-
foo_opensearch_user = aiven.OpensearchUser("foo",
|
|
236
|
-
service_name=bar.service_name,
|
|
237
|
-
project=foo.project,
|
|
238
|
-
username="user-example")
|
|
239
|
-
foo_open_search_acl_config = aiven.OpenSearchAclConfig("foo",
|
|
240
|
-
project=foo.project,
|
|
241
|
-
service_name=bar.service_name,
|
|
225
|
+
main = aiven.OpenSearchAclConfig("main",
|
|
226
|
+
project=example_project["project"],
|
|
227
|
+
service_name=example_opensearch["serviceName"],
|
|
242
228
|
enabled=True,
|
|
243
229
|
extended_acl=False)
|
|
244
230
|
```
|
|
245
231
|
|
|
246
232
|
## Import
|
|
247
233
|
|
|
248
|
-
|
|
234
|
+
```sh
|
|
235
|
+
$ pulumi import aiven:index/openSearchAclConfig:OpenSearchAclConfig main PROJECT/SERVICE_NAME
|
|
236
|
+
```
|
|
249
237
|
|
|
250
238
|
:param str resource_name: The name of the resource.
|
|
251
239
|
:param OpenSearchAclConfigArgs args: The arguments to use to populate this resource's properties.
|
|
@@ -304,7 +292,7 @@ class OpenSearchAclConfig(pulumi.CustomResource):
|
|
|
304
292
|
:param str resource_name: The unique name of the resulting resource.
|
|
305
293
|
:param pulumi.Input[str] id: The unique provider ID of the resource to lookup.
|
|
306
294
|
:param pulumi.ResourceOptions opts: Options for the resource.
|
|
307
|
-
:param pulumi.Input[builtins.bool] enabled: Enable OpenSearch ACLs. When disabled authenticated service users have unrestricted access. The default value is `true`.
|
|
295
|
+
:param pulumi.Input[builtins.bool] enabled: Enable OpenSearch ACLs. When disabled, authenticated service users have unrestricted access. The default value is `true`.
|
|
308
296
|
:param pulumi.Input[builtins.bool] extended_acl: Index rules can be applied in a limited fashion to the _mget, _msearch and _bulk APIs (and only those) by enabling the ExtendedAcl option for the service. When it is enabled, users can use these APIs as long as all operations only target indexes they have been granted access to. The default value is `true`.
|
|
309
297
|
:param pulumi.Input[builtins.str] project: The name of the project this resource belongs to. To set up proper dependencies please refer to this variable as a reference. Changing this property forces recreation of the resource.
|
|
310
298
|
:param pulumi.Input[builtins.str] service_name: The name of the service that this resource belongs to. To set up proper dependencies please refer to this variable as a reference. Changing this property forces recreation of the resource.
|
|
@@ -323,7 +311,7 @@ class OpenSearchAclConfig(pulumi.CustomResource):
|
|
|
323
311
|
@pulumi.getter
|
|
324
312
|
def enabled(self) -> pulumi.Output[Optional[builtins.bool]]:
|
|
325
313
|
"""
|
|
326
|
-
Enable OpenSearch ACLs. When disabled authenticated service users have unrestricted access. The default value is `true`.
|
|
314
|
+
Enable OpenSearch ACLs. When disabled, authenticated service users have unrestricted access. The default value is `true`.
|
|
327
315
|
"""
|
|
328
316
|
return pulumi.get(self, "enabled")
|
|
329
317
|
|
|
@@ -27,11 +27,11 @@ class OpenSearchAclRuleArgs:
|
|
|
27
27
|
username: pulumi.Input[builtins.str]):
|
|
28
28
|
"""
|
|
29
29
|
The set of arguments for constructing a OpenSearchAclRule resource.
|
|
30
|
-
:param pulumi.Input[builtins.str] index: The index pattern for this ACL
|
|
31
|
-
:param pulumi.Input[builtins.str] permission: The permissions for this ACL
|
|
30
|
+
:param pulumi.Input[builtins.str] index: The index pattern for this ACL rule. Maximum length: `249`. Changing this property forces recreation of the resource.
|
|
31
|
+
:param pulumi.Input[builtins.str] permission: The permissions for this ACL rule. The possible values are `admin`, `deny`, `read`, `readwrite` and `write`.
|
|
32
32
|
:param pulumi.Input[builtins.str] project: The name of the project this resource belongs to. To set up proper dependencies please refer to this variable as a reference. Changing this property forces recreation of the resource.
|
|
33
33
|
:param pulumi.Input[builtins.str] service_name: The name of the service that this resource belongs to. To set up proper dependencies please refer to this variable as a reference. Changing this property forces recreation of the resource.
|
|
34
|
-
:param pulumi.Input[builtins.str] username: The username for the ACL
|
|
34
|
+
:param pulumi.Input[builtins.str] username: The username for the OpenSearch user this ACL rule applies to. Maximum length: `40`. To set up proper dependencies please refer to this variable as a reference. Changing this property forces recreation of the resource.
|
|
35
35
|
"""
|
|
36
36
|
pulumi.set(__self__, "index", index)
|
|
37
37
|
pulumi.set(__self__, "permission", permission)
|
|
@@ -43,7 +43,7 @@ class OpenSearchAclRuleArgs:
|
|
|
43
43
|
@pulumi.getter
|
|
44
44
|
def index(self) -> pulumi.Input[builtins.str]:
|
|
45
45
|
"""
|
|
46
|
-
The index pattern for this ACL
|
|
46
|
+
The index pattern for this ACL rule. Maximum length: `249`. Changing this property forces recreation of the resource.
|
|
47
47
|
"""
|
|
48
48
|
return pulumi.get(self, "index")
|
|
49
49
|
|
|
@@ -55,7 +55,7 @@ class OpenSearchAclRuleArgs:
|
|
|
55
55
|
@pulumi.getter
|
|
56
56
|
def permission(self) -> pulumi.Input[builtins.str]:
|
|
57
57
|
"""
|
|
58
|
-
The permissions for this ACL
|
|
58
|
+
The permissions for this ACL rule. The possible values are `admin`, `deny`, `read`, `readwrite` and `write`.
|
|
59
59
|
"""
|
|
60
60
|
return pulumi.get(self, "permission")
|
|
61
61
|
|
|
@@ -91,7 +91,7 @@ class OpenSearchAclRuleArgs:
|
|
|
91
91
|
@pulumi.getter
|
|
92
92
|
def username(self) -> pulumi.Input[builtins.str]:
|
|
93
93
|
"""
|
|
94
|
-
The username for the ACL
|
|
94
|
+
The username for the OpenSearch user this ACL rule applies to. Maximum length: `40`. To set up proper dependencies please refer to this variable as a reference. Changing this property forces recreation of the resource.
|
|
95
95
|
"""
|
|
96
96
|
return pulumi.get(self, "username")
|
|
97
97
|
|
|
@@ -110,11 +110,11 @@ class _OpenSearchAclRuleState:
|
|
|
110
110
|
username: Optional[pulumi.Input[builtins.str]] = None):
|
|
111
111
|
"""
|
|
112
112
|
Input properties used for looking up and filtering OpenSearchAclRule resources.
|
|
113
|
-
:param pulumi.Input[builtins.str] index: The index pattern for this ACL
|
|
114
|
-
:param pulumi.Input[builtins.str] permission: The permissions for this ACL
|
|
113
|
+
:param pulumi.Input[builtins.str] index: The index pattern for this ACL rule. Maximum length: `249`. Changing this property forces recreation of the resource.
|
|
114
|
+
:param pulumi.Input[builtins.str] permission: The permissions for this ACL rule. The possible values are `admin`, `deny`, `read`, `readwrite` and `write`.
|
|
115
115
|
:param pulumi.Input[builtins.str] project: The name of the project this resource belongs to. To set up proper dependencies please refer to this variable as a reference. Changing this property forces recreation of the resource.
|
|
116
116
|
:param pulumi.Input[builtins.str] service_name: The name of the service that this resource belongs to. To set up proper dependencies please refer to this variable as a reference. Changing this property forces recreation of the resource.
|
|
117
|
-
:param pulumi.Input[builtins.str] username: The username for the ACL
|
|
117
|
+
:param pulumi.Input[builtins.str] username: The username for the OpenSearch user this ACL rule applies to. Maximum length: `40`. To set up proper dependencies please refer to this variable as a reference. Changing this property forces recreation of the resource.
|
|
118
118
|
"""
|
|
119
119
|
if index is not None:
|
|
120
120
|
pulumi.set(__self__, "index", index)
|
|
@@ -131,7 +131,7 @@ class _OpenSearchAclRuleState:
|
|
|
131
131
|
@pulumi.getter
|
|
132
132
|
def index(self) -> Optional[pulumi.Input[builtins.str]]:
|
|
133
133
|
"""
|
|
134
|
-
The index pattern for this ACL
|
|
134
|
+
The index pattern for this ACL rule. Maximum length: `249`. Changing this property forces recreation of the resource.
|
|
135
135
|
"""
|
|
136
136
|
return pulumi.get(self, "index")
|
|
137
137
|
|
|
@@ -143,7 +143,7 @@ class _OpenSearchAclRuleState:
|
|
|
143
143
|
@pulumi.getter
|
|
144
144
|
def permission(self) -> Optional[pulumi.Input[builtins.str]]:
|
|
145
145
|
"""
|
|
146
|
-
The permissions for this ACL
|
|
146
|
+
The permissions for this ACL rule. The possible values are `admin`, `deny`, `read`, `readwrite` and `write`.
|
|
147
147
|
"""
|
|
148
148
|
return pulumi.get(self, "permission")
|
|
149
149
|
|
|
@@ -179,7 +179,7 @@ class _OpenSearchAclRuleState:
|
|
|
179
179
|
@pulumi.getter
|
|
180
180
|
def username(self) -> Optional[pulumi.Input[builtins.str]]:
|
|
181
181
|
"""
|
|
182
|
-
The username for the ACL
|
|
182
|
+
The username for the OpenSearch user this ACL rule applies to. Maximum length: `40`. To set up proper dependencies please refer to this variable as a reference. Changing this property forces recreation of the resource.
|
|
183
183
|
"""
|
|
184
184
|
return pulumi.get(self, "username")
|
|
185
185
|
|
|
@@ -201,7 +201,7 @@ class OpenSearchAclRule(pulumi.CustomResource):
|
|
|
201
201
|
username: Optional[pulumi.Input[builtins.str]] = None,
|
|
202
202
|
__props__=None):
|
|
203
203
|
"""
|
|
204
|
-
|
|
204
|
+
Create an access control list (ACL) rule for indexes in an Aiven for OpenSearch® service. ACLs apply only to indexes and don't control access to other OpenSearch APIs such as OpenSearch Dashboards.
|
|
205
205
|
|
|
206
206
|
## Example Usage
|
|
207
207
|
|
|
@@ -209,32 +209,32 @@ class OpenSearchAclRule(pulumi.CustomResource):
|
|
|
209
209
|
import pulumi
|
|
210
210
|
import pulumi_aiven as aiven
|
|
211
211
|
|
|
212
|
-
|
|
213
|
-
project=
|
|
214
|
-
service_name=
|
|
212
|
+
os_user1 = aiven.OpensearchUser("os_user_1",
|
|
213
|
+
project=example_project["project"],
|
|
214
|
+
service_name=example_opensearch["serviceName"],
|
|
215
215
|
username="documentation-user-1")
|
|
216
216
|
os_user2 = aiven.OpensearchUser("os_user_2",
|
|
217
|
-
project=
|
|
218
|
-
service_name=
|
|
217
|
+
project=example_project["project"],
|
|
218
|
+
service_name=example_opensearch["serviceName"],
|
|
219
219
|
username="documentation-user-2")
|
|
220
220
|
os_acls_config = aiven.OpenSearchAclConfig("os_acls_config",
|
|
221
|
-
project=
|
|
222
|
-
service_name=
|
|
221
|
+
project=example_project["project"],
|
|
222
|
+
service_name=example_opensearch["serviceName"],
|
|
223
223
|
enabled=True,
|
|
224
224
|
extended_acl=False)
|
|
225
225
|
acl_rules = [
|
|
226
226
|
{
|
|
227
|
-
"username":
|
|
227
|
+
"username": os_user1.username,
|
|
228
228
|
"index": "index2",
|
|
229
229
|
"permission": "readwrite",
|
|
230
230
|
},
|
|
231
231
|
{
|
|
232
|
-
"username":
|
|
232
|
+
"username": os_user1.username,
|
|
233
233
|
"index": "index3",
|
|
234
234
|
"permission": "read",
|
|
235
235
|
},
|
|
236
236
|
{
|
|
237
|
-
"username":
|
|
237
|
+
"username": os_user1.username,
|
|
238
238
|
"index": "index5",
|
|
239
239
|
"permission": "deny",
|
|
240
240
|
},
|
|
@@ -253,8 +253,8 @@ class OpenSearchAclRule(pulumi.CustomResource):
|
|
|
253
253
|
def create_os_acl_rule(range_body):
|
|
254
254
|
for range in [{"key": k, "value": v} for [k, v] in enumerate(range_body)]:
|
|
255
255
|
os_acl_rule.append(aiven.OpenSearchAclRule(f"os_acl_rule-{range['key']}",
|
|
256
|
-
project=
|
|
257
|
-
service_name=
|
|
256
|
+
project=example_project["project"],
|
|
257
|
+
service_name=example_opensearch["serviceName"],
|
|
258
258
|
username=range["value"]["username"],
|
|
259
259
|
index=range["value"]["index"],
|
|
260
260
|
permission=range["value"]["permission"]))
|
|
@@ -270,11 +270,11 @@ class OpenSearchAclRule(pulumi.CustomResource):
|
|
|
270
270
|
|
|
271
271
|
:param str resource_name: The name of the resource.
|
|
272
272
|
:param pulumi.ResourceOptions opts: Options for the resource.
|
|
273
|
-
:param pulumi.Input[builtins.str] index: The index pattern for this ACL
|
|
274
|
-
:param pulumi.Input[builtins.str] permission: The permissions for this ACL
|
|
273
|
+
:param pulumi.Input[builtins.str] index: The index pattern for this ACL rule. Maximum length: `249`. Changing this property forces recreation of the resource.
|
|
274
|
+
:param pulumi.Input[builtins.str] permission: The permissions for this ACL rule. The possible values are `admin`, `deny`, `read`, `readwrite` and `write`.
|
|
275
275
|
:param pulumi.Input[builtins.str] project: The name of the project this resource belongs to. To set up proper dependencies please refer to this variable as a reference. Changing this property forces recreation of the resource.
|
|
276
276
|
:param pulumi.Input[builtins.str] service_name: The name of the service that this resource belongs to. To set up proper dependencies please refer to this variable as a reference. Changing this property forces recreation of the resource.
|
|
277
|
-
:param pulumi.Input[builtins.str] username: The username for the ACL
|
|
277
|
+
:param pulumi.Input[builtins.str] username: The username for the OpenSearch user this ACL rule applies to. Maximum length: `40`. To set up proper dependencies please refer to this variable as a reference. Changing this property forces recreation of the resource.
|
|
278
278
|
"""
|
|
279
279
|
...
|
|
280
280
|
@overload
|
|
@@ -283,7 +283,7 @@ class OpenSearchAclRule(pulumi.CustomResource):
|
|
|
283
283
|
args: OpenSearchAclRuleArgs,
|
|
284
284
|
opts: Optional[pulumi.ResourceOptions] = None):
|
|
285
285
|
"""
|
|
286
|
-
|
|
286
|
+
Create an access control list (ACL) rule for indexes in an Aiven for OpenSearch® service. ACLs apply only to indexes and don't control access to other OpenSearch APIs such as OpenSearch Dashboards.
|
|
287
287
|
|
|
288
288
|
## Example Usage
|
|
289
289
|
|
|
@@ -291,32 +291,32 @@ class OpenSearchAclRule(pulumi.CustomResource):
|
|
|
291
291
|
import pulumi
|
|
292
292
|
import pulumi_aiven as aiven
|
|
293
293
|
|
|
294
|
-
|
|
295
|
-
project=
|
|
296
|
-
service_name=
|
|
294
|
+
os_user1 = aiven.OpensearchUser("os_user_1",
|
|
295
|
+
project=example_project["project"],
|
|
296
|
+
service_name=example_opensearch["serviceName"],
|
|
297
297
|
username="documentation-user-1")
|
|
298
298
|
os_user2 = aiven.OpensearchUser("os_user_2",
|
|
299
|
-
project=
|
|
300
|
-
service_name=
|
|
299
|
+
project=example_project["project"],
|
|
300
|
+
service_name=example_opensearch["serviceName"],
|
|
301
301
|
username="documentation-user-2")
|
|
302
302
|
os_acls_config = aiven.OpenSearchAclConfig("os_acls_config",
|
|
303
|
-
project=
|
|
304
|
-
service_name=
|
|
303
|
+
project=example_project["project"],
|
|
304
|
+
service_name=example_opensearch["serviceName"],
|
|
305
305
|
enabled=True,
|
|
306
306
|
extended_acl=False)
|
|
307
307
|
acl_rules = [
|
|
308
308
|
{
|
|
309
|
-
"username":
|
|
309
|
+
"username": os_user1.username,
|
|
310
310
|
"index": "index2",
|
|
311
311
|
"permission": "readwrite",
|
|
312
312
|
},
|
|
313
313
|
{
|
|
314
|
-
"username":
|
|
314
|
+
"username": os_user1.username,
|
|
315
315
|
"index": "index3",
|
|
316
316
|
"permission": "read",
|
|
317
317
|
},
|
|
318
318
|
{
|
|
319
|
-
"username":
|
|
319
|
+
"username": os_user1.username,
|
|
320
320
|
"index": "index5",
|
|
321
321
|
"permission": "deny",
|
|
322
322
|
},
|
|
@@ -335,8 +335,8 @@ class OpenSearchAclRule(pulumi.CustomResource):
|
|
|
335
335
|
def create_os_acl_rule(range_body):
|
|
336
336
|
for range in [{"key": k, "value": v} for [k, v] in enumerate(range_body)]:
|
|
337
337
|
os_acl_rule.append(aiven.OpenSearchAclRule(f"os_acl_rule-{range['key']}",
|
|
338
|
-
project=
|
|
339
|
-
service_name=
|
|
338
|
+
project=example_project["project"],
|
|
339
|
+
service_name=example_opensearch["serviceName"],
|
|
340
340
|
username=range["value"]["username"],
|
|
341
341
|
index=range["value"]["index"],
|
|
342
342
|
permission=range["value"]["permission"]))
|
|
@@ -416,11 +416,11 @@ class OpenSearchAclRule(pulumi.CustomResource):
|
|
|
416
416
|
:param str resource_name: The unique name of the resulting resource.
|
|
417
417
|
:param pulumi.Input[str] id: The unique provider ID of the resource to lookup.
|
|
418
418
|
:param pulumi.ResourceOptions opts: Options for the resource.
|
|
419
|
-
:param pulumi.Input[builtins.str] index: The index pattern for this ACL
|
|
420
|
-
:param pulumi.Input[builtins.str] permission: The permissions for this ACL
|
|
419
|
+
:param pulumi.Input[builtins.str] index: The index pattern for this ACL rule. Maximum length: `249`. Changing this property forces recreation of the resource.
|
|
420
|
+
:param pulumi.Input[builtins.str] permission: The permissions for this ACL rule. The possible values are `admin`, `deny`, `read`, `readwrite` and `write`.
|
|
421
421
|
:param pulumi.Input[builtins.str] project: The name of the project this resource belongs to. To set up proper dependencies please refer to this variable as a reference. Changing this property forces recreation of the resource.
|
|
422
422
|
:param pulumi.Input[builtins.str] service_name: The name of the service that this resource belongs to. To set up proper dependencies please refer to this variable as a reference. Changing this property forces recreation of the resource.
|
|
423
|
-
:param pulumi.Input[builtins.str] username: The username for the ACL
|
|
423
|
+
:param pulumi.Input[builtins.str] username: The username for the OpenSearch user this ACL rule applies to. Maximum length: `40`. To set up proper dependencies please refer to this variable as a reference. Changing this property forces recreation of the resource.
|
|
424
424
|
"""
|
|
425
425
|
opts = pulumi.ResourceOptions.merge(opts, pulumi.ResourceOptions(id=id))
|
|
426
426
|
|
|
@@ -437,7 +437,7 @@ class OpenSearchAclRule(pulumi.CustomResource):
|
|
|
437
437
|
@pulumi.getter
|
|
438
438
|
def index(self) -> pulumi.Output[builtins.str]:
|
|
439
439
|
"""
|
|
440
|
-
The index pattern for this ACL
|
|
440
|
+
The index pattern for this ACL rule. Maximum length: `249`. Changing this property forces recreation of the resource.
|
|
441
441
|
"""
|
|
442
442
|
return pulumi.get(self, "index")
|
|
443
443
|
|
|
@@ -445,7 +445,7 @@ class OpenSearchAclRule(pulumi.CustomResource):
|
|
|
445
445
|
@pulumi.getter
|
|
446
446
|
def permission(self) -> pulumi.Output[builtins.str]:
|
|
447
447
|
"""
|
|
448
|
-
The permissions for this ACL
|
|
448
|
+
The permissions for this ACL rule. The possible values are `admin`, `deny`, `read`, `readwrite` and `write`.
|
|
449
449
|
"""
|
|
450
450
|
return pulumi.get(self, "permission")
|
|
451
451
|
|
|
@@ -469,7 +469,7 @@ class OpenSearchAclRule(pulumi.CustomResource):
|
|
|
469
469
|
@pulumi.getter
|
|
470
470
|
def username(self) -> pulumi.Output[builtins.str]:
|
|
471
471
|
"""
|
|
472
|
-
The username for the ACL
|
|
472
|
+
The username for the OpenSearch user this ACL rule applies to. Maximum length: `40`. To set up proper dependencies please refer to this variable as a reference. Changing this property forces recreation of the resource.
|
|
473
473
|
"""
|
|
474
474
|
return pulumi.get(self, "username")
|
|
475
475
|
|