pulumi-alicloud 3.73.0__py3-none-any.whl → 3.73.0a1736226912__py3-none-any.whl
This diff represents the content of publicly available package versions that have been released to one of the supported registries. The information contained in this diff is provided for informational purposes only and reflects changes between package versions as they appear in their respective public registries.
Potentially problematic release.
This version of pulumi-alicloud might be problematic. Click here for more details.
- pulumi_alicloud/__init__.py +0 -59
- pulumi_alicloud/alb/__init__.py +0 -1
- pulumi_alicloud/alb/_inputs.py +6 -6
- pulumi_alicloud/alb/a_script.py +98 -116
- pulumi_alicloud/alb/outputs.py +4 -4
- pulumi_alicloud/alikafka/instance.py +70 -188
- pulumi_alicloud/amqp/instance.py +28 -77
- pulumi_alicloud/bastionhost/_inputs.py +38 -40
- pulumi_alicloud/bastionhost/get_instances.py +22 -6
- pulumi_alicloud/bastionhost/outputs.py +49 -60
- pulumi_alicloud/cen/instance_grant.py +0 -4
- pulumi_alicloud/cms/_inputs.py +15 -21
- pulumi_alicloud/cms/alarm.py +7 -7
- pulumi_alicloud/cms/outputs.py +10 -14
- pulumi_alicloud/cs/get_edge_kubernetes_clusters.py +2 -4
- pulumi_alicloud/cs/get_managed_kubernetes_clusters.py +0 -2
- pulumi_alicloud/cs/kubernetes.py +14 -14
- pulumi_alicloud/cs/managed_kubernetes.py +47 -137
- pulumi_alicloud/dataworks/__init__.py +0 -4
- pulumi_alicloud/dataworks/_inputs.py +0 -1534
- pulumi_alicloud/dataworks/outputs.py +0 -1247
- pulumi_alicloud/dcdn/waf_rule.py +14 -14
- pulumi_alicloud/dns/get_alidns_domains.py +2 -7
- pulumi_alicloud/dns/outputs.py +0 -8
- pulumi_alicloud/ecs/ecs_launch_template.py +0 -122
- pulumi_alicloud/ecs/ecs_network_interface.py +14 -14
- pulumi_alicloud/ecs/ecs_session_manager_status.py +18 -18
- pulumi_alicloud/ecs/instance.py +7 -7
- pulumi_alicloud/ecs/launch_template.py +0 -88
- pulumi_alicloud/fc/custom_domain.py +2 -2
- pulumi_alicloud/fc/function.py +4 -32
- pulumi_alicloud/fc/v2_function.py +0 -20
- pulumi_alicloud/hbr/__init__.py +0 -1
- pulumi_alicloud/ims/oidc_provider.py +0 -28
- pulumi_alicloud/log/resource_record.py +26 -42
- pulumi_alicloud/message/service_queue.py +59 -106
- pulumi_alicloud/message/service_topic.py +37 -182
- pulumi_alicloud/mongodb/account.py +163 -138
- pulumi_alicloud/oos/secret_parameter.py +9 -84
- pulumi_alicloud/oss/bucket.py +1 -1
- pulumi_alicloud/oss/bucket_policy.py +4 -2
- pulumi_alicloud/oss/bucket_referer.py +4 -2
- pulumi_alicloud/oss/get_buckets.py +2 -16
- pulumi_alicloud/oss/outputs.py +17 -18
- pulumi_alicloud/pulumi-plugin.json +1 -1
- pulumi_alicloud/sae/application.py +7 -84
- pulumi_alicloud/sls/collection_policy.py +2 -2
- pulumi_alicloud/vpc/__init__.py +0 -5
- pulumi_alicloud/vpc/get_networks.py +0 -3
- pulumi_alicloud/vpc/nat_gateway.py +7 -145
- pulumi_alicloud/vpc/outputs.py +0 -777
- pulumi_alicloud/vpc/snat_entry.py +48 -107
- pulumi_alicloud/vpn/_inputs.py +72 -96
- pulumi_alicloud/vpn/connection.py +28 -24
- pulumi_alicloud/vpn/outputs.py +48 -64
- pulumi_alicloud/yundun/_inputs.py +24 -26
- pulumi_alicloud/yundun/outputs.py +22 -37
- {pulumi_alicloud-3.73.0.dist-info → pulumi_alicloud-3.73.0a1736226912.dist-info}/METADATA +2 -2
- {pulumi_alicloud-3.73.0.dist-info → pulumi_alicloud-3.73.0a1736226912.dist-info}/RECORD +61 -78
- {pulumi_alicloud-3.73.0.dist-info → pulumi_alicloud-3.73.0a1736226912.dist-info}/WHEEL +1 -1
- pulumi_alicloud/alb/load_balancer_access_log_config_attachment.py +0 -303
- pulumi_alicloud/cloudcontrol/__init__.py +0 -12
- pulumi_alicloud/cloudcontrol/get_prices.py +0 -199
- pulumi_alicloud/cloudcontrol/get_products.py +0 -187
- pulumi_alicloud/cloudcontrol/get_resource_types.py +0 -178
- pulumi_alicloud/cloudcontrol/outputs.py +0 -688
- pulumi_alicloud/cloudcontrol/resource.py +0 -407
- pulumi_alicloud/dataworks/di_alarm_rule.py +0 -708
- pulumi_alicloud/dataworks/di_job.py +0 -1005
- pulumi_alicloud/dataworks/dw_resource_group.py +0 -703
- pulumi_alicloud/dataworks/network.py +0 -331
- pulumi_alicloud/hbr/cross_account.py +0 -338
- pulumi_alicloud/vpc/get_ipam_ipam_pool_allocations.py +0 -295
- pulumi_alicloud/vpc/get_ipam_ipam_pool_cidrs.py +0 -196
- pulumi_alicloud/vpc/get_ipam_ipam_pools.py +0 -353
- pulumi_alicloud/vpc/get_ipam_ipam_scopes.py +0 -333
- pulumi_alicloud/vpc/get_ipam_ipams.py +0 -291
- {pulumi_alicloud-3.73.0.dist-info → pulumi_alicloud-3.73.0a1736226912.dist-info}/top_level.txt +0 -0
pulumi_alicloud/cs/kubernetes.py
CHANGED
|
@@ -90,7 +90,7 @@ class KubernetesArgs:
|
|
|
90
90
|
:param pulumi.Input[Sequence[pulumi.Input['KubernetesDeleteOptionArgs']]] delete_options: Delete options, only work for deleting resource. Make sure you have run `pulumi up` to make the configuration applied. See `delete_options` below.
|
|
91
91
|
:param pulumi.Input[bool] deletion_protection: Whether to enable cluster deletion protection.
|
|
92
92
|
:param pulumi.Input[bool] enable_ssh: Enable login to the node through SSH. Default to `false`.
|
|
93
|
-
:param pulumi.Input[str] image_id: Custom Image support. Must
|
|
93
|
+
:param pulumi.Input[str] image_id: Custom Image support. Must based on CentOS7 or AliyunLinux2.
|
|
94
94
|
:param pulumi.Input[bool] install_cloud_monitor: Install cloud monitor agent on ECS. Default to `true`.
|
|
95
95
|
:param pulumi.Input[bool] is_enterprise_security_group: Enable to create advanced security group. default: false. See [Advanced security group](https://www.alibabacloud.com/help/doc-detail/120621.htm). Only works for **Create** Operation.
|
|
96
96
|
:param pulumi.Input[str] key_name: The keypair of ssh login cluster node, you have to create it first. You have to specify one of `password` `key_name` `kms_encrypted_password` fields.
|
|
@@ -114,7 +114,7 @@ class KubernetesArgs:
|
|
|
114
114
|
:param pulumi.Input[str] node_name_mode: Each node name consists of a prefix, an IP substring, and a suffix, the input format is `customized,<prefix>,IPSubStringLen,<suffix>`. For example "customized,aliyun.com-,5,-test", if the node IP address is 192.168.59.176, the prefix is aliyun.com-, IP substring length is 5, and the suffix is -test, the node name will be aliyun.com-59176-test.
|
|
115
115
|
:param pulumi.Input[str] os_type: The operating system of the nodes that run pods, its valid value is either `Linux` or `Windows`. Default to `Linux`.
|
|
116
116
|
:param pulumi.Input[str] password: The password of ssh login cluster node. You have to specify one of `password` `key_name` `kms_encrypted_password` fields.
|
|
117
|
-
:param pulumi.Input[str] platform: The architecture of the nodes that run pods, its valid value `
|
|
117
|
+
:param pulumi.Input[str] platform: The architecture of the nodes that run pods, its valid value is either `CentOS` or `AliyunLinux`. Default to `CentOS`.
|
|
118
118
|
:param pulumi.Input[str] pod_cidr: [Flannel Specific] The CIDR block for the pod network when using Flannel.
|
|
119
119
|
:param pulumi.Input[Sequence[pulumi.Input[str]]] pod_vswitch_ids: [Terway Specific] The vswitches for the pod network when using Terway. It is recommended that `pod_vswitch_ids` is not belong to `worker_vswitch_ids` and `master_vswitch_ids` but must be in same availability zones. Only works for **Create** Operation.
|
|
120
120
|
:param pulumi.Input[str] proxy_mode: Proxy mode is option of kube-proxy. options: iptables | ipvs. default: ipvs.
|
|
@@ -394,7 +394,7 @@ class KubernetesArgs:
|
|
|
394
394
|
@pulumi.getter(name="imageId")
|
|
395
395
|
def image_id(self) -> Optional[pulumi.Input[str]]:
|
|
396
396
|
"""
|
|
397
|
-
Custom Image support. Must
|
|
397
|
+
Custom Image support. Must based on CentOS7 or AliyunLinux2.
|
|
398
398
|
"""
|
|
399
399
|
return pulumi.get(self, "image_id")
|
|
400
400
|
|
|
@@ -671,7 +671,7 @@ class KubernetesArgs:
|
|
|
671
671
|
@pulumi.getter
|
|
672
672
|
def platform(self) -> Optional[pulumi.Input[str]]:
|
|
673
673
|
"""
|
|
674
|
-
The architecture of the nodes that run pods, its valid value `
|
|
674
|
+
The architecture of the nodes that run pods, its valid value is either `CentOS` or `AliyunLinux`. Default to `CentOS`.
|
|
675
675
|
"""
|
|
676
676
|
return pulumi.get(self, "platform")
|
|
677
677
|
|
|
@@ -943,7 +943,7 @@ class _KubernetesState:
|
|
|
943
943
|
:param pulumi.Input[Sequence[pulumi.Input['KubernetesDeleteOptionArgs']]] delete_options: Delete options, only work for deleting resource. Make sure you have run `pulumi up` to make the configuration applied. See `delete_options` below.
|
|
944
944
|
:param pulumi.Input[bool] deletion_protection: Whether to enable cluster deletion protection.
|
|
945
945
|
:param pulumi.Input[bool] enable_ssh: Enable login to the node through SSH. Default to `false`.
|
|
946
|
-
:param pulumi.Input[str] image_id: Custom Image support. Must
|
|
946
|
+
:param pulumi.Input[str] image_id: Custom Image support. Must based on CentOS7 or AliyunLinux2.
|
|
947
947
|
:param pulumi.Input[bool] install_cloud_monitor: Install cloud monitor agent on ECS. Default to `true`.
|
|
948
948
|
:param pulumi.Input[bool] is_enterprise_security_group: Enable to create advanced security group. default: false. See [Advanced security group](https://www.alibabacloud.com/help/doc-detail/120621.htm). Only works for **Create** Operation.
|
|
949
949
|
:param pulumi.Input[str] key_name: The keypair of ssh login cluster node, you have to create it first. You have to specify one of `password` `key_name` `kms_encrypted_password` fields.
|
|
@@ -971,7 +971,7 @@ class _KubernetesState:
|
|
|
971
971
|
:param pulumi.Input[str] node_name_mode: Each node name consists of a prefix, an IP substring, and a suffix, the input format is `customized,<prefix>,IPSubStringLen,<suffix>`. For example "customized,aliyun.com-,5,-test", if the node IP address is 192.168.59.176, the prefix is aliyun.com-, IP substring length is 5, and the suffix is -test, the node name will be aliyun.com-59176-test.
|
|
972
972
|
:param pulumi.Input[str] os_type: The operating system of the nodes that run pods, its valid value is either `Linux` or `Windows`. Default to `Linux`.
|
|
973
973
|
:param pulumi.Input[str] password: The password of ssh login cluster node. You have to specify one of `password` `key_name` `kms_encrypted_password` fields.
|
|
974
|
-
:param pulumi.Input[str] platform: The architecture of the nodes that run pods, its valid value `
|
|
974
|
+
:param pulumi.Input[str] platform: The architecture of the nodes that run pods, its valid value is either `CentOS` or `AliyunLinux`. Default to `CentOS`.
|
|
975
975
|
:param pulumi.Input[str] pod_cidr: [Flannel Specific] The CIDR block for the pod network when using Flannel.
|
|
976
976
|
:param pulumi.Input[Sequence[pulumi.Input[str]]] pod_vswitch_ids: [Terway Specific] The vswitches for the pod network when using Terway. It is recommended that `pod_vswitch_ids` is not belong to `worker_vswitch_ids` and `master_vswitch_ids` but must be in same availability zones. Only works for **Create** Operation.
|
|
977
977
|
:param pulumi.Input[str] proxy_mode: Proxy mode is option of kube-proxy. options: iptables | ipvs. default: ipvs.
|
|
@@ -1276,7 +1276,7 @@ class _KubernetesState:
|
|
|
1276
1276
|
@pulumi.getter(name="imageId")
|
|
1277
1277
|
def image_id(self) -> Optional[pulumi.Input[str]]:
|
|
1278
1278
|
"""
|
|
1279
|
-
Custom Image support. Must
|
|
1279
|
+
Custom Image support. Must based on CentOS7 or AliyunLinux2.
|
|
1280
1280
|
"""
|
|
1281
1281
|
return pulumi.get(self, "image_id")
|
|
1282
1282
|
|
|
@@ -1601,7 +1601,7 @@ class _KubernetesState:
|
|
|
1601
1601
|
@pulumi.getter
|
|
1602
1602
|
def platform(self) -> Optional[pulumi.Input[str]]:
|
|
1603
1603
|
"""
|
|
1604
|
-
The architecture of the nodes that run pods, its valid value `
|
|
1604
|
+
The architecture of the nodes that run pods, its valid value is either `CentOS` or `AliyunLinux`. Default to `CentOS`.
|
|
1605
1605
|
"""
|
|
1606
1606
|
return pulumi.get(self, "platform")
|
|
1607
1607
|
|
|
@@ -1970,7 +1970,7 @@ class Kubernetes(pulumi.CustomResource):
|
|
|
1970
1970
|
:param pulumi.Input[Sequence[pulumi.Input[Union['KubernetesDeleteOptionArgs', 'KubernetesDeleteOptionArgsDict']]]] delete_options: Delete options, only work for deleting resource. Make sure you have run `pulumi up` to make the configuration applied. See `delete_options` below.
|
|
1971
1971
|
:param pulumi.Input[bool] deletion_protection: Whether to enable cluster deletion protection.
|
|
1972
1972
|
:param pulumi.Input[bool] enable_ssh: Enable login to the node through SSH. Default to `false`.
|
|
1973
|
-
:param pulumi.Input[str] image_id: Custom Image support. Must
|
|
1973
|
+
:param pulumi.Input[str] image_id: Custom Image support. Must based on CentOS7 or AliyunLinux2.
|
|
1974
1974
|
:param pulumi.Input[bool] install_cloud_monitor: Install cloud monitor agent on ECS. Default to `true`.
|
|
1975
1975
|
:param pulumi.Input[bool] is_enterprise_security_group: Enable to create advanced security group. default: false. See [Advanced security group](https://www.alibabacloud.com/help/doc-detail/120621.htm). Only works for **Create** Operation.
|
|
1976
1976
|
:param pulumi.Input[str] key_name: The keypair of ssh login cluster node, you have to create it first. You have to specify one of `password` `key_name` `kms_encrypted_password` fields.
|
|
@@ -1996,7 +1996,7 @@ class Kubernetes(pulumi.CustomResource):
|
|
|
1996
1996
|
:param pulumi.Input[str] node_name_mode: Each node name consists of a prefix, an IP substring, and a suffix, the input format is `customized,<prefix>,IPSubStringLen,<suffix>`. For example "customized,aliyun.com-,5,-test", if the node IP address is 192.168.59.176, the prefix is aliyun.com-, IP substring length is 5, and the suffix is -test, the node name will be aliyun.com-59176-test.
|
|
1997
1997
|
:param pulumi.Input[str] os_type: The operating system of the nodes that run pods, its valid value is either `Linux` or `Windows`. Default to `Linux`.
|
|
1998
1998
|
:param pulumi.Input[str] password: The password of ssh login cluster node. You have to specify one of `password` `key_name` `kms_encrypted_password` fields.
|
|
1999
|
-
:param pulumi.Input[str] platform: The architecture of the nodes that run pods, its valid value `
|
|
1999
|
+
:param pulumi.Input[str] platform: The architecture of the nodes that run pods, its valid value is either `CentOS` or `AliyunLinux`. Default to `CentOS`.
|
|
2000
2000
|
:param pulumi.Input[str] pod_cidr: [Flannel Specific] The CIDR block for the pod network when using Flannel.
|
|
2001
2001
|
:param pulumi.Input[Sequence[pulumi.Input[str]]] pod_vswitch_ids: [Terway Specific] The vswitches for the pod network when using Terway. It is recommended that `pod_vswitch_ids` is not belong to `worker_vswitch_ids` and `master_vswitch_ids` but must be in same availability zones. Only works for **Create** Operation.
|
|
2002
2002
|
:param pulumi.Input[str] proxy_mode: Proxy mode is option of kube-proxy. options: iptables | ipvs. default: ipvs.
|
|
@@ -2302,7 +2302,7 @@ class Kubernetes(pulumi.CustomResource):
|
|
|
2302
2302
|
:param pulumi.Input[Sequence[pulumi.Input[Union['KubernetesDeleteOptionArgs', 'KubernetesDeleteOptionArgsDict']]]] delete_options: Delete options, only work for deleting resource. Make sure you have run `pulumi up` to make the configuration applied. See `delete_options` below.
|
|
2303
2303
|
:param pulumi.Input[bool] deletion_protection: Whether to enable cluster deletion protection.
|
|
2304
2304
|
:param pulumi.Input[bool] enable_ssh: Enable login to the node through SSH. Default to `false`.
|
|
2305
|
-
:param pulumi.Input[str] image_id: Custom Image support. Must
|
|
2305
|
+
:param pulumi.Input[str] image_id: Custom Image support. Must based on CentOS7 or AliyunLinux2.
|
|
2306
2306
|
:param pulumi.Input[bool] install_cloud_monitor: Install cloud monitor agent on ECS. Default to `true`.
|
|
2307
2307
|
:param pulumi.Input[bool] is_enterprise_security_group: Enable to create advanced security group. default: false. See [Advanced security group](https://www.alibabacloud.com/help/doc-detail/120621.htm). Only works for **Create** Operation.
|
|
2308
2308
|
:param pulumi.Input[str] key_name: The keypair of ssh login cluster node, you have to create it first. You have to specify one of `password` `key_name` `kms_encrypted_password` fields.
|
|
@@ -2330,7 +2330,7 @@ class Kubernetes(pulumi.CustomResource):
|
|
|
2330
2330
|
:param pulumi.Input[str] node_name_mode: Each node name consists of a prefix, an IP substring, and a suffix, the input format is `customized,<prefix>,IPSubStringLen,<suffix>`. For example "customized,aliyun.com-,5,-test", if the node IP address is 192.168.59.176, the prefix is aliyun.com-, IP substring length is 5, and the suffix is -test, the node name will be aliyun.com-59176-test.
|
|
2331
2331
|
:param pulumi.Input[str] os_type: The operating system of the nodes that run pods, its valid value is either `Linux` or `Windows`. Default to `Linux`.
|
|
2332
2332
|
:param pulumi.Input[str] password: The password of ssh login cluster node. You have to specify one of `password` `key_name` `kms_encrypted_password` fields.
|
|
2333
|
-
:param pulumi.Input[str] platform: The architecture of the nodes that run pods, its valid value `
|
|
2333
|
+
:param pulumi.Input[str] platform: The architecture of the nodes that run pods, its valid value is either `CentOS` or `AliyunLinux`. Default to `CentOS`.
|
|
2334
2334
|
:param pulumi.Input[str] pod_cidr: [Flannel Specific] The CIDR block for the pod network when using Flannel.
|
|
2335
2335
|
:param pulumi.Input[Sequence[pulumi.Input[str]]] pod_vswitch_ids: [Terway Specific] The vswitches for the pod network when using Terway. It is recommended that `pod_vswitch_ids` is not belong to `worker_vswitch_ids` and `master_vswitch_ids` but must be in same availability zones. Only works for **Create** Operation.
|
|
2336
2336
|
:param pulumi.Input[str] proxy_mode: Proxy mode is option of kube-proxy. options: iptables | ipvs. default: ipvs.
|
|
@@ -2526,7 +2526,7 @@ class Kubernetes(pulumi.CustomResource):
|
|
|
2526
2526
|
@pulumi.getter(name="imageId")
|
|
2527
2527
|
def image_id(self) -> pulumi.Output[str]:
|
|
2528
2528
|
"""
|
|
2529
|
-
Custom Image support. Must
|
|
2529
|
+
Custom Image support. Must based on CentOS7 or AliyunLinux2.
|
|
2530
2530
|
"""
|
|
2531
2531
|
return pulumi.get(self, "image_id")
|
|
2532
2532
|
|
|
@@ -2743,7 +2743,7 @@ class Kubernetes(pulumi.CustomResource):
|
|
|
2743
2743
|
@pulumi.getter
|
|
2744
2744
|
def platform(self) -> pulumi.Output[str]:
|
|
2745
2745
|
"""
|
|
2746
|
-
The architecture of the nodes that run pods, its valid value `
|
|
2746
|
+
The architecture of the nodes that run pods, its valid value is either `CentOS` or `AliyunLinux`. Default to `CentOS`.
|
|
2747
2747
|
"""
|
|
2748
2748
|
return pulumi.get(self, "platform")
|
|
2749
2749
|
|
|
@@ -21,6 +21,7 @@ __all__ = ['ManagedKubernetesArgs', 'ManagedKubernetes']
|
|
|
21
21
|
@pulumi.input_type
|
|
22
22
|
class ManagedKubernetesArgs:
|
|
23
23
|
def __init__(__self__, *,
|
|
24
|
+
worker_vswitch_ids: pulumi.Input[Sequence[pulumi.Input[str]]],
|
|
24
25
|
addons: Optional[pulumi.Input[Sequence[pulumi.Input['ManagedKubernetesAddonArgs']]]] = None,
|
|
25
26
|
api_audiences: Optional[pulumi.Input[Sequence[pulumi.Input[str]]]] = None,
|
|
26
27
|
client_cert: Optional[pulumi.Input[str]] = None,
|
|
@@ -56,11 +57,10 @@ class ManagedKubernetesArgs:
|
|
|
56
57
|
tags: Optional[pulumi.Input[Mapping[str, pulumi.Input[str]]]] = None,
|
|
57
58
|
timezone: Optional[pulumi.Input[str]] = None,
|
|
58
59
|
user_ca: Optional[pulumi.Input[str]] = None,
|
|
59
|
-
version: Optional[pulumi.Input[str]] = None
|
|
60
|
-
vswitch_ids: Optional[pulumi.Input[Sequence[pulumi.Input[str]]]] = None,
|
|
61
|
-
worker_vswitch_ids: Optional[pulumi.Input[Sequence[pulumi.Input[str]]]] = None):
|
|
60
|
+
version: Optional[pulumi.Input[str]] = None):
|
|
62
61
|
"""
|
|
63
62
|
The set of arguments for constructing a ManagedKubernetes resource.
|
|
63
|
+
:param pulumi.Input[Sequence[pulumi.Input[str]]] worker_vswitch_ids: The vswitches used by control plane. See `worker_vswitch_ids` below.
|
|
64
64
|
:param pulumi.Input[Sequence[pulumi.Input['ManagedKubernetesAddonArgs']]] addons: The addon you want to install in cluster. See `addons` below. Only works for **Create** Operation, use resource cs_kubernetes_addon to manage addons if cluster is created.
|
|
65
65
|
|
|
66
66
|
*Network params*
|
|
@@ -84,14 +84,14 @@ class ManagedKubernetesArgs:
|
|
|
84
84
|
:param pulumi.Input[bool] enable_rrsa: Whether to enable cluster to support RRSA for kubernetes version 1.22.3+. Default to `false`. Once the RRSA function is turned on, it is not allowed to turn off. If your cluster has enabled this function, please manually modify your tf file and add the rrsa configuration to the file, learn more [RAM Roles for Service Accounts](https://www.alibabacloud.com/help/zh/container-service-for-kubernetes/latest/use-rrsa-to-enforce-access-control).
|
|
85
85
|
:param pulumi.Input[str] encryption_provider_key: The disk encryption key.
|
|
86
86
|
:param pulumi.Input[bool] is_enterprise_security_group: Enable to create advanced security group. default: false. Only works for **Create** Operation. See [Advanced security group](https://www.alibabacloud.com/help/doc-detail/120621.htm).
|
|
87
|
-
:param pulumi.Input[str] load_balancer_spec: The cluster api server load
|
|
87
|
+
:param pulumi.Input[str] load_balancer_spec: The cluster api server load balance instance specification, default `slb.s1.small`. For more information on how to select a LB instance specification, see [SLB instance overview](https://help.aliyun.com/document_detail/85931.html). Only works for **Create** Operation.
|
|
88
88
|
:param pulumi.Input['ManagedKubernetesMaintenanceWindowArgs'] maintenance_window: The cluster maintenance window,effective only in the professional managed cluster. Managed node pool will use it. See `maintenance_window` below.
|
|
89
89
|
:param pulumi.Input[str] name: The kubernetes cluster's name. It is unique in one Alicloud account.
|
|
90
90
|
:param pulumi.Input[bool] new_nat_gateway: Whether to create a new nat gateway while creating kubernetes cluster. Default to true. Then openapi in Alibaba Cloud are not all on intranet, So turn this option on is a good choice. Only works for **Create** Operation.
|
|
91
91
|
:param pulumi.Input[int] node_cidr_mask: The node cidr block to specific how many pods can run on single node. 24-28 is allowed. 24 means 2^(32-24)-1=255 and the node can run at most 255 pods. default: 24
|
|
92
92
|
:param pulumi.Input['ManagedKubernetesOperationPolicyArgs'] operation_policy: The cluster automatic operation policy. See `operation_policy` below.
|
|
93
93
|
:param pulumi.Input[str] pod_cidr: [Flannel Specific] The CIDR block for the pod network when using Flannel.
|
|
94
|
-
:param pulumi.Input[Sequence[pulumi.Input[str]]] pod_vswitch_ids: [Terway Specific] The vswitches for the pod network when using Terway. It is recommended that `pod_vswitch_ids` is not belong to `
|
|
94
|
+
:param pulumi.Input[Sequence[pulumi.Input[str]]] pod_vswitch_ids: [Terway Specific] The vswitches for the pod network when using Terway. It is recommended that `pod_vswitch_ids` is not belong to `worker_vswitch_ids` but must be in same availability zones. Only works for **Create** Operation.
|
|
95
95
|
:param pulumi.Input[str] proxy_mode: Proxy mode is option of kube-proxy. options: iptables|ipvs. default: ipvs.
|
|
96
96
|
:param pulumi.Input[str] resource_group_id: The ID of the resource group,by default these cloud resources are automatically assigned to the default resource group.
|
|
97
97
|
:param pulumi.Input[str] security_group_id: The ID of the security group to which the ECS instances in the cluster belong. If it is not specified, a new Security group will be built.
|
|
@@ -107,14 +107,8 @@ class ManagedKubernetesArgs:
|
|
|
107
107
|
:param pulumi.Input[str] timezone: When you create a cluster, set the time zones for the Master and Worker nodes. You can only change the managed node time zone if you create a cluster. Once the cluster is created, you can only change the time zone of the Worker node.
|
|
108
108
|
:param pulumi.Input[str] user_ca: The path of customized CA cert, you can use this CA to sign client certs to connect your cluster.
|
|
109
109
|
:param pulumi.Input[str] version: Desired Kubernetes version. If you do not specify a value, the latest available version at resource creation is used and no upgrades will occur except you set a higher version number. The value must be configured and increased to upgrade the version when desired. Downgrades are not supported by ACK. Do not specify if cluster auto upgrade is enabled, see cluster_auto_upgrade for more information.
|
|
110
|
-
:param pulumi.Input[Sequence[pulumi.Input[str]]] vswitch_ids: The vSwitches of the control plane.
|
|
111
|
-
> **NOTE:** Please take of note before updating the `vswitch_ids`:
|
|
112
|
-
* This parameter overwrites the existing configuration. You must specify all vSwitches of the control plane.
|
|
113
|
-
* The control plane restarts during the change process. Exercise caution when you perform this operation.
|
|
114
|
-
* Ensure that all security groups of the cluster, including the security groups of the control plane, all node pools, and container network, are allowed to access the CIDR blocks of the new vSwitches. This ensures that the nodes and containers can connect to the API server.
|
|
115
|
-
* If the new vSwitches of the control plane are configured with an ACL, ensure that the ACL allows communication between the new vSwitches and CIDR blocks such as those of the cluster nodes and the container network.
|
|
116
|
-
:param pulumi.Input[Sequence[pulumi.Input[str]]] worker_vswitch_ids: The vswitches used by control plane. Modification after creation will not take effect. Please use `vswitch_ids` to managed control plane vswtiches, which supports modifying control plane vswtiches.
|
|
117
110
|
"""
|
|
111
|
+
pulumi.set(__self__, "worker_vswitch_ids", worker_vswitch_ids)
|
|
118
112
|
if addons is not None:
|
|
119
113
|
pulumi.set(__self__, "addons", addons)
|
|
120
114
|
if api_audiences is not None:
|
|
@@ -148,8 +142,8 @@ class ManagedKubernetesArgs:
|
|
|
148
142
|
if is_enterprise_security_group is not None:
|
|
149
143
|
pulumi.set(__self__, "is_enterprise_security_group", is_enterprise_security_group)
|
|
150
144
|
if load_balancer_spec is not None:
|
|
151
|
-
warnings.warn("""Field 'load_balancer_spec' has been deprecated from provider version 1.232.0. The
|
|
152
|
-
pulumi.log.warn("""load_balancer_spec is deprecated: Field 'load_balancer_spec' has been deprecated from provider version 1.232.0. The
|
|
145
|
+
warnings.warn("""Field 'load_balancer_spec' has been deprecated from provider version 1.232.0. The load balancer has been changed to PayByCLCU so that the spec is no need anymore.""", DeprecationWarning)
|
|
146
|
+
pulumi.log.warn("""load_balancer_spec is deprecated: Field 'load_balancer_spec' has been deprecated from provider version 1.232.0. The load balancer has been changed to PayByCLCU so that the spec is no need anymore.""")
|
|
153
147
|
if load_balancer_spec is not None:
|
|
154
148
|
pulumi.set(__self__, "load_balancer_spec", load_balancer_spec)
|
|
155
149
|
if maintenance_window is not None:
|
|
@@ -190,13 +184,18 @@ class ManagedKubernetesArgs:
|
|
|
190
184
|
pulumi.set(__self__, "user_ca", user_ca)
|
|
191
185
|
if version is not None:
|
|
192
186
|
pulumi.set(__self__, "version", version)
|
|
193
|
-
|
|
194
|
-
|
|
195
|
-
|
|
196
|
-
|
|
197
|
-
|
|
198
|
-
|
|
199
|
-
|
|
187
|
+
|
|
188
|
+
@property
|
|
189
|
+
@pulumi.getter(name="workerVswitchIds")
|
|
190
|
+
def worker_vswitch_ids(self) -> pulumi.Input[Sequence[pulumi.Input[str]]]:
|
|
191
|
+
"""
|
|
192
|
+
The vswitches used by control plane. See `worker_vswitch_ids` below.
|
|
193
|
+
"""
|
|
194
|
+
return pulumi.get(self, "worker_vswitch_ids")
|
|
195
|
+
|
|
196
|
+
@worker_vswitch_ids.setter
|
|
197
|
+
def worker_vswitch_ids(self, value: pulumi.Input[Sequence[pulumi.Input[str]]]):
|
|
198
|
+
pulumi.set(self, "worker_vswitch_ids", value)
|
|
200
199
|
|
|
201
200
|
@property
|
|
202
201
|
@pulumi.getter
|
|
@@ -399,10 +398,10 @@ class ManagedKubernetesArgs:
|
|
|
399
398
|
|
|
400
399
|
@property
|
|
401
400
|
@pulumi.getter(name="loadBalancerSpec")
|
|
402
|
-
@_utilities.deprecated("""Field 'load_balancer_spec' has been deprecated from provider version 1.232.0. The
|
|
401
|
+
@_utilities.deprecated("""Field 'load_balancer_spec' has been deprecated from provider version 1.232.0. The load balancer has been changed to PayByCLCU so that the spec is no need anymore.""")
|
|
403
402
|
def load_balancer_spec(self) -> Optional[pulumi.Input[str]]:
|
|
404
403
|
"""
|
|
405
|
-
The cluster api server load
|
|
404
|
+
The cluster api server load balance instance specification, default `slb.s1.small`. For more information on how to select a LB instance specification, see [SLB instance overview](https://help.aliyun.com/document_detail/85931.html). Only works for **Create** Operation.
|
|
406
405
|
"""
|
|
407
406
|
return pulumi.get(self, "load_balancer_spec")
|
|
408
407
|
|
|
@@ -495,7 +494,7 @@ class ManagedKubernetesArgs:
|
|
|
495
494
|
@pulumi.getter(name="podVswitchIds")
|
|
496
495
|
def pod_vswitch_ids(self) -> Optional[pulumi.Input[Sequence[pulumi.Input[str]]]]:
|
|
497
496
|
"""
|
|
498
|
-
[Terway Specific] The vswitches for the pod network when using Terway. It is recommended that `pod_vswitch_ids` is not belong to `
|
|
497
|
+
[Terway Specific] The vswitches for the pod network when using Terway. It is recommended that `pod_vswitch_ids` is not belong to `worker_vswitch_ids` but must be in same availability zones. Only works for **Create** Operation.
|
|
499
498
|
"""
|
|
500
499
|
return pulumi.get(self, "pod_vswitch_ids")
|
|
501
500
|
|
|
@@ -637,36 +636,6 @@ class ManagedKubernetesArgs:
|
|
|
637
636
|
def version(self, value: Optional[pulumi.Input[str]]):
|
|
638
637
|
pulumi.set(self, "version", value)
|
|
639
638
|
|
|
640
|
-
@property
|
|
641
|
-
@pulumi.getter(name="vswitchIds")
|
|
642
|
-
def vswitch_ids(self) -> Optional[pulumi.Input[Sequence[pulumi.Input[str]]]]:
|
|
643
|
-
"""
|
|
644
|
-
The vSwitches of the control plane.
|
|
645
|
-
> **NOTE:** Please take of note before updating the `vswitch_ids`:
|
|
646
|
-
* This parameter overwrites the existing configuration. You must specify all vSwitches of the control plane.
|
|
647
|
-
* The control plane restarts during the change process. Exercise caution when you perform this operation.
|
|
648
|
-
* Ensure that all security groups of the cluster, including the security groups of the control plane, all node pools, and container network, are allowed to access the CIDR blocks of the new vSwitches. This ensures that the nodes and containers can connect to the API server.
|
|
649
|
-
* If the new vSwitches of the control plane are configured with an ACL, ensure that the ACL allows communication between the new vSwitches and CIDR blocks such as those of the cluster nodes and the container network.
|
|
650
|
-
"""
|
|
651
|
-
return pulumi.get(self, "vswitch_ids")
|
|
652
|
-
|
|
653
|
-
@vswitch_ids.setter
|
|
654
|
-
def vswitch_ids(self, value: Optional[pulumi.Input[Sequence[pulumi.Input[str]]]]):
|
|
655
|
-
pulumi.set(self, "vswitch_ids", value)
|
|
656
|
-
|
|
657
|
-
@property
|
|
658
|
-
@pulumi.getter(name="workerVswitchIds")
|
|
659
|
-
@_utilities.deprecated("""Field 'worker_vswitch_ids' has been deprecated from provider version 1.241.0. Please use 'vswitch_ids' to managed control plane vswtiches""")
|
|
660
|
-
def worker_vswitch_ids(self) -> Optional[pulumi.Input[Sequence[pulumi.Input[str]]]]:
|
|
661
|
-
"""
|
|
662
|
-
The vswitches used by control plane. Modification after creation will not take effect. Please use `vswitch_ids` to managed control plane vswtiches, which supports modifying control plane vswtiches.
|
|
663
|
-
"""
|
|
664
|
-
return pulumi.get(self, "worker_vswitch_ids")
|
|
665
|
-
|
|
666
|
-
@worker_vswitch_ids.setter
|
|
667
|
-
def worker_vswitch_ids(self, value: Optional[pulumi.Input[Sequence[pulumi.Input[str]]]]):
|
|
668
|
-
pulumi.set(self, "worker_vswitch_ids", value)
|
|
669
|
-
|
|
670
639
|
|
|
671
640
|
@pulumi.input_type
|
|
672
641
|
class _ManagedKubernetesState:
|
|
@@ -715,7 +684,6 @@ class _ManagedKubernetesState:
|
|
|
715
684
|
user_ca: Optional[pulumi.Input[str]] = None,
|
|
716
685
|
version: Optional[pulumi.Input[str]] = None,
|
|
717
686
|
vpc_id: Optional[pulumi.Input[str]] = None,
|
|
718
|
-
vswitch_ids: Optional[pulumi.Input[Sequence[pulumi.Input[str]]]] = None,
|
|
719
687
|
worker_ram_role_name: Optional[pulumi.Input[str]] = None,
|
|
720
688
|
worker_vswitch_ids: Optional[pulumi.Input[Sequence[pulumi.Input[str]]]] = None):
|
|
721
689
|
"""
|
|
@@ -745,7 +713,7 @@ class _ManagedKubernetesState:
|
|
|
745
713
|
:param pulumi.Input[bool] enable_rrsa: Whether to enable cluster to support RRSA for kubernetes version 1.22.3+. Default to `false`. Once the RRSA function is turned on, it is not allowed to turn off. If your cluster has enabled this function, please manually modify your tf file and add the rrsa configuration to the file, learn more [RAM Roles for Service Accounts](https://www.alibabacloud.com/help/zh/container-service-for-kubernetes/latest/use-rrsa-to-enforce-access-control).
|
|
746
714
|
:param pulumi.Input[str] encryption_provider_key: The disk encryption key.
|
|
747
715
|
:param pulumi.Input[bool] is_enterprise_security_group: Enable to create advanced security group. default: false. Only works for **Create** Operation. See [Advanced security group](https://www.alibabacloud.com/help/doc-detail/120621.htm).
|
|
748
|
-
:param pulumi.Input[str] load_balancer_spec: The cluster api server load
|
|
716
|
+
:param pulumi.Input[str] load_balancer_spec: The cluster api server load balance instance specification, default `slb.s1.small`. For more information on how to select a LB instance specification, see [SLB instance overview](https://help.aliyun.com/document_detail/85931.html). Only works for **Create** Operation.
|
|
749
717
|
:param pulumi.Input['ManagedKubernetesMaintenanceWindowArgs'] maintenance_window: The cluster maintenance window,effective only in the professional managed cluster. Managed node pool will use it. See `maintenance_window` below.
|
|
750
718
|
:param pulumi.Input[str] name: The kubernetes cluster's name. It is unique in one Alicloud account.
|
|
751
719
|
:param pulumi.Input[str] nat_gateway_id: The ID of nat gateway used to launch kubernetes cluster.
|
|
@@ -753,7 +721,7 @@ class _ManagedKubernetesState:
|
|
|
753
721
|
:param pulumi.Input[int] node_cidr_mask: The node cidr block to specific how many pods can run on single node. 24-28 is allowed. 24 means 2^(32-24)-1=255 and the node can run at most 255 pods. default: 24
|
|
754
722
|
:param pulumi.Input['ManagedKubernetesOperationPolicyArgs'] operation_policy: The cluster automatic operation policy. See `operation_policy` below.
|
|
755
723
|
:param pulumi.Input[str] pod_cidr: [Flannel Specific] The CIDR block for the pod network when using Flannel.
|
|
756
|
-
:param pulumi.Input[Sequence[pulumi.Input[str]]] pod_vswitch_ids: [Terway Specific] The vswitches for the pod network when using Terway. It is recommended that `pod_vswitch_ids` is not belong to `
|
|
724
|
+
:param pulumi.Input[Sequence[pulumi.Input[str]]] pod_vswitch_ids: [Terway Specific] The vswitches for the pod network when using Terway. It is recommended that `pod_vswitch_ids` is not belong to `worker_vswitch_ids` but must be in same availability zones. Only works for **Create** Operation.
|
|
757
725
|
:param pulumi.Input[str] proxy_mode: Proxy mode is option of kube-proxy. options: iptables|ipvs. default: ipvs.
|
|
758
726
|
:param pulumi.Input[str] resource_group_id: The ID of the resource group,by default these cloud resources are automatically assigned to the default resource group.
|
|
759
727
|
:param pulumi.Input['ManagedKubernetesRrsaMetadataArgs'] rrsa_metadata: (Optional, Available since v1.185.0) Nested attribute containing RRSA related data for your cluster.
|
|
@@ -774,14 +742,8 @@ class _ManagedKubernetesState:
|
|
|
774
742
|
:param pulumi.Input[str] user_ca: The path of customized CA cert, you can use this CA to sign client certs to connect your cluster.
|
|
775
743
|
:param pulumi.Input[str] version: Desired Kubernetes version. If you do not specify a value, the latest available version at resource creation is used and no upgrades will occur except you set a higher version number. The value must be configured and increased to upgrade the version when desired. Downgrades are not supported by ACK. Do not specify if cluster auto upgrade is enabled, see cluster_auto_upgrade for more information.
|
|
776
744
|
:param pulumi.Input[str] vpc_id: The ID of VPC where the current cluster is located.
|
|
777
|
-
:param pulumi.Input[Sequence[pulumi.Input[str]]] vswitch_ids: The vSwitches of the control plane.
|
|
778
|
-
> **NOTE:** Please take of note before updating the `vswitch_ids`:
|
|
779
|
-
* This parameter overwrites the existing configuration. You must specify all vSwitches of the control plane.
|
|
780
|
-
* The control plane restarts during the change process. Exercise caution when you perform this operation.
|
|
781
|
-
* Ensure that all security groups of the cluster, including the security groups of the control plane, all node pools, and container network, are allowed to access the CIDR blocks of the new vSwitches. This ensures that the nodes and containers can connect to the API server.
|
|
782
|
-
* If the new vSwitches of the control plane are configured with an ACL, ensure that the ACL allows communication between the new vSwitches and CIDR blocks such as those of the cluster nodes and the container network.
|
|
783
745
|
:param pulumi.Input[str] worker_ram_role_name: The RamRole Name attached to worker node.
|
|
784
|
-
:param pulumi.Input[Sequence[pulumi.Input[str]]] worker_vswitch_ids: The vswitches used by control plane.
|
|
746
|
+
:param pulumi.Input[Sequence[pulumi.Input[str]]] worker_vswitch_ids: The vswitches used by control plane. See `worker_vswitch_ids` below.
|
|
785
747
|
"""
|
|
786
748
|
if addons is not None:
|
|
787
749
|
pulumi.set(__self__, "addons", addons)
|
|
@@ -820,8 +782,8 @@ class _ManagedKubernetesState:
|
|
|
820
782
|
if is_enterprise_security_group is not None:
|
|
821
783
|
pulumi.set(__self__, "is_enterprise_security_group", is_enterprise_security_group)
|
|
822
784
|
if load_balancer_spec is not None:
|
|
823
|
-
warnings.warn("""Field 'load_balancer_spec' has been deprecated from provider version 1.232.0. The
|
|
824
|
-
pulumi.log.warn("""load_balancer_spec is deprecated: Field 'load_balancer_spec' has been deprecated from provider version 1.232.0. The
|
|
785
|
+
warnings.warn("""Field 'load_balancer_spec' has been deprecated from provider version 1.232.0. The load balancer has been changed to PayByCLCU so that the spec is no need anymore.""", DeprecationWarning)
|
|
786
|
+
pulumi.log.warn("""load_balancer_spec is deprecated: Field 'load_balancer_spec' has been deprecated from provider version 1.232.0. The load balancer has been changed to PayByCLCU so that the spec is no need anymore.""")
|
|
825
787
|
if load_balancer_spec is not None:
|
|
826
788
|
pulumi.set(__self__, "load_balancer_spec", load_balancer_spec)
|
|
827
789
|
if maintenance_window is not None:
|
|
@@ -874,13 +836,8 @@ class _ManagedKubernetesState:
|
|
|
874
836
|
pulumi.set(__self__, "version", version)
|
|
875
837
|
if vpc_id is not None:
|
|
876
838
|
pulumi.set(__self__, "vpc_id", vpc_id)
|
|
877
|
-
if vswitch_ids is not None:
|
|
878
|
-
pulumi.set(__self__, "vswitch_ids", vswitch_ids)
|
|
879
839
|
if worker_ram_role_name is not None:
|
|
880
840
|
pulumi.set(__self__, "worker_ram_role_name", worker_ram_role_name)
|
|
881
|
-
if worker_vswitch_ids is not None:
|
|
882
|
-
warnings.warn("""Field 'worker_vswitch_ids' has been deprecated from provider version 1.241.0. Please use 'vswitch_ids' to managed control plane vswtiches""", DeprecationWarning)
|
|
883
|
-
pulumi.log.warn("""worker_vswitch_ids is deprecated: Field 'worker_vswitch_ids' has been deprecated from provider version 1.241.0. Please use 'vswitch_ids' to managed control plane vswtiches""")
|
|
884
841
|
if worker_vswitch_ids is not None:
|
|
885
842
|
pulumi.set(__self__, "worker_vswitch_ids", worker_vswitch_ids)
|
|
886
843
|
|
|
@@ -1109,10 +1066,10 @@ class _ManagedKubernetesState:
|
|
|
1109
1066
|
|
|
1110
1067
|
@property
|
|
1111
1068
|
@pulumi.getter(name="loadBalancerSpec")
|
|
1112
|
-
@_utilities.deprecated("""Field 'load_balancer_spec' has been deprecated from provider version 1.232.0. The
|
|
1069
|
+
@_utilities.deprecated("""Field 'load_balancer_spec' has been deprecated from provider version 1.232.0. The load balancer has been changed to PayByCLCU so that the spec is no need anymore.""")
|
|
1113
1070
|
def load_balancer_spec(self) -> Optional[pulumi.Input[str]]:
|
|
1114
1071
|
"""
|
|
1115
|
-
The cluster api server load
|
|
1072
|
+
The cluster api server load balance instance specification, default `slb.s1.small`. For more information on how to select a LB instance specification, see [SLB instance overview](https://help.aliyun.com/document_detail/85931.html). Only works for **Create** Operation.
|
|
1116
1073
|
"""
|
|
1117
1074
|
return pulumi.get(self, "load_balancer_spec")
|
|
1118
1075
|
|
|
@@ -1217,7 +1174,7 @@ class _ManagedKubernetesState:
|
|
|
1217
1174
|
@pulumi.getter(name="podVswitchIds")
|
|
1218
1175
|
def pod_vswitch_ids(self) -> Optional[pulumi.Input[Sequence[pulumi.Input[str]]]]:
|
|
1219
1176
|
"""
|
|
1220
|
-
[Terway Specific] The vswitches for the pod network when using Terway. It is recommended that `pod_vswitch_ids` is not belong to `
|
|
1177
|
+
[Terway Specific] The vswitches for the pod network when using Terway. It is recommended that `pod_vswitch_ids` is not belong to `worker_vswitch_ids` but must be in same availability zones. Only works for **Create** Operation.
|
|
1221
1178
|
"""
|
|
1222
1179
|
return pulumi.get(self, "pod_vswitch_ids")
|
|
1223
1180
|
|
|
@@ -1419,23 +1376,6 @@ class _ManagedKubernetesState:
|
|
|
1419
1376
|
def vpc_id(self, value: Optional[pulumi.Input[str]]):
|
|
1420
1377
|
pulumi.set(self, "vpc_id", value)
|
|
1421
1378
|
|
|
1422
|
-
@property
|
|
1423
|
-
@pulumi.getter(name="vswitchIds")
|
|
1424
|
-
def vswitch_ids(self) -> Optional[pulumi.Input[Sequence[pulumi.Input[str]]]]:
|
|
1425
|
-
"""
|
|
1426
|
-
The vSwitches of the control plane.
|
|
1427
|
-
> **NOTE:** Please take of note before updating the `vswitch_ids`:
|
|
1428
|
-
* This parameter overwrites the existing configuration. You must specify all vSwitches of the control plane.
|
|
1429
|
-
* The control plane restarts during the change process. Exercise caution when you perform this operation.
|
|
1430
|
-
* Ensure that all security groups of the cluster, including the security groups of the control plane, all node pools, and container network, are allowed to access the CIDR blocks of the new vSwitches. This ensures that the nodes and containers can connect to the API server.
|
|
1431
|
-
* If the new vSwitches of the control plane are configured with an ACL, ensure that the ACL allows communication between the new vSwitches and CIDR blocks such as those of the cluster nodes and the container network.
|
|
1432
|
-
"""
|
|
1433
|
-
return pulumi.get(self, "vswitch_ids")
|
|
1434
|
-
|
|
1435
|
-
@vswitch_ids.setter
|
|
1436
|
-
def vswitch_ids(self, value: Optional[pulumi.Input[Sequence[pulumi.Input[str]]]]):
|
|
1437
|
-
pulumi.set(self, "vswitch_ids", value)
|
|
1438
|
-
|
|
1439
1379
|
@property
|
|
1440
1380
|
@pulumi.getter(name="workerRamRoleName")
|
|
1441
1381
|
def worker_ram_role_name(self) -> Optional[pulumi.Input[str]]:
|
|
@@ -1450,10 +1390,9 @@ class _ManagedKubernetesState:
|
|
|
1450
1390
|
|
|
1451
1391
|
@property
|
|
1452
1392
|
@pulumi.getter(name="workerVswitchIds")
|
|
1453
|
-
@_utilities.deprecated("""Field 'worker_vswitch_ids' has been deprecated from provider version 1.241.0. Please use 'vswitch_ids' to managed control plane vswtiches""")
|
|
1454
1393
|
def worker_vswitch_ids(self) -> Optional[pulumi.Input[Sequence[pulumi.Input[str]]]]:
|
|
1455
1394
|
"""
|
|
1456
|
-
The vswitches used by control plane.
|
|
1395
|
+
The vswitches used by control plane. See `worker_vswitch_ids` below.
|
|
1457
1396
|
"""
|
|
1458
1397
|
return pulumi.get(self, "worker_vswitch_ids")
|
|
1459
1398
|
|
|
@@ -1503,7 +1442,6 @@ class ManagedKubernetes(pulumi.CustomResource):
|
|
|
1503
1442
|
timezone: Optional[pulumi.Input[str]] = None,
|
|
1504
1443
|
user_ca: Optional[pulumi.Input[str]] = None,
|
|
1505
1444
|
version: Optional[pulumi.Input[str]] = None,
|
|
1506
|
-
vswitch_ids: Optional[pulumi.Input[Sequence[pulumi.Input[str]]]] = None,
|
|
1507
1445
|
worker_vswitch_ids: Optional[pulumi.Input[Sequence[pulumi.Input[str]]]] = None,
|
|
1508
1446
|
__props__=None):
|
|
1509
1447
|
"""
|
|
@@ -1572,14 +1510,14 @@ class ManagedKubernetes(pulumi.CustomResource):
|
|
|
1572
1510
|
:param pulumi.Input[bool] enable_rrsa: Whether to enable cluster to support RRSA for kubernetes version 1.22.3+. Default to `false`. Once the RRSA function is turned on, it is not allowed to turn off. If your cluster has enabled this function, please manually modify your tf file and add the rrsa configuration to the file, learn more [RAM Roles for Service Accounts](https://www.alibabacloud.com/help/zh/container-service-for-kubernetes/latest/use-rrsa-to-enforce-access-control).
|
|
1573
1511
|
:param pulumi.Input[str] encryption_provider_key: The disk encryption key.
|
|
1574
1512
|
:param pulumi.Input[bool] is_enterprise_security_group: Enable to create advanced security group. default: false. Only works for **Create** Operation. See [Advanced security group](https://www.alibabacloud.com/help/doc-detail/120621.htm).
|
|
1575
|
-
:param pulumi.Input[str] load_balancer_spec: The cluster api server load
|
|
1513
|
+
:param pulumi.Input[str] load_balancer_spec: The cluster api server load balance instance specification, default `slb.s1.small`. For more information on how to select a LB instance specification, see [SLB instance overview](https://help.aliyun.com/document_detail/85931.html). Only works for **Create** Operation.
|
|
1576
1514
|
:param pulumi.Input[Union['ManagedKubernetesMaintenanceWindowArgs', 'ManagedKubernetesMaintenanceWindowArgsDict']] maintenance_window: The cluster maintenance window,effective only in the professional managed cluster. Managed node pool will use it. See `maintenance_window` below.
|
|
1577
1515
|
:param pulumi.Input[str] name: The kubernetes cluster's name. It is unique in one Alicloud account.
|
|
1578
1516
|
:param pulumi.Input[bool] new_nat_gateway: Whether to create a new nat gateway while creating kubernetes cluster. Default to true. Then openapi in Alibaba Cloud are not all on intranet, So turn this option on is a good choice. Only works for **Create** Operation.
|
|
1579
1517
|
:param pulumi.Input[int] node_cidr_mask: The node cidr block to specific how many pods can run on single node. 24-28 is allowed. 24 means 2^(32-24)-1=255 and the node can run at most 255 pods. default: 24
|
|
1580
1518
|
:param pulumi.Input[Union['ManagedKubernetesOperationPolicyArgs', 'ManagedKubernetesOperationPolicyArgsDict']] operation_policy: The cluster automatic operation policy. See `operation_policy` below.
|
|
1581
1519
|
:param pulumi.Input[str] pod_cidr: [Flannel Specific] The CIDR block for the pod network when using Flannel.
|
|
1582
|
-
:param pulumi.Input[Sequence[pulumi.Input[str]]] pod_vswitch_ids: [Terway Specific] The vswitches for the pod network when using Terway. It is recommended that `pod_vswitch_ids` is not belong to `
|
|
1520
|
+
:param pulumi.Input[Sequence[pulumi.Input[str]]] pod_vswitch_ids: [Terway Specific] The vswitches for the pod network when using Terway. It is recommended that `pod_vswitch_ids` is not belong to `worker_vswitch_ids` but must be in same availability zones. Only works for **Create** Operation.
|
|
1583
1521
|
:param pulumi.Input[str] proxy_mode: Proxy mode is option of kube-proxy. options: iptables|ipvs. default: ipvs.
|
|
1584
1522
|
:param pulumi.Input[str] resource_group_id: The ID of the resource group,by default these cloud resources are automatically assigned to the default resource group.
|
|
1585
1523
|
:param pulumi.Input[str] security_group_id: The ID of the security group to which the ECS instances in the cluster belong. If it is not specified, a new Security group will be built.
|
|
@@ -1595,19 +1533,13 @@ class ManagedKubernetes(pulumi.CustomResource):
|
|
|
1595
1533
|
:param pulumi.Input[str] timezone: When you create a cluster, set the time zones for the Master and Worker nodes. You can only change the managed node time zone if you create a cluster. Once the cluster is created, you can only change the time zone of the Worker node.
|
|
1596
1534
|
:param pulumi.Input[str] user_ca: The path of customized CA cert, you can use this CA to sign client certs to connect your cluster.
|
|
1597
1535
|
:param pulumi.Input[str] version: Desired Kubernetes version. If you do not specify a value, the latest available version at resource creation is used and no upgrades will occur except you set a higher version number. The value must be configured and increased to upgrade the version when desired. Downgrades are not supported by ACK. Do not specify if cluster auto upgrade is enabled, see cluster_auto_upgrade for more information.
|
|
1598
|
-
:param pulumi.Input[Sequence[pulumi.Input[str]]]
|
|
1599
|
-
> **NOTE:** Please take of note before updating the `vswitch_ids`:
|
|
1600
|
-
* This parameter overwrites the existing configuration. You must specify all vSwitches of the control plane.
|
|
1601
|
-
* The control plane restarts during the change process. Exercise caution when you perform this operation.
|
|
1602
|
-
* Ensure that all security groups of the cluster, including the security groups of the control plane, all node pools, and container network, are allowed to access the CIDR blocks of the new vSwitches. This ensures that the nodes and containers can connect to the API server.
|
|
1603
|
-
* If the new vSwitches of the control plane are configured with an ACL, ensure that the ACL allows communication between the new vSwitches and CIDR blocks such as those of the cluster nodes and the container network.
|
|
1604
|
-
:param pulumi.Input[Sequence[pulumi.Input[str]]] worker_vswitch_ids: The vswitches used by control plane. Modification after creation will not take effect. Please use `vswitch_ids` to managed control plane vswtiches, which supports modifying control plane vswtiches.
|
|
1536
|
+
:param pulumi.Input[Sequence[pulumi.Input[str]]] worker_vswitch_ids: The vswitches used by control plane. See `worker_vswitch_ids` below.
|
|
1605
1537
|
"""
|
|
1606
1538
|
...
|
|
1607
1539
|
@overload
|
|
1608
1540
|
def __init__(__self__,
|
|
1609
1541
|
resource_name: str,
|
|
1610
|
-
args:
|
|
1542
|
+
args: ManagedKubernetesArgs,
|
|
1611
1543
|
opts: Optional[pulumi.ResourceOptions] = None):
|
|
1612
1544
|
"""
|
|
1613
1545
|
This resource will help you to manage a ManagedKubernetes Cluster in Alibaba Cloud Kubernetes Service.
|
|
@@ -1701,7 +1633,6 @@ class ManagedKubernetes(pulumi.CustomResource):
|
|
|
1701
1633
|
timezone: Optional[pulumi.Input[str]] = None,
|
|
1702
1634
|
user_ca: Optional[pulumi.Input[str]] = None,
|
|
1703
1635
|
version: Optional[pulumi.Input[str]] = None,
|
|
1704
|
-
vswitch_ids: Optional[pulumi.Input[Sequence[pulumi.Input[str]]]] = None,
|
|
1705
1636
|
worker_vswitch_ids: Optional[pulumi.Input[Sequence[pulumi.Input[str]]]] = None,
|
|
1706
1637
|
__props__=None):
|
|
1707
1638
|
opts = pulumi.ResourceOptions.merge(_utilities.get_resource_opts_defaults(), opts)
|
|
@@ -1748,7 +1679,8 @@ class ManagedKubernetes(pulumi.CustomResource):
|
|
|
1748
1679
|
__props__.__dict__["timezone"] = timezone
|
|
1749
1680
|
__props__.__dict__["user_ca"] = user_ca
|
|
1750
1681
|
__props__.__dict__["version"] = version
|
|
1751
|
-
|
|
1682
|
+
if worker_vswitch_ids is None and not opts.urn:
|
|
1683
|
+
raise TypeError("Missing required property 'worker_vswitch_ids'")
|
|
1752
1684
|
__props__.__dict__["worker_vswitch_ids"] = worker_vswitch_ids
|
|
1753
1685
|
__props__.__dict__["certificate_authority"] = None
|
|
1754
1686
|
__props__.__dict__["connections"] = None
|
|
@@ -1813,7 +1745,6 @@ class ManagedKubernetes(pulumi.CustomResource):
|
|
|
1813
1745
|
user_ca: Optional[pulumi.Input[str]] = None,
|
|
1814
1746
|
version: Optional[pulumi.Input[str]] = None,
|
|
1815
1747
|
vpc_id: Optional[pulumi.Input[str]] = None,
|
|
1816
|
-
vswitch_ids: Optional[pulumi.Input[Sequence[pulumi.Input[str]]]] = None,
|
|
1817
1748
|
worker_ram_role_name: Optional[pulumi.Input[str]] = None,
|
|
1818
1749
|
worker_vswitch_ids: Optional[pulumi.Input[Sequence[pulumi.Input[str]]]] = None) -> 'ManagedKubernetes':
|
|
1819
1750
|
"""
|
|
@@ -1848,7 +1779,7 @@ class ManagedKubernetes(pulumi.CustomResource):
|
|
|
1848
1779
|
:param pulumi.Input[bool] enable_rrsa: Whether to enable cluster to support RRSA for kubernetes version 1.22.3+. Default to `false`. Once the RRSA function is turned on, it is not allowed to turn off. If your cluster has enabled this function, please manually modify your tf file and add the rrsa configuration to the file, learn more [RAM Roles for Service Accounts](https://www.alibabacloud.com/help/zh/container-service-for-kubernetes/latest/use-rrsa-to-enforce-access-control).
|
|
1849
1780
|
:param pulumi.Input[str] encryption_provider_key: The disk encryption key.
|
|
1850
1781
|
:param pulumi.Input[bool] is_enterprise_security_group: Enable to create advanced security group. default: false. Only works for **Create** Operation. See [Advanced security group](https://www.alibabacloud.com/help/doc-detail/120621.htm).
|
|
1851
|
-
:param pulumi.Input[str] load_balancer_spec: The cluster api server load
|
|
1782
|
+
:param pulumi.Input[str] load_balancer_spec: The cluster api server load balance instance specification, default `slb.s1.small`. For more information on how to select a LB instance specification, see [SLB instance overview](https://help.aliyun.com/document_detail/85931.html). Only works for **Create** Operation.
|
|
1852
1783
|
:param pulumi.Input[Union['ManagedKubernetesMaintenanceWindowArgs', 'ManagedKubernetesMaintenanceWindowArgsDict']] maintenance_window: The cluster maintenance window,effective only in the professional managed cluster. Managed node pool will use it. See `maintenance_window` below.
|
|
1853
1784
|
:param pulumi.Input[str] name: The kubernetes cluster's name. It is unique in one Alicloud account.
|
|
1854
1785
|
:param pulumi.Input[str] nat_gateway_id: The ID of nat gateway used to launch kubernetes cluster.
|
|
@@ -1856,7 +1787,7 @@ class ManagedKubernetes(pulumi.CustomResource):
|
|
|
1856
1787
|
:param pulumi.Input[int] node_cidr_mask: The node cidr block to specific how many pods can run on single node. 24-28 is allowed. 24 means 2^(32-24)-1=255 and the node can run at most 255 pods. default: 24
|
|
1857
1788
|
:param pulumi.Input[Union['ManagedKubernetesOperationPolicyArgs', 'ManagedKubernetesOperationPolicyArgsDict']] operation_policy: The cluster automatic operation policy. See `operation_policy` below.
|
|
1858
1789
|
:param pulumi.Input[str] pod_cidr: [Flannel Specific] The CIDR block for the pod network when using Flannel.
|
|
1859
|
-
:param pulumi.Input[Sequence[pulumi.Input[str]]] pod_vswitch_ids: [Terway Specific] The vswitches for the pod network when using Terway. It is recommended that `pod_vswitch_ids` is not belong to `
|
|
1790
|
+
:param pulumi.Input[Sequence[pulumi.Input[str]]] pod_vswitch_ids: [Terway Specific] The vswitches for the pod network when using Terway. It is recommended that `pod_vswitch_ids` is not belong to `worker_vswitch_ids` but must be in same availability zones. Only works for **Create** Operation.
|
|
1860
1791
|
:param pulumi.Input[str] proxy_mode: Proxy mode is option of kube-proxy. options: iptables|ipvs. default: ipvs.
|
|
1861
1792
|
:param pulumi.Input[str] resource_group_id: The ID of the resource group,by default these cloud resources are automatically assigned to the default resource group.
|
|
1862
1793
|
:param pulumi.Input[Union['ManagedKubernetesRrsaMetadataArgs', 'ManagedKubernetesRrsaMetadataArgsDict']] rrsa_metadata: (Optional, Available since v1.185.0) Nested attribute containing RRSA related data for your cluster.
|
|
@@ -1877,14 +1808,8 @@ class ManagedKubernetes(pulumi.CustomResource):
|
|
|
1877
1808
|
:param pulumi.Input[str] user_ca: The path of customized CA cert, you can use this CA to sign client certs to connect your cluster.
|
|
1878
1809
|
:param pulumi.Input[str] version: Desired Kubernetes version. If you do not specify a value, the latest available version at resource creation is used and no upgrades will occur except you set a higher version number. The value must be configured and increased to upgrade the version when desired. Downgrades are not supported by ACK. Do not specify if cluster auto upgrade is enabled, see cluster_auto_upgrade for more information.
|
|
1879
1810
|
:param pulumi.Input[str] vpc_id: The ID of VPC where the current cluster is located.
|
|
1880
|
-
:param pulumi.Input[Sequence[pulumi.Input[str]]] vswitch_ids: The vSwitches of the control plane.
|
|
1881
|
-
> **NOTE:** Please take of note before updating the `vswitch_ids`:
|
|
1882
|
-
* This parameter overwrites the existing configuration. You must specify all vSwitches of the control plane.
|
|
1883
|
-
* The control plane restarts during the change process. Exercise caution when you perform this operation.
|
|
1884
|
-
* Ensure that all security groups of the cluster, including the security groups of the control plane, all node pools, and container network, are allowed to access the CIDR blocks of the new vSwitches. This ensures that the nodes and containers can connect to the API server.
|
|
1885
|
-
* If the new vSwitches of the control plane are configured with an ACL, ensure that the ACL allows communication between the new vSwitches and CIDR blocks such as those of the cluster nodes and the container network.
|
|
1886
1811
|
:param pulumi.Input[str] worker_ram_role_name: The RamRole Name attached to worker node.
|
|
1887
|
-
:param pulumi.Input[Sequence[pulumi.Input[str]]] worker_vswitch_ids: The vswitches used by control plane.
|
|
1812
|
+
:param pulumi.Input[Sequence[pulumi.Input[str]]] worker_vswitch_ids: The vswitches used by control plane. See `worker_vswitch_ids` below.
|
|
1888
1813
|
"""
|
|
1889
1814
|
opts = pulumi.ResourceOptions.merge(opts, pulumi.ResourceOptions(id=id))
|
|
1890
1815
|
|
|
@@ -1934,7 +1859,6 @@ class ManagedKubernetes(pulumi.CustomResource):
|
|
|
1934
1859
|
__props__.__dict__["user_ca"] = user_ca
|
|
1935
1860
|
__props__.__dict__["version"] = version
|
|
1936
1861
|
__props__.__dict__["vpc_id"] = vpc_id
|
|
1937
|
-
__props__.__dict__["vswitch_ids"] = vswitch_ids
|
|
1938
1862
|
__props__.__dict__["worker_ram_role_name"] = worker_ram_role_name
|
|
1939
1863
|
__props__.__dict__["worker_vswitch_ids"] = worker_vswitch_ids
|
|
1940
1864
|
return ManagedKubernetes(resource_name, opts=opts, __props__=__props__)
|
|
@@ -2092,10 +2016,10 @@ class ManagedKubernetes(pulumi.CustomResource):
|
|
|
2092
2016
|
|
|
2093
2017
|
@property
|
|
2094
2018
|
@pulumi.getter(name="loadBalancerSpec")
|
|
2095
|
-
@_utilities.deprecated("""Field 'load_balancer_spec' has been deprecated from provider version 1.232.0. The
|
|
2096
|
-
def load_balancer_spec(self) -> pulumi.Output[str]:
|
|
2019
|
+
@_utilities.deprecated("""Field 'load_balancer_spec' has been deprecated from provider version 1.232.0. The load balancer has been changed to PayByCLCU so that the spec is no need anymore.""")
|
|
2020
|
+
def load_balancer_spec(self) -> pulumi.Output[Optional[str]]:
|
|
2097
2021
|
"""
|
|
2098
|
-
The cluster api server load
|
|
2022
|
+
The cluster api server load balance instance specification, default `slb.s1.small`. For more information on how to select a LB instance specification, see [SLB instance overview](https://help.aliyun.com/document_detail/85931.html). Only works for **Create** Operation.
|
|
2099
2023
|
"""
|
|
2100
2024
|
return pulumi.get(self, "load_balancer_spec")
|
|
2101
2025
|
|
|
@@ -2164,7 +2088,7 @@ class ManagedKubernetes(pulumi.CustomResource):
|
|
|
2164
2088
|
@pulumi.getter(name="podVswitchIds")
|
|
2165
2089
|
def pod_vswitch_ids(self) -> pulumi.Output[Optional[Sequence[str]]]:
|
|
2166
2090
|
"""
|
|
2167
|
-
[Terway Specific] The vswitches for the pod network when using Terway. It is recommended that `pod_vswitch_ids` is not belong to `
|
|
2091
|
+
[Terway Specific] The vswitches for the pod network when using Terway. It is recommended that `pod_vswitch_ids` is not belong to `worker_vswitch_ids` but must be in same availability zones. Only works for **Create** Operation.
|
|
2168
2092
|
"""
|
|
2169
2093
|
return pulumi.get(self, "pod_vswitch_ids")
|
|
2170
2094
|
|
|
@@ -2298,19 +2222,6 @@ class ManagedKubernetes(pulumi.CustomResource):
|
|
|
2298
2222
|
"""
|
|
2299
2223
|
return pulumi.get(self, "vpc_id")
|
|
2300
2224
|
|
|
2301
|
-
@property
|
|
2302
|
-
@pulumi.getter(name="vswitchIds")
|
|
2303
|
-
def vswitch_ids(self) -> pulumi.Output[Sequence[str]]:
|
|
2304
|
-
"""
|
|
2305
|
-
The vSwitches of the control plane.
|
|
2306
|
-
> **NOTE:** Please take of note before updating the `vswitch_ids`:
|
|
2307
|
-
* This parameter overwrites the existing configuration. You must specify all vSwitches of the control plane.
|
|
2308
|
-
* The control plane restarts during the change process. Exercise caution when you perform this operation.
|
|
2309
|
-
* Ensure that all security groups of the cluster, including the security groups of the control plane, all node pools, and container network, are allowed to access the CIDR blocks of the new vSwitches. This ensures that the nodes and containers can connect to the API server.
|
|
2310
|
-
* If the new vSwitches of the control plane are configured with an ACL, ensure that the ACL allows communication between the new vSwitches and CIDR blocks such as those of the cluster nodes and the container network.
|
|
2311
|
-
"""
|
|
2312
|
-
return pulumi.get(self, "vswitch_ids")
|
|
2313
|
-
|
|
2314
2225
|
@property
|
|
2315
2226
|
@pulumi.getter(name="workerRamRoleName")
|
|
2316
2227
|
def worker_ram_role_name(self) -> pulumi.Output[str]:
|
|
@@ -2321,10 +2232,9 @@ class ManagedKubernetes(pulumi.CustomResource):
|
|
|
2321
2232
|
|
|
2322
2233
|
@property
|
|
2323
2234
|
@pulumi.getter(name="workerVswitchIds")
|
|
2324
|
-
|
|
2325
|
-
def worker_vswitch_ids(self) -> pulumi.Output[Optional[Sequence[str]]]:
|
|
2235
|
+
def worker_vswitch_ids(self) -> pulumi.Output[Sequence[str]]:
|
|
2326
2236
|
"""
|
|
2327
|
-
The vswitches used by control plane.
|
|
2237
|
+
The vswitches used by control plane. See `worker_vswitch_ids` below.
|
|
2328
2238
|
"""
|
|
2329
2239
|
return pulumi.get(self, "worker_vswitch_ids")
|
|
2330
2240
|
|
|
@@ -7,13 +7,9 @@ import typing
|
|
|
7
7
|
# Export this package's modules as members:
|
|
8
8
|
from .data_source import *
|
|
9
9
|
from .data_source_shared_rule import *
|
|
10
|
-
from .di_alarm_rule import *
|
|
11
|
-
from .di_job import *
|
|
12
|
-
from .dw_resource_group import *
|
|
13
10
|
from .folder import *
|
|
14
11
|
from .get_folders import *
|
|
15
12
|
from .get_service import *
|
|
16
|
-
from .network import *
|
|
17
13
|
from .project import *
|
|
18
14
|
from .project_member import *
|
|
19
15
|
from ._inputs import *
|