pulumi-azuread 5.48.0a1706744699__py3-none-any.whl → 6.8.0a1766208344__py3-none-any.whl
This diff represents the content of publicly available package versions that have been released to one of the supported registries. The information contained in this diff is provided for informational purposes only and reflects changes between package versions as they appear in their respective public registries.
Potentially problematic release.
This version of pulumi-azuread might be problematic. Click here for more details.
- pulumi_azuread/__init__.py +48 -1
- pulumi_azuread/_inputs.py +3803 -919
- pulumi_azuread/_utilities.py +52 -12
- pulumi_azuread/access_package.py +84 -78
- pulumi_azuread/access_package_assignment_policy.py +202 -196
- pulumi_azuread/access_package_catalog.py +82 -76
- pulumi_azuread/access_package_catalog_role_assignment.py +73 -67
- pulumi_azuread/access_package_resource_catalog_association.py +73 -67
- pulumi_azuread/access_package_resource_package_association.py +79 -73
- pulumi_azuread/administrative_unit.py +120 -100
- pulumi_azuread/administrative_unit_member.py +66 -50
- pulumi_azuread/administrative_unit_role_member.py +75 -69
- pulumi_azuread/app_role_assignment.py +164 -264
- pulumi_azuread/application.py +766 -692
- pulumi_azuread/application_api_access.py +84 -80
- pulumi_azuread/application_app_role.py +120 -116
- pulumi_azuread/application_certificate.py +349 -211
- pulumi_azuread/application_fallback_public_client.py +50 -44
- pulumi_azuread/application_federated_identity_credential.py +142 -197
- pulumi_azuread/application_from_template.py +90 -84
- pulumi_azuread/application_identifier_uri.py +56 -52
- pulumi_azuread/application_known_clients.py +50 -44
- pulumi_azuread/application_optional_claims.py +87 -81
- pulumi_azuread/application_owner.py +76 -42
- pulumi_azuread/application_password.py +159 -205
- pulumi_azuread/application_permission_scope.py +160 -156
- pulumi_azuread/application_pre_authorized.py +120 -236
- pulumi_azuread/application_redirect_uris.py +75 -69
- pulumi_azuread/application_registration.py +315 -309
- pulumi_azuread/authentication_strength_policy.py +73 -67
- pulumi_azuread/claims_mapping_policy.py +48 -42
- pulumi_azuread/conditional_access_policy.py +248 -232
- pulumi_azuread/config/__init__.py +2 -1
- pulumi_azuread/config/__init__.pyi +23 -17
- pulumi_azuread/config/vars.py +47 -37
- pulumi_azuread/custom_directory_role.py +128 -122
- pulumi_azuread/directory_role.py +60 -54
- pulumi_azuread/directory_role_assignment.py +194 -181
- pulumi_azuread/directory_role_eligibility_schedule_request.py +86 -80
- pulumi_azuread/directory_role_member.py +54 -48
- pulumi_azuread/get_access_package.py +45 -31
- pulumi_azuread/get_access_package_catalog.py +40 -27
- pulumi_azuread/get_access_package_catalog_role.py +39 -25
- pulumi_azuread/get_administrative_unit.py +42 -27
- pulumi_azuread/get_application.py +135 -94
- pulumi_azuread/get_application_published_app_ids.py +42 -47
- pulumi_azuread/get_application_template.py +49 -33
- pulumi_azuread/get_client_config.py +24 -15
- pulumi_azuread/get_directory_object.py +32 -21
- pulumi_azuread/get_directory_role_templates.py +20 -12
- pulumi_azuread/get_directory_roles.py +23 -14
- pulumi_azuread/get_domains.py +65 -46
- pulumi_azuread/get_group.py +147 -88
- pulumi_azuread/get_group_role_management_policy.py +178 -0
- pulumi_azuread/get_groups.py +71 -51
- pulumi_azuread/get_named_location.py +47 -22
- pulumi_azuread/get_service_principal.py +108 -90
- pulumi_azuread/get_service_principals.py +60 -64
- pulumi_azuread/get_user.py +186 -118
- pulumi_azuread/get_users.py +96 -53
- pulumi_azuread/group.py +622 -464
- pulumi_azuread/group_member.py +56 -50
- pulumi_azuread/group_role_management_policy.py +544 -0
- pulumi_azuread/group_without_members.py +1610 -0
- pulumi_azuread/invitation.py +126 -120
- pulumi_azuread/named_location.py +90 -76
- pulumi_azuread/outputs.py +2844 -1308
- pulumi_azuread/privileged_access_group_assignment_schedule.py +695 -0
- pulumi_azuread/privileged_access_group_eligibility_schedule.py +695 -0
- pulumi_azuread/provider.py +292 -246
- pulumi_azuread/pulumi-plugin.json +2 -1
- pulumi_azuread/service_principal.py +400 -461
- pulumi_azuread/service_principal_certificate.py +230 -145
- pulumi_azuread/service_principal_claims_mapping_policy_assignment.py +53 -47
- pulumi_azuread/service_principal_delegated_permission_grant.py +146 -140
- pulumi_azuread/service_principal_password.py +156 -141
- pulumi_azuread/service_principal_token_signing_certificate.py +119 -124
- pulumi_azuread/synchronization_job.py +105 -111
- pulumi_azuread/synchronization_job_provision_on_demand.py +396 -0
- pulumi_azuread/synchronization_secret.py +64 -70
- pulumi_azuread/user.py +776 -730
- pulumi_azuread/user_flow_attribute.py +76 -70
- {pulumi_azuread-5.48.0a1706744699.dist-info → pulumi_azuread-6.8.0a1766208344.dist-info}/METADATA +21 -20
- pulumi_azuread-6.8.0a1766208344.dist-info/RECORD +87 -0
- {pulumi_azuread-5.48.0a1706744699.dist-info → pulumi_azuread-6.8.0a1766208344.dist-info}/WHEEL +1 -1
- pulumi_azuread-5.48.0a1706744699.dist-info/RECORD +0 -81
- {pulumi_azuread-5.48.0a1706744699.dist-info → pulumi_azuread-6.8.0a1766208344.dist-info}/top_level.txt +0 -0
pulumi_azuread/provider.py
CHANGED
|
@@ -1,12 +1,17 @@
|
|
|
1
1
|
# coding=utf-8
|
|
2
|
-
# *** WARNING: this file was generated by
|
|
2
|
+
# *** WARNING: this file was generated by pulumi-language-python. ***
|
|
3
3
|
# *** Do not edit by hand unless you're certain you know what you are doing! ***
|
|
4
4
|
|
|
5
|
-
import
|
|
5
|
+
import builtins as _builtins
|
|
6
6
|
import warnings
|
|
7
|
+
import sys
|
|
7
8
|
import pulumi
|
|
8
9
|
import pulumi.runtime
|
|
9
10
|
from typing import Any, Mapping, Optional, Sequence, Union, overload
|
|
11
|
+
if sys.version_info >= (3, 11):
|
|
12
|
+
from typing import NotRequired, TypedDict, TypeAlias
|
|
13
|
+
else:
|
|
14
|
+
from typing_extensions import NotRequired, TypedDict, TypeAlias
|
|
10
15
|
from . import _utilities
|
|
11
16
|
|
|
12
17
|
__all__ = ['ProviderArgs', 'Provider']
|
|
@@ -14,56 +19,54 @@ __all__ = ['ProviderArgs', 'Provider']
|
|
|
14
19
|
@pulumi.input_type
|
|
15
20
|
class ProviderArgs:
|
|
16
21
|
def __init__(__self__, *,
|
|
17
|
-
|
|
18
|
-
client_certificate: Optional[pulumi.Input[str]] = None,
|
|
19
|
-
client_certificate_password: Optional[pulumi.Input[str]] = None,
|
|
20
|
-
client_certificate_path: Optional[pulumi.Input[str]] = None,
|
|
21
|
-
client_id: Optional[pulumi.Input[str]] = None,
|
|
22
|
-
client_id_file_path: Optional[pulumi.Input[str]] = None,
|
|
23
|
-
client_secret: Optional[pulumi.Input[str]] = None,
|
|
24
|
-
client_secret_file_path: Optional[pulumi.Input[str]] = None,
|
|
25
|
-
disable_terraform_partner_id: Optional[pulumi.Input[bool]] = None,
|
|
26
|
-
environment: Optional[pulumi.Input[str]] = None,
|
|
27
|
-
|
|
28
|
-
|
|
29
|
-
|
|
30
|
-
|
|
31
|
-
|
|
32
|
-
|
|
33
|
-
|
|
34
|
-
|
|
35
|
-
|
|
36
|
-
|
|
22
|
+
ado_pipeline_service_connection_id: Optional[pulumi.Input[_builtins.str]] = None,
|
|
23
|
+
client_certificate: Optional[pulumi.Input[_builtins.str]] = None,
|
|
24
|
+
client_certificate_password: Optional[pulumi.Input[_builtins.str]] = None,
|
|
25
|
+
client_certificate_path: Optional[pulumi.Input[_builtins.str]] = None,
|
|
26
|
+
client_id: Optional[pulumi.Input[_builtins.str]] = None,
|
|
27
|
+
client_id_file_path: Optional[pulumi.Input[_builtins.str]] = None,
|
|
28
|
+
client_secret: Optional[pulumi.Input[_builtins.str]] = None,
|
|
29
|
+
client_secret_file_path: Optional[pulumi.Input[_builtins.str]] = None,
|
|
30
|
+
disable_terraform_partner_id: Optional[pulumi.Input[_builtins.bool]] = None,
|
|
31
|
+
environment: Optional[pulumi.Input[_builtins.str]] = None,
|
|
32
|
+
metadata_host: Optional[pulumi.Input[_builtins.str]] = None,
|
|
33
|
+
msi_endpoint: Optional[pulumi.Input[_builtins.str]] = None,
|
|
34
|
+
oidc_request_token: Optional[pulumi.Input[_builtins.str]] = None,
|
|
35
|
+
oidc_request_url: Optional[pulumi.Input[_builtins.str]] = None,
|
|
36
|
+
oidc_token: Optional[pulumi.Input[_builtins.str]] = None,
|
|
37
|
+
oidc_token_file_path: Optional[pulumi.Input[_builtins.str]] = None,
|
|
38
|
+
partner_id: Optional[pulumi.Input[_builtins.str]] = None,
|
|
39
|
+
tenant_id: Optional[pulumi.Input[_builtins.str]] = None,
|
|
40
|
+
use_aks_workload_identity: Optional[pulumi.Input[_builtins.bool]] = None,
|
|
41
|
+
use_cli: Optional[pulumi.Input[_builtins.bool]] = None,
|
|
42
|
+
use_msi: Optional[pulumi.Input[_builtins.bool]] = None,
|
|
43
|
+
use_oidc: Optional[pulumi.Input[_builtins.bool]] = None):
|
|
37
44
|
"""
|
|
38
45
|
The set of arguments for constructing a Provider resource.
|
|
39
|
-
:param pulumi.Input[str]
|
|
40
|
-
:param pulumi.Input[str] client_certificate: Base64 encoded PKCS#12 certificate bundle to use when authenticating as a Service Principal using a Client Certificate
|
|
41
|
-
:param pulumi.Input[str] client_certificate_password: The password to decrypt the Client Certificate. For use when authenticating as a Service Principal using a Client
|
|
42
|
-
|
|
43
|
-
:param pulumi.Input[str]
|
|
44
|
-
|
|
45
|
-
:param pulumi.Input[str]
|
|
46
|
-
:param pulumi.Input[str]
|
|
47
|
-
:param pulumi.Input[str]
|
|
48
|
-
:param pulumi.Input[str]
|
|
49
|
-
|
|
50
|
-
:param pulumi.Input[
|
|
51
|
-
:param pulumi.Input[str]
|
|
52
|
-
|
|
53
|
-
:param pulumi.Input[str]
|
|
54
|
-
:param pulumi.Input[str]
|
|
55
|
-
|
|
56
|
-
:param pulumi.Input[
|
|
57
|
-
|
|
58
|
-
:param pulumi.Input[
|
|
59
|
-
:param pulumi.Input[
|
|
60
|
-
|
|
61
|
-
|
|
62
|
-
|
|
63
|
-
:param pulumi.Input[bool] use_msi: Allow Managed Identity to be used for Authentication
|
|
64
|
-
:param pulumi.Input[bool] use_oidc: Allow OpenID Connect to be used for authentication
|
|
65
|
-
"""
|
|
66
|
-
pulumi.set(__self__, "metadata_host", metadata_host)
|
|
46
|
+
:param pulumi.Input[_builtins.str] ado_pipeline_service_connection_id: The Azure DevOps Pipeline Service Connection ID.
|
|
47
|
+
:param pulumi.Input[_builtins.str] client_certificate: Base64 encoded PKCS#12 certificate bundle to use when authenticating as a Service Principal using a Client Certificate
|
|
48
|
+
:param pulumi.Input[_builtins.str] client_certificate_password: The password to decrypt the Client Certificate. For use when authenticating as a Service Principal using a Client Certificate
|
|
49
|
+
:param pulumi.Input[_builtins.str] client_certificate_path: The path to the Client Certificate associated with the Service Principal for use when authenticating as a Service Principal using a Client Certificate
|
|
50
|
+
:param pulumi.Input[_builtins.str] client_id: The Client ID which should be used for service principal authentication
|
|
51
|
+
:param pulumi.Input[_builtins.str] client_id_file_path: The path to a file containing the Client ID which should be used for service principal authentication
|
|
52
|
+
:param pulumi.Input[_builtins.str] client_secret: The application password to use when authenticating as a Service Principal using a Client Secret
|
|
53
|
+
:param pulumi.Input[_builtins.str] client_secret_file_path: The path to a file containing the application password to use when authenticating as a Service Principal using a Client Secret
|
|
54
|
+
:param pulumi.Input[_builtins.str] environment: The cloud environment which should be used. Possible values are: `global` (also `public`), `usgovernmentl4` (also `usgovernment`), `usgovernmentl5` (also `dod`), and `china`. Defaults to `global`. Not used and should not be specified when `metadata_host` is specified.
|
|
55
|
+
:param pulumi.Input[_builtins.str] metadata_host: The Hostname which should be used for the Azure Metadata Service.
|
|
56
|
+
:param pulumi.Input[_builtins.str] msi_endpoint: The path to a custom endpoint for Managed Identity - in most circumstances this should be detected automatically
|
|
57
|
+
:param pulumi.Input[_builtins.str] oidc_request_token: The bearer token for the request to the OIDC provider. For use when authenticating as a Service Principal using OpenID Connect.
|
|
58
|
+
:param pulumi.Input[_builtins.str] oidc_request_url: The URL for the OIDC provider from which to request an ID token. For use when authenticating as a Service Principal using OpenID Connect.
|
|
59
|
+
:param pulumi.Input[_builtins.str] oidc_token: The ID token for use when authenticating as a Service Principal using OpenID Connect.
|
|
60
|
+
:param pulumi.Input[_builtins.str] oidc_token_file_path: The path to a file containing an ID token for use when authenticating as a Service Principal using OpenID Connect.
|
|
61
|
+
:param pulumi.Input[_builtins.str] partner_id: A GUID/UUID that is registered with Microsoft to facilitate partner resource usage attribution
|
|
62
|
+
:param pulumi.Input[_builtins.str] tenant_id: The Tenant ID which should be used. Works with all authentication methods except Managed Identity
|
|
63
|
+
:param pulumi.Input[_builtins.bool] use_aks_workload_identity: Allow Azure AKS Workload Identity to be used for Authentication.
|
|
64
|
+
:param pulumi.Input[_builtins.bool] use_cli: Allow Azure CLI to be used for Authentication
|
|
65
|
+
:param pulumi.Input[_builtins.bool] use_msi: Allow Managed Identity to be used for Authentication
|
|
66
|
+
:param pulumi.Input[_builtins.bool] use_oidc: Allow OpenID Connect to be used for authentication
|
|
67
|
+
"""
|
|
68
|
+
if ado_pipeline_service_connection_id is not None:
|
|
69
|
+
pulumi.set(__self__, "ado_pipeline_service_connection_id", ado_pipeline_service_connection_id)
|
|
67
70
|
if client_certificate is not None:
|
|
68
71
|
pulumi.set(__self__, "client_certificate", client_certificate)
|
|
69
72
|
if client_certificate_password is not None:
|
|
@@ -84,6 +87,8 @@ class ProviderArgs:
|
|
|
84
87
|
environment = (_utilities.get_env('ARM_ENVIRONMENT') or 'public')
|
|
85
88
|
if environment is not None:
|
|
86
89
|
pulumi.set(__self__, "environment", environment)
|
|
90
|
+
if metadata_host is not None:
|
|
91
|
+
pulumi.set(__self__, "metadata_host", metadata_host)
|
|
87
92
|
if msi_endpoint is None:
|
|
88
93
|
msi_endpoint = _utilities.get_env('ARM_MSI_ENDPOINT')
|
|
89
94
|
if msi_endpoint is not None:
|
|
@@ -100,6 +105,8 @@ class ProviderArgs:
|
|
|
100
105
|
pulumi.set(__self__, "partner_id", partner_id)
|
|
101
106
|
if tenant_id is not None:
|
|
102
107
|
pulumi.set(__self__, "tenant_id", tenant_id)
|
|
108
|
+
if use_aks_workload_identity is not None:
|
|
109
|
+
pulumi.set(__self__, "use_aks_workload_identity", use_aks_workload_identity)
|
|
103
110
|
if use_cli is not None:
|
|
104
111
|
pulumi.set(__self__, "use_cli", use_cli)
|
|
105
112
|
if use_msi is None:
|
|
@@ -109,278 +116,296 @@ class ProviderArgs:
|
|
|
109
116
|
if use_oidc is not None:
|
|
110
117
|
pulumi.set(__self__, "use_oidc", use_oidc)
|
|
111
118
|
|
|
112
|
-
@property
|
|
113
|
-
@pulumi.getter(name="
|
|
114
|
-
def
|
|
119
|
+
@_builtins.property
|
|
120
|
+
@pulumi.getter(name="adoPipelineServiceConnectionId")
|
|
121
|
+
def ado_pipeline_service_connection_id(self) -> Optional[pulumi.Input[_builtins.str]]:
|
|
115
122
|
"""
|
|
116
|
-
The
|
|
123
|
+
The Azure DevOps Pipeline Service Connection ID.
|
|
117
124
|
"""
|
|
118
|
-
return pulumi.get(self, "
|
|
125
|
+
return pulumi.get(self, "ado_pipeline_service_connection_id")
|
|
119
126
|
|
|
120
|
-
@
|
|
121
|
-
def
|
|
122
|
-
pulumi.set(self, "
|
|
127
|
+
@ado_pipeline_service_connection_id.setter
|
|
128
|
+
def ado_pipeline_service_connection_id(self, value: Optional[pulumi.Input[_builtins.str]]):
|
|
129
|
+
pulumi.set(self, "ado_pipeline_service_connection_id", value)
|
|
123
130
|
|
|
124
|
-
@property
|
|
131
|
+
@_builtins.property
|
|
125
132
|
@pulumi.getter(name="clientCertificate")
|
|
126
|
-
def client_certificate(self) -> Optional[pulumi.Input[str]]:
|
|
133
|
+
def client_certificate(self) -> Optional[pulumi.Input[_builtins.str]]:
|
|
127
134
|
"""
|
|
128
135
|
Base64 encoded PKCS#12 certificate bundle to use when authenticating as a Service Principal using a Client Certificate
|
|
129
136
|
"""
|
|
130
137
|
return pulumi.get(self, "client_certificate")
|
|
131
138
|
|
|
132
139
|
@client_certificate.setter
|
|
133
|
-
def client_certificate(self, value: Optional[pulumi.Input[str]]):
|
|
140
|
+
def client_certificate(self, value: Optional[pulumi.Input[_builtins.str]]):
|
|
134
141
|
pulumi.set(self, "client_certificate", value)
|
|
135
142
|
|
|
136
|
-
@property
|
|
143
|
+
@_builtins.property
|
|
137
144
|
@pulumi.getter(name="clientCertificatePassword")
|
|
138
|
-
def client_certificate_password(self) -> Optional[pulumi.Input[str]]:
|
|
145
|
+
def client_certificate_password(self) -> Optional[pulumi.Input[_builtins.str]]:
|
|
139
146
|
"""
|
|
140
|
-
The password to decrypt the Client Certificate. For use when authenticating as a Service Principal using a Client
|
|
141
|
-
Certificate
|
|
147
|
+
The password to decrypt the Client Certificate. For use when authenticating as a Service Principal using a Client Certificate
|
|
142
148
|
"""
|
|
143
149
|
return pulumi.get(self, "client_certificate_password")
|
|
144
150
|
|
|
145
151
|
@client_certificate_password.setter
|
|
146
|
-
def client_certificate_password(self, value: Optional[pulumi.Input[str]]):
|
|
152
|
+
def client_certificate_password(self, value: Optional[pulumi.Input[_builtins.str]]):
|
|
147
153
|
pulumi.set(self, "client_certificate_password", value)
|
|
148
154
|
|
|
149
|
-
@property
|
|
155
|
+
@_builtins.property
|
|
150
156
|
@pulumi.getter(name="clientCertificatePath")
|
|
151
|
-
def client_certificate_path(self) -> Optional[pulumi.Input[str]]:
|
|
157
|
+
def client_certificate_path(self) -> Optional[pulumi.Input[_builtins.str]]:
|
|
152
158
|
"""
|
|
153
|
-
The path to the Client Certificate associated with the Service Principal for use when authenticating as a Service
|
|
154
|
-
Principal using a Client Certificate
|
|
159
|
+
The path to the Client Certificate associated with the Service Principal for use when authenticating as a Service Principal using a Client Certificate
|
|
155
160
|
"""
|
|
156
161
|
return pulumi.get(self, "client_certificate_path")
|
|
157
162
|
|
|
158
163
|
@client_certificate_path.setter
|
|
159
|
-
def client_certificate_path(self, value: Optional[pulumi.Input[str]]):
|
|
164
|
+
def client_certificate_path(self, value: Optional[pulumi.Input[_builtins.str]]):
|
|
160
165
|
pulumi.set(self, "client_certificate_path", value)
|
|
161
166
|
|
|
162
|
-
@property
|
|
167
|
+
@_builtins.property
|
|
163
168
|
@pulumi.getter(name="clientId")
|
|
164
|
-
def client_id(self) -> Optional[pulumi.Input[str]]:
|
|
169
|
+
def client_id(self) -> Optional[pulumi.Input[_builtins.str]]:
|
|
165
170
|
"""
|
|
166
171
|
The Client ID which should be used for service principal authentication
|
|
167
172
|
"""
|
|
168
173
|
return pulumi.get(self, "client_id")
|
|
169
174
|
|
|
170
175
|
@client_id.setter
|
|
171
|
-
def client_id(self, value: Optional[pulumi.Input[str]]):
|
|
176
|
+
def client_id(self, value: Optional[pulumi.Input[_builtins.str]]):
|
|
172
177
|
pulumi.set(self, "client_id", value)
|
|
173
178
|
|
|
174
|
-
@property
|
|
179
|
+
@_builtins.property
|
|
175
180
|
@pulumi.getter(name="clientIdFilePath")
|
|
176
|
-
def client_id_file_path(self) -> Optional[pulumi.Input[str]]:
|
|
181
|
+
def client_id_file_path(self) -> Optional[pulumi.Input[_builtins.str]]:
|
|
177
182
|
"""
|
|
178
183
|
The path to a file containing the Client ID which should be used for service principal authentication
|
|
179
184
|
"""
|
|
180
185
|
return pulumi.get(self, "client_id_file_path")
|
|
181
186
|
|
|
182
187
|
@client_id_file_path.setter
|
|
183
|
-
def client_id_file_path(self, value: Optional[pulumi.Input[str]]):
|
|
188
|
+
def client_id_file_path(self, value: Optional[pulumi.Input[_builtins.str]]):
|
|
184
189
|
pulumi.set(self, "client_id_file_path", value)
|
|
185
190
|
|
|
186
|
-
@property
|
|
191
|
+
@_builtins.property
|
|
187
192
|
@pulumi.getter(name="clientSecret")
|
|
188
|
-
def client_secret(self) -> Optional[pulumi.Input[str]]:
|
|
193
|
+
def client_secret(self) -> Optional[pulumi.Input[_builtins.str]]:
|
|
189
194
|
"""
|
|
190
195
|
The application password to use when authenticating as a Service Principal using a Client Secret
|
|
191
196
|
"""
|
|
192
197
|
return pulumi.get(self, "client_secret")
|
|
193
198
|
|
|
194
199
|
@client_secret.setter
|
|
195
|
-
def client_secret(self, value: Optional[pulumi.Input[str]]):
|
|
200
|
+
def client_secret(self, value: Optional[pulumi.Input[_builtins.str]]):
|
|
196
201
|
pulumi.set(self, "client_secret", value)
|
|
197
202
|
|
|
198
|
-
@property
|
|
203
|
+
@_builtins.property
|
|
199
204
|
@pulumi.getter(name="clientSecretFilePath")
|
|
200
|
-
def client_secret_file_path(self) -> Optional[pulumi.Input[str]]:
|
|
205
|
+
def client_secret_file_path(self) -> Optional[pulumi.Input[_builtins.str]]:
|
|
201
206
|
"""
|
|
202
|
-
The path to a file containing the application password to use when authenticating as a Service Principal using a Client
|
|
203
|
-
Secret
|
|
207
|
+
The path to a file containing the application password to use when authenticating as a Service Principal using a Client Secret
|
|
204
208
|
"""
|
|
205
209
|
return pulumi.get(self, "client_secret_file_path")
|
|
206
210
|
|
|
207
211
|
@client_secret_file_path.setter
|
|
208
|
-
def client_secret_file_path(self, value: Optional[pulumi.Input[str]]):
|
|
212
|
+
def client_secret_file_path(self, value: Optional[pulumi.Input[_builtins.str]]):
|
|
209
213
|
pulumi.set(self, "client_secret_file_path", value)
|
|
210
214
|
|
|
211
|
-
@property
|
|
215
|
+
@_builtins.property
|
|
212
216
|
@pulumi.getter(name="disableTerraformPartnerId")
|
|
213
|
-
def disable_terraform_partner_id(self) -> Optional[pulumi.Input[bool]]:
|
|
214
|
-
"""
|
|
215
|
-
Disable the Terraform Partner ID, which is used if a custom `partner_id` isn't specified
|
|
216
|
-
"""
|
|
217
|
+
def disable_terraform_partner_id(self) -> Optional[pulumi.Input[_builtins.bool]]:
|
|
217
218
|
return pulumi.get(self, "disable_terraform_partner_id")
|
|
218
219
|
|
|
219
220
|
@disable_terraform_partner_id.setter
|
|
220
|
-
def disable_terraform_partner_id(self, value: Optional[pulumi.Input[bool]]):
|
|
221
|
+
def disable_terraform_partner_id(self, value: Optional[pulumi.Input[_builtins.bool]]):
|
|
221
222
|
pulumi.set(self, "disable_terraform_partner_id", value)
|
|
222
223
|
|
|
223
|
-
@property
|
|
224
|
+
@_builtins.property
|
|
224
225
|
@pulumi.getter
|
|
225
|
-
def environment(self) -> Optional[pulumi.Input[str]]:
|
|
226
|
+
def environment(self) -> Optional[pulumi.Input[_builtins.str]]:
|
|
226
227
|
"""
|
|
227
|
-
The cloud environment which should be used. Possible values are: `global` (also `public`), `usgovernmentl4` (also
|
|
228
|
-
`usgovernment`), `usgovernmentl5` (also `dod`), and `china`. Defaults to `global`
|
|
228
|
+
The cloud environment which should be used. Possible values are: `global` (also `public`), `usgovernmentl4` (also `usgovernment`), `usgovernmentl5` (also `dod`), and `china`. Defaults to `global`. Not used and should not be specified when `metadata_host` is specified.
|
|
229
229
|
"""
|
|
230
230
|
return pulumi.get(self, "environment")
|
|
231
231
|
|
|
232
232
|
@environment.setter
|
|
233
|
-
def environment(self, value: Optional[pulumi.Input[str]]):
|
|
233
|
+
def environment(self, value: Optional[pulumi.Input[_builtins.str]]):
|
|
234
234
|
pulumi.set(self, "environment", value)
|
|
235
235
|
|
|
236
|
-
@property
|
|
236
|
+
@_builtins.property
|
|
237
|
+
@pulumi.getter(name="metadataHost")
|
|
238
|
+
def metadata_host(self) -> Optional[pulumi.Input[_builtins.str]]:
|
|
239
|
+
"""
|
|
240
|
+
The Hostname which should be used for the Azure Metadata Service.
|
|
241
|
+
"""
|
|
242
|
+
return pulumi.get(self, "metadata_host")
|
|
243
|
+
|
|
244
|
+
@metadata_host.setter
|
|
245
|
+
def metadata_host(self, value: Optional[pulumi.Input[_builtins.str]]):
|
|
246
|
+
pulumi.set(self, "metadata_host", value)
|
|
247
|
+
|
|
248
|
+
@_builtins.property
|
|
237
249
|
@pulumi.getter(name="msiEndpoint")
|
|
238
|
-
def msi_endpoint(self) -> Optional[pulumi.Input[str]]:
|
|
250
|
+
def msi_endpoint(self) -> Optional[pulumi.Input[_builtins.str]]:
|
|
239
251
|
"""
|
|
240
252
|
The path to a custom endpoint for Managed Identity - in most circumstances this should be detected automatically
|
|
241
253
|
"""
|
|
242
254
|
return pulumi.get(self, "msi_endpoint")
|
|
243
255
|
|
|
244
256
|
@msi_endpoint.setter
|
|
245
|
-
def msi_endpoint(self, value: Optional[pulumi.Input[str]]):
|
|
257
|
+
def msi_endpoint(self, value: Optional[pulumi.Input[_builtins.str]]):
|
|
246
258
|
pulumi.set(self, "msi_endpoint", value)
|
|
247
259
|
|
|
248
|
-
@property
|
|
260
|
+
@_builtins.property
|
|
249
261
|
@pulumi.getter(name="oidcRequestToken")
|
|
250
|
-
def oidc_request_token(self) -> Optional[pulumi.Input[str]]:
|
|
262
|
+
def oidc_request_token(self) -> Optional[pulumi.Input[_builtins.str]]:
|
|
251
263
|
"""
|
|
252
|
-
The bearer token for the request to the OIDC provider. For use when authenticating as a Service Principal using OpenID
|
|
253
|
-
Connect.
|
|
264
|
+
The bearer token for the request to the OIDC provider. For use when authenticating as a Service Principal using OpenID Connect.
|
|
254
265
|
"""
|
|
255
266
|
return pulumi.get(self, "oidc_request_token")
|
|
256
267
|
|
|
257
268
|
@oidc_request_token.setter
|
|
258
|
-
def oidc_request_token(self, value: Optional[pulumi.Input[str]]):
|
|
269
|
+
def oidc_request_token(self, value: Optional[pulumi.Input[_builtins.str]]):
|
|
259
270
|
pulumi.set(self, "oidc_request_token", value)
|
|
260
271
|
|
|
261
|
-
@property
|
|
272
|
+
@_builtins.property
|
|
262
273
|
@pulumi.getter(name="oidcRequestUrl")
|
|
263
|
-
def oidc_request_url(self) -> Optional[pulumi.Input[str]]:
|
|
274
|
+
def oidc_request_url(self) -> Optional[pulumi.Input[_builtins.str]]:
|
|
264
275
|
"""
|
|
265
|
-
The URL for the OIDC provider from which to request an ID token. For use when authenticating as a Service Principal
|
|
266
|
-
using OpenID Connect.
|
|
276
|
+
The URL for the OIDC provider from which to request an ID token. For use when authenticating as a Service Principal using OpenID Connect.
|
|
267
277
|
"""
|
|
268
278
|
return pulumi.get(self, "oidc_request_url")
|
|
269
279
|
|
|
270
280
|
@oidc_request_url.setter
|
|
271
|
-
def oidc_request_url(self, value: Optional[pulumi.Input[str]]):
|
|
281
|
+
def oidc_request_url(self, value: Optional[pulumi.Input[_builtins.str]]):
|
|
272
282
|
pulumi.set(self, "oidc_request_url", value)
|
|
273
283
|
|
|
274
|
-
@property
|
|
284
|
+
@_builtins.property
|
|
275
285
|
@pulumi.getter(name="oidcToken")
|
|
276
|
-
def oidc_token(self) -> Optional[pulumi.Input[str]]:
|
|
286
|
+
def oidc_token(self) -> Optional[pulumi.Input[_builtins.str]]:
|
|
277
287
|
"""
|
|
278
288
|
The ID token for use when authenticating as a Service Principal using OpenID Connect.
|
|
279
289
|
"""
|
|
280
290
|
return pulumi.get(self, "oidc_token")
|
|
281
291
|
|
|
282
292
|
@oidc_token.setter
|
|
283
|
-
def oidc_token(self, value: Optional[pulumi.Input[str]]):
|
|
293
|
+
def oidc_token(self, value: Optional[pulumi.Input[_builtins.str]]):
|
|
284
294
|
pulumi.set(self, "oidc_token", value)
|
|
285
295
|
|
|
286
|
-
@property
|
|
296
|
+
@_builtins.property
|
|
287
297
|
@pulumi.getter(name="oidcTokenFilePath")
|
|
288
|
-
def oidc_token_file_path(self) -> Optional[pulumi.Input[str]]:
|
|
298
|
+
def oidc_token_file_path(self) -> Optional[pulumi.Input[_builtins.str]]:
|
|
289
299
|
"""
|
|
290
300
|
The path to a file containing an ID token for use when authenticating as a Service Principal using OpenID Connect.
|
|
291
301
|
"""
|
|
292
302
|
return pulumi.get(self, "oidc_token_file_path")
|
|
293
303
|
|
|
294
304
|
@oidc_token_file_path.setter
|
|
295
|
-
def oidc_token_file_path(self, value: Optional[pulumi.Input[str]]):
|
|
305
|
+
def oidc_token_file_path(self, value: Optional[pulumi.Input[_builtins.str]]):
|
|
296
306
|
pulumi.set(self, "oidc_token_file_path", value)
|
|
297
307
|
|
|
298
|
-
@property
|
|
308
|
+
@_builtins.property
|
|
299
309
|
@pulumi.getter(name="partnerId")
|
|
300
|
-
def partner_id(self) -> Optional[pulumi.Input[str]]:
|
|
310
|
+
def partner_id(self) -> Optional[pulumi.Input[_builtins.str]]:
|
|
301
311
|
"""
|
|
302
312
|
A GUID/UUID that is registered with Microsoft to facilitate partner resource usage attribution
|
|
303
313
|
"""
|
|
304
314
|
return pulumi.get(self, "partner_id")
|
|
305
315
|
|
|
306
316
|
@partner_id.setter
|
|
307
|
-
def partner_id(self, value: Optional[pulumi.Input[str]]):
|
|
317
|
+
def partner_id(self, value: Optional[pulumi.Input[_builtins.str]]):
|
|
308
318
|
pulumi.set(self, "partner_id", value)
|
|
309
319
|
|
|
310
|
-
@property
|
|
320
|
+
@_builtins.property
|
|
311
321
|
@pulumi.getter(name="tenantId")
|
|
312
|
-
def tenant_id(self) -> Optional[pulumi.Input[str]]:
|
|
322
|
+
def tenant_id(self) -> Optional[pulumi.Input[_builtins.str]]:
|
|
313
323
|
"""
|
|
314
324
|
The Tenant ID which should be used. Works with all authentication methods except Managed Identity
|
|
315
325
|
"""
|
|
316
326
|
return pulumi.get(self, "tenant_id")
|
|
317
327
|
|
|
318
328
|
@tenant_id.setter
|
|
319
|
-
def tenant_id(self, value: Optional[pulumi.Input[str]]):
|
|
329
|
+
def tenant_id(self, value: Optional[pulumi.Input[_builtins.str]]):
|
|
320
330
|
pulumi.set(self, "tenant_id", value)
|
|
321
331
|
|
|
322
|
-
@property
|
|
332
|
+
@_builtins.property
|
|
333
|
+
@pulumi.getter(name="useAksWorkloadIdentity")
|
|
334
|
+
def use_aks_workload_identity(self) -> Optional[pulumi.Input[_builtins.bool]]:
|
|
335
|
+
"""
|
|
336
|
+
Allow Azure AKS Workload Identity to be used for Authentication.
|
|
337
|
+
"""
|
|
338
|
+
return pulumi.get(self, "use_aks_workload_identity")
|
|
339
|
+
|
|
340
|
+
@use_aks_workload_identity.setter
|
|
341
|
+
def use_aks_workload_identity(self, value: Optional[pulumi.Input[_builtins.bool]]):
|
|
342
|
+
pulumi.set(self, "use_aks_workload_identity", value)
|
|
343
|
+
|
|
344
|
+
@_builtins.property
|
|
323
345
|
@pulumi.getter(name="useCli")
|
|
324
|
-
def use_cli(self) -> Optional[pulumi.Input[bool]]:
|
|
346
|
+
def use_cli(self) -> Optional[pulumi.Input[_builtins.bool]]:
|
|
325
347
|
"""
|
|
326
348
|
Allow Azure CLI to be used for Authentication
|
|
327
349
|
"""
|
|
328
350
|
return pulumi.get(self, "use_cli")
|
|
329
351
|
|
|
330
352
|
@use_cli.setter
|
|
331
|
-
def use_cli(self, value: Optional[pulumi.Input[bool]]):
|
|
353
|
+
def use_cli(self, value: Optional[pulumi.Input[_builtins.bool]]):
|
|
332
354
|
pulumi.set(self, "use_cli", value)
|
|
333
355
|
|
|
334
|
-
@property
|
|
356
|
+
@_builtins.property
|
|
335
357
|
@pulumi.getter(name="useMsi")
|
|
336
|
-
def use_msi(self) -> Optional[pulumi.Input[bool]]:
|
|
358
|
+
def use_msi(self) -> Optional[pulumi.Input[_builtins.bool]]:
|
|
337
359
|
"""
|
|
338
360
|
Allow Managed Identity to be used for Authentication
|
|
339
361
|
"""
|
|
340
362
|
return pulumi.get(self, "use_msi")
|
|
341
363
|
|
|
342
364
|
@use_msi.setter
|
|
343
|
-
def use_msi(self, value: Optional[pulumi.Input[bool]]):
|
|
365
|
+
def use_msi(self, value: Optional[pulumi.Input[_builtins.bool]]):
|
|
344
366
|
pulumi.set(self, "use_msi", value)
|
|
345
367
|
|
|
346
|
-
@property
|
|
368
|
+
@_builtins.property
|
|
347
369
|
@pulumi.getter(name="useOidc")
|
|
348
|
-
def use_oidc(self) -> Optional[pulumi.Input[bool]]:
|
|
370
|
+
def use_oidc(self) -> Optional[pulumi.Input[_builtins.bool]]:
|
|
349
371
|
"""
|
|
350
372
|
Allow OpenID Connect to be used for authentication
|
|
351
373
|
"""
|
|
352
374
|
return pulumi.get(self, "use_oidc")
|
|
353
375
|
|
|
354
376
|
@use_oidc.setter
|
|
355
|
-
def use_oidc(self, value: Optional[pulumi.Input[bool]]):
|
|
377
|
+
def use_oidc(self, value: Optional[pulumi.Input[_builtins.bool]]):
|
|
356
378
|
pulumi.set(self, "use_oidc", value)
|
|
357
379
|
|
|
358
380
|
|
|
381
|
+
@pulumi.type_token("pulumi:providers:azuread")
|
|
359
382
|
class Provider(pulumi.ProviderResource):
|
|
360
383
|
@overload
|
|
361
384
|
def __init__(__self__,
|
|
362
385
|
resource_name: str,
|
|
363
386
|
opts: Optional[pulumi.ResourceOptions] = None,
|
|
364
|
-
|
|
365
|
-
|
|
366
|
-
|
|
367
|
-
|
|
368
|
-
|
|
369
|
-
|
|
370
|
-
|
|
371
|
-
|
|
372
|
-
|
|
373
|
-
|
|
374
|
-
|
|
375
|
-
|
|
376
|
-
|
|
377
|
-
|
|
378
|
-
|
|
379
|
-
|
|
380
|
-
|
|
381
|
-
|
|
382
|
-
|
|
383
|
-
|
|
387
|
+
ado_pipeline_service_connection_id: Optional[pulumi.Input[_builtins.str]] = None,
|
|
388
|
+
client_certificate: Optional[pulumi.Input[_builtins.str]] = None,
|
|
389
|
+
client_certificate_password: Optional[pulumi.Input[_builtins.str]] = None,
|
|
390
|
+
client_certificate_path: Optional[pulumi.Input[_builtins.str]] = None,
|
|
391
|
+
client_id: Optional[pulumi.Input[_builtins.str]] = None,
|
|
392
|
+
client_id_file_path: Optional[pulumi.Input[_builtins.str]] = None,
|
|
393
|
+
client_secret: Optional[pulumi.Input[_builtins.str]] = None,
|
|
394
|
+
client_secret_file_path: Optional[pulumi.Input[_builtins.str]] = None,
|
|
395
|
+
disable_terraform_partner_id: Optional[pulumi.Input[_builtins.bool]] = None,
|
|
396
|
+
environment: Optional[pulumi.Input[_builtins.str]] = None,
|
|
397
|
+
metadata_host: Optional[pulumi.Input[_builtins.str]] = None,
|
|
398
|
+
msi_endpoint: Optional[pulumi.Input[_builtins.str]] = None,
|
|
399
|
+
oidc_request_token: Optional[pulumi.Input[_builtins.str]] = None,
|
|
400
|
+
oidc_request_url: Optional[pulumi.Input[_builtins.str]] = None,
|
|
401
|
+
oidc_token: Optional[pulumi.Input[_builtins.str]] = None,
|
|
402
|
+
oidc_token_file_path: Optional[pulumi.Input[_builtins.str]] = None,
|
|
403
|
+
partner_id: Optional[pulumi.Input[_builtins.str]] = None,
|
|
404
|
+
tenant_id: Optional[pulumi.Input[_builtins.str]] = None,
|
|
405
|
+
use_aks_workload_identity: Optional[pulumi.Input[_builtins.bool]] = None,
|
|
406
|
+
use_cli: Optional[pulumi.Input[_builtins.bool]] = None,
|
|
407
|
+
use_msi: Optional[pulumi.Input[_builtins.bool]] = None,
|
|
408
|
+
use_oidc: Optional[pulumi.Input[_builtins.bool]] = None,
|
|
384
409
|
__props__=None):
|
|
385
410
|
"""
|
|
386
411
|
The provider type for the azuread package. By default, resources use package-wide configuration
|
|
@@ -390,38 +415,33 @@ class Provider(pulumi.ProviderResource):
|
|
|
390
415
|
|
|
391
416
|
:param str resource_name: The name of the resource.
|
|
392
417
|
:param pulumi.ResourceOptions opts: Options for the resource.
|
|
393
|
-
:param pulumi.Input[str]
|
|
394
|
-
:param pulumi.Input[str]
|
|
395
|
-
|
|
396
|
-
:param pulumi.Input[str] client_certificate_path: The path to the Client Certificate associated with the Service Principal for use when authenticating as a Service
|
|
397
|
-
|
|
398
|
-
:param pulumi.Input[str]
|
|
399
|
-
:param pulumi.Input[str]
|
|
400
|
-
:param pulumi.Input[str]
|
|
401
|
-
:param pulumi.Input[str]
|
|
402
|
-
|
|
403
|
-
:param pulumi.Input[
|
|
404
|
-
:param pulumi.Input[str]
|
|
405
|
-
|
|
406
|
-
:param pulumi.Input[str]
|
|
407
|
-
:param pulumi.Input[str]
|
|
408
|
-
:param pulumi.Input[str]
|
|
409
|
-
|
|
410
|
-
:param pulumi.Input[
|
|
411
|
-
|
|
412
|
-
:param pulumi.Input[
|
|
413
|
-
:param pulumi.Input[
|
|
414
|
-
:param pulumi.Input[str] partner_id: A GUID/UUID that is registered with Microsoft to facilitate partner resource usage attribution
|
|
415
|
-
:param pulumi.Input[str] tenant_id: The Tenant ID which should be used. Works with all authentication methods except Managed Identity
|
|
416
|
-
:param pulumi.Input[bool] use_cli: Allow Azure CLI to be used for Authentication
|
|
417
|
-
:param pulumi.Input[bool] use_msi: Allow Managed Identity to be used for Authentication
|
|
418
|
-
:param pulumi.Input[bool] use_oidc: Allow OpenID Connect to be used for authentication
|
|
418
|
+
:param pulumi.Input[_builtins.str] ado_pipeline_service_connection_id: The Azure DevOps Pipeline Service Connection ID.
|
|
419
|
+
:param pulumi.Input[_builtins.str] client_certificate: Base64 encoded PKCS#12 certificate bundle to use when authenticating as a Service Principal using a Client Certificate
|
|
420
|
+
:param pulumi.Input[_builtins.str] client_certificate_password: The password to decrypt the Client Certificate. For use when authenticating as a Service Principal using a Client Certificate
|
|
421
|
+
:param pulumi.Input[_builtins.str] client_certificate_path: The path to the Client Certificate associated with the Service Principal for use when authenticating as a Service Principal using a Client Certificate
|
|
422
|
+
:param pulumi.Input[_builtins.str] client_id: The Client ID which should be used for service principal authentication
|
|
423
|
+
:param pulumi.Input[_builtins.str] client_id_file_path: The path to a file containing the Client ID which should be used for service principal authentication
|
|
424
|
+
:param pulumi.Input[_builtins.str] client_secret: The application password to use when authenticating as a Service Principal using a Client Secret
|
|
425
|
+
:param pulumi.Input[_builtins.str] client_secret_file_path: The path to a file containing the application password to use when authenticating as a Service Principal using a Client Secret
|
|
426
|
+
:param pulumi.Input[_builtins.str] environment: The cloud environment which should be used. Possible values are: `global` (also `public`), `usgovernmentl4` (also `usgovernment`), `usgovernmentl5` (also `dod`), and `china`. Defaults to `global`. Not used and should not be specified when `metadata_host` is specified.
|
|
427
|
+
:param pulumi.Input[_builtins.str] metadata_host: The Hostname which should be used for the Azure Metadata Service.
|
|
428
|
+
:param pulumi.Input[_builtins.str] msi_endpoint: The path to a custom endpoint for Managed Identity - in most circumstances this should be detected automatically
|
|
429
|
+
:param pulumi.Input[_builtins.str] oidc_request_token: The bearer token for the request to the OIDC provider. For use when authenticating as a Service Principal using OpenID Connect.
|
|
430
|
+
:param pulumi.Input[_builtins.str] oidc_request_url: The URL for the OIDC provider from which to request an ID token. For use when authenticating as a Service Principal using OpenID Connect.
|
|
431
|
+
:param pulumi.Input[_builtins.str] oidc_token: The ID token for use when authenticating as a Service Principal using OpenID Connect.
|
|
432
|
+
:param pulumi.Input[_builtins.str] oidc_token_file_path: The path to a file containing an ID token for use when authenticating as a Service Principal using OpenID Connect.
|
|
433
|
+
:param pulumi.Input[_builtins.str] partner_id: A GUID/UUID that is registered with Microsoft to facilitate partner resource usage attribution
|
|
434
|
+
:param pulumi.Input[_builtins.str] tenant_id: The Tenant ID which should be used. Works with all authentication methods except Managed Identity
|
|
435
|
+
:param pulumi.Input[_builtins.bool] use_aks_workload_identity: Allow Azure AKS Workload Identity to be used for Authentication.
|
|
436
|
+
:param pulumi.Input[_builtins.bool] use_cli: Allow Azure CLI to be used for Authentication
|
|
437
|
+
:param pulumi.Input[_builtins.bool] use_msi: Allow Managed Identity to be used for Authentication
|
|
438
|
+
:param pulumi.Input[_builtins.bool] use_oidc: Allow OpenID Connect to be used for authentication
|
|
419
439
|
"""
|
|
420
440
|
...
|
|
421
441
|
@overload
|
|
422
442
|
def __init__(__self__,
|
|
423
443
|
resource_name: str,
|
|
424
|
-
args: ProviderArgs,
|
|
444
|
+
args: Optional[ProviderArgs] = None,
|
|
425
445
|
opts: Optional[pulumi.ResourceOptions] = None):
|
|
426
446
|
"""
|
|
427
447
|
The provider type for the azuread package. By default, resources use package-wide configuration
|
|
@@ -444,26 +464,28 @@ class Provider(pulumi.ProviderResource):
|
|
|
444
464
|
def _internal_init(__self__,
|
|
445
465
|
resource_name: str,
|
|
446
466
|
opts: Optional[pulumi.ResourceOptions] = None,
|
|
447
|
-
|
|
448
|
-
|
|
449
|
-
|
|
450
|
-
|
|
451
|
-
|
|
452
|
-
|
|
453
|
-
|
|
454
|
-
|
|
455
|
-
|
|
456
|
-
|
|
457
|
-
|
|
458
|
-
|
|
459
|
-
|
|
460
|
-
|
|
461
|
-
|
|
462
|
-
|
|
463
|
-
|
|
464
|
-
|
|
465
|
-
|
|
466
|
-
|
|
467
|
+
ado_pipeline_service_connection_id: Optional[pulumi.Input[_builtins.str]] = None,
|
|
468
|
+
client_certificate: Optional[pulumi.Input[_builtins.str]] = None,
|
|
469
|
+
client_certificate_password: Optional[pulumi.Input[_builtins.str]] = None,
|
|
470
|
+
client_certificate_path: Optional[pulumi.Input[_builtins.str]] = None,
|
|
471
|
+
client_id: Optional[pulumi.Input[_builtins.str]] = None,
|
|
472
|
+
client_id_file_path: Optional[pulumi.Input[_builtins.str]] = None,
|
|
473
|
+
client_secret: Optional[pulumi.Input[_builtins.str]] = None,
|
|
474
|
+
client_secret_file_path: Optional[pulumi.Input[_builtins.str]] = None,
|
|
475
|
+
disable_terraform_partner_id: Optional[pulumi.Input[_builtins.bool]] = None,
|
|
476
|
+
environment: Optional[pulumi.Input[_builtins.str]] = None,
|
|
477
|
+
metadata_host: Optional[pulumi.Input[_builtins.str]] = None,
|
|
478
|
+
msi_endpoint: Optional[pulumi.Input[_builtins.str]] = None,
|
|
479
|
+
oidc_request_token: Optional[pulumi.Input[_builtins.str]] = None,
|
|
480
|
+
oidc_request_url: Optional[pulumi.Input[_builtins.str]] = None,
|
|
481
|
+
oidc_token: Optional[pulumi.Input[_builtins.str]] = None,
|
|
482
|
+
oidc_token_file_path: Optional[pulumi.Input[_builtins.str]] = None,
|
|
483
|
+
partner_id: Optional[pulumi.Input[_builtins.str]] = None,
|
|
484
|
+
tenant_id: Optional[pulumi.Input[_builtins.str]] = None,
|
|
485
|
+
use_aks_workload_identity: Optional[pulumi.Input[_builtins.bool]] = None,
|
|
486
|
+
use_cli: Optional[pulumi.Input[_builtins.bool]] = None,
|
|
487
|
+
use_msi: Optional[pulumi.Input[_builtins.bool]] = None,
|
|
488
|
+
use_oidc: Optional[pulumi.Input[_builtins.bool]] = None,
|
|
467
489
|
__props__=None):
|
|
468
490
|
opts = pulumi.ResourceOptions.merge(_utilities.get_resource_opts_defaults(), opts)
|
|
469
491
|
if not isinstance(opts, pulumi.ResourceOptions):
|
|
@@ -473,19 +495,18 @@ class Provider(pulumi.ProviderResource):
|
|
|
473
495
|
raise TypeError('__props__ is only valid when passed in combination with a valid opts.id to get an existing resource')
|
|
474
496
|
__props__ = ProviderArgs.__new__(ProviderArgs)
|
|
475
497
|
|
|
498
|
+
__props__.__dict__["ado_pipeline_service_connection_id"] = ado_pipeline_service_connection_id
|
|
476
499
|
__props__.__dict__["client_certificate"] = client_certificate
|
|
477
|
-
__props__.__dict__["client_certificate_password"] = client_certificate_password
|
|
500
|
+
__props__.__dict__["client_certificate_password"] = None if client_certificate_password is None else pulumi.Output.secret(client_certificate_password)
|
|
478
501
|
__props__.__dict__["client_certificate_path"] = client_certificate_path
|
|
479
|
-
__props__.__dict__["client_id"] = client_id
|
|
502
|
+
__props__.__dict__["client_id"] = None if client_id is None else pulumi.Output.secret(client_id)
|
|
480
503
|
__props__.__dict__["client_id_file_path"] = client_id_file_path
|
|
481
|
-
__props__.__dict__["client_secret"] = client_secret
|
|
504
|
+
__props__.__dict__["client_secret"] = None if client_secret is None else pulumi.Output.secret(client_secret)
|
|
482
505
|
__props__.__dict__["client_secret_file_path"] = client_secret_file_path
|
|
483
506
|
__props__.__dict__["disable_terraform_partner_id"] = pulumi.Output.from_input(disable_terraform_partner_id).apply(pulumi.runtime.to_json) if disable_terraform_partner_id is not None else None
|
|
484
507
|
if environment is None:
|
|
485
508
|
environment = (_utilities.get_env('ARM_ENVIRONMENT') or 'public')
|
|
486
509
|
__props__.__dict__["environment"] = environment
|
|
487
|
-
if metadata_host is None and not opts.urn:
|
|
488
|
-
raise TypeError("Missing required property 'metadata_host'")
|
|
489
510
|
__props__.__dict__["metadata_host"] = metadata_host
|
|
490
511
|
if msi_endpoint is None:
|
|
491
512
|
msi_endpoint = _utilities.get_env('ARM_MSI_ENDPOINT')
|
|
@@ -496,148 +517,173 @@ class Provider(pulumi.ProviderResource):
|
|
|
496
517
|
__props__.__dict__["oidc_token_file_path"] = oidc_token_file_path
|
|
497
518
|
__props__.__dict__["partner_id"] = partner_id
|
|
498
519
|
__props__.__dict__["tenant_id"] = tenant_id
|
|
520
|
+
__props__.__dict__["use_aks_workload_identity"] = pulumi.Output.from_input(use_aks_workload_identity).apply(pulumi.runtime.to_json) if use_aks_workload_identity is not None else None
|
|
499
521
|
__props__.__dict__["use_cli"] = pulumi.Output.from_input(use_cli).apply(pulumi.runtime.to_json) if use_cli is not None else None
|
|
500
522
|
if use_msi is None:
|
|
501
523
|
use_msi = (_utilities.get_env_bool('ARM_USE_MSI') or False)
|
|
502
524
|
__props__.__dict__["use_msi"] = pulumi.Output.from_input(use_msi).apply(pulumi.runtime.to_json) if use_msi is not None else None
|
|
503
525
|
__props__.__dict__["use_oidc"] = pulumi.Output.from_input(use_oidc).apply(pulumi.runtime.to_json) if use_oidc is not None else None
|
|
526
|
+
secret_opts = pulumi.ResourceOptions(additional_secret_outputs=["clientCertificatePassword", "clientId", "clientSecret"])
|
|
527
|
+
opts = pulumi.ResourceOptions.merge(opts, secret_opts)
|
|
504
528
|
super(Provider, __self__).__init__(
|
|
505
529
|
'azuread',
|
|
506
530
|
resource_name,
|
|
507
531
|
__props__,
|
|
508
532
|
opts)
|
|
509
533
|
|
|
510
|
-
@property
|
|
534
|
+
@_builtins.property
|
|
535
|
+
@pulumi.getter(name="adoPipelineServiceConnectionId")
|
|
536
|
+
def ado_pipeline_service_connection_id(self) -> pulumi.Output[Optional[_builtins.str]]:
|
|
537
|
+
"""
|
|
538
|
+
The Azure DevOps Pipeline Service Connection ID.
|
|
539
|
+
"""
|
|
540
|
+
return pulumi.get(self, "ado_pipeline_service_connection_id")
|
|
541
|
+
|
|
542
|
+
@_builtins.property
|
|
511
543
|
@pulumi.getter(name="clientCertificate")
|
|
512
|
-
def client_certificate(self) -> pulumi.Output[Optional[str]]:
|
|
544
|
+
def client_certificate(self) -> pulumi.Output[Optional[_builtins.str]]:
|
|
513
545
|
"""
|
|
514
546
|
Base64 encoded PKCS#12 certificate bundle to use when authenticating as a Service Principal using a Client Certificate
|
|
515
547
|
"""
|
|
516
548
|
return pulumi.get(self, "client_certificate")
|
|
517
549
|
|
|
518
|
-
@property
|
|
550
|
+
@_builtins.property
|
|
519
551
|
@pulumi.getter(name="clientCertificatePassword")
|
|
520
|
-
def client_certificate_password(self) -> pulumi.Output[Optional[str]]:
|
|
552
|
+
def client_certificate_password(self) -> pulumi.Output[Optional[_builtins.str]]:
|
|
521
553
|
"""
|
|
522
|
-
The password to decrypt the Client Certificate. For use when authenticating as a Service Principal using a Client
|
|
523
|
-
Certificate
|
|
554
|
+
The password to decrypt the Client Certificate. For use when authenticating as a Service Principal using a Client Certificate
|
|
524
555
|
"""
|
|
525
556
|
return pulumi.get(self, "client_certificate_password")
|
|
526
557
|
|
|
527
|
-
@property
|
|
558
|
+
@_builtins.property
|
|
528
559
|
@pulumi.getter(name="clientCertificatePath")
|
|
529
|
-
def client_certificate_path(self) -> pulumi.Output[Optional[str]]:
|
|
560
|
+
def client_certificate_path(self) -> pulumi.Output[Optional[_builtins.str]]:
|
|
530
561
|
"""
|
|
531
|
-
The path to the Client Certificate associated with the Service Principal for use when authenticating as a Service
|
|
532
|
-
Principal using a Client Certificate
|
|
562
|
+
The path to the Client Certificate associated with the Service Principal for use when authenticating as a Service Principal using a Client Certificate
|
|
533
563
|
"""
|
|
534
564
|
return pulumi.get(self, "client_certificate_path")
|
|
535
565
|
|
|
536
|
-
@property
|
|
566
|
+
@_builtins.property
|
|
537
567
|
@pulumi.getter(name="clientId")
|
|
538
|
-
def client_id(self) -> pulumi.Output[Optional[str]]:
|
|
568
|
+
def client_id(self) -> pulumi.Output[Optional[_builtins.str]]:
|
|
539
569
|
"""
|
|
540
570
|
The Client ID which should be used for service principal authentication
|
|
541
571
|
"""
|
|
542
572
|
return pulumi.get(self, "client_id")
|
|
543
573
|
|
|
544
|
-
@property
|
|
574
|
+
@_builtins.property
|
|
545
575
|
@pulumi.getter(name="clientIdFilePath")
|
|
546
|
-
def client_id_file_path(self) -> pulumi.Output[Optional[str]]:
|
|
576
|
+
def client_id_file_path(self) -> pulumi.Output[Optional[_builtins.str]]:
|
|
547
577
|
"""
|
|
548
578
|
The path to a file containing the Client ID which should be used for service principal authentication
|
|
549
579
|
"""
|
|
550
580
|
return pulumi.get(self, "client_id_file_path")
|
|
551
581
|
|
|
552
|
-
@property
|
|
582
|
+
@_builtins.property
|
|
553
583
|
@pulumi.getter(name="clientSecret")
|
|
554
|
-
def client_secret(self) -> pulumi.Output[Optional[str]]:
|
|
584
|
+
def client_secret(self) -> pulumi.Output[Optional[_builtins.str]]:
|
|
555
585
|
"""
|
|
556
586
|
The application password to use when authenticating as a Service Principal using a Client Secret
|
|
557
587
|
"""
|
|
558
588
|
return pulumi.get(self, "client_secret")
|
|
559
589
|
|
|
560
|
-
@property
|
|
590
|
+
@_builtins.property
|
|
561
591
|
@pulumi.getter(name="clientSecretFilePath")
|
|
562
|
-
def client_secret_file_path(self) -> pulumi.Output[Optional[str]]:
|
|
592
|
+
def client_secret_file_path(self) -> pulumi.Output[Optional[_builtins.str]]:
|
|
563
593
|
"""
|
|
564
|
-
The path to a file containing the application password to use when authenticating as a Service Principal using a Client
|
|
565
|
-
Secret
|
|
594
|
+
The path to a file containing the application password to use when authenticating as a Service Principal using a Client Secret
|
|
566
595
|
"""
|
|
567
596
|
return pulumi.get(self, "client_secret_file_path")
|
|
568
597
|
|
|
569
|
-
@property
|
|
598
|
+
@_builtins.property
|
|
570
599
|
@pulumi.getter
|
|
571
|
-
def environment(self) -> pulumi.Output[Optional[str]]:
|
|
600
|
+
def environment(self) -> pulumi.Output[Optional[_builtins.str]]:
|
|
572
601
|
"""
|
|
573
|
-
The cloud environment which should be used. Possible values are: `global` (also `public`), `usgovernmentl4` (also
|
|
574
|
-
`usgovernment`), `usgovernmentl5` (also `dod`), and `china`. Defaults to `global`
|
|
602
|
+
The cloud environment which should be used. Possible values are: `global` (also `public`), `usgovernmentl4` (also `usgovernment`), `usgovernmentl5` (also `dod`), and `china`. Defaults to `global`. Not used and should not be specified when `metadata_host` is specified.
|
|
575
603
|
"""
|
|
576
604
|
return pulumi.get(self, "environment")
|
|
577
605
|
|
|
578
|
-
@property
|
|
606
|
+
@_builtins.property
|
|
579
607
|
@pulumi.getter(name="metadataHost")
|
|
580
|
-
def metadata_host(self) -> pulumi.Output[str]:
|
|
608
|
+
def metadata_host(self) -> pulumi.Output[Optional[_builtins.str]]:
|
|
581
609
|
"""
|
|
582
610
|
The Hostname which should be used for the Azure Metadata Service.
|
|
583
611
|
"""
|
|
584
612
|
return pulumi.get(self, "metadata_host")
|
|
585
613
|
|
|
586
|
-
@property
|
|
614
|
+
@_builtins.property
|
|
587
615
|
@pulumi.getter(name="msiEndpoint")
|
|
588
|
-
def msi_endpoint(self) -> pulumi.Output[Optional[str]]:
|
|
616
|
+
def msi_endpoint(self) -> pulumi.Output[Optional[_builtins.str]]:
|
|
589
617
|
"""
|
|
590
618
|
The path to a custom endpoint for Managed Identity - in most circumstances this should be detected automatically
|
|
591
619
|
"""
|
|
592
620
|
return pulumi.get(self, "msi_endpoint")
|
|
593
621
|
|
|
594
|
-
@property
|
|
622
|
+
@_builtins.property
|
|
595
623
|
@pulumi.getter(name="oidcRequestToken")
|
|
596
|
-
def oidc_request_token(self) -> pulumi.Output[Optional[str]]:
|
|
624
|
+
def oidc_request_token(self) -> pulumi.Output[Optional[_builtins.str]]:
|
|
597
625
|
"""
|
|
598
|
-
The bearer token for the request to the OIDC provider. For use when authenticating as a Service Principal using OpenID
|
|
599
|
-
Connect.
|
|
626
|
+
The bearer token for the request to the OIDC provider. For use when authenticating as a Service Principal using OpenID Connect.
|
|
600
627
|
"""
|
|
601
628
|
return pulumi.get(self, "oidc_request_token")
|
|
602
629
|
|
|
603
|
-
@property
|
|
630
|
+
@_builtins.property
|
|
604
631
|
@pulumi.getter(name="oidcRequestUrl")
|
|
605
|
-
def oidc_request_url(self) -> pulumi.Output[Optional[str]]:
|
|
632
|
+
def oidc_request_url(self) -> pulumi.Output[Optional[_builtins.str]]:
|
|
606
633
|
"""
|
|
607
|
-
The URL for the OIDC provider from which to request an ID token. For use when authenticating as a Service Principal
|
|
608
|
-
using OpenID Connect.
|
|
634
|
+
The URL for the OIDC provider from which to request an ID token. For use when authenticating as a Service Principal using OpenID Connect.
|
|
609
635
|
"""
|
|
610
636
|
return pulumi.get(self, "oidc_request_url")
|
|
611
637
|
|
|
612
|
-
@property
|
|
638
|
+
@_builtins.property
|
|
613
639
|
@pulumi.getter(name="oidcToken")
|
|
614
|
-
def oidc_token(self) -> pulumi.Output[Optional[str]]:
|
|
640
|
+
def oidc_token(self) -> pulumi.Output[Optional[_builtins.str]]:
|
|
615
641
|
"""
|
|
616
642
|
The ID token for use when authenticating as a Service Principal using OpenID Connect.
|
|
617
643
|
"""
|
|
618
644
|
return pulumi.get(self, "oidc_token")
|
|
619
645
|
|
|
620
|
-
@property
|
|
646
|
+
@_builtins.property
|
|
621
647
|
@pulumi.getter(name="oidcTokenFilePath")
|
|
622
|
-
def oidc_token_file_path(self) -> pulumi.Output[Optional[str]]:
|
|
648
|
+
def oidc_token_file_path(self) -> pulumi.Output[Optional[_builtins.str]]:
|
|
623
649
|
"""
|
|
624
650
|
The path to a file containing an ID token for use when authenticating as a Service Principal using OpenID Connect.
|
|
625
651
|
"""
|
|
626
652
|
return pulumi.get(self, "oidc_token_file_path")
|
|
627
653
|
|
|
628
|
-
@property
|
|
654
|
+
@_builtins.property
|
|
629
655
|
@pulumi.getter(name="partnerId")
|
|
630
|
-
def partner_id(self) -> pulumi.Output[Optional[str]]:
|
|
656
|
+
def partner_id(self) -> pulumi.Output[Optional[_builtins.str]]:
|
|
631
657
|
"""
|
|
632
658
|
A GUID/UUID that is registered with Microsoft to facilitate partner resource usage attribution
|
|
633
659
|
"""
|
|
634
660
|
return pulumi.get(self, "partner_id")
|
|
635
661
|
|
|
636
|
-
@property
|
|
662
|
+
@_builtins.property
|
|
637
663
|
@pulumi.getter(name="tenantId")
|
|
638
|
-
def tenant_id(self) -> pulumi.Output[Optional[str]]:
|
|
664
|
+
def tenant_id(self) -> pulumi.Output[Optional[_builtins.str]]:
|
|
639
665
|
"""
|
|
640
666
|
The Tenant ID which should be used. Works with all authentication methods except Managed Identity
|
|
641
667
|
"""
|
|
642
668
|
return pulumi.get(self, "tenant_id")
|
|
643
669
|
|
|
670
|
+
@pulumi.output_type
|
|
671
|
+
class TerraformConfigResult:
|
|
672
|
+
def __init__(__self__, result=None):
|
|
673
|
+
if result and not isinstance(result, dict):
|
|
674
|
+
raise TypeError("Expected argument 'result' to be a dict")
|
|
675
|
+
pulumi.set(__self__, "result", result)
|
|
676
|
+
|
|
677
|
+
@_builtins.property
|
|
678
|
+
@pulumi.getter
|
|
679
|
+
def result(self) -> Mapping[str, Any]:
|
|
680
|
+
return pulumi.get(self, "result")
|
|
681
|
+
|
|
682
|
+
def terraform_config(__self__) -> pulumi.Output['Provider.TerraformConfigResult']:
|
|
683
|
+
"""
|
|
684
|
+
This function returns a Terraform config object with terraform-namecased keys,to be used with the Terraform Module Provider.
|
|
685
|
+
"""
|
|
686
|
+
__args__ = dict()
|
|
687
|
+
__args__['__self__'] = __self__
|
|
688
|
+
return pulumi.runtime.call('pulumi:providers:azuread/terraformConfig', __args__, res=__self__, typ=Provider.TerraformConfigResult)
|
|
689
|
+
|