pulumi-azuredevops 3.5.0a1735017670__py3-none-any.whl → 3.6.0__py3-none-any.whl
This diff represents the content of publicly available package versions that have been released to one of the supported registries. The information contained in this diff is provided for informational purposes only and reflects changes between package versions as they appear in their respective public registries.
- pulumi_azuredevops/__init__.py +109 -0
- pulumi_azuredevops/_inputs.py +455 -175
- pulumi_azuredevops/area_permissions.py +49 -49
- pulumi_azuredevops/branch_policy_auto_reviewers.py +7 -7
- pulumi_azuredevops/branch_policy_build_validation.py +7 -7
- pulumi_azuredevops/branch_policy_comment_resolution.py +7 -7
- pulumi_azuredevops/branch_policy_merge_types.py +7 -7
- pulumi_azuredevops/branch_policy_status_check.py +7 -7
- pulumi_azuredevops/branch_policy_work_item_linking.py +7 -7
- pulumi_azuredevops/build_definition.py +196 -23
- pulumi_azuredevops/check_branch_control.py +7 -7
- pulumi_azuredevops/check_business_hours.py +7 -7
- pulumi_azuredevops/check_exclusive_lock.py +7 -7
- pulumi_azuredevops/check_rest_api.py +986 -0
- pulumi_azuredevops/feed.py +8 -8
- pulumi_azuredevops/feed_permission.py +9 -9
- pulumi_azuredevops/feed_retention_policy.py +422 -0
- pulumi_azuredevops/get_agent_queue.py +2 -2
- pulumi_azuredevops/get_area.py +1 -1
- pulumi_azuredevops/get_client_config.py +3 -0
- pulumi_azuredevops/get_feed.py +4 -4
- pulumi_azuredevops/get_git_repository.py +8 -8
- pulumi_azuredevops/get_group.py +4 -4
- pulumi_azuredevops/get_groups.py +3 -3
- pulumi_azuredevops/get_identity_group.py +3 -0
- pulumi_azuredevops/get_identity_groups.py +1 -1
- pulumi_azuredevops/get_identity_users.py +5 -5
- pulumi_azuredevops/get_pool.py +14 -2
- pulumi_azuredevops/get_pools.py +3 -3
- pulumi_azuredevops/get_project.py +32 -0
- pulumi_azuredevops/get_projects.py +4 -4
- pulumi_azuredevops/get_repositories.py +7 -3
- pulumi_azuredevops/get_securityrole_definitions.py +4 -4
- pulumi_azuredevops/get_service_endpoint_azure_rm.py +31 -17
- pulumi_azuredevops/get_service_endpoint_github.py +6 -6
- pulumi_azuredevops/get_service_principal.py +153 -0
- pulumi_azuredevops/get_serviceendpoint_azurecr.py +1 -1
- pulumi_azuredevops/get_serviceendpoint_bitbucket.py +6 -6
- pulumi_azuredevops/get_serviceendpoint_npm.py +3 -3
- pulumi_azuredevops/get_serviceendpoint_sonarcloud.py +2 -2
- pulumi_azuredevops/get_team.py +4 -3
- pulumi_azuredevops/get_teams.py +2 -3
- pulumi_azuredevops/get_users.py +5 -9
- pulumi_azuredevops/git.py +7 -7
- pulumi_azuredevops/git_permissions.py +21 -28
- pulumi_azuredevops/git_repository_file.py +7 -14
- pulumi_azuredevops/group.py +21 -7
- pulumi_azuredevops/group_entitlement.py +16 -20
- pulumi_azuredevops/group_membership.py +35 -50
- pulumi_azuredevops/iterative_permissions.py +34 -34
- pulumi_azuredevops/library_permissions.py +75 -75
- pulumi_azuredevops/outputs.py +353 -143
- pulumi_azuredevops/pipeline_authorization.py +7 -7
- pulumi_azuredevops/pool.py +4 -4
- pulumi_azuredevops/project.py +114 -63
- pulumi_azuredevops/project_features.py +87 -45
- pulumi_azuredevops/project_permissions.py +7 -7
- pulumi_azuredevops/project_pipeline_settings.py +28 -35
- pulumi_azuredevops/project_tags.py +263 -0
- pulumi_azuredevops/pulumi-plugin.json +1 -1
- pulumi_azuredevops/queue.py +7 -14
- pulumi_azuredevops/repository_policy_author_email_pattern.py +21 -14
- pulumi_azuredevops/repository_policy_max_file_size.py +7 -7
- pulumi_azuredevops/resource_authorization.py +35 -35
- pulumi_azuredevops/securityrole_assignment.py +7 -7
- pulumi_azuredevops/service_endpoint_artifactory.py +24 -18
- pulumi_azuredevops/service_endpoint_aws.py +86 -41
- pulumi_azuredevops/service_endpoint_azure_ecr.py +13 -15
- pulumi_azuredevops/service_endpoint_azure_rm.py +99 -52
- pulumi_azuredevops/service_endpoint_bit_bucket.py +4 -4
- pulumi_azuredevops/service_endpoint_docker_registry.py +2 -2
- pulumi_azuredevops/service_endpoint_generic.py +2 -6
- pulumi_azuredevops/service_endpoint_generic_git.py +4 -8
- pulumi_azuredevops/service_endpoint_git_hub.py +15 -2
- pulumi_azuredevops/service_endpoint_git_hub_enterprise.py +15 -2
- pulumi_azuredevops/service_endpoint_git_lab.py +479 -0
- pulumi_azuredevops/service_endpoint_kubernetes.py +23 -23
- pulumi_azuredevops/service_endpoint_npm.py +4 -4
- pulumi_azuredevops/service_endpoint_pipeline.py +4 -4
- pulumi_azuredevops/service_endpoint_service_fabric.py +48 -9
- pulumi_azuredevops/service_endpoint_sonar_cloud.py +11 -11
- pulumi_azuredevops/service_endpoint_sonar_qube.py +11 -11
- pulumi_azuredevops/service_endpoint_ssh.py +2 -6
- pulumi_azuredevops/service_principal_entitlement.py +386 -0
- pulumi_azuredevops/serviceendpoint_argocd.py +2 -2
- pulumi_azuredevops/serviceendpoint_azure_service_bus.py +429 -0
- pulumi_azuredevops/serviceendpoint_checkmarx_one.py +627 -0
- pulumi_azuredevops/serviceendpoint_checkmarx_sast.py +575 -0
- pulumi_azuredevops/serviceendpoint_checkmarx_sca.py +674 -0
- pulumi_azuredevops/serviceendpoint_dynamics_lifecycle_services.py +579 -0
- pulumi_azuredevops/serviceendpoint_externaltfs.py +63 -11
- pulumi_azuredevops/serviceendpoint_gcp_terraform.py +2 -2
- pulumi_azuredevops/serviceendpoint_incomingwebhook.py +2 -2
- pulumi_azuredevops/serviceendpoint_jenkins.py +2 -2
- pulumi_azuredevops/serviceendpoint_jfrog_artifactory_v2.py +18 -18
- pulumi_azuredevops/serviceendpoint_jfrog_distribution_v2.py +18 -18
- pulumi_azuredevops/serviceendpoint_jfrog_platform_v2.py +18 -18
- pulumi_azuredevops/serviceendpoint_jfrog_xray_v2.py +18 -18
- pulumi_azuredevops/serviceendpoint_maven.py +2 -2
- pulumi_azuredevops/serviceendpoint_nexus.py +2 -2
- pulumi_azuredevops/serviceendpoint_nuget.py +2 -2
- pulumi_azuredevops/serviceendpoint_octopusdeploy.py +2 -2
- pulumi_azuredevops/serviceendpoint_permissions.py +40 -40
- pulumi_azuredevops/serviceendpoint_snyk.py +429 -0
- pulumi_azuredevops/serviceendpoint_visualstudiomarketplace.py +541 -0
- pulumi_azuredevops/servicehook_permissions.py +51 -51
- pulumi_azuredevops/servicehook_storage_queue_pipelines.py +4 -4
- pulumi_azuredevops/tagging_permissions.py +49 -49
- pulumi_azuredevops/team.py +76 -56
- pulumi_azuredevops/team_administrators.py +83 -56
- pulumi_azuredevops/team_members.py +56 -49
- pulumi_azuredevops/user.py +22 -2
- pulumi_azuredevops/variable_group.py +4 -2
- pulumi_azuredevops/variable_group_permissions.py +75 -75
- pulumi_azuredevops/wiki.py +15 -2
- pulumi_azuredevops/wiki_page.py +2 -2
- pulumi_azuredevops/work_item_query_permissions.py +7 -7
- {pulumi_azuredevops-3.5.0a1735017670.dist-info → pulumi_azuredevops-3.6.0.dist-info}/METADATA +2 -2
- pulumi_azuredevops-3.6.0.dist-info/RECORD +148 -0
- {pulumi_azuredevops-3.5.0a1735017670.dist-info → pulumi_azuredevops-3.6.0.dist-info}/WHEEL +1 -1
- pulumi_azuredevops-3.5.0a1735017670.dist-info/RECORD +0 -135
- {pulumi_azuredevops-3.5.0a1735017670.dist-info → pulumi_azuredevops-3.6.0.dist-info}/top_level.txt +0 -0
@@ -19,31 +19,33 @@ __all__ = ['ServiceEndpointAwsArgs', 'ServiceEndpointAws']
|
|
19
19
|
@pulumi.input_type
|
20
20
|
class ServiceEndpointAwsArgs:
|
21
21
|
def __init__(__self__, *,
|
22
|
-
access_key_id: pulumi.Input[str],
|
23
22
|
project_id: pulumi.Input[str],
|
24
|
-
secret_access_key: pulumi.Input[str],
|
25
23
|
service_endpoint_name: pulumi.Input[str],
|
24
|
+
access_key_id: Optional[pulumi.Input[str]] = None,
|
26
25
|
authorization: Optional[pulumi.Input[Mapping[str, pulumi.Input[str]]]] = None,
|
27
26
|
description: Optional[pulumi.Input[str]] = None,
|
28
27
|
external_id: Optional[pulumi.Input[str]] = None,
|
29
28
|
role_session_name: Optional[pulumi.Input[str]] = None,
|
30
29
|
role_to_assume: Optional[pulumi.Input[str]] = None,
|
31
|
-
|
30
|
+
secret_access_key: Optional[pulumi.Input[str]] = None,
|
31
|
+
session_token: Optional[pulumi.Input[str]] = None,
|
32
|
+
use_oidc: Optional[pulumi.Input[bool]] = None):
|
32
33
|
"""
|
33
34
|
The set of arguments for constructing a ServiceEndpointAws resource.
|
34
|
-
:param pulumi.Input[str] access_key_id: The AWS access key ID for signing programmatic requests.
|
35
35
|
:param pulumi.Input[str] project_id: The ID of the project.
|
36
|
-
:param pulumi.Input[str] secret_access_key: The AWS secret access key for signing programmatic requests.
|
37
36
|
:param pulumi.Input[str] service_endpoint_name: The Service Endpoint name.
|
37
|
+
:param pulumi.Input[str] access_key_id: The AWS access key ID for signing programmatic requests.
|
38
38
|
:param pulumi.Input[str] external_id: A unique identifier that is used by third parties when assuming roles in their customers' accounts, aka cross-account role access.
|
39
39
|
:param pulumi.Input[str] role_session_name: Optional identifier for the assumed role session.
|
40
40
|
:param pulumi.Input[str] role_to_assume: The Amazon Resource Name (ARN) of the role to assume.
|
41
|
+
:param pulumi.Input[str] secret_access_key: The AWS secret access key for signing programmatic requests.
|
41
42
|
:param pulumi.Input[str] session_token: The AWS session token for signing programmatic requests.
|
43
|
+
:param pulumi.Input[bool] use_oidc: Enable this to attempt getting credentials with OIDC token from Azure Devops.
|
42
44
|
"""
|
43
|
-
pulumi.set(__self__, "access_key_id", access_key_id)
|
44
45
|
pulumi.set(__self__, "project_id", project_id)
|
45
|
-
pulumi.set(__self__, "secret_access_key", secret_access_key)
|
46
46
|
pulumi.set(__self__, "service_endpoint_name", service_endpoint_name)
|
47
|
+
if access_key_id is not None:
|
48
|
+
pulumi.set(__self__, "access_key_id", access_key_id)
|
47
49
|
if authorization is not None:
|
48
50
|
pulumi.set(__self__, "authorization", authorization)
|
49
51
|
if description is not None:
|
@@ -54,20 +56,12 @@ class ServiceEndpointAwsArgs:
|
|
54
56
|
pulumi.set(__self__, "role_session_name", role_session_name)
|
55
57
|
if role_to_assume is not None:
|
56
58
|
pulumi.set(__self__, "role_to_assume", role_to_assume)
|
59
|
+
if secret_access_key is not None:
|
60
|
+
pulumi.set(__self__, "secret_access_key", secret_access_key)
|
57
61
|
if session_token is not None:
|
58
62
|
pulumi.set(__self__, "session_token", session_token)
|
59
|
-
|
60
|
-
|
61
|
-
@pulumi.getter(name="accessKeyId")
|
62
|
-
def access_key_id(self) -> pulumi.Input[str]:
|
63
|
-
"""
|
64
|
-
The AWS access key ID for signing programmatic requests.
|
65
|
-
"""
|
66
|
-
return pulumi.get(self, "access_key_id")
|
67
|
-
|
68
|
-
@access_key_id.setter
|
69
|
-
def access_key_id(self, value: pulumi.Input[str]):
|
70
|
-
pulumi.set(self, "access_key_id", value)
|
63
|
+
if use_oidc is not None:
|
64
|
+
pulumi.set(__self__, "use_oidc", use_oidc)
|
71
65
|
|
72
66
|
@property
|
73
67
|
@pulumi.getter(name="projectId")
|
@@ -81,18 +75,6 @@ class ServiceEndpointAwsArgs:
|
|
81
75
|
def project_id(self, value: pulumi.Input[str]):
|
82
76
|
pulumi.set(self, "project_id", value)
|
83
77
|
|
84
|
-
@property
|
85
|
-
@pulumi.getter(name="secretAccessKey")
|
86
|
-
def secret_access_key(self) -> pulumi.Input[str]:
|
87
|
-
"""
|
88
|
-
The AWS secret access key for signing programmatic requests.
|
89
|
-
"""
|
90
|
-
return pulumi.get(self, "secret_access_key")
|
91
|
-
|
92
|
-
@secret_access_key.setter
|
93
|
-
def secret_access_key(self, value: pulumi.Input[str]):
|
94
|
-
pulumi.set(self, "secret_access_key", value)
|
95
|
-
|
96
78
|
@property
|
97
79
|
@pulumi.getter(name="serviceEndpointName")
|
98
80
|
def service_endpoint_name(self) -> pulumi.Input[str]:
|
@@ -105,6 +87,18 @@ class ServiceEndpointAwsArgs:
|
|
105
87
|
def service_endpoint_name(self, value: pulumi.Input[str]):
|
106
88
|
pulumi.set(self, "service_endpoint_name", value)
|
107
89
|
|
90
|
+
@property
|
91
|
+
@pulumi.getter(name="accessKeyId")
|
92
|
+
def access_key_id(self) -> Optional[pulumi.Input[str]]:
|
93
|
+
"""
|
94
|
+
The AWS access key ID for signing programmatic requests.
|
95
|
+
"""
|
96
|
+
return pulumi.get(self, "access_key_id")
|
97
|
+
|
98
|
+
@access_key_id.setter
|
99
|
+
def access_key_id(self, value: Optional[pulumi.Input[str]]):
|
100
|
+
pulumi.set(self, "access_key_id", value)
|
101
|
+
|
108
102
|
@property
|
109
103
|
@pulumi.getter
|
110
104
|
def authorization(self) -> Optional[pulumi.Input[Mapping[str, pulumi.Input[str]]]]:
|
@@ -159,6 +153,18 @@ class ServiceEndpointAwsArgs:
|
|
159
153
|
def role_to_assume(self, value: Optional[pulumi.Input[str]]):
|
160
154
|
pulumi.set(self, "role_to_assume", value)
|
161
155
|
|
156
|
+
@property
|
157
|
+
@pulumi.getter(name="secretAccessKey")
|
158
|
+
def secret_access_key(self) -> Optional[pulumi.Input[str]]:
|
159
|
+
"""
|
160
|
+
The AWS secret access key for signing programmatic requests.
|
161
|
+
"""
|
162
|
+
return pulumi.get(self, "secret_access_key")
|
163
|
+
|
164
|
+
@secret_access_key.setter
|
165
|
+
def secret_access_key(self, value: Optional[pulumi.Input[str]]):
|
166
|
+
pulumi.set(self, "secret_access_key", value)
|
167
|
+
|
162
168
|
@property
|
163
169
|
@pulumi.getter(name="sessionToken")
|
164
170
|
def session_token(self) -> Optional[pulumi.Input[str]]:
|
@@ -171,6 +177,18 @@ class ServiceEndpointAwsArgs:
|
|
171
177
|
def session_token(self, value: Optional[pulumi.Input[str]]):
|
172
178
|
pulumi.set(self, "session_token", value)
|
173
179
|
|
180
|
+
@property
|
181
|
+
@pulumi.getter(name="useOidc")
|
182
|
+
def use_oidc(self) -> Optional[pulumi.Input[bool]]:
|
183
|
+
"""
|
184
|
+
Enable this to attempt getting credentials with OIDC token from Azure Devops.
|
185
|
+
"""
|
186
|
+
return pulumi.get(self, "use_oidc")
|
187
|
+
|
188
|
+
@use_oidc.setter
|
189
|
+
def use_oidc(self, value: Optional[pulumi.Input[bool]]):
|
190
|
+
pulumi.set(self, "use_oidc", value)
|
191
|
+
|
174
192
|
|
175
193
|
@pulumi.input_type
|
176
194
|
class _ServiceEndpointAwsState:
|
@@ -184,7 +202,8 @@ class _ServiceEndpointAwsState:
|
|
184
202
|
role_to_assume: Optional[pulumi.Input[str]] = None,
|
185
203
|
secret_access_key: Optional[pulumi.Input[str]] = None,
|
186
204
|
service_endpoint_name: Optional[pulumi.Input[str]] = None,
|
187
|
-
session_token: Optional[pulumi.Input[str]] = None
|
205
|
+
session_token: Optional[pulumi.Input[str]] = None,
|
206
|
+
use_oidc: Optional[pulumi.Input[bool]] = None):
|
188
207
|
"""
|
189
208
|
Input properties used for looking up and filtering ServiceEndpointAws resources.
|
190
209
|
:param pulumi.Input[str] access_key_id: The AWS access key ID for signing programmatic requests.
|
@@ -195,6 +214,7 @@ class _ServiceEndpointAwsState:
|
|
195
214
|
:param pulumi.Input[str] secret_access_key: The AWS secret access key for signing programmatic requests.
|
196
215
|
:param pulumi.Input[str] service_endpoint_name: The Service Endpoint name.
|
197
216
|
:param pulumi.Input[str] session_token: The AWS session token for signing programmatic requests.
|
217
|
+
:param pulumi.Input[bool] use_oidc: Enable this to attempt getting credentials with OIDC token from Azure Devops.
|
198
218
|
"""
|
199
219
|
if access_key_id is not None:
|
200
220
|
pulumi.set(__self__, "access_key_id", access_key_id)
|
@@ -216,6 +236,8 @@ class _ServiceEndpointAwsState:
|
|
216
236
|
pulumi.set(__self__, "service_endpoint_name", service_endpoint_name)
|
217
237
|
if session_token is not None:
|
218
238
|
pulumi.set(__self__, "session_token", session_token)
|
239
|
+
if use_oidc is not None:
|
240
|
+
pulumi.set(__self__, "use_oidc", use_oidc)
|
219
241
|
|
220
242
|
@property
|
221
243
|
@pulumi.getter(name="accessKeyId")
|
@@ -331,6 +353,18 @@ class _ServiceEndpointAwsState:
|
|
331
353
|
def session_token(self, value: Optional[pulumi.Input[str]]):
|
332
354
|
pulumi.set(self, "session_token", value)
|
333
355
|
|
356
|
+
@property
|
357
|
+
@pulumi.getter(name="useOidc")
|
358
|
+
def use_oidc(self) -> Optional[pulumi.Input[bool]]:
|
359
|
+
"""
|
360
|
+
Enable this to attempt getting credentials with OIDC token from Azure Devops.
|
361
|
+
"""
|
362
|
+
return pulumi.get(self, "use_oidc")
|
363
|
+
|
364
|
+
@use_oidc.setter
|
365
|
+
def use_oidc(self, value: Optional[pulumi.Input[bool]]):
|
366
|
+
pulumi.set(self, "use_oidc", value)
|
367
|
+
|
334
368
|
|
335
369
|
class ServiceEndpointAws(pulumi.CustomResource):
|
336
370
|
@overload
|
@@ -347,6 +381,7 @@ class ServiceEndpointAws(pulumi.CustomResource):
|
|
347
381
|
secret_access_key: Optional[pulumi.Input[str]] = None,
|
348
382
|
service_endpoint_name: Optional[pulumi.Input[str]] = None,
|
349
383
|
session_token: Optional[pulumi.Input[str]] = None,
|
384
|
+
use_oidc: Optional[pulumi.Input[bool]] = None,
|
350
385
|
__props__=None):
|
351
386
|
"""
|
352
387
|
Manages a AWS service endpoint within Azure DevOps. Using this service endpoint requires you to first install [AWS Toolkit for Azure DevOps](https://marketplace.visualstudio.com/items?itemName=AmazonWebServices.aws-vsts-tools).
|
@@ -378,7 +413,7 @@ class ServiceEndpointAws(pulumi.CustomResource):
|
|
378
413
|
|
379
414
|
## Import
|
380
415
|
|
381
|
-
Azure DevOps Service Endpoint
|
416
|
+
Azure DevOps AWS Service Endpoint can be imported using **projectID/serviceEndpointID** or **projectName/serviceEndpointID**
|
382
417
|
|
383
418
|
```sh
|
384
419
|
$ pulumi import azuredevops:index/serviceEndpointAws:ServiceEndpointAws azuredevops_serviceendpoint_aws.example 00000000-0000-0000-0000-000000000000/00000000-0000-0000-0000-000000000000
|
@@ -394,6 +429,7 @@ class ServiceEndpointAws(pulumi.CustomResource):
|
|
394
429
|
:param pulumi.Input[str] secret_access_key: The AWS secret access key for signing programmatic requests.
|
395
430
|
:param pulumi.Input[str] service_endpoint_name: The Service Endpoint name.
|
396
431
|
:param pulumi.Input[str] session_token: The AWS session token for signing programmatic requests.
|
432
|
+
:param pulumi.Input[bool] use_oidc: Enable this to attempt getting credentials with OIDC token from Azure Devops.
|
397
433
|
"""
|
398
434
|
...
|
399
435
|
@overload
|
@@ -431,7 +467,7 @@ class ServiceEndpointAws(pulumi.CustomResource):
|
|
431
467
|
|
432
468
|
## Import
|
433
469
|
|
434
|
-
Azure DevOps Service Endpoint
|
470
|
+
Azure DevOps AWS Service Endpoint can be imported using **projectID/serviceEndpointID** or **projectName/serviceEndpointID**
|
435
471
|
|
436
472
|
```sh
|
437
473
|
$ pulumi import azuredevops:index/serviceEndpointAws:ServiceEndpointAws azuredevops_serviceendpoint_aws.example 00000000-0000-0000-0000-000000000000/00000000-0000-0000-0000-000000000000
|
@@ -462,6 +498,7 @@ class ServiceEndpointAws(pulumi.CustomResource):
|
|
462
498
|
secret_access_key: Optional[pulumi.Input[str]] = None,
|
463
499
|
service_endpoint_name: Optional[pulumi.Input[str]] = None,
|
464
500
|
session_token: Optional[pulumi.Input[str]] = None,
|
501
|
+
use_oidc: Optional[pulumi.Input[bool]] = None,
|
465
502
|
__props__=None):
|
466
503
|
opts = pulumi.ResourceOptions.merge(_utilities.get_resource_opts_defaults(), opts)
|
467
504
|
if not isinstance(opts, pulumi.ResourceOptions):
|
@@ -471,8 +508,6 @@ class ServiceEndpointAws(pulumi.CustomResource):
|
|
471
508
|
raise TypeError('__props__ is only valid when passed in combination with a valid opts.id to get an existing resource')
|
472
509
|
__props__ = ServiceEndpointAwsArgs.__new__(ServiceEndpointAwsArgs)
|
473
510
|
|
474
|
-
if access_key_id is None and not opts.urn:
|
475
|
-
raise TypeError("Missing required property 'access_key_id'")
|
476
511
|
__props__.__dict__["access_key_id"] = access_key_id
|
477
512
|
__props__.__dict__["authorization"] = authorization
|
478
513
|
__props__.__dict__["description"] = description
|
@@ -482,13 +517,12 @@ class ServiceEndpointAws(pulumi.CustomResource):
|
|
482
517
|
__props__.__dict__["project_id"] = project_id
|
483
518
|
__props__.__dict__["role_session_name"] = role_session_name
|
484
519
|
__props__.__dict__["role_to_assume"] = role_to_assume
|
485
|
-
if secret_access_key is None and not opts.urn:
|
486
|
-
raise TypeError("Missing required property 'secret_access_key'")
|
487
520
|
__props__.__dict__["secret_access_key"] = None if secret_access_key is None else pulumi.Output.secret(secret_access_key)
|
488
521
|
if service_endpoint_name is None and not opts.urn:
|
489
522
|
raise TypeError("Missing required property 'service_endpoint_name'")
|
490
523
|
__props__.__dict__["service_endpoint_name"] = service_endpoint_name
|
491
524
|
__props__.__dict__["session_token"] = None if session_token is None else pulumi.Output.secret(session_token)
|
525
|
+
__props__.__dict__["use_oidc"] = use_oidc
|
492
526
|
secret_opts = pulumi.ResourceOptions(additional_secret_outputs=["secretAccessKey", "sessionToken"])
|
493
527
|
opts = pulumi.ResourceOptions.merge(opts, secret_opts)
|
494
528
|
super(ServiceEndpointAws, __self__).__init__(
|
@@ -510,7 +544,8 @@ class ServiceEndpointAws(pulumi.CustomResource):
|
|
510
544
|
role_to_assume: Optional[pulumi.Input[str]] = None,
|
511
545
|
secret_access_key: Optional[pulumi.Input[str]] = None,
|
512
546
|
service_endpoint_name: Optional[pulumi.Input[str]] = None,
|
513
|
-
session_token: Optional[pulumi.Input[str]] = None
|
547
|
+
session_token: Optional[pulumi.Input[str]] = None,
|
548
|
+
use_oidc: Optional[pulumi.Input[bool]] = None) -> 'ServiceEndpointAws':
|
514
549
|
"""
|
515
550
|
Get an existing ServiceEndpointAws resource's state with the given name, id, and optional extra
|
516
551
|
properties used to qualify the lookup.
|
@@ -526,6 +561,7 @@ class ServiceEndpointAws(pulumi.CustomResource):
|
|
526
561
|
:param pulumi.Input[str] secret_access_key: The AWS secret access key for signing programmatic requests.
|
527
562
|
:param pulumi.Input[str] service_endpoint_name: The Service Endpoint name.
|
528
563
|
:param pulumi.Input[str] session_token: The AWS session token for signing programmatic requests.
|
564
|
+
:param pulumi.Input[bool] use_oidc: Enable this to attempt getting credentials with OIDC token from Azure Devops.
|
529
565
|
"""
|
530
566
|
opts = pulumi.ResourceOptions.merge(opts, pulumi.ResourceOptions(id=id))
|
531
567
|
|
@@ -541,11 +577,12 @@ class ServiceEndpointAws(pulumi.CustomResource):
|
|
541
577
|
__props__.__dict__["secret_access_key"] = secret_access_key
|
542
578
|
__props__.__dict__["service_endpoint_name"] = service_endpoint_name
|
543
579
|
__props__.__dict__["session_token"] = session_token
|
580
|
+
__props__.__dict__["use_oidc"] = use_oidc
|
544
581
|
return ServiceEndpointAws(resource_name, opts=opts, __props__=__props__)
|
545
582
|
|
546
583
|
@property
|
547
584
|
@pulumi.getter(name="accessKeyId")
|
548
|
-
def access_key_id(self) -> pulumi.Output[str]:
|
585
|
+
def access_key_id(self) -> pulumi.Output[Optional[str]]:
|
549
586
|
"""
|
550
587
|
The AWS access key ID for signing programmatic requests.
|
551
588
|
"""
|
@@ -595,7 +632,7 @@ class ServiceEndpointAws(pulumi.CustomResource):
|
|
595
632
|
|
596
633
|
@property
|
597
634
|
@pulumi.getter(name="secretAccessKey")
|
598
|
-
def secret_access_key(self) -> pulumi.Output[str]:
|
635
|
+
def secret_access_key(self) -> pulumi.Output[Optional[str]]:
|
599
636
|
"""
|
600
637
|
The AWS secret access key for signing programmatic requests.
|
601
638
|
"""
|
@@ -617,3 +654,11 @@ class ServiceEndpointAws(pulumi.CustomResource):
|
|
617
654
|
"""
|
618
655
|
return pulumi.get(self, "session_token")
|
619
656
|
|
657
|
+
@property
|
658
|
+
@pulumi.getter(name="useOidc")
|
659
|
+
def use_oidc(self) -> pulumi.Output[Optional[bool]]:
|
660
|
+
"""
|
661
|
+
Enable this to attempt getting credentials with OIDC token from Azure Devops.
|
662
|
+
"""
|
663
|
+
return pulumi.get(self, "use_oidc")
|
664
|
+
|
@@ -40,7 +40,7 @@ class ServiceEndpointAzureEcrArgs:
|
|
40
40
|
:param pulumi.Input[str] azurecr_subscription_name: The subscription name of the Azure targets.
|
41
41
|
:param pulumi.Input[str] project_id: The ID of the project.
|
42
42
|
:param pulumi.Input[str] service_endpoint_name: The name you will use to refer to this service connection in task inputs.
|
43
|
-
:param pulumi.Input['ServiceEndpointAzureEcrCredentialsArgs'] credentials: A `credentials` block.
|
43
|
+
:param pulumi.Input['ServiceEndpointAzureEcrCredentialsArgs'] credentials: A `credentials` block as defined below.
|
44
44
|
:param pulumi.Input[str] resource_group: The resource group to which the container registry belongs.
|
45
45
|
:param pulumi.Input[str] service_endpoint_authentication_scheme: Specifies the type of azurerm endpoint, either `WorkloadIdentityFederation`, `ManagedServiceIdentity` or `ServicePrincipal`. Defaults to `ServicePrincipal` for backwards compatibility. `ManagedServiceIdentity` has not yet been implemented for this resource.
|
46
46
|
"""
|
@@ -146,7 +146,7 @@ class ServiceEndpointAzureEcrArgs:
|
|
146
146
|
@pulumi.getter
|
147
147
|
def credentials(self) -> Optional[pulumi.Input['ServiceEndpointAzureEcrCredentialsArgs']]:
|
148
148
|
"""
|
149
|
-
A `credentials` block.
|
149
|
+
A `credentials` block as defined below.
|
150
150
|
"""
|
151
151
|
return pulumi.get(self, "credentials")
|
152
152
|
|
@@ -215,7 +215,7 @@ class _ServiceEndpointAzureEcrState:
|
|
215
215
|
:param pulumi.Input[str] azurecr_spn_tenantid: The tenant id of the service principal.
|
216
216
|
:param pulumi.Input[str] azurecr_subscription_id: The subscription id of the Azure targets.
|
217
217
|
:param pulumi.Input[str] azurecr_subscription_name: The subscription name of the Azure targets.
|
218
|
-
:param pulumi.Input['ServiceEndpointAzureEcrCredentialsArgs'] credentials: A `credentials` block.
|
218
|
+
:param pulumi.Input['ServiceEndpointAzureEcrCredentialsArgs'] credentials: A `credentials` block as defined below.
|
219
219
|
:param pulumi.Input[str] project_id: The ID of the project.
|
220
220
|
:param pulumi.Input[str] resource_group: The resource group to which the container registry belongs.
|
221
221
|
:param pulumi.Input[str] service_endpoint_authentication_scheme: Specifies the type of azurerm endpoint, either `WorkloadIdentityFederation`, `ManagedServiceIdentity` or `ServicePrincipal`. Defaults to `ServicePrincipal` for backwards compatibility. `ManagedServiceIdentity` has not yet been implemented for this resource.
|
@@ -349,7 +349,7 @@ class _ServiceEndpointAzureEcrState:
|
|
349
349
|
@pulumi.getter
|
350
350
|
def credentials(self) -> Optional[pulumi.Input['ServiceEndpointAzureEcrCredentialsArgs']]:
|
351
351
|
"""
|
352
|
-
A `credentials` block.
|
352
|
+
A `credentials` block as defined below.
|
353
353
|
"""
|
354
354
|
return pulumi.get(self, "credentials")
|
355
355
|
|
@@ -482,8 +482,7 @@ class ServiceEndpointAzureEcr(pulumi.CustomResource):
|
|
482
482
|
|
483
483
|
## Example Usage
|
484
484
|
|
485
|
-
### Service Principal
|
486
|
-
|
485
|
+
### Authorize with Service Principal
|
487
486
|
```python
|
488
487
|
import pulumi
|
489
488
|
import pulumi_azuredevops as azuredevops
|
@@ -505,7 +504,7 @@ class ServiceEndpointAzureEcr(pulumi.CustomResource):
|
|
505
504
|
azurecr_subscription_name="subscription name")
|
506
505
|
```
|
507
506
|
|
508
|
-
### WorkloadIdentityFederation
|
507
|
+
### Authorize with WorkloadIdentityFederation
|
509
508
|
|
510
509
|
```python
|
511
510
|
import pulumi
|
@@ -554,7 +553,7 @@ class ServiceEndpointAzureEcr(pulumi.CustomResource):
|
|
554
553
|
|
555
554
|
## Import
|
556
555
|
|
557
|
-
Azure DevOps
|
556
|
+
Azure DevOps Azure Container Registry Service Endpoint can be imported using **projectID/serviceEndpointID** or **projectName/serviceEndpointID**
|
558
557
|
|
559
558
|
```sh
|
560
559
|
$ pulumi import azuredevops:index/serviceEndpointAzureEcr:ServiceEndpointAzureEcr example 00000000-0000-0000-0000-000000000000/00000000-0000-0000-0000-000000000000
|
@@ -566,7 +565,7 @@ class ServiceEndpointAzureEcr(pulumi.CustomResource):
|
|
566
565
|
:param pulumi.Input[str] azurecr_spn_tenantid: The tenant id of the service principal.
|
567
566
|
:param pulumi.Input[str] azurecr_subscription_id: The subscription id of the Azure targets.
|
568
567
|
:param pulumi.Input[str] azurecr_subscription_name: The subscription name of the Azure targets.
|
569
|
-
:param pulumi.Input[Union['ServiceEndpointAzureEcrCredentialsArgs', 'ServiceEndpointAzureEcrCredentialsArgsDict']] credentials: A `credentials` block.
|
568
|
+
:param pulumi.Input[Union['ServiceEndpointAzureEcrCredentialsArgs', 'ServiceEndpointAzureEcrCredentialsArgsDict']] credentials: A `credentials` block as defined below.
|
570
569
|
:param pulumi.Input[str] project_id: The ID of the project.
|
571
570
|
:param pulumi.Input[str] resource_group: The resource group to which the container registry belongs.
|
572
571
|
:param pulumi.Input[str] service_endpoint_authentication_scheme: Specifies the type of azurerm endpoint, either `WorkloadIdentityFederation`, `ManagedServiceIdentity` or `ServicePrincipal`. Defaults to `ServicePrincipal` for backwards compatibility. `ManagedServiceIdentity` has not yet been implemented for this resource.
|
@@ -583,8 +582,7 @@ class ServiceEndpointAzureEcr(pulumi.CustomResource):
|
|
583
582
|
|
584
583
|
## Example Usage
|
585
584
|
|
586
|
-
### Service Principal
|
587
|
-
|
585
|
+
### Authorize with Service Principal
|
588
586
|
```python
|
589
587
|
import pulumi
|
590
588
|
import pulumi_azuredevops as azuredevops
|
@@ -606,7 +604,7 @@ class ServiceEndpointAzureEcr(pulumi.CustomResource):
|
|
606
604
|
azurecr_subscription_name="subscription name")
|
607
605
|
```
|
608
606
|
|
609
|
-
### WorkloadIdentityFederation
|
607
|
+
### Authorize with WorkloadIdentityFederation
|
610
608
|
|
611
609
|
```python
|
612
610
|
import pulumi
|
@@ -655,7 +653,7 @@ class ServiceEndpointAzureEcr(pulumi.CustomResource):
|
|
655
653
|
|
656
654
|
## Import
|
657
655
|
|
658
|
-
Azure DevOps
|
656
|
+
Azure DevOps Azure Container Registry Service Endpoint can be imported using **projectID/serviceEndpointID** or **projectName/serviceEndpointID**
|
659
657
|
|
660
658
|
```sh
|
661
659
|
$ pulumi import azuredevops:index/serviceEndpointAzureEcr:ServiceEndpointAzureEcr example 00000000-0000-0000-0000-000000000000/00000000-0000-0000-0000-000000000000
|
@@ -765,7 +763,7 @@ class ServiceEndpointAzureEcr(pulumi.CustomResource):
|
|
765
763
|
:param pulumi.Input[str] azurecr_spn_tenantid: The tenant id of the service principal.
|
766
764
|
:param pulumi.Input[str] azurecr_subscription_id: The subscription id of the Azure targets.
|
767
765
|
:param pulumi.Input[str] azurecr_subscription_name: The subscription name of the Azure targets.
|
768
|
-
:param pulumi.Input[Union['ServiceEndpointAzureEcrCredentialsArgs', 'ServiceEndpointAzureEcrCredentialsArgsDict']] credentials: A `credentials` block.
|
766
|
+
:param pulumi.Input[Union['ServiceEndpointAzureEcrCredentialsArgs', 'ServiceEndpointAzureEcrCredentialsArgsDict']] credentials: A `credentials` block as defined below.
|
769
767
|
:param pulumi.Input[str] project_id: The ID of the project.
|
770
768
|
:param pulumi.Input[str] resource_group: The resource group to which the container registry belongs.
|
771
769
|
:param pulumi.Input[str] service_endpoint_authentication_scheme: Specifies the type of azurerm endpoint, either `WorkloadIdentityFederation`, `ManagedServiceIdentity` or `ServicePrincipal`. Defaults to `ServicePrincipal` for backwards compatibility. `ManagedServiceIdentity` has not yet been implemented for this resource.
|
@@ -854,7 +852,7 @@ class ServiceEndpointAzureEcr(pulumi.CustomResource):
|
|
854
852
|
@pulumi.getter
|
855
853
|
def credentials(self) -> pulumi.Output[Optional['outputs.ServiceEndpointAzureEcrCredentials']]:
|
856
854
|
"""
|
857
|
-
A `credentials` block.
|
855
|
+
A `credentials` block as defined below.
|
858
856
|
"""
|
859
857
|
return pulumi.get(self, "credentials")
|
860
858
|
|