pulumi-digitalocean 4.40.0a1739511652__py3-none-any.whl → 4.56.0a1766428645__py3-none-any.whl

pulumi_digitalocean/database_logsink_rsyslog.py

@@ -0,0 +1,842 @@
+# coding=utf-8
+# *** WARNING: this file was generated by pulumi-language-python. ***
+# *** Do not edit by hand unless you're certain you know what you are doing! ***
+
+import builtins as _builtins
+import warnings
+import sys
+import pulumi
+import pulumi.runtime
+from typing import Any, Mapping, Optional, Sequence, Union, overload
+if sys.version_info >= (3, 11):
+    from typing import NotRequired, TypedDict, TypeAlias
+else:
+    from typing_extensions import NotRequired, TypedDict, TypeAlias
+from . import _utilities
+
+__all__ = ['DatabaseLogsinkRsyslogArgs', 'DatabaseLogsinkRsyslog']
+
+@pulumi.input_type
+class DatabaseLogsinkRsyslogArgs:
+    def __init__(__self__, *,
+                 cluster_id: pulumi.Input[_builtins.str],
+                 port: pulumi.Input[_builtins.int],
+                 server: pulumi.Input[_builtins.str],
+                 ca_cert: Optional[pulumi.Input[_builtins.str]] = None,
+                 client_cert: Optional[pulumi.Input[_builtins.str]] = None,
+                 client_key: Optional[pulumi.Input[_builtins.str]] = None,
+                 format: Optional[pulumi.Input[_builtins.str]] = None,
+                 logline: Optional[pulumi.Input[_builtins.str]] = None,
+                 name: Optional[pulumi.Input[_builtins.str]] = None,
+                 structured_data: Optional[pulumi.Input[_builtins.str]] = None,
+                 tls: Optional[pulumi.Input[_builtins.bool]] = None):
+        """
+        The set of arguments for constructing a DatabaseLogsinkRsyslog resource.
+        :param pulumi.Input[_builtins.str] cluster_id: UUID of the source database cluster that will forward logs.
+        :param pulumi.Input[_builtins.int] port: Port number for the rsyslog server. Must be between 1 and 65535.
+        :param pulumi.Input[_builtins.str] server: Hostname or IP address of the rsyslog server.
+        :param pulumi.Input[_builtins.str] ca_cert: CA certificate for TLS verification in PEM format. Can be specified using `file()` function.
+        :param pulumi.Input[_builtins.str] client_cert: Client certificate for mutual TLS authentication in PEM format. **Note**: Requires `tls` to be `true`.
+        :param pulumi.Input[_builtins.str] client_key: Client private key for mutual TLS authentication in PEM format. **Note**: Requires `tls` to be `true`. This field is marked as sensitive.
+        :param pulumi.Input[_builtins.str] format: Log format to use. Must be one of `rfc5424` (default), `rfc3164`, or `custom`.
+        :param pulumi.Input[_builtins.str] logline: Custom logline template. **Required** when `format` is set to `custom`. Supports rsyslog-style templating with the following tokens: `%HOSTNAME%`, `%app-name%`, `%msg%`, `%msgid%`, `%pri%`, `%procid%`, `%structured-data%`, `%timestamp%`, and `%timestamp:::date-rfc3339%`.
+        :param pulumi.Input[_builtins.str] name: Display name for the logsink. **Note**: This is immutable; changing it will force recreation of the resource.
+        :param pulumi.Input[_builtins.str] structured_data: Content of the structured data block for RFC5424 messages.
+        :param pulumi.Input[_builtins.bool] tls: Enable TLS encryption for the rsyslog connection. Defaults to `false`. **Note**: It is highly recommended to enable TLS as log messages may contain sensitive information.
+        """
+        pulumi.set(__self__, "cluster_id", cluster_id)
+        pulumi.set(__self__, "port", port)
+        pulumi.set(__self__, "server", server)
+        if ca_cert is not None:
+            pulumi.set(__self__, "ca_cert", ca_cert)
+        if client_cert is not None:
+            pulumi.set(__self__, "client_cert", client_cert)
+        if client_key is not None:
+            pulumi.set(__self__, "client_key", client_key)
+        if format is not None:
+            pulumi.set(__self__, "format", format)
+        if logline is not None:
+            pulumi.set(__self__, "logline", logline)
+        if name is not None:
+            pulumi.set(__self__, "name", name)
+        if structured_data is not None:
+            pulumi.set(__self__, "structured_data", structured_data)
+        if tls is not None:
+            pulumi.set(__self__, "tls", tls)
+
+    @_builtins.property
+    @pulumi.getter(name="clusterId")
+    def cluster_id(self) -> pulumi.Input[_builtins.str]:
+        """
+        UUID of the source database cluster that will forward logs.
+        """
+        return pulumi.get(self, "cluster_id")
+
+    @cluster_id.setter
+    def cluster_id(self, value: pulumi.Input[_builtins.str]):
+        pulumi.set(self, "cluster_id", value)
+
+    @_builtins.property
+    @pulumi.getter
+    def port(self) -> pulumi.Input[_builtins.int]:
+        """
+        Port number for the rsyslog server. Must be between 1 and 65535.
+        """
+        return pulumi.get(self, "port")
+
+    @port.setter
+    def port(self, value: pulumi.Input[_builtins.int]):
+        pulumi.set(self, "port", value)
+
+    @_builtins.property
+    @pulumi.getter
+    def server(self) -> pulumi.Input[_builtins.str]:
+        """
+        Hostname or IP address of the rsyslog server.
+        """
+        return pulumi.get(self, "server")
+
+    @server.setter
+    def server(self, value: pulumi.Input[_builtins.str]):
+        pulumi.set(self, "server", value)
+
+    @_builtins.property
+    @pulumi.getter(name="caCert")
+    def ca_cert(self) -> Optional[pulumi.Input[_builtins.str]]:
+        """
+        CA certificate for TLS verification in PEM format. Can be specified using `file()` function.
+        """
+        return pulumi.get(self, "ca_cert")
+
+    @ca_cert.setter
+    def ca_cert(self, value: Optional[pulumi.Input[_builtins.str]]):
+        pulumi.set(self, "ca_cert", value)
+
+    @_builtins.property
+    @pulumi.getter(name="clientCert")
+    def client_cert(self) -> Optional[pulumi.Input[_builtins.str]]:
+        """
+        Client certificate for mutual TLS authentication in PEM format. **Note**: Requires `tls` to be `true`.
+        """
+        return pulumi.get(self, "client_cert")
+
+    @client_cert.setter
+    def client_cert(self, value: Optional[pulumi.Input[_builtins.str]]):
+        pulumi.set(self, "client_cert", value)
+
+    @_builtins.property
+    @pulumi.getter(name="clientKey")
+    def client_key(self) -> Optional[pulumi.Input[_builtins.str]]:
+        """
+        Client private key for mutual TLS authentication in PEM format. **Note**: Requires `tls` to be `true`. This field is marked as sensitive.
+        """
+        return pulumi.get(self, "client_key")
+
+    @client_key.setter
+    def client_key(self, value: Optional[pulumi.Input[_builtins.str]]):
+        pulumi.set(self, "client_key", value)
+
+    @_builtins.property
+    @pulumi.getter
+    def format(self) -> Optional[pulumi.Input[_builtins.str]]:
+        """
+        Log format to use. Must be one of `rfc5424` (default), `rfc3164`, or `custom`.
+        """
+        return pulumi.get(self, "format")
+
+    @format.setter
+    def format(self, value: Optional[pulumi.Input[_builtins.str]]):
+        pulumi.set(self, "format", value)
+
+    @_builtins.property
+    @pulumi.getter
+    def logline(self) -> Optional[pulumi.Input[_builtins.str]]:
+        """
+        Custom logline template. **Required** when `format` is set to `custom`. Supports rsyslog-style templating with the following tokens: `%HOSTNAME%`, `%app-name%`, `%msg%`, `%msgid%`, `%pri%`, `%procid%`, `%structured-data%`, `%timestamp%`, and `%timestamp:::date-rfc3339%`.
+        """
+        return pulumi.get(self, "logline")
+
+    @logline.setter
+    def logline(self, value: Optional[pulumi.Input[_builtins.str]]):
+        pulumi.set(self, "logline", value)
+
+    @_builtins.property
+    @pulumi.getter
+    def name(self) -> Optional[pulumi.Input[_builtins.str]]:
+        """
+        Display name for the logsink. **Note**: This is immutable; changing it will force recreation of the resource.
+        """
+        return pulumi.get(self, "name")
+
+    @name.setter
+    def name(self, value: Optional[pulumi.Input[_builtins.str]]):
+        pulumi.set(self, "name", value)
+
+    @_builtins.property
+    @pulumi.getter(name="structuredData")
+    def structured_data(self) -> Optional[pulumi.Input[_builtins.str]]:
+        """
+        Content of the structured data block for RFC5424 messages.
+        """
+        return pulumi.get(self, "structured_data")
+
+    @structured_data.setter
+    def structured_data(self, value: Optional[pulumi.Input[_builtins.str]]):
+        pulumi.set(self, "structured_data", value)
+
+    @_builtins.property
+    @pulumi.getter
+    def tls(self) -> Optional[pulumi.Input[_builtins.bool]]:
+        """
+        Enable TLS encryption for the rsyslog connection. Defaults to `false`. **Note**: It is highly recommended to enable TLS as log messages may contain sensitive information.
+        """
+        return pulumi.get(self, "tls")
+
+    @tls.setter
+    def tls(self, value: Optional[pulumi.Input[_builtins.bool]]):
+        pulumi.set(self, "tls", value)
+
+
+@pulumi.input_type
+class _DatabaseLogsinkRsyslogState:
+    def __init__(__self__, *,
+                 ca_cert: Optional[pulumi.Input[_builtins.str]] = None,
+                 client_cert: Optional[pulumi.Input[_builtins.str]] = None,
+                 client_key: Optional[pulumi.Input[_builtins.str]] = None,
+                 cluster_id: Optional[pulumi.Input[_builtins.str]] = None,
+                 format: Optional[pulumi.Input[_builtins.str]] = None,
+                 logline: Optional[pulumi.Input[_builtins.str]] = None,
+                 logsink_id: Optional[pulumi.Input[_builtins.str]] = None,
+                 name: Optional[pulumi.Input[_builtins.str]] = None,
+                 port: Optional[pulumi.Input[_builtins.int]] = None,
+                 server: Optional[pulumi.Input[_builtins.str]] = None,
+                 structured_data: Optional[pulumi.Input[_builtins.str]] = None,
+                 tls: Optional[pulumi.Input[_builtins.bool]] = None):
+        """
+        Input properties used for looking up and filtering DatabaseLogsinkRsyslog resources.
+        :param pulumi.Input[_builtins.str] ca_cert: CA certificate for TLS verification in PEM format. Can be specified using `file()` function.
+        :param pulumi.Input[_builtins.str] client_cert: Client certificate for mutual TLS authentication in PEM format. **Note**: Requires `tls` to be `true`.
+        :param pulumi.Input[_builtins.str] client_key: Client private key for mutual TLS authentication in PEM format. **Note**: Requires `tls` to be `true`. This field is marked as sensitive.
+        :param pulumi.Input[_builtins.str] cluster_id: UUID of the source database cluster that will forward logs.
+        :param pulumi.Input[_builtins.str] format: Log format to use. Must be one of `rfc5424` (default), `rfc3164`, or `custom`.
+        :param pulumi.Input[_builtins.str] logline: Custom logline template. **Required** when `format` is set to `custom`. Supports rsyslog-style templating with the following tokens: `%HOSTNAME%`, `%app-name%`, `%msg%`, `%msgid%`, `%pri%`, `%procid%`, `%structured-data%`, `%timestamp%`, and `%timestamp:::date-rfc3339%`.
+        :param pulumi.Input[_builtins.str] logsink_id: The unique identifier for the logsink as returned by the DigitalOcean API.
+        :param pulumi.Input[_builtins.str] name: Display name for the logsink. **Note**: This is immutable; changing it will force recreation of the resource.
+        :param pulumi.Input[_builtins.int] port: Port number for the rsyslog server. Must be between 1 and 65535.
+        :param pulumi.Input[_builtins.str] server: Hostname or IP address of the rsyslog server.
+        :param pulumi.Input[_builtins.str] structured_data: Content of the structured data block for RFC5424 messages.
+        :param pulumi.Input[_builtins.bool] tls: Enable TLS encryption for the rsyslog connection. Defaults to `false`. **Note**: It is highly recommended to enable TLS as log messages may contain sensitive information.
+        """
+        if ca_cert is not None:
+            pulumi.set(__self__, "ca_cert", ca_cert)
+        if client_cert is not None:
+            pulumi.set(__self__, "client_cert", client_cert)
+        if client_key is not None:
+            pulumi.set(__self__, "client_key", client_key)
+        if cluster_id is not None:
+            pulumi.set(__self__, "cluster_id", cluster_id)
+        if format is not None:
+            pulumi.set(__self__, "format", format)
+        if logline is not None:
+            pulumi.set(__self__, "logline", logline)
+        if logsink_id is not None:
+            pulumi.set(__self__, "logsink_id", logsink_id)
+        if name is not None:
+            pulumi.set(__self__, "name", name)
+        if port is not None:
+            pulumi.set(__self__, "port", port)
+        if server is not None:
+            pulumi.set(__self__, "server", server)
+        if structured_data is not None:
+            pulumi.set(__self__, "structured_data", structured_data)
+        if tls is not None:
+            pulumi.set(__self__, "tls", tls)
+
+    @_builtins.property
+    @pulumi.getter(name="caCert")
+    def ca_cert(self) -> Optional[pulumi.Input[_builtins.str]]:
+        """
+        CA certificate for TLS verification in PEM format. Can be specified using `file()` function.
+        """
+        return pulumi.get(self, "ca_cert")
+
+    @ca_cert.setter
+    def ca_cert(self, value: Optional[pulumi.Input[_builtins.str]]):
+        pulumi.set(self, "ca_cert", value)
+
+    @_builtins.property
+    @pulumi.getter(name="clientCert")
+    def client_cert(self) -> Optional[pulumi.Input[_builtins.str]]:
+        """
+        Client certificate for mutual TLS authentication in PEM format. **Note**: Requires `tls` to be `true`.
+        """
+        return pulumi.get(self, "client_cert")
+
+    @client_cert.setter
+    def client_cert(self, value: Optional[pulumi.Input[_builtins.str]]):
+        pulumi.set(self, "client_cert", value)
+
+    @_builtins.property
+    @pulumi.getter(name="clientKey")
+    def client_key(self) -> Optional[pulumi.Input[_builtins.str]]:
+        """
+        Client private key for mutual TLS authentication in PEM format. **Note**: Requires `tls` to be `true`. This field is marked as sensitive.
+        """
+        return pulumi.get(self, "client_key")
+
+    @client_key.setter
+    def client_key(self, value: Optional[pulumi.Input[_builtins.str]]):
+        pulumi.set(self, "client_key", value)
+
+    @_builtins.property
+    @pulumi.getter(name="clusterId")
+    def cluster_id(self) -> Optional[pulumi.Input[_builtins.str]]:
+        """
+        UUID of the source database cluster that will forward logs.
+        """
+        return pulumi.get(self, "cluster_id")
+
+    @cluster_id.setter
+    def cluster_id(self, value: Optional[pulumi.Input[_builtins.str]]):
+        pulumi.set(self, "cluster_id", value)
+
+    @_builtins.property
+    @pulumi.getter
+    def format(self) -> Optional[pulumi.Input[_builtins.str]]:
+        """
+        Log format to use. Must be one of `rfc5424` (default), `rfc3164`, or `custom`.
+        """
+        return pulumi.get(self, "format")
+
+    @format.setter
+    def format(self, value: Optional[pulumi.Input[_builtins.str]]):
+        pulumi.set(self, "format", value)
+
+    @_builtins.property
+    @pulumi.getter
+    def logline(self) -> Optional[pulumi.Input[_builtins.str]]:
+        """
+        Custom logline template. **Required** when `format` is set to `custom`. Supports rsyslog-style templating with the following tokens: `%HOSTNAME%`, `%app-name%`, `%msg%`, `%msgid%`, `%pri%`, `%procid%`, `%structured-data%`, `%timestamp%`, and `%timestamp:::date-rfc3339%`.
+        """
+        return pulumi.get(self, "logline")
+
+    @logline.setter
+    def logline(self, value: Optional[pulumi.Input[_builtins.str]]):
+        pulumi.set(self, "logline", value)
+
+    @_builtins.property
+    @pulumi.getter(name="logsinkId")
+    def logsink_id(self) -> Optional[pulumi.Input[_builtins.str]]:
+        """
+        The unique identifier for the logsink as returned by the DigitalOcean API.
+        """
+        return pulumi.get(self, "logsink_id")
+
+    @logsink_id.setter
+    def logsink_id(self, value: Optional[pulumi.Input[_builtins.str]]):
+        pulumi.set(self, "logsink_id", value)
+
+    @_builtins.property
+    @pulumi.getter
+    def name(self) -> Optional[pulumi.Input[_builtins.str]]:
+        """
+        Display name for the logsink. **Note**: This is immutable; changing it will force recreation of the resource.
+        """
+        return pulumi.get(self, "name")
+
+    @name.setter
+    def name(self, value: Optional[pulumi.Input[_builtins.str]]):
+        pulumi.set(self, "name", value)
+
+    @_builtins.property
+    @pulumi.getter
+    def port(self) -> Optional[pulumi.Input[_builtins.int]]:
+        """
+        Port number for the rsyslog server. Must be between 1 and 65535.
+        """
+        return pulumi.get(self, "port")
+
+    @port.setter
+    def port(self, value: Optional[pulumi.Input[_builtins.int]]):
+        pulumi.set(self, "port", value)
+
+    @_builtins.property
+    @pulumi.getter
+    def server(self) -> Optional[pulumi.Input[_builtins.str]]:
+        """
+        Hostname or IP address of the rsyslog server.
+        """
+        return pulumi.get(self, "server")
+
+    @server.setter
+    def server(self, value: Optional[pulumi.Input[_builtins.str]]):
+        pulumi.set(self, "server", value)
+
+    @_builtins.property
+    @pulumi.getter(name="structuredData")
+    def structured_data(self) -> Optional[pulumi.Input[_builtins.str]]:
+        """
+        Content of the structured data block for RFC5424 messages.
+        """
+        return pulumi.get(self, "structured_data")
+
+    @structured_data.setter
+    def structured_data(self, value: Optional[pulumi.Input[_builtins.str]]):
+        pulumi.set(self, "structured_data", value)
+
+    @_builtins.property
+    @pulumi.getter
+    def tls(self) -> Optional[pulumi.Input[_builtins.bool]]:
+        """
+        Enable TLS encryption for the rsyslog connection. Defaults to `false`. **Note**: It is highly recommended to enable TLS as log messages may contain sensitive information.
+        """
+        return pulumi.get(self, "tls")
+
+    @tls.setter
+    def tls(self, value: Optional[pulumi.Input[_builtins.bool]]):
+        pulumi.set(self, "tls", value)
+
+
+@pulumi.type_token("digitalocean:index/databaseLogsinkRsyslog:DatabaseLogsinkRsyslog")
+class DatabaseLogsinkRsyslog(pulumi.CustomResource):
+    @overload
+    def __init__(__self__,
+                 resource_name: str,
+                 opts: Optional[pulumi.ResourceOptions] = None,
+                 ca_cert: Optional[pulumi.Input[_builtins.str]] = None,
+                 client_cert: Optional[pulumi.Input[_builtins.str]] = None,
+                 client_key: Optional[pulumi.Input[_builtins.str]] = None,
+                 cluster_id: Optional[pulumi.Input[_builtins.str]] = None,
+                 format: Optional[pulumi.Input[_builtins.str]] = None,
+                 logline: Optional[pulumi.Input[_builtins.str]] = None,
+                 name: Optional[pulumi.Input[_builtins.str]] = None,
+                 port: Optional[pulumi.Input[_builtins.int]] = None,
+                 server: Optional[pulumi.Input[_builtins.str]] = None,
+                 structured_data: Optional[pulumi.Input[_builtins.str]] = None,
+                 tls: Optional[pulumi.Input[_builtins.bool]] = None,
+                 __props__=None):
+        """
+        Provides a DigitalOcean database logsink resource allowing you to forward logs from a managed database cluster to an external rsyslog server.
+
+        This resource supports the following DigitalOcean managed database engines:
+
+        * PostgreSQL
+        * MySQL
+        * Kafka
+        * Valkey
+
+        **Note**: MongoDB databases use a different log forwarding mechanism and require Datadog logsinks (not currently available in this provider).
+
+        ## Example Usage
+
+        ### Basic rsyslog configuration
+
+        ```python
+        import pulumi
+        import pulumi_digitalocean as digitalocean
+
+        postgres_example = digitalocean.DatabaseCluster("postgres-example",
+            name="example-postgres-cluster",
+            engine="pg",
+            version="15",
+            size=digitalocean.DatabaseSlug.D_B_1_VPCU1_GB,
+            region=digitalocean.Region.NYC1,
+            node_count=1)
+        example = digitalocean.DatabaseLogsinkRsyslog("example",
+            cluster_id=postgres_example.id,
+            name="rsyslog-prod",
+            server="192.0.2.10",
+            port=514,
+            format="rfc5424")
+        ```
+
+        ### TLS-enabled rsyslog configuration
+
+        ```python
+        import pulumi
+        import pulumi_digitalocean as digitalocean
+        import pulumi_std as std
+
+        example_tls = digitalocean.DatabaseLogsinkRsyslog("example-tls",
+            cluster_id=postgres_example["id"],
+            name="rsyslog-secure",
+            server="logs.example.com",
+            port=6514,
+            tls=True,
+            format="rfc5424",
+            ca_cert=std.file(input="/path/to/ca.pem").result)
+        ```
+
+        ### mTLS (mutual TLS) configuration
+
+        ```python
+        import pulumi
+        import pulumi_digitalocean as digitalocean
+        import pulumi_std as std
+
+        example_mtls = digitalocean.DatabaseLogsinkRsyslog("example-mtls",
+            cluster_id=postgres_example["id"],
+            name="rsyslog-mtls",
+            server="secure-logs.example.com",
+            port=6514,
+            tls=True,
+            format="rfc5424",
+            ca_cert=std.file(input="/path/to/ca.pem").result,
+            client_cert=std.file(input="/path/to/client.crt").result,
+            client_key=std.file(input="/path/to/client.key").result)
+        ```
+
+        ### Custom format configuration
+
+        ```python
+        import pulumi
+        import pulumi_digitalocean as digitalocean
+
+        example_custom = digitalocean.DatabaseLogsinkRsyslog("example-custom",
+            cluster_id=postgres_example["id"],
+            name="rsyslog-custom",
+            server="192.0.2.10",
+            port=514,
+            format="custom",
+            logline="<%pri%>%timestamp:::date-rfc3339% %HOSTNAME% %app-name% %msg%",
+            structured_data="[example@41058 iut=\\"3\\"]")
+        ```
+
+        ## Import
+
+        Database logsink rsyslog resources can be imported using the composite ID format `cluster_id,logsink_id`. For example:
+
+        ```sh
+        $ pulumi import digitalocean:index/databaseLogsinkRsyslog:DatabaseLogsinkRsyslog example 245bcfd0-7f31-4ce6-a2bc-475a116cca97,f38db7c8-1f31-4ce6-a2bc-475a116cca97
+        ```
+
+        **Note**: The cluster ID and logsink ID must be separated by a comma.
+
+        :param str resource_name: The name of the resource.
+        :param pulumi.ResourceOptions opts: Options for the resource.
+        :param pulumi.Input[_builtins.str] ca_cert: CA certificate for TLS verification in PEM format. Can be specified using `file()` function.
+        :param pulumi.Input[_builtins.str] client_cert: Client certificate for mutual TLS authentication in PEM format. **Note**: Requires `tls` to be `true`.
+        :param pulumi.Input[_builtins.str] client_key: Client private key for mutual TLS authentication in PEM format. **Note**: Requires `tls` to be `true`. This field is marked as sensitive.
+        :param pulumi.Input[_builtins.str] cluster_id: UUID of the source database cluster that will forward logs.
+        :param pulumi.Input[_builtins.str] format: Log format to use. Must be one of `rfc5424` (default), `rfc3164`, or `custom`.
+        :param pulumi.Input[_builtins.str] logline: Custom logline template. **Required** when `format` is set to `custom`. Supports rsyslog-style templating with the following tokens: `%HOSTNAME%`, `%app-name%`, `%msg%`, `%msgid%`, `%pri%`, `%procid%`, `%structured-data%`, `%timestamp%`, and `%timestamp:::date-rfc3339%`.
+        :param pulumi.Input[_builtins.str] name: Display name for the logsink. **Note**: This is immutable; changing it will force recreation of the resource.
+        :param pulumi.Input[_builtins.int] port: Port number for the rsyslog server. Must be between 1 and 65535.
+        :param pulumi.Input[_builtins.str] server: Hostname or IP address of the rsyslog server.
+        :param pulumi.Input[_builtins.str] structured_data: Content of the structured data block for RFC5424 messages.
+        :param pulumi.Input[_builtins.bool] tls: Enable TLS encryption for the rsyslog connection. Defaults to `false`. **Note**: It is highly recommended to enable TLS as log messages may contain sensitive information.
+        """
+        ...
+    @overload
+    def __init__(__self__,
+                 resource_name: str,
+                 args: DatabaseLogsinkRsyslogArgs,
+                 opts: Optional[pulumi.ResourceOptions] = None):
+        """
+        Provides a DigitalOcean database logsink resource allowing you to forward logs from a managed database cluster to an external rsyslog server.
+
+        This resource supports the following DigitalOcean managed database engines:
+
+        * PostgreSQL
+        * MySQL
+        * Kafka
+        * Valkey
+
+        **Note**: MongoDB databases use a different log forwarding mechanism and require Datadog logsinks (not currently available in this provider).
+
+        ## Example Usage
+
+        ### Basic rsyslog configuration
+
+        ```python
+        import pulumi
+        import pulumi_digitalocean as digitalocean
+
+        postgres_example = digitalocean.DatabaseCluster("postgres-example",
+            name="example-postgres-cluster",
+            engine="pg",
+            version="15",
+            size=digitalocean.DatabaseSlug.D_B_1_VPCU1_GB,
+            region=digitalocean.Region.NYC1,
+            node_count=1)
+        example = digitalocean.DatabaseLogsinkRsyslog("example",
+            cluster_id=postgres_example.id,
+            name="rsyslog-prod",
+            server="192.0.2.10",
+            port=514,
+            format="rfc5424")
+        ```
+
+        ### TLS-enabled rsyslog configuration
+
+        ```python
+        import pulumi
+        import pulumi_digitalocean as digitalocean
+        import pulumi_std as std
+
+        example_tls = digitalocean.DatabaseLogsinkRsyslog("example-tls",
+            cluster_id=postgres_example["id"],
+            name="rsyslog-secure",
+            server="logs.example.com",
+            port=6514,
+            tls=True,
+            format="rfc5424",
+            ca_cert=std.file(input="/path/to/ca.pem").result)
+        ```
+
+        ### mTLS (mutual TLS) configuration
+
+        ```python
+        import pulumi
+        import pulumi_digitalocean as digitalocean
+        import pulumi_std as std
+
+        example_mtls = digitalocean.DatabaseLogsinkRsyslog("example-mtls",
+            cluster_id=postgres_example["id"],
+            name="rsyslog-mtls",
+            server="secure-logs.example.com",
+            port=6514,
+            tls=True,
+            format="rfc5424",
+            ca_cert=std.file(input="/path/to/ca.pem").result,
+            client_cert=std.file(input="/path/to/client.crt").result,
+            client_key=std.file(input="/path/to/client.key").result)
+        ```
+
+        ### Custom format configuration
+
+        ```python
+        import pulumi
+        import pulumi_digitalocean as digitalocean
+
+        example_custom = digitalocean.DatabaseLogsinkRsyslog("example-custom",
+            cluster_id=postgres_example["id"],
+            name="rsyslog-custom",
+            server="192.0.2.10",
+            port=514,
+            format="custom",
+            logline="<%pri%>%timestamp:::date-rfc3339% %HOSTNAME% %app-name% %msg%",
+            structured_data="[example@41058 iut=\\"3\\"]")
+        ```
+
+        ## Import
+
+        Database logsink rsyslog resources can be imported using the composite ID format `cluster_id,logsink_id`. For example:
+
+        ```sh
+        $ pulumi import digitalocean:index/databaseLogsinkRsyslog:DatabaseLogsinkRsyslog example 245bcfd0-7f31-4ce6-a2bc-475a116cca97,f38db7c8-1f31-4ce6-a2bc-475a116cca97
+        ```
+
+        **Note**: The cluster ID and logsink ID must be separated by a comma.
+
+        :param str resource_name: The name of the resource.
+        :param DatabaseLogsinkRsyslogArgs args: The arguments to use to populate this resource's properties.
+        :param pulumi.ResourceOptions opts: Options for the resource.
+        """
+        ...
+    def __init__(__self__, resource_name: str, *args, **kwargs):
+        resource_args, opts = _utilities.get_resource_args_opts(DatabaseLogsinkRsyslogArgs, pulumi.ResourceOptions, *args, **kwargs)
+        if resource_args is not None:
+            __self__._internal_init(resource_name, opts, **resource_args.__dict__)
+        else:
+            __self__._internal_init(resource_name, *args, **kwargs)
+
+    def _internal_init(__self__,
+                 resource_name: str,
+                 opts: Optional[pulumi.ResourceOptions] = None,
+                 ca_cert: Optional[pulumi.Input[_builtins.str]] = None,
+                 client_cert: Optional[pulumi.Input[_builtins.str]] = None,
+                 client_key: Optional[pulumi.Input[_builtins.str]] = None,
+                 cluster_id: Optional[pulumi.Input[_builtins.str]] = None,
+                 format: Optional[pulumi.Input[_builtins.str]] = None,
+                 logline: Optional[pulumi.Input[_builtins.str]] = None,
+                 name: Optional[pulumi.Input[_builtins.str]] = None,
+                 port: Optional[pulumi.Input[_builtins.int]] = None,
+                 server: Optional[pulumi.Input[_builtins.str]] = None,
+                 structured_data: Optional[pulumi.Input[_builtins.str]] = None,
+                 tls: Optional[pulumi.Input[_builtins.bool]] = None,
+                 __props__=None):
+        opts = pulumi.ResourceOptions.merge(_utilities.get_resource_opts_defaults(), opts)
+        if not isinstance(opts, pulumi.ResourceOptions):
+            raise TypeError('Expected resource options to be a ResourceOptions instance')
+        if opts.id is None:
+            if __props__ is not None:
+                raise TypeError('__props__ is only valid when passed in combination with a valid opts.id to get an existing resource')
+            __props__ = DatabaseLogsinkRsyslogArgs.__new__(DatabaseLogsinkRsyslogArgs)
+
+            __props__.__dict__["ca_cert"] = None if ca_cert is None else pulumi.Output.secret(ca_cert)
+            __props__.__dict__["client_cert"] = client_cert
+            __props__.__dict__["client_key"] = None if client_key is None else pulumi.Output.secret(client_key)
+            if cluster_id is None and not opts.urn:
+                raise TypeError("Missing required property 'cluster_id'")
+            __props__.__dict__["cluster_id"] = cluster_id
+            __props__.__dict__["format"] = format
+            __props__.__dict__["logline"] = logline
+            __props__.__dict__["name"] = name
+            if port is None and not opts.urn:
+                raise TypeError("Missing required property 'port'")
+            __props__.__dict__["port"] = port
+            if server is None and not opts.urn:
+                raise TypeError("Missing required property 'server'")
+            __props__.__dict__["server"] = server
+            __props__.__dict__["structured_data"] = structured_data
+            __props__.__dict__["tls"] = tls
+            __props__.__dict__["logsink_id"] = None
+        secret_opts = pulumi.ResourceOptions(additional_secret_outputs=["caCert", "clientKey"])
+        opts = pulumi.ResourceOptions.merge(opts, secret_opts)
+        super(DatabaseLogsinkRsyslog, __self__).__init__(
+            'digitalocean:index/databaseLogsinkRsyslog:DatabaseLogsinkRsyslog',
+            resource_name,
+            __props__,
+            opts)
+
+    @staticmethod
+    def get(resource_name: str,
+            id: pulumi.Input[str],
+            opts: Optional[pulumi.ResourceOptions] = None,
+            ca_cert: Optional[pulumi.Input[_builtins.str]] = None,
+            client_cert: Optional[pulumi.Input[_builtins.str]] = None,
+            client_key: Optional[pulumi.Input[_builtins.str]] = None,
+            cluster_id: Optional[pulumi.Input[_builtins.str]] = None,
+            format: Optional[pulumi.Input[_builtins.str]] = None,
+            logline: Optional[pulumi.Input[_builtins.str]] = None,
+            logsink_id: Optional[pulumi.Input[_builtins.str]] = None,
+            name: Optional[pulumi.Input[_builtins.str]] = None,
+            port: Optional[pulumi.Input[_builtins.int]] = None,
+            server: Optional[pulumi.Input[_builtins.str]] = None,
+            structured_data: Optional[pulumi.Input[_builtins.str]] = None,
+            tls: Optional[pulumi.Input[_builtins.bool]] = None) -> 'DatabaseLogsinkRsyslog':
+        """
+        Get an existing DatabaseLogsinkRsyslog resource's state with the given name, id, and optional extra
+        properties used to qualify the lookup.
+
+        :param str resource_name: The unique name of the resulting resource.
+        :param pulumi.Input[str] id: The unique provider ID of the resource to lookup.
+        :param pulumi.ResourceOptions opts: Options for the resource.
+        :param pulumi.Input[_builtins.str] ca_cert: CA certificate for TLS verification in PEM format. Can be specified using `file()` function.
+        :param pulumi.Input[_builtins.str] client_cert: Client certificate for mutual TLS authentication in PEM format. **Note**: Requires `tls` to be `true`.
+        :param pulumi.Input[_builtins.str] client_key: Client private key for mutual TLS authentication in PEM format. **Note**: Requires `tls` to be `true`. This field is marked as sensitive.
+        :param pulumi.Input[_builtins.str] cluster_id: UUID of the source database cluster that will forward logs.
+        :param pulumi.Input[_builtins.str] format: Log format to use. Must be one of `rfc5424` (default), `rfc3164`, or `custom`.
+        :param pulumi.Input[_builtins.str] logline: Custom logline template. **Required** when `format` is set to `custom`. Supports rsyslog-style templating with the following tokens: `%HOSTNAME%`, `%app-name%`, `%msg%`, `%msgid%`, `%pri%`, `%procid%`, `%structured-data%`, `%timestamp%`, and `%timestamp:::date-rfc3339%`.
+        :param pulumi.Input[_builtins.str] logsink_id: The unique identifier for the logsink as returned by the DigitalOcean API.
+        :param pulumi.Input[_builtins.str] name: Display name for the logsink. **Note**: This is immutable; changing it will force recreation of the resource.
+        :param pulumi.Input[_builtins.int] port: Port number for the rsyslog server. Must be between 1 and 65535.
+        :param pulumi.Input[_builtins.str] server: Hostname or IP address of the rsyslog server.
+        :param pulumi.Input[_builtins.str] structured_data: Content of the structured data block for RFC5424 messages.
+        :param pulumi.Input[_builtins.bool] tls: Enable TLS encryption for the rsyslog connection. Defaults to `false`. **Note**: It is highly recommended to enable TLS as log messages may contain sensitive information.
+        """
+        opts = pulumi.ResourceOptions.merge(opts, pulumi.ResourceOptions(id=id))
+
+        __props__ = _DatabaseLogsinkRsyslogState.__new__(_DatabaseLogsinkRsyslogState)
+
+        __props__.__dict__["ca_cert"] = ca_cert
+        __props__.__dict__["client_cert"] = client_cert
+        __props__.__dict__["client_key"] = client_key
+        __props__.__dict__["cluster_id"] = cluster_id
+        __props__.__dict__["format"] = format
+        __props__.__dict__["logline"] = logline
+        __props__.__dict__["logsink_id"] = logsink_id
+        __props__.__dict__["name"] = name
+        __props__.__dict__["port"] = port
+        __props__.__dict__["server"] = server
+        __props__.__dict__["structured_data"] = structured_data
+        __props__.__dict__["tls"] = tls
+        return DatabaseLogsinkRsyslog(resource_name, opts=opts, __props__=__props__)
+
+    @_builtins.property
+    @pulumi.getter(name="caCert")
+    def ca_cert(self) -> pulumi.Output[Optional[_builtins.str]]:
+        """
+        CA certificate for TLS verification in PEM format. Can be specified using `file()` function.
+        """
+        return pulumi.get(self, "ca_cert")
+
+    @_builtins.property
+    @pulumi.getter(name="clientCert")
+    def client_cert(self) -> pulumi.Output[Optional[_builtins.str]]:
+        """
+        Client certificate for mutual TLS authentication in PEM format. **Note**: Requires `tls` to be `true`.
+        """
+        return pulumi.get(self, "client_cert")
+
+    @_builtins.property
+    @pulumi.getter(name="clientKey")
+    def client_key(self) -> pulumi.Output[Optional[_builtins.str]]:
+        """
+        Client private key for mutual TLS authentication in PEM format. **Note**: Requires `tls` to be `true`. This field is marked as sensitive.
+        """
+        return pulumi.get(self, "client_key")
+
+    @_builtins.property
+    @pulumi.getter(name="clusterId")
+    def cluster_id(self) -> pulumi.Output[_builtins.str]:
+        """
+        UUID of the source database cluster that will forward logs.
+        """
+        return pulumi.get(self, "cluster_id")
+
+    @_builtins.property
+    @pulumi.getter
+    def format(self) -> pulumi.Output[Optional[_builtins.str]]:
+        """
+        Log format to use. Must be one of `rfc5424` (default), `rfc3164`, or `custom`.
+        """
+        return pulumi.get(self, "format")
+
+    @_builtins.property
+    @pulumi.getter
+    def logline(self) -> pulumi.Output[Optional[_builtins.str]]:
+        """
+        Custom logline template. **Required** when `format` is set to `custom`. Supports rsyslog-style templating with the following tokens: `%HOSTNAME%`, `%app-name%`, `%msg%`, `%msgid%`, `%pri%`, `%procid%`, `%structured-data%`, `%timestamp%`, and `%timestamp:::date-rfc3339%`.
+        """
+        return pulumi.get(self, "logline")
+
+    @_builtins.property
+    @pulumi.getter(name="logsinkId")
+    def logsink_id(self) -> pulumi.Output[_builtins.str]:
+        """
+        The unique identifier for the logsink as returned by the DigitalOcean API.
+        """
+        return pulumi.get(self, "logsink_id")
+
+    @_builtins.property
+    @pulumi.getter
+    def name(self) -> pulumi.Output[_builtins.str]:
+        """
+        Display name for the logsink. **Note**: This is immutable; changing it will force recreation of the resource.
+        """
+        return pulumi.get(self, "name")
+
+    @_builtins.property
+    @pulumi.getter
+    def port(self) -> pulumi.Output[_builtins.int]:
+        """
+        Port number for the rsyslog server. Must be between 1 and 65535.
+        """
+        return pulumi.get(self, "port")
+
+    @_builtins.property
+    @pulumi.getter
+    def server(self) -> pulumi.Output[_builtins.str]:
+        """
+        Hostname or IP address of the rsyslog server.
+        """
+        return pulumi.get(self, "server")
+
+    @_builtins.property
+    @pulumi.getter(name="structuredData")
+    def structured_data(self) -> pulumi.Output[Optional[_builtins.str]]:
+        """
+        Content of the structured data block for RFC5424 messages.
+        """
+        return pulumi.get(self, "structured_data")
+
+    @_builtins.property
+    @pulumi.getter
+    def tls(self) -> pulumi.Output[Optional[_builtins.bool]]:
+        """
+        Enable TLS encryption for the rsyslog connection. Defaults to `false`. **Note**: It is highly recommended to enable TLS as log messages may contain sensitive information.
+        """
+        return pulumi.get(self, "tls")
+