pulumi-gcp 7.30.0__py3-none-any.whl → 7.30.0a1719513455__py3-none-any.whl
This diff represents the content of publicly available package versions that have been released to one of the supported registries. The information contained in this diff is provided for informational purposes only and reflects changes between package versions as they appear in their respective public registries.
- pulumi_gcp/__init__.py +0 -32
- pulumi_gcp/artifactregistry/get_docker_image.py +2 -2
- pulumi_gcp/bigtable/gc_policy.py +14 -68
- pulumi_gcp/cloudfunctionsv2/_inputs.py +0 -97
- pulumi_gcp/cloudfunctionsv2/function.py +0 -232
- pulumi_gcp/cloudfunctionsv2/outputs.py +1 -129
- pulumi_gcp/compute/_inputs.py +0 -622
- pulumi_gcp/compute/address.py +7 -0
- pulumi_gcp/compute/backend_service.py +14 -0
- pulumi_gcp/compute/forwarding_rule.py +21 -0
- pulumi_gcp/compute/global_forwarding_rule.py +21 -0
- pulumi_gcp/compute/managed_ssl_certificate.py +7 -0
- pulumi_gcp/compute/manged_ssl_certificate.py +7 -0
- pulumi_gcp/compute/network_attachment.py +0 -16
- pulumi_gcp/compute/outputs.py +8 -504
- pulumi_gcp/compute/region_backend_service.py +14 -0
- pulumi_gcp/compute/region_disk_iam_binding.py +95 -122
- pulumi_gcp/compute/region_disk_iam_member.py +95 -122
- pulumi_gcp/compute/region_disk_iam_policy.py +88 -115
- pulumi_gcp/compute/region_ssl_certificate.py +7 -0
- pulumi_gcp/compute/ssl_certificate.py +7 -0
- pulumi_gcp/compute/target_https_proxy.py +1 -76
- pulumi_gcp/compute/url_map.py +0 -255
- pulumi_gcp/container/aws_cluster.py +2 -2
- pulumi_gcp/container/aws_node_pool.py +2 -2
- pulumi_gcp/container/azure_client.py +2 -2
- pulumi_gcp/container/azure_cluster.py +2 -2
- pulumi_gcp/container/azure_node_pool.py +2 -2
- pulumi_gcp/datafusion/_inputs.py +11 -163
- pulumi_gcp/datafusion/instance.py +0 -64
- pulumi_gcp/datafusion/outputs.py +7 -127
- pulumi_gcp/gkebackup/restore_plan_iam_binding.py +953 -328
- pulumi_gcp/gkebackup/restore_plan_iam_member.py +953 -328
- pulumi_gcp/gkebackup/restore_plan_iam_policy.py +953 -238
- pulumi_gcp/healthcare/_inputs.py +0 -43
- pulumi_gcp/healthcare/dataset.py +0 -110
- pulumi_gcp/healthcare/outputs.py +0 -43
- pulumi_gcp/identityplatform/config.py +1 -1
- pulumi_gcp/logging/billing_account_bucket_config.py +1 -1
- pulumi_gcp/logging/folder_bucket_config.py +1 -1
- pulumi_gcp/logging/organization_bucket_config.py +1 -1
- pulumi_gcp/monitoring/_inputs.py +0 -77
- pulumi_gcp/monitoring/outputs.py +0 -63
- pulumi_gcp/networksecurity/address_group_iam_binding.py +2 -289
- pulumi_gcp/networksecurity/address_group_iam_member.py +2 -289
- pulumi_gcp/pulumi-plugin.json +1 -1
- pulumi_gcp/securitycenter/instance_iam_binding.py +0 -64
- pulumi_gcp/securitycenter/instance_iam_member.py +0 -64
- pulumi_gcp/securitycenter/instance_iam_policy.py +0 -64
- pulumi_gcp/sourcerepo/repository_iam_binding.py +83 -92
- pulumi_gcp/sourcerepo/repository_iam_member.py +83 -92
- pulumi_gcp/sourcerepo/repository_iam_policy.py +76 -85
- pulumi_gcp/storage/__init__.py +0 -5
- pulumi_gcp/storage/_inputs.py +0 -130
- pulumi_gcp/storage/outputs.py +0 -76
- pulumi_gcp/vertex/_inputs.py +3 -3
- pulumi_gcp/vertex/ai_feature_online_store.py +9 -9
- pulumi_gcp/vertex/outputs.py +2 -2
- {pulumi_gcp-7.30.0.dist-info → pulumi_gcp-7.30.0a1719513455.dist-info}/METADATA +1 -1
- {pulumi_gcp-7.30.0.dist-info → pulumi_gcp-7.30.0a1719513455.dist-info}/RECORD +62 -67
- {pulumi_gcp-7.30.0.dist-info → pulumi_gcp-7.30.0a1719513455.dist-info}/WHEEL +1 -1
- pulumi_gcp/storage/get_managed_folder_iam_policy.py +0 -115
- pulumi_gcp/storage/managed_folder.py +0 -440
- pulumi_gcp/storage/managed_folder_iam_binding.py +0 -947
- pulumi_gcp/storage/managed_folder_iam_member.py +0 -947
- pulumi_gcp/storage/managed_folder_iam_policy.py +0 -766
- {pulumi_gcp-7.30.0.dist-info → pulumi_gcp-7.30.0a1719513455.dist-info}/top_level.txt +0 -0
@@ -29,27 +29,6 @@ class AddressGroupIamMemberArgs:
|
|
29
29
|
project: Optional[pulumi.Input[str]] = None):
|
30
30
|
"""
|
31
31
|
The set of arguments for constructing a AddressGroupIamMember resource.
|
32
|
-
:param pulumi.Input[str] member: Identities that will be granted the privilege in `role`.
|
33
|
-
Each entry can have one of the following values:
|
34
|
-
* **allUsers**: A special identifier that represents anyone who is on the internet; with or without a Google account.
|
35
|
-
* **allAuthenticatedUsers**: A special identifier that represents anyone who is authenticated with a Google account or a service account.
|
36
|
-
* **user:{emailid}**: An email address that represents a specific Google account. For example, alice@gmail.com or joe@example.com.
|
37
|
-
* **serviceAccount:{emailid}**: An email address that represents a service account. For example, my-other-app@appspot.gserviceaccount.com.
|
38
|
-
* **group:{emailid}**: An email address that represents a Google group. For example, admins@example.com.
|
39
|
-
* **domain:{domain}**: A G Suite domain (primary, instead of alias) name that represents all the users of that domain. For example, google.com or example.com.
|
40
|
-
* **projectOwner:projectid**: Owners of the given project. For example, "projectOwner:my-example-project"
|
41
|
-
* **projectEditor:projectid**: Editors of the given project. For example, "projectEditor:my-example-project"
|
42
|
-
* **projectViewer:projectid**: Viewers of the given project. For example, "projectViewer:my-example-project"
|
43
|
-
:param pulumi.Input[str] role: The role that should be applied. Only one
|
44
|
-
`networksecurity.AddressGroupIamBinding` can be used per role. Note that custom roles must be of the format
|
45
|
-
`[projects|organizations]/{parent-name}/roles/{role-name}`.
|
46
|
-
:param pulumi.Input[str] location: The location of the gateway security policy.
|
47
|
-
Used to find the parent resource to bind the IAM policy to. If not specified,
|
48
|
-
the value will be parsed from the identifier of the parent resource. If no location is provided in the parent identifier and no
|
49
|
-
location is specified, it is taken from the provider configuration.
|
50
|
-
:param pulumi.Input[str] name: Used to find the parent resource to bind the IAM policy to
|
51
|
-
:param pulumi.Input[str] project: The ID of the project in which the resource belongs.
|
52
|
-
If it is not provided, the project will be parsed from the identifier of the parent resource. If no project is provided in the parent identifier and no project is specified, the provider project is used.
|
53
32
|
"""
|
54
33
|
pulumi.set(__self__, "member", member)
|
55
34
|
pulumi.set(__self__, "role", role)
|
@@ -65,19 +44,6 @@ class AddressGroupIamMemberArgs:
|
|
65
44
|
@property
|
66
45
|
@pulumi.getter
|
67
46
|
def member(self) -> pulumi.Input[str]:
|
68
|
-
"""
|
69
|
-
Identities that will be granted the privilege in `role`.
|
70
|
-
Each entry can have one of the following values:
|
71
|
-
* **allUsers**: A special identifier that represents anyone who is on the internet; with or without a Google account.
|
72
|
-
* **allAuthenticatedUsers**: A special identifier that represents anyone who is authenticated with a Google account or a service account.
|
73
|
-
* **user:{emailid}**: An email address that represents a specific Google account. For example, alice@gmail.com or joe@example.com.
|
74
|
-
* **serviceAccount:{emailid}**: An email address that represents a service account. For example, my-other-app@appspot.gserviceaccount.com.
|
75
|
-
* **group:{emailid}**: An email address that represents a Google group. For example, admins@example.com.
|
76
|
-
* **domain:{domain}**: A G Suite domain (primary, instead of alias) name that represents all the users of that domain. For example, google.com or example.com.
|
77
|
-
* **projectOwner:projectid**: Owners of the given project. For example, "projectOwner:my-example-project"
|
78
|
-
* **projectEditor:projectid**: Editors of the given project. For example, "projectEditor:my-example-project"
|
79
|
-
* **projectViewer:projectid**: Viewers of the given project. For example, "projectViewer:my-example-project"
|
80
|
-
"""
|
81
47
|
return pulumi.get(self, "member")
|
82
48
|
|
83
49
|
@member.setter
|
@@ -87,11 +53,6 @@ class AddressGroupIamMemberArgs:
|
|
87
53
|
@property
|
88
54
|
@pulumi.getter
|
89
55
|
def role(self) -> pulumi.Input[str]:
|
90
|
-
"""
|
91
|
-
The role that should be applied. Only one
|
92
|
-
`networksecurity.AddressGroupIamBinding` can be used per role. Note that custom roles must be of the format
|
93
|
-
`[projects|organizations]/{parent-name}/roles/{role-name}`.
|
94
|
-
"""
|
95
56
|
return pulumi.get(self, "role")
|
96
57
|
|
97
58
|
@role.setter
|
@@ -110,12 +71,6 @@ class AddressGroupIamMemberArgs:
|
|
110
71
|
@property
|
111
72
|
@pulumi.getter
|
112
73
|
def location(self) -> Optional[pulumi.Input[str]]:
|
113
|
-
"""
|
114
|
-
The location of the gateway security policy.
|
115
|
-
Used to find the parent resource to bind the IAM policy to. If not specified,
|
116
|
-
the value will be parsed from the identifier of the parent resource. If no location is provided in the parent identifier and no
|
117
|
-
location is specified, it is taken from the provider configuration.
|
118
|
-
"""
|
119
74
|
return pulumi.get(self, "location")
|
120
75
|
|
121
76
|
@location.setter
|
@@ -125,9 +80,6 @@ class AddressGroupIamMemberArgs:
|
|
125
80
|
@property
|
126
81
|
@pulumi.getter
|
127
82
|
def name(self) -> Optional[pulumi.Input[str]]:
|
128
|
-
"""
|
129
|
-
Used to find the parent resource to bind the IAM policy to
|
130
|
-
"""
|
131
83
|
return pulumi.get(self, "name")
|
132
84
|
|
133
85
|
@name.setter
|
@@ -137,10 +89,6 @@ class AddressGroupIamMemberArgs:
|
|
137
89
|
@property
|
138
90
|
@pulumi.getter
|
139
91
|
def project(self) -> Optional[pulumi.Input[str]]:
|
140
|
-
"""
|
141
|
-
The ID of the project in which the resource belongs.
|
142
|
-
If it is not provided, the project will be parsed from the identifier of the parent resource. If no project is provided in the parent identifier and no project is specified, the provider project is used.
|
143
|
-
"""
|
144
92
|
return pulumi.get(self, "project")
|
145
93
|
|
146
94
|
@project.setter
|
@@ -160,28 +108,6 @@ class _AddressGroupIamMemberState:
|
|
160
108
|
role: Optional[pulumi.Input[str]] = None):
|
161
109
|
"""
|
162
110
|
Input properties used for looking up and filtering AddressGroupIamMember resources.
|
163
|
-
:param pulumi.Input[str] etag: (Computed) The etag of the IAM policy.
|
164
|
-
:param pulumi.Input[str] location: The location of the gateway security policy.
|
165
|
-
Used to find the parent resource to bind the IAM policy to. If not specified,
|
166
|
-
the value will be parsed from the identifier of the parent resource. If no location is provided in the parent identifier and no
|
167
|
-
location is specified, it is taken from the provider configuration.
|
168
|
-
:param pulumi.Input[str] member: Identities that will be granted the privilege in `role`.
|
169
|
-
Each entry can have one of the following values:
|
170
|
-
* **allUsers**: A special identifier that represents anyone who is on the internet; with or without a Google account.
|
171
|
-
* **allAuthenticatedUsers**: A special identifier that represents anyone who is authenticated with a Google account or a service account.
|
172
|
-
* **user:{emailid}**: An email address that represents a specific Google account. For example, alice@gmail.com or joe@example.com.
|
173
|
-
* **serviceAccount:{emailid}**: An email address that represents a service account. For example, my-other-app@appspot.gserviceaccount.com.
|
174
|
-
* **group:{emailid}**: An email address that represents a Google group. For example, admins@example.com.
|
175
|
-
* **domain:{domain}**: A G Suite domain (primary, instead of alias) name that represents all the users of that domain. For example, google.com or example.com.
|
176
|
-
* **projectOwner:projectid**: Owners of the given project. For example, "projectOwner:my-example-project"
|
177
|
-
* **projectEditor:projectid**: Editors of the given project. For example, "projectEditor:my-example-project"
|
178
|
-
* **projectViewer:projectid**: Viewers of the given project. For example, "projectViewer:my-example-project"
|
179
|
-
:param pulumi.Input[str] name: Used to find the parent resource to bind the IAM policy to
|
180
|
-
:param pulumi.Input[str] project: The ID of the project in which the resource belongs.
|
181
|
-
If it is not provided, the project will be parsed from the identifier of the parent resource. If no project is provided in the parent identifier and no project is specified, the provider project is used.
|
182
|
-
:param pulumi.Input[str] role: The role that should be applied. Only one
|
183
|
-
`networksecurity.AddressGroupIamBinding` can be used per role. Note that custom roles must be of the format
|
184
|
-
`[projects|organizations]/{parent-name}/roles/{role-name}`.
|
185
111
|
"""
|
186
112
|
if condition is not None:
|
187
113
|
pulumi.set(__self__, "condition", condition)
|
@@ -210,9 +136,6 @@ class _AddressGroupIamMemberState:
|
|
210
136
|
@property
|
211
137
|
@pulumi.getter
|
212
138
|
def etag(self) -> Optional[pulumi.Input[str]]:
|
213
|
-
"""
|
214
|
-
(Computed) The etag of the IAM policy.
|
215
|
-
"""
|
216
139
|
return pulumi.get(self, "etag")
|
217
140
|
|
218
141
|
@etag.setter
|
@@ -222,12 +145,6 @@ class _AddressGroupIamMemberState:
|
|
222
145
|
@property
|
223
146
|
@pulumi.getter
|
224
147
|
def location(self) -> Optional[pulumi.Input[str]]:
|
225
|
-
"""
|
226
|
-
The location of the gateway security policy.
|
227
|
-
Used to find the parent resource to bind the IAM policy to. If not specified,
|
228
|
-
the value will be parsed from the identifier of the parent resource. If no location is provided in the parent identifier and no
|
229
|
-
location is specified, it is taken from the provider configuration.
|
230
|
-
"""
|
231
148
|
return pulumi.get(self, "location")
|
232
149
|
|
233
150
|
@location.setter
|
@@ -237,19 +154,6 @@ class _AddressGroupIamMemberState:
|
|
237
154
|
@property
|
238
155
|
@pulumi.getter
|
239
156
|
def member(self) -> Optional[pulumi.Input[str]]:
|
240
|
-
"""
|
241
|
-
Identities that will be granted the privilege in `role`.
|
242
|
-
Each entry can have one of the following values:
|
243
|
-
* **allUsers**: A special identifier that represents anyone who is on the internet; with or without a Google account.
|
244
|
-
* **allAuthenticatedUsers**: A special identifier that represents anyone who is authenticated with a Google account or a service account.
|
245
|
-
* **user:{emailid}**: An email address that represents a specific Google account. For example, alice@gmail.com or joe@example.com.
|
246
|
-
* **serviceAccount:{emailid}**: An email address that represents a service account. For example, my-other-app@appspot.gserviceaccount.com.
|
247
|
-
* **group:{emailid}**: An email address that represents a Google group. For example, admins@example.com.
|
248
|
-
* **domain:{domain}**: A G Suite domain (primary, instead of alias) name that represents all the users of that domain. For example, google.com or example.com.
|
249
|
-
* **projectOwner:projectid**: Owners of the given project. For example, "projectOwner:my-example-project"
|
250
|
-
* **projectEditor:projectid**: Editors of the given project. For example, "projectEditor:my-example-project"
|
251
|
-
* **projectViewer:projectid**: Viewers of the given project. For example, "projectViewer:my-example-project"
|
252
|
-
"""
|
253
157
|
return pulumi.get(self, "member")
|
254
158
|
|
255
159
|
@member.setter
|
@@ -259,9 +163,6 @@ class _AddressGroupIamMemberState:
|
|
259
163
|
@property
|
260
164
|
@pulumi.getter
|
261
165
|
def name(self) -> Optional[pulumi.Input[str]]:
|
262
|
-
"""
|
263
|
-
Used to find the parent resource to bind the IAM policy to
|
264
|
-
"""
|
265
166
|
return pulumi.get(self, "name")
|
266
167
|
|
267
168
|
@name.setter
|
@@ -271,10 +172,6 @@ class _AddressGroupIamMemberState:
|
|
271
172
|
@property
|
272
173
|
@pulumi.getter
|
273
174
|
def project(self) -> Optional[pulumi.Input[str]]:
|
274
|
-
"""
|
275
|
-
The ID of the project in which the resource belongs.
|
276
|
-
If it is not provided, the project will be parsed from the identifier of the parent resource. If no project is provided in the parent identifier and no project is specified, the provider project is used.
|
277
|
-
"""
|
278
175
|
return pulumi.get(self, "project")
|
279
176
|
|
280
177
|
@project.setter
|
@@ -284,11 +181,6 @@ class _AddressGroupIamMemberState:
|
|
284
181
|
@property
|
285
182
|
@pulumi.getter
|
286
183
|
def role(self) -> Optional[pulumi.Input[str]]:
|
287
|
-
"""
|
288
|
-
The role that should be applied. Only one
|
289
|
-
`networksecurity.AddressGroupIamBinding` can be used per role. Note that custom roles must be of the format
|
290
|
-
`[projects|organizations]/{parent-name}/roles/{role-name}`.
|
291
|
-
"""
|
292
184
|
return pulumi.get(self, "role")
|
293
185
|
|
294
186
|
@role.setter
|
@@ -309,81 +201,9 @@ class AddressGroupIamMember(pulumi.CustomResource):
|
|
309
201
|
role: Optional[pulumi.Input[str]] = None,
|
310
202
|
__props__=None):
|
311
203
|
"""
|
312
|
-
|
313
|
-
|
314
|
-
* `networksecurity.AddressGroupIamPolicy`: Authoritative. Sets the IAM policy for the projectaddressgroup and replaces any existing policy already attached.
|
315
|
-
* `networksecurity.AddressGroupIamBinding`: Authoritative for a given role. Updates the IAM policy to grant a role to a list of members. Other roles within the IAM policy for the projectaddressgroup are preserved.
|
316
|
-
* `networksecurity.AddressGroupIamMember`: Non-authoritative. Updates the IAM policy to grant a role to a new member. Other members for the role for the projectaddressgroup are preserved.
|
317
|
-
|
318
|
-
A data source can be used to retrieve policy data in advent you do not need creation
|
319
|
-
|
320
|
-
* `networksecurity.AddressGroupIamPolicy`: Retrieves the IAM policy for the projectaddressgroup
|
321
|
-
|
322
|
-
> **Note:** `networksecurity.AddressGroupIamPolicy` **cannot** be used in conjunction with `networksecurity.AddressGroupIamBinding` and `networksecurity.AddressGroupIamMember` or they will fight over what your policy should be.
|
323
|
-
|
324
|
-
> **Note:** `networksecurity.AddressGroupIamBinding` resources **can be** used in conjunction with `networksecurity.AddressGroupIamMember` resources **only if** they do not grant privilege to the same role.
|
325
|
-
|
326
|
-
## Import
|
327
|
-
|
328
|
-
For all import syntaxes, the "resource in question" can take any of the following forms:
|
329
|
-
|
330
|
-
* projects/{{project}}/locations/{{location}}/addressGroups/{{name}}
|
331
|
-
|
332
|
-
* {{project}}/{{location}}/{{name}}
|
333
|
-
|
334
|
-
* {{location}}/{{name}}
|
335
|
-
|
336
|
-
* {{name}}
|
337
|
-
|
338
|
-
Any variables not passed in the import command will be taken from the provider configuration.
|
339
|
-
|
340
|
-
Network security projectaddressgroup IAM resources can be imported using the resource identifiers, role, and member.
|
341
|
-
|
342
|
-
IAM member imports use space-delimited identifiers: the resource in question, the role, and the member identity, e.g.
|
343
|
-
|
344
|
-
```sh
|
345
|
-
$ pulumi import gcp:networksecurity/addressGroupIamMember:AddressGroupIamMember editor "projects/{{project}}/locations/{{location}}/addressGroups/{{project_address_group}} roles/compute.networkAdmin user:jane@example.com"
|
346
|
-
```
|
347
|
-
|
348
|
-
IAM binding imports use space-delimited identifiers: the resource in question and the role, e.g.
|
349
|
-
|
350
|
-
```sh
|
351
|
-
$ pulumi import gcp:networksecurity/addressGroupIamMember:AddressGroupIamMember editor "projects/{{project}}/locations/{{location}}/addressGroups/{{project_address_group}} roles/compute.networkAdmin"
|
352
|
-
```
|
353
|
-
|
354
|
-
IAM policy imports use the identifier of the resource in question, e.g.
|
355
|
-
|
356
|
-
```sh
|
357
|
-
$ pulumi import gcp:networksecurity/addressGroupIamMember:AddressGroupIamMember editor projects/{{project}}/locations/{{location}}/addressGroups/{{project_address_group}}
|
358
|
-
```
|
359
|
-
|
360
|
-
-> **Custom Roles**: If you're importing a IAM resource with a custom role, make sure to use the
|
361
|
-
|
362
|
-
full name of the custom role, e.g. `[projects/my-project|organizations/my-org]/roles/my-custom-role`.
|
363
|
-
|
204
|
+
Create a AddressGroupIamMember resource with the given unique name, props, and options.
|
364
205
|
:param str resource_name: The name of the resource.
|
365
206
|
:param pulumi.ResourceOptions opts: Options for the resource.
|
366
|
-
:param pulumi.Input[str] location: The location of the gateway security policy.
|
367
|
-
Used to find the parent resource to bind the IAM policy to. If not specified,
|
368
|
-
the value will be parsed from the identifier of the parent resource. If no location is provided in the parent identifier and no
|
369
|
-
location is specified, it is taken from the provider configuration.
|
370
|
-
:param pulumi.Input[str] member: Identities that will be granted the privilege in `role`.
|
371
|
-
Each entry can have one of the following values:
|
372
|
-
* **allUsers**: A special identifier that represents anyone who is on the internet; with or without a Google account.
|
373
|
-
* **allAuthenticatedUsers**: A special identifier that represents anyone who is authenticated with a Google account or a service account.
|
374
|
-
* **user:{emailid}**: An email address that represents a specific Google account. For example, alice@gmail.com or joe@example.com.
|
375
|
-
* **serviceAccount:{emailid}**: An email address that represents a service account. For example, my-other-app@appspot.gserviceaccount.com.
|
376
|
-
* **group:{emailid}**: An email address that represents a Google group. For example, admins@example.com.
|
377
|
-
* **domain:{domain}**: A G Suite domain (primary, instead of alias) name that represents all the users of that domain. For example, google.com or example.com.
|
378
|
-
* **projectOwner:projectid**: Owners of the given project. For example, "projectOwner:my-example-project"
|
379
|
-
* **projectEditor:projectid**: Editors of the given project. For example, "projectEditor:my-example-project"
|
380
|
-
* **projectViewer:projectid**: Viewers of the given project. For example, "projectViewer:my-example-project"
|
381
|
-
:param pulumi.Input[str] name: Used to find the parent resource to bind the IAM policy to
|
382
|
-
:param pulumi.Input[str] project: The ID of the project in which the resource belongs.
|
383
|
-
If it is not provided, the project will be parsed from the identifier of the parent resource. If no project is provided in the parent identifier and no project is specified, the provider project is used.
|
384
|
-
:param pulumi.Input[str] role: The role that should be applied. Only one
|
385
|
-
`networksecurity.AddressGroupIamBinding` can be used per role. Note that custom roles must be of the format
|
386
|
-
`[projects|organizations]/{parent-name}/roles/{role-name}`.
|
387
207
|
"""
|
388
208
|
...
|
389
209
|
@overload
|
@@ -392,58 +212,7 @@ class AddressGroupIamMember(pulumi.CustomResource):
|
|
392
212
|
args: AddressGroupIamMemberArgs,
|
393
213
|
opts: Optional[pulumi.ResourceOptions] = None):
|
394
214
|
"""
|
395
|
-
|
396
|
-
|
397
|
-
* `networksecurity.AddressGroupIamPolicy`: Authoritative. Sets the IAM policy for the projectaddressgroup and replaces any existing policy already attached.
|
398
|
-
* `networksecurity.AddressGroupIamBinding`: Authoritative for a given role. Updates the IAM policy to grant a role to a list of members. Other roles within the IAM policy for the projectaddressgroup are preserved.
|
399
|
-
* `networksecurity.AddressGroupIamMember`: Non-authoritative. Updates the IAM policy to grant a role to a new member. Other members for the role for the projectaddressgroup are preserved.
|
400
|
-
|
401
|
-
A data source can be used to retrieve policy data in advent you do not need creation
|
402
|
-
|
403
|
-
* `networksecurity.AddressGroupIamPolicy`: Retrieves the IAM policy for the projectaddressgroup
|
404
|
-
|
405
|
-
> **Note:** `networksecurity.AddressGroupIamPolicy` **cannot** be used in conjunction with `networksecurity.AddressGroupIamBinding` and `networksecurity.AddressGroupIamMember` or they will fight over what your policy should be.
|
406
|
-
|
407
|
-
> **Note:** `networksecurity.AddressGroupIamBinding` resources **can be** used in conjunction with `networksecurity.AddressGroupIamMember` resources **only if** they do not grant privilege to the same role.
|
408
|
-
|
409
|
-
## Import
|
410
|
-
|
411
|
-
For all import syntaxes, the "resource in question" can take any of the following forms:
|
412
|
-
|
413
|
-
* projects/{{project}}/locations/{{location}}/addressGroups/{{name}}
|
414
|
-
|
415
|
-
* {{project}}/{{location}}/{{name}}
|
416
|
-
|
417
|
-
* {{location}}/{{name}}
|
418
|
-
|
419
|
-
* {{name}}
|
420
|
-
|
421
|
-
Any variables not passed in the import command will be taken from the provider configuration.
|
422
|
-
|
423
|
-
Network security projectaddressgroup IAM resources can be imported using the resource identifiers, role, and member.
|
424
|
-
|
425
|
-
IAM member imports use space-delimited identifiers: the resource in question, the role, and the member identity, e.g.
|
426
|
-
|
427
|
-
```sh
|
428
|
-
$ pulumi import gcp:networksecurity/addressGroupIamMember:AddressGroupIamMember editor "projects/{{project}}/locations/{{location}}/addressGroups/{{project_address_group}} roles/compute.networkAdmin user:jane@example.com"
|
429
|
-
```
|
430
|
-
|
431
|
-
IAM binding imports use space-delimited identifiers: the resource in question and the role, e.g.
|
432
|
-
|
433
|
-
```sh
|
434
|
-
$ pulumi import gcp:networksecurity/addressGroupIamMember:AddressGroupIamMember editor "projects/{{project}}/locations/{{location}}/addressGroups/{{project_address_group}} roles/compute.networkAdmin"
|
435
|
-
```
|
436
|
-
|
437
|
-
IAM policy imports use the identifier of the resource in question, e.g.
|
438
|
-
|
439
|
-
```sh
|
440
|
-
$ pulumi import gcp:networksecurity/addressGroupIamMember:AddressGroupIamMember editor projects/{{project}}/locations/{{location}}/addressGroups/{{project_address_group}}
|
441
|
-
```
|
442
|
-
|
443
|
-
-> **Custom Roles**: If you're importing a IAM resource with a custom role, make sure to use the
|
444
|
-
|
445
|
-
full name of the custom role, e.g. `[projects/my-project|organizations/my-org]/roles/my-custom-role`.
|
446
|
-
|
215
|
+
Create a AddressGroupIamMember resource with the given unique name, props, and options.
|
447
216
|
:param str resource_name: The name of the resource.
|
448
217
|
:param AddressGroupIamMemberArgs args: The arguments to use to populate this resource's properties.
|
449
218
|
:param pulumi.ResourceOptions opts: Options for the resource.
|
@@ -509,28 +278,6 @@ class AddressGroupIamMember(pulumi.CustomResource):
|
|
509
278
|
:param str resource_name: The unique name of the resulting resource.
|
510
279
|
:param pulumi.Input[str] id: The unique provider ID of the resource to lookup.
|
511
280
|
:param pulumi.ResourceOptions opts: Options for the resource.
|
512
|
-
:param pulumi.Input[str] etag: (Computed) The etag of the IAM policy.
|
513
|
-
:param pulumi.Input[str] location: The location of the gateway security policy.
|
514
|
-
Used to find the parent resource to bind the IAM policy to. If not specified,
|
515
|
-
the value will be parsed from the identifier of the parent resource. If no location is provided in the parent identifier and no
|
516
|
-
location is specified, it is taken from the provider configuration.
|
517
|
-
:param pulumi.Input[str] member: Identities that will be granted the privilege in `role`.
|
518
|
-
Each entry can have one of the following values:
|
519
|
-
* **allUsers**: A special identifier that represents anyone who is on the internet; with or without a Google account.
|
520
|
-
* **allAuthenticatedUsers**: A special identifier that represents anyone who is authenticated with a Google account or a service account.
|
521
|
-
* **user:{emailid}**: An email address that represents a specific Google account. For example, alice@gmail.com or joe@example.com.
|
522
|
-
* **serviceAccount:{emailid}**: An email address that represents a service account. For example, my-other-app@appspot.gserviceaccount.com.
|
523
|
-
* **group:{emailid}**: An email address that represents a Google group. For example, admins@example.com.
|
524
|
-
* **domain:{domain}**: A G Suite domain (primary, instead of alias) name that represents all the users of that domain. For example, google.com or example.com.
|
525
|
-
* **projectOwner:projectid**: Owners of the given project. For example, "projectOwner:my-example-project"
|
526
|
-
* **projectEditor:projectid**: Editors of the given project. For example, "projectEditor:my-example-project"
|
527
|
-
* **projectViewer:projectid**: Viewers of the given project. For example, "projectViewer:my-example-project"
|
528
|
-
:param pulumi.Input[str] name: Used to find the parent resource to bind the IAM policy to
|
529
|
-
:param pulumi.Input[str] project: The ID of the project in which the resource belongs.
|
530
|
-
If it is not provided, the project will be parsed from the identifier of the parent resource. If no project is provided in the parent identifier and no project is specified, the provider project is used.
|
531
|
-
:param pulumi.Input[str] role: The role that should be applied. Only one
|
532
|
-
`networksecurity.AddressGroupIamBinding` can be used per role. Note that custom roles must be of the format
|
533
|
-
`[projects|organizations]/{parent-name}/roles/{role-name}`.
|
534
281
|
"""
|
535
282
|
opts = pulumi.ResourceOptions.merge(opts, pulumi.ResourceOptions(id=id))
|
536
283
|
|
@@ -553,64 +300,30 @@ class AddressGroupIamMember(pulumi.CustomResource):
|
|
553
300
|
@property
|
554
301
|
@pulumi.getter
|
555
302
|
def etag(self) -> pulumi.Output[str]:
|
556
|
-
"""
|
557
|
-
(Computed) The etag of the IAM policy.
|
558
|
-
"""
|
559
303
|
return pulumi.get(self, "etag")
|
560
304
|
|
561
305
|
@property
|
562
306
|
@pulumi.getter
|
563
307
|
def location(self) -> pulumi.Output[str]:
|
564
|
-
"""
|
565
|
-
The location of the gateway security policy.
|
566
|
-
Used to find the parent resource to bind the IAM policy to. If not specified,
|
567
|
-
the value will be parsed from the identifier of the parent resource. If no location is provided in the parent identifier and no
|
568
|
-
location is specified, it is taken from the provider configuration.
|
569
|
-
"""
|
570
308
|
return pulumi.get(self, "location")
|
571
309
|
|
572
310
|
@property
|
573
311
|
@pulumi.getter
|
574
312
|
def member(self) -> pulumi.Output[str]:
|
575
|
-
"""
|
576
|
-
Identities that will be granted the privilege in `role`.
|
577
|
-
Each entry can have one of the following values:
|
578
|
-
* **allUsers**: A special identifier that represents anyone who is on the internet; with or without a Google account.
|
579
|
-
* **allAuthenticatedUsers**: A special identifier that represents anyone who is authenticated with a Google account or a service account.
|
580
|
-
* **user:{emailid}**: An email address that represents a specific Google account. For example, alice@gmail.com or joe@example.com.
|
581
|
-
* **serviceAccount:{emailid}**: An email address that represents a service account. For example, my-other-app@appspot.gserviceaccount.com.
|
582
|
-
* **group:{emailid}**: An email address that represents a Google group. For example, admins@example.com.
|
583
|
-
* **domain:{domain}**: A G Suite domain (primary, instead of alias) name that represents all the users of that domain. For example, google.com or example.com.
|
584
|
-
* **projectOwner:projectid**: Owners of the given project. For example, "projectOwner:my-example-project"
|
585
|
-
* **projectEditor:projectid**: Editors of the given project. For example, "projectEditor:my-example-project"
|
586
|
-
* **projectViewer:projectid**: Viewers of the given project. For example, "projectViewer:my-example-project"
|
587
|
-
"""
|
588
313
|
return pulumi.get(self, "member")
|
589
314
|
|
590
315
|
@property
|
591
316
|
@pulumi.getter
|
592
317
|
def name(self) -> pulumi.Output[str]:
|
593
|
-
"""
|
594
|
-
Used to find the parent resource to bind the IAM policy to
|
595
|
-
"""
|
596
318
|
return pulumi.get(self, "name")
|
597
319
|
|
598
320
|
@property
|
599
321
|
@pulumi.getter
|
600
322
|
def project(self) -> pulumi.Output[str]:
|
601
|
-
"""
|
602
|
-
The ID of the project in which the resource belongs.
|
603
|
-
If it is not provided, the project will be parsed from the identifier of the parent resource. If no project is provided in the parent identifier and no project is specified, the provider project is used.
|
604
|
-
"""
|
605
323
|
return pulumi.get(self, "project")
|
606
324
|
|
607
325
|
@property
|
608
326
|
@pulumi.getter
|
609
327
|
def role(self) -> pulumi.Output[str]:
|
610
|
-
"""
|
611
|
-
The role that should be applied. Only one
|
612
|
-
`networksecurity.AddressGroupIamBinding` can be used per role. Note that custom roles must be of the format
|
613
|
-
`[projects|organizations]/{parent-name}/roles/{role-name}`.
|
614
|
-
"""
|
615
328
|
return pulumi.get(self, "role")
|
616
329
|
|
pulumi_gcp/pulumi-plugin.json
CHANGED
@@ -286,38 +286,6 @@ class InstanceIamBinding(pulumi.CustomResource):
|
|
286
286
|
"state": "ENABLED",
|
287
287
|
}])
|
288
288
|
```
|
289
|
-
### Data Fusion Instance Psc
|
290
|
-
|
291
|
-
```python
|
292
|
-
import pulumi
|
293
|
-
import pulumi_gcp as gcp
|
294
|
-
|
295
|
-
psc = gcp.compute.Network("psc",
|
296
|
-
name="datafusion-psc-network",
|
297
|
-
auto_create_subnetworks=False)
|
298
|
-
psc_subnetwork = gcp.compute.Subnetwork("psc",
|
299
|
-
name="datafusion-psc-subnet",
|
300
|
-
region="us-central1",
|
301
|
-
network=psc.id,
|
302
|
-
ip_cidr_range="10.0.0.0/16")
|
303
|
-
psc_network_attachment = gcp.compute.NetworkAttachment("psc",
|
304
|
-
name="datafusion-psc-attachment",
|
305
|
-
region="us-central1",
|
306
|
-
connection_preference="ACCEPT_AUTOMATIC",
|
307
|
-
subnetworks=[psc_subnetwork.self_link])
|
308
|
-
psc_instance = gcp.datafusion.Instance("psc_instance",
|
309
|
-
name="psc-instance",
|
310
|
-
region="us-central1",
|
311
|
-
type="BASIC",
|
312
|
-
private_instance=True,
|
313
|
-
network_config={
|
314
|
-
"connectionType": "PRIVATE_SERVICE_CONNECT_INTERFACES",
|
315
|
-
"privateServiceConnectConfig": {
|
316
|
-
"networkAttachment": psc_network_attachment.id,
|
317
|
-
"unreachableCidrBlock": "192.168.0.0/25",
|
318
|
-
},
|
319
|
-
})
|
320
|
-
```
|
321
289
|
### Data Fusion Instance Cmek
|
322
290
|
|
323
291
|
```python
|
@@ -486,38 +454,6 @@ class InstanceIamBinding(pulumi.CustomResource):
|
|
486
454
|
"state": "ENABLED",
|
487
455
|
}])
|
488
456
|
```
|
489
|
-
### Data Fusion Instance Psc
|
490
|
-
|
491
|
-
```python
|
492
|
-
import pulumi
|
493
|
-
import pulumi_gcp as gcp
|
494
|
-
|
495
|
-
psc = gcp.compute.Network("psc",
|
496
|
-
name="datafusion-psc-network",
|
497
|
-
auto_create_subnetworks=False)
|
498
|
-
psc_subnetwork = gcp.compute.Subnetwork("psc",
|
499
|
-
name="datafusion-psc-subnet",
|
500
|
-
region="us-central1",
|
501
|
-
network=psc.id,
|
502
|
-
ip_cidr_range="10.0.0.0/16")
|
503
|
-
psc_network_attachment = gcp.compute.NetworkAttachment("psc",
|
504
|
-
name="datafusion-psc-attachment",
|
505
|
-
region="us-central1",
|
506
|
-
connection_preference="ACCEPT_AUTOMATIC",
|
507
|
-
subnetworks=[psc_subnetwork.self_link])
|
508
|
-
psc_instance = gcp.datafusion.Instance("psc_instance",
|
509
|
-
name="psc-instance",
|
510
|
-
region="us-central1",
|
511
|
-
type="BASIC",
|
512
|
-
private_instance=True,
|
513
|
-
network_config={
|
514
|
-
"connectionType": "PRIVATE_SERVICE_CONNECT_INTERFACES",
|
515
|
-
"privateServiceConnectConfig": {
|
516
|
-
"networkAttachment": psc_network_attachment.id,
|
517
|
-
"unreachableCidrBlock": "192.168.0.0/25",
|
518
|
-
},
|
519
|
-
})
|
520
|
-
```
|
521
457
|
### Data Fusion Instance Cmek
|
522
458
|
|
523
459
|
```python
|
@@ -286,38 +286,6 @@ class InstanceIamMember(pulumi.CustomResource):
|
|
286
286
|
"state": "ENABLED",
|
287
287
|
}])
|
288
288
|
```
|
289
|
-
### Data Fusion Instance Psc
|
290
|
-
|
291
|
-
```python
|
292
|
-
import pulumi
|
293
|
-
import pulumi_gcp as gcp
|
294
|
-
|
295
|
-
psc = gcp.compute.Network("psc",
|
296
|
-
name="datafusion-psc-network",
|
297
|
-
auto_create_subnetworks=False)
|
298
|
-
psc_subnetwork = gcp.compute.Subnetwork("psc",
|
299
|
-
name="datafusion-psc-subnet",
|
300
|
-
region="us-central1",
|
301
|
-
network=psc.id,
|
302
|
-
ip_cidr_range="10.0.0.0/16")
|
303
|
-
psc_network_attachment = gcp.compute.NetworkAttachment("psc",
|
304
|
-
name="datafusion-psc-attachment",
|
305
|
-
region="us-central1",
|
306
|
-
connection_preference="ACCEPT_AUTOMATIC",
|
307
|
-
subnetworks=[psc_subnetwork.self_link])
|
308
|
-
psc_instance = gcp.datafusion.Instance("psc_instance",
|
309
|
-
name="psc-instance",
|
310
|
-
region="us-central1",
|
311
|
-
type="BASIC",
|
312
|
-
private_instance=True,
|
313
|
-
network_config={
|
314
|
-
"connectionType": "PRIVATE_SERVICE_CONNECT_INTERFACES",
|
315
|
-
"privateServiceConnectConfig": {
|
316
|
-
"networkAttachment": psc_network_attachment.id,
|
317
|
-
"unreachableCidrBlock": "192.168.0.0/25",
|
318
|
-
},
|
319
|
-
})
|
320
|
-
```
|
321
289
|
### Data Fusion Instance Cmek
|
322
290
|
|
323
291
|
```python
|
@@ -486,38 +454,6 @@ class InstanceIamMember(pulumi.CustomResource):
|
|
486
454
|
"state": "ENABLED",
|
487
455
|
}])
|
488
456
|
```
|
489
|
-
### Data Fusion Instance Psc
|
490
|
-
|
491
|
-
```python
|
492
|
-
import pulumi
|
493
|
-
import pulumi_gcp as gcp
|
494
|
-
|
495
|
-
psc = gcp.compute.Network("psc",
|
496
|
-
name="datafusion-psc-network",
|
497
|
-
auto_create_subnetworks=False)
|
498
|
-
psc_subnetwork = gcp.compute.Subnetwork("psc",
|
499
|
-
name="datafusion-psc-subnet",
|
500
|
-
region="us-central1",
|
501
|
-
network=psc.id,
|
502
|
-
ip_cidr_range="10.0.0.0/16")
|
503
|
-
psc_network_attachment = gcp.compute.NetworkAttachment("psc",
|
504
|
-
name="datafusion-psc-attachment",
|
505
|
-
region="us-central1",
|
506
|
-
connection_preference="ACCEPT_AUTOMATIC",
|
507
|
-
subnetworks=[psc_subnetwork.self_link])
|
508
|
-
psc_instance = gcp.datafusion.Instance("psc_instance",
|
509
|
-
name="psc-instance",
|
510
|
-
region="us-central1",
|
511
|
-
type="BASIC",
|
512
|
-
private_instance=True,
|
513
|
-
network_config={
|
514
|
-
"connectionType": "PRIVATE_SERVICE_CONNECT_INTERFACES",
|
515
|
-
"privateServiceConnectConfig": {
|
516
|
-
"networkAttachment": psc_network_attachment.id,
|
517
|
-
"unreachableCidrBlock": "192.168.0.0/25",
|
518
|
-
},
|
519
|
-
})
|
520
|
-
```
|
521
457
|
### Data Fusion Instance Cmek
|
522
458
|
|
523
459
|
```python
|