pulumi-gcp 7.30.0__py3-none-any.whl → 7.30.0a1719513455__py3-none-any.whl
This diff represents the content of publicly available package versions that have been released to one of the supported registries. The information contained in this diff is provided for informational purposes only and reflects changes between package versions as they appear in their respective public registries.
- pulumi_gcp/__init__.py +0 -32
- pulumi_gcp/artifactregistry/get_docker_image.py +2 -2
- pulumi_gcp/bigtable/gc_policy.py +14 -68
- pulumi_gcp/cloudfunctionsv2/_inputs.py +0 -97
- pulumi_gcp/cloudfunctionsv2/function.py +0 -232
- pulumi_gcp/cloudfunctionsv2/outputs.py +1 -129
- pulumi_gcp/compute/_inputs.py +0 -622
- pulumi_gcp/compute/address.py +7 -0
- pulumi_gcp/compute/backend_service.py +14 -0
- pulumi_gcp/compute/forwarding_rule.py +21 -0
- pulumi_gcp/compute/global_forwarding_rule.py +21 -0
- pulumi_gcp/compute/managed_ssl_certificate.py +7 -0
- pulumi_gcp/compute/manged_ssl_certificate.py +7 -0
- pulumi_gcp/compute/network_attachment.py +0 -16
- pulumi_gcp/compute/outputs.py +8 -504
- pulumi_gcp/compute/region_backend_service.py +14 -0
- pulumi_gcp/compute/region_disk_iam_binding.py +95 -122
- pulumi_gcp/compute/region_disk_iam_member.py +95 -122
- pulumi_gcp/compute/region_disk_iam_policy.py +88 -115
- pulumi_gcp/compute/region_ssl_certificate.py +7 -0
- pulumi_gcp/compute/ssl_certificate.py +7 -0
- pulumi_gcp/compute/target_https_proxy.py +1 -76
- pulumi_gcp/compute/url_map.py +0 -255
- pulumi_gcp/container/aws_cluster.py +2 -2
- pulumi_gcp/container/aws_node_pool.py +2 -2
- pulumi_gcp/container/azure_client.py +2 -2
- pulumi_gcp/container/azure_cluster.py +2 -2
- pulumi_gcp/container/azure_node_pool.py +2 -2
- pulumi_gcp/datafusion/_inputs.py +11 -163
- pulumi_gcp/datafusion/instance.py +0 -64
- pulumi_gcp/datafusion/outputs.py +7 -127
- pulumi_gcp/gkebackup/restore_plan_iam_binding.py +953 -328
- pulumi_gcp/gkebackup/restore_plan_iam_member.py +953 -328
- pulumi_gcp/gkebackup/restore_plan_iam_policy.py +953 -238
- pulumi_gcp/healthcare/_inputs.py +0 -43
- pulumi_gcp/healthcare/dataset.py +0 -110
- pulumi_gcp/healthcare/outputs.py +0 -43
- pulumi_gcp/identityplatform/config.py +1 -1
- pulumi_gcp/logging/billing_account_bucket_config.py +1 -1
- pulumi_gcp/logging/folder_bucket_config.py +1 -1
- pulumi_gcp/logging/organization_bucket_config.py +1 -1
- pulumi_gcp/monitoring/_inputs.py +0 -77
- pulumi_gcp/monitoring/outputs.py +0 -63
- pulumi_gcp/networksecurity/address_group_iam_binding.py +2 -289
- pulumi_gcp/networksecurity/address_group_iam_member.py +2 -289
- pulumi_gcp/pulumi-plugin.json +1 -1
- pulumi_gcp/securitycenter/instance_iam_binding.py +0 -64
- pulumi_gcp/securitycenter/instance_iam_member.py +0 -64
- pulumi_gcp/securitycenter/instance_iam_policy.py +0 -64
- pulumi_gcp/sourcerepo/repository_iam_binding.py +83 -92
- pulumi_gcp/sourcerepo/repository_iam_member.py +83 -92
- pulumi_gcp/sourcerepo/repository_iam_policy.py +76 -85
- pulumi_gcp/storage/__init__.py +0 -5
- pulumi_gcp/storage/_inputs.py +0 -130
- pulumi_gcp/storage/outputs.py +0 -76
- pulumi_gcp/vertex/_inputs.py +3 -3
- pulumi_gcp/vertex/ai_feature_online_store.py +9 -9
- pulumi_gcp/vertex/outputs.py +2 -2
- {pulumi_gcp-7.30.0.dist-info → pulumi_gcp-7.30.0a1719513455.dist-info}/METADATA +1 -1
- {pulumi_gcp-7.30.0.dist-info → pulumi_gcp-7.30.0a1719513455.dist-info}/RECORD +62 -67
- {pulumi_gcp-7.30.0.dist-info → pulumi_gcp-7.30.0a1719513455.dist-info}/WHEEL +1 -1
- pulumi_gcp/storage/get_managed_folder_iam_policy.py +0 -115
- pulumi_gcp/storage/managed_folder.py +0 -440
- pulumi_gcp/storage/managed_folder_iam_binding.py +0 -947
- pulumi_gcp/storage/managed_folder_iam_member.py +0 -947
- pulumi_gcp/storage/managed_folder_iam_policy.py +0 -766
- {pulumi_gcp-7.30.0.dist-info → pulumi_gcp-7.30.0a1719513455.dist-info}/top_level.txt +0 -0
@@ -125,6 +125,7 @@ class RegionBackendServiceArgs:
|
|
125
125
|
instance either reported a valid weight or had
|
126
126
|
UNAVAILABLE_WEIGHT. Otherwise, Load Balancing remains
|
127
127
|
equal-weight.
|
128
|
+
|
128
129
|
This field is applicable to either:
|
129
130
|
* A regional backend service with the service_protocol set to HTTP, HTTPS, or HTTP2,
|
130
131
|
and loadBalancingScheme set to INTERNAL_MANAGED.
|
@@ -132,6 +133,7 @@ class RegionBackendServiceArgs:
|
|
132
133
|
* A regional backend service with loadBalancingScheme set to EXTERNAL (External Network
|
133
134
|
Load Balancing). Only MAGLEV and WEIGHTED_MAGLEV values are possible for External
|
134
135
|
Network Load Balancing. The default is MAGLEV.
|
136
|
+
|
135
137
|
If session_affinity is not NONE, and this field is not set to MAGLEV, WEIGHTED_MAGLEV,
|
136
138
|
or RING_HASH, session affinity settings will not take effect.
|
137
139
|
Only ROUND_ROBIN and RING_HASH are supported when the backend service is referenced
|
@@ -455,6 +457,7 @@ class RegionBackendServiceArgs:
|
|
455
457
|
instance either reported a valid weight or had
|
456
458
|
UNAVAILABLE_WEIGHT. Otherwise, Load Balancing remains
|
457
459
|
equal-weight.
|
460
|
+
|
458
461
|
This field is applicable to either:
|
459
462
|
* A regional backend service with the service_protocol set to HTTP, HTTPS, or HTTP2,
|
460
463
|
and loadBalancingScheme set to INTERNAL_MANAGED.
|
@@ -462,6 +465,7 @@ class RegionBackendServiceArgs:
|
|
462
465
|
* A regional backend service with loadBalancingScheme set to EXTERNAL (External Network
|
463
466
|
Load Balancing). Only MAGLEV and WEIGHTED_MAGLEV values are possible for External
|
464
467
|
Network Load Balancing. The default is MAGLEV.
|
468
|
+
|
465
469
|
If session_affinity is not NONE, and this field is not set to MAGLEV, WEIGHTED_MAGLEV,
|
466
470
|
or RING_HASH, session affinity settings will not take effect.
|
467
471
|
Only ROUND_ROBIN and RING_HASH are supported when the backend service is referenced
|
@@ -761,6 +765,7 @@ class _RegionBackendServiceState:
|
|
761
765
|
instance either reported a valid weight or had
|
762
766
|
UNAVAILABLE_WEIGHT. Otherwise, Load Balancing remains
|
763
767
|
equal-weight.
|
768
|
+
|
764
769
|
This field is applicable to either:
|
765
770
|
* A regional backend service with the service_protocol set to HTTP, HTTPS, or HTTP2,
|
766
771
|
and loadBalancingScheme set to INTERNAL_MANAGED.
|
@@ -768,6 +773,7 @@ class _RegionBackendServiceState:
|
|
768
773
|
* A regional backend service with loadBalancingScheme set to EXTERNAL (External Network
|
769
774
|
Load Balancing). Only MAGLEV and WEIGHTED_MAGLEV values are possible for External
|
770
775
|
Network Load Balancing. The default is MAGLEV.
|
776
|
+
|
771
777
|
If session_affinity is not NONE, and this field is not set to MAGLEV, WEIGHTED_MAGLEV,
|
772
778
|
or RING_HASH, session affinity settings will not take effect.
|
773
779
|
Only ROUND_ROBIN and RING_HASH are supported when the backend service is referenced
|
@@ -1137,6 +1143,7 @@ class _RegionBackendServiceState:
|
|
1137
1143
|
instance either reported a valid weight or had
|
1138
1144
|
UNAVAILABLE_WEIGHT. Otherwise, Load Balancing remains
|
1139
1145
|
equal-weight.
|
1146
|
+
|
1140
1147
|
This field is applicable to either:
|
1141
1148
|
* A regional backend service with the service_protocol set to HTTP, HTTPS, or HTTP2,
|
1142
1149
|
and loadBalancingScheme set to INTERNAL_MANAGED.
|
@@ -1144,6 +1151,7 @@ class _RegionBackendServiceState:
|
|
1144
1151
|
* A regional backend service with loadBalancingScheme set to EXTERNAL (External Network
|
1145
1152
|
Load Balancing). Only MAGLEV and WEIGHTED_MAGLEV values are possible for External
|
1146
1153
|
Network Load Balancing. The default is MAGLEV.
|
1154
|
+
|
1147
1155
|
If session_affinity is not NONE, and this field is not set to MAGLEV, WEIGHTED_MAGLEV,
|
1148
1156
|
or RING_HASH, session affinity settings will not take effect.
|
1149
1157
|
Only ROUND_ROBIN and RING_HASH are supported when the backend service is referenced
|
@@ -1738,6 +1746,7 @@ class RegionBackendService(pulumi.CustomResource):
|
|
1738
1746
|
instance either reported a valid weight or had
|
1739
1747
|
UNAVAILABLE_WEIGHT. Otherwise, Load Balancing remains
|
1740
1748
|
equal-weight.
|
1749
|
+
|
1741
1750
|
This field is applicable to either:
|
1742
1751
|
* A regional backend service with the service_protocol set to HTTP, HTTPS, or HTTP2,
|
1743
1752
|
and loadBalancingScheme set to INTERNAL_MANAGED.
|
@@ -1745,6 +1754,7 @@ class RegionBackendService(pulumi.CustomResource):
|
|
1745
1754
|
* A regional backend service with loadBalancingScheme set to EXTERNAL (External Network
|
1746
1755
|
Load Balancing). Only MAGLEV and WEIGHTED_MAGLEV values are possible for External
|
1747
1756
|
Network Load Balancing. The default is MAGLEV.
|
1757
|
+
|
1748
1758
|
If session_affinity is not NONE, and this field is not set to MAGLEV, WEIGHTED_MAGLEV,
|
1749
1759
|
or RING_HASH, session affinity settings will not take effect.
|
1750
1760
|
Only ROUND_ROBIN and RING_HASH are supported when the backend service is referenced
|
@@ -2293,6 +2303,7 @@ class RegionBackendService(pulumi.CustomResource):
|
|
2293
2303
|
instance either reported a valid weight or had
|
2294
2304
|
UNAVAILABLE_WEIGHT. Otherwise, Load Balancing remains
|
2295
2305
|
equal-weight.
|
2306
|
+
|
2296
2307
|
This field is applicable to either:
|
2297
2308
|
* A regional backend service with the service_protocol set to HTTP, HTTPS, or HTTP2,
|
2298
2309
|
and loadBalancingScheme set to INTERNAL_MANAGED.
|
@@ -2300,6 +2311,7 @@ class RegionBackendService(pulumi.CustomResource):
|
|
2300
2311
|
* A regional backend service with loadBalancingScheme set to EXTERNAL (External Network
|
2301
2312
|
Load Balancing). Only MAGLEV and WEIGHTED_MAGLEV values are possible for External
|
2302
2313
|
Network Load Balancing. The default is MAGLEV.
|
2314
|
+
|
2303
2315
|
If session_affinity is not NONE, and this field is not set to MAGLEV, WEIGHTED_MAGLEV,
|
2304
2316
|
or RING_HASH, session affinity settings will not take effect.
|
2305
2317
|
Only ROUND_ROBIN and RING_HASH are supported when the backend service is referenced
|
@@ -2580,6 +2592,7 @@ class RegionBackendService(pulumi.CustomResource):
|
|
2580
2592
|
instance either reported a valid weight or had
|
2581
2593
|
UNAVAILABLE_WEIGHT. Otherwise, Load Balancing remains
|
2582
2594
|
equal-weight.
|
2595
|
+
|
2583
2596
|
This field is applicable to either:
|
2584
2597
|
* A regional backend service with the service_protocol set to HTTP, HTTPS, or HTTP2,
|
2585
2598
|
and loadBalancingScheme set to INTERNAL_MANAGED.
|
@@ -2587,6 +2600,7 @@ class RegionBackendService(pulumi.CustomResource):
|
|
2587
2600
|
* A regional backend service with loadBalancingScheme set to EXTERNAL (External Network
|
2588
2601
|
Load Balancing). Only MAGLEV and WEIGHTED_MAGLEV values are possible for External
|
2589
2602
|
Network Load Balancing. The default is MAGLEV.
|
2603
|
+
|
2590
2604
|
If session_affinity is not NONE, and this field is not set to MAGLEV, WEIGHTED_MAGLEV,
|
2591
2605
|
or RING_HASH, session affinity settings will not take effect.
|
2592
2606
|
Only ROUND_ROBIN and RING_HASH are supported when the backend service is referenced
|
@@ -41,14 +41,11 @@ class RegionDiskIamBindingArgs:
|
|
41
41
|
* **projectEditor:projectid**: Editors of the given project. For example, "projectEditor:my-example-project"
|
42
42
|
* **projectViewer:projectid**: Viewers of the given project. For example, "projectViewer:my-example-project"
|
43
43
|
:param pulumi.Input[str] role: The role that should be applied. Only one
|
44
|
-
`compute.
|
44
|
+
`compute.DiskIamBinding` can be used per role. Note that custom roles must be of the format
|
45
45
|
`[projects|organizations]/{parent-name}/roles/{role-name}`.
|
46
46
|
:param pulumi.Input[str] name: Used to find the parent resource to bind the IAM policy to
|
47
47
|
:param pulumi.Input[str] project: The ID of the project in which the resource belongs.
|
48
48
|
If it is not provided, the project will be parsed from the identifier of the parent resource. If no project is provided in the parent identifier and no project is specified, the provider project is used.
|
49
|
-
:param pulumi.Input[str] region: A reference to the region where the disk resides. Used to find the parent resource to bind the IAM policy to. If not specified,
|
50
|
-
the value will be parsed from the identifier of the parent resource. If no region is provided in the parent identifier and no
|
51
|
-
region is specified, it is taken from the provider configuration.
|
52
49
|
"""
|
53
50
|
pulumi.set(__self__, "members", members)
|
54
51
|
pulumi.set(__self__, "role", role)
|
@@ -88,7 +85,7 @@ class RegionDiskIamBindingArgs:
|
|
88
85
|
def role(self) -> pulumi.Input[str]:
|
89
86
|
"""
|
90
87
|
The role that should be applied. Only one
|
91
|
-
`compute.
|
88
|
+
`compute.DiskIamBinding` can be used per role. Note that custom roles must be of the format
|
92
89
|
`[projects|organizations]/{parent-name}/roles/{role-name}`.
|
93
90
|
"""
|
94
91
|
return pulumi.get(self, "role")
|
@@ -134,11 +131,6 @@ class RegionDiskIamBindingArgs:
|
|
134
131
|
@property
|
135
132
|
@pulumi.getter
|
136
133
|
def region(self) -> Optional[pulumi.Input[str]]:
|
137
|
-
"""
|
138
|
-
A reference to the region where the disk resides. Used to find the parent resource to bind the IAM policy to. If not specified,
|
139
|
-
the value will be parsed from the identifier of the parent resource. If no region is provided in the parent identifier and no
|
140
|
-
region is specified, it is taken from the provider configuration.
|
141
|
-
"""
|
142
134
|
return pulumi.get(self, "region")
|
143
135
|
|
144
136
|
@region.setter
|
@@ -173,11 +165,8 @@ class _RegionDiskIamBindingState:
|
|
173
165
|
:param pulumi.Input[str] name: Used to find the parent resource to bind the IAM policy to
|
174
166
|
:param pulumi.Input[str] project: The ID of the project in which the resource belongs.
|
175
167
|
If it is not provided, the project will be parsed from the identifier of the parent resource. If no project is provided in the parent identifier and no project is specified, the provider project is used.
|
176
|
-
:param pulumi.Input[str] region: A reference to the region where the disk resides. Used to find the parent resource to bind the IAM policy to. If not specified,
|
177
|
-
the value will be parsed from the identifier of the parent resource. If no region is provided in the parent identifier and no
|
178
|
-
region is specified, it is taken from the provider configuration.
|
179
168
|
:param pulumi.Input[str] role: The role that should be applied. Only one
|
180
|
-
`compute.
|
169
|
+
`compute.DiskIamBinding` can be used per role. Note that custom roles must be of the format
|
181
170
|
`[projects|organizations]/{parent-name}/roles/{role-name}`.
|
182
171
|
"""
|
183
172
|
if condition is not None:
|
@@ -266,11 +255,6 @@ class _RegionDiskIamBindingState:
|
|
266
255
|
@property
|
267
256
|
@pulumi.getter
|
268
257
|
def region(self) -> Optional[pulumi.Input[str]]:
|
269
|
-
"""
|
270
|
-
A reference to the region where the disk resides. Used to find the parent resource to bind the IAM policy to. If not specified,
|
271
|
-
the value will be parsed from the identifier of the parent resource. If no region is provided in the parent identifier and no
|
272
|
-
region is specified, it is taken from the provider configuration.
|
273
|
-
"""
|
274
258
|
return pulumi.get(self, "region")
|
275
259
|
|
276
260
|
@region.setter
|
@@ -282,7 +266,7 @@ class _RegionDiskIamBindingState:
|
|
282
266
|
def role(self) -> Optional[pulumi.Input[str]]:
|
283
267
|
"""
|
284
268
|
The role that should be applied. Only one
|
285
|
-
`compute.
|
269
|
+
`compute.DiskIamBinding` can be used per role. Note that custom roles must be of the format
|
286
270
|
`[projects|organizations]/{parent-name}/roles/{role-name}`.
|
287
271
|
"""
|
288
272
|
return pulumi.get(self, "role")
|
@@ -305,21 +289,21 @@ class RegionDiskIamBinding(pulumi.CustomResource):
|
|
305
289
|
role: Optional[pulumi.Input[str]] = None,
|
306
290
|
__props__=None):
|
307
291
|
"""
|
308
|
-
Three different resources help you manage your IAM policy for Compute Engine
|
292
|
+
Three different resources help you manage your IAM policy for Compute Engine Disk. Each of these resources serves a different use case:
|
309
293
|
|
310
|
-
* `compute.
|
311
|
-
* `compute.
|
312
|
-
* `compute.
|
294
|
+
* `compute.DiskIamPolicy`: Authoritative. Sets the IAM policy for the disk and replaces any existing policy already attached.
|
295
|
+
* `compute.DiskIamBinding`: Authoritative for a given role. Updates the IAM policy to grant a role to a list of members. Other roles within the IAM policy for the disk are preserved.
|
296
|
+
* `compute.DiskIamMember`: Non-authoritative. Updates the IAM policy to grant a role to a new member. Other members for the role for the disk are preserved.
|
313
297
|
|
314
298
|
A data source can be used to retrieve policy data in advent you do not need creation
|
315
299
|
|
316
|
-
* `compute.
|
300
|
+
* `compute.DiskIamPolicy`: Retrieves the IAM policy for the disk
|
317
301
|
|
318
|
-
> **Note:** `compute.
|
302
|
+
> **Note:** `compute.DiskIamPolicy` **cannot** be used in conjunction with `compute.DiskIamBinding` and `compute.DiskIamMember` or they will fight over what your policy should be.
|
319
303
|
|
320
|
-
> **Note:** `compute.
|
304
|
+
> **Note:** `compute.DiskIamBinding` resources **can be** used in conjunction with `compute.DiskIamMember` resources **only if** they do not grant privilege to the same role.
|
321
305
|
|
322
|
-
## compute.
|
306
|
+
## compute.DiskIamPolicy
|
323
307
|
|
324
308
|
```python
|
325
309
|
import pulumi
|
@@ -329,42 +313,42 @@ class RegionDiskIamBinding(pulumi.CustomResource):
|
|
329
313
|
"role": "roles/viewer",
|
330
314
|
"members": ["user:jane@example.com"],
|
331
315
|
}])
|
332
|
-
policy = gcp.compute.
|
333
|
-
project=
|
334
|
-
|
335
|
-
name=
|
316
|
+
policy = gcp.compute.DiskIamPolicy("policy",
|
317
|
+
project=default["project"],
|
318
|
+
zone=default["zone"],
|
319
|
+
name=default["name"],
|
336
320
|
policy_data=admin.policy_data)
|
337
321
|
```
|
338
322
|
|
339
|
-
## compute.
|
323
|
+
## compute.DiskIamBinding
|
340
324
|
|
341
325
|
```python
|
342
326
|
import pulumi
|
343
327
|
import pulumi_gcp as gcp
|
344
328
|
|
345
|
-
binding = gcp.compute.
|
346
|
-
project=
|
347
|
-
|
348
|
-
name=
|
329
|
+
binding = gcp.compute.DiskIamBinding("binding",
|
330
|
+
project=default["project"],
|
331
|
+
zone=default["zone"],
|
332
|
+
name=default["name"],
|
349
333
|
role="roles/viewer",
|
350
334
|
members=["user:jane@example.com"])
|
351
335
|
```
|
352
336
|
|
353
|
-
## compute.
|
337
|
+
## compute.DiskIamMember
|
354
338
|
|
355
339
|
```python
|
356
340
|
import pulumi
|
357
341
|
import pulumi_gcp as gcp
|
358
342
|
|
359
|
-
member = gcp.compute.
|
360
|
-
project=
|
361
|
-
|
362
|
-
name=
|
343
|
+
member = gcp.compute.DiskIamMember("member",
|
344
|
+
project=default["project"],
|
345
|
+
zone=default["zone"],
|
346
|
+
name=default["name"],
|
363
347
|
role="roles/viewer",
|
364
348
|
member="user:jane@example.com")
|
365
349
|
```
|
366
350
|
|
367
|
-
## compute.
|
351
|
+
## compute.DiskIamPolicy
|
368
352
|
|
369
353
|
```python
|
370
354
|
import pulumi
|
@@ -374,37 +358,37 @@ class RegionDiskIamBinding(pulumi.CustomResource):
|
|
374
358
|
"role": "roles/viewer",
|
375
359
|
"members": ["user:jane@example.com"],
|
376
360
|
}])
|
377
|
-
policy = gcp.compute.
|
378
|
-
project=
|
379
|
-
|
380
|
-
name=
|
361
|
+
policy = gcp.compute.DiskIamPolicy("policy",
|
362
|
+
project=default["project"],
|
363
|
+
zone=default["zone"],
|
364
|
+
name=default["name"],
|
381
365
|
policy_data=admin.policy_data)
|
382
366
|
```
|
383
367
|
|
384
|
-
## compute.
|
368
|
+
## compute.DiskIamBinding
|
385
369
|
|
386
370
|
```python
|
387
371
|
import pulumi
|
388
372
|
import pulumi_gcp as gcp
|
389
373
|
|
390
|
-
binding = gcp.compute.
|
391
|
-
project=
|
392
|
-
|
393
|
-
name=
|
374
|
+
binding = gcp.compute.DiskIamBinding("binding",
|
375
|
+
project=default["project"],
|
376
|
+
zone=default["zone"],
|
377
|
+
name=default["name"],
|
394
378
|
role="roles/viewer",
|
395
379
|
members=["user:jane@example.com"])
|
396
380
|
```
|
397
381
|
|
398
|
-
## compute.
|
382
|
+
## compute.DiskIamMember
|
399
383
|
|
400
384
|
```python
|
401
385
|
import pulumi
|
402
386
|
import pulumi_gcp as gcp
|
403
387
|
|
404
|
-
member = gcp.compute.
|
405
|
-
project=
|
406
|
-
|
407
|
-
name=
|
388
|
+
member = gcp.compute.DiskIamMember("member",
|
389
|
+
project=default["project"],
|
390
|
+
zone=default["zone"],
|
391
|
+
name=default["name"],
|
408
392
|
role="roles/viewer",
|
409
393
|
member="user:jane@example.com")
|
410
394
|
```
|
@@ -413,34 +397,34 @@ class RegionDiskIamBinding(pulumi.CustomResource):
|
|
413
397
|
|
414
398
|
For all import syntaxes, the "resource in question" can take any of the following forms:
|
415
399
|
|
416
|
-
* projects/{{project}}/
|
400
|
+
* projects/{{project}}/zones/{{zone}}/disks/{{name}}
|
417
401
|
|
418
|
-
* {{project}}/{{
|
402
|
+
* {{project}}/{{zone}}/{{name}}
|
419
403
|
|
420
|
-
* {{
|
404
|
+
* {{zone}}/{{name}}
|
421
405
|
|
422
406
|
* {{name}}
|
423
407
|
|
424
408
|
Any variables not passed in the import command will be taken from the provider configuration.
|
425
409
|
|
426
|
-
Compute Engine
|
410
|
+
Compute Engine disk IAM resources can be imported using the resource identifiers, role, and member.
|
427
411
|
|
428
412
|
IAM member imports use space-delimited identifiers: the resource in question, the role, and the member identity, e.g.
|
429
413
|
|
430
414
|
```sh
|
431
|
-
$ pulumi import gcp:compute/regionDiskIamBinding:RegionDiskIamBinding editor "projects/{{project}}/
|
415
|
+
$ pulumi import gcp:compute/regionDiskIamBinding:RegionDiskIamBinding editor "projects/{{project}}/zones/{{zone}}/disks/{{disk}} roles/viewer user:jane@example.com"
|
432
416
|
```
|
433
417
|
|
434
418
|
IAM binding imports use space-delimited identifiers: the resource in question and the role, e.g.
|
435
419
|
|
436
420
|
```sh
|
437
|
-
$ pulumi import gcp:compute/regionDiskIamBinding:RegionDiskIamBinding editor "projects/{{project}}/
|
421
|
+
$ pulumi import gcp:compute/regionDiskIamBinding:RegionDiskIamBinding editor "projects/{{project}}/zones/{{zone}}/disks/{{disk}} roles/viewer"
|
438
422
|
```
|
439
423
|
|
440
424
|
IAM policy imports use the identifier of the resource in question, e.g.
|
441
425
|
|
442
426
|
```sh
|
443
|
-
$ pulumi import gcp:compute/regionDiskIamBinding:RegionDiskIamBinding editor projects/{{project}}/
|
427
|
+
$ pulumi import gcp:compute/regionDiskIamBinding:RegionDiskIamBinding editor projects/{{project}}/zones/{{zone}}/disks/{{disk}}
|
444
428
|
```
|
445
429
|
|
446
430
|
-> **Custom Roles**: If you're importing a IAM resource with a custom role, make sure to use the
|
@@ -463,11 +447,8 @@ class RegionDiskIamBinding(pulumi.CustomResource):
|
|
463
447
|
:param pulumi.Input[str] name: Used to find the parent resource to bind the IAM policy to
|
464
448
|
:param pulumi.Input[str] project: The ID of the project in which the resource belongs.
|
465
449
|
If it is not provided, the project will be parsed from the identifier of the parent resource. If no project is provided in the parent identifier and no project is specified, the provider project is used.
|
466
|
-
:param pulumi.Input[str] region: A reference to the region where the disk resides. Used to find the parent resource to bind the IAM policy to. If not specified,
|
467
|
-
the value will be parsed from the identifier of the parent resource. If no region is provided in the parent identifier and no
|
468
|
-
region is specified, it is taken from the provider configuration.
|
469
450
|
:param pulumi.Input[str] role: The role that should be applied. Only one
|
470
|
-
`compute.
|
451
|
+
`compute.DiskIamBinding` can be used per role. Note that custom roles must be of the format
|
471
452
|
`[projects|organizations]/{parent-name}/roles/{role-name}`.
|
472
453
|
"""
|
473
454
|
...
|
@@ -477,21 +458,21 @@ class RegionDiskIamBinding(pulumi.CustomResource):
|
|
477
458
|
args: RegionDiskIamBindingArgs,
|
478
459
|
opts: Optional[pulumi.ResourceOptions] = None):
|
479
460
|
"""
|
480
|
-
Three different resources help you manage your IAM policy for Compute Engine
|
461
|
+
Three different resources help you manage your IAM policy for Compute Engine Disk. Each of these resources serves a different use case:
|
481
462
|
|
482
|
-
* `compute.
|
483
|
-
* `compute.
|
484
|
-
* `compute.
|
463
|
+
* `compute.DiskIamPolicy`: Authoritative. Sets the IAM policy for the disk and replaces any existing policy already attached.
|
464
|
+
* `compute.DiskIamBinding`: Authoritative for a given role. Updates the IAM policy to grant a role to a list of members. Other roles within the IAM policy for the disk are preserved.
|
465
|
+
* `compute.DiskIamMember`: Non-authoritative. Updates the IAM policy to grant a role to a new member. Other members for the role for the disk are preserved.
|
485
466
|
|
486
467
|
A data source can be used to retrieve policy data in advent you do not need creation
|
487
468
|
|
488
|
-
* `compute.
|
469
|
+
* `compute.DiskIamPolicy`: Retrieves the IAM policy for the disk
|
489
470
|
|
490
|
-
> **Note:** `compute.
|
471
|
+
> **Note:** `compute.DiskIamPolicy` **cannot** be used in conjunction with `compute.DiskIamBinding` and `compute.DiskIamMember` or they will fight over what your policy should be.
|
491
472
|
|
492
|
-
> **Note:** `compute.
|
473
|
+
> **Note:** `compute.DiskIamBinding` resources **can be** used in conjunction with `compute.DiskIamMember` resources **only if** they do not grant privilege to the same role.
|
493
474
|
|
494
|
-
## compute.
|
475
|
+
## compute.DiskIamPolicy
|
495
476
|
|
496
477
|
```python
|
497
478
|
import pulumi
|
@@ -501,42 +482,42 @@ class RegionDiskIamBinding(pulumi.CustomResource):
|
|
501
482
|
"role": "roles/viewer",
|
502
483
|
"members": ["user:jane@example.com"],
|
503
484
|
}])
|
504
|
-
policy = gcp.compute.
|
505
|
-
project=
|
506
|
-
|
507
|
-
name=
|
485
|
+
policy = gcp.compute.DiskIamPolicy("policy",
|
486
|
+
project=default["project"],
|
487
|
+
zone=default["zone"],
|
488
|
+
name=default["name"],
|
508
489
|
policy_data=admin.policy_data)
|
509
490
|
```
|
510
491
|
|
511
|
-
## compute.
|
492
|
+
## compute.DiskIamBinding
|
512
493
|
|
513
494
|
```python
|
514
495
|
import pulumi
|
515
496
|
import pulumi_gcp as gcp
|
516
497
|
|
517
|
-
binding = gcp.compute.
|
518
|
-
project=
|
519
|
-
|
520
|
-
name=
|
498
|
+
binding = gcp.compute.DiskIamBinding("binding",
|
499
|
+
project=default["project"],
|
500
|
+
zone=default["zone"],
|
501
|
+
name=default["name"],
|
521
502
|
role="roles/viewer",
|
522
503
|
members=["user:jane@example.com"])
|
523
504
|
```
|
524
505
|
|
525
|
-
## compute.
|
506
|
+
## compute.DiskIamMember
|
526
507
|
|
527
508
|
```python
|
528
509
|
import pulumi
|
529
510
|
import pulumi_gcp as gcp
|
530
511
|
|
531
|
-
member = gcp.compute.
|
532
|
-
project=
|
533
|
-
|
534
|
-
name=
|
512
|
+
member = gcp.compute.DiskIamMember("member",
|
513
|
+
project=default["project"],
|
514
|
+
zone=default["zone"],
|
515
|
+
name=default["name"],
|
535
516
|
role="roles/viewer",
|
536
517
|
member="user:jane@example.com")
|
537
518
|
```
|
538
519
|
|
539
|
-
## compute.
|
520
|
+
## compute.DiskIamPolicy
|
540
521
|
|
541
522
|
```python
|
542
523
|
import pulumi
|
@@ -546,37 +527,37 @@ class RegionDiskIamBinding(pulumi.CustomResource):
|
|
546
527
|
"role": "roles/viewer",
|
547
528
|
"members": ["user:jane@example.com"],
|
548
529
|
}])
|
549
|
-
policy = gcp.compute.
|
550
|
-
project=
|
551
|
-
|
552
|
-
name=
|
530
|
+
policy = gcp.compute.DiskIamPolicy("policy",
|
531
|
+
project=default["project"],
|
532
|
+
zone=default["zone"],
|
533
|
+
name=default["name"],
|
553
534
|
policy_data=admin.policy_data)
|
554
535
|
```
|
555
536
|
|
556
|
-
## compute.
|
537
|
+
## compute.DiskIamBinding
|
557
538
|
|
558
539
|
```python
|
559
540
|
import pulumi
|
560
541
|
import pulumi_gcp as gcp
|
561
542
|
|
562
|
-
binding = gcp.compute.
|
563
|
-
project=
|
564
|
-
|
565
|
-
name=
|
543
|
+
binding = gcp.compute.DiskIamBinding("binding",
|
544
|
+
project=default["project"],
|
545
|
+
zone=default["zone"],
|
546
|
+
name=default["name"],
|
566
547
|
role="roles/viewer",
|
567
548
|
members=["user:jane@example.com"])
|
568
549
|
```
|
569
550
|
|
570
|
-
## compute.
|
551
|
+
## compute.DiskIamMember
|
571
552
|
|
572
553
|
```python
|
573
554
|
import pulumi
|
574
555
|
import pulumi_gcp as gcp
|
575
556
|
|
576
|
-
member = gcp.compute.
|
577
|
-
project=
|
578
|
-
|
579
|
-
name=
|
557
|
+
member = gcp.compute.DiskIamMember("member",
|
558
|
+
project=default["project"],
|
559
|
+
zone=default["zone"],
|
560
|
+
name=default["name"],
|
580
561
|
role="roles/viewer",
|
581
562
|
member="user:jane@example.com")
|
582
563
|
```
|
@@ -585,34 +566,34 @@ class RegionDiskIamBinding(pulumi.CustomResource):
|
|
585
566
|
|
586
567
|
For all import syntaxes, the "resource in question" can take any of the following forms:
|
587
568
|
|
588
|
-
* projects/{{project}}/
|
569
|
+
* projects/{{project}}/zones/{{zone}}/disks/{{name}}
|
589
570
|
|
590
|
-
* {{project}}/{{
|
571
|
+
* {{project}}/{{zone}}/{{name}}
|
591
572
|
|
592
|
-
* {{
|
573
|
+
* {{zone}}/{{name}}
|
593
574
|
|
594
575
|
* {{name}}
|
595
576
|
|
596
577
|
Any variables not passed in the import command will be taken from the provider configuration.
|
597
578
|
|
598
|
-
Compute Engine
|
579
|
+
Compute Engine disk IAM resources can be imported using the resource identifiers, role, and member.
|
599
580
|
|
600
581
|
IAM member imports use space-delimited identifiers: the resource in question, the role, and the member identity, e.g.
|
601
582
|
|
602
583
|
```sh
|
603
|
-
$ pulumi import gcp:compute/regionDiskIamBinding:RegionDiskIamBinding editor "projects/{{project}}/
|
584
|
+
$ pulumi import gcp:compute/regionDiskIamBinding:RegionDiskIamBinding editor "projects/{{project}}/zones/{{zone}}/disks/{{disk}} roles/viewer user:jane@example.com"
|
604
585
|
```
|
605
586
|
|
606
587
|
IAM binding imports use space-delimited identifiers: the resource in question and the role, e.g.
|
607
588
|
|
608
589
|
```sh
|
609
|
-
$ pulumi import gcp:compute/regionDiskIamBinding:RegionDiskIamBinding editor "projects/{{project}}/
|
590
|
+
$ pulumi import gcp:compute/regionDiskIamBinding:RegionDiskIamBinding editor "projects/{{project}}/zones/{{zone}}/disks/{{disk}} roles/viewer"
|
610
591
|
```
|
611
592
|
|
612
593
|
IAM policy imports use the identifier of the resource in question, e.g.
|
613
594
|
|
614
595
|
```sh
|
615
|
-
$ pulumi import gcp:compute/regionDiskIamBinding:RegionDiskIamBinding editor projects/{{project}}/
|
596
|
+
$ pulumi import gcp:compute/regionDiskIamBinding:RegionDiskIamBinding editor projects/{{project}}/zones/{{zone}}/disks/{{disk}}
|
616
597
|
```
|
617
598
|
|
618
599
|
-> **Custom Roles**: If you're importing a IAM resource with a custom role, make sure to use the
|
@@ -699,11 +680,8 @@ class RegionDiskIamBinding(pulumi.CustomResource):
|
|
699
680
|
:param pulumi.Input[str] name: Used to find the parent resource to bind the IAM policy to
|
700
681
|
:param pulumi.Input[str] project: The ID of the project in which the resource belongs.
|
701
682
|
If it is not provided, the project will be parsed from the identifier of the parent resource. If no project is provided in the parent identifier and no project is specified, the provider project is used.
|
702
|
-
:param pulumi.Input[str] region: A reference to the region where the disk resides. Used to find the parent resource to bind the IAM policy to. If not specified,
|
703
|
-
the value will be parsed from the identifier of the parent resource. If no region is provided in the parent identifier and no
|
704
|
-
region is specified, it is taken from the provider configuration.
|
705
683
|
:param pulumi.Input[str] role: The role that should be applied. Only one
|
706
|
-
`compute.
|
684
|
+
`compute.DiskIamBinding` can be used per role. Note that custom roles must be of the format
|
707
685
|
`[projects|organizations]/{parent-name}/roles/{role-name}`.
|
708
686
|
"""
|
709
687
|
opts = pulumi.ResourceOptions.merge(opts, pulumi.ResourceOptions(id=id))
|
@@ -770,11 +748,6 @@ class RegionDiskIamBinding(pulumi.CustomResource):
|
|
770
748
|
@property
|
771
749
|
@pulumi.getter
|
772
750
|
def region(self) -> pulumi.Output[str]:
|
773
|
-
"""
|
774
|
-
A reference to the region where the disk resides. Used to find the parent resource to bind the IAM policy to. If not specified,
|
775
|
-
the value will be parsed from the identifier of the parent resource. If no region is provided in the parent identifier and no
|
776
|
-
region is specified, it is taken from the provider configuration.
|
777
|
-
"""
|
778
751
|
return pulumi.get(self, "region")
|
779
752
|
|
780
753
|
@property
|
@@ -782,7 +755,7 @@ class RegionDiskIamBinding(pulumi.CustomResource):
|
|
782
755
|
def role(self) -> pulumi.Output[str]:
|
783
756
|
"""
|
784
757
|
The role that should be applied. Only one
|
785
|
-
`compute.
|
758
|
+
`compute.DiskIamBinding` can be used per role. Note that custom roles must be of the format
|
786
759
|
`[projects|organizations]/{parent-name}/roles/{role-name}`.
|
787
760
|
"""
|
788
761
|
return pulumi.get(self, "role")
|