pulumi-gcp 8.42.0a1756925793__py3-none-any.whl → 9.0.0a1__py3-none-any.whl
This diff represents the content of publicly available package versions that have been released to one of the supported registries. The information contained in this diff is provided for informational purposes only and reflects changes between package versions as they appear in their respective public registries.
- pulumi_gcp/__init__.py +35 -48
- pulumi_gcp/alloydb/backup.py +8 -4
- pulumi_gcp/alloydb/cluster.py +56 -10
- pulumi_gcp/alloydb/get_cluster.py +12 -1
- pulumi_gcp/alloydb/instance.py +10 -4
- pulumi_gcp/alloydb/user.py +8 -4
- pulumi_gcp/apigee/_inputs.py +151 -108
- pulumi_gcp/apigee/keystores_aliases_key_cert_file.py +52 -40
- pulumi_gcp/apigee/outputs.py +92 -88
- pulumi_gcp/artifactregistry/__init__.py +1 -0
- pulumi_gcp/artifactregistry/_inputs.py +0 -12
- pulumi_gcp/artifactregistry/get_npm_package.py +251 -0
- pulumi_gcp/artifactregistry/outputs.py +8 -16
- pulumi_gcp/beyondcorp/__init__.py +0 -5
- pulumi_gcp/beyondcorp/_inputs.py +0 -312
- pulumi_gcp/beyondcorp/outputs.py +0 -200
- pulumi_gcp/bigquery/_inputs.py +114 -4
- pulumi_gcp/bigquery/app_profile.py +52 -19
- pulumi_gcp/bigquery/dataset_access.py +8 -4
- pulumi_gcp/bigquery/outputs.py +75 -5
- pulumi_gcp/bigquery/table.py +21 -7
- pulumi_gcp/bigtable/app_profile.py +50 -15
- pulumi_gcp/bigtable/get_table_iam_policy.py +16 -18
- pulumi_gcp/bigtable/table.py +42 -42
- pulumi_gcp/bigtable/table_iam_binding.py +43 -43
- pulumi_gcp/bigtable/table_iam_member.py +43 -43
- pulumi_gcp/bigtable/table_iam_policy.py +43 -43
- pulumi_gcp/billing/_inputs.py +0 -6
- pulumi_gcp/billing/outputs.py +0 -4
- pulumi_gcp/certificatemanager/__init__.py +1 -0
- pulumi_gcp/certificatemanager/get_dns_authorization.py +229 -0
- pulumi_gcp/certificatemanager/outputs.py +41 -0
- pulumi_gcp/cloudbuild/_inputs.py +289 -45
- pulumi_gcp/cloudbuild/bitbucket_server_config.py +2 -6
- pulumi_gcp/cloudbuild/get_trigger.py +12 -1
- pulumi_gcp/cloudbuild/outputs.py +366 -30
- pulumi_gcp/cloudbuild/trigger.py +156 -0
- pulumi_gcp/cloudbuild/worker_pool.py +23 -34
- pulumi_gcp/cloudfunctions/function.py +8 -4
- pulumi_gcp/cloudfunctionsv2/_inputs.py +23 -21
- pulumi_gcp/cloudfunctionsv2/outputs.py +17 -16
- pulumi_gcp/cloudrunv2/_inputs.py +23 -26
- pulumi_gcp/cloudrunv2/outputs.py +28 -30
- pulumi_gcp/cloudrunv2/service.py +18 -12
- pulumi_gcp/cloudtasks/queue.py +98 -2
- pulumi_gcp/colab/_inputs.py +1 -114
- pulumi_gcp/colab/outputs.py +1 -106
- pulumi_gcp/composer/environment.py +49 -28
- pulumi_gcp/compute/_inputs.py +80 -0
- pulumi_gcp/compute/backend_bucket.py +54 -0
- pulumi_gcp/compute/backend_service.py +54 -0
- pulumi_gcp/compute/get_backend_bucket.py +12 -1
- pulumi_gcp/compute/get_backend_service.py +12 -1
- pulumi_gcp/compute/instance_from_machine_image.py +110 -75
- pulumi_gcp/compute/instance_from_template.py +110 -75
- pulumi_gcp/compute/instance_group_manager.py +14 -7
- pulumi_gcp/compute/instance_template.py +14 -7
- pulumi_gcp/compute/interconnect.py +8 -4
- pulumi_gcp/compute/network_peering_routes_config.py +0 -100
- pulumi_gcp/compute/organization_security_policy.py +83 -51
- pulumi_gcp/compute/outputs.py +128 -0
- pulumi_gcp/compute/packet_mirroring.py +6 -0
- pulumi_gcp/compute/region_instance_group_manager.py +14 -7
- pulumi_gcp/compute/subnetwork.py +0 -98
- pulumi_gcp/config/__init__.pyi +2 -2
- pulumi_gcp/config/vars.py +4 -4
- pulumi_gcp/container/_inputs.py +20 -0
- pulumi_gcp/container/aws_cluster.py +42 -28
- pulumi_gcp/container/aws_node_pool.py +42 -28
- pulumi_gcp/container/azure_cluster.py +70 -35
- pulumi_gcp/container/azure_node_pool.py +42 -28
- pulumi_gcp/container/outputs.py +25 -0
- pulumi_gcp/databasemigrationservice/connection_profile.py +4 -2
- pulumi_gcp/databasemigrationservice/migration_job.py +4 -2
- pulumi_gcp/dataplex/asset.py +21 -28
- pulumi_gcp/dataplex/zone.py +21 -28
- pulumi_gcp/dataproc/cluster.py +14 -21
- pulumi_gcp/dataproc/workflow_template.py +105 -42
- pulumi_gcp/diagflow/_inputs.py +152 -0
- pulumi_gcp/diagflow/cx_agent.py +425 -0
- pulumi_gcp/diagflow/outputs.py +143 -0
- pulumi_gcp/firebase/app_check_play_integrity_config.py +4 -8
- pulumi_gcp/firebase/app_check_recaptcha_enterprise_config.py +2 -4
- pulumi_gcp/firebase/app_check_service_config.py +6 -12
- pulumi_gcp/firebase/app_hosting_backend.py +4 -8
- pulumi_gcp/firebase/app_hosting_build.py +4 -8
- pulumi_gcp/firebase/app_hosting_traffic.py +6 -12
- pulumi_gcp/firebase/data_connect_service.py +4 -8
- pulumi_gcp/firebase/database_instance.py +4 -8
- pulumi_gcp/gkehub/_inputs.py +0 -60
- pulumi_gcp/gkehub/get_membership.py +1 -12
- pulumi_gcp/gkehub/membership.py +0 -70
- pulumi_gcp/gkehub/outputs.py +0 -36
- pulumi_gcp/iap/__init__.py +4 -0
- pulumi_gcp/iap/_inputs.py +130 -0
- pulumi_gcp/iap/get_web_region_forwarding_rule_service_iam_policy.py +182 -0
- pulumi_gcp/iap/outputs.py +76 -0
- pulumi_gcp/{beyondcorp/application_iam_binding.py → iap/web_region_forwarding_rule_service_iam_binding.py} +321 -314
- pulumi_gcp/{beyondcorp/application_iam_member.py → iap/web_region_forwarding_rule_service_iam_member.py} +321 -314
- pulumi_gcp/iap/web_region_forwarding_rule_service_iam_policy.py +910 -0
- pulumi_gcp/kms/autokey_config.py +0 -2
- pulumi_gcp/kms/key_handle.py +0 -2
- pulumi_gcp/logging/billing_account_bucket_config.py +21 -7
- pulumi_gcp/logging/folder_bucket_config.py +21 -7
- pulumi_gcp/logging/organization_bucket_config.py +21 -7
- pulumi_gcp/memorystore/get_instance.py +1 -12
- pulumi_gcp/memorystore/instance.py +0 -70
- pulumi_gcp/monitoring/dashboard.py +14 -7
- pulumi_gcp/networkservices/lb_traffic_extension.py +24 -23
- pulumi_gcp/notebooks/__init__.py +0 -1
- pulumi_gcp/oracledatabase/cloud_vm_cluster.py +3 -3
- pulumi_gcp/organizations/project.py +21 -7
- pulumi_gcp/projects/service.py +2 -4
- pulumi_gcp/provider.py +20 -20
- pulumi_gcp/pulumi-plugin.json +1 -1
- pulumi_gcp/redis/cluster.py +0 -70
- pulumi_gcp/redis/get_cluster.py +1 -12
- pulumi_gcp/saasruntime/__init__.py +11 -0
- pulumi_gcp/saasruntime/_inputs.py +55 -0
- pulumi_gcp/saasruntime/outputs.py +39 -0
- pulumi_gcp/saasruntime/saa_s.py +815 -0
- pulumi_gcp/securesourcemanager/_inputs.py +20 -19
- pulumi_gcp/securesourcemanager/outputs.py +15 -14
- pulumi_gcp/serviceaccount/get_account_key.py +1 -21
- pulumi_gcp/sql/database_instance.py +61 -7
- pulumi_gcp/sql/get_database_instance.py +12 -1
- pulumi_gcp/sql/outputs.py +11 -0
- pulumi_gcp/sql/user.py +61 -0
- pulumi_gcp/storage/_inputs.py +7 -7
- pulumi_gcp/storage/bucket.py +14 -7
- pulumi_gcp/storage/outputs.py +7 -7
- pulumi_gcp/tpu/__init__.py +0 -2
- pulumi_gcp/tpu/_inputs.py +0 -93
- pulumi_gcp/tpu/outputs.py +0 -72
- pulumi_gcp/vertex/_inputs.py +8 -9
- pulumi_gcp/vertex/ai_endpoint.py +2 -4
- pulumi_gcp/vertex/ai_feature_online_store_featureview.py +0 -2
- pulumi_gcp/vertex/ai_index.py +24 -23
- pulumi_gcp/vertex/outputs.py +7 -8
- {pulumi_gcp-8.42.0a1756925793.dist-info → pulumi_gcp-9.0.0a1.dist-info}/METADATA +1 -1
- {pulumi_gcp-8.42.0a1756925793.dist-info → pulumi_gcp-9.0.0a1.dist-info}/RECORD +143 -141
- pulumi_gcp/beyondcorp/application.py +0 -746
- pulumi_gcp/beyondcorp/application_iam_policy.py +0 -903
- pulumi_gcp/beyondcorp/get_application_iam_policy.py +0 -182
- pulumi_gcp/notebooks/location.py +0 -285
- pulumi_gcp/tpu/get_tensorflow_versions.py +0 -184
- pulumi_gcp/tpu/node.py +0 -1062
- {pulumi_gcp-8.42.0a1756925793.dist-info → pulumi_gcp-9.0.0a1.dist-info}/WHEEL +0 -0
- {pulumi_gcp-8.42.0a1756925793.dist-info → pulumi_gcp-9.0.0a1.dist-info}/top_level.txt +0 -0
|
@@ -16,20 +16,20 @@ from .. import _utilities
|
|
|
16
16
|
from . import outputs
|
|
17
17
|
from ._inputs import *
|
|
18
18
|
|
|
19
|
-
__all__ = ['
|
|
19
|
+
__all__ = ['WebRegionForwardingRuleServiceIamBindingArgs', 'WebRegionForwardingRuleServiceIamBinding']
|
|
20
20
|
|
|
21
21
|
@pulumi.input_type
|
|
22
|
-
class
|
|
22
|
+
class WebRegionForwardingRuleServiceIamBindingArgs:
|
|
23
23
|
def __init__(__self__, *,
|
|
24
|
-
|
|
24
|
+
forwarding_rule_region_service_name: pulumi.Input[_builtins.str],
|
|
25
25
|
members: pulumi.Input[Sequence[pulumi.Input[_builtins.str]]],
|
|
26
26
|
role: pulumi.Input[_builtins.str],
|
|
27
|
-
|
|
28
|
-
|
|
29
|
-
|
|
27
|
+
condition: Optional[pulumi.Input['WebRegionForwardingRuleServiceIamBindingConditionArgs']] = None,
|
|
28
|
+
project: Optional[pulumi.Input[_builtins.str]] = None,
|
|
29
|
+
region: Optional[pulumi.Input[_builtins.str]] = None):
|
|
30
30
|
"""
|
|
31
|
-
The set of arguments for constructing a
|
|
32
|
-
:param pulumi.Input[_builtins.str]
|
|
31
|
+
The set of arguments for constructing a WebRegionForwardingRuleServiceIamBinding resource.
|
|
32
|
+
:param pulumi.Input[_builtins.str] forwarding_rule_region_service_name: Used to find the parent resource to bind the IAM policy to
|
|
33
33
|
:param pulumi.Input[Sequence[pulumi.Input[_builtins.str]]] members: Identities that will be granted the privilege in `role`.
|
|
34
34
|
Each entry can have one of the following values:
|
|
35
35
|
* **allUsers**: A special identifier that represents anyone who is on the internet; with or without a Google account.
|
|
@@ -42,34 +42,37 @@ class ApplicationIamBindingArgs:
|
|
|
42
42
|
* **projectEditor:projectid**: Editors of the given project. For example, "projectEditor:my-example-project"
|
|
43
43
|
* **projectViewer:projectid**: Viewers of the given project. For example, "projectViewer:my-example-project"
|
|
44
44
|
:param pulumi.Input[_builtins.str] role: The role that should be applied. Only one
|
|
45
|
-
`
|
|
45
|
+
`iap.WebRegionForwardingRuleServiceIamBinding` can be used per role. Note that custom roles must be of the format
|
|
46
46
|
`[projects|organizations]/{parent-name}/roles/{role-name}`.
|
|
47
|
-
:param pulumi.Input[
|
|
48
|
-
:param pulumi.Input['ApplicationIamBindingConditionArgs'] condition: An [IAM Condition](https://cloud.google.com/iam/docs/conditions-overview) for a given binding.
|
|
47
|
+
:param pulumi.Input['WebRegionForwardingRuleServiceIamBindingConditionArgs'] condition: An [IAM Condition](https://cloud.google.com/iam/docs/conditions-overview) for a given binding.
|
|
49
48
|
Structure is documented below.
|
|
50
49
|
:param pulumi.Input[_builtins.str] project: The ID of the project in which the resource belongs.
|
|
51
50
|
If it is not provided, the project will be parsed from the identifier of the parent resource. If no project is provided in the parent identifier and no project is specified, the provider project is used.
|
|
51
|
+
:param pulumi.Input[_builtins.str] region: Used to find the parent resource to bind the IAM policy to. If not specified,
|
|
52
|
+
the value will be parsed from the identifier of the parent resource. If no region is provided in the parent identifier and no
|
|
53
|
+
region is specified, it is taken from the provider configuration.
|
|
52
54
|
"""
|
|
53
|
-
pulumi.set(__self__, "
|
|
55
|
+
pulumi.set(__self__, "forwarding_rule_region_service_name", forwarding_rule_region_service_name)
|
|
54
56
|
pulumi.set(__self__, "members", members)
|
|
55
57
|
pulumi.set(__self__, "role", role)
|
|
56
|
-
pulumi.set(__self__, "security_gateways_id", security_gateways_id)
|
|
57
58
|
if condition is not None:
|
|
58
59
|
pulumi.set(__self__, "condition", condition)
|
|
59
60
|
if project is not None:
|
|
60
61
|
pulumi.set(__self__, "project", project)
|
|
62
|
+
if region is not None:
|
|
63
|
+
pulumi.set(__self__, "region", region)
|
|
61
64
|
|
|
62
65
|
@_builtins.property
|
|
63
|
-
@pulumi.getter(name="
|
|
64
|
-
def
|
|
66
|
+
@pulumi.getter(name="forwardingRuleRegionServiceName")
|
|
67
|
+
def forwarding_rule_region_service_name(self) -> pulumi.Input[_builtins.str]:
|
|
65
68
|
"""
|
|
66
69
|
Used to find the parent resource to bind the IAM policy to
|
|
67
70
|
"""
|
|
68
|
-
return pulumi.get(self, "
|
|
71
|
+
return pulumi.get(self, "forwarding_rule_region_service_name")
|
|
69
72
|
|
|
70
|
-
@
|
|
71
|
-
def
|
|
72
|
-
pulumi.set(self, "
|
|
73
|
+
@forwarding_rule_region_service_name.setter
|
|
74
|
+
def forwarding_rule_region_service_name(self, value: pulumi.Input[_builtins.str]):
|
|
75
|
+
pulumi.set(self, "forwarding_rule_region_service_name", value)
|
|
73
76
|
|
|
74
77
|
@_builtins.property
|
|
75
78
|
@pulumi.getter
|
|
@@ -98,7 +101,7 @@ class ApplicationIamBindingArgs:
|
|
|
98
101
|
def role(self) -> pulumi.Input[_builtins.str]:
|
|
99
102
|
"""
|
|
100
103
|
The role that should be applied. Only one
|
|
101
|
-
`
|
|
104
|
+
`iap.WebRegionForwardingRuleServiceIamBinding` can be used per role. Note that custom roles must be of the format
|
|
102
105
|
`[projects|organizations]/{parent-name}/roles/{role-name}`.
|
|
103
106
|
"""
|
|
104
107
|
return pulumi.get(self, "role")
|
|
@@ -107,21 +110,9 @@ class ApplicationIamBindingArgs:
|
|
|
107
110
|
def role(self, value: pulumi.Input[_builtins.str]):
|
|
108
111
|
pulumi.set(self, "role", value)
|
|
109
112
|
|
|
110
|
-
@_builtins.property
|
|
111
|
-
@pulumi.getter(name="securityGatewaysId")
|
|
112
|
-
def security_gateways_id(self) -> pulumi.Input[_builtins.str]:
|
|
113
|
-
"""
|
|
114
|
-
Part of `parent`. See documentation of `projectsId`. Used to find the parent resource to bind the IAM policy to
|
|
115
|
-
"""
|
|
116
|
-
return pulumi.get(self, "security_gateways_id")
|
|
117
|
-
|
|
118
|
-
@security_gateways_id.setter
|
|
119
|
-
def security_gateways_id(self, value: pulumi.Input[_builtins.str]):
|
|
120
|
-
pulumi.set(self, "security_gateways_id", value)
|
|
121
|
-
|
|
122
113
|
@_builtins.property
|
|
123
114
|
@pulumi.getter
|
|
124
|
-
def condition(self) -> Optional[pulumi.Input['
|
|
115
|
+
def condition(self) -> Optional[pulumi.Input['WebRegionForwardingRuleServiceIamBindingConditionArgs']]:
|
|
125
116
|
"""
|
|
126
117
|
An [IAM Condition](https://cloud.google.com/iam/docs/conditions-overview) for a given binding.
|
|
127
118
|
Structure is documented below.
|
|
@@ -129,7 +120,7 @@ class ApplicationIamBindingArgs:
|
|
|
129
120
|
return pulumi.get(self, "condition")
|
|
130
121
|
|
|
131
122
|
@condition.setter
|
|
132
|
-
def condition(self, value: Optional[pulumi.Input['
|
|
123
|
+
def condition(self, value: Optional[pulumi.Input['WebRegionForwardingRuleServiceIamBindingConditionArgs']]):
|
|
133
124
|
pulumi.set(self, "condition", value)
|
|
134
125
|
|
|
135
126
|
@_builtins.property
|
|
@@ -145,23 +136,37 @@ class ApplicationIamBindingArgs:
|
|
|
145
136
|
def project(self, value: Optional[pulumi.Input[_builtins.str]]):
|
|
146
137
|
pulumi.set(self, "project", value)
|
|
147
138
|
|
|
139
|
+
@_builtins.property
|
|
140
|
+
@pulumi.getter
|
|
141
|
+
def region(self) -> Optional[pulumi.Input[_builtins.str]]:
|
|
142
|
+
"""
|
|
143
|
+
Used to find the parent resource to bind the IAM policy to. If not specified,
|
|
144
|
+
the value will be parsed from the identifier of the parent resource. If no region is provided in the parent identifier and no
|
|
145
|
+
region is specified, it is taken from the provider configuration.
|
|
146
|
+
"""
|
|
147
|
+
return pulumi.get(self, "region")
|
|
148
|
+
|
|
149
|
+
@region.setter
|
|
150
|
+
def region(self, value: Optional[pulumi.Input[_builtins.str]]):
|
|
151
|
+
pulumi.set(self, "region", value)
|
|
152
|
+
|
|
148
153
|
|
|
149
154
|
@pulumi.input_type
|
|
150
|
-
class
|
|
155
|
+
class _WebRegionForwardingRuleServiceIamBindingState:
|
|
151
156
|
def __init__(__self__, *,
|
|
152
|
-
|
|
153
|
-
condition: Optional[pulumi.Input['ApplicationIamBindingConditionArgs']] = None,
|
|
157
|
+
condition: Optional[pulumi.Input['WebRegionForwardingRuleServiceIamBindingConditionArgs']] = None,
|
|
154
158
|
etag: Optional[pulumi.Input[_builtins.str]] = None,
|
|
159
|
+
forwarding_rule_region_service_name: Optional[pulumi.Input[_builtins.str]] = None,
|
|
155
160
|
members: Optional[pulumi.Input[Sequence[pulumi.Input[_builtins.str]]]] = None,
|
|
156
161
|
project: Optional[pulumi.Input[_builtins.str]] = None,
|
|
157
|
-
|
|
158
|
-
|
|
162
|
+
region: Optional[pulumi.Input[_builtins.str]] = None,
|
|
163
|
+
role: Optional[pulumi.Input[_builtins.str]] = None):
|
|
159
164
|
"""
|
|
160
|
-
Input properties used for looking up and filtering
|
|
161
|
-
:param pulumi.Input[
|
|
162
|
-
:param pulumi.Input['ApplicationIamBindingConditionArgs'] condition: An [IAM Condition](https://cloud.google.com/iam/docs/conditions-overview) for a given binding.
|
|
165
|
+
Input properties used for looking up and filtering WebRegionForwardingRuleServiceIamBinding resources.
|
|
166
|
+
:param pulumi.Input['WebRegionForwardingRuleServiceIamBindingConditionArgs'] condition: An [IAM Condition](https://cloud.google.com/iam/docs/conditions-overview) for a given binding.
|
|
163
167
|
Structure is documented below.
|
|
164
168
|
:param pulumi.Input[_builtins.str] etag: (Computed) The etag of the IAM policy.
|
|
169
|
+
:param pulumi.Input[_builtins.str] forwarding_rule_region_service_name: Used to find the parent resource to bind the IAM policy to
|
|
165
170
|
:param pulumi.Input[Sequence[pulumi.Input[_builtins.str]]] members: Identities that will be granted the privilege in `role`.
|
|
166
171
|
Each entry can have one of the following values:
|
|
167
172
|
* **allUsers**: A special identifier that represents anyone who is on the internet; with or without a Google account.
|
|
@@ -175,41 +180,31 @@ class _ApplicationIamBindingState:
|
|
|
175
180
|
* **projectViewer:projectid**: Viewers of the given project. For example, "projectViewer:my-example-project"
|
|
176
181
|
:param pulumi.Input[_builtins.str] project: The ID of the project in which the resource belongs.
|
|
177
182
|
If it is not provided, the project will be parsed from the identifier of the parent resource. If no project is provided in the parent identifier and no project is specified, the provider project is used.
|
|
183
|
+
:param pulumi.Input[_builtins.str] region: Used to find the parent resource to bind the IAM policy to. If not specified,
|
|
184
|
+
the value will be parsed from the identifier of the parent resource. If no region is provided in the parent identifier and no
|
|
185
|
+
region is specified, it is taken from the provider configuration.
|
|
178
186
|
:param pulumi.Input[_builtins.str] role: The role that should be applied. Only one
|
|
179
|
-
`
|
|
187
|
+
`iap.WebRegionForwardingRuleServiceIamBinding` can be used per role. Note that custom roles must be of the format
|
|
180
188
|
`[projects|organizations]/{parent-name}/roles/{role-name}`.
|
|
181
|
-
:param pulumi.Input[_builtins.str] security_gateways_id: Part of `parent`. See documentation of `projectsId`. Used to find the parent resource to bind the IAM policy to
|
|
182
189
|
"""
|
|
183
|
-
if application_id is not None:
|
|
184
|
-
pulumi.set(__self__, "application_id", application_id)
|
|
185
190
|
if condition is not None:
|
|
186
191
|
pulumi.set(__self__, "condition", condition)
|
|
187
192
|
if etag is not None:
|
|
188
193
|
pulumi.set(__self__, "etag", etag)
|
|
194
|
+
if forwarding_rule_region_service_name is not None:
|
|
195
|
+
pulumi.set(__self__, "forwarding_rule_region_service_name", forwarding_rule_region_service_name)
|
|
189
196
|
if members is not None:
|
|
190
197
|
pulumi.set(__self__, "members", members)
|
|
191
198
|
if project is not None:
|
|
192
199
|
pulumi.set(__self__, "project", project)
|
|
200
|
+
if region is not None:
|
|
201
|
+
pulumi.set(__self__, "region", region)
|
|
193
202
|
if role is not None:
|
|
194
203
|
pulumi.set(__self__, "role", role)
|
|
195
|
-
if security_gateways_id is not None:
|
|
196
|
-
pulumi.set(__self__, "security_gateways_id", security_gateways_id)
|
|
197
|
-
|
|
198
|
-
@_builtins.property
|
|
199
|
-
@pulumi.getter(name="applicationId")
|
|
200
|
-
def application_id(self) -> Optional[pulumi.Input[_builtins.str]]:
|
|
201
|
-
"""
|
|
202
|
-
Used to find the parent resource to bind the IAM policy to
|
|
203
|
-
"""
|
|
204
|
-
return pulumi.get(self, "application_id")
|
|
205
|
-
|
|
206
|
-
@application_id.setter
|
|
207
|
-
def application_id(self, value: Optional[pulumi.Input[_builtins.str]]):
|
|
208
|
-
pulumi.set(self, "application_id", value)
|
|
209
204
|
|
|
210
205
|
@_builtins.property
|
|
211
206
|
@pulumi.getter
|
|
212
|
-
def condition(self) -> Optional[pulumi.Input['
|
|
207
|
+
def condition(self) -> Optional[pulumi.Input['WebRegionForwardingRuleServiceIamBindingConditionArgs']]:
|
|
213
208
|
"""
|
|
214
209
|
An [IAM Condition](https://cloud.google.com/iam/docs/conditions-overview) for a given binding.
|
|
215
210
|
Structure is documented below.
|
|
@@ -217,7 +212,7 @@ class _ApplicationIamBindingState:
|
|
|
217
212
|
return pulumi.get(self, "condition")
|
|
218
213
|
|
|
219
214
|
@condition.setter
|
|
220
|
-
def condition(self, value: Optional[pulumi.Input['
|
|
215
|
+
def condition(self, value: Optional[pulumi.Input['WebRegionForwardingRuleServiceIamBindingConditionArgs']]):
|
|
221
216
|
pulumi.set(self, "condition", value)
|
|
222
217
|
|
|
223
218
|
@_builtins.property
|
|
@@ -232,6 +227,18 @@ class _ApplicationIamBindingState:
|
|
|
232
227
|
def etag(self, value: Optional[pulumi.Input[_builtins.str]]):
|
|
233
228
|
pulumi.set(self, "etag", value)
|
|
234
229
|
|
|
230
|
+
@_builtins.property
|
|
231
|
+
@pulumi.getter(name="forwardingRuleRegionServiceName")
|
|
232
|
+
def forwarding_rule_region_service_name(self) -> Optional[pulumi.Input[_builtins.str]]:
|
|
233
|
+
"""
|
|
234
|
+
Used to find the parent resource to bind the IAM policy to
|
|
235
|
+
"""
|
|
236
|
+
return pulumi.get(self, "forwarding_rule_region_service_name")
|
|
237
|
+
|
|
238
|
+
@forwarding_rule_region_service_name.setter
|
|
239
|
+
def forwarding_rule_region_service_name(self, value: Optional[pulumi.Input[_builtins.str]]):
|
|
240
|
+
pulumi.set(self, "forwarding_rule_region_service_name", value)
|
|
241
|
+
|
|
235
242
|
@_builtins.property
|
|
236
243
|
@pulumi.getter
|
|
237
244
|
def members(self) -> Optional[pulumi.Input[Sequence[pulumi.Input[_builtins.str]]]]:
|
|
@@ -267,12 +274,26 @@ class _ApplicationIamBindingState:
|
|
|
267
274
|
def project(self, value: Optional[pulumi.Input[_builtins.str]]):
|
|
268
275
|
pulumi.set(self, "project", value)
|
|
269
276
|
|
|
277
|
+
@_builtins.property
|
|
278
|
+
@pulumi.getter
|
|
279
|
+
def region(self) -> Optional[pulumi.Input[_builtins.str]]:
|
|
280
|
+
"""
|
|
281
|
+
Used to find the parent resource to bind the IAM policy to. If not specified,
|
|
282
|
+
the value will be parsed from the identifier of the parent resource. If no region is provided in the parent identifier and no
|
|
283
|
+
region is specified, it is taken from the provider configuration.
|
|
284
|
+
"""
|
|
285
|
+
return pulumi.get(self, "region")
|
|
286
|
+
|
|
287
|
+
@region.setter
|
|
288
|
+
def region(self, value: Optional[pulumi.Input[_builtins.str]]):
|
|
289
|
+
pulumi.set(self, "region", value)
|
|
290
|
+
|
|
270
291
|
@_builtins.property
|
|
271
292
|
@pulumi.getter
|
|
272
293
|
def role(self) -> Optional[pulumi.Input[_builtins.str]]:
|
|
273
294
|
"""
|
|
274
295
|
The role that should be applied. Only one
|
|
275
|
-
`
|
|
296
|
+
`iap.WebRegionForwardingRuleServiceIamBinding` can be used per role. Note that custom roles must be of the format
|
|
276
297
|
`[projects|organizations]/{parent-name}/roles/{role-name}`.
|
|
277
298
|
"""
|
|
278
299
|
return pulumi.get(self, "role")
|
|
@@ -281,65 +302,51 @@ class _ApplicationIamBindingState:
|
|
|
281
302
|
def role(self, value: Optional[pulumi.Input[_builtins.str]]):
|
|
282
303
|
pulumi.set(self, "role", value)
|
|
283
304
|
|
|
284
|
-
@_builtins.property
|
|
285
|
-
@pulumi.getter(name="securityGatewaysId")
|
|
286
|
-
def security_gateways_id(self) -> Optional[pulumi.Input[_builtins.str]]:
|
|
287
|
-
"""
|
|
288
|
-
Part of `parent`. See documentation of `projectsId`. Used to find the parent resource to bind the IAM policy to
|
|
289
|
-
"""
|
|
290
|
-
return pulumi.get(self, "security_gateways_id")
|
|
291
|
-
|
|
292
|
-
@security_gateways_id.setter
|
|
293
|
-
def security_gateways_id(self, value: Optional[pulumi.Input[_builtins.str]]):
|
|
294
|
-
pulumi.set(self, "security_gateways_id", value)
|
|
295
|
-
|
|
296
305
|
|
|
297
|
-
@pulumi.type_token("gcp:
|
|
298
|
-
class
|
|
306
|
+
@pulumi.type_token("gcp:iap/webRegionForwardingRuleServiceIamBinding:WebRegionForwardingRuleServiceIamBinding")
|
|
307
|
+
class WebRegionForwardingRuleServiceIamBinding(pulumi.CustomResource):
|
|
299
308
|
@overload
|
|
300
309
|
def __init__(__self__,
|
|
301
310
|
resource_name: str,
|
|
302
311
|
opts: Optional[pulumi.ResourceOptions] = None,
|
|
303
|
-
|
|
304
|
-
|
|
312
|
+
condition: Optional[pulumi.Input[Union['WebRegionForwardingRuleServiceIamBindingConditionArgs', 'WebRegionForwardingRuleServiceIamBindingConditionArgsDict']]] = None,
|
|
313
|
+
forwarding_rule_region_service_name: Optional[pulumi.Input[_builtins.str]] = None,
|
|
305
314
|
members: Optional[pulumi.Input[Sequence[pulumi.Input[_builtins.str]]]] = None,
|
|
306
315
|
project: Optional[pulumi.Input[_builtins.str]] = None,
|
|
316
|
+
region: Optional[pulumi.Input[_builtins.str]] = None,
|
|
307
317
|
role: Optional[pulumi.Input[_builtins.str]] = None,
|
|
308
|
-
security_gateways_id: Optional[pulumi.Input[_builtins.str]] = None,
|
|
309
318
|
__props__=None):
|
|
310
319
|
"""
|
|
311
|
-
|
|
320
|
+
Three different resources help you manage your IAM policy for Identity-Aware Proxy WebRegionForwardingRuleService. Each of these resources serves a different use case:
|
|
312
321
|
|
|
313
|
-
|
|
314
|
-
|
|
315
|
-
* `
|
|
316
|
-
* `beyondcorp.ApplicationIamBinding`: Authoritative for a given role. Updates the IAM policy to grant a role to a list of members. Other roles within the IAM policy for the application are preserved.
|
|
317
|
-
* `beyondcorp.ApplicationIamMember`: Non-authoritative. Updates the IAM policy to grant a role to a new member. Other members for the role for the application are preserved.
|
|
322
|
+
* `iap.WebRegionForwardingRuleServiceIamPolicy`: Authoritative. Sets the IAM policy for the webregionforwardingruleservice and replaces any existing policy already attached.
|
|
323
|
+
* `iap.WebRegionForwardingRuleServiceIamBinding`: Authoritative for a given role. Updates the IAM policy to grant a role to a list of members. Other roles within the IAM policy for the webregionforwardingruleservice are preserved.
|
|
324
|
+
* `iap.WebRegionForwardingRuleServiceIamMember`: Non-authoritative. Updates the IAM policy to grant a role to a new member. Other members for the role for the webregionforwardingruleservice are preserved.
|
|
318
325
|
|
|
319
326
|
A data source can be used to retrieve policy data in advent you do not need creation
|
|
320
327
|
|
|
321
|
-
* `
|
|
328
|
+
* `iap.WebRegionForwardingRuleServiceIamPolicy`: Retrieves the IAM policy for the webregionforwardingruleservice
|
|
322
329
|
|
|
323
|
-
> **Note:** `
|
|
330
|
+
> **Note:** `iap.WebRegionForwardingRuleServiceIamPolicy` **cannot** be used in conjunction with `iap.WebRegionForwardingRuleServiceIamBinding` and `iap.WebRegionForwardingRuleServiceIamMember` or they will fight over what your policy should be.
|
|
324
331
|
|
|
325
|
-
> **Note:** `
|
|
332
|
+
> **Note:** `iap.WebRegionForwardingRuleServiceIamBinding` resources **can be** used in conjunction with `iap.WebRegionForwardingRuleServiceIamMember` resources **only if** they do not grant privilege to the same role.
|
|
326
333
|
|
|
327
334
|
> **Note:** This resource supports IAM Conditions but they have some known limitations which can be found [here](https://cloud.google.com/iam/docs/conditions-overview#limitations). Please review this article if you are having issues with IAM Conditions.
|
|
328
335
|
|
|
329
|
-
##
|
|
336
|
+
## iap.WebRegionForwardingRuleServiceIamPolicy
|
|
330
337
|
|
|
331
338
|
```python
|
|
332
339
|
import pulumi
|
|
333
340
|
import pulumi_gcp as gcp
|
|
334
341
|
|
|
335
342
|
admin = gcp.organizations.get_iam_policy(bindings=[{
|
|
336
|
-
"role": "roles/
|
|
343
|
+
"role": "roles/iap.httpsResourceAccessor",
|
|
337
344
|
"members": ["user:jane@example.com"],
|
|
338
345
|
}])
|
|
339
|
-
policy = gcp.
|
|
340
|
-
project=
|
|
341
|
-
|
|
342
|
-
|
|
346
|
+
policy = gcp.iap.WebRegionForwardingRuleServiceIamPolicy("policy",
|
|
347
|
+
project=default["project"],
|
|
348
|
+
region=default["region"],
|
|
349
|
+
forwarding_rule_region_service_name=default["name"],
|
|
343
350
|
policy_data=admin.policy_data)
|
|
344
351
|
```
|
|
345
352
|
|
|
@@ -350,7 +357,7 @@ class ApplicationIamBinding(pulumi.CustomResource):
|
|
|
350
357
|
import pulumi_gcp as gcp
|
|
351
358
|
|
|
352
359
|
admin = gcp.organizations.get_iam_policy(bindings=[{
|
|
353
|
-
"role": "roles/
|
|
360
|
+
"role": "roles/iap.httpsResourceAccessor",
|
|
354
361
|
"members": ["user:jane@example.com"],
|
|
355
362
|
"condition": {
|
|
356
363
|
"title": "expires_after_2019_12_31",
|
|
@@ -358,23 +365,23 @@ class ApplicationIamBinding(pulumi.CustomResource):
|
|
|
358
365
|
"expression": "request.time < timestamp(\\"2020-01-01T00:00:00Z\\")",
|
|
359
366
|
},
|
|
360
367
|
}])
|
|
361
|
-
policy = gcp.
|
|
362
|
-
project=
|
|
363
|
-
|
|
364
|
-
|
|
368
|
+
policy = gcp.iap.WebRegionForwardingRuleServiceIamPolicy("policy",
|
|
369
|
+
project=default["project"],
|
|
370
|
+
region=default["region"],
|
|
371
|
+
forwarding_rule_region_service_name=default["name"],
|
|
365
372
|
policy_data=admin.policy_data)
|
|
366
373
|
```
|
|
367
|
-
##
|
|
374
|
+
## iap.WebRegionForwardingRuleServiceIamBinding
|
|
368
375
|
|
|
369
376
|
```python
|
|
370
377
|
import pulumi
|
|
371
378
|
import pulumi_gcp as gcp
|
|
372
379
|
|
|
373
|
-
binding = gcp.
|
|
374
|
-
project=
|
|
375
|
-
|
|
376
|
-
|
|
377
|
-
role="roles/
|
|
380
|
+
binding = gcp.iap.WebRegionForwardingRuleServiceIamBinding("binding",
|
|
381
|
+
project=default["project"],
|
|
382
|
+
region=default["region"],
|
|
383
|
+
forwarding_rule_region_service_name=default["name"],
|
|
384
|
+
role="roles/iap.httpsResourceAccessor",
|
|
378
385
|
members=["user:jane@example.com"])
|
|
379
386
|
```
|
|
380
387
|
|
|
@@ -384,11 +391,11 @@ class ApplicationIamBinding(pulumi.CustomResource):
|
|
|
384
391
|
import pulumi
|
|
385
392
|
import pulumi_gcp as gcp
|
|
386
393
|
|
|
387
|
-
binding = gcp.
|
|
388
|
-
project=
|
|
389
|
-
|
|
390
|
-
|
|
391
|
-
role="roles/
|
|
394
|
+
binding = gcp.iap.WebRegionForwardingRuleServiceIamBinding("binding",
|
|
395
|
+
project=default["project"],
|
|
396
|
+
region=default["region"],
|
|
397
|
+
forwarding_rule_region_service_name=default["name"],
|
|
398
|
+
role="roles/iap.httpsResourceAccessor",
|
|
392
399
|
members=["user:jane@example.com"],
|
|
393
400
|
condition={
|
|
394
401
|
"title": "expires_after_2019_12_31",
|
|
@@ -396,17 +403,17 @@ class ApplicationIamBinding(pulumi.CustomResource):
|
|
|
396
403
|
"expression": "request.time < timestamp(\\"2020-01-01T00:00:00Z\\")",
|
|
397
404
|
})
|
|
398
405
|
```
|
|
399
|
-
##
|
|
406
|
+
## iap.WebRegionForwardingRuleServiceIamMember
|
|
400
407
|
|
|
401
408
|
```python
|
|
402
409
|
import pulumi
|
|
403
410
|
import pulumi_gcp as gcp
|
|
404
411
|
|
|
405
|
-
member = gcp.
|
|
406
|
-
project=
|
|
407
|
-
|
|
408
|
-
|
|
409
|
-
role="roles/
|
|
412
|
+
member = gcp.iap.WebRegionForwardingRuleServiceIamMember("member",
|
|
413
|
+
project=default["project"],
|
|
414
|
+
region=default["region"],
|
|
415
|
+
forwarding_rule_region_service_name=default["name"],
|
|
416
|
+
role="roles/iap.httpsResourceAccessor",
|
|
410
417
|
member="user:jane@example.com")
|
|
411
418
|
```
|
|
412
419
|
|
|
@@ -416,11 +423,11 @@ class ApplicationIamBinding(pulumi.CustomResource):
|
|
|
416
423
|
import pulumi
|
|
417
424
|
import pulumi_gcp as gcp
|
|
418
425
|
|
|
419
|
-
member = gcp.
|
|
420
|
-
project=
|
|
421
|
-
|
|
422
|
-
|
|
423
|
-
role="roles/
|
|
426
|
+
member = gcp.iap.WebRegionForwardingRuleServiceIamMember("member",
|
|
427
|
+
project=default["project"],
|
|
428
|
+
region=default["region"],
|
|
429
|
+
forwarding_rule_region_service_name=default["name"],
|
|
430
|
+
role="roles/iap.httpsResourceAccessor",
|
|
424
431
|
member="user:jane@example.com",
|
|
425
432
|
condition={
|
|
426
433
|
"title": "expires_after_2019_12_31",
|
|
@@ -433,39 +440,38 @@ class ApplicationIamBinding(pulumi.CustomResource):
|
|
|
433
440
|
|
|
434
441
|
-
|
|
435
442
|
|
|
436
|
-
# IAM policy for
|
|
437
|
-
> **Warning:** `beyondcorp.Application` and associated IAM resources are deprecated. Use `beyondcorp.SecurityGatewayApplication` instead.
|
|
443
|
+
# IAM policy for Identity-Aware Proxy WebRegionForwardingRuleService
|
|
438
444
|
|
|
439
|
-
Three different resources help you manage your IAM policy for
|
|
445
|
+
Three different resources help you manage your IAM policy for Identity-Aware Proxy WebRegionForwardingRuleService. Each of these resources serves a different use case:
|
|
440
446
|
|
|
441
|
-
* `
|
|
442
|
-
* `
|
|
443
|
-
* `
|
|
447
|
+
* `iap.WebRegionForwardingRuleServiceIamPolicy`: Authoritative. Sets the IAM policy for the webregionforwardingruleservice and replaces any existing policy already attached.
|
|
448
|
+
* `iap.WebRegionForwardingRuleServiceIamBinding`: Authoritative for a given role. Updates the IAM policy to grant a role to a list of members. Other roles within the IAM policy for the webregionforwardingruleservice are preserved.
|
|
449
|
+
* `iap.WebRegionForwardingRuleServiceIamMember`: Non-authoritative. Updates the IAM policy to grant a role to a new member. Other members for the role for the webregionforwardingruleservice are preserved.
|
|
444
450
|
|
|
445
451
|
A data source can be used to retrieve policy data in advent you do not need creation
|
|
446
452
|
|
|
447
|
-
* `
|
|
453
|
+
* `iap.WebRegionForwardingRuleServiceIamPolicy`: Retrieves the IAM policy for the webregionforwardingruleservice
|
|
448
454
|
|
|
449
|
-
> **Note:** `
|
|
455
|
+
> **Note:** `iap.WebRegionForwardingRuleServiceIamPolicy` **cannot** be used in conjunction with `iap.WebRegionForwardingRuleServiceIamBinding` and `iap.WebRegionForwardingRuleServiceIamMember` or they will fight over what your policy should be.
|
|
450
456
|
|
|
451
|
-
> **Note:** `
|
|
457
|
+
> **Note:** `iap.WebRegionForwardingRuleServiceIamBinding` resources **can be** used in conjunction with `iap.WebRegionForwardingRuleServiceIamMember` resources **only if** they do not grant privilege to the same role.
|
|
452
458
|
|
|
453
459
|
> **Note:** This resource supports IAM Conditions but they have some known limitations which can be found [here](https://cloud.google.com/iam/docs/conditions-overview#limitations). Please review this article if you are having issues with IAM Conditions.
|
|
454
460
|
|
|
455
|
-
##
|
|
461
|
+
## iap.WebRegionForwardingRuleServiceIamPolicy
|
|
456
462
|
|
|
457
463
|
```python
|
|
458
464
|
import pulumi
|
|
459
465
|
import pulumi_gcp as gcp
|
|
460
466
|
|
|
461
467
|
admin = gcp.organizations.get_iam_policy(bindings=[{
|
|
462
|
-
"role": "roles/
|
|
468
|
+
"role": "roles/iap.httpsResourceAccessor",
|
|
463
469
|
"members": ["user:jane@example.com"],
|
|
464
470
|
}])
|
|
465
|
-
policy = gcp.
|
|
466
|
-
project=
|
|
467
|
-
|
|
468
|
-
|
|
471
|
+
policy = gcp.iap.WebRegionForwardingRuleServiceIamPolicy("policy",
|
|
472
|
+
project=default["project"],
|
|
473
|
+
region=default["region"],
|
|
474
|
+
forwarding_rule_region_service_name=default["name"],
|
|
469
475
|
policy_data=admin.policy_data)
|
|
470
476
|
```
|
|
471
477
|
|
|
@@ -476,7 +482,7 @@ class ApplicationIamBinding(pulumi.CustomResource):
|
|
|
476
482
|
import pulumi_gcp as gcp
|
|
477
483
|
|
|
478
484
|
admin = gcp.organizations.get_iam_policy(bindings=[{
|
|
479
|
-
"role": "roles/
|
|
485
|
+
"role": "roles/iap.httpsResourceAccessor",
|
|
480
486
|
"members": ["user:jane@example.com"],
|
|
481
487
|
"condition": {
|
|
482
488
|
"title": "expires_after_2019_12_31",
|
|
@@ -484,23 +490,23 @@ class ApplicationIamBinding(pulumi.CustomResource):
|
|
|
484
490
|
"expression": "request.time < timestamp(\\"2020-01-01T00:00:00Z\\")",
|
|
485
491
|
},
|
|
486
492
|
}])
|
|
487
|
-
policy = gcp.
|
|
488
|
-
project=
|
|
489
|
-
|
|
490
|
-
|
|
493
|
+
policy = gcp.iap.WebRegionForwardingRuleServiceIamPolicy("policy",
|
|
494
|
+
project=default["project"],
|
|
495
|
+
region=default["region"],
|
|
496
|
+
forwarding_rule_region_service_name=default["name"],
|
|
491
497
|
policy_data=admin.policy_data)
|
|
492
498
|
```
|
|
493
|
-
##
|
|
499
|
+
## iap.WebRegionForwardingRuleServiceIamBinding
|
|
494
500
|
|
|
495
501
|
```python
|
|
496
502
|
import pulumi
|
|
497
503
|
import pulumi_gcp as gcp
|
|
498
504
|
|
|
499
|
-
binding = gcp.
|
|
500
|
-
project=
|
|
501
|
-
|
|
502
|
-
|
|
503
|
-
role="roles/
|
|
505
|
+
binding = gcp.iap.WebRegionForwardingRuleServiceIamBinding("binding",
|
|
506
|
+
project=default["project"],
|
|
507
|
+
region=default["region"],
|
|
508
|
+
forwarding_rule_region_service_name=default["name"],
|
|
509
|
+
role="roles/iap.httpsResourceAccessor",
|
|
504
510
|
members=["user:jane@example.com"])
|
|
505
511
|
```
|
|
506
512
|
|
|
@@ -510,11 +516,11 @@ class ApplicationIamBinding(pulumi.CustomResource):
|
|
|
510
516
|
import pulumi
|
|
511
517
|
import pulumi_gcp as gcp
|
|
512
518
|
|
|
513
|
-
binding = gcp.
|
|
514
|
-
project=
|
|
515
|
-
|
|
516
|
-
|
|
517
|
-
role="roles/
|
|
519
|
+
binding = gcp.iap.WebRegionForwardingRuleServiceIamBinding("binding",
|
|
520
|
+
project=default["project"],
|
|
521
|
+
region=default["region"],
|
|
522
|
+
forwarding_rule_region_service_name=default["name"],
|
|
523
|
+
role="roles/iap.httpsResourceAccessor",
|
|
518
524
|
members=["user:jane@example.com"],
|
|
519
525
|
condition={
|
|
520
526
|
"title": "expires_after_2019_12_31",
|
|
@@ -522,17 +528,17 @@ class ApplicationIamBinding(pulumi.CustomResource):
|
|
|
522
528
|
"expression": "request.time < timestamp(\\"2020-01-01T00:00:00Z\\")",
|
|
523
529
|
})
|
|
524
530
|
```
|
|
525
|
-
##
|
|
531
|
+
## iap.WebRegionForwardingRuleServiceIamMember
|
|
526
532
|
|
|
527
533
|
```python
|
|
528
534
|
import pulumi
|
|
529
535
|
import pulumi_gcp as gcp
|
|
530
536
|
|
|
531
|
-
member = gcp.
|
|
532
|
-
project=
|
|
533
|
-
|
|
534
|
-
|
|
535
|
-
role="roles/
|
|
537
|
+
member = gcp.iap.WebRegionForwardingRuleServiceIamMember("member",
|
|
538
|
+
project=default["project"],
|
|
539
|
+
region=default["region"],
|
|
540
|
+
forwarding_rule_region_service_name=default["name"],
|
|
541
|
+
role="roles/iap.httpsResourceAccessor",
|
|
536
542
|
member="user:jane@example.com")
|
|
537
543
|
```
|
|
538
544
|
|
|
@@ -542,11 +548,11 @@ class ApplicationIamBinding(pulumi.CustomResource):
|
|
|
542
548
|
import pulumi
|
|
543
549
|
import pulumi_gcp as gcp
|
|
544
550
|
|
|
545
|
-
member = gcp.
|
|
546
|
-
project=
|
|
547
|
-
|
|
548
|
-
|
|
549
|
-
role="roles/
|
|
551
|
+
member = gcp.iap.WebRegionForwardingRuleServiceIamMember("member",
|
|
552
|
+
project=default["project"],
|
|
553
|
+
region=default["region"],
|
|
554
|
+
forwarding_rule_region_service_name=default["name"],
|
|
555
|
+
role="roles/iap.httpsResourceAccessor",
|
|
550
556
|
member="user:jane@example.com",
|
|
551
557
|
condition={
|
|
552
558
|
"title": "expires_after_2019_12_31",
|
|
@@ -559,34 +565,34 @@ class ApplicationIamBinding(pulumi.CustomResource):
|
|
|
559
565
|
|
|
560
566
|
For all import syntaxes, the "resource in question" can take any of the following forms:
|
|
561
567
|
|
|
562
|
-
* projects/{{project}}/
|
|
568
|
+
* projects/{{project}}/iap_web/forwarding_rule-{{region}}/services/{{name}}
|
|
563
569
|
|
|
564
|
-
* {{project}}/{{
|
|
570
|
+
* {{project}}/{{region}}/{{name}}
|
|
565
571
|
|
|
566
|
-
* {{
|
|
572
|
+
* {{region}}/{{name}}
|
|
567
573
|
|
|
568
|
-
* {{
|
|
574
|
+
* {{name}}
|
|
569
575
|
|
|
570
576
|
Any variables not passed in the import command will be taken from the provider configuration.
|
|
571
577
|
|
|
572
|
-
|
|
578
|
+
Identity-Aware Proxy webregionforwardingruleservice IAM resources can be imported using the resource identifiers, role, and member.
|
|
573
579
|
|
|
574
580
|
IAM member imports use space-delimited identifiers: the resource in question, the role, and the member identity, e.g.
|
|
575
581
|
|
|
576
582
|
```sh
|
|
577
|
-
$ pulumi import gcp:
|
|
583
|
+
$ pulumi import gcp:iap/webRegionForwardingRuleServiceIamBinding:WebRegionForwardingRuleServiceIamBinding editor "projects/{{project}}/iap_web/forwarding_rule-{{region}}/services/{{web_region_forwarding_rule_service}} roles/iap.httpsResourceAccessor user:jane@example.com"
|
|
578
584
|
```
|
|
579
585
|
|
|
580
586
|
IAM binding imports use space-delimited identifiers: the resource in question and the role, e.g.
|
|
581
587
|
|
|
582
588
|
```sh
|
|
583
|
-
$ pulumi import gcp:
|
|
589
|
+
$ pulumi import gcp:iap/webRegionForwardingRuleServiceIamBinding:WebRegionForwardingRuleServiceIamBinding editor "projects/{{project}}/iap_web/forwarding_rule-{{region}}/services/{{web_region_forwarding_rule_service}} roles/iap.httpsResourceAccessor"
|
|
584
590
|
```
|
|
585
591
|
|
|
586
592
|
IAM policy imports use the identifier of the resource in question, e.g.
|
|
587
593
|
|
|
588
594
|
```sh
|
|
589
|
-
$ pulumi import gcp:
|
|
595
|
+
$ pulumi import gcp:iap/webRegionForwardingRuleServiceIamBinding:WebRegionForwardingRuleServiceIamBinding editor projects/{{project}}/iap_web/forwarding_rule-{{region}}/services/{{web_region_forwarding_rule_service}}
|
|
590
596
|
```
|
|
591
597
|
|
|
592
598
|
-> **Custom Roles** If you're importing a IAM resource with a custom role, make sure to use the
|
|
@@ -595,9 +601,9 @@ class ApplicationIamBinding(pulumi.CustomResource):
|
|
|
595
601
|
|
|
596
602
|
:param str resource_name: The name of the resource.
|
|
597
603
|
:param pulumi.ResourceOptions opts: Options for the resource.
|
|
598
|
-
:param pulumi.Input[
|
|
599
|
-
:param pulumi.Input[Union['ApplicationIamBindingConditionArgs', 'ApplicationIamBindingConditionArgsDict']] condition: An [IAM Condition](https://cloud.google.com/iam/docs/conditions-overview) for a given binding.
|
|
604
|
+
:param pulumi.Input[Union['WebRegionForwardingRuleServiceIamBindingConditionArgs', 'WebRegionForwardingRuleServiceIamBindingConditionArgsDict']] condition: An [IAM Condition](https://cloud.google.com/iam/docs/conditions-overview) for a given binding.
|
|
600
605
|
Structure is documented below.
|
|
606
|
+
:param pulumi.Input[_builtins.str] forwarding_rule_region_service_name: Used to find the parent resource to bind the IAM policy to
|
|
601
607
|
:param pulumi.Input[Sequence[pulumi.Input[_builtins.str]]] members: Identities that will be granted the privilege in `role`.
|
|
602
608
|
Each entry can have one of the following values:
|
|
603
609
|
* **allUsers**: A special identifier that represents anyone who is on the internet; with or without a Google account.
|
|
@@ -611,50 +617,50 @@ class ApplicationIamBinding(pulumi.CustomResource):
|
|
|
611
617
|
* **projectViewer:projectid**: Viewers of the given project. For example, "projectViewer:my-example-project"
|
|
612
618
|
:param pulumi.Input[_builtins.str] project: The ID of the project in which the resource belongs.
|
|
613
619
|
If it is not provided, the project will be parsed from the identifier of the parent resource. If no project is provided in the parent identifier and no project is specified, the provider project is used.
|
|
620
|
+
:param pulumi.Input[_builtins.str] region: Used to find the parent resource to bind the IAM policy to. If not specified,
|
|
621
|
+
the value will be parsed from the identifier of the parent resource. If no region is provided in the parent identifier and no
|
|
622
|
+
region is specified, it is taken from the provider configuration.
|
|
614
623
|
:param pulumi.Input[_builtins.str] role: The role that should be applied. Only one
|
|
615
|
-
`
|
|
624
|
+
`iap.WebRegionForwardingRuleServiceIamBinding` can be used per role. Note that custom roles must be of the format
|
|
616
625
|
`[projects|organizations]/{parent-name}/roles/{role-name}`.
|
|
617
|
-
:param pulumi.Input[_builtins.str] security_gateways_id: Part of `parent`. See documentation of `projectsId`. Used to find the parent resource to bind the IAM policy to
|
|
618
626
|
"""
|
|
619
627
|
...
|
|
620
628
|
@overload
|
|
621
629
|
def __init__(__self__,
|
|
622
630
|
resource_name: str,
|
|
623
|
-
args:
|
|
631
|
+
args: WebRegionForwardingRuleServiceIamBindingArgs,
|
|
624
632
|
opts: Optional[pulumi.ResourceOptions] = None):
|
|
625
633
|
"""
|
|
626
|
-
|
|
627
|
-
|
|
628
|
-
Three different resources help you manage your IAM policy for BeyondCorp Application. Each of these resources serves a different use case:
|
|
634
|
+
Three different resources help you manage your IAM policy for Identity-Aware Proxy WebRegionForwardingRuleService. Each of these resources serves a different use case:
|
|
629
635
|
|
|
630
|
-
* `
|
|
631
|
-
* `
|
|
632
|
-
* `
|
|
636
|
+
* `iap.WebRegionForwardingRuleServiceIamPolicy`: Authoritative. Sets the IAM policy for the webregionforwardingruleservice and replaces any existing policy already attached.
|
|
637
|
+
* `iap.WebRegionForwardingRuleServiceIamBinding`: Authoritative for a given role. Updates the IAM policy to grant a role to a list of members. Other roles within the IAM policy for the webregionforwardingruleservice are preserved.
|
|
638
|
+
* `iap.WebRegionForwardingRuleServiceIamMember`: Non-authoritative. Updates the IAM policy to grant a role to a new member. Other members for the role for the webregionforwardingruleservice are preserved.
|
|
633
639
|
|
|
634
640
|
A data source can be used to retrieve policy data in advent you do not need creation
|
|
635
641
|
|
|
636
|
-
* `
|
|
642
|
+
* `iap.WebRegionForwardingRuleServiceIamPolicy`: Retrieves the IAM policy for the webregionforwardingruleservice
|
|
637
643
|
|
|
638
|
-
> **Note:** `
|
|
644
|
+
> **Note:** `iap.WebRegionForwardingRuleServiceIamPolicy` **cannot** be used in conjunction with `iap.WebRegionForwardingRuleServiceIamBinding` and `iap.WebRegionForwardingRuleServiceIamMember` or they will fight over what your policy should be.
|
|
639
645
|
|
|
640
|
-
> **Note:** `
|
|
646
|
+
> **Note:** `iap.WebRegionForwardingRuleServiceIamBinding` resources **can be** used in conjunction with `iap.WebRegionForwardingRuleServiceIamMember` resources **only if** they do not grant privilege to the same role.
|
|
641
647
|
|
|
642
648
|
> **Note:** This resource supports IAM Conditions but they have some known limitations which can be found [here](https://cloud.google.com/iam/docs/conditions-overview#limitations). Please review this article if you are having issues with IAM Conditions.
|
|
643
649
|
|
|
644
|
-
##
|
|
650
|
+
## iap.WebRegionForwardingRuleServiceIamPolicy
|
|
645
651
|
|
|
646
652
|
```python
|
|
647
653
|
import pulumi
|
|
648
654
|
import pulumi_gcp as gcp
|
|
649
655
|
|
|
650
656
|
admin = gcp.organizations.get_iam_policy(bindings=[{
|
|
651
|
-
"role": "roles/
|
|
657
|
+
"role": "roles/iap.httpsResourceAccessor",
|
|
652
658
|
"members": ["user:jane@example.com"],
|
|
653
659
|
}])
|
|
654
|
-
policy = gcp.
|
|
655
|
-
project=
|
|
656
|
-
|
|
657
|
-
|
|
660
|
+
policy = gcp.iap.WebRegionForwardingRuleServiceIamPolicy("policy",
|
|
661
|
+
project=default["project"],
|
|
662
|
+
region=default["region"],
|
|
663
|
+
forwarding_rule_region_service_name=default["name"],
|
|
658
664
|
policy_data=admin.policy_data)
|
|
659
665
|
```
|
|
660
666
|
|
|
@@ -665,7 +671,7 @@ class ApplicationIamBinding(pulumi.CustomResource):
|
|
|
665
671
|
import pulumi_gcp as gcp
|
|
666
672
|
|
|
667
673
|
admin = gcp.organizations.get_iam_policy(bindings=[{
|
|
668
|
-
"role": "roles/
|
|
674
|
+
"role": "roles/iap.httpsResourceAccessor",
|
|
669
675
|
"members": ["user:jane@example.com"],
|
|
670
676
|
"condition": {
|
|
671
677
|
"title": "expires_after_2019_12_31",
|
|
@@ -673,23 +679,23 @@ class ApplicationIamBinding(pulumi.CustomResource):
|
|
|
673
679
|
"expression": "request.time < timestamp(\\"2020-01-01T00:00:00Z\\")",
|
|
674
680
|
},
|
|
675
681
|
}])
|
|
676
|
-
policy = gcp.
|
|
677
|
-
project=
|
|
678
|
-
|
|
679
|
-
|
|
682
|
+
policy = gcp.iap.WebRegionForwardingRuleServiceIamPolicy("policy",
|
|
683
|
+
project=default["project"],
|
|
684
|
+
region=default["region"],
|
|
685
|
+
forwarding_rule_region_service_name=default["name"],
|
|
680
686
|
policy_data=admin.policy_data)
|
|
681
687
|
```
|
|
682
|
-
##
|
|
688
|
+
## iap.WebRegionForwardingRuleServiceIamBinding
|
|
683
689
|
|
|
684
690
|
```python
|
|
685
691
|
import pulumi
|
|
686
692
|
import pulumi_gcp as gcp
|
|
687
693
|
|
|
688
|
-
binding = gcp.
|
|
689
|
-
project=
|
|
690
|
-
|
|
691
|
-
|
|
692
|
-
role="roles/
|
|
694
|
+
binding = gcp.iap.WebRegionForwardingRuleServiceIamBinding("binding",
|
|
695
|
+
project=default["project"],
|
|
696
|
+
region=default["region"],
|
|
697
|
+
forwarding_rule_region_service_name=default["name"],
|
|
698
|
+
role="roles/iap.httpsResourceAccessor",
|
|
693
699
|
members=["user:jane@example.com"])
|
|
694
700
|
```
|
|
695
701
|
|
|
@@ -699,11 +705,11 @@ class ApplicationIamBinding(pulumi.CustomResource):
|
|
|
699
705
|
import pulumi
|
|
700
706
|
import pulumi_gcp as gcp
|
|
701
707
|
|
|
702
|
-
binding = gcp.
|
|
703
|
-
project=
|
|
704
|
-
|
|
705
|
-
|
|
706
|
-
role="roles/
|
|
708
|
+
binding = gcp.iap.WebRegionForwardingRuleServiceIamBinding("binding",
|
|
709
|
+
project=default["project"],
|
|
710
|
+
region=default["region"],
|
|
711
|
+
forwarding_rule_region_service_name=default["name"],
|
|
712
|
+
role="roles/iap.httpsResourceAccessor",
|
|
707
713
|
members=["user:jane@example.com"],
|
|
708
714
|
condition={
|
|
709
715
|
"title": "expires_after_2019_12_31",
|
|
@@ -711,17 +717,17 @@ class ApplicationIamBinding(pulumi.CustomResource):
|
|
|
711
717
|
"expression": "request.time < timestamp(\\"2020-01-01T00:00:00Z\\")",
|
|
712
718
|
})
|
|
713
719
|
```
|
|
714
|
-
##
|
|
720
|
+
## iap.WebRegionForwardingRuleServiceIamMember
|
|
715
721
|
|
|
716
722
|
```python
|
|
717
723
|
import pulumi
|
|
718
724
|
import pulumi_gcp as gcp
|
|
719
725
|
|
|
720
|
-
member = gcp.
|
|
721
|
-
project=
|
|
722
|
-
|
|
723
|
-
|
|
724
|
-
role="roles/
|
|
726
|
+
member = gcp.iap.WebRegionForwardingRuleServiceIamMember("member",
|
|
727
|
+
project=default["project"],
|
|
728
|
+
region=default["region"],
|
|
729
|
+
forwarding_rule_region_service_name=default["name"],
|
|
730
|
+
role="roles/iap.httpsResourceAccessor",
|
|
725
731
|
member="user:jane@example.com")
|
|
726
732
|
```
|
|
727
733
|
|
|
@@ -731,11 +737,11 @@ class ApplicationIamBinding(pulumi.CustomResource):
|
|
|
731
737
|
import pulumi
|
|
732
738
|
import pulumi_gcp as gcp
|
|
733
739
|
|
|
734
|
-
member = gcp.
|
|
735
|
-
project=
|
|
736
|
-
|
|
737
|
-
|
|
738
|
-
role="roles/
|
|
740
|
+
member = gcp.iap.WebRegionForwardingRuleServiceIamMember("member",
|
|
741
|
+
project=default["project"],
|
|
742
|
+
region=default["region"],
|
|
743
|
+
forwarding_rule_region_service_name=default["name"],
|
|
744
|
+
role="roles/iap.httpsResourceAccessor",
|
|
739
745
|
member="user:jane@example.com",
|
|
740
746
|
condition={
|
|
741
747
|
"title": "expires_after_2019_12_31",
|
|
@@ -748,39 +754,38 @@ class ApplicationIamBinding(pulumi.CustomResource):
|
|
|
748
754
|
|
|
749
755
|
-
|
|
750
756
|
|
|
751
|
-
# IAM policy for
|
|
752
|
-
> **Warning:** `beyondcorp.Application` and associated IAM resources are deprecated. Use `beyondcorp.SecurityGatewayApplication` instead.
|
|
757
|
+
# IAM policy for Identity-Aware Proxy WebRegionForwardingRuleService
|
|
753
758
|
|
|
754
|
-
Three different resources help you manage your IAM policy for
|
|
759
|
+
Three different resources help you manage your IAM policy for Identity-Aware Proxy WebRegionForwardingRuleService. Each of these resources serves a different use case:
|
|
755
760
|
|
|
756
|
-
* `
|
|
757
|
-
* `
|
|
758
|
-
* `
|
|
761
|
+
* `iap.WebRegionForwardingRuleServiceIamPolicy`: Authoritative. Sets the IAM policy for the webregionforwardingruleservice and replaces any existing policy already attached.
|
|
762
|
+
* `iap.WebRegionForwardingRuleServiceIamBinding`: Authoritative for a given role. Updates the IAM policy to grant a role to a list of members. Other roles within the IAM policy for the webregionforwardingruleservice are preserved.
|
|
763
|
+
* `iap.WebRegionForwardingRuleServiceIamMember`: Non-authoritative. Updates the IAM policy to grant a role to a new member. Other members for the role for the webregionforwardingruleservice are preserved.
|
|
759
764
|
|
|
760
765
|
A data source can be used to retrieve policy data in advent you do not need creation
|
|
761
766
|
|
|
762
|
-
* `
|
|
767
|
+
* `iap.WebRegionForwardingRuleServiceIamPolicy`: Retrieves the IAM policy for the webregionforwardingruleservice
|
|
763
768
|
|
|
764
|
-
> **Note:** `
|
|
769
|
+
> **Note:** `iap.WebRegionForwardingRuleServiceIamPolicy` **cannot** be used in conjunction with `iap.WebRegionForwardingRuleServiceIamBinding` and `iap.WebRegionForwardingRuleServiceIamMember` or they will fight over what your policy should be.
|
|
765
770
|
|
|
766
|
-
> **Note:** `
|
|
771
|
+
> **Note:** `iap.WebRegionForwardingRuleServiceIamBinding` resources **can be** used in conjunction with `iap.WebRegionForwardingRuleServiceIamMember` resources **only if** they do not grant privilege to the same role.
|
|
767
772
|
|
|
768
773
|
> **Note:** This resource supports IAM Conditions but they have some known limitations which can be found [here](https://cloud.google.com/iam/docs/conditions-overview#limitations). Please review this article if you are having issues with IAM Conditions.
|
|
769
774
|
|
|
770
|
-
##
|
|
775
|
+
## iap.WebRegionForwardingRuleServiceIamPolicy
|
|
771
776
|
|
|
772
777
|
```python
|
|
773
778
|
import pulumi
|
|
774
779
|
import pulumi_gcp as gcp
|
|
775
780
|
|
|
776
781
|
admin = gcp.organizations.get_iam_policy(bindings=[{
|
|
777
|
-
"role": "roles/
|
|
782
|
+
"role": "roles/iap.httpsResourceAccessor",
|
|
778
783
|
"members": ["user:jane@example.com"],
|
|
779
784
|
}])
|
|
780
|
-
policy = gcp.
|
|
781
|
-
project=
|
|
782
|
-
|
|
783
|
-
|
|
785
|
+
policy = gcp.iap.WebRegionForwardingRuleServiceIamPolicy("policy",
|
|
786
|
+
project=default["project"],
|
|
787
|
+
region=default["region"],
|
|
788
|
+
forwarding_rule_region_service_name=default["name"],
|
|
784
789
|
policy_data=admin.policy_data)
|
|
785
790
|
```
|
|
786
791
|
|
|
@@ -791,7 +796,7 @@ class ApplicationIamBinding(pulumi.CustomResource):
|
|
|
791
796
|
import pulumi_gcp as gcp
|
|
792
797
|
|
|
793
798
|
admin = gcp.organizations.get_iam_policy(bindings=[{
|
|
794
|
-
"role": "roles/
|
|
799
|
+
"role": "roles/iap.httpsResourceAccessor",
|
|
795
800
|
"members": ["user:jane@example.com"],
|
|
796
801
|
"condition": {
|
|
797
802
|
"title": "expires_after_2019_12_31",
|
|
@@ -799,23 +804,23 @@ class ApplicationIamBinding(pulumi.CustomResource):
|
|
|
799
804
|
"expression": "request.time < timestamp(\\"2020-01-01T00:00:00Z\\")",
|
|
800
805
|
},
|
|
801
806
|
}])
|
|
802
|
-
policy = gcp.
|
|
803
|
-
project=
|
|
804
|
-
|
|
805
|
-
|
|
807
|
+
policy = gcp.iap.WebRegionForwardingRuleServiceIamPolicy("policy",
|
|
808
|
+
project=default["project"],
|
|
809
|
+
region=default["region"],
|
|
810
|
+
forwarding_rule_region_service_name=default["name"],
|
|
806
811
|
policy_data=admin.policy_data)
|
|
807
812
|
```
|
|
808
|
-
##
|
|
813
|
+
## iap.WebRegionForwardingRuleServiceIamBinding
|
|
809
814
|
|
|
810
815
|
```python
|
|
811
816
|
import pulumi
|
|
812
817
|
import pulumi_gcp as gcp
|
|
813
818
|
|
|
814
|
-
binding = gcp.
|
|
815
|
-
project=
|
|
816
|
-
|
|
817
|
-
|
|
818
|
-
role="roles/
|
|
819
|
+
binding = gcp.iap.WebRegionForwardingRuleServiceIamBinding("binding",
|
|
820
|
+
project=default["project"],
|
|
821
|
+
region=default["region"],
|
|
822
|
+
forwarding_rule_region_service_name=default["name"],
|
|
823
|
+
role="roles/iap.httpsResourceAccessor",
|
|
819
824
|
members=["user:jane@example.com"])
|
|
820
825
|
```
|
|
821
826
|
|
|
@@ -825,11 +830,11 @@ class ApplicationIamBinding(pulumi.CustomResource):
|
|
|
825
830
|
import pulumi
|
|
826
831
|
import pulumi_gcp as gcp
|
|
827
832
|
|
|
828
|
-
binding = gcp.
|
|
829
|
-
project=
|
|
830
|
-
|
|
831
|
-
|
|
832
|
-
role="roles/
|
|
833
|
+
binding = gcp.iap.WebRegionForwardingRuleServiceIamBinding("binding",
|
|
834
|
+
project=default["project"],
|
|
835
|
+
region=default["region"],
|
|
836
|
+
forwarding_rule_region_service_name=default["name"],
|
|
837
|
+
role="roles/iap.httpsResourceAccessor",
|
|
833
838
|
members=["user:jane@example.com"],
|
|
834
839
|
condition={
|
|
835
840
|
"title": "expires_after_2019_12_31",
|
|
@@ -837,17 +842,17 @@ class ApplicationIamBinding(pulumi.CustomResource):
|
|
|
837
842
|
"expression": "request.time < timestamp(\\"2020-01-01T00:00:00Z\\")",
|
|
838
843
|
})
|
|
839
844
|
```
|
|
840
|
-
##
|
|
845
|
+
## iap.WebRegionForwardingRuleServiceIamMember
|
|
841
846
|
|
|
842
847
|
```python
|
|
843
848
|
import pulumi
|
|
844
849
|
import pulumi_gcp as gcp
|
|
845
850
|
|
|
846
|
-
member = gcp.
|
|
847
|
-
project=
|
|
848
|
-
|
|
849
|
-
|
|
850
|
-
role="roles/
|
|
851
|
+
member = gcp.iap.WebRegionForwardingRuleServiceIamMember("member",
|
|
852
|
+
project=default["project"],
|
|
853
|
+
region=default["region"],
|
|
854
|
+
forwarding_rule_region_service_name=default["name"],
|
|
855
|
+
role="roles/iap.httpsResourceAccessor",
|
|
851
856
|
member="user:jane@example.com")
|
|
852
857
|
```
|
|
853
858
|
|
|
@@ -857,11 +862,11 @@ class ApplicationIamBinding(pulumi.CustomResource):
|
|
|
857
862
|
import pulumi
|
|
858
863
|
import pulumi_gcp as gcp
|
|
859
864
|
|
|
860
|
-
member = gcp.
|
|
861
|
-
project=
|
|
862
|
-
|
|
863
|
-
|
|
864
|
-
role="roles/
|
|
865
|
+
member = gcp.iap.WebRegionForwardingRuleServiceIamMember("member",
|
|
866
|
+
project=default["project"],
|
|
867
|
+
region=default["region"],
|
|
868
|
+
forwarding_rule_region_service_name=default["name"],
|
|
869
|
+
role="roles/iap.httpsResourceAccessor",
|
|
865
870
|
member="user:jane@example.com",
|
|
866
871
|
condition={
|
|
867
872
|
"title": "expires_after_2019_12_31",
|
|
@@ -874,34 +879,34 @@ class ApplicationIamBinding(pulumi.CustomResource):
|
|
|
874
879
|
|
|
875
880
|
For all import syntaxes, the "resource in question" can take any of the following forms:
|
|
876
881
|
|
|
877
|
-
* projects/{{project}}/
|
|
882
|
+
* projects/{{project}}/iap_web/forwarding_rule-{{region}}/services/{{name}}
|
|
878
883
|
|
|
879
|
-
* {{project}}/{{
|
|
884
|
+
* {{project}}/{{region}}/{{name}}
|
|
880
885
|
|
|
881
|
-
* {{
|
|
886
|
+
* {{region}}/{{name}}
|
|
882
887
|
|
|
883
|
-
* {{
|
|
888
|
+
* {{name}}
|
|
884
889
|
|
|
885
890
|
Any variables not passed in the import command will be taken from the provider configuration.
|
|
886
891
|
|
|
887
|
-
|
|
892
|
+
Identity-Aware Proxy webregionforwardingruleservice IAM resources can be imported using the resource identifiers, role, and member.
|
|
888
893
|
|
|
889
894
|
IAM member imports use space-delimited identifiers: the resource in question, the role, and the member identity, e.g.
|
|
890
895
|
|
|
891
896
|
```sh
|
|
892
|
-
$ pulumi import gcp:
|
|
897
|
+
$ pulumi import gcp:iap/webRegionForwardingRuleServiceIamBinding:WebRegionForwardingRuleServiceIamBinding editor "projects/{{project}}/iap_web/forwarding_rule-{{region}}/services/{{web_region_forwarding_rule_service}} roles/iap.httpsResourceAccessor user:jane@example.com"
|
|
893
898
|
```
|
|
894
899
|
|
|
895
900
|
IAM binding imports use space-delimited identifiers: the resource in question and the role, e.g.
|
|
896
901
|
|
|
897
902
|
```sh
|
|
898
|
-
$ pulumi import gcp:
|
|
903
|
+
$ pulumi import gcp:iap/webRegionForwardingRuleServiceIamBinding:WebRegionForwardingRuleServiceIamBinding editor "projects/{{project}}/iap_web/forwarding_rule-{{region}}/services/{{web_region_forwarding_rule_service}} roles/iap.httpsResourceAccessor"
|
|
899
904
|
```
|
|
900
905
|
|
|
901
906
|
IAM policy imports use the identifier of the resource in question, e.g.
|
|
902
907
|
|
|
903
908
|
```sh
|
|
904
|
-
$ pulumi import gcp:
|
|
909
|
+
$ pulumi import gcp:iap/webRegionForwardingRuleServiceIamBinding:WebRegionForwardingRuleServiceIamBinding editor projects/{{project}}/iap_web/forwarding_rule-{{region}}/services/{{web_region_forwarding_rule_service}}
|
|
905
910
|
```
|
|
906
911
|
|
|
907
912
|
-> **Custom Roles** If you're importing a IAM resource with a custom role, make sure to use the
|
|
@@ -909,12 +914,12 @@ class ApplicationIamBinding(pulumi.CustomResource):
|
|
|
909
914
|
full name of the custom role, e.g. `[projects/my-project|organizations/my-org]/roles/my-custom-role`.
|
|
910
915
|
|
|
911
916
|
:param str resource_name: The name of the resource.
|
|
912
|
-
:param
|
|
917
|
+
:param WebRegionForwardingRuleServiceIamBindingArgs args: The arguments to use to populate this resource's properties.
|
|
913
918
|
:param pulumi.ResourceOptions opts: Options for the resource.
|
|
914
919
|
"""
|
|
915
920
|
...
|
|
916
921
|
def __init__(__self__, resource_name: str, *args, **kwargs):
|
|
917
|
-
resource_args, opts = _utilities.get_resource_args_opts(
|
|
922
|
+
resource_args, opts = _utilities.get_resource_args_opts(WebRegionForwardingRuleServiceIamBindingArgs, pulumi.ResourceOptions, *args, **kwargs)
|
|
918
923
|
if resource_args is not None:
|
|
919
924
|
__self__._internal_init(resource_name, opts, **resource_args.__dict__)
|
|
920
925
|
else:
|
|
@@ -923,12 +928,12 @@ class ApplicationIamBinding(pulumi.CustomResource):
|
|
|
923
928
|
def _internal_init(__self__,
|
|
924
929
|
resource_name: str,
|
|
925
930
|
opts: Optional[pulumi.ResourceOptions] = None,
|
|
926
|
-
|
|
927
|
-
|
|
931
|
+
condition: Optional[pulumi.Input[Union['WebRegionForwardingRuleServiceIamBindingConditionArgs', 'WebRegionForwardingRuleServiceIamBindingConditionArgsDict']]] = None,
|
|
932
|
+
forwarding_rule_region_service_name: Optional[pulumi.Input[_builtins.str]] = None,
|
|
928
933
|
members: Optional[pulumi.Input[Sequence[pulumi.Input[_builtins.str]]]] = None,
|
|
929
934
|
project: Optional[pulumi.Input[_builtins.str]] = None,
|
|
935
|
+
region: Optional[pulumi.Input[_builtins.str]] = None,
|
|
930
936
|
role: Optional[pulumi.Input[_builtins.str]] = None,
|
|
931
|
-
security_gateways_id: Optional[pulumi.Input[_builtins.str]] = None,
|
|
932
937
|
__props__=None):
|
|
933
938
|
opts = pulumi.ResourceOptions.merge(_utilities.get_resource_opts_defaults(), opts)
|
|
934
939
|
if not isinstance(opts, pulumi.ResourceOptions):
|
|
@@ -936,25 +941,23 @@ class ApplicationIamBinding(pulumi.CustomResource):
|
|
|
936
941
|
if opts.id is None:
|
|
937
942
|
if __props__ is not None:
|
|
938
943
|
raise TypeError('__props__ is only valid when passed in combination with a valid opts.id to get an existing resource')
|
|
939
|
-
__props__ =
|
|
944
|
+
__props__ = WebRegionForwardingRuleServiceIamBindingArgs.__new__(WebRegionForwardingRuleServiceIamBindingArgs)
|
|
940
945
|
|
|
941
|
-
if application_id is None and not opts.urn:
|
|
942
|
-
raise TypeError("Missing required property 'application_id'")
|
|
943
|
-
__props__.__dict__["application_id"] = application_id
|
|
944
946
|
__props__.__dict__["condition"] = condition
|
|
947
|
+
if forwarding_rule_region_service_name is None and not opts.urn:
|
|
948
|
+
raise TypeError("Missing required property 'forwarding_rule_region_service_name'")
|
|
949
|
+
__props__.__dict__["forwarding_rule_region_service_name"] = forwarding_rule_region_service_name
|
|
945
950
|
if members is None and not opts.urn:
|
|
946
951
|
raise TypeError("Missing required property 'members'")
|
|
947
952
|
__props__.__dict__["members"] = members
|
|
948
953
|
__props__.__dict__["project"] = project
|
|
954
|
+
__props__.__dict__["region"] = region
|
|
949
955
|
if role is None and not opts.urn:
|
|
950
956
|
raise TypeError("Missing required property 'role'")
|
|
951
957
|
__props__.__dict__["role"] = role
|
|
952
|
-
if security_gateways_id is None and not opts.urn:
|
|
953
|
-
raise TypeError("Missing required property 'security_gateways_id'")
|
|
954
|
-
__props__.__dict__["security_gateways_id"] = security_gateways_id
|
|
955
958
|
__props__.__dict__["etag"] = None
|
|
956
|
-
super(
|
|
957
|
-
'gcp:
|
|
959
|
+
super(WebRegionForwardingRuleServiceIamBinding, __self__).__init__(
|
|
960
|
+
'gcp:iap/webRegionForwardingRuleServiceIamBinding:WebRegionForwardingRuleServiceIamBinding',
|
|
958
961
|
resource_name,
|
|
959
962
|
__props__,
|
|
960
963
|
opts)
|
|
@@ -963,24 +966,24 @@ class ApplicationIamBinding(pulumi.CustomResource):
|
|
|
963
966
|
def get(resource_name: str,
|
|
964
967
|
id: pulumi.Input[str],
|
|
965
968
|
opts: Optional[pulumi.ResourceOptions] = None,
|
|
966
|
-
|
|
967
|
-
condition: Optional[pulumi.Input[Union['ApplicationIamBindingConditionArgs', 'ApplicationIamBindingConditionArgsDict']]] = None,
|
|
969
|
+
condition: Optional[pulumi.Input[Union['WebRegionForwardingRuleServiceIamBindingConditionArgs', 'WebRegionForwardingRuleServiceIamBindingConditionArgsDict']]] = None,
|
|
968
970
|
etag: Optional[pulumi.Input[_builtins.str]] = None,
|
|
971
|
+
forwarding_rule_region_service_name: Optional[pulumi.Input[_builtins.str]] = None,
|
|
969
972
|
members: Optional[pulumi.Input[Sequence[pulumi.Input[_builtins.str]]]] = None,
|
|
970
973
|
project: Optional[pulumi.Input[_builtins.str]] = None,
|
|
971
|
-
|
|
972
|
-
|
|
974
|
+
region: Optional[pulumi.Input[_builtins.str]] = None,
|
|
975
|
+
role: Optional[pulumi.Input[_builtins.str]] = None) -> 'WebRegionForwardingRuleServiceIamBinding':
|
|
973
976
|
"""
|
|
974
|
-
Get an existing
|
|
977
|
+
Get an existing WebRegionForwardingRuleServiceIamBinding resource's state with the given name, id, and optional extra
|
|
975
978
|
properties used to qualify the lookup.
|
|
976
979
|
|
|
977
980
|
:param str resource_name: The unique name of the resulting resource.
|
|
978
981
|
:param pulumi.Input[str] id: The unique provider ID of the resource to lookup.
|
|
979
982
|
:param pulumi.ResourceOptions opts: Options for the resource.
|
|
980
|
-
:param pulumi.Input[
|
|
981
|
-
:param pulumi.Input[Union['ApplicationIamBindingConditionArgs', 'ApplicationIamBindingConditionArgsDict']] condition: An [IAM Condition](https://cloud.google.com/iam/docs/conditions-overview) for a given binding.
|
|
983
|
+
:param pulumi.Input[Union['WebRegionForwardingRuleServiceIamBindingConditionArgs', 'WebRegionForwardingRuleServiceIamBindingConditionArgsDict']] condition: An [IAM Condition](https://cloud.google.com/iam/docs/conditions-overview) for a given binding.
|
|
982
984
|
Structure is documented below.
|
|
983
985
|
:param pulumi.Input[_builtins.str] etag: (Computed) The etag of the IAM policy.
|
|
986
|
+
:param pulumi.Input[_builtins.str] forwarding_rule_region_service_name: Used to find the parent resource to bind the IAM policy to
|
|
984
987
|
:param pulumi.Input[Sequence[pulumi.Input[_builtins.str]]] members: Identities that will be granted the privilege in `role`.
|
|
985
988
|
Each entry can have one of the following values:
|
|
986
989
|
* **allUsers**: A special identifier that represents anyone who is on the internet; with or without a Google account.
|
|
@@ -994,35 +997,29 @@ class ApplicationIamBinding(pulumi.CustomResource):
|
|
|
994
997
|
* **projectViewer:projectid**: Viewers of the given project. For example, "projectViewer:my-example-project"
|
|
995
998
|
:param pulumi.Input[_builtins.str] project: The ID of the project in which the resource belongs.
|
|
996
999
|
If it is not provided, the project will be parsed from the identifier of the parent resource. If no project is provided in the parent identifier and no project is specified, the provider project is used.
|
|
1000
|
+
:param pulumi.Input[_builtins.str] region: Used to find the parent resource to bind the IAM policy to. If not specified,
|
|
1001
|
+
the value will be parsed from the identifier of the parent resource. If no region is provided in the parent identifier and no
|
|
1002
|
+
region is specified, it is taken from the provider configuration.
|
|
997
1003
|
:param pulumi.Input[_builtins.str] role: The role that should be applied. Only one
|
|
998
|
-
`
|
|
1004
|
+
`iap.WebRegionForwardingRuleServiceIamBinding` can be used per role. Note that custom roles must be of the format
|
|
999
1005
|
`[projects|organizations]/{parent-name}/roles/{role-name}`.
|
|
1000
|
-
:param pulumi.Input[_builtins.str] security_gateways_id: Part of `parent`. See documentation of `projectsId`. Used to find the parent resource to bind the IAM policy to
|
|
1001
1006
|
"""
|
|
1002
1007
|
opts = pulumi.ResourceOptions.merge(opts, pulumi.ResourceOptions(id=id))
|
|
1003
1008
|
|
|
1004
|
-
__props__ =
|
|
1009
|
+
__props__ = _WebRegionForwardingRuleServiceIamBindingState.__new__(_WebRegionForwardingRuleServiceIamBindingState)
|
|
1005
1010
|
|
|
1006
|
-
__props__.__dict__["application_id"] = application_id
|
|
1007
1011
|
__props__.__dict__["condition"] = condition
|
|
1008
1012
|
__props__.__dict__["etag"] = etag
|
|
1013
|
+
__props__.__dict__["forwarding_rule_region_service_name"] = forwarding_rule_region_service_name
|
|
1009
1014
|
__props__.__dict__["members"] = members
|
|
1010
1015
|
__props__.__dict__["project"] = project
|
|
1016
|
+
__props__.__dict__["region"] = region
|
|
1011
1017
|
__props__.__dict__["role"] = role
|
|
1012
|
-
|
|
1013
|
-
return ApplicationIamBinding(resource_name, opts=opts, __props__=__props__)
|
|
1014
|
-
|
|
1015
|
-
@_builtins.property
|
|
1016
|
-
@pulumi.getter(name="applicationId")
|
|
1017
|
-
def application_id(self) -> pulumi.Output[_builtins.str]:
|
|
1018
|
-
"""
|
|
1019
|
-
Used to find the parent resource to bind the IAM policy to
|
|
1020
|
-
"""
|
|
1021
|
-
return pulumi.get(self, "application_id")
|
|
1018
|
+
return WebRegionForwardingRuleServiceIamBinding(resource_name, opts=opts, __props__=__props__)
|
|
1022
1019
|
|
|
1023
1020
|
@_builtins.property
|
|
1024
1021
|
@pulumi.getter
|
|
1025
|
-
def condition(self) -> pulumi.Output[Optional['outputs.
|
|
1022
|
+
def condition(self) -> pulumi.Output[Optional['outputs.WebRegionForwardingRuleServiceIamBindingCondition']]:
|
|
1026
1023
|
"""
|
|
1027
1024
|
An [IAM Condition](https://cloud.google.com/iam/docs/conditions-overview) for a given binding.
|
|
1028
1025
|
Structure is documented below.
|
|
@@ -1037,6 +1034,14 @@ class ApplicationIamBinding(pulumi.CustomResource):
|
|
|
1037
1034
|
"""
|
|
1038
1035
|
return pulumi.get(self, "etag")
|
|
1039
1036
|
|
|
1037
|
+
@_builtins.property
|
|
1038
|
+
@pulumi.getter(name="forwardingRuleRegionServiceName")
|
|
1039
|
+
def forwarding_rule_region_service_name(self) -> pulumi.Output[_builtins.str]:
|
|
1040
|
+
"""
|
|
1041
|
+
Used to find the parent resource to bind the IAM policy to
|
|
1042
|
+
"""
|
|
1043
|
+
return pulumi.get(self, "forwarding_rule_region_service_name")
|
|
1044
|
+
|
|
1040
1045
|
@_builtins.property
|
|
1041
1046
|
@pulumi.getter
|
|
1042
1047
|
def members(self) -> pulumi.Output[Sequence[_builtins.str]]:
|
|
@@ -1066,19 +1071,21 @@ class ApplicationIamBinding(pulumi.CustomResource):
|
|
|
1066
1071
|
|
|
1067
1072
|
@_builtins.property
|
|
1068
1073
|
@pulumi.getter
|
|
1069
|
-
def
|
|
1074
|
+
def region(self) -> pulumi.Output[_builtins.str]:
|
|
1070
1075
|
"""
|
|
1071
|
-
|
|
1072
|
-
|
|
1073
|
-
|
|
1076
|
+
Used to find the parent resource to bind the IAM policy to. If not specified,
|
|
1077
|
+
the value will be parsed from the identifier of the parent resource. If no region is provided in the parent identifier and no
|
|
1078
|
+
region is specified, it is taken from the provider configuration.
|
|
1074
1079
|
"""
|
|
1075
|
-
return pulumi.get(self, "
|
|
1080
|
+
return pulumi.get(self, "region")
|
|
1076
1081
|
|
|
1077
1082
|
@_builtins.property
|
|
1078
|
-
@pulumi.getter
|
|
1079
|
-
def
|
|
1083
|
+
@pulumi.getter
|
|
1084
|
+
def role(self) -> pulumi.Output[_builtins.str]:
|
|
1080
1085
|
"""
|
|
1081
|
-
|
|
1086
|
+
The role that should be applied. Only one
|
|
1087
|
+
`iap.WebRegionForwardingRuleServiceIamBinding` can be used per role. Note that custom roles must be of the format
|
|
1088
|
+
`[projects|organizations]/{parent-name}/roles/{role-name}`.
|
|
1082
1089
|
"""
|
|
1083
|
-
return pulumi.get(self, "
|
|
1090
|
+
return pulumi.get(self, "role")
|
|
1084
1091
|
|