pulumi-gcp 9.0.0a1__py3-none-any.whl → 9.0.0a1758219982__py3-none-any.whl
This diff represents the content of publicly available package versions that have been released to one of the supported registries. The information contained in this diff is provided for informational purposes only and reflects changes between package versions as they appear in their respective public registries.
- pulumi_gcp/__init__.py +48 -0
- pulumi_gcp/activedirectory/peering.py +16 -0
- pulumi_gcp/apigateway/api_config_iam_binding.py +4 -4
- pulumi_gcp/apigateway/api_config_iam_member.py +4 -4
- pulumi_gcp/apigateway/api_config_iam_policy.py +4 -4
- pulumi_gcp/apigateway/api_iam_binding.py +4 -4
- pulumi_gcp/apigateway/api_iam_member.py +4 -4
- pulumi_gcp/apigateway/api_iam_policy.py +4 -4
- pulumi_gcp/apigateway/gateway_iam_binding.py +4 -4
- pulumi_gcp/apigateway/gateway_iam_member.py +4 -4
- pulumi_gcp/apigateway/gateway_iam_policy.py +4 -4
- pulumi_gcp/artifactregistry/__init__.py +1 -0
- pulumi_gcp/artifactregistry/get_python_package.py +237 -0
- pulumi_gcp/artifactregistry/get_repository.py +12 -1
- pulumi_gcp/artifactregistry/repository.py +28 -0
- pulumi_gcp/backupdisasterrecovery/__init__.py +1 -0
- pulumi_gcp/backupdisasterrecovery/backup_plan.py +4 -4
- pulumi_gcp/backupdisasterrecovery/get_backup.py +12 -1
- pulumi_gcp/backupdisasterrecovery/get_backup_plan_association.py +4 -0
- pulumi_gcp/backupdisasterrecovery/get_data_source_references.py +135 -0
- pulumi_gcp/backupdisasterrecovery/get_management_server.py +4 -0
- pulumi_gcp/backupdisasterrecovery/outputs.py +103 -0
- pulumi_gcp/bigquery/app_profile.py +14 -49
- pulumi_gcp/bigquery/dataset_access.py +4 -8
- pulumi_gcp/bigquery/table.py +7 -21
- pulumi_gcp/bigqueryanalyticshub/data_exchange_subscription.py +20 -0
- pulumi_gcp/bigtable/app_profile.py +14 -49
- pulumi_gcp/bigtable/table.py +42 -42
- pulumi_gcp/certificatemanager/certificate_map_entry.py +7 -7
- pulumi_gcp/chronicle/_inputs.py +6 -5
- pulumi_gcp/chronicle/outputs.py +4 -3
- pulumi_gcp/chronicle/reference_list.py +53 -5
- pulumi_gcp/cloudasset/get_resources_search_all.py +8 -0
- pulumi_gcp/cloudbuild/_inputs.py +20 -0
- pulumi_gcp/cloudbuild/outputs.py +14 -0
- pulumi_gcp/cloudbuild/trigger.py +4 -2
- pulumi_gcp/cloudbuild/worker_pool.py +28 -21
- pulumi_gcp/cloudfunctions/function.py +4 -8
- pulumi_gcp/cloudquota/s_quota_adjuster_settings.py +16 -0
- pulumi_gcp/cloudrunv2/_inputs.py +57 -0
- pulumi_gcp/cloudrunv2/get_service.py +12 -1
- pulumi_gcp/cloudrunv2/outputs.py +81 -0
- pulumi_gcp/cloudrunv2/service.py +54 -0
- pulumi_gcp/cloudrunv2/worker_pool.py +2 -2
- pulumi_gcp/composer/environment.py +28 -49
- pulumi_gcp/compute/_inputs.py +804 -24
- pulumi_gcp/compute/backend_bucket.py +14 -0
- pulumi_gcp/compute/backend_bucket_iam_binding.py +236 -0
- pulumi_gcp/compute/backend_bucket_iam_member.py +236 -0
- pulumi_gcp/compute/backend_bucket_iam_policy.py +236 -0
- pulumi_gcp/compute/backend_service_iam_binding.py +464 -0
- pulumi_gcp/compute/backend_service_iam_member.py +464 -0
- pulumi_gcp/compute/backend_service_iam_policy.py +464 -0
- pulumi_gcp/compute/cross_site_network.py +16 -0
- pulumi_gcp/compute/future_reservation.py +32 -0
- pulumi_gcp/compute/get_region_backend_service.py +12 -1
- pulumi_gcp/compute/get_resource_policy.py +2 -20
- pulumi_gcp/compute/instance_from_machine_image.py +75 -110
- pulumi_gcp/compute/instance_from_template.py +75 -110
- pulumi_gcp/compute/instance_group_manager.py +7 -14
- pulumi_gcp/compute/instance_template.py +7 -14
- pulumi_gcp/compute/interconnect.py +4 -8
- pulumi_gcp/compute/machine_image_iam_binding.py +8 -4
- pulumi_gcp/compute/machine_image_iam_member.py +8 -4
- pulumi_gcp/compute/machine_image_iam_policy.py +8 -4
- pulumi_gcp/compute/network_edge_security_service.py +16 -0
- pulumi_gcp/compute/network_firewall_policy_packet_mirroring_rule.py +12 -0
- pulumi_gcp/compute/outputs.py +671 -16
- pulumi_gcp/compute/preview_feature.py +16 -0
- pulumi_gcp/compute/public_delegated_prefix.py +42 -0
- pulumi_gcp/compute/region_backend_service.py +54 -0
- pulumi_gcp/compute/region_backend_service_iam_binding.py +488 -0
- pulumi_gcp/compute/region_backend_service_iam_member.py +488 -0
- pulumi_gcp/compute/region_backend_service_iam_policy.py +488 -0
- pulumi_gcp/compute/region_instance_group_manager.py +7 -14
- pulumi_gcp/compute/region_network_endpoint_group.py +1 -3
- pulumi_gcp/compute/region_resize_request.py +24 -0
- pulumi_gcp/compute/region_url_map.py +75 -0
- pulumi_gcp/compute/wire_group.py +16 -0
- pulumi_gcp/container/_inputs.py +446 -18
- pulumi_gcp/container/aws_cluster.py +28 -42
- pulumi_gcp/container/aws_node_pool.py +28 -42
- pulumi_gcp/container/azure_cluster.py +35 -70
- pulumi_gcp/container/azure_node_pool.py +28 -42
- pulumi_gcp/container/cluster.py +16 -7
- pulumi_gcp/container/outputs.py +423 -15
- pulumi_gcp/dataflow/flex_template_job.py +10 -0
- pulumi_gcp/dataform/repository.py +16 -0
- pulumi_gcp/dataform/repository_release_config.py +16 -0
- pulumi_gcp/dataform/repository_workflow_config.py +16 -0
- pulumi_gcp/dataplex/asset.py +28 -21
- pulumi_gcp/dataplex/zone.py +28 -21
- pulumi_gcp/dataproc/cluster.py +21 -14
- pulumi_gcp/dataproc/workflow_template.py +42 -105
- pulumi_gcp/discoveryengine/__init__.py +1 -0
- pulumi_gcp/discoveryengine/_inputs.py +94 -0
- pulumi_gcp/discoveryengine/acl_config.py +393 -0
- pulumi_gcp/discoveryengine/outputs.py +92 -0
- pulumi_gcp/firebase/android_app.py +16 -0
- pulumi_gcp/firebase/apple_app.py +16 -0
- pulumi_gcp/firebase/database_instance.py +16 -0
- pulumi_gcp/firebase/extensions_instance.py +12 -0
- pulumi_gcp/firebase/get_android_app.py +4 -2
- pulumi_gcp/firebase/get_apple_app.py +4 -2
- pulumi_gcp/firebase/get_apple_app_config.py +16 -2
- pulumi_gcp/firebase/get_hosting_channel.py +4 -2
- pulumi_gcp/firebase/hosting_channel.py +20 -0
- pulumi_gcp/firebase/hosting_custom_domain.py +20 -0
- pulumi_gcp/firebase/hosting_release.py +16 -0
- pulumi_gcp/firebase/hosting_site.py +16 -0
- pulumi_gcp/firebase/hosting_version.py +16 -0
- pulumi_gcp/firebase/storage_bucket.py +18 -0
- pulumi_gcp/firestore/index.py +118 -3
- pulumi_gcp/folder/service_identity.py +26 -0
- pulumi_gcp/gkehub/membership_rbac_role_binding.py +16 -0
- pulumi_gcp/healthcare/_inputs.py +205 -0
- pulumi_gcp/healthcare/fhir_store.py +128 -0
- pulumi_gcp/healthcare/outputs.py +163 -0
- pulumi_gcp/iam/workload_identity_pool_iam_binding.py +464 -0
- pulumi_gcp/iam/workload_identity_pool_iam_member.py +464 -0
- pulumi_gcp/iam/workload_identity_pool_iam_policy.py +464 -0
- pulumi_gcp/iam/workload_identity_pool_managed_identity.py +18 -0
- pulumi_gcp/iam/workload_identity_pool_namespace.py +20 -0
- pulumi_gcp/iap/__init__.py +4 -0
- pulumi_gcp/iap/_inputs.py +130 -0
- pulumi_gcp/iap/get_web_forwarding_rule_service_iam_policy.py +159 -0
- pulumi_gcp/iap/outputs.py +76 -0
- pulumi_gcp/iap/web_forwarding_rule_service_iam_binding.py +1002 -0
- pulumi_gcp/iap/web_forwarding_rule_service_iam_member.py +1002 -0
- pulumi_gcp/iap/web_forwarding_rule_service_iam_policy.py +821 -0
- pulumi_gcp/kms/get_kms_secret_asymmetric.py +22 -0
- pulumi_gcp/logging/billing_account_bucket_config.py +7 -21
- pulumi_gcp/logging/folder_bucket_config.py +7 -21
- pulumi_gcp/logging/organization_bucket_config.py +7 -21
- pulumi_gcp/logging/organization_sink.py +7 -7
- pulumi_gcp/managedkafka/connect_cluster.py +4 -0
- pulumi_gcp/managedkafka/connector.py +4 -0
- pulumi_gcp/memorystore/instance.py +14 -14
- pulumi_gcp/monitoring/dashboard.py +7 -14
- pulumi_gcp/netapp/storage_pool.py +91 -2
- pulumi_gcp/netapp/volume.py +47 -0
- pulumi_gcp/networkmanagement/__init__.py +1 -0
- pulumi_gcp/networkmanagement/organization_vpc_flow_logs_config.py +1028 -0
- pulumi_gcp/networksecurity/authorization_policy.py +12 -0
- pulumi_gcp/networkservices/gateway.py +7 -7
- pulumi_gcp/networkservices/service_lb_policies.py +12 -0
- pulumi_gcp/oracledatabase/autonomous_database.py +2 -2
- pulumi_gcp/organizations/project.py +7 -21
- pulumi_gcp/projects/service.py +0 -7
- pulumi_gcp/pulumi-plugin.json +1 -1
- pulumi_gcp/resourcemanager/capability.py +16 -0
- pulumi_gcp/runtimeconfig/config.py +16 -0
- pulumi_gcp/runtimeconfig/config_iam_binding.py +236 -0
- pulumi_gcp/runtimeconfig/config_iam_member.py +236 -0
- pulumi_gcp/runtimeconfig/config_iam_policy.py +236 -0
- pulumi_gcp/runtimeconfig/variable.py +10 -0
- pulumi_gcp/saasruntime/__init__.py +1 -0
- pulumi_gcp/saasruntime/_inputs.py +458 -0
- pulumi_gcp/saasruntime/outputs.py +392 -0
- pulumi_gcp/saasruntime/saa_s.py +4 -0
- pulumi_gcp/saasruntime/unit_kind.py +1024 -0
- pulumi_gcp/securesourcemanager/instance.py +7 -7
- pulumi_gcp/securesourcemanager/repository.py +7 -7
- pulumi_gcp/servicedirectory/namespace_iam_binding.py +4 -4
- pulumi_gcp/servicedirectory/namespace_iam_member.py +4 -4
- pulumi_gcp/servicedirectory/namespace_iam_policy.py +4 -4
- pulumi_gcp/servicedirectory/service_iam_binding.py +4 -4
- pulumi_gcp/servicedirectory/service_iam_member.py +4 -4
- pulumi_gcp/servicedirectory/service_iam_policy.py +4 -4
- pulumi_gcp/sql/_inputs.py +135 -1
- pulumi_gcp/sql/database_instance.py +54 -14
- pulumi_gcp/sql/get_database_instance.py +12 -1
- pulumi_gcp/sql/outputs.py +265 -3
- pulumi_gcp/storage/_inputs.py +246 -0
- pulumi_gcp/storage/bucket.py +7 -14
- pulumi_gcp/storage/bucket_object.py +0 -9
- pulumi_gcp/storage/outputs.py +191 -1
- pulumi_gcp/storage/transfer_job.py +47 -0
- pulumi_gcp/tpu/v2_queued_resource.py +16 -0
- pulumi_gcp/tpu/v2_vm.py +16 -0
- pulumi_gcp/vertex/ai_feature_group_iam_binding.py +236 -0
- pulumi_gcp/vertex/ai_feature_group_iam_member.py +236 -0
- pulumi_gcp/vertex/ai_feature_group_iam_policy.py +236 -0
- pulumi_gcp/vertex/ai_feature_online_store_featureview_iam_binding.py +248 -0
- pulumi_gcp/vertex/ai_feature_online_store_featureview_iam_member.py +248 -0
- pulumi_gcp/vertex/ai_feature_online_store_featureview_iam_policy.py +248 -0
- pulumi_gcp/vertex/ai_feature_online_store_iam_binding.py +236 -0
- pulumi_gcp/vertex/ai_feature_online_store_iam_member.py +236 -0
- pulumi_gcp/vertex/ai_feature_online_store_iam_policy.py +236 -0
- pulumi_gcp/vertex/ai_feature_store_entity_type_iam_binding.py +238 -0
- pulumi_gcp/vertex/ai_feature_store_entity_type_iam_member.py +238 -0
- pulumi_gcp/vertex/ai_feature_store_entity_type_iam_policy.py +238 -0
- pulumi_gcp/vertex/ai_feature_store_iam_binding.py +248 -0
- pulumi_gcp/vertex/ai_feature_store_iam_member.py +248 -0
- pulumi_gcp/vertex/ai_feature_store_iam_policy.py +248 -0
- pulumi_gcp/vertex/ai_metadata_store.py +16 -0
- pulumi_gcp/workstations/workstation.py +16 -0
- pulumi_gcp/workstations/workstation_cluster.py +16 -0
- pulumi_gcp/workstations/workstation_config.py +16 -0
- pulumi_gcp/workstations/workstation_config_iam_binding.py +260 -0
- pulumi_gcp/workstations/workstation_config_iam_member.py +260 -0
- pulumi_gcp/workstations/workstation_config_iam_policy.py +260 -0
- pulumi_gcp/workstations/workstation_iam_binding.py +272 -0
- pulumi_gcp/workstations/workstation_iam_member.py +272 -0
- pulumi_gcp/workstations/workstation_iam_policy.py +272 -0
- {pulumi_gcp-9.0.0a1.dist-info → pulumi_gcp-9.0.0a1758219982.dist-info}/METADATA +1 -1
- {pulumi_gcp-9.0.0a1.dist-info → pulumi_gcp-9.0.0a1758219982.dist-info}/RECORD +209 -200
- {pulumi_gcp-9.0.0a1.dist-info → pulumi_gcp-9.0.0a1758219982.dist-info}/WHEEL +0 -0
- {pulumi_gcp-9.0.0a1.dist-info → pulumi_gcp-9.0.0a1758219982.dist-info}/top_level.txt +0 -0
@@ -278,6 +278,142 @@ class WorkstationIamPolicy(pulumi.CustomResource):
|
|
278
278
|
workstation_id: Optional[pulumi.Input[_builtins.str]] = None,
|
279
279
|
__props__=None):
|
280
280
|
"""
|
281
|
+
Three different resources help you manage your IAM policy for Cloud Workstations Workstation. Each of these resources serves a different use case:
|
282
|
+
|
283
|
+
* `workstations.WorkstationIamPolicy`: Authoritative. Sets the IAM policy for the workstation and replaces any existing policy already attached.
|
284
|
+
* `workstations.WorkstationIamBinding`: Authoritative for a given role. Updates the IAM policy to grant a role to a list of members. Other roles within the IAM policy for the workstation are preserved.
|
285
|
+
* `workstations.WorkstationIamMember`: Non-authoritative. Updates the IAM policy to grant a role to a new member. Other members for the role for the workstation are preserved.
|
286
|
+
|
287
|
+
A data source can be used to retrieve policy data in advent you do not need creation
|
288
|
+
|
289
|
+
* `workstations.WorkstationIamPolicy`: Retrieves the IAM policy for the workstation
|
290
|
+
|
291
|
+
> **Note:** `workstations.WorkstationIamPolicy` **cannot** be used in conjunction with `workstations.WorkstationIamBinding` and `workstations.WorkstationIamMember` or they will fight over what your policy should be.
|
292
|
+
|
293
|
+
> **Note:** `workstations.WorkstationIamBinding` resources **can be** used in conjunction with `workstations.WorkstationIamMember` resources **only if** they do not grant privilege to the same role.
|
294
|
+
|
295
|
+
## workstations.WorkstationIamPolicy
|
296
|
+
|
297
|
+
```python
|
298
|
+
import pulumi
|
299
|
+
import pulumi_gcp as gcp
|
300
|
+
|
301
|
+
admin = gcp.organizations.get_iam_policy(bindings=[{
|
302
|
+
"role": "roles/viewer",
|
303
|
+
"members": ["user:jane@example.com"],
|
304
|
+
}])
|
305
|
+
policy = gcp.workstations.WorkstationIamPolicy("policy",
|
306
|
+
project=default["project"],
|
307
|
+
location=default["location"],
|
308
|
+
workstation_cluster_id=default["workstationClusterId"],
|
309
|
+
workstation_config_id=default["workstationConfigId"],
|
310
|
+
workstation_id=default["workstationId"],
|
311
|
+
policy_data=admin.policy_data)
|
312
|
+
```
|
313
|
+
|
314
|
+
## workstations.WorkstationIamBinding
|
315
|
+
|
316
|
+
```python
|
317
|
+
import pulumi
|
318
|
+
import pulumi_gcp as gcp
|
319
|
+
|
320
|
+
binding = gcp.workstations.WorkstationIamBinding("binding",
|
321
|
+
project=default["project"],
|
322
|
+
location=default["location"],
|
323
|
+
workstation_cluster_id=default["workstationClusterId"],
|
324
|
+
workstation_config_id=default["workstationConfigId"],
|
325
|
+
workstation_id=default["workstationId"],
|
326
|
+
role="roles/viewer",
|
327
|
+
members=["user:jane@example.com"])
|
328
|
+
```
|
329
|
+
|
330
|
+
## workstations.WorkstationIamMember
|
331
|
+
|
332
|
+
```python
|
333
|
+
import pulumi
|
334
|
+
import pulumi_gcp as gcp
|
335
|
+
|
336
|
+
member = gcp.workstations.WorkstationIamMember("member",
|
337
|
+
project=default["project"],
|
338
|
+
location=default["location"],
|
339
|
+
workstation_cluster_id=default["workstationClusterId"],
|
340
|
+
workstation_config_id=default["workstationConfigId"],
|
341
|
+
workstation_id=default["workstationId"],
|
342
|
+
role="roles/viewer",
|
343
|
+
member="user:jane@example.com")
|
344
|
+
```
|
345
|
+
|
346
|
+
## This resource supports User Project Overrides.
|
347
|
+
|
348
|
+
-
|
349
|
+
|
350
|
+
# IAM policy for Cloud Workstations Workstation
|
351
|
+
|
352
|
+
Three different resources help you manage your IAM policy for Cloud Workstations Workstation. Each of these resources serves a different use case:
|
353
|
+
|
354
|
+
* `workstations.WorkstationIamPolicy`: Authoritative. Sets the IAM policy for the workstation and replaces any existing policy already attached.
|
355
|
+
* `workstations.WorkstationIamBinding`: Authoritative for a given role. Updates the IAM policy to grant a role to a list of members. Other roles within the IAM policy for the workstation are preserved.
|
356
|
+
* `workstations.WorkstationIamMember`: Non-authoritative. Updates the IAM policy to grant a role to a new member. Other members for the role for the workstation are preserved.
|
357
|
+
|
358
|
+
A data source can be used to retrieve policy data in advent you do not need creation
|
359
|
+
|
360
|
+
* `workstations.WorkstationIamPolicy`: Retrieves the IAM policy for the workstation
|
361
|
+
|
362
|
+
> **Note:** `workstations.WorkstationIamPolicy` **cannot** be used in conjunction with `workstations.WorkstationIamBinding` and `workstations.WorkstationIamMember` or they will fight over what your policy should be.
|
363
|
+
|
364
|
+
> **Note:** `workstations.WorkstationIamBinding` resources **can be** used in conjunction with `workstations.WorkstationIamMember` resources **only if** they do not grant privilege to the same role.
|
365
|
+
|
366
|
+
## workstations.WorkstationIamPolicy
|
367
|
+
|
368
|
+
```python
|
369
|
+
import pulumi
|
370
|
+
import pulumi_gcp as gcp
|
371
|
+
|
372
|
+
admin = gcp.organizations.get_iam_policy(bindings=[{
|
373
|
+
"role": "roles/viewer",
|
374
|
+
"members": ["user:jane@example.com"],
|
375
|
+
}])
|
376
|
+
policy = gcp.workstations.WorkstationIamPolicy("policy",
|
377
|
+
project=default["project"],
|
378
|
+
location=default["location"],
|
379
|
+
workstation_cluster_id=default["workstationClusterId"],
|
380
|
+
workstation_config_id=default["workstationConfigId"],
|
381
|
+
workstation_id=default["workstationId"],
|
382
|
+
policy_data=admin.policy_data)
|
383
|
+
```
|
384
|
+
|
385
|
+
## workstations.WorkstationIamBinding
|
386
|
+
|
387
|
+
```python
|
388
|
+
import pulumi
|
389
|
+
import pulumi_gcp as gcp
|
390
|
+
|
391
|
+
binding = gcp.workstations.WorkstationIamBinding("binding",
|
392
|
+
project=default["project"],
|
393
|
+
location=default["location"],
|
394
|
+
workstation_cluster_id=default["workstationClusterId"],
|
395
|
+
workstation_config_id=default["workstationConfigId"],
|
396
|
+
workstation_id=default["workstationId"],
|
397
|
+
role="roles/viewer",
|
398
|
+
members=["user:jane@example.com"])
|
399
|
+
```
|
400
|
+
|
401
|
+
## workstations.WorkstationIamMember
|
402
|
+
|
403
|
+
```python
|
404
|
+
import pulumi
|
405
|
+
import pulumi_gcp as gcp
|
406
|
+
|
407
|
+
member = gcp.workstations.WorkstationIamMember("member",
|
408
|
+
project=default["project"],
|
409
|
+
location=default["location"],
|
410
|
+
workstation_cluster_id=default["workstationClusterId"],
|
411
|
+
workstation_config_id=default["workstationConfigId"],
|
412
|
+
workstation_id=default["workstationId"],
|
413
|
+
role="roles/viewer",
|
414
|
+
member="user:jane@example.com")
|
415
|
+
```
|
416
|
+
|
281
417
|
## Import
|
282
418
|
|
283
419
|
For all import syntaxes, the "resource in question" can take any of the following forms:
|
@@ -339,6 +475,142 @@ class WorkstationIamPolicy(pulumi.CustomResource):
|
|
339
475
|
args: WorkstationIamPolicyArgs,
|
340
476
|
opts: Optional[pulumi.ResourceOptions] = None):
|
341
477
|
"""
|
478
|
+
Three different resources help you manage your IAM policy for Cloud Workstations Workstation. Each of these resources serves a different use case:
|
479
|
+
|
480
|
+
* `workstations.WorkstationIamPolicy`: Authoritative. Sets the IAM policy for the workstation and replaces any existing policy already attached.
|
481
|
+
* `workstations.WorkstationIamBinding`: Authoritative for a given role. Updates the IAM policy to grant a role to a list of members. Other roles within the IAM policy for the workstation are preserved.
|
482
|
+
* `workstations.WorkstationIamMember`: Non-authoritative. Updates the IAM policy to grant a role to a new member. Other members for the role for the workstation are preserved.
|
483
|
+
|
484
|
+
A data source can be used to retrieve policy data in advent you do not need creation
|
485
|
+
|
486
|
+
* `workstations.WorkstationIamPolicy`: Retrieves the IAM policy for the workstation
|
487
|
+
|
488
|
+
> **Note:** `workstations.WorkstationIamPolicy` **cannot** be used in conjunction with `workstations.WorkstationIamBinding` and `workstations.WorkstationIamMember` or they will fight over what your policy should be.
|
489
|
+
|
490
|
+
> **Note:** `workstations.WorkstationIamBinding` resources **can be** used in conjunction with `workstations.WorkstationIamMember` resources **only if** they do not grant privilege to the same role.
|
491
|
+
|
492
|
+
## workstations.WorkstationIamPolicy
|
493
|
+
|
494
|
+
```python
|
495
|
+
import pulumi
|
496
|
+
import pulumi_gcp as gcp
|
497
|
+
|
498
|
+
admin = gcp.organizations.get_iam_policy(bindings=[{
|
499
|
+
"role": "roles/viewer",
|
500
|
+
"members": ["user:jane@example.com"],
|
501
|
+
}])
|
502
|
+
policy = gcp.workstations.WorkstationIamPolicy("policy",
|
503
|
+
project=default["project"],
|
504
|
+
location=default["location"],
|
505
|
+
workstation_cluster_id=default["workstationClusterId"],
|
506
|
+
workstation_config_id=default["workstationConfigId"],
|
507
|
+
workstation_id=default["workstationId"],
|
508
|
+
policy_data=admin.policy_data)
|
509
|
+
```
|
510
|
+
|
511
|
+
## workstations.WorkstationIamBinding
|
512
|
+
|
513
|
+
```python
|
514
|
+
import pulumi
|
515
|
+
import pulumi_gcp as gcp
|
516
|
+
|
517
|
+
binding = gcp.workstations.WorkstationIamBinding("binding",
|
518
|
+
project=default["project"],
|
519
|
+
location=default["location"],
|
520
|
+
workstation_cluster_id=default["workstationClusterId"],
|
521
|
+
workstation_config_id=default["workstationConfigId"],
|
522
|
+
workstation_id=default["workstationId"],
|
523
|
+
role="roles/viewer",
|
524
|
+
members=["user:jane@example.com"])
|
525
|
+
```
|
526
|
+
|
527
|
+
## workstations.WorkstationIamMember
|
528
|
+
|
529
|
+
```python
|
530
|
+
import pulumi
|
531
|
+
import pulumi_gcp as gcp
|
532
|
+
|
533
|
+
member = gcp.workstations.WorkstationIamMember("member",
|
534
|
+
project=default["project"],
|
535
|
+
location=default["location"],
|
536
|
+
workstation_cluster_id=default["workstationClusterId"],
|
537
|
+
workstation_config_id=default["workstationConfigId"],
|
538
|
+
workstation_id=default["workstationId"],
|
539
|
+
role="roles/viewer",
|
540
|
+
member="user:jane@example.com")
|
541
|
+
```
|
542
|
+
|
543
|
+
## This resource supports User Project Overrides.
|
544
|
+
|
545
|
+
-
|
546
|
+
|
547
|
+
# IAM policy for Cloud Workstations Workstation
|
548
|
+
|
549
|
+
Three different resources help you manage your IAM policy for Cloud Workstations Workstation. Each of these resources serves a different use case:
|
550
|
+
|
551
|
+
* `workstations.WorkstationIamPolicy`: Authoritative. Sets the IAM policy for the workstation and replaces any existing policy already attached.
|
552
|
+
* `workstations.WorkstationIamBinding`: Authoritative for a given role. Updates the IAM policy to grant a role to a list of members. Other roles within the IAM policy for the workstation are preserved.
|
553
|
+
* `workstations.WorkstationIamMember`: Non-authoritative. Updates the IAM policy to grant a role to a new member. Other members for the role for the workstation are preserved.
|
554
|
+
|
555
|
+
A data source can be used to retrieve policy data in advent you do not need creation
|
556
|
+
|
557
|
+
* `workstations.WorkstationIamPolicy`: Retrieves the IAM policy for the workstation
|
558
|
+
|
559
|
+
> **Note:** `workstations.WorkstationIamPolicy` **cannot** be used in conjunction with `workstations.WorkstationIamBinding` and `workstations.WorkstationIamMember` or they will fight over what your policy should be.
|
560
|
+
|
561
|
+
> **Note:** `workstations.WorkstationIamBinding` resources **can be** used in conjunction with `workstations.WorkstationIamMember` resources **only if** they do not grant privilege to the same role.
|
562
|
+
|
563
|
+
## workstations.WorkstationIamPolicy
|
564
|
+
|
565
|
+
```python
|
566
|
+
import pulumi
|
567
|
+
import pulumi_gcp as gcp
|
568
|
+
|
569
|
+
admin = gcp.organizations.get_iam_policy(bindings=[{
|
570
|
+
"role": "roles/viewer",
|
571
|
+
"members": ["user:jane@example.com"],
|
572
|
+
}])
|
573
|
+
policy = gcp.workstations.WorkstationIamPolicy("policy",
|
574
|
+
project=default["project"],
|
575
|
+
location=default["location"],
|
576
|
+
workstation_cluster_id=default["workstationClusterId"],
|
577
|
+
workstation_config_id=default["workstationConfigId"],
|
578
|
+
workstation_id=default["workstationId"],
|
579
|
+
policy_data=admin.policy_data)
|
580
|
+
```
|
581
|
+
|
582
|
+
## workstations.WorkstationIamBinding
|
583
|
+
|
584
|
+
```python
|
585
|
+
import pulumi
|
586
|
+
import pulumi_gcp as gcp
|
587
|
+
|
588
|
+
binding = gcp.workstations.WorkstationIamBinding("binding",
|
589
|
+
project=default["project"],
|
590
|
+
location=default["location"],
|
591
|
+
workstation_cluster_id=default["workstationClusterId"],
|
592
|
+
workstation_config_id=default["workstationConfigId"],
|
593
|
+
workstation_id=default["workstationId"],
|
594
|
+
role="roles/viewer",
|
595
|
+
members=["user:jane@example.com"])
|
596
|
+
```
|
597
|
+
|
598
|
+
## workstations.WorkstationIamMember
|
599
|
+
|
600
|
+
```python
|
601
|
+
import pulumi
|
602
|
+
import pulumi_gcp as gcp
|
603
|
+
|
604
|
+
member = gcp.workstations.WorkstationIamMember("member",
|
605
|
+
project=default["project"],
|
606
|
+
location=default["location"],
|
607
|
+
workstation_cluster_id=default["workstationClusterId"],
|
608
|
+
workstation_config_id=default["workstationConfigId"],
|
609
|
+
workstation_id=default["workstationId"],
|
610
|
+
role="roles/viewer",
|
611
|
+
member="user:jane@example.com")
|
612
|
+
```
|
613
|
+
|
342
614
|
## Import
|
343
615
|
|
344
616
|
For all import syntaxes, the "resource in question" can take any of the following forms:
|