pulumi-oci 2.25.0a1740032973__py3-none-any.whl → 2.26.0__py3-none-any.whl
This diff represents the content of publicly available package versions that have been released to one of the supported registries. The information contained in this diff is provided for informational purposes only and reflects changes between package versions as they appear in their respective public registries.
- pulumi_oci/__init__.py +102 -0
- pulumi_oci/config/__init__.pyi +2 -0
- pulumi_oci/config/vars.py +4 -0
- pulumi_oci/containerengine/_inputs.py +74 -35
- pulumi_oci/containerengine/cluster.py +4 -0
- pulumi_oci/containerengine/container_instance.py +2 -4
- pulumi_oci/containerengine/outputs.py +180 -21
- pulumi_oci/containerinstances/outputs.py +0 -14
- pulumi_oci/core/_inputs.py +21 -33
- pulumi_oci/core/outputs.py +13 -21
- pulumi_oci/database/__init__.py +1 -0
- pulumi_oci/database/_inputs.py +1246 -57
- pulumi_oci/database/application_vip.py +59 -10
- pulumi_oci/database/autonomous_container_database.py +92 -0
- pulumi_oci/database/autonomous_database.py +90 -22
- pulumi_oci/database/backup.py +153 -5
- pulumi_oci/database/backup_destination.py +84 -0
- pulumi_oci/database/cloud_exadata_infrastructure.py +126 -0
- pulumi_oci/database/cloud_vm_cluster.py +163 -30
- pulumi_oci/database/data_guard_association.py +49 -0
- pulumi_oci/database/db_node.py +64 -8
- pulumi_oci/database/db_system.py +111 -8
- pulumi_oci/database/exadata_infrastructure.py +157 -3
- pulumi_oci/database/exadata_infrastructure_configure_exascale_management.py +1615 -0
- pulumi_oci/database/exadb_vm_cluster.py +84 -7
- pulumi_oci/database/exascale_db_storage_vault.py +147 -0
- pulumi_oci/database/external_container_database.py +4 -4
- pulumi_oci/database/external_non_container_database.py +4 -4
- pulumi_oci/database/external_pluggable_database.py +4 -4
- pulumi_oci/database/get_application_vip.py +16 -2
- pulumi_oci/database/get_autonomous_container_database.py +43 -1
- pulumi_oci/database/get_autonomous_database.py +29 -1
- pulumi_oci/database/get_autonomous_databases.py +0 -26
- pulumi_oci/database/get_backup_destination.py +43 -1
- pulumi_oci/database/get_backups.py +136 -10
- pulumi_oci/database/get_cloud_exadata_infrastructure.py +43 -1
- pulumi_oci/database/get_cloud_vm_cluster.py +59 -3
- pulumi_oci/database/get_cloud_vm_clusters.py +28 -6
- pulumi_oci/database/get_data_guard_association.py +12 -1
- pulumi_oci/database/get_database_software_images.py +20 -1
- pulumi_oci/database/get_db_node.py +31 -4
- pulumi_oci/database/get_db_server.py +15 -1
- pulumi_oci/database/get_exadata_infrastructure.py +57 -1
- pulumi_oci/database/get_exadb_vm_cluster.py +29 -1
- pulumi_oci/database/get_exadb_vm_clusters.py +25 -3
- pulumi_oci/database/get_exascale_db_storage_vault.py +43 -1
- pulumi_oci/database/get_exascale_db_storage_vaults.py +47 -3
- pulumi_oci/database/get_external_container_database.py +1 -1
- pulumi_oci/database/get_external_non_container_database.py +1 -1
- pulumi_oci/database/get_external_pluggable_database.py +1 -1
- pulumi_oci/database/get_flex_components.py +28 -6
- pulumi_oci/database/get_maintenance_runs.py +20 -1
- pulumi_oci/database/get_vm_cluster.py +60 -4
- pulumi_oci/database/get_vm_clusters.py +25 -3
- pulumi_oci/database/outputs.py +2260 -87
- pulumi_oci/database/pluggable_database.py +13 -13
- pulumi_oci/database/vm_cluster.py +172 -18
- pulumi_oci/database/vm_cluster_add_virtual_network.py +114 -2
- pulumi_oci/database/vm_cluster_remove_virtual_machine.py +114 -2
- pulumi_oci/datasafe/__init__.py +7 -0
- pulumi_oci/datasafe/_inputs.py +301 -0
- pulumi_oci/datasafe/discovery_mod.py +49 -0
- pulumi_oci/datasafe/get_discovery_job.py +15 -1
- pulumi_oci/datasafe/get_masking_report.py +46 -4
- pulumi_oci/datasafe/get_masking_report_masking_errors.py +166 -0
- pulumi_oci/datasafe/get_security_assessment_finding.py +31 -1
- pulumi_oci/datasafe/get_security_assessment_findings.py +43 -3
- pulumi_oci/datasafe/get_sensitive_column_analytics.py +370 -0
- pulumi_oci/datasafe/get_sensitive_data_model.py +15 -1
- pulumi_oci/datasafe/get_sensitive_type_group.py +253 -0
- pulumi_oci/datasafe/get_sensitive_type_group_grouped_sensitive_types.py +166 -0
- pulumi_oci/datasafe/get_sensitive_type_groups.py +294 -0
- pulumi_oci/datasafe/outputs.py +676 -3
- pulumi_oci/datasafe/sensitive_data_model.py +49 -0
- pulumi_oci/datasafe/sensitive_type_group.py +563 -0
- pulumi_oci/datasafe/sensitive_type_group_grouped_sensitive_type.py +287 -0
- pulumi_oci/datascience/__init__.py +4 -0
- pulumi_oci/datascience/_inputs.py +1160 -41
- pulumi_oci/datascience/get_model.py +29 -1
- pulumi_oci/datascience/get_model_custom_metadata_artifact_content.py +151 -0
- pulumi_oci/datascience/get_model_defined_metadata_artifact_content.py +151 -0
- pulumi_oci/datascience/get_model_version_set.py +15 -1
- pulumi_oci/datascience/get_model_version_sets.py +25 -3
- pulumi_oci/datascience/get_models.py +25 -3
- pulumi_oci/datascience/get_pipeline.py +15 -1
- pulumi_oci/datascience/model.py +64 -0
- pulumi_oci/datascience/model_custom_metadata_artifact.py +418 -0
- pulumi_oci/datascience/model_defined_metadata_artifact.py +418 -0
- pulumi_oci/datascience/model_version_set.py +28 -0
- pulumi_oci/datascience/outputs.py +4343 -2164
- pulumi_oci/datascience/pipeline.py +48 -141
- pulumi_oci/datascience/pipeline_run.py +32 -0
- pulumi_oci/dblm/__init__.py +17 -0
- pulumi_oci/dblm/_inputs.py +275 -0
- pulumi_oci/dblm/get_vulnerability.py +242 -0
- pulumi_oci/dblm/get_vulnerability_aggregated_vulnerability_data.py +220 -0
- pulumi_oci/dblm/get_vulnerability_notifications.py +144 -0
- pulumi_oci/dblm/get_vulnerability_resources.py +258 -0
- pulumi_oci/dblm/get_vulnerability_scan.py +267 -0
- pulumi_oci/dblm/get_vulnerability_scans.py +270 -0
- pulumi_oci/dblm/get_vulnerability_vulnerabilities.py +258 -0
- pulumi_oci/dblm/outputs.py +1294 -0
- pulumi_oci/dblm/vulnerability_scan.py +521 -0
- pulumi_oci/email/dkim.py +120 -20
- pulumi_oci/email/get_dkim.py +40 -1
- pulumi_oci/email/outputs.py +29 -0
- pulumi_oci/filestorage/__init__.py +3 -0
- pulumi_oci/filestorage/_inputs.py +49 -0
- pulumi_oci/filestorage/file_system.py +133 -0
- pulumi_oci/filestorage/file_system_quota_rule.py +593 -0
- pulumi_oci/filestorage/filesystem_snapshot_policy.py +28 -0
- pulumi_oci/filestorage/get_file_system_quota_rule.py +248 -0
- pulumi_oci/filestorage/get_file_system_quota_rules.py +210 -0
- pulumi_oci/filestorage/get_filesystem_snapshot_policy.py +15 -1
- pulumi_oci/filestorage/get_outbound_connector.py +15 -1
- pulumi_oci/filestorage/get_replication.py +15 -1
- pulumi_oci/filestorage/get_replication_target.py +15 -1
- pulumi_oci/filestorage/get_snapshot.py +15 -1
- pulumi_oci/filestorage/mount_target.py +28 -0
- pulumi_oci/filestorage/outbound_connector.py +28 -0
- pulumi_oci/filestorage/outputs.py +263 -0
- pulumi_oci/filestorage/replication.py +28 -0
- pulumi_oci/filestorage/snapshot.py +28 -0
- pulumi_oci/goldengate/connection.py +561 -162
- pulumi_oci/goldengate/database_registration.py +14 -14
- pulumi_oci/goldengate/get_connection.py +117 -6
- pulumi_oci/goldengate/outputs.py +96 -10
- pulumi_oci/jms/__init__.py +4 -0
- pulumi_oci/jms/_inputs.py +196 -0
- pulumi_oci/jms/get_fleet_error_analytics.py +163 -0
- pulumi_oci/jms/get_fleet_errors.py +264 -0
- pulumi_oci/jms/get_fleet_performance_tuning_analysis_results.py +23 -1
- pulumi_oci/jms/get_jms_plugins.py +23 -1
- pulumi_oci/jms/get_plugin_error_analytics.py +163 -0
- pulumi_oci/jms/get_plugin_errors.py +264 -0
- pulumi_oci/jms/outputs.py +566 -6
- pulumi_oci/mysql/_inputs.py +1239 -10
- pulumi_oci/mysql/channel.py +28 -0
- pulumi_oci/mysql/get_channel.py +15 -1
- pulumi_oci/mysql/get_mysql_backup.py +15 -1
- pulumi_oci/mysql/get_mysql_configuration.py +15 -1
- pulumi_oci/mysql/get_mysql_db_system.py +15 -1
- pulumi_oci/mysql/mysql_backup.py +28 -0
- pulumi_oci/mysql/mysql_configuration.py +106 -0
- pulumi_oci/mysql/mysql_db_system.py +36 -0
- pulumi_oci/mysql/outputs.py +2008 -35
- pulumi_oci/opensearch/__init__.py +3 -0
- pulumi_oci/opensearch/_inputs.py +101 -0
- pulumi_oci/opensearch/cluster.py +76 -29
- pulumi_oci/opensearch/get_opensearch_cluster.py +12 -1
- pulumi_oci/opensearch/get_opensearch_cluster_pipeline.py +433 -0
- pulumi_oci/opensearch/get_opensearch_cluster_pipelines.py +218 -0
- pulumi_oci/opensearch/opensearch_cluster_pipeline.py +1172 -0
- pulumi_oci/opensearch/outputs.py +425 -0
- pulumi_oci/provider.py +20 -0
- pulumi_oci/psql/_inputs.py +258 -0
- pulumi_oci/psql/backup.py +129 -28
- pulumi_oci/psql/db_system.py +10 -0
- pulumi_oci/psql/get_backup.py +47 -2
- pulumi_oci/psql/get_backups.py +3 -0
- pulumi_oci/psql/get_configurations.py +23 -1
- pulumi_oci/psql/get_db_system.py +1 -1
- pulumi_oci/psql/get_db_systems.py +1 -1
- pulumi_oci/psql/outputs.py +541 -5
- pulumi_oci/pulumi-plugin.json +1 -1
- pulumi_oci/redis/redis_cluster.py +7 -7
- pulumi_oci/stackmonitoring/__init__.py +8 -0
- pulumi_oci/stackmonitoring/_inputs.py +372 -1
- pulumi_oci/stackmonitoring/get_defined_monitoring_templates.py +185 -0
- pulumi_oci/stackmonitoring/get_metric_extension.py +1 -1
- pulumi_oci/stackmonitoring/get_monitored_resource_type.py +15 -1
- pulumi_oci/stackmonitoring/get_monitoring_template.py +380 -0
- pulumi_oci/stackmonitoring/get_monitoring_template_alarm_condition.py +318 -0
- pulumi_oci/stackmonitoring/get_monitoring_template_alarm_conditions.py +262 -0
- pulumi_oci/stackmonitoring/get_monitoring_templates.py +289 -0
- pulumi_oci/stackmonitoring/metric_extension.py +4 -4
- pulumi_oci/stackmonitoring/monitored_resource_type.py +30 -0
- pulumi_oci/stackmonitoring/monitoring_template.py +954 -0
- pulumi_oci/stackmonitoring/monitoring_template_alarm_condition.py +780 -0
- pulumi_oci/stackmonitoring/monitoring_template_monitoring_template_on_given_resources_management.py +253 -0
- pulumi_oci/stackmonitoring/outputs.py +1305 -118
- pulumi_oci/tenantmanagercontrolplane/__init__.py +33 -0
- pulumi_oci/tenantmanagercontrolplane/_inputs.py +685 -0
- pulumi_oci/tenantmanagercontrolplane/get_assigned_subscription.py +478 -0
- pulumi_oci/tenantmanagercontrolplane/get_assigned_subscription_line_items.py +144 -0
- pulumi_oci/tenantmanagercontrolplane/get_assigned_subscriptions.py +188 -0
- pulumi_oci/tenantmanagercontrolplane/get_domain.py +253 -0
- pulumi_oci/tenantmanagercontrolplane/get_domain_governance.py +281 -0
- pulumi_oci/tenantmanagercontrolplane/get_domain_governances.py +226 -0
- pulumi_oci/tenantmanagercontrolplane/get_domains.py +226 -0
- pulumi_oci/tenantmanagercontrolplane/get_link.py +197 -0
- pulumi_oci/tenantmanagercontrolplane/get_links.py +191 -0
- pulumi_oci/tenantmanagercontrolplane/get_organization.py +211 -0
- pulumi_oci/tenantmanagercontrolplane/get_organization_tenancies.py +144 -0
- pulumi_oci/tenantmanagercontrolplane/get_organization_tenancy.py +233 -0
- pulumi_oci/tenantmanagercontrolplane/get_organizations.py +147 -0
- pulumi_oci/tenantmanagercontrolplane/get_recipient_invitation.py +295 -0
- pulumi_oci/tenantmanagercontrolplane/get_recipient_invitations.py +213 -0
- pulumi_oci/tenantmanagercontrolplane/get_sender_invitation.py +295 -0
- pulumi_oci/tenantmanagercontrolplane/get_sender_invitations.py +235 -0
- pulumi_oci/tenantmanagercontrolplane/get_subscription.py +464 -0
- pulumi_oci/tenantmanagercontrolplane/get_subscription_available_regions.py +144 -0
- pulumi_oci/tenantmanagercontrolplane/get_subscription_line_items.py +144 -0
- pulumi_oci/tenantmanagercontrolplane/get_subscription_mapping.py +211 -0
- pulumi_oci/tenantmanagercontrolplane/get_subscription_mappings.py +210 -0
- pulumi_oci/tenantmanagercontrolplane/get_subscriptions.py +188 -0
- pulumi_oci/tenantmanagercontrolplane/outputs.py +3257 -0
- pulumi_oci/tenantmanagercontrolplane/subscription_mapping.py +409 -0
- pulumi_oci/vault/__init__.py +1 -1
- pulumi_oci/vault/_inputs.py +92 -0
- pulumi_oci/vault/get_secret.py +40 -1
- pulumi_oci/vault/{get_secret_version.py → get_secret_version_sdk_v2.py} +32 -77
- pulumi_oci/vault/outputs.py +210 -0
- pulumi_oci/vault/secret.py +122 -0
- {pulumi_oci-2.25.0a1740032973.dist-info → pulumi_oci-2.26.0.dist-info}/METADATA +1 -1
- {pulumi_oci-2.25.0a1740032973.dist-info → pulumi_oci-2.26.0.dist-info}/RECORD +218 -150
- {pulumi_oci-2.25.0a1740032973.dist-info → pulumi_oci-2.26.0.dist-info}/WHEEL +1 -1
- {pulumi_oci-2.25.0a1740032973.dist-info → pulumi_oci-2.26.0.dist-info}/top_level.txt +0 -0
@@ -298,16 +298,20 @@ class ClusterEndpoint(dict):
|
|
298
298
|
return super().get(key, default)
|
299
299
|
|
300
300
|
def __init__(__self__, *,
|
301
|
+
ipv6endpoint: Optional[str] = None,
|
301
302
|
kubernetes: Optional[str] = None,
|
302
303
|
private_endpoint: Optional[str] = None,
|
303
304
|
public_endpoint: Optional[str] = None,
|
304
305
|
vcn_hostname_endpoint: Optional[str] = None):
|
305
306
|
"""
|
307
|
+
:param str ipv6endpoint: The IPv6 networking Kubernetes API server endpoint.
|
306
308
|
:param str kubernetes: The non-native networking Kubernetes API server endpoint.
|
307
309
|
:param str private_endpoint: The private native networking Kubernetes API server endpoint.
|
308
310
|
:param str public_endpoint: The public native networking Kubernetes API server endpoint, if one was requested.
|
309
311
|
:param str vcn_hostname_endpoint: The FQDN assigned to the Kubernetes API private endpoint. Example: 'https://yourVcnHostnameEndpoint'
|
310
312
|
"""
|
313
|
+
if ipv6endpoint is not None:
|
314
|
+
pulumi.set(__self__, "ipv6endpoint", ipv6endpoint)
|
311
315
|
if kubernetes is not None:
|
312
316
|
pulumi.set(__self__, "kubernetes", kubernetes)
|
313
317
|
if private_endpoint is not None:
|
@@ -317,6 +321,14 @@ class ClusterEndpoint(dict):
|
|
317
321
|
if vcn_hostname_endpoint is not None:
|
318
322
|
pulumi.set(__self__, "vcn_hostname_endpoint", vcn_hostname_endpoint)
|
319
323
|
|
324
|
+
@property
|
325
|
+
@pulumi.getter
|
326
|
+
def ipv6endpoint(self) -> Optional[str]:
|
327
|
+
"""
|
328
|
+
The IPv6 networking Kubernetes API server endpoint.
|
329
|
+
"""
|
330
|
+
return pulumi.get(self, "ipv6endpoint")
|
331
|
+
|
320
332
|
@property
|
321
333
|
@pulumi.getter
|
322
334
|
def kubernetes(self) -> Optional[str]:
|
@@ -670,6 +682,8 @@ class ClusterOptions(dict):
|
|
670
682
|
suggest = "add_ons"
|
671
683
|
elif key == "admissionControllerOptions":
|
672
684
|
suggest = "admission_controller_options"
|
685
|
+
elif key == "ipFamilies":
|
686
|
+
suggest = "ip_families"
|
673
687
|
elif key == "kubernetesNetworkConfig":
|
674
688
|
suggest = "kubernetes_network_config"
|
675
689
|
elif key == "openIdConnectDiscovery":
|
@@ -697,6 +711,7 @@ class ClusterOptions(dict):
|
|
697
711
|
def __init__(__self__, *,
|
698
712
|
add_ons: Optional['outputs.ClusterOptionsAddOns'] = None,
|
699
713
|
admission_controller_options: Optional['outputs.ClusterOptionsAdmissionControllerOptions'] = None,
|
714
|
+
ip_families: Optional[Sequence[str]] = None,
|
700
715
|
kubernetes_network_config: Optional['outputs.ClusterOptionsKubernetesNetworkConfig'] = None,
|
701
716
|
open_id_connect_discovery: Optional['outputs.ClusterOptionsOpenIdConnectDiscovery'] = None,
|
702
717
|
open_id_connect_token_authentication_config: Optional['outputs.ClusterOptionsOpenIdConnectTokenAuthenticationConfig'] = None,
|
@@ -706,6 +721,7 @@ class ClusterOptions(dict):
|
|
706
721
|
"""
|
707
722
|
:param 'ClusterOptionsAddOnsArgs' add_ons: Configurable cluster add-ons
|
708
723
|
:param 'ClusterOptionsAdmissionControllerOptionsArgs' admission_controller_options: (Updatable) Configurable cluster admission controllers
|
724
|
+
:param Sequence[str] ip_families: IP family to use for single stack or define the order of IP families for dual-stack
|
709
725
|
:param 'ClusterOptionsKubernetesNetworkConfigArgs' kubernetes_network_config: Network configuration for Kubernetes.
|
710
726
|
:param 'ClusterOptionsOpenIdConnectDiscoveryArgs' open_id_connect_discovery: (Updatable) The property that define the status of the OIDC Discovery feature for a cluster.
|
711
727
|
:param 'ClusterOptionsOpenIdConnectTokenAuthenticationConfigArgs' open_id_connect_token_authentication_config: (Updatable) The properties that configure OIDC token authentication in kube-apiserver. For more information, see [Configuring the API Server](https://kubernetes.io/docs/reference/access-authn-authz/authentication/#using-flags).
|
@@ -717,6 +733,8 @@ class ClusterOptions(dict):
|
|
717
733
|
pulumi.set(__self__, "add_ons", add_ons)
|
718
734
|
if admission_controller_options is not None:
|
719
735
|
pulumi.set(__self__, "admission_controller_options", admission_controller_options)
|
736
|
+
if ip_families is not None:
|
737
|
+
pulumi.set(__self__, "ip_families", ip_families)
|
720
738
|
if kubernetes_network_config is not None:
|
721
739
|
pulumi.set(__self__, "kubernetes_network_config", kubernetes_network_config)
|
722
740
|
if open_id_connect_discovery is not None:
|
@@ -746,6 +764,14 @@ class ClusterOptions(dict):
|
|
746
764
|
"""
|
747
765
|
return pulumi.get(self, "admission_controller_options")
|
748
766
|
|
767
|
+
@property
|
768
|
+
@pulumi.getter(name="ipFamilies")
|
769
|
+
def ip_families(self) -> Optional[Sequence[str]]:
|
770
|
+
"""
|
771
|
+
IP family to use for single stack or define the order of IP families for dual-stack
|
772
|
+
"""
|
773
|
+
return pulumi.get(self, "ip_families")
|
774
|
+
|
749
775
|
@property
|
750
776
|
@pulumi.getter(name="kubernetesNetworkConfig")
|
751
777
|
def kubernetes_network_config(self) -> Optional['outputs.ClusterOptionsKubernetesNetworkConfig']:
|
@@ -978,6 +1004,8 @@ class ClusterOptionsOpenIdConnectTokenAuthenticationConfig(dict):
|
|
978
1004
|
suggest = "ca_certificate"
|
979
1005
|
elif key == "clientId":
|
980
1006
|
suggest = "client_id"
|
1007
|
+
elif key == "configurationFile":
|
1008
|
+
suggest = "configuration_file"
|
981
1009
|
elif key == "groupsClaim":
|
982
1010
|
suggest = "groups_claim"
|
983
1011
|
elif key == "groupsPrefix":
|
@@ -1008,6 +1036,7 @@ class ClusterOptionsOpenIdConnectTokenAuthenticationConfig(dict):
|
|
1008
1036
|
is_open_id_connect_auth_enabled: bool,
|
1009
1037
|
ca_certificate: Optional[str] = None,
|
1010
1038
|
client_id: Optional[str] = None,
|
1039
|
+
configuration_file: Optional[str] = None,
|
1011
1040
|
groups_claim: Optional[str] = None,
|
1012
1041
|
groups_prefix: Optional[str] = None,
|
1013
1042
|
issuer_url: Optional[str] = None,
|
@@ -1019,6 +1048,7 @@ class ClusterOptionsOpenIdConnectTokenAuthenticationConfig(dict):
|
|
1019
1048
|
:param bool is_open_id_connect_auth_enabled: (Updatable) Whether the cluster has OIDC Auth Config enabled. Defaults to false.
|
1020
1049
|
:param str ca_certificate: (Updatable) A Base64 encoded public RSA or ECDSA certificates used to signed your identity provider's web certificate.
|
1021
1050
|
:param str client_id: (Updatable) A client id that all tokens must be issued for.
|
1051
|
+
:param str configuration_file: (Updatable) A Base64 encoded string of a Kubernetes OIDC Auth Config file. More info [here](https://kubernetes.io/docs/reference/access-authn-authz/authentication/#using-authentication-configuration)
|
1022
1052
|
:param str groups_claim: (Updatable) JWT claim to use as the user's group. If the claim is present it must be an array of strings.
|
1023
1053
|
:param str groups_prefix: (Updatable) Prefix prepended to group claims to prevent clashes with existing names (such as system:groups).
|
1024
1054
|
:param str issuer_url: (Updatable) URL of the provider that allows the API server to discover public signing keys. Only URLs that use the https:// scheme are accepted. This is typically the provider's discovery URL, changed to have an empty path.
|
@@ -1032,6 +1062,8 @@ class ClusterOptionsOpenIdConnectTokenAuthenticationConfig(dict):
|
|
1032
1062
|
pulumi.set(__self__, "ca_certificate", ca_certificate)
|
1033
1063
|
if client_id is not None:
|
1034
1064
|
pulumi.set(__self__, "client_id", client_id)
|
1065
|
+
if configuration_file is not None:
|
1066
|
+
pulumi.set(__self__, "configuration_file", configuration_file)
|
1035
1067
|
if groups_claim is not None:
|
1036
1068
|
pulumi.set(__self__, "groups_claim", groups_claim)
|
1037
1069
|
if groups_prefix is not None:
|
@@ -1071,6 +1103,14 @@ class ClusterOptionsOpenIdConnectTokenAuthenticationConfig(dict):
|
|
1071
1103
|
"""
|
1072
1104
|
return pulumi.get(self, "client_id")
|
1073
1105
|
|
1106
|
+
@property
|
1107
|
+
@pulumi.getter(name="configurationFile")
|
1108
|
+
def configuration_file(self) -> Optional[str]:
|
1109
|
+
"""
|
1110
|
+
(Updatable) A Base64 encoded string of a Kubernetes OIDC Auth Config file. More info [here](https://kubernetes.io/docs/reference/access-authn-authz/authentication/#using-authentication-configuration)
|
1111
|
+
"""
|
1112
|
+
return pulumi.get(self, "configuration_file")
|
1113
|
+
|
1074
1114
|
@property
|
1075
1115
|
@pulumi.getter(name="groupsClaim")
|
1076
1116
|
def groups_claim(self) -> Optional[str]:
|
@@ -1368,7 +1408,7 @@ class ContainerInstanceContainer(dict):
|
|
1368
1408
|
The total size of all environment variables combined, name and values, must be 64 KB or smaller.
|
1369
1409
|
:param str fault_domain: The fault domain where the container instance runs.
|
1370
1410
|
:param Mapping[str, str] freeform_tags: Simple key-value pair that is applied without any predefined name, type or scope. Exists for cross-compatibility only. Example: `{"bar-key": "value"}`
|
1371
|
-
:param Sequence['ContainerInstanceContainerHealthCheckArgs'] health_checks: list of container health checks to check container status and take appropriate action if container status is failed. There are
|
1411
|
+
:param Sequence['ContainerInstanceContainerHealthCheckArgs'] health_checks: list of container health checks to check container status and take appropriate action if container status is failed. There are two types of health checks that we currently support HTTP and TCP.
|
1372
1412
|
:param bool is_resource_principal_disabled: Determines if the container will have access to the container instance resource principal.
|
1373
1413
|
|
1374
1414
|
This method utilizes resource principal version 2.2. For information on how to use the exposed resource principal elements, see https://docs.oracle.com/en-us/iaas/Content/API/Concepts/sdk_authentication_methods.htm#sdk_authentication_methods_resource_principal.
|
@@ -1548,7 +1588,7 @@ class ContainerInstanceContainer(dict):
|
|
1548
1588
|
@pulumi.getter(name="healthChecks")
|
1549
1589
|
def health_checks(self) -> Optional[Sequence['outputs.ContainerInstanceContainerHealthCheck']]:
|
1550
1590
|
"""
|
1551
|
-
list of container health checks to check container status and take appropriate action if container status is failed. There are
|
1591
|
+
list of container health checks to check container status and take appropriate action if container status is failed. There are two types of health checks that we currently support HTTP and TCP.
|
1552
1592
|
"""
|
1553
1593
|
return pulumi.get(self, "health_checks")
|
1554
1594
|
|
@@ -1679,7 +1719,7 @@ class ContainerInstanceContainerHealthCheck(dict):
|
|
1679
1719
|
|
1680
1720
|
def __init__(__self__, *,
|
1681
1721
|
health_check_type: str,
|
1682
|
-
|
1722
|
+
port: int,
|
1683
1723
|
failure_action: Optional[str] = None,
|
1684
1724
|
failure_threshold: Optional[int] = None,
|
1685
1725
|
headers: Optional[Sequence['outputs.ContainerInstanceContainerHealthCheckHeader']] = None,
|
@@ -1687,14 +1727,13 @@ class ContainerInstanceContainerHealthCheck(dict):
|
|
1687
1727
|
interval_in_seconds: Optional[int] = None,
|
1688
1728
|
name: Optional[str] = None,
|
1689
1729
|
path: Optional[str] = None,
|
1690
|
-
port: Optional[int] = None,
|
1691
1730
|
status: Optional[str] = None,
|
1692
1731
|
status_details: Optional[str] = None,
|
1693
1732
|
success_threshold: Optional[int] = None,
|
1694
1733
|
timeout_in_seconds: Optional[int] = None):
|
1695
1734
|
"""
|
1696
1735
|
:param str health_check_type: Container health check type.
|
1697
|
-
:param
|
1736
|
+
:param int port: Container health check HTTP port.
|
1698
1737
|
:param str failure_action: The action will be triggered when the container health check fails. There are two types of action: KILL or NONE. The default action is KILL. If failure action is KILL, the container will be subject to the container restart policy.
|
1699
1738
|
:param int failure_threshold: Number of consecutive failures at which we consider the check failed.
|
1700
1739
|
:param Sequence['ContainerInstanceContainerHealthCheckHeaderArgs'] headers: Container health check HTTP headers.
|
@@ -1702,13 +1741,11 @@ class ContainerInstanceContainerHealthCheck(dict):
|
|
1702
1741
|
:param int interval_in_seconds: Number of seconds between two consecutive runs for checking container health.
|
1703
1742
|
:param str name: Health check name.
|
1704
1743
|
:param str path: Container health check HTTP path.
|
1705
|
-
:param int port: Container health check HTTP port.
|
1706
1744
|
:param int success_threshold: Number of consecutive successes at which we consider the check succeeded again after it was in failure state.
|
1707
1745
|
:param int timeout_in_seconds: Length of waiting time in seconds before marking health check failed.
|
1708
1746
|
"""
|
1709
1747
|
pulumi.set(__self__, "health_check_type", health_check_type)
|
1710
|
-
|
1711
|
-
pulumi.set(__self__, "commands", commands)
|
1748
|
+
pulumi.set(__self__, "port", port)
|
1712
1749
|
if failure_action is not None:
|
1713
1750
|
pulumi.set(__self__, "failure_action", failure_action)
|
1714
1751
|
if failure_threshold is not None:
|
@@ -1723,8 +1760,6 @@ class ContainerInstanceContainerHealthCheck(dict):
|
|
1723
1760
|
pulumi.set(__self__, "name", name)
|
1724
1761
|
if path is not None:
|
1725
1762
|
pulumi.set(__self__, "path", path)
|
1726
|
-
if port is not None:
|
1727
|
-
pulumi.set(__self__, "port", port)
|
1728
1763
|
if status is not None:
|
1729
1764
|
pulumi.set(__self__, "status", status)
|
1730
1765
|
if status_details is not None:
|
@@ -1744,11 +1779,11 @@ class ContainerInstanceContainerHealthCheck(dict):
|
|
1744
1779
|
|
1745
1780
|
@property
|
1746
1781
|
@pulumi.getter
|
1747
|
-
def
|
1782
|
+
def port(self) -> int:
|
1748
1783
|
"""
|
1749
|
-
|
1784
|
+
Container health check HTTP port.
|
1750
1785
|
"""
|
1751
|
-
return pulumi.get(self, "
|
1786
|
+
return pulumi.get(self, "port")
|
1752
1787
|
|
1753
1788
|
@property
|
1754
1789
|
@pulumi.getter(name="failureAction")
|
@@ -1806,14 +1841,6 @@ class ContainerInstanceContainerHealthCheck(dict):
|
|
1806
1841
|
"""
|
1807
1842
|
return pulumi.get(self, "path")
|
1808
1843
|
|
1809
|
-
@property
|
1810
|
-
@pulumi.getter
|
1811
|
-
def port(self) -> Optional[int]:
|
1812
|
-
"""
|
1813
|
-
Container health check HTTP port.
|
1814
|
-
"""
|
1815
|
-
return pulumi.get(self, "port")
|
1816
|
-
|
1817
1844
|
@property
|
1818
1845
|
@pulumi.getter
|
1819
1846
|
def status(self) -> Optional[str]:
|
@@ -4506,21 +4533,32 @@ class GetClusterClusterPodNetworkOptionResult(dict):
|
|
4506
4533
|
@pulumi.output_type
|
4507
4534
|
class GetClusterEndpointResult(dict):
|
4508
4535
|
def __init__(__self__, *,
|
4536
|
+
ipv6endpoint: str,
|
4509
4537
|
kubernetes: str,
|
4510
4538
|
private_endpoint: str,
|
4511
4539
|
public_endpoint: str,
|
4512
4540
|
vcn_hostname_endpoint: str):
|
4513
4541
|
"""
|
4542
|
+
:param str ipv6endpoint: The IPv6 networking Kubernetes API server endpoint.
|
4514
4543
|
:param str kubernetes: The non-native networking Kubernetes API server endpoint.
|
4515
4544
|
:param str private_endpoint: The private native networking Kubernetes API server endpoint.
|
4516
4545
|
:param str public_endpoint: The public native networking Kubernetes API server endpoint, if one was requested.
|
4517
4546
|
:param str vcn_hostname_endpoint: The FQDN assigned to the Kubernetes API private endpoint. Example: 'https://yourVcnHostnameEndpoint'
|
4518
4547
|
"""
|
4548
|
+
pulumi.set(__self__, "ipv6endpoint", ipv6endpoint)
|
4519
4549
|
pulumi.set(__self__, "kubernetes", kubernetes)
|
4520
4550
|
pulumi.set(__self__, "private_endpoint", private_endpoint)
|
4521
4551
|
pulumi.set(__self__, "public_endpoint", public_endpoint)
|
4522
4552
|
pulumi.set(__self__, "vcn_hostname_endpoint", vcn_hostname_endpoint)
|
4523
4553
|
|
4554
|
+
@property
|
4555
|
+
@pulumi.getter
|
4556
|
+
def ipv6endpoint(self) -> str:
|
4557
|
+
"""
|
4558
|
+
The IPv6 networking Kubernetes API server endpoint.
|
4559
|
+
"""
|
4560
|
+
return pulumi.get(self, "ipv6endpoint")
|
4561
|
+
|
4524
4562
|
@property
|
4525
4563
|
@pulumi.getter
|
4526
4564
|
def kubernetes(self) -> str:
|
@@ -4763,6 +4801,7 @@ class GetClusterOptionResult(dict):
|
|
4763
4801
|
def __init__(__self__, *,
|
4764
4802
|
add_ons: Sequence['outputs.GetClusterOptionAddOnResult'],
|
4765
4803
|
admission_controller_options: Sequence['outputs.GetClusterOptionAdmissionControllerOptionResult'],
|
4804
|
+
ip_families: Sequence[str],
|
4766
4805
|
kubernetes_network_configs: Sequence['outputs.GetClusterOptionKubernetesNetworkConfigResult'],
|
4767
4806
|
open_id_connect_discoveries: Sequence['outputs.GetClusterOptionOpenIdConnectDiscoveryResult'],
|
4768
4807
|
open_id_connect_token_authentication_configs: Sequence['outputs.GetClusterOptionOpenIdConnectTokenAuthenticationConfigResult'],
|
@@ -4772,13 +4811,17 @@ class GetClusterOptionResult(dict):
|
|
4772
4811
|
"""
|
4773
4812
|
:param Sequence['GetClusterOptionAddOnArgs'] add_ons: Configurable cluster add-ons
|
4774
4813
|
:param Sequence['GetClusterOptionAdmissionControllerOptionArgs'] admission_controller_options: Configurable cluster admission controllers
|
4814
|
+
:param Sequence[str] ip_families: IP family to use for single stack or define the order of IP families for dual-stack
|
4775
4815
|
:param Sequence['GetClusterOptionKubernetesNetworkConfigArgs'] kubernetes_network_configs: Network configuration for Kubernetes.
|
4816
|
+
:param Sequence['GetClusterOptionOpenIdConnectDiscoveryArgs'] open_id_connect_discoveries: The property that define the status of the OIDC Discovery feature for a cluster.
|
4817
|
+
:param Sequence['GetClusterOptionOpenIdConnectTokenAuthenticationConfigArgs'] open_id_connect_token_authentication_configs: The properties that configure OIDC token authentication in kube-apiserver. For more information, see [Configuring the API Server](https://kubernetes.io/docs/reference/access-authn-authz/authentication/#using-flags).
|
4776
4818
|
:param Sequence['GetClusterOptionPersistentVolumeConfigArgs'] persistent_volume_configs: Configuration to be applied to block volumes created by Kubernetes Persistent Volume Claims (PVC)
|
4777
4819
|
:param Sequence['GetClusterOptionServiceLbConfigArgs'] service_lb_configs: Configuration to be applied to load balancers created by Kubernetes services
|
4778
4820
|
:param Sequence[str] service_lb_subnet_ids: The OCIDs of the subnets used for Kubernetes services load balancers.
|
4779
4821
|
"""
|
4780
4822
|
pulumi.set(__self__, "add_ons", add_ons)
|
4781
4823
|
pulumi.set(__self__, "admission_controller_options", admission_controller_options)
|
4824
|
+
pulumi.set(__self__, "ip_families", ip_families)
|
4782
4825
|
pulumi.set(__self__, "kubernetes_network_configs", kubernetes_network_configs)
|
4783
4826
|
pulumi.set(__self__, "open_id_connect_discoveries", open_id_connect_discoveries)
|
4784
4827
|
pulumi.set(__self__, "open_id_connect_token_authentication_configs", open_id_connect_token_authentication_configs)
|
@@ -4802,6 +4845,14 @@ class GetClusterOptionResult(dict):
|
|
4802
4845
|
"""
|
4803
4846
|
return pulumi.get(self, "admission_controller_options")
|
4804
4847
|
|
4848
|
+
@property
|
4849
|
+
@pulumi.getter(name="ipFamilies")
|
4850
|
+
def ip_families(self) -> Sequence[str]:
|
4851
|
+
"""
|
4852
|
+
IP family to use for single stack or define the order of IP families for dual-stack
|
4853
|
+
"""
|
4854
|
+
return pulumi.get(self, "ip_families")
|
4855
|
+
|
4805
4856
|
@property
|
4806
4857
|
@pulumi.getter(name="kubernetesNetworkConfigs")
|
4807
4858
|
def kubernetes_network_configs(self) -> Sequence['outputs.GetClusterOptionKubernetesNetworkConfigResult']:
|
@@ -4813,11 +4864,17 @@ class GetClusterOptionResult(dict):
|
|
4813
4864
|
@property
|
4814
4865
|
@pulumi.getter(name="openIdConnectDiscoveries")
|
4815
4866
|
def open_id_connect_discoveries(self) -> Sequence['outputs.GetClusterOptionOpenIdConnectDiscoveryResult']:
|
4867
|
+
"""
|
4868
|
+
The property that define the status of the OIDC Discovery feature for a cluster.
|
4869
|
+
"""
|
4816
4870
|
return pulumi.get(self, "open_id_connect_discoveries")
|
4817
4871
|
|
4818
4872
|
@property
|
4819
4873
|
@pulumi.getter(name="openIdConnectTokenAuthenticationConfigs")
|
4820
4874
|
def open_id_connect_token_authentication_configs(self) -> Sequence['outputs.GetClusterOptionOpenIdConnectTokenAuthenticationConfigResult']:
|
4875
|
+
"""
|
4876
|
+
The properties that configure OIDC token authentication in kube-apiserver. For more information, see [Configuring the API Server](https://kubernetes.io/docs/reference/access-authn-authz/authentication/#using-flags).
|
4877
|
+
"""
|
4821
4878
|
return pulumi.get(self, "open_id_connect_token_authentication_configs")
|
4822
4879
|
|
4823
4880
|
@property
|
@@ -4943,11 +5000,17 @@ class GetClusterOptionKubernetesNetworkConfigResult(dict):
|
|
4943
5000
|
class GetClusterOptionOpenIdConnectDiscoveryResult(dict):
|
4944
5001
|
def __init__(__self__, *,
|
4945
5002
|
is_open_id_connect_discovery_enabled: bool):
|
5003
|
+
"""
|
5004
|
+
:param bool is_open_id_connect_discovery_enabled: Whether the cluster has OIDC Discovery enabled. Defaults to false. If set to true, the cluster will be assigned a public OIDC Discovery endpoint.
|
5005
|
+
"""
|
4946
5006
|
pulumi.set(__self__, "is_open_id_connect_discovery_enabled", is_open_id_connect_discovery_enabled)
|
4947
5007
|
|
4948
5008
|
@property
|
4949
5009
|
@pulumi.getter(name="isOpenIdConnectDiscoveryEnabled")
|
4950
5010
|
def is_open_id_connect_discovery_enabled(self) -> bool:
|
5011
|
+
"""
|
5012
|
+
Whether the cluster has OIDC Discovery enabled. Defaults to false. If set to true, the cluster will be assigned a public OIDC Discovery endpoint.
|
5013
|
+
"""
|
4951
5014
|
return pulumi.get(self, "is_open_id_connect_discovery_enabled")
|
4952
5015
|
|
4953
5016
|
|
@@ -4956,6 +5019,7 @@ class GetClusterOptionOpenIdConnectTokenAuthenticationConfigResult(dict):
|
|
4956
5019
|
def __init__(__self__, *,
|
4957
5020
|
ca_certificate: str,
|
4958
5021
|
client_id: str,
|
5022
|
+
configuration_file: str,
|
4959
5023
|
groups_claim: str,
|
4960
5024
|
groups_prefix: str,
|
4961
5025
|
is_open_id_connect_auth_enabled: bool,
|
@@ -4964,8 +5028,22 @@ class GetClusterOptionOpenIdConnectTokenAuthenticationConfigResult(dict):
|
|
4964
5028
|
signing_algorithms: Sequence[str],
|
4965
5029
|
username_claim: str,
|
4966
5030
|
username_prefix: str):
|
5031
|
+
"""
|
5032
|
+
:param str ca_certificate: A Base64 encoded public RSA or ECDSA certificates used to signed your identity provider's web certificate.
|
5033
|
+
:param str client_id: A client id that all tokens must be issued for.
|
5034
|
+
:param str configuration_file: A Base64 encoded string of a Kubernetes OIDC Auth Config file. More info [here](https://kubernetes.io/docs/reference/access-authn-authz/authentication/#using-authentication-configuration)
|
5035
|
+
:param str groups_claim: JWT claim to use as the user's group. If the claim is present it must be an array of strings.
|
5036
|
+
:param str groups_prefix: Prefix prepended to group claims to prevent clashes with existing names (such as system:groups).
|
5037
|
+
:param bool is_open_id_connect_auth_enabled: Whether the cluster has OIDC Auth Config enabled. Defaults to false.
|
5038
|
+
:param str issuer_url: URL of the provider that allows the API server to discover public signing keys. Only URLs that use the https:// scheme are accepted. This is typically the provider's discovery URL, changed to have an empty path.
|
5039
|
+
:param Sequence['GetClusterOptionOpenIdConnectTokenAuthenticationConfigRequiredClaimArgs'] required_claims: A key=value pair that describes a required claim in the ID Token. If set, the claim is verified to be present in the ID Token with a matching value. Repeat this flag to specify multiple claims.
|
5040
|
+
:param Sequence[str] signing_algorithms: The signing algorithms accepted. Default is ["RS256"].
|
5041
|
+
:param str username_claim: JWT claim to use as the user name. By default sub, which is expected to be a unique identifier of the end user. Admins can choose other claims, such as email or name, depending on their provider. However, claims other than email will be prefixed with the issuer URL to prevent naming clashes with other plugins.
|
5042
|
+
:param str username_prefix: Prefix prepended to username claims to prevent clashes with existing names (such as system:users). For example, the value oidc: will create usernames like oidc:jane.doe. If this flag isn't provided and --oidc-username-claim is a value other than email the prefix defaults to ( Issuer URL )# where ( Issuer URL ) is the value of --oidc-issuer-url. The value - can be used to disable all prefixing.
|
5043
|
+
"""
|
4967
5044
|
pulumi.set(__self__, "ca_certificate", ca_certificate)
|
4968
5045
|
pulumi.set(__self__, "client_id", client_id)
|
5046
|
+
pulumi.set(__self__, "configuration_file", configuration_file)
|
4969
5047
|
pulumi.set(__self__, "groups_claim", groups_claim)
|
4970
5048
|
pulumi.set(__self__, "groups_prefix", groups_prefix)
|
4971
5049
|
pulumi.set(__self__, "is_open_id_connect_auth_enabled", is_open_id_connect_auth_enabled)
|
@@ -4978,51 +5056,89 @@ class GetClusterOptionOpenIdConnectTokenAuthenticationConfigResult(dict):
|
|
4978
5056
|
@property
|
4979
5057
|
@pulumi.getter(name="caCertificate")
|
4980
5058
|
def ca_certificate(self) -> str:
|
5059
|
+
"""
|
5060
|
+
A Base64 encoded public RSA or ECDSA certificates used to signed your identity provider's web certificate.
|
5061
|
+
"""
|
4981
5062
|
return pulumi.get(self, "ca_certificate")
|
4982
5063
|
|
4983
5064
|
@property
|
4984
5065
|
@pulumi.getter(name="clientId")
|
4985
5066
|
def client_id(self) -> str:
|
5067
|
+
"""
|
5068
|
+
A client id that all tokens must be issued for.
|
5069
|
+
"""
|
4986
5070
|
return pulumi.get(self, "client_id")
|
4987
5071
|
|
5072
|
+
@property
|
5073
|
+
@pulumi.getter(name="configurationFile")
|
5074
|
+
def configuration_file(self) -> str:
|
5075
|
+
"""
|
5076
|
+
A Base64 encoded string of a Kubernetes OIDC Auth Config file. More info [here](https://kubernetes.io/docs/reference/access-authn-authz/authentication/#using-authentication-configuration)
|
5077
|
+
"""
|
5078
|
+
return pulumi.get(self, "configuration_file")
|
5079
|
+
|
4988
5080
|
@property
|
4989
5081
|
@pulumi.getter(name="groupsClaim")
|
4990
5082
|
def groups_claim(self) -> str:
|
5083
|
+
"""
|
5084
|
+
JWT claim to use as the user's group. If the claim is present it must be an array of strings.
|
5085
|
+
"""
|
4991
5086
|
return pulumi.get(self, "groups_claim")
|
4992
5087
|
|
4993
5088
|
@property
|
4994
5089
|
@pulumi.getter(name="groupsPrefix")
|
4995
5090
|
def groups_prefix(self) -> str:
|
5091
|
+
"""
|
5092
|
+
Prefix prepended to group claims to prevent clashes with existing names (such as system:groups).
|
5093
|
+
"""
|
4996
5094
|
return pulumi.get(self, "groups_prefix")
|
4997
5095
|
|
4998
5096
|
@property
|
4999
5097
|
@pulumi.getter(name="isOpenIdConnectAuthEnabled")
|
5000
5098
|
def is_open_id_connect_auth_enabled(self) -> bool:
|
5099
|
+
"""
|
5100
|
+
Whether the cluster has OIDC Auth Config enabled. Defaults to false.
|
5101
|
+
"""
|
5001
5102
|
return pulumi.get(self, "is_open_id_connect_auth_enabled")
|
5002
5103
|
|
5003
5104
|
@property
|
5004
5105
|
@pulumi.getter(name="issuerUrl")
|
5005
5106
|
def issuer_url(self) -> str:
|
5107
|
+
"""
|
5108
|
+
URL of the provider that allows the API server to discover public signing keys. Only URLs that use the https:// scheme are accepted. This is typically the provider's discovery URL, changed to have an empty path.
|
5109
|
+
"""
|
5006
5110
|
return pulumi.get(self, "issuer_url")
|
5007
5111
|
|
5008
5112
|
@property
|
5009
5113
|
@pulumi.getter(name="requiredClaims")
|
5010
5114
|
def required_claims(self) -> Sequence['outputs.GetClusterOptionOpenIdConnectTokenAuthenticationConfigRequiredClaimResult']:
|
5115
|
+
"""
|
5116
|
+
A key=value pair that describes a required claim in the ID Token. If set, the claim is verified to be present in the ID Token with a matching value. Repeat this flag to specify multiple claims.
|
5117
|
+
"""
|
5011
5118
|
return pulumi.get(self, "required_claims")
|
5012
5119
|
|
5013
5120
|
@property
|
5014
5121
|
@pulumi.getter(name="signingAlgorithms")
|
5015
5122
|
def signing_algorithms(self) -> Sequence[str]:
|
5123
|
+
"""
|
5124
|
+
The signing algorithms accepted. Default is ["RS256"].
|
5125
|
+
"""
|
5016
5126
|
return pulumi.get(self, "signing_algorithms")
|
5017
5127
|
|
5018
5128
|
@property
|
5019
5129
|
@pulumi.getter(name="usernameClaim")
|
5020
5130
|
def username_claim(self) -> str:
|
5131
|
+
"""
|
5132
|
+
JWT claim to use as the user name. By default sub, which is expected to be a unique identifier of the end user. Admins can choose other claims, such as email or name, depending on their provider. However, claims other than email will be prefixed with the issuer URL to prevent naming clashes with other plugins.
|
5133
|
+
"""
|
5021
5134
|
return pulumi.get(self, "username_claim")
|
5022
5135
|
|
5023
5136
|
@property
|
5024
5137
|
@pulumi.getter(name="usernamePrefix")
|
5025
5138
|
def username_prefix(self) -> str:
|
5139
|
+
"""
|
5140
|
+
Prefix prepended to username claims to prevent clashes with existing names (such as system:users). For example, the value oidc: will create usernames like oidc:jane.doe. If this flag isn't provided and --oidc-username-claim is a value other than email the prefix defaults to ( Issuer URL )# where ( Issuer URL ) is the value of --oidc-issuer-url. The value - can be used to disable all prefixing.
|
5141
|
+
"""
|
5026
5142
|
return pulumi.get(self, "username_prefix")
|
5027
5143
|
|
5028
5144
|
|
@@ -5031,17 +5147,27 @@ class GetClusterOptionOpenIdConnectTokenAuthenticationConfigRequiredClaimResult(
|
|
5031
5147
|
def __init__(__self__, *,
|
5032
5148
|
key: str,
|
5033
5149
|
value: str):
|
5150
|
+
"""
|
5151
|
+
:param str key: The key of the pair.
|
5152
|
+
:param str value: The value of the pair.
|
5153
|
+
"""
|
5034
5154
|
pulumi.set(__self__, "key", key)
|
5035
5155
|
pulumi.set(__self__, "value", value)
|
5036
5156
|
|
5037
5157
|
@property
|
5038
5158
|
@pulumi.getter
|
5039
5159
|
def key(self) -> str:
|
5160
|
+
"""
|
5161
|
+
The key of the pair.
|
5162
|
+
"""
|
5040
5163
|
return pulumi.get(self, "key")
|
5041
5164
|
|
5042
5165
|
@property
|
5043
5166
|
@pulumi.getter
|
5044
5167
|
def value(self) -> str:
|
5168
|
+
"""
|
5169
|
+
The value of the pair.
|
5170
|
+
"""
|
5045
5171
|
return pulumi.get(self, "value")
|
5046
5172
|
|
5047
5173
|
|
@@ -5473,21 +5599,32 @@ class GetClustersClusterClusterPodNetworkOptionResult(dict):
|
|
5473
5599
|
@pulumi.output_type
|
5474
5600
|
class GetClustersClusterEndpointResult(dict):
|
5475
5601
|
def __init__(__self__, *,
|
5602
|
+
ipv6endpoint: str,
|
5476
5603
|
kubernetes: str,
|
5477
5604
|
private_endpoint: str,
|
5478
5605
|
public_endpoint: str,
|
5479
5606
|
vcn_hostname_endpoint: str):
|
5480
5607
|
"""
|
5608
|
+
:param str ipv6endpoint: The IPv6 networking Kubernetes API server endpoint.
|
5481
5609
|
:param str kubernetes: The non-native networking Kubernetes API server endpoint.
|
5482
5610
|
:param str private_endpoint: The private native networking Kubernetes API server endpoint.
|
5483
5611
|
:param str public_endpoint: The public native networking Kubernetes API server endpoint, if one was requested.
|
5484
5612
|
:param str vcn_hostname_endpoint: The FQDN assigned to the Kubernetes API private endpoint. Example: 'https://yourVcnHostnameEndpoint'
|
5485
5613
|
"""
|
5614
|
+
pulumi.set(__self__, "ipv6endpoint", ipv6endpoint)
|
5486
5615
|
pulumi.set(__self__, "kubernetes", kubernetes)
|
5487
5616
|
pulumi.set(__self__, "private_endpoint", private_endpoint)
|
5488
5617
|
pulumi.set(__self__, "public_endpoint", public_endpoint)
|
5489
5618
|
pulumi.set(__self__, "vcn_hostname_endpoint", vcn_hostname_endpoint)
|
5490
5619
|
|
5620
|
+
@property
|
5621
|
+
@pulumi.getter
|
5622
|
+
def ipv6endpoint(self) -> str:
|
5623
|
+
"""
|
5624
|
+
The IPv6 networking Kubernetes API server endpoint.
|
5625
|
+
"""
|
5626
|
+
return pulumi.get(self, "ipv6endpoint")
|
5627
|
+
|
5491
5628
|
@property
|
5492
5629
|
@pulumi.getter
|
5493
5630
|
def kubernetes(self) -> str:
|
@@ -5730,6 +5867,7 @@ class GetClustersClusterOptionResult(dict):
|
|
5730
5867
|
def __init__(__self__, *,
|
5731
5868
|
add_ons: Sequence['outputs.GetClustersClusterOptionAddOnResult'],
|
5732
5869
|
admission_controller_options: Sequence['outputs.GetClustersClusterOptionAdmissionControllerOptionResult'],
|
5870
|
+
ip_families: Sequence[str],
|
5733
5871
|
kubernetes_network_configs: Sequence['outputs.GetClustersClusterOptionKubernetesNetworkConfigResult'],
|
5734
5872
|
open_id_connect_discoveries: Sequence['outputs.GetClustersClusterOptionOpenIdConnectDiscoveryResult'],
|
5735
5873
|
open_id_connect_token_authentication_configs: Sequence['outputs.GetClustersClusterOptionOpenIdConnectTokenAuthenticationConfigResult'],
|
@@ -5739,6 +5877,7 @@ class GetClustersClusterOptionResult(dict):
|
|
5739
5877
|
"""
|
5740
5878
|
:param Sequence['GetClustersClusterOptionAddOnArgs'] add_ons: Configurable cluster add-ons
|
5741
5879
|
:param Sequence['GetClustersClusterOptionAdmissionControllerOptionArgs'] admission_controller_options: Configurable cluster admission controllers
|
5880
|
+
:param Sequence[str] ip_families: IP family to use for single stack or define the order of IP families for dual-stack
|
5742
5881
|
:param Sequence['GetClustersClusterOptionKubernetesNetworkConfigArgs'] kubernetes_network_configs: Network configuration for Kubernetes.
|
5743
5882
|
:param Sequence['GetClustersClusterOptionOpenIdConnectDiscoveryArgs'] open_id_connect_discoveries: The property that define the status of the OIDC Discovery feature for a cluster.
|
5744
5883
|
:param Sequence['GetClustersClusterOptionOpenIdConnectTokenAuthenticationConfigArgs'] open_id_connect_token_authentication_configs: The properties that configure OIDC token authentication in kube-apiserver. For more information, see [Configuring the API Server](https://kubernetes.io/docs/reference/access-authn-authz/authentication/#using-flags).
|
@@ -5748,6 +5887,7 @@ class GetClustersClusterOptionResult(dict):
|
|
5748
5887
|
"""
|
5749
5888
|
pulumi.set(__self__, "add_ons", add_ons)
|
5750
5889
|
pulumi.set(__self__, "admission_controller_options", admission_controller_options)
|
5890
|
+
pulumi.set(__self__, "ip_families", ip_families)
|
5751
5891
|
pulumi.set(__self__, "kubernetes_network_configs", kubernetes_network_configs)
|
5752
5892
|
pulumi.set(__self__, "open_id_connect_discoveries", open_id_connect_discoveries)
|
5753
5893
|
pulumi.set(__self__, "open_id_connect_token_authentication_configs", open_id_connect_token_authentication_configs)
|
@@ -5771,6 +5911,14 @@ class GetClustersClusterOptionResult(dict):
|
|
5771
5911
|
"""
|
5772
5912
|
return pulumi.get(self, "admission_controller_options")
|
5773
5913
|
|
5914
|
+
@property
|
5915
|
+
@pulumi.getter(name="ipFamilies")
|
5916
|
+
def ip_families(self) -> Sequence[str]:
|
5917
|
+
"""
|
5918
|
+
IP family to use for single stack or define the order of IP families for dual-stack
|
5919
|
+
"""
|
5920
|
+
return pulumi.get(self, "ip_families")
|
5921
|
+
|
5774
5922
|
@property
|
5775
5923
|
@pulumi.getter(name="kubernetesNetworkConfigs")
|
5776
5924
|
def kubernetes_network_configs(self) -> Sequence['outputs.GetClustersClusterOptionKubernetesNetworkConfigResult']:
|
@@ -5919,6 +6067,7 @@ class GetClustersClusterOptionOpenIdConnectTokenAuthenticationConfigResult(dict)
|
|
5919
6067
|
def __init__(__self__, *,
|
5920
6068
|
ca_certificate: str,
|
5921
6069
|
client_id: str,
|
6070
|
+
configuration_file: str,
|
5922
6071
|
groups_claim: str,
|
5923
6072
|
groups_prefix: str,
|
5924
6073
|
is_open_id_connect_auth_enabled: bool,
|
@@ -5930,6 +6079,7 @@ class GetClustersClusterOptionOpenIdConnectTokenAuthenticationConfigResult(dict)
|
|
5930
6079
|
"""
|
5931
6080
|
:param str ca_certificate: A Base64 encoded public RSA or ECDSA certificates used to signed your identity provider's web certificate.
|
5932
6081
|
:param str client_id: A client id that all tokens must be issued for.
|
6082
|
+
:param str configuration_file: A Base64 encoded string of a Kubernetes OIDC Auth Config file. More info [here](https://kubernetes.io/docs/reference/access-authn-authz/authentication/#using-authentication-configuration)
|
5933
6083
|
:param str groups_claim: JWT claim to use as the user's group. If the claim is present it must be an array of strings.
|
5934
6084
|
:param str groups_prefix: Prefix prepended to group claims to prevent clashes with existing names (such as system:groups).
|
5935
6085
|
:param bool is_open_id_connect_auth_enabled: Whether the cluster has OIDC Auth Config enabled. Defaults to false.
|
@@ -5941,6 +6091,7 @@ class GetClustersClusterOptionOpenIdConnectTokenAuthenticationConfigResult(dict)
|
|
5941
6091
|
"""
|
5942
6092
|
pulumi.set(__self__, "ca_certificate", ca_certificate)
|
5943
6093
|
pulumi.set(__self__, "client_id", client_id)
|
6094
|
+
pulumi.set(__self__, "configuration_file", configuration_file)
|
5944
6095
|
pulumi.set(__self__, "groups_claim", groups_claim)
|
5945
6096
|
pulumi.set(__self__, "groups_prefix", groups_prefix)
|
5946
6097
|
pulumi.set(__self__, "is_open_id_connect_auth_enabled", is_open_id_connect_auth_enabled)
|
@@ -5966,6 +6117,14 @@ class GetClustersClusterOptionOpenIdConnectTokenAuthenticationConfigResult(dict)
|
|
5966
6117
|
"""
|
5967
6118
|
return pulumi.get(self, "client_id")
|
5968
6119
|
|
6120
|
+
@property
|
6121
|
+
@pulumi.getter(name="configurationFile")
|
6122
|
+
def configuration_file(self) -> str:
|
6123
|
+
"""
|
6124
|
+
A Base64 encoded string of a Kubernetes OIDC Auth Config file. More info [here](https://kubernetes.io/docs/reference/access-authn-authz/authentication/#using-authentication-configuration)
|
6125
|
+
"""
|
6126
|
+
return pulumi.get(self, "configuration_file")
|
6127
|
+
|
5969
6128
|
@property
|
5970
6129
|
@pulumi.getter(name="groupsClaim")
|
5971
6130
|
def groups_claim(self) -> str:
|
@@ -294,7 +294,6 @@ class GetContainerInstanceContainerResult(dict):
|
|
294
294
|
@pulumi.output_type
|
295
295
|
class GetContainerInstanceContainerHealthCheckResult(dict):
|
296
296
|
def __init__(__self__, *,
|
297
|
-
commands: Sequence[str],
|
298
297
|
failure_action: str,
|
299
298
|
failure_threshold: int,
|
300
299
|
headers: Sequence['outputs.GetContainerInstanceContainerHealthCheckHeaderResult'],
|
@@ -312,7 +311,6 @@ class GetContainerInstanceContainerHealthCheckResult(dict):
|
|
312
311
|
:param str name: The name of the volume. This must be unique within a single container instance.
|
313
312
|
:param str path: (Optional) Relative path for this file inside the volume mount directory. By default, the file is presented at the root of the volume mount path.
|
314
313
|
"""
|
315
|
-
pulumi.set(__self__, "commands", commands)
|
316
314
|
pulumi.set(__self__, "failure_action", failure_action)
|
317
315
|
pulumi.set(__self__, "failure_threshold", failure_threshold)
|
318
316
|
pulumi.set(__self__, "headers", headers)
|
@@ -327,11 +325,6 @@ class GetContainerInstanceContainerHealthCheckResult(dict):
|
|
327
325
|
pulumi.set(__self__, "success_threshold", success_threshold)
|
328
326
|
pulumi.set(__self__, "timeout_in_seconds", timeout_in_seconds)
|
329
327
|
|
330
|
-
@property
|
331
|
-
@pulumi.getter
|
332
|
-
def commands(self) -> Sequence[str]:
|
333
|
-
return pulumi.get(self, "commands")
|
334
|
-
|
335
328
|
@property
|
336
329
|
@pulumi.getter(name="failureAction")
|
337
330
|
def failure_action(self) -> str:
|
@@ -1825,7 +1818,6 @@ class GetContainerInstancesContainerInstanceCollectionItemContainerResult(dict):
|
|
1825
1818
|
@pulumi.output_type
|
1826
1819
|
class GetContainerInstancesContainerInstanceCollectionItemContainerHealthCheckResult(dict):
|
1827
1820
|
def __init__(__self__, *,
|
1828
|
-
commands: Sequence[str],
|
1829
1821
|
failure_action: str,
|
1830
1822
|
failure_threshold: int,
|
1831
1823
|
headers: Sequence['outputs.GetContainerInstancesContainerInstanceCollectionItemContainerHealthCheckHeaderResult'],
|
@@ -1843,7 +1835,6 @@ class GetContainerInstancesContainerInstanceCollectionItemContainerHealthCheckRe
|
|
1843
1835
|
:param str name: The name of the volume. This must be unique within a single container instance.
|
1844
1836
|
:param str path: (Optional) Relative path for this file inside the volume mount directory. By default, the file is presented at the root of the volume mount path.
|
1845
1837
|
"""
|
1846
|
-
pulumi.set(__self__, "commands", commands)
|
1847
1838
|
pulumi.set(__self__, "failure_action", failure_action)
|
1848
1839
|
pulumi.set(__self__, "failure_threshold", failure_threshold)
|
1849
1840
|
pulumi.set(__self__, "headers", headers)
|
@@ -1858,11 +1849,6 @@ class GetContainerInstancesContainerInstanceCollectionItemContainerHealthCheckRe
|
|
1858
1849
|
pulumi.set(__self__, "success_threshold", success_threshold)
|
1859
1850
|
pulumi.set(__self__, "timeout_in_seconds", timeout_in_seconds)
|
1860
1851
|
|
1861
|
-
@property
|
1862
|
-
@pulumi.getter
|
1863
|
-
def commands(self) -> Sequence[str]:
|
1864
|
-
return pulumi.get(self, "commands")
|
1865
|
-
|
1866
1852
|
@property
|
1867
1853
|
@pulumi.getter(name="failureAction")
|
1868
1854
|
def failure_action(self) -> str:
|