pulumi-tailscale 1.0.0a1769802536__tar.gz → 1.0.0a1770157009__tar.gz

{pulumi_tailscale-1.0.0a1769802536 → pulumi_tailscale-1.0.0a1770157009}/PKG-INFO

@@ -1,6 +1,6 @@
 Metadata-Version: 2.4
 Name: pulumi_tailscale
-Version: 1.0.0a1769802536
+Version: 1.0.0a1770157009
 Summary: A Pulumi package for creating and managing Tailscale cloud resources.
 License: Apache-2.0
 Project-URL: Homepage, https://pulumi.io

{pulumi_tailscale-1.0.0a1769802536 → pulumi_tailscale-1.0.0a1770157009}/pulumi_tailscale/aws_external_id.py

@@ -75,6 +75,50 @@ class AwsExternalId(pulumi.CustomResource):
         """
         The aws_external_id resource allows you to mint an AWS External ID that Tailscale can use to assume an AWS IAM role that you create for the purposes of allowing Tailscale to stream logs to your S3 bucket. See the logstream_configuration resource for more details.
 
+        ## Example Usage
+
+        ```python
+        import pulumi
+        import pulumi_aws as aws
+        import pulumi_tailscale as tailscale
+
+        prod = tailscale.AwsExternalId("prod")
+        tailscale_assume_role = aws.index.iam_policy_document(statement=[{
+            "actions": ["sts:AssumeRole"],
+            "principals": [{
+                "type": "AWS",
+                "identifiers": [prod.tailscale_aws_account_id],
+            }],
+            "condition": [{
+                "test": "StringEquals",
+                "variable": "sts:ExternalId",
+                "values": [prod.external_id],
+            }],
+        }])
+        logs_writer_iam_role = aws.index.IamRole("logs_writer",
+            name=logs-writer,
+            assume_role_policy=tailscale_assume_role.json)
+        configuration_logs = tailscale.LogstreamConfiguration("configuration_logs",
+            log_type="configuration",
+            destination_type="s3",
+            s3_bucket=tailscale_logs["id"],
+            s3_region="us-west-2",
+            s3_authentication_type="rolearn",
+            s3_role_arn=logs_writer_iam_role["arn"],
+            s3_external_id=prod.external_id)
+        logs_writer = aws.index.iam_policy_document(statement=[{
+            "effect": "Allow",
+            "actions": ["s3:*"],
+            "resources": [
+                "arn:aws:s3:::example-bucket",
+                "arn:aws:s3:::example-bucket/*",
+            ],
+        }])
+        logs_writer_iam_role_policy = aws.index.IamRolePolicy("logs_writer",
+            role=logs_writer_iam_role.id,
+            policy=logs_writer.json)
+        ```
+
         :param str resource_name: The name of the resource.
         :param pulumi.ResourceOptions opts: Options for the resource.
         """
@@ -87,6 +131,50 @@ class AwsExternalId(pulumi.CustomResource):
         """
         The aws_external_id resource allows you to mint an AWS External ID that Tailscale can use to assume an AWS IAM role that you create for the purposes of allowing Tailscale to stream logs to your S3 bucket. See the logstream_configuration resource for more details.
 
+        ## Example Usage
+
+        ```python
+        import pulumi
+        import pulumi_aws as aws
+        import pulumi_tailscale as tailscale
+
+        prod = tailscale.AwsExternalId("prod")
+        tailscale_assume_role = aws.index.iam_policy_document(statement=[{
+            "actions": ["sts:AssumeRole"],
+            "principals": [{
+                "type": "AWS",
+                "identifiers": [prod.tailscale_aws_account_id],
+            }],
+            "condition": [{
+                "test": "StringEquals",
+                "variable": "sts:ExternalId",
+                "values": [prod.external_id],
+            }],
+        }])
+        logs_writer_iam_role = aws.index.IamRole("logs_writer",
+            name=logs-writer,
+            assume_role_policy=tailscale_assume_role.json)
+        configuration_logs = tailscale.LogstreamConfiguration("configuration_logs",
+            log_type="configuration",
+            destination_type="s3",
+            s3_bucket=tailscale_logs["id"],
+            s3_region="us-west-2",
+            s3_authentication_type="rolearn",
+            s3_role_arn=logs_writer_iam_role["arn"],
+            s3_external_id=prod.external_id)
+        logs_writer = aws.index.iam_policy_document(statement=[{
+            "effect": "Allow",
+            "actions": ["s3:*"],
+            "resources": [
+                "arn:aws:s3:::example-bucket",
+                "arn:aws:s3:::example-bucket/*",
+            ],
+        }])
+        logs_writer_iam_role_policy = aws.index.IamRolePolicy("logs_writer",
+            role=logs_writer_iam_role.id,
+            policy=logs_writer.json)
+        ```
+
         :param str resource_name: The name of the resource.
         :param AwsExternalIdArgs args: The arguments to use to populate this resource's properties.
         :param pulumi.ResourceOptions opts: Options for the resource.

{pulumi_tailscale-1.0.0a1769802536 → pulumi_tailscale-1.0.0a1770157009}/pulumi_tailscale/pulumi-plugin.json

@@ -1,5 +1,5 @@
 {
   "resource": true,
   "name": "tailscale",
-  "version": "1.0.0-alpha.1769802536"
+  "version": "1.0.0-alpha.1770157009"
 }

{pulumi_tailscale-1.0.0a1769802536 → pulumi_tailscale-1.0.0a1770157009}/pulumi_tailscale.egg-info/PKG-INFO

@@ -1,6 +1,6 @@
 Metadata-Version: 2.4
 Name: pulumi_tailscale
-Version: 1.0.0a1769802536
+Version: 1.0.0a1770157009
 Summary: A Pulumi package for creating and managing Tailscale cloud resources.
 License: Apache-2.0
 Project-URL: Homepage, https://pulumi.io

{pulumi_tailscale-1.0.0a1769802536 → pulumi_tailscale-1.0.0a1770157009}/pyproject.toml

@@ -5,7 +5,7 @@
   keywords = ["pulumi", "tailscale"]
   readme = "README.md"
   requires-python = ">=3.9"
-  version = "1.0.0a1769802536"
+  version = "1.0.0a1770157009"
   [project.license]
     text = "Apache-2.0"
   [project.urls]