assuredworkloads

package
v8.13.1 Latest Latest
Warning

This package is not in the latest version of its module.

Go to latest
Published: Jan 10, 2025 License: Apache-2.0 Imports: 7 Imported by: 0

Documentation

Index

Constants

This section is empty.

Variables

This section is empty.

Functions

This section is empty.

Types

type Workload

type Workload struct {
	pulumi.CustomResourceState

	// Optional. Input only. The billing account used for the resources which are direct children of workload. This billing account is initially associated with the resources created as part of Workload creation. After the initial creation of these resources, the customer can change the assigned billing account. The resource name has the form `billingAccounts/{billing_account_id}`. For example, `billingAccounts/012345-567890-ABCDEF`.
	BillingAccount pulumi.StringPtrOutput `pulumi:"billingAccount"`
	// Required. Immutable. Compliance Regime associated with this workload. Possible values: COMPLIANCE_REGIME_UNSPECIFIED, IL4, CJIS, FEDRAMP_HIGH, FEDRAMP_MODERATE, US_REGIONAL_ACCESS, HIPAA, HITRUST, EU_REGIONS_AND_SUPPORT, CA_REGIONS_AND_SUPPORT, ITAR, AU_REGIONS_AND_US_SUPPORT, ASSURED_WORKLOADS_FOR_PARTNERS, ISR_REGIONS, ISR_REGIONS_AND_SUPPORT, CA_PROTECTED_B, IL5, IL2, JP_REGIONS_AND_SUPPORT, KSA_REGIONS_AND_SUPPORT_WITH_SOVEREIGNTY_CONTROLS, REGIONAL_CONTROLS, HEALTHCARE_AND_LIFE_SCIENCES_CONTROLS, HEALTHCARE_AND_LIFE_SCIENCES_CONTROLS_WITH_US_SUPPORT, IRS_1075
	ComplianceRegime pulumi.StringOutput `pulumi:"complianceRegime"`
	// Output only. Count of active Violations in the Workload.
	ComplianceStatuses WorkloadComplianceStatusArrayOutput `pulumi:"complianceStatuses"`
	// Output only. Urls for services which are compliant for this Assured Workload, but which are currently disallowed by the ResourceUsageRestriction org policy. Invoke workloads.restrictAllowedResources endpoint to allow your project developers to use these services in their environment.
	CompliantButDisallowedServices pulumi.StringArrayOutput `pulumi:"compliantButDisallowedServices"`
	// Output only. Immutable. The Workload creation timestamp.
	CreateTime pulumi.StringOutput `pulumi:"createTime"`
	// Required. The user-assigned display name of the Workload. When present it must be between 4 to 30 characters. Allowed characters are: lowercase and uppercase letters, numbers, hyphen, and spaces. Example: My Workload
	DisplayName pulumi.StringOutput `pulumi:"displayName"`
	// All of labels (key/value pairs) present on the resource in GCP, including the labels configured through Pulumi, other clients and services.
	EffectiveLabels pulumi.StringMapOutput `pulumi:"effectiveLabels"`
	// Optional. Represents the Ekm Provisioning State of the given workload.
	EkmProvisioningResponses WorkloadEkmProvisioningResponseArrayOutput `pulumi:"ekmProvisioningResponses"`
	// Optional. Indicates the sovereignty status of the given workload. Currently meant to be used by Europe/Canada customers.
	EnableSovereignControls pulumi.BoolOutput `pulumi:"enableSovereignControls"`
	// Output only. Represents the KAJ enrollment state of the given workload. Possible values: KAJ_ENROLLMENT_STATE_UNSPECIFIED, KAJ_ENROLLMENT_STATE_PENDING, KAJ_ENROLLMENT_STATE_COMPLETE
	KajEnrollmentState pulumi.StringOutput `pulumi:"kajEnrollmentState"`
	// **DEPRECATED** Input only. Settings used to create a CMEK crypto key. When set, a project with a KMS CMEK key is provisioned. This field is deprecated as of Feb 28, 2022. In order to create a Keyring, callers should specify, ENCRYPTION_KEYS_PROJECT or KEYRING in ResourceSettings.resource_type field.
	KmsSettings WorkloadKmsSettingsPtrOutput `pulumi:"kmsSettings"`
	// Optional. Labels applied to the workload.
	//
	// **Note**: This field is non-authoritative, and will only manage the labels present in your configuration.
	// Please refer to the field `effectiveLabels` for all of the labels present on the resource.
	Labels pulumi.StringMapOutput `pulumi:"labels"`
	// The location for the resource
	Location pulumi.StringOutput `pulumi:"location"`
	// Output only. The resource name of the workload.
	Name pulumi.StringOutput `pulumi:"name"`
	// The organization for the resource
	//
	// ***
	Organization pulumi.StringOutput `pulumi:"organization"`
	// Optional. Partner regime associated with this workload. Possible values: PARTNER_UNSPECIFIED, LOCAL_CONTROLS_BY_S3NS, SOVEREIGN_CONTROLS_BY_T_SYSTEMS, SOVEREIGN_CONTROLS_BY_SIA_MINSAIT, SOVEREIGN_CONTROLS_BY_PSN, SOVEREIGN_CONTROLS_BY_CNTXT, SOVEREIGN_CONTROLS_BY_CNTXT_NO_EKM
	Partner pulumi.StringPtrOutput `pulumi:"partner"`
	// Optional. Permissions granted to the AW Partner SA account for the customer workload
	PartnerPermissions WorkloadPartnerPermissionsPtrOutput `pulumi:"partnerPermissions"`
	// Optional. Input only. Billing account necessary for purchasing services from Sovereign Partners. This field is required for creating SIA/PSN/CNTXT partner workloads. The caller should have 'billing.resourceAssociations.create' IAM permission on this billing-account. The format of this string is billingAccounts/AAAAAA-BBBBBB-CCCCCC.
	PartnerServicesBillingAccount pulumi.StringPtrOutput `pulumi:"partnerServicesBillingAccount"`
	// Input only. The parent resource for the resources managed by this Assured Workload. May be either empty or a folder resource which is a child of the Workload parent. If not specified all resources are created under the parent organization. Format: folders/{folder_id}
	ProvisionedResourcesParent pulumi.StringPtrOutput `pulumi:"provisionedResourcesParent"`
	// The combination of labels configured directly on the resource and default labels configured on the provider.
	PulumiLabels pulumi.StringMapOutput `pulumi:"pulumiLabels"`
	// Input only. Resource properties that are used to customize workload resources. These properties (such as custom project id) will be used to create workload resources if possible. This field is optional.
	ResourceSettings WorkloadResourceSettingArrayOutput `pulumi:"resourceSettings"`
	// Output only. The resources associated with this workload. These resources will be created when creating the workload. If any of the projects already exist, the workload creation will fail. Always read only.
	Resources WorkloadResourceArrayOutput `pulumi:"resources"`
	// Output only. Represents the SAA enrollment response of the given workload. SAA enrollment response is queried during workloads.get call. In failure cases, user friendly error message is shown in SAA details page.
	SaaEnrollmentResponses WorkloadSaaEnrollmentResponseArrayOutput `pulumi:"saaEnrollmentResponses"`
	// Optional. Indicates whether the e-mail notification for a violation is enabled for a workload. This value will be by default True, and if not present will be considered as true. This should only be updated via updateWorkload call. Any Changes to this field during the createWorkload call will not be honored. This will always be true while creating the workload.
	ViolationNotificationsEnabled pulumi.BoolOutput `pulumi:"violationNotificationsEnabled"`
	// Optional. Used to specify certain options for a workload during workload creation - currently only supporting KAT Optionality for Regional Controls workloads.
	WorkloadOptions WorkloadWorkloadOptionsPtrOutput `pulumi:"workloadOptions"`
}

The AssuredWorkloads Workload resource

## Example Usage

### Basic_workload A basic test of a assuredworkloads api ```go package main

import (

"github.com/pulumi/pulumi-gcp/sdk/v8/go/gcp/assuredworkloads"
"github.com/pulumi/pulumi/sdk/v3/go/pulumi"

)

func main() {
	pulumi.Run(func(ctx *pulumi.Context) error {
		_, err := assuredworkloads.NewWorkload(ctx, "primary", &assuredworkloads.WorkloadArgs{
			ComplianceRegime: pulumi.String("FEDRAMP_MODERATE"),
			DisplayName:      pulumi.String("{{display}}"),
			Location:         pulumi.String("us-west1"),
			Organization:     pulumi.String("123456789"),
			BillingAccount:   pulumi.String("billingAccounts/000000-0000000-0000000-000000"),
			KmsSettings: &assuredworkloads.WorkloadKmsSettingsArgs{
				NextRotationTime: pulumi.String("9999-10-02T15:01:23Z"),
				RotationPeriod:   pulumi.String("10368000s"),
			},
			ProvisionedResourcesParent: pulumi.String("folders/519620126891"),
			ResourceSettings: assuredworkloads.WorkloadResourceSettingArray{
				&assuredworkloads.WorkloadResourceSettingArgs{
					DisplayName:  pulumi.String("{{name}}"),
					ResourceType: pulumi.String("CONSUMER_FOLDER"),
				},
				&assuredworkloads.WorkloadResourceSettingArgs{
					ResourceType: pulumi.String("ENCRYPTION_KEYS_PROJECT"),
				},
				&assuredworkloads.WorkloadResourceSettingArgs{
					ResourceId:   pulumi.String("ring"),
					ResourceType: pulumi.String("KEYRING"),
				},
			},
			ViolationNotificationsEnabled: pulumi.Bool(true),
			WorkloadOptions: &assuredworkloads.WorkloadWorkloadOptionsArgs{
				KajEnrollmentType: pulumi.String("KEY_ACCESS_TRANSPARENCY_OFF"),
			},
			Labels: pulumi.StringMap{
				"label-one": pulumi.String("value-one"),
			},
		})
		if err != nil {
			return err
		}
		return nil
	})
}

``` ### Sovereign_controls_workload A Sovereign Controls test of the assuredworkloads api ```go package main

import (

"github.com/pulumi/pulumi-gcp/sdk/v8/go/gcp/assuredworkloads"
"github.com/pulumi/pulumi/sdk/v3/go/pulumi"

)

func main() {
	pulumi.Run(func(ctx *pulumi.Context) error {
		_, err := assuredworkloads.NewWorkload(ctx, "primary", &assuredworkloads.WorkloadArgs{
			ComplianceRegime:        pulumi.String("EU_REGIONS_AND_SUPPORT"),
			DisplayName:             pulumi.String("display"),
			Location:                pulumi.String("europe-west9"),
			Organization:            pulumi.String("123456789"),
			BillingAccount:          pulumi.String("billingAccounts/000000-0000000-0000000-000000"),
			EnableSovereignControls: pulumi.Bool(true),
			KmsSettings: &assuredworkloads.WorkloadKmsSettingsArgs{
				NextRotationTime: pulumi.String("9999-10-02T15:01:23Z"),
				RotationPeriod:   pulumi.String("10368000s"),
			},
			ResourceSettings: assuredworkloads.WorkloadResourceSettingArray{
				&assuredworkloads.WorkloadResourceSettingArgs{
					ResourceType: pulumi.String("CONSUMER_FOLDER"),
				},
				&assuredworkloads.WorkloadResourceSettingArgs{
					ResourceType: pulumi.String("ENCRYPTION_KEYS_PROJECT"),
				},
				&assuredworkloads.WorkloadResourceSettingArgs{
					ResourceId:   pulumi.String("ring"),
					ResourceType: pulumi.String("KEYRING"),
				},
			},
			Labels: pulumi.StringMap{
				"label-one": pulumi.String("value-one"),
			},
		})
		if err != nil {
			return err
		}
		return nil
	})
}

``` ### Split_billing_partner_workload A Split billing partner test of the assuredworkloads api ```go package main

import (

"github.com/pulumi/pulumi-gcp/sdk/v8/go/gcp/assuredworkloads"
"github.com/pulumi/pulumi/sdk/v3/go/pulumi"

)

func main() {
	pulumi.Run(func(ctx *pulumi.Context) error {
		_, err := assuredworkloads.NewWorkload(ctx, "primary", &assuredworkloads.WorkloadArgs{
			ComplianceRegime: pulumi.String("ASSURED_WORKLOADS_FOR_PARTNERS"),
			DisplayName:      pulumi.String("display"),
			Location:         pulumi.String("europe-west8"),
			Organization:     pulumi.String("123456789"),
			BillingAccount:   pulumi.String("billingAccounts/000000-0000000-0000000-000000"),
			Partner:          pulumi.String("SOVEREIGN_CONTROLS_BY_PSN"),
			PartnerPermissions: &assuredworkloads.WorkloadPartnerPermissionsArgs{
				AssuredWorkloadsMonitoring: pulumi.Bool(true),
				DataLogsViewer:             pulumi.Bool(true),
				ServiceAccessApprover:      pulumi.Bool(true),
			},
			PartnerServicesBillingAccount: pulumi.String("billingAccounts/01BF3F-2C6DE5-30C607"),
			ResourceSettings: assuredworkloads.WorkloadResourceSettingArray{
				&assuredworkloads.WorkloadResourceSettingArgs{
					ResourceType: pulumi.String("CONSUMER_FOLDER"),
				},
				&assuredworkloads.WorkloadResourceSettingArgs{
					ResourceType: pulumi.String("ENCRYPTION_KEYS_PROJECT"),
				},
				&assuredworkloads.WorkloadResourceSettingArgs{
					ResourceId:   pulumi.String("ring"),
					ResourceType: pulumi.String("KEYRING"),
				},
			},
			ViolationNotificationsEnabled: pulumi.Bool(true),
			Labels: pulumi.StringMap{
				"label-one": pulumi.String("value-one"),
			},
		})
		if err != nil {
			return err
		}
		return nil
	})
}

```

## Import

Workload can be imported using any of these accepted formats:

* `organizations/{{organization}}/locations/{{location}}/workloads/{{name}}`

* `{{organization}}/{{location}}/{{name}}`

When using the `pulumi import` command, Workload can be imported using one of the formats above. For example:

```sh $ pulumi import gcp:assuredworkloads/workload:Workload default organizations/{{organization}}/locations/{{location}}/workloads/{{name}} ```

```sh $ pulumi import gcp:assuredworkloads/workload:Workload default {{organization}}/{{location}}/{{name}} ```

func GetWorkload

func GetWorkload(ctx *pulumi.Context,
	name string, id pulumi.IDInput, state *WorkloadState, opts ...pulumi.ResourceOption) (*Workload, error)

GetWorkload gets an existing Workload resource's state with the given name, ID, and optional state properties that are used to uniquely qualify the lookup (nil if not required).

func NewWorkload

func NewWorkload(ctx *pulumi.Context,
	name string, args *WorkloadArgs, opts ...pulumi.ResourceOption) (*Workload, error)

NewWorkload registers a new resource with the given unique name, arguments, and options.

func (*Workload) ElementType

func (*Workload) ElementType() reflect.Type

func (*Workload) ToWorkloadOutput

func (i *Workload) ToWorkloadOutput() WorkloadOutput

func (*Workload) ToWorkloadOutputWithContext

func (i *Workload) ToWorkloadOutputWithContext(ctx context.Context) WorkloadOutput

type WorkloadArgs

type WorkloadArgs struct {
	// Optional. Input only. The billing account used for the resources which are direct children of workload. This billing account is initially associated with the resources created as part of Workload creation. After the initial creation of these resources, the customer can change the assigned billing account. The resource name has the form `billingAccounts/{billing_account_id}`. For example, `billingAccounts/012345-567890-ABCDEF`.
	BillingAccount pulumi.StringPtrInput
	// Required. Immutable. Compliance Regime associated with this workload. Possible values: COMPLIANCE_REGIME_UNSPECIFIED, IL4, CJIS, FEDRAMP_HIGH, FEDRAMP_MODERATE, US_REGIONAL_ACCESS, HIPAA, HITRUST, EU_REGIONS_AND_SUPPORT, CA_REGIONS_AND_SUPPORT, ITAR, AU_REGIONS_AND_US_SUPPORT, ASSURED_WORKLOADS_FOR_PARTNERS, ISR_REGIONS, ISR_REGIONS_AND_SUPPORT, CA_PROTECTED_B, IL5, IL2, JP_REGIONS_AND_SUPPORT, KSA_REGIONS_AND_SUPPORT_WITH_SOVEREIGNTY_CONTROLS, REGIONAL_CONTROLS, HEALTHCARE_AND_LIFE_SCIENCES_CONTROLS, HEALTHCARE_AND_LIFE_SCIENCES_CONTROLS_WITH_US_SUPPORT, IRS_1075
	ComplianceRegime pulumi.StringInput
	// Required. The user-assigned display name of the Workload. When present it must be between 4 to 30 characters. Allowed characters are: lowercase and uppercase letters, numbers, hyphen, and spaces. Example: My Workload
	DisplayName pulumi.StringInput
	// Optional. Indicates the sovereignty status of the given workload. Currently meant to be used by Europe/Canada customers.
	EnableSovereignControls pulumi.BoolPtrInput
	// **DEPRECATED** Input only. Settings used to create a CMEK crypto key. When set, a project with a KMS CMEK key is provisioned. This field is deprecated as of Feb 28, 2022. In order to create a Keyring, callers should specify, ENCRYPTION_KEYS_PROJECT or KEYRING in ResourceSettings.resource_type field.
	KmsSettings WorkloadKmsSettingsPtrInput
	// Optional. Labels applied to the workload.
	//
	// **Note**: This field is non-authoritative, and will only manage the labels present in your configuration.
	// Please refer to the field `effectiveLabels` for all of the labels present on the resource.
	Labels pulumi.StringMapInput
	// The location for the resource
	Location pulumi.StringInput
	// The organization for the resource
	//
	// ***
	Organization pulumi.StringInput
	// Optional. Partner regime associated with this workload. Possible values: PARTNER_UNSPECIFIED, LOCAL_CONTROLS_BY_S3NS, SOVEREIGN_CONTROLS_BY_T_SYSTEMS, SOVEREIGN_CONTROLS_BY_SIA_MINSAIT, SOVEREIGN_CONTROLS_BY_PSN, SOVEREIGN_CONTROLS_BY_CNTXT, SOVEREIGN_CONTROLS_BY_CNTXT_NO_EKM
	Partner pulumi.StringPtrInput
	// Optional. Permissions granted to the AW Partner SA account for the customer workload
	PartnerPermissions WorkloadPartnerPermissionsPtrInput
	// Optional. Input only. Billing account necessary for purchasing services from Sovereign Partners. This field is required for creating SIA/PSN/CNTXT partner workloads. The caller should have 'billing.resourceAssociations.create' IAM permission on this billing-account. The format of this string is billingAccounts/AAAAAA-BBBBBB-CCCCCC.
	PartnerServicesBillingAccount pulumi.StringPtrInput
	// Input only. The parent resource for the resources managed by this Assured Workload. May be either empty or a folder resource which is a child of the Workload parent. If not specified all resources are created under the parent organization. Format: folders/{folder_id}
	ProvisionedResourcesParent pulumi.StringPtrInput
	// Input only. Resource properties that are used to customize workload resources. These properties (such as custom project id) will be used to create workload resources if possible. This field is optional.
	ResourceSettings WorkloadResourceSettingArrayInput
	// Optional. Indicates whether the e-mail notification for a violation is enabled for a workload. This value will be by default True, and if not present will be considered as true. This should only be updated via updateWorkload call. Any Changes to this field during the createWorkload call will not be honored. This will always be true while creating the workload.
	ViolationNotificationsEnabled pulumi.BoolPtrInput
	// Optional. Used to specify certain options for a workload during workload creation - currently only supporting KAT Optionality for Regional Controls workloads.
	WorkloadOptions WorkloadWorkloadOptionsPtrInput
}

The set of arguments for constructing a Workload resource.

func (WorkloadArgs) ElementType

func (WorkloadArgs) ElementType() reflect.Type

type WorkloadArray

type WorkloadArray []WorkloadInput

func (WorkloadArray) ElementType

func (WorkloadArray) ElementType() reflect.Type

func (WorkloadArray) ToWorkloadArrayOutput

func (i WorkloadArray) ToWorkloadArrayOutput() WorkloadArrayOutput

func (WorkloadArray) ToWorkloadArrayOutputWithContext

func (i WorkloadArray) ToWorkloadArrayOutputWithContext(ctx context.Context) WorkloadArrayOutput

type WorkloadArrayInput

type WorkloadArrayInput interface {
	pulumi.Input

	ToWorkloadArrayOutput() WorkloadArrayOutput
	ToWorkloadArrayOutputWithContext(context.Context) WorkloadArrayOutput
}

WorkloadArrayInput is an input type that accepts WorkloadArray and WorkloadArrayOutput values. You can construct a concrete instance of `WorkloadArrayInput` via:

WorkloadArray{ WorkloadArgs{...} }

type WorkloadArrayOutput

type WorkloadArrayOutput struct{ *pulumi.OutputState }

func (WorkloadArrayOutput) ElementType

func (WorkloadArrayOutput) ElementType() reflect.Type

func (WorkloadArrayOutput) Index

func (WorkloadArrayOutput) ToWorkloadArrayOutput

func (o WorkloadArrayOutput) ToWorkloadArrayOutput() WorkloadArrayOutput

func (WorkloadArrayOutput) ToWorkloadArrayOutputWithContext

func (o WorkloadArrayOutput) ToWorkloadArrayOutputWithContext(ctx context.Context) WorkloadArrayOutput

type WorkloadComplianceStatus

type WorkloadComplianceStatus struct {
	// Number of current orgPolicy violations which are acknowledged.
	AcknowledgedViolationCounts []int `pulumi:"acknowledgedViolationCounts"`
	// Number of current orgPolicy violations which are not acknowledged.
	ActiveViolationCounts []int `pulumi:"activeViolationCounts"`
}

type WorkloadComplianceStatusArgs

type WorkloadComplianceStatusArgs struct {
	// Number of current orgPolicy violations which are acknowledged.
	AcknowledgedViolationCounts pulumi.IntArrayInput `pulumi:"acknowledgedViolationCounts"`
	// Number of current orgPolicy violations which are not acknowledged.
	ActiveViolationCounts pulumi.IntArrayInput `pulumi:"activeViolationCounts"`
}

func (WorkloadComplianceStatusArgs) ElementType

func (WorkloadComplianceStatusArgs) ToWorkloadComplianceStatusOutput

func (i WorkloadComplianceStatusArgs) ToWorkloadComplianceStatusOutput() WorkloadComplianceStatusOutput

func (WorkloadComplianceStatusArgs) ToWorkloadComplianceStatusOutputWithContext

func (i WorkloadComplianceStatusArgs) ToWorkloadComplianceStatusOutputWithContext(ctx context.Context) WorkloadComplianceStatusOutput

type WorkloadComplianceStatusArray

type WorkloadComplianceStatusArray []WorkloadComplianceStatusInput

func (WorkloadComplianceStatusArray) ElementType

func (WorkloadComplianceStatusArray) ToWorkloadComplianceStatusArrayOutput

func (i WorkloadComplianceStatusArray) ToWorkloadComplianceStatusArrayOutput() WorkloadComplianceStatusArrayOutput

func (WorkloadComplianceStatusArray) ToWorkloadComplianceStatusArrayOutputWithContext

func (i WorkloadComplianceStatusArray) ToWorkloadComplianceStatusArrayOutputWithContext(ctx context.Context) WorkloadComplianceStatusArrayOutput

type WorkloadComplianceStatusArrayInput

type WorkloadComplianceStatusArrayInput interface {
	pulumi.Input

	ToWorkloadComplianceStatusArrayOutput() WorkloadComplianceStatusArrayOutput
	ToWorkloadComplianceStatusArrayOutputWithContext(context.Context) WorkloadComplianceStatusArrayOutput
}

WorkloadComplianceStatusArrayInput is an input type that accepts WorkloadComplianceStatusArray and WorkloadComplianceStatusArrayOutput values. You can construct a concrete instance of `WorkloadComplianceStatusArrayInput` via:

WorkloadComplianceStatusArray{ WorkloadComplianceStatusArgs{...} }

type WorkloadComplianceStatusArrayOutput

type WorkloadComplianceStatusArrayOutput struct{ *pulumi.OutputState }

func (WorkloadComplianceStatusArrayOutput) ElementType

func (WorkloadComplianceStatusArrayOutput) Index

func (WorkloadComplianceStatusArrayOutput) ToWorkloadComplianceStatusArrayOutput

func (o WorkloadComplianceStatusArrayOutput) ToWorkloadComplianceStatusArrayOutput() WorkloadComplianceStatusArrayOutput

func (WorkloadComplianceStatusArrayOutput) ToWorkloadComplianceStatusArrayOutputWithContext

func (o WorkloadComplianceStatusArrayOutput) ToWorkloadComplianceStatusArrayOutputWithContext(ctx context.Context) WorkloadComplianceStatusArrayOutput

type WorkloadComplianceStatusInput

type WorkloadComplianceStatusInput interface {
	pulumi.Input

	ToWorkloadComplianceStatusOutput() WorkloadComplianceStatusOutput
	ToWorkloadComplianceStatusOutputWithContext(context.Context) WorkloadComplianceStatusOutput
}

WorkloadComplianceStatusInput is an input type that accepts WorkloadComplianceStatusArgs and WorkloadComplianceStatusOutput values. You can construct a concrete instance of `WorkloadComplianceStatusInput` via:

WorkloadComplianceStatusArgs{...}

type WorkloadComplianceStatusOutput

type WorkloadComplianceStatusOutput struct{ *pulumi.OutputState }

func (WorkloadComplianceStatusOutput) AcknowledgedViolationCounts

func (o WorkloadComplianceStatusOutput) AcknowledgedViolationCounts() pulumi.IntArrayOutput

Number of current orgPolicy violations which are acknowledged.

func (WorkloadComplianceStatusOutput) ActiveViolationCounts

func (o WorkloadComplianceStatusOutput) ActiveViolationCounts() pulumi.IntArrayOutput

Number of current orgPolicy violations which are not acknowledged.

func (WorkloadComplianceStatusOutput) ElementType

func (WorkloadComplianceStatusOutput) ToWorkloadComplianceStatusOutput

func (o WorkloadComplianceStatusOutput) ToWorkloadComplianceStatusOutput() WorkloadComplianceStatusOutput

func (WorkloadComplianceStatusOutput) ToWorkloadComplianceStatusOutputWithContext

func (o WorkloadComplianceStatusOutput) ToWorkloadComplianceStatusOutputWithContext(ctx context.Context) WorkloadComplianceStatusOutput

type WorkloadEkmProvisioningResponse

type WorkloadEkmProvisioningResponse struct {
	// Indicates Ekm provisioning error if any. Possible values: EKM_PROVISIONING_ERROR_DOMAIN_UNSPECIFIED, UNSPECIFIED_ERROR, GOOGLE_SERVER_ERROR, EXTERNAL_USER_ERROR, EXTERNAL_PARTNER_ERROR, TIMEOUT_ERROR
	EkmProvisioningErrorDomain *string `pulumi:"ekmProvisioningErrorDomain"`
	// Detailed error message if Ekm provisioning fails Possible values: EKM_PROVISIONING_ERROR_MAPPING_UNSPECIFIED, INVALID_SERVICE_ACCOUNT, MISSING_METRICS_SCOPE_ADMIN_PERMISSION, MISSING_EKM_CONNECTION_ADMIN_PERMISSION
	EkmProvisioningErrorMapping *string `pulumi:"ekmProvisioningErrorMapping"`
	// Indicates Ekm enrollment Provisioning of a given workload. Possible values: EKM_PROVISIONING_STATE_UNSPECIFIED, EKM_PROVISIONING_STATE_PENDING, EKM_PROVISIONING_STATE_FAILED, EKM_PROVISIONING_STATE_COMPLETED
	EkmProvisioningState *string `pulumi:"ekmProvisioningState"`
}

type WorkloadEkmProvisioningResponseArgs

type WorkloadEkmProvisioningResponseArgs struct {
	// Indicates Ekm provisioning error if any. Possible values: EKM_PROVISIONING_ERROR_DOMAIN_UNSPECIFIED, UNSPECIFIED_ERROR, GOOGLE_SERVER_ERROR, EXTERNAL_USER_ERROR, EXTERNAL_PARTNER_ERROR, TIMEOUT_ERROR
	EkmProvisioningErrorDomain pulumi.StringPtrInput `pulumi:"ekmProvisioningErrorDomain"`
	// Detailed error message if Ekm provisioning fails Possible values: EKM_PROVISIONING_ERROR_MAPPING_UNSPECIFIED, INVALID_SERVICE_ACCOUNT, MISSING_METRICS_SCOPE_ADMIN_PERMISSION, MISSING_EKM_CONNECTION_ADMIN_PERMISSION
	EkmProvisioningErrorMapping pulumi.StringPtrInput `pulumi:"ekmProvisioningErrorMapping"`
	// Indicates Ekm enrollment Provisioning of a given workload. Possible values: EKM_PROVISIONING_STATE_UNSPECIFIED, EKM_PROVISIONING_STATE_PENDING, EKM_PROVISIONING_STATE_FAILED, EKM_PROVISIONING_STATE_COMPLETED
	EkmProvisioningState pulumi.StringPtrInput `pulumi:"ekmProvisioningState"`
}

func (WorkloadEkmProvisioningResponseArgs) ElementType

func (WorkloadEkmProvisioningResponseArgs) ToWorkloadEkmProvisioningResponseOutput

func (i WorkloadEkmProvisioningResponseArgs) ToWorkloadEkmProvisioningResponseOutput() WorkloadEkmProvisioningResponseOutput

func (WorkloadEkmProvisioningResponseArgs) ToWorkloadEkmProvisioningResponseOutputWithContext

func (i WorkloadEkmProvisioningResponseArgs) ToWorkloadEkmProvisioningResponseOutputWithContext(ctx context.Context) WorkloadEkmProvisioningResponseOutput

type WorkloadEkmProvisioningResponseArray

type WorkloadEkmProvisioningResponseArray []WorkloadEkmProvisioningResponseInput

func (WorkloadEkmProvisioningResponseArray) ElementType

func (WorkloadEkmProvisioningResponseArray) ToWorkloadEkmProvisioningResponseArrayOutput

func (i WorkloadEkmProvisioningResponseArray) ToWorkloadEkmProvisioningResponseArrayOutput() WorkloadEkmProvisioningResponseArrayOutput

func (WorkloadEkmProvisioningResponseArray) ToWorkloadEkmProvisioningResponseArrayOutputWithContext

func (i WorkloadEkmProvisioningResponseArray) ToWorkloadEkmProvisioningResponseArrayOutputWithContext(ctx context.Context) WorkloadEkmProvisioningResponseArrayOutput

type WorkloadEkmProvisioningResponseArrayInput

type WorkloadEkmProvisioningResponseArrayInput interface {
	pulumi.Input

	ToWorkloadEkmProvisioningResponseArrayOutput() WorkloadEkmProvisioningResponseArrayOutput
	ToWorkloadEkmProvisioningResponseArrayOutputWithContext(context.Context) WorkloadEkmProvisioningResponseArrayOutput
}

WorkloadEkmProvisioningResponseArrayInput is an input type that accepts WorkloadEkmProvisioningResponseArray and WorkloadEkmProvisioningResponseArrayOutput values. You can construct a concrete instance of `WorkloadEkmProvisioningResponseArrayInput` via:

WorkloadEkmProvisioningResponseArray{ WorkloadEkmProvisioningResponseArgs{...} }

type WorkloadEkmProvisioningResponseArrayOutput

type WorkloadEkmProvisioningResponseArrayOutput struct{ *pulumi.OutputState }

func (WorkloadEkmProvisioningResponseArrayOutput) ElementType

func (WorkloadEkmProvisioningResponseArrayOutput) Index

func (WorkloadEkmProvisioningResponseArrayOutput) ToWorkloadEkmProvisioningResponseArrayOutput

func (o WorkloadEkmProvisioningResponseArrayOutput) ToWorkloadEkmProvisioningResponseArrayOutput() WorkloadEkmProvisioningResponseArrayOutput

func (WorkloadEkmProvisioningResponseArrayOutput) ToWorkloadEkmProvisioningResponseArrayOutputWithContext

func (o WorkloadEkmProvisioningResponseArrayOutput) ToWorkloadEkmProvisioningResponseArrayOutputWithContext(ctx context.Context) WorkloadEkmProvisioningResponseArrayOutput

type WorkloadEkmProvisioningResponseInput

type WorkloadEkmProvisioningResponseInput interface {
	pulumi.Input

	ToWorkloadEkmProvisioningResponseOutput() WorkloadEkmProvisioningResponseOutput
	ToWorkloadEkmProvisioningResponseOutputWithContext(context.Context) WorkloadEkmProvisioningResponseOutput
}

WorkloadEkmProvisioningResponseInput is an input type that accepts WorkloadEkmProvisioningResponseArgs and WorkloadEkmProvisioningResponseOutput values. You can construct a concrete instance of `WorkloadEkmProvisioningResponseInput` via:

WorkloadEkmProvisioningResponseArgs{...}

type WorkloadEkmProvisioningResponseOutput

type WorkloadEkmProvisioningResponseOutput struct{ *pulumi.OutputState }

func (WorkloadEkmProvisioningResponseOutput) EkmProvisioningErrorDomain

func (o WorkloadEkmProvisioningResponseOutput) EkmProvisioningErrorDomain() pulumi.StringPtrOutput

Indicates Ekm provisioning error if any. Possible values: EKM_PROVISIONING_ERROR_DOMAIN_UNSPECIFIED, UNSPECIFIED_ERROR, GOOGLE_SERVER_ERROR, EXTERNAL_USER_ERROR, EXTERNAL_PARTNER_ERROR, TIMEOUT_ERROR

func (WorkloadEkmProvisioningResponseOutput) EkmProvisioningErrorMapping

func (o WorkloadEkmProvisioningResponseOutput) EkmProvisioningErrorMapping() pulumi.StringPtrOutput

Detailed error message if Ekm provisioning fails Possible values: EKM_PROVISIONING_ERROR_MAPPING_UNSPECIFIED, INVALID_SERVICE_ACCOUNT, MISSING_METRICS_SCOPE_ADMIN_PERMISSION, MISSING_EKM_CONNECTION_ADMIN_PERMISSION

func (WorkloadEkmProvisioningResponseOutput) EkmProvisioningState

Indicates Ekm enrollment Provisioning of a given workload. Possible values: EKM_PROVISIONING_STATE_UNSPECIFIED, EKM_PROVISIONING_STATE_PENDING, EKM_PROVISIONING_STATE_FAILED, EKM_PROVISIONING_STATE_COMPLETED

func (WorkloadEkmProvisioningResponseOutput) ElementType

func (WorkloadEkmProvisioningResponseOutput) ToWorkloadEkmProvisioningResponseOutput

func (o WorkloadEkmProvisioningResponseOutput) ToWorkloadEkmProvisioningResponseOutput() WorkloadEkmProvisioningResponseOutput

func (WorkloadEkmProvisioningResponseOutput) ToWorkloadEkmProvisioningResponseOutputWithContext

func (o WorkloadEkmProvisioningResponseOutput) ToWorkloadEkmProvisioningResponseOutputWithContext(ctx context.Context) WorkloadEkmProvisioningResponseOutput

type WorkloadInput

type WorkloadInput interface {
	pulumi.Input

	ToWorkloadOutput() WorkloadOutput
	ToWorkloadOutputWithContext(ctx context.Context) WorkloadOutput
}

type WorkloadKmsSettings

type WorkloadKmsSettings struct {
	// Required. Input only. Immutable. The time at which the Key Management Service will automatically create a new version of the crypto key and mark it as the primary.
	NextRotationTime string `pulumi:"nextRotationTime"`
	// Required. Input only. Immutable. will be advanced by this period when the Key Management Service automatically rotates a key. Must be at least 24 hours and at most 876,000 hours.
	RotationPeriod string `pulumi:"rotationPeriod"`
}

type WorkloadKmsSettingsArgs

type WorkloadKmsSettingsArgs struct {
	// Required. Input only. Immutable. The time at which the Key Management Service will automatically create a new version of the crypto key and mark it as the primary.
	NextRotationTime pulumi.StringInput `pulumi:"nextRotationTime"`
	// Required. Input only. Immutable. will be advanced by this period when the Key Management Service automatically rotates a key. Must be at least 24 hours and at most 876,000 hours.
	RotationPeriod pulumi.StringInput `pulumi:"rotationPeriod"`
}

func (WorkloadKmsSettingsArgs) ElementType

func (WorkloadKmsSettingsArgs) ElementType() reflect.Type

func (WorkloadKmsSettingsArgs) ToWorkloadKmsSettingsOutput

func (i WorkloadKmsSettingsArgs) ToWorkloadKmsSettingsOutput() WorkloadKmsSettingsOutput

func (WorkloadKmsSettingsArgs) ToWorkloadKmsSettingsOutputWithContext

func (i WorkloadKmsSettingsArgs) ToWorkloadKmsSettingsOutputWithContext(ctx context.Context) WorkloadKmsSettingsOutput

func (WorkloadKmsSettingsArgs) ToWorkloadKmsSettingsPtrOutput

func (i WorkloadKmsSettingsArgs) ToWorkloadKmsSettingsPtrOutput() WorkloadKmsSettingsPtrOutput

func (WorkloadKmsSettingsArgs) ToWorkloadKmsSettingsPtrOutputWithContext

func (i WorkloadKmsSettingsArgs) ToWorkloadKmsSettingsPtrOutputWithContext(ctx context.Context) WorkloadKmsSettingsPtrOutput

type WorkloadKmsSettingsInput

type WorkloadKmsSettingsInput interface {
	pulumi.Input

	ToWorkloadKmsSettingsOutput() WorkloadKmsSettingsOutput
	ToWorkloadKmsSettingsOutputWithContext(context.Context) WorkloadKmsSettingsOutput
}

WorkloadKmsSettingsInput is an input type that accepts WorkloadKmsSettingsArgs and WorkloadKmsSettingsOutput values. You can construct a concrete instance of `WorkloadKmsSettingsInput` via:

WorkloadKmsSettingsArgs{...}

type WorkloadKmsSettingsOutput

type WorkloadKmsSettingsOutput struct{ *pulumi.OutputState }

func (WorkloadKmsSettingsOutput) ElementType

func (WorkloadKmsSettingsOutput) ElementType() reflect.Type

func (WorkloadKmsSettingsOutput) NextRotationTime

func (o WorkloadKmsSettingsOutput) NextRotationTime() pulumi.StringOutput

Required. Input only. Immutable. The time at which the Key Management Service will automatically create a new version of the crypto key and mark it as the primary.

func (WorkloadKmsSettingsOutput) RotationPeriod

func (o WorkloadKmsSettingsOutput) RotationPeriod() pulumi.StringOutput

Required. Input only. Immutable. will be advanced by this period when the Key Management Service automatically rotates a key. Must be at least 24 hours and at most 876,000 hours.

func (WorkloadKmsSettingsOutput) ToWorkloadKmsSettingsOutput

func (o WorkloadKmsSettingsOutput) ToWorkloadKmsSettingsOutput() WorkloadKmsSettingsOutput

func (WorkloadKmsSettingsOutput) ToWorkloadKmsSettingsOutputWithContext

func (o WorkloadKmsSettingsOutput) ToWorkloadKmsSettingsOutputWithContext(ctx context.Context) WorkloadKmsSettingsOutput

func (WorkloadKmsSettingsOutput) ToWorkloadKmsSettingsPtrOutput

func (o WorkloadKmsSettingsOutput) ToWorkloadKmsSettingsPtrOutput() WorkloadKmsSettingsPtrOutput

func (WorkloadKmsSettingsOutput) ToWorkloadKmsSettingsPtrOutputWithContext

func (o WorkloadKmsSettingsOutput) ToWorkloadKmsSettingsPtrOutputWithContext(ctx context.Context) WorkloadKmsSettingsPtrOutput

type WorkloadKmsSettingsPtrInput

type WorkloadKmsSettingsPtrInput interface {
	pulumi.Input

	ToWorkloadKmsSettingsPtrOutput() WorkloadKmsSettingsPtrOutput
	ToWorkloadKmsSettingsPtrOutputWithContext(context.Context) WorkloadKmsSettingsPtrOutput
}

WorkloadKmsSettingsPtrInput is an input type that accepts WorkloadKmsSettingsArgs, WorkloadKmsSettingsPtr and WorkloadKmsSettingsPtrOutput values. You can construct a concrete instance of `WorkloadKmsSettingsPtrInput` via:

        WorkloadKmsSettingsArgs{...}

or:

        nil

type WorkloadKmsSettingsPtrOutput

type WorkloadKmsSettingsPtrOutput struct{ *pulumi.OutputState }

func (WorkloadKmsSettingsPtrOutput) Elem

func (WorkloadKmsSettingsPtrOutput) ElementType

func (WorkloadKmsSettingsPtrOutput) NextRotationTime

Required. Input only. Immutable. The time at which the Key Management Service will automatically create a new version of the crypto key and mark it as the primary.

func (WorkloadKmsSettingsPtrOutput) RotationPeriod

Required. Input only. Immutable. will be advanced by this period when the Key Management Service automatically rotates a key. Must be at least 24 hours and at most 876,000 hours.

func (WorkloadKmsSettingsPtrOutput) ToWorkloadKmsSettingsPtrOutput

func (o WorkloadKmsSettingsPtrOutput) ToWorkloadKmsSettingsPtrOutput() WorkloadKmsSettingsPtrOutput

func (WorkloadKmsSettingsPtrOutput) ToWorkloadKmsSettingsPtrOutputWithContext

func (o WorkloadKmsSettingsPtrOutput) ToWorkloadKmsSettingsPtrOutputWithContext(ctx context.Context) WorkloadKmsSettingsPtrOutput

type WorkloadMap

type WorkloadMap map[string]WorkloadInput

func (WorkloadMap) ElementType

func (WorkloadMap) ElementType() reflect.Type

func (WorkloadMap) ToWorkloadMapOutput

func (i WorkloadMap) ToWorkloadMapOutput() WorkloadMapOutput

func (WorkloadMap) ToWorkloadMapOutputWithContext

func (i WorkloadMap) ToWorkloadMapOutputWithContext(ctx context.Context) WorkloadMapOutput

type WorkloadMapInput

type WorkloadMapInput interface {
	pulumi.Input

	ToWorkloadMapOutput() WorkloadMapOutput
	ToWorkloadMapOutputWithContext(context.Context) WorkloadMapOutput
}

WorkloadMapInput is an input type that accepts WorkloadMap and WorkloadMapOutput values. You can construct a concrete instance of `WorkloadMapInput` via:

WorkloadMap{ "key": WorkloadArgs{...} }

type WorkloadMapOutput

type WorkloadMapOutput struct{ *pulumi.OutputState }

func (WorkloadMapOutput) ElementType

func (WorkloadMapOutput) ElementType() reflect.Type

func (WorkloadMapOutput) MapIndex

func (WorkloadMapOutput) ToWorkloadMapOutput

func (o WorkloadMapOutput) ToWorkloadMapOutput() WorkloadMapOutput

func (WorkloadMapOutput) ToWorkloadMapOutputWithContext

func (o WorkloadMapOutput) ToWorkloadMapOutputWithContext(ctx context.Context) WorkloadMapOutput

type WorkloadOutput

type WorkloadOutput struct{ *pulumi.OutputState }

func (WorkloadOutput) BillingAccount

func (o WorkloadOutput) BillingAccount() pulumi.StringPtrOutput

Optional. Input only. The billing account used for the resources which are direct children of workload. This billing account is initially associated with the resources created as part of Workload creation. After the initial creation of these resources, the customer can change the assigned billing account. The resource name has the form `billingAccounts/{billing_account_id}`. For example, `billingAccounts/012345-567890-ABCDEF`.

func (WorkloadOutput) ComplianceRegime

func (o WorkloadOutput) ComplianceRegime() pulumi.StringOutput

Required. Immutable. Compliance Regime associated with this workload. Possible values: COMPLIANCE_REGIME_UNSPECIFIED, IL4, CJIS, FEDRAMP_HIGH, FEDRAMP_MODERATE, US_REGIONAL_ACCESS, HIPAA, HITRUST, EU_REGIONS_AND_SUPPORT, CA_REGIONS_AND_SUPPORT, ITAR, AU_REGIONS_AND_US_SUPPORT, ASSURED_WORKLOADS_FOR_PARTNERS, ISR_REGIONS, ISR_REGIONS_AND_SUPPORT, CA_PROTECTED_B, IL5, IL2, JP_REGIONS_AND_SUPPORT, KSA_REGIONS_AND_SUPPORT_WITH_SOVEREIGNTY_CONTROLS, REGIONAL_CONTROLS, HEALTHCARE_AND_LIFE_SCIENCES_CONTROLS, HEALTHCARE_AND_LIFE_SCIENCES_CONTROLS_WITH_US_SUPPORT, IRS_1075

func (WorkloadOutput) ComplianceStatuses

func (o WorkloadOutput) ComplianceStatuses() WorkloadComplianceStatusArrayOutput

Output only. Count of active Violations in the Workload.

func (WorkloadOutput) CompliantButDisallowedServices

func (o WorkloadOutput) CompliantButDisallowedServices() pulumi.StringArrayOutput

Output only. Urls for services which are compliant for this Assured Workload, but which are currently disallowed by the ResourceUsageRestriction org policy. Invoke workloads.restrictAllowedResources endpoint to allow your project developers to use these services in their environment.

func (WorkloadOutput) CreateTime

func (o WorkloadOutput) CreateTime() pulumi.StringOutput

Output only. Immutable. The Workload creation timestamp.

func (WorkloadOutput) DisplayName

func (o WorkloadOutput) DisplayName() pulumi.StringOutput

Required. The user-assigned display name of the Workload. When present it must be between 4 to 30 characters. Allowed characters are: lowercase and uppercase letters, numbers, hyphen, and spaces. Example: My Workload

func (WorkloadOutput) EffectiveLabels

func (o WorkloadOutput) EffectiveLabels() pulumi.StringMapOutput

All of labels (key/value pairs) present on the resource in GCP, including the labels configured through Pulumi, other clients and services.

func (WorkloadOutput) EkmProvisioningResponses

func (o WorkloadOutput) EkmProvisioningResponses() WorkloadEkmProvisioningResponseArrayOutput

Optional. Represents the Ekm Provisioning State of the given workload.

func (WorkloadOutput) ElementType

func (WorkloadOutput) ElementType() reflect.Type

func (WorkloadOutput) EnableSovereignControls

func (o WorkloadOutput) EnableSovereignControls() pulumi.BoolOutput

Optional. Indicates the sovereignty status of the given workload. Currently meant to be used by Europe/Canada customers.

func (WorkloadOutput) KajEnrollmentState

func (o WorkloadOutput) KajEnrollmentState() pulumi.StringOutput

Output only. Represents the KAJ enrollment state of the given workload. Possible values: KAJ_ENROLLMENT_STATE_UNSPECIFIED, KAJ_ENROLLMENT_STATE_PENDING, KAJ_ENROLLMENT_STATE_COMPLETE

func (WorkloadOutput) KmsSettings

**DEPRECATED** Input only. Settings used to create a CMEK crypto key. When set, a project with a KMS CMEK key is provisioned. This field is deprecated as of Feb 28, 2022. In order to create a Keyring, callers should specify, ENCRYPTION_KEYS_PROJECT or KEYRING in ResourceSettings.resource_type field.

func (WorkloadOutput) Labels

Optional. Labels applied to the workload.

**Note**: This field is non-authoritative, and will only manage the labels present in your configuration. Please refer to the field `effectiveLabels` for all of the labels present on the resource.

func (WorkloadOutput) Location

func (o WorkloadOutput) Location() pulumi.StringOutput

The location for the resource

func (WorkloadOutput) Name

Output only. The resource name of the workload.

func (WorkloadOutput) Organization

func (o WorkloadOutput) Organization() pulumi.StringOutput

The organization for the resource

***

func (WorkloadOutput) Partner

Optional. Partner regime associated with this workload. Possible values: PARTNER_UNSPECIFIED, LOCAL_CONTROLS_BY_S3NS, SOVEREIGN_CONTROLS_BY_T_SYSTEMS, SOVEREIGN_CONTROLS_BY_SIA_MINSAIT, SOVEREIGN_CONTROLS_BY_PSN, SOVEREIGN_CONTROLS_BY_CNTXT, SOVEREIGN_CONTROLS_BY_CNTXT_NO_EKM

func (WorkloadOutput) PartnerPermissions

func (o WorkloadOutput) PartnerPermissions() WorkloadPartnerPermissionsPtrOutput

Optional. Permissions granted to the AW Partner SA account for the customer workload

func (WorkloadOutput) PartnerServicesBillingAccount added in v8.1.0

func (o WorkloadOutput) PartnerServicesBillingAccount() pulumi.StringPtrOutput

Optional. Input only. Billing account necessary for purchasing services from Sovereign Partners. This field is required for creating SIA/PSN/CNTXT partner workloads. The caller should have 'billing.resourceAssociations.create' IAM permission on this billing-account. The format of this string is billingAccounts/AAAAAA-BBBBBB-CCCCCC.

func (WorkloadOutput) ProvisionedResourcesParent

func (o WorkloadOutput) ProvisionedResourcesParent() pulumi.StringPtrOutput

Input only. The parent resource for the resources managed by this Assured Workload. May be either empty or a folder resource which is a child of the Workload parent. If not specified all resources are created under the parent organization. Format: folders/{folder_id}

func (WorkloadOutput) PulumiLabels

func (o WorkloadOutput) PulumiLabels() pulumi.StringMapOutput

The combination of labels configured directly on the resource and default labels configured on the provider.

func (WorkloadOutput) ResourceSettings

Input only. Resource properties that are used to customize workload resources. These properties (such as custom project id) will be used to create workload resources if possible. This field is optional.

func (WorkloadOutput) Resources

Output only. The resources associated with this workload. These resources will be created when creating the workload. If any of the projects already exist, the workload creation will fail. Always read only.

func (WorkloadOutput) SaaEnrollmentResponses

func (o WorkloadOutput) SaaEnrollmentResponses() WorkloadSaaEnrollmentResponseArrayOutput

Output only. Represents the SAA enrollment response of the given workload. SAA enrollment response is queried during workloads.get call. In failure cases, user friendly error message is shown in SAA details page.

func (WorkloadOutput) ToWorkloadOutput

func (o WorkloadOutput) ToWorkloadOutput() WorkloadOutput

func (WorkloadOutput) ToWorkloadOutputWithContext

func (o WorkloadOutput) ToWorkloadOutputWithContext(ctx context.Context) WorkloadOutput

func (WorkloadOutput) ViolationNotificationsEnabled

func (o WorkloadOutput) ViolationNotificationsEnabled() pulumi.BoolOutput

Optional. Indicates whether the e-mail notification for a violation is enabled for a workload. This value will be by default True, and if not present will be considered as true. This should only be updated via updateWorkload call. Any Changes to this field during the createWorkload call will not be honored. This will always be true while creating the workload.

func (WorkloadOutput) WorkloadOptions added in v8.8.0

Optional. Used to specify certain options for a workload during workload creation - currently only supporting KAT Optionality for Regional Controls workloads.

type WorkloadPartnerPermissions

type WorkloadPartnerPermissions struct {
	// Optional. Allow partner to view violation alerts.
	AssuredWorkloadsMonitoring *bool `pulumi:"assuredWorkloadsMonitoring"`
	// Allow the partner to view inspectability logs and monitoring violations.
	DataLogsViewer *bool `pulumi:"dataLogsViewer"`
	// Optional. Allow partner to view access approval logs.
	ServiceAccessApprover *bool `pulumi:"serviceAccessApprover"`
}

type WorkloadPartnerPermissionsArgs

type WorkloadPartnerPermissionsArgs struct {
	// Optional. Allow partner to view violation alerts.
	AssuredWorkloadsMonitoring pulumi.BoolPtrInput `pulumi:"assuredWorkloadsMonitoring"`
	// Allow the partner to view inspectability logs and monitoring violations.
	DataLogsViewer pulumi.BoolPtrInput `pulumi:"dataLogsViewer"`
	// Optional. Allow partner to view access approval logs.
	ServiceAccessApprover pulumi.BoolPtrInput `pulumi:"serviceAccessApprover"`
}

func (WorkloadPartnerPermissionsArgs) ElementType

func (WorkloadPartnerPermissionsArgs) ToWorkloadPartnerPermissionsOutput

func (i WorkloadPartnerPermissionsArgs) ToWorkloadPartnerPermissionsOutput() WorkloadPartnerPermissionsOutput

func (WorkloadPartnerPermissionsArgs) ToWorkloadPartnerPermissionsOutputWithContext

func (i WorkloadPartnerPermissionsArgs) ToWorkloadPartnerPermissionsOutputWithContext(ctx context.Context) WorkloadPartnerPermissionsOutput

func (WorkloadPartnerPermissionsArgs) ToWorkloadPartnerPermissionsPtrOutput

func (i WorkloadPartnerPermissionsArgs) ToWorkloadPartnerPermissionsPtrOutput() WorkloadPartnerPermissionsPtrOutput

func (WorkloadPartnerPermissionsArgs) ToWorkloadPartnerPermissionsPtrOutputWithContext

func (i WorkloadPartnerPermissionsArgs) ToWorkloadPartnerPermissionsPtrOutputWithContext(ctx context.Context) WorkloadPartnerPermissionsPtrOutput

type WorkloadPartnerPermissionsInput

type WorkloadPartnerPermissionsInput interface {
	pulumi.Input

	ToWorkloadPartnerPermissionsOutput() WorkloadPartnerPermissionsOutput
	ToWorkloadPartnerPermissionsOutputWithContext(context.Context) WorkloadPartnerPermissionsOutput
}

WorkloadPartnerPermissionsInput is an input type that accepts WorkloadPartnerPermissionsArgs and WorkloadPartnerPermissionsOutput values. You can construct a concrete instance of `WorkloadPartnerPermissionsInput` via:

WorkloadPartnerPermissionsArgs{...}

type WorkloadPartnerPermissionsOutput

type WorkloadPartnerPermissionsOutput struct{ *pulumi.OutputState }

func (WorkloadPartnerPermissionsOutput) AssuredWorkloadsMonitoring

func (o WorkloadPartnerPermissionsOutput) AssuredWorkloadsMonitoring() pulumi.BoolPtrOutput

Optional. Allow partner to view violation alerts.

func (WorkloadPartnerPermissionsOutput) DataLogsViewer

Allow the partner to view inspectability logs and monitoring violations.

func (WorkloadPartnerPermissionsOutput) ElementType

func (WorkloadPartnerPermissionsOutput) ServiceAccessApprover

func (o WorkloadPartnerPermissionsOutput) ServiceAccessApprover() pulumi.BoolPtrOutput

Optional. Allow partner to view access approval logs.

func (WorkloadPartnerPermissionsOutput) ToWorkloadPartnerPermissionsOutput

func (o WorkloadPartnerPermissionsOutput) ToWorkloadPartnerPermissionsOutput() WorkloadPartnerPermissionsOutput

func (WorkloadPartnerPermissionsOutput) ToWorkloadPartnerPermissionsOutputWithContext

func (o WorkloadPartnerPermissionsOutput) ToWorkloadPartnerPermissionsOutputWithContext(ctx context.Context) WorkloadPartnerPermissionsOutput

func (WorkloadPartnerPermissionsOutput) ToWorkloadPartnerPermissionsPtrOutput

func (o WorkloadPartnerPermissionsOutput) ToWorkloadPartnerPermissionsPtrOutput() WorkloadPartnerPermissionsPtrOutput

func (WorkloadPartnerPermissionsOutput) ToWorkloadPartnerPermissionsPtrOutputWithContext

func (o WorkloadPartnerPermissionsOutput) ToWorkloadPartnerPermissionsPtrOutputWithContext(ctx context.Context) WorkloadPartnerPermissionsPtrOutput

type WorkloadPartnerPermissionsPtrInput

type WorkloadPartnerPermissionsPtrInput interface {
	pulumi.Input

	ToWorkloadPartnerPermissionsPtrOutput() WorkloadPartnerPermissionsPtrOutput
	ToWorkloadPartnerPermissionsPtrOutputWithContext(context.Context) WorkloadPartnerPermissionsPtrOutput
}

WorkloadPartnerPermissionsPtrInput is an input type that accepts WorkloadPartnerPermissionsArgs, WorkloadPartnerPermissionsPtr and WorkloadPartnerPermissionsPtrOutput values. You can construct a concrete instance of `WorkloadPartnerPermissionsPtrInput` via:

        WorkloadPartnerPermissionsArgs{...}

or:

        nil

type WorkloadPartnerPermissionsPtrOutput

type WorkloadPartnerPermissionsPtrOutput struct{ *pulumi.OutputState }

func (WorkloadPartnerPermissionsPtrOutput) AssuredWorkloadsMonitoring

func (o WorkloadPartnerPermissionsPtrOutput) AssuredWorkloadsMonitoring() pulumi.BoolPtrOutput

Optional. Allow partner to view violation alerts.

func (WorkloadPartnerPermissionsPtrOutput) DataLogsViewer

Allow the partner to view inspectability logs and monitoring violations.

func (WorkloadPartnerPermissionsPtrOutput) Elem

func (WorkloadPartnerPermissionsPtrOutput) ElementType

func (WorkloadPartnerPermissionsPtrOutput) ServiceAccessApprover

func (o WorkloadPartnerPermissionsPtrOutput) ServiceAccessApprover() pulumi.BoolPtrOutput

Optional. Allow partner to view access approval logs.

func (WorkloadPartnerPermissionsPtrOutput) ToWorkloadPartnerPermissionsPtrOutput

func (o WorkloadPartnerPermissionsPtrOutput) ToWorkloadPartnerPermissionsPtrOutput() WorkloadPartnerPermissionsPtrOutput

func (WorkloadPartnerPermissionsPtrOutput) ToWorkloadPartnerPermissionsPtrOutputWithContext

func (o WorkloadPartnerPermissionsPtrOutput) ToWorkloadPartnerPermissionsPtrOutputWithContext(ctx context.Context) WorkloadPartnerPermissionsPtrOutput

type WorkloadResource

type WorkloadResource struct {
	// Resource identifier. For a project this represents project_number.
	ResourceId *int `pulumi:"resourceId"`
	// Indicates the type of resource. Possible values: RESOURCE_TYPE_UNSPECIFIED, CONSUMER_PROJECT, ENCRYPTION_KEYS_PROJECT, KEYRING, CONSUMER_FOLDER
	ResourceType *string `pulumi:"resourceType"`
}

type WorkloadResourceArgs

type WorkloadResourceArgs struct {
	// Resource identifier. For a project this represents project_number.
	ResourceId pulumi.IntPtrInput `pulumi:"resourceId"`
	// Indicates the type of resource. Possible values: RESOURCE_TYPE_UNSPECIFIED, CONSUMER_PROJECT, ENCRYPTION_KEYS_PROJECT, KEYRING, CONSUMER_FOLDER
	ResourceType pulumi.StringPtrInput `pulumi:"resourceType"`
}

func (WorkloadResourceArgs) ElementType

func (WorkloadResourceArgs) ElementType() reflect.Type

func (WorkloadResourceArgs) ToWorkloadResourceOutput

func (i WorkloadResourceArgs) ToWorkloadResourceOutput() WorkloadResourceOutput

func (WorkloadResourceArgs) ToWorkloadResourceOutputWithContext

func (i WorkloadResourceArgs) ToWorkloadResourceOutputWithContext(ctx context.Context) WorkloadResourceOutput

type WorkloadResourceArray

type WorkloadResourceArray []WorkloadResourceInput

func (WorkloadResourceArray) ElementType

func (WorkloadResourceArray) ElementType() reflect.Type

func (WorkloadResourceArray) ToWorkloadResourceArrayOutput

func (i WorkloadResourceArray) ToWorkloadResourceArrayOutput() WorkloadResourceArrayOutput

func (WorkloadResourceArray) ToWorkloadResourceArrayOutputWithContext

func (i WorkloadResourceArray) ToWorkloadResourceArrayOutputWithContext(ctx context.Context) WorkloadResourceArrayOutput

type WorkloadResourceArrayInput

type WorkloadResourceArrayInput interface {
	pulumi.Input

	ToWorkloadResourceArrayOutput() WorkloadResourceArrayOutput
	ToWorkloadResourceArrayOutputWithContext(context.Context) WorkloadResourceArrayOutput
}

WorkloadResourceArrayInput is an input type that accepts WorkloadResourceArray and WorkloadResourceArrayOutput values. You can construct a concrete instance of `WorkloadResourceArrayInput` via:

WorkloadResourceArray{ WorkloadResourceArgs{...} }

type WorkloadResourceArrayOutput

type WorkloadResourceArrayOutput struct{ *pulumi.OutputState }

func (WorkloadResourceArrayOutput) ElementType

func (WorkloadResourceArrayOutput) Index

func (WorkloadResourceArrayOutput) ToWorkloadResourceArrayOutput

func (o WorkloadResourceArrayOutput) ToWorkloadResourceArrayOutput() WorkloadResourceArrayOutput

func (WorkloadResourceArrayOutput) ToWorkloadResourceArrayOutputWithContext

func (o WorkloadResourceArrayOutput) ToWorkloadResourceArrayOutputWithContext(ctx context.Context) WorkloadResourceArrayOutput

type WorkloadResourceInput

type WorkloadResourceInput interface {
	pulumi.Input

	ToWorkloadResourceOutput() WorkloadResourceOutput
	ToWorkloadResourceOutputWithContext(context.Context) WorkloadResourceOutput
}

WorkloadResourceInput is an input type that accepts WorkloadResourceArgs and WorkloadResourceOutput values. You can construct a concrete instance of `WorkloadResourceInput` via:

WorkloadResourceArgs{...}

type WorkloadResourceOutput

type WorkloadResourceOutput struct{ *pulumi.OutputState }

func (WorkloadResourceOutput) ElementType

func (WorkloadResourceOutput) ElementType() reflect.Type

func (WorkloadResourceOutput) ResourceId

Resource identifier. For a project this represents project_number.

func (WorkloadResourceOutput) ResourceType

Indicates the type of resource. Possible values: RESOURCE_TYPE_UNSPECIFIED, CONSUMER_PROJECT, ENCRYPTION_KEYS_PROJECT, KEYRING, CONSUMER_FOLDER

func (WorkloadResourceOutput) ToWorkloadResourceOutput

func (o WorkloadResourceOutput) ToWorkloadResourceOutput() WorkloadResourceOutput

func (WorkloadResourceOutput) ToWorkloadResourceOutputWithContext

func (o WorkloadResourceOutput) ToWorkloadResourceOutputWithContext(ctx context.Context) WorkloadResourceOutput

type WorkloadResourceSetting

type WorkloadResourceSetting struct {
	// User-assigned resource display name. If not empty it will be used to create a resource with the specified name.
	DisplayName *string `pulumi:"displayName"`
	// Resource identifier. For a project this represents projectId. If the project is already taken, the workload creation will fail. For KeyRing, this represents the keyring_id. For a folder, don't set this value as folderId is assigned by Google.
	ResourceId *string `pulumi:"resourceId"`
	// Indicates the type of resource. This field should be specified to correspond the id to the right project type (CONSUMER_PROJECT or ENCRYPTION_KEYS_PROJECT) Possible values: RESOURCE_TYPE_UNSPECIFIED, CONSUMER_PROJECT, ENCRYPTION_KEYS_PROJECT, KEYRING, CONSUMER_FOLDER
	ResourceType *string `pulumi:"resourceType"`
}

type WorkloadResourceSettingArgs

type WorkloadResourceSettingArgs struct {
	// User-assigned resource display name. If not empty it will be used to create a resource with the specified name.
	DisplayName pulumi.StringPtrInput `pulumi:"displayName"`
	// Resource identifier. For a project this represents projectId. If the project is already taken, the workload creation will fail. For KeyRing, this represents the keyring_id. For a folder, don't set this value as folderId is assigned by Google.
	ResourceId pulumi.StringPtrInput `pulumi:"resourceId"`
	// Indicates the type of resource. This field should be specified to correspond the id to the right project type (CONSUMER_PROJECT or ENCRYPTION_KEYS_PROJECT) Possible values: RESOURCE_TYPE_UNSPECIFIED, CONSUMER_PROJECT, ENCRYPTION_KEYS_PROJECT, KEYRING, CONSUMER_FOLDER
	ResourceType pulumi.StringPtrInput `pulumi:"resourceType"`
}

func (WorkloadResourceSettingArgs) ElementType

func (WorkloadResourceSettingArgs) ToWorkloadResourceSettingOutput

func (i WorkloadResourceSettingArgs) ToWorkloadResourceSettingOutput() WorkloadResourceSettingOutput

func (WorkloadResourceSettingArgs) ToWorkloadResourceSettingOutputWithContext

func (i WorkloadResourceSettingArgs) ToWorkloadResourceSettingOutputWithContext(ctx context.Context) WorkloadResourceSettingOutput

type WorkloadResourceSettingArray

type WorkloadResourceSettingArray []WorkloadResourceSettingInput

func (WorkloadResourceSettingArray) ElementType

func (WorkloadResourceSettingArray) ToWorkloadResourceSettingArrayOutput

func (i WorkloadResourceSettingArray) ToWorkloadResourceSettingArrayOutput() WorkloadResourceSettingArrayOutput

func (WorkloadResourceSettingArray) ToWorkloadResourceSettingArrayOutputWithContext

func (i WorkloadResourceSettingArray) ToWorkloadResourceSettingArrayOutputWithContext(ctx context.Context) WorkloadResourceSettingArrayOutput

type WorkloadResourceSettingArrayInput

type WorkloadResourceSettingArrayInput interface {
	pulumi.Input

	ToWorkloadResourceSettingArrayOutput() WorkloadResourceSettingArrayOutput
	ToWorkloadResourceSettingArrayOutputWithContext(context.Context) WorkloadResourceSettingArrayOutput
}

WorkloadResourceSettingArrayInput is an input type that accepts WorkloadResourceSettingArray and WorkloadResourceSettingArrayOutput values. You can construct a concrete instance of `WorkloadResourceSettingArrayInput` via:

WorkloadResourceSettingArray{ WorkloadResourceSettingArgs{...} }

type WorkloadResourceSettingArrayOutput

type WorkloadResourceSettingArrayOutput struct{ *pulumi.OutputState }

func (WorkloadResourceSettingArrayOutput) ElementType

func (WorkloadResourceSettingArrayOutput) Index

func (WorkloadResourceSettingArrayOutput) ToWorkloadResourceSettingArrayOutput

func (o WorkloadResourceSettingArrayOutput) ToWorkloadResourceSettingArrayOutput() WorkloadResourceSettingArrayOutput

func (WorkloadResourceSettingArrayOutput) ToWorkloadResourceSettingArrayOutputWithContext

func (o WorkloadResourceSettingArrayOutput) ToWorkloadResourceSettingArrayOutputWithContext(ctx context.Context) WorkloadResourceSettingArrayOutput

type WorkloadResourceSettingInput

type WorkloadResourceSettingInput interface {
	pulumi.Input

	ToWorkloadResourceSettingOutput() WorkloadResourceSettingOutput
	ToWorkloadResourceSettingOutputWithContext(context.Context) WorkloadResourceSettingOutput
}

WorkloadResourceSettingInput is an input type that accepts WorkloadResourceSettingArgs and WorkloadResourceSettingOutput values. You can construct a concrete instance of `WorkloadResourceSettingInput` via:

WorkloadResourceSettingArgs{...}

type WorkloadResourceSettingOutput

type WorkloadResourceSettingOutput struct{ *pulumi.OutputState }

func (WorkloadResourceSettingOutput) DisplayName

User-assigned resource display name. If not empty it will be used to create a resource with the specified name.

func (WorkloadResourceSettingOutput) ElementType

func (WorkloadResourceSettingOutput) ResourceId

Resource identifier. For a project this represents projectId. If the project is already taken, the workload creation will fail. For KeyRing, this represents the keyring_id. For a folder, don't set this value as folderId is assigned by Google.

func (WorkloadResourceSettingOutput) ResourceType

Indicates the type of resource. This field should be specified to correspond the id to the right project type (CONSUMER_PROJECT or ENCRYPTION_KEYS_PROJECT) Possible values: RESOURCE_TYPE_UNSPECIFIED, CONSUMER_PROJECT, ENCRYPTION_KEYS_PROJECT, KEYRING, CONSUMER_FOLDER

func (WorkloadResourceSettingOutput) ToWorkloadResourceSettingOutput

func (o WorkloadResourceSettingOutput) ToWorkloadResourceSettingOutput() WorkloadResourceSettingOutput

func (WorkloadResourceSettingOutput) ToWorkloadResourceSettingOutputWithContext

func (o WorkloadResourceSettingOutput) ToWorkloadResourceSettingOutputWithContext(ctx context.Context) WorkloadResourceSettingOutput

type WorkloadSaaEnrollmentResponse

type WorkloadSaaEnrollmentResponse struct {
	// Indicates SAA enrollment setup error if any.
	SetupErrors []string `pulumi:"setupErrors"`
	// Indicates SAA enrollment status of a given workload. Possible values: SETUP_STATE_UNSPECIFIED, STATUS_PENDING, STATUS_COMPLETE
	SetupStatus *string `pulumi:"setupStatus"`
}

type WorkloadSaaEnrollmentResponseArgs

type WorkloadSaaEnrollmentResponseArgs struct {
	// Indicates SAA enrollment setup error if any.
	SetupErrors pulumi.StringArrayInput `pulumi:"setupErrors"`
	// Indicates SAA enrollment status of a given workload. Possible values: SETUP_STATE_UNSPECIFIED, STATUS_PENDING, STATUS_COMPLETE
	SetupStatus pulumi.StringPtrInput `pulumi:"setupStatus"`
}

func (WorkloadSaaEnrollmentResponseArgs) ElementType

func (WorkloadSaaEnrollmentResponseArgs) ToWorkloadSaaEnrollmentResponseOutput

func (i WorkloadSaaEnrollmentResponseArgs) ToWorkloadSaaEnrollmentResponseOutput() WorkloadSaaEnrollmentResponseOutput

func (WorkloadSaaEnrollmentResponseArgs) ToWorkloadSaaEnrollmentResponseOutputWithContext

func (i WorkloadSaaEnrollmentResponseArgs) ToWorkloadSaaEnrollmentResponseOutputWithContext(ctx context.Context) WorkloadSaaEnrollmentResponseOutput

type WorkloadSaaEnrollmentResponseArray

type WorkloadSaaEnrollmentResponseArray []WorkloadSaaEnrollmentResponseInput

func (WorkloadSaaEnrollmentResponseArray) ElementType

func (WorkloadSaaEnrollmentResponseArray) ToWorkloadSaaEnrollmentResponseArrayOutput

func (i WorkloadSaaEnrollmentResponseArray) ToWorkloadSaaEnrollmentResponseArrayOutput() WorkloadSaaEnrollmentResponseArrayOutput

func (WorkloadSaaEnrollmentResponseArray) ToWorkloadSaaEnrollmentResponseArrayOutputWithContext

func (i WorkloadSaaEnrollmentResponseArray) ToWorkloadSaaEnrollmentResponseArrayOutputWithContext(ctx context.Context) WorkloadSaaEnrollmentResponseArrayOutput

type WorkloadSaaEnrollmentResponseArrayInput

type WorkloadSaaEnrollmentResponseArrayInput interface {
	pulumi.Input

	ToWorkloadSaaEnrollmentResponseArrayOutput() WorkloadSaaEnrollmentResponseArrayOutput
	ToWorkloadSaaEnrollmentResponseArrayOutputWithContext(context.Context) WorkloadSaaEnrollmentResponseArrayOutput
}

WorkloadSaaEnrollmentResponseArrayInput is an input type that accepts WorkloadSaaEnrollmentResponseArray and WorkloadSaaEnrollmentResponseArrayOutput values. You can construct a concrete instance of `WorkloadSaaEnrollmentResponseArrayInput` via:

WorkloadSaaEnrollmentResponseArray{ WorkloadSaaEnrollmentResponseArgs{...} }

type WorkloadSaaEnrollmentResponseArrayOutput

type WorkloadSaaEnrollmentResponseArrayOutput struct{ *pulumi.OutputState }

func (WorkloadSaaEnrollmentResponseArrayOutput) ElementType

func (WorkloadSaaEnrollmentResponseArrayOutput) Index

func (WorkloadSaaEnrollmentResponseArrayOutput) ToWorkloadSaaEnrollmentResponseArrayOutput

func (o WorkloadSaaEnrollmentResponseArrayOutput) ToWorkloadSaaEnrollmentResponseArrayOutput() WorkloadSaaEnrollmentResponseArrayOutput

func (WorkloadSaaEnrollmentResponseArrayOutput) ToWorkloadSaaEnrollmentResponseArrayOutputWithContext

func (o WorkloadSaaEnrollmentResponseArrayOutput) ToWorkloadSaaEnrollmentResponseArrayOutputWithContext(ctx context.Context) WorkloadSaaEnrollmentResponseArrayOutput

type WorkloadSaaEnrollmentResponseInput

type WorkloadSaaEnrollmentResponseInput interface {
	pulumi.Input

	ToWorkloadSaaEnrollmentResponseOutput() WorkloadSaaEnrollmentResponseOutput
	ToWorkloadSaaEnrollmentResponseOutputWithContext(context.Context) WorkloadSaaEnrollmentResponseOutput
}

WorkloadSaaEnrollmentResponseInput is an input type that accepts WorkloadSaaEnrollmentResponseArgs and WorkloadSaaEnrollmentResponseOutput values. You can construct a concrete instance of `WorkloadSaaEnrollmentResponseInput` via:

WorkloadSaaEnrollmentResponseArgs{...}

type WorkloadSaaEnrollmentResponseOutput

type WorkloadSaaEnrollmentResponseOutput struct{ *pulumi.OutputState }

func (WorkloadSaaEnrollmentResponseOutput) ElementType

func (WorkloadSaaEnrollmentResponseOutput) SetupErrors

Indicates SAA enrollment setup error if any.

func (WorkloadSaaEnrollmentResponseOutput) SetupStatus

Indicates SAA enrollment status of a given workload. Possible values: SETUP_STATE_UNSPECIFIED, STATUS_PENDING, STATUS_COMPLETE

func (WorkloadSaaEnrollmentResponseOutput) ToWorkloadSaaEnrollmentResponseOutput

func (o WorkloadSaaEnrollmentResponseOutput) ToWorkloadSaaEnrollmentResponseOutput() WorkloadSaaEnrollmentResponseOutput

func (WorkloadSaaEnrollmentResponseOutput) ToWorkloadSaaEnrollmentResponseOutputWithContext

func (o WorkloadSaaEnrollmentResponseOutput) ToWorkloadSaaEnrollmentResponseOutputWithContext(ctx context.Context) WorkloadSaaEnrollmentResponseOutput

type WorkloadState

type WorkloadState struct {
	// Optional. Input only. The billing account used for the resources which are direct children of workload. This billing account is initially associated with the resources created as part of Workload creation. After the initial creation of these resources, the customer can change the assigned billing account. The resource name has the form `billingAccounts/{billing_account_id}`. For example, `billingAccounts/012345-567890-ABCDEF`.
	BillingAccount pulumi.StringPtrInput
	// Required. Immutable. Compliance Regime associated with this workload. Possible values: COMPLIANCE_REGIME_UNSPECIFIED, IL4, CJIS, FEDRAMP_HIGH, FEDRAMP_MODERATE, US_REGIONAL_ACCESS, HIPAA, HITRUST, EU_REGIONS_AND_SUPPORT, CA_REGIONS_AND_SUPPORT, ITAR, AU_REGIONS_AND_US_SUPPORT, ASSURED_WORKLOADS_FOR_PARTNERS, ISR_REGIONS, ISR_REGIONS_AND_SUPPORT, CA_PROTECTED_B, IL5, IL2, JP_REGIONS_AND_SUPPORT, KSA_REGIONS_AND_SUPPORT_WITH_SOVEREIGNTY_CONTROLS, REGIONAL_CONTROLS, HEALTHCARE_AND_LIFE_SCIENCES_CONTROLS, HEALTHCARE_AND_LIFE_SCIENCES_CONTROLS_WITH_US_SUPPORT, IRS_1075
	ComplianceRegime pulumi.StringPtrInput
	// Output only. Count of active Violations in the Workload.
	ComplianceStatuses WorkloadComplianceStatusArrayInput
	// Output only. Urls for services which are compliant for this Assured Workload, but which are currently disallowed by the ResourceUsageRestriction org policy. Invoke workloads.restrictAllowedResources endpoint to allow your project developers to use these services in their environment.
	CompliantButDisallowedServices pulumi.StringArrayInput
	// Output only. Immutable. The Workload creation timestamp.
	CreateTime pulumi.StringPtrInput
	// Required. The user-assigned display name of the Workload. When present it must be between 4 to 30 characters. Allowed characters are: lowercase and uppercase letters, numbers, hyphen, and spaces. Example: My Workload
	DisplayName pulumi.StringPtrInput
	// All of labels (key/value pairs) present on the resource in GCP, including the labels configured through Pulumi, other clients and services.
	EffectiveLabels pulumi.StringMapInput
	// Optional. Represents the Ekm Provisioning State of the given workload.
	EkmProvisioningResponses WorkloadEkmProvisioningResponseArrayInput
	// Optional. Indicates the sovereignty status of the given workload. Currently meant to be used by Europe/Canada customers.
	EnableSovereignControls pulumi.BoolPtrInput
	// Output only. Represents the KAJ enrollment state of the given workload. Possible values: KAJ_ENROLLMENT_STATE_UNSPECIFIED, KAJ_ENROLLMENT_STATE_PENDING, KAJ_ENROLLMENT_STATE_COMPLETE
	KajEnrollmentState pulumi.StringPtrInput
	// **DEPRECATED** Input only. Settings used to create a CMEK crypto key. When set, a project with a KMS CMEK key is provisioned. This field is deprecated as of Feb 28, 2022. In order to create a Keyring, callers should specify, ENCRYPTION_KEYS_PROJECT or KEYRING in ResourceSettings.resource_type field.
	KmsSettings WorkloadKmsSettingsPtrInput
	// Optional. Labels applied to the workload.
	//
	// **Note**: This field is non-authoritative, and will only manage the labels present in your configuration.
	// Please refer to the field `effectiveLabels` for all of the labels present on the resource.
	Labels pulumi.StringMapInput
	// The location for the resource
	Location pulumi.StringPtrInput
	// Output only. The resource name of the workload.
	Name pulumi.StringPtrInput
	// The organization for the resource
	//
	// ***
	Organization pulumi.StringPtrInput
	// Optional. Partner regime associated with this workload. Possible values: PARTNER_UNSPECIFIED, LOCAL_CONTROLS_BY_S3NS, SOVEREIGN_CONTROLS_BY_T_SYSTEMS, SOVEREIGN_CONTROLS_BY_SIA_MINSAIT, SOVEREIGN_CONTROLS_BY_PSN, SOVEREIGN_CONTROLS_BY_CNTXT, SOVEREIGN_CONTROLS_BY_CNTXT_NO_EKM
	Partner pulumi.StringPtrInput
	// Optional. Permissions granted to the AW Partner SA account for the customer workload
	PartnerPermissions WorkloadPartnerPermissionsPtrInput
	// Optional. Input only. Billing account necessary for purchasing services from Sovereign Partners. This field is required for creating SIA/PSN/CNTXT partner workloads. The caller should have 'billing.resourceAssociations.create' IAM permission on this billing-account. The format of this string is billingAccounts/AAAAAA-BBBBBB-CCCCCC.
	PartnerServicesBillingAccount pulumi.StringPtrInput
	// Input only. The parent resource for the resources managed by this Assured Workload. May be either empty or a folder resource which is a child of the Workload parent. If not specified all resources are created under the parent organization. Format: folders/{folder_id}
	ProvisionedResourcesParent pulumi.StringPtrInput
	// The combination of labels configured directly on the resource and default labels configured on the provider.
	PulumiLabels pulumi.StringMapInput
	// Input only. Resource properties that are used to customize workload resources. These properties (such as custom project id) will be used to create workload resources if possible. This field is optional.
	ResourceSettings WorkloadResourceSettingArrayInput
	// Output only. The resources associated with this workload. These resources will be created when creating the workload. If any of the projects already exist, the workload creation will fail. Always read only.
	Resources WorkloadResourceArrayInput
	// Output only. Represents the SAA enrollment response of the given workload. SAA enrollment response is queried during workloads.get call. In failure cases, user friendly error message is shown in SAA details page.
	SaaEnrollmentResponses WorkloadSaaEnrollmentResponseArrayInput
	// Optional. Indicates whether the e-mail notification for a violation is enabled for a workload. This value will be by default True, and if not present will be considered as true. This should only be updated via updateWorkload call. Any Changes to this field during the createWorkload call will not be honored. This will always be true while creating the workload.
	ViolationNotificationsEnabled pulumi.BoolPtrInput
	// Optional. Used to specify certain options for a workload during workload creation - currently only supporting KAT Optionality for Regional Controls workloads.
	WorkloadOptions WorkloadWorkloadOptionsPtrInput
}

func (WorkloadState) ElementType

func (WorkloadState) ElementType() reflect.Type

type WorkloadWorkloadOptions added in v8.8.0

type WorkloadWorkloadOptions struct {
	// Indicates type of KAJ enrollment for the workload. Currently, only specifiying KEY_ACCESS_TRANSPARENCY_OFF is implemented to not enroll in KAT-level KAJ enrollment for Regional Controls workloads. Possible values: KAJ_ENROLLMENT_TYPE_UNSPECIFIED, FULL_KAJ, EKM_ONLY, KEY_ACCESS_TRANSPARENCY_OFF
	KajEnrollmentType *string `pulumi:"kajEnrollmentType"`
}

type WorkloadWorkloadOptionsArgs added in v8.8.0

type WorkloadWorkloadOptionsArgs struct {
	// Indicates type of KAJ enrollment for the workload. Currently, only specifiying KEY_ACCESS_TRANSPARENCY_OFF is implemented to not enroll in KAT-level KAJ enrollment for Regional Controls workloads. Possible values: KAJ_ENROLLMENT_TYPE_UNSPECIFIED, FULL_KAJ, EKM_ONLY, KEY_ACCESS_TRANSPARENCY_OFF
	KajEnrollmentType pulumi.StringPtrInput `pulumi:"kajEnrollmentType"`
}

func (WorkloadWorkloadOptionsArgs) ElementType added in v8.8.0

func (WorkloadWorkloadOptionsArgs) ToWorkloadWorkloadOptionsOutput added in v8.8.0

func (i WorkloadWorkloadOptionsArgs) ToWorkloadWorkloadOptionsOutput() WorkloadWorkloadOptionsOutput

func (WorkloadWorkloadOptionsArgs) ToWorkloadWorkloadOptionsOutputWithContext added in v8.8.0

func (i WorkloadWorkloadOptionsArgs) ToWorkloadWorkloadOptionsOutputWithContext(ctx context.Context) WorkloadWorkloadOptionsOutput

func (WorkloadWorkloadOptionsArgs) ToWorkloadWorkloadOptionsPtrOutput added in v8.8.0

func (i WorkloadWorkloadOptionsArgs) ToWorkloadWorkloadOptionsPtrOutput() WorkloadWorkloadOptionsPtrOutput

func (WorkloadWorkloadOptionsArgs) ToWorkloadWorkloadOptionsPtrOutputWithContext added in v8.8.0

func (i WorkloadWorkloadOptionsArgs) ToWorkloadWorkloadOptionsPtrOutputWithContext(ctx context.Context) WorkloadWorkloadOptionsPtrOutput

type WorkloadWorkloadOptionsInput added in v8.8.0

type WorkloadWorkloadOptionsInput interface {
	pulumi.Input

	ToWorkloadWorkloadOptionsOutput() WorkloadWorkloadOptionsOutput
	ToWorkloadWorkloadOptionsOutputWithContext(context.Context) WorkloadWorkloadOptionsOutput
}

WorkloadWorkloadOptionsInput is an input type that accepts WorkloadWorkloadOptionsArgs and WorkloadWorkloadOptionsOutput values. You can construct a concrete instance of `WorkloadWorkloadOptionsInput` via:

WorkloadWorkloadOptionsArgs{...}

type WorkloadWorkloadOptionsOutput added in v8.8.0

type WorkloadWorkloadOptionsOutput struct{ *pulumi.OutputState }

func (WorkloadWorkloadOptionsOutput) ElementType added in v8.8.0

func (WorkloadWorkloadOptionsOutput) KajEnrollmentType added in v8.8.0

Indicates type of KAJ enrollment for the workload. Currently, only specifiying KEY_ACCESS_TRANSPARENCY_OFF is implemented to not enroll in KAT-level KAJ enrollment for Regional Controls workloads. Possible values: KAJ_ENROLLMENT_TYPE_UNSPECIFIED, FULL_KAJ, EKM_ONLY, KEY_ACCESS_TRANSPARENCY_OFF

func (WorkloadWorkloadOptionsOutput) ToWorkloadWorkloadOptionsOutput added in v8.8.0

func (o WorkloadWorkloadOptionsOutput) ToWorkloadWorkloadOptionsOutput() WorkloadWorkloadOptionsOutput

func (WorkloadWorkloadOptionsOutput) ToWorkloadWorkloadOptionsOutputWithContext added in v8.8.0

func (o WorkloadWorkloadOptionsOutput) ToWorkloadWorkloadOptionsOutputWithContext(ctx context.Context) WorkloadWorkloadOptionsOutput

func (WorkloadWorkloadOptionsOutput) ToWorkloadWorkloadOptionsPtrOutput added in v8.8.0

func (o WorkloadWorkloadOptionsOutput) ToWorkloadWorkloadOptionsPtrOutput() WorkloadWorkloadOptionsPtrOutput

func (WorkloadWorkloadOptionsOutput) ToWorkloadWorkloadOptionsPtrOutputWithContext added in v8.8.0

func (o WorkloadWorkloadOptionsOutput) ToWorkloadWorkloadOptionsPtrOutputWithContext(ctx context.Context) WorkloadWorkloadOptionsPtrOutput

type WorkloadWorkloadOptionsPtrInput added in v8.8.0

type WorkloadWorkloadOptionsPtrInput interface {
	pulumi.Input

	ToWorkloadWorkloadOptionsPtrOutput() WorkloadWorkloadOptionsPtrOutput
	ToWorkloadWorkloadOptionsPtrOutputWithContext(context.Context) WorkloadWorkloadOptionsPtrOutput
}

WorkloadWorkloadOptionsPtrInput is an input type that accepts WorkloadWorkloadOptionsArgs, WorkloadWorkloadOptionsPtr and WorkloadWorkloadOptionsPtrOutput values. You can construct a concrete instance of `WorkloadWorkloadOptionsPtrInput` via:

        WorkloadWorkloadOptionsArgs{...}

or:

        nil

func WorkloadWorkloadOptionsPtr added in v8.8.0

func WorkloadWorkloadOptionsPtr(v *WorkloadWorkloadOptionsArgs) WorkloadWorkloadOptionsPtrInput

type WorkloadWorkloadOptionsPtrOutput added in v8.8.0

type WorkloadWorkloadOptionsPtrOutput struct{ *pulumi.OutputState }

func (WorkloadWorkloadOptionsPtrOutput) Elem added in v8.8.0

func (WorkloadWorkloadOptionsPtrOutput) ElementType added in v8.8.0

func (WorkloadWorkloadOptionsPtrOutput) KajEnrollmentType added in v8.8.0

Indicates type of KAJ enrollment for the workload. Currently, only specifiying KEY_ACCESS_TRANSPARENCY_OFF is implemented to not enroll in KAT-level KAJ enrollment for Regional Controls workloads. Possible values: KAJ_ENROLLMENT_TYPE_UNSPECIFIED, FULL_KAJ, EKM_ONLY, KEY_ACCESS_TRANSPARENCY_OFF

func (WorkloadWorkloadOptionsPtrOutput) ToWorkloadWorkloadOptionsPtrOutput added in v8.8.0

func (o WorkloadWorkloadOptionsPtrOutput) ToWorkloadWorkloadOptionsPtrOutput() WorkloadWorkloadOptionsPtrOutput

func (WorkloadWorkloadOptionsPtrOutput) ToWorkloadWorkloadOptionsPtrOutputWithContext added in v8.8.0

func (o WorkloadWorkloadOptionsPtrOutput) ToWorkloadWorkloadOptionsPtrOutputWithContext(ctx context.Context) WorkloadWorkloadOptionsPtrOutput

Jump to

Keyboard shortcuts

? : This menu
/ : Search site
f or F : Jump to
y or Y : Canonical URL