Documentation
¶
Index ¶
- type GetOrganizationPolicyArgs
- type GetOrganizationPolicyResult
- type GetProjectArgs
- type GetProjectResult
- type IAMAuditConfig
- func (r *IAMAuditConfig) AuditLogConfigs() *pulumi.ArrayOutput
- func (r *IAMAuditConfig) Etag() *pulumi.StringOutput
- func (r *IAMAuditConfig) ID() *pulumi.IDOutput
- func (r *IAMAuditConfig) Project() *pulumi.StringOutput
- func (r *IAMAuditConfig) Service() *pulumi.StringOutput
- func (r *IAMAuditConfig) URN() *pulumi.URNOutput
- type IAMAuditConfigArgs
- type IAMAuditConfigState
- type IAMBinding
- type IAMBindingArgs
- type IAMBindingState
- type IAMCustomRole
- func (r *IAMCustomRole) Deleted() *pulumi.BoolOutput
- func (r *IAMCustomRole) Description() *pulumi.StringOutput
- func (r *IAMCustomRole) ID() *pulumi.IDOutput
- func (r *IAMCustomRole) Permissions() *pulumi.ArrayOutput
- func (r *IAMCustomRole) Project() *pulumi.StringOutput
- func (r *IAMCustomRole) RoleId() *pulumi.StringOutput
- func (r *IAMCustomRole) Stage() *pulumi.StringOutput
- func (r *IAMCustomRole) Title() *pulumi.StringOutput
- func (r *IAMCustomRole) URN() *pulumi.URNOutput
- type IAMCustomRoleArgs
- type IAMCustomRoleState
- type IAMMember
- type IAMMemberArgs
- type IAMMemberState
- type IAMPolicy
- type IAMPolicyArgs
- type IAMPolicyState
- type OrganizationPolicy
- func (r *OrganizationPolicy) BooleanPolicy() *pulumi.Output
- func (r *OrganizationPolicy) Constraint() *pulumi.StringOutput
- func (r *OrganizationPolicy) Etag() *pulumi.StringOutput
- func (r *OrganizationPolicy) ID() *pulumi.IDOutput
- func (r *OrganizationPolicy) ListPolicy() *pulumi.Output
- func (r *OrganizationPolicy) Project() *pulumi.StringOutput
- func (r *OrganizationPolicy) RestorePolicy() *pulumi.Output
- func (r *OrganizationPolicy) URN() *pulumi.URNOutput
- func (r *OrganizationPolicy) UpdateTime() *pulumi.StringOutput
- func (r *OrganizationPolicy) Version() *pulumi.IntOutput
- type OrganizationPolicyArgs
- type OrganizationPolicyState
- type Service
- type ServiceArgs
- type ServiceState
- type Services
- type ServicesArgs
- type ServicesState
- type UsageExportBucket
- type UsageExportBucketArgs
- type UsageExportBucketState
Constants ¶
This section is empty.
Variables ¶
This section is empty.
Functions ¶
This section is empty.
Types ¶
type GetOrganizationPolicyArgs ¶ added in v0.18.1
type GetOrganizationPolicyArgs struct { // (Required) The name of the Constraint the Policy is configuring, for example, `serviceuser.services`. Check out the [complete list of available constraints](https://cloud.google.com/resource-manager/docs/organization-policy/understanding-constraints#available_constraints). Constraint interface{} // The project ID. Project interface{} }
A collection of arguments for invoking getOrganizationPolicy.
type GetOrganizationPolicyResult ¶ added in v0.18.1
type GetOrganizationPolicyResult struct { BooleanPolicies interface{} Etag interface{} ListPolicies interface{} RestorePolicies interface{} UpdateTime interface{} Version interface{} // id is the provider-assigned unique ID for this managed resource. Id interface{} }
A collection of values returned by getOrganizationPolicy.
func LookupOrganizationPolicy ¶ added in v0.18.1
func LookupOrganizationPolicy(ctx *pulumi.Context, args *GetOrganizationPolicyArgs) (*GetOrganizationPolicyResult, error)
Allows management of Organization policies for a Google Project. For more information see [the official documentation](https://cloud.google.com/resource-manager/docs/organization-policy/overview)
type GetProjectArgs ¶ added in v0.18.0
type GetProjectArgs struct {
// A string filter as defined in the [REST API](https://cloud.google.com/resource-manager/reference/rest/v1/projects/list#query-parameters).
Filter interface{}
}
A collection of arguments for invoking getProject.
type GetProjectResult ¶ added in v0.18.0
type GetProjectResult struct { // A list of projects matching the provided filter. Structure is defined below. Projects interface{} // id is the provider-assigned unique ID for this managed resource. Id interface{} }
A collection of values returned by getProject.
func LookupProject ¶ added in v0.18.0
func LookupProject(ctx *pulumi.Context, args *GetProjectArgs) (*GetProjectResult, error)
Retrieve information about a set of projects based on a filter. See the [REST API](https://cloud.google.com/resource-manager/reference/rest/v1/projects/list) for more details.
type IAMAuditConfig ¶ added in v0.18.0
type IAMAuditConfig struct {
// contains filtered or unexported fields
}
func GetIAMAuditConfig ¶ added in v0.18.0
func GetIAMAuditConfig(ctx *pulumi.Context, name string, id pulumi.ID, state *IAMAuditConfigState, opts ...pulumi.ResourceOpt) (*IAMAuditConfig, error)
GetIAMAuditConfig gets an existing IAMAuditConfig resource's state with the given name, ID, and optional state properties that are used to uniquely qualify the lookup (nil if not required).
func NewIAMAuditConfig ¶ added in v0.18.0
func NewIAMAuditConfig(ctx *pulumi.Context, name string, args *IAMAuditConfigArgs, opts ...pulumi.ResourceOpt) (*IAMAuditConfig, error)
NewIAMAuditConfig registers a new resource with the given unique name, arguments, and options.
func (*IAMAuditConfig) AuditLogConfigs ¶ added in v0.18.0
func (r *IAMAuditConfig) AuditLogConfigs() *pulumi.ArrayOutput
func (*IAMAuditConfig) Etag ¶ added in v0.18.0
func (r *IAMAuditConfig) Etag() *pulumi.StringOutput
func (*IAMAuditConfig) ID ¶ added in v0.18.0
func (r *IAMAuditConfig) ID() *pulumi.IDOutput
ID is this resource's unique identifier assigned by its provider.
func (*IAMAuditConfig) Project ¶ added in v0.18.0
func (r *IAMAuditConfig) Project() *pulumi.StringOutput
func (*IAMAuditConfig) Service ¶ added in v0.18.0
func (r *IAMAuditConfig) Service() *pulumi.StringOutput
func (*IAMAuditConfig) URN ¶ added in v0.18.0
func (r *IAMAuditConfig) URN() *pulumi.URNOutput
URN is this resource's unique name assigned by Pulumi.
type IAMAuditConfigArgs ¶ added in v0.18.0
type IAMAuditConfigArgs struct { AuditLogConfigs interface{} Project interface{} Service interface{} }
The set of arguments for constructing a IAMAuditConfig resource.
type IAMAuditConfigState ¶ added in v0.18.0
type IAMAuditConfigState struct { AuditLogConfigs interface{} Etag interface{} Project interface{} Service interface{} }
Input properties used for looking up and filtering IAMAuditConfig resources.
type IAMBinding ¶
type IAMBinding struct {
// contains filtered or unexported fields
}
Three different resources help you manage your IAM policy for a project. Each of these resources serves a different use case:
* `google_project_iam_policy`: Authoritative. Sets the IAM policy for the project and replaces any existing policy already attached. * `google_project_iam_binding`: Authoritative for a given role. Updates the IAM policy to grant a role to a list of members. Other roles within the IAM policy for the project are preserved. * `google_project_iam_member`: Non-authoritative. Updates the IAM policy to grant a role to a new member. Other members for the role for the project are preserved.
> **Note:** `google_project_iam_policy` **cannot** be used in conjunction with `google_project_iam_binding` and `google_project_iam_member` or they will fight over what your policy should be.
> **Note:** `google_project_iam_binding` resources **can be** used in conjunction with `google_project_iam_member` resources **only if** they do not grant privilege to the same role.
func GetIAMBinding ¶
func GetIAMBinding(ctx *pulumi.Context, name string, id pulumi.ID, state *IAMBindingState, opts ...pulumi.ResourceOpt) (*IAMBinding, error)
GetIAMBinding gets an existing IAMBinding resource's state with the given name, ID, and optional state properties that are used to uniquely qualify the lookup (nil if not required).
func NewIAMBinding ¶
func NewIAMBinding(ctx *pulumi.Context, name string, args *IAMBindingArgs, opts ...pulumi.ResourceOpt) (*IAMBinding, error)
NewIAMBinding registers a new resource with the given unique name, arguments, and options.
func (*IAMBinding) Etag ¶
func (r *IAMBinding) Etag() *pulumi.StringOutput
(Computed) The etag of the project's IAM policy.
func (*IAMBinding) ID ¶
func (r *IAMBinding) ID() *pulumi.IDOutput
ID is this resource's unique identifier assigned by its provider.
func (*IAMBinding) Members ¶
func (r *IAMBinding) Members() *pulumi.ArrayOutput
func (*IAMBinding) Project ¶
func (r *IAMBinding) Project() *pulumi.StringOutput
The project ID. If not specified for `google_project_iam_binding` or `google_project_iam_member`, uses the ID of the project configured with the provider. Required for `google_project_iam_policy` - you must explicitly set the project, and it will not be inferred from the provider.
func (*IAMBinding) Role ¶
func (r *IAMBinding) Role() *pulumi.StringOutput
The role that should be applied. Only one `google_project_iam_binding` can be used per role. Note that custom roles must be of the format `[projects|organizations]/{parent-name}/roles/{role-name}`.
func (*IAMBinding) URN ¶
func (r *IAMBinding) URN() *pulumi.URNOutput
URN is this resource's unique name assigned by Pulumi.
type IAMBindingArgs ¶
type IAMBindingArgs struct { Members interface{} // The project ID. If not specified for `google_project_iam_binding` // or `google_project_iam_member`, uses the ID of the project configured with the provider. // Required for `google_project_iam_policy` - you must explicitly set the project, and it // will not be inferred from the provider. Project interface{} // The role that should be applied. Only one // `google_project_iam_binding` can be used per role. Note that custom roles must be of the format // `[projects|organizations]/{parent-name}/roles/{role-name}`. Role interface{} }
The set of arguments for constructing a IAMBinding resource.
type IAMBindingState ¶
type IAMBindingState struct { // (Computed) The etag of the project's IAM policy. Etag interface{} Members interface{} // The project ID. If not specified for `google_project_iam_binding` // or `google_project_iam_member`, uses the ID of the project configured with the provider. // Required for `google_project_iam_policy` - you must explicitly set the project, and it // will not be inferred from the provider. Project interface{} // The role that should be applied. Only one // `google_project_iam_binding` can be used per role. Note that custom roles must be of the format // `[projects|organizations]/{parent-name}/roles/{role-name}`. Role interface{} }
Input properties used for looking up and filtering IAMBinding resources.
type IAMCustomRole ¶
type IAMCustomRole struct {
// contains filtered or unexported fields
}
Allows management of a customized Cloud IAM project role. For more information see [the official documentation](https://cloud.google.com/iam/docs/understanding-custom-roles) and [API](https://cloud.google.com/iam/reference/rest/v1/projects.roles).
> **Warning:** Note that custom roles in GCP have the concept of a soft-delete. There are two issues that may arise
from this and how roles are propagated. 1) creating a role may involve undeleting and then updating a role with the same name, possibly causing confusing behavior between undelete and update. 2) A deleted role is permanently deleted after 7 days, but it can take up to 30 more days (i.e. between 7 and 37 days after deletion) before the role name is made available again. This means a deleted role that has been deleted for more than 7 days cannot be changed at all by Terraform, and new roles cannot share that name.
func GetIAMCustomRole ¶
func GetIAMCustomRole(ctx *pulumi.Context, name string, id pulumi.ID, state *IAMCustomRoleState, opts ...pulumi.ResourceOpt) (*IAMCustomRole, error)
GetIAMCustomRole gets an existing IAMCustomRole resource's state with the given name, ID, and optional state properties that are used to uniquely qualify the lookup (nil if not required).
func NewIAMCustomRole ¶
func NewIAMCustomRole(ctx *pulumi.Context, name string, args *IAMCustomRoleArgs, opts ...pulumi.ResourceOpt) (*IAMCustomRole, error)
NewIAMCustomRole registers a new resource with the given unique name, arguments, and options.
func (*IAMCustomRole) Deleted ¶
func (r *IAMCustomRole) Deleted() *pulumi.BoolOutput
(Optional) The current deleted state of the role.
func (*IAMCustomRole) Description ¶
func (r *IAMCustomRole) Description() *pulumi.StringOutput
A human-readable description for the role.
func (*IAMCustomRole) ID ¶
func (r *IAMCustomRole) ID() *pulumi.IDOutput
ID is this resource's unique identifier assigned by its provider.
func (*IAMCustomRole) Permissions ¶
func (r *IAMCustomRole) Permissions() *pulumi.ArrayOutput
The names of the permissions this role grants when bound in an IAM policy. At least one permission must be specified.
func (*IAMCustomRole) Project ¶
func (r *IAMCustomRole) Project() *pulumi.StringOutput
The project that the service account will be created in. Defaults to the provider project configuration.
func (*IAMCustomRole) RoleId ¶
func (r *IAMCustomRole) RoleId() *pulumi.StringOutput
The role id to use for this role.
func (*IAMCustomRole) Stage ¶
func (r *IAMCustomRole) Stage() *pulumi.StringOutput
The current launch stage of the role. Defaults to `GA`. List of possible stages is [here](https://cloud.google.com/iam/reference/rest/v1/organizations.roles#Role.RoleLaunchStage).
func (*IAMCustomRole) Title ¶
func (r *IAMCustomRole) Title() *pulumi.StringOutput
A human-readable title for the role.
func (*IAMCustomRole) URN ¶
func (r *IAMCustomRole) URN() *pulumi.URNOutput
URN is this resource's unique name assigned by Pulumi.
type IAMCustomRoleArgs ¶
type IAMCustomRoleArgs struct { // A human-readable description for the role. Description interface{} // The names of the permissions this role grants when bound in an IAM policy. At least one permission must be specified. Permissions interface{} // The project that the service account will be created in. // Defaults to the provider project configuration. Project interface{} // The role id to use for this role. RoleId interface{} // The current launch stage of the role. // Defaults to `GA`. // List of possible stages is [here](https://cloud.google.com/iam/reference/rest/v1/organizations.roles#Role.RoleLaunchStage). Stage interface{} // A human-readable title for the role. Title interface{} }
The set of arguments for constructing a IAMCustomRole resource.
type IAMCustomRoleState ¶
type IAMCustomRoleState struct { // (Optional) The current deleted state of the role. Deleted interface{} // A human-readable description for the role. Description interface{} // The names of the permissions this role grants when bound in an IAM policy. At least one permission must be specified. Permissions interface{} // The project that the service account will be created in. // Defaults to the provider project configuration. Project interface{} // The role id to use for this role. RoleId interface{} // The current launch stage of the role. // Defaults to `GA`. // List of possible stages is [here](https://cloud.google.com/iam/reference/rest/v1/organizations.roles#Role.RoleLaunchStage). Stage interface{} // A human-readable title for the role. Title interface{} }
Input properties used for looking up and filtering IAMCustomRole resources.
type IAMMember ¶
type IAMMember struct {
// contains filtered or unexported fields
}
Three different resources help you manage your IAM policy for a project. Each of these resources serves a different use case:
* `google_project_iam_policy`: Authoritative. Sets the IAM policy for the project and replaces any existing policy already attached. * `google_project_iam_binding`: Authoritative for a given role. Updates the IAM policy to grant a role to a list of members. Other roles within the IAM policy for the project are preserved. * `google_project_iam_member`: Non-authoritative. Updates the IAM policy to grant a role to a new member. Other members for the role for the project are preserved.
> **Note:** `google_project_iam_policy` **cannot** be used in conjunction with `google_project_iam_binding` and `google_project_iam_member` or they will fight over what your policy should be.
> **Note:** `google_project_iam_binding` resources **can be** used in conjunction with `google_project_iam_member` resources **only if** they do not grant privilege to the same role.
func GetIAMMember ¶
func GetIAMMember(ctx *pulumi.Context, name string, id pulumi.ID, state *IAMMemberState, opts ...pulumi.ResourceOpt) (*IAMMember, error)
GetIAMMember gets an existing IAMMember resource's state with the given name, ID, and optional state properties that are used to uniquely qualify the lookup (nil if not required).
func NewIAMMember ¶
func NewIAMMember(ctx *pulumi.Context, name string, args *IAMMemberArgs, opts ...pulumi.ResourceOpt) (*IAMMember, error)
NewIAMMember registers a new resource with the given unique name, arguments, and options.
func (*IAMMember) Etag ¶
func (r *IAMMember) Etag() *pulumi.StringOutput
(Computed) The etag of the project's IAM policy.
func (*IAMMember) Member ¶
func (r *IAMMember) Member() *pulumi.StringOutput
func (*IAMMember) Project ¶
func (r *IAMMember) Project() *pulumi.StringOutput
The project ID. If not specified for `google_project_iam_binding` or `google_project_iam_member`, uses the ID of the project configured with the provider. Required for `google_project_iam_policy` - you must explicitly set the project, and it will not be inferred from the provider.
func (*IAMMember) Role ¶
func (r *IAMMember) Role() *pulumi.StringOutput
The role that should be applied. Only one `google_project_iam_binding` can be used per role. Note that custom roles must be of the format `[projects|organizations]/{parent-name}/roles/{role-name}`.
type IAMMemberArgs ¶
type IAMMemberArgs struct { Member interface{} // The project ID. If not specified for `google_project_iam_binding` // or `google_project_iam_member`, uses the ID of the project configured with the provider. // Required for `google_project_iam_policy` - you must explicitly set the project, and it // will not be inferred from the provider. Project interface{} // The role that should be applied. Only one // `google_project_iam_binding` can be used per role. Note that custom roles must be of the format // `[projects|organizations]/{parent-name}/roles/{role-name}`. Role interface{} }
The set of arguments for constructing a IAMMember resource.
type IAMMemberState ¶
type IAMMemberState struct { // (Computed) The etag of the project's IAM policy. Etag interface{} Member interface{} // The project ID. If not specified for `google_project_iam_binding` // or `google_project_iam_member`, uses the ID of the project configured with the provider. // Required for `google_project_iam_policy` - you must explicitly set the project, and it // will not be inferred from the provider. Project interface{} // The role that should be applied. Only one // `google_project_iam_binding` can be used per role. Note that custom roles must be of the format // `[projects|organizations]/{parent-name}/roles/{role-name}`. Role interface{} }
Input properties used for looking up and filtering IAMMember resources.
type IAMPolicy ¶
type IAMPolicy struct {
// contains filtered or unexported fields
}
Three different resources help you manage your IAM policy for a project. Each of these resources serves a different use case:
* `google_project_iam_policy`: Authoritative. Sets the IAM policy for the project and replaces any existing policy already attached. * `google_project_iam_binding`: Authoritative for a given role. Updates the IAM policy to grant a role to a list of members. Other roles within the IAM policy for the project are preserved. * `google_project_iam_member`: Non-authoritative. Updates the IAM policy to grant a role to a new member. Other members for the role for the project are preserved.
> **Note:** `google_project_iam_policy` **cannot** be used in conjunction with `google_project_iam_binding` and `google_project_iam_member` or they will fight over what your policy should be.
> **Note:** `google_project_iam_binding` resources **can be** used in conjunction with `google_project_iam_member` resources **only if** they do not grant privilege to the same role.
func GetIAMPolicy ¶
func GetIAMPolicy(ctx *pulumi.Context, name string, id pulumi.ID, state *IAMPolicyState, opts ...pulumi.ResourceOpt) (*IAMPolicy, error)
GetIAMPolicy gets an existing IAMPolicy resource's state with the given name, ID, and optional state properties that are used to uniquely qualify the lookup (nil if not required).
func NewIAMPolicy ¶
func NewIAMPolicy(ctx *pulumi.Context, name string, args *IAMPolicyArgs, opts ...pulumi.ResourceOpt) (*IAMPolicy, error)
NewIAMPolicy registers a new resource with the given unique name, arguments, and options.
func (*IAMPolicy) Etag ¶
func (r *IAMPolicy) Etag() *pulumi.StringOutput
(Computed) The etag of the project's IAM policy.
func (*IAMPolicy) PolicyData ¶
func (r *IAMPolicy) PolicyData() *pulumi.StringOutput
The `google_iam_policy` data source that represents the IAM policy that will be applied to the project. The policy will be merged with any existing policy applied to the project.
func (*IAMPolicy) Project ¶
func (r *IAMPolicy) Project() *pulumi.StringOutput
The project ID. If not specified for `google_project_iam_binding` or `google_project_iam_member`, uses the ID of the project configured with the provider. Required for `google_project_iam_policy` - you must explicitly set the project, and it will not be inferred from the provider.
type IAMPolicyArgs ¶
type IAMPolicyArgs struct { // The `google_iam_policy` data source that represents // the IAM policy that will be applied to the project. The policy will be // merged with any existing policy applied to the project. PolicyData interface{} // The project ID. If not specified for `google_project_iam_binding` // or `google_project_iam_member`, uses the ID of the project configured with the provider. // Required for `google_project_iam_policy` - you must explicitly set the project, and it // will not be inferred from the provider. Project interface{} }
The set of arguments for constructing a IAMPolicy resource.
type IAMPolicyState ¶
type IAMPolicyState struct { // (Computed) The etag of the project's IAM policy. Etag interface{} // The `google_iam_policy` data source that represents // the IAM policy that will be applied to the project. The policy will be // merged with any existing policy applied to the project. PolicyData interface{} // The project ID. If not specified for `google_project_iam_binding` // or `google_project_iam_member`, uses the ID of the project configured with the provider. // Required for `google_project_iam_policy` - you must explicitly set the project, and it // will not be inferred from the provider. Project interface{} }
Input properties used for looking up and filtering IAMPolicy resources.
type OrganizationPolicy ¶ added in v0.15.0
type OrganizationPolicy struct {
// contains filtered or unexported fields
}
Allows management of Organization policies for a Google Project. For more information see [the official documentation](https://cloud.google.com/resource-manager/docs/organization-policy/overview) and [API](https://cloud.google.com/resource-manager/reference/rest/v1/projects/setOrgPolicy).
func GetOrganizationPolicy ¶ added in v0.15.0
func GetOrganizationPolicy(ctx *pulumi.Context, name string, id pulumi.ID, state *OrganizationPolicyState, opts ...pulumi.ResourceOpt) (*OrganizationPolicy, error)
GetOrganizationPolicy gets an existing OrganizationPolicy resource's state with the given name, ID, and optional state properties that are used to uniquely qualify the lookup (nil if not required).
func NewOrganizationPolicy ¶ added in v0.15.0
func NewOrganizationPolicy(ctx *pulumi.Context, name string, args *OrganizationPolicyArgs, opts ...pulumi.ResourceOpt) (*OrganizationPolicy, error)
NewOrganizationPolicy registers a new resource with the given unique name, arguments, and options.
func (*OrganizationPolicy) BooleanPolicy ¶ added in v0.15.0
func (r *OrganizationPolicy) BooleanPolicy() *pulumi.Output
A boolean policy is a constraint that is either enforced or not. Structure is documented below.
func (*OrganizationPolicy) Constraint ¶ added in v0.15.0
func (r *OrganizationPolicy) Constraint() *pulumi.StringOutput
The name of the Constraint the Policy is configuring, for example, `serviceuser.services`. Check out the [complete list of available constraints](https://cloud.google.com/resource-manager/docs/organization-policy/understanding-constraints#available_constraints).
func (*OrganizationPolicy) Etag ¶ added in v0.15.0
func (r *OrganizationPolicy) Etag() *pulumi.StringOutput
(Computed) The etag of the organization policy. `etag` is used for optimistic concurrency control as a way to help prevent simultaneous updates of a policy from overwriting each other.
func (*OrganizationPolicy) ID ¶ added in v0.15.0
func (r *OrganizationPolicy) ID() *pulumi.IDOutput
ID is this resource's unique identifier assigned by its provider.
func (*OrganizationPolicy) ListPolicy ¶ added in v0.15.0
func (r *OrganizationPolicy) ListPolicy() *pulumi.Output
A policy that can define specific values that are allowed or denied for the given constraint. It can also be used to allow or deny all values. Structure is documented below.
func (*OrganizationPolicy) Project ¶ added in v0.15.0
func (r *OrganizationPolicy) Project() *pulumi.StringOutput
The project id of the project to set the policy for.
func (*OrganizationPolicy) RestorePolicy ¶ added in v0.15.0
func (r *OrganizationPolicy) RestorePolicy() *pulumi.Output
A restore policy is a constraint to restore the default policy. Structure is documented below.
func (*OrganizationPolicy) URN ¶ added in v0.15.0
func (r *OrganizationPolicy) URN() *pulumi.URNOutput
URN is this resource's unique name assigned by Pulumi.
func (*OrganizationPolicy) UpdateTime ¶ added in v0.15.0
func (r *OrganizationPolicy) UpdateTime() *pulumi.StringOutput
(Computed) The timestamp in RFC3339 UTC "Zulu" format, accurate to nanoseconds, representing when the variable was last updated. Example: "2016-10-09T12:33:37.578138407Z".
func (*OrganizationPolicy) Version ¶ added in v0.15.0
func (r *OrganizationPolicy) Version() *pulumi.IntOutput
Version of the Policy. Default version is 0.
type OrganizationPolicyArgs ¶ added in v0.15.0
type OrganizationPolicyArgs struct { // A boolean policy is a constraint that is either enforced or not. Structure is documented below. BooleanPolicy interface{} // The name of the Constraint the Policy is configuring, for example, `serviceuser.services`. Check out the [complete list of available constraints](https://cloud.google.com/resource-manager/docs/organization-policy/understanding-constraints#available_constraints). Constraint interface{} // A policy that can define specific values that are allowed or denied for the given constraint. It can also be used to allow or deny all values. Structure is documented below. ListPolicy interface{} // The project id of the project to set the policy for. Project interface{} // A restore policy is a constraint to restore the default policy. Structure is documented below. RestorePolicy interface{} // Version of the Policy. Default version is 0. Version interface{} }
The set of arguments for constructing a OrganizationPolicy resource.
type OrganizationPolicyState ¶ added in v0.15.0
type OrganizationPolicyState struct { // A boolean policy is a constraint that is either enforced or not. Structure is documented below. BooleanPolicy interface{} // The name of the Constraint the Policy is configuring, for example, `serviceuser.services`. Check out the [complete list of available constraints](https://cloud.google.com/resource-manager/docs/organization-policy/understanding-constraints#available_constraints). Constraint interface{} // (Computed) The etag of the organization policy. `etag` is used for optimistic concurrency control as a way to help prevent simultaneous updates of a policy from overwriting each other. Etag interface{} // A policy that can define specific values that are allowed or denied for the given constraint. It can also be used to allow or deny all values. Structure is documented below. ListPolicy interface{} // The project id of the project to set the policy for. Project interface{} // A restore policy is a constraint to restore the default policy. Structure is documented below. RestorePolicy interface{} // (Computed) The timestamp in RFC3339 UTC "Zulu" format, accurate to nanoseconds, representing when the variable was last updated. Example: "2016-10-09T12:33:37.578138407Z". UpdateTime interface{} // Version of the Policy. Default version is 0. Version interface{} }
Input properties used for looking up and filtering OrganizationPolicy resources.
type Service ¶
type Service struct {
// contains filtered or unexported fields
}
Allows management of a single API service for an existing Google Cloud Platform project.
For a list of services available, visit the [API library page](https://console.cloud.google.com/apis/library) or run `gcloud services list`.
> **Note:** This resource _must not_ be used in conjunction with
`google_project_services` or they will fight over which services should be enabled.
func GetService ¶
func GetService(ctx *pulumi.Context, name string, id pulumi.ID, state *ServiceState, opts ...pulumi.ResourceOpt) (*Service, error)
GetService gets an existing Service resource's state with the given name, ID, and optional state properties that are used to uniquely qualify the lookup (nil if not required).
func NewService ¶
func NewService(ctx *pulumi.Context, name string, args *ServiceArgs, opts ...pulumi.ResourceOpt) (*Service, error)
NewService registers a new resource with the given unique name, arguments, and options.
func (*Service) DisableDependentServices ¶ added in v0.18.0
func (r *Service) DisableDependentServices() *pulumi.BoolOutput
If `true`, services that are enabled and which depend on this service should also be disabled when this service is destroyed. If `false` or unset, an error will be generated if any enabled services depend on this service when destroying it.
func (*Service) DisableOnDestroy ¶
func (r *Service) DisableOnDestroy() *pulumi.BoolOutput
If true, disable the service when the terraform resource is destroyed. Defaults to true. May be useful in the event that a project is long-lived but the infrastructure running in that project changes frequently.
func (*Service) Project ¶
func (r *Service) Project() *pulumi.StringOutput
The project ID. If not provided, the provider project is used.
type ServiceArgs ¶
type ServiceArgs struct { // If `true`, services that are enabled and which depend on this service should also be disabled when this service is destroyed. // If `false` or unset, an error will be generated if any enabled services depend on this service when destroying it. DisableDependentServices interface{} // If true, disable the service when the terraform resource is destroyed. Defaults to true. May be useful in the event that a project is long-lived but the infrastructure running in that project changes frequently. DisableOnDestroy interface{} // The project ID. If not provided, the provider project is used. Project interface{} // The service to enable. Service interface{} }
The set of arguments for constructing a Service resource.
type ServiceState ¶
type ServiceState struct { // If `true`, services that are enabled and which depend on this service should also be disabled when this service is destroyed. // If `false` or unset, an error will be generated if any enabled services depend on this service when destroying it. DisableDependentServices interface{} // If true, disable the service when the terraform resource is destroyed. Defaults to true. May be useful in the event that a project is long-lived but the infrastructure running in that project changes frequently. DisableOnDestroy interface{} // The project ID. If not provided, the provider project is used. Project interface{} // The service to enable. Service interface{} }
Input properties used for looking up and filtering Service resources.
type Services ¶
type Services struct {
// contains filtered or unexported fields
}
Allows management of enabled API services for an existing Google Cloud Platform project. Services in an existing project that are not defined in the config will be removed.
For a list of services available, visit the [API library page](https://console.cloud.google.com/apis/library) or run `gcloud services list`.
> **Note:** This resource attempts to be the authoritative source on *all* enabled APIs, which often
leads to conflicts when certain actions enable other APIs. If you do not need to ensure that *exclusively* a particular set of APIs are enabled, you should most likely use the google_project_service resource, one resource per API.
func GetServices ¶
func GetServices(ctx *pulumi.Context, name string, id pulumi.ID, state *ServicesState, opts ...pulumi.ResourceOpt) (*Services, error)
GetServices gets an existing Services resource's state with the given name, ID, and optional state properties that are used to uniquely qualify the lookup (nil if not required).
func NewServices ¶
func NewServices(ctx *pulumi.Context, name string, args *ServicesArgs, opts ...pulumi.ResourceOpt) (*Services, error)
NewServices registers a new resource with the given unique name, arguments, and options.
func (*Services) DisableOnDestroy ¶
func (r *Services) DisableOnDestroy() *pulumi.BoolOutput
func (*Services) Project ¶
func (r *Services) Project() *pulumi.StringOutput
The project ID. Changing this forces Terraform to attempt to disable all previously managed API services in the previous project.
func (*Services) Services ¶
func (r *Services) Services() *pulumi.ArrayOutput
The list of services that are enabled. Supports update.
type ServicesArgs ¶
type ServicesArgs struct { DisableOnDestroy interface{} // The project ID. // Changing this forces Terraform to attempt to disable all previously managed // API services in the previous project. Project interface{} // The list of services that are enabled. Supports // update. Services interface{} }
The set of arguments for constructing a Services resource.
type ServicesState ¶
type ServicesState struct { DisableOnDestroy interface{} // The project ID. // Changing this forces Terraform to attempt to disable all previously managed // API services in the previous project. Project interface{} // The list of services that are enabled. Supports // update. Services interface{} }
Input properties used for looking up and filtering Services resources.
type UsageExportBucket ¶
type UsageExportBucket struct {
// contains filtered or unexported fields
}
Allows creation and management of a Google Cloud Platform project.
Projects created with this resource must be associated with an Organization. See the [Organization documentation](https://cloud.google.com/resource-manager/docs/quickstarts) for more details.
The service account used to run Terraform when creating a `google_project` resource must have `roles/resourcemanager.projectCreator`. See the [Access Control for Organizations Using IAM](https://cloud.google.com/resource-manager/docs/access-control-org) doc for more information.
Note that prior to 0.8.5, `google_project` functioned like a data source, meaning any project referenced by it had to be created and managed outside Terraform. As of 0.8.5, `google_project` functions like any other Terraform resource, with Terraform creating and managing the project. To replicate the old behavior, either:
- Use the project ID directly in whatever is referencing the project, using the [google_project_iam_policy](https://www.terraform.io/docs/providers/google/r/google_project_iam.html) to replace the old `policy_data` property.
- Use the [import](https://www.terraform.io/docs/import/usage.html) functionality to import your pre-existing project into Terraform, where it can be referenced and used just like always, keeping in mind that Terraform will attempt to undo any changes made outside Terraform.
> It's important to note that any project resources that were added to your Terraform config prior to 0.8.5 will continue to function as they always have, and will not be managed by Terraform. Only newly added projects are affected.
func GetUsageExportBucket ¶
func GetUsageExportBucket(ctx *pulumi.Context, name string, id pulumi.ID, state *UsageExportBucketState, opts ...pulumi.ResourceOpt) (*UsageExportBucket, error)
GetUsageExportBucket gets an existing UsageExportBucket resource's state with the given name, ID, and optional state properties that are used to uniquely qualify the lookup (nil if not required).
func NewUsageExportBucket ¶
func NewUsageExportBucket(ctx *pulumi.Context, name string, args *UsageExportBucketArgs, opts ...pulumi.ResourceOpt) (*UsageExportBucket, error)
NewUsageExportBucket registers a new resource with the given unique name, arguments, and options.
func (*UsageExportBucket) BucketName ¶
func (r *UsageExportBucket) BucketName() *pulumi.StringOutput
func (*UsageExportBucket) ID ¶
func (r *UsageExportBucket) ID() *pulumi.IDOutput
ID is this resource's unique identifier assigned by its provider.
func (*UsageExportBucket) Prefix ¶
func (r *UsageExportBucket) Prefix() *pulumi.StringOutput
func (*UsageExportBucket) Project ¶
func (r *UsageExportBucket) Project() *pulumi.StringOutput
func (*UsageExportBucket) URN ¶
func (r *UsageExportBucket) URN() *pulumi.URNOutput
URN is this resource's unique name assigned by Pulumi.
type UsageExportBucketArgs ¶
type UsageExportBucketArgs struct { BucketName interface{} Prefix interface{} Project interface{} }
The set of arguments for constructing a UsageExportBucket resource.
type UsageExportBucketState ¶
type UsageExportBucketState struct { BucketName interface{} Prefix interface{} Project interface{} }
Input properties used for looking up and filtering UsageExportBucket resources.