v1

package
v0.32.0 Latest Latest
Warning

This package is not in the latest version of its module.

 Go to latest Published: Nov 29, 2023 License: Apache-2.0 Imports: 8 Imported by: 0

Documentation

Index

Constants

This section is empty.

Variables

This section is empty.

Functions

This section is empty.

Types

type Api 

type Api struct {
	pulumi.CustomResourceState

	// Annotations attach non-identifying metadata to resources. Annotation keys and values are less restricted than those of labels, but should be generally used for small values of broad interest. Larger, topic- specific metadata should be stored in Artifacts.
	Annotations pulumi.StringMapOutput `pulumi:"annotations"`
	// Required. The ID to use for the API, which will become the final component of the API's resource name. This value should be 4-63 characters, and valid characters are /a-z-/. Following AIP-162, IDs must not have the form of a UUID.
	ApiId pulumi.StringOutput `pulumi:"apiId"`
	// A user-definable description of the availability of this service. Format: free-form, but we expect single words that describe availability, e.g., "NONE", "TESTING", "PREVIEW", "GENERAL", "DEPRECATED", "SHUTDOWN".
	Availability pulumi.StringOutput `pulumi:"availability"`
	// Creation timestamp.
	CreateTime pulumi.StringOutput `pulumi:"createTime"`
	// A detailed description.
	Description pulumi.StringOutput `pulumi:"description"`
	// Human-meaningful name.
	DisplayName pulumi.StringOutput `pulumi:"displayName"`
	// Labels attach identifying metadata to resources. Identifying metadata can be used to filter list operations. Label keys and values can be no longer than 64 characters (Unicode codepoints), can only contain lowercase letters, numeric characters, underscores, and dashes. International characters are allowed. No more than 64 user labels can be associated with one resource (System labels are excluded). See https://goo.gl/xmQnxf for more information and examples of labels. System reserved label keys are prefixed with `apigeeregistry.googleapis.com/` and cannot be changed.
	Labels   pulumi.StringMapOutput `pulumi:"labels"`
	Location pulumi.StringOutput    `pulumi:"location"`
	// Resource name.
	Name    pulumi.StringOutput `pulumi:"name"`
	Project pulumi.StringOutput `pulumi:"project"`
	// The recommended deployment of the API. Format: `projects/{project}/locations/{location}/apis/{api}/deployments/{deployment}`
	RecommendedDeployment pulumi.StringOutput `pulumi:"recommendedDeployment"`
	// The recommended version of the API. Format: `projects/{project}/locations/{location}/apis/{api}/versions/{version}`
	RecommendedVersion pulumi.StringOutput `pulumi:"recommendedVersion"`
	// Last update timestamp.
	UpdateTime pulumi.StringOutput `pulumi:"updateTime"`
}

Creates a specified API.

func GetApi 

func GetApi(ctx *pulumi.Context,
	name string, id pulumi.IDInput, state *ApiState, opts ...pulumi.ResourceOption) (*Api, error)

GetApi gets an existing Api resource's state with the given name, ID, and optional state properties that are used to uniquely qualify the lookup (nil if not required).

func NewApi 

func NewApi(ctx *pulumi.Context,
	name string, args *ApiArgs, opts ...pulumi.ResourceOption) (*Api, error)

NewApi registers a new resource with the given unique name, arguments, and options.

func (*Api) ElementType 

func (*Api) ElementType() reflect.Type

func (*Api) ToApiOutput 

func (i *Api) ToApiOutput() ApiOutput

func (*Api) ToApiOutputWithContext 

func (i *Api) ToApiOutputWithContext(ctx context.Context) ApiOutput

type ApiArgs 

type ApiArgs struct {
	// Annotations attach non-identifying metadata to resources. Annotation keys and values are less restricted than those of labels, but should be generally used for small values of broad interest. Larger, topic- specific metadata should be stored in Artifacts.
	Annotations pulumi.StringMapInput
	// Required. The ID to use for the API, which will become the final component of the API's resource name. This value should be 4-63 characters, and valid characters are /a-z-/. Following AIP-162, IDs must not have the form of a UUID.
	ApiId pulumi.StringInput
	// A user-definable description of the availability of this service. Format: free-form, but we expect single words that describe availability, e.g., "NONE", "TESTING", "PREVIEW", "GENERAL", "DEPRECATED", "SHUTDOWN".
	Availability pulumi.StringPtrInput
	// A detailed description.
	Description pulumi.StringPtrInput
	// Human-meaningful name.
	DisplayName pulumi.StringPtrInput
	// Labels attach identifying metadata to resources. Identifying metadata can be used to filter list operations. Label keys and values can be no longer than 64 characters (Unicode codepoints), can only contain lowercase letters, numeric characters, underscores, and dashes. International characters are allowed. No more than 64 user labels can be associated with one resource (System labels are excluded). See https://goo.gl/xmQnxf for more information and examples of labels. System reserved label keys are prefixed with `apigeeregistry.googleapis.com/` and cannot be changed.
	Labels   pulumi.StringMapInput
	Location pulumi.StringPtrInput
	// Resource name.
	Name    pulumi.StringPtrInput
	Project pulumi.StringPtrInput
	// The recommended deployment of the API. Format: `projects/{project}/locations/{location}/apis/{api}/deployments/{deployment}`
	RecommendedDeployment pulumi.StringPtrInput
	// The recommended version of the API. Format: `projects/{project}/locations/{location}/apis/{api}/versions/{version}`
	RecommendedVersion pulumi.StringPtrInput
}

The set of arguments for constructing a Api resource.

func (ApiArgs) ElementType 

func (ApiArgs) ElementType() reflect.Type

type ApiArtifactIamBinding added in v0.26.0 

type ApiArtifactIamBinding struct {
	pulumi.CustomResourceState

	// An IAM Condition for a given binding. See https://cloud.google.com/iam/docs/conditions-overview for additional details.
	Condition iam.ConditionPtrOutput `pulumi:"condition"`
	// The etag of the resource's IAM policy.
	Etag pulumi.StringOutput `pulumi:"etag"`
	// Specifies the principals requesting access for a Google Cloud resource. `members` can have the following values: * `allUsers`: A special identifier that represents anyone who is on the internet; with or without a Google account. * `allAuthenticatedUsers`: A special identifier that represents anyone who is authenticated with a Google account or a service account. Does not include identities that come from external identity providers (IdPs) through identity federation. * `user:{emailid}`: An email address that represents a specific Google account. For example, `alice@example.com` . * `serviceAccount:{emailid}`: An email address that represents a Google service account. For example, `my-other-app@appspot.gserviceaccount.com`. * `serviceAccount:{projectid}.svc.id.goog[{namespace}/{kubernetes-sa}]`: An identifier for a [Kubernetes service account](https://cloud.google.com/kubernetes-engine/docs/how-to/kubernetes-service-accounts). For example, `my-project.svc.id.goog[my-namespace/my-kubernetes-sa]`. * `group:{emailid}`: An email address that represents a Google group. For example, `admins@example.com`. * `domain:{domain}`: The G Suite domain (primary) that represents all the users of that domain. For example, `google.com` or `example.com`. * `deleted:user:{emailid}?uid={uniqueid}`: An email address (plus unique identifier) representing a user that has been recently deleted. For example, `alice@example.com?uid=123456789012345678901`. If the user is recovered, this value reverts to `user:{emailid}` and the recovered user retains the role in the binding. * `deleted:serviceAccount:{emailid}?uid={uniqueid}`: An email address (plus unique identifier) representing a service account that has been recently deleted. For example, `my-other-app@appspot.gserviceaccount.com?uid=123456789012345678901`. If the service account is undeleted, this value reverts to `serviceAccount:{emailid}` and the undeleted service account retains the role in the binding. * `deleted:group:{emailid}?uid={uniqueid}`: An email address (plus unique identifier) representing a Google group that has been recently deleted. For example, `admins@example.com?uid=123456789012345678901`. If the group is recovered, this value reverts to `group:{emailid}` and the recovered group retains the role in the binding.
	Members pulumi.StringArrayOutput `pulumi:"members"`
	// The name of the resource to manage IAM policies for.
	Name pulumi.StringOutput `pulumi:"name"`
	// The project in which the resource belongs. If it is not provided, a default will be supplied.
	Project pulumi.StringOutput `pulumi:"project"`
	// Role that is assigned to the list of `members`, or principals. For example, `roles/viewer`, `roles/editor`, or `roles/owner`.
	Role pulumi.StringOutput `pulumi:"role"`
}

Sets the access control policy on the specified resource. Replaces any existing policy. Can return `NOT_FOUND`, `INVALID_ARGUMENT`, and `PERMISSION_DENIED` errors.

func GetApiArtifactIamBinding added in v0.26.0 

func GetApiArtifactIamBinding(ctx *pulumi.Context,
	name string, id pulumi.IDInput, state *ApiArtifactIamBindingState, opts ...pulumi.ResourceOption) (*ApiArtifactIamBinding, error)

GetApiArtifactIamBinding gets an existing ApiArtifactIamBinding resource's state with the given name, ID, and optional state properties that are used to uniquely qualify the lookup (nil if not required).

func NewApiArtifactIamBinding added in v0.26.0 

func NewApiArtifactIamBinding(ctx *pulumi.Context,
	name string, args *ApiArtifactIamBindingArgs, opts ...pulumi.ResourceOption) (*ApiArtifactIamBinding, error)

NewApiArtifactIamBinding registers a new resource with the given unique name, arguments, and options.

func (*ApiArtifactIamBinding) ElementType added in v0.26.0 

func (*ApiArtifactIamBinding) ElementType() reflect.Type

func (*ApiArtifactIamBinding) ToApiArtifactIamBindingOutput added in v0.26.0 

func (i *ApiArtifactIamBinding) ToApiArtifactIamBindingOutput() ApiArtifactIamBindingOutput

func (*ApiArtifactIamBinding) ToApiArtifactIamBindingOutputWithContext added in v0.26.0 

func (i *ApiArtifactIamBinding) ToApiArtifactIamBindingOutputWithContext(ctx context.Context) ApiArtifactIamBindingOutput

type ApiArtifactIamBindingArgs added in v0.26.0 

type ApiArtifactIamBindingArgs struct {
	// An IAM Condition for a given binding.
	Condition iam.ConditionPtrInput
	// Identities that will be granted the privilege in role. Each entry can have one of the following values:
	//
	//  * user:{emailid}: An email address that represents a specific Google account. For example, alice@gmail.com or joe@example.com.
	//  * serviceAccount:{emailid}: An email address that represents a service account. For example, my-other-app@appspot.gserviceaccount.com.
	//  * group:{emailid}: An email address that represents a Google group. For example, admins@example.com.
	//  * domain:{domain}: A G Suite domain (primary, instead of alias) name that represents all the users of that domain. For example, google.com or example.com.
	Members pulumi.StringArrayInput
	// The name of the resource to manage IAM policies for.
	Name pulumi.StringInput
	// The role that should be applied. Only one `IamBinding` can be used per role.
	Role pulumi.StringInput
}

The set of arguments for constructing a ApiArtifactIamBinding resource.

func (ApiArtifactIamBindingArgs) ElementType added in v0.26.0 

func (ApiArtifactIamBindingArgs) ElementType() reflect.Type

type ApiArtifactIamBindingInput added in v0.26.0 

type ApiArtifactIamBindingInput interface {
	pulumi.Input

	ToApiArtifactIamBindingOutput() ApiArtifactIamBindingOutput
	ToApiArtifactIamBindingOutputWithContext(ctx context.Context) ApiArtifactIamBindingOutput
}

type ApiArtifactIamBindingOutput added in v0.26.0 

type ApiArtifactIamBindingOutput struct{ *pulumi.OutputState }

func (ApiArtifactIamBindingOutput) Condition added in v0.26.0 

func (o ApiArtifactIamBindingOutput) Condition() iam.ConditionPtrOutput

An IAM Condition for a given binding. See https://cloud.google.com/iam/docs/conditions-overview for additional details.

func (ApiArtifactIamBindingOutput) ElementType added in v0.26.0 

func (ApiArtifactIamBindingOutput) ElementType() reflect.Type

func (ApiArtifactIamBindingOutput) Etag added in v0.26.0 

func (o ApiArtifactIamBindingOutput) Etag() pulumi.StringOutput

The etag of the resource's IAM policy.

func (ApiArtifactIamBindingOutput) Members added in v0.26.0 

func (o ApiArtifactIamBindingOutput) Members() pulumi.StringArrayOutput

Specifies the principals requesting access for a Google Cloud resource. `members` can have the following values: * `allUsers`: A special identifier that represents anyone who is on the internet; with or without a Google account. * `allAuthenticatedUsers`: A special identifier that represents anyone who is authenticated with a Google account or a service account. Does not include identities that come from external identity providers (IdPs) through identity federation. * `user:{emailid}`: An email address that represents a specific Google account. For example, `alice@example.com` . * `serviceAccount:{emailid}`: An email address that represents a Google service account. For example, `my-other-app@appspot.gserviceaccount.com`. * `serviceAccount:{projectid}.svc.id.goog[{namespace}/{kubernetes-sa}]`: An identifier for a [Kubernetes service account](https://cloud.google.com/kubernetes-engine/docs/how-to/kubernetes-service-accounts). For example, `my-project.svc.id.goog[my-namespace/my-kubernetes-sa]`. * `group:{emailid}`: An email address that represents a Google group. For example, `admins@example.com`. * `domain:{domain}`: The G Suite domain (primary) that represents all the users of that domain. For example, `google.com` or `example.com`. * `deleted:user:{emailid}?uid={uniqueid}`: An email address (plus unique identifier) representing a user that has been recently deleted. For example, `alice@example.com?uid=123456789012345678901`. If the user is recovered, this value reverts to `user:{emailid}` and the recovered user retains the role in the binding. * `deleted:serviceAccount:{emailid}?uid={uniqueid}`: An email address (plus unique identifier) representing a service account that has been recently deleted. For example, `my-other-app@appspot.gserviceaccount.com?uid=123456789012345678901`. If the service account is undeleted, this value reverts to `serviceAccount:{emailid}` and the undeleted service account retains the role in the binding. * `deleted:group:{emailid}?uid={uniqueid}`: An email address (plus unique identifier) representing a Google group that has been recently deleted. For example, `admins@example.com?uid=123456789012345678901`. If the group is recovered, this value reverts to `group:{emailid}` and the recovered group retains the role in the binding.

func (ApiArtifactIamBindingOutput) Name added in v0.26.0 

func (o ApiArtifactIamBindingOutput) Name() pulumi.StringOutput

The name of the resource to manage IAM policies for.

func (ApiArtifactIamBindingOutput) Project added in v0.26.0 

func (o ApiArtifactIamBindingOutput) Project() pulumi.StringOutput

The project in which the resource belongs. If it is not provided, a default will be supplied.

func (ApiArtifactIamBindingOutput) Role added in v0.26.0 

func (o ApiArtifactIamBindingOutput) Role() pulumi.StringOutput

Role that is assigned to the list of `members`, or principals. For example, `roles/viewer`, `roles/editor`, or `roles/owner`.

func (ApiArtifactIamBindingOutput) ToApiArtifactIamBindingOutput added in v0.26.0 

func (o ApiArtifactIamBindingOutput) ToApiArtifactIamBindingOutput() ApiArtifactIamBindingOutput

func (ApiArtifactIamBindingOutput) ToApiArtifactIamBindingOutputWithContext added in v0.26.0 

func (o ApiArtifactIamBindingOutput) ToApiArtifactIamBindingOutputWithContext(ctx context.Context) ApiArtifactIamBindingOutput

type ApiArtifactIamBindingState added in v0.26.0 

type ApiArtifactIamBindingState struct {
}

func (ApiArtifactIamBindingState) ElementType added in v0.26.0 

func (ApiArtifactIamBindingState) ElementType() reflect.Type

type ApiArtifactIamMember added in v0.26.0 

type ApiArtifactIamMember struct {
	pulumi.CustomResourceState

	// An IAM Condition for a given binding. See https://cloud.google.com/iam/docs/conditions-overview for additional details.
	Condition iam.ConditionPtrOutput `pulumi:"condition"`
	// The etag of the resource's IAM policy.
	Etag pulumi.StringOutput `pulumi:"etag"`
	// Specifies the principals requesting access for a Google Cloud resource. `members` can have the following values: * `allUsers`: A special identifier that represents anyone who is on the internet; with or without a Google account. * `allAuthenticatedUsers`: A special identifier that represents anyone who is authenticated with a Google account or a service account. Does not include identities that come from external identity providers (IdPs) through identity federation. * `user:{emailid}`: An email address that represents a specific Google account. For example, `alice@example.com` . * `serviceAccount:{emailid}`: An email address that represents a Google service account. For example, `my-other-app@appspot.gserviceaccount.com`. * `serviceAccount:{projectid}.svc.id.goog[{namespace}/{kubernetes-sa}]`: An identifier for a [Kubernetes service account](https://cloud.google.com/kubernetes-engine/docs/how-to/kubernetes-service-accounts). For example, `my-project.svc.id.goog[my-namespace/my-kubernetes-sa]`. * `group:{emailid}`: An email address that represents a Google group. For example, `admins@example.com`. * `domain:{domain}`: The G Suite domain (primary) that represents all the users of that domain. For example, `google.com` or `example.com`. * `deleted:user:{emailid}?uid={uniqueid}`: An email address (plus unique identifier) representing a user that has been recently deleted. For example, `alice@example.com?uid=123456789012345678901`. If the user is recovered, this value reverts to `user:{emailid}` and the recovered user retains the role in the binding. * `deleted:serviceAccount:{emailid}?uid={uniqueid}`: An email address (plus unique identifier) representing a service account that has been recently deleted. For example, `my-other-app@appspot.gserviceaccount.com?uid=123456789012345678901`. If the service account is undeleted, this value reverts to `serviceAccount:{emailid}` and the undeleted service account retains the role in the binding. * `deleted:group:{emailid}?uid={uniqueid}`: An email address (plus unique identifier) representing a Google group that has been recently deleted. For example, `admins@example.com?uid=123456789012345678901`. If the group is recovered, this value reverts to `group:{emailid}` and the recovered group retains the role in the binding.
	Member pulumi.StringOutput `pulumi:"member"`
	// The name of the resource to manage IAM policies for.
	Name pulumi.StringOutput `pulumi:"name"`
	// The project in which the resource belongs. If it is not provided, a default will be supplied.
	Project pulumi.StringOutput `pulumi:"project"`
	// Role that is assigned to the list of `members`, or principals. For example, `roles/viewer`, `roles/editor`, or `roles/owner`.
	Role pulumi.StringOutput `pulumi:"role"`
}

Sets the access control policy on the specified resource. Replaces any existing policy. Can return `NOT_FOUND`, `INVALID_ARGUMENT`, and `PERMISSION_DENIED` errors.

func GetApiArtifactIamMember added in v0.26.0 

func GetApiArtifactIamMember(ctx *pulumi.Context,
	name string, id pulumi.IDInput, state *ApiArtifactIamMemberState, opts ...pulumi.ResourceOption) (*ApiArtifactIamMember, error)

GetApiArtifactIamMember gets an existing ApiArtifactIamMember resource's state with the given name, ID, and optional state properties that are used to uniquely qualify the lookup (nil if not required).

func NewApiArtifactIamMember added in v0.26.0 

func NewApiArtifactIamMember(ctx *pulumi.Context,
	name string, args *ApiArtifactIamMemberArgs, opts ...pulumi.ResourceOption) (*ApiArtifactIamMember, error)

NewApiArtifactIamMember registers a new resource with the given unique name, arguments, and options.

func (*ApiArtifactIamMember) ElementType added in v0.26.0 

func (*ApiArtifactIamMember) ElementType() reflect.Type

func (*ApiArtifactIamMember) ToApiArtifactIamMemberOutput added in v0.26.0 

func (i *ApiArtifactIamMember) ToApiArtifactIamMemberOutput() ApiArtifactIamMemberOutput

func (*ApiArtifactIamMember) ToApiArtifactIamMemberOutputWithContext added in v0.26.0 

func (i *ApiArtifactIamMember) ToApiArtifactIamMemberOutputWithContext(ctx context.Context) ApiArtifactIamMemberOutput

type ApiArtifactIamMemberArgs added in v0.26.0 

type ApiArtifactIamMemberArgs struct {
	// An IAM Condition for a given binding.
	Condition iam.ConditionPtrInput
	// Identity that will be granted the privilege in role. The entry can have one of the following values:
	//
	//  * user:{emailid}: An email address that represents a specific Google account. For example, alice@gmail.com or joe@example.com.
	//  * serviceAccount:{emailid}: An email address that represents a service account. For example, my-other-app@appspot.gserviceaccount.com.
	//  * group:{emailid}: An email address that represents a Google group. For example, admins@example.com.
	//  * domain:{domain}: A G Suite domain (primary, instead of alias) name that represents all the users of that domain. For example, google.com or example.com.
	Member pulumi.StringInput
	// The name of the resource to manage IAM policies for.
	Name pulumi.StringInput
	// The role that should be applied.
	Role pulumi.StringInput
}

The set of arguments for constructing a ApiArtifactIamMember resource.

func (ApiArtifactIamMemberArgs) ElementType added in v0.26.0 

func (ApiArtifactIamMemberArgs) ElementType() reflect.Type

type ApiArtifactIamMemberInput added in v0.26.0 

type ApiArtifactIamMemberInput interface {
	pulumi.Input

	ToApiArtifactIamMemberOutput() ApiArtifactIamMemberOutput
	ToApiArtifactIamMemberOutputWithContext(ctx context.Context) ApiArtifactIamMemberOutput
}

type ApiArtifactIamMemberOutput added in v0.26.0 

type ApiArtifactIamMemberOutput struct{ *pulumi.OutputState }

func (ApiArtifactIamMemberOutput) Condition added in v0.26.0 

func (o ApiArtifactIamMemberOutput) Condition() iam.ConditionPtrOutput

An IAM Condition for a given binding. See https://cloud.google.com/iam/docs/conditions-overview for additional details.

func (ApiArtifactIamMemberOutput) ElementType added in v0.26.0 

func (ApiArtifactIamMemberOutput) ElementType() reflect.Type

func (ApiArtifactIamMemberOutput) Etag added in v0.26.0 

func (o ApiArtifactIamMemberOutput) Etag() pulumi.StringOutput

The etag of the resource's IAM policy.

func (ApiArtifactIamMemberOutput) Member added in v0.26.0 

func (o ApiArtifactIamMemberOutput) Member() pulumi.StringOutput

Specifies the principals requesting access for a Google Cloud resource. `members` can have the following values: * `allUsers`: A special identifier that represents anyone who is on the internet; with or without a Google account. * `allAuthenticatedUsers`: A special identifier that represents anyone who is authenticated with a Google account or a service account. Does not include identities that come from external identity providers (IdPs) through identity federation. * `user:{emailid}`: An email address that represents a specific Google account. For example, `alice@example.com` . * `serviceAccount:{emailid}`: An email address that represents a Google service account. For example, `my-other-app@appspot.gserviceaccount.com`. * `serviceAccount:{projectid}.svc.id.goog[{namespace}/{kubernetes-sa}]`: An identifier for a [Kubernetes service account](https://cloud.google.com/kubernetes-engine/docs/how-to/kubernetes-service-accounts). For example, `my-project.svc.id.goog[my-namespace/my-kubernetes-sa]`. * `group:{emailid}`: An email address that represents a Google group. For example, `admins@example.com`. * `domain:{domain}`: The G Suite domain (primary) that represents all the users of that domain. For example, `google.com` or `example.com`. * `deleted:user:{emailid}?uid={uniqueid}`: An email address (plus unique identifier) representing a user that has been recently deleted. For example, `alice@example.com?uid=123456789012345678901`. If the user is recovered, this value reverts to `user:{emailid}` and the recovered user retains the role in the binding. * `deleted:serviceAccount:{emailid}?uid={uniqueid}`: An email address (plus unique identifier) representing a service account that has been recently deleted. For example, `my-other-app@appspot.gserviceaccount.com?uid=123456789012345678901`. If the service account is undeleted, this value reverts to `serviceAccount:{emailid}` and the undeleted service account retains the role in the binding. * `deleted:group:{emailid}?uid={uniqueid}`: An email address (plus unique identifier) representing a Google group that has been recently deleted. For example, `admins@example.com?uid=123456789012345678901`. If the group is recovered, this value reverts to `group:{emailid}` and the recovered group retains the role in the binding.

func (ApiArtifactIamMemberOutput) Name added in v0.26.0 

func (o ApiArtifactIamMemberOutput) Name() pulumi.StringOutput

The name of the resource to manage IAM policies for.

func (ApiArtifactIamMemberOutput) Project added in v0.26.0 

func (o ApiArtifactIamMemberOutput) Project() pulumi.StringOutput

The project in which the resource belongs. If it is not provided, a default will be supplied.

func (ApiArtifactIamMemberOutput) Role added in v0.26.0 

func (o ApiArtifactIamMemberOutput) Role() pulumi.StringOutput

Role that is assigned to the list of `members`, or principals. For example, `roles/viewer`, `roles/editor`, or `roles/owner`.

func (ApiArtifactIamMemberOutput) ToApiArtifactIamMemberOutput added in v0.26.0 

func (o ApiArtifactIamMemberOutput) ToApiArtifactIamMemberOutput() ApiArtifactIamMemberOutput

func (ApiArtifactIamMemberOutput) ToApiArtifactIamMemberOutputWithContext added in v0.26.0 

func (o ApiArtifactIamMemberOutput) ToApiArtifactIamMemberOutputWithContext(ctx context.Context) ApiArtifactIamMemberOutput

type ApiArtifactIamMemberState added in v0.26.0 

type ApiArtifactIamMemberState struct {
}

func (ApiArtifactIamMemberState) ElementType added in v0.26.0 

func (ApiArtifactIamMemberState) ElementType() reflect.Type

type ApiArtifactIamPolicy 

type ApiArtifactIamPolicy struct {
	pulumi.CustomResourceState

	ApiId      pulumi.StringOutput `pulumi:"apiId"`
	ArtifactId pulumi.StringOutput `pulumi:"artifactId"`
	// Associates a list of `members`, or principals, with a `role`. Optionally, may specify a `condition` that determines how and when the `bindings` are applied. Each of the `bindings` must contain at least one principal. The `bindings` in a `Policy` can refer to up to 1,500 principals; up to 250 of these principals can be Google groups. Each occurrence of a principal counts towards these limits. For example, if the `bindings` grant 50 different roles to `user:alice@example.com`, and not to any other principal, then you can add another 1,450 principals to the `bindings` in the `Policy`.
	Bindings BindingResponseArrayOutput `pulumi:"bindings"`
	// `etag` is used for optimistic concurrency control as a way to help prevent simultaneous updates of a policy from overwriting each other. It is strongly suggested that systems make use of the `etag` in the read-modify-write cycle to perform policy updates in order to avoid race conditions: An `etag` is returned in the response to `getIamPolicy`, and systems are expected to put that etag in the request to `setIamPolicy` to ensure that their change will be applied to the same version of the policy. **Important:** If you use IAM Conditions, you must include the `etag` field whenever you call `setIamPolicy`. If you omit this field, then IAM allows you to overwrite a version `3` policy with a version `1` policy, and all of the conditions in the version `3` policy are lost.
	Etag     pulumi.StringOutput `pulumi:"etag"`
	Location pulumi.StringOutput `pulumi:"location"`
	Project  pulumi.StringOutput `pulumi:"project"`
	// Specifies the format of the policy. Valid values are `0`, `1`, and `3`. Requests that specify an invalid value are rejected. Any operation that affects conditional role bindings must specify version `3`. This requirement applies to the following operations: * Getting a policy that includes a conditional role binding * Adding a conditional role binding to a policy * Changing a conditional role binding in a policy * Removing any role binding, with or without a condition, from a policy that includes conditions **Important:** If you use IAM Conditions, you must include the `etag` field whenever you call `setIamPolicy`. If you omit this field, then IAM allows you to overwrite a version `3` policy with a version `1` policy, and all of the conditions in the version `3` policy are lost. If a policy does not include any conditions, operations on that policy may specify any valid version or leave the field unset. To learn which resources support conditions in their IAM policies, see the [IAM documentation](https://cloud.google.com/iam/help/conditions/resource-policies).
	Version pulumi.IntOutput `pulumi:"version"`
}

Sets the access control policy on the specified resource. Replaces any existing policy. Can return `NOT_FOUND`, `INVALID_ARGUMENT`, and `PERMISSION_DENIED` errors. Note - this resource's API doesn't support deletion. When deleted, the resource will persist on Google Cloud even though it will be deleted from Pulumi state.

func GetApiArtifactIamPolicy 

func GetApiArtifactIamPolicy(ctx *pulumi.Context,
	name string, id pulumi.IDInput, state *ApiArtifactIamPolicyState, opts ...pulumi.ResourceOption) (*ApiArtifactIamPolicy, error)

GetApiArtifactIamPolicy gets an existing ApiArtifactIamPolicy resource's state with the given name, ID, and optional state properties that are used to uniquely qualify the lookup (nil if not required).

func NewApiArtifactIamPolicy 

func NewApiArtifactIamPolicy(ctx *pulumi.Context,
	name string, args *ApiArtifactIamPolicyArgs, opts ...pulumi.ResourceOption) (*ApiArtifactIamPolicy, error)

NewApiArtifactIamPolicy registers a new resource with the given unique name, arguments, and options.

func (*ApiArtifactIamPolicy) ElementType 

func (*ApiArtifactIamPolicy) ElementType() reflect.Type

func (*ApiArtifactIamPolicy) ToApiArtifactIamPolicyOutput 

func (i *ApiArtifactIamPolicy) ToApiArtifactIamPolicyOutput() ApiArtifactIamPolicyOutput

func (*ApiArtifactIamPolicy) ToApiArtifactIamPolicyOutputWithContext 

func (i *ApiArtifactIamPolicy) ToApiArtifactIamPolicyOutputWithContext(ctx context.Context) ApiArtifactIamPolicyOutput

type ApiArtifactIamPolicyArgs 

type ApiArtifactIamPolicyArgs struct {
	ApiId      pulumi.StringInput
	ArtifactId pulumi.StringInput
	// Associates a list of `members`, or principals, with a `role`. Optionally, may specify a `condition` that determines how and when the `bindings` are applied. Each of the `bindings` must contain at least one principal. The `bindings` in a `Policy` can refer to up to 1,500 principals; up to 250 of these principals can be Google groups. Each occurrence of a principal counts towards these limits. For example, if the `bindings` grant 50 different roles to `user:alice@example.com`, and not to any other principal, then you can add another 1,450 principals to the `bindings` in the `Policy`.
	Bindings BindingArrayInput
	// `etag` is used for optimistic concurrency control as a way to help prevent simultaneous updates of a policy from overwriting each other. It is strongly suggested that systems make use of the `etag` in the read-modify-write cycle to perform policy updates in order to avoid race conditions: An `etag` is returned in the response to `getIamPolicy`, and systems are expected to put that etag in the request to `setIamPolicy` to ensure that their change will be applied to the same version of the policy. **Important:** If you use IAM Conditions, you must include the `etag` field whenever you call `setIamPolicy`. If you omit this field, then IAM allows you to overwrite a version `3` policy with a version `1` policy, and all of the conditions in the version `3` policy are lost.
	Etag     pulumi.StringPtrInput
	Location pulumi.StringPtrInput
	Project  pulumi.StringPtrInput
	// Specifies the format of the policy. Valid values are `0`, `1`, and `3`. Requests that specify an invalid value are rejected. Any operation that affects conditional role bindings must specify version `3`. This requirement applies to the following operations: * Getting a policy that includes a conditional role binding * Adding a conditional role binding to a policy * Changing a conditional role binding in a policy * Removing any role binding, with or without a condition, from a policy that includes conditions **Important:** If you use IAM Conditions, you must include the `etag` field whenever you call `setIamPolicy`. If you omit this field, then IAM allows you to overwrite a version `3` policy with a version `1` policy, and all of the conditions in the version `3` policy are lost. If a policy does not include any conditions, operations on that policy may specify any valid version or leave the field unset. To learn which resources support conditions in their IAM policies, see the [IAM documentation](https://cloud.google.com/iam/help/conditions/resource-policies).
	Version pulumi.IntPtrInput
}

The set of arguments for constructing a ApiArtifactIamPolicy resource.

func (ApiArtifactIamPolicyArgs) ElementType 

func (ApiArtifactIamPolicyArgs) ElementType() reflect.Type

type ApiArtifactIamPolicyInput 

type ApiArtifactIamPolicyInput interface {
	pulumi.Input

	ToApiArtifactIamPolicyOutput() ApiArtifactIamPolicyOutput
	ToApiArtifactIamPolicyOutputWithContext(ctx context.Context) ApiArtifactIamPolicyOutput
}

type ApiArtifactIamPolicyOutput 

type ApiArtifactIamPolicyOutput struct{ *pulumi.OutputState }

func (ApiArtifactIamPolicyOutput) ApiId added in v0.21.0 

func (o ApiArtifactIamPolicyOutput) ApiId() pulumi.StringOutput

func (ApiArtifactIamPolicyOutput) ArtifactId added in v0.21.0 

func (o ApiArtifactIamPolicyOutput) ArtifactId() pulumi.StringOutput

func (ApiArtifactIamPolicyOutput) Bindings 

func (o ApiArtifactIamPolicyOutput) Bindings() BindingResponseArrayOutput

Associates a list of `members`, or principals, with a `role`. Optionally, may specify a `condition` that determines how and when the `bindings` are applied. Each of the `bindings` must contain at least one principal. The `bindings` in a `Policy` can refer to up to 1,500 principals; up to 250 of these principals can be Google groups. Each occurrence of a principal counts towards these limits. For example, if the `bindings` grant 50 different roles to `user:alice@example.com`, and not to any other principal, then you can add another 1,450 principals to the `bindings` in the `Policy`.

func (ApiArtifactIamPolicyOutput) ElementType 

func (ApiArtifactIamPolicyOutput) ElementType() reflect.Type

func (ApiArtifactIamPolicyOutput) Etag 

func (o ApiArtifactIamPolicyOutput) Etag() pulumi.StringOutput

`etag` is used for optimistic concurrency control as a way to help prevent simultaneous updates of a policy from overwriting each other. It is strongly suggested that systems make use of the `etag` in the read-modify-write cycle to perform policy updates in order to avoid race conditions: An `etag` is returned in the response to `getIamPolicy`, and systems are expected to put that etag in the request to `setIamPolicy` to ensure that their change will be applied to the same version of the policy. **Important:** If you use IAM Conditions, you must include the `etag` field whenever you call `setIamPolicy`. If you omit this field, then IAM allows you to overwrite a version `3` policy with a version `1` policy, and all of the conditions in the version `3` policy are lost.

func (ApiArtifactIamPolicyOutput) Location added in v0.21.0 

func (o ApiArtifactIamPolicyOutput) Location() pulumi.StringOutput

func (ApiArtifactIamPolicyOutput) Project added in v0.21.0 

func (o ApiArtifactIamPolicyOutput) Project() pulumi.StringOutput

func (ApiArtifactIamPolicyOutput) ToApiArtifactIamPolicyOutput 

func (o ApiArtifactIamPolicyOutput) ToApiArtifactIamPolicyOutput() ApiArtifactIamPolicyOutput

func (ApiArtifactIamPolicyOutput) ToApiArtifactIamPolicyOutputWithContext 

func (o ApiArtifactIamPolicyOutput) ToApiArtifactIamPolicyOutputWithContext(ctx context.Context) ApiArtifactIamPolicyOutput

func (ApiArtifactIamPolicyOutput) Version 

func (o ApiArtifactIamPolicyOutput) Version() pulumi.IntOutput

Specifies the format of the policy. Valid values are `0`, `1`, and `3`. Requests that specify an invalid value are rejected. Any operation that affects conditional role bindings must specify version `3`. This requirement applies to the following operations: * Getting a policy that includes a conditional role binding * Adding a conditional role binding to a policy * Changing a conditional role binding in a policy * Removing any role binding, with or without a condition, from a policy that includes conditions **Important:** If you use IAM Conditions, you must include the `etag` field whenever you call `setIamPolicy`. If you omit this field, then IAM allows you to overwrite a version `3` policy with a version `1` policy, and all of the conditions in the version `3` policy are lost. If a policy does not include any conditions, operations on that policy may specify any valid version or leave the field unset. To learn which resources support conditions in their IAM policies, see the [IAM documentation](https://cloud.google.com/iam/help/conditions/resource-policies).

type ApiArtifactIamPolicyState 

type ApiArtifactIamPolicyState struct {
}

func (ApiArtifactIamPolicyState) ElementType 

func (ApiArtifactIamPolicyState) ElementType() reflect.Type

type ApiDeploymentIamBinding added in v0.26.0 

type ApiDeploymentIamBinding struct {
	pulumi.CustomResourceState

	// An IAM Condition for a given binding. See https://cloud.google.com/iam/docs/conditions-overview for additional details.
	Condition iam.ConditionPtrOutput `pulumi:"condition"`
	// The etag of the resource's IAM policy.
	Etag pulumi.StringOutput `pulumi:"etag"`
	// Specifies the principals requesting access for a Google Cloud resource. `members` can have the following values: * `allUsers`: A special identifier that represents anyone who is on the internet; with or without a Google account. * `allAuthenticatedUsers`: A special identifier that represents anyone who is authenticated with a Google account or a service account. Does not include identities that come from external identity providers (IdPs) through identity federation. * `user:{emailid}`: An email address that represents a specific Google account. For example, `alice@example.com` . * `serviceAccount:{emailid}`: An email address that represents a Google service account. For example, `my-other-app@appspot.gserviceaccount.com`. * `serviceAccount:{projectid}.svc.id.goog[{namespace}/{kubernetes-sa}]`: An identifier for a [Kubernetes service account](https://cloud.google.com/kubernetes-engine/docs/how-to/kubernetes-service-accounts). For example, `my-project.svc.id.goog[my-namespace/my-kubernetes-sa]`. * `group:{emailid}`: An email address that represents a Google group. For example, `admins@example.com`. * `domain:{domain}`: The G Suite domain (primary) that represents all the users of that domain. For example, `google.com` or `example.com`. * `deleted:user:{emailid}?uid={uniqueid}`: An email address (plus unique identifier) representing a user that has been recently deleted. For example, `alice@example.com?uid=123456789012345678901`. If the user is recovered, this value reverts to `user:{emailid}` and the recovered user retains the role in the binding. * `deleted:serviceAccount:{emailid}?uid={uniqueid}`: An email address (plus unique identifier) representing a service account that has been recently deleted. For example, `my-other-app@appspot.gserviceaccount.com?uid=123456789012345678901`. If the service account is undeleted, this value reverts to `serviceAccount:{emailid}` and the undeleted service account retains the role in the binding. * `deleted:group:{emailid}?uid={uniqueid}`: An email address (plus unique identifier) representing a Google group that has been recently deleted. For example, `admins@example.com?uid=123456789012345678901`. If the group is recovered, this value reverts to `group:{emailid}` and the recovered group retains the role in the binding.
	Members pulumi.StringArrayOutput `pulumi:"members"`
	// The name of the resource to manage IAM policies for.
	Name pulumi.StringOutput `pulumi:"name"`
	// The project in which the resource belongs. If it is not provided, a default will be supplied.
	Project pulumi.StringOutput `pulumi:"project"`
	// Role that is assigned to the list of `members`, or principals. For example, `roles/viewer`, `roles/editor`, or `roles/owner`.
	Role pulumi.StringOutput `pulumi:"role"`
}

Sets the access control policy on the specified resource. Replaces any existing policy. Can return `NOT_FOUND`, `INVALID_ARGUMENT`, and `PERMISSION_DENIED` errors.

func GetApiDeploymentIamBinding added in v0.26.0 

func GetApiDeploymentIamBinding(ctx *pulumi.Context,
	name string, id pulumi.IDInput, state *ApiDeploymentIamBindingState, opts ...pulumi.ResourceOption) (*ApiDeploymentIamBinding, error)

GetApiDeploymentIamBinding gets an existing ApiDeploymentIamBinding resource's state with the given name, ID, and optional state properties that are used to uniquely qualify the lookup (nil if not required).

func NewApiDeploymentIamBinding added in v0.26.0 

func NewApiDeploymentIamBinding(ctx *pulumi.Context,
	name string, args *ApiDeploymentIamBindingArgs, opts ...pulumi.ResourceOption) (*ApiDeploymentIamBinding, error)

NewApiDeploymentIamBinding registers a new resource with the given unique name, arguments, and options.

func (*ApiDeploymentIamBinding) ElementType added in v0.26.0 

func (*ApiDeploymentIamBinding) ElementType() reflect.Type

func (*ApiDeploymentIamBinding) ToApiDeploymentIamBindingOutput added in v0.26.0 

func (i *ApiDeploymentIamBinding) ToApiDeploymentIamBindingOutput() ApiDeploymentIamBindingOutput

func (*ApiDeploymentIamBinding) ToApiDeploymentIamBindingOutputWithContext added in v0.26.0 

func (i *ApiDeploymentIamBinding) ToApiDeploymentIamBindingOutputWithContext(ctx context.Context) ApiDeploymentIamBindingOutput

type ApiDeploymentIamBindingArgs added in v0.26.0 

type ApiDeploymentIamBindingArgs struct {
	// An IAM Condition for a given binding.
	Condition iam.ConditionPtrInput
	// Identities that will be granted the privilege in role. Each entry can have one of the following values:
	//
	//  * user:{emailid}: An email address that represents a specific Google account. For example, alice@gmail.com or joe@example.com.
	//  * serviceAccount:{emailid}: An email address that represents a service account. For example, my-other-app@appspot.gserviceaccount.com.
	//  * group:{emailid}: An email address that represents a Google group. For example, admins@example.com.
	//  * domain:{domain}: A G Suite domain (primary, instead of alias) name that represents all the users of that domain. For example, google.com or example.com.
	Members pulumi.StringArrayInput
	// The name of the resource to manage IAM policies for.
	Name pulumi.StringInput
	// The role that should be applied. Only one `IamBinding` can be used per role.
	Role pulumi.StringInput
}

The set of arguments for constructing a ApiDeploymentIamBinding resource.

func (ApiDeploymentIamBindingArgs) ElementType added in v0.26.0 

func (ApiDeploymentIamBindingArgs) ElementType() reflect.Type

type ApiDeploymentIamBindingInput added in v0.26.0 

type ApiDeploymentIamBindingInput interface {
	pulumi.Input

	ToApiDeploymentIamBindingOutput() ApiDeploymentIamBindingOutput
	ToApiDeploymentIamBindingOutputWithContext(ctx context.Context) ApiDeploymentIamBindingOutput
}

type ApiDeploymentIamBindingOutput added in v0.26.0 

type ApiDeploymentIamBindingOutput struct{ *pulumi.OutputState }

func (ApiDeploymentIamBindingOutput) Condition added in v0.26.0 

func (o ApiDeploymentIamBindingOutput) Condition() iam.ConditionPtrOutput

An IAM Condition for a given binding. See https://cloud.google.com/iam/docs/conditions-overview for additional details.

func (ApiDeploymentIamBindingOutput) ElementType added in v0.26.0 

func (ApiDeploymentIamBindingOutput) ElementType() reflect.Type

func (ApiDeploymentIamBindingOutput) Etag added in v0.26.0 

func (o ApiDeploymentIamBindingOutput) Etag() pulumi.StringOutput

The etag of the resource's IAM policy.

func (ApiDeploymentIamBindingOutput) Members added in v0.26.0 

func (o ApiDeploymentIamBindingOutput) Members() pulumi.StringArrayOutput

Specifies the principals requesting access for a Google Cloud resource. `members` can have the following values: * `allUsers`: A special identifier that represents anyone who is on the internet; with or without a Google account. * `allAuthenticatedUsers`: A special identifier that represents anyone who is authenticated with a Google account or a service account. Does not include identities that come from external identity providers (IdPs) through identity federation. * `user:{emailid}`: An email address that represents a specific Google account. For example, `alice@example.com` . * `serviceAccount:{emailid}`: An email address that represents a Google service account. For example, `my-other-app@appspot.gserviceaccount.com`. * `serviceAccount:{projectid}.svc.id.goog[{namespace}/{kubernetes-sa}]`: An identifier for a [Kubernetes service account](https://cloud.google.com/kubernetes-engine/docs/how-to/kubernetes-service-accounts). For example, `my-project.svc.id.goog[my-namespace/my-kubernetes-sa]`. * `group:{emailid}`: An email address that represents a Google group. For example, `admins@example.com`. * `domain:{domain}`: The G Suite domain (primary) that represents all the users of that domain. For example, `google.com` or `example.com`. * `deleted:user:{emailid}?uid={uniqueid}`: An email address (plus unique identifier) representing a user that has been recently deleted. For example, `alice@example.com?uid=123456789012345678901`. If the user is recovered, this value reverts to `user:{emailid}` and the recovered user retains the role in the binding. * `deleted:serviceAccount:{emailid}?uid={uniqueid}`: An email address (plus unique identifier) representing a service account that has been recently deleted. For example, `my-other-app@appspot.gserviceaccount.com?uid=123456789012345678901`. If the service account is undeleted, this value reverts to `serviceAccount:{emailid}` and the undeleted service account retains the role in the binding. * `deleted:group:{emailid}?uid={uniqueid}`: An email address (plus unique identifier) representing a Google group that has been recently deleted. For example, `admins@example.com?uid=123456789012345678901`. If the group is recovered, this value reverts to `group:{emailid}` and the recovered group retains the role in the binding.

func (ApiDeploymentIamBindingOutput) Name added in v0.26.0 

func (o ApiDeploymentIamBindingOutput) Name() pulumi.StringOutput

The name of the resource to manage IAM policies for.

func (ApiDeploymentIamBindingOutput) Project added in v0.26.0 

func (o ApiDeploymentIamBindingOutput) Project() pulumi.StringOutput

The project in which the resource belongs. If it is not provided, a default will be supplied.

func (ApiDeploymentIamBindingOutput) Role added in v0.26.0 

func (o ApiDeploymentIamBindingOutput) Role() pulumi.StringOutput

Role that is assigned to the list of `members`, or principals. For example, `roles/viewer`, `roles/editor`, or `roles/owner`.

func (ApiDeploymentIamBindingOutput) ToApiDeploymentIamBindingOutput added in v0.26.0 

func (o ApiDeploymentIamBindingOutput) ToApiDeploymentIamBindingOutput() ApiDeploymentIamBindingOutput

func (ApiDeploymentIamBindingOutput) ToApiDeploymentIamBindingOutputWithContext added in v0.26.0 

func (o ApiDeploymentIamBindingOutput) ToApiDeploymentIamBindingOutputWithContext(ctx context.Context) ApiDeploymentIamBindingOutput

type ApiDeploymentIamBindingState added in v0.26.0 

type ApiDeploymentIamBindingState struct {
}

func (ApiDeploymentIamBindingState) ElementType added in v0.26.0 

func (ApiDeploymentIamBindingState) ElementType() reflect.Type

type ApiDeploymentIamMember added in v0.26.0 

type ApiDeploymentIamMember struct {
	pulumi.CustomResourceState

	// An IAM Condition for a given binding. See https://cloud.google.com/iam/docs/conditions-overview for additional details.
	Condition iam.ConditionPtrOutput `pulumi:"condition"`
	// The etag of the resource's IAM policy.
	Etag pulumi.StringOutput `pulumi:"etag"`
	// Specifies the principals requesting access for a Google Cloud resource. `members` can have the following values: * `allUsers`: A special identifier that represents anyone who is on the internet; with or without a Google account. * `allAuthenticatedUsers`: A special identifier that represents anyone who is authenticated with a Google account or a service account. Does not include identities that come from external identity providers (IdPs) through identity federation. * `user:{emailid}`: An email address that represents a specific Google account. For example, `alice@example.com` . * `serviceAccount:{emailid}`: An email address that represents a Google service account. For example, `my-other-app@appspot.gserviceaccount.com`. * `serviceAccount:{projectid}.svc.id.goog[{namespace}/{kubernetes-sa}]`: An identifier for a [Kubernetes service account](https://cloud.google.com/kubernetes-engine/docs/how-to/kubernetes-service-accounts). For example, `my-project.svc.id.goog[my-namespace/my-kubernetes-sa]`. * `group:{emailid}`: An email address that represents a Google group. For example, `admins@example.com`. * `domain:{domain}`: The G Suite domain (primary) that represents all the users of that domain. For example, `google.com` or `example.com`. * `deleted:user:{emailid}?uid={uniqueid}`: An email address (plus unique identifier) representing a user that has been recently deleted. For example, `alice@example.com?uid=123456789012345678901`. If the user is recovered, this value reverts to `user:{emailid}` and the recovered user retains the role in the binding. * `deleted:serviceAccount:{emailid}?uid={uniqueid}`: An email address (plus unique identifier) representing a service account that has been recently deleted. For example, `my-other-app@appspot.gserviceaccount.com?uid=123456789012345678901`. If the service account is undeleted, this value reverts to `serviceAccount:{emailid}` and the undeleted service account retains the role in the binding. * `deleted:group:{emailid}?uid={uniqueid}`: An email address (plus unique identifier) representing a Google group that has been recently deleted. For example, `admins@example.com?uid=123456789012345678901`. If the group is recovered, this value reverts to `group:{emailid}` and the recovered group retains the role in the binding.
	Member pulumi.StringOutput `pulumi:"member"`
	// The name of the resource to manage IAM policies for.
	Name pulumi.StringOutput `pulumi:"name"`
	// The project in which the resource belongs. If it is not provided, a default will be supplied.
	Project pulumi.StringOutput `pulumi:"project"`
	// Role that is assigned to the list of `members`, or principals. For example, `roles/viewer`, `roles/editor`, or `roles/owner`.
	Role pulumi.StringOutput `pulumi:"role"`
}

Sets the access control policy on the specified resource. Replaces any existing policy. Can return `NOT_FOUND`, `INVALID_ARGUMENT`, and `PERMISSION_DENIED` errors.

func GetApiDeploymentIamMember added in v0.26.0 

func GetApiDeploymentIamMember(ctx *pulumi.Context,
	name string, id pulumi.IDInput, state *ApiDeploymentIamMemberState, opts ...pulumi.ResourceOption) (*ApiDeploymentIamMember, error)

GetApiDeploymentIamMember gets an existing ApiDeploymentIamMember resource's state with the given name, ID, and optional state properties that are used to uniquely qualify the lookup (nil if not required).

func NewApiDeploymentIamMember added in v0.26.0 

func NewApiDeploymentIamMember(ctx *pulumi.Context,
	name string, args *ApiDeploymentIamMemberArgs, opts ...pulumi.ResourceOption) (*ApiDeploymentIamMember, error)

NewApiDeploymentIamMember registers a new resource with the given unique name, arguments, and options.

func (*ApiDeploymentIamMember) ElementType added in v0.26.0 

func (*ApiDeploymentIamMember) ElementType() reflect.Type

func (*ApiDeploymentIamMember) ToApiDeploymentIamMemberOutput added in v0.26.0 

func (i *ApiDeploymentIamMember) ToApiDeploymentIamMemberOutput() ApiDeploymentIamMemberOutput

func (*ApiDeploymentIamMember) ToApiDeploymentIamMemberOutputWithContext added in v0.26.0 

func (i *ApiDeploymentIamMember) ToApiDeploymentIamMemberOutputWithContext(ctx context.Context) ApiDeploymentIamMemberOutput

type ApiDeploymentIamMemberArgs added in v0.26.0 

type ApiDeploymentIamMemberArgs struct {
	// An IAM Condition for a given binding.
	Condition iam.ConditionPtrInput
	// Identity that will be granted the privilege in role. The entry can have one of the following values:
	//
	//  * user:{emailid}: An email address that represents a specific Google account. For example, alice@gmail.com or joe@example.com.
	//  * serviceAccount:{emailid}: An email address that represents a service account. For example, my-other-app@appspot.gserviceaccount.com.
	//  * group:{emailid}: An email address that represents a Google group. For example, admins@example.com.
	//  * domain:{domain}: A G Suite domain (primary, instead of alias) name that represents all the users of that domain. For example, google.com or example.com.
	Member pulumi.StringInput
	// The name of the resource to manage IAM policies for.
	Name pulumi.StringInput
	// The role that should be applied.
	Role pulumi.StringInput
}

The set of arguments for constructing a ApiDeploymentIamMember resource.

func (ApiDeploymentIamMemberArgs) ElementType added in v0.26.0 

func (ApiDeploymentIamMemberArgs) ElementType() reflect.Type

type ApiDeploymentIamMemberInput added in v0.26.0 

type ApiDeploymentIamMemberInput interface {
	pulumi.Input

	ToApiDeploymentIamMemberOutput() ApiDeploymentIamMemberOutput
	ToApiDeploymentIamMemberOutputWithContext(ctx context.Context) ApiDeploymentIamMemberOutput
}

type ApiDeploymentIamMemberOutput added in v0.26.0 

type ApiDeploymentIamMemberOutput struct{ *pulumi.OutputState }

func (ApiDeploymentIamMemberOutput) Condition added in v0.26.0 

func (o ApiDeploymentIamMemberOutput) Condition() iam.ConditionPtrOutput

An IAM Condition for a given binding. See https://cloud.google.com/iam/docs/conditions-overview for additional details.

func (ApiDeploymentIamMemberOutput) ElementType added in v0.26.0 

func (ApiDeploymentIamMemberOutput) ElementType() reflect.Type

func (ApiDeploymentIamMemberOutput) Etag added in v0.26.0 

func (o ApiDeploymentIamMemberOutput) Etag() pulumi.StringOutput

The etag of the resource's IAM policy.

func (ApiDeploymentIamMemberOutput) Member added in v0.26.0 

func (o ApiDeploymentIamMemberOutput) Member() pulumi.StringOutput

Specifies the principals requesting access for a Google Cloud resource. `members` can have the following values: * `allUsers`: A special identifier that represents anyone who is on the internet; with or without a Google account. * `allAuthenticatedUsers`: A special identifier that represents anyone who is authenticated with a Google account or a service account. Does not include identities that come from external identity providers (IdPs) through identity federation. * `user:{emailid}`: An email address that represents a specific Google account. For example, `alice@example.com` . * `serviceAccount:{emailid}`: An email address that represents a Google service account. For example, `my-other-app@appspot.gserviceaccount.com`. * `serviceAccount:{projectid}.svc.id.goog[{namespace}/{kubernetes-sa}]`: An identifier for a [Kubernetes service account](https://cloud.google.com/kubernetes-engine/docs/how-to/kubernetes-service-accounts). For example, `my-project.svc.id.goog[my-namespace/my-kubernetes-sa]`. * `group:{emailid}`: An email address that represents a Google group. For example, `admins@example.com`. * `domain:{domain}`: The G Suite domain (primary) that represents all the users of that domain. For example, `google.com` or `example.com`. * `deleted:user:{emailid}?uid={uniqueid}`: An email address (plus unique identifier) representing a user that has been recently deleted. For example, `alice@example.com?uid=123456789012345678901`. If the user is recovered, this value reverts to `user:{emailid}` and the recovered user retains the role in the binding. * `deleted:serviceAccount:{emailid}?uid={uniqueid}`: An email address (plus unique identifier) representing a service account that has been recently deleted. For example, `my-other-app@appspot.gserviceaccount.com?uid=123456789012345678901`. If the service account is undeleted, this value reverts to `serviceAccount:{emailid}` and the undeleted service account retains the role in the binding. * `deleted:group:{emailid}?uid={uniqueid}`: An email address (plus unique identifier) representing a Google group that has been recently deleted. For example, `admins@example.com?uid=123456789012345678901`. If the group is recovered, this value reverts to `group:{emailid}` and the recovered group retains the role in the binding.

func (ApiDeploymentIamMemberOutput) Name added in v0.26.0 

func (o ApiDeploymentIamMemberOutput) Name() pulumi.StringOutput

The name of the resource to manage IAM policies for.

func (ApiDeploymentIamMemberOutput) Project added in v0.26.0 

func (o ApiDeploymentIamMemberOutput) Project() pulumi.StringOutput

The project in which the resource belongs. If it is not provided, a default will be supplied.

func (ApiDeploymentIamMemberOutput) Role added in v0.26.0 

func (o ApiDeploymentIamMemberOutput) Role() pulumi.StringOutput

Role that is assigned to the list of `members`, or principals. For example, `roles/viewer`, `roles/editor`, or `roles/owner`.

func (ApiDeploymentIamMemberOutput) ToApiDeploymentIamMemberOutput added in v0.26.0 

func (o ApiDeploymentIamMemberOutput) ToApiDeploymentIamMemberOutput() ApiDeploymentIamMemberOutput

func (ApiDeploymentIamMemberOutput) ToApiDeploymentIamMemberOutputWithContext added in v0.26.0 

func (o ApiDeploymentIamMemberOutput) ToApiDeploymentIamMemberOutputWithContext(ctx context.Context) ApiDeploymentIamMemberOutput

type ApiDeploymentIamMemberState added in v0.26.0 

type ApiDeploymentIamMemberState struct {
}

func (ApiDeploymentIamMemberState) ElementType added in v0.26.0 

func (ApiDeploymentIamMemberState) ElementType() reflect.Type

type ApiDeploymentIamPolicy 

type ApiDeploymentIamPolicy struct {
	pulumi.CustomResourceState

	ApiId pulumi.StringOutput `pulumi:"apiId"`
	// Associates a list of `members`, or principals, with a `role`. Optionally, may specify a `condition` that determines how and when the `bindings` are applied. Each of the `bindings` must contain at least one principal. The `bindings` in a `Policy` can refer to up to 1,500 principals; up to 250 of these principals can be Google groups. Each occurrence of a principal counts towards these limits. For example, if the `bindings` grant 50 different roles to `user:alice@example.com`, and not to any other principal, then you can add another 1,450 principals to the `bindings` in the `Policy`.
	Bindings     BindingResponseArrayOutput `pulumi:"bindings"`
	DeploymentId pulumi.StringOutput        `pulumi:"deploymentId"`
	// `etag` is used for optimistic concurrency control as a way to help prevent simultaneous updates of a policy from overwriting each other. It is strongly suggested that systems make use of the `etag` in the read-modify-write cycle to perform policy updates in order to avoid race conditions: An `etag` is returned in the response to `getIamPolicy`, and systems are expected to put that etag in the request to `setIamPolicy` to ensure that their change will be applied to the same version of the policy. **Important:** If you use IAM Conditions, you must include the `etag` field whenever you call `setIamPolicy`. If you omit this field, then IAM allows you to overwrite a version `3` policy with a version `1` policy, and all of the conditions in the version `3` policy are lost.
	Etag     pulumi.StringOutput `pulumi:"etag"`
	Location pulumi.StringOutput `pulumi:"location"`
	Project  pulumi.StringOutput `pulumi:"project"`
	// Specifies the format of the policy. Valid values are `0`, `1`, and `3`. Requests that specify an invalid value are rejected. Any operation that affects conditional role bindings must specify version `3`. This requirement applies to the following operations: * Getting a policy that includes a conditional role binding * Adding a conditional role binding to a policy * Changing a conditional role binding in a policy * Removing any role binding, with or without a condition, from a policy that includes conditions **Important:** If you use IAM Conditions, you must include the `etag` field whenever you call `setIamPolicy`. If you omit this field, then IAM allows you to overwrite a version `3` policy with a version `1` policy, and all of the conditions in the version `3` policy are lost. If a policy does not include any conditions, operations on that policy may specify any valid version or leave the field unset. To learn which resources support conditions in their IAM policies, see the [IAM documentation](https://cloud.google.com/iam/help/conditions/resource-policies).
	Version pulumi.IntOutput `pulumi:"version"`
}

Sets the access control policy on the specified resource. Replaces any existing policy. Can return `NOT_FOUND`, `INVALID_ARGUMENT`, and `PERMISSION_DENIED` errors. Note - this resource's API doesn't support deletion. When deleted, the resource will persist on Google Cloud even though it will be deleted from Pulumi state.

func GetApiDeploymentIamPolicy 

func GetApiDeploymentIamPolicy(ctx *pulumi.Context,
	name string, id pulumi.IDInput, state *ApiDeploymentIamPolicyState, opts ...pulumi.ResourceOption) (*ApiDeploymentIamPolicy, error)

GetApiDeploymentIamPolicy gets an existing ApiDeploymentIamPolicy resource's state with the given name, ID, and optional state properties that are used to uniquely qualify the lookup (nil if not required).

func NewApiDeploymentIamPolicy 

func NewApiDeploymentIamPolicy(ctx *pulumi.Context,
	name string, args *ApiDeploymentIamPolicyArgs, opts ...pulumi.ResourceOption) (*ApiDeploymentIamPolicy, error)

NewApiDeploymentIamPolicy registers a new resource with the given unique name, arguments, and options.

func (*ApiDeploymentIamPolicy) ElementType 

func (*ApiDeploymentIamPolicy) ElementType() reflect.Type

func (*ApiDeploymentIamPolicy) ToApiDeploymentIamPolicyOutput 

func (i *ApiDeploymentIamPolicy) ToApiDeploymentIamPolicyOutput() ApiDeploymentIamPolicyOutput

func (*ApiDeploymentIamPolicy) ToApiDeploymentIamPolicyOutputWithContext 

func (i *ApiDeploymentIamPolicy) ToApiDeploymentIamPolicyOutputWithContext(ctx context.Context) ApiDeploymentIamPolicyOutput

type ApiDeploymentIamPolicyArgs 

type ApiDeploymentIamPolicyArgs struct {
	ApiId pulumi.StringInput
	// Associates a list of `members`, or principals, with a `role`. Optionally, may specify a `condition` that determines how and when the `bindings` are applied. Each of the `bindings` must contain at least one principal. The `bindings` in a `Policy` can refer to up to 1,500 principals; up to 250 of these principals can be Google groups. Each occurrence of a principal counts towards these limits. For example, if the `bindings` grant 50 different roles to `user:alice@example.com`, and not to any other principal, then you can add another 1,450 principals to the `bindings` in the `Policy`.
	Bindings     BindingArrayInput
	DeploymentId pulumi.StringInput
	// `etag` is used for optimistic concurrency control as a way to help prevent simultaneous updates of a policy from overwriting each other. It is strongly suggested that systems make use of the `etag` in the read-modify-write cycle to perform policy updates in order to avoid race conditions: An `etag` is returned in the response to `getIamPolicy`, and systems are expected to put that etag in the request to `setIamPolicy` to ensure that their change will be applied to the same version of the policy. **Important:** If you use IAM Conditions, you must include the `etag` field whenever you call `setIamPolicy`. If you omit this field, then IAM allows you to overwrite a version `3` policy with a version `1` policy, and all of the conditions in the version `3` policy are lost.
	Etag     pulumi.StringPtrInput
	Location pulumi.StringPtrInput
	Project  pulumi.StringPtrInput
	// Specifies the format of the policy. Valid values are `0`, `1`, and `3`. Requests that specify an invalid value are rejected. Any operation that affects conditional role bindings must specify version `3`. This requirement applies to the following operations: * Getting a policy that includes a conditional role binding * Adding a conditional role binding to a policy * Changing a conditional role binding in a policy * Removing any role binding, with or without a condition, from a policy that includes conditions **Important:** If you use IAM Conditions, you must include the `etag` field whenever you call `setIamPolicy`. If you omit this field, then IAM allows you to overwrite a version `3` policy with a version `1` policy, and all of the conditions in the version `3` policy are lost. If a policy does not include any conditions, operations on that policy may specify any valid version or leave the field unset. To learn which resources support conditions in their IAM policies, see the [IAM documentation](https://cloud.google.com/iam/help/conditions/resource-policies).
	Version pulumi.IntPtrInput
}

The set of arguments for constructing a ApiDeploymentIamPolicy resource.

func (ApiDeploymentIamPolicyArgs) ElementType 

func (ApiDeploymentIamPolicyArgs) ElementType() reflect.Type

type ApiDeploymentIamPolicyInput 

type ApiDeploymentIamPolicyInput interface {
	pulumi.Input

	ToApiDeploymentIamPolicyOutput() ApiDeploymentIamPolicyOutput
	ToApiDeploymentIamPolicyOutputWithContext(ctx context.Context) ApiDeploymentIamPolicyOutput
}

type ApiDeploymentIamPolicyOutput 

type ApiDeploymentIamPolicyOutput struct{ *pulumi.OutputState }

func (ApiDeploymentIamPolicyOutput) ApiId added in v0.21.0 

func (o ApiDeploymentIamPolicyOutput) ApiId() pulumi.StringOutput

func (ApiDeploymentIamPolicyOutput) Bindings 

func (o ApiDeploymentIamPolicyOutput) Bindings() BindingResponseArrayOutput

Associates a list of `members`, or principals, with a `role`. Optionally, may specify a `condition` that determines how and when the `bindings` are applied. Each of the `bindings` must contain at least one principal. The `bindings` in a `Policy` can refer to up to 1,500 principals; up to 250 of these principals can be Google groups. Each occurrence of a principal counts towards these limits. For example, if the `bindings` grant 50 different roles to `user:alice@example.com`, and not to any other principal, then you can add another 1,450 principals to the `bindings` in the `Policy`.

func (ApiDeploymentIamPolicyOutput) DeploymentId added in v0.21.0 

func (o ApiDeploymentIamPolicyOutput) DeploymentId() pulumi.StringOutput

func (ApiDeploymentIamPolicyOutput) ElementType 

func (ApiDeploymentIamPolicyOutput) ElementType() reflect.Type

func (ApiDeploymentIamPolicyOutput) Etag 

func (o ApiDeploymentIamPolicyOutput) Etag() pulumi.StringOutput

`etag` is used for optimistic concurrency control as a way to help prevent simultaneous updates of a policy from overwriting each other. It is strongly suggested that systems make use of the `etag` in the read-modify-write cycle to perform policy updates in order to avoid race conditions: An `etag` is returned in the response to `getIamPolicy`, and systems are expected to put that etag in the request to `setIamPolicy` to ensure that their change will be applied to the same version of the policy. **Important:** If you use IAM Conditions, you must include the `etag` field whenever you call `setIamPolicy`. If you omit this field, then IAM allows you to overwrite a version `3` policy with a version `1` policy, and all of the conditions in the version `3` policy are lost.

func (ApiDeploymentIamPolicyOutput) Location added in v0.21.0 

func (o ApiDeploymentIamPolicyOutput) Location() pulumi.StringOutput

func (ApiDeploymentIamPolicyOutput) Project added in v0.21.0 

func (o ApiDeploymentIamPolicyOutput) Project() pulumi.StringOutput

func (ApiDeploymentIamPolicyOutput) ToApiDeploymentIamPolicyOutput 

func (o ApiDeploymentIamPolicyOutput) ToApiDeploymentIamPolicyOutput() ApiDeploymentIamPolicyOutput

func (ApiDeploymentIamPolicyOutput) ToApiDeploymentIamPolicyOutputWithContext 

func (o ApiDeploymentIamPolicyOutput) ToApiDeploymentIamPolicyOutputWithContext(ctx context.Context) ApiDeploymentIamPolicyOutput

func (ApiDeploymentIamPolicyOutput) Version 

func (o ApiDeploymentIamPolicyOutput) Version() pulumi.IntOutput

Specifies the format of the policy. Valid values are `0`, `1`, and `3`. Requests that specify an invalid value are rejected. Any operation that affects conditional role bindings must specify version `3`. This requirement applies to the following operations: * Getting a policy that includes a conditional role binding * Adding a conditional role binding to a policy * Changing a conditional role binding in a policy * Removing any role binding, with or without a condition, from a policy that includes conditions **Important:** If you use IAM Conditions, you must include the `etag` field whenever you call `setIamPolicy`. If you omit this field, then IAM allows you to overwrite a version `3` policy with a version `1` policy, and all of the conditions in the version `3` policy are lost. If a policy does not include any conditions, operations on that policy may specify any valid version or leave the field unset. To learn which resources support conditions in their IAM policies, see the [IAM documentation](https://cloud.google.com/iam/help/conditions/resource-policies).

type ApiDeploymentIamPolicyState 

type ApiDeploymentIamPolicyState struct {
}

func (ApiDeploymentIamPolicyState) ElementType 

func (ApiDeploymentIamPolicyState) ElementType() reflect.Type

type ApiIamBinding added in v0.26.0 

type ApiIamBinding struct {
	pulumi.CustomResourceState

	// An IAM Condition for a given binding. See https://cloud.google.com/iam/docs/conditions-overview for additional details.
	Condition iam.ConditionPtrOutput `pulumi:"condition"`
	// The etag of the resource's IAM policy.
	Etag pulumi.StringOutput `pulumi:"etag"`
	// Specifies the principals requesting access for a Google Cloud resource. `members` can have the following values: * `allUsers`: A special identifier that represents anyone who is on the internet; with or without a Google account. * `allAuthenticatedUsers`: A special identifier that represents anyone who is authenticated with a Google account or a service account. Does not include identities that come from external identity providers (IdPs) through identity federation. * `user:{emailid}`: An email address that represents a specific Google account. For example, `alice@example.com` . * `serviceAccount:{emailid}`: An email address that represents a Google service account. For example, `my-other-app@appspot.gserviceaccount.com`. * `serviceAccount:{projectid}.svc.id.goog[{namespace}/{kubernetes-sa}]`: An identifier for a [Kubernetes service account](https://cloud.google.com/kubernetes-engine/docs/how-to/kubernetes-service-accounts). For example, `my-project.svc.id.goog[my-namespace/my-kubernetes-sa]`. * `group:{emailid}`: An email address that represents a Google group. For example, `admins@example.com`. * `domain:{domain}`: The G Suite domain (primary) that represents all the users of that domain. For example, `google.com` or `example.com`. * `deleted:user:{emailid}?uid={uniqueid}`: An email address (plus unique identifier) representing a user that has been recently deleted. For example, `alice@example.com?uid=123456789012345678901`. If the user is recovered, this value reverts to `user:{emailid}` and the recovered user retains the role in the binding. * `deleted:serviceAccount:{emailid}?uid={uniqueid}`: An email address (plus unique identifier) representing a service account that has been recently deleted. For example, `my-other-app@appspot.gserviceaccount.com?uid=123456789012345678901`. If the service account is undeleted, this value reverts to `serviceAccount:{emailid}` and the undeleted service account retains the role in the binding. * `deleted:group:{emailid}?uid={uniqueid}`: An email address (plus unique identifier) representing a Google group that has been recently deleted. For example, `admins@example.com?uid=123456789012345678901`. If the group is recovered, this value reverts to `group:{emailid}` and the recovered group retains the role in the binding.
	Members pulumi.StringArrayOutput `pulumi:"members"`
	// The name of the resource to manage IAM policies for.
	Name pulumi.StringOutput `pulumi:"name"`
	// The project in which the resource belongs. If it is not provided, a default will be supplied.
	Project pulumi.StringOutput `pulumi:"project"`
	// Role that is assigned to the list of `members`, or principals. For example, `roles/viewer`, `roles/editor`, or `roles/owner`.
	Role pulumi.StringOutput `pulumi:"role"`
}

Sets the access control policy on the specified resource. Replaces any existing policy. Can return `NOT_FOUND`, `INVALID_ARGUMENT`, and `PERMISSION_DENIED` errors.

func GetApiIamBinding added in v0.26.0 

func GetApiIamBinding(ctx *pulumi.Context,
	name string, id pulumi.IDInput, state *ApiIamBindingState, opts ...pulumi.ResourceOption) (*ApiIamBinding, error)

GetApiIamBinding gets an existing ApiIamBinding resource's state with the given name, ID, and optional state properties that are used to uniquely qualify the lookup (nil if not required).

func NewApiIamBinding added in v0.26.0 

func NewApiIamBinding(ctx *pulumi.Context,
	name string, args *ApiIamBindingArgs, opts ...pulumi.ResourceOption) (*ApiIamBinding, error)

NewApiIamBinding registers a new resource with the given unique name, arguments, and options.

func (*ApiIamBinding) ElementType added in v0.26.0 

func (*ApiIamBinding) ElementType() reflect.Type

func (*ApiIamBinding) ToApiIamBindingOutput added in v0.26.0 

func (i *ApiIamBinding) ToApiIamBindingOutput() ApiIamBindingOutput

func (*ApiIamBinding) ToApiIamBindingOutputWithContext added in v0.26.0 

func (i *ApiIamBinding) ToApiIamBindingOutputWithContext(ctx context.Context) ApiIamBindingOutput

type ApiIamBindingArgs added in v0.26.0 

type ApiIamBindingArgs struct {
	// An IAM Condition for a given binding.
	Condition iam.ConditionPtrInput
	// Identities that will be granted the privilege in role. Each entry can have one of the following values:
	//
	//  * user:{emailid}: An email address that represents a specific Google account. For example, alice@gmail.com or joe@example.com.
	//  * serviceAccount:{emailid}: An email address that represents a service account. For example, my-other-app@appspot.gserviceaccount.com.
	//  * group:{emailid}: An email address that represents a Google group. For example, admins@example.com.
	//  * domain:{domain}: A G Suite domain (primary, instead of alias) name that represents all the users of that domain. For example, google.com or example.com.
	Members pulumi.StringArrayInput
	// The name of the resource to manage IAM policies for.
	Name pulumi.StringInput
	// The role that should be applied. Only one `IamBinding` can be used per role.
	Role pulumi.StringInput
}

The set of arguments for constructing a ApiIamBinding resource.

func (ApiIamBindingArgs) ElementType added in v0.26.0 

func (ApiIamBindingArgs) ElementType() reflect.Type

type ApiIamBindingInput added in v0.26.0 

type ApiIamBindingInput interface {
	pulumi.Input

	ToApiIamBindingOutput() ApiIamBindingOutput
	ToApiIamBindingOutputWithContext(ctx context.Context) ApiIamBindingOutput
}

type ApiIamBindingOutput added in v0.26.0 

type ApiIamBindingOutput struct{ *pulumi.OutputState }

func (ApiIamBindingOutput) Condition added in v0.26.0 

func (o ApiIamBindingOutput) Condition() iam.ConditionPtrOutput

An IAM Condition for a given binding. See https://cloud.google.com/iam/docs/conditions-overview for additional details.

func (ApiIamBindingOutput) ElementType added in v0.26.0 

func (ApiIamBindingOutput) ElementType() reflect.Type

func (ApiIamBindingOutput) Etag added in v0.26.0 

func (o ApiIamBindingOutput) Etag() pulumi.StringOutput

The etag of the resource's IAM policy.

func (ApiIamBindingOutput) Members added in v0.26.0 

func (o ApiIamBindingOutput) Members() pulumi.StringArrayOutput

Specifies the principals requesting access for a Google Cloud resource. `members` can have the following values: * `allUsers`: A special identifier that represents anyone who is on the internet; with or without a Google account. * `allAuthenticatedUsers`: A special identifier that represents anyone who is authenticated with a Google account or a service account. Does not include identities that come from external identity providers (IdPs) through identity federation. * `user:{emailid}`: An email address that represents a specific Google account. For example, `alice@example.com` . * `serviceAccount:{emailid}`: An email address that represents a Google service account. For example, `my-other-app@appspot.gserviceaccount.com`. * `serviceAccount:{projectid}.svc.id.goog[{namespace}/{kubernetes-sa}]`: An identifier for a [Kubernetes service account](https://cloud.google.com/kubernetes-engine/docs/how-to/kubernetes-service-accounts). For example, `my-project.svc.id.goog[my-namespace/my-kubernetes-sa]`. * `group:{emailid}`: An email address that represents a Google group. For example, `admins@example.com`. * `domain:{domain}`: The G Suite domain (primary) that represents all the users of that domain. For example, `google.com` or `example.com`. * `deleted:user:{emailid}?uid={uniqueid}`: An email address (plus unique identifier) representing a user that has been recently deleted. For example, `alice@example.com?uid=123456789012345678901`. If the user is recovered, this value reverts to `user:{emailid}` and the recovered user retains the role in the binding. * `deleted:serviceAccount:{emailid}?uid={uniqueid}`: An email address (plus unique identifier) representing a service account that has been recently deleted. For example, `my-other-app@appspot.gserviceaccount.com?uid=123456789012345678901`. If the service account is undeleted, this value reverts to `serviceAccount:{emailid}` and the undeleted service account retains the role in the binding. * `deleted:group:{emailid}?uid={uniqueid}`: An email address (plus unique identifier) representing a Google group that has been recently deleted. For example, `admins@example.com?uid=123456789012345678901`. If the group is recovered, this value reverts to `group:{emailid}` and the recovered group retains the role in the binding.

func (ApiIamBindingOutput) Name added in v0.26.0 

func (o ApiIamBindingOutput) Name() pulumi.StringOutput

The name of the resource to manage IAM policies for.

func (ApiIamBindingOutput) Project added in v0.26.0 

func (o ApiIamBindingOutput) Project() pulumi.StringOutput

The project in which the resource belongs. If it is not provided, a default will be supplied.

func (ApiIamBindingOutput) Role added in v0.26.0 

func (o ApiIamBindingOutput) Role() pulumi.StringOutput

Role that is assigned to the list of `members`, or principals. For example, `roles/viewer`, `roles/editor`, or `roles/owner`.

func (ApiIamBindingOutput) ToApiIamBindingOutput added in v0.26.0 

func (o ApiIamBindingOutput) ToApiIamBindingOutput() ApiIamBindingOutput

func (ApiIamBindingOutput) ToApiIamBindingOutputWithContext added in v0.26.0 

func (o ApiIamBindingOutput) ToApiIamBindingOutputWithContext(ctx context.Context) ApiIamBindingOutput

type ApiIamBindingState added in v0.26.0 

type ApiIamBindingState struct {
}

func (ApiIamBindingState) ElementType added in v0.26.0 

func (ApiIamBindingState) ElementType() reflect.Type

type ApiIamMember added in v0.26.0 

type ApiIamMember struct {
	pulumi.CustomResourceState

	// An IAM Condition for a given binding. See https://cloud.google.com/iam/docs/conditions-overview for additional details.
	Condition iam.ConditionPtrOutput `pulumi:"condition"`
	// The etag of the resource's IAM policy.
	Etag pulumi.StringOutput `pulumi:"etag"`
	// Specifies the principals requesting access for a Google Cloud resource. `members` can have the following values: * `allUsers`: A special identifier that represents anyone who is on the internet; with or without a Google account. * `allAuthenticatedUsers`: A special identifier that represents anyone who is authenticated with a Google account or a service account. Does not include identities that come from external identity providers (IdPs) through identity federation. * `user:{emailid}`: An email address that represents a specific Google account. For example, `alice@example.com` . * `serviceAccount:{emailid}`: An email address that represents a Google service account. For example, `my-other-app@appspot.gserviceaccount.com`. * `serviceAccount:{projectid}.svc.id.goog[{namespace}/{kubernetes-sa}]`: An identifier for a [Kubernetes service account](https://cloud.google.com/kubernetes-engine/docs/how-to/kubernetes-service-accounts). For example, `my-project.svc.id.goog[my-namespace/my-kubernetes-sa]`. * `group:{emailid}`: An email address that represents a Google group. For example, `admins@example.com`. * `domain:{domain}`: The G Suite domain (primary) that represents all the users of that domain. For example, `google.com` or `example.com`. * `deleted:user:{emailid}?uid={uniqueid}`: An email address (plus unique identifier) representing a user that has been recently deleted. For example, `alice@example.com?uid=123456789012345678901`. If the user is recovered, this value reverts to `user:{emailid}` and the recovered user retains the role in the binding. * `deleted:serviceAccount:{emailid}?uid={uniqueid}`: An email address (plus unique identifier) representing a service account that has been recently deleted. For example, `my-other-app@appspot.gserviceaccount.com?uid=123456789012345678901`. If the service account is undeleted, this value reverts to `serviceAccount:{emailid}` and the undeleted service account retains the role in the binding. * `deleted:group:{emailid}?uid={uniqueid}`: An email address (plus unique identifier) representing a Google group that has been recently deleted. For example, `admins@example.com?uid=123456789012345678901`. If the group is recovered, this value reverts to `group:{emailid}` and the recovered group retains the role in the binding.
	Member pulumi.StringOutput `pulumi:"member"`
	// The name of the resource to manage IAM policies for.
	Name pulumi.StringOutput `pulumi:"name"`
	// The project in which the resource belongs. If it is not provided, a default will be supplied.
	Project pulumi.StringOutput `pulumi:"project"`
	// Role that is assigned to the list of `members`, or principals. For example, `roles/viewer`, `roles/editor`, or `roles/owner`.
	Role pulumi.StringOutput `pulumi:"role"`
}

Sets the access control policy on the specified resource. Replaces any existing policy. Can return `NOT_FOUND`, `INVALID_ARGUMENT`, and `PERMISSION_DENIED` errors.

func GetApiIamMember added in v0.26.0 

func GetApiIamMember(ctx *pulumi.Context,
	name string, id pulumi.IDInput, state *ApiIamMemberState, opts ...pulumi.ResourceOption) (*ApiIamMember, error)

GetApiIamMember gets an existing ApiIamMember resource's state with the given name, ID, and optional state properties that are used to uniquely qualify the lookup (nil if not required).

func NewApiIamMember added in v0.26.0 

func NewApiIamMember(ctx *pulumi.Context,
	name string, args *ApiIamMemberArgs, opts ...pulumi.ResourceOption) (*ApiIamMember, error)

NewApiIamMember registers a new resource with the given unique name, arguments, and options.

func (*ApiIamMember) ElementType added in v0.26.0 

func (*ApiIamMember) ElementType() reflect.Type

func (*ApiIamMember) ToApiIamMemberOutput added in v0.26.0 

func (i *ApiIamMember) ToApiIamMemberOutput() ApiIamMemberOutput

func (*ApiIamMember) ToApiIamMemberOutputWithContext added in v0.26.0 

func (i *ApiIamMember) ToApiIamMemberOutputWithContext(ctx context.Context) ApiIamMemberOutput

type ApiIamMemberArgs added in v0.26.0 

type ApiIamMemberArgs struct {
	// An IAM Condition for a given binding.
	Condition iam.ConditionPtrInput
	// Identity that will be granted the privilege in role. The entry can have one of the following values:
	//
	//  * user:{emailid}: An email address that represents a specific Google account. For example, alice@gmail.com or joe@example.com.
	//  * serviceAccount:{emailid}: An email address that represents a service account. For example, my-other-app@appspot.gserviceaccount.com.
	//  * group:{emailid}: An email address that represents a Google group. For example, admins@example.com.
	//  * domain:{domain}: A G Suite domain (primary, instead of alias) name that represents all the users of that domain. For example, google.com or example.com.
	Member pulumi.StringInput
	// The name of the resource to manage IAM policies for.
	Name pulumi.StringInput
	// The role that should be applied.
	Role pulumi.StringInput
}

The set of arguments for constructing a ApiIamMember resource.

func (ApiIamMemberArgs) ElementType added in v0.26.0 

func (ApiIamMemberArgs) ElementType() reflect.Type

type ApiIamMemberInput added in v0.26.0 

type ApiIamMemberInput interface {
	pulumi.Input

	ToApiIamMemberOutput() ApiIamMemberOutput
	ToApiIamMemberOutputWithContext(ctx context.Context) ApiIamMemberOutput
}

type ApiIamMemberOutput added in v0.26.0 

type ApiIamMemberOutput struct{ *pulumi.OutputState }

func (ApiIamMemberOutput) Condition added in v0.26.0 

func (o ApiIamMemberOutput) Condition() iam.ConditionPtrOutput

An IAM Condition for a given binding. See https://cloud.google.com/iam/docs/conditions-overview for additional details.

func (ApiIamMemberOutput) ElementType added in v0.26.0 

func (ApiIamMemberOutput) ElementType() reflect.Type

func (ApiIamMemberOutput) Etag added in v0.26.0 

func (o ApiIamMemberOutput) Etag() pulumi.StringOutput

The etag of the resource's IAM policy.

func (ApiIamMemberOutput) Member added in v0.26.0 

func (o ApiIamMemberOutput) Member() pulumi.StringOutput

Specifies the principals requesting access for a Google Cloud resource. `members` can have the following values: * `allUsers`: A special identifier that represents anyone who is on the internet; with or without a Google account. * `allAuthenticatedUsers`: A special identifier that represents anyone who is authenticated with a Google account or a service account. Does not include identities that come from external identity providers (IdPs) through identity federation. * `user:{emailid}`: An email address that represents a specific Google account. For example, `alice@example.com` . * `serviceAccount:{emailid}`: An email address that represents a Google service account. For example, `my-other-app@appspot.gserviceaccount.com`. * `serviceAccount:{projectid}.svc.id.goog[{namespace}/{kubernetes-sa}]`: An identifier for a [Kubernetes service account](https://cloud.google.com/kubernetes-engine/docs/how-to/kubernetes-service-accounts). For example, `my-project.svc.id.goog[my-namespace/my-kubernetes-sa]`. * `group:{emailid}`: An email address that represents a Google group. For example, `admins@example.com`. * `domain:{domain}`: The G Suite domain (primary) that represents all the users of that domain. For example, `google.com` or `example.com`. * `deleted:user:{emailid}?uid={uniqueid}`: An email address (plus unique identifier) representing a user that has been recently deleted. For example, `alice@example.com?uid=123456789012345678901`. If the user is recovered, this value reverts to `user:{emailid}` and the recovered user retains the role in the binding. * `deleted:serviceAccount:{emailid}?uid={uniqueid}`: An email address (plus unique identifier) representing a service account that has been recently deleted. For example, `my-other-app@appspot.gserviceaccount.com?uid=123456789012345678901`. If the service account is undeleted, this value reverts to `serviceAccount:{emailid}` and the undeleted service account retains the role in the binding. * `deleted:group:{emailid}?uid={uniqueid}`: An email address (plus unique identifier) representing a Google group that has been recently deleted. For example, `admins@example.com?uid=123456789012345678901`. If the group is recovered, this value reverts to `group:{emailid}` and the recovered group retains the role in the binding.

func (ApiIamMemberOutput) Name added in v0.26.0 

func (o ApiIamMemberOutput) Name() pulumi.StringOutput

The name of the resource to manage IAM policies for.

func (ApiIamMemberOutput) Project added in v0.26.0 

func (o ApiIamMemberOutput) Project() pulumi.StringOutput

The project in which the resource belongs. If it is not provided, a default will be supplied.

func (ApiIamMemberOutput) Role added in v0.26.0 

func (o ApiIamMemberOutput) Role() pulumi.StringOutput

Role that is assigned to the list of `members`, or principals. For example, `roles/viewer`, `roles/editor`, or `roles/owner`.

func (ApiIamMemberOutput) ToApiIamMemberOutput added in v0.26.0 

func (o ApiIamMemberOutput) ToApiIamMemberOutput() ApiIamMemberOutput

func (ApiIamMemberOutput) ToApiIamMemberOutputWithContext added in v0.26.0 

func (o ApiIamMemberOutput) ToApiIamMemberOutputWithContext(ctx context.Context) ApiIamMemberOutput

type ApiIamMemberState added in v0.26.0 

type ApiIamMemberState struct {
}

func (ApiIamMemberState) ElementType added in v0.26.0 

func (ApiIamMemberState) ElementType() reflect.Type

type ApiIamPolicy 

type ApiIamPolicy struct {
	pulumi.CustomResourceState

	ApiId pulumi.StringOutput `pulumi:"apiId"`
	// Associates a list of `members`, or principals, with a `role`. Optionally, may specify a `condition` that determines how and when the `bindings` are applied. Each of the `bindings` must contain at least one principal. The `bindings` in a `Policy` can refer to up to 1,500 principals; up to 250 of these principals can be Google groups. Each occurrence of a principal counts towards these limits. For example, if the `bindings` grant 50 different roles to `user:alice@example.com`, and not to any other principal, then you can add another 1,450 principals to the `bindings` in the `Policy`.
	Bindings BindingResponseArrayOutput `pulumi:"bindings"`
	// `etag` is used for optimistic concurrency control as a way to help prevent simultaneous updates of a policy from overwriting each other. It is strongly suggested that systems make use of the `etag` in the read-modify-write cycle to perform policy updates in order to avoid race conditions: An `etag` is returned in the response to `getIamPolicy`, and systems are expected to put that etag in the request to `setIamPolicy` to ensure that their change will be applied to the same version of the policy. **Important:** If you use IAM Conditions, you must include the `etag` field whenever you call `setIamPolicy`. If you omit this field, then IAM allows you to overwrite a version `3` policy with a version `1` policy, and all of the conditions in the version `3` policy are lost.
	Etag     pulumi.StringOutput `pulumi:"etag"`
	Location pulumi.StringOutput `pulumi:"location"`
	Project  pulumi.StringOutput `pulumi:"project"`
	// Specifies the format of the policy. Valid values are `0`, `1`, and `3`. Requests that specify an invalid value are rejected. Any operation that affects conditional role bindings must specify version `3`. This requirement applies to the following operations: * Getting a policy that includes a conditional role binding * Adding a conditional role binding to a policy * Changing a conditional role binding in a policy * Removing any role binding, with or without a condition, from a policy that includes conditions **Important:** If you use IAM Conditions, you must include the `etag` field whenever you call `setIamPolicy`. If you omit this field, then IAM allows you to overwrite a version `3` policy with a version `1` policy, and all of the conditions in the version `3` policy are lost. If a policy does not include any conditions, operations on that policy may specify any valid version or leave the field unset. To learn which resources support conditions in their IAM policies, see the [IAM documentation](https://cloud.google.com/iam/help/conditions/resource-policies).
	Version pulumi.IntOutput `pulumi:"version"`
}

Sets the access control policy on the specified resource. Replaces any existing policy. Can return `NOT_FOUND`, `INVALID_ARGUMENT`, and `PERMISSION_DENIED` errors. Note - this resource's API doesn't support deletion. When deleted, the resource will persist on Google Cloud even though it will be deleted from Pulumi state.

func GetApiIamPolicy 

func GetApiIamPolicy(ctx *pulumi.Context,
	name string, id pulumi.IDInput, state *ApiIamPolicyState, opts ...pulumi.ResourceOption) (*ApiIamPolicy, error)

GetApiIamPolicy gets an existing ApiIamPolicy resource's state with the given name, ID, and optional state properties that are used to uniquely qualify the lookup (nil if not required).

func NewApiIamPolicy 

func NewApiIamPolicy(ctx *pulumi.Context,
	name string, args *ApiIamPolicyArgs, opts ...pulumi.ResourceOption) (*ApiIamPolicy, error)

NewApiIamPolicy registers a new resource with the given unique name, arguments, and options.

func (*ApiIamPolicy) ElementType 

func (*ApiIamPolicy) ElementType() reflect.Type

func (*ApiIamPolicy) ToApiIamPolicyOutput 

func (i *ApiIamPolicy) ToApiIamPolicyOutput() ApiIamPolicyOutput

func (*ApiIamPolicy) ToApiIamPolicyOutputWithContext 

func (i *ApiIamPolicy) ToApiIamPolicyOutputWithContext(ctx context.Context) ApiIamPolicyOutput

type ApiIamPolicyArgs 

type ApiIamPolicyArgs struct {
	ApiId pulumi.StringInput
	// Associates a list of `members`, or principals, with a `role`. Optionally, may specify a `condition` that determines how and when the `bindings` are applied. Each of the `bindings` must contain at least one principal. The `bindings` in a `Policy` can refer to up to 1,500 principals; up to 250 of these principals can be Google groups. Each occurrence of a principal counts towards these limits. For example, if the `bindings` grant 50 different roles to `user:alice@example.com`, and not to any other principal, then you can add another 1,450 principals to the `bindings` in the `Policy`.
	Bindings BindingArrayInput
	// `etag` is used for optimistic concurrency control as a way to help prevent simultaneous updates of a policy from overwriting each other. It is strongly suggested that systems make use of the `etag` in the read-modify-write cycle to perform policy updates in order to avoid race conditions: An `etag` is returned in the response to `getIamPolicy`, and systems are expected to put that etag in the request to `setIamPolicy` to ensure that their change will be applied to the same version of the policy. **Important:** If you use IAM Conditions, you must include the `etag` field whenever you call `setIamPolicy`. If you omit this field, then IAM allows you to overwrite a version `3` policy with a version `1` policy, and all of the conditions in the version `3` policy are lost.
	Etag     pulumi.StringPtrInput
	Location pulumi.StringPtrInput
	Project  pulumi.StringPtrInput
	// Specifies the format of the policy. Valid values are `0`, `1`, and `3`. Requests that specify an invalid value are rejected. Any operation that affects conditional role bindings must specify version `3`. This requirement applies to the following operations: * Getting a policy that includes a conditional role binding * Adding a conditional role binding to a policy * Changing a conditional role binding in a policy * Removing any role binding, with or without a condition, from a policy that includes conditions **Important:** If you use IAM Conditions, you must include the `etag` field whenever you call `setIamPolicy`. If you omit this field, then IAM allows you to overwrite a version `3` policy with a version `1` policy, and all of the conditions in the version `3` policy are lost. If a policy does not include any conditions, operations on that policy may specify any valid version or leave the field unset. To learn which resources support conditions in their IAM policies, see the [IAM documentation](https://cloud.google.com/iam/help/conditions/resource-policies).
	Version pulumi.IntPtrInput
}

The set of arguments for constructing a ApiIamPolicy resource.

func (ApiIamPolicyArgs) ElementType 

func (ApiIamPolicyArgs) ElementType() reflect.Type

type ApiIamPolicyInput 

type ApiIamPolicyInput interface {
	pulumi.Input

	ToApiIamPolicyOutput() ApiIamPolicyOutput
	ToApiIamPolicyOutputWithContext(ctx context.Context) ApiIamPolicyOutput
}

type ApiIamPolicyOutput 

type ApiIamPolicyOutput struct{ *pulumi.OutputState }

func (ApiIamPolicyOutput) ApiId added in v0.21.0 

func (o ApiIamPolicyOutput) ApiId() pulumi.StringOutput

func (ApiIamPolicyOutput) Bindings 

func (o ApiIamPolicyOutput) Bindings() BindingResponseArrayOutput

Associates a list of `members`, or principals, with a `role`. Optionally, may specify a `condition` that determines how and when the `bindings` are applied. Each of the `bindings` must contain at least one principal. The `bindings` in a `Policy` can refer to up to 1,500 principals; up to 250 of these principals can be Google groups. Each occurrence of a principal counts towards these limits. For example, if the `bindings` grant 50 different roles to `user:alice@example.com`, and not to any other principal, then you can add another 1,450 principals to the `bindings` in the `Policy`.

func (ApiIamPolicyOutput) ElementType 

func (ApiIamPolicyOutput) ElementType() reflect.Type

func (ApiIamPolicyOutput) Etag 

func (o ApiIamPolicyOutput) Etag() pulumi.StringOutput

`etag` is used for optimistic concurrency control as a way to help prevent simultaneous updates of a policy from overwriting each other. It is strongly suggested that systems make use of the `etag` in the read-modify-write cycle to perform policy updates in order to avoid race conditions: An `etag` is returned in the response to `getIamPolicy`, and systems are expected to put that etag in the request to `setIamPolicy` to ensure that their change will be applied to the same version of the policy. **Important:** If you use IAM Conditions, you must include the `etag` field whenever you call `setIamPolicy`. If you omit this field, then IAM allows you to overwrite a version `3` policy with a version `1` policy, and all of the conditions in the version `3` policy are lost.

func (ApiIamPolicyOutput) Location added in v0.21.0 

func (o ApiIamPolicyOutput) Location() pulumi.StringOutput

func (ApiIamPolicyOutput) Project added in v0.21.0 

func (o ApiIamPolicyOutput) Project() pulumi.StringOutput

func (ApiIamPolicyOutput) ToApiIamPolicyOutput 

func (o ApiIamPolicyOutput) ToApiIamPolicyOutput() ApiIamPolicyOutput

func (ApiIamPolicyOutput) ToApiIamPolicyOutputWithContext 

func (o ApiIamPolicyOutput) ToApiIamPolicyOutputWithContext(ctx context.Context) ApiIamPolicyOutput

func (ApiIamPolicyOutput) Version 

func (o ApiIamPolicyOutput) Version() pulumi.IntOutput

Specifies the format of the policy. Valid values are `0`, `1`, and `3`. Requests that specify an invalid value are rejected. Any operation that affects conditional role bindings must specify version `3`. This requirement applies to the following operations: * Getting a policy that includes a conditional role binding * Adding a conditional role binding to a policy * Changing a conditional role binding in a policy * Removing any role binding, with or without a condition, from a policy that includes conditions **Important:** If you use IAM Conditions, you must include the `etag` field whenever you call `setIamPolicy`. If you omit this field, then IAM allows you to overwrite a version `3` policy with a version `1` policy, and all of the conditions in the version `3` policy are lost. If a policy does not include any conditions, operations on that policy may specify any valid version or leave the field unset. To learn which resources support conditions in their IAM policies, see the [IAM documentation](https://cloud.google.com/iam/help/conditions/resource-policies).

type ApiIamPolicyState 

type ApiIamPolicyState struct {
}

func (ApiIamPolicyState) ElementType 

func (ApiIamPolicyState) ElementType() reflect.Type

type ApiInput 

type ApiInput interface {
	pulumi.Input

	ToApiOutput() ApiOutput
	ToApiOutputWithContext(ctx context.Context) ApiOutput
}

type ApiOutput 

type ApiOutput struct{ *pulumi.OutputState }

func (ApiOutput) Annotations 

func (o ApiOutput) Annotations() pulumi.StringMapOutput

Annotations attach non-identifying metadata to resources. Annotation keys and values are less restricted than those of labels, but should be generally used for small values of broad interest. Larger, topic- specific metadata should be stored in Artifacts.

func (ApiOutput) ApiId added in v0.21.0 

func (o ApiOutput) ApiId() pulumi.StringOutput

Required. The ID to use for the API, which will become the final component of the API's resource name. This value should be 4-63 characters, and valid characters are /a-z-/. Following AIP-162, IDs must not have the form of a UUID.

func (ApiOutput) Availability 

func (o ApiOutput) Availability() pulumi.StringOutput

A user-definable description of the availability of this service. Format: free-form, but we expect single words that describe availability, e.g., "NONE", "TESTING", "PREVIEW", "GENERAL", "DEPRECATED", "SHUTDOWN".

func (ApiOutput) CreateTime 

func (o ApiOutput) CreateTime() pulumi.StringOutput

Creation timestamp.

func (ApiOutput) Description 

func (o ApiOutput) Description() pulumi.StringOutput

A detailed description.

func (ApiOutput) DisplayName 

func (o ApiOutput) DisplayName() pulumi.StringOutput

Human-meaningful name.

func (ApiOutput) ElementType 

func (ApiOutput) ElementType() reflect.Type

func (ApiOutput) Labels 

func (o ApiOutput) Labels() pulumi.StringMapOutput

Labels attach identifying metadata to resources. Identifying metadata can be used to filter list operations. Label keys and values can be no longer than 64 characters (Unicode codepoints), can only contain lowercase letters, numeric characters, underscores, and dashes. International characters are allowed. No more than 64 user labels can be associated with one resource (System labels are excluded). See https://goo.gl/xmQnxf for more information and examples of labels. System reserved label keys are prefixed with `apigeeregistry.googleapis.com/` and cannot be changed.

func (ApiOutput) Location added in v0.21.0 

func (o ApiOutput) Location() pulumi.StringOutput

func (ApiOutput) Name 

func (o ApiOutput) Name() pulumi.StringOutput

Resource name.

func (ApiOutput) Project added in v0.21.0 

func (o ApiOutput) Project() pulumi.StringOutput

func (ApiOutput) RecommendedDeployment 

func (o ApiOutput) RecommendedDeployment() pulumi.StringOutput

The recommended deployment of the API. Format: `projects/{project}/locations/{location}/apis/{api}/deployments/{deployment}`

func (ApiOutput) RecommendedVersion 

func (o ApiOutput) RecommendedVersion() pulumi.StringOutput

The recommended version of the API. Format: `projects/{project}/locations/{location}/apis/{api}/versions/{version}`

func (ApiOutput) ToApiOutput 

func (o ApiOutput) ToApiOutput() ApiOutput

func (ApiOutput) ToApiOutputWithContext 

func (o ApiOutput) ToApiOutputWithContext(ctx context.Context) ApiOutput

func (ApiOutput) UpdateTime 

func (o ApiOutput) UpdateTime() pulumi.StringOutput

Last update timestamp.

type ApiState 

type ApiState struct {
}

func (ApiState) ElementType 

func (ApiState) ElementType() reflect.Type

type ApiVersionArtifactIamBinding added in v0.26.0 

type ApiVersionArtifactIamBinding struct {
	pulumi.CustomResourceState

	// An IAM Condition for a given binding. See https://cloud.google.com/iam/docs/conditions-overview for additional details.
	Condition iam.ConditionPtrOutput `pulumi:"condition"`
	// The etag of the resource's IAM policy.
	Etag pulumi.StringOutput `pulumi:"etag"`
	// Specifies the principals requesting access for a Google Cloud resource. `members` can have the following values: * `allUsers`: A special identifier that represents anyone who is on the internet; with or without a Google account. * `allAuthenticatedUsers`: A special identifier that represents anyone who is authenticated with a Google account or a service account. Does not include identities that come from external identity providers (IdPs) through identity federation. * `user:{emailid}`: An email address that represents a specific Google account. For example, `alice@example.com` . * `serviceAccount:{emailid}`: An email address that represents a Google service account. For example, `my-other-app@appspot.gserviceaccount.com`. * `serviceAccount:{projectid}.svc.id.goog[{namespace}/{kubernetes-sa}]`: An identifier for a [Kubernetes service account](https://cloud.google.com/kubernetes-engine/docs/how-to/kubernetes-service-accounts). For example, `my-project.svc.id.goog[my-namespace/my-kubernetes-sa]`. * `group:{emailid}`: An email address that represents a Google group. For example, `admins@example.com`. * `domain:{domain}`: The G Suite domain (primary) that represents all the users of that domain. For example, `google.com` or `example.com`. * `deleted:user:{emailid}?uid={uniqueid}`: An email address (plus unique identifier) representing a user that has been recently deleted. For example, `alice@example.com?uid=123456789012345678901`. If the user is recovered, this value reverts to `user:{emailid}` and the recovered user retains the role in the binding. * `deleted:serviceAccount:{emailid}?uid={uniqueid}`: An email address (plus unique identifier) representing a service account that has been recently deleted. For example, `my-other-app@appspot.gserviceaccount.com?uid=123456789012345678901`. If the service account is undeleted, this value reverts to `serviceAccount:{emailid}` and the undeleted service account retains the role in the binding. * `deleted:group:{emailid}?uid={uniqueid}`: An email address (plus unique identifier) representing a Google group that has been recently deleted. For example, `admins@example.com?uid=123456789012345678901`. If the group is recovered, this value reverts to `group:{emailid}` and the recovered group retains the role in the binding.
	Members pulumi.StringArrayOutput `pulumi:"members"`
	// The name of the resource to manage IAM policies for.
	Name pulumi.StringOutput `pulumi:"name"`
	// The project in which the resource belongs. If it is not provided, a default will be supplied.
	Project pulumi.StringOutput `pulumi:"project"`
	// Role that is assigned to the list of `members`, or principals. For example, `roles/viewer`, `roles/editor`, or `roles/owner`.
	Role pulumi.StringOutput `pulumi:"role"`
}

Sets the access control policy on the specified resource. Replaces any existing policy. Can return `NOT_FOUND`, `INVALID_ARGUMENT`, and `PERMISSION_DENIED` errors.

func GetApiVersionArtifactIamBinding added in v0.26.0 

func GetApiVersionArtifactIamBinding(ctx *pulumi.Context,
	name string, id pulumi.IDInput, state *ApiVersionArtifactIamBindingState, opts ...pulumi.ResourceOption) (*ApiVersionArtifactIamBinding, error)

GetApiVersionArtifactIamBinding gets an existing ApiVersionArtifactIamBinding resource's state with the given name, ID, and optional state properties that are used to uniquely qualify the lookup (nil if not required).

func NewApiVersionArtifactIamBinding added in v0.26.0 

func NewApiVersionArtifactIamBinding(ctx *pulumi.Context,
	name string, args *ApiVersionArtifactIamBindingArgs, opts ...pulumi.ResourceOption) (*ApiVersionArtifactIamBinding, error)

NewApiVersionArtifactIamBinding registers a new resource with the given unique name, arguments, and options.

func (*ApiVersionArtifactIamBinding) ElementType added in v0.26.0 

func (*ApiVersionArtifactIamBinding) ElementType() reflect.Type

func (*ApiVersionArtifactIamBinding) ToApiVersionArtifactIamBindingOutput added in v0.26.0 

func (i *ApiVersionArtifactIamBinding) ToApiVersionArtifactIamBindingOutput() ApiVersionArtifactIamBindingOutput

func (*ApiVersionArtifactIamBinding) ToApiVersionArtifactIamBindingOutputWithContext added in v0.26.0 

func (i *ApiVersionArtifactIamBinding) ToApiVersionArtifactIamBindingOutputWithContext(ctx context.Context) ApiVersionArtifactIamBindingOutput

type ApiVersionArtifactIamBindingArgs added in v0.26.0 

type ApiVersionArtifactIamBindingArgs struct {
	// An IAM Condition for a given binding.
	Condition iam.ConditionPtrInput
	// Identities that will be granted the privilege in role. Each entry can have one of the following values:
	//
	//  * user:{emailid}: An email address that represents a specific Google account. For example, alice@gmail.com or joe@example.com.
	//  * serviceAccount:{emailid}: An email address that represents a service account. For example, my-other-app@appspot.gserviceaccount.com.
	//  * group:{emailid}: An email address that represents a Google group. For example, admins@example.com.
	//  * domain:{domain}: A G Suite domain (primary, instead of alias) name that represents all the users of that domain. For example, google.com or example.com.
	Members pulumi.StringArrayInput
	// The name of the resource to manage IAM policies for.
	Name pulumi.StringInput
	// The role that should be applied. Only one `IamBinding` can be used per role.
	Role pulumi.StringInput
}

The set of arguments for constructing a ApiVersionArtifactIamBinding resource.

func (ApiVersionArtifactIamBindingArgs) ElementType added in v0.26.0 

func (ApiVersionArtifactIamBindingArgs) ElementType() reflect.Type

type ApiVersionArtifactIamBindingInput added in v0.26.0 

type ApiVersionArtifactIamBindingInput interface {
	pulumi.Input

	ToApiVersionArtifactIamBindingOutput() ApiVersionArtifactIamBindingOutput
	ToApiVersionArtifactIamBindingOutputWithContext(ctx context.Context) ApiVersionArtifactIamBindingOutput
}

type ApiVersionArtifactIamBindingOutput added in v0.26.0 

type ApiVersionArtifactIamBindingOutput struct{ *pulumi.OutputState }

func (ApiVersionArtifactIamBindingOutput) Condition added in v0.26.0 

func (o ApiVersionArtifactIamBindingOutput) Condition() iam.ConditionPtrOutput

An IAM Condition for a given binding. See https://cloud.google.com/iam/docs/conditions-overview for additional details.

func (ApiVersionArtifactIamBindingOutput) ElementType added in v0.26.0 

func (ApiVersionArtifactIamBindingOutput) ElementType() reflect.Type

func (ApiVersionArtifactIamBindingOutput) Etag added in v0.26.0 

func (o ApiVersionArtifactIamBindingOutput) Etag() pulumi.StringOutput

The etag of the resource's IAM policy.

func (ApiVersionArtifactIamBindingOutput) Members added in v0.26.0 

func (o ApiVersionArtifactIamBindingOutput) Members() pulumi.StringArrayOutput

Specifies the principals requesting access for a Google Cloud resource. `members` can have the following values: * `allUsers`: A special identifier that represents anyone who is on the internet; with or without a Google account. * `allAuthenticatedUsers`: A special identifier that represents anyone who is authenticated with a Google account or a service account. Does not include identities that come from external identity providers (IdPs) through identity federation. * `user:{emailid}`: An email address that represents a specific Google account. For example, `alice@example.com` . * `serviceAccount:{emailid}`: An email address that represents a Google service account. For example, `my-other-app@appspot.gserviceaccount.com`. * `serviceAccount:{projectid}.svc.id.goog[{namespace}/{kubernetes-sa}]`: An identifier for a [Kubernetes service account](https://cloud.google.com/kubernetes-engine/docs/how-to/kubernetes-service-accounts). For example, `my-project.svc.id.goog[my-namespace/my-kubernetes-sa]`. * `group:{emailid}`: An email address that represents a Google group. For example, `admins@example.com`. * `domain:{domain}`: The G Suite domain (primary) that represents all the users of that domain. For example, `google.com` or `example.com`. * `deleted:user:{emailid}?uid={uniqueid}`: An email address (plus unique identifier) representing a user that has been recently deleted. For example, `alice@example.com?uid=123456789012345678901`. If the user is recovered, this value reverts to `user:{emailid}` and the recovered user retains the role in the binding. * `deleted:serviceAccount:{emailid}?uid={uniqueid}`: An email address (plus unique identifier) representing a service account that has been recently deleted. For example, `my-other-app@appspot.gserviceaccount.com?uid=123456789012345678901`. If the service account is undeleted, this value reverts to `serviceAccount:{emailid}` and the undeleted service account retains the role in the binding. * `deleted:group:{emailid}?uid={uniqueid}`: An email address (plus unique identifier) representing a Google group that has been recently deleted. For example, `admins@example.com?uid=123456789012345678901`. If the group is recovered, this value reverts to `group:{emailid}` and the recovered group retains the role in the binding.

func (ApiVersionArtifactIamBindingOutput) Name added in v0.26.0 

func (o ApiVersionArtifactIamBindingOutput) Name() pulumi.StringOutput

The name of the resource to manage IAM policies for.

func (ApiVersionArtifactIamBindingOutput) Project added in v0.26.0 

func (o ApiVersionArtifactIamBindingOutput) Project() pulumi.StringOutput

The project in which the resource belongs. If it is not provided, a default will be supplied.

func (ApiVersionArtifactIamBindingOutput) Role added in v0.26.0 

func (o ApiVersionArtifactIamBindingOutput) Role() pulumi.StringOutput

Role that is assigned to the list of `members`, or principals. For example, `roles/viewer`, `roles/editor`, or `roles/owner`.

func (ApiVersionArtifactIamBindingOutput) ToApiVersionArtifactIamBindingOutput added in v0.26.0 

func (o ApiVersionArtifactIamBindingOutput) ToApiVersionArtifactIamBindingOutput() ApiVersionArtifactIamBindingOutput

func (ApiVersionArtifactIamBindingOutput) ToApiVersionArtifactIamBindingOutputWithContext added in v0.26.0 

func (o ApiVersionArtifactIamBindingOutput) ToApiVersionArtifactIamBindingOutputWithContext(ctx context.Context) ApiVersionArtifactIamBindingOutput

type ApiVersionArtifactIamBindingState added in v0.26.0 

type ApiVersionArtifactIamBindingState struct {
}

func (ApiVersionArtifactIamBindingState) ElementType added in v0.26.0 

func (ApiVersionArtifactIamBindingState) ElementType() reflect.Type

type ApiVersionArtifactIamMember added in v0.26.0 

type ApiVersionArtifactIamMember struct {
	pulumi.CustomResourceState

	// An IAM Condition for a given binding. See https://cloud.google.com/iam/docs/conditions-overview for additional details.
	Condition iam.ConditionPtrOutput `pulumi:"condition"`
	// The etag of the resource's IAM policy.
	Etag pulumi.StringOutput `pulumi:"etag"`
	// Specifies the principals requesting access for a Google Cloud resource. `members` can have the following values: * `allUsers`: A special identifier that represents anyone who is on the internet; with or without a Google account. * `allAuthenticatedUsers`: A special identifier that represents anyone who is authenticated with a Google account or a service account. Does not include identities that come from external identity providers (IdPs) through identity federation. * `user:{emailid}`: An email address that represents a specific Google account. For example, `alice@example.com` . * `serviceAccount:{emailid}`: An email address that represents a Google service account. For example, `my-other-app@appspot.gserviceaccount.com`. * `serviceAccount:{projectid}.svc.id.goog[{namespace}/{kubernetes-sa}]`: An identifier for a [Kubernetes service account](https://cloud.google.com/kubernetes-engine/docs/how-to/kubernetes-service-accounts). For example, `my-project.svc.id.goog[my-namespace/my-kubernetes-sa]`. * `group:{emailid}`: An email address that represents a Google group. For example, `admins@example.com`. * `domain:{domain}`: The G Suite domain (primary) that represents all the users of that domain. For example, `google.com` or `example.com`. * `deleted:user:{emailid}?uid={uniqueid}`: An email address (plus unique identifier) representing a user that has been recently deleted. For example, `alice@example.com?uid=123456789012345678901`. If the user is recovered, this value reverts to `user:{emailid}` and the recovered user retains the role in the binding. * `deleted:serviceAccount:{emailid}?uid={uniqueid}`: An email address (plus unique identifier) representing a service account that has been recently deleted. For example, `my-other-app@appspot.gserviceaccount.com?uid=123456789012345678901`. If the service account is undeleted, this value reverts to `serviceAccount:{emailid}` and the undeleted service account retains the role in the binding. * `deleted:group:{emailid}?uid={uniqueid}`: An email address (plus unique identifier) representing a Google group that has been recently deleted. For example, `admins@example.com?uid=123456789012345678901`. If the group is recovered, this value reverts to `group:{emailid}` and the recovered group retains the role in the binding.
	Member pulumi.StringOutput `pulumi:"member"`
	// The name of the resource to manage IAM policies for.
	Name pulumi.StringOutput `pulumi:"name"`
	// The project in which the resource belongs. If it is not provided, a default will be supplied.
	Project pulumi.StringOutput `pulumi:"project"`
	// Role that is assigned to the list of `members`, or principals. For example, `roles/viewer`, `roles/editor`, or `roles/owner`.
	Role pulumi.StringOutput `pulumi:"role"`
}

Sets the access control policy on the specified resource. Replaces any existing policy. Can return `NOT_FOUND`, `INVALID_ARGUMENT`, and `PERMISSION_DENIED` errors.

func GetApiVersionArtifactIamMember added in v0.26.0 

func GetApiVersionArtifactIamMember(ctx *pulumi.Context,
	name string, id pulumi.IDInput, state *ApiVersionArtifactIamMemberState, opts ...pulumi.ResourceOption) (*ApiVersionArtifactIamMember, error)

GetApiVersionArtifactIamMember gets an existing ApiVersionArtifactIamMember resource's state with the given name, ID, and optional state properties that are used to uniquely qualify the lookup (nil if not required).

func NewApiVersionArtifactIamMember added in v0.26.0 

func NewApiVersionArtifactIamMember(ctx *pulumi.Context,
	name string, args *ApiVersionArtifactIamMemberArgs, opts ...pulumi.ResourceOption) (*ApiVersionArtifactIamMember, error)

NewApiVersionArtifactIamMember registers a new resource with the given unique name, arguments, and options.

func (*ApiVersionArtifactIamMember) ElementType added in v0.26.0 

func (*ApiVersionArtifactIamMember) ElementType() reflect.Type

func (*ApiVersionArtifactIamMember) ToApiVersionArtifactIamMemberOutput added in v0.26.0 

func (i *ApiVersionArtifactIamMember) ToApiVersionArtifactIamMemberOutput() ApiVersionArtifactIamMemberOutput

func (*ApiVersionArtifactIamMember) ToApiVersionArtifactIamMemberOutputWithContext added in v0.26.0 

func (i *ApiVersionArtifactIamMember) ToApiVersionArtifactIamMemberOutputWithContext(ctx context.Context) ApiVersionArtifactIamMemberOutput

type ApiVersionArtifactIamMemberArgs added in v0.26.0 

type ApiVersionArtifactIamMemberArgs struct {
	// An IAM Condition for a given binding.
	Condition iam.ConditionPtrInput
	// Identity that will be granted the privilege in role. The entry can have one of the following values:
	//
	//  * user:{emailid}: An email address that represents a specific Google account. For example, alice@gmail.com or joe@example.com.
	//  * serviceAccount:{emailid}: An email address that represents a service account. For example, my-other-app@appspot.gserviceaccount.com.
	//  * group:{emailid}: An email address that represents a Google group. For example, admins@example.com.
	//  * domain:{domain}: A G Suite domain (primary, instead of alias) name that represents all the users of that domain. For example, google.com or example.com.
	Member pulumi.StringInput
	// The name of the resource to manage IAM policies for.
	Name pulumi.StringInput
	// The role that should be applied.
	Role pulumi.StringInput
}

The set of arguments for constructing a ApiVersionArtifactIamMember resource.

func (ApiVersionArtifactIamMemberArgs) ElementType added in v0.26.0 

func (ApiVersionArtifactIamMemberArgs) ElementType() reflect.Type

type ApiVersionArtifactIamMemberInput added in v0.26.0 

type ApiVersionArtifactIamMemberInput interface {
	pulumi.Input

	ToApiVersionArtifactIamMemberOutput() ApiVersionArtifactIamMemberOutput
	ToApiVersionArtifactIamMemberOutputWithContext(ctx context.Context) ApiVersionArtifactIamMemberOutput
}

type ApiVersionArtifactIamMemberOutput added in v0.26.0 

type ApiVersionArtifactIamMemberOutput struct{ *pulumi.OutputState }

func (ApiVersionArtifactIamMemberOutput) Condition added in v0.26.0 

func (o ApiVersionArtifactIamMemberOutput) Condition() iam.ConditionPtrOutput

An IAM Condition for a given binding. See https://cloud.google.com/iam/docs/conditions-overview for additional details.

func (ApiVersionArtifactIamMemberOutput) ElementType added in v0.26.0 

func (ApiVersionArtifactIamMemberOutput) ElementType() reflect.Type

func (ApiVersionArtifactIamMemberOutput) Etag added in v0.26.0 

func (o ApiVersionArtifactIamMemberOutput) Etag() pulumi.StringOutput

The etag of the resource's IAM policy.

func (ApiVersionArtifactIamMemberOutput) Member added in v0.26.0 

func (o ApiVersionArtifactIamMemberOutput) Member() pulumi.StringOutput

Specifies the principals requesting access for a Google Cloud resource. `members` can have the following values: * `allUsers`: A special identifier that represents anyone who is on the internet; with or without a Google account. * `allAuthenticatedUsers`: A special identifier that represents anyone who is authenticated with a Google account or a service account. Does not include identities that come from external identity providers (IdPs) through identity federation. * `user:{emailid}`: An email address that represents a specific Google account. For example, `alice@example.com` . * `serviceAccount:{emailid}`: An email address that represents a Google service account. For example, `my-other-app@appspot.gserviceaccount.com`. * `serviceAccount:{projectid}.svc.id.goog[{namespace}/{kubernetes-sa}]`: An identifier for a [Kubernetes service account](https://cloud.google.com/kubernetes-engine/docs/how-to/kubernetes-service-accounts). For example, `my-project.svc.id.goog[my-namespace/my-kubernetes-sa]`. * `group:{emailid}`: An email address that represents a Google group. For example, `admins@example.com`. * `domain:{domain}`: The G Suite domain (primary) that represents all the users of that domain. For example, `google.com` or `example.com`. * `deleted:user:{emailid}?uid={uniqueid}`: An email address (plus unique identifier) representing a user that has been recently deleted. For example, `alice@example.com?uid=123456789012345678901`. If the user is recovered, this value reverts to `user:{emailid}` and the recovered user retains the role in the binding. * `deleted:serviceAccount:{emailid}?uid={uniqueid}`: An email address (plus unique identifier) representing a service account that has been recently deleted. For example, `my-other-app@appspot.gserviceaccount.com?uid=123456789012345678901`. If the service account is undeleted, this value reverts to `serviceAccount:{emailid}` and the undeleted service account retains the role in the binding. * `deleted:group:{emailid}?uid={uniqueid}`: An email address (plus unique identifier) representing a Google group that has been recently deleted. For example, `admins@example.com?uid=123456789012345678901`. If the group is recovered, this value reverts to `group:{emailid}` and the recovered group retains the role in the binding.

func (ApiVersionArtifactIamMemberOutput) Name added in v0.26.0 

func (o ApiVersionArtifactIamMemberOutput) Name() pulumi.StringOutput

The name of the resource to manage IAM policies for.

func (ApiVersionArtifactIamMemberOutput) Project added in v0.26.0 

func (o ApiVersionArtifactIamMemberOutput) Project() pulumi.StringOutput

The project in which the resource belongs. If it is not provided, a default will be supplied.

func (ApiVersionArtifactIamMemberOutput) Role added in v0.26.0 

func (o ApiVersionArtifactIamMemberOutput) Role() pulumi.StringOutput

Role that is assigned to the list of `members`, or principals. For example, `roles/viewer`, `roles/editor`, or `roles/owner`.

func (ApiVersionArtifactIamMemberOutput) ToApiVersionArtifactIamMemberOutput added in v0.26.0 

func (o ApiVersionArtifactIamMemberOutput) ToApiVersionArtifactIamMemberOutput() ApiVersionArtifactIamMemberOutput

func (ApiVersionArtifactIamMemberOutput) ToApiVersionArtifactIamMemberOutputWithContext added in v0.26.0 

func (o ApiVersionArtifactIamMemberOutput) ToApiVersionArtifactIamMemberOutputWithContext(ctx context.Context) ApiVersionArtifactIamMemberOutput

type ApiVersionArtifactIamMemberState added in v0.26.0 

type ApiVersionArtifactIamMemberState struct {
}

func (ApiVersionArtifactIamMemberState) ElementType added in v0.26.0 

func (ApiVersionArtifactIamMemberState) ElementType() reflect.Type

type ApiVersionArtifactIamPolicy 

type ApiVersionArtifactIamPolicy struct {
	pulumi.CustomResourceState

	ApiId      pulumi.StringOutput `pulumi:"apiId"`
	ArtifactId pulumi.StringOutput `pulumi:"artifactId"`
	// Associates a list of `members`, or principals, with a `role`. Optionally, may specify a `condition` that determines how and when the `bindings` are applied. Each of the `bindings` must contain at least one principal. The `bindings` in a `Policy` can refer to up to 1,500 principals; up to 250 of these principals can be Google groups. Each occurrence of a principal counts towards these limits. For example, if the `bindings` grant 50 different roles to `user:alice@example.com`, and not to any other principal, then you can add another 1,450 principals to the `bindings` in the `Policy`.
	Bindings BindingResponseArrayOutput `pulumi:"bindings"`
	// `etag` is used for optimistic concurrency control as a way to help prevent simultaneous updates of a policy from overwriting each other. It is strongly suggested that systems make use of the `etag` in the read-modify-write cycle to perform policy updates in order to avoid race conditions: An `etag` is returned in the response to `getIamPolicy`, and systems are expected to put that etag in the request to `setIamPolicy` to ensure that their change will be applied to the same version of the policy. **Important:** If you use IAM Conditions, you must include the `etag` field whenever you call `setIamPolicy`. If you omit this field, then IAM allows you to overwrite a version `3` policy with a version `1` policy, and all of the conditions in the version `3` policy are lost.
	Etag     pulumi.StringOutput `pulumi:"etag"`
	Location pulumi.StringOutput `pulumi:"location"`
	Project  pulumi.StringOutput `pulumi:"project"`
	// Specifies the format of the policy. Valid values are `0`, `1`, and `3`. Requests that specify an invalid value are rejected. Any operation that affects conditional role bindings must specify version `3`. This requirement applies to the following operations: * Getting a policy that includes a conditional role binding * Adding a conditional role binding to a policy * Changing a conditional role binding in a policy * Removing any role binding, with or without a condition, from a policy that includes conditions **Important:** If you use IAM Conditions, you must include the `etag` field whenever you call `setIamPolicy`. If you omit this field, then IAM allows you to overwrite a version `3` policy with a version `1` policy, and all of the conditions in the version `3` policy are lost. If a policy does not include any conditions, operations on that policy may specify any valid version or leave the field unset. To learn which resources support conditions in their IAM policies, see the [IAM documentation](https://cloud.google.com/iam/help/conditions/resource-policies).
	Version   pulumi.IntOutput    `pulumi:"version"`
	VersionId pulumi.StringOutput `pulumi:"versionId"`
}

Sets the access control policy on the specified resource. Replaces any existing policy. Can return `NOT_FOUND`, `INVALID_ARGUMENT`, and `PERMISSION_DENIED` errors. Note - this resource's API doesn't support deletion. When deleted, the resource will persist on Google Cloud even though it will be deleted from Pulumi state.

func GetApiVersionArtifactIamPolicy 

func GetApiVersionArtifactIamPolicy(ctx *pulumi.Context,
	name string, id pulumi.IDInput, state *ApiVersionArtifactIamPolicyState, opts ...pulumi.ResourceOption) (*ApiVersionArtifactIamPolicy, error)

GetApiVersionArtifactIamPolicy gets an existing ApiVersionArtifactIamPolicy resource's state with the given name, ID, and optional state properties that are used to uniquely qualify the lookup (nil if not required).

func NewApiVersionArtifactIamPolicy 

func NewApiVersionArtifactIamPolicy(ctx *pulumi.Context,
	name string, args *ApiVersionArtifactIamPolicyArgs, opts ...pulumi.ResourceOption) (*ApiVersionArtifactIamPolicy, error)

NewApiVersionArtifactIamPolicy registers a new resource with the given unique name, arguments, and options.

func (*ApiVersionArtifactIamPolicy) ElementType 

func (*ApiVersionArtifactIamPolicy) ElementType() reflect.Type

func (*ApiVersionArtifactIamPolicy) ToApiVersionArtifactIamPolicyOutput 

func (i *ApiVersionArtifactIamPolicy) ToApiVersionArtifactIamPolicyOutput() ApiVersionArtifactIamPolicyOutput

func (*ApiVersionArtifactIamPolicy) ToApiVersionArtifactIamPolicyOutputWithContext 

func (i *ApiVersionArtifactIamPolicy) ToApiVersionArtifactIamPolicyOutputWithContext(ctx context.Context) ApiVersionArtifactIamPolicyOutput

type ApiVersionArtifactIamPolicyArgs 

type ApiVersionArtifactIamPolicyArgs struct {
	ApiId      pulumi.StringInput
	ArtifactId pulumi.StringInput
	// Associates a list of `members`, or principals, with a `role`. Optionally, may specify a `condition` that determines how and when the `bindings` are applied. Each of the `bindings` must contain at least one principal. The `bindings` in a `Policy` can refer to up to 1,500 principals; up to 250 of these principals can be Google groups. Each occurrence of a principal counts towards these limits. For example, if the `bindings` grant 50 different roles to `user:alice@example.com`, and not to any other principal, then you can add another 1,450 principals to the `bindings` in the `Policy`.
	Bindings BindingArrayInput
	// `etag` is used for optimistic concurrency control as a way to help prevent simultaneous updates of a policy from overwriting each other. It is strongly suggested that systems make use of the `etag` in the read-modify-write cycle to perform policy updates in order to avoid race conditions: An `etag` is returned in the response to `getIamPolicy`, and systems are expected to put that etag in the request to `setIamPolicy` to ensure that their change will be applied to the same version of the policy. **Important:** If you use IAM Conditions, you must include the `etag` field whenever you call `setIamPolicy`. If you omit this field, then IAM allows you to overwrite a version `3` policy with a version `1` policy, and all of the conditions in the version `3` policy are lost.
	Etag     pulumi.StringPtrInput
	Location pulumi.StringPtrInput
	Project  pulumi.StringPtrInput
	// Specifies the format of the policy. Valid values are `0`, `1`, and `3`. Requests that specify an invalid value are rejected. Any operation that affects conditional role bindings must specify version `3`. This requirement applies to the following operations: * Getting a policy that includes a conditional role binding * Adding a conditional role binding to a policy * Changing a conditional role binding in a policy * Removing any role binding, with or without a condition, from a policy that includes conditions **Important:** If you use IAM Conditions, you must include the `etag` field whenever you call `setIamPolicy`. If you omit this field, then IAM allows you to overwrite a version `3` policy with a version `1` policy, and all of the conditions in the version `3` policy are lost. If a policy does not include any conditions, operations on that policy may specify any valid version or leave the field unset. To learn which resources support conditions in their IAM policies, see the [IAM documentation](https://cloud.google.com/iam/help/conditions/resource-policies).
	Version   pulumi.IntPtrInput
	VersionId pulumi.StringInput
}

The set of arguments for constructing a ApiVersionArtifactIamPolicy resource.

func (ApiVersionArtifactIamPolicyArgs) ElementType 

func (ApiVersionArtifactIamPolicyArgs) ElementType() reflect.Type

type ApiVersionArtifactIamPolicyInput 

type ApiVersionArtifactIamPolicyInput interface {
	pulumi.Input

	ToApiVersionArtifactIamPolicyOutput() ApiVersionArtifactIamPolicyOutput
	ToApiVersionArtifactIamPolicyOutputWithContext(ctx context.Context) ApiVersionArtifactIamPolicyOutput
}

type ApiVersionArtifactIamPolicyOutput 

type ApiVersionArtifactIamPolicyOutput struct{ *pulumi.OutputState }

func (ApiVersionArtifactIamPolicyOutput) ApiId added in v0.21.0 

func (o ApiVersionArtifactIamPolicyOutput) ApiId() pulumi.StringOutput

func (ApiVersionArtifactIamPolicyOutput) ArtifactId added in v0.21.0 

func (o ApiVersionArtifactIamPolicyOutput) ArtifactId() pulumi.StringOutput

func (ApiVersionArtifactIamPolicyOutput) Bindings 

func (o ApiVersionArtifactIamPolicyOutput) Bindings() BindingResponseArrayOutput

Associates a list of `members`, or principals, with a `role`. Optionally, may specify a `condition` that determines how and when the `bindings` are applied. Each of the `bindings` must contain at least one principal. The `bindings` in a `Policy` can refer to up to 1,500 principals; up to 250 of these principals can be Google groups. Each occurrence of a principal counts towards these limits. For example, if the `bindings` grant 50 different roles to `user:alice@example.com`, and not to any other principal, then you can add another 1,450 principals to the `bindings` in the `Policy`.

func (ApiVersionArtifactIamPolicyOutput) ElementType 

func (ApiVersionArtifactIamPolicyOutput) ElementType() reflect.Type

func (ApiVersionArtifactIamPolicyOutput) Etag 

func (o ApiVersionArtifactIamPolicyOutput) Etag() pulumi.StringOutput

`etag` is used for optimistic concurrency control as a way to help prevent simultaneous updates of a policy from overwriting each other. It is strongly suggested that systems make use of the `etag` in the read-modify-write cycle to perform policy updates in order to avoid race conditions: An `etag` is returned in the response to `getIamPolicy`, and systems are expected to put that etag in the request to `setIamPolicy` to ensure that their change will be applied to the same version of the policy. **Important:** If you use IAM Conditions, you must include the `etag` field whenever you call `setIamPolicy`. If you omit this field, then IAM allows you to overwrite a version `3` policy with a version `1` policy, and all of the conditions in the version `3` policy are lost.

func (ApiVersionArtifactIamPolicyOutput) Location added in v0.21.0 

func (o ApiVersionArtifactIamPolicyOutput) Location() pulumi.StringOutput

func (ApiVersionArtifactIamPolicyOutput) Project added in v0.21.0 

func (o ApiVersionArtifactIamPolicyOutput) Project() pulumi.StringOutput

func (ApiVersionArtifactIamPolicyOutput) ToApiVersionArtifactIamPolicyOutput 

func (o ApiVersionArtifactIamPolicyOutput) ToApiVersionArtifactIamPolicyOutput() ApiVersionArtifactIamPolicyOutput

func (ApiVersionArtifactIamPolicyOutput) ToApiVersionArtifactIamPolicyOutputWithContext 

func (o ApiVersionArtifactIamPolicyOutput) ToApiVersionArtifactIamPolicyOutputWithContext(ctx context.Context) ApiVersionArtifactIamPolicyOutput

func (ApiVersionArtifactIamPolicyOutput) Version 

func (o ApiVersionArtifactIamPolicyOutput) Version() pulumi.IntOutput

Specifies the format of the policy. Valid values are `0`, `1`, and `3`. Requests that specify an invalid value are rejected. Any operation that affects conditional role bindings must specify version `3`. This requirement applies to the following operations: * Getting a policy that includes a conditional role binding * Adding a conditional role binding to a policy * Changing a conditional role binding in a policy * Removing any role binding, with or without a condition, from a policy that includes conditions **Important:** If you use IAM Conditions, you must include the `etag` field whenever you call `setIamPolicy`. If you omit this field, then IAM allows you to overwrite a version `3` policy with a version `1` policy, and all of the conditions in the version `3` policy are lost. If a policy does not include any conditions, operations on that policy may specify any valid version or leave the field unset. To learn which resources support conditions in their IAM policies, see the [IAM documentation](https://cloud.google.com/iam/help/conditions/resource-policies).

func (ApiVersionArtifactIamPolicyOutput) VersionId added in v0.21.0 

func (o ApiVersionArtifactIamPolicyOutput) VersionId() pulumi.StringOutput

type ApiVersionArtifactIamPolicyState 

type ApiVersionArtifactIamPolicyState struct {
}

func (ApiVersionArtifactIamPolicyState) ElementType 

func (ApiVersionArtifactIamPolicyState) ElementType() reflect.Type

type ApiVersionIamBinding added in v0.26.0 

type ApiVersionIamBinding struct {
	pulumi.CustomResourceState

	// An IAM Condition for a given binding. See https://cloud.google.com/iam/docs/conditions-overview for additional details.
	Condition iam.ConditionPtrOutput `pulumi:"condition"`
	// The etag of the resource's IAM policy.
	Etag pulumi.StringOutput `pulumi:"etag"`
	// Specifies the principals requesting access for a Google Cloud resource. `members` can have the following values: * `allUsers`: A special identifier that represents anyone who is on the internet; with or without a Google account. * `allAuthenticatedUsers`: A special identifier that represents anyone who is authenticated with a Google account or a service account. Does not include identities that come from external identity providers (IdPs) through identity federation. * `user:{emailid}`: An email address that represents a specific Google account. For example, `alice@example.com` . * `serviceAccount:{emailid}`: An email address that represents a Google service account. For example, `my-other-app@appspot.gserviceaccount.com`. * `serviceAccount:{projectid}.svc.id.goog[{namespace}/{kubernetes-sa}]`: An identifier for a [Kubernetes service account](https://cloud.google.com/kubernetes-engine/docs/how-to/kubernetes-service-accounts). For example, `my-project.svc.id.goog[my-namespace/my-kubernetes-sa]`. * `group:{emailid}`: An email address that represents a Google group. For example, `admins@example.com`. * `domain:{domain}`: The G Suite domain (primary) that represents all the users of that domain. For example, `google.com` or `example.com`. * `deleted:user:{emailid}?uid={uniqueid}`: An email address (plus unique identifier) representing a user that has been recently deleted. For example, `alice@example.com?uid=123456789012345678901`. If the user is recovered, this value reverts to `user:{emailid}` and the recovered user retains the role in the binding. * `deleted:serviceAccount:{emailid}?uid={uniqueid}`: An email address (plus unique identifier) representing a service account that has been recently deleted. For example, `my-other-app@appspot.gserviceaccount.com?uid=123456789012345678901`. If the service account is undeleted, this value reverts to `serviceAccount:{emailid}` and the undeleted service account retains the role in the binding. * `deleted:group:{emailid}?uid={uniqueid}`: An email address (plus unique identifier) representing a Google group that has been recently deleted. For example, `admins@example.com?uid=123456789012345678901`. If the group is recovered, this value reverts to `group:{emailid}` and the recovered group retains the role in the binding.
	Members pulumi.StringArrayOutput `pulumi:"members"`
	// The name of the resource to manage IAM policies for.
	Name pulumi.StringOutput `pulumi:"name"`
	// The project in which the resource belongs. If it is not provided, a default will be supplied.
	Project pulumi.StringOutput `pulumi:"project"`
	// Role that is assigned to the list of `members`, or principals. For example, `roles/viewer`, `roles/editor`, or `roles/owner`.
	Role pulumi.StringOutput `pulumi:"role"`
}

Sets the access control policy on the specified resource. Replaces any existing policy. Can return `NOT_FOUND`, `INVALID_ARGUMENT`, and `PERMISSION_DENIED` errors.

func GetApiVersionIamBinding added in v0.26.0 

func GetApiVersionIamBinding(ctx *pulumi.Context,
	name string, id pulumi.IDInput, state *ApiVersionIamBindingState, opts ...pulumi.ResourceOption) (*ApiVersionIamBinding, error)

GetApiVersionIamBinding gets an existing ApiVersionIamBinding resource's state with the given name, ID, and optional state properties that are used to uniquely qualify the lookup (nil if not required).

func NewApiVersionIamBinding added in v0.26.0 

func NewApiVersionIamBinding(ctx *pulumi.Context,
	name string, args *ApiVersionIamBindingArgs, opts ...pulumi.ResourceOption) (*ApiVersionIamBinding, error)

NewApiVersionIamBinding registers a new resource with the given unique name, arguments, and options.

func (*ApiVersionIamBinding) ElementType added in v0.26.0 

func (*ApiVersionIamBinding) ElementType() reflect.Type

func (*ApiVersionIamBinding) ToApiVersionIamBindingOutput added in v0.26.0 

func (i *ApiVersionIamBinding) ToApiVersionIamBindingOutput() ApiVersionIamBindingOutput

func (*ApiVersionIamBinding) ToApiVersionIamBindingOutputWithContext added in v0.26.0 

func (i *ApiVersionIamBinding) ToApiVersionIamBindingOutputWithContext(ctx context.Context) ApiVersionIamBindingOutput

type ApiVersionIamBindingArgs added in v0.26.0 

type ApiVersionIamBindingArgs struct {
	// An IAM Condition for a given binding.
	Condition iam.ConditionPtrInput
	// Identities that will be granted the privilege in role. Each entry can have one of the following values:
	//
	//  * user:{emailid}: An email address that represents a specific Google account. For example, alice@gmail.com or joe@example.com.
	//  * serviceAccount:{emailid}: An email address that represents a service account. For example, my-other-app@appspot.gserviceaccount.com.
	//  * group:{emailid}: An email address that represents a Google group. For example, admins@example.com.
	//  * domain:{domain}: A G Suite domain (primary, instead of alias) name that represents all the users of that domain. For example, google.com or example.com.
	Members pulumi.StringArrayInput
	// The name of the resource to manage IAM policies for.
	Name pulumi.StringInput
	// The role that should be applied. Only one `IamBinding` can be used per role.
	Role pulumi.StringInput
}

The set of arguments for constructing a ApiVersionIamBinding resource.

func (ApiVersionIamBindingArgs) ElementType added in v0.26.0 

func (ApiVersionIamBindingArgs) ElementType() reflect.Type

type ApiVersionIamBindingInput added in v0.26.0 

type ApiVersionIamBindingInput interface {
	pulumi.Input

	ToApiVersionIamBindingOutput() ApiVersionIamBindingOutput
	ToApiVersionIamBindingOutputWithContext(ctx context.Context) ApiVersionIamBindingOutput
}

type ApiVersionIamBindingOutput added in v0.26.0 

type ApiVersionIamBindingOutput struct{ *pulumi.OutputState }

func (ApiVersionIamBindingOutput) Condition added in v0.26.0 

func (o ApiVersionIamBindingOutput) Condition() iam.ConditionPtrOutput

An IAM Condition for a given binding. See https://cloud.google.com/iam/docs/conditions-overview for additional details.

func (ApiVersionIamBindingOutput) ElementType added in v0.26.0 

func (ApiVersionIamBindingOutput) ElementType() reflect.Type

func (ApiVersionIamBindingOutput) Etag added in v0.26.0 

func (o ApiVersionIamBindingOutput) Etag() pulumi.StringOutput

The etag of the resource's IAM policy.

func (ApiVersionIamBindingOutput) Members added in v0.26.0 

func (o ApiVersionIamBindingOutput) Members() pulumi.StringArrayOutput

Specifies the principals requesting access for a Google Cloud resource. `members` can have the following values: * `allUsers`: A special identifier that represents anyone who is on the internet; with or without a Google account. * `allAuthenticatedUsers`: A special identifier that represents anyone who is authenticated with a Google account or a service account. Does not include identities that come from external identity providers (IdPs) through identity federation. * `user:{emailid}`: An email address that represents a specific Google account. For example, `alice@example.com` . * `serviceAccount:{emailid}`: An email address that represents a Google service account. For example, `my-other-app@appspot.gserviceaccount.com`. * `serviceAccount:{projectid}.svc.id.goog[{namespace}/{kubernetes-sa}]`: An identifier for a [Kubernetes service account](https://cloud.google.com/kubernetes-engine/docs/how-to/kubernetes-service-accounts). For example, `my-project.svc.id.goog[my-namespace/my-kubernetes-sa]`. * `group:{emailid}`: An email address that represents a Google group. For example, `admins@example.com`. * `domain:{domain}`: The G Suite domain (primary) that represents all the users of that domain. For example, `google.com` or `example.com`. * `deleted:user:{emailid}?uid={uniqueid}`: An email address (plus unique identifier) representing a user that has been recently deleted. For example, `alice@example.com?uid=123456789012345678901`. If the user is recovered, this value reverts to `user:{emailid}` and the recovered user retains the role in the binding. * `deleted:serviceAccount:{emailid}?uid={uniqueid}`: An email address (plus unique identifier) representing a service account that has been recently deleted. For example, `my-other-app@appspot.gserviceaccount.com?uid=123456789012345678901`. If the service account is undeleted, this value reverts to `serviceAccount:{emailid}` and the undeleted service account retains the role in the binding. * `deleted:group:{emailid}?uid={uniqueid}`: An email address (plus unique identifier) representing a Google group that has been recently deleted. For example, `admins@example.com?uid=123456789012345678901`. If the group is recovered, this value reverts to `group:{emailid}` and the recovered group retains the role in the binding.

func (ApiVersionIamBindingOutput) Name added in v0.26.0 

func (o ApiVersionIamBindingOutput) Name() pulumi.StringOutput

The name of the resource to manage IAM policies for.

func (ApiVersionIamBindingOutput) Project added in v0.26.0 

func (o ApiVersionIamBindingOutput) Project() pulumi.StringOutput

The project in which the resource belongs. If it is not provided, a default will be supplied.

func (ApiVersionIamBindingOutput) Role added in v0.26.0 

func (o ApiVersionIamBindingOutput) Role() pulumi.StringOutput

Role that is assigned to the list of `members`, or principals. For example, `roles/viewer`, `roles/editor`, or `roles/owner`.

func (ApiVersionIamBindingOutput) ToApiVersionIamBindingOutput added in v0.26.0 

func (o ApiVersionIamBindingOutput) ToApiVersionIamBindingOutput() ApiVersionIamBindingOutput

func (ApiVersionIamBindingOutput) ToApiVersionIamBindingOutputWithContext added in v0.26.0 

func (o ApiVersionIamBindingOutput) ToApiVersionIamBindingOutputWithContext(ctx context.Context) ApiVersionIamBindingOutput

type ApiVersionIamBindingState added in v0.26.0 

type ApiVersionIamBindingState struct {
}

func (ApiVersionIamBindingState) ElementType added in v0.26.0 

func (ApiVersionIamBindingState) ElementType() reflect.Type

type ApiVersionIamMember added in v0.26.0 

type ApiVersionIamMember struct {
	pulumi.CustomResourceState

	// An IAM Condition for a given binding. See https://cloud.google.com/iam/docs/conditions-overview for additional details.
	Condition iam.ConditionPtrOutput `pulumi:"condition"`
	// The etag of the resource's IAM policy.
	Etag pulumi.StringOutput `pulumi:"etag"`
	// Specifies the principals requesting access for a Google Cloud resource. `members` can have the following values: * `allUsers`: A special identifier that represents anyone who is on the internet; with or without a Google account. * `allAuthenticatedUsers`: A special identifier that represents anyone who is authenticated with a Google account or a service account. Does not include identities that come from external identity providers (IdPs) through identity federation. * `user:{emailid}`: An email address that represents a specific Google account. For example, `alice@example.com` . * `serviceAccount:{emailid}`: An email address that represents a Google service account. For example, `my-other-app@appspot.gserviceaccount.com`. * `serviceAccount:{projectid}.svc.id.goog[{namespace}/{kubernetes-sa}]`: An identifier for a [Kubernetes service account](https://cloud.google.com/kubernetes-engine/docs/how-to/kubernetes-service-accounts). For example, `my-project.svc.id.goog[my-namespace/my-kubernetes-sa]`. * `group:{emailid}`: An email address that represents a Google group. For example, `admins@example.com`. * `domain:{domain}`: The G Suite domain (primary) that represents all the users of that domain. For example, `google.com` or `example.com`. * `deleted:user:{emailid}?uid={uniqueid}`: An email address (plus unique identifier) representing a user that has been recently deleted. For example, `alice@example.com?uid=123456789012345678901`. If the user is recovered, this value reverts to `user:{emailid}` and the recovered user retains the role in the binding. * `deleted:serviceAccount:{emailid}?uid={uniqueid}`: An email address (plus unique identifier) representing a service account that has been recently deleted. For example, `my-other-app@appspot.gserviceaccount.com?uid=123456789012345678901`. If the service account is undeleted, this value reverts to `serviceAccount:{emailid}` and the undeleted service account retains the role in the binding. * `deleted:group:{emailid}?uid={uniqueid}`: An email address (plus unique identifier) representing a Google group that has been recently deleted. For example, `admins@example.com?uid=123456789012345678901`. If the group is recovered, this value reverts to `group:{emailid}` and the recovered group retains the role in the binding.
	Member pulumi.StringOutput `pulumi:"member"`
	// The name of the resource to manage IAM policies for.
	Name pulumi.StringOutput `pulumi:"name"`
	// The project in which the resource belongs. If it is not provided, a default will be supplied.
	Project pulumi.StringOutput `pulumi:"project"`
	// Role that is assigned to the list of `members`, or principals. For example, `roles/viewer`, `roles/editor`, or `roles/owner`.
	Role pulumi.StringOutput `pulumi:"role"`
}

Sets the access control policy on the specified resource. Replaces any existing policy. Can return `NOT_FOUND`, `INVALID_ARGUMENT`, and `PERMISSION_DENIED` errors.

func GetApiVersionIamMember added in v0.26.0 

func GetApiVersionIamMember(ctx *pulumi.Context,
	name string, id pulumi.IDInput, state *ApiVersionIamMemberState, opts ...pulumi.ResourceOption) (*ApiVersionIamMember, error)

GetApiVersionIamMember gets an existing ApiVersionIamMember resource's state with the given name, ID, and optional state properties that are used to uniquely qualify the lookup (nil if not required).

func NewApiVersionIamMember added in v0.26.0 

func NewApiVersionIamMember(ctx *pulumi.Context,
	name string, args *ApiVersionIamMemberArgs, opts ...pulumi.ResourceOption) (*ApiVersionIamMember, error)

NewApiVersionIamMember registers a new resource with the given unique name, arguments, and options.

func (*ApiVersionIamMember) ElementType added in v0.26.0 

func (*ApiVersionIamMember) ElementType() reflect.Type

func (*ApiVersionIamMember) ToApiVersionIamMemberOutput added in v0.26.0 

func (i *ApiVersionIamMember) ToApiVersionIamMemberOutput() ApiVersionIamMemberOutput

func (*ApiVersionIamMember) ToApiVersionIamMemberOutputWithContext added in v0.26.0 

func (i *ApiVersionIamMember) ToApiVersionIamMemberOutputWithContext(ctx context.Context) ApiVersionIamMemberOutput

type ApiVersionIamMemberArgs added in v0.26.0 

type ApiVersionIamMemberArgs struct {
	// An IAM Condition for a given binding.
	Condition iam.ConditionPtrInput
	// Identity that will be granted the privilege in role. The entry can have one of the following values:
	//
	//  * user:{emailid}: An email address that represents a specific Google account. For example, alice@gmail.com or joe@example.com.
	//  * serviceAccount:{emailid}: An email address that represents a service account. For example, my-other-app@appspot.gserviceaccount.com.
	//  * group:{emailid}: An email address that represents a Google group. For example, admins@example.com.
	//  * domain:{domain}: A G Suite domain (primary, instead of alias) name that represents all the users of that domain. For example, google.com or example.com.
	Member pulumi.StringInput
	// The name of the resource to manage IAM policies for.
	Name pulumi.StringInput
	// The role that should be applied.
	Role pulumi.StringInput
}

The set of arguments for constructing a ApiVersionIamMember resource.

func (ApiVersionIamMemberArgs) ElementType added in v0.26.0 

func (ApiVersionIamMemberArgs) ElementType() reflect.Type

type ApiVersionIamMemberInput added in v0.26.0 

type ApiVersionIamMemberInput interface {
	pulumi.Input

	ToApiVersionIamMemberOutput() ApiVersionIamMemberOutput
	ToApiVersionIamMemberOutputWithContext(ctx context.Context) ApiVersionIamMemberOutput
}

type ApiVersionIamMemberOutput added in v0.26.0 

type ApiVersionIamMemberOutput struct{ *pulumi.OutputState }

func (ApiVersionIamMemberOutput) Condition added in v0.26.0 

func (o ApiVersionIamMemberOutput) Condition() iam.ConditionPtrOutput

An IAM Condition for a given binding. See https://cloud.google.com/iam/docs/conditions-overview for additional details.

func (ApiVersionIamMemberOutput) ElementType added in v0.26.0 

func (ApiVersionIamMemberOutput) ElementType() reflect.Type

func (ApiVersionIamMemberOutput) Etag added in v0.26.0 

func (o ApiVersionIamMemberOutput) Etag() pulumi.StringOutput

The etag of the resource's IAM policy.

func (ApiVersionIamMemberOutput) Member added in v0.26.0 

func (o ApiVersionIamMemberOutput) Member() pulumi.StringOutput

Specifies the principals requesting access for a Google Cloud resource. `members` can have the following values: * `allUsers`: A special identifier that represents anyone who is on the internet; with or without a Google account. * `allAuthenticatedUsers`: A special identifier that represents anyone who is authenticated with a Google account or a service account. Does not include identities that come from external identity providers (IdPs) through identity federation. * `user:{emailid}`: An email address that represents a specific Google account. For example, `alice@example.com` . * `serviceAccount:{emailid}`: An email address that represents a Google service account. For example, `my-other-app@appspot.gserviceaccount.com`. * `serviceAccount:{projectid}.svc.id.goog[{namespace}/{kubernetes-sa}]`: An identifier for a [Kubernetes service account](https://cloud.google.com/kubernetes-engine/docs/how-to/kubernetes-service-accounts). For example, `my-project.svc.id.goog[my-namespace/my-kubernetes-sa]`. * `group:{emailid}`: An email address that represents a Google group. For example, `admins@example.com`. * `domain:{domain}`: The G Suite domain (primary) that represents all the users of that domain. For example, `google.com` or `example.com`. * `deleted:user:{emailid}?uid={uniqueid}`: An email address (plus unique identifier) representing a user that has been recently deleted. For example, `alice@example.com?uid=123456789012345678901`. If the user is recovered, this value reverts to `user:{emailid}` and the recovered user retains the role in the binding. * `deleted:serviceAccount:{emailid}?uid={uniqueid}`: An email address (plus unique identifier) representing a service account that has been recently deleted. For example, `my-other-app@appspot.gserviceaccount.com?uid=123456789012345678901`. If the service account is undeleted, this value reverts to `serviceAccount:{emailid}` and the undeleted service account retains the role in the binding. * `deleted:group:{emailid}?uid={uniqueid}`: An email address (plus unique identifier) representing a Google group that has been recently deleted. For example, `admins@example.com?uid=123456789012345678901`. If the group is recovered, this value reverts to `group:{emailid}` and the recovered group retains the role in the binding.

func (ApiVersionIamMemberOutput) Name added in v0.26.0 

func (o ApiVersionIamMemberOutput) Name() pulumi.StringOutput

The name of the resource to manage IAM policies for.

func (ApiVersionIamMemberOutput) Project added in v0.26.0 

func (o ApiVersionIamMemberOutput) Project() pulumi.StringOutput

The project in which the resource belongs. If it is not provided, a default will be supplied.

func (ApiVersionIamMemberOutput) Role added in v0.26.0 

func (o ApiVersionIamMemberOutput) Role() pulumi.StringOutput

Role that is assigned to the list of `members`, or principals. For example, `roles/viewer`, `roles/editor`, or `roles/owner`.

func (ApiVersionIamMemberOutput) ToApiVersionIamMemberOutput added in v0.26.0 

func (o ApiVersionIamMemberOutput) ToApiVersionIamMemberOutput() ApiVersionIamMemberOutput

func (ApiVersionIamMemberOutput) ToApiVersionIamMemberOutputWithContext added in v0.26.0 

func (o ApiVersionIamMemberOutput) ToApiVersionIamMemberOutputWithContext(ctx context.Context) ApiVersionIamMemberOutput

type ApiVersionIamMemberState added in v0.26.0 

type ApiVersionIamMemberState struct {
}

func (ApiVersionIamMemberState) ElementType added in v0.26.0 

func (ApiVersionIamMemberState) ElementType() reflect.Type

type ApiVersionIamPolicy 

type ApiVersionIamPolicy struct {
	pulumi.CustomResourceState

	ApiId pulumi.StringOutput `pulumi:"apiId"`
	// Associates a list of `members`, or principals, with a `role`. Optionally, may specify a `condition` that determines how and when the `bindings` are applied. Each of the `bindings` must contain at least one principal. The `bindings` in a `Policy` can refer to up to 1,500 principals; up to 250 of these principals can be Google groups. Each occurrence of a principal counts towards these limits. For example, if the `bindings` grant 50 different roles to `user:alice@example.com`, and not to any other principal, then you can add another 1,450 principals to the `bindings` in the `Policy`.
	Bindings BindingResponseArrayOutput `pulumi:"bindings"`
	// `etag` is used for optimistic concurrency control as a way to help prevent simultaneous updates of a policy from overwriting each other. It is strongly suggested that systems make use of the `etag` in the read-modify-write cycle to perform policy updates in order to avoid race conditions: An `etag` is returned in the response to `getIamPolicy`, and systems are expected to put that etag in the request to `setIamPolicy` to ensure that their change will be applied to the same version of the policy. **Important:** If you use IAM Conditions, you must include the `etag` field whenever you call `setIamPolicy`. If you omit this field, then IAM allows you to overwrite a version `3` policy with a version `1` policy, and all of the conditions in the version `3` policy are lost.
	Etag     pulumi.StringOutput `pulumi:"etag"`
	Location pulumi.StringOutput `pulumi:"location"`
	Project  pulumi.StringOutput `pulumi:"project"`
	// Specifies the format of the policy. Valid values are `0`, `1`, and `3`. Requests that specify an invalid value are rejected. Any operation that affects conditional role bindings must specify version `3`. This requirement applies to the following operations: * Getting a policy that includes a conditional role binding * Adding a conditional role binding to a policy * Changing a conditional role binding in a policy * Removing any role binding, with or without a condition, from a policy that includes conditions **Important:** If you use IAM Conditions, you must include the `etag` field whenever you call `setIamPolicy`. If you omit this field, then IAM allows you to overwrite a version `3` policy with a version `1` policy, and all of the conditions in the version `3` policy are lost. If a policy does not include any conditions, operations on that policy may specify any valid version or leave the field unset. To learn which resources support conditions in their IAM policies, see the [IAM documentation](https://cloud.google.com/iam/help/conditions/resource-policies).
	Version   pulumi.IntOutput    `pulumi:"version"`
	VersionId pulumi.StringOutput `pulumi:"versionId"`
}

Sets the access control policy on the specified resource. Replaces any existing policy. Can return `NOT_FOUND`, `INVALID_ARGUMENT`, and `PERMISSION_DENIED` errors. Note - this resource's API doesn't support deletion. When deleted, the resource will persist on Google Cloud even though it will be deleted from Pulumi state.

func GetApiVersionIamPolicy 

func GetApiVersionIamPolicy(ctx *pulumi.Context,
	name string, id pulumi.IDInput, state *ApiVersionIamPolicyState, opts ...pulumi.ResourceOption) (*ApiVersionIamPolicy, error)

GetApiVersionIamPolicy gets an existing ApiVersionIamPolicy resource's state with the given name, ID, and optional state properties that are used to uniquely qualify the lookup (nil if not required).

func NewApiVersionIamPolicy 

func NewApiVersionIamPolicy(ctx *pulumi.Context,
	name string, args *ApiVersionIamPolicyArgs, opts ...pulumi.ResourceOption) (*ApiVersionIamPolicy, error)

NewApiVersionIamPolicy registers a new resource with the given unique name, arguments, and options.

func (*ApiVersionIamPolicy) ElementType 

func (*ApiVersionIamPolicy) ElementType() reflect.Type

func (*ApiVersionIamPolicy) ToApiVersionIamPolicyOutput 

func (i *ApiVersionIamPolicy) ToApiVersionIamPolicyOutput() ApiVersionIamPolicyOutput

func (*ApiVersionIamPolicy) ToApiVersionIamPolicyOutputWithContext 

func (i *ApiVersionIamPolicy) ToApiVersionIamPolicyOutputWithContext(ctx context.Context) ApiVersionIamPolicyOutput

type ApiVersionIamPolicyArgs 

type ApiVersionIamPolicyArgs struct {
	ApiId pulumi.StringInput
	// Associates a list of `members`, or principals, with a `role`. Optionally, may specify a `condition` that determines how and when the `bindings` are applied. Each of the `bindings` must contain at least one principal. The `bindings` in a `Policy` can refer to up to 1,500 principals; up to 250 of these principals can be Google groups. Each occurrence of a principal counts towards these limits. For example, if the `bindings` grant 50 different roles to `user:alice@example.com`, and not to any other principal, then you can add another 1,450 principals to the `bindings` in the `Policy`.
	Bindings BindingArrayInput
	// `etag` is used for optimistic concurrency control as a way to help prevent simultaneous updates of a policy from overwriting each other. It is strongly suggested that systems make use of the `etag` in the read-modify-write cycle to perform policy updates in order to avoid race conditions: An `etag` is returned in the response to `getIamPolicy`, and systems are expected to put that etag in the request to `setIamPolicy` to ensure that their change will be applied to the same version of the policy. **Important:** If you use IAM Conditions, you must include the `etag` field whenever you call `setIamPolicy`. If you omit this field, then IAM allows you to overwrite a version `3` policy with a version `1` policy, and all of the conditions in the version `3` policy are lost.
	Etag     pulumi.StringPtrInput
	Location pulumi.StringPtrInput
	Project  pulumi.StringPtrInput
	// Specifies the format of the policy. Valid values are `0`, `1`, and `3`. Requests that specify an invalid value are rejected. Any operation that affects conditional role bindings must specify version `3`. This requirement applies to the following operations: * Getting a policy that includes a conditional role binding * Adding a conditional role binding to a policy * Changing a conditional role binding in a policy * Removing any role binding, with or without a condition, from a policy that includes conditions **Important:** If you use IAM Conditions, you must include the `etag` field whenever you call `setIamPolicy`. If you omit this field, then IAM allows you to overwrite a version `3` policy with a version `1` policy, and all of the conditions in the version `3` policy are lost. If a policy does not include any conditions, operations on that policy may specify any valid version or leave the field unset. To learn which resources support conditions in their IAM policies, see the [IAM documentation](https://cloud.google.com/iam/help/conditions/resource-policies).
	Version   pulumi.IntPtrInput
	VersionId pulumi.StringInput
}

The set of arguments for constructing a ApiVersionIamPolicy resource.

func (ApiVersionIamPolicyArgs) ElementType 

func (ApiVersionIamPolicyArgs) ElementType() reflect.Type

type ApiVersionIamPolicyInput 

type ApiVersionIamPolicyInput interface {
	pulumi.Input

	ToApiVersionIamPolicyOutput() ApiVersionIamPolicyOutput
	ToApiVersionIamPolicyOutputWithContext(ctx context.Context) ApiVersionIamPolicyOutput
}

type ApiVersionIamPolicyOutput 

type ApiVersionIamPolicyOutput struct{ *pulumi.OutputState }

func (ApiVersionIamPolicyOutput) ApiId added in v0.21.0 

func (o ApiVersionIamPolicyOutput) ApiId() pulumi.StringOutput

func (ApiVersionIamPolicyOutput) Bindings 

func (o ApiVersionIamPolicyOutput) Bindings() BindingResponseArrayOutput

Associates a list of `members`, or principals, with a `role`. Optionally, may specify a `condition` that determines how and when the `bindings` are applied. Each of the `bindings` must contain at least one principal. The `bindings` in a `Policy` can refer to up to 1,500 principals; up to 250 of these principals can be Google groups. Each occurrence of a principal counts towards these limits. For example, if the `bindings` grant 50 different roles to `user:alice@example.com`, and not to any other principal, then you can add another 1,450 principals to the `bindings` in the `Policy`.

func (ApiVersionIamPolicyOutput) ElementType 

func (ApiVersionIamPolicyOutput) ElementType() reflect.Type

func (ApiVersionIamPolicyOutput) Etag 

func (o ApiVersionIamPolicyOutput) Etag() pulumi.StringOutput

`etag` is used for optimistic concurrency control as a way to help prevent simultaneous updates of a policy from overwriting each other. It is strongly suggested that systems make use of the `etag` in the read-modify-write cycle to perform policy updates in order to avoid race conditions: An `etag` is returned in the response to `getIamPolicy`, and systems are expected to put that etag in the request to `setIamPolicy` to ensure that their change will be applied to the same version of the policy. **Important:** If you use IAM Conditions, you must include the `etag` field whenever you call `setIamPolicy`. If you omit this field, then IAM allows you to overwrite a version `3` policy with a version `1` policy, and all of the conditions in the version `3` policy are lost.

func (ApiVersionIamPolicyOutput) Location added in v0.21.0 

func (o ApiVersionIamPolicyOutput) Location() pulumi.StringOutput

func (ApiVersionIamPolicyOutput) Project added in v0.21.0 

func (o ApiVersionIamPolicyOutput) Project() pulumi.StringOutput

func (ApiVersionIamPolicyOutput) ToApiVersionIamPolicyOutput 

func (o ApiVersionIamPolicyOutput) ToApiVersionIamPolicyOutput() ApiVersionIamPolicyOutput

func (ApiVersionIamPolicyOutput) ToApiVersionIamPolicyOutputWithContext 

func (o ApiVersionIamPolicyOutput) ToApiVersionIamPolicyOutputWithContext(ctx context.Context) ApiVersionIamPolicyOutput

func (ApiVersionIamPolicyOutput) Version 

func (o ApiVersionIamPolicyOutput) Version() pulumi.IntOutput

Specifies the format of the policy. Valid values are `0`, `1`, and `3`. Requests that specify an invalid value are rejected. Any operation that affects conditional role bindings must specify version `3`. This requirement applies to the following operations: * Getting a policy that includes a conditional role binding * Adding a conditional role binding to a policy * Changing a conditional role binding in a policy * Removing any role binding, with or without a condition, from a policy that includes conditions **Important:** If you use IAM Conditions, you must include the `etag` field whenever you call `setIamPolicy`. If you omit this field, then IAM allows you to overwrite a version `3` policy with a version `1` policy, and all of the conditions in the version `3` policy are lost. If a policy does not include any conditions, operations on that policy may specify any valid version or leave the field unset. To learn which resources support conditions in their IAM policies, see the [IAM documentation](https://cloud.google.com/iam/help/conditions/resource-policies).

func (ApiVersionIamPolicyOutput) VersionId added in v0.21.0 

func (o ApiVersionIamPolicyOutput) VersionId() pulumi.StringOutput

type ApiVersionIamPolicyState 

type ApiVersionIamPolicyState struct {
}

func (ApiVersionIamPolicyState) ElementType 

func (ApiVersionIamPolicyState) ElementType() reflect.Type

type ApiVersionSpecArtifactIamBinding added in v0.26.0 

type ApiVersionSpecArtifactIamBinding struct {
	pulumi.CustomResourceState

	// An IAM Condition for a given binding. See https://cloud.google.com/iam/docs/conditions-overview for additional details.
	Condition iam.ConditionPtrOutput `pulumi:"condition"`
	// The etag of the resource's IAM policy.
	Etag pulumi.StringOutput `pulumi:"etag"`
	// Specifies the principals requesting access for a Google Cloud resource. `members` can have the following values: * `allUsers`: A special identifier that represents anyone who is on the internet; with or without a Google account. * `allAuthenticatedUsers`: A special identifier that represents anyone who is authenticated with a Google account or a service account. Does not include identities that come from external identity providers (IdPs) through identity federation. * `user:{emailid}`: An email address that represents a specific Google account. For example, `alice@example.com` . * `serviceAccount:{emailid}`: An email address that represents a Google service account. For example, `my-other-app@appspot.gserviceaccount.com`. * `serviceAccount:{projectid}.svc.id.goog[{namespace}/{kubernetes-sa}]`: An identifier for a [Kubernetes service account](https://cloud.google.com/kubernetes-engine/docs/how-to/kubernetes-service-accounts). For example, `my-project.svc.id.goog[my-namespace/my-kubernetes-sa]`. * `group:{emailid}`: An email address that represents a Google group. For example, `admins@example.com`. * `domain:{domain}`: The G Suite domain (primary) that represents all the users of that domain. For example, `google.com` or `example.com`. * `deleted:user:{emailid}?uid={uniqueid}`: An email address (plus unique identifier) representing a user that has been recently deleted. For example, `alice@example.com?uid=123456789012345678901`. If the user is recovered, this value reverts to `user:{emailid}` and the recovered user retains the role in the binding. * `deleted:serviceAccount:{emailid}?uid={uniqueid}`: An email address (plus unique identifier) representing a service account that has been recently deleted. For example, `my-other-app@appspot.gserviceaccount.com?uid=123456789012345678901`. If the service account is undeleted, this value reverts to `serviceAccount:{emailid}` and the undeleted service account retains the role in the binding. * `deleted:group:{emailid}?uid={uniqueid}`: An email address (plus unique identifier) representing a Google group that has been recently deleted. For example, `admins@example.com?uid=123456789012345678901`. If the group is recovered, this value reverts to `group:{emailid}` and the recovered group retains the role in the binding.
	Members pulumi.StringArrayOutput `pulumi:"members"`
	// The name of the resource to manage IAM policies for.
	Name pulumi.StringOutput `pulumi:"name"`
	// The project in which the resource belongs. If it is not provided, a default will be supplied.
	Project pulumi.StringOutput `pulumi:"project"`
	// Role that is assigned to the list of `members`, or principals. For example, `roles/viewer`, `roles/editor`, or `roles/owner`.
	Role pulumi.StringOutput `pulumi:"role"`
}

Sets the access control policy on the specified resource. Replaces any existing policy. Can return `NOT_FOUND`, `INVALID_ARGUMENT`, and `PERMISSION_DENIED` errors.

func GetApiVersionSpecArtifactIamBinding added in v0.26.0 

func GetApiVersionSpecArtifactIamBinding(ctx *pulumi.Context,
	name string, id pulumi.IDInput, state *ApiVersionSpecArtifactIamBindingState, opts ...pulumi.ResourceOption) (*ApiVersionSpecArtifactIamBinding, error)

GetApiVersionSpecArtifactIamBinding gets an existing ApiVersionSpecArtifactIamBinding resource's state with the given name, ID, and optional state properties that are used to uniquely qualify the lookup (nil if not required).

func NewApiVersionSpecArtifactIamBinding added in v0.26.0 

func NewApiVersionSpecArtifactIamBinding(ctx *pulumi.Context,
	name string, args *ApiVersionSpecArtifactIamBindingArgs, opts ...pulumi.ResourceOption) (*ApiVersionSpecArtifactIamBinding, error)

NewApiVersionSpecArtifactIamBinding registers a new resource with the given unique name, arguments, and options.

func (*ApiVersionSpecArtifactIamBinding) ElementType added in v0.26.0 

func (*ApiVersionSpecArtifactIamBinding) ElementType() reflect.Type

func (*ApiVersionSpecArtifactIamBinding) ToApiVersionSpecArtifactIamBindingOutput added in v0.26.0 

func (i *ApiVersionSpecArtifactIamBinding) ToApiVersionSpecArtifactIamBindingOutput() ApiVersionSpecArtifactIamBindingOutput

func (*ApiVersionSpecArtifactIamBinding) ToApiVersionSpecArtifactIamBindingOutputWithContext added in v0.26.0 

func (i *ApiVersionSpecArtifactIamBinding) ToApiVersionSpecArtifactIamBindingOutputWithContext(ctx context.Context) ApiVersionSpecArtifactIamBindingOutput

type ApiVersionSpecArtifactIamBindingArgs added in v0.26.0 

type ApiVersionSpecArtifactIamBindingArgs struct {
	// An IAM Condition for a given binding.
	Condition iam.ConditionPtrInput
	// Identities that will be granted the privilege in role. Each entry can have one of the following values:
	//
	//  * user:{emailid}: An email address that represents a specific Google account. For example, alice@gmail.com or joe@example.com.
	//  * serviceAccount:{emailid}: An email address that represents a service account. For example, my-other-app@appspot.gserviceaccount.com.
	//  * group:{emailid}: An email address that represents a Google group. For example, admins@example.com.
	//  * domain:{domain}: A G Suite domain (primary, instead of alias) name that represents all the users of that domain. For example, google.com or example.com.
	Members pulumi.StringArrayInput
	// The name of the resource to manage IAM policies for.
	Name pulumi.StringInput
	// The role that should be applied. Only one `IamBinding` can be used per role.
	Role pulumi.StringInput
}

The set of arguments for constructing a ApiVersionSpecArtifactIamBinding resource.

func (ApiVersionSpecArtifactIamBindingArgs) ElementType added in v0.26.0 

func (ApiVersionSpecArtifactIamBindingArgs) ElementType() reflect.Type

type ApiVersionSpecArtifactIamBindingInput added in v0.26.0 

type ApiVersionSpecArtifactIamBindingInput interface {
	pulumi.Input

	ToApiVersionSpecArtifactIamBindingOutput() ApiVersionSpecArtifactIamBindingOutput
	ToApiVersionSpecArtifactIamBindingOutputWithContext(ctx context.Context) ApiVersionSpecArtifactIamBindingOutput
}

type ApiVersionSpecArtifactIamBindingOutput added in v0.26.0 

type ApiVersionSpecArtifactIamBindingOutput struct{ *pulumi.OutputState }

func (ApiVersionSpecArtifactIamBindingOutput) Condition added in v0.26.0 

func (o ApiVersionSpecArtifactIamBindingOutput) Condition() iam.ConditionPtrOutput

An IAM Condition for a given binding. See https://cloud.google.com/iam/docs/conditions-overview for additional details.

func (ApiVersionSpecArtifactIamBindingOutput) ElementType added in v0.26.0 

func (ApiVersionSpecArtifactIamBindingOutput) ElementType() reflect.Type

func (ApiVersionSpecArtifactIamBindingOutput) Etag added in v0.26.0 

func (o ApiVersionSpecArtifactIamBindingOutput) Etag() pulumi.StringOutput

The etag of the resource's IAM policy.

func (ApiVersionSpecArtifactIamBindingOutput) Members added in v0.26.0 

func (o ApiVersionSpecArtifactIamBindingOutput) Members() pulumi.StringArrayOutput

Specifies the principals requesting access for a Google Cloud resource. `members` can have the following values: * `allUsers`: A special identifier that represents anyone who is on the internet; with or without a Google account. * `allAuthenticatedUsers`: A special identifier that represents anyone who is authenticated with a Google account or a service account. Does not include identities that come from external identity providers (IdPs) through identity federation. * `user:{emailid}`: An email address that represents a specific Google account. For example, `alice@example.com` . * `serviceAccount:{emailid}`: An email address that represents a Google service account. For example, `my-other-app@appspot.gserviceaccount.com`. * `serviceAccount:{projectid}.svc.id.goog[{namespace}/{kubernetes-sa}]`: An identifier for a [Kubernetes service account](https://cloud.google.com/kubernetes-engine/docs/how-to/kubernetes-service-accounts). For example, `my-project.svc.id.goog[my-namespace/my-kubernetes-sa]`. * `group:{emailid}`: An email address that represents a Google group. For example, `admins@example.com`. * `domain:{domain}`: The G Suite domain (primary) that represents all the users of that domain. For example, `google.com` or `example.com`. * `deleted:user:{emailid}?uid={uniqueid}`: An email address (plus unique identifier) representing a user that has been recently deleted. For example, `alice@example.com?uid=123456789012345678901`. If the user is recovered, this value reverts to `user:{emailid}` and the recovered user retains the role in the binding. * `deleted:serviceAccount:{emailid}?uid={uniqueid}`: An email address (plus unique identifier) representing a service account that has been recently deleted. For example, `my-other-app@appspot.gserviceaccount.com?uid=123456789012345678901`. If the service account is undeleted, this value reverts to `serviceAccount:{emailid}` and the undeleted service account retains the role in the binding. * `deleted:group:{emailid}?uid={uniqueid}`: An email address (plus unique identifier) representing a Google group that has been recently deleted. For example, `admins@example.com?uid=123456789012345678901`. If the group is recovered, this value reverts to `group:{emailid}` and the recovered group retains the role in the binding.

func (ApiVersionSpecArtifactIamBindingOutput) Name added in v0.26.0 

func (o ApiVersionSpecArtifactIamBindingOutput) Name() pulumi.StringOutput

The name of the resource to manage IAM policies for.

func (ApiVersionSpecArtifactIamBindingOutput) Project added in v0.26.0 

func (o ApiVersionSpecArtifactIamBindingOutput) Project() pulumi.StringOutput

The project in which the resource belongs. If it is not provided, a default will be supplied.

func (ApiVersionSpecArtifactIamBindingOutput) Role added in v0.26.0 

func (o ApiVersionSpecArtifactIamBindingOutput) Role() pulumi.StringOutput

Role that is assigned to the list of `members`, or principals. For example, `roles/viewer`, `roles/editor`, or `roles/owner`.

func (ApiVersionSpecArtifactIamBindingOutput) ToApiVersionSpecArtifactIamBindingOutput added in v0.26.0 

func (o ApiVersionSpecArtifactIamBindingOutput) ToApiVersionSpecArtifactIamBindingOutput() ApiVersionSpecArtifactIamBindingOutput

func (ApiVersionSpecArtifactIamBindingOutput) ToApiVersionSpecArtifactIamBindingOutputWithContext added in v0.26.0 

func (o ApiVersionSpecArtifactIamBindingOutput) ToApiVersionSpecArtifactIamBindingOutputWithContext(ctx context.Context) ApiVersionSpecArtifactIamBindingOutput

type ApiVersionSpecArtifactIamBindingState added in v0.26.0 

type ApiVersionSpecArtifactIamBindingState struct {
}

func (ApiVersionSpecArtifactIamBindingState) ElementType added in v0.26.0 

func (ApiVersionSpecArtifactIamBindingState) ElementType() reflect.Type

type ApiVersionSpecArtifactIamMember added in v0.26.0 

type ApiVersionSpecArtifactIamMember struct {
	pulumi.CustomResourceState

	// An IAM Condition for a given binding. See https://cloud.google.com/iam/docs/conditions-overview for additional details.
	Condition iam.ConditionPtrOutput `pulumi:"condition"`
	// The etag of the resource's IAM policy.
	Etag pulumi.StringOutput `pulumi:"etag"`
	// Specifies the principals requesting access for a Google Cloud resource. `members` can have the following values: * `allUsers`: A special identifier that represents anyone who is on the internet; with or without a Google account. * `allAuthenticatedUsers`: A special identifier that represents anyone who is authenticated with a Google account or a service account. Does not include identities that come from external identity providers (IdPs) through identity federation. * `user:{emailid}`: An email address that represents a specific Google account. For example, `alice@example.com` . * `serviceAccount:{emailid}`: An email address that represents a Google service account. For example, `my-other-app@appspot.gserviceaccount.com`. * `serviceAccount:{projectid}.svc.id.goog[{namespace}/{kubernetes-sa}]`: An identifier for a [Kubernetes service account](https://cloud.google.com/kubernetes-engine/docs/how-to/kubernetes-service-accounts). For example, `my-project.svc.id.goog[my-namespace/my-kubernetes-sa]`. * `group:{emailid}`: An email address that represents a Google group. For example, `admins@example.com`. * `domain:{domain}`: The G Suite domain (primary) that represents all the users of that domain. For example, `google.com` or `example.com`. * `deleted:user:{emailid}?uid={uniqueid}`: An email address (plus unique identifier) representing a user that has been recently deleted. For example, `alice@example.com?uid=123456789012345678901`. If the user is recovered, this value reverts to `user:{emailid}` and the recovered user retains the role in the binding. * `deleted:serviceAccount:{emailid}?uid={uniqueid}`: An email address (plus unique identifier) representing a service account that has been recently deleted. For example, `my-other-app@appspot.gserviceaccount.com?uid=123456789012345678901`. If the service account is undeleted, this value reverts to `serviceAccount:{emailid}` and the undeleted service account retains the role in the binding. * `deleted:group:{emailid}?uid={uniqueid}`: An email address (plus unique identifier) representing a Google group that has been recently deleted. For example, `admins@example.com?uid=123456789012345678901`. If the group is recovered, this value reverts to `group:{emailid}` and the recovered group retains the role in the binding.
	Member pulumi.StringOutput `pulumi:"member"`
	// The name of the resource to manage IAM policies for.
	Name pulumi.StringOutput `pulumi:"name"`
	// The project in which the resource belongs. If it is not provided, a default will be supplied.
	Project pulumi.StringOutput `pulumi:"project"`
	// Role that is assigned to the list of `members`, or principals. For example, `roles/viewer`, `roles/editor`, or `roles/owner`.
	Role pulumi.StringOutput `pulumi:"role"`
}

Sets the access control policy on the specified resource. Replaces any existing policy. Can return `NOT_FOUND`, `INVALID_ARGUMENT`, and `PERMISSION_DENIED` errors.

func GetApiVersionSpecArtifactIamMember added in v0.26.0 

func GetApiVersionSpecArtifactIamMember(ctx *pulumi.Context,
	name string, id pulumi.IDInput, state *ApiVersionSpecArtifactIamMemberState, opts ...pulumi.ResourceOption) (*ApiVersionSpecArtifactIamMember, error)

GetApiVersionSpecArtifactIamMember gets an existing ApiVersionSpecArtifactIamMember resource's state with the given name, ID, and optional state properties that are used to uniquely qualify the lookup (nil if not required).

func NewApiVersionSpecArtifactIamMember added in v0.26.0 

func NewApiVersionSpecArtifactIamMember(ctx *pulumi.Context,
	name string, args *ApiVersionSpecArtifactIamMemberArgs, opts ...pulumi.ResourceOption) (*ApiVersionSpecArtifactIamMember, error)

NewApiVersionSpecArtifactIamMember registers a new resource with the given unique name, arguments, and options.

func (*ApiVersionSpecArtifactIamMember) ElementType added in v0.26.0 

func (*ApiVersionSpecArtifactIamMember) ElementType() reflect.Type

func (*ApiVersionSpecArtifactIamMember) ToApiVersionSpecArtifactIamMemberOutput added in v0.26.0 

func (i *ApiVersionSpecArtifactIamMember) ToApiVersionSpecArtifactIamMemberOutput() ApiVersionSpecArtifactIamMemberOutput

func (*ApiVersionSpecArtifactIamMember) ToApiVersionSpecArtifactIamMemberOutputWithContext added in v0.26.0 

func (i *ApiVersionSpecArtifactIamMember) ToApiVersionSpecArtifactIamMemberOutputWithContext(ctx context.Context) ApiVersionSpecArtifactIamMemberOutput

type ApiVersionSpecArtifactIamMemberArgs added in v0.26.0 

type ApiVersionSpecArtifactIamMemberArgs struct {
	// An IAM Condition for a given binding.
	Condition iam.ConditionPtrInput
	// Identity that will be granted the privilege in role. The entry can have one of the following values:
	//
	//  * user:{emailid}: An email address that represents a specific Google account. For example, alice@gmail.com or joe@example.com.
	//  * serviceAccount:{emailid}: An email address that represents a service account. For example, my-other-app@appspot.gserviceaccount.com.
	//  * group:{emailid}: An email address that represents a Google group. For example, admins@example.com.
	//  * domain:{domain}: A G Suite domain (primary, instead of alias) name that represents all the users of that domain. For example, google.com or example.com.
	Member pulumi.StringInput
	// The name of the resource to manage IAM policies for.
	Name pulumi.StringInput
	// The role that should be applied.
	Role pulumi.StringInput
}

The set of arguments for constructing a ApiVersionSpecArtifactIamMember resource.

func (ApiVersionSpecArtifactIamMemberArgs) ElementType added in v0.26.0 

func (ApiVersionSpecArtifactIamMemberArgs) ElementType() reflect.Type

type ApiVersionSpecArtifactIamMemberInput added in v0.26.0 

type ApiVersionSpecArtifactIamMemberInput interface {
	pulumi.Input

	ToApiVersionSpecArtifactIamMemberOutput() ApiVersionSpecArtifactIamMemberOutput
	ToApiVersionSpecArtifactIamMemberOutputWithContext(ctx context.Context) ApiVersionSpecArtifactIamMemberOutput
}

type ApiVersionSpecArtifactIamMemberOutput added in v0.26.0 

type ApiVersionSpecArtifactIamMemberOutput struct{ *pulumi.OutputState }

func (ApiVersionSpecArtifactIamMemberOutput) Condition added in v0.26.0 

func (o ApiVersionSpecArtifactIamMemberOutput) Condition() iam.ConditionPtrOutput

An IAM Condition for a given binding. See https://cloud.google.com/iam/docs/conditions-overview for additional details.

func (ApiVersionSpecArtifactIamMemberOutput) ElementType added in v0.26.0 

func (ApiVersionSpecArtifactIamMemberOutput) ElementType() reflect.Type

func (ApiVersionSpecArtifactIamMemberOutput) Etag added in v0.26.0 

func (o ApiVersionSpecArtifactIamMemberOutput) Etag() pulumi.StringOutput

The etag of the resource's IAM policy.

func (ApiVersionSpecArtifactIamMemberOutput) Member added in v0.26.0 

func (o ApiVersionSpecArtifactIamMemberOutput) Member() pulumi.StringOutput

Specifies the principals requesting access for a Google Cloud resource. `members` can have the following values: * `allUsers`: A special identifier that represents anyone who is on the internet; with or without a Google account. * `allAuthenticatedUsers`: A special identifier that represents anyone who is authenticated with a Google account or a service account. Does not include identities that come from external identity providers (IdPs) through identity federation. * `user:{emailid}`: An email address that represents a specific Google account. For example, `alice@example.com` . * `serviceAccount:{emailid}`: An email address that represents a Google service account. For example, `my-other-app@appspot.gserviceaccount.com`. * `serviceAccount:{projectid}.svc.id.goog[{namespace}/{kubernetes-sa}]`: An identifier for a [Kubernetes service account](https://cloud.google.com/kubernetes-engine/docs/how-to/kubernetes-service-accounts). For example, `my-project.svc.id.goog[my-namespace/my-kubernetes-sa]`. * `group:{emailid}`: An email address that represents a Google group. For example, `admins@example.com`. * `domain:{domain}`: The G Suite domain (primary) that represents all the users of that domain. For example, `google.com` or `example.com`. * `deleted:user:{emailid}?uid={uniqueid}`: An email address (plus unique identifier) representing a user that has been recently deleted. For example, `alice@example.com?uid=123456789012345678901`. If the user is recovered, this value reverts to `user:{emailid}` and the recovered user retains the role in the binding. * `deleted:serviceAccount:{emailid}?uid={uniqueid}`: An email address (plus unique identifier) representing a service account that has been recently deleted. For example, `my-other-app@appspot.gserviceaccount.com?uid=123456789012345678901`. If the service account is undeleted, this value reverts to `serviceAccount:{emailid}` and the undeleted service account retains the role in the binding. * `deleted:group:{emailid}?uid={uniqueid}`: An email address (plus unique identifier) representing a Google group that has been recently deleted. For example, `admins@example.com?uid=123456789012345678901`. If the group is recovered, this value reverts to `group:{emailid}` and the recovered group retains the role in the binding.

func (ApiVersionSpecArtifactIamMemberOutput) Name added in v0.26.0 

func (o ApiVersionSpecArtifactIamMemberOutput) Name() pulumi.StringOutput

The name of the resource to manage IAM policies for.

func (ApiVersionSpecArtifactIamMemberOutput) Project added in v0.26.0 

func (o ApiVersionSpecArtifactIamMemberOutput) Project() pulumi.StringOutput

The project in which the resource belongs. If it is not provided, a default will be supplied.

func (ApiVersionSpecArtifactIamMemberOutput) Role added in v0.26.0 

func (o ApiVersionSpecArtifactIamMemberOutput) Role() pulumi.StringOutput

Role that is assigned to the list of `members`, or principals. For example, `roles/viewer`, `roles/editor`, or `roles/owner`.

func (ApiVersionSpecArtifactIamMemberOutput) ToApiVersionSpecArtifactIamMemberOutput added in v0.26.0 

func (o ApiVersionSpecArtifactIamMemberOutput) ToApiVersionSpecArtifactIamMemberOutput() ApiVersionSpecArtifactIamMemberOutput

func (ApiVersionSpecArtifactIamMemberOutput) ToApiVersionSpecArtifactIamMemberOutputWithContext added in v0.26.0 

func (o ApiVersionSpecArtifactIamMemberOutput) ToApiVersionSpecArtifactIamMemberOutputWithContext(ctx context.Context) ApiVersionSpecArtifactIamMemberOutput

type ApiVersionSpecArtifactIamMemberState added in v0.26.0 

type ApiVersionSpecArtifactIamMemberState struct {
}

func (ApiVersionSpecArtifactIamMemberState) ElementType added in v0.26.0 

func (ApiVersionSpecArtifactIamMemberState) ElementType() reflect.Type

type ApiVersionSpecArtifactIamPolicy 

type ApiVersionSpecArtifactIamPolicy struct {
	pulumi.CustomResourceState

	ApiId      pulumi.StringOutput `pulumi:"apiId"`
	ArtifactId pulumi.StringOutput `pulumi:"artifactId"`
	// Associates a list of `members`, or principals, with a `role`. Optionally, may specify a `condition` that determines how and when the `bindings` are applied. Each of the `bindings` must contain at least one principal. The `bindings` in a `Policy` can refer to up to 1,500 principals; up to 250 of these principals can be Google groups. Each occurrence of a principal counts towards these limits. For example, if the `bindings` grant 50 different roles to `user:alice@example.com`, and not to any other principal, then you can add another 1,450 principals to the `bindings` in the `Policy`.
	Bindings BindingResponseArrayOutput `pulumi:"bindings"`
	// `etag` is used for optimistic concurrency control as a way to help prevent simultaneous updates of a policy from overwriting each other. It is strongly suggested that systems make use of the `etag` in the read-modify-write cycle to perform policy updates in order to avoid race conditions: An `etag` is returned in the response to `getIamPolicy`, and systems are expected to put that etag in the request to `setIamPolicy` to ensure that their change will be applied to the same version of the policy. **Important:** If you use IAM Conditions, you must include the `etag` field whenever you call `setIamPolicy`. If you omit this field, then IAM allows you to overwrite a version `3` policy with a version `1` policy, and all of the conditions in the version `3` policy are lost.
	Etag     pulumi.StringOutput `pulumi:"etag"`
	Location pulumi.StringOutput `pulumi:"location"`
	Project  pulumi.StringOutput `pulumi:"project"`
	SpecId   pulumi.StringOutput `pulumi:"specId"`
	// Specifies the format of the policy. Valid values are `0`, `1`, and `3`. Requests that specify an invalid value are rejected. Any operation that affects conditional role bindings must specify version `3`. This requirement applies to the following operations: * Getting a policy that includes a conditional role binding * Adding a conditional role binding to a policy * Changing a conditional role binding in a policy * Removing any role binding, with or without a condition, from a policy that includes conditions **Important:** If you use IAM Conditions, you must include the `etag` field whenever you call `setIamPolicy`. If you omit this field, then IAM allows you to overwrite a version `3` policy with a version `1` policy, and all of the conditions in the version `3` policy are lost. If a policy does not include any conditions, operations on that policy may specify any valid version or leave the field unset. To learn which resources support conditions in their IAM policies, see the [IAM documentation](https://cloud.google.com/iam/help/conditions/resource-policies).
	Version   pulumi.IntOutput    `pulumi:"version"`
	VersionId pulumi.StringOutput `pulumi:"versionId"`
}

Sets the access control policy on the specified resource. Replaces any existing policy. Can return `NOT_FOUND`, `INVALID_ARGUMENT`, and `PERMISSION_DENIED` errors. Note - this resource's API doesn't support deletion. When deleted, the resource will persist on Google Cloud even though it will be deleted from Pulumi state.

func GetApiVersionSpecArtifactIamPolicy 

func GetApiVersionSpecArtifactIamPolicy(ctx *pulumi.Context,
	name string, id pulumi.IDInput, state *ApiVersionSpecArtifactIamPolicyState, opts ...pulumi.ResourceOption) (*ApiVersionSpecArtifactIamPolicy, error)

GetApiVersionSpecArtifactIamPolicy gets an existing ApiVersionSpecArtifactIamPolicy resource's state with the given name, ID, and optional state properties that are used to uniquely qualify the lookup (nil if not required).

func NewApiVersionSpecArtifactIamPolicy 

func NewApiVersionSpecArtifactIamPolicy(ctx *pulumi.Context,
	name string, args *ApiVersionSpecArtifactIamPolicyArgs, opts ...pulumi.ResourceOption) (*ApiVersionSpecArtifactIamPolicy, error)

NewApiVersionSpecArtifactIamPolicy registers a new resource with the given unique name, arguments, and options.

func (*ApiVersionSpecArtifactIamPolicy) ElementType 

func (*ApiVersionSpecArtifactIamPolicy) ElementType() reflect.Type

func (*ApiVersionSpecArtifactIamPolicy) ToApiVersionSpecArtifactIamPolicyOutput 

func (i *ApiVersionSpecArtifactIamPolicy) ToApiVersionSpecArtifactIamPolicyOutput() ApiVersionSpecArtifactIamPolicyOutput

func (*ApiVersionSpecArtifactIamPolicy) ToApiVersionSpecArtifactIamPolicyOutputWithContext 

func (i *ApiVersionSpecArtifactIamPolicy) ToApiVersionSpecArtifactIamPolicyOutputWithContext(ctx context.Context) ApiVersionSpecArtifactIamPolicyOutput

type ApiVersionSpecArtifactIamPolicyArgs 

type ApiVersionSpecArtifactIamPolicyArgs struct {
	ApiId      pulumi.StringInput
	ArtifactId pulumi.StringInput
	// Associates a list of `members`, or principals, with a `role`. Optionally, may specify a `condition` that determines how and when the `bindings` are applied. Each of the `bindings` must contain at least one principal. The `bindings` in a `Policy` can refer to up to 1,500 principals; up to 250 of these principals can be Google groups. Each occurrence of a principal counts towards these limits. For example, if the `bindings` grant 50 different roles to `user:alice@example.com`, and not to any other principal, then you can add another 1,450 principals to the `bindings` in the `Policy`.
	Bindings BindingArrayInput
	// `etag` is used for optimistic concurrency control as a way to help prevent simultaneous updates of a policy from overwriting each other. It is strongly suggested that systems make use of the `etag` in the read-modify-write cycle to perform policy updates in order to avoid race conditions: An `etag` is returned in the response to `getIamPolicy`, and systems are expected to put that etag in the request to `setIamPolicy` to ensure that their change will be applied to the same version of the policy. **Important:** If you use IAM Conditions, you must include the `etag` field whenever you call `setIamPolicy`. If you omit this field, then IAM allows you to overwrite a version `3` policy with a version `1` policy, and all of the conditions in the version `3` policy are lost.
	Etag     pulumi.StringPtrInput
	Location pulumi.StringPtrInput
	Project  pulumi.StringPtrInput
	SpecId   pulumi.StringInput
	// Specifies the format of the policy. Valid values are `0`, `1`, and `3`. Requests that specify an invalid value are rejected. Any operation that affects conditional role bindings must specify version `3`. This requirement applies to the following operations: * Getting a policy that includes a conditional role binding * Adding a conditional role binding to a policy * Changing a conditional role binding in a policy * Removing any role binding, with or without a condition, from a policy that includes conditions **Important:** If you use IAM Conditions, you must include the `etag` field whenever you call `setIamPolicy`. If you omit this field, then IAM allows you to overwrite a version `3` policy with a version `1` policy, and all of the conditions in the version `3` policy are lost. If a policy does not include any conditions, operations on that policy may specify any valid version or leave the field unset. To learn which resources support conditions in their IAM policies, see the [IAM documentation](https://cloud.google.com/iam/help/conditions/resource-policies).
	Version   pulumi.IntPtrInput
	VersionId pulumi.StringInput
}

The set of arguments for constructing a ApiVersionSpecArtifactIamPolicy resource.

func (ApiVersionSpecArtifactIamPolicyArgs) ElementType 

func (ApiVersionSpecArtifactIamPolicyArgs) ElementType() reflect.Type

type ApiVersionSpecArtifactIamPolicyInput 

type ApiVersionSpecArtifactIamPolicyInput interface {
	pulumi.Input

	ToApiVersionSpecArtifactIamPolicyOutput() ApiVersionSpecArtifactIamPolicyOutput
	ToApiVersionSpecArtifactIamPolicyOutputWithContext(ctx context.Context) ApiVersionSpecArtifactIamPolicyOutput
}

type ApiVersionSpecArtifactIamPolicyOutput 

type ApiVersionSpecArtifactIamPolicyOutput struct{ *pulumi.OutputState }

func (ApiVersionSpecArtifactIamPolicyOutput) ApiId added in v0.21.0 

func (o ApiVersionSpecArtifactIamPolicyOutput) ApiId() pulumi.StringOutput

func (ApiVersionSpecArtifactIamPolicyOutput) ArtifactId added in v0.21.0 

func (o ApiVersionSpecArtifactIamPolicyOutput) ArtifactId() pulumi.StringOutput

func (ApiVersionSpecArtifactIamPolicyOutput) Bindings 

func (o ApiVersionSpecArtifactIamPolicyOutput) Bindings() BindingResponseArrayOutput

Associates a list of `members`, or principals, with a `role`. Optionally, may specify a `condition` that determines how and when the `bindings` are applied. Each of the `bindings` must contain at least one principal. The `bindings` in a `Policy` can refer to up to 1,500 principals; up to 250 of these principals can be Google groups. Each occurrence of a principal counts towards these limits. For example, if the `bindings` grant 50 different roles to `user:alice@example.com`, and not to any other principal, then you can add another 1,450 principals to the `bindings` in the `Policy`.

func (ApiVersionSpecArtifactIamPolicyOutput) ElementType 

func (ApiVersionSpecArtifactIamPolicyOutput) ElementType() reflect.Type

func (ApiVersionSpecArtifactIamPolicyOutput) Etag 

func (o ApiVersionSpecArtifactIamPolicyOutput) Etag() pulumi.StringOutput

`etag` is used for optimistic concurrency control as a way to help prevent simultaneous updates of a policy from overwriting each other. It is strongly suggested that systems make use of the `etag` in the read-modify-write cycle to perform policy updates in order to avoid race conditions: An `etag` is returned in the response to `getIamPolicy`, and systems are expected to put that etag in the request to `setIamPolicy` to ensure that their change will be applied to the same version of the policy. **Important:** If you use IAM Conditions, you must include the `etag` field whenever you call `setIamPolicy`. If you omit this field, then IAM allows you to overwrite a version `3` policy with a version `1` policy, and all of the conditions in the version `3` policy are lost.

func (ApiVersionSpecArtifactIamPolicyOutput) Location added in v0.21.0 

func (o ApiVersionSpecArtifactIamPolicyOutput) Location() pulumi.StringOutput

func (ApiVersionSpecArtifactIamPolicyOutput) Project added in v0.21.0 

func (o ApiVersionSpecArtifactIamPolicyOutput) Project() pulumi.StringOutput

func (ApiVersionSpecArtifactIamPolicyOutput) SpecId added in v0.21.0 

func (o ApiVersionSpecArtifactIamPolicyOutput) SpecId() pulumi.StringOutput

func (ApiVersionSpecArtifactIamPolicyOutput) ToApiVersionSpecArtifactIamPolicyOutput 

func (o ApiVersionSpecArtifactIamPolicyOutput) ToApiVersionSpecArtifactIamPolicyOutput() ApiVersionSpecArtifactIamPolicyOutput

func (ApiVersionSpecArtifactIamPolicyOutput) ToApiVersionSpecArtifactIamPolicyOutputWithContext 

func (o ApiVersionSpecArtifactIamPolicyOutput) ToApiVersionSpecArtifactIamPolicyOutputWithContext(ctx context.Context) ApiVersionSpecArtifactIamPolicyOutput

func (ApiVersionSpecArtifactIamPolicyOutput) Version 

func (o ApiVersionSpecArtifactIamPolicyOutput) Version() pulumi.IntOutput

Specifies the format of the policy. Valid values are `0`, `1`, and `3`. Requests that specify an invalid value are rejected. Any operation that affects conditional role bindings must specify version `3`. This requirement applies to the following operations: * Getting a policy that includes a conditional role binding * Adding a conditional role binding to a policy * Changing a conditional role binding in a policy * Removing any role binding, with or without a condition, from a policy that includes conditions **Important:** If you use IAM Conditions, you must include the `etag` field whenever you call `setIamPolicy`. If you omit this field, then IAM allows you to overwrite a version `3` policy with a version `1` policy, and all of the conditions in the version `3` policy are lost. If a policy does not include any conditions, operations on that policy may specify any valid version or leave the field unset. To learn which resources support conditions in their IAM policies, see the [IAM documentation](https://cloud.google.com/iam/help/conditions/resource-policies).

func (ApiVersionSpecArtifactIamPolicyOutput) VersionId added in v0.21.0 

func (o ApiVersionSpecArtifactIamPolicyOutput) VersionId() pulumi.StringOutput

type ApiVersionSpecArtifactIamPolicyState 

type ApiVersionSpecArtifactIamPolicyState struct {
}

func (ApiVersionSpecArtifactIamPolicyState) ElementType 

func (ApiVersionSpecArtifactIamPolicyState) ElementType() reflect.Type

type ApiVersionSpecIamBinding added in v0.26.0 

type ApiVersionSpecIamBinding struct {
	pulumi.CustomResourceState

	// An IAM Condition for a given binding. See https://cloud.google.com/iam/docs/conditions-overview for additional details.
	Condition iam.ConditionPtrOutput `pulumi:"condition"`
	// The etag of the resource's IAM policy.
	Etag pulumi.StringOutput `pulumi:"etag"`
	// Specifies the principals requesting access for a Google Cloud resource. `members` can have the following values: * `allUsers`: A special identifier that represents anyone who is on the internet; with or without a Google account. * `allAuthenticatedUsers`: A special identifier that represents anyone who is authenticated with a Google account or a service account. Does not include identities that come from external identity providers (IdPs) through identity federation. * `user:{emailid}`: An email address that represents a specific Google account. For example, `alice@example.com` . * `serviceAccount:{emailid}`: An email address that represents a Google service account. For example, `my-other-app@appspot.gserviceaccount.com`. * `serviceAccount:{projectid}.svc.id.goog[{namespace}/{kubernetes-sa}]`: An identifier for a [Kubernetes service account](https://cloud.google.com/kubernetes-engine/docs/how-to/kubernetes-service-accounts). For example, `my-project.svc.id.goog[my-namespace/my-kubernetes-sa]`. * `group:{emailid}`: An email address that represents a Google group. For example, `admins@example.com`. * `domain:{domain}`: The G Suite domain (primary) that represents all the users of that domain. For example, `google.com` or `example.com`. * `deleted:user:{emailid}?uid={uniqueid}`: An email address (plus unique identifier) representing a user that has been recently deleted. For example, `alice@example.com?uid=123456789012345678901`. If the user is recovered, this value reverts to `user:{emailid}` and the recovered user retains the role in the binding. * `deleted:serviceAccount:{emailid}?uid={uniqueid}`: An email address (plus unique identifier) representing a service account that has been recently deleted. For example, `my-other-app@appspot.gserviceaccount.com?uid=123456789012345678901`. If the service account is undeleted, this value reverts to `serviceAccount:{emailid}` and the undeleted service account retains the role in the binding. * `deleted:group:{emailid}?uid={uniqueid}`: An email address (plus unique identifier) representing a Google group that has been recently deleted. For example, `admins@example.com?uid=123456789012345678901`. If the group is recovered, this value reverts to `group:{emailid}` and the recovered group retains the role in the binding.
	Members pulumi.StringArrayOutput `pulumi:"members"`
	// The name of the resource to manage IAM policies for.
	Name pulumi.StringOutput `pulumi:"name"`
	// The project in which the resource belongs. If it is not provided, a default will be supplied.
	Project pulumi.StringOutput `pulumi:"project"`
	// Role that is assigned to the list of `members`, or principals. For example, `roles/viewer`, `roles/editor`, or `roles/owner`.
	Role pulumi.StringOutput `pulumi:"role"`
}

Sets the access control policy on the specified resource. Replaces any existing policy. Can return `NOT_FOUND`, `INVALID_ARGUMENT`, and `PERMISSION_DENIED` errors.

func GetApiVersionSpecIamBinding added in v0.26.0 

func GetApiVersionSpecIamBinding(ctx *pulumi.Context,
	name string, id pulumi.IDInput, state *ApiVersionSpecIamBindingState, opts ...pulumi.ResourceOption) (*ApiVersionSpecIamBinding, error)

GetApiVersionSpecIamBinding gets an existing ApiVersionSpecIamBinding resource's state with the given name, ID, and optional state properties that are used to uniquely qualify the lookup (nil if not required).

func NewApiVersionSpecIamBinding added in v0.26.0 

func NewApiVersionSpecIamBinding(ctx *pulumi.Context,
	name string, args *ApiVersionSpecIamBindingArgs, opts ...pulumi.ResourceOption) (*ApiVersionSpecIamBinding, error)

NewApiVersionSpecIamBinding registers a new resource with the given unique name, arguments, and options.

func (*ApiVersionSpecIamBinding) ElementType added in v0.26.0 

func (*ApiVersionSpecIamBinding) ElementType() reflect.Type

func (*ApiVersionSpecIamBinding) ToApiVersionSpecIamBindingOutput added in v0.26.0 

func (i *ApiVersionSpecIamBinding) ToApiVersionSpecIamBindingOutput() ApiVersionSpecIamBindingOutput

func (*ApiVersionSpecIamBinding) ToApiVersionSpecIamBindingOutputWithContext added in v0.26.0 

func (i *ApiVersionSpecIamBinding) ToApiVersionSpecIamBindingOutputWithContext(ctx context.Context) ApiVersionSpecIamBindingOutput

type ApiVersionSpecIamBindingArgs added in v0.26.0 

type ApiVersionSpecIamBindingArgs struct {
	// An IAM Condition for a given binding.
	Condition iam.ConditionPtrInput
	// Identities that will be granted the privilege in role. Each entry can have one of the following values:
	//
	//  * user:{emailid}: An email address that represents a specific Google account. For example, alice@gmail.com or joe@example.com.
	//  * serviceAccount:{emailid}: An email address that represents a service account. For example, my-other-app@appspot.gserviceaccount.com.
	//  * group:{emailid}: An email address that represents a Google group. For example, admins@example.com.
	//  * domain:{domain}: A G Suite domain (primary, instead of alias) name that represents all the users of that domain. For example, google.com or example.com.
	Members pulumi.StringArrayInput
	// The name of the resource to manage IAM policies for.
	Name pulumi.StringInput
	// The role that should be applied. Only one `IamBinding` can be used per role.
	Role pulumi.StringInput
}

The set of arguments for constructing a ApiVersionSpecIamBinding resource.

func (ApiVersionSpecIamBindingArgs) ElementType added in v0.26.0 

func (ApiVersionSpecIamBindingArgs) ElementType() reflect.Type

type ApiVersionSpecIamBindingInput added in v0.26.0 

type ApiVersionSpecIamBindingInput interface {
	pulumi.Input

	ToApiVersionSpecIamBindingOutput() ApiVersionSpecIamBindingOutput
	ToApiVersionSpecIamBindingOutputWithContext(ctx context.Context) ApiVersionSpecIamBindingOutput
}

type ApiVersionSpecIamBindingOutput added in v0.26.0 

type ApiVersionSpecIamBindingOutput struct{ *pulumi.OutputState }

func (ApiVersionSpecIamBindingOutput) Condition added in v0.26.0 

func (o ApiVersionSpecIamBindingOutput) Condition() iam.ConditionPtrOutput

An IAM Condition for a given binding. See https://cloud.google.com/iam/docs/conditions-overview for additional details.

func (ApiVersionSpecIamBindingOutput) ElementType added in v0.26.0 

func (ApiVersionSpecIamBindingOutput) ElementType() reflect.Type

func (ApiVersionSpecIamBindingOutput) Etag added in v0.26.0 

func (o ApiVersionSpecIamBindingOutput) Etag() pulumi.StringOutput

The etag of the resource's IAM policy.

func (ApiVersionSpecIamBindingOutput) Members added in v0.26.0 

func (o ApiVersionSpecIamBindingOutput) Members() pulumi.StringArrayOutput

Specifies the principals requesting access for a Google Cloud resource. `members` can have the following values: * `allUsers`: A special identifier that represents anyone who is on the internet; with or without a Google account. * `allAuthenticatedUsers`: A special identifier that represents anyone who is authenticated with a Google account or a service account. Does not include identities that come from external identity providers (IdPs) through identity federation. * `user:{emailid}`: An email address that represents a specific Google account. For example, `alice@example.com` . * `serviceAccount:{emailid}`: An email address that represents a Google service account. For example, `my-other-app@appspot.gserviceaccount.com`. * `serviceAccount:{projectid}.svc.id.goog[{namespace}/{kubernetes-sa}]`: An identifier for a [Kubernetes service account](https://cloud.google.com/kubernetes-engine/docs/how-to/kubernetes-service-accounts). For example, `my-project.svc.id.goog[my-namespace/my-kubernetes-sa]`. * `group:{emailid}`: An email address that represents a Google group. For example, `admins@example.com`. * `domain:{domain}`: The G Suite domain (primary) that represents all the users of that domain. For example, `google.com` or `example.com`. * `deleted:user:{emailid}?uid={uniqueid}`: An email address (plus unique identifier) representing a user that has been recently deleted. For example, `alice@example.com?uid=123456789012345678901`. If the user is recovered, this value reverts to `user:{emailid}` and the recovered user retains the role in the binding. * `deleted:serviceAccount:{emailid}?uid={uniqueid}`: An email address (plus unique identifier) representing a service account that has been recently deleted. For example, `my-other-app@appspot.gserviceaccount.com?uid=123456789012345678901`. If the service account is undeleted, this value reverts to `serviceAccount:{emailid}` and the undeleted service account retains the role in the binding. * `deleted:group:{emailid}?uid={uniqueid}`: An email address (plus unique identifier) representing a Google group that has been recently deleted. For example, `admins@example.com?uid=123456789012345678901`. If the group is recovered, this value reverts to `group:{emailid}` and the recovered group retains the role in the binding.

func (ApiVersionSpecIamBindingOutput) Name added in v0.26.0 

func (o ApiVersionSpecIamBindingOutput) Name() pulumi.StringOutput

The name of the resource to manage IAM policies for.

func (ApiVersionSpecIamBindingOutput) Project added in v0.26.0 

func (o ApiVersionSpecIamBindingOutput) Project() pulumi.StringOutput

The project in which the resource belongs. If it is not provided, a default will be supplied.

func (ApiVersionSpecIamBindingOutput) Role added in v0.26.0 

func (o ApiVersionSpecIamBindingOutput) Role() pulumi.StringOutput

Role that is assigned to the list of `members`, or principals. For example, `roles/viewer`, `roles/editor`, or `roles/owner`.

func (ApiVersionSpecIamBindingOutput) ToApiVersionSpecIamBindingOutput added in v0.26.0 

func (o ApiVersionSpecIamBindingOutput) ToApiVersionSpecIamBindingOutput() ApiVersionSpecIamBindingOutput

func (ApiVersionSpecIamBindingOutput) ToApiVersionSpecIamBindingOutputWithContext added in v0.26.0 

func (o ApiVersionSpecIamBindingOutput) ToApiVersionSpecIamBindingOutputWithContext(ctx context.Context) ApiVersionSpecIamBindingOutput

type ApiVersionSpecIamBindingState added in v0.26.0 

type ApiVersionSpecIamBindingState struct {
}

func (ApiVersionSpecIamBindingState) ElementType added in v0.26.0 

func (ApiVersionSpecIamBindingState) ElementType() reflect.Type

type ApiVersionSpecIamMember added in v0.26.0 

type ApiVersionSpecIamMember struct {
	pulumi.CustomResourceState

	// An IAM Condition for a given binding. See https://cloud.google.com/iam/docs/conditions-overview for additional details.
	Condition iam.ConditionPtrOutput `pulumi:"condition"`
	// The etag of the resource's IAM policy.
	Etag pulumi.StringOutput `pulumi:"etag"`
	// Specifies the principals requesting access for a Google Cloud resource. `members` can have the following values: * `allUsers`: A special identifier that represents anyone who is on the internet; with or without a Google account. * `allAuthenticatedUsers`: A special identifier that represents anyone who is authenticated with a Google account or a service account. Does not include identities that come from external identity providers (IdPs) through identity federation. * `user:{emailid}`: An email address that represents a specific Google account. For example, `alice@example.com` . * `serviceAccount:{emailid}`: An email address that represents a Google service account. For example, `my-other-app@appspot.gserviceaccount.com`. * `serviceAccount:{projectid}.svc.id.goog[{namespace}/{kubernetes-sa}]`: An identifier for a [Kubernetes service account](https://cloud.google.com/kubernetes-engine/docs/how-to/kubernetes-service-accounts). For example, `my-project.svc.id.goog[my-namespace/my-kubernetes-sa]`. * `group:{emailid}`: An email address that represents a Google group. For example, `admins@example.com`. * `domain:{domain}`: The G Suite domain (primary) that represents all the users of that domain. For example, `google.com` or `example.com`. * `deleted:user:{emailid}?uid={uniqueid}`: An email address (plus unique identifier) representing a user that has been recently deleted. For example, `alice@example.com?uid=123456789012345678901`. If the user is recovered, this value reverts to `user:{emailid}` and the recovered user retains the role in the binding. * `deleted:serviceAccount:{emailid}?uid={uniqueid}`: An email address (plus unique identifier) representing a service account that has been recently deleted. For example, `my-other-app@appspot.gserviceaccount.com?uid=123456789012345678901`. If the service account is undeleted, this value reverts to `serviceAccount:{emailid}` and the undeleted service account retains the role in the binding. * `deleted:group:{emailid}?uid={uniqueid}`: An email address (plus unique identifier) representing a Google group that has been recently deleted. For example, `admins@example.com?uid=123456789012345678901`. If the group is recovered, this value reverts to `group:{emailid}` and the recovered group retains the role in the binding.
	Member pulumi.StringOutput `pulumi:"member"`
	// The name of the resource to manage IAM policies for.
	Name pulumi.StringOutput `pulumi:"name"`
	// The project in which the resource belongs. If it is not provided, a default will be supplied.
	Project pulumi.StringOutput `pulumi:"project"`
	// Role that is assigned to the list of `members`, or principals. For example, `roles/viewer`, `roles/editor`, or `roles/owner`.
	Role pulumi.StringOutput `pulumi:"role"`
}

Sets the access control policy on the specified resource. Replaces any existing policy. Can return `NOT_FOUND`, `INVALID_ARGUMENT`, and `PERMISSION_DENIED` errors.

func GetApiVersionSpecIamMember added in v0.26.0 

func GetApiVersionSpecIamMember(ctx *pulumi.Context,
	name string, id pulumi.IDInput, state *ApiVersionSpecIamMemberState, opts ...pulumi.ResourceOption) (*ApiVersionSpecIamMember, error)

GetApiVersionSpecIamMember gets an existing ApiVersionSpecIamMember resource's state with the given name, ID, and optional state properties that are used to uniquely qualify the lookup (nil if not required).

func NewApiVersionSpecIamMember added in v0.26.0 

func NewApiVersionSpecIamMember(ctx *pulumi.Context,
	name string, args *ApiVersionSpecIamMemberArgs, opts ...pulumi.ResourceOption) (*ApiVersionSpecIamMember, error)

NewApiVersionSpecIamMember registers a new resource with the given unique name, arguments, and options.

func (*ApiVersionSpecIamMember) ElementType added in v0.26.0 

func (*ApiVersionSpecIamMember) ElementType() reflect.Type

func (*ApiVersionSpecIamMember) ToApiVersionSpecIamMemberOutput added in v0.26.0 

func (i *ApiVersionSpecIamMember) ToApiVersionSpecIamMemberOutput() ApiVersionSpecIamMemberOutput

func (*ApiVersionSpecIamMember) ToApiVersionSpecIamMemberOutputWithContext added in v0.26.0 

func (i *ApiVersionSpecIamMember) ToApiVersionSpecIamMemberOutputWithContext(ctx context.Context) ApiVersionSpecIamMemberOutput

type ApiVersionSpecIamMemberArgs added in v0.26.0 

type ApiVersionSpecIamMemberArgs struct {
	// An IAM Condition for a given binding.
	Condition iam.ConditionPtrInput
	// Identity that will be granted the privilege in role. The entry can have one of the following values:
	//
	//  * user:{emailid}: An email address that represents a specific Google account. For example, alice@gmail.com or joe@example.com.
	//  * serviceAccount:{emailid}: An email address that represents a service account. For example, my-other-app@appspot.gserviceaccount.com.
	//  * group:{emailid}: An email address that represents a Google group. For example, admins@example.com.
	//  * domain:{domain}: A G Suite domain (primary, instead of alias) name that represents all the users of that domain. For example, google.com or example.com.
	Member pulumi.StringInput
	// The name of the resource to manage IAM policies for.
	Name pulumi.StringInput
	// The role that should be applied.
	Role pulumi.StringInput
}

The set of arguments for constructing a ApiVersionSpecIamMember resource.

func (ApiVersionSpecIamMemberArgs) ElementType added in v0.26.0 

func (ApiVersionSpecIamMemberArgs) ElementType() reflect.Type

type ApiVersionSpecIamMemberInput added in v0.26.0 

type ApiVersionSpecIamMemberInput interface {
	pulumi.Input

	ToApiVersionSpecIamMemberOutput() ApiVersionSpecIamMemberOutput
	ToApiVersionSpecIamMemberOutputWithContext(ctx context.Context) ApiVersionSpecIamMemberOutput
}

type ApiVersionSpecIamMemberOutput added in v0.26.0 

type ApiVersionSpecIamMemberOutput struct{ *pulumi.OutputState }

func (ApiVersionSpecIamMemberOutput) Condition added in v0.26.0 

func (o ApiVersionSpecIamMemberOutput) Condition() iam.ConditionPtrOutput

An IAM Condition for a given binding. See https://cloud.google.com/iam/docs/conditions-overview for additional details.

func (ApiVersionSpecIamMemberOutput) ElementType added in v0.26.0 

func (ApiVersionSpecIamMemberOutput) ElementType() reflect.Type

func (ApiVersionSpecIamMemberOutput) Etag added in v0.26.0 

func (o ApiVersionSpecIamMemberOutput) Etag() pulumi.StringOutput

The etag of the resource's IAM policy.

func (ApiVersionSpecIamMemberOutput) Member added in v0.26.0 

func (o ApiVersionSpecIamMemberOutput) Member() pulumi.StringOutput

Specifies the principals requesting access for a Google Cloud resource. `members` can have the following values: * `allUsers`: A special identifier that represents anyone who is on the internet; with or without a Google account. * `allAuthenticatedUsers`: A special identifier that represents anyone who is authenticated with a Google account or a service account. Does not include identities that come from external identity providers (IdPs) through identity federation. * `user:{emailid}`: An email address that represents a specific Google account. For example, `alice@example.com` . * `serviceAccount:{emailid}`: An email address that represents a Google service account. For example, `my-other-app@appspot.gserviceaccount.com`. * `serviceAccount:{projectid}.svc.id.goog[{namespace}/{kubernetes-sa}]`: An identifier for a [Kubernetes service account](https://cloud.google.com/kubernetes-engine/docs/how-to/kubernetes-service-accounts). For example, `my-project.svc.id.goog[my-namespace/my-kubernetes-sa]`. * `group:{emailid}`: An email address that represents a Google group. For example, `admins@example.com`. * `domain:{domain}`: The G Suite domain (primary) that represents all the users of that domain. For example, `google.com` or `example.com`. * `deleted:user:{emailid}?uid={uniqueid}`: An email address (plus unique identifier) representing a user that has been recently deleted. For example, `alice@example.com?uid=123456789012345678901`. If the user is recovered, this value reverts to `user:{emailid}` and the recovered user retains the role in the binding. * `deleted:serviceAccount:{emailid}?uid={uniqueid}`: An email address (plus unique identifier) representing a service account that has been recently deleted. For example, `my-other-app@appspot.gserviceaccount.com?uid=123456789012345678901`. If the service account is undeleted, this value reverts to `serviceAccount:{emailid}` and the undeleted service account retains the role in the binding. * `deleted:group:{emailid}?uid={uniqueid}`: An email address (plus unique identifier) representing a Google group that has been recently deleted. For example, `admins@example.com?uid=123456789012345678901`. If the group is recovered, this value reverts to `group:{emailid}` and the recovered group retains the role in the binding.

func (ApiVersionSpecIamMemberOutput) Name added in v0.26.0 

func (o ApiVersionSpecIamMemberOutput) Name() pulumi.StringOutput

The name of the resource to manage IAM policies for.

func (ApiVersionSpecIamMemberOutput) Project added in v0.26.0 

func (o ApiVersionSpecIamMemberOutput) Project() pulumi.StringOutput

The project in which the resource belongs. If it is not provided, a default will be supplied.

func (ApiVersionSpecIamMemberOutput) Role added in v0.26.0 

func (o ApiVersionSpecIamMemberOutput) Role() pulumi.StringOutput

Role that is assigned to the list of `members`, or principals. For example, `roles/viewer`, `roles/editor`, or `roles/owner`.

func (ApiVersionSpecIamMemberOutput) ToApiVersionSpecIamMemberOutput added in v0.26.0 

func (o ApiVersionSpecIamMemberOutput) ToApiVersionSpecIamMemberOutput() ApiVersionSpecIamMemberOutput

func (ApiVersionSpecIamMemberOutput) ToApiVersionSpecIamMemberOutputWithContext added in v0.26.0 

func (o ApiVersionSpecIamMemberOutput) ToApiVersionSpecIamMemberOutputWithContext(ctx context.Context) ApiVersionSpecIamMemberOutput

type ApiVersionSpecIamMemberState added in v0.26.0 

type ApiVersionSpecIamMemberState struct {
}

func (ApiVersionSpecIamMemberState) ElementType added in v0.26.0 

func (ApiVersionSpecIamMemberState) ElementType() reflect.Type

type ApiVersionSpecIamPolicy 

type ApiVersionSpecIamPolicy struct {
	pulumi.CustomResourceState

	ApiId pulumi.StringOutput `pulumi:"apiId"`
	// Associates a list of `members`, or principals, with a `role`. Optionally, may specify a `condition` that determines how and when the `bindings` are applied. Each of the `bindings` must contain at least one principal. The `bindings` in a `Policy` can refer to up to 1,500 principals; up to 250 of these principals can be Google groups. Each occurrence of a principal counts towards these limits. For example, if the `bindings` grant 50 different roles to `user:alice@example.com`, and not to any other principal, then you can add another 1,450 principals to the `bindings` in the `Policy`.
	Bindings BindingResponseArrayOutput `pulumi:"bindings"`
	// `etag` is used for optimistic concurrency control as a way to help prevent simultaneous updates of a policy from overwriting each other. It is strongly suggested that systems make use of the `etag` in the read-modify-write cycle to perform policy updates in order to avoid race conditions: An `etag` is returned in the response to `getIamPolicy`, and systems are expected to put that etag in the request to `setIamPolicy` to ensure that their change will be applied to the same version of the policy. **Important:** If you use IAM Conditions, you must include the `etag` field whenever you call `setIamPolicy`. If you omit this field, then IAM allows you to overwrite a version `3` policy with a version `1` policy, and all of the conditions in the version `3` policy are lost.
	Etag     pulumi.StringOutput `pulumi:"etag"`
	Location pulumi.StringOutput `pulumi:"location"`
	Project  pulumi.StringOutput `pulumi:"project"`
	SpecId   pulumi.StringOutput `pulumi:"specId"`
	// Specifies the format of the policy. Valid values are `0`, `1`, and `3`. Requests that specify an invalid value are rejected. Any operation that affects conditional role bindings must specify version `3`. This requirement applies to the following operations: * Getting a policy that includes a conditional role binding * Adding a conditional role binding to a policy * Changing a conditional role binding in a policy * Removing any role binding, with or without a condition, from a policy that includes conditions **Important:** If you use IAM Conditions, you must include the `etag` field whenever you call `setIamPolicy`. If you omit this field, then IAM allows you to overwrite a version `3` policy with a version `1` policy, and all of the conditions in the version `3` policy are lost. If a policy does not include any conditions, operations on that policy may specify any valid version or leave the field unset. To learn which resources support conditions in their IAM policies, see the [IAM documentation](https://cloud.google.com/iam/help/conditions/resource-policies).
	Version   pulumi.IntOutput    `pulumi:"version"`
	VersionId pulumi.StringOutput `pulumi:"versionId"`
}

Sets the access control policy on the specified resource. Replaces any existing policy. Can return `NOT_FOUND`, `INVALID_ARGUMENT`, and `PERMISSION_DENIED` errors. Note - this resource's API doesn't support deletion. When deleted, the resource will persist on Google Cloud even though it will be deleted from Pulumi state.

func GetApiVersionSpecIamPolicy 

func GetApiVersionSpecIamPolicy(ctx *pulumi.Context,
	name string, id pulumi.IDInput, state *ApiVersionSpecIamPolicyState, opts ...pulumi.ResourceOption) (*ApiVersionSpecIamPolicy, error)

GetApiVersionSpecIamPolicy gets an existing ApiVersionSpecIamPolicy resource's state with the given name, ID, and optional state properties that are used to uniquely qualify the lookup (nil if not required).

func NewApiVersionSpecIamPolicy 

func NewApiVersionSpecIamPolicy(ctx *pulumi.Context,
	name string, args *ApiVersionSpecIamPolicyArgs, opts ...pulumi.ResourceOption) (*ApiVersionSpecIamPolicy, error)

NewApiVersionSpecIamPolicy registers a new resource with the given unique name, arguments, and options.

func (*ApiVersionSpecIamPolicy) ElementType 

func (*ApiVersionSpecIamPolicy) ElementType() reflect.Type

func (*ApiVersionSpecIamPolicy) ToApiVersionSpecIamPolicyOutput 

func (i *ApiVersionSpecIamPolicy) ToApiVersionSpecIamPolicyOutput() ApiVersionSpecIamPolicyOutput

func (*ApiVersionSpecIamPolicy) ToApiVersionSpecIamPolicyOutputWithContext 

func (i *ApiVersionSpecIamPolicy) ToApiVersionSpecIamPolicyOutputWithContext(ctx context.Context) ApiVersionSpecIamPolicyOutput

type ApiVersionSpecIamPolicyArgs 

type ApiVersionSpecIamPolicyArgs struct {
	ApiId pulumi.StringInput
	// Associates a list of `members`, or principals, with a `role`. Optionally, may specify a `condition` that determines how and when the `bindings` are applied. Each of the `bindings` must contain at least one principal. The `bindings` in a `Policy` can refer to up to 1,500 principals; up to 250 of these principals can be Google groups. Each occurrence of a principal counts towards these limits. For example, if the `bindings` grant 50 different roles to `user:alice@example.com`, and not to any other principal, then you can add another 1,450 principals to the `bindings` in the `Policy`.
	Bindings BindingArrayInput
	// `etag` is used for optimistic concurrency control as a way to help prevent simultaneous updates of a policy from overwriting each other. It is strongly suggested that systems make use of the `etag` in the read-modify-write cycle to perform policy updates in order to avoid race conditions: An `etag` is returned in the response to `getIamPolicy`, and systems are expected to put that etag in the request to `setIamPolicy` to ensure that their change will be applied to the same version of the policy. **Important:** If you use IAM Conditions, you must include the `etag` field whenever you call `setIamPolicy`. If you omit this field, then IAM allows you to overwrite a version `3` policy with a version `1` policy, and all of the conditions in the version `3` policy are lost.
	Etag     pulumi.StringPtrInput
	Location pulumi.StringPtrInput
	Project  pulumi.StringPtrInput
	SpecId   pulumi.StringInput
	// Specifies the format of the policy. Valid values are `0`, `1`, and `3`. Requests that specify an invalid value are rejected. Any operation that affects conditional role bindings must specify version `3`. This requirement applies to the following operations: * Getting a policy that includes a conditional role binding * Adding a conditional role binding to a policy * Changing a conditional role binding in a policy * Removing any role binding, with or without a condition, from a policy that includes conditions **Important:** If you use IAM Conditions, you must include the `etag` field whenever you call `setIamPolicy`. If you omit this field, then IAM allows you to overwrite a version `3` policy with a version `1` policy, and all of the conditions in the version `3` policy are lost. If a policy does not include any conditions, operations on that policy may specify any valid version or leave the field unset. To learn which resources support conditions in their IAM policies, see the [IAM documentation](https://cloud.google.com/iam/help/conditions/resource-policies).
	Version   pulumi.IntPtrInput
	VersionId pulumi.StringInput
}

The set of arguments for constructing a ApiVersionSpecIamPolicy resource.

func (ApiVersionSpecIamPolicyArgs) ElementType 

func (ApiVersionSpecIamPolicyArgs) ElementType() reflect.Type

type ApiVersionSpecIamPolicyInput 

type ApiVersionSpecIamPolicyInput interface {
	pulumi.Input

	ToApiVersionSpecIamPolicyOutput() ApiVersionSpecIamPolicyOutput
	ToApiVersionSpecIamPolicyOutputWithContext(ctx context.Context) ApiVersionSpecIamPolicyOutput
}

type ApiVersionSpecIamPolicyOutput 

type ApiVersionSpecIamPolicyOutput struct{ *pulumi.OutputState }

func (ApiVersionSpecIamPolicyOutput) ApiId added in v0.21.0 

func (o ApiVersionSpecIamPolicyOutput) ApiId() pulumi.StringOutput

func (ApiVersionSpecIamPolicyOutput) Bindings 

func (o ApiVersionSpecIamPolicyOutput) Bindings() BindingResponseArrayOutput

Associates a list of `members`, or principals, with a `role`. Optionally, may specify a `condition` that determines how and when the `bindings` are applied. Each of the `bindings` must contain at least one principal. The `bindings` in a `Policy` can refer to up to 1,500 principals; up to 250 of these principals can be Google groups. Each occurrence of a principal counts towards these limits. For example, if the `bindings` grant 50 different roles to `user:alice@example.com`, and not to any other principal, then you can add another 1,450 principals to the `bindings` in the `Policy`.

func (ApiVersionSpecIamPolicyOutput) ElementType 

func (ApiVersionSpecIamPolicyOutput) ElementType() reflect.Type

func (ApiVersionSpecIamPolicyOutput) Etag 

func (o ApiVersionSpecIamPolicyOutput) Etag() pulumi.StringOutput

`etag` is used for optimistic concurrency control as a way to help prevent simultaneous updates of a policy from overwriting each other. It is strongly suggested that systems make use of the `etag` in the read-modify-write cycle to perform policy updates in order to avoid race conditions: An `etag` is returned in the response to `getIamPolicy`, and systems are expected to put that etag in the request to `setIamPolicy` to ensure that their change will be applied to the same version of the policy. **Important:** If you use IAM Conditions, you must include the `etag` field whenever you call `setIamPolicy`. If you omit this field, then IAM allows you to overwrite a version `3` policy with a version `1` policy, and all of the conditions in the version `3` policy are lost.

func (ApiVersionSpecIamPolicyOutput) Location added in v0.21.0 

func (o ApiVersionSpecIamPolicyOutput) Location() pulumi.StringOutput

func (ApiVersionSpecIamPolicyOutput) Project added in v0.21.0 

func (o ApiVersionSpecIamPolicyOutput) Project() pulumi.StringOutput

func (ApiVersionSpecIamPolicyOutput) SpecId added in v0.21.0 

func (o ApiVersionSpecIamPolicyOutput) SpecId() pulumi.StringOutput

func (ApiVersionSpecIamPolicyOutput) ToApiVersionSpecIamPolicyOutput 

func (o ApiVersionSpecIamPolicyOutput) ToApiVersionSpecIamPolicyOutput() ApiVersionSpecIamPolicyOutput

func (ApiVersionSpecIamPolicyOutput) ToApiVersionSpecIamPolicyOutputWithContext 

func (o ApiVersionSpecIamPolicyOutput) ToApiVersionSpecIamPolicyOutputWithContext(ctx context.Context) ApiVersionSpecIamPolicyOutput

func (ApiVersionSpecIamPolicyOutput) Version 

func (o ApiVersionSpecIamPolicyOutput) Version() pulumi.IntOutput

Specifies the format of the policy. Valid values are `0`, `1`, and `3`. Requests that specify an invalid value are rejected. Any operation that affects conditional role bindings must specify version `3`. This requirement applies to the following operations: * Getting a policy that includes a conditional role binding * Adding a conditional role binding to a policy * Changing a conditional role binding in a policy * Removing any role binding, with or without a condition, from a policy that includes conditions **Important:** If you use IAM Conditions, you must include the `etag` field whenever you call `setIamPolicy`. If you omit this field, then IAM allows you to overwrite a version `3` policy with a version `1` policy, and all of the conditions in the version `3` policy are lost. If a policy does not include any conditions, operations on that policy may specify any valid version or leave the field unset. To learn which resources support conditions in their IAM policies, see the [IAM documentation](https://cloud.google.com/iam/help/conditions/resource-policies).

func (ApiVersionSpecIamPolicyOutput) VersionId added in v0.21.0 

func (o ApiVersionSpecIamPolicyOutput) VersionId() pulumi.StringOutput

type ApiVersionSpecIamPolicyState 

type ApiVersionSpecIamPolicyState struct {
}

func (ApiVersionSpecIamPolicyState) ElementType 

func (ApiVersionSpecIamPolicyState) ElementType() reflect.Type

type Artifact 

type Artifact struct {
	pulumi.CustomResourceState

	// Annotations attach non-identifying metadata to resources. Annotation keys and values are less restricted than those of labels, but should be generally used for small values of broad interest. Larger, topic- specific metadata should be stored in Artifacts.
	Annotations pulumi.StringMapOutput `pulumi:"annotations"`
	ApiId       pulumi.StringOutput    `pulumi:"apiId"`
	// Required. The ID to use for the artifact, which will become the final component of the artifact's resource name. This value should be 4-63 characters, and valid characters are /a-z-/. Following AIP-162, IDs must not have the form of a UUID.
	ArtifactId pulumi.StringOutput `pulumi:"artifactId"`
	// Input only. The contents of the artifact. Provided by API callers when artifacts are created or replaced. To access the contents of an artifact, use GetArtifactContents.
	Contents pulumi.StringOutput `pulumi:"contents"`
	// Creation timestamp.
	CreateTime pulumi.StringOutput `pulumi:"createTime"`
	// A SHA-256 hash of the artifact's contents. If the artifact is gzipped, this is the hash of the uncompressed artifact.
	Hash pulumi.StringOutput `pulumi:"hash"`
	// Labels attach identifying metadata to resources. Identifying metadata can be used to filter list operations. Label keys and values can be no longer than 64 characters (Unicode codepoints), can only contain lowercase letters, numeric characters, underscores and dashes. International characters are allowed. No more than 64 user labels can be associated with one resource (System labels are excluded). See https://goo.gl/xmQnxf for more information and examples of labels. System reserved label keys are prefixed with "registry.googleapis.com/" and cannot be changed.
	Labels   pulumi.StringMapOutput `pulumi:"labels"`
	Location pulumi.StringOutput    `pulumi:"location"`
	// A content type specifier for the artifact. Content type specifiers are Media Types (https://en.wikipedia.org/wiki/Media_type) with a possible "schema" parameter that specifies a schema for the stored information. Content types can specify compression. Currently only GZip compression is supported (indicated with "+gzip").
	MimeType pulumi.StringOutput `pulumi:"mimeType"`
	// Resource name.
	Name    pulumi.StringOutput `pulumi:"name"`
	Project pulumi.StringOutput `pulumi:"project"`
	// The size of the artifact in bytes. If the artifact is gzipped, this is the size of the uncompressed artifact.
	SizeBytes pulumi.IntOutput    `pulumi:"sizeBytes"`
	SpecId    pulumi.StringOutput `pulumi:"specId"`
	// Last update timestamp.
	UpdateTime pulumi.StringOutput `pulumi:"updateTime"`
	VersionId  pulumi.StringOutput `pulumi:"versionId"`
}

Creates a specified artifact.

func GetArtifact 

func GetArtifact(ctx *pulumi.Context,
	name string, id pulumi.IDInput, state *ArtifactState, opts ...pulumi.ResourceOption) (*Artifact, error)

GetArtifact gets an existing Artifact resource's state with the given name, ID, and optional state properties that are used to uniquely qualify the lookup (nil if not required).

func NewArtifact 

func NewArtifact(ctx *pulumi.Context,
	name string, args *ArtifactArgs, opts ...pulumi.ResourceOption) (*Artifact, error)

NewArtifact registers a new resource with the given unique name, arguments, and options.

func (*Artifact) ElementType 

func (*Artifact) ElementType() reflect.Type

func (*Artifact) ToArtifactOutput 

func (i *Artifact) ToArtifactOutput() ArtifactOutput

func (*Artifact) ToArtifactOutputWithContext 

func (i *Artifact) ToArtifactOutputWithContext(ctx context.Context) ArtifactOutput

type ArtifactArgs 

type ArtifactArgs struct {
	// Annotations attach non-identifying metadata to resources. Annotation keys and values are less restricted than those of labels, but should be generally used for small values of broad interest. Larger, topic- specific metadata should be stored in Artifacts.
	Annotations pulumi.StringMapInput
	ApiId       pulumi.StringInput
	// Required. The ID to use for the artifact, which will become the final component of the artifact's resource name. This value should be 4-63 characters, and valid characters are /a-z-/. Following AIP-162, IDs must not have the form of a UUID.
	ArtifactId pulumi.StringInput
	// Input only. The contents of the artifact. Provided by API callers when artifacts are created or replaced. To access the contents of an artifact, use GetArtifactContents.
	Contents pulumi.StringPtrInput
	// Labels attach identifying metadata to resources. Identifying metadata can be used to filter list operations. Label keys and values can be no longer than 64 characters (Unicode codepoints), can only contain lowercase letters, numeric characters, underscores and dashes. International characters are allowed. No more than 64 user labels can be associated with one resource (System labels are excluded). See https://goo.gl/xmQnxf for more information and examples of labels. System reserved label keys are prefixed with "registry.googleapis.com/" and cannot be changed.
	Labels   pulumi.StringMapInput
	Location pulumi.StringPtrInput
	// A content type specifier for the artifact. Content type specifiers are Media Types (https://en.wikipedia.org/wiki/Media_type) with a possible "schema" parameter that specifies a schema for the stored information. Content types can specify compression. Currently only GZip compression is supported (indicated with "+gzip").
	MimeType pulumi.StringPtrInput
	// Resource name.
	Name      pulumi.StringPtrInput
	Project   pulumi.StringPtrInput
	SpecId    pulumi.StringInput
	VersionId pulumi.StringInput
}

The set of arguments for constructing a Artifact resource.

func (ArtifactArgs) ElementType 

func (ArtifactArgs) ElementType() reflect.Type

type ArtifactIamBinding added in v0.26.0 

type ArtifactIamBinding struct {
	pulumi.CustomResourceState

	// An IAM Condition for a given binding. See https://cloud.google.com/iam/docs/conditions-overview for additional details.
	Condition iam.ConditionPtrOutput `pulumi:"condition"`
	// The etag of the resource's IAM policy.
	Etag pulumi.StringOutput `pulumi:"etag"`
	// Specifies the principals requesting access for a Google Cloud resource. `members` can have the following values: * `allUsers`: A special identifier that represents anyone who is on the internet; with or without a Google account. * `allAuthenticatedUsers`: A special identifier that represents anyone who is authenticated with a Google account or a service account. Does not include identities that come from external identity providers (IdPs) through identity federation. * `user:{emailid}`: An email address that represents a specific Google account. For example, `alice@example.com` . * `serviceAccount:{emailid}`: An email address that represents a Google service account. For example, `my-other-app@appspot.gserviceaccount.com`. * `serviceAccount:{projectid}.svc.id.goog[{namespace}/{kubernetes-sa}]`: An identifier for a [Kubernetes service account](https://cloud.google.com/kubernetes-engine/docs/how-to/kubernetes-service-accounts). For example, `my-project.svc.id.goog[my-namespace/my-kubernetes-sa]`. * `group:{emailid}`: An email address that represents a Google group. For example, `admins@example.com`. * `domain:{domain}`: The G Suite domain (primary) that represents all the users of that domain. For example, `google.com` or `example.com`. * `deleted:user:{emailid}?uid={uniqueid}`: An email address (plus unique identifier) representing a user that has been recently deleted. For example, `alice@example.com?uid=123456789012345678901`. If the user is recovered, this value reverts to `user:{emailid}` and the recovered user retains the role in the binding. * `deleted:serviceAccount:{emailid}?uid={uniqueid}`: An email address (plus unique identifier) representing a service account that has been recently deleted. For example, `my-other-app@appspot.gserviceaccount.com?uid=123456789012345678901`. If the service account is undeleted, this value reverts to `serviceAccount:{emailid}` and the undeleted service account retains the role in the binding. * `deleted:group:{emailid}?uid={uniqueid}`: An email address (plus unique identifier) representing a Google group that has been recently deleted. For example, `admins@example.com?uid=123456789012345678901`. If the group is recovered, this value reverts to `group:{emailid}` and the recovered group retains the role in the binding.
	Members pulumi.StringArrayOutput `pulumi:"members"`
	// The name of the resource to manage IAM policies for.
	Name pulumi.StringOutput `pulumi:"name"`
	// The project in which the resource belongs. If it is not provided, a default will be supplied.
	Project pulumi.StringOutput `pulumi:"project"`
	// Role that is assigned to the list of `members`, or principals. For example, `roles/viewer`, `roles/editor`, or `roles/owner`.
	Role pulumi.StringOutput `pulumi:"role"`
}

Sets the access control policy on the specified resource. Replaces any existing policy. Can return `NOT_FOUND`, `INVALID_ARGUMENT`, and `PERMISSION_DENIED` errors.

func GetArtifactIamBinding added in v0.26.0 

func GetArtifactIamBinding(ctx *pulumi.Context,
	name string, id pulumi.IDInput, state *ArtifactIamBindingState, opts ...pulumi.ResourceOption) (*ArtifactIamBinding, error)

GetArtifactIamBinding gets an existing ArtifactIamBinding resource's state with the given name, ID, and optional state properties that are used to uniquely qualify the lookup (nil if not required).

func NewArtifactIamBinding added in v0.26.0 

func NewArtifactIamBinding(ctx *pulumi.Context,
	name string, args *ArtifactIamBindingArgs, opts ...pulumi.ResourceOption) (*ArtifactIamBinding, error)

NewArtifactIamBinding registers a new resource with the given unique name, arguments, and options.

func (*ArtifactIamBinding) ElementType added in v0.26.0 

func (*ArtifactIamBinding) ElementType() reflect.Type

func (*ArtifactIamBinding) ToArtifactIamBindingOutput added in v0.26.0 

func (i *ArtifactIamBinding) ToArtifactIamBindingOutput() ArtifactIamBindingOutput

func (*ArtifactIamBinding) ToArtifactIamBindingOutputWithContext added in v0.26.0 

func (i *ArtifactIamBinding) ToArtifactIamBindingOutputWithContext(ctx context.Context) ArtifactIamBindingOutput

type ArtifactIamBindingArgs added in v0.26.0 

type ArtifactIamBindingArgs struct {
	// An IAM Condition for a given binding.
	Condition iam.ConditionPtrInput
	// Identities that will be granted the privilege in role. Each entry can have one of the following values:
	//
	//  * user:{emailid}: An email address that represents a specific Google account. For example, alice@gmail.com or joe@example.com.
	//  * serviceAccount:{emailid}: An email address that represents a service account. For example, my-other-app@appspot.gserviceaccount.com.
	//  * group:{emailid}: An email address that represents a Google group. For example, admins@example.com.
	//  * domain:{domain}: A G Suite domain (primary, instead of alias) name that represents all the users of that domain. For example, google.com or example.com.
	Members pulumi.StringArrayInput
	// The name of the resource to manage IAM policies for.
	Name pulumi.StringInput
	// The role that should be applied. Only one `IamBinding` can be used per role.
	Role pulumi.StringInput
}

The set of arguments for constructing a ArtifactIamBinding resource.

func (ArtifactIamBindingArgs) ElementType added in v0.26.0 

func (ArtifactIamBindingArgs) ElementType() reflect.Type

type ArtifactIamBindingInput added in v0.26.0 

type ArtifactIamBindingInput interface {
	pulumi.Input

	ToArtifactIamBindingOutput() ArtifactIamBindingOutput
	ToArtifactIamBindingOutputWithContext(ctx context.Context) ArtifactIamBindingOutput
}

type ArtifactIamBindingOutput added in v0.26.0 

type ArtifactIamBindingOutput struct{ *pulumi.OutputState }

func (ArtifactIamBindingOutput) Condition added in v0.26.0 

func (o ArtifactIamBindingOutput) Condition() iam.ConditionPtrOutput

An IAM Condition for a given binding. See https://cloud.google.com/iam/docs/conditions-overview for additional details.

func (ArtifactIamBindingOutput) ElementType added in v0.26.0 

func (ArtifactIamBindingOutput) ElementType() reflect.Type

func (ArtifactIamBindingOutput) Etag added in v0.26.0 

func (o ArtifactIamBindingOutput) Etag() pulumi.StringOutput

The etag of the resource's IAM policy.

func (ArtifactIamBindingOutput) Members added in v0.26.0 

func (o ArtifactIamBindingOutput) Members() pulumi.StringArrayOutput

Specifies the principals requesting access for a Google Cloud resource. `members` can have the following values: * `allUsers`: A special identifier that represents anyone who is on the internet; with or without a Google account. * `allAuthenticatedUsers`: A special identifier that represents anyone who is authenticated with a Google account or a service account. Does not include identities that come from external identity providers (IdPs) through identity federation. * `user:{emailid}`: An email address that represents a specific Google account. For example, `alice@example.com` . * `serviceAccount:{emailid}`: An email address that represents a Google service account. For example, `my-other-app@appspot.gserviceaccount.com`. * `serviceAccount:{projectid}.svc.id.goog[{namespace}/{kubernetes-sa}]`: An identifier for a [Kubernetes service account](https://cloud.google.com/kubernetes-engine/docs/how-to/kubernetes-service-accounts). For example, `my-project.svc.id.goog[my-namespace/my-kubernetes-sa]`. * `group:{emailid}`: An email address that represents a Google group. For example, `admins@example.com`. * `domain:{domain}`: The G Suite domain (primary) that represents all the users of that domain. For example, `google.com` or `example.com`. * `deleted:user:{emailid}?uid={uniqueid}`: An email address (plus unique identifier) representing a user that has been recently deleted. For example, `alice@example.com?uid=123456789012345678901`. If the user is recovered, this value reverts to `user:{emailid}` and the recovered user retains the role in the binding. * `deleted:serviceAccount:{emailid}?uid={uniqueid}`: An email address (plus unique identifier) representing a service account that has been recently deleted. For example, `my-other-app@appspot.gserviceaccount.com?uid=123456789012345678901`. If the service account is undeleted, this value reverts to `serviceAccount:{emailid}` and the undeleted service account retains the role in the binding. * `deleted:group:{emailid}?uid={uniqueid}`: An email address (plus unique identifier) representing a Google group that has been recently deleted. For example, `admins@example.com?uid=123456789012345678901`. If the group is recovered, this value reverts to `group:{emailid}` and the recovered group retains the role in the binding.

func (ArtifactIamBindingOutput) Name added in v0.26.0 

func (o ArtifactIamBindingOutput) Name() pulumi.StringOutput

The name of the resource to manage IAM policies for.

func (ArtifactIamBindingOutput) Project added in v0.26.0 

func (o ArtifactIamBindingOutput) Project() pulumi.StringOutput

The project in which the resource belongs. If it is not provided, a default will be supplied.

func (ArtifactIamBindingOutput) Role added in v0.26.0 

func (o ArtifactIamBindingOutput) Role() pulumi.StringOutput

Role that is assigned to the list of `members`, or principals. For example, `roles/viewer`, `roles/editor`, or `roles/owner`.

func (ArtifactIamBindingOutput) ToArtifactIamBindingOutput added in v0.26.0 

func (o ArtifactIamBindingOutput) ToArtifactIamBindingOutput() ArtifactIamBindingOutput

func (ArtifactIamBindingOutput) ToArtifactIamBindingOutputWithContext added in v0.26.0 

func (o ArtifactIamBindingOutput) ToArtifactIamBindingOutputWithContext(ctx context.Context) ArtifactIamBindingOutput

type ArtifactIamBindingState added in v0.26.0 

type ArtifactIamBindingState struct {
}

func (ArtifactIamBindingState) ElementType added in v0.26.0 

func (ArtifactIamBindingState) ElementType() reflect.Type

type ArtifactIamMember added in v0.26.0 

type ArtifactIamMember struct {
	pulumi.CustomResourceState

	// An IAM Condition for a given binding. See https://cloud.google.com/iam/docs/conditions-overview for additional details.
	Condition iam.ConditionPtrOutput `pulumi:"condition"`
	// The etag of the resource's IAM policy.
	Etag pulumi.StringOutput `pulumi:"etag"`
	// Specifies the principals requesting access for a Google Cloud resource. `members` can have the following values: * `allUsers`: A special identifier that represents anyone who is on the internet; with or without a Google account. * `allAuthenticatedUsers`: A special identifier that represents anyone who is authenticated with a Google account or a service account. Does not include identities that come from external identity providers (IdPs) through identity federation. * `user:{emailid}`: An email address that represents a specific Google account. For example, `alice@example.com` . * `serviceAccount:{emailid}`: An email address that represents a Google service account. For example, `my-other-app@appspot.gserviceaccount.com`. * `serviceAccount:{projectid}.svc.id.goog[{namespace}/{kubernetes-sa}]`: An identifier for a [Kubernetes service account](https://cloud.google.com/kubernetes-engine/docs/how-to/kubernetes-service-accounts). For example, `my-project.svc.id.goog[my-namespace/my-kubernetes-sa]`. * `group:{emailid}`: An email address that represents a Google group. For example, `admins@example.com`. * `domain:{domain}`: The G Suite domain (primary) that represents all the users of that domain. For example, `google.com` or `example.com`. * `deleted:user:{emailid}?uid={uniqueid}`: An email address (plus unique identifier) representing a user that has been recently deleted. For example, `alice@example.com?uid=123456789012345678901`. If the user is recovered, this value reverts to `user:{emailid}` and the recovered user retains the role in the binding. * `deleted:serviceAccount:{emailid}?uid={uniqueid}`: An email address (plus unique identifier) representing a service account that has been recently deleted. For example, `my-other-app@appspot.gserviceaccount.com?uid=123456789012345678901`. If the service account is undeleted, this value reverts to `serviceAccount:{emailid}` and the undeleted service account retains the role in the binding. * `deleted:group:{emailid}?uid={uniqueid}`: An email address (plus unique identifier) representing a Google group that has been recently deleted. For example, `admins@example.com?uid=123456789012345678901`. If the group is recovered, this value reverts to `group:{emailid}` and the recovered group retains the role in the binding.
	Member pulumi.StringOutput `pulumi:"member"`
	// The name of the resource to manage IAM policies for.
	Name pulumi.StringOutput `pulumi:"name"`
	// The project in which the resource belongs. If it is not provided, a default will be supplied.
	Project pulumi.StringOutput `pulumi:"project"`
	// Role that is assigned to the list of `members`, or principals. For example, `roles/viewer`, `roles/editor`, or `roles/owner`.
	Role pulumi.StringOutput `pulumi:"role"`
}

Sets the access control policy on the specified resource. Replaces any existing policy. Can return `NOT_FOUND`, `INVALID_ARGUMENT`, and `PERMISSION_DENIED` errors.

func GetArtifactIamMember added in v0.26.0 

func GetArtifactIamMember(ctx *pulumi.Context,
	name string, id pulumi.IDInput, state *ArtifactIamMemberState, opts ...pulumi.ResourceOption) (*ArtifactIamMember, error)

GetArtifactIamMember gets an existing ArtifactIamMember resource's state with the given name, ID, and optional state properties that are used to uniquely qualify the lookup (nil if not required).

func NewArtifactIamMember added in v0.26.0 

func NewArtifactIamMember(ctx *pulumi.Context,
	name string, args *ArtifactIamMemberArgs, opts ...pulumi.ResourceOption) (*ArtifactIamMember, error)

NewArtifactIamMember registers a new resource with the given unique name, arguments, and options.

func (*ArtifactIamMember) ElementType added in v0.26.0 

func (*ArtifactIamMember) ElementType() reflect.Type

func (*ArtifactIamMember) ToArtifactIamMemberOutput added in v0.26.0 

func (i *ArtifactIamMember) ToArtifactIamMemberOutput() ArtifactIamMemberOutput

func (*ArtifactIamMember) ToArtifactIamMemberOutputWithContext added in v0.26.0 

func (i *ArtifactIamMember) ToArtifactIamMemberOutputWithContext(ctx context.Context) ArtifactIamMemberOutput

type ArtifactIamMemberArgs added in v0.26.0 

type ArtifactIamMemberArgs struct {
	// An IAM Condition for a given binding.
	Condition iam.ConditionPtrInput
	// Identity that will be granted the privilege in role. The entry can have one of the following values:
	//
	//  * user:{emailid}: An email address that represents a specific Google account. For example, alice@gmail.com or joe@example.com.
	//  * serviceAccount:{emailid}: An email address that represents a service account. For example, my-other-app@appspot.gserviceaccount.com.
	//  * group:{emailid}: An email address that represents a Google group. For example, admins@example.com.
	//  * domain:{domain}: A G Suite domain (primary, instead of alias) name that represents all the users of that domain. For example, google.com or example.com.
	Member pulumi.StringInput
	// The name of the resource to manage IAM policies for.
	Name pulumi.StringInput
	// The role that should be applied.
	Role pulumi.StringInput
}

The set of arguments for constructing a ArtifactIamMember resource.

func (ArtifactIamMemberArgs) ElementType added in v0.26.0 

func (ArtifactIamMemberArgs) ElementType() reflect.Type

type ArtifactIamMemberInput added in v0.26.0 

type ArtifactIamMemberInput interface {
	pulumi.Input

	ToArtifactIamMemberOutput() ArtifactIamMemberOutput
	ToArtifactIamMemberOutputWithContext(ctx context.Context) ArtifactIamMemberOutput
}

type ArtifactIamMemberOutput added in v0.26.0 

type ArtifactIamMemberOutput struct{ *pulumi.OutputState }

func (ArtifactIamMemberOutput) Condition added in v0.26.0 

func (o ArtifactIamMemberOutput) Condition() iam.ConditionPtrOutput

An IAM Condition for a given binding. See https://cloud.google.com/iam/docs/conditions-overview for additional details.

func (ArtifactIamMemberOutput) ElementType added in v0.26.0 

func (ArtifactIamMemberOutput) ElementType() reflect.Type

func (ArtifactIamMemberOutput) Etag added in v0.26.0 

func (o ArtifactIamMemberOutput) Etag() pulumi.StringOutput

The etag of the resource's IAM policy.

func (ArtifactIamMemberOutput) Member added in v0.26.0 

func (o ArtifactIamMemberOutput) Member() pulumi.StringOutput

Specifies the principals requesting access for a Google Cloud resource. `members` can have the following values: * `allUsers`: A special identifier that represents anyone who is on the internet; with or without a Google account. * `allAuthenticatedUsers`: A special identifier that represents anyone who is authenticated with a Google account or a service account. Does not include identities that come from external identity providers (IdPs) through identity federation. * `user:{emailid}`: An email address that represents a specific Google account. For example, `alice@example.com` . * `serviceAccount:{emailid}`: An email address that represents a Google service account. For example, `my-other-app@appspot.gserviceaccount.com`. * `serviceAccount:{projectid}.svc.id.goog[{namespace}/{kubernetes-sa}]`: An identifier for a [Kubernetes service account](https://cloud.google.com/kubernetes-engine/docs/how-to/kubernetes-service-accounts). For example, `my-project.svc.id.goog[my-namespace/my-kubernetes-sa]`. * `group:{emailid}`: An email address that represents a Google group. For example, `admins@example.com`. * `domain:{domain}`: The G Suite domain (primary) that represents all the users of that domain. For example, `google.com` or `example.com`. * `deleted:user:{emailid}?uid={uniqueid}`: An email address (plus unique identifier) representing a user that has been recently deleted. For example, `alice@example.com?uid=123456789012345678901`. If the user is recovered, this value reverts to `user:{emailid}` and the recovered user retains the role in the binding. * `deleted:serviceAccount:{emailid}?uid={uniqueid}`: An email address (plus unique identifier) representing a service account that has been recently deleted. For example, `my-other-app@appspot.gserviceaccount.com?uid=123456789012345678901`. If the service account is undeleted, this value reverts to `serviceAccount:{emailid}` and the undeleted service account retains the role in the binding. * `deleted:group:{emailid}?uid={uniqueid}`: An email address (plus unique identifier) representing a Google group that has been recently deleted. For example, `admins@example.com?uid=123456789012345678901`. If the group is recovered, this value reverts to `group:{emailid}` and the recovered group retains the role in the binding.

func (ArtifactIamMemberOutput) Name added in v0.26.0 

func (o ArtifactIamMemberOutput) Name() pulumi.StringOutput

The name of the resource to manage IAM policies for.

func (ArtifactIamMemberOutput) Project added in v0.26.0 

func (o ArtifactIamMemberOutput) Project() pulumi.StringOutput

The project in which the resource belongs. If it is not provided, a default will be supplied.

func (ArtifactIamMemberOutput) Role added in v0.26.0 

func (o ArtifactIamMemberOutput) Role() pulumi.StringOutput

Role that is assigned to the list of `members`, or principals. For example, `roles/viewer`, `roles/editor`, or `roles/owner`.

func (ArtifactIamMemberOutput) ToArtifactIamMemberOutput added in v0.26.0 

func (o ArtifactIamMemberOutput) ToArtifactIamMemberOutput() ArtifactIamMemberOutput

func (ArtifactIamMemberOutput) ToArtifactIamMemberOutputWithContext added in v0.26.0 

func (o ArtifactIamMemberOutput) ToArtifactIamMemberOutputWithContext(ctx context.Context) ArtifactIamMemberOutput

type ArtifactIamMemberState added in v0.26.0 

type ArtifactIamMemberState struct {
}

func (ArtifactIamMemberState) ElementType added in v0.26.0 

func (ArtifactIamMemberState) ElementType() reflect.Type

type ArtifactIamPolicy 

type ArtifactIamPolicy struct {
	pulumi.CustomResourceState

	ArtifactId pulumi.StringOutput `pulumi:"artifactId"`
	// Associates a list of `members`, or principals, with a `role`. Optionally, may specify a `condition` that determines how and when the `bindings` are applied. Each of the `bindings` must contain at least one principal. The `bindings` in a `Policy` can refer to up to 1,500 principals; up to 250 of these principals can be Google groups. Each occurrence of a principal counts towards these limits. For example, if the `bindings` grant 50 different roles to `user:alice@example.com`, and not to any other principal, then you can add another 1,450 principals to the `bindings` in the `Policy`.
	Bindings BindingResponseArrayOutput `pulumi:"bindings"`
	// `etag` is used for optimistic concurrency control as a way to help prevent simultaneous updates of a policy from overwriting each other. It is strongly suggested that systems make use of the `etag` in the read-modify-write cycle to perform policy updates in order to avoid race conditions: An `etag` is returned in the response to `getIamPolicy`, and systems are expected to put that etag in the request to `setIamPolicy` to ensure that their change will be applied to the same version of the policy. **Important:** If you use IAM Conditions, you must include the `etag` field whenever you call `setIamPolicy`. If you omit this field, then IAM allows you to overwrite a version `3` policy with a version `1` policy, and all of the conditions in the version `3` policy are lost.
	Etag     pulumi.StringOutput `pulumi:"etag"`
	Location pulumi.StringOutput `pulumi:"location"`
	Project  pulumi.StringOutput `pulumi:"project"`
	// Specifies the format of the policy. Valid values are `0`, `1`, and `3`. Requests that specify an invalid value are rejected. Any operation that affects conditional role bindings must specify version `3`. This requirement applies to the following operations: * Getting a policy that includes a conditional role binding * Adding a conditional role binding to a policy * Changing a conditional role binding in a policy * Removing any role binding, with or without a condition, from a policy that includes conditions **Important:** If you use IAM Conditions, you must include the `etag` field whenever you call `setIamPolicy`. If you omit this field, then IAM allows you to overwrite a version `3` policy with a version `1` policy, and all of the conditions in the version `3` policy are lost. If a policy does not include any conditions, operations on that policy may specify any valid version or leave the field unset. To learn which resources support conditions in their IAM policies, see the [IAM documentation](https://cloud.google.com/iam/help/conditions/resource-policies).
	Version pulumi.IntOutput `pulumi:"version"`
}

Sets the access control policy on the specified resource. Replaces any existing policy. Can return `NOT_FOUND`, `INVALID_ARGUMENT`, and `PERMISSION_DENIED` errors. Note - this resource's API doesn't support deletion. When deleted, the resource will persist on Google Cloud even though it will be deleted from Pulumi state.

func GetArtifactIamPolicy 

func GetArtifactIamPolicy(ctx *pulumi.Context,
	name string, id pulumi.IDInput, state *ArtifactIamPolicyState, opts ...pulumi.ResourceOption) (*ArtifactIamPolicy, error)

GetArtifactIamPolicy gets an existing ArtifactIamPolicy resource's state with the given name, ID, and optional state properties that are used to uniquely qualify the lookup (nil if not required).

func NewArtifactIamPolicy 

func NewArtifactIamPolicy(ctx *pulumi.Context,
	name string, args *ArtifactIamPolicyArgs, opts ...pulumi.ResourceOption) (*ArtifactIamPolicy, error)

NewArtifactIamPolicy registers a new resource with the given unique name, arguments, and options.

func (*ArtifactIamPolicy) ElementType 

func (*ArtifactIamPolicy) ElementType() reflect.Type

func (*ArtifactIamPolicy) ToArtifactIamPolicyOutput 

func (i *ArtifactIamPolicy) ToArtifactIamPolicyOutput() ArtifactIamPolicyOutput

func (*ArtifactIamPolicy) ToArtifactIamPolicyOutputWithContext 

func (i *ArtifactIamPolicy) ToArtifactIamPolicyOutputWithContext(ctx context.Context) ArtifactIamPolicyOutput

type ArtifactIamPolicyArgs 

type ArtifactIamPolicyArgs struct {
	ArtifactId pulumi.StringInput
	// Associates a list of `members`, or principals, with a `role`. Optionally, may specify a `condition` that determines how and when the `bindings` are applied. Each of the `bindings` must contain at least one principal. The `bindings` in a `Policy` can refer to up to 1,500 principals; up to 250 of these principals can be Google groups. Each occurrence of a principal counts towards these limits. For example, if the `bindings` grant 50 different roles to `user:alice@example.com`, and not to any other principal, then you can add another 1,450 principals to the `bindings` in the `Policy`.
	Bindings BindingArrayInput
	// `etag` is used for optimistic concurrency control as a way to help prevent simultaneous updates of a policy from overwriting each other. It is strongly suggested that systems make use of the `etag` in the read-modify-write cycle to perform policy updates in order to avoid race conditions: An `etag` is returned in the response to `getIamPolicy`, and systems are expected to put that etag in the request to `setIamPolicy` to ensure that their change will be applied to the same version of the policy. **Important:** If you use IAM Conditions, you must include the `etag` field whenever you call `setIamPolicy`. If you omit this field, then IAM allows you to overwrite a version `3` policy with a version `1` policy, and all of the conditions in the version `3` policy are lost.
	Etag     pulumi.StringPtrInput
	Location pulumi.StringPtrInput
	Project  pulumi.StringPtrInput
	// Specifies the format of the policy. Valid values are `0`, `1`, and `3`. Requests that specify an invalid value are rejected. Any operation that affects conditional role bindings must specify version `3`. This requirement applies to the following operations: * Getting a policy that includes a conditional role binding * Adding a conditional role binding to a policy * Changing a conditional role binding in a policy * Removing any role binding, with or without a condition, from a policy that includes conditions **Important:** If you use IAM Conditions, you must include the `etag` field whenever you call `setIamPolicy`. If you omit this field, then IAM allows you to overwrite a version `3` policy with a version `1` policy, and all of the conditions in the version `3` policy are lost. If a policy does not include any conditions, operations on that policy may specify any valid version or leave the field unset. To learn which resources support conditions in their IAM policies, see the [IAM documentation](https://cloud.google.com/iam/help/conditions/resource-policies).
	Version pulumi.IntPtrInput
}

The set of arguments for constructing a ArtifactIamPolicy resource.

func (ArtifactIamPolicyArgs) ElementType 

func (ArtifactIamPolicyArgs) ElementType() reflect.Type

type ArtifactIamPolicyInput 

type ArtifactIamPolicyInput interface {
	pulumi.Input

	ToArtifactIamPolicyOutput() ArtifactIamPolicyOutput
	ToArtifactIamPolicyOutputWithContext(ctx context.Context) ArtifactIamPolicyOutput
}

type ArtifactIamPolicyOutput 

type ArtifactIamPolicyOutput struct{ *pulumi.OutputState }

func (ArtifactIamPolicyOutput) ArtifactId added in v0.21.0 

func (o ArtifactIamPolicyOutput) ArtifactId() pulumi.StringOutput

func (ArtifactIamPolicyOutput) Bindings 

func (o ArtifactIamPolicyOutput) Bindings() BindingResponseArrayOutput

Associates a list of `members`, or principals, with a `role`. Optionally, may specify a `condition` that determines how and when the `bindings` are applied. Each of the `bindings` must contain at least one principal. The `bindings` in a `Policy` can refer to up to 1,500 principals; up to 250 of these principals can be Google groups. Each occurrence of a principal counts towards these limits. For example, if the `bindings` grant 50 different roles to `user:alice@example.com`, and not to any other principal, then you can add another 1,450 principals to the `bindings` in the `Policy`.

func (ArtifactIamPolicyOutput) ElementType 

func (ArtifactIamPolicyOutput) ElementType() reflect.Type

func (ArtifactIamPolicyOutput) Etag 

func (o ArtifactIamPolicyOutput) Etag() pulumi.StringOutput

`etag` is used for optimistic concurrency control as a way to help prevent simultaneous updates of a policy from overwriting each other. It is strongly suggested that systems make use of the `etag` in the read-modify-write cycle to perform policy updates in order to avoid race conditions: An `etag` is returned in the response to `getIamPolicy`, and systems are expected to put that etag in the request to `setIamPolicy` to ensure that their change will be applied to the same version of the policy. **Important:** If you use IAM Conditions, you must include the `etag` field whenever you call `setIamPolicy`. If you omit this field, then IAM allows you to overwrite a version `3` policy with a version `1` policy, and all of the conditions in the version `3` policy are lost.

func (ArtifactIamPolicyOutput) Location added in v0.21.0 

func (o ArtifactIamPolicyOutput) Location() pulumi.StringOutput

func (ArtifactIamPolicyOutput) Project added in v0.21.0 

func (o ArtifactIamPolicyOutput) Project() pulumi.StringOutput

func (ArtifactIamPolicyOutput) ToArtifactIamPolicyOutput 

func (o ArtifactIamPolicyOutput) ToArtifactIamPolicyOutput() ArtifactIamPolicyOutput

func (ArtifactIamPolicyOutput) ToArtifactIamPolicyOutputWithContext 

func (o ArtifactIamPolicyOutput) ToArtifactIamPolicyOutputWithContext(ctx context.Context) ArtifactIamPolicyOutput

func (ArtifactIamPolicyOutput) Version 

func (o ArtifactIamPolicyOutput) Version() pulumi.IntOutput

Specifies the format of the policy. Valid values are `0`, `1`, and `3`. Requests that specify an invalid value are rejected. Any operation that affects conditional role bindings must specify version `3`. This requirement applies to the following operations: * Getting a policy that includes a conditional role binding * Adding a conditional role binding to a policy * Changing a conditional role binding in a policy * Removing any role binding, with or without a condition, from a policy that includes conditions **Important:** If you use IAM Conditions, you must include the `etag` field whenever you call `setIamPolicy`. If you omit this field, then IAM allows you to overwrite a version `3` policy with a version `1` policy, and all of the conditions in the version `3` policy are lost. If a policy does not include any conditions, operations on that policy may specify any valid version or leave the field unset. To learn which resources support conditions in their IAM policies, see the [IAM documentation](https://cloud.google.com/iam/help/conditions/resource-policies).

type ArtifactIamPolicyState 

type ArtifactIamPolicyState struct {
}

func (ArtifactIamPolicyState) ElementType 

func (ArtifactIamPolicyState) ElementType() reflect.Type

type ArtifactInput 

type ArtifactInput interface {
	pulumi.Input

	ToArtifactOutput() ArtifactOutput
	ToArtifactOutputWithContext(ctx context.Context) ArtifactOutput
}

type ArtifactOutput 

type ArtifactOutput struct{ *pulumi.OutputState }

func (ArtifactOutput) Annotations added in v0.28.0 

func (o ArtifactOutput) Annotations() pulumi.StringMapOutput

Annotations attach non-identifying metadata to resources. Annotation keys and values are less restricted than those of labels, but should be generally used for small values of broad interest. Larger, topic- specific metadata should be stored in Artifacts.

func (ArtifactOutput) ApiId added in v0.21.0 

func (o ArtifactOutput) ApiId() pulumi.StringOutput

func (ArtifactOutput) ArtifactId added in v0.21.0 

func (o ArtifactOutput) ArtifactId() pulumi.StringOutput

Required. The ID to use for the artifact, which will become the final component of the artifact's resource name. This value should be 4-63 characters, and valid characters are /a-z-/. Following AIP-162, IDs must not have the form of a UUID.

func (ArtifactOutput) Contents 

func (o ArtifactOutput) Contents() pulumi.StringOutput

Input only. The contents of the artifact. Provided by API callers when artifacts are created or replaced. To access the contents of an artifact, use GetArtifactContents.

func (ArtifactOutput) CreateTime 

func (o ArtifactOutput) CreateTime() pulumi.StringOutput

Creation timestamp.

func (ArtifactOutput) ElementType 

func (ArtifactOutput) ElementType() reflect.Type

func (ArtifactOutput) Hash 

func (o ArtifactOutput) Hash() pulumi.StringOutput

A SHA-256 hash of the artifact's contents. If the artifact is gzipped, this is the hash of the uncompressed artifact.

func (ArtifactOutput) Labels added in v0.28.0 

func (o ArtifactOutput) Labels() pulumi.StringMapOutput

Labels attach identifying metadata to resources. Identifying metadata can be used to filter list operations. Label keys and values can be no longer than 64 characters (Unicode codepoints), can only contain lowercase letters, numeric characters, underscores and dashes. International characters are allowed. No more than 64 user labels can be associated with one resource (System labels are excluded). See https://goo.gl/xmQnxf for more information and examples of labels. System reserved label keys are prefixed with "registry.googleapis.com/" and cannot be changed.

func (ArtifactOutput) Location added in v0.21.0 

func (o ArtifactOutput) Location() pulumi.StringOutput

func (ArtifactOutput) MimeType 

func (o ArtifactOutput) MimeType() pulumi.StringOutput

A content type specifier for the artifact. Content type specifiers are Media Types (https://en.wikipedia.org/wiki/Media_type) with a possible "schema" parameter that specifies a schema for the stored information. Content types can specify compression. Currently only GZip compression is supported (indicated with "+gzip").

func (ArtifactOutput) Name 

func (o ArtifactOutput) Name() pulumi.StringOutput

Resource name.

func (ArtifactOutput) Project added in v0.21.0 

func (o ArtifactOutput) Project() pulumi.StringOutput

func (ArtifactOutput) SizeBytes 

func (o ArtifactOutput) SizeBytes() pulumi.IntOutput

The size of the artifact in bytes. If the artifact is gzipped, this is the size of the uncompressed artifact.

func (ArtifactOutput) SpecId added in v0.21.0 

func (o ArtifactOutput) SpecId() pulumi.StringOutput

func (ArtifactOutput) ToArtifactOutput 

func (o ArtifactOutput) ToArtifactOutput() ArtifactOutput

func (ArtifactOutput) ToArtifactOutputWithContext 

func (o ArtifactOutput) ToArtifactOutputWithContext(ctx context.Context) ArtifactOutput

func (ArtifactOutput) UpdateTime 

func (o ArtifactOutput) UpdateTime() pulumi.StringOutput

Last update timestamp.

func (ArtifactOutput) VersionId added in v0.21.0 

func (o ArtifactOutput) VersionId() pulumi.StringOutput

type ArtifactState 

type ArtifactState struct {
}

func (ArtifactState) ElementType 

func (ArtifactState) ElementType() reflect.Type

type Binding 

type Binding struct {
	// The condition that is associated with this binding. If the condition evaluates to `true`, then this binding applies to the current request. If the condition evaluates to `false`, then this binding does not apply to the current request. However, a different role binding might grant the same role to one or more of the principals in this binding. To learn which resources support conditions in their IAM policies, see the [IAM documentation](https://cloud.google.com/iam/help/conditions/resource-policies).
	Condition *Expr `pulumi:"condition"`
	// Specifies the principals requesting access for a Google Cloud resource. `members` can have the following values: * `allUsers`: A special identifier that represents anyone who is on the internet; with or without a Google account. * `allAuthenticatedUsers`: A special identifier that represents anyone who is authenticated with a Google account or a service account. Does not include identities that come from external identity providers (IdPs) through identity federation. * `user:{emailid}`: An email address that represents a specific Google account. For example, `alice@example.com` . * `serviceAccount:{emailid}`: An email address that represents a Google service account. For example, `my-other-app@appspot.gserviceaccount.com`. * `serviceAccount:{projectid}.svc.id.goog[{namespace}/{kubernetes-sa}]`: An identifier for a [Kubernetes service account](https://cloud.google.com/kubernetes-engine/docs/how-to/kubernetes-service-accounts). For example, `my-project.svc.id.goog[my-namespace/my-kubernetes-sa]`. * `group:{emailid}`: An email address that represents a Google group. For example, `admins@example.com`. * `domain:{domain}`: The G Suite domain (primary) that represents all the users of that domain. For example, `google.com` or `example.com`. * `deleted:user:{emailid}?uid={uniqueid}`: An email address (plus unique identifier) representing a user that has been recently deleted. For example, `alice@example.com?uid=123456789012345678901`. If the user is recovered, this value reverts to `user:{emailid}` and the recovered user retains the role in the binding. * `deleted:serviceAccount:{emailid}?uid={uniqueid}`: An email address (plus unique identifier) representing a service account that has been recently deleted. For example, `my-other-app@appspot.gserviceaccount.com?uid=123456789012345678901`. If the service account is undeleted, this value reverts to `serviceAccount:{emailid}` and the undeleted service account retains the role in the binding. * `deleted:group:{emailid}?uid={uniqueid}`: An email address (plus unique identifier) representing a Google group that has been recently deleted. For example, `admins@example.com?uid=123456789012345678901`. If the group is recovered, this value reverts to `group:{emailid}` and the recovered group retains the role in the binding.
	Members []string `pulumi:"members"`
	// Role that is assigned to the list of `members`, or principals. For example, `roles/viewer`, `roles/editor`, or `roles/owner`.
	Role *string `pulumi:"role"`
}

Associates `members`, or principals, with a `role`.

type BindingArgs 

type BindingArgs struct {
	// The condition that is associated with this binding. If the condition evaluates to `true`, then this binding applies to the current request. If the condition evaluates to `false`, then this binding does not apply to the current request. However, a different role binding might grant the same role to one or more of the principals in this binding. To learn which resources support conditions in their IAM policies, see the [IAM documentation](https://cloud.google.com/iam/help/conditions/resource-policies).
	Condition ExprPtrInput `pulumi:"condition"`
	// Specifies the principals requesting access for a Google Cloud resource. `members` can have the following values: * `allUsers`: A special identifier that represents anyone who is on the internet; with or without a Google account. * `allAuthenticatedUsers`: A special identifier that represents anyone who is authenticated with a Google account or a service account. Does not include identities that come from external identity providers (IdPs) through identity federation. * `user:{emailid}`: An email address that represents a specific Google account. For example, `alice@example.com` . * `serviceAccount:{emailid}`: An email address that represents a Google service account. For example, `my-other-app@appspot.gserviceaccount.com`. * `serviceAccount:{projectid}.svc.id.goog[{namespace}/{kubernetes-sa}]`: An identifier for a [Kubernetes service account](https://cloud.google.com/kubernetes-engine/docs/how-to/kubernetes-service-accounts). For example, `my-project.svc.id.goog[my-namespace/my-kubernetes-sa]`. * `group:{emailid}`: An email address that represents a Google group. For example, `admins@example.com`. * `domain:{domain}`: The G Suite domain (primary) that represents all the users of that domain. For example, `google.com` or `example.com`. * `deleted:user:{emailid}?uid={uniqueid}`: An email address (plus unique identifier) representing a user that has been recently deleted. For example, `alice@example.com?uid=123456789012345678901`. If the user is recovered, this value reverts to `user:{emailid}` and the recovered user retains the role in the binding. * `deleted:serviceAccount:{emailid}?uid={uniqueid}`: An email address (plus unique identifier) representing a service account that has been recently deleted. For example, `my-other-app@appspot.gserviceaccount.com?uid=123456789012345678901`. If the service account is undeleted, this value reverts to `serviceAccount:{emailid}` and the undeleted service account retains the role in the binding. * `deleted:group:{emailid}?uid={uniqueid}`: An email address (plus unique identifier) representing a Google group that has been recently deleted. For example, `admins@example.com?uid=123456789012345678901`. If the group is recovered, this value reverts to `group:{emailid}` and the recovered group retains the role in the binding.
	Members pulumi.StringArrayInput `pulumi:"members"`
	// Role that is assigned to the list of `members`, or principals. For example, `roles/viewer`, `roles/editor`, or `roles/owner`.
	Role pulumi.StringPtrInput `pulumi:"role"`
}

Associates `members`, or principals, with a `role`.

func (BindingArgs) ElementType 

func (BindingArgs) ElementType() reflect.Type

func (BindingArgs) ToBindingOutput 

func (i BindingArgs) ToBindingOutput() BindingOutput

func (BindingArgs) ToBindingOutputWithContext 

func (i BindingArgs) ToBindingOutputWithContext(ctx context.Context) BindingOutput

type BindingArray 

type BindingArray []BindingInput

func (BindingArray) ElementType 

func (BindingArray) ElementType() reflect.Type

func (BindingArray) ToBindingArrayOutput 

func (i BindingArray) ToBindingArrayOutput() BindingArrayOutput

func (BindingArray) ToBindingArrayOutputWithContext 

func (i BindingArray) ToBindingArrayOutputWithContext(ctx context.Context) BindingArrayOutput

type BindingArrayInput 

type BindingArrayInput interface {
	pulumi.Input

	ToBindingArrayOutput() BindingArrayOutput
	ToBindingArrayOutputWithContext(context.Context) BindingArrayOutput
}

BindingArrayInput is an input type that accepts BindingArray and BindingArrayOutput values. You can construct a concrete instance of `BindingArrayInput` via: 

BindingArray{ BindingArgs{...} }

type BindingArrayOutput 

type BindingArrayOutput struct{ *pulumi.OutputState }

func (BindingArrayOutput) ElementType 

func (BindingArrayOutput) ElementType() reflect.Type

func (BindingArrayOutput) Index 

func (o BindingArrayOutput) Index(i pulumi.IntInput) BindingOutput

func (BindingArrayOutput) ToBindingArrayOutput 

func (o BindingArrayOutput) ToBindingArrayOutput() BindingArrayOutput

func (BindingArrayOutput) ToBindingArrayOutputWithContext 

func (o BindingArrayOutput) ToBindingArrayOutputWithContext(ctx context.Context) BindingArrayOutput

type BindingInput 

type BindingInput interface {
	pulumi.Input

	ToBindingOutput() BindingOutput
	ToBindingOutputWithContext(context.Context) BindingOutput
}

BindingInput is an input type that accepts BindingArgs and BindingOutput values. You can construct a concrete instance of `BindingInput` via: 

BindingArgs{...}

type BindingOutput 

type BindingOutput struct{ *pulumi.OutputState }

Associates `members`, or principals, with a `role`.

func (BindingOutput) Condition 

func (o BindingOutput) Condition() ExprPtrOutput

The condition that is associated with this binding. If the condition evaluates to `true`, then this binding applies to the current request. If the condition evaluates to `false`, then this binding does not apply to the current request. However, a different role binding might grant the same role to one or more of the principals in this binding. To learn which resources support conditions in their IAM policies, see the [IAM documentation](https://cloud.google.com/iam/help/conditions/resource-policies).

func (BindingOutput) ElementType 

func (BindingOutput) ElementType() reflect.Type

func (BindingOutput) Members 

func (o BindingOutput) Members() pulumi.StringArrayOutput

Specifies the principals requesting access for a Google Cloud resource. `members` can have the following values: * `allUsers`: A special identifier that represents anyone who is on the internet; with or without a Google account. * `allAuthenticatedUsers`: A special identifier that represents anyone who is authenticated with a Google account or a service account. Does not include identities that come from external identity providers (IdPs) through identity federation. * `user:{emailid}`: An email address that represents a specific Google account. For example, `alice@example.com` . * `serviceAccount:{emailid}`: An email address that represents a Google service account. For example, `my-other-app@appspot.gserviceaccount.com`. * `serviceAccount:{projectid}.svc.id.goog[{namespace}/{kubernetes-sa}]`: An identifier for a [Kubernetes service account](https://cloud.google.com/kubernetes-engine/docs/how-to/kubernetes-service-accounts). For example, `my-project.svc.id.goog[my-namespace/my-kubernetes-sa]`. * `group:{emailid}`: An email address that represents a Google group. For example, `admins@example.com`. * `domain:{domain}`: The G Suite domain (primary) that represents all the users of that domain. For example, `google.com` or `example.com`. * `deleted:user:{emailid}?uid={uniqueid}`: An email address (plus unique identifier) representing a user that has been recently deleted. For example, `alice@example.com?uid=123456789012345678901`. If the user is recovered, this value reverts to `user:{emailid}` and the recovered user retains the role in the binding. * `deleted:serviceAccount:{emailid}?uid={uniqueid}`: An email address (plus unique identifier) representing a service account that has been recently deleted. For example, `my-other-app@appspot.gserviceaccount.com?uid=123456789012345678901`. If the service account is undeleted, this value reverts to `serviceAccount:{emailid}` and the undeleted service account retains the role in the binding. * `deleted:group:{emailid}?uid={uniqueid}`: An email address (plus unique identifier) representing a Google group that has been recently deleted. For example, `admins@example.com?uid=123456789012345678901`. If the group is recovered, this value reverts to `group:{emailid}` and the recovered group retains the role in the binding.

func (BindingOutput) Role 

func (o BindingOutput) Role() pulumi.StringPtrOutput

Role that is assigned to the list of `members`, or principals. For example, `roles/viewer`, `roles/editor`, or `roles/owner`.

func (BindingOutput) ToBindingOutput 

func (o BindingOutput) ToBindingOutput() BindingOutput

func (BindingOutput) ToBindingOutputWithContext 

func (o BindingOutput) ToBindingOutputWithContext(ctx context.Context) BindingOutput

type BindingResponse 

type BindingResponse struct {
	// The condition that is associated with this binding. If the condition evaluates to `true`, then this binding applies to the current request. If the condition evaluates to `false`, then this binding does not apply to the current request. However, a different role binding might grant the same role to one or more of the principals in this binding. To learn which resources support conditions in their IAM policies, see the [IAM documentation](https://cloud.google.com/iam/help/conditions/resource-policies).
	Condition ExprResponse `pulumi:"condition"`
	// Specifies the principals requesting access for a Google Cloud resource. `members` can have the following values: * `allUsers`: A special identifier that represents anyone who is on the internet; with or without a Google account. * `allAuthenticatedUsers`: A special identifier that represents anyone who is authenticated with a Google account or a service account. Does not include identities that come from external identity providers (IdPs) through identity federation. * `user:{emailid}`: An email address that represents a specific Google account. For example, `alice@example.com` . * `serviceAccount:{emailid}`: An email address that represents a Google service account. For example, `my-other-app@appspot.gserviceaccount.com`. * `serviceAccount:{projectid}.svc.id.goog[{namespace}/{kubernetes-sa}]`: An identifier for a [Kubernetes service account](https://cloud.google.com/kubernetes-engine/docs/how-to/kubernetes-service-accounts). For example, `my-project.svc.id.goog[my-namespace/my-kubernetes-sa]`. * `group:{emailid}`: An email address that represents a Google group. For example, `admins@example.com`. * `domain:{domain}`: The G Suite domain (primary) that represents all the users of that domain. For example, `google.com` or `example.com`. * `deleted:user:{emailid}?uid={uniqueid}`: An email address (plus unique identifier) representing a user that has been recently deleted. For example, `alice@example.com?uid=123456789012345678901`. If the user is recovered, this value reverts to `user:{emailid}` and the recovered user retains the role in the binding. * `deleted:serviceAccount:{emailid}?uid={uniqueid}`: An email address (plus unique identifier) representing a service account that has been recently deleted. For example, `my-other-app@appspot.gserviceaccount.com?uid=123456789012345678901`. If the service account is undeleted, this value reverts to `serviceAccount:{emailid}` and the undeleted service account retains the role in the binding. * `deleted:group:{emailid}?uid={uniqueid}`: An email address (plus unique identifier) representing a Google group that has been recently deleted. For example, `admins@example.com?uid=123456789012345678901`. If the group is recovered, this value reverts to `group:{emailid}` and the recovered group retains the role in the binding.
	Members []string `pulumi:"members"`
	// Role that is assigned to the list of `members`, or principals. For example, `roles/viewer`, `roles/editor`, or `roles/owner`.
	Role string `pulumi:"role"`
}

Associates `members`, or principals, with a `role`.

type BindingResponseArrayOutput 

type BindingResponseArrayOutput struct{ *pulumi.OutputState }

func (BindingResponseArrayOutput) ElementType 

func (BindingResponseArrayOutput) ElementType() reflect.Type

func (BindingResponseArrayOutput) Index 

func (o BindingResponseArrayOutput) Index(i pulumi.IntInput) BindingResponseOutput

func (BindingResponseArrayOutput) ToBindingResponseArrayOutput 

func (o BindingResponseArrayOutput) ToBindingResponseArrayOutput() BindingResponseArrayOutput

func (BindingResponseArrayOutput) ToBindingResponseArrayOutputWithContext 

func (o BindingResponseArrayOutput) ToBindingResponseArrayOutputWithContext(ctx context.Context) BindingResponseArrayOutput

type BindingResponseOutput 

type BindingResponseOutput struct{ *pulumi.OutputState }

Associates `members`, or principals, with a `role`.

func (BindingResponseOutput) Condition 

func (o BindingResponseOutput) Condition() ExprResponseOutput

The condition that is associated with this binding. If the condition evaluates to `true`, then this binding applies to the current request. If the condition evaluates to `false`, then this binding does not apply to the current request. However, a different role binding might grant the same role to one or more of the principals in this binding. To learn which resources support conditions in their IAM policies, see the [IAM documentation](https://cloud.google.com/iam/help/conditions/resource-policies).

func (BindingResponseOutput) ElementType 

func (BindingResponseOutput) ElementType() reflect.Type

func (BindingResponseOutput) Members 

func (o BindingResponseOutput) Members() pulumi.StringArrayOutput

Specifies the principals requesting access for a Google Cloud resource. `members` can have the following values: * `allUsers`: A special identifier that represents anyone who is on the internet; with or without a Google account. * `allAuthenticatedUsers`: A special identifier that represents anyone who is authenticated with a Google account or a service account. Does not include identities that come from external identity providers (IdPs) through identity federation. * `user:{emailid}`: An email address that represents a specific Google account. For example, `alice@example.com` . * `serviceAccount:{emailid}`: An email address that represents a Google service account. For example, `my-other-app@appspot.gserviceaccount.com`. * `serviceAccount:{projectid}.svc.id.goog[{namespace}/{kubernetes-sa}]`: An identifier for a [Kubernetes service account](https://cloud.google.com/kubernetes-engine/docs/how-to/kubernetes-service-accounts). For example, `my-project.svc.id.goog[my-namespace/my-kubernetes-sa]`. * `group:{emailid}`: An email address that represents a Google group. For example, `admins@example.com`. * `domain:{domain}`: The G Suite domain (primary) that represents all the users of that domain. For example, `google.com` or `example.com`. * `deleted:user:{emailid}?uid={uniqueid}`: An email address (plus unique identifier) representing a user that has been recently deleted. For example, `alice@example.com?uid=123456789012345678901`. If the user is recovered, this value reverts to `user:{emailid}` and the recovered user retains the role in the binding. * `deleted:serviceAccount:{emailid}?uid={uniqueid}`: An email address (plus unique identifier) representing a service account that has been recently deleted. For example, `my-other-app@appspot.gserviceaccount.com?uid=123456789012345678901`. If the service account is undeleted, this value reverts to `serviceAccount:{emailid}` and the undeleted service account retains the role in the binding. * `deleted:group:{emailid}?uid={uniqueid}`: An email address (plus unique identifier) representing a Google group that has been recently deleted. For example, `admins@example.com?uid=123456789012345678901`. If the group is recovered, this value reverts to `group:{emailid}` and the recovered group retains the role in the binding.

func (BindingResponseOutput) Role 

func (o BindingResponseOutput) Role() pulumi.StringOutput

Role that is assigned to the list of `members`, or principals. For example, `roles/viewer`, `roles/editor`, or `roles/owner`.

func (BindingResponseOutput) ToBindingResponseOutput 

func (o BindingResponseOutput) ToBindingResponseOutput() BindingResponseOutput

func (BindingResponseOutput) ToBindingResponseOutputWithContext 

func (o BindingResponseOutput) ToBindingResponseOutputWithContext(ctx context.Context) BindingResponseOutput

type BuildResponse added in v0.29.0 

type BuildResponse struct {
	// Commit ID of the latest commit in the build.
	CommitId string `pulumi:"commitId"`
	// Commit time of the latest commit in the build.
	CommitTime string `pulumi:"commitTime"`
	// Path of the open source repository: github.com/apigee/registry.
	Repo string `pulumi:"repo"`
}

Build information of the Instance if it's in `ACTIVE` state.

type BuildResponseOutput added in v0.29.0 

type BuildResponseOutput struct{ *pulumi.OutputState }

Build information of the Instance if it's in `ACTIVE` state.

func (BuildResponseOutput) CommitId added in v0.29.0 

func (o BuildResponseOutput) CommitId() pulumi.StringOutput

Commit ID of the latest commit in the build.

func (BuildResponseOutput) CommitTime added in v0.29.0 

func (o BuildResponseOutput) CommitTime() pulumi.StringOutput

Commit time of the latest commit in the build.

func (BuildResponseOutput) ElementType added in v0.29.0 

func (BuildResponseOutput) ElementType() reflect.Type

func (BuildResponseOutput) Repo added in v0.29.0 

func (o BuildResponseOutput) Repo() pulumi.StringOutput

Path of the open source repository: github.com/apigee/registry.

func (BuildResponseOutput) ToBuildResponseOutput added in v0.29.0 

func (o BuildResponseOutput) ToBuildResponseOutput() BuildResponseOutput

func (BuildResponseOutput) ToBuildResponseOutputWithContext added in v0.29.0 

func (o BuildResponseOutput) ToBuildResponseOutputWithContext(ctx context.Context) BuildResponseOutput

type Config 

type Config struct {
	// The Customer Managed Encryption Key (CMEK) used for data encryption. The CMEK name should follow the format of `projects/([^/]+)/locations/([^/]+)/keyRings/([^/]+)/cryptoKeys/([^/]+)`, where the `location` must match InstanceConfig.location.
	CmekKeyName string `pulumi:"cmekKeyName"`
}

Available configurations to provision an Instance.

type ConfigArgs 

type ConfigArgs struct {
	// The Customer Managed Encryption Key (CMEK) used for data encryption. The CMEK name should follow the format of `projects/([^/]+)/locations/([^/]+)/keyRings/([^/]+)/cryptoKeys/([^/]+)`, where the `location` must match InstanceConfig.location.
	CmekKeyName pulumi.StringInput `pulumi:"cmekKeyName"`
}

Available configurations to provision an Instance.

func (ConfigArgs) ElementType 

func (ConfigArgs) ElementType() reflect.Type

func (ConfigArgs) ToConfigOutput 

func (i ConfigArgs) ToConfigOutput() ConfigOutput

func (ConfigArgs) ToConfigOutputWithContext 

func (i ConfigArgs) ToConfigOutputWithContext(ctx context.Context) ConfigOutput

type ConfigInput 

type ConfigInput interface {
	pulumi.Input

	ToConfigOutput() ConfigOutput
	ToConfigOutputWithContext(context.Context) ConfigOutput
}

ConfigInput is an input type that accepts ConfigArgs and ConfigOutput values. You can construct a concrete instance of `ConfigInput` via: 

ConfigArgs{...}

type ConfigOutput 

type ConfigOutput struct{ *pulumi.OutputState }

Available configurations to provision an Instance.

func (ConfigOutput) CmekKeyName 

func (o ConfigOutput) CmekKeyName() pulumi.StringOutput

The Customer Managed Encryption Key (CMEK) used for data encryption. The CMEK name should follow the format of `projects/([^/]+)/locations/([^/]+)/keyRings/([^/]+)/cryptoKeys/([^/]+)`, where the `location` must match InstanceConfig.location.

func (ConfigOutput) ElementType 

func (ConfigOutput) ElementType() reflect.Type

func (ConfigOutput) ToConfigOutput 

func (o ConfigOutput) ToConfigOutput() ConfigOutput

func (ConfigOutput) ToConfigOutputWithContext 

func (o ConfigOutput) ToConfigOutputWithContext(ctx context.Context) ConfigOutput

type ConfigResponse 

type ConfigResponse struct {
	// The Customer Managed Encryption Key (CMEK) used for data encryption. The CMEK name should follow the format of `projects/([^/]+)/locations/([^/]+)/keyRings/([^/]+)/cryptoKeys/([^/]+)`, where the `location` must match InstanceConfig.location.
	CmekKeyName string `pulumi:"cmekKeyName"`
	// The GCP location where the Instance resides.
	Location string `pulumi:"location"`
}

Available configurations to provision an Instance.

type ConfigResponseOutput 

type ConfigResponseOutput struct{ *pulumi.OutputState }

Available configurations to provision an Instance.

func (ConfigResponseOutput) CmekKeyName 

func (o ConfigResponseOutput) CmekKeyName() pulumi.StringOutput

The Customer Managed Encryption Key (CMEK) used for data encryption. The CMEK name should follow the format of `projects/([^/]+)/locations/([^/]+)/keyRings/([^/]+)/cryptoKeys/([^/]+)`, where the `location` must match InstanceConfig.location.

func (ConfigResponseOutput) ElementType 

func (ConfigResponseOutput) ElementType() reflect.Type

func (ConfigResponseOutput) Location 

func (o ConfigResponseOutput) Location() pulumi.StringOutput

The GCP location where the Instance resides.

func (ConfigResponseOutput) ToConfigResponseOutput 

func (o ConfigResponseOutput) ToConfigResponseOutput() ConfigResponseOutput

func (ConfigResponseOutput) ToConfigResponseOutputWithContext 

func (o ConfigResponseOutput) ToConfigResponseOutputWithContext(ctx context.Context) ConfigResponseOutput

type Deployment 

type Deployment struct {
	pulumi.CustomResourceState

	// Text briefly describing how to access the endpoint. Changes to this value will not affect the revision.
	AccessGuidance pulumi.StringOutput `pulumi:"accessGuidance"`
	// Annotations attach non-identifying metadata to resources. Annotation keys and values are less restricted than those of labels, but should be generally used for small values of broad interest. Larger, topic- specific metadata should be stored in Artifacts.
	Annotations pulumi.StringMapOutput `pulumi:"annotations"`
	// Required. The ID to use for the deployment, which will become the final component of the deployment's resource name. This value should be 4-63 characters, and valid characters are /a-z-/. Following AIP-162, IDs must not have the form of a UUID.
	ApiDeploymentId pulumi.StringOutput `pulumi:"apiDeploymentId"`
	ApiId           pulumi.StringOutput `pulumi:"apiId"`
	// The full resource name (including revision ID) of the spec of the API being served by the deployment. Changes to this value will update the revision. Format: `projects/{project}/locations/{location}/apis/{api}/versions/{version}/specs/{spec@revision}`
	ApiSpecRevision pulumi.StringOutput `pulumi:"apiSpecRevision"`
	// Creation timestamp; when the deployment resource was created.
	CreateTime pulumi.StringOutput `pulumi:"createTime"`
	// A detailed description.
	Description pulumi.StringOutput `pulumi:"description"`
	// Human-meaningful name.
	DisplayName pulumi.StringOutput `pulumi:"displayName"`
	// The address where the deployment is serving. Changes to this value will update the revision.
	EndpointUri pulumi.StringOutput `pulumi:"endpointUri"`
	// The address of the external channel of the API (e.g., the Developer Portal). Changes to this value will not affect the revision.
	ExternalChannelUri pulumi.StringOutput `pulumi:"externalChannelUri"`
	// Text briefly identifying the intended audience of the API. Changes to this value will not affect the revision.
	IntendedAudience pulumi.StringOutput `pulumi:"intendedAudience"`
	// Labels attach identifying metadata to resources. Identifying metadata can be used to filter list operations. Label keys and values can be no longer than 64 characters (Unicode codepoints), can only contain lowercase letters, numeric characters, underscores and dashes. International characters are allowed. No more than 64 user labels can be associated with one resource (System labels are excluded). See https://goo.gl/xmQnxf for more information and examples of labels. System reserved label keys are prefixed with `apigeeregistry.googleapis.com/` and cannot be changed.
	Labels   pulumi.StringMapOutput `pulumi:"labels"`
	Location pulumi.StringOutput    `pulumi:"location"`
	// Resource name.
	Name    pulumi.StringOutput `pulumi:"name"`
	Project pulumi.StringOutput `pulumi:"project"`
	// Revision creation timestamp; when the represented revision was created.
	RevisionCreateTime pulumi.StringOutput `pulumi:"revisionCreateTime"`
	// Immutable. The revision ID of the deployment. A new revision is committed whenever the deployment contents are changed. The format is an 8-character hexadecimal string.
	RevisionId pulumi.StringOutput `pulumi:"revisionId"`
	// Last update timestamp: when the represented revision was last modified.
	RevisionUpdateTime pulumi.StringOutput `pulumi:"revisionUpdateTime"`
}

Creates a specified deployment.

func GetDeployment 

func GetDeployment(ctx *pulumi.Context,
	name string, id pulumi.IDInput, state *DeploymentState, opts ...pulumi.ResourceOption) (*Deployment, error)

GetDeployment gets an existing Deployment resource's state with the given name, ID, and optional state properties that are used to uniquely qualify the lookup (nil if not required).

func NewDeployment 

func NewDeployment(ctx *pulumi.Context,
	name string, args *DeploymentArgs, opts ...pulumi.ResourceOption) (*Deployment, error)

NewDeployment registers a new resource with the given unique name, arguments, and options.

func (*Deployment) ElementType 

func (*Deployment) ElementType() reflect.Type

func (*Deployment) ToDeploymentOutput 

func (i *Deployment) ToDeploymentOutput() DeploymentOutput

func (*Deployment) ToDeploymentOutputWithContext 

func (i *Deployment) ToDeploymentOutputWithContext(ctx context.Context) DeploymentOutput

type DeploymentArgs 

type DeploymentArgs struct {
	// Text briefly describing how to access the endpoint. Changes to this value will not affect the revision.
	AccessGuidance pulumi.StringPtrInput
	// Annotations attach non-identifying metadata to resources. Annotation keys and values are less restricted than those of labels, but should be generally used for small values of broad interest. Larger, topic- specific metadata should be stored in Artifacts.
	Annotations pulumi.StringMapInput
	// Required. The ID to use for the deployment, which will become the final component of the deployment's resource name. This value should be 4-63 characters, and valid characters are /a-z-/. Following AIP-162, IDs must not have the form of a UUID.
	ApiDeploymentId pulumi.StringInput
	ApiId           pulumi.StringInput
	// The full resource name (including revision ID) of the spec of the API being served by the deployment. Changes to this value will update the revision. Format: `projects/{project}/locations/{location}/apis/{api}/versions/{version}/specs/{spec@revision}`
	ApiSpecRevision pulumi.StringPtrInput
	// A detailed description.
	Description pulumi.StringPtrInput
	// Human-meaningful name.
	DisplayName pulumi.StringPtrInput
	// The address where the deployment is serving. Changes to this value will update the revision.
	EndpointUri pulumi.StringPtrInput
	// The address of the external channel of the API (e.g., the Developer Portal). Changes to this value will not affect the revision.
	ExternalChannelUri pulumi.StringPtrInput
	// Text briefly identifying the intended audience of the API. Changes to this value will not affect the revision.
	IntendedAudience pulumi.StringPtrInput
	// Labels attach identifying metadata to resources. Identifying metadata can be used to filter list operations. Label keys and values can be no longer than 64 characters (Unicode codepoints), can only contain lowercase letters, numeric characters, underscores and dashes. International characters are allowed. No more than 64 user labels can be associated with one resource (System labels are excluded). See https://goo.gl/xmQnxf for more information and examples of labels. System reserved label keys are prefixed with `apigeeregistry.googleapis.com/` and cannot be changed.
	Labels   pulumi.StringMapInput
	Location pulumi.StringPtrInput
	// Resource name.
	Name    pulumi.StringPtrInput
	Project pulumi.StringPtrInput
}

The set of arguments for constructing a Deployment resource.

func (DeploymentArgs) ElementType 

func (DeploymentArgs) ElementType() reflect.Type

type DeploymentArtifact 

type DeploymentArtifact struct {
	pulumi.CustomResourceState

	// Annotations attach non-identifying metadata to resources. Annotation keys and values are less restricted than those of labels, but should be generally used for small values of broad interest. Larger, topic- specific metadata should be stored in Artifacts.
	Annotations pulumi.StringMapOutput `pulumi:"annotations"`
	ApiId       pulumi.StringOutput    `pulumi:"apiId"`
	// Required. The ID to use for the artifact, which will become the final component of the artifact's resource name. This value should be 4-63 characters, and valid characters are /a-z-/. Following AIP-162, IDs must not have the form of a UUID.
	ArtifactId pulumi.StringOutput `pulumi:"artifactId"`
	// Input only. The contents of the artifact. Provided by API callers when artifacts are created or replaced. To access the contents of an artifact, use GetArtifactContents.
	Contents pulumi.StringOutput `pulumi:"contents"`
	// Creation timestamp.
	CreateTime   pulumi.StringOutput `pulumi:"createTime"`
	DeploymentId pulumi.StringOutput `pulumi:"deploymentId"`
	// A SHA-256 hash of the artifact's contents. If the artifact is gzipped, this is the hash of the uncompressed artifact.
	Hash pulumi.StringOutput `pulumi:"hash"`
	// Labels attach identifying metadata to resources. Identifying metadata can be used to filter list operations. Label keys and values can be no longer than 64 characters (Unicode codepoints), can only contain lowercase letters, numeric characters, underscores and dashes. International characters are allowed. No more than 64 user labels can be associated with one resource (System labels are excluded). See https://goo.gl/xmQnxf for more information and examples of labels. System reserved label keys are prefixed with "registry.googleapis.com/" and cannot be changed.
	Labels   pulumi.StringMapOutput `pulumi:"labels"`
	Location pulumi.StringOutput    `pulumi:"location"`
	// A content type specifier for the artifact. Content type specifiers are Media Types (https://en.wikipedia.org/wiki/Media_type) with a possible "schema" parameter that specifies a schema for the stored information. Content types can specify compression. Currently only GZip compression is supported (indicated with "+gzip").
	MimeType pulumi.StringOutput `pulumi:"mimeType"`
	// Resource name.
	Name    pulumi.StringOutput `pulumi:"name"`
	Project pulumi.StringOutput `pulumi:"project"`
	// The size of the artifact in bytes. If the artifact is gzipped, this is the size of the uncompressed artifact.
	SizeBytes pulumi.IntOutput `pulumi:"sizeBytes"`
	// Last update timestamp.
	UpdateTime pulumi.StringOutput `pulumi:"updateTime"`
}

Creates a specified artifact.

func GetDeploymentArtifact 

func GetDeploymentArtifact(ctx *pulumi.Context,
	name string, id pulumi.IDInput, state *DeploymentArtifactState, opts ...pulumi.ResourceOption) (*DeploymentArtifact, error)

GetDeploymentArtifact gets an existing DeploymentArtifact resource's state with the given name, ID, and optional state properties that are used to uniquely qualify the lookup (nil if not required).

func NewDeploymentArtifact 

func NewDeploymentArtifact(ctx *pulumi.Context,
	name string, args *DeploymentArtifactArgs, opts ...pulumi.ResourceOption) (*DeploymentArtifact, error)

NewDeploymentArtifact registers a new resource with the given unique name, arguments, and options.

func (*DeploymentArtifact) ElementType 

func (*DeploymentArtifact) ElementType() reflect.Type

func (*DeploymentArtifact) ToDeploymentArtifactOutput 

func (i *DeploymentArtifact) ToDeploymentArtifactOutput() DeploymentArtifactOutput

func (*DeploymentArtifact) ToDeploymentArtifactOutputWithContext 

func (i *DeploymentArtifact) ToDeploymentArtifactOutputWithContext(ctx context.Context) DeploymentArtifactOutput

type DeploymentArtifactArgs 

type DeploymentArtifactArgs struct {
	// Annotations attach non-identifying metadata to resources. Annotation keys and values are less restricted than those of labels, but should be generally used for small values of broad interest. Larger, topic- specific metadata should be stored in Artifacts.
	Annotations pulumi.StringMapInput
	ApiId       pulumi.StringInput
	// Required. The ID to use for the artifact, which will become the final component of the artifact's resource name. This value should be 4-63 characters, and valid characters are /a-z-/. Following AIP-162, IDs must not have the form of a UUID.
	ArtifactId pulumi.StringInput
	// Input only. The contents of the artifact. Provided by API callers when artifacts are created or replaced. To access the contents of an artifact, use GetArtifactContents.
	Contents     pulumi.StringPtrInput
	DeploymentId pulumi.StringInput
	// Labels attach identifying metadata to resources. Identifying metadata can be used to filter list operations. Label keys and values can be no longer than 64 characters (Unicode codepoints), can only contain lowercase letters, numeric characters, underscores and dashes. International characters are allowed. No more than 64 user labels can be associated with one resource (System labels are excluded). See https://goo.gl/xmQnxf for more information and examples of labels. System reserved label keys are prefixed with "registry.googleapis.com/" and cannot be changed.
	Labels   pulumi.StringMapInput
	Location pulumi.StringPtrInput
	// A content type specifier for the artifact. Content type specifiers are Media Types (https://en.wikipedia.org/wiki/Media_type) with a possible "schema" parameter that specifies a schema for the stored information. Content types can specify compression. Currently only GZip compression is supported (indicated with "+gzip").
	MimeType pulumi.StringPtrInput
	// Resource name.
	Name    pulumi.StringPtrInput
	Project pulumi.StringPtrInput
}

The set of arguments for constructing a DeploymentArtifact resource.

func (DeploymentArtifactArgs) ElementType 

func (DeploymentArtifactArgs) ElementType() reflect.Type

type DeploymentArtifactInput 

type DeploymentArtifactInput interface {
	pulumi.Input

	ToDeploymentArtifactOutput() DeploymentArtifactOutput
	ToDeploymentArtifactOutputWithContext(ctx context.Context) DeploymentArtifactOutput
}

type DeploymentArtifactOutput 

type DeploymentArtifactOutput struct{ *pulumi.OutputState }

func (DeploymentArtifactOutput) Annotations added in v0.28.0 

func (o DeploymentArtifactOutput) Annotations() pulumi.StringMapOutput

Annotations attach non-identifying metadata to resources. Annotation keys and values are less restricted than those of labels, but should be generally used for small values of broad interest. Larger, topic- specific metadata should be stored in Artifacts.

func (DeploymentArtifactOutput) ApiId added in v0.21.0 

func (o DeploymentArtifactOutput) ApiId() pulumi.StringOutput

func (DeploymentArtifactOutput) ArtifactId added in v0.21.0 

func (o DeploymentArtifactOutput) ArtifactId() pulumi.StringOutput

Required. The ID to use for the artifact, which will become the final component of the artifact's resource name. This value should be 4-63 characters, and valid characters are /a-z-/. Following AIP-162, IDs must not have the form of a UUID.

func (DeploymentArtifactOutput) Contents 

func (o DeploymentArtifactOutput) Contents() pulumi.StringOutput

Input only. The contents of the artifact. Provided by API callers when artifacts are created or replaced. To access the contents of an artifact, use GetArtifactContents.

func (DeploymentArtifactOutput) CreateTime 

func (o DeploymentArtifactOutput) CreateTime() pulumi.StringOutput

Creation timestamp.

func (DeploymentArtifactOutput) DeploymentId added in v0.21.0 

func (o DeploymentArtifactOutput) DeploymentId() pulumi.StringOutput

func (DeploymentArtifactOutput) ElementType 

func (DeploymentArtifactOutput) ElementType() reflect.Type

func (DeploymentArtifactOutput) Hash 

func (o DeploymentArtifactOutput) Hash() pulumi.StringOutput

A SHA-256 hash of the artifact's contents. If the artifact is gzipped, this is the hash of the uncompressed artifact.

func (DeploymentArtifactOutput) Labels added in v0.28.0 

func (o DeploymentArtifactOutput) Labels() pulumi.StringMapOutput

Labels attach identifying metadata to resources. Identifying metadata can be used to filter list operations. Label keys and values can be no longer than 64 characters (Unicode codepoints), can only contain lowercase letters, numeric characters, underscores and dashes. International characters are allowed. No more than 64 user labels can be associated with one resource (System labels are excluded). See https://goo.gl/xmQnxf for more information and examples of labels. System reserved label keys are prefixed with "registry.googleapis.com/" and cannot be changed.

func (DeploymentArtifactOutput) Location added in v0.21.0 

func (o DeploymentArtifactOutput) Location() pulumi.StringOutput

func (DeploymentArtifactOutput) MimeType 

func (o DeploymentArtifactOutput) MimeType() pulumi.StringOutput

A content type specifier for the artifact. Content type specifiers are Media Types (https://en.wikipedia.org/wiki/Media_type) with a possible "schema" parameter that specifies a schema for the stored information. Content types can specify compression. Currently only GZip compression is supported (indicated with "+gzip").

func (DeploymentArtifactOutput) Name 

func (o DeploymentArtifactOutput) Name() pulumi.StringOutput

Resource name.

func (DeploymentArtifactOutput) Project added in v0.21.0 

func (o DeploymentArtifactOutput) Project() pulumi.StringOutput

func (DeploymentArtifactOutput) SizeBytes 

func (o DeploymentArtifactOutput) SizeBytes() pulumi.IntOutput

The size of the artifact in bytes. If the artifact is gzipped, this is the size of the uncompressed artifact.

func (DeploymentArtifactOutput) ToDeploymentArtifactOutput 

func (o DeploymentArtifactOutput) ToDeploymentArtifactOutput() DeploymentArtifactOutput

func (DeploymentArtifactOutput) ToDeploymentArtifactOutputWithContext 

func (o DeploymentArtifactOutput) ToDeploymentArtifactOutputWithContext(ctx context.Context) DeploymentArtifactOutput

func (DeploymentArtifactOutput) UpdateTime 

func (o DeploymentArtifactOutput) UpdateTime() pulumi.StringOutput

Last update timestamp.

type DeploymentArtifactState 

type DeploymentArtifactState struct {
}

func (DeploymentArtifactState) ElementType 

func (DeploymentArtifactState) ElementType() reflect.Type

type DeploymentInput 

type DeploymentInput interface {
	pulumi.Input

	ToDeploymentOutput() DeploymentOutput
	ToDeploymentOutputWithContext(ctx context.Context) DeploymentOutput
}

type DeploymentOutput 

type DeploymentOutput struct{ *pulumi.OutputState }

func (DeploymentOutput) AccessGuidance 

func (o DeploymentOutput) AccessGuidance() pulumi.StringOutput

Text briefly describing how to access the endpoint. Changes to this value will not affect the revision.

func (DeploymentOutput) Annotations 

func (o DeploymentOutput) Annotations() pulumi.StringMapOutput

Annotations attach non-identifying metadata to resources. Annotation keys and values are less restricted than those of labels, but should be generally used for small values of broad interest. Larger, topic- specific metadata should be stored in Artifacts.

func (DeploymentOutput) ApiDeploymentId added in v0.21.0 

func (o DeploymentOutput) ApiDeploymentId() pulumi.StringOutput

Required. The ID to use for the deployment, which will become the final component of the deployment's resource name. This value should be 4-63 characters, and valid characters are /a-z-/. Following AIP-162, IDs must not have the form of a UUID.

func (DeploymentOutput) ApiId added in v0.21.0 

func (o DeploymentOutput) ApiId() pulumi.StringOutput

func (DeploymentOutput) ApiSpecRevision 

func (o DeploymentOutput) ApiSpecRevision() pulumi.StringOutput

The full resource name (including revision ID) of the spec of the API being served by the deployment. Changes to this value will update the revision. Format: `projects/{project}/locations/{location}/apis/{api}/versions/{version}/specs/{spec@revision}`

func (DeploymentOutput) CreateTime 

func (o DeploymentOutput) CreateTime() pulumi.StringOutput

Creation timestamp; when the deployment resource was created.

func (DeploymentOutput) Description 

func (o DeploymentOutput) Description() pulumi.StringOutput

A detailed description.

func (DeploymentOutput) DisplayName 

func (o DeploymentOutput) DisplayName() pulumi.StringOutput

Human-meaningful name.

func (DeploymentOutput) ElementType 

func (DeploymentOutput) ElementType() reflect.Type

func (DeploymentOutput) EndpointUri 

func (o DeploymentOutput) EndpointUri() pulumi.StringOutput

The address where the deployment is serving. Changes to this value will update the revision.

func (DeploymentOutput) ExternalChannelUri 

func (o DeploymentOutput) ExternalChannelUri() pulumi.StringOutput

The address of the external channel of the API (e.g., the Developer Portal). Changes to this value will not affect the revision.

func (DeploymentOutput) IntendedAudience 

func (o DeploymentOutput) IntendedAudience() pulumi.StringOutput

Text briefly identifying the intended audience of the API. Changes to this value will not affect the revision.

func (DeploymentOutput) Labels 

func (o DeploymentOutput) Labels() pulumi.StringMapOutput

Labels attach identifying metadata to resources. Identifying metadata can be used to filter list operations. Label keys and values can be no longer than 64 characters (Unicode codepoints), can only contain lowercase letters, numeric characters, underscores and dashes. International characters are allowed. No more than 64 user labels can be associated with one resource (System labels are excluded). See https://goo.gl/xmQnxf for more information and examples of labels. System reserved label keys are prefixed with `apigeeregistry.googleapis.com/` and cannot be changed.

func (DeploymentOutput) Location added in v0.21.0 

func (o DeploymentOutput) Location() pulumi.StringOutput

func (DeploymentOutput) Name 

func (o DeploymentOutput) Name() pulumi.StringOutput

Resource name.

func (DeploymentOutput) Project added in v0.21.0 

func (o DeploymentOutput) Project() pulumi.StringOutput

func (DeploymentOutput) RevisionCreateTime 

func (o DeploymentOutput) RevisionCreateTime() pulumi.StringOutput

Revision creation timestamp; when the represented revision was created.

func (DeploymentOutput) RevisionId 

func (o DeploymentOutput) RevisionId() pulumi.StringOutput

Immutable. The revision ID of the deployment. A new revision is committed whenever the deployment contents are changed. The format is an 8-character hexadecimal string.

func (DeploymentOutput) RevisionUpdateTime 

func (o DeploymentOutput) RevisionUpdateTime() pulumi.StringOutput

Last update timestamp: when the represented revision was last modified.

func (DeploymentOutput) ToDeploymentOutput 

func (o DeploymentOutput) ToDeploymentOutput() DeploymentOutput

func (DeploymentOutput) ToDeploymentOutputWithContext 

func (o DeploymentOutput) ToDeploymentOutputWithContext(ctx context.Context) DeploymentOutput

type DeploymentState 

type DeploymentState struct {
}

func (DeploymentState) ElementType 

func (DeploymentState) ElementType() reflect.Type

type DocumentIamBinding added in v0.32.0 

type DocumentIamBinding struct {
	pulumi.CustomResourceState

	// An IAM Condition for a given binding. See https://cloud.google.com/iam/docs/conditions-overview for additional details.
	Condition iam.ConditionPtrOutput `pulumi:"condition"`
	// The etag of the resource's IAM policy.
	Etag pulumi.StringOutput `pulumi:"etag"`
	// Specifies the principals requesting access for a Google Cloud resource. `members` can have the following values: * `allUsers`: A special identifier that represents anyone who is on the internet; with or without a Google account. * `allAuthenticatedUsers`: A special identifier that represents anyone who is authenticated with a Google account or a service account. Does not include identities that come from external identity providers (IdPs) through identity federation. * `user:{emailid}`: An email address that represents a specific Google account. For example, `alice@example.com` . * `serviceAccount:{emailid}`: An email address that represents a Google service account. For example, `my-other-app@appspot.gserviceaccount.com`. * `serviceAccount:{projectid}.svc.id.goog[{namespace}/{kubernetes-sa}]`: An identifier for a [Kubernetes service account](https://cloud.google.com/kubernetes-engine/docs/how-to/kubernetes-service-accounts). For example, `my-project.svc.id.goog[my-namespace/my-kubernetes-sa]`. * `group:{emailid}`: An email address that represents a Google group. For example, `admins@example.com`. * `domain:{domain}`: The G Suite domain (primary) that represents all the users of that domain. For example, `google.com` or `example.com`. * `deleted:user:{emailid}?uid={uniqueid}`: An email address (plus unique identifier) representing a user that has been recently deleted. For example, `alice@example.com?uid=123456789012345678901`. If the user is recovered, this value reverts to `user:{emailid}` and the recovered user retains the role in the binding. * `deleted:serviceAccount:{emailid}?uid={uniqueid}`: An email address (plus unique identifier) representing a service account that has been recently deleted. For example, `my-other-app@appspot.gserviceaccount.com?uid=123456789012345678901`. If the service account is undeleted, this value reverts to `serviceAccount:{emailid}` and the undeleted service account retains the role in the binding. * `deleted:group:{emailid}?uid={uniqueid}`: An email address (plus unique identifier) representing a Google group that has been recently deleted. For example, `admins@example.com?uid=123456789012345678901`. If the group is recovered, this value reverts to `group:{emailid}` and the recovered group retains the role in the binding.
	Members pulumi.StringArrayOutput `pulumi:"members"`
	// The name of the resource to manage IAM policies for.
	Name pulumi.StringOutput `pulumi:"name"`
	// The project in which the resource belongs. If it is not provided, a default will be supplied.
	Project pulumi.StringOutput `pulumi:"project"`
	// Role that is assigned to the list of `members`, or principals. For example, `roles/viewer`, `roles/editor`, or `roles/owner`.
	Role pulumi.StringOutput `pulumi:"role"`
}

Sets the access control policy on the specified resource. Replaces any existing policy. Can return `NOT_FOUND`, `INVALID_ARGUMENT`, and `PERMISSION_DENIED` errors.

func GetDocumentIamBinding added in v0.32.0 

func GetDocumentIamBinding(ctx *pulumi.Context,
	name string, id pulumi.IDInput, state *DocumentIamBindingState, opts ...pulumi.ResourceOption) (*DocumentIamBinding, error)

GetDocumentIamBinding gets an existing DocumentIamBinding resource's state with the given name, ID, and optional state properties that are used to uniquely qualify the lookup (nil if not required).

func NewDocumentIamBinding added in v0.32.0 

func NewDocumentIamBinding(ctx *pulumi.Context,
	name string, args *DocumentIamBindingArgs, opts ...pulumi.ResourceOption) (*DocumentIamBinding, error)

NewDocumentIamBinding registers a new resource with the given unique name, arguments, and options.

func (*DocumentIamBinding) ElementType added in v0.32.0 

func (*DocumentIamBinding) ElementType() reflect.Type

func (*DocumentIamBinding) ToDocumentIamBindingOutput added in v0.32.0 

func (i *DocumentIamBinding) ToDocumentIamBindingOutput() DocumentIamBindingOutput

func (*DocumentIamBinding) ToDocumentIamBindingOutputWithContext added in v0.32.0 

func (i *DocumentIamBinding) ToDocumentIamBindingOutputWithContext(ctx context.Context) DocumentIamBindingOutput

type DocumentIamBindingArgs added in v0.32.0 

type DocumentIamBindingArgs struct {
	// An IAM Condition for a given binding.
	Condition iam.ConditionPtrInput
	// Identities that will be granted the privilege in role. Each entry can have one of the following values:
	//
	//  * user:{emailid}: An email address that represents a specific Google account. For example, alice@gmail.com or joe@example.com.
	//  * serviceAccount:{emailid}: An email address that represents a service account. For example, my-other-app@appspot.gserviceaccount.com.
	//  * group:{emailid}: An email address that represents a Google group. For example, admins@example.com.
	//  * domain:{domain}: A G Suite domain (primary, instead of alias) name that represents all the users of that domain. For example, google.com or example.com.
	Members pulumi.StringArrayInput
	// The name of the resource to manage IAM policies for.
	Name pulumi.StringInput
	// The role that should be applied. Only one `IamBinding` can be used per role.
	Role pulumi.StringInput
}

The set of arguments for constructing a DocumentIamBinding resource.

func (DocumentIamBindingArgs) ElementType added in v0.32.0 

func (DocumentIamBindingArgs) ElementType() reflect.Type

type DocumentIamBindingInput added in v0.32.0 

type DocumentIamBindingInput interface {
	pulumi.Input

	ToDocumentIamBindingOutput() DocumentIamBindingOutput
	ToDocumentIamBindingOutputWithContext(ctx context.Context) DocumentIamBindingOutput
}

type DocumentIamBindingOutput added in v0.32.0 

type DocumentIamBindingOutput struct{ *pulumi.OutputState }

func (DocumentIamBindingOutput) Condition added in v0.32.0 

func (o DocumentIamBindingOutput) Condition() iam.ConditionPtrOutput

An IAM Condition for a given binding. See https://cloud.google.com/iam/docs/conditions-overview for additional details.

func (DocumentIamBindingOutput) ElementType added in v0.32.0 

func (DocumentIamBindingOutput) ElementType() reflect.Type

func (DocumentIamBindingOutput) Etag added in v0.32.0 

func (o DocumentIamBindingOutput) Etag() pulumi.StringOutput

The etag of the resource's IAM policy.

func (DocumentIamBindingOutput) Members added in v0.32.0 

func (o DocumentIamBindingOutput) Members() pulumi.StringArrayOutput

Specifies the principals requesting access for a Google Cloud resource. `members` can have the following values: * `allUsers`: A special identifier that represents anyone who is on the internet; with or without a Google account. * `allAuthenticatedUsers`: A special identifier that represents anyone who is authenticated with a Google account or a service account. Does not include identities that come from external identity providers (IdPs) through identity federation. * `user:{emailid}`: An email address that represents a specific Google account. For example, `alice@example.com` . * `serviceAccount:{emailid}`: An email address that represents a Google service account. For example, `my-other-app@appspot.gserviceaccount.com`. * `serviceAccount:{projectid}.svc.id.goog[{namespace}/{kubernetes-sa}]`: An identifier for a [Kubernetes service account](https://cloud.google.com/kubernetes-engine/docs/how-to/kubernetes-service-accounts). For example, `my-project.svc.id.goog[my-namespace/my-kubernetes-sa]`. * `group:{emailid}`: An email address that represents a Google group. For example, `admins@example.com`. * `domain:{domain}`: The G Suite domain (primary) that represents all the users of that domain. For example, `google.com` or `example.com`. * `deleted:user:{emailid}?uid={uniqueid}`: An email address (plus unique identifier) representing a user that has been recently deleted. For example, `alice@example.com?uid=123456789012345678901`. If the user is recovered, this value reverts to `user:{emailid}` and the recovered user retains the role in the binding. * `deleted:serviceAccount:{emailid}?uid={uniqueid}`: An email address (plus unique identifier) representing a service account that has been recently deleted. For example, `my-other-app@appspot.gserviceaccount.com?uid=123456789012345678901`. If the service account is undeleted, this value reverts to `serviceAccount:{emailid}` and the undeleted service account retains the role in the binding. * `deleted:group:{emailid}?uid={uniqueid}`: An email address (plus unique identifier) representing a Google group that has been recently deleted. For example, `admins@example.com?uid=123456789012345678901`. If the group is recovered, this value reverts to `group:{emailid}` and the recovered group retains the role in the binding.

func (DocumentIamBindingOutput) Name added in v0.32.0 

func (o DocumentIamBindingOutput) Name() pulumi.StringOutput

The name of the resource to manage IAM policies for.

func (DocumentIamBindingOutput) Project added in v0.32.0 

func (o DocumentIamBindingOutput) Project() pulumi.StringOutput

The project in which the resource belongs. If it is not provided, a default will be supplied.

func (DocumentIamBindingOutput) Role added in v0.32.0 

func (o DocumentIamBindingOutput) Role() pulumi.StringOutput

Role that is assigned to the list of `members`, or principals. For example, `roles/viewer`, `roles/editor`, or `roles/owner`.

func (DocumentIamBindingOutput) ToDocumentIamBindingOutput added in v0.32.0 

func (o DocumentIamBindingOutput) ToDocumentIamBindingOutput() DocumentIamBindingOutput

func (DocumentIamBindingOutput) ToDocumentIamBindingOutputWithContext added in v0.32.0 

func (o DocumentIamBindingOutput) ToDocumentIamBindingOutputWithContext(ctx context.Context) DocumentIamBindingOutput

type DocumentIamBindingState added in v0.32.0 

type DocumentIamBindingState struct {
}

func (DocumentIamBindingState) ElementType added in v0.32.0 

func (DocumentIamBindingState) ElementType() reflect.Type

type DocumentIamMember added in v0.32.0 

type DocumentIamMember struct {
	pulumi.CustomResourceState

	// An IAM Condition for a given binding. See https://cloud.google.com/iam/docs/conditions-overview for additional details.
	Condition iam.ConditionPtrOutput `pulumi:"condition"`
	// The etag of the resource's IAM policy.
	Etag pulumi.StringOutput `pulumi:"etag"`
	// Specifies the principals requesting access for a Google Cloud resource. `members` can have the following values: * `allUsers`: A special identifier that represents anyone who is on the internet; with or without a Google account. * `allAuthenticatedUsers`: A special identifier that represents anyone who is authenticated with a Google account or a service account. Does not include identities that come from external identity providers (IdPs) through identity federation. * `user:{emailid}`: An email address that represents a specific Google account. For example, `alice@example.com` . * `serviceAccount:{emailid}`: An email address that represents a Google service account. For example, `my-other-app@appspot.gserviceaccount.com`. * `serviceAccount:{projectid}.svc.id.goog[{namespace}/{kubernetes-sa}]`: An identifier for a [Kubernetes service account](https://cloud.google.com/kubernetes-engine/docs/how-to/kubernetes-service-accounts). For example, `my-project.svc.id.goog[my-namespace/my-kubernetes-sa]`. * `group:{emailid}`: An email address that represents a Google group. For example, `admins@example.com`. * `domain:{domain}`: The G Suite domain (primary) that represents all the users of that domain. For example, `google.com` or `example.com`. * `deleted:user:{emailid}?uid={uniqueid}`: An email address (plus unique identifier) representing a user that has been recently deleted. For example, `alice@example.com?uid=123456789012345678901`. If the user is recovered, this value reverts to `user:{emailid}` and the recovered user retains the role in the binding. * `deleted:serviceAccount:{emailid}?uid={uniqueid}`: An email address (plus unique identifier) representing a service account that has been recently deleted. For example, `my-other-app@appspot.gserviceaccount.com?uid=123456789012345678901`. If the service account is undeleted, this value reverts to `serviceAccount:{emailid}` and the undeleted service account retains the role in the binding. * `deleted:group:{emailid}?uid={uniqueid}`: An email address (plus unique identifier) representing a Google group that has been recently deleted. For example, `admins@example.com?uid=123456789012345678901`. If the group is recovered, this value reverts to `group:{emailid}` and the recovered group retains the role in the binding.
	Member pulumi.StringOutput `pulumi:"member"`
	// The name of the resource to manage IAM policies for.
	Name pulumi.StringOutput `pulumi:"name"`
	// The project in which the resource belongs. If it is not provided, a default will be supplied.
	Project pulumi.StringOutput `pulumi:"project"`
	// Role that is assigned to the list of `members`, or principals. For example, `roles/viewer`, `roles/editor`, or `roles/owner`.
	Role pulumi.StringOutput `pulumi:"role"`
}

Sets the access control policy on the specified resource. Replaces any existing policy. Can return `NOT_FOUND`, `INVALID_ARGUMENT`, and `PERMISSION_DENIED` errors.

func GetDocumentIamMember added in v0.32.0 

func GetDocumentIamMember(ctx *pulumi.Context,
	name string, id pulumi.IDInput, state *DocumentIamMemberState, opts ...pulumi.ResourceOption) (*DocumentIamMember, error)

GetDocumentIamMember gets an existing DocumentIamMember resource's state with the given name, ID, and optional state properties that are used to uniquely qualify the lookup (nil if not required).

func NewDocumentIamMember added in v0.32.0 

func NewDocumentIamMember(ctx *pulumi.Context,
	name string, args *DocumentIamMemberArgs, opts ...pulumi.ResourceOption) (*DocumentIamMember, error)

NewDocumentIamMember registers a new resource with the given unique name, arguments, and options.

func (*DocumentIamMember) ElementType added in v0.32.0 

func (*DocumentIamMember) ElementType() reflect.Type

func (*DocumentIamMember) ToDocumentIamMemberOutput added in v0.32.0 

func (i *DocumentIamMember) ToDocumentIamMemberOutput() DocumentIamMemberOutput

func (*DocumentIamMember) ToDocumentIamMemberOutputWithContext added in v0.32.0 

func (i *DocumentIamMember) ToDocumentIamMemberOutputWithContext(ctx context.Context) DocumentIamMemberOutput

type DocumentIamMemberArgs added in v0.32.0 

type DocumentIamMemberArgs struct {
	// An IAM Condition for a given binding.
	Condition iam.ConditionPtrInput
	// Identity that will be granted the privilege in role. The entry can have one of the following values:
	//
	//  * user:{emailid}: An email address that represents a specific Google account. For example, alice@gmail.com or joe@example.com.
	//  * serviceAccount:{emailid}: An email address that represents a service account. For example, my-other-app@appspot.gserviceaccount.com.
	//  * group:{emailid}: An email address that represents a Google group. For example, admins@example.com.
	//  * domain:{domain}: A G Suite domain (primary, instead of alias) name that represents all the users of that domain. For example, google.com or example.com.
	Member pulumi.StringInput
	// The name of the resource to manage IAM policies for.
	Name pulumi.StringInput
	// The role that should be applied.
	Role pulumi.StringInput
}

The set of arguments for constructing a DocumentIamMember resource.

func (DocumentIamMemberArgs) ElementType added in v0.32.0 

func (DocumentIamMemberArgs) ElementType() reflect.Type

type DocumentIamMemberInput added in v0.32.0 

type DocumentIamMemberInput interface {
	pulumi.Input

	ToDocumentIamMemberOutput() DocumentIamMemberOutput
	ToDocumentIamMemberOutputWithContext(ctx context.Context) DocumentIamMemberOutput
}

type DocumentIamMemberOutput added in v0.32.0 

type DocumentIamMemberOutput struct{ *pulumi.OutputState }

func (DocumentIamMemberOutput) Condition added in v0.32.0 

func (o DocumentIamMemberOutput) Condition() iam.ConditionPtrOutput

An IAM Condition for a given binding. See https://cloud.google.com/iam/docs/conditions-overview for additional details.

func (DocumentIamMemberOutput) ElementType added in v0.32.0 

func (DocumentIamMemberOutput) ElementType() reflect.Type

func (DocumentIamMemberOutput) Etag added in v0.32.0 

func (o DocumentIamMemberOutput) Etag() pulumi.StringOutput

The etag of the resource's IAM policy.

func (DocumentIamMemberOutput) Member added in v0.32.0 

func (o DocumentIamMemberOutput) Member() pulumi.StringOutput

Specifies the principals requesting access for a Google Cloud resource. `members` can have the following values: * `allUsers`: A special identifier that represents anyone who is on the internet; with or without a Google account. * `allAuthenticatedUsers`: A special identifier that represents anyone who is authenticated with a Google account or a service account. Does not include identities that come from external identity providers (IdPs) through identity federation. * `user:{emailid}`: An email address that represents a specific Google account. For example, `alice@example.com` . * `serviceAccount:{emailid}`: An email address that represents a Google service account. For example, `my-other-app@appspot.gserviceaccount.com`. * `serviceAccount:{projectid}.svc.id.goog[{namespace}/{kubernetes-sa}]`: An identifier for a [Kubernetes service account](https://cloud.google.com/kubernetes-engine/docs/how-to/kubernetes-service-accounts). For example, `my-project.svc.id.goog[my-namespace/my-kubernetes-sa]`. * `group:{emailid}`: An email address that represents a Google group. For example, `admins@example.com`. * `domain:{domain}`: The G Suite domain (primary) that represents all the users of that domain. For example, `google.com` or `example.com`. * `deleted:user:{emailid}?uid={uniqueid}`: An email address (plus unique identifier) representing a user that has been recently deleted. For example, `alice@example.com?uid=123456789012345678901`. If the user is recovered, this value reverts to `user:{emailid}` and the recovered user retains the role in the binding. * `deleted:serviceAccount:{emailid}?uid={uniqueid}`: An email address (plus unique identifier) representing a service account that has been recently deleted. For example, `my-other-app@appspot.gserviceaccount.com?uid=123456789012345678901`. If the service account is undeleted, this value reverts to `serviceAccount:{emailid}` and the undeleted service account retains the role in the binding. * `deleted:group:{emailid}?uid={uniqueid}`: An email address (plus unique identifier) representing a Google group that has been recently deleted. For example, `admins@example.com?uid=123456789012345678901`. If the group is recovered, this value reverts to `group:{emailid}` and the recovered group retains the role in the binding.

func (DocumentIamMemberOutput) Name added in v0.32.0 

func (o DocumentIamMemberOutput) Name() pulumi.StringOutput

The name of the resource to manage IAM policies for.

func (DocumentIamMemberOutput) Project added in v0.32.0 

func (o DocumentIamMemberOutput) Project() pulumi.StringOutput

The project in which the resource belongs. If it is not provided, a default will be supplied.

func (DocumentIamMemberOutput) Role added in v0.32.0 

func (o DocumentIamMemberOutput) Role() pulumi.StringOutput

Role that is assigned to the list of `members`, or principals. For example, `roles/viewer`, `roles/editor`, or `roles/owner`.

func (DocumentIamMemberOutput) ToDocumentIamMemberOutput added in v0.32.0 

func (o DocumentIamMemberOutput) ToDocumentIamMemberOutput() DocumentIamMemberOutput

func (DocumentIamMemberOutput) ToDocumentIamMemberOutputWithContext added in v0.32.0 

func (o DocumentIamMemberOutput) ToDocumentIamMemberOutputWithContext(ctx context.Context) DocumentIamMemberOutput

type DocumentIamMemberState added in v0.32.0 

type DocumentIamMemberState struct {
}

func (DocumentIamMemberState) ElementType added in v0.32.0 

func (DocumentIamMemberState) ElementType() reflect.Type

type DocumentIamPolicy added in v0.32.0 

type DocumentIamPolicy struct {
	pulumi.CustomResourceState

	// Associates a list of `members`, or principals, with a `role`. Optionally, may specify a `condition` that determines how and when the `bindings` are applied. Each of the `bindings` must contain at least one principal. The `bindings` in a `Policy` can refer to up to 1,500 principals; up to 250 of these principals can be Google groups. Each occurrence of a principal counts towards these limits. For example, if the `bindings` grant 50 different roles to `user:alice@example.com`, and not to any other principal, then you can add another 1,450 principals to the `bindings` in the `Policy`.
	Bindings BindingResponseArrayOutput `pulumi:"bindings"`
	// `etag` is used for optimistic concurrency control as a way to help prevent simultaneous updates of a policy from overwriting each other. It is strongly suggested that systems make use of the `etag` in the read-modify-write cycle to perform policy updates in order to avoid race conditions: An `etag` is returned in the response to `getIamPolicy`, and systems are expected to put that etag in the request to `setIamPolicy` to ensure that their change will be applied to the same version of the policy. **Important:** If you use IAM Conditions, you must include the `etag` field whenever you call `setIamPolicy`. If you omit this field, then IAM allows you to overwrite a version `3` policy with a version `1` policy, and all of the conditions in the version `3` policy are lost.
	Etag     pulumi.StringOutput `pulumi:"etag"`
	Location pulumi.StringOutput `pulumi:"location"`
	Project  pulumi.StringOutput `pulumi:"project"`
	// Specifies the format of the policy. Valid values are `0`, `1`, and `3`. Requests that specify an invalid value are rejected. Any operation that affects conditional role bindings must specify version `3`. This requirement applies to the following operations: * Getting a policy that includes a conditional role binding * Adding a conditional role binding to a policy * Changing a conditional role binding in a policy * Removing any role binding, with or without a condition, from a policy that includes conditions **Important:** If you use IAM Conditions, you must include the `etag` field whenever you call `setIamPolicy`. If you omit this field, then IAM allows you to overwrite a version `3` policy with a version `1` policy, and all of the conditions in the version `3` policy are lost. If a policy does not include any conditions, operations on that policy may specify any valid version or leave the field unset. To learn which resources support conditions in their IAM policies, see the [IAM documentation](https://cloud.google.com/iam/help/conditions/resource-policies).
	Version pulumi.IntOutput `pulumi:"version"`
}

Sets the access control policy on the specified resource. Replaces any existing policy. Can return `NOT_FOUND`, `INVALID_ARGUMENT`, and `PERMISSION_DENIED` errors. Note - this resource's API doesn't support deletion. When deleted, the resource will persist on Google Cloud even though it will be deleted from Pulumi state.

func GetDocumentIamPolicy added in v0.32.0 

func GetDocumentIamPolicy(ctx *pulumi.Context,
	name string, id pulumi.IDInput, state *DocumentIamPolicyState, opts ...pulumi.ResourceOption) (*DocumentIamPolicy, error)

GetDocumentIamPolicy gets an existing DocumentIamPolicy resource's state with the given name, ID, and optional state properties that are used to uniquely qualify the lookup (nil if not required).

func NewDocumentIamPolicy added in v0.32.0 

func NewDocumentIamPolicy(ctx *pulumi.Context,
	name string, args *DocumentIamPolicyArgs, opts ...pulumi.ResourceOption) (*DocumentIamPolicy, error)

NewDocumentIamPolicy registers a new resource with the given unique name, arguments, and options.

func (*DocumentIamPolicy) ElementType added in v0.32.0 

func (*DocumentIamPolicy) ElementType() reflect.Type

func (*DocumentIamPolicy) ToDocumentIamPolicyOutput added in v0.32.0 

func (i *DocumentIamPolicy) ToDocumentIamPolicyOutput() DocumentIamPolicyOutput

func (*DocumentIamPolicy) ToDocumentIamPolicyOutputWithContext added in v0.32.0 

func (i *DocumentIamPolicy) ToDocumentIamPolicyOutputWithContext(ctx context.Context) DocumentIamPolicyOutput

type DocumentIamPolicyArgs added in v0.32.0 

type DocumentIamPolicyArgs struct {
	// Associates a list of `members`, or principals, with a `role`. Optionally, may specify a `condition` that determines how and when the `bindings` are applied. Each of the `bindings` must contain at least one principal. The `bindings` in a `Policy` can refer to up to 1,500 principals; up to 250 of these principals can be Google groups. Each occurrence of a principal counts towards these limits. For example, if the `bindings` grant 50 different roles to `user:alice@example.com`, and not to any other principal, then you can add another 1,450 principals to the `bindings` in the `Policy`.
	Bindings BindingArrayInput
	// `etag` is used for optimistic concurrency control as a way to help prevent simultaneous updates of a policy from overwriting each other. It is strongly suggested that systems make use of the `etag` in the read-modify-write cycle to perform policy updates in order to avoid race conditions: An `etag` is returned in the response to `getIamPolicy`, and systems are expected to put that etag in the request to `setIamPolicy` to ensure that their change will be applied to the same version of the policy. **Important:** If you use IAM Conditions, you must include the `etag` field whenever you call `setIamPolicy`. If you omit this field, then IAM allows you to overwrite a version `3` policy with a version `1` policy, and all of the conditions in the version `3` policy are lost.
	Etag     pulumi.StringPtrInput
	Location pulumi.StringPtrInput
	Project  pulumi.StringPtrInput
	// Specifies the format of the policy. Valid values are `0`, `1`, and `3`. Requests that specify an invalid value are rejected. Any operation that affects conditional role bindings must specify version `3`. This requirement applies to the following operations: * Getting a policy that includes a conditional role binding * Adding a conditional role binding to a policy * Changing a conditional role binding in a policy * Removing any role binding, with or without a condition, from a policy that includes conditions **Important:** If you use IAM Conditions, you must include the `etag` field whenever you call `setIamPolicy`. If you omit this field, then IAM allows you to overwrite a version `3` policy with a version `1` policy, and all of the conditions in the version `3` policy are lost. If a policy does not include any conditions, operations on that policy may specify any valid version or leave the field unset. To learn which resources support conditions in their IAM policies, see the [IAM documentation](https://cloud.google.com/iam/help/conditions/resource-policies).
	Version pulumi.IntPtrInput
}

The set of arguments for constructing a DocumentIamPolicy resource.

func (DocumentIamPolicyArgs) ElementType added in v0.32.0 

func (DocumentIamPolicyArgs) ElementType() reflect.Type

type DocumentIamPolicyInput added in v0.32.0 

type DocumentIamPolicyInput interface {
	pulumi.Input

	ToDocumentIamPolicyOutput() DocumentIamPolicyOutput
	ToDocumentIamPolicyOutputWithContext(ctx context.Context) DocumentIamPolicyOutput
}

type DocumentIamPolicyOutput added in v0.32.0 

type DocumentIamPolicyOutput struct{ *pulumi.OutputState }

func (DocumentIamPolicyOutput) Bindings added in v0.32.0 

func (o DocumentIamPolicyOutput) Bindings() BindingResponseArrayOutput

Associates a list of `members`, or principals, with a `role`. Optionally, may specify a `condition` that determines how and when the `bindings` are applied. Each of the `bindings` must contain at least one principal. The `bindings` in a `Policy` can refer to up to 1,500 principals; up to 250 of these principals can be Google groups. Each occurrence of a principal counts towards these limits. For example, if the `bindings` grant 50 different roles to `user:alice@example.com`, and not to any other principal, then you can add another 1,450 principals to the `bindings` in the `Policy`.

func (DocumentIamPolicyOutput) ElementType added in v0.32.0 

func (DocumentIamPolicyOutput) ElementType() reflect.Type

func (DocumentIamPolicyOutput) Etag added in v0.32.0 

func (o DocumentIamPolicyOutput) Etag() pulumi.StringOutput

`etag` is used for optimistic concurrency control as a way to help prevent simultaneous updates of a policy from overwriting each other. It is strongly suggested that systems make use of the `etag` in the read-modify-write cycle to perform policy updates in order to avoid race conditions: An `etag` is returned in the response to `getIamPolicy`, and systems are expected to put that etag in the request to `setIamPolicy` to ensure that their change will be applied to the same version of the policy. **Important:** If you use IAM Conditions, you must include the `etag` field whenever you call `setIamPolicy`. If you omit this field, then IAM allows you to overwrite a version `3` policy with a version `1` policy, and all of the conditions in the version `3` policy are lost.

func (DocumentIamPolicyOutput) Location added in v0.32.0 

func (o DocumentIamPolicyOutput) Location() pulumi.StringOutput

func (DocumentIamPolicyOutput) Project added in v0.32.0 

func (o DocumentIamPolicyOutput) Project() pulumi.StringOutput

func (DocumentIamPolicyOutput) ToDocumentIamPolicyOutput added in v0.32.0 

func (o DocumentIamPolicyOutput) ToDocumentIamPolicyOutput() DocumentIamPolicyOutput

func (DocumentIamPolicyOutput) ToDocumentIamPolicyOutputWithContext added in v0.32.0 

func (o DocumentIamPolicyOutput) ToDocumentIamPolicyOutputWithContext(ctx context.Context) DocumentIamPolicyOutput

func (DocumentIamPolicyOutput) Version added in v0.32.0 

func (o DocumentIamPolicyOutput) Version() pulumi.IntOutput

Specifies the format of the policy. Valid values are `0`, `1`, and `3`. Requests that specify an invalid value are rejected. Any operation that affects conditional role bindings must specify version `3`. This requirement applies to the following operations: * Getting a policy that includes a conditional role binding * Adding a conditional role binding to a policy * Changing a conditional role binding in a policy * Removing any role binding, with or without a condition, from a policy that includes conditions **Important:** If you use IAM Conditions, you must include the `etag` field whenever you call `setIamPolicy`. If you omit this field, then IAM allows you to overwrite a version `3` policy with a version `1` policy, and all of the conditions in the version `3` policy are lost. If a policy does not include any conditions, operations on that policy may specify any valid version or leave the field unset. To learn which resources support conditions in their IAM policies, see the [IAM documentation](https://cloud.google.com/iam/help/conditions/resource-policies).

type DocumentIamPolicyState added in v0.32.0 

type DocumentIamPolicyState struct {
}

func (DocumentIamPolicyState) ElementType added in v0.32.0 

func (DocumentIamPolicyState) ElementType() reflect.Type

type Expr 

type Expr struct {
	// Optional. Description of the expression. This is a longer text which describes the expression, e.g. when hovered over it in a UI.
	Description *string `pulumi:"description"`
	// Textual representation of an expression in Common Expression Language syntax.
	Expression *string `pulumi:"expression"`
	// Optional. String indicating the location of the expression for error reporting, e.g. a file name and a position in the file.
	Location *string `pulumi:"location"`
	// Optional. Title for the expression, i.e. a short string describing its purpose. This can be used e.g. in UIs which allow to enter the expression.
	Title *string `pulumi:"title"`
}

Represents a textual expression in the Common Expression Language (CEL) syntax. CEL is a C-like expression language. The syntax and semantics of CEL are documented at https://github.com/google/cel-spec. Example (Comparison): title: "Summary size limit" description: "Determines if a summary is less than 100 chars" expression: "document.summary.size() < 100" Example (Equality): title: "Requestor is owner" description: "Determines if requestor is the document owner" expression: "document.owner == request.auth.claims.email" Example (Logic): title: "Public documents" description: "Determine whether the document should be publicly visible" expression: "document.type != 'private' && document.type != 'internal'" Example (Data Manipulation): title: "Notification string" description: "Create a notification string with a timestamp." expression: "'New message received at ' + string(document.create_time)" The exact variables and functions that may be referenced within an expression are determined by the service that evaluates it. See the service documentation for additional information.

type ExprArgs 

type ExprArgs struct {
	// Optional. Description of the expression. This is a longer text which describes the expression, e.g. when hovered over it in a UI.
	Description pulumi.StringPtrInput `pulumi:"description"`
	// Textual representation of an expression in Common Expression Language syntax.
	Expression pulumi.StringPtrInput `pulumi:"expression"`
	// Optional. String indicating the location of the expression for error reporting, e.g. a file name and a position in the file.
	Location pulumi.StringPtrInput `pulumi:"location"`
	// Optional. Title for the expression, i.e. a short string describing its purpose. This can be used e.g. in UIs which allow to enter the expression.
	Title pulumi.StringPtrInput `pulumi:"title"`
}

Represents a textual expression in the Common Expression Language (CEL) syntax. CEL is a C-like expression language. The syntax and semantics of CEL are documented at https://github.com/google/cel-spec. Example (Comparison): title: "Summary size limit" description: "Determines if a summary is less than 100 chars" expression: "document.summary.size() < 100" Example (Equality): title: "Requestor is owner" description: "Determines if requestor is the document owner" expression: "document.owner == request.auth.claims.email" Example (Logic): title: "Public documents" description: "Determine whether the document should be publicly visible" expression: "document.type != 'private' && document.type != 'internal'" Example (Data Manipulation): title: "Notification string" description: "Create a notification string with a timestamp." expression: "'New message received at ' + string(document.create_time)" The exact variables and functions that may be referenced within an expression are determined by the service that evaluates it. See the service documentation for additional information.

func (ExprArgs) ElementType 

func (ExprArgs) ElementType() reflect.Type

func (ExprArgs) ToExprOutput 

func (i ExprArgs) ToExprOutput() ExprOutput

func (ExprArgs) ToExprOutputWithContext 

func (i ExprArgs) ToExprOutputWithContext(ctx context.Context) ExprOutput

func (ExprArgs) ToExprPtrOutput 

func (i ExprArgs) ToExprPtrOutput() ExprPtrOutput

func (ExprArgs) ToExprPtrOutputWithContext 

func (i ExprArgs) ToExprPtrOutputWithContext(ctx context.Context) ExprPtrOutput

type ExprInput 

type ExprInput interface {
	pulumi.Input

	ToExprOutput() ExprOutput
	ToExprOutputWithContext(context.Context) ExprOutput
}

ExprInput is an input type that accepts ExprArgs and ExprOutput values. You can construct a concrete instance of `ExprInput` via: 

ExprArgs{...}

type ExprOutput 

type ExprOutput struct{ *pulumi.OutputState }

Represents a textual expression in the Common Expression Language (CEL) syntax. CEL is a C-like expression language. The syntax and semantics of CEL are documented at https://github.com/google/cel-spec. Example (Comparison): title: "Summary size limit" description: "Determines if a summary is less than 100 chars" expression: "document.summary.size() < 100" Example (Equality): title: "Requestor is owner" description: "Determines if requestor is the document owner" expression: "document.owner == request.auth.claims.email" Example (Logic): title: "Public documents" description: "Determine whether the document should be publicly visible" expression: "document.type != 'private' && document.type != 'internal'" Example (Data Manipulation): title: "Notification string" description: "Create a notification string with a timestamp." expression: "'New message received at ' + string(document.create_time)" The exact variables and functions that may be referenced within an expression are determined by the service that evaluates it. See the service documentation for additional information.

func (ExprOutput) Description 

func (o ExprOutput) Description() pulumi.StringPtrOutput

Optional. Description of the expression. This is a longer text which describes the expression, e.g. when hovered over it in a UI.

func (ExprOutput) ElementType 

func (ExprOutput) ElementType() reflect.Type

func (ExprOutput) Expression 

func (o ExprOutput) Expression() pulumi.StringPtrOutput

Textual representation of an expression in Common Expression Language syntax.

func (ExprOutput) Location 

func (o ExprOutput) Location() pulumi.StringPtrOutput

Optional. String indicating the location of the expression for error reporting, e.g. a file name and a position in the file.

func (ExprOutput) Title 

func (o ExprOutput) Title() pulumi.StringPtrOutput

Optional. Title for the expression, i.e. a short string describing its purpose. This can be used e.g. in UIs which allow to enter the expression.

func (ExprOutput) ToExprOutput 

func (o ExprOutput) ToExprOutput() ExprOutput

func (ExprOutput) ToExprOutputWithContext 

func (o ExprOutput) ToExprOutputWithContext(ctx context.Context) ExprOutput

func (ExprOutput) ToExprPtrOutput 

func (o ExprOutput) ToExprPtrOutput() ExprPtrOutput

func (ExprOutput) ToExprPtrOutputWithContext 

func (o ExprOutput) ToExprPtrOutputWithContext(ctx context.Context) ExprPtrOutput

type ExprPtrInput 

type ExprPtrInput interface {
	pulumi.Input

	ToExprPtrOutput() ExprPtrOutput
	ToExprPtrOutputWithContext(context.Context) ExprPtrOutput
}

ExprPtrInput is an input type that accepts ExprArgs, ExprPtr and ExprPtrOutput values. You can construct a concrete instance of `ExprPtrInput` via: 

        ExprArgs{...}

or:

        nil

func ExprPtr 

func ExprPtr(v *ExprArgs) ExprPtrInput

type ExprPtrOutput 

type ExprPtrOutput struct{ *pulumi.OutputState }

func (ExprPtrOutput) Description 

func (o ExprPtrOutput) Description() pulumi.StringPtrOutput

Optional. Description of the expression. This is a longer text which describes the expression, e.g. when hovered over it in a UI.

func (ExprPtrOutput) Elem 

func (o ExprPtrOutput) Elem() ExprOutput

func (ExprPtrOutput) ElementType 

func (ExprPtrOutput) ElementType() reflect.Type

func (ExprPtrOutput) Expression 

func (o ExprPtrOutput) Expression() pulumi.StringPtrOutput

Textual representation of an expression in Common Expression Language syntax.

func (ExprPtrOutput) Location 

func (o ExprPtrOutput) Location() pulumi.StringPtrOutput

Optional. String indicating the location of the expression for error reporting, e.g. a file name and a position in the file.

func (ExprPtrOutput) Title 

func (o ExprPtrOutput) Title() pulumi.StringPtrOutput

Optional. Title for the expression, i.e. a short string describing its purpose. This can be used e.g. in UIs which allow to enter the expression.

func (ExprPtrOutput) ToExprPtrOutput 

func (o ExprPtrOutput) ToExprPtrOutput() ExprPtrOutput

func (ExprPtrOutput) ToExprPtrOutputWithContext 

func (o ExprPtrOutput) ToExprPtrOutputWithContext(ctx context.Context) ExprPtrOutput

type ExprResponse 

type ExprResponse struct {
	// Optional. Description of the expression. This is a longer text which describes the expression, e.g. when hovered over it in a UI.
	Description string `pulumi:"description"`
	// Textual representation of an expression in Common Expression Language syntax.
	Expression string `pulumi:"expression"`
	// Optional. String indicating the location of the expression for error reporting, e.g. a file name and a position in the file.
	Location string `pulumi:"location"`
	// Optional. Title for the expression, i.e. a short string describing its purpose. This can be used e.g. in UIs which allow to enter the expression.
	Title string `pulumi:"title"`
}

Represents a textual expression in the Common Expression Language (CEL) syntax. CEL is a C-like expression language. The syntax and semantics of CEL are documented at https://github.com/google/cel-spec. Example (Comparison): title: "Summary size limit" description: "Determines if a summary is less than 100 chars" expression: "document.summary.size() < 100" Example (Equality): title: "Requestor is owner" description: "Determines if requestor is the document owner" expression: "document.owner == request.auth.claims.email" Example (Logic): title: "Public documents" description: "Determine whether the document should be publicly visible" expression: "document.type != 'private' && document.type != 'internal'" Example (Data Manipulation): title: "Notification string" description: "Create a notification string with a timestamp." expression: "'New message received at ' + string(document.create_time)" The exact variables and functions that may be referenced within an expression are determined by the service that evaluates it. See the service documentation for additional information.

type ExprResponseOutput 

type ExprResponseOutput struct{ *pulumi.OutputState }

Represents a textual expression in the Common Expression Language (CEL) syntax. CEL is a C-like expression language. The syntax and semantics of CEL are documented at https://github.com/google/cel-spec. Example (Comparison): title: "Summary size limit" description: "Determines if a summary is less than 100 chars" expression: "document.summary.size() < 100" Example (Equality): title: "Requestor is owner" description: "Determines if requestor is the document owner" expression: "document.owner == request.auth.claims.email" Example (Logic): title: "Public documents" description: "Determine whether the document should be publicly visible" expression: "document.type != 'private' && document.type != 'internal'" Example (Data Manipulation): title: "Notification string" description: "Create a notification string with a timestamp." expression: "'New message received at ' + string(document.create_time)" The exact variables and functions that may be referenced within an expression are determined by the service that evaluates it. See the service documentation for additional information.

func (ExprResponseOutput) Description 

func (o ExprResponseOutput) Description() pulumi.StringOutput

Optional. Description of the expression. This is a longer text which describes the expression, e.g. when hovered over it in a UI.

func (ExprResponseOutput) ElementType 

func (ExprResponseOutput) ElementType() reflect.Type

func (ExprResponseOutput) Expression 

func (o ExprResponseOutput) Expression() pulumi.StringOutput

Textual representation of an expression in Common Expression Language syntax.

func (ExprResponseOutput) Location 

func (o ExprResponseOutput) Location() pulumi.StringOutput

Optional. String indicating the location of the expression for error reporting, e.g. a file name and a position in the file.

func (ExprResponseOutput) Title 

func (o ExprResponseOutput) Title() pulumi.StringOutput

Optional. Title for the expression, i.e. a short string describing its purpose. This can be used e.g. in UIs which allow to enter the expression.

func (ExprResponseOutput) ToExprResponseOutput 

func (o ExprResponseOutput) ToExprResponseOutput() ExprResponseOutput

func (ExprResponseOutput) ToExprResponseOutputWithContext 

func (o ExprResponseOutput) ToExprResponseOutputWithContext(ctx context.Context) ExprResponseOutput

type Instance 

type Instance struct {
	pulumi.CustomResourceState

	// Build info of the Instance if it's in `ACTIVE` state.
	Build BuildResponseOutput `pulumi:"build"`
	// Config of the Instance.
	Config ConfigResponseOutput `pulumi:"config"`
	// Creation timestamp.
	CreateTime pulumi.StringOutput `pulumi:"createTime"`
	// Required. Identifier to assign to the Instance. Must be unique within scope of the parent resource.
	InstanceId pulumi.StringOutput `pulumi:"instanceId"`
	Location   pulumi.StringOutput `pulumi:"location"`
	// Format: `projects/*/locations/*/instance`. Currently only `locations/global` is supported.
	Name    pulumi.StringOutput `pulumi:"name"`
	Project pulumi.StringOutput `pulumi:"project"`
	// The current state of the Instance.
	State pulumi.StringOutput `pulumi:"state"`
	// Extra information of Instance.State if the state is `FAILED`.
	StateMessage pulumi.StringOutput `pulumi:"stateMessage"`
	// Last update timestamp.
	UpdateTime pulumi.StringOutput `pulumi:"updateTime"`
}

Provisions instance resources for the Registry. Auto-naming is currently not supported for this resource.

func GetInstance 

func GetInstance(ctx *pulumi.Context,
	name string, id pulumi.IDInput, state *InstanceState, opts ...pulumi.ResourceOption) (*Instance, error)

GetInstance gets an existing Instance resource's state with the given name, ID, and optional state properties that are used to uniquely qualify the lookup (nil if not required).

func NewInstance 

func NewInstance(ctx *pulumi.Context,
	name string, args *InstanceArgs, opts ...pulumi.ResourceOption) (*Instance, error)

NewInstance registers a new resource with the given unique name, arguments, and options.

func (*Instance) ElementType 

func (*Instance) ElementType() reflect.Type

func (*Instance) ToInstanceOutput 

func (i *Instance) ToInstanceOutput() InstanceOutput

func (*Instance) ToInstanceOutputWithContext 

func (i *Instance) ToInstanceOutputWithContext(ctx context.Context) InstanceOutput

type InstanceArgs 

type InstanceArgs struct {
	// Config of the Instance.
	Config ConfigInput
	// Required. Identifier to assign to the Instance. Must be unique within scope of the parent resource.
	InstanceId pulumi.StringInput
	Location   pulumi.StringPtrInput
	// Format: `projects/*/locations/*/instance`. Currently only `locations/global` is supported.
	Name    pulumi.StringPtrInput
	Project pulumi.StringPtrInput
}

The set of arguments for constructing a Instance resource.

func (InstanceArgs) ElementType 

func (InstanceArgs) ElementType() reflect.Type

type InstanceIamBinding added in v0.26.0 

type InstanceIamBinding struct {
	pulumi.CustomResourceState

	// An IAM Condition for a given binding. See https://cloud.google.com/iam/docs/conditions-overview for additional details.
	Condition iam.ConditionPtrOutput `pulumi:"condition"`
	// The etag of the resource's IAM policy.
	Etag pulumi.StringOutput `pulumi:"etag"`
	// Specifies the principals requesting access for a Google Cloud resource. `members` can have the following values: * `allUsers`: A special identifier that represents anyone who is on the internet; with or without a Google account. * `allAuthenticatedUsers`: A special identifier that represents anyone who is authenticated with a Google account or a service account. Does not include identities that come from external identity providers (IdPs) through identity federation. * `user:{emailid}`: An email address that represents a specific Google account. For example, `alice@example.com` . * `serviceAccount:{emailid}`: An email address that represents a Google service account. For example, `my-other-app@appspot.gserviceaccount.com`. * `serviceAccount:{projectid}.svc.id.goog[{namespace}/{kubernetes-sa}]`: An identifier for a [Kubernetes service account](https://cloud.google.com/kubernetes-engine/docs/how-to/kubernetes-service-accounts). For example, `my-project.svc.id.goog[my-namespace/my-kubernetes-sa]`. * `group:{emailid}`: An email address that represents a Google group. For example, `admins@example.com`. * `domain:{domain}`: The G Suite domain (primary) that represents all the users of that domain. For example, `google.com` or `example.com`. * `deleted:user:{emailid}?uid={uniqueid}`: An email address (plus unique identifier) representing a user that has been recently deleted. For example, `alice@example.com?uid=123456789012345678901`. If the user is recovered, this value reverts to `user:{emailid}` and the recovered user retains the role in the binding. * `deleted:serviceAccount:{emailid}?uid={uniqueid}`: An email address (plus unique identifier) representing a service account that has been recently deleted. For example, `my-other-app@appspot.gserviceaccount.com?uid=123456789012345678901`. If the service account is undeleted, this value reverts to `serviceAccount:{emailid}` and the undeleted service account retains the role in the binding. * `deleted:group:{emailid}?uid={uniqueid}`: An email address (plus unique identifier) representing a Google group that has been recently deleted. For example, `admins@example.com?uid=123456789012345678901`. If the group is recovered, this value reverts to `group:{emailid}` and the recovered group retains the role in the binding.
	Members pulumi.StringArrayOutput `pulumi:"members"`
	// The name of the resource to manage IAM policies for.
	Name pulumi.StringOutput `pulumi:"name"`
	// The project in which the resource belongs. If it is not provided, a default will be supplied.
	Project pulumi.StringOutput `pulumi:"project"`
	// Role that is assigned to the list of `members`, or principals. For example, `roles/viewer`, `roles/editor`, or `roles/owner`.
	Role pulumi.StringOutput `pulumi:"role"`
}

Sets the access control policy on the specified resource. Replaces any existing policy. Can return `NOT_FOUND`, `INVALID_ARGUMENT`, and `PERMISSION_DENIED` errors.

func GetInstanceIamBinding added in v0.26.0 

func GetInstanceIamBinding(ctx *pulumi.Context,
	name string, id pulumi.IDInput, state *InstanceIamBindingState, opts ...pulumi.ResourceOption) (*InstanceIamBinding, error)

GetInstanceIamBinding gets an existing InstanceIamBinding resource's state with the given name, ID, and optional state properties that are used to uniquely qualify the lookup (nil if not required).

func NewInstanceIamBinding added in v0.26.0 

func NewInstanceIamBinding(ctx *pulumi.Context,
	name string, args *InstanceIamBindingArgs, opts ...pulumi.ResourceOption) (*InstanceIamBinding, error)

NewInstanceIamBinding registers a new resource with the given unique name, arguments, and options.

func (*InstanceIamBinding) ElementType added in v0.26.0 

func (*InstanceIamBinding) ElementType() reflect.Type

func (*InstanceIamBinding) ToInstanceIamBindingOutput added in v0.26.0 

func (i *InstanceIamBinding) ToInstanceIamBindingOutput() InstanceIamBindingOutput

func (*InstanceIamBinding) ToInstanceIamBindingOutputWithContext added in v0.26.0 

func (i *InstanceIamBinding) ToInstanceIamBindingOutputWithContext(ctx context.Context) InstanceIamBindingOutput

type InstanceIamBindingArgs added in v0.26.0 

type InstanceIamBindingArgs struct {
	// An IAM Condition for a given binding.
	Condition iam.ConditionPtrInput
	// Identities that will be granted the privilege in role. Each entry can have one of the following values:
	//
	//  * user:{emailid}: An email address that represents a specific Google account. For example, alice@gmail.com or joe@example.com.
	//  * serviceAccount:{emailid}: An email address that represents a service account. For example, my-other-app@appspot.gserviceaccount.com.
	//  * group:{emailid}: An email address that represents a Google group. For example, admins@example.com.
	//  * domain:{domain}: A G Suite domain (primary, instead of alias) name that represents all the users of that domain. For example, google.com or example.com.
	Members pulumi.StringArrayInput
	// The name of the resource to manage IAM policies for.
	Name pulumi.StringInput
	// The role that should be applied. Only one `IamBinding` can be used per role.
	Role pulumi.StringInput
}

The set of arguments for constructing a InstanceIamBinding resource.

func (InstanceIamBindingArgs) ElementType added in v0.26.0 

func (InstanceIamBindingArgs) ElementType() reflect.Type

type InstanceIamBindingInput added in v0.26.0 

type InstanceIamBindingInput interface {
	pulumi.Input

	ToInstanceIamBindingOutput() InstanceIamBindingOutput
	ToInstanceIamBindingOutputWithContext(ctx context.Context) InstanceIamBindingOutput
}

type InstanceIamBindingOutput added in v0.26.0 

type InstanceIamBindingOutput struct{ *pulumi.OutputState }

func (InstanceIamBindingOutput) Condition added in v0.26.0 

func (o InstanceIamBindingOutput) Condition() iam.ConditionPtrOutput

An IAM Condition for a given binding. See https://cloud.google.com/iam/docs/conditions-overview for additional details.

func (InstanceIamBindingOutput) ElementType added in v0.26.0 

func (InstanceIamBindingOutput) ElementType() reflect.Type

func (InstanceIamBindingOutput) Etag added in v0.26.0 

func (o InstanceIamBindingOutput) Etag() pulumi.StringOutput

The etag of the resource's IAM policy.

func (InstanceIamBindingOutput) Members added in v0.26.0 

func (o InstanceIamBindingOutput) Members() pulumi.StringArrayOutput

Specifies the principals requesting access for a Google Cloud resource. `members` can have the following values: * `allUsers`: A special identifier that represents anyone who is on the internet; with or without a Google account. * `allAuthenticatedUsers`: A special identifier that represents anyone who is authenticated with a Google account or a service account. Does not include identities that come from external identity providers (IdPs) through identity federation. * `user:{emailid}`: An email address that represents a specific Google account. For example, `alice@example.com` . * `serviceAccount:{emailid}`: An email address that represents a Google service account. For example, `my-other-app@appspot.gserviceaccount.com`. * `serviceAccount:{projectid}.svc.id.goog[{namespace}/{kubernetes-sa}]`: An identifier for a [Kubernetes service account](https://cloud.google.com/kubernetes-engine/docs/how-to/kubernetes-service-accounts). For example, `my-project.svc.id.goog[my-namespace/my-kubernetes-sa]`. * `group:{emailid}`: An email address that represents a Google group. For example, `admins@example.com`. * `domain:{domain}`: The G Suite domain (primary) that represents all the users of that domain. For example, `google.com` or `example.com`. * `deleted:user:{emailid}?uid={uniqueid}`: An email address (plus unique identifier) representing a user that has been recently deleted. For example, `alice@example.com?uid=123456789012345678901`. If the user is recovered, this value reverts to `user:{emailid}` and the recovered user retains the role in the binding. * `deleted:serviceAccount:{emailid}?uid={uniqueid}`: An email address (plus unique identifier) representing a service account that has been recently deleted. For example, `my-other-app@appspot.gserviceaccount.com?uid=123456789012345678901`. If the service account is undeleted, this value reverts to `serviceAccount:{emailid}` and the undeleted service account retains the role in the binding. * `deleted:group:{emailid}?uid={uniqueid}`: An email address (plus unique identifier) representing a Google group that has been recently deleted. For example, `admins@example.com?uid=123456789012345678901`. If the group is recovered, this value reverts to `group:{emailid}` and the recovered group retains the role in the binding.

func (InstanceIamBindingOutput) Name added in v0.26.0 

func (o InstanceIamBindingOutput) Name() pulumi.StringOutput

The name of the resource to manage IAM policies for.

func (InstanceIamBindingOutput) Project added in v0.26.0 

func (o InstanceIamBindingOutput) Project() pulumi.StringOutput

The project in which the resource belongs. If it is not provided, a default will be supplied.

func (InstanceIamBindingOutput) Role added in v0.26.0 

func (o InstanceIamBindingOutput) Role() pulumi.StringOutput

Role that is assigned to the list of `members`, or principals. For example, `roles/viewer`, `roles/editor`, or `roles/owner`.

func (InstanceIamBindingOutput) ToInstanceIamBindingOutput added in v0.26.0 

func (o InstanceIamBindingOutput) ToInstanceIamBindingOutput() InstanceIamBindingOutput

func (InstanceIamBindingOutput) ToInstanceIamBindingOutputWithContext added in v0.26.0 

func (o InstanceIamBindingOutput) ToInstanceIamBindingOutputWithContext(ctx context.Context) InstanceIamBindingOutput

type InstanceIamBindingState added in v0.26.0 

type InstanceIamBindingState struct {
}

func (InstanceIamBindingState) ElementType added in v0.26.0 

func (InstanceIamBindingState) ElementType() reflect.Type

type InstanceIamMember added in v0.26.0 

type InstanceIamMember struct {
	pulumi.CustomResourceState

	// An IAM Condition for a given binding. See https://cloud.google.com/iam/docs/conditions-overview for additional details.
	Condition iam.ConditionPtrOutput `pulumi:"condition"`
	// The etag of the resource's IAM policy.
	Etag pulumi.StringOutput `pulumi:"etag"`
	// Specifies the principals requesting access for a Google Cloud resource. `members` can have the following values: * `allUsers`: A special identifier that represents anyone who is on the internet; with or without a Google account. * `allAuthenticatedUsers`: A special identifier that represents anyone who is authenticated with a Google account or a service account. Does not include identities that come from external identity providers (IdPs) through identity federation. * `user:{emailid}`: An email address that represents a specific Google account. For example, `alice@example.com` . * `serviceAccount:{emailid}`: An email address that represents a Google service account. For example, `my-other-app@appspot.gserviceaccount.com`. * `serviceAccount:{projectid}.svc.id.goog[{namespace}/{kubernetes-sa}]`: An identifier for a [Kubernetes service account](https://cloud.google.com/kubernetes-engine/docs/how-to/kubernetes-service-accounts). For example, `my-project.svc.id.goog[my-namespace/my-kubernetes-sa]`. * `group:{emailid}`: An email address that represents a Google group. For example, `admins@example.com`. * `domain:{domain}`: The G Suite domain (primary) that represents all the users of that domain. For example, `google.com` or `example.com`. * `deleted:user:{emailid}?uid={uniqueid}`: An email address (plus unique identifier) representing a user that has been recently deleted. For example, `alice@example.com?uid=123456789012345678901`. If the user is recovered, this value reverts to `user:{emailid}` and the recovered user retains the role in the binding. * `deleted:serviceAccount:{emailid}?uid={uniqueid}`: An email address (plus unique identifier) representing a service account that has been recently deleted. For example, `my-other-app@appspot.gserviceaccount.com?uid=123456789012345678901`. If the service account is undeleted, this value reverts to `serviceAccount:{emailid}` and the undeleted service account retains the role in the binding. * `deleted:group:{emailid}?uid={uniqueid}`: An email address (plus unique identifier) representing a Google group that has been recently deleted. For example, `admins@example.com?uid=123456789012345678901`. If the group is recovered, this value reverts to `group:{emailid}` and the recovered group retains the role in the binding.
	Member pulumi.StringOutput `pulumi:"member"`
	// The name of the resource to manage IAM policies for.
	Name pulumi.StringOutput `pulumi:"name"`
	// The project in which the resource belongs. If it is not provided, a default will be supplied.
	Project pulumi.StringOutput `pulumi:"project"`
	// Role that is assigned to the list of `members`, or principals. For example, `roles/viewer`, `roles/editor`, or `roles/owner`.
	Role pulumi.StringOutput `pulumi:"role"`
}

Sets the access control policy on the specified resource. Replaces any existing policy. Can return `NOT_FOUND`, `INVALID_ARGUMENT`, and `PERMISSION_DENIED` errors.

func GetInstanceIamMember added in v0.26.0 

func GetInstanceIamMember(ctx *pulumi.Context,
	name string, id pulumi.IDInput, state *InstanceIamMemberState, opts ...pulumi.ResourceOption) (*InstanceIamMember, error)

GetInstanceIamMember gets an existing InstanceIamMember resource's state with the given name, ID, and optional state properties that are used to uniquely qualify the lookup (nil if not required).

func NewInstanceIamMember added in v0.26.0 

func NewInstanceIamMember(ctx *pulumi.Context,
	name string, args *InstanceIamMemberArgs, opts ...pulumi.ResourceOption) (*InstanceIamMember, error)

NewInstanceIamMember registers a new resource with the given unique name, arguments, and options.

func (*InstanceIamMember) ElementType added in v0.26.0 

func (*InstanceIamMember) ElementType() reflect.Type

func (*InstanceIamMember) ToInstanceIamMemberOutput added in v0.26.0 

func (i *InstanceIamMember) ToInstanceIamMemberOutput() InstanceIamMemberOutput

func (*InstanceIamMember) ToInstanceIamMemberOutputWithContext added in v0.26.0 

func (i *InstanceIamMember) ToInstanceIamMemberOutputWithContext(ctx context.Context) InstanceIamMemberOutput

type InstanceIamMemberArgs added in v0.26.0 

type InstanceIamMemberArgs struct {
	// An IAM Condition for a given binding.
	Condition iam.ConditionPtrInput
	// Identity that will be granted the privilege in role. The entry can have one of the following values:
	//
	//  * user:{emailid}: An email address that represents a specific Google account. For example, alice@gmail.com or joe@example.com.
	//  * serviceAccount:{emailid}: An email address that represents a service account. For example, my-other-app@appspot.gserviceaccount.com.
	//  * group:{emailid}: An email address that represents a Google group. For example, admins@example.com.
	//  * domain:{domain}: A G Suite domain (primary, instead of alias) name that represents all the users of that domain. For example, google.com or example.com.
	Member pulumi.StringInput
	// The name of the resource to manage IAM policies for.
	Name pulumi.StringInput
	// The role that should be applied.
	Role pulumi.StringInput
}

The set of arguments for constructing a InstanceIamMember resource.

func (InstanceIamMemberArgs) ElementType added in v0.26.0 

func (InstanceIamMemberArgs) ElementType() reflect.Type

type InstanceIamMemberInput added in v0.26.0 

type InstanceIamMemberInput interface {
	pulumi.Input

	ToInstanceIamMemberOutput() InstanceIamMemberOutput
	ToInstanceIamMemberOutputWithContext(ctx context.Context) InstanceIamMemberOutput
}

type InstanceIamMemberOutput added in v0.26.0 

type InstanceIamMemberOutput struct{ *pulumi.OutputState }

func (InstanceIamMemberOutput) Condition added in v0.26.0 

func (o InstanceIamMemberOutput) Condition() iam.ConditionPtrOutput

An IAM Condition for a given binding. See https://cloud.google.com/iam/docs/conditions-overview for additional details.

func (InstanceIamMemberOutput) ElementType added in v0.26.0 

func (InstanceIamMemberOutput) ElementType() reflect.Type

func (InstanceIamMemberOutput) Etag added in v0.26.0 

func (o InstanceIamMemberOutput) Etag() pulumi.StringOutput

The etag of the resource's IAM policy.

func (InstanceIamMemberOutput) Member added in v0.26.0 

func (o InstanceIamMemberOutput) Member() pulumi.StringOutput

Specifies the principals requesting access for a Google Cloud resource. `members` can have the following values: * `allUsers`: A special identifier that represents anyone who is on the internet; with or without a Google account. * `allAuthenticatedUsers`: A special identifier that represents anyone who is authenticated with a Google account or a service account. Does not include identities that come from external identity providers (IdPs) through identity federation. * `user:{emailid}`: An email address that represents a specific Google account. For example, `alice@example.com` . * `serviceAccount:{emailid}`: An email address that represents a Google service account. For example, `my-other-app@appspot.gserviceaccount.com`. * `serviceAccount:{projectid}.svc.id.goog[{namespace}/{kubernetes-sa}]`: An identifier for a [Kubernetes service account](https://cloud.google.com/kubernetes-engine/docs/how-to/kubernetes-service-accounts). For example, `my-project.svc.id.goog[my-namespace/my-kubernetes-sa]`. * `group:{emailid}`: An email address that represents a Google group. For example, `admins@example.com`. * `domain:{domain}`: The G Suite domain (primary) that represents all the users of that domain. For example, `google.com` or `example.com`. * `deleted:user:{emailid}?uid={uniqueid}`: An email address (plus unique identifier) representing a user that has been recently deleted. For example, `alice@example.com?uid=123456789012345678901`. If the user is recovered, this value reverts to `user:{emailid}` and the recovered user retains the role in the binding. * `deleted:serviceAccount:{emailid}?uid={uniqueid}`: An email address (plus unique identifier) representing a service account that has been recently deleted. For example, `my-other-app@appspot.gserviceaccount.com?uid=123456789012345678901`. If the service account is undeleted, this value reverts to `serviceAccount:{emailid}` and the undeleted service account retains the role in the binding. * `deleted:group:{emailid}?uid={uniqueid}`: An email address (plus unique identifier) representing a Google group that has been recently deleted. For example, `admins@example.com?uid=123456789012345678901`. If the group is recovered, this value reverts to `group:{emailid}` and the recovered group retains the role in the binding.

func (InstanceIamMemberOutput) Name added in v0.26.0 

func (o InstanceIamMemberOutput) Name() pulumi.StringOutput

The name of the resource to manage IAM policies for.

func (InstanceIamMemberOutput) Project added in v0.26.0 

func (o InstanceIamMemberOutput) Project() pulumi.StringOutput

The project in which the resource belongs. If it is not provided, a default will be supplied.

func (InstanceIamMemberOutput) Role added in v0.26.0 

func (o InstanceIamMemberOutput) Role() pulumi.StringOutput

Role that is assigned to the list of `members`, or principals. For example, `roles/viewer`, `roles/editor`, or `roles/owner`.

func (InstanceIamMemberOutput) ToInstanceIamMemberOutput added in v0.26.0 

func (o InstanceIamMemberOutput) ToInstanceIamMemberOutput() InstanceIamMemberOutput

func (InstanceIamMemberOutput) ToInstanceIamMemberOutputWithContext added in v0.26.0 

func (o InstanceIamMemberOutput) ToInstanceIamMemberOutputWithContext(ctx context.Context) InstanceIamMemberOutput

type InstanceIamMemberState added in v0.26.0 

type InstanceIamMemberState struct {
}

func (InstanceIamMemberState) ElementType added in v0.26.0 

func (InstanceIamMemberState) ElementType() reflect.Type

type InstanceIamPolicy 

type InstanceIamPolicy struct {
	pulumi.CustomResourceState

	// Associates a list of `members`, or principals, with a `role`. Optionally, may specify a `condition` that determines how and when the `bindings` are applied. Each of the `bindings` must contain at least one principal. The `bindings` in a `Policy` can refer to up to 1,500 principals; up to 250 of these principals can be Google groups. Each occurrence of a principal counts towards these limits. For example, if the `bindings` grant 50 different roles to `user:alice@example.com`, and not to any other principal, then you can add another 1,450 principals to the `bindings` in the `Policy`.
	Bindings BindingResponseArrayOutput `pulumi:"bindings"`
	// `etag` is used for optimistic concurrency control as a way to help prevent simultaneous updates of a policy from overwriting each other. It is strongly suggested that systems make use of the `etag` in the read-modify-write cycle to perform policy updates in order to avoid race conditions: An `etag` is returned in the response to `getIamPolicy`, and systems are expected to put that etag in the request to `setIamPolicy` to ensure that their change will be applied to the same version of the policy. **Important:** If you use IAM Conditions, you must include the `etag` field whenever you call `setIamPolicy`. If you omit this field, then IAM allows you to overwrite a version `3` policy with a version `1` policy, and all of the conditions in the version `3` policy are lost.
	Etag       pulumi.StringOutput `pulumi:"etag"`
	InstanceId pulumi.StringOutput `pulumi:"instanceId"`
	Location   pulumi.StringOutput `pulumi:"location"`
	Project    pulumi.StringOutput `pulumi:"project"`
	// Specifies the format of the policy. Valid values are `0`, `1`, and `3`. Requests that specify an invalid value are rejected. Any operation that affects conditional role bindings must specify version `3`. This requirement applies to the following operations: * Getting a policy that includes a conditional role binding * Adding a conditional role binding to a policy * Changing a conditional role binding in a policy * Removing any role binding, with or without a condition, from a policy that includes conditions **Important:** If you use IAM Conditions, you must include the `etag` field whenever you call `setIamPolicy`. If you omit this field, then IAM allows you to overwrite a version `3` policy with a version `1` policy, and all of the conditions in the version `3` policy are lost. If a policy does not include any conditions, operations on that policy may specify any valid version or leave the field unset. To learn which resources support conditions in their IAM policies, see the [IAM documentation](https://cloud.google.com/iam/help/conditions/resource-policies).
	Version pulumi.IntOutput `pulumi:"version"`
}

Sets the access control policy on the specified resource. Replaces any existing policy. Can return `NOT_FOUND`, `INVALID_ARGUMENT`, and `PERMISSION_DENIED` errors. Note - this resource's API doesn't support deletion. When deleted, the resource will persist on Google Cloud even though it will be deleted from Pulumi state.

func GetInstanceIamPolicy 

func GetInstanceIamPolicy(ctx *pulumi.Context,
	name string, id pulumi.IDInput, state *InstanceIamPolicyState, opts ...pulumi.ResourceOption) (*InstanceIamPolicy, error)

GetInstanceIamPolicy gets an existing InstanceIamPolicy resource's state with the given name, ID, and optional state properties that are used to uniquely qualify the lookup (nil if not required).

func NewInstanceIamPolicy 

func NewInstanceIamPolicy(ctx *pulumi.Context,
	name string, args *InstanceIamPolicyArgs, opts ...pulumi.ResourceOption) (*InstanceIamPolicy, error)

NewInstanceIamPolicy registers a new resource with the given unique name, arguments, and options.

func (*InstanceIamPolicy) ElementType 

func (*InstanceIamPolicy) ElementType() reflect.Type

func (*InstanceIamPolicy) ToInstanceIamPolicyOutput 

func (i *InstanceIamPolicy) ToInstanceIamPolicyOutput() InstanceIamPolicyOutput

func (*InstanceIamPolicy) ToInstanceIamPolicyOutputWithContext 

func (i *InstanceIamPolicy) ToInstanceIamPolicyOutputWithContext(ctx context.Context) InstanceIamPolicyOutput

type InstanceIamPolicyArgs 

type InstanceIamPolicyArgs struct {
	// Associates a list of `members`, or principals, with a `role`. Optionally, may specify a `condition` that determines how and when the `bindings` are applied. Each of the `bindings` must contain at least one principal. The `bindings` in a `Policy` can refer to up to 1,500 principals; up to 250 of these principals can be Google groups. Each occurrence of a principal counts towards these limits. For example, if the `bindings` grant 50 different roles to `user:alice@example.com`, and not to any other principal, then you can add another 1,450 principals to the `bindings` in the `Policy`.
	Bindings BindingArrayInput
	// `etag` is used for optimistic concurrency control as a way to help prevent simultaneous updates of a policy from overwriting each other. It is strongly suggested that systems make use of the `etag` in the read-modify-write cycle to perform policy updates in order to avoid race conditions: An `etag` is returned in the response to `getIamPolicy`, and systems are expected to put that etag in the request to `setIamPolicy` to ensure that their change will be applied to the same version of the policy. **Important:** If you use IAM Conditions, you must include the `etag` field whenever you call `setIamPolicy`. If you omit this field, then IAM allows you to overwrite a version `3` policy with a version `1` policy, and all of the conditions in the version `3` policy are lost.
	Etag       pulumi.StringPtrInput
	InstanceId pulumi.StringInput
	Location   pulumi.StringPtrInput
	Project    pulumi.StringPtrInput
	// Specifies the format of the policy. Valid values are `0`, `1`, and `3`. Requests that specify an invalid value are rejected. Any operation that affects conditional role bindings must specify version `3`. This requirement applies to the following operations: * Getting a policy that includes a conditional role binding * Adding a conditional role binding to a policy * Changing a conditional role binding in a policy * Removing any role binding, with or without a condition, from a policy that includes conditions **Important:** If you use IAM Conditions, you must include the `etag` field whenever you call `setIamPolicy`. If you omit this field, then IAM allows you to overwrite a version `3` policy with a version `1` policy, and all of the conditions in the version `3` policy are lost. If a policy does not include any conditions, operations on that policy may specify any valid version or leave the field unset. To learn which resources support conditions in their IAM policies, see the [IAM documentation](https://cloud.google.com/iam/help/conditions/resource-policies).
	Version pulumi.IntPtrInput
}

The set of arguments for constructing a InstanceIamPolicy resource.

func (InstanceIamPolicyArgs) ElementType 

func (InstanceIamPolicyArgs) ElementType() reflect.Type

type InstanceIamPolicyInput 

type InstanceIamPolicyInput interface {
	pulumi.Input

	ToInstanceIamPolicyOutput() InstanceIamPolicyOutput
	ToInstanceIamPolicyOutputWithContext(ctx context.Context) InstanceIamPolicyOutput
}

type InstanceIamPolicyOutput 

type InstanceIamPolicyOutput struct{ *pulumi.OutputState }

func (InstanceIamPolicyOutput) Bindings 

func (o InstanceIamPolicyOutput) Bindings() BindingResponseArrayOutput

Associates a list of `members`, or principals, with a `role`. Optionally, may specify a `condition` that determines how and when the `bindings` are applied. Each of the `bindings` must contain at least one principal. The `bindings` in a `Policy` can refer to up to 1,500 principals; up to 250 of these principals can be Google groups. Each occurrence of a principal counts towards these limits. For example, if the `bindings` grant 50 different roles to `user:alice@example.com`, and not to any other principal, then you can add another 1,450 principals to the `bindings` in the `Policy`.

func (InstanceIamPolicyOutput) ElementType 

func (InstanceIamPolicyOutput) ElementType() reflect.Type

func (InstanceIamPolicyOutput) Etag 

func (o InstanceIamPolicyOutput) Etag() pulumi.StringOutput

`etag` is used for optimistic concurrency control as a way to help prevent simultaneous updates of a policy from overwriting each other. It is strongly suggested that systems make use of the `etag` in the read-modify-write cycle to perform policy updates in order to avoid race conditions: An `etag` is returned in the response to `getIamPolicy`, and systems are expected to put that etag in the request to `setIamPolicy` to ensure that their change will be applied to the same version of the policy. **Important:** If you use IAM Conditions, you must include the `etag` field whenever you call `setIamPolicy`. If you omit this field, then IAM allows you to overwrite a version `3` policy with a version `1` policy, and all of the conditions in the version `3` policy are lost.

func (InstanceIamPolicyOutput) InstanceId added in v0.21.0 

func (o InstanceIamPolicyOutput) InstanceId() pulumi.StringOutput

func (InstanceIamPolicyOutput) Location added in v0.21.0 

func (o InstanceIamPolicyOutput) Location() pulumi.StringOutput

func (InstanceIamPolicyOutput) Project added in v0.21.0 

func (o InstanceIamPolicyOutput) Project() pulumi.StringOutput

func (InstanceIamPolicyOutput) ToInstanceIamPolicyOutput 

func (o InstanceIamPolicyOutput) ToInstanceIamPolicyOutput() InstanceIamPolicyOutput

func (InstanceIamPolicyOutput) ToInstanceIamPolicyOutputWithContext 

func (o InstanceIamPolicyOutput) ToInstanceIamPolicyOutputWithContext(ctx context.Context) InstanceIamPolicyOutput

func (InstanceIamPolicyOutput) Version 

func (o InstanceIamPolicyOutput) Version() pulumi.IntOutput

Specifies the format of the policy. Valid values are `0`, `1`, and `3`. Requests that specify an invalid value are rejected. Any operation that affects conditional role bindings must specify version `3`. This requirement applies to the following operations: * Getting a policy that includes a conditional role binding * Adding a conditional role binding to a policy * Changing a conditional role binding in a policy * Removing any role binding, with or without a condition, from a policy that includes conditions **Important:** If you use IAM Conditions, you must include the `etag` field whenever you call `setIamPolicy`. If you omit this field, then IAM allows you to overwrite a version `3` policy with a version `1` policy, and all of the conditions in the version `3` policy are lost. If a policy does not include any conditions, operations on that policy may specify any valid version or leave the field unset. To learn which resources support conditions in their IAM policies, see the [IAM documentation](https://cloud.google.com/iam/help/conditions/resource-policies).

type InstanceIamPolicyState 

type InstanceIamPolicyState struct {
}

func (InstanceIamPolicyState) ElementType 

func (InstanceIamPolicyState) ElementType() reflect.Type

type InstanceInput 

type InstanceInput interface {
	pulumi.Input

	ToInstanceOutput() InstanceOutput
	ToInstanceOutputWithContext(ctx context.Context) InstanceOutput
}

type InstanceOutput 

type InstanceOutput struct{ *pulumi.OutputState }

func (InstanceOutput) Build added in v0.29.0 

func (o InstanceOutput) Build() BuildResponseOutput

Build info of the Instance if it's in `ACTIVE` state.

func (InstanceOutput) Config 

func (o InstanceOutput) Config() ConfigResponseOutput

Config of the Instance.

func (InstanceOutput) CreateTime 

func (o InstanceOutput) CreateTime() pulumi.StringOutput

Creation timestamp.

func (InstanceOutput) ElementType 

func (InstanceOutput) ElementType() reflect.Type

func (InstanceOutput) InstanceId added in v0.21.0 

func (o InstanceOutput) InstanceId() pulumi.StringOutput

Required. Identifier to assign to the Instance. Must be unique within scope of the parent resource.

func (InstanceOutput) Location added in v0.21.0 

func (o InstanceOutput) Location() pulumi.StringOutput

func (InstanceOutput) Name 

func (o InstanceOutput) Name() pulumi.StringOutput

Format: `projects/*/locations/*/instance`. Currently only `locations/global` is supported.

func (InstanceOutput) Project added in v0.21.0 

func (o InstanceOutput) Project() pulumi.StringOutput

func (InstanceOutput) State 

func (o InstanceOutput) State() pulumi.StringOutput

The current state of the Instance.

func (InstanceOutput) StateMessage 

func (o InstanceOutput) StateMessage() pulumi.StringOutput

Extra information of Instance.State if the state is `FAILED`.

func (InstanceOutput) ToInstanceOutput 

func (o InstanceOutput) ToInstanceOutput() InstanceOutput

func (InstanceOutput) ToInstanceOutputWithContext 

func (o InstanceOutput) ToInstanceOutputWithContext(ctx context.Context) InstanceOutput

func (InstanceOutput) UpdateTime 

func (o InstanceOutput) UpdateTime() pulumi.StringOutput

Last update timestamp.

type InstanceState 

type InstanceState struct {
}

func (InstanceState) ElementType 

func (InstanceState) ElementType() reflect.Type

type LookupApiArgs 

type LookupApiArgs struct {
	ApiId    string  `pulumi:"apiId"`
	Location string  `pulumi:"location"`
	Project  *string `pulumi:"project"`
}

type LookupApiArtifactIamPolicyArgs 

type LookupApiArtifactIamPolicyArgs struct {
	ApiId                         string  `pulumi:"apiId"`
	ArtifactId                    string  `pulumi:"artifactId"`
	Location                      string  `pulumi:"location"`
	OptionsRequestedPolicyVersion *int    `pulumi:"optionsRequestedPolicyVersion"`
	Project                       *string `pulumi:"project"`
}

type LookupApiArtifactIamPolicyOutputArgs 

type LookupApiArtifactIamPolicyOutputArgs struct {
	ApiId                         pulumi.StringInput    `pulumi:"apiId"`
	ArtifactId                    pulumi.StringInput    `pulumi:"artifactId"`
	Location                      pulumi.StringInput    `pulumi:"location"`
	OptionsRequestedPolicyVersion pulumi.IntPtrInput    `pulumi:"optionsRequestedPolicyVersion"`
	Project                       pulumi.StringPtrInput `pulumi:"project"`
}

func (LookupApiArtifactIamPolicyOutputArgs) ElementType 

func (LookupApiArtifactIamPolicyOutputArgs) ElementType() reflect.Type

type LookupApiArtifactIamPolicyResult 

type LookupApiArtifactIamPolicyResult struct {
	// Associates a list of `members`, or principals, with a `role`. Optionally, may specify a `condition` that determines how and when the `bindings` are applied. Each of the `bindings` must contain at least one principal. The `bindings` in a `Policy` can refer to up to 1,500 principals; up to 250 of these principals can be Google groups. Each occurrence of a principal counts towards these limits. For example, if the `bindings` grant 50 different roles to `user:alice@example.com`, and not to any other principal, then you can add another 1,450 principals to the `bindings` in the `Policy`.
	Bindings []BindingResponse `pulumi:"bindings"`
	// `etag` is used for optimistic concurrency control as a way to help prevent simultaneous updates of a policy from overwriting each other. It is strongly suggested that systems make use of the `etag` in the read-modify-write cycle to perform policy updates in order to avoid race conditions: An `etag` is returned in the response to `getIamPolicy`, and systems are expected to put that etag in the request to `setIamPolicy` to ensure that their change will be applied to the same version of the policy. **Important:** If you use IAM Conditions, you must include the `etag` field whenever you call `setIamPolicy`. If you omit this field, then IAM allows you to overwrite a version `3` policy with a version `1` policy, and all of the conditions in the version `3` policy are lost.
	Etag string `pulumi:"etag"`
	// Specifies the format of the policy. Valid values are `0`, `1`, and `3`. Requests that specify an invalid value are rejected. Any operation that affects conditional role bindings must specify version `3`. This requirement applies to the following operations: * Getting a policy that includes a conditional role binding * Adding a conditional role binding to a policy * Changing a conditional role binding in a policy * Removing any role binding, with or without a condition, from a policy that includes conditions **Important:** If you use IAM Conditions, you must include the `etag` field whenever you call `setIamPolicy`. If you omit this field, then IAM allows you to overwrite a version `3` policy with a version `1` policy, and all of the conditions in the version `3` policy are lost. If a policy does not include any conditions, operations on that policy may specify any valid version or leave the field unset. To learn which resources support conditions in their IAM policies, see the [IAM documentation](https://cloud.google.com/iam/help/conditions/resource-policies).
	Version int `pulumi:"version"`
}

func LookupApiArtifactIamPolicy 

func LookupApiArtifactIamPolicy(ctx *pulumi.Context, args *LookupApiArtifactIamPolicyArgs, opts ...pulumi.InvokeOption) (*LookupApiArtifactIamPolicyResult, error)

Gets the access control policy for a resource. Returns an empty policy if the resource exists and does not have a policy set.

type LookupApiArtifactIamPolicyResultOutput 

type LookupApiArtifactIamPolicyResultOutput struct{ *pulumi.OutputState }

func LookupApiArtifactIamPolicyOutput 

func LookupApiArtifactIamPolicyOutput(ctx *pulumi.Context, args LookupApiArtifactIamPolicyOutputArgs, opts ...pulumi.InvokeOption) LookupApiArtifactIamPolicyResultOutput

func (LookupApiArtifactIamPolicyResultOutput) Bindings 

func (o LookupApiArtifactIamPolicyResultOutput) Bindings() BindingResponseArrayOutput

Associates a list of `members`, or principals, with a `role`. Optionally, may specify a `condition` that determines how and when the `bindings` are applied. Each of the `bindings` must contain at least one principal. The `bindings` in a `Policy` can refer to up to 1,500 principals; up to 250 of these principals can be Google groups. Each occurrence of a principal counts towards these limits. For example, if the `bindings` grant 50 different roles to `user:alice@example.com`, and not to any other principal, then you can add another 1,450 principals to the `bindings` in the `Policy`.

func (LookupApiArtifactIamPolicyResultOutput) ElementType 

func (LookupApiArtifactIamPolicyResultOutput) ElementType() reflect.Type

func (LookupApiArtifactIamPolicyResultOutput) Etag 

func (o LookupApiArtifactIamPolicyResultOutput) Etag() pulumi.StringOutput

`etag` is used for optimistic concurrency control as a way to help prevent simultaneous updates of a policy from overwriting each other. It is strongly suggested that systems make use of the `etag` in the read-modify-write cycle to perform policy updates in order to avoid race conditions: An `etag` is returned in the response to `getIamPolicy`, and systems are expected to put that etag in the request to `setIamPolicy` to ensure that their change will be applied to the same version of the policy. **Important:** If you use IAM Conditions, you must include the `etag` field whenever you call `setIamPolicy`. If you omit this field, then IAM allows you to overwrite a version `3` policy with a version `1` policy, and all of the conditions in the version `3` policy are lost.

func (LookupApiArtifactIamPolicyResultOutput) ToLookupApiArtifactIamPolicyResultOutput 

func (o LookupApiArtifactIamPolicyResultOutput) ToLookupApiArtifactIamPolicyResultOutput() LookupApiArtifactIamPolicyResultOutput

func (LookupApiArtifactIamPolicyResultOutput) ToLookupApiArtifactIamPolicyResultOutputWithContext 

func (o LookupApiArtifactIamPolicyResultOutput) ToLookupApiArtifactIamPolicyResultOutputWithContext(ctx context.Context) LookupApiArtifactIamPolicyResultOutput

func (LookupApiArtifactIamPolicyResultOutput) Version 

func (o LookupApiArtifactIamPolicyResultOutput) Version() pulumi.IntOutput

Specifies the format of the policy. Valid values are `0`, `1`, and `3`. Requests that specify an invalid value are rejected. Any operation that affects conditional role bindings must specify version `3`. This requirement applies to the following operations: * Getting a policy that includes a conditional role binding * Adding a conditional role binding to a policy * Changing a conditional role binding in a policy * Removing any role binding, with or without a condition, from a policy that includes conditions **Important:** If you use IAM Conditions, you must include the `etag` field whenever you call `setIamPolicy`. If you omit this field, then IAM allows you to overwrite a version `3` policy with a version `1` policy, and all of the conditions in the version `3` policy are lost. If a policy does not include any conditions, operations on that policy may specify any valid version or leave the field unset. To learn which resources support conditions in their IAM policies, see the [IAM documentation](https://cloud.google.com/iam/help/conditions/resource-policies).

type LookupApiDeploymentIamPolicyArgs 

type LookupApiDeploymentIamPolicyArgs struct {
	ApiId                         string  `pulumi:"apiId"`
	DeploymentId                  string  `pulumi:"deploymentId"`
	Location                      string  `pulumi:"location"`
	OptionsRequestedPolicyVersion *int    `pulumi:"optionsRequestedPolicyVersion"`
	Project                       *string `pulumi:"project"`
}

type LookupApiDeploymentIamPolicyOutputArgs 

type LookupApiDeploymentIamPolicyOutputArgs struct {
	ApiId                         pulumi.StringInput    `pulumi:"apiId"`
	DeploymentId                  pulumi.StringInput    `pulumi:"deploymentId"`
	Location                      pulumi.StringInput    `pulumi:"location"`
	OptionsRequestedPolicyVersion pulumi.IntPtrInput    `pulumi:"optionsRequestedPolicyVersion"`
	Project                       pulumi.StringPtrInput `pulumi:"project"`
}

func (LookupApiDeploymentIamPolicyOutputArgs) ElementType 

func (LookupApiDeploymentIamPolicyOutputArgs) ElementType() reflect.Type

type LookupApiDeploymentIamPolicyResult 

type LookupApiDeploymentIamPolicyResult struct {
	// Associates a list of `members`, or principals, with a `role`. Optionally, may specify a `condition` that determines how and when the `bindings` are applied. Each of the `bindings` must contain at least one principal. The `bindings` in a `Policy` can refer to up to 1,500 principals; up to 250 of these principals can be Google groups. Each occurrence of a principal counts towards these limits. For example, if the `bindings` grant 50 different roles to `user:alice@example.com`, and not to any other principal, then you can add another 1,450 principals to the `bindings` in the `Policy`.
	Bindings []BindingResponse `pulumi:"bindings"`
	// `etag` is used for optimistic concurrency control as a way to help prevent simultaneous updates of a policy from overwriting each other. It is strongly suggested that systems make use of the `etag` in the read-modify-write cycle to perform policy updates in order to avoid race conditions: An `etag` is returned in the response to `getIamPolicy`, and systems are expected to put that etag in the request to `setIamPolicy` to ensure that their change will be applied to the same version of the policy. **Important:** If you use IAM Conditions, you must include the `etag` field whenever you call `setIamPolicy`. If you omit this field, then IAM allows you to overwrite a version `3` policy with a version `1` policy, and all of the conditions in the version `3` policy are lost.
	Etag string `pulumi:"etag"`
	// Specifies the format of the policy. Valid values are `0`, `1`, and `3`. Requests that specify an invalid value are rejected. Any operation that affects conditional role bindings must specify version `3`. This requirement applies to the following operations: * Getting a policy that includes a conditional role binding * Adding a conditional role binding to a policy * Changing a conditional role binding in a policy * Removing any role binding, with or without a condition, from a policy that includes conditions **Important:** If you use IAM Conditions, you must include the `etag` field whenever you call `setIamPolicy`. If you omit this field, then IAM allows you to overwrite a version `3` policy with a version `1` policy, and all of the conditions in the version `3` policy are lost. If a policy does not include any conditions, operations on that policy may specify any valid version or leave the field unset. To learn which resources support conditions in their IAM policies, see the [IAM documentation](https://cloud.google.com/iam/help/conditions/resource-policies).
	Version int `pulumi:"version"`
}

func LookupApiDeploymentIamPolicy 

func LookupApiDeploymentIamPolicy(ctx *pulumi.Context, args *LookupApiDeploymentIamPolicyArgs, opts ...pulumi.InvokeOption) (*LookupApiDeploymentIamPolicyResult, error)

Gets the access control policy for a resource. Returns an empty policy if the resource exists and does not have a policy set.

type LookupApiDeploymentIamPolicyResultOutput 

type LookupApiDeploymentIamPolicyResultOutput struct{ *pulumi.OutputState }

func LookupApiDeploymentIamPolicyOutput 

func LookupApiDeploymentIamPolicyOutput(ctx *pulumi.Context, args LookupApiDeploymentIamPolicyOutputArgs, opts ...pulumi.InvokeOption) LookupApiDeploymentIamPolicyResultOutput

func (LookupApiDeploymentIamPolicyResultOutput) Bindings 

func (o LookupApiDeploymentIamPolicyResultOutput) Bindings() BindingResponseArrayOutput

Associates a list of `members`, or principals, with a `role`. Optionally, may specify a `condition` that determines how and when the `bindings` are applied. Each of the `bindings` must contain at least one principal. The `bindings` in a `Policy` can refer to up to 1,500 principals; up to 250 of these principals can be Google groups. Each occurrence of a principal counts towards these limits. For example, if the `bindings` grant 50 different roles to `user:alice@example.com`, and not to any other principal, then you can add another 1,450 principals to the `bindings` in the `Policy`.

func (LookupApiDeploymentIamPolicyResultOutput) ElementType 

func (LookupApiDeploymentIamPolicyResultOutput) ElementType() reflect.Type

func (LookupApiDeploymentIamPolicyResultOutput) Etag 

func (o LookupApiDeploymentIamPolicyResultOutput) Etag() pulumi.StringOutput

`etag` is used for optimistic concurrency control as a way to help prevent simultaneous updates of a policy from overwriting each other. It is strongly suggested that systems make use of the `etag` in the read-modify-write cycle to perform policy updates in order to avoid race conditions: An `etag` is returned in the response to `getIamPolicy`, and systems are expected to put that etag in the request to `setIamPolicy` to ensure that their change will be applied to the same version of the policy. **Important:** If you use IAM Conditions, you must include the `etag` field whenever you call `setIamPolicy`. If you omit this field, then IAM allows you to overwrite a version `3` policy with a version `1` policy, and all of the conditions in the version `3` policy are lost.

func (LookupApiDeploymentIamPolicyResultOutput) ToLookupApiDeploymentIamPolicyResultOutput 

func (o LookupApiDeploymentIamPolicyResultOutput) ToLookupApiDeploymentIamPolicyResultOutput() LookupApiDeploymentIamPolicyResultOutput

func (LookupApiDeploymentIamPolicyResultOutput) ToLookupApiDeploymentIamPolicyResultOutputWithContext 

func (o LookupApiDeploymentIamPolicyResultOutput) ToLookupApiDeploymentIamPolicyResultOutputWithContext(ctx context.Context) LookupApiDeploymentIamPolicyResultOutput

func (LookupApiDeploymentIamPolicyResultOutput) Version 

func (o LookupApiDeploymentIamPolicyResultOutput) Version() pulumi.IntOutput

Specifies the format of the policy. Valid values are `0`, `1`, and `3`. Requests that specify an invalid value are rejected. Any operation that affects conditional role bindings must specify version `3`. This requirement applies to the following operations: * Getting a policy that includes a conditional role binding * Adding a conditional role binding to a policy * Changing a conditional role binding in a policy * Removing any role binding, with or without a condition, from a policy that includes conditions **Important:** If you use IAM Conditions, you must include the `etag` field whenever you call `setIamPolicy`. If you omit this field, then IAM allows you to overwrite a version `3` policy with a version `1` policy, and all of the conditions in the version `3` policy are lost. If a policy does not include any conditions, operations on that policy may specify any valid version or leave the field unset. To learn which resources support conditions in their IAM policies, see the [IAM documentation](https://cloud.google.com/iam/help/conditions/resource-policies).

type LookupApiIamPolicyArgs 

type LookupApiIamPolicyArgs struct {
	ApiId                         string  `pulumi:"apiId"`
	Location                      string  `pulumi:"location"`
	OptionsRequestedPolicyVersion *int    `pulumi:"optionsRequestedPolicyVersion"`
	Project                       *string `pulumi:"project"`
}

type LookupApiIamPolicyOutputArgs 

type LookupApiIamPolicyOutputArgs struct {
	ApiId                         pulumi.StringInput    `pulumi:"apiId"`
	Location                      pulumi.StringInput    `pulumi:"location"`
	OptionsRequestedPolicyVersion pulumi.IntPtrInput    `pulumi:"optionsRequestedPolicyVersion"`
	Project                       pulumi.StringPtrInput `pulumi:"project"`
}

func (LookupApiIamPolicyOutputArgs) ElementType 

func (LookupApiIamPolicyOutputArgs) ElementType() reflect.Type

type LookupApiIamPolicyResult 

type LookupApiIamPolicyResult struct {
	// Associates a list of `members`, or principals, with a `role`. Optionally, may specify a `condition` that determines how and when the `bindings` are applied. Each of the `bindings` must contain at least one principal. The `bindings` in a `Policy` can refer to up to 1,500 principals; up to 250 of these principals can be Google groups. Each occurrence of a principal counts towards these limits. For example, if the `bindings` grant 50 different roles to `user:alice@example.com`, and not to any other principal, then you can add another 1,450 principals to the `bindings` in the `Policy`.
	Bindings []BindingResponse `pulumi:"bindings"`
	// `etag` is used for optimistic concurrency control as a way to help prevent simultaneous updates of a policy from overwriting each other. It is strongly suggested that systems make use of the `etag` in the read-modify-write cycle to perform policy updates in order to avoid race conditions: An `etag` is returned in the response to `getIamPolicy`, and systems are expected to put that etag in the request to `setIamPolicy` to ensure that their change will be applied to the same version of the policy. **Important:** If you use IAM Conditions, you must include the `etag` field whenever you call `setIamPolicy`. If you omit this field, then IAM allows you to overwrite a version `3` policy with a version `1` policy, and all of the conditions in the version `3` policy are lost.
	Etag string `pulumi:"etag"`
	// Specifies the format of the policy. Valid values are `0`, `1`, and `3`. Requests that specify an invalid value are rejected. Any operation that affects conditional role bindings must specify version `3`. This requirement applies to the following operations: * Getting a policy that includes a conditional role binding * Adding a conditional role binding to a policy * Changing a conditional role binding in a policy * Removing any role binding, with or without a condition, from a policy that includes conditions **Important:** If you use IAM Conditions, you must include the `etag` field whenever you call `setIamPolicy`. If you omit this field, then IAM allows you to overwrite a version `3` policy with a version `1` policy, and all of the conditions in the version `3` policy are lost. If a policy does not include any conditions, operations on that policy may specify any valid version or leave the field unset. To learn which resources support conditions in their IAM policies, see the [IAM documentation](https://cloud.google.com/iam/help/conditions/resource-policies).
	Version int `pulumi:"version"`
}

func LookupApiIamPolicy 

func LookupApiIamPolicy(ctx *pulumi.Context, args *LookupApiIamPolicyArgs, opts ...pulumi.InvokeOption) (*LookupApiIamPolicyResult, error)

Gets the access control policy for a resource. Returns an empty policy if the resource exists and does not have a policy set.

type LookupApiIamPolicyResultOutput 

type LookupApiIamPolicyResultOutput struct{ *pulumi.OutputState }

func LookupApiIamPolicyOutput 

func LookupApiIamPolicyOutput(ctx *pulumi.Context, args LookupApiIamPolicyOutputArgs, opts ...pulumi.InvokeOption) LookupApiIamPolicyResultOutput

func (LookupApiIamPolicyResultOutput) Bindings 

func (o LookupApiIamPolicyResultOutput) Bindings() BindingResponseArrayOutput

Associates a list of `members`, or principals, with a `role`. Optionally, may specify a `condition` that determines how and when the `bindings` are applied. Each of the `bindings` must contain at least one principal. The `bindings` in a `Policy` can refer to up to 1,500 principals; up to 250 of these principals can be Google groups. Each occurrence of a principal counts towards these limits. For example, if the `bindings` grant 50 different roles to `user:alice@example.com`, and not to any other principal, then you can add another 1,450 principals to the `bindings` in the `Policy`.

func (LookupApiIamPolicyResultOutput) ElementType 

func (LookupApiIamPolicyResultOutput) ElementType() reflect.Type

func (LookupApiIamPolicyResultOutput) Etag 

func (o LookupApiIamPolicyResultOutput) Etag() pulumi.StringOutput

`etag` is used for optimistic concurrency control as a way to help prevent simultaneous updates of a policy from overwriting each other. It is strongly suggested that systems make use of the `etag` in the read-modify-write cycle to perform policy updates in order to avoid race conditions: An `etag` is returned in the response to `getIamPolicy`, and systems are expected to put that etag in the request to `setIamPolicy` to ensure that their change will be applied to the same version of the policy. **Important:** If you use IAM Conditions, you must include the `etag` field whenever you call `setIamPolicy`. If you omit this field, then IAM allows you to overwrite a version `3` policy with a version `1` policy, and all of the conditions in the version `3` policy are lost.

func (LookupApiIamPolicyResultOutput) ToLookupApiIamPolicyResultOutput 

func (o LookupApiIamPolicyResultOutput) ToLookupApiIamPolicyResultOutput() LookupApiIamPolicyResultOutput

func (LookupApiIamPolicyResultOutput) ToLookupApiIamPolicyResultOutputWithContext 

func (o LookupApiIamPolicyResultOutput) ToLookupApiIamPolicyResultOutputWithContext(ctx context.Context) LookupApiIamPolicyResultOutput

func (LookupApiIamPolicyResultOutput) Version 

func (o LookupApiIamPolicyResultOutput) Version() pulumi.IntOutput

Specifies the format of the policy. Valid values are `0`, `1`, and `3`. Requests that specify an invalid value are rejected. Any operation that affects conditional role bindings must specify version `3`. This requirement applies to the following operations: * Getting a policy that includes a conditional role binding * Adding a conditional role binding to a policy * Changing a conditional role binding in a policy * Removing any role binding, with or without a condition, from a policy that includes conditions **Important:** If you use IAM Conditions, you must include the `etag` field whenever you call `setIamPolicy`. If you omit this field, then IAM allows you to overwrite a version `3` policy with a version `1` policy, and all of the conditions in the version `3` policy are lost. If a policy does not include any conditions, operations on that policy may specify any valid version or leave the field unset. To learn which resources support conditions in their IAM policies, see the [IAM documentation](https://cloud.google.com/iam/help/conditions/resource-policies).

type LookupApiOutputArgs 

type LookupApiOutputArgs struct {
	ApiId    pulumi.StringInput    `pulumi:"apiId"`
	Location pulumi.StringInput    `pulumi:"location"`
	Project  pulumi.StringPtrInput `pulumi:"project"`
}

func (LookupApiOutputArgs) ElementType 

func (LookupApiOutputArgs) ElementType() reflect.Type

type LookupApiResult 

type LookupApiResult struct {
	// Annotations attach non-identifying metadata to resources. Annotation keys and values are less restricted than those of labels, but should be generally used for small values of broad interest. Larger, topic- specific metadata should be stored in Artifacts.
	Annotations map[string]string `pulumi:"annotations"`
	// A user-definable description of the availability of this service. Format: free-form, but we expect single words that describe availability, e.g., "NONE", "TESTING", "PREVIEW", "GENERAL", "DEPRECATED", "SHUTDOWN".
	Availability string `pulumi:"availability"`
	// Creation timestamp.
	CreateTime string `pulumi:"createTime"`
	// A detailed description.
	Description string `pulumi:"description"`
	// Human-meaningful name.
	DisplayName string `pulumi:"displayName"`
	// Labels attach identifying metadata to resources. Identifying metadata can be used to filter list operations. Label keys and values can be no longer than 64 characters (Unicode codepoints), can only contain lowercase letters, numeric characters, underscores, and dashes. International characters are allowed. No more than 64 user labels can be associated with one resource (System labels are excluded). See https://goo.gl/xmQnxf for more information and examples of labels. System reserved label keys are prefixed with `apigeeregistry.googleapis.com/` and cannot be changed.
	Labels map[string]string `pulumi:"labels"`
	// Resource name.
	Name string `pulumi:"name"`
	// The recommended deployment of the API. Format: `projects/{project}/locations/{location}/apis/{api}/deployments/{deployment}`
	RecommendedDeployment string `pulumi:"recommendedDeployment"`
	// The recommended version of the API. Format: `projects/{project}/locations/{location}/apis/{api}/versions/{version}`
	RecommendedVersion string `pulumi:"recommendedVersion"`
	// Last update timestamp.
	UpdateTime string `pulumi:"updateTime"`
}

func LookupApi 

func LookupApi(ctx *pulumi.Context, args *LookupApiArgs, opts ...pulumi.InvokeOption) (*LookupApiResult, error)

Returns a specified API.

type LookupApiResultOutput 

type LookupApiResultOutput struct{ *pulumi.OutputState }

func LookupApiOutput 

func LookupApiOutput(ctx *pulumi.Context, args LookupApiOutputArgs, opts ...pulumi.InvokeOption) LookupApiResultOutput

func (LookupApiResultOutput) Annotations 

func (o LookupApiResultOutput) Annotations() pulumi.StringMapOutput

Annotations attach non-identifying metadata to resources. Annotation keys and values are less restricted than those of labels, but should be generally used for small values of broad interest. Larger, topic- specific metadata should be stored in Artifacts.

func (LookupApiResultOutput) Availability 

func (o LookupApiResultOutput) Availability() pulumi.StringOutput

A user-definable description of the availability of this service. Format: free-form, but we expect single words that describe availability, e.g., "NONE", "TESTING", "PREVIEW", "GENERAL", "DEPRECATED", "SHUTDOWN".

func (LookupApiResultOutput) CreateTime 

func (o LookupApiResultOutput) CreateTime() pulumi.StringOutput

Creation timestamp.

func (LookupApiResultOutput) Description 

func (o LookupApiResultOutput) Description() pulumi.StringOutput

A detailed description.

func (LookupApiResultOutput) DisplayName 

func (o LookupApiResultOutput) DisplayName() pulumi.StringOutput

Human-meaningful name.

func (LookupApiResultOutput) ElementType 

func (LookupApiResultOutput) ElementType() reflect.Type

func (LookupApiResultOutput) Labels 

func (o LookupApiResultOutput) Labels() pulumi.StringMapOutput

Labels attach identifying metadata to resources. Identifying metadata can be used to filter list operations. Label keys and values can be no longer than 64 characters (Unicode codepoints), can only contain lowercase letters, numeric characters, underscores, and dashes. International characters are allowed. No more than 64 user labels can be associated with one resource (System labels are excluded). See https://goo.gl/xmQnxf for more information and examples of labels. System reserved label keys are prefixed with `apigeeregistry.googleapis.com/` and cannot be changed.

func (LookupApiResultOutput) Name 

func (o LookupApiResultOutput) Name() pulumi.StringOutput

Resource name.

func (LookupApiResultOutput) RecommendedDeployment 

func (o LookupApiResultOutput) RecommendedDeployment() pulumi.StringOutput

The recommended deployment of the API. Format: `projects/{project}/locations/{location}/apis/{api}/deployments/{deployment}`

func (LookupApiResultOutput) RecommendedVersion 

func (o LookupApiResultOutput) RecommendedVersion() pulumi.StringOutput

The recommended version of the API. Format: `projects/{project}/locations/{location}/apis/{api}/versions/{version}`

func (LookupApiResultOutput) ToLookupApiResultOutput 

func (o LookupApiResultOutput) ToLookupApiResultOutput() LookupApiResultOutput

func (LookupApiResultOutput) ToLookupApiResultOutputWithContext 

func (o LookupApiResultOutput) ToLookupApiResultOutputWithContext(ctx context.Context) LookupApiResultOutput

func (LookupApiResultOutput) UpdateTime 

func (o LookupApiResultOutput) UpdateTime() pulumi.StringOutput

Last update timestamp.

type LookupApiVersionArtifactIamPolicyArgs 

type LookupApiVersionArtifactIamPolicyArgs struct {
	ApiId                         string  `pulumi:"apiId"`
	ArtifactId                    string  `pulumi:"artifactId"`
	Location                      string  `pulumi:"location"`
	OptionsRequestedPolicyVersion *int    `pulumi:"optionsRequestedPolicyVersion"`
	Project                       *string `pulumi:"project"`
	VersionId                     string  `pulumi:"versionId"`
}

type LookupApiVersionArtifactIamPolicyOutputArgs 

type LookupApiVersionArtifactIamPolicyOutputArgs struct {
	ApiId                         pulumi.StringInput    `pulumi:"apiId"`
	ArtifactId                    pulumi.StringInput    `pulumi:"artifactId"`
	Location                      pulumi.StringInput    `pulumi:"location"`
	OptionsRequestedPolicyVersion pulumi.IntPtrInput    `pulumi:"optionsRequestedPolicyVersion"`
	Project                       pulumi.StringPtrInput `pulumi:"project"`
	VersionId                     pulumi.StringInput    `pulumi:"versionId"`
}

func (LookupApiVersionArtifactIamPolicyOutputArgs) ElementType 

func (LookupApiVersionArtifactIamPolicyOutputArgs) ElementType() reflect.Type

type LookupApiVersionArtifactIamPolicyResult 

type LookupApiVersionArtifactIamPolicyResult struct {
	// Associates a list of `members`, or principals, with a `role`. Optionally, may specify a `condition` that determines how and when the `bindings` are applied. Each of the `bindings` must contain at least one principal. The `bindings` in a `Policy` can refer to up to 1,500 principals; up to 250 of these principals can be Google groups. Each occurrence of a principal counts towards these limits. For example, if the `bindings` grant 50 different roles to `user:alice@example.com`, and not to any other principal, then you can add another 1,450 principals to the `bindings` in the `Policy`.
	Bindings []BindingResponse `pulumi:"bindings"`
	// `etag` is used for optimistic concurrency control as a way to help prevent simultaneous updates of a policy from overwriting each other. It is strongly suggested that systems make use of the `etag` in the read-modify-write cycle to perform policy updates in order to avoid race conditions: An `etag` is returned in the response to `getIamPolicy`, and systems are expected to put that etag in the request to `setIamPolicy` to ensure that their change will be applied to the same version of the policy. **Important:** If you use IAM Conditions, you must include the `etag` field whenever you call `setIamPolicy`. If you omit this field, then IAM allows you to overwrite a version `3` policy with a version `1` policy, and all of the conditions in the version `3` policy are lost.
	Etag string `pulumi:"etag"`
	// Specifies the format of the policy. Valid values are `0`, `1`, and `3`. Requests that specify an invalid value are rejected. Any operation that affects conditional role bindings must specify version `3`. This requirement applies to the following operations: * Getting a policy that includes a conditional role binding * Adding a conditional role binding to a policy * Changing a conditional role binding in a policy * Removing any role binding, with or without a condition, from a policy that includes conditions **Important:** If you use IAM Conditions, you must include the `etag` field whenever you call `setIamPolicy`. If you omit this field, then IAM allows you to overwrite a version `3` policy with a version `1` policy, and all of the conditions in the version `3` policy are lost. If a policy does not include any conditions, operations on that policy may specify any valid version or leave the field unset. To learn which resources support conditions in their IAM policies, see the [IAM documentation](https://cloud.google.com/iam/help/conditions/resource-policies).
	Version int `pulumi:"version"`
}

func LookupApiVersionArtifactIamPolicy 

func LookupApiVersionArtifactIamPolicy(ctx *pulumi.Context, args *LookupApiVersionArtifactIamPolicyArgs, opts ...pulumi.InvokeOption) (*LookupApiVersionArtifactIamPolicyResult, error)

Gets the access control policy for a resource. Returns an empty policy if the resource exists and does not have a policy set.

type LookupApiVersionArtifactIamPolicyResultOutput 

type LookupApiVersionArtifactIamPolicyResultOutput struct{ *pulumi.OutputState }

func LookupApiVersionArtifactIamPolicyOutput 

func LookupApiVersionArtifactIamPolicyOutput(ctx *pulumi.Context, args LookupApiVersionArtifactIamPolicyOutputArgs, opts ...pulumi.InvokeOption) LookupApiVersionArtifactIamPolicyResultOutput

func (LookupApiVersionArtifactIamPolicyResultOutput) Bindings 

func (o LookupApiVersionArtifactIamPolicyResultOutput) Bindings() BindingResponseArrayOutput

Associates a list of `members`, or principals, with a `role`. Optionally, may specify a `condition` that determines how and when the `bindings` are applied. Each of the `bindings` must contain at least one principal. The `bindings` in a `Policy` can refer to up to 1,500 principals; up to 250 of these principals can be Google groups. Each occurrence of a principal counts towards these limits. For example, if the `bindings` grant 50 different roles to `user:alice@example.com`, and not to any other principal, then you can add another 1,450 principals to the `bindings` in the `Policy`.

func (LookupApiVersionArtifactIamPolicyResultOutput) ElementType 

func (LookupApiVersionArtifactIamPolicyResultOutput) ElementType() reflect.Type

func (LookupApiVersionArtifactIamPolicyResultOutput) Etag 

func (o LookupApiVersionArtifactIamPolicyResultOutput) Etag() pulumi.StringOutput

`etag` is used for optimistic concurrency control as a way to help prevent simultaneous updates of a policy from overwriting each other. It is strongly suggested that systems make use of the `etag` in the read-modify-write cycle to perform policy updates in order to avoid race conditions: An `etag` is returned in the response to `getIamPolicy`, and systems are expected to put that etag in the request to `setIamPolicy` to ensure that their change will be applied to the same version of the policy. **Important:** If you use IAM Conditions, you must include the `etag` field whenever you call `setIamPolicy`. If you omit this field, then IAM allows you to overwrite a version `3` policy with a version `1` policy, and all of the conditions in the version `3` policy are lost.

func (LookupApiVersionArtifactIamPolicyResultOutput) ToLookupApiVersionArtifactIamPolicyResultOutput 

func (o LookupApiVersionArtifactIamPolicyResultOutput) ToLookupApiVersionArtifactIamPolicyResultOutput() LookupApiVersionArtifactIamPolicyResultOutput

func (LookupApiVersionArtifactIamPolicyResultOutput) ToLookupApiVersionArtifactIamPolicyResultOutputWithContext 

func (o LookupApiVersionArtifactIamPolicyResultOutput) ToLookupApiVersionArtifactIamPolicyResultOutputWithContext(ctx context.Context) LookupApiVersionArtifactIamPolicyResultOutput

func (LookupApiVersionArtifactIamPolicyResultOutput) Version 

func (o LookupApiVersionArtifactIamPolicyResultOutput) Version() pulumi.IntOutput

Specifies the format of the policy. Valid values are `0`, `1`, and `3`. Requests that specify an invalid value are rejected. Any operation that affects conditional role bindings must specify version `3`. This requirement applies to the following operations: * Getting a policy that includes a conditional role binding * Adding a conditional role binding to a policy * Changing a conditional role binding in a policy * Removing any role binding, with or without a condition, from a policy that includes conditions **Important:** If you use IAM Conditions, you must include the `etag` field whenever you call `setIamPolicy`. If you omit this field, then IAM allows you to overwrite a version `3` policy with a version `1` policy, and all of the conditions in the version `3` policy are lost. If a policy does not include any conditions, operations on that policy may specify any valid version or leave the field unset. To learn which resources support conditions in their IAM policies, see the [IAM documentation](https://cloud.google.com/iam/help/conditions/resource-policies).

type LookupApiVersionIamPolicyArgs 

type LookupApiVersionIamPolicyArgs struct {
	ApiId                         string  `pulumi:"apiId"`
	Location                      string  `pulumi:"location"`
	OptionsRequestedPolicyVersion *int    `pulumi:"optionsRequestedPolicyVersion"`
	Project                       *string `pulumi:"project"`
	VersionId                     string  `pulumi:"versionId"`
}

type LookupApiVersionIamPolicyOutputArgs 

type LookupApiVersionIamPolicyOutputArgs struct {
	ApiId                         pulumi.StringInput    `pulumi:"apiId"`
	Location                      pulumi.StringInput    `pulumi:"location"`
	OptionsRequestedPolicyVersion pulumi.IntPtrInput    `pulumi:"optionsRequestedPolicyVersion"`
	Project                       pulumi.StringPtrInput `pulumi:"project"`
	VersionId                     pulumi.StringInput    `pulumi:"versionId"`
}

func (LookupApiVersionIamPolicyOutputArgs) ElementType 

func (LookupApiVersionIamPolicyOutputArgs) ElementType() reflect.Type

type LookupApiVersionIamPolicyResult 

type LookupApiVersionIamPolicyResult struct {
	// Associates a list of `members`, or principals, with a `role`. Optionally, may specify a `condition` that determines how and when the `bindings` are applied. Each of the `bindings` must contain at least one principal. The `bindings` in a `Policy` can refer to up to 1,500 principals; up to 250 of these principals can be Google groups. Each occurrence of a principal counts towards these limits. For example, if the `bindings` grant 50 different roles to `user:alice@example.com`, and not to any other principal, then you can add another 1,450 principals to the `bindings` in the `Policy`.
	Bindings []BindingResponse `pulumi:"bindings"`
	// `etag` is used for optimistic concurrency control as a way to help prevent simultaneous updates of a policy from overwriting each other. It is strongly suggested that systems make use of the `etag` in the read-modify-write cycle to perform policy updates in order to avoid race conditions: An `etag` is returned in the response to `getIamPolicy`, and systems are expected to put that etag in the request to `setIamPolicy` to ensure that their change will be applied to the same version of the policy. **Important:** If you use IAM Conditions, you must include the `etag` field whenever you call `setIamPolicy`. If you omit this field, then IAM allows you to overwrite a version `3` policy with a version `1` policy, and all of the conditions in the version `3` policy are lost.
	Etag string `pulumi:"etag"`
	// Specifies the format of the policy. Valid values are `0`, `1`, and `3`. Requests that specify an invalid value are rejected. Any operation that affects conditional role bindings must specify version `3`. This requirement applies to the following operations: * Getting a policy that includes a conditional role binding * Adding a conditional role binding to a policy * Changing a conditional role binding in a policy * Removing any role binding, with or without a condition, from a policy that includes conditions **Important:** If you use IAM Conditions, you must include the `etag` field whenever you call `setIamPolicy`. If you omit this field, then IAM allows you to overwrite a version `3` policy with a version `1` policy, and all of the conditions in the version `3` policy are lost. If a policy does not include any conditions, operations on that policy may specify any valid version or leave the field unset. To learn which resources support conditions in their IAM policies, see the [IAM documentation](https://cloud.google.com/iam/help/conditions/resource-policies).
	Version int `pulumi:"version"`
}

func LookupApiVersionIamPolicy 

func LookupApiVersionIamPolicy(ctx *pulumi.Context, args *LookupApiVersionIamPolicyArgs, opts ...pulumi.InvokeOption) (*LookupApiVersionIamPolicyResult, error)

Gets the access control policy for a resource. Returns an empty policy if the resource exists and does not have a policy set.

type LookupApiVersionIamPolicyResultOutput 

type LookupApiVersionIamPolicyResultOutput struct{ *pulumi.OutputState }

func LookupApiVersionIamPolicyOutput 

func LookupApiVersionIamPolicyOutput(ctx *pulumi.Context, args LookupApiVersionIamPolicyOutputArgs, opts ...pulumi.InvokeOption) LookupApiVersionIamPolicyResultOutput

func (LookupApiVersionIamPolicyResultOutput) Bindings 

func (o LookupApiVersionIamPolicyResultOutput) Bindings() BindingResponseArrayOutput

Associates a list of `members`, or principals, with a `role`. Optionally, may specify a `condition` that determines how and when the `bindings` are applied. Each of the `bindings` must contain at least one principal. The `bindings` in a `Policy` can refer to up to 1,500 principals; up to 250 of these principals can be Google groups. Each occurrence of a principal counts towards these limits. For example, if the `bindings` grant 50 different roles to `user:alice@example.com`, and not to any other principal, then you can add another 1,450 principals to the `bindings` in the `Policy`.

func (LookupApiVersionIamPolicyResultOutput) ElementType 

func (LookupApiVersionIamPolicyResultOutput) ElementType() reflect.Type

func (LookupApiVersionIamPolicyResultOutput) Etag 

func (o LookupApiVersionIamPolicyResultOutput) Etag() pulumi.StringOutput

`etag` is used for optimistic concurrency control as a way to help prevent simultaneous updates of a policy from overwriting each other. It is strongly suggested that systems make use of the `etag` in the read-modify-write cycle to perform policy updates in order to avoid race conditions: An `etag` is returned in the response to `getIamPolicy`, and systems are expected to put that etag in the request to `setIamPolicy` to ensure that their change will be applied to the same version of the policy. **Important:** If you use IAM Conditions, you must include the `etag` field whenever you call `setIamPolicy`. If you omit this field, then IAM allows you to overwrite a version `3` policy with a version `1` policy, and all of the conditions in the version `3` policy are lost.

func (LookupApiVersionIamPolicyResultOutput) ToLookupApiVersionIamPolicyResultOutput 

func (o LookupApiVersionIamPolicyResultOutput) ToLookupApiVersionIamPolicyResultOutput() LookupApiVersionIamPolicyResultOutput

func (LookupApiVersionIamPolicyResultOutput) ToLookupApiVersionIamPolicyResultOutputWithContext 

func (o LookupApiVersionIamPolicyResultOutput) ToLookupApiVersionIamPolicyResultOutputWithContext(ctx context.Context) LookupApiVersionIamPolicyResultOutput

func (LookupApiVersionIamPolicyResultOutput) Version 

func (o LookupApiVersionIamPolicyResultOutput) Version() pulumi.IntOutput

Specifies the format of the policy. Valid values are `0`, `1`, and `3`. Requests that specify an invalid value are rejected. Any operation that affects conditional role bindings must specify version `3`. This requirement applies to the following operations: * Getting a policy that includes a conditional role binding * Adding a conditional role binding to a policy * Changing a conditional role binding in a policy * Removing any role binding, with or without a condition, from a policy that includes conditions **Important:** If you use IAM Conditions, you must include the `etag` field whenever you call `setIamPolicy`. If you omit this field, then IAM allows you to overwrite a version `3` policy with a version `1` policy, and all of the conditions in the version `3` policy are lost. If a policy does not include any conditions, operations on that policy may specify any valid version or leave the field unset. To learn which resources support conditions in their IAM policies, see the [IAM documentation](https://cloud.google.com/iam/help/conditions/resource-policies).

type LookupApiVersionSpecArtifactIamPolicyArgs 

type LookupApiVersionSpecArtifactIamPolicyArgs struct {
	ApiId                         string  `pulumi:"apiId"`
	ArtifactId                    string  `pulumi:"artifactId"`
	Location                      string  `pulumi:"location"`
	OptionsRequestedPolicyVersion *int    `pulumi:"optionsRequestedPolicyVersion"`
	Project                       *string `pulumi:"project"`
	SpecId                        string  `pulumi:"specId"`
	VersionId                     string  `pulumi:"versionId"`
}

type LookupApiVersionSpecArtifactIamPolicyOutputArgs 

type LookupApiVersionSpecArtifactIamPolicyOutputArgs struct {
	ApiId                         pulumi.StringInput    `pulumi:"apiId"`
	ArtifactId                    pulumi.StringInput    `pulumi:"artifactId"`
	Location                      pulumi.StringInput    `pulumi:"location"`
	OptionsRequestedPolicyVersion pulumi.IntPtrInput    `pulumi:"optionsRequestedPolicyVersion"`
	Project                       pulumi.StringPtrInput `pulumi:"project"`
	SpecId                        pulumi.StringInput    `pulumi:"specId"`
	VersionId                     pulumi.StringInput    `pulumi:"versionId"`
}

func (LookupApiVersionSpecArtifactIamPolicyOutputArgs) ElementType 

func (LookupApiVersionSpecArtifactIamPolicyOutputArgs) ElementType() reflect.Type

type LookupApiVersionSpecArtifactIamPolicyResult 

type LookupApiVersionSpecArtifactIamPolicyResult struct {
	// Associates a list of `members`, or principals, with a `role`. Optionally, may specify a `condition` that determines how and when the `bindings` are applied. Each of the `bindings` must contain at least one principal. The `bindings` in a `Policy` can refer to up to 1,500 principals; up to 250 of these principals can be Google groups. Each occurrence of a principal counts towards these limits. For example, if the `bindings` grant 50 different roles to `user:alice@example.com`, and not to any other principal, then you can add another 1,450 principals to the `bindings` in the `Policy`.
	Bindings []BindingResponse `pulumi:"bindings"`
	// `etag` is used for optimistic concurrency control as a way to help prevent simultaneous updates of a policy from overwriting each other. It is strongly suggested that systems make use of the `etag` in the read-modify-write cycle to perform policy updates in order to avoid race conditions: An `etag` is returned in the response to `getIamPolicy`, and systems are expected to put that etag in the request to `setIamPolicy` to ensure that their change will be applied to the same version of the policy. **Important:** If you use IAM Conditions, you must include the `etag` field whenever you call `setIamPolicy`. If you omit this field, then IAM allows you to overwrite a version `3` policy with a version `1` policy, and all of the conditions in the version `3` policy are lost.
	Etag string `pulumi:"etag"`
	// Specifies the format of the policy. Valid values are `0`, `1`, and `3`. Requests that specify an invalid value are rejected. Any operation that affects conditional role bindings must specify version `3`. This requirement applies to the following operations: * Getting a policy that includes a conditional role binding * Adding a conditional role binding to a policy * Changing a conditional role binding in a policy * Removing any role binding, with or without a condition, from a policy that includes conditions **Important:** If you use IAM Conditions, you must include the `etag` field whenever you call `setIamPolicy`. If you omit this field, then IAM allows you to overwrite a version `3` policy with a version `1` policy, and all of the conditions in the version `3` policy are lost. If a policy does not include any conditions, operations on that policy may specify any valid version or leave the field unset. To learn which resources support conditions in their IAM policies, see the [IAM documentation](https://cloud.google.com/iam/help/conditions/resource-policies).
	Version int `pulumi:"version"`
}

func LookupApiVersionSpecArtifactIamPolicy 

func LookupApiVersionSpecArtifactIamPolicy(ctx *pulumi.Context, args *LookupApiVersionSpecArtifactIamPolicyArgs, opts ...pulumi.InvokeOption) (*LookupApiVersionSpecArtifactIamPolicyResult, error)

Gets the access control policy for a resource. Returns an empty policy if the resource exists and does not have a policy set.

type LookupApiVersionSpecArtifactIamPolicyResultOutput 

type LookupApiVersionSpecArtifactIamPolicyResultOutput struct{ *pulumi.OutputState }

func LookupApiVersionSpecArtifactIamPolicyOutput 

func LookupApiVersionSpecArtifactIamPolicyOutput(ctx *pulumi.Context, args LookupApiVersionSpecArtifactIamPolicyOutputArgs, opts ...pulumi.InvokeOption) LookupApiVersionSpecArtifactIamPolicyResultOutput

func (LookupApiVersionSpecArtifactIamPolicyResultOutput) Bindings 

func (o LookupApiVersionSpecArtifactIamPolicyResultOutput) Bindings() BindingResponseArrayOutput

Associates a list of `members`, or principals, with a `role`. Optionally, may specify a `condition` that determines how and when the `bindings` are applied. Each of the `bindings` must contain at least one principal. The `bindings` in a `Policy` can refer to up to 1,500 principals; up to 250 of these principals can be Google groups. Each occurrence of a principal counts towards these limits. For example, if the `bindings` grant 50 different roles to `user:alice@example.com`, and not to any other principal, then you can add another 1,450 principals to the `bindings` in the `Policy`.

func (LookupApiVersionSpecArtifactIamPolicyResultOutput) ElementType 

func (LookupApiVersionSpecArtifactIamPolicyResultOutput) ElementType() reflect.Type

func (LookupApiVersionSpecArtifactIamPolicyResultOutput) Etag 

func (o LookupApiVersionSpecArtifactIamPolicyResultOutput) Etag() pulumi.StringOutput

`etag` is used for optimistic concurrency control as a way to help prevent simultaneous updates of a policy from overwriting each other. It is strongly suggested that systems make use of the `etag` in the read-modify-write cycle to perform policy updates in order to avoid race conditions: An `etag` is returned in the response to `getIamPolicy`, and systems are expected to put that etag in the request to `setIamPolicy` to ensure that their change will be applied to the same version of the policy. **Important:** If you use IAM Conditions, you must include the `etag` field whenever you call `setIamPolicy`. If you omit this field, then IAM allows you to overwrite a version `3` policy with a version `1` policy, and all of the conditions in the version `3` policy are lost.

func (LookupApiVersionSpecArtifactIamPolicyResultOutput) ToLookupApiVersionSpecArtifactIamPolicyResultOutput 

func (o LookupApiVersionSpecArtifactIamPolicyResultOutput) ToLookupApiVersionSpecArtifactIamPolicyResultOutput() LookupApiVersionSpecArtifactIamPolicyResultOutput

func (LookupApiVersionSpecArtifactIamPolicyResultOutput) ToLookupApiVersionSpecArtifactIamPolicyResultOutputWithContext 

func (o LookupApiVersionSpecArtifactIamPolicyResultOutput) ToLookupApiVersionSpecArtifactIamPolicyResultOutputWithContext(ctx context.Context) LookupApiVersionSpecArtifactIamPolicyResultOutput

func (LookupApiVersionSpecArtifactIamPolicyResultOutput) Version 

func (o LookupApiVersionSpecArtifactIamPolicyResultOutput) Version() pulumi.IntOutput

Specifies the format of the policy. Valid values are `0`, `1`, and `3`. Requests that specify an invalid value are rejected. Any operation that affects conditional role bindings must specify version `3`. This requirement applies to the following operations: * Getting a policy that includes a conditional role binding * Adding a conditional role binding to a policy * Changing a conditional role binding in a policy * Removing any role binding, with or without a condition, from a policy that includes conditions **Important:** If you use IAM Conditions, you must include the `etag` field whenever you call `setIamPolicy`. If you omit this field, then IAM allows you to overwrite a version `3` policy with a version `1` policy, and all of the conditions in the version `3` policy are lost. If a policy does not include any conditions, operations on that policy may specify any valid version or leave the field unset. To learn which resources support conditions in their IAM policies, see the [IAM documentation](https://cloud.google.com/iam/help/conditions/resource-policies).

type LookupApiVersionSpecIamPolicyArgs 

type LookupApiVersionSpecIamPolicyArgs struct {
	ApiId                         string  `pulumi:"apiId"`
	Location                      string  `pulumi:"location"`
	OptionsRequestedPolicyVersion *int    `pulumi:"optionsRequestedPolicyVersion"`
	Project                       *string `pulumi:"project"`
	SpecId                        string  `pulumi:"specId"`
	VersionId                     string  `pulumi:"versionId"`
}

type LookupApiVersionSpecIamPolicyOutputArgs 

type LookupApiVersionSpecIamPolicyOutputArgs struct {
	ApiId                         pulumi.StringInput    `pulumi:"apiId"`
	Location                      pulumi.StringInput    `pulumi:"location"`
	OptionsRequestedPolicyVersion pulumi.IntPtrInput    `pulumi:"optionsRequestedPolicyVersion"`
	Project                       pulumi.StringPtrInput `pulumi:"project"`
	SpecId                        pulumi.StringInput    `pulumi:"specId"`
	VersionId                     pulumi.StringInput    `pulumi:"versionId"`
}

func (LookupApiVersionSpecIamPolicyOutputArgs) ElementType 

func (LookupApiVersionSpecIamPolicyOutputArgs) ElementType() reflect.Type

type LookupApiVersionSpecIamPolicyResult 

type LookupApiVersionSpecIamPolicyResult struct {
	// Associates a list of `members`, or principals, with a `role`. Optionally, may specify a `condition` that determines how and when the `bindings` are applied. Each of the `bindings` must contain at least one principal. The `bindings` in a `Policy` can refer to up to 1,500 principals; up to 250 of these principals can be Google groups. Each occurrence of a principal counts towards these limits. For example, if the `bindings` grant 50 different roles to `user:alice@example.com`, and not to any other principal, then you can add another 1,450 principals to the `bindings` in the `Policy`.
	Bindings []BindingResponse `pulumi:"bindings"`
	// `etag` is used for optimistic concurrency control as a way to help prevent simultaneous updates of a policy from overwriting each other. It is strongly suggested that systems make use of the `etag` in the read-modify-write cycle to perform policy updates in order to avoid race conditions: An `etag` is returned in the response to `getIamPolicy`, and systems are expected to put that etag in the request to `setIamPolicy` to ensure that their change will be applied to the same version of the policy. **Important:** If you use IAM Conditions, you must include the `etag` field whenever you call `setIamPolicy`. If you omit this field, then IAM allows you to overwrite a version `3` policy with a version `1` policy, and all of the conditions in the version `3` policy are lost.
	Etag string `pulumi:"etag"`
	// Specifies the format of the policy. Valid values are `0`, `1`, and `3`. Requests that specify an invalid value are rejected. Any operation that affects conditional role bindings must specify version `3`. This requirement applies to the following operations: * Getting a policy that includes a conditional role binding * Adding a conditional role binding to a policy * Changing a conditional role binding in a policy * Removing any role binding, with or without a condition, from a policy that includes conditions **Important:** If you use IAM Conditions, you must include the `etag` field whenever you call `setIamPolicy`. If you omit this field, then IAM allows you to overwrite a version `3` policy with a version `1` policy, and all of the conditions in the version `3` policy are lost. If a policy does not include any conditions, operations on that policy may specify any valid version or leave the field unset. To learn which resources support conditions in their IAM policies, see the [IAM documentation](https://cloud.google.com/iam/help/conditions/resource-policies).
	Version int `pulumi:"version"`
}

func LookupApiVersionSpecIamPolicy 

func LookupApiVersionSpecIamPolicy(ctx *pulumi.Context, args *LookupApiVersionSpecIamPolicyArgs, opts ...pulumi.InvokeOption) (*LookupApiVersionSpecIamPolicyResult, error)

Gets the access control policy for a resource. Returns an empty policy if the resource exists and does not have a policy set.

type LookupApiVersionSpecIamPolicyResultOutput 

type LookupApiVersionSpecIamPolicyResultOutput struct{ *pulumi.OutputState }

func LookupApiVersionSpecIamPolicyOutput 

func LookupApiVersionSpecIamPolicyOutput(ctx *pulumi.Context, args LookupApiVersionSpecIamPolicyOutputArgs, opts ...pulumi.InvokeOption) LookupApiVersionSpecIamPolicyResultOutput

func (LookupApiVersionSpecIamPolicyResultOutput) Bindings 

func (o LookupApiVersionSpecIamPolicyResultOutput) Bindings() BindingResponseArrayOutput

Associates a list of `members`, or principals, with a `role`. Optionally, may specify a `condition` that determines how and when the `bindings` are applied. Each of the `bindings` must contain at least one principal. The `bindings` in a `Policy` can refer to up to 1,500 principals; up to 250 of these principals can be Google groups. Each occurrence of a principal counts towards these limits. For example, if the `bindings` grant 50 different roles to `user:alice@example.com`, and not to any other principal, then you can add another 1,450 principals to the `bindings` in the `Policy`.

func (LookupApiVersionSpecIamPolicyResultOutput) ElementType 

func (LookupApiVersionSpecIamPolicyResultOutput) ElementType() reflect.Type

func (LookupApiVersionSpecIamPolicyResultOutput) Etag 

func (o LookupApiVersionSpecIamPolicyResultOutput) Etag() pulumi.StringOutput

`etag` is used for optimistic concurrency control as a way to help prevent simultaneous updates of a policy from overwriting each other. It is strongly suggested that systems make use of the `etag` in the read-modify-write cycle to perform policy updates in order to avoid race conditions: An `etag` is returned in the response to `getIamPolicy`, and systems are expected to put that etag in the request to `setIamPolicy` to ensure that their change will be applied to the same version of the policy. **Important:** If you use IAM Conditions, you must include the `etag` field whenever you call `setIamPolicy`. If you omit this field, then IAM allows you to overwrite a version `3` policy with a version `1` policy, and all of the conditions in the version `3` policy are lost.

func (LookupApiVersionSpecIamPolicyResultOutput) ToLookupApiVersionSpecIamPolicyResultOutput 

func (o LookupApiVersionSpecIamPolicyResultOutput) ToLookupApiVersionSpecIamPolicyResultOutput() LookupApiVersionSpecIamPolicyResultOutput

func (LookupApiVersionSpecIamPolicyResultOutput) ToLookupApiVersionSpecIamPolicyResultOutputWithContext 

func (o LookupApiVersionSpecIamPolicyResultOutput) ToLookupApiVersionSpecIamPolicyResultOutputWithContext(ctx context.Context) LookupApiVersionSpecIamPolicyResultOutput

func (LookupApiVersionSpecIamPolicyResultOutput) Version 

func (o LookupApiVersionSpecIamPolicyResultOutput) Version() pulumi.IntOutput

Specifies the format of the policy. Valid values are `0`, `1`, and `3`. Requests that specify an invalid value are rejected. Any operation that affects conditional role bindings must specify version `3`. This requirement applies to the following operations: * Getting a policy that includes a conditional role binding * Adding a conditional role binding to a policy * Changing a conditional role binding in a policy * Removing any role binding, with or without a condition, from a policy that includes conditions **Important:** If you use IAM Conditions, you must include the `etag` field whenever you call `setIamPolicy`. If you omit this field, then IAM allows you to overwrite a version `3` policy with a version `1` policy, and all of the conditions in the version `3` policy are lost. If a policy does not include any conditions, operations on that policy may specify any valid version or leave the field unset. To learn which resources support conditions in their IAM policies, see the [IAM documentation](https://cloud.google.com/iam/help/conditions/resource-policies).

type LookupArtifactArgs 

type LookupArtifactArgs struct {
	ApiId      string  `pulumi:"apiId"`
	ArtifactId string  `pulumi:"artifactId"`
	Location   string  `pulumi:"location"`
	Project    *string `pulumi:"project"`
	SpecId     string  `pulumi:"specId"`
	VersionId  string  `pulumi:"versionId"`
}

type LookupArtifactIamPolicyArgs 

type LookupArtifactIamPolicyArgs struct {
	ArtifactId                    string  `pulumi:"artifactId"`
	Location                      string  `pulumi:"location"`
	OptionsRequestedPolicyVersion *int    `pulumi:"optionsRequestedPolicyVersion"`
	Project                       *string `pulumi:"project"`
}

type LookupArtifactIamPolicyOutputArgs 

type LookupArtifactIamPolicyOutputArgs struct {
	ArtifactId                    pulumi.StringInput    `pulumi:"artifactId"`
	Location                      pulumi.StringInput    `pulumi:"location"`
	OptionsRequestedPolicyVersion pulumi.IntPtrInput    `pulumi:"optionsRequestedPolicyVersion"`
	Project                       pulumi.StringPtrInput `pulumi:"project"`
}

func (LookupArtifactIamPolicyOutputArgs) ElementType 

func (LookupArtifactIamPolicyOutputArgs) ElementType() reflect.Type

type LookupArtifactIamPolicyResult 

type LookupArtifactIamPolicyResult struct {
	// Associates a list of `members`, or principals, with a `role`. Optionally, may specify a `condition` that determines how and when the `bindings` are applied. Each of the `bindings` must contain at least one principal. The `bindings` in a `Policy` can refer to up to 1,500 principals; up to 250 of these principals can be Google groups. Each occurrence of a principal counts towards these limits. For example, if the `bindings` grant 50 different roles to `user:alice@example.com`, and not to any other principal, then you can add another 1,450 principals to the `bindings` in the `Policy`.
	Bindings []BindingResponse `pulumi:"bindings"`
	// `etag` is used for optimistic concurrency control as a way to help prevent simultaneous updates of a policy from overwriting each other. It is strongly suggested that systems make use of the `etag` in the read-modify-write cycle to perform policy updates in order to avoid race conditions: An `etag` is returned in the response to `getIamPolicy`, and systems are expected to put that etag in the request to `setIamPolicy` to ensure that their change will be applied to the same version of the policy. **Important:** If you use IAM Conditions, you must include the `etag` field whenever you call `setIamPolicy`. If you omit this field, then IAM allows you to overwrite a version `3` policy with a version `1` policy, and all of the conditions in the version `3` policy are lost.
	Etag string `pulumi:"etag"`
	// Specifies the format of the policy. Valid values are `0`, `1`, and `3`. Requests that specify an invalid value are rejected. Any operation that affects conditional role bindings must specify version `3`. This requirement applies to the following operations: * Getting a policy that includes a conditional role binding * Adding a conditional role binding to a policy * Changing a conditional role binding in a policy * Removing any role binding, with or without a condition, from a policy that includes conditions **Important:** If you use IAM Conditions, you must include the `etag` field whenever you call `setIamPolicy`. If you omit this field, then IAM allows you to overwrite a version `3` policy with a version `1` policy, and all of the conditions in the version `3` policy are lost. If a policy does not include any conditions, operations on that policy may specify any valid version or leave the field unset. To learn which resources support conditions in their IAM policies, see the [IAM documentation](https://cloud.google.com/iam/help/conditions/resource-policies).
	Version int `pulumi:"version"`
}

func LookupArtifactIamPolicy 

func LookupArtifactIamPolicy(ctx *pulumi.Context, args *LookupArtifactIamPolicyArgs, opts ...pulumi.InvokeOption) (*LookupArtifactIamPolicyResult, error)

Gets the access control policy for a resource. Returns an empty policy if the resource exists and does not have a policy set.

type LookupArtifactIamPolicyResultOutput 

type LookupArtifactIamPolicyResultOutput struct{ *pulumi.OutputState }

func LookupArtifactIamPolicyOutput 

func LookupArtifactIamPolicyOutput(ctx *pulumi.Context, args LookupArtifactIamPolicyOutputArgs, opts ...pulumi.InvokeOption) LookupArtifactIamPolicyResultOutput

func (LookupArtifactIamPolicyResultOutput) Bindings 

func (o LookupArtifactIamPolicyResultOutput) Bindings() BindingResponseArrayOutput

Associates a list of `members`, or principals, with a `role`. Optionally, may specify a `condition` that determines how and when the `bindings` are applied. Each of the `bindings` must contain at least one principal. The `bindings` in a `Policy` can refer to up to 1,500 principals; up to 250 of these principals can be Google groups. Each occurrence of a principal counts towards these limits. For example, if the `bindings` grant 50 different roles to `user:alice@example.com`, and not to any other principal, then you can add another 1,450 principals to the `bindings` in the `Policy`.

func (LookupArtifactIamPolicyResultOutput) ElementType 

func (LookupArtifactIamPolicyResultOutput) ElementType() reflect.Type

func (LookupArtifactIamPolicyResultOutput) Etag 

func (o LookupArtifactIamPolicyResultOutput) Etag() pulumi.StringOutput

`etag` is used for optimistic concurrency control as a way to help prevent simultaneous updates of a policy from overwriting each other. It is strongly suggested that systems make use of the `etag` in the read-modify-write cycle to perform policy updates in order to avoid race conditions: An `etag` is returned in the response to `getIamPolicy`, and systems are expected to put that etag in the request to `setIamPolicy` to ensure that their change will be applied to the same version of the policy. **Important:** If you use IAM Conditions, you must include the `etag` field whenever you call `setIamPolicy`. If you omit this field, then IAM allows you to overwrite a version `3` policy with a version `1` policy, and all of the conditions in the version `3` policy are lost.

func (LookupArtifactIamPolicyResultOutput) ToLookupArtifactIamPolicyResultOutput 

func (o LookupArtifactIamPolicyResultOutput) ToLookupArtifactIamPolicyResultOutput() LookupArtifactIamPolicyResultOutput

func (LookupArtifactIamPolicyResultOutput) ToLookupArtifactIamPolicyResultOutputWithContext 

func (o LookupArtifactIamPolicyResultOutput) ToLookupArtifactIamPolicyResultOutputWithContext(ctx context.Context) LookupArtifactIamPolicyResultOutput

func (LookupArtifactIamPolicyResultOutput) Version 

func (o LookupArtifactIamPolicyResultOutput) Version() pulumi.IntOutput

Specifies the format of the policy. Valid values are `0`, `1`, and `3`. Requests that specify an invalid value are rejected. Any operation that affects conditional role bindings must specify version `3`. This requirement applies to the following operations: * Getting a policy that includes a conditional role binding * Adding a conditional role binding to a policy * Changing a conditional role binding in a policy * Removing any role binding, with or without a condition, from a policy that includes conditions **Important:** If you use IAM Conditions, you must include the `etag` field whenever you call `setIamPolicy`. If you omit this field, then IAM allows you to overwrite a version `3` policy with a version `1` policy, and all of the conditions in the version `3` policy are lost. If a policy does not include any conditions, operations on that policy may specify any valid version or leave the field unset. To learn which resources support conditions in their IAM policies, see the [IAM documentation](https://cloud.google.com/iam/help/conditions/resource-policies).

type LookupArtifactOutputArgs 

type LookupArtifactOutputArgs struct {
	ApiId      pulumi.StringInput    `pulumi:"apiId"`
	ArtifactId pulumi.StringInput    `pulumi:"artifactId"`
	Location   pulumi.StringInput    `pulumi:"location"`
	Project    pulumi.StringPtrInput `pulumi:"project"`
	SpecId     pulumi.StringInput    `pulumi:"specId"`
	VersionId  pulumi.StringInput    `pulumi:"versionId"`
}

func (LookupArtifactOutputArgs) ElementType 

func (LookupArtifactOutputArgs) ElementType() reflect.Type

type LookupArtifactResult 

type LookupArtifactResult struct {
	// Annotations attach non-identifying metadata to resources. Annotation keys and values are less restricted than those of labels, but should be generally used for small values of broad interest. Larger, topic- specific metadata should be stored in Artifacts.
	Annotations map[string]string `pulumi:"annotations"`
	// Input only. The contents of the artifact. Provided by API callers when artifacts are created or replaced. To access the contents of an artifact, use GetArtifactContents.
	Contents string `pulumi:"contents"`
	// Creation timestamp.
	CreateTime string `pulumi:"createTime"`
	// A SHA-256 hash of the artifact's contents. If the artifact is gzipped, this is the hash of the uncompressed artifact.
	Hash string `pulumi:"hash"`
	// Labels attach identifying metadata to resources. Identifying metadata can be used to filter list operations. Label keys and values can be no longer than 64 characters (Unicode codepoints), can only contain lowercase letters, numeric characters, underscores and dashes. International characters are allowed. No more than 64 user labels can be associated with one resource (System labels are excluded). See https://goo.gl/xmQnxf for more information and examples of labels. System reserved label keys are prefixed with "registry.googleapis.com/" and cannot be changed.
	Labels map[string]string `pulumi:"labels"`
	// A content type specifier for the artifact. Content type specifiers are Media Types (https://en.wikipedia.org/wiki/Media_type) with a possible "schema" parameter that specifies a schema for the stored information. Content types can specify compression. Currently only GZip compression is supported (indicated with "+gzip").
	MimeType string `pulumi:"mimeType"`
	// Resource name.
	Name string `pulumi:"name"`
	// The size of the artifact in bytes. If the artifact is gzipped, this is the size of the uncompressed artifact.
	SizeBytes int `pulumi:"sizeBytes"`
	// Last update timestamp.
	UpdateTime string `pulumi:"updateTime"`
}

func LookupArtifact 

func LookupArtifact(ctx *pulumi.Context, args *LookupArtifactArgs, opts ...pulumi.InvokeOption) (*LookupArtifactResult, error)

Returns a specified artifact.

type LookupArtifactResultOutput 

type LookupArtifactResultOutput struct{ *pulumi.OutputState }

func LookupArtifactOutput 

func LookupArtifactOutput(ctx *pulumi.Context, args LookupArtifactOutputArgs, opts ...pulumi.InvokeOption) LookupArtifactResultOutput

func (LookupArtifactResultOutput) Annotations added in v0.28.0 

func (o LookupArtifactResultOutput) Annotations() pulumi.StringMapOutput

Annotations attach non-identifying metadata to resources. Annotation keys and values are less restricted than those of labels, but should be generally used for small values of broad interest. Larger, topic- specific metadata should be stored in Artifacts.

func (LookupArtifactResultOutput) Contents 

func (o LookupArtifactResultOutput) Contents() pulumi.StringOutput

Input only. The contents of the artifact. Provided by API callers when artifacts are created or replaced. To access the contents of an artifact, use GetArtifactContents.

func (LookupArtifactResultOutput) CreateTime 

func (o LookupArtifactResultOutput) CreateTime() pulumi.StringOutput

Creation timestamp.

func (LookupArtifactResultOutput) ElementType 

func (LookupArtifactResultOutput) ElementType() reflect.Type

func (LookupArtifactResultOutput) Hash 

func (o LookupArtifactResultOutput) Hash() pulumi.StringOutput

A SHA-256 hash of the artifact's contents. If the artifact is gzipped, this is the hash of the uncompressed artifact.

func (LookupArtifactResultOutput) Labels added in v0.28.0 

func (o LookupArtifactResultOutput) Labels() pulumi.StringMapOutput

Labels attach identifying metadata to resources. Identifying metadata can be used to filter list operations. Label keys and values can be no longer than 64 characters (Unicode codepoints), can only contain lowercase letters, numeric characters, underscores and dashes. International characters are allowed. No more than 64 user labels can be associated with one resource (System labels are excluded). See https://goo.gl/xmQnxf for more information and examples of labels. System reserved label keys are prefixed with "registry.googleapis.com/" and cannot be changed.

func (LookupArtifactResultOutput) MimeType 

func (o LookupArtifactResultOutput) MimeType() pulumi.StringOutput

A content type specifier for the artifact. Content type specifiers are Media Types (https://en.wikipedia.org/wiki/Media_type) with a possible "schema" parameter that specifies a schema for the stored information. Content types can specify compression. Currently only GZip compression is supported (indicated with "+gzip").

func (LookupArtifactResultOutput) Name 

func (o LookupArtifactResultOutput) Name() pulumi.StringOutput

Resource name.

func (LookupArtifactResultOutput) SizeBytes 

func (o LookupArtifactResultOutput) SizeBytes() pulumi.IntOutput

The size of the artifact in bytes. If the artifact is gzipped, this is the size of the uncompressed artifact.

func (LookupArtifactResultOutput) ToLookupArtifactResultOutput 

func (o LookupArtifactResultOutput) ToLookupArtifactResultOutput() LookupArtifactResultOutput

func (LookupArtifactResultOutput) ToLookupArtifactResultOutputWithContext 

func (o LookupArtifactResultOutput) ToLookupArtifactResultOutputWithContext(ctx context.Context) LookupArtifactResultOutput

func (LookupArtifactResultOutput) UpdateTime 

func (o LookupArtifactResultOutput) UpdateTime() pulumi.StringOutput

Last update timestamp.

type LookupDeploymentArgs 

type LookupDeploymentArgs struct {
	ApiId        string  `pulumi:"apiId"`
	DeploymentId string  `pulumi:"deploymentId"`
	Location     string  `pulumi:"location"`
	Project      *string `pulumi:"project"`
}

type LookupDeploymentArtifactArgs 

type LookupDeploymentArtifactArgs struct {
	ApiId        string  `pulumi:"apiId"`
	ArtifactId   string  `pulumi:"artifactId"`
	DeploymentId string  `pulumi:"deploymentId"`
	Location     string  `pulumi:"location"`
	Project      *string `pulumi:"project"`
}

type LookupDeploymentArtifactOutputArgs 

type LookupDeploymentArtifactOutputArgs struct {
	ApiId        pulumi.StringInput    `pulumi:"apiId"`
	ArtifactId   pulumi.StringInput    `pulumi:"artifactId"`
	DeploymentId pulumi.StringInput    `pulumi:"deploymentId"`
	Location     pulumi.StringInput    `pulumi:"location"`
	Project      pulumi.StringPtrInput `pulumi:"project"`
}

func (LookupDeploymentArtifactOutputArgs) ElementType 

func (LookupDeploymentArtifactOutputArgs) ElementType() reflect.Type

type LookupDeploymentArtifactResult 

type LookupDeploymentArtifactResult struct {
	// Annotations attach non-identifying metadata to resources. Annotation keys and values are less restricted than those of labels, but should be generally used for small values of broad interest. Larger, topic- specific metadata should be stored in Artifacts.
	Annotations map[string]string `pulumi:"annotations"`
	// Input only. The contents of the artifact. Provided by API callers when artifacts are created or replaced. To access the contents of an artifact, use GetArtifactContents.
	Contents string `pulumi:"contents"`
	// Creation timestamp.
	CreateTime string `pulumi:"createTime"`
	// A SHA-256 hash of the artifact's contents. If the artifact is gzipped, this is the hash of the uncompressed artifact.
	Hash string `pulumi:"hash"`
	// Labels attach identifying metadata to resources. Identifying metadata can be used to filter list operations. Label keys and values can be no longer than 64 characters (Unicode codepoints), can only contain lowercase letters, numeric characters, underscores and dashes. International characters are allowed. No more than 64 user labels can be associated with one resource (System labels are excluded). See https://goo.gl/xmQnxf for more information and examples of labels. System reserved label keys are prefixed with "registry.googleapis.com/" and cannot be changed.
	Labels map[string]string `pulumi:"labels"`
	// A content type specifier for the artifact. Content type specifiers are Media Types (https://en.wikipedia.org/wiki/Media_type) with a possible "schema" parameter that specifies a schema for the stored information. Content types can specify compression. Currently only GZip compression is supported (indicated with "+gzip").
	MimeType string `pulumi:"mimeType"`
	// Resource name.
	Name string `pulumi:"name"`
	// The size of the artifact in bytes. If the artifact is gzipped, this is the size of the uncompressed artifact.
	SizeBytes int `pulumi:"sizeBytes"`
	// Last update timestamp.
	UpdateTime string `pulumi:"updateTime"`
}

func LookupDeploymentArtifact 

func LookupDeploymentArtifact(ctx *pulumi.Context, args *LookupDeploymentArtifactArgs, opts ...pulumi.InvokeOption) (*LookupDeploymentArtifactResult, error)

Returns a specified artifact.

type LookupDeploymentArtifactResultOutput 

type LookupDeploymentArtifactResultOutput struct{ *pulumi.OutputState }

func LookupDeploymentArtifactOutput 

func LookupDeploymentArtifactOutput(ctx *pulumi.Context, args LookupDeploymentArtifactOutputArgs, opts ...pulumi.InvokeOption) LookupDeploymentArtifactResultOutput

func (LookupDeploymentArtifactResultOutput) Annotations added in v0.28.0 

func (o LookupDeploymentArtifactResultOutput) Annotations() pulumi.StringMapOutput

Annotations attach non-identifying metadata to resources. Annotation keys and values are less restricted than those of labels, but should be generally used for small values of broad interest. Larger, topic- specific metadata should be stored in Artifacts.

func (LookupDeploymentArtifactResultOutput) Contents 

func (o LookupDeploymentArtifactResultOutput) Contents() pulumi.StringOutput

Input only. The contents of the artifact. Provided by API callers when artifacts are created or replaced. To access the contents of an artifact, use GetArtifactContents.

func (LookupDeploymentArtifactResultOutput) CreateTime 

func (o LookupDeploymentArtifactResultOutput) CreateTime() pulumi.StringOutput

Creation timestamp.

func (LookupDeploymentArtifactResultOutput) ElementType 

func (LookupDeploymentArtifactResultOutput) ElementType() reflect.Type

func (LookupDeploymentArtifactResultOutput) Hash 

func (o LookupDeploymentArtifactResultOutput) Hash() pulumi.StringOutput

A SHA-256 hash of the artifact's contents. If the artifact is gzipped, this is the hash of the uncompressed artifact.

func (LookupDeploymentArtifactResultOutput) Labels added in v0.28.0 

func (o LookupDeploymentArtifactResultOutput) Labels() pulumi.StringMapOutput

Labels attach identifying metadata to resources. Identifying metadata can be used to filter list operations. Label keys and values can be no longer than 64 characters (Unicode codepoints), can only contain lowercase letters, numeric characters, underscores and dashes. International characters are allowed. No more than 64 user labels can be associated with one resource (System labels are excluded). See https://goo.gl/xmQnxf for more information and examples of labels. System reserved label keys are prefixed with "registry.googleapis.com/" and cannot be changed.

func (LookupDeploymentArtifactResultOutput) MimeType 

func (o LookupDeploymentArtifactResultOutput) MimeType() pulumi.StringOutput

A content type specifier for the artifact. Content type specifiers are Media Types (https://en.wikipedia.org/wiki/Media_type) with a possible "schema" parameter that specifies a schema for the stored information. Content types can specify compression. Currently only GZip compression is supported (indicated with "+gzip").

func (LookupDeploymentArtifactResultOutput) Name 

func (o LookupDeploymentArtifactResultOutput) Name() pulumi.StringOutput

Resource name.

func (LookupDeploymentArtifactResultOutput) SizeBytes 

func (o LookupDeploymentArtifactResultOutput) SizeBytes() pulumi.IntOutput

The size of the artifact in bytes. If the artifact is gzipped, this is the size of the uncompressed artifact.

func (LookupDeploymentArtifactResultOutput) ToLookupDeploymentArtifactResultOutput 

func (o LookupDeploymentArtifactResultOutput) ToLookupDeploymentArtifactResultOutput() LookupDeploymentArtifactResultOutput

func (LookupDeploymentArtifactResultOutput) ToLookupDeploymentArtifactResultOutputWithContext 

func (o LookupDeploymentArtifactResultOutput) ToLookupDeploymentArtifactResultOutputWithContext(ctx context.Context) LookupDeploymentArtifactResultOutput

func (LookupDeploymentArtifactResultOutput) UpdateTime 

func (o LookupDeploymentArtifactResultOutput) UpdateTime() pulumi.StringOutput

Last update timestamp.

type LookupDeploymentOutputArgs 

type LookupDeploymentOutputArgs struct {
	ApiId        pulumi.StringInput    `pulumi:"apiId"`
	DeploymentId pulumi.StringInput    `pulumi:"deploymentId"`
	Location     pulumi.StringInput    `pulumi:"location"`
	Project      pulumi.StringPtrInput `pulumi:"project"`
}

func (LookupDeploymentOutputArgs) ElementType 

func (LookupDeploymentOutputArgs) ElementType() reflect.Type

type LookupDeploymentResult 

type LookupDeploymentResult struct {
	// Text briefly describing how to access the endpoint. Changes to this value will not affect the revision.
	AccessGuidance string `pulumi:"accessGuidance"`
	// Annotations attach non-identifying metadata to resources. Annotation keys and values are less restricted than those of labels, but should be generally used for small values of broad interest. Larger, topic- specific metadata should be stored in Artifacts.
	Annotations map[string]string `pulumi:"annotations"`
	// The full resource name (including revision ID) of the spec of the API being served by the deployment. Changes to this value will update the revision. Format: `projects/{project}/locations/{location}/apis/{api}/versions/{version}/specs/{spec@revision}`
	ApiSpecRevision string `pulumi:"apiSpecRevision"`
	// Creation timestamp; when the deployment resource was created.
	CreateTime string `pulumi:"createTime"`
	// A detailed description.
	Description string `pulumi:"description"`
	// Human-meaningful name.
	DisplayName string `pulumi:"displayName"`
	// The address where the deployment is serving. Changes to this value will update the revision.
	EndpointUri string `pulumi:"endpointUri"`
	// The address of the external channel of the API (e.g., the Developer Portal). Changes to this value will not affect the revision.
	ExternalChannelUri string `pulumi:"externalChannelUri"`
	// Text briefly identifying the intended audience of the API. Changes to this value will not affect the revision.
	IntendedAudience string `pulumi:"intendedAudience"`
	// Labels attach identifying metadata to resources. Identifying metadata can be used to filter list operations. Label keys and values can be no longer than 64 characters (Unicode codepoints), can only contain lowercase letters, numeric characters, underscores and dashes. International characters are allowed. No more than 64 user labels can be associated with one resource (System labels are excluded). See https://goo.gl/xmQnxf for more information and examples of labels. System reserved label keys are prefixed with `apigeeregistry.googleapis.com/` and cannot be changed.
	Labels map[string]string `pulumi:"labels"`
	// Resource name.
	Name string `pulumi:"name"`
	// Revision creation timestamp; when the represented revision was created.
	RevisionCreateTime string `pulumi:"revisionCreateTime"`
	// Immutable. The revision ID of the deployment. A new revision is committed whenever the deployment contents are changed. The format is an 8-character hexadecimal string.
	RevisionId string `pulumi:"revisionId"`
	// Last update timestamp: when the represented revision was last modified.
	RevisionUpdateTime string `pulumi:"revisionUpdateTime"`
}

func LookupDeployment 

func LookupDeployment(ctx *pulumi.Context, args *LookupDeploymentArgs, opts ...pulumi.InvokeOption) (*LookupDeploymentResult, error)

Returns a specified deployment.

type LookupDeploymentResultOutput 

type LookupDeploymentResultOutput struct{ *pulumi.OutputState }

func LookupDeploymentOutput 

func LookupDeploymentOutput(ctx *pulumi.Context, args LookupDeploymentOutputArgs, opts ...pulumi.InvokeOption) LookupDeploymentResultOutput

func (LookupDeploymentResultOutput) AccessGuidance 

func (o LookupDeploymentResultOutput) AccessGuidance() pulumi.StringOutput

Text briefly describing how to access the endpoint. Changes to this value will not affect the revision.

func (LookupDeploymentResultOutput) Annotations 

func (o LookupDeploymentResultOutput) Annotations() pulumi.StringMapOutput

Annotations attach non-identifying metadata to resources. Annotation keys and values are less restricted than those of labels, but should be generally used for small values of broad interest. Larger, topic- specific metadata should be stored in Artifacts.

func (LookupDeploymentResultOutput) ApiSpecRevision 

func (o LookupDeploymentResultOutput) ApiSpecRevision() pulumi.StringOutput

The full resource name (including revision ID) of the spec of the API being served by the deployment. Changes to this value will update the revision. Format: `projects/{project}/locations/{location}/apis/{api}/versions/{version}/specs/{spec@revision}`

func (LookupDeploymentResultOutput) CreateTime 

func (o LookupDeploymentResultOutput) CreateTime() pulumi.StringOutput

Creation timestamp; when the deployment resource was created.

func (LookupDeploymentResultOutput) Description 

func (o LookupDeploymentResultOutput) Description() pulumi.StringOutput

A detailed description.

func (LookupDeploymentResultOutput) DisplayName 

func (o LookupDeploymentResultOutput) DisplayName() pulumi.StringOutput

Human-meaningful name.

func (LookupDeploymentResultOutput) ElementType 

func (LookupDeploymentResultOutput) ElementType() reflect.Type

func (LookupDeploymentResultOutput) EndpointUri 

func (o LookupDeploymentResultOutput) EndpointUri() pulumi.StringOutput

The address where the deployment is serving. Changes to this value will update the revision.

func (LookupDeploymentResultOutput) ExternalChannelUri 

func (o LookupDeploymentResultOutput) ExternalChannelUri() pulumi.StringOutput

The address of the external channel of the API (e.g., the Developer Portal). Changes to this value will not affect the revision.

func (LookupDeploymentResultOutput) IntendedAudience 

func (o LookupDeploymentResultOutput) IntendedAudience() pulumi.StringOutput

Text briefly identifying the intended audience of the API. Changes to this value will not affect the revision.

func (LookupDeploymentResultOutput) Labels 

func (o LookupDeploymentResultOutput) Labels() pulumi.StringMapOutput

Labels attach identifying metadata to resources. Identifying metadata can be used to filter list operations. Label keys and values can be no longer than 64 characters (Unicode codepoints), can only contain lowercase letters, numeric characters, underscores and dashes. International characters are allowed. No more than 64 user labels can be associated with one resource (System labels are excluded). See https://goo.gl/xmQnxf for more information and examples of labels. System reserved label keys are prefixed with `apigeeregistry.googleapis.com/` and cannot be changed.

func (LookupDeploymentResultOutput) Name 

func (o LookupDeploymentResultOutput) Name() pulumi.StringOutput

Resource name.

func (LookupDeploymentResultOutput) RevisionCreateTime 

func (o LookupDeploymentResultOutput) RevisionCreateTime() pulumi.StringOutput

Revision creation timestamp; when the represented revision was created.

func (LookupDeploymentResultOutput) RevisionId 

func (o LookupDeploymentResultOutput) RevisionId() pulumi.StringOutput

Immutable. The revision ID of the deployment. A new revision is committed whenever the deployment contents are changed. The format is an 8-character hexadecimal string.

func (LookupDeploymentResultOutput) RevisionUpdateTime 

func (o LookupDeploymentResultOutput) RevisionUpdateTime() pulumi.StringOutput

Last update timestamp: when the represented revision was last modified.

func (LookupDeploymentResultOutput) ToLookupDeploymentResultOutput 

func (o LookupDeploymentResultOutput) ToLookupDeploymentResultOutput() LookupDeploymentResultOutput

func (LookupDeploymentResultOutput) ToLookupDeploymentResultOutputWithContext 

func (o LookupDeploymentResultOutput) ToLookupDeploymentResultOutputWithContext(ctx context.Context) LookupDeploymentResultOutput

type LookupDocumentIamPolicyArgs added in v0.32.0 

type LookupDocumentIamPolicyArgs struct {
	Location                      string  `pulumi:"location"`
	OptionsRequestedPolicyVersion *int    `pulumi:"optionsRequestedPolicyVersion"`
	Project                       *string `pulumi:"project"`
}

type LookupDocumentIamPolicyOutputArgs added in v0.32.0 

type LookupDocumentIamPolicyOutputArgs struct {
	Location                      pulumi.StringInput    `pulumi:"location"`
	OptionsRequestedPolicyVersion pulumi.IntPtrInput    `pulumi:"optionsRequestedPolicyVersion"`
	Project                       pulumi.StringPtrInput `pulumi:"project"`
}

func (LookupDocumentIamPolicyOutputArgs) ElementType added in v0.32.0 

func (LookupDocumentIamPolicyOutputArgs) ElementType() reflect.Type

type LookupDocumentIamPolicyResult added in v0.32.0 

type LookupDocumentIamPolicyResult struct {
	// Associates a list of `members`, or principals, with a `role`. Optionally, may specify a `condition` that determines how and when the `bindings` are applied. Each of the `bindings` must contain at least one principal. The `bindings` in a `Policy` can refer to up to 1,500 principals; up to 250 of these principals can be Google groups. Each occurrence of a principal counts towards these limits. For example, if the `bindings` grant 50 different roles to `user:alice@example.com`, and not to any other principal, then you can add another 1,450 principals to the `bindings` in the `Policy`.
	Bindings []BindingResponse `pulumi:"bindings"`
	// `etag` is used for optimistic concurrency control as a way to help prevent simultaneous updates of a policy from overwriting each other. It is strongly suggested that systems make use of the `etag` in the read-modify-write cycle to perform policy updates in order to avoid race conditions: An `etag` is returned in the response to `getIamPolicy`, and systems are expected to put that etag in the request to `setIamPolicy` to ensure that their change will be applied to the same version of the policy. **Important:** If you use IAM Conditions, you must include the `etag` field whenever you call `setIamPolicy`. If you omit this field, then IAM allows you to overwrite a version `3` policy with a version `1` policy, and all of the conditions in the version `3` policy are lost.
	Etag string `pulumi:"etag"`
	// Specifies the format of the policy. Valid values are `0`, `1`, and `3`. Requests that specify an invalid value are rejected. Any operation that affects conditional role bindings must specify version `3`. This requirement applies to the following operations: * Getting a policy that includes a conditional role binding * Adding a conditional role binding to a policy * Changing a conditional role binding in a policy * Removing any role binding, with or without a condition, from a policy that includes conditions **Important:** If you use IAM Conditions, you must include the `etag` field whenever you call `setIamPolicy`. If you omit this field, then IAM allows you to overwrite a version `3` policy with a version `1` policy, and all of the conditions in the version `3` policy are lost. If a policy does not include any conditions, operations on that policy may specify any valid version or leave the field unset. To learn which resources support conditions in their IAM policies, see the [IAM documentation](https://cloud.google.com/iam/help/conditions/resource-policies).
	Version int `pulumi:"version"`
}

func LookupDocumentIamPolicy added in v0.32.0 

func LookupDocumentIamPolicy(ctx *pulumi.Context, args *LookupDocumentIamPolicyArgs, opts ...pulumi.InvokeOption) (*LookupDocumentIamPolicyResult, error)

Gets the access control policy for a resource. Returns an empty policy if the resource exists and does not have a policy set.

type LookupDocumentIamPolicyResultOutput added in v0.32.0 

type LookupDocumentIamPolicyResultOutput struct{ *pulumi.OutputState }

func LookupDocumentIamPolicyOutput added in v0.32.0 

func LookupDocumentIamPolicyOutput(ctx *pulumi.Context, args LookupDocumentIamPolicyOutputArgs, opts ...pulumi.InvokeOption) LookupDocumentIamPolicyResultOutput

func (LookupDocumentIamPolicyResultOutput) Bindings added in v0.32.0 

func (o LookupDocumentIamPolicyResultOutput) Bindings() BindingResponseArrayOutput

Associates a list of `members`, or principals, with a `role`. Optionally, may specify a `condition` that determines how and when the `bindings` are applied. Each of the `bindings` must contain at least one principal. The `bindings` in a `Policy` can refer to up to 1,500 principals; up to 250 of these principals can be Google groups. Each occurrence of a principal counts towards these limits. For example, if the `bindings` grant 50 different roles to `user:alice@example.com`, and not to any other principal, then you can add another 1,450 principals to the `bindings` in the `Policy`.

func (LookupDocumentIamPolicyResultOutput) ElementType added in v0.32.0 

func (LookupDocumentIamPolicyResultOutput) ElementType() reflect.Type

func (LookupDocumentIamPolicyResultOutput) Etag added in v0.32.0 

func (o LookupDocumentIamPolicyResultOutput) Etag() pulumi.StringOutput

`etag` is used for optimistic concurrency control as a way to help prevent simultaneous updates of a policy from overwriting each other. It is strongly suggested that systems make use of the `etag` in the read-modify-write cycle to perform policy updates in order to avoid race conditions: An `etag` is returned in the response to `getIamPolicy`, and systems are expected to put that etag in the request to `setIamPolicy` to ensure that their change will be applied to the same version of the policy. **Important:** If you use IAM Conditions, you must include the `etag` field whenever you call `setIamPolicy`. If you omit this field, then IAM allows you to overwrite a version `3` policy with a version `1` policy, and all of the conditions in the version `3` policy are lost.

func (LookupDocumentIamPolicyResultOutput) ToLookupDocumentIamPolicyResultOutput added in v0.32.0 

func (o LookupDocumentIamPolicyResultOutput) ToLookupDocumentIamPolicyResultOutput() LookupDocumentIamPolicyResultOutput

func (LookupDocumentIamPolicyResultOutput) ToLookupDocumentIamPolicyResultOutputWithContext added in v0.32.0 

func (o LookupDocumentIamPolicyResultOutput) ToLookupDocumentIamPolicyResultOutputWithContext(ctx context.Context) LookupDocumentIamPolicyResultOutput

func (LookupDocumentIamPolicyResultOutput) Version added in v0.32.0 

func (o LookupDocumentIamPolicyResultOutput) Version() pulumi.IntOutput

Specifies the format of the policy. Valid values are `0`, `1`, and `3`. Requests that specify an invalid value are rejected. Any operation that affects conditional role bindings must specify version `3`. This requirement applies to the following operations: * Getting a policy that includes a conditional role binding * Adding a conditional role binding to a policy * Changing a conditional role binding in a policy * Removing any role binding, with or without a condition, from a policy that includes conditions **Important:** If you use IAM Conditions, you must include the `etag` field whenever you call `setIamPolicy`. If you omit this field, then IAM allows you to overwrite a version `3` policy with a version `1` policy, and all of the conditions in the version `3` policy are lost. If a policy does not include any conditions, operations on that policy may specify any valid version or leave the field unset. To learn which resources support conditions in their IAM policies, see the [IAM documentation](https://cloud.google.com/iam/help/conditions/resource-policies).

type LookupInstanceArgs 

type LookupInstanceArgs struct {
	InstanceId string  `pulumi:"instanceId"`
	Location   string  `pulumi:"location"`
	Project    *string `pulumi:"project"`
}

type LookupInstanceIamPolicyArgs 

type LookupInstanceIamPolicyArgs struct {
	InstanceId                    string  `pulumi:"instanceId"`
	Location                      string  `pulumi:"location"`
	OptionsRequestedPolicyVersion *int    `pulumi:"optionsRequestedPolicyVersion"`
	Project                       *string `pulumi:"project"`
}

type LookupInstanceIamPolicyOutputArgs 

type LookupInstanceIamPolicyOutputArgs struct {
	InstanceId                    pulumi.StringInput    `pulumi:"instanceId"`
	Location                      pulumi.StringInput    `pulumi:"location"`
	OptionsRequestedPolicyVersion pulumi.IntPtrInput    `pulumi:"optionsRequestedPolicyVersion"`
	Project                       pulumi.StringPtrInput `pulumi:"project"`
}

func (LookupInstanceIamPolicyOutputArgs) ElementType 

func (LookupInstanceIamPolicyOutputArgs) ElementType() reflect.Type

type LookupInstanceIamPolicyResult 

type LookupInstanceIamPolicyResult struct {
	// Associates a list of `members`, or principals, with a `role`. Optionally, may specify a `condition` that determines how and when the `bindings` are applied. Each of the `bindings` must contain at least one principal. The `bindings` in a `Policy` can refer to up to 1,500 principals; up to 250 of these principals can be Google groups. Each occurrence of a principal counts towards these limits. For example, if the `bindings` grant 50 different roles to `user:alice@example.com`, and not to any other principal, then you can add another 1,450 principals to the `bindings` in the `Policy`.
	Bindings []BindingResponse `pulumi:"bindings"`
	// `etag` is used for optimistic concurrency control as a way to help prevent simultaneous updates of a policy from overwriting each other. It is strongly suggested that systems make use of the `etag` in the read-modify-write cycle to perform policy updates in order to avoid race conditions: An `etag` is returned in the response to `getIamPolicy`, and systems are expected to put that etag in the request to `setIamPolicy` to ensure that their change will be applied to the same version of the policy. **Important:** If you use IAM Conditions, you must include the `etag` field whenever you call `setIamPolicy`. If you omit this field, then IAM allows you to overwrite a version `3` policy with a version `1` policy, and all of the conditions in the version `3` policy are lost.
	Etag string `pulumi:"etag"`
	// Specifies the format of the policy. Valid values are `0`, `1`, and `3`. Requests that specify an invalid value are rejected. Any operation that affects conditional role bindings must specify version `3`. This requirement applies to the following operations: * Getting a policy that includes a conditional role binding * Adding a conditional role binding to a policy * Changing a conditional role binding in a policy * Removing any role binding, with or without a condition, from a policy that includes conditions **Important:** If you use IAM Conditions, you must include the `etag` field whenever you call `setIamPolicy`. If you omit this field, then IAM allows you to overwrite a version `3` policy with a version `1` policy, and all of the conditions in the version `3` policy are lost. If a policy does not include any conditions, operations on that policy may specify any valid version or leave the field unset. To learn which resources support conditions in their IAM policies, see the [IAM documentation](https://cloud.google.com/iam/help/conditions/resource-policies).
	Version int `pulumi:"version"`
}

func LookupInstanceIamPolicy 

func LookupInstanceIamPolicy(ctx *pulumi.Context, args *LookupInstanceIamPolicyArgs, opts ...pulumi.InvokeOption) (*LookupInstanceIamPolicyResult, error)

Gets the access control policy for a resource. Returns an empty policy if the resource exists and does not have a policy set.

type LookupInstanceIamPolicyResultOutput 

type LookupInstanceIamPolicyResultOutput struct{ *pulumi.OutputState }

func LookupInstanceIamPolicyOutput 

func LookupInstanceIamPolicyOutput(ctx *pulumi.Context, args LookupInstanceIamPolicyOutputArgs, opts ...pulumi.InvokeOption) LookupInstanceIamPolicyResultOutput

func (LookupInstanceIamPolicyResultOutput) Bindings 

func (o LookupInstanceIamPolicyResultOutput) Bindings() BindingResponseArrayOutput

Associates a list of `members`, or principals, with a `role`. Optionally, may specify a `condition` that determines how and when the `bindings` are applied. Each of the `bindings` must contain at least one principal. The `bindings` in a `Policy` can refer to up to 1,500 principals; up to 250 of these principals can be Google groups. Each occurrence of a principal counts towards these limits. For example, if the `bindings` grant 50 different roles to `user:alice@example.com`, and not to any other principal, then you can add another 1,450 principals to the `bindings` in the `Policy`.

func (LookupInstanceIamPolicyResultOutput) ElementType 

func (LookupInstanceIamPolicyResultOutput) ElementType() reflect.Type

func (LookupInstanceIamPolicyResultOutput) Etag 

func (o LookupInstanceIamPolicyResultOutput) Etag() pulumi.StringOutput

`etag` is used for optimistic concurrency control as a way to help prevent simultaneous updates of a policy from overwriting each other. It is strongly suggested that systems make use of the `etag` in the read-modify-write cycle to perform policy updates in order to avoid race conditions: An `etag` is returned in the response to `getIamPolicy`, and systems are expected to put that etag in the request to `setIamPolicy` to ensure that their change will be applied to the same version of the policy. **Important:** If you use IAM Conditions, you must include the `etag` field whenever you call `setIamPolicy`. If you omit this field, then IAM allows you to overwrite a version `3` policy with a version `1` policy, and all of the conditions in the version `3` policy are lost.

func (LookupInstanceIamPolicyResultOutput) ToLookupInstanceIamPolicyResultOutput 

func (o LookupInstanceIamPolicyResultOutput) ToLookupInstanceIamPolicyResultOutput() LookupInstanceIamPolicyResultOutput

func (LookupInstanceIamPolicyResultOutput) ToLookupInstanceIamPolicyResultOutputWithContext 

func (o LookupInstanceIamPolicyResultOutput) ToLookupInstanceIamPolicyResultOutputWithContext(ctx context.Context) LookupInstanceIamPolicyResultOutput

func (LookupInstanceIamPolicyResultOutput) Version 

func (o LookupInstanceIamPolicyResultOutput) Version() pulumi.IntOutput

Specifies the format of the policy. Valid values are `0`, `1`, and `3`. Requests that specify an invalid value are rejected. Any operation that affects conditional role bindings must specify version `3`. This requirement applies to the following operations: * Getting a policy that includes a conditional role binding * Adding a conditional role binding to a policy * Changing a conditional role binding in a policy * Removing any role binding, with or without a condition, from a policy that includes conditions **Important:** If you use IAM Conditions, you must include the `etag` field whenever you call `setIamPolicy`. If you omit this field, then IAM allows you to overwrite a version `3` policy with a version `1` policy, and all of the conditions in the version `3` policy are lost. If a policy does not include any conditions, operations on that policy may specify any valid version or leave the field unset. To learn which resources support conditions in their IAM policies, see the [IAM documentation](https://cloud.google.com/iam/help/conditions/resource-policies).

type LookupInstanceOutputArgs 

type LookupInstanceOutputArgs struct {
	InstanceId pulumi.StringInput    `pulumi:"instanceId"`
	Location   pulumi.StringInput    `pulumi:"location"`
	Project    pulumi.StringPtrInput `pulumi:"project"`
}

func (LookupInstanceOutputArgs) ElementType 

func (LookupInstanceOutputArgs) ElementType() reflect.Type

type LookupInstanceResult 

type LookupInstanceResult struct {
	// Build info of the Instance if it's in `ACTIVE` state.
	Build BuildResponse `pulumi:"build"`
	// Config of the Instance.
	Config ConfigResponse `pulumi:"config"`
	// Creation timestamp.
	CreateTime string `pulumi:"createTime"`
	// Format: `projects/*/locations/*/instance`. Currently only `locations/global` is supported.
	Name string `pulumi:"name"`
	// The current state of the Instance.
	State string `pulumi:"state"`
	// Extra information of Instance.State if the state is `FAILED`.
	StateMessage string `pulumi:"stateMessage"`
	// Last update timestamp.
	UpdateTime string `pulumi:"updateTime"`
}

func LookupInstance 

func LookupInstance(ctx *pulumi.Context, args *LookupInstanceArgs, opts ...pulumi.InvokeOption) (*LookupInstanceResult, error)

Gets details of a single Instance.

type LookupInstanceResultOutput 

type LookupInstanceResultOutput struct{ *pulumi.OutputState }

func LookupInstanceOutput 

func LookupInstanceOutput(ctx *pulumi.Context, args LookupInstanceOutputArgs, opts ...pulumi.InvokeOption) LookupInstanceResultOutput

func (LookupInstanceResultOutput) Build added in v0.29.0 

func (o LookupInstanceResultOutput) Build() BuildResponseOutput

Build info of the Instance if it's in `ACTIVE` state.

func (LookupInstanceResultOutput) Config 

func (o LookupInstanceResultOutput) Config() ConfigResponseOutput

Config of the Instance.

func (LookupInstanceResultOutput) CreateTime 

func (o LookupInstanceResultOutput) CreateTime() pulumi.StringOutput

Creation timestamp.

func (LookupInstanceResultOutput) ElementType 

func (LookupInstanceResultOutput) ElementType() reflect.Type

func (LookupInstanceResultOutput) Name 

func (o LookupInstanceResultOutput) Name() pulumi.StringOutput

Format: `projects/*/locations/*/instance`. Currently only `locations/global` is supported.

func (LookupInstanceResultOutput) State 

func (o LookupInstanceResultOutput) State() pulumi.StringOutput

The current state of the Instance.

func (LookupInstanceResultOutput) StateMessage 

func (o LookupInstanceResultOutput) StateMessage() pulumi.StringOutput

Extra information of Instance.State if the state is `FAILED`.

func (LookupInstanceResultOutput) ToLookupInstanceResultOutput 

func (o LookupInstanceResultOutput) ToLookupInstanceResultOutput() LookupInstanceResultOutput

func (LookupInstanceResultOutput) ToLookupInstanceResultOutputWithContext 

func (o LookupInstanceResultOutput) ToLookupInstanceResultOutputWithContext(ctx context.Context) LookupInstanceResultOutput

func (LookupInstanceResultOutput) UpdateTime 

func (o LookupInstanceResultOutput) UpdateTime() pulumi.StringOutput

Last update timestamp.

type LookupRuntimeIamPolicyArgs 

type LookupRuntimeIamPolicyArgs struct {
	Location                      string  `pulumi:"location"`
	OptionsRequestedPolicyVersion *int    `pulumi:"optionsRequestedPolicyVersion"`
	Project                       *string `pulumi:"project"`
}

type LookupRuntimeIamPolicyOutputArgs 

type LookupRuntimeIamPolicyOutputArgs struct {
	Location                      pulumi.StringInput    `pulumi:"location"`
	OptionsRequestedPolicyVersion pulumi.IntPtrInput    `pulumi:"optionsRequestedPolicyVersion"`
	Project                       pulumi.StringPtrInput `pulumi:"project"`
}

func (LookupRuntimeIamPolicyOutputArgs) ElementType 

func (LookupRuntimeIamPolicyOutputArgs) ElementType() reflect.Type

type LookupRuntimeIamPolicyResult 

type LookupRuntimeIamPolicyResult struct {
	// Associates a list of `members`, or principals, with a `role`. Optionally, may specify a `condition` that determines how and when the `bindings` are applied. Each of the `bindings` must contain at least one principal. The `bindings` in a `Policy` can refer to up to 1,500 principals; up to 250 of these principals can be Google groups. Each occurrence of a principal counts towards these limits. For example, if the `bindings` grant 50 different roles to `user:alice@example.com`, and not to any other principal, then you can add another 1,450 principals to the `bindings` in the `Policy`.
	Bindings []BindingResponse `pulumi:"bindings"`
	// `etag` is used for optimistic concurrency control as a way to help prevent simultaneous updates of a policy from overwriting each other. It is strongly suggested that systems make use of the `etag` in the read-modify-write cycle to perform policy updates in order to avoid race conditions: An `etag` is returned in the response to `getIamPolicy`, and systems are expected to put that etag in the request to `setIamPolicy` to ensure that their change will be applied to the same version of the policy. **Important:** If you use IAM Conditions, you must include the `etag` field whenever you call `setIamPolicy`. If you omit this field, then IAM allows you to overwrite a version `3` policy with a version `1` policy, and all of the conditions in the version `3` policy are lost.
	Etag string `pulumi:"etag"`
	// Specifies the format of the policy. Valid values are `0`, `1`, and `3`. Requests that specify an invalid value are rejected. Any operation that affects conditional role bindings must specify version `3`. This requirement applies to the following operations: * Getting a policy that includes a conditional role binding * Adding a conditional role binding to a policy * Changing a conditional role binding in a policy * Removing any role binding, with or without a condition, from a policy that includes conditions **Important:** If you use IAM Conditions, you must include the `etag` field whenever you call `setIamPolicy`. If you omit this field, then IAM allows you to overwrite a version `3` policy with a version `1` policy, and all of the conditions in the version `3` policy are lost. If a policy does not include any conditions, operations on that policy may specify any valid version or leave the field unset. To learn which resources support conditions in their IAM policies, see the [IAM documentation](https://cloud.google.com/iam/help/conditions/resource-policies).
	Version int `pulumi:"version"`
}

func LookupRuntimeIamPolicy 

func LookupRuntimeIamPolicy(ctx *pulumi.Context, args *LookupRuntimeIamPolicyArgs, opts ...pulumi.InvokeOption) (*LookupRuntimeIamPolicyResult, error)

Gets the access control policy for a resource. Returns an empty policy if the resource exists and does not have a policy set.

type LookupRuntimeIamPolicyResultOutput 

type LookupRuntimeIamPolicyResultOutput struct{ *pulumi.OutputState }

func LookupRuntimeIamPolicyOutput 

func LookupRuntimeIamPolicyOutput(ctx *pulumi.Context, args LookupRuntimeIamPolicyOutputArgs, opts ...pulumi.InvokeOption) LookupRuntimeIamPolicyResultOutput

func (LookupRuntimeIamPolicyResultOutput) Bindings 

func (o LookupRuntimeIamPolicyResultOutput) Bindings() BindingResponseArrayOutput

Associates a list of `members`, or principals, with a `role`. Optionally, may specify a `condition` that determines how and when the `bindings` are applied. Each of the `bindings` must contain at least one principal. The `bindings` in a `Policy` can refer to up to 1,500 principals; up to 250 of these principals can be Google groups. Each occurrence of a principal counts towards these limits. For example, if the `bindings` grant 50 different roles to `user:alice@example.com`, and not to any other principal, then you can add another 1,450 principals to the `bindings` in the `Policy`.

func (LookupRuntimeIamPolicyResultOutput) ElementType 

func (LookupRuntimeIamPolicyResultOutput) ElementType() reflect.Type

func (LookupRuntimeIamPolicyResultOutput) Etag 

func (o LookupRuntimeIamPolicyResultOutput) Etag() pulumi.StringOutput

`etag` is used for optimistic concurrency control as a way to help prevent simultaneous updates of a policy from overwriting each other. It is strongly suggested that systems make use of the `etag` in the read-modify-write cycle to perform policy updates in order to avoid race conditions: An `etag` is returned in the response to `getIamPolicy`, and systems are expected to put that etag in the request to `setIamPolicy` to ensure that their change will be applied to the same version of the policy. **Important:** If you use IAM Conditions, you must include the `etag` field whenever you call `setIamPolicy`. If you omit this field, then IAM allows you to overwrite a version `3` policy with a version `1` policy, and all of the conditions in the version `3` policy are lost.

func (LookupRuntimeIamPolicyResultOutput) ToLookupRuntimeIamPolicyResultOutput 

func (o LookupRuntimeIamPolicyResultOutput) ToLookupRuntimeIamPolicyResultOutput() LookupRuntimeIamPolicyResultOutput

func (LookupRuntimeIamPolicyResultOutput) ToLookupRuntimeIamPolicyResultOutputWithContext 

func (o LookupRuntimeIamPolicyResultOutput) ToLookupRuntimeIamPolicyResultOutputWithContext(ctx context.Context) LookupRuntimeIamPolicyResultOutput

func (LookupRuntimeIamPolicyResultOutput) Version 

func (o LookupRuntimeIamPolicyResultOutput) Version() pulumi.IntOutput

Specifies the format of the policy. Valid values are `0`, `1`, and `3`. Requests that specify an invalid value are rejected. Any operation that affects conditional role bindings must specify version `3`. This requirement applies to the following operations: * Getting a policy that includes a conditional role binding * Adding a conditional role binding to a policy * Changing a conditional role binding in a policy * Removing any role binding, with or without a condition, from a policy that includes conditions **Important:** If you use IAM Conditions, you must include the `etag` field whenever you call `setIamPolicy`. If you omit this field, then IAM allows you to overwrite a version `3` policy with a version `1` policy, and all of the conditions in the version `3` policy are lost. If a policy does not include any conditions, operations on that policy may specify any valid version or leave the field unset. To learn which resources support conditions in their IAM policies, see the [IAM documentation](https://cloud.google.com/iam/help/conditions/resource-policies).

type LookupSpecArgs 

type LookupSpecArgs struct {
	ApiId     string  `pulumi:"apiId"`
	Location  string  `pulumi:"location"`
	Project   *string `pulumi:"project"`
	SpecId    string  `pulumi:"specId"`
	VersionId string  `pulumi:"versionId"`
}

type LookupSpecOutputArgs 

type LookupSpecOutputArgs struct {
	ApiId     pulumi.StringInput    `pulumi:"apiId"`
	Location  pulumi.StringInput    `pulumi:"location"`
	Project   pulumi.StringPtrInput `pulumi:"project"`
	SpecId    pulumi.StringInput    `pulumi:"specId"`
	VersionId pulumi.StringInput    `pulumi:"versionId"`
}

func (LookupSpecOutputArgs) ElementType 

func (LookupSpecOutputArgs) ElementType() reflect.Type

type LookupSpecResult 

type LookupSpecResult struct {
	// Annotations attach non-identifying metadata to resources. Annotation keys and values are less restricted than those of labels, but should be generally used for small values of broad interest. Larger, topic- specific metadata should be stored in Artifacts.
	Annotations map[string]string `pulumi:"annotations"`
	// Input only. The contents of the spec. Provided by API callers when specs are created or updated. To access the contents of a spec, use GetApiSpecContents.
	Contents string `pulumi:"contents"`
	// Creation timestamp; when the spec resource was created.
	CreateTime string `pulumi:"createTime"`
	// A detailed description.
	Description string `pulumi:"description"`
	// A possibly-hierarchical name used to refer to the spec from other specs.
	Filename string `pulumi:"filename"`
	// A SHA-256 hash of the spec's contents. If the spec is gzipped, this is the hash of the uncompressed spec.
	Hash string `pulumi:"hash"`
	// Labels attach identifying metadata to resources. Identifying metadata can be used to filter list operations. Label keys and values can be no longer than 64 characters (Unicode codepoints), can only contain lowercase letters, numeric characters, underscores and dashes. International characters are allowed. No more than 64 user labels can be associated with one resource (System labels are excluded). See https://goo.gl/xmQnxf for more information and examples of labels. System reserved label keys are prefixed with `apigeeregistry.googleapis.com/` and cannot be changed.
	Labels map[string]string `pulumi:"labels"`
	// A style (format) descriptor for this spec that is specified as a [Media Type](https://en.wikipedia.org/wiki/Media_type). Possible values include `application/vnd.apigee.proto`, `application/vnd.apigee.openapi`, and `application/vnd.apigee.graphql`, with possible suffixes representing compression types. These hypothetical names are defined in the vendor tree defined in RFC6838 (https://tools.ietf.org/html/rfc6838) and are not final. Content types can specify compression. Currently only GZip compression is supported (indicated with "+gzip").
	MimeType string `pulumi:"mimeType"`
	// Resource name.
	Name string `pulumi:"name"`
	// Revision creation timestamp; when the represented revision was created.
	RevisionCreateTime string `pulumi:"revisionCreateTime"`
	// Immutable. The revision ID of the spec. A new revision is committed whenever the spec contents are changed. The format is an 8-character hexadecimal string.
	RevisionId string `pulumi:"revisionId"`
	// Last update timestamp: when the represented revision was last modified.
	RevisionUpdateTime string `pulumi:"revisionUpdateTime"`
	// The size of the spec file in bytes. If the spec is gzipped, this is the size of the uncompressed spec.
	SizeBytes int `pulumi:"sizeBytes"`
	// The original source URI of the spec (if one exists). This is an external location that can be used for reference purposes but which may not be authoritative since this external resource may change after the spec is retrieved.
	SourceUri string `pulumi:"sourceUri"`
}

func LookupSpec 

func LookupSpec(ctx *pulumi.Context, args *LookupSpecArgs, opts ...pulumi.InvokeOption) (*LookupSpecResult, error)

Returns a specified spec.

type LookupSpecResultOutput 

type LookupSpecResultOutput struct{ *pulumi.OutputState }

func LookupSpecOutput 

func LookupSpecOutput(ctx *pulumi.Context, args LookupSpecOutputArgs, opts ...pulumi.InvokeOption) LookupSpecResultOutput

func (LookupSpecResultOutput) Annotations 

func (o LookupSpecResultOutput) Annotations() pulumi.StringMapOutput

Annotations attach non-identifying metadata to resources. Annotation keys and values are less restricted than those of labels, but should be generally used for small values of broad interest. Larger, topic- specific metadata should be stored in Artifacts.

func (LookupSpecResultOutput) Contents 

func (o LookupSpecResultOutput) Contents() pulumi.StringOutput

Input only. The contents of the spec. Provided by API callers when specs are created or updated. To access the contents of a spec, use GetApiSpecContents.

func (LookupSpecResultOutput) CreateTime 

func (o LookupSpecResultOutput) CreateTime() pulumi.StringOutput

Creation timestamp; when the spec resource was created.

func (LookupSpecResultOutput) Description 

func (o LookupSpecResultOutput) Description() pulumi.StringOutput

A detailed description.

func (LookupSpecResultOutput) ElementType 

func (LookupSpecResultOutput) ElementType() reflect.Type

func (LookupSpecResultOutput) Filename 

func (o LookupSpecResultOutput) Filename() pulumi.StringOutput

A possibly-hierarchical name used to refer to the spec from other specs.

func (LookupSpecResultOutput) Hash 

func (o LookupSpecResultOutput) Hash() pulumi.StringOutput

A SHA-256 hash of the spec's contents. If the spec is gzipped, this is the hash of the uncompressed spec.

func (LookupSpecResultOutput) Labels 

func (o LookupSpecResultOutput) Labels() pulumi.StringMapOutput

Labels attach identifying metadata to resources. Identifying metadata can be used to filter list operations. Label keys and values can be no longer than 64 characters (Unicode codepoints), can only contain lowercase letters, numeric characters, underscores and dashes. International characters are allowed. No more than 64 user labels can be associated with one resource (System labels are excluded). See https://goo.gl/xmQnxf for more information and examples of labels. System reserved label keys are prefixed with `apigeeregistry.googleapis.com/` and cannot be changed.

func (LookupSpecResultOutput) MimeType 

func (o LookupSpecResultOutput) MimeType() pulumi.StringOutput

A style (format) descriptor for this spec that is specified as a [Media Type](https://en.wikipedia.org/wiki/Media_type). Possible values include `application/vnd.apigee.proto`, `application/vnd.apigee.openapi`, and `application/vnd.apigee.graphql`, with possible suffixes representing compression types. These hypothetical names are defined in the vendor tree defined in RFC6838 (https://tools.ietf.org/html/rfc6838) and are not final. Content types can specify compression. Currently only GZip compression is supported (indicated with "+gzip").

func (LookupSpecResultOutput) Name 

func (o LookupSpecResultOutput) Name() pulumi.StringOutput

Resource name.

func (LookupSpecResultOutput) RevisionCreateTime 

func (o LookupSpecResultOutput) RevisionCreateTime() pulumi.StringOutput

Revision creation timestamp; when the represented revision was created.

func (LookupSpecResultOutput) RevisionId 

func (o LookupSpecResultOutput) RevisionId() pulumi.StringOutput

Immutable. The revision ID of the spec. A new revision is committed whenever the spec contents are changed. The format is an 8-character hexadecimal string.

func (LookupSpecResultOutput) RevisionUpdateTime 

func (o LookupSpecResultOutput) RevisionUpdateTime() pulumi.StringOutput

Last update timestamp: when the represented revision was last modified.

func (LookupSpecResultOutput) SizeBytes 

func (o LookupSpecResultOutput) SizeBytes() pulumi.IntOutput

The size of the spec file in bytes. If the spec is gzipped, this is the size of the uncompressed spec.

func (LookupSpecResultOutput) SourceUri 

func (o LookupSpecResultOutput) SourceUri() pulumi.StringOutput

The original source URI of the spec (if one exists). This is an external location that can be used for reference purposes but which may not be authoritative since this external resource may change after the spec is retrieved.

func (LookupSpecResultOutput) ToLookupSpecResultOutput 

func (o LookupSpecResultOutput) ToLookupSpecResultOutput() LookupSpecResultOutput

func (LookupSpecResultOutput) ToLookupSpecResultOutputWithContext 

func (o LookupSpecResultOutput) ToLookupSpecResultOutputWithContext(ctx context.Context) LookupSpecResultOutput

type LookupVersionArgs 

type LookupVersionArgs struct {
	ApiId     string  `pulumi:"apiId"`
	Location  string  `pulumi:"location"`
	Project   *string `pulumi:"project"`
	VersionId string  `pulumi:"versionId"`
}

type LookupVersionArtifactArgs 

type LookupVersionArtifactArgs struct {
	ApiId      string  `pulumi:"apiId"`
	ArtifactId string  `pulumi:"artifactId"`
	Location   string  `pulumi:"location"`
	Project    *string `pulumi:"project"`
	VersionId  string  `pulumi:"versionId"`
}

type LookupVersionArtifactOutputArgs 

type LookupVersionArtifactOutputArgs struct {
	ApiId      pulumi.StringInput    `pulumi:"apiId"`
	ArtifactId pulumi.StringInput    `pulumi:"artifactId"`
	Location   pulumi.StringInput    `pulumi:"location"`
	Project    pulumi.StringPtrInput `pulumi:"project"`
	VersionId  pulumi.StringInput    `pulumi:"versionId"`
}

func (LookupVersionArtifactOutputArgs) ElementType 

func (LookupVersionArtifactOutputArgs) ElementType() reflect.Type

type LookupVersionArtifactResult 

type LookupVersionArtifactResult struct {
	// Annotations attach non-identifying metadata to resources. Annotation keys and values are less restricted than those of labels, but should be generally used for small values of broad interest. Larger, topic- specific metadata should be stored in Artifacts.
	Annotations map[string]string `pulumi:"annotations"`
	// Input only. The contents of the artifact. Provided by API callers when artifacts are created or replaced. To access the contents of an artifact, use GetArtifactContents.
	Contents string `pulumi:"contents"`
	// Creation timestamp.
	CreateTime string `pulumi:"createTime"`
	// A SHA-256 hash of the artifact's contents. If the artifact is gzipped, this is the hash of the uncompressed artifact.
	Hash string `pulumi:"hash"`
	// Labels attach identifying metadata to resources. Identifying metadata can be used to filter list operations. Label keys and values can be no longer than 64 characters (Unicode codepoints), can only contain lowercase letters, numeric characters, underscores and dashes. International characters are allowed. No more than 64 user labels can be associated with one resource (System labels are excluded). See https://goo.gl/xmQnxf for more information and examples of labels. System reserved label keys are prefixed with "registry.googleapis.com/" and cannot be changed.
	Labels map[string]string `pulumi:"labels"`
	// A content type specifier for the artifact. Content type specifiers are Media Types (https://en.wikipedia.org/wiki/Media_type) with a possible "schema" parameter that specifies a schema for the stored information. Content types can specify compression. Currently only GZip compression is supported (indicated with "+gzip").
	MimeType string `pulumi:"mimeType"`
	// Resource name.
	Name string `pulumi:"name"`
	// The size of the artifact in bytes. If the artifact is gzipped, this is the size of the uncompressed artifact.
	SizeBytes int `pulumi:"sizeBytes"`
	// Last update timestamp.
	UpdateTime string `pulumi:"updateTime"`
}

func LookupVersionArtifact 

func LookupVersionArtifact(ctx *pulumi.Context, args *LookupVersionArtifactArgs, opts ...pulumi.InvokeOption) (*LookupVersionArtifactResult, error)

Returns a specified artifact.

type LookupVersionArtifactResultOutput 

type LookupVersionArtifactResultOutput struct{ *pulumi.OutputState }

func LookupVersionArtifactOutput 

func LookupVersionArtifactOutput(ctx *pulumi.Context, args LookupVersionArtifactOutputArgs, opts ...pulumi.InvokeOption) LookupVersionArtifactResultOutput

func (LookupVersionArtifactResultOutput) Annotations added in v0.28.0 

func (o LookupVersionArtifactResultOutput) Annotations() pulumi.StringMapOutput

Annotations attach non-identifying metadata to resources. Annotation keys and values are less restricted than those of labels, but should be generally used for small values of broad interest. Larger, topic- specific metadata should be stored in Artifacts.

func (LookupVersionArtifactResultOutput) Contents 

func (o LookupVersionArtifactResultOutput) Contents() pulumi.StringOutput

Input only. The contents of the artifact. Provided by API callers when artifacts are created or replaced. To access the contents of an artifact, use GetArtifactContents.

func (LookupVersionArtifactResultOutput) CreateTime 

func (o LookupVersionArtifactResultOutput) CreateTime() pulumi.StringOutput

Creation timestamp.

func (LookupVersionArtifactResultOutput) ElementType 

func (LookupVersionArtifactResultOutput) ElementType() reflect.Type

func (LookupVersionArtifactResultOutput) Hash 

func (o LookupVersionArtifactResultOutput) Hash() pulumi.StringOutput

A SHA-256 hash of the artifact's contents. If the artifact is gzipped, this is the hash of the uncompressed artifact.

func (LookupVersionArtifactResultOutput) Labels added in v0.28.0 

func (o LookupVersionArtifactResultOutput) Labels() pulumi.StringMapOutput

Labels attach identifying metadata to resources. Identifying metadata can be used to filter list operations. Label keys and values can be no longer than 64 characters (Unicode codepoints), can only contain lowercase letters, numeric characters, underscores and dashes. International characters are allowed. No more than 64 user labels can be associated with one resource (System labels are excluded). See https://goo.gl/xmQnxf for more information and examples of labels. System reserved label keys are prefixed with "registry.googleapis.com/" and cannot be changed.

func (LookupVersionArtifactResultOutput) MimeType 

func (o LookupVersionArtifactResultOutput) MimeType() pulumi.StringOutput

A content type specifier for the artifact. Content type specifiers are Media Types (https://en.wikipedia.org/wiki/Media_type) with a possible "schema" parameter that specifies a schema for the stored information. Content types can specify compression. Currently only GZip compression is supported (indicated with "+gzip").

func (LookupVersionArtifactResultOutput) Name 

func (o LookupVersionArtifactResultOutput) Name() pulumi.StringOutput

Resource name.

func (LookupVersionArtifactResultOutput) SizeBytes 

func (o LookupVersionArtifactResultOutput) SizeBytes() pulumi.IntOutput

The size of the artifact in bytes. If the artifact is gzipped, this is the size of the uncompressed artifact.

func (LookupVersionArtifactResultOutput) ToLookupVersionArtifactResultOutput 

func (o LookupVersionArtifactResultOutput) ToLookupVersionArtifactResultOutput() LookupVersionArtifactResultOutput

func (LookupVersionArtifactResultOutput) ToLookupVersionArtifactResultOutputWithContext 

func (o LookupVersionArtifactResultOutput) ToLookupVersionArtifactResultOutputWithContext(ctx context.Context) LookupVersionArtifactResultOutput

func (LookupVersionArtifactResultOutput) UpdateTime 

func (o LookupVersionArtifactResultOutput) UpdateTime() pulumi.StringOutput

Last update timestamp.

type LookupVersionOutputArgs 

type LookupVersionOutputArgs struct {
	ApiId     pulumi.StringInput    `pulumi:"apiId"`
	Location  pulumi.StringInput    `pulumi:"location"`
	Project   pulumi.StringPtrInput `pulumi:"project"`
	VersionId pulumi.StringInput    `pulumi:"versionId"`
}

func (LookupVersionOutputArgs) ElementType 

func (LookupVersionOutputArgs) ElementType() reflect.Type

type LookupVersionResult 

type LookupVersionResult struct {
	// Annotations attach non-identifying metadata to resources. Annotation keys and values are less restricted than those of labels, but should be generally used for small values of broad interest. Larger, topic- specific metadata should be stored in Artifacts.
	Annotations map[string]string `pulumi:"annotations"`
	// Creation timestamp.
	CreateTime string `pulumi:"createTime"`
	// A detailed description.
	Description string `pulumi:"description"`
	// Human-meaningful name.
	DisplayName string `pulumi:"displayName"`
	// Labels attach identifying metadata to resources. Identifying metadata can be used to filter list operations. Label keys and values can be no longer than 64 characters (Unicode codepoints), can only contain lowercase letters, numeric characters, underscores and dashes. International characters are allowed. No more than 64 user labels can be associated with one resource (System labels are excluded). See https://goo.gl/xmQnxf for more information and examples of labels. System reserved label keys are prefixed with `apigeeregistry.googleapis.com/` and cannot be changed.
	Labels map[string]string `pulumi:"labels"`
	// Resource name.
	Name string `pulumi:"name"`
	// The primary spec for this version. Format: projects/{project}/locations/{location}/apis/{api}/versions/{version}/specs/{spec}
	PrimarySpec string `pulumi:"primarySpec"`
	// A user-definable description of the lifecycle phase of this API version. Format: free-form, but we expect single words that describe API maturity, e.g., "CONCEPT", "DESIGN", "DEVELOPMENT", "STAGING", "PRODUCTION", "DEPRECATED", "RETIRED".
	State string `pulumi:"state"`
	// Last update timestamp.
	UpdateTime string `pulumi:"updateTime"`
}

func LookupVersion 

func LookupVersion(ctx *pulumi.Context, args *LookupVersionArgs, opts ...pulumi.InvokeOption) (*LookupVersionResult, error)

Returns a specified version.

type LookupVersionResultOutput 

type LookupVersionResultOutput struct{ *pulumi.OutputState }

func LookupVersionOutput 

func LookupVersionOutput(ctx *pulumi.Context, args LookupVersionOutputArgs, opts ...pulumi.InvokeOption) LookupVersionResultOutput

func (LookupVersionResultOutput) Annotations 

func (o LookupVersionResultOutput) Annotations() pulumi.StringMapOutput

Annotations attach non-identifying metadata to resources. Annotation keys and values are less restricted than those of labels, but should be generally used for small values of broad interest. Larger, topic- specific metadata should be stored in Artifacts.

func (LookupVersionResultOutput) CreateTime 

func (o LookupVersionResultOutput) CreateTime() pulumi.StringOutput

Creation timestamp.

func (LookupVersionResultOutput) Description 

func (o LookupVersionResultOutput) Description() pulumi.StringOutput

A detailed description.

func (LookupVersionResultOutput) DisplayName 

func (o LookupVersionResultOutput) DisplayName() pulumi.StringOutput

Human-meaningful name.

func (LookupVersionResultOutput) ElementType 

func (LookupVersionResultOutput) ElementType() reflect.Type

func (LookupVersionResultOutput) Labels 

func (o LookupVersionResultOutput) Labels() pulumi.StringMapOutput

Labels attach identifying metadata to resources. Identifying metadata can be used to filter list operations. Label keys and values can be no longer than 64 characters (Unicode codepoints), can only contain lowercase letters, numeric characters, underscores and dashes. International characters are allowed. No more than 64 user labels can be associated with one resource (System labels are excluded). See https://goo.gl/xmQnxf for more information and examples of labels. System reserved label keys are prefixed with `apigeeregistry.googleapis.com/` and cannot be changed.

func (LookupVersionResultOutput) Name 

func (o LookupVersionResultOutput) Name() pulumi.StringOutput

Resource name.

func (LookupVersionResultOutput) PrimarySpec added in v0.28.0 

func (o LookupVersionResultOutput) PrimarySpec() pulumi.StringOutput

The primary spec for this version. Format: projects/{project}/locations/{location}/apis/{api}/versions/{version}/specs/{spec}

func (LookupVersionResultOutput) State 

func (o LookupVersionResultOutput) State() pulumi.StringOutput

A user-definable description of the lifecycle phase of this API version. Format: free-form, but we expect single words that describe API maturity, e.g., "CONCEPT", "DESIGN", "DEVELOPMENT", "STAGING", "PRODUCTION", "DEPRECATED", "RETIRED".

func (LookupVersionResultOutput) ToLookupVersionResultOutput 

func (o LookupVersionResultOutput) ToLookupVersionResultOutput() LookupVersionResultOutput

func (LookupVersionResultOutput) ToLookupVersionResultOutputWithContext 

func (o LookupVersionResultOutput) ToLookupVersionResultOutputWithContext(ctx context.Context) LookupVersionResultOutput

func (LookupVersionResultOutput) UpdateTime 

func (o LookupVersionResultOutput) UpdateTime() pulumi.StringOutput

Last update timestamp.

type RuntimeIamBinding added in v0.26.0 

type RuntimeIamBinding struct {
	pulumi.CustomResourceState

	// An IAM Condition for a given binding. See https://cloud.google.com/iam/docs/conditions-overview for additional details.
	Condition iam.ConditionPtrOutput `pulumi:"condition"`
	// The etag of the resource's IAM policy.
	Etag pulumi.StringOutput `pulumi:"etag"`
	// Specifies the principals requesting access for a Google Cloud resource. `members` can have the following values: * `allUsers`: A special identifier that represents anyone who is on the internet; with or without a Google account. * `allAuthenticatedUsers`: A special identifier that represents anyone who is authenticated with a Google account or a service account. Does not include identities that come from external identity providers (IdPs) through identity federation. * `user:{emailid}`: An email address that represents a specific Google account. For example, `alice@example.com` . * `serviceAccount:{emailid}`: An email address that represents a Google service account. For example, `my-other-app@appspot.gserviceaccount.com`. * `serviceAccount:{projectid}.svc.id.goog[{namespace}/{kubernetes-sa}]`: An identifier for a [Kubernetes service account](https://cloud.google.com/kubernetes-engine/docs/how-to/kubernetes-service-accounts). For example, `my-project.svc.id.goog[my-namespace/my-kubernetes-sa]`. * `group:{emailid}`: An email address that represents a Google group. For example, `admins@example.com`. * `domain:{domain}`: The G Suite domain (primary) that represents all the users of that domain. For example, `google.com` or `example.com`. * `deleted:user:{emailid}?uid={uniqueid}`: An email address (plus unique identifier) representing a user that has been recently deleted. For example, `alice@example.com?uid=123456789012345678901`. If the user is recovered, this value reverts to `user:{emailid}` and the recovered user retains the role in the binding. * `deleted:serviceAccount:{emailid}?uid={uniqueid}`: An email address (plus unique identifier) representing a service account that has been recently deleted. For example, `my-other-app@appspot.gserviceaccount.com?uid=123456789012345678901`. If the service account is undeleted, this value reverts to `serviceAccount:{emailid}` and the undeleted service account retains the role in the binding. * `deleted:group:{emailid}?uid={uniqueid}`: An email address (plus unique identifier) representing a Google group that has been recently deleted. For example, `admins@example.com?uid=123456789012345678901`. If the group is recovered, this value reverts to `group:{emailid}` and the recovered group retains the role in the binding.
	Members pulumi.StringArrayOutput `pulumi:"members"`
	// The name of the resource to manage IAM policies for.
	Name pulumi.StringOutput `pulumi:"name"`
	// The project in which the resource belongs. If it is not provided, a default will be supplied.
	Project pulumi.StringOutput `pulumi:"project"`
	// Role that is assigned to the list of `members`, or principals. For example, `roles/viewer`, `roles/editor`, or `roles/owner`.
	Role pulumi.StringOutput `pulumi:"role"`
}

Sets the access control policy on the specified resource. Replaces any existing policy. Can return `NOT_FOUND`, `INVALID_ARGUMENT`, and `PERMISSION_DENIED` errors.

func GetRuntimeIamBinding added in v0.26.0 

func GetRuntimeIamBinding(ctx *pulumi.Context,
	name string, id pulumi.IDInput, state *RuntimeIamBindingState, opts ...pulumi.ResourceOption) (*RuntimeIamBinding, error)

GetRuntimeIamBinding gets an existing RuntimeIamBinding resource's state with the given name, ID, and optional state properties that are used to uniquely qualify the lookup (nil if not required).

func NewRuntimeIamBinding added in v0.26.0 

func NewRuntimeIamBinding(ctx *pulumi.Context,
	name string, args *RuntimeIamBindingArgs, opts ...pulumi.ResourceOption) (*RuntimeIamBinding, error)

NewRuntimeIamBinding registers a new resource with the given unique name, arguments, and options.

func (*RuntimeIamBinding) ElementType added in v0.26.0 

func (*RuntimeIamBinding) ElementType() reflect.Type

func (*RuntimeIamBinding) ToRuntimeIamBindingOutput added in v0.26.0 

func (i *RuntimeIamBinding) ToRuntimeIamBindingOutput() RuntimeIamBindingOutput

func (*RuntimeIamBinding) ToRuntimeIamBindingOutputWithContext added in v0.26.0 

func (i *RuntimeIamBinding) ToRuntimeIamBindingOutputWithContext(ctx context.Context) RuntimeIamBindingOutput

type RuntimeIamBindingArgs added in v0.26.0 

type RuntimeIamBindingArgs struct {
	// An IAM Condition for a given binding.
	Condition iam.ConditionPtrInput
	// Identities that will be granted the privilege in role. Each entry can have one of the following values:
	//
	//  * user:{emailid}: An email address that represents a specific Google account. For example, alice@gmail.com or joe@example.com.
	//  * serviceAccount:{emailid}: An email address that represents a service account. For example, my-other-app@appspot.gserviceaccount.com.
	//  * group:{emailid}: An email address that represents a Google group. For example, admins@example.com.
	//  * domain:{domain}: A G Suite domain (primary, instead of alias) name that represents all the users of that domain. For example, google.com or example.com.
	Members pulumi.StringArrayInput
	// The name of the resource to manage IAM policies for.
	Name pulumi.StringInput
	// The role that should be applied. Only one `IamBinding` can be used per role.
	Role pulumi.StringInput
}

The set of arguments for constructing a RuntimeIamBinding resource.

func (RuntimeIamBindingArgs) ElementType added in v0.26.0 

func (RuntimeIamBindingArgs) ElementType() reflect.Type

type RuntimeIamBindingInput added in v0.26.0 

type RuntimeIamBindingInput interface {
	pulumi.Input

	ToRuntimeIamBindingOutput() RuntimeIamBindingOutput
	ToRuntimeIamBindingOutputWithContext(ctx context.Context) RuntimeIamBindingOutput
}

type RuntimeIamBindingOutput added in v0.26.0 

type RuntimeIamBindingOutput struct{ *pulumi.OutputState }

func (RuntimeIamBindingOutput) Condition added in v0.26.0 

func (o RuntimeIamBindingOutput) Condition() iam.ConditionPtrOutput

An IAM Condition for a given binding. See https://cloud.google.com/iam/docs/conditions-overview for additional details.

func (RuntimeIamBindingOutput) ElementType added in v0.26.0 

func (RuntimeIamBindingOutput) ElementType() reflect.Type

func (RuntimeIamBindingOutput) Etag added in v0.26.0 

func (o RuntimeIamBindingOutput) Etag() pulumi.StringOutput

The etag of the resource's IAM policy.

func (RuntimeIamBindingOutput) Members added in v0.26.0 

func (o RuntimeIamBindingOutput) Members() pulumi.StringArrayOutput

Specifies the principals requesting access for a Google Cloud resource. `members` can have the following values: * `allUsers`: A special identifier that represents anyone who is on the internet; with or without a Google account. * `allAuthenticatedUsers`: A special identifier that represents anyone who is authenticated with a Google account or a service account. Does not include identities that come from external identity providers (IdPs) through identity federation. * `user:{emailid}`: An email address that represents a specific Google account. For example, `alice@example.com` . * `serviceAccount:{emailid}`: An email address that represents a Google service account. For example, `my-other-app@appspot.gserviceaccount.com`. * `serviceAccount:{projectid}.svc.id.goog[{namespace}/{kubernetes-sa}]`: An identifier for a [Kubernetes service account](https://cloud.google.com/kubernetes-engine/docs/how-to/kubernetes-service-accounts). For example, `my-project.svc.id.goog[my-namespace/my-kubernetes-sa]`. * `group:{emailid}`: An email address that represents a Google group. For example, `admins@example.com`. * `domain:{domain}`: The G Suite domain (primary) that represents all the users of that domain. For example, `google.com` or `example.com`. * `deleted:user:{emailid}?uid={uniqueid}`: An email address (plus unique identifier) representing a user that has been recently deleted. For example, `alice@example.com?uid=123456789012345678901`. If the user is recovered, this value reverts to `user:{emailid}` and the recovered user retains the role in the binding. * `deleted:serviceAccount:{emailid}?uid={uniqueid}`: An email address (plus unique identifier) representing a service account that has been recently deleted. For example, `my-other-app@appspot.gserviceaccount.com?uid=123456789012345678901`. If the service account is undeleted, this value reverts to `serviceAccount:{emailid}` and the undeleted service account retains the role in the binding. * `deleted:group:{emailid}?uid={uniqueid}`: An email address (plus unique identifier) representing a Google group that has been recently deleted. For example, `admins@example.com?uid=123456789012345678901`. If the group is recovered, this value reverts to `group:{emailid}` and the recovered group retains the role in the binding.

func (RuntimeIamBindingOutput) Name added in v0.26.0 

func (o RuntimeIamBindingOutput) Name() pulumi.StringOutput

The name of the resource to manage IAM policies for.

func (RuntimeIamBindingOutput) Project added in v0.26.0 

func (o RuntimeIamBindingOutput) Project() pulumi.StringOutput

The project in which the resource belongs. If it is not provided, a default will be supplied.

func (RuntimeIamBindingOutput) Role added in v0.26.0 

func (o RuntimeIamBindingOutput) Role() pulumi.StringOutput

Role that is assigned to the list of `members`, or principals. For example, `roles/viewer`, `roles/editor`, or `roles/owner`.

func (RuntimeIamBindingOutput) ToRuntimeIamBindingOutput added in v0.26.0 

func (o RuntimeIamBindingOutput) ToRuntimeIamBindingOutput() RuntimeIamBindingOutput

func (RuntimeIamBindingOutput) ToRuntimeIamBindingOutputWithContext added in v0.26.0 

func (o RuntimeIamBindingOutput) ToRuntimeIamBindingOutputWithContext(ctx context.Context) RuntimeIamBindingOutput

type RuntimeIamBindingState added in v0.26.0 

type RuntimeIamBindingState struct {
}

func (RuntimeIamBindingState) ElementType added in v0.26.0 

func (RuntimeIamBindingState) ElementType() reflect.Type

type RuntimeIamMember added in v0.26.0 

type RuntimeIamMember struct {
	pulumi.CustomResourceState

	// An IAM Condition for a given binding. See https://cloud.google.com/iam/docs/conditions-overview for additional details.
	Condition iam.ConditionPtrOutput `pulumi:"condition"`
	// The etag of the resource's IAM policy.
	Etag pulumi.StringOutput `pulumi:"etag"`
	// Specifies the principals requesting access for a Google Cloud resource. `members` can have the following values: * `allUsers`: A special identifier that represents anyone who is on the internet; with or without a Google account. * `allAuthenticatedUsers`: A special identifier that represents anyone who is authenticated with a Google account or a service account. Does not include identities that come from external identity providers (IdPs) through identity federation. * `user:{emailid}`: An email address that represents a specific Google account. For example, `alice@example.com` . * `serviceAccount:{emailid}`: An email address that represents a Google service account. For example, `my-other-app@appspot.gserviceaccount.com`. * `serviceAccount:{projectid}.svc.id.goog[{namespace}/{kubernetes-sa}]`: An identifier for a [Kubernetes service account](https://cloud.google.com/kubernetes-engine/docs/how-to/kubernetes-service-accounts). For example, `my-project.svc.id.goog[my-namespace/my-kubernetes-sa]`. * `group:{emailid}`: An email address that represents a Google group. For example, `admins@example.com`. * `domain:{domain}`: The G Suite domain (primary) that represents all the users of that domain. For example, `google.com` or `example.com`. * `deleted:user:{emailid}?uid={uniqueid}`: An email address (plus unique identifier) representing a user that has been recently deleted. For example, `alice@example.com?uid=123456789012345678901`. If the user is recovered, this value reverts to `user:{emailid}` and the recovered user retains the role in the binding. * `deleted:serviceAccount:{emailid}?uid={uniqueid}`: An email address (plus unique identifier) representing a service account that has been recently deleted. For example, `my-other-app@appspot.gserviceaccount.com?uid=123456789012345678901`. If the service account is undeleted, this value reverts to `serviceAccount:{emailid}` and the undeleted service account retains the role in the binding. * `deleted:group:{emailid}?uid={uniqueid}`: An email address (plus unique identifier) representing a Google group that has been recently deleted. For example, `admins@example.com?uid=123456789012345678901`. If the group is recovered, this value reverts to `group:{emailid}` and the recovered group retains the role in the binding.
	Member pulumi.StringOutput `pulumi:"member"`
	// The name of the resource to manage IAM policies for.
	Name pulumi.StringOutput `pulumi:"name"`
	// The project in which the resource belongs. If it is not provided, a default will be supplied.
	Project pulumi.StringOutput `pulumi:"project"`
	// Role that is assigned to the list of `members`, or principals. For example, `roles/viewer`, `roles/editor`, or `roles/owner`.
	Role pulumi.StringOutput `pulumi:"role"`
}

Sets the access control policy on the specified resource. Replaces any existing policy. Can return `NOT_FOUND`, `INVALID_ARGUMENT`, and `PERMISSION_DENIED` errors.

func GetRuntimeIamMember added in v0.26.0 

func GetRuntimeIamMember(ctx *pulumi.Context,
	name string, id pulumi.IDInput, state *RuntimeIamMemberState, opts ...pulumi.ResourceOption) (*RuntimeIamMember, error)

GetRuntimeIamMember gets an existing RuntimeIamMember resource's state with the given name, ID, and optional state properties that are used to uniquely qualify the lookup (nil if not required).

func NewRuntimeIamMember added in v0.26.0 

func NewRuntimeIamMember(ctx *pulumi.Context,
	name string, args *RuntimeIamMemberArgs, opts ...pulumi.ResourceOption) (*RuntimeIamMember, error)

NewRuntimeIamMember registers a new resource with the given unique name, arguments, and options.

func (*RuntimeIamMember) ElementType added in v0.26.0 

func (*RuntimeIamMember) ElementType() reflect.Type

func (*RuntimeIamMember) ToRuntimeIamMemberOutput added in v0.26.0 

func (i *RuntimeIamMember) ToRuntimeIamMemberOutput() RuntimeIamMemberOutput

func (*RuntimeIamMember) ToRuntimeIamMemberOutputWithContext added in v0.26.0 

func (i *RuntimeIamMember) ToRuntimeIamMemberOutputWithContext(ctx context.Context) RuntimeIamMemberOutput

type RuntimeIamMemberArgs added in v0.26.0 

type RuntimeIamMemberArgs struct {
	// An IAM Condition for a given binding.
	Condition iam.ConditionPtrInput
	// Identity that will be granted the privilege in role. The entry can have one of the following values:
	//
	//  * user:{emailid}: An email address that represents a specific Google account. For example, alice@gmail.com or joe@example.com.
	//  * serviceAccount:{emailid}: An email address that represents a service account. For example, my-other-app@appspot.gserviceaccount.com.
	//  * group:{emailid}: An email address that represents a Google group. For example, admins@example.com.
	//  * domain:{domain}: A G Suite domain (primary, instead of alias) name that represents all the users of that domain. For example, google.com or example.com.
	Member pulumi.StringInput
	// The name of the resource to manage IAM policies for.
	Name pulumi.StringInput
	// The role that should be applied.
	Role pulumi.StringInput
}

The set of arguments for constructing a RuntimeIamMember resource.

func (RuntimeIamMemberArgs) ElementType added in v0.26.0 

func (RuntimeIamMemberArgs) ElementType() reflect.Type

type RuntimeIamMemberInput added in v0.26.0 

type RuntimeIamMemberInput interface {
	pulumi.Input

	ToRuntimeIamMemberOutput() RuntimeIamMemberOutput
	ToRuntimeIamMemberOutputWithContext(ctx context.Context) RuntimeIamMemberOutput
}

type RuntimeIamMemberOutput added in v0.26.0 

type RuntimeIamMemberOutput struct{ *pulumi.OutputState }

func (RuntimeIamMemberOutput) Condition added in v0.26.0 

func (o RuntimeIamMemberOutput) Condition() iam.ConditionPtrOutput

An IAM Condition for a given binding. See https://cloud.google.com/iam/docs/conditions-overview for additional details.

func (RuntimeIamMemberOutput) ElementType added in v0.26.0 

func (RuntimeIamMemberOutput) ElementType() reflect.Type

func (RuntimeIamMemberOutput) Etag added in v0.26.0 

func (o RuntimeIamMemberOutput) Etag() pulumi.StringOutput

The etag of the resource's IAM policy.

func (RuntimeIamMemberOutput) Member added in v0.26.0 

func (o RuntimeIamMemberOutput) Member() pulumi.StringOutput

Specifies the principals requesting access for a Google Cloud resource. `members` can have the following values: * `allUsers`: A special identifier that represents anyone who is on the internet; with or without a Google account. * `allAuthenticatedUsers`: A special identifier that represents anyone who is authenticated with a Google account or a service account. Does not include identities that come from external identity providers (IdPs) through identity federation. * `user:{emailid}`: An email address that represents a specific Google account. For example, `alice@example.com` . * `serviceAccount:{emailid}`: An email address that represents a Google service account. For example, `my-other-app@appspot.gserviceaccount.com`. * `serviceAccount:{projectid}.svc.id.goog[{namespace}/{kubernetes-sa}]`: An identifier for a [Kubernetes service account](https://cloud.google.com/kubernetes-engine/docs/how-to/kubernetes-service-accounts). For example, `my-project.svc.id.goog[my-namespace/my-kubernetes-sa]`. * `group:{emailid}`: An email address that represents a Google group. For example, `admins@example.com`. * `domain:{domain}`: The G Suite domain (primary) that represents all the users of that domain. For example, `google.com` or `example.com`. * `deleted:user:{emailid}?uid={uniqueid}`: An email address (plus unique identifier) representing a user that has been recently deleted. For example, `alice@example.com?uid=123456789012345678901`. If the user is recovered, this value reverts to `user:{emailid}` and the recovered user retains the role in the binding. * `deleted:serviceAccount:{emailid}?uid={uniqueid}`: An email address (plus unique identifier) representing a service account that has been recently deleted. For example, `my-other-app@appspot.gserviceaccount.com?uid=123456789012345678901`. If the service account is undeleted, this value reverts to `serviceAccount:{emailid}` and the undeleted service account retains the role in the binding. * `deleted:group:{emailid}?uid={uniqueid}`: An email address (plus unique identifier) representing a Google group that has been recently deleted. For example, `admins@example.com?uid=123456789012345678901`. If the group is recovered, this value reverts to `group:{emailid}` and the recovered group retains the role in the binding.

func (RuntimeIamMemberOutput) Name added in v0.26.0 

func (o RuntimeIamMemberOutput) Name() pulumi.StringOutput

The name of the resource to manage IAM policies for.

func (RuntimeIamMemberOutput) Project added in v0.26.0 

func (o RuntimeIamMemberOutput) Project() pulumi.StringOutput

The project in which the resource belongs. If it is not provided, a default will be supplied.

func (RuntimeIamMemberOutput) Role added in v0.26.0 

func (o RuntimeIamMemberOutput) Role() pulumi.StringOutput

Role that is assigned to the list of `members`, or principals. For example, `roles/viewer`, `roles/editor`, or `roles/owner`.

func (RuntimeIamMemberOutput) ToRuntimeIamMemberOutput added in v0.26.0 

func (o RuntimeIamMemberOutput) ToRuntimeIamMemberOutput() RuntimeIamMemberOutput

func (RuntimeIamMemberOutput) ToRuntimeIamMemberOutputWithContext added in v0.26.0 

func (o RuntimeIamMemberOutput) ToRuntimeIamMemberOutputWithContext(ctx context.Context) RuntimeIamMemberOutput

type RuntimeIamMemberState added in v0.26.0 

type RuntimeIamMemberState struct {
}

func (RuntimeIamMemberState) ElementType added in v0.26.0 

func (RuntimeIamMemberState) ElementType() reflect.Type

type RuntimeIamPolicy 

type RuntimeIamPolicy struct {
	pulumi.CustomResourceState

	// Associates a list of `members`, or principals, with a `role`. Optionally, may specify a `condition` that determines how and when the `bindings` are applied. Each of the `bindings` must contain at least one principal. The `bindings` in a `Policy` can refer to up to 1,500 principals; up to 250 of these principals can be Google groups. Each occurrence of a principal counts towards these limits. For example, if the `bindings` grant 50 different roles to `user:alice@example.com`, and not to any other principal, then you can add another 1,450 principals to the `bindings` in the `Policy`.
	Bindings BindingResponseArrayOutput `pulumi:"bindings"`
	// `etag` is used for optimistic concurrency control as a way to help prevent simultaneous updates of a policy from overwriting each other. It is strongly suggested that systems make use of the `etag` in the read-modify-write cycle to perform policy updates in order to avoid race conditions: An `etag` is returned in the response to `getIamPolicy`, and systems are expected to put that etag in the request to `setIamPolicy` to ensure that their change will be applied to the same version of the policy. **Important:** If you use IAM Conditions, you must include the `etag` field whenever you call `setIamPolicy`. If you omit this field, then IAM allows you to overwrite a version `3` policy with a version `1` policy, and all of the conditions in the version `3` policy are lost.
	Etag     pulumi.StringOutput `pulumi:"etag"`
	Location pulumi.StringOutput `pulumi:"location"`
	Project  pulumi.StringOutput `pulumi:"project"`
	// Specifies the format of the policy. Valid values are `0`, `1`, and `3`. Requests that specify an invalid value are rejected. Any operation that affects conditional role bindings must specify version `3`. This requirement applies to the following operations: * Getting a policy that includes a conditional role binding * Adding a conditional role binding to a policy * Changing a conditional role binding in a policy * Removing any role binding, with or without a condition, from a policy that includes conditions **Important:** If you use IAM Conditions, you must include the `etag` field whenever you call `setIamPolicy`. If you omit this field, then IAM allows you to overwrite a version `3` policy with a version `1` policy, and all of the conditions in the version `3` policy are lost. If a policy does not include any conditions, operations on that policy may specify any valid version or leave the field unset. To learn which resources support conditions in their IAM policies, see the [IAM documentation](https://cloud.google.com/iam/help/conditions/resource-policies).
	Version pulumi.IntOutput `pulumi:"version"`
}

Sets the access control policy on the specified resource. Replaces any existing policy. Can return `NOT_FOUND`, `INVALID_ARGUMENT`, and `PERMISSION_DENIED` errors. Note - this resource's API doesn't support deletion. When deleted, the resource will persist on Google Cloud even though it will be deleted from Pulumi state.

func GetRuntimeIamPolicy 

func GetRuntimeIamPolicy(ctx *pulumi.Context,
	name string, id pulumi.IDInput, state *RuntimeIamPolicyState, opts ...pulumi.ResourceOption) (*RuntimeIamPolicy, error)

GetRuntimeIamPolicy gets an existing RuntimeIamPolicy resource's state with the given name, ID, and optional state properties that are used to uniquely qualify the lookup (nil if not required).

func NewRuntimeIamPolicy 

func NewRuntimeIamPolicy(ctx *pulumi.Context,
	name string, args *RuntimeIamPolicyArgs, opts ...pulumi.ResourceOption) (*RuntimeIamPolicy, error)

NewRuntimeIamPolicy registers a new resource with the given unique name, arguments, and options.

func (*RuntimeIamPolicy) ElementType 

func (*RuntimeIamPolicy) ElementType() reflect.Type

func (*RuntimeIamPolicy) ToRuntimeIamPolicyOutput 

func (i *RuntimeIamPolicy) ToRuntimeIamPolicyOutput() RuntimeIamPolicyOutput

func (*RuntimeIamPolicy) ToRuntimeIamPolicyOutputWithContext 

func (i *RuntimeIamPolicy) ToRuntimeIamPolicyOutputWithContext(ctx context.Context) RuntimeIamPolicyOutput

type RuntimeIamPolicyArgs 

type RuntimeIamPolicyArgs struct {
	// Associates a list of `members`, or principals, with a `role`. Optionally, may specify a `condition` that determines how and when the `bindings` are applied. Each of the `bindings` must contain at least one principal. The `bindings` in a `Policy` can refer to up to 1,500 principals; up to 250 of these principals can be Google groups. Each occurrence of a principal counts towards these limits. For example, if the `bindings` grant 50 different roles to `user:alice@example.com`, and not to any other principal, then you can add another 1,450 principals to the `bindings` in the `Policy`.
	Bindings BindingArrayInput
	// `etag` is used for optimistic concurrency control as a way to help prevent simultaneous updates of a policy from overwriting each other. It is strongly suggested that systems make use of the `etag` in the read-modify-write cycle to perform policy updates in order to avoid race conditions: An `etag` is returned in the response to `getIamPolicy`, and systems are expected to put that etag in the request to `setIamPolicy` to ensure that their change will be applied to the same version of the policy. **Important:** If you use IAM Conditions, you must include the `etag` field whenever you call `setIamPolicy`. If you omit this field, then IAM allows you to overwrite a version `3` policy with a version `1` policy, and all of the conditions in the version `3` policy are lost.
	Etag     pulumi.StringPtrInput
	Location pulumi.StringPtrInput
	Project  pulumi.StringPtrInput
	// Specifies the format of the policy. Valid values are `0`, `1`, and `3`. Requests that specify an invalid value are rejected. Any operation that affects conditional role bindings must specify version `3`. This requirement applies to the following operations: * Getting a policy that includes a conditional role binding * Adding a conditional role binding to a policy * Changing a conditional role binding in a policy * Removing any role binding, with or without a condition, from a policy that includes conditions **Important:** If you use IAM Conditions, you must include the `etag` field whenever you call `setIamPolicy`. If you omit this field, then IAM allows you to overwrite a version `3` policy with a version `1` policy, and all of the conditions in the version `3` policy are lost. If a policy does not include any conditions, operations on that policy may specify any valid version or leave the field unset. To learn which resources support conditions in their IAM policies, see the [IAM documentation](https://cloud.google.com/iam/help/conditions/resource-policies).
	Version pulumi.IntPtrInput
}

The set of arguments for constructing a RuntimeIamPolicy resource.

func (RuntimeIamPolicyArgs) ElementType 

func (RuntimeIamPolicyArgs) ElementType() reflect.Type

type RuntimeIamPolicyInput 

type RuntimeIamPolicyInput interface {
	pulumi.Input

	ToRuntimeIamPolicyOutput() RuntimeIamPolicyOutput
	ToRuntimeIamPolicyOutputWithContext(ctx context.Context) RuntimeIamPolicyOutput
}

type RuntimeIamPolicyOutput 

type RuntimeIamPolicyOutput struct{ *pulumi.OutputState }

func (RuntimeIamPolicyOutput) Bindings 

func (o RuntimeIamPolicyOutput) Bindings() BindingResponseArrayOutput

Associates a list of `members`, or principals, with a `role`. Optionally, may specify a `condition` that determines how and when the `bindings` are applied. Each of the `bindings` must contain at least one principal. The `bindings` in a `Policy` can refer to up to 1,500 principals; up to 250 of these principals can be Google groups. Each occurrence of a principal counts towards these limits. For example, if the `bindings` grant 50 different roles to `user:alice@example.com`, and not to any other principal, then you can add another 1,450 principals to the `bindings` in the `Policy`.

func (RuntimeIamPolicyOutput) ElementType 

func (RuntimeIamPolicyOutput) ElementType() reflect.Type

func (RuntimeIamPolicyOutput) Etag 

func (o RuntimeIamPolicyOutput) Etag() pulumi.StringOutput

`etag` is used for optimistic concurrency control as a way to help prevent simultaneous updates of a policy from overwriting each other. It is strongly suggested that systems make use of the `etag` in the read-modify-write cycle to perform policy updates in order to avoid race conditions: An `etag` is returned in the response to `getIamPolicy`, and systems are expected to put that etag in the request to `setIamPolicy` to ensure that their change will be applied to the same version of the policy. **Important:** If you use IAM Conditions, you must include the `etag` field whenever you call `setIamPolicy`. If you omit this field, then IAM allows you to overwrite a version `3` policy with a version `1` policy, and all of the conditions in the version `3` policy are lost.

func (RuntimeIamPolicyOutput) Location added in v0.21.0 

func (o RuntimeIamPolicyOutput) Location() pulumi.StringOutput

func (RuntimeIamPolicyOutput) Project added in v0.21.0 

func (o RuntimeIamPolicyOutput) Project() pulumi.StringOutput

func (RuntimeIamPolicyOutput) ToRuntimeIamPolicyOutput 

func (o RuntimeIamPolicyOutput) ToRuntimeIamPolicyOutput() RuntimeIamPolicyOutput

func (RuntimeIamPolicyOutput) ToRuntimeIamPolicyOutputWithContext 

func (o RuntimeIamPolicyOutput) ToRuntimeIamPolicyOutputWithContext(ctx context.Context) RuntimeIamPolicyOutput

func (RuntimeIamPolicyOutput) Version 

func (o RuntimeIamPolicyOutput) Version() pulumi.IntOutput

Specifies the format of the policy. Valid values are `0`, `1`, and `3`. Requests that specify an invalid value are rejected. Any operation that affects conditional role bindings must specify version `3`. This requirement applies to the following operations: * Getting a policy that includes a conditional role binding * Adding a conditional role binding to a policy * Changing a conditional role binding in a policy * Removing any role binding, with or without a condition, from a policy that includes conditions **Important:** If you use IAM Conditions, you must include the `etag` field whenever you call `setIamPolicy`. If you omit this field, then IAM allows you to overwrite a version `3` policy with a version `1` policy, and all of the conditions in the version `3` policy are lost. If a policy does not include any conditions, operations on that policy may specify any valid version or leave the field unset. To learn which resources support conditions in their IAM policies, see the [IAM documentation](https://cloud.google.com/iam/help/conditions/resource-policies).

type RuntimeIamPolicyState 

type RuntimeIamPolicyState struct {
}

func (RuntimeIamPolicyState) ElementType 

func (RuntimeIamPolicyState) ElementType() reflect.Type

type Spec 

type Spec struct {
	pulumi.CustomResourceState

	// Annotations attach non-identifying metadata to resources. Annotation keys and values are less restricted than those of labels, but should be generally used for small values of broad interest. Larger, topic- specific metadata should be stored in Artifacts.
	Annotations pulumi.StringMapOutput `pulumi:"annotations"`
	ApiId       pulumi.StringOutput    `pulumi:"apiId"`
	// Required. The ID to use for the spec, which will become the final component of the spec's resource name. This value should be 4-63 characters, and valid characters are /a-z-/. Following AIP-162, IDs must not have the form of a UUID.
	ApiSpecId pulumi.StringOutput `pulumi:"apiSpecId"`
	// Input only. The contents of the spec. Provided by API callers when specs are created or updated. To access the contents of a spec, use GetApiSpecContents.
	Contents pulumi.StringOutput `pulumi:"contents"`
	// Creation timestamp; when the spec resource was created.
	CreateTime pulumi.StringOutput `pulumi:"createTime"`
	// A detailed description.
	Description pulumi.StringOutput `pulumi:"description"`
	// A possibly-hierarchical name used to refer to the spec from other specs.
	Filename pulumi.StringOutput `pulumi:"filename"`
	// A SHA-256 hash of the spec's contents. If the spec is gzipped, this is the hash of the uncompressed spec.
	Hash pulumi.StringOutput `pulumi:"hash"`
	// Labels attach identifying metadata to resources. Identifying metadata can be used to filter list operations. Label keys and values can be no longer than 64 characters (Unicode codepoints), can only contain lowercase letters, numeric characters, underscores and dashes. International characters are allowed. No more than 64 user labels can be associated with one resource (System labels are excluded). See https://goo.gl/xmQnxf for more information and examples of labels. System reserved label keys are prefixed with `apigeeregistry.googleapis.com/` and cannot be changed.
	Labels   pulumi.StringMapOutput `pulumi:"labels"`
	Location pulumi.StringOutput    `pulumi:"location"`
	// A style (format) descriptor for this spec that is specified as a [Media Type](https://en.wikipedia.org/wiki/Media_type). Possible values include `application/vnd.apigee.proto`, `application/vnd.apigee.openapi`, and `application/vnd.apigee.graphql`, with possible suffixes representing compression types. These hypothetical names are defined in the vendor tree defined in RFC6838 (https://tools.ietf.org/html/rfc6838) and are not final. Content types can specify compression. Currently only GZip compression is supported (indicated with "+gzip").
	MimeType pulumi.StringOutput `pulumi:"mimeType"`
	// Resource name.
	Name    pulumi.StringOutput `pulumi:"name"`
	Project pulumi.StringOutput `pulumi:"project"`
	// Revision creation timestamp; when the represented revision was created.
	RevisionCreateTime pulumi.StringOutput `pulumi:"revisionCreateTime"`
	// Immutable. The revision ID of the spec. A new revision is committed whenever the spec contents are changed. The format is an 8-character hexadecimal string.
	RevisionId pulumi.StringOutput `pulumi:"revisionId"`
	// Last update timestamp: when the represented revision was last modified.
	RevisionUpdateTime pulumi.StringOutput `pulumi:"revisionUpdateTime"`
	// The size of the spec file in bytes. If the spec is gzipped, this is the size of the uncompressed spec.
	SizeBytes pulumi.IntOutput `pulumi:"sizeBytes"`
	// The original source URI of the spec (if one exists). This is an external location that can be used for reference purposes but which may not be authoritative since this external resource may change after the spec is retrieved.
	SourceUri pulumi.StringOutput `pulumi:"sourceUri"`
	VersionId pulumi.StringOutput `pulumi:"versionId"`
}

Creates a specified spec.

func GetSpec 

func GetSpec(ctx *pulumi.Context,
	name string, id pulumi.IDInput, state *SpecState, opts ...pulumi.ResourceOption) (*Spec, error)

GetSpec gets an existing Spec resource's state with the given name, ID, and optional state properties that are used to uniquely qualify the lookup (nil if not required).

func NewSpec 

func NewSpec(ctx *pulumi.Context,
	name string, args *SpecArgs, opts ...pulumi.ResourceOption) (*Spec, error)

NewSpec registers a new resource with the given unique name, arguments, and options.

func (*Spec) ElementType 

func (*Spec) ElementType() reflect.Type

func (*Spec) ToSpecOutput 

func (i *Spec) ToSpecOutput() SpecOutput

func (*Spec) ToSpecOutputWithContext 

func (i *Spec) ToSpecOutputWithContext(ctx context.Context) SpecOutput

type SpecArgs 

type SpecArgs struct {
	// Annotations attach non-identifying metadata to resources. Annotation keys and values are less restricted than those of labels, but should be generally used for small values of broad interest. Larger, topic- specific metadata should be stored in Artifacts.
	Annotations pulumi.StringMapInput
	ApiId       pulumi.StringInput
	// Required. The ID to use for the spec, which will become the final component of the spec's resource name. This value should be 4-63 characters, and valid characters are /a-z-/. Following AIP-162, IDs must not have the form of a UUID.
	ApiSpecId pulumi.StringInput
	// Input only. The contents of the spec. Provided by API callers when specs are created or updated. To access the contents of a spec, use GetApiSpecContents.
	Contents pulumi.StringPtrInput
	// A detailed description.
	Description pulumi.StringPtrInput
	// A possibly-hierarchical name used to refer to the spec from other specs.
	Filename pulumi.StringPtrInput
	// Labels attach identifying metadata to resources. Identifying metadata can be used to filter list operations. Label keys and values can be no longer than 64 characters (Unicode codepoints), can only contain lowercase letters, numeric characters, underscores and dashes. International characters are allowed. No more than 64 user labels can be associated with one resource (System labels are excluded). See https://goo.gl/xmQnxf for more information and examples of labels. System reserved label keys are prefixed with `apigeeregistry.googleapis.com/` and cannot be changed.
	Labels   pulumi.StringMapInput
	Location pulumi.StringPtrInput
	// A style (format) descriptor for this spec that is specified as a [Media Type](https://en.wikipedia.org/wiki/Media_type). Possible values include `application/vnd.apigee.proto`, `application/vnd.apigee.openapi`, and `application/vnd.apigee.graphql`, with possible suffixes representing compression types. These hypothetical names are defined in the vendor tree defined in RFC6838 (https://tools.ietf.org/html/rfc6838) and are not final. Content types can specify compression. Currently only GZip compression is supported (indicated with "+gzip").
	MimeType pulumi.StringPtrInput
	// Resource name.
	Name    pulumi.StringPtrInput
	Project pulumi.StringPtrInput
	// The original source URI of the spec (if one exists). This is an external location that can be used for reference purposes but which may not be authoritative since this external resource may change after the spec is retrieved.
	SourceUri pulumi.StringPtrInput
	VersionId pulumi.StringInput
}

The set of arguments for constructing a Spec resource.

func (SpecArgs) ElementType 

func (SpecArgs) ElementType() reflect.Type

type SpecInput 

type SpecInput interface {
	pulumi.Input

	ToSpecOutput() SpecOutput
	ToSpecOutputWithContext(ctx context.Context) SpecOutput
}

type SpecOutput 

type SpecOutput struct{ *pulumi.OutputState }

func (SpecOutput) Annotations 

func (o SpecOutput) Annotations() pulumi.StringMapOutput

Annotations attach non-identifying metadata to resources. Annotation keys and values are less restricted than those of labels, but should be generally used for small values of broad interest. Larger, topic- specific metadata should be stored in Artifacts.

func (SpecOutput) ApiId added in v0.21.0 

func (o SpecOutput) ApiId() pulumi.StringOutput

func (SpecOutput) ApiSpecId added in v0.21.0 

func (o SpecOutput) ApiSpecId() pulumi.StringOutput

Required. The ID to use for the spec, which will become the final component of the spec's resource name. This value should be 4-63 characters, and valid characters are /a-z-/. Following AIP-162, IDs must not have the form of a UUID.

func (SpecOutput) Contents 

func (o SpecOutput) Contents() pulumi.StringOutput

Input only. The contents of the spec. Provided by API callers when specs are created or updated. To access the contents of a spec, use GetApiSpecContents.

func (SpecOutput) CreateTime 

func (o SpecOutput) CreateTime() pulumi.StringOutput

Creation timestamp; when the spec resource was created.

func (SpecOutput) Description 

func (o SpecOutput) Description() pulumi.StringOutput

A detailed description.

func (SpecOutput) ElementType 

func (SpecOutput) ElementType() reflect.Type

func (SpecOutput) Filename 

func (o SpecOutput) Filename() pulumi.StringOutput

A possibly-hierarchical name used to refer to the spec from other specs.

func (SpecOutput) Hash 

func (o SpecOutput) Hash() pulumi.StringOutput

A SHA-256 hash of the spec's contents. If the spec is gzipped, this is the hash of the uncompressed spec.

func (SpecOutput) Labels 

func (o SpecOutput) Labels() pulumi.StringMapOutput

Labels attach identifying metadata to resources. Identifying metadata can be used to filter list operations. Label keys and values can be no longer than 64 characters (Unicode codepoints), can only contain lowercase letters, numeric characters, underscores and dashes. International characters are allowed. No more than 64 user labels can be associated with one resource (System labels are excluded). See https://goo.gl/xmQnxf for more information and examples of labels. System reserved label keys are prefixed with `apigeeregistry.googleapis.com/` and cannot be changed.

func (SpecOutput) Location added in v0.21.0 

func (o SpecOutput) Location() pulumi.StringOutput

func (SpecOutput) MimeType 

func (o SpecOutput) MimeType() pulumi.StringOutput

A style (format) descriptor for this spec that is specified as a [Media Type](https://en.wikipedia.org/wiki/Media_type). Possible values include `application/vnd.apigee.proto`, `application/vnd.apigee.openapi`, and `application/vnd.apigee.graphql`, with possible suffixes representing compression types. These hypothetical names are defined in the vendor tree defined in RFC6838 (https://tools.ietf.org/html/rfc6838) and are not final. Content types can specify compression. Currently only GZip compression is supported (indicated with "+gzip").

func (SpecOutput) Name 

func (o SpecOutput) Name() pulumi.StringOutput

Resource name.

func (SpecOutput) Project added in v0.21.0 

func (o SpecOutput) Project() pulumi.StringOutput

func (SpecOutput) RevisionCreateTime 

func (o SpecOutput) RevisionCreateTime() pulumi.StringOutput

Revision creation timestamp; when the represented revision was created.

func (SpecOutput) RevisionId 

func (o SpecOutput) RevisionId() pulumi.StringOutput

Immutable. The revision ID of the spec. A new revision is committed whenever the spec contents are changed. The format is an 8-character hexadecimal string.

func (SpecOutput) RevisionUpdateTime 

func (o SpecOutput) RevisionUpdateTime() pulumi.StringOutput

Last update timestamp: when the represented revision was last modified.

func (SpecOutput) SizeBytes 

func (o SpecOutput) SizeBytes() pulumi.IntOutput

The size of the spec file in bytes. If the spec is gzipped, this is the size of the uncompressed spec.

func (SpecOutput) SourceUri 

func (o SpecOutput) SourceUri() pulumi.StringOutput

The original source URI of the spec (if one exists). This is an external location that can be used for reference purposes but which may not be authoritative since this external resource may change after the spec is retrieved.

func (SpecOutput) ToSpecOutput 

func (o SpecOutput) ToSpecOutput() SpecOutput

func (SpecOutput) ToSpecOutputWithContext 

func (o SpecOutput) ToSpecOutputWithContext(ctx context.Context) SpecOutput

func (SpecOutput) VersionId added in v0.21.0 

func (o SpecOutput) VersionId() pulumi.StringOutput

type SpecState 

type SpecState struct {
}

func (SpecState) ElementType 

func (SpecState) ElementType() reflect.Type

type Version 

type Version struct {
	pulumi.CustomResourceState

	// Annotations attach non-identifying metadata to resources. Annotation keys and values are less restricted than those of labels, but should be generally used for small values of broad interest. Larger, topic- specific metadata should be stored in Artifacts.
	Annotations pulumi.StringMapOutput `pulumi:"annotations"`
	ApiId       pulumi.StringOutput    `pulumi:"apiId"`
	// Required. The ID to use for the version, which will become the final component of the version's resource name. This value should be 1-63 characters, and valid characters are /a-z-/. Following AIP-162, IDs must not have the form of a UUID.
	ApiVersionId pulumi.StringOutput `pulumi:"apiVersionId"`
	// Creation timestamp.
	CreateTime pulumi.StringOutput `pulumi:"createTime"`
	// A detailed description.
	Description pulumi.StringOutput `pulumi:"description"`
	// Human-meaningful name.
	DisplayName pulumi.StringOutput `pulumi:"displayName"`
	// Labels attach identifying metadata to resources. Identifying metadata can be used to filter list operations. Label keys and values can be no longer than 64 characters (Unicode codepoints), can only contain lowercase letters, numeric characters, underscores and dashes. International characters are allowed. No more than 64 user labels can be associated with one resource (System labels are excluded). See https://goo.gl/xmQnxf for more information and examples of labels. System reserved label keys are prefixed with `apigeeregistry.googleapis.com/` and cannot be changed.
	Labels   pulumi.StringMapOutput `pulumi:"labels"`
	Location pulumi.StringOutput    `pulumi:"location"`
	// Resource name.
	Name pulumi.StringOutput `pulumi:"name"`
	// The primary spec for this version. Format: projects/{project}/locations/{location}/apis/{api}/versions/{version}/specs/{spec}
	PrimarySpec pulumi.StringOutput `pulumi:"primarySpec"`
	Project     pulumi.StringOutput `pulumi:"project"`
	// A user-definable description of the lifecycle phase of this API version. Format: free-form, but we expect single words that describe API maturity, e.g., "CONCEPT", "DESIGN", "DEVELOPMENT", "STAGING", "PRODUCTION", "DEPRECATED", "RETIRED".
	State pulumi.StringOutput `pulumi:"state"`
	// Last update timestamp.
	UpdateTime pulumi.StringOutput `pulumi:"updateTime"`
}

Creates a specified version.

func GetVersion 

func GetVersion(ctx *pulumi.Context,
	name string, id pulumi.IDInput, state *VersionState, opts ...pulumi.ResourceOption) (*Version, error)

GetVersion gets an existing Version resource's state with the given name, ID, and optional state properties that are used to uniquely qualify the lookup (nil if not required).

func NewVersion 

func NewVersion(ctx *pulumi.Context,
	name string, args *VersionArgs, opts ...pulumi.ResourceOption) (*Version, error)

NewVersion registers a new resource with the given unique name, arguments, and options.

func (*Version) ElementType 

func (*Version) ElementType() reflect.Type

func (*Version) ToVersionOutput 

func (i *Version) ToVersionOutput() VersionOutput

func (*Version) ToVersionOutputWithContext 

func (i *Version) ToVersionOutputWithContext(ctx context.Context) VersionOutput

type VersionArgs 

type VersionArgs struct {
	// Annotations attach non-identifying metadata to resources. Annotation keys and values are less restricted than those of labels, but should be generally used for small values of broad interest. Larger, topic- specific metadata should be stored in Artifacts.
	Annotations pulumi.StringMapInput
	ApiId       pulumi.StringInput
	// Required. The ID to use for the version, which will become the final component of the version's resource name. This value should be 1-63 characters, and valid characters are /a-z-/. Following AIP-162, IDs must not have the form of a UUID.
	ApiVersionId pulumi.StringInput
	// A detailed description.
	Description pulumi.StringPtrInput
	// Human-meaningful name.
	DisplayName pulumi.StringPtrInput
	// Labels attach identifying metadata to resources. Identifying metadata can be used to filter list operations. Label keys and values can be no longer than 64 characters (Unicode codepoints), can only contain lowercase letters, numeric characters, underscores and dashes. International characters are allowed. No more than 64 user labels can be associated with one resource (System labels are excluded). See https://goo.gl/xmQnxf for more information and examples of labels. System reserved label keys are prefixed with `apigeeregistry.googleapis.com/` and cannot be changed.
	Labels   pulumi.StringMapInput
	Location pulumi.StringPtrInput
	// Resource name.
	Name pulumi.StringPtrInput
	// The primary spec for this version. Format: projects/{project}/locations/{location}/apis/{api}/versions/{version}/specs/{spec}
	PrimarySpec pulumi.StringPtrInput
	Project     pulumi.StringPtrInput
	// A user-definable description of the lifecycle phase of this API version. Format: free-form, but we expect single words that describe API maturity, e.g., "CONCEPT", "DESIGN", "DEVELOPMENT", "STAGING", "PRODUCTION", "DEPRECATED", "RETIRED".
	State pulumi.StringPtrInput
}

The set of arguments for constructing a Version resource.

func (VersionArgs) ElementType 

func (VersionArgs) ElementType() reflect.Type

type VersionArtifact 

type VersionArtifact struct {
	pulumi.CustomResourceState

	// Annotations attach non-identifying metadata to resources. Annotation keys and values are less restricted than those of labels, but should be generally used for small values of broad interest. Larger, topic- specific metadata should be stored in Artifacts.
	Annotations pulumi.StringMapOutput `pulumi:"annotations"`
	ApiId       pulumi.StringOutput    `pulumi:"apiId"`
	// Required. The ID to use for the artifact, which will become the final component of the artifact's resource name. This value should be 4-63 characters, and valid characters are /a-z-/. Following AIP-162, IDs must not have the form of a UUID.
	ArtifactId pulumi.StringOutput `pulumi:"artifactId"`
	// Input only. The contents of the artifact. Provided by API callers when artifacts are created or replaced. To access the contents of an artifact, use GetArtifactContents.
	Contents pulumi.StringOutput `pulumi:"contents"`
	// Creation timestamp.
	CreateTime pulumi.StringOutput `pulumi:"createTime"`
	// A SHA-256 hash of the artifact's contents. If the artifact is gzipped, this is the hash of the uncompressed artifact.
	Hash pulumi.StringOutput `pulumi:"hash"`
	// Labels attach identifying metadata to resources. Identifying metadata can be used to filter list operations. Label keys and values can be no longer than 64 characters (Unicode codepoints), can only contain lowercase letters, numeric characters, underscores and dashes. International characters are allowed. No more than 64 user labels can be associated with one resource (System labels are excluded). See https://goo.gl/xmQnxf for more information and examples of labels. System reserved label keys are prefixed with "registry.googleapis.com/" and cannot be changed.
	Labels   pulumi.StringMapOutput `pulumi:"labels"`
	Location pulumi.StringOutput    `pulumi:"location"`
	// A content type specifier for the artifact. Content type specifiers are Media Types (https://en.wikipedia.org/wiki/Media_type) with a possible "schema" parameter that specifies a schema for the stored information. Content types can specify compression. Currently only GZip compression is supported (indicated with "+gzip").
	MimeType pulumi.StringOutput `pulumi:"mimeType"`
	// Resource name.
	Name    pulumi.StringOutput `pulumi:"name"`
	Project pulumi.StringOutput `pulumi:"project"`
	// The size of the artifact in bytes. If the artifact is gzipped, this is the size of the uncompressed artifact.
	SizeBytes pulumi.IntOutput `pulumi:"sizeBytes"`
	// Last update timestamp.
	UpdateTime pulumi.StringOutput `pulumi:"updateTime"`
	VersionId  pulumi.StringOutput `pulumi:"versionId"`
}

Creates a specified artifact.

func GetVersionArtifact 

func GetVersionArtifact(ctx *pulumi.Context,
	name string, id pulumi.IDInput, state *VersionArtifactState, opts ...pulumi.ResourceOption) (*VersionArtifact, error)

GetVersionArtifact gets an existing VersionArtifact resource's state with the given name, ID, and optional state properties that are used to uniquely qualify the lookup (nil if not required).

func NewVersionArtifact 

func NewVersionArtifact(ctx *pulumi.Context,
	name string, args *VersionArtifactArgs, opts ...pulumi.ResourceOption) (*VersionArtifact, error)

NewVersionArtifact registers a new resource with the given unique name, arguments, and options.

func (*VersionArtifact) ElementType 

func (*VersionArtifact) ElementType() reflect.Type

func (*VersionArtifact) ToVersionArtifactOutput 

func (i *VersionArtifact) ToVersionArtifactOutput() VersionArtifactOutput

func (*VersionArtifact) ToVersionArtifactOutputWithContext 

func (i *VersionArtifact) ToVersionArtifactOutputWithContext(ctx context.Context) VersionArtifactOutput

type VersionArtifactArgs 

type VersionArtifactArgs struct {
	// Annotations attach non-identifying metadata to resources. Annotation keys and values are less restricted than those of labels, but should be generally used for small values of broad interest. Larger, topic- specific metadata should be stored in Artifacts.
	Annotations pulumi.StringMapInput
	ApiId       pulumi.StringInput
	// Required. The ID to use for the artifact, which will become the final component of the artifact's resource name. This value should be 4-63 characters, and valid characters are /a-z-/. Following AIP-162, IDs must not have the form of a UUID.
	ArtifactId pulumi.StringInput
	// Input only. The contents of the artifact. Provided by API callers when artifacts are created or replaced. To access the contents of an artifact, use GetArtifactContents.
	Contents pulumi.StringPtrInput
	// Labels attach identifying metadata to resources. Identifying metadata can be used to filter list operations. Label keys and values can be no longer than 64 characters (Unicode codepoints), can only contain lowercase letters, numeric characters, underscores and dashes. International characters are allowed. No more than 64 user labels can be associated with one resource (System labels are excluded). See https://goo.gl/xmQnxf for more information and examples of labels. System reserved label keys are prefixed with "registry.googleapis.com/" and cannot be changed.
	Labels   pulumi.StringMapInput
	Location pulumi.StringPtrInput
	// A content type specifier for the artifact. Content type specifiers are Media Types (https://en.wikipedia.org/wiki/Media_type) with a possible "schema" parameter that specifies a schema for the stored information. Content types can specify compression. Currently only GZip compression is supported (indicated with "+gzip").
	MimeType pulumi.StringPtrInput
	// Resource name.
	Name      pulumi.StringPtrInput
	Project   pulumi.StringPtrInput
	VersionId pulumi.StringInput
}

The set of arguments for constructing a VersionArtifact resource.

func (VersionArtifactArgs) ElementType 

func (VersionArtifactArgs) ElementType() reflect.Type

type VersionArtifactInput 

type VersionArtifactInput interface {
	pulumi.Input

	ToVersionArtifactOutput() VersionArtifactOutput
	ToVersionArtifactOutputWithContext(ctx context.Context) VersionArtifactOutput
}

type VersionArtifactOutput 

type VersionArtifactOutput struct{ *pulumi.OutputState }

func (VersionArtifactOutput) Annotations added in v0.28.0 

func (o VersionArtifactOutput) Annotations() pulumi.StringMapOutput

Annotations attach non-identifying metadata to resources. Annotation keys and values are less restricted than those of labels, but should be generally used for small values of broad interest. Larger, topic- specific metadata should be stored in Artifacts.

func (VersionArtifactOutput) ApiId added in v0.21.0 

func (o VersionArtifactOutput) ApiId() pulumi.StringOutput

func (VersionArtifactOutput) ArtifactId added in v0.21.0 

func (o VersionArtifactOutput) ArtifactId() pulumi.StringOutput

Required. The ID to use for the artifact, which will become the final component of the artifact's resource name. This value should be 4-63 characters, and valid characters are /a-z-/. Following AIP-162, IDs must not have the form of a UUID.

func (VersionArtifactOutput) Contents 

func (o VersionArtifactOutput) Contents() pulumi.StringOutput

Input only. The contents of the artifact. Provided by API callers when artifacts are created or replaced. To access the contents of an artifact, use GetArtifactContents.

func (VersionArtifactOutput) CreateTime 

func (o VersionArtifactOutput) CreateTime() pulumi.StringOutput

Creation timestamp.

func (VersionArtifactOutput) ElementType 

func (VersionArtifactOutput) ElementType() reflect.Type

func (VersionArtifactOutput) Hash 

func (o VersionArtifactOutput) Hash() pulumi.StringOutput

A SHA-256 hash of the artifact's contents. If the artifact is gzipped, this is the hash of the uncompressed artifact.

func (VersionArtifactOutput) Labels added in v0.28.0 

func (o VersionArtifactOutput) Labels() pulumi.StringMapOutput

Labels attach identifying metadata to resources. Identifying metadata can be used to filter list operations. Label keys and values can be no longer than 64 characters (Unicode codepoints), can only contain lowercase letters, numeric characters, underscores and dashes. International characters are allowed. No more than 64 user labels can be associated with one resource (System labels are excluded). See https://goo.gl/xmQnxf for more information and examples of labels. System reserved label keys are prefixed with "registry.googleapis.com/" and cannot be changed.

func (VersionArtifactOutput) Location added in v0.21.0 

func (o VersionArtifactOutput) Location() pulumi.StringOutput

func (VersionArtifactOutput) MimeType 

func (o VersionArtifactOutput) MimeType() pulumi.StringOutput

A content type specifier for the artifact. Content type specifiers are Media Types (https://en.wikipedia.org/wiki/Media_type) with a possible "schema" parameter that specifies a schema for the stored information. Content types can specify compression. Currently only GZip compression is supported (indicated with "+gzip").

func (VersionArtifactOutput) Name 

func (o VersionArtifactOutput) Name() pulumi.StringOutput

Resource name.

func (VersionArtifactOutput) Project added in v0.21.0 

func (o VersionArtifactOutput) Project() pulumi.StringOutput

func (VersionArtifactOutput) SizeBytes 

func (o VersionArtifactOutput) SizeBytes() pulumi.IntOutput

The size of the artifact in bytes. If the artifact is gzipped, this is the size of the uncompressed artifact.

func (VersionArtifactOutput) ToVersionArtifactOutput 

func (o VersionArtifactOutput) ToVersionArtifactOutput() VersionArtifactOutput

func (VersionArtifactOutput) ToVersionArtifactOutputWithContext 

func (o VersionArtifactOutput) ToVersionArtifactOutputWithContext(ctx context.Context) VersionArtifactOutput

func (VersionArtifactOutput) UpdateTime 

func (o VersionArtifactOutput) UpdateTime() pulumi.StringOutput

Last update timestamp.

func (VersionArtifactOutput) VersionId added in v0.21.0 

func (o VersionArtifactOutput) VersionId() pulumi.StringOutput

type VersionArtifactState 

type VersionArtifactState struct {
}

func (VersionArtifactState) ElementType 

func (VersionArtifactState) ElementType() reflect.Type

type VersionInput 

type VersionInput interface {
	pulumi.Input

	ToVersionOutput() VersionOutput
	ToVersionOutputWithContext(ctx context.Context) VersionOutput
}

type VersionOutput 

type VersionOutput struct{ *pulumi.OutputState }

func (VersionOutput) Annotations 

func (o VersionOutput) Annotations() pulumi.StringMapOutput

Annotations attach non-identifying metadata to resources. Annotation keys and values are less restricted than those of labels, but should be generally used for small values of broad interest. Larger, topic- specific metadata should be stored in Artifacts.

func (VersionOutput) ApiId added in v0.21.0 

func (o VersionOutput) ApiId() pulumi.StringOutput

func (VersionOutput) ApiVersionId added in v0.21.0 

func (o VersionOutput) ApiVersionId() pulumi.StringOutput

Required. The ID to use for the version, which will become the final component of the version's resource name. This value should be 1-63 characters, and valid characters are /a-z-/. Following AIP-162, IDs must not have the form of a UUID.

func (VersionOutput) CreateTime 

func (o VersionOutput) CreateTime() pulumi.StringOutput

Creation timestamp.

func (VersionOutput) Description 

func (o VersionOutput) Description() pulumi.StringOutput

A detailed description.

func (VersionOutput) DisplayName 

func (o VersionOutput) DisplayName() pulumi.StringOutput

Human-meaningful name.

func (VersionOutput) ElementType 

func (VersionOutput) ElementType() reflect.Type

func (VersionOutput) Labels 

func (o VersionOutput) Labels() pulumi.StringMapOutput

Labels attach identifying metadata to resources. Identifying metadata can be used to filter list operations. Label keys and values can be no longer than 64 characters (Unicode codepoints), can only contain lowercase letters, numeric characters, underscores and dashes. International characters are allowed. No more than 64 user labels can be associated with one resource (System labels are excluded). See https://goo.gl/xmQnxf for more information and examples of labels. System reserved label keys are prefixed with `apigeeregistry.googleapis.com/` and cannot be changed.

func (VersionOutput) Location added in v0.21.0 

func (o VersionOutput) Location() pulumi.StringOutput

func (VersionOutput) Name 

func (o VersionOutput) Name() pulumi.StringOutput

Resource name.

func (VersionOutput) PrimarySpec added in v0.28.0 

func (o VersionOutput) PrimarySpec() pulumi.StringOutput

The primary spec for this version. Format: projects/{project}/locations/{location}/apis/{api}/versions/{version}/specs/{spec}

func (VersionOutput) Project added in v0.21.0 

func (o VersionOutput) Project() pulumi.StringOutput

func (VersionOutput) State 

func (o VersionOutput) State() pulumi.StringOutput

A user-definable description of the lifecycle phase of this API version. Format: free-form, but we expect single words that describe API maturity, e.g., "CONCEPT", "DESIGN", "DEVELOPMENT", "STAGING", "PRODUCTION", "DEPRECATED", "RETIRED".

func (VersionOutput) ToVersionOutput 

func (o VersionOutput) ToVersionOutput() VersionOutput

func (VersionOutput) ToVersionOutputWithContext 

func (o VersionOutput) ToVersionOutputWithContext(ctx context.Context) VersionOutput

func (VersionOutput) UpdateTime 

func (o VersionOutput) UpdateTime() pulumi.StringOutput

Last update timestamp.

type VersionState 

type VersionState struct {
}

func (VersionState) ElementType 

func (VersionState) ElementType() reflect.Type

Source Files

View all Source files

Jump to

Keyboard shortcuts

? : This menu
/ : Search site
f or F : Jump to
y or Y : Canonical URL
go.dev uses cookies from Google to deliver and enhance the quality of its services and to analyze traffic. Learn more.