Documentation
¶
Index ¶
- Constants
- type AuditConfig
- type AuditConfigArgs
- type AuditConfigArray
- type AuditConfigArrayInput
- type AuditConfigArrayOutput
- func (AuditConfigArrayOutput) ElementType() reflect.Type
- func (o AuditConfigArrayOutput) Index(i pulumi.IntInput) AuditConfigOutput
- func (o AuditConfigArrayOutput) ToAuditConfigArrayOutput() AuditConfigArrayOutput
- func (o AuditConfigArrayOutput) ToAuditConfigArrayOutputWithContext(ctx context.Context) AuditConfigArrayOutput
- type AuditConfigInput
- type AuditConfigOutput
- func (o AuditConfigOutput) AuditLogConfigs() AuditLogConfigArrayOutput
- func (AuditConfigOutput) ElementType() reflect.Type
- func (o AuditConfigOutput) Service() pulumi.StringPtrOutput
- func (o AuditConfigOutput) ToAuditConfigOutput() AuditConfigOutput
- func (o AuditConfigOutput) ToAuditConfigOutputWithContext(ctx context.Context) AuditConfigOutput
- type AuditConfigResponse
- type AuditConfigResponseArrayOutput
- func (AuditConfigResponseArrayOutput) ElementType() reflect.Type
- func (o AuditConfigResponseArrayOutput) Index(i pulumi.IntInput) AuditConfigResponseOutput
- func (o AuditConfigResponseArrayOutput) ToAuditConfigResponseArrayOutput() AuditConfigResponseArrayOutput
- func (o AuditConfigResponseArrayOutput) ToAuditConfigResponseArrayOutputWithContext(ctx context.Context) AuditConfigResponseArrayOutput
- type AuditConfigResponseOutput
- func (o AuditConfigResponseOutput) AuditLogConfigs() AuditLogConfigResponseArrayOutput
- func (AuditConfigResponseOutput) ElementType() reflect.Type
- func (o AuditConfigResponseOutput) Service() pulumi.StringOutput
- func (o AuditConfigResponseOutput) ToAuditConfigResponseOutput() AuditConfigResponseOutput
- func (o AuditConfigResponseOutput) ToAuditConfigResponseOutputWithContext(ctx context.Context) AuditConfigResponseOutput
- type AuditLogConfig
- type AuditLogConfigArgs
- type AuditLogConfigArray
- type AuditLogConfigArrayInput
- type AuditLogConfigArrayOutput
- func (AuditLogConfigArrayOutput) ElementType() reflect.Type
- func (o AuditLogConfigArrayOutput) Index(i pulumi.IntInput) AuditLogConfigOutput
- func (o AuditLogConfigArrayOutput) ToAuditLogConfigArrayOutput() AuditLogConfigArrayOutput
- func (o AuditLogConfigArrayOutput) ToAuditLogConfigArrayOutputWithContext(ctx context.Context) AuditLogConfigArrayOutput
- type AuditLogConfigInput
- type AuditLogConfigLogType
- func (AuditLogConfigLogType) ElementType() reflect.Type
- func (e AuditLogConfigLogType) ToAuditLogConfigLogTypeOutput() AuditLogConfigLogTypeOutput
- func (e AuditLogConfigLogType) ToAuditLogConfigLogTypeOutputWithContext(ctx context.Context) AuditLogConfigLogTypeOutput
- func (e AuditLogConfigLogType) ToAuditLogConfigLogTypePtrOutput() AuditLogConfigLogTypePtrOutput
- func (e AuditLogConfigLogType) ToAuditLogConfigLogTypePtrOutputWithContext(ctx context.Context) AuditLogConfigLogTypePtrOutput
- func (e AuditLogConfigLogType) ToStringOutput() pulumi.StringOutput
- func (e AuditLogConfigLogType) ToStringOutputWithContext(ctx context.Context) pulumi.StringOutput
- func (e AuditLogConfigLogType) ToStringPtrOutput() pulumi.StringPtrOutput
- func (e AuditLogConfigLogType) ToStringPtrOutputWithContext(ctx context.Context) pulumi.StringPtrOutput
- type AuditLogConfigLogTypeInput
- type AuditLogConfigLogTypeOutput
- func (AuditLogConfigLogTypeOutput) ElementType() reflect.Type
- func (o AuditLogConfigLogTypeOutput) ToAuditLogConfigLogTypeOutput() AuditLogConfigLogTypeOutput
- func (o AuditLogConfigLogTypeOutput) ToAuditLogConfigLogTypeOutputWithContext(ctx context.Context) AuditLogConfigLogTypeOutput
- func (o AuditLogConfigLogTypeOutput) ToAuditLogConfigLogTypePtrOutput() AuditLogConfigLogTypePtrOutput
- func (o AuditLogConfigLogTypeOutput) ToAuditLogConfigLogTypePtrOutputWithContext(ctx context.Context) AuditLogConfigLogTypePtrOutput
- func (o AuditLogConfigLogTypeOutput) ToStringOutput() pulumi.StringOutput
- func (o AuditLogConfigLogTypeOutput) ToStringOutputWithContext(ctx context.Context) pulumi.StringOutput
- func (o AuditLogConfigLogTypeOutput) ToStringPtrOutput() pulumi.StringPtrOutput
- func (o AuditLogConfigLogTypeOutput) ToStringPtrOutputWithContext(ctx context.Context) pulumi.StringPtrOutput
- type AuditLogConfigLogTypePtrInput
- type AuditLogConfigLogTypePtrOutput
- func (o AuditLogConfigLogTypePtrOutput) Elem() AuditLogConfigLogTypeOutput
- func (AuditLogConfigLogTypePtrOutput) ElementType() reflect.Type
- func (o AuditLogConfigLogTypePtrOutput) ToAuditLogConfigLogTypePtrOutput() AuditLogConfigLogTypePtrOutput
- func (o AuditLogConfigLogTypePtrOutput) ToAuditLogConfigLogTypePtrOutputWithContext(ctx context.Context) AuditLogConfigLogTypePtrOutput
- func (o AuditLogConfigLogTypePtrOutput) ToStringPtrOutput() pulumi.StringPtrOutput
- func (o AuditLogConfigLogTypePtrOutput) ToStringPtrOutputWithContext(ctx context.Context) pulumi.StringPtrOutput
- type AuditLogConfigOutput
- func (AuditLogConfigOutput) ElementType() reflect.Type
- func (o AuditLogConfigOutput) ExemptedMembers() pulumi.StringArrayOutput
- func (o AuditLogConfigOutput) LogType() AuditLogConfigLogTypePtrOutput
- func (o AuditLogConfigOutput) ToAuditLogConfigOutput() AuditLogConfigOutput
- func (o AuditLogConfigOutput) ToAuditLogConfigOutputWithContext(ctx context.Context) AuditLogConfigOutput
- type AuditLogConfigResponse
- type AuditLogConfigResponseArrayOutput
- func (AuditLogConfigResponseArrayOutput) ElementType() reflect.Type
- func (o AuditLogConfigResponseArrayOutput) Index(i pulumi.IntInput) AuditLogConfigResponseOutput
- func (o AuditLogConfigResponseArrayOutput) ToAuditLogConfigResponseArrayOutput() AuditLogConfigResponseArrayOutput
- func (o AuditLogConfigResponseArrayOutput) ToAuditLogConfigResponseArrayOutputWithContext(ctx context.Context) AuditLogConfigResponseArrayOutput
- type AuditLogConfigResponseOutput
- func (AuditLogConfigResponseOutput) ElementType() reflect.Type
- func (o AuditLogConfigResponseOutput) ExemptedMembers() pulumi.StringArrayOutput
- func (o AuditLogConfigResponseOutput) LogType() pulumi.StringOutput
- func (o AuditLogConfigResponseOutput) ToAuditLogConfigResponseOutput() AuditLogConfigResponseOutput
- func (o AuditLogConfigResponseOutput) ToAuditLogConfigResponseOutputWithContext(ctx context.Context) AuditLogConfigResponseOutput
- type Binding
- type BindingArgs
- type BindingArray
- type BindingArrayInput
- type BindingArrayOutput
- type BindingInput
- type BindingOutput
- func (o BindingOutput) Condition() ExprPtrOutput
- func (BindingOutput) ElementType() reflect.Type
- func (o BindingOutput) Members() pulumi.StringArrayOutput
- func (o BindingOutput) Role() pulumi.StringPtrOutput
- func (o BindingOutput) ToBindingOutput() BindingOutput
- func (o BindingOutput) ToBindingOutputWithContext(ctx context.Context) BindingOutput
- type BindingResponse
- type BindingResponseArrayOutput
- func (BindingResponseArrayOutput) ElementType() reflect.Type
- func (o BindingResponseArrayOutput) Index(i pulumi.IntInput) BindingResponseOutput
- func (o BindingResponseArrayOutput) ToBindingResponseArrayOutput() BindingResponseArrayOutput
- func (o BindingResponseArrayOutput) ToBindingResponseArrayOutputWithContext(ctx context.Context) BindingResponseArrayOutput
- type BindingResponseOutput
- func (o BindingResponseOutput) Condition() ExprResponseOutput
- func (BindingResponseOutput) ElementType() reflect.Type
- func (o BindingResponseOutput) Members() pulumi.StringArrayOutput
- func (o BindingResponseOutput) Role() pulumi.StringOutput
- func (o BindingResponseOutput) ToBindingResponseOutput() BindingResponseOutput
- func (o BindingResponseOutput) ToBindingResponseOutputWithContext(ctx context.Context) BindingResponseOutput
- type Expr
- type ExprArgs
- type ExprInput
- type ExprOutput
- func (o ExprOutput) Description() pulumi.StringPtrOutput
- func (ExprOutput) ElementType() reflect.Type
- func (o ExprOutput) Expression() pulumi.StringPtrOutput
- func (o ExprOutput) Location() pulumi.StringPtrOutput
- func (o ExprOutput) Title() pulumi.StringPtrOutput
- func (o ExprOutput) ToExprOutput() ExprOutput
- func (o ExprOutput) ToExprOutputWithContext(ctx context.Context) ExprOutput
- func (o ExprOutput) ToExprPtrOutput() ExprPtrOutput
- func (o ExprOutput) ToExprPtrOutputWithContext(ctx context.Context) ExprPtrOutput
- type ExprPtrInput
- type ExprPtrOutput
- func (o ExprPtrOutput) Description() pulumi.StringPtrOutput
- func (o ExprPtrOutput) Elem() ExprOutput
- func (ExprPtrOutput) ElementType() reflect.Type
- func (o ExprPtrOutput) Expression() pulumi.StringPtrOutput
- func (o ExprPtrOutput) Location() pulumi.StringPtrOutput
- func (o ExprPtrOutput) Title() pulumi.StringPtrOutput
- func (o ExprPtrOutput) ToExprPtrOutput() ExprPtrOutput
- func (o ExprPtrOutput) ToExprPtrOutputWithContext(ctx context.Context) ExprPtrOutput
- type ExprResponse
- type ExprResponseOutput
- func (o ExprResponseOutput) Description() pulumi.StringOutput
- func (ExprResponseOutput) ElementType() reflect.Type
- func (o ExprResponseOutput) Expression() pulumi.StringOutput
- func (o ExprResponseOutput) Location() pulumi.StringOutput
- func (o ExprResponseOutput) Title() pulumi.StringOutput
- func (o ExprResponseOutput) ToExprResponseOutput() ExprResponseOutput
- func (o ExprResponseOutput) ToExprResponseOutputWithContext(ctx context.Context) ExprResponseOutput
- type LookupOrganizationSourceIamPolicyArgs
- type LookupOrganizationSourceIamPolicyOutputArgs
- type LookupOrganizationSourceIamPolicyResult
- type LookupOrganizationSourceIamPolicyResultOutput
- func (o LookupOrganizationSourceIamPolicyResultOutput) AuditConfigs() AuditConfigResponseArrayOutput
- func (o LookupOrganizationSourceIamPolicyResultOutput) Bindings() BindingResponseArrayOutput
- func (LookupOrganizationSourceIamPolicyResultOutput) ElementType() reflect.Type
- func (o LookupOrganizationSourceIamPolicyResultOutput) Etag() pulumi.StringOutput
- func (o LookupOrganizationSourceIamPolicyResultOutput) ToLookupOrganizationSourceIamPolicyResultOutput() LookupOrganizationSourceIamPolicyResultOutput
- func (o LookupOrganizationSourceIamPolicyResultOutput) ToLookupOrganizationSourceIamPolicyResultOutputWithContext(ctx context.Context) LookupOrganizationSourceIamPolicyResultOutput
- func (o LookupOrganizationSourceIamPolicyResultOutput) Version() pulumi.IntOutput
- type LookupSourceArgs
- type LookupSourceOutputArgs
- type LookupSourceResult
- type LookupSourceResultOutput
- func (o LookupSourceResultOutput) Description() pulumi.StringOutput
- func (o LookupSourceResultOutput) DisplayName() pulumi.StringOutput
- func (LookupSourceResultOutput) ElementType() reflect.Type
- func (o LookupSourceResultOutput) Name() pulumi.StringOutput
- func (o LookupSourceResultOutput) ToLookupSourceResultOutput() LookupSourceResultOutput
- func (o LookupSourceResultOutput) ToLookupSourceResultOutputWithContext(ctx context.Context) LookupSourceResultOutput
- type OrganizationSourceIamPolicy
- func (*OrganizationSourceIamPolicy) ElementType() reflect.Type
- func (i *OrganizationSourceIamPolicy) ToOrganizationSourceIamPolicyOutput() OrganizationSourceIamPolicyOutput
- func (i *OrganizationSourceIamPolicy) ToOrganizationSourceIamPolicyOutputWithContext(ctx context.Context) OrganizationSourceIamPolicyOutput
- type OrganizationSourceIamPolicyArgs
- type OrganizationSourceIamPolicyInput
- type OrganizationSourceIamPolicyOutput
- func (OrganizationSourceIamPolicyOutput) ElementType() reflect.Type
- func (o OrganizationSourceIamPolicyOutput) ToOrganizationSourceIamPolicyOutput() OrganizationSourceIamPolicyOutput
- func (o OrganizationSourceIamPolicyOutput) ToOrganizationSourceIamPolicyOutputWithContext(ctx context.Context) OrganizationSourceIamPolicyOutput
- type OrganizationSourceIamPolicyState
- type Source
- type SourceArgs
- type SourceInput
- type SourceOutput
- type SourceState
Constants ¶
const ( // Default case. Should never be this. AuditLogConfigLogTypeLogTypeUnspecified = AuditLogConfigLogType("LOG_TYPE_UNSPECIFIED") // Admin reads. Example: CloudIAM getIamPolicy AuditLogConfigLogTypeAdminRead = AuditLogConfigLogType("ADMIN_READ") // Data writes. Example: CloudSQL Users create AuditLogConfigLogTypeDataWrite = AuditLogConfigLogType("DATA_WRITE") // Data reads. Example: CloudSQL Users list AuditLogConfigLogTypeDataRead = AuditLogConfigLogType("DATA_READ") )
Variables ¶
This section is empty.
Functions ¶
This section is empty.
Types ¶
type AuditConfig ¶
type AuditConfig struct { // The configuration for logging of each type of permission. AuditLogConfigs []AuditLogConfig `pulumi:"auditLogConfigs"` // Specifies a service that will be enabled for audit logging. For example, `storage.googleapis.com`, `cloudsql.googleapis.com`. `allServices` is a special value that covers all services. Service *string `pulumi:"service"` }
Specifies the audit configuration for a service. The configuration determines which permission types are logged, and what identities, if any, are exempted from logging. An AuditConfig must have one or more AuditLogConfigs. If there are AuditConfigs for both `allServices` and a specific service, the union of the two AuditConfigs is used for that service: the log_types specified in each AuditConfig are enabled, and the exempted_members in each AuditLogConfig are exempted. Example Policy with multiple AuditConfigs: { "audit_configs": [ { "service": "allServices", "audit_log_configs": [ { "log_type": "DATA_READ", "exempted_members": [ "user:jose@example.com" ] }, { "log_type": "DATA_WRITE" }, { "log_type": "ADMIN_READ" } ] }, { "service": "sampleservice.googleapis.com", "audit_log_configs": [ { "log_type": "DATA_READ" }, { "log_type": "DATA_WRITE", "exempted_members": [ "user:aliya@example.com" ] } ] } ] } For sampleservice, this policy enables DATA_READ, DATA_WRITE and ADMIN_READ logging. It also exempts jose@example.com from DATA_READ logging, and aliya@example.com from DATA_WRITE logging.
type AuditConfigArgs ¶
type AuditConfigArgs struct { // The configuration for logging of each type of permission. AuditLogConfigs AuditLogConfigArrayInput `pulumi:"auditLogConfigs"` // Specifies a service that will be enabled for audit logging. For example, `storage.googleapis.com`, `cloudsql.googleapis.com`. `allServices` is a special value that covers all services. Service pulumi.StringPtrInput `pulumi:"service"` }
Specifies the audit configuration for a service. The configuration determines which permission types are logged, and what identities, if any, are exempted from logging. An AuditConfig must have one or more AuditLogConfigs. If there are AuditConfigs for both `allServices` and a specific service, the union of the two AuditConfigs is used for that service: the log_types specified in each AuditConfig are enabled, and the exempted_members in each AuditLogConfig are exempted. Example Policy with multiple AuditConfigs: { "audit_configs": [ { "service": "allServices", "audit_log_configs": [ { "log_type": "DATA_READ", "exempted_members": [ "user:jose@example.com" ] }, { "log_type": "DATA_WRITE" }, { "log_type": "ADMIN_READ" } ] }, { "service": "sampleservice.googleapis.com", "audit_log_configs": [ { "log_type": "DATA_READ" }, { "log_type": "DATA_WRITE", "exempted_members": [ "user:aliya@example.com" ] } ] } ] } For sampleservice, this policy enables DATA_READ, DATA_WRITE and ADMIN_READ logging. It also exempts jose@example.com from DATA_READ logging, and aliya@example.com from DATA_WRITE logging.
func (AuditConfigArgs) ElementType ¶
func (AuditConfigArgs) ElementType() reflect.Type
func (AuditConfigArgs) ToAuditConfigOutput ¶
func (i AuditConfigArgs) ToAuditConfigOutput() AuditConfigOutput
func (AuditConfigArgs) ToAuditConfigOutputWithContext ¶
func (i AuditConfigArgs) ToAuditConfigOutputWithContext(ctx context.Context) AuditConfigOutput
type AuditConfigArray ¶
type AuditConfigArray []AuditConfigInput
func (AuditConfigArray) ElementType ¶
func (AuditConfigArray) ElementType() reflect.Type
func (AuditConfigArray) ToAuditConfigArrayOutput ¶
func (i AuditConfigArray) ToAuditConfigArrayOutput() AuditConfigArrayOutput
func (AuditConfigArray) ToAuditConfigArrayOutputWithContext ¶
func (i AuditConfigArray) ToAuditConfigArrayOutputWithContext(ctx context.Context) AuditConfigArrayOutput
type AuditConfigArrayInput ¶
type AuditConfigArrayInput interface { pulumi.Input ToAuditConfigArrayOutput() AuditConfigArrayOutput ToAuditConfigArrayOutputWithContext(context.Context) AuditConfigArrayOutput }
AuditConfigArrayInput is an input type that accepts AuditConfigArray and AuditConfigArrayOutput values. You can construct a concrete instance of `AuditConfigArrayInput` via:
AuditConfigArray{ AuditConfigArgs{...} }
type AuditConfigArrayOutput ¶
type AuditConfigArrayOutput struct{ *pulumi.OutputState }
func (AuditConfigArrayOutput) ElementType ¶
func (AuditConfigArrayOutput) ElementType() reflect.Type
func (AuditConfigArrayOutput) Index ¶
func (o AuditConfigArrayOutput) Index(i pulumi.IntInput) AuditConfigOutput
func (AuditConfigArrayOutput) ToAuditConfigArrayOutput ¶
func (o AuditConfigArrayOutput) ToAuditConfigArrayOutput() AuditConfigArrayOutput
func (AuditConfigArrayOutput) ToAuditConfigArrayOutputWithContext ¶
func (o AuditConfigArrayOutput) ToAuditConfigArrayOutputWithContext(ctx context.Context) AuditConfigArrayOutput
type AuditConfigInput ¶
type AuditConfigInput interface { pulumi.Input ToAuditConfigOutput() AuditConfigOutput ToAuditConfigOutputWithContext(context.Context) AuditConfigOutput }
AuditConfigInput is an input type that accepts AuditConfigArgs and AuditConfigOutput values. You can construct a concrete instance of `AuditConfigInput` via:
AuditConfigArgs{...}
type AuditConfigOutput ¶
type AuditConfigOutput struct{ *pulumi.OutputState }
Specifies the audit configuration for a service. The configuration determines which permission types are logged, and what identities, if any, are exempted from logging. An AuditConfig must have one or more AuditLogConfigs. If there are AuditConfigs for both `allServices` and a specific service, the union of the two AuditConfigs is used for that service: the log_types specified in each AuditConfig are enabled, and the exempted_members in each AuditLogConfig are exempted. Example Policy with multiple AuditConfigs: { "audit_configs": [ { "service": "allServices", "audit_log_configs": [ { "log_type": "DATA_READ", "exempted_members": [ "user:jose@example.com" ] }, { "log_type": "DATA_WRITE" }, { "log_type": "ADMIN_READ" } ] }, { "service": "sampleservice.googleapis.com", "audit_log_configs": [ { "log_type": "DATA_READ" }, { "log_type": "DATA_WRITE", "exempted_members": [ "user:aliya@example.com" ] } ] } ] } For sampleservice, this policy enables DATA_READ, DATA_WRITE and ADMIN_READ logging. It also exempts jose@example.com from DATA_READ logging, and aliya@example.com from DATA_WRITE logging.
func (AuditConfigOutput) AuditLogConfigs ¶
func (o AuditConfigOutput) AuditLogConfigs() AuditLogConfigArrayOutput
The configuration for logging of each type of permission.
func (AuditConfigOutput) ElementType ¶
func (AuditConfigOutput) ElementType() reflect.Type
func (AuditConfigOutput) Service ¶
func (o AuditConfigOutput) Service() pulumi.StringPtrOutput
Specifies a service that will be enabled for audit logging. For example, `storage.googleapis.com`, `cloudsql.googleapis.com`. `allServices` is a special value that covers all services.
func (AuditConfigOutput) ToAuditConfigOutput ¶
func (o AuditConfigOutput) ToAuditConfigOutput() AuditConfigOutput
func (AuditConfigOutput) ToAuditConfigOutputWithContext ¶
func (o AuditConfigOutput) ToAuditConfigOutputWithContext(ctx context.Context) AuditConfigOutput
type AuditConfigResponse ¶
type AuditConfigResponse struct { // The configuration for logging of each type of permission. AuditLogConfigs []AuditLogConfigResponse `pulumi:"auditLogConfigs"` // Specifies a service that will be enabled for audit logging. For example, `storage.googleapis.com`, `cloudsql.googleapis.com`. `allServices` is a special value that covers all services. Service string `pulumi:"service"` }
Specifies the audit configuration for a service. The configuration determines which permission types are logged, and what identities, if any, are exempted from logging. An AuditConfig must have one or more AuditLogConfigs. If there are AuditConfigs for both `allServices` and a specific service, the union of the two AuditConfigs is used for that service: the log_types specified in each AuditConfig are enabled, and the exempted_members in each AuditLogConfig are exempted. Example Policy with multiple AuditConfigs: { "audit_configs": [ { "service": "allServices", "audit_log_configs": [ { "log_type": "DATA_READ", "exempted_members": [ "user:jose@example.com" ] }, { "log_type": "DATA_WRITE" }, { "log_type": "ADMIN_READ" } ] }, { "service": "sampleservice.googleapis.com", "audit_log_configs": [ { "log_type": "DATA_READ" }, { "log_type": "DATA_WRITE", "exempted_members": [ "user:aliya@example.com" ] } ] } ] } For sampleservice, this policy enables DATA_READ, DATA_WRITE and ADMIN_READ logging. It also exempts jose@example.com from DATA_READ logging, and aliya@example.com from DATA_WRITE logging.
type AuditConfigResponseArrayOutput ¶
type AuditConfigResponseArrayOutput struct{ *pulumi.OutputState }
func (AuditConfigResponseArrayOutput) ElementType ¶
func (AuditConfigResponseArrayOutput) ElementType() reflect.Type
func (AuditConfigResponseArrayOutput) Index ¶
func (o AuditConfigResponseArrayOutput) Index(i pulumi.IntInput) AuditConfigResponseOutput
func (AuditConfigResponseArrayOutput) ToAuditConfigResponseArrayOutput ¶
func (o AuditConfigResponseArrayOutput) ToAuditConfigResponseArrayOutput() AuditConfigResponseArrayOutput
func (AuditConfigResponseArrayOutput) ToAuditConfigResponseArrayOutputWithContext ¶
func (o AuditConfigResponseArrayOutput) ToAuditConfigResponseArrayOutputWithContext(ctx context.Context) AuditConfigResponseArrayOutput
type AuditConfigResponseOutput ¶
type AuditConfigResponseOutput struct{ *pulumi.OutputState }
Specifies the audit configuration for a service. The configuration determines which permission types are logged, and what identities, if any, are exempted from logging. An AuditConfig must have one or more AuditLogConfigs. If there are AuditConfigs for both `allServices` and a specific service, the union of the two AuditConfigs is used for that service: the log_types specified in each AuditConfig are enabled, and the exempted_members in each AuditLogConfig are exempted. Example Policy with multiple AuditConfigs: { "audit_configs": [ { "service": "allServices", "audit_log_configs": [ { "log_type": "DATA_READ", "exempted_members": [ "user:jose@example.com" ] }, { "log_type": "DATA_WRITE" }, { "log_type": "ADMIN_READ" } ] }, { "service": "sampleservice.googleapis.com", "audit_log_configs": [ { "log_type": "DATA_READ" }, { "log_type": "DATA_WRITE", "exempted_members": [ "user:aliya@example.com" ] } ] } ] } For sampleservice, this policy enables DATA_READ, DATA_WRITE and ADMIN_READ logging. It also exempts jose@example.com from DATA_READ logging, and aliya@example.com from DATA_WRITE logging.
func (AuditConfigResponseOutput) AuditLogConfigs ¶
func (o AuditConfigResponseOutput) AuditLogConfigs() AuditLogConfigResponseArrayOutput
The configuration for logging of each type of permission.
func (AuditConfigResponseOutput) ElementType ¶
func (AuditConfigResponseOutput) ElementType() reflect.Type
func (AuditConfigResponseOutput) Service ¶
func (o AuditConfigResponseOutput) Service() pulumi.StringOutput
Specifies a service that will be enabled for audit logging. For example, `storage.googleapis.com`, `cloudsql.googleapis.com`. `allServices` is a special value that covers all services.
func (AuditConfigResponseOutput) ToAuditConfigResponseOutput ¶
func (o AuditConfigResponseOutput) ToAuditConfigResponseOutput() AuditConfigResponseOutput
func (AuditConfigResponseOutput) ToAuditConfigResponseOutputWithContext ¶
func (o AuditConfigResponseOutput) ToAuditConfigResponseOutputWithContext(ctx context.Context) AuditConfigResponseOutput
type AuditLogConfig ¶
type AuditLogConfig struct { // Specifies the identities that do not cause logging for this type of permission. Follows the same format of Binding.members. ExemptedMembers []string `pulumi:"exemptedMembers"` // The log type that this config enables. LogType *AuditLogConfigLogType `pulumi:"logType"` }
Provides the configuration for logging a type of permissions. Example: { "audit_log_configs": [ { "log_type": "DATA_READ", "exempted_members": [ "user:jose@example.com" ] }, { "log_type": "DATA_WRITE" } ] } This enables 'DATA_READ' and 'DATA_WRITE' logging, while exempting jose@example.com from DATA_READ logging.
type AuditLogConfigArgs ¶
type AuditLogConfigArgs struct { // Specifies the identities that do not cause logging for this type of permission. Follows the same format of Binding.members. ExemptedMembers pulumi.StringArrayInput `pulumi:"exemptedMembers"` // The log type that this config enables. LogType AuditLogConfigLogTypePtrInput `pulumi:"logType"` }
Provides the configuration for logging a type of permissions. Example: { "audit_log_configs": [ { "log_type": "DATA_READ", "exempted_members": [ "user:jose@example.com" ] }, { "log_type": "DATA_WRITE" } ] } This enables 'DATA_READ' and 'DATA_WRITE' logging, while exempting jose@example.com from DATA_READ logging.
func (AuditLogConfigArgs) ElementType ¶
func (AuditLogConfigArgs) ElementType() reflect.Type
func (AuditLogConfigArgs) ToAuditLogConfigOutput ¶
func (i AuditLogConfigArgs) ToAuditLogConfigOutput() AuditLogConfigOutput
func (AuditLogConfigArgs) ToAuditLogConfigOutputWithContext ¶
func (i AuditLogConfigArgs) ToAuditLogConfigOutputWithContext(ctx context.Context) AuditLogConfigOutput
type AuditLogConfigArray ¶
type AuditLogConfigArray []AuditLogConfigInput
func (AuditLogConfigArray) ElementType ¶
func (AuditLogConfigArray) ElementType() reflect.Type
func (AuditLogConfigArray) ToAuditLogConfigArrayOutput ¶
func (i AuditLogConfigArray) ToAuditLogConfigArrayOutput() AuditLogConfigArrayOutput
func (AuditLogConfigArray) ToAuditLogConfigArrayOutputWithContext ¶
func (i AuditLogConfigArray) ToAuditLogConfigArrayOutputWithContext(ctx context.Context) AuditLogConfigArrayOutput
type AuditLogConfigArrayInput ¶
type AuditLogConfigArrayInput interface { pulumi.Input ToAuditLogConfigArrayOutput() AuditLogConfigArrayOutput ToAuditLogConfigArrayOutputWithContext(context.Context) AuditLogConfigArrayOutput }
AuditLogConfigArrayInput is an input type that accepts AuditLogConfigArray and AuditLogConfigArrayOutput values. You can construct a concrete instance of `AuditLogConfigArrayInput` via:
AuditLogConfigArray{ AuditLogConfigArgs{...} }
type AuditLogConfigArrayOutput ¶
type AuditLogConfigArrayOutput struct{ *pulumi.OutputState }
func (AuditLogConfigArrayOutput) ElementType ¶
func (AuditLogConfigArrayOutput) ElementType() reflect.Type
func (AuditLogConfigArrayOutput) Index ¶
func (o AuditLogConfigArrayOutput) Index(i pulumi.IntInput) AuditLogConfigOutput
func (AuditLogConfigArrayOutput) ToAuditLogConfigArrayOutput ¶
func (o AuditLogConfigArrayOutput) ToAuditLogConfigArrayOutput() AuditLogConfigArrayOutput
func (AuditLogConfigArrayOutput) ToAuditLogConfigArrayOutputWithContext ¶
func (o AuditLogConfigArrayOutput) ToAuditLogConfigArrayOutputWithContext(ctx context.Context) AuditLogConfigArrayOutput
type AuditLogConfigInput ¶
type AuditLogConfigInput interface { pulumi.Input ToAuditLogConfigOutput() AuditLogConfigOutput ToAuditLogConfigOutputWithContext(context.Context) AuditLogConfigOutput }
AuditLogConfigInput is an input type that accepts AuditLogConfigArgs and AuditLogConfigOutput values. You can construct a concrete instance of `AuditLogConfigInput` via:
AuditLogConfigArgs{...}
type AuditLogConfigLogType ¶ added in v0.4.0
type AuditLogConfigLogType string
The log type that this config enables.
func (AuditLogConfigLogType) ElementType ¶ added in v0.4.0
func (AuditLogConfigLogType) ElementType() reflect.Type
func (AuditLogConfigLogType) ToAuditLogConfigLogTypeOutput ¶ added in v0.6.0
func (e AuditLogConfigLogType) ToAuditLogConfigLogTypeOutput() AuditLogConfigLogTypeOutput
func (AuditLogConfigLogType) ToAuditLogConfigLogTypeOutputWithContext ¶ added in v0.6.0
func (e AuditLogConfigLogType) ToAuditLogConfigLogTypeOutputWithContext(ctx context.Context) AuditLogConfigLogTypeOutput
func (AuditLogConfigLogType) ToAuditLogConfigLogTypePtrOutput ¶ added in v0.6.0
func (e AuditLogConfigLogType) ToAuditLogConfigLogTypePtrOutput() AuditLogConfigLogTypePtrOutput
func (AuditLogConfigLogType) ToAuditLogConfigLogTypePtrOutputWithContext ¶ added in v0.6.0
func (e AuditLogConfigLogType) ToAuditLogConfigLogTypePtrOutputWithContext(ctx context.Context) AuditLogConfigLogTypePtrOutput
func (AuditLogConfigLogType) ToStringOutput ¶ added in v0.4.0
func (e AuditLogConfigLogType) ToStringOutput() pulumi.StringOutput
func (AuditLogConfigLogType) ToStringOutputWithContext ¶ added in v0.4.0
func (e AuditLogConfigLogType) ToStringOutputWithContext(ctx context.Context) pulumi.StringOutput
func (AuditLogConfigLogType) ToStringPtrOutput ¶ added in v0.4.0
func (e AuditLogConfigLogType) ToStringPtrOutput() pulumi.StringPtrOutput
func (AuditLogConfigLogType) ToStringPtrOutputWithContext ¶ added in v0.4.0
func (e AuditLogConfigLogType) ToStringPtrOutputWithContext(ctx context.Context) pulumi.StringPtrOutput
type AuditLogConfigLogTypeInput ¶ added in v0.6.0
type AuditLogConfigLogTypeInput interface { pulumi.Input ToAuditLogConfigLogTypeOutput() AuditLogConfigLogTypeOutput ToAuditLogConfigLogTypeOutputWithContext(context.Context) AuditLogConfigLogTypeOutput }
AuditLogConfigLogTypeInput is an input type that accepts AuditLogConfigLogTypeArgs and AuditLogConfigLogTypeOutput values. You can construct a concrete instance of `AuditLogConfigLogTypeInput` via:
AuditLogConfigLogTypeArgs{...}
type AuditLogConfigLogTypeOutput ¶ added in v0.6.0
type AuditLogConfigLogTypeOutput struct{ *pulumi.OutputState }
func (AuditLogConfigLogTypeOutput) ElementType ¶ added in v0.6.0
func (AuditLogConfigLogTypeOutput) ElementType() reflect.Type
func (AuditLogConfigLogTypeOutput) ToAuditLogConfigLogTypeOutput ¶ added in v0.6.0
func (o AuditLogConfigLogTypeOutput) ToAuditLogConfigLogTypeOutput() AuditLogConfigLogTypeOutput
func (AuditLogConfigLogTypeOutput) ToAuditLogConfigLogTypeOutputWithContext ¶ added in v0.6.0
func (o AuditLogConfigLogTypeOutput) ToAuditLogConfigLogTypeOutputWithContext(ctx context.Context) AuditLogConfigLogTypeOutput
func (AuditLogConfigLogTypeOutput) ToAuditLogConfigLogTypePtrOutput ¶ added in v0.6.0
func (o AuditLogConfigLogTypeOutput) ToAuditLogConfigLogTypePtrOutput() AuditLogConfigLogTypePtrOutput
func (AuditLogConfigLogTypeOutput) ToAuditLogConfigLogTypePtrOutputWithContext ¶ added in v0.6.0
func (o AuditLogConfigLogTypeOutput) ToAuditLogConfigLogTypePtrOutputWithContext(ctx context.Context) AuditLogConfigLogTypePtrOutput
func (AuditLogConfigLogTypeOutput) ToStringOutput ¶ added in v0.6.0
func (o AuditLogConfigLogTypeOutput) ToStringOutput() pulumi.StringOutput
func (AuditLogConfigLogTypeOutput) ToStringOutputWithContext ¶ added in v0.6.0
func (o AuditLogConfigLogTypeOutput) ToStringOutputWithContext(ctx context.Context) pulumi.StringOutput
func (AuditLogConfigLogTypeOutput) ToStringPtrOutput ¶ added in v0.6.0
func (o AuditLogConfigLogTypeOutput) ToStringPtrOutput() pulumi.StringPtrOutput
func (AuditLogConfigLogTypeOutput) ToStringPtrOutputWithContext ¶ added in v0.6.0
func (o AuditLogConfigLogTypeOutput) ToStringPtrOutputWithContext(ctx context.Context) pulumi.StringPtrOutput
type AuditLogConfigLogTypePtrInput ¶ added in v0.6.0
type AuditLogConfigLogTypePtrInput interface { pulumi.Input ToAuditLogConfigLogTypePtrOutput() AuditLogConfigLogTypePtrOutput ToAuditLogConfigLogTypePtrOutputWithContext(context.Context) AuditLogConfigLogTypePtrOutput }
func AuditLogConfigLogTypePtr ¶ added in v0.6.0
func AuditLogConfigLogTypePtr(v string) AuditLogConfigLogTypePtrInput
type AuditLogConfigLogTypePtrOutput ¶ added in v0.6.0
type AuditLogConfigLogTypePtrOutput struct{ *pulumi.OutputState }
func (AuditLogConfigLogTypePtrOutput) Elem ¶ added in v0.6.0
func (o AuditLogConfigLogTypePtrOutput) Elem() AuditLogConfigLogTypeOutput
func (AuditLogConfigLogTypePtrOutput) ElementType ¶ added in v0.6.0
func (AuditLogConfigLogTypePtrOutput) ElementType() reflect.Type
func (AuditLogConfigLogTypePtrOutput) ToAuditLogConfigLogTypePtrOutput ¶ added in v0.6.0
func (o AuditLogConfigLogTypePtrOutput) ToAuditLogConfigLogTypePtrOutput() AuditLogConfigLogTypePtrOutput
func (AuditLogConfigLogTypePtrOutput) ToAuditLogConfigLogTypePtrOutputWithContext ¶ added in v0.6.0
func (o AuditLogConfigLogTypePtrOutput) ToAuditLogConfigLogTypePtrOutputWithContext(ctx context.Context) AuditLogConfigLogTypePtrOutput
func (AuditLogConfigLogTypePtrOutput) ToStringPtrOutput ¶ added in v0.6.0
func (o AuditLogConfigLogTypePtrOutput) ToStringPtrOutput() pulumi.StringPtrOutput
func (AuditLogConfigLogTypePtrOutput) ToStringPtrOutputWithContext ¶ added in v0.6.0
func (o AuditLogConfigLogTypePtrOutput) ToStringPtrOutputWithContext(ctx context.Context) pulumi.StringPtrOutput
type AuditLogConfigOutput ¶
type AuditLogConfigOutput struct{ *pulumi.OutputState }
Provides the configuration for logging a type of permissions. Example: { "audit_log_configs": [ { "log_type": "DATA_READ", "exempted_members": [ "user:jose@example.com" ] }, { "log_type": "DATA_WRITE" } ] } This enables 'DATA_READ' and 'DATA_WRITE' logging, while exempting jose@example.com from DATA_READ logging.
func (AuditLogConfigOutput) ElementType ¶
func (AuditLogConfigOutput) ElementType() reflect.Type
func (AuditLogConfigOutput) ExemptedMembers ¶
func (o AuditLogConfigOutput) ExemptedMembers() pulumi.StringArrayOutput
Specifies the identities that do not cause logging for this type of permission. Follows the same format of Binding.members.
func (AuditLogConfigOutput) LogType ¶
func (o AuditLogConfigOutput) LogType() AuditLogConfigLogTypePtrOutput
The log type that this config enables.
func (AuditLogConfigOutput) ToAuditLogConfigOutput ¶
func (o AuditLogConfigOutput) ToAuditLogConfigOutput() AuditLogConfigOutput
func (AuditLogConfigOutput) ToAuditLogConfigOutputWithContext ¶
func (o AuditLogConfigOutput) ToAuditLogConfigOutputWithContext(ctx context.Context) AuditLogConfigOutput
type AuditLogConfigResponse ¶
type AuditLogConfigResponse struct { // Specifies the identities that do not cause logging for this type of permission. Follows the same format of Binding.members. ExemptedMembers []string `pulumi:"exemptedMembers"` // The log type that this config enables. LogType string `pulumi:"logType"` }
Provides the configuration for logging a type of permissions. Example: { "audit_log_configs": [ { "log_type": "DATA_READ", "exempted_members": [ "user:jose@example.com" ] }, { "log_type": "DATA_WRITE" } ] } This enables 'DATA_READ' and 'DATA_WRITE' logging, while exempting jose@example.com from DATA_READ logging.
type AuditLogConfigResponseArrayOutput ¶
type AuditLogConfigResponseArrayOutput struct{ *pulumi.OutputState }
func (AuditLogConfigResponseArrayOutput) ElementType ¶
func (AuditLogConfigResponseArrayOutput) ElementType() reflect.Type
func (AuditLogConfigResponseArrayOutput) Index ¶
func (o AuditLogConfigResponseArrayOutput) Index(i pulumi.IntInput) AuditLogConfigResponseOutput
func (AuditLogConfigResponseArrayOutput) ToAuditLogConfigResponseArrayOutput ¶
func (o AuditLogConfigResponseArrayOutput) ToAuditLogConfigResponseArrayOutput() AuditLogConfigResponseArrayOutput
func (AuditLogConfigResponseArrayOutput) ToAuditLogConfigResponseArrayOutputWithContext ¶
func (o AuditLogConfigResponseArrayOutput) ToAuditLogConfigResponseArrayOutputWithContext(ctx context.Context) AuditLogConfigResponseArrayOutput
type AuditLogConfigResponseOutput ¶
type AuditLogConfigResponseOutput struct{ *pulumi.OutputState }
Provides the configuration for logging a type of permissions. Example: { "audit_log_configs": [ { "log_type": "DATA_READ", "exempted_members": [ "user:jose@example.com" ] }, { "log_type": "DATA_WRITE" } ] } This enables 'DATA_READ' and 'DATA_WRITE' logging, while exempting jose@example.com from DATA_READ logging.
func (AuditLogConfigResponseOutput) ElementType ¶
func (AuditLogConfigResponseOutput) ElementType() reflect.Type
func (AuditLogConfigResponseOutput) ExemptedMembers ¶
func (o AuditLogConfigResponseOutput) ExemptedMembers() pulumi.StringArrayOutput
Specifies the identities that do not cause logging for this type of permission. Follows the same format of Binding.members.
func (AuditLogConfigResponseOutput) LogType ¶
func (o AuditLogConfigResponseOutput) LogType() pulumi.StringOutput
The log type that this config enables.
func (AuditLogConfigResponseOutput) ToAuditLogConfigResponseOutput ¶
func (o AuditLogConfigResponseOutput) ToAuditLogConfigResponseOutput() AuditLogConfigResponseOutput
func (AuditLogConfigResponseOutput) ToAuditLogConfigResponseOutputWithContext ¶
func (o AuditLogConfigResponseOutput) ToAuditLogConfigResponseOutputWithContext(ctx context.Context) AuditLogConfigResponseOutput
type Binding ¶
type Binding struct { // The condition that is associated with this binding. If the condition evaluates to `true`, then this binding applies to the current request. If the condition evaluates to `false`, then this binding does not apply to the current request. However, a different role binding might grant the same role to one or more of the principals in this binding. To learn which resources support conditions in their IAM policies, see the [IAM documentation](https://cloud.google.com/iam/help/conditions/resource-policies). Condition *Expr `pulumi:"condition"` // Specifies the principals requesting access for a Cloud Platform resource. `members` can have the following values: * `allUsers`: A special identifier that represents anyone who is on the internet; with or without a Google account. * `allAuthenticatedUsers`: A special identifier that represents anyone who is authenticated with a Google account or a service account. * `user:{emailid}`: An email address that represents a specific Google account. For example, `alice@example.com` . * `serviceAccount:{emailid}`: An email address that represents a service account. For example, `my-other-app@appspot.gserviceaccount.com`. * `group:{emailid}`: An email address that represents a Google group. For example, `admins@example.com`. * `deleted:user:{emailid}?uid={uniqueid}`: An email address (plus unique identifier) representing a user that has been recently deleted. For example, `alice@example.com?uid=123456789012345678901`. If the user is recovered, this value reverts to `user:{emailid}` and the recovered user retains the role in the binding. * `deleted:serviceAccount:{emailid}?uid={uniqueid}`: An email address (plus unique identifier) representing a service account that has been recently deleted. For example, `my-other-app@appspot.gserviceaccount.com?uid=123456789012345678901`. If the service account is undeleted, this value reverts to `serviceAccount:{emailid}` and the undeleted service account retains the role in the binding. * `deleted:group:{emailid}?uid={uniqueid}`: An email address (plus unique identifier) representing a Google group that has been recently deleted. For example, `admins@example.com?uid=123456789012345678901`. If the group is recovered, this value reverts to `group:{emailid}` and the recovered group retains the role in the binding. * `domain:{domain}`: The G Suite domain (primary) that represents all the users of that domain. For example, `google.com` or `example.com`. Members []string `pulumi:"members"` // Role that is assigned to the list of `members`, or principals. For example, `roles/viewer`, `roles/editor`, or `roles/owner`. Role *string `pulumi:"role"` }
Associates `members`, or principals, with a `role`.
type BindingArgs ¶
type BindingArgs struct { // The condition that is associated with this binding. If the condition evaluates to `true`, then this binding applies to the current request. If the condition evaluates to `false`, then this binding does not apply to the current request. However, a different role binding might grant the same role to one or more of the principals in this binding. To learn which resources support conditions in their IAM policies, see the [IAM documentation](https://cloud.google.com/iam/help/conditions/resource-policies). Condition ExprPtrInput `pulumi:"condition"` // Specifies the principals requesting access for a Cloud Platform resource. `members` can have the following values: * `allUsers`: A special identifier that represents anyone who is on the internet; with or without a Google account. * `allAuthenticatedUsers`: A special identifier that represents anyone who is authenticated with a Google account or a service account. * `user:{emailid}`: An email address that represents a specific Google account. For example, `alice@example.com` . * `serviceAccount:{emailid}`: An email address that represents a service account. For example, `my-other-app@appspot.gserviceaccount.com`. * `group:{emailid}`: An email address that represents a Google group. For example, `admins@example.com`. * `deleted:user:{emailid}?uid={uniqueid}`: An email address (plus unique identifier) representing a user that has been recently deleted. For example, `alice@example.com?uid=123456789012345678901`. If the user is recovered, this value reverts to `user:{emailid}` and the recovered user retains the role in the binding. * `deleted:serviceAccount:{emailid}?uid={uniqueid}`: An email address (plus unique identifier) representing a service account that has been recently deleted. For example, `my-other-app@appspot.gserviceaccount.com?uid=123456789012345678901`. If the service account is undeleted, this value reverts to `serviceAccount:{emailid}` and the undeleted service account retains the role in the binding. * `deleted:group:{emailid}?uid={uniqueid}`: An email address (plus unique identifier) representing a Google group that has been recently deleted. For example, `admins@example.com?uid=123456789012345678901`. If the group is recovered, this value reverts to `group:{emailid}` and the recovered group retains the role in the binding. * `domain:{domain}`: The G Suite domain (primary) that represents all the users of that domain. For example, `google.com` or `example.com`. Members pulumi.StringArrayInput `pulumi:"members"` // Role that is assigned to the list of `members`, or principals. For example, `roles/viewer`, `roles/editor`, or `roles/owner`. Role pulumi.StringPtrInput `pulumi:"role"` }
Associates `members`, or principals, with a `role`.
func (BindingArgs) ElementType ¶
func (BindingArgs) ElementType() reflect.Type
func (BindingArgs) ToBindingOutput ¶
func (i BindingArgs) ToBindingOutput() BindingOutput
func (BindingArgs) ToBindingOutputWithContext ¶
func (i BindingArgs) ToBindingOutputWithContext(ctx context.Context) BindingOutput
type BindingArray ¶
type BindingArray []BindingInput
func (BindingArray) ElementType ¶
func (BindingArray) ElementType() reflect.Type
func (BindingArray) ToBindingArrayOutput ¶
func (i BindingArray) ToBindingArrayOutput() BindingArrayOutput
func (BindingArray) ToBindingArrayOutputWithContext ¶
func (i BindingArray) ToBindingArrayOutputWithContext(ctx context.Context) BindingArrayOutput
type BindingArrayInput ¶
type BindingArrayInput interface { pulumi.Input ToBindingArrayOutput() BindingArrayOutput ToBindingArrayOutputWithContext(context.Context) BindingArrayOutput }
BindingArrayInput is an input type that accepts BindingArray and BindingArrayOutput values. You can construct a concrete instance of `BindingArrayInput` via:
BindingArray{ BindingArgs{...} }
type BindingArrayOutput ¶
type BindingArrayOutput struct{ *pulumi.OutputState }
func (BindingArrayOutput) ElementType ¶
func (BindingArrayOutput) ElementType() reflect.Type
func (BindingArrayOutput) Index ¶
func (o BindingArrayOutput) Index(i pulumi.IntInput) BindingOutput
func (BindingArrayOutput) ToBindingArrayOutput ¶
func (o BindingArrayOutput) ToBindingArrayOutput() BindingArrayOutput
func (BindingArrayOutput) ToBindingArrayOutputWithContext ¶
func (o BindingArrayOutput) ToBindingArrayOutputWithContext(ctx context.Context) BindingArrayOutput
type BindingInput ¶
type BindingInput interface { pulumi.Input ToBindingOutput() BindingOutput ToBindingOutputWithContext(context.Context) BindingOutput }
BindingInput is an input type that accepts BindingArgs and BindingOutput values. You can construct a concrete instance of `BindingInput` via:
BindingArgs{...}
type BindingOutput ¶
type BindingOutput struct{ *pulumi.OutputState }
Associates `members`, or principals, with a `role`.
func (BindingOutput) Condition ¶
func (o BindingOutput) Condition() ExprPtrOutput
The condition that is associated with this binding. If the condition evaluates to `true`, then this binding applies to the current request. If the condition evaluates to `false`, then this binding does not apply to the current request. However, a different role binding might grant the same role to one or more of the principals in this binding. To learn which resources support conditions in their IAM policies, see the [IAM documentation](https://cloud.google.com/iam/help/conditions/resource-policies).
func (BindingOutput) ElementType ¶
func (BindingOutput) ElementType() reflect.Type
func (BindingOutput) Members ¶
func (o BindingOutput) Members() pulumi.StringArrayOutput
Specifies the principals requesting access for a Cloud Platform resource. `members` can have the following values: * `allUsers`: A special identifier that represents anyone who is on the internet; with or without a Google account. * `allAuthenticatedUsers`: A special identifier that represents anyone who is authenticated with a Google account or a service account. * `user:{emailid}`: An email address that represents a specific Google account. For example, `alice@example.com` . * `serviceAccount:{emailid}`: An email address that represents a service account. For example, `my-other-app@appspot.gserviceaccount.com`. * `group:{emailid}`: An email address that represents a Google group. For example, `admins@example.com`. * `deleted:user:{emailid}?uid={uniqueid}`: An email address (plus unique identifier) representing a user that has been recently deleted. For example, `alice@example.com?uid=123456789012345678901`. If the user is recovered, this value reverts to `user:{emailid}` and the recovered user retains the role in the binding. * `deleted:serviceAccount:{emailid}?uid={uniqueid}`: An email address (plus unique identifier) representing a service account that has been recently deleted. For example, `my-other-app@appspot.gserviceaccount.com?uid=123456789012345678901`. If the service account is undeleted, this value reverts to `serviceAccount:{emailid}` and the undeleted service account retains the role in the binding. * `deleted:group:{emailid}?uid={uniqueid}`: An email address (plus unique identifier) representing a Google group that has been recently deleted. For example, `admins@example.com?uid=123456789012345678901`. If the group is recovered, this value reverts to `group:{emailid}` and the recovered group retains the role in the binding. * `domain:{domain}`: The G Suite domain (primary) that represents all the users of that domain. For example, `google.com` or `example.com`.
func (BindingOutput) Role ¶
func (o BindingOutput) Role() pulumi.StringPtrOutput
Role that is assigned to the list of `members`, or principals. For example, `roles/viewer`, `roles/editor`, or `roles/owner`.
func (BindingOutput) ToBindingOutput ¶
func (o BindingOutput) ToBindingOutput() BindingOutput
func (BindingOutput) ToBindingOutputWithContext ¶
func (o BindingOutput) ToBindingOutputWithContext(ctx context.Context) BindingOutput
type BindingResponse ¶
type BindingResponse struct { // The condition that is associated with this binding. If the condition evaluates to `true`, then this binding applies to the current request. If the condition evaluates to `false`, then this binding does not apply to the current request. However, a different role binding might grant the same role to one or more of the principals in this binding. To learn which resources support conditions in their IAM policies, see the [IAM documentation](https://cloud.google.com/iam/help/conditions/resource-policies). Condition ExprResponse `pulumi:"condition"` // Specifies the principals requesting access for a Cloud Platform resource. `members` can have the following values: * `allUsers`: A special identifier that represents anyone who is on the internet; with or without a Google account. * `allAuthenticatedUsers`: A special identifier that represents anyone who is authenticated with a Google account or a service account. * `user:{emailid}`: An email address that represents a specific Google account. For example, `alice@example.com` . * `serviceAccount:{emailid}`: An email address that represents a service account. For example, `my-other-app@appspot.gserviceaccount.com`. * `group:{emailid}`: An email address that represents a Google group. For example, `admins@example.com`. * `deleted:user:{emailid}?uid={uniqueid}`: An email address (plus unique identifier) representing a user that has been recently deleted. For example, `alice@example.com?uid=123456789012345678901`. If the user is recovered, this value reverts to `user:{emailid}` and the recovered user retains the role in the binding. * `deleted:serviceAccount:{emailid}?uid={uniqueid}`: An email address (plus unique identifier) representing a service account that has been recently deleted. For example, `my-other-app@appspot.gserviceaccount.com?uid=123456789012345678901`. If the service account is undeleted, this value reverts to `serviceAccount:{emailid}` and the undeleted service account retains the role in the binding. * `deleted:group:{emailid}?uid={uniqueid}`: An email address (plus unique identifier) representing a Google group that has been recently deleted. For example, `admins@example.com?uid=123456789012345678901`. If the group is recovered, this value reverts to `group:{emailid}` and the recovered group retains the role in the binding. * `domain:{domain}`: The G Suite domain (primary) that represents all the users of that domain. For example, `google.com` or `example.com`. Members []string `pulumi:"members"` // Role that is assigned to the list of `members`, or principals. For example, `roles/viewer`, `roles/editor`, or `roles/owner`. Role string `pulumi:"role"` }
Associates `members`, or principals, with a `role`.
type BindingResponseArrayOutput ¶
type BindingResponseArrayOutput struct{ *pulumi.OutputState }
func (BindingResponseArrayOutput) ElementType ¶
func (BindingResponseArrayOutput) ElementType() reflect.Type
func (BindingResponseArrayOutput) Index ¶
func (o BindingResponseArrayOutput) Index(i pulumi.IntInput) BindingResponseOutput
func (BindingResponseArrayOutput) ToBindingResponseArrayOutput ¶
func (o BindingResponseArrayOutput) ToBindingResponseArrayOutput() BindingResponseArrayOutput
func (BindingResponseArrayOutput) ToBindingResponseArrayOutputWithContext ¶
func (o BindingResponseArrayOutput) ToBindingResponseArrayOutputWithContext(ctx context.Context) BindingResponseArrayOutput
type BindingResponseOutput ¶
type BindingResponseOutput struct{ *pulumi.OutputState }
Associates `members`, or principals, with a `role`.
func (BindingResponseOutput) Condition ¶
func (o BindingResponseOutput) Condition() ExprResponseOutput
The condition that is associated with this binding. If the condition evaluates to `true`, then this binding applies to the current request. If the condition evaluates to `false`, then this binding does not apply to the current request. However, a different role binding might grant the same role to one or more of the principals in this binding. To learn which resources support conditions in their IAM policies, see the [IAM documentation](https://cloud.google.com/iam/help/conditions/resource-policies).
func (BindingResponseOutput) ElementType ¶
func (BindingResponseOutput) ElementType() reflect.Type
func (BindingResponseOutput) Members ¶
func (o BindingResponseOutput) Members() pulumi.StringArrayOutput
Specifies the principals requesting access for a Cloud Platform resource. `members` can have the following values: * `allUsers`: A special identifier that represents anyone who is on the internet; with or without a Google account. * `allAuthenticatedUsers`: A special identifier that represents anyone who is authenticated with a Google account or a service account. * `user:{emailid}`: An email address that represents a specific Google account. For example, `alice@example.com` . * `serviceAccount:{emailid}`: An email address that represents a service account. For example, `my-other-app@appspot.gserviceaccount.com`. * `group:{emailid}`: An email address that represents a Google group. For example, `admins@example.com`. * `deleted:user:{emailid}?uid={uniqueid}`: An email address (plus unique identifier) representing a user that has been recently deleted. For example, `alice@example.com?uid=123456789012345678901`. If the user is recovered, this value reverts to `user:{emailid}` and the recovered user retains the role in the binding. * `deleted:serviceAccount:{emailid}?uid={uniqueid}`: An email address (plus unique identifier) representing a service account that has been recently deleted. For example, `my-other-app@appspot.gserviceaccount.com?uid=123456789012345678901`. If the service account is undeleted, this value reverts to `serviceAccount:{emailid}` and the undeleted service account retains the role in the binding. * `deleted:group:{emailid}?uid={uniqueid}`: An email address (plus unique identifier) representing a Google group that has been recently deleted. For example, `admins@example.com?uid=123456789012345678901`. If the group is recovered, this value reverts to `group:{emailid}` and the recovered group retains the role in the binding. * `domain:{domain}`: The G Suite domain (primary) that represents all the users of that domain. For example, `google.com` or `example.com`.
func (BindingResponseOutput) Role ¶
func (o BindingResponseOutput) Role() pulumi.StringOutput
Role that is assigned to the list of `members`, or principals. For example, `roles/viewer`, `roles/editor`, or `roles/owner`.
func (BindingResponseOutput) ToBindingResponseOutput ¶
func (o BindingResponseOutput) ToBindingResponseOutput() BindingResponseOutput
func (BindingResponseOutput) ToBindingResponseOutputWithContext ¶
func (o BindingResponseOutput) ToBindingResponseOutputWithContext(ctx context.Context) BindingResponseOutput
type Expr ¶
type Expr struct { // Optional. Description of the expression. This is a longer text which describes the expression, e.g. when hovered over it in a UI. Description *string `pulumi:"description"` // Textual representation of an expression in Common Expression Language syntax. Expression *string `pulumi:"expression"` // Optional. String indicating the location of the expression for error reporting, e.g. a file name and a position in the file. Location *string `pulumi:"location"` // Optional. Title for the expression, i.e. a short string describing its purpose. This can be used e.g. in UIs which allow to enter the expression. Title *string `pulumi:"title"` }
Represents a textual expression in the Common Expression Language (CEL) syntax. CEL is a C-like expression language. The syntax and semantics of CEL are documented at https://github.com/google/cel-spec. Example (Comparison): title: "Summary size limit" description: "Determines if a summary is less than 100 chars" expression: "document.summary.size() < 100" Example (Equality): title: "Requestor is owner" description: "Determines if requestor is the document owner" expression: "document.owner == request.auth.claims.email" Example (Logic): title: "Public documents" description: "Determine whether the document should be publicly visible" expression: "document.type != 'private' && document.type != 'internal'" Example (Data Manipulation): title: "Notification string" description: "Create a notification string with a timestamp." expression: "'New message received at ' + string(document.create_time)" The exact variables and functions that may be referenced within an expression are determined by the service that evaluates it. See the service documentation for additional information.
type ExprArgs ¶
type ExprArgs struct { // Optional. Description of the expression. This is a longer text which describes the expression, e.g. when hovered over it in a UI. Description pulumi.StringPtrInput `pulumi:"description"` // Textual representation of an expression in Common Expression Language syntax. Expression pulumi.StringPtrInput `pulumi:"expression"` // Optional. String indicating the location of the expression for error reporting, e.g. a file name and a position in the file. Location pulumi.StringPtrInput `pulumi:"location"` // Optional. Title for the expression, i.e. a short string describing its purpose. This can be used e.g. in UIs which allow to enter the expression. Title pulumi.StringPtrInput `pulumi:"title"` }
Represents a textual expression in the Common Expression Language (CEL) syntax. CEL is a C-like expression language. The syntax and semantics of CEL are documented at https://github.com/google/cel-spec. Example (Comparison): title: "Summary size limit" description: "Determines if a summary is less than 100 chars" expression: "document.summary.size() < 100" Example (Equality): title: "Requestor is owner" description: "Determines if requestor is the document owner" expression: "document.owner == request.auth.claims.email" Example (Logic): title: "Public documents" description: "Determine whether the document should be publicly visible" expression: "document.type != 'private' && document.type != 'internal'" Example (Data Manipulation): title: "Notification string" description: "Create a notification string with a timestamp." expression: "'New message received at ' + string(document.create_time)" The exact variables and functions that may be referenced within an expression are determined by the service that evaluates it. See the service documentation for additional information.
func (ExprArgs) ElementType ¶
func (ExprArgs) ToExprOutput ¶
func (i ExprArgs) ToExprOutput() ExprOutput
func (ExprArgs) ToExprOutputWithContext ¶
func (i ExprArgs) ToExprOutputWithContext(ctx context.Context) ExprOutput
func (ExprArgs) ToExprPtrOutput ¶
func (i ExprArgs) ToExprPtrOutput() ExprPtrOutput
func (ExprArgs) ToExprPtrOutputWithContext ¶
func (i ExprArgs) ToExprPtrOutputWithContext(ctx context.Context) ExprPtrOutput
type ExprInput ¶
type ExprInput interface { pulumi.Input ToExprOutput() ExprOutput ToExprOutputWithContext(context.Context) ExprOutput }
ExprInput is an input type that accepts ExprArgs and ExprOutput values. You can construct a concrete instance of `ExprInput` via:
ExprArgs{...}
type ExprOutput ¶
type ExprOutput struct{ *pulumi.OutputState }
Represents a textual expression in the Common Expression Language (CEL) syntax. CEL is a C-like expression language. The syntax and semantics of CEL are documented at https://github.com/google/cel-spec. Example (Comparison): title: "Summary size limit" description: "Determines if a summary is less than 100 chars" expression: "document.summary.size() < 100" Example (Equality): title: "Requestor is owner" description: "Determines if requestor is the document owner" expression: "document.owner == request.auth.claims.email" Example (Logic): title: "Public documents" description: "Determine whether the document should be publicly visible" expression: "document.type != 'private' && document.type != 'internal'" Example (Data Manipulation): title: "Notification string" description: "Create a notification string with a timestamp." expression: "'New message received at ' + string(document.create_time)" The exact variables and functions that may be referenced within an expression are determined by the service that evaluates it. See the service documentation for additional information.
func (ExprOutput) Description ¶
func (o ExprOutput) Description() pulumi.StringPtrOutput
Optional. Description of the expression. This is a longer text which describes the expression, e.g. when hovered over it in a UI.
func (ExprOutput) ElementType ¶
func (ExprOutput) ElementType() reflect.Type
func (ExprOutput) Expression ¶
func (o ExprOutput) Expression() pulumi.StringPtrOutput
Textual representation of an expression in Common Expression Language syntax.
func (ExprOutput) Location ¶
func (o ExprOutput) Location() pulumi.StringPtrOutput
Optional. String indicating the location of the expression for error reporting, e.g. a file name and a position in the file.
func (ExprOutput) Title ¶
func (o ExprOutput) Title() pulumi.StringPtrOutput
Optional. Title for the expression, i.e. a short string describing its purpose. This can be used e.g. in UIs which allow to enter the expression.
func (ExprOutput) ToExprOutput ¶
func (o ExprOutput) ToExprOutput() ExprOutput
func (ExprOutput) ToExprOutputWithContext ¶
func (o ExprOutput) ToExprOutputWithContext(ctx context.Context) ExprOutput
func (ExprOutput) ToExprPtrOutput ¶
func (o ExprOutput) ToExprPtrOutput() ExprPtrOutput
func (ExprOutput) ToExprPtrOutputWithContext ¶
func (o ExprOutput) ToExprPtrOutputWithContext(ctx context.Context) ExprPtrOutput
type ExprPtrInput ¶
type ExprPtrInput interface { pulumi.Input ToExprPtrOutput() ExprPtrOutput ToExprPtrOutputWithContext(context.Context) ExprPtrOutput }
ExprPtrInput is an input type that accepts ExprArgs, ExprPtr and ExprPtrOutput values. You can construct a concrete instance of `ExprPtrInput` via:
ExprArgs{...} or: nil
func ExprPtr ¶
func ExprPtr(v *ExprArgs) ExprPtrInput
type ExprPtrOutput ¶
type ExprPtrOutput struct{ *pulumi.OutputState }
func (ExprPtrOutput) Description ¶
func (o ExprPtrOutput) Description() pulumi.StringPtrOutput
Optional. Description of the expression. This is a longer text which describes the expression, e.g. when hovered over it in a UI.
func (ExprPtrOutput) Elem ¶
func (o ExprPtrOutput) Elem() ExprOutput
func (ExprPtrOutput) ElementType ¶
func (ExprPtrOutput) ElementType() reflect.Type
func (ExprPtrOutput) Expression ¶
func (o ExprPtrOutput) Expression() pulumi.StringPtrOutput
Textual representation of an expression in Common Expression Language syntax.
func (ExprPtrOutput) Location ¶
func (o ExprPtrOutput) Location() pulumi.StringPtrOutput
Optional. String indicating the location of the expression for error reporting, e.g. a file name and a position in the file.
func (ExprPtrOutput) Title ¶
func (o ExprPtrOutput) Title() pulumi.StringPtrOutput
Optional. Title for the expression, i.e. a short string describing its purpose. This can be used e.g. in UIs which allow to enter the expression.
func (ExprPtrOutput) ToExprPtrOutput ¶
func (o ExprPtrOutput) ToExprPtrOutput() ExprPtrOutput
func (ExprPtrOutput) ToExprPtrOutputWithContext ¶
func (o ExprPtrOutput) ToExprPtrOutputWithContext(ctx context.Context) ExprPtrOutput
type ExprResponse ¶
type ExprResponse struct { // Optional. Description of the expression. This is a longer text which describes the expression, e.g. when hovered over it in a UI. Description string `pulumi:"description"` // Textual representation of an expression in Common Expression Language syntax. Expression string `pulumi:"expression"` // Optional. String indicating the location of the expression for error reporting, e.g. a file name and a position in the file. Location string `pulumi:"location"` // Optional. Title for the expression, i.e. a short string describing its purpose. This can be used e.g. in UIs which allow to enter the expression. Title string `pulumi:"title"` }
Represents a textual expression in the Common Expression Language (CEL) syntax. CEL is a C-like expression language. The syntax and semantics of CEL are documented at https://github.com/google/cel-spec. Example (Comparison): title: "Summary size limit" description: "Determines if a summary is less than 100 chars" expression: "document.summary.size() < 100" Example (Equality): title: "Requestor is owner" description: "Determines if requestor is the document owner" expression: "document.owner == request.auth.claims.email" Example (Logic): title: "Public documents" description: "Determine whether the document should be publicly visible" expression: "document.type != 'private' && document.type != 'internal'" Example (Data Manipulation): title: "Notification string" description: "Create a notification string with a timestamp." expression: "'New message received at ' + string(document.create_time)" The exact variables and functions that may be referenced within an expression are determined by the service that evaluates it. See the service documentation for additional information.
type ExprResponseOutput ¶
type ExprResponseOutput struct{ *pulumi.OutputState }
Represents a textual expression in the Common Expression Language (CEL) syntax. CEL is a C-like expression language. The syntax and semantics of CEL are documented at https://github.com/google/cel-spec. Example (Comparison): title: "Summary size limit" description: "Determines if a summary is less than 100 chars" expression: "document.summary.size() < 100" Example (Equality): title: "Requestor is owner" description: "Determines if requestor is the document owner" expression: "document.owner == request.auth.claims.email" Example (Logic): title: "Public documents" description: "Determine whether the document should be publicly visible" expression: "document.type != 'private' && document.type != 'internal'" Example (Data Manipulation): title: "Notification string" description: "Create a notification string with a timestamp." expression: "'New message received at ' + string(document.create_time)" The exact variables and functions that may be referenced within an expression are determined by the service that evaluates it. See the service documentation for additional information.
func (ExprResponseOutput) Description ¶
func (o ExprResponseOutput) Description() pulumi.StringOutput
Optional. Description of the expression. This is a longer text which describes the expression, e.g. when hovered over it in a UI.
func (ExprResponseOutput) ElementType ¶
func (ExprResponseOutput) ElementType() reflect.Type
func (ExprResponseOutput) Expression ¶
func (o ExprResponseOutput) Expression() pulumi.StringOutput
Textual representation of an expression in Common Expression Language syntax.
func (ExprResponseOutput) Location ¶
func (o ExprResponseOutput) Location() pulumi.StringOutput
Optional. String indicating the location of the expression for error reporting, e.g. a file name and a position in the file.
func (ExprResponseOutput) Title ¶
func (o ExprResponseOutput) Title() pulumi.StringOutput
Optional. Title for the expression, i.e. a short string describing its purpose. This can be used e.g. in UIs which allow to enter the expression.
func (ExprResponseOutput) ToExprResponseOutput ¶
func (o ExprResponseOutput) ToExprResponseOutput() ExprResponseOutput
func (ExprResponseOutput) ToExprResponseOutputWithContext ¶
func (o ExprResponseOutput) ToExprResponseOutputWithContext(ctx context.Context) ExprResponseOutput
type LookupOrganizationSourceIamPolicyArgs ¶ added in v0.4.0
type LookupOrganizationSourceIamPolicyOutputArgs ¶ added in v0.8.0
type LookupOrganizationSourceIamPolicyOutputArgs struct { OrganizationId pulumi.StringInput `pulumi:"organizationId"` SourceId pulumi.StringInput `pulumi:"sourceId"` }
func (LookupOrganizationSourceIamPolicyOutputArgs) ElementType ¶ added in v0.8.0
func (LookupOrganizationSourceIamPolicyOutputArgs) ElementType() reflect.Type
type LookupOrganizationSourceIamPolicyResult ¶ added in v0.4.0
type LookupOrganizationSourceIamPolicyResult struct { // Specifies cloud audit logging configuration for this policy. AuditConfigs []AuditConfigResponse `pulumi:"auditConfigs"` // Associates a list of `members`, or principals, with a `role`. Optionally, may specify a `condition` that determines how and when the `bindings` are applied. Each of the `bindings` must contain at least one principal. The `bindings` in a `Policy` can refer to up to 1,500 principals; up to 250 of these principals can be Google groups. Each occurrence of a principal counts towards these limits. For example, if the `bindings` grant 50 different roles to `user:alice@example.com`, and not to any other principal, then you can add another 1,450 principals to the `bindings` in the `Policy`. Bindings []BindingResponse `pulumi:"bindings"` // `etag` is used for optimistic concurrency control as a way to help prevent simultaneous updates of a policy from overwriting each other. It is strongly suggested that systems make use of the `etag` in the read-modify-write cycle to perform policy updates in order to avoid race conditions: An `etag` is returned in the response to `getIamPolicy`, and systems are expected to put that etag in the request to `setIamPolicy` to ensure that their change will be applied to the same version of the policy. **Important:** If you use IAM Conditions, you must include the `etag` field whenever you call `setIamPolicy`. If you omit this field, then IAM allows you to overwrite a version `3` policy with a version `1` policy, and all of the conditions in the version `3` policy are lost. Etag string `pulumi:"etag"` // Specifies the format of the policy. Valid values are `0`, `1`, and `3`. Requests that specify an invalid value are rejected. Any operation that affects conditional role bindings must specify version `3`. This requirement applies to the following operations: * Getting a policy that includes a conditional role binding * Adding a conditional role binding to a policy * Changing a conditional role binding in a policy * Removing any role binding, with or without a condition, from a policy that includes conditions **Important:** If you use IAM Conditions, you must include the `etag` field whenever you call `setIamPolicy`. If you omit this field, then IAM allows you to overwrite a version `3` policy with a version `1` policy, and all of the conditions in the version `3` policy are lost. If a policy does not include any conditions, operations on that policy may specify any valid version or leave the field unset. To learn which resources support conditions in their IAM policies, see the [IAM documentation](https://cloud.google.com/iam/help/conditions/resource-policies). Version int `pulumi:"version"` }
func LookupOrganizationSourceIamPolicy ¶ added in v0.4.0
func LookupOrganizationSourceIamPolicy(ctx *pulumi.Context, args *LookupOrganizationSourceIamPolicyArgs, opts ...pulumi.InvokeOption) (*LookupOrganizationSourceIamPolicyResult, error)
Gets the access control policy on the specified Source.
type LookupOrganizationSourceIamPolicyResultOutput ¶ added in v0.8.0
type LookupOrganizationSourceIamPolicyResultOutput struct{ *pulumi.OutputState }
func LookupOrganizationSourceIamPolicyOutput ¶ added in v0.8.0
func LookupOrganizationSourceIamPolicyOutput(ctx *pulumi.Context, args LookupOrganizationSourceIamPolicyOutputArgs, opts ...pulumi.InvokeOption) LookupOrganizationSourceIamPolicyResultOutput
func (LookupOrganizationSourceIamPolicyResultOutput) AuditConfigs ¶ added in v0.8.0
func (o LookupOrganizationSourceIamPolicyResultOutput) AuditConfigs() AuditConfigResponseArrayOutput
Specifies cloud audit logging configuration for this policy.
func (LookupOrganizationSourceIamPolicyResultOutput) Bindings ¶ added in v0.8.0
func (o LookupOrganizationSourceIamPolicyResultOutput) Bindings() BindingResponseArrayOutput
Associates a list of `members`, or principals, with a `role`. Optionally, may specify a `condition` that determines how and when the `bindings` are applied. Each of the `bindings` must contain at least one principal. The `bindings` in a `Policy` can refer to up to 1,500 principals; up to 250 of these principals can be Google groups. Each occurrence of a principal counts towards these limits. For example, if the `bindings` grant 50 different roles to `user:alice@example.com`, and not to any other principal, then you can add another 1,450 principals to the `bindings` in the `Policy`.
func (LookupOrganizationSourceIamPolicyResultOutput) ElementType ¶ added in v0.8.0
func (LookupOrganizationSourceIamPolicyResultOutput) ElementType() reflect.Type
func (LookupOrganizationSourceIamPolicyResultOutput) Etag ¶ added in v0.8.0
func (o LookupOrganizationSourceIamPolicyResultOutput) Etag() pulumi.StringOutput
`etag` is used for optimistic concurrency control as a way to help prevent simultaneous updates of a policy from overwriting each other. It is strongly suggested that systems make use of the `etag` in the read-modify-write cycle to perform policy updates in order to avoid race conditions: An `etag` is returned in the response to `getIamPolicy`, and systems are expected to put that etag in the request to `setIamPolicy` to ensure that their change will be applied to the same version of the policy. **Important:** If you use IAM Conditions, you must include the `etag` field whenever you call `setIamPolicy`. If you omit this field, then IAM allows you to overwrite a version `3` policy with a version `1` policy, and all of the conditions in the version `3` policy are lost.
func (LookupOrganizationSourceIamPolicyResultOutput) ToLookupOrganizationSourceIamPolicyResultOutput ¶ added in v0.8.0
func (o LookupOrganizationSourceIamPolicyResultOutput) ToLookupOrganizationSourceIamPolicyResultOutput() LookupOrganizationSourceIamPolicyResultOutput
func (LookupOrganizationSourceIamPolicyResultOutput) ToLookupOrganizationSourceIamPolicyResultOutputWithContext ¶ added in v0.8.0
func (o LookupOrganizationSourceIamPolicyResultOutput) ToLookupOrganizationSourceIamPolicyResultOutputWithContext(ctx context.Context) LookupOrganizationSourceIamPolicyResultOutput
func (LookupOrganizationSourceIamPolicyResultOutput) Version ¶ added in v0.8.0
func (o LookupOrganizationSourceIamPolicyResultOutput) Version() pulumi.IntOutput
Specifies the format of the policy. Valid values are `0`, `1`, and `3`. Requests that specify an invalid value are rejected. Any operation that affects conditional role bindings must specify version `3`. This requirement applies to the following operations: * Getting a policy that includes a conditional role binding * Adding a conditional role binding to a policy * Changing a conditional role binding in a policy * Removing any role binding, with or without a condition, from a policy that includes conditions **Important:** If you use IAM Conditions, you must include the `etag` field whenever you call `setIamPolicy`. If you omit this field, then IAM allows you to overwrite a version `3` policy with a version `1` policy, and all of the conditions in the version `3` policy are lost. If a policy does not include any conditions, operations on that policy may specify any valid version or leave the field unset. To learn which resources support conditions in their IAM policies, see the [IAM documentation](https://cloud.google.com/iam/help/conditions/resource-policies).
type LookupSourceArgs ¶ added in v0.4.0
type LookupSourceOutputArgs ¶ added in v0.8.0
type LookupSourceOutputArgs struct { OrganizationId pulumi.StringInput `pulumi:"organizationId"` SourceId pulumi.StringInput `pulumi:"sourceId"` }
func (LookupSourceOutputArgs) ElementType ¶ added in v0.8.0
func (LookupSourceOutputArgs) ElementType() reflect.Type
type LookupSourceResult ¶ added in v0.4.0
type LookupSourceResult struct { // The description of the source (max of 1024 characters). Example: "Web Security Scanner is a web security scanner for common vulnerabilities in App Engine applications. It can automatically scan and detect four common vulnerabilities, including cross-site-scripting (XSS), Flash injection, mixed content (HTTP in HTTPS), and outdated/insecure libraries." Description string `pulumi:"description"` // The source's display name. A source's display name must be unique amongst its siblings, for example, two sources with the same parent can't share the same display name. The display name must have a length between 1 and 64 characters (inclusive). DisplayName string `pulumi:"displayName"` // The relative resource name of this source. See: https://cloud.google.com/apis/design/resource_names#relative_resource_name Example: "organizations/{organization_id}/sources/{source_id}" Name string `pulumi:"name"` }
func LookupSource ¶ added in v0.4.0
func LookupSource(ctx *pulumi.Context, args *LookupSourceArgs, opts ...pulumi.InvokeOption) (*LookupSourceResult, error)
Gets a source.
type LookupSourceResultOutput ¶ added in v0.8.0
type LookupSourceResultOutput struct{ *pulumi.OutputState }
func LookupSourceOutput ¶ added in v0.8.0
func LookupSourceOutput(ctx *pulumi.Context, args LookupSourceOutputArgs, opts ...pulumi.InvokeOption) LookupSourceResultOutput
func (LookupSourceResultOutput) Description ¶ added in v0.8.0
func (o LookupSourceResultOutput) Description() pulumi.StringOutput
The description of the source (max of 1024 characters). Example: "Web Security Scanner is a web security scanner for common vulnerabilities in App Engine applications. It can automatically scan and detect four common vulnerabilities, including cross-site-scripting (XSS), Flash injection, mixed content (HTTP in HTTPS), and outdated/insecure libraries."
func (LookupSourceResultOutput) DisplayName ¶ added in v0.8.0
func (o LookupSourceResultOutput) DisplayName() pulumi.StringOutput
The source's display name. A source's display name must be unique amongst its siblings, for example, two sources with the same parent can't share the same display name. The display name must have a length between 1 and 64 characters (inclusive).
func (LookupSourceResultOutput) ElementType ¶ added in v0.8.0
func (LookupSourceResultOutput) ElementType() reflect.Type
func (LookupSourceResultOutput) Name ¶ added in v0.8.0
func (o LookupSourceResultOutput) Name() pulumi.StringOutput
The relative resource name of this source. See: https://cloud.google.com/apis/design/resource_names#relative_resource_name Example: "organizations/{organization_id}/sources/{source_id}"
func (LookupSourceResultOutput) ToLookupSourceResultOutput ¶ added in v0.8.0
func (o LookupSourceResultOutput) ToLookupSourceResultOutput() LookupSourceResultOutput
func (LookupSourceResultOutput) ToLookupSourceResultOutputWithContext ¶ added in v0.8.0
func (o LookupSourceResultOutput) ToLookupSourceResultOutputWithContext(ctx context.Context) LookupSourceResultOutput
type OrganizationSourceIamPolicy ¶
type OrganizationSourceIamPolicy struct { pulumi.CustomResourceState // Specifies cloud audit logging configuration for this policy. AuditConfigs AuditConfigResponseArrayOutput `pulumi:"auditConfigs"` // Associates a list of `members`, or principals, with a `role`. Optionally, may specify a `condition` that determines how and when the `bindings` are applied. Each of the `bindings` must contain at least one principal. The `bindings` in a `Policy` can refer to up to 1,500 principals; up to 250 of these principals can be Google groups. Each occurrence of a principal counts towards these limits. For example, if the `bindings` grant 50 different roles to `user:alice@example.com`, and not to any other principal, then you can add another 1,450 principals to the `bindings` in the `Policy`. Bindings BindingResponseArrayOutput `pulumi:"bindings"` // `etag` is used for optimistic concurrency control as a way to help prevent simultaneous updates of a policy from overwriting each other. It is strongly suggested that systems make use of the `etag` in the read-modify-write cycle to perform policy updates in order to avoid race conditions: An `etag` is returned in the response to `getIamPolicy`, and systems are expected to put that etag in the request to `setIamPolicy` to ensure that their change will be applied to the same version of the policy. **Important:** If you use IAM Conditions, you must include the `etag` field whenever you call `setIamPolicy`. If you omit this field, then IAM allows you to overwrite a version `3` policy with a version `1` policy, and all of the conditions in the version `3` policy are lost. Etag pulumi.StringOutput `pulumi:"etag"` // Specifies the format of the policy. Valid values are `0`, `1`, and `3`. Requests that specify an invalid value are rejected. Any operation that affects conditional role bindings must specify version `3`. This requirement applies to the following operations: * Getting a policy that includes a conditional role binding * Adding a conditional role binding to a policy * Changing a conditional role binding in a policy * Removing any role binding, with or without a condition, from a policy that includes conditions **Important:** If you use IAM Conditions, you must include the `etag` field whenever you call `setIamPolicy`. If you omit this field, then IAM allows you to overwrite a version `3` policy with a version `1` policy, and all of the conditions in the version `3` policy are lost. If a policy does not include any conditions, operations on that policy may specify any valid version or leave the field unset. To learn which resources support conditions in their IAM policies, see the [IAM documentation](https://cloud.google.com/iam/help/conditions/resource-policies). Version pulumi.IntOutput `pulumi:"version"` }
Sets the access control policy on the specified Source. Note - this resource's API doesn't support deletion. When deleted, the resource will persist on Google Cloud even though it will be deleted from Pulumi state.
func GetOrganizationSourceIamPolicy ¶
func GetOrganizationSourceIamPolicy(ctx *pulumi.Context, name string, id pulumi.IDInput, state *OrganizationSourceIamPolicyState, opts ...pulumi.ResourceOption) (*OrganizationSourceIamPolicy, error)
GetOrganizationSourceIamPolicy gets an existing OrganizationSourceIamPolicy resource's state with the given name, ID, and optional state properties that are used to uniquely qualify the lookup (nil if not required).
func NewOrganizationSourceIamPolicy ¶
func NewOrganizationSourceIamPolicy(ctx *pulumi.Context, name string, args *OrganizationSourceIamPolicyArgs, opts ...pulumi.ResourceOption) (*OrganizationSourceIamPolicy, error)
NewOrganizationSourceIamPolicy registers a new resource with the given unique name, arguments, and options.
func (*OrganizationSourceIamPolicy) ElementType ¶
func (*OrganizationSourceIamPolicy) ElementType() reflect.Type
func (*OrganizationSourceIamPolicy) ToOrganizationSourceIamPolicyOutput ¶
func (i *OrganizationSourceIamPolicy) ToOrganizationSourceIamPolicyOutput() OrganizationSourceIamPolicyOutput
func (*OrganizationSourceIamPolicy) ToOrganizationSourceIamPolicyOutputWithContext ¶
func (i *OrganizationSourceIamPolicy) ToOrganizationSourceIamPolicyOutputWithContext(ctx context.Context) OrganizationSourceIamPolicyOutput
type OrganizationSourceIamPolicyArgs ¶
type OrganizationSourceIamPolicyArgs struct { // Specifies cloud audit logging configuration for this policy. AuditConfigs AuditConfigArrayInput // Associates a list of `members`, or principals, with a `role`. Optionally, may specify a `condition` that determines how and when the `bindings` are applied. Each of the `bindings` must contain at least one principal. The `bindings` in a `Policy` can refer to up to 1,500 principals; up to 250 of these principals can be Google groups. Each occurrence of a principal counts towards these limits. For example, if the `bindings` grant 50 different roles to `user:alice@example.com`, and not to any other principal, then you can add another 1,450 principals to the `bindings` in the `Policy`. Bindings BindingArrayInput // `etag` is used for optimistic concurrency control as a way to help prevent simultaneous updates of a policy from overwriting each other. It is strongly suggested that systems make use of the `etag` in the read-modify-write cycle to perform policy updates in order to avoid race conditions: An `etag` is returned in the response to `getIamPolicy`, and systems are expected to put that etag in the request to `setIamPolicy` to ensure that their change will be applied to the same version of the policy. **Important:** If you use IAM Conditions, you must include the `etag` field whenever you call `setIamPolicy`. If you omit this field, then IAM allows you to overwrite a version `3` policy with a version `1` policy, and all of the conditions in the version `3` policy are lost. Etag pulumi.StringPtrInput OrganizationId pulumi.StringInput SourceId pulumi.StringInput // OPTIONAL: A FieldMask specifying which fields of the policy to modify. Only the fields in the mask will be modified. If no mask is provided, the following default mask is used: `paths: "bindings, etag"` UpdateMask pulumi.StringPtrInput // Specifies the format of the policy. Valid values are `0`, `1`, and `3`. Requests that specify an invalid value are rejected. Any operation that affects conditional role bindings must specify version `3`. This requirement applies to the following operations: * Getting a policy that includes a conditional role binding * Adding a conditional role binding to a policy * Changing a conditional role binding in a policy * Removing any role binding, with or without a condition, from a policy that includes conditions **Important:** If you use IAM Conditions, you must include the `etag` field whenever you call `setIamPolicy`. If you omit this field, then IAM allows you to overwrite a version `3` policy with a version `1` policy, and all of the conditions in the version `3` policy are lost. If a policy does not include any conditions, operations on that policy may specify any valid version or leave the field unset. To learn which resources support conditions in their IAM policies, see the [IAM documentation](https://cloud.google.com/iam/help/conditions/resource-policies). Version pulumi.IntPtrInput }
The set of arguments for constructing a OrganizationSourceIamPolicy resource.
func (OrganizationSourceIamPolicyArgs) ElementType ¶
func (OrganizationSourceIamPolicyArgs) ElementType() reflect.Type
type OrganizationSourceIamPolicyInput ¶
type OrganizationSourceIamPolicyInput interface { pulumi.Input ToOrganizationSourceIamPolicyOutput() OrganizationSourceIamPolicyOutput ToOrganizationSourceIamPolicyOutputWithContext(ctx context.Context) OrganizationSourceIamPolicyOutput }
type OrganizationSourceIamPolicyOutput ¶
type OrganizationSourceIamPolicyOutput struct{ *pulumi.OutputState }
func (OrganizationSourceIamPolicyOutput) ElementType ¶
func (OrganizationSourceIamPolicyOutput) ElementType() reflect.Type
func (OrganizationSourceIamPolicyOutput) ToOrganizationSourceIamPolicyOutput ¶
func (o OrganizationSourceIamPolicyOutput) ToOrganizationSourceIamPolicyOutput() OrganizationSourceIamPolicyOutput
func (OrganizationSourceIamPolicyOutput) ToOrganizationSourceIamPolicyOutputWithContext ¶
func (o OrganizationSourceIamPolicyOutput) ToOrganizationSourceIamPolicyOutputWithContext(ctx context.Context) OrganizationSourceIamPolicyOutput
type OrganizationSourceIamPolicyState ¶
type OrganizationSourceIamPolicyState struct { }
func (OrganizationSourceIamPolicyState) ElementType ¶
func (OrganizationSourceIamPolicyState) ElementType() reflect.Type
type Source ¶ added in v0.3.0
type Source struct { pulumi.CustomResourceState // The description of the source (max of 1024 characters). Example: "Web Security Scanner is a web security scanner for common vulnerabilities in App Engine applications. It can automatically scan and detect four common vulnerabilities, including cross-site-scripting (XSS), Flash injection, mixed content (HTTP in HTTPS), and outdated/insecure libraries." Description pulumi.StringOutput `pulumi:"description"` // The source's display name. A source's display name must be unique amongst its siblings, for example, two sources with the same parent can't share the same display name. The display name must have a length between 1 and 64 characters (inclusive). DisplayName pulumi.StringOutput `pulumi:"displayName"` // The relative resource name of this source. See: https://cloud.google.com/apis/design/resource_names#relative_resource_name Example: "organizations/{organization_id}/sources/{source_id}" Name pulumi.StringOutput `pulumi:"name"` }
Creates a source. Note - this resource's API doesn't support deletion. When deleted, the resource will persist on Google Cloud even though it will be deleted from Pulumi state.
func GetSource ¶ added in v0.3.0
func GetSource(ctx *pulumi.Context, name string, id pulumi.IDInput, state *SourceState, opts ...pulumi.ResourceOption) (*Source, error)
GetSource gets an existing Source resource's state with the given name, ID, and optional state properties that are used to uniquely qualify the lookup (nil if not required).
func NewSource ¶ added in v0.3.0
func NewSource(ctx *pulumi.Context, name string, args *SourceArgs, opts ...pulumi.ResourceOption) (*Source, error)
NewSource registers a new resource with the given unique name, arguments, and options.
func (*Source) ElementType ¶ added in v0.3.0
func (*Source) ToSourceOutput ¶ added in v0.3.0
func (i *Source) ToSourceOutput() SourceOutput
func (*Source) ToSourceOutputWithContext ¶ added in v0.3.0
func (i *Source) ToSourceOutputWithContext(ctx context.Context) SourceOutput
type SourceArgs ¶ added in v0.3.0
type SourceArgs struct { // The description of the source (max of 1024 characters). Example: "Web Security Scanner is a web security scanner for common vulnerabilities in App Engine applications. It can automatically scan and detect four common vulnerabilities, including cross-site-scripting (XSS), Flash injection, mixed content (HTTP in HTTPS), and outdated/insecure libraries." Description pulumi.StringPtrInput // The source's display name. A source's display name must be unique amongst its siblings, for example, two sources with the same parent can't share the same display name. The display name must have a length between 1 and 64 characters (inclusive). DisplayName pulumi.StringPtrInput // The relative resource name of this source. See: https://cloud.google.com/apis/design/resource_names#relative_resource_name Example: "organizations/{organization_id}/sources/{source_id}" Name pulumi.StringPtrInput OrganizationId pulumi.StringInput }
The set of arguments for constructing a Source resource.
func (SourceArgs) ElementType ¶ added in v0.3.0
func (SourceArgs) ElementType() reflect.Type
type SourceInput ¶ added in v0.3.0
type SourceInput interface { pulumi.Input ToSourceOutput() SourceOutput ToSourceOutputWithContext(ctx context.Context) SourceOutput }
type SourceOutput ¶ added in v0.3.0
type SourceOutput struct{ *pulumi.OutputState }
func (SourceOutput) ElementType ¶ added in v0.3.0
func (SourceOutput) ElementType() reflect.Type
func (SourceOutput) ToSourceOutput ¶ added in v0.3.0
func (o SourceOutput) ToSourceOutput() SourceOutput
func (SourceOutput) ToSourceOutputWithContext ¶ added in v0.3.0
func (o SourceOutput) ToSourceOutputWithContext(ctx context.Context) SourceOutput
type SourceState ¶ added in v0.3.0
type SourceState struct { }
func (SourceState) ElementType ¶ added in v0.3.0
func (SourceState) ElementType() reflect.Type