v1beta

package
v0.32.0 Latest Latest
Warning

This package is not in the latest version of its module.

Go to latest
Published: Nov 29, 2023 License: Apache-2.0 Imports: 9 Imported by: 0

Documentation

Index

Constants

View Source
const (
	// Default case. Should never be this.
	ApigatewayAuditLogConfigLogTypeLogTypeUnspecified = ApigatewayAuditLogConfigLogType("LOG_TYPE_UNSPECIFIED")
	// Admin reads. Example: CloudIAM getIamPolicy
	ApigatewayAuditLogConfigLogTypeAdminRead = ApigatewayAuditLogConfigLogType("ADMIN_READ")
	// Data writes. Example: CloudSQL Users create
	ApigatewayAuditLogConfigLogTypeDataWrite = ApigatewayAuditLogConfigLogType("DATA_WRITE")
	// Data reads. Example: CloudSQL Users list
	ApigatewayAuditLogConfigLogTypeDataRead = ApigatewayAuditLogConfigLogType("DATA_READ")
)

Variables

This section is empty.

Functions

This section is empty.

Types

type Api

type Api struct {
	pulumi.CustomResourceState

	// Required. Identifier to assign to the API. Must be unique within scope of the parent resource.
	ApiId pulumi.StringOutput `pulumi:"apiId"`
	// Created time.
	CreateTime pulumi.StringOutput `pulumi:"createTime"`
	// Optional. Display name.
	DisplayName pulumi.StringOutput `pulumi:"displayName"`
	// Optional. Resource labels to represent user-provided metadata. Refer to cloud documentation on labels for more details. https://cloud.google.com/compute/docs/labeling-resources
	Labels   pulumi.StringMapOutput `pulumi:"labels"`
	Location pulumi.StringOutput    `pulumi:"location"`
	// Optional. Immutable. The name of a Google Managed Service ( https://cloud.google.com/service-infrastructure/docs/glossary#managed). If not specified, a new Service will automatically be created in the same project as this API.
	ManagedService pulumi.StringOutput `pulumi:"managedService"`
	// Resource name of the API. Format: projects/{project}/locations/global/apis/{api}
	Name    pulumi.StringOutput `pulumi:"name"`
	Project pulumi.StringOutput `pulumi:"project"`
	// State of the API.
	State pulumi.StringOutput `pulumi:"state"`
	// Updated time.
	UpdateTime pulumi.StringOutput `pulumi:"updateTime"`
}

Creates a new Api in a given project and location. Auto-naming is currently not supported for this resource.

func GetApi

func GetApi(ctx *pulumi.Context,
	name string, id pulumi.IDInput, state *ApiState, opts ...pulumi.ResourceOption) (*Api, error)

GetApi gets an existing Api resource's state with the given name, ID, and optional state properties that are used to uniquely qualify the lookup (nil if not required).

func NewApi

func NewApi(ctx *pulumi.Context,
	name string, args *ApiArgs, opts ...pulumi.ResourceOption) (*Api, error)

NewApi registers a new resource with the given unique name, arguments, and options.

func (*Api) ElementType

func (*Api) ElementType() reflect.Type

func (*Api) ToApiOutput

func (i *Api) ToApiOutput() ApiOutput

func (*Api) ToApiOutputWithContext

func (i *Api) ToApiOutputWithContext(ctx context.Context) ApiOutput

type ApiArgs

type ApiArgs struct {
	// Required. Identifier to assign to the API. Must be unique within scope of the parent resource.
	ApiId pulumi.StringInput
	// Optional. Display name.
	DisplayName pulumi.StringPtrInput
	// Optional. Resource labels to represent user-provided metadata. Refer to cloud documentation on labels for more details. https://cloud.google.com/compute/docs/labeling-resources
	Labels   pulumi.StringMapInput
	Location pulumi.StringPtrInput
	// Optional. Immutable. The name of a Google Managed Service ( https://cloud.google.com/service-infrastructure/docs/glossary#managed). If not specified, a new Service will automatically be created in the same project as this API.
	ManagedService pulumi.StringPtrInput
	Project        pulumi.StringPtrInput
}

The set of arguments for constructing a Api resource.

func (ApiArgs) ElementType

func (ApiArgs) ElementType() reflect.Type

type ApiConfigIamBinding added in v0.26.0

type ApiConfigIamBinding struct {
	pulumi.CustomResourceState

	// An IAM Condition for a given binding. See https://cloud.google.com/iam/docs/conditions-overview for additional details.
	Condition iam.ConditionPtrOutput `pulumi:"condition"`
	// The etag of the resource's IAM policy.
	Etag pulumi.StringOutput `pulumi:"etag"`
	// Identities that will be granted the privilege in role. Each entry can have one of the following values:
	//
	//  * user:{emailid}: An email address that represents a specific Google account. For example, alice@gmail.com or joe@example.com.
	//  * serviceAccount:{emailid}: An email address that represents a service account. For example, my-other-app@appspot.gserviceaccount.com.
	//  * group:{emailid}: An email address that represents a Google group. For example, admins@example.com.
	//  * domain:{domain}: A G Suite domain (primary, instead of alias) name that represents all the users of that domain. For example, google.com or example.com.
	Members pulumi.StringArrayOutput `pulumi:"members"`
	// The name of the resource to manage IAM policies for.
	Name pulumi.StringOutput `pulumi:"name"`
	// The project in which the resource belongs. If it is not provided, a default will be supplied.
	Project pulumi.StringOutput `pulumi:"project"`
	// The role that should be applied. Only one `IamBinding` can be used per role.
	Role pulumi.StringOutput `pulumi:"role"`
}

Sets the access control policy on the specified resource. Replaces any existing policy. Can return `NOT_FOUND`, `INVALID_ARGUMENT`, and `PERMISSION_DENIED` errors.

func GetApiConfigIamBinding added in v0.26.0

func GetApiConfigIamBinding(ctx *pulumi.Context,
	name string, id pulumi.IDInput, state *ApiConfigIamBindingState, opts ...pulumi.ResourceOption) (*ApiConfigIamBinding, error)

GetApiConfigIamBinding gets an existing ApiConfigIamBinding resource's state with the given name, ID, and optional state properties that are used to uniquely qualify the lookup (nil if not required).

func NewApiConfigIamBinding added in v0.26.0

func NewApiConfigIamBinding(ctx *pulumi.Context,
	name string, args *ApiConfigIamBindingArgs, opts ...pulumi.ResourceOption) (*ApiConfigIamBinding, error)

NewApiConfigIamBinding registers a new resource with the given unique name, arguments, and options.

func (*ApiConfigIamBinding) ElementType added in v0.26.0

func (*ApiConfigIamBinding) ElementType() reflect.Type

func (*ApiConfigIamBinding) ToApiConfigIamBindingOutput added in v0.26.0

func (i *ApiConfigIamBinding) ToApiConfigIamBindingOutput() ApiConfigIamBindingOutput

func (*ApiConfigIamBinding) ToApiConfigIamBindingOutputWithContext added in v0.26.0

func (i *ApiConfigIamBinding) ToApiConfigIamBindingOutputWithContext(ctx context.Context) ApiConfigIamBindingOutput

type ApiConfigIamBindingArgs added in v0.26.0

type ApiConfigIamBindingArgs struct {
	// An IAM Condition for a given binding.
	Condition iam.ConditionPtrInput
	// Identities that will be granted the privilege in role. Each entry can have one of the following values:
	//
	//  * user:{emailid}: An email address that represents a specific Google account. For example, alice@gmail.com or joe@example.com.
	//  * serviceAccount:{emailid}: An email address that represents a service account. For example, my-other-app@appspot.gserviceaccount.com.
	//  * group:{emailid}: An email address that represents a Google group. For example, admins@example.com.
	//  * domain:{domain}: A G Suite domain (primary, instead of alias) name that represents all the users of that domain. For example, google.com or example.com.
	Members pulumi.StringArrayInput
	// The name of the resource to manage IAM policies for.
	Name pulumi.StringInput
	// The role that should be applied. Only one `IamBinding` can be used per role.
	Role pulumi.StringInput
}

The set of arguments for constructing a ApiConfigIamBinding resource.

func (ApiConfigIamBindingArgs) ElementType added in v0.26.0

func (ApiConfigIamBindingArgs) ElementType() reflect.Type

type ApiConfigIamBindingInput added in v0.26.0

type ApiConfigIamBindingInput interface {
	pulumi.Input

	ToApiConfigIamBindingOutput() ApiConfigIamBindingOutput
	ToApiConfigIamBindingOutputWithContext(ctx context.Context) ApiConfigIamBindingOutput
}

type ApiConfigIamBindingOutput added in v0.26.0

type ApiConfigIamBindingOutput struct{ *pulumi.OutputState }

func (ApiConfigIamBindingOutput) Condition added in v0.26.0

An IAM Condition for a given binding. See https://cloud.google.com/iam/docs/conditions-overview for additional details.

func (ApiConfigIamBindingOutput) ElementType added in v0.26.0

func (ApiConfigIamBindingOutput) ElementType() reflect.Type

func (ApiConfigIamBindingOutput) Etag added in v0.26.0

The etag of the resource's IAM policy.

func (ApiConfigIamBindingOutput) Members added in v0.26.0

Identities that will be granted the privilege in role. Each entry can have one of the following values:

  • user:{emailid}: An email address that represents a specific Google account. For example, alice@gmail.com or joe@example.com.
  • serviceAccount:{emailid}: An email address that represents a service account. For example, my-other-app@appspot.gserviceaccount.com.
  • group:{emailid}: An email address that represents a Google group. For example, admins@example.com.
  • domain:{domain}: A G Suite domain (primary, instead of alias) name that represents all the users of that domain. For example, google.com or example.com.

func (ApiConfigIamBindingOutput) Name added in v0.26.0

The name of the resource to manage IAM policies for.

func (ApiConfigIamBindingOutput) Project added in v0.26.0

The project in which the resource belongs. If it is not provided, a default will be supplied.

func (ApiConfigIamBindingOutput) Role added in v0.26.0

The role that should be applied. Only one `IamBinding` can be used per role.

func (ApiConfigIamBindingOutput) ToApiConfigIamBindingOutput added in v0.26.0

func (o ApiConfigIamBindingOutput) ToApiConfigIamBindingOutput() ApiConfigIamBindingOutput

func (ApiConfigIamBindingOutput) ToApiConfigIamBindingOutputWithContext added in v0.26.0

func (o ApiConfigIamBindingOutput) ToApiConfigIamBindingOutputWithContext(ctx context.Context) ApiConfigIamBindingOutput

type ApiConfigIamBindingState added in v0.26.0

type ApiConfigIamBindingState struct {
}

func (ApiConfigIamBindingState) ElementType added in v0.26.0

func (ApiConfigIamBindingState) ElementType() reflect.Type

type ApiConfigIamMember added in v0.26.0

type ApiConfigIamMember struct {
	pulumi.CustomResourceState

	// An IAM Condition for a given binding. See https://cloud.google.com/iam/docs/conditions-overview for additional details.
	Condition iam.ConditionPtrOutput `pulumi:"condition"`
	// The etag of the resource's IAM policy.
	Etag pulumi.StringOutput `pulumi:"etag"`
	// Identity that will be granted the privilege in role. The entry can have one of the following values:
	//
	//  * user:{emailid}: An email address that represents a specific Google account. For example, alice@gmail.com or joe@example.com.
	//  * serviceAccount:{emailid}: An email address that represents a service account. For example, my-other-app@appspot.gserviceaccount.com.
	//  * group:{emailid}: An email address that represents a Google group. For example, admins@example.com.
	//  * domain:{domain}: A G Suite domain (primary, instead of alias) name that represents all the users of that domain. For example, google.com or example.com.
	Member pulumi.StringOutput `pulumi:"member"`
	// The name of the resource to manage IAM policies for.
	Name pulumi.StringOutput `pulumi:"name"`
	// The project in which the resource belongs. If it is not provided, a default will be supplied.
	Project pulumi.StringOutput `pulumi:"project"`
	// The role that should be applied.
	Role pulumi.StringOutput `pulumi:"role"`
}

Sets the access control policy on the specified resource. Replaces any existing policy. Can return `NOT_FOUND`, `INVALID_ARGUMENT`, and `PERMISSION_DENIED` errors.

func GetApiConfigIamMember added in v0.26.0

func GetApiConfigIamMember(ctx *pulumi.Context,
	name string, id pulumi.IDInput, state *ApiConfigIamMemberState, opts ...pulumi.ResourceOption) (*ApiConfigIamMember, error)

GetApiConfigIamMember gets an existing ApiConfigIamMember resource's state with the given name, ID, and optional state properties that are used to uniquely qualify the lookup (nil if not required).

func NewApiConfigIamMember added in v0.26.0

func NewApiConfigIamMember(ctx *pulumi.Context,
	name string, args *ApiConfigIamMemberArgs, opts ...pulumi.ResourceOption) (*ApiConfigIamMember, error)

NewApiConfigIamMember registers a new resource with the given unique name, arguments, and options.

func (*ApiConfigIamMember) ElementType added in v0.26.0

func (*ApiConfigIamMember) ElementType() reflect.Type

func (*ApiConfigIamMember) ToApiConfigIamMemberOutput added in v0.26.0

func (i *ApiConfigIamMember) ToApiConfigIamMemberOutput() ApiConfigIamMemberOutput

func (*ApiConfigIamMember) ToApiConfigIamMemberOutputWithContext added in v0.26.0

func (i *ApiConfigIamMember) ToApiConfigIamMemberOutputWithContext(ctx context.Context) ApiConfigIamMemberOutput

type ApiConfigIamMemberArgs added in v0.26.0

type ApiConfigIamMemberArgs struct {
	// An IAM Condition for a given binding.
	Condition iam.ConditionPtrInput
	// Identity that will be granted the privilege in role. The entry can have one of the following values:
	//
	//  * user:{emailid}: An email address that represents a specific Google account. For example, alice@gmail.com or joe@example.com.
	//  * serviceAccount:{emailid}: An email address that represents a service account. For example, my-other-app@appspot.gserviceaccount.com.
	//  * group:{emailid}: An email address that represents a Google group. For example, admins@example.com.
	//  * domain:{domain}: A G Suite domain (primary, instead of alias) name that represents all the users of that domain. For example, google.com or example.com.
	Member pulumi.StringInput
	// The name of the resource to manage IAM policies for.
	Name pulumi.StringInput
	// The role that should be applied.
	Role pulumi.StringInput
}

The set of arguments for constructing a ApiConfigIamMember resource.

func (ApiConfigIamMemberArgs) ElementType added in v0.26.0

func (ApiConfigIamMemberArgs) ElementType() reflect.Type

type ApiConfigIamMemberInput added in v0.26.0

type ApiConfigIamMemberInput interface {
	pulumi.Input

	ToApiConfigIamMemberOutput() ApiConfigIamMemberOutput
	ToApiConfigIamMemberOutputWithContext(ctx context.Context) ApiConfigIamMemberOutput
}

type ApiConfigIamMemberOutput added in v0.26.0

type ApiConfigIamMemberOutput struct{ *pulumi.OutputState }

func (ApiConfigIamMemberOutput) Condition added in v0.26.0

An IAM Condition for a given binding. See https://cloud.google.com/iam/docs/conditions-overview for additional details.

func (ApiConfigIamMemberOutput) ElementType added in v0.26.0

func (ApiConfigIamMemberOutput) ElementType() reflect.Type

func (ApiConfigIamMemberOutput) Etag added in v0.26.0

The etag of the resource's IAM policy.

func (ApiConfigIamMemberOutput) Member added in v0.26.0

Identity that will be granted the privilege in role. The entry can have one of the following values:

  • user:{emailid}: An email address that represents a specific Google account. For example, alice@gmail.com or joe@example.com.
  • serviceAccount:{emailid}: An email address that represents a service account. For example, my-other-app@appspot.gserviceaccount.com.
  • group:{emailid}: An email address that represents a Google group. For example, admins@example.com.
  • domain:{domain}: A G Suite domain (primary, instead of alias) name that represents all the users of that domain. For example, google.com or example.com.

func (ApiConfigIamMemberOutput) Name added in v0.26.0

The name of the resource to manage IAM policies for.

func (ApiConfigIamMemberOutput) Project added in v0.26.0

The project in which the resource belongs. If it is not provided, a default will be supplied.

func (ApiConfigIamMemberOutput) Role added in v0.26.0

The role that should be applied.

func (ApiConfigIamMemberOutput) ToApiConfigIamMemberOutput added in v0.26.0

func (o ApiConfigIamMemberOutput) ToApiConfigIamMemberOutput() ApiConfigIamMemberOutput

func (ApiConfigIamMemberOutput) ToApiConfigIamMemberOutputWithContext added in v0.26.0

func (o ApiConfigIamMemberOutput) ToApiConfigIamMemberOutputWithContext(ctx context.Context) ApiConfigIamMemberOutput

type ApiConfigIamMemberState added in v0.26.0

type ApiConfigIamMemberState struct {
}

func (ApiConfigIamMemberState) ElementType added in v0.26.0

func (ApiConfigIamMemberState) ElementType() reflect.Type

type ApiConfigIamPolicy

type ApiConfigIamPolicy struct {
	pulumi.CustomResourceState

	ApiId pulumi.StringOutput `pulumi:"apiId"`
	// Specifies cloud audit logging configuration for this policy.
	AuditConfigs ApigatewayAuditConfigResponseArrayOutput `pulumi:"auditConfigs"`
	// Associates a list of `members`, or principals, with a `role`. Optionally, may specify a `condition` that determines how and when the `bindings` are applied. Each of the `bindings` must contain at least one principal. The `bindings` in a `Policy` can refer to up to 1,500 principals; up to 250 of these principals can be Google groups. Each occurrence of a principal counts towards these limits. For example, if the `bindings` grant 50 different roles to `user:alice@example.com`, and not to any other principal, then you can add another 1,450 principals to the `bindings` in the `Policy`.
	Bindings ApigatewayBindingResponseArrayOutput `pulumi:"bindings"`
	ConfigId pulumi.StringOutput                  `pulumi:"configId"`
	// `etag` is used for optimistic concurrency control as a way to help prevent simultaneous updates of a policy from overwriting each other. It is strongly suggested that systems make use of the `etag` in the read-modify-write cycle to perform policy updates in order to avoid race conditions: An `etag` is returned in the response to `getIamPolicy`, and systems are expected to put that etag in the request to `setIamPolicy` to ensure that their change will be applied to the same version of the policy. **Important:** If you use IAM Conditions, you must include the `etag` field whenever you call `setIamPolicy`. If you omit this field, then IAM allows you to overwrite a version `3` policy with a version `1` policy, and all of the conditions in the version `3` policy are lost.
	Etag     pulumi.StringOutput `pulumi:"etag"`
	Location pulumi.StringOutput `pulumi:"location"`
	Project  pulumi.StringOutput `pulumi:"project"`
	// Specifies the format of the policy. Valid values are `0`, `1`, and `3`. Requests that specify an invalid value are rejected. Any operation that affects conditional role bindings must specify version `3`. This requirement applies to the following operations: * Getting a policy that includes a conditional role binding * Adding a conditional role binding to a policy * Changing a conditional role binding in a policy * Removing any role binding, with or without a condition, from a policy that includes conditions **Important:** If you use IAM Conditions, you must include the `etag` field whenever you call `setIamPolicy`. If you omit this field, then IAM allows you to overwrite a version `3` policy with a version `1` policy, and all of the conditions in the version `3` policy are lost. If a policy does not include any conditions, operations on that policy may specify any valid version or leave the field unset. To learn which resources support conditions in their IAM policies, see the [IAM documentation](https://cloud.google.com/iam/help/conditions/resource-policies).
	Version pulumi.IntOutput `pulumi:"version"`
}

Sets the access control policy on the specified resource. Replaces any existing policy. Can return `NOT_FOUND`, `INVALID_ARGUMENT`, and `PERMISSION_DENIED` errors. Note - this resource's API doesn't support deletion. When deleted, the resource will persist on Google Cloud even though it will be deleted from Pulumi state.

func GetApiConfigIamPolicy

func GetApiConfigIamPolicy(ctx *pulumi.Context,
	name string, id pulumi.IDInput, state *ApiConfigIamPolicyState, opts ...pulumi.ResourceOption) (*ApiConfigIamPolicy, error)

GetApiConfigIamPolicy gets an existing ApiConfigIamPolicy resource's state with the given name, ID, and optional state properties that are used to uniquely qualify the lookup (nil if not required).

func NewApiConfigIamPolicy

func NewApiConfigIamPolicy(ctx *pulumi.Context,
	name string, args *ApiConfigIamPolicyArgs, opts ...pulumi.ResourceOption) (*ApiConfigIamPolicy, error)

NewApiConfigIamPolicy registers a new resource with the given unique name, arguments, and options.

func (*ApiConfigIamPolicy) ElementType

func (*ApiConfigIamPolicy) ElementType() reflect.Type

func (*ApiConfigIamPolicy) ToApiConfigIamPolicyOutput

func (i *ApiConfigIamPolicy) ToApiConfigIamPolicyOutput() ApiConfigIamPolicyOutput

func (*ApiConfigIamPolicy) ToApiConfigIamPolicyOutputWithContext

func (i *ApiConfigIamPolicy) ToApiConfigIamPolicyOutputWithContext(ctx context.Context) ApiConfigIamPolicyOutput

type ApiConfigIamPolicyArgs

type ApiConfigIamPolicyArgs struct {
	ApiId pulumi.StringInput
	// Specifies cloud audit logging configuration for this policy.
	AuditConfigs ApigatewayAuditConfigArrayInput
	// Associates a list of `members`, or principals, with a `role`. Optionally, may specify a `condition` that determines how and when the `bindings` are applied. Each of the `bindings` must contain at least one principal. The `bindings` in a `Policy` can refer to up to 1,500 principals; up to 250 of these principals can be Google groups. Each occurrence of a principal counts towards these limits. For example, if the `bindings` grant 50 different roles to `user:alice@example.com`, and not to any other principal, then you can add another 1,450 principals to the `bindings` in the `Policy`.
	Bindings ApigatewayBindingArrayInput
	ConfigId pulumi.StringInput
	// `etag` is used for optimistic concurrency control as a way to help prevent simultaneous updates of a policy from overwriting each other. It is strongly suggested that systems make use of the `etag` in the read-modify-write cycle to perform policy updates in order to avoid race conditions: An `etag` is returned in the response to `getIamPolicy`, and systems are expected to put that etag in the request to `setIamPolicy` to ensure that their change will be applied to the same version of the policy. **Important:** If you use IAM Conditions, you must include the `etag` field whenever you call `setIamPolicy`. If you omit this field, then IAM allows you to overwrite a version `3` policy with a version `1` policy, and all of the conditions in the version `3` policy are lost.
	Etag     pulumi.StringPtrInput
	Location pulumi.StringPtrInput
	Project  pulumi.StringPtrInput
	// OPTIONAL: A FieldMask specifying which fields of the policy to modify. Only the fields in the mask will be modified. If no mask is provided, the following default mask is used: `paths: "bindings, etag"`
	UpdateMask pulumi.StringPtrInput
	// Specifies the format of the policy. Valid values are `0`, `1`, and `3`. Requests that specify an invalid value are rejected. Any operation that affects conditional role bindings must specify version `3`. This requirement applies to the following operations: * Getting a policy that includes a conditional role binding * Adding a conditional role binding to a policy * Changing a conditional role binding in a policy * Removing any role binding, with or without a condition, from a policy that includes conditions **Important:** If you use IAM Conditions, you must include the `etag` field whenever you call `setIamPolicy`. If you omit this field, then IAM allows you to overwrite a version `3` policy with a version `1` policy, and all of the conditions in the version `3` policy are lost. If a policy does not include any conditions, operations on that policy may specify any valid version or leave the field unset. To learn which resources support conditions in their IAM policies, see the [IAM documentation](https://cloud.google.com/iam/help/conditions/resource-policies).
	Version pulumi.IntPtrInput
}

The set of arguments for constructing a ApiConfigIamPolicy resource.

func (ApiConfigIamPolicyArgs) ElementType

func (ApiConfigIamPolicyArgs) ElementType() reflect.Type

type ApiConfigIamPolicyInput

type ApiConfigIamPolicyInput interface {
	pulumi.Input

	ToApiConfigIamPolicyOutput() ApiConfigIamPolicyOutput
	ToApiConfigIamPolicyOutputWithContext(ctx context.Context) ApiConfigIamPolicyOutput
}

type ApiConfigIamPolicyOutput

type ApiConfigIamPolicyOutput struct{ *pulumi.OutputState }

func (ApiConfigIamPolicyOutput) ApiId added in v0.21.0

func (ApiConfigIamPolicyOutput) AuditConfigs added in v0.19.0

Specifies cloud audit logging configuration for this policy.

func (ApiConfigIamPolicyOutput) Bindings added in v0.19.0

Associates a list of `members`, or principals, with a `role`. Optionally, may specify a `condition` that determines how and when the `bindings` are applied. Each of the `bindings` must contain at least one principal. The `bindings` in a `Policy` can refer to up to 1,500 principals; up to 250 of these principals can be Google groups. Each occurrence of a principal counts towards these limits. For example, if the `bindings` grant 50 different roles to `user:alice@example.com`, and not to any other principal, then you can add another 1,450 principals to the `bindings` in the `Policy`.

func (ApiConfigIamPolicyOutput) ConfigId added in v0.21.0

func (ApiConfigIamPolicyOutput) ElementType

func (ApiConfigIamPolicyOutput) ElementType() reflect.Type

func (ApiConfigIamPolicyOutput) Etag added in v0.19.0

`etag` is used for optimistic concurrency control as a way to help prevent simultaneous updates of a policy from overwriting each other. It is strongly suggested that systems make use of the `etag` in the read-modify-write cycle to perform policy updates in order to avoid race conditions: An `etag` is returned in the response to `getIamPolicy`, and systems are expected to put that etag in the request to `setIamPolicy` to ensure that their change will be applied to the same version of the policy. **Important:** If you use IAM Conditions, you must include the `etag` field whenever you call `setIamPolicy`. If you omit this field, then IAM allows you to overwrite a version `3` policy with a version `1` policy, and all of the conditions in the version `3` policy are lost.

func (ApiConfigIamPolicyOutput) Location added in v0.21.0

func (ApiConfigIamPolicyOutput) Project added in v0.21.0

func (ApiConfigIamPolicyOutput) ToApiConfigIamPolicyOutput

func (o ApiConfigIamPolicyOutput) ToApiConfigIamPolicyOutput() ApiConfigIamPolicyOutput

func (ApiConfigIamPolicyOutput) ToApiConfigIamPolicyOutputWithContext

func (o ApiConfigIamPolicyOutput) ToApiConfigIamPolicyOutputWithContext(ctx context.Context) ApiConfigIamPolicyOutput

func (ApiConfigIamPolicyOutput) Version added in v0.19.0

Specifies the format of the policy. Valid values are `0`, `1`, and `3`. Requests that specify an invalid value are rejected. Any operation that affects conditional role bindings must specify version `3`. This requirement applies to the following operations: * Getting a policy that includes a conditional role binding * Adding a conditional role binding to a policy * Changing a conditional role binding in a policy * Removing any role binding, with or without a condition, from a policy that includes conditions **Important:** If you use IAM Conditions, you must include the `etag` field whenever you call `setIamPolicy`. If you omit this field, then IAM allows you to overwrite a version `3` policy with a version `1` policy, and all of the conditions in the version `3` policy are lost. If a policy does not include any conditions, operations on that policy may specify any valid version or leave the field unset. To learn which resources support conditions in their IAM policies, see the [IAM documentation](https://cloud.google.com/iam/help/conditions/resource-policies).

type ApiConfigIamPolicyState

type ApiConfigIamPolicyState struct {
}

func (ApiConfigIamPolicyState) ElementType

func (ApiConfigIamPolicyState) ElementType() reflect.Type

type ApiIamBinding added in v0.26.0

type ApiIamBinding struct {
	pulumi.CustomResourceState

	// An IAM Condition for a given binding. See https://cloud.google.com/iam/docs/conditions-overview for additional details.
	Condition iam.ConditionPtrOutput `pulumi:"condition"`
	// The etag of the resource's IAM policy.
	Etag pulumi.StringOutput `pulumi:"etag"`
	// Identities that will be granted the privilege in role. Each entry can have one of the following values:
	//
	//  * user:{emailid}: An email address that represents a specific Google account. For example, alice@gmail.com or joe@example.com.
	//  * serviceAccount:{emailid}: An email address that represents a service account. For example, my-other-app@appspot.gserviceaccount.com.
	//  * group:{emailid}: An email address that represents a Google group. For example, admins@example.com.
	//  * domain:{domain}: A G Suite domain (primary, instead of alias) name that represents all the users of that domain. For example, google.com or example.com.
	Members pulumi.StringArrayOutput `pulumi:"members"`
	// The name of the resource to manage IAM policies for.
	Name pulumi.StringOutput `pulumi:"name"`
	// The project in which the resource belongs. If it is not provided, a default will be supplied.
	Project pulumi.StringOutput `pulumi:"project"`
	// The role that should be applied. Only one `IamBinding` can be used per role.
	Role pulumi.StringOutput `pulumi:"role"`
}

Sets the access control policy on the specified resource. Replaces any existing policy. Can return `NOT_FOUND`, `INVALID_ARGUMENT`, and `PERMISSION_DENIED` errors.

func GetApiIamBinding added in v0.26.0

func GetApiIamBinding(ctx *pulumi.Context,
	name string, id pulumi.IDInput, state *ApiIamBindingState, opts ...pulumi.ResourceOption) (*ApiIamBinding, error)

GetApiIamBinding gets an existing ApiIamBinding resource's state with the given name, ID, and optional state properties that are used to uniquely qualify the lookup (nil if not required).

func NewApiIamBinding added in v0.26.0

func NewApiIamBinding(ctx *pulumi.Context,
	name string, args *ApiIamBindingArgs, opts ...pulumi.ResourceOption) (*ApiIamBinding, error)

NewApiIamBinding registers a new resource with the given unique name, arguments, and options.

func (*ApiIamBinding) ElementType added in v0.26.0

func (*ApiIamBinding) ElementType() reflect.Type

func (*ApiIamBinding) ToApiIamBindingOutput added in v0.26.0

func (i *ApiIamBinding) ToApiIamBindingOutput() ApiIamBindingOutput

func (*ApiIamBinding) ToApiIamBindingOutputWithContext added in v0.26.0

func (i *ApiIamBinding) ToApiIamBindingOutputWithContext(ctx context.Context) ApiIamBindingOutput

type ApiIamBindingArgs added in v0.26.0

type ApiIamBindingArgs struct {
	// An IAM Condition for a given binding.
	Condition iam.ConditionPtrInput
	// Identities that will be granted the privilege in role. Each entry can have one of the following values:
	//
	//  * user:{emailid}: An email address that represents a specific Google account. For example, alice@gmail.com or joe@example.com.
	//  * serviceAccount:{emailid}: An email address that represents a service account. For example, my-other-app@appspot.gserviceaccount.com.
	//  * group:{emailid}: An email address that represents a Google group. For example, admins@example.com.
	//  * domain:{domain}: A G Suite domain (primary, instead of alias) name that represents all the users of that domain. For example, google.com or example.com.
	Members pulumi.StringArrayInput
	// The name of the resource to manage IAM policies for.
	Name pulumi.StringInput
	// The role that should be applied. Only one `IamBinding` can be used per role.
	Role pulumi.StringInput
}

The set of arguments for constructing a ApiIamBinding resource.

func (ApiIamBindingArgs) ElementType added in v0.26.0

func (ApiIamBindingArgs) ElementType() reflect.Type

type ApiIamBindingInput added in v0.26.0

type ApiIamBindingInput interface {
	pulumi.Input

	ToApiIamBindingOutput() ApiIamBindingOutput
	ToApiIamBindingOutputWithContext(ctx context.Context) ApiIamBindingOutput
}

type ApiIamBindingOutput added in v0.26.0

type ApiIamBindingOutput struct{ *pulumi.OutputState }

func (ApiIamBindingOutput) Condition added in v0.26.0

An IAM Condition for a given binding. See https://cloud.google.com/iam/docs/conditions-overview for additional details.

func (ApiIamBindingOutput) ElementType added in v0.26.0

func (ApiIamBindingOutput) ElementType() reflect.Type

func (ApiIamBindingOutput) Etag added in v0.26.0

The etag of the resource's IAM policy.

func (ApiIamBindingOutput) Members added in v0.26.0

Identities that will be granted the privilege in role. Each entry can have one of the following values:

  • user:{emailid}: An email address that represents a specific Google account. For example, alice@gmail.com or joe@example.com.
  • serviceAccount:{emailid}: An email address that represents a service account. For example, my-other-app@appspot.gserviceaccount.com.
  • group:{emailid}: An email address that represents a Google group. For example, admins@example.com.
  • domain:{domain}: A G Suite domain (primary, instead of alias) name that represents all the users of that domain. For example, google.com or example.com.

func (ApiIamBindingOutput) Name added in v0.26.0

The name of the resource to manage IAM policies for.

func (ApiIamBindingOutput) Project added in v0.26.0

The project in which the resource belongs. If it is not provided, a default will be supplied.

func (ApiIamBindingOutput) Role added in v0.26.0

The role that should be applied. Only one `IamBinding` can be used per role.

func (ApiIamBindingOutput) ToApiIamBindingOutput added in v0.26.0

func (o ApiIamBindingOutput) ToApiIamBindingOutput() ApiIamBindingOutput

func (ApiIamBindingOutput) ToApiIamBindingOutputWithContext added in v0.26.0

func (o ApiIamBindingOutput) ToApiIamBindingOutputWithContext(ctx context.Context) ApiIamBindingOutput

type ApiIamBindingState added in v0.26.0

type ApiIamBindingState struct {
}

func (ApiIamBindingState) ElementType added in v0.26.0

func (ApiIamBindingState) ElementType() reflect.Type

type ApiIamMember added in v0.26.0

type ApiIamMember struct {
	pulumi.CustomResourceState

	// An IAM Condition for a given binding. See https://cloud.google.com/iam/docs/conditions-overview for additional details.
	Condition iam.ConditionPtrOutput `pulumi:"condition"`
	// The etag of the resource's IAM policy.
	Etag pulumi.StringOutput `pulumi:"etag"`
	// Identity that will be granted the privilege in role. The entry can have one of the following values:
	//
	//  * user:{emailid}: An email address that represents a specific Google account. For example, alice@gmail.com or joe@example.com.
	//  * serviceAccount:{emailid}: An email address that represents a service account. For example, my-other-app@appspot.gserviceaccount.com.
	//  * group:{emailid}: An email address that represents a Google group. For example, admins@example.com.
	//  * domain:{domain}: A G Suite domain (primary, instead of alias) name that represents all the users of that domain. For example, google.com or example.com.
	Member pulumi.StringOutput `pulumi:"member"`
	// The name of the resource to manage IAM policies for.
	Name pulumi.StringOutput `pulumi:"name"`
	// The project in which the resource belongs. If it is not provided, a default will be supplied.
	Project pulumi.StringOutput `pulumi:"project"`
	// The role that should be applied.
	Role pulumi.StringOutput `pulumi:"role"`
}

Sets the access control policy on the specified resource. Replaces any existing policy. Can return `NOT_FOUND`, `INVALID_ARGUMENT`, and `PERMISSION_DENIED` errors.

func GetApiIamMember added in v0.26.0

func GetApiIamMember(ctx *pulumi.Context,
	name string, id pulumi.IDInput, state *ApiIamMemberState, opts ...pulumi.ResourceOption) (*ApiIamMember, error)

GetApiIamMember gets an existing ApiIamMember resource's state with the given name, ID, and optional state properties that are used to uniquely qualify the lookup (nil if not required).

func NewApiIamMember added in v0.26.0

func NewApiIamMember(ctx *pulumi.Context,
	name string, args *ApiIamMemberArgs, opts ...pulumi.ResourceOption) (*ApiIamMember, error)

NewApiIamMember registers a new resource with the given unique name, arguments, and options.

func (*ApiIamMember) ElementType added in v0.26.0

func (*ApiIamMember) ElementType() reflect.Type

func (*ApiIamMember) ToApiIamMemberOutput added in v0.26.0

func (i *ApiIamMember) ToApiIamMemberOutput() ApiIamMemberOutput

func (*ApiIamMember) ToApiIamMemberOutputWithContext added in v0.26.0

func (i *ApiIamMember) ToApiIamMemberOutputWithContext(ctx context.Context) ApiIamMemberOutput

type ApiIamMemberArgs added in v0.26.0

type ApiIamMemberArgs struct {
	// An IAM Condition for a given binding.
	Condition iam.ConditionPtrInput
	// Identity that will be granted the privilege in role. The entry can have one of the following values:
	//
	//  * user:{emailid}: An email address that represents a specific Google account. For example, alice@gmail.com or joe@example.com.
	//  * serviceAccount:{emailid}: An email address that represents a service account. For example, my-other-app@appspot.gserviceaccount.com.
	//  * group:{emailid}: An email address that represents a Google group. For example, admins@example.com.
	//  * domain:{domain}: A G Suite domain (primary, instead of alias) name that represents all the users of that domain. For example, google.com or example.com.
	Member pulumi.StringInput
	// The name of the resource to manage IAM policies for.
	Name pulumi.StringInput
	// The role that should be applied.
	Role pulumi.StringInput
}

The set of arguments for constructing a ApiIamMember resource.

func (ApiIamMemberArgs) ElementType added in v0.26.0

func (ApiIamMemberArgs) ElementType() reflect.Type

type ApiIamMemberInput added in v0.26.0

type ApiIamMemberInput interface {
	pulumi.Input

	ToApiIamMemberOutput() ApiIamMemberOutput
	ToApiIamMemberOutputWithContext(ctx context.Context) ApiIamMemberOutput
}

type ApiIamMemberOutput added in v0.26.0

type ApiIamMemberOutput struct{ *pulumi.OutputState }

func (ApiIamMemberOutput) Condition added in v0.26.0

An IAM Condition for a given binding. See https://cloud.google.com/iam/docs/conditions-overview for additional details.

func (ApiIamMemberOutput) ElementType added in v0.26.0

func (ApiIamMemberOutput) ElementType() reflect.Type

func (ApiIamMemberOutput) Etag added in v0.26.0

The etag of the resource's IAM policy.

func (ApiIamMemberOutput) Member added in v0.26.0

Identity that will be granted the privilege in role. The entry can have one of the following values:

  • user:{emailid}: An email address that represents a specific Google account. For example, alice@gmail.com or joe@example.com.
  • serviceAccount:{emailid}: An email address that represents a service account. For example, my-other-app@appspot.gserviceaccount.com.
  • group:{emailid}: An email address that represents a Google group. For example, admins@example.com.
  • domain:{domain}: A G Suite domain (primary, instead of alias) name that represents all the users of that domain. For example, google.com or example.com.

func (ApiIamMemberOutput) Name added in v0.26.0

The name of the resource to manage IAM policies for.

func (ApiIamMemberOutput) Project added in v0.26.0

The project in which the resource belongs. If it is not provided, a default will be supplied.

func (ApiIamMemberOutput) Role added in v0.26.0

The role that should be applied.

func (ApiIamMemberOutput) ToApiIamMemberOutput added in v0.26.0

func (o ApiIamMemberOutput) ToApiIamMemberOutput() ApiIamMemberOutput

func (ApiIamMemberOutput) ToApiIamMemberOutputWithContext added in v0.26.0

func (o ApiIamMemberOutput) ToApiIamMemberOutputWithContext(ctx context.Context) ApiIamMemberOutput

type ApiIamMemberState added in v0.26.0

type ApiIamMemberState struct {
}

func (ApiIamMemberState) ElementType added in v0.26.0

func (ApiIamMemberState) ElementType() reflect.Type

type ApiIamPolicy

type ApiIamPolicy struct {
	pulumi.CustomResourceState

	ApiId pulumi.StringOutput `pulumi:"apiId"`
	// Specifies cloud audit logging configuration for this policy.
	AuditConfigs ApigatewayAuditConfigResponseArrayOutput `pulumi:"auditConfigs"`
	// Associates a list of `members`, or principals, with a `role`. Optionally, may specify a `condition` that determines how and when the `bindings` are applied. Each of the `bindings` must contain at least one principal. The `bindings` in a `Policy` can refer to up to 1,500 principals; up to 250 of these principals can be Google groups. Each occurrence of a principal counts towards these limits. For example, if the `bindings` grant 50 different roles to `user:alice@example.com`, and not to any other principal, then you can add another 1,450 principals to the `bindings` in the `Policy`.
	Bindings ApigatewayBindingResponseArrayOutput `pulumi:"bindings"`
	// `etag` is used for optimistic concurrency control as a way to help prevent simultaneous updates of a policy from overwriting each other. It is strongly suggested that systems make use of the `etag` in the read-modify-write cycle to perform policy updates in order to avoid race conditions: An `etag` is returned in the response to `getIamPolicy`, and systems are expected to put that etag in the request to `setIamPolicy` to ensure that their change will be applied to the same version of the policy. **Important:** If you use IAM Conditions, you must include the `etag` field whenever you call `setIamPolicy`. If you omit this field, then IAM allows you to overwrite a version `3` policy with a version `1` policy, and all of the conditions in the version `3` policy are lost.
	Etag     pulumi.StringOutput `pulumi:"etag"`
	Location pulumi.StringOutput `pulumi:"location"`
	Project  pulumi.StringOutput `pulumi:"project"`
	// Specifies the format of the policy. Valid values are `0`, `1`, and `3`. Requests that specify an invalid value are rejected. Any operation that affects conditional role bindings must specify version `3`. This requirement applies to the following operations: * Getting a policy that includes a conditional role binding * Adding a conditional role binding to a policy * Changing a conditional role binding in a policy * Removing any role binding, with or without a condition, from a policy that includes conditions **Important:** If you use IAM Conditions, you must include the `etag` field whenever you call `setIamPolicy`. If you omit this field, then IAM allows you to overwrite a version `3` policy with a version `1` policy, and all of the conditions in the version `3` policy are lost. If a policy does not include any conditions, operations on that policy may specify any valid version or leave the field unset. To learn which resources support conditions in their IAM policies, see the [IAM documentation](https://cloud.google.com/iam/help/conditions/resource-policies).
	Version pulumi.IntOutput `pulumi:"version"`
}

Sets the access control policy on the specified resource. Replaces any existing policy. Can return `NOT_FOUND`, `INVALID_ARGUMENT`, and `PERMISSION_DENIED` errors. Note - this resource's API doesn't support deletion. When deleted, the resource will persist on Google Cloud even though it will be deleted from Pulumi state.

func GetApiIamPolicy

func GetApiIamPolicy(ctx *pulumi.Context,
	name string, id pulumi.IDInput, state *ApiIamPolicyState, opts ...pulumi.ResourceOption) (*ApiIamPolicy, error)

GetApiIamPolicy gets an existing ApiIamPolicy resource's state with the given name, ID, and optional state properties that are used to uniquely qualify the lookup (nil if not required).

func NewApiIamPolicy

func NewApiIamPolicy(ctx *pulumi.Context,
	name string, args *ApiIamPolicyArgs, opts ...pulumi.ResourceOption) (*ApiIamPolicy, error)

NewApiIamPolicy registers a new resource with the given unique name, arguments, and options.

func (*ApiIamPolicy) ElementType

func (*ApiIamPolicy) ElementType() reflect.Type

func (*ApiIamPolicy) ToApiIamPolicyOutput

func (i *ApiIamPolicy) ToApiIamPolicyOutput() ApiIamPolicyOutput

func (*ApiIamPolicy) ToApiIamPolicyOutputWithContext

func (i *ApiIamPolicy) ToApiIamPolicyOutputWithContext(ctx context.Context) ApiIamPolicyOutput

type ApiIamPolicyArgs

type ApiIamPolicyArgs struct {
	ApiId pulumi.StringInput
	// Specifies cloud audit logging configuration for this policy.
	AuditConfigs ApigatewayAuditConfigArrayInput
	// Associates a list of `members`, or principals, with a `role`. Optionally, may specify a `condition` that determines how and when the `bindings` are applied. Each of the `bindings` must contain at least one principal. The `bindings` in a `Policy` can refer to up to 1,500 principals; up to 250 of these principals can be Google groups. Each occurrence of a principal counts towards these limits. For example, if the `bindings` grant 50 different roles to `user:alice@example.com`, and not to any other principal, then you can add another 1,450 principals to the `bindings` in the `Policy`.
	Bindings ApigatewayBindingArrayInput
	// `etag` is used for optimistic concurrency control as a way to help prevent simultaneous updates of a policy from overwriting each other. It is strongly suggested that systems make use of the `etag` in the read-modify-write cycle to perform policy updates in order to avoid race conditions: An `etag` is returned in the response to `getIamPolicy`, and systems are expected to put that etag in the request to `setIamPolicy` to ensure that their change will be applied to the same version of the policy. **Important:** If you use IAM Conditions, you must include the `etag` field whenever you call `setIamPolicy`. If you omit this field, then IAM allows you to overwrite a version `3` policy with a version `1` policy, and all of the conditions in the version `3` policy are lost.
	Etag     pulumi.StringPtrInput
	Location pulumi.StringPtrInput
	Project  pulumi.StringPtrInput
	// OPTIONAL: A FieldMask specifying which fields of the policy to modify. Only the fields in the mask will be modified. If no mask is provided, the following default mask is used: `paths: "bindings, etag"`
	UpdateMask pulumi.StringPtrInput
	// Specifies the format of the policy. Valid values are `0`, `1`, and `3`. Requests that specify an invalid value are rejected. Any operation that affects conditional role bindings must specify version `3`. This requirement applies to the following operations: * Getting a policy that includes a conditional role binding * Adding a conditional role binding to a policy * Changing a conditional role binding in a policy * Removing any role binding, with or without a condition, from a policy that includes conditions **Important:** If you use IAM Conditions, you must include the `etag` field whenever you call `setIamPolicy`. If you omit this field, then IAM allows you to overwrite a version `3` policy with a version `1` policy, and all of the conditions in the version `3` policy are lost. If a policy does not include any conditions, operations on that policy may specify any valid version or leave the field unset. To learn which resources support conditions in their IAM policies, see the [IAM documentation](https://cloud.google.com/iam/help/conditions/resource-policies).
	Version pulumi.IntPtrInput
}

The set of arguments for constructing a ApiIamPolicy resource.

func (ApiIamPolicyArgs) ElementType

func (ApiIamPolicyArgs) ElementType() reflect.Type

type ApiIamPolicyInput

type ApiIamPolicyInput interface {
	pulumi.Input

	ToApiIamPolicyOutput() ApiIamPolicyOutput
	ToApiIamPolicyOutputWithContext(ctx context.Context) ApiIamPolicyOutput
}

type ApiIamPolicyOutput

type ApiIamPolicyOutput struct{ *pulumi.OutputState }

func (ApiIamPolicyOutput) ApiId added in v0.21.0

func (ApiIamPolicyOutput) AuditConfigs added in v0.19.0

Specifies cloud audit logging configuration for this policy.

func (ApiIamPolicyOutput) Bindings added in v0.19.0

Associates a list of `members`, or principals, with a `role`. Optionally, may specify a `condition` that determines how and when the `bindings` are applied. Each of the `bindings` must contain at least one principal. The `bindings` in a `Policy` can refer to up to 1,500 principals; up to 250 of these principals can be Google groups. Each occurrence of a principal counts towards these limits. For example, if the `bindings` grant 50 different roles to `user:alice@example.com`, and not to any other principal, then you can add another 1,450 principals to the `bindings` in the `Policy`.

func (ApiIamPolicyOutput) ElementType

func (ApiIamPolicyOutput) ElementType() reflect.Type

func (ApiIamPolicyOutput) Etag added in v0.19.0

`etag` is used for optimistic concurrency control as a way to help prevent simultaneous updates of a policy from overwriting each other. It is strongly suggested that systems make use of the `etag` in the read-modify-write cycle to perform policy updates in order to avoid race conditions: An `etag` is returned in the response to `getIamPolicy`, and systems are expected to put that etag in the request to `setIamPolicy` to ensure that their change will be applied to the same version of the policy. **Important:** If you use IAM Conditions, you must include the `etag` field whenever you call `setIamPolicy`. If you omit this field, then IAM allows you to overwrite a version `3` policy with a version `1` policy, and all of the conditions in the version `3` policy are lost.

func (ApiIamPolicyOutput) Location added in v0.21.0

func (o ApiIamPolicyOutput) Location() pulumi.StringOutput

func (ApiIamPolicyOutput) Project added in v0.21.0

func (ApiIamPolicyOutput) ToApiIamPolicyOutput

func (o ApiIamPolicyOutput) ToApiIamPolicyOutput() ApiIamPolicyOutput

func (ApiIamPolicyOutput) ToApiIamPolicyOutputWithContext

func (o ApiIamPolicyOutput) ToApiIamPolicyOutputWithContext(ctx context.Context) ApiIamPolicyOutput

func (ApiIamPolicyOutput) Version added in v0.19.0

func (o ApiIamPolicyOutput) Version() pulumi.IntOutput

Specifies the format of the policy. Valid values are `0`, `1`, and `3`. Requests that specify an invalid value are rejected. Any operation that affects conditional role bindings must specify version `3`. This requirement applies to the following operations: * Getting a policy that includes a conditional role binding * Adding a conditional role binding to a policy * Changing a conditional role binding in a policy * Removing any role binding, with or without a condition, from a policy that includes conditions **Important:** If you use IAM Conditions, you must include the `etag` field whenever you call `setIamPolicy`. If you omit this field, then IAM allows you to overwrite a version `3` policy with a version `1` policy, and all of the conditions in the version `3` policy are lost. If a policy does not include any conditions, operations on that policy may specify any valid version or leave the field unset. To learn which resources support conditions in their IAM policies, see the [IAM documentation](https://cloud.google.com/iam/help/conditions/resource-policies).

type ApiIamPolicyState

type ApiIamPolicyState struct {
}

func (ApiIamPolicyState) ElementType

func (ApiIamPolicyState) ElementType() reflect.Type

type ApiInput

type ApiInput interface {
	pulumi.Input

	ToApiOutput() ApiOutput
	ToApiOutputWithContext(ctx context.Context) ApiOutput
}

type ApiOutput

type ApiOutput struct{ *pulumi.OutputState }

func (ApiOutput) ApiId added in v0.21.0

func (o ApiOutput) ApiId() pulumi.StringOutput

Required. Identifier to assign to the API. Must be unique within scope of the parent resource.

func (ApiOutput) CreateTime added in v0.19.0

func (o ApiOutput) CreateTime() pulumi.StringOutput

Created time.

func (ApiOutput) DisplayName added in v0.19.0

func (o ApiOutput) DisplayName() pulumi.StringOutput

Optional. Display name.

func (ApiOutput) ElementType

func (ApiOutput) ElementType() reflect.Type

func (ApiOutput) Labels added in v0.19.0

func (o ApiOutput) Labels() pulumi.StringMapOutput

Optional. Resource labels to represent user-provided metadata. Refer to cloud documentation on labels for more details. https://cloud.google.com/compute/docs/labeling-resources

func (ApiOutput) Location added in v0.21.0

func (o ApiOutput) Location() pulumi.StringOutput

func (ApiOutput) ManagedService added in v0.19.0

func (o ApiOutput) ManagedService() pulumi.StringOutput

Optional. Immutable. The name of a Google Managed Service ( https://cloud.google.com/service-infrastructure/docs/glossary#managed). If not specified, a new Service will automatically be created in the same project as this API.

func (ApiOutput) Name added in v0.19.0

func (o ApiOutput) Name() pulumi.StringOutput

Resource name of the API. Format: projects/{project}/locations/global/apis/{api}

func (ApiOutput) Project added in v0.21.0

func (o ApiOutput) Project() pulumi.StringOutput

func (ApiOutput) State added in v0.19.0

func (o ApiOutput) State() pulumi.StringOutput

State of the API.

func (ApiOutput) ToApiOutput

func (o ApiOutput) ToApiOutput() ApiOutput

func (ApiOutput) ToApiOutputWithContext

func (o ApiOutput) ToApiOutputWithContext(ctx context.Context) ApiOutput

func (ApiOutput) UpdateTime added in v0.19.0

func (o ApiOutput) UpdateTime() pulumi.StringOutput

Updated time.

type ApiState

type ApiState struct {
}

func (ApiState) ElementType

func (ApiState) ElementType() reflect.Type

type ApigatewayApiConfigFile

type ApigatewayApiConfigFile struct {
	// The bytes that constitute the file.
	Contents *string `pulumi:"contents"`
	// The file path (full or relative path). This is typically the path of the file when it is uploaded.
	Path *string `pulumi:"path"`
}

A lightweight description of a file.

type ApigatewayApiConfigFileArgs

type ApigatewayApiConfigFileArgs struct {
	// The bytes that constitute the file.
	Contents pulumi.StringPtrInput `pulumi:"contents"`
	// The file path (full or relative path). This is typically the path of the file when it is uploaded.
	Path pulumi.StringPtrInput `pulumi:"path"`
}

A lightweight description of a file.

func (ApigatewayApiConfigFileArgs) ElementType

func (ApigatewayApiConfigFileArgs) ToApigatewayApiConfigFileOutput

func (i ApigatewayApiConfigFileArgs) ToApigatewayApiConfigFileOutput() ApigatewayApiConfigFileOutput

func (ApigatewayApiConfigFileArgs) ToApigatewayApiConfigFileOutputWithContext

func (i ApigatewayApiConfigFileArgs) ToApigatewayApiConfigFileOutputWithContext(ctx context.Context) ApigatewayApiConfigFileOutput

func (ApigatewayApiConfigFileArgs) ToApigatewayApiConfigFilePtrOutput

func (i ApigatewayApiConfigFileArgs) ToApigatewayApiConfigFilePtrOutput() ApigatewayApiConfigFilePtrOutput

func (ApigatewayApiConfigFileArgs) ToApigatewayApiConfigFilePtrOutputWithContext

func (i ApigatewayApiConfigFileArgs) ToApigatewayApiConfigFilePtrOutputWithContext(ctx context.Context) ApigatewayApiConfigFilePtrOutput

type ApigatewayApiConfigFileArray

type ApigatewayApiConfigFileArray []ApigatewayApiConfigFileInput

func (ApigatewayApiConfigFileArray) ElementType

func (ApigatewayApiConfigFileArray) ToApigatewayApiConfigFileArrayOutput

func (i ApigatewayApiConfigFileArray) ToApigatewayApiConfigFileArrayOutput() ApigatewayApiConfigFileArrayOutput

func (ApigatewayApiConfigFileArray) ToApigatewayApiConfigFileArrayOutputWithContext

func (i ApigatewayApiConfigFileArray) ToApigatewayApiConfigFileArrayOutputWithContext(ctx context.Context) ApigatewayApiConfigFileArrayOutput

type ApigatewayApiConfigFileArrayInput

type ApigatewayApiConfigFileArrayInput interface {
	pulumi.Input

	ToApigatewayApiConfigFileArrayOutput() ApigatewayApiConfigFileArrayOutput
	ToApigatewayApiConfigFileArrayOutputWithContext(context.Context) ApigatewayApiConfigFileArrayOutput
}

ApigatewayApiConfigFileArrayInput is an input type that accepts ApigatewayApiConfigFileArray and ApigatewayApiConfigFileArrayOutput values. You can construct a concrete instance of `ApigatewayApiConfigFileArrayInput` via:

ApigatewayApiConfigFileArray{ ApigatewayApiConfigFileArgs{...} }

type ApigatewayApiConfigFileArrayOutput

type ApigatewayApiConfigFileArrayOutput struct{ *pulumi.OutputState }

func (ApigatewayApiConfigFileArrayOutput) ElementType

func (ApigatewayApiConfigFileArrayOutput) Index

func (ApigatewayApiConfigFileArrayOutput) ToApigatewayApiConfigFileArrayOutput

func (o ApigatewayApiConfigFileArrayOutput) ToApigatewayApiConfigFileArrayOutput() ApigatewayApiConfigFileArrayOutput

func (ApigatewayApiConfigFileArrayOutput) ToApigatewayApiConfigFileArrayOutputWithContext

func (o ApigatewayApiConfigFileArrayOutput) ToApigatewayApiConfigFileArrayOutputWithContext(ctx context.Context) ApigatewayApiConfigFileArrayOutput

type ApigatewayApiConfigFileInput

type ApigatewayApiConfigFileInput interface {
	pulumi.Input

	ToApigatewayApiConfigFileOutput() ApigatewayApiConfigFileOutput
	ToApigatewayApiConfigFileOutputWithContext(context.Context) ApigatewayApiConfigFileOutput
}

ApigatewayApiConfigFileInput is an input type that accepts ApigatewayApiConfigFileArgs and ApigatewayApiConfigFileOutput values. You can construct a concrete instance of `ApigatewayApiConfigFileInput` via:

ApigatewayApiConfigFileArgs{...}

type ApigatewayApiConfigFileOutput

type ApigatewayApiConfigFileOutput struct{ *pulumi.OutputState }

A lightweight description of a file.

func (ApigatewayApiConfigFileOutput) Contents

The bytes that constitute the file.

func (ApigatewayApiConfigFileOutput) ElementType

func (ApigatewayApiConfigFileOutput) Path

The file path (full or relative path). This is typically the path of the file when it is uploaded.

func (ApigatewayApiConfigFileOutput) ToApigatewayApiConfigFileOutput

func (o ApigatewayApiConfigFileOutput) ToApigatewayApiConfigFileOutput() ApigatewayApiConfigFileOutput

func (ApigatewayApiConfigFileOutput) ToApigatewayApiConfigFileOutputWithContext

func (o ApigatewayApiConfigFileOutput) ToApigatewayApiConfigFileOutputWithContext(ctx context.Context) ApigatewayApiConfigFileOutput

func (ApigatewayApiConfigFileOutput) ToApigatewayApiConfigFilePtrOutput

func (o ApigatewayApiConfigFileOutput) ToApigatewayApiConfigFilePtrOutput() ApigatewayApiConfigFilePtrOutput

func (ApigatewayApiConfigFileOutput) ToApigatewayApiConfigFilePtrOutputWithContext

func (o ApigatewayApiConfigFileOutput) ToApigatewayApiConfigFilePtrOutputWithContext(ctx context.Context) ApigatewayApiConfigFilePtrOutput

type ApigatewayApiConfigFilePtrInput

type ApigatewayApiConfigFilePtrInput interface {
	pulumi.Input

	ToApigatewayApiConfigFilePtrOutput() ApigatewayApiConfigFilePtrOutput
	ToApigatewayApiConfigFilePtrOutputWithContext(context.Context) ApigatewayApiConfigFilePtrOutput
}

ApigatewayApiConfigFilePtrInput is an input type that accepts ApigatewayApiConfigFileArgs, ApigatewayApiConfigFilePtr and ApigatewayApiConfigFilePtrOutput values. You can construct a concrete instance of `ApigatewayApiConfigFilePtrInput` via:

        ApigatewayApiConfigFileArgs{...}

or:

        nil

type ApigatewayApiConfigFilePtrOutput

type ApigatewayApiConfigFilePtrOutput struct{ *pulumi.OutputState }

func (ApigatewayApiConfigFilePtrOutput) Contents

The bytes that constitute the file.

func (ApigatewayApiConfigFilePtrOutput) Elem

func (ApigatewayApiConfigFilePtrOutput) ElementType

func (ApigatewayApiConfigFilePtrOutput) Path

The file path (full or relative path). This is typically the path of the file when it is uploaded.

func (ApigatewayApiConfigFilePtrOutput) ToApigatewayApiConfigFilePtrOutput

func (o ApigatewayApiConfigFilePtrOutput) ToApigatewayApiConfigFilePtrOutput() ApigatewayApiConfigFilePtrOutput

func (ApigatewayApiConfigFilePtrOutput) ToApigatewayApiConfigFilePtrOutputWithContext

func (o ApigatewayApiConfigFilePtrOutput) ToApigatewayApiConfigFilePtrOutputWithContext(ctx context.Context) ApigatewayApiConfigFilePtrOutput

type ApigatewayApiConfigFileResponse

type ApigatewayApiConfigFileResponse struct {
	// The bytes that constitute the file.
	Contents string `pulumi:"contents"`
	// The file path (full or relative path). This is typically the path of the file when it is uploaded.
	Path string `pulumi:"path"`
}

A lightweight description of a file.

type ApigatewayApiConfigFileResponseArrayOutput

type ApigatewayApiConfigFileResponseArrayOutput struct{ *pulumi.OutputState }

func (ApigatewayApiConfigFileResponseArrayOutput) ElementType

func (ApigatewayApiConfigFileResponseArrayOutput) Index

func (ApigatewayApiConfigFileResponseArrayOutput) ToApigatewayApiConfigFileResponseArrayOutput

func (o ApigatewayApiConfigFileResponseArrayOutput) ToApigatewayApiConfigFileResponseArrayOutput() ApigatewayApiConfigFileResponseArrayOutput

func (ApigatewayApiConfigFileResponseArrayOutput) ToApigatewayApiConfigFileResponseArrayOutputWithContext

func (o ApigatewayApiConfigFileResponseArrayOutput) ToApigatewayApiConfigFileResponseArrayOutputWithContext(ctx context.Context) ApigatewayApiConfigFileResponseArrayOutput

type ApigatewayApiConfigFileResponseOutput

type ApigatewayApiConfigFileResponseOutput struct{ *pulumi.OutputState }

A lightweight description of a file.

func (ApigatewayApiConfigFileResponseOutput) Contents

The bytes that constitute the file.

func (ApigatewayApiConfigFileResponseOutput) ElementType

func (ApigatewayApiConfigFileResponseOutput) Path

The file path (full or relative path). This is typically the path of the file when it is uploaded.

func (ApigatewayApiConfigFileResponseOutput) ToApigatewayApiConfigFileResponseOutput

func (o ApigatewayApiConfigFileResponseOutput) ToApigatewayApiConfigFileResponseOutput() ApigatewayApiConfigFileResponseOutput

func (ApigatewayApiConfigFileResponseOutput) ToApigatewayApiConfigFileResponseOutputWithContext

func (o ApigatewayApiConfigFileResponseOutput) ToApigatewayApiConfigFileResponseOutputWithContext(ctx context.Context) ApigatewayApiConfigFileResponseOutput

type ApigatewayApiConfigGrpcServiceDefinition

type ApigatewayApiConfigGrpcServiceDefinition struct {
	// Input only. File descriptor set, generated by protoc. To generate, use protoc with imports and source info included. For an example test.proto file, the following command would put the value in a new file named out.pb. $ protoc --include_imports --include_source_info test.proto -o out.pb
	FileDescriptorSet *ApigatewayApiConfigFile `pulumi:"fileDescriptorSet"`
	// Optional. Uncompiled proto files associated with the descriptor set, used for display purposes (server-side compilation is not supported). These should match the inputs to 'protoc' command used to generate file_descriptor_set.
	Source []ApigatewayApiConfigFile `pulumi:"source"`
}

A gRPC service definition.

type ApigatewayApiConfigGrpcServiceDefinitionArgs

type ApigatewayApiConfigGrpcServiceDefinitionArgs struct {
	// Input only. File descriptor set, generated by protoc. To generate, use protoc with imports and source info included. For an example test.proto file, the following command would put the value in a new file named out.pb. $ protoc --include_imports --include_source_info test.proto -o out.pb
	FileDescriptorSet ApigatewayApiConfigFilePtrInput `pulumi:"fileDescriptorSet"`
	// Optional. Uncompiled proto files associated with the descriptor set, used for display purposes (server-side compilation is not supported). These should match the inputs to 'protoc' command used to generate file_descriptor_set.
	Source ApigatewayApiConfigFileArrayInput `pulumi:"source"`
}

A gRPC service definition.

func (ApigatewayApiConfigGrpcServiceDefinitionArgs) ElementType

func (ApigatewayApiConfigGrpcServiceDefinitionArgs) ToApigatewayApiConfigGrpcServiceDefinitionOutput

func (i ApigatewayApiConfigGrpcServiceDefinitionArgs) ToApigatewayApiConfigGrpcServiceDefinitionOutput() ApigatewayApiConfigGrpcServiceDefinitionOutput

func (ApigatewayApiConfigGrpcServiceDefinitionArgs) ToApigatewayApiConfigGrpcServiceDefinitionOutputWithContext

func (i ApigatewayApiConfigGrpcServiceDefinitionArgs) ToApigatewayApiConfigGrpcServiceDefinitionOutputWithContext(ctx context.Context) ApigatewayApiConfigGrpcServiceDefinitionOutput

type ApigatewayApiConfigGrpcServiceDefinitionArray

type ApigatewayApiConfigGrpcServiceDefinitionArray []ApigatewayApiConfigGrpcServiceDefinitionInput

func (ApigatewayApiConfigGrpcServiceDefinitionArray) ElementType

func (ApigatewayApiConfigGrpcServiceDefinitionArray) ToApigatewayApiConfigGrpcServiceDefinitionArrayOutput

func (i ApigatewayApiConfigGrpcServiceDefinitionArray) ToApigatewayApiConfigGrpcServiceDefinitionArrayOutput() ApigatewayApiConfigGrpcServiceDefinitionArrayOutput

func (ApigatewayApiConfigGrpcServiceDefinitionArray) ToApigatewayApiConfigGrpcServiceDefinitionArrayOutputWithContext

func (i ApigatewayApiConfigGrpcServiceDefinitionArray) ToApigatewayApiConfigGrpcServiceDefinitionArrayOutputWithContext(ctx context.Context) ApigatewayApiConfigGrpcServiceDefinitionArrayOutput

type ApigatewayApiConfigGrpcServiceDefinitionArrayInput

type ApigatewayApiConfigGrpcServiceDefinitionArrayInput interface {
	pulumi.Input

	ToApigatewayApiConfigGrpcServiceDefinitionArrayOutput() ApigatewayApiConfigGrpcServiceDefinitionArrayOutput
	ToApigatewayApiConfigGrpcServiceDefinitionArrayOutputWithContext(context.Context) ApigatewayApiConfigGrpcServiceDefinitionArrayOutput
}

ApigatewayApiConfigGrpcServiceDefinitionArrayInput is an input type that accepts ApigatewayApiConfigGrpcServiceDefinitionArray and ApigatewayApiConfigGrpcServiceDefinitionArrayOutput values. You can construct a concrete instance of `ApigatewayApiConfigGrpcServiceDefinitionArrayInput` via:

ApigatewayApiConfigGrpcServiceDefinitionArray{ ApigatewayApiConfigGrpcServiceDefinitionArgs{...} }

type ApigatewayApiConfigGrpcServiceDefinitionArrayOutput

type ApigatewayApiConfigGrpcServiceDefinitionArrayOutput struct{ *pulumi.OutputState }

func (ApigatewayApiConfigGrpcServiceDefinitionArrayOutput) ElementType

func (ApigatewayApiConfigGrpcServiceDefinitionArrayOutput) Index

func (ApigatewayApiConfigGrpcServiceDefinitionArrayOutput) ToApigatewayApiConfigGrpcServiceDefinitionArrayOutput

func (o ApigatewayApiConfigGrpcServiceDefinitionArrayOutput) ToApigatewayApiConfigGrpcServiceDefinitionArrayOutput() ApigatewayApiConfigGrpcServiceDefinitionArrayOutput

func (ApigatewayApiConfigGrpcServiceDefinitionArrayOutput) ToApigatewayApiConfigGrpcServiceDefinitionArrayOutputWithContext

func (o ApigatewayApiConfigGrpcServiceDefinitionArrayOutput) ToApigatewayApiConfigGrpcServiceDefinitionArrayOutputWithContext(ctx context.Context) ApigatewayApiConfigGrpcServiceDefinitionArrayOutput

type ApigatewayApiConfigGrpcServiceDefinitionInput

type ApigatewayApiConfigGrpcServiceDefinitionInput interface {
	pulumi.Input

	ToApigatewayApiConfigGrpcServiceDefinitionOutput() ApigatewayApiConfigGrpcServiceDefinitionOutput
	ToApigatewayApiConfigGrpcServiceDefinitionOutputWithContext(context.Context) ApigatewayApiConfigGrpcServiceDefinitionOutput
}

ApigatewayApiConfigGrpcServiceDefinitionInput is an input type that accepts ApigatewayApiConfigGrpcServiceDefinitionArgs and ApigatewayApiConfigGrpcServiceDefinitionOutput values. You can construct a concrete instance of `ApigatewayApiConfigGrpcServiceDefinitionInput` via:

ApigatewayApiConfigGrpcServiceDefinitionArgs{...}

type ApigatewayApiConfigGrpcServiceDefinitionOutput

type ApigatewayApiConfigGrpcServiceDefinitionOutput struct{ *pulumi.OutputState }

A gRPC service definition.

func (ApigatewayApiConfigGrpcServiceDefinitionOutput) ElementType

func (ApigatewayApiConfigGrpcServiceDefinitionOutput) FileDescriptorSet

Input only. File descriptor set, generated by protoc. To generate, use protoc with imports and source info included. For an example test.proto file, the following command would put the value in a new file named out.pb. $ protoc --include_imports --include_source_info test.proto -o out.pb

func (ApigatewayApiConfigGrpcServiceDefinitionOutput) Source

Optional. Uncompiled proto files associated with the descriptor set, used for display purposes (server-side compilation is not supported). These should match the inputs to 'protoc' command used to generate file_descriptor_set.

func (ApigatewayApiConfigGrpcServiceDefinitionOutput) ToApigatewayApiConfigGrpcServiceDefinitionOutput

func (o ApigatewayApiConfigGrpcServiceDefinitionOutput) ToApigatewayApiConfigGrpcServiceDefinitionOutput() ApigatewayApiConfigGrpcServiceDefinitionOutput

func (ApigatewayApiConfigGrpcServiceDefinitionOutput) ToApigatewayApiConfigGrpcServiceDefinitionOutputWithContext

func (o ApigatewayApiConfigGrpcServiceDefinitionOutput) ToApigatewayApiConfigGrpcServiceDefinitionOutputWithContext(ctx context.Context) ApigatewayApiConfigGrpcServiceDefinitionOutput

type ApigatewayApiConfigGrpcServiceDefinitionResponse

type ApigatewayApiConfigGrpcServiceDefinitionResponse struct {
	// Input only. File descriptor set, generated by protoc. To generate, use protoc with imports and source info included. For an example test.proto file, the following command would put the value in a new file named out.pb. $ protoc --include_imports --include_source_info test.proto -o out.pb
	FileDescriptorSet ApigatewayApiConfigFileResponse `pulumi:"fileDescriptorSet"`
	// Optional. Uncompiled proto files associated with the descriptor set, used for display purposes (server-side compilation is not supported). These should match the inputs to 'protoc' command used to generate file_descriptor_set.
	Source []ApigatewayApiConfigFileResponse `pulumi:"source"`
}

A gRPC service definition.

type ApigatewayApiConfigGrpcServiceDefinitionResponseArrayOutput

type ApigatewayApiConfigGrpcServiceDefinitionResponseArrayOutput struct{ *pulumi.OutputState }

func (ApigatewayApiConfigGrpcServiceDefinitionResponseArrayOutput) ElementType

func (ApigatewayApiConfigGrpcServiceDefinitionResponseArrayOutput) Index

func (ApigatewayApiConfigGrpcServiceDefinitionResponseArrayOutput) ToApigatewayApiConfigGrpcServiceDefinitionResponseArrayOutput

func (ApigatewayApiConfigGrpcServiceDefinitionResponseArrayOutput) ToApigatewayApiConfigGrpcServiceDefinitionResponseArrayOutputWithContext

func (o ApigatewayApiConfigGrpcServiceDefinitionResponseArrayOutput) ToApigatewayApiConfigGrpcServiceDefinitionResponseArrayOutputWithContext(ctx context.Context) ApigatewayApiConfigGrpcServiceDefinitionResponseArrayOutput

type ApigatewayApiConfigGrpcServiceDefinitionResponseOutput

type ApigatewayApiConfigGrpcServiceDefinitionResponseOutput struct{ *pulumi.OutputState }

A gRPC service definition.

func (ApigatewayApiConfigGrpcServiceDefinitionResponseOutput) ElementType

func (ApigatewayApiConfigGrpcServiceDefinitionResponseOutput) FileDescriptorSet

Input only. File descriptor set, generated by protoc. To generate, use protoc with imports and source info included. For an example test.proto file, the following command would put the value in a new file named out.pb. $ protoc --include_imports --include_source_info test.proto -o out.pb

func (ApigatewayApiConfigGrpcServiceDefinitionResponseOutput) Source

Optional. Uncompiled proto files associated with the descriptor set, used for display purposes (server-side compilation is not supported). These should match the inputs to 'protoc' command used to generate file_descriptor_set.

func (ApigatewayApiConfigGrpcServiceDefinitionResponseOutput) ToApigatewayApiConfigGrpcServiceDefinitionResponseOutput

func (ApigatewayApiConfigGrpcServiceDefinitionResponseOutput) ToApigatewayApiConfigGrpcServiceDefinitionResponseOutputWithContext

func (o ApigatewayApiConfigGrpcServiceDefinitionResponseOutput) ToApigatewayApiConfigGrpcServiceDefinitionResponseOutputWithContext(ctx context.Context) ApigatewayApiConfigGrpcServiceDefinitionResponseOutput

type ApigatewayApiConfigOpenApiDocument

type ApigatewayApiConfigOpenApiDocument struct {
	// The OpenAPI Specification document file.
	Document *ApigatewayApiConfigFile `pulumi:"document"`
}

An OpenAPI Specification Document describing an API.

type ApigatewayApiConfigOpenApiDocumentArgs

type ApigatewayApiConfigOpenApiDocumentArgs struct {
	// The OpenAPI Specification document file.
	Document ApigatewayApiConfigFilePtrInput `pulumi:"document"`
}

An OpenAPI Specification Document describing an API.

func (ApigatewayApiConfigOpenApiDocumentArgs) ElementType

func (ApigatewayApiConfigOpenApiDocumentArgs) ToApigatewayApiConfigOpenApiDocumentOutput

func (i ApigatewayApiConfigOpenApiDocumentArgs) ToApigatewayApiConfigOpenApiDocumentOutput() ApigatewayApiConfigOpenApiDocumentOutput

func (ApigatewayApiConfigOpenApiDocumentArgs) ToApigatewayApiConfigOpenApiDocumentOutputWithContext

func (i ApigatewayApiConfigOpenApiDocumentArgs) ToApigatewayApiConfigOpenApiDocumentOutputWithContext(ctx context.Context) ApigatewayApiConfigOpenApiDocumentOutput

type ApigatewayApiConfigOpenApiDocumentArray

type ApigatewayApiConfigOpenApiDocumentArray []ApigatewayApiConfigOpenApiDocumentInput

func (ApigatewayApiConfigOpenApiDocumentArray) ElementType

func (ApigatewayApiConfigOpenApiDocumentArray) ToApigatewayApiConfigOpenApiDocumentArrayOutput

func (i ApigatewayApiConfigOpenApiDocumentArray) ToApigatewayApiConfigOpenApiDocumentArrayOutput() ApigatewayApiConfigOpenApiDocumentArrayOutput

func (ApigatewayApiConfigOpenApiDocumentArray) ToApigatewayApiConfigOpenApiDocumentArrayOutputWithContext

func (i ApigatewayApiConfigOpenApiDocumentArray) ToApigatewayApiConfigOpenApiDocumentArrayOutputWithContext(ctx context.Context) ApigatewayApiConfigOpenApiDocumentArrayOutput

type ApigatewayApiConfigOpenApiDocumentArrayInput

type ApigatewayApiConfigOpenApiDocumentArrayInput interface {
	pulumi.Input

	ToApigatewayApiConfigOpenApiDocumentArrayOutput() ApigatewayApiConfigOpenApiDocumentArrayOutput
	ToApigatewayApiConfigOpenApiDocumentArrayOutputWithContext(context.Context) ApigatewayApiConfigOpenApiDocumentArrayOutput
}

ApigatewayApiConfigOpenApiDocumentArrayInput is an input type that accepts ApigatewayApiConfigOpenApiDocumentArray and ApigatewayApiConfigOpenApiDocumentArrayOutput values. You can construct a concrete instance of `ApigatewayApiConfigOpenApiDocumentArrayInput` via:

ApigatewayApiConfigOpenApiDocumentArray{ ApigatewayApiConfigOpenApiDocumentArgs{...} }

type ApigatewayApiConfigOpenApiDocumentArrayOutput

type ApigatewayApiConfigOpenApiDocumentArrayOutput struct{ *pulumi.OutputState }

func (ApigatewayApiConfigOpenApiDocumentArrayOutput) ElementType

func (ApigatewayApiConfigOpenApiDocumentArrayOutput) Index

func (ApigatewayApiConfigOpenApiDocumentArrayOutput) ToApigatewayApiConfigOpenApiDocumentArrayOutput

func (o ApigatewayApiConfigOpenApiDocumentArrayOutput) ToApigatewayApiConfigOpenApiDocumentArrayOutput() ApigatewayApiConfigOpenApiDocumentArrayOutput

func (ApigatewayApiConfigOpenApiDocumentArrayOutput) ToApigatewayApiConfigOpenApiDocumentArrayOutputWithContext

func (o ApigatewayApiConfigOpenApiDocumentArrayOutput) ToApigatewayApiConfigOpenApiDocumentArrayOutputWithContext(ctx context.Context) ApigatewayApiConfigOpenApiDocumentArrayOutput

type ApigatewayApiConfigOpenApiDocumentInput

type ApigatewayApiConfigOpenApiDocumentInput interface {
	pulumi.Input

	ToApigatewayApiConfigOpenApiDocumentOutput() ApigatewayApiConfigOpenApiDocumentOutput
	ToApigatewayApiConfigOpenApiDocumentOutputWithContext(context.Context) ApigatewayApiConfigOpenApiDocumentOutput
}

ApigatewayApiConfigOpenApiDocumentInput is an input type that accepts ApigatewayApiConfigOpenApiDocumentArgs and ApigatewayApiConfigOpenApiDocumentOutput values. You can construct a concrete instance of `ApigatewayApiConfigOpenApiDocumentInput` via:

ApigatewayApiConfigOpenApiDocumentArgs{...}

type ApigatewayApiConfigOpenApiDocumentOutput

type ApigatewayApiConfigOpenApiDocumentOutput struct{ *pulumi.OutputState }

An OpenAPI Specification Document describing an API.

func (ApigatewayApiConfigOpenApiDocumentOutput) Document

The OpenAPI Specification document file.

func (ApigatewayApiConfigOpenApiDocumentOutput) ElementType

func (ApigatewayApiConfigOpenApiDocumentOutput) ToApigatewayApiConfigOpenApiDocumentOutput

func (o ApigatewayApiConfigOpenApiDocumentOutput) ToApigatewayApiConfigOpenApiDocumentOutput() ApigatewayApiConfigOpenApiDocumentOutput

func (ApigatewayApiConfigOpenApiDocumentOutput) ToApigatewayApiConfigOpenApiDocumentOutputWithContext

func (o ApigatewayApiConfigOpenApiDocumentOutput) ToApigatewayApiConfigOpenApiDocumentOutputWithContext(ctx context.Context) ApigatewayApiConfigOpenApiDocumentOutput

type ApigatewayApiConfigOpenApiDocumentResponse

type ApigatewayApiConfigOpenApiDocumentResponse struct {
	// The OpenAPI Specification document file.
	Document ApigatewayApiConfigFileResponse `pulumi:"document"`
}

An OpenAPI Specification Document describing an API.

type ApigatewayApiConfigOpenApiDocumentResponseArrayOutput

type ApigatewayApiConfigOpenApiDocumentResponseArrayOutput struct{ *pulumi.OutputState }

func (ApigatewayApiConfigOpenApiDocumentResponseArrayOutput) ElementType

func (ApigatewayApiConfigOpenApiDocumentResponseArrayOutput) Index

func (ApigatewayApiConfigOpenApiDocumentResponseArrayOutput) ToApigatewayApiConfigOpenApiDocumentResponseArrayOutput

func (ApigatewayApiConfigOpenApiDocumentResponseArrayOutput) ToApigatewayApiConfigOpenApiDocumentResponseArrayOutputWithContext

func (o ApigatewayApiConfigOpenApiDocumentResponseArrayOutput) ToApigatewayApiConfigOpenApiDocumentResponseArrayOutputWithContext(ctx context.Context) ApigatewayApiConfigOpenApiDocumentResponseArrayOutput

type ApigatewayApiConfigOpenApiDocumentResponseOutput

type ApigatewayApiConfigOpenApiDocumentResponseOutput struct{ *pulumi.OutputState }

An OpenAPI Specification Document describing an API.

func (ApigatewayApiConfigOpenApiDocumentResponseOutput) Document

The OpenAPI Specification document file.

func (ApigatewayApiConfigOpenApiDocumentResponseOutput) ElementType

func (ApigatewayApiConfigOpenApiDocumentResponseOutput) ToApigatewayApiConfigOpenApiDocumentResponseOutput

func (o ApigatewayApiConfigOpenApiDocumentResponseOutput) ToApigatewayApiConfigOpenApiDocumentResponseOutput() ApigatewayApiConfigOpenApiDocumentResponseOutput

func (ApigatewayApiConfigOpenApiDocumentResponseOutput) ToApigatewayApiConfigOpenApiDocumentResponseOutputWithContext

func (o ApigatewayApiConfigOpenApiDocumentResponseOutput) ToApigatewayApiConfigOpenApiDocumentResponseOutputWithContext(ctx context.Context) ApigatewayApiConfigOpenApiDocumentResponseOutput

type ApigatewayAuditConfig

type ApigatewayAuditConfig struct {
	// The configuration for logging of each type of permission.
	AuditLogConfigs []ApigatewayAuditLogConfig `pulumi:"auditLogConfigs"`
	// Specifies a service that will be enabled for audit logging. For example, `storage.googleapis.com`, `cloudsql.googleapis.com`. `allServices` is a special value that covers all services.
	Service *string `pulumi:"service"`
}

Specifies the audit configuration for a service. The configuration determines which permission types are logged, and what identities, if any, are exempted from logging. An AuditConfig must have one or more AuditLogConfigs. If there are AuditConfigs for both `allServices` and a specific service, the union of the two AuditConfigs is used for that service: the log_types specified in each AuditConfig are enabled, and the exempted_members in each AuditLogConfig are exempted. Example Policy with multiple AuditConfigs: { "audit_configs": [ { "service": "allServices", "audit_log_configs": [ { "log_type": "DATA_READ", "exempted_members": [ "user:jose@example.com" ] }, { "log_type": "DATA_WRITE" }, { "log_type": "ADMIN_READ" } ] }, { "service": "sampleservice.googleapis.com", "audit_log_configs": [ { "log_type": "DATA_READ" }, { "log_type": "DATA_WRITE", "exempted_members": [ "user:aliya@example.com" ] } ] } ] } For sampleservice, this policy enables DATA_READ, DATA_WRITE and ADMIN_READ logging. It also exempts `jose@example.com` from DATA_READ logging, and `aliya@example.com` from DATA_WRITE logging.

type ApigatewayAuditConfigArgs

type ApigatewayAuditConfigArgs struct {
	// The configuration for logging of each type of permission.
	AuditLogConfigs ApigatewayAuditLogConfigArrayInput `pulumi:"auditLogConfigs"`
	// Specifies a service that will be enabled for audit logging. For example, `storage.googleapis.com`, `cloudsql.googleapis.com`. `allServices` is a special value that covers all services.
	Service pulumi.StringPtrInput `pulumi:"service"`
}

Specifies the audit configuration for a service. The configuration determines which permission types are logged, and what identities, if any, are exempted from logging. An AuditConfig must have one or more AuditLogConfigs. If there are AuditConfigs for both `allServices` and a specific service, the union of the two AuditConfigs is used for that service: the log_types specified in each AuditConfig are enabled, and the exempted_members in each AuditLogConfig are exempted. Example Policy with multiple AuditConfigs: { "audit_configs": [ { "service": "allServices", "audit_log_configs": [ { "log_type": "DATA_READ", "exempted_members": [ "user:jose@example.com" ] }, { "log_type": "DATA_WRITE" }, { "log_type": "ADMIN_READ" } ] }, { "service": "sampleservice.googleapis.com", "audit_log_configs": [ { "log_type": "DATA_READ" }, { "log_type": "DATA_WRITE", "exempted_members": [ "user:aliya@example.com" ] } ] } ] } For sampleservice, this policy enables DATA_READ, DATA_WRITE and ADMIN_READ logging. It also exempts `jose@example.com` from DATA_READ logging, and `aliya@example.com` from DATA_WRITE logging.

func (ApigatewayAuditConfigArgs) ElementType

func (ApigatewayAuditConfigArgs) ElementType() reflect.Type

func (ApigatewayAuditConfigArgs) ToApigatewayAuditConfigOutput

func (i ApigatewayAuditConfigArgs) ToApigatewayAuditConfigOutput() ApigatewayAuditConfigOutput

func (ApigatewayAuditConfigArgs) ToApigatewayAuditConfigOutputWithContext

func (i ApigatewayAuditConfigArgs) ToApigatewayAuditConfigOutputWithContext(ctx context.Context) ApigatewayAuditConfigOutput

type ApigatewayAuditConfigArray

type ApigatewayAuditConfigArray []ApigatewayAuditConfigInput

func (ApigatewayAuditConfigArray) ElementType

func (ApigatewayAuditConfigArray) ElementType() reflect.Type

func (ApigatewayAuditConfigArray) ToApigatewayAuditConfigArrayOutput

func (i ApigatewayAuditConfigArray) ToApigatewayAuditConfigArrayOutput() ApigatewayAuditConfigArrayOutput

func (ApigatewayAuditConfigArray) ToApigatewayAuditConfigArrayOutputWithContext

func (i ApigatewayAuditConfigArray) ToApigatewayAuditConfigArrayOutputWithContext(ctx context.Context) ApigatewayAuditConfigArrayOutput

type ApigatewayAuditConfigArrayInput

type ApigatewayAuditConfigArrayInput interface {
	pulumi.Input

	ToApigatewayAuditConfigArrayOutput() ApigatewayAuditConfigArrayOutput
	ToApigatewayAuditConfigArrayOutputWithContext(context.Context) ApigatewayAuditConfigArrayOutput
}

ApigatewayAuditConfigArrayInput is an input type that accepts ApigatewayAuditConfigArray and ApigatewayAuditConfigArrayOutput values. You can construct a concrete instance of `ApigatewayAuditConfigArrayInput` via:

ApigatewayAuditConfigArray{ ApigatewayAuditConfigArgs{...} }

type ApigatewayAuditConfigArrayOutput

type ApigatewayAuditConfigArrayOutput struct{ *pulumi.OutputState }

func (ApigatewayAuditConfigArrayOutput) ElementType

func (ApigatewayAuditConfigArrayOutput) Index

func (ApigatewayAuditConfigArrayOutput) ToApigatewayAuditConfigArrayOutput

func (o ApigatewayAuditConfigArrayOutput) ToApigatewayAuditConfigArrayOutput() ApigatewayAuditConfigArrayOutput

func (ApigatewayAuditConfigArrayOutput) ToApigatewayAuditConfigArrayOutputWithContext

func (o ApigatewayAuditConfigArrayOutput) ToApigatewayAuditConfigArrayOutputWithContext(ctx context.Context) ApigatewayAuditConfigArrayOutput

type ApigatewayAuditConfigInput

type ApigatewayAuditConfigInput interface {
	pulumi.Input

	ToApigatewayAuditConfigOutput() ApigatewayAuditConfigOutput
	ToApigatewayAuditConfigOutputWithContext(context.Context) ApigatewayAuditConfigOutput
}

ApigatewayAuditConfigInput is an input type that accepts ApigatewayAuditConfigArgs and ApigatewayAuditConfigOutput values. You can construct a concrete instance of `ApigatewayAuditConfigInput` via:

ApigatewayAuditConfigArgs{...}

type ApigatewayAuditConfigOutput

type ApigatewayAuditConfigOutput struct{ *pulumi.OutputState }

Specifies the audit configuration for a service. The configuration determines which permission types are logged, and what identities, if any, are exempted from logging. An AuditConfig must have one or more AuditLogConfigs. If there are AuditConfigs for both `allServices` and a specific service, the union of the two AuditConfigs is used for that service: the log_types specified in each AuditConfig are enabled, and the exempted_members in each AuditLogConfig are exempted. Example Policy with multiple AuditConfigs: { "audit_configs": [ { "service": "allServices", "audit_log_configs": [ { "log_type": "DATA_READ", "exempted_members": [ "user:jose@example.com" ] }, { "log_type": "DATA_WRITE" }, { "log_type": "ADMIN_READ" } ] }, { "service": "sampleservice.googleapis.com", "audit_log_configs": [ { "log_type": "DATA_READ" }, { "log_type": "DATA_WRITE", "exempted_members": [ "user:aliya@example.com" ] } ] } ] } For sampleservice, this policy enables DATA_READ, DATA_WRITE and ADMIN_READ logging. It also exempts `jose@example.com` from DATA_READ logging, and `aliya@example.com` from DATA_WRITE logging.

func (ApigatewayAuditConfigOutput) AuditLogConfigs

The configuration for logging of each type of permission.

func (ApigatewayAuditConfigOutput) ElementType

func (ApigatewayAuditConfigOutput) Service

Specifies a service that will be enabled for audit logging. For example, `storage.googleapis.com`, `cloudsql.googleapis.com`. `allServices` is a special value that covers all services.

func (ApigatewayAuditConfigOutput) ToApigatewayAuditConfigOutput

func (o ApigatewayAuditConfigOutput) ToApigatewayAuditConfigOutput() ApigatewayAuditConfigOutput

func (ApigatewayAuditConfigOutput) ToApigatewayAuditConfigOutputWithContext

func (o ApigatewayAuditConfigOutput) ToApigatewayAuditConfigOutputWithContext(ctx context.Context) ApigatewayAuditConfigOutput

type ApigatewayAuditConfigResponse

type ApigatewayAuditConfigResponse struct {
	// The configuration for logging of each type of permission.
	AuditLogConfigs []ApigatewayAuditLogConfigResponse `pulumi:"auditLogConfigs"`
	// Specifies a service that will be enabled for audit logging. For example, `storage.googleapis.com`, `cloudsql.googleapis.com`. `allServices` is a special value that covers all services.
	Service string `pulumi:"service"`
}

Specifies the audit configuration for a service. The configuration determines which permission types are logged, and what identities, if any, are exempted from logging. An AuditConfig must have one or more AuditLogConfigs. If there are AuditConfigs for both `allServices` and a specific service, the union of the two AuditConfigs is used for that service: the log_types specified in each AuditConfig are enabled, and the exempted_members in each AuditLogConfig are exempted. Example Policy with multiple AuditConfigs: { "audit_configs": [ { "service": "allServices", "audit_log_configs": [ { "log_type": "DATA_READ", "exempted_members": [ "user:jose@example.com" ] }, { "log_type": "DATA_WRITE" }, { "log_type": "ADMIN_READ" } ] }, { "service": "sampleservice.googleapis.com", "audit_log_configs": [ { "log_type": "DATA_READ" }, { "log_type": "DATA_WRITE", "exempted_members": [ "user:aliya@example.com" ] } ] } ] } For sampleservice, this policy enables DATA_READ, DATA_WRITE and ADMIN_READ logging. It also exempts `jose@example.com` from DATA_READ logging, and `aliya@example.com` from DATA_WRITE logging.

type ApigatewayAuditConfigResponseArrayOutput

type ApigatewayAuditConfigResponseArrayOutput struct{ *pulumi.OutputState }

func (ApigatewayAuditConfigResponseArrayOutput) ElementType

func (ApigatewayAuditConfigResponseArrayOutput) Index

func (ApigatewayAuditConfigResponseArrayOutput) ToApigatewayAuditConfigResponseArrayOutput

func (o ApigatewayAuditConfigResponseArrayOutput) ToApigatewayAuditConfigResponseArrayOutput() ApigatewayAuditConfigResponseArrayOutput

func (ApigatewayAuditConfigResponseArrayOutput) ToApigatewayAuditConfigResponseArrayOutputWithContext

func (o ApigatewayAuditConfigResponseArrayOutput) ToApigatewayAuditConfigResponseArrayOutputWithContext(ctx context.Context) ApigatewayAuditConfigResponseArrayOutput

type ApigatewayAuditConfigResponseOutput

type ApigatewayAuditConfigResponseOutput struct{ *pulumi.OutputState }

Specifies the audit configuration for a service. The configuration determines which permission types are logged, and what identities, if any, are exempted from logging. An AuditConfig must have one or more AuditLogConfigs. If there are AuditConfigs for both `allServices` and a specific service, the union of the two AuditConfigs is used for that service: the log_types specified in each AuditConfig are enabled, and the exempted_members in each AuditLogConfig are exempted. Example Policy with multiple AuditConfigs: { "audit_configs": [ { "service": "allServices", "audit_log_configs": [ { "log_type": "DATA_READ", "exempted_members": [ "user:jose@example.com" ] }, { "log_type": "DATA_WRITE" }, { "log_type": "ADMIN_READ" } ] }, { "service": "sampleservice.googleapis.com", "audit_log_configs": [ { "log_type": "DATA_READ" }, { "log_type": "DATA_WRITE", "exempted_members": [ "user:aliya@example.com" ] } ] } ] } For sampleservice, this policy enables DATA_READ, DATA_WRITE and ADMIN_READ logging. It also exempts `jose@example.com` from DATA_READ logging, and `aliya@example.com` from DATA_WRITE logging.

func (ApigatewayAuditConfigResponseOutput) AuditLogConfigs

The configuration for logging of each type of permission.

func (ApigatewayAuditConfigResponseOutput) ElementType

func (ApigatewayAuditConfigResponseOutput) Service

Specifies a service that will be enabled for audit logging. For example, `storage.googleapis.com`, `cloudsql.googleapis.com`. `allServices` is a special value that covers all services.

func (ApigatewayAuditConfigResponseOutput) ToApigatewayAuditConfigResponseOutput

func (o ApigatewayAuditConfigResponseOutput) ToApigatewayAuditConfigResponseOutput() ApigatewayAuditConfigResponseOutput

func (ApigatewayAuditConfigResponseOutput) ToApigatewayAuditConfigResponseOutputWithContext

func (o ApigatewayAuditConfigResponseOutput) ToApigatewayAuditConfigResponseOutputWithContext(ctx context.Context) ApigatewayAuditConfigResponseOutput

type ApigatewayAuditLogConfig

type ApigatewayAuditLogConfig struct {
	// Specifies the identities that do not cause logging for this type of permission. Follows the same format of Binding.members.
	ExemptedMembers []string `pulumi:"exemptedMembers"`
	// The log type that this config enables.
	LogType *ApigatewayAuditLogConfigLogType `pulumi:"logType"`
}

Provides the configuration for logging a type of permissions. Example: { "audit_log_configs": [ { "log_type": "DATA_READ", "exempted_members": [ "user:jose@example.com" ] }, { "log_type": "DATA_WRITE" } ] } This enables 'DATA_READ' and 'DATA_WRITE' logging, while exempting jose@example.com from DATA_READ logging.

type ApigatewayAuditLogConfigArgs

type ApigatewayAuditLogConfigArgs struct {
	// Specifies the identities that do not cause logging for this type of permission. Follows the same format of Binding.members.
	ExemptedMembers pulumi.StringArrayInput `pulumi:"exemptedMembers"`
	// The log type that this config enables.
	LogType ApigatewayAuditLogConfigLogTypePtrInput `pulumi:"logType"`
}

Provides the configuration for logging a type of permissions. Example: { "audit_log_configs": [ { "log_type": "DATA_READ", "exempted_members": [ "user:jose@example.com" ] }, { "log_type": "DATA_WRITE" } ] } This enables 'DATA_READ' and 'DATA_WRITE' logging, while exempting jose@example.com from DATA_READ logging.

func (ApigatewayAuditLogConfigArgs) ElementType

func (ApigatewayAuditLogConfigArgs) ToApigatewayAuditLogConfigOutput

func (i ApigatewayAuditLogConfigArgs) ToApigatewayAuditLogConfigOutput() ApigatewayAuditLogConfigOutput

func (ApigatewayAuditLogConfigArgs) ToApigatewayAuditLogConfigOutputWithContext

func (i ApigatewayAuditLogConfigArgs) ToApigatewayAuditLogConfigOutputWithContext(ctx context.Context) ApigatewayAuditLogConfigOutput

type ApigatewayAuditLogConfigArray

type ApigatewayAuditLogConfigArray []ApigatewayAuditLogConfigInput

func (ApigatewayAuditLogConfigArray) ElementType

func (ApigatewayAuditLogConfigArray) ToApigatewayAuditLogConfigArrayOutput

func (i ApigatewayAuditLogConfigArray) ToApigatewayAuditLogConfigArrayOutput() ApigatewayAuditLogConfigArrayOutput

func (ApigatewayAuditLogConfigArray) ToApigatewayAuditLogConfigArrayOutputWithContext

func (i ApigatewayAuditLogConfigArray) ToApigatewayAuditLogConfigArrayOutputWithContext(ctx context.Context) ApigatewayAuditLogConfigArrayOutput

type ApigatewayAuditLogConfigArrayInput

type ApigatewayAuditLogConfigArrayInput interface {
	pulumi.Input

	ToApigatewayAuditLogConfigArrayOutput() ApigatewayAuditLogConfigArrayOutput
	ToApigatewayAuditLogConfigArrayOutputWithContext(context.Context) ApigatewayAuditLogConfigArrayOutput
}

ApigatewayAuditLogConfigArrayInput is an input type that accepts ApigatewayAuditLogConfigArray and ApigatewayAuditLogConfigArrayOutput values. You can construct a concrete instance of `ApigatewayAuditLogConfigArrayInput` via:

ApigatewayAuditLogConfigArray{ ApigatewayAuditLogConfigArgs{...} }

type ApigatewayAuditLogConfigArrayOutput

type ApigatewayAuditLogConfigArrayOutput struct{ *pulumi.OutputState }

func (ApigatewayAuditLogConfigArrayOutput) ElementType

func (ApigatewayAuditLogConfigArrayOutput) Index

func (ApigatewayAuditLogConfigArrayOutput) ToApigatewayAuditLogConfigArrayOutput

func (o ApigatewayAuditLogConfigArrayOutput) ToApigatewayAuditLogConfigArrayOutput() ApigatewayAuditLogConfigArrayOutput

func (ApigatewayAuditLogConfigArrayOutput) ToApigatewayAuditLogConfigArrayOutputWithContext

func (o ApigatewayAuditLogConfigArrayOutput) ToApigatewayAuditLogConfigArrayOutputWithContext(ctx context.Context) ApigatewayAuditLogConfigArrayOutput

type ApigatewayAuditLogConfigInput

type ApigatewayAuditLogConfigInput interface {
	pulumi.Input

	ToApigatewayAuditLogConfigOutput() ApigatewayAuditLogConfigOutput
	ToApigatewayAuditLogConfigOutputWithContext(context.Context) ApigatewayAuditLogConfigOutput
}

ApigatewayAuditLogConfigInput is an input type that accepts ApigatewayAuditLogConfigArgs and ApigatewayAuditLogConfigOutput values. You can construct a concrete instance of `ApigatewayAuditLogConfigInput` via:

ApigatewayAuditLogConfigArgs{...}

type ApigatewayAuditLogConfigLogType added in v0.4.0

type ApigatewayAuditLogConfigLogType string

The log type that this config enables.

func (ApigatewayAuditLogConfigLogType) ElementType added in v0.4.0

func (ApigatewayAuditLogConfigLogType) ToApigatewayAuditLogConfigLogTypeOutput added in v0.6.0

func (e ApigatewayAuditLogConfigLogType) ToApigatewayAuditLogConfigLogTypeOutput() ApigatewayAuditLogConfigLogTypeOutput

func (ApigatewayAuditLogConfigLogType) ToApigatewayAuditLogConfigLogTypeOutputWithContext added in v0.6.0

func (e ApigatewayAuditLogConfigLogType) ToApigatewayAuditLogConfigLogTypeOutputWithContext(ctx context.Context) ApigatewayAuditLogConfigLogTypeOutput

func (ApigatewayAuditLogConfigLogType) ToApigatewayAuditLogConfigLogTypePtrOutput added in v0.6.0

func (e ApigatewayAuditLogConfigLogType) ToApigatewayAuditLogConfigLogTypePtrOutput() ApigatewayAuditLogConfigLogTypePtrOutput

func (ApigatewayAuditLogConfigLogType) ToApigatewayAuditLogConfigLogTypePtrOutputWithContext added in v0.6.0

func (e ApigatewayAuditLogConfigLogType) ToApigatewayAuditLogConfigLogTypePtrOutputWithContext(ctx context.Context) ApigatewayAuditLogConfigLogTypePtrOutput

func (ApigatewayAuditLogConfigLogType) ToStringOutput added in v0.4.0

func (ApigatewayAuditLogConfigLogType) ToStringOutputWithContext added in v0.4.0

func (e ApigatewayAuditLogConfigLogType) ToStringOutputWithContext(ctx context.Context) pulumi.StringOutput

func (ApigatewayAuditLogConfigLogType) ToStringPtrOutput added in v0.4.0

func (ApigatewayAuditLogConfigLogType) ToStringPtrOutputWithContext added in v0.4.0

func (e ApigatewayAuditLogConfigLogType) ToStringPtrOutputWithContext(ctx context.Context) pulumi.StringPtrOutput

type ApigatewayAuditLogConfigLogTypeInput added in v0.6.0

type ApigatewayAuditLogConfigLogTypeInput interface {
	pulumi.Input

	ToApigatewayAuditLogConfigLogTypeOutput() ApigatewayAuditLogConfigLogTypeOutput
	ToApigatewayAuditLogConfigLogTypeOutputWithContext(context.Context) ApigatewayAuditLogConfigLogTypeOutput
}

ApigatewayAuditLogConfigLogTypeInput is an input type that accepts ApigatewayAuditLogConfigLogTypeArgs and ApigatewayAuditLogConfigLogTypeOutput values. You can construct a concrete instance of `ApigatewayAuditLogConfigLogTypeInput` via:

ApigatewayAuditLogConfigLogTypeArgs{...}

type ApigatewayAuditLogConfigLogTypeOutput added in v0.6.0

type ApigatewayAuditLogConfigLogTypeOutput struct{ *pulumi.OutputState }

func (ApigatewayAuditLogConfigLogTypeOutput) ElementType added in v0.6.0

func (ApigatewayAuditLogConfigLogTypeOutput) ToApigatewayAuditLogConfigLogTypeOutput added in v0.6.0

func (o ApigatewayAuditLogConfigLogTypeOutput) ToApigatewayAuditLogConfigLogTypeOutput() ApigatewayAuditLogConfigLogTypeOutput

func (ApigatewayAuditLogConfigLogTypeOutput) ToApigatewayAuditLogConfigLogTypeOutputWithContext added in v0.6.0

func (o ApigatewayAuditLogConfigLogTypeOutput) ToApigatewayAuditLogConfigLogTypeOutputWithContext(ctx context.Context) ApigatewayAuditLogConfigLogTypeOutput

func (ApigatewayAuditLogConfigLogTypeOutput) ToApigatewayAuditLogConfigLogTypePtrOutput added in v0.6.0

func (o ApigatewayAuditLogConfigLogTypeOutput) ToApigatewayAuditLogConfigLogTypePtrOutput() ApigatewayAuditLogConfigLogTypePtrOutput

func (ApigatewayAuditLogConfigLogTypeOutput) ToApigatewayAuditLogConfigLogTypePtrOutputWithContext added in v0.6.0

func (o ApigatewayAuditLogConfigLogTypeOutput) ToApigatewayAuditLogConfigLogTypePtrOutputWithContext(ctx context.Context) ApigatewayAuditLogConfigLogTypePtrOutput

func (ApigatewayAuditLogConfigLogTypeOutput) ToStringOutput added in v0.6.0

func (ApigatewayAuditLogConfigLogTypeOutput) ToStringOutputWithContext added in v0.6.0

func (o ApigatewayAuditLogConfigLogTypeOutput) ToStringOutputWithContext(ctx context.Context) pulumi.StringOutput

func (ApigatewayAuditLogConfigLogTypeOutput) ToStringPtrOutput added in v0.6.0

func (ApigatewayAuditLogConfigLogTypeOutput) ToStringPtrOutputWithContext added in v0.6.0

func (o ApigatewayAuditLogConfigLogTypeOutput) ToStringPtrOutputWithContext(ctx context.Context) pulumi.StringPtrOutput

type ApigatewayAuditLogConfigLogTypePtrInput added in v0.6.0

type ApigatewayAuditLogConfigLogTypePtrInput interface {
	pulumi.Input

	ToApigatewayAuditLogConfigLogTypePtrOutput() ApigatewayAuditLogConfigLogTypePtrOutput
	ToApigatewayAuditLogConfigLogTypePtrOutputWithContext(context.Context) ApigatewayAuditLogConfigLogTypePtrOutput
}

func ApigatewayAuditLogConfigLogTypePtr added in v0.6.0

func ApigatewayAuditLogConfigLogTypePtr(v string) ApigatewayAuditLogConfigLogTypePtrInput

type ApigatewayAuditLogConfigLogTypePtrOutput added in v0.6.0

type ApigatewayAuditLogConfigLogTypePtrOutput struct{ *pulumi.OutputState }

func (ApigatewayAuditLogConfigLogTypePtrOutput) Elem added in v0.6.0

func (ApigatewayAuditLogConfigLogTypePtrOutput) ElementType added in v0.6.0

func (ApigatewayAuditLogConfigLogTypePtrOutput) ToApigatewayAuditLogConfigLogTypePtrOutput added in v0.6.0

func (o ApigatewayAuditLogConfigLogTypePtrOutput) ToApigatewayAuditLogConfigLogTypePtrOutput() ApigatewayAuditLogConfigLogTypePtrOutput

func (ApigatewayAuditLogConfigLogTypePtrOutput) ToApigatewayAuditLogConfigLogTypePtrOutputWithContext added in v0.6.0

func (o ApigatewayAuditLogConfigLogTypePtrOutput) ToApigatewayAuditLogConfigLogTypePtrOutputWithContext(ctx context.Context) ApigatewayAuditLogConfigLogTypePtrOutput

func (ApigatewayAuditLogConfigLogTypePtrOutput) ToStringPtrOutput added in v0.6.0

func (ApigatewayAuditLogConfigLogTypePtrOutput) ToStringPtrOutputWithContext added in v0.6.0

type ApigatewayAuditLogConfigOutput

type ApigatewayAuditLogConfigOutput struct{ *pulumi.OutputState }

Provides the configuration for logging a type of permissions. Example: { "audit_log_configs": [ { "log_type": "DATA_READ", "exempted_members": [ "user:jose@example.com" ] }, { "log_type": "DATA_WRITE" } ] } This enables 'DATA_READ' and 'DATA_WRITE' logging, while exempting jose@example.com from DATA_READ logging.

func (ApigatewayAuditLogConfigOutput) ElementType

func (ApigatewayAuditLogConfigOutput) ExemptedMembers

Specifies the identities that do not cause logging for this type of permission. Follows the same format of Binding.members.

func (ApigatewayAuditLogConfigOutput) LogType

The log type that this config enables.

func (ApigatewayAuditLogConfigOutput) ToApigatewayAuditLogConfigOutput

func (o ApigatewayAuditLogConfigOutput) ToApigatewayAuditLogConfigOutput() ApigatewayAuditLogConfigOutput

func (ApigatewayAuditLogConfigOutput) ToApigatewayAuditLogConfigOutputWithContext

func (o ApigatewayAuditLogConfigOutput) ToApigatewayAuditLogConfigOutputWithContext(ctx context.Context) ApigatewayAuditLogConfigOutput

type ApigatewayAuditLogConfigResponse

type ApigatewayAuditLogConfigResponse struct {
	// Specifies the identities that do not cause logging for this type of permission. Follows the same format of Binding.members.
	ExemptedMembers []string `pulumi:"exemptedMembers"`
	// The log type that this config enables.
	LogType string `pulumi:"logType"`
}

Provides the configuration for logging a type of permissions. Example: { "audit_log_configs": [ { "log_type": "DATA_READ", "exempted_members": [ "user:jose@example.com" ] }, { "log_type": "DATA_WRITE" } ] } This enables 'DATA_READ' and 'DATA_WRITE' logging, while exempting jose@example.com from DATA_READ logging.

type ApigatewayAuditLogConfigResponseArrayOutput

type ApigatewayAuditLogConfigResponseArrayOutput struct{ *pulumi.OutputState }

func (ApigatewayAuditLogConfigResponseArrayOutput) ElementType

func (ApigatewayAuditLogConfigResponseArrayOutput) Index

func (ApigatewayAuditLogConfigResponseArrayOutput) ToApigatewayAuditLogConfigResponseArrayOutput

func (o ApigatewayAuditLogConfigResponseArrayOutput) ToApigatewayAuditLogConfigResponseArrayOutput() ApigatewayAuditLogConfigResponseArrayOutput

func (ApigatewayAuditLogConfigResponseArrayOutput) ToApigatewayAuditLogConfigResponseArrayOutputWithContext

func (o ApigatewayAuditLogConfigResponseArrayOutput) ToApigatewayAuditLogConfigResponseArrayOutputWithContext(ctx context.Context) ApigatewayAuditLogConfigResponseArrayOutput

type ApigatewayAuditLogConfigResponseOutput

type ApigatewayAuditLogConfigResponseOutput struct{ *pulumi.OutputState }

Provides the configuration for logging a type of permissions. Example: { "audit_log_configs": [ { "log_type": "DATA_READ", "exempted_members": [ "user:jose@example.com" ] }, { "log_type": "DATA_WRITE" } ] } This enables 'DATA_READ' and 'DATA_WRITE' logging, while exempting jose@example.com from DATA_READ logging.

func (ApigatewayAuditLogConfigResponseOutput) ElementType

func (ApigatewayAuditLogConfigResponseOutput) ExemptedMembers

Specifies the identities that do not cause logging for this type of permission. Follows the same format of Binding.members.

func (ApigatewayAuditLogConfigResponseOutput) LogType

The log type that this config enables.

func (ApigatewayAuditLogConfigResponseOutput) ToApigatewayAuditLogConfigResponseOutput

func (o ApigatewayAuditLogConfigResponseOutput) ToApigatewayAuditLogConfigResponseOutput() ApigatewayAuditLogConfigResponseOutput

func (ApigatewayAuditLogConfigResponseOutput) ToApigatewayAuditLogConfigResponseOutputWithContext

func (o ApigatewayAuditLogConfigResponseOutput) ToApigatewayAuditLogConfigResponseOutputWithContext(ctx context.Context) ApigatewayAuditLogConfigResponseOutput

type ApigatewayBackendConfig

type ApigatewayBackendConfig struct {
	// Google Cloud IAM service account used to sign OIDC tokens for backends that have authentication configured (https://cloud.google.com/service-infrastructure/docs/service-management/reference/rest/v1/services.configs#backend). This may either be the Service Account's email (i.e. "{ACCOUNT_ID}@{PROJECT}.iam.gserviceaccount.com") or its full resource name (i.e. "projects/{PROJECT}/accounts/{UNIQUE_ID}"). This is most often used when the backend is a GCP resource such as a Cloud Run Service or an IAP-secured service. Note that this token is always sent as an authorization header bearer token. The audience of the OIDC token is configured in the associated Service Config in the BackendRule option (https://github.com/googleapis/googleapis/blob/master/google/api/backend.proto#L125).
	GoogleServiceAccount *string `pulumi:"googleServiceAccount"`
}

Configuration for all backends.

type ApigatewayBackendConfigArgs

type ApigatewayBackendConfigArgs struct {
	// Google Cloud IAM service account used to sign OIDC tokens for backends that have authentication configured (https://cloud.google.com/service-infrastructure/docs/service-management/reference/rest/v1/services.configs#backend). This may either be the Service Account's email (i.e. "{ACCOUNT_ID}@{PROJECT}.iam.gserviceaccount.com") or its full resource name (i.e. "projects/{PROJECT}/accounts/{UNIQUE_ID}"). This is most often used when the backend is a GCP resource such as a Cloud Run Service or an IAP-secured service. Note that this token is always sent as an authorization header bearer token. The audience of the OIDC token is configured in the associated Service Config in the BackendRule option (https://github.com/googleapis/googleapis/blob/master/google/api/backend.proto#L125).
	GoogleServiceAccount pulumi.StringPtrInput `pulumi:"googleServiceAccount"`
}

Configuration for all backends.

func (ApigatewayBackendConfigArgs) ElementType

func (ApigatewayBackendConfigArgs) ToApigatewayBackendConfigOutput

func (i ApigatewayBackendConfigArgs) ToApigatewayBackendConfigOutput() ApigatewayBackendConfigOutput

func (ApigatewayBackendConfigArgs) ToApigatewayBackendConfigOutputWithContext

func (i ApigatewayBackendConfigArgs) ToApigatewayBackendConfigOutputWithContext(ctx context.Context) ApigatewayBackendConfigOutput

func (ApigatewayBackendConfigArgs) ToApigatewayBackendConfigPtrOutput

func (i ApigatewayBackendConfigArgs) ToApigatewayBackendConfigPtrOutput() ApigatewayBackendConfigPtrOutput

func (ApigatewayBackendConfigArgs) ToApigatewayBackendConfigPtrOutputWithContext

func (i ApigatewayBackendConfigArgs) ToApigatewayBackendConfigPtrOutputWithContext(ctx context.Context) ApigatewayBackendConfigPtrOutput

type ApigatewayBackendConfigInput

type ApigatewayBackendConfigInput interface {
	pulumi.Input

	ToApigatewayBackendConfigOutput() ApigatewayBackendConfigOutput
	ToApigatewayBackendConfigOutputWithContext(context.Context) ApigatewayBackendConfigOutput
}

ApigatewayBackendConfigInput is an input type that accepts ApigatewayBackendConfigArgs and ApigatewayBackendConfigOutput values. You can construct a concrete instance of `ApigatewayBackendConfigInput` via:

ApigatewayBackendConfigArgs{...}

type ApigatewayBackendConfigOutput

type ApigatewayBackendConfigOutput struct{ *pulumi.OutputState }

Configuration for all backends.

func (ApigatewayBackendConfigOutput) ElementType

func (ApigatewayBackendConfigOutput) GoogleServiceAccount

func (o ApigatewayBackendConfigOutput) GoogleServiceAccount() pulumi.StringPtrOutput

Google Cloud IAM service account used to sign OIDC tokens for backends that have authentication configured (https://cloud.google.com/service-infrastructure/docs/service-management/reference/rest/v1/services.configs#backend). This may either be the Service Account's email (i.e. "{ACCOUNT_ID}@{PROJECT}.iam.gserviceaccount.com") or its full resource name (i.e. "projects/{PROJECT}/accounts/{UNIQUE_ID}"). This is most often used when the backend is a GCP resource such as a Cloud Run Service or an IAP-secured service. Note that this token is always sent as an authorization header bearer token. The audience of the OIDC token is configured in the associated Service Config in the BackendRule option (https://github.com/googleapis/googleapis/blob/master/google/api/backend.proto#L125).

func (ApigatewayBackendConfigOutput) ToApigatewayBackendConfigOutput

func (o ApigatewayBackendConfigOutput) ToApigatewayBackendConfigOutput() ApigatewayBackendConfigOutput

func (ApigatewayBackendConfigOutput) ToApigatewayBackendConfigOutputWithContext

func (o ApigatewayBackendConfigOutput) ToApigatewayBackendConfigOutputWithContext(ctx context.Context) ApigatewayBackendConfigOutput

func (ApigatewayBackendConfigOutput) ToApigatewayBackendConfigPtrOutput

func (o ApigatewayBackendConfigOutput) ToApigatewayBackendConfigPtrOutput() ApigatewayBackendConfigPtrOutput

func (ApigatewayBackendConfigOutput) ToApigatewayBackendConfigPtrOutputWithContext

func (o ApigatewayBackendConfigOutput) ToApigatewayBackendConfigPtrOutputWithContext(ctx context.Context) ApigatewayBackendConfigPtrOutput

type ApigatewayBackendConfigPtrInput

type ApigatewayBackendConfigPtrInput interface {
	pulumi.Input

	ToApigatewayBackendConfigPtrOutput() ApigatewayBackendConfigPtrOutput
	ToApigatewayBackendConfigPtrOutputWithContext(context.Context) ApigatewayBackendConfigPtrOutput
}

ApigatewayBackendConfigPtrInput is an input type that accepts ApigatewayBackendConfigArgs, ApigatewayBackendConfigPtr and ApigatewayBackendConfigPtrOutput values. You can construct a concrete instance of `ApigatewayBackendConfigPtrInput` via:

        ApigatewayBackendConfigArgs{...}

or:

        nil

type ApigatewayBackendConfigPtrOutput

type ApigatewayBackendConfigPtrOutput struct{ *pulumi.OutputState }

func (ApigatewayBackendConfigPtrOutput) Elem

func (ApigatewayBackendConfigPtrOutput) ElementType

func (ApigatewayBackendConfigPtrOutput) GoogleServiceAccount

func (o ApigatewayBackendConfigPtrOutput) GoogleServiceAccount() pulumi.StringPtrOutput

Google Cloud IAM service account used to sign OIDC tokens for backends that have authentication configured (https://cloud.google.com/service-infrastructure/docs/service-management/reference/rest/v1/services.configs#backend). This may either be the Service Account's email (i.e. "{ACCOUNT_ID}@{PROJECT}.iam.gserviceaccount.com") or its full resource name (i.e. "projects/{PROJECT}/accounts/{UNIQUE_ID}"). This is most often used when the backend is a GCP resource such as a Cloud Run Service or an IAP-secured service. Note that this token is always sent as an authorization header bearer token. The audience of the OIDC token is configured in the associated Service Config in the BackendRule option (https://github.com/googleapis/googleapis/blob/master/google/api/backend.proto#L125).

func (ApigatewayBackendConfigPtrOutput) ToApigatewayBackendConfigPtrOutput

func (o ApigatewayBackendConfigPtrOutput) ToApigatewayBackendConfigPtrOutput() ApigatewayBackendConfigPtrOutput

func (ApigatewayBackendConfigPtrOutput) ToApigatewayBackendConfigPtrOutputWithContext

func (o ApigatewayBackendConfigPtrOutput) ToApigatewayBackendConfigPtrOutputWithContext(ctx context.Context) ApigatewayBackendConfigPtrOutput

type ApigatewayBackendConfigResponse

type ApigatewayBackendConfigResponse struct {
	// Google Cloud IAM service account used to sign OIDC tokens for backends that have authentication configured (https://cloud.google.com/service-infrastructure/docs/service-management/reference/rest/v1/services.configs#backend). This may either be the Service Account's email (i.e. "{ACCOUNT_ID}@{PROJECT}.iam.gserviceaccount.com") or its full resource name (i.e. "projects/{PROJECT}/accounts/{UNIQUE_ID}"). This is most often used when the backend is a GCP resource such as a Cloud Run Service or an IAP-secured service. Note that this token is always sent as an authorization header bearer token. The audience of the OIDC token is configured in the associated Service Config in the BackendRule option (https://github.com/googleapis/googleapis/blob/master/google/api/backend.proto#L125).
	GoogleServiceAccount string `pulumi:"googleServiceAccount"`
}

Configuration for all backends.

type ApigatewayBackendConfigResponseOutput

type ApigatewayBackendConfigResponseOutput struct{ *pulumi.OutputState }

Configuration for all backends.

func (ApigatewayBackendConfigResponseOutput) ElementType

func (ApigatewayBackendConfigResponseOutput) GoogleServiceAccount

Google Cloud IAM service account used to sign OIDC tokens for backends that have authentication configured (https://cloud.google.com/service-infrastructure/docs/service-management/reference/rest/v1/services.configs#backend). This may either be the Service Account's email (i.e. "{ACCOUNT_ID}@{PROJECT}.iam.gserviceaccount.com") or its full resource name (i.e. "projects/{PROJECT}/accounts/{UNIQUE_ID}"). This is most often used when the backend is a GCP resource such as a Cloud Run Service or an IAP-secured service. Note that this token is always sent as an authorization header bearer token. The audience of the OIDC token is configured in the associated Service Config in the BackendRule option (https://github.com/googleapis/googleapis/blob/master/google/api/backend.proto#L125).

func (ApigatewayBackendConfigResponseOutput) ToApigatewayBackendConfigResponseOutput

func (o ApigatewayBackendConfigResponseOutput) ToApigatewayBackendConfigResponseOutput() ApigatewayBackendConfigResponseOutput

func (ApigatewayBackendConfigResponseOutput) ToApigatewayBackendConfigResponseOutputWithContext

func (o ApigatewayBackendConfigResponseOutput) ToApigatewayBackendConfigResponseOutputWithContext(ctx context.Context) ApigatewayBackendConfigResponseOutput

type ApigatewayBinding

type ApigatewayBinding struct {
	// The condition that is associated with this binding. If the condition evaluates to `true`, then this binding applies to the current request. If the condition evaluates to `false`, then this binding does not apply to the current request. However, a different role binding might grant the same role to one or more of the principals in this binding. To learn which resources support conditions in their IAM policies, see the [IAM documentation](https://cloud.google.com/iam/help/conditions/resource-policies).
	Condition *ApigatewayExpr `pulumi:"condition"`
	// Specifies the principals requesting access for a Google Cloud resource. `members` can have the following values: * `allUsers`: A special identifier that represents anyone who is on the internet; with or without a Google account. * `allAuthenticatedUsers`: A special identifier that represents anyone who is authenticated with a Google account or a service account. Does not include identities that come from external identity providers (IdPs) through identity federation. * `user:{emailid}`: An email address that represents a specific Google account. For example, `alice@example.com` . * `serviceAccount:{emailid}`: An email address that represents a Google service account. For example, `my-other-app@appspot.gserviceaccount.com`. * `serviceAccount:{projectid}.svc.id.goog[{namespace}/{kubernetes-sa}]`: An identifier for a [Kubernetes service account](https://cloud.google.com/kubernetes-engine/docs/how-to/kubernetes-service-accounts). For example, `my-project.svc.id.goog[my-namespace/my-kubernetes-sa]`. * `group:{emailid}`: An email address that represents a Google group. For example, `admins@example.com`. * `domain:{domain}`: The G Suite domain (primary) that represents all the users of that domain. For example, `google.com` or `example.com`. * `deleted:user:{emailid}?uid={uniqueid}`: An email address (plus unique identifier) representing a user that has been recently deleted. For example, `alice@example.com?uid=123456789012345678901`. If the user is recovered, this value reverts to `user:{emailid}` and the recovered user retains the role in the binding. * `deleted:serviceAccount:{emailid}?uid={uniqueid}`: An email address (plus unique identifier) representing a service account that has been recently deleted. For example, `my-other-app@appspot.gserviceaccount.com?uid=123456789012345678901`. If the service account is undeleted, this value reverts to `serviceAccount:{emailid}` and the undeleted service account retains the role in the binding. * `deleted:group:{emailid}?uid={uniqueid}`: An email address (plus unique identifier) representing a Google group that has been recently deleted. For example, `admins@example.com?uid=123456789012345678901`. If the group is recovered, this value reverts to `group:{emailid}` and the recovered group retains the role in the binding.
	Members []string `pulumi:"members"`
	// Role that is assigned to the list of `members`, or principals. For example, `roles/viewer`, `roles/editor`, or `roles/owner`.
	Role *string `pulumi:"role"`
}

Associates `members`, or principals, with a `role`.

type ApigatewayBindingArgs

type ApigatewayBindingArgs struct {
	// The condition that is associated with this binding. If the condition evaluates to `true`, then this binding applies to the current request. If the condition evaluates to `false`, then this binding does not apply to the current request. However, a different role binding might grant the same role to one or more of the principals in this binding. To learn which resources support conditions in their IAM policies, see the [IAM documentation](https://cloud.google.com/iam/help/conditions/resource-policies).
	Condition ApigatewayExprPtrInput `pulumi:"condition"`
	// Specifies the principals requesting access for a Google Cloud resource. `members` can have the following values: * `allUsers`: A special identifier that represents anyone who is on the internet; with or without a Google account. * `allAuthenticatedUsers`: A special identifier that represents anyone who is authenticated with a Google account or a service account. Does not include identities that come from external identity providers (IdPs) through identity federation. * `user:{emailid}`: An email address that represents a specific Google account. For example, `alice@example.com` . * `serviceAccount:{emailid}`: An email address that represents a Google service account. For example, `my-other-app@appspot.gserviceaccount.com`. * `serviceAccount:{projectid}.svc.id.goog[{namespace}/{kubernetes-sa}]`: An identifier for a [Kubernetes service account](https://cloud.google.com/kubernetes-engine/docs/how-to/kubernetes-service-accounts). For example, `my-project.svc.id.goog[my-namespace/my-kubernetes-sa]`. * `group:{emailid}`: An email address that represents a Google group. For example, `admins@example.com`. * `domain:{domain}`: The G Suite domain (primary) that represents all the users of that domain. For example, `google.com` or `example.com`. * `deleted:user:{emailid}?uid={uniqueid}`: An email address (plus unique identifier) representing a user that has been recently deleted. For example, `alice@example.com?uid=123456789012345678901`. If the user is recovered, this value reverts to `user:{emailid}` and the recovered user retains the role in the binding. * `deleted:serviceAccount:{emailid}?uid={uniqueid}`: An email address (plus unique identifier) representing a service account that has been recently deleted. For example, `my-other-app@appspot.gserviceaccount.com?uid=123456789012345678901`. If the service account is undeleted, this value reverts to `serviceAccount:{emailid}` and the undeleted service account retains the role in the binding. * `deleted:group:{emailid}?uid={uniqueid}`: An email address (plus unique identifier) representing a Google group that has been recently deleted. For example, `admins@example.com?uid=123456789012345678901`. If the group is recovered, this value reverts to `group:{emailid}` and the recovered group retains the role in the binding.
	Members pulumi.StringArrayInput `pulumi:"members"`
	// Role that is assigned to the list of `members`, or principals. For example, `roles/viewer`, `roles/editor`, or `roles/owner`.
	Role pulumi.StringPtrInput `pulumi:"role"`
}

Associates `members`, or principals, with a `role`.

func (ApigatewayBindingArgs) ElementType

func (ApigatewayBindingArgs) ElementType() reflect.Type

func (ApigatewayBindingArgs) ToApigatewayBindingOutput

func (i ApigatewayBindingArgs) ToApigatewayBindingOutput() ApigatewayBindingOutput

func (ApigatewayBindingArgs) ToApigatewayBindingOutputWithContext

func (i ApigatewayBindingArgs) ToApigatewayBindingOutputWithContext(ctx context.Context) ApigatewayBindingOutput

type ApigatewayBindingArray

type ApigatewayBindingArray []ApigatewayBindingInput

func (ApigatewayBindingArray) ElementType

func (ApigatewayBindingArray) ElementType() reflect.Type

func (ApigatewayBindingArray) ToApigatewayBindingArrayOutput

func (i ApigatewayBindingArray) ToApigatewayBindingArrayOutput() ApigatewayBindingArrayOutput

func (ApigatewayBindingArray) ToApigatewayBindingArrayOutputWithContext

func (i ApigatewayBindingArray) ToApigatewayBindingArrayOutputWithContext(ctx context.Context) ApigatewayBindingArrayOutput

type ApigatewayBindingArrayInput

type ApigatewayBindingArrayInput interface {
	pulumi.Input

	ToApigatewayBindingArrayOutput() ApigatewayBindingArrayOutput
	ToApigatewayBindingArrayOutputWithContext(context.Context) ApigatewayBindingArrayOutput
}

ApigatewayBindingArrayInput is an input type that accepts ApigatewayBindingArray and ApigatewayBindingArrayOutput values. You can construct a concrete instance of `ApigatewayBindingArrayInput` via:

ApigatewayBindingArray{ ApigatewayBindingArgs{...} }

type ApigatewayBindingArrayOutput

type ApigatewayBindingArrayOutput struct{ *pulumi.OutputState }

func (ApigatewayBindingArrayOutput) ElementType

func (ApigatewayBindingArrayOutput) Index

func (ApigatewayBindingArrayOutput) ToApigatewayBindingArrayOutput

func (o ApigatewayBindingArrayOutput) ToApigatewayBindingArrayOutput() ApigatewayBindingArrayOutput

func (ApigatewayBindingArrayOutput) ToApigatewayBindingArrayOutputWithContext

func (o ApigatewayBindingArrayOutput) ToApigatewayBindingArrayOutputWithContext(ctx context.Context) ApigatewayBindingArrayOutput

type ApigatewayBindingInput

type ApigatewayBindingInput interface {
	pulumi.Input

	ToApigatewayBindingOutput() ApigatewayBindingOutput
	ToApigatewayBindingOutputWithContext(context.Context) ApigatewayBindingOutput
}

ApigatewayBindingInput is an input type that accepts ApigatewayBindingArgs and ApigatewayBindingOutput values. You can construct a concrete instance of `ApigatewayBindingInput` via:

ApigatewayBindingArgs{...}

type ApigatewayBindingOutput

type ApigatewayBindingOutput struct{ *pulumi.OutputState }

Associates `members`, or principals, with a `role`.

func (ApigatewayBindingOutput) Condition

The condition that is associated with this binding. If the condition evaluates to `true`, then this binding applies to the current request. If the condition evaluates to `false`, then this binding does not apply to the current request. However, a different role binding might grant the same role to one or more of the principals in this binding. To learn which resources support conditions in their IAM policies, see the [IAM documentation](https://cloud.google.com/iam/help/conditions/resource-policies).

func (ApigatewayBindingOutput) ElementType

func (ApigatewayBindingOutput) ElementType() reflect.Type

func (ApigatewayBindingOutput) Members

Specifies the principals requesting access for a Google Cloud resource. `members` can have the following values: * `allUsers`: A special identifier that represents anyone who is on the internet; with or without a Google account. * `allAuthenticatedUsers`: A special identifier that represents anyone who is authenticated with a Google account or a service account. Does not include identities that come from external identity providers (IdPs) through identity federation. * `user:{emailid}`: An email address that represents a specific Google account. For example, `alice@example.com` . * `serviceAccount:{emailid}`: An email address that represents a Google service account. For example, `my-other-app@appspot.gserviceaccount.com`. * `serviceAccount:{projectid}.svc.id.goog[{namespace}/{kubernetes-sa}]`: An identifier for a [Kubernetes service account](https://cloud.google.com/kubernetes-engine/docs/how-to/kubernetes-service-accounts). For example, `my-project.svc.id.goog[my-namespace/my-kubernetes-sa]`. * `group:{emailid}`: An email address that represents a Google group. For example, `admins@example.com`. * `domain:{domain}`: The G Suite domain (primary) that represents all the users of that domain. For example, `google.com` or `example.com`. * `deleted:user:{emailid}?uid={uniqueid}`: An email address (plus unique identifier) representing a user that has been recently deleted. For example, `alice@example.com?uid=123456789012345678901`. If the user is recovered, this value reverts to `user:{emailid}` and the recovered user retains the role in the binding. * `deleted:serviceAccount:{emailid}?uid={uniqueid}`: An email address (plus unique identifier) representing a service account that has been recently deleted. For example, `my-other-app@appspot.gserviceaccount.com?uid=123456789012345678901`. If the service account is undeleted, this value reverts to `serviceAccount:{emailid}` and the undeleted service account retains the role in the binding. * `deleted:group:{emailid}?uid={uniqueid}`: An email address (plus unique identifier) representing a Google group that has been recently deleted. For example, `admins@example.com?uid=123456789012345678901`. If the group is recovered, this value reverts to `group:{emailid}` and the recovered group retains the role in the binding.

func (ApigatewayBindingOutput) Role

Role that is assigned to the list of `members`, or principals. For example, `roles/viewer`, `roles/editor`, or `roles/owner`.

func (ApigatewayBindingOutput) ToApigatewayBindingOutput

func (o ApigatewayBindingOutput) ToApigatewayBindingOutput() ApigatewayBindingOutput

func (ApigatewayBindingOutput) ToApigatewayBindingOutputWithContext

func (o ApigatewayBindingOutput) ToApigatewayBindingOutputWithContext(ctx context.Context) ApigatewayBindingOutput

type ApigatewayBindingResponse

type ApigatewayBindingResponse struct {
	// The condition that is associated with this binding. If the condition evaluates to `true`, then this binding applies to the current request. If the condition evaluates to `false`, then this binding does not apply to the current request. However, a different role binding might grant the same role to one or more of the principals in this binding. To learn which resources support conditions in their IAM policies, see the [IAM documentation](https://cloud.google.com/iam/help/conditions/resource-policies).
	Condition ApigatewayExprResponse `pulumi:"condition"`
	// Specifies the principals requesting access for a Google Cloud resource. `members` can have the following values: * `allUsers`: A special identifier that represents anyone who is on the internet; with or without a Google account. * `allAuthenticatedUsers`: A special identifier that represents anyone who is authenticated with a Google account or a service account. Does not include identities that come from external identity providers (IdPs) through identity federation. * `user:{emailid}`: An email address that represents a specific Google account. For example, `alice@example.com` . * `serviceAccount:{emailid}`: An email address that represents a Google service account. For example, `my-other-app@appspot.gserviceaccount.com`. * `serviceAccount:{projectid}.svc.id.goog[{namespace}/{kubernetes-sa}]`: An identifier for a [Kubernetes service account](https://cloud.google.com/kubernetes-engine/docs/how-to/kubernetes-service-accounts). For example, `my-project.svc.id.goog[my-namespace/my-kubernetes-sa]`. * `group:{emailid}`: An email address that represents a Google group. For example, `admins@example.com`. * `domain:{domain}`: The G Suite domain (primary) that represents all the users of that domain. For example, `google.com` or `example.com`. * `deleted:user:{emailid}?uid={uniqueid}`: An email address (plus unique identifier) representing a user that has been recently deleted. For example, `alice@example.com?uid=123456789012345678901`. If the user is recovered, this value reverts to `user:{emailid}` and the recovered user retains the role in the binding. * `deleted:serviceAccount:{emailid}?uid={uniqueid}`: An email address (plus unique identifier) representing a service account that has been recently deleted. For example, `my-other-app@appspot.gserviceaccount.com?uid=123456789012345678901`. If the service account is undeleted, this value reverts to `serviceAccount:{emailid}` and the undeleted service account retains the role in the binding. * `deleted:group:{emailid}?uid={uniqueid}`: An email address (plus unique identifier) representing a Google group that has been recently deleted. For example, `admins@example.com?uid=123456789012345678901`. If the group is recovered, this value reverts to `group:{emailid}` and the recovered group retains the role in the binding.
	Members []string `pulumi:"members"`
	// Role that is assigned to the list of `members`, or principals. For example, `roles/viewer`, `roles/editor`, or `roles/owner`.
	Role string `pulumi:"role"`
}

Associates `members`, or principals, with a `role`.

type ApigatewayBindingResponseArrayOutput

type ApigatewayBindingResponseArrayOutput struct{ *pulumi.OutputState }

func (ApigatewayBindingResponseArrayOutput) ElementType

func (ApigatewayBindingResponseArrayOutput) Index

func (ApigatewayBindingResponseArrayOutput) ToApigatewayBindingResponseArrayOutput

func (o ApigatewayBindingResponseArrayOutput) ToApigatewayBindingResponseArrayOutput() ApigatewayBindingResponseArrayOutput

func (ApigatewayBindingResponseArrayOutput) ToApigatewayBindingResponseArrayOutputWithContext

func (o ApigatewayBindingResponseArrayOutput) ToApigatewayBindingResponseArrayOutputWithContext(ctx context.Context) ApigatewayBindingResponseArrayOutput

type ApigatewayBindingResponseOutput

type ApigatewayBindingResponseOutput struct{ *pulumi.OutputState }

Associates `members`, or principals, with a `role`.

func (ApigatewayBindingResponseOutput) Condition

The condition that is associated with this binding. If the condition evaluates to `true`, then this binding applies to the current request. If the condition evaluates to `false`, then this binding does not apply to the current request. However, a different role binding might grant the same role to one or more of the principals in this binding. To learn which resources support conditions in their IAM policies, see the [IAM documentation](https://cloud.google.com/iam/help/conditions/resource-policies).

func (ApigatewayBindingResponseOutput) ElementType

func (ApigatewayBindingResponseOutput) Members

Specifies the principals requesting access for a Google Cloud resource. `members` can have the following values: * `allUsers`: A special identifier that represents anyone who is on the internet; with or without a Google account. * `allAuthenticatedUsers`: A special identifier that represents anyone who is authenticated with a Google account or a service account. Does not include identities that come from external identity providers (IdPs) through identity federation. * `user:{emailid}`: An email address that represents a specific Google account. For example, `alice@example.com` . * `serviceAccount:{emailid}`: An email address that represents a Google service account. For example, `my-other-app@appspot.gserviceaccount.com`. * `serviceAccount:{projectid}.svc.id.goog[{namespace}/{kubernetes-sa}]`: An identifier for a [Kubernetes service account](https://cloud.google.com/kubernetes-engine/docs/how-to/kubernetes-service-accounts). For example, `my-project.svc.id.goog[my-namespace/my-kubernetes-sa]`. * `group:{emailid}`: An email address that represents a Google group. For example, `admins@example.com`. * `domain:{domain}`: The G Suite domain (primary) that represents all the users of that domain. For example, `google.com` or `example.com`. * `deleted:user:{emailid}?uid={uniqueid}`: An email address (plus unique identifier) representing a user that has been recently deleted. For example, `alice@example.com?uid=123456789012345678901`. If the user is recovered, this value reverts to `user:{emailid}` and the recovered user retains the role in the binding. * `deleted:serviceAccount:{emailid}?uid={uniqueid}`: An email address (plus unique identifier) representing a service account that has been recently deleted. For example, `my-other-app@appspot.gserviceaccount.com?uid=123456789012345678901`. If the service account is undeleted, this value reverts to `serviceAccount:{emailid}` and the undeleted service account retains the role in the binding. * `deleted:group:{emailid}?uid={uniqueid}`: An email address (plus unique identifier) representing a Google group that has been recently deleted. For example, `admins@example.com?uid=123456789012345678901`. If the group is recovered, this value reverts to `group:{emailid}` and the recovered group retains the role in the binding.

func (ApigatewayBindingResponseOutput) Role

Role that is assigned to the list of `members`, or principals. For example, `roles/viewer`, `roles/editor`, or `roles/owner`.

func (ApigatewayBindingResponseOutput) ToApigatewayBindingResponseOutput

func (o ApigatewayBindingResponseOutput) ToApigatewayBindingResponseOutput() ApigatewayBindingResponseOutput

func (ApigatewayBindingResponseOutput) ToApigatewayBindingResponseOutputWithContext

func (o ApigatewayBindingResponseOutput) ToApigatewayBindingResponseOutputWithContext(ctx context.Context) ApigatewayBindingResponseOutput

type ApigatewayExpr

type ApigatewayExpr struct {
	// Optional. Description of the expression. This is a longer text which describes the expression, e.g. when hovered over it in a UI.
	Description *string `pulumi:"description"`
	// Textual representation of an expression in Common Expression Language syntax.
	Expression *string `pulumi:"expression"`
	// Optional. String indicating the location of the expression for error reporting, e.g. a file name and a position in the file.
	Location *string `pulumi:"location"`
	// Optional. Title for the expression, i.e. a short string describing its purpose. This can be used e.g. in UIs which allow to enter the expression.
	Title *string `pulumi:"title"`
}

Represents a textual expression in the Common Expression Language (CEL) syntax. CEL is a C-like expression language. The syntax and semantics of CEL are documented at https://github.com/google/cel-spec. Example (Comparison): title: "Summary size limit" description: "Determines if a summary is less than 100 chars" expression: "document.summary.size() < 100" Example (Equality): title: "Requestor is owner" description: "Determines if requestor is the document owner" expression: "document.owner == request.auth.claims.email" Example (Logic): title: "Public documents" description: "Determine whether the document should be publicly visible" expression: "document.type != 'private' && document.type != 'internal'" Example (Data Manipulation): title: "Notification string" description: "Create a notification string with a timestamp." expression: "'New message received at ' + string(document.create_time)" The exact variables and functions that may be referenced within an expression are determined by the service that evaluates it. See the service documentation for additional information.

type ApigatewayExprArgs

type ApigatewayExprArgs struct {
	// Optional. Description of the expression. This is a longer text which describes the expression, e.g. when hovered over it in a UI.
	Description pulumi.StringPtrInput `pulumi:"description"`
	// Textual representation of an expression in Common Expression Language syntax.
	Expression pulumi.StringPtrInput `pulumi:"expression"`
	// Optional. String indicating the location of the expression for error reporting, e.g. a file name and a position in the file.
	Location pulumi.StringPtrInput `pulumi:"location"`
	// Optional. Title for the expression, i.e. a short string describing its purpose. This can be used e.g. in UIs which allow to enter the expression.
	Title pulumi.StringPtrInput `pulumi:"title"`
}

Represents a textual expression in the Common Expression Language (CEL) syntax. CEL is a C-like expression language. The syntax and semantics of CEL are documented at https://github.com/google/cel-spec. Example (Comparison): title: "Summary size limit" description: "Determines if a summary is less than 100 chars" expression: "document.summary.size() < 100" Example (Equality): title: "Requestor is owner" description: "Determines if requestor is the document owner" expression: "document.owner == request.auth.claims.email" Example (Logic): title: "Public documents" description: "Determine whether the document should be publicly visible" expression: "document.type != 'private' && document.type != 'internal'" Example (Data Manipulation): title: "Notification string" description: "Create a notification string with a timestamp." expression: "'New message received at ' + string(document.create_time)" The exact variables and functions that may be referenced within an expression are determined by the service that evaluates it. See the service documentation for additional information.

func (ApigatewayExprArgs) ElementType

func (ApigatewayExprArgs) ElementType() reflect.Type

func (ApigatewayExprArgs) ToApigatewayExprOutput

func (i ApigatewayExprArgs) ToApigatewayExprOutput() ApigatewayExprOutput

func (ApigatewayExprArgs) ToApigatewayExprOutputWithContext

func (i ApigatewayExprArgs) ToApigatewayExprOutputWithContext(ctx context.Context) ApigatewayExprOutput

func (ApigatewayExprArgs) ToApigatewayExprPtrOutput

func (i ApigatewayExprArgs) ToApigatewayExprPtrOutput() ApigatewayExprPtrOutput

func (ApigatewayExprArgs) ToApigatewayExprPtrOutputWithContext

func (i ApigatewayExprArgs) ToApigatewayExprPtrOutputWithContext(ctx context.Context) ApigatewayExprPtrOutput

type ApigatewayExprInput

type ApigatewayExprInput interface {
	pulumi.Input

	ToApigatewayExprOutput() ApigatewayExprOutput
	ToApigatewayExprOutputWithContext(context.Context) ApigatewayExprOutput
}

ApigatewayExprInput is an input type that accepts ApigatewayExprArgs and ApigatewayExprOutput values. You can construct a concrete instance of `ApigatewayExprInput` via:

ApigatewayExprArgs{...}

type ApigatewayExprOutput

type ApigatewayExprOutput struct{ *pulumi.OutputState }

Represents a textual expression in the Common Expression Language (CEL) syntax. CEL is a C-like expression language. The syntax and semantics of CEL are documented at https://github.com/google/cel-spec. Example (Comparison): title: "Summary size limit" description: "Determines if a summary is less than 100 chars" expression: "document.summary.size() < 100" Example (Equality): title: "Requestor is owner" description: "Determines if requestor is the document owner" expression: "document.owner == request.auth.claims.email" Example (Logic): title: "Public documents" description: "Determine whether the document should be publicly visible" expression: "document.type != 'private' && document.type != 'internal'" Example (Data Manipulation): title: "Notification string" description: "Create a notification string with a timestamp." expression: "'New message received at ' + string(document.create_time)" The exact variables and functions that may be referenced within an expression are determined by the service that evaluates it. See the service documentation for additional information.

func (ApigatewayExprOutput) Description

Optional. Description of the expression. This is a longer text which describes the expression, e.g. when hovered over it in a UI.

func (ApigatewayExprOutput) ElementType

func (ApigatewayExprOutput) ElementType() reflect.Type

func (ApigatewayExprOutput) Expression

Textual representation of an expression in Common Expression Language syntax.

func (ApigatewayExprOutput) Location

Optional. String indicating the location of the expression for error reporting, e.g. a file name and a position in the file.

func (ApigatewayExprOutput) Title

Optional. Title for the expression, i.e. a short string describing its purpose. This can be used e.g. in UIs which allow to enter the expression.

func (ApigatewayExprOutput) ToApigatewayExprOutput

func (o ApigatewayExprOutput) ToApigatewayExprOutput() ApigatewayExprOutput

func (ApigatewayExprOutput) ToApigatewayExprOutputWithContext

func (o ApigatewayExprOutput) ToApigatewayExprOutputWithContext(ctx context.Context) ApigatewayExprOutput

func (ApigatewayExprOutput) ToApigatewayExprPtrOutput

func (o ApigatewayExprOutput) ToApigatewayExprPtrOutput() ApigatewayExprPtrOutput

func (ApigatewayExprOutput) ToApigatewayExprPtrOutputWithContext

func (o ApigatewayExprOutput) ToApigatewayExprPtrOutputWithContext(ctx context.Context) ApigatewayExprPtrOutput

type ApigatewayExprPtrInput

type ApigatewayExprPtrInput interface {
	pulumi.Input

	ToApigatewayExprPtrOutput() ApigatewayExprPtrOutput
	ToApigatewayExprPtrOutputWithContext(context.Context) ApigatewayExprPtrOutput
}

ApigatewayExprPtrInput is an input type that accepts ApigatewayExprArgs, ApigatewayExprPtr and ApigatewayExprPtrOutput values. You can construct a concrete instance of `ApigatewayExprPtrInput` via:

        ApigatewayExprArgs{...}

or:

        nil

type ApigatewayExprPtrOutput

type ApigatewayExprPtrOutput struct{ *pulumi.OutputState }

func (ApigatewayExprPtrOutput) Description

Optional. Description of the expression. This is a longer text which describes the expression, e.g. when hovered over it in a UI.

func (ApigatewayExprPtrOutput) Elem

func (ApigatewayExprPtrOutput) ElementType

func (ApigatewayExprPtrOutput) ElementType() reflect.Type

func (ApigatewayExprPtrOutput) Expression

Textual representation of an expression in Common Expression Language syntax.

func (ApigatewayExprPtrOutput) Location

Optional. String indicating the location of the expression for error reporting, e.g. a file name and a position in the file.

func (ApigatewayExprPtrOutput) Title

Optional. Title for the expression, i.e. a short string describing its purpose. This can be used e.g. in UIs which allow to enter the expression.

func (ApigatewayExprPtrOutput) ToApigatewayExprPtrOutput

func (o ApigatewayExprPtrOutput) ToApigatewayExprPtrOutput() ApigatewayExprPtrOutput

func (ApigatewayExprPtrOutput) ToApigatewayExprPtrOutputWithContext

func (o ApigatewayExprPtrOutput) ToApigatewayExprPtrOutputWithContext(ctx context.Context) ApigatewayExprPtrOutput

type ApigatewayExprResponse

type ApigatewayExprResponse struct {
	// Optional. Description of the expression. This is a longer text which describes the expression, e.g. when hovered over it in a UI.
	Description string `pulumi:"description"`
	// Textual representation of an expression in Common Expression Language syntax.
	Expression string `pulumi:"expression"`
	// Optional. String indicating the location of the expression for error reporting, e.g. a file name and a position in the file.
	Location string `pulumi:"location"`
	// Optional. Title for the expression, i.e. a short string describing its purpose. This can be used e.g. in UIs which allow to enter the expression.
	Title string `pulumi:"title"`
}

Represents a textual expression in the Common Expression Language (CEL) syntax. CEL is a C-like expression language. The syntax and semantics of CEL are documented at https://github.com/google/cel-spec. Example (Comparison): title: "Summary size limit" description: "Determines if a summary is less than 100 chars" expression: "document.summary.size() < 100" Example (Equality): title: "Requestor is owner" description: "Determines if requestor is the document owner" expression: "document.owner == request.auth.claims.email" Example (Logic): title: "Public documents" description: "Determine whether the document should be publicly visible" expression: "document.type != 'private' && document.type != 'internal'" Example (Data Manipulation): title: "Notification string" description: "Create a notification string with a timestamp." expression: "'New message received at ' + string(document.create_time)" The exact variables and functions that may be referenced within an expression are determined by the service that evaluates it. See the service documentation for additional information.

type ApigatewayExprResponseOutput

type ApigatewayExprResponseOutput struct{ *pulumi.OutputState }

Represents a textual expression in the Common Expression Language (CEL) syntax. CEL is a C-like expression language. The syntax and semantics of CEL are documented at https://github.com/google/cel-spec. Example (Comparison): title: "Summary size limit" description: "Determines if a summary is less than 100 chars" expression: "document.summary.size() < 100" Example (Equality): title: "Requestor is owner" description: "Determines if requestor is the document owner" expression: "document.owner == request.auth.claims.email" Example (Logic): title: "Public documents" description: "Determine whether the document should be publicly visible" expression: "document.type != 'private' && document.type != 'internal'" Example (Data Manipulation): title: "Notification string" description: "Create a notification string with a timestamp." expression: "'New message received at ' + string(document.create_time)" The exact variables and functions that may be referenced within an expression are determined by the service that evaluates it. See the service documentation for additional information.

func (ApigatewayExprResponseOutput) Description

Optional. Description of the expression. This is a longer text which describes the expression, e.g. when hovered over it in a UI.

func (ApigatewayExprResponseOutput) ElementType

func (ApigatewayExprResponseOutput) Expression

Textual representation of an expression in Common Expression Language syntax.

func (ApigatewayExprResponseOutput) Location

Optional. String indicating the location of the expression for error reporting, e.g. a file name and a position in the file.

func (ApigatewayExprResponseOutput) Title

Optional. Title for the expression, i.e. a short string describing its purpose. This can be used e.g. in UIs which allow to enter the expression.

func (ApigatewayExprResponseOutput) ToApigatewayExprResponseOutput

func (o ApigatewayExprResponseOutput) ToApigatewayExprResponseOutput() ApigatewayExprResponseOutput

func (ApigatewayExprResponseOutput) ToApigatewayExprResponseOutputWithContext

func (o ApigatewayExprResponseOutput) ToApigatewayExprResponseOutputWithContext(ctx context.Context) ApigatewayExprResponseOutput

type ApigatewayGatewayConfig

type ApigatewayGatewayConfig struct {
	// Backend settings that are applied to all backends of the Gateway.
	BackendConfig ApigatewayBackendConfig `pulumi:"backendConfig"`
}

Configuration settings for Gateways.

type ApigatewayGatewayConfigArgs

type ApigatewayGatewayConfigArgs struct {
	// Backend settings that are applied to all backends of the Gateway.
	BackendConfig ApigatewayBackendConfigInput `pulumi:"backendConfig"`
}

Configuration settings for Gateways.

func (ApigatewayGatewayConfigArgs) ElementType

func (ApigatewayGatewayConfigArgs) ToApigatewayGatewayConfigOutput

func (i ApigatewayGatewayConfigArgs) ToApigatewayGatewayConfigOutput() ApigatewayGatewayConfigOutput

func (ApigatewayGatewayConfigArgs) ToApigatewayGatewayConfigOutputWithContext

func (i ApigatewayGatewayConfigArgs) ToApigatewayGatewayConfigOutputWithContext(ctx context.Context) ApigatewayGatewayConfigOutput

func (ApigatewayGatewayConfigArgs) ToApigatewayGatewayConfigPtrOutput

func (i ApigatewayGatewayConfigArgs) ToApigatewayGatewayConfigPtrOutput() ApigatewayGatewayConfigPtrOutput

func (ApigatewayGatewayConfigArgs) ToApigatewayGatewayConfigPtrOutputWithContext

func (i ApigatewayGatewayConfigArgs) ToApigatewayGatewayConfigPtrOutputWithContext(ctx context.Context) ApigatewayGatewayConfigPtrOutput

type ApigatewayGatewayConfigInput

type ApigatewayGatewayConfigInput interface {
	pulumi.Input

	ToApigatewayGatewayConfigOutput() ApigatewayGatewayConfigOutput
	ToApigatewayGatewayConfigOutputWithContext(context.Context) ApigatewayGatewayConfigOutput
}

ApigatewayGatewayConfigInput is an input type that accepts ApigatewayGatewayConfigArgs and ApigatewayGatewayConfigOutput values. You can construct a concrete instance of `ApigatewayGatewayConfigInput` via:

ApigatewayGatewayConfigArgs{...}

type ApigatewayGatewayConfigOutput

type ApigatewayGatewayConfigOutput struct{ *pulumi.OutputState }

Configuration settings for Gateways.

func (ApigatewayGatewayConfigOutput) BackendConfig

Backend settings that are applied to all backends of the Gateway.

func (ApigatewayGatewayConfigOutput) ElementType

func (ApigatewayGatewayConfigOutput) ToApigatewayGatewayConfigOutput

func (o ApigatewayGatewayConfigOutput) ToApigatewayGatewayConfigOutput() ApigatewayGatewayConfigOutput

func (ApigatewayGatewayConfigOutput) ToApigatewayGatewayConfigOutputWithContext

func (o ApigatewayGatewayConfigOutput) ToApigatewayGatewayConfigOutputWithContext(ctx context.Context) ApigatewayGatewayConfigOutput

func (ApigatewayGatewayConfigOutput) ToApigatewayGatewayConfigPtrOutput

func (o ApigatewayGatewayConfigOutput) ToApigatewayGatewayConfigPtrOutput() ApigatewayGatewayConfigPtrOutput

func (ApigatewayGatewayConfigOutput) ToApigatewayGatewayConfigPtrOutputWithContext

func (o ApigatewayGatewayConfigOutput) ToApigatewayGatewayConfigPtrOutputWithContext(ctx context.Context) ApigatewayGatewayConfigPtrOutput

type ApigatewayGatewayConfigPtrInput

type ApigatewayGatewayConfigPtrInput interface {
	pulumi.Input

	ToApigatewayGatewayConfigPtrOutput() ApigatewayGatewayConfigPtrOutput
	ToApigatewayGatewayConfigPtrOutputWithContext(context.Context) ApigatewayGatewayConfigPtrOutput
}

ApigatewayGatewayConfigPtrInput is an input type that accepts ApigatewayGatewayConfigArgs, ApigatewayGatewayConfigPtr and ApigatewayGatewayConfigPtrOutput values. You can construct a concrete instance of `ApigatewayGatewayConfigPtrInput` via:

        ApigatewayGatewayConfigArgs{...}

or:

        nil

type ApigatewayGatewayConfigPtrOutput

type ApigatewayGatewayConfigPtrOutput struct{ *pulumi.OutputState }

func (ApigatewayGatewayConfigPtrOutput) BackendConfig

Backend settings that are applied to all backends of the Gateway.

func (ApigatewayGatewayConfigPtrOutput) Elem

func (ApigatewayGatewayConfigPtrOutput) ElementType

func (ApigatewayGatewayConfigPtrOutput) ToApigatewayGatewayConfigPtrOutput

func (o ApigatewayGatewayConfigPtrOutput) ToApigatewayGatewayConfigPtrOutput() ApigatewayGatewayConfigPtrOutput

func (ApigatewayGatewayConfigPtrOutput) ToApigatewayGatewayConfigPtrOutputWithContext

func (o ApigatewayGatewayConfigPtrOutput) ToApigatewayGatewayConfigPtrOutputWithContext(ctx context.Context) ApigatewayGatewayConfigPtrOutput

type ApigatewayGatewayConfigResponse

type ApigatewayGatewayConfigResponse struct {
	// Backend settings that are applied to all backends of the Gateway.
	BackendConfig ApigatewayBackendConfigResponse `pulumi:"backendConfig"`
}

Configuration settings for Gateways.

type ApigatewayGatewayConfigResponseOutput

type ApigatewayGatewayConfigResponseOutput struct{ *pulumi.OutputState }

Configuration settings for Gateways.

func (ApigatewayGatewayConfigResponseOutput) BackendConfig

Backend settings that are applied to all backends of the Gateway.

func (ApigatewayGatewayConfigResponseOutput) ElementType

func (ApigatewayGatewayConfigResponseOutput) ToApigatewayGatewayConfigResponseOutput

func (o ApigatewayGatewayConfigResponseOutput) ToApigatewayGatewayConfigResponseOutput() ApigatewayGatewayConfigResponseOutput

func (ApigatewayGatewayConfigResponseOutput) ToApigatewayGatewayConfigResponseOutputWithContext

func (o ApigatewayGatewayConfigResponseOutput) ToApigatewayGatewayConfigResponseOutputWithContext(ctx context.Context) ApigatewayGatewayConfigResponseOutput

type Config added in v0.3.0

type Config struct {
	pulumi.CustomResourceState

	// Required. Identifier to assign to the API Config. Must be unique within scope of the parent resource.
	ApiConfigId pulumi.StringOutput `pulumi:"apiConfigId"`
	ApiId       pulumi.StringOutput `pulumi:"apiId"`
	// Created time.
	CreateTime pulumi.StringOutput `pulumi:"createTime"`
	// Optional. Display name.
	DisplayName pulumi.StringOutput `pulumi:"displayName"`
	// Immutable. Gateway specific configuration.
	GatewayConfig ApigatewayGatewayConfigResponseOutput `pulumi:"gatewayConfig"`
	// Immutable. The Google Cloud IAM Service Account that Gateways serving this config should use to authenticate to other services. This may either be the Service Account's email (`{ACCOUNT_ID}@{PROJECT}.iam.gserviceaccount.com`) or its full resource name (`projects/{PROJECT}/accounts/{UNIQUE_ID}`). This is most often used when the service is a GCP resource such as a Cloud Run Service or an IAP-secured service.
	GatewayServiceAccount pulumi.StringOutput `pulumi:"gatewayServiceAccount"`
	// Optional. gRPC service definition files. If specified, openapi_documents must not be included.
	GrpcServices ApigatewayApiConfigGrpcServiceDefinitionResponseArrayOutput `pulumi:"grpcServices"`
	// Optional. Resource labels to represent user-provided metadata. Refer to cloud documentation on labels for more details. https://cloud.google.com/compute/docs/labeling-resources
	Labels   pulumi.StringMapOutput `pulumi:"labels"`
	Location pulumi.StringOutput    `pulumi:"location"`
	// Optional. Service Configuration files. At least one must be included when using gRPC service definitions. See https://cloud.google.com/endpoints/docs/grpc/grpc-service-config#service_configuration_overview for the expected file contents. If multiple files are specified, the files are merged with the following rules: * All singular scalar fields are merged using "last one wins" semantics in the order of the files uploaded. * Repeated fields are concatenated. * Singular embedded messages are merged using these rules for nested fields.
	ManagedServiceConfigs ApigatewayApiConfigFileResponseArrayOutput `pulumi:"managedServiceConfigs"`
	// Resource name of the API Config. Format: projects/{project}/locations/global/apis/{api}/configs/{api_config}
	Name pulumi.StringOutput `pulumi:"name"`
	// Optional. OpenAPI specification documents. If specified, grpc_services and managed_service_configs must not be included.
	OpenapiDocuments ApigatewayApiConfigOpenApiDocumentResponseArrayOutput `pulumi:"openapiDocuments"`
	Project          pulumi.StringOutput                                   `pulumi:"project"`
	// The ID of the associated Service Config ( https://cloud.google.com/service-infrastructure/docs/glossary#config).
	ServiceConfigId pulumi.StringOutput `pulumi:"serviceConfigId"`
	// State of the API Config.
	State pulumi.StringOutput `pulumi:"state"`
	// Updated time.
	UpdateTime pulumi.StringOutput `pulumi:"updateTime"`
}

Creates a new ApiConfig in a given project and location. Auto-naming is currently not supported for this resource.

func GetConfig added in v0.3.0

func GetConfig(ctx *pulumi.Context,
	name string, id pulumi.IDInput, state *ConfigState, opts ...pulumi.ResourceOption) (*Config, error)

GetConfig gets an existing Config resource's state with the given name, ID, and optional state properties that are used to uniquely qualify the lookup (nil if not required).

func NewConfig added in v0.3.0

func NewConfig(ctx *pulumi.Context,
	name string, args *ConfigArgs, opts ...pulumi.ResourceOption) (*Config, error)

NewConfig registers a new resource with the given unique name, arguments, and options.

func (*Config) ElementType added in v0.3.0

func (*Config) ElementType() reflect.Type

func (*Config) ToConfigOutput added in v0.3.0

func (i *Config) ToConfigOutput() ConfigOutput

func (*Config) ToConfigOutputWithContext added in v0.3.0

func (i *Config) ToConfigOutputWithContext(ctx context.Context) ConfigOutput

type ConfigArgs added in v0.3.0

type ConfigArgs struct {
	// Required. Identifier to assign to the API Config. Must be unique within scope of the parent resource.
	ApiConfigId pulumi.StringInput
	ApiId       pulumi.StringInput
	// Optional. Display name.
	DisplayName pulumi.StringPtrInput
	// Immutable. Gateway specific configuration.
	GatewayConfig ApigatewayGatewayConfigPtrInput
	// Immutable. The Google Cloud IAM Service Account that Gateways serving this config should use to authenticate to other services. This may either be the Service Account's email (`{ACCOUNT_ID}@{PROJECT}.iam.gserviceaccount.com`) or its full resource name (`projects/{PROJECT}/accounts/{UNIQUE_ID}`). This is most often used when the service is a GCP resource such as a Cloud Run Service or an IAP-secured service.
	GatewayServiceAccount pulumi.StringPtrInput
	// Optional. gRPC service definition files. If specified, openapi_documents must not be included.
	GrpcServices ApigatewayApiConfigGrpcServiceDefinitionArrayInput
	// Optional. Resource labels to represent user-provided metadata. Refer to cloud documentation on labels for more details. https://cloud.google.com/compute/docs/labeling-resources
	Labels   pulumi.StringMapInput
	Location pulumi.StringPtrInput
	// Optional. Service Configuration files. At least one must be included when using gRPC service definitions. See https://cloud.google.com/endpoints/docs/grpc/grpc-service-config#service_configuration_overview for the expected file contents. If multiple files are specified, the files are merged with the following rules: * All singular scalar fields are merged using "last one wins" semantics in the order of the files uploaded. * Repeated fields are concatenated. * Singular embedded messages are merged using these rules for nested fields.
	ManagedServiceConfigs ApigatewayApiConfigFileArrayInput
	// Optional. OpenAPI specification documents. If specified, grpc_services and managed_service_configs must not be included.
	OpenapiDocuments ApigatewayApiConfigOpenApiDocumentArrayInput
	Project          pulumi.StringPtrInput
}

The set of arguments for constructing a Config resource.

func (ConfigArgs) ElementType added in v0.3.0

func (ConfigArgs) ElementType() reflect.Type

type ConfigInput added in v0.3.0

type ConfigInput interface {
	pulumi.Input

	ToConfigOutput() ConfigOutput
	ToConfigOutputWithContext(ctx context.Context) ConfigOutput
}

type ConfigOutput added in v0.3.0

type ConfigOutput struct{ *pulumi.OutputState }

func (ConfigOutput) ApiConfigId added in v0.21.0

func (o ConfigOutput) ApiConfigId() pulumi.StringOutput

Required. Identifier to assign to the API Config. Must be unique within scope of the parent resource.

func (ConfigOutput) ApiId added in v0.21.0

func (o ConfigOutput) ApiId() pulumi.StringOutput

func (ConfigOutput) CreateTime added in v0.19.0

func (o ConfigOutput) CreateTime() pulumi.StringOutput

Created time.

func (ConfigOutput) DisplayName added in v0.19.0

func (o ConfigOutput) DisplayName() pulumi.StringOutput

Optional. Display name.

func (ConfigOutput) ElementType added in v0.3.0

func (ConfigOutput) ElementType() reflect.Type

func (ConfigOutput) GatewayConfig added in v0.19.0

Immutable. Gateway specific configuration.

func (ConfigOutput) GatewayServiceAccount added in v0.19.0

func (o ConfigOutput) GatewayServiceAccount() pulumi.StringOutput

Immutable. The Google Cloud IAM Service Account that Gateways serving this config should use to authenticate to other services. This may either be the Service Account's email (`{ACCOUNT_ID}@{PROJECT}.iam.gserviceaccount.com`) or its full resource name (`projects/{PROJECT}/accounts/{UNIQUE_ID}`). This is most often used when the service is a GCP resource such as a Cloud Run Service or an IAP-secured service.

func (ConfigOutput) GrpcServices added in v0.19.0

Optional. gRPC service definition files. If specified, openapi_documents must not be included.

func (ConfigOutput) Labels added in v0.19.0

func (o ConfigOutput) Labels() pulumi.StringMapOutput

Optional. Resource labels to represent user-provided metadata. Refer to cloud documentation on labels for more details. https://cloud.google.com/compute/docs/labeling-resources

func (ConfigOutput) Location added in v0.21.0

func (o ConfigOutput) Location() pulumi.StringOutput

func (ConfigOutput) ManagedServiceConfigs added in v0.19.0

func (o ConfigOutput) ManagedServiceConfigs() ApigatewayApiConfigFileResponseArrayOutput

Optional. Service Configuration files. At least one must be included when using gRPC service definitions. See https://cloud.google.com/endpoints/docs/grpc/grpc-service-config#service_configuration_overview for the expected file contents. If multiple files are specified, the files are merged with the following rules: * All singular scalar fields are merged using "last one wins" semantics in the order of the files uploaded. * Repeated fields are concatenated. * Singular embedded messages are merged using these rules for nested fields.

func (ConfigOutput) Name added in v0.19.0

func (o ConfigOutput) Name() pulumi.StringOutput

Resource name of the API Config. Format: projects/{project}/locations/global/apis/{api}/configs/{api_config}

func (ConfigOutput) OpenapiDocuments added in v0.19.0

Optional. OpenAPI specification documents. If specified, grpc_services and managed_service_configs must not be included.

func (ConfigOutput) Project added in v0.21.0

func (o ConfigOutput) Project() pulumi.StringOutput

func (ConfigOutput) ServiceConfigId added in v0.19.0

func (o ConfigOutput) ServiceConfigId() pulumi.StringOutput

The ID of the associated Service Config ( https://cloud.google.com/service-infrastructure/docs/glossary#config).

func (ConfigOutput) State added in v0.19.0

func (o ConfigOutput) State() pulumi.StringOutput

State of the API Config.

func (ConfigOutput) ToConfigOutput added in v0.3.0

func (o ConfigOutput) ToConfigOutput() ConfigOutput

func (ConfigOutput) ToConfigOutputWithContext added in v0.3.0

func (o ConfigOutput) ToConfigOutputWithContext(ctx context.Context) ConfigOutput

func (ConfigOutput) UpdateTime added in v0.19.0

func (o ConfigOutput) UpdateTime() pulumi.StringOutput

Updated time.

type ConfigState added in v0.3.0

type ConfigState struct {
}

func (ConfigState) ElementType added in v0.3.0

func (ConfigState) ElementType() reflect.Type

type Gateway

type Gateway struct {
	pulumi.CustomResourceState

	// Resource name of the API Config for this Gateway. Format: projects/{project}/locations/global/apis/{api}/configs/{apiConfig}
	ApiConfig pulumi.StringOutput `pulumi:"apiConfig"`
	// Created time.
	CreateTime pulumi.StringOutput `pulumi:"createTime"`
	// The default API Gateway host name of the form `{gateway_id}-{hash}.{region_code}.gateway.dev`.
	DefaultHostname pulumi.StringOutput `pulumi:"defaultHostname"`
	// Optional. Display name.
	DisplayName pulumi.StringOutput `pulumi:"displayName"`
	// Required. Identifier to assign to the Gateway. Must be unique within scope of the parent resource.
	GatewayId pulumi.StringOutput `pulumi:"gatewayId"`
	// Optional. Resource labels to represent user-provided metadata. Refer to cloud documentation on labels for more details. https://cloud.google.com/compute/docs/labeling-resources
	Labels   pulumi.StringMapOutput `pulumi:"labels"`
	Location pulumi.StringOutput    `pulumi:"location"`
	// Resource name of the Gateway. Format: projects/{project}/locations/{location}/gateways/{gateway}
	Name    pulumi.StringOutput `pulumi:"name"`
	Project pulumi.StringOutput `pulumi:"project"`
	// The current state of the Gateway.
	State pulumi.StringOutput `pulumi:"state"`
	// Updated time.
	UpdateTime pulumi.StringOutput `pulumi:"updateTime"`
}

Creates a new Gateway in a given project and location. Auto-naming is currently not supported for this resource.

func GetGateway

func GetGateway(ctx *pulumi.Context,
	name string, id pulumi.IDInput, state *GatewayState, opts ...pulumi.ResourceOption) (*Gateway, error)

GetGateway gets an existing Gateway resource's state with the given name, ID, and optional state properties that are used to uniquely qualify the lookup (nil if not required).

func NewGateway

func NewGateway(ctx *pulumi.Context,
	name string, args *GatewayArgs, opts ...pulumi.ResourceOption) (*Gateway, error)

NewGateway registers a new resource with the given unique name, arguments, and options.

func (*Gateway) ElementType

func (*Gateway) ElementType() reflect.Type

func (*Gateway) ToGatewayOutput

func (i *Gateway) ToGatewayOutput() GatewayOutput

func (*Gateway) ToGatewayOutputWithContext

func (i *Gateway) ToGatewayOutputWithContext(ctx context.Context) GatewayOutput

type GatewayArgs

type GatewayArgs struct {
	// Resource name of the API Config for this Gateway. Format: projects/{project}/locations/global/apis/{api}/configs/{apiConfig}
	ApiConfig pulumi.StringInput
	// Optional. Display name.
	DisplayName pulumi.StringPtrInput
	// Required. Identifier to assign to the Gateway. Must be unique within scope of the parent resource.
	GatewayId pulumi.StringInput
	// Optional. Resource labels to represent user-provided metadata. Refer to cloud documentation on labels for more details. https://cloud.google.com/compute/docs/labeling-resources
	Labels   pulumi.StringMapInput
	Location pulumi.StringPtrInput
	Project  pulumi.StringPtrInput
}

The set of arguments for constructing a Gateway resource.

func (GatewayArgs) ElementType

func (GatewayArgs) ElementType() reflect.Type

type GatewayIamBinding added in v0.26.0

type GatewayIamBinding struct {
	pulumi.CustomResourceState

	// An IAM Condition for a given binding. See https://cloud.google.com/iam/docs/conditions-overview for additional details.
	Condition iam.ConditionPtrOutput `pulumi:"condition"`
	// The etag of the resource's IAM policy.
	Etag pulumi.StringOutput `pulumi:"etag"`
	// Identities that will be granted the privilege in role. Each entry can have one of the following values:
	//
	//  * user:{emailid}: An email address that represents a specific Google account. For example, alice@gmail.com or joe@example.com.
	//  * serviceAccount:{emailid}: An email address that represents a service account. For example, my-other-app@appspot.gserviceaccount.com.
	//  * group:{emailid}: An email address that represents a Google group. For example, admins@example.com.
	//  * domain:{domain}: A G Suite domain (primary, instead of alias) name that represents all the users of that domain. For example, google.com or example.com.
	Members pulumi.StringArrayOutput `pulumi:"members"`
	// The name of the resource to manage IAM policies for.
	Name pulumi.StringOutput `pulumi:"name"`
	// The project in which the resource belongs. If it is not provided, a default will be supplied.
	Project pulumi.StringOutput `pulumi:"project"`
	// The role that should be applied. Only one `IamBinding` can be used per role.
	Role pulumi.StringOutput `pulumi:"role"`
}

Sets the access control policy on the specified resource. Replaces any existing policy. Can return `NOT_FOUND`, `INVALID_ARGUMENT`, and `PERMISSION_DENIED` errors.

func GetGatewayIamBinding added in v0.26.0

func GetGatewayIamBinding(ctx *pulumi.Context,
	name string, id pulumi.IDInput, state *GatewayIamBindingState, opts ...pulumi.ResourceOption) (*GatewayIamBinding, error)

GetGatewayIamBinding gets an existing GatewayIamBinding resource's state with the given name, ID, and optional state properties that are used to uniquely qualify the lookup (nil if not required).

func NewGatewayIamBinding added in v0.26.0

func NewGatewayIamBinding(ctx *pulumi.Context,
	name string, args *GatewayIamBindingArgs, opts ...pulumi.ResourceOption) (*GatewayIamBinding, error)

NewGatewayIamBinding registers a new resource with the given unique name, arguments, and options.

func (*GatewayIamBinding) ElementType added in v0.26.0

func (*GatewayIamBinding) ElementType() reflect.Type

func (*GatewayIamBinding) ToGatewayIamBindingOutput added in v0.26.0

func (i *GatewayIamBinding) ToGatewayIamBindingOutput() GatewayIamBindingOutput

func (*GatewayIamBinding) ToGatewayIamBindingOutputWithContext added in v0.26.0

func (i *GatewayIamBinding) ToGatewayIamBindingOutputWithContext(ctx context.Context) GatewayIamBindingOutput

type GatewayIamBindingArgs added in v0.26.0

type GatewayIamBindingArgs struct {
	// An IAM Condition for a given binding.
	Condition iam.ConditionPtrInput
	// Identities that will be granted the privilege in role. Each entry can have one of the following values:
	//
	//  * user:{emailid}: An email address that represents a specific Google account. For example, alice@gmail.com or joe@example.com.
	//  * serviceAccount:{emailid}: An email address that represents a service account. For example, my-other-app@appspot.gserviceaccount.com.
	//  * group:{emailid}: An email address that represents a Google group. For example, admins@example.com.
	//  * domain:{domain}: A G Suite domain (primary, instead of alias) name that represents all the users of that domain. For example, google.com or example.com.
	Members pulumi.StringArrayInput
	// The name of the resource to manage IAM policies for.
	Name pulumi.StringInput
	// The role that should be applied. Only one `IamBinding` can be used per role.
	Role pulumi.StringInput
}

The set of arguments for constructing a GatewayIamBinding resource.

func (GatewayIamBindingArgs) ElementType added in v0.26.0

func (GatewayIamBindingArgs) ElementType() reflect.Type

type GatewayIamBindingInput added in v0.26.0

type GatewayIamBindingInput interface {
	pulumi.Input

	ToGatewayIamBindingOutput() GatewayIamBindingOutput
	ToGatewayIamBindingOutputWithContext(ctx context.Context) GatewayIamBindingOutput
}

type GatewayIamBindingOutput added in v0.26.0

type GatewayIamBindingOutput struct{ *pulumi.OutputState }

func (GatewayIamBindingOutput) Condition added in v0.26.0

An IAM Condition for a given binding. See https://cloud.google.com/iam/docs/conditions-overview for additional details.

func (GatewayIamBindingOutput) ElementType added in v0.26.0

func (GatewayIamBindingOutput) ElementType() reflect.Type

func (GatewayIamBindingOutput) Etag added in v0.26.0

The etag of the resource's IAM policy.

func (GatewayIamBindingOutput) Members added in v0.26.0

Identities that will be granted the privilege in role. Each entry can have one of the following values:

  • user:{emailid}: An email address that represents a specific Google account. For example, alice@gmail.com or joe@example.com.
  • serviceAccount:{emailid}: An email address that represents a service account. For example, my-other-app@appspot.gserviceaccount.com.
  • group:{emailid}: An email address that represents a Google group. For example, admins@example.com.
  • domain:{domain}: A G Suite domain (primary, instead of alias) name that represents all the users of that domain. For example, google.com or example.com.

func (GatewayIamBindingOutput) Name added in v0.26.0

The name of the resource to manage IAM policies for.

func (GatewayIamBindingOutput) Project added in v0.26.0

The project in which the resource belongs. If it is not provided, a default will be supplied.

func (GatewayIamBindingOutput) Role added in v0.26.0

The role that should be applied. Only one `IamBinding` can be used per role.

func (GatewayIamBindingOutput) ToGatewayIamBindingOutput added in v0.26.0

func (o GatewayIamBindingOutput) ToGatewayIamBindingOutput() GatewayIamBindingOutput

func (GatewayIamBindingOutput) ToGatewayIamBindingOutputWithContext added in v0.26.0

func (o GatewayIamBindingOutput) ToGatewayIamBindingOutputWithContext(ctx context.Context) GatewayIamBindingOutput

type GatewayIamBindingState added in v0.26.0

type GatewayIamBindingState struct {
}

func (GatewayIamBindingState) ElementType added in v0.26.0

func (GatewayIamBindingState) ElementType() reflect.Type

type GatewayIamMember added in v0.26.0

type GatewayIamMember struct {
	pulumi.CustomResourceState

	// An IAM Condition for a given binding. See https://cloud.google.com/iam/docs/conditions-overview for additional details.
	Condition iam.ConditionPtrOutput `pulumi:"condition"`
	// The etag of the resource's IAM policy.
	Etag pulumi.StringOutput `pulumi:"etag"`
	// Identity that will be granted the privilege in role. The entry can have one of the following values:
	//
	//  * user:{emailid}: An email address that represents a specific Google account. For example, alice@gmail.com or joe@example.com.
	//  * serviceAccount:{emailid}: An email address that represents a service account. For example, my-other-app@appspot.gserviceaccount.com.
	//  * group:{emailid}: An email address that represents a Google group. For example, admins@example.com.
	//  * domain:{domain}: A G Suite domain (primary, instead of alias) name that represents all the users of that domain. For example, google.com or example.com.
	Member pulumi.StringOutput `pulumi:"member"`
	// The name of the resource to manage IAM policies for.
	Name pulumi.StringOutput `pulumi:"name"`
	// The project in which the resource belongs. If it is not provided, a default will be supplied.
	Project pulumi.StringOutput `pulumi:"project"`
	// The role that should be applied.
	Role pulumi.StringOutput `pulumi:"role"`
}

Sets the access control policy on the specified resource. Replaces any existing policy. Can return `NOT_FOUND`, `INVALID_ARGUMENT`, and `PERMISSION_DENIED` errors.

func GetGatewayIamMember added in v0.26.0

func GetGatewayIamMember(ctx *pulumi.Context,
	name string, id pulumi.IDInput, state *GatewayIamMemberState, opts ...pulumi.ResourceOption) (*GatewayIamMember, error)

GetGatewayIamMember gets an existing GatewayIamMember resource's state with the given name, ID, and optional state properties that are used to uniquely qualify the lookup (nil if not required).

func NewGatewayIamMember added in v0.26.0

func NewGatewayIamMember(ctx *pulumi.Context,
	name string, args *GatewayIamMemberArgs, opts ...pulumi.ResourceOption) (*GatewayIamMember, error)

NewGatewayIamMember registers a new resource with the given unique name, arguments, and options.

func (*GatewayIamMember) ElementType added in v0.26.0

func (*GatewayIamMember) ElementType() reflect.Type

func (*GatewayIamMember) ToGatewayIamMemberOutput added in v0.26.0

func (i *GatewayIamMember) ToGatewayIamMemberOutput() GatewayIamMemberOutput

func (*GatewayIamMember) ToGatewayIamMemberOutputWithContext added in v0.26.0

func (i *GatewayIamMember) ToGatewayIamMemberOutputWithContext(ctx context.Context) GatewayIamMemberOutput

type GatewayIamMemberArgs added in v0.26.0

type GatewayIamMemberArgs struct {
	// An IAM Condition for a given binding.
	Condition iam.ConditionPtrInput
	// Identity that will be granted the privilege in role. The entry can have one of the following values:
	//
	//  * user:{emailid}: An email address that represents a specific Google account. For example, alice@gmail.com or joe@example.com.
	//  * serviceAccount:{emailid}: An email address that represents a service account. For example, my-other-app@appspot.gserviceaccount.com.
	//  * group:{emailid}: An email address that represents a Google group. For example, admins@example.com.
	//  * domain:{domain}: A G Suite domain (primary, instead of alias) name that represents all the users of that domain. For example, google.com or example.com.
	Member pulumi.StringInput
	// The name of the resource to manage IAM policies for.
	Name pulumi.StringInput
	// The role that should be applied.
	Role pulumi.StringInput
}

The set of arguments for constructing a GatewayIamMember resource.

func (GatewayIamMemberArgs) ElementType added in v0.26.0

func (GatewayIamMemberArgs) ElementType() reflect.Type

type GatewayIamMemberInput added in v0.26.0

type GatewayIamMemberInput interface {
	pulumi.Input

	ToGatewayIamMemberOutput() GatewayIamMemberOutput
	ToGatewayIamMemberOutputWithContext(ctx context.Context) GatewayIamMemberOutput
}

type GatewayIamMemberOutput added in v0.26.0

type GatewayIamMemberOutput struct{ *pulumi.OutputState }

func (GatewayIamMemberOutput) Condition added in v0.26.0

An IAM Condition for a given binding. See https://cloud.google.com/iam/docs/conditions-overview for additional details.

func (GatewayIamMemberOutput) ElementType added in v0.26.0

func (GatewayIamMemberOutput) ElementType() reflect.Type

func (GatewayIamMemberOutput) Etag added in v0.26.0

The etag of the resource's IAM policy.

func (GatewayIamMemberOutput) Member added in v0.26.0

Identity that will be granted the privilege in role. The entry can have one of the following values:

  • user:{emailid}: An email address that represents a specific Google account. For example, alice@gmail.com or joe@example.com.
  • serviceAccount:{emailid}: An email address that represents a service account. For example, my-other-app@appspot.gserviceaccount.com.
  • group:{emailid}: An email address that represents a Google group. For example, admins@example.com.
  • domain:{domain}: A G Suite domain (primary, instead of alias) name that represents all the users of that domain. For example, google.com or example.com.

func (GatewayIamMemberOutput) Name added in v0.26.0

The name of the resource to manage IAM policies for.

func (GatewayIamMemberOutput) Project added in v0.26.0

The project in which the resource belongs. If it is not provided, a default will be supplied.

func (GatewayIamMemberOutput) Role added in v0.26.0

The role that should be applied.

func (GatewayIamMemberOutput) ToGatewayIamMemberOutput added in v0.26.0

func (o GatewayIamMemberOutput) ToGatewayIamMemberOutput() GatewayIamMemberOutput

func (GatewayIamMemberOutput) ToGatewayIamMemberOutputWithContext added in v0.26.0

func (o GatewayIamMemberOutput) ToGatewayIamMemberOutputWithContext(ctx context.Context) GatewayIamMemberOutput

type GatewayIamMemberState added in v0.26.0

type GatewayIamMemberState struct {
}

func (GatewayIamMemberState) ElementType added in v0.26.0

func (GatewayIamMemberState) ElementType() reflect.Type

type GatewayIamPolicy

type GatewayIamPolicy struct {
	pulumi.CustomResourceState

	// Specifies cloud audit logging configuration for this policy.
	AuditConfigs ApigatewayAuditConfigResponseArrayOutput `pulumi:"auditConfigs"`
	// Associates a list of `members`, or principals, with a `role`. Optionally, may specify a `condition` that determines how and when the `bindings` are applied. Each of the `bindings` must contain at least one principal. The `bindings` in a `Policy` can refer to up to 1,500 principals; up to 250 of these principals can be Google groups. Each occurrence of a principal counts towards these limits. For example, if the `bindings` grant 50 different roles to `user:alice@example.com`, and not to any other principal, then you can add another 1,450 principals to the `bindings` in the `Policy`.
	Bindings ApigatewayBindingResponseArrayOutput `pulumi:"bindings"`
	// `etag` is used for optimistic concurrency control as a way to help prevent simultaneous updates of a policy from overwriting each other. It is strongly suggested that systems make use of the `etag` in the read-modify-write cycle to perform policy updates in order to avoid race conditions: An `etag` is returned in the response to `getIamPolicy`, and systems are expected to put that etag in the request to `setIamPolicy` to ensure that their change will be applied to the same version of the policy. **Important:** If you use IAM Conditions, you must include the `etag` field whenever you call `setIamPolicy`. If you omit this field, then IAM allows you to overwrite a version `3` policy with a version `1` policy, and all of the conditions in the version `3` policy are lost.
	Etag      pulumi.StringOutput `pulumi:"etag"`
	GatewayId pulumi.StringOutput `pulumi:"gatewayId"`
	Location  pulumi.StringOutput `pulumi:"location"`
	Project   pulumi.StringOutput `pulumi:"project"`
	// Specifies the format of the policy. Valid values are `0`, `1`, and `3`. Requests that specify an invalid value are rejected. Any operation that affects conditional role bindings must specify version `3`. This requirement applies to the following operations: * Getting a policy that includes a conditional role binding * Adding a conditional role binding to a policy * Changing a conditional role binding in a policy * Removing any role binding, with or without a condition, from a policy that includes conditions **Important:** If you use IAM Conditions, you must include the `etag` field whenever you call `setIamPolicy`. If you omit this field, then IAM allows you to overwrite a version `3` policy with a version `1` policy, and all of the conditions in the version `3` policy are lost. If a policy does not include any conditions, operations on that policy may specify any valid version or leave the field unset. To learn which resources support conditions in their IAM policies, see the [IAM documentation](https://cloud.google.com/iam/help/conditions/resource-policies).
	Version pulumi.IntOutput `pulumi:"version"`
}

Sets the access control policy on the specified resource. Replaces any existing policy. Can return `NOT_FOUND`, `INVALID_ARGUMENT`, and `PERMISSION_DENIED` errors. Note - this resource's API doesn't support deletion. When deleted, the resource will persist on Google Cloud even though it will be deleted from Pulumi state.

func GetGatewayIamPolicy

func GetGatewayIamPolicy(ctx *pulumi.Context,
	name string, id pulumi.IDInput, state *GatewayIamPolicyState, opts ...pulumi.ResourceOption) (*GatewayIamPolicy, error)

GetGatewayIamPolicy gets an existing GatewayIamPolicy resource's state with the given name, ID, and optional state properties that are used to uniquely qualify the lookup (nil if not required).

func NewGatewayIamPolicy

func NewGatewayIamPolicy(ctx *pulumi.Context,
	name string, args *GatewayIamPolicyArgs, opts ...pulumi.ResourceOption) (*GatewayIamPolicy, error)

NewGatewayIamPolicy registers a new resource with the given unique name, arguments, and options.

func (*GatewayIamPolicy) ElementType

func (*GatewayIamPolicy) ElementType() reflect.Type

func (*GatewayIamPolicy) ToGatewayIamPolicyOutput

func (i *GatewayIamPolicy) ToGatewayIamPolicyOutput() GatewayIamPolicyOutput

func (*GatewayIamPolicy) ToGatewayIamPolicyOutputWithContext

func (i *GatewayIamPolicy) ToGatewayIamPolicyOutputWithContext(ctx context.Context) GatewayIamPolicyOutput

type GatewayIamPolicyArgs

type GatewayIamPolicyArgs struct {
	// Specifies cloud audit logging configuration for this policy.
	AuditConfigs ApigatewayAuditConfigArrayInput
	// Associates a list of `members`, or principals, with a `role`. Optionally, may specify a `condition` that determines how and when the `bindings` are applied. Each of the `bindings` must contain at least one principal. The `bindings` in a `Policy` can refer to up to 1,500 principals; up to 250 of these principals can be Google groups. Each occurrence of a principal counts towards these limits. For example, if the `bindings` grant 50 different roles to `user:alice@example.com`, and not to any other principal, then you can add another 1,450 principals to the `bindings` in the `Policy`.
	Bindings ApigatewayBindingArrayInput
	// `etag` is used for optimistic concurrency control as a way to help prevent simultaneous updates of a policy from overwriting each other. It is strongly suggested that systems make use of the `etag` in the read-modify-write cycle to perform policy updates in order to avoid race conditions: An `etag` is returned in the response to `getIamPolicy`, and systems are expected to put that etag in the request to `setIamPolicy` to ensure that their change will be applied to the same version of the policy. **Important:** If you use IAM Conditions, you must include the `etag` field whenever you call `setIamPolicy`. If you omit this field, then IAM allows you to overwrite a version `3` policy with a version `1` policy, and all of the conditions in the version `3` policy are lost.
	Etag      pulumi.StringPtrInput
	GatewayId pulumi.StringInput
	Location  pulumi.StringPtrInput
	Project   pulumi.StringPtrInput
	// OPTIONAL: A FieldMask specifying which fields of the policy to modify. Only the fields in the mask will be modified. If no mask is provided, the following default mask is used: `paths: "bindings, etag"`
	UpdateMask pulumi.StringPtrInput
	// Specifies the format of the policy. Valid values are `0`, `1`, and `3`. Requests that specify an invalid value are rejected. Any operation that affects conditional role bindings must specify version `3`. This requirement applies to the following operations: * Getting a policy that includes a conditional role binding * Adding a conditional role binding to a policy * Changing a conditional role binding in a policy * Removing any role binding, with or without a condition, from a policy that includes conditions **Important:** If you use IAM Conditions, you must include the `etag` field whenever you call `setIamPolicy`. If you omit this field, then IAM allows you to overwrite a version `3` policy with a version `1` policy, and all of the conditions in the version `3` policy are lost. If a policy does not include any conditions, operations on that policy may specify any valid version or leave the field unset. To learn which resources support conditions in their IAM policies, see the [IAM documentation](https://cloud.google.com/iam/help/conditions/resource-policies).
	Version pulumi.IntPtrInput
}

The set of arguments for constructing a GatewayIamPolicy resource.

func (GatewayIamPolicyArgs) ElementType

func (GatewayIamPolicyArgs) ElementType() reflect.Type

type GatewayIamPolicyInput

type GatewayIamPolicyInput interface {
	pulumi.Input

	ToGatewayIamPolicyOutput() GatewayIamPolicyOutput
	ToGatewayIamPolicyOutputWithContext(ctx context.Context) GatewayIamPolicyOutput
}

type GatewayIamPolicyOutput

type GatewayIamPolicyOutput struct{ *pulumi.OutputState }

func (GatewayIamPolicyOutput) AuditConfigs added in v0.19.0

Specifies cloud audit logging configuration for this policy.

func (GatewayIamPolicyOutput) Bindings added in v0.19.0

Associates a list of `members`, or principals, with a `role`. Optionally, may specify a `condition` that determines how and when the `bindings` are applied. Each of the `bindings` must contain at least one principal. The `bindings` in a `Policy` can refer to up to 1,500 principals; up to 250 of these principals can be Google groups. Each occurrence of a principal counts towards these limits. For example, if the `bindings` grant 50 different roles to `user:alice@example.com`, and not to any other principal, then you can add another 1,450 principals to the `bindings` in the `Policy`.

func (GatewayIamPolicyOutput) ElementType

func (GatewayIamPolicyOutput) ElementType() reflect.Type

func (GatewayIamPolicyOutput) Etag added in v0.19.0

`etag` is used for optimistic concurrency control as a way to help prevent simultaneous updates of a policy from overwriting each other. It is strongly suggested that systems make use of the `etag` in the read-modify-write cycle to perform policy updates in order to avoid race conditions: An `etag` is returned in the response to `getIamPolicy`, and systems are expected to put that etag in the request to `setIamPolicy` to ensure that their change will be applied to the same version of the policy. **Important:** If you use IAM Conditions, you must include the `etag` field whenever you call `setIamPolicy`. If you omit this field, then IAM allows you to overwrite a version `3` policy with a version `1` policy, and all of the conditions in the version `3` policy are lost.

func (GatewayIamPolicyOutput) GatewayId added in v0.21.0

func (GatewayIamPolicyOutput) Location added in v0.21.0

func (GatewayIamPolicyOutput) Project added in v0.21.0

func (GatewayIamPolicyOutput) ToGatewayIamPolicyOutput

func (o GatewayIamPolicyOutput) ToGatewayIamPolicyOutput() GatewayIamPolicyOutput

func (GatewayIamPolicyOutput) ToGatewayIamPolicyOutputWithContext

func (o GatewayIamPolicyOutput) ToGatewayIamPolicyOutputWithContext(ctx context.Context) GatewayIamPolicyOutput

func (GatewayIamPolicyOutput) Version added in v0.19.0

Specifies the format of the policy. Valid values are `0`, `1`, and `3`. Requests that specify an invalid value are rejected. Any operation that affects conditional role bindings must specify version `3`. This requirement applies to the following operations: * Getting a policy that includes a conditional role binding * Adding a conditional role binding to a policy * Changing a conditional role binding in a policy * Removing any role binding, with or without a condition, from a policy that includes conditions **Important:** If you use IAM Conditions, you must include the `etag` field whenever you call `setIamPolicy`. If you omit this field, then IAM allows you to overwrite a version `3` policy with a version `1` policy, and all of the conditions in the version `3` policy are lost. If a policy does not include any conditions, operations on that policy may specify any valid version or leave the field unset. To learn which resources support conditions in their IAM policies, see the [IAM documentation](https://cloud.google.com/iam/help/conditions/resource-policies).

type GatewayIamPolicyState

type GatewayIamPolicyState struct {
}

func (GatewayIamPolicyState) ElementType

func (GatewayIamPolicyState) ElementType() reflect.Type

type GatewayInput

type GatewayInput interface {
	pulumi.Input

	ToGatewayOutput() GatewayOutput
	ToGatewayOutputWithContext(ctx context.Context) GatewayOutput
}

type GatewayOutput

type GatewayOutput struct{ *pulumi.OutputState }

func (GatewayOutput) ApiConfig added in v0.19.0

func (o GatewayOutput) ApiConfig() pulumi.StringOutput

Resource name of the API Config for this Gateway. Format: projects/{project}/locations/global/apis/{api}/configs/{apiConfig}

func (GatewayOutput) CreateTime added in v0.19.0

func (o GatewayOutput) CreateTime() pulumi.StringOutput

Created time.

func (GatewayOutput) DefaultHostname added in v0.19.0

func (o GatewayOutput) DefaultHostname() pulumi.StringOutput

The default API Gateway host name of the form `{gateway_id}-{hash}.{region_code}.gateway.dev`.

func (GatewayOutput) DisplayName added in v0.19.0

func (o GatewayOutput) DisplayName() pulumi.StringOutput

Optional. Display name.

func (GatewayOutput) ElementType

func (GatewayOutput) ElementType() reflect.Type

func (GatewayOutput) GatewayId added in v0.21.0

func (o GatewayOutput) GatewayId() pulumi.StringOutput

Required. Identifier to assign to the Gateway. Must be unique within scope of the parent resource.

func (GatewayOutput) Labels added in v0.19.0

Optional. Resource labels to represent user-provided metadata. Refer to cloud documentation on labels for more details. https://cloud.google.com/compute/docs/labeling-resources

func (GatewayOutput) Location added in v0.21.0

func (o GatewayOutput) Location() pulumi.StringOutput

func (GatewayOutput) Name added in v0.19.0

Resource name of the Gateway. Format: projects/{project}/locations/{location}/gateways/{gateway}

func (GatewayOutput) Project added in v0.21.0

func (o GatewayOutput) Project() pulumi.StringOutput

func (GatewayOutput) State added in v0.19.0

func (o GatewayOutput) State() pulumi.StringOutput

The current state of the Gateway.

func (GatewayOutput) ToGatewayOutput

func (o GatewayOutput) ToGatewayOutput() GatewayOutput

func (GatewayOutput) ToGatewayOutputWithContext

func (o GatewayOutput) ToGatewayOutputWithContext(ctx context.Context) GatewayOutput

func (GatewayOutput) UpdateTime added in v0.19.0

func (o GatewayOutput) UpdateTime() pulumi.StringOutput

Updated time.

type GatewayState

type GatewayState struct {
}

func (GatewayState) ElementType

func (GatewayState) ElementType() reflect.Type

type LookupApiArgs added in v0.4.0

type LookupApiArgs struct {
	ApiId    string  `pulumi:"apiId"`
	Location string  `pulumi:"location"`
	Project  *string `pulumi:"project"`
}

type LookupApiConfigIamPolicyArgs added in v0.4.0

type LookupApiConfigIamPolicyArgs struct {
	ApiId                         string  `pulumi:"apiId"`
	ConfigId                      string  `pulumi:"configId"`
	Location                      string  `pulumi:"location"`
	OptionsRequestedPolicyVersion *int    `pulumi:"optionsRequestedPolicyVersion"`
	Project                       *string `pulumi:"project"`
}

type LookupApiConfigIamPolicyOutputArgs added in v0.8.0

type LookupApiConfigIamPolicyOutputArgs struct {
	ApiId                         pulumi.StringInput    `pulumi:"apiId"`
	ConfigId                      pulumi.StringInput    `pulumi:"configId"`
	Location                      pulumi.StringInput    `pulumi:"location"`
	OptionsRequestedPolicyVersion pulumi.IntPtrInput    `pulumi:"optionsRequestedPolicyVersion"`
	Project                       pulumi.StringPtrInput `pulumi:"project"`
}

func (LookupApiConfigIamPolicyOutputArgs) ElementType added in v0.8.0

type LookupApiConfigIamPolicyResult added in v0.4.0

type LookupApiConfigIamPolicyResult struct {
	// Specifies cloud audit logging configuration for this policy.
	AuditConfigs []ApigatewayAuditConfigResponse `pulumi:"auditConfigs"`
	// Associates a list of `members`, or principals, with a `role`. Optionally, may specify a `condition` that determines how and when the `bindings` are applied. Each of the `bindings` must contain at least one principal. The `bindings` in a `Policy` can refer to up to 1,500 principals; up to 250 of these principals can be Google groups. Each occurrence of a principal counts towards these limits. For example, if the `bindings` grant 50 different roles to `user:alice@example.com`, and not to any other principal, then you can add another 1,450 principals to the `bindings` in the `Policy`.
	Bindings []ApigatewayBindingResponse `pulumi:"bindings"`
	// `etag` is used for optimistic concurrency control as a way to help prevent simultaneous updates of a policy from overwriting each other. It is strongly suggested that systems make use of the `etag` in the read-modify-write cycle to perform policy updates in order to avoid race conditions: An `etag` is returned in the response to `getIamPolicy`, and systems are expected to put that etag in the request to `setIamPolicy` to ensure that their change will be applied to the same version of the policy. **Important:** If you use IAM Conditions, you must include the `etag` field whenever you call `setIamPolicy`. If you omit this field, then IAM allows you to overwrite a version `3` policy with a version `1` policy, and all of the conditions in the version `3` policy are lost.
	Etag string `pulumi:"etag"`
	// Specifies the format of the policy. Valid values are `0`, `1`, and `3`. Requests that specify an invalid value are rejected. Any operation that affects conditional role bindings must specify version `3`. This requirement applies to the following operations: * Getting a policy that includes a conditional role binding * Adding a conditional role binding to a policy * Changing a conditional role binding in a policy * Removing any role binding, with or without a condition, from a policy that includes conditions **Important:** If you use IAM Conditions, you must include the `etag` field whenever you call `setIamPolicy`. If you omit this field, then IAM allows you to overwrite a version `3` policy with a version `1` policy, and all of the conditions in the version `3` policy are lost. If a policy does not include any conditions, operations on that policy may specify any valid version or leave the field unset. To learn which resources support conditions in their IAM policies, see the [IAM documentation](https://cloud.google.com/iam/help/conditions/resource-policies).
	Version int `pulumi:"version"`
}

func LookupApiConfigIamPolicy added in v0.4.0

func LookupApiConfigIamPolicy(ctx *pulumi.Context, args *LookupApiConfigIamPolicyArgs, opts ...pulumi.InvokeOption) (*LookupApiConfigIamPolicyResult, error)

Gets the access control policy for a resource. Returns an empty policy if the resource exists and does not have a policy set.

type LookupApiConfigIamPolicyResultOutput added in v0.8.0

type LookupApiConfigIamPolicyResultOutput struct{ *pulumi.OutputState }

func (LookupApiConfigIamPolicyResultOutput) AuditConfigs added in v0.8.0

Specifies cloud audit logging configuration for this policy.

func (LookupApiConfigIamPolicyResultOutput) Bindings added in v0.8.0

Associates a list of `members`, or principals, with a `role`. Optionally, may specify a `condition` that determines how and when the `bindings` are applied. Each of the `bindings` must contain at least one principal. The `bindings` in a `Policy` can refer to up to 1,500 principals; up to 250 of these principals can be Google groups. Each occurrence of a principal counts towards these limits. For example, if the `bindings` grant 50 different roles to `user:alice@example.com`, and not to any other principal, then you can add another 1,450 principals to the `bindings` in the `Policy`.

func (LookupApiConfigIamPolicyResultOutput) ElementType added in v0.8.0

func (LookupApiConfigIamPolicyResultOutput) Etag added in v0.8.0

`etag` is used for optimistic concurrency control as a way to help prevent simultaneous updates of a policy from overwriting each other. It is strongly suggested that systems make use of the `etag` in the read-modify-write cycle to perform policy updates in order to avoid race conditions: An `etag` is returned in the response to `getIamPolicy`, and systems are expected to put that etag in the request to `setIamPolicy` to ensure that their change will be applied to the same version of the policy. **Important:** If you use IAM Conditions, you must include the `etag` field whenever you call `setIamPolicy`. If you omit this field, then IAM allows you to overwrite a version `3` policy with a version `1` policy, and all of the conditions in the version `3` policy are lost.

func (LookupApiConfigIamPolicyResultOutput) ToLookupApiConfigIamPolicyResultOutput added in v0.8.0

func (o LookupApiConfigIamPolicyResultOutput) ToLookupApiConfigIamPolicyResultOutput() LookupApiConfigIamPolicyResultOutput

func (LookupApiConfigIamPolicyResultOutput) ToLookupApiConfigIamPolicyResultOutputWithContext added in v0.8.0

func (o LookupApiConfigIamPolicyResultOutput) ToLookupApiConfigIamPolicyResultOutputWithContext(ctx context.Context) LookupApiConfigIamPolicyResultOutput

func (LookupApiConfigIamPolicyResultOutput) Version added in v0.8.0

Specifies the format of the policy. Valid values are `0`, `1`, and `3`. Requests that specify an invalid value are rejected. Any operation that affects conditional role bindings must specify version `3`. This requirement applies to the following operations: * Getting a policy that includes a conditional role binding * Adding a conditional role binding to a policy * Changing a conditional role binding in a policy * Removing any role binding, with or without a condition, from a policy that includes conditions **Important:** If you use IAM Conditions, you must include the `etag` field whenever you call `setIamPolicy`. If you omit this field, then IAM allows you to overwrite a version `3` policy with a version `1` policy, and all of the conditions in the version `3` policy are lost. If a policy does not include any conditions, operations on that policy may specify any valid version or leave the field unset. To learn which resources support conditions in their IAM policies, see the [IAM documentation](https://cloud.google.com/iam/help/conditions/resource-policies).

type LookupApiIamPolicyArgs added in v0.4.0

type LookupApiIamPolicyArgs struct {
	ApiId                         string  `pulumi:"apiId"`
	Location                      string  `pulumi:"location"`
	OptionsRequestedPolicyVersion *int    `pulumi:"optionsRequestedPolicyVersion"`
	Project                       *string `pulumi:"project"`
}

type LookupApiIamPolicyOutputArgs added in v0.8.0

type LookupApiIamPolicyOutputArgs struct {
	ApiId                         pulumi.StringInput    `pulumi:"apiId"`
	Location                      pulumi.StringInput    `pulumi:"location"`
	OptionsRequestedPolicyVersion pulumi.IntPtrInput    `pulumi:"optionsRequestedPolicyVersion"`
	Project                       pulumi.StringPtrInput `pulumi:"project"`
}

func (LookupApiIamPolicyOutputArgs) ElementType added in v0.8.0

type LookupApiIamPolicyResult added in v0.4.0

type LookupApiIamPolicyResult struct {
	// Specifies cloud audit logging configuration for this policy.
	AuditConfigs []ApigatewayAuditConfigResponse `pulumi:"auditConfigs"`
	// Associates a list of `members`, or principals, with a `role`. Optionally, may specify a `condition` that determines how and when the `bindings` are applied. Each of the `bindings` must contain at least one principal. The `bindings` in a `Policy` can refer to up to 1,500 principals; up to 250 of these principals can be Google groups. Each occurrence of a principal counts towards these limits. For example, if the `bindings` grant 50 different roles to `user:alice@example.com`, and not to any other principal, then you can add another 1,450 principals to the `bindings` in the `Policy`.
	Bindings []ApigatewayBindingResponse `pulumi:"bindings"`
	// `etag` is used for optimistic concurrency control as a way to help prevent simultaneous updates of a policy from overwriting each other. It is strongly suggested that systems make use of the `etag` in the read-modify-write cycle to perform policy updates in order to avoid race conditions: An `etag` is returned in the response to `getIamPolicy`, and systems are expected to put that etag in the request to `setIamPolicy` to ensure that their change will be applied to the same version of the policy. **Important:** If you use IAM Conditions, you must include the `etag` field whenever you call `setIamPolicy`. If you omit this field, then IAM allows you to overwrite a version `3` policy with a version `1` policy, and all of the conditions in the version `3` policy are lost.
	Etag string `pulumi:"etag"`
	// Specifies the format of the policy. Valid values are `0`, `1`, and `3`. Requests that specify an invalid value are rejected. Any operation that affects conditional role bindings must specify version `3`. This requirement applies to the following operations: * Getting a policy that includes a conditional role binding * Adding a conditional role binding to a policy * Changing a conditional role binding in a policy * Removing any role binding, with or without a condition, from a policy that includes conditions **Important:** If you use IAM Conditions, you must include the `etag` field whenever you call `setIamPolicy`. If you omit this field, then IAM allows you to overwrite a version `3` policy with a version `1` policy, and all of the conditions in the version `3` policy are lost. If a policy does not include any conditions, operations on that policy may specify any valid version or leave the field unset. To learn which resources support conditions in their IAM policies, see the [IAM documentation](https://cloud.google.com/iam/help/conditions/resource-policies).
	Version int `pulumi:"version"`
}

func LookupApiIamPolicy added in v0.4.0

func LookupApiIamPolicy(ctx *pulumi.Context, args *LookupApiIamPolicyArgs, opts ...pulumi.InvokeOption) (*LookupApiIamPolicyResult, error)

Gets the access control policy for a resource. Returns an empty policy if the resource exists and does not have a policy set.

type LookupApiIamPolicyResultOutput added in v0.8.0

type LookupApiIamPolicyResultOutput struct{ *pulumi.OutputState }

func LookupApiIamPolicyOutput added in v0.8.0

func (LookupApiIamPolicyResultOutput) AuditConfigs added in v0.8.0

Specifies cloud audit logging configuration for this policy.

func (LookupApiIamPolicyResultOutput) Bindings added in v0.8.0

Associates a list of `members`, or principals, with a `role`. Optionally, may specify a `condition` that determines how and when the `bindings` are applied. Each of the `bindings` must contain at least one principal. The `bindings` in a `Policy` can refer to up to 1,500 principals; up to 250 of these principals can be Google groups. Each occurrence of a principal counts towards these limits. For example, if the `bindings` grant 50 different roles to `user:alice@example.com`, and not to any other principal, then you can add another 1,450 principals to the `bindings` in the `Policy`.

func (LookupApiIamPolicyResultOutput) ElementType added in v0.8.0

func (LookupApiIamPolicyResultOutput) Etag added in v0.8.0

`etag` is used for optimistic concurrency control as a way to help prevent simultaneous updates of a policy from overwriting each other. It is strongly suggested that systems make use of the `etag` in the read-modify-write cycle to perform policy updates in order to avoid race conditions: An `etag` is returned in the response to `getIamPolicy`, and systems are expected to put that etag in the request to `setIamPolicy` to ensure that their change will be applied to the same version of the policy. **Important:** If you use IAM Conditions, you must include the `etag` field whenever you call `setIamPolicy`. If you omit this field, then IAM allows you to overwrite a version `3` policy with a version `1` policy, and all of the conditions in the version `3` policy are lost.

func (LookupApiIamPolicyResultOutput) ToLookupApiIamPolicyResultOutput added in v0.8.0

func (o LookupApiIamPolicyResultOutput) ToLookupApiIamPolicyResultOutput() LookupApiIamPolicyResultOutput

func (LookupApiIamPolicyResultOutput) ToLookupApiIamPolicyResultOutputWithContext added in v0.8.0

func (o LookupApiIamPolicyResultOutput) ToLookupApiIamPolicyResultOutputWithContext(ctx context.Context) LookupApiIamPolicyResultOutput

func (LookupApiIamPolicyResultOutput) Version added in v0.8.0

Specifies the format of the policy. Valid values are `0`, `1`, and `3`. Requests that specify an invalid value are rejected. Any operation that affects conditional role bindings must specify version `3`. This requirement applies to the following operations: * Getting a policy that includes a conditional role binding * Adding a conditional role binding to a policy * Changing a conditional role binding in a policy * Removing any role binding, with or without a condition, from a policy that includes conditions **Important:** If you use IAM Conditions, you must include the `etag` field whenever you call `setIamPolicy`. If you omit this field, then IAM allows you to overwrite a version `3` policy with a version `1` policy, and all of the conditions in the version `3` policy are lost. If a policy does not include any conditions, operations on that policy may specify any valid version or leave the field unset. To learn which resources support conditions in their IAM policies, see the [IAM documentation](https://cloud.google.com/iam/help/conditions/resource-policies).

type LookupApiOutputArgs added in v0.8.0

type LookupApiOutputArgs struct {
	ApiId    pulumi.StringInput    `pulumi:"apiId"`
	Location pulumi.StringInput    `pulumi:"location"`
	Project  pulumi.StringPtrInput `pulumi:"project"`
}

func (LookupApiOutputArgs) ElementType added in v0.8.0

func (LookupApiOutputArgs) ElementType() reflect.Type

type LookupApiResult added in v0.4.0

type LookupApiResult struct {
	// Created time.
	CreateTime string `pulumi:"createTime"`
	// Optional. Display name.
	DisplayName string `pulumi:"displayName"`
	// Optional. Resource labels to represent user-provided metadata. Refer to cloud documentation on labels for more details. https://cloud.google.com/compute/docs/labeling-resources
	Labels map[string]string `pulumi:"labels"`
	// Optional. Immutable. The name of a Google Managed Service ( https://cloud.google.com/service-infrastructure/docs/glossary#managed). If not specified, a new Service will automatically be created in the same project as this API.
	ManagedService string `pulumi:"managedService"`
	// Resource name of the API. Format: projects/{project}/locations/global/apis/{api}
	Name string `pulumi:"name"`
	// State of the API.
	State string `pulumi:"state"`
	// Updated time.
	UpdateTime string `pulumi:"updateTime"`
}

func LookupApi added in v0.4.0

func LookupApi(ctx *pulumi.Context, args *LookupApiArgs, opts ...pulumi.InvokeOption) (*LookupApiResult, error)

Gets details of a single Api.

type LookupApiResultOutput added in v0.8.0

type LookupApiResultOutput struct{ *pulumi.OutputState }

func LookupApiOutput added in v0.8.0

func LookupApiOutput(ctx *pulumi.Context, args LookupApiOutputArgs, opts ...pulumi.InvokeOption) LookupApiResultOutput

func (LookupApiResultOutput) CreateTime added in v0.8.0

func (o LookupApiResultOutput) CreateTime() pulumi.StringOutput

Created time.

func (LookupApiResultOutput) DisplayName added in v0.8.0

func (o LookupApiResultOutput) DisplayName() pulumi.StringOutput

Optional. Display name.

func (LookupApiResultOutput) ElementType added in v0.8.0

func (LookupApiResultOutput) ElementType() reflect.Type

func (LookupApiResultOutput) Labels added in v0.8.0

Optional. Resource labels to represent user-provided metadata. Refer to cloud documentation on labels for more details. https://cloud.google.com/compute/docs/labeling-resources

func (LookupApiResultOutput) ManagedService added in v0.8.0

func (o LookupApiResultOutput) ManagedService() pulumi.StringOutput

Optional. Immutable. The name of a Google Managed Service ( https://cloud.google.com/service-infrastructure/docs/glossary#managed). If not specified, a new Service will automatically be created in the same project as this API.

func (LookupApiResultOutput) Name added in v0.8.0

Resource name of the API. Format: projects/{project}/locations/global/apis/{api}

func (LookupApiResultOutput) State added in v0.8.0

State of the API.

func (LookupApiResultOutput) ToLookupApiResultOutput added in v0.8.0

func (o LookupApiResultOutput) ToLookupApiResultOutput() LookupApiResultOutput

func (LookupApiResultOutput) ToLookupApiResultOutputWithContext added in v0.8.0

func (o LookupApiResultOutput) ToLookupApiResultOutputWithContext(ctx context.Context) LookupApiResultOutput

func (LookupApiResultOutput) UpdateTime added in v0.8.0

func (o LookupApiResultOutput) UpdateTime() pulumi.StringOutput

Updated time.

type LookupConfigArgs added in v0.4.0

type LookupConfigArgs struct {
	ApiId    string  `pulumi:"apiId"`
	ConfigId string  `pulumi:"configId"`
	Location string  `pulumi:"location"`
	Project  *string `pulumi:"project"`
	View     *string `pulumi:"view"`
}

type LookupConfigOutputArgs added in v0.8.0

type LookupConfigOutputArgs struct {
	ApiId    pulumi.StringInput    `pulumi:"apiId"`
	ConfigId pulumi.StringInput    `pulumi:"configId"`
	Location pulumi.StringInput    `pulumi:"location"`
	Project  pulumi.StringPtrInput `pulumi:"project"`
	View     pulumi.StringPtrInput `pulumi:"view"`
}

func (LookupConfigOutputArgs) ElementType added in v0.8.0

func (LookupConfigOutputArgs) ElementType() reflect.Type

type LookupConfigResult added in v0.4.0

type LookupConfigResult struct {
	// Created time.
	CreateTime string `pulumi:"createTime"`
	// Optional. Display name.
	DisplayName string `pulumi:"displayName"`
	// Immutable. Gateway specific configuration.
	GatewayConfig ApigatewayGatewayConfigResponse `pulumi:"gatewayConfig"`
	// Immutable. The Google Cloud IAM Service Account that Gateways serving this config should use to authenticate to other services. This may either be the Service Account's email (`{ACCOUNT_ID}@{PROJECT}.iam.gserviceaccount.com`) or its full resource name (`projects/{PROJECT}/accounts/{UNIQUE_ID}`). This is most often used when the service is a GCP resource such as a Cloud Run Service or an IAP-secured service.
	GatewayServiceAccount string `pulumi:"gatewayServiceAccount"`
	// Optional. gRPC service definition files. If specified, openapi_documents must not be included.
	GrpcServices []ApigatewayApiConfigGrpcServiceDefinitionResponse `pulumi:"grpcServices"`
	// Optional. Resource labels to represent user-provided metadata. Refer to cloud documentation on labels for more details. https://cloud.google.com/compute/docs/labeling-resources
	Labels map[string]string `pulumi:"labels"`
	// Optional. Service Configuration files. At least one must be included when using gRPC service definitions. See https://cloud.google.com/endpoints/docs/grpc/grpc-service-config#service_configuration_overview for the expected file contents. If multiple files are specified, the files are merged with the following rules: * All singular scalar fields are merged using "last one wins" semantics in the order of the files uploaded. * Repeated fields are concatenated. * Singular embedded messages are merged using these rules for nested fields.
	ManagedServiceConfigs []ApigatewayApiConfigFileResponse `pulumi:"managedServiceConfigs"`
	// Resource name of the API Config. Format: projects/{project}/locations/global/apis/{api}/configs/{api_config}
	Name string `pulumi:"name"`
	// Optional. OpenAPI specification documents. If specified, grpc_services and managed_service_configs must not be included.
	OpenapiDocuments []ApigatewayApiConfigOpenApiDocumentResponse `pulumi:"openapiDocuments"`
	// The ID of the associated Service Config ( https://cloud.google.com/service-infrastructure/docs/glossary#config).
	ServiceConfigId string `pulumi:"serviceConfigId"`
	// State of the API Config.
	State string `pulumi:"state"`
	// Updated time.
	UpdateTime string `pulumi:"updateTime"`
}

func LookupConfig added in v0.4.0

func LookupConfig(ctx *pulumi.Context, args *LookupConfigArgs, opts ...pulumi.InvokeOption) (*LookupConfigResult, error)

Gets details of a single ApiConfig.

type LookupConfigResultOutput added in v0.8.0

type LookupConfigResultOutput struct{ *pulumi.OutputState }

func LookupConfigOutput added in v0.8.0

func LookupConfigOutput(ctx *pulumi.Context, args LookupConfigOutputArgs, opts ...pulumi.InvokeOption) LookupConfigResultOutput

func (LookupConfigResultOutput) CreateTime added in v0.8.0

Created time.

func (LookupConfigResultOutput) DisplayName added in v0.8.0

Optional. Display name.

func (LookupConfigResultOutput) ElementType added in v0.8.0

func (LookupConfigResultOutput) ElementType() reflect.Type

func (LookupConfigResultOutput) GatewayConfig added in v0.8.0

Immutable. Gateway specific configuration.

func (LookupConfigResultOutput) GatewayServiceAccount added in v0.8.0

func (o LookupConfigResultOutput) GatewayServiceAccount() pulumi.StringOutput

Immutable. The Google Cloud IAM Service Account that Gateways serving this config should use to authenticate to other services. This may either be the Service Account's email (`{ACCOUNT_ID}@{PROJECT}.iam.gserviceaccount.com`) or its full resource name (`projects/{PROJECT}/accounts/{UNIQUE_ID}`). This is most often used when the service is a GCP resource such as a Cloud Run Service or an IAP-secured service.

func (LookupConfigResultOutput) GrpcServices added in v0.8.0

Optional. gRPC service definition files. If specified, openapi_documents must not be included.

func (LookupConfigResultOutput) Labels added in v0.8.0

Optional. Resource labels to represent user-provided metadata. Refer to cloud documentation on labels for more details. https://cloud.google.com/compute/docs/labeling-resources

func (LookupConfigResultOutput) ManagedServiceConfigs added in v0.8.0

Optional. Service Configuration files. At least one must be included when using gRPC service definitions. See https://cloud.google.com/endpoints/docs/grpc/grpc-service-config#service_configuration_overview for the expected file contents. If multiple files are specified, the files are merged with the following rules: * All singular scalar fields are merged using "last one wins" semantics in the order of the files uploaded. * Repeated fields are concatenated. * Singular embedded messages are merged using these rules for nested fields.

func (LookupConfigResultOutput) Name added in v0.8.0

Resource name of the API Config. Format: projects/{project}/locations/global/apis/{api}/configs/{api_config}

func (LookupConfigResultOutput) OpenapiDocuments added in v0.8.0

Optional. OpenAPI specification documents. If specified, grpc_services and managed_service_configs must not be included.

func (LookupConfigResultOutput) ServiceConfigId added in v0.8.0

func (o LookupConfigResultOutput) ServiceConfigId() pulumi.StringOutput

The ID of the associated Service Config ( https://cloud.google.com/service-infrastructure/docs/glossary#config).

func (LookupConfigResultOutput) State added in v0.8.0

State of the API Config.

func (LookupConfigResultOutput) ToLookupConfigResultOutput added in v0.8.0

func (o LookupConfigResultOutput) ToLookupConfigResultOutput() LookupConfigResultOutput

func (LookupConfigResultOutput) ToLookupConfigResultOutputWithContext added in v0.8.0

func (o LookupConfigResultOutput) ToLookupConfigResultOutputWithContext(ctx context.Context) LookupConfigResultOutput

func (LookupConfigResultOutput) UpdateTime added in v0.8.0

Updated time.

type LookupGatewayArgs added in v0.4.0

type LookupGatewayArgs struct {
	GatewayId string  `pulumi:"gatewayId"`
	Location  string  `pulumi:"location"`
	Project   *string `pulumi:"project"`
}

type LookupGatewayIamPolicyArgs added in v0.4.0

type LookupGatewayIamPolicyArgs struct {
	GatewayId                     string  `pulumi:"gatewayId"`
	Location                      string  `pulumi:"location"`
	OptionsRequestedPolicyVersion *int    `pulumi:"optionsRequestedPolicyVersion"`
	Project                       *string `pulumi:"project"`
}

type LookupGatewayIamPolicyOutputArgs added in v0.8.0

type LookupGatewayIamPolicyOutputArgs struct {
	GatewayId                     pulumi.StringInput    `pulumi:"gatewayId"`
	Location                      pulumi.StringInput    `pulumi:"location"`
	OptionsRequestedPolicyVersion pulumi.IntPtrInput    `pulumi:"optionsRequestedPolicyVersion"`
	Project                       pulumi.StringPtrInput `pulumi:"project"`
}

func (LookupGatewayIamPolicyOutputArgs) ElementType added in v0.8.0

type LookupGatewayIamPolicyResult added in v0.4.0

type LookupGatewayIamPolicyResult struct {
	// Specifies cloud audit logging configuration for this policy.
	AuditConfigs []ApigatewayAuditConfigResponse `pulumi:"auditConfigs"`
	// Associates a list of `members`, or principals, with a `role`. Optionally, may specify a `condition` that determines how and when the `bindings` are applied. Each of the `bindings` must contain at least one principal. The `bindings` in a `Policy` can refer to up to 1,500 principals; up to 250 of these principals can be Google groups. Each occurrence of a principal counts towards these limits. For example, if the `bindings` grant 50 different roles to `user:alice@example.com`, and not to any other principal, then you can add another 1,450 principals to the `bindings` in the `Policy`.
	Bindings []ApigatewayBindingResponse `pulumi:"bindings"`
	// `etag` is used for optimistic concurrency control as a way to help prevent simultaneous updates of a policy from overwriting each other. It is strongly suggested that systems make use of the `etag` in the read-modify-write cycle to perform policy updates in order to avoid race conditions: An `etag` is returned in the response to `getIamPolicy`, and systems are expected to put that etag in the request to `setIamPolicy` to ensure that their change will be applied to the same version of the policy. **Important:** If you use IAM Conditions, you must include the `etag` field whenever you call `setIamPolicy`. If you omit this field, then IAM allows you to overwrite a version `3` policy with a version `1` policy, and all of the conditions in the version `3` policy are lost.
	Etag string `pulumi:"etag"`
	// Specifies the format of the policy. Valid values are `0`, `1`, and `3`. Requests that specify an invalid value are rejected. Any operation that affects conditional role bindings must specify version `3`. This requirement applies to the following operations: * Getting a policy that includes a conditional role binding * Adding a conditional role binding to a policy * Changing a conditional role binding in a policy * Removing any role binding, with or without a condition, from a policy that includes conditions **Important:** If you use IAM Conditions, you must include the `etag` field whenever you call `setIamPolicy`. If you omit this field, then IAM allows you to overwrite a version `3` policy with a version `1` policy, and all of the conditions in the version `3` policy are lost. If a policy does not include any conditions, operations on that policy may specify any valid version or leave the field unset. To learn which resources support conditions in their IAM policies, see the [IAM documentation](https://cloud.google.com/iam/help/conditions/resource-policies).
	Version int `pulumi:"version"`
}

func LookupGatewayIamPolicy added in v0.4.0

func LookupGatewayIamPolicy(ctx *pulumi.Context, args *LookupGatewayIamPolicyArgs, opts ...pulumi.InvokeOption) (*LookupGatewayIamPolicyResult, error)

Gets the access control policy for a resource. Returns an empty policy if the resource exists and does not have a policy set.

type LookupGatewayIamPolicyResultOutput added in v0.8.0

type LookupGatewayIamPolicyResultOutput struct{ *pulumi.OutputState }

func LookupGatewayIamPolicyOutput added in v0.8.0

func (LookupGatewayIamPolicyResultOutput) AuditConfigs added in v0.8.0

Specifies cloud audit logging configuration for this policy.

func (LookupGatewayIamPolicyResultOutput) Bindings added in v0.8.0

Associates a list of `members`, or principals, with a `role`. Optionally, may specify a `condition` that determines how and when the `bindings` are applied. Each of the `bindings` must contain at least one principal. The `bindings` in a `Policy` can refer to up to 1,500 principals; up to 250 of these principals can be Google groups. Each occurrence of a principal counts towards these limits. For example, if the `bindings` grant 50 different roles to `user:alice@example.com`, and not to any other principal, then you can add another 1,450 principals to the `bindings` in the `Policy`.

func (LookupGatewayIamPolicyResultOutput) ElementType added in v0.8.0

func (LookupGatewayIamPolicyResultOutput) Etag added in v0.8.0

`etag` is used for optimistic concurrency control as a way to help prevent simultaneous updates of a policy from overwriting each other. It is strongly suggested that systems make use of the `etag` in the read-modify-write cycle to perform policy updates in order to avoid race conditions: An `etag` is returned in the response to `getIamPolicy`, and systems are expected to put that etag in the request to `setIamPolicy` to ensure that their change will be applied to the same version of the policy. **Important:** If you use IAM Conditions, you must include the `etag` field whenever you call `setIamPolicy`. If you omit this field, then IAM allows you to overwrite a version `3` policy with a version `1` policy, and all of the conditions in the version `3` policy are lost.

func (LookupGatewayIamPolicyResultOutput) ToLookupGatewayIamPolicyResultOutput added in v0.8.0

func (o LookupGatewayIamPolicyResultOutput) ToLookupGatewayIamPolicyResultOutput() LookupGatewayIamPolicyResultOutput

func (LookupGatewayIamPolicyResultOutput) ToLookupGatewayIamPolicyResultOutputWithContext added in v0.8.0

func (o LookupGatewayIamPolicyResultOutput) ToLookupGatewayIamPolicyResultOutputWithContext(ctx context.Context) LookupGatewayIamPolicyResultOutput

func (LookupGatewayIamPolicyResultOutput) Version added in v0.8.0

Specifies the format of the policy. Valid values are `0`, `1`, and `3`. Requests that specify an invalid value are rejected. Any operation that affects conditional role bindings must specify version `3`. This requirement applies to the following operations: * Getting a policy that includes a conditional role binding * Adding a conditional role binding to a policy * Changing a conditional role binding in a policy * Removing any role binding, with or without a condition, from a policy that includes conditions **Important:** If you use IAM Conditions, you must include the `etag` field whenever you call `setIamPolicy`. If you omit this field, then IAM allows you to overwrite a version `3` policy with a version `1` policy, and all of the conditions in the version `3` policy are lost. If a policy does not include any conditions, operations on that policy may specify any valid version or leave the field unset. To learn which resources support conditions in their IAM policies, see the [IAM documentation](https://cloud.google.com/iam/help/conditions/resource-policies).

type LookupGatewayOutputArgs added in v0.8.0

type LookupGatewayOutputArgs struct {
	GatewayId pulumi.StringInput    `pulumi:"gatewayId"`
	Location  pulumi.StringInput    `pulumi:"location"`
	Project   pulumi.StringPtrInput `pulumi:"project"`
}

func (LookupGatewayOutputArgs) ElementType added in v0.8.0

func (LookupGatewayOutputArgs) ElementType() reflect.Type

type LookupGatewayResult added in v0.4.0

type LookupGatewayResult struct {
	// Resource name of the API Config for this Gateway. Format: projects/{project}/locations/global/apis/{api}/configs/{apiConfig}
	ApiConfig string `pulumi:"apiConfig"`
	// Created time.
	CreateTime string `pulumi:"createTime"`
	// The default API Gateway host name of the form `{gateway_id}-{hash}.{region_code}.gateway.dev`.
	DefaultHostname string `pulumi:"defaultHostname"`
	// Optional. Display name.
	DisplayName string `pulumi:"displayName"`
	// Optional. Resource labels to represent user-provided metadata. Refer to cloud documentation on labels for more details. https://cloud.google.com/compute/docs/labeling-resources
	Labels map[string]string `pulumi:"labels"`
	// Resource name of the Gateway. Format: projects/{project}/locations/{location}/gateways/{gateway}
	Name string `pulumi:"name"`
	// The current state of the Gateway.
	State string `pulumi:"state"`
	// Updated time.
	UpdateTime string `pulumi:"updateTime"`
}

func LookupGateway added in v0.4.0

func LookupGateway(ctx *pulumi.Context, args *LookupGatewayArgs, opts ...pulumi.InvokeOption) (*LookupGatewayResult, error)

Gets details of a single Gateway.

type LookupGatewayResultOutput added in v0.8.0

type LookupGatewayResultOutput struct{ *pulumi.OutputState }

func LookupGatewayOutput added in v0.8.0

func LookupGatewayOutput(ctx *pulumi.Context, args LookupGatewayOutputArgs, opts ...pulumi.InvokeOption) LookupGatewayResultOutput

func (LookupGatewayResultOutput) ApiConfig added in v0.8.0

Resource name of the API Config for this Gateway. Format: projects/{project}/locations/global/apis/{api}/configs/{apiConfig}

func (LookupGatewayResultOutput) CreateTime added in v0.8.0

Created time.

func (LookupGatewayResultOutput) DefaultHostname added in v0.8.0

func (o LookupGatewayResultOutput) DefaultHostname() pulumi.StringOutput

The default API Gateway host name of the form `{gateway_id}-{hash}.{region_code}.gateway.dev`.

func (LookupGatewayResultOutput) DisplayName added in v0.8.0

Optional. Display name.

func (LookupGatewayResultOutput) ElementType added in v0.8.0

func (LookupGatewayResultOutput) ElementType() reflect.Type

func (LookupGatewayResultOutput) Labels added in v0.8.0

Optional. Resource labels to represent user-provided metadata. Refer to cloud documentation on labels for more details. https://cloud.google.com/compute/docs/labeling-resources

func (LookupGatewayResultOutput) Name added in v0.8.0

Resource name of the Gateway. Format: projects/{project}/locations/{location}/gateways/{gateway}

func (LookupGatewayResultOutput) State added in v0.8.0

The current state of the Gateway.

func (LookupGatewayResultOutput) ToLookupGatewayResultOutput added in v0.8.0

func (o LookupGatewayResultOutput) ToLookupGatewayResultOutput() LookupGatewayResultOutput

func (LookupGatewayResultOutput) ToLookupGatewayResultOutputWithContext added in v0.8.0

func (o LookupGatewayResultOutput) ToLookupGatewayResultOutputWithContext(ctx context.Context) LookupGatewayResultOutput

func (LookupGatewayResultOutput) UpdateTime added in v0.8.0

Updated time.

Jump to

Keyboard shortcuts

? : This menu
/ : Search site
f or F : Jump to
y or Y : Canonical URL