v1beta

package
v0.32.0 Latest Latest
Warning

This package is not in the latest version of its module.

Go to latest
Published: Nov 29, 2023 License: Apache-2.0 Imports: 9 Imported by: 0

Documentation

Index

Constants

View Source
const (
	// Default case. Should never be this.
	AuditLogConfigLogTypeLogTypeUnspecified = AuditLogConfigLogType("LOG_TYPE_UNSPECIFIED")
	// Admin reads. Example: CloudIAM getIamPolicy
	AuditLogConfigLogTypeAdminRead = AuditLogConfigLogType("ADMIN_READ")
	// Data writes. Example: CloudSQL Users create
	AuditLogConfigLogTypeDataWrite = AuditLogConfigLogType("DATA_WRITE")
	// Data reads. Example: CloudSQL Users list
	AuditLogConfigLogTypeDataRead = AuditLogConfigLogType("DATA_READ")
)
View Source
const (
	// Default. Should not be used.
	AuthorizationLoggingOptionsPermissionTypePermissionTypeUnspecified = AuthorizationLoggingOptionsPermissionType("PERMISSION_TYPE_UNSPECIFIED")
	// A read of admin (meta) data.
	AuthorizationLoggingOptionsPermissionTypeAdminRead = AuthorizationLoggingOptionsPermissionType("ADMIN_READ")
	// A write of admin (meta) data.
	AuthorizationLoggingOptionsPermissionTypeAdminWrite = AuthorizationLoggingOptionsPermissionType("ADMIN_WRITE")
	// A read of standard data.
	AuthorizationLoggingOptionsPermissionTypeDataRead = AuthorizationLoggingOptionsPermissionType("DATA_READ")
	// A write of standard data.
	AuthorizationLoggingOptionsPermissionTypeDataWrite = AuthorizationLoggingOptionsPermissionType("DATA_WRITE")
)
View Source
const (
	// Default. Should not be used.
	CloudAuditOptionsLogNameUnspecifiedLogName = CloudAuditOptionsLogName("UNSPECIFIED_LOG_NAME")
	// Corresponds to "cloudaudit.googleapis.com/activity"
	CloudAuditOptionsLogNameAdminActivity = CloudAuditOptionsLogName("ADMIN_ACTIVITY")
	// Corresponds to "cloudaudit.googleapis.com/data_access"
	CloudAuditOptionsLogNameDataAccess = CloudAuditOptionsLogName("DATA_ACCESS")
)
View Source
const (
	// Default non-attribute.
	ConditionIamNoAttr = ConditionIam("NO_ATTR")
	// Either principal or (if present) authority selector.
	ConditionIamAuthority = ConditionIam("AUTHORITY")
	// The principal (even if an authority selector is present), which must only be used for attribution, not authorization.
	ConditionIamAttribution = ConditionIam("ATTRIBUTION")
	// Any of the security realms in the IAMContext (go/security-realms). When used with IN, the condition indicates "any of the request's realms match one of the given values; with NOT_IN, "none of the realms match any of the given values". Note that a value can be: - 'self:campus' (i.e., clients that are in the same campus) - 'self:metro' (i.e., clients that are in the same metro) - 'self:cloud-region' (i.e., allow connections from clients that are in the same cloud region) - 'self:prod-region' (i.e., allow connections from clients that are in the same prod region) - 'guardians' (i.e., allow connections from its guardian realms. See go/security-realms-glossary#guardian for more information.) - 'self' [DEPRECATED] (i.e., allow connections from clients that are in the same security realm, which is currently but not guaranteed to be campus-sized) - a realm (e.g., 'campus-abc') - a realm group (e.g., 'realms-for-borg-cell-xx', see: go/realm-groups) A match is determined by a realm group membership check performed by a RealmAclRep object (go/realm-acl-howto). It is not permitted to grant access based on the *absence* of a realm, so realm conditions can only be used in a "positive" context (e.g., ALLOW/IN or DENY/NOT_IN).
	ConditionIamSecurityRealm = ConditionIam("SECURITY_REALM")
	// An approver (distinct from the requester) that has authorized this request. When used with IN, the condition indicates that one of the approvers associated with the request matches the specified principal, or is a member of the specified group. Approvers can only grant additional access, and are thus only used in a strictly positive context (e.g. ALLOW/IN or DENY/NOT_IN).
	ConditionIamApprover = ConditionIam("APPROVER")
	// What types of justifications have been supplied with this request. String values should match enum names from security.credentials.JustificationType, e.g. "MANUAL_STRING". It is not permitted to grant access based on the *absence* of a justification, so justification conditions can only be used in a "positive" context (e.g., ALLOW/IN or DENY/NOT_IN). Multiple justifications, e.g., a Buganizer ID and a manually-entered reason, are normal and supported.
	ConditionIamJustificationType = ConditionIam("JUSTIFICATION_TYPE")
	// What type of credentials have been supplied with this request. String values should match enum names from security_loas_l2.CredentialsType - currently, only CREDS_TYPE_EMERGENCY is supported. It is not permitted to grant access based on the *absence* of a credentials type, so the conditions can only be used in a "positive" context (e.g., ALLOW/IN or DENY/NOT_IN).
	ConditionIamCredentialsType = ConditionIam("CREDENTIALS_TYPE")
	// EXPERIMENTAL -- DO NOT USE. The conditions can only be used in a "positive" context (e.g., ALLOW/IN or DENY/NOT_IN).
	ConditionIamCredsAssertion = ConditionIam("CREDS_ASSERTION")
)
View Source
const (
	// Default no-op.
	ConditionOpNoOp = ConditionOp("NO_OP")
	// DEPRECATED. Use IN instead.
	ConditionOpEquals = ConditionOp("EQUALS")
	// DEPRECATED. Use NOT_IN instead.
	ConditionOpNotEquals = ConditionOp("NOT_EQUALS")
	// The condition is true if the subject (or any element of it if it is a set) matches any of the supplied values.
	ConditionOpIn = ConditionOp("IN")
	// The condition is true if the subject (or every element of it if it is a set) matches none of the supplied values.
	ConditionOpNotIn = ConditionOp("NOT_IN")
	// Subject is discharged
	ConditionOpDischarged = ConditionOp("DISCHARGED")
)
View Source
const (
	// Default non-attribute type
	ConditionSysNoAttr = ConditionSys("NO_ATTR")
	// Region of the resource
	ConditionSysRegion = ConditionSys("REGION")
	// Service name
	ConditionSysService = ConditionSys("SERVICE")
	// Resource name
	ConditionSysName = ConditionSys("NAME")
	// IP address of the caller
	ConditionSysIp = ConditionSys("IP")
)
View Source
const (
	// Client is not required to write a partial Gin log immediately after the authorization check. If client chooses to write one and it fails, client may either fail open (allow the operation to continue) or fail closed (handle as a DENY outcome).
	DataAccessOptionsLogModeLogModeUnspecified = DataAccessOptionsLogMode("LOG_MODE_UNSPECIFIED")
	// The application's operation in the context of which this authorization check is being made may only be performed if it is successfully logged to Gin. For instance, the authorization library may satisfy this obligation by emitting a partial log entry at authorization check time and only returning ALLOW to the application if it succeeds. If a matching Rule has this directive, but the client has not indicated that it will honor such requirements, then the IAM check will result in authorization failure by setting CheckPolicyResponse.success=false.
	DataAccessOptionsLogModeLogFailClosed = DataAccessOptionsLogMode("LOG_FAIL_CLOSED")
)
View Source
const (
	// Default no action.
	RuleActionNoAction = RuleAction("NO_ACTION")
	// Matching 'Entries' grant access.
	RuleActionAllow = RuleAction("ALLOW")
	// Matching 'Entries' grant access and the caller promises to log the request per the returned log_configs.
	RuleActionAllowWithLog = RuleAction("ALLOW_WITH_LOG")
	// Matching 'Entries' deny access.
	RuleActionDeny = RuleAction("DENY")
	// Matching 'Entries' deny access and the caller promises to log the request per the returned log_configs.
	RuleActionDenyWithLog = RuleAction("DENY_WITH_LOG")
	// Matching 'Entries' tell IAM.Check callers to generate logs.
	RuleActionLog = RuleAction("LOG")
)

Variables

This section is empty.

Functions

This section is empty.

Types

type AuditConfig

type AuditConfig struct {
	// The configuration for logging of each type of permission.
	AuditLogConfigs []AuditLogConfig `pulumi:"auditLogConfigs"`
	// Specifies a service that will be enabled for audit logging. For example, `storage.googleapis.com`, `cloudsql.googleapis.com`. `allServices` is a special value that covers all services.
	Service *string `pulumi:"service"`
}

Specifies the audit configuration for a service. The configuration determines which permission types are logged, and what identities, if any, are exempted from logging. An AuditConfig must have one or more AuditLogConfigs. If there are AuditConfigs for both `allServices` and a specific service, the union of the two AuditConfigs is used for that service: the log_types specified in each AuditConfig are enabled, and the exempted_members in each AuditLogConfig are exempted. Example Policy with multiple AuditConfigs: { "audit_configs": [ { "service": "allServices", "audit_log_configs": [ { "log_type": "DATA_READ", "exempted_members": [ "user:jose@example.com" ] }, { "log_type": "DATA_WRITE" }, { "log_type": "ADMIN_READ" } ] }, { "service": "sampleservice.googleapis.com", "audit_log_configs": [ { "log_type": "DATA_READ" }, { "log_type": "DATA_WRITE", "exempted_members": [ "user:aliya@example.com" ] } ] } ] } For sampleservice, this policy enables DATA_READ, DATA_WRITE and ADMIN_READ logging. It also exempts `jose@example.com` from DATA_READ logging, and `aliya@example.com` from DATA_WRITE logging.

type AuditConfigArgs

type AuditConfigArgs struct {
	// The configuration for logging of each type of permission.
	AuditLogConfigs AuditLogConfigArrayInput `pulumi:"auditLogConfigs"`
	// Specifies a service that will be enabled for audit logging. For example, `storage.googleapis.com`, `cloudsql.googleapis.com`. `allServices` is a special value that covers all services.
	Service pulumi.StringPtrInput `pulumi:"service"`
}

Specifies the audit configuration for a service. The configuration determines which permission types are logged, and what identities, if any, are exempted from logging. An AuditConfig must have one or more AuditLogConfigs. If there are AuditConfigs for both `allServices` and a specific service, the union of the two AuditConfigs is used for that service: the log_types specified in each AuditConfig are enabled, and the exempted_members in each AuditLogConfig are exempted. Example Policy with multiple AuditConfigs: { "audit_configs": [ { "service": "allServices", "audit_log_configs": [ { "log_type": "DATA_READ", "exempted_members": [ "user:jose@example.com" ] }, { "log_type": "DATA_WRITE" }, { "log_type": "ADMIN_READ" } ] }, { "service": "sampleservice.googleapis.com", "audit_log_configs": [ { "log_type": "DATA_READ" }, { "log_type": "DATA_WRITE", "exempted_members": [ "user:aliya@example.com" ] } ] } ] } For sampleservice, this policy enables DATA_READ, DATA_WRITE and ADMIN_READ logging. It also exempts `jose@example.com` from DATA_READ logging, and `aliya@example.com` from DATA_WRITE logging.

func (AuditConfigArgs) ElementType

func (AuditConfigArgs) ElementType() reflect.Type

func (AuditConfigArgs) ToAuditConfigOutput

func (i AuditConfigArgs) ToAuditConfigOutput() AuditConfigOutput

func (AuditConfigArgs) ToAuditConfigOutputWithContext

func (i AuditConfigArgs) ToAuditConfigOutputWithContext(ctx context.Context) AuditConfigOutput

type AuditConfigArray

type AuditConfigArray []AuditConfigInput

func (AuditConfigArray) ElementType

func (AuditConfigArray) ElementType() reflect.Type

func (AuditConfigArray) ToAuditConfigArrayOutput

func (i AuditConfigArray) ToAuditConfigArrayOutput() AuditConfigArrayOutput

func (AuditConfigArray) ToAuditConfigArrayOutputWithContext

func (i AuditConfigArray) ToAuditConfigArrayOutputWithContext(ctx context.Context) AuditConfigArrayOutput

type AuditConfigArrayInput

type AuditConfigArrayInput interface {
	pulumi.Input

	ToAuditConfigArrayOutput() AuditConfigArrayOutput
	ToAuditConfigArrayOutputWithContext(context.Context) AuditConfigArrayOutput
}

AuditConfigArrayInput is an input type that accepts AuditConfigArray and AuditConfigArrayOutput values. You can construct a concrete instance of `AuditConfigArrayInput` via:

AuditConfigArray{ AuditConfigArgs{...} }

type AuditConfigArrayOutput

type AuditConfigArrayOutput struct{ *pulumi.OutputState }

func (AuditConfigArrayOutput) ElementType

func (AuditConfigArrayOutput) ElementType() reflect.Type

func (AuditConfigArrayOutput) Index

func (AuditConfigArrayOutput) ToAuditConfigArrayOutput

func (o AuditConfigArrayOutput) ToAuditConfigArrayOutput() AuditConfigArrayOutput

func (AuditConfigArrayOutput) ToAuditConfigArrayOutputWithContext

func (o AuditConfigArrayOutput) ToAuditConfigArrayOutputWithContext(ctx context.Context) AuditConfigArrayOutput

type AuditConfigInput

type AuditConfigInput interface {
	pulumi.Input

	ToAuditConfigOutput() AuditConfigOutput
	ToAuditConfigOutputWithContext(context.Context) AuditConfigOutput
}

AuditConfigInput is an input type that accepts AuditConfigArgs and AuditConfigOutput values. You can construct a concrete instance of `AuditConfigInput` via:

AuditConfigArgs{...}

type AuditConfigOutput

type AuditConfigOutput struct{ *pulumi.OutputState }

Specifies the audit configuration for a service. The configuration determines which permission types are logged, and what identities, if any, are exempted from logging. An AuditConfig must have one or more AuditLogConfigs. If there are AuditConfigs for both `allServices` and a specific service, the union of the two AuditConfigs is used for that service: the log_types specified in each AuditConfig are enabled, and the exempted_members in each AuditLogConfig are exempted. Example Policy with multiple AuditConfigs: { "audit_configs": [ { "service": "allServices", "audit_log_configs": [ { "log_type": "DATA_READ", "exempted_members": [ "user:jose@example.com" ] }, { "log_type": "DATA_WRITE" }, { "log_type": "ADMIN_READ" } ] }, { "service": "sampleservice.googleapis.com", "audit_log_configs": [ { "log_type": "DATA_READ" }, { "log_type": "DATA_WRITE", "exempted_members": [ "user:aliya@example.com" ] } ] } ] } For sampleservice, this policy enables DATA_READ, DATA_WRITE and ADMIN_READ logging. It also exempts `jose@example.com` from DATA_READ logging, and `aliya@example.com` from DATA_WRITE logging.

func (AuditConfigOutput) AuditLogConfigs

func (o AuditConfigOutput) AuditLogConfigs() AuditLogConfigArrayOutput

The configuration for logging of each type of permission.

func (AuditConfigOutput) ElementType

func (AuditConfigOutput) ElementType() reflect.Type

func (AuditConfigOutput) Service

Specifies a service that will be enabled for audit logging. For example, `storage.googleapis.com`, `cloudsql.googleapis.com`. `allServices` is a special value that covers all services.

func (AuditConfigOutput) ToAuditConfigOutput

func (o AuditConfigOutput) ToAuditConfigOutput() AuditConfigOutput

func (AuditConfigOutput) ToAuditConfigOutputWithContext

func (o AuditConfigOutput) ToAuditConfigOutputWithContext(ctx context.Context) AuditConfigOutput

type AuditConfigResponse

type AuditConfigResponse struct {
	// The configuration for logging of each type of permission.
	AuditLogConfigs []AuditLogConfigResponse `pulumi:"auditLogConfigs"`
	// Specifies a service that will be enabled for audit logging. For example, `storage.googleapis.com`, `cloudsql.googleapis.com`. `allServices` is a special value that covers all services.
	Service string `pulumi:"service"`
}

Specifies the audit configuration for a service. The configuration determines which permission types are logged, and what identities, if any, are exempted from logging. An AuditConfig must have one or more AuditLogConfigs. If there are AuditConfigs for both `allServices` and a specific service, the union of the two AuditConfigs is used for that service: the log_types specified in each AuditConfig are enabled, and the exempted_members in each AuditLogConfig are exempted. Example Policy with multiple AuditConfigs: { "audit_configs": [ { "service": "allServices", "audit_log_configs": [ { "log_type": "DATA_READ", "exempted_members": [ "user:jose@example.com" ] }, { "log_type": "DATA_WRITE" }, { "log_type": "ADMIN_READ" } ] }, { "service": "sampleservice.googleapis.com", "audit_log_configs": [ { "log_type": "DATA_READ" }, { "log_type": "DATA_WRITE", "exempted_members": [ "user:aliya@example.com" ] } ] } ] } For sampleservice, this policy enables DATA_READ, DATA_WRITE and ADMIN_READ logging. It also exempts `jose@example.com` from DATA_READ logging, and `aliya@example.com` from DATA_WRITE logging.

type AuditConfigResponseArrayOutput

type AuditConfigResponseArrayOutput struct{ *pulumi.OutputState }

func (AuditConfigResponseArrayOutput) ElementType

func (AuditConfigResponseArrayOutput) Index

func (AuditConfigResponseArrayOutput) ToAuditConfigResponseArrayOutput

func (o AuditConfigResponseArrayOutput) ToAuditConfigResponseArrayOutput() AuditConfigResponseArrayOutput

func (AuditConfigResponseArrayOutput) ToAuditConfigResponseArrayOutputWithContext

func (o AuditConfigResponseArrayOutput) ToAuditConfigResponseArrayOutputWithContext(ctx context.Context) AuditConfigResponseArrayOutput

type AuditConfigResponseOutput

type AuditConfigResponseOutput struct{ *pulumi.OutputState }

Specifies the audit configuration for a service. The configuration determines which permission types are logged, and what identities, if any, are exempted from logging. An AuditConfig must have one or more AuditLogConfigs. If there are AuditConfigs for both `allServices` and a specific service, the union of the two AuditConfigs is used for that service: the log_types specified in each AuditConfig are enabled, and the exempted_members in each AuditLogConfig are exempted. Example Policy with multiple AuditConfigs: { "audit_configs": [ { "service": "allServices", "audit_log_configs": [ { "log_type": "DATA_READ", "exempted_members": [ "user:jose@example.com" ] }, { "log_type": "DATA_WRITE" }, { "log_type": "ADMIN_READ" } ] }, { "service": "sampleservice.googleapis.com", "audit_log_configs": [ { "log_type": "DATA_READ" }, { "log_type": "DATA_WRITE", "exempted_members": [ "user:aliya@example.com" ] } ] } ] } For sampleservice, this policy enables DATA_READ, DATA_WRITE and ADMIN_READ logging. It also exempts `jose@example.com` from DATA_READ logging, and `aliya@example.com` from DATA_WRITE logging.

func (AuditConfigResponseOutput) AuditLogConfigs

The configuration for logging of each type of permission.

func (AuditConfigResponseOutput) ElementType

func (AuditConfigResponseOutput) ElementType() reflect.Type

func (AuditConfigResponseOutput) Service

Specifies a service that will be enabled for audit logging. For example, `storage.googleapis.com`, `cloudsql.googleapis.com`. `allServices` is a special value that covers all services.

func (AuditConfigResponseOutput) ToAuditConfigResponseOutput

func (o AuditConfigResponseOutput) ToAuditConfigResponseOutput() AuditConfigResponseOutput

func (AuditConfigResponseOutput) ToAuditConfigResponseOutputWithContext

func (o AuditConfigResponseOutput) ToAuditConfigResponseOutputWithContext(ctx context.Context) AuditConfigResponseOutput

type AuditLogConfig

type AuditLogConfig struct {
	// Specifies the identities that do not cause logging for this type of permission. Follows the same format of Binding.members.
	ExemptedMembers       []string `pulumi:"exemptedMembers"`
	IgnoreChildExemptions *bool    `pulumi:"ignoreChildExemptions"`
	// The log type that this config enables.
	LogType *AuditLogConfigLogType `pulumi:"logType"`
}

Provides the configuration for logging a type of permissions. Example: { "audit_log_configs": [ { "log_type": "DATA_READ", "exempted_members": [ "user:jose@example.com" ] }, { "log_type": "DATA_WRITE" } ] } This enables 'DATA_READ' and 'DATA_WRITE' logging, while exempting jose@example.com from DATA_READ logging.

type AuditLogConfigArgs

type AuditLogConfigArgs struct {
	// Specifies the identities that do not cause logging for this type of permission. Follows the same format of Binding.members.
	ExemptedMembers       pulumi.StringArrayInput `pulumi:"exemptedMembers"`
	IgnoreChildExemptions pulumi.BoolPtrInput     `pulumi:"ignoreChildExemptions"`
	// The log type that this config enables.
	LogType AuditLogConfigLogTypePtrInput `pulumi:"logType"`
}

Provides the configuration for logging a type of permissions. Example: { "audit_log_configs": [ { "log_type": "DATA_READ", "exempted_members": [ "user:jose@example.com" ] }, { "log_type": "DATA_WRITE" } ] } This enables 'DATA_READ' and 'DATA_WRITE' logging, while exempting jose@example.com from DATA_READ logging.

func (AuditLogConfigArgs) ElementType

func (AuditLogConfigArgs) ElementType() reflect.Type

func (AuditLogConfigArgs) ToAuditLogConfigOutput

func (i AuditLogConfigArgs) ToAuditLogConfigOutput() AuditLogConfigOutput

func (AuditLogConfigArgs) ToAuditLogConfigOutputWithContext

func (i AuditLogConfigArgs) ToAuditLogConfigOutputWithContext(ctx context.Context) AuditLogConfigOutput

type AuditLogConfigArray

type AuditLogConfigArray []AuditLogConfigInput

func (AuditLogConfigArray) ElementType

func (AuditLogConfigArray) ElementType() reflect.Type

func (AuditLogConfigArray) ToAuditLogConfigArrayOutput

func (i AuditLogConfigArray) ToAuditLogConfigArrayOutput() AuditLogConfigArrayOutput

func (AuditLogConfigArray) ToAuditLogConfigArrayOutputWithContext

func (i AuditLogConfigArray) ToAuditLogConfigArrayOutputWithContext(ctx context.Context) AuditLogConfigArrayOutput

type AuditLogConfigArrayInput

type AuditLogConfigArrayInput interface {
	pulumi.Input

	ToAuditLogConfigArrayOutput() AuditLogConfigArrayOutput
	ToAuditLogConfigArrayOutputWithContext(context.Context) AuditLogConfigArrayOutput
}

AuditLogConfigArrayInput is an input type that accepts AuditLogConfigArray and AuditLogConfigArrayOutput values. You can construct a concrete instance of `AuditLogConfigArrayInput` via:

AuditLogConfigArray{ AuditLogConfigArgs{...} }

type AuditLogConfigArrayOutput

type AuditLogConfigArrayOutput struct{ *pulumi.OutputState }

func (AuditLogConfigArrayOutput) ElementType

func (AuditLogConfigArrayOutput) ElementType() reflect.Type

func (AuditLogConfigArrayOutput) Index

func (AuditLogConfigArrayOutput) ToAuditLogConfigArrayOutput

func (o AuditLogConfigArrayOutput) ToAuditLogConfigArrayOutput() AuditLogConfigArrayOutput

func (AuditLogConfigArrayOutput) ToAuditLogConfigArrayOutputWithContext

func (o AuditLogConfigArrayOutput) ToAuditLogConfigArrayOutputWithContext(ctx context.Context) AuditLogConfigArrayOutput

type AuditLogConfigInput

type AuditLogConfigInput interface {
	pulumi.Input

	ToAuditLogConfigOutput() AuditLogConfigOutput
	ToAuditLogConfigOutputWithContext(context.Context) AuditLogConfigOutput
}

AuditLogConfigInput is an input type that accepts AuditLogConfigArgs and AuditLogConfigOutput values. You can construct a concrete instance of `AuditLogConfigInput` via:

AuditLogConfigArgs{...}

type AuditLogConfigLogType added in v0.4.0

type AuditLogConfigLogType string

The log type that this config enables.

func (AuditLogConfigLogType) ElementType added in v0.4.0

func (AuditLogConfigLogType) ElementType() reflect.Type

func (AuditLogConfigLogType) ToAuditLogConfigLogTypeOutput added in v0.6.0

func (e AuditLogConfigLogType) ToAuditLogConfigLogTypeOutput() AuditLogConfigLogTypeOutput

func (AuditLogConfigLogType) ToAuditLogConfigLogTypeOutputWithContext added in v0.6.0

func (e AuditLogConfigLogType) ToAuditLogConfigLogTypeOutputWithContext(ctx context.Context) AuditLogConfigLogTypeOutput

func (AuditLogConfigLogType) ToAuditLogConfigLogTypePtrOutput added in v0.6.0

func (e AuditLogConfigLogType) ToAuditLogConfigLogTypePtrOutput() AuditLogConfigLogTypePtrOutput

func (AuditLogConfigLogType) ToAuditLogConfigLogTypePtrOutputWithContext added in v0.6.0

func (e AuditLogConfigLogType) ToAuditLogConfigLogTypePtrOutputWithContext(ctx context.Context) AuditLogConfigLogTypePtrOutput

func (AuditLogConfigLogType) ToStringOutput added in v0.4.0

func (e AuditLogConfigLogType) ToStringOutput() pulumi.StringOutput

func (AuditLogConfigLogType) ToStringOutputWithContext added in v0.4.0

func (e AuditLogConfigLogType) ToStringOutputWithContext(ctx context.Context) pulumi.StringOutput

func (AuditLogConfigLogType) ToStringPtrOutput added in v0.4.0

func (e AuditLogConfigLogType) ToStringPtrOutput() pulumi.StringPtrOutput

func (AuditLogConfigLogType) ToStringPtrOutputWithContext added in v0.4.0

func (e AuditLogConfigLogType) ToStringPtrOutputWithContext(ctx context.Context) pulumi.StringPtrOutput

type AuditLogConfigLogTypeInput added in v0.6.0

type AuditLogConfigLogTypeInput interface {
	pulumi.Input

	ToAuditLogConfigLogTypeOutput() AuditLogConfigLogTypeOutput
	ToAuditLogConfigLogTypeOutputWithContext(context.Context) AuditLogConfigLogTypeOutput
}

AuditLogConfigLogTypeInput is an input type that accepts AuditLogConfigLogTypeArgs and AuditLogConfigLogTypeOutput values. You can construct a concrete instance of `AuditLogConfigLogTypeInput` via:

AuditLogConfigLogTypeArgs{...}

type AuditLogConfigLogTypeOutput added in v0.6.0

type AuditLogConfigLogTypeOutput struct{ *pulumi.OutputState }

func (AuditLogConfigLogTypeOutput) ElementType added in v0.6.0

func (AuditLogConfigLogTypeOutput) ToAuditLogConfigLogTypeOutput added in v0.6.0

func (o AuditLogConfigLogTypeOutput) ToAuditLogConfigLogTypeOutput() AuditLogConfigLogTypeOutput

func (AuditLogConfigLogTypeOutput) ToAuditLogConfigLogTypeOutputWithContext added in v0.6.0

func (o AuditLogConfigLogTypeOutput) ToAuditLogConfigLogTypeOutputWithContext(ctx context.Context) AuditLogConfigLogTypeOutput

func (AuditLogConfigLogTypeOutput) ToAuditLogConfigLogTypePtrOutput added in v0.6.0

func (o AuditLogConfigLogTypeOutput) ToAuditLogConfigLogTypePtrOutput() AuditLogConfigLogTypePtrOutput

func (AuditLogConfigLogTypeOutput) ToAuditLogConfigLogTypePtrOutputWithContext added in v0.6.0

func (o AuditLogConfigLogTypeOutput) ToAuditLogConfigLogTypePtrOutputWithContext(ctx context.Context) AuditLogConfigLogTypePtrOutput

func (AuditLogConfigLogTypeOutput) ToStringOutput added in v0.6.0

func (o AuditLogConfigLogTypeOutput) ToStringOutput() pulumi.StringOutput

func (AuditLogConfigLogTypeOutput) ToStringOutputWithContext added in v0.6.0

func (o AuditLogConfigLogTypeOutput) ToStringOutputWithContext(ctx context.Context) pulumi.StringOutput

func (AuditLogConfigLogTypeOutput) ToStringPtrOutput added in v0.6.0

func (o AuditLogConfigLogTypeOutput) ToStringPtrOutput() pulumi.StringPtrOutput

func (AuditLogConfigLogTypeOutput) ToStringPtrOutputWithContext added in v0.6.0

func (o AuditLogConfigLogTypeOutput) ToStringPtrOutputWithContext(ctx context.Context) pulumi.StringPtrOutput

type AuditLogConfigLogTypePtrInput added in v0.6.0

type AuditLogConfigLogTypePtrInput interface {
	pulumi.Input

	ToAuditLogConfigLogTypePtrOutput() AuditLogConfigLogTypePtrOutput
	ToAuditLogConfigLogTypePtrOutputWithContext(context.Context) AuditLogConfigLogTypePtrOutput
}

func AuditLogConfigLogTypePtr added in v0.6.0

func AuditLogConfigLogTypePtr(v string) AuditLogConfigLogTypePtrInput

type AuditLogConfigLogTypePtrOutput added in v0.6.0

type AuditLogConfigLogTypePtrOutput struct{ *pulumi.OutputState }

func (AuditLogConfigLogTypePtrOutput) Elem added in v0.6.0

func (AuditLogConfigLogTypePtrOutput) ElementType added in v0.6.0

func (AuditLogConfigLogTypePtrOutput) ToAuditLogConfigLogTypePtrOutput added in v0.6.0

func (o AuditLogConfigLogTypePtrOutput) ToAuditLogConfigLogTypePtrOutput() AuditLogConfigLogTypePtrOutput

func (AuditLogConfigLogTypePtrOutput) ToAuditLogConfigLogTypePtrOutputWithContext added in v0.6.0

func (o AuditLogConfigLogTypePtrOutput) ToAuditLogConfigLogTypePtrOutputWithContext(ctx context.Context) AuditLogConfigLogTypePtrOutput

func (AuditLogConfigLogTypePtrOutput) ToStringPtrOutput added in v0.6.0

func (AuditLogConfigLogTypePtrOutput) ToStringPtrOutputWithContext added in v0.6.0

func (o AuditLogConfigLogTypePtrOutput) ToStringPtrOutputWithContext(ctx context.Context) pulumi.StringPtrOutput

type AuditLogConfigOutput

type AuditLogConfigOutput struct{ *pulumi.OutputState }

Provides the configuration for logging a type of permissions. Example: { "audit_log_configs": [ { "log_type": "DATA_READ", "exempted_members": [ "user:jose@example.com" ] }, { "log_type": "DATA_WRITE" } ] } This enables 'DATA_READ' and 'DATA_WRITE' logging, while exempting jose@example.com from DATA_READ logging.

func (AuditLogConfigOutput) ElementType

func (AuditLogConfigOutput) ElementType() reflect.Type

func (AuditLogConfigOutput) ExemptedMembers

func (o AuditLogConfigOutput) ExemptedMembers() pulumi.StringArrayOutput

Specifies the identities that do not cause logging for this type of permission. Follows the same format of Binding.members.

func (AuditLogConfigOutput) IgnoreChildExemptions

func (o AuditLogConfigOutput) IgnoreChildExemptions() pulumi.BoolPtrOutput

func (AuditLogConfigOutput) LogType

The log type that this config enables.

func (AuditLogConfigOutput) ToAuditLogConfigOutput

func (o AuditLogConfigOutput) ToAuditLogConfigOutput() AuditLogConfigOutput

func (AuditLogConfigOutput) ToAuditLogConfigOutputWithContext

func (o AuditLogConfigOutput) ToAuditLogConfigOutputWithContext(ctx context.Context) AuditLogConfigOutput

type AuditLogConfigResponse

type AuditLogConfigResponse struct {
	// Specifies the identities that do not cause logging for this type of permission. Follows the same format of Binding.members.
	ExemptedMembers       []string `pulumi:"exemptedMembers"`
	IgnoreChildExemptions bool     `pulumi:"ignoreChildExemptions"`
	// The log type that this config enables.
	LogType string `pulumi:"logType"`
}

Provides the configuration for logging a type of permissions. Example: { "audit_log_configs": [ { "log_type": "DATA_READ", "exempted_members": [ "user:jose@example.com" ] }, { "log_type": "DATA_WRITE" } ] } This enables 'DATA_READ' and 'DATA_WRITE' logging, while exempting jose@example.com from DATA_READ logging.

type AuditLogConfigResponseArrayOutput

type AuditLogConfigResponseArrayOutput struct{ *pulumi.OutputState }

func (AuditLogConfigResponseArrayOutput) ElementType

func (AuditLogConfigResponseArrayOutput) Index

func (AuditLogConfigResponseArrayOutput) ToAuditLogConfigResponseArrayOutput

func (o AuditLogConfigResponseArrayOutput) ToAuditLogConfigResponseArrayOutput() AuditLogConfigResponseArrayOutput

func (AuditLogConfigResponseArrayOutput) ToAuditLogConfigResponseArrayOutputWithContext

func (o AuditLogConfigResponseArrayOutput) ToAuditLogConfigResponseArrayOutputWithContext(ctx context.Context) AuditLogConfigResponseArrayOutput

type AuditLogConfigResponseOutput

type AuditLogConfigResponseOutput struct{ *pulumi.OutputState }

Provides the configuration for logging a type of permissions. Example: { "audit_log_configs": [ { "log_type": "DATA_READ", "exempted_members": [ "user:jose@example.com" ] }, { "log_type": "DATA_WRITE" } ] } This enables 'DATA_READ' and 'DATA_WRITE' logging, while exempting jose@example.com from DATA_READ logging.

func (AuditLogConfigResponseOutput) ElementType

func (AuditLogConfigResponseOutput) ExemptedMembers

Specifies the identities that do not cause logging for this type of permission. Follows the same format of Binding.members.

func (AuditLogConfigResponseOutput) IgnoreChildExemptions

func (o AuditLogConfigResponseOutput) IgnoreChildExemptions() pulumi.BoolOutput

func (AuditLogConfigResponseOutput) LogType

The log type that this config enables.

func (AuditLogConfigResponseOutput) ToAuditLogConfigResponseOutput

func (o AuditLogConfigResponseOutput) ToAuditLogConfigResponseOutput() AuditLogConfigResponseOutput

func (AuditLogConfigResponseOutput) ToAuditLogConfigResponseOutputWithContext

func (o AuditLogConfigResponseOutput) ToAuditLogConfigResponseOutputWithContext(ctx context.Context) AuditLogConfigResponseOutput

type AuthorizationLoggingOptions

type AuthorizationLoggingOptions struct {
	// The type of the permission that was checked.
	PermissionType *AuthorizationLoggingOptionsPermissionType `pulumi:"permissionType"`
}

Authorization-related information used by Cloud Audit Logging.

type AuthorizationLoggingOptionsArgs

type AuthorizationLoggingOptionsArgs struct {
	// The type of the permission that was checked.
	PermissionType AuthorizationLoggingOptionsPermissionTypePtrInput `pulumi:"permissionType"`
}

Authorization-related information used by Cloud Audit Logging.

func (AuthorizationLoggingOptionsArgs) ElementType

func (AuthorizationLoggingOptionsArgs) ToAuthorizationLoggingOptionsOutput

func (i AuthorizationLoggingOptionsArgs) ToAuthorizationLoggingOptionsOutput() AuthorizationLoggingOptionsOutput

func (AuthorizationLoggingOptionsArgs) ToAuthorizationLoggingOptionsOutputWithContext

func (i AuthorizationLoggingOptionsArgs) ToAuthorizationLoggingOptionsOutputWithContext(ctx context.Context) AuthorizationLoggingOptionsOutput

func (AuthorizationLoggingOptionsArgs) ToAuthorizationLoggingOptionsPtrOutput

func (i AuthorizationLoggingOptionsArgs) ToAuthorizationLoggingOptionsPtrOutput() AuthorizationLoggingOptionsPtrOutput

func (AuthorizationLoggingOptionsArgs) ToAuthorizationLoggingOptionsPtrOutputWithContext

func (i AuthorizationLoggingOptionsArgs) ToAuthorizationLoggingOptionsPtrOutputWithContext(ctx context.Context) AuthorizationLoggingOptionsPtrOutput

type AuthorizationLoggingOptionsInput

type AuthorizationLoggingOptionsInput interface {
	pulumi.Input

	ToAuthorizationLoggingOptionsOutput() AuthorizationLoggingOptionsOutput
	ToAuthorizationLoggingOptionsOutputWithContext(context.Context) AuthorizationLoggingOptionsOutput
}

AuthorizationLoggingOptionsInput is an input type that accepts AuthorizationLoggingOptionsArgs and AuthorizationLoggingOptionsOutput values. You can construct a concrete instance of `AuthorizationLoggingOptionsInput` via:

AuthorizationLoggingOptionsArgs{...}

type AuthorizationLoggingOptionsOutput

type AuthorizationLoggingOptionsOutput struct{ *pulumi.OutputState }

Authorization-related information used by Cloud Audit Logging.

func (AuthorizationLoggingOptionsOutput) ElementType

func (AuthorizationLoggingOptionsOutput) PermissionType

The type of the permission that was checked.

func (AuthorizationLoggingOptionsOutput) ToAuthorizationLoggingOptionsOutput

func (o AuthorizationLoggingOptionsOutput) ToAuthorizationLoggingOptionsOutput() AuthorizationLoggingOptionsOutput

func (AuthorizationLoggingOptionsOutput) ToAuthorizationLoggingOptionsOutputWithContext

func (o AuthorizationLoggingOptionsOutput) ToAuthorizationLoggingOptionsOutputWithContext(ctx context.Context) AuthorizationLoggingOptionsOutput

func (AuthorizationLoggingOptionsOutput) ToAuthorizationLoggingOptionsPtrOutput

func (o AuthorizationLoggingOptionsOutput) ToAuthorizationLoggingOptionsPtrOutput() AuthorizationLoggingOptionsPtrOutput

func (AuthorizationLoggingOptionsOutput) ToAuthorizationLoggingOptionsPtrOutputWithContext

func (o AuthorizationLoggingOptionsOutput) ToAuthorizationLoggingOptionsPtrOutputWithContext(ctx context.Context) AuthorizationLoggingOptionsPtrOutput

type AuthorizationLoggingOptionsPermissionType added in v0.4.0

type AuthorizationLoggingOptionsPermissionType string

The type of the permission that was checked.

func (AuthorizationLoggingOptionsPermissionType) ElementType added in v0.4.0

func (AuthorizationLoggingOptionsPermissionType) ToAuthorizationLoggingOptionsPermissionTypeOutput added in v0.6.0

func (e AuthorizationLoggingOptionsPermissionType) ToAuthorizationLoggingOptionsPermissionTypeOutput() AuthorizationLoggingOptionsPermissionTypeOutput

func (AuthorizationLoggingOptionsPermissionType) ToAuthorizationLoggingOptionsPermissionTypeOutputWithContext added in v0.6.0

func (e AuthorizationLoggingOptionsPermissionType) ToAuthorizationLoggingOptionsPermissionTypeOutputWithContext(ctx context.Context) AuthorizationLoggingOptionsPermissionTypeOutput

func (AuthorizationLoggingOptionsPermissionType) ToAuthorizationLoggingOptionsPermissionTypePtrOutput added in v0.6.0

func (e AuthorizationLoggingOptionsPermissionType) ToAuthorizationLoggingOptionsPermissionTypePtrOutput() AuthorizationLoggingOptionsPermissionTypePtrOutput

func (AuthorizationLoggingOptionsPermissionType) ToAuthorizationLoggingOptionsPermissionTypePtrOutputWithContext added in v0.6.0

func (e AuthorizationLoggingOptionsPermissionType) ToAuthorizationLoggingOptionsPermissionTypePtrOutputWithContext(ctx context.Context) AuthorizationLoggingOptionsPermissionTypePtrOutput

func (AuthorizationLoggingOptionsPermissionType) ToStringOutput added in v0.4.0

func (AuthorizationLoggingOptionsPermissionType) ToStringOutputWithContext added in v0.4.0

func (AuthorizationLoggingOptionsPermissionType) ToStringPtrOutput added in v0.4.0

func (AuthorizationLoggingOptionsPermissionType) ToStringPtrOutputWithContext added in v0.4.0

type AuthorizationLoggingOptionsPermissionTypeInput added in v0.6.0

type AuthorizationLoggingOptionsPermissionTypeInput interface {
	pulumi.Input

	ToAuthorizationLoggingOptionsPermissionTypeOutput() AuthorizationLoggingOptionsPermissionTypeOutput
	ToAuthorizationLoggingOptionsPermissionTypeOutputWithContext(context.Context) AuthorizationLoggingOptionsPermissionTypeOutput
}

AuthorizationLoggingOptionsPermissionTypeInput is an input type that accepts AuthorizationLoggingOptionsPermissionTypeArgs and AuthorizationLoggingOptionsPermissionTypeOutput values. You can construct a concrete instance of `AuthorizationLoggingOptionsPermissionTypeInput` via:

AuthorizationLoggingOptionsPermissionTypeArgs{...}

type AuthorizationLoggingOptionsPermissionTypeOutput added in v0.6.0

type AuthorizationLoggingOptionsPermissionTypeOutput struct{ *pulumi.OutputState }

func (AuthorizationLoggingOptionsPermissionTypeOutput) ElementType added in v0.6.0

func (AuthorizationLoggingOptionsPermissionTypeOutput) ToAuthorizationLoggingOptionsPermissionTypeOutput added in v0.6.0

func (o AuthorizationLoggingOptionsPermissionTypeOutput) ToAuthorizationLoggingOptionsPermissionTypeOutput() AuthorizationLoggingOptionsPermissionTypeOutput

func (AuthorizationLoggingOptionsPermissionTypeOutput) ToAuthorizationLoggingOptionsPermissionTypeOutputWithContext added in v0.6.0

func (o AuthorizationLoggingOptionsPermissionTypeOutput) ToAuthorizationLoggingOptionsPermissionTypeOutputWithContext(ctx context.Context) AuthorizationLoggingOptionsPermissionTypeOutput

func (AuthorizationLoggingOptionsPermissionTypeOutput) ToAuthorizationLoggingOptionsPermissionTypePtrOutput added in v0.6.0

func (o AuthorizationLoggingOptionsPermissionTypeOutput) ToAuthorizationLoggingOptionsPermissionTypePtrOutput() AuthorizationLoggingOptionsPermissionTypePtrOutput

func (AuthorizationLoggingOptionsPermissionTypeOutput) ToAuthorizationLoggingOptionsPermissionTypePtrOutputWithContext added in v0.6.0

func (o AuthorizationLoggingOptionsPermissionTypeOutput) ToAuthorizationLoggingOptionsPermissionTypePtrOutputWithContext(ctx context.Context) AuthorizationLoggingOptionsPermissionTypePtrOutput

func (AuthorizationLoggingOptionsPermissionTypeOutput) ToStringOutput added in v0.6.0

func (AuthorizationLoggingOptionsPermissionTypeOutput) ToStringOutputWithContext added in v0.6.0

func (AuthorizationLoggingOptionsPermissionTypeOutput) ToStringPtrOutput added in v0.6.0

func (AuthorizationLoggingOptionsPermissionTypeOutput) ToStringPtrOutputWithContext added in v0.6.0

type AuthorizationLoggingOptionsPermissionTypePtrInput added in v0.6.0

type AuthorizationLoggingOptionsPermissionTypePtrInput interface {
	pulumi.Input

	ToAuthorizationLoggingOptionsPermissionTypePtrOutput() AuthorizationLoggingOptionsPermissionTypePtrOutput
	ToAuthorizationLoggingOptionsPermissionTypePtrOutputWithContext(context.Context) AuthorizationLoggingOptionsPermissionTypePtrOutput
}

func AuthorizationLoggingOptionsPermissionTypePtr added in v0.6.0

func AuthorizationLoggingOptionsPermissionTypePtr(v string) AuthorizationLoggingOptionsPermissionTypePtrInput

type AuthorizationLoggingOptionsPermissionTypePtrOutput added in v0.6.0

type AuthorizationLoggingOptionsPermissionTypePtrOutput struct{ *pulumi.OutputState }

func (AuthorizationLoggingOptionsPermissionTypePtrOutput) Elem added in v0.6.0

func (AuthorizationLoggingOptionsPermissionTypePtrOutput) ElementType added in v0.6.0

func (AuthorizationLoggingOptionsPermissionTypePtrOutput) ToAuthorizationLoggingOptionsPermissionTypePtrOutput added in v0.6.0

func (o AuthorizationLoggingOptionsPermissionTypePtrOutput) ToAuthorizationLoggingOptionsPermissionTypePtrOutput() AuthorizationLoggingOptionsPermissionTypePtrOutput

func (AuthorizationLoggingOptionsPermissionTypePtrOutput) ToAuthorizationLoggingOptionsPermissionTypePtrOutputWithContext added in v0.6.0

func (o AuthorizationLoggingOptionsPermissionTypePtrOutput) ToAuthorizationLoggingOptionsPermissionTypePtrOutputWithContext(ctx context.Context) AuthorizationLoggingOptionsPermissionTypePtrOutput

func (AuthorizationLoggingOptionsPermissionTypePtrOutput) ToStringPtrOutput added in v0.6.0

func (AuthorizationLoggingOptionsPermissionTypePtrOutput) ToStringPtrOutputWithContext added in v0.6.0

type AuthorizationLoggingOptionsPtrInput

type AuthorizationLoggingOptionsPtrInput interface {
	pulumi.Input

	ToAuthorizationLoggingOptionsPtrOutput() AuthorizationLoggingOptionsPtrOutput
	ToAuthorizationLoggingOptionsPtrOutputWithContext(context.Context) AuthorizationLoggingOptionsPtrOutput
}

AuthorizationLoggingOptionsPtrInput is an input type that accepts AuthorizationLoggingOptionsArgs, AuthorizationLoggingOptionsPtr and AuthorizationLoggingOptionsPtrOutput values. You can construct a concrete instance of `AuthorizationLoggingOptionsPtrInput` via:

        AuthorizationLoggingOptionsArgs{...}

or:

        nil

type AuthorizationLoggingOptionsPtrOutput

type AuthorizationLoggingOptionsPtrOutput struct{ *pulumi.OutputState }

func (AuthorizationLoggingOptionsPtrOutput) Elem

func (AuthorizationLoggingOptionsPtrOutput) ElementType

func (AuthorizationLoggingOptionsPtrOutput) PermissionType

The type of the permission that was checked.

func (AuthorizationLoggingOptionsPtrOutput) ToAuthorizationLoggingOptionsPtrOutput

func (o AuthorizationLoggingOptionsPtrOutput) ToAuthorizationLoggingOptionsPtrOutput() AuthorizationLoggingOptionsPtrOutput

func (AuthorizationLoggingOptionsPtrOutput) ToAuthorizationLoggingOptionsPtrOutputWithContext

func (o AuthorizationLoggingOptionsPtrOutput) ToAuthorizationLoggingOptionsPtrOutputWithContext(ctx context.Context) AuthorizationLoggingOptionsPtrOutput

type AuthorizationLoggingOptionsResponse

type AuthorizationLoggingOptionsResponse struct {
	// The type of the permission that was checked.
	PermissionType string `pulumi:"permissionType"`
}

Authorization-related information used by Cloud Audit Logging.

type AuthorizationLoggingOptionsResponseOutput

type AuthorizationLoggingOptionsResponseOutput struct{ *pulumi.OutputState }

Authorization-related information used by Cloud Audit Logging.

func (AuthorizationLoggingOptionsResponseOutput) ElementType

func (AuthorizationLoggingOptionsResponseOutput) PermissionType

The type of the permission that was checked.

func (AuthorizationLoggingOptionsResponseOutput) ToAuthorizationLoggingOptionsResponseOutput

func (o AuthorizationLoggingOptionsResponseOutput) ToAuthorizationLoggingOptionsResponseOutput() AuthorizationLoggingOptionsResponseOutput

func (AuthorizationLoggingOptionsResponseOutput) ToAuthorizationLoggingOptionsResponseOutputWithContext

func (o AuthorizationLoggingOptionsResponseOutput) ToAuthorizationLoggingOptionsResponseOutputWithContext(ctx context.Context) AuthorizationLoggingOptionsResponseOutput

type Binding

type Binding struct {
	BindingId *string `pulumi:"bindingId"`
	// The condition that is associated with this binding. If the condition evaluates to `true`, then this binding applies to the current request. If the condition evaluates to `false`, then this binding does not apply to the current request. However, a different role binding might grant the same role to one or more of the principals in this binding. To learn which resources support conditions in their IAM policies, see the [IAM documentation](https://cloud.google.com/iam/help/conditions/resource-policies).
	Condition *Expr `pulumi:"condition"`
	// Specifies the principals requesting access for a Google Cloud resource. `members` can have the following values: * `allUsers`: A special identifier that represents anyone who is on the internet; with or without a Google account. * `allAuthenticatedUsers`: A special identifier that represents anyone who is authenticated with a Google account or a service account. Does not include identities that come from external identity providers (IdPs) through identity federation. * `user:{emailid}`: An email address that represents a specific Google account. For example, `alice@example.com` . * `serviceAccount:{emailid}`: An email address that represents a Google service account. For example, `my-other-app@appspot.gserviceaccount.com`. * `serviceAccount:{projectid}.svc.id.goog[{namespace}/{kubernetes-sa}]`: An identifier for a [Kubernetes service account](https://cloud.google.com/kubernetes-engine/docs/how-to/kubernetes-service-accounts). For example, `my-project.svc.id.goog[my-namespace/my-kubernetes-sa]`. * `group:{emailid}`: An email address that represents a Google group. For example, `admins@example.com`. * `domain:{domain}`: The G Suite domain (primary) that represents all the users of that domain. For example, `google.com` or `example.com`. * `deleted:user:{emailid}?uid={uniqueid}`: An email address (plus unique identifier) representing a user that has been recently deleted. For example, `alice@example.com?uid=123456789012345678901`. If the user is recovered, this value reverts to `user:{emailid}` and the recovered user retains the role in the binding. * `deleted:serviceAccount:{emailid}?uid={uniqueid}`: An email address (plus unique identifier) representing a service account that has been recently deleted. For example, `my-other-app@appspot.gserviceaccount.com?uid=123456789012345678901`. If the service account is undeleted, this value reverts to `serviceAccount:{emailid}` and the undeleted service account retains the role in the binding. * `deleted:group:{emailid}?uid={uniqueid}`: An email address (plus unique identifier) representing a Google group that has been recently deleted. For example, `admins@example.com?uid=123456789012345678901`. If the group is recovered, this value reverts to `group:{emailid}` and the recovered group retains the role in the binding.
	Members []string `pulumi:"members"`
	// Role that is assigned to the list of `members`, or principals. For example, `roles/viewer`, `roles/editor`, or `roles/owner`.
	Role *string `pulumi:"role"`
}

Associates `members`, or principals, with a `role`.

type BindingArgs

type BindingArgs struct {
	BindingId pulumi.StringPtrInput `pulumi:"bindingId"`
	// The condition that is associated with this binding. If the condition evaluates to `true`, then this binding applies to the current request. If the condition evaluates to `false`, then this binding does not apply to the current request. However, a different role binding might grant the same role to one or more of the principals in this binding. To learn which resources support conditions in their IAM policies, see the [IAM documentation](https://cloud.google.com/iam/help/conditions/resource-policies).
	Condition ExprPtrInput `pulumi:"condition"`
	// Specifies the principals requesting access for a Google Cloud resource. `members` can have the following values: * `allUsers`: A special identifier that represents anyone who is on the internet; with or without a Google account. * `allAuthenticatedUsers`: A special identifier that represents anyone who is authenticated with a Google account or a service account. Does not include identities that come from external identity providers (IdPs) through identity federation. * `user:{emailid}`: An email address that represents a specific Google account. For example, `alice@example.com` . * `serviceAccount:{emailid}`: An email address that represents a Google service account. For example, `my-other-app@appspot.gserviceaccount.com`. * `serviceAccount:{projectid}.svc.id.goog[{namespace}/{kubernetes-sa}]`: An identifier for a [Kubernetes service account](https://cloud.google.com/kubernetes-engine/docs/how-to/kubernetes-service-accounts). For example, `my-project.svc.id.goog[my-namespace/my-kubernetes-sa]`. * `group:{emailid}`: An email address that represents a Google group. For example, `admins@example.com`. * `domain:{domain}`: The G Suite domain (primary) that represents all the users of that domain. For example, `google.com` or `example.com`. * `deleted:user:{emailid}?uid={uniqueid}`: An email address (plus unique identifier) representing a user that has been recently deleted. For example, `alice@example.com?uid=123456789012345678901`. If the user is recovered, this value reverts to `user:{emailid}` and the recovered user retains the role in the binding. * `deleted:serviceAccount:{emailid}?uid={uniqueid}`: An email address (plus unique identifier) representing a service account that has been recently deleted. For example, `my-other-app@appspot.gserviceaccount.com?uid=123456789012345678901`. If the service account is undeleted, this value reverts to `serviceAccount:{emailid}` and the undeleted service account retains the role in the binding. * `deleted:group:{emailid}?uid={uniqueid}`: An email address (plus unique identifier) representing a Google group that has been recently deleted. For example, `admins@example.com?uid=123456789012345678901`. If the group is recovered, this value reverts to `group:{emailid}` and the recovered group retains the role in the binding.
	Members pulumi.StringArrayInput `pulumi:"members"`
	// Role that is assigned to the list of `members`, or principals. For example, `roles/viewer`, `roles/editor`, or `roles/owner`.
	Role pulumi.StringPtrInput `pulumi:"role"`
}

Associates `members`, or principals, with a `role`.

func (BindingArgs) ElementType

func (BindingArgs) ElementType() reflect.Type

func (BindingArgs) ToBindingOutput

func (i BindingArgs) ToBindingOutput() BindingOutput

func (BindingArgs) ToBindingOutputWithContext

func (i BindingArgs) ToBindingOutputWithContext(ctx context.Context) BindingOutput

type BindingArray

type BindingArray []BindingInput

func (BindingArray) ElementType

func (BindingArray) ElementType() reflect.Type

func (BindingArray) ToBindingArrayOutput

func (i BindingArray) ToBindingArrayOutput() BindingArrayOutput

func (BindingArray) ToBindingArrayOutputWithContext

func (i BindingArray) ToBindingArrayOutputWithContext(ctx context.Context) BindingArrayOutput

type BindingArrayInput

type BindingArrayInput interface {
	pulumi.Input

	ToBindingArrayOutput() BindingArrayOutput
	ToBindingArrayOutputWithContext(context.Context) BindingArrayOutput
}

BindingArrayInput is an input type that accepts BindingArray and BindingArrayOutput values. You can construct a concrete instance of `BindingArrayInput` via:

BindingArray{ BindingArgs{...} }

type BindingArrayOutput

type BindingArrayOutput struct{ *pulumi.OutputState }

func (BindingArrayOutput) ElementType

func (BindingArrayOutput) ElementType() reflect.Type

func (BindingArrayOutput) Index

func (BindingArrayOutput) ToBindingArrayOutput

func (o BindingArrayOutput) ToBindingArrayOutput() BindingArrayOutput

func (BindingArrayOutput) ToBindingArrayOutputWithContext

func (o BindingArrayOutput) ToBindingArrayOutputWithContext(ctx context.Context) BindingArrayOutput

type BindingInput

type BindingInput interface {
	pulumi.Input

	ToBindingOutput() BindingOutput
	ToBindingOutputWithContext(context.Context) BindingOutput
}

BindingInput is an input type that accepts BindingArgs and BindingOutput values. You can construct a concrete instance of `BindingInput` via:

BindingArgs{...}

type BindingOutput

type BindingOutput struct{ *pulumi.OutputState }

Associates `members`, or principals, with a `role`.

func (BindingOutput) BindingId

func (o BindingOutput) BindingId() pulumi.StringPtrOutput

func (BindingOutput) Condition

func (o BindingOutput) Condition() ExprPtrOutput

The condition that is associated with this binding. If the condition evaluates to `true`, then this binding applies to the current request. If the condition evaluates to `false`, then this binding does not apply to the current request. However, a different role binding might grant the same role to one or more of the principals in this binding. To learn which resources support conditions in their IAM policies, see the [IAM documentation](https://cloud.google.com/iam/help/conditions/resource-policies).

func (BindingOutput) ElementType

func (BindingOutput) ElementType() reflect.Type

func (BindingOutput) Members

Specifies the principals requesting access for a Google Cloud resource. `members` can have the following values: * `allUsers`: A special identifier that represents anyone who is on the internet; with or without a Google account. * `allAuthenticatedUsers`: A special identifier that represents anyone who is authenticated with a Google account or a service account. Does not include identities that come from external identity providers (IdPs) through identity federation. * `user:{emailid}`: An email address that represents a specific Google account. For example, `alice@example.com` . * `serviceAccount:{emailid}`: An email address that represents a Google service account. For example, `my-other-app@appspot.gserviceaccount.com`. * `serviceAccount:{projectid}.svc.id.goog[{namespace}/{kubernetes-sa}]`: An identifier for a [Kubernetes service account](https://cloud.google.com/kubernetes-engine/docs/how-to/kubernetes-service-accounts). For example, `my-project.svc.id.goog[my-namespace/my-kubernetes-sa]`. * `group:{emailid}`: An email address that represents a Google group. For example, `admins@example.com`. * `domain:{domain}`: The G Suite domain (primary) that represents all the users of that domain. For example, `google.com` or `example.com`. * `deleted:user:{emailid}?uid={uniqueid}`: An email address (plus unique identifier) representing a user that has been recently deleted. For example, `alice@example.com?uid=123456789012345678901`. If the user is recovered, this value reverts to `user:{emailid}` and the recovered user retains the role in the binding. * `deleted:serviceAccount:{emailid}?uid={uniqueid}`: An email address (plus unique identifier) representing a service account that has been recently deleted. For example, `my-other-app@appspot.gserviceaccount.com?uid=123456789012345678901`. If the service account is undeleted, this value reverts to `serviceAccount:{emailid}` and the undeleted service account retains the role in the binding. * `deleted:group:{emailid}?uid={uniqueid}`: An email address (plus unique identifier) representing a Google group that has been recently deleted. For example, `admins@example.com?uid=123456789012345678901`. If the group is recovered, this value reverts to `group:{emailid}` and the recovered group retains the role in the binding.

func (BindingOutput) Role

Role that is assigned to the list of `members`, or principals. For example, `roles/viewer`, `roles/editor`, or `roles/owner`.

func (BindingOutput) ToBindingOutput

func (o BindingOutput) ToBindingOutput() BindingOutput

func (BindingOutput) ToBindingOutputWithContext

func (o BindingOutput) ToBindingOutputWithContext(ctx context.Context) BindingOutput

type BindingResponse

type BindingResponse struct {
	BindingId string `pulumi:"bindingId"`
	// The condition that is associated with this binding. If the condition evaluates to `true`, then this binding applies to the current request. If the condition evaluates to `false`, then this binding does not apply to the current request. However, a different role binding might grant the same role to one or more of the principals in this binding. To learn which resources support conditions in their IAM policies, see the [IAM documentation](https://cloud.google.com/iam/help/conditions/resource-policies).
	Condition ExprResponse `pulumi:"condition"`
	// Specifies the principals requesting access for a Google Cloud resource. `members` can have the following values: * `allUsers`: A special identifier that represents anyone who is on the internet; with or without a Google account. * `allAuthenticatedUsers`: A special identifier that represents anyone who is authenticated with a Google account or a service account. Does not include identities that come from external identity providers (IdPs) through identity federation. * `user:{emailid}`: An email address that represents a specific Google account. For example, `alice@example.com` . * `serviceAccount:{emailid}`: An email address that represents a Google service account. For example, `my-other-app@appspot.gserviceaccount.com`. * `serviceAccount:{projectid}.svc.id.goog[{namespace}/{kubernetes-sa}]`: An identifier for a [Kubernetes service account](https://cloud.google.com/kubernetes-engine/docs/how-to/kubernetes-service-accounts). For example, `my-project.svc.id.goog[my-namespace/my-kubernetes-sa]`. * `group:{emailid}`: An email address that represents a Google group. For example, `admins@example.com`. * `domain:{domain}`: The G Suite domain (primary) that represents all the users of that domain. For example, `google.com` or `example.com`. * `deleted:user:{emailid}?uid={uniqueid}`: An email address (plus unique identifier) representing a user that has been recently deleted. For example, `alice@example.com?uid=123456789012345678901`. If the user is recovered, this value reverts to `user:{emailid}` and the recovered user retains the role in the binding. * `deleted:serviceAccount:{emailid}?uid={uniqueid}`: An email address (plus unique identifier) representing a service account that has been recently deleted. For example, `my-other-app@appspot.gserviceaccount.com?uid=123456789012345678901`. If the service account is undeleted, this value reverts to `serviceAccount:{emailid}` and the undeleted service account retains the role in the binding. * `deleted:group:{emailid}?uid={uniqueid}`: An email address (plus unique identifier) representing a Google group that has been recently deleted. For example, `admins@example.com?uid=123456789012345678901`. If the group is recovered, this value reverts to `group:{emailid}` and the recovered group retains the role in the binding.
	Members []string `pulumi:"members"`
	// Role that is assigned to the list of `members`, or principals. For example, `roles/viewer`, `roles/editor`, or `roles/owner`.
	Role string `pulumi:"role"`
}

Associates `members`, or principals, with a `role`.

type BindingResponseArrayOutput

type BindingResponseArrayOutput struct{ *pulumi.OutputState }

func (BindingResponseArrayOutput) ElementType

func (BindingResponseArrayOutput) ElementType() reflect.Type

func (BindingResponseArrayOutput) Index

func (BindingResponseArrayOutput) ToBindingResponseArrayOutput

func (o BindingResponseArrayOutput) ToBindingResponseArrayOutput() BindingResponseArrayOutput

func (BindingResponseArrayOutput) ToBindingResponseArrayOutputWithContext

func (o BindingResponseArrayOutput) ToBindingResponseArrayOutputWithContext(ctx context.Context) BindingResponseArrayOutput

type BindingResponseOutput

type BindingResponseOutput struct{ *pulumi.OutputState }

Associates `members`, or principals, with a `role`.

func (BindingResponseOutput) BindingId

func (BindingResponseOutput) Condition

The condition that is associated with this binding. If the condition evaluates to `true`, then this binding applies to the current request. If the condition evaluates to `false`, then this binding does not apply to the current request. However, a different role binding might grant the same role to one or more of the principals in this binding. To learn which resources support conditions in their IAM policies, see the [IAM documentation](https://cloud.google.com/iam/help/conditions/resource-policies).

func (BindingResponseOutput) ElementType

func (BindingResponseOutput) ElementType() reflect.Type

func (BindingResponseOutput) Members

Specifies the principals requesting access for a Google Cloud resource. `members` can have the following values: * `allUsers`: A special identifier that represents anyone who is on the internet; with or without a Google account. * `allAuthenticatedUsers`: A special identifier that represents anyone who is authenticated with a Google account or a service account. Does not include identities that come from external identity providers (IdPs) through identity federation. * `user:{emailid}`: An email address that represents a specific Google account. For example, `alice@example.com` . * `serviceAccount:{emailid}`: An email address that represents a Google service account. For example, `my-other-app@appspot.gserviceaccount.com`. * `serviceAccount:{projectid}.svc.id.goog[{namespace}/{kubernetes-sa}]`: An identifier for a [Kubernetes service account](https://cloud.google.com/kubernetes-engine/docs/how-to/kubernetes-service-accounts). For example, `my-project.svc.id.goog[my-namespace/my-kubernetes-sa]`. * `group:{emailid}`: An email address that represents a Google group. For example, `admins@example.com`. * `domain:{domain}`: The G Suite domain (primary) that represents all the users of that domain. For example, `google.com` or `example.com`. * `deleted:user:{emailid}?uid={uniqueid}`: An email address (plus unique identifier) representing a user that has been recently deleted. For example, `alice@example.com?uid=123456789012345678901`. If the user is recovered, this value reverts to `user:{emailid}` and the recovered user retains the role in the binding. * `deleted:serviceAccount:{emailid}?uid={uniqueid}`: An email address (plus unique identifier) representing a service account that has been recently deleted. For example, `my-other-app@appspot.gserviceaccount.com?uid=123456789012345678901`. If the service account is undeleted, this value reverts to `serviceAccount:{emailid}` and the undeleted service account retains the role in the binding. * `deleted:group:{emailid}?uid={uniqueid}`: An email address (plus unique identifier) representing a Google group that has been recently deleted. For example, `admins@example.com?uid=123456789012345678901`. If the group is recovered, this value reverts to `group:{emailid}` and the recovered group retains the role in the binding.

func (BindingResponseOutput) Role

Role that is assigned to the list of `members`, or principals. For example, `roles/viewer`, `roles/editor`, or `roles/owner`.

func (BindingResponseOutput) ToBindingResponseOutput

func (o BindingResponseOutput) ToBindingResponseOutput() BindingResponseOutput

func (BindingResponseOutput) ToBindingResponseOutputWithContext

func (o BindingResponseOutput) ToBindingResponseOutputWithContext(ctx context.Context) BindingResponseOutput

type CloudAuditOptions

type CloudAuditOptions struct {
	// Information used by the Cloud Audit Logging pipeline.
	AuthorizationLoggingOptions *AuthorizationLoggingOptions `pulumi:"authorizationLoggingOptions"`
	// The log_name to populate in the Cloud Audit Record.
	LogName *CloudAuditOptionsLogName `pulumi:"logName"`
}

Write a Cloud Audit log

type CloudAuditOptionsArgs

type CloudAuditOptionsArgs struct {
	// Information used by the Cloud Audit Logging pipeline.
	AuthorizationLoggingOptions AuthorizationLoggingOptionsPtrInput `pulumi:"authorizationLoggingOptions"`
	// The log_name to populate in the Cloud Audit Record.
	LogName CloudAuditOptionsLogNamePtrInput `pulumi:"logName"`
}

Write a Cloud Audit log

func (CloudAuditOptionsArgs) ElementType

func (CloudAuditOptionsArgs) ElementType() reflect.Type

func (CloudAuditOptionsArgs) ToCloudAuditOptionsOutput

func (i CloudAuditOptionsArgs) ToCloudAuditOptionsOutput() CloudAuditOptionsOutput

func (CloudAuditOptionsArgs) ToCloudAuditOptionsOutputWithContext

func (i CloudAuditOptionsArgs) ToCloudAuditOptionsOutputWithContext(ctx context.Context) CloudAuditOptionsOutput

func (CloudAuditOptionsArgs) ToCloudAuditOptionsPtrOutput

func (i CloudAuditOptionsArgs) ToCloudAuditOptionsPtrOutput() CloudAuditOptionsPtrOutput

func (CloudAuditOptionsArgs) ToCloudAuditOptionsPtrOutputWithContext

func (i CloudAuditOptionsArgs) ToCloudAuditOptionsPtrOutputWithContext(ctx context.Context) CloudAuditOptionsPtrOutput

type CloudAuditOptionsInput

type CloudAuditOptionsInput interface {
	pulumi.Input

	ToCloudAuditOptionsOutput() CloudAuditOptionsOutput
	ToCloudAuditOptionsOutputWithContext(context.Context) CloudAuditOptionsOutput
}

CloudAuditOptionsInput is an input type that accepts CloudAuditOptionsArgs and CloudAuditOptionsOutput values. You can construct a concrete instance of `CloudAuditOptionsInput` via:

CloudAuditOptionsArgs{...}

type CloudAuditOptionsLogName added in v0.4.0

type CloudAuditOptionsLogName string

The log_name to populate in the Cloud Audit Record.

func (CloudAuditOptionsLogName) ElementType added in v0.4.0

func (CloudAuditOptionsLogName) ElementType() reflect.Type

func (CloudAuditOptionsLogName) ToCloudAuditOptionsLogNameOutput added in v0.6.0

func (e CloudAuditOptionsLogName) ToCloudAuditOptionsLogNameOutput() CloudAuditOptionsLogNameOutput

func (CloudAuditOptionsLogName) ToCloudAuditOptionsLogNameOutputWithContext added in v0.6.0

func (e CloudAuditOptionsLogName) ToCloudAuditOptionsLogNameOutputWithContext(ctx context.Context) CloudAuditOptionsLogNameOutput

func (CloudAuditOptionsLogName) ToCloudAuditOptionsLogNamePtrOutput added in v0.6.0

func (e CloudAuditOptionsLogName) ToCloudAuditOptionsLogNamePtrOutput() CloudAuditOptionsLogNamePtrOutput

func (CloudAuditOptionsLogName) ToCloudAuditOptionsLogNamePtrOutputWithContext added in v0.6.0

func (e CloudAuditOptionsLogName) ToCloudAuditOptionsLogNamePtrOutputWithContext(ctx context.Context) CloudAuditOptionsLogNamePtrOutput

func (CloudAuditOptionsLogName) ToStringOutput added in v0.4.0

func (e CloudAuditOptionsLogName) ToStringOutput() pulumi.StringOutput

func (CloudAuditOptionsLogName) ToStringOutputWithContext added in v0.4.0

func (e CloudAuditOptionsLogName) ToStringOutputWithContext(ctx context.Context) pulumi.StringOutput

func (CloudAuditOptionsLogName) ToStringPtrOutput added in v0.4.0

func (e CloudAuditOptionsLogName) ToStringPtrOutput() pulumi.StringPtrOutput

func (CloudAuditOptionsLogName) ToStringPtrOutputWithContext added in v0.4.0

func (e CloudAuditOptionsLogName) ToStringPtrOutputWithContext(ctx context.Context) pulumi.StringPtrOutput

type CloudAuditOptionsLogNameInput added in v0.6.0

type CloudAuditOptionsLogNameInput interface {
	pulumi.Input

	ToCloudAuditOptionsLogNameOutput() CloudAuditOptionsLogNameOutput
	ToCloudAuditOptionsLogNameOutputWithContext(context.Context) CloudAuditOptionsLogNameOutput
}

CloudAuditOptionsLogNameInput is an input type that accepts CloudAuditOptionsLogNameArgs and CloudAuditOptionsLogNameOutput values. You can construct a concrete instance of `CloudAuditOptionsLogNameInput` via:

CloudAuditOptionsLogNameArgs{...}

type CloudAuditOptionsLogNameOutput added in v0.6.0

type CloudAuditOptionsLogNameOutput struct{ *pulumi.OutputState }

func (CloudAuditOptionsLogNameOutput) ElementType added in v0.6.0

func (CloudAuditOptionsLogNameOutput) ToCloudAuditOptionsLogNameOutput added in v0.6.0

func (o CloudAuditOptionsLogNameOutput) ToCloudAuditOptionsLogNameOutput() CloudAuditOptionsLogNameOutput

func (CloudAuditOptionsLogNameOutput) ToCloudAuditOptionsLogNameOutputWithContext added in v0.6.0

func (o CloudAuditOptionsLogNameOutput) ToCloudAuditOptionsLogNameOutputWithContext(ctx context.Context) CloudAuditOptionsLogNameOutput

func (CloudAuditOptionsLogNameOutput) ToCloudAuditOptionsLogNamePtrOutput added in v0.6.0

func (o CloudAuditOptionsLogNameOutput) ToCloudAuditOptionsLogNamePtrOutput() CloudAuditOptionsLogNamePtrOutput

func (CloudAuditOptionsLogNameOutput) ToCloudAuditOptionsLogNamePtrOutputWithContext added in v0.6.0

func (o CloudAuditOptionsLogNameOutput) ToCloudAuditOptionsLogNamePtrOutputWithContext(ctx context.Context) CloudAuditOptionsLogNamePtrOutput

func (CloudAuditOptionsLogNameOutput) ToStringOutput added in v0.6.0

func (CloudAuditOptionsLogNameOutput) ToStringOutputWithContext added in v0.6.0

func (o CloudAuditOptionsLogNameOutput) ToStringOutputWithContext(ctx context.Context) pulumi.StringOutput

func (CloudAuditOptionsLogNameOutput) ToStringPtrOutput added in v0.6.0

func (CloudAuditOptionsLogNameOutput) ToStringPtrOutputWithContext added in v0.6.0

func (o CloudAuditOptionsLogNameOutput) ToStringPtrOutputWithContext(ctx context.Context) pulumi.StringPtrOutput

type CloudAuditOptionsLogNamePtrInput added in v0.6.0

type CloudAuditOptionsLogNamePtrInput interface {
	pulumi.Input

	ToCloudAuditOptionsLogNamePtrOutput() CloudAuditOptionsLogNamePtrOutput
	ToCloudAuditOptionsLogNamePtrOutputWithContext(context.Context) CloudAuditOptionsLogNamePtrOutput
}

func CloudAuditOptionsLogNamePtr added in v0.6.0

func CloudAuditOptionsLogNamePtr(v string) CloudAuditOptionsLogNamePtrInput

type CloudAuditOptionsLogNamePtrOutput added in v0.6.0

type CloudAuditOptionsLogNamePtrOutput struct{ *pulumi.OutputState }

func (CloudAuditOptionsLogNamePtrOutput) Elem added in v0.6.0

func (CloudAuditOptionsLogNamePtrOutput) ElementType added in v0.6.0

func (CloudAuditOptionsLogNamePtrOutput) ToCloudAuditOptionsLogNamePtrOutput added in v0.6.0

func (o CloudAuditOptionsLogNamePtrOutput) ToCloudAuditOptionsLogNamePtrOutput() CloudAuditOptionsLogNamePtrOutput

func (CloudAuditOptionsLogNamePtrOutput) ToCloudAuditOptionsLogNamePtrOutputWithContext added in v0.6.0

func (o CloudAuditOptionsLogNamePtrOutput) ToCloudAuditOptionsLogNamePtrOutputWithContext(ctx context.Context) CloudAuditOptionsLogNamePtrOutput

func (CloudAuditOptionsLogNamePtrOutput) ToStringPtrOutput added in v0.6.0

func (CloudAuditOptionsLogNamePtrOutput) ToStringPtrOutputWithContext added in v0.6.0

func (o CloudAuditOptionsLogNamePtrOutput) ToStringPtrOutputWithContext(ctx context.Context) pulumi.StringPtrOutput

type CloudAuditOptionsOutput

type CloudAuditOptionsOutput struct{ *pulumi.OutputState }

Write a Cloud Audit log

func (CloudAuditOptionsOutput) AuthorizationLoggingOptions

func (o CloudAuditOptionsOutput) AuthorizationLoggingOptions() AuthorizationLoggingOptionsPtrOutput

Information used by the Cloud Audit Logging pipeline.

func (CloudAuditOptionsOutput) ElementType

func (CloudAuditOptionsOutput) ElementType() reflect.Type

func (CloudAuditOptionsOutput) LogName

The log_name to populate in the Cloud Audit Record.

func (CloudAuditOptionsOutput) ToCloudAuditOptionsOutput

func (o CloudAuditOptionsOutput) ToCloudAuditOptionsOutput() CloudAuditOptionsOutput

func (CloudAuditOptionsOutput) ToCloudAuditOptionsOutputWithContext

func (o CloudAuditOptionsOutput) ToCloudAuditOptionsOutputWithContext(ctx context.Context) CloudAuditOptionsOutput

func (CloudAuditOptionsOutput) ToCloudAuditOptionsPtrOutput

func (o CloudAuditOptionsOutput) ToCloudAuditOptionsPtrOutput() CloudAuditOptionsPtrOutput

func (CloudAuditOptionsOutput) ToCloudAuditOptionsPtrOutputWithContext

func (o CloudAuditOptionsOutput) ToCloudAuditOptionsPtrOutputWithContext(ctx context.Context) CloudAuditOptionsPtrOutput

type CloudAuditOptionsPtrInput

type CloudAuditOptionsPtrInput interface {
	pulumi.Input

	ToCloudAuditOptionsPtrOutput() CloudAuditOptionsPtrOutput
	ToCloudAuditOptionsPtrOutputWithContext(context.Context) CloudAuditOptionsPtrOutput
}

CloudAuditOptionsPtrInput is an input type that accepts CloudAuditOptionsArgs, CloudAuditOptionsPtr and CloudAuditOptionsPtrOutput values. You can construct a concrete instance of `CloudAuditOptionsPtrInput` via:

        CloudAuditOptionsArgs{...}

or:

        nil

type CloudAuditOptionsPtrOutput

type CloudAuditOptionsPtrOutput struct{ *pulumi.OutputState }

func (CloudAuditOptionsPtrOutput) AuthorizationLoggingOptions

func (o CloudAuditOptionsPtrOutput) AuthorizationLoggingOptions() AuthorizationLoggingOptionsPtrOutput

Information used by the Cloud Audit Logging pipeline.

func (CloudAuditOptionsPtrOutput) Elem

func (CloudAuditOptionsPtrOutput) ElementType

func (CloudAuditOptionsPtrOutput) ElementType() reflect.Type

func (CloudAuditOptionsPtrOutput) LogName

The log_name to populate in the Cloud Audit Record.

func (CloudAuditOptionsPtrOutput) ToCloudAuditOptionsPtrOutput

func (o CloudAuditOptionsPtrOutput) ToCloudAuditOptionsPtrOutput() CloudAuditOptionsPtrOutput

func (CloudAuditOptionsPtrOutput) ToCloudAuditOptionsPtrOutputWithContext

func (o CloudAuditOptionsPtrOutput) ToCloudAuditOptionsPtrOutputWithContext(ctx context.Context) CloudAuditOptionsPtrOutput

type CloudAuditOptionsResponse

type CloudAuditOptionsResponse struct {
	// Information used by the Cloud Audit Logging pipeline.
	AuthorizationLoggingOptions AuthorizationLoggingOptionsResponse `pulumi:"authorizationLoggingOptions"`
	// The log_name to populate in the Cloud Audit Record.
	LogName string `pulumi:"logName"`
}

Write a Cloud Audit log

type CloudAuditOptionsResponseOutput

type CloudAuditOptionsResponseOutput struct{ *pulumi.OutputState }

Write a Cloud Audit log

func (CloudAuditOptionsResponseOutput) AuthorizationLoggingOptions

Information used by the Cloud Audit Logging pipeline.

func (CloudAuditOptionsResponseOutput) ElementType

func (CloudAuditOptionsResponseOutput) LogName

The log_name to populate in the Cloud Audit Record.

func (CloudAuditOptionsResponseOutput) ToCloudAuditOptionsResponseOutput

func (o CloudAuditOptionsResponseOutput) ToCloudAuditOptionsResponseOutput() CloudAuditOptionsResponseOutput

func (CloudAuditOptionsResponseOutput) ToCloudAuditOptionsResponseOutputWithContext

func (o CloudAuditOptionsResponseOutput) ToCloudAuditOptionsResponseOutputWithContext(ctx context.Context) CloudAuditOptionsResponseOutput

type Condition

type Condition struct {
	// Trusted attributes supplied by the IAM system.
	Iam *ConditionIam `pulumi:"iam"`
	// An operator to apply the subject with.
	Op *ConditionOp `pulumi:"op"`
	// Trusted attributes discharged by the service.
	Svc *string `pulumi:"svc"`
	// Trusted attributes supplied by any service that owns resources and uses the IAM system for access control.
	Sys *ConditionSys `pulumi:"sys"`
	// The objects of the condition.
	Values []string `pulumi:"values"`
}

A condition to be met.

type ConditionArgs

type ConditionArgs struct {
	// Trusted attributes supplied by the IAM system.
	Iam ConditionIamPtrInput `pulumi:"iam"`
	// An operator to apply the subject with.
	Op ConditionOpPtrInput `pulumi:"op"`
	// Trusted attributes discharged by the service.
	Svc pulumi.StringPtrInput `pulumi:"svc"`
	// Trusted attributes supplied by any service that owns resources and uses the IAM system for access control.
	Sys ConditionSysPtrInput `pulumi:"sys"`
	// The objects of the condition.
	Values pulumi.StringArrayInput `pulumi:"values"`
}

A condition to be met.

func (ConditionArgs) ElementType

func (ConditionArgs) ElementType() reflect.Type

func (ConditionArgs) ToConditionOutput

func (i ConditionArgs) ToConditionOutput() ConditionOutput

func (ConditionArgs) ToConditionOutputWithContext

func (i ConditionArgs) ToConditionOutputWithContext(ctx context.Context) ConditionOutput

type ConditionArray

type ConditionArray []ConditionInput

func (ConditionArray) ElementType

func (ConditionArray) ElementType() reflect.Type

func (ConditionArray) ToConditionArrayOutput

func (i ConditionArray) ToConditionArrayOutput() ConditionArrayOutput

func (ConditionArray) ToConditionArrayOutputWithContext

func (i ConditionArray) ToConditionArrayOutputWithContext(ctx context.Context) ConditionArrayOutput

type ConditionArrayInput

type ConditionArrayInput interface {
	pulumi.Input

	ToConditionArrayOutput() ConditionArrayOutput
	ToConditionArrayOutputWithContext(context.Context) ConditionArrayOutput
}

ConditionArrayInput is an input type that accepts ConditionArray and ConditionArrayOutput values. You can construct a concrete instance of `ConditionArrayInput` via:

ConditionArray{ ConditionArgs{...} }

type ConditionArrayOutput

type ConditionArrayOutput struct{ *pulumi.OutputState }

func (ConditionArrayOutput) ElementType

func (ConditionArrayOutput) ElementType() reflect.Type

func (ConditionArrayOutput) Index

func (ConditionArrayOutput) ToConditionArrayOutput

func (o ConditionArrayOutput) ToConditionArrayOutput() ConditionArrayOutput

func (ConditionArrayOutput) ToConditionArrayOutputWithContext

func (o ConditionArrayOutput) ToConditionArrayOutputWithContext(ctx context.Context) ConditionArrayOutput

type ConditionIam added in v0.4.0

type ConditionIam string

Trusted attributes supplied by the IAM system.

func (ConditionIam) ElementType added in v0.4.0

func (ConditionIam) ElementType() reflect.Type

func (ConditionIam) ToConditionIamOutput added in v0.6.0

func (e ConditionIam) ToConditionIamOutput() ConditionIamOutput

func (ConditionIam) ToConditionIamOutputWithContext added in v0.6.0

func (e ConditionIam) ToConditionIamOutputWithContext(ctx context.Context) ConditionIamOutput

func (ConditionIam) ToConditionIamPtrOutput added in v0.6.0

func (e ConditionIam) ToConditionIamPtrOutput() ConditionIamPtrOutput

func (ConditionIam) ToConditionIamPtrOutputWithContext added in v0.6.0

func (e ConditionIam) ToConditionIamPtrOutputWithContext(ctx context.Context) ConditionIamPtrOutput

func (ConditionIam) ToStringOutput added in v0.4.0

func (e ConditionIam) ToStringOutput() pulumi.StringOutput

func (ConditionIam) ToStringOutputWithContext added in v0.4.0

func (e ConditionIam) ToStringOutputWithContext(ctx context.Context) pulumi.StringOutput

func (ConditionIam) ToStringPtrOutput added in v0.4.0

func (e ConditionIam) ToStringPtrOutput() pulumi.StringPtrOutput

func (ConditionIam) ToStringPtrOutputWithContext added in v0.4.0

func (e ConditionIam) ToStringPtrOutputWithContext(ctx context.Context) pulumi.StringPtrOutput

type ConditionIamInput added in v0.6.0

type ConditionIamInput interface {
	pulumi.Input

	ToConditionIamOutput() ConditionIamOutput
	ToConditionIamOutputWithContext(context.Context) ConditionIamOutput
}

ConditionIamInput is an input type that accepts ConditionIamArgs and ConditionIamOutput values. You can construct a concrete instance of `ConditionIamInput` via:

ConditionIamArgs{...}

type ConditionIamOutput added in v0.6.0

type ConditionIamOutput struct{ *pulumi.OutputState }

func (ConditionIamOutput) ElementType added in v0.6.0

func (ConditionIamOutput) ElementType() reflect.Type

func (ConditionIamOutput) ToConditionIamOutput added in v0.6.0

func (o ConditionIamOutput) ToConditionIamOutput() ConditionIamOutput

func (ConditionIamOutput) ToConditionIamOutputWithContext added in v0.6.0

func (o ConditionIamOutput) ToConditionIamOutputWithContext(ctx context.Context) ConditionIamOutput

func (ConditionIamOutput) ToConditionIamPtrOutput added in v0.6.0

func (o ConditionIamOutput) ToConditionIamPtrOutput() ConditionIamPtrOutput

func (ConditionIamOutput) ToConditionIamPtrOutputWithContext added in v0.6.0

func (o ConditionIamOutput) ToConditionIamPtrOutputWithContext(ctx context.Context) ConditionIamPtrOutput

func (ConditionIamOutput) ToStringOutput added in v0.6.0

func (o ConditionIamOutput) ToStringOutput() pulumi.StringOutput

func (ConditionIamOutput) ToStringOutputWithContext added in v0.6.0

func (o ConditionIamOutput) ToStringOutputWithContext(ctx context.Context) pulumi.StringOutput

func (ConditionIamOutput) ToStringPtrOutput added in v0.6.0

func (o ConditionIamOutput) ToStringPtrOutput() pulumi.StringPtrOutput

func (ConditionIamOutput) ToStringPtrOutputWithContext added in v0.6.0

func (o ConditionIamOutput) ToStringPtrOutputWithContext(ctx context.Context) pulumi.StringPtrOutput

type ConditionIamPtrInput added in v0.6.0

type ConditionIamPtrInput interface {
	pulumi.Input

	ToConditionIamPtrOutput() ConditionIamPtrOutput
	ToConditionIamPtrOutputWithContext(context.Context) ConditionIamPtrOutput
}

func ConditionIamPtr added in v0.6.0

func ConditionIamPtr(v string) ConditionIamPtrInput

type ConditionIamPtrOutput added in v0.6.0

type ConditionIamPtrOutput struct{ *pulumi.OutputState }

func (ConditionIamPtrOutput) Elem added in v0.6.0

func (ConditionIamPtrOutput) ElementType added in v0.6.0

func (ConditionIamPtrOutput) ElementType() reflect.Type

func (ConditionIamPtrOutput) ToConditionIamPtrOutput added in v0.6.0

func (o ConditionIamPtrOutput) ToConditionIamPtrOutput() ConditionIamPtrOutput

func (ConditionIamPtrOutput) ToConditionIamPtrOutputWithContext added in v0.6.0

func (o ConditionIamPtrOutput) ToConditionIamPtrOutputWithContext(ctx context.Context) ConditionIamPtrOutput

func (ConditionIamPtrOutput) ToStringPtrOutput added in v0.6.0

func (o ConditionIamPtrOutput) ToStringPtrOutput() pulumi.StringPtrOutput

func (ConditionIamPtrOutput) ToStringPtrOutputWithContext added in v0.6.0

func (o ConditionIamPtrOutput) ToStringPtrOutputWithContext(ctx context.Context) pulumi.StringPtrOutput

type ConditionInput

type ConditionInput interface {
	pulumi.Input

	ToConditionOutput() ConditionOutput
	ToConditionOutputWithContext(context.Context) ConditionOutput
}

ConditionInput is an input type that accepts ConditionArgs and ConditionOutput values. You can construct a concrete instance of `ConditionInput` via:

ConditionArgs{...}

type ConditionOp added in v0.4.0

type ConditionOp string

An operator to apply the subject with.

func (ConditionOp) ElementType added in v0.4.0

func (ConditionOp) ElementType() reflect.Type

func (ConditionOp) ToConditionOpOutput added in v0.6.0

func (e ConditionOp) ToConditionOpOutput() ConditionOpOutput

func (ConditionOp) ToConditionOpOutputWithContext added in v0.6.0

func (e ConditionOp) ToConditionOpOutputWithContext(ctx context.Context) ConditionOpOutput

func (ConditionOp) ToConditionOpPtrOutput added in v0.6.0

func (e ConditionOp) ToConditionOpPtrOutput() ConditionOpPtrOutput

func (ConditionOp) ToConditionOpPtrOutputWithContext added in v0.6.0

func (e ConditionOp) ToConditionOpPtrOutputWithContext(ctx context.Context) ConditionOpPtrOutput

func (ConditionOp) ToStringOutput added in v0.4.0

func (e ConditionOp) ToStringOutput() pulumi.StringOutput

func (ConditionOp) ToStringOutputWithContext added in v0.4.0

func (e ConditionOp) ToStringOutputWithContext(ctx context.Context) pulumi.StringOutput

func (ConditionOp) ToStringPtrOutput added in v0.4.0

func (e ConditionOp) ToStringPtrOutput() pulumi.StringPtrOutput

func (ConditionOp) ToStringPtrOutputWithContext added in v0.4.0

func (e ConditionOp) ToStringPtrOutputWithContext(ctx context.Context) pulumi.StringPtrOutput

type ConditionOpInput added in v0.6.0

type ConditionOpInput interface {
	pulumi.Input

	ToConditionOpOutput() ConditionOpOutput
	ToConditionOpOutputWithContext(context.Context) ConditionOpOutput
}

ConditionOpInput is an input type that accepts ConditionOpArgs and ConditionOpOutput values. You can construct a concrete instance of `ConditionOpInput` via:

ConditionOpArgs{...}

type ConditionOpOutput added in v0.6.0

type ConditionOpOutput struct{ *pulumi.OutputState }

func (ConditionOpOutput) ElementType added in v0.6.0

func (ConditionOpOutput) ElementType() reflect.Type

func (ConditionOpOutput) ToConditionOpOutput added in v0.6.0

func (o ConditionOpOutput) ToConditionOpOutput() ConditionOpOutput

func (ConditionOpOutput) ToConditionOpOutputWithContext added in v0.6.0

func (o ConditionOpOutput) ToConditionOpOutputWithContext(ctx context.Context) ConditionOpOutput

func (ConditionOpOutput) ToConditionOpPtrOutput added in v0.6.0

func (o ConditionOpOutput) ToConditionOpPtrOutput() ConditionOpPtrOutput

func (ConditionOpOutput) ToConditionOpPtrOutputWithContext added in v0.6.0

func (o ConditionOpOutput) ToConditionOpPtrOutputWithContext(ctx context.Context) ConditionOpPtrOutput

func (ConditionOpOutput) ToStringOutput added in v0.6.0

func (o ConditionOpOutput) ToStringOutput() pulumi.StringOutput

func (ConditionOpOutput) ToStringOutputWithContext added in v0.6.0

func (o ConditionOpOutput) ToStringOutputWithContext(ctx context.Context) pulumi.StringOutput

func (ConditionOpOutput) ToStringPtrOutput added in v0.6.0

func (o ConditionOpOutput) ToStringPtrOutput() pulumi.StringPtrOutput

func (ConditionOpOutput) ToStringPtrOutputWithContext added in v0.6.0

func (o ConditionOpOutput) ToStringPtrOutputWithContext(ctx context.Context) pulumi.StringPtrOutput

type ConditionOpPtrInput added in v0.6.0

type ConditionOpPtrInput interface {
	pulumi.Input

	ToConditionOpPtrOutput() ConditionOpPtrOutput
	ToConditionOpPtrOutputWithContext(context.Context) ConditionOpPtrOutput
}

func ConditionOpPtr added in v0.6.0

func ConditionOpPtr(v string) ConditionOpPtrInput

type ConditionOpPtrOutput added in v0.6.0

type ConditionOpPtrOutput struct{ *pulumi.OutputState }

func (ConditionOpPtrOutput) Elem added in v0.6.0

func (ConditionOpPtrOutput) ElementType added in v0.6.0

func (ConditionOpPtrOutput) ElementType() reflect.Type

func (ConditionOpPtrOutput) ToConditionOpPtrOutput added in v0.6.0

func (o ConditionOpPtrOutput) ToConditionOpPtrOutput() ConditionOpPtrOutput

func (ConditionOpPtrOutput) ToConditionOpPtrOutputWithContext added in v0.6.0

func (o ConditionOpPtrOutput) ToConditionOpPtrOutputWithContext(ctx context.Context) ConditionOpPtrOutput

func (ConditionOpPtrOutput) ToStringPtrOutput added in v0.6.0

func (o ConditionOpPtrOutput) ToStringPtrOutput() pulumi.StringPtrOutput

func (ConditionOpPtrOutput) ToStringPtrOutputWithContext added in v0.6.0

func (o ConditionOpPtrOutput) ToStringPtrOutputWithContext(ctx context.Context) pulumi.StringPtrOutput

type ConditionOutput

type ConditionOutput struct{ *pulumi.OutputState }

A condition to be met.

func (ConditionOutput) ElementType

func (ConditionOutput) ElementType() reflect.Type

func (ConditionOutput) Iam

Trusted attributes supplied by the IAM system.

func (ConditionOutput) Op

An operator to apply the subject with.

func (ConditionOutput) Svc

Trusted attributes discharged by the service.

func (ConditionOutput) Sys

Trusted attributes supplied by any service that owns resources and uses the IAM system for access control.

func (ConditionOutput) ToConditionOutput

func (o ConditionOutput) ToConditionOutput() ConditionOutput

func (ConditionOutput) ToConditionOutputWithContext

func (o ConditionOutput) ToConditionOutputWithContext(ctx context.Context) ConditionOutput

func (ConditionOutput) Values

The objects of the condition.

type ConditionResponse

type ConditionResponse struct {
	// Trusted attributes supplied by the IAM system.
	Iam string `pulumi:"iam"`
	// An operator to apply the subject with.
	Op string `pulumi:"op"`
	// Trusted attributes discharged by the service.
	Svc string `pulumi:"svc"`
	// Trusted attributes supplied by any service that owns resources and uses the IAM system for access control.
	Sys string `pulumi:"sys"`
	// The objects of the condition.
	Values []string `pulumi:"values"`
}

A condition to be met.

type ConditionResponseArrayOutput

type ConditionResponseArrayOutput struct{ *pulumi.OutputState }

func (ConditionResponseArrayOutput) ElementType

func (ConditionResponseArrayOutput) Index

func (ConditionResponseArrayOutput) ToConditionResponseArrayOutput

func (o ConditionResponseArrayOutput) ToConditionResponseArrayOutput() ConditionResponseArrayOutput

func (ConditionResponseArrayOutput) ToConditionResponseArrayOutputWithContext

func (o ConditionResponseArrayOutput) ToConditionResponseArrayOutputWithContext(ctx context.Context) ConditionResponseArrayOutput

type ConditionResponseOutput

type ConditionResponseOutput struct{ *pulumi.OutputState }

A condition to be met.

func (ConditionResponseOutput) ElementType

func (ConditionResponseOutput) ElementType() reflect.Type

func (ConditionResponseOutput) Iam

Trusted attributes supplied by the IAM system.

func (ConditionResponseOutput) Op

An operator to apply the subject with.

func (ConditionResponseOutput) Svc

Trusted attributes discharged by the service.

func (ConditionResponseOutput) Sys

Trusted attributes supplied by any service that owns resources and uses the IAM system for access control.

func (ConditionResponseOutput) ToConditionResponseOutput

func (o ConditionResponseOutput) ToConditionResponseOutput() ConditionResponseOutput

func (ConditionResponseOutput) ToConditionResponseOutputWithContext

func (o ConditionResponseOutput) ToConditionResponseOutputWithContext(ctx context.Context) ConditionResponseOutput

func (ConditionResponseOutput) Values

The objects of the condition.

type ConditionSys added in v0.4.0

type ConditionSys string

Trusted attributes supplied by any service that owns resources and uses the IAM system for access control.

func (ConditionSys) ElementType added in v0.4.0

func (ConditionSys) ElementType() reflect.Type

func (ConditionSys) ToConditionSysOutput added in v0.6.0

func (e ConditionSys) ToConditionSysOutput() ConditionSysOutput

func (ConditionSys) ToConditionSysOutputWithContext added in v0.6.0

func (e ConditionSys) ToConditionSysOutputWithContext(ctx context.Context) ConditionSysOutput

func (ConditionSys) ToConditionSysPtrOutput added in v0.6.0

func (e ConditionSys) ToConditionSysPtrOutput() ConditionSysPtrOutput

func (ConditionSys) ToConditionSysPtrOutputWithContext added in v0.6.0

func (e ConditionSys) ToConditionSysPtrOutputWithContext(ctx context.Context) ConditionSysPtrOutput

func (ConditionSys) ToStringOutput added in v0.4.0

func (e ConditionSys) ToStringOutput() pulumi.StringOutput

func (ConditionSys) ToStringOutputWithContext added in v0.4.0

func (e ConditionSys) ToStringOutputWithContext(ctx context.Context) pulumi.StringOutput

func (ConditionSys) ToStringPtrOutput added in v0.4.0

func (e ConditionSys) ToStringPtrOutput() pulumi.StringPtrOutput

func (ConditionSys) ToStringPtrOutputWithContext added in v0.4.0

func (e ConditionSys) ToStringPtrOutputWithContext(ctx context.Context) pulumi.StringPtrOutput

type ConditionSysInput added in v0.6.0

type ConditionSysInput interface {
	pulumi.Input

	ToConditionSysOutput() ConditionSysOutput
	ToConditionSysOutputWithContext(context.Context) ConditionSysOutput
}

ConditionSysInput is an input type that accepts ConditionSysArgs and ConditionSysOutput values. You can construct a concrete instance of `ConditionSysInput` via:

ConditionSysArgs{...}

type ConditionSysOutput added in v0.6.0

type ConditionSysOutput struct{ *pulumi.OutputState }

func (ConditionSysOutput) ElementType added in v0.6.0

func (ConditionSysOutput) ElementType() reflect.Type

func (ConditionSysOutput) ToConditionSysOutput added in v0.6.0

func (o ConditionSysOutput) ToConditionSysOutput() ConditionSysOutput

func (ConditionSysOutput) ToConditionSysOutputWithContext added in v0.6.0

func (o ConditionSysOutput) ToConditionSysOutputWithContext(ctx context.Context) ConditionSysOutput

func (ConditionSysOutput) ToConditionSysPtrOutput added in v0.6.0

func (o ConditionSysOutput) ToConditionSysPtrOutput() ConditionSysPtrOutput

func (ConditionSysOutput) ToConditionSysPtrOutputWithContext added in v0.6.0

func (o ConditionSysOutput) ToConditionSysPtrOutputWithContext(ctx context.Context) ConditionSysPtrOutput

func (ConditionSysOutput) ToStringOutput added in v0.6.0

func (o ConditionSysOutput) ToStringOutput() pulumi.StringOutput

func (ConditionSysOutput) ToStringOutputWithContext added in v0.6.0

func (o ConditionSysOutput) ToStringOutputWithContext(ctx context.Context) pulumi.StringOutput

func (ConditionSysOutput) ToStringPtrOutput added in v0.6.0

func (o ConditionSysOutput) ToStringPtrOutput() pulumi.StringPtrOutput

func (ConditionSysOutput) ToStringPtrOutputWithContext added in v0.6.0

func (o ConditionSysOutput) ToStringPtrOutputWithContext(ctx context.Context) pulumi.StringPtrOutput

type ConditionSysPtrInput added in v0.6.0

type ConditionSysPtrInput interface {
	pulumi.Input

	ToConditionSysPtrOutput() ConditionSysPtrOutput
	ToConditionSysPtrOutputWithContext(context.Context) ConditionSysPtrOutput
}

func ConditionSysPtr added in v0.6.0

func ConditionSysPtr(v string) ConditionSysPtrInput

type ConditionSysPtrOutput added in v0.6.0

type ConditionSysPtrOutput struct{ *pulumi.OutputState }

func (ConditionSysPtrOutput) Elem added in v0.6.0

func (ConditionSysPtrOutput) ElementType added in v0.6.0

func (ConditionSysPtrOutput) ElementType() reflect.Type

func (ConditionSysPtrOutput) ToConditionSysPtrOutput added in v0.6.0

func (o ConditionSysPtrOutput) ToConditionSysPtrOutput() ConditionSysPtrOutput

func (ConditionSysPtrOutput) ToConditionSysPtrOutputWithContext added in v0.6.0

func (o ConditionSysPtrOutput) ToConditionSysPtrOutputWithContext(ctx context.Context) ConditionSysPtrOutput

func (ConditionSysPtrOutput) ToStringPtrOutput added in v0.6.0

func (o ConditionSysPtrOutput) ToStringPtrOutput() pulumi.StringPtrOutput

func (ConditionSysPtrOutput) ToStringPtrOutputWithContext added in v0.6.0

func (o ConditionSysPtrOutput) ToStringPtrOutputWithContext(ctx context.Context) pulumi.StringPtrOutput

type CounterOptions

type CounterOptions struct {
	// Custom fields.
	CustomFields []CustomField `pulumi:"customFields"`
	// The field value to attribute.
	Field *string `pulumi:"field"`
	// The metric to update.
	Metric *string `pulumi:"metric"`
}

Increment a streamz counter with the specified metric and field names. Metric names should start with a '/', generally be lowercase-only, and end in "_count". Field names should not contain an initial slash. The actual exported metric names will have "/iam/policy" prepended. Field names correspond to IAM request parameters and field values are their respective values. Supported field names: - "authority", which is "[token]" if IAMContext.token is present, otherwise the value of IAMContext.authority_selector if present, and otherwise a representation of IAMContext.principal; or - "iam_principal", a representation of IAMContext.principal even if a token or authority selector is present; or - "" (empty string), resulting in a counter with no fields. Examples: counter { metric: "/debug_access_count" field: "iam_principal" } ==> increment counter /iam/policy/debug_access_count {iam_principal=[value of IAMContext.principal]}

type CounterOptionsArgs

type CounterOptionsArgs struct {
	// Custom fields.
	CustomFields CustomFieldArrayInput `pulumi:"customFields"`
	// The field value to attribute.
	Field pulumi.StringPtrInput `pulumi:"field"`
	// The metric to update.
	Metric pulumi.StringPtrInput `pulumi:"metric"`
}

Increment a streamz counter with the specified metric and field names. Metric names should start with a '/', generally be lowercase-only, and end in "_count". Field names should not contain an initial slash. The actual exported metric names will have "/iam/policy" prepended. Field names correspond to IAM request parameters and field values are their respective values. Supported field names: - "authority", which is "[token]" if IAMContext.token is present, otherwise the value of IAMContext.authority_selector if present, and otherwise a representation of IAMContext.principal; or - "iam_principal", a representation of IAMContext.principal even if a token or authority selector is present; or - "" (empty string), resulting in a counter with no fields. Examples: counter { metric: "/debug_access_count" field: "iam_principal" } ==> increment counter /iam/policy/debug_access_count {iam_principal=[value of IAMContext.principal]}

func (CounterOptionsArgs) ElementType

func (CounterOptionsArgs) ElementType() reflect.Type

func (CounterOptionsArgs) ToCounterOptionsOutput

func (i CounterOptionsArgs) ToCounterOptionsOutput() CounterOptionsOutput

func (CounterOptionsArgs) ToCounterOptionsOutputWithContext

func (i CounterOptionsArgs) ToCounterOptionsOutputWithContext(ctx context.Context) CounterOptionsOutput

func (CounterOptionsArgs) ToCounterOptionsPtrOutput

func (i CounterOptionsArgs) ToCounterOptionsPtrOutput() CounterOptionsPtrOutput

func (CounterOptionsArgs) ToCounterOptionsPtrOutputWithContext

func (i CounterOptionsArgs) ToCounterOptionsPtrOutputWithContext(ctx context.Context) CounterOptionsPtrOutput

type CounterOptionsInput

type CounterOptionsInput interface {
	pulumi.Input

	ToCounterOptionsOutput() CounterOptionsOutput
	ToCounterOptionsOutputWithContext(context.Context) CounterOptionsOutput
}

CounterOptionsInput is an input type that accepts CounterOptionsArgs and CounterOptionsOutput values. You can construct a concrete instance of `CounterOptionsInput` via:

CounterOptionsArgs{...}

type CounterOptionsOutput

type CounterOptionsOutput struct{ *pulumi.OutputState }

Increment a streamz counter with the specified metric and field names. Metric names should start with a '/', generally be lowercase-only, and end in "_count". Field names should not contain an initial slash. The actual exported metric names will have "/iam/policy" prepended. Field names correspond to IAM request parameters and field values are their respective values. Supported field names: - "authority", which is "[token]" if IAMContext.token is present, otherwise the value of IAMContext.authority_selector if present, and otherwise a representation of IAMContext.principal; or - "iam_principal", a representation of IAMContext.principal even if a token or authority selector is present; or - "" (empty string), resulting in a counter with no fields. Examples: counter { metric: "/debug_access_count" field: "iam_principal" } ==> increment counter /iam/policy/debug_access_count {iam_principal=[value of IAMContext.principal]}

func (CounterOptionsOutput) CustomFields

Custom fields.

func (CounterOptionsOutput) ElementType

func (CounterOptionsOutput) ElementType() reflect.Type

func (CounterOptionsOutput) Field

The field value to attribute.

func (CounterOptionsOutput) Metric

The metric to update.

func (CounterOptionsOutput) ToCounterOptionsOutput

func (o CounterOptionsOutput) ToCounterOptionsOutput() CounterOptionsOutput

func (CounterOptionsOutput) ToCounterOptionsOutputWithContext

func (o CounterOptionsOutput) ToCounterOptionsOutputWithContext(ctx context.Context) CounterOptionsOutput

func (CounterOptionsOutput) ToCounterOptionsPtrOutput

func (o CounterOptionsOutput) ToCounterOptionsPtrOutput() CounterOptionsPtrOutput

func (CounterOptionsOutput) ToCounterOptionsPtrOutputWithContext

func (o CounterOptionsOutput) ToCounterOptionsPtrOutputWithContext(ctx context.Context) CounterOptionsPtrOutput

type CounterOptionsPtrInput

type CounterOptionsPtrInput interface {
	pulumi.Input

	ToCounterOptionsPtrOutput() CounterOptionsPtrOutput
	ToCounterOptionsPtrOutputWithContext(context.Context) CounterOptionsPtrOutput
}

CounterOptionsPtrInput is an input type that accepts CounterOptionsArgs, CounterOptionsPtr and CounterOptionsPtrOutput values. You can construct a concrete instance of `CounterOptionsPtrInput` via:

        CounterOptionsArgs{...}

or:

        nil

type CounterOptionsPtrOutput

type CounterOptionsPtrOutput struct{ *pulumi.OutputState }

func (CounterOptionsPtrOutput) CustomFields

Custom fields.

func (CounterOptionsPtrOutput) Elem

func (CounterOptionsPtrOutput) ElementType

func (CounterOptionsPtrOutput) ElementType() reflect.Type

func (CounterOptionsPtrOutput) Field

The field value to attribute.

func (CounterOptionsPtrOutput) Metric

The metric to update.

func (CounterOptionsPtrOutput) ToCounterOptionsPtrOutput

func (o CounterOptionsPtrOutput) ToCounterOptionsPtrOutput() CounterOptionsPtrOutput

func (CounterOptionsPtrOutput) ToCounterOptionsPtrOutputWithContext

func (o CounterOptionsPtrOutput) ToCounterOptionsPtrOutputWithContext(ctx context.Context) CounterOptionsPtrOutput

type CounterOptionsResponse

type CounterOptionsResponse struct {
	// Custom fields.
	CustomFields []CustomFieldResponse `pulumi:"customFields"`
	// The field value to attribute.
	Field string `pulumi:"field"`
	// The metric to update.
	Metric string `pulumi:"metric"`
}

Increment a streamz counter with the specified metric and field names. Metric names should start with a '/', generally be lowercase-only, and end in "_count". Field names should not contain an initial slash. The actual exported metric names will have "/iam/policy" prepended. Field names correspond to IAM request parameters and field values are their respective values. Supported field names: - "authority", which is "[token]" if IAMContext.token is present, otherwise the value of IAMContext.authority_selector if present, and otherwise a representation of IAMContext.principal; or - "iam_principal", a representation of IAMContext.principal even if a token or authority selector is present; or - "" (empty string), resulting in a counter with no fields. Examples: counter { metric: "/debug_access_count" field: "iam_principal" } ==> increment counter /iam/policy/debug_access_count {iam_principal=[value of IAMContext.principal]}

type CounterOptionsResponseOutput

type CounterOptionsResponseOutput struct{ *pulumi.OutputState }

Increment a streamz counter with the specified metric and field names. Metric names should start with a '/', generally be lowercase-only, and end in "_count". Field names should not contain an initial slash. The actual exported metric names will have "/iam/policy" prepended. Field names correspond to IAM request parameters and field values are their respective values. Supported field names: - "authority", which is "[token]" if IAMContext.token is present, otherwise the value of IAMContext.authority_selector if present, and otherwise a representation of IAMContext.principal; or - "iam_principal", a representation of IAMContext.principal even if a token or authority selector is present; or - "" (empty string), resulting in a counter with no fields. Examples: counter { metric: "/debug_access_count" field: "iam_principal" } ==> increment counter /iam/policy/debug_access_count {iam_principal=[value of IAMContext.principal]}

func (CounterOptionsResponseOutput) CustomFields

Custom fields.

func (CounterOptionsResponseOutput) ElementType

func (CounterOptionsResponseOutput) Field

The field value to attribute.

func (CounterOptionsResponseOutput) Metric

The metric to update.

func (CounterOptionsResponseOutput) ToCounterOptionsResponseOutput

func (o CounterOptionsResponseOutput) ToCounterOptionsResponseOutput() CounterOptionsResponseOutput

func (CounterOptionsResponseOutput) ToCounterOptionsResponseOutputWithContext

func (o CounterOptionsResponseOutput) ToCounterOptionsResponseOutputWithContext(ctx context.Context) CounterOptionsResponseOutput

type CustomField

type CustomField struct {
	// Name is the field name.
	Name *string `pulumi:"name"`
	// Value is the field value. It is important that in contrast to the CounterOptions.field, the value here is a constant that is not derived from the IAMContext.
	Value *string `pulumi:"value"`
}

Custom fields. These can be used to create a counter with arbitrary field/value pairs. See: go/rpcsp-custom-fields.

type CustomFieldArgs

type CustomFieldArgs struct {
	// Name is the field name.
	Name pulumi.StringPtrInput `pulumi:"name"`
	// Value is the field value. It is important that in contrast to the CounterOptions.field, the value here is a constant that is not derived from the IAMContext.
	Value pulumi.StringPtrInput `pulumi:"value"`
}

Custom fields. These can be used to create a counter with arbitrary field/value pairs. See: go/rpcsp-custom-fields.

func (CustomFieldArgs) ElementType

func (CustomFieldArgs) ElementType() reflect.Type

func (CustomFieldArgs) ToCustomFieldOutput

func (i CustomFieldArgs) ToCustomFieldOutput() CustomFieldOutput

func (CustomFieldArgs) ToCustomFieldOutputWithContext

func (i CustomFieldArgs) ToCustomFieldOutputWithContext(ctx context.Context) CustomFieldOutput

type CustomFieldArray

type CustomFieldArray []CustomFieldInput

func (CustomFieldArray) ElementType

func (CustomFieldArray) ElementType() reflect.Type

func (CustomFieldArray) ToCustomFieldArrayOutput

func (i CustomFieldArray) ToCustomFieldArrayOutput() CustomFieldArrayOutput

func (CustomFieldArray) ToCustomFieldArrayOutputWithContext

func (i CustomFieldArray) ToCustomFieldArrayOutputWithContext(ctx context.Context) CustomFieldArrayOutput

type CustomFieldArrayInput

type CustomFieldArrayInput interface {
	pulumi.Input

	ToCustomFieldArrayOutput() CustomFieldArrayOutput
	ToCustomFieldArrayOutputWithContext(context.Context) CustomFieldArrayOutput
}

CustomFieldArrayInput is an input type that accepts CustomFieldArray and CustomFieldArrayOutput values. You can construct a concrete instance of `CustomFieldArrayInput` via:

CustomFieldArray{ CustomFieldArgs{...} }

type CustomFieldArrayOutput

type CustomFieldArrayOutput struct{ *pulumi.OutputState }

func (CustomFieldArrayOutput) ElementType

func (CustomFieldArrayOutput) ElementType() reflect.Type

func (CustomFieldArrayOutput) Index

func (CustomFieldArrayOutput) ToCustomFieldArrayOutput

func (o CustomFieldArrayOutput) ToCustomFieldArrayOutput() CustomFieldArrayOutput

func (CustomFieldArrayOutput) ToCustomFieldArrayOutputWithContext

func (o CustomFieldArrayOutput) ToCustomFieldArrayOutputWithContext(ctx context.Context) CustomFieldArrayOutput

type CustomFieldInput

type CustomFieldInput interface {
	pulumi.Input

	ToCustomFieldOutput() CustomFieldOutput
	ToCustomFieldOutputWithContext(context.Context) CustomFieldOutput
}

CustomFieldInput is an input type that accepts CustomFieldArgs and CustomFieldOutput values. You can construct a concrete instance of `CustomFieldInput` via:

CustomFieldArgs{...}

type CustomFieldOutput

type CustomFieldOutput struct{ *pulumi.OutputState }

Custom fields. These can be used to create a counter with arbitrary field/value pairs. See: go/rpcsp-custom-fields.

func (CustomFieldOutput) ElementType

func (CustomFieldOutput) ElementType() reflect.Type

func (CustomFieldOutput) Name

Name is the field name.

func (CustomFieldOutput) ToCustomFieldOutput

func (o CustomFieldOutput) ToCustomFieldOutput() CustomFieldOutput

func (CustomFieldOutput) ToCustomFieldOutputWithContext

func (o CustomFieldOutput) ToCustomFieldOutputWithContext(ctx context.Context) CustomFieldOutput

func (CustomFieldOutput) Value

Value is the field value. It is important that in contrast to the CounterOptions.field, the value here is a constant that is not derived from the IAMContext.

type CustomFieldResponse

type CustomFieldResponse struct {
	// Name is the field name.
	Name string `pulumi:"name"`
	// Value is the field value. It is important that in contrast to the CounterOptions.field, the value here is a constant that is not derived from the IAMContext.
	Value string `pulumi:"value"`
}

Custom fields. These can be used to create a counter with arbitrary field/value pairs. See: go/rpcsp-custom-fields.

type CustomFieldResponseArrayOutput

type CustomFieldResponseArrayOutput struct{ *pulumi.OutputState }

func (CustomFieldResponseArrayOutput) ElementType

func (CustomFieldResponseArrayOutput) Index

func (CustomFieldResponseArrayOutput) ToCustomFieldResponseArrayOutput

func (o CustomFieldResponseArrayOutput) ToCustomFieldResponseArrayOutput() CustomFieldResponseArrayOutput

func (CustomFieldResponseArrayOutput) ToCustomFieldResponseArrayOutputWithContext

func (o CustomFieldResponseArrayOutput) ToCustomFieldResponseArrayOutputWithContext(ctx context.Context) CustomFieldResponseArrayOutput

type CustomFieldResponseOutput

type CustomFieldResponseOutput struct{ *pulumi.OutputState }

Custom fields. These can be used to create a counter with arbitrary field/value pairs. See: go/rpcsp-custom-fields.

func (CustomFieldResponseOutput) ElementType

func (CustomFieldResponseOutput) ElementType() reflect.Type

func (CustomFieldResponseOutput) Name

Name is the field name.

func (CustomFieldResponseOutput) ToCustomFieldResponseOutput

func (o CustomFieldResponseOutput) ToCustomFieldResponseOutput() CustomFieldResponseOutput

func (CustomFieldResponseOutput) ToCustomFieldResponseOutputWithContext

func (o CustomFieldResponseOutput) ToCustomFieldResponseOutputWithContext(ctx context.Context) CustomFieldResponseOutput

func (CustomFieldResponseOutput) Value

Value is the field value. It is important that in contrast to the CounterOptions.field, the value here is a constant that is not derived from the IAMContext.

type DataAccessOptions

type DataAccessOptions struct {
	LogMode *DataAccessOptionsLogMode `pulumi:"logMode"`
}

Write a Data Access (Gin) log

type DataAccessOptionsArgs

type DataAccessOptionsArgs struct {
	LogMode DataAccessOptionsLogModePtrInput `pulumi:"logMode"`
}

Write a Data Access (Gin) log

func (DataAccessOptionsArgs) ElementType

func (DataAccessOptionsArgs) ElementType() reflect.Type

func (DataAccessOptionsArgs) ToDataAccessOptionsOutput

func (i DataAccessOptionsArgs) ToDataAccessOptionsOutput() DataAccessOptionsOutput

func (DataAccessOptionsArgs) ToDataAccessOptionsOutputWithContext

func (i DataAccessOptionsArgs) ToDataAccessOptionsOutputWithContext(ctx context.Context) DataAccessOptionsOutput

func (DataAccessOptionsArgs) ToDataAccessOptionsPtrOutput

func (i DataAccessOptionsArgs) ToDataAccessOptionsPtrOutput() DataAccessOptionsPtrOutput

func (DataAccessOptionsArgs) ToDataAccessOptionsPtrOutputWithContext

func (i DataAccessOptionsArgs) ToDataAccessOptionsPtrOutputWithContext(ctx context.Context) DataAccessOptionsPtrOutput

type DataAccessOptionsInput

type DataAccessOptionsInput interface {
	pulumi.Input

	ToDataAccessOptionsOutput() DataAccessOptionsOutput
	ToDataAccessOptionsOutputWithContext(context.Context) DataAccessOptionsOutput
}

DataAccessOptionsInput is an input type that accepts DataAccessOptionsArgs and DataAccessOptionsOutput values. You can construct a concrete instance of `DataAccessOptionsInput` via:

DataAccessOptionsArgs{...}

type DataAccessOptionsLogMode added in v0.4.0

type DataAccessOptionsLogMode string

func (DataAccessOptionsLogMode) ElementType added in v0.4.0

func (DataAccessOptionsLogMode) ElementType() reflect.Type

func (DataAccessOptionsLogMode) ToDataAccessOptionsLogModeOutput added in v0.6.0

func (e DataAccessOptionsLogMode) ToDataAccessOptionsLogModeOutput() DataAccessOptionsLogModeOutput

func (DataAccessOptionsLogMode) ToDataAccessOptionsLogModeOutputWithContext added in v0.6.0

func (e DataAccessOptionsLogMode) ToDataAccessOptionsLogModeOutputWithContext(ctx context.Context) DataAccessOptionsLogModeOutput

func (DataAccessOptionsLogMode) ToDataAccessOptionsLogModePtrOutput added in v0.6.0

func (e DataAccessOptionsLogMode) ToDataAccessOptionsLogModePtrOutput() DataAccessOptionsLogModePtrOutput

func (DataAccessOptionsLogMode) ToDataAccessOptionsLogModePtrOutputWithContext added in v0.6.0

func (e DataAccessOptionsLogMode) ToDataAccessOptionsLogModePtrOutputWithContext(ctx context.Context) DataAccessOptionsLogModePtrOutput

func (DataAccessOptionsLogMode) ToStringOutput added in v0.4.0

func (e DataAccessOptionsLogMode) ToStringOutput() pulumi.StringOutput

func (DataAccessOptionsLogMode) ToStringOutputWithContext added in v0.4.0

func (e DataAccessOptionsLogMode) ToStringOutputWithContext(ctx context.Context) pulumi.StringOutput

func (DataAccessOptionsLogMode) ToStringPtrOutput added in v0.4.0

func (e DataAccessOptionsLogMode) ToStringPtrOutput() pulumi.StringPtrOutput

func (DataAccessOptionsLogMode) ToStringPtrOutputWithContext added in v0.4.0

func (e DataAccessOptionsLogMode) ToStringPtrOutputWithContext(ctx context.Context) pulumi.StringPtrOutput

type DataAccessOptionsLogModeInput added in v0.6.0

type DataAccessOptionsLogModeInput interface {
	pulumi.Input

	ToDataAccessOptionsLogModeOutput() DataAccessOptionsLogModeOutput
	ToDataAccessOptionsLogModeOutputWithContext(context.Context) DataAccessOptionsLogModeOutput
}

DataAccessOptionsLogModeInput is an input type that accepts DataAccessOptionsLogModeArgs and DataAccessOptionsLogModeOutput values. You can construct a concrete instance of `DataAccessOptionsLogModeInput` via:

DataAccessOptionsLogModeArgs{...}

type DataAccessOptionsLogModeOutput added in v0.6.0

type DataAccessOptionsLogModeOutput struct{ *pulumi.OutputState }

func (DataAccessOptionsLogModeOutput) ElementType added in v0.6.0

func (DataAccessOptionsLogModeOutput) ToDataAccessOptionsLogModeOutput added in v0.6.0

func (o DataAccessOptionsLogModeOutput) ToDataAccessOptionsLogModeOutput() DataAccessOptionsLogModeOutput

func (DataAccessOptionsLogModeOutput) ToDataAccessOptionsLogModeOutputWithContext added in v0.6.0

func (o DataAccessOptionsLogModeOutput) ToDataAccessOptionsLogModeOutputWithContext(ctx context.Context) DataAccessOptionsLogModeOutput

func (DataAccessOptionsLogModeOutput) ToDataAccessOptionsLogModePtrOutput added in v0.6.0

func (o DataAccessOptionsLogModeOutput) ToDataAccessOptionsLogModePtrOutput() DataAccessOptionsLogModePtrOutput

func (DataAccessOptionsLogModeOutput) ToDataAccessOptionsLogModePtrOutputWithContext added in v0.6.0

func (o DataAccessOptionsLogModeOutput) ToDataAccessOptionsLogModePtrOutputWithContext(ctx context.Context) DataAccessOptionsLogModePtrOutput

func (DataAccessOptionsLogModeOutput) ToStringOutput added in v0.6.0

func (DataAccessOptionsLogModeOutput) ToStringOutputWithContext added in v0.6.0

func (o DataAccessOptionsLogModeOutput) ToStringOutputWithContext(ctx context.Context) pulumi.StringOutput

func (DataAccessOptionsLogModeOutput) ToStringPtrOutput added in v0.6.0

func (DataAccessOptionsLogModeOutput) ToStringPtrOutputWithContext added in v0.6.0

func (o DataAccessOptionsLogModeOutput) ToStringPtrOutputWithContext(ctx context.Context) pulumi.StringPtrOutput

type DataAccessOptionsLogModePtrInput added in v0.6.0

type DataAccessOptionsLogModePtrInput interface {
	pulumi.Input

	ToDataAccessOptionsLogModePtrOutput() DataAccessOptionsLogModePtrOutput
	ToDataAccessOptionsLogModePtrOutputWithContext(context.Context) DataAccessOptionsLogModePtrOutput
}

func DataAccessOptionsLogModePtr added in v0.6.0

func DataAccessOptionsLogModePtr(v string) DataAccessOptionsLogModePtrInput

type DataAccessOptionsLogModePtrOutput added in v0.6.0

type DataAccessOptionsLogModePtrOutput struct{ *pulumi.OutputState }

func (DataAccessOptionsLogModePtrOutput) Elem added in v0.6.0

func (DataAccessOptionsLogModePtrOutput) ElementType added in v0.6.0

func (DataAccessOptionsLogModePtrOutput) ToDataAccessOptionsLogModePtrOutput added in v0.6.0

func (o DataAccessOptionsLogModePtrOutput) ToDataAccessOptionsLogModePtrOutput() DataAccessOptionsLogModePtrOutput

func (DataAccessOptionsLogModePtrOutput) ToDataAccessOptionsLogModePtrOutputWithContext added in v0.6.0

func (o DataAccessOptionsLogModePtrOutput) ToDataAccessOptionsLogModePtrOutputWithContext(ctx context.Context) DataAccessOptionsLogModePtrOutput

func (DataAccessOptionsLogModePtrOutput) ToStringPtrOutput added in v0.6.0

func (DataAccessOptionsLogModePtrOutput) ToStringPtrOutputWithContext added in v0.6.0

func (o DataAccessOptionsLogModePtrOutput) ToStringPtrOutputWithContext(ctx context.Context) pulumi.StringPtrOutput

type DataAccessOptionsOutput

type DataAccessOptionsOutput struct{ *pulumi.OutputState }

Write a Data Access (Gin) log

func (DataAccessOptionsOutput) ElementType

func (DataAccessOptionsOutput) ElementType() reflect.Type

func (DataAccessOptionsOutput) LogMode

func (DataAccessOptionsOutput) ToDataAccessOptionsOutput

func (o DataAccessOptionsOutput) ToDataAccessOptionsOutput() DataAccessOptionsOutput

func (DataAccessOptionsOutput) ToDataAccessOptionsOutputWithContext

func (o DataAccessOptionsOutput) ToDataAccessOptionsOutputWithContext(ctx context.Context) DataAccessOptionsOutput

func (DataAccessOptionsOutput) ToDataAccessOptionsPtrOutput

func (o DataAccessOptionsOutput) ToDataAccessOptionsPtrOutput() DataAccessOptionsPtrOutput

func (DataAccessOptionsOutput) ToDataAccessOptionsPtrOutputWithContext

func (o DataAccessOptionsOutput) ToDataAccessOptionsPtrOutputWithContext(ctx context.Context) DataAccessOptionsPtrOutput

type DataAccessOptionsPtrInput

type DataAccessOptionsPtrInput interface {
	pulumi.Input

	ToDataAccessOptionsPtrOutput() DataAccessOptionsPtrOutput
	ToDataAccessOptionsPtrOutputWithContext(context.Context) DataAccessOptionsPtrOutput
}

DataAccessOptionsPtrInput is an input type that accepts DataAccessOptionsArgs, DataAccessOptionsPtr and DataAccessOptionsPtrOutput values. You can construct a concrete instance of `DataAccessOptionsPtrInput` via:

        DataAccessOptionsArgs{...}

or:

        nil

type DataAccessOptionsPtrOutput

type DataAccessOptionsPtrOutput struct{ *pulumi.OutputState }

func (DataAccessOptionsPtrOutput) Elem

func (DataAccessOptionsPtrOutput) ElementType

func (DataAccessOptionsPtrOutput) ElementType() reflect.Type

func (DataAccessOptionsPtrOutput) LogMode

func (DataAccessOptionsPtrOutput) ToDataAccessOptionsPtrOutput

func (o DataAccessOptionsPtrOutput) ToDataAccessOptionsPtrOutput() DataAccessOptionsPtrOutput

func (DataAccessOptionsPtrOutput) ToDataAccessOptionsPtrOutputWithContext

func (o DataAccessOptionsPtrOutput) ToDataAccessOptionsPtrOutputWithContext(ctx context.Context) DataAccessOptionsPtrOutput

type DataAccessOptionsResponse

type DataAccessOptionsResponse struct {
	LogMode string `pulumi:"logMode"`
}

Write a Data Access (Gin) log

type DataAccessOptionsResponseOutput

type DataAccessOptionsResponseOutput struct{ *pulumi.OutputState }

Write a Data Access (Gin) log

func (DataAccessOptionsResponseOutput) ElementType

func (DataAccessOptionsResponseOutput) LogMode

func (DataAccessOptionsResponseOutput) ToDataAccessOptionsResponseOutput

func (o DataAccessOptionsResponseOutput) ToDataAccessOptionsResponseOutput() DataAccessOptionsResponseOutput

func (DataAccessOptionsResponseOutput) ToDataAccessOptionsResponseOutputWithContext

func (o DataAccessOptionsResponseOutput) ToDataAccessOptionsResponseOutputWithContext(ctx context.Context) DataAccessOptionsResponseOutput

type Expr

type Expr struct {
	// Optional. Description of the expression. This is a longer text which describes the expression, e.g. when hovered over it in a UI.
	Description *string `pulumi:"description"`
	// Textual representation of an expression in Common Expression Language syntax.
	Expression *string `pulumi:"expression"`
	// Optional. String indicating the location of the expression for error reporting, e.g. a file name and a position in the file.
	Location *string `pulumi:"location"`
	// Optional. Title for the expression, i.e. a short string describing its purpose. This can be used e.g. in UIs which allow to enter the expression.
	Title *string `pulumi:"title"`
}

Represents a textual expression in the Common Expression Language (CEL) syntax. CEL is a C-like expression language. The syntax and semantics of CEL are documented at https://github.com/google/cel-spec. Example (Comparison): title: "Summary size limit" description: "Determines if a summary is less than 100 chars" expression: "document.summary.size() < 100" Example (Equality): title: "Requestor is owner" description: "Determines if requestor is the document owner" expression: "document.owner == request.auth.claims.email" Example (Logic): title: "Public documents" description: "Determine whether the document should be publicly visible" expression: "document.type != 'private' && document.type != 'internal'" Example (Data Manipulation): title: "Notification string" description: "Create a notification string with a timestamp." expression: "'New message received at ' + string(document.create_time)" The exact variables and functions that may be referenced within an expression are determined by the service that evaluates it. See the service documentation for additional information.

type ExprArgs

type ExprArgs struct {
	// Optional. Description of the expression. This is a longer text which describes the expression, e.g. when hovered over it in a UI.
	Description pulumi.StringPtrInput `pulumi:"description"`
	// Textual representation of an expression in Common Expression Language syntax.
	Expression pulumi.StringPtrInput `pulumi:"expression"`
	// Optional. String indicating the location of the expression for error reporting, e.g. a file name and a position in the file.
	Location pulumi.StringPtrInput `pulumi:"location"`
	// Optional. Title for the expression, i.e. a short string describing its purpose. This can be used e.g. in UIs which allow to enter the expression.
	Title pulumi.StringPtrInput `pulumi:"title"`
}

Represents a textual expression in the Common Expression Language (CEL) syntax. CEL is a C-like expression language. The syntax and semantics of CEL are documented at https://github.com/google/cel-spec. Example (Comparison): title: "Summary size limit" description: "Determines if a summary is less than 100 chars" expression: "document.summary.size() < 100" Example (Equality): title: "Requestor is owner" description: "Determines if requestor is the document owner" expression: "document.owner == request.auth.claims.email" Example (Logic): title: "Public documents" description: "Determine whether the document should be publicly visible" expression: "document.type != 'private' && document.type != 'internal'" Example (Data Manipulation): title: "Notification string" description: "Create a notification string with a timestamp." expression: "'New message received at ' + string(document.create_time)" The exact variables and functions that may be referenced within an expression are determined by the service that evaluates it. See the service documentation for additional information.

func (ExprArgs) ElementType

func (ExprArgs) ElementType() reflect.Type

func (ExprArgs) ToExprOutput

func (i ExprArgs) ToExprOutput() ExprOutput

func (ExprArgs) ToExprOutputWithContext

func (i ExprArgs) ToExprOutputWithContext(ctx context.Context) ExprOutput

func (ExprArgs) ToExprPtrOutput

func (i ExprArgs) ToExprPtrOutput() ExprPtrOutput

func (ExprArgs) ToExprPtrOutputWithContext

func (i ExprArgs) ToExprPtrOutputWithContext(ctx context.Context) ExprPtrOutput

type ExprInput

type ExprInput interface {
	pulumi.Input

	ToExprOutput() ExprOutput
	ToExprOutputWithContext(context.Context) ExprOutput
}

ExprInput is an input type that accepts ExprArgs and ExprOutput values. You can construct a concrete instance of `ExprInput` via:

ExprArgs{...}

type ExprOutput

type ExprOutput struct{ *pulumi.OutputState }

Represents a textual expression in the Common Expression Language (CEL) syntax. CEL is a C-like expression language. The syntax and semantics of CEL are documented at https://github.com/google/cel-spec. Example (Comparison): title: "Summary size limit" description: "Determines if a summary is less than 100 chars" expression: "document.summary.size() < 100" Example (Equality): title: "Requestor is owner" description: "Determines if requestor is the document owner" expression: "document.owner == request.auth.claims.email" Example (Logic): title: "Public documents" description: "Determine whether the document should be publicly visible" expression: "document.type != 'private' && document.type != 'internal'" Example (Data Manipulation): title: "Notification string" description: "Create a notification string with a timestamp." expression: "'New message received at ' + string(document.create_time)" The exact variables and functions that may be referenced within an expression are determined by the service that evaluates it. See the service documentation for additional information.

func (ExprOutput) Description

func (o ExprOutput) Description() pulumi.StringPtrOutput

Optional. Description of the expression. This is a longer text which describes the expression, e.g. when hovered over it in a UI.

func (ExprOutput) ElementType

func (ExprOutput) ElementType() reflect.Type

func (ExprOutput) Expression

func (o ExprOutput) Expression() pulumi.StringPtrOutput

Textual representation of an expression in Common Expression Language syntax.

func (ExprOutput) Location

func (o ExprOutput) Location() pulumi.StringPtrOutput

Optional. String indicating the location of the expression for error reporting, e.g. a file name and a position in the file.

func (ExprOutput) Title

func (o ExprOutput) Title() pulumi.StringPtrOutput

Optional. Title for the expression, i.e. a short string describing its purpose. This can be used e.g. in UIs which allow to enter the expression.

func (ExprOutput) ToExprOutput

func (o ExprOutput) ToExprOutput() ExprOutput

func (ExprOutput) ToExprOutputWithContext

func (o ExprOutput) ToExprOutputWithContext(ctx context.Context) ExprOutput

func (ExprOutput) ToExprPtrOutput

func (o ExprOutput) ToExprPtrOutput() ExprPtrOutput

func (ExprOutput) ToExprPtrOutputWithContext

func (o ExprOutput) ToExprPtrOutputWithContext(ctx context.Context) ExprPtrOutput

type ExprPtrInput

type ExprPtrInput interface {
	pulumi.Input

	ToExprPtrOutput() ExprPtrOutput
	ToExprPtrOutputWithContext(context.Context) ExprPtrOutput
}

ExprPtrInput is an input type that accepts ExprArgs, ExprPtr and ExprPtrOutput values. You can construct a concrete instance of `ExprPtrInput` via:

        ExprArgs{...}

or:

        nil

func ExprPtr

func ExprPtr(v *ExprArgs) ExprPtrInput

type ExprPtrOutput

type ExprPtrOutput struct{ *pulumi.OutputState }

func (ExprPtrOutput) Description

func (o ExprPtrOutput) Description() pulumi.StringPtrOutput

Optional. Description of the expression. This is a longer text which describes the expression, e.g. when hovered over it in a UI.

func (ExprPtrOutput) Elem

func (o ExprPtrOutput) Elem() ExprOutput

func (ExprPtrOutput) ElementType

func (ExprPtrOutput) ElementType() reflect.Type

func (ExprPtrOutput) Expression

func (o ExprPtrOutput) Expression() pulumi.StringPtrOutput

Textual representation of an expression in Common Expression Language syntax.

func (ExprPtrOutput) Location

func (o ExprPtrOutput) Location() pulumi.StringPtrOutput

Optional. String indicating the location of the expression for error reporting, e.g. a file name and a position in the file.

func (ExprPtrOutput) Title

Optional. Title for the expression, i.e. a short string describing its purpose. This can be used e.g. in UIs which allow to enter the expression.

func (ExprPtrOutput) ToExprPtrOutput

func (o ExprPtrOutput) ToExprPtrOutput() ExprPtrOutput

func (ExprPtrOutput) ToExprPtrOutputWithContext

func (o ExprPtrOutput) ToExprPtrOutputWithContext(ctx context.Context) ExprPtrOutput

type ExprResponse

type ExprResponse struct {
	// Optional. Description of the expression. This is a longer text which describes the expression, e.g. when hovered over it in a UI.
	Description string `pulumi:"description"`
	// Textual representation of an expression in Common Expression Language syntax.
	Expression string `pulumi:"expression"`
	// Optional. String indicating the location of the expression for error reporting, e.g. a file name and a position in the file.
	Location string `pulumi:"location"`
	// Optional. Title for the expression, i.e. a short string describing its purpose. This can be used e.g. in UIs which allow to enter the expression.
	Title string `pulumi:"title"`
}

Represents a textual expression in the Common Expression Language (CEL) syntax. CEL is a C-like expression language. The syntax and semantics of CEL are documented at https://github.com/google/cel-spec. Example (Comparison): title: "Summary size limit" description: "Determines if a summary is less than 100 chars" expression: "document.summary.size() < 100" Example (Equality): title: "Requestor is owner" description: "Determines if requestor is the document owner" expression: "document.owner == request.auth.claims.email" Example (Logic): title: "Public documents" description: "Determine whether the document should be publicly visible" expression: "document.type != 'private' && document.type != 'internal'" Example (Data Manipulation): title: "Notification string" description: "Create a notification string with a timestamp." expression: "'New message received at ' + string(document.create_time)" The exact variables and functions that may be referenced within an expression are determined by the service that evaluates it. See the service documentation for additional information.

type ExprResponseOutput

type ExprResponseOutput struct{ *pulumi.OutputState }

Represents a textual expression in the Common Expression Language (CEL) syntax. CEL is a C-like expression language. The syntax and semantics of CEL are documented at https://github.com/google/cel-spec. Example (Comparison): title: "Summary size limit" description: "Determines if a summary is less than 100 chars" expression: "document.summary.size() < 100" Example (Equality): title: "Requestor is owner" description: "Determines if requestor is the document owner" expression: "document.owner == request.auth.claims.email" Example (Logic): title: "Public documents" description: "Determine whether the document should be publicly visible" expression: "document.type != 'private' && document.type != 'internal'" Example (Data Manipulation): title: "Notification string" description: "Create a notification string with a timestamp." expression: "'New message received at ' + string(document.create_time)" The exact variables and functions that may be referenced within an expression are determined by the service that evaluates it. See the service documentation for additional information.

func (ExprResponseOutput) Description

func (o ExprResponseOutput) Description() pulumi.StringOutput

Optional. Description of the expression. This is a longer text which describes the expression, e.g. when hovered over it in a UI.

func (ExprResponseOutput) ElementType

func (ExprResponseOutput) ElementType() reflect.Type

func (ExprResponseOutput) Expression

func (o ExprResponseOutput) Expression() pulumi.StringOutput

Textual representation of an expression in Common Expression Language syntax.

func (ExprResponseOutput) Location

func (o ExprResponseOutput) Location() pulumi.StringOutput

Optional. String indicating the location of the expression for error reporting, e.g. a file name and a position in the file.

func (ExprResponseOutput) Title

Optional. Title for the expression, i.e. a short string describing its purpose. This can be used e.g. in UIs which allow to enter the expression.

func (ExprResponseOutput) ToExprResponseOutput

func (o ExprResponseOutput) ToExprResponseOutput() ExprResponseOutput

func (ExprResponseOutput) ToExprResponseOutputWithContext

func (o ExprResponseOutput) ToExprResponseOutputWithContext(ctx context.Context) ExprResponseOutput

type GameServerDeploymentIamBinding added in v0.26.0

type GameServerDeploymentIamBinding struct {
	pulumi.CustomResourceState

	// An IAM Condition for a given binding. See https://cloud.google.com/iam/docs/conditions-overview for additional details.
	Condition iam.ConditionPtrOutput `pulumi:"condition"`
	// The etag of the resource's IAM policy.
	Etag pulumi.StringOutput `pulumi:"etag"`
	// Specifies the principals requesting access for a Google Cloud resource. `members` can have the following values: * `allUsers`: A special identifier that represents anyone who is on the internet; with or without a Google account. * `allAuthenticatedUsers`: A special identifier that represents anyone who is authenticated with a Google account or a service account. Does not include identities that come from external identity providers (IdPs) through identity federation. * `user:{emailid}`: An email address that represents a specific Google account. For example, `alice@example.com` . * `serviceAccount:{emailid}`: An email address that represents a Google service account. For example, `my-other-app@appspot.gserviceaccount.com`. * `serviceAccount:{projectid}.svc.id.goog[{namespace}/{kubernetes-sa}]`: An identifier for a [Kubernetes service account](https://cloud.google.com/kubernetes-engine/docs/how-to/kubernetes-service-accounts). For example, `my-project.svc.id.goog[my-namespace/my-kubernetes-sa]`. * `group:{emailid}`: An email address that represents a Google group. For example, `admins@example.com`. * `domain:{domain}`: The G Suite domain (primary) that represents all the users of that domain. For example, `google.com` or `example.com`. * `deleted:user:{emailid}?uid={uniqueid}`: An email address (plus unique identifier) representing a user that has been recently deleted. For example, `alice@example.com?uid=123456789012345678901`. If the user is recovered, this value reverts to `user:{emailid}` and the recovered user retains the role in the binding. * `deleted:serviceAccount:{emailid}?uid={uniqueid}`: An email address (plus unique identifier) representing a service account that has been recently deleted. For example, `my-other-app@appspot.gserviceaccount.com?uid=123456789012345678901`. If the service account is undeleted, this value reverts to `serviceAccount:{emailid}` and the undeleted service account retains the role in the binding. * `deleted:group:{emailid}?uid={uniqueid}`: An email address (plus unique identifier) representing a Google group that has been recently deleted. For example, `admins@example.com?uid=123456789012345678901`. If the group is recovered, this value reverts to `group:{emailid}` and the recovered group retains the role in the binding.
	Members pulumi.StringArrayOutput `pulumi:"members"`
	// The name of the resource to manage IAM policies for.
	Name pulumi.StringOutput `pulumi:"name"`
	// The project in which the resource belongs. If it is not provided, a default will be supplied.
	Project pulumi.StringOutput `pulumi:"project"`
	// Role that is assigned to the list of `members`, or principals. For example, `roles/viewer`, `roles/editor`, or `roles/owner`.
	Role pulumi.StringOutput `pulumi:"role"`
}

Sets the access control policy on the specified resource. Replaces any existing policy. Can return `NOT_FOUND`, `INVALID_ARGUMENT`, and `PERMISSION_DENIED` errors.

func GetGameServerDeploymentIamBinding added in v0.26.0

func GetGameServerDeploymentIamBinding(ctx *pulumi.Context,
	name string, id pulumi.IDInput, state *GameServerDeploymentIamBindingState, opts ...pulumi.ResourceOption) (*GameServerDeploymentIamBinding, error)

GetGameServerDeploymentIamBinding gets an existing GameServerDeploymentIamBinding resource's state with the given name, ID, and optional state properties that are used to uniquely qualify the lookup (nil if not required).

func NewGameServerDeploymentIamBinding added in v0.26.0

func NewGameServerDeploymentIamBinding(ctx *pulumi.Context,
	name string, args *GameServerDeploymentIamBindingArgs, opts ...pulumi.ResourceOption) (*GameServerDeploymentIamBinding, error)

NewGameServerDeploymentIamBinding registers a new resource with the given unique name, arguments, and options.

func (*GameServerDeploymentIamBinding) ElementType added in v0.26.0

func (*GameServerDeploymentIamBinding) ToGameServerDeploymentIamBindingOutput added in v0.26.0

func (i *GameServerDeploymentIamBinding) ToGameServerDeploymentIamBindingOutput() GameServerDeploymentIamBindingOutput

func (*GameServerDeploymentIamBinding) ToGameServerDeploymentIamBindingOutputWithContext added in v0.26.0

func (i *GameServerDeploymentIamBinding) ToGameServerDeploymentIamBindingOutputWithContext(ctx context.Context) GameServerDeploymentIamBindingOutput

type GameServerDeploymentIamBindingArgs added in v0.26.0

type GameServerDeploymentIamBindingArgs struct {
	// An IAM Condition for a given binding.
	Condition iam.ConditionPtrInput
	// Identities that will be granted the privilege in role. Each entry can have one of the following values:
	//
	//  * user:{emailid}: An email address that represents a specific Google account. For example, alice@gmail.com or joe@example.com.
	//  * serviceAccount:{emailid}: An email address that represents a service account. For example, my-other-app@appspot.gserviceaccount.com.
	//  * group:{emailid}: An email address that represents a Google group. For example, admins@example.com.
	//  * domain:{domain}: A G Suite domain (primary, instead of alias) name that represents all the users of that domain. For example, google.com or example.com.
	Members pulumi.StringArrayInput
	// The name of the resource to manage IAM policies for.
	Name pulumi.StringInput
	// The role that should be applied. Only one `IamBinding` can be used per role.
	Role pulumi.StringInput
}

The set of arguments for constructing a GameServerDeploymentIamBinding resource.

func (GameServerDeploymentIamBindingArgs) ElementType added in v0.26.0

type GameServerDeploymentIamBindingInput added in v0.26.0

type GameServerDeploymentIamBindingInput interface {
	pulumi.Input

	ToGameServerDeploymentIamBindingOutput() GameServerDeploymentIamBindingOutput
	ToGameServerDeploymentIamBindingOutputWithContext(ctx context.Context) GameServerDeploymentIamBindingOutput
}

type GameServerDeploymentIamBindingOutput added in v0.26.0

type GameServerDeploymentIamBindingOutput struct{ *pulumi.OutputState }

func (GameServerDeploymentIamBindingOutput) Condition added in v0.26.0

An IAM Condition for a given binding. See https://cloud.google.com/iam/docs/conditions-overview for additional details.

func (GameServerDeploymentIamBindingOutput) ElementType added in v0.26.0

func (GameServerDeploymentIamBindingOutput) Etag added in v0.26.0

The etag of the resource's IAM policy.

func (GameServerDeploymentIamBindingOutput) Members added in v0.26.0

Specifies the principals requesting access for a Google Cloud resource. `members` can have the following values: * `allUsers`: A special identifier that represents anyone who is on the internet; with or without a Google account. * `allAuthenticatedUsers`: A special identifier that represents anyone who is authenticated with a Google account or a service account. Does not include identities that come from external identity providers (IdPs) through identity federation. * `user:{emailid}`: An email address that represents a specific Google account. For example, `alice@example.com` . * `serviceAccount:{emailid}`: An email address that represents a Google service account. For example, `my-other-app@appspot.gserviceaccount.com`. * `serviceAccount:{projectid}.svc.id.goog[{namespace}/{kubernetes-sa}]`: An identifier for a [Kubernetes service account](https://cloud.google.com/kubernetes-engine/docs/how-to/kubernetes-service-accounts). For example, `my-project.svc.id.goog[my-namespace/my-kubernetes-sa]`. * `group:{emailid}`: An email address that represents a Google group. For example, `admins@example.com`. * `domain:{domain}`: The G Suite domain (primary) that represents all the users of that domain. For example, `google.com` or `example.com`. * `deleted:user:{emailid}?uid={uniqueid}`: An email address (plus unique identifier) representing a user that has been recently deleted. For example, `alice@example.com?uid=123456789012345678901`. If the user is recovered, this value reverts to `user:{emailid}` and the recovered user retains the role in the binding. * `deleted:serviceAccount:{emailid}?uid={uniqueid}`: An email address (plus unique identifier) representing a service account that has been recently deleted. For example, `my-other-app@appspot.gserviceaccount.com?uid=123456789012345678901`. If the service account is undeleted, this value reverts to `serviceAccount:{emailid}` and the undeleted service account retains the role in the binding. * `deleted:group:{emailid}?uid={uniqueid}`: An email address (plus unique identifier) representing a Google group that has been recently deleted. For example, `admins@example.com?uid=123456789012345678901`. If the group is recovered, this value reverts to `group:{emailid}` and the recovered group retains the role in the binding.

func (GameServerDeploymentIamBindingOutput) Name added in v0.26.0

The name of the resource to manage IAM policies for.

func (GameServerDeploymentIamBindingOutput) Project added in v0.26.0

The project in which the resource belongs. If it is not provided, a default will be supplied.

func (GameServerDeploymentIamBindingOutput) Role added in v0.26.0

Role that is assigned to the list of `members`, or principals. For example, `roles/viewer`, `roles/editor`, or `roles/owner`.

func (GameServerDeploymentIamBindingOutput) ToGameServerDeploymentIamBindingOutput added in v0.26.0

func (o GameServerDeploymentIamBindingOutput) ToGameServerDeploymentIamBindingOutput() GameServerDeploymentIamBindingOutput

func (GameServerDeploymentIamBindingOutput) ToGameServerDeploymentIamBindingOutputWithContext added in v0.26.0

func (o GameServerDeploymentIamBindingOutput) ToGameServerDeploymentIamBindingOutputWithContext(ctx context.Context) GameServerDeploymentIamBindingOutput

type GameServerDeploymentIamBindingState added in v0.26.0

type GameServerDeploymentIamBindingState struct {
}

func (GameServerDeploymentIamBindingState) ElementType added in v0.26.0

type GameServerDeploymentIamMember added in v0.26.0

type GameServerDeploymentIamMember struct {
	pulumi.CustomResourceState

	// An IAM Condition for a given binding. See https://cloud.google.com/iam/docs/conditions-overview for additional details.
	Condition iam.ConditionPtrOutput `pulumi:"condition"`
	// The etag of the resource's IAM policy.
	Etag pulumi.StringOutput `pulumi:"etag"`
	// Specifies the principals requesting access for a Google Cloud resource. `members` can have the following values: * `allUsers`: A special identifier that represents anyone who is on the internet; with or without a Google account. * `allAuthenticatedUsers`: A special identifier that represents anyone who is authenticated with a Google account or a service account. Does not include identities that come from external identity providers (IdPs) through identity federation. * `user:{emailid}`: An email address that represents a specific Google account. For example, `alice@example.com` . * `serviceAccount:{emailid}`: An email address that represents a Google service account. For example, `my-other-app@appspot.gserviceaccount.com`. * `serviceAccount:{projectid}.svc.id.goog[{namespace}/{kubernetes-sa}]`: An identifier for a [Kubernetes service account](https://cloud.google.com/kubernetes-engine/docs/how-to/kubernetes-service-accounts). For example, `my-project.svc.id.goog[my-namespace/my-kubernetes-sa]`. * `group:{emailid}`: An email address that represents a Google group. For example, `admins@example.com`. * `domain:{domain}`: The G Suite domain (primary) that represents all the users of that domain. For example, `google.com` or `example.com`. * `deleted:user:{emailid}?uid={uniqueid}`: An email address (plus unique identifier) representing a user that has been recently deleted. For example, `alice@example.com?uid=123456789012345678901`. If the user is recovered, this value reverts to `user:{emailid}` and the recovered user retains the role in the binding. * `deleted:serviceAccount:{emailid}?uid={uniqueid}`: An email address (plus unique identifier) representing a service account that has been recently deleted. For example, `my-other-app@appspot.gserviceaccount.com?uid=123456789012345678901`. If the service account is undeleted, this value reverts to `serviceAccount:{emailid}` and the undeleted service account retains the role in the binding. * `deleted:group:{emailid}?uid={uniqueid}`: An email address (plus unique identifier) representing a Google group that has been recently deleted. For example, `admins@example.com?uid=123456789012345678901`. If the group is recovered, this value reverts to `group:{emailid}` and the recovered group retains the role in the binding.
	Member pulumi.StringOutput `pulumi:"member"`
	// The name of the resource to manage IAM policies for.
	Name pulumi.StringOutput `pulumi:"name"`
	// The project in which the resource belongs. If it is not provided, a default will be supplied.
	Project pulumi.StringOutput `pulumi:"project"`
	// Role that is assigned to the list of `members`, or principals. For example, `roles/viewer`, `roles/editor`, or `roles/owner`.
	Role pulumi.StringOutput `pulumi:"role"`
}

Sets the access control policy on the specified resource. Replaces any existing policy. Can return `NOT_FOUND`, `INVALID_ARGUMENT`, and `PERMISSION_DENIED` errors.

func GetGameServerDeploymentIamMember added in v0.26.0

func GetGameServerDeploymentIamMember(ctx *pulumi.Context,
	name string, id pulumi.IDInput, state *GameServerDeploymentIamMemberState, opts ...pulumi.ResourceOption) (*GameServerDeploymentIamMember, error)

GetGameServerDeploymentIamMember gets an existing GameServerDeploymentIamMember resource's state with the given name, ID, and optional state properties that are used to uniquely qualify the lookup (nil if not required).

func NewGameServerDeploymentIamMember added in v0.26.0

func NewGameServerDeploymentIamMember(ctx *pulumi.Context,
	name string, args *GameServerDeploymentIamMemberArgs, opts ...pulumi.ResourceOption) (*GameServerDeploymentIamMember, error)

NewGameServerDeploymentIamMember registers a new resource with the given unique name, arguments, and options.

func (*GameServerDeploymentIamMember) ElementType added in v0.26.0

func (*GameServerDeploymentIamMember) ToGameServerDeploymentIamMemberOutput added in v0.26.0

func (i *GameServerDeploymentIamMember) ToGameServerDeploymentIamMemberOutput() GameServerDeploymentIamMemberOutput

func (*GameServerDeploymentIamMember) ToGameServerDeploymentIamMemberOutputWithContext added in v0.26.0

func (i *GameServerDeploymentIamMember) ToGameServerDeploymentIamMemberOutputWithContext(ctx context.Context) GameServerDeploymentIamMemberOutput

type GameServerDeploymentIamMemberArgs added in v0.26.0

type GameServerDeploymentIamMemberArgs struct {
	// An IAM Condition for a given binding.
	Condition iam.ConditionPtrInput
	// Identity that will be granted the privilege in role. The entry can have one of the following values:
	//
	//  * user:{emailid}: An email address that represents a specific Google account. For example, alice@gmail.com or joe@example.com.
	//  * serviceAccount:{emailid}: An email address that represents a service account. For example, my-other-app@appspot.gserviceaccount.com.
	//  * group:{emailid}: An email address that represents a Google group. For example, admins@example.com.
	//  * domain:{domain}: A G Suite domain (primary, instead of alias) name that represents all the users of that domain. For example, google.com or example.com.
	Member pulumi.StringInput
	// The name of the resource to manage IAM policies for.
	Name pulumi.StringInput
	// The role that should be applied.
	Role pulumi.StringInput
}

The set of arguments for constructing a GameServerDeploymentIamMember resource.

func (GameServerDeploymentIamMemberArgs) ElementType added in v0.26.0

type GameServerDeploymentIamMemberInput added in v0.26.0

type GameServerDeploymentIamMemberInput interface {
	pulumi.Input

	ToGameServerDeploymentIamMemberOutput() GameServerDeploymentIamMemberOutput
	ToGameServerDeploymentIamMemberOutputWithContext(ctx context.Context) GameServerDeploymentIamMemberOutput
}

type GameServerDeploymentIamMemberOutput added in v0.26.0

type GameServerDeploymentIamMemberOutput struct{ *pulumi.OutputState }

func (GameServerDeploymentIamMemberOutput) Condition added in v0.26.0

An IAM Condition for a given binding. See https://cloud.google.com/iam/docs/conditions-overview for additional details.

func (GameServerDeploymentIamMemberOutput) ElementType added in v0.26.0

func (GameServerDeploymentIamMemberOutput) Etag added in v0.26.0

The etag of the resource's IAM policy.

func (GameServerDeploymentIamMemberOutput) Member added in v0.26.0

Specifies the principals requesting access for a Google Cloud resource. `members` can have the following values: * `allUsers`: A special identifier that represents anyone who is on the internet; with or without a Google account. * `allAuthenticatedUsers`: A special identifier that represents anyone who is authenticated with a Google account or a service account. Does not include identities that come from external identity providers (IdPs) through identity federation. * `user:{emailid}`: An email address that represents a specific Google account. For example, `alice@example.com` . * `serviceAccount:{emailid}`: An email address that represents a Google service account. For example, `my-other-app@appspot.gserviceaccount.com`. * `serviceAccount:{projectid}.svc.id.goog[{namespace}/{kubernetes-sa}]`: An identifier for a [Kubernetes service account](https://cloud.google.com/kubernetes-engine/docs/how-to/kubernetes-service-accounts). For example, `my-project.svc.id.goog[my-namespace/my-kubernetes-sa]`. * `group:{emailid}`: An email address that represents a Google group. For example, `admins@example.com`. * `domain:{domain}`: The G Suite domain (primary) that represents all the users of that domain. For example, `google.com` or `example.com`. * `deleted:user:{emailid}?uid={uniqueid}`: An email address (plus unique identifier) representing a user that has been recently deleted. For example, `alice@example.com?uid=123456789012345678901`. If the user is recovered, this value reverts to `user:{emailid}` and the recovered user retains the role in the binding. * `deleted:serviceAccount:{emailid}?uid={uniqueid}`: An email address (plus unique identifier) representing a service account that has been recently deleted. For example, `my-other-app@appspot.gserviceaccount.com?uid=123456789012345678901`. If the service account is undeleted, this value reverts to `serviceAccount:{emailid}` and the undeleted service account retains the role in the binding. * `deleted:group:{emailid}?uid={uniqueid}`: An email address (plus unique identifier) representing a Google group that has been recently deleted. For example, `admins@example.com?uid=123456789012345678901`. If the group is recovered, this value reverts to `group:{emailid}` and the recovered group retains the role in the binding.

func (GameServerDeploymentIamMemberOutput) Name added in v0.26.0

The name of the resource to manage IAM policies for.

func (GameServerDeploymentIamMemberOutput) Project added in v0.26.0

The project in which the resource belongs. If it is not provided, a default will be supplied.

func (GameServerDeploymentIamMemberOutput) Role added in v0.26.0

Role that is assigned to the list of `members`, or principals. For example, `roles/viewer`, `roles/editor`, or `roles/owner`.

func (GameServerDeploymentIamMemberOutput) ToGameServerDeploymentIamMemberOutput added in v0.26.0

func (o GameServerDeploymentIamMemberOutput) ToGameServerDeploymentIamMemberOutput() GameServerDeploymentIamMemberOutput

func (GameServerDeploymentIamMemberOutput) ToGameServerDeploymentIamMemberOutputWithContext added in v0.26.0

func (o GameServerDeploymentIamMemberOutput) ToGameServerDeploymentIamMemberOutputWithContext(ctx context.Context) GameServerDeploymentIamMemberOutput

type GameServerDeploymentIamMemberState added in v0.26.0

type GameServerDeploymentIamMemberState struct {
}

func (GameServerDeploymentIamMemberState) ElementType added in v0.26.0

type GameServerDeploymentIamPolicy

type GameServerDeploymentIamPolicy struct {
	pulumi.CustomResourceState

	// Specifies cloud audit logging configuration for this policy.
	AuditConfigs AuditConfigResponseArrayOutput `pulumi:"auditConfigs"`
	// Associates a list of `members`, or principals, with a `role`. Optionally, may specify a `condition` that determines how and when the `bindings` are applied. Each of the `bindings` must contain at least one principal. The `bindings` in a `Policy` can refer to up to 1,500 principals; up to 250 of these principals can be Google groups. Each occurrence of a principal counts towards these limits. For example, if the `bindings` grant 50 different roles to `user:alice@example.com`, and not to any other principal, then you can add another 1,450 principals to the `bindings` in the `Policy`.
	Bindings BindingResponseArrayOutput `pulumi:"bindings"`
	// `etag` is used for optimistic concurrency control as a way to help prevent simultaneous updates of a policy from overwriting each other. It is strongly suggested that systems make use of the `etag` in the read-modify-write cycle to perform policy updates in order to avoid race conditions: An `etag` is returned in the response to `getIamPolicy`, and systems are expected to put that etag in the request to `setIamPolicy` to ensure that their change will be applied to the same version of the policy. **Important:** If you use IAM Conditions, you must include the `etag` field whenever you call `setIamPolicy`. If you omit this field, then IAM allows you to overwrite a version `3` policy with a version `1` policy, and all of the conditions in the version `3` policy are lost.
	Etag                   pulumi.StringOutput `pulumi:"etag"`
	GameServerDeploymentId pulumi.StringOutput `pulumi:"gameServerDeploymentId"`
	Location               pulumi.StringOutput `pulumi:"location"`
	Project                pulumi.StringOutput `pulumi:"project"`
	// If more than one rule is specified, the rules are applied in the following manner: - All matching LOG rules are always applied. - If any DENY/DENY_WITH_LOG rule matches, permission is denied. Logging will be applied if one or more matching rule requires logging. - Otherwise, if any ALLOW/ALLOW_WITH_LOG rule matches, permission is granted. Logging will be applied if one or more matching rule requires logging. - Otherwise, if no rule applies, permission is denied.
	Rules RuleResponseArrayOutput `pulumi:"rules"`
	// Specifies the format of the policy. Valid values are `0`, `1`, and `3`. Requests that specify an invalid value are rejected. Any operation that affects conditional role bindings must specify version `3`. This requirement applies to the following operations: * Getting a policy that includes a conditional role binding * Adding a conditional role binding to a policy * Changing a conditional role binding in a policy * Removing any role binding, with or without a condition, from a policy that includes conditions **Important:** If you use IAM Conditions, you must include the `etag` field whenever you call `setIamPolicy`. If you omit this field, then IAM allows you to overwrite a version `3` policy with a version `1` policy, and all of the conditions in the version `3` policy are lost. If a policy does not include any conditions, operations on that policy may specify any valid version or leave the field unset. To learn which resources support conditions in their IAM policies, see the [IAM documentation](https://cloud.google.com/iam/help/conditions/resource-policies).
	Version pulumi.IntOutput `pulumi:"version"`
}

Sets the access control policy on the specified resource. Replaces any existing policy. Can return `NOT_FOUND`, `INVALID_ARGUMENT`, and `PERMISSION_DENIED` errors. Note - this resource's API doesn't support deletion. When deleted, the resource will persist on Google Cloud even though it will be deleted from Pulumi state.

func GetGameServerDeploymentIamPolicy

func GetGameServerDeploymentIamPolicy(ctx *pulumi.Context,
	name string, id pulumi.IDInput, state *GameServerDeploymentIamPolicyState, opts ...pulumi.ResourceOption) (*GameServerDeploymentIamPolicy, error)

GetGameServerDeploymentIamPolicy gets an existing GameServerDeploymentIamPolicy resource's state with the given name, ID, and optional state properties that are used to uniquely qualify the lookup (nil if not required).

func NewGameServerDeploymentIamPolicy

func NewGameServerDeploymentIamPolicy(ctx *pulumi.Context,
	name string, args *GameServerDeploymentIamPolicyArgs, opts ...pulumi.ResourceOption) (*GameServerDeploymentIamPolicy, error)

NewGameServerDeploymentIamPolicy registers a new resource with the given unique name, arguments, and options.

func (*GameServerDeploymentIamPolicy) ElementType

func (*GameServerDeploymentIamPolicy) ToGameServerDeploymentIamPolicyOutput

func (i *GameServerDeploymentIamPolicy) ToGameServerDeploymentIamPolicyOutput() GameServerDeploymentIamPolicyOutput

func (*GameServerDeploymentIamPolicy) ToGameServerDeploymentIamPolicyOutputWithContext

func (i *GameServerDeploymentIamPolicy) ToGameServerDeploymentIamPolicyOutputWithContext(ctx context.Context) GameServerDeploymentIamPolicyOutput

type GameServerDeploymentIamPolicyArgs

type GameServerDeploymentIamPolicyArgs struct {
	// Specifies cloud audit logging configuration for this policy.
	AuditConfigs AuditConfigArrayInput
	// Associates a list of `members`, or principals, with a `role`. Optionally, may specify a `condition` that determines how and when the `bindings` are applied. Each of the `bindings` must contain at least one principal. The `bindings` in a `Policy` can refer to up to 1,500 principals; up to 250 of these principals can be Google groups. Each occurrence of a principal counts towards these limits. For example, if the `bindings` grant 50 different roles to `user:alice@example.com`, and not to any other principal, then you can add another 1,450 principals to the `bindings` in the `Policy`.
	Bindings BindingArrayInput
	// `etag` is used for optimistic concurrency control as a way to help prevent simultaneous updates of a policy from overwriting each other. It is strongly suggested that systems make use of the `etag` in the read-modify-write cycle to perform policy updates in order to avoid race conditions: An `etag` is returned in the response to `getIamPolicy`, and systems are expected to put that etag in the request to `setIamPolicy` to ensure that their change will be applied to the same version of the policy. **Important:** If you use IAM Conditions, you must include the `etag` field whenever you call `setIamPolicy`. If you omit this field, then IAM allows you to overwrite a version `3` policy with a version `1` policy, and all of the conditions in the version `3` policy are lost.
	Etag                   pulumi.StringPtrInput
	GameServerDeploymentId pulumi.StringInput
	Location               pulumi.StringPtrInput
	Project                pulumi.StringPtrInput
	// If more than one rule is specified, the rules are applied in the following manner: - All matching LOG rules are always applied. - If any DENY/DENY_WITH_LOG rule matches, permission is denied. Logging will be applied if one or more matching rule requires logging. - Otherwise, if any ALLOW/ALLOW_WITH_LOG rule matches, permission is granted. Logging will be applied if one or more matching rule requires logging. - Otherwise, if no rule applies, permission is denied.
	Rules RuleArrayInput
	// OPTIONAL: A FieldMask specifying which fields of the policy to modify. Only the fields in the mask will be modified. If no mask is provided, the following default mask is used: `paths: "bindings, etag"`
	UpdateMask pulumi.StringPtrInput
	// Specifies the format of the policy. Valid values are `0`, `1`, and `3`. Requests that specify an invalid value are rejected. Any operation that affects conditional role bindings must specify version `3`. This requirement applies to the following operations: * Getting a policy that includes a conditional role binding * Adding a conditional role binding to a policy * Changing a conditional role binding in a policy * Removing any role binding, with or without a condition, from a policy that includes conditions **Important:** If you use IAM Conditions, you must include the `etag` field whenever you call `setIamPolicy`. If you omit this field, then IAM allows you to overwrite a version `3` policy with a version `1` policy, and all of the conditions in the version `3` policy are lost. If a policy does not include any conditions, operations on that policy may specify any valid version or leave the field unset. To learn which resources support conditions in their IAM policies, see the [IAM documentation](https://cloud.google.com/iam/help/conditions/resource-policies).
	Version pulumi.IntPtrInput
}

The set of arguments for constructing a GameServerDeploymentIamPolicy resource.

func (GameServerDeploymentIamPolicyArgs) ElementType

type GameServerDeploymentIamPolicyInput

type GameServerDeploymentIamPolicyInput interface {
	pulumi.Input

	ToGameServerDeploymentIamPolicyOutput() GameServerDeploymentIamPolicyOutput
	ToGameServerDeploymentIamPolicyOutputWithContext(ctx context.Context) GameServerDeploymentIamPolicyOutput
}

type GameServerDeploymentIamPolicyOutput

type GameServerDeploymentIamPolicyOutput struct{ *pulumi.OutputState }

func (GameServerDeploymentIamPolicyOutput) AuditConfigs added in v0.19.0

Specifies cloud audit logging configuration for this policy.

func (GameServerDeploymentIamPolicyOutput) Bindings added in v0.19.0

Associates a list of `members`, or principals, with a `role`. Optionally, may specify a `condition` that determines how and when the `bindings` are applied. Each of the `bindings` must contain at least one principal. The `bindings` in a `Policy` can refer to up to 1,500 principals; up to 250 of these principals can be Google groups. Each occurrence of a principal counts towards these limits. For example, if the `bindings` grant 50 different roles to `user:alice@example.com`, and not to any other principal, then you can add another 1,450 principals to the `bindings` in the `Policy`.

func (GameServerDeploymentIamPolicyOutput) ElementType

func (GameServerDeploymentIamPolicyOutput) Etag added in v0.19.0

`etag` is used for optimistic concurrency control as a way to help prevent simultaneous updates of a policy from overwriting each other. It is strongly suggested that systems make use of the `etag` in the read-modify-write cycle to perform policy updates in order to avoid race conditions: An `etag` is returned in the response to `getIamPolicy`, and systems are expected to put that etag in the request to `setIamPolicy` to ensure that their change will be applied to the same version of the policy. **Important:** If you use IAM Conditions, you must include the `etag` field whenever you call `setIamPolicy`. If you omit this field, then IAM allows you to overwrite a version `3` policy with a version `1` policy, and all of the conditions in the version `3` policy are lost.

func (GameServerDeploymentIamPolicyOutput) GameServerDeploymentId added in v0.21.0

func (o GameServerDeploymentIamPolicyOutput) GameServerDeploymentId() pulumi.StringOutput

func (GameServerDeploymentIamPolicyOutput) Location added in v0.21.0

func (GameServerDeploymentIamPolicyOutput) Project added in v0.21.0

func (GameServerDeploymentIamPolicyOutput) Rules added in v0.19.0

If more than one rule is specified, the rules are applied in the following manner: - All matching LOG rules are always applied. - If any DENY/DENY_WITH_LOG rule matches, permission is denied. Logging will be applied if one or more matching rule requires logging. - Otherwise, if any ALLOW/ALLOW_WITH_LOG rule matches, permission is granted. Logging will be applied if one or more matching rule requires logging. - Otherwise, if no rule applies, permission is denied.

func (GameServerDeploymentIamPolicyOutput) ToGameServerDeploymentIamPolicyOutput

func (o GameServerDeploymentIamPolicyOutput) ToGameServerDeploymentIamPolicyOutput() GameServerDeploymentIamPolicyOutput

func (GameServerDeploymentIamPolicyOutput) ToGameServerDeploymentIamPolicyOutputWithContext

func (o GameServerDeploymentIamPolicyOutput) ToGameServerDeploymentIamPolicyOutputWithContext(ctx context.Context) GameServerDeploymentIamPolicyOutput

func (GameServerDeploymentIamPolicyOutput) Version added in v0.19.0

Specifies the format of the policy. Valid values are `0`, `1`, and `3`. Requests that specify an invalid value are rejected. Any operation that affects conditional role bindings must specify version `3`. This requirement applies to the following operations: * Getting a policy that includes a conditional role binding * Adding a conditional role binding to a policy * Changing a conditional role binding in a policy * Removing any role binding, with or without a condition, from a policy that includes conditions **Important:** If you use IAM Conditions, you must include the `etag` field whenever you call `setIamPolicy`. If you omit this field, then IAM allows you to overwrite a version `3` policy with a version `1` policy, and all of the conditions in the version `3` policy are lost. If a policy does not include any conditions, operations on that policy may specify any valid version or leave the field unset. To learn which resources support conditions in their IAM policies, see the [IAM documentation](https://cloud.google.com/iam/help/conditions/resource-policies).

type GameServerDeploymentIamPolicyState

type GameServerDeploymentIamPolicyState struct {
}

func (GameServerDeploymentIamPolicyState) ElementType

type LogConfig

type LogConfig struct {
	// Cloud audit options.
	CloudAudit *CloudAuditOptions `pulumi:"cloudAudit"`
	// Counter options.
	Counter *CounterOptions `pulumi:"counter"`
	// Data access options.
	DataAccess *DataAccessOptions `pulumi:"dataAccess"`
}

Specifies what kind of log the caller must write

type LogConfigArgs

type LogConfigArgs struct {
	// Cloud audit options.
	CloudAudit CloudAuditOptionsPtrInput `pulumi:"cloudAudit"`
	// Counter options.
	Counter CounterOptionsPtrInput `pulumi:"counter"`
	// Data access options.
	DataAccess DataAccessOptionsPtrInput `pulumi:"dataAccess"`
}

Specifies what kind of log the caller must write

func (LogConfigArgs) ElementType

func (LogConfigArgs) ElementType() reflect.Type

func (LogConfigArgs) ToLogConfigOutput

func (i LogConfigArgs) ToLogConfigOutput() LogConfigOutput

func (LogConfigArgs) ToLogConfigOutputWithContext

func (i LogConfigArgs) ToLogConfigOutputWithContext(ctx context.Context) LogConfigOutput

type LogConfigArray

type LogConfigArray []LogConfigInput

func (LogConfigArray) ElementType

func (LogConfigArray) ElementType() reflect.Type

func (LogConfigArray) ToLogConfigArrayOutput

func (i LogConfigArray) ToLogConfigArrayOutput() LogConfigArrayOutput

func (LogConfigArray) ToLogConfigArrayOutputWithContext

func (i LogConfigArray) ToLogConfigArrayOutputWithContext(ctx context.Context) LogConfigArrayOutput

type LogConfigArrayInput

type LogConfigArrayInput interface {
	pulumi.Input

	ToLogConfigArrayOutput() LogConfigArrayOutput
	ToLogConfigArrayOutputWithContext(context.Context) LogConfigArrayOutput
}

LogConfigArrayInput is an input type that accepts LogConfigArray and LogConfigArrayOutput values. You can construct a concrete instance of `LogConfigArrayInput` via:

LogConfigArray{ LogConfigArgs{...} }

type LogConfigArrayOutput

type LogConfigArrayOutput struct{ *pulumi.OutputState }

func (LogConfigArrayOutput) ElementType

func (LogConfigArrayOutput) ElementType() reflect.Type

func (LogConfigArrayOutput) Index

func (LogConfigArrayOutput) ToLogConfigArrayOutput

func (o LogConfigArrayOutput) ToLogConfigArrayOutput() LogConfigArrayOutput

func (LogConfigArrayOutput) ToLogConfigArrayOutputWithContext

func (o LogConfigArrayOutput) ToLogConfigArrayOutputWithContext(ctx context.Context) LogConfigArrayOutput

type LogConfigInput

type LogConfigInput interface {
	pulumi.Input

	ToLogConfigOutput() LogConfigOutput
	ToLogConfigOutputWithContext(context.Context) LogConfigOutput
}

LogConfigInput is an input type that accepts LogConfigArgs and LogConfigOutput values. You can construct a concrete instance of `LogConfigInput` via:

LogConfigArgs{...}

type LogConfigOutput

type LogConfigOutput struct{ *pulumi.OutputState }

Specifies what kind of log the caller must write

func (LogConfigOutput) CloudAudit

Cloud audit options.

func (LogConfigOutput) Counter

Counter options.

func (LogConfigOutput) DataAccess

Data access options.

func (LogConfigOutput) ElementType

func (LogConfigOutput) ElementType() reflect.Type

func (LogConfigOutput) ToLogConfigOutput

func (o LogConfigOutput) ToLogConfigOutput() LogConfigOutput

func (LogConfigOutput) ToLogConfigOutputWithContext

func (o LogConfigOutput) ToLogConfigOutputWithContext(ctx context.Context) LogConfigOutput

type LogConfigResponse

type LogConfigResponse struct {
	// Cloud audit options.
	CloudAudit CloudAuditOptionsResponse `pulumi:"cloudAudit"`
	// Counter options.
	Counter CounterOptionsResponse `pulumi:"counter"`
	// Data access options.
	DataAccess DataAccessOptionsResponse `pulumi:"dataAccess"`
}

Specifies what kind of log the caller must write

type LogConfigResponseArrayOutput

type LogConfigResponseArrayOutput struct{ *pulumi.OutputState }

func (LogConfigResponseArrayOutput) ElementType

func (LogConfigResponseArrayOutput) Index

func (LogConfigResponseArrayOutput) ToLogConfigResponseArrayOutput

func (o LogConfigResponseArrayOutput) ToLogConfigResponseArrayOutput() LogConfigResponseArrayOutput

func (LogConfigResponseArrayOutput) ToLogConfigResponseArrayOutputWithContext

func (o LogConfigResponseArrayOutput) ToLogConfigResponseArrayOutputWithContext(ctx context.Context) LogConfigResponseArrayOutput

type LogConfigResponseOutput

type LogConfigResponseOutput struct{ *pulumi.OutputState }

Specifies what kind of log the caller must write

func (LogConfigResponseOutput) CloudAudit

Cloud audit options.

func (LogConfigResponseOutput) Counter

Counter options.

func (LogConfigResponseOutput) DataAccess

Data access options.

func (LogConfigResponseOutput) ElementType

func (LogConfigResponseOutput) ElementType() reflect.Type

func (LogConfigResponseOutput) ToLogConfigResponseOutput

func (o LogConfigResponseOutput) ToLogConfigResponseOutput() LogConfigResponseOutput

func (LogConfigResponseOutput) ToLogConfigResponseOutputWithContext

func (o LogConfigResponseOutput) ToLogConfigResponseOutputWithContext(ctx context.Context) LogConfigResponseOutput

type LookupGameServerDeploymentIamPolicyArgs added in v0.4.0

type LookupGameServerDeploymentIamPolicyArgs struct {
	GameServerDeploymentId        string  `pulumi:"gameServerDeploymentId"`
	Location                      string  `pulumi:"location"`
	OptionsRequestedPolicyVersion *int    `pulumi:"optionsRequestedPolicyVersion"`
	Project                       *string `pulumi:"project"`
}

type LookupGameServerDeploymentIamPolicyOutputArgs added in v0.8.0

type LookupGameServerDeploymentIamPolicyOutputArgs struct {
	GameServerDeploymentId        pulumi.StringInput    `pulumi:"gameServerDeploymentId"`
	Location                      pulumi.StringInput    `pulumi:"location"`
	OptionsRequestedPolicyVersion pulumi.IntPtrInput    `pulumi:"optionsRequestedPolicyVersion"`
	Project                       pulumi.StringPtrInput `pulumi:"project"`
}

func (LookupGameServerDeploymentIamPolicyOutputArgs) ElementType added in v0.8.0

type LookupGameServerDeploymentIamPolicyResult added in v0.4.0

type LookupGameServerDeploymentIamPolicyResult struct {
	// Specifies cloud audit logging configuration for this policy.
	AuditConfigs []AuditConfigResponse `pulumi:"auditConfigs"`
	// Associates a list of `members`, or principals, with a `role`. Optionally, may specify a `condition` that determines how and when the `bindings` are applied. Each of the `bindings` must contain at least one principal. The `bindings` in a `Policy` can refer to up to 1,500 principals; up to 250 of these principals can be Google groups. Each occurrence of a principal counts towards these limits. For example, if the `bindings` grant 50 different roles to `user:alice@example.com`, and not to any other principal, then you can add another 1,450 principals to the `bindings` in the `Policy`.
	Bindings []BindingResponse `pulumi:"bindings"`
	// `etag` is used for optimistic concurrency control as a way to help prevent simultaneous updates of a policy from overwriting each other. It is strongly suggested that systems make use of the `etag` in the read-modify-write cycle to perform policy updates in order to avoid race conditions: An `etag` is returned in the response to `getIamPolicy`, and systems are expected to put that etag in the request to `setIamPolicy` to ensure that their change will be applied to the same version of the policy. **Important:** If you use IAM Conditions, you must include the `etag` field whenever you call `setIamPolicy`. If you omit this field, then IAM allows you to overwrite a version `3` policy with a version `1` policy, and all of the conditions in the version `3` policy are lost.
	Etag string `pulumi:"etag"`
	// If more than one rule is specified, the rules are applied in the following manner: - All matching LOG rules are always applied. - If any DENY/DENY_WITH_LOG rule matches, permission is denied. Logging will be applied if one or more matching rule requires logging. - Otherwise, if any ALLOW/ALLOW_WITH_LOG rule matches, permission is granted. Logging will be applied if one or more matching rule requires logging. - Otherwise, if no rule applies, permission is denied.
	Rules []RuleResponse `pulumi:"rules"`
	// Specifies the format of the policy. Valid values are `0`, `1`, and `3`. Requests that specify an invalid value are rejected. Any operation that affects conditional role bindings must specify version `3`. This requirement applies to the following operations: * Getting a policy that includes a conditional role binding * Adding a conditional role binding to a policy * Changing a conditional role binding in a policy * Removing any role binding, with or without a condition, from a policy that includes conditions **Important:** If you use IAM Conditions, you must include the `etag` field whenever you call `setIamPolicy`. If you omit this field, then IAM allows you to overwrite a version `3` policy with a version `1` policy, and all of the conditions in the version `3` policy are lost. If a policy does not include any conditions, operations on that policy may specify any valid version or leave the field unset. To learn which resources support conditions in their IAM policies, see the [IAM documentation](https://cloud.google.com/iam/help/conditions/resource-policies).
	Version int `pulumi:"version"`
}

func LookupGameServerDeploymentIamPolicy added in v0.4.0

Gets the access control policy for a resource. Returns an empty policy if the resource exists and does not have a policy set.

type LookupGameServerDeploymentIamPolicyResultOutput added in v0.8.0

type LookupGameServerDeploymentIamPolicyResultOutput struct{ *pulumi.OutputState }

func (LookupGameServerDeploymentIamPolicyResultOutput) AuditConfigs added in v0.8.0

Specifies cloud audit logging configuration for this policy.

func (LookupGameServerDeploymentIamPolicyResultOutput) Bindings added in v0.8.0

Associates a list of `members`, or principals, with a `role`. Optionally, may specify a `condition` that determines how and when the `bindings` are applied. Each of the `bindings` must contain at least one principal. The `bindings` in a `Policy` can refer to up to 1,500 principals; up to 250 of these principals can be Google groups. Each occurrence of a principal counts towards these limits. For example, if the `bindings` grant 50 different roles to `user:alice@example.com`, and not to any other principal, then you can add another 1,450 principals to the `bindings` in the `Policy`.

func (LookupGameServerDeploymentIamPolicyResultOutput) ElementType added in v0.8.0

func (LookupGameServerDeploymentIamPolicyResultOutput) Etag added in v0.8.0

`etag` is used for optimistic concurrency control as a way to help prevent simultaneous updates of a policy from overwriting each other. It is strongly suggested that systems make use of the `etag` in the read-modify-write cycle to perform policy updates in order to avoid race conditions: An `etag` is returned in the response to `getIamPolicy`, and systems are expected to put that etag in the request to `setIamPolicy` to ensure that their change will be applied to the same version of the policy. **Important:** If you use IAM Conditions, you must include the `etag` field whenever you call `setIamPolicy`. If you omit this field, then IAM allows you to overwrite a version `3` policy with a version `1` policy, and all of the conditions in the version `3` policy are lost.

func (LookupGameServerDeploymentIamPolicyResultOutput) Rules added in v0.8.0

If more than one rule is specified, the rules are applied in the following manner: - All matching LOG rules are always applied. - If any DENY/DENY_WITH_LOG rule matches, permission is denied. Logging will be applied if one or more matching rule requires logging. - Otherwise, if any ALLOW/ALLOW_WITH_LOG rule matches, permission is granted. Logging will be applied if one or more matching rule requires logging. - Otherwise, if no rule applies, permission is denied.

func (LookupGameServerDeploymentIamPolicyResultOutput) ToLookupGameServerDeploymentIamPolicyResultOutput added in v0.8.0

func (o LookupGameServerDeploymentIamPolicyResultOutput) ToLookupGameServerDeploymentIamPolicyResultOutput() LookupGameServerDeploymentIamPolicyResultOutput

func (LookupGameServerDeploymentIamPolicyResultOutput) ToLookupGameServerDeploymentIamPolicyResultOutputWithContext added in v0.8.0

func (o LookupGameServerDeploymentIamPolicyResultOutput) ToLookupGameServerDeploymentIamPolicyResultOutputWithContext(ctx context.Context) LookupGameServerDeploymentIamPolicyResultOutput

func (LookupGameServerDeploymentIamPolicyResultOutput) Version added in v0.8.0

Specifies the format of the policy. Valid values are `0`, `1`, and `3`. Requests that specify an invalid value are rejected. Any operation that affects conditional role bindings must specify version `3`. This requirement applies to the following operations: * Getting a policy that includes a conditional role binding * Adding a conditional role binding to a policy * Changing a conditional role binding in a policy * Removing any role binding, with or without a condition, from a policy that includes conditions **Important:** If you use IAM Conditions, you must include the `etag` field whenever you call `setIamPolicy`. If you omit this field, then IAM allows you to overwrite a version `3` policy with a version `1` policy, and all of the conditions in the version `3` policy are lost. If a policy does not include any conditions, operations on that policy may specify any valid version or leave the field unset. To learn which resources support conditions in their IAM policies, see the [IAM documentation](https://cloud.google.com/iam/help/conditions/resource-policies).

type Rule

type Rule struct {
	// Required
	Action *RuleAction `pulumi:"action"`
	// Additional restrictions that must be met. All conditions must pass for the rule to match.
	Conditions []Condition `pulumi:"conditions"`
	// Human-readable description of the rule.
	Description *string `pulumi:"description"`
	// If one or more 'in' clauses are specified, the rule matches if the PRINCIPAL/AUTHORITY_SELECTOR is in at least one of these entries.
	In []string `pulumi:"in"`
	// The config returned to callers of CheckPolicy for any entries that match the LOG action.
	LogConfig []LogConfig `pulumi:"logConfig"`
	// If one or more 'not_in' clauses are specified, the rule matches if the PRINCIPAL/AUTHORITY_SELECTOR is in none of the entries. The format for in and not_in entries can be found at in the Local IAM documentation (see go/local-iam#features).
	NotIn []string `pulumi:"notIn"`
	// A permission is a string of form '..' (e.g., 'storage.buckets.list'). A value of '*' matches all permissions, and a verb part of '*' (e.g., 'storage.buckets.*') matches all verbs.
	Permissions []string `pulumi:"permissions"`
}

A rule to be applied in a Policy.

type RuleAction added in v0.4.0

type RuleAction string

Required

func (RuleAction) ElementType added in v0.4.0

func (RuleAction) ElementType() reflect.Type

func (RuleAction) ToRuleActionOutput added in v0.6.0

func (e RuleAction) ToRuleActionOutput() RuleActionOutput

func (RuleAction) ToRuleActionOutputWithContext added in v0.6.0

func (e RuleAction) ToRuleActionOutputWithContext(ctx context.Context) RuleActionOutput

func (RuleAction) ToRuleActionPtrOutput added in v0.6.0

func (e RuleAction) ToRuleActionPtrOutput() RuleActionPtrOutput

func (RuleAction) ToRuleActionPtrOutputWithContext added in v0.6.0

func (e RuleAction) ToRuleActionPtrOutputWithContext(ctx context.Context) RuleActionPtrOutput

func (RuleAction) ToStringOutput added in v0.4.0

func (e RuleAction) ToStringOutput() pulumi.StringOutput

func (RuleAction) ToStringOutputWithContext added in v0.4.0

func (e RuleAction) ToStringOutputWithContext(ctx context.Context) pulumi.StringOutput

func (RuleAction) ToStringPtrOutput added in v0.4.0

func (e RuleAction) ToStringPtrOutput() pulumi.StringPtrOutput

func (RuleAction) ToStringPtrOutputWithContext added in v0.4.0

func (e RuleAction) ToStringPtrOutputWithContext(ctx context.Context) pulumi.StringPtrOutput

type RuleActionInput added in v0.6.0

type RuleActionInput interface {
	pulumi.Input

	ToRuleActionOutput() RuleActionOutput
	ToRuleActionOutputWithContext(context.Context) RuleActionOutput
}

RuleActionInput is an input type that accepts RuleActionArgs and RuleActionOutput values. You can construct a concrete instance of `RuleActionInput` via:

RuleActionArgs{...}

type RuleActionOutput added in v0.6.0

type RuleActionOutput struct{ *pulumi.OutputState }

func (RuleActionOutput) ElementType added in v0.6.0

func (RuleActionOutput) ElementType() reflect.Type

func (RuleActionOutput) ToRuleActionOutput added in v0.6.0

func (o RuleActionOutput) ToRuleActionOutput() RuleActionOutput

func (RuleActionOutput) ToRuleActionOutputWithContext added in v0.6.0

func (o RuleActionOutput) ToRuleActionOutputWithContext(ctx context.Context) RuleActionOutput

func (RuleActionOutput) ToRuleActionPtrOutput added in v0.6.0

func (o RuleActionOutput) ToRuleActionPtrOutput() RuleActionPtrOutput

func (RuleActionOutput) ToRuleActionPtrOutputWithContext added in v0.6.0

func (o RuleActionOutput) ToRuleActionPtrOutputWithContext(ctx context.Context) RuleActionPtrOutput

func (RuleActionOutput) ToStringOutput added in v0.6.0

func (o RuleActionOutput) ToStringOutput() pulumi.StringOutput

func (RuleActionOutput) ToStringOutputWithContext added in v0.6.0

func (o RuleActionOutput) ToStringOutputWithContext(ctx context.Context) pulumi.StringOutput

func (RuleActionOutput) ToStringPtrOutput added in v0.6.0

func (o RuleActionOutput) ToStringPtrOutput() pulumi.StringPtrOutput

func (RuleActionOutput) ToStringPtrOutputWithContext added in v0.6.0

func (o RuleActionOutput) ToStringPtrOutputWithContext(ctx context.Context) pulumi.StringPtrOutput

type RuleActionPtrInput added in v0.6.0

type RuleActionPtrInput interface {
	pulumi.Input

	ToRuleActionPtrOutput() RuleActionPtrOutput
	ToRuleActionPtrOutputWithContext(context.Context) RuleActionPtrOutput
}

func RuleActionPtr added in v0.6.0

func RuleActionPtr(v string) RuleActionPtrInput

type RuleActionPtrOutput added in v0.6.0

type RuleActionPtrOutput struct{ *pulumi.OutputState }

func (RuleActionPtrOutput) Elem added in v0.6.0

func (RuleActionPtrOutput) ElementType added in v0.6.0

func (RuleActionPtrOutput) ElementType() reflect.Type

func (RuleActionPtrOutput) ToRuleActionPtrOutput added in v0.6.0

func (o RuleActionPtrOutput) ToRuleActionPtrOutput() RuleActionPtrOutput

func (RuleActionPtrOutput) ToRuleActionPtrOutputWithContext added in v0.6.0

func (o RuleActionPtrOutput) ToRuleActionPtrOutputWithContext(ctx context.Context) RuleActionPtrOutput

func (RuleActionPtrOutput) ToStringPtrOutput added in v0.6.0

func (o RuleActionPtrOutput) ToStringPtrOutput() pulumi.StringPtrOutput

func (RuleActionPtrOutput) ToStringPtrOutputWithContext added in v0.6.0

func (o RuleActionPtrOutput) ToStringPtrOutputWithContext(ctx context.Context) pulumi.StringPtrOutput

type RuleArgs

type RuleArgs struct {
	// Required
	Action RuleActionPtrInput `pulumi:"action"`
	// Additional restrictions that must be met. All conditions must pass for the rule to match.
	Conditions ConditionArrayInput `pulumi:"conditions"`
	// Human-readable description of the rule.
	Description pulumi.StringPtrInput `pulumi:"description"`
	// If one or more 'in' clauses are specified, the rule matches if the PRINCIPAL/AUTHORITY_SELECTOR is in at least one of these entries.
	In pulumi.StringArrayInput `pulumi:"in"`
	// The config returned to callers of CheckPolicy for any entries that match the LOG action.
	LogConfig LogConfigArrayInput `pulumi:"logConfig"`
	// If one or more 'not_in' clauses are specified, the rule matches if the PRINCIPAL/AUTHORITY_SELECTOR is in none of the entries. The format for in and not_in entries can be found at in the Local IAM documentation (see go/local-iam#features).
	NotIn pulumi.StringArrayInput `pulumi:"notIn"`
	// A permission is a string of form '..' (e.g., 'storage.buckets.list'). A value of '*' matches all permissions, and a verb part of '*' (e.g., 'storage.buckets.*') matches all verbs.
	Permissions pulumi.StringArrayInput `pulumi:"permissions"`
}

A rule to be applied in a Policy.

func (RuleArgs) ElementType

func (RuleArgs) ElementType() reflect.Type

func (RuleArgs) ToRuleOutput

func (i RuleArgs) ToRuleOutput() RuleOutput

func (RuleArgs) ToRuleOutputWithContext

func (i RuleArgs) ToRuleOutputWithContext(ctx context.Context) RuleOutput

type RuleArray

type RuleArray []RuleInput

func (RuleArray) ElementType

func (RuleArray) ElementType() reflect.Type

func (RuleArray) ToRuleArrayOutput

func (i RuleArray) ToRuleArrayOutput() RuleArrayOutput

func (RuleArray) ToRuleArrayOutputWithContext

func (i RuleArray) ToRuleArrayOutputWithContext(ctx context.Context) RuleArrayOutput

type RuleArrayInput

type RuleArrayInput interface {
	pulumi.Input

	ToRuleArrayOutput() RuleArrayOutput
	ToRuleArrayOutputWithContext(context.Context) RuleArrayOutput
}

RuleArrayInput is an input type that accepts RuleArray and RuleArrayOutput values. You can construct a concrete instance of `RuleArrayInput` via:

RuleArray{ RuleArgs{...} }

type RuleArrayOutput

type RuleArrayOutput struct{ *pulumi.OutputState }

func (RuleArrayOutput) ElementType

func (RuleArrayOutput) ElementType() reflect.Type

func (RuleArrayOutput) Index

func (RuleArrayOutput) ToRuleArrayOutput

func (o RuleArrayOutput) ToRuleArrayOutput() RuleArrayOutput

func (RuleArrayOutput) ToRuleArrayOutputWithContext

func (o RuleArrayOutput) ToRuleArrayOutputWithContext(ctx context.Context) RuleArrayOutput

type RuleInput

type RuleInput interface {
	pulumi.Input

	ToRuleOutput() RuleOutput
	ToRuleOutputWithContext(context.Context) RuleOutput
}

RuleInput is an input type that accepts RuleArgs and RuleOutput values. You can construct a concrete instance of `RuleInput` via:

RuleArgs{...}

type RuleOutput

type RuleOutput struct{ *pulumi.OutputState }

A rule to be applied in a Policy.

func (RuleOutput) Action

func (o RuleOutput) Action() RuleActionPtrOutput

Required

func (RuleOutput) Conditions

func (o RuleOutput) Conditions() ConditionArrayOutput

Additional restrictions that must be met. All conditions must pass for the rule to match.

func (RuleOutput) Description

func (o RuleOutput) Description() pulumi.StringPtrOutput

Human-readable description of the rule.

func (RuleOutput) ElementType

func (RuleOutput) ElementType() reflect.Type

func (RuleOutput) In

If one or more 'in' clauses are specified, the rule matches if the PRINCIPAL/AUTHORITY_SELECTOR is in at least one of these entries.

func (RuleOutput) LogConfig

func (o RuleOutput) LogConfig() LogConfigArrayOutput

The config returned to callers of CheckPolicy for any entries that match the LOG action.

func (RuleOutput) NotIn

If one or more 'not_in' clauses are specified, the rule matches if the PRINCIPAL/AUTHORITY_SELECTOR is in none of the entries. The format for in and not_in entries can be found at in the Local IAM documentation (see go/local-iam#features).

func (RuleOutput) Permissions

func (o RuleOutput) Permissions() pulumi.StringArrayOutput

A permission is a string of form '..' (e.g., 'storage.buckets.list'). A value of '*' matches all permissions, and a verb part of '*' (e.g., 'storage.buckets.*') matches all verbs.

func (RuleOutput) ToRuleOutput

func (o RuleOutput) ToRuleOutput() RuleOutput

func (RuleOutput) ToRuleOutputWithContext

func (o RuleOutput) ToRuleOutputWithContext(ctx context.Context) RuleOutput

type RuleResponse

type RuleResponse struct {
	// Required
	Action string `pulumi:"action"`
	// Additional restrictions that must be met. All conditions must pass for the rule to match.
	Conditions []ConditionResponse `pulumi:"conditions"`
	// Human-readable description of the rule.
	Description string `pulumi:"description"`
	// If one or more 'in' clauses are specified, the rule matches if the PRINCIPAL/AUTHORITY_SELECTOR is in at least one of these entries.
	In []string `pulumi:"in"`
	// The config returned to callers of CheckPolicy for any entries that match the LOG action.
	LogConfig []LogConfigResponse `pulumi:"logConfig"`
	// If one or more 'not_in' clauses are specified, the rule matches if the PRINCIPAL/AUTHORITY_SELECTOR is in none of the entries. The format for in and not_in entries can be found at in the Local IAM documentation (see go/local-iam#features).
	NotIn []string `pulumi:"notIn"`
	// A permission is a string of form '..' (e.g., 'storage.buckets.list'). A value of '*' matches all permissions, and a verb part of '*' (e.g., 'storage.buckets.*') matches all verbs.
	Permissions []string `pulumi:"permissions"`
}

A rule to be applied in a Policy.

type RuleResponseArrayOutput

type RuleResponseArrayOutput struct{ *pulumi.OutputState }

func (RuleResponseArrayOutput) ElementType

func (RuleResponseArrayOutput) ElementType() reflect.Type

func (RuleResponseArrayOutput) Index

func (RuleResponseArrayOutput) ToRuleResponseArrayOutput

func (o RuleResponseArrayOutput) ToRuleResponseArrayOutput() RuleResponseArrayOutput

func (RuleResponseArrayOutput) ToRuleResponseArrayOutputWithContext

func (o RuleResponseArrayOutput) ToRuleResponseArrayOutputWithContext(ctx context.Context) RuleResponseArrayOutput

type RuleResponseOutput

type RuleResponseOutput struct{ *pulumi.OutputState }

A rule to be applied in a Policy.

func (RuleResponseOutput) Action

Required

func (RuleResponseOutput) Conditions

Additional restrictions that must be met. All conditions must pass for the rule to match.

func (RuleResponseOutput) Description

func (o RuleResponseOutput) Description() pulumi.StringOutput

Human-readable description of the rule.

func (RuleResponseOutput) ElementType

func (RuleResponseOutput) ElementType() reflect.Type

func (RuleResponseOutput) In

If one or more 'in' clauses are specified, the rule matches if the PRINCIPAL/AUTHORITY_SELECTOR is in at least one of these entries.

func (RuleResponseOutput) LogConfig

The config returned to callers of CheckPolicy for any entries that match the LOG action.

func (RuleResponseOutput) NotIn

If one or more 'not_in' clauses are specified, the rule matches if the PRINCIPAL/AUTHORITY_SELECTOR is in none of the entries. The format for in and not_in entries can be found at in the Local IAM documentation (see go/local-iam#features).

func (RuleResponseOutput) Permissions

A permission is a string of form '..' (e.g., 'storage.buckets.list'). A value of '*' matches all permissions, and a verb part of '*' (e.g., 'storage.buckets.*') matches all verbs.

func (RuleResponseOutput) ToRuleResponseOutput

func (o RuleResponseOutput) ToRuleResponseOutput() RuleResponseOutput

func (RuleResponseOutput) ToRuleResponseOutputWithContext

func (o RuleResponseOutput) ToRuleResponseOutputWithContext(ctx context.Context) RuleResponseOutput

Jump to

Keyboard shortcuts

? : This menu
/ : Search site
f or F : Jump to
y or Y : Canonical URL