v1

package
v0.32.0 Latest Latest
Warning

This package is not in the latest version of its module.

Go to latest
Published: Nov 29, 2023 License: Apache-2.0 Imports: 9 Imported by: 0

Documentation

Index

Constants

View Source
const (
	// Default case. Should never be this.
	AuditLogConfigLogTypeLogTypeUnspecified = AuditLogConfigLogType("LOG_TYPE_UNSPECIFIED")
	// Admin reads. Example: CloudIAM getIamPolicy
	AuditLogConfigLogTypeAdminRead = AuditLogConfigLogType("ADMIN_READ")
	// Data writes. Example: CloudSQL Users create
	AuditLogConfigLogTypeDataWrite = AuditLogConfigLogType("DATA_WRITE")
	// Data reads. Example: CloudSQL Users list
	AuditLogConfigLogTypeDataRead = AuditLogConfigLogType("DATA_READ")
)
View Source
const (
	// Unspecified. Only allowed if no cluster-scoped resources will be restored.
	RestoreConfigClusterResourceConflictPolicyClusterResourceConflictPolicyUnspecified = RestoreConfigClusterResourceConflictPolicy("CLUSTER_RESOURCE_CONFLICT_POLICY_UNSPECIFIED")
	// Do not attempt to restore the conflicting resource.
	RestoreConfigClusterResourceConflictPolicyUseExistingVersion = RestoreConfigClusterResourceConflictPolicy("USE_EXISTING_VERSION")
	// Delete the existing version before re-creating it from the Backup. This is a dangerous option which could cause unintentional data loss if used inappropriately. For example, deleting a CRD will cause Kubernetes to delete all CRs of that type.
	RestoreConfigClusterResourceConflictPolicyUseBackupVersion = RestoreConfigClusterResourceConflictPolicy("USE_BACKUP_VERSION")
)
View Source
const (
	// Unspecified (invalid).
	RestoreConfigNamespacedResourceRestoreModeNamespacedResourceRestoreModeUnspecified = RestoreConfigNamespacedResourceRestoreMode("NAMESPACED_RESOURCE_RESTORE_MODE_UNSPECIFIED")
	// When conflicting top-level resources (either Namespaces or ProtectedApplications, depending upon the scope) are encountered, this will first trigger a delete of the conflicting resource AND ALL OF ITS REFERENCED RESOURCES (e.g., all resources in the Namespace or all resources referenced by the ProtectedApplication) before restoring the resources from the Backup. This mode should only be used when you are intending to revert some portion of a cluster to an earlier state.
	RestoreConfigNamespacedResourceRestoreModeDeleteAndRestore = RestoreConfigNamespacedResourceRestoreMode("DELETE_AND_RESTORE")
	// If conflicting top-level resources (either Namespaces or ProtectedApplications, depending upon the scope) are encountered at the beginning of a restore process, the Restore will fail. If a conflict occurs during the restore process itself (e.g., because an out of band process creates conflicting resources), a conflict will be reported.
	RestoreConfigNamespacedResourceRestoreModeFailOnConflict = RestoreConfigNamespacedResourceRestoreMode("FAIL_ON_CONFLICT")
)
View Source
const (
	// Unspecified (illegal).
	RestoreConfigVolumeDataRestorePolicyVolumeDataRestorePolicyUnspecified = RestoreConfigVolumeDataRestorePolicy("VOLUME_DATA_RESTORE_POLICY_UNSPECIFIED")
	// For each PVC to be restored, create a new underlying volume and PV from the corresponding VolumeBackup contained within the Backup.
	RestoreConfigVolumeDataRestorePolicyRestoreVolumeDataFromBackup = RestoreConfigVolumeDataRestorePolicy("RESTORE_VOLUME_DATA_FROM_BACKUP")
	// For each PVC to be restored, attempt to reuse the original PV contained in the Backup (with its original underlying volume). This option is likely only usable when restoring a workload to its original cluster.
	RestoreConfigVolumeDataRestorePolicyReuseVolumeHandleFromBackup = RestoreConfigVolumeDataRestorePolicy("REUSE_VOLUME_HANDLE_FROM_BACKUP")
	// For each PVC to be restored, create PVC without any particular action to restore data. In this case, the normal Kubernetes provisioning logic would kick in, and this would likely result in either dynamically provisioning blank PVs or binding to statically provisioned PVs.
	RestoreConfigVolumeDataRestorePolicyNoVolumeDataRestoration = RestoreConfigVolumeDataRestorePolicy("NO_VOLUME_DATA_RESTORATION")
)
View Source
const (
	// Unspecified operation
	TransformationRuleActionOpOpUnspecified = TransformationRuleActionOp("OP_UNSPECIFIED")
	// The "remove" operation removes the value at the target location.
	TransformationRuleActionOpRemove = TransformationRuleActionOp("REMOVE")
	// The "move" operation removes the value at a specified location and adds it to the target location.
	TransformationRuleActionOpMove = TransformationRuleActionOp("MOVE")
	// The "copy" operation copies the value at a specified location to the target location.
	TransformationRuleActionOpCopy = TransformationRuleActionOp("COPY")
	// The "add" operation performs one of the following functions, depending upon what the target location references: 1. If the target location specifies an array index, a new value is inserted into the array at the specified index. 2. If the target location specifies an object member that does not already exist, a new member is added to the object. 3. If the target location specifies an object member that does exist, that member's value is replaced.
	TransformationRuleActionOpAdd = TransformationRuleActionOp("ADD")
	// The "test" operation tests that a value at the target location is equal to a specified value.
	TransformationRuleActionOpTest = TransformationRuleActionOp("TEST")
	// The "replace" operation replaces the value at the target location with a new value. The operation object MUST contain a "value" member whose content specifies the replacement value.
	TransformationRuleActionOpReplace = TransformationRuleActionOp("REPLACE")
)

Variables

This section is empty.

Functions

This section is empty.

Types

type AuditConfig

type AuditConfig struct {
	// The configuration for logging of each type of permission.
	AuditLogConfigs []AuditLogConfig `pulumi:"auditLogConfigs"`
	// Specifies a service that will be enabled for audit logging. For example, `storage.googleapis.com`, `cloudsql.googleapis.com`. `allServices` is a special value that covers all services.
	Service *string `pulumi:"service"`
}

Specifies the audit configuration for a service. The configuration determines which permission types are logged, and what identities, if any, are exempted from logging. An AuditConfig must have one or more AuditLogConfigs. If there are AuditConfigs for both `allServices` and a specific service, the union of the two AuditConfigs is used for that service: the log_types specified in each AuditConfig are enabled, and the exempted_members in each AuditLogConfig are exempted. Example Policy with multiple AuditConfigs: { "audit_configs": [ { "service": "allServices", "audit_log_configs": [ { "log_type": "DATA_READ", "exempted_members": [ "user:jose@example.com" ] }, { "log_type": "DATA_WRITE" }, { "log_type": "ADMIN_READ" } ] }, { "service": "sampleservice.googleapis.com", "audit_log_configs": [ { "log_type": "DATA_READ" }, { "log_type": "DATA_WRITE", "exempted_members": [ "user:aliya@example.com" ] } ] } ] } For sampleservice, this policy enables DATA_READ, DATA_WRITE and ADMIN_READ logging. It also exempts `jose@example.com` from DATA_READ logging, and `aliya@example.com` from DATA_WRITE logging.

type AuditConfigArgs

type AuditConfigArgs struct {
	// The configuration for logging of each type of permission.
	AuditLogConfigs AuditLogConfigArrayInput `pulumi:"auditLogConfigs"`
	// Specifies a service that will be enabled for audit logging. For example, `storage.googleapis.com`, `cloudsql.googleapis.com`. `allServices` is a special value that covers all services.
	Service pulumi.StringPtrInput `pulumi:"service"`
}

Specifies the audit configuration for a service. The configuration determines which permission types are logged, and what identities, if any, are exempted from logging. An AuditConfig must have one or more AuditLogConfigs. If there are AuditConfigs for both `allServices` and a specific service, the union of the two AuditConfigs is used for that service: the log_types specified in each AuditConfig are enabled, and the exempted_members in each AuditLogConfig are exempted. Example Policy with multiple AuditConfigs: { "audit_configs": [ { "service": "allServices", "audit_log_configs": [ { "log_type": "DATA_READ", "exempted_members": [ "user:jose@example.com" ] }, { "log_type": "DATA_WRITE" }, { "log_type": "ADMIN_READ" } ] }, { "service": "sampleservice.googleapis.com", "audit_log_configs": [ { "log_type": "DATA_READ" }, { "log_type": "DATA_WRITE", "exempted_members": [ "user:aliya@example.com" ] } ] } ] } For sampleservice, this policy enables DATA_READ, DATA_WRITE and ADMIN_READ logging. It also exempts `jose@example.com` from DATA_READ logging, and `aliya@example.com` from DATA_WRITE logging.

func (AuditConfigArgs) ElementType

func (AuditConfigArgs) ElementType() reflect.Type

func (AuditConfigArgs) ToAuditConfigOutput

func (i AuditConfigArgs) ToAuditConfigOutput() AuditConfigOutput

func (AuditConfigArgs) ToAuditConfigOutputWithContext

func (i AuditConfigArgs) ToAuditConfigOutputWithContext(ctx context.Context) AuditConfigOutput

type AuditConfigArray

type AuditConfigArray []AuditConfigInput

func (AuditConfigArray) ElementType

func (AuditConfigArray) ElementType() reflect.Type

func (AuditConfigArray) ToAuditConfigArrayOutput

func (i AuditConfigArray) ToAuditConfigArrayOutput() AuditConfigArrayOutput

func (AuditConfigArray) ToAuditConfigArrayOutputWithContext

func (i AuditConfigArray) ToAuditConfigArrayOutputWithContext(ctx context.Context) AuditConfigArrayOutput

type AuditConfigArrayInput

type AuditConfigArrayInput interface {
	pulumi.Input

	ToAuditConfigArrayOutput() AuditConfigArrayOutput
	ToAuditConfigArrayOutputWithContext(context.Context) AuditConfigArrayOutput
}

AuditConfigArrayInput is an input type that accepts AuditConfigArray and AuditConfigArrayOutput values. You can construct a concrete instance of `AuditConfigArrayInput` via:

AuditConfigArray{ AuditConfigArgs{...} }

type AuditConfigArrayOutput

type AuditConfigArrayOutput struct{ *pulumi.OutputState }

func (AuditConfigArrayOutput) ElementType

func (AuditConfigArrayOutput) ElementType() reflect.Type

func (AuditConfigArrayOutput) Index

func (AuditConfigArrayOutput) ToAuditConfigArrayOutput

func (o AuditConfigArrayOutput) ToAuditConfigArrayOutput() AuditConfigArrayOutput

func (AuditConfigArrayOutput) ToAuditConfigArrayOutputWithContext

func (o AuditConfigArrayOutput) ToAuditConfigArrayOutputWithContext(ctx context.Context) AuditConfigArrayOutput

type AuditConfigInput

type AuditConfigInput interface {
	pulumi.Input

	ToAuditConfigOutput() AuditConfigOutput
	ToAuditConfigOutputWithContext(context.Context) AuditConfigOutput
}

AuditConfigInput is an input type that accepts AuditConfigArgs and AuditConfigOutput values. You can construct a concrete instance of `AuditConfigInput` via:

AuditConfigArgs{...}

type AuditConfigOutput

type AuditConfigOutput struct{ *pulumi.OutputState }

Specifies the audit configuration for a service. The configuration determines which permission types are logged, and what identities, if any, are exempted from logging. An AuditConfig must have one or more AuditLogConfigs. If there are AuditConfigs for both `allServices` and a specific service, the union of the two AuditConfigs is used for that service: the log_types specified in each AuditConfig are enabled, and the exempted_members in each AuditLogConfig are exempted. Example Policy with multiple AuditConfigs: { "audit_configs": [ { "service": "allServices", "audit_log_configs": [ { "log_type": "DATA_READ", "exempted_members": [ "user:jose@example.com" ] }, { "log_type": "DATA_WRITE" }, { "log_type": "ADMIN_READ" } ] }, { "service": "sampleservice.googleapis.com", "audit_log_configs": [ { "log_type": "DATA_READ" }, { "log_type": "DATA_WRITE", "exempted_members": [ "user:aliya@example.com" ] } ] } ] } For sampleservice, this policy enables DATA_READ, DATA_WRITE and ADMIN_READ logging. It also exempts `jose@example.com` from DATA_READ logging, and `aliya@example.com` from DATA_WRITE logging.

func (AuditConfigOutput) AuditLogConfigs

func (o AuditConfigOutput) AuditLogConfigs() AuditLogConfigArrayOutput

The configuration for logging of each type of permission.

func (AuditConfigOutput) ElementType

func (AuditConfigOutput) ElementType() reflect.Type

func (AuditConfigOutput) Service

Specifies a service that will be enabled for audit logging. For example, `storage.googleapis.com`, `cloudsql.googleapis.com`. `allServices` is a special value that covers all services.

func (AuditConfigOutput) ToAuditConfigOutput

func (o AuditConfigOutput) ToAuditConfigOutput() AuditConfigOutput

func (AuditConfigOutput) ToAuditConfigOutputWithContext

func (o AuditConfigOutput) ToAuditConfigOutputWithContext(ctx context.Context) AuditConfigOutput

type AuditConfigResponse

type AuditConfigResponse struct {
	// The configuration for logging of each type of permission.
	AuditLogConfigs []AuditLogConfigResponse `pulumi:"auditLogConfigs"`
	// Specifies a service that will be enabled for audit logging. For example, `storage.googleapis.com`, `cloudsql.googleapis.com`. `allServices` is a special value that covers all services.
	Service string `pulumi:"service"`
}

Specifies the audit configuration for a service. The configuration determines which permission types are logged, and what identities, if any, are exempted from logging. An AuditConfig must have one or more AuditLogConfigs. If there are AuditConfigs for both `allServices` and a specific service, the union of the two AuditConfigs is used for that service: the log_types specified in each AuditConfig are enabled, and the exempted_members in each AuditLogConfig are exempted. Example Policy with multiple AuditConfigs: { "audit_configs": [ { "service": "allServices", "audit_log_configs": [ { "log_type": "DATA_READ", "exempted_members": [ "user:jose@example.com" ] }, { "log_type": "DATA_WRITE" }, { "log_type": "ADMIN_READ" } ] }, { "service": "sampleservice.googleapis.com", "audit_log_configs": [ { "log_type": "DATA_READ" }, { "log_type": "DATA_WRITE", "exempted_members": [ "user:aliya@example.com" ] } ] } ] } For sampleservice, this policy enables DATA_READ, DATA_WRITE and ADMIN_READ logging. It also exempts `jose@example.com` from DATA_READ logging, and `aliya@example.com` from DATA_WRITE logging.

type AuditConfigResponseArrayOutput

type AuditConfigResponseArrayOutput struct{ *pulumi.OutputState }

func (AuditConfigResponseArrayOutput) ElementType

func (AuditConfigResponseArrayOutput) Index

func (AuditConfigResponseArrayOutput) ToAuditConfigResponseArrayOutput

func (o AuditConfigResponseArrayOutput) ToAuditConfigResponseArrayOutput() AuditConfigResponseArrayOutput

func (AuditConfigResponseArrayOutput) ToAuditConfigResponseArrayOutputWithContext

func (o AuditConfigResponseArrayOutput) ToAuditConfigResponseArrayOutputWithContext(ctx context.Context) AuditConfigResponseArrayOutput

type AuditConfigResponseOutput

type AuditConfigResponseOutput struct{ *pulumi.OutputState }

Specifies the audit configuration for a service. The configuration determines which permission types are logged, and what identities, if any, are exempted from logging. An AuditConfig must have one or more AuditLogConfigs. If there are AuditConfigs for both `allServices` and a specific service, the union of the two AuditConfigs is used for that service: the log_types specified in each AuditConfig are enabled, and the exempted_members in each AuditLogConfig are exempted. Example Policy with multiple AuditConfigs: { "audit_configs": [ { "service": "allServices", "audit_log_configs": [ { "log_type": "DATA_READ", "exempted_members": [ "user:jose@example.com" ] }, { "log_type": "DATA_WRITE" }, { "log_type": "ADMIN_READ" } ] }, { "service": "sampleservice.googleapis.com", "audit_log_configs": [ { "log_type": "DATA_READ" }, { "log_type": "DATA_WRITE", "exempted_members": [ "user:aliya@example.com" ] } ] } ] } For sampleservice, this policy enables DATA_READ, DATA_WRITE and ADMIN_READ logging. It also exempts `jose@example.com` from DATA_READ logging, and `aliya@example.com` from DATA_WRITE logging.

func (AuditConfigResponseOutput) AuditLogConfigs

The configuration for logging of each type of permission.

func (AuditConfigResponseOutput) ElementType

func (AuditConfigResponseOutput) ElementType() reflect.Type

func (AuditConfigResponseOutput) Service

Specifies a service that will be enabled for audit logging. For example, `storage.googleapis.com`, `cloudsql.googleapis.com`. `allServices` is a special value that covers all services.

func (AuditConfigResponseOutput) ToAuditConfigResponseOutput

func (o AuditConfigResponseOutput) ToAuditConfigResponseOutput() AuditConfigResponseOutput

func (AuditConfigResponseOutput) ToAuditConfigResponseOutputWithContext

func (o AuditConfigResponseOutput) ToAuditConfigResponseOutputWithContext(ctx context.Context) AuditConfigResponseOutput

type AuditLogConfig

type AuditLogConfig struct {
	// Specifies the identities that do not cause logging for this type of permission. Follows the same format of Binding.members.
	ExemptedMembers []string `pulumi:"exemptedMembers"`
	// The log type that this config enables.
	LogType *AuditLogConfigLogType `pulumi:"logType"`
}

Provides the configuration for logging a type of permissions. Example: { "audit_log_configs": [ { "log_type": "DATA_READ", "exempted_members": [ "user:jose@example.com" ] }, { "log_type": "DATA_WRITE" } ] } This enables 'DATA_READ' and 'DATA_WRITE' logging, while exempting jose@example.com from DATA_READ logging.

type AuditLogConfigArgs

type AuditLogConfigArgs struct {
	// Specifies the identities that do not cause logging for this type of permission. Follows the same format of Binding.members.
	ExemptedMembers pulumi.StringArrayInput `pulumi:"exemptedMembers"`
	// The log type that this config enables.
	LogType AuditLogConfigLogTypePtrInput `pulumi:"logType"`
}

Provides the configuration for logging a type of permissions. Example: { "audit_log_configs": [ { "log_type": "DATA_READ", "exempted_members": [ "user:jose@example.com" ] }, { "log_type": "DATA_WRITE" } ] } This enables 'DATA_READ' and 'DATA_WRITE' logging, while exempting jose@example.com from DATA_READ logging.

func (AuditLogConfigArgs) ElementType

func (AuditLogConfigArgs) ElementType() reflect.Type

func (AuditLogConfigArgs) ToAuditLogConfigOutput

func (i AuditLogConfigArgs) ToAuditLogConfigOutput() AuditLogConfigOutput

func (AuditLogConfigArgs) ToAuditLogConfigOutputWithContext

func (i AuditLogConfigArgs) ToAuditLogConfigOutputWithContext(ctx context.Context) AuditLogConfigOutput

type AuditLogConfigArray

type AuditLogConfigArray []AuditLogConfigInput

func (AuditLogConfigArray) ElementType

func (AuditLogConfigArray) ElementType() reflect.Type

func (AuditLogConfigArray) ToAuditLogConfigArrayOutput

func (i AuditLogConfigArray) ToAuditLogConfigArrayOutput() AuditLogConfigArrayOutput

func (AuditLogConfigArray) ToAuditLogConfigArrayOutputWithContext

func (i AuditLogConfigArray) ToAuditLogConfigArrayOutputWithContext(ctx context.Context) AuditLogConfigArrayOutput

type AuditLogConfigArrayInput

type AuditLogConfigArrayInput interface {
	pulumi.Input

	ToAuditLogConfigArrayOutput() AuditLogConfigArrayOutput
	ToAuditLogConfigArrayOutputWithContext(context.Context) AuditLogConfigArrayOutput
}

AuditLogConfigArrayInput is an input type that accepts AuditLogConfigArray and AuditLogConfigArrayOutput values. You can construct a concrete instance of `AuditLogConfigArrayInput` via:

AuditLogConfigArray{ AuditLogConfigArgs{...} }

type AuditLogConfigArrayOutput

type AuditLogConfigArrayOutput struct{ *pulumi.OutputState }

func (AuditLogConfigArrayOutput) ElementType

func (AuditLogConfigArrayOutput) ElementType() reflect.Type

func (AuditLogConfigArrayOutput) Index

func (AuditLogConfigArrayOutput) ToAuditLogConfigArrayOutput

func (o AuditLogConfigArrayOutput) ToAuditLogConfigArrayOutput() AuditLogConfigArrayOutput

func (AuditLogConfigArrayOutput) ToAuditLogConfigArrayOutputWithContext

func (o AuditLogConfigArrayOutput) ToAuditLogConfigArrayOutputWithContext(ctx context.Context) AuditLogConfigArrayOutput

type AuditLogConfigInput

type AuditLogConfigInput interface {
	pulumi.Input

	ToAuditLogConfigOutput() AuditLogConfigOutput
	ToAuditLogConfigOutputWithContext(context.Context) AuditLogConfigOutput
}

AuditLogConfigInput is an input type that accepts AuditLogConfigArgs and AuditLogConfigOutput values. You can construct a concrete instance of `AuditLogConfigInput` via:

AuditLogConfigArgs{...}

type AuditLogConfigLogType

type AuditLogConfigLogType string

The log type that this config enables.

func (AuditLogConfigLogType) ElementType

func (AuditLogConfigLogType) ElementType() reflect.Type

func (AuditLogConfigLogType) ToAuditLogConfigLogTypeOutput

func (e AuditLogConfigLogType) ToAuditLogConfigLogTypeOutput() AuditLogConfigLogTypeOutput

func (AuditLogConfigLogType) ToAuditLogConfigLogTypeOutputWithContext

func (e AuditLogConfigLogType) ToAuditLogConfigLogTypeOutputWithContext(ctx context.Context) AuditLogConfigLogTypeOutput

func (AuditLogConfigLogType) ToAuditLogConfigLogTypePtrOutput

func (e AuditLogConfigLogType) ToAuditLogConfigLogTypePtrOutput() AuditLogConfigLogTypePtrOutput

func (AuditLogConfigLogType) ToAuditLogConfigLogTypePtrOutputWithContext

func (e AuditLogConfigLogType) ToAuditLogConfigLogTypePtrOutputWithContext(ctx context.Context) AuditLogConfigLogTypePtrOutput

func (AuditLogConfigLogType) ToStringOutput

func (e AuditLogConfigLogType) ToStringOutput() pulumi.StringOutput

func (AuditLogConfigLogType) ToStringOutputWithContext

func (e AuditLogConfigLogType) ToStringOutputWithContext(ctx context.Context) pulumi.StringOutput

func (AuditLogConfigLogType) ToStringPtrOutput

func (e AuditLogConfigLogType) ToStringPtrOutput() pulumi.StringPtrOutput

func (AuditLogConfigLogType) ToStringPtrOutputWithContext

func (e AuditLogConfigLogType) ToStringPtrOutputWithContext(ctx context.Context) pulumi.StringPtrOutput

type AuditLogConfigLogTypeInput

type AuditLogConfigLogTypeInput interface {
	pulumi.Input

	ToAuditLogConfigLogTypeOutput() AuditLogConfigLogTypeOutput
	ToAuditLogConfigLogTypeOutputWithContext(context.Context) AuditLogConfigLogTypeOutput
}

AuditLogConfigLogTypeInput is an input type that accepts AuditLogConfigLogTypeArgs and AuditLogConfigLogTypeOutput values. You can construct a concrete instance of `AuditLogConfigLogTypeInput` via:

AuditLogConfigLogTypeArgs{...}

type AuditLogConfigLogTypeOutput

type AuditLogConfigLogTypeOutput struct{ *pulumi.OutputState }

func (AuditLogConfigLogTypeOutput) ElementType

func (AuditLogConfigLogTypeOutput) ToAuditLogConfigLogTypeOutput

func (o AuditLogConfigLogTypeOutput) ToAuditLogConfigLogTypeOutput() AuditLogConfigLogTypeOutput

func (AuditLogConfigLogTypeOutput) ToAuditLogConfigLogTypeOutputWithContext

func (o AuditLogConfigLogTypeOutput) ToAuditLogConfigLogTypeOutputWithContext(ctx context.Context) AuditLogConfigLogTypeOutput

func (AuditLogConfigLogTypeOutput) ToAuditLogConfigLogTypePtrOutput

func (o AuditLogConfigLogTypeOutput) ToAuditLogConfigLogTypePtrOutput() AuditLogConfigLogTypePtrOutput

func (AuditLogConfigLogTypeOutput) ToAuditLogConfigLogTypePtrOutputWithContext

func (o AuditLogConfigLogTypeOutput) ToAuditLogConfigLogTypePtrOutputWithContext(ctx context.Context) AuditLogConfigLogTypePtrOutput

func (AuditLogConfigLogTypeOutput) ToStringOutput

func (o AuditLogConfigLogTypeOutput) ToStringOutput() pulumi.StringOutput

func (AuditLogConfigLogTypeOutput) ToStringOutputWithContext

func (o AuditLogConfigLogTypeOutput) ToStringOutputWithContext(ctx context.Context) pulumi.StringOutput

func (AuditLogConfigLogTypeOutput) ToStringPtrOutput

func (o AuditLogConfigLogTypeOutput) ToStringPtrOutput() pulumi.StringPtrOutput

func (AuditLogConfigLogTypeOutput) ToStringPtrOutputWithContext

func (o AuditLogConfigLogTypeOutput) ToStringPtrOutputWithContext(ctx context.Context) pulumi.StringPtrOutput

type AuditLogConfigLogTypePtrInput

type AuditLogConfigLogTypePtrInput interface {
	pulumi.Input

	ToAuditLogConfigLogTypePtrOutput() AuditLogConfigLogTypePtrOutput
	ToAuditLogConfigLogTypePtrOutputWithContext(context.Context) AuditLogConfigLogTypePtrOutput
}

func AuditLogConfigLogTypePtr

func AuditLogConfigLogTypePtr(v string) AuditLogConfigLogTypePtrInput

type AuditLogConfigLogTypePtrOutput

type AuditLogConfigLogTypePtrOutput struct{ *pulumi.OutputState }

func (AuditLogConfigLogTypePtrOutput) Elem

func (AuditLogConfigLogTypePtrOutput) ElementType

func (AuditLogConfigLogTypePtrOutput) ToAuditLogConfigLogTypePtrOutput

func (o AuditLogConfigLogTypePtrOutput) ToAuditLogConfigLogTypePtrOutput() AuditLogConfigLogTypePtrOutput

func (AuditLogConfigLogTypePtrOutput) ToAuditLogConfigLogTypePtrOutputWithContext

func (o AuditLogConfigLogTypePtrOutput) ToAuditLogConfigLogTypePtrOutputWithContext(ctx context.Context) AuditLogConfigLogTypePtrOutput

func (AuditLogConfigLogTypePtrOutput) ToStringPtrOutput

func (AuditLogConfigLogTypePtrOutput) ToStringPtrOutputWithContext

func (o AuditLogConfigLogTypePtrOutput) ToStringPtrOutputWithContext(ctx context.Context) pulumi.StringPtrOutput

type AuditLogConfigOutput

type AuditLogConfigOutput struct{ *pulumi.OutputState }

Provides the configuration for logging a type of permissions. Example: { "audit_log_configs": [ { "log_type": "DATA_READ", "exempted_members": [ "user:jose@example.com" ] }, { "log_type": "DATA_WRITE" } ] } This enables 'DATA_READ' and 'DATA_WRITE' logging, while exempting jose@example.com from DATA_READ logging.

func (AuditLogConfigOutput) ElementType

func (AuditLogConfigOutput) ElementType() reflect.Type

func (AuditLogConfigOutput) ExemptedMembers

func (o AuditLogConfigOutput) ExemptedMembers() pulumi.StringArrayOutput

Specifies the identities that do not cause logging for this type of permission. Follows the same format of Binding.members.

func (AuditLogConfigOutput) LogType

The log type that this config enables.

func (AuditLogConfigOutput) ToAuditLogConfigOutput

func (o AuditLogConfigOutput) ToAuditLogConfigOutput() AuditLogConfigOutput

func (AuditLogConfigOutput) ToAuditLogConfigOutputWithContext

func (o AuditLogConfigOutput) ToAuditLogConfigOutputWithContext(ctx context.Context) AuditLogConfigOutput

type AuditLogConfigResponse

type AuditLogConfigResponse struct {
	// Specifies the identities that do not cause logging for this type of permission. Follows the same format of Binding.members.
	ExemptedMembers []string `pulumi:"exemptedMembers"`
	// The log type that this config enables.
	LogType string `pulumi:"logType"`
}

Provides the configuration for logging a type of permissions. Example: { "audit_log_configs": [ { "log_type": "DATA_READ", "exempted_members": [ "user:jose@example.com" ] }, { "log_type": "DATA_WRITE" } ] } This enables 'DATA_READ' and 'DATA_WRITE' logging, while exempting jose@example.com from DATA_READ logging.

type AuditLogConfigResponseArrayOutput

type AuditLogConfigResponseArrayOutput struct{ *pulumi.OutputState }

func (AuditLogConfigResponseArrayOutput) ElementType

func (AuditLogConfigResponseArrayOutput) Index

func (AuditLogConfigResponseArrayOutput) ToAuditLogConfigResponseArrayOutput

func (o AuditLogConfigResponseArrayOutput) ToAuditLogConfigResponseArrayOutput() AuditLogConfigResponseArrayOutput

func (AuditLogConfigResponseArrayOutput) ToAuditLogConfigResponseArrayOutputWithContext

func (o AuditLogConfigResponseArrayOutput) ToAuditLogConfigResponseArrayOutputWithContext(ctx context.Context) AuditLogConfigResponseArrayOutput

type AuditLogConfigResponseOutput

type AuditLogConfigResponseOutput struct{ *pulumi.OutputState }

Provides the configuration for logging a type of permissions. Example: { "audit_log_configs": [ { "log_type": "DATA_READ", "exempted_members": [ "user:jose@example.com" ] }, { "log_type": "DATA_WRITE" } ] } This enables 'DATA_READ' and 'DATA_WRITE' logging, while exempting jose@example.com from DATA_READ logging.

func (AuditLogConfigResponseOutput) ElementType

func (AuditLogConfigResponseOutput) ExemptedMembers

Specifies the identities that do not cause logging for this type of permission. Follows the same format of Binding.members.

func (AuditLogConfigResponseOutput) LogType

The log type that this config enables.

func (AuditLogConfigResponseOutput) ToAuditLogConfigResponseOutput

func (o AuditLogConfigResponseOutput) ToAuditLogConfigResponseOutput() AuditLogConfigResponseOutput

func (AuditLogConfigResponseOutput) ToAuditLogConfigResponseOutputWithContext

func (o AuditLogConfigResponseOutput) ToAuditLogConfigResponseOutputWithContext(ctx context.Context) AuditLogConfigResponseOutput

type Backup

type Backup struct {
	pulumi.CustomResourceState

	// If True, all namespaces were included in the Backup.
	AllNamespaces pulumi.BoolOutput `pulumi:"allNamespaces"`
	// Optional. The client-provided short name for the Backup resource. This name must: - be between 1 and 63 characters long (inclusive) - consist of only lower-case ASCII letters, numbers, and dashes - start with a lower-case letter - end with a lower-case letter or number - be unique within the set of Backups in this BackupPlan
	BackupId     pulumi.StringPtrOutput `pulumi:"backupId"`
	BackupPlanId pulumi.StringOutput    `pulumi:"backupPlanId"`
	// Information about the GKE cluster from which this Backup was created.
	ClusterMetadata ClusterMetadataResponseOutput `pulumi:"clusterMetadata"`
	// Completion time of the Backup
	CompleteTime pulumi.StringOutput `pulumi:"completeTime"`
	// The size of the config backup in bytes.
	ConfigBackupSizeBytes pulumi.StringOutput `pulumi:"configBackupSizeBytes"`
	// Whether or not the Backup contains Kubernetes Secrets. Controlled by the parent BackupPlan's include_secrets value.
	ContainsSecrets pulumi.BoolOutput `pulumi:"containsSecrets"`
	// Whether or not the Backup contains volume data. Controlled by the parent BackupPlan's include_volume_data value.
	ContainsVolumeData pulumi.BoolOutput `pulumi:"containsVolumeData"`
	// The timestamp when this Backup resource was created.
	CreateTime pulumi.StringOutput `pulumi:"createTime"`
	// Optional. Minimum age for this Backup (in days). If this field is set to a non-zero value, the Backup will be "locked" against deletion (either manual or automatic deletion) for the number of days provided (measured from the creation time of the Backup). MUST be an integer value between 0-90 (inclusive). Defaults to parent BackupPlan's backup_delete_lock_days setting and may only be increased (either at creation time or in a subsequent update).
	DeleteLockDays pulumi.IntOutput `pulumi:"deleteLockDays"`
	// The time at which an existing delete lock will expire for this backup (calculated from create_time + delete_lock_days).
	DeleteLockExpireTime pulumi.StringOutput `pulumi:"deleteLockExpireTime"`
	// Optional. User specified descriptive string for this Backup.
	Description pulumi.StringOutput `pulumi:"description"`
	// The customer managed encryption key that was used to encrypt the Backup's artifacts. Inherited from the parent BackupPlan's encryption_key value.
	EncryptionKey EncryptionKeyResponseOutput `pulumi:"encryptionKey"`
	// `etag` is used for optimistic concurrency control as a way to help prevent simultaneous updates of a backup from overwriting each other. It is strongly suggested that systems make use of the `etag` in the read-modify-write cycle to perform backup updates in order to avoid race conditions: An `etag` is returned in the response to `GetBackup`, and systems are expected to put that etag in the request to `UpdateBackup` or `DeleteBackup` to ensure that their change will be applied to the same version of the resource.
	Etag pulumi.StringOutput `pulumi:"etag"`
	// Optional. A set of custom labels supplied by user.
	Labels   pulumi.StringMapOutput `pulumi:"labels"`
	Location pulumi.StringOutput    `pulumi:"location"`
	// This flag indicates whether this Backup resource was created manually by a user or via a schedule in the BackupPlan. A value of True means that the Backup was created manually.
	Manual pulumi.BoolOutput `pulumi:"manual"`
	// The fully qualified name of the Backup. `projects/*/locations/*/backupPlans/*/backups/*`
	Name pulumi.StringOutput `pulumi:"name"`
	// The total number of Kubernetes Pods contained in the Backup.
	PodCount pulumi.IntOutput    `pulumi:"podCount"`
	Project  pulumi.StringOutput `pulumi:"project"`
	// The total number of Kubernetes resources included in the Backup.
	ResourceCount pulumi.IntOutput `pulumi:"resourceCount"`
	// Optional. The age (in days) after which this Backup will be automatically deleted. Must be an integer value >= 0: - If 0, no automatic deletion will occur for this Backup. - If not 0, this must be >= delete_lock_days and <= 365. Once a Backup is created, this value may only be increased. Defaults to the parent BackupPlan's backup_retain_days value.
	RetainDays pulumi.IntOutput `pulumi:"retainDays"`
	// The time at which this Backup will be automatically deleted (calculated from create_time + retain_days).
	RetainExpireTime pulumi.StringOutput `pulumi:"retainExpireTime"`
	// If set, the list of ProtectedApplications whose resources were included in the Backup.
	SelectedApplications NamespacedNamesResponseOutput `pulumi:"selectedApplications"`
	// If set, the list of namespaces that were included in the Backup.
	SelectedNamespaces NamespacesResponseOutput `pulumi:"selectedNamespaces"`
	// The total size of the Backup in bytes = config backup size + sum(volume backup sizes)
	SizeBytes pulumi.StringOutput `pulumi:"sizeBytes"`
	// Current state of the Backup
	State pulumi.StringOutput `pulumi:"state"`
	// Human-readable description of why the backup is in the current `state`.
	StateReason pulumi.StringOutput `pulumi:"stateReason"`
	// Server generated global unique identifier of [UUID4](https://en.wikipedia.org/wiki/Universally_unique_identifier)
	Uid pulumi.StringOutput `pulumi:"uid"`
	// The timestamp when this Backup resource was last updated.
	UpdateTime pulumi.StringOutput `pulumi:"updateTime"`
	// The total number of volume backups contained in the Backup.
	VolumeCount pulumi.IntOutput `pulumi:"volumeCount"`
}

Creates a Backup for the given BackupPlan. Auto-naming is currently not supported for this resource.

func GetBackup

func GetBackup(ctx *pulumi.Context,
	name string, id pulumi.IDInput, state *BackupState, opts ...pulumi.ResourceOption) (*Backup, error)

GetBackup gets an existing Backup resource's state with the given name, ID, and optional state properties that are used to uniquely qualify the lookup (nil if not required).

func NewBackup

func NewBackup(ctx *pulumi.Context,
	name string, args *BackupArgs, opts ...pulumi.ResourceOption) (*Backup, error)

NewBackup registers a new resource with the given unique name, arguments, and options.

func (*Backup) ElementType

func (*Backup) ElementType() reflect.Type

func (*Backup) ToBackupOutput

func (i *Backup) ToBackupOutput() BackupOutput

func (*Backup) ToBackupOutputWithContext

func (i *Backup) ToBackupOutputWithContext(ctx context.Context) BackupOutput

type BackupArgs

type BackupArgs struct {
	// Optional. The client-provided short name for the Backup resource. This name must: - be between 1 and 63 characters long (inclusive) - consist of only lower-case ASCII letters, numbers, and dashes - start with a lower-case letter - end with a lower-case letter or number - be unique within the set of Backups in this BackupPlan
	BackupId     pulumi.StringPtrInput
	BackupPlanId pulumi.StringInput
	// Optional. Minimum age for this Backup (in days). If this field is set to a non-zero value, the Backup will be "locked" against deletion (either manual or automatic deletion) for the number of days provided (measured from the creation time of the Backup). MUST be an integer value between 0-90 (inclusive). Defaults to parent BackupPlan's backup_delete_lock_days setting and may only be increased (either at creation time or in a subsequent update).
	DeleteLockDays pulumi.IntPtrInput
	// Optional. User specified descriptive string for this Backup.
	Description pulumi.StringPtrInput
	// Optional. A set of custom labels supplied by user.
	Labels   pulumi.StringMapInput
	Location pulumi.StringPtrInput
	Project  pulumi.StringPtrInput
	// Optional. The age (in days) after which this Backup will be automatically deleted. Must be an integer value >= 0: - If 0, no automatic deletion will occur for this Backup. - If not 0, this must be >= delete_lock_days and <= 365. Once a Backup is created, this value may only be increased. Defaults to the parent BackupPlan's backup_retain_days value.
	RetainDays pulumi.IntPtrInput
}

The set of arguments for constructing a Backup resource.

func (BackupArgs) ElementType

func (BackupArgs) ElementType() reflect.Type

type BackupConfig

type BackupConfig struct {
	// If True, include all namespaced resources
	AllNamespaces *bool `pulumi:"allNamespaces"`
	// Optional. This defines a customer managed encryption key that will be used to encrypt the "config" portion (the Kubernetes resources) of Backups created via this plan. Default (empty): Config backup artifacts will not be encrypted.
	EncryptionKey *EncryptionKey `pulumi:"encryptionKey"`
	// Optional. This flag specifies whether Kubernetes Secret resources should be included when they fall into the scope of Backups. Default: False
	IncludeSecrets *bool `pulumi:"includeSecrets"`
	// Optional. This flag specifies whether volume data should be backed up when PVCs are included in the scope of a Backup. Default: False
	IncludeVolumeData *bool `pulumi:"includeVolumeData"`
	// If set, include just the resources referenced by the listed ProtectedApplications.
	SelectedApplications *NamespacedNames `pulumi:"selectedApplications"`
	// If set, include just the resources in the listed namespaces.
	SelectedNamespaces *Namespaces `pulumi:"selectedNamespaces"`
}

BackupConfig defines the configuration of Backups created via this BackupPlan.

type BackupConfigArgs

type BackupConfigArgs struct {
	// If True, include all namespaced resources
	AllNamespaces pulumi.BoolPtrInput `pulumi:"allNamespaces"`
	// Optional. This defines a customer managed encryption key that will be used to encrypt the "config" portion (the Kubernetes resources) of Backups created via this plan. Default (empty): Config backup artifacts will not be encrypted.
	EncryptionKey EncryptionKeyPtrInput `pulumi:"encryptionKey"`
	// Optional. This flag specifies whether Kubernetes Secret resources should be included when they fall into the scope of Backups. Default: False
	IncludeSecrets pulumi.BoolPtrInput `pulumi:"includeSecrets"`
	// Optional. This flag specifies whether volume data should be backed up when PVCs are included in the scope of a Backup. Default: False
	IncludeVolumeData pulumi.BoolPtrInput `pulumi:"includeVolumeData"`
	// If set, include just the resources referenced by the listed ProtectedApplications.
	SelectedApplications NamespacedNamesPtrInput `pulumi:"selectedApplications"`
	// If set, include just the resources in the listed namespaces.
	SelectedNamespaces NamespacesPtrInput `pulumi:"selectedNamespaces"`
}

BackupConfig defines the configuration of Backups created via this BackupPlan.

func (BackupConfigArgs) ElementType

func (BackupConfigArgs) ElementType() reflect.Type

func (BackupConfigArgs) ToBackupConfigOutput

func (i BackupConfigArgs) ToBackupConfigOutput() BackupConfigOutput

func (BackupConfigArgs) ToBackupConfigOutputWithContext

func (i BackupConfigArgs) ToBackupConfigOutputWithContext(ctx context.Context) BackupConfigOutput

func (BackupConfigArgs) ToBackupConfigPtrOutput

func (i BackupConfigArgs) ToBackupConfigPtrOutput() BackupConfigPtrOutput

func (BackupConfigArgs) ToBackupConfigPtrOutputWithContext

func (i BackupConfigArgs) ToBackupConfigPtrOutputWithContext(ctx context.Context) BackupConfigPtrOutput

type BackupConfigInput

type BackupConfigInput interface {
	pulumi.Input

	ToBackupConfigOutput() BackupConfigOutput
	ToBackupConfigOutputWithContext(context.Context) BackupConfigOutput
}

BackupConfigInput is an input type that accepts BackupConfigArgs and BackupConfigOutput values. You can construct a concrete instance of `BackupConfigInput` via:

BackupConfigArgs{...}

type BackupConfigOutput

type BackupConfigOutput struct{ *pulumi.OutputState }

BackupConfig defines the configuration of Backups created via this BackupPlan.

func (BackupConfigOutput) AllNamespaces

func (o BackupConfigOutput) AllNamespaces() pulumi.BoolPtrOutput

If True, include all namespaced resources

func (BackupConfigOutput) ElementType

func (BackupConfigOutput) ElementType() reflect.Type

func (BackupConfigOutput) EncryptionKey

func (o BackupConfigOutput) EncryptionKey() EncryptionKeyPtrOutput

Optional. This defines a customer managed encryption key that will be used to encrypt the "config" portion (the Kubernetes resources) of Backups created via this plan. Default (empty): Config backup artifacts will not be encrypted.

func (BackupConfigOutput) IncludeSecrets

func (o BackupConfigOutput) IncludeSecrets() pulumi.BoolPtrOutput

Optional. This flag specifies whether Kubernetes Secret resources should be included when they fall into the scope of Backups. Default: False

func (BackupConfigOutput) IncludeVolumeData

func (o BackupConfigOutput) IncludeVolumeData() pulumi.BoolPtrOutput

Optional. This flag specifies whether volume data should be backed up when PVCs are included in the scope of a Backup. Default: False

func (BackupConfigOutput) SelectedApplications

func (o BackupConfigOutput) SelectedApplications() NamespacedNamesPtrOutput

If set, include just the resources referenced by the listed ProtectedApplications.

func (BackupConfigOutput) SelectedNamespaces

func (o BackupConfigOutput) SelectedNamespaces() NamespacesPtrOutput

If set, include just the resources in the listed namespaces.

func (BackupConfigOutput) ToBackupConfigOutput

func (o BackupConfigOutput) ToBackupConfigOutput() BackupConfigOutput

func (BackupConfigOutput) ToBackupConfigOutputWithContext

func (o BackupConfigOutput) ToBackupConfigOutputWithContext(ctx context.Context) BackupConfigOutput

func (BackupConfigOutput) ToBackupConfigPtrOutput

func (o BackupConfigOutput) ToBackupConfigPtrOutput() BackupConfigPtrOutput

func (BackupConfigOutput) ToBackupConfigPtrOutputWithContext

func (o BackupConfigOutput) ToBackupConfigPtrOutputWithContext(ctx context.Context) BackupConfigPtrOutput

type BackupConfigPtrInput

type BackupConfigPtrInput interface {
	pulumi.Input

	ToBackupConfigPtrOutput() BackupConfigPtrOutput
	ToBackupConfigPtrOutputWithContext(context.Context) BackupConfigPtrOutput
}

BackupConfigPtrInput is an input type that accepts BackupConfigArgs, BackupConfigPtr and BackupConfigPtrOutput values. You can construct a concrete instance of `BackupConfigPtrInput` via:

        BackupConfigArgs{...}

or:

        nil

type BackupConfigPtrOutput

type BackupConfigPtrOutput struct{ *pulumi.OutputState }

func (BackupConfigPtrOutput) AllNamespaces

func (o BackupConfigPtrOutput) AllNamespaces() pulumi.BoolPtrOutput

If True, include all namespaced resources

func (BackupConfigPtrOutput) Elem

func (BackupConfigPtrOutput) ElementType

func (BackupConfigPtrOutput) ElementType() reflect.Type

func (BackupConfigPtrOutput) EncryptionKey

Optional. This defines a customer managed encryption key that will be used to encrypt the "config" portion (the Kubernetes resources) of Backups created via this plan. Default (empty): Config backup artifacts will not be encrypted.

func (BackupConfigPtrOutput) IncludeSecrets

func (o BackupConfigPtrOutput) IncludeSecrets() pulumi.BoolPtrOutput

Optional. This flag specifies whether Kubernetes Secret resources should be included when they fall into the scope of Backups. Default: False

func (BackupConfigPtrOutput) IncludeVolumeData

func (o BackupConfigPtrOutput) IncludeVolumeData() pulumi.BoolPtrOutput

Optional. This flag specifies whether volume data should be backed up when PVCs are included in the scope of a Backup. Default: False

func (BackupConfigPtrOutput) SelectedApplications

func (o BackupConfigPtrOutput) SelectedApplications() NamespacedNamesPtrOutput

If set, include just the resources referenced by the listed ProtectedApplications.

func (BackupConfigPtrOutput) SelectedNamespaces

func (o BackupConfigPtrOutput) SelectedNamespaces() NamespacesPtrOutput

If set, include just the resources in the listed namespaces.

func (BackupConfigPtrOutput) ToBackupConfigPtrOutput

func (o BackupConfigPtrOutput) ToBackupConfigPtrOutput() BackupConfigPtrOutput

func (BackupConfigPtrOutput) ToBackupConfigPtrOutputWithContext

func (o BackupConfigPtrOutput) ToBackupConfigPtrOutputWithContext(ctx context.Context) BackupConfigPtrOutput

type BackupConfigResponse

type BackupConfigResponse struct {
	// If True, include all namespaced resources
	AllNamespaces bool `pulumi:"allNamespaces"`
	// Optional. This defines a customer managed encryption key that will be used to encrypt the "config" portion (the Kubernetes resources) of Backups created via this plan. Default (empty): Config backup artifacts will not be encrypted.
	EncryptionKey EncryptionKeyResponse `pulumi:"encryptionKey"`
	// Optional. This flag specifies whether Kubernetes Secret resources should be included when they fall into the scope of Backups. Default: False
	IncludeSecrets bool `pulumi:"includeSecrets"`
	// Optional. This flag specifies whether volume data should be backed up when PVCs are included in the scope of a Backup. Default: False
	IncludeVolumeData bool `pulumi:"includeVolumeData"`
	// If set, include just the resources referenced by the listed ProtectedApplications.
	SelectedApplications NamespacedNamesResponse `pulumi:"selectedApplications"`
	// If set, include just the resources in the listed namespaces.
	SelectedNamespaces NamespacesResponse `pulumi:"selectedNamespaces"`
}

BackupConfig defines the configuration of Backups created via this BackupPlan.

type BackupConfigResponseOutput

type BackupConfigResponseOutput struct{ *pulumi.OutputState }

BackupConfig defines the configuration of Backups created via this BackupPlan.

func (BackupConfigResponseOutput) AllNamespaces

func (o BackupConfigResponseOutput) AllNamespaces() pulumi.BoolOutput

If True, include all namespaced resources

func (BackupConfigResponseOutput) ElementType

func (BackupConfigResponseOutput) ElementType() reflect.Type

func (BackupConfigResponseOutput) EncryptionKey

Optional. This defines a customer managed encryption key that will be used to encrypt the "config" portion (the Kubernetes resources) of Backups created via this plan. Default (empty): Config backup artifacts will not be encrypted.

func (BackupConfigResponseOutput) IncludeSecrets

func (o BackupConfigResponseOutput) IncludeSecrets() pulumi.BoolOutput

Optional. This flag specifies whether Kubernetes Secret resources should be included when they fall into the scope of Backups. Default: False

func (BackupConfigResponseOutput) IncludeVolumeData

func (o BackupConfigResponseOutput) IncludeVolumeData() pulumi.BoolOutput

Optional. This flag specifies whether volume data should be backed up when PVCs are included in the scope of a Backup. Default: False

func (BackupConfigResponseOutput) SelectedApplications

If set, include just the resources referenced by the listed ProtectedApplications.

func (BackupConfigResponseOutput) SelectedNamespaces

If set, include just the resources in the listed namespaces.

func (BackupConfigResponseOutput) ToBackupConfigResponseOutput

func (o BackupConfigResponseOutput) ToBackupConfigResponseOutput() BackupConfigResponseOutput

func (BackupConfigResponseOutput) ToBackupConfigResponseOutputWithContext

func (o BackupConfigResponseOutput) ToBackupConfigResponseOutputWithContext(ctx context.Context) BackupConfigResponseOutput

type BackupInput

type BackupInput interface {
	pulumi.Input

	ToBackupOutput() BackupOutput
	ToBackupOutputWithContext(ctx context.Context) BackupOutput
}

type BackupOutput

type BackupOutput struct{ *pulumi.OutputState }

func (BackupOutput) AllNamespaces added in v0.19.0

func (o BackupOutput) AllNamespaces() pulumi.BoolOutput

If True, all namespaces were included in the Backup.

func (BackupOutput) BackupId added in v0.21.0

func (o BackupOutput) BackupId() pulumi.StringPtrOutput

Optional. The client-provided short name for the Backup resource. This name must: - be between 1 and 63 characters long (inclusive) - consist of only lower-case ASCII letters, numbers, and dashes - start with a lower-case letter - end with a lower-case letter or number - be unique within the set of Backups in this BackupPlan

func (BackupOutput) BackupPlanId added in v0.21.0

func (o BackupOutput) BackupPlanId() pulumi.StringOutput

func (BackupOutput) ClusterMetadata added in v0.19.0

func (o BackupOutput) ClusterMetadata() ClusterMetadataResponseOutput

Information about the GKE cluster from which this Backup was created.

func (BackupOutput) CompleteTime added in v0.19.0

func (o BackupOutput) CompleteTime() pulumi.StringOutput

Completion time of the Backup

func (BackupOutput) ConfigBackupSizeBytes added in v0.19.0

func (o BackupOutput) ConfigBackupSizeBytes() pulumi.StringOutput

The size of the config backup in bytes.

func (BackupOutput) ContainsSecrets added in v0.19.0

func (o BackupOutput) ContainsSecrets() pulumi.BoolOutput

Whether or not the Backup contains Kubernetes Secrets. Controlled by the parent BackupPlan's include_secrets value.

func (BackupOutput) ContainsVolumeData added in v0.19.0

func (o BackupOutput) ContainsVolumeData() pulumi.BoolOutput

Whether or not the Backup contains volume data. Controlled by the parent BackupPlan's include_volume_data value.

func (BackupOutput) CreateTime added in v0.19.0

func (o BackupOutput) CreateTime() pulumi.StringOutput

The timestamp when this Backup resource was created.

func (BackupOutput) DeleteLockDays added in v0.19.0

func (o BackupOutput) DeleteLockDays() pulumi.IntOutput

Optional. Minimum age for this Backup (in days). If this field is set to a non-zero value, the Backup will be "locked" against deletion (either manual or automatic deletion) for the number of days provided (measured from the creation time of the Backup). MUST be an integer value between 0-90 (inclusive). Defaults to parent BackupPlan's backup_delete_lock_days setting and may only be increased (either at creation time or in a subsequent update).

func (BackupOutput) DeleteLockExpireTime added in v0.19.0

func (o BackupOutput) DeleteLockExpireTime() pulumi.StringOutput

The time at which an existing delete lock will expire for this backup (calculated from create_time + delete_lock_days).

func (BackupOutput) Description added in v0.19.0

func (o BackupOutput) Description() pulumi.StringOutput

Optional. User specified descriptive string for this Backup.

func (BackupOutput) ElementType

func (BackupOutput) ElementType() reflect.Type

func (BackupOutput) EncryptionKey added in v0.19.0

func (o BackupOutput) EncryptionKey() EncryptionKeyResponseOutput

The customer managed encryption key that was used to encrypt the Backup's artifacts. Inherited from the parent BackupPlan's encryption_key value.

func (BackupOutput) Etag added in v0.19.0

func (o BackupOutput) Etag() pulumi.StringOutput

`etag` is used for optimistic concurrency control as a way to help prevent simultaneous updates of a backup from overwriting each other. It is strongly suggested that systems make use of the `etag` in the read-modify-write cycle to perform backup updates in order to avoid race conditions: An `etag` is returned in the response to `GetBackup`, and systems are expected to put that etag in the request to `UpdateBackup` or `DeleteBackup` to ensure that their change will be applied to the same version of the resource.

func (BackupOutput) Labels added in v0.19.0

func (o BackupOutput) Labels() pulumi.StringMapOutput

Optional. A set of custom labels supplied by user.

func (BackupOutput) Location added in v0.21.0

func (o BackupOutput) Location() pulumi.StringOutput

func (BackupOutput) Manual added in v0.19.0

func (o BackupOutput) Manual() pulumi.BoolOutput

This flag indicates whether this Backup resource was created manually by a user or via a schedule in the BackupPlan. A value of True means that the Backup was created manually.

func (BackupOutput) Name added in v0.19.0

func (o BackupOutput) Name() pulumi.StringOutput

The fully qualified name of the Backup. `projects/*/locations/*/backupPlans/*/backups/*`

func (BackupOutput) PodCount added in v0.19.0

func (o BackupOutput) PodCount() pulumi.IntOutput

The total number of Kubernetes Pods contained in the Backup.

func (BackupOutput) Project added in v0.21.0

func (o BackupOutput) Project() pulumi.StringOutput

func (BackupOutput) ResourceCount added in v0.19.0

func (o BackupOutput) ResourceCount() pulumi.IntOutput

The total number of Kubernetes resources included in the Backup.

func (BackupOutput) RetainDays added in v0.19.0

func (o BackupOutput) RetainDays() pulumi.IntOutput

Optional. The age (in days) after which this Backup will be automatically deleted. Must be an integer value >= 0: - If 0, no automatic deletion will occur for this Backup. - If not 0, this must be >= delete_lock_days and <= 365. Once a Backup is created, this value may only be increased. Defaults to the parent BackupPlan's backup_retain_days value.

func (BackupOutput) RetainExpireTime added in v0.19.0

func (o BackupOutput) RetainExpireTime() pulumi.StringOutput

The time at which this Backup will be automatically deleted (calculated from create_time + retain_days).

func (BackupOutput) SelectedApplications added in v0.19.0

func (o BackupOutput) SelectedApplications() NamespacedNamesResponseOutput

If set, the list of ProtectedApplications whose resources were included in the Backup.

func (BackupOutput) SelectedNamespaces added in v0.19.0

func (o BackupOutput) SelectedNamespaces() NamespacesResponseOutput

If set, the list of namespaces that were included in the Backup.

func (BackupOutput) SizeBytes added in v0.19.0

func (o BackupOutput) SizeBytes() pulumi.StringOutput

The total size of the Backup in bytes = config backup size + sum(volume backup sizes)

func (BackupOutput) State added in v0.19.0

func (o BackupOutput) State() pulumi.StringOutput

Current state of the Backup

func (BackupOutput) StateReason added in v0.19.0

func (o BackupOutput) StateReason() pulumi.StringOutput

Human-readable description of why the backup is in the current `state`.

func (BackupOutput) ToBackupOutput

func (o BackupOutput) ToBackupOutput() BackupOutput

func (BackupOutput) ToBackupOutputWithContext

func (o BackupOutput) ToBackupOutputWithContext(ctx context.Context) BackupOutput

func (BackupOutput) Uid added in v0.19.0

Server generated global unique identifier of [UUID4](https://en.wikipedia.org/wiki/Universally_unique_identifier)

func (BackupOutput) UpdateTime added in v0.19.0

func (o BackupOutput) UpdateTime() pulumi.StringOutput

The timestamp when this Backup resource was last updated.

func (BackupOutput) VolumeCount added in v0.19.0

func (o BackupOutput) VolumeCount() pulumi.IntOutput

The total number of volume backups contained in the Backup.

type BackupPlan

type BackupPlan struct {
	pulumi.CustomResourceState

	// Optional. Defines the configuration of Backups created via this BackupPlan.
	BackupConfig BackupConfigResponseOutput `pulumi:"backupConfig"`
	// Required. The client-provided short name for the BackupPlan resource. This name must: - be between 1 and 63 characters long (inclusive) - consist of only lower-case ASCII letters, numbers, and dashes - start with a lower-case letter - end with a lower-case letter or number - be unique within the set of BackupPlans in this location
	BackupPlanId pulumi.StringOutput `pulumi:"backupPlanId"`
	// Optional. Defines a schedule for automatic Backup creation via this BackupPlan.
	BackupSchedule ScheduleResponseOutput `pulumi:"backupSchedule"`
	// Immutable. The source cluster from which Backups will be created via this BackupPlan. Valid formats: - `projects/*/locations/*/clusters/*` - `projects/*/zones/*/clusters/*`
	Cluster pulumi.StringOutput `pulumi:"cluster"`
	// The timestamp when this BackupPlan resource was created.
	CreateTime pulumi.StringOutput `pulumi:"createTime"`
	// Optional. This flag indicates whether this BackupPlan has been deactivated. Setting this field to True locks the BackupPlan such that no further updates will be allowed (except deletes), including the deactivated field itself. It also prevents any new Backups from being created via this BackupPlan (including scheduled Backups). Default: False
	Deactivated pulumi.BoolOutput `pulumi:"deactivated"`
	// Optional. User specified descriptive string for this BackupPlan.
	Description pulumi.StringOutput `pulumi:"description"`
	// `etag` is used for optimistic concurrency control as a way to help prevent simultaneous updates of a backup plan from overwriting each other. It is strongly suggested that systems make use of the 'etag' in the read-modify-write cycle to perform BackupPlan updates in order to avoid race conditions: An `etag` is returned in the response to `GetBackupPlan`, and systems are expected to put that etag in the request to `UpdateBackupPlan` or `DeleteBackupPlan` to ensure that their change will be applied to the same version of the resource.
	Etag pulumi.StringOutput `pulumi:"etag"`
	// Optional. A set of custom labels supplied by user.
	Labels   pulumi.StringMapOutput `pulumi:"labels"`
	Location pulumi.StringOutput    `pulumi:"location"`
	// The full name of the BackupPlan resource. Format: `projects/*/locations/*/backupPlans/*`
	Name    pulumi.StringOutput `pulumi:"name"`
	Project pulumi.StringOutput `pulumi:"project"`
	// The number of Kubernetes Pods backed up in the last successful Backup created via this BackupPlan.
	ProtectedPodCount pulumi.IntOutput `pulumi:"protectedPodCount"`
	// Optional. RetentionPolicy governs lifecycle of Backups created under this plan.
	RetentionPolicy RetentionPolicyResponseOutput `pulumi:"retentionPolicy"`
	// State of the BackupPlan. This State field reflects the various stages a BackupPlan can be in during the Create operation. It will be set to "DEACTIVATED" if the BackupPlan is deactivated on an Update
	State pulumi.StringOutput `pulumi:"state"`
	// Human-readable description of why BackupPlan is in the current `state`
	StateReason pulumi.StringOutput `pulumi:"stateReason"`
	// Server generated global unique identifier of [UUID](https://en.wikipedia.org/wiki/Universally_unique_identifier) format.
	Uid pulumi.StringOutput `pulumi:"uid"`
	// The timestamp when this BackupPlan resource was last updated.
	UpdateTime pulumi.StringOutput `pulumi:"updateTime"`
}

Creates a new BackupPlan in a given location. Auto-naming is currently not supported for this resource.

func GetBackupPlan

func GetBackupPlan(ctx *pulumi.Context,
	name string, id pulumi.IDInput, state *BackupPlanState, opts ...pulumi.ResourceOption) (*BackupPlan, error)

GetBackupPlan gets an existing BackupPlan resource's state with the given name, ID, and optional state properties that are used to uniquely qualify the lookup (nil if not required).

func NewBackupPlan

func NewBackupPlan(ctx *pulumi.Context,
	name string, args *BackupPlanArgs, opts ...pulumi.ResourceOption) (*BackupPlan, error)

NewBackupPlan registers a new resource with the given unique name, arguments, and options.

func (*BackupPlan) ElementType

func (*BackupPlan) ElementType() reflect.Type

func (*BackupPlan) ToBackupPlanOutput

func (i *BackupPlan) ToBackupPlanOutput() BackupPlanOutput

func (*BackupPlan) ToBackupPlanOutputWithContext

func (i *BackupPlan) ToBackupPlanOutputWithContext(ctx context.Context) BackupPlanOutput

type BackupPlanArgs

type BackupPlanArgs struct {
	// Optional. Defines the configuration of Backups created via this BackupPlan.
	BackupConfig BackupConfigPtrInput
	// Required. The client-provided short name for the BackupPlan resource. This name must: - be between 1 and 63 characters long (inclusive) - consist of only lower-case ASCII letters, numbers, and dashes - start with a lower-case letter - end with a lower-case letter or number - be unique within the set of BackupPlans in this location
	BackupPlanId pulumi.StringInput
	// Optional. Defines a schedule for automatic Backup creation via this BackupPlan.
	BackupSchedule SchedulePtrInput
	// Immutable. The source cluster from which Backups will be created via this BackupPlan. Valid formats: - `projects/*/locations/*/clusters/*` - `projects/*/zones/*/clusters/*`
	Cluster pulumi.StringInput
	// Optional. This flag indicates whether this BackupPlan has been deactivated. Setting this field to True locks the BackupPlan such that no further updates will be allowed (except deletes), including the deactivated field itself. It also prevents any new Backups from being created via this BackupPlan (including scheduled Backups). Default: False
	Deactivated pulumi.BoolPtrInput
	// Optional. User specified descriptive string for this BackupPlan.
	Description pulumi.StringPtrInput
	// Optional. A set of custom labels supplied by user.
	Labels   pulumi.StringMapInput
	Location pulumi.StringPtrInput
	Project  pulumi.StringPtrInput
	// Optional. RetentionPolicy governs lifecycle of Backups created under this plan.
	RetentionPolicy RetentionPolicyPtrInput
}

The set of arguments for constructing a BackupPlan resource.

func (BackupPlanArgs) ElementType

func (BackupPlanArgs) ElementType() reflect.Type

type BackupPlanBackupIamBinding added in v0.26.0

type BackupPlanBackupIamBinding struct {
	pulumi.CustomResourceState

	// An IAM Condition for a given binding. See https://cloud.google.com/iam/docs/conditions-overview for additional details.
	Condition iam.ConditionPtrOutput `pulumi:"condition"`
	// The etag of the resource's IAM policy.
	Etag pulumi.StringOutput `pulumi:"etag"`
	// Specifies the principals requesting access for a Google Cloud resource. `members` can have the following values: * `allUsers`: A special identifier that represents anyone who is on the internet; with or without a Google account. * `allAuthenticatedUsers`: A special identifier that represents anyone who is authenticated with a Google account or a service account. Does not include identities that come from external identity providers (IdPs) through identity federation. * `user:{emailid}`: An email address that represents a specific Google account. For example, `alice@example.com` . * `serviceAccount:{emailid}`: An email address that represents a Google service account. For example, `my-other-app@appspot.gserviceaccount.com`. * `serviceAccount:{projectid}.svc.id.goog[{namespace}/{kubernetes-sa}]`: An identifier for a [Kubernetes service account](https://cloud.google.com/kubernetes-engine/docs/how-to/kubernetes-service-accounts). For example, `my-project.svc.id.goog[my-namespace/my-kubernetes-sa]`. * `group:{emailid}`: An email address that represents a Google group. For example, `admins@example.com`. * `domain:{domain}`: The G Suite domain (primary) that represents all the users of that domain. For example, `google.com` or `example.com`. * `deleted:user:{emailid}?uid={uniqueid}`: An email address (plus unique identifier) representing a user that has been recently deleted. For example, `alice@example.com?uid=123456789012345678901`. If the user is recovered, this value reverts to `user:{emailid}` and the recovered user retains the role in the binding. * `deleted:serviceAccount:{emailid}?uid={uniqueid}`: An email address (plus unique identifier) representing a service account that has been recently deleted. For example, `my-other-app@appspot.gserviceaccount.com?uid=123456789012345678901`. If the service account is undeleted, this value reverts to `serviceAccount:{emailid}` and the undeleted service account retains the role in the binding. * `deleted:group:{emailid}?uid={uniqueid}`: An email address (plus unique identifier) representing a Google group that has been recently deleted. For example, `admins@example.com?uid=123456789012345678901`. If the group is recovered, this value reverts to `group:{emailid}` and the recovered group retains the role in the binding.
	Members pulumi.StringArrayOutput `pulumi:"members"`
	// The name of the resource to manage IAM policies for.
	Name pulumi.StringOutput `pulumi:"name"`
	// The project in which the resource belongs. If it is not provided, a default will be supplied.
	Project pulumi.StringOutput `pulumi:"project"`
	// Role that is assigned to the list of `members`, or principals. For example, `roles/viewer`, `roles/editor`, or `roles/owner`.
	Role pulumi.StringOutput `pulumi:"role"`
}

Sets the access control policy on the specified resource. Replaces any existing policy. Can return `NOT_FOUND`, `INVALID_ARGUMENT`, and `PERMISSION_DENIED` errors.

func GetBackupPlanBackupIamBinding added in v0.26.0

func GetBackupPlanBackupIamBinding(ctx *pulumi.Context,
	name string, id pulumi.IDInput, state *BackupPlanBackupIamBindingState, opts ...pulumi.ResourceOption) (*BackupPlanBackupIamBinding, error)

GetBackupPlanBackupIamBinding gets an existing BackupPlanBackupIamBinding resource's state with the given name, ID, and optional state properties that are used to uniquely qualify the lookup (nil if not required).

func NewBackupPlanBackupIamBinding added in v0.26.0

func NewBackupPlanBackupIamBinding(ctx *pulumi.Context,
	name string, args *BackupPlanBackupIamBindingArgs, opts ...pulumi.ResourceOption) (*BackupPlanBackupIamBinding, error)

NewBackupPlanBackupIamBinding registers a new resource with the given unique name, arguments, and options.

func (*BackupPlanBackupIamBinding) ElementType added in v0.26.0

func (*BackupPlanBackupIamBinding) ElementType() reflect.Type

func (*BackupPlanBackupIamBinding) ToBackupPlanBackupIamBindingOutput added in v0.26.0

func (i *BackupPlanBackupIamBinding) ToBackupPlanBackupIamBindingOutput() BackupPlanBackupIamBindingOutput

func (*BackupPlanBackupIamBinding) ToBackupPlanBackupIamBindingOutputWithContext added in v0.26.0

func (i *BackupPlanBackupIamBinding) ToBackupPlanBackupIamBindingOutputWithContext(ctx context.Context) BackupPlanBackupIamBindingOutput

type BackupPlanBackupIamBindingArgs added in v0.26.0

type BackupPlanBackupIamBindingArgs struct {
	// An IAM Condition for a given binding.
	Condition iam.ConditionPtrInput
	// Identities that will be granted the privilege in role. Each entry can have one of the following values:
	//
	//  * user:{emailid}: An email address that represents a specific Google account. For example, alice@gmail.com or joe@example.com.
	//  * serviceAccount:{emailid}: An email address that represents a service account. For example, my-other-app@appspot.gserviceaccount.com.
	//  * group:{emailid}: An email address that represents a Google group. For example, admins@example.com.
	//  * domain:{domain}: A G Suite domain (primary, instead of alias) name that represents all the users of that domain. For example, google.com or example.com.
	Members pulumi.StringArrayInput
	// The name of the resource to manage IAM policies for.
	Name pulumi.StringInput
	// The role that should be applied. Only one `IamBinding` can be used per role.
	Role pulumi.StringInput
}

The set of arguments for constructing a BackupPlanBackupIamBinding resource.

func (BackupPlanBackupIamBindingArgs) ElementType added in v0.26.0

type BackupPlanBackupIamBindingInput added in v0.26.0

type BackupPlanBackupIamBindingInput interface {
	pulumi.Input

	ToBackupPlanBackupIamBindingOutput() BackupPlanBackupIamBindingOutput
	ToBackupPlanBackupIamBindingOutputWithContext(ctx context.Context) BackupPlanBackupIamBindingOutput
}

type BackupPlanBackupIamBindingOutput added in v0.26.0

type BackupPlanBackupIamBindingOutput struct{ *pulumi.OutputState }

func (BackupPlanBackupIamBindingOutput) Condition added in v0.26.0

An IAM Condition for a given binding. See https://cloud.google.com/iam/docs/conditions-overview for additional details.

func (BackupPlanBackupIamBindingOutput) ElementType added in v0.26.0

func (BackupPlanBackupIamBindingOutput) Etag added in v0.26.0

The etag of the resource's IAM policy.

func (BackupPlanBackupIamBindingOutput) Members added in v0.26.0

Specifies the principals requesting access for a Google Cloud resource. `members` can have the following values: * `allUsers`: A special identifier that represents anyone who is on the internet; with or without a Google account. * `allAuthenticatedUsers`: A special identifier that represents anyone who is authenticated with a Google account or a service account. Does not include identities that come from external identity providers (IdPs) through identity federation. * `user:{emailid}`: An email address that represents a specific Google account. For example, `alice@example.com` . * `serviceAccount:{emailid}`: An email address that represents a Google service account. For example, `my-other-app@appspot.gserviceaccount.com`. * `serviceAccount:{projectid}.svc.id.goog[{namespace}/{kubernetes-sa}]`: An identifier for a [Kubernetes service account](https://cloud.google.com/kubernetes-engine/docs/how-to/kubernetes-service-accounts). For example, `my-project.svc.id.goog[my-namespace/my-kubernetes-sa]`. * `group:{emailid}`: An email address that represents a Google group. For example, `admins@example.com`. * `domain:{domain}`: The G Suite domain (primary) that represents all the users of that domain. For example, `google.com` or `example.com`. * `deleted:user:{emailid}?uid={uniqueid}`: An email address (plus unique identifier) representing a user that has been recently deleted. For example, `alice@example.com?uid=123456789012345678901`. If the user is recovered, this value reverts to `user:{emailid}` and the recovered user retains the role in the binding. * `deleted:serviceAccount:{emailid}?uid={uniqueid}`: An email address (plus unique identifier) representing a service account that has been recently deleted. For example, `my-other-app@appspot.gserviceaccount.com?uid=123456789012345678901`. If the service account is undeleted, this value reverts to `serviceAccount:{emailid}` and the undeleted service account retains the role in the binding. * `deleted:group:{emailid}?uid={uniqueid}`: An email address (plus unique identifier) representing a Google group that has been recently deleted. For example, `admins@example.com?uid=123456789012345678901`. If the group is recovered, this value reverts to `group:{emailid}` and the recovered group retains the role in the binding.

func (BackupPlanBackupIamBindingOutput) Name added in v0.26.0

The name of the resource to manage IAM policies for.

func (BackupPlanBackupIamBindingOutput) Project added in v0.26.0

The project in which the resource belongs. If it is not provided, a default will be supplied.

func (BackupPlanBackupIamBindingOutput) Role added in v0.26.0

Role that is assigned to the list of `members`, or principals. For example, `roles/viewer`, `roles/editor`, or `roles/owner`.

func (BackupPlanBackupIamBindingOutput) ToBackupPlanBackupIamBindingOutput added in v0.26.0

func (o BackupPlanBackupIamBindingOutput) ToBackupPlanBackupIamBindingOutput() BackupPlanBackupIamBindingOutput

func (BackupPlanBackupIamBindingOutput) ToBackupPlanBackupIamBindingOutputWithContext added in v0.26.0

func (o BackupPlanBackupIamBindingOutput) ToBackupPlanBackupIamBindingOutputWithContext(ctx context.Context) BackupPlanBackupIamBindingOutput

type BackupPlanBackupIamBindingState added in v0.26.0

type BackupPlanBackupIamBindingState struct {
}

func (BackupPlanBackupIamBindingState) ElementType added in v0.26.0

type BackupPlanBackupIamMember added in v0.26.0

type BackupPlanBackupIamMember struct {
	pulumi.CustomResourceState

	// An IAM Condition for a given binding. See https://cloud.google.com/iam/docs/conditions-overview for additional details.
	Condition iam.ConditionPtrOutput `pulumi:"condition"`
	// The etag of the resource's IAM policy.
	Etag pulumi.StringOutput `pulumi:"etag"`
	// Specifies the principals requesting access for a Google Cloud resource. `members` can have the following values: * `allUsers`: A special identifier that represents anyone who is on the internet; with or without a Google account. * `allAuthenticatedUsers`: A special identifier that represents anyone who is authenticated with a Google account or a service account. Does not include identities that come from external identity providers (IdPs) through identity federation. * `user:{emailid}`: An email address that represents a specific Google account. For example, `alice@example.com` . * `serviceAccount:{emailid}`: An email address that represents a Google service account. For example, `my-other-app@appspot.gserviceaccount.com`. * `serviceAccount:{projectid}.svc.id.goog[{namespace}/{kubernetes-sa}]`: An identifier for a [Kubernetes service account](https://cloud.google.com/kubernetes-engine/docs/how-to/kubernetes-service-accounts). For example, `my-project.svc.id.goog[my-namespace/my-kubernetes-sa]`. * `group:{emailid}`: An email address that represents a Google group. For example, `admins@example.com`. * `domain:{domain}`: The G Suite domain (primary) that represents all the users of that domain. For example, `google.com` or `example.com`. * `deleted:user:{emailid}?uid={uniqueid}`: An email address (plus unique identifier) representing a user that has been recently deleted. For example, `alice@example.com?uid=123456789012345678901`. If the user is recovered, this value reverts to `user:{emailid}` and the recovered user retains the role in the binding. * `deleted:serviceAccount:{emailid}?uid={uniqueid}`: An email address (plus unique identifier) representing a service account that has been recently deleted. For example, `my-other-app@appspot.gserviceaccount.com?uid=123456789012345678901`. If the service account is undeleted, this value reverts to `serviceAccount:{emailid}` and the undeleted service account retains the role in the binding. * `deleted:group:{emailid}?uid={uniqueid}`: An email address (plus unique identifier) representing a Google group that has been recently deleted. For example, `admins@example.com?uid=123456789012345678901`. If the group is recovered, this value reverts to `group:{emailid}` and the recovered group retains the role in the binding.
	Member pulumi.StringOutput `pulumi:"member"`
	// The name of the resource to manage IAM policies for.
	Name pulumi.StringOutput `pulumi:"name"`
	// The project in which the resource belongs. If it is not provided, a default will be supplied.
	Project pulumi.StringOutput `pulumi:"project"`
	// Role that is assigned to the list of `members`, or principals. For example, `roles/viewer`, `roles/editor`, or `roles/owner`.
	Role pulumi.StringOutput `pulumi:"role"`
}

Sets the access control policy on the specified resource. Replaces any existing policy. Can return `NOT_FOUND`, `INVALID_ARGUMENT`, and `PERMISSION_DENIED` errors.

func GetBackupPlanBackupIamMember added in v0.26.0

func GetBackupPlanBackupIamMember(ctx *pulumi.Context,
	name string, id pulumi.IDInput, state *BackupPlanBackupIamMemberState, opts ...pulumi.ResourceOption) (*BackupPlanBackupIamMember, error)

GetBackupPlanBackupIamMember gets an existing BackupPlanBackupIamMember resource's state with the given name, ID, and optional state properties that are used to uniquely qualify the lookup (nil if not required).

func NewBackupPlanBackupIamMember added in v0.26.0

func NewBackupPlanBackupIamMember(ctx *pulumi.Context,
	name string, args *BackupPlanBackupIamMemberArgs, opts ...pulumi.ResourceOption) (*BackupPlanBackupIamMember, error)

NewBackupPlanBackupIamMember registers a new resource with the given unique name, arguments, and options.

func (*BackupPlanBackupIamMember) ElementType added in v0.26.0

func (*BackupPlanBackupIamMember) ElementType() reflect.Type

func (*BackupPlanBackupIamMember) ToBackupPlanBackupIamMemberOutput added in v0.26.0

func (i *BackupPlanBackupIamMember) ToBackupPlanBackupIamMemberOutput() BackupPlanBackupIamMemberOutput

func (*BackupPlanBackupIamMember) ToBackupPlanBackupIamMemberOutputWithContext added in v0.26.0

func (i *BackupPlanBackupIamMember) ToBackupPlanBackupIamMemberOutputWithContext(ctx context.Context) BackupPlanBackupIamMemberOutput

type BackupPlanBackupIamMemberArgs added in v0.26.0

type BackupPlanBackupIamMemberArgs struct {
	// An IAM Condition for a given binding.
	Condition iam.ConditionPtrInput
	// Identity that will be granted the privilege in role. The entry can have one of the following values:
	//
	//  * user:{emailid}: An email address that represents a specific Google account. For example, alice@gmail.com or joe@example.com.
	//  * serviceAccount:{emailid}: An email address that represents a service account. For example, my-other-app@appspot.gserviceaccount.com.
	//  * group:{emailid}: An email address that represents a Google group. For example, admins@example.com.
	//  * domain:{domain}: A G Suite domain (primary, instead of alias) name that represents all the users of that domain. For example, google.com or example.com.
	Member pulumi.StringInput
	// The name of the resource to manage IAM policies for.
	Name pulumi.StringInput
	// The role that should be applied.
	Role pulumi.StringInput
}

The set of arguments for constructing a BackupPlanBackupIamMember resource.

func (BackupPlanBackupIamMemberArgs) ElementType added in v0.26.0

type BackupPlanBackupIamMemberInput added in v0.26.0

type BackupPlanBackupIamMemberInput interface {
	pulumi.Input

	ToBackupPlanBackupIamMemberOutput() BackupPlanBackupIamMemberOutput
	ToBackupPlanBackupIamMemberOutputWithContext(ctx context.Context) BackupPlanBackupIamMemberOutput
}

type BackupPlanBackupIamMemberOutput added in v0.26.0

type BackupPlanBackupIamMemberOutput struct{ *pulumi.OutputState }

func (BackupPlanBackupIamMemberOutput) Condition added in v0.26.0

An IAM Condition for a given binding. See https://cloud.google.com/iam/docs/conditions-overview for additional details.

func (BackupPlanBackupIamMemberOutput) ElementType added in v0.26.0

func (BackupPlanBackupIamMemberOutput) Etag added in v0.26.0

The etag of the resource's IAM policy.

func (BackupPlanBackupIamMemberOutput) Member added in v0.26.0

Specifies the principals requesting access for a Google Cloud resource. `members` can have the following values: * `allUsers`: A special identifier that represents anyone who is on the internet; with or without a Google account. * `allAuthenticatedUsers`: A special identifier that represents anyone who is authenticated with a Google account or a service account. Does not include identities that come from external identity providers (IdPs) through identity federation. * `user:{emailid}`: An email address that represents a specific Google account. For example, `alice@example.com` . * `serviceAccount:{emailid}`: An email address that represents a Google service account. For example, `my-other-app@appspot.gserviceaccount.com`. * `serviceAccount:{projectid}.svc.id.goog[{namespace}/{kubernetes-sa}]`: An identifier for a [Kubernetes service account](https://cloud.google.com/kubernetes-engine/docs/how-to/kubernetes-service-accounts). For example, `my-project.svc.id.goog[my-namespace/my-kubernetes-sa]`. * `group:{emailid}`: An email address that represents a Google group. For example, `admins@example.com`. * `domain:{domain}`: The G Suite domain (primary) that represents all the users of that domain. For example, `google.com` or `example.com`. * `deleted:user:{emailid}?uid={uniqueid}`: An email address (plus unique identifier) representing a user that has been recently deleted. For example, `alice@example.com?uid=123456789012345678901`. If the user is recovered, this value reverts to `user:{emailid}` and the recovered user retains the role in the binding. * `deleted:serviceAccount:{emailid}?uid={uniqueid}`: An email address (plus unique identifier) representing a service account that has been recently deleted. For example, `my-other-app@appspot.gserviceaccount.com?uid=123456789012345678901`. If the service account is undeleted, this value reverts to `serviceAccount:{emailid}` and the undeleted service account retains the role in the binding. * `deleted:group:{emailid}?uid={uniqueid}`: An email address (plus unique identifier) representing a Google group that has been recently deleted. For example, `admins@example.com?uid=123456789012345678901`. If the group is recovered, this value reverts to `group:{emailid}` and the recovered group retains the role in the binding.

func (BackupPlanBackupIamMemberOutput) Name added in v0.26.0

The name of the resource to manage IAM policies for.

func (BackupPlanBackupIamMemberOutput) Project added in v0.26.0

The project in which the resource belongs. If it is not provided, a default will be supplied.

func (BackupPlanBackupIamMemberOutput) Role added in v0.26.0

Role that is assigned to the list of `members`, or principals. For example, `roles/viewer`, `roles/editor`, or `roles/owner`.

func (BackupPlanBackupIamMemberOutput) ToBackupPlanBackupIamMemberOutput added in v0.26.0

func (o BackupPlanBackupIamMemberOutput) ToBackupPlanBackupIamMemberOutput() BackupPlanBackupIamMemberOutput

func (BackupPlanBackupIamMemberOutput) ToBackupPlanBackupIamMemberOutputWithContext added in v0.26.0

func (o BackupPlanBackupIamMemberOutput) ToBackupPlanBackupIamMemberOutputWithContext(ctx context.Context) BackupPlanBackupIamMemberOutput

type BackupPlanBackupIamMemberState added in v0.26.0

type BackupPlanBackupIamMemberState struct {
}

func (BackupPlanBackupIamMemberState) ElementType added in v0.26.0

type BackupPlanBackupIamPolicy

type BackupPlanBackupIamPolicy struct {
	pulumi.CustomResourceState

	// Specifies cloud audit logging configuration for this policy.
	AuditConfigs AuditConfigResponseArrayOutput `pulumi:"auditConfigs"`
	BackupId     pulumi.StringOutput            `pulumi:"backupId"`
	BackupPlanId pulumi.StringOutput            `pulumi:"backupPlanId"`
	// Associates a list of `members`, or principals, with a `role`. Optionally, may specify a `condition` that determines how and when the `bindings` are applied. Each of the `bindings` must contain at least one principal. The `bindings` in a `Policy` can refer to up to 1,500 principals; up to 250 of these principals can be Google groups. Each occurrence of a principal counts towards these limits. For example, if the `bindings` grant 50 different roles to `user:alice@example.com`, and not to any other principal, then you can add another 1,450 principals to the `bindings` in the `Policy`.
	Bindings BindingResponseArrayOutput `pulumi:"bindings"`
	// `etag` is used for optimistic concurrency control as a way to help prevent simultaneous updates of a policy from overwriting each other. It is strongly suggested that systems make use of the `etag` in the read-modify-write cycle to perform policy updates in order to avoid race conditions: An `etag` is returned in the response to `getIamPolicy`, and systems are expected to put that etag in the request to `setIamPolicy` to ensure that their change will be applied to the same version of the policy. **Important:** If you use IAM Conditions, you must include the `etag` field whenever you call `setIamPolicy`. If you omit this field, then IAM allows you to overwrite a version `3` policy with a version `1` policy, and all of the conditions in the version `3` policy are lost.
	Etag     pulumi.StringOutput `pulumi:"etag"`
	Location pulumi.StringOutput `pulumi:"location"`
	Project  pulumi.StringOutput `pulumi:"project"`
	// Specifies the format of the policy. Valid values are `0`, `1`, and `3`. Requests that specify an invalid value are rejected. Any operation that affects conditional role bindings must specify version `3`. This requirement applies to the following operations: * Getting a policy that includes a conditional role binding * Adding a conditional role binding to a policy * Changing a conditional role binding in a policy * Removing any role binding, with or without a condition, from a policy that includes conditions **Important:** If you use IAM Conditions, you must include the `etag` field whenever you call `setIamPolicy`. If you omit this field, then IAM allows you to overwrite a version `3` policy with a version `1` policy, and all of the conditions in the version `3` policy are lost. If a policy does not include any conditions, operations on that policy may specify any valid version or leave the field unset. To learn which resources support conditions in their IAM policies, see the [IAM documentation](https://cloud.google.com/iam/help/conditions/resource-policies).
	Version pulumi.IntOutput `pulumi:"version"`
}

Sets the access control policy on the specified resource. Replaces any existing policy. Can return `NOT_FOUND`, `INVALID_ARGUMENT`, and `PERMISSION_DENIED` errors. Note - this resource's API doesn't support deletion. When deleted, the resource will persist on Google Cloud even though it will be deleted from Pulumi state.

func GetBackupPlanBackupIamPolicy

func GetBackupPlanBackupIamPolicy(ctx *pulumi.Context,
	name string, id pulumi.IDInput, state *BackupPlanBackupIamPolicyState, opts ...pulumi.ResourceOption) (*BackupPlanBackupIamPolicy, error)

GetBackupPlanBackupIamPolicy gets an existing BackupPlanBackupIamPolicy resource's state with the given name, ID, and optional state properties that are used to uniquely qualify the lookup (nil if not required).

func NewBackupPlanBackupIamPolicy

func NewBackupPlanBackupIamPolicy(ctx *pulumi.Context,
	name string, args *BackupPlanBackupIamPolicyArgs, opts ...pulumi.ResourceOption) (*BackupPlanBackupIamPolicy, error)

NewBackupPlanBackupIamPolicy registers a new resource with the given unique name, arguments, and options.

func (*BackupPlanBackupIamPolicy) ElementType

func (*BackupPlanBackupIamPolicy) ElementType() reflect.Type

func (*BackupPlanBackupIamPolicy) ToBackupPlanBackupIamPolicyOutput

func (i *BackupPlanBackupIamPolicy) ToBackupPlanBackupIamPolicyOutput() BackupPlanBackupIamPolicyOutput

func (*BackupPlanBackupIamPolicy) ToBackupPlanBackupIamPolicyOutputWithContext

func (i *BackupPlanBackupIamPolicy) ToBackupPlanBackupIamPolicyOutputWithContext(ctx context.Context) BackupPlanBackupIamPolicyOutput

type BackupPlanBackupIamPolicyArgs

type BackupPlanBackupIamPolicyArgs struct {
	// Specifies cloud audit logging configuration for this policy.
	AuditConfigs AuditConfigArrayInput
	BackupId     pulumi.StringInput
	BackupPlanId pulumi.StringInput
	// Associates a list of `members`, or principals, with a `role`. Optionally, may specify a `condition` that determines how and when the `bindings` are applied. Each of the `bindings` must contain at least one principal. The `bindings` in a `Policy` can refer to up to 1,500 principals; up to 250 of these principals can be Google groups. Each occurrence of a principal counts towards these limits. For example, if the `bindings` grant 50 different roles to `user:alice@example.com`, and not to any other principal, then you can add another 1,450 principals to the `bindings` in the `Policy`.
	Bindings BindingArrayInput
	// `etag` is used for optimistic concurrency control as a way to help prevent simultaneous updates of a policy from overwriting each other. It is strongly suggested that systems make use of the `etag` in the read-modify-write cycle to perform policy updates in order to avoid race conditions: An `etag` is returned in the response to `getIamPolicy`, and systems are expected to put that etag in the request to `setIamPolicy` to ensure that their change will be applied to the same version of the policy. **Important:** If you use IAM Conditions, you must include the `etag` field whenever you call `setIamPolicy`. If you omit this field, then IAM allows you to overwrite a version `3` policy with a version `1` policy, and all of the conditions in the version `3` policy are lost.
	Etag     pulumi.StringPtrInput
	Location pulumi.StringPtrInput
	Project  pulumi.StringPtrInput
	// OPTIONAL: A FieldMask specifying which fields of the policy to modify. Only the fields in the mask will be modified. If no mask is provided, the following default mask is used: `paths: "bindings, etag"`
	UpdateMask pulumi.StringPtrInput
	// Specifies the format of the policy. Valid values are `0`, `1`, and `3`. Requests that specify an invalid value are rejected. Any operation that affects conditional role bindings must specify version `3`. This requirement applies to the following operations: * Getting a policy that includes a conditional role binding * Adding a conditional role binding to a policy * Changing a conditional role binding in a policy * Removing any role binding, with or without a condition, from a policy that includes conditions **Important:** If you use IAM Conditions, you must include the `etag` field whenever you call `setIamPolicy`. If you omit this field, then IAM allows you to overwrite a version `3` policy with a version `1` policy, and all of the conditions in the version `3` policy are lost. If a policy does not include any conditions, operations on that policy may specify any valid version or leave the field unset. To learn which resources support conditions in their IAM policies, see the [IAM documentation](https://cloud.google.com/iam/help/conditions/resource-policies).
	Version pulumi.IntPtrInput
}

The set of arguments for constructing a BackupPlanBackupIamPolicy resource.

func (BackupPlanBackupIamPolicyArgs) ElementType

type BackupPlanBackupIamPolicyInput

type BackupPlanBackupIamPolicyInput interface {
	pulumi.Input

	ToBackupPlanBackupIamPolicyOutput() BackupPlanBackupIamPolicyOutput
	ToBackupPlanBackupIamPolicyOutputWithContext(ctx context.Context) BackupPlanBackupIamPolicyOutput
}

type BackupPlanBackupIamPolicyOutput

type BackupPlanBackupIamPolicyOutput struct{ *pulumi.OutputState }

func (BackupPlanBackupIamPolicyOutput) AuditConfigs added in v0.19.0

Specifies cloud audit logging configuration for this policy.

func (BackupPlanBackupIamPolicyOutput) BackupId added in v0.21.0

func (BackupPlanBackupIamPolicyOutput) BackupPlanId added in v0.21.0

func (BackupPlanBackupIamPolicyOutput) Bindings added in v0.19.0

Associates a list of `members`, or principals, with a `role`. Optionally, may specify a `condition` that determines how and when the `bindings` are applied. Each of the `bindings` must contain at least one principal. The `bindings` in a `Policy` can refer to up to 1,500 principals; up to 250 of these principals can be Google groups. Each occurrence of a principal counts towards these limits. For example, if the `bindings` grant 50 different roles to `user:alice@example.com`, and not to any other principal, then you can add another 1,450 principals to the `bindings` in the `Policy`.

func (BackupPlanBackupIamPolicyOutput) ElementType

func (BackupPlanBackupIamPolicyOutput) Etag added in v0.19.0

`etag` is used for optimistic concurrency control as a way to help prevent simultaneous updates of a policy from overwriting each other. It is strongly suggested that systems make use of the `etag` in the read-modify-write cycle to perform policy updates in order to avoid race conditions: An `etag` is returned in the response to `getIamPolicy`, and systems are expected to put that etag in the request to `setIamPolicy` to ensure that their change will be applied to the same version of the policy. **Important:** If you use IAM Conditions, you must include the `etag` field whenever you call `setIamPolicy`. If you omit this field, then IAM allows you to overwrite a version `3` policy with a version `1` policy, and all of the conditions in the version `3` policy are lost.

func (BackupPlanBackupIamPolicyOutput) Location added in v0.21.0

func (BackupPlanBackupIamPolicyOutput) Project added in v0.21.0

func (BackupPlanBackupIamPolicyOutput) ToBackupPlanBackupIamPolicyOutput

func (o BackupPlanBackupIamPolicyOutput) ToBackupPlanBackupIamPolicyOutput() BackupPlanBackupIamPolicyOutput

func (BackupPlanBackupIamPolicyOutput) ToBackupPlanBackupIamPolicyOutputWithContext

func (o BackupPlanBackupIamPolicyOutput) ToBackupPlanBackupIamPolicyOutputWithContext(ctx context.Context) BackupPlanBackupIamPolicyOutput

func (BackupPlanBackupIamPolicyOutput) Version added in v0.19.0

Specifies the format of the policy. Valid values are `0`, `1`, and `3`. Requests that specify an invalid value are rejected. Any operation that affects conditional role bindings must specify version `3`. This requirement applies to the following operations: * Getting a policy that includes a conditional role binding * Adding a conditional role binding to a policy * Changing a conditional role binding in a policy * Removing any role binding, with or without a condition, from a policy that includes conditions **Important:** If you use IAM Conditions, you must include the `etag` field whenever you call `setIamPolicy`. If you omit this field, then IAM allows you to overwrite a version `3` policy with a version `1` policy, and all of the conditions in the version `3` policy are lost. If a policy does not include any conditions, operations on that policy may specify any valid version or leave the field unset. To learn which resources support conditions in their IAM policies, see the [IAM documentation](https://cloud.google.com/iam/help/conditions/resource-policies).

type BackupPlanBackupIamPolicyState

type BackupPlanBackupIamPolicyState struct {
}

func (BackupPlanBackupIamPolicyState) ElementType

type BackupPlanBackupVolumeBackupIamBinding added in v0.26.0

type BackupPlanBackupVolumeBackupIamBinding struct {
	pulumi.CustomResourceState

	// An IAM Condition for a given binding. See https://cloud.google.com/iam/docs/conditions-overview for additional details.
	Condition iam.ConditionPtrOutput `pulumi:"condition"`
	// The etag of the resource's IAM policy.
	Etag pulumi.StringOutput `pulumi:"etag"`
	// Specifies the principals requesting access for a Google Cloud resource. `members` can have the following values: * `allUsers`: A special identifier that represents anyone who is on the internet; with or without a Google account. * `allAuthenticatedUsers`: A special identifier that represents anyone who is authenticated with a Google account or a service account. Does not include identities that come from external identity providers (IdPs) through identity federation. * `user:{emailid}`: An email address that represents a specific Google account. For example, `alice@example.com` . * `serviceAccount:{emailid}`: An email address that represents a Google service account. For example, `my-other-app@appspot.gserviceaccount.com`. * `serviceAccount:{projectid}.svc.id.goog[{namespace}/{kubernetes-sa}]`: An identifier for a [Kubernetes service account](https://cloud.google.com/kubernetes-engine/docs/how-to/kubernetes-service-accounts). For example, `my-project.svc.id.goog[my-namespace/my-kubernetes-sa]`. * `group:{emailid}`: An email address that represents a Google group. For example, `admins@example.com`. * `domain:{domain}`: The G Suite domain (primary) that represents all the users of that domain. For example, `google.com` or `example.com`. * `deleted:user:{emailid}?uid={uniqueid}`: An email address (plus unique identifier) representing a user that has been recently deleted. For example, `alice@example.com?uid=123456789012345678901`. If the user is recovered, this value reverts to `user:{emailid}` and the recovered user retains the role in the binding. * `deleted:serviceAccount:{emailid}?uid={uniqueid}`: An email address (plus unique identifier) representing a service account that has been recently deleted. For example, `my-other-app@appspot.gserviceaccount.com?uid=123456789012345678901`. If the service account is undeleted, this value reverts to `serviceAccount:{emailid}` and the undeleted service account retains the role in the binding. * `deleted:group:{emailid}?uid={uniqueid}`: An email address (plus unique identifier) representing a Google group that has been recently deleted. For example, `admins@example.com?uid=123456789012345678901`. If the group is recovered, this value reverts to `group:{emailid}` and the recovered group retains the role in the binding.
	Members pulumi.StringArrayOutput `pulumi:"members"`
	// The name of the resource to manage IAM policies for.
	Name pulumi.StringOutput `pulumi:"name"`
	// The project in which the resource belongs. If it is not provided, a default will be supplied.
	Project pulumi.StringOutput `pulumi:"project"`
	// Role that is assigned to the list of `members`, or principals. For example, `roles/viewer`, `roles/editor`, or `roles/owner`.
	Role pulumi.StringOutput `pulumi:"role"`
}

Sets the access control policy on the specified resource. Replaces any existing policy. Can return `NOT_FOUND`, `INVALID_ARGUMENT`, and `PERMISSION_DENIED` errors.

func GetBackupPlanBackupVolumeBackupIamBinding added in v0.26.0

func GetBackupPlanBackupVolumeBackupIamBinding(ctx *pulumi.Context,
	name string, id pulumi.IDInput, state *BackupPlanBackupVolumeBackupIamBindingState, opts ...pulumi.ResourceOption) (*BackupPlanBackupVolumeBackupIamBinding, error)

GetBackupPlanBackupVolumeBackupIamBinding gets an existing BackupPlanBackupVolumeBackupIamBinding resource's state with the given name, ID, and optional state properties that are used to uniquely qualify the lookup (nil if not required).

func NewBackupPlanBackupVolumeBackupIamBinding added in v0.26.0

func NewBackupPlanBackupVolumeBackupIamBinding(ctx *pulumi.Context,
	name string, args *BackupPlanBackupVolumeBackupIamBindingArgs, opts ...pulumi.ResourceOption) (*BackupPlanBackupVolumeBackupIamBinding, error)

NewBackupPlanBackupVolumeBackupIamBinding registers a new resource with the given unique name, arguments, and options.

func (*BackupPlanBackupVolumeBackupIamBinding) ElementType added in v0.26.0

func (*BackupPlanBackupVolumeBackupIamBinding) ToBackupPlanBackupVolumeBackupIamBindingOutput added in v0.26.0

func (i *BackupPlanBackupVolumeBackupIamBinding) ToBackupPlanBackupVolumeBackupIamBindingOutput() BackupPlanBackupVolumeBackupIamBindingOutput

func (*BackupPlanBackupVolumeBackupIamBinding) ToBackupPlanBackupVolumeBackupIamBindingOutputWithContext added in v0.26.0

func (i *BackupPlanBackupVolumeBackupIamBinding) ToBackupPlanBackupVolumeBackupIamBindingOutputWithContext(ctx context.Context) BackupPlanBackupVolumeBackupIamBindingOutput

type BackupPlanBackupVolumeBackupIamBindingArgs added in v0.26.0

type BackupPlanBackupVolumeBackupIamBindingArgs struct {
	// An IAM Condition for a given binding.
	Condition iam.ConditionPtrInput
	// Identities that will be granted the privilege in role. Each entry can have one of the following values:
	//
	//  * user:{emailid}: An email address that represents a specific Google account. For example, alice@gmail.com or joe@example.com.
	//  * serviceAccount:{emailid}: An email address that represents a service account. For example, my-other-app@appspot.gserviceaccount.com.
	//  * group:{emailid}: An email address that represents a Google group. For example, admins@example.com.
	//  * domain:{domain}: A G Suite domain (primary, instead of alias) name that represents all the users of that domain. For example, google.com or example.com.
	Members pulumi.StringArrayInput
	// The name of the resource to manage IAM policies for.
	Name pulumi.StringInput
	// The role that should be applied. Only one `IamBinding` can be used per role.
	Role pulumi.StringInput
}

The set of arguments for constructing a BackupPlanBackupVolumeBackupIamBinding resource.

func (BackupPlanBackupVolumeBackupIamBindingArgs) ElementType added in v0.26.0

type BackupPlanBackupVolumeBackupIamBindingInput added in v0.26.0

type BackupPlanBackupVolumeBackupIamBindingInput interface {
	pulumi.Input

	ToBackupPlanBackupVolumeBackupIamBindingOutput() BackupPlanBackupVolumeBackupIamBindingOutput
	ToBackupPlanBackupVolumeBackupIamBindingOutputWithContext(ctx context.Context) BackupPlanBackupVolumeBackupIamBindingOutput
}

type BackupPlanBackupVolumeBackupIamBindingOutput added in v0.26.0

type BackupPlanBackupVolumeBackupIamBindingOutput struct{ *pulumi.OutputState }

func (BackupPlanBackupVolumeBackupIamBindingOutput) Condition added in v0.26.0

An IAM Condition for a given binding. See https://cloud.google.com/iam/docs/conditions-overview for additional details.

func (BackupPlanBackupVolumeBackupIamBindingOutput) ElementType added in v0.26.0

func (BackupPlanBackupVolumeBackupIamBindingOutput) Etag added in v0.26.0

The etag of the resource's IAM policy.

func (BackupPlanBackupVolumeBackupIamBindingOutput) Members added in v0.26.0

Specifies the principals requesting access for a Google Cloud resource. `members` can have the following values: * `allUsers`: A special identifier that represents anyone who is on the internet; with or without a Google account. * `allAuthenticatedUsers`: A special identifier that represents anyone who is authenticated with a Google account or a service account. Does not include identities that come from external identity providers (IdPs) through identity federation. * `user:{emailid}`: An email address that represents a specific Google account. For example, `alice@example.com` . * `serviceAccount:{emailid}`: An email address that represents a Google service account. For example, `my-other-app@appspot.gserviceaccount.com`. * `serviceAccount:{projectid}.svc.id.goog[{namespace}/{kubernetes-sa}]`: An identifier for a [Kubernetes service account](https://cloud.google.com/kubernetes-engine/docs/how-to/kubernetes-service-accounts). For example, `my-project.svc.id.goog[my-namespace/my-kubernetes-sa]`. * `group:{emailid}`: An email address that represents a Google group. For example, `admins@example.com`. * `domain:{domain}`: The G Suite domain (primary) that represents all the users of that domain. For example, `google.com` or `example.com`. * `deleted:user:{emailid}?uid={uniqueid}`: An email address (plus unique identifier) representing a user that has been recently deleted. For example, `alice@example.com?uid=123456789012345678901`. If the user is recovered, this value reverts to `user:{emailid}` and the recovered user retains the role in the binding. * `deleted:serviceAccount:{emailid}?uid={uniqueid}`: An email address (plus unique identifier) representing a service account that has been recently deleted. For example, `my-other-app@appspot.gserviceaccount.com?uid=123456789012345678901`. If the service account is undeleted, this value reverts to `serviceAccount:{emailid}` and the undeleted service account retains the role in the binding. * `deleted:group:{emailid}?uid={uniqueid}`: An email address (plus unique identifier) representing a Google group that has been recently deleted. For example, `admins@example.com?uid=123456789012345678901`. If the group is recovered, this value reverts to `group:{emailid}` and the recovered group retains the role in the binding.

func (BackupPlanBackupVolumeBackupIamBindingOutput) Name added in v0.26.0

The name of the resource to manage IAM policies for.

func (BackupPlanBackupVolumeBackupIamBindingOutput) Project added in v0.26.0

The project in which the resource belongs. If it is not provided, a default will be supplied.

func (BackupPlanBackupVolumeBackupIamBindingOutput) Role added in v0.26.0

Role that is assigned to the list of `members`, or principals. For example, `roles/viewer`, `roles/editor`, or `roles/owner`.

func (BackupPlanBackupVolumeBackupIamBindingOutput) ToBackupPlanBackupVolumeBackupIamBindingOutput added in v0.26.0

func (o BackupPlanBackupVolumeBackupIamBindingOutput) ToBackupPlanBackupVolumeBackupIamBindingOutput() BackupPlanBackupVolumeBackupIamBindingOutput

func (BackupPlanBackupVolumeBackupIamBindingOutput) ToBackupPlanBackupVolumeBackupIamBindingOutputWithContext added in v0.26.0

func (o BackupPlanBackupVolumeBackupIamBindingOutput) ToBackupPlanBackupVolumeBackupIamBindingOutputWithContext(ctx context.Context) BackupPlanBackupVolumeBackupIamBindingOutput

type BackupPlanBackupVolumeBackupIamBindingState added in v0.26.0

type BackupPlanBackupVolumeBackupIamBindingState struct {
}

func (BackupPlanBackupVolumeBackupIamBindingState) ElementType added in v0.26.0

type BackupPlanBackupVolumeBackupIamMember added in v0.26.0

type BackupPlanBackupVolumeBackupIamMember struct {
	pulumi.CustomResourceState

	// An IAM Condition for a given binding. See https://cloud.google.com/iam/docs/conditions-overview for additional details.
	Condition iam.ConditionPtrOutput `pulumi:"condition"`
	// The etag of the resource's IAM policy.
	Etag pulumi.StringOutput `pulumi:"etag"`
	// Specifies the principals requesting access for a Google Cloud resource. `members` can have the following values: * `allUsers`: A special identifier that represents anyone who is on the internet; with or without a Google account. * `allAuthenticatedUsers`: A special identifier that represents anyone who is authenticated with a Google account or a service account. Does not include identities that come from external identity providers (IdPs) through identity federation. * `user:{emailid}`: An email address that represents a specific Google account. For example, `alice@example.com` . * `serviceAccount:{emailid}`: An email address that represents a Google service account. For example, `my-other-app@appspot.gserviceaccount.com`. * `serviceAccount:{projectid}.svc.id.goog[{namespace}/{kubernetes-sa}]`: An identifier for a [Kubernetes service account](https://cloud.google.com/kubernetes-engine/docs/how-to/kubernetes-service-accounts). For example, `my-project.svc.id.goog[my-namespace/my-kubernetes-sa]`. * `group:{emailid}`: An email address that represents a Google group. For example, `admins@example.com`. * `domain:{domain}`: The G Suite domain (primary) that represents all the users of that domain. For example, `google.com` or `example.com`. * `deleted:user:{emailid}?uid={uniqueid}`: An email address (plus unique identifier) representing a user that has been recently deleted. For example, `alice@example.com?uid=123456789012345678901`. If the user is recovered, this value reverts to `user:{emailid}` and the recovered user retains the role in the binding. * `deleted:serviceAccount:{emailid}?uid={uniqueid}`: An email address (plus unique identifier) representing a service account that has been recently deleted. For example, `my-other-app@appspot.gserviceaccount.com?uid=123456789012345678901`. If the service account is undeleted, this value reverts to `serviceAccount:{emailid}` and the undeleted service account retains the role in the binding. * `deleted:group:{emailid}?uid={uniqueid}`: An email address (plus unique identifier) representing a Google group that has been recently deleted. For example, `admins@example.com?uid=123456789012345678901`. If the group is recovered, this value reverts to `group:{emailid}` and the recovered group retains the role in the binding.
	Member pulumi.StringOutput `pulumi:"member"`
	// The name of the resource to manage IAM policies for.
	Name pulumi.StringOutput `pulumi:"name"`
	// The project in which the resource belongs. If it is not provided, a default will be supplied.
	Project pulumi.StringOutput `pulumi:"project"`
	// Role that is assigned to the list of `members`, or principals. For example, `roles/viewer`, `roles/editor`, or `roles/owner`.
	Role pulumi.StringOutput `pulumi:"role"`
}

Sets the access control policy on the specified resource. Replaces any existing policy. Can return `NOT_FOUND`, `INVALID_ARGUMENT`, and `PERMISSION_DENIED` errors.

func GetBackupPlanBackupVolumeBackupIamMember added in v0.26.0

func GetBackupPlanBackupVolumeBackupIamMember(ctx *pulumi.Context,
	name string, id pulumi.IDInput, state *BackupPlanBackupVolumeBackupIamMemberState, opts ...pulumi.ResourceOption) (*BackupPlanBackupVolumeBackupIamMember, error)

GetBackupPlanBackupVolumeBackupIamMember gets an existing BackupPlanBackupVolumeBackupIamMember resource's state with the given name, ID, and optional state properties that are used to uniquely qualify the lookup (nil if not required).

func NewBackupPlanBackupVolumeBackupIamMember added in v0.26.0

func NewBackupPlanBackupVolumeBackupIamMember(ctx *pulumi.Context,
	name string, args *BackupPlanBackupVolumeBackupIamMemberArgs, opts ...pulumi.ResourceOption) (*BackupPlanBackupVolumeBackupIamMember, error)

NewBackupPlanBackupVolumeBackupIamMember registers a new resource with the given unique name, arguments, and options.

func (*BackupPlanBackupVolumeBackupIamMember) ElementType added in v0.26.0

func (*BackupPlanBackupVolumeBackupIamMember) ToBackupPlanBackupVolumeBackupIamMemberOutput added in v0.26.0

func (i *BackupPlanBackupVolumeBackupIamMember) ToBackupPlanBackupVolumeBackupIamMemberOutput() BackupPlanBackupVolumeBackupIamMemberOutput

func (*BackupPlanBackupVolumeBackupIamMember) ToBackupPlanBackupVolumeBackupIamMemberOutputWithContext added in v0.26.0

func (i *BackupPlanBackupVolumeBackupIamMember) ToBackupPlanBackupVolumeBackupIamMemberOutputWithContext(ctx context.Context) BackupPlanBackupVolumeBackupIamMemberOutput

type BackupPlanBackupVolumeBackupIamMemberArgs added in v0.26.0

type BackupPlanBackupVolumeBackupIamMemberArgs struct {
	// An IAM Condition for a given binding.
	Condition iam.ConditionPtrInput
	// Identity that will be granted the privilege in role. The entry can have one of the following values:
	//
	//  * user:{emailid}: An email address that represents a specific Google account. For example, alice@gmail.com or joe@example.com.
	//  * serviceAccount:{emailid}: An email address that represents a service account. For example, my-other-app@appspot.gserviceaccount.com.
	//  * group:{emailid}: An email address that represents a Google group. For example, admins@example.com.
	//  * domain:{domain}: A G Suite domain (primary, instead of alias) name that represents all the users of that domain. For example, google.com or example.com.
	Member pulumi.StringInput
	// The name of the resource to manage IAM policies for.
	Name pulumi.StringInput
	// The role that should be applied.
	Role pulumi.StringInput
}

The set of arguments for constructing a BackupPlanBackupVolumeBackupIamMember resource.

func (BackupPlanBackupVolumeBackupIamMemberArgs) ElementType added in v0.26.0

type BackupPlanBackupVolumeBackupIamMemberInput added in v0.26.0

type BackupPlanBackupVolumeBackupIamMemberInput interface {
	pulumi.Input

	ToBackupPlanBackupVolumeBackupIamMemberOutput() BackupPlanBackupVolumeBackupIamMemberOutput
	ToBackupPlanBackupVolumeBackupIamMemberOutputWithContext(ctx context.Context) BackupPlanBackupVolumeBackupIamMemberOutput
}

type BackupPlanBackupVolumeBackupIamMemberOutput added in v0.26.0

type BackupPlanBackupVolumeBackupIamMemberOutput struct{ *pulumi.OutputState }

func (BackupPlanBackupVolumeBackupIamMemberOutput) Condition added in v0.26.0

An IAM Condition for a given binding. See https://cloud.google.com/iam/docs/conditions-overview for additional details.

func (BackupPlanBackupVolumeBackupIamMemberOutput) ElementType added in v0.26.0

func (BackupPlanBackupVolumeBackupIamMemberOutput) Etag added in v0.26.0

The etag of the resource's IAM policy.

func (BackupPlanBackupVolumeBackupIamMemberOutput) Member added in v0.26.0

Specifies the principals requesting access for a Google Cloud resource. `members` can have the following values: * `allUsers`: A special identifier that represents anyone who is on the internet; with or without a Google account. * `allAuthenticatedUsers`: A special identifier that represents anyone who is authenticated with a Google account or a service account. Does not include identities that come from external identity providers (IdPs) through identity federation. * `user:{emailid}`: An email address that represents a specific Google account. For example, `alice@example.com` . * `serviceAccount:{emailid}`: An email address that represents a Google service account. For example, `my-other-app@appspot.gserviceaccount.com`. * `serviceAccount:{projectid}.svc.id.goog[{namespace}/{kubernetes-sa}]`: An identifier for a [Kubernetes service account](https://cloud.google.com/kubernetes-engine/docs/how-to/kubernetes-service-accounts). For example, `my-project.svc.id.goog[my-namespace/my-kubernetes-sa]`. * `group:{emailid}`: An email address that represents a Google group. For example, `admins@example.com`. * `domain:{domain}`: The G Suite domain (primary) that represents all the users of that domain. For example, `google.com` or `example.com`. * `deleted:user:{emailid}?uid={uniqueid}`: An email address (plus unique identifier) representing a user that has been recently deleted. For example, `alice@example.com?uid=123456789012345678901`. If the user is recovered, this value reverts to `user:{emailid}` and the recovered user retains the role in the binding. * `deleted:serviceAccount:{emailid}?uid={uniqueid}`: An email address (plus unique identifier) representing a service account that has been recently deleted. For example, `my-other-app@appspot.gserviceaccount.com?uid=123456789012345678901`. If the service account is undeleted, this value reverts to `serviceAccount:{emailid}` and the undeleted service account retains the role in the binding. * `deleted:group:{emailid}?uid={uniqueid}`: An email address (plus unique identifier) representing a Google group that has been recently deleted. For example, `admins@example.com?uid=123456789012345678901`. If the group is recovered, this value reverts to `group:{emailid}` and the recovered group retains the role in the binding.

func (BackupPlanBackupVolumeBackupIamMemberOutput) Name added in v0.26.0

The name of the resource to manage IAM policies for.

func (BackupPlanBackupVolumeBackupIamMemberOutput) Project added in v0.26.0

The project in which the resource belongs. If it is not provided, a default will be supplied.

func (BackupPlanBackupVolumeBackupIamMemberOutput) Role added in v0.26.0

Role that is assigned to the list of `members`, or principals. For example, `roles/viewer`, `roles/editor`, or `roles/owner`.

func (BackupPlanBackupVolumeBackupIamMemberOutput) ToBackupPlanBackupVolumeBackupIamMemberOutput added in v0.26.0

func (o BackupPlanBackupVolumeBackupIamMemberOutput) ToBackupPlanBackupVolumeBackupIamMemberOutput() BackupPlanBackupVolumeBackupIamMemberOutput

func (BackupPlanBackupVolumeBackupIamMemberOutput) ToBackupPlanBackupVolumeBackupIamMemberOutputWithContext added in v0.26.0

func (o BackupPlanBackupVolumeBackupIamMemberOutput) ToBackupPlanBackupVolumeBackupIamMemberOutputWithContext(ctx context.Context) BackupPlanBackupVolumeBackupIamMemberOutput

type BackupPlanBackupVolumeBackupIamMemberState added in v0.26.0

type BackupPlanBackupVolumeBackupIamMemberState struct {
}

func (BackupPlanBackupVolumeBackupIamMemberState) ElementType added in v0.26.0

type BackupPlanBackupVolumeBackupIamPolicy

type BackupPlanBackupVolumeBackupIamPolicy struct {
	pulumi.CustomResourceState

	// Specifies cloud audit logging configuration for this policy.
	AuditConfigs AuditConfigResponseArrayOutput `pulumi:"auditConfigs"`
	BackupId     pulumi.StringOutput            `pulumi:"backupId"`
	BackupPlanId pulumi.StringOutput            `pulumi:"backupPlanId"`
	// Associates a list of `members`, or principals, with a `role`. Optionally, may specify a `condition` that determines how and when the `bindings` are applied. Each of the `bindings` must contain at least one principal. The `bindings` in a `Policy` can refer to up to 1,500 principals; up to 250 of these principals can be Google groups. Each occurrence of a principal counts towards these limits. For example, if the `bindings` grant 50 different roles to `user:alice@example.com`, and not to any other principal, then you can add another 1,450 principals to the `bindings` in the `Policy`.
	Bindings BindingResponseArrayOutput `pulumi:"bindings"`
	// `etag` is used for optimistic concurrency control as a way to help prevent simultaneous updates of a policy from overwriting each other. It is strongly suggested that systems make use of the `etag` in the read-modify-write cycle to perform policy updates in order to avoid race conditions: An `etag` is returned in the response to `getIamPolicy`, and systems are expected to put that etag in the request to `setIamPolicy` to ensure that their change will be applied to the same version of the policy. **Important:** If you use IAM Conditions, you must include the `etag` field whenever you call `setIamPolicy`. If you omit this field, then IAM allows you to overwrite a version `3` policy with a version `1` policy, and all of the conditions in the version `3` policy are lost.
	Etag     pulumi.StringOutput `pulumi:"etag"`
	Location pulumi.StringOutput `pulumi:"location"`
	Project  pulumi.StringOutput `pulumi:"project"`
	// Specifies the format of the policy. Valid values are `0`, `1`, and `3`. Requests that specify an invalid value are rejected. Any operation that affects conditional role bindings must specify version `3`. This requirement applies to the following operations: * Getting a policy that includes a conditional role binding * Adding a conditional role binding to a policy * Changing a conditional role binding in a policy * Removing any role binding, with or without a condition, from a policy that includes conditions **Important:** If you use IAM Conditions, you must include the `etag` field whenever you call `setIamPolicy`. If you omit this field, then IAM allows you to overwrite a version `3` policy with a version `1` policy, and all of the conditions in the version `3` policy are lost. If a policy does not include any conditions, operations on that policy may specify any valid version or leave the field unset. To learn which resources support conditions in their IAM policies, see the [IAM documentation](https://cloud.google.com/iam/help/conditions/resource-policies).
	Version        pulumi.IntOutput    `pulumi:"version"`
	VolumeBackupId pulumi.StringOutput `pulumi:"volumeBackupId"`
}

Sets the access control policy on the specified resource. Replaces any existing policy. Can return `NOT_FOUND`, `INVALID_ARGUMENT`, and `PERMISSION_DENIED` errors. Note - this resource's API doesn't support deletion. When deleted, the resource will persist on Google Cloud even though it will be deleted from Pulumi state.

func GetBackupPlanBackupVolumeBackupIamPolicy

func GetBackupPlanBackupVolumeBackupIamPolicy(ctx *pulumi.Context,
	name string, id pulumi.IDInput, state *BackupPlanBackupVolumeBackupIamPolicyState, opts ...pulumi.ResourceOption) (*BackupPlanBackupVolumeBackupIamPolicy, error)

GetBackupPlanBackupVolumeBackupIamPolicy gets an existing BackupPlanBackupVolumeBackupIamPolicy resource's state with the given name, ID, and optional state properties that are used to uniquely qualify the lookup (nil if not required).

func NewBackupPlanBackupVolumeBackupIamPolicy

func NewBackupPlanBackupVolumeBackupIamPolicy(ctx *pulumi.Context,
	name string, args *BackupPlanBackupVolumeBackupIamPolicyArgs, opts ...pulumi.ResourceOption) (*BackupPlanBackupVolumeBackupIamPolicy, error)

NewBackupPlanBackupVolumeBackupIamPolicy registers a new resource with the given unique name, arguments, and options.

func (*BackupPlanBackupVolumeBackupIamPolicy) ElementType

func (*BackupPlanBackupVolumeBackupIamPolicy) ToBackupPlanBackupVolumeBackupIamPolicyOutput

func (i *BackupPlanBackupVolumeBackupIamPolicy) ToBackupPlanBackupVolumeBackupIamPolicyOutput() BackupPlanBackupVolumeBackupIamPolicyOutput

func (*BackupPlanBackupVolumeBackupIamPolicy) ToBackupPlanBackupVolumeBackupIamPolicyOutputWithContext

func (i *BackupPlanBackupVolumeBackupIamPolicy) ToBackupPlanBackupVolumeBackupIamPolicyOutputWithContext(ctx context.Context) BackupPlanBackupVolumeBackupIamPolicyOutput

type BackupPlanBackupVolumeBackupIamPolicyArgs

type BackupPlanBackupVolumeBackupIamPolicyArgs struct {
	// Specifies cloud audit logging configuration for this policy.
	AuditConfigs AuditConfigArrayInput
	BackupId     pulumi.StringInput
	BackupPlanId pulumi.StringInput
	// Associates a list of `members`, or principals, with a `role`. Optionally, may specify a `condition` that determines how and when the `bindings` are applied. Each of the `bindings` must contain at least one principal. The `bindings` in a `Policy` can refer to up to 1,500 principals; up to 250 of these principals can be Google groups. Each occurrence of a principal counts towards these limits. For example, if the `bindings` grant 50 different roles to `user:alice@example.com`, and not to any other principal, then you can add another 1,450 principals to the `bindings` in the `Policy`.
	Bindings BindingArrayInput
	// `etag` is used for optimistic concurrency control as a way to help prevent simultaneous updates of a policy from overwriting each other. It is strongly suggested that systems make use of the `etag` in the read-modify-write cycle to perform policy updates in order to avoid race conditions: An `etag` is returned in the response to `getIamPolicy`, and systems are expected to put that etag in the request to `setIamPolicy` to ensure that their change will be applied to the same version of the policy. **Important:** If you use IAM Conditions, you must include the `etag` field whenever you call `setIamPolicy`. If you omit this field, then IAM allows you to overwrite a version `3` policy with a version `1` policy, and all of the conditions in the version `3` policy are lost.
	Etag     pulumi.StringPtrInput
	Location pulumi.StringPtrInput
	Project  pulumi.StringPtrInput
	// OPTIONAL: A FieldMask specifying which fields of the policy to modify. Only the fields in the mask will be modified. If no mask is provided, the following default mask is used: `paths: "bindings, etag"`
	UpdateMask pulumi.StringPtrInput
	// Specifies the format of the policy. Valid values are `0`, `1`, and `3`. Requests that specify an invalid value are rejected. Any operation that affects conditional role bindings must specify version `3`. This requirement applies to the following operations: * Getting a policy that includes a conditional role binding * Adding a conditional role binding to a policy * Changing a conditional role binding in a policy * Removing any role binding, with or without a condition, from a policy that includes conditions **Important:** If you use IAM Conditions, you must include the `etag` field whenever you call `setIamPolicy`. If you omit this field, then IAM allows you to overwrite a version `3` policy with a version `1` policy, and all of the conditions in the version `3` policy are lost. If a policy does not include any conditions, operations on that policy may specify any valid version or leave the field unset. To learn which resources support conditions in their IAM policies, see the [IAM documentation](https://cloud.google.com/iam/help/conditions/resource-policies).
	Version        pulumi.IntPtrInput
	VolumeBackupId pulumi.StringInput
}

The set of arguments for constructing a BackupPlanBackupVolumeBackupIamPolicy resource.

func (BackupPlanBackupVolumeBackupIamPolicyArgs) ElementType

type BackupPlanBackupVolumeBackupIamPolicyInput

type BackupPlanBackupVolumeBackupIamPolicyInput interface {
	pulumi.Input

	ToBackupPlanBackupVolumeBackupIamPolicyOutput() BackupPlanBackupVolumeBackupIamPolicyOutput
	ToBackupPlanBackupVolumeBackupIamPolicyOutputWithContext(ctx context.Context) BackupPlanBackupVolumeBackupIamPolicyOutput
}

type BackupPlanBackupVolumeBackupIamPolicyOutput

type BackupPlanBackupVolumeBackupIamPolicyOutput struct{ *pulumi.OutputState }

func (BackupPlanBackupVolumeBackupIamPolicyOutput) AuditConfigs added in v0.19.0

Specifies cloud audit logging configuration for this policy.

func (BackupPlanBackupVolumeBackupIamPolicyOutput) BackupId added in v0.21.0

func (BackupPlanBackupVolumeBackupIamPolicyOutput) BackupPlanId added in v0.21.0

func (BackupPlanBackupVolumeBackupIamPolicyOutput) Bindings added in v0.19.0

Associates a list of `members`, or principals, with a `role`. Optionally, may specify a `condition` that determines how and when the `bindings` are applied. Each of the `bindings` must contain at least one principal. The `bindings` in a `Policy` can refer to up to 1,500 principals; up to 250 of these principals can be Google groups. Each occurrence of a principal counts towards these limits. For example, if the `bindings` grant 50 different roles to `user:alice@example.com`, and not to any other principal, then you can add another 1,450 principals to the `bindings` in the `Policy`.

func (BackupPlanBackupVolumeBackupIamPolicyOutput) ElementType

func (BackupPlanBackupVolumeBackupIamPolicyOutput) Etag added in v0.19.0

`etag` is used for optimistic concurrency control as a way to help prevent simultaneous updates of a policy from overwriting each other. It is strongly suggested that systems make use of the `etag` in the read-modify-write cycle to perform policy updates in order to avoid race conditions: An `etag` is returned in the response to `getIamPolicy`, and systems are expected to put that etag in the request to `setIamPolicy` to ensure that their change will be applied to the same version of the policy. **Important:** If you use IAM Conditions, you must include the `etag` field whenever you call `setIamPolicy`. If you omit this field, then IAM allows you to overwrite a version `3` policy with a version `1` policy, and all of the conditions in the version `3` policy are lost.

func (BackupPlanBackupVolumeBackupIamPolicyOutput) Location added in v0.21.0

func (BackupPlanBackupVolumeBackupIamPolicyOutput) Project added in v0.21.0

func (BackupPlanBackupVolumeBackupIamPolicyOutput) ToBackupPlanBackupVolumeBackupIamPolicyOutput

func (o BackupPlanBackupVolumeBackupIamPolicyOutput) ToBackupPlanBackupVolumeBackupIamPolicyOutput() BackupPlanBackupVolumeBackupIamPolicyOutput

func (BackupPlanBackupVolumeBackupIamPolicyOutput) ToBackupPlanBackupVolumeBackupIamPolicyOutputWithContext

func (o BackupPlanBackupVolumeBackupIamPolicyOutput) ToBackupPlanBackupVolumeBackupIamPolicyOutputWithContext(ctx context.Context) BackupPlanBackupVolumeBackupIamPolicyOutput

func (BackupPlanBackupVolumeBackupIamPolicyOutput) Version added in v0.19.0

Specifies the format of the policy. Valid values are `0`, `1`, and `3`. Requests that specify an invalid value are rejected. Any operation that affects conditional role bindings must specify version `3`. This requirement applies to the following operations: * Getting a policy that includes a conditional role binding * Adding a conditional role binding to a policy * Changing a conditional role binding in a policy * Removing any role binding, with or without a condition, from a policy that includes conditions **Important:** If you use IAM Conditions, you must include the `etag` field whenever you call `setIamPolicy`. If you omit this field, then IAM allows you to overwrite a version `3` policy with a version `1` policy, and all of the conditions in the version `3` policy are lost. If a policy does not include any conditions, operations on that policy may specify any valid version or leave the field unset. To learn which resources support conditions in their IAM policies, see the [IAM documentation](https://cloud.google.com/iam/help/conditions/resource-policies).

func (BackupPlanBackupVolumeBackupIamPolicyOutput) VolumeBackupId added in v0.21.0

type BackupPlanBackupVolumeBackupIamPolicyState

type BackupPlanBackupVolumeBackupIamPolicyState struct {
}

func (BackupPlanBackupVolumeBackupIamPolicyState) ElementType

type BackupPlanIamBinding added in v0.26.0

type BackupPlanIamBinding struct {
	pulumi.CustomResourceState

	// An IAM Condition for a given binding. See https://cloud.google.com/iam/docs/conditions-overview for additional details.
	Condition iam.ConditionPtrOutput `pulumi:"condition"`
	// The etag of the resource's IAM policy.
	Etag pulumi.StringOutput `pulumi:"etag"`
	// Specifies the principals requesting access for a Google Cloud resource. `members` can have the following values: * `allUsers`: A special identifier that represents anyone who is on the internet; with or without a Google account. * `allAuthenticatedUsers`: A special identifier that represents anyone who is authenticated with a Google account or a service account. Does not include identities that come from external identity providers (IdPs) through identity federation. * `user:{emailid}`: An email address that represents a specific Google account. For example, `alice@example.com` . * `serviceAccount:{emailid}`: An email address that represents a Google service account. For example, `my-other-app@appspot.gserviceaccount.com`. * `serviceAccount:{projectid}.svc.id.goog[{namespace}/{kubernetes-sa}]`: An identifier for a [Kubernetes service account](https://cloud.google.com/kubernetes-engine/docs/how-to/kubernetes-service-accounts). For example, `my-project.svc.id.goog[my-namespace/my-kubernetes-sa]`. * `group:{emailid}`: An email address that represents a Google group. For example, `admins@example.com`. * `domain:{domain}`: The G Suite domain (primary) that represents all the users of that domain. For example, `google.com` or `example.com`. * `deleted:user:{emailid}?uid={uniqueid}`: An email address (plus unique identifier) representing a user that has been recently deleted. For example, `alice@example.com?uid=123456789012345678901`. If the user is recovered, this value reverts to `user:{emailid}` and the recovered user retains the role in the binding. * `deleted:serviceAccount:{emailid}?uid={uniqueid}`: An email address (plus unique identifier) representing a service account that has been recently deleted. For example, `my-other-app@appspot.gserviceaccount.com?uid=123456789012345678901`. If the service account is undeleted, this value reverts to `serviceAccount:{emailid}` and the undeleted service account retains the role in the binding. * `deleted:group:{emailid}?uid={uniqueid}`: An email address (plus unique identifier) representing a Google group that has been recently deleted. For example, `admins@example.com?uid=123456789012345678901`. If the group is recovered, this value reverts to `group:{emailid}` and the recovered group retains the role in the binding.
	Members pulumi.StringArrayOutput `pulumi:"members"`
	// The name of the resource to manage IAM policies for.
	Name pulumi.StringOutput `pulumi:"name"`
	// The project in which the resource belongs. If it is not provided, a default will be supplied.
	Project pulumi.StringOutput `pulumi:"project"`
	// Role that is assigned to the list of `members`, or principals. For example, `roles/viewer`, `roles/editor`, or `roles/owner`.
	Role pulumi.StringOutput `pulumi:"role"`
}

Sets the access control policy on the specified resource. Replaces any existing policy. Can return `NOT_FOUND`, `INVALID_ARGUMENT`, and `PERMISSION_DENIED` errors.

func GetBackupPlanIamBinding added in v0.26.0

func GetBackupPlanIamBinding(ctx *pulumi.Context,
	name string, id pulumi.IDInput, state *BackupPlanIamBindingState, opts ...pulumi.ResourceOption) (*BackupPlanIamBinding, error)

GetBackupPlanIamBinding gets an existing BackupPlanIamBinding resource's state with the given name, ID, and optional state properties that are used to uniquely qualify the lookup (nil if not required).

func NewBackupPlanIamBinding added in v0.26.0

func NewBackupPlanIamBinding(ctx *pulumi.Context,
	name string, args *BackupPlanIamBindingArgs, opts ...pulumi.ResourceOption) (*BackupPlanIamBinding, error)

NewBackupPlanIamBinding registers a new resource with the given unique name, arguments, and options.

func (*BackupPlanIamBinding) ElementType added in v0.26.0

func (*BackupPlanIamBinding) ElementType() reflect.Type

func (*BackupPlanIamBinding) ToBackupPlanIamBindingOutput added in v0.26.0

func (i *BackupPlanIamBinding) ToBackupPlanIamBindingOutput() BackupPlanIamBindingOutput

func (*BackupPlanIamBinding) ToBackupPlanIamBindingOutputWithContext added in v0.26.0

func (i *BackupPlanIamBinding) ToBackupPlanIamBindingOutputWithContext(ctx context.Context) BackupPlanIamBindingOutput

type BackupPlanIamBindingArgs added in v0.26.0

type BackupPlanIamBindingArgs struct {
	// An IAM Condition for a given binding.
	Condition iam.ConditionPtrInput
	// Identities that will be granted the privilege in role. Each entry can have one of the following values:
	//
	//  * user:{emailid}: An email address that represents a specific Google account. For example, alice@gmail.com or joe@example.com.
	//  * serviceAccount:{emailid}: An email address that represents a service account. For example, my-other-app@appspot.gserviceaccount.com.
	//  * group:{emailid}: An email address that represents a Google group. For example, admins@example.com.
	//  * domain:{domain}: A G Suite domain (primary, instead of alias) name that represents all the users of that domain. For example, google.com or example.com.
	Members pulumi.StringArrayInput
	// The name of the resource to manage IAM policies for.
	Name pulumi.StringInput
	// The role that should be applied. Only one `IamBinding` can be used per role.
	Role pulumi.StringInput
}

The set of arguments for constructing a BackupPlanIamBinding resource.

func (BackupPlanIamBindingArgs) ElementType added in v0.26.0

func (BackupPlanIamBindingArgs) ElementType() reflect.Type

type BackupPlanIamBindingInput added in v0.26.0

type BackupPlanIamBindingInput interface {
	pulumi.Input

	ToBackupPlanIamBindingOutput() BackupPlanIamBindingOutput
	ToBackupPlanIamBindingOutputWithContext(ctx context.Context) BackupPlanIamBindingOutput
}

type BackupPlanIamBindingOutput added in v0.26.0

type BackupPlanIamBindingOutput struct{ *pulumi.OutputState }

func (BackupPlanIamBindingOutput) Condition added in v0.26.0

An IAM Condition for a given binding. See https://cloud.google.com/iam/docs/conditions-overview for additional details.

func (BackupPlanIamBindingOutput) ElementType added in v0.26.0

func (BackupPlanIamBindingOutput) ElementType() reflect.Type

func (BackupPlanIamBindingOutput) Etag added in v0.26.0

The etag of the resource's IAM policy.

func (BackupPlanIamBindingOutput) Members added in v0.26.0

Specifies the principals requesting access for a Google Cloud resource. `members` can have the following values: * `allUsers`: A special identifier that represents anyone who is on the internet; with or without a Google account. * `allAuthenticatedUsers`: A special identifier that represents anyone who is authenticated with a Google account or a service account. Does not include identities that come from external identity providers (IdPs) through identity federation. * `user:{emailid}`: An email address that represents a specific Google account. For example, `alice@example.com` . * `serviceAccount:{emailid}`: An email address that represents a Google service account. For example, `my-other-app@appspot.gserviceaccount.com`. * `serviceAccount:{projectid}.svc.id.goog[{namespace}/{kubernetes-sa}]`: An identifier for a [Kubernetes service account](https://cloud.google.com/kubernetes-engine/docs/how-to/kubernetes-service-accounts). For example, `my-project.svc.id.goog[my-namespace/my-kubernetes-sa]`. * `group:{emailid}`: An email address that represents a Google group. For example, `admins@example.com`. * `domain:{domain}`: The G Suite domain (primary) that represents all the users of that domain. For example, `google.com` or `example.com`. * `deleted:user:{emailid}?uid={uniqueid}`: An email address (plus unique identifier) representing a user that has been recently deleted. For example, `alice@example.com?uid=123456789012345678901`. If the user is recovered, this value reverts to `user:{emailid}` and the recovered user retains the role in the binding. * `deleted:serviceAccount:{emailid}?uid={uniqueid}`: An email address (plus unique identifier) representing a service account that has been recently deleted. For example, `my-other-app@appspot.gserviceaccount.com?uid=123456789012345678901`. If the service account is undeleted, this value reverts to `serviceAccount:{emailid}` and the undeleted service account retains the role in the binding. * `deleted:group:{emailid}?uid={uniqueid}`: An email address (plus unique identifier) representing a Google group that has been recently deleted. For example, `admins@example.com?uid=123456789012345678901`. If the group is recovered, this value reverts to `group:{emailid}` and the recovered group retains the role in the binding.

func (BackupPlanIamBindingOutput) Name added in v0.26.0

The name of the resource to manage IAM policies for.

func (BackupPlanIamBindingOutput) Project added in v0.26.0

The project in which the resource belongs. If it is not provided, a default will be supplied.

func (BackupPlanIamBindingOutput) Role added in v0.26.0

Role that is assigned to the list of `members`, or principals. For example, `roles/viewer`, `roles/editor`, or `roles/owner`.

func (BackupPlanIamBindingOutput) ToBackupPlanIamBindingOutput added in v0.26.0

func (o BackupPlanIamBindingOutput) ToBackupPlanIamBindingOutput() BackupPlanIamBindingOutput

func (BackupPlanIamBindingOutput) ToBackupPlanIamBindingOutputWithContext added in v0.26.0

func (o BackupPlanIamBindingOutput) ToBackupPlanIamBindingOutputWithContext(ctx context.Context) BackupPlanIamBindingOutput

type BackupPlanIamBindingState added in v0.26.0

type BackupPlanIamBindingState struct {
}

func (BackupPlanIamBindingState) ElementType added in v0.26.0

func (BackupPlanIamBindingState) ElementType() reflect.Type

type BackupPlanIamMember added in v0.26.0

type BackupPlanIamMember struct {
	pulumi.CustomResourceState

	// An IAM Condition for a given binding. See https://cloud.google.com/iam/docs/conditions-overview for additional details.
	Condition iam.ConditionPtrOutput `pulumi:"condition"`
	// The etag of the resource's IAM policy.
	Etag pulumi.StringOutput `pulumi:"etag"`
	// Specifies the principals requesting access for a Google Cloud resource. `members` can have the following values: * `allUsers`: A special identifier that represents anyone who is on the internet; with or without a Google account. * `allAuthenticatedUsers`: A special identifier that represents anyone who is authenticated with a Google account or a service account. Does not include identities that come from external identity providers (IdPs) through identity federation. * `user:{emailid}`: An email address that represents a specific Google account. For example, `alice@example.com` . * `serviceAccount:{emailid}`: An email address that represents a Google service account. For example, `my-other-app@appspot.gserviceaccount.com`. * `serviceAccount:{projectid}.svc.id.goog[{namespace}/{kubernetes-sa}]`: An identifier for a [Kubernetes service account](https://cloud.google.com/kubernetes-engine/docs/how-to/kubernetes-service-accounts). For example, `my-project.svc.id.goog[my-namespace/my-kubernetes-sa]`. * `group:{emailid}`: An email address that represents a Google group. For example, `admins@example.com`. * `domain:{domain}`: The G Suite domain (primary) that represents all the users of that domain. For example, `google.com` or `example.com`. * `deleted:user:{emailid}?uid={uniqueid}`: An email address (plus unique identifier) representing a user that has been recently deleted. For example, `alice@example.com?uid=123456789012345678901`. If the user is recovered, this value reverts to `user:{emailid}` and the recovered user retains the role in the binding. * `deleted:serviceAccount:{emailid}?uid={uniqueid}`: An email address (plus unique identifier) representing a service account that has been recently deleted. For example, `my-other-app@appspot.gserviceaccount.com?uid=123456789012345678901`. If the service account is undeleted, this value reverts to `serviceAccount:{emailid}` and the undeleted service account retains the role in the binding. * `deleted:group:{emailid}?uid={uniqueid}`: An email address (plus unique identifier) representing a Google group that has been recently deleted. For example, `admins@example.com?uid=123456789012345678901`. If the group is recovered, this value reverts to `group:{emailid}` and the recovered group retains the role in the binding.
	Member pulumi.StringOutput `pulumi:"member"`
	// The name of the resource to manage IAM policies for.
	Name pulumi.StringOutput `pulumi:"name"`
	// The project in which the resource belongs. If it is not provided, a default will be supplied.
	Project pulumi.StringOutput `pulumi:"project"`
	// Role that is assigned to the list of `members`, or principals. For example, `roles/viewer`, `roles/editor`, or `roles/owner`.
	Role pulumi.StringOutput `pulumi:"role"`
}

Sets the access control policy on the specified resource. Replaces any existing policy. Can return `NOT_FOUND`, `INVALID_ARGUMENT`, and `PERMISSION_DENIED` errors.

func GetBackupPlanIamMember added in v0.26.0

func GetBackupPlanIamMember(ctx *pulumi.Context,
	name string, id pulumi.IDInput, state *BackupPlanIamMemberState, opts ...pulumi.ResourceOption) (*BackupPlanIamMember, error)

GetBackupPlanIamMember gets an existing BackupPlanIamMember resource's state with the given name, ID, and optional state properties that are used to uniquely qualify the lookup (nil if not required).

func NewBackupPlanIamMember added in v0.26.0

func NewBackupPlanIamMember(ctx *pulumi.Context,
	name string, args *BackupPlanIamMemberArgs, opts ...pulumi.ResourceOption) (*BackupPlanIamMember, error)

NewBackupPlanIamMember registers a new resource with the given unique name, arguments, and options.

func (*BackupPlanIamMember) ElementType added in v0.26.0

func (*BackupPlanIamMember) ElementType() reflect.Type

func (*BackupPlanIamMember) ToBackupPlanIamMemberOutput added in v0.26.0

func (i *BackupPlanIamMember) ToBackupPlanIamMemberOutput() BackupPlanIamMemberOutput

func (*BackupPlanIamMember) ToBackupPlanIamMemberOutputWithContext added in v0.26.0

func (i *BackupPlanIamMember) ToBackupPlanIamMemberOutputWithContext(ctx context.Context) BackupPlanIamMemberOutput

type BackupPlanIamMemberArgs added in v0.26.0

type BackupPlanIamMemberArgs struct {
	// An IAM Condition for a given binding.
	Condition iam.ConditionPtrInput
	// Identity that will be granted the privilege in role. The entry can have one of the following values:
	//
	//  * user:{emailid}: An email address that represents a specific Google account. For example, alice@gmail.com or joe@example.com.
	//  * serviceAccount:{emailid}: An email address that represents a service account. For example, my-other-app@appspot.gserviceaccount.com.
	//  * group:{emailid}: An email address that represents a Google group. For example, admins@example.com.
	//  * domain:{domain}: A G Suite domain (primary, instead of alias) name that represents all the users of that domain. For example, google.com or example.com.
	Member pulumi.StringInput
	// The name of the resource to manage IAM policies for.
	Name pulumi.StringInput
	// The role that should be applied.
	Role pulumi.StringInput
}

The set of arguments for constructing a BackupPlanIamMember resource.

func (BackupPlanIamMemberArgs) ElementType added in v0.26.0

func (BackupPlanIamMemberArgs) ElementType() reflect.Type

type BackupPlanIamMemberInput added in v0.26.0

type BackupPlanIamMemberInput interface {
	pulumi.Input

	ToBackupPlanIamMemberOutput() BackupPlanIamMemberOutput
	ToBackupPlanIamMemberOutputWithContext(ctx context.Context) BackupPlanIamMemberOutput
}

type BackupPlanIamMemberOutput added in v0.26.0

type BackupPlanIamMemberOutput struct{ *pulumi.OutputState }

func (BackupPlanIamMemberOutput) Condition added in v0.26.0

An IAM Condition for a given binding. See https://cloud.google.com/iam/docs/conditions-overview for additional details.

func (BackupPlanIamMemberOutput) ElementType added in v0.26.0

func (BackupPlanIamMemberOutput) ElementType() reflect.Type

func (BackupPlanIamMemberOutput) Etag added in v0.26.0

The etag of the resource's IAM policy.

func (BackupPlanIamMemberOutput) Member added in v0.26.0

Specifies the principals requesting access for a Google Cloud resource. `members` can have the following values: * `allUsers`: A special identifier that represents anyone who is on the internet; with or without a Google account. * `allAuthenticatedUsers`: A special identifier that represents anyone who is authenticated with a Google account or a service account. Does not include identities that come from external identity providers (IdPs) through identity federation. * `user:{emailid}`: An email address that represents a specific Google account. For example, `alice@example.com` . * `serviceAccount:{emailid}`: An email address that represents a Google service account. For example, `my-other-app@appspot.gserviceaccount.com`. * `serviceAccount:{projectid}.svc.id.goog[{namespace}/{kubernetes-sa}]`: An identifier for a [Kubernetes service account](https://cloud.google.com/kubernetes-engine/docs/how-to/kubernetes-service-accounts). For example, `my-project.svc.id.goog[my-namespace/my-kubernetes-sa]`. * `group:{emailid}`: An email address that represents a Google group. For example, `admins@example.com`. * `domain:{domain}`: The G Suite domain (primary) that represents all the users of that domain. For example, `google.com` or `example.com`. * `deleted:user:{emailid}?uid={uniqueid}`: An email address (plus unique identifier) representing a user that has been recently deleted. For example, `alice@example.com?uid=123456789012345678901`. If the user is recovered, this value reverts to `user:{emailid}` and the recovered user retains the role in the binding. * `deleted:serviceAccount:{emailid}?uid={uniqueid}`: An email address (plus unique identifier) representing a service account that has been recently deleted. For example, `my-other-app@appspot.gserviceaccount.com?uid=123456789012345678901`. If the service account is undeleted, this value reverts to `serviceAccount:{emailid}` and the undeleted service account retains the role in the binding. * `deleted:group:{emailid}?uid={uniqueid}`: An email address (plus unique identifier) representing a Google group that has been recently deleted. For example, `admins@example.com?uid=123456789012345678901`. If the group is recovered, this value reverts to `group:{emailid}` and the recovered group retains the role in the binding.

func (BackupPlanIamMemberOutput) Name added in v0.26.0

The name of the resource to manage IAM policies for.

func (BackupPlanIamMemberOutput) Project added in v0.26.0

The project in which the resource belongs. If it is not provided, a default will be supplied.

func (BackupPlanIamMemberOutput) Role added in v0.26.0

Role that is assigned to the list of `members`, or principals. For example, `roles/viewer`, `roles/editor`, or `roles/owner`.

func (BackupPlanIamMemberOutput) ToBackupPlanIamMemberOutput added in v0.26.0

func (o BackupPlanIamMemberOutput) ToBackupPlanIamMemberOutput() BackupPlanIamMemberOutput

func (BackupPlanIamMemberOutput) ToBackupPlanIamMemberOutputWithContext added in v0.26.0

func (o BackupPlanIamMemberOutput) ToBackupPlanIamMemberOutputWithContext(ctx context.Context) BackupPlanIamMemberOutput

type BackupPlanIamMemberState added in v0.26.0

type BackupPlanIamMemberState struct {
}

func (BackupPlanIamMemberState) ElementType added in v0.26.0

func (BackupPlanIamMemberState) ElementType() reflect.Type

type BackupPlanIamPolicy

type BackupPlanIamPolicy struct {
	pulumi.CustomResourceState

	// Specifies cloud audit logging configuration for this policy.
	AuditConfigs AuditConfigResponseArrayOutput `pulumi:"auditConfigs"`
	BackupPlanId pulumi.StringOutput            `pulumi:"backupPlanId"`
	// Associates a list of `members`, or principals, with a `role`. Optionally, may specify a `condition` that determines how and when the `bindings` are applied. Each of the `bindings` must contain at least one principal. The `bindings` in a `Policy` can refer to up to 1,500 principals; up to 250 of these principals can be Google groups. Each occurrence of a principal counts towards these limits. For example, if the `bindings` grant 50 different roles to `user:alice@example.com`, and not to any other principal, then you can add another 1,450 principals to the `bindings` in the `Policy`.
	Bindings BindingResponseArrayOutput `pulumi:"bindings"`
	// `etag` is used for optimistic concurrency control as a way to help prevent simultaneous updates of a policy from overwriting each other. It is strongly suggested that systems make use of the `etag` in the read-modify-write cycle to perform policy updates in order to avoid race conditions: An `etag` is returned in the response to `getIamPolicy`, and systems are expected to put that etag in the request to `setIamPolicy` to ensure that their change will be applied to the same version of the policy. **Important:** If you use IAM Conditions, you must include the `etag` field whenever you call `setIamPolicy`. If you omit this field, then IAM allows you to overwrite a version `3` policy with a version `1` policy, and all of the conditions in the version `3` policy are lost.
	Etag     pulumi.StringOutput `pulumi:"etag"`
	Location pulumi.StringOutput `pulumi:"location"`
	Project  pulumi.StringOutput `pulumi:"project"`
	// Specifies the format of the policy. Valid values are `0`, `1`, and `3`. Requests that specify an invalid value are rejected. Any operation that affects conditional role bindings must specify version `3`. This requirement applies to the following operations: * Getting a policy that includes a conditional role binding * Adding a conditional role binding to a policy * Changing a conditional role binding in a policy * Removing any role binding, with or without a condition, from a policy that includes conditions **Important:** If you use IAM Conditions, you must include the `etag` field whenever you call `setIamPolicy`. If you omit this field, then IAM allows you to overwrite a version `3` policy with a version `1` policy, and all of the conditions in the version `3` policy are lost. If a policy does not include any conditions, operations on that policy may specify any valid version or leave the field unset. To learn which resources support conditions in their IAM policies, see the [IAM documentation](https://cloud.google.com/iam/help/conditions/resource-policies).
	Version pulumi.IntOutput `pulumi:"version"`
}

Sets the access control policy on the specified resource. Replaces any existing policy. Can return `NOT_FOUND`, `INVALID_ARGUMENT`, and `PERMISSION_DENIED` errors. Note - this resource's API doesn't support deletion. When deleted, the resource will persist on Google Cloud even though it will be deleted from Pulumi state.

func GetBackupPlanIamPolicy

func GetBackupPlanIamPolicy(ctx *pulumi.Context,
	name string, id pulumi.IDInput, state *BackupPlanIamPolicyState, opts ...pulumi.ResourceOption) (*BackupPlanIamPolicy, error)

GetBackupPlanIamPolicy gets an existing BackupPlanIamPolicy resource's state with the given name, ID, and optional state properties that are used to uniquely qualify the lookup (nil if not required).

func NewBackupPlanIamPolicy

func NewBackupPlanIamPolicy(ctx *pulumi.Context,
	name string, args *BackupPlanIamPolicyArgs, opts ...pulumi.ResourceOption) (*BackupPlanIamPolicy, error)

NewBackupPlanIamPolicy registers a new resource with the given unique name, arguments, and options.

func (*BackupPlanIamPolicy) ElementType

func (*BackupPlanIamPolicy) ElementType() reflect.Type

func (*BackupPlanIamPolicy) ToBackupPlanIamPolicyOutput

func (i *BackupPlanIamPolicy) ToBackupPlanIamPolicyOutput() BackupPlanIamPolicyOutput

func (*BackupPlanIamPolicy) ToBackupPlanIamPolicyOutputWithContext

func (i *BackupPlanIamPolicy) ToBackupPlanIamPolicyOutputWithContext(ctx context.Context) BackupPlanIamPolicyOutput

type BackupPlanIamPolicyArgs

type BackupPlanIamPolicyArgs struct {
	// Specifies cloud audit logging configuration for this policy.
	AuditConfigs AuditConfigArrayInput
	BackupPlanId pulumi.StringInput
	// Associates a list of `members`, or principals, with a `role`. Optionally, may specify a `condition` that determines how and when the `bindings` are applied. Each of the `bindings` must contain at least one principal. The `bindings` in a `Policy` can refer to up to 1,500 principals; up to 250 of these principals can be Google groups. Each occurrence of a principal counts towards these limits. For example, if the `bindings` grant 50 different roles to `user:alice@example.com`, and not to any other principal, then you can add another 1,450 principals to the `bindings` in the `Policy`.
	Bindings BindingArrayInput
	// `etag` is used for optimistic concurrency control as a way to help prevent simultaneous updates of a policy from overwriting each other. It is strongly suggested that systems make use of the `etag` in the read-modify-write cycle to perform policy updates in order to avoid race conditions: An `etag` is returned in the response to `getIamPolicy`, and systems are expected to put that etag in the request to `setIamPolicy` to ensure that their change will be applied to the same version of the policy. **Important:** If you use IAM Conditions, you must include the `etag` field whenever you call `setIamPolicy`. If you omit this field, then IAM allows you to overwrite a version `3` policy with a version `1` policy, and all of the conditions in the version `3` policy are lost.
	Etag     pulumi.StringPtrInput
	Location pulumi.StringPtrInput
	Project  pulumi.StringPtrInput
	// OPTIONAL: A FieldMask specifying which fields of the policy to modify. Only the fields in the mask will be modified. If no mask is provided, the following default mask is used: `paths: "bindings, etag"`
	UpdateMask pulumi.StringPtrInput
	// Specifies the format of the policy. Valid values are `0`, `1`, and `3`. Requests that specify an invalid value are rejected. Any operation that affects conditional role bindings must specify version `3`. This requirement applies to the following operations: * Getting a policy that includes a conditional role binding * Adding a conditional role binding to a policy * Changing a conditional role binding in a policy * Removing any role binding, with or without a condition, from a policy that includes conditions **Important:** If you use IAM Conditions, you must include the `etag` field whenever you call `setIamPolicy`. If you omit this field, then IAM allows you to overwrite a version `3` policy with a version `1` policy, and all of the conditions in the version `3` policy are lost. If a policy does not include any conditions, operations on that policy may specify any valid version or leave the field unset. To learn which resources support conditions in their IAM policies, see the [IAM documentation](https://cloud.google.com/iam/help/conditions/resource-policies).
	Version pulumi.IntPtrInput
}

The set of arguments for constructing a BackupPlanIamPolicy resource.

func (BackupPlanIamPolicyArgs) ElementType

func (BackupPlanIamPolicyArgs) ElementType() reflect.Type

type BackupPlanIamPolicyInput

type BackupPlanIamPolicyInput interface {
	pulumi.Input

	ToBackupPlanIamPolicyOutput() BackupPlanIamPolicyOutput
	ToBackupPlanIamPolicyOutputWithContext(ctx context.Context) BackupPlanIamPolicyOutput
}

type BackupPlanIamPolicyOutput

type BackupPlanIamPolicyOutput struct{ *pulumi.OutputState }

func (BackupPlanIamPolicyOutput) AuditConfigs added in v0.19.0

Specifies cloud audit logging configuration for this policy.

func (BackupPlanIamPolicyOutput) BackupPlanId added in v0.21.0

func (BackupPlanIamPolicyOutput) Bindings added in v0.19.0

Associates a list of `members`, or principals, with a `role`. Optionally, may specify a `condition` that determines how and when the `bindings` are applied. Each of the `bindings` must contain at least one principal. The `bindings` in a `Policy` can refer to up to 1,500 principals; up to 250 of these principals can be Google groups. Each occurrence of a principal counts towards these limits. For example, if the `bindings` grant 50 different roles to `user:alice@example.com`, and not to any other principal, then you can add another 1,450 principals to the `bindings` in the `Policy`.

func (BackupPlanIamPolicyOutput) ElementType

func (BackupPlanIamPolicyOutput) ElementType() reflect.Type

func (BackupPlanIamPolicyOutput) Etag added in v0.19.0

`etag` is used for optimistic concurrency control as a way to help prevent simultaneous updates of a policy from overwriting each other. It is strongly suggested that systems make use of the `etag` in the read-modify-write cycle to perform policy updates in order to avoid race conditions: An `etag` is returned in the response to `getIamPolicy`, and systems are expected to put that etag in the request to `setIamPolicy` to ensure that their change will be applied to the same version of the policy. **Important:** If you use IAM Conditions, you must include the `etag` field whenever you call `setIamPolicy`. If you omit this field, then IAM allows you to overwrite a version `3` policy with a version `1` policy, and all of the conditions in the version `3` policy are lost.

func (BackupPlanIamPolicyOutput) Location added in v0.21.0

func (BackupPlanIamPolicyOutput) Project added in v0.21.0

func (BackupPlanIamPolicyOutput) ToBackupPlanIamPolicyOutput

func (o BackupPlanIamPolicyOutput) ToBackupPlanIamPolicyOutput() BackupPlanIamPolicyOutput

func (BackupPlanIamPolicyOutput) ToBackupPlanIamPolicyOutputWithContext

func (o BackupPlanIamPolicyOutput) ToBackupPlanIamPolicyOutputWithContext(ctx context.Context) BackupPlanIamPolicyOutput

func (BackupPlanIamPolicyOutput) Version added in v0.19.0

Specifies the format of the policy. Valid values are `0`, `1`, and `3`. Requests that specify an invalid value are rejected. Any operation that affects conditional role bindings must specify version `3`. This requirement applies to the following operations: * Getting a policy that includes a conditional role binding * Adding a conditional role binding to a policy * Changing a conditional role binding in a policy * Removing any role binding, with or without a condition, from a policy that includes conditions **Important:** If you use IAM Conditions, you must include the `etag` field whenever you call `setIamPolicy`. If you omit this field, then IAM allows you to overwrite a version `3` policy with a version `1` policy, and all of the conditions in the version `3` policy are lost. If a policy does not include any conditions, operations on that policy may specify any valid version or leave the field unset. To learn which resources support conditions in their IAM policies, see the [IAM documentation](https://cloud.google.com/iam/help/conditions/resource-policies).

type BackupPlanIamPolicyState

type BackupPlanIamPolicyState struct {
}

func (BackupPlanIamPolicyState) ElementType

func (BackupPlanIamPolicyState) ElementType() reflect.Type

type BackupPlanInput

type BackupPlanInput interface {
	pulumi.Input

	ToBackupPlanOutput() BackupPlanOutput
	ToBackupPlanOutputWithContext(ctx context.Context) BackupPlanOutput
}

type BackupPlanOutput

type BackupPlanOutput struct{ *pulumi.OutputState }

func (BackupPlanOutput) BackupConfig added in v0.19.0

Optional. Defines the configuration of Backups created via this BackupPlan.

func (BackupPlanOutput) BackupPlanId added in v0.21.0

func (o BackupPlanOutput) BackupPlanId() pulumi.StringOutput

Required. The client-provided short name for the BackupPlan resource. This name must: - be between 1 and 63 characters long (inclusive) - consist of only lower-case ASCII letters, numbers, and dashes - start with a lower-case letter - end with a lower-case letter or number - be unique within the set of BackupPlans in this location

func (BackupPlanOutput) BackupSchedule added in v0.19.0

func (o BackupPlanOutput) BackupSchedule() ScheduleResponseOutput

Optional. Defines a schedule for automatic Backup creation via this BackupPlan.

func (BackupPlanOutput) Cluster added in v0.19.0

func (o BackupPlanOutput) Cluster() pulumi.StringOutput

Immutable. The source cluster from which Backups will be created via this BackupPlan. Valid formats: - `projects/*/locations/*/clusters/*` - `projects/*/zones/*/clusters/*`

func (BackupPlanOutput) CreateTime added in v0.19.0

func (o BackupPlanOutput) CreateTime() pulumi.StringOutput

The timestamp when this BackupPlan resource was created.

func (BackupPlanOutput) Deactivated added in v0.19.0

func (o BackupPlanOutput) Deactivated() pulumi.BoolOutput

Optional. This flag indicates whether this BackupPlan has been deactivated. Setting this field to True locks the BackupPlan such that no further updates will be allowed (except deletes), including the deactivated field itself. It also prevents any new Backups from being created via this BackupPlan (including scheduled Backups). Default: False

func (BackupPlanOutput) Description added in v0.19.0

func (o BackupPlanOutput) Description() pulumi.StringOutput

Optional. User specified descriptive string for this BackupPlan.

func (BackupPlanOutput) ElementType

func (BackupPlanOutput) ElementType() reflect.Type

func (BackupPlanOutput) Etag added in v0.19.0

`etag` is used for optimistic concurrency control as a way to help prevent simultaneous updates of a backup plan from overwriting each other. It is strongly suggested that systems make use of the 'etag' in the read-modify-write cycle to perform BackupPlan updates in order to avoid race conditions: An `etag` is returned in the response to `GetBackupPlan`, and systems are expected to put that etag in the request to `UpdateBackupPlan` or `DeleteBackupPlan` to ensure that their change will be applied to the same version of the resource.

func (BackupPlanOutput) Labels added in v0.19.0

Optional. A set of custom labels supplied by user.

func (BackupPlanOutput) Location added in v0.21.0

func (o BackupPlanOutput) Location() pulumi.StringOutput

func (BackupPlanOutput) Name added in v0.19.0

The full name of the BackupPlan resource. Format: `projects/*/locations/*/backupPlans/*`

func (BackupPlanOutput) Project added in v0.21.0

func (o BackupPlanOutput) Project() pulumi.StringOutput

func (BackupPlanOutput) ProtectedPodCount added in v0.19.0

func (o BackupPlanOutput) ProtectedPodCount() pulumi.IntOutput

The number of Kubernetes Pods backed up in the last successful Backup created via this BackupPlan.

func (BackupPlanOutput) RetentionPolicy added in v0.19.0

func (o BackupPlanOutput) RetentionPolicy() RetentionPolicyResponseOutput

Optional. RetentionPolicy governs lifecycle of Backups created under this plan.

func (BackupPlanOutput) State added in v0.32.0

State of the BackupPlan. This State field reflects the various stages a BackupPlan can be in during the Create operation. It will be set to "DEACTIVATED" if the BackupPlan is deactivated on an Update

func (BackupPlanOutput) StateReason added in v0.32.0

func (o BackupPlanOutput) StateReason() pulumi.StringOutput

Human-readable description of why BackupPlan is in the current `state`

func (BackupPlanOutput) ToBackupPlanOutput

func (o BackupPlanOutput) ToBackupPlanOutput() BackupPlanOutput

func (BackupPlanOutput) ToBackupPlanOutputWithContext

func (o BackupPlanOutput) ToBackupPlanOutputWithContext(ctx context.Context) BackupPlanOutput

func (BackupPlanOutput) Uid added in v0.19.0

Server generated global unique identifier of [UUID](https://en.wikipedia.org/wiki/Universally_unique_identifier) format.

func (BackupPlanOutput) UpdateTime added in v0.19.0

func (o BackupPlanOutput) UpdateTime() pulumi.StringOutput

The timestamp when this BackupPlan resource was last updated.

type BackupPlanState

type BackupPlanState struct {
}

func (BackupPlanState) ElementType

func (BackupPlanState) ElementType() reflect.Type

type BackupState

type BackupState struct {
}

func (BackupState) ElementType

func (BackupState) ElementType() reflect.Type

type Binding

type Binding struct {
	// The condition that is associated with this binding. If the condition evaluates to `true`, then this binding applies to the current request. If the condition evaluates to `false`, then this binding does not apply to the current request. However, a different role binding might grant the same role to one or more of the principals in this binding. To learn which resources support conditions in their IAM policies, see the [IAM documentation](https://cloud.google.com/iam/help/conditions/resource-policies).
	Condition *Expr `pulumi:"condition"`
	// Specifies the principals requesting access for a Google Cloud resource. `members` can have the following values: * `allUsers`: A special identifier that represents anyone who is on the internet; with or without a Google account. * `allAuthenticatedUsers`: A special identifier that represents anyone who is authenticated with a Google account or a service account. Does not include identities that come from external identity providers (IdPs) through identity federation. * `user:{emailid}`: An email address that represents a specific Google account. For example, `alice@example.com` . * `serviceAccount:{emailid}`: An email address that represents a Google service account. For example, `my-other-app@appspot.gserviceaccount.com`. * `serviceAccount:{projectid}.svc.id.goog[{namespace}/{kubernetes-sa}]`: An identifier for a [Kubernetes service account](https://cloud.google.com/kubernetes-engine/docs/how-to/kubernetes-service-accounts). For example, `my-project.svc.id.goog[my-namespace/my-kubernetes-sa]`. * `group:{emailid}`: An email address that represents a Google group. For example, `admins@example.com`. * `domain:{domain}`: The G Suite domain (primary) that represents all the users of that domain. For example, `google.com` or `example.com`. * `deleted:user:{emailid}?uid={uniqueid}`: An email address (plus unique identifier) representing a user that has been recently deleted. For example, `alice@example.com?uid=123456789012345678901`. If the user is recovered, this value reverts to `user:{emailid}` and the recovered user retains the role in the binding. * `deleted:serviceAccount:{emailid}?uid={uniqueid}`: An email address (plus unique identifier) representing a service account that has been recently deleted. For example, `my-other-app@appspot.gserviceaccount.com?uid=123456789012345678901`. If the service account is undeleted, this value reverts to `serviceAccount:{emailid}` and the undeleted service account retains the role in the binding. * `deleted:group:{emailid}?uid={uniqueid}`: An email address (plus unique identifier) representing a Google group that has been recently deleted. For example, `admins@example.com?uid=123456789012345678901`. If the group is recovered, this value reverts to `group:{emailid}` and the recovered group retains the role in the binding.
	Members []string `pulumi:"members"`
	// Role that is assigned to the list of `members`, or principals. For example, `roles/viewer`, `roles/editor`, or `roles/owner`.
	Role *string `pulumi:"role"`
}

Associates `members`, or principals, with a `role`.

type BindingArgs

type BindingArgs struct {
	// The condition that is associated with this binding. If the condition evaluates to `true`, then this binding applies to the current request. If the condition evaluates to `false`, then this binding does not apply to the current request. However, a different role binding might grant the same role to one or more of the principals in this binding. To learn which resources support conditions in their IAM policies, see the [IAM documentation](https://cloud.google.com/iam/help/conditions/resource-policies).
	Condition ExprPtrInput `pulumi:"condition"`
	// Specifies the principals requesting access for a Google Cloud resource. `members` can have the following values: * `allUsers`: A special identifier that represents anyone who is on the internet; with or without a Google account. * `allAuthenticatedUsers`: A special identifier that represents anyone who is authenticated with a Google account or a service account. Does not include identities that come from external identity providers (IdPs) through identity federation. * `user:{emailid}`: An email address that represents a specific Google account. For example, `alice@example.com` . * `serviceAccount:{emailid}`: An email address that represents a Google service account. For example, `my-other-app@appspot.gserviceaccount.com`. * `serviceAccount:{projectid}.svc.id.goog[{namespace}/{kubernetes-sa}]`: An identifier for a [Kubernetes service account](https://cloud.google.com/kubernetes-engine/docs/how-to/kubernetes-service-accounts). For example, `my-project.svc.id.goog[my-namespace/my-kubernetes-sa]`. * `group:{emailid}`: An email address that represents a Google group. For example, `admins@example.com`. * `domain:{domain}`: The G Suite domain (primary) that represents all the users of that domain. For example, `google.com` or `example.com`. * `deleted:user:{emailid}?uid={uniqueid}`: An email address (plus unique identifier) representing a user that has been recently deleted. For example, `alice@example.com?uid=123456789012345678901`. If the user is recovered, this value reverts to `user:{emailid}` and the recovered user retains the role in the binding. * `deleted:serviceAccount:{emailid}?uid={uniqueid}`: An email address (plus unique identifier) representing a service account that has been recently deleted. For example, `my-other-app@appspot.gserviceaccount.com?uid=123456789012345678901`. If the service account is undeleted, this value reverts to `serviceAccount:{emailid}` and the undeleted service account retains the role in the binding. * `deleted:group:{emailid}?uid={uniqueid}`: An email address (plus unique identifier) representing a Google group that has been recently deleted. For example, `admins@example.com?uid=123456789012345678901`. If the group is recovered, this value reverts to `group:{emailid}` and the recovered group retains the role in the binding.
	Members pulumi.StringArrayInput `pulumi:"members"`
	// Role that is assigned to the list of `members`, or principals. For example, `roles/viewer`, `roles/editor`, or `roles/owner`.
	Role pulumi.StringPtrInput `pulumi:"role"`
}

Associates `members`, or principals, with a `role`.

func (BindingArgs) ElementType

func (BindingArgs) ElementType() reflect.Type

func (BindingArgs) ToBindingOutput

func (i BindingArgs) ToBindingOutput() BindingOutput

func (BindingArgs) ToBindingOutputWithContext

func (i BindingArgs) ToBindingOutputWithContext(ctx context.Context) BindingOutput

type BindingArray

type BindingArray []BindingInput

func (BindingArray) ElementType

func (BindingArray) ElementType() reflect.Type

func (BindingArray) ToBindingArrayOutput

func (i BindingArray) ToBindingArrayOutput() BindingArrayOutput

func (BindingArray) ToBindingArrayOutputWithContext

func (i BindingArray) ToBindingArrayOutputWithContext(ctx context.Context) BindingArrayOutput

type BindingArrayInput

type BindingArrayInput interface {
	pulumi.Input

	ToBindingArrayOutput() BindingArrayOutput
	ToBindingArrayOutputWithContext(context.Context) BindingArrayOutput
}

BindingArrayInput is an input type that accepts BindingArray and BindingArrayOutput values. You can construct a concrete instance of `BindingArrayInput` via:

BindingArray{ BindingArgs{...} }

type BindingArrayOutput

type BindingArrayOutput struct{ *pulumi.OutputState }

func (BindingArrayOutput) ElementType

func (BindingArrayOutput) ElementType() reflect.Type

func (BindingArrayOutput) Index

func (BindingArrayOutput) ToBindingArrayOutput

func (o BindingArrayOutput) ToBindingArrayOutput() BindingArrayOutput

func (BindingArrayOutput) ToBindingArrayOutputWithContext

func (o BindingArrayOutput) ToBindingArrayOutputWithContext(ctx context.Context) BindingArrayOutput

type BindingInput

type BindingInput interface {
	pulumi.Input

	ToBindingOutput() BindingOutput
	ToBindingOutputWithContext(context.Context) BindingOutput
}

BindingInput is an input type that accepts BindingArgs and BindingOutput values. You can construct a concrete instance of `BindingInput` via:

BindingArgs{...}

type BindingOutput

type BindingOutput struct{ *pulumi.OutputState }

Associates `members`, or principals, with a `role`.

func (BindingOutput) Condition

func (o BindingOutput) Condition() ExprPtrOutput

The condition that is associated with this binding. If the condition evaluates to `true`, then this binding applies to the current request. If the condition evaluates to `false`, then this binding does not apply to the current request. However, a different role binding might grant the same role to one or more of the principals in this binding. To learn which resources support conditions in their IAM policies, see the [IAM documentation](https://cloud.google.com/iam/help/conditions/resource-policies).

func (BindingOutput) ElementType

func (BindingOutput) ElementType() reflect.Type

func (BindingOutput) Members

Specifies the principals requesting access for a Google Cloud resource. `members` can have the following values: * `allUsers`: A special identifier that represents anyone who is on the internet; with or without a Google account. * `allAuthenticatedUsers`: A special identifier that represents anyone who is authenticated with a Google account or a service account. Does not include identities that come from external identity providers (IdPs) through identity federation. * `user:{emailid}`: An email address that represents a specific Google account. For example, `alice@example.com` . * `serviceAccount:{emailid}`: An email address that represents a Google service account. For example, `my-other-app@appspot.gserviceaccount.com`. * `serviceAccount:{projectid}.svc.id.goog[{namespace}/{kubernetes-sa}]`: An identifier for a [Kubernetes service account](https://cloud.google.com/kubernetes-engine/docs/how-to/kubernetes-service-accounts). For example, `my-project.svc.id.goog[my-namespace/my-kubernetes-sa]`. * `group:{emailid}`: An email address that represents a Google group. For example, `admins@example.com`. * `domain:{domain}`: The G Suite domain (primary) that represents all the users of that domain. For example, `google.com` or `example.com`. * `deleted:user:{emailid}?uid={uniqueid}`: An email address (plus unique identifier) representing a user that has been recently deleted. For example, `alice@example.com?uid=123456789012345678901`. If the user is recovered, this value reverts to `user:{emailid}` and the recovered user retains the role in the binding. * `deleted:serviceAccount:{emailid}?uid={uniqueid}`: An email address (plus unique identifier) representing a service account that has been recently deleted. For example, `my-other-app@appspot.gserviceaccount.com?uid=123456789012345678901`. If the service account is undeleted, this value reverts to `serviceAccount:{emailid}` and the undeleted service account retains the role in the binding. * `deleted:group:{emailid}?uid={uniqueid}`: An email address (plus unique identifier) representing a Google group that has been recently deleted. For example, `admins@example.com?uid=123456789012345678901`. If the group is recovered, this value reverts to `group:{emailid}` and the recovered group retains the role in the binding.

func (BindingOutput) Role

Role that is assigned to the list of `members`, or principals. For example, `roles/viewer`, `roles/editor`, or `roles/owner`.

func (BindingOutput) ToBindingOutput

func (o BindingOutput) ToBindingOutput() BindingOutput

func (BindingOutput) ToBindingOutputWithContext

func (o BindingOutput) ToBindingOutputWithContext(ctx context.Context) BindingOutput

type BindingResponse

type BindingResponse struct {
	// The condition that is associated with this binding. If the condition evaluates to `true`, then this binding applies to the current request. If the condition evaluates to `false`, then this binding does not apply to the current request. However, a different role binding might grant the same role to one or more of the principals in this binding. To learn which resources support conditions in their IAM policies, see the [IAM documentation](https://cloud.google.com/iam/help/conditions/resource-policies).
	Condition ExprResponse `pulumi:"condition"`
	// Specifies the principals requesting access for a Google Cloud resource. `members` can have the following values: * `allUsers`: A special identifier that represents anyone who is on the internet; with or without a Google account. * `allAuthenticatedUsers`: A special identifier that represents anyone who is authenticated with a Google account or a service account. Does not include identities that come from external identity providers (IdPs) through identity federation. * `user:{emailid}`: An email address that represents a specific Google account. For example, `alice@example.com` . * `serviceAccount:{emailid}`: An email address that represents a Google service account. For example, `my-other-app@appspot.gserviceaccount.com`. * `serviceAccount:{projectid}.svc.id.goog[{namespace}/{kubernetes-sa}]`: An identifier for a [Kubernetes service account](https://cloud.google.com/kubernetes-engine/docs/how-to/kubernetes-service-accounts). For example, `my-project.svc.id.goog[my-namespace/my-kubernetes-sa]`. * `group:{emailid}`: An email address that represents a Google group. For example, `admins@example.com`. * `domain:{domain}`: The G Suite domain (primary) that represents all the users of that domain. For example, `google.com` or `example.com`. * `deleted:user:{emailid}?uid={uniqueid}`: An email address (plus unique identifier) representing a user that has been recently deleted. For example, `alice@example.com?uid=123456789012345678901`. If the user is recovered, this value reverts to `user:{emailid}` and the recovered user retains the role in the binding. * `deleted:serviceAccount:{emailid}?uid={uniqueid}`: An email address (plus unique identifier) representing a service account that has been recently deleted. For example, `my-other-app@appspot.gserviceaccount.com?uid=123456789012345678901`. If the service account is undeleted, this value reverts to `serviceAccount:{emailid}` and the undeleted service account retains the role in the binding. * `deleted:group:{emailid}?uid={uniqueid}`: An email address (plus unique identifier) representing a Google group that has been recently deleted. For example, `admins@example.com?uid=123456789012345678901`. If the group is recovered, this value reverts to `group:{emailid}` and the recovered group retains the role in the binding.
	Members []string `pulumi:"members"`
	// Role that is assigned to the list of `members`, or principals. For example, `roles/viewer`, `roles/editor`, or `roles/owner`.
	Role string `pulumi:"role"`
}

Associates `members`, or principals, with a `role`.

type BindingResponseArrayOutput

type BindingResponseArrayOutput struct{ *pulumi.OutputState }

func (BindingResponseArrayOutput) ElementType

func (BindingResponseArrayOutput) ElementType() reflect.Type

func (BindingResponseArrayOutput) Index

func (BindingResponseArrayOutput) ToBindingResponseArrayOutput

func (o BindingResponseArrayOutput) ToBindingResponseArrayOutput() BindingResponseArrayOutput

func (BindingResponseArrayOutput) ToBindingResponseArrayOutputWithContext

func (o BindingResponseArrayOutput) ToBindingResponseArrayOutputWithContext(ctx context.Context) BindingResponseArrayOutput

type BindingResponseOutput

type BindingResponseOutput struct{ *pulumi.OutputState }

Associates `members`, or principals, with a `role`.

func (BindingResponseOutput) Condition

The condition that is associated with this binding. If the condition evaluates to `true`, then this binding applies to the current request. If the condition evaluates to `false`, then this binding does not apply to the current request. However, a different role binding might grant the same role to one or more of the principals in this binding. To learn which resources support conditions in their IAM policies, see the [IAM documentation](https://cloud.google.com/iam/help/conditions/resource-policies).

func (BindingResponseOutput) ElementType

func (BindingResponseOutput) ElementType() reflect.Type

func (BindingResponseOutput) Members

Specifies the principals requesting access for a Google Cloud resource. `members` can have the following values: * `allUsers`: A special identifier that represents anyone who is on the internet; with or without a Google account. * `allAuthenticatedUsers`: A special identifier that represents anyone who is authenticated with a Google account or a service account. Does not include identities that come from external identity providers (IdPs) through identity federation. * `user:{emailid}`: An email address that represents a specific Google account. For example, `alice@example.com` . * `serviceAccount:{emailid}`: An email address that represents a Google service account. For example, `my-other-app@appspot.gserviceaccount.com`. * `serviceAccount:{projectid}.svc.id.goog[{namespace}/{kubernetes-sa}]`: An identifier for a [Kubernetes service account](https://cloud.google.com/kubernetes-engine/docs/how-to/kubernetes-service-accounts). For example, `my-project.svc.id.goog[my-namespace/my-kubernetes-sa]`. * `group:{emailid}`: An email address that represents a Google group. For example, `admins@example.com`. * `domain:{domain}`: The G Suite domain (primary) that represents all the users of that domain. For example, `google.com` or `example.com`. * `deleted:user:{emailid}?uid={uniqueid}`: An email address (plus unique identifier) representing a user that has been recently deleted. For example, `alice@example.com?uid=123456789012345678901`. If the user is recovered, this value reverts to `user:{emailid}` and the recovered user retains the role in the binding. * `deleted:serviceAccount:{emailid}?uid={uniqueid}`: An email address (plus unique identifier) representing a service account that has been recently deleted. For example, `my-other-app@appspot.gserviceaccount.com?uid=123456789012345678901`. If the service account is undeleted, this value reverts to `serviceAccount:{emailid}` and the undeleted service account retains the role in the binding. * `deleted:group:{emailid}?uid={uniqueid}`: An email address (plus unique identifier) representing a Google group that has been recently deleted. For example, `admins@example.com?uid=123456789012345678901`. If the group is recovered, this value reverts to `group:{emailid}` and the recovered group retains the role in the binding.

func (BindingResponseOutput) Role

Role that is assigned to the list of `members`, or principals. For example, `roles/viewer`, `roles/editor`, or `roles/owner`.

func (BindingResponseOutput) ToBindingResponseOutput

func (o BindingResponseOutput) ToBindingResponseOutput() BindingResponseOutput

func (BindingResponseOutput) ToBindingResponseOutputWithContext

func (o BindingResponseOutput) ToBindingResponseOutputWithContext(ctx context.Context) BindingResponseOutput

type ClusterMetadataResponse

type ClusterMetadataResponse struct {
	// Anthos version
	AnthosVersion string `pulumi:"anthosVersion"`
	// A list of the Backup for GKE CRD versions found in the cluster.
	BackupCrdVersions map[string]string `pulumi:"backupCrdVersions"`
	// The source cluster from which this Backup was created. Valid formats: - `projects/*/locations/*/clusters/*` - `projects/*/zones/*/clusters/*` This is inherited from the parent BackupPlan's cluster field.
	Cluster string `pulumi:"cluster"`
	// GKE version
	GkeVersion string `pulumi:"gkeVersion"`
	// The Kubernetes server version of the source cluster.
	K8sVersion string `pulumi:"k8sVersion"`
}

Information about the GKE cluster from which this Backup was created.

type ClusterMetadataResponseOutput

type ClusterMetadataResponseOutput struct{ *pulumi.OutputState }

Information about the GKE cluster from which this Backup was created.

func (ClusterMetadataResponseOutput) AnthosVersion

Anthos version

func (ClusterMetadataResponseOutput) BackupCrdVersions

A list of the Backup for GKE CRD versions found in the cluster.

func (ClusterMetadataResponseOutput) Cluster

The source cluster from which this Backup was created. Valid formats: - `projects/*/locations/*/clusters/*` - `projects/*/zones/*/clusters/*` This is inherited from the parent BackupPlan's cluster field.

func (ClusterMetadataResponseOutput) ElementType

func (ClusterMetadataResponseOutput) GkeVersion

GKE version

func (ClusterMetadataResponseOutput) K8sVersion

The Kubernetes server version of the source cluster.

func (ClusterMetadataResponseOutput) ToClusterMetadataResponseOutput

func (o ClusterMetadataResponseOutput) ToClusterMetadataResponseOutput() ClusterMetadataResponseOutput

func (ClusterMetadataResponseOutput) ToClusterMetadataResponseOutputWithContext

func (o ClusterMetadataResponseOutput) ToClusterMetadataResponseOutputWithContext(ctx context.Context) ClusterMetadataResponseOutput

type ClusterResourceRestoreScope

type ClusterResourceRestoreScope struct {
	// Optional. If True, all valid cluster-scoped resources will be restored. Mutually exclusive to any other field in the message.
	AllGroupKinds *bool `pulumi:"allGroupKinds"`
	// Optional. A list of cluster-scoped resource group kinds to NOT restore from the backup. If specified, all valid cluster-scoped resources will be restored except for those specified in the list. Mutually exclusive to any other field in the message.
	ExcludedGroupKinds []GroupKind `pulumi:"excludedGroupKinds"`
	// Optional. If True, no cluster-scoped resources will be restored. This has the same restore scope as if the message is not defined. Mutually exclusive to any other field in the message.
	NoGroupKinds *bool `pulumi:"noGroupKinds"`
	// Optional. A list of cluster-scoped resource group kinds to restore from the backup. If specified, only the selected resources will be restored. Mutually exclusive to any other field in the message.
	SelectedGroupKinds []GroupKind `pulumi:"selectedGroupKinds"`
}

Defines the scope of cluster-scoped resources to restore. Some group kinds are not reasonable choices for a restore, and will cause an error if selected here. Any scope selection that would restore "all valid" resources automatically excludes these group kinds. - gkebackup.gke.io/BackupJob - gkebackup.gke.io/RestoreJob - metrics.k8s.io/NodeMetrics - migration.k8s.io/StorageState - migration.k8s.io/StorageVersionMigration - Node - snapshot.storage.k8s.io/VolumeSnapshotContent - storage.k8s.io/CSINode Some group kinds are driven by restore configuration elsewhere, and will cause an error if selected here. - Namespace - PersistentVolume

type ClusterResourceRestoreScopeArgs

type ClusterResourceRestoreScopeArgs struct {
	// Optional. If True, all valid cluster-scoped resources will be restored. Mutually exclusive to any other field in the message.
	AllGroupKinds pulumi.BoolPtrInput `pulumi:"allGroupKinds"`
	// Optional. A list of cluster-scoped resource group kinds to NOT restore from the backup. If specified, all valid cluster-scoped resources will be restored except for those specified in the list. Mutually exclusive to any other field in the message.
	ExcludedGroupKinds GroupKindArrayInput `pulumi:"excludedGroupKinds"`
	// Optional. If True, no cluster-scoped resources will be restored. This has the same restore scope as if the message is not defined. Mutually exclusive to any other field in the message.
	NoGroupKinds pulumi.BoolPtrInput `pulumi:"noGroupKinds"`
	// Optional. A list of cluster-scoped resource group kinds to restore from the backup. If specified, only the selected resources will be restored. Mutually exclusive to any other field in the message.
	SelectedGroupKinds GroupKindArrayInput `pulumi:"selectedGroupKinds"`
}

Defines the scope of cluster-scoped resources to restore. Some group kinds are not reasonable choices for a restore, and will cause an error if selected here. Any scope selection that would restore "all valid" resources automatically excludes these group kinds. - gkebackup.gke.io/BackupJob - gkebackup.gke.io/RestoreJob - metrics.k8s.io/NodeMetrics - migration.k8s.io/StorageState - migration.k8s.io/StorageVersionMigration - Node - snapshot.storage.k8s.io/VolumeSnapshotContent - storage.k8s.io/CSINode Some group kinds are driven by restore configuration elsewhere, and will cause an error if selected here. - Namespace - PersistentVolume

func (ClusterResourceRestoreScopeArgs) ElementType

func (ClusterResourceRestoreScopeArgs) ToClusterResourceRestoreScopeOutput

func (i ClusterResourceRestoreScopeArgs) ToClusterResourceRestoreScopeOutput() ClusterResourceRestoreScopeOutput

func (ClusterResourceRestoreScopeArgs) ToClusterResourceRestoreScopeOutputWithContext

func (i ClusterResourceRestoreScopeArgs) ToClusterResourceRestoreScopeOutputWithContext(ctx context.Context) ClusterResourceRestoreScopeOutput

func (ClusterResourceRestoreScopeArgs) ToClusterResourceRestoreScopePtrOutput

func (i ClusterResourceRestoreScopeArgs) ToClusterResourceRestoreScopePtrOutput() ClusterResourceRestoreScopePtrOutput

func (ClusterResourceRestoreScopeArgs) ToClusterResourceRestoreScopePtrOutputWithContext

func (i ClusterResourceRestoreScopeArgs) ToClusterResourceRestoreScopePtrOutputWithContext(ctx context.Context) ClusterResourceRestoreScopePtrOutput

type ClusterResourceRestoreScopeInput

type ClusterResourceRestoreScopeInput interface {
	pulumi.Input

	ToClusterResourceRestoreScopeOutput() ClusterResourceRestoreScopeOutput
	ToClusterResourceRestoreScopeOutputWithContext(context.Context) ClusterResourceRestoreScopeOutput
}

ClusterResourceRestoreScopeInput is an input type that accepts ClusterResourceRestoreScopeArgs and ClusterResourceRestoreScopeOutput values. You can construct a concrete instance of `ClusterResourceRestoreScopeInput` via:

ClusterResourceRestoreScopeArgs{...}

type ClusterResourceRestoreScopeOutput

type ClusterResourceRestoreScopeOutput struct{ *pulumi.OutputState }

Defines the scope of cluster-scoped resources to restore. Some group kinds are not reasonable choices for a restore, and will cause an error if selected here. Any scope selection that would restore "all valid" resources automatically excludes these group kinds. - gkebackup.gke.io/BackupJob - gkebackup.gke.io/RestoreJob - metrics.k8s.io/NodeMetrics - migration.k8s.io/StorageState - migration.k8s.io/StorageVersionMigration - Node - snapshot.storage.k8s.io/VolumeSnapshotContent - storage.k8s.io/CSINode Some group kinds are driven by restore configuration elsewhere, and will cause an error if selected here. - Namespace - PersistentVolume

func (ClusterResourceRestoreScopeOutput) AllGroupKinds added in v0.32.0

Optional. If True, all valid cluster-scoped resources will be restored. Mutually exclusive to any other field in the message.

func (ClusterResourceRestoreScopeOutput) ElementType

func (ClusterResourceRestoreScopeOutput) ExcludedGroupKinds added in v0.32.0

Optional. A list of cluster-scoped resource group kinds to NOT restore from the backup. If specified, all valid cluster-scoped resources will be restored except for those specified in the list. Mutually exclusive to any other field in the message.

func (ClusterResourceRestoreScopeOutput) NoGroupKinds added in v0.32.0

Optional. If True, no cluster-scoped resources will be restored. This has the same restore scope as if the message is not defined. Mutually exclusive to any other field in the message.

func (ClusterResourceRestoreScopeOutput) SelectedGroupKinds

Optional. A list of cluster-scoped resource group kinds to restore from the backup. If specified, only the selected resources will be restored. Mutually exclusive to any other field in the message.

func (ClusterResourceRestoreScopeOutput) ToClusterResourceRestoreScopeOutput

func (o ClusterResourceRestoreScopeOutput) ToClusterResourceRestoreScopeOutput() ClusterResourceRestoreScopeOutput

func (ClusterResourceRestoreScopeOutput) ToClusterResourceRestoreScopeOutputWithContext

func (o ClusterResourceRestoreScopeOutput) ToClusterResourceRestoreScopeOutputWithContext(ctx context.Context) ClusterResourceRestoreScopeOutput

func (ClusterResourceRestoreScopeOutput) ToClusterResourceRestoreScopePtrOutput

func (o ClusterResourceRestoreScopeOutput) ToClusterResourceRestoreScopePtrOutput() ClusterResourceRestoreScopePtrOutput

func (ClusterResourceRestoreScopeOutput) ToClusterResourceRestoreScopePtrOutputWithContext

func (o ClusterResourceRestoreScopeOutput) ToClusterResourceRestoreScopePtrOutputWithContext(ctx context.Context) ClusterResourceRestoreScopePtrOutput

type ClusterResourceRestoreScopePtrInput

type ClusterResourceRestoreScopePtrInput interface {
	pulumi.Input

	ToClusterResourceRestoreScopePtrOutput() ClusterResourceRestoreScopePtrOutput
	ToClusterResourceRestoreScopePtrOutputWithContext(context.Context) ClusterResourceRestoreScopePtrOutput
}

ClusterResourceRestoreScopePtrInput is an input type that accepts ClusterResourceRestoreScopeArgs, ClusterResourceRestoreScopePtr and ClusterResourceRestoreScopePtrOutput values. You can construct a concrete instance of `ClusterResourceRestoreScopePtrInput` via:

        ClusterResourceRestoreScopeArgs{...}

or:

        nil

type ClusterResourceRestoreScopePtrOutput

type ClusterResourceRestoreScopePtrOutput struct{ *pulumi.OutputState }

func (ClusterResourceRestoreScopePtrOutput) AllGroupKinds added in v0.32.0

Optional. If True, all valid cluster-scoped resources will be restored. Mutually exclusive to any other field in the message.

func (ClusterResourceRestoreScopePtrOutput) Elem

func (ClusterResourceRestoreScopePtrOutput) ElementType

func (ClusterResourceRestoreScopePtrOutput) ExcludedGroupKinds added in v0.32.0

Optional. A list of cluster-scoped resource group kinds to NOT restore from the backup. If specified, all valid cluster-scoped resources will be restored except for those specified in the list. Mutually exclusive to any other field in the message.

func (ClusterResourceRestoreScopePtrOutput) NoGroupKinds added in v0.32.0

Optional. If True, no cluster-scoped resources will be restored. This has the same restore scope as if the message is not defined. Mutually exclusive to any other field in the message.

func (ClusterResourceRestoreScopePtrOutput) SelectedGroupKinds

Optional. A list of cluster-scoped resource group kinds to restore from the backup. If specified, only the selected resources will be restored. Mutually exclusive to any other field in the message.

func (ClusterResourceRestoreScopePtrOutput) ToClusterResourceRestoreScopePtrOutput

func (o ClusterResourceRestoreScopePtrOutput) ToClusterResourceRestoreScopePtrOutput() ClusterResourceRestoreScopePtrOutput

func (ClusterResourceRestoreScopePtrOutput) ToClusterResourceRestoreScopePtrOutputWithContext

func (o ClusterResourceRestoreScopePtrOutput) ToClusterResourceRestoreScopePtrOutputWithContext(ctx context.Context) ClusterResourceRestoreScopePtrOutput

type ClusterResourceRestoreScopeResponse

type ClusterResourceRestoreScopeResponse struct {
	// Optional. If True, all valid cluster-scoped resources will be restored. Mutually exclusive to any other field in the message.
	AllGroupKinds bool `pulumi:"allGroupKinds"`
	// Optional. A list of cluster-scoped resource group kinds to NOT restore from the backup. If specified, all valid cluster-scoped resources will be restored except for those specified in the list. Mutually exclusive to any other field in the message.
	ExcludedGroupKinds []GroupKindResponse `pulumi:"excludedGroupKinds"`
	// Optional. If True, no cluster-scoped resources will be restored. This has the same restore scope as if the message is not defined. Mutually exclusive to any other field in the message.
	NoGroupKinds bool `pulumi:"noGroupKinds"`
	// Optional. A list of cluster-scoped resource group kinds to restore from the backup. If specified, only the selected resources will be restored. Mutually exclusive to any other field in the message.
	SelectedGroupKinds []GroupKindResponse `pulumi:"selectedGroupKinds"`
}

Defines the scope of cluster-scoped resources to restore. Some group kinds are not reasonable choices for a restore, and will cause an error if selected here. Any scope selection that would restore "all valid" resources automatically excludes these group kinds. - gkebackup.gke.io/BackupJob - gkebackup.gke.io/RestoreJob - metrics.k8s.io/NodeMetrics - migration.k8s.io/StorageState - migration.k8s.io/StorageVersionMigration - Node - snapshot.storage.k8s.io/VolumeSnapshotContent - storage.k8s.io/CSINode Some group kinds are driven by restore configuration elsewhere, and will cause an error if selected here. - Namespace - PersistentVolume

type ClusterResourceRestoreScopeResponseOutput

type ClusterResourceRestoreScopeResponseOutput struct{ *pulumi.OutputState }

Defines the scope of cluster-scoped resources to restore. Some group kinds are not reasonable choices for a restore, and will cause an error if selected here. Any scope selection that would restore "all valid" resources automatically excludes these group kinds. - gkebackup.gke.io/BackupJob - gkebackup.gke.io/RestoreJob - metrics.k8s.io/NodeMetrics - migration.k8s.io/StorageState - migration.k8s.io/StorageVersionMigration - Node - snapshot.storage.k8s.io/VolumeSnapshotContent - storage.k8s.io/CSINode Some group kinds are driven by restore configuration elsewhere, and will cause an error if selected here. - Namespace - PersistentVolume

func (ClusterResourceRestoreScopeResponseOutput) AllGroupKinds added in v0.32.0

Optional. If True, all valid cluster-scoped resources will be restored. Mutually exclusive to any other field in the message.

func (ClusterResourceRestoreScopeResponseOutput) ElementType

func (ClusterResourceRestoreScopeResponseOutput) ExcludedGroupKinds added in v0.32.0

Optional. A list of cluster-scoped resource group kinds to NOT restore from the backup. If specified, all valid cluster-scoped resources will be restored except for those specified in the list. Mutually exclusive to any other field in the message.

func (ClusterResourceRestoreScopeResponseOutput) NoGroupKinds added in v0.32.0

Optional. If True, no cluster-scoped resources will be restored. This has the same restore scope as if the message is not defined. Mutually exclusive to any other field in the message.

func (ClusterResourceRestoreScopeResponseOutput) SelectedGroupKinds

Optional. A list of cluster-scoped resource group kinds to restore from the backup. If specified, only the selected resources will be restored. Mutually exclusive to any other field in the message.

func (ClusterResourceRestoreScopeResponseOutput) ToClusterResourceRestoreScopeResponseOutput

func (o ClusterResourceRestoreScopeResponseOutput) ToClusterResourceRestoreScopeResponseOutput() ClusterResourceRestoreScopeResponseOutput

func (ClusterResourceRestoreScopeResponseOutput) ToClusterResourceRestoreScopeResponseOutputWithContext

func (o ClusterResourceRestoreScopeResponseOutput) ToClusterResourceRestoreScopeResponseOutputWithContext(ctx context.Context) ClusterResourceRestoreScopeResponseOutput

type EncryptionKey

type EncryptionKey struct {
	// Optional. Google Cloud KMS encryption key. Format: `projects/*/locations/*/keyRings/*/cryptoKeys/*`
	GcpKmsEncryptionKey *string `pulumi:"gcpKmsEncryptionKey"`
}

Defined a customer managed encryption key that will be used to encrypt Backup artifacts.

type EncryptionKeyArgs

type EncryptionKeyArgs struct {
	// Optional. Google Cloud KMS encryption key. Format: `projects/*/locations/*/keyRings/*/cryptoKeys/*`
	GcpKmsEncryptionKey pulumi.StringPtrInput `pulumi:"gcpKmsEncryptionKey"`
}

Defined a customer managed encryption key that will be used to encrypt Backup artifacts.

func (EncryptionKeyArgs) ElementType

func (EncryptionKeyArgs) ElementType() reflect.Type

func (EncryptionKeyArgs) ToEncryptionKeyOutput

func (i EncryptionKeyArgs) ToEncryptionKeyOutput() EncryptionKeyOutput

func (EncryptionKeyArgs) ToEncryptionKeyOutputWithContext

func (i EncryptionKeyArgs) ToEncryptionKeyOutputWithContext(ctx context.Context) EncryptionKeyOutput

func (EncryptionKeyArgs) ToEncryptionKeyPtrOutput

func (i EncryptionKeyArgs) ToEncryptionKeyPtrOutput() EncryptionKeyPtrOutput

func (EncryptionKeyArgs) ToEncryptionKeyPtrOutputWithContext

func (i EncryptionKeyArgs) ToEncryptionKeyPtrOutputWithContext(ctx context.Context) EncryptionKeyPtrOutput

type EncryptionKeyInput

type EncryptionKeyInput interface {
	pulumi.Input

	ToEncryptionKeyOutput() EncryptionKeyOutput
	ToEncryptionKeyOutputWithContext(context.Context) EncryptionKeyOutput
}

EncryptionKeyInput is an input type that accepts EncryptionKeyArgs and EncryptionKeyOutput values. You can construct a concrete instance of `EncryptionKeyInput` via:

EncryptionKeyArgs{...}

type EncryptionKeyOutput

type EncryptionKeyOutput struct{ *pulumi.OutputState }

Defined a customer managed encryption key that will be used to encrypt Backup artifacts.

func (EncryptionKeyOutput) ElementType

func (EncryptionKeyOutput) ElementType() reflect.Type

func (EncryptionKeyOutput) GcpKmsEncryptionKey

func (o EncryptionKeyOutput) GcpKmsEncryptionKey() pulumi.StringPtrOutput

Optional. Google Cloud KMS encryption key. Format: `projects/*/locations/*/keyRings/*/cryptoKeys/*`

func (EncryptionKeyOutput) ToEncryptionKeyOutput

func (o EncryptionKeyOutput) ToEncryptionKeyOutput() EncryptionKeyOutput

func (EncryptionKeyOutput) ToEncryptionKeyOutputWithContext

func (o EncryptionKeyOutput) ToEncryptionKeyOutputWithContext(ctx context.Context) EncryptionKeyOutput

func (EncryptionKeyOutput) ToEncryptionKeyPtrOutput

func (o EncryptionKeyOutput) ToEncryptionKeyPtrOutput() EncryptionKeyPtrOutput

func (EncryptionKeyOutput) ToEncryptionKeyPtrOutputWithContext

func (o EncryptionKeyOutput) ToEncryptionKeyPtrOutputWithContext(ctx context.Context) EncryptionKeyPtrOutput

type EncryptionKeyPtrInput

type EncryptionKeyPtrInput interface {
	pulumi.Input

	ToEncryptionKeyPtrOutput() EncryptionKeyPtrOutput
	ToEncryptionKeyPtrOutputWithContext(context.Context) EncryptionKeyPtrOutput
}

EncryptionKeyPtrInput is an input type that accepts EncryptionKeyArgs, EncryptionKeyPtr and EncryptionKeyPtrOutput values. You can construct a concrete instance of `EncryptionKeyPtrInput` via:

        EncryptionKeyArgs{...}

or:

        nil

type EncryptionKeyPtrOutput

type EncryptionKeyPtrOutput struct{ *pulumi.OutputState }

func (EncryptionKeyPtrOutput) Elem

func (EncryptionKeyPtrOutput) ElementType

func (EncryptionKeyPtrOutput) ElementType() reflect.Type

func (EncryptionKeyPtrOutput) GcpKmsEncryptionKey

func (o EncryptionKeyPtrOutput) GcpKmsEncryptionKey() pulumi.StringPtrOutput

Optional. Google Cloud KMS encryption key. Format: `projects/*/locations/*/keyRings/*/cryptoKeys/*`

func (EncryptionKeyPtrOutput) ToEncryptionKeyPtrOutput

func (o EncryptionKeyPtrOutput) ToEncryptionKeyPtrOutput() EncryptionKeyPtrOutput

func (EncryptionKeyPtrOutput) ToEncryptionKeyPtrOutputWithContext

func (o EncryptionKeyPtrOutput) ToEncryptionKeyPtrOutputWithContext(ctx context.Context) EncryptionKeyPtrOutput

type EncryptionKeyResponse

type EncryptionKeyResponse struct {
	// Optional. Google Cloud KMS encryption key. Format: `projects/*/locations/*/keyRings/*/cryptoKeys/*`
	GcpKmsEncryptionKey string `pulumi:"gcpKmsEncryptionKey"`
}

Defined a customer managed encryption key that will be used to encrypt Backup artifacts.

type EncryptionKeyResponseOutput

type EncryptionKeyResponseOutput struct{ *pulumi.OutputState }

Defined a customer managed encryption key that will be used to encrypt Backup artifacts.

func (EncryptionKeyResponseOutput) ElementType

func (EncryptionKeyResponseOutput) GcpKmsEncryptionKey

func (o EncryptionKeyResponseOutput) GcpKmsEncryptionKey() pulumi.StringOutput

Optional. Google Cloud KMS encryption key. Format: `projects/*/locations/*/keyRings/*/cryptoKeys/*`

func (EncryptionKeyResponseOutput) ToEncryptionKeyResponseOutput

func (o EncryptionKeyResponseOutput) ToEncryptionKeyResponseOutput() EncryptionKeyResponseOutput

func (EncryptionKeyResponseOutput) ToEncryptionKeyResponseOutputWithContext

func (o EncryptionKeyResponseOutput) ToEncryptionKeyResponseOutputWithContext(ctx context.Context) EncryptionKeyResponseOutput

type Expr

type Expr struct {
	// Optional. Description of the expression. This is a longer text which describes the expression, e.g. when hovered over it in a UI.
	Description *string `pulumi:"description"`
	// Textual representation of an expression in Common Expression Language syntax.
	Expression *string `pulumi:"expression"`
	// Optional. String indicating the location of the expression for error reporting, e.g. a file name and a position in the file.
	Location *string `pulumi:"location"`
	// Optional. Title for the expression, i.e. a short string describing its purpose. This can be used e.g. in UIs which allow to enter the expression.
	Title *string `pulumi:"title"`
}

Represents a textual expression in the Common Expression Language (CEL) syntax. CEL is a C-like expression language. The syntax and semantics of CEL are documented at https://github.com/google/cel-spec. Example (Comparison): title: "Summary size limit" description: "Determines if a summary is less than 100 chars" expression: "document.summary.size() < 100" Example (Equality): title: "Requestor is owner" description: "Determines if requestor is the document owner" expression: "document.owner == request.auth.claims.email" Example (Logic): title: "Public documents" description: "Determine whether the document should be publicly visible" expression: "document.type != 'private' && document.type != 'internal'" Example (Data Manipulation): title: "Notification string" description: "Create a notification string with a timestamp." expression: "'New message received at ' + string(document.create_time)" The exact variables and functions that may be referenced within an expression are determined by the service that evaluates it. See the service documentation for additional information.

type ExprArgs

type ExprArgs struct {
	// Optional. Description of the expression. This is a longer text which describes the expression, e.g. when hovered over it in a UI.
	Description pulumi.StringPtrInput `pulumi:"description"`
	// Textual representation of an expression in Common Expression Language syntax.
	Expression pulumi.StringPtrInput `pulumi:"expression"`
	// Optional. String indicating the location of the expression for error reporting, e.g. a file name and a position in the file.
	Location pulumi.StringPtrInput `pulumi:"location"`
	// Optional. Title for the expression, i.e. a short string describing its purpose. This can be used e.g. in UIs which allow to enter the expression.
	Title pulumi.StringPtrInput `pulumi:"title"`
}

Represents a textual expression in the Common Expression Language (CEL) syntax. CEL is a C-like expression language. The syntax and semantics of CEL are documented at https://github.com/google/cel-spec. Example (Comparison): title: "Summary size limit" description: "Determines if a summary is less than 100 chars" expression: "document.summary.size() < 100" Example (Equality): title: "Requestor is owner" description: "Determines if requestor is the document owner" expression: "document.owner == request.auth.claims.email" Example (Logic): title: "Public documents" description: "Determine whether the document should be publicly visible" expression: "document.type != 'private' && document.type != 'internal'" Example (Data Manipulation): title: "Notification string" description: "Create a notification string with a timestamp." expression: "'New message received at ' + string(document.create_time)" The exact variables and functions that may be referenced within an expression are determined by the service that evaluates it. See the service documentation for additional information.

func (ExprArgs) ElementType

func (ExprArgs) ElementType() reflect.Type

func (ExprArgs) ToExprOutput

func (i ExprArgs) ToExprOutput() ExprOutput

func (ExprArgs) ToExprOutputWithContext

func (i ExprArgs) ToExprOutputWithContext(ctx context.Context) ExprOutput

func (ExprArgs) ToExprPtrOutput

func (i ExprArgs) ToExprPtrOutput() ExprPtrOutput

func (ExprArgs) ToExprPtrOutputWithContext

func (i ExprArgs) ToExprPtrOutputWithContext(ctx context.Context) ExprPtrOutput

type ExprInput

type ExprInput interface {
	pulumi.Input

	ToExprOutput() ExprOutput
	ToExprOutputWithContext(context.Context) ExprOutput
}

ExprInput is an input type that accepts ExprArgs and ExprOutput values. You can construct a concrete instance of `ExprInput` via:

ExprArgs{...}

type ExprOutput

type ExprOutput struct{ *pulumi.OutputState }

Represents a textual expression in the Common Expression Language (CEL) syntax. CEL is a C-like expression language. The syntax and semantics of CEL are documented at https://github.com/google/cel-spec. Example (Comparison): title: "Summary size limit" description: "Determines if a summary is less than 100 chars" expression: "document.summary.size() < 100" Example (Equality): title: "Requestor is owner" description: "Determines if requestor is the document owner" expression: "document.owner == request.auth.claims.email" Example (Logic): title: "Public documents" description: "Determine whether the document should be publicly visible" expression: "document.type != 'private' && document.type != 'internal'" Example (Data Manipulation): title: "Notification string" description: "Create a notification string with a timestamp." expression: "'New message received at ' + string(document.create_time)" The exact variables and functions that may be referenced within an expression are determined by the service that evaluates it. See the service documentation for additional information.

func (ExprOutput) Description

func (o ExprOutput) Description() pulumi.StringPtrOutput

Optional. Description of the expression. This is a longer text which describes the expression, e.g. when hovered over it in a UI.

func (ExprOutput) ElementType

func (ExprOutput) ElementType() reflect.Type

func (ExprOutput) Expression

func (o ExprOutput) Expression() pulumi.StringPtrOutput

Textual representation of an expression in Common Expression Language syntax.

func (ExprOutput) Location

func (o ExprOutput) Location() pulumi.StringPtrOutput

Optional. String indicating the location of the expression for error reporting, e.g. a file name and a position in the file.

func (ExprOutput) Title

func (o ExprOutput) Title() pulumi.StringPtrOutput

Optional. Title for the expression, i.e. a short string describing its purpose. This can be used e.g. in UIs which allow to enter the expression.

func (ExprOutput) ToExprOutput

func (o ExprOutput) ToExprOutput() ExprOutput

func (ExprOutput) ToExprOutputWithContext

func (o ExprOutput) ToExprOutputWithContext(ctx context.Context) ExprOutput

func (ExprOutput) ToExprPtrOutput

func (o ExprOutput) ToExprPtrOutput() ExprPtrOutput

func (ExprOutput) ToExprPtrOutputWithContext

func (o ExprOutput) ToExprPtrOutputWithContext(ctx context.Context) ExprPtrOutput

type ExprPtrInput

type ExprPtrInput interface {
	pulumi.Input

	ToExprPtrOutput() ExprPtrOutput
	ToExprPtrOutputWithContext(context.Context) ExprPtrOutput
}

ExprPtrInput is an input type that accepts ExprArgs, ExprPtr and ExprPtrOutput values. You can construct a concrete instance of `ExprPtrInput` via:

        ExprArgs{...}

or:

        nil

func ExprPtr

func ExprPtr(v *ExprArgs) ExprPtrInput

type ExprPtrOutput

type ExprPtrOutput struct{ *pulumi.OutputState }

func (ExprPtrOutput) Description

func (o ExprPtrOutput) Description() pulumi.StringPtrOutput

Optional. Description of the expression. This is a longer text which describes the expression, e.g. when hovered over it in a UI.

func (ExprPtrOutput) Elem

func (o ExprPtrOutput) Elem() ExprOutput

func (ExprPtrOutput) ElementType

func (ExprPtrOutput) ElementType() reflect.Type

func (ExprPtrOutput) Expression

func (o ExprPtrOutput) Expression() pulumi.StringPtrOutput

Textual representation of an expression in Common Expression Language syntax.

func (ExprPtrOutput) Location

func (o ExprPtrOutput) Location() pulumi.StringPtrOutput

Optional. String indicating the location of the expression for error reporting, e.g. a file name and a position in the file.

func (ExprPtrOutput) Title

Optional. Title for the expression, i.e. a short string describing its purpose. This can be used e.g. in UIs which allow to enter the expression.

func (ExprPtrOutput) ToExprPtrOutput

func (o ExprPtrOutput) ToExprPtrOutput() ExprPtrOutput

func (ExprPtrOutput) ToExprPtrOutputWithContext

func (o ExprPtrOutput) ToExprPtrOutputWithContext(ctx context.Context) ExprPtrOutput

type ExprResponse

type ExprResponse struct {
	// Optional. Description of the expression. This is a longer text which describes the expression, e.g. when hovered over it in a UI.
	Description string `pulumi:"description"`
	// Textual representation of an expression in Common Expression Language syntax.
	Expression string `pulumi:"expression"`
	// Optional. String indicating the location of the expression for error reporting, e.g. a file name and a position in the file.
	Location string `pulumi:"location"`
	// Optional. Title for the expression, i.e. a short string describing its purpose. This can be used e.g. in UIs which allow to enter the expression.
	Title string `pulumi:"title"`
}

Represents a textual expression in the Common Expression Language (CEL) syntax. CEL is a C-like expression language. The syntax and semantics of CEL are documented at https://github.com/google/cel-spec. Example (Comparison): title: "Summary size limit" description: "Determines if a summary is less than 100 chars" expression: "document.summary.size() < 100" Example (Equality): title: "Requestor is owner" description: "Determines if requestor is the document owner" expression: "document.owner == request.auth.claims.email" Example (Logic): title: "Public documents" description: "Determine whether the document should be publicly visible" expression: "document.type != 'private' && document.type != 'internal'" Example (Data Manipulation): title: "Notification string" description: "Create a notification string with a timestamp." expression: "'New message received at ' + string(document.create_time)" The exact variables and functions that may be referenced within an expression are determined by the service that evaluates it. See the service documentation for additional information.

type ExprResponseOutput

type ExprResponseOutput struct{ *pulumi.OutputState }

Represents a textual expression in the Common Expression Language (CEL) syntax. CEL is a C-like expression language. The syntax and semantics of CEL are documented at https://github.com/google/cel-spec. Example (Comparison): title: "Summary size limit" description: "Determines if a summary is less than 100 chars" expression: "document.summary.size() < 100" Example (Equality): title: "Requestor is owner" description: "Determines if requestor is the document owner" expression: "document.owner == request.auth.claims.email" Example (Logic): title: "Public documents" description: "Determine whether the document should be publicly visible" expression: "document.type != 'private' && document.type != 'internal'" Example (Data Manipulation): title: "Notification string" description: "Create a notification string with a timestamp." expression: "'New message received at ' + string(document.create_time)" The exact variables and functions that may be referenced within an expression are determined by the service that evaluates it. See the service documentation for additional information.

func (ExprResponseOutput) Description

func (o ExprResponseOutput) Description() pulumi.StringOutput

Optional. Description of the expression. This is a longer text which describes the expression, e.g. when hovered over it in a UI.

func (ExprResponseOutput) ElementType

func (ExprResponseOutput) ElementType() reflect.Type

func (ExprResponseOutput) Expression

func (o ExprResponseOutput) Expression() pulumi.StringOutput

Textual representation of an expression in Common Expression Language syntax.

func (ExprResponseOutput) Location

func (o ExprResponseOutput) Location() pulumi.StringOutput

Optional. String indicating the location of the expression for error reporting, e.g. a file name and a position in the file.

func (ExprResponseOutput) Title

Optional. Title for the expression, i.e. a short string describing its purpose. This can be used e.g. in UIs which allow to enter the expression.

func (ExprResponseOutput) ToExprResponseOutput

func (o ExprResponseOutput) ToExprResponseOutput() ExprResponseOutput

func (ExprResponseOutput) ToExprResponseOutputWithContext

func (o ExprResponseOutput) ToExprResponseOutputWithContext(ctx context.Context) ExprResponseOutput

type GroupKind

type GroupKind struct {
	// Optional. API group string of a Kubernetes resource, e.g. "apiextensions.k8s.io", "storage.k8s.io", etc. Note: use empty string for core API group
	ResourceGroup *string `pulumi:"resourceGroup"`
	// Optional. Kind of a Kubernetes resource, must be in UpperCamelCase (PascalCase) and singular form. E.g. "CustomResourceDefinition", "StorageClass", etc.
	ResourceKind *string `pulumi:"resourceKind"`
}

This is a direct map to the Kubernetes GroupKind type GroupKind(https://godoc.org/k8s.io/apimachinery/pkg/runtime/schema#GroupKind) and is used for identifying specific "types" of resources to restore.

type GroupKindArgs

type GroupKindArgs struct {
	// Optional. API group string of a Kubernetes resource, e.g. "apiextensions.k8s.io", "storage.k8s.io", etc. Note: use empty string for core API group
	ResourceGroup pulumi.StringPtrInput `pulumi:"resourceGroup"`
	// Optional. Kind of a Kubernetes resource, must be in UpperCamelCase (PascalCase) and singular form. E.g. "CustomResourceDefinition", "StorageClass", etc.
	ResourceKind pulumi.StringPtrInput `pulumi:"resourceKind"`
}

This is a direct map to the Kubernetes GroupKind type GroupKind(https://godoc.org/k8s.io/apimachinery/pkg/runtime/schema#GroupKind) and is used for identifying specific "types" of resources to restore.

func (GroupKindArgs) ElementType

func (GroupKindArgs) ElementType() reflect.Type

func (GroupKindArgs) ToGroupKindOutput

func (i GroupKindArgs) ToGroupKindOutput() GroupKindOutput

func (GroupKindArgs) ToGroupKindOutputWithContext

func (i GroupKindArgs) ToGroupKindOutputWithContext(ctx context.Context) GroupKindOutput

type GroupKindArray

type GroupKindArray []GroupKindInput

func (GroupKindArray) ElementType

func (GroupKindArray) ElementType() reflect.Type

func (GroupKindArray) ToGroupKindArrayOutput

func (i GroupKindArray) ToGroupKindArrayOutput() GroupKindArrayOutput

func (GroupKindArray) ToGroupKindArrayOutputWithContext

func (i GroupKindArray) ToGroupKindArrayOutputWithContext(ctx context.Context) GroupKindArrayOutput

type GroupKindArrayInput

type GroupKindArrayInput interface {
	pulumi.Input

	ToGroupKindArrayOutput() GroupKindArrayOutput
	ToGroupKindArrayOutputWithContext(context.Context) GroupKindArrayOutput
}

GroupKindArrayInput is an input type that accepts GroupKindArray and GroupKindArrayOutput values. You can construct a concrete instance of `GroupKindArrayInput` via:

GroupKindArray{ GroupKindArgs{...} }

type GroupKindArrayOutput

type GroupKindArrayOutput struct{ *pulumi.OutputState }

func (GroupKindArrayOutput) ElementType

func (GroupKindArrayOutput) ElementType() reflect.Type

func (GroupKindArrayOutput) Index

func (GroupKindArrayOutput) ToGroupKindArrayOutput

func (o GroupKindArrayOutput) ToGroupKindArrayOutput() GroupKindArrayOutput

func (GroupKindArrayOutput) ToGroupKindArrayOutputWithContext

func (o GroupKindArrayOutput) ToGroupKindArrayOutputWithContext(ctx context.Context) GroupKindArrayOutput

type GroupKindInput

type GroupKindInput interface {
	pulumi.Input

	ToGroupKindOutput() GroupKindOutput
	ToGroupKindOutputWithContext(context.Context) GroupKindOutput
}

GroupKindInput is an input type that accepts GroupKindArgs and GroupKindOutput values. You can construct a concrete instance of `GroupKindInput` via:

GroupKindArgs{...}

type GroupKindOutput

type GroupKindOutput struct{ *pulumi.OutputState }

This is a direct map to the Kubernetes GroupKind type GroupKind(https://godoc.org/k8s.io/apimachinery/pkg/runtime/schema#GroupKind) and is used for identifying specific "types" of resources to restore.

func (GroupKindOutput) ElementType

func (GroupKindOutput) ElementType() reflect.Type

func (GroupKindOutput) ResourceGroup

func (o GroupKindOutput) ResourceGroup() pulumi.StringPtrOutput

Optional. API group string of a Kubernetes resource, e.g. "apiextensions.k8s.io", "storage.k8s.io", etc. Note: use empty string for core API group

func (GroupKindOutput) ResourceKind

func (o GroupKindOutput) ResourceKind() pulumi.StringPtrOutput

Optional. Kind of a Kubernetes resource, must be in UpperCamelCase (PascalCase) and singular form. E.g. "CustomResourceDefinition", "StorageClass", etc.

func (GroupKindOutput) ToGroupKindOutput

func (o GroupKindOutput) ToGroupKindOutput() GroupKindOutput

func (GroupKindOutput) ToGroupKindOutputWithContext

func (o GroupKindOutput) ToGroupKindOutputWithContext(ctx context.Context) GroupKindOutput

type GroupKindResponse

type GroupKindResponse struct {
	// Optional. API group string of a Kubernetes resource, e.g. "apiextensions.k8s.io", "storage.k8s.io", etc. Note: use empty string for core API group
	ResourceGroup string `pulumi:"resourceGroup"`
	// Optional. Kind of a Kubernetes resource, must be in UpperCamelCase (PascalCase) and singular form. E.g. "CustomResourceDefinition", "StorageClass", etc.
	ResourceKind string `pulumi:"resourceKind"`
}

This is a direct map to the Kubernetes GroupKind type GroupKind(https://godoc.org/k8s.io/apimachinery/pkg/runtime/schema#GroupKind) and is used for identifying specific "types" of resources to restore.

type GroupKindResponseArrayOutput

type GroupKindResponseArrayOutput struct{ *pulumi.OutputState }

func (GroupKindResponseArrayOutput) ElementType

func (GroupKindResponseArrayOutput) Index

func (GroupKindResponseArrayOutput) ToGroupKindResponseArrayOutput

func (o GroupKindResponseArrayOutput) ToGroupKindResponseArrayOutput() GroupKindResponseArrayOutput

func (GroupKindResponseArrayOutput) ToGroupKindResponseArrayOutputWithContext

func (o GroupKindResponseArrayOutput) ToGroupKindResponseArrayOutputWithContext(ctx context.Context) GroupKindResponseArrayOutput

type GroupKindResponseOutput

type GroupKindResponseOutput struct{ *pulumi.OutputState }

This is a direct map to the Kubernetes GroupKind type GroupKind(https://godoc.org/k8s.io/apimachinery/pkg/runtime/schema#GroupKind) and is used for identifying specific "types" of resources to restore.

func (GroupKindResponseOutput) ElementType

func (GroupKindResponseOutput) ElementType() reflect.Type

func (GroupKindResponseOutput) ResourceGroup

func (o GroupKindResponseOutput) ResourceGroup() pulumi.StringOutput

Optional. API group string of a Kubernetes resource, e.g. "apiextensions.k8s.io", "storage.k8s.io", etc. Note: use empty string for core API group

func (GroupKindResponseOutput) ResourceKind

func (o GroupKindResponseOutput) ResourceKind() pulumi.StringOutput

Optional. Kind of a Kubernetes resource, must be in UpperCamelCase (PascalCase) and singular form. E.g. "CustomResourceDefinition", "StorageClass", etc.

func (GroupKindResponseOutput) ToGroupKindResponseOutput

func (o GroupKindResponseOutput) ToGroupKindResponseOutput() GroupKindResponseOutput

func (GroupKindResponseOutput) ToGroupKindResponseOutputWithContext

func (o GroupKindResponseOutput) ToGroupKindResponseOutputWithContext(ctx context.Context) GroupKindResponseOutput

type LookupBackupArgs

type LookupBackupArgs struct {
	BackupId     string  `pulumi:"backupId"`
	BackupPlanId string  `pulumi:"backupPlanId"`
	Location     string  `pulumi:"location"`
	Project      *string `pulumi:"project"`
}

type LookupBackupOutputArgs

type LookupBackupOutputArgs struct {
	BackupId     pulumi.StringInput    `pulumi:"backupId"`
	BackupPlanId pulumi.StringInput    `pulumi:"backupPlanId"`
	Location     pulumi.StringInput    `pulumi:"location"`
	Project      pulumi.StringPtrInput `pulumi:"project"`
}

func (LookupBackupOutputArgs) ElementType

func (LookupBackupOutputArgs) ElementType() reflect.Type

type LookupBackupPlanArgs

type LookupBackupPlanArgs struct {
	BackupPlanId string  `pulumi:"backupPlanId"`
	Location     string  `pulumi:"location"`
	Project      *string `pulumi:"project"`
}

type LookupBackupPlanBackupIamPolicyArgs

type LookupBackupPlanBackupIamPolicyArgs struct {
	BackupId                      string  `pulumi:"backupId"`
	BackupPlanId                  string  `pulumi:"backupPlanId"`
	Location                      string  `pulumi:"location"`
	OptionsRequestedPolicyVersion *int    `pulumi:"optionsRequestedPolicyVersion"`
	Project                       *string `pulumi:"project"`
}

type LookupBackupPlanBackupIamPolicyOutputArgs

type LookupBackupPlanBackupIamPolicyOutputArgs struct {
	BackupId                      pulumi.StringInput    `pulumi:"backupId"`
	BackupPlanId                  pulumi.StringInput    `pulumi:"backupPlanId"`
	Location                      pulumi.StringInput    `pulumi:"location"`
	OptionsRequestedPolicyVersion pulumi.IntPtrInput    `pulumi:"optionsRequestedPolicyVersion"`
	Project                       pulumi.StringPtrInput `pulumi:"project"`
}

func (LookupBackupPlanBackupIamPolicyOutputArgs) ElementType

type LookupBackupPlanBackupIamPolicyResult

type LookupBackupPlanBackupIamPolicyResult struct {
	// Specifies cloud audit logging configuration for this policy.
	AuditConfigs []AuditConfigResponse `pulumi:"auditConfigs"`
	// Associates a list of `members`, or principals, with a `role`. Optionally, may specify a `condition` that determines how and when the `bindings` are applied. Each of the `bindings` must contain at least one principal. The `bindings` in a `Policy` can refer to up to 1,500 principals; up to 250 of these principals can be Google groups. Each occurrence of a principal counts towards these limits. For example, if the `bindings` grant 50 different roles to `user:alice@example.com`, and not to any other principal, then you can add another 1,450 principals to the `bindings` in the `Policy`.
	Bindings []BindingResponse `pulumi:"bindings"`
	// `etag` is used for optimistic concurrency control as a way to help prevent simultaneous updates of a policy from overwriting each other. It is strongly suggested that systems make use of the `etag` in the read-modify-write cycle to perform policy updates in order to avoid race conditions: An `etag` is returned in the response to `getIamPolicy`, and systems are expected to put that etag in the request to `setIamPolicy` to ensure that their change will be applied to the same version of the policy. **Important:** If you use IAM Conditions, you must include the `etag` field whenever you call `setIamPolicy`. If you omit this field, then IAM allows you to overwrite a version `3` policy with a version `1` policy, and all of the conditions in the version `3` policy are lost.
	Etag string `pulumi:"etag"`
	// Specifies the format of the policy. Valid values are `0`, `1`, and `3`. Requests that specify an invalid value are rejected. Any operation that affects conditional role bindings must specify version `3`. This requirement applies to the following operations: * Getting a policy that includes a conditional role binding * Adding a conditional role binding to a policy * Changing a conditional role binding in a policy * Removing any role binding, with or without a condition, from a policy that includes conditions **Important:** If you use IAM Conditions, you must include the `etag` field whenever you call `setIamPolicy`. If you omit this field, then IAM allows you to overwrite a version `3` policy with a version `1` policy, and all of the conditions in the version `3` policy are lost. If a policy does not include any conditions, operations on that policy may specify any valid version or leave the field unset. To learn which resources support conditions in their IAM policies, see the [IAM documentation](https://cloud.google.com/iam/help/conditions/resource-policies).
	Version int `pulumi:"version"`
}

func LookupBackupPlanBackupIamPolicy

Gets the access control policy for a resource. Returns an empty policy if the resource exists and does not have a policy set.

type LookupBackupPlanBackupIamPolicyResultOutput

type LookupBackupPlanBackupIamPolicyResultOutput struct{ *pulumi.OutputState }

func (LookupBackupPlanBackupIamPolicyResultOutput) AuditConfigs

Specifies cloud audit logging configuration for this policy.

func (LookupBackupPlanBackupIamPolicyResultOutput) Bindings

Associates a list of `members`, or principals, with a `role`. Optionally, may specify a `condition` that determines how and when the `bindings` are applied. Each of the `bindings` must contain at least one principal. The `bindings` in a `Policy` can refer to up to 1,500 principals; up to 250 of these principals can be Google groups. Each occurrence of a principal counts towards these limits. For example, if the `bindings` grant 50 different roles to `user:alice@example.com`, and not to any other principal, then you can add another 1,450 principals to the `bindings` in the `Policy`.

func (LookupBackupPlanBackupIamPolicyResultOutput) ElementType

func (LookupBackupPlanBackupIamPolicyResultOutput) Etag

`etag` is used for optimistic concurrency control as a way to help prevent simultaneous updates of a policy from overwriting each other. It is strongly suggested that systems make use of the `etag` in the read-modify-write cycle to perform policy updates in order to avoid race conditions: An `etag` is returned in the response to `getIamPolicy`, and systems are expected to put that etag in the request to `setIamPolicy` to ensure that their change will be applied to the same version of the policy. **Important:** If you use IAM Conditions, you must include the `etag` field whenever you call `setIamPolicy`. If you omit this field, then IAM allows you to overwrite a version `3` policy with a version `1` policy, and all of the conditions in the version `3` policy are lost.

func (LookupBackupPlanBackupIamPolicyResultOutput) ToLookupBackupPlanBackupIamPolicyResultOutput

func (o LookupBackupPlanBackupIamPolicyResultOutput) ToLookupBackupPlanBackupIamPolicyResultOutput() LookupBackupPlanBackupIamPolicyResultOutput

func (LookupBackupPlanBackupIamPolicyResultOutput) ToLookupBackupPlanBackupIamPolicyResultOutputWithContext

func (o LookupBackupPlanBackupIamPolicyResultOutput) ToLookupBackupPlanBackupIamPolicyResultOutputWithContext(ctx context.Context) LookupBackupPlanBackupIamPolicyResultOutput

func (LookupBackupPlanBackupIamPolicyResultOutput) Version

Specifies the format of the policy. Valid values are `0`, `1`, and `3`. Requests that specify an invalid value are rejected. Any operation that affects conditional role bindings must specify version `3`. This requirement applies to the following operations: * Getting a policy that includes a conditional role binding * Adding a conditional role binding to a policy * Changing a conditional role binding in a policy * Removing any role binding, with or without a condition, from a policy that includes conditions **Important:** If you use IAM Conditions, you must include the `etag` field whenever you call `setIamPolicy`. If you omit this field, then IAM allows you to overwrite a version `3` policy with a version `1` policy, and all of the conditions in the version `3` policy are lost. If a policy does not include any conditions, operations on that policy may specify any valid version or leave the field unset. To learn which resources support conditions in their IAM policies, see the [IAM documentation](https://cloud.google.com/iam/help/conditions/resource-policies).

type LookupBackupPlanBackupVolumeBackupIamPolicyArgs

type LookupBackupPlanBackupVolumeBackupIamPolicyArgs struct {
	BackupId                      string  `pulumi:"backupId"`
	BackupPlanId                  string  `pulumi:"backupPlanId"`
	Location                      string  `pulumi:"location"`
	OptionsRequestedPolicyVersion *int    `pulumi:"optionsRequestedPolicyVersion"`
	Project                       *string `pulumi:"project"`
	VolumeBackupId                string  `pulumi:"volumeBackupId"`
}

type LookupBackupPlanBackupVolumeBackupIamPolicyOutputArgs

type LookupBackupPlanBackupVolumeBackupIamPolicyOutputArgs struct {
	BackupId                      pulumi.StringInput    `pulumi:"backupId"`
	BackupPlanId                  pulumi.StringInput    `pulumi:"backupPlanId"`
	Location                      pulumi.StringInput    `pulumi:"location"`
	OptionsRequestedPolicyVersion pulumi.IntPtrInput    `pulumi:"optionsRequestedPolicyVersion"`
	Project                       pulumi.StringPtrInput `pulumi:"project"`
	VolumeBackupId                pulumi.StringInput    `pulumi:"volumeBackupId"`
}

func (LookupBackupPlanBackupVolumeBackupIamPolicyOutputArgs) ElementType

type LookupBackupPlanBackupVolumeBackupIamPolicyResult

type LookupBackupPlanBackupVolumeBackupIamPolicyResult struct {
	// Specifies cloud audit logging configuration for this policy.
	AuditConfigs []AuditConfigResponse `pulumi:"auditConfigs"`
	// Associates a list of `members`, or principals, with a `role`. Optionally, may specify a `condition` that determines how and when the `bindings` are applied. Each of the `bindings` must contain at least one principal. The `bindings` in a `Policy` can refer to up to 1,500 principals; up to 250 of these principals can be Google groups. Each occurrence of a principal counts towards these limits. For example, if the `bindings` grant 50 different roles to `user:alice@example.com`, and not to any other principal, then you can add another 1,450 principals to the `bindings` in the `Policy`.
	Bindings []BindingResponse `pulumi:"bindings"`
	// `etag` is used for optimistic concurrency control as a way to help prevent simultaneous updates of a policy from overwriting each other. It is strongly suggested that systems make use of the `etag` in the read-modify-write cycle to perform policy updates in order to avoid race conditions: An `etag` is returned in the response to `getIamPolicy`, and systems are expected to put that etag in the request to `setIamPolicy` to ensure that their change will be applied to the same version of the policy. **Important:** If you use IAM Conditions, you must include the `etag` field whenever you call `setIamPolicy`. If you omit this field, then IAM allows you to overwrite a version `3` policy with a version `1` policy, and all of the conditions in the version `3` policy are lost.
	Etag string `pulumi:"etag"`
	// Specifies the format of the policy. Valid values are `0`, `1`, and `3`. Requests that specify an invalid value are rejected. Any operation that affects conditional role bindings must specify version `3`. This requirement applies to the following operations: * Getting a policy that includes a conditional role binding * Adding a conditional role binding to a policy * Changing a conditional role binding in a policy * Removing any role binding, with or without a condition, from a policy that includes conditions **Important:** If you use IAM Conditions, you must include the `etag` field whenever you call `setIamPolicy`. If you omit this field, then IAM allows you to overwrite a version `3` policy with a version `1` policy, and all of the conditions in the version `3` policy are lost. If a policy does not include any conditions, operations on that policy may specify any valid version or leave the field unset. To learn which resources support conditions in their IAM policies, see the [IAM documentation](https://cloud.google.com/iam/help/conditions/resource-policies).
	Version int `pulumi:"version"`
}

func LookupBackupPlanBackupVolumeBackupIamPolicy

Gets the access control policy for a resource. Returns an empty policy if the resource exists and does not have a policy set.

type LookupBackupPlanBackupVolumeBackupIamPolicyResultOutput

type LookupBackupPlanBackupVolumeBackupIamPolicyResultOutput struct{ *pulumi.OutputState }

func (LookupBackupPlanBackupVolumeBackupIamPolicyResultOutput) AuditConfigs

Specifies cloud audit logging configuration for this policy.

func (LookupBackupPlanBackupVolumeBackupIamPolicyResultOutput) Bindings

Associates a list of `members`, or principals, with a `role`. Optionally, may specify a `condition` that determines how and when the `bindings` are applied. Each of the `bindings` must contain at least one principal. The `bindings` in a `Policy` can refer to up to 1,500 principals; up to 250 of these principals can be Google groups. Each occurrence of a principal counts towards these limits. For example, if the `bindings` grant 50 different roles to `user:alice@example.com`, and not to any other principal, then you can add another 1,450 principals to the `bindings` in the `Policy`.

func (LookupBackupPlanBackupVolumeBackupIamPolicyResultOutput) ElementType

func (LookupBackupPlanBackupVolumeBackupIamPolicyResultOutput) Etag

`etag` is used for optimistic concurrency control as a way to help prevent simultaneous updates of a policy from overwriting each other. It is strongly suggested that systems make use of the `etag` in the read-modify-write cycle to perform policy updates in order to avoid race conditions: An `etag` is returned in the response to `getIamPolicy`, and systems are expected to put that etag in the request to `setIamPolicy` to ensure that their change will be applied to the same version of the policy. **Important:** If you use IAM Conditions, you must include the `etag` field whenever you call `setIamPolicy`. If you omit this field, then IAM allows you to overwrite a version `3` policy with a version `1` policy, and all of the conditions in the version `3` policy are lost.

func (LookupBackupPlanBackupVolumeBackupIamPolicyResultOutput) ToLookupBackupPlanBackupVolumeBackupIamPolicyResultOutput

func (LookupBackupPlanBackupVolumeBackupIamPolicyResultOutput) ToLookupBackupPlanBackupVolumeBackupIamPolicyResultOutputWithContext

func (o LookupBackupPlanBackupVolumeBackupIamPolicyResultOutput) ToLookupBackupPlanBackupVolumeBackupIamPolicyResultOutputWithContext(ctx context.Context) LookupBackupPlanBackupVolumeBackupIamPolicyResultOutput

func (LookupBackupPlanBackupVolumeBackupIamPolicyResultOutput) Version

Specifies the format of the policy. Valid values are `0`, `1`, and `3`. Requests that specify an invalid value are rejected. Any operation that affects conditional role bindings must specify version `3`. This requirement applies to the following operations: * Getting a policy that includes a conditional role binding * Adding a conditional role binding to a policy * Changing a conditional role binding in a policy * Removing any role binding, with or without a condition, from a policy that includes conditions **Important:** If you use IAM Conditions, you must include the `etag` field whenever you call `setIamPolicy`. If you omit this field, then IAM allows you to overwrite a version `3` policy with a version `1` policy, and all of the conditions in the version `3` policy are lost. If a policy does not include any conditions, operations on that policy may specify any valid version or leave the field unset. To learn which resources support conditions in their IAM policies, see the [IAM documentation](https://cloud.google.com/iam/help/conditions/resource-policies).

type LookupBackupPlanIamPolicyArgs

type LookupBackupPlanIamPolicyArgs struct {
	BackupPlanId                  string  `pulumi:"backupPlanId"`
	Location                      string  `pulumi:"location"`
	OptionsRequestedPolicyVersion *int    `pulumi:"optionsRequestedPolicyVersion"`
	Project                       *string `pulumi:"project"`
}

type LookupBackupPlanIamPolicyOutputArgs

type LookupBackupPlanIamPolicyOutputArgs struct {
	BackupPlanId                  pulumi.StringInput    `pulumi:"backupPlanId"`
	Location                      pulumi.StringInput    `pulumi:"location"`
	OptionsRequestedPolicyVersion pulumi.IntPtrInput    `pulumi:"optionsRequestedPolicyVersion"`
	Project                       pulumi.StringPtrInput `pulumi:"project"`
}

func (LookupBackupPlanIamPolicyOutputArgs) ElementType

type LookupBackupPlanIamPolicyResult

type LookupBackupPlanIamPolicyResult struct {
	// Specifies cloud audit logging configuration for this policy.
	AuditConfigs []AuditConfigResponse `pulumi:"auditConfigs"`
	// Associates a list of `members`, or principals, with a `role`. Optionally, may specify a `condition` that determines how and when the `bindings` are applied. Each of the `bindings` must contain at least one principal. The `bindings` in a `Policy` can refer to up to 1,500 principals; up to 250 of these principals can be Google groups. Each occurrence of a principal counts towards these limits. For example, if the `bindings` grant 50 different roles to `user:alice@example.com`, and not to any other principal, then you can add another 1,450 principals to the `bindings` in the `Policy`.
	Bindings []BindingResponse `pulumi:"bindings"`
	// `etag` is used for optimistic concurrency control as a way to help prevent simultaneous updates of a policy from overwriting each other. It is strongly suggested that systems make use of the `etag` in the read-modify-write cycle to perform policy updates in order to avoid race conditions: An `etag` is returned in the response to `getIamPolicy`, and systems are expected to put that etag in the request to `setIamPolicy` to ensure that their change will be applied to the same version of the policy. **Important:** If you use IAM Conditions, you must include the `etag` field whenever you call `setIamPolicy`. If you omit this field, then IAM allows you to overwrite a version `3` policy with a version `1` policy, and all of the conditions in the version `3` policy are lost.
	Etag string `pulumi:"etag"`
	// Specifies the format of the policy. Valid values are `0`, `1`, and `3`. Requests that specify an invalid value are rejected. Any operation that affects conditional role bindings must specify version `3`. This requirement applies to the following operations: * Getting a policy that includes a conditional role binding * Adding a conditional role binding to a policy * Changing a conditional role binding in a policy * Removing any role binding, with or without a condition, from a policy that includes conditions **Important:** If you use IAM Conditions, you must include the `etag` field whenever you call `setIamPolicy`. If you omit this field, then IAM allows you to overwrite a version `3` policy with a version `1` policy, and all of the conditions in the version `3` policy are lost. If a policy does not include any conditions, operations on that policy may specify any valid version or leave the field unset. To learn which resources support conditions in their IAM policies, see the [IAM documentation](https://cloud.google.com/iam/help/conditions/resource-policies).
	Version int `pulumi:"version"`
}

func LookupBackupPlanIamPolicy

func LookupBackupPlanIamPolicy(ctx *pulumi.Context, args *LookupBackupPlanIamPolicyArgs, opts ...pulumi.InvokeOption) (*LookupBackupPlanIamPolicyResult, error)

Gets the access control policy for a resource. Returns an empty policy if the resource exists and does not have a policy set.

type LookupBackupPlanIamPolicyResultOutput

type LookupBackupPlanIamPolicyResultOutput struct{ *pulumi.OutputState }

func (LookupBackupPlanIamPolicyResultOutput) AuditConfigs

Specifies cloud audit logging configuration for this policy.

func (LookupBackupPlanIamPolicyResultOutput) Bindings

Associates a list of `members`, or principals, with a `role`. Optionally, may specify a `condition` that determines how and when the `bindings` are applied. Each of the `bindings` must contain at least one principal. The `bindings` in a `Policy` can refer to up to 1,500 principals; up to 250 of these principals can be Google groups. Each occurrence of a principal counts towards these limits. For example, if the `bindings` grant 50 different roles to `user:alice@example.com`, and not to any other principal, then you can add another 1,450 principals to the `bindings` in the `Policy`.

func (LookupBackupPlanIamPolicyResultOutput) ElementType

func (LookupBackupPlanIamPolicyResultOutput) Etag

`etag` is used for optimistic concurrency control as a way to help prevent simultaneous updates of a policy from overwriting each other. It is strongly suggested that systems make use of the `etag` in the read-modify-write cycle to perform policy updates in order to avoid race conditions: An `etag` is returned in the response to `getIamPolicy`, and systems are expected to put that etag in the request to `setIamPolicy` to ensure that their change will be applied to the same version of the policy. **Important:** If you use IAM Conditions, you must include the `etag` field whenever you call `setIamPolicy`. If you omit this field, then IAM allows you to overwrite a version `3` policy with a version `1` policy, and all of the conditions in the version `3` policy are lost.

func (LookupBackupPlanIamPolicyResultOutput) ToLookupBackupPlanIamPolicyResultOutput

func (o LookupBackupPlanIamPolicyResultOutput) ToLookupBackupPlanIamPolicyResultOutput() LookupBackupPlanIamPolicyResultOutput

func (LookupBackupPlanIamPolicyResultOutput) ToLookupBackupPlanIamPolicyResultOutputWithContext

func (o LookupBackupPlanIamPolicyResultOutput) ToLookupBackupPlanIamPolicyResultOutputWithContext(ctx context.Context) LookupBackupPlanIamPolicyResultOutput

func (LookupBackupPlanIamPolicyResultOutput) Version

Specifies the format of the policy. Valid values are `0`, `1`, and `3`. Requests that specify an invalid value are rejected. Any operation that affects conditional role bindings must specify version `3`. This requirement applies to the following operations: * Getting a policy that includes a conditional role binding * Adding a conditional role binding to a policy * Changing a conditional role binding in a policy * Removing any role binding, with or without a condition, from a policy that includes conditions **Important:** If you use IAM Conditions, you must include the `etag` field whenever you call `setIamPolicy`. If you omit this field, then IAM allows you to overwrite a version `3` policy with a version `1` policy, and all of the conditions in the version `3` policy are lost. If a policy does not include any conditions, operations on that policy may specify any valid version or leave the field unset. To learn which resources support conditions in their IAM policies, see the [IAM documentation](https://cloud.google.com/iam/help/conditions/resource-policies).

type LookupBackupPlanOutputArgs

type LookupBackupPlanOutputArgs struct {
	BackupPlanId pulumi.StringInput    `pulumi:"backupPlanId"`
	Location     pulumi.StringInput    `pulumi:"location"`
	Project      pulumi.StringPtrInput `pulumi:"project"`
}

func (LookupBackupPlanOutputArgs) ElementType

func (LookupBackupPlanOutputArgs) ElementType() reflect.Type

type LookupBackupPlanResult

type LookupBackupPlanResult struct {
	// Optional. Defines the configuration of Backups created via this BackupPlan.
	BackupConfig BackupConfigResponse `pulumi:"backupConfig"`
	// Optional. Defines a schedule for automatic Backup creation via this BackupPlan.
	BackupSchedule ScheduleResponse `pulumi:"backupSchedule"`
	// Immutable. The source cluster from which Backups will be created via this BackupPlan. Valid formats: - `projects/*/locations/*/clusters/*` - `projects/*/zones/*/clusters/*`
	Cluster string `pulumi:"cluster"`
	// The timestamp when this BackupPlan resource was created.
	CreateTime string `pulumi:"createTime"`
	// Optional. This flag indicates whether this BackupPlan has been deactivated. Setting this field to True locks the BackupPlan such that no further updates will be allowed (except deletes), including the deactivated field itself. It also prevents any new Backups from being created via this BackupPlan (including scheduled Backups). Default: False
	Deactivated bool `pulumi:"deactivated"`
	// Optional. User specified descriptive string for this BackupPlan.
	Description string `pulumi:"description"`
	// `etag` is used for optimistic concurrency control as a way to help prevent simultaneous updates of a backup plan from overwriting each other. It is strongly suggested that systems make use of the 'etag' in the read-modify-write cycle to perform BackupPlan updates in order to avoid race conditions: An `etag` is returned in the response to `GetBackupPlan`, and systems are expected to put that etag in the request to `UpdateBackupPlan` or `DeleteBackupPlan` to ensure that their change will be applied to the same version of the resource.
	Etag string `pulumi:"etag"`
	// Optional. A set of custom labels supplied by user.
	Labels map[string]string `pulumi:"labels"`
	// The full name of the BackupPlan resource. Format: `projects/*/locations/*/backupPlans/*`
	Name string `pulumi:"name"`
	// The number of Kubernetes Pods backed up in the last successful Backup created via this BackupPlan.
	ProtectedPodCount int `pulumi:"protectedPodCount"`
	// Optional. RetentionPolicy governs lifecycle of Backups created under this plan.
	RetentionPolicy RetentionPolicyResponse `pulumi:"retentionPolicy"`
	// State of the BackupPlan. This State field reflects the various stages a BackupPlan can be in during the Create operation. It will be set to "DEACTIVATED" if the BackupPlan is deactivated on an Update
	State string `pulumi:"state"`
	// Human-readable description of why BackupPlan is in the current `state`
	StateReason string `pulumi:"stateReason"`
	// Server generated global unique identifier of [UUID](https://en.wikipedia.org/wiki/Universally_unique_identifier) format.
	Uid string `pulumi:"uid"`
	// The timestamp when this BackupPlan resource was last updated.
	UpdateTime string `pulumi:"updateTime"`
}

func LookupBackupPlan

func LookupBackupPlan(ctx *pulumi.Context, args *LookupBackupPlanArgs, opts ...pulumi.InvokeOption) (*LookupBackupPlanResult, error)

Retrieve the details of a single BackupPlan.

type LookupBackupPlanResultOutput

type LookupBackupPlanResultOutput struct{ *pulumi.OutputState }

func (LookupBackupPlanResultOutput) BackupConfig

Optional. Defines the configuration of Backups created via this BackupPlan.

func (LookupBackupPlanResultOutput) BackupSchedule

Optional. Defines a schedule for automatic Backup creation via this BackupPlan.

func (LookupBackupPlanResultOutput) Cluster

Immutable. The source cluster from which Backups will be created via this BackupPlan. Valid formats: - `projects/*/locations/*/clusters/*` - `projects/*/zones/*/clusters/*`

func (LookupBackupPlanResultOutput) CreateTime

The timestamp when this BackupPlan resource was created.

func (LookupBackupPlanResultOutput) Deactivated

Optional. This flag indicates whether this BackupPlan has been deactivated. Setting this field to True locks the BackupPlan such that no further updates will be allowed (except deletes), including the deactivated field itself. It also prevents any new Backups from being created via this BackupPlan (including scheduled Backups). Default: False

func (LookupBackupPlanResultOutput) Description

Optional. User specified descriptive string for this BackupPlan.

func (LookupBackupPlanResultOutput) ElementType

func (LookupBackupPlanResultOutput) Etag

`etag` is used for optimistic concurrency control as a way to help prevent simultaneous updates of a backup plan from overwriting each other. It is strongly suggested that systems make use of the 'etag' in the read-modify-write cycle to perform BackupPlan updates in order to avoid race conditions: An `etag` is returned in the response to `GetBackupPlan`, and systems are expected to put that etag in the request to `UpdateBackupPlan` or `DeleteBackupPlan` to ensure that their change will be applied to the same version of the resource.

func (LookupBackupPlanResultOutput) Labels

Optional. A set of custom labels supplied by user.

func (LookupBackupPlanResultOutput) Name

The full name of the BackupPlan resource. Format: `projects/*/locations/*/backupPlans/*`

func (LookupBackupPlanResultOutput) ProtectedPodCount

func (o LookupBackupPlanResultOutput) ProtectedPodCount() pulumi.IntOutput

The number of Kubernetes Pods backed up in the last successful Backup created via this BackupPlan.

func (LookupBackupPlanResultOutput) RetentionPolicy

Optional. RetentionPolicy governs lifecycle of Backups created under this plan.

func (LookupBackupPlanResultOutput) State added in v0.32.0

State of the BackupPlan. This State field reflects the various stages a BackupPlan can be in during the Create operation. It will be set to "DEACTIVATED" if the BackupPlan is deactivated on an Update

func (LookupBackupPlanResultOutput) StateReason added in v0.32.0

Human-readable description of why BackupPlan is in the current `state`

func (LookupBackupPlanResultOutput) ToLookupBackupPlanResultOutput

func (o LookupBackupPlanResultOutput) ToLookupBackupPlanResultOutput() LookupBackupPlanResultOutput

func (LookupBackupPlanResultOutput) ToLookupBackupPlanResultOutputWithContext

func (o LookupBackupPlanResultOutput) ToLookupBackupPlanResultOutputWithContext(ctx context.Context) LookupBackupPlanResultOutput

func (LookupBackupPlanResultOutput) Uid

Server generated global unique identifier of [UUID](https://en.wikipedia.org/wiki/Universally_unique_identifier) format.

func (LookupBackupPlanResultOutput) UpdateTime

The timestamp when this BackupPlan resource was last updated.

type LookupBackupResult

type LookupBackupResult struct {
	// If True, all namespaces were included in the Backup.
	AllNamespaces bool `pulumi:"allNamespaces"`
	// Information about the GKE cluster from which this Backup was created.
	ClusterMetadata ClusterMetadataResponse `pulumi:"clusterMetadata"`
	// Completion time of the Backup
	CompleteTime string `pulumi:"completeTime"`
	// The size of the config backup in bytes.
	ConfigBackupSizeBytes string `pulumi:"configBackupSizeBytes"`
	// Whether or not the Backup contains Kubernetes Secrets. Controlled by the parent BackupPlan's include_secrets value.
	ContainsSecrets bool `pulumi:"containsSecrets"`
	// Whether or not the Backup contains volume data. Controlled by the parent BackupPlan's include_volume_data value.
	ContainsVolumeData bool `pulumi:"containsVolumeData"`
	// The timestamp when this Backup resource was created.
	CreateTime string `pulumi:"createTime"`
	// Optional. Minimum age for this Backup (in days). If this field is set to a non-zero value, the Backup will be "locked" against deletion (either manual or automatic deletion) for the number of days provided (measured from the creation time of the Backup). MUST be an integer value between 0-90 (inclusive). Defaults to parent BackupPlan's backup_delete_lock_days setting and may only be increased (either at creation time or in a subsequent update).
	DeleteLockDays int `pulumi:"deleteLockDays"`
	// The time at which an existing delete lock will expire for this backup (calculated from create_time + delete_lock_days).
	DeleteLockExpireTime string `pulumi:"deleteLockExpireTime"`
	// Optional. User specified descriptive string for this Backup.
	Description string `pulumi:"description"`
	// The customer managed encryption key that was used to encrypt the Backup's artifacts. Inherited from the parent BackupPlan's encryption_key value.
	EncryptionKey EncryptionKeyResponse `pulumi:"encryptionKey"`
	// `etag` is used for optimistic concurrency control as a way to help prevent simultaneous updates of a backup from overwriting each other. It is strongly suggested that systems make use of the `etag` in the read-modify-write cycle to perform backup updates in order to avoid race conditions: An `etag` is returned in the response to `GetBackup`, and systems are expected to put that etag in the request to `UpdateBackup` or `DeleteBackup` to ensure that their change will be applied to the same version of the resource.
	Etag string `pulumi:"etag"`
	// Optional. A set of custom labels supplied by user.
	Labels map[string]string `pulumi:"labels"`
	// This flag indicates whether this Backup resource was created manually by a user or via a schedule in the BackupPlan. A value of True means that the Backup was created manually.
	Manual bool `pulumi:"manual"`
	// The fully qualified name of the Backup. `projects/*/locations/*/backupPlans/*/backups/*`
	Name string `pulumi:"name"`
	// The total number of Kubernetes Pods contained in the Backup.
	PodCount int `pulumi:"podCount"`
	// The total number of Kubernetes resources included in the Backup.
	ResourceCount int `pulumi:"resourceCount"`
	// Optional. The age (in days) after which this Backup will be automatically deleted. Must be an integer value >= 0: - If 0, no automatic deletion will occur for this Backup. - If not 0, this must be >= delete_lock_days and <= 365. Once a Backup is created, this value may only be increased. Defaults to the parent BackupPlan's backup_retain_days value.
	RetainDays int `pulumi:"retainDays"`
	// The time at which this Backup will be automatically deleted (calculated from create_time + retain_days).
	RetainExpireTime string `pulumi:"retainExpireTime"`
	// If set, the list of ProtectedApplications whose resources were included in the Backup.
	SelectedApplications NamespacedNamesResponse `pulumi:"selectedApplications"`
	// If set, the list of namespaces that were included in the Backup.
	SelectedNamespaces NamespacesResponse `pulumi:"selectedNamespaces"`
	// The total size of the Backup in bytes = config backup size + sum(volume backup sizes)
	SizeBytes string `pulumi:"sizeBytes"`
	// Current state of the Backup
	State string `pulumi:"state"`
	// Human-readable description of why the backup is in the current `state`.
	StateReason string `pulumi:"stateReason"`
	// Server generated global unique identifier of [UUID4](https://en.wikipedia.org/wiki/Universally_unique_identifier)
	Uid string `pulumi:"uid"`
	// The timestamp when this Backup resource was last updated.
	UpdateTime string `pulumi:"updateTime"`
	// The total number of volume backups contained in the Backup.
	VolumeCount int `pulumi:"volumeCount"`
}

func LookupBackup

func LookupBackup(ctx *pulumi.Context, args *LookupBackupArgs, opts ...pulumi.InvokeOption) (*LookupBackupResult, error)

Retrieve the details of a single Backup.

type LookupBackupResultOutput

type LookupBackupResultOutput struct{ *pulumi.OutputState }

func (LookupBackupResultOutput) AllNamespaces

func (o LookupBackupResultOutput) AllNamespaces() pulumi.BoolOutput

If True, all namespaces were included in the Backup.

func (LookupBackupResultOutput) ClusterMetadata

Information about the GKE cluster from which this Backup was created.

func (LookupBackupResultOutput) CompleteTime

func (o LookupBackupResultOutput) CompleteTime() pulumi.StringOutput

Completion time of the Backup

func (LookupBackupResultOutput) ConfigBackupSizeBytes

func (o LookupBackupResultOutput) ConfigBackupSizeBytes() pulumi.StringOutput

The size of the config backup in bytes.

func (LookupBackupResultOutput) ContainsSecrets

func (o LookupBackupResultOutput) ContainsSecrets() pulumi.BoolOutput

Whether or not the Backup contains Kubernetes Secrets. Controlled by the parent BackupPlan's include_secrets value.

func (LookupBackupResultOutput) ContainsVolumeData

func (o LookupBackupResultOutput) ContainsVolumeData() pulumi.BoolOutput

Whether or not the Backup contains volume data. Controlled by the parent BackupPlan's include_volume_data value.

func (LookupBackupResultOutput) CreateTime

The timestamp when this Backup resource was created.

func (LookupBackupResultOutput) DeleteLockDays

func (o LookupBackupResultOutput) DeleteLockDays() pulumi.IntOutput

Optional. Minimum age for this Backup (in days). If this field is set to a non-zero value, the Backup will be "locked" against deletion (either manual or automatic deletion) for the number of days provided (measured from the creation time of the Backup). MUST be an integer value between 0-90 (inclusive). Defaults to parent BackupPlan's backup_delete_lock_days setting and may only be increased (either at creation time or in a subsequent update).

func (LookupBackupResultOutput) DeleteLockExpireTime

func (o LookupBackupResultOutput) DeleteLockExpireTime() pulumi.StringOutput

The time at which an existing delete lock will expire for this backup (calculated from create_time + delete_lock_days).

func (LookupBackupResultOutput) Description

Optional. User specified descriptive string for this Backup.

func (LookupBackupResultOutput) ElementType

func (LookupBackupResultOutput) ElementType() reflect.Type

func (LookupBackupResultOutput) EncryptionKey

The customer managed encryption key that was used to encrypt the Backup's artifacts. Inherited from the parent BackupPlan's encryption_key value.

func (LookupBackupResultOutput) Etag

`etag` is used for optimistic concurrency control as a way to help prevent simultaneous updates of a backup from overwriting each other. It is strongly suggested that systems make use of the `etag` in the read-modify-write cycle to perform backup updates in order to avoid race conditions: An `etag` is returned in the response to `GetBackup`, and systems are expected to put that etag in the request to `UpdateBackup` or `DeleteBackup` to ensure that their change will be applied to the same version of the resource.

func (LookupBackupResultOutput) Labels

Optional. A set of custom labels supplied by user.

func (LookupBackupResultOutput) Manual

This flag indicates whether this Backup resource was created manually by a user or via a schedule in the BackupPlan. A value of True means that the Backup was created manually.

func (LookupBackupResultOutput) Name

The fully qualified name of the Backup. `projects/*/locations/*/backupPlans/*/backups/*`

func (LookupBackupResultOutput) PodCount

The total number of Kubernetes Pods contained in the Backup.

func (LookupBackupResultOutput) ResourceCount

func (o LookupBackupResultOutput) ResourceCount() pulumi.IntOutput

The total number of Kubernetes resources included in the Backup.

func (LookupBackupResultOutput) RetainDays

func (o LookupBackupResultOutput) RetainDays() pulumi.IntOutput

Optional. The age (in days) after which this Backup will be automatically deleted. Must be an integer value >= 0: - If 0, no automatic deletion will occur for this Backup. - If not 0, this must be >= delete_lock_days and <= 365. Once a Backup is created, this value may only be increased. Defaults to the parent BackupPlan's backup_retain_days value.

func (LookupBackupResultOutput) RetainExpireTime

func (o LookupBackupResultOutput) RetainExpireTime() pulumi.StringOutput

The time at which this Backup will be automatically deleted (calculated from create_time + retain_days).

func (LookupBackupResultOutput) SelectedApplications

If set, the list of ProtectedApplications whose resources were included in the Backup.

func (LookupBackupResultOutput) SelectedNamespaces

func (o LookupBackupResultOutput) SelectedNamespaces() NamespacesResponseOutput

If set, the list of namespaces that were included in the Backup.

func (LookupBackupResultOutput) SizeBytes

The total size of the Backup in bytes = config backup size + sum(volume backup sizes)

func (LookupBackupResultOutput) State

Current state of the Backup

func (LookupBackupResultOutput) StateReason

Human-readable description of why the backup is in the current `state`.

func (LookupBackupResultOutput) ToLookupBackupResultOutput

func (o LookupBackupResultOutput) ToLookupBackupResultOutput() LookupBackupResultOutput

func (LookupBackupResultOutput) ToLookupBackupResultOutputWithContext

func (o LookupBackupResultOutput) ToLookupBackupResultOutputWithContext(ctx context.Context) LookupBackupResultOutput

func (LookupBackupResultOutput) Uid

Server generated global unique identifier of [UUID4](https://en.wikipedia.org/wiki/Universally_unique_identifier)

func (LookupBackupResultOutput) UpdateTime

The timestamp when this Backup resource was last updated.

func (LookupBackupResultOutput) VolumeCount

func (o LookupBackupResultOutput) VolumeCount() pulumi.IntOutput

The total number of volume backups contained in the Backup.

type LookupRestoreArgs

type LookupRestoreArgs struct {
	Location      string  `pulumi:"location"`
	Project       *string `pulumi:"project"`
	RestoreId     string  `pulumi:"restoreId"`
	RestorePlanId string  `pulumi:"restorePlanId"`
}

type LookupRestoreOutputArgs

type LookupRestoreOutputArgs struct {
	Location      pulumi.StringInput    `pulumi:"location"`
	Project       pulumi.StringPtrInput `pulumi:"project"`
	RestoreId     pulumi.StringInput    `pulumi:"restoreId"`
	RestorePlanId pulumi.StringInput    `pulumi:"restorePlanId"`
}

func (LookupRestoreOutputArgs) ElementType

func (LookupRestoreOutputArgs) ElementType() reflect.Type

type LookupRestorePlanArgs

type LookupRestorePlanArgs struct {
	Location      string  `pulumi:"location"`
	Project       *string `pulumi:"project"`
	RestorePlanId string  `pulumi:"restorePlanId"`
}

type LookupRestorePlanIamPolicyArgs

type LookupRestorePlanIamPolicyArgs struct {
	Location                      string  `pulumi:"location"`
	OptionsRequestedPolicyVersion *int    `pulumi:"optionsRequestedPolicyVersion"`
	Project                       *string `pulumi:"project"`
	RestorePlanId                 string  `pulumi:"restorePlanId"`
}

type LookupRestorePlanIamPolicyOutputArgs

type LookupRestorePlanIamPolicyOutputArgs struct {
	Location                      pulumi.StringInput    `pulumi:"location"`
	OptionsRequestedPolicyVersion pulumi.IntPtrInput    `pulumi:"optionsRequestedPolicyVersion"`
	Project                       pulumi.StringPtrInput `pulumi:"project"`
	RestorePlanId                 pulumi.StringInput    `pulumi:"restorePlanId"`
}

func (LookupRestorePlanIamPolicyOutputArgs) ElementType

type LookupRestorePlanIamPolicyResult

type LookupRestorePlanIamPolicyResult struct {
	// Specifies cloud audit logging configuration for this policy.
	AuditConfigs []AuditConfigResponse `pulumi:"auditConfigs"`
	// Associates a list of `members`, or principals, with a `role`. Optionally, may specify a `condition` that determines how and when the `bindings` are applied. Each of the `bindings` must contain at least one principal. The `bindings` in a `Policy` can refer to up to 1,500 principals; up to 250 of these principals can be Google groups. Each occurrence of a principal counts towards these limits. For example, if the `bindings` grant 50 different roles to `user:alice@example.com`, and not to any other principal, then you can add another 1,450 principals to the `bindings` in the `Policy`.
	Bindings []BindingResponse `pulumi:"bindings"`
	// `etag` is used for optimistic concurrency control as a way to help prevent simultaneous updates of a policy from overwriting each other. It is strongly suggested that systems make use of the `etag` in the read-modify-write cycle to perform policy updates in order to avoid race conditions: An `etag` is returned in the response to `getIamPolicy`, and systems are expected to put that etag in the request to `setIamPolicy` to ensure that their change will be applied to the same version of the policy. **Important:** If you use IAM Conditions, you must include the `etag` field whenever you call `setIamPolicy`. If you omit this field, then IAM allows you to overwrite a version `3` policy with a version `1` policy, and all of the conditions in the version `3` policy are lost.
	Etag string `pulumi:"etag"`
	// Specifies the format of the policy. Valid values are `0`, `1`, and `3`. Requests that specify an invalid value are rejected. Any operation that affects conditional role bindings must specify version `3`. This requirement applies to the following operations: * Getting a policy that includes a conditional role binding * Adding a conditional role binding to a policy * Changing a conditional role binding in a policy * Removing any role binding, with or without a condition, from a policy that includes conditions **Important:** If you use IAM Conditions, you must include the `etag` field whenever you call `setIamPolicy`. If you omit this field, then IAM allows you to overwrite a version `3` policy with a version `1` policy, and all of the conditions in the version `3` policy are lost. If a policy does not include any conditions, operations on that policy may specify any valid version or leave the field unset. To learn which resources support conditions in their IAM policies, see the [IAM documentation](https://cloud.google.com/iam/help/conditions/resource-policies).
	Version int `pulumi:"version"`
}

func LookupRestorePlanIamPolicy

func LookupRestorePlanIamPolicy(ctx *pulumi.Context, args *LookupRestorePlanIamPolicyArgs, opts ...pulumi.InvokeOption) (*LookupRestorePlanIamPolicyResult, error)

Gets the access control policy for a resource. Returns an empty policy if the resource exists and does not have a policy set.

type LookupRestorePlanIamPolicyResultOutput

type LookupRestorePlanIamPolicyResultOutput struct{ *pulumi.OutputState }

func (LookupRestorePlanIamPolicyResultOutput) AuditConfigs

Specifies cloud audit logging configuration for this policy.

func (LookupRestorePlanIamPolicyResultOutput) Bindings

Associates a list of `members`, or principals, with a `role`. Optionally, may specify a `condition` that determines how and when the `bindings` are applied. Each of the `bindings` must contain at least one principal. The `bindings` in a `Policy` can refer to up to 1,500 principals; up to 250 of these principals can be Google groups. Each occurrence of a principal counts towards these limits. For example, if the `bindings` grant 50 different roles to `user:alice@example.com`, and not to any other principal, then you can add another 1,450 principals to the `bindings` in the `Policy`.

func (LookupRestorePlanIamPolicyResultOutput) ElementType

func (LookupRestorePlanIamPolicyResultOutput) Etag

`etag` is used for optimistic concurrency control as a way to help prevent simultaneous updates of a policy from overwriting each other. It is strongly suggested that systems make use of the `etag` in the read-modify-write cycle to perform policy updates in order to avoid race conditions: An `etag` is returned in the response to `getIamPolicy`, and systems are expected to put that etag in the request to `setIamPolicy` to ensure that their change will be applied to the same version of the policy. **Important:** If you use IAM Conditions, you must include the `etag` field whenever you call `setIamPolicy`. If you omit this field, then IAM allows you to overwrite a version `3` policy with a version `1` policy, and all of the conditions in the version `3` policy are lost.

func (LookupRestorePlanIamPolicyResultOutput) ToLookupRestorePlanIamPolicyResultOutput

func (o LookupRestorePlanIamPolicyResultOutput) ToLookupRestorePlanIamPolicyResultOutput() LookupRestorePlanIamPolicyResultOutput

func (LookupRestorePlanIamPolicyResultOutput) ToLookupRestorePlanIamPolicyResultOutputWithContext

func (o LookupRestorePlanIamPolicyResultOutput) ToLookupRestorePlanIamPolicyResultOutputWithContext(ctx context.Context) LookupRestorePlanIamPolicyResultOutput

func (LookupRestorePlanIamPolicyResultOutput) Version

Specifies the format of the policy. Valid values are `0`, `1`, and `3`. Requests that specify an invalid value are rejected. Any operation that affects conditional role bindings must specify version `3`. This requirement applies to the following operations: * Getting a policy that includes a conditional role binding * Adding a conditional role binding to a policy * Changing a conditional role binding in a policy * Removing any role binding, with or without a condition, from a policy that includes conditions **Important:** If you use IAM Conditions, you must include the `etag` field whenever you call `setIamPolicy`. If you omit this field, then IAM allows you to overwrite a version `3` policy with a version `1` policy, and all of the conditions in the version `3` policy are lost. If a policy does not include any conditions, operations on that policy may specify any valid version or leave the field unset. To learn which resources support conditions in their IAM policies, see the [IAM documentation](https://cloud.google.com/iam/help/conditions/resource-policies).

type LookupRestorePlanOutputArgs

type LookupRestorePlanOutputArgs struct {
	Location      pulumi.StringInput    `pulumi:"location"`
	Project       pulumi.StringPtrInput `pulumi:"project"`
	RestorePlanId pulumi.StringInput    `pulumi:"restorePlanId"`
}

func (LookupRestorePlanOutputArgs) ElementType

type LookupRestorePlanRestoreIamPolicyArgs

type LookupRestorePlanRestoreIamPolicyArgs struct {
	Location                      string  `pulumi:"location"`
	OptionsRequestedPolicyVersion *int    `pulumi:"optionsRequestedPolicyVersion"`
	Project                       *string `pulumi:"project"`
	RestoreId                     string  `pulumi:"restoreId"`
	RestorePlanId                 string  `pulumi:"restorePlanId"`
}

type LookupRestorePlanRestoreIamPolicyOutputArgs

type LookupRestorePlanRestoreIamPolicyOutputArgs struct {
	Location                      pulumi.StringInput    `pulumi:"location"`
	OptionsRequestedPolicyVersion pulumi.IntPtrInput    `pulumi:"optionsRequestedPolicyVersion"`
	Project                       pulumi.StringPtrInput `pulumi:"project"`
	RestoreId                     pulumi.StringInput    `pulumi:"restoreId"`
	RestorePlanId                 pulumi.StringInput    `pulumi:"restorePlanId"`
}

func (LookupRestorePlanRestoreIamPolicyOutputArgs) ElementType

type LookupRestorePlanRestoreIamPolicyResult

type LookupRestorePlanRestoreIamPolicyResult struct {
	// Specifies cloud audit logging configuration for this policy.
	AuditConfigs []AuditConfigResponse `pulumi:"auditConfigs"`
	// Associates a list of `members`, or principals, with a `role`. Optionally, may specify a `condition` that determines how and when the `bindings` are applied. Each of the `bindings` must contain at least one principal. The `bindings` in a `Policy` can refer to up to 1,500 principals; up to 250 of these principals can be Google groups. Each occurrence of a principal counts towards these limits. For example, if the `bindings` grant 50 different roles to `user:alice@example.com`, and not to any other principal, then you can add another 1,450 principals to the `bindings` in the `Policy`.
	Bindings []BindingResponse `pulumi:"bindings"`
	// `etag` is used for optimistic concurrency control as a way to help prevent simultaneous updates of a policy from overwriting each other. It is strongly suggested that systems make use of the `etag` in the read-modify-write cycle to perform policy updates in order to avoid race conditions: An `etag` is returned in the response to `getIamPolicy`, and systems are expected to put that etag in the request to `setIamPolicy` to ensure that their change will be applied to the same version of the policy. **Important:** If you use IAM Conditions, you must include the `etag` field whenever you call `setIamPolicy`. If you omit this field, then IAM allows you to overwrite a version `3` policy with a version `1` policy, and all of the conditions in the version `3` policy are lost.
	Etag string `pulumi:"etag"`
	// Specifies the format of the policy. Valid values are `0`, `1`, and `3`. Requests that specify an invalid value are rejected. Any operation that affects conditional role bindings must specify version `3`. This requirement applies to the following operations: * Getting a policy that includes a conditional role binding * Adding a conditional role binding to a policy * Changing a conditional role binding in a policy * Removing any role binding, with or without a condition, from a policy that includes conditions **Important:** If you use IAM Conditions, you must include the `etag` field whenever you call `setIamPolicy`. If you omit this field, then IAM allows you to overwrite a version `3` policy with a version `1` policy, and all of the conditions in the version `3` policy are lost. If a policy does not include any conditions, operations on that policy may specify any valid version or leave the field unset. To learn which resources support conditions in their IAM policies, see the [IAM documentation](https://cloud.google.com/iam/help/conditions/resource-policies).
	Version int `pulumi:"version"`
}

func LookupRestorePlanRestoreIamPolicy

Gets the access control policy for a resource. Returns an empty policy if the resource exists and does not have a policy set.

type LookupRestorePlanRestoreIamPolicyResultOutput

type LookupRestorePlanRestoreIamPolicyResultOutput struct{ *pulumi.OutputState }

func (LookupRestorePlanRestoreIamPolicyResultOutput) AuditConfigs

Specifies cloud audit logging configuration for this policy.

func (LookupRestorePlanRestoreIamPolicyResultOutput) Bindings

Associates a list of `members`, or principals, with a `role`. Optionally, may specify a `condition` that determines how and when the `bindings` are applied. Each of the `bindings` must contain at least one principal. The `bindings` in a `Policy` can refer to up to 1,500 principals; up to 250 of these principals can be Google groups. Each occurrence of a principal counts towards these limits. For example, if the `bindings` grant 50 different roles to `user:alice@example.com`, and not to any other principal, then you can add another 1,450 principals to the `bindings` in the `Policy`.

func (LookupRestorePlanRestoreIamPolicyResultOutput) ElementType

func (LookupRestorePlanRestoreIamPolicyResultOutput) Etag

`etag` is used for optimistic concurrency control as a way to help prevent simultaneous updates of a policy from overwriting each other. It is strongly suggested that systems make use of the `etag` in the read-modify-write cycle to perform policy updates in order to avoid race conditions: An `etag` is returned in the response to `getIamPolicy`, and systems are expected to put that etag in the request to `setIamPolicy` to ensure that their change will be applied to the same version of the policy. **Important:** If you use IAM Conditions, you must include the `etag` field whenever you call `setIamPolicy`. If you omit this field, then IAM allows you to overwrite a version `3` policy with a version `1` policy, and all of the conditions in the version `3` policy are lost.

func (LookupRestorePlanRestoreIamPolicyResultOutput) ToLookupRestorePlanRestoreIamPolicyResultOutput

func (o LookupRestorePlanRestoreIamPolicyResultOutput) ToLookupRestorePlanRestoreIamPolicyResultOutput() LookupRestorePlanRestoreIamPolicyResultOutput

func (LookupRestorePlanRestoreIamPolicyResultOutput) ToLookupRestorePlanRestoreIamPolicyResultOutputWithContext

func (o LookupRestorePlanRestoreIamPolicyResultOutput) ToLookupRestorePlanRestoreIamPolicyResultOutputWithContext(ctx context.Context) LookupRestorePlanRestoreIamPolicyResultOutput

func (LookupRestorePlanRestoreIamPolicyResultOutput) Version

Specifies the format of the policy. Valid values are `0`, `1`, and `3`. Requests that specify an invalid value are rejected. Any operation that affects conditional role bindings must specify version `3`. This requirement applies to the following operations: * Getting a policy that includes a conditional role binding * Adding a conditional role binding to a policy * Changing a conditional role binding in a policy * Removing any role binding, with or without a condition, from a policy that includes conditions **Important:** If you use IAM Conditions, you must include the `etag` field whenever you call `setIamPolicy`. If you omit this field, then IAM allows you to overwrite a version `3` policy with a version `1` policy, and all of the conditions in the version `3` policy are lost. If a policy does not include any conditions, operations on that policy may specify any valid version or leave the field unset. To learn which resources support conditions in their IAM policies, see the [IAM documentation](https://cloud.google.com/iam/help/conditions/resource-policies).

type LookupRestorePlanRestoreVolumeRestoreIamPolicyArgs

type LookupRestorePlanRestoreVolumeRestoreIamPolicyArgs struct {
	Location                      string  `pulumi:"location"`
	OptionsRequestedPolicyVersion *int    `pulumi:"optionsRequestedPolicyVersion"`
	Project                       *string `pulumi:"project"`
	RestoreId                     string  `pulumi:"restoreId"`
	RestorePlanId                 string  `pulumi:"restorePlanId"`
	VolumeRestoreId               string  `pulumi:"volumeRestoreId"`
}

type LookupRestorePlanRestoreVolumeRestoreIamPolicyOutputArgs

type LookupRestorePlanRestoreVolumeRestoreIamPolicyOutputArgs struct {
	Location                      pulumi.StringInput    `pulumi:"location"`
	OptionsRequestedPolicyVersion pulumi.IntPtrInput    `pulumi:"optionsRequestedPolicyVersion"`
	Project                       pulumi.StringPtrInput `pulumi:"project"`
	RestoreId                     pulumi.StringInput    `pulumi:"restoreId"`
	RestorePlanId                 pulumi.StringInput    `pulumi:"restorePlanId"`
	VolumeRestoreId               pulumi.StringInput    `pulumi:"volumeRestoreId"`
}

func (LookupRestorePlanRestoreVolumeRestoreIamPolicyOutputArgs) ElementType

type LookupRestorePlanRestoreVolumeRestoreIamPolicyResult

type LookupRestorePlanRestoreVolumeRestoreIamPolicyResult struct {
	// Specifies cloud audit logging configuration for this policy.
	AuditConfigs []AuditConfigResponse `pulumi:"auditConfigs"`
	// Associates a list of `members`, or principals, with a `role`. Optionally, may specify a `condition` that determines how and when the `bindings` are applied. Each of the `bindings` must contain at least one principal. The `bindings` in a `Policy` can refer to up to 1,500 principals; up to 250 of these principals can be Google groups. Each occurrence of a principal counts towards these limits. For example, if the `bindings` grant 50 different roles to `user:alice@example.com`, and not to any other principal, then you can add another 1,450 principals to the `bindings` in the `Policy`.
	Bindings []BindingResponse `pulumi:"bindings"`
	// `etag` is used for optimistic concurrency control as a way to help prevent simultaneous updates of a policy from overwriting each other. It is strongly suggested that systems make use of the `etag` in the read-modify-write cycle to perform policy updates in order to avoid race conditions: An `etag` is returned in the response to `getIamPolicy`, and systems are expected to put that etag in the request to `setIamPolicy` to ensure that their change will be applied to the same version of the policy. **Important:** If you use IAM Conditions, you must include the `etag` field whenever you call `setIamPolicy`. If you omit this field, then IAM allows you to overwrite a version `3` policy with a version `1` policy, and all of the conditions in the version `3` policy are lost.
	Etag string `pulumi:"etag"`
	// Specifies the format of the policy. Valid values are `0`, `1`, and `3`. Requests that specify an invalid value are rejected. Any operation that affects conditional role bindings must specify version `3`. This requirement applies to the following operations: * Getting a policy that includes a conditional role binding * Adding a conditional role binding to a policy * Changing a conditional role binding in a policy * Removing any role binding, with or without a condition, from a policy that includes conditions **Important:** If you use IAM Conditions, you must include the `etag` field whenever you call `setIamPolicy`. If you omit this field, then IAM allows you to overwrite a version `3` policy with a version `1` policy, and all of the conditions in the version `3` policy are lost. If a policy does not include any conditions, operations on that policy may specify any valid version or leave the field unset. To learn which resources support conditions in their IAM policies, see the [IAM documentation](https://cloud.google.com/iam/help/conditions/resource-policies).
	Version int `pulumi:"version"`
}

func LookupRestorePlanRestoreVolumeRestoreIamPolicy

Gets the access control policy for a resource. Returns an empty policy if the resource exists and does not have a policy set.

type LookupRestorePlanRestoreVolumeRestoreIamPolicyResultOutput

type LookupRestorePlanRestoreVolumeRestoreIamPolicyResultOutput struct{ *pulumi.OutputState }

func (LookupRestorePlanRestoreVolumeRestoreIamPolicyResultOutput) AuditConfigs

Specifies cloud audit logging configuration for this policy.

func (LookupRestorePlanRestoreVolumeRestoreIamPolicyResultOutput) Bindings

Associates a list of `members`, or principals, with a `role`. Optionally, may specify a `condition` that determines how and when the `bindings` are applied. Each of the `bindings` must contain at least one principal. The `bindings` in a `Policy` can refer to up to 1,500 principals; up to 250 of these principals can be Google groups. Each occurrence of a principal counts towards these limits. For example, if the `bindings` grant 50 different roles to `user:alice@example.com`, and not to any other principal, then you can add another 1,450 principals to the `bindings` in the `Policy`.

func (LookupRestorePlanRestoreVolumeRestoreIamPolicyResultOutput) ElementType

func (LookupRestorePlanRestoreVolumeRestoreIamPolicyResultOutput) Etag

`etag` is used for optimistic concurrency control as a way to help prevent simultaneous updates of a policy from overwriting each other. It is strongly suggested that systems make use of the `etag` in the read-modify-write cycle to perform policy updates in order to avoid race conditions: An `etag` is returned in the response to `getIamPolicy`, and systems are expected to put that etag in the request to `setIamPolicy` to ensure that their change will be applied to the same version of the policy. **Important:** If you use IAM Conditions, you must include the `etag` field whenever you call `setIamPolicy`. If you omit this field, then IAM allows you to overwrite a version `3` policy with a version `1` policy, and all of the conditions in the version `3` policy are lost.

func (LookupRestorePlanRestoreVolumeRestoreIamPolicyResultOutput) ToLookupRestorePlanRestoreVolumeRestoreIamPolicyResultOutput

func (LookupRestorePlanRestoreVolumeRestoreIamPolicyResultOutput) ToLookupRestorePlanRestoreVolumeRestoreIamPolicyResultOutputWithContext

func (o LookupRestorePlanRestoreVolumeRestoreIamPolicyResultOutput) ToLookupRestorePlanRestoreVolumeRestoreIamPolicyResultOutputWithContext(ctx context.Context) LookupRestorePlanRestoreVolumeRestoreIamPolicyResultOutput

func (LookupRestorePlanRestoreVolumeRestoreIamPolicyResultOutput) Version

Specifies the format of the policy. Valid values are `0`, `1`, and `3`. Requests that specify an invalid value are rejected. Any operation that affects conditional role bindings must specify version `3`. This requirement applies to the following operations: * Getting a policy that includes a conditional role binding * Adding a conditional role binding to a policy * Changing a conditional role binding in a policy * Removing any role binding, with or without a condition, from a policy that includes conditions **Important:** If you use IAM Conditions, you must include the `etag` field whenever you call `setIamPolicy`. If you omit this field, then IAM allows you to overwrite a version `3` policy with a version `1` policy, and all of the conditions in the version `3` policy are lost. If a policy does not include any conditions, operations on that policy may specify any valid version or leave the field unset. To learn which resources support conditions in their IAM policies, see the [IAM documentation](https://cloud.google.com/iam/help/conditions/resource-policies).

type LookupRestorePlanResult

type LookupRestorePlanResult struct {
	// Immutable. A reference to the BackupPlan from which Backups may be used as the source for Restores created via this RestorePlan. Format: `projects/*/locations/*/backupPlans/*`.
	BackupPlan string `pulumi:"backupPlan"`
	// Immutable. The target cluster into which Restores created via this RestorePlan will restore data. NOTE: the cluster's region must be the same as the RestorePlan. Valid formats: - `projects/*/locations/*/clusters/*` - `projects/*/zones/*/clusters/*`
	Cluster string `pulumi:"cluster"`
	// The timestamp when this RestorePlan resource was created.
	CreateTime string `pulumi:"createTime"`
	// Optional. User specified descriptive string for this RestorePlan.
	Description string `pulumi:"description"`
	// `etag` is used for optimistic concurrency control as a way to help prevent simultaneous updates of a restore from overwriting each other. It is strongly suggested that systems make use of the `etag` in the read-modify-write cycle to perform restore updates in order to avoid race conditions: An `etag` is returned in the response to `GetRestorePlan`, and systems are expected to put that etag in the request to `UpdateRestorePlan` or `DeleteRestorePlan` to ensure that their change will be applied to the same version of the resource.
	Etag string `pulumi:"etag"`
	// Optional. A set of custom labels supplied by user.
	Labels map[string]string `pulumi:"labels"`
	// The full name of the RestorePlan resource. Format: `projects/*/locations/*/restorePlans/*`.
	Name string `pulumi:"name"`
	// Configuration of Restores created via this RestorePlan.
	RestoreConfig RestoreConfigResponse `pulumi:"restoreConfig"`
	// State of the RestorePlan. This State field reflects the various stages a RestorePlan can be in during the Create operation.
	State string `pulumi:"state"`
	// Human-readable description of why RestorePlan is in the current `state`
	StateReason string `pulumi:"stateReason"`
	// Server generated global unique identifier of [UUID](https://en.wikipedia.org/wiki/Universally_unique_identifier) format.
	Uid string `pulumi:"uid"`
	// The timestamp when this RestorePlan resource was last updated.
	UpdateTime string `pulumi:"updateTime"`
}

func LookupRestorePlan

func LookupRestorePlan(ctx *pulumi.Context, args *LookupRestorePlanArgs, opts ...pulumi.InvokeOption) (*LookupRestorePlanResult, error)

Retrieve the details of a single RestorePlan.

type LookupRestorePlanResultOutput

type LookupRestorePlanResultOutput struct{ *pulumi.OutputState }

func (LookupRestorePlanResultOutput) BackupPlan

Immutable. A reference to the BackupPlan from which Backups may be used as the source for Restores created via this RestorePlan. Format: `projects/*/locations/*/backupPlans/*`.

func (LookupRestorePlanResultOutput) Cluster

Immutable. The target cluster into which Restores created via this RestorePlan will restore data. NOTE: the cluster's region must be the same as the RestorePlan. Valid formats: - `projects/*/locations/*/clusters/*` - `projects/*/zones/*/clusters/*`

func (LookupRestorePlanResultOutput) CreateTime

The timestamp when this RestorePlan resource was created.

func (LookupRestorePlanResultOutput) Description

Optional. User specified descriptive string for this RestorePlan.

func (LookupRestorePlanResultOutput) ElementType

func (LookupRestorePlanResultOutput) Etag

`etag` is used for optimistic concurrency control as a way to help prevent simultaneous updates of a restore from overwriting each other. It is strongly suggested that systems make use of the `etag` in the read-modify-write cycle to perform restore updates in order to avoid race conditions: An `etag` is returned in the response to `GetRestorePlan`, and systems are expected to put that etag in the request to `UpdateRestorePlan` or `DeleteRestorePlan` to ensure that their change will be applied to the same version of the resource.

func (LookupRestorePlanResultOutput) Labels

Optional. A set of custom labels supplied by user.

func (LookupRestorePlanResultOutput) Name

The full name of the RestorePlan resource. Format: `projects/*/locations/*/restorePlans/*`.

func (LookupRestorePlanResultOutput) RestoreConfig

Configuration of Restores created via this RestorePlan.

func (LookupRestorePlanResultOutput) State added in v0.32.0

State of the RestorePlan. This State field reflects the various stages a RestorePlan can be in during the Create operation.

func (LookupRestorePlanResultOutput) StateReason added in v0.32.0

Human-readable description of why RestorePlan is in the current `state`

func (LookupRestorePlanResultOutput) ToLookupRestorePlanResultOutput

func (o LookupRestorePlanResultOutput) ToLookupRestorePlanResultOutput() LookupRestorePlanResultOutput

func (LookupRestorePlanResultOutput) ToLookupRestorePlanResultOutputWithContext

func (o LookupRestorePlanResultOutput) ToLookupRestorePlanResultOutputWithContext(ctx context.Context) LookupRestorePlanResultOutput

func (LookupRestorePlanResultOutput) Uid

Server generated global unique identifier of [UUID](https://en.wikipedia.org/wiki/Universally_unique_identifier) format.

func (LookupRestorePlanResultOutput) UpdateTime

The timestamp when this RestorePlan resource was last updated.

type LookupRestoreResult

type LookupRestoreResult struct {
	// Immutable. A reference to the Backup used as the source from which this Restore will restore. Note that this Backup must be a sub-resource of the RestorePlan's backup_plan. Format: `projects/*/locations/*/backupPlans/*/backups/*`.
	Backup string `pulumi:"backup"`
	// The target cluster into which this Restore will restore data. Valid formats: - `projects/*/locations/*/clusters/*` - `projects/*/zones/*/clusters/*` Inherited from parent RestorePlan's cluster value.
	Cluster string `pulumi:"cluster"`
	// Timestamp of when the restore operation completed.
	CompleteTime string `pulumi:"completeTime"`
	// The timestamp when this Restore resource was created.
	CreateTime string `pulumi:"createTime"`
	// User specified descriptive string for this Restore.
	Description string `pulumi:"description"`
	// `etag` is used for optimistic concurrency control as a way to help prevent simultaneous updates of a restore from overwriting each other. It is strongly suggested that systems make use of the `etag` in the read-modify-write cycle to perform restore updates in order to avoid race conditions: An `etag` is returned in the response to `GetRestore`, and systems are expected to put that etag in the request to `UpdateRestore` or `DeleteRestore` to ensure that their change will be applied to the same version of the resource.
	Etag string `pulumi:"etag"`
	// A set of custom labels supplied by user.
	Labels map[string]string `pulumi:"labels"`
	// The full name of the Restore resource. Format: `projects/*/locations/*/restorePlans/*/restores/*`
	Name string `pulumi:"name"`
	// Number of resources excluded during the restore execution.
	ResourcesExcludedCount int `pulumi:"resourcesExcludedCount"`
	// Number of resources that failed to be restored during the restore execution.
	ResourcesFailedCount int `pulumi:"resourcesFailedCount"`
	// Number of resources restored during the restore execution.
	ResourcesRestoredCount int `pulumi:"resourcesRestoredCount"`
	// Configuration of the Restore. Inherited from parent RestorePlan's restore_config.
	RestoreConfig RestoreConfigResponse `pulumi:"restoreConfig"`
	// The current state of the Restore.
	State string `pulumi:"state"`
	// Human-readable description of why the Restore is in its current state.
	StateReason string `pulumi:"stateReason"`
	// Server generated global unique identifier of [UUID](https://en.wikipedia.org/wiki/Universally_unique_identifier) format.
	Uid string `pulumi:"uid"`
	// The timestamp when this Restore resource was last updated.
	UpdateTime string `pulumi:"updateTime"`
	// Number of volumes restored during the restore execution.
	VolumesRestoredCount int `pulumi:"volumesRestoredCount"`
}

func LookupRestore

func LookupRestore(ctx *pulumi.Context, args *LookupRestoreArgs, opts ...pulumi.InvokeOption) (*LookupRestoreResult, error)

Retrieves the details of a single Restore.

type LookupRestoreResultOutput

type LookupRestoreResultOutput struct{ *pulumi.OutputState }

func (LookupRestoreResultOutput) Backup

Immutable. A reference to the Backup used as the source from which this Restore will restore. Note that this Backup must be a sub-resource of the RestorePlan's backup_plan. Format: `projects/*/locations/*/backupPlans/*/backups/*`.

func (LookupRestoreResultOutput) Cluster

The target cluster into which this Restore will restore data. Valid formats: - `projects/*/locations/*/clusters/*` - `projects/*/zones/*/clusters/*` Inherited from parent RestorePlan's cluster value.

func (LookupRestoreResultOutput) CompleteTime

Timestamp of when the restore operation completed.

func (LookupRestoreResultOutput) CreateTime

The timestamp when this Restore resource was created.

func (LookupRestoreResultOutput) Description

User specified descriptive string for this Restore.

func (LookupRestoreResultOutput) ElementType

func (LookupRestoreResultOutput) ElementType() reflect.Type

func (LookupRestoreResultOutput) Etag

`etag` is used for optimistic concurrency control as a way to help prevent simultaneous updates of a restore from overwriting each other. It is strongly suggested that systems make use of the `etag` in the read-modify-write cycle to perform restore updates in order to avoid race conditions: An `etag` is returned in the response to `GetRestore`, and systems are expected to put that etag in the request to `UpdateRestore` or `DeleteRestore` to ensure that their change will be applied to the same version of the resource.

func (LookupRestoreResultOutput) Labels

A set of custom labels supplied by user.

func (LookupRestoreResultOutput) Name

The full name of the Restore resource. Format: `projects/*/locations/*/restorePlans/*/restores/*`

func (LookupRestoreResultOutput) ResourcesExcludedCount

func (o LookupRestoreResultOutput) ResourcesExcludedCount() pulumi.IntOutput

Number of resources excluded during the restore execution.

func (LookupRestoreResultOutput) ResourcesFailedCount

func (o LookupRestoreResultOutput) ResourcesFailedCount() pulumi.IntOutput

Number of resources that failed to be restored during the restore execution.

func (LookupRestoreResultOutput) ResourcesRestoredCount

func (o LookupRestoreResultOutput) ResourcesRestoredCount() pulumi.IntOutput

Number of resources restored during the restore execution.

func (LookupRestoreResultOutput) RestoreConfig

Configuration of the Restore. Inherited from parent RestorePlan's restore_config.

func (LookupRestoreResultOutput) State

The current state of the Restore.

func (LookupRestoreResultOutput) StateReason

Human-readable description of why the Restore is in its current state.

func (LookupRestoreResultOutput) ToLookupRestoreResultOutput

func (o LookupRestoreResultOutput) ToLookupRestoreResultOutput() LookupRestoreResultOutput

func (LookupRestoreResultOutput) ToLookupRestoreResultOutputWithContext

func (o LookupRestoreResultOutput) ToLookupRestoreResultOutputWithContext(ctx context.Context) LookupRestoreResultOutput

func (LookupRestoreResultOutput) Uid

Server generated global unique identifier of [UUID](https://en.wikipedia.org/wiki/Universally_unique_identifier) format.

func (LookupRestoreResultOutput) UpdateTime

The timestamp when this Restore resource was last updated.

func (LookupRestoreResultOutput) VolumesRestoredCount

func (o LookupRestoreResultOutput) VolumesRestoredCount() pulumi.IntOutput

Number of volumes restored during the restore execution.

type NamespacedName

type NamespacedName struct {
	// Optional. The name of the Kubernetes resource.
	Name *string `pulumi:"name"`
	// Optional. The Namespace of the Kubernetes resource.
	Namespace *string `pulumi:"namespace"`
}

A reference to a namespaced resource in Kubernetes.

type NamespacedNameArgs

type NamespacedNameArgs struct {
	// Optional. The name of the Kubernetes resource.
	Name pulumi.StringPtrInput `pulumi:"name"`
	// Optional. The Namespace of the Kubernetes resource.
	Namespace pulumi.StringPtrInput `pulumi:"namespace"`
}

A reference to a namespaced resource in Kubernetes.

func (NamespacedNameArgs) ElementType

func (NamespacedNameArgs) ElementType() reflect.Type

func (NamespacedNameArgs) ToNamespacedNameOutput

func (i NamespacedNameArgs) ToNamespacedNameOutput() NamespacedNameOutput

func (NamespacedNameArgs) ToNamespacedNameOutputWithContext

func (i NamespacedNameArgs) ToNamespacedNameOutputWithContext(ctx context.Context) NamespacedNameOutput

type NamespacedNameArray

type NamespacedNameArray []NamespacedNameInput

func (NamespacedNameArray) ElementType

func (NamespacedNameArray) ElementType() reflect.Type

func (NamespacedNameArray) ToNamespacedNameArrayOutput

func (i NamespacedNameArray) ToNamespacedNameArrayOutput() NamespacedNameArrayOutput

func (NamespacedNameArray) ToNamespacedNameArrayOutputWithContext

func (i NamespacedNameArray) ToNamespacedNameArrayOutputWithContext(ctx context.Context) NamespacedNameArrayOutput

type NamespacedNameArrayInput

type NamespacedNameArrayInput interface {
	pulumi.Input

	ToNamespacedNameArrayOutput() NamespacedNameArrayOutput
	ToNamespacedNameArrayOutputWithContext(context.Context) NamespacedNameArrayOutput
}

NamespacedNameArrayInput is an input type that accepts NamespacedNameArray and NamespacedNameArrayOutput values. You can construct a concrete instance of `NamespacedNameArrayInput` via:

NamespacedNameArray{ NamespacedNameArgs{...} }

type NamespacedNameArrayOutput

type NamespacedNameArrayOutput struct{ *pulumi.OutputState }

func (NamespacedNameArrayOutput) ElementType

func (NamespacedNameArrayOutput) ElementType() reflect.Type

func (NamespacedNameArrayOutput) Index

func (NamespacedNameArrayOutput) ToNamespacedNameArrayOutput

func (o NamespacedNameArrayOutput) ToNamespacedNameArrayOutput() NamespacedNameArrayOutput

func (NamespacedNameArrayOutput) ToNamespacedNameArrayOutputWithContext

func (o NamespacedNameArrayOutput) ToNamespacedNameArrayOutputWithContext(ctx context.Context) NamespacedNameArrayOutput

type NamespacedNameInput

type NamespacedNameInput interface {
	pulumi.Input

	ToNamespacedNameOutput() NamespacedNameOutput
	ToNamespacedNameOutputWithContext(context.Context) NamespacedNameOutput
}

NamespacedNameInput is an input type that accepts NamespacedNameArgs and NamespacedNameOutput values. You can construct a concrete instance of `NamespacedNameInput` via:

NamespacedNameArgs{...}

type NamespacedNameOutput

type NamespacedNameOutput struct{ *pulumi.OutputState }

A reference to a namespaced resource in Kubernetes.

func (NamespacedNameOutput) ElementType

func (NamespacedNameOutput) ElementType() reflect.Type

func (NamespacedNameOutput) Name

Optional. The name of the Kubernetes resource.

func (NamespacedNameOutput) Namespace

Optional. The Namespace of the Kubernetes resource.

func (NamespacedNameOutput) ToNamespacedNameOutput

func (o NamespacedNameOutput) ToNamespacedNameOutput() NamespacedNameOutput

func (NamespacedNameOutput) ToNamespacedNameOutputWithContext

func (o NamespacedNameOutput) ToNamespacedNameOutputWithContext(ctx context.Context) NamespacedNameOutput

type NamespacedNameResponse

type NamespacedNameResponse struct {
	// Optional. The name of the Kubernetes resource.
	Name string `pulumi:"name"`
	// Optional. The Namespace of the Kubernetes resource.
	Namespace string `pulumi:"namespace"`
}

A reference to a namespaced resource in Kubernetes.

type NamespacedNameResponseArrayOutput

type NamespacedNameResponseArrayOutput struct{ *pulumi.OutputState }

func (NamespacedNameResponseArrayOutput) ElementType

func (NamespacedNameResponseArrayOutput) Index

func (NamespacedNameResponseArrayOutput) ToNamespacedNameResponseArrayOutput

func (o NamespacedNameResponseArrayOutput) ToNamespacedNameResponseArrayOutput() NamespacedNameResponseArrayOutput

func (NamespacedNameResponseArrayOutput) ToNamespacedNameResponseArrayOutputWithContext

func (o NamespacedNameResponseArrayOutput) ToNamespacedNameResponseArrayOutputWithContext(ctx context.Context) NamespacedNameResponseArrayOutput

type NamespacedNameResponseOutput

type NamespacedNameResponseOutput struct{ *pulumi.OutputState }

A reference to a namespaced resource in Kubernetes.

func (NamespacedNameResponseOutput) ElementType

func (NamespacedNameResponseOutput) Name

Optional. The name of the Kubernetes resource.

func (NamespacedNameResponseOutput) Namespace

Optional. The Namespace of the Kubernetes resource.

func (NamespacedNameResponseOutput) ToNamespacedNameResponseOutput

func (o NamespacedNameResponseOutput) ToNamespacedNameResponseOutput() NamespacedNameResponseOutput

func (NamespacedNameResponseOutput) ToNamespacedNameResponseOutputWithContext

func (o NamespacedNameResponseOutput) ToNamespacedNameResponseOutputWithContext(ctx context.Context) NamespacedNameResponseOutput

type NamespacedNames

type NamespacedNames struct {
	// Optional. A list of namespaced Kubernetes resources.
	NamespacedNames []NamespacedName `pulumi:"namespacedNames"`
}

A list of namespaced Kubernetes resources.

type NamespacedNamesArgs

type NamespacedNamesArgs struct {
	// Optional. A list of namespaced Kubernetes resources.
	NamespacedNames NamespacedNameArrayInput `pulumi:"namespacedNames"`
}

A list of namespaced Kubernetes resources.

func (NamespacedNamesArgs) ElementType

func (NamespacedNamesArgs) ElementType() reflect.Type

func (NamespacedNamesArgs) ToNamespacedNamesOutput

func (i NamespacedNamesArgs) ToNamespacedNamesOutput() NamespacedNamesOutput

func (NamespacedNamesArgs) ToNamespacedNamesOutputWithContext

func (i NamespacedNamesArgs) ToNamespacedNamesOutputWithContext(ctx context.Context) NamespacedNamesOutput

func (NamespacedNamesArgs) ToNamespacedNamesPtrOutput

func (i NamespacedNamesArgs) ToNamespacedNamesPtrOutput() NamespacedNamesPtrOutput

func (NamespacedNamesArgs) ToNamespacedNamesPtrOutputWithContext

func (i NamespacedNamesArgs) ToNamespacedNamesPtrOutputWithContext(ctx context.Context) NamespacedNamesPtrOutput

type NamespacedNamesInput

type NamespacedNamesInput interface {
	pulumi.Input

	ToNamespacedNamesOutput() NamespacedNamesOutput
	ToNamespacedNamesOutputWithContext(context.Context) NamespacedNamesOutput
}

NamespacedNamesInput is an input type that accepts NamespacedNamesArgs and NamespacedNamesOutput values. You can construct a concrete instance of `NamespacedNamesInput` via:

NamespacedNamesArgs{...}

type NamespacedNamesOutput

type NamespacedNamesOutput struct{ *pulumi.OutputState }

A list of namespaced Kubernetes resources.

func (NamespacedNamesOutput) ElementType

func (NamespacedNamesOutput) ElementType() reflect.Type

func (NamespacedNamesOutput) NamespacedNames

Optional. A list of namespaced Kubernetes resources.

func (NamespacedNamesOutput) ToNamespacedNamesOutput

func (o NamespacedNamesOutput) ToNamespacedNamesOutput() NamespacedNamesOutput

func (NamespacedNamesOutput) ToNamespacedNamesOutputWithContext

func (o NamespacedNamesOutput) ToNamespacedNamesOutputWithContext(ctx context.Context) NamespacedNamesOutput

func (NamespacedNamesOutput) ToNamespacedNamesPtrOutput

func (o NamespacedNamesOutput) ToNamespacedNamesPtrOutput() NamespacedNamesPtrOutput

func (NamespacedNamesOutput) ToNamespacedNamesPtrOutputWithContext

func (o NamespacedNamesOutput) ToNamespacedNamesPtrOutputWithContext(ctx context.Context) NamespacedNamesPtrOutput

type NamespacedNamesPtrInput

type NamespacedNamesPtrInput interface {
	pulumi.Input

	ToNamespacedNamesPtrOutput() NamespacedNamesPtrOutput
	ToNamespacedNamesPtrOutputWithContext(context.Context) NamespacedNamesPtrOutput
}

NamespacedNamesPtrInput is an input type that accepts NamespacedNamesArgs, NamespacedNamesPtr and NamespacedNamesPtrOutput values. You can construct a concrete instance of `NamespacedNamesPtrInput` via:

        NamespacedNamesArgs{...}

or:

        nil

type NamespacedNamesPtrOutput

type NamespacedNamesPtrOutput struct{ *pulumi.OutputState }

func (NamespacedNamesPtrOutput) Elem

func (NamespacedNamesPtrOutput) ElementType

func (NamespacedNamesPtrOutput) ElementType() reflect.Type

func (NamespacedNamesPtrOutput) NamespacedNames

Optional. A list of namespaced Kubernetes resources.

func (NamespacedNamesPtrOutput) ToNamespacedNamesPtrOutput

func (o NamespacedNamesPtrOutput) ToNamespacedNamesPtrOutput() NamespacedNamesPtrOutput

func (NamespacedNamesPtrOutput) ToNamespacedNamesPtrOutputWithContext

func (o NamespacedNamesPtrOutput) ToNamespacedNamesPtrOutputWithContext(ctx context.Context) NamespacedNamesPtrOutput

type NamespacedNamesResponse

type NamespacedNamesResponse struct {
	// Optional. A list of namespaced Kubernetes resources.
	NamespacedNames []NamespacedNameResponse `pulumi:"namespacedNames"`
}

A list of namespaced Kubernetes resources.

type NamespacedNamesResponseOutput

type NamespacedNamesResponseOutput struct{ *pulumi.OutputState }

A list of namespaced Kubernetes resources.

func (NamespacedNamesResponseOutput) ElementType

func (NamespacedNamesResponseOutput) NamespacedNames

Optional. A list of namespaced Kubernetes resources.

func (NamespacedNamesResponseOutput) ToNamespacedNamesResponseOutput

func (o NamespacedNamesResponseOutput) ToNamespacedNamesResponseOutput() NamespacedNamesResponseOutput

func (NamespacedNamesResponseOutput) ToNamespacedNamesResponseOutputWithContext

func (o NamespacedNamesResponseOutput) ToNamespacedNamesResponseOutputWithContext(ctx context.Context) NamespacedNamesResponseOutput

type Namespaces

type Namespaces struct {
	// Optional. A list of Kubernetes Namespaces
	Namespaces []string `pulumi:"namespaces"`
}

A list of Kubernetes Namespaces

type NamespacesArgs

type NamespacesArgs struct {
	// Optional. A list of Kubernetes Namespaces
	Namespaces pulumi.StringArrayInput `pulumi:"namespaces"`
}

A list of Kubernetes Namespaces

func (NamespacesArgs) ElementType

func (NamespacesArgs) ElementType() reflect.Type

func (NamespacesArgs) ToNamespacesOutput

func (i NamespacesArgs) ToNamespacesOutput() NamespacesOutput

func (NamespacesArgs) ToNamespacesOutputWithContext

func (i NamespacesArgs) ToNamespacesOutputWithContext(ctx context.Context) NamespacesOutput

func (NamespacesArgs) ToNamespacesPtrOutput

func (i NamespacesArgs) ToNamespacesPtrOutput() NamespacesPtrOutput

func (NamespacesArgs) ToNamespacesPtrOutputWithContext

func (i NamespacesArgs) ToNamespacesPtrOutputWithContext(ctx context.Context) NamespacesPtrOutput

type NamespacesInput

type NamespacesInput interface {
	pulumi.Input

	ToNamespacesOutput() NamespacesOutput
	ToNamespacesOutputWithContext(context.Context) NamespacesOutput
}

NamespacesInput is an input type that accepts NamespacesArgs and NamespacesOutput values. You can construct a concrete instance of `NamespacesInput` via:

NamespacesArgs{...}

type NamespacesOutput

type NamespacesOutput struct{ *pulumi.OutputState }

A list of Kubernetes Namespaces

func (NamespacesOutput) ElementType

func (NamespacesOutput) ElementType() reflect.Type

func (NamespacesOutput) Namespaces

func (o NamespacesOutput) Namespaces() pulumi.StringArrayOutput

Optional. A list of Kubernetes Namespaces

func (NamespacesOutput) ToNamespacesOutput

func (o NamespacesOutput) ToNamespacesOutput() NamespacesOutput

func (NamespacesOutput) ToNamespacesOutputWithContext

func (o NamespacesOutput) ToNamespacesOutputWithContext(ctx context.Context) NamespacesOutput

func (NamespacesOutput) ToNamespacesPtrOutput

func (o NamespacesOutput) ToNamespacesPtrOutput() NamespacesPtrOutput

func (NamespacesOutput) ToNamespacesPtrOutputWithContext

func (o NamespacesOutput) ToNamespacesPtrOutputWithContext(ctx context.Context) NamespacesPtrOutput

type NamespacesPtrInput

type NamespacesPtrInput interface {
	pulumi.Input

	ToNamespacesPtrOutput() NamespacesPtrOutput
	ToNamespacesPtrOutputWithContext(context.Context) NamespacesPtrOutput
}

NamespacesPtrInput is an input type that accepts NamespacesArgs, NamespacesPtr and NamespacesPtrOutput values. You can construct a concrete instance of `NamespacesPtrInput` via:

        NamespacesArgs{...}

or:

        nil

func NamespacesPtr

func NamespacesPtr(v *NamespacesArgs) NamespacesPtrInput

type NamespacesPtrOutput

type NamespacesPtrOutput struct{ *pulumi.OutputState }

func (NamespacesPtrOutput) Elem

func (NamespacesPtrOutput) ElementType

func (NamespacesPtrOutput) ElementType() reflect.Type

func (NamespacesPtrOutput) Namespaces

Optional. A list of Kubernetes Namespaces

func (NamespacesPtrOutput) ToNamespacesPtrOutput

func (o NamespacesPtrOutput) ToNamespacesPtrOutput() NamespacesPtrOutput

func (NamespacesPtrOutput) ToNamespacesPtrOutputWithContext

func (o NamespacesPtrOutput) ToNamespacesPtrOutputWithContext(ctx context.Context) NamespacesPtrOutput

type NamespacesResponse

type NamespacesResponse struct {
	// Optional. A list of Kubernetes Namespaces
	Namespaces []string `pulumi:"namespaces"`
}

A list of Kubernetes Namespaces

type NamespacesResponseOutput

type NamespacesResponseOutput struct{ *pulumi.OutputState }

A list of Kubernetes Namespaces

func (NamespacesResponseOutput) ElementType

func (NamespacesResponseOutput) ElementType() reflect.Type

func (NamespacesResponseOutput) Namespaces

Optional. A list of Kubernetes Namespaces

func (NamespacesResponseOutput) ToNamespacesResponseOutput

func (o NamespacesResponseOutput) ToNamespacesResponseOutput() NamespacesResponseOutput

func (NamespacesResponseOutput) ToNamespacesResponseOutputWithContext

func (o NamespacesResponseOutput) ToNamespacesResponseOutputWithContext(ctx context.Context) NamespacesResponseOutput

type ResourceFilter added in v0.32.0

type ResourceFilter struct {
	// Optional. (Filtering parameter) Any resource subject to transformation must belong to one of the listed "types". If this field is not provided, no type filtering will be performed (all resources of all types matching previous filtering parameters will be candidates for transformation).
	GroupKinds []GroupKind `pulumi:"groupKinds"`
	// Optional. This is a [JSONPath] (https://github.com/json-path/JsonPath/blob/master/README.md) expression that matches specific fields of candidate resources and it operates as a filtering parameter (resources that are not matched with this expression will not be candidates for transformation).
	JsonPath *string `pulumi:"jsonPath"`
	// Optional. (Filtering parameter) Any resource subject to transformation must be contained within one of the listed Kubernetes Namespace in the Backup. If this field is not provided, no namespace filtering will be performed (all resources in all Namespaces, including all cluster-scoped resources, will be candidates for transformation).
	Namespaces []string `pulumi:"namespaces"`
}

ResourceFilter specifies matching criteria to limit the scope of a change to a specific set of kubernetes resources that are selected for restoration from a backup.

type ResourceFilterArgs added in v0.32.0

type ResourceFilterArgs struct {
	// Optional. (Filtering parameter) Any resource subject to transformation must belong to one of the listed "types". If this field is not provided, no type filtering will be performed (all resources of all types matching previous filtering parameters will be candidates for transformation).
	GroupKinds GroupKindArrayInput `pulumi:"groupKinds"`
	// Optional. This is a [JSONPath] (https://github.com/json-path/JsonPath/blob/master/README.md) expression that matches specific fields of candidate resources and it operates as a filtering parameter (resources that are not matched with this expression will not be candidates for transformation).
	JsonPath pulumi.StringPtrInput `pulumi:"jsonPath"`
	// Optional. (Filtering parameter) Any resource subject to transformation must be contained within one of the listed Kubernetes Namespace in the Backup. If this field is not provided, no namespace filtering will be performed (all resources in all Namespaces, including all cluster-scoped resources, will be candidates for transformation).
	Namespaces pulumi.StringArrayInput `pulumi:"namespaces"`
}

ResourceFilter specifies matching criteria to limit the scope of a change to a specific set of kubernetes resources that are selected for restoration from a backup.

func (ResourceFilterArgs) ElementType added in v0.32.0

func (ResourceFilterArgs) ElementType() reflect.Type

func (ResourceFilterArgs) ToResourceFilterOutput added in v0.32.0

func (i ResourceFilterArgs) ToResourceFilterOutput() ResourceFilterOutput

func (ResourceFilterArgs) ToResourceFilterOutputWithContext added in v0.32.0

func (i ResourceFilterArgs) ToResourceFilterOutputWithContext(ctx context.Context) ResourceFilterOutput

func (ResourceFilterArgs) ToResourceFilterPtrOutput added in v0.32.0

func (i ResourceFilterArgs) ToResourceFilterPtrOutput() ResourceFilterPtrOutput

func (ResourceFilterArgs) ToResourceFilterPtrOutputWithContext added in v0.32.0

func (i ResourceFilterArgs) ToResourceFilterPtrOutputWithContext(ctx context.Context) ResourceFilterPtrOutput

type ResourceFilterInput added in v0.32.0

type ResourceFilterInput interface {
	pulumi.Input

	ToResourceFilterOutput() ResourceFilterOutput
	ToResourceFilterOutputWithContext(context.Context) ResourceFilterOutput
}

ResourceFilterInput is an input type that accepts ResourceFilterArgs and ResourceFilterOutput values. You can construct a concrete instance of `ResourceFilterInput` via:

ResourceFilterArgs{...}

type ResourceFilterOutput added in v0.32.0

type ResourceFilterOutput struct{ *pulumi.OutputState }

ResourceFilter specifies matching criteria to limit the scope of a change to a specific set of kubernetes resources that are selected for restoration from a backup.

func (ResourceFilterOutput) ElementType added in v0.32.0

func (ResourceFilterOutput) ElementType() reflect.Type

func (ResourceFilterOutput) GroupKinds added in v0.32.0

Optional. (Filtering parameter) Any resource subject to transformation must belong to one of the listed "types". If this field is not provided, no type filtering will be performed (all resources of all types matching previous filtering parameters will be candidates for transformation).

func (ResourceFilterOutput) JsonPath added in v0.32.0

Optional. This is a [JSONPath] (https://github.com/json-path/JsonPath/blob/master/README.md) expression that matches specific fields of candidate resources and it operates as a filtering parameter (resources that are not matched with this expression will not be candidates for transformation).

func (ResourceFilterOutput) Namespaces added in v0.32.0

Optional. (Filtering parameter) Any resource subject to transformation must be contained within one of the listed Kubernetes Namespace in the Backup. If this field is not provided, no namespace filtering will be performed (all resources in all Namespaces, including all cluster-scoped resources, will be candidates for transformation).

func (ResourceFilterOutput) ToResourceFilterOutput added in v0.32.0

func (o ResourceFilterOutput) ToResourceFilterOutput() ResourceFilterOutput

func (ResourceFilterOutput) ToResourceFilterOutputWithContext added in v0.32.0

func (o ResourceFilterOutput) ToResourceFilterOutputWithContext(ctx context.Context) ResourceFilterOutput

func (ResourceFilterOutput) ToResourceFilterPtrOutput added in v0.32.0

func (o ResourceFilterOutput) ToResourceFilterPtrOutput() ResourceFilterPtrOutput

func (ResourceFilterOutput) ToResourceFilterPtrOutputWithContext added in v0.32.0

func (o ResourceFilterOutput) ToResourceFilterPtrOutputWithContext(ctx context.Context) ResourceFilterPtrOutput

type ResourceFilterPtrInput added in v0.32.0

type ResourceFilterPtrInput interface {
	pulumi.Input

	ToResourceFilterPtrOutput() ResourceFilterPtrOutput
	ToResourceFilterPtrOutputWithContext(context.Context) ResourceFilterPtrOutput
}

ResourceFilterPtrInput is an input type that accepts ResourceFilterArgs, ResourceFilterPtr and ResourceFilterPtrOutput values. You can construct a concrete instance of `ResourceFilterPtrInput` via:

        ResourceFilterArgs{...}

or:

        nil

func ResourceFilterPtr added in v0.32.0

func ResourceFilterPtr(v *ResourceFilterArgs) ResourceFilterPtrInput

type ResourceFilterPtrOutput added in v0.32.0

type ResourceFilterPtrOutput struct{ *pulumi.OutputState }

func (ResourceFilterPtrOutput) Elem added in v0.32.0

func (ResourceFilterPtrOutput) ElementType added in v0.32.0

func (ResourceFilterPtrOutput) ElementType() reflect.Type

func (ResourceFilterPtrOutput) GroupKinds added in v0.32.0

Optional. (Filtering parameter) Any resource subject to transformation must belong to one of the listed "types". If this field is not provided, no type filtering will be performed (all resources of all types matching previous filtering parameters will be candidates for transformation).

func (ResourceFilterPtrOutput) JsonPath added in v0.32.0

Optional. This is a [JSONPath] (https://github.com/json-path/JsonPath/blob/master/README.md) expression that matches specific fields of candidate resources and it operates as a filtering parameter (resources that are not matched with this expression will not be candidates for transformation).

func (ResourceFilterPtrOutput) Namespaces added in v0.32.0

Optional. (Filtering parameter) Any resource subject to transformation must be contained within one of the listed Kubernetes Namespace in the Backup. If this field is not provided, no namespace filtering will be performed (all resources in all Namespaces, including all cluster-scoped resources, will be candidates for transformation).

func (ResourceFilterPtrOutput) ToResourceFilterPtrOutput added in v0.32.0

func (o ResourceFilterPtrOutput) ToResourceFilterPtrOutput() ResourceFilterPtrOutput

func (ResourceFilterPtrOutput) ToResourceFilterPtrOutputWithContext added in v0.32.0

func (o ResourceFilterPtrOutput) ToResourceFilterPtrOutputWithContext(ctx context.Context) ResourceFilterPtrOutput

type ResourceFilterResponse added in v0.32.0

type ResourceFilterResponse struct {
	// Optional. (Filtering parameter) Any resource subject to transformation must belong to one of the listed "types". If this field is not provided, no type filtering will be performed (all resources of all types matching previous filtering parameters will be candidates for transformation).
	GroupKinds []GroupKindResponse `pulumi:"groupKinds"`
	// Optional. This is a [JSONPath] (https://github.com/json-path/JsonPath/blob/master/README.md) expression that matches specific fields of candidate resources and it operates as a filtering parameter (resources that are not matched with this expression will not be candidates for transformation).
	JsonPath string `pulumi:"jsonPath"`
	// Optional. (Filtering parameter) Any resource subject to transformation must be contained within one of the listed Kubernetes Namespace in the Backup. If this field is not provided, no namespace filtering will be performed (all resources in all Namespaces, including all cluster-scoped resources, will be candidates for transformation).
	Namespaces []string `pulumi:"namespaces"`
}

ResourceFilter specifies matching criteria to limit the scope of a change to a specific set of kubernetes resources that are selected for restoration from a backup.

type ResourceFilterResponseOutput added in v0.32.0

type ResourceFilterResponseOutput struct{ *pulumi.OutputState }

ResourceFilter specifies matching criteria to limit the scope of a change to a specific set of kubernetes resources that are selected for restoration from a backup.

func (ResourceFilterResponseOutput) ElementType added in v0.32.0

func (ResourceFilterResponseOutput) GroupKinds added in v0.32.0

Optional. (Filtering parameter) Any resource subject to transformation must belong to one of the listed "types". If this field is not provided, no type filtering will be performed (all resources of all types matching previous filtering parameters will be candidates for transformation).

func (ResourceFilterResponseOutput) JsonPath added in v0.32.0

Optional. This is a [JSONPath] (https://github.com/json-path/JsonPath/blob/master/README.md) expression that matches specific fields of candidate resources and it operates as a filtering parameter (resources that are not matched with this expression will not be candidates for transformation).

func (ResourceFilterResponseOutput) Namespaces added in v0.32.0

Optional. (Filtering parameter) Any resource subject to transformation must be contained within one of the listed Kubernetes Namespace in the Backup. If this field is not provided, no namespace filtering will be performed (all resources in all Namespaces, including all cluster-scoped resources, will be candidates for transformation).

func (ResourceFilterResponseOutput) ToResourceFilterResponseOutput added in v0.32.0

func (o ResourceFilterResponseOutput) ToResourceFilterResponseOutput() ResourceFilterResponseOutput

func (ResourceFilterResponseOutput) ToResourceFilterResponseOutputWithContext added in v0.32.0

func (o ResourceFilterResponseOutput) ToResourceFilterResponseOutputWithContext(ctx context.Context) ResourceFilterResponseOutput

type Restore

type Restore struct {
	pulumi.CustomResourceState

	// Immutable. A reference to the Backup used as the source from which this Restore will restore. Note that this Backup must be a sub-resource of the RestorePlan's backup_plan. Format: `projects/*/locations/*/backupPlans/*/backups/*`.
	Backup pulumi.StringOutput `pulumi:"backup"`
	// The target cluster into which this Restore will restore data. Valid formats: - `projects/*/locations/*/clusters/*` - `projects/*/zones/*/clusters/*` Inherited from parent RestorePlan's cluster value.
	Cluster pulumi.StringOutput `pulumi:"cluster"`
	// Timestamp of when the restore operation completed.
	CompleteTime pulumi.StringOutput `pulumi:"completeTime"`
	// The timestamp when this Restore resource was created.
	CreateTime pulumi.StringOutput `pulumi:"createTime"`
	// User specified descriptive string for this Restore.
	Description pulumi.StringOutput `pulumi:"description"`
	// `etag` is used for optimistic concurrency control as a way to help prevent simultaneous updates of a restore from overwriting each other. It is strongly suggested that systems make use of the `etag` in the read-modify-write cycle to perform restore updates in order to avoid race conditions: An `etag` is returned in the response to `GetRestore`, and systems are expected to put that etag in the request to `UpdateRestore` or `DeleteRestore` to ensure that their change will be applied to the same version of the resource.
	Etag pulumi.StringOutput `pulumi:"etag"`
	// A set of custom labels supplied by user.
	Labels   pulumi.StringMapOutput `pulumi:"labels"`
	Location pulumi.StringOutput    `pulumi:"location"`
	// The full name of the Restore resource. Format: `projects/*/locations/*/restorePlans/*/restores/*`
	Name    pulumi.StringOutput `pulumi:"name"`
	Project pulumi.StringOutput `pulumi:"project"`
	// Number of resources excluded during the restore execution.
	ResourcesExcludedCount pulumi.IntOutput `pulumi:"resourcesExcludedCount"`
	// Number of resources that failed to be restored during the restore execution.
	ResourcesFailedCount pulumi.IntOutput `pulumi:"resourcesFailedCount"`
	// Number of resources restored during the restore execution.
	ResourcesRestoredCount pulumi.IntOutput `pulumi:"resourcesRestoredCount"`
	// Configuration of the Restore. Inherited from parent RestorePlan's restore_config.
	RestoreConfig RestoreConfigResponseOutput `pulumi:"restoreConfig"`
	// Required. The client-provided short name for the Restore resource. This name must: - be between 1 and 63 characters long (inclusive) - consist of only lower-case ASCII letters, numbers, and dashes - start with a lower-case letter - end with a lower-case letter or number - be unique within the set of Restores in this RestorePlan.
	RestoreId     pulumi.StringOutput `pulumi:"restoreId"`
	RestorePlanId pulumi.StringOutput `pulumi:"restorePlanId"`
	// The current state of the Restore.
	State pulumi.StringOutput `pulumi:"state"`
	// Human-readable description of why the Restore is in its current state.
	StateReason pulumi.StringOutput `pulumi:"stateReason"`
	// Server generated global unique identifier of [UUID](https://en.wikipedia.org/wiki/Universally_unique_identifier) format.
	Uid pulumi.StringOutput `pulumi:"uid"`
	// The timestamp when this Restore resource was last updated.
	UpdateTime pulumi.StringOutput `pulumi:"updateTime"`
	// Number of volumes restored during the restore execution.
	VolumesRestoredCount pulumi.IntOutput `pulumi:"volumesRestoredCount"`
}

Creates a new Restore for the given RestorePlan. Auto-naming is currently not supported for this resource.

func GetRestore

func GetRestore(ctx *pulumi.Context,
	name string, id pulumi.IDInput, state *RestoreState, opts ...pulumi.ResourceOption) (*Restore, error)

GetRestore gets an existing Restore resource's state with the given name, ID, and optional state properties that are used to uniquely qualify the lookup (nil if not required).

func NewRestore

func NewRestore(ctx *pulumi.Context,
	name string, args *RestoreArgs, opts ...pulumi.ResourceOption) (*Restore, error)

NewRestore registers a new resource with the given unique name, arguments, and options.

func (*Restore) ElementType

func (*Restore) ElementType() reflect.Type

func (*Restore) ToRestoreOutput

func (i *Restore) ToRestoreOutput() RestoreOutput

func (*Restore) ToRestoreOutputWithContext

func (i *Restore) ToRestoreOutputWithContext(ctx context.Context) RestoreOutput

type RestoreArgs

type RestoreArgs struct {
	// Immutable. A reference to the Backup used as the source from which this Restore will restore. Note that this Backup must be a sub-resource of the RestorePlan's backup_plan. Format: `projects/*/locations/*/backupPlans/*/backups/*`.
	Backup pulumi.StringInput
	// User specified descriptive string for this Restore.
	Description pulumi.StringPtrInput
	// A set of custom labels supplied by user.
	Labels   pulumi.StringMapInput
	Location pulumi.StringPtrInput
	Project  pulumi.StringPtrInput
	// Required. The client-provided short name for the Restore resource. This name must: - be between 1 and 63 characters long (inclusive) - consist of only lower-case ASCII letters, numbers, and dashes - start with a lower-case letter - end with a lower-case letter or number - be unique within the set of Restores in this RestorePlan.
	RestoreId     pulumi.StringInput
	RestorePlanId pulumi.StringInput
}

The set of arguments for constructing a Restore resource.

func (RestoreArgs) ElementType

func (RestoreArgs) ElementType() reflect.Type

type RestoreConfig

type RestoreConfig struct {
	// Restore all namespaced resources in the Backup if set to "True". Specifying this field to "False" is an error.
	AllNamespaces *bool `pulumi:"allNamespaces"`
	// Optional. Defines the behavior for handling the situation where cluster-scoped resources being restored already exist in the target cluster. This MUST be set to a value other than CLUSTER_RESOURCE_CONFLICT_POLICY_UNSPECIFIED if cluster_resource_restore_scope is not empty.
	ClusterResourceConflictPolicy *RestoreConfigClusterResourceConflictPolicy `pulumi:"clusterResourceConflictPolicy"`
	// Optional. Identifies the cluster-scoped resources to restore from the Backup. Not specifying it means NO cluster resource will be restored.
	ClusterResourceRestoreScope *ClusterResourceRestoreScope `pulumi:"clusterResourceRestoreScope"`
	// A list of selected namespaces excluded from restoration. All namespaces except those in this list will be restored.
	ExcludedNamespaces *Namespaces `pulumi:"excludedNamespaces"`
	// Optional. Defines the behavior for handling the situation where sets of namespaced resources being restored already exist in the target cluster. This MUST be set to a value other than NAMESPACED_RESOURCE_RESTORE_MODE_UNSPECIFIED.
	NamespacedResourceRestoreMode *RestoreConfigNamespacedResourceRestoreMode `pulumi:"namespacedResourceRestoreMode"`
	// Do not restore any namespaced resources if set to "True". Specifying this field to "False" is not allowed.
	NoNamespaces *bool `pulumi:"noNamespaces"`
	// A list of selected ProtectedApplications to restore. The listed ProtectedApplications and all the resources to which they refer will be restored.
	SelectedApplications *NamespacedNames `pulumi:"selectedApplications"`
	// A list of selected Namespaces to restore from the Backup. The listed Namespaces and all resources contained in them will be restored.
	SelectedNamespaces *Namespaces `pulumi:"selectedNamespaces"`
	// Optional. A list of transformation rules to be applied against Kubernetes resources as they are selected for restoration from a Backup. Rules are executed in order defined - this order matters, as changes made by a rule may impact the filtering logic of subsequent rules. An empty list means no substitution will occur.
	SubstitutionRules []SubstitutionRule `pulumi:"substitutionRules"`
	// Optional. A list of transformation rules to be applied against Kubernetes resources as they are selected for restoration from a Backup. Rules are executed in order defined - this order matters, as changes made by a rule may impact the filtering logic of subsequent rules. An empty list means no transformation will occur.
	TransformationRules []TransformationRule `pulumi:"transformationRules"`
	// Optional. Specifies the mechanism to be used to restore volume data. Default: VOLUME_DATA_RESTORE_POLICY_UNSPECIFIED (will be treated as NO_VOLUME_DATA_RESTORATION).
	VolumeDataRestorePolicy *RestoreConfigVolumeDataRestorePolicy `pulumi:"volumeDataRestorePolicy"`
}

Configuration of a restore. Next id: 13

type RestoreConfigArgs

type RestoreConfigArgs struct {
	// Restore all namespaced resources in the Backup if set to "True". Specifying this field to "False" is an error.
	AllNamespaces pulumi.BoolPtrInput `pulumi:"allNamespaces"`
	// Optional. Defines the behavior for handling the situation where cluster-scoped resources being restored already exist in the target cluster. This MUST be set to a value other than CLUSTER_RESOURCE_CONFLICT_POLICY_UNSPECIFIED if cluster_resource_restore_scope is not empty.
	ClusterResourceConflictPolicy RestoreConfigClusterResourceConflictPolicyPtrInput `pulumi:"clusterResourceConflictPolicy"`
	// Optional. Identifies the cluster-scoped resources to restore from the Backup. Not specifying it means NO cluster resource will be restored.
	ClusterResourceRestoreScope ClusterResourceRestoreScopePtrInput `pulumi:"clusterResourceRestoreScope"`
	// A list of selected namespaces excluded from restoration. All namespaces except those in this list will be restored.
	ExcludedNamespaces NamespacesPtrInput `pulumi:"excludedNamespaces"`
	// Optional. Defines the behavior for handling the situation where sets of namespaced resources being restored already exist in the target cluster. This MUST be set to a value other than NAMESPACED_RESOURCE_RESTORE_MODE_UNSPECIFIED.
	NamespacedResourceRestoreMode RestoreConfigNamespacedResourceRestoreModePtrInput `pulumi:"namespacedResourceRestoreMode"`
	// Do not restore any namespaced resources if set to "True". Specifying this field to "False" is not allowed.
	NoNamespaces pulumi.BoolPtrInput `pulumi:"noNamespaces"`
	// A list of selected ProtectedApplications to restore. The listed ProtectedApplications and all the resources to which they refer will be restored.
	SelectedApplications NamespacedNamesPtrInput `pulumi:"selectedApplications"`
	// A list of selected Namespaces to restore from the Backup. The listed Namespaces and all resources contained in them will be restored.
	SelectedNamespaces NamespacesPtrInput `pulumi:"selectedNamespaces"`
	// Optional. A list of transformation rules to be applied against Kubernetes resources as they are selected for restoration from a Backup. Rules are executed in order defined - this order matters, as changes made by a rule may impact the filtering logic of subsequent rules. An empty list means no substitution will occur.
	SubstitutionRules SubstitutionRuleArrayInput `pulumi:"substitutionRules"`
	// Optional. A list of transformation rules to be applied against Kubernetes resources as they are selected for restoration from a Backup. Rules are executed in order defined - this order matters, as changes made by a rule may impact the filtering logic of subsequent rules. An empty list means no transformation will occur.
	TransformationRules TransformationRuleArrayInput `pulumi:"transformationRules"`
	// Optional. Specifies the mechanism to be used to restore volume data. Default: VOLUME_DATA_RESTORE_POLICY_UNSPECIFIED (will be treated as NO_VOLUME_DATA_RESTORATION).
	VolumeDataRestorePolicy RestoreConfigVolumeDataRestorePolicyPtrInput `pulumi:"volumeDataRestorePolicy"`
}

Configuration of a restore. Next id: 13

func (RestoreConfigArgs) ElementType

func (RestoreConfigArgs) ElementType() reflect.Type

func (RestoreConfigArgs) ToRestoreConfigOutput

func (i RestoreConfigArgs) ToRestoreConfigOutput() RestoreConfigOutput

func (RestoreConfigArgs) ToRestoreConfigOutputWithContext

func (i RestoreConfigArgs) ToRestoreConfigOutputWithContext(ctx context.Context) RestoreConfigOutput

type RestoreConfigClusterResourceConflictPolicy

type RestoreConfigClusterResourceConflictPolicy string

Optional. Defines the behavior for handling the situation where cluster-scoped resources being restored already exist in the target cluster. This MUST be set to a value other than CLUSTER_RESOURCE_CONFLICT_POLICY_UNSPECIFIED if cluster_resource_restore_scope is not empty.

func (RestoreConfigClusterResourceConflictPolicy) ElementType

func (RestoreConfigClusterResourceConflictPolicy) ToRestoreConfigClusterResourceConflictPolicyOutput

func (e RestoreConfigClusterResourceConflictPolicy) ToRestoreConfigClusterResourceConflictPolicyOutput() RestoreConfigClusterResourceConflictPolicyOutput

func (RestoreConfigClusterResourceConflictPolicy) ToRestoreConfigClusterResourceConflictPolicyOutputWithContext

func (e RestoreConfigClusterResourceConflictPolicy) ToRestoreConfigClusterResourceConflictPolicyOutputWithContext(ctx context.Context) RestoreConfigClusterResourceConflictPolicyOutput

func (RestoreConfigClusterResourceConflictPolicy) ToRestoreConfigClusterResourceConflictPolicyPtrOutput

func (e RestoreConfigClusterResourceConflictPolicy) ToRestoreConfigClusterResourceConflictPolicyPtrOutput() RestoreConfigClusterResourceConflictPolicyPtrOutput

func (RestoreConfigClusterResourceConflictPolicy) ToRestoreConfigClusterResourceConflictPolicyPtrOutputWithContext

func (e RestoreConfigClusterResourceConflictPolicy) ToRestoreConfigClusterResourceConflictPolicyPtrOutputWithContext(ctx context.Context) RestoreConfigClusterResourceConflictPolicyPtrOutput

func (RestoreConfigClusterResourceConflictPolicy) ToStringOutput

func (RestoreConfigClusterResourceConflictPolicy) ToStringOutputWithContext

func (RestoreConfigClusterResourceConflictPolicy) ToStringPtrOutput

func (RestoreConfigClusterResourceConflictPolicy) ToStringPtrOutputWithContext

type RestoreConfigClusterResourceConflictPolicyInput

type RestoreConfigClusterResourceConflictPolicyInput interface {
	pulumi.Input

	ToRestoreConfigClusterResourceConflictPolicyOutput() RestoreConfigClusterResourceConflictPolicyOutput
	ToRestoreConfigClusterResourceConflictPolicyOutputWithContext(context.Context) RestoreConfigClusterResourceConflictPolicyOutput
}

RestoreConfigClusterResourceConflictPolicyInput is an input type that accepts RestoreConfigClusterResourceConflictPolicyArgs and RestoreConfigClusterResourceConflictPolicyOutput values. You can construct a concrete instance of `RestoreConfigClusterResourceConflictPolicyInput` via:

RestoreConfigClusterResourceConflictPolicyArgs{...}

type RestoreConfigClusterResourceConflictPolicyOutput

type RestoreConfigClusterResourceConflictPolicyOutput struct{ *pulumi.OutputState }

func (RestoreConfigClusterResourceConflictPolicyOutput) ElementType

func (RestoreConfigClusterResourceConflictPolicyOutput) ToRestoreConfigClusterResourceConflictPolicyOutput

func (o RestoreConfigClusterResourceConflictPolicyOutput) ToRestoreConfigClusterResourceConflictPolicyOutput() RestoreConfigClusterResourceConflictPolicyOutput

func (RestoreConfigClusterResourceConflictPolicyOutput) ToRestoreConfigClusterResourceConflictPolicyOutputWithContext

func (o RestoreConfigClusterResourceConflictPolicyOutput) ToRestoreConfigClusterResourceConflictPolicyOutputWithContext(ctx context.Context) RestoreConfigClusterResourceConflictPolicyOutput

func (RestoreConfigClusterResourceConflictPolicyOutput) ToRestoreConfigClusterResourceConflictPolicyPtrOutput

func (o RestoreConfigClusterResourceConflictPolicyOutput) ToRestoreConfigClusterResourceConflictPolicyPtrOutput() RestoreConfigClusterResourceConflictPolicyPtrOutput

func (RestoreConfigClusterResourceConflictPolicyOutput) ToRestoreConfigClusterResourceConflictPolicyPtrOutputWithContext

func (o RestoreConfigClusterResourceConflictPolicyOutput) ToRestoreConfigClusterResourceConflictPolicyPtrOutputWithContext(ctx context.Context) RestoreConfigClusterResourceConflictPolicyPtrOutput

func (RestoreConfigClusterResourceConflictPolicyOutput) ToStringOutput

func (RestoreConfigClusterResourceConflictPolicyOutput) ToStringOutputWithContext

func (RestoreConfigClusterResourceConflictPolicyOutput) ToStringPtrOutput

func (RestoreConfigClusterResourceConflictPolicyOutput) ToStringPtrOutputWithContext

type RestoreConfigClusterResourceConflictPolicyPtrInput

type RestoreConfigClusterResourceConflictPolicyPtrInput interface {
	pulumi.Input

	ToRestoreConfigClusterResourceConflictPolicyPtrOutput() RestoreConfigClusterResourceConflictPolicyPtrOutput
	ToRestoreConfigClusterResourceConflictPolicyPtrOutputWithContext(context.Context) RestoreConfigClusterResourceConflictPolicyPtrOutput
}

type RestoreConfigClusterResourceConflictPolicyPtrOutput

type RestoreConfigClusterResourceConflictPolicyPtrOutput struct{ *pulumi.OutputState }

func (RestoreConfigClusterResourceConflictPolicyPtrOutput) Elem

func (RestoreConfigClusterResourceConflictPolicyPtrOutput) ElementType

func (RestoreConfigClusterResourceConflictPolicyPtrOutput) ToRestoreConfigClusterResourceConflictPolicyPtrOutput

func (o RestoreConfigClusterResourceConflictPolicyPtrOutput) ToRestoreConfigClusterResourceConflictPolicyPtrOutput() RestoreConfigClusterResourceConflictPolicyPtrOutput

func (RestoreConfigClusterResourceConflictPolicyPtrOutput) ToRestoreConfigClusterResourceConflictPolicyPtrOutputWithContext

func (o RestoreConfigClusterResourceConflictPolicyPtrOutput) ToRestoreConfigClusterResourceConflictPolicyPtrOutputWithContext(ctx context.Context) RestoreConfigClusterResourceConflictPolicyPtrOutput

func (RestoreConfigClusterResourceConflictPolicyPtrOutput) ToStringPtrOutput

func (RestoreConfigClusterResourceConflictPolicyPtrOutput) ToStringPtrOutputWithContext

type RestoreConfigInput

type RestoreConfigInput interface {
	pulumi.Input

	ToRestoreConfigOutput() RestoreConfigOutput
	ToRestoreConfigOutputWithContext(context.Context) RestoreConfigOutput
}

RestoreConfigInput is an input type that accepts RestoreConfigArgs and RestoreConfigOutput values. You can construct a concrete instance of `RestoreConfigInput` via:

RestoreConfigArgs{...}

type RestoreConfigNamespacedResourceRestoreMode

type RestoreConfigNamespacedResourceRestoreMode string

Optional. Defines the behavior for handling the situation where sets of namespaced resources being restored already exist in the target cluster. This MUST be set to a value other than NAMESPACED_RESOURCE_RESTORE_MODE_UNSPECIFIED.

func (RestoreConfigNamespacedResourceRestoreMode) ElementType

func (RestoreConfigNamespacedResourceRestoreMode) ToRestoreConfigNamespacedResourceRestoreModeOutput

func (e RestoreConfigNamespacedResourceRestoreMode) ToRestoreConfigNamespacedResourceRestoreModeOutput() RestoreConfigNamespacedResourceRestoreModeOutput

func (RestoreConfigNamespacedResourceRestoreMode) ToRestoreConfigNamespacedResourceRestoreModeOutputWithContext

func (e RestoreConfigNamespacedResourceRestoreMode) ToRestoreConfigNamespacedResourceRestoreModeOutputWithContext(ctx context.Context) RestoreConfigNamespacedResourceRestoreModeOutput

func (RestoreConfigNamespacedResourceRestoreMode) ToRestoreConfigNamespacedResourceRestoreModePtrOutput

func (e RestoreConfigNamespacedResourceRestoreMode) ToRestoreConfigNamespacedResourceRestoreModePtrOutput() RestoreConfigNamespacedResourceRestoreModePtrOutput

func (RestoreConfigNamespacedResourceRestoreMode) ToRestoreConfigNamespacedResourceRestoreModePtrOutputWithContext

func (e RestoreConfigNamespacedResourceRestoreMode) ToRestoreConfigNamespacedResourceRestoreModePtrOutputWithContext(ctx context.Context) RestoreConfigNamespacedResourceRestoreModePtrOutput

func (RestoreConfigNamespacedResourceRestoreMode) ToStringOutput

func (RestoreConfigNamespacedResourceRestoreMode) ToStringOutputWithContext

func (RestoreConfigNamespacedResourceRestoreMode) ToStringPtrOutput

func (RestoreConfigNamespacedResourceRestoreMode) ToStringPtrOutputWithContext

type RestoreConfigNamespacedResourceRestoreModeInput

type RestoreConfigNamespacedResourceRestoreModeInput interface {
	pulumi.Input

	ToRestoreConfigNamespacedResourceRestoreModeOutput() RestoreConfigNamespacedResourceRestoreModeOutput
	ToRestoreConfigNamespacedResourceRestoreModeOutputWithContext(context.Context) RestoreConfigNamespacedResourceRestoreModeOutput
}

RestoreConfigNamespacedResourceRestoreModeInput is an input type that accepts RestoreConfigNamespacedResourceRestoreModeArgs and RestoreConfigNamespacedResourceRestoreModeOutput values. You can construct a concrete instance of `RestoreConfigNamespacedResourceRestoreModeInput` via:

RestoreConfigNamespacedResourceRestoreModeArgs{...}

type RestoreConfigNamespacedResourceRestoreModeOutput

type RestoreConfigNamespacedResourceRestoreModeOutput struct{ *pulumi.OutputState }

func (RestoreConfigNamespacedResourceRestoreModeOutput) ElementType

func (RestoreConfigNamespacedResourceRestoreModeOutput) ToRestoreConfigNamespacedResourceRestoreModeOutput

func (o RestoreConfigNamespacedResourceRestoreModeOutput) ToRestoreConfigNamespacedResourceRestoreModeOutput() RestoreConfigNamespacedResourceRestoreModeOutput

func (RestoreConfigNamespacedResourceRestoreModeOutput) ToRestoreConfigNamespacedResourceRestoreModeOutputWithContext

func (o RestoreConfigNamespacedResourceRestoreModeOutput) ToRestoreConfigNamespacedResourceRestoreModeOutputWithContext(ctx context.Context) RestoreConfigNamespacedResourceRestoreModeOutput

func (RestoreConfigNamespacedResourceRestoreModeOutput) ToRestoreConfigNamespacedResourceRestoreModePtrOutput

func (o RestoreConfigNamespacedResourceRestoreModeOutput) ToRestoreConfigNamespacedResourceRestoreModePtrOutput() RestoreConfigNamespacedResourceRestoreModePtrOutput

func (RestoreConfigNamespacedResourceRestoreModeOutput) ToRestoreConfigNamespacedResourceRestoreModePtrOutputWithContext

func (o RestoreConfigNamespacedResourceRestoreModeOutput) ToRestoreConfigNamespacedResourceRestoreModePtrOutputWithContext(ctx context.Context) RestoreConfigNamespacedResourceRestoreModePtrOutput

func (RestoreConfigNamespacedResourceRestoreModeOutput) ToStringOutput

func (RestoreConfigNamespacedResourceRestoreModeOutput) ToStringOutputWithContext

func (RestoreConfigNamespacedResourceRestoreModeOutput) ToStringPtrOutput

func (RestoreConfigNamespacedResourceRestoreModeOutput) ToStringPtrOutputWithContext

type RestoreConfigNamespacedResourceRestoreModePtrInput

type RestoreConfigNamespacedResourceRestoreModePtrInput interface {
	pulumi.Input

	ToRestoreConfigNamespacedResourceRestoreModePtrOutput() RestoreConfigNamespacedResourceRestoreModePtrOutput
	ToRestoreConfigNamespacedResourceRestoreModePtrOutputWithContext(context.Context) RestoreConfigNamespacedResourceRestoreModePtrOutput
}

type RestoreConfigNamespacedResourceRestoreModePtrOutput

type RestoreConfigNamespacedResourceRestoreModePtrOutput struct{ *pulumi.OutputState }

func (RestoreConfigNamespacedResourceRestoreModePtrOutput) Elem

func (RestoreConfigNamespacedResourceRestoreModePtrOutput) ElementType

func (RestoreConfigNamespacedResourceRestoreModePtrOutput) ToRestoreConfigNamespacedResourceRestoreModePtrOutput

func (o RestoreConfigNamespacedResourceRestoreModePtrOutput) ToRestoreConfigNamespacedResourceRestoreModePtrOutput() RestoreConfigNamespacedResourceRestoreModePtrOutput

func (RestoreConfigNamespacedResourceRestoreModePtrOutput) ToRestoreConfigNamespacedResourceRestoreModePtrOutputWithContext

func (o RestoreConfigNamespacedResourceRestoreModePtrOutput) ToRestoreConfigNamespacedResourceRestoreModePtrOutputWithContext(ctx context.Context) RestoreConfigNamespacedResourceRestoreModePtrOutput

func (RestoreConfigNamespacedResourceRestoreModePtrOutput) ToStringPtrOutput

func (RestoreConfigNamespacedResourceRestoreModePtrOutput) ToStringPtrOutputWithContext

type RestoreConfigOutput

type RestoreConfigOutput struct{ *pulumi.OutputState }

Configuration of a restore. Next id: 13

func (RestoreConfigOutput) AllNamespaces

func (o RestoreConfigOutput) AllNamespaces() pulumi.BoolPtrOutput

Restore all namespaced resources in the Backup if set to "True". Specifying this field to "False" is an error.

func (RestoreConfigOutput) ClusterResourceConflictPolicy

Optional. Defines the behavior for handling the situation where cluster-scoped resources being restored already exist in the target cluster. This MUST be set to a value other than CLUSTER_RESOURCE_CONFLICT_POLICY_UNSPECIFIED if cluster_resource_restore_scope is not empty.

func (RestoreConfigOutput) ClusterResourceRestoreScope

func (o RestoreConfigOutput) ClusterResourceRestoreScope() ClusterResourceRestoreScopePtrOutput

Optional. Identifies the cluster-scoped resources to restore from the Backup. Not specifying it means NO cluster resource will be restored.

func (RestoreConfigOutput) ElementType

func (RestoreConfigOutput) ElementType() reflect.Type

func (RestoreConfigOutput) ExcludedNamespaces added in v0.32.0

func (o RestoreConfigOutput) ExcludedNamespaces() NamespacesPtrOutput

A list of selected namespaces excluded from restoration. All namespaces except those in this list will be restored.

func (RestoreConfigOutput) NamespacedResourceRestoreMode

Optional. Defines the behavior for handling the situation where sets of namespaced resources being restored already exist in the target cluster. This MUST be set to a value other than NAMESPACED_RESOURCE_RESTORE_MODE_UNSPECIFIED.

func (RestoreConfigOutput) NoNamespaces added in v0.32.0

func (o RestoreConfigOutput) NoNamespaces() pulumi.BoolPtrOutput

Do not restore any namespaced resources if set to "True". Specifying this field to "False" is not allowed.

func (RestoreConfigOutput) SelectedApplications

func (o RestoreConfigOutput) SelectedApplications() NamespacedNamesPtrOutput

A list of selected ProtectedApplications to restore. The listed ProtectedApplications and all the resources to which they refer will be restored.

func (RestoreConfigOutput) SelectedNamespaces

func (o RestoreConfigOutput) SelectedNamespaces() NamespacesPtrOutput

A list of selected Namespaces to restore from the Backup. The listed Namespaces and all resources contained in them will be restored.

func (RestoreConfigOutput) SubstitutionRules

func (o RestoreConfigOutput) SubstitutionRules() SubstitutionRuleArrayOutput

Optional. A list of transformation rules to be applied against Kubernetes resources as they are selected for restoration from a Backup. Rules are executed in order defined - this order matters, as changes made by a rule may impact the filtering logic of subsequent rules. An empty list means no substitution will occur.

func (RestoreConfigOutput) ToRestoreConfigOutput

func (o RestoreConfigOutput) ToRestoreConfigOutput() RestoreConfigOutput

func (RestoreConfigOutput) ToRestoreConfigOutputWithContext

func (o RestoreConfigOutput) ToRestoreConfigOutputWithContext(ctx context.Context) RestoreConfigOutput

func (RestoreConfigOutput) TransformationRules added in v0.32.0

func (o RestoreConfigOutput) TransformationRules() TransformationRuleArrayOutput

Optional. A list of transformation rules to be applied against Kubernetes resources as they are selected for restoration from a Backup. Rules are executed in order defined - this order matters, as changes made by a rule may impact the filtering logic of subsequent rules. An empty list means no transformation will occur.

func (RestoreConfigOutput) VolumeDataRestorePolicy

Optional. Specifies the mechanism to be used to restore volume data. Default: VOLUME_DATA_RESTORE_POLICY_UNSPECIFIED (will be treated as NO_VOLUME_DATA_RESTORATION).

type RestoreConfigResponse

type RestoreConfigResponse struct {
	// Restore all namespaced resources in the Backup if set to "True". Specifying this field to "False" is an error.
	AllNamespaces bool `pulumi:"allNamespaces"`
	// Optional. Defines the behavior for handling the situation where cluster-scoped resources being restored already exist in the target cluster. This MUST be set to a value other than CLUSTER_RESOURCE_CONFLICT_POLICY_UNSPECIFIED if cluster_resource_restore_scope is not empty.
	ClusterResourceConflictPolicy string `pulumi:"clusterResourceConflictPolicy"`
	// Optional. Identifies the cluster-scoped resources to restore from the Backup. Not specifying it means NO cluster resource will be restored.
	ClusterResourceRestoreScope ClusterResourceRestoreScopeResponse `pulumi:"clusterResourceRestoreScope"`
	// A list of selected namespaces excluded from restoration. All namespaces except those in this list will be restored.
	ExcludedNamespaces NamespacesResponse `pulumi:"excludedNamespaces"`
	// Optional. Defines the behavior for handling the situation where sets of namespaced resources being restored already exist in the target cluster. This MUST be set to a value other than NAMESPACED_RESOURCE_RESTORE_MODE_UNSPECIFIED.
	NamespacedResourceRestoreMode string `pulumi:"namespacedResourceRestoreMode"`
	// Do not restore any namespaced resources if set to "True". Specifying this field to "False" is not allowed.
	NoNamespaces bool `pulumi:"noNamespaces"`
	// A list of selected ProtectedApplications to restore. The listed ProtectedApplications and all the resources to which they refer will be restored.
	SelectedApplications NamespacedNamesResponse `pulumi:"selectedApplications"`
	// A list of selected Namespaces to restore from the Backup. The listed Namespaces and all resources contained in them will be restored.
	SelectedNamespaces NamespacesResponse `pulumi:"selectedNamespaces"`
	// Optional. A list of transformation rules to be applied against Kubernetes resources as they are selected for restoration from a Backup. Rules are executed in order defined - this order matters, as changes made by a rule may impact the filtering logic of subsequent rules. An empty list means no substitution will occur.
	SubstitutionRules []SubstitutionRuleResponse `pulumi:"substitutionRules"`
	// Optional. A list of transformation rules to be applied against Kubernetes resources as they are selected for restoration from a Backup. Rules are executed in order defined - this order matters, as changes made by a rule may impact the filtering logic of subsequent rules. An empty list means no transformation will occur.
	TransformationRules []TransformationRuleResponse `pulumi:"transformationRules"`
	// Optional. Specifies the mechanism to be used to restore volume data. Default: VOLUME_DATA_RESTORE_POLICY_UNSPECIFIED (will be treated as NO_VOLUME_DATA_RESTORATION).
	VolumeDataRestorePolicy string `pulumi:"volumeDataRestorePolicy"`
}

Configuration of a restore. Next id: 13

type RestoreConfigResponseOutput

type RestoreConfigResponseOutput struct{ *pulumi.OutputState }

Configuration of a restore. Next id: 13

func (RestoreConfigResponseOutput) AllNamespaces

func (o RestoreConfigResponseOutput) AllNamespaces() pulumi.BoolOutput

Restore all namespaced resources in the Backup if set to "True". Specifying this field to "False" is an error.

func (RestoreConfigResponseOutput) ClusterResourceConflictPolicy

func (o RestoreConfigResponseOutput) ClusterResourceConflictPolicy() pulumi.StringOutput

Optional. Defines the behavior for handling the situation where cluster-scoped resources being restored already exist in the target cluster. This MUST be set to a value other than CLUSTER_RESOURCE_CONFLICT_POLICY_UNSPECIFIED if cluster_resource_restore_scope is not empty.

func (RestoreConfigResponseOutput) ClusterResourceRestoreScope

Optional. Identifies the cluster-scoped resources to restore from the Backup. Not specifying it means NO cluster resource will be restored.

func (RestoreConfigResponseOutput) ElementType

func (RestoreConfigResponseOutput) ExcludedNamespaces added in v0.32.0

A list of selected namespaces excluded from restoration. All namespaces except those in this list will be restored.

func (RestoreConfigResponseOutput) NamespacedResourceRestoreMode

func (o RestoreConfigResponseOutput) NamespacedResourceRestoreMode() pulumi.StringOutput

Optional. Defines the behavior for handling the situation where sets of namespaced resources being restored already exist in the target cluster. This MUST be set to a value other than NAMESPACED_RESOURCE_RESTORE_MODE_UNSPECIFIED.

func (RestoreConfigResponseOutput) NoNamespaces added in v0.32.0

Do not restore any namespaced resources if set to "True". Specifying this field to "False" is not allowed.

func (RestoreConfigResponseOutput) SelectedApplications

A list of selected ProtectedApplications to restore. The listed ProtectedApplications and all the resources to which they refer will be restored.

func (RestoreConfigResponseOutput) SelectedNamespaces

A list of selected Namespaces to restore from the Backup. The listed Namespaces and all resources contained in them will be restored.

func (RestoreConfigResponseOutput) SubstitutionRules

Optional. A list of transformation rules to be applied against Kubernetes resources as they are selected for restoration from a Backup. Rules are executed in order defined - this order matters, as changes made by a rule may impact the filtering logic of subsequent rules. An empty list means no substitution will occur.

func (RestoreConfigResponseOutput) ToRestoreConfigResponseOutput

func (o RestoreConfigResponseOutput) ToRestoreConfigResponseOutput() RestoreConfigResponseOutput

func (RestoreConfigResponseOutput) ToRestoreConfigResponseOutputWithContext

func (o RestoreConfigResponseOutput) ToRestoreConfigResponseOutputWithContext(ctx context.Context) RestoreConfigResponseOutput

func (RestoreConfigResponseOutput) TransformationRules added in v0.32.0

Optional. A list of transformation rules to be applied against Kubernetes resources as they are selected for restoration from a Backup. Rules are executed in order defined - this order matters, as changes made by a rule may impact the filtering logic of subsequent rules. An empty list means no transformation will occur.

func (RestoreConfigResponseOutput) VolumeDataRestorePolicy

func (o RestoreConfigResponseOutput) VolumeDataRestorePolicy() pulumi.StringOutput

Optional. Specifies the mechanism to be used to restore volume data. Default: VOLUME_DATA_RESTORE_POLICY_UNSPECIFIED (will be treated as NO_VOLUME_DATA_RESTORATION).

type RestoreConfigVolumeDataRestorePolicy

type RestoreConfigVolumeDataRestorePolicy string

Optional. Specifies the mechanism to be used to restore volume data. Default: VOLUME_DATA_RESTORE_POLICY_UNSPECIFIED (will be treated as NO_VOLUME_DATA_RESTORATION).

func (RestoreConfigVolumeDataRestorePolicy) ElementType

func (RestoreConfigVolumeDataRestorePolicy) ToRestoreConfigVolumeDataRestorePolicyOutput

func (e RestoreConfigVolumeDataRestorePolicy) ToRestoreConfigVolumeDataRestorePolicyOutput() RestoreConfigVolumeDataRestorePolicyOutput

func (RestoreConfigVolumeDataRestorePolicy) ToRestoreConfigVolumeDataRestorePolicyOutputWithContext

func (e RestoreConfigVolumeDataRestorePolicy) ToRestoreConfigVolumeDataRestorePolicyOutputWithContext(ctx context.Context) RestoreConfigVolumeDataRestorePolicyOutput

func (RestoreConfigVolumeDataRestorePolicy) ToRestoreConfigVolumeDataRestorePolicyPtrOutput

func (e RestoreConfigVolumeDataRestorePolicy) ToRestoreConfigVolumeDataRestorePolicyPtrOutput() RestoreConfigVolumeDataRestorePolicyPtrOutput

func (RestoreConfigVolumeDataRestorePolicy) ToRestoreConfigVolumeDataRestorePolicyPtrOutputWithContext

func (e RestoreConfigVolumeDataRestorePolicy) ToRestoreConfigVolumeDataRestorePolicyPtrOutputWithContext(ctx context.Context) RestoreConfigVolumeDataRestorePolicyPtrOutput

func (RestoreConfigVolumeDataRestorePolicy) ToStringOutput

func (RestoreConfigVolumeDataRestorePolicy) ToStringOutputWithContext

func (e RestoreConfigVolumeDataRestorePolicy) ToStringOutputWithContext(ctx context.Context) pulumi.StringOutput

func (RestoreConfigVolumeDataRestorePolicy) ToStringPtrOutput

func (RestoreConfigVolumeDataRestorePolicy) ToStringPtrOutputWithContext

func (e RestoreConfigVolumeDataRestorePolicy) ToStringPtrOutputWithContext(ctx context.Context) pulumi.StringPtrOutput

type RestoreConfigVolumeDataRestorePolicyInput

type RestoreConfigVolumeDataRestorePolicyInput interface {
	pulumi.Input

	ToRestoreConfigVolumeDataRestorePolicyOutput() RestoreConfigVolumeDataRestorePolicyOutput
	ToRestoreConfigVolumeDataRestorePolicyOutputWithContext(context.Context) RestoreConfigVolumeDataRestorePolicyOutput
}

RestoreConfigVolumeDataRestorePolicyInput is an input type that accepts RestoreConfigVolumeDataRestorePolicyArgs and RestoreConfigVolumeDataRestorePolicyOutput values. You can construct a concrete instance of `RestoreConfigVolumeDataRestorePolicyInput` via:

RestoreConfigVolumeDataRestorePolicyArgs{...}

type RestoreConfigVolumeDataRestorePolicyOutput

type RestoreConfigVolumeDataRestorePolicyOutput struct{ *pulumi.OutputState }

func (RestoreConfigVolumeDataRestorePolicyOutput) ElementType

func (RestoreConfigVolumeDataRestorePolicyOutput) ToRestoreConfigVolumeDataRestorePolicyOutput

func (o RestoreConfigVolumeDataRestorePolicyOutput) ToRestoreConfigVolumeDataRestorePolicyOutput() RestoreConfigVolumeDataRestorePolicyOutput

func (RestoreConfigVolumeDataRestorePolicyOutput) ToRestoreConfigVolumeDataRestorePolicyOutputWithContext

func (o RestoreConfigVolumeDataRestorePolicyOutput) ToRestoreConfigVolumeDataRestorePolicyOutputWithContext(ctx context.Context) RestoreConfigVolumeDataRestorePolicyOutput

func (RestoreConfigVolumeDataRestorePolicyOutput) ToRestoreConfigVolumeDataRestorePolicyPtrOutput

func (o RestoreConfigVolumeDataRestorePolicyOutput) ToRestoreConfigVolumeDataRestorePolicyPtrOutput() RestoreConfigVolumeDataRestorePolicyPtrOutput

func (RestoreConfigVolumeDataRestorePolicyOutput) ToRestoreConfigVolumeDataRestorePolicyPtrOutputWithContext

func (o RestoreConfigVolumeDataRestorePolicyOutput) ToRestoreConfigVolumeDataRestorePolicyPtrOutputWithContext(ctx context.Context) RestoreConfigVolumeDataRestorePolicyPtrOutput

func (RestoreConfigVolumeDataRestorePolicyOutput) ToStringOutput

func (RestoreConfigVolumeDataRestorePolicyOutput) ToStringOutputWithContext

func (RestoreConfigVolumeDataRestorePolicyOutput) ToStringPtrOutput

func (RestoreConfigVolumeDataRestorePolicyOutput) ToStringPtrOutputWithContext

type RestoreConfigVolumeDataRestorePolicyPtrInput

type RestoreConfigVolumeDataRestorePolicyPtrInput interface {
	pulumi.Input

	ToRestoreConfigVolumeDataRestorePolicyPtrOutput() RestoreConfigVolumeDataRestorePolicyPtrOutput
	ToRestoreConfigVolumeDataRestorePolicyPtrOutputWithContext(context.Context) RestoreConfigVolumeDataRestorePolicyPtrOutput
}

type RestoreConfigVolumeDataRestorePolicyPtrOutput

type RestoreConfigVolumeDataRestorePolicyPtrOutput struct{ *pulumi.OutputState }

func (RestoreConfigVolumeDataRestorePolicyPtrOutput) Elem

func (RestoreConfigVolumeDataRestorePolicyPtrOutput) ElementType

func (RestoreConfigVolumeDataRestorePolicyPtrOutput) ToRestoreConfigVolumeDataRestorePolicyPtrOutput

func (o RestoreConfigVolumeDataRestorePolicyPtrOutput) ToRestoreConfigVolumeDataRestorePolicyPtrOutput() RestoreConfigVolumeDataRestorePolicyPtrOutput

func (RestoreConfigVolumeDataRestorePolicyPtrOutput) ToRestoreConfigVolumeDataRestorePolicyPtrOutputWithContext

func (o RestoreConfigVolumeDataRestorePolicyPtrOutput) ToRestoreConfigVolumeDataRestorePolicyPtrOutputWithContext(ctx context.Context) RestoreConfigVolumeDataRestorePolicyPtrOutput

func (RestoreConfigVolumeDataRestorePolicyPtrOutput) ToStringPtrOutput

func (RestoreConfigVolumeDataRestorePolicyPtrOutput) ToStringPtrOutputWithContext

type RestoreInput

type RestoreInput interface {
	pulumi.Input

	ToRestoreOutput() RestoreOutput
	ToRestoreOutputWithContext(ctx context.Context) RestoreOutput
}

type RestoreOutput

type RestoreOutput struct{ *pulumi.OutputState }

func (RestoreOutput) Backup added in v0.19.0

func (o RestoreOutput) Backup() pulumi.StringOutput

Immutable. A reference to the Backup used as the source from which this Restore will restore. Note that this Backup must be a sub-resource of the RestorePlan's backup_plan. Format: `projects/*/locations/*/backupPlans/*/backups/*`.

func (RestoreOutput) Cluster added in v0.19.0

func (o RestoreOutput) Cluster() pulumi.StringOutput

The target cluster into which this Restore will restore data. Valid formats: - `projects/*/locations/*/clusters/*` - `projects/*/zones/*/clusters/*` Inherited from parent RestorePlan's cluster value.

func (RestoreOutput) CompleteTime added in v0.19.0

func (o RestoreOutput) CompleteTime() pulumi.StringOutput

Timestamp of when the restore operation completed.

func (RestoreOutput) CreateTime added in v0.19.0

func (o RestoreOutput) CreateTime() pulumi.StringOutput

The timestamp when this Restore resource was created.

func (RestoreOutput) Description added in v0.19.0

func (o RestoreOutput) Description() pulumi.StringOutput

User specified descriptive string for this Restore.

func (RestoreOutput) ElementType

func (RestoreOutput) ElementType() reflect.Type

func (RestoreOutput) Etag added in v0.19.0

`etag` is used for optimistic concurrency control as a way to help prevent simultaneous updates of a restore from overwriting each other. It is strongly suggested that systems make use of the `etag` in the read-modify-write cycle to perform restore updates in order to avoid race conditions: An `etag` is returned in the response to `GetRestore`, and systems are expected to put that etag in the request to `UpdateRestore` or `DeleteRestore` to ensure that their change will be applied to the same version of the resource.

func (RestoreOutput) Labels added in v0.19.0

A set of custom labels supplied by user.

func (RestoreOutput) Location added in v0.21.0

func (o RestoreOutput) Location() pulumi.StringOutput

func (RestoreOutput) Name added in v0.19.0

The full name of the Restore resource. Format: `projects/*/locations/*/restorePlans/*/restores/*`

func (RestoreOutput) Project added in v0.21.0

func (o RestoreOutput) Project() pulumi.StringOutput

func (RestoreOutput) ResourcesExcludedCount added in v0.19.0

func (o RestoreOutput) ResourcesExcludedCount() pulumi.IntOutput

Number of resources excluded during the restore execution.

func (RestoreOutput) ResourcesFailedCount added in v0.19.0

func (o RestoreOutput) ResourcesFailedCount() pulumi.IntOutput

Number of resources that failed to be restored during the restore execution.

func (RestoreOutput) ResourcesRestoredCount added in v0.19.0

func (o RestoreOutput) ResourcesRestoredCount() pulumi.IntOutput

Number of resources restored during the restore execution.

func (RestoreOutput) RestoreConfig added in v0.19.0

func (o RestoreOutput) RestoreConfig() RestoreConfigResponseOutput

Configuration of the Restore. Inherited from parent RestorePlan's restore_config.

func (RestoreOutput) RestoreId added in v0.21.0

func (o RestoreOutput) RestoreId() pulumi.StringOutput

Required. The client-provided short name for the Restore resource. This name must: - be between 1 and 63 characters long (inclusive) - consist of only lower-case ASCII letters, numbers, and dashes - start with a lower-case letter - end with a lower-case letter or number - be unique within the set of Restores in this RestorePlan.

func (RestoreOutput) RestorePlanId added in v0.21.0

func (o RestoreOutput) RestorePlanId() pulumi.StringOutput

func (RestoreOutput) State added in v0.19.0

func (o RestoreOutput) State() pulumi.StringOutput

The current state of the Restore.

func (RestoreOutput) StateReason added in v0.19.0

func (o RestoreOutput) StateReason() pulumi.StringOutput

Human-readable description of why the Restore is in its current state.

func (RestoreOutput) ToRestoreOutput

func (o RestoreOutput) ToRestoreOutput() RestoreOutput

func (RestoreOutput) ToRestoreOutputWithContext

func (o RestoreOutput) ToRestoreOutputWithContext(ctx context.Context) RestoreOutput

func (RestoreOutput) Uid added in v0.19.0

Server generated global unique identifier of [UUID](https://en.wikipedia.org/wiki/Universally_unique_identifier) format.

func (RestoreOutput) UpdateTime added in v0.19.0

func (o RestoreOutput) UpdateTime() pulumi.StringOutput

The timestamp when this Restore resource was last updated.

func (RestoreOutput) VolumesRestoredCount added in v0.19.0

func (o RestoreOutput) VolumesRestoredCount() pulumi.IntOutput

Number of volumes restored during the restore execution.

type RestorePlan

type RestorePlan struct {
	pulumi.CustomResourceState

	// Immutable. A reference to the BackupPlan from which Backups may be used as the source for Restores created via this RestorePlan. Format: `projects/*/locations/*/backupPlans/*`.
	BackupPlan pulumi.StringOutput `pulumi:"backupPlan"`
	// Immutable. The target cluster into which Restores created via this RestorePlan will restore data. NOTE: the cluster's region must be the same as the RestorePlan. Valid formats: - `projects/*/locations/*/clusters/*` - `projects/*/zones/*/clusters/*`
	Cluster pulumi.StringOutput `pulumi:"cluster"`
	// The timestamp when this RestorePlan resource was created.
	CreateTime pulumi.StringOutput `pulumi:"createTime"`
	// Optional. User specified descriptive string for this RestorePlan.
	Description pulumi.StringOutput `pulumi:"description"`
	// `etag` is used for optimistic concurrency control as a way to help prevent simultaneous updates of a restore from overwriting each other. It is strongly suggested that systems make use of the `etag` in the read-modify-write cycle to perform restore updates in order to avoid race conditions: An `etag` is returned in the response to `GetRestorePlan`, and systems are expected to put that etag in the request to `UpdateRestorePlan` or `DeleteRestorePlan` to ensure that their change will be applied to the same version of the resource.
	Etag pulumi.StringOutput `pulumi:"etag"`
	// Optional. A set of custom labels supplied by user.
	Labels   pulumi.StringMapOutput `pulumi:"labels"`
	Location pulumi.StringOutput    `pulumi:"location"`
	// The full name of the RestorePlan resource. Format: `projects/*/locations/*/restorePlans/*`.
	Name    pulumi.StringOutput `pulumi:"name"`
	Project pulumi.StringOutput `pulumi:"project"`
	// Configuration of Restores created via this RestorePlan.
	RestoreConfig RestoreConfigResponseOutput `pulumi:"restoreConfig"`
	// Required. The client-provided short name for the RestorePlan resource. This name must: - be between 1 and 63 characters long (inclusive) - consist of only lower-case ASCII letters, numbers, and dashes - start with a lower-case letter - end with a lower-case letter or number - be unique within the set of RestorePlans in this location
	RestorePlanId pulumi.StringOutput `pulumi:"restorePlanId"`
	// State of the RestorePlan. This State field reflects the various stages a RestorePlan can be in during the Create operation.
	State pulumi.StringOutput `pulumi:"state"`
	// Human-readable description of why RestorePlan is in the current `state`
	StateReason pulumi.StringOutput `pulumi:"stateReason"`
	// Server generated global unique identifier of [UUID](https://en.wikipedia.org/wiki/Universally_unique_identifier) format.
	Uid pulumi.StringOutput `pulumi:"uid"`
	// The timestamp when this RestorePlan resource was last updated.
	UpdateTime pulumi.StringOutput `pulumi:"updateTime"`
}

Creates a new RestorePlan in a given location. Auto-naming is currently not supported for this resource.

func GetRestorePlan

func GetRestorePlan(ctx *pulumi.Context,
	name string, id pulumi.IDInput, state *RestorePlanState, opts ...pulumi.ResourceOption) (*RestorePlan, error)

GetRestorePlan gets an existing RestorePlan resource's state with the given name, ID, and optional state properties that are used to uniquely qualify the lookup (nil if not required).

func NewRestorePlan

func NewRestorePlan(ctx *pulumi.Context,
	name string, args *RestorePlanArgs, opts ...pulumi.ResourceOption) (*RestorePlan, error)

NewRestorePlan registers a new resource with the given unique name, arguments, and options.

func (*RestorePlan) ElementType

func (*RestorePlan) ElementType() reflect.Type

func (*RestorePlan) ToRestorePlanOutput

func (i *RestorePlan) ToRestorePlanOutput() RestorePlanOutput

func (*RestorePlan) ToRestorePlanOutputWithContext

func (i *RestorePlan) ToRestorePlanOutputWithContext(ctx context.Context) RestorePlanOutput

type RestorePlanArgs

type RestorePlanArgs struct {
	// Immutable. A reference to the BackupPlan from which Backups may be used as the source for Restores created via this RestorePlan. Format: `projects/*/locations/*/backupPlans/*`.
	BackupPlan pulumi.StringInput
	// Immutable. The target cluster into which Restores created via this RestorePlan will restore data. NOTE: the cluster's region must be the same as the RestorePlan. Valid formats: - `projects/*/locations/*/clusters/*` - `projects/*/zones/*/clusters/*`
	Cluster pulumi.StringInput
	// Optional. User specified descriptive string for this RestorePlan.
	Description pulumi.StringPtrInput
	// Optional. A set of custom labels supplied by user.
	Labels   pulumi.StringMapInput
	Location pulumi.StringPtrInput
	Project  pulumi.StringPtrInput
	// Configuration of Restores created via this RestorePlan.
	RestoreConfig RestoreConfigInput
	// Required. The client-provided short name for the RestorePlan resource. This name must: - be between 1 and 63 characters long (inclusive) - consist of only lower-case ASCII letters, numbers, and dashes - start with a lower-case letter - end with a lower-case letter or number - be unique within the set of RestorePlans in this location
	RestorePlanId pulumi.StringInput
}

The set of arguments for constructing a RestorePlan resource.

func (RestorePlanArgs) ElementType

func (RestorePlanArgs) ElementType() reflect.Type

type RestorePlanIamBinding added in v0.26.0

type RestorePlanIamBinding struct {
	pulumi.CustomResourceState

	// An IAM Condition for a given binding. See https://cloud.google.com/iam/docs/conditions-overview for additional details.
	Condition iam.ConditionPtrOutput `pulumi:"condition"`
	// The etag of the resource's IAM policy.
	Etag pulumi.StringOutput `pulumi:"etag"`
	// Specifies the principals requesting access for a Google Cloud resource. `members` can have the following values: * `allUsers`: A special identifier that represents anyone who is on the internet; with or without a Google account. * `allAuthenticatedUsers`: A special identifier that represents anyone who is authenticated with a Google account or a service account. Does not include identities that come from external identity providers (IdPs) through identity federation. * `user:{emailid}`: An email address that represents a specific Google account. For example, `alice@example.com` . * `serviceAccount:{emailid}`: An email address that represents a Google service account. For example, `my-other-app@appspot.gserviceaccount.com`. * `serviceAccount:{projectid}.svc.id.goog[{namespace}/{kubernetes-sa}]`: An identifier for a [Kubernetes service account](https://cloud.google.com/kubernetes-engine/docs/how-to/kubernetes-service-accounts). For example, `my-project.svc.id.goog[my-namespace/my-kubernetes-sa]`. * `group:{emailid}`: An email address that represents a Google group. For example, `admins@example.com`. * `domain:{domain}`: The G Suite domain (primary) that represents all the users of that domain. For example, `google.com` or `example.com`. * `deleted:user:{emailid}?uid={uniqueid}`: An email address (plus unique identifier) representing a user that has been recently deleted. For example, `alice@example.com?uid=123456789012345678901`. If the user is recovered, this value reverts to `user:{emailid}` and the recovered user retains the role in the binding. * `deleted:serviceAccount:{emailid}?uid={uniqueid}`: An email address (plus unique identifier) representing a service account that has been recently deleted. For example, `my-other-app@appspot.gserviceaccount.com?uid=123456789012345678901`. If the service account is undeleted, this value reverts to `serviceAccount:{emailid}` and the undeleted service account retains the role in the binding. * `deleted:group:{emailid}?uid={uniqueid}`: An email address (plus unique identifier) representing a Google group that has been recently deleted. For example, `admins@example.com?uid=123456789012345678901`. If the group is recovered, this value reverts to `group:{emailid}` and the recovered group retains the role in the binding.
	Members pulumi.StringArrayOutput `pulumi:"members"`
	// The name of the resource to manage IAM policies for.
	Name pulumi.StringOutput `pulumi:"name"`
	// The project in which the resource belongs. If it is not provided, a default will be supplied.
	Project pulumi.StringOutput `pulumi:"project"`
	// Role that is assigned to the list of `members`, or principals. For example, `roles/viewer`, `roles/editor`, or `roles/owner`.
	Role pulumi.StringOutput `pulumi:"role"`
}

Sets the access control policy on the specified resource. Replaces any existing policy. Can return `NOT_FOUND`, `INVALID_ARGUMENT`, and `PERMISSION_DENIED` errors.

func GetRestorePlanIamBinding added in v0.26.0

func GetRestorePlanIamBinding(ctx *pulumi.Context,
	name string, id pulumi.IDInput, state *RestorePlanIamBindingState, opts ...pulumi.ResourceOption) (*RestorePlanIamBinding, error)

GetRestorePlanIamBinding gets an existing RestorePlanIamBinding resource's state with the given name, ID, and optional state properties that are used to uniquely qualify the lookup (nil if not required).

func NewRestorePlanIamBinding added in v0.26.0

func NewRestorePlanIamBinding(ctx *pulumi.Context,
	name string, args *RestorePlanIamBindingArgs, opts ...pulumi.ResourceOption) (*RestorePlanIamBinding, error)

NewRestorePlanIamBinding registers a new resource with the given unique name, arguments, and options.

func (*RestorePlanIamBinding) ElementType added in v0.26.0

func (*RestorePlanIamBinding) ElementType() reflect.Type

func (*RestorePlanIamBinding) ToRestorePlanIamBindingOutput added in v0.26.0

func (i *RestorePlanIamBinding) ToRestorePlanIamBindingOutput() RestorePlanIamBindingOutput

func (*RestorePlanIamBinding) ToRestorePlanIamBindingOutputWithContext added in v0.26.0

func (i *RestorePlanIamBinding) ToRestorePlanIamBindingOutputWithContext(ctx context.Context) RestorePlanIamBindingOutput

type RestorePlanIamBindingArgs added in v0.26.0

type RestorePlanIamBindingArgs struct {
	// An IAM Condition for a given binding.
	Condition iam.ConditionPtrInput
	// Identities that will be granted the privilege in role. Each entry can have one of the following values:
	//
	//  * user:{emailid}: An email address that represents a specific Google account. For example, alice@gmail.com or joe@example.com.
	//  * serviceAccount:{emailid}: An email address that represents a service account. For example, my-other-app@appspot.gserviceaccount.com.
	//  * group:{emailid}: An email address that represents a Google group. For example, admins@example.com.
	//  * domain:{domain}: A G Suite domain (primary, instead of alias) name that represents all the users of that domain. For example, google.com or example.com.
	Members pulumi.StringArrayInput
	// The name of the resource to manage IAM policies for.
	Name pulumi.StringInput
	// The role that should be applied. Only one `IamBinding` can be used per role.
	Role pulumi.StringInput
}

The set of arguments for constructing a RestorePlanIamBinding resource.

func (RestorePlanIamBindingArgs) ElementType added in v0.26.0

func (RestorePlanIamBindingArgs) ElementType() reflect.Type

type RestorePlanIamBindingInput added in v0.26.0

type RestorePlanIamBindingInput interface {
	pulumi.Input

	ToRestorePlanIamBindingOutput() RestorePlanIamBindingOutput
	ToRestorePlanIamBindingOutputWithContext(ctx context.Context) RestorePlanIamBindingOutput
}

type RestorePlanIamBindingOutput added in v0.26.0

type RestorePlanIamBindingOutput struct{ *pulumi.OutputState }

func (RestorePlanIamBindingOutput) Condition added in v0.26.0

An IAM Condition for a given binding. See https://cloud.google.com/iam/docs/conditions-overview for additional details.

func (RestorePlanIamBindingOutput) ElementType added in v0.26.0

func (RestorePlanIamBindingOutput) Etag added in v0.26.0

The etag of the resource's IAM policy.

func (RestorePlanIamBindingOutput) Members added in v0.26.0

Specifies the principals requesting access for a Google Cloud resource. `members` can have the following values: * `allUsers`: A special identifier that represents anyone who is on the internet; with or without a Google account. * `allAuthenticatedUsers`: A special identifier that represents anyone who is authenticated with a Google account or a service account. Does not include identities that come from external identity providers (IdPs) through identity federation. * `user:{emailid}`: An email address that represents a specific Google account. For example, `alice@example.com` . * `serviceAccount:{emailid}`: An email address that represents a Google service account. For example, `my-other-app@appspot.gserviceaccount.com`. * `serviceAccount:{projectid}.svc.id.goog[{namespace}/{kubernetes-sa}]`: An identifier for a [Kubernetes service account](https://cloud.google.com/kubernetes-engine/docs/how-to/kubernetes-service-accounts). For example, `my-project.svc.id.goog[my-namespace/my-kubernetes-sa]`. * `group:{emailid}`: An email address that represents a Google group. For example, `admins@example.com`. * `domain:{domain}`: The G Suite domain (primary) that represents all the users of that domain. For example, `google.com` or `example.com`. * `deleted:user:{emailid}?uid={uniqueid}`: An email address (plus unique identifier) representing a user that has been recently deleted. For example, `alice@example.com?uid=123456789012345678901`. If the user is recovered, this value reverts to `user:{emailid}` and the recovered user retains the role in the binding. * `deleted:serviceAccount:{emailid}?uid={uniqueid}`: An email address (plus unique identifier) representing a service account that has been recently deleted. For example, `my-other-app@appspot.gserviceaccount.com?uid=123456789012345678901`. If the service account is undeleted, this value reverts to `serviceAccount:{emailid}` and the undeleted service account retains the role in the binding. * `deleted:group:{emailid}?uid={uniqueid}`: An email address (plus unique identifier) representing a Google group that has been recently deleted. For example, `admins@example.com?uid=123456789012345678901`. If the group is recovered, this value reverts to `group:{emailid}` and the recovered group retains the role in the binding.

func (RestorePlanIamBindingOutput) Name added in v0.26.0

The name of the resource to manage IAM policies for.

func (RestorePlanIamBindingOutput) Project added in v0.26.0

The project in which the resource belongs. If it is not provided, a default will be supplied.

func (RestorePlanIamBindingOutput) Role added in v0.26.0

Role that is assigned to the list of `members`, or principals. For example, `roles/viewer`, `roles/editor`, or `roles/owner`.

func (RestorePlanIamBindingOutput) ToRestorePlanIamBindingOutput added in v0.26.0

func (o RestorePlanIamBindingOutput) ToRestorePlanIamBindingOutput() RestorePlanIamBindingOutput

func (RestorePlanIamBindingOutput) ToRestorePlanIamBindingOutputWithContext added in v0.26.0

func (o RestorePlanIamBindingOutput) ToRestorePlanIamBindingOutputWithContext(ctx context.Context) RestorePlanIamBindingOutput

type RestorePlanIamBindingState added in v0.26.0

type RestorePlanIamBindingState struct {
}

func (RestorePlanIamBindingState) ElementType added in v0.26.0

func (RestorePlanIamBindingState) ElementType() reflect.Type

type RestorePlanIamMember added in v0.26.0

type RestorePlanIamMember struct {
	pulumi.CustomResourceState

	// An IAM Condition for a given binding. See https://cloud.google.com/iam/docs/conditions-overview for additional details.
	Condition iam.ConditionPtrOutput `pulumi:"condition"`
	// The etag of the resource's IAM policy.
	Etag pulumi.StringOutput `pulumi:"etag"`
	// Specifies the principals requesting access for a Google Cloud resource. `members` can have the following values: * `allUsers`: A special identifier that represents anyone who is on the internet; with or without a Google account. * `allAuthenticatedUsers`: A special identifier that represents anyone who is authenticated with a Google account or a service account. Does not include identities that come from external identity providers (IdPs) through identity federation. * `user:{emailid}`: An email address that represents a specific Google account. For example, `alice@example.com` . * `serviceAccount:{emailid}`: An email address that represents a Google service account. For example, `my-other-app@appspot.gserviceaccount.com`. * `serviceAccount:{projectid}.svc.id.goog[{namespace}/{kubernetes-sa}]`: An identifier for a [Kubernetes service account](https://cloud.google.com/kubernetes-engine/docs/how-to/kubernetes-service-accounts). For example, `my-project.svc.id.goog[my-namespace/my-kubernetes-sa]`. * `group:{emailid}`: An email address that represents a Google group. For example, `admins@example.com`. * `domain:{domain}`: The G Suite domain (primary) that represents all the users of that domain. For example, `google.com` or `example.com`. * `deleted:user:{emailid}?uid={uniqueid}`: An email address (plus unique identifier) representing a user that has been recently deleted. For example, `alice@example.com?uid=123456789012345678901`. If the user is recovered, this value reverts to `user:{emailid}` and the recovered user retains the role in the binding. * `deleted:serviceAccount:{emailid}?uid={uniqueid}`: An email address (plus unique identifier) representing a service account that has been recently deleted. For example, `my-other-app@appspot.gserviceaccount.com?uid=123456789012345678901`. If the service account is undeleted, this value reverts to `serviceAccount:{emailid}` and the undeleted service account retains the role in the binding. * `deleted:group:{emailid}?uid={uniqueid}`: An email address (plus unique identifier) representing a Google group that has been recently deleted. For example, `admins@example.com?uid=123456789012345678901`. If the group is recovered, this value reverts to `group:{emailid}` and the recovered group retains the role in the binding.
	Member pulumi.StringOutput `pulumi:"member"`
	// The name of the resource to manage IAM policies for.
	Name pulumi.StringOutput `pulumi:"name"`
	// The project in which the resource belongs. If it is not provided, a default will be supplied.
	Project pulumi.StringOutput `pulumi:"project"`
	// Role that is assigned to the list of `members`, or principals. For example, `roles/viewer`, `roles/editor`, or `roles/owner`.
	Role pulumi.StringOutput `pulumi:"role"`
}

Sets the access control policy on the specified resource. Replaces any existing policy. Can return `NOT_FOUND`, `INVALID_ARGUMENT`, and `PERMISSION_DENIED` errors.

func GetRestorePlanIamMember added in v0.26.0

func GetRestorePlanIamMember(ctx *pulumi.Context,
	name string, id pulumi.IDInput, state *RestorePlanIamMemberState, opts ...pulumi.ResourceOption) (*RestorePlanIamMember, error)

GetRestorePlanIamMember gets an existing RestorePlanIamMember resource's state with the given name, ID, and optional state properties that are used to uniquely qualify the lookup (nil if not required).

func NewRestorePlanIamMember added in v0.26.0

func NewRestorePlanIamMember(ctx *pulumi.Context,
	name string, args *RestorePlanIamMemberArgs, opts ...pulumi.ResourceOption) (*RestorePlanIamMember, error)

NewRestorePlanIamMember registers a new resource with the given unique name, arguments, and options.

func (*RestorePlanIamMember) ElementType added in v0.26.0

func (*RestorePlanIamMember) ElementType() reflect.Type

func (*RestorePlanIamMember) ToRestorePlanIamMemberOutput added in v0.26.0

func (i *RestorePlanIamMember) ToRestorePlanIamMemberOutput() RestorePlanIamMemberOutput

func (*RestorePlanIamMember) ToRestorePlanIamMemberOutputWithContext added in v0.26.0

func (i *RestorePlanIamMember) ToRestorePlanIamMemberOutputWithContext(ctx context.Context) RestorePlanIamMemberOutput

type RestorePlanIamMemberArgs added in v0.26.0

type RestorePlanIamMemberArgs struct {
	// An IAM Condition for a given binding.
	Condition iam.ConditionPtrInput
	// Identity that will be granted the privilege in role. The entry can have one of the following values:
	//
	//  * user:{emailid}: An email address that represents a specific Google account. For example, alice@gmail.com or joe@example.com.
	//  * serviceAccount:{emailid}: An email address that represents a service account. For example, my-other-app@appspot.gserviceaccount.com.
	//  * group:{emailid}: An email address that represents a Google group. For example, admins@example.com.
	//  * domain:{domain}: A G Suite domain (primary, instead of alias) name that represents all the users of that domain. For example, google.com or example.com.
	Member pulumi.StringInput
	// The name of the resource to manage IAM policies for.
	Name pulumi.StringInput
	// The role that should be applied.
	Role pulumi.StringInput
}

The set of arguments for constructing a RestorePlanIamMember resource.

func (RestorePlanIamMemberArgs) ElementType added in v0.26.0

func (RestorePlanIamMemberArgs) ElementType() reflect.Type

type RestorePlanIamMemberInput added in v0.26.0

type RestorePlanIamMemberInput interface {
	pulumi.Input

	ToRestorePlanIamMemberOutput() RestorePlanIamMemberOutput
	ToRestorePlanIamMemberOutputWithContext(ctx context.Context) RestorePlanIamMemberOutput
}

type RestorePlanIamMemberOutput added in v0.26.0

type RestorePlanIamMemberOutput struct{ *pulumi.OutputState }

func (RestorePlanIamMemberOutput) Condition added in v0.26.0

An IAM Condition for a given binding. See https://cloud.google.com/iam/docs/conditions-overview for additional details.

func (RestorePlanIamMemberOutput) ElementType added in v0.26.0

func (RestorePlanIamMemberOutput) ElementType() reflect.Type

func (RestorePlanIamMemberOutput) Etag added in v0.26.0

The etag of the resource's IAM policy.

func (RestorePlanIamMemberOutput) Member added in v0.26.0

Specifies the principals requesting access for a Google Cloud resource. `members` can have the following values: * `allUsers`: A special identifier that represents anyone who is on the internet; with or without a Google account. * `allAuthenticatedUsers`: A special identifier that represents anyone who is authenticated with a Google account or a service account. Does not include identities that come from external identity providers (IdPs) through identity federation. * `user:{emailid}`: An email address that represents a specific Google account. For example, `alice@example.com` . * `serviceAccount:{emailid}`: An email address that represents a Google service account. For example, `my-other-app@appspot.gserviceaccount.com`. * `serviceAccount:{projectid}.svc.id.goog[{namespace}/{kubernetes-sa}]`: An identifier for a [Kubernetes service account](https://cloud.google.com/kubernetes-engine/docs/how-to/kubernetes-service-accounts). For example, `my-project.svc.id.goog[my-namespace/my-kubernetes-sa]`. * `group:{emailid}`: An email address that represents a Google group. For example, `admins@example.com`. * `domain:{domain}`: The G Suite domain (primary) that represents all the users of that domain. For example, `google.com` or `example.com`. * `deleted:user:{emailid}?uid={uniqueid}`: An email address (plus unique identifier) representing a user that has been recently deleted. For example, `alice@example.com?uid=123456789012345678901`. If the user is recovered, this value reverts to `user:{emailid}` and the recovered user retains the role in the binding. * `deleted:serviceAccount:{emailid}?uid={uniqueid}`: An email address (plus unique identifier) representing a service account that has been recently deleted. For example, `my-other-app@appspot.gserviceaccount.com?uid=123456789012345678901`. If the service account is undeleted, this value reverts to `serviceAccount:{emailid}` and the undeleted service account retains the role in the binding. * `deleted:group:{emailid}?uid={uniqueid}`: An email address (plus unique identifier) representing a Google group that has been recently deleted. For example, `admins@example.com?uid=123456789012345678901`. If the group is recovered, this value reverts to `group:{emailid}` and the recovered group retains the role in the binding.

func (RestorePlanIamMemberOutput) Name added in v0.26.0

The name of the resource to manage IAM policies for.

func (RestorePlanIamMemberOutput) Project added in v0.26.0

The project in which the resource belongs. If it is not provided, a default will be supplied.

func (RestorePlanIamMemberOutput) Role added in v0.26.0

Role that is assigned to the list of `members`, or principals. For example, `roles/viewer`, `roles/editor`, or `roles/owner`.

func (RestorePlanIamMemberOutput) ToRestorePlanIamMemberOutput added in v0.26.0

func (o RestorePlanIamMemberOutput) ToRestorePlanIamMemberOutput() RestorePlanIamMemberOutput

func (RestorePlanIamMemberOutput) ToRestorePlanIamMemberOutputWithContext added in v0.26.0

func (o RestorePlanIamMemberOutput) ToRestorePlanIamMemberOutputWithContext(ctx context.Context) RestorePlanIamMemberOutput

type RestorePlanIamMemberState added in v0.26.0

type RestorePlanIamMemberState struct {
}

func (RestorePlanIamMemberState) ElementType added in v0.26.0

func (RestorePlanIamMemberState) ElementType() reflect.Type

type RestorePlanIamPolicy

type RestorePlanIamPolicy struct {
	pulumi.CustomResourceState

	// Specifies cloud audit logging configuration for this policy.
	AuditConfigs AuditConfigResponseArrayOutput `pulumi:"auditConfigs"`
	// Associates a list of `members`, or principals, with a `role`. Optionally, may specify a `condition` that determines how and when the `bindings` are applied. Each of the `bindings` must contain at least one principal. The `bindings` in a `Policy` can refer to up to 1,500 principals; up to 250 of these principals can be Google groups. Each occurrence of a principal counts towards these limits. For example, if the `bindings` grant 50 different roles to `user:alice@example.com`, and not to any other principal, then you can add another 1,450 principals to the `bindings` in the `Policy`.
	Bindings BindingResponseArrayOutput `pulumi:"bindings"`
	// `etag` is used for optimistic concurrency control as a way to help prevent simultaneous updates of a policy from overwriting each other. It is strongly suggested that systems make use of the `etag` in the read-modify-write cycle to perform policy updates in order to avoid race conditions: An `etag` is returned in the response to `getIamPolicy`, and systems are expected to put that etag in the request to `setIamPolicy` to ensure that their change will be applied to the same version of the policy. **Important:** If you use IAM Conditions, you must include the `etag` field whenever you call `setIamPolicy`. If you omit this field, then IAM allows you to overwrite a version `3` policy with a version `1` policy, and all of the conditions in the version `3` policy are lost.
	Etag          pulumi.StringOutput `pulumi:"etag"`
	Location      pulumi.StringOutput `pulumi:"location"`
	Project       pulumi.StringOutput `pulumi:"project"`
	RestorePlanId pulumi.StringOutput `pulumi:"restorePlanId"`
	// Specifies the format of the policy. Valid values are `0`, `1`, and `3`. Requests that specify an invalid value are rejected. Any operation that affects conditional role bindings must specify version `3`. This requirement applies to the following operations: * Getting a policy that includes a conditional role binding * Adding a conditional role binding to a policy * Changing a conditional role binding in a policy * Removing any role binding, with or without a condition, from a policy that includes conditions **Important:** If you use IAM Conditions, you must include the `etag` field whenever you call `setIamPolicy`. If you omit this field, then IAM allows you to overwrite a version `3` policy with a version `1` policy, and all of the conditions in the version `3` policy are lost. If a policy does not include any conditions, operations on that policy may specify any valid version or leave the field unset. To learn which resources support conditions in their IAM policies, see the [IAM documentation](https://cloud.google.com/iam/help/conditions/resource-policies).
	Version pulumi.IntOutput `pulumi:"version"`
}

Sets the access control policy on the specified resource. Replaces any existing policy. Can return `NOT_FOUND`, `INVALID_ARGUMENT`, and `PERMISSION_DENIED` errors. Note - this resource's API doesn't support deletion. When deleted, the resource will persist on Google Cloud even though it will be deleted from Pulumi state.

func GetRestorePlanIamPolicy

func GetRestorePlanIamPolicy(ctx *pulumi.Context,
	name string, id pulumi.IDInput, state *RestorePlanIamPolicyState, opts ...pulumi.ResourceOption) (*RestorePlanIamPolicy, error)

GetRestorePlanIamPolicy gets an existing RestorePlanIamPolicy resource's state with the given name, ID, and optional state properties that are used to uniquely qualify the lookup (nil if not required).

func NewRestorePlanIamPolicy

func NewRestorePlanIamPolicy(ctx *pulumi.Context,
	name string, args *RestorePlanIamPolicyArgs, opts ...pulumi.ResourceOption) (*RestorePlanIamPolicy, error)

NewRestorePlanIamPolicy registers a new resource with the given unique name, arguments, and options.

func (*RestorePlanIamPolicy) ElementType

func (*RestorePlanIamPolicy) ElementType() reflect.Type

func (*RestorePlanIamPolicy) ToRestorePlanIamPolicyOutput

func (i *RestorePlanIamPolicy) ToRestorePlanIamPolicyOutput() RestorePlanIamPolicyOutput

func (*RestorePlanIamPolicy) ToRestorePlanIamPolicyOutputWithContext

func (i *RestorePlanIamPolicy) ToRestorePlanIamPolicyOutputWithContext(ctx context.Context) RestorePlanIamPolicyOutput

type RestorePlanIamPolicyArgs

type RestorePlanIamPolicyArgs struct {
	// Specifies cloud audit logging configuration for this policy.
	AuditConfigs AuditConfigArrayInput
	// Associates a list of `members`, or principals, with a `role`. Optionally, may specify a `condition` that determines how and when the `bindings` are applied. Each of the `bindings` must contain at least one principal. The `bindings` in a `Policy` can refer to up to 1,500 principals; up to 250 of these principals can be Google groups. Each occurrence of a principal counts towards these limits. For example, if the `bindings` grant 50 different roles to `user:alice@example.com`, and not to any other principal, then you can add another 1,450 principals to the `bindings` in the `Policy`.
	Bindings BindingArrayInput
	// `etag` is used for optimistic concurrency control as a way to help prevent simultaneous updates of a policy from overwriting each other. It is strongly suggested that systems make use of the `etag` in the read-modify-write cycle to perform policy updates in order to avoid race conditions: An `etag` is returned in the response to `getIamPolicy`, and systems are expected to put that etag in the request to `setIamPolicy` to ensure that their change will be applied to the same version of the policy. **Important:** If you use IAM Conditions, you must include the `etag` field whenever you call `setIamPolicy`. If you omit this field, then IAM allows you to overwrite a version `3` policy with a version `1` policy, and all of the conditions in the version `3` policy are lost.
	Etag          pulumi.StringPtrInput
	Location      pulumi.StringPtrInput
	Project       pulumi.StringPtrInput
	RestorePlanId pulumi.StringInput
	// OPTIONAL: A FieldMask specifying which fields of the policy to modify. Only the fields in the mask will be modified. If no mask is provided, the following default mask is used: `paths: "bindings, etag"`
	UpdateMask pulumi.StringPtrInput
	// Specifies the format of the policy. Valid values are `0`, `1`, and `3`. Requests that specify an invalid value are rejected. Any operation that affects conditional role bindings must specify version `3`. This requirement applies to the following operations: * Getting a policy that includes a conditional role binding * Adding a conditional role binding to a policy * Changing a conditional role binding in a policy * Removing any role binding, with or without a condition, from a policy that includes conditions **Important:** If you use IAM Conditions, you must include the `etag` field whenever you call `setIamPolicy`. If you omit this field, then IAM allows you to overwrite a version `3` policy with a version `1` policy, and all of the conditions in the version `3` policy are lost. If a policy does not include any conditions, operations on that policy may specify any valid version or leave the field unset. To learn which resources support conditions in their IAM policies, see the [IAM documentation](https://cloud.google.com/iam/help/conditions/resource-policies).
	Version pulumi.IntPtrInput
}

The set of arguments for constructing a RestorePlanIamPolicy resource.

func (RestorePlanIamPolicyArgs) ElementType

func (RestorePlanIamPolicyArgs) ElementType() reflect.Type

type RestorePlanIamPolicyInput

type RestorePlanIamPolicyInput interface {
	pulumi.Input

	ToRestorePlanIamPolicyOutput() RestorePlanIamPolicyOutput
	ToRestorePlanIamPolicyOutputWithContext(ctx context.Context) RestorePlanIamPolicyOutput
}

type RestorePlanIamPolicyOutput

type RestorePlanIamPolicyOutput struct{ *pulumi.OutputState }

func (RestorePlanIamPolicyOutput) AuditConfigs added in v0.19.0

Specifies cloud audit logging configuration for this policy.

func (RestorePlanIamPolicyOutput) Bindings added in v0.19.0

Associates a list of `members`, or principals, with a `role`. Optionally, may specify a `condition` that determines how and when the `bindings` are applied. Each of the `bindings` must contain at least one principal. The `bindings` in a `Policy` can refer to up to 1,500 principals; up to 250 of these principals can be Google groups. Each occurrence of a principal counts towards these limits. For example, if the `bindings` grant 50 different roles to `user:alice@example.com`, and not to any other principal, then you can add another 1,450 principals to the `bindings` in the `Policy`.

func (RestorePlanIamPolicyOutput) ElementType

func (RestorePlanIamPolicyOutput) ElementType() reflect.Type

func (RestorePlanIamPolicyOutput) Etag added in v0.19.0

`etag` is used for optimistic concurrency control as a way to help prevent simultaneous updates of a policy from overwriting each other. It is strongly suggested that systems make use of the `etag` in the read-modify-write cycle to perform policy updates in order to avoid race conditions: An `etag` is returned in the response to `getIamPolicy`, and systems are expected to put that etag in the request to `setIamPolicy` to ensure that their change will be applied to the same version of the policy. **Important:** If you use IAM Conditions, you must include the `etag` field whenever you call `setIamPolicy`. If you omit this field, then IAM allows you to overwrite a version `3` policy with a version `1` policy, and all of the conditions in the version `3` policy are lost.

func (RestorePlanIamPolicyOutput) Location added in v0.21.0

func (RestorePlanIamPolicyOutput) Project added in v0.21.0

func (RestorePlanIamPolicyOutput) RestorePlanId added in v0.21.0

func (RestorePlanIamPolicyOutput) ToRestorePlanIamPolicyOutput

func (o RestorePlanIamPolicyOutput) ToRestorePlanIamPolicyOutput() RestorePlanIamPolicyOutput

func (RestorePlanIamPolicyOutput) ToRestorePlanIamPolicyOutputWithContext

func (o RestorePlanIamPolicyOutput) ToRestorePlanIamPolicyOutputWithContext(ctx context.Context) RestorePlanIamPolicyOutput

func (RestorePlanIamPolicyOutput) Version added in v0.19.0

Specifies the format of the policy. Valid values are `0`, `1`, and `3`. Requests that specify an invalid value are rejected. Any operation that affects conditional role bindings must specify version `3`. This requirement applies to the following operations: * Getting a policy that includes a conditional role binding * Adding a conditional role binding to a policy * Changing a conditional role binding in a policy * Removing any role binding, with or without a condition, from a policy that includes conditions **Important:** If you use IAM Conditions, you must include the `etag` field whenever you call `setIamPolicy`. If you omit this field, then IAM allows you to overwrite a version `3` policy with a version `1` policy, and all of the conditions in the version `3` policy are lost. If a policy does not include any conditions, operations on that policy may specify any valid version or leave the field unset. To learn which resources support conditions in their IAM policies, see the [IAM documentation](https://cloud.google.com/iam/help/conditions/resource-policies).

type RestorePlanIamPolicyState

type RestorePlanIamPolicyState struct {
}

func (RestorePlanIamPolicyState) ElementType

func (RestorePlanIamPolicyState) ElementType() reflect.Type

type RestorePlanInput

type RestorePlanInput interface {
	pulumi.Input

	ToRestorePlanOutput() RestorePlanOutput
	ToRestorePlanOutputWithContext(ctx context.Context) RestorePlanOutput
}

type RestorePlanOutput

type RestorePlanOutput struct{ *pulumi.OutputState }

func (RestorePlanOutput) BackupPlan added in v0.19.0

func (o RestorePlanOutput) BackupPlan() pulumi.StringOutput

Immutable. A reference to the BackupPlan from which Backups may be used as the source for Restores created via this RestorePlan. Format: `projects/*/locations/*/backupPlans/*`.

func (RestorePlanOutput) Cluster added in v0.19.0

Immutable. The target cluster into which Restores created via this RestorePlan will restore data. NOTE: the cluster's region must be the same as the RestorePlan. Valid formats: - `projects/*/locations/*/clusters/*` - `projects/*/zones/*/clusters/*`

func (RestorePlanOutput) CreateTime added in v0.19.0

func (o RestorePlanOutput) CreateTime() pulumi.StringOutput

The timestamp when this RestorePlan resource was created.

func (RestorePlanOutput) Description added in v0.19.0

func (o RestorePlanOutput) Description() pulumi.StringOutput

Optional. User specified descriptive string for this RestorePlan.

func (RestorePlanOutput) ElementType

func (RestorePlanOutput) ElementType() reflect.Type

func (RestorePlanOutput) Etag added in v0.19.0

`etag` is used for optimistic concurrency control as a way to help prevent simultaneous updates of a restore from overwriting each other. It is strongly suggested that systems make use of the `etag` in the read-modify-write cycle to perform restore updates in order to avoid race conditions: An `etag` is returned in the response to `GetRestorePlan`, and systems are expected to put that etag in the request to `UpdateRestorePlan` or `DeleteRestorePlan` to ensure that their change will be applied to the same version of the resource.

func (RestorePlanOutput) Labels added in v0.19.0

Optional. A set of custom labels supplied by user.

func (RestorePlanOutput) Location added in v0.21.0

func (o RestorePlanOutput) Location() pulumi.StringOutput

func (RestorePlanOutput) Name added in v0.19.0

The full name of the RestorePlan resource. Format: `projects/*/locations/*/restorePlans/*`.

func (RestorePlanOutput) Project added in v0.21.0

func (RestorePlanOutput) RestoreConfig added in v0.19.0

Configuration of Restores created via this RestorePlan.

func (RestorePlanOutput) RestorePlanId added in v0.21.0

func (o RestorePlanOutput) RestorePlanId() pulumi.StringOutput

Required. The client-provided short name for the RestorePlan resource. This name must: - be between 1 and 63 characters long (inclusive) - consist of only lower-case ASCII letters, numbers, and dashes - start with a lower-case letter - end with a lower-case letter or number - be unique within the set of RestorePlans in this location

func (RestorePlanOutput) State added in v0.32.0

State of the RestorePlan. This State field reflects the various stages a RestorePlan can be in during the Create operation.

func (RestorePlanOutput) StateReason added in v0.32.0

func (o RestorePlanOutput) StateReason() pulumi.StringOutput

Human-readable description of why RestorePlan is in the current `state`

func (RestorePlanOutput) ToRestorePlanOutput

func (o RestorePlanOutput) ToRestorePlanOutput() RestorePlanOutput

func (RestorePlanOutput) ToRestorePlanOutputWithContext

func (o RestorePlanOutput) ToRestorePlanOutputWithContext(ctx context.Context) RestorePlanOutput

func (RestorePlanOutput) Uid added in v0.19.0

Server generated global unique identifier of [UUID](https://en.wikipedia.org/wiki/Universally_unique_identifier) format.

func (RestorePlanOutput) UpdateTime added in v0.19.0

func (o RestorePlanOutput) UpdateTime() pulumi.StringOutput

The timestamp when this RestorePlan resource was last updated.

type RestorePlanRestoreIamBinding added in v0.26.0

type RestorePlanRestoreIamBinding struct {
	pulumi.CustomResourceState

	// An IAM Condition for a given binding. See https://cloud.google.com/iam/docs/conditions-overview for additional details.
	Condition iam.ConditionPtrOutput `pulumi:"condition"`
	// The etag of the resource's IAM policy.
	Etag pulumi.StringOutput `pulumi:"etag"`
	// Specifies the principals requesting access for a Google Cloud resource. `members` can have the following values: * `allUsers`: A special identifier that represents anyone who is on the internet; with or without a Google account. * `allAuthenticatedUsers`: A special identifier that represents anyone who is authenticated with a Google account or a service account. Does not include identities that come from external identity providers (IdPs) through identity federation. * `user:{emailid}`: An email address that represents a specific Google account. For example, `alice@example.com` . * `serviceAccount:{emailid}`: An email address that represents a Google service account. For example, `my-other-app@appspot.gserviceaccount.com`. * `serviceAccount:{projectid}.svc.id.goog[{namespace}/{kubernetes-sa}]`: An identifier for a [Kubernetes service account](https://cloud.google.com/kubernetes-engine/docs/how-to/kubernetes-service-accounts). For example, `my-project.svc.id.goog[my-namespace/my-kubernetes-sa]`. * `group:{emailid}`: An email address that represents a Google group. For example, `admins@example.com`. * `domain:{domain}`: The G Suite domain (primary) that represents all the users of that domain. For example, `google.com` or `example.com`. * `deleted:user:{emailid}?uid={uniqueid}`: An email address (plus unique identifier) representing a user that has been recently deleted. For example, `alice@example.com?uid=123456789012345678901`. If the user is recovered, this value reverts to `user:{emailid}` and the recovered user retains the role in the binding. * `deleted:serviceAccount:{emailid}?uid={uniqueid}`: An email address (plus unique identifier) representing a service account that has been recently deleted. For example, `my-other-app@appspot.gserviceaccount.com?uid=123456789012345678901`. If the service account is undeleted, this value reverts to `serviceAccount:{emailid}` and the undeleted service account retains the role in the binding. * `deleted:group:{emailid}?uid={uniqueid}`: An email address (plus unique identifier) representing a Google group that has been recently deleted. For example, `admins@example.com?uid=123456789012345678901`. If the group is recovered, this value reverts to `group:{emailid}` and the recovered group retains the role in the binding.
	Members pulumi.StringArrayOutput `pulumi:"members"`
	// The name of the resource to manage IAM policies for.
	Name pulumi.StringOutput `pulumi:"name"`
	// The project in which the resource belongs. If it is not provided, a default will be supplied.
	Project pulumi.StringOutput `pulumi:"project"`
	// Role that is assigned to the list of `members`, or principals. For example, `roles/viewer`, `roles/editor`, or `roles/owner`.
	Role pulumi.StringOutput `pulumi:"role"`
}

Sets the access control policy on the specified resource. Replaces any existing policy. Can return `NOT_FOUND`, `INVALID_ARGUMENT`, and `PERMISSION_DENIED` errors.

func GetRestorePlanRestoreIamBinding added in v0.26.0

func GetRestorePlanRestoreIamBinding(ctx *pulumi.Context,
	name string, id pulumi.IDInput, state *RestorePlanRestoreIamBindingState, opts ...pulumi.ResourceOption) (*RestorePlanRestoreIamBinding, error)

GetRestorePlanRestoreIamBinding gets an existing RestorePlanRestoreIamBinding resource's state with the given name, ID, and optional state properties that are used to uniquely qualify the lookup (nil if not required).

func NewRestorePlanRestoreIamBinding added in v0.26.0

func NewRestorePlanRestoreIamBinding(ctx *pulumi.Context,
	name string, args *RestorePlanRestoreIamBindingArgs, opts ...pulumi.ResourceOption) (*RestorePlanRestoreIamBinding, error)

NewRestorePlanRestoreIamBinding registers a new resource with the given unique name, arguments, and options.

func (*RestorePlanRestoreIamBinding) ElementType added in v0.26.0

func (*RestorePlanRestoreIamBinding) ElementType() reflect.Type

func (*RestorePlanRestoreIamBinding) ToRestorePlanRestoreIamBindingOutput added in v0.26.0

func (i *RestorePlanRestoreIamBinding) ToRestorePlanRestoreIamBindingOutput() RestorePlanRestoreIamBindingOutput

func (*RestorePlanRestoreIamBinding) ToRestorePlanRestoreIamBindingOutputWithContext added in v0.26.0

func (i *RestorePlanRestoreIamBinding) ToRestorePlanRestoreIamBindingOutputWithContext(ctx context.Context) RestorePlanRestoreIamBindingOutput

type RestorePlanRestoreIamBindingArgs added in v0.26.0

type RestorePlanRestoreIamBindingArgs struct {
	// An IAM Condition for a given binding.
	Condition iam.ConditionPtrInput
	// Identities that will be granted the privilege in role. Each entry can have one of the following values:
	//
	//  * user:{emailid}: An email address that represents a specific Google account. For example, alice@gmail.com or joe@example.com.
	//  * serviceAccount:{emailid}: An email address that represents a service account. For example, my-other-app@appspot.gserviceaccount.com.
	//  * group:{emailid}: An email address that represents a Google group. For example, admins@example.com.
	//  * domain:{domain}: A G Suite domain (primary, instead of alias) name that represents all the users of that domain. For example, google.com or example.com.
	Members pulumi.StringArrayInput
	// The name of the resource to manage IAM policies for.
	Name pulumi.StringInput
	// The role that should be applied. Only one `IamBinding` can be used per role.
	Role pulumi.StringInput
}

The set of arguments for constructing a RestorePlanRestoreIamBinding resource.

func (RestorePlanRestoreIamBindingArgs) ElementType added in v0.26.0

type RestorePlanRestoreIamBindingInput added in v0.26.0

type RestorePlanRestoreIamBindingInput interface {
	pulumi.Input

	ToRestorePlanRestoreIamBindingOutput() RestorePlanRestoreIamBindingOutput
	ToRestorePlanRestoreIamBindingOutputWithContext(ctx context.Context) RestorePlanRestoreIamBindingOutput
}

type RestorePlanRestoreIamBindingOutput added in v0.26.0

type RestorePlanRestoreIamBindingOutput struct{ *pulumi.OutputState }

func (RestorePlanRestoreIamBindingOutput) Condition added in v0.26.0

An IAM Condition for a given binding. See https://cloud.google.com/iam/docs/conditions-overview for additional details.

func (RestorePlanRestoreIamBindingOutput) ElementType added in v0.26.0

func (RestorePlanRestoreIamBindingOutput) Etag added in v0.26.0

The etag of the resource's IAM policy.

func (RestorePlanRestoreIamBindingOutput) Members added in v0.26.0

Specifies the principals requesting access for a Google Cloud resource. `members` can have the following values: * `allUsers`: A special identifier that represents anyone who is on the internet; with or without a Google account. * `allAuthenticatedUsers`: A special identifier that represents anyone who is authenticated with a Google account or a service account. Does not include identities that come from external identity providers (IdPs) through identity federation. * `user:{emailid}`: An email address that represents a specific Google account. For example, `alice@example.com` . * `serviceAccount:{emailid}`: An email address that represents a Google service account. For example, `my-other-app@appspot.gserviceaccount.com`. * `serviceAccount:{projectid}.svc.id.goog[{namespace}/{kubernetes-sa}]`: An identifier for a [Kubernetes service account](https://cloud.google.com/kubernetes-engine/docs/how-to/kubernetes-service-accounts). For example, `my-project.svc.id.goog[my-namespace/my-kubernetes-sa]`. * `group:{emailid}`: An email address that represents a Google group. For example, `admins@example.com`. * `domain:{domain}`: The G Suite domain (primary) that represents all the users of that domain. For example, `google.com` or `example.com`. * `deleted:user:{emailid}?uid={uniqueid}`: An email address (plus unique identifier) representing a user that has been recently deleted. For example, `alice@example.com?uid=123456789012345678901`. If the user is recovered, this value reverts to `user:{emailid}` and the recovered user retains the role in the binding. * `deleted:serviceAccount:{emailid}?uid={uniqueid}`: An email address (plus unique identifier) representing a service account that has been recently deleted. For example, `my-other-app@appspot.gserviceaccount.com?uid=123456789012345678901`. If the service account is undeleted, this value reverts to `serviceAccount:{emailid}` and the undeleted service account retains the role in the binding. * `deleted:group:{emailid}?uid={uniqueid}`: An email address (plus unique identifier) representing a Google group that has been recently deleted. For example, `admins@example.com?uid=123456789012345678901`. If the group is recovered, this value reverts to `group:{emailid}` and the recovered group retains the role in the binding.

func (RestorePlanRestoreIamBindingOutput) Name added in v0.26.0

The name of the resource to manage IAM policies for.

func (RestorePlanRestoreIamBindingOutput) Project added in v0.26.0

The project in which the resource belongs. If it is not provided, a default will be supplied.

func (RestorePlanRestoreIamBindingOutput) Role added in v0.26.0

Role that is assigned to the list of `members`, or principals. For example, `roles/viewer`, `roles/editor`, or `roles/owner`.

func (RestorePlanRestoreIamBindingOutput) ToRestorePlanRestoreIamBindingOutput added in v0.26.0

func (o RestorePlanRestoreIamBindingOutput) ToRestorePlanRestoreIamBindingOutput() RestorePlanRestoreIamBindingOutput

func (RestorePlanRestoreIamBindingOutput) ToRestorePlanRestoreIamBindingOutputWithContext added in v0.26.0

func (o RestorePlanRestoreIamBindingOutput) ToRestorePlanRestoreIamBindingOutputWithContext(ctx context.Context) RestorePlanRestoreIamBindingOutput

type RestorePlanRestoreIamBindingState added in v0.26.0

type RestorePlanRestoreIamBindingState struct {
}

func (RestorePlanRestoreIamBindingState) ElementType added in v0.26.0

type RestorePlanRestoreIamMember added in v0.26.0

type RestorePlanRestoreIamMember struct {
	pulumi.CustomResourceState

	// An IAM Condition for a given binding. See https://cloud.google.com/iam/docs/conditions-overview for additional details.
	Condition iam.ConditionPtrOutput `pulumi:"condition"`
	// The etag of the resource's IAM policy.
	Etag pulumi.StringOutput `pulumi:"etag"`
	// Specifies the principals requesting access for a Google Cloud resource. `members` can have the following values: * `allUsers`: A special identifier that represents anyone who is on the internet; with or without a Google account. * `allAuthenticatedUsers`: A special identifier that represents anyone who is authenticated with a Google account or a service account. Does not include identities that come from external identity providers (IdPs) through identity federation. * `user:{emailid}`: An email address that represents a specific Google account. For example, `alice@example.com` . * `serviceAccount:{emailid}`: An email address that represents a Google service account. For example, `my-other-app@appspot.gserviceaccount.com`. * `serviceAccount:{projectid}.svc.id.goog[{namespace}/{kubernetes-sa}]`: An identifier for a [Kubernetes service account](https://cloud.google.com/kubernetes-engine/docs/how-to/kubernetes-service-accounts). For example, `my-project.svc.id.goog[my-namespace/my-kubernetes-sa]`. * `group:{emailid}`: An email address that represents a Google group. For example, `admins@example.com`. * `domain:{domain}`: The G Suite domain (primary) that represents all the users of that domain. For example, `google.com` or `example.com`. * `deleted:user:{emailid}?uid={uniqueid}`: An email address (plus unique identifier) representing a user that has been recently deleted. For example, `alice@example.com?uid=123456789012345678901`. If the user is recovered, this value reverts to `user:{emailid}` and the recovered user retains the role in the binding. * `deleted:serviceAccount:{emailid}?uid={uniqueid}`: An email address (plus unique identifier) representing a service account that has been recently deleted. For example, `my-other-app@appspot.gserviceaccount.com?uid=123456789012345678901`. If the service account is undeleted, this value reverts to `serviceAccount:{emailid}` and the undeleted service account retains the role in the binding. * `deleted:group:{emailid}?uid={uniqueid}`: An email address (plus unique identifier) representing a Google group that has been recently deleted. For example, `admins@example.com?uid=123456789012345678901`. If the group is recovered, this value reverts to `group:{emailid}` and the recovered group retains the role in the binding.
	Member pulumi.StringOutput `pulumi:"member"`
	// The name of the resource to manage IAM policies for.
	Name pulumi.StringOutput `pulumi:"name"`
	// The project in which the resource belongs. If it is not provided, a default will be supplied.
	Project pulumi.StringOutput `pulumi:"project"`
	// Role that is assigned to the list of `members`, or principals. For example, `roles/viewer`, `roles/editor`, or `roles/owner`.
	Role pulumi.StringOutput `pulumi:"role"`
}

Sets the access control policy on the specified resource. Replaces any existing policy. Can return `NOT_FOUND`, `INVALID_ARGUMENT`, and `PERMISSION_DENIED` errors.

func GetRestorePlanRestoreIamMember added in v0.26.0

func GetRestorePlanRestoreIamMember(ctx *pulumi.Context,
	name string, id pulumi.IDInput, state *RestorePlanRestoreIamMemberState, opts ...pulumi.ResourceOption) (*RestorePlanRestoreIamMember, error)

GetRestorePlanRestoreIamMember gets an existing RestorePlanRestoreIamMember resource's state with the given name, ID, and optional state properties that are used to uniquely qualify the lookup (nil if not required).

func NewRestorePlanRestoreIamMember added in v0.26.0

func NewRestorePlanRestoreIamMember(ctx *pulumi.Context,
	name string, args *RestorePlanRestoreIamMemberArgs, opts ...pulumi.ResourceOption) (*RestorePlanRestoreIamMember, error)

NewRestorePlanRestoreIamMember registers a new resource with the given unique name, arguments, and options.

func (*RestorePlanRestoreIamMember) ElementType added in v0.26.0

func (*RestorePlanRestoreIamMember) ElementType() reflect.Type

func (*RestorePlanRestoreIamMember) ToRestorePlanRestoreIamMemberOutput added in v0.26.0

func (i *RestorePlanRestoreIamMember) ToRestorePlanRestoreIamMemberOutput() RestorePlanRestoreIamMemberOutput

func (*RestorePlanRestoreIamMember) ToRestorePlanRestoreIamMemberOutputWithContext added in v0.26.0

func (i *RestorePlanRestoreIamMember) ToRestorePlanRestoreIamMemberOutputWithContext(ctx context.Context) RestorePlanRestoreIamMemberOutput

type RestorePlanRestoreIamMemberArgs added in v0.26.0

type RestorePlanRestoreIamMemberArgs struct {
	// An IAM Condition for a given binding.
	Condition iam.ConditionPtrInput
	// Identity that will be granted the privilege in role. The entry can have one of the following values:
	//
	//  * user:{emailid}: An email address that represents a specific Google account. For example, alice@gmail.com or joe@example.com.
	//  * serviceAccount:{emailid}: An email address that represents a service account. For example, my-other-app@appspot.gserviceaccount.com.
	//  * group:{emailid}: An email address that represents a Google group. For example, admins@example.com.
	//  * domain:{domain}: A G Suite domain (primary, instead of alias) name that represents all the users of that domain. For example, google.com or example.com.
	Member pulumi.StringInput
	// The name of the resource to manage IAM policies for.
	Name pulumi.StringInput
	// The role that should be applied.
	Role pulumi.StringInput
}

The set of arguments for constructing a RestorePlanRestoreIamMember resource.

func (RestorePlanRestoreIamMemberArgs) ElementType added in v0.26.0

type RestorePlanRestoreIamMemberInput added in v0.26.0

type RestorePlanRestoreIamMemberInput interface {
	pulumi.Input

	ToRestorePlanRestoreIamMemberOutput() RestorePlanRestoreIamMemberOutput
	ToRestorePlanRestoreIamMemberOutputWithContext(ctx context.Context) RestorePlanRestoreIamMemberOutput
}

type RestorePlanRestoreIamMemberOutput added in v0.26.0

type RestorePlanRestoreIamMemberOutput struct{ *pulumi.OutputState }

func (RestorePlanRestoreIamMemberOutput) Condition added in v0.26.0

An IAM Condition for a given binding. See https://cloud.google.com/iam/docs/conditions-overview for additional details.

func (RestorePlanRestoreIamMemberOutput) ElementType added in v0.26.0

func (RestorePlanRestoreIamMemberOutput) Etag added in v0.26.0

The etag of the resource's IAM policy.

func (RestorePlanRestoreIamMemberOutput) Member added in v0.26.0

Specifies the principals requesting access for a Google Cloud resource. `members` can have the following values: * `allUsers`: A special identifier that represents anyone who is on the internet; with or without a Google account. * `allAuthenticatedUsers`: A special identifier that represents anyone who is authenticated with a Google account or a service account. Does not include identities that come from external identity providers (IdPs) through identity federation. * `user:{emailid}`: An email address that represents a specific Google account. For example, `alice@example.com` . * `serviceAccount:{emailid}`: An email address that represents a Google service account. For example, `my-other-app@appspot.gserviceaccount.com`. * `serviceAccount:{projectid}.svc.id.goog[{namespace}/{kubernetes-sa}]`: An identifier for a [Kubernetes service account](https://cloud.google.com/kubernetes-engine/docs/how-to/kubernetes-service-accounts). For example, `my-project.svc.id.goog[my-namespace/my-kubernetes-sa]`. * `group:{emailid}`: An email address that represents a Google group. For example, `admins@example.com`. * `domain:{domain}`: The G Suite domain (primary) that represents all the users of that domain. For example, `google.com` or `example.com`. * `deleted:user:{emailid}?uid={uniqueid}`: An email address (plus unique identifier) representing a user that has been recently deleted. For example, `alice@example.com?uid=123456789012345678901`. If the user is recovered, this value reverts to `user:{emailid}` and the recovered user retains the role in the binding. * `deleted:serviceAccount:{emailid}?uid={uniqueid}`: An email address (plus unique identifier) representing a service account that has been recently deleted. For example, `my-other-app@appspot.gserviceaccount.com?uid=123456789012345678901`. If the service account is undeleted, this value reverts to `serviceAccount:{emailid}` and the undeleted service account retains the role in the binding. * `deleted:group:{emailid}?uid={uniqueid}`: An email address (plus unique identifier) representing a Google group that has been recently deleted. For example, `admins@example.com?uid=123456789012345678901`. If the group is recovered, this value reverts to `group:{emailid}` and the recovered group retains the role in the binding.

func (RestorePlanRestoreIamMemberOutput) Name added in v0.26.0

The name of the resource to manage IAM policies for.

func (RestorePlanRestoreIamMemberOutput) Project added in v0.26.0

The project in which the resource belongs. If it is not provided, a default will be supplied.

func (RestorePlanRestoreIamMemberOutput) Role added in v0.26.0

Role that is assigned to the list of `members`, or principals. For example, `roles/viewer`, `roles/editor`, or `roles/owner`.

func (RestorePlanRestoreIamMemberOutput) ToRestorePlanRestoreIamMemberOutput added in v0.26.0

func (o RestorePlanRestoreIamMemberOutput) ToRestorePlanRestoreIamMemberOutput() RestorePlanRestoreIamMemberOutput

func (RestorePlanRestoreIamMemberOutput) ToRestorePlanRestoreIamMemberOutputWithContext added in v0.26.0

func (o RestorePlanRestoreIamMemberOutput) ToRestorePlanRestoreIamMemberOutputWithContext(ctx context.Context) RestorePlanRestoreIamMemberOutput

type RestorePlanRestoreIamMemberState added in v0.26.0

type RestorePlanRestoreIamMemberState struct {
}

func (RestorePlanRestoreIamMemberState) ElementType added in v0.26.0

type RestorePlanRestoreIamPolicy

type RestorePlanRestoreIamPolicy struct {
	pulumi.CustomResourceState

	// Specifies cloud audit logging configuration for this policy.
	AuditConfigs AuditConfigResponseArrayOutput `pulumi:"auditConfigs"`
	// Associates a list of `members`, or principals, with a `role`. Optionally, may specify a `condition` that determines how and when the `bindings` are applied. Each of the `bindings` must contain at least one principal. The `bindings` in a `Policy` can refer to up to 1,500 principals; up to 250 of these principals can be Google groups. Each occurrence of a principal counts towards these limits. For example, if the `bindings` grant 50 different roles to `user:alice@example.com`, and not to any other principal, then you can add another 1,450 principals to the `bindings` in the `Policy`.
	Bindings BindingResponseArrayOutput `pulumi:"bindings"`
	// `etag` is used for optimistic concurrency control as a way to help prevent simultaneous updates of a policy from overwriting each other. It is strongly suggested that systems make use of the `etag` in the read-modify-write cycle to perform policy updates in order to avoid race conditions: An `etag` is returned in the response to `getIamPolicy`, and systems are expected to put that etag in the request to `setIamPolicy` to ensure that their change will be applied to the same version of the policy. **Important:** If you use IAM Conditions, you must include the `etag` field whenever you call `setIamPolicy`. If you omit this field, then IAM allows you to overwrite a version `3` policy with a version `1` policy, and all of the conditions in the version `3` policy are lost.
	Etag          pulumi.StringOutput `pulumi:"etag"`
	Location      pulumi.StringOutput `pulumi:"location"`
	Project       pulumi.StringOutput `pulumi:"project"`
	RestoreId     pulumi.StringOutput `pulumi:"restoreId"`
	RestorePlanId pulumi.StringOutput `pulumi:"restorePlanId"`
	// Specifies the format of the policy. Valid values are `0`, `1`, and `3`. Requests that specify an invalid value are rejected. Any operation that affects conditional role bindings must specify version `3`. This requirement applies to the following operations: * Getting a policy that includes a conditional role binding * Adding a conditional role binding to a policy * Changing a conditional role binding in a policy * Removing any role binding, with or without a condition, from a policy that includes conditions **Important:** If you use IAM Conditions, you must include the `etag` field whenever you call `setIamPolicy`. If you omit this field, then IAM allows you to overwrite a version `3` policy with a version `1` policy, and all of the conditions in the version `3` policy are lost. If a policy does not include any conditions, operations on that policy may specify any valid version or leave the field unset. To learn which resources support conditions in their IAM policies, see the [IAM documentation](https://cloud.google.com/iam/help/conditions/resource-policies).
	Version pulumi.IntOutput `pulumi:"version"`
}

Sets the access control policy on the specified resource. Replaces any existing policy. Can return `NOT_FOUND`, `INVALID_ARGUMENT`, and `PERMISSION_DENIED` errors. Note - this resource's API doesn't support deletion. When deleted, the resource will persist on Google Cloud even though it will be deleted from Pulumi state.

func GetRestorePlanRestoreIamPolicy

func GetRestorePlanRestoreIamPolicy(ctx *pulumi.Context,
	name string, id pulumi.IDInput, state *RestorePlanRestoreIamPolicyState, opts ...pulumi.ResourceOption) (*RestorePlanRestoreIamPolicy, error)

GetRestorePlanRestoreIamPolicy gets an existing RestorePlanRestoreIamPolicy resource's state with the given name, ID, and optional state properties that are used to uniquely qualify the lookup (nil if not required).

func NewRestorePlanRestoreIamPolicy

func NewRestorePlanRestoreIamPolicy(ctx *pulumi.Context,
	name string, args *RestorePlanRestoreIamPolicyArgs, opts ...pulumi.ResourceOption) (*RestorePlanRestoreIamPolicy, error)

NewRestorePlanRestoreIamPolicy registers a new resource with the given unique name, arguments, and options.

func (*RestorePlanRestoreIamPolicy) ElementType

func (*RestorePlanRestoreIamPolicy) ElementType() reflect.Type

func (*RestorePlanRestoreIamPolicy) ToRestorePlanRestoreIamPolicyOutput

func (i *RestorePlanRestoreIamPolicy) ToRestorePlanRestoreIamPolicyOutput() RestorePlanRestoreIamPolicyOutput

func (*RestorePlanRestoreIamPolicy) ToRestorePlanRestoreIamPolicyOutputWithContext

func (i *RestorePlanRestoreIamPolicy) ToRestorePlanRestoreIamPolicyOutputWithContext(ctx context.Context) RestorePlanRestoreIamPolicyOutput

type RestorePlanRestoreIamPolicyArgs

type RestorePlanRestoreIamPolicyArgs struct {
	// Specifies cloud audit logging configuration for this policy.
	AuditConfigs AuditConfigArrayInput
	// Associates a list of `members`, or principals, with a `role`. Optionally, may specify a `condition` that determines how and when the `bindings` are applied. Each of the `bindings` must contain at least one principal. The `bindings` in a `Policy` can refer to up to 1,500 principals; up to 250 of these principals can be Google groups. Each occurrence of a principal counts towards these limits. For example, if the `bindings` grant 50 different roles to `user:alice@example.com`, and not to any other principal, then you can add another 1,450 principals to the `bindings` in the `Policy`.
	Bindings BindingArrayInput
	// `etag` is used for optimistic concurrency control as a way to help prevent simultaneous updates of a policy from overwriting each other. It is strongly suggested that systems make use of the `etag` in the read-modify-write cycle to perform policy updates in order to avoid race conditions: An `etag` is returned in the response to `getIamPolicy`, and systems are expected to put that etag in the request to `setIamPolicy` to ensure that their change will be applied to the same version of the policy. **Important:** If you use IAM Conditions, you must include the `etag` field whenever you call `setIamPolicy`. If you omit this field, then IAM allows you to overwrite a version `3` policy with a version `1` policy, and all of the conditions in the version `3` policy are lost.
	Etag          pulumi.StringPtrInput
	Location      pulumi.StringPtrInput
	Project       pulumi.StringPtrInput
	RestoreId     pulumi.StringInput
	RestorePlanId pulumi.StringInput
	// OPTIONAL: A FieldMask specifying which fields of the policy to modify. Only the fields in the mask will be modified. If no mask is provided, the following default mask is used: `paths: "bindings, etag"`
	UpdateMask pulumi.StringPtrInput
	// Specifies the format of the policy. Valid values are `0`, `1`, and `3`. Requests that specify an invalid value are rejected. Any operation that affects conditional role bindings must specify version `3`. This requirement applies to the following operations: * Getting a policy that includes a conditional role binding * Adding a conditional role binding to a policy * Changing a conditional role binding in a policy * Removing any role binding, with or without a condition, from a policy that includes conditions **Important:** If you use IAM Conditions, you must include the `etag` field whenever you call `setIamPolicy`. If you omit this field, then IAM allows you to overwrite a version `3` policy with a version `1` policy, and all of the conditions in the version `3` policy are lost. If a policy does not include any conditions, operations on that policy may specify any valid version or leave the field unset. To learn which resources support conditions in their IAM policies, see the [IAM documentation](https://cloud.google.com/iam/help/conditions/resource-policies).
	Version pulumi.IntPtrInput
}

The set of arguments for constructing a RestorePlanRestoreIamPolicy resource.

func (RestorePlanRestoreIamPolicyArgs) ElementType

type RestorePlanRestoreIamPolicyInput

type RestorePlanRestoreIamPolicyInput interface {
	pulumi.Input

	ToRestorePlanRestoreIamPolicyOutput() RestorePlanRestoreIamPolicyOutput
	ToRestorePlanRestoreIamPolicyOutputWithContext(ctx context.Context) RestorePlanRestoreIamPolicyOutput
}

type RestorePlanRestoreIamPolicyOutput

type RestorePlanRestoreIamPolicyOutput struct{ *pulumi.OutputState }

func (RestorePlanRestoreIamPolicyOutput) AuditConfigs added in v0.19.0

Specifies cloud audit logging configuration for this policy.

func (RestorePlanRestoreIamPolicyOutput) Bindings added in v0.19.0

Associates a list of `members`, or principals, with a `role`. Optionally, may specify a `condition` that determines how and when the `bindings` are applied. Each of the `bindings` must contain at least one principal. The `bindings` in a `Policy` can refer to up to 1,500 principals; up to 250 of these principals can be Google groups. Each occurrence of a principal counts towards these limits. For example, if the `bindings` grant 50 different roles to `user:alice@example.com`, and not to any other principal, then you can add another 1,450 principals to the `bindings` in the `Policy`.

func (RestorePlanRestoreIamPolicyOutput) ElementType

func (RestorePlanRestoreIamPolicyOutput) Etag added in v0.19.0

`etag` is used for optimistic concurrency control as a way to help prevent simultaneous updates of a policy from overwriting each other. It is strongly suggested that systems make use of the `etag` in the read-modify-write cycle to perform policy updates in order to avoid race conditions: An `etag` is returned in the response to `getIamPolicy`, and systems are expected to put that etag in the request to `setIamPolicy` to ensure that their change will be applied to the same version of the policy. **Important:** If you use IAM Conditions, you must include the `etag` field whenever you call `setIamPolicy`. If you omit this field, then IAM allows you to overwrite a version `3` policy with a version `1` policy, and all of the conditions in the version `3` policy are lost.

func (RestorePlanRestoreIamPolicyOutput) Location added in v0.21.0

func (RestorePlanRestoreIamPolicyOutput) Project added in v0.21.0

func (RestorePlanRestoreIamPolicyOutput) RestoreId added in v0.21.0

func (RestorePlanRestoreIamPolicyOutput) RestorePlanId added in v0.21.0

func (RestorePlanRestoreIamPolicyOutput) ToRestorePlanRestoreIamPolicyOutput

func (o RestorePlanRestoreIamPolicyOutput) ToRestorePlanRestoreIamPolicyOutput() RestorePlanRestoreIamPolicyOutput

func (RestorePlanRestoreIamPolicyOutput) ToRestorePlanRestoreIamPolicyOutputWithContext

func (o RestorePlanRestoreIamPolicyOutput) ToRestorePlanRestoreIamPolicyOutputWithContext(ctx context.Context) RestorePlanRestoreIamPolicyOutput

func (RestorePlanRestoreIamPolicyOutput) Version added in v0.19.0

Specifies the format of the policy. Valid values are `0`, `1`, and `3`. Requests that specify an invalid value are rejected. Any operation that affects conditional role bindings must specify version `3`. This requirement applies to the following operations: * Getting a policy that includes a conditional role binding * Adding a conditional role binding to a policy * Changing a conditional role binding in a policy * Removing any role binding, with or without a condition, from a policy that includes conditions **Important:** If you use IAM Conditions, you must include the `etag` field whenever you call `setIamPolicy`. If you omit this field, then IAM allows you to overwrite a version `3` policy with a version `1` policy, and all of the conditions in the version `3` policy are lost. If a policy does not include any conditions, operations on that policy may specify any valid version or leave the field unset. To learn which resources support conditions in their IAM policies, see the [IAM documentation](https://cloud.google.com/iam/help/conditions/resource-policies).

type RestorePlanRestoreIamPolicyState

type RestorePlanRestoreIamPolicyState struct {
}

func (RestorePlanRestoreIamPolicyState) ElementType

type RestorePlanRestoreVolumeRestoreIamBinding added in v0.26.0

type RestorePlanRestoreVolumeRestoreIamBinding struct {
	pulumi.CustomResourceState

	// An IAM Condition for a given binding. See https://cloud.google.com/iam/docs/conditions-overview for additional details.
	Condition iam.ConditionPtrOutput `pulumi:"condition"`
	// The etag of the resource's IAM policy.
	Etag pulumi.StringOutput `pulumi:"etag"`
	// Specifies the principals requesting access for a Google Cloud resource. `members` can have the following values: * `allUsers`: A special identifier that represents anyone who is on the internet; with or without a Google account. * `allAuthenticatedUsers`: A special identifier that represents anyone who is authenticated with a Google account or a service account. Does not include identities that come from external identity providers (IdPs) through identity federation. * `user:{emailid}`: An email address that represents a specific Google account. For example, `alice@example.com` . * `serviceAccount:{emailid}`: An email address that represents a Google service account. For example, `my-other-app@appspot.gserviceaccount.com`. * `serviceAccount:{projectid}.svc.id.goog[{namespace}/{kubernetes-sa}]`: An identifier for a [Kubernetes service account](https://cloud.google.com/kubernetes-engine/docs/how-to/kubernetes-service-accounts). For example, `my-project.svc.id.goog[my-namespace/my-kubernetes-sa]`. * `group:{emailid}`: An email address that represents a Google group. For example, `admins@example.com`. * `domain:{domain}`: The G Suite domain (primary) that represents all the users of that domain. For example, `google.com` or `example.com`. * `deleted:user:{emailid}?uid={uniqueid}`: An email address (plus unique identifier) representing a user that has been recently deleted. For example, `alice@example.com?uid=123456789012345678901`. If the user is recovered, this value reverts to `user:{emailid}` and the recovered user retains the role in the binding. * `deleted:serviceAccount:{emailid}?uid={uniqueid}`: An email address (plus unique identifier) representing a service account that has been recently deleted. For example, `my-other-app@appspot.gserviceaccount.com?uid=123456789012345678901`. If the service account is undeleted, this value reverts to `serviceAccount:{emailid}` and the undeleted service account retains the role in the binding. * `deleted:group:{emailid}?uid={uniqueid}`: An email address (plus unique identifier) representing a Google group that has been recently deleted. For example, `admins@example.com?uid=123456789012345678901`. If the group is recovered, this value reverts to `group:{emailid}` and the recovered group retains the role in the binding.
	Members pulumi.StringArrayOutput `pulumi:"members"`
	// The name of the resource to manage IAM policies for.
	Name pulumi.StringOutput `pulumi:"name"`
	// The project in which the resource belongs. If it is not provided, a default will be supplied.
	Project pulumi.StringOutput `pulumi:"project"`
	// Role that is assigned to the list of `members`, or principals. For example, `roles/viewer`, `roles/editor`, or `roles/owner`.
	Role pulumi.StringOutput `pulumi:"role"`
}

Sets the access control policy on the specified resource. Replaces any existing policy. Can return `NOT_FOUND`, `INVALID_ARGUMENT`, and `PERMISSION_DENIED` errors.

func GetRestorePlanRestoreVolumeRestoreIamBinding added in v0.26.0

func GetRestorePlanRestoreVolumeRestoreIamBinding(ctx *pulumi.Context,
	name string, id pulumi.IDInput, state *RestorePlanRestoreVolumeRestoreIamBindingState, opts ...pulumi.ResourceOption) (*RestorePlanRestoreVolumeRestoreIamBinding, error)

GetRestorePlanRestoreVolumeRestoreIamBinding gets an existing RestorePlanRestoreVolumeRestoreIamBinding resource's state with the given name, ID, and optional state properties that are used to uniquely qualify the lookup (nil if not required).

func NewRestorePlanRestoreVolumeRestoreIamBinding added in v0.26.0

func NewRestorePlanRestoreVolumeRestoreIamBinding(ctx *pulumi.Context,
	name string, args *RestorePlanRestoreVolumeRestoreIamBindingArgs, opts ...pulumi.ResourceOption) (*RestorePlanRestoreVolumeRestoreIamBinding, error)

NewRestorePlanRestoreVolumeRestoreIamBinding registers a new resource with the given unique name, arguments, and options.

func (*RestorePlanRestoreVolumeRestoreIamBinding) ElementType added in v0.26.0

func (*RestorePlanRestoreVolumeRestoreIamBinding) ToRestorePlanRestoreVolumeRestoreIamBindingOutput added in v0.26.0

func (i *RestorePlanRestoreVolumeRestoreIamBinding) ToRestorePlanRestoreVolumeRestoreIamBindingOutput() RestorePlanRestoreVolumeRestoreIamBindingOutput

func (*RestorePlanRestoreVolumeRestoreIamBinding) ToRestorePlanRestoreVolumeRestoreIamBindingOutputWithContext added in v0.26.0

func (i *RestorePlanRestoreVolumeRestoreIamBinding) ToRestorePlanRestoreVolumeRestoreIamBindingOutputWithContext(ctx context.Context) RestorePlanRestoreVolumeRestoreIamBindingOutput

type RestorePlanRestoreVolumeRestoreIamBindingArgs added in v0.26.0

type RestorePlanRestoreVolumeRestoreIamBindingArgs struct {
	// An IAM Condition for a given binding.
	Condition iam.ConditionPtrInput
	// Identities that will be granted the privilege in role. Each entry can have one of the following values:
	//
	//  * user:{emailid}: An email address that represents a specific Google account. For example, alice@gmail.com or joe@example.com.
	//  * serviceAccount:{emailid}: An email address that represents a service account. For example, my-other-app@appspot.gserviceaccount.com.
	//  * group:{emailid}: An email address that represents a Google group. For example, admins@example.com.
	//  * domain:{domain}: A G Suite domain (primary, instead of alias) name that represents all the users of that domain. For example, google.com or example.com.
	Members pulumi.StringArrayInput
	// The name of the resource to manage IAM policies for.
	Name pulumi.StringInput
	// The role that should be applied. Only one `IamBinding` can be used per role.
	Role pulumi.StringInput
}

The set of arguments for constructing a RestorePlanRestoreVolumeRestoreIamBinding resource.

func (RestorePlanRestoreVolumeRestoreIamBindingArgs) ElementType added in v0.26.0

type RestorePlanRestoreVolumeRestoreIamBindingInput added in v0.26.0

type RestorePlanRestoreVolumeRestoreIamBindingInput interface {
	pulumi.Input

	ToRestorePlanRestoreVolumeRestoreIamBindingOutput() RestorePlanRestoreVolumeRestoreIamBindingOutput
	ToRestorePlanRestoreVolumeRestoreIamBindingOutputWithContext(ctx context.Context) RestorePlanRestoreVolumeRestoreIamBindingOutput
}

type RestorePlanRestoreVolumeRestoreIamBindingOutput added in v0.26.0

type RestorePlanRestoreVolumeRestoreIamBindingOutput struct{ *pulumi.OutputState }

func (RestorePlanRestoreVolumeRestoreIamBindingOutput) Condition added in v0.26.0

An IAM Condition for a given binding. See https://cloud.google.com/iam/docs/conditions-overview for additional details.

func (RestorePlanRestoreVolumeRestoreIamBindingOutput) ElementType added in v0.26.0

func (RestorePlanRestoreVolumeRestoreIamBindingOutput) Etag added in v0.26.0

The etag of the resource's IAM policy.

func (RestorePlanRestoreVolumeRestoreIamBindingOutput) Members added in v0.26.0

Specifies the principals requesting access for a Google Cloud resource. `members` can have the following values: * `allUsers`: A special identifier that represents anyone who is on the internet; with or without a Google account. * `allAuthenticatedUsers`: A special identifier that represents anyone who is authenticated with a Google account or a service account. Does not include identities that come from external identity providers (IdPs) through identity federation. * `user:{emailid}`: An email address that represents a specific Google account. For example, `alice@example.com` . * `serviceAccount:{emailid}`: An email address that represents a Google service account. For example, `my-other-app@appspot.gserviceaccount.com`. * `serviceAccount:{projectid}.svc.id.goog[{namespace}/{kubernetes-sa}]`: An identifier for a [Kubernetes service account](https://cloud.google.com/kubernetes-engine/docs/how-to/kubernetes-service-accounts). For example, `my-project.svc.id.goog[my-namespace/my-kubernetes-sa]`. * `group:{emailid}`: An email address that represents a Google group. For example, `admins@example.com`. * `domain:{domain}`: The G Suite domain (primary) that represents all the users of that domain. For example, `google.com` or `example.com`. * `deleted:user:{emailid}?uid={uniqueid}`: An email address (plus unique identifier) representing a user that has been recently deleted. For example, `alice@example.com?uid=123456789012345678901`. If the user is recovered, this value reverts to `user:{emailid}` and the recovered user retains the role in the binding. * `deleted:serviceAccount:{emailid}?uid={uniqueid}`: An email address (plus unique identifier) representing a service account that has been recently deleted. For example, `my-other-app@appspot.gserviceaccount.com?uid=123456789012345678901`. If the service account is undeleted, this value reverts to `serviceAccount:{emailid}` and the undeleted service account retains the role in the binding. * `deleted:group:{emailid}?uid={uniqueid}`: An email address (plus unique identifier) representing a Google group that has been recently deleted. For example, `admins@example.com?uid=123456789012345678901`. If the group is recovered, this value reverts to `group:{emailid}` and the recovered group retains the role in the binding.

func (RestorePlanRestoreVolumeRestoreIamBindingOutput) Name added in v0.26.0

The name of the resource to manage IAM policies for.

func (RestorePlanRestoreVolumeRestoreIamBindingOutput) Project added in v0.26.0

The project in which the resource belongs. If it is not provided, a default will be supplied.

func (RestorePlanRestoreVolumeRestoreIamBindingOutput) Role added in v0.26.0

Role that is assigned to the list of `members`, or principals. For example, `roles/viewer`, `roles/editor`, or `roles/owner`.

func (RestorePlanRestoreVolumeRestoreIamBindingOutput) ToRestorePlanRestoreVolumeRestoreIamBindingOutput added in v0.26.0

func (o RestorePlanRestoreVolumeRestoreIamBindingOutput) ToRestorePlanRestoreVolumeRestoreIamBindingOutput() RestorePlanRestoreVolumeRestoreIamBindingOutput

func (RestorePlanRestoreVolumeRestoreIamBindingOutput) ToRestorePlanRestoreVolumeRestoreIamBindingOutputWithContext added in v0.26.0

func (o RestorePlanRestoreVolumeRestoreIamBindingOutput) ToRestorePlanRestoreVolumeRestoreIamBindingOutputWithContext(ctx context.Context) RestorePlanRestoreVolumeRestoreIamBindingOutput

type RestorePlanRestoreVolumeRestoreIamBindingState added in v0.26.0

type RestorePlanRestoreVolumeRestoreIamBindingState struct {
}

func (RestorePlanRestoreVolumeRestoreIamBindingState) ElementType added in v0.26.0

type RestorePlanRestoreVolumeRestoreIamMember added in v0.26.0

type RestorePlanRestoreVolumeRestoreIamMember struct {
	pulumi.CustomResourceState

	// An IAM Condition for a given binding. See https://cloud.google.com/iam/docs/conditions-overview for additional details.
	Condition iam.ConditionPtrOutput `pulumi:"condition"`
	// The etag of the resource's IAM policy.
	Etag pulumi.StringOutput `pulumi:"etag"`
	// Specifies the principals requesting access for a Google Cloud resource. `members` can have the following values: * `allUsers`: A special identifier that represents anyone who is on the internet; with or without a Google account. * `allAuthenticatedUsers`: A special identifier that represents anyone who is authenticated with a Google account or a service account. Does not include identities that come from external identity providers (IdPs) through identity federation. * `user:{emailid}`: An email address that represents a specific Google account. For example, `alice@example.com` . * `serviceAccount:{emailid}`: An email address that represents a Google service account. For example, `my-other-app@appspot.gserviceaccount.com`. * `serviceAccount:{projectid}.svc.id.goog[{namespace}/{kubernetes-sa}]`: An identifier for a [Kubernetes service account](https://cloud.google.com/kubernetes-engine/docs/how-to/kubernetes-service-accounts). For example, `my-project.svc.id.goog[my-namespace/my-kubernetes-sa]`. * `group:{emailid}`: An email address that represents a Google group. For example, `admins@example.com`. * `domain:{domain}`: The G Suite domain (primary) that represents all the users of that domain. For example, `google.com` or `example.com`. * `deleted:user:{emailid}?uid={uniqueid}`: An email address (plus unique identifier) representing a user that has been recently deleted. For example, `alice@example.com?uid=123456789012345678901`. If the user is recovered, this value reverts to `user:{emailid}` and the recovered user retains the role in the binding. * `deleted:serviceAccount:{emailid}?uid={uniqueid}`: An email address (plus unique identifier) representing a service account that has been recently deleted. For example, `my-other-app@appspot.gserviceaccount.com?uid=123456789012345678901`. If the service account is undeleted, this value reverts to `serviceAccount:{emailid}` and the undeleted service account retains the role in the binding. * `deleted:group:{emailid}?uid={uniqueid}`: An email address (plus unique identifier) representing a Google group that has been recently deleted. For example, `admins@example.com?uid=123456789012345678901`. If the group is recovered, this value reverts to `group:{emailid}` and the recovered group retains the role in the binding.
	Member pulumi.StringOutput `pulumi:"member"`
	// The name of the resource to manage IAM policies for.
	Name pulumi.StringOutput `pulumi:"name"`
	// The project in which the resource belongs. If it is not provided, a default will be supplied.
	Project pulumi.StringOutput `pulumi:"project"`
	// Role that is assigned to the list of `members`, or principals. For example, `roles/viewer`, `roles/editor`, or `roles/owner`.
	Role pulumi.StringOutput `pulumi:"role"`
}

Sets the access control policy on the specified resource. Replaces any existing policy. Can return `NOT_FOUND`, `INVALID_ARGUMENT`, and `PERMISSION_DENIED` errors.

func GetRestorePlanRestoreVolumeRestoreIamMember added in v0.26.0

func GetRestorePlanRestoreVolumeRestoreIamMember(ctx *pulumi.Context,
	name string, id pulumi.IDInput, state *RestorePlanRestoreVolumeRestoreIamMemberState, opts ...pulumi.ResourceOption) (*RestorePlanRestoreVolumeRestoreIamMember, error)

GetRestorePlanRestoreVolumeRestoreIamMember gets an existing RestorePlanRestoreVolumeRestoreIamMember resource's state with the given name, ID, and optional state properties that are used to uniquely qualify the lookup (nil if not required).

func NewRestorePlanRestoreVolumeRestoreIamMember added in v0.26.0

func NewRestorePlanRestoreVolumeRestoreIamMember(ctx *pulumi.Context,
	name string, args *RestorePlanRestoreVolumeRestoreIamMemberArgs, opts ...pulumi.ResourceOption) (*RestorePlanRestoreVolumeRestoreIamMember, error)

NewRestorePlanRestoreVolumeRestoreIamMember registers a new resource with the given unique name, arguments, and options.

func (*RestorePlanRestoreVolumeRestoreIamMember) ElementType added in v0.26.0

func (*RestorePlanRestoreVolumeRestoreIamMember) ToRestorePlanRestoreVolumeRestoreIamMemberOutput added in v0.26.0

func (i *RestorePlanRestoreVolumeRestoreIamMember) ToRestorePlanRestoreVolumeRestoreIamMemberOutput() RestorePlanRestoreVolumeRestoreIamMemberOutput

func (*RestorePlanRestoreVolumeRestoreIamMember) ToRestorePlanRestoreVolumeRestoreIamMemberOutputWithContext added in v0.26.0

func (i *RestorePlanRestoreVolumeRestoreIamMember) ToRestorePlanRestoreVolumeRestoreIamMemberOutputWithContext(ctx context.Context) RestorePlanRestoreVolumeRestoreIamMemberOutput

type RestorePlanRestoreVolumeRestoreIamMemberArgs added in v0.26.0

type RestorePlanRestoreVolumeRestoreIamMemberArgs struct {
	// An IAM Condition for a given binding.
	Condition iam.ConditionPtrInput
	// Identity that will be granted the privilege in role. The entry can have one of the following values:
	//
	//  * user:{emailid}: An email address that represents a specific Google account. For example, alice@gmail.com or joe@example.com.
	//  * serviceAccount:{emailid}: An email address that represents a service account. For example, my-other-app@appspot.gserviceaccount.com.
	//  * group:{emailid}: An email address that represents a Google group. For example, admins@example.com.
	//  * domain:{domain}: A G Suite domain (primary, instead of alias) name that represents all the users of that domain. For example, google.com or example.com.
	Member pulumi.StringInput
	// The name of the resource to manage IAM policies for.
	Name pulumi.StringInput
	// The role that should be applied.
	Role pulumi.StringInput
}

The set of arguments for constructing a RestorePlanRestoreVolumeRestoreIamMember resource.

func (RestorePlanRestoreVolumeRestoreIamMemberArgs) ElementType added in v0.26.0

type RestorePlanRestoreVolumeRestoreIamMemberInput added in v0.26.0

type RestorePlanRestoreVolumeRestoreIamMemberInput interface {
	pulumi.Input

	ToRestorePlanRestoreVolumeRestoreIamMemberOutput() RestorePlanRestoreVolumeRestoreIamMemberOutput
	ToRestorePlanRestoreVolumeRestoreIamMemberOutputWithContext(ctx context.Context) RestorePlanRestoreVolumeRestoreIamMemberOutput
}

type RestorePlanRestoreVolumeRestoreIamMemberOutput added in v0.26.0

type RestorePlanRestoreVolumeRestoreIamMemberOutput struct{ *pulumi.OutputState }

func (RestorePlanRestoreVolumeRestoreIamMemberOutput) Condition added in v0.26.0

An IAM Condition for a given binding. See https://cloud.google.com/iam/docs/conditions-overview for additional details.

func (RestorePlanRestoreVolumeRestoreIamMemberOutput) ElementType added in v0.26.0

func (RestorePlanRestoreVolumeRestoreIamMemberOutput) Etag added in v0.26.0

The etag of the resource's IAM policy.

func (RestorePlanRestoreVolumeRestoreIamMemberOutput) Member added in v0.26.0

Specifies the principals requesting access for a Google Cloud resource. `members` can have the following values: * `allUsers`: A special identifier that represents anyone who is on the internet; with or without a Google account. * `allAuthenticatedUsers`: A special identifier that represents anyone who is authenticated with a Google account or a service account. Does not include identities that come from external identity providers (IdPs) through identity federation. * `user:{emailid}`: An email address that represents a specific Google account. For example, `alice@example.com` . * `serviceAccount:{emailid}`: An email address that represents a Google service account. For example, `my-other-app@appspot.gserviceaccount.com`. * `serviceAccount:{projectid}.svc.id.goog[{namespace}/{kubernetes-sa}]`: An identifier for a [Kubernetes service account](https://cloud.google.com/kubernetes-engine/docs/how-to/kubernetes-service-accounts). For example, `my-project.svc.id.goog[my-namespace/my-kubernetes-sa]`. * `group:{emailid}`: An email address that represents a Google group. For example, `admins@example.com`. * `domain:{domain}`: The G Suite domain (primary) that represents all the users of that domain. For example, `google.com` or `example.com`. * `deleted:user:{emailid}?uid={uniqueid}`: An email address (plus unique identifier) representing a user that has been recently deleted. For example, `alice@example.com?uid=123456789012345678901`. If the user is recovered, this value reverts to `user:{emailid}` and the recovered user retains the role in the binding. * `deleted:serviceAccount:{emailid}?uid={uniqueid}`: An email address (plus unique identifier) representing a service account that has been recently deleted. For example, `my-other-app@appspot.gserviceaccount.com?uid=123456789012345678901`. If the service account is undeleted, this value reverts to `serviceAccount:{emailid}` and the undeleted service account retains the role in the binding. * `deleted:group:{emailid}?uid={uniqueid}`: An email address (plus unique identifier) representing a Google group that has been recently deleted. For example, `admins@example.com?uid=123456789012345678901`. If the group is recovered, this value reverts to `group:{emailid}` and the recovered group retains the role in the binding.

func (RestorePlanRestoreVolumeRestoreIamMemberOutput) Name added in v0.26.0

The name of the resource to manage IAM policies for.

func (RestorePlanRestoreVolumeRestoreIamMemberOutput) Project added in v0.26.0

The project in which the resource belongs. If it is not provided, a default will be supplied.

func (RestorePlanRestoreVolumeRestoreIamMemberOutput) Role added in v0.26.0

Role that is assigned to the list of `members`, or principals. For example, `roles/viewer`, `roles/editor`, or `roles/owner`.

func (RestorePlanRestoreVolumeRestoreIamMemberOutput) ToRestorePlanRestoreVolumeRestoreIamMemberOutput added in v0.26.0

func (o RestorePlanRestoreVolumeRestoreIamMemberOutput) ToRestorePlanRestoreVolumeRestoreIamMemberOutput() RestorePlanRestoreVolumeRestoreIamMemberOutput

func (RestorePlanRestoreVolumeRestoreIamMemberOutput) ToRestorePlanRestoreVolumeRestoreIamMemberOutputWithContext added in v0.26.0

func (o RestorePlanRestoreVolumeRestoreIamMemberOutput) ToRestorePlanRestoreVolumeRestoreIamMemberOutputWithContext(ctx context.Context) RestorePlanRestoreVolumeRestoreIamMemberOutput

type RestorePlanRestoreVolumeRestoreIamMemberState added in v0.26.0

type RestorePlanRestoreVolumeRestoreIamMemberState struct {
}

func (RestorePlanRestoreVolumeRestoreIamMemberState) ElementType added in v0.26.0

type RestorePlanRestoreVolumeRestoreIamPolicy

type RestorePlanRestoreVolumeRestoreIamPolicy struct {
	pulumi.CustomResourceState

	// Specifies cloud audit logging configuration for this policy.
	AuditConfigs AuditConfigResponseArrayOutput `pulumi:"auditConfigs"`
	// Associates a list of `members`, or principals, with a `role`. Optionally, may specify a `condition` that determines how and when the `bindings` are applied. Each of the `bindings` must contain at least one principal. The `bindings` in a `Policy` can refer to up to 1,500 principals; up to 250 of these principals can be Google groups. Each occurrence of a principal counts towards these limits. For example, if the `bindings` grant 50 different roles to `user:alice@example.com`, and not to any other principal, then you can add another 1,450 principals to the `bindings` in the `Policy`.
	Bindings BindingResponseArrayOutput `pulumi:"bindings"`
	// `etag` is used for optimistic concurrency control as a way to help prevent simultaneous updates of a policy from overwriting each other. It is strongly suggested that systems make use of the `etag` in the read-modify-write cycle to perform policy updates in order to avoid race conditions: An `etag` is returned in the response to `getIamPolicy`, and systems are expected to put that etag in the request to `setIamPolicy` to ensure that their change will be applied to the same version of the policy. **Important:** If you use IAM Conditions, you must include the `etag` field whenever you call `setIamPolicy`. If you omit this field, then IAM allows you to overwrite a version `3` policy with a version `1` policy, and all of the conditions in the version `3` policy are lost.
	Etag          pulumi.StringOutput `pulumi:"etag"`
	Location      pulumi.StringOutput `pulumi:"location"`
	Project       pulumi.StringOutput `pulumi:"project"`
	RestoreId     pulumi.StringOutput `pulumi:"restoreId"`
	RestorePlanId pulumi.StringOutput `pulumi:"restorePlanId"`
	// Specifies the format of the policy. Valid values are `0`, `1`, and `3`. Requests that specify an invalid value are rejected. Any operation that affects conditional role bindings must specify version `3`. This requirement applies to the following operations: * Getting a policy that includes a conditional role binding * Adding a conditional role binding to a policy * Changing a conditional role binding in a policy * Removing any role binding, with or without a condition, from a policy that includes conditions **Important:** If you use IAM Conditions, you must include the `etag` field whenever you call `setIamPolicy`. If you omit this field, then IAM allows you to overwrite a version `3` policy with a version `1` policy, and all of the conditions in the version `3` policy are lost. If a policy does not include any conditions, operations on that policy may specify any valid version or leave the field unset. To learn which resources support conditions in their IAM policies, see the [IAM documentation](https://cloud.google.com/iam/help/conditions/resource-policies).
	Version         pulumi.IntOutput    `pulumi:"version"`
	VolumeRestoreId pulumi.StringOutput `pulumi:"volumeRestoreId"`
}

Sets the access control policy on the specified resource. Replaces any existing policy. Can return `NOT_FOUND`, `INVALID_ARGUMENT`, and `PERMISSION_DENIED` errors. Note - this resource's API doesn't support deletion. When deleted, the resource will persist on Google Cloud even though it will be deleted from Pulumi state.

func GetRestorePlanRestoreVolumeRestoreIamPolicy

func GetRestorePlanRestoreVolumeRestoreIamPolicy(ctx *pulumi.Context,
	name string, id pulumi.IDInput, state *RestorePlanRestoreVolumeRestoreIamPolicyState, opts ...pulumi.ResourceOption) (*RestorePlanRestoreVolumeRestoreIamPolicy, error)

GetRestorePlanRestoreVolumeRestoreIamPolicy gets an existing RestorePlanRestoreVolumeRestoreIamPolicy resource's state with the given name, ID, and optional state properties that are used to uniquely qualify the lookup (nil if not required).

func NewRestorePlanRestoreVolumeRestoreIamPolicy

func NewRestorePlanRestoreVolumeRestoreIamPolicy(ctx *pulumi.Context,
	name string, args *RestorePlanRestoreVolumeRestoreIamPolicyArgs, opts ...pulumi.ResourceOption) (*RestorePlanRestoreVolumeRestoreIamPolicy, error)

NewRestorePlanRestoreVolumeRestoreIamPolicy registers a new resource with the given unique name, arguments, and options.

func (*RestorePlanRestoreVolumeRestoreIamPolicy) ElementType

func (*RestorePlanRestoreVolumeRestoreIamPolicy) ToRestorePlanRestoreVolumeRestoreIamPolicyOutput

func (i *RestorePlanRestoreVolumeRestoreIamPolicy) ToRestorePlanRestoreVolumeRestoreIamPolicyOutput() RestorePlanRestoreVolumeRestoreIamPolicyOutput

func (*RestorePlanRestoreVolumeRestoreIamPolicy) ToRestorePlanRestoreVolumeRestoreIamPolicyOutputWithContext

func (i *RestorePlanRestoreVolumeRestoreIamPolicy) ToRestorePlanRestoreVolumeRestoreIamPolicyOutputWithContext(ctx context.Context) RestorePlanRestoreVolumeRestoreIamPolicyOutput

type RestorePlanRestoreVolumeRestoreIamPolicyArgs

type RestorePlanRestoreVolumeRestoreIamPolicyArgs struct {
	// Specifies cloud audit logging configuration for this policy.
	AuditConfigs AuditConfigArrayInput
	// Associates a list of `members`, or principals, with a `role`. Optionally, may specify a `condition` that determines how and when the `bindings` are applied. Each of the `bindings` must contain at least one principal. The `bindings` in a `Policy` can refer to up to 1,500 principals; up to 250 of these principals can be Google groups. Each occurrence of a principal counts towards these limits. For example, if the `bindings` grant 50 different roles to `user:alice@example.com`, and not to any other principal, then you can add another 1,450 principals to the `bindings` in the `Policy`.
	Bindings BindingArrayInput
	// `etag` is used for optimistic concurrency control as a way to help prevent simultaneous updates of a policy from overwriting each other. It is strongly suggested that systems make use of the `etag` in the read-modify-write cycle to perform policy updates in order to avoid race conditions: An `etag` is returned in the response to `getIamPolicy`, and systems are expected to put that etag in the request to `setIamPolicy` to ensure that their change will be applied to the same version of the policy. **Important:** If you use IAM Conditions, you must include the `etag` field whenever you call `setIamPolicy`. If you omit this field, then IAM allows you to overwrite a version `3` policy with a version `1` policy, and all of the conditions in the version `3` policy are lost.
	Etag          pulumi.StringPtrInput
	Location      pulumi.StringPtrInput
	Project       pulumi.StringPtrInput
	RestoreId     pulumi.StringInput
	RestorePlanId pulumi.StringInput
	// OPTIONAL: A FieldMask specifying which fields of the policy to modify. Only the fields in the mask will be modified. If no mask is provided, the following default mask is used: `paths: "bindings, etag"`
	UpdateMask pulumi.StringPtrInput
	// Specifies the format of the policy. Valid values are `0`, `1`, and `3`. Requests that specify an invalid value are rejected. Any operation that affects conditional role bindings must specify version `3`. This requirement applies to the following operations: * Getting a policy that includes a conditional role binding * Adding a conditional role binding to a policy * Changing a conditional role binding in a policy * Removing any role binding, with or without a condition, from a policy that includes conditions **Important:** If you use IAM Conditions, you must include the `etag` field whenever you call `setIamPolicy`. If you omit this field, then IAM allows you to overwrite a version `3` policy with a version `1` policy, and all of the conditions in the version `3` policy are lost. If a policy does not include any conditions, operations on that policy may specify any valid version or leave the field unset. To learn which resources support conditions in their IAM policies, see the [IAM documentation](https://cloud.google.com/iam/help/conditions/resource-policies).
	Version         pulumi.IntPtrInput
	VolumeRestoreId pulumi.StringInput
}

The set of arguments for constructing a RestorePlanRestoreVolumeRestoreIamPolicy resource.

func (RestorePlanRestoreVolumeRestoreIamPolicyArgs) ElementType

type RestorePlanRestoreVolumeRestoreIamPolicyInput

type RestorePlanRestoreVolumeRestoreIamPolicyInput interface {
	pulumi.Input

	ToRestorePlanRestoreVolumeRestoreIamPolicyOutput() RestorePlanRestoreVolumeRestoreIamPolicyOutput
	ToRestorePlanRestoreVolumeRestoreIamPolicyOutputWithContext(ctx context.Context) RestorePlanRestoreVolumeRestoreIamPolicyOutput
}

type RestorePlanRestoreVolumeRestoreIamPolicyOutput

type RestorePlanRestoreVolumeRestoreIamPolicyOutput struct{ *pulumi.OutputState }

func (RestorePlanRestoreVolumeRestoreIamPolicyOutput) AuditConfigs added in v0.19.0

Specifies cloud audit logging configuration for this policy.

func (RestorePlanRestoreVolumeRestoreIamPolicyOutput) Bindings added in v0.19.0

Associates a list of `members`, or principals, with a `role`. Optionally, may specify a `condition` that determines how and when the `bindings` are applied. Each of the `bindings` must contain at least one principal. The `bindings` in a `Policy` can refer to up to 1,500 principals; up to 250 of these principals can be Google groups. Each occurrence of a principal counts towards these limits. For example, if the `bindings` grant 50 different roles to `user:alice@example.com`, and not to any other principal, then you can add another 1,450 principals to the `bindings` in the `Policy`.

func (RestorePlanRestoreVolumeRestoreIamPolicyOutput) ElementType

func (RestorePlanRestoreVolumeRestoreIamPolicyOutput) Etag added in v0.19.0

`etag` is used for optimistic concurrency control as a way to help prevent simultaneous updates of a policy from overwriting each other. It is strongly suggested that systems make use of the `etag` in the read-modify-write cycle to perform policy updates in order to avoid race conditions: An `etag` is returned in the response to `getIamPolicy`, and systems are expected to put that etag in the request to `setIamPolicy` to ensure that their change will be applied to the same version of the policy. **Important:** If you use IAM Conditions, you must include the `etag` field whenever you call `setIamPolicy`. If you omit this field, then IAM allows you to overwrite a version `3` policy with a version `1` policy, and all of the conditions in the version `3` policy are lost.

func (RestorePlanRestoreVolumeRestoreIamPolicyOutput) Location added in v0.21.0

func (RestorePlanRestoreVolumeRestoreIamPolicyOutput) Project added in v0.21.0

func (RestorePlanRestoreVolumeRestoreIamPolicyOutput) RestoreId added in v0.21.0

func (RestorePlanRestoreVolumeRestoreIamPolicyOutput) RestorePlanId added in v0.21.0

func (RestorePlanRestoreVolumeRestoreIamPolicyOutput) ToRestorePlanRestoreVolumeRestoreIamPolicyOutput

func (o RestorePlanRestoreVolumeRestoreIamPolicyOutput) ToRestorePlanRestoreVolumeRestoreIamPolicyOutput() RestorePlanRestoreVolumeRestoreIamPolicyOutput

func (RestorePlanRestoreVolumeRestoreIamPolicyOutput) ToRestorePlanRestoreVolumeRestoreIamPolicyOutputWithContext

func (o RestorePlanRestoreVolumeRestoreIamPolicyOutput) ToRestorePlanRestoreVolumeRestoreIamPolicyOutputWithContext(ctx context.Context) RestorePlanRestoreVolumeRestoreIamPolicyOutput

func (RestorePlanRestoreVolumeRestoreIamPolicyOutput) Version added in v0.19.0

Specifies the format of the policy. Valid values are `0`, `1`, and `3`. Requests that specify an invalid value are rejected. Any operation that affects conditional role bindings must specify version `3`. This requirement applies to the following operations: * Getting a policy that includes a conditional role binding * Adding a conditional role binding to a policy * Changing a conditional role binding in a policy * Removing any role binding, with or without a condition, from a policy that includes conditions **Important:** If you use IAM Conditions, you must include the `etag` field whenever you call `setIamPolicy`. If you omit this field, then IAM allows you to overwrite a version `3` policy with a version `1` policy, and all of the conditions in the version `3` policy are lost. If a policy does not include any conditions, operations on that policy may specify any valid version or leave the field unset. To learn which resources support conditions in their IAM policies, see the [IAM documentation](https://cloud.google.com/iam/help/conditions/resource-policies).

func (RestorePlanRestoreVolumeRestoreIamPolicyOutput) VolumeRestoreId added in v0.21.0

type RestorePlanRestoreVolumeRestoreIamPolicyState

type RestorePlanRestoreVolumeRestoreIamPolicyState struct {
}

func (RestorePlanRestoreVolumeRestoreIamPolicyState) ElementType

type RestorePlanState

type RestorePlanState struct {
}

func (RestorePlanState) ElementType

func (RestorePlanState) ElementType() reflect.Type

type RestoreState

type RestoreState struct {
}

func (RestoreState) ElementType

func (RestoreState) ElementType() reflect.Type

type RetentionPolicy

type RetentionPolicy struct {
	// Optional. Minimum age for Backups created via this BackupPlan (in days). This field MUST be an integer value between 0-90 (inclusive). A Backup created under this BackupPlan will NOT be deletable until it reaches Backup's (create_time + backup_delete_lock_days). Updating this field of a BackupPlan does NOT affect existing Backups under it. Backups created AFTER a successful update will inherit the new value. Default: 0 (no delete blocking)
	BackupDeleteLockDays *int `pulumi:"backupDeleteLockDays"`
	// Optional. The default maximum age of a Backup created via this BackupPlan. This field MUST be an integer value >= 0 and <= 365. If specified, a Backup created under this BackupPlan will be automatically deleted after its age reaches (create_time + backup_retain_days). If not specified, Backups created under this BackupPlan will NOT be subject to automatic deletion. Updating this field does NOT affect existing Backups under it. Backups created AFTER a successful update will automatically pick up the new value. NOTE: backup_retain_days must be >= backup_delete_lock_days. If cron_schedule is defined, then this must be <= 360 * the creation interval. If rpo_config is defined, then this must be <= 360 * target_rpo_minutes / (1440minutes/day). Default: 0 (no automatic deletion)
	BackupRetainDays *int `pulumi:"backupRetainDays"`
	// Optional. This flag denotes whether the retention policy of this BackupPlan is locked. If set to True, no further update is allowed on this policy, including the `locked` field itself. Default: False
	Locked *bool `pulumi:"locked"`
}

RetentionPolicy defines a Backup retention policy for a BackupPlan.

type RetentionPolicyArgs

type RetentionPolicyArgs struct {
	// Optional. Minimum age for Backups created via this BackupPlan (in days). This field MUST be an integer value between 0-90 (inclusive). A Backup created under this BackupPlan will NOT be deletable until it reaches Backup's (create_time + backup_delete_lock_days). Updating this field of a BackupPlan does NOT affect existing Backups under it. Backups created AFTER a successful update will inherit the new value. Default: 0 (no delete blocking)
	BackupDeleteLockDays pulumi.IntPtrInput `pulumi:"backupDeleteLockDays"`
	// Optional. The default maximum age of a Backup created via this BackupPlan. This field MUST be an integer value >= 0 and <= 365. If specified, a Backup created under this BackupPlan will be automatically deleted after its age reaches (create_time + backup_retain_days). If not specified, Backups created under this BackupPlan will NOT be subject to automatic deletion. Updating this field does NOT affect existing Backups under it. Backups created AFTER a successful update will automatically pick up the new value. NOTE: backup_retain_days must be >= backup_delete_lock_days. If cron_schedule is defined, then this must be <= 360 * the creation interval. If rpo_config is defined, then this must be <= 360 * target_rpo_minutes / (1440minutes/day). Default: 0 (no automatic deletion)
	BackupRetainDays pulumi.IntPtrInput `pulumi:"backupRetainDays"`
	// Optional. This flag denotes whether the retention policy of this BackupPlan is locked. If set to True, no further update is allowed on this policy, including the `locked` field itself. Default: False
	Locked pulumi.BoolPtrInput `pulumi:"locked"`
}

RetentionPolicy defines a Backup retention policy for a BackupPlan.

func (RetentionPolicyArgs) ElementType

func (RetentionPolicyArgs) ElementType() reflect.Type

func (RetentionPolicyArgs) ToRetentionPolicyOutput

func (i RetentionPolicyArgs) ToRetentionPolicyOutput() RetentionPolicyOutput

func (RetentionPolicyArgs) ToRetentionPolicyOutputWithContext

func (i RetentionPolicyArgs) ToRetentionPolicyOutputWithContext(ctx context.Context) RetentionPolicyOutput

func (RetentionPolicyArgs) ToRetentionPolicyPtrOutput

func (i RetentionPolicyArgs) ToRetentionPolicyPtrOutput() RetentionPolicyPtrOutput

func (RetentionPolicyArgs) ToRetentionPolicyPtrOutputWithContext

func (i RetentionPolicyArgs) ToRetentionPolicyPtrOutputWithContext(ctx context.Context) RetentionPolicyPtrOutput

type RetentionPolicyInput

type RetentionPolicyInput interface {
	pulumi.Input

	ToRetentionPolicyOutput() RetentionPolicyOutput
	ToRetentionPolicyOutputWithContext(context.Context) RetentionPolicyOutput
}

RetentionPolicyInput is an input type that accepts RetentionPolicyArgs and RetentionPolicyOutput values. You can construct a concrete instance of `RetentionPolicyInput` via:

RetentionPolicyArgs{...}

type RetentionPolicyOutput

type RetentionPolicyOutput struct{ *pulumi.OutputState }

RetentionPolicy defines a Backup retention policy for a BackupPlan.

func (RetentionPolicyOutput) BackupDeleteLockDays

func (o RetentionPolicyOutput) BackupDeleteLockDays() pulumi.IntPtrOutput

Optional. Minimum age for Backups created via this BackupPlan (in days). This field MUST be an integer value between 0-90 (inclusive). A Backup created under this BackupPlan will NOT be deletable until it reaches Backup's (create_time + backup_delete_lock_days). Updating this field of a BackupPlan does NOT affect existing Backups under it. Backups created AFTER a successful update will inherit the new value. Default: 0 (no delete blocking)

func (RetentionPolicyOutput) BackupRetainDays

func (o RetentionPolicyOutput) BackupRetainDays() pulumi.IntPtrOutput

Optional. The default maximum age of a Backup created via this BackupPlan. This field MUST be an integer value >= 0 and <= 365. If specified, a Backup created under this BackupPlan will be automatically deleted after its age reaches (create_time + backup_retain_days). If not specified, Backups created under this BackupPlan will NOT be subject to automatic deletion. Updating this field does NOT affect existing Backups under it. Backups created AFTER a successful update will automatically pick up the new value. NOTE: backup_retain_days must be >= backup_delete_lock_days. If cron_schedule is defined, then this must be <= 360 * the creation interval. If rpo_config is defined, then this must be <= 360 * target_rpo_minutes / (1440minutes/day). Default: 0 (no automatic deletion)

func (RetentionPolicyOutput) ElementType

func (RetentionPolicyOutput) ElementType() reflect.Type

func (RetentionPolicyOutput) Locked

Optional. This flag denotes whether the retention policy of this BackupPlan is locked. If set to True, no further update is allowed on this policy, including the `locked` field itself. Default: False

func (RetentionPolicyOutput) ToRetentionPolicyOutput

func (o RetentionPolicyOutput) ToRetentionPolicyOutput() RetentionPolicyOutput

func (RetentionPolicyOutput) ToRetentionPolicyOutputWithContext

func (o RetentionPolicyOutput) ToRetentionPolicyOutputWithContext(ctx context.Context) RetentionPolicyOutput

func (RetentionPolicyOutput) ToRetentionPolicyPtrOutput

func (o RetentionPolicyOutput) ToRetentionPolicyPtrOutput() RetentionPolicyPtrOutput

func (RetentionPolicyOutput) ToRetentionPolicyPtrOutputWithContext

func (o RetentionPolicyOutput) ToRetentionPolicyPtrOutputWithContext(ctx context.Context) RetentionPolicyPtrOutput

type RetentionPolicyPtrInput

type RetentionPolicyPtrInput interface {
	pulumi.Input

	ToRetentionPolicyPtrOutput() RetentionPolicyPtrOutput
	ToRetentionPolicyPtrOutputWithContext(context.Context) RetentionPolicyPtrOutput
}

RetentionPolicyPtrInput is an input type that accepts RetentionPolicyArgs, RetentionPolicyPtr and RetentionPolicyPtrOutput values. You can construct a concrete instance of `RetentionPolicyPtrInput` via:

        RetentionPolicyArgs{...}

or:

        nil

type RetentionPolicyPtrOutput

type RetentionPolicyPtrOutput struct{ *pulumi.OutputState }

func (RetentionPolicyPtrOutput) BackupDeleteLockDays

func (o RetentionPolicyPtrOutput) BackupDeleteLockDays() pulumi.IntPtrOutput

Optional. Minimum age for Backups created via this BackupPlan (in days). This field MUST be an integer value between 0-90 (inclusive). A Backup created under this BackupPlan will NOT be deletable until it reaches Backup's (create_time + backup_delete_lock_days). Updating this field of a BackupPlan does NOT affect existing Backups under it. Backups created AFTER a successful update will inherit the new value. Default: 0 (no delete blocking)

func (RetentionPolicyPtrOutput) BackupRetainDays

func (o RetentionPolicyPtrOutput) BackupRetainDays() pulumi.IntPtrOutput

Optional. The default maximum age of a Backup created via this BackupPlan. This field MUST be an integer value >= 0 and <= 365. If specified, a Backup created under this BackupPlan will be automatically deleted after its age reaches (create_time + backup_retain_days). If not specified, Backups created under this BackupPlan will NOT be subject to automatic deletion. Updating this field does NOT affect existing Backups under it. Backups created AFTER a successful update will automatically pick up the new value. NOTE: backup_retain_days must be >= backup_delete_lock_days. If cron_schedule is defined, then this must be <= 360 * the creation interval. If rpo_config is defined, then this must be <= 360 * target_rpo_minutes / (1440minutes/day). Default: 0 (no automatic deletion)

func (RetentionPolicyPtrOutput) Elem

func (RetentionPolicyPtrOutput) ElementType

func (RetentionPolicyPtrOutput) ElementType() reflect.Type

func (RetentionPolicyPtrOutput) Locked

Optional. This flag denotes whether the retention policy of this BackupPlan is locked. If set to True, no further update is allowed on this policy, including the `locked` field itself. Default: False

func (RetentionPolicyPtrOutput) ToRetentionPolicyPtrOutput

func (o RetentionPolicyPtrOutput) ToRetentionPolicyPtrOutput() RetentionPolicyPtrOutput

func (RetentionPolicyPtrOutput) ToRetentionPolicyPtrOutputWithContext

func (o RetentionPolicyPtrOutput) ToRetentionPolicyPtrOutputWithContext(ctx context.Context) RetentionPolicyPtrOutput

type RetentionPolicyResponse

type RetentionPolicyResponse struct {
	// Optional. Minimum age for Backups created via this BackupPlan (in days). This field MUST be an integer value between 0-90 (inclusive). A Backup created under this BackupPlan will NOT be deletable until it reaches Backup's (create_time + backup_delete_lock_days). Updating this field of a BackupPlan does NOT affect existing Backups under it. Backups created AFTER a successful update will inherit the new value. Default: 0 (no delete blocking)
	BackupDeleteLockDays int `pulumi:"backupDeleteLockDays"`
	// Optional. The default maximum age of a Backup created via this BackupPlan. This field MUST be an integer value >= 0 and <= 365. If specified, a Backup created under this BackupPlan will be automatically deleted after its age reaches (create_time + backup_retain_days). If not specified, Backups created under this BackupPlan will NOT be subject to automatic deletion. Updating this field does NOT affect existing Backups under it. Backups created AFTER a successful update will automatically pick up the new value. NOTE: backup_retain_days must be >= backup_delete_lock_days. If cron_schedule is defined, then this must be <= 360 * the creation interval. If rpo_config is defined, then this must be <= 360 * target_rpo_minutes / (1440minutes/day). Default: 0 (no automatic deletion)
	BackupRetainDays int `pulumi:"backupRetainDays"`
	// Optional. This flag denotes whether the retention policy of this BackupPlan is locked. If set to True, no further update is allowed on this policy, including the `locked` field itself. Default: False
	Locked bool `pulumi:"locked"`
}

RetentionPolicy defines a Backup retention policy for a BackupPlan.

type RetentionPolicyResponseOutput

type RetentionPolicyResponseOutput struct{ *pulumi.OutputState }

RetentionPolicy defines a Backup retention policy for a BackupPlan.

func (RetentionPolicyResponseOutput) BackupDeleteLockDays

func (o RetentionPolicyResponseOutput) BackupDeleteLockDays() pulumi.IntOutput

Optional. Minimum age for Backups created via this BackupPlan (in days). This field MUST be an integer value between 0-90 (inclusive). A Backup created under this BackupPlan will NOT be deletable until it reaches Backup's (create_time + backup_delete_lock_days). Updating this field of a BackupPlan does NOT affect existing Backups under it. Backups created AFTER a successful update will inherit the new value. Default: 0 (no delete blocking)

func (RetentionPolicyResponseOutput) BackupRetainDays

func (o RetentionPolicyResponseOutput) BackupRetainDays() pulumi.IntOutput

Optional. The default maximum age of a Backup created via this BackupPlan. This field MUST be an integer value >= 0 and <= 365. If specified, a Backup created under this BackupPlan will be automatically deleted after its age reaches (create_time + backup_retain_days). If not specified, Backups created under this BackupPlan will NOT be subject to automatic deletion. Updating this field does NOT affect existing Backups under it. Backups created AFTER a successful update will automatically pick up the new value. NOTE: backup_retain_days must be >= backup_delete_lock_days. If cron_schedule is defined, then this must be <= 360 * the creation interval. If rpo_config is defined, then this must be <= 360 * target_rpo_minutes / (1440minutes/day). Default: 0 (no automatic deletion)

func (RetentionPolicyResponseOutput) ElementType

func (RetentionPolicyResponseOutput) Locked

Optional. This flag denotes whether the retention policy of this BackupPlan is locked. If set to True, no further update is allowed on this policy, including the `locked` field itself. Default: False

func (RetentionPolicyResponseOutput) ToRetentionPolicyResponseOutput

func (o RetentionPolicyResponseOutput) ToRetentionPolicyResponseOutput() RetentionPolicyResponseOutput

func (RetentionPolicyResponseOutput) ToRetentionPolicyResponseOutputWithContext

func (o RetentionPolicyResponseOutput) ToRetentionPolicyResponseOutputWithContext(ctx context.Context) RetentionPolicyResponseOutput

type Schedule

type Schedule struct {
	// Optional. A standard [cron](https://wikipedia.com/wiki/cron) string that defines a repeating schedule for creating Backups via this BackupPlan. This is mutually exclusive with the rpo_config field since at most one schedule can be defined for a BackupPlan. If this is defined, then backup_retain_days must also be defined. Default (empty): no automatic backup creation will occur.
	CronSchedule *string `pulumi:"cronSchedule"`
	// Optional. This flag denotes whether automatic Backup creation is paused for this BackupPlan. Default: False
	Paused *bool `pulumi:"paused"`
}

Defines scheduling parameters for automatically creating Backups via this BackupPlan.

type ScheduleArgs

type ScheduleArgs struct {
	// Optional. A standard [cron](https://wikipedia.com/wiki/cron) string that defines a repeating schedule for creating Backups via this BackupPlan. This is mutually exclusive with the rpo_config field since at most one schedule can be defined for a BackupPlan. If this is defined, then backup_retain_days must also be defined. Default (empty): no automatic backup creation will occur.
	CronSchedule pulumi.StringPtrInput `pulumi:"cronSchedule"`
	// Optional. This flag denotes whether automatic Backup creation is paused for this BackupPlan. Default: False
	Paused pulumi.BoolPtrInput `pulumi:"paused"`
}

Defines scheduling parameters for automatically creating Backups via this BackupPlan.

func (ScheduleArgs) ElementType

func (ScheduleArgs) ElementType() reflect.Type

func (ScheduleArgs) ToScheduleOutput

func (i ScheduleArgs) ToScheduleOutput() ScheduleOutput

func (ScheduleArgs) ToScheduleOutputWithContext

func (i ScheduleArgs) ToScheduleOutputWithContext(ctx context.Context) ScheduleOutput

func (ScheduleArgs) ToSchedulePtrOutput

func (i ScheduleArgs) ToSchedulePtrOutput() SchedulePtrOutput

func (ScheduleArgs) ToSchedulePtrOutputWithContext

func (i ScheduleArgs) ToSchedulePtrOutputWithContext(ctx context.Context) SchedulePtrOutput

type ScheduleInput

type ScheduleInput interface {
	pulumi.Input

	ToScheduleOutput() ScheduleOutput
	ToScheduleOutputWithContext(context.Context) ScheduleOutput
}

ScheduleInput is an input type that accepts ScheduleArgs and ScheduleOutput values. You can construct a concrete instance of `ScheduleInput` via:

ScheduleArgs{...}

type ScheduleOutput

type ScheduleOutput struct{ *pulumi.OutputState }

Defines scheduling parameters for automatically creating Backups via this BackupPlan.

func (ScheduleOutput) CronSchedule

func (o ScheduleOutput) CronSchedule() pulumi.StringPtrOutput

Optional. A standard [cron](https://wikipedia.com/wiki/cron) string that defines a repeating schedule for creating Backups via this BackupPlan. This is mutually exclusive with the rpo_config field since at most one schedule can be defined for a BackupPlan. If this is defined, then backup_retain_days must also be defined. Default (empty): no automatic backup creation will occur.

func (ScheduleOutput) ElementType

func (ScheduleOutput) ElementType() reflect.Type

func (ScheduleOutput) Paused

func (o ScheduleOutput) Paused() pulumi.BoolPtrOutput

Optional. This flag denotes whether automatic Backup creation is paused for this BackupPlan. Default: False

func (ScheduleOutput) ToScheduleOutput

func (o ScheduleOutput) ToScheduleOutput() ScheduleOutput

func (ScheduleOutput) ToScheduleOutputWithContext

func (o ScheduleOutput) ToScheduleOutputWithContext(ctx context.Context) ScheduleOutput

func (ScheduleOutput) ToSchedulePtrOutput

func (o ScheduleOutput) ToSchedulePtrOutput() SchedulePtrOutput

func (ScheduleOutput) ToSchedulePtrOutputWithContext

func (o ScheduleOutput) ToSchedulePtrOutputWithContext(ctx context.Context) SchedulePtrOutput

type SchedulePtrInput

type SchedulePtrInput interface {
	pulumi.Input

	ToSchedulePtrOutput() SchedulePtrOutput
	ToSchedulePtrOutputWithContext(context.Context) SchedulePtrOutput
}

SchedulePtrInput is an input type that accepts ScheduleArgs, SchedulePtr and SchedulePtrOutput values. You can construct a concrete instance of `SchedulePtrInput` via:

        ScheduleArgs{...}

or:

        nil

func SchedulePtr

func SchedulePtr(v *ScheduleArgs) SchedulePtrInput

type SchedulePtrOutput

type SchedulePtrOutput struct{ *pulumi.OutputState }

func (SchedulePtrOutput) CronSchedule

func (o SchedulePtrOutput) CronSchedule() pulumi.StringPtrOutput

Optional. A standard [cron](https://wikipedia.com/wiki/cron) string that defines a repeating schedule for creating Backups via this BackupPlan. This is mutually exclusive with the rpo_config field since at most one schedule can be defined for a BackupPlan. If this is defined, then backup_retain_days must also be defined. Default (empty): no automatic backup creation will occur.

func (SchedulePtrOutput) Elem

func (SchedulePtrOutput) ElementType

func (SchedulePtrOutput) ElementType() reflect.Type

func (SchedulePtrOutput) Paused

Optional. This flag denotes whether automatic Backup creation is paused for this BackupPlan. Default: False

func (SchedulePtrOutput) ToSchedulePtrOutput

func (o SchedulePtrOutput) ToSchedulePtrOutput() SchedulePtrOutput

func (SchedulePtrOutput) ToSchedulePtrOutputWithContext

func (o SchedulePtrOutput) ToSchedulePtrOutputWithContext(ctx context.Context) SchedulePtrOutput

type ScheduleResponse

type ScheduleResponse struct {
	// Optional. A standard [cron](https://wikipedia.com/wiki/cron) string that defines a repeating schedule for creating Backups via this BackupPlan. This is mutually exclusive with the rpo_config field since at most one schedule can be defined for a BackupPlan. If this is defined, then backup_retain_days must also be defined. Default (empty): no automatic backup creation will occur.
	CronSchedule string `pulumi:"cronSchedule"`
	// Optional. This flag denotes whether automatic Backup creation is paused for this BackupPlan. Default: False
	Paused bool `pulumi:"paused"`
}

Defines scheduling parameters for automatically creating Backups via this BackupPlan.

type ScheduleResponseOutput

type ScheduleResponseOutput struct{ *pulumi.OutputState }

Defines scheduling parameters for automatically creating Backups via this BackupPlan.

func (ScheduleResponseOutput) CronSchedule

func (o ScheduleResponseOutput) CronSchedule() pulumi.StringOutput

Optional. A standard [cron](https://wikipedia.com/wiki/cron) string that defines a repeating schedule for creating Backups via this BackupPlan. This is mutually exclusive with the rpo_config field since at most one schedule can be defined for a BackupPlan. If this is defined, then backup_retain_days must also be defined. Default (empty): no automatic backup creation will occur.

func (ScheduleResponseOutput) ElementType

func (ScheduleResponseOutput) ElementType() reflect.Type

func (ScheduleResponseOutput) Paused

Optional. This flag denotes whether automatic Backup creation is paused for this BackupPlan. Default: False

func (ScheduleResponseOutput) ToScheduleResponseOutput

func (o ScheduleResponseOutput) ToScheduleResponseOutput() ScheduleResponseOutput

func (ScheduleResponseOutput) ToScheduleResponseOutputWithContext

func (o ScheduleResponseOutput) ToScheduleResponseOutputWithContext(ctx context.Context) ScheduleResponseOutput

type SubstitutionRule

type SubstitutionRule struct {
	// Optional. This is the new value to set for any fields that pass the filtering and selection criteria. To remove a value from a Kubernetes resource, either leave this field unspecified, or set it to the empty string ("").
	NewValue *string `pulumi:"newValue"`
	// Optional. (Filtering parameter) This is a [regular expression] (https://en.wikipedia.org/wiki/Regular_expression) that is compared against the fields matched by the target_json_path expression (and must also have passed the previous filters). Substitution will not be performed against fields whose value does not match this expression. If this field is NOT specified, then ALL fields matched by the target_json_path expression will undergo substitution. Note that an empty (e.g., "", rather than unspecified) value for this field will only match empty fields.
	OriginalValuePattern *string `pulumi:"originalValuePattern"`
	// Optional. (Filtering parameter) Any resource subject to substitution must belong to one of the listed "types". If this field is not provided, no type filtering will be performed (all resources of all types matching previous filtering parameters will be candidates for substitution).
	TargetGroupKinds []GroupKind `pulumi:"targetGroupKinds"`
	// This is a [JSONPath] (https://kubernetes.io/docs/reference/kubectl/jsonpath/) expression that matches specific fields of candidate resources and it operates as both a filtering parameter (resources that are not matched with this expression will not be candidates for substitution) as well as a field identifier (identifies exactly which fields out of the candidate resources will be modified).
	TargetJsonPath string `pulumi:"targetJsonPath"`
	// Optional. (Filtering parameter) Any resource subject to substitution must be contained within one of the listed Kubernetes Namespace in the Backup. If this field is not provided, no namespace filtering will be performed (all resources in all Namespaces, including all cluster-scoped resources, will be candidates for substitution). To mix cluster-scoped and namespaced resources in the same rule, use an empty string ("") as one of the target namespaces.
	TargetNamespaces []string `pulumi:"targetNamespaces"`
}

A transformation rule to be applied against Kubernetes resources as they are selected for restoration from a Backup. A rule contains both filtering logic (which resources are subject to substitution) and substitution logic.

type SubstitutionRuleArgs

type SubstitutionRuleArgs struct {
	// Optional. This is the new value to set for any fields that pass the filtering and selection criteria. To remove a value from a Kubernetes resource, either leave this field unspecified, or set it to the empty string ("").
	NewValue pulumi.StringPtrInput `pulumi:"newValue"`
	// Optional. (Filtering parameter) This is a [regular expression] (https://en.wikipedia.org/wiki/Regular_expression) that is compared against the fields matched by the target_json_path expression (and must also have passed the previous filters). Substitution will not be performed against fields whose value does not match this expression. If this field is NOT specified, then ALL fields matched by the target_json_path expression will undergo substitution. Note that an empty (e.g., "", rather than unspecified) value for this field will only match empty fields.
	OriginalValuePattern pulumi.StringPtrInput `pulumi:"originalValuePattern"`
	// Optional. (Filtering parameter) Any resource subject to substitution must belong to one of the listed "types". If this field is not provided, no type filtering will be performed (all resources of all types matching previous filtering parameters will be candidates for substitution).
	TargetGroupKinds GroupKindArrayInput `pulumi:"targetGroupKinds"`
	// This is a [JSONPath] (https://kubernetes.io/docs/reference/kubectl/jsonpath/) expression that matches specific fields of candidate resources and it operates as both a filtering parameter (resources that are not matched with this expression will not be candidates for substitution) as well as a field identifier (identifies exactly which fields out of the candidate resources will be modified).
	TargetJsonPath pulumi.StringInput `pulumi:"targetJsonPath"`
	// Optional. (Filtering parameter) Any resource subject to substitution must be contained within one of the listed Kubernetes Namespace in the Backup. If this field is not provided, no namespace filtering will be performed (all resources in all Namespaces, including all cluster-scoped resources, will be candidates for substitution). To mix cluster-scoped and namespaced resources in the same rule, use an empty string ("") as one of the target namespaces.
	TargetNamespaces pulumi.StringArrayInput `pulumi:"targetNamespaces"`
}

A transformation rule to be applied against Kubernetes resources as they are selected for restoration from a Backup. A rule contains both filtering logic (which resources are subject to substitution) and substitution logic.

func (SubstitutionRuleArgs) ElementType

func (SubstitutionRuleArgs) ElementType() reflect.Type

func (SubstitutionRuleArgs) ToSubstitutionRuleOutput

func (i SubstitutionRuleArgs) ToSubstitutionRuleOutput() SubstitutionRuleOutput

func (SubstitutionRuleArgs) ToSubstitutionRuleOutputWithContext

func (i SubstitutionRuleArgs) ToSubstitutionRuleOutputWithContext(ctx context.Context) SubstitutionRuleOutput

type SubstitutionRuleArray

type SubstitutionRuleArray []SubstitutionRuleInput

func (SubstitutionRuleArray) ElementType

func (SubstitutionRuleArray) ElementType() reflect.Type

func (SubstitutionRuleArray) ToSubstitutionRuleArrayOutput

func (i SubstitutionRuleArray) ToSubstitutionRuleArrayOutput() SubstitutionRuleArrayOutput

func (SubstitutionRuleArray) ToSubstitutionRuleArrayOutputWithContext

func (i SubstitutionRuleArray) ToSubstitutionRuleArrayOutputWithContext(ctx context.Context) SubstitutionRuleArrayOutput

type SubstitutionRuleArrayInput

type SubstitutionRuleArrayInput interface {
	pulumi.Input

	ToSubstitutionRuleArrayOutput() SubstitutionRuleArrayOutput
	ToSubstitutionRuleArrayOutputWithContext(context.Context) SubstitutionRuleArrayOutput
}

SubstitutionRuleArrayInput is an input type that accepts SubstitutionRuleArray and SubstitutionRuleArrayOutput values. You can construct a concrete instance of `SubstitutionRuleArrayInput` via:

SubstitutionRuleArray{ SubstitutionRuleArgs{...} }

type SubstitutionRuleArrayOutput

type SubstitutionRuleArrayOutput struct{ *pulumi.OutputState }

func (SubstitutionRuleArrayOutput) ElementType

func (SubstitutionRuleArrayOutput) Index

func (SubstitutionRuleArrayOutput) ToSubstitutionRuleArrayOutput

func (o SubstitutionRuleArrayOutput) ToSubstitutionRuleArrayOutput() SubstitutionRuleArrayOutput

func (SubstitutionRuleArrayOutput) ToSubstitutionRuleArrayOutputWithContext

func (o SubstitutionRuleArrayOutput) ToSubstitutionRuleArrayOutputWithContext(ctx context.Context) SubstitutionRuleArrayOutput

type SubstitutionRuleInput

type SubstitutionRuleInput interface {
	pulumi.Input

	ToSubstitutionRuleOutput() SubstitutionRuleOutput
	ToSubstitutionRuleOutputWithContext(context.Context) SubstitutionRuleOutput
}

SubstitutionRuleInput is an input type that accepts SubstitutionRuleArgs and SubstitutionRuleOutput values. You can construct a concrete instance of `SubstitutionRuleInput` via:

SubstitutionRuleArgs{...}

type SubstitutionRuleOutput

type SubstitutionRuleOutput struct{ *pulumi.OutputState }

A transformation rule to be applied against Kubernetes resources as they are selected for restoration from a Backup. A rule contains both filtering logic (which resources are subject to substitution) and substitution logic.

func (SubstitutionRuleOutput) ElementType

func (SubstitutionRuleOutput) ElementType() reflect.Type

func (SubstitutionRuleOutput) NewValue

Optional. This is the new value to set for any fields that pass the filtering and selection criteria. To remove a value from a Kubernetes resource, either leave this field unspecified, or set it to the empty string ("").

func (SubstitutionRuleOutput) OriginalValuePattern

func (o SubstitutionRuleOutput) OriginalValuePattern() pulumi.StringPtrOutput

Optional. (Filtering parameter) This is a [regular expression] (https://en.wikipedia.org/wiki/Regular_expression) that is compared against the fields matched by the target_json_path expression (and must also have passed the previous filters). Substitution will not be performed against fields whose value does not match this expression. If this field is NOT specified, then ALL fields matched by the target_json_path expression will undergo substitution. Note that an empty (e.g., "", rather than unspecified) value for this field will only match empty fields.

func (SubstitutionRuleOutput) TargetGroupKinds

func (o SubstitutionRuleOutput) TargetGroupKinds() GroupKindArrayOutput

Optional. (Filtering parameter) Any resource subject to substitution must belong to one of the listed "types". If this field is not provided, no type filtering will be performed (all resources of all types matching previous filtering parameters will be candidates for substitution).

func (SubstitutionRuleOutput) TargetJsonPath

func (o SubstitutionRuleOutput) TargetJsonPath() pulumi.StringOutput

This is a [JSONPath] (https://kubernetes.io/docs/reference/kubectl/jsonpath/) expression that matches specific fields of candidate resources and it operates as both a filtering parameter (resources that are not matched with this expression will not be candidates for substitution) as well as a field identifier (identifies exactly which fields out of the candidate resources will be modified).

func (SubstitutionRuleOutput) TargetNamespaces

func (o SubstitutionRuleOutput) TargetNamespaces() pulumi.StringArrayOutput

Optional. (Filtering parameter) Any resource subject to substitution must be contained within one of the listed Kubernetes Namespace in the Backup. If this field is not provided, no namespace filtering will be performed (all resources in all Namespaces, including all cluster-scoped resources, will be candidates for substitution). To mix cluster-scoped and namespaced resources in the same rule, use an empty string ("") as one of the target namespaces.

func (SubstitutionRuleOutput) ToSubstitutionRuleOutput

func (o SubstitutionRuleOutput) ToSubstitutionRuleOutput() SubstitutionRuleOutput

func (SubstitutionRuleOutput) ToSubstitutionRuleOutputWithContext

func (o SubstitutionRuleOutput) ToSubstitutionRuleOutputWithContext(ctx context.Context) SubstitutionRuleOutput

type SubstitutionRuleResponse

type SubstitutionRuleResponse struct {
	// Optional. This is the new value to set for any fields that pass the filtering and selection criteria. To remove a value from a Kubernetes resource, either leave this field unspecified, or set it to the empty string ("").
	NewValue string `pulumi:"newValue"`
	// Optional. (Filtering parameter) This is a [regular expression] (https://en.wikipedia.org/wiki/Regular_expression) that is compared against the fields matched by the target_json_path expression (and must also have passed the previous filters). Substitution will not be performed against fields whose value does not match this expression. If this field is NOT specified, then ALL fields matched by the target_json_path expression will undergo substitution. Note that an empty (e.g., "", rather than unspecified) value for this field will only match empty fields.
	OriginalValuePattern string `pulumi:"originalValuePattern"`
	// Optional. (Filtering parameter) Any resource subject to substitution must belong to one of the listed "types". If this field is not provided, no type filtering will be performed (all resources of all types matching previous filtering parameters will be candidates for substitution).
	TargetGroupKinds []GroupKindResponse `pulumi:"targetGroupKinds"`
	// This is a [JSONPath] (https://kubernetes.io/docs/reference/kubectl/jsonpath/) expression that matches specific fields of candidate resources and it operates as both a filtering parameter (resources that are not matched with this expression will not be candidates for substitution) as well as a field identifier (identifies exactly which fields out of the candidate resources will be modified).
	TargetJsonPath string `pulumi:"targetJsonPath"`
	// Optional. (Filtering parameter) Any resource subject to substitution must be contained within one of the listed Kubernetes Namespace in the Backup. If this field is not provided, no namespace filtering will be performed (all resources in all Namespaces, including all cluster-scoped resources, will be candidates for substitution). To mix cluster-scoped and namespaced resources in the same rule, use an empty string ("") as one of the target namespaces.
	TargetNamespaces []string `pulumi:"targetNamespaces"`
}

A transformation rule to be applied against Kubernetes resources as they are selected for restoration from a Backup. A rule contains both filtering logic (which resources are subject to substitution) and substitution logic.

type SubstitutionRuleResponseArrayOutput

type SubstitutionRuleResponseArrayOutput struct{ *pulumi.OutputState }

func (SubstitutionRuleResponseArrayOutput) ElementType

func (SubstitutionRuleResponseArrayOutput) Index

func (SubstitutionRuleResponseArrayOutput) ToSubstitutionRuleResponseArrayOutput

func (o SubstitutionRuleResponseArrayOutput) ToSubstitutionRuleResponseArrayOutput() SubstitutionRuleResponseArrayOutput

func (SubstitutionRuleResponseArrayOutput) ToSubstitutionRuleResponseArrayOutputWithContext

func (o SubstitutionRuleResponseArrayOutput) ToSubstitutionRuleResponseArrayOutputWithContext(ctx context.Context) SubstitutionRuleResponseArrayOutput

type SubstitutionRuleResponseOutput

type SubstitutionRuleResponseOutput struct{ *pulumi.OutputState }

A transformation rule to be applied against Kubernetes resources as they are selected for restoration from a Backup. A rule contains both filtering logic (which resources are subject to substitution) and substitution logic.

func (SubstitutionRuleResponseOutput) ElementType

func (SubstitutionRuleResponseOutput) NewValue

Optional. This is the new value to set for any fields that pass the filtering and selection criteria. To remove a value from a Kubernetes resource, either leave this field unspecified, or set it to the empty string ("").

func (SubstitutionRuleResponseOutput) OriginalValuePattern

func (o SubstitutionRuleResponseOutput) OriginalValuePattern() pulumi.StringOutput

Optional. (Filtering parameter) This is a [regular expression] (https://en.wikipedia.org/wiki/Regular_expression) that is compared against the fields matched by the target_json_path expression (and must also have passed the previous filters). Substitution will not be performed against fields whose value does not match this expression. If this field is NOT specified, then ALL fields matched by the target_json_path expression will undergo substitution. Note that an empty (e.g., "", rather than unspecified) value for this field will only match empty fields.

func (SubstitutionRuleResponseOutput) TargetGroupKinds

Optional. (Filtering parameter) Any resource subject to substitution must belong to one of the listed "types". If this field is not provided, no type filtering will be performed (all resources of all types matching previous filtering parameters will be candidates for substitution).

func (SubstitutionRuleResponseOutput) TargetJsonPath

This is a [JSONPath] (https://kubernetes.io/docs/reference/kubectl/jsonpath/) expression that matches specific fields of candidate resources and it operates as both a filtering parameter (resources that are not matched with this expression will not be candidates for substitution) as well as a field identifier (identifies exactly which fields out of the candidate resources will be modified).

func (SubstitutionRuleResponseOutput) TargetNamespaces

Optional. (Filtering parameter) Any resource subject to substitution must be contained within one of the listed Kubernetes Namespace in the Backup. If this field is not provided, no namespace filtering will be performed (all resources in all Namespaces, including all cluster-scoped resources, will be candidates for substitution). To mix cluster-scoped and namespaced resources in the same rule, use an empty string ("") as one of the target namespaces.

func (SubstitutionRuleResponseOutput) ToSubstitutionRuleResponseOutput

func (o SubstitutionRuleResponseOutput) ToSubstitutionRuleResponseOutput() SubstitutionRuleResponseOutput

func (SubstitutionRuleResponseOutput) ToSubstitutionRuleResponseOutputWithContext

func (o SubstitutionRuleResponseOutput) ToSubstitutionRuleResponseOutputWithContext(ctx context.Context) SubstitutionRuleResponseOutput

type TransformationRule added in v0.32.0

type TransformationRule struct {
	// Optional. The description is a user specified string description of the transformation rule.
	Description *string `pulumi:"description"`
	// A list of transformation rule actions to take against candidate resources. Actions are executed in order defined - this order matters, as they could potentially interfere with each other and the first operation could affect the outcome of the second operation.
	FieldActions []TransformationRuleAction `pulumi:"fieldActions"`
	// Optional. This field is used to specify a set of fields that should be used to determine which resources in backup should be acted upon by the supplied transformation rule actions, and this will ensure that only specific resources are affected by transformation rule actions.
	ResourceFilter *ResourceFilter `pulumi:"resourceFilter"`
}

A transformation rule to be applied against Kubernetes resources as they are selected for restoration from a Backup. A rule contains both filtering logic (which resources are subject to transform) and transformation logic.

type TransformationRuleAction added in v0.32.0

type TransformationRuleAction struct {
	// Optional. A string containing a JSON Pointer value that references the location in the target document to move the value from.
	FromPath *string `pulumi:"fromPath"`
	// op specifies the operation to perform.
	Op TransformationRuleActionOp `pulumi:"op"`
	// Optional. A string containing a JSON-Pointer value that references a location within the target document where the operation is performed.
	Path *string `pulumi:"path"`
	// Optional. A string that specifies the desired value in string format to use for transformation.
	Value *string `pulumi:"value"`
}

TransformationRuleAction defines a TransformationRule action based on the JSON Patch RFC (https://www.rfc-editor.org/rfc/rfc6902)

type TransformationRuleActionArgs added in v0.32.0

type TransformationRuleActionArgs struct {
	// Optional. A string containing a JSON Pointer value that references the location in the target document to move the value from.
	FromPath pulumi.StringPtrInput `pulumi:"fromPath"`
	// op specifies the operation to perform.
	Op TransformationRuleActionOpInput `pulumi:"op"`
	// Optional. A string containing a JSON-Pointer value that references a location within the target document where the operation is performed.
	Path pulumi.StringPtrInput `pulumi:"path"`
	// Optional. A string that specifies the desired value in string format to use for transformation.
	Value pulumi.StringPtrInput `pulumi:"value"`
}

TransformationRuleAction defines a TransformationRule action based on the JSON Patch RFC (https://www.rfc-editor.org/rfc/rfc6902)

func (TransformationRuleActionArgs) ElementType added in v0.32.0

func (TransformationRuleActionArgs) ToTransformationRuleActionOutput added in v0.32.0

func (i TransformationRuleActionArgs) ToTransformationRuleActionOutput() TransformationRuleActionOutput

func (TransformationRuleActionArgs) ToTransformationRuleActionOutputWithContext added in v0.32.0

func (i TransformationRuleActionArgs) ToTransformationRuleActionOutputWithContext(ctx context.Context) TransformationRuleActionOutput

type TransformationRuleActionArray added in v0.32.0

type TransformationRuleActionArray []TransformationRuleActionInput

func (TransformationRuleActionArray) ElementType added in v0.32.0

func (TransformationRuleActionArray) ToTransformationRuleActionArrayOutput added in v0.32.0

func (i TransformationRuleActionArray) ToTransformationRuleActionArrayOutput() TransformationRuleActionArrayOutput

func (TransformationRuleActionArray) ToTransformationRuleActionArrayOutputWithContext added in v0.32.0

func (i TransformationRuleActionArray) ToTransformationRuleActionArrayOutputWithContext(ctx context.Context) TransformationRuleActionArrayOutput

type TransformationRuleActionArrayInput added in v0.32.0

type TransformationRuleActionArrayInput interface {
	pulumi.Input

	ToTransformationRuleActionArrayOutput() TransformationRuleActionArrayOutput
	ToTransformationRuleActionArrayOutputWithContext(context.Context) TransformationRuleActionArrayOutput
}

TransformationRuleActionArrayInput is an input type that accepts TransformationRuleActionArray and TransformationRuleActionArrayOutput values. You can construct a concrete instance of `TransformationRuleActionArrayInput` via:

TransformationRuleActionArray{ TransformationRuleActionArgs{...} }

type TransformationRuleActionArrayOutput added in v0.32.0

type TransformationRuleActionArrayOutput struct{ *pulumi.OutputState }

func (TransformationRuleActionArrayOutput) ElementType added in v0.32.0

func (TransformationRuleActionArrayOutput) Index added in v0.32.0

func (TransformationRuleActionArrayOutput) ToTransformationRuleActionArrayOutput added in v0.32.0

func (o TransformationRuleActionArrayOutput) ToTransformationRuleActionArrayOutput() TransformationRuleActionArrayOutput

func (TransformationRuleActionArrayOutput) ToTransformationRuleActionArrayOutputWithContext added in v0.32.0

func (o TransformationRuleActionArrayOutput) ToTransformationRuleActionArrayOutputWithContext(ctx context.Context) TransformationRuleActionArrayOutput

type TransformationRuleActionInput added in v0.32.0

type TransformationRuleActionInput interface {
	pulumi.Input

	ToTransformationRuleActionOutput() TransformationRuleActionOutput
	ToTransformationRuleActionOutputWithContext(context.Context) TransformationRuleActionOutput
}

TransformationRuleActionInput is an input type that accepts TransformationRuleActionArgs and TransformationRuleActionOutput values. You can construct a concrete instance of `TransformationRuleActionInput` via:

TransformationRuleActionArgs{...}

type TransformationRuleActionOp added in v0.32.0

type TransformationRuleActionOp string

Required. op specifies the operation to perform.

func (TransformationRuleActionOp) ElementType added in v0.32.0

func (TransformationRuleActionOp) ElementType() reflect.Type

func (TransformationRuleActionOp) ToStringOutput added in v0.32.0

func (e TransformationRuleActionOp) ToStringOutput() pulumi.StringOutput

func (TransformationRuleActionOp) ToStringOutputWithContext added in v0.32.0

func (e TransformationRuleActionOp) ToStringOutputWithContext(ctx context.Context) pulumi.StringOutput

func (TransformationRuleActionOp) ToStringPtrOutput added in v0.32.0

func (e TransformationRuleActionOp) ToStringPtrOutput() pulumi.StringPtrOutput

func (TransformationRuleActionOp) ToStringPtrOutputWithContext added in v0.32.0

func (e TransformationRuleActionOp) ToStringPtrOutputWithContext(ctx context.Context) pulumi.StringPtrOutput

func (TransformationRuleActionOp) ToTransformationRuleActionOpOutput added in v0.32.0

func (e TransformationRuleActionOp) ToTransformationRuleActionOpOutput() TransformationRuleActionOpOutput

func (TransformationRuleActionOp) ToTransformationRuleActionOpOutputWithContext added in v0.32.0

func (e TransformationRuleActionOp) ToTransformationRuleActionOpOutputWithContext(ctx context.Context) TransformationRuleActionOpOutput

func (TransformationRuleActionOp) ToTransformationRuleActionOpPtrOutput added in v0.32.0

func (e TransformationRuleActionOp) ToTransformationRuleActionOpPtrOutput() TransformationRuleActionOpPtrOutput

func (TransformationRuleActionOp) ToTransformationRuleActionOpPtrOutputWithContext added in v0.32.0

func (e TransformationRuleActionOp) ToTransformationRuleActionOpPtrOutputWithContext(ctx context.Context) TransformationRuleActionOpPtrOutput

type TransformationRuleActionOpInput added in v0.32.0

type TransformationRuleActionOpInput interface {
	pulumi.Input

	ToTransformationRuleActionOpOutput() TransformationRuleActionOpOutput
	ToTransformationRuleActionOpOutputWithContext(context.Context) TransformationRuleActionOpOutput
}

TransformationRuleActionOpInput is an input type that accepts TransformationRuleActionOpArgs and TransformationRuleActionOpOutput values. You can construct a concrete instance of `TransformationRuleActionOpInput` via:

TransformationRuleActionOpArgs{...}

type TransformationRuleActionOpOutput added in v0.32.0

type TransformationRuleActionOpOutput struct{ *pulumi.OutputState }

func (TransformationRuleActionOpOutput) ElementType added in v0.32.0

func (TransformationRuleActionOpOutput) ToStringOutput added in v0.32.0

func (TransformationRuleActionOpOutput) ToStringOutputWithContext added in v0.32.0

func (o TransformationRuleActionOpOutput) ToStringOutputWithContext(ctx context.Context) pulumi.StringOutput

func (TransformationRuleActionOpOutput) ToStringPtrOutput added in v0.32.0

func (TransformationRuleActionOpOutput) ToStringPtrOutputWithContext added in v0.32.0

func (o TransformationRuleActionOpOutput) ToStringPtrOutputWithContext(ctx context.Context) pulumi.StringPtrOutput

func (TransformationRuleActionOpOutput) ToTransformationRuleActionOpOutput added in v0.32.0

func (o TransformationRuleActionOpOutput) ToTransformationRuleActionOpOutput() TransformationRuleActionOpOutput

func (TransformationRuleActionOpOutput) ToTransformationRuleActionOpOutputWithContext added in v0.32.0

func (o TransformationRuleActionOpOutput) ToTransformationRuleActionOpOutputWithContext(ctx context.Context) TransformationRuleActionOpOutput

func (TransformationRuleActionOpOutput) ToTransformationRuleActionOpPtrOutput added in v0.32.0

func (o TransformationRuleActionOpOutput) ToTransformationRuleActionOpPtrOutput() TransformationRuleActionOpPtrOutput

func (TransformationRuleActionOpOutput) ToTransformationRuleActionOpPtrOutputWithContext added in v0.32.0

func (o TransformationRuleActionOpOutput) ToTransformationRuleActionOpPtrOutputWithContext(ctx context.Context) TransformationRuleActionOpPtrOutput

type TransformationRuleActionOpPtrInput added in v0.32.0

type TransformationRuleActionOpPtrInput interface {
	pulumi.Input

	ToTransformationRuleActionOpPtrOutput() TransformationRuleActionOpPtrOutput
	ToTransformationRuleActionOpPtrOutputWithContext(context.Context) TransformationRuleActionOpPtrOutput
}

func TransformationRuleActionOpPtr added in v0.32.0

func TransformationRuleActionOpPtr(v string) TransformationRuleActionOpPtrInput

type TransformationRuleActionOpPtrOutput added in v0.32.0

type TransformationRuleActionOpPtrOutput struct{ *pulumi.OutputState }

func (TransformationRuleActionOpPtrOutput) Elem added in v0.32.0

func (TransformationRuleActionOpPtrOutput) ElementType added in v0.32.0

func (TransformationRuleActionOpPtrOutput) ToStringPtrOutput added in v0.32.0

func (TransformationRuleActionOpPtrOutput) ToStringPtrOutputWithContext added in v0.32.0

func (o TransformationRuleActionOpPtrOutput) ToStringPtrOutputWithContext(ctx context.Context) pulumi.StringPtrOutput

func (TransformationRuleActionOpPtrOutput) ToTransformationRuleActionOpPtrOutput added in v0.32.0

func (o TransformationRuleActionOpPtrOutput) ToTransformationRuleActionOpPtrOutput() TransformationRuleActionOpPtrOutput

func (TransformationRuleActionOpPtrOutput) ToTransformationRuleActionOpPtrOutputWithContext added in v0.32.0

func (o TransformationRuleActionOpPtrOutput) ToTransformationRuleActionOpPtrOutputWithContext(ctx context.Context) TransformationRuleActionOpPtrOutput

type TransformationRuleActionOutput added in v0.32.0

type TransformationRuleActionOutput struct{ *pulumi.OutputState }

TransformationRuleAction defines a TransformationRule action based on the JSON Patch RFC (https://www.rfc-editor.org/rfc/rfc6902)

func (TransformationRuleActionOutput) ElementType added in v0.32.0

func (TransformationRuleActionOutput) FromPath added in v0.32.0

Optional. A string containing a JSON Pointer value that references the location in the target document to move the value from.

func (TransformationRuleActionOutput) Op added in v0.32.0

op specifies the operation to perform.

func (TransformationRuleActionOutput) Path added in v0.32.0

Optional. A string containing a JSON-Pointer value that references a location within the target document where the operation is performed.

func (TransformationRuleActionOutput) ToTransformationRuleActionOutput added in v0.32.0

func (o TransformationRuleActionOutput) ToTransformationRuleActionOutput() TransformationRuleActionOutput

func (TransformationRuleActionOutput) ToTransformationRuleActionOutputWithContext added in v0.32.0

func (o TransformationRuleActionOutput) ToTransformationRuleActionOutputWithContext(ctx context.Context) TransformationRuleActionOutput

func (TransformationRuleActionOutput) Value added in v0.32.0

Optional. A string that specifies the desired value in string format to use for transformation.

type TransformationRuleActionResponse added in v0.32.0

type TransformationRuleActionResponse struct {
	// Optional. A string containing a JSON Pointer value that references the location in the target document to move the value from.
	FromPath string `pulumi:"fromPath"`
	// op specifies the operation to perform.
	Op string `pulumi:"op"`
	// Optional. A string containing a JSON-Pointer value that references a location within the target document where the operation is performed.
	Path string `pulumi:"path"`
	// Optional. A string that specifies the desired value in string format to use for transformation.
	Value string `pulumi:"value"`
}

TransformationRuleAction defines a TransformationRule action based on the JSON Patch RFC (https://www.rfc-editor.org/rfc/rfc6902)

type TransformationRuleActionResponseArrayOutput added in v0.32.0

type TransformationRuleActionResponseArrayOutput struct{ *pulumi.OutputState }

func (TransformationRuleActionResponseArrayOutput) ElementType added in v0.32.0

func (TransformationRuleActionResponseArrayOutput) Index added in v0.32.0

func (TransformationRuleActionResponseArrayOutput) ToTransformationRuleActionResponseArrayOutput added in v0.32.0

func (o TransformationRuleActionResponseArrayOutput) ToTransformationRuleActionResponseArrayOutput() TransformationRuleActionResponseArrayOutput

func (TransformationRuleActionResponseArrayOutput) ToTransformationRuleActionResponseArrayOutputWithContext added in v0.32.0

func (o TransformationRuleActionResponseArrayOutput) ToTransformationRuleActionResponseArrayOutputWithContext(ctx context.Context) TransformationRuleActionResponseArrayOutput

type TransformationRuleActionResponseOutput added in v0.32.0

type TransformationRuleActionResponseOutput struct{ *pulumi.OutputState }

TransformationRuleAction defines a TransformationRule action based on the JSON Patch RFC (https://www.rfc-editor.org/rfc/rfc6902)

func (TransformationRuleActionResponseOutput) ElementType added in v0.32.0

func (TransformationRuleActionResponseOutput) FromPath added in v0.32.0

Optional. A string containing a JSON Pointer value that references the location in the target document to move the value from.

func (TransformationRuleActionResponseOutput) Op added in v0.32.0

op specifies the operation to perform.

func (TransformationRuleActionResponseOutput) Path added in v0.32.0

Optional. A string containing a JSON-Pointer value that references a location within the target document where the operation is performed.

func (TransformationRuleActionResponseOutput) ToTransformationRuleActionResponseOutput added in v0.32.0

func (o TransformationRuleActionResponseOutput) ToTransformationRuleActionResponseOutput() TransformationRuleActionResponseOutput

func (TransformationRuleActionResponseOutput) ToTransformationRuleActionResponseOutputWithContext added in v0.32.0

func (o TransformationRuleActionResponseOutput) ToTransformationRuleActionResponseOutputWithContext(ctx context.Context) TransformationRuleActionResponseOutput

func (TransformationRuleActionResponseOutput) Value added in v0.32.0

Optional. A string that specifies the desired value in string format to use for transformation.

type TransformationRuleArgs added in v0.32.0

type TransformationRuleArgs struct {
	// Optional. The description is a user specified string description of the transformation rule.
	Description pulumi.StringPtrInput `pulumi:"description"`
	// A list of transformation rule actions to take against candidate resources. Actions are executed in order defined - this order matters, as they could potentially interfere with each other and the first operation could affect the outcome of the second operation.
	FieldActions TransformationRuleActionArrayInput `pulumi:"fieldActions"`
	// Optional. This field is used to specify a set of fields that should be used to determine which resources in backup should be acted upon by the supplied transformation rule actions, and this will ensure that only specific resources are affected by transformation rule actions.
	ResourceFilter ResourceFilterPtrInput `pulumi:"resourceFilter"`
}

A transformation rule to be applied against Kubernetes resources as they are selected for restoration from a Backup. A rule contains both filtering logic (which resources are subject to transform) and transformation logic.

func (TransformationRuleArgs) ElementType added in v0.32.0

func (TransformationRuleArgs) ElementType() reflect.Type

func (TransformationRuleArgs) ToTransformationRuleOutput added in v0.32.0

func (i TransformationRuleArgs) ToTransformationRuleOutput() TransformationRuleOutput

func (TransformationRuleArgs) ToTransformationRuleOutputWithContext added in v0.32.0

func (i TransformationRuleArgs) ToTransformationRuleOutputWithContext(ctx context.Context) TransformationRuleOutput

type TransformationRuleArray added in v0.32.0

type TransformationRuleArray []TransformationRuleInput

func (TransformationRuleArray) ElementType added in v0.32.0

func (TransformationRuleArray) ElementType() reflect.Type

func (TransformationRuleArray) ToTransformationRuleArrayOutput added in v0.32.0

func (i TransformationRuleArray) ToTransformationRuleArrayOutput() TransformationRuleArrayOutput

func (TransformationRuleArray) ToTransformationRuleArrayOutputWithContext added in v0.32.0

func (i TransformationRuleArray) ToTransformationRuleArrayOutputWithContext(ctx context.Context) TransformationRuleArrayOutput

type TransformationRuleArrayInput added in v0.32.0

type TransformationRuleArrayInput interface {
	pulumi.Input

	ToTransformationRuleArrayOutput() TransformationRuleArrayOutput
	ToTransformationRuleArrayOutputWithContext(context.Context) TransformationRuleArrayOutput
}

TransformationRuleArrayInput is an input type that accepts TransformationRuleArray and TransformationRuleArrayOutput values. You can construct a concrete instance of `TransformationRuleArrayInput` via:

TransformationRuleArray{ TransformationRuleArgs{...} }

type TransformationRuleArrayOutput added in v0.32.0

type TransformationRuleArrayOutput struct{ *pulumi.OutputState }

func (TransformationRuleArrayOutput) ElementType added in v0.32.0

func (TransformationRuleArrayOutput) Index added in v0.32.0

func (TransformationRuleArrayOutput) ToTransformationRuleArrayOutput added in v0.32.0

func (o TransformationRuleArrayOutput) ToTransformationRuleArrayOutput() TransformationRuleArrayOutput

func (TransformationRuleArrayOutput) ToTransformationRuleArrayOutputWithContext added in v0.32.0

func (o TransformationRuleArrayOutput) ToTransformationRuleArrayOutputWithContext(ctx context.Context) TransformationRuleArrayOutput

type TransformationRuleInput added in v0.32.0

type TransformationRuleInput interface {
	pulumi.Input

	ToTransformationRuleOutput() TransformationRuleOutput
	ToTransformationRuleOutputWithContext(context.Context) TransformationRuleOutput
}

TransformationRuleInput is an input type that accepts TransformationRuleArgs and TransformationRuleOutput values. You can construct a concrete instance of `TransformationRuleInput` via:

TransformationRuleArgs{...}

type TransformationRuleOutput added in v0.32.0

type TransformationRuleOutput struct{ *pulumi.OutputState }

A transformation rule to be applied against Kubernetes resources as they are selected for restoration from a Backup. A rule contains both filtering logic (which resources are subject to transform) and transformation logic.

func (TransformationRuleOutput) Description added in v0.32.0

Optional. The description is a user specified string description of the transformation rule.

func (TransformationRuleOutput) ElementType added in v0.32.0

func (TransformationRuleOutput) ElementType() reflect.Type

func (TransformationRuleOutput) FieldActions added in v0.32.0

A list of transformation rule actions to take against candidate resources. Actions are executed in order defined - this order matters, as they could potentially interfere with each other and the first operation could affect the outcome of the second operation.

func (TransformationRuleOutput) ResourceFilter added in v0.32.0

Optional. This field is used to specify a set of fields that should be used to determine which resources in backup should be acted upon by the supplied transformation rule actions, and this will ensure that only specific resources are affected by transformation rule actions.

func (TransformationRuleOutput) ToTransformationRuleOutput added in v0.32.0

func (o TransformationRuleOutput) ToTransformationRuleOutput() TransformationRuleOutput

func (TransformationRuleOutput) ToTransformationRuleOutputWithContext added in v0.32.0

func (o TransformationRuleOutput) ToTransformationRuleOutputWithContext(ctx context.Context) TransformationRuleOutput

type TransformationRuleResponse added in v0.32.0

type TransformationRuleResponse struct {
	// Optional. The description is a user specified string description of the transformation rule.
	Description string `pulumi:"description"`
	// A list of transformation rule actions to take against candidate resources. Actions are executed in order defined - this order matters, as they could potentially interfere with each other and the first operation could affect the outcome of the second operation.
	FieldActions []TransformationRuleActionResponse `pulumi:"fieldActions"`
	// Optional. This field is used to specify a set of fields that should be used to determine which resources in backup should be acted upon by the supplied transformation rule actions, and this will ensure that only specific resources are affected by transformation rule actions.
	ResourceFilter ResourceFilterResponse `pulumi:"resourceFilter"`
}

A transformation rule to be applied against Kubernetes resources as they are selected for restoration from a Backup. A rule contains both filtering logic (which resources are subject to transform) and transformation logic.

type TransformationRuleResponseArrayOutput added in v0.32.0

type TransformationRuleResponseArrayOutput struct{ *pulumi.OutputState }

func (TransformationRuleResponseArrayOutput) ElementType added in v0.32.0

func (TransformationRuleResponseArrayOutput) Index added in v0.32.0

func (TransformationRuleResponseArrayOutput) ToTransformationRuleResponseArrayOutput added in v0.32.0

func (o TransformationRuleResponseArrayOutput) ToTransformationRuleResponseArrayOutput() TransformationRuleResponseArrayOutput

func (TransformationRuleResponseArrayOutput) ToTransformationRuleResponseArrayOutputWithContext added in v0.32.0

func (o TransformationRuleResponseArrayOutput) ToTransformationRuleResponseArrayOutputWithContext(ctx context.Context) TransformationRuleResponseArrayOutput

type TransformationRuleResponseOutput added in v0.32.0

type TransformationRuleResponseOutput struct{ *pulumi.OutputState }

A transformation rule to be applied against Kubernetes resources as they are selected for restoration from a Backup. A rule contains both filtering logic (which resources are subject to transform) and transformation logic.

func (TransformationRuleResponseOutput) Description added in v0.32.0

Optional. The description is a user specified string description of the transformation rule.

func (TransformationRuleResponseOutput) ElementType added in v0.32.0

func (TransformationRuleResponseOutput) FieldActions added in v0.32.0

A list of transformation rule actions to take against candidate resources. Actions are executed in order defined - this order matters, as they could potentially interfere with each other and the first operation could affect the outcome of the second operation.

func (TransformationRuleResponseOutput) ResourceFilter added in v0.32.0

Optional. This field is used to specify a set of fields that should be used to determine which resources in backup should be acted upon by the supplied transformation rule actions, and this will ensure that only specific resources are affected by transformation rule actions.

func (TransformationRuleResponseOutput) ToTransformationRuleResponseOutput added in v0.32.0

func (o TransformationRuleResponseOutput) ToTransformationRuleResponseOutput() TransformationRuleResponseOutput

func (TransformationRuleResponseOutput) ToTransformationRuleResponseOutputWithContext added in v0.32.0

func (o TransformationRuleResponseOutput) ToTransformationRuleResponseOutputWithContext(ctx context.Context) TransformationRuleResponseOutput

Jump to

Keyboard shortcuts

? : This menu
/ : Search site
f or F : Jump to
y or Y : Canonical URL