Account Privilege
Provides a PolarDB account privilege resource and used to grant several database some access privilege. A database can be granted by multiple account.
NOTE: Available in v1.67.0+.
Example Usage
import * as pulumi from "@pulumi/pulumi";
import * as alicloud from "@pulumi/alicloud";
const _default = alicloud.polardb.getNodeClasses({
dbType: "MySQL",
dbVersion: "8.0",
payType: "PostPaid",
category: "Normal",
});
const defaultNetwork = new alicloud.vpc.Network("default", {
vpcName: "terraform-example",
cidrBlock: "172.16.0.0/16",
});
const defaultSwitch = new alicloud.vpc.Switch("default", {
vpcId: defaultNetwork.id,
cidrBlock: "172.16.0.0/24",
zoneId: _default.then(_default => _default.classes?.[0]?.zoneId),
vswitchName: "terraform-example",
});
const defaultCluster = new alicloud.polardb.Cluster("default", {
dbType: "MySQL",
dbVersion: "8.0",
dbNodeClass: _default.then(_default => _default.classes?.[0]?.supportedEngines?.[0]?.availableResources?.[0]?.dbNodeClass),
payType: "PostPaid",
vswitchId: defaultSwitch.id,
description: "terraform-example",
});
const defaultAccount = new alicloud.polardb.Account("default", {
dbClusterId: defaultCluster.id,
accountName: "terraform_example",
accountPassword: "Example1234",
accountDescription: "terraform-example",
});
const defaultDatabase = new alicloud.polardb.Database("default", {
dbClusterId: defaultCluster.id,
dbName: "terraform-example",
});
const defaultAccountPrivilege = new alicloud.polardb.AccountPrivilege("default", {
dbClusterId: defaultCluster.id,
accountName: defaultAccount.accountName,
accountPrivilege: "ReadOnly",
dbNames: [defaultDatabase.dbName],
});
Content copied to clipboard
import pulumi
import pulumi_alicloud as alicloud
default = alicloud.polardb.get_node_classes(db_type="MySQL",
db_version="8.0",
pay_type="PostPaid",
category="Normal")
default_network = alicloud.vpc.Network("default",
vpc_name="terraform-example",
cidr_block="172.16.0.0/16")
default_switch = alicloud.vpc.Switch("default",
vpc_id=default_network.id,
cidr_block="172.16.0.0/24",
zone_id=default.classes[0].zone_id,
vswitch_name="terraform-example")
default_cluster = alicloud.polardb.Cluster("default",
db_type="MySQL",
db_version="8.0",
db_node_class=default.classes[0].supported_engines[0].available_resources[0].db_node_class,
pay_type="PostPaid",
vswitch_id=default_switch.id,
description="terraform-example")
default_account = alicloud.polardb.Account("default",
db_cluster_id=default_cluster.id,
account_name="terraform_example",
account_password="Example1234",
account_description="terraform-example")
default_database = alicloud.polardb.Database("default",
db_cluster_id=default_cluster.id,
db_name="terraform-example")
default_account_privilege = alicloud.polardb.AccountPrivilege("default",
db_cluster_id=default_cluster.id,
account_name=default_account.account_name,
account_privilege="ReadOnly",
db_names=[default_database.db_name])
Content copied to clipboard
using System.Collections.Generic;
using System.Linq;
using Pulumi;
using AliCloud = Pulumi.AliCloud;
return await Deployment.RunAsync(() =>
{
var @default = AliCloud.PolarDB.GetNodeClasses.Invoke(new()
{
DbType = "MySQL",
DbVersion = "8.0",
PayType = "PostPaid",
Category = "Normal",
});
var defaultNetwork = new AliCloud.Vpc.Network("default", new()
{
VpcName = "terraform-example",
CidrBlock = "172.16.0.0/16",
});
var defaultSwitch = new AliCloud.Vpc.Switch("default", new()
{
VpcId = defaultNetwork.Id,
CidrBlock = "172.16.0.0/24",
ZoneId = @default.Apply(@default => @default.Apply(getNodeClassesResult => getNodeClassesResult.Classes[0]?.ZoneId)),
VswitchName = "terraform-example",
});
var defaultCluster = new AliCloud.PolarDB.Cluster("default", new()
{
DbType = "MySQL",
DbVersion = "8.0",
DbNodeClass = @default.Apply(@default => @default.Apply(getNodeClassesResult => getNodeClassesResult.Classes[0]?.SupportedEngines[0]?.AvailableResources[0]?.DbNodeClass)),
PayType = "PostPaid",
VswitchId = defaultSwitch.Id,
Description = "terraform-example",
});
var defaultAccount = new AliCloud.PolarDB.Account("default", new()
{
DbClusterId = defaultCluster.Id,
AccountName = "terraform_example",
AccountPassword = "Example1234",
AccountDescription = "terraform-example",
});
var defaultDatabase = new AliCloud.PolarDB.Database("default", new()
{
DbClusterId = defaultCluster.Id,
DbName = "terraform-example",
});
var defaultAccountPrivilege = new AliCloud.PolarDB.AccountPrivilege("default", new()
{
DbClusterId = defaultCluster.Id,
AccountName = defaultAccount.AccountName,
Privilege = "ReadOnly",
DbNames = new[]
{
defaultDatabase.DbName,
},
});
});
Content copied to clipboard
package main
import (
"github.com/pulumi/pulumi-alicloud/sdk/v3/go/alicloud/polardb"
"github.com/pulumi/pulumi-alicloud/sdk/v3/go/alicloud/vpc"
"github.com/pulumi/pulumi/sdk/v3/go/pulumi"
)
func main() {
pulumi.Run(func(ctx *pulumi.Context) error {
_default, err := polardb.GetNodeClasses(ctx, &polardb.GetNodeClassesArgs{
DbType: pulumi.StringRef("MySQL"),
DbVersion: pulumi.StringRef("8.0"),
PayType: "PostPaid",
Category: pulumi.StringRef("Normal"),
}, nil)
if err != nil {
return err
}
defaultNetwork, err := vpc.NewNetwork(ctx, "default", &vpc.NetworkArgs{
VpcName: pulumi.String("terraform-example"),
CidrBlock: pulumi.String("172.16.0.0/16"),
})
if err != nil {
return err
}
defaultSwitch, err := vpc.NewSwitch(ctx, "default", &vpc.SwitchArgs{
VpcId: defaultNetwork.ID(),
CidrBlock: pulumi.String("172.16.0.0/24"),
ZoneId: pulumi.String(_default.Classes[0].ZoneId),
VswitchName: pulumi.String("terraform-example"),
})
if err != nil {
return err
}
defaultCluster, err := polardb.NewCluster(ctx, "default", &polardb.ClusterArgs{
DbType: pulumi.String("MySQL"),
DbVersion: pulumi.String("8.0"),
DbNodeClass: pulumi.String(_default.Classes[0].SupportedEngines[0].AvailableResources[0].DbNodeClass),
PayType: pulumi.String("PostPaid"),
VswitchId: defaultSwitch.ID(),
Description: pulumi.String("terraform-example"),
})
if err != nil {
return err
}
defaultAccount, err := polardb.NewAccount(ctx, "default", &polardb.AccountArgs{
DbClusterId: defaultCluster.ID(),
AccountName: pulumi.String("terraform_example"),
AccountPassword: pulumi.String("Example1234"),
AccountDescription: pulumi.String("terraform-example"),
})
if err != nil {
return err
}
defaultDatabase, err := polardb.NewDatabase(ctx, "default", &polardb.DatabaseArgs{
DbClusterId: defaultCluster.ID(),
DbName: pulumi.String("terraform-example"),
})
if err != nil {
return err
}
_, err = polardb.NewAccountPrivilege(ctx, "default", &polardb.AccountPrivilegeArgs{
DbClusterId: defaultCluster.ID(),
AccountName: defaultAccount.AccountName,
AccountPrivilege: pulumi.String("ReadOnly"),
DbNames: pulumi.StringArray{
defaultDatabase.DbName,
},
})
if err != nil {
return err
}
return nil
})
}
Content copied to clipboard
package generated_program;
import com.pulumi.Context;
import com.pulumi.Pulumi;
import com.pulumi.core.Output;
import com.pulumi.alicloud.polardb.PolardbFunctions;
import com.pulumi.alicloud.polardb.inputs.GetNodeClassesArgs;
import com.pulumi.alicloud.vpc.Network;
import com.pulumi.alicloud.vpc.NetworkArgs;
import com.pulumi.alicloud.vpc.Switch;
import com.pulumi.alicloud.vpc.SwitchArgs;
import com.pulumi.alicloud.polardb.Cluster;
import com.pulumi.alicloud.polardb.ClusterArgs;
import com.pulumi.alicloud.polardb.Account;
import com.pulumi.alicloud.polardb.AccountArgs;
import com.pulumi.alicloud.polardb.Database;
import com.pulumi.alicloud.polardb.DatabaseArgs;
import com.pulumi.alicloud.polardb.AccountPrivilege;
import com.pulumi.alicloud.polardb.AccountPrivilegeArgs;
import java.util.List;
import java.util.ArrayList;
import java.util.Map;
import java.io.File;
import java.nio.file.Files;
import java.nio.file.Paths;
public class App {
public static void main(String[] args) {
Pulumi.run(App::stack);
}
public static void stack(Context ctx) {
final var default = PolardbFunctions.getNodeClasses(GetNodeClassesArgs.builder()
.dbType("MySQL")
.dbVersion("8.0")
.payType("PostPaid")
.category("Normal")
.build());
var defaultNetwork = new Network("defaultNetwork", NetworkArgs.builder()
.vpcName("terraform-example")
.cidrBlock("172.16.0.0/16")
.build());
var defaultSwitch = new Switch("defaultSwitch", SwitchArgs.builder()
.vpcId(defaultNetwork.id())
.cidrBlock("172.16.0.0/24")
.zoneId(default_.classes()[0].zoneId())
.vswitchName("terraform-example")
.build());
var defaultCluster = new Cluster("defaultCluster", ClusterArgs.builder()
.dbType("MySQL")
.dbVersion("8.0")
.dbNodeClass(default_.classes()[0].supportedEngines()[0].availableResources()[0].dbNodeClass())
.payType("PostPaid")
.vswitchId(defaultSwitch.id())
.description("terraform-example")
.build());
var defaultAccount = new Account("defaultAccount", AccountArgs.builder()
.dbClusterId(defaultCluster.id())
.accountName("terraform_example")
.accountPassword("Example1234")
.accountDescription("terraform-example")
.build());
var defaultDatabase = new Database("defaultDatabase", DatabaseArgs.builder()
.dbClusterId(defaultCluster.id())
.dbName("terraform-example")
.build());
var defaultAccountPrivilege = new AccountPrivilege("defaultAccountPrivilege", AccountPrivilegeArgs.builder()
.dbClusterId(defaultCluster.id())
.accountName(defaultAccount.accountName())
.accountPrivilege("ReadOnly")
.dbNames(defaultDatabase.dbName())
.build());
}
}
Content copied to clipboard
resources:
defaultNetwork:
type: alicloud:vpc:Network
name: default
properties:
vpcName: terraform-example
cidrBlock: 172.16.0.0/16
defaultSwitch:
type: alicloud:vpc:Switch
name: default
properties:
vpcId: ${defaultNetwork.id}
cidrBlock: 172.16.0.0/24
zoneId: ${default.classes[0].zoneId}
vswitchName: terraform-example
defaultCluster:
type: alicloud:polardb:Cluster
name: default
properties:
dbType: MySQL
dbVersion: '8.0'
dbNodeClass: ${default.classes[0].supportedEngines[0].availableResources[0].dbNodeClass}
payType: PostPaid
vswitchId: ${defaultSwitch.id}
description: terraform-example
defaultAccount:
type: alicloud:polardb:Account
name: default
properties:
dbClusterId: ${defaultCluster.id}
accountName: terraform_example
accountPassword: Example1234
accountDescription: terraform-example
defaultDatabase:
type: alicloud:polardb:Database
name: default
properties:
dbClusterId: ${defaultCluster.id}
dbName: terraform-example
defaultAccountPrivilege:
type: alicloud:polardb:AccountPrivilege
name: default
properties:
dbClusterId: ${defaultCluster.id}
accountName: ${defaultAccount.accountName}
accountPrivilege: ReadOnly
dbNames:
- ${defaultDatabase.dbName}
variables:
default:
fn::invoke:
function: alicloud:polardb:getNodeClasses
arguments:
dbType: MySQL
dbVersion: '8.0'
payType: PostPaid
category: Normal
Content copied to clipboard
Import
PolarDB account privilege can be imported using the id, e.g.
$ pulumi import alicloud:polardb/accountPrivilege:AccountPrivilege example "pc-12345:tf_account:ReadOnly"
Content copied to clipboard
Properties
Link copied to clipboard
A specified account name.
Link copied to clipboard
The privilege of one account access database. Valid values: "ReadOnly", "ReadWrite", "DMLOnly", "DDLOnly" added since version v1.101.0. Default to "ReadOnly".
Link copied to clipboard
The Id of cluster in which account belongs.
Link copied to clipboard
Link copied to clipboard
Link copied to clipboard