UserPermission

configuration:
  name:
    type: string
    default: tfexample
resources:
  defaultInteger:
    type: random:integer
    name: default
    properties:
      min: 10000
      max: 99999
  defaultUser:
    type: alicloud:ram:User
    name: default
    properties:
      name: ${name}
  default1:
    type: alicloud:servicemesh:ServiceMesh
    properties:
      serviceMeshName: ${name}-${defaultInteger.result}
      edition: Default
      clusterSpec: standard
      version: ${default.versions[0].version}
      network:
        vpcId: ${defaultGetNetworks.ids[0]}
        vswitcheLists:
          - ${defaultGetSwitches.ids[0]}
      loadBalancer:
        pilotPublicEip: false
        apiServerPublicEip: false
  defaultUserPermission:
    type: alicloud:servicemesh:UserPermission
    name: default
    properties:
      subAccountUserId: ${defaultUser.id}
      permissions:
        - roleName: istio-ops
          serviceMeshId: ${default1.id}
          roleType: custom
          isCustom: true
variables:
  default:
    fn::invoke:
      function: alicloud:servicemesh:getVersions
      arguments:
        edition: Default
  defaultGetZones:
    fn::invoke:
      function: alicloud:getZones
      arguments:
        availableResourceCreation: VSwitch
  defaultGetNetworks:
    fn::invoke:
      function: alicloud:vpc:getNetworks
      arguments:
        nameRegex: ^default-NODELETING$
  defaultGetSwitches:
    fn::invoke:
      function: alicloud:vpc:getSwitches
      arguments:
        vpcId: ${defaultGetNetworks.ids[0]}
        zoneId: ${defaultGetZones.zones[0].id}

$ pulumi import alicloud:servicemesh/userPermission:UserPermission example <id>