pulumi-google-native-kotlin/com.pulumi.googlenative.gkehub.v1beta.kotlin.outputs

Package-level declarations

Types

data class AnthosObservabilityFeatureSpecResponse(val defaultMembershipSpec: AnthosObservabilityMembershipSpecResponse)

Anthos Observability: Spec

AnthosObservabilityMembershipSpecResponse

data class AnthosObservabilityMembershipSpecResponse(val doNotOptimizeMetrics: Boolean, val enableStackdriverOnApplications: Boolean, val version: String)

Anthosobservability: Per-Membership Feature spec.

AppDevExperienceFeatureSpecResponse

class AppDevExperienceFeatureSpecResponse

Spec for App Dev Experience Feature.

AppDevExperienceFeatureStateResponse

data class AppDevExperienceFeatureStateResponse(val networkingInstallSucceeded: StatusResponse)

State for App Dev Exp Feature.

AuditConfigResponse

data class AuditConfigResponse(val auditLogConfigs: List<AuditLogConfigResponse>, val service: String)

Specifies the audit configuration for a service. The configuration determines which permission types are logged, and what identities, if any, are exempted from logging. An AuditConfig must have one or more AuditLogConfigs. If there are AuditConfigs for both allServices and a specific service, the union of the two AuditConfigs is used for that service: the log_types specified in each AuditConfig are enabled, and the exempted_members in each AuditLogConfig are exempted. Example Policy with multiple AuditConfigs: { "audit_configs": [ { "service": "allServices", "audit_log_configs": [ { "log_type": "DATA_READ", "exempted_members": "user:jose@example.com" }, { "log_type": "DATA_WRITE" }, { "log_type": "ADMIN_READ" } ] }, { "service": "sampleservice.googleapis.com", "audit_log_configs": [ { "log_type": "DATA_READ" }, { "log_type": "DATA_WRITE", "exempted_members": "user:aliya@example.com" } ] } ] } For sampleservice, this policy enables DATA_READ, DATA_WRITE and ADMIN_READ logging. It also exempts jose@example.com from DATA_READ logging, and aliya@example.com from DATA_WRITE logging.

AuditLogConfigResponse

data class AuditLogConfigResponse(val exemptedMembers: List<String>, val logType: String)

Provides the configuration for logging a type of permissions. Example: { "audit_log_configs": [ { "log_type": "DATA_READ", "exempted_members": "user:jose@example.com" }, { "log_type": "DATA_WRITE" } ] } This enables 'DATA_READ' and 'DATA_WRITE' logging, while exempting jose@example.com from DATA_READ logging.

BindingResponse

data class BindingResponse(val condition: ExprResponse, val members: List<String>, val role: String)

Associates members, or principals, with a role.

CommonFeatureSpecResponse

data class CommonFeatureSpecResponse(val anthosobservability: AnthosObservabilityFeatureSpecResponse, val appdevexperience: AppDevExperienceFeatureSpecResponse, val fleetobservability: FleetObservabilityFeatureSpecResponse, val multiclusteringress: MultiClusterIngressFeatureSpecResponse)

CommonFeatureSpec contains Hub-wide configuration information

CommonFeatureStateResponse

data class CommonFeatureStateResponse(val appdevexperience: AppDevExperienceFeatureStateResponse, val fleetobservability: FleetObservabilityFeatureStateResponse, val state: FeatureStateResponse)

CommonFeatureState contains Hub-wide Feature status information.

CommonFleetDefaultMemberConfigSpecResponse

data class CommonFleetDefaultMemberConfigSpecResponse(val identityservice: IdentityServiceMembershipSpecResponse)

CommonFleetDefaultMemberConfigSpec contains default configuration information for memberships of a fleet

ExprResponse

data class ExprResponse(val description: String, val expression: String, val location: String, val title: String)

Represents a textual expression in the Common Expression Language (CEL) syntax. CEL is a C-like expression language. The syntax and semantics of CEL are documented at https://github.com/google/cel-spec. Example (Comparison): title: "Summary size limit" description: "Determines if a summary is less than 100 chars" expression: "document.summary.size() < 100" Example (Equality): title: "Requestor is owner" description: "Determines if requestor is the document owner" expression: "document.owner == request.auth.claims.email" Example (Logic): title: "Public documents" description: "Determine whether the document should be publicly visible" expression: "document.type != 'private' && document.type != 'internal'" Example (Data Manipulation): title: "Notification string" description: "Create a notification string with a timestamp." expression: "'New message received at ' + string(document.create_time)" The exact variables and functions that may be referenced within an expression are determined by the service that evaluates it. See the service documentation for additional information.

FeatureResourceStateResponse

data class FeatureResourceStateResponse(val state: String)

FeatureResourceState describes the state of a Feature resource in the GkeHub API. See FeatureState for the "running state" of the Feature in the Hub and across Memberships.

FeatureStateResponse

data class FeatureStateResponse(val code: String, val description: String, val updateTime: String)

FeatureState describes the high-level state of a Feature. It may be used to describe a Feature's state at the environ-level, or per-membershop, depending on the context.

FleetLifecycleStateResponse

data class FleetLifecycleStateResponse(val code: String)

FleetLifecycleState describes the state of a Fleet resource.

FleetObservabilityFeatureSpecResponse

data class FleetObservabilityFeatureSpecResponse(val loggingConfig: FleetObservabilityLoggingConfigResponse)

Fleet Observability: The Hub-wide input for the FleetObservability feature.

FleetObservabilityFeatureStateResponse

class FleetObservabilityFeatureStateResponse

FleetObservability: An empty state left as an example Hub-wide Feature state.

FleetObservabilityLoggingConfigResponse

data class FleetObservabilityLoggingConfigResponse(val defaultConfig: FleetObservabilityRoutingConfigResponse, val fleetScopeLogsConfig: FleetObservabilityRoutingConfigResponse)

LoggingConfig defines the configuration for different types of logs.

FleetObservabilityRoutingConfigResponse

data class FleetObservabilityRoutingConfigResponse(val mode: String)

RoutingConfig configures the behaviour of fleet logging feature.

GetBindingResult

data class GetBindingResult(val createTime: String, val deleteTime: String, val fleet: Boolean, val name: String, val scope: String, val state: MembershipBindingLifecycleStateResponse, val uid: String, val updateTime: String)

GetFeatureIamPolicyResult

data class GetFeatureIamPolicyResult(val auditConfigs: List<AuditConfigResponse>, val bindings: List<BindingResponse>, val etag: String, val version: Int)

GetFeatureResult

data class GetFeatureResult(val createTime: String, val deleteTime: String, val fleetDefaultMemberConfig: CommonFleetDefaultMemberConfigSpecResponse, val labels: Map<String, String>, val membershipSpecs: Map<String, String>, val membershipStates: Map<String, String>, val name: String, val resourceState: FeatureResourceStateResponse, val scopeSpecs: Map<String, String>, val scopeStates: Map<String, String>, val spec: CommonFeatureSpecResponse, val state: CommonFeatureStateResponse, val updateTime: String)

GetFleetResult

data class GetFleetResult(val createTime: String, val deleteTime: String, val displayName: String, val name: String, val state: FleetLifecycleStateResponse, val uid: String, val updateTime: String)

GetMembershipIamPolicyResult

data class GetMembershipIamPolicyResult(val auditConfigs: List<AuditConfigResponse>, val bindings: List<BindingResponse>, val etag: String, val version: Int)

GetNamespaceResult

data class GetNamespaceResult(val createTime: String, val deleteTime: String, val name: String, val scope: String, val state: NamespaceLifecycleStateResponse, val uid: String, val updateTime: String)

GetRbacrolebindingResult

data class GetRbacrolebindingResult(val createTime: String, val deleteTime: String, val group: String, val name: String, val role: RoleResponse, val state: RBACRoleBindingLifecycleStateResponse, val uid: String, val updateTime: String, val user: String)

GetScopeResult

data class GetScopeResult(val allMemberships: Boolean, val createTime: String, val deleteTime: String, val name: String, val state: ScopeLifecycleStateResponse, val uid: String, val updateTime: String)

IdentityServiceAuthMethodResponse

data class IdentityServiceAuthMethodResponse(val azureadConfig: IdentityServiceAzureADConfigResponse, val googleConfig: IdentityServiceGoogleConfigResponse, val name: String, val oidcConfig: IdentityServiceOidcConfigResponse, val proxy: String)

Configuration of an auth method for a member/cluster. Only one authentication method (e.g., OIDC and LDAP) can be set per AuthMethod.

IdentityServiceAzureADConfigResponse

data class IdentityServiceAzureADConfigResponse(val clientId: String, val clientSecret: String, val encryptedClientSecret: String, val kubectlRedirectUri: String, val tenant: String)

Configuration for the AzureAD Auth flow.

IdentityServiceGoogleConfigResponse

data class IdentityServiceGoogleConfigResponse(val disable: Boolean)

Configuration for the Google Plugin Auth flow.

IdentityServiceMembershipSpecResponse

data class IdentityServiceMembershipSpecResponse(val authMethods: List<IdentityServiceAuthMethodResponse>)

Anthos Identity Service: Configuration for a single Membership.

IdentityServiceOidcConfigResponse

data class IdentityServiceOidcConfigResponse(val certificateAuthorityData: String, val clientId: String, val clientSecret: String, val deployCloudConsoleProxy: Boolean, val enableAccessToken: Boolean, val encryptedClientSecret: String, val extraParams: String, val groupPrefix: String, val groupsClaim: String, val issuerUri: String, val kubectlRedirectUri: String, val scopes: String, val userClaim: String, val userPrefix: String)

Configuration for OIDC Auth flow.

MembershipBindingLifecycleStateResponse