pulumi-google-native-kotlin/com.pulumi.googlenative.secretmanager.v1.kotlin.outputs

Package-level declarations

Types

data class AuditConfigResponse(val auditLogConfigs: List<AuditLogConfigResponse>, val service: String)

Specifies the audit configuration for a service. The configuration determines which permission types are logged, and what identities, if any, are exempted from logging. An AuditConfig must have one or more AuditLogConfigs. If there are AuditConfigs for both allServices and a specific service, the union of the two AuditConfigs is used for that service: the log_types specified in each AuditConfig are enabled, and the exempted_members in each AuditLogConfig are exempted. Example Policy with multiple AuditConfigs: { "audit_configs": [ { "service": "allServices", "audit_log_configs": [ { "log_type": "DATA_READ", "exempted_members": "user:jose@example.com" }, { "log_type": "DATA_WRITE" }, { "log_type": "ADMIN_READ" } ] }, { "service": "sampleservice.googleapis.com", "audit_log_configs": [ { "log_type": "DATA_READ" }, { "log_type": "DATA_WRITE", "exempted_members": "user:aliya@example.com" } ] } ] } For sampleservice, this policy enables DATA_READ, DATA_WRITE and ADMIN_READ logging. It also exempts jose@example.com from DATA_READ logging, and aliya@example.com from DATA_WRITE logging.

AuditLogConfigResponse

data class AuditLogConfigResponse(val exemptedMembers: List<String>, val logType: String)

Provides the configuration for logging a type of permissions. Example: { "audit_log_configs": [ { "log_type": "DATA_READ", "exempted_members": "user:jose@example.com" }, { "log_type": "DATA_WRITE" } ] } This enables 'DATA_READ' and 'DATA_WRITE' logging, while exempting jose@example.com from DATA_READ logging.

AutomaticResponse

data class AutomaticResponse(val customerManagedEncryption: CustomerManagedEncryptionResponse)

A replication policy that replicates the Secret payload without any restrictions.

BindingResponse

data class BindingResponse(val condition: ExprResponse, val members: List<String>, val role: String)

Associates members, or principals, with a role.

CustomerManagedEncryptionResponse

data class CustomerManagedEncryptionResponse(val kmsKeyName: String)

Configuration for encrypting secret payloads using customer-managed encryption keys (CMEK).

ExprResponse

data class ExprResponse(val description: String, val expression: String, val location: String, val title: String)

Represents a textual expression in the Common Expression Language (CEL) syntax. CEL is a C-like expression language. The syntax and semantics of CEL are documented at https://github.com/google/cel-spec. Example (Comparison): title: "Summary size limit" description: "Determines if a summary is less than 100 chars" expression: "document.summary.size() < 100" Example (Equality): title: "Requestor is owner" description: "Determines if requestor is the document owner" expression: "document.owner == request.auth.claims.email" Example (Logic): title: "Public documents" description: "Determine whether the document should be publicly visible" expression: "document.type != 'private' && document.type != 'internal'" Example (Data Manipulation): title: "Notification string" description: "Create a notification string with a timestamp." expression: "'New message received at ' + string(document.create_time)" The exact variables and functions that may be referenced within an expression are determined by the service that evaluates it. See the service documentation for additional information.

GetSecretIamPolicyResult

data class GetSecretIamPolicyResult(val auditConfigs: List<AuditConfigResponse>, val bindings: List<BindingResponse>, val etag: String, val version: Int)

GetSecretResult

data class GetSecretResult(val annotations: Map<String, String>, val createTime: String, val etag: String, val expireTime: String, val labels: Map<String, String>, val name: String, val replication: ReplicationResponse, val rotation: RotationResponse, val topics: List<TopicResponse>, val ttl: String, val versionAliases: Map<String, String>)

ReplicaResponse

data class ReplicaResponse(val customerManagedEncryption: CustomerManagedEncryptionResponse, val location: String)

Represents a Replica for this Secret.

ReplicationResponse

data class ReplicationResponse(val automatic: AutomaticResponse, val userManaged: UserManagedResponse)

A policy that defines the replication and encryption configuration of data.

RotationResponse

data class RotationResponse(val nextRotationTime: String, val rotationPeriod: String)

The rotation time and period for a Secret. At next_rotation_time, Secret Manager will send a Pub/Sub notification to the topics configured on the Secret. Secret.topics must be set to configure rotation.

TopicResponse

data class TopicResponse(val name: String)

A Pub/Sub topic which Secret Manager will publish to when control plane events occur on this secret.

UserManagedResponse

data class UserManagedResponse(val replicas: List<ReplicaResponse>)

A replication policy that replicates the Secret payload into the locations specified in Secret.replication.user_managed.replicas