Oidc Assignment Args
data class OidcAssignmentArgs(val entityIds: Output<List<String>>? = null, val groupIds: Output<List<String>>? = null, val name: Output<String>? = null, val namespace: Output<String>? = null) : ConvertibleToJava<OidcAssignmentArgs>
Manages OIDC Assignments in a Vault server. See the Vault documentation for more information.
Example Usage
import * as pulumi from "@pulumi/pulumi";
import * as vault from "@pulumi/vault";
const internal = new vault.identity.Group("internal", {
name: "internal",
type: "internal",
policies: [
"dev",
"test",
],
});
const test = new vault.identity.Entity("test", {
name: "test",
policies: ["test"],
});
const _default = new vault.identity.OidcAssignment("default", {
name: "assignment",
entityIds: [test.id],
groupIds: [internal.id],
});
Content copied to clipboard
import pulumi
import pulumi_vault as vault
internal = vault.identity.Group("internal",
name="internal",
type="internal",
policies=[
"dev",
"test",
])
test = vault.identity.Entity("test",
name="test",
policies=["test"])
default = vault.identity.OidcAssignment("default",
name="assignment",
entity_ids=[test.id],
group_ids=[internal.id])
Content copied to clipboard
using System.Collections.Generic;
using System.Linq;
using Pulumi;
using Vault = Pulumi.Vault;
return await Deployment.RunAsync(() =>
{
var @internal = new Vault.Identity.Group("internal", new()
{
Name = "internal",
Type = "internal",
Policies = new[]
{
"dev",
"test",
},
});
var test = new Vault.Identity.Entity("test", new()
{
Name = "test",
Policies = new[]
{
"test",
},
});
var @default = new Vault.Identity.OidcAssignment("default", new()
{
Name = "assignment",
EntityIds = new[]
{
test.Id,
},
GroupIds = new[]
{
@internal.Id,
},
});
});
Content copied to clipboard
package main
import (
"github.com/pulumi/pulumi-vault/sdk/v6/go/vault/identity"
"github.com/pulumi/pulumi/sdk/v3/go/pulumi"
)
func main() {
pulumi.Run(func(ctx *pulumi.Context) error {
internal, err := identity.NewGroup(ctx, "internal", &identity.GroupArgs{
Name: pulumi.String("internal"),
Type: pulumi.String("internal"),
Policies: pulumi.StringArray{
pulumi.String("dev"),
pulumi.String("test"),
},
})
if err != nil {
return err
}
test, err := identity.NewEntity(ctx, "test", &identity.EntityArgs{
Name: pulumi.String("test"),
Policies: pulumi.StringArray{
pulumi.String("test"),
},
})
if err != nil {
return err
}
_, err = identity.NewOidcAssignment(ctx, "default", &identity.OidcAssignmentArgs{
Name: pulumi.String("assignment"),
EntityIds: pulumi.StringArray{
test.ID(),
},
GroupIds: pulumi.StringArray{
internal.ID(),
},
})
if err != nil {
return err
}
return nil
})
}
Content copied to clipboard
package generated_program;
import com.pulumi.Context;
import com.pulumi.Pulumi;
import com.pulumi.core.Output;
import com.pulumi.vault.identity.Group;
import com.pulumi.vault.identity.GroupArgs;
import com.pulumi.vault.identity.Entity;
import com.pulumi.vault.identity.EntityArgs;
import com.pulumi.vault.identity.OidcAssignment;
import com.pulumi.vault.identity.OidcAssignmentArgs;
import java.util.List;
import java.util.ArrayList;
import java.util.Map;
import java.io.File;
import java.nio.file.Files;
import java.nio.file.Paths;
public class App {
public static void main(String[] args) {
Pulumi.run(App::stack);
}
public static void stack(Context ctx) {
var internal = new Group("internal", GroupArgs.builder()
.name("internal")
.type("internal")
.policies(
"dev",
"test")
.build());
var test = new Entity("test", EntityArgs.builder()
.name("test")
.policies("test")
.build());
var default_ = new OidcAssignment("default", OidcAssignmentArgs.builder()
.name("assignment")
.entityIds(test.id())
.groupIds(internal.id())
.build());
}
}
Content copied to clipboard
resources:
internal:
type: vault:identity:Group
properties:
name: internal
type: internal
policies:
- dev
- test
test:
type: vault:identity:Entity
properties:
name: test
policies:
- test
default:
type: vault:identity:OidcAssignment
properties:
name: assignment
entityIds:
- ${test.id}
groupIds:
- ${internal.id}
Content copied to clipboard
Import
OIDC Assignments can be imported using the name
, e.g.
$ pulumi import vault:identity/oidcAssignment:OidcAssignment default assignment
Content copied to clipboard