WorkloadIdentityPoolArgs class

The set of arguments for WorkloadIdentityPool. The set of arguments for WorkloadIdentityPool.

Constructors

WorkloadIdentityPoolArgs({Input<List<WorkloadIdentityPoolAttestationRule>?>? attestationRules, Input<String?>? deletionPolicy, Input<String?>? description, Input<bool?>? disabled, Input<String?>? displayName, Input<WorkloadIdentityPoolInlineCertificateIssuanceConfig?>? inlineCertificateIssuanceConfig, Input<WorkloadIdentityPoolInlineTrustConfig?>? inlineTrustConfig, Input<String?>? mode, Input<String?>? project, required Input<String> workloadIdentityPoolId})
Creates a new WorkloadIdentityPoolArgs. attestationRules Defines which workloads can receive an identity within a pool. When an AttestationRule is deletionPolicy Whether Terraform will be prevented from destroying the resource. Defaults to DELETE. description A description of the pool. Cannot exceed 256 characters. disabled Whether the pool is disabled. You cannot use a disabled pool to exchange tokens, or use displayName A display name for the pool. Cannot exceed 32 characters. inlineCertificateIssuanceConfig Represents configuration for generating mutual TLS (mTLS) certificates for the identities inlineTrustConfig Represents config to add additional trusted trust domains. Defines configuration for extending mode The mode for the pool is operating in. Pools with an unspecified mode will operate as if they project The ID of the project in which the resource belongs. workloadIdentityPoolId The ID to use for the pool, which becomes the final component of the resource name. This
const
WorkloadIdentityPoolArgs.fromMap(Map<String, dynamic> map)
factory

Properties

attestationRules → Input<List<WorkloadIdentityPoolAttestationRule>?>?
Defines which workloads can receive an identity within a pool. When an AttestationRule is defined under a managed identity, matching workloads may receive that identity. A maximum of 50 AttestationRules can be set. Structure is documented below.
final
deletionPolicy → Input<String?>?
Whether Terraform will be prevented from destroying the resource. Defaults to DELETE. When a 'terraform destroy' or 'pulumi up' would delete the resource, the command will fail if this field is set to "PREVENT" in Terraform state. When set to "ABANDON", the command will remove the resource from Terraform management without updating or deleting the resource in the API. When set to "DELETE", deleting the resource is allowed.
final
description → Input<String?>?
A description of the pool. Cannot exceed 256 characters.
final
disabled → Input<bool?>?
Whether the pool is disabled. You cannot use a disabled pool to exchange tokens, or use existing tokens to access resources. If the pool is re-enabled, existing tokens grant access again.
final
displayName → Input<String?>?
A display name for the pool. Cannot exceed 32 characters.
final
hashCode → int
The hash code for this object.
no setterinherited
inlineCertificateIssuanceConfig → Input<WorkloadIdentityPoolInlineCertificateIssuanceConfig?>?
Represents configuration for generating mutual TLS (mTLS) certificates for the identities within this pool. Defines the Certificate Authority (CA) pool resources and configurations required for issuance and rotation of mTLS workload certificates. Structure is documented below.
final
inlineTrustConfig → Input<WorkloadIdentityPoolInlineTrustConfig?>?
Represents config to add additional trusted trust domains. Defines configuration for extending trust to additional trust domains. By establishing trust with another domain, the current domain will recognize and accept certificates issued by entities within the trusted domains. Note that a trust domain automatically trusts itself, eliminating the need for explicit configuration. Structure is documented below.
final
mode → Input<String?>?
The mode for the pool is operating in. Pools with an unspecified mode will operate as if they are in FEDERATION_ONLY mode. > Note This field cannot be changed after the Workload Identity Pool is created. While pulumi preview may show an update if you change this field's value, pulumi up will fail with an API error (such as Error 400: Attempted to update an immutable field.). To specify a different mode, please create a new Workload Identity Pool resource.
final
project → Input<String?>?
The ID of the project in which the resource belongs. If it is not provided, the provider project is used.
final
runtimeType → Type
A representation of the runtime type of the object.
no setterinherited
workloadIdentityPoolId → Input<String>
The ID to use for the pool, which becomes the final component of the resource name. This value should be 4-32 characters, and may contain the characters a-z0-9-. The prefix gcp- is reserved for use by Google, and may not be specified.
final

Methods

noSuchMethod(Invocation invocation) → dynamic
Invoked when a nonexistent method or property is accessed.
inherited
toMap() → Map<String, dynamic>
toString() → String
A string representation of this object.
inherited

Operators

operator ==(Object other) → bool
The equality operator.
inherited