WorkloadIdentityPoolProviderArgs class

The set of arguments for WorkloadIdentityPoolProvider. The set of arguments for WorkloadIdentityPoolProvider.

Constructors

WorkloadIdentityPoolProviderArgs({Input<String?>? attributeCondition, Input<Map<String, String>?>? attributeMapping, Input<WorkloadIdentityPoolProviderAws?>? aws, Input<String?>? deletionPolicy, Input<String?>? description, Input<bool?>? disabled, Input<String?>? displayName, Input<WorkloadIdentityPoolProviderOidc?>? oidc, Input<String?>? project, Input<WorkloadIdentityPoolProviderSaml?>? saml, required Input<String> workloadIdentityPoolId, required Input<String> workloadIdentityPoolProviderId, Input<WorkloadIdentityPoolProviderX509?>? x509})
Creates a new WorkloadIdentityPoolProviderArgs. attributeCondition A Common Expression Language expression, in attributeMapping Maps attributes from authentication credentials issued by an external identity provider aws An Amazon Web Services identity provider. Not compatible with the property oidc or saml. deletionPolicy Whether Terraform will be prevented from destroying the resource. Defaults to DELETE. description A description for the provider. Cannot exceed 256 characters. disabled Whether the provider is disabled. You cannot use a disabled provider to exchange tokens. displayName A display name for the provider. Cannot exceed 32 characters. oidc An OpenId Connect 1.0 identity provider. Not compatible with the property aws or saml. project The ID of the project in which the resource belongs. saml An SAML 2.0 identity provider. Not compatible with the property oidc or aws. workloadIdentityPoolId The ID used for the pool, which is the final component of the pool resource name. This workloadIdentityPoolProviderId The ID for the provider, which becomes the final component of the resource name. This x509 An X.509-type identity provider represents a CA. It is trusted to assert a
const
WorkloadIdentityPoolProviderArgs.fromMap(Map<String, dynamic> map)
factory

Properties

attributeCondition → Input<String?>?
A Common Expression Language expression, in plain text, to restrict what otherwise valid authentication credentials issued by the provider should not be accepted. The expression must output a boolean representing whether to allow the federation. The following keywords may be referenced in the expressions:
final
attributeMapping → Input<Map<String, String>?>?
Maps attributes from authentication credentials issued by an external identity provider to Google Cloud attributes, such as subject and segment. Each key must be a string specifying the Google Cloud IAM attribute to map to. The following keys are supported:
final
aws → Input<WorkloadIdentityPoolProviderAws?>?
An Amazon Web Services identity provider. Not compatible with the property oidc or saml. Structure is documented below.
final
deletionPolicy → Input<String?>?
Whether Terraform will be prevented from destroying the resource. Defaults to DELETE. When a 'terraform destroy' or 'pulumi up' would delete the resource, the command will fail if this field is set to "PREVENT" in Terraform state. When set to "ABANDON", the command will remove the resource from Terraform management without updating or deleting the resource in the API. When set to "DELETE", deleting the resource is allowed.
final
description → Input<String?>?
A description for the provider. Cannot exceed 256 characters.
final
disabled → Input<bool?>?
Whether the provider is disabled. You cannot use a disabled provider to exchange tokens. However, existing tokens still grant access.
final
displayName → Input<String?>?
A display name for the provider. Cannot exceed 32 characters.
final
hashCode → int
The hash code for this object.
no setterinherited
oidc → Input<WorkloadIdentityPoolProviderOidc?>?
An OpenId Connect 1.0 identity provider. Not compatible with the property aws or saml. Structure is documented below.
final
project → Input<String?>?
The ID of the project in which the resource belongs. If it is not provided, the provider project is used.
final
runtimeType → Type
A representation of the runtime type of the object.
no setterinherited
saml → Input<WorkloadIdentityPoolProviderSaml?>?
An SAML 2.0 identity provider. Not compatible with the property oidc or aws. Structure is documented below.
final
workloadIdentityPoolId → Input<String>
The ID used for the pool, which is the final component of the pool resource name. This value should be 4-32 characters, and may contain the characters a-z0-9-. The prefix gcp- is reserved for use by Google, and may not be specified.
final
workloadIdentityPoolProviderId → Input<String>
The ID for the provider, which becomes the final component of the resource name. This value must be 4-32 characters, and may contain the characters a-z0-9-. The prefix gcp- is reserved for use by Google, and may not be specified.
final
x509 → Input<WorkloadIdentityPoolProviderX509?>?
An X.509-type identity provider represents a CA. It is trusted to assert a client identity if the client has a certificate that chains up to this CA. Structure is documented below.
final

Methods

noSuchMethod(Invocation invocation) → dynamic
Invoked when a nonexistent method or property is accessed.
inherited
toMap() → Map<String, dynamic>
toString() → String
A string representation of this object.
inherited

Operators

operator ==(Object other) → bool
The equality operator.
inherited