iap library

Classes

Binding
Associates members, or principals, with a role.
BindingIapV1beta1
Associates members, or principals, with a role.
BindingResponse
Associates members, or principals, with a role.
BindingResponseIapV1beta1
Associates members, or principals, with a role.
Brand
Constructs a new OAuth brand for the project if one does not exist. The created brand is "internal only", meaning that OAuth clients created under it only accept requests from users who belong to the same Google Workspace organization as the project. The brand is created in an un-reviewed status. NOTE: The "internal only" status can be manually changed in the Google Cloud Console. Requires that a brand does not already exist for the project, and that the specified support email is owned by the caller. Auto-naming is currently not supported for this resource. Note - this resource's API doesn't support deletion. When deleted, the resource will persist on Google Cloud even though it will be deleted from Pulumi state.
BrandArgs
The set of arguments for Brand. The set of arguments for Brand.
DestGroup
Creates a new TunnelDestGroup.
DestGroupArgs
The set of arguments for DestGroup. The set of arguments for DestGroup.
Expr
Represents a textual expression in the Common Expression Language (CEL) syntax. CEL is a C-like expression language. The syntax and semantics of CEL are documented at https://github.com/google/cel-spec. Example (Comparison): title: "Summary size limit" description: "Determines if a summary is less than 100 chars" expression: "document.summary.size() < 100" Example (Equality): title: "Requestor is owner" description: "Determines if requestor is the document owner" expression: "document.owner == request.auth.claims.email" Example (Logic): title: "Public documents" description: "Determine whether the document should be publicly visible" expression: "document.type != 'private' && document.type != 'internal'" Example (Data Manipulation): title: "Notification string" description: "Create a notification string with a timestamp." expression: "'New message received at ' + string(document.create_time)" The exact variables and functions that may be referenced within an expression are determined by the service that evaluates it. See the service documentation for additional information.
ExprIapV1beta1
Represents a textual expression in the Common Expression Language (CEL) syntax. CEL is a C-like expression language. The syntax and semantics of CEL are documented at https://github.com/google/cel-spec. Example (Comparison): title: "Summary size limit" description: "Determines if a summary is less than 100 chars" expression: "document.summary.size() < 100" Example (Equality): title: "Requestor is owner" description: "Determines if requestor is the document owner" expression: "document.owner == request.auth.claims.email" Example (Logic): title: "Public documents" description: "Determine whether the document should be publicly visible" expression: "document.type != 'private' && document.type != 'internal'" Example (Data Manipulation): title: "Notification string" description: "Create a notification string with a timestamp." expression: "'New message received at ' + string(document.create_time)" The exact variables and functions that may be referenced within an expression are determined by the service that evaluates it. See the service documentation for additional information.
ExprResponse
Represents a textual expression in the Common Expression Language (CEL) syntax. CEL is a C-like expression language. The syntax and semantics of CEL are documented at https://github.com/google/cel-spec. Example (Comparison): title: "Summary size limit" description: "Determines if a summary is less than 100 chars" expression: "document.summary.size() < 100" Example (Equality): title: "Requestor is owner" description: "Determines if requestor is the document owner" expression: "document.owner == request.auth.claims.email" Example (Logic): title: "Public documents" description: "Determine whether the document should be publicly visible" expression: "document.type != 'private' && document.type != 'internal'" Example (Data Manipulation): title: "Notification string" description: "Create a notification string with a timestamp." expression: "'New message received at ' + string(document.create_time)" The exact variables and functions that may be referenced within an expression are determined by the service that evaluates it. See the service documentation for additional information.
ExprResponseIapV1beta1
Represents a textual expression in the Common Expression Language (CEL) syntax. CEL is a C-like expression language. The syntax and semantics of CEL are documented at https://github.com/google/cel-spec. Example (Comparison): title: "Summary size limit" description: "Determines if a summary is less than 100 chars" expression: "document.summary.size() < 100" Example (Equality): title: "Requestor is owner" description: "Determines if requestor is the document owner" expression: "document.owner == request.auth.claims.email" Example (Logic): title: "Public documents" description: "Determine whether the document should be publicly visible" expression: "document.type != 'private' && document.type != 'internal'" Example (Data Manipulation): title: "Notification string" description: "Create a notification string with a timestamp." expression: "'New message received at ' + string(document.create_time)" The exact variables and functions that may be referenced within an expression are determined by the service that evaluates it. See the service documentation for additional information.
GetBrandArgs
Arguments for getBrand. Arguments for getBrand.
GetBrandResult
Result data returned by getBrand.
GetDestGroupArgs
Arguments for getDestGroup. Arguments for getDestGroup.
GetDestGroupResult
Result data returned by getDestGroup.
GetIdentityAwareProxyClientArgs
Arguments for getIdentityAwareProxyClient. Arguments for getIdentityAwareProxyClient.
GetIdentityAwareProxyClientResult
Result data returned by getIdentityAwareProxyClient.
GetV1beta1IamPolicyArgs
Arguments for getV1beta1IamPolicy. Arguments for getV1beta1IamPolicy.
GetV1beta1IamPolicyResult
Result data returned by getV1beta1IamPolicy.
GetV1IamPolicyArgs
Arguments for getV1IamPolicy. Arguments for getV1IamPolicy.
GetV1IamPolicyResult
Result data returned by getV1IamPolicy.
IamBinding
Sets the access control policy for an Identity-Aware Proxy protected resource. Replaces any existing policy. More information about managing access via IAP can be found at: https://cloud.google.com/iap/docs/managing-access#managing_access_via_the_api
IamBindingArgs
The set of arguments for V1IamBinding. The set of arguments for V1IamBinding.
IamBindingIapV1beta1
Sets the access control policy for an Identity-Aware Proxy protected resource. Replaces any existing policy. More information about managing access via IAP can be found at: https://cloud.google.com/iap/docs/managing-access#managing_access_via_the_api
IamBindingIapV1beta1Args
The set of arguments for V1beta1IamBinding. The set of arguments for V1beta1IamBinding.
IamMember
Sets the access control policy for an Identity-Aware Proxy protected resource. Replaces any existing policy. More information about managing access via IAP can be found at: https://cloud.google.com/iap/docs/managing-access#managing_access_via_the_api
IamMemberArgs
The set of arguments for V1IamMember. The set of arguments for V1IamMember.
IamMemberIapV1beta1
Sets the access control policy for an Identity-Aware Proxy protected resource. Replaces any existing policy. More information about managing access via IAP can be found at: https://cloud.google.com/iap/docs/managing-access#managing_access_via_the_api
IamMemberIapV1beta1Args
The set of arguments for V1beta1IamMember. The set of arguments for V1beta1IamMember.
IamPolicy
Sets the access control policy for an Identity-Aware Proxy protected resource. Replaces any existing policy. More information about managing access via IAP can be found at: https://cloud.google.com/iap/docs/managing-access#managing_access_via_the_api Note - this resource's API doesn't support deletion. When deleted, the resource will persist on Google Cloud even though it will be deleted from Pulumi state.
IamPolicyArgs
The set of arguments for V1IamPolicy. The set of arguments for V1IamPolicy.
IamPolicyIapV1beta1
Sets the access control policy for an Identity-Aware Proxy protected resource. Replaces any existing policy. More information about managing access via IAP can be found at: https://cloud.google.com/iap/docs/managing-access#managing_access_via_the_api Note - this resource's API doesn't support deletion. When deleted, the resource will persist on Google Cloud even though it will be deleted from Pulumi state.
IamPolicyIapV1beta1Args
The set of arguments for V1beta1IamPolicy. The set of arguments for V1beta1IamPolicy.
IdentityAwareProxyClient
Creates an Identity Aware Proxy (IAP) OAuth client. The client is owned by IAP. Requires that the brand for the project exists and that it is set for internal-only use. Auto-naming is currently not supported for this resource.
IdentityAwareProxyClientArgs
The set of arguments for IdentityAwareProxyClient. The set of arguments for IdentityAwareProxyClient.

Functions

getBrand(GetBrandArgs args, {InvokeOptions? options}) → Future<GetBrandResult>
Retrieves the OAuth brand of the project. args Arguments passed to this invoke. Arguments for getBrand. options Invoke options controlling this call.
getDestGroup(GetDestGroupArgs args, {InvokeOptions? options}) → Future<GetDestGroupResult>
Retrieves an existing TunnelDestGroup. args Arguments passed to this invoke. Arguments for getDestGroup. options Invoke options controlling this call.
getIdentityAwareProxyClient(GetIdentityAwareProxyClientArgs args, {InvokeOptions? options}) → Future<GetIdentityAwareProxyClientResult>
Retrieves an Identity Aware Proxy (IAP) OAuth client. Requires that the client is owned by IAP. args Arguments passed to this invoke. Arguments for getIdentityAwareProxyClient. options Invoke options controlling this call.
getV1beta1IamPolicy(GetV1beta1IamPolicyArgs args, {InvokeOptions? options}) → Future<GetV1beta1IamPolicyResult>
Gets the access control policy for an Identity-Aware Proxy protected resource. More information about managing access via IAP can be found at: https://cloud.google.com/iap/docs/managing-access#managing_access_via_the_api args Arguments passed to this invoke. Arguments for getV1beta1IamPolicy. options Invoke options controlling this call.
getV1IamPolicy(GetV1IamPolicyArgs args, {InvokeOptions? options}) → Future<GetV1IamPolicyResult>
Gets the access control policy for an Identity-Aware Proxy protected resource. More information about managing access via IAP can be found at: https://cloud.google.com/iap/docs/managing-access#managing_access_via_the_api args Arguments passed to this invoke. Arguments for getV1IamPolicy. options Invoke options controlling this call.