Docs Home Pulumi IaC Pulumi ESC Pulumi Cloud Packages Tutorials
  1. Packages
  2. Google Cloud Native
  3. API Docs
  4. gkehub
  5. gkehub/v1alpha
  6. MembershipRbacRoleBinding

Google Cloud Native is in preview. Google Cloud Classic is fully supported.

Google Cloud Native v0.32.0 published on Wednesday, Nov 29, 2023 by Pulumi
pulumi/pulumi-google-native

google-native.gkehub/v1alpha.MembershipRbacRoleBinding

Explore with Pulumi AI

Google Cloud Native is in preview. Google Cloud Classic is fully supported.

Google Cloud Native v0.32.0 published on Wednesday, Nov 29, 2023 by Pulumi
pulumi/pulumi-google-native

Creates a Membership RBACRoleBinding. Auto-naming is currently not supported for this resource.

Create MembershipRbacRoleBinding Resource

Resources are created with functions called constructors. To learn more about declaring and configuring resources, see Resources.

Constructor syntax

new MembershipRbacRoleBinding(name: string, args: MembershipRbacRoleBindingArgs, opts?: CustomResourceOptions);
@overload
def MembershipRbacRoleBinding(resource_name: str,
                              args: MembershipRbacRoleBindingArgs,
                              opts: Optional[ResourceOptions] = None)

@overload
def MembershipRbacRoleBinding(resource_name: str,
                              opts: Optional[ResourceOptions] = None,
                              membership_id: Optional[str] = None,
                              rbacrolebinding_id: Optional[str] = None,
                              role: Optional[RoleArgs] = None,
                              group: Optional[str] = None,
                              labels: Optional[Mapping[str, str]] = None,
                              location: Optional[str] = None,
                              name: Optional[str] = None,
                              project: Optional[str] = None,
                              user: Optional[str] = None)
func NewMembershipRbacRoleBinding(ctx *Context, name string, args MembershipRbacRoleBindingArgs, opts ...ResourceOption) (*MembershipRbacRoleBinding, error)
public MembershipRbacRoleBinding(string name, MembershipRbacRoleBindingArgs args, CustomResourceOptions? opts = null)
public MembershipRbacRoleBinding(String name, MembershipRbacRoleBindingArgs args)
public MembershipRbacRoleBinding(String name, MembershipRbacRoleBindingArgs args, CustomResourceOptions options)

type: google-native:gkehub/v1alpha:MembershipRbacRoleBinding
properties: # The arguments to resource properties.
options: # Bag of options to control resource's behavior.

Parameters

name This property is required. string
The unique name of the resource.
args This property is required. MembershipRbacRoleBindingArgs
The arguments to resource properties.
opts CustomResourceOptions
Bag of options to control resource's behavior.
resource_name This property is required. str
The unique name of the resource.
args This property is required. MembershipRbacRoleBindingArgs
The arguments to resource properties.
opts ResourceOptions
Bag of options to control resource's behavior.
ctx Context
Context object for the current deployment.
name This property is required. string
The unique name of the resource.
args This property is required. MembershipRbacRoleBindingArgs
The arguments to resource properties.
opts ResourceOption
Bag of options to control resource's behavior.
name This property is required. string
The unique name of the resource.
args This property is required. MembershipRbacRoleBindingArgs
The arguments to resource properties.
opts CustomResourceOptions
Bag of options to control resource's behavior.
name This property is required. String
The unique name of the resource.
args This property is required. MembershipRbacRoleBindingArgs
The arguments to resource properties.
options CustomResourceOptions
Bag of options to control resource's behavior.

Constructor example

The following reference example uses placeholder values for all input properties.

var membershipRbacRoleBindingResource = new GoogleNative.GKEHub.V1Alpha.MembershipRbacRoleBinding("membershipRbacRoleBindingResource", new()
{
    MembershipId = "string",
    RbacrolebindingId = "string",
    Role = new GoogleNative.GKEHub.V1Alpha.Inputs.RoleArgs
    {
        PredefinedRole = GoogleNative.GKEHub.V1Alpha.RolePredefinedRole.Unknown,
    },
    Group = "string",
    Labels = 
    {
        { "string", "string" },
    },
    Location = "string",
    Name = "string",
    Project = "string",
    User = "string",
});
Copy
example, err := gkehubv1alpha.NewMembershipRbacRoleBinding(ctx, "membershipRbacRoleBindingResource", &gkehubv1alpha.MembershipRbacRoleBindingArgs{
	MembershipId:      pulumi.String("string"),
	RbacrolebindingId: pulumi.String("string"),
	Role: &gkehub.RoleArgs{
		PredefinedRole: gkehubv1alpha.RolePredefinedRoleUnknown,
	},
	Group: pulumi.String("string"),
	Labels: pulumi.StringMap{
		"string": pulumi.String("string"),
	},
	Location: pulumi.String("string"),
	Name:     pulumi.String("string"),
	Project:  pulumi.String("string"),
	User:     pulumi.String("string"),
})
Copy
var membershipRbacRoleBindingResource = new MembershipRbacRoleBinding("membershipRbacRoleBindingResource", MembershipRbacRoleBindingArgs.builder()
    .membershipId("string")
    .rbacrolebindingId("string")
    .role(RoleArgs.builder()
        .predefinedRole("UNKNOWN")
        .build())
    .group("string")
    .labels(Map.of("string", "string"))
    .location("string")
    .name("string")
    .project("string")
    .user("string")
    .build());
Copy
membership_rbac_role_binding_resource = google_native.gkehub.v1alpha.MembershipRbacRoleBinding("membershipRbacRoleBindingResource",
    membership_id="string",
    rbacrolebinding_id="string",
    role={
        "predefined_role": google_native.gkehub.v1alpha.RolePredefinedRole.UNKNOWN,
    },
    group="string",
    labels={
        "string": "string",
    },
    location="string",
    name="string",
    project="string",
    user="string")
Copy
const membershipRbacRoleBindingResource = new google_native.gkehub.v1alpha.MembershipRbacRoleBinding("membershipRbacRoleBindingResource", {
    membershipId: "string",
    rbacrolebindingId: "string",
    role: {
        predefinedRole: google_native.gkehub.v1alpha.RolePredefinedRole.Unknown,
    },
    group: "string",
    labels: {
        string: "string",
    },
    location: "string",
    name: "string",
    project: "string",
    user: "string",
});
Copy
type: google-native:gkehub/v1alpha:MembershipRbacRoleBinding
properties:
    group: string
    labels:
        string: string
    location: string
    membershipId: string
    name: string
    project: string
    rbacrolebindingId: string
    role:
        predefinedRole: UNKNOWN
    user: string
Copy

MembershipRbacRoleBinding Resource Properties

To learn more about resource properties and how to use them, see Inputs and Outputs in the Architecture and Concepts docs.

Inputs

In Python, inputs that are objects can be passed either as argument classes or as dictionary literals.

The MembershipRbacRoleBinding resource accepts the following input properties:

MembershipId
This property is required.
Changes to this property will trigger replacement.
string
RbacrolebindingId
This property is required.
Changes to this property will trigger replacement.
string
Required. Client chosen ID for the RBACRoleBinding. rbacrolebinding_id must be a valid RFC 1123 compliant DNS label: 1. At most 63 characters in length 2. It must consist of lower case alphanumeric characters or - 3. It must start and end with an alphanumeric character Which can be expressed as the regex: [a-z0-9]([-a-z0-9]*[a-z0-9])?, with a maximum length of 63 characters.
Role This property is required. Pulumi.GoogleNative.GKEHub.V1Alpha.Inputs.Role
Role to bind to the principal
Group string
group is the group, as seen by the kubernetes cluster.
Labels Dictionary<string, string>
Optional. Labels for this RBACRolebinding.
Location Changes to this property will trigger replacement. string
Name string
The resource name for the rbacrolebinding projects/{project}/locations/{location}/scopes/{scope}/rbacrolebindings/{rbacrolebinding} or projects/{project}/locations/{location}/memberships/{membership}/rbacrolebindings/{rbacrolebinding}
Project Changes to this property will trigger replacement. string
User string
user is the name of the user as seen by the kubernetes cluster, example "alice" or "alice@domain.tld"
MembershipId
This property is required.
Changes to this property will trigger replacement.
string
RbacrolebindingId
This property is required.
Changes to this property will trigger replacement.
string
Required. Client chosen ID for the RBACRoleBinding. rbacrolebinding_id must be a valid RFC 1123 compliant DNS label: 1. At most 63 characters in length 2. It must consist of lower case alphanumeric characters or - 3. It must start and end with an alphanumeric character Which can be expressed as the regex: [a-z0-9]([-a-z0-9]*[a-z0-9])?, with a maximum length of 63 characters.
Role This property is required. RoleArgs
Role to bind to the principal
Group string
group is the group, as seen by the kubernetes cluster.
Labels map[string]string
Optional. Labels for this RBACRolebinding.
Location Changes to this property will trigger replacement. string
Name string
The resource name for the rbacrolebinding projects/{project}/locations/{location}/scopes/{scope}/rbacrolebindings/{rbacrolebinding} or projects/{project}/locations/{location}/memberships/{membership}/rbacrolebindings/{rbacrolebinding}
Project Changes to this property will trigger replacement. string
User string
user is the name of the user as seen by the kubernetes cluster, example "alice" or "alice@domain.tld"
membershipId
This property is required.
Changes to this property will trigger replacement.
String
rbacrolebindingId
This property is required.
Changes to this property will trigger replacement.
String
Required. Client chosen ID for the RBACRoleBinding. rbacrolebinding_id must be a valid RFC 1123 compliant DNS label: 1. At most 63 characters in length 2. It must consist of lower case alphanumeric characters or - 3. It must start and end with an alphanumeric character Which can be expressed as the regex: [a-z0-9]([-a-z0-9]*[a-z0-9])?, with a maximum length of 63 characters.
role This property is required. Role
Role to bind to the principal
group String
group is the group, as seen by the kubernetes cluster.
labels Map<String,String>
Optional. Labels for this RBACRolebinding.
location Changes to this property will trigger replacement. String
name String
The resource name for the rbacrolebinding projects/{project}/locations/{location}/scopes/{scope}/rbacrolebindings/{rbacrolebinding} or projects/{project}/locations/{location}/memberships/{membership}/rbacrolebindings/{rbacrolebinding}
project Changes to this property will trigger replacement. String
user String
user is the name of the user as seen by the kubernetes cluster, example "alice" or "alice@domain.tld"
membershipId
This property is required.
Changes to this property will trigger replacement.
string
rbacrolebindingId
This property is required.
Changes to this property will trigger replacement.
string
Required. Client chosen ID for the RBACRoleBinding. rbacrolebinding_id must be a valid RFC 1123 compliant DNS label: 1. At most 63 characters in length 2. It must consist of lower case alphanumeric characters or - 3. It must start and end with an alphanumeric character Which can be expressed as the regex: [a-z0-9]([-a-z0-9]*[a-z0-9])?, with a maximum length of 63 characters.
role This property is required. Role
Role to bind to the principal
group string
group is the group, as seen by the kubernetes cluster.
labels {[key: string]: string}
Optional. Labels for this RBACRolebinding.
location Changes to this property will trigger replacement. string
name string
The resource name for the rbacrolebinding projects/{project}/locations/{location}/scopes/{scope}/rbacrolebindings/{rbacrolebinding} or projects/{project}/locations/{location}/memberships/{membership}/rbacrolebindings/{rbacrolebinding}
project Changes to this property will trigger replacement. string
user string
user is the name of the user as seen by the kubernetes cluster, example "alice" or "alice@domain.tld"
membership_id
This property is required.
Changes to this property will trigger replacement.
str
rbacrolebinding_id
This property is required.
Changes to this property will trigger replacement.
str
Required. Client chosen ID for the RBACRoleBinding. rbacrolebinding_id must be a valid RFC 1123 compliant DNS label: 1. At most 63 characters in length 2. It must consist of lower case alphanumeric characters or - 3. It must start and end with an alphanumeric character Which can be expressed as the regex: [a-z0-9]([-a-z0-9]*[a-z0-9])?, with a maximum length of 63 characters.
role This property is required. RoleArgs
Role to bind to the principal
group str
group is the group, as seen by the kubernetes cluster.
labels Mapping[str, str]
Optional. Labels for this RBACRolebinding.
location Changes to this property will trigger replacement. str
name str
The resource name for the rbacrolebinding projects/{project}/locations/{location}/scopes/{scope}/rbacrolebindings/{rbacrolebinding} or projects/{project}/locations/{location}/memberships/{membership}/rbacrolebindings/{rbacrolebinding}
project Changes to this property will trigger replacement. str
user str
user is the name of the user as seen by the kubernetes cluster, example "alice" or "alice@domain.tld"
membershipId
This property is required.
Changes to this property will trigger replacement.
String
rbacrolebindingId
This property is required.
Changes to this property will trigger replacement.
String
Required. Client chosen ID for the RBACRoleBinding. rbacrolebinding_id must be a valid RFC 1123 compliant DNS label: 1. At most 63 characters in length 2. It must consist of lower case alphanumeric characters or - 3. It must start and end with an alphanumeric character Which can be expressed as the regex: [a-z0-9]([-a-z0-9]*[a-z0-9])?, with a maximum length of 63 characters.
role This property is required. Property Map
Role to bind to the principal
group String
group is the group, as seen by the kubernetes cluster.
labels Map<String>
Optional. Labels for this RBACRolebinding.
location Changes to this property will trigger replacement. String
name String
The resource name for the rbacrolebinding projects/{project}/locations/{location}/scopes/{scope}/rbacrolebindings/{rbacrolebinding} or projects/{project}/locations/{location}/memberships/{membership}/rbacrolebindings/{rbacrolebinding}
project Changes to this property will trigger replacement. String
user String
user is the name of the user as seen by the kubernetes cluster, example "alice" or "alice@domain.tld"

Outputs

All input properties are implicitly available as output properties. Additionally, the MembershipRbacRoleBinding resource produces the following output properties:

CreateTime string
When the rbacrolebinding was created.
DeleteTime string
When the rbacrolebinding was deleted.
Id string
The provider-assigned unique ID for this managed resource.
State Pulumi.GoogleNative.GKEHub.V1Alpha.Outputs.RBACRoleBindingLifecycleStateResponse
State of the rbacrolebinding resource.
Uid string
Google-generated UUID for this resource. This is unique across all rbacrolebinding resources. If a rbacrolebinding resource is deleted and another resource with the same name is created, it gets a different uid.
UpdateTime string
When the rbacrolebinding was last updated.
CreateTime string
When the rbacrolebinding was created.
DeleteTime string
When the rbacrolebinding was deleted.
Id string
The provider-assigned unique ID for this managed resource.
State RBACRoleBindingLifecycleStateResponse
State of the rbacrolebinding resource.
Uid string
Google-generated UUID for this resource. This is unique across all rbacrolebinding resources. If a rbacrolebinding resource is deleted and another resource with the same name is created, it gets a different uid.
UpdateTime string
When the rbacrolebinding was last updated.
createTime String
When the rbacrolebinding was created.
deleteTime String
When the rbacrolebinding was deleted.
id String
The provider-assigned unique ID for this managed resource.
state RBACRoleBindingLifecycleStateResponse
State of the rbacrolebinding resource.
uid String
Google-generated UUID for this resource. This is unique across all rbacrolebinding resources. If a rbacrolebinding resource is deleted and another resource with the same name is created, it gets a different uid.
updateTime String
When the rbacrolebinding was last updated.
createTime string
When the rbacrolebinding was created.
deleteTime string
When the rbacrolebinding was deleted.
id string
The provider-assigned unique ID for this managed resource.
state RBACRoleBindingLifecycleStateResponse
State of the rbacrolebinding resource.
uid string
Google-generated UUID for this resource. This is unique across all rbacrolebinding resources. If a rbacrolebinding resource is deleted and another resource with the same name is created, it gets a different uid.
updateTime string
When the rbacrolebinding was last updated.
create_time str
When the rbacrolebinding was created.
delete_time str
When the rbacrolebinding was deleted.
id str
The provider-assigned unique ID for this managed resource.
state RBACRoleBindingLifecycleStateResponse
State of the rbacrolebinding resource.
uid str
Google-generated UUID for this resource. This is unique across all rbacrolebinding resources. If a rbacrolebinding resource is deleted and another resource with the same name is created, it gets a different uid.
update_time str
When the rbacrolebinding was last updated.
createTime String
When the rbacrolebinding was created.
deleteTime String
When the rbacrolebinding was deleted.
id String
The provider-assigned unique ID for this managed resource.
state Property Map
State of the rbacrolebinding resource.
uid String
Google-generated UUID for this resource. This is unique across all rbacrolebinding resources. If a rbacrolebinding resource is deleted and another resource with the same name is created, it gets a different uid.
updateTime String
When the rbacrolebinding was last updated.

Supporting Types

RBACRoleBindingLifecycleStateResponse
, RBACRoleBindingLifecycleStateResponseArgs

Code This property is required. string
The current state of the rbacrolebinding resource.
Code This property is required. string
The current state of the rbacrolebinding resource.
code This property is required. String
The current state of the rbacrolebinding resource.
code This property is required. string
The current state of the rbacrolebinding resource.
code This property is required. str
The current state of the rbacrolebinding resource.
code This property is required. String
The current state of the rbacrolebinding resource.

Role
, RoleArgs

PredefinedRole Pulumi.GoogleNative.GKEHub.V1Alpha.RolePredefinedRole
predefined_role is the Kubernetes default role to use
PredefinedRole RolePredefinedRole
predefined_role is the Kubernetes default role to use
predefinedRole RolePredefinedRole
predefined_role is the Kubernetes default role to use
predefinedRole RolePredefinedRole
predefined_role is the Kubernetes default role to use
predefined_role RolePredefinedRole
predefined_role is the Kubernetes default role to use
predefinedRole "UNKNOWN" | "ADMIN" | "EDIT" | "VIEW" | "ANTHOS_SUPPORT"
predefined_role is the Kubernetes default role to use

RolePredefinedRole
, RolePredefinedRoleArgs

Unknown
UNKNOWNUNKNOWN
Admin
ADMINADMIN has EDIT and RBAC permissions
Edit
EDITEDIT can edit all resources except RBAC
View
VIEWVIEW can only read resources
AnthosSupport
ANTHOS_SUPPORTANTHOS_SUPPORT gives Google Support read-only access to a number of cluster resources.
RolePredefinedRoleUnknown
UNKNOWNUNKNOWN
RolePredefinedRoleAdmin
ADMINADMIN has EDIT and RBAC permissions
RolePredefinedRoleEdit
EDITEDIT can edit all resources except RBAC
RolePredefinedRoleView
VIEWVIEW can only read resources
RolePredefinedRoleAnthosSupport
ANTHOS_SUPPORTANTHOS_SUPPORT gives Google Support read-only access to a number of cluster resources.
Unknown
UNKNOWNUNKNOWN
Admin
ADMINADMIN has EDIT and RBAC permissions
Edit
EDITEDIT can edit all resources except RBAC
View
VIEWVIEW can only read resources
AnthosSupport
ANTHOS_SUPPORTANTHOS_SUPPORT gives Google Support read-only access to a number of cluster resources.
Unknown
UNKNOWNUNKNOWN
Admin
ADMINADMIN has EDIT and RBAC permissions
Edit
EDITEDIT can edit all resources except RBAC
View
VIEWVIEW can only read resources
AnthosSupport
ANTHOS_SUPPORTANTHOS_SUPPORT gives Google Support read-only access to a number of cluster resources.
UNKNOWN
UNKNOWNUNKNOWN
ADMIN
ADMINADMIN has EDIT and RBAC permissions
EDIT
EDITEDIT can edit all resources except RBAC
VIEW
VIEWVIEW can only read resources
ANTHOS_SUPPORT
ANTHOS_SUPPORTANTHOS_SUPPORT gives Google Support read-only access to a number of cluster resources.
"UNKNOWN"
UNKNOWNUNKNOWN
"ADMIN"
ADMINADMIN has EDIT and RBAC permissions
"EDIT"
EDITEDIT can edit all resources except RBAC
"VIEW"
VIEWVIEW can only read resources
"ANTHOS_SUPPORT"
ANTHOS_SUPPORTANTHOS_SUPPORT gives Google Support read-only access to a number of cluster resources.

RoleResponse
, RoleResponseArgs

PredefinedRole This property is required. string
predefined_role is the Kubernetes default role to use
PredefinedRole This property is required. string
predefined_role is the Kubernetes default role to use
predefinedRole This property is required. String
predefined_role is the Kubernetes default role to use
predefinedRole This property is required. string
predefined_role is the Kubernetes default role to use
predefined_role This property is required. str
predefined_role is the Kubernetes default role to use
predefinedRole This property is required. String
predefined_role is the Kubernetes default role to use

Package Details

Repository
Google Cloud Native pulumi/pulumi-google-native
License
Apache-2.0

Google Cloud Native is in preview. Google Cloud Classic is fully supported.

Google Cloud Native v0.32.0 published on Wednesday, Nov 29, 2023 by Pulumi
pulumi/pulumi-google-native