published on Thursday, Oct 22, 2026 by Pulumi
published on Thursday, Oct 22, 2026 by Pulumi
Creates and manages an Aiven for Valkey™ service user. If this resource is missing (for example, after a service power off), it’s removed from the state and a new create plan is generated.
Example Usage
import * as pulumi from "@pulumi/pulumi";
import * as aiven from "@pulumi/aiven";
const exampleValkey = new aiven.Valkey("example_valkey", {
project: "my-project",
plan: "startup-4",
serviceName: "example-valkey-service",
});
const example = new aiven.ValkeyUser("example", {
project: exampleValkey.project,
serviceName: exampleValkey.serviceName,
username: "testuser",
passwordWo: "password123",
passwordWoVersion: 1,
valkeyAclCategories: [
"+@write",
"+@keyspace",
],
valkeyAclChannels: ["some*chan"],
valkeyAclCommands: [
"+set",
"+del",
"+expire",
"-flushall",
"-flushdb",
],
valkeyAclKeys: ["session:*"],
});
import pulumi
import pulumi_aiven as aiven
example_valkey = aiven.Valkey("example_valkey",
project="my-project",
plan="startup-4",
service_name="example-valkey-service")
example = aiven.ValkeyUser("example",
project=example_valkey.project,
service_name=example_valkey.service_name,
username="testuser",
password_wo="password123",
password_wo_version=1,
valkey_acl_categories=[
"+@write",
"+@keyspace",
],
valkey_acl_channels=["some*chan"],
valkey_acl_commands=[
"+set",
"+del",
"+expire",
"-flushall",
"-flushdb",
],
valkey_acl_keys=["session:*"])
package main
import (
"github.com/pulumi/pulumi-aiven/sdk/v6/go/aiven"
"github.com/pulumi/pulumi/sdk/v3/go/pulumi"
)
func main() {
pulumi.Run(func(ctx *pulumi.Context) error {
exampleValkey, err := aiven.NewValkey(ctx, "example_valkey", &aiven.ValkeyArgs{
Project: pulumi.String("my-project"),
Plan: pulumi.String("startup-4"),
ServiceName: pulumi.String("example-valkey-service"),
})
if err != nil {
return err
}
_, err = aiven.NewValkeyUser(ctx, "example", &aiven.ValkeyUserArgs{
Project: exampleValkey.Project,
ServiceName: exampleValkey.ServiceName,
Username: pulumi.String("testuser"),
PasswordWo: pulumi.String("password123"),
PasswordWoVersion: pulumi.Int(1),
ValkeyAclCategories: pulumi.StringArray{
pulumi.String("+@write"),
pulumi.String("+@keyspace"),
},
ValkeyAclChannels: pulumi.StringArray{
pulumi.String("some*chan"),
},
ValkeyAclCommands: pulumi.StringArray{
pulumi.String("+set"),
pulumi.String("+del"),
pulumi.String("+expire"),
pulumi.String("-flushall"),
pulumi.String("-flushdb"),
},
ValkeyAclKeys: pulumi.StringArray{
pulumi.String("session:*"),
},
})
if err != nil {
return err
}
return nil
})
}
using System.Collections.Generic;
using System.Linq;
using Pulumi;
using Aiven = Pulumi.Aiven;
return await Deployment.RunAsync(() =>
{
var exampleValkey = new Aiven.Valkey("example_valkey", new()
{
Project = "my-project",
Plan = "startup-4",
ServiceName = "example-valkey-service",
});
var example = new Aiven.ValkeyUser("example", new()
{
Project = exampleValkey.Project,
ServiceName = exampleValkey.ServiceName,
Username = "testuser",
PasswordWo = "password123",
PasswordWoVersion = 1,
ValkeyAclCategories = new[]
{
"+@write",
"+@keyspace",
},
ValkeyAclChannels = new[]
{
"some*chan",
},
ValkeyAclCommands = new[]
{
"+set",
"+del",
"+expire",
"-flushall",
"-flushdb",
},
ValkeyAclKeys = new[]
{
"session:*",
},
});
});
package generated_program;
import com.pulumi.Context;
import com.pulumi.Pulumi;
import com.pulumi.core.Output;
import com.pulumi.aiven.Valkey;
import com.pulumi.aiven.ValkeyArgs;
import com.pulumi.aiven.ValkeyUser;
import com.pulumi.aiven.ValkeyUserArgs;
import java.util.ArrayList;
import java.util.Arrays;
import java.util.Map;
import java.io.File;
import java.nio.file.Files;
import java.nio.file.Paths;
public class App {
public static void main(String[] args) {
Pulumi.run(App::stack);
}
public static void stack(Context ctx) {
var exampleValkey = new Valkey("exampleValkey", ValkeyArgs.builder()
.project("my-project")
.plan("startup-4")
.serviceName("example-valkey-service")
.build());
var example = new ValkeyUser("example", ValkeyUserArgs.builder()
.project(exampleValkey.project())
.serviceName(exampleValkey.serviceName())
.username("testuser")
.passwordWo("password123")
.passwordWoVersion(1)
.valkeyAclCategories(
"+@write",
"+@keyspace")
.valkeyAclChannels("some*chan")
.valkeyAclCommands(
"+set",
"+del",
"+expire",
"-flushall",
"-flushdb")
.valkeyAclKeys("session:*")
.build());
}
}
resources:
example:
type: aiven:ValkeyUser
properties:
project: ${exampleValkey.project}
serviceName: ${exampleValkey.serviceName}
username: testuser
passwordWo: password123
passwordWoVersion: 1
valkeyAclCategories:
- +@write
- +@keyspace
valkeyAclChannels:
- some*chan
valkeyAclCommands:
- +set
- +del
- +expire
- -flushall
- -flushdb
valkeyAclKeys: # /* COMPUTED FIELDS
# password_encryption_type = "md5"
# type = "foo"
# */
- session:*
exampleValkey:
type: aiven:Valkey
name: example_valkey
properties:
project: my-project
plan: startup-4
serviceName: example-valkey-service
terraform {
required_providers {
aiven = {
source = "pulumi/aiven"
}
}
}
resource "aiven_valkey_user" "example" {
lifecycle {
create_before_destroy = true
}
project = aiven_valkey.example_valkey.project
service_name = aiven_valkey.example_valkey.service_name
username = "testuser"
password_wo = "password123"
password_wo_version = 1
valkey_acl_categories = ["+@write", "+@keyspace"]
valkey_acl_channels = ["some*chan"]
valkey_acl_commands = ["+set", "+del", "+expire", "-flushall", "-flushdb"]
valkey_acl_keys = ["session:*"]
}
resource "aiven_valkey" "example_valkey" {
lifecycle {
create_before_destroy = true
}
project = "my-project"
plan = "startup-4"
service_name = "example-valkey-service"
}
Create ValkeyUser Resource
Resources are created with functions called constructors. To learn more about declaring and configuring resources, see Resources.
Constructor syntax
new ValkeyUser(name: string, args: ValkeyUserArgs, opts?: CustomResourceOptions);@overload
def ValkeyUser(resource_name: str,
args: ValkeyUserArgs,
opts: Optional[ResourceOptions] = None)
@overload
def ValkeyUser(resource_name: str,
opts: Optional[ResourceOptions] = None,
project: Optional[str] = None,
service_name: Optional[str] = None,
username: Optional[str] = None,
password: Optional[str] = None,
password_wo: Optional[str] = None,
password_wo_version: Optional[int] = None,
timeouts: Optional[ValkeyUserTimeoutsArgs] = None,
valkey_acl_categories: Optional[Sequence[str]] = None,
valkey_acl_channels: Optional[Sequence[str]] = None,
valkey_acl_commands: Optional[Sequence[str]] = None,
valkey_acl_keys: Optional[Sequence[str]] = None)func NewValkeyUser(ctx *Context, name string, args ValkeyUserArgs, opts ...ResourceOption) (*ValkeyUser, error)public ValkeyUser(string name, ValkeyUserArgs args, CustomResourceOptions? opts = null)
public ValkeyUser(String name, ValkeyUserArgs args)
public ValkeyUser(String name, ValkeyUserArgs args, CustomResourceOptions options)
type: aiven:ValkeyUser
properties: # The arguments to resource properties.
options: # Bag of options to control resource's behavior.
resource "aiven_valkey_user" "name" {
# resource properties
}Parameters
- name string
- The unique name of the resource.
- args ValkeyUserArgs
- The arguments to resource properties.
- opts CustomResourceOptions
- Bag of options to control resource's behavior.
- resource_name str
- The unique name of the resource.
- args ValkeyUserArgs
- The arguments to resource properties.
- opts ResourceOptions
- Bag of options to control resource's behavior.
- ctx Context
- Context object for the current deployment.
- name string
- The unique name of the resource.
- args ValkeyUserArgs
- The arguments to resource properties.
- opts ResourceOption
- Bag of options to control resource's behavior.
- name string
- The unique name of the resource.
- args ValkeyUserArgs
- The arguments to resource properties.
- opts CustomResourceOptions
- Bag of options to control resource's behavior.
- name String
- The unique name of the resource.
- args ValkeyUserArgs
- The arguments to resource properties.
- options CustomResourceOptions
- Bag of options to control resource's behavior.
Constructor example
The following reference example uses placeholder values for all input properties.
var valkeyUserResource = new Aiven.ValkeyUser("valkeyUserResource", new()
{
Project = "string",
ServiceName = "string",
Username = "string",
Password = "string",
PasswordWo = "string",
PasswordWoVersion = 0,
Timeouts = new Aiven.Inputs.ValkeyUserTimeoutsArgs
{
Create = "string",
Delete = "string",
Read = "string",
Update = "string",
},
ValkeyAclCategories = new[]
{
"string",
},
ValkeyAclChannels = new[]
{
"string",
},
ValkeyAclCommands = new[]
{
"string",
},
ValkeyAclKeys = new[]
{
"string",
},
});
example, err := aiven.NewValkeyUser(ctx, "valkeyUserResource", &aiven.ValkeyUserArgs{
Project: pulumi.String("string"),
ServiceName: pulumi.String("string"),
Username: pulumi.String("string"),
Password: pulumi.String("string"),
PasswordWo: pulumi.String("string"),
PasswordWoVersion: pulumi.Int(0),
Timeouts: &aiven.ValkeyUserTimeoutsArgs{
Create: pulumi.String("string"),
Delete: pulumi.String("string"),
Read: pulumi.String("string"),
Update: pulumi.String("string"),
},
ValkeyAclCategories: pulumi.StringArray{
pulumi.String("string"),
},
ValkeyAclChannels: pulumi.StringArray{
pulumi.String("string"),
},
ValkeyAclCommands: pulumi.StringArray{
pulumi.String("string"),
},
ValkeyAclKeys: pulumi.StringArray{
pulumi.String("string"),
},
})
resource "aiven_valkey_user" "valkeyUserResource" {
lifecycle {
create_before_destroy = true
}
project = "string"
service_name = "string"
username = "string"
password = "string"
password_wo = "string"
password_wo_version = 0
timeouts = {
create = "string"
delete = "string"
read = "string"
update = "string"
}
valkey_acl_categories = ["string"]
valkey_acl_channels = ["string"]
valkey_acl_commands = ["string"]
valkey_acl_keys = ["string"]
}
var valkeyUserResource = new ValkeyUser("valkeyUserResource", ValkeyUserArgs.builder()
.project("string")
.serviceName("string")
.username("string")
.password("string")
.passwordWo("string")
.passwordWoVersion(0)
.timeouts(ValkeyUserTimeoutsArgs.builder()
.create("string")
.delete("string")
.read("string")
.update("string")
.build())
.valkeyAclCategories("string")
.valkeyAclChannels("string")
.valkeyAclCommands("string")
.valkeyAclKeys("string")
.build());
valkey_user_resource = aiven.ValkeyUser("valkeyUserResource",
project="string",
service_name="string",
username="string",
password="string",
password_wo="string",
password_wo_version=0,
timeouts={
"create": "string",
"delete": "string",
"read": "string",
"update": "string",
},
valkey_acl_categories=["string"],
valkey_acl_channels=["string"],
valkey_acl_commands=["string"],
valkey_acl_keys=["string"])
const valkeyUserResource = new aiven.ValkeyUser("valkeyUserResource", {
project: "string",
serviceName: "string",
username: "string",
password: "string",
passwordWo: "string",
passwordWoVersion: 0,
timeouts: {
create: "string",
"delete": "string",
read: "string",
update: "string",
},
valkeyAclCategories: ["string"],
valkeyAclChannels: ["string"],
valkeyAclCommands: ["string"],
valkeyAclKeys: ["string"],
});
type: aiven:ValkeyUser
properties:
password: string
passwordWo: string
passwordWoVersion: 0
project: string
serviceName: string
timeouts:
create: string
delete: string
read: string
update: string
username: string
valkeyAclCategories:
- string
valkeyAclChannels:
- string
valkeyAclCommands:
- string
valkeyAclKeys:
- string
ValkeyUser Resource Properties
To learn more about resource properties and how to use them, see Inputs and Outputs in the Architecture and Concepts docs.
Inputs
In Python, inputs that are objects can be passed either as argument classes or as dictionary literals.
The ValkeyUser resource accepts the following input properties:
- Project string
- Project name. Changing this property forces recreation of the resource.
- Service
Name string - Service name. Changing this property forces recreation of the resource.
- Username string
- Service username. Maximum length:
64. Must match pattern:^[_A-Za-z0-9][-._A-Za-z0-9]{0,63}$. Changing this property forces recreation of the resource. - Password string
- The password of the service user (auto-generated if not provided). The field conflicts with
passwordWo. Length must be between8and256. - Password
Wo string - NOTE: This field is write-only and its value will not be updated in state as part of read operations.
The password of the service user (write-only, not stored in state). The field is required with
passwordWoVersion. The field conflicts withpassword. Length must be between8and256. - Password
Wo intVersion - Version number for
passwordWo. Increment this to rotate the password. The field is required withpasswordWo. Minimum value:1. - Timeouts
Valkey
User Timeouts - Valkey
Acl List<string>Categories - Allow or disallow command categories. To allow a category use the prefix
+@and to disallow use-@. See the Valkey documentation for details on the ACL feature. The field is required withvalkeyAclCommandsandvalkeyAclKeys. - Valkey
Acl List<string>Channels - Allows and disallows access to pub/sub channels. Entries are defined as standard glob patterns.
- Valkey
Acl List<string>Commands - Defines rules for individual commands. To allow a command use the prefix
+and to disallow use-. The field is required withvalkeyAclCategoriesandvalkeyAclKeys. - Valkey
Acl List<string>Keys - Key access rules. Entries are defined as standard glob patterns. The field is required with
valkeyAclCategoriesandvalkeyAclCommands.
- Project string
- Project name. Changing this property forces recreation of the resource.
- Service
Name string - Service name. Changing this property forces recreation of the resource.
- Username string
- Service username. Maximum length:
64. Must match pattern:^[_A-Za-z0-9][-._A-Za-z0-9]{0,63}$. Changing this property forces recreation of the resource. - Password string
- The password of the service user (auto-generated if not provided). The field conflicts with
passwordWo. Length must be between8and256. - Password
Wo string - NOTE: This field is write-only and its value will not be updated in state as part of read operations.
The password of the service user (write-only, not stored in state). The field is required with
passwordWoVersion. The field conflicts withpassword. Length must be between8and256. - Password
Wo intVersion - Version number for
passwordWo. Increment this to rotate the password. The field is required withpasswordWo. Minimum value:1. - Timeouts
Valkey
User Timeouts Args - Valkey
Acl []stringCategories - Allow or disallow command categories. To allow a category use the prefix
+@and to disallow use-@. See the Valkey documentation for details on the ACL feature. The field is required withvalkeyAclCommandsandvalkeyAclKeys. - Valkey
Acl []stringChannels - Allows and disallows access to pub/sub channels. Entries are defined as standard glob patterns.
- Valkey
Acl []stringCommands - Defines rules for individual commands. To allow a command use the prefix
+and to disallow use-. The field is required withvalkeyAclCategoriesandvalkeyAclKeys. - Valkey
Acl []stringKeys - Key access rules. Entries are defined as standard glob patterns. The field is required with
valkeyAclCategoriesandvalkeyAclCommands.
- project string
- Project name. Changing this property forces recreation of the resource.
- service_
name string - Service name. Changing this property forces recreation of the resource.
- username string
- Service username. Maximum length:
64. Must match pattern:^[_A-Za-z0-9][-._A-Za-z0-9]{0,63}$. Changing this property forces recreation of the resource. - password string
- The password of the service user (auto-generated if not provided). The field conflicts with
passwordWo. Length must be between8and256. - password_
wo string - NOTE: This field is write-only and its value will not be updated in state as part of read operations.
The password of the service user (write-only, not stored in state). The field is required with
passwordWoVersion. The field conflicts withpassword. Length must be between8and256. - password_
wo_ numberversion - Version number for
passwordWo. Increment this to rotate the password. The field is required withpasswordWo. Minimum value:1. - timeouts object
- valkey_
acl_ list(string)categories - Allow or disallow command categories. To allow a category use the prefix
+@and to disallow use-@. See the Valkey documentation for details on the ACL feature. The field is required withvalkeyAclCommandsandvalkeyAclKeys. - valkey_
acl_ list(string)channels - Allows and disallows access to pub/sub channels. Entries are defined as standard glob patterns.
- valkey_
acl_ list(string)commands - Defines rules for individual commands. To allow a command use the prefix
+and to disallow use-. The field is required withvalkeyAclCategoriesandvalkeyAclKeys. - valkey_
acl_ list(string)keys - Key access rules. Entries are defined as standard glob patterns. The field is required with
valkeyAclCategoriesandvalkeyAclCommands.
- project String
- Project name. Changing this property forces recreation of the resource.
- service
Name String - Service name. Changing this property forces recreation of the resource.
- username String
- Service username. Maximum length:
64. Must match pattern:^[_A-Za-z0-9][-._A-Za-z0-9]{0,63}$. Changing this property forces recreation of the resource. - password String
- The password of the service user (auto-generated if not provided). The field conflicts with
passwordWo. Length must be between8and256. - password
Wo String - NOTE: This field is write-only and its value will not be updated in state as part of read operations.
The password of the service user (write-only, not stored in state). The field is required with
passwordWoVersion. The field conflicts withpassword. Length must be between8and256. - password
Wo IntegerVersion - Version number for
passwordWo. Increment this to rotate the password. The field is required withpasswordWo. Minimum value:1. - timeouts
Valkey
User Timeouts - valkey
Acl List<String>Categories - Allow or disallow command categories. To allow a category use the prefix
+@and to disallow use-@. See the Valkey documentation for details on the ACL feature. The field is required withvalkeyAclCommandsandvalkeyAclKeys. - valkey
Acl List<String>Channels - Allows and disallows access to pub/sub channels. Entries are defined as standard glob patterns.
- valkey
Acl List<String>Commands - Defines rules for individual commands. To allow a command use the prefix
+and to disallow use-. The field is required withvalkeyAclCategoriesandvalkeyAclKeys. - valkey
Acl List<String>Keys - Key access rules. Entries are defined as standard glob patterns. The field is required with
valkeyAclCategoriesandvalkeyAclCommands.
- project string
- Project name. Changing this property forces recreation of the resource.
- service
Name string - Service name. Changing this property forces recreation of the resource.
- username string
- Service username. Maximum length:
64. Must match pattern:^[_A-Za-z0-9][-._A-Za-z0-9]{0,63}$. Changing this property forces recreation of the resource. - password string
- The password of the service user (auto-generated if not provided). The field conflicts with
passwordWo. Length must be between8and256. - password
Wo string - NOTE: This field is write-only and its value will not be updated in state as part of read operations.
The password of the service user (write-only, not stored in state). The field is required with
passwordWoVersion. The field conflicts withpassword. Length must be between8and256. - password
Wo numberVersion - Version number for
passwordWo. Increment this to rotate the password. The field is required withpasswordWo. Minimum value:1. - timeouts
Valkey
User Timeouts - valkey
Acl string[]Categories - Allow or disallow command categories. To allow a category use the prefix
+@and to disallow use-@. See the Valkey documentation for details on the ACL feature. The field is required withvalkeyAclCommandsandvalkeyAclKeys. - valkey
Acl string[]Channels - Allows and disallows access to pub/sub channels. Entries are defined as standard glob patterns.
- valkey
Acl string[]Commands - Defines rules for individual commands. To allow a command use the prefix
+and to disallow use-. The field is required withvalkeyAclCategoriesandvalkeyAclKeys. - valkey
Acl string[]Keys - Key access rules. Entries are defined as standard glob patterns. The field is required with
valkeyAclCategoriesandvalkeyAclCommands.
- project str
- Project name. Changing this property forces recreation of the resource.
- service_
name str - Service name. Changing this property forces recreation of the resource.
- username str
- Service username. Maximum length:
64. Must match pattern:^[_A-Za-z0-9][-._A-Za-z0-9]{0,63}$. Changing this property forces recreation of the resource. - password str
- The password of the service user (auto-generated if not provided). The field conflicts with
passwordWo. Length must be between8and256. - password_
wo str - NOTE: This field is write-only and its value will not be updated in state as part of read operations.
The password of the service user (write-only, not stored in state). The field is required with
passwordWoVersion. The field conflicts withpassword. Length must be between8and256. - password_
wo_ intversion - Version number for
passwordWo. Increment this to rotate the password. The field is required withpasswordWo. Minimum value:1. - timeouts
Valkey
User Timeouts Args - valkey_
acl_ Sequence[str]categories - Allow or disallow command categories. To allow a category use the prefix
+@and to disallow use-@. See the Valkey documentation for details on the ACL feature. The field is required withvalkeyAclCommandsandvalkeyAclKeys. - valkey_
acl_ Sequence[str]channels - Allows and disallows access to pub/sub channels. Entries are defined as standard glob patterns.
- valkey_
acl_ Sequence[str]commands - Defines rules for individual commands. To allow a command use the prefix
+and to disallow use-. The field is required withvalkeyAclCategoriesandvalkeyAclKeys. - valkey_
acl_ Sequence[str]keys - Key access rules. Entries are defined as standard glob patterns. The field is required with
valkeyAclCategoriesandvalkeyAclCommands.
- project String
- Project name. Changing this property forces recreation of the resource.
- service
Name String - Service name. Changing this property forces recreation of the resource.
- username String
- Service username. Maximum length:
64. Must match pattern:^[_A-Za-z0-9][-._A-Za-z0-9]{0,63}$. Changing this property forces recreation of the resource. - password String
- The password of the service user (auto-generated if not provided). The field conflicts with
passwordWo. Length must be between8and256. - password
Wo String - NOTE: This field is write-only and its value will not be updated in state as part of read operations.
The password of the service user (write-only, not stored in state). The field is required with
passwordWoVersion. The field conflicts withpassword. Length must be between8and256. - password
Wo NumberVersion - Version number for
passwordWo. Increment this to rotate the password. The field is required withpasswordWo. Minimum value:1. - timeouts Property Map
- valkey
Acl List<String>Categories - Allow or disallow command categories. To allow a category use the prefix
+@and to disallow use-@. See the Valkey documentation for details on the ACL feature. The field is required withvalkeyAclCommandsandvalkeyAclKeys. - valkey
Acl List<String>Channels - Allows and disallows access to pub/sub channels. Entries are defined as standard glob patterns.
- valkey
Acl List<String>Commands - Defines rules for individual commands. To allow a command use the prefix
+and to disallow use-. The field is required withvalkeyAclCategoriesandvalkeyAclKeys. - valkey
Acl List<String>Keys - Key access rules. Entries are defined as standard glob patterns. The field is required with
valkeyAclCategoriesandvalkeyAclCommands.
Outputs
All input properties are implicitly available as output properties. Additionally, the ValkeyUser resource produces the following output properties:
- Id string
- The provider-assigned unique ID for this managed resource.
- Password
Encryption stringType - The password hashing algorithm used for this PostgreSQL user, derived from the stored password hash. 'unknown' is reported when the hash is missing or uses an unrecognised format. The possible values are
md5,scram-sha-256andunknown. - Type string
- Account type.
- Id string
- The provider-assigned unique ID for this managed resource.
- Password
Encryption stringType - The password hashing algorithm used for this PostgreSQL user, derived from the stored password hash. 'unknown' is reported when the hash is missing or uses an unrecognised format. The possible values are
md5,scram-sha-256andunknown. - Type string
- Account type.
- id string
- The provider-assigned unique ID for this managed resource.
- password_
encryption_ stringtype - The password hashing algorithm used for this PostgreSQL user, derived from the stored password hash. 'unknown' is reported when the hash is missing or uses an unrecognised format. The possible values are
md5,scram-sha-256andunknown. - type string
- Account type.
- id String
- The provider-assigned unique ID for this managed resource.
- password
Encryption StringType - The password hashing algorithm used for this PostgreSQL user, derived from the stored password hash. 'unknown' is reported when the hash is missing or uses an unrecognised format. The possible values are
md5,scram-sha-256andunknown. - type String
- Account type.
- id string
- The provider-assigned unique ID for this managed resource.
- password
Encryption stringType - The password hashing algorithm used for this PostgreSQL user, derived from the stored password hash. 'unknown' is reported when the hash is missing or uses an unrecognised format. The possible values are
md5,scram-sha-256andunknown. - type string
- Account type.
- id str
- The provider-assigned unique ID for this managed resource.
- password_
encryption_ strtype - The password hashing algorithm used for this PostgreSQL user, derived from the stored password hash. 'unknown' is reported when the hash is missing or uses an unrecognised format. The possible values are
md5,scram-sha-256andunknown. - type str
- Account type.
- id String
- The provider-assigned unique ID for this managed resource.
- password
Encryption StringType - The password hashing algorithm used for this PostgreSQL user, derived from the stored password hash. 'unknown' is reported when the hash is missing or uses an unrecognised format. The possible values are
md5,scram-sha-256andunknown. - type String
- Account type.
Look up Existing ValkeyUser Resource
Get an existing ValkeyUser resource’s state with the given name, ID, and optional extra properties used to qualify the lookup.
public static get(name: string, id: Input<ID>, state?: ValkeyUserState, opts?: CustomResourceOptions): ValkeyUser@staticmethod
def get(resource_name: str,
id: str,
opts: Optional[ResourceOptions] = None,
password: Optional[str] = None,
password_encryption_type: Optional[str] = None,
password_wo: Optional[str] = None,
password_wo_version: Optional[int] = None,
project: Optional[str] = None,
service_name: Optional[str] = None,
timeouts: Optional[ValkeyUserTimeoutsArgs] = None,
type: Optional[str] = None,
username: Optional[str] = None,
valkey_acl_categories: Optional[Sequence[str]] = None,
valkey_acl_channels: Optional[Sequence[str]] = None,
valkey_acl_commands: Optional[Sequence[str]] = None,
valkey_acl_keys: Optional[Sequence[str]] = None) -> ValkeyUserfunc GetValkeyUser(ctx *Context, name string, id IDInput, state *ValkeyUserState, opts ...ResourceOption) (*ValkeyUser, error)public static ValkeyUser Get(string name, Input<string> id, ValkeyUserState? state, CustomResourceOptions? opts = null)public static ValkeyUser get(String name, Output<String> id, ValkeyUserState state, CustomResourceOptions options)resources: _: type: aiven:ValkeyUser get: id: ${id}import {
to = aiven_valkey_user.example
id = "${id}"
}
- name
- The unique name of the resulting resource.
- id
- The unique provider ID of the resource to lookup.
- state
- Any extra arguments used during the lookup.
- opts
- A bag of options that control this resource's behavior.
- resource_name
- The unique name of the resulting resource.
- id
- The unique provider ID of the resource to lookup.
- name
- The unique name of the resulting resource.
- id
- The unique provider ID of the resource to lookup.
- state
- Any extra arguments used during the lookup.
- opts
- A bag of options that control this resource's behavior.
- name
- The unique name of the resulting resource.
- id
- The unique provider ID of the resource to lookup.
- state
- Any extra arguments used during the lookup.
- opts
- A bag of options that control this resource's behavior.
- name
- The unique name of the resulting resource.
- id
- The unique provider ID of the resource to lookup.
- state
- Any extra arguments used during the lookup.
- opts
- A bag of options that control this resource's behavior.
- Password string
- The password of the service user (auto-generated if not provided). The field conflicts with
passwordWo. Length must be between8and256. - Password
Encryption stringType - The password hashing algorithm used for this PostgreSQL user, derived from the stored password hash. 'unknown' is reported when the hash is missing or uses an unrecognised format. The possible values are
md5,scram-sha-256andunknown. - Password
Wo string - NOTE: This field is write-only and its value will not be updated in state as part of read operations.
The password of the service user (write-only, not stored in state). The field is required with
passwordWoVersion. The field conflicts withpassword. Length must be between8and256. - Password
Wo intVersion - Version number for
passwordWo. Increment this to rotate the password. The field is required withpasswordWo. Minimum value:1. - Project string
- Project name. Changing this property forces recreation of the resource.
- Service
Name string - Service name. Changing this property forces recreation of the resource.
- Timeouts
Valkey
User Timeouts - Type string
- Account type.
- Username string
- Service username. Maximum length:
64. Must match pattern:^[_A-Za-z0-9][-._A-Za-z0-9]{0,63}$. Changing this property forces recreation of the resource. - Valkey
Acl List<string>Categories - Allow or disallow command categories. To allow a category use the prefix
+@and to disallow use-@. See the Valkey documentation for details on the ACL feature. The field is required withvalkeyAclCommandsandvalkeyAclKeys. - Valkey
Acl List<string>Channels - Allows and disallows access to pub/sub channels. Entries are defined as standard glob patterns.
- Valkey
Acl List<string>Commands - Defines rules for individual commands. To allow a command use the prefix
+and to disallow use-. The field is required withvalkeyAclCategoriesandvalkeyAclKeys. - Valkey
Acl List<string>Keys - Key access rules. Entries are defined as standard glob patterns. The field is required with
valkeyAclCategoriesandvalkeyAclCommands.
- Password string
- The password of the service user (auto-generated if not provided). The field conflicts with
passwordWo. Length must be between8and256. - Password
Encryption stringType - The password hashing algorithm used for this PostgreSQL user, derived from the stored password hash. 'unknown' is reported when the hash is missing or uses an unrecognised format. The possible values are
md5,scram-sha-256andunknown. - Password
Wo string - NOTE: This field is write-only and its value will not be updated in state as part of read operations.
The password of the service user (write-only, not stored in state). The field is required with
passwordWoVersion. The field conflicts withpassword. Length must be between8and256. - Password
Wo intVersion - Version number for
passwordWo. Increment this to rotate the password. The field is required withpasswordWo. Minimum value:1. - Project string
- Project name. Changing this property forces recreation of the resource.
- Service
Name string - Service name. Changing this property forces recreation of the resource.
- Timeouts
Valkey
User Timeouts Args - Type string
- Account type.
- Username string
- Service username. Maximum length:
64. Must match pattern:^[_A-Za-z0-9][-._A-Za-z0-9]{0,63}$. Changing this property forces recreation of the resource. - Valkey
Acl []stringCategories - Allow or disallow command categories. To allow a category use the prefix
+@and to disallow use-@. See the Valkey documentation for details on the ACL feature. The field is required withvalkeyAclCommandsandvalkeyAclKeys. - Valkey
Acl []stringChannels - Allows and disallows access to pub/sub channels. Entries are defined as standard glob patterns.
- Valkey
Acl []stringCommands - Defines rules for individual commands. To allow a command use the prefix
+and to disallow use-. The field is required withvalkeyAclCategoriesandvalkeyAclKeys. - Valkey
Acl []stringKeys - Key access rules. Entries are defined as standard glob patterns. The field is required with
valkeyAclCategoriesandvalkeyAclCommands.
- password string
- The password of the service user (auto-generated if not provided). The field conflicts with
passwordWo. Length must be between8and256. - password_
encryption_ stringtype - The password hashing algorithm used for this PostgreSQL user, derived from the stored password hash. 'unknown' is reported when the hash is missing or uses an unrecognised format. The possible values are
md5,scram-sha-256andunknown. - password_
wo string - NOTE: This field is write-only and its value will not be updated in state as part of read operations.
The password of the service user (write-only, not stored in state). The field is required with
passwordWoVersion. The field conflicts withpassword. Length must be between8and256. - password_
wo_ numberversion - Version number for
passwordWo. Increment this to rotate the password. The field is required withpasswordWo. Minimum value:1. - project string
- Project name. Changing this property forces recreation of the resource.
- service_
name string - Service name. Changing this property forces recreation of the resource.
- timeouts object
- type string
- Account type.
- username string
- Service username. Maximum length:
64. Must match pattern:^[_A-Za-z0-9][-._A-Za-z0-9]{0,63}$. Changing this property forces recreation of the resource. - valkey_
acl_ list(string)categories - Allow or disallow command categories. To allow a category use the prefix
+@and to disallow use-@. See the Valkey documentation for details on the ACL feature. The field is required withvalkeyAclCommandsandvalkeyAclKeys. - valkey_
acl_ list(string)channels - Allows and disallows access to pub/sub channels. Entries are defined as standard glob patterns.
- valkey_
acl_ list(string)commands - Defines rules for individual commands. To allow a command use the prefix
+and to disallow use-. The field is required withvalkeyAclCategoriesandvalkeyAclKeys. - valkey_
acl_ list(string)keys - Key access rules. Entries are defined as standard glob patterns. The field is required with
valkeyAclCategoriesandvalkeyAclCommands.
- password String
- The password of the service user (auto-generated if not provided). The field conflicts with
passwordWo. Length must be between8and256. - password
Encryption StringType - The password hashing algorithm used for this PostgreSQL user, derived from the stored password hash. 'unknown' is reported when the hash is missing or uses an unrecognised format. The possible values are
md5,scram-sha-256andunknown. - password
Wo String - NOTE: This field is write-only and its value will not be updated in state as part of read operations.
The password of the service user (write-only, not stored in state). The field is required with
passwordWoVersion. The field conflicts withpassword. Length must be between8and256. - password
Wo IntegerVersion - Version number for
passwordWo. Increment this to rotate the password. The field is required withpasswordWo. Minimum value:1. - project String
- Project name. Changing this property forces recreation of the resource.
- service
Name String - Service name. Changing this property forces recreation of the resource.
- timeouts
Valkey
User Timeouts - type String
- Account type.
- username String
- Service username. Maximum length:
64. Must match pattern:^[_A-Za-z0-9][-._A-Za-z0-9]{0,63}$. Changing this property forces recreation of the resource. - valkey
Acl List<String>Categories - Allow or disallow command categories. To allow a category use the prefix
+@and to disallow use-@. See the Valkey documentation for details on the ACL feature. The field is required withvalkeyAclCommandsandvalkeyAclKeys. - valkey
Acl List<String>Channels - Allows and disallows access to pub/sub channels. Entries are defined as standard glob patterns.
- valkey
Acl List<String>Commands - Defines rules for individual commands. To allow a command use the prefix
+and to disallow use-. The field is required withvalkeyAclCategoriesandvalkeyAclKeys. - valkey
Acl List<String>Keys - Key access rules. Entries are defined as standard glob patterns. The field is required with
valkeyAclCategoriesandvalkeyAclCommands.
- password string
- The password of the service user (auto-generated if not provided). The field conflicts with
passwordWo. Length must be between8and256. - password
Encryption stringType - The password hashing algorithm used for this PostgreSQL user, derived from the stored password hash. 'unknown' is reported when the hash is missing or uses an unrecognised format. The possible values are
md5,scram-sha-256andunknown. - password
Wo string - NOTE: This field is write-only and its value will not be updated in state as part of read operations.
The password of the service user (write-only, not stored in state). The field is required with
passwordWoVersion. The field conflicts withpassword. Length must be between8and256. - password
Wo numberVersion - Version number for
passwordWo. Increment this to rotate the password. The field is required withpasswordWo. Minimum value:1. - project string
- Project name. Changing this property forces recreation of the resource.
- service
Name string - Service name. Changing this property forces recreation of the resource.
- timeouts
Valkey
User Timeouts - type string
- Account type.
- username string
- Service username. Maximum length:
64. Must match pattern:^[_A-Za-z0-9][-._A-Za-z0-9]{0,63}$. Changing this property forces recreation of the resource. - valkey
Acl string[]Categories - Allow or disallow command categories. To allow a category use the prefix
+@and to disallow use-@. See the Valkey documentation for details on the ACL feature. The field is required withvalkeyAclCommandsandvalkeyAclKeys. - valkey
Acl string[]Channels - Allows and disallows access to pub/sub channels. Entries are defined as standard glob patterns.
- valkey
Acl string[]Commands - Defines rules for individual commands. To allow a command use the prefix
+and to disallow use-. The field is required withvalkeyAclCategoriesandvalkeyAclKeys. - valkey
Acl string[]Keys - Key access rules. Entries are defined as standard glob patterns. The field is required with
valkeyAclCategoriesandvalkeyAclCommands.
- password str
- The password of the service user (auto-generated if not provided). The field conflicts with
passwordWo. Length must be between8and256. - password_
encryption_ strtype - The password hashing algorithm used for this PostgreSQL user, derived from the stored password hash. 'unknown' is reported when the hash is missing or uses an unrecognised format. The possible values are
md5,scram-sha-256andunknown. - password_
wo str - NOTE: This field is write-only and its value will not be updated in state as part of read operations.
The password of the service user (write-only, not stored in state). The field is required with
passwordWoVersion. The field conflicts withpassword. Length must be between8and256. - password_
wo_ intversion - Version number for
passwordWo. Increment this to rotate the password. The field is required withpasswordWo. Minimum value:1. - project str
- Project name. Changing this property forces recreation of the resource.
- service_
name str - Service name. Changing this property forces recreation of the resource.
- timeouts
Valkey
User Timeouts Args - type str
- Account type.
- username str
- Service username. Maximum length:
64. Must match pattern:^[_A-Za-z0-9][-._A-Za-z0-9]{0,63}$. Changing this property forces recreation of the resource. - valkey_
acl_ Sequence[str]categories - Allow or disallow command categories. To allow a category use the prefix
+@and to disallow use-@. See the Valkey documentation for details on the ACL feature. The field is required withvalkeyAclCommandsandvalkeyAclKeys. - valkey_
acl_ Sequence[str]channels - Allows and disallows access to pub/sub channels. Entries are defined as standard glob patterns.
- valkey_
acl_ Sequence[str]commands - Defines rules for individual commands. To allow a command use the prefix
+and to disallow use-. The field is required withvalkeyAclCategoriesandvalkeyAclKeys. - valkey_
acl_ Sequence[str]keys - Key access rules. Entries are defined as standard glob patterns. The field is required with
valkeyAclCategoriesandvalkeyAclCommands.
- password String
- The password of the service user (auto-generated if not provided). The field conflicts with
passwordWo. Length must be between8and256. - password
Encryption StringType - The password hashing algorithm used for this PostgreSQL user, derived from the stored password hash. 'unknown' is reported when the hash is missing or uses an unrecognised format. The possible values are
md5,scram-sha-256andunknown. - password
Wo String - NOTE: This field is write-only and its value will not be updated in state as part of read operations.
The password of the service user (write-only, not stored in state). The field is required with
passwordWoVersion. The field conflicts withpassword. Length must be between8and256. - password
Wo NumberVersion - Version number for
passwordWo. Increment this to rotate the password. The field is required withpasswordWo. Minimum value:1. - project String
- Project name. Changing this property forces recreation of the resource.
- service
Name String - Service name. Changing this property forces recreation of the resource.
- timeouts Property Map
- type String
- Account type.
- username String
- Service username. Maximum length:
64. Must match pattern:^[_A-Za-z0-9][-._A-Za-z0-9]{0,63}$. Changing this property forces recreation of the resource. - valkey
Acl List<String>Categories - Allow or disallow command categories. To allow a category use the prefix
+@and to disallow use-@. See the Valkey documentation for details on the ACL feature. The field is required withvalkeyAclCommandsandvalkeyAclKeys. - valkey
Acl List<String>Channels - Allows and disallows access to pub/sub channels. Entries are defined as standard glob patterns.
- valkey
Acl List<String>Commands - Defines rules for individual commands. To allow a command use the prefix
+and to disallow use-. The field is required withvalkeyAclCategoriesandvalkeyAclKeys. - valkey
Acl List<String>Keys - Key access rules. Entries are defined as standard glob patterns. The field is required with
valkeyAclCategoriesandvalkeyAclCommands.
Supporting Types
ValkeyUserTimeouts, ValkeyUserTimeoutsArgs
- Create string
- A string that can be parsed as a duration consisting of numbers and unit suffixes, such as "30s" or "2h45m". Valid time units are "s" (seconds), "m" (minutes), "h" (hours).
- Default string
- Timeout for all operations. Deprecated, use operation-specific timeouts instead.
- Delete string
- A string that can be parsed as a duration consisting of numbers and unit suffixes, such as "30s" or "2h45m". Valid time units are "s" (seconds), "m" (minutes), "h" (hours). Setting a timeout for a Delete operation is only applicable if changes are saved into state before the destroy operation occurs.
- Read string
- A string that can be parsed as a duration consisting of numbers and unit suffixes, such as "30s" or "2h45m". Valid time units are "s" (seconds), "m" (minutes), "h" (hours). Read operations occur during any refresh or planning operation when refresh is enabled.
- Update string
- A string that can be parsed as a duration consisting of numbers and unit suffixes, such as "30s" or "2h45m". Valid time units are "s" (seconds), "m" (minutes), "h" (hours).
- Create string
- A string that can be parsed as a duration consisting of numbers and unit suffixes, such as "30s" or "2h45m". Valid time units are "s" (seconds), "m" (minutes), "h" (hours).
- Default string
- Timeout for all operations. Deprecated, use operation-specific timeouts instead.
- Delete string
- A string that can be parsed as a duration consisting of numbers and unit suffixes, such as "30s" or "2h45m". Valid time units are "s" (seconds), "m" (minutes), "h" (hours). Setting a timeout for a Delete operation is only applicable if changes are saved into state before the destroy operation occurs.
- Read string
- A string that can be parsed as a duration consisting of numbers and unit suffixes, such as "30s" or "2h45m". Valid time units are "s" (seconds), "m" (minutes), "h" (hours). Read operations occur during any refresh or planning operation when refresh is enabled.
- Update string
- A string that can be parsed as a duration consisting of numbers and unit suffixes, such as "30s" or "2h45m". Valid time units are "s" (seconds), "m" (minutes), "h" (hours).
- create string
- A string that can be parsed as a duration consisting of numbers and unit suffixes, such as "30s" or "2h45m". Valid time units are "s" (seconds), "m" (minutes), "h" (hours).
- default string
- Timeout for all operations. Deprecated, use operation-specific timeouts instead.
- delete string
- A string that can be parsed as a duration consisting of numbers and unit suffixes, such as "30s" or "2h45m". Valid time units are "s" (seconds), "m" (minutes), "h" (hours). Setting a timeout for a Delete operation is only applicable if changes are saved into state before the destroy operation occurs.
- read string
- A string that can be parsed as a duration consisting of numbers and unit suffixes, such as "30s" or "2h45m". Valid time units are "s" (seconds), "m" (minutes), "h" (hours). Read operations occur during any refresh or planning operation when refresh is enabled.
- update string
- A string that can be parsed as a duration consisting of numbers and unit suffixes, such as "30s" or "2h45m". Valid time units are "s" (seconds), "m" (minutes), "h" (hours).
- create String
- A string that can be parsed as a duration consisting of numbers and unit suffixes, such as "30s" or "2h45m". Valid time units are "s" (seconds), "m" (minutes), "h" (hours).
- default_ String
- Timeout for all operations. Deprecated, use operation-specific timeouts instead.
- delete String
- A string that can be parsed as a duration consisting of numbers and unit suffixes, such as "30s" or "2h45m". Valid time units are "s" (seconds), "m" (minutes), "h" (hours). Setting a timeout for a Delete operation is only applicable if changes are saved into state before the destroy operation occurs.
- read String
- A string that can be parsed as a duration consisting of numbers and unit suffixes, such as "30s" or "2h45m". Valid time units are "s" (seconds), "m" (minutes), "h" (hours). Read operations occur during any refresh or planning operation when refresh is enabled.
- update String
- A string that can be parsed as a duration consisting of numbers and unit suffixes, such as "30s" or "2h45m". Valid time units are "s" (seconds), "m" (minutes), "h" (hours).
- create string
- A string that can be parsed as a duration consisting of numbers and unit suffixes, such as "30s" or "2h45m". Valid time units are "s" (seconds), "m" (minutes), "h" (hours).
- default string
- Timeout for all operations. Deprecated, use operation-specific timeouts instead.
- delete string
- A string that can be parsed as a duration consisting of numbers and unit suffixes, such as "30s" or "2h45m". Valid time units are "s" (seconds), "m" (minutes), "h" (hours). Setting a timeout for a Delete operation is only applicable if changes are saved into state before the destroy operation occurs.
- read string
- A string that can be parsed as a duration consisting of numbers and unit suffixes, such as "30s" or "2h45m". Valid time units are "s" (seconds), "m" (minutes), "h" (hours). Read operations occur during any refresh or planning operation when refresh is enabled.
- update string
- A string that can be parsed as a duration consisting of numbers and unit suffixes, such as "30s" or "2h45m". Valid time units are "s" (seconds), "m" (minutes), "h" (hours).
- create str
- A string that can be parsed as a duration consisting of numbers and unit suffixes, such as "30s" or "2h45m". Valid time units are "s" (seconds), "m" (minutes), "h" (hours).
- default str
- Timeout for all operations. Deprecated, use operation-specific timeouts instead.
- delete str
- A string that can be parsed as a duration consisting of numbers and unit suffixes, such as "30s" or "2h45m". Valid time units are "s" (seconds), "m" (minutes), "h" (hours). Setting a timeout for a Delete operation is only applicable if changes are saved into state before the destroy operation occurs.
- read str
- A string that can be parsed as a duration consisting of numbers and unit suffixes, such as "30s" or "2h45m". Valid time units are "s" (seconds), "m" (minutes), "h" (hours). Read operations occur during any refresh or planning operation when refresh is enabled.
- update str
- A string that can be parsed as a duration consisting of numbers and unit suffixes, such as "30s" or "2h45m". Valid time units are "s" (seconds), "m" (minutes), "h" (hours).
- create String
- A string that can be parsed as a duration consisting of numbers and unit suffixes, such as "30s" or "2h45m". Valid time units are "s" (seconds), "m" (minutes), "h" (hours).
- default String
- Timeout for all operations. Deprecated, use operation-specific timeouts instead.
- delete String
- A string that can be parsed as a duration consisting of numbers and unit suffixes, such as "30s" or "2h45m". Valid time units are "s" (seconds), "m" (minutes), "h" (hours). Setting a timeout for a Delete operation is only applicable if changes are saved into state before the destroy operation occurs.
- read String
- A string that can be parsed as a duration consisting of numbers and unit suffixes, such as "30s" or "2h45m". Valid time units are "s" (seconds), "m" (minutes), "h" (hours). Read operations occur during any refresh or planning operation when refresh is enabled.
- update String
- A string that can be parsed as a duration consisting of numbers and unit suffixes, such as "30s" or "2h45m". Valid time units are "s" (seconds), "m" (minutes), "h" (hours).
Import
$ pulumi import aiven:index/valkeyUser:ValkeyUser example PROJECT/SERVICE_NAME/USERNAME
To learn more about importing existing cloud resources, see Importing resources.
Package Details
- Repository
- Aiven pulumi/pulumi-aiven
- License
- Apache-2.0
- Notes
- This Pulumi package is based on the
aivenTerraform Provider.
published on Thursday, Oct 22, 2026 by Pulumi