1. Packages
  2. Alibaba Cloud
  3. API Docs
  4. cs
  5. getKubernetesPermission
Alibaba Cloud v3.53.0 published on Wednesday, Apr 17, 2024 by Pulumi

alicloud.cs.getKubernetesPermission

Explore with Pulumi AI

alicloud logo
Alibaba Cloud v3.53.0 published on Wednesday, Apr 17, 2024 by Pulumi

    This data source provides a list of Ram user permissions.

    NOTE: Available since v1.122.0.

    Example Usage

    import * as pulumi from "@pulumi/pulumi";
    import * as alicloud from "@pulumi/alicloud";
    
    const defaultUsers = alicloud.ram.getUsers({});
    const defaultKubernetesPermission = defaultUsers.then(defaultUsers => alicloud.cs.getKubernetesPermission({
        uid: defaultUsers.users?.[0]?.id,
    }));
    export const permissions = defaultKubernetesPermission.then(defaultKubernetesPermission => defaultKubernetesPermission.permissions);
    
    import pulumi
    import pulumi_alicloud as alicloud
    
    default_users = alicloud.ram.get_users()
    default_kubernetes_permission = alicloud.cs.get_kubernetes_permission(uid=default_users.users[0].id)
    pulumi.export("permissions", default_kubernetes_permission.permissions)
    
    package main
    
    import (
    	"github.com/pulumi/pulumi-alicloud/sdk/v3/go/alicloud/cs"
    	"github.com/pulumi/pulumi-alicloud/sdk/v3/go/alicloud/ram"
    	"github.com/pulumi/pulumi/sdk/v3/go/pulumi"
    )
    
    func main() {
    	pulumi.Run(func(ctx *pulumi.Context) error {
    		defaultUsers, err := ram.GetUsers(ctx, nil, nil)
    		if err != nil {
    			return err
    		}
    		defaultKubernetesPermission, err := cs.LookupKubernetesPermission(ctx, &cs.LookupKubernetesPermissionArgs{
    			Uid: defaultUsers.Users[0].Id,
    		}, nil)
    		if err != nil {
    			return err
    		}
    		ctx.Export("permissions", defaultKubernetesPermission.Permissions)
    		return nil
    	})
    }
    
    using System.Collections.Generic;
    using System.Linq;
    using Pulumi;
    using AliCloud = Pulumi.AliCloud;
    
    return await Deployment.RunAsync(() => 
    {
        var defaultUsers = AliCloud.Ram.GetUsers.Invoke();
    
        var defaultKubernetesPermission = AliCloud.CS.GetKubernetesPermission.Invoke(new()
        {
            Uid = defaultUsers.Apply(getUsersResult => getUsersResult.Users[0]?.Id),
        });
    
        return new Dictionary<string, object?>
        {
            ["permissions"] = defaultKubernetesPermission.Apply(getKubernetesPermissionResult => getKubernetesPermissionResult.Permissions),
        };
    });
    
    package generated_program;
    
    import com.pulumi.Context;
    import com.pulumi.Pulumi;
    import com.pulumi.core.Output;
    import com.pulumi.alicloud.ram.RamFunctions;
    import com.pulumi.alicloud.ram.inputs.GetUsersArgs;
    import com.pulumi.alicloud.cs.CsFunctions;
    import com.pulumi.alicloud.cs.inputs.GetKubernetesPermissionArgs;
    import java.util.List;
    import java.util.ArrayList;
    import java.util.Map;
    import java.io.File;
    import java.nio.file.Files;
    import java.nio.file.Paths;
    
    public class App {
        public static void main(String[] args) {
            Pulumi.run(App::stack);
        }
    
        public static void stack(Context ctx) {
            final var defaultUsers = RamFunctions.getUsers();
    
            final var defaultKubernetesPermission = CsFunctions.getKubernetesPermission(GetKubernetesPermissionArgs.builder()
                .uid(defaultUsers.applyValue(getUsersResult -> getUsersResult.users()[0].id()))
                .build());
    
            ctx.export("permissions", defaultKubernetesPermission.applyValue(getKubernetesPermissionResult -> getKubernetesPermissionResult.permissions()));
        }
    }
    
    variables:
      defaultUsers:
        fn::invoke:
          Function: alicloud:ram:getUsers
          Arguments: {}
      defaultKubernetesPermission:
        fn::invoke:
          Function: alicloud:cs:getKubernetesPermission
          Arguments:
            uid: ${defaultUsers.users[0].id}
    outputs:
      permissions: ${defaultKubernetesPermission.permissions}
    

    Using getKubernetesPermission

    Two invocation forms are available. The direct form accepts plain arguments and either blocks until the result value is available, or returns a Promise-wrapped result. The output form accepts Input-wrapped arguments and returns an Output-wrapped result.

    function getKubernetesPermission(args: GetKubernetesPermissionArgs, opts?: InvokeOptions): Promise<GetKubernetesPermissionResult>
    function getKubernetesPermissionOutput(args: GetKubernetesPermissionOutputArgs, opts?: InvokeOptions): Output<GetKubernetesPermissionResult>
    def get_kubernetes_permission(uid: Optional[str] = None,
                                  opts: Optional[InvokeOptions] = None) -> GetKubernetesPermissionResult
    def get_kubernetes_permission_output(uid: Optional[pulumi.Input[str]] = None,
                                  opts: Optional[InvokeOptions] = None) -> Output[GetKubernetesPermissionResult]
    func LookupKubernetesPermission(ctx *Context, args *LookupKubernetesPermissionArgs, opts ...InvokeOption) (*LookupKubernetesPermissionResult, error)
    func LookupKubernetesPermissionOutput(ctx *Context, args *LookupKubernetesPermissionOutputArgs, opts ...InvokeOption) LookupKubernetesPermissionResultOutput

    > Note: This function is named LookupKubernetesPermission in the Go SDK.

    public static class GetKubernetesPermission 
    {
        public static Task<GetKubernetesPermissionResult> InvokeAsync(GetKubernetesPermissionArgs args, InvokeOptions? opts = null)
        public static Output<GetKubernetesPermissionResult> Invoke(GetKubernetesPermissionInvokeArgs args, InvokeOptions? opts = null)
    }
    public static CompletableFuture<GetKubernetesPermissionResult> getKubernetesPermission(GetKubernetesPermissionArgs args, InvokeOptions options)
    // Output-based functions aren't available in Java yet
    
    fn::invoke:
      function: alicloud:cs/getKubernetesPermission:getKubernetesPermission
      arguments:
        # arguments dictionary

    The following arguments are supported:

    Uid string
    The ID of the RAM user. If you want to query the permissions of a RAM role, specify the ID of the RAM role.
    Uid string
    The ID of the RAM user. If you want to query the permissions of a RAM role, specify the ID of the RAM role.
    uid String
    The ID of the RAM user. If you want to query the permissions of a RAM role, specify the ID of the RAM role.
    uid string
    The ID of the RAM user. If you want to query the permissions of a RAM role, specify the ID of the RAM role.
    uid str
    The ID of the RAM user. If you want to query the permissions of a RAM role, specify the ID of the RAM role.
    uid String
    The ID of the RAM user. If you want to query the permissions of a RAM role, specify the ID of the RAM role.

    getKubernetesPermission Result

    The following output properties are available:

    Id string
    The provider-assigned unique ID for this managed resource.
    Permissions List<Pulumi.AliCloud.CS.Outputs.GetKubernetesPermissionPermission>
    A list of user permission. See permissions below.
    Uid string
    The ID of the RAM user. If you want to query the permissions of a RAM role, specify the ID of the RAM role.
    Id string
    The provider-assigned unique ID for this managed resource.
    Permissions []GetKubernetesPermissionPermission
    A list of user permission. See permissions below.
    Uid string
    The ID of the RAM user. If you want to query the permissions of a RAM role, specify the ID of the RAM role.
    id String
    The provider-assigned unique ID for this managed resource.
    permissions List<GetKubernetesPermissionPermission>
    A list of user permission. See permissions below.
    uid String
    The ID of the RAM user. If you want to query the permissions of a RAM role, specify the ID of the RAM role.
    id string
    The provider-assigned unique ID for this managed resource.
    permissions GetKubernetesPermissionPermission[]
    A list of user permission. See permissions below.
    uid string
    The ID of the RAM user. If you want to query the permissions of a RAM role, specify the ID of the RAM role.
    id str
    The provider-assigned unique ID for this managed resource.
    permissions Sequence[GetKubernetesPermissionPermission]
    A list of user permission. See permissions below.
    uid str
    The ID of the RAM user. If you want to query the permissions of a RAM role, specify the ID of the RAM role.
    id String
    The provider-assigned unique ID for this managed resource.
    permissions List<Property Map>
    A list of user permission. See permissions below.
    uid String
    The ID of the RAM user. If you want to query the permissions of a RAM role, specify the ID of the RAM role.

    Supporting Types

    GetKubernetesPermissionPermission

    IsOwner bool
    Indicates whether the permissions are granted to the cluster owner. Valid values false, true.
    IsRamRole bool
    Indicates whether the permissions are granted to the RAM role. Valid values false, true.
    ResourceId string
    The permission settings to manage ACK clusters.
    ResourceType string
    The authorization type. Valid values cluster, namespace and console.
    RoleName string
    The name of the predefined role. If a custom role is assigned, the value is the name of the assigined custom role.
    RoleType string
    The predefined role. Valid values admin,ops,dev,restricted and custom.
    IsOwner bool
    Indicates whether the permissions are granted to the cluster owner. Valid values false, true.
    IsRamRole bool
    Indicates whether the permissions are granted to the RAM role. Valid values false, true.
    ResourceId string
    The permission settings to manage ACK clusters.
    ResourceType string
    The authorization type. Valid values cluster, namespace and console.
    RoleName string
    The name of the predefined role. If a custom role is assigned, the value is the name of the assigined custom role.
    RoleType string
    The predefined role. Valid values admin,ops,dev,restricted and custom.
    isOwner Boolean
    Indicates whether the permissions are granted to the cluster owner. Valid values false, true.
    isRamRole Boolean
    Indicates whether the permissions are granted to the RAM role. Valid values false, true.
    resourceId String
    The permission settings to manage ACK clusters.
    resourceType String
    The authorization type. Valid values cluster, namespace and console.
    roleName String
    The name of the predefined role. If a custom role is assigned, the value is the name of the assigined custom role.
    roleType String
    The predefined role. Valid values admin,ops,dev,restricted and custom.
    isOwner boolean
    Indicates whether the permissions are granted to the cluster owner. Valid values false, true.
    isRamRole boolean
    Indicates whether the permissions are granted to the RAM role. Valid values false, true.
    resourceId string
    The permission settings to manage ACK clusters.
    resourceType string
    The authorization type. Valid values cluster, namespace and console.
    roleName string
    The name of the predefined role. If a custom role is assigned, the value is the name of the assigined custom role.
    roleType string
    The predefined role. Valid values admin,ops,dev,restricted and custom.
    is_owner bool
    Indicates whether the permissions are granted to the cluster owner. Valid values false, true.
    is_ram_role bool
    Indicates whether the permissions are granted to the RAM role. Valid values false, true.
    resource_id str
    The permission settings to manage ACK clusters.
    resource_type str
    The authorization type. Valid values cluster, namespace and console.
    role_name str
    The name of the predefined role. If a custom role is assigned, the value is the name of the assigined custom role.
    role_type str
    The predefined role. Valid values admin,ops,dev,restricted and custom.
    isOwner Boolean
    Indicates whether the permissions are granted to the cluster owner. Valid values false, true.
    isRamRole Boolean
    Indicates whether the permissions are granted to the RAM role. Valid values false, true.
    resourceId String
    The permission settings to manage ACK clusters.
    resourceType String
    The authorization type. Valid values cluster, namespace and console.
    roleName String
    The name of the predefined role. If a custom role is assigned, the value is the name of the assigined custom role.
    roleType String
    The predefined role. Valid values admin,ops,dev,restricted and custom.

    Package Details

    Repository
    Alibaba Cloud pulumi/pulumi-alicloud
    License
    Apache-2.0
    Notes
    This Pulumi package is based on the alicloud Terraform Provider.
    alicloud logo
    Alibaba Cloud v3.53.0 published on Wednesday, Apr 17, 2024 by Pulumi