1. Packages
  2. Alibaba Cloud
  3. API Docs
  4. cs
  5. getKubernetesPermission
Alibaba Cloud v3.43.1 published on Monday, Sep 11, 2023 by Pulumi

alicloud.cs.getKubernetesPermission

Explore with Pulumi AI

alicloud logo
Alibaba Cloud v3.43.1 published on Monday, Sep 11, 2023 by Pulumi

    This data source provides a list of Ram user permissions.

    NOTE: Available in v1.122.0+.

    Example Usage

    using System.Collections.Generic;
    using System.Linq;
    using Pulumi;
    using AliCloud = Pulumi.AliCloud;
    
    return await Deployment.RunAsync(() => 
    {
        var usersDs = AliCloud.Ram.GetUsers.Invoke(new()
        {
            NameRegex = "your_user_name",
        });
    
        var @default = AliCloud.CS.GetKubernetesPermission.Invoke(new()
        {
            Uid = usersDs.Apply(getUsersResult => getUsersResult.Users[0]?.Id),
        });
    
        return new Dictionary<string, object?>
        {
            ["permissions"] = @default.Apply(@default => @default.Apply(getKubernetesPermissionResult => getKubernetesPermissionResult.Permissions)),
        };
    });
    
    package main
    
    import (
    	"github.com/pulumi/pulumi-alicloud/sdk/v3/go/alicloud/cs"
    	"github.com/pulumi/pulumi-alicloud/sdk/v3/go/alicloud/ram"
    	"github.com/pulumi/pulumi/sdk/v3/go/pulumi"
    )
    
    func main() {
    	pulumi.Run(func(ctx *pulumi.Context) error {
    		usersDs, err := ram.GetUsers(ctx, &ram.GetUsersArgs{
    			NameRegex: pulumi.StringRef("your_user_name"),
    		}, nil)
    		if err != nil {
    			return err
    		}
    		_default, err := cs.LookupKubernetesPermission(ctx, &cs.LookupKubernetesPermissionArgs{
    			Uid: usersDs.Users[0].Id,
    		}, nil)
    		if err != nil {
    			return err
    		}
    		ctx.Export("permissions", _default.Permissions)
    		return nil
    	})
    }
    
    package generated_program;
    
    import com.pulumi.Context;
    import com.pulumi.Pulumi;
    import com.pulumi.core.Output;
    import com.pulumi.alicloud.ram.RamFunctions;
    import com.pulumi.alicloud.ram.inputs.GetUsersArgs;
    import com.pulumi.alicloud.cs.CsFunctions;
    import com.pulumi.alicloud.cs.inputs.GetKubernetesPermissionArgs;
    import java.util.List;
    import java.util.ArrayList;
    import java.util.Map;
    import java.io.File;
    import java.nio.file.Files;
    import java.nio.file.Paths;
    
    public class App {
        public static void main(String[] args) {
            Pulumi.run(App::stack);
        }
    
        public static void stack(Context ctx) {
            final var usersDs = RamFunctions.getUsers(GetUsersArgs.builder()
                .nameRegex("your_user_name")
                .build());
    
            final var default = CsFunctions.getKubernetesPermission(GetKubernetesPermissionArgs.builder()
                .uid(usersDs.applyValue(getUsersResult -> getUsersResult.users()[0].id()))
                .build());
    
            ctx.export("permissions", default_.permissions());
        }
    }
    
    import pulumi
    import pulumi_alicloud as alicloud
    
    users_ds = alicloud.ram.get_users(name_regex="your_user_name")
    default = alicloud.cs.get_kubernetes_permission(uid=users_ds.users[0].id)
    pulumi.export("permissions", default.permissions)
    
    import * as pulumi from "@pulumi/pulumi";
    import * as alicloud from "@pulumi/alicloud";
    
    const usersDs = alicloud.ram.getUsers({
        nameRegex: "your_user_name",
    });
    const default = usersDs.then(usersDs => alicloud.cs.getKubernetesPermission({
        uid: usersDs.users?.[0]?.id,
    }));
    export const permissions = _default.then(_default => _default.permissions);
    
    variables:
      usersDs:
        fn::invoke:
          Function: alicloud:ram:getUsers
          Arguments:
            nameRegex: your_user_name
      default:
        fn::invoke:
          Function: alicloud:cs:getKubernetesPermission
          Arguments:
            uid: ${usersDs.users[0].id}
    outputs:
      permissions: ${default.permissions}
    

    Using getKubernetesPermission

    Two invocation forms are available. The direct form accepts plain arguments and either blocks until the result value is available, or returns a Promise-wrapped result. The output form accepts Input-wrapped arguments and returns an Output-wrapped result.

    function getKubernetesPermission(args: GetKubernetesPermissionArgs, opts?: InvokeOptions): Promise<GetKubernetesPermissionResult>
    function getKubernetesPermissionOutput(args: GetKubernetesPermissionOutputArgs, opts?: InvokeOptions): Output<GetKubernetesPermissionResult>
    def get_kubernetes_permission(permissions: Optional[Sequence[GetKubernetesPermissionPermission]] = None,
                                  uid: Optional[str] = None,
                                  opts: Optional[InvokeOptions] = None) -> GetKubernetesPermissionResult
    def get_kubernetes_permission_output(permissions: Optional[pulumi.Input[Sequence[pulumi.Input[GetKubernetesPermissionPermissionArgs]]]] = None,
                                  uid: Optional[pulumi.Input[str]] = None,
                                  opts: Optional[InvokeOptions] = None) -> Output[GetKubernetesPermissionResult]
    func LookupKubernetesPermission(ctx *Context, args *LookupKubernetesPermissionArgs, opts ...InvokeOption) (*LookupKubernetesPermissionResult, error)
    func LookupKubernetesPermissionOutput(ctx *Context, args *LookupKubernetesPermissionOutputArgs, opts ...InvokeOption) LookupKubernetesPermissionResultOutput

    > Note: This function is named LookupKubernetesPermission in the Go SDK.

    public static class GetKubernetesPermission 
    {
        public static Task<GetKubernetesPermissionResult> InvokeAsync(GetKubernetesPermissionArgs args, InvokeOptions? opts = null)
        public static Output<GetKubernetesPermissionResult> Invoke(GetKubernetesPermissionInvokeArgs args, InvokeOptions? opts = null)
    }
    public static CompletableFuture<GetKubernetesPermissionResult> getKubernetesPermission(GetKubernetesPermissionArgs args, InvokeOptions options)
    // Output-based functions aren't available in Java yet
    
    fn::invoke:
      function: alicloud:cs/getKubernetesPermission:getKubernetesPermission
      arguments:
        # arguments dictionary

    The following arguments are supported:

    Uid string

    The ID of the RAM user. If you want to query the permissions of a RAM role, specify the ID of the RAM role.

    Permissions List<Pulumi.AliCloud.CS.Inputs.GetKubernetesPermissionPermission>

    A list of user permission.

    Uid string

    The ID of the RAM user. If you want to query the permissions of a RAM role, specify the ID of the RAM role.

    Permissions []GetKubernetesPermissionPermission

    A list of user permission.

    uid String

    The ID of the RAM user. If you want to query the permissions of a RAM role, specify the ID of the RAM role.

    permissions List<GetKubernetesPermissionPermission>

    A list of user permission.

    uid string

    The ID of the RAM user. If you want to query the permissions of a RAM role, specify the ID of the RAM role.

    permissions GetKubernetesPermissionPermission[]

    A list of user permission.

    uid str

    The ID of the RAM user. If you want to query the permissions of a RAM role, specify the ID of the RAM role.

    permissions Sequence[GetKubernetesPermissionPermission]

    A list of user permission.

    uid String

    The ID of the RAM user. If you want to query the permissions of a RAM role, specify the ID of the RAM role.

    permissions List<Property Map>

    A list of user permission.

    getKubernetesPermission Result

    The following output properties are available:

    Id string

    The provider-assigned unique ID for this managed resource.

    Uid string

    The ID of the RAM user. If you want to query the permissions of a RAM role, specify the ID of the RAM role.

    Permissions List<Pulumi.AliCloud.CS.Outputs.GetKubernetesPermissionPermission>

    A list of user permission.

    Id string

    The provider-assigned unique ID for this managed resource.

    Uid string

    The ID of the RAM user. If you want to query the permissions of a RAM role, specify the ID of the RAM role.

    Permissions []GetKubernetesPermissionPermission

    A list of user permission.

    id String

    The provider-assigned unique ID for this managed resource.

    uid String

    The ID of the RAM user. If you want to query the permissions of a RAM role, specify the ID of the RAM role.

    permissions List<GetKubernetesPermissionPermission>

    A list of user permission.

    id string

    The provider-assigned unique ID for this managed resource.

    uid string

    The ID of the RAM user. If you want to query the permissions of a RAM role, specify the ID of the RAM role.

    permissions GetKubernetesPermissionPermission[]

    A list of user permission.

    id str

    The provider-assigned unique ID for this managed resource.

    uid str

    The ID of the RAM user. If you want to query the permissions of a RAM role, specify the ID of the RAM role.

    permissions Sequence[GetKubernetesPermissionPermission]

    A list of user permission.

    id String

    The provider-assigned unique ID for this managed resource.

    uid String

    The ID of the RAM user. If you want to query the permissions of a RAM role, specify the ID of the RAM role.

    permissions List<Property Map>

    A list of user permission.

    Supporting Types

    GetKubernetesPermissionPermission

    ResourceId string

    The permission settings to manage ACK clusters.

    ResourceType string

    The authorization type. Valid values cluster, namespace and console.

    RoleName string

    The name of the predefined role. If a custom role is assigned, the value is the name of the assigined custom role.

    IsOwner bool

    ndicates whether the permissions are granted to the cluster owner. Valid values 0, 1.

    IsRamRole bool

    Indicates whether the permissions are granted to the RAM role. Valid values 0,1.

    RoleType string

    The predefined role. Valid values admin,ops,dev,restricted and custom.

    ResourceId string

    The permission settings to manage ACK clusters.

    ResourceType string

    The authorization type. Valid values cluster, namespace and console.

    RoleName string

    The name of the predefined role. If a custom role is assigned, the value is the name of the assigined custom role.

    IsOwner bool

    ndicates whether the permissions are granted to the cluster owner. Valid values 0, 1.

    IsRamRole bool

    Indicates whether the permissions are granted to the RAM role. Valid values 0,1.

    RoleType string

    The predefined role. Valid values admin,ops,dev,restricted and custom.

    resourceId String

    The permission settings to manage ACK clusters.

    resourceType String

    The authorization type. Valid values cluster, namespace and console.

    roleName String

    The name of the predefined role. If a custom role is assigned, the value is the name of the assigined custom role.

    isOwner Boolean

    ndicates whether the permissions are granted to the cluster owner. Valid values 0, 1.

    isRamRole Boolean

    Indicates whether the permissions are granted to the RAM role. Valid values 0,1.

    roleType String

    The predefined role. Valid values admin,ops,dev,restricted and custom.

    resourceId string

    The permission settings to manage ACK clusters.

    resourceType string

    The authorization type. Valid values cluster, namespace and console.

    roleName string

    The name of the predefined role. If a custom role is assigned, the value is the name of the assigined custom role.

    isOwner boolean

    ndicates whether the permissions are granted to the cluster owner. Valid values 0, 1.

    isRamRole boolean

    Indicates whether the permissions are granted to the RAM role. Valid values 0,1.

    roleType string

    The predefined role. Valid values admin,ops,dev,restricted and custom.

    resource_id str

    The permission settings to manage ACK clusters.

    resource_type str

    The authorization type. Valid values cluster, namespace and console.

    role_name str

    The name of the predefined role. If a custom role is assigned, the value is the name of the assigined custom role.

    is_owner bool

    ndicates whether the permissions are granted to the cluster owner. Valid values 0, 1.

    is_ram_role bool

    Indicates whether the permissions are granted to the RAM role. Valid values 0,1.

    role_type str

    The predefined role. Valid values admin,ops,dev,restricted and custom.

    resourceId String

    The permission settings to manage ACK clusters.

    resourceType String

    The authorization type. Valid values cluster, namespace and console.

    roleName String

    The name of the predefined role. If a custom role is assigned, the value is the name of the assigined custom role.

    isOwner Boolean

    ndicates whether the permissions are granted to the cluster owner. Valid values 0, 1.

    isRamRole Boolean

    Indicates whether the permissions are granted to the RAM role. Valid values 0,1.

    roleType String

    The predefined role. Valid values admin,ops,dev,restricted and custom.

    Package Details

    Repository
    Alibaba Cloud pulumi/pulumi-alicloud
    License
    Apache-2.0
    Notes

    This Pulumi package is based on the alicloud Terraform Provider.

    alicloud logo
    Alibaba Cloud v3.43.1 published on Monday, Sep 11, 2023 by Pulumi