Docs Packages
  1. Packages
  2. Google Cloud (GCP) Classic
  3. API Docs
  4. cloudbuildv2
  5. Connection
Google Cloud Classic v6.67.0 published on Wednesday, Sep 27, 2023 by Pulumi
pulumi/pulumi-gcp

gcp.cloudbuildv2.Connection

Explore with Pulumi AI

gcp logo
Google Cloud Classic v6.67.0 published on Wednesday, Sep 27, 2023 by Pulumi
pulumi/pulumi-gcp

    The Cloudbuildv2 Connection resource

    Example Usage

    Ghe

    using System.Collections.Generic;
using System.IO;
using System.Linq;
using Pulumi;
using Gcp = Pulumi.Gcp;

return await Deployment.RunAsync(() => 
{
    var private_key_secret = new Gcp.SecretManager.Secret("private-key-secret", new()
    {
        SecretId = "ghe-pk-secret",
        Replication = new Gcp.SecretManager.Inputs.SecretReplicationArgs
        {
            Auto = null,
        },
    });

    var private_key_secret_version = new Gcp.SecretManager.SecretVersion("private-key-secret-version", new()
    {
        Secret = private_key_secret.Id,
        SecretData = File.ReadAllText("private-key.pem"),
    });

    var webhook_secret_secret = new Gcp.SecretManager.Secret("webhook-secret-secret", new()
    {
        SecretId = "github-token-secret",
        Replication = new Gcp.SecretManager.Inputs.SecretReplicationArgs
        {
            Auto = null,
        },
    });

    var webhook_secret_secret_version = new Gcp.SecretManager.SecretVersion("webhook-secret-secret-version", new()
    {
        Secret = webhook_secret_secret.Id,
        SecretData = "<webhook-secret-data>",
    });

    var p4sa_secretAccessor = Gcp.Organizations.GetIAMPolicy.Invoke(new()
    {
        Bindings = new[]
        {
            new Gcp.Organizations.Inputs.GetIAMPolicyBindingInputArgs
            {
                Role = "roles/secretmanager.secretAccessor",
                Members = new[]
                {
                    "serviceAccount:service-123456789@gcp-sa-cloudbuild.iam.gserviceaccount.com",
                },
            },
        },
    });

    var policy_pk = new Gcp.SecretManager.SecretIamPolicy("policy-pk", new()
    {
        SecretId = private_key_secret.SecretId,
        PolicyData = p4sa_secretAccessor.Apply(p4sa_secretAccessor => p4sa_secretAccessor.Apply(getIAMPolicyResult => getIAMPolicyResult.PolicyData)),
    });

    var policy_whs = new Gcp.SecretManager.SecretIamPolicy("policy-whs", new()
    {
        SecretId = webhook_secret_secret.SecretId,
        PolicyData = p4sa_secretAccessor.Apply(p4sa_secretAccessor => p4sa_secretAccessor.Apply(getIAMPolicyResult => getIAMPolicyResult.PolicyData)),
    });

    var my_connection = new Gcp.CloudBuildV2.Connection("my-connection", new()
    {
        Location = "us-central1",
        GithubEnterpriseConfig = new Gcp.CloudBuildV2.Inputs.ConnectionGithubEnterpriseConfigArgs
        {
            HostUri = "https://ghe.com",
            PrivateKeySecretVersion = private_key_secret_version.Id,
            WebhookSecretSecretVersion = webhook_secret_secret_version.Id,
            AppId = 200,
            AppSlug = "gcb-app",
            AppInstallationId = 300,
        },
    }, new CustomResourceOptions
    {
        DependsOn = new[]
        {
            policy_pk,
            policy_whs,
        },
    });

});

    package main

import (
	"os"

	"github.com/pulumi/pulumi-gcp/sdk/v6/go/gcp/cloudbuildv2"
	"github.com/pulumi/pulumi-gcp/sdk/v6/go/gcp/organizations"
	"github.com/pulumi/pulumi-gcp/sdk/v6/go/gcp/secretmanager"
	"github.com/pulumi/pulumi/sdk/v3/go/pulumi"
)

func readFileOrPanic(path string) pulumi.StringPtrInput {
	data, err := os.ReadFile(path)
	if err != nil {
		panic(err.Error())
	}
	return pulumi.String(string(data))
}

func main() {
	pulumi.Run(func(ctx *pulumi.Context) error {
		_, err := secretmanager.NewSecret(ctx, "private-key-secret", &secretmanager.SecretArgs{
			SecretId: pulumi.String("ghe-pk-secret"),
			Replication: &secretmanager.SecretReplicationArgs{
				Auto: nil,
			},
		})
		if err != nil {
			return err
		}
		_, err = secretmanager.NewSecretVersion(ctx, "private-key-secret-version", &secretmanager.SecretVersionArgs{
			Secret:     private_key_secret.ID(),
			SecretData: readFileOrPanic("private-key.pem"),
		})
		if err != nil {
			return err
		}
		_, err = secretmanager.NewSecret(ctx, "webhook-secret-secret", &secretmanager.SecretArgs{
			SecretId: pulumi.String("github-token-secret"),
			Replication: &secretmanager.SecretReplicationArgs{
				Auto: nil,
			},
		})
		if err != nil {
			return err
		}
		_, err = secretmanager.NewSecretVersion(ctx, "webhook-secret-secret-version", &secretmanager.SecretVersionArgs{
			Secret:     webhook_secret_secret.ID(),
			SecretData: pulumi.String("<webhook-secret-data>"),
		})
		if err != nil {
			return err
		}
		p4sa_secretAccessor, err := organizations.LookupIAMPolicy(ctx, &organizations.LookupIAMPolicyArgs{
			Bindings: []organizations.GetIAMPolicyBinding{
				{
					Role: "roles/secretmanager.secretAccessor",
					Members: []string{
						"serviceAccount:service-123456789@gcp-sa-cloudbuild.iam.gserviceaccount.com",
					},
				},
			},
		}, nil)
		if err != nil {
			return err
		}
		_, err = secretmanager.NewSecretIamPolicy(ctx, "policy-pk", &secretmanager.SecretIamPolicyArgs{
			SecretId:   private_key_secret.SecretId,
			PolicyData: *pulumi.String(p4sa_secretAccessor.PolicyData),
		})
		if err != nil {
			return err
		}
		_, err = secretmanager.NewSecretIamPolicy(ctx, "policy-whs", &secretmanager.SecretIamPolicyArgs{
			SecretId:   webhook_secret_secret.SecretId,
			PolicyData: *pulumi.String(p4sa_secretAccessor.PolicyData),
		})
		if err != nil {
			return err
		}
		_, err = cloudbuildv2.NewConnection(ctx, "my-connection", &cloudbuildv2.ConnectionArgs{
			Location: pulumi.String("us-central1"),
			GithubEnterpriseConfig: &cloudbuildv2.ConnectionGithubEnterpriseConfigArgs{
				HostUri:                    pulumi.String("https://ghe.com"),
				PrivateKeySecretVersion:    private_key_secret_version.ID(),
				WebhookSecretSecretVersion: webhook_secret_secret_version.ID(),
				AppId:                      pulumi.Int(200),
				AppSlug:                    pulumi.String("gcb-app"),
				AppInstallationId:          pulumi.Int(300),
			},
		}, pulumi.DependsOn([]pulumi.Resource{
			policy_pk,
			policy_whs,
		}))
		if err != nil {
			return err
		}
		return nil
	})
}

    package generated_program;

import com.pulumi.Context;
import com.pulumi.Pulumi;
import com.pulumi.core.Output;
import com.pulumi.gcp.secretmanager.Secret;
import com.pulumi.gcp.secretmanager.SecretArgs;
import com.pulumi.gcp.secretmanager.inputs.SecretReplicationArgs;
import com.pulumi.gcp.secretmanager.inputs.SecretReplicationAutoArgs;
import com.pulumi.gcp.secretmanager.SecretVersion;
import com.pulumi.gcp.secretmanager.SecretVersionArgs;
import com.pulumi.gcp.organizations.OrganizationsFunctions;
import com.pulumi.gcp.organizations.inputs.GetIAMPolicyArgs;
import com.pulumi.gcp.secretmanager.SecretIamPolicy;
import com.pulumi.gcp.secretmanager.SecretIamPolicyArgs;
import com.pulumi.gcp.cloudbuildv2.Connection;
import com.pulumi.gcp.cloudbuildv2.ConnectionArgs;
import com.pulumi.gcp.cloudbuildv2.inputs.ConnectionGithubEnterpriseConfigArgs;
import com.pulumi.resources.CustomResourceOptions;
import java.util.List;
import java.util.ArrayList;
import java.util.Map;
import java.io.File;
import java.nio.file.Files;
import java.nio.file.Paths;

public class App {
    public static void main(String[] args) {
        Pulumi.run(App::stack);
    }

    public static void stack(Context ctx) {
        var private_key_secret = new Secret("private-key-secret", SecretArgs.builder()        
            .secretId("ghe-pk-secret")
            .replication(SecretReplicationArgs.builder()
                .auto()
                .build())
            .build());

        var private_key_secret_version = new SecretVersion("private-key-secret-version", SecretVersionArgs.builder()        
            .secret(private_key_secret.id())
            .secretData(Files.readString(Paths.get("private-key.pem")))
            .build());

        var webhook_secret_secret = new Secret("webhook-secret-secret", SecretArgs.builder()        
            .secretId("github-token-secret")
            .replication(SecretReplicationArgs.builder()
                .auto()
                .build())
            .build());

        var webhook_secret_secret_version = new SecretVersion("webhook-secret-secret-version", SecretVersionArgs.builder()        
            .secret(webhook_secret_secret.id())
            .secretData("<webhook-secret-data>")
            .build());

        final var p4sa-secretAccessor = OrganizationsFunctions.getIAMPolicy(GetIAMPolicyArgs.builder()
            .bindings(GetIAMPolicyBindingArgs.builder()
                .role("roles/secretmanager.secretAccessor")
                .members("serviceAccount:service-123456789@gcp-sa-cloudbuild.iam.gserviceaccount.com")
                .build())
            .build());

        var policy_pk = new SecretIamPolicy("policy-pk", SecretIamPolicyArgs.builder()        
            .secretId(private_key_secret.secretId())
            .policyData(p4sa_secretAccessor.policyData())
            .build());

        var policy_whs = new SecretIamPolicy("policy-whs", SecretIamPolicyArgs.builder()        
            .secretId(webhook_secret_secret.secretId())
            .policyData(p4sa_secretAccessor.policyData())
            .build());

        var my_connection = new Connection("my-connection", ConnectionArgs.builder()        
            .location("us-central1")
            .githubEnterpriseConfig(ConnectionGithubEnterpriseConfigArgs.builder()
                .hostUri("https://ghe.com")
                .privateKeySecretVersion(private_key_secret_version.id())
                .webhookSecretSecretVersion(webhook_secret_secret_version.id())
                .appId(200)
                .appSlug("gcb-app")
                .appInstallationId(300)
                .build())
            .build(), CustomResourceOptions.builder()
                .dependsOn(                
                    policy_pk,
                    policy_whs)
                .build());

    }
}

    import pulumi
import pulumi_gcp as gcp

private_key_secret = gcp.secretmanager.Secret("private-key-secret",
    secret_id="ghe-pk-secret",
    replication=gcp.secretmanager.SecretReplicationArgs(
        auto=gcp.secretmanager.SecretReplicationAutoArgs(),
    ))
private_key_secret_version = gcp.secretmanager.SecretVersion("private-key-secret-version",
    secret=private_key_secret.id,
    secret_data=(lambda path: open(path).read())("private-key.pem"))
webhook_secret_secret = gcp.secretmanager.Secret("webhook-secret-secret",
    secret_id="github-token-secret",
    replication=gcp.secretmanager.SecretReplicationArgs(
        auto=gcp.secretmanager.SecretReplicationAutoArgs(),
    ))
webhook_secret_secret_version = gcp.secretmanager.SecretVersion("webhook-secret-secret-version",
    secret=webhook_secret_secret.id,
    secret_data="<webhook-secret-data>")
p4sa_secret_accessor = gcp.organizations.get_iam_policy(bindings=[gcp.organizations.GetIAMPolicyBindingArgs(
    role="roles/secretmanager.secretAccessor",
    members=["serviceAccount:service-123456789@gcp-sa-cloudbuild.iam.gserviceaccount.com"],
)])
policy_pk = gcp.secretmanager.SecretIamPolicy("policy-pk",
    secret_id=private_key_secret.secret_id,
    policy_data=p4sa_secret_accessor.policy_data)
policy_whs = gcp.secretmanager.SecretIamPolicy("policy-whs",
    secret_id=webhook_secret_secret.secret_id,
    policy_data=p4sa_secret_accessor.policy_data)
my_connection = gcp.cloudbuildv2.Connection("my-connection",
    location="us-central1",
    github_enterprise_config=gcp.cloudbuildv2.ConnectionGithubEnterpriseConfigArgs(
        host_uri="https://ghe.com",
        private_key_secret_version=private_key_secret_version.id,
        webhook_secret_secret_version=webhook_secret_secret_version.id,
        app_id=200,
        app_slug="gcb-app",
        app_installation_id=300,
    ),
    opts=pulumi.ResourceOptions(depends_on=[
            policy_pk,
            policy_whs,
        ]))

    import * as pulumi from "@pulumi/pulumi";
import * as fs from "fs";
import * as gcp from "@pulumi/gcp";

const private_key_secret = new gcp.secretmanager.Secret("private-key-secret", {
    secretId: "ghe-pk-secret",
    replication: {
        auto: {},
    },
});
const private_key_secret_version = new gcp.secretmanager.SecretVersion("private-key-secret-version", {
    secret: private_key_secret.id,
    secretData: fs.readFileSync("private-key.pem"),
});
const webhook_secret_secret = new gcp.secretmanager.Secret("webhook-secret-secret", {
    secretId: "github-token-secret",
    replication: {
        auto: {},
    },
});
const webhook_secret_secret_version = new gcp.secretmanager.SecretVersion("webhook-secret-secret-version", {
    secret: webhook_secret_secret.id,
    secretData: "<webhook-secret-data>",
});
const p4sa-secretAccessor = gcp.organizations.getIAMPolicy({
    bindings: [{
        role: "roles/secretmanager.secretAccessor",
        members: ["serviceAccount:service-123456789@gcp-sa-cloudbuild.iam.gserviceaccount.com"],
    }],
});
const policy_pk = new gcp.secretmanager.SecretIamPolicy("policy-pk", {
    secretId: private_key_secret.secretId,
    policyData: p4sa_secretAccessor.then(p4sa_secretAccessor => p4sa_secretAccessor.policyData),
});
const policy_whs = new gcp.secretmanager.SecretIamPolicy("policy-whs", {
    secretId: webhook_secret_secret.secretId,
    policyData: p4sa_secretAccessor.then(p4sa_secretAccessor => p4sa_secretAccessor.policyData),
});
const my_connection = new gcp.cloudbuildv2.Connection("my-connection", {
    location: "us-central1",
    githubEnterpriseConfig: {
        hostUri: "https://ghe.com",
        privateKeySecretVersion: private_key_secret_version.id,
        webhookSecretSecretVersion: webhook_secret_secret_version.id,
        appId: 200,
        appSlug: "gcb-app",
        appInstallationId: 300,
    },
}, {
    dependsOn: [
        policy_pk,
        policy_whs,
    ],
});

    resources:
  private-key-secret:
    type: gcp:secretmanager:Secret
    properties:
      secretId: ghe-pk-secret
      replication:
        auto: {}
  private-key-secret-version:
    type: gcp:secretmanager:SecretVersion
    properties:
      secret: ${["private-key-secret"].id}
      secretData:
        fn::readFile: private-key.pem
  webhook-secret-secret:
    type: gcp:secretmanager:Secret
    properties:
      secretId: github-token-secret
      replication:
        auto: {}
  webhook-secret-secret-version:
    type: gcp:secretmanager:SecretVersion
    properties:
      secret: ${["webhook-secret-secret"].id}
      secretData: <webhook-secret-data>
  policy-pk:
    type: gcp:secretmanager:SecretIamPolicy
    properties:
      secretId: ${["private-key-secret"].secretId}
      policyData: ${["p4sa-secretAccessor"].policyData}
  policy-whs:
    type: gcp:secretmanager:SecretIamPolicy
    properties:
      secretId: ${["webhook-secret-secret"].secretId}
      policyData: ${["p4sa-secretAccessor"].policyData}
  my-connection:
    type: gcp:cloudbuildv2:Connection
    properties:
      location: us-central1
      githubEnterpriseConfig:
        hostUri: https://ghe.com
        privateKeySecretVersion: ${["private-key-secret-version"].id}
        webhookSecretSecretVersion: ${["webhook-secret-secret-version"].id}
        appId: 200
        appSlug: gcb-app
        appInstallationId: 300
    options:
      dependson:
        - ${["policy-pk"]}
        - ${["policy-whs"]}
variables:
  p4sa-secretAccessor:
    fn::invoke:
      Function: gcp:organizations:getIAMPolicy
      Arguments:
        bindings:
          - role: roles/secretmanager.secretAccessor
            members:
              - serviceAccount:service-123456789@gcp-sa-cloudbuild.iam.gserviceaccount.com

    GitHub Connection

    using System.Collections.Generic;
using System.IO;
using System.Linq;
using Pulumi;
using Gcp = Pulumi.Gcp;

return await Deployment.RunAsync(() => 
{
    var github_token_secret = new Gcp.SecretManager.Secret("github-token-secret", new()
    {
        SecretId = "github-token-secret",
        Replication = new Gcp.SecretManager.Inputs.SecretReplicationArgs
        {
            Auto = null,
        },
    });

    var github_token_secret_version = new Gcp.SecretManager.SecretVersion("github-token-secret-version", new()
    {
        Secret = github_token_secret.Id,
        SecretData = File.ReadAllText("my-github-token.txt"),
    });

    var p4sa_secretAccessor = Gcp.Organizations.GetIAMPolicy.Invoke(new()
    {
        Bindings = new[]
        {
            new Gcp.Organizations.Inputs.GetIAMPolicyBindingInputArgs
            {
                Role = "roles/secretmanager.secretAccessor",
                Members = new[]
                {
                    "serviceAccount:service-123456789@gcp-sa-cloudbuild.iam.gserviceaccount.com",
                },
            },
        },
    });

    var policy = new Gcp.SecretManager.SecretIamPolicy("policy", new()
    {
        SecretId = github_token_secret.SecretId,
        PolicyData = p4sa_secretAccessor.Apply(p4sa_secretAccessor => p4sa_secretAccessor.Apply(getIAMPolicyResult => getIAMPolicyResult.PolicyData)),
    });

    var my_connection = new Gcp.CloudBuildV2.Connection("my-connection", new()
    {
        Location = "us-west1",
        GithubConfig = new Gcp.CloudBuildV2.Inputs.ConnectionGithubConfigArgs
        {
            AppInstallationId = 123123,
            AuthorizerCredential = new Gcp.CloudBuildV2.Inputs.ConnectionGithubConfigAuthorizerCredentialArgs
            {
                OauthTokenSecretVersion = github_token_secret_version.Id,
            },
        },
    });

});

    package main

import (
	"os"

	"github.com/pulumi/pulumi-gcp/sdk/v6/go/gcp/cloudbuildv2"
	"github.com/pulumi/pulumi-gcp/sdk/v6/go/gcp/organizations"
	"github.com/pulumi/pulumi-gcp/sdk/v6/go/gcp/secretmanager"
	"github.com/pulumi/pulumi/sdk/v3/go/pulumi"
)

func readFileOrPanic(path string) pulumi.StringPtrInput {
	data, err := os.ReadFile(path)
	if err != nil {
		panic(err.Error())
	}
	return pulumi.String(string(data))
}

func main() {
	pulumi.Run(func(ctx *pulumi.Context) error {
		_, err := secretmanager.NewSecret(ctx, "github-token-secret", &secretmanager.SecretArgs{
			SecretId: pulumi.String("github-token-secret"),
			Replication: &secretmanager.SecretReplicationArgs{
				Auto: nil,
			},
		})
		if err != nil {
			return err
		}
		_, err = secretmanager.NewSecretVersion(ctx, "github-token-secret-version", &secretmanager.SecretVersionArgs{
			Secret:     github_token_secret.ID(),
			SecretData: readFileOrPanic("my-github-token.txt"),
		})
		if err != nil {
			return err
		}
		p4sa_secretAccessor, err := organizations.LookupIAMPolicy(ctx, &organizations.LookupIAMPolicyArgs{
			Bindings: []organizations.GetIAMPolicyBinding{
				{
					Role: "roles/secretmanager.secretAccessor",
					Members: []string{
						"serviceAccount:service-123456789@gcp-sa-cloudbuild.iam.gserviceaccount.com",
					},
				},
			},
		}, nil)
		if err != nil {
			return err
		}
		_, err = secretmanager.NewSecretIamPolicy(ctx, "policy", &secretmanager.SecretIamPolicyArgs{
			SecretId:   github_token_secret.SecretId,
			PolicyData: *pulumi.String(p4sa_secretAccessor.PolicyData),
		})
		if err != nil {
			return err
		}
		_, err = cloudbuildv2.NewConnection(ctx, "my-connection", &cloudbuildv2.ConnectionArgs{
			Location: pulumi.String("us-west1"),
			GithubConfig: &cloudbuildv2.ConnectionGithubConfigArgs{
				AppInstallationId: pulumi.Int(123123),
				AuthorizerCredential: &cloudbuildv2.ConnectionGithubConfigAuthorizerCredentialArgs{
					OauthTokenSecretVersion: github_token_secret_version.ID(),
				},
			},
		})
		if err != nil {
			return err
		}
		return nil
	})
}

    package generated_program;

import com.pulumi.Context;
import com.pulumi.Pulumi;
import com.pulumi.core.Output;
import com.pulumi.gcp.secretmanager.Secret;
import com.pulumi.gcp.secretmanager.SecretArgs;
import com.pulumi.gcp.secretmanager.inputs.SecretReplicationArgs;
import com.pulumi.gcp.secretmanager.inputs.SecretReplicationAutoArgs;
import com.pulumi.gcp.secretmanager.SecretVersion;
import com.pulumi.gcp.secretmanager.SecretVersionArgs;
import com.pulumi.gcp.organizations.OrganizationsFunctions;
import com.pulumi.gcp.organizations.inputs.GetIAMPolicyArgs;
import com.pulumi.gcp.secretmanager.SecretIamPolicy;
import com.pulumi.gcp.secretmanager.SecretIamPolicyArgs;
import com.pulumi.gcp.cloudbuildv2.Connection;
import com.pulumi.gcp.cloudbuildv2.ConnectionArgs;
import com.pulumi.gcp.cloudbuildv2.inputs.ConnectionGithubConfigArgs;
import com.pulumi.gcp.cloudbuildv2.inputs.ConnectionGithubConfigAuthorizerCredentialArgs;
import java.util.List;
import java.util.ArrayList;
import java.util.Map;
import java.io.File;
import java.nio.file.Files;
import java.nio.file.Paths;

public class App {
    public static void main(String[] args) {
        Pulumi.run(App::stack);
    }

    public static void stack(Context ctx) {
        var github_token_secret = new Secret("github-token-secret", SecretArgs.builder()        
            .secretId("github-token-secret")
            .replication(SecretReplicationArgs.builder()
                .auto()
                .build())
            .build());

        var github_token_secret_version = new SecretVersion("github-token-secret-version", SecretVersionArgs.builder()        
            .secret(github_token_secret.id())
            .secretData(Files.readString(Paths.get("my-github-token.txt")))
            .build());

        final var p4sa-secretAccessor = OrganizationsFunctions.getIAMPolicy(GetIAMPolicyArgs.builder()
            .bindings(GetIAMPolicyBindingArgs.builder()
                .role("roles/secretmanager.secretAccessor")
                .members("serviceAccount:service-123456789@gcp-sa-cloudbuild.iam.gserviceaccount.com")
                .build())
            .build());

        var policy = new SecretIamPolicy("policy", SecretIamPolicyArgs.builder()        
            .secretId(github_token_secret.secretId())
            .policyData(p4sa_secretAccessor.policyData())
            .build());

        var my_connection = new Connection("my-connection", ConnectionArgs.builder()        
            .location("us-west1")
            .githubConfig(ConnectionGithubConfigArgs.builder()
                .appInstallationId(123123)
                .authorizerCredential(ConnectionGithubConfigAuthorizerCredentialArgs.builder()
                    .oauthTokenSecretVersion(github_token_secret_version.id())
                    .build())
                .build())
            .build());

    }
}

    import pulumi
import pulumi_gcp as gcp

github_token_secret = gcp.secretmanager.Secret("github-token-secret",
    secret_id="github-token-secret",
    replication=gcp.secretmanager.SecretReplicationArgs(
        auto=gcp.secretmanager.SecretReplicationAutoArgs(),
    ))
github_token_secret_version = gcp.secretmanager.SecretVersion("github-token-secret-version",
    secret=github_token_secret.id,
    secret_data=(lambda path: open(path).read())("my-github-token.txt"))
p4sa_secret_accessor = gcp.organizations.get_iam_policy(bindings=[gcp.organizations.GetIAMPolicyBindingArgs(
    role="roles/secretmanager.secretAccessor",
    members=["serviceAccount:service-123456789@gcp-sa-cloudbuild.iam.gserviceaccount.com"],
)])
policy = gcp.secretmanager.SecretIamPolicy("policy",
    secret_id=github_token_secret.secret_id,
    policy_data=p4sa_secret_accessor.policy_data)
my_connection = gcp.cloudbuildv2.Connection("my-connection",
    location="us-west1",
    github_config=gcp.cloudbuildv2.ConnectionGithubConfigArgs(
        app_installation_id=123123,
        authorizer_credential=gcp.cloudbuildv2.ConnectionGithubConfigAuthorizerCredentialArgs(
            oauth_token_secret_version=github_token_secret_version.id,
        ),
    ))

    import * as pulumi from "@pulumi/pulumi";
import * as fs from "fs";
import * as gcp from "@pulumi/gcp";

const github_token_secret = new gcp.secretmanager.Secret("github-token-secret", {
    secretId: "github-token-secret",
    replication: {
        auto: {},
    },
});
const github_token_secret_version = new gcp.secretmanager.SecretVersion("github-token-secret-version", {
    secret: github_token_secret.id,
    secretData: fs.readFileSync("my-github-token.txt"),
});
const p4sa-secretAccessor = gcp.organizations.getIAMPolicy({
    bindings: [{
        role: "roles/secretmanager.secretAccessor",
        members: ["serviceAccount:service-123456789@gcp-sa-cloudbuild.iam.gserviceaccount.com"],
    }],
});
const policy = new gcp.secretmanager.SecretIamPolicy("policy", {
    secretId: github_token_secret.secretId,
    policyData: p4sa_secretAccessor.then(p4sa_secretAccessor => p4sa_secretAccessor.policyData),
});
const my_connection = new gcp.cloudbuildv2.Connection("my-connection", {
    location: "us-west1",
    githubConfig: {
        appInstallationId: 123123,
        authorizerCredential: {
            oauthTokenSecretVersion: github_token_secret_version.id,
        },
    },
});

    resources:
  github-token-secret:
    type: gcp:secretmanager:Secret
    properties:
      secretId: github-token-secret
      replication:
        auto: {}
  github-token-secret-version:
    type: gcp:secretmanager:SecretVersion
    properties:
      secret: ${["github-token-secret"].id}
      secretData:
        fn::readFile: my-github-token.txt
  policy:
    type: gcp:secretmanager:SecretIamPolicy
    properties:
      secretId: ${["github-token-secret"].secretId}
      policyData: ${["p4sa-secretAccessor"].policyData}
  my-connection:
    type: gcp:cloudbuildv2:Connection
    properties:
      location: us-west1
      githubConfig:
        appInstallationId: 123123
        authorizerCredential:
          oauthTokenSecretVersion: ${["github-token-secret-version"].id}
variables:
  p4sa-secretAccessor:
    fn::invoke:
      Function: gcp:organizations:getIAMPolicy
      Arguments:
        bindings:
          - role: roles/secretmanager.secretAccessor
            members:
              - serviceAccount:service-123456789@gcp-sa-cloudbuild.iam.gserviceaccount.com

    Create Connection Resource

    new Connection(name: string, args: ConnectionArgs, opts?: CustomResourceOptions);
    @overload
def Connection(resource_name: str,
               opts: Optional[ResourceOptions] = None,
               annotations: Optional[Mapping[str, str]] = None,
               disabled: Optional[bool] = None,
               github_config: Optional[ConnectionGithubConfigArgs] = None,
               github_enterprise_config: Optional[ConnectionGithubEnterpriseConfigArgs] = None,
               gitlab_config: Optional[ConnectionGitlabConfigArgs] = None,
               location: Optional[str] = None,
               name: Optional[str] = None,
               project: Optional[str] = None)
@overload
def Connection(resource_name: str,
               args: ConnectionArgs,
               opts: Optional[ResourceOptions] = None)
    func NewConnection(ctx *Context, name string, args ConnectionArgs, opts ...ResourceOption) (*Connection, error)
    public Connection(string name, ConnectionArgs args, CustomResourceOptions? opts = null)
    public Connection(String name, ConnectionArgs args)
public Connection(String name, ConnectionArgs args, CustomResourceOptions options)

    type: gcp:cloudbuildv2:Connection
properties: # The arguments to resource properties.
options: # Bag of options to control resource's behavior.
    name string
    The unique name of the resource.
    args ConnectionArgs
    The arguments to resource properties.
    opts CustomResourceOptions
    Bag of options to control resource's behavior.
    resource_name str
    The unique name of the resource.
    args ConnectionArgs
    The arguments to resource properties.
    opts ResourceOptions
    Bag of options to control resource's behavior.
    ctx Context
    Context object for the current deployment.
    name string
    The unique name of the resource.
    args ConnectionArgs
    The arguments to resource properties.
    opts ResourceOption
    Bag of options to control resource's behavior.
    name string
    The unique name of the resource.
    args ConnectionArgs
    The arguments to resource properties.
    opts CustomResourceOptions
    Bag of options to control resource's behavior.
    name String
    The unique name of the resource.
    args ConnectionArgs
    The arguments to resource properties.
    options CustomResourceOptions
    Bag of options to control resource's behavior.

    Connection Resource Properties

    To learn more about resource properties and how to use them, see Inputs and Outputs in the Architecture and Concepts docs.

    Inputs

    The Connection resource accepts the following input properties:

    Location string

    The location for the resource

    Annotations Dictionary<string, string>

    Allows clients to store small amounts of arbitrary data.

    Disabled bool

    If disabled is set to true, functionality is disabled for this connection. Repository based API methods and webhooks processing for repositories in this connection will be disabled.

    GithubConfig ConnectionGithubConfig

    Configuration for connections to github.com.

    GithubEnterpriseConfig ConnectionGithubEnterpriseConfig

    Configuration for connections to an instance of GitHub Enterprise.

    GitlabConfig ConnectionGitlabConfig

    Configuration for connections to gitlab.com or an instance of GitLab Enterprise.

    Name string

    Immutable. The resource name of the connection, in the format projects/{project}/locations/{location}/connections/{connection_id}.

    Project string

    The project for the resource

    Location string

    The location for the resource

    Annotations map[string]string

    Allows clients to store small amounts of arbitrary data.

    Disabled bool

    If disabled is set to true, functionality is disabled for this connection. Repository based API methods and webhooks processing for repositories in this connection will be disabled.

    GithubConfig ConnectionGithubConfigArgs

    Configuration for connections to github.com.

    GithubEnterpriseConfig ConnectionGithubEnterpriseConfigArgs

    Configuration for connections to an instance of GitHub Enterprise.

    GitlabConfig ConnectionGitlabConfigArgs

    Configuration for connections to gitlab.com or an instance of GitLab Enterprise.

    Name string

    Immutable. The resource name of the connection, in the format projects/{project}/locations/{location}/connections/{connection_id}.

    Project string

    The project for the resource

    location String

    The location for the resource

    annotations Map<String,String>

    Allows clients to store small amounts of arbitrary data.

    disabled Boolean

    If disabled is set to true, functionality is disabled for this connection. Repository based API methods and webhooks processing for repositories in this connection will be disabled.

    githubConfig ConnectionGithubConfig

    Configuration for connections to github.com.

    githubEnterpriseConfig ConnectionGithubEnterpriseConfig

    Configuration for connections to an instance of GitHub Enterprise.

    gitlabConfig ConnectionGitlabConfig

    Configuration for connections to gitlab.com or an instance of GitLab Enterprise.

    name String

    Immutable. The resource name of the connection, in the format projects/{project}/locations/{location}/connections/{connection_id}.

    project String

    The project for the resource

    location string

    The location for the resource

    annotations {[key: string]: string}

    Allows clients to store small amounts of arbitrary data.

    disabled boolean

    If disabled is set to true, functionality is disabled for this connection. Repository based API methods and webhooks processing for repositories in this connection will be disabled.

    githubConfig ConnectionGithubConfig

    Configuration for connections to github.com.

    githubEnterpriseConfig ConnectionGithubEnterpriseConfig

    Configuration for connections to an instance of GitHub Enterprise.

    gitlabConfig ConnectionGitlabConfig

    Configuration for connections to gitlab.com or an instance of GitLab Enterprise.

    name string

    Immutable. The resource name of the connection, in the format projects/{project}/locations/{location}/connections/{connection_id}.

    project string

    The project for the resource

    location str

    The location for the resource

    annotations Mapping[str, str]

    Allows clients to store small amounts of arbitrary data.

    disabled bool

    If disabled is set to true, functionality is disabled for this connection. Repository based API methods and webhooks processing for repositories in this connection will be disabled.

    github_config ConnectionGithubConfigArgs

    Configuration for connections to github.com.

    github_enterprise_config ConnectionGithubEnterpriseConfigArgs

    Configuration for connections to an instance of GitHub Enterprise.

    gitlab_config ConnectionGitlabConfigArgs

    Configuration for connections to gitlab.com or an instance of GitLab Enterprise.

    name str

    Immutable. The resource name of the connection, in the format projects/{project}/locations/{location}/connections/{connection_id}.

    project str

    The project for the resource

    location String

    The location for the resource

    annotations Map<String>

    Allows clients to store small amounts of arbitrary data.

    disabled Boolean

    If disabled is set to true, functionality is disabled for this connection. Repository based API methods and webhooks processing for repositories in this connection will be disabled.

    githubConfig Property Map

    Configuration for connections to github.com.

    githubEnterpriseConfig Property Map

    Configuration for connections to an instance of GitHub Enterprise.

    gitlabConfig Property Map

    Configuration for connections to gitlab.com or an instance of GitLab Enterprise.

    name String

    Immutable. The resource name of the connection, in the format projects/{project}/locations/{location}/connections/{connection_id}.

    project String

    The project for the resource

    Outputs

    All input properties are implicitly available as output properties. Additionally, the Connection resource produces the following output properties:

    CreateTime string

    Output only. Server assigned timestamp for when the connection was created.

    Etag string

    This checksum is computed by the server based on the value of other fields, and may be sent on update and delete requests to ensure the client has an up-to-date value before proceeding.

    Id string

    The provider-assigned unique ID for this managed resource.

    InstallationStates List<ConnectionInstallationState>

    Output only. Installation state of the Connection.

    Reconciling bool

    Output only. Set to true when the connection is being set up or updated in the background.

    UpdateTime string

    Output only. Server assigned timestamp for when the connection was updated.

    CreateTime string

    Output only. Server assigned timestamp for when the connection was created.

    Etag string

    This checksum is computed by the server based on the value of other fields, and may be sent on update and delete requests to ensure the client has an up-to-date value before proceeding.

    Id string

    The provider-assigned unique ID for this managed resource.

    InstallationStates []ConnectionInstallationState

    Output only. Installation state of the Connection.

    Reconciling bool

    Output only. Set to true when the connection is being set up or updated in the background.

    UpdateTime string

    Output only. Server assigned timestamp for when the connection was updated.

    createTime String

    Output only. Server assigned timestamp for when the connection was created.

    etag String

    This checksum is computed by the server based on the value of other fields, and may be sent on update and delete requests to ensure the client has an up-to-date value before proceeding.

    id String

    The provider-assigned unique ID for this managed resource.

    installationStates List<ConnectionInstallationState>

    Output only. Installation state of the Connection.

    reconciling Boolean

    Output only. Set to true when the connection is being set up or updated in the background.

    updateTime String

    Output only. Server assigned timestamp for when the connection was updated.

    createTime string

    Output only. Server assigned timestamp for when the connection was created.

    etag string

    This checksum is computed by the server based on the value of other fields, and may be sent on update and delete requests to ensure the client has an up-to-date value before proceeding.

    id string

    The provider-assigned unique ID for this managed resource.

    installationStates ConnectionInstallationState[]

    Output only. Installation state of the Connection.

    reconciling boolean

    Output only. Set to true when the connection is being set up or updated in the background.

    updateTime string

    Output only. Server assigned timestamp for when the connection was updated.

    create_time str

    Output only. Server assigned timestamp for when the connection was created.

    etag str

    This checksum is computed by the server based on the value of other fields, and may be sent on update and delete requests to ensure the client has an up-to-date value before proceeding.

    id str

    The provider-assigned unique ID for this managed resource.

    installation_states Sequence[ConnectionInstallationState]

    Output only. Installation state of the Connection.

    reconciling bool

    Output only. Set to true when the connection is being set up or updated in the background.

    update_time str

    Output only. Server assigned timestamp for when the connection was updated.

    createTime String

    Output only. Server assigned timestamp for when the connection was created.

    etag String

    This checksum is computed by the server based on the value of other fields, and may be sent on update and delete requests to ensure the client has an up-to-date value before proceeding.

    id String

    The provider-assigned unique ID for this managed resource.

    installationStates List<Property Map>

    Output only. Installation state of the Connection.

    reconciling Boolean

    Output only. Set to true when the connection is being set up or updated in the background.

    updateTime String

    Output only. Server assigned timestamp for when the connection was updated.

    Look up Existing Connection Resource

    Get an existing Connection resource’s state with the given name, ID, and optional extra properties used to qualify the lookup.

    public static get(name: string, id: Input<ID>, state?: ConnectionState, opts?: CustomResourceOptions): Connection
    @staticmethod
def get(resource_name: str,
        id: str,
        opts: Optional[ResourceOptions] = None,
        annotations: Optional[Mapping[str, str]] = None,
        create_time: Optional[str] = None,
        disabled: Optional[bool] = None,
        etag: Optional[str] = None,
        github_config: Optional[ConnectionGithubConfigArgs] = None,
        github_enterprise_config: Optional[ConnectionGithubEnterpriseConfigArgs] = None,
        gitlab_config: Optional[ConnectionGitlabConfigArgs] = None,
        installation_states: Optional[Sequence[ConnectionInstallationStateArgs]] = None,
        location: Optional[str] = None,
        name: Optional[str] = None,
        project: Optional[str] = None,
        reconciling: Optional[bool] = None,
        update_time: Optional[str] = None) -> Connection
    func GetConnection(ctx *Context, name string, id IDInput, state *ConnectionState, opts ...ResourceOption) (*Connection, error)
    public static Connection Get(string name, Input<string> id, ConnectionState? state, CustomResourceOptions? opts = null)
    public static Connection get(String name, Output<String> id, ConnectionState state, CustomResourceOptions options)
    Resource lookup is not supported in YAML
    name
    The unique name of the resulting resource.
    id
    The unique provider ID of the resource to lookup.
    state
    Any extra arguments used during the lookup.
    opts
    A bag of options that control this resource's behavior.
    resource_name
    The unique name of the resulting resource.
    id
    The unique provider ID of the resource to lookup.
    name
    The unique name of the resulting resource.
    id
    The unique provider ID of the resource to lookup.
    state
    Any extra arguments used during the lookup.
    opts
    A bag of options that control this resource's behavior.
    name
    The unique name of the resulting resource.
    id
    The unique provider ID of the resource to lookup.
    state
    Any extra arguments used during the lookup.
    opts
    A bag of options that control this resource's behavior.
    name
    The unique name of the resulting resource.
    id
    The unique provider ID of the resource to lookup.
    state
    Any extra arguments used during the lookup.
    opts
    A bag of options that control this resource's behavior.
    The following state arguments are supported:
    Annotations Dictionary<string, string>

    Allows clients to store small amounts of arbitrary data.

    CreateTime string

    Output only. Server assigned timestamp for when the connection was created.

    Disabled bool

    If disabled is set to true, functionality is disabled for this connection. Repository based API methods and webhooks processing for repositories in this connection will be disabled.

    Etag string

    This checksum is computed by the server based on the value of other fields, and may be sent on update and delete requests to ensure the client has an up-to-date value before proceeding.

    GithubConfig ConnectionGithubConfig

    Configuration for connections to github.com.

    GithubEnterpriseConfig ConnectionGithubEnterpriseConfig

    Configuration for connections to an instance of GitHub Enterprise.

    GitlabConfig ConnectionGitlabConfig

    Configuration for connections to gitlab.com or an instance of GitLab Enterprise.

    InstallationStates List<ConnectionInstallationState>

    Output only. Installation state of the Connection.

    Location string

    The location for the resource

    Name string

    Immutable. The resource name of the connection, in the format projects/{project}/locations/{location}/connections/{connection_id}.

    Project string

    The project for the resource

    Reconciling bool

    Output only. Set to true when the connection is being set up or updated in the background.

    UpdateTime string

    Output only. Server assigned timestamp for when the connection was updated.

    Annotations map[string]string

    Allows clients to store small amounts of arbitrary data.

    CreateTime string

    Output only. Server assigned timestamp for when the connection was created.

    Disabled bool

    If disabled is set to true, functionality is disabled for this connection. Repository based API methods and webhooks processing for repositories in this connection will be disabled.

    Etag string

    This checksum is computed by the server based on the value of other fields, and may be sent on update and delete requests to ensure the client has an up-to-date value before proceeding.

    GithubConfig ConnectionGithubConfigArgs

    Configuration for connections to github.com.

    GithubEnterpriseConfig ConnectionGithubEnterpriseConfigArgs

    Configuration for connections to an instance of GitHub Enterprise.

    GitlabConfig ConnectionGitlabConfigArgs

    Configuration for connections to gitlab.com or an instance of GitLab Enterprise.

    InstallationStates []ConnectionInstallationStateArgs

    Output only. Installation state of the Connection.

    Location string

    The location for the resource

    Name string

    Immutable. The resource name of the connection, in the format projects/{project}/locations/{location}/connections/{connection_id}.

    Project string

    The project for the resource

    Reconciling bool

    Output only. Set to true when the connection is being set up or updated in the background.

    UpdateTime string

    Output only. Server assigned timestamp for when the connection was updated.

    annotations Map<String,String>

    Allows clients to store small amounts of arbitrary data.

    createTime String

    Output only. Server assigned timestamp for when the connection was created.

    disabled Boolean

    If disabled is set to true, functionality is disabled for this connection. Repository based API methods and webhooks processing for repositories in this connection will be disabled.

    etag String

    This checksum is computed by the server based on the value of other fields, and may be sent on update and delete requests to ensure the client has an up-to-date value before proceeding.

    githubConfig ConnectionGithubConfig

    Configuration for connections to github.com.

    githubEnterpriseConfig ConnectionGithubEnterpriseConfig

    Configuration for connections to an instance of GitHub Enterprise.

    gitlabConfig ConnectionGitlabConfig

    Configuration for connections to gitlab.com or an instance of GitLab Enterprise.

    installationStates List<ConnectionInstallationState>

    Output only. Installation state of the Connection.

    location String

    The location for the resource

    name String

    Immutable. The resource name of the connection, in the format projects/{project}/locations/{location}/connections/{connection_id}.

    project String

    The project for the resource

    reconciling Boolean

    Output only. Set to true when the connection is being set up or updated in the background.

    updateTime String

    Output only. Server assigned timestamp for when the connection was updated.

    annotations {[key: string]: string}

    Allows clients to store small amounts of arbitrary data.

    createTime string

    Output only. Server assigned timestamp for when the connection was created.

    disabled boolean

    If disabled is set to true, functionality is disabled for this connection. Repository based API methods and webhooks processing for repositories in this connection will be disabled.

    etag string

    This checksum is computed by the server based on the value of other fields, and may be sent on update and delete requests to ensure the client has an up-to-date value before proceeding.

    githubConfig ConnectionGithubConfig

    Configuration for connections to github.com.

    githubEnterpriseConfig ConnectionGithubEnterpriseConfig

    Configuration for connections to an instance of GitHub Enterprise.

    gitlabConfig ConnectionGitlabConfig

    Configuration for connections to gitlab.com or an instance of GitLab Enterprise.

    installationStates ConnectionInstallationState[]

    Output only. Installation state of the Connection.

    location string

    The location for the resource

    name string

    Immutable. The resource name of the connection, in the format projects/{project}/locations/{location}/connections/{connection_id}.

    project string

    The project for the resource

    reconciling boolean

    Output only. Set to true when the connection is being set up or updated in the background.

    updateTime string

    Output only. Server assigned timestamp for when the connection was updated.

    annotations Mapping[str, str]

    Allows clients to store small amounts of arbitrary data.

    create_time str

    Output only. Server assigned timestamp for when the connection was created.

    disabled bool

    If disabled is set to true, functionality is disabled for this connection. Repository based API methods and webhooks processing for repositories in this connection will be disabled.

    etag str

    This checksum is computed by the server based on the value of other fields, and may be sent on update and delete requests to ensure the client has an up-to-date value before proceeding.

    github_config ConnectionGithubConfigArgs

    Configuration for connections to github.com.

    github_enterprise_config ConnectionGithubEnterpriseConfigArgs

    Configuration for connections to an instance of GitHub Enterprise.

    gitlab_config ConnectionGitlabConfigArgs

    Configuration for connections to gitlab.com or an instance of GitLab Enterprise.

    installation_states Sequence[ConnectionInstallationStateArgs]

    Output only. Installation state of the Connection.

    location str

    The location for the resource

    name str

    Immutable. The resource name of the connection, in the format projects/{project}/locations/{location}/connections/{connection_id}.

    project str

    The project for the resource

    reconciling bool

    Output only. Set to true when the connection is being set up or updated in the background.

    update_time str

    Output only. Server assigned timestamp for when the connection was updated.

    annotations Map<String>

    Allows clients to store small amounts of arbitrary data.

    createTime String

    Output only. Server assigned timestamp for when the connection was created.

    disabled Boolean

    If disabled is set to true, functionality is disabled for this connection. Repository based API methods and webhooks processing for repositories in this connection will be disabled.

    etag String

    This checksum is computed by the server based on the value of other fields, and may be sent on update and delete requests to ensure the client has an up-to-date value before proceeding.

    githubConfig Property Map

    Configuration for connections to github.com.

    githubEnterpriseConfig Property Map

    Configuration for connections to an instance of GitHub Enterprise.

    gitlabConfig Property Map

    Configuration for connections to gitlab.com or an instance of GitLab Enterprise.

    installationStates List<Property Map>

    Output only. Installation state of the Connection.

    location String

    The location for the resource

    name String

    Immutable. The resource name of the connection, in the format projects/{project}/locations/{location}/connections/{connection_id}.

    project String

    The project for the resource

    reconciling Boolean

    Output only. Set to true when the connection is being set up or updated in the background.

    updateTime String

    Output only. Server assigned timestamp for when the connection was updated.

    Supporting Types

    ConnectionGithubConfig, ConnectionGithubConfigArgs

    AppInstallationId int

    GitHub App installation id.

    AuthorizerCredential ConnectionGithubConfigAuthorizerCredential

    OAuth credential of the account that authorized the Cloud Build GitHub App. It is recommended to use a robot account instead of a human user account. The OAuth token must be tied to the Cloud Build GitHub App.

    AppInstallationId int

    GitHub App installation id.

    AuthorizerCredential ConnectionGithubConfigAuthorizerCredential

    OAuth credential of the account that authorized the Cloud Build GitHub App. It is recommended to use a robot account instead of a human user account. The OAuth token must be tied to the Cloud Build GitHub App.

    appInstallationId Integer

    GitHub App installation id.

    authorizerCredential ConnectionGithubConfigAuthorizerCredential

    OAuth credential of the account that authorized the Cloud Build GitHub App. It is recommended to use a robot account instead of a human user account. The OAuth token must be tied to the Cloud Build GitHub App.

    appInstallationId number

    GitHub App installation id.

    authorizerCredential ConnectionGithubConfigAuthorizerCredential

    OAuth credential of the account that authorized the Cloud Build GitHub App. It is recommended to use a robot account instead of a human user account. The OAuth token must be tied to the Cloud Build GitHub App.

    app_installation_id int

    GitHub App installation id.

    authorizer_credential ConnectionGithubConfigAuthorizerCredential

    OAuth credential of the account that authorized the Cloud Build GitHub App. It is recommended to use a robot account instead of a human user account. The OAuth token must be tied to the Cloud Build GitHub App.

    appInstallationId Number

    GitHub App installation id.

    authorizerCredential Property Map

    OAuth credential of the account that authorized the Cloud Build GitHub App. It is recommended to use a robot account instead of a human user account. The OAuth token must be tied to the Cloud Build GitHub App.

    ConnectionGithubConfigAuthorizerCredential, ConnectionGithubConfigAuthorizerCredentialArgs

    OauthTokenSecretVersion string

    A SecretManager resource containing the OAuth token that authorizes the Cloud Build connection. Format: projects/*/secrets/*/versions/*.

    Username string

    Output only. The username associated to this token.

    OauthTokenSecretVersion string

    A SecretManager resource containing the OAuth token that authorizes the Cloud Build connection. Format: projects/*/secrets/*/versions/*.

    Username string

    Output only. The username associated to this token.

    oauthTokenSecretVersion String

    A SecretManager resource containing the OAuth token that authorizes the Cloud Build connection. Format: projects/*/secrets/*/versions/*.

    username String

    Output only. The username associated to this token.

    oauthTokenSecretVersion string

    A SecretManager resource containing the OAuth token that authorizes the Cloud Build connection. Format: projects/*/secrets/*/versions/*.

    username string

    Output only. The username associated to this token.

    oauth_token_secret_version str

    A SecretManager resource containing the OAuth token that authorizes the Cloud Build connection. Format: projects/*/secrets/*/versions/*.

    username str

    Output only. The username associated to this token.

    oauthTokenSecretVersion String

    A SecretManager resource containing the OAuth token that authorizes the Cloud Build connection. Format: projects/*/secrets/*/versions/*.

    username String

    Output only. The username associated to this token.

    ConnectionGithubEnterpriseConfig, ConnectionGithubEnterpriseConfigArgs

    HostUri string

    Required. The URI of the GitHub Enterprise host this connection is for.

    AppId int

    Id of the GitHub App created from the manifest.

    AppInstallationId int

    ID of the installation of the GitHub App.

    AppSlug string

    The URL-friendly name of the GitHub App.

    PrivateKeySecretVersion string

    SecretManager resource containing the private key of the GitHub App, formatted as projects/*/secrets/*/versions/*.

    ServiceDirectoryConfig ConnectionGithubEnterpriseConfigServiceDirectoryConfig

    Configuration for using Service Directory to privately connect to a GitHub Enterprise server. This should only be set if the GitHub Enterprise server is hosted on-premises and not reachable by public internet. If this field is left empty, calls to the GitHub Enterprise server will be made over the public internet.

    SslCa string

    SSL certificate to use for requests to GitHub Enterprise.

    WebhookSecretSecretVersion string

    SecretManager resource containing the webhook secret of the GitHub App, formatted as projects/*/secrets/*/versions/*.

    HostUri string

    Required. The URI of the GitHub Enterprise host this connection is for.

    AppId int

    Id of the GitHub App created from the manifest.

    AppInstallationId int

    ID of the installation of the GitHub App.

    AppSlug string

    The URL-friendly name of the GitHub App.

    PrivateKeySecretVersion string

    SecretManager resource containing the private key of the GitHub App, formatted as projects/*/secrets/*/versions/*.

    ServiceDirectoryConfig ConnectionGithubEnterpriseConfigServiceDirectoryConfig

    Configuration for using Service Directory to privately connect to a GitHub Enterprise server. This should only be set if the GitHub Enterprise server is hosted on-premises and not reachable by public internet. If this field is left empty, calls to the GitHub Enterprise server will be made over the public internet.

    SslCa string

    SSL certificate to use for requests to GitHub Enterprise.

    WebhookSecretSecretVersion string

    SecretManager resource containing the webhook secret of the GitHub App, formatted as projects/*/secrets/*/versions/*.

    hostUri String

    Required. The URI of the GitHub Enterprise host this connection is for.

    appId Integer

    Id of the GitHub App created from the manifest.

    appInstallationId Integer

    ID of the installation of the GitHub App.

    appSlug String

    The URL-friendly name of the GitHub App.

    privateKeySecretVersion String

    SecretManager resource containing the private key of the GitHub App, formatted as projects/*/secrets/*/versions/*.

    serviceDirectoryConfig ConnectionGithubEnterpriseConfigServiceDirectoryConfig

    Configuration for using Service Directory to privately connect to a GitHub Enterprise server. This should only be set if the GitHub Enterprise server is hosted on-premises and not reachable by public internet. If this field is left empty, calls to the GitHub Enterprise server will be made over the public internet.

    sslCa String

    SSL certificate to use for requests to GitHub Enterprise.

    webhookSecretSecretVersion String

    SecretManager resource containing the webhook secret of the GitHub App, formatted as projects/*/secrets/*/versions/*.

    hostUri string

    Required. The URI of the GitHub Enterprise host this connection is for.

    appId number

    Id of the GitHub App created from the manifest.

    appInstallationId number

    ID of the installation of the GitHub App.

    appSlug string

    The URL-friendly name of the GitHub App.

    privateKeySecretVersion string

    SecretManager resource containing the private key of the GitHub App, formatted as projects/*/secrets/*/versions/*.

    serviceDirectoryConfig ConnectionGithubEnterpriseConfigServiceDirectoryConfig

    Configuration for using Service Directory to privately connect to a GitHub Enterprise server. This should only be set if the GitHub Enterprise server is hosted on-premises and not reachable by public internet. If this field is left empty, calls to the GitHub Enterprise server will be made over the public internet.

    sslCa string

    SSL certificate to use for requests to GitHub Enterprise.

    webhookSecretSecretVersion string

    SecretManager resource containing the webhook secret of the GitHub App, formatted as projects/*/secrets/*/versions/*.

    host_uri str

    Required. The URI of the GitHub Enterprise host this connection is for.

    app_id int

    Id of the GitHub App created from the manifest.

    app_installation_id int

    ID of the installation of the GitHub App.

    app_slug str

    The URL-friendly name of the GitHub App.

    private_key_secret_version str

    SecretManager resource containing the private key of the GitHub App, formatted as projects/*/secrets/*/versions/*.

    service_directory_config ConnectionGithubEnterpriseConfigServiceDirectoryConfig

    Configuration for using Service Directory to privately connect to a GitHub Enterprise server. This should only be set if the GitHub Enterprise server is hosted on-premises and not reachable by public internet. If this field is left empty, calls to the GitHub Enterprise server will be made over the public internet.

    ssl_ca str

    SSL certificate to use for requests to GitHub Enterprise.

    webhook_secret_secret_version str

    SecretManager resource containing the webhook secret of the GitHub App, formatted as projects/*/secrets/*/versions/*.

    hostUri String

    Required. The URI of the GitHub Enterprise host this connection is for.

    appId Number

    Id of the GitHub App created from the manifest.

    appInstallationId Number

    ID of the installation of the GitHub App.

    appSlug String

    The URL-friendly name of the GitHub App.

    privateKeySecretVersion String

    SecretManager resource containing the private key of the GitHub App, formatted as projects/*/secrets/*/versions/*.

    serviceDirectoryConfig Property Map

    Configuration for using Service Directory to privately connect to a GitHub Enterprise server. This should only be set if the GitHub Enterprise server is hosted on-premises and not reachable by public internet. If this field is left empty, calls to the GitHub Enterprise server will be made over the public internet.

    sslCa String

    SSL certificate to use for requests to GitHub Enterprise.

    webhookSecretSecretVersion String

    SecretManager resource containing the webhook secret of the GitHub App, formatted as projects/*/secrets/*/versions/*.

    ConnectionGithubEnterpriseConfigServiceDirectoryConfig, ConnectionGithubEnterpriseConfigServiceDirectoryConfigArgs

    Service string

    Required. The Service Directory service name. Format: projects/{project}/locations/{location}/namespaces/{namespace}/services/{service}.

    Service string

    Required. The Service Directory service name. Format: projects/{project}/locations/{location}/namespaces/{namespace}/services/{service}.

    service String

    Required. The Service Directory service name. Format: projects/{project}/locations/{location}/namespaces/{namespace}/services/{service}.

    service string

    Required. The Service Directory service name. Format: projects/{project}/locations/{location}/namespaces/{namespace}/services/{service}.

    service str

    Required. The Service Directory service name. Format: projects/{project}/locations/{location}/namespaces/{namespace}/services/{service}.

    service String

    Required. The Service Directory service name. Format: projects/{project}/locations/{location}/namespaces/{namespace}/services/{service}.

    ConnectionGitlabConfig, ConnectionGitlabConfigArgs

    AuthorizerCredential ConnectionGitlabConfigAuthorizerCredential

    Required. A GitLab personal access token with the api scope access.

    ReadAuthorizerCredential ConnectionGitlabConfigReadAuthorizerCredential

    Required. A GitLab personal access token with the minimum read_api scope access.

    WebhookSecretSecretVersion string

    Required. Immutable. SecretManager resource containing the webhook secret of a GitLab Enterprise project, formatted as projects/*/secrets/*/versions/*.

    HostUri string

    The URI of the GitLab Enterprise host this connection is for. If not specified, the default value is https://gitlab.com.

    ServerVersion string

    Output only. Version of the GitLab Enterprise server running on the host_uri.

    ServiceDirectoryConfig ConnectionGitlabConfigServiceDirectoryConfig

    Configuration for using Service Directory to privately connect to a GitLab Enterprise server. This should only be set if the GitLab Enterprise server is hosted on-premises and not reachable by public internet. If this field is left empty, calls to the GitLab Enterprise server will be made over the public internet.

    SslCa string

    SSL certificate to use for requests to GitLab Enterprise.

    AuthorizerCredential ConnectionGitlabConfigAuthorizerCredential

    Required. A GitLab personal access token with the api scope access.

    ReadAuthorizerCredential ConnectionGitlabConfigReadAuthorizerCredential

    Required. A GitLab personal access token with the minimum read_api scope access.

    WebhookSecretSecretVersion string

    Required. Immutable. SecretManager resource containing the webhook secret of a GitLab Enterprise project, formatted as projects/*/secrets/*/versions/*.

    HostUri string

    The URI of the GitLab Enterprise host this connection is for. If not specified, the default value is https://gitlab.com.

    ServerVersion string

    Output only. Version of the GitLab Enterprise server running on the host_uri.

    ServiceDirectoryConfig ConnectionGitlabConfigServiceDirectoryConfig

    Configuration for using Service Directory to privately connect to a GitLab Enterprise server. This should only be set if the GitLab Enterprise server is hosted on-premises and not reachable by public internet. If this field is left empty, calls to the GitLab Enterprise server will be made over the public internet.

    SslCa string

    SSL certificate to use for requests to GitLab Enterprise.

    authorizerCredential ConnectionGitlabConfigAuthorizerCredential

    Required. A GitLab personal access token with the api scope access.

    readAuthorizerCredential ConnectionGitlabConfigReadAuthorizerCredential

    Required. A GitLab personal access token with the minimum read_api scope access.

    webhookSecretSecretVersion String

    Required. Immutable. SecretManager resource containing the webhook secret of a GitLab Enterprise project, formatted as projects/*/secrets/*/versions/*.

    hostUri String

    The URI of the GitLab Enterprise host this connection is for. If not specified, the default value is https://gitlab.com.

    serverVersion String

    Output only. Version of the GitLab Enterprise server running on the host_uri.

    serviceDirectoryConfig ConnectionGitlabConfigServiceDirectoryConfig

    Configuration for using Service Directory to privately connect to a GitLab Enterprise server. This should only be set if the GitLab Enterprise server is hosted on-premises and not reachable by public internet. If this field is left empty, calls to the GitLab Enterprise server will be made over the public internet.

    sslCa String

    SSL certificate to use for requests to GitLab Enterprise.

    authorizerCredential ConnectionGitlabConfigAuthorizerCredential

    Required. A GitLab personal access token with the api scope access.

    readAuthorizerCredential ConnectionGitlabConfigReadAuthorizerCredential

    Required. A GitLab personal access token with the minimum read_api scope access.

    webhookSecretSecretVersion string

    Required. Immutable. SecretManager resource containing the webhook secret of a GitLab Enterprise project, formatted as projects/*/secrets/*/versions/*.

    hostUri string

    The URI of the GitLab Enterprise host this connection is for. If not specified, the default value is https://gitlab.com.

    serverVersion string

    Output only. Version of the GitLab Enterprise server running on the host_uri.

    serviceDirectoryConfig ConnectionGitlabConfigServiceDirectoryConfig

    Configuration for using Service Directory to privately connect to a GitLab Enterprise server. This should only be set if the GitLab Enterprise server is hosted on-premises and not reachable by public internet. If this field is left empty, calls to the GitLab Enterprise server will be made over the public internet.

    sslCa string

    SSL certificate to use for requests to GitLab Enterprise.

    authorizer_credential ConnectionGitlabConfigAuthorizerCredential

    Required. A GitLab personal access token with the api scope access.

    read_authorizer_credential ConnectionGitlabConfigReadAuthorizerCredential

    Required. A GitLab personal access token with the minimum read_api scope access.

    webhook_secret_secret_version str

    Required. Immutable. SecretManager resource containing the webhook secret of a GitLab Enterprise project, formatted as projects/*/secrets/*/versions/*.

    host_uri str

    The URI of the GitLab Enterprise host this connection is for. If not specified, the default value is https://gitlab.com.

    server_version str

    Output only. Version of the GitLab Enterprise server running on the host_uri.

    service_directory_config ConnectionGitlabConfigServiceDirectoryConfig

    Configuration for using Service Directory to privately connect to a GitLab Enterprise server. This should only be set if the GitLab Enterprise server is hosted on-premises and not reachable by public internet. If this field is left empty, calls to the GitLab Enterprise server will be made over the public internet.

    ssl_ca str

    SSL certificate to use for requests to GitLab Enterprise.

    authorizerCredential Property Map

    Required. A GitLab personal access token with the api scope access.

    readAuthorizerCredential Property Map

    Required. A GitLab personal access token with the minimum read_api scope access.

    webhookSecretSecretVersion String

    Required. Immutable. SecretManager resource containing the webhook secret of a GitLab Enterprise project, formatted as projects/*/secrets/*/versions/*.

    hostUri String

    The URI of the GitLab Enterprise host this connection is for. If not specified, the default value is https://gitlab.com.

    serverVersion String

    Output only. Version of the GitLab Enterprise server running on the host_uri.

    serviceDirectoryConfig Property Map

    Configuration for using Service Directory to privately connect to a GitLab Enterprise server. This should only be set if the GitLab Enterprise server is hosted on-premises and not reachable by public internet. If this field is left empty, calls to the GitLab Enterprise server will be made over the public internet.

    sslCa String

    SSL certificate to use for requests to GitLab Enterprise.

    ConnectionGitlabConfigAuthorizerCredential, ConnectionGitlabConfigAuthorizerCredentialArgs

    UserTokenSecretVersion string

    Required. A SecretManager resource containing the user token that authorizes the Cloud Build connection. Format: projects/*/secrets/*/versions/*.

    Username string

    Output only. The username associated to this token.

    UserTokenSecretVersion string

    Required. A SecretManager resource containing the user token that authorizes the Cloud Build connection. Format: projects/*/secrets/*/versions/*.

    Username string

    Output only. The username associated to this token.

    userTokenSecretVersion String

    Required. A SecretManager resource containing the user token that authorizes the Cloud Build connection. Format: projects/*/secrets/*/versions/*.

    username String

    Output only. The username associated to this token.

    userTokenSecretVersion string

    Required. A SecretManager resource containing the user token that authorizes the Cloud Build connection. Format: projects/*/secrets/*/versions/*.

    username string

    Output only. The username associated to this token.

    user_token_secret_version str

    Required. A SecretManager resource containing the user token that authorizes the Cloud Build connection. Format: projects/*/secrets/*/versions/*.

    username str

    Output only. The username associated to this token.

    userTokenSecretVersion String

    Required. A SecretManager resource containing the user token that authorizes the Cloud Build connection. Format: projects/*/secrets/*/versions/*.

    username String

    Output only. The username associated to this token.

    ConnectionGitlabConfigReadAuthorizerCredential, ConnectionGitlabConfigReadAuthorizerCredentialArgs

    UserTokenSecretVersion string

    Required. A SecretManager resource containing the user token that authorizes the Cloud Build connection. Format: projects/*/secrets/*/versions/*.

    Username string

    Output only. The username associated to this token.

    UserTokenSecretVersion string

    Required. A SecretManager resource containing the user token that authorizes the Cloud Build connection. Format: projects/*/secrets/*/versions/*.

    Username string

    Output only. The username associated to this token.

    userTokenSecretVersion String

    Required. A SecretManager resource containing the user token that authorizes the Cloud Build connection. Format: projects/*/secrets/*/versions/*.

    username String

    Output only. The username associated to this token.

    userTokenSecretVersion string

    Required. A SecretManager resource containing the user token that authorizes the Cloud Build connection. Format: projects/*/secrets/*/versions/*.

    username string

    Output only. The username associated to this token.

    user_token_secret_version str

    Required. A SecretManager resource containing the user token that authorizes the Cloud Build connection. Format: projects/*/secrets/*/versions/*.

    username str

    Output only. The username associated to this token.

    userTokenSecretVersion String

    Required. A SecretManager resource containing the user token that authorizes the Cloud Build connection. Format: projects/*/secrets/*/versions/*.

    username String

    Output only. The username associated to this token.

    ConnectionGitlabConfigServiceDirectoryConfig, ConnectionGitlabConfigServiceDirectoryConfigArgs

    Service string

    Required. The Service Directory service name. Format: projects/{project}/locations/{location}/namespaces/{namespace}/services/{service}.

    Service string

    Required. The Service Directory service name. Format: projects/{project}/locations/{location}/namespaces/{namespace}/services/{service}.

    service String

    Required. The Service Directory service name. Format: projects/{project}/locations/{location}/namespaces/{namespace}/services/{service}.

    service string

    Required. The Service Directory service name. Format: projects/{project}/locations/{location}/namespaces/{namespace}/services/{service}.

    service str

    Required. The Service Directory service name. Format: projects/{project}/locations/{location}/namespaces/{namespace}/services/{service}.

    service String

    Required. The Service Directory service name. Format: projects/{project}/locations/{location}/namespaces/{namespace}/services/{service}.

    ConnectionInstallationState, ConnectionInstallationStateArgs

    ActionUri string
    Message string
    Stage string
    ActionUri string
    Message string
    Stage string
    actionUri String
    message String
    stage String
    actionUri string
    message string
    stage string
    actionUri String
    message String
    stage String

    Import

    Connection can be imported using any of these accepted formats

     $ pulumi import gcp:cloudbuildv2/connection:Connection default projects/{{project}}/locations/{{location}}/connections/{{name}}

     $ pulumi import gcp:cloudbuildv2/connection:Connection default {{project}}/{{location}}/{{name}}

     $ pulumi import gcp:cloudbuildv2/connection:Connection default {{location}}/{{name}}

    Package Details

    Repository
    Google Cloud (GCP) Classic pulumi/pulumi-gcp
    License
    Apache-2.0
    Notes

    This Pulumi package is based on the google-beta Terraform Provider.

    gcp logo
    Google Cloud Classic v6.67.0 published on Wednesday, Sep 27, 2023 by Pulumi
    pulumi/pulumi-gcp