Docs Home Pulumi IaC Pulumi ESC Pulumi Insights Pulumi IDP Pulumi Cloud Packages Tutorials
  1. Packages
  2. Google Cloud (GCP) Classic
  3. API Docs
  4. iam
  5. WorkloadIdentityPoolNamespace
Google Cloud v8.34.0 published on Wednesday, Jun 11, 2025 by Pulumi
pulumi/pulumi-gcp

gcp.iam.WorkloadIdentityPoolNamespace

Explore with Pulumi AI

gcp logo
Google Cloud v8.34.0 published on Wednesday, Jun 11, 2025 by Pulumi
pulumi/pulumi-gcp

    Example Usage

    Iam Workload Identity Pool Namespace Basic

    import * as pulumi from "@pulumi/pulumi";
import * as gcp from "@pulumi/gcp";

const pool = new gcp.iam.WorkloadIdentityPool("pool", {
    workloadIdentityPoolId: "example-pool",
    mode: "TRUST_DOMAIN",
});
const example = new gcp.iam.WorkloadIdentityPoolNamespace("example", {
    workloadIdentityPoolId: pool.workloadIdentityPoolId,
    workloadIdentityPoolNamespaceId: "example-namespace",
});

    import pulumi
import pulumi_gcp as gcp

pool = gcp.iam.WorkloadIdentityPool("pool",
    workload_identity_pool_id="example-pool",
    mode="TRUST_DOMAIN")
example = gcp.iam.WorkloadIdentityPoolNamespace("example",
    workload_identity_pool_id=pool.workload_identity_pool_id,
    workload_identity_pool_namespace_id="example-namespace")

    package main

import (
	"github.com/pulumi/pulumi-gcp/sdk/v8/go/gcp/iam"
	"github.com/pulumi/pulumi/sdk/v3/go/pulumi"
)

func main() {
	pulumi.Run(func(ctx *pulumi.Context) error {
		pool, err := iam.NewWorkloadIdentityPool(ctx, "pool", &iam.WorkloadIdentityPoolArgs{
			WorkloadIdentityPoolId: pulumi.String("example-pool"),
			Mode:                   pulumi.String("TRUST_DOMAIN"),
		})
		if err != nil {
			return err
		}
		_, err = iam.NewWorkloadIdentityPoolNamespace(ctx, "example", &iam.WorkloadIdentityPoolNamespaceArgs{
			WorkloadIdentityPoolId:          pool.WorkloadIdentityPoolId,
			WorkloadIdentityPoolNamespaceId: pulumi.String("example-namespace"),
		})
		if err != nil {
			return err
		}
		return nil
	})
}

    using System.Collections.Generic;
using System.Linq;
using Pulumi;
using Gcp = Pulumi.Gcp;

return await Deployment.RunAsync(() => 
{
    var pool = new Gcp.Iam.WorkloadIdentityPool("pool", new()
    {
        WorkloadIdentityPoolId = "example-pool",
        Mode = "TRUST_DOMAIN",
    });

    var example = new Gcp.Iam.WorkloadIdentityPoolNamespace("example", new()
    {
        WorkloadIdentityPoolId = pool.WorkloadIdentityPoolId,
        WorkloadIdentityPoolNamespaceId = "example-namespace",
    });

});

    package generated_program;

import com.pulumi.Context;
import com.pulumi.Pulumi;
import com.pulumi.core.Output;
import com.pulumi.gcp.iam.WorkloadIdentityPool;
import com.pulumi.gcp.iam.WorkloadIdentityPoolArgs;
import com.pulumi.gcp.iam.WorkloadIdentityPoolNamespace;
import com.pulumi.gcp.iam.WorkloadIdentityPoolNamespaceArgs;
import java.util.List;
import java.util.ArrayList;
import java.util.Map;
import java.io.File;
import java.nio.file.Files;
import java.nio.file.Paths;

public class App {
    public static void main(String[] args) {
        Pulumi.run(App::stack);
    }

    public static void stack(Context ctx) {
        var pool = new WorkloadIdentityPool("pool", WorkloadIdentityPoolArgs.builder()
            .workloadIdentityPoolId("example-pool")
            .mode("TRUST_DOMAIN")
            .build());

        var example = new WorkloadIdentityPoolNamespace("example", WorkloadIdentityPoolNamespaceArgs.builder()
            .workloadIdentityPoolId(pool.workloadIdentityPoolId())
            .workloadIdentityPoolNamespaceId("example-namespace")
            .build());

    }
}

    resources:
  pool:
    type: gcp:iam:WorkloadIdentityPool
    properties:
      workloadIdentityPoolId: example-pool
      mode: TRUST_DOMAIN
  example:
    type: gcp:iam:WorkloadIdentityPoolNamespace
    properties:
      workloadIdentityPoolId: ${pool.workloadIdentityPoolId}
      workloadIdentityPoolNamespaceId: example-namespace

    Iam Workload Identity Pool Namespace Full

    import * as pulumi from "@pulumi/pulumi";
import * as gcp from "@pulumi/gcp";

const pool = new gcp.iam.WorkloadIdentityPool("pool", {
    workloadIdentityPoolId: "example-pool",
    mode: "TRUST_DOMAIN",
});
const example = new gcp.iam.WorkloadIdentityPoolNamespace("example", {
    workloadIdentityPoolId: pool.workloadIdentityPoolId,
    workloadIdentityPoolNamespaceId: "example-namespace",
    description: "Example Namespace in a Workload Identity Pool",
    disabled: true,
});

    import pulumi
import pulumi_gcp as gcp

pool = gcp.iam.WorkloadIdentityPool("pool",
    workload_identity_pool_id="example-pool",
    mode="TRUST_DOMAIN")
example = gcp.iam.WorkloadIdentityPoolNamespace("example",
    workload_identity_pool_id=pool.workload_identity_pool_id,
    workload_identity_pool_namespace_id="example-namespace",
    description="Example Namespace in a Workload Identity Pool",
    disabled=True)

    package main

import (
	"github.com/pulumi/pulumi-gcp/sdk/v8/go/gcp/iam"
	"github.com/pulumi/pulumi/sdk/v3/go/pulumi"
)

func main() {
	pulumi.Run(func(ctx *pulumi.Context) error {
		pool, err := iam.NewWorkloadIdentityPool(ctx, "pool", &iam.WorkloadIdentityPoolArgs{
			WorkloadIdentityPoolId: pulumi.String("example-pool"),
			Mode:                   pulumi.String("TRUST_DOMAIN"),
		})
		if err != nil {
			return err
		}
		_, err = iam.NewWorkloadIdentityPoolNamespace(ctx, "example", &iam.WorkloadIdentityPoolNamespaceArgs{
			WorkloadIdentityPoolId:          pool.WorkloadIdentityPoolId,
			WorkloadIdentityPoolNamespaceId: pulumi.String("example-namespace"),
			Description:                     pulumi.String("Example Namespace in a Workload Identity Pool"),
			Disabled:                        pulumi.Bool(true),
		})
		if err != nil {
			return err
		}
		return nil
	})
}

    using System.Collections.Generic;
using System.Linq;
using Pulumi;
using Gcp = Pulumi.Gcp;

return await Deployment.RunAsync(() => 
{
    var pool = new Gcp.Iam.WorkloadIdentityPool("pool", new()
    {
        WorkloadIdentityPoolId = "example-pool",
        Mode = "TRUST_DOMAIN",
    });

    var example = new Gcp.Iam.WorkloadIdentityPoolNamespace("example", new()
    {
        WorkloadIdentityPoolId = pool.WorkloadIdentityPoolId,
        WorkloadIdentityPoolNamespaceId = "example-namespace",
        Description = "Example Namespace in a Workload Identity Pool",
        Disabled = true,
    });

});

    package generated_program;

import com.pulumi.Context;
import com.pulumi.Pulumi;
import com.pulumi.core.Output;
import com.pulumi.gcp.iam.WorkloadIdentityPool;
import com.pulumi.gcp.iam.WorkloadIdentityPoolArgs;
import com.pulumi.gcp.iam.WorkloadIdentityPoolNamespace;
import com.pulumi.gcp.iam.WorkloadIdentityPoolNamespaceArgs;
import java.util.List;
import java.util.ArrayList;
import java.util.Map;
import java.io.File;
import java.nio.file.Files;
import java.nio.file.Paths;

public class App {
    public static void main(String[] args) {
        Pulumi.run(App::stack);
    }

    public static void stack(Context ctx) {
        var pool = new WorkloadIdentityPool("pool", WorkloadIdentityPoolArgs.builder()
            .workloadIdentityPoolId("example-pool")
            .mode("TRUST_DOMAIN")
            .build());

        var example = new WorkloadIdentityPoolNamespace("example", WorkloadIdentityPoolNamespaceArgs.builder()
            .workloadIdentityPoolId(pool.workloadIdentityPoolId())
            .workloadIdentityPoolNamespaceId("example-namespace")
            .description("Example Namespace in a Workload Identity Pool")
            .disabled(true)
            .build());

    }
}

    resources:
  pool:
    type: gcp:iam:WorkloadIdentityPool
    properties:
      workloadIdentityPoolId: example-pool
      mode: TRUST_DOMAIN
  example:
    type: gcp:iam:WorkloadIdentityPoolNamespace
    properties:
      workloadIdentityPoolId: ${pool.workloadIdentityPoolId}
      workloadIdentityPoolNamespaceId: example-namespace
      description: Example Namespace in a Workload Identity Pool
      disabled: true

    Create WorkloadIdentityPoolNamespace Resource

    Resources are created with functions called constructors. To learn more about declaring and configuring resources, see Resources.

    Constructor syntax

    new WorkloadIdentityPoolNamespace(name: string, args: WorkloadIdentityPoolNamespaceArgs, opts?: CustomResourceOptions);
    @overload
def WorkloadIdentityPoolNamespace(resource_name: str,
                                  args: WorkloadIdentityPoolNamespaceArgs,
                                  opts: Optional[ResourceOptions] = None)

@overload
def WorkloadIdentityPoolNamespace(resource_name: str,
                                  opts: Optional[ResourceOptions] = None,
                                  workload_identity_pool_id: Optional[str] = None,
                                  workload_identity_pool_namespace_id: Optional[str] = None,
                                  description: Optional[str] = None,
                                  disabled: Optional[bool] = None,
                                  project: Optional[str] = None)
    func NewWorkloadIdentityPoolNamespace(ctx *Context, name string, args WorkloadIdentityPoolNamespaceArgs, opts ...ResourceOption) (*WorkloadIdentityPoolNamespace, error)
    public WorkloadIdentityPoolNamespace(string name, WorkloadIdentityPoolNamespaceArgs args, CustomResourceOptions? opts = null)
    public WorkloadIdentityPoolNamespace(String name, WorkloadIdentityPoolNamespaceArgs args)
public WorkloadIdentityPoolNamespace(String name, WorkloadIdentityPoolNamespaceArgs args, CustomResourceOptions options)

    type: gcp:iam:WorkloadIdentityPoolNamespace
properties: # The arguments to resource properties.
options: # Bag of options to control resource's behavior.

    Parameters

    name string
    The unique name of the resource.
    args WorkloadIdentityPoolNamespaceArgs
    The arguments to resource properties.
    opts CustomResourceOptions
    Bag of options to control resource's behavior.
    resource_name str
    The unique name of the resource.
    args WorkloadIdentityPoolNamespaceArgs
    The arguments to resource properties.
    opts ResourceOptions
    Bag of options to control resource's behavior.
    ctx Context
    Context object for the current deployment.
    name string
    The unique name of the resource.
    args WorkloadIdentityPoolNamespaceArgs
    The arguments to resource properties.
    opts ResourceOption
    Bag of options to control resource's behavior.
    name string
    The unique name of the resource.
    args WorkloadIdentityPoolNamespaceArgs
    The arguments to resource properties.
    opts CustomResourceOptions
    Bag of options to control resource's behavior.
    name String
    The unique name of the resource.
    args WorkloadIdentityPoolNamespaceArgs
    The arguments to resource properties.
    options CustomResourceOptions
    Bag of options to control resource's behavior.

    Constructor example

    The following reference example uses placeholder values for all input properties.

    var workloadIdentityPoolNamespaceResource = new Gcp.Iam.WorkloadIdentityPoolNamespace("workloadIdentityPoolNamespaceResource", new()
{
    WorkloadIdentityPoolId = "string",
    WorkloadIdentityPoolNamespaceId = "string",
    Description = "string",
    Disabled = false,
    Project = "string",
});

    example, err := iam.NewWorkloadIdentityPoolNamespace(ctx, "workloadIdentityPoolNamespaceResource", &iam.WorkloadIdentityPoolNamespaceArgs{
	WorkloadIdentityPoolId:          pulumi.String("string"),
	WorkloadIdentityPoolNamespaceId: pulumi.String("string"),
	Description:                     pulumi.String("string"),
	Disabled:                        pulumi.Bool(false),
	Project:                         pulumi.String("string"),
})

    var workloadIdentityPoolNamespaceResource = new WorkloadIdentityPoolNamespace("workloadIdentityPoolNamespaceResource", WorkloadIdentityPoolNamespaceArgs.builder()
    .workloadIdentityPoolId("string")
    .workloadIdentityPoolNamespaceId("string")
    .description("string")
    .disabled(false)
    .project("string")
    .build());

    workload_identity_pool_namespace_resource = gcp.iam.WorkloadIdentityPoolNamespace("workloadIdentityPoolNamespaceResource",
    workload_identity_pool_id="string",
    workload_identity_pool_namespace_id="string",
    description="string",
    disabled=False,
    project="string")

    const workloadIdentityPoolNamespaceResource = new gcp.iam.WorkloadIdentityPoolNamespace("workloadIdentityPoolNamespaceResource", {
    workloadIdentityPoolId: "string",
    workloadIdentityPoolNamespaceId: "string",
    description: "string",
    disabled: false,
    project: "string",
});

    type: gcp:iam:WorkloadIdentityPoolNamespace
properties:
    description: string
    disabled: false
    project: string
    workloadIdentityPoolId: string
    workloadIdentityPoolNamespaceId: string

    WorkloadIdentityPoolNamespace Resource Properties

    To learn more about resource properties and how to use them, see Inputs and Outputs in the Architecture and Concepts docs.

    Inputs

    In Python, inputs that are objects can be passed either as argument classes or as dictionary literals.

    The WorkloadIdentityPoolNamespace resource accepts the following input properties:

    WorkloadIdentityPoolId string
    The ID to use for the pool, which becomes the final component of the resource name. This value should be 4-32 characters, and may contain the characters [a-z0-9-]. The prefix gcp- is reserved for use by Google, and may not be specified.
    WorkloadIdentityPoolNamespaceId string

    The ID to use for the namespace. This value must:

    • contain at most 63 characters
    • contain only lowercase alphanumeric characters or -
    • start with an alphanumeric character
    • end with an alphanumeric character

    The prefix gcp- will be reserved for future uses.

    Description string
    A description of the namespace. Cannot exceed 256 characters.
    Disabled bool
    Whether the namespace is disabled. If disabled, credentials may no longer be issued for identities within this namespace, however existing credentials will still be accepted until they expire.
    Project string
    The ID of the project in which the resource belongs. If it is not provided, the provider project is used.
    WorkloadIdentityPoolId string
    The ID to use for the pool, which becomes the final component of the resource name. This value should be 4-32 characters, and may contain the characters [a-z0-9-]. The prefix gcp- is reserved for use by Google, and may not be specified.
    WorkloadIdentityPoolNamespaceId string

    The ID to use for the namespace. This value must:

    • contain at most 63 characters
    • contain only lowercase alphanumeric characters or -
    • start with an alphanumeric character
    • end with an alphanumeric character

    The prefix gcp- will be reserved for future uses.

    Description string
    A description of the namespace. Cannot exceed 256 characters.
    Disabled bool
    Whether the namespace is disabled. If disabled, credentials may no longer be issued for identities within this namespace, however existing credentials will still be accepted until they expire.
    Project string
    The ID of the project in which the resource belongs. If it is not provided, the provider project is used.
    workloadIdentityPoolId String
    The ID to use for the pool, which becomes the final component of the resource name. This value should be 4-32 characters, and may contain the characters [a-z0-9-]. The prefix gcp- is reserved for use by Google, and may not be specified.
    workloadIdentityPoolNamespaceId String

    The ID to use for the namespace. This value must:

    • contain at most 63 characters
    • contain only lowercase alphanumeric characters or -
    • start with an alphanumeric character
    • end with an alphanumeric character

    The prefix gcp- will be reserved for future uses.

    description String
    A description of the namespace. Cannot exceed 256 characters.
    disabled Boolean
    Whether the namespace is disabled. If disabled, credentials may no longer be issued for identities within this namespace, however existing credentials will still be accepted until they expire.
    project String
    The ID of the project in which the resource belongs. If it is not provided, the provider project is used.
    workloadIdentityPoolId string
    The ID to use for the pool, which becomes the final component of the resource name. This value should be 4-32 characters, and may contain the characters [a-z0-9-]. The prefix gcp- is reserved for use by Google, and may not be specified.
    workloadIdentityPoolNamespaceId string

    The ID to use for the namespace. This value must:

    • contain at most 63 characters
    • contain only lowercase alphanumeric characters or -
    • start with an alphanumeric character
    • end with an alphanumeric character

    The prefix gcp- will be reserved for future uses.

    description string
    A description of the namespace. Cannot exceed 256 characters.
    disabled boolean
    Whether the namespace is disabled. If disabled, credentials may no longer be issued for identities within this namespace, however existing credentials will still be accepted until they expire.
    project string
    The ID of the project in which the resource belongs. If it is not provided, the provider project is used.
    workload_identity_pool_id str
    The ID to use for the pool, which becomes the final component of the resource name. This value should be 4-32 characters, and may contain the characters [a-z0-9-]. The prefix gcp- is reserved for use by Google, and may not be specified.
    workload_identity_pool_namespace_id str

    The ID to use for the namespace. This value must:

    • contain at most 63 characters
    • contain only lowercase alphanumeric characters or -
    • start with an alphanumeric character
    • end with an alphanumeric character

    The prefix gcp- will be reserved for future uses.

    description str
    A description of the namespace. Cannot exceed 256 characters.
    disabled bool
    Whether the namespace is disabled. If disabled, credentials may no longer be issued for identities within this namespace, however existing credentials will still be accepted until they expire.
    project str
    The ID of the project in which the resource belongs. If it is not provided, the provider project is used.
    workloadIdentityPoolId String
    The ID to use for the pool, which becomes the final component of the resource name. This value should be 4-32 characters, and may contain the characters [a-z0-9-]. The prefix gcp- is reserved for use by Google, and may not be specified.
    workloadIdentityPoolNamespaceId String

    The ID to use for the namespace. This value must:

    • contain at most 63 characters
    • contain only lowercase alphanumeric characters or -
    • start with an alphanumeric character
    • end with an alphanumeric character

    The prefix gcp- will be reserved for future uses.

    description String
    A description of the namespace. Cannot exceed 256 characters.
    disabled Boolean
    Whether the namespace is disabled. If disabled, credentials may no longer be issued for identities within this namespace, however existing credentials will still be accepted until they expire.
    project String
    The ID of the project in which the resource belongs. If it is not provided, the provider project is used.

    Outputs

    All input properties are implicitly available as output properties. Additionally, the WorkloadIdentityPoolNamespace resource produces the following output properties:

    Id string
    The provider-assigned unique ID for this managed resource.
    Name string
    The resource name of the namespace as projects/{project_number}/locations/global/workloadIdentityPools/{workload_identity_pool_id}/namespaces/{workload_identity_pool_namespace_id}.
    OwnerServices List<WorkloadIdentityPoolNamespaceOwnerService>
    Defines the owner that is allowed to mutate this resource. If present, this resource can only be mutated by the owner. Structure is documented below.
    State string
    The current state of the namespace.

    • ACTIVE: The namespace is active.
    • DELETED: The namespace is soft-deleted. Soft-deleted namespaces are permanently deleted after approximately 30 days. You can restore a soft-deleted namespace using UndeleteWorkloadIdentityPoolNamespace. You cannot reuse the ID of a soft-deleted namespace until it is permanently deleted.
    Id string
    The provider-assigned unique ID for this managed resource.
    Name string
    The resource name of the namespace as projects/{project_number}/locations/global/workloadIdentityPools/{workload_identity_pool_id}/namespaces/{workload_identity_pool_namespace_id}.
    OwnerServices []WorkloadIdentityPoolNamespaceOwnerService
    Defines the owner that is allowed to mutate this resource. If present, this resource can only be mutated by the owner. Structure is documented below.
    State string
    The current state of the namespace.

    • ACTIVE: The namespace is active.
    • DELETED: The namespace is soft-deleted. Soft-deleted namespaces are permanently deleted after approximately 30 days. You can restore a soft-deleted namespace using UndeleteWorkloadIdentityPoolNamespace. You cannot reuse the ID of a soft-deleted namespace until it is permanently deleted.
    id String
    The provider-assigned unique ID for this managed resource.
    name String
    The resource name of the namespace as projects/{project_number}/locations/global/workloadIdentityPools/{workload_identity_pool_id}/namespaces/{workload_identity_pool_namespace_id}.
    ownerServices List<WorkloadIdentityPoolNamespaceOwnerService>
    Defines the owner that is allowed to mutate this resource. If present, this resource can only be mutated by the owner. Structure is documented below.
    state String
    The current state of the namespace.

    • ACTIVE: The namespace is active.
    • DELETED: The namespace is soft-deleted. Soft-deleted namespaces are permanently deleted after approximately 30 days. You can restore a soft-deleted namespace using UndeleteWorkloadIdentityPoolNamespace. You cannot reuse the ID of a soft-deleted namespace until it is permanently deleted.
    id string
    The provider-assigned unique ID for this managed resource.
    name string
    The resource name of the namespace as projects/{project_number}/locations/global/workloadIdentityPools/{workload_identity_pool_id}/namespaces/{workload_identity_pool_namespace_id}.
    ownerServices WorkloadIdentityPoolNamespaceOwnerService[]
    Defines the owner that is allowed to mutate this resource. If present, this resource can only be mutated by the owner. Structure is documented below.
    state string
    The current state of the namespace.

    • ACTIVE: The namespace is active.
    • DELETED: The namespace is soft-deleted. Soft-deleted namespaces are permanently deleted after approximately 30 days. You can restore a soft-deleted namespace using UndeleteWorkloadIdentityPoolNamespace. You cannot reuse the ID of a soft-deleted namespace until it is permanently deleted.
    id str
    The provider-assigned unique ID for this managed resource.
    name str
    The resource name of the namespace as projects/{project_number}/locations/global/workloadIdentityPools/{workload_identity_pool_id}/namespaces/{workload_identity_pool_namespace_id}.
    owner_services Sequence[WorkloadIdentityPoolNamespaceOwnerService]
    Defines the owner that is allowed to mutate this resource. If present, this resource can only be mutated by the owner. Structure is documented below.
    state str
    The current state of the namespace.

    • ACTIVE: The namespace is active.
    • DELETED: The namespace is soft-deleted. Soft-deleted namespaces are permanently deleted after approximately 30 days. You can restore a soft-deleted namespace using UndeleteWorkloadIdentityPoolNamespace. You cannot reuse the ID of a soft-deleted namespace until it is permanently deleted.
    id String
    The provider-assigned unique ID for this managed resource.
    name String
    The resource name of the namespace as projects/{project_number}/locations/global/workloadIdentityPools/{workload_identity_pool_id}/namespaces/{workload_identity_pool_namespace_id}.
    ownerServices List<Property Map>
    Defines the owner that is allowed to mutate this resource. If present, this resource can only be mutated by the owner. Structure is documented below.
    state String
    The current state of the namespace.

    • ACTIVE: The namespace is active.
    • DELETED: The namespace is soft-deleted. Soft-deleted namespaces are permanently deleted after approximately 30 days. You can restore a soft-deleted namespace using UndeleteWorkloadIdentityPoolNamespace. You cannot reuse the ID of a soft-deleted namespace until it is permanently deleted.

    Look up Existing WorkloadIdentityPoolNamespace Resource

    Get an existing WorkloadIdentityPoolNamespace resource’s state with the given name, ID, and optional extra properties used to qualify the lookup.

    public static get(name: string, id: Input<ID>, state?: WorkloadIdentityPoolNamespaceState, opts?: CustomResourceOptions): WorkloadIdentityPoolNamespace
    @staticmethod
def get(resource_name: str,
        id: str,
        opts: Optional[ResourceOptions] = None,
        description: Optional[str] = None,
        disabled: Optional[bool] = None,
        name: Optional[str] = None,
        owner_services: Optional[Sequence[WorkloadIdentityPoolNamespaceOwnerServiceArgs]] = None,
        project: Optional[str] = None,
        state: Optional[str] = None,
        workload_identity_pool_id: Optional[str] = None,
        workload_identity_pool_namespace_id: Optional[str] = None) -> WorkloadIdentityPoolNamespace
    func GetWorkloadIdentityPoolNamespace(ctx *Context, name string, id IDInput, state *WorkloadIdentityPoolNamespaceState, opts ...ResourceOption) (*WorkloadIdentityPoolNamespace, error)
    public static WorkloadIdentityPoolNamespace Get(string name, Input<string> id, WorkloadIdentityPoolNamespaceState? state, CustomResourceOptions? opts = null)
    public static WorkloadIdentityPoolNamespace get(String name, Output<String> id, WorkloadIdentityPoolNamespaceState state, CustomResourceOptions options)
    resources:  _:    type: gcp:iam:WorkloadIdentityPoolNamespace    get:      id: ${id}
    name
    The unique name of the resulting resource.
    id
    The unique provider ID of the resource to lookup.
    state
    Any extra arguments used during the lookup.
    opts
    A bag of options that control this resource's behavior.
    resource_name
    The unique name of the resulting resource.
    id
    The unique provider ID of the resource to lookup.
    name
    The unique name of the resulting resource.
    id
    The unique provider ID of the resource to lookup.
    state
    Any extra arguments used during the lookup.
    opts
    A bag of options that control this resource's behavior.
    name
    The unique name of the resulting resource.
    id
    The unique provider ID of the resource to lookup.
    state
    Any extra arguments used during the lookup.
    opts
    A bag of options that control this resource's behavior.
    name
    The unique name of the resulting resource.
    id
    The unique provider ID of the resource to lookup.
    state
    Any extra arguments used during the lookup.
    opts
    A bag of options that control this resource's behavior.
    The following state arguments are supported:
    Description string
    A description of the namespace. Cannot exceed 256 characters.
    Disabled bool
    Whether the namespace is disabled. If disabled, credentials may no longer be issued for identities within this namespace, however existing credentials will still be accepted until they expire.
    Name string
    The resource name of the namespace as projects/{project_number}/locations/global/workloadIdentityPools/{workload_identity_pool_id}/namespaces/{workload_identity_pool_namespace_id}.
    OwnerServices List<WorkloadIdentityPoolNamespaceOwnerService>
    Defines the owner that is allowed to mutate this resource. If present, this resource can only be mutated by the owner. Structure is documented below.
    Project string
    The ID of the project in which the resource belongs. If it is not provided, the provider project is used.
    State string
    The current state of the namespace.

    • ACTIVE: The namespace is active.
    • DELETED: The namespace is soft-deleted. Soft-deleted namespaces are permanently deleted after approximately 30 days. You can restore a soft-deleted namespace using UndeleteWorkloadIdentityPoolNamespace. You cannot reuse the ID of a soft-deleted namespace until it is permanently deleted.
    WorkloadIdentityPoolId string
    The ID to use for the pool, which becomes the final component of the resource name. This value should be 4-32 characters, and may contain the characters [a-z0-9-]. The prefix gcp- is reserved for use by Google, and may not be specified.
    WorkloadIdentityPoolNamespaceId string

    The ID to use for the namespace. This value must:

    • contain at most 63 characters
    • contain only lowercase alphanumeric characters or -
    • start with an alphanumeric character
    • end with an alphanumeric character

    The prefix gcp- will be reserved for future uses.

    Description string
    A description of the namespace. Cannot exceed 256 characters.
    Disabled bool
    Whether the namespace is disabled. If disabled, credentials may no longer be issued for identities within this namespace, however existing credentials will still be accepted until they expire.
    Name string
    The resource name of the namespace as projects/{project_number}/locations/global/workloadIdentityPools/{workload_identity_pool_id}/namespaces/{workload_identity_pool_namespace_id}.
    OwnerServices []WorkloadIdentityPoolNamespaceOwnerServiceArgs
    Defines the owner that is allowed to mutate this resource. If present, this resource can only be mutated by the owner. Structure is documented below.
    Project string
    The ID of the project in which the resource belongs. If it is not provided, the provider project is used.
    State string
    The current state of the namespace.

    • ACTIVE: The namespace is active.
    • DELETED: The namespace is soft-deleted. Soft-deleted namespaces are permanently deleted after approximately 30 days. You can restore a soft-deleted namespace using UndeleteWorkloadIdentityPoolNamespace. You cannot reuse the ID of a soft-deleted namespace until it is permanently deleted.
    WorkloadIdentityPoolId string
    The ID to use for the pool, which becomes the final component of the resource name. This value should be 4-32 characters, and may contain the characters [a-z0-9-]. The prefix gcp- is reserved for use by Google, and may not be specified.
    WorkloadIdentityPoolNamespaceId string

    The ID to use for the namespace. This value must:

    • contain at most 63 characters
    • contain only lowercase alphanumeric characters or -
    • start with an alphanumeric character
    • end with an alphanumeric character

    The prefix gcp- will be reserved for future uses.

    description String
    A description of the namespace. Cannot exceed 256 characters.
    disabled Boolean
    Whether the namespace is disabled. If disabled, credentials may no longer be issued for identities within this namespace, however existing credentials will still be accepted until they expire.
    name String
    The resource name of the namespace as projects/{project_number}/locations/global/workloadIdentityPools/{workload_identity_pool_id}/namespaces/{workload_identity_pool_namespace_id}.
    ownerServices List<WorkloadIdentityPoolNamespaceOwnerService>
    Defines the owner that is allowed to mutate this resource. If present, this resource can only be mutated by the owner. Structure is documented below.
    project String
    The ID of the project in which the resource belongs. If it is not provided, the provider project is used.
    state String
    The current state of the namespace.

    • ACTIVE: The namespace is active.
    • DELETED: The namespace is soft-deleted. Soft-deleted namespaces are permanently deleted after approximately 30 days. You can restore a soft-deleted namespace using UndeleteWorkloadIdentityPoolNamespace. You cannot reuse the ID of a soft-deleted namespace until it is permanently deleted.
    workloadIdentityPoolId String
    The ID to use for the pool, which becomes the final component of the resource name. This value should be 4-32 characters, and may contain the characters [a-z0-9-]. The prefix gcp- is reserved for use by Google, and may not be specified.
    workloadIdentityPoolNamespaceId String

    The ID to use for the namespace. This value must:

    • contain at most 63 characters
    • contain only lowercase alphanumeric characters or -
    • start with an alphanumeric character
    • end with an alphanumeric character

    The prefix gcp- will be reserved for future uses.

    description string
    A description of the namespace. Cannot exceed 256 characters.
    disabled boolean
    Whether the namespace is disabled. If disabled, credentials may no longer be issued for identities within this namespace, however existing credentials will still be accepted until they expire.
    name string
    The resource name of the namespace as projects/{project_number}/locations/global/workloadIdentityPools/{workload_identity_pool_id}/namespaces/{workload_identity_pool_namespace_id}.
    ownerServices WorkloadIdentityPoolNamespaceOwnerService[]
    Defines the owner that is allowed to mutate this resource. If present, this resource can only be mutated by the owner. Structure is documented below.
    project string
    The ID of the project in which the resource belongs. If it is not provided, the provider project is used.
    state string
    The current state of the namespace.

    • ACTIVE: The namespace is active.
    • DELETED: The namespace is soft-deleted. Soft-deleted namespaces are permanently deleted after approximately 30 days. You can restore a soft-deleted namespace using UndeleteWorkloadIdentityPoolNamespace. You cannot reuse the ID of a soft-deleted namespace until it is permanently deleted.
    workloadIdentityPoolId string
    The ID to use for the pool, which becomes the final component of the resource name. This value should be 4-32 characters, and may contain the characters [a-z0-9-]. The prefix gcp- is reserved for use by Google, and may not be specified.
    workloadIdentityPoolNamespaceId string

    The ID to use for the namespace. This value must:

    • contain at most 63 characters
    • contain only lowercase alphanumeric characters or -
    • start with an alphanumeric character
    • end with an alphanumeric character

    The prefix gcp- will be reserved for future uses.

    description str
    A description of the namespace. Cannot exceed 256 characters.
    disabled bool
    Whether the namespace is disabled. If disabled, credentials may no longer be issued for identities within this namespace, however existing credentials will still be accepted until they expire.
    name str
    The resource name of the namespace as projects/{project_number}/locations/global/workloadIdentityPools/{workload_identity_pool_id}/namespaces/{workload_identity_pool_namespace_id}.
    owner_services Sequence[WorkloadIdentityPoolNamespaceOwnerServiceArgs]
    Defines the owner that is allowed to mutate this resource. If present, this resource can only be mutated by the owner. Structure is documented below.
    project str
    The ID of the project in which the resource belongs. If it is not provided, the provider project is used.
    state str
    The current state of the namespace.

    • ACTIVE: The namespace is active.
    • DELETED: The namespace is soft-deleted. Soft-deleted namespaces are permanently deleted after approximately 30 days. You can restore a soft-deleted namespace using UndeleteWorkloadIdentityPoolNamespace. You cannot reuse the ID of a soft-deleted namespace until it is permanently deleted.
    workload_identity_pool_id str
    The ID to use for the pool, which becomes the final component of the resource name. This value should be 4-32 characters, and may contain the characters [a-z0-9-]. The prefix gcp- is reserved for use by Google, and may not be specified.
    workload_identity_pool_namespace_id str

    The ID to use for the namespace. This value must:

    • contain at most 63 characters
    • contain only lowercase alphanumeric characters or -
    • start with an alphanumeric character
    • end with an alphanumeric character

    The prefix gcp- will be reserved for future uses.

    description String
    A description of the namespace. Cannot exceed 256 characters.
    disabled Boolean
    Whether the namespace is disabled. If disabled, credentials may no longer be issued for identities within this namespace, however existing credentials will still be accepted until they expire.
    name String
    The resource name of the namespace as projects/{project_number}/locations/global/workloadIdentityPools/{workload_identity_pool_id}/namespaces/{workload_identity_pool_namespace_id}.
    ownerServices List<Property Map>
    Defines the owner that is allowed to mutate this resource. If present, this resource can only be mutated by the owner. Structure is documented below.
    project String
    The ID of the project in which the resource belongs. If it is not provided, the provider project is used.
    state String
    The current state of the namespace.

    • ACTIVE: The namespace is active.
    • DELETED: The namespace is soft-deleted. Soft-deleted namespaces are permanently deleted after approximately 30 days. You can restore a soft-deleted namespace using UndeleteWorkloadIdentityPoolNamespace. You cannot reuse the ID of a soft-deleted namespace until it is permanently deleted.
    workloadIdentityPoolId String
    The ID to use for the pool, which becomes the final component of the resource name. This value should be 4-32 characters, and may contain the characters [a-z0-9-]. The prefix gcp- is reserved for use by Google, and may not be specified.
    workloadIdentityPoolNamespaceId String

    The ID to use for the namespace. This value must:

    • contain at most 63 characters
    • contain only lowercase alphanumeric characters or -
    • start with an alphanumeric character
    • end with an alphanumeric character

    The prefix gcp- will be reserved for future uses.

    Supporting Types

    WorkloadIdentityPoolNamespaceOwnerService, WorkloadIdentityPoolNamespaceOwnerServiceArgs

    PrincipalSubject string
    (Output) The service agent principal subject, e.g. serviceAccount:service-1234@gcp-sa-gkehub.iam.gserviceaccount.com.
    PrincipalSubject string
    (Output) The service agent principal subject, e.g. serviceAccount:service-1234@gcp-sa-gkehub.iam.gserviceaccount.com.
    principalSubject String
    (Output) The service agent principal subject, e.g. serviceAccount:service-1234@gcp-sa-gkehub.iam.gserviceaccount.com.
    principalSubject string
    (Output) The service agent principal subject, e.g. serviceAccount:service-1234@gcp-sa-gkehub.iam.gserviceaccount.com.
    principal_subject str
    (Output) The service agent principal subject, e.g. serviceAccount:service-1234@gcp-sa-gkehub.iam.gserviceaccount.com.
    principalSubject String
    (Output) The service agent principal subject, e.g. serviceAccount:service-1234@gcp-sa-gkehub.iam.gserviceaccount.com.

    Import

    WorkloadIdentityPoolNamespace can be imported using any of these accepted formats:

    • projects/{{project}}/locations/global/workloadIdentityPools/{{workload_identity_pool_id}}/namespaces/{{workload_identity_pool_namespace_id}}

    • {{project}}/{{workload_identity_pool_id}}/{{workload_identity_pool_namespace_id}}

    • {{workload_identity_pool_id}}/{{workload_identity_pool_namespace_id}}

    When using the pulumi import command, WorkloadIdentityPoolNamespace can be imported using one of the formats above. For example:

    $ pulumi import gcp:iam/workloadIdentityPoolNamespace:WorkloadIdentityPoolNamespace default projects/{{project}}/locations/global/workloadIdentityPools/{{workload_identity_pool_id}}/namespaces/{{workload_identity_pool_namespace_id}}

    $ pulumi import gcp:iam/workloadIdentityPoolNamespace:WorkloadIdentityPoolNamespace default {{project}}/{{workload_identity_pool_id}}/{{workload_identity_pool_namespace_id}}

    $ pulumi import gcp:iam/workloadIdentityPoolNamespace:WorkloadIdentityPoolNamespace default {{workload_identity_pool_id}}/{{workload_identity_pool_namespace_id}}

    To learn more about importing existing cloud resources, see Importing resources.

    Package Details

    Repository
    Google Cloud (GCP) Classic pulumi/pulumi-gcp
    License
    Apache-2.0
    Notes
    This Pulumi package is based on the google-beta Terraform Provider.
    gcp logo
    Google Cloud v8.34.0 published on Wednesday, Jun 11, 2025 by Pulumi
    pulumi/pulumi-gcp