google-native logo
Google Cloud Native v0.30.0, Apr 14 23

google-native.managedidentities/v1.Domain

Explore with Pulumi AI

Creates a Microsoft AD domain. Auto-naming is currently not supported for this resource.

Create Domain Resource

new Domain(name: string, args: DomainArgs, opts?: CustomResourceOptions);
@overload
def Domain(resource_name: str,
           opts: Optional[ResourceOptions] = None,
           admin: Optional[str] = None,
           audit_logs_enabled: Optional[bool] = None,
           authorized_networks: Optional[Sequence[str]] = None,
           domain_name: Optional[str] = None,
           labels: Optional[Mapping[str, str]] = None,
           locations: Optional[Sequence[str]] = None,
           name: Optional[str] = None,
           project: Optional[str] = None,
           reserved_ip_range: Optional[str] = None)
@overload
def Domain(resource_name: str,
           args: DomainArgs,
           opts: Optional[ResourceOptions] = None)
func NewDomain(ctx *Context, name string, args DomainArgs, opts ...ResourceOption) (*Domain, error)
public Domain(string name, DomainArgs args, CustomResourceOptions? opts = null)
public Domain(String name, DomainArgs args)
public Domain(String name, DomainArgs args, CustomResourceOptions options)
type: google-native:managedidentities/v1:Domain
properties: # The arguments to resource properties.
options: # Bag of options to control resource's behavior.

name string
The unique name of the resource.
args DomainArgs
The arguments to resource properties.
opts CustomResourceOptions
Bag of options to control resource's behavior.
resource_name str
The unique name of the resource.
args DomainArgs
The arguments to resource properties.
opts ResourceOptions
Bag of options to control resource's behavior.
ctx Context
Context object for the current deployment.
name string
The unique name of the resource.
args DomainArgs
The arguments to resource properties.
opts ResourceOption
Bag of options to control resource's behavior.
name string
The unique name of the resource.
args DomainArgs
The arguments to resource properties.
opts CustomResourceOptions
Bag of options to control resource's behavior.
name String
The unique name of the resource.
args DomainArgs
The arguments to resource properties.
options CustomResourceOptions
Bag of options to control resource's behavior.

Domain Resource Properties

To learn more about resource properties and how to use them, see Inputs and Outputs in the Architecture and Concepts docs.

Inputs

The Domain resource accepts the following input properties:

DomainName string

Required. The fully qualified domain name. e.g. mydomain.myorganization.com, with the following restrictions: * Must contain only lowercase letters, numbers, periods and hyphens. * Must start with a letter. * Must contain between 2-64 characters. * Must end with a number or a letter. * Must not start with period. * First segment length (mydomain for example above) shouldn't exceed 15 chars. * The last segment cannot be fully numeric. * Must be unique within the customer project.

Locations List<string>

Locations where domain needs to be provisioned. regions e.g. us-west1 or us-east4 Service supports up to 4 locations at once. Each location will use a /26 block.

Name string

The unique name of the domain using the form: projects/{project_id}/locations/global/domains/{domain_name}.

ReservedIpRange string

The CIDR range of internal addresses that are reserved for this domain. Reserved networks must be /24 or larger. Ranges must be unique and non-overlapping with existing subnets in [Domain].[authorized_networks].

Admin string

Optional. The name of delegated administrator account used to perform Active Directory operations. If not specified, setupadmin will be used.

AuditLogsEnabled bool

Optional. Configuration for audit logs. True if audit logs are enabled, else false. Default is audit logs disabled.

AuthorizedNetworks List<string>

Optional. The full names of the Google Compute Engine networks the domain instance is connected to. Networks can be added using UpdateDomain. The domain is only available on networks listed in authorized_networks. If CIDR subnets overlap between networks, domain creation will fail.

Labels Dictionary<string, string>

Optional. Resource labels that can contain user-provided metadata.

Project string
DomainName string

Required. The fully qualified domain name. e.g. mydomain.myorganization.com, with the following restrictions: * Must contain only lowercase letters, numbers, periods and hyphens. * Must start with a letter. * Must contain between 2-64 characters. * Must end with a number or a letter. * Must not start with period. * First segment length (mydomain for example above) shouldn't exceed 15 chars. * The last segment cannot be fully numeric. * Must be unique within the customer project.

Locations []string

Locations where domain needs to be provisioned. regions e.g. us-west1 or us-east4 Service supports up to 4 locations at once. Each location will use a /26 block.

Name string

The unique name of the domain using the form: projects/{project_id}/locations/global/domains/{domain_name}.

ReservedIpRange string

The CIDR range of internal addresses that are reserved for this domain. Reserved networks must be /24 or larger. Ranges must be unique and non-overlapping with existing subnets in [Domain].[authorized_networks].

Admin string

Optional. The name of delegated administrator account used to perform Active Directory operations. If not specified, setupadmin will be used.

AuditLogsEnabled bool

Optional. Configuration for audit logs. True if audit logs are enabled, else false. Default is audit logs disabled.

AuthorizedNetworks []string

Optional. The full names of the Google Compute Engine networks the domain instance is connected to. Networks can be added using UpdateDomain. The domain is only available on networks listed in authorized_networks. If CIDR subnets overlap between networks, domain creation will fail.

Labels map[string]string

Optional. Resource labels that can contain user-provided metadata.

Project string
domainName String

Required. The fully qualified domain name. e.g. mydomain.myorganization.com, with the following restrictions: * Must contain only lowercase letters, numbers, periods and hyphens. * Must start with a letter. * Must contain between 2-64 characters. * Must end with a number or a letter. * Must not start with period. * First segment length (mydomain for example above) shouldn't exceed 15 chars. * The last segment cannot be fully numeric. * Must be unique within the customer project.

locations List<String>

Locations where domain needs to be provisioned. regions e.g. us-west1 or us-east4 Service supports up to 4 locations at once. Each location will use a /26 block.

name String

The unique name of the domain using the form: projects/{project_id}/locations/global/domains/{domain_name}.

reservedIpRange String

The CIDR range of internal addresses that are reserved for this domain. Reserved networks must be /24 or larger. Ranges must be unique and non-overlapping with existing subnets in [Domain].[authorized_networks].

admin String

Optional. The name of delegated administrator account used to perform Active Directory operations. If not specified, setupadmin will be used.

auditLogsEnabled Boolean

Optional. Configuration for audit logs. True if audit logs are enabled, else false. Default is audit logs disabled.

authorizedNetworks List<String>

Optional. The full names of the Google Compute Engine networks the domain instance is connected to. Networks can be added using UpdateDomain. The domain is only available on networks listed in authorized_networks. If CIDR subnets overlap between networks, domain creation will fail.

labels Map<String,String>

Optional. Resource labels that can contain user-provided metadata.

project String
domainName string

Required. The fully qualified domain name. e.g. mydomain.myorganization.com, with the following restrictions: * Must contain only lowercase letters, numbers, periods and hyphens. * Must start with a letter. * Must contain between 2-64 characters. * Must end with a number or a letter. * Must not start with period. * First segment length (mydomain for example above) shouldn't exceed 15 chars. * The last segment cannot be fully numeric. * Must be unique within the customer project.

locations string[]

Locations where domain needs to be provisioned. regions e.g. us-west1 or us-east4 Service supports up to 4 locations at once. Each location will use a /26 block.

name string

The unique name of the domain using the form: projects/{project_id}/locations/global/domains/{domain_name}.

reservedIpRange string

The CIDR range of internal addresses that are reserved for this domain. Reserved networks must be /24 or larger. Ranges must be unique and non-overlapping with existing subnets in [Domain].[authorized_networks].

admin string

Optional. The name of delegated administrator account used to perform Active Directory operations. If not specified, setupadmin will be used.

auditLogsEnabled boolean

Optional. Configuration for audit logs. True if audit logs are enabled, else false. Default is audit logs disabled.

authorizedNetworks string[]

Optional. The full names of the Google Compute Engine networks the domain instance is connected to. Networks can be added using UpdateDomain. The domain is only available on networks listed in authorized_networks. If CIDR subnets overlap between networks, domain creation will fail.

labels {[key: string]: string}

Optional. Resource labels that can contain user-provided metadata.

project string
domain_name str

Required. The fully qualified domain name. e.g. mydomain.myorganization.com, with the following restrictions: * Must contain only lowercase letters, numbers, periods and hyphens. * Must start with a letter. * Must contain between 2-64 characters. * Must end with a number or a letter. * Must not start with period. * First segment length (mydomain for example above) shouldn't exceed 15 chars. * The last segment cannot be fully numeric. * Must be unique within the customer project.

locations Sequence[str]

Locations where domain needs to be provisioned. regions e.g. us-west1 or us-east4 Service supports up to 4 locations at once. Each location will use a /26 block.

name str

The unique name of the domain using the form: projects/{project_id}/locations/global/domains/{domain_name}.

reserved_ip_range str

The CIDR range of internal addresses that are reserved for this domain. Reserved networks must be /24 or larger. Ranges must be unique and non-overlapping with existing subnets in [Domain].[authorized_networks].

admin str

Optional. The name of delegated administrator account used to perform Active Directory operations. If not specified, setupadmin will be used.

audit_logs_enabled bool

Optional. Configuration for audit logs. True if audit logs are enabled, else false. Default is audit logs disabled.

authorized_networks Sequence[str]

Optional. The full names of the Google Compute Engine networks the domain instance is connected to. Networks can be added using UpdateDomain. The domain is only available on networks listed in authorized_networks. If CIDR subnets overlap between networks, domain creation will fail.

labels Mapping[str, str]

Optional. Resource labels that can contain user-provided metadata.

project str
domainName String

Required. The fully qualified domain name. e.g. mydomain.myorganization.com, with the following restrictions: * Must contain only lowercase letters, numbers, periods and hyphens. * Must start with a letter. * Must contain between 2-64 characters. * Must end with a number or a letter. * Must not start with period. * First segment length (mydomain for example above) shouldn't exceed 15 chars. * The last segment cannot be fully numeric. * Must be unique within the customer project.

locations List<String>

Locations where domain needs to be provisioned. regions e.g. us-west1 or us-east4 Service supports up to 4 locations at once. Each location will use a /26 block.

name String

The unique name of the domain using the form: projects/{project_id}/locations/global/domains/{domain_name}.

reservedIpRange String

The CIDR range of internal addresses that are reserved for this domain. Reserved networks must be /24 or larger. Ranges must be unique and non-overlapping with existing subnets in [Domain].[authorized_networks].

admin String

Optional. The name of delegated administrator account used to perform Active Directory operations. If not specified, setupadmin will be used.

auditLogsEnabled Boolean

Optional. Configuration for audit logs. True if audit logs are enabled, else false. Default is audit logs disabled.

authorizedNetworks List<String>

Optional. The full names of the Google Compute Engine networks the domain instance is connected to. Networks can be added using UpdateDomain. The domain is only available on networks listed in authorized_networks. If CIDR subnets overlap between networks, domain creation will fail.

labels Map<String>

Optional. Resource labels that can contain user-provided metadata.

project String

Outputs

All input properties are implicitly available as output properties. Additionally, the Domain resource produces the following output properties:

CreateTime string

The time the instance was created.

Fqdn string

The fully-qualified domain name of the exposed domain used by clients to connect to the service. Similar to what would be chosen for an Active Directory set up on an internal network.

Id string

The provider-assigned unique ID for this managed resource.

State string

The current state of this domain.

StatusMessage string

Additional information about the current status of this domain, if available.

Trusts List<Pulumi.GoogleNative.Managedidentities.V1.Outputs.TrustResponse>

The current trusts associated with the domain.

UpdateTime string

The last update time.

CreateTime string

The time the instance was created.

Fqdn string

The fully-qualified domain name of the exposed domain used by clients to connect to the service. Similar to what would be chosen for an Active Directory set up on an internal network.

Id string

The provider-assigned unique ID for this managed resource.

State string

The current state of this domain.

StatusMessage string

Additional information about the current status of this domain, if available.

Trusts []TrustResponse

The current trusts associated with the domain.

UpdateTime string

The last update time.

createTime String

The time the instance was created.

fqdn String

The fully-qualified domain name of the exposed domain used by clients to connect to the service. Similar to what would be chosen for an Active Directory set up on an internal network.

id String

The provider-assigned unique ID for this managed resource.

state String

The current state of this domain.

statusMessage String

Additional information about the current status of this domain, if available.

trusts List<TrustResponse>

The current trusts associated with the domain.

updateTime String

The last update time.

createTime string

The time the instance was created.

fqdn string

The fully-qualified domain name of the exposed domain used by clients to connect to the service. Similar to what would be chosen for an Active Directory set up on an internal network.

id string

The provider-assigned unique ID for this managed resource.

state string

The current state of this domain.

statusMessage string

Additional information about the current status of this domain, if available.

trusts TrustResponse[]

The current trusts associated with the domain.

updateTime string

The last update time.

create_time str

The time the instance was created.

fqdn str

The fully-qualified domain name of the exposed domain used by clients to connect to the service. Similar to what would be chosen for an Active Directory set up on an internal network.

id str

The provider-assigned unique ID for this managed resource.

state str

The current state of this domain.

status_message str

Additional information about the current status of this domain, if available.

trusts Sequence[TrustResponse]

The current trusts associated with the domain.

update_time str

The last update time.

createTime String

The time the instance was created.

fqdn String

The fully-qualified domain name of the exposed domain used by clients to connect to the service. Similar to what would be chosen for an Active Directory set up on an internal network.

id String

The provider-assigned unique ID for this managed resource.

state String

The current state of this domain.

statusMessage String

Additional information about the current status of this domain, if available.

trusts List<Property Map>

The current trusts associated with the domain.

updateTime String

The last update time.

Supporting Types

TrustResponse

CreateTime string

The time the instance was created.

LastTrustHeartbeatTime string

The last heartbeat time when the trust was known to be connected.

SelectiveAuthentication bool

Optional. The trust authentication type, which decides whether the trusted side has forest/domain wide access or selective access to an approved set of resources.

State string

The current state of the trust.

StateDescription string

Additional information about the current state of the trust, if available.

TargetDnsIpAddresses List<string>

The target DNS server IP addresses which can resolve the remote domain involved in the trust.

TargetDomainName string

The fully qualified target domain name which will be in trust with the current domain.

TrustDirection string

The trust direction, which decides if the current domain is trusted, trusting, or both.

TrustHandshakeSecret string

The trust secret used for the handshake with the target domain. This will not be stored.

TrustType string

The type of trust represented by the trust resource.

UpdateTime string

The last update time.

CreateTime string

The time the instance was created.

LastTrustHeartbeatTime string

The last heartbeat time when the trust was known to be connected.

SelectiveAuthentication bool

Optional. The trust authentication type, which decides whether the trusted side has forest/domain wide access or selective access to an approved set of resources.

State string

The current state of the trust.

StateDescription string

Additional information about the current state of the trust, if available.

TargetDnsIpAddresses []string

The target DNS server IP addresses which can resolve the remote domain involved in the trust.

TargetDomainName string

The fully qualified target domain name which will be in trust with the current domain.

TrustDirection string

The trust direction, which decides if the current domain is trusted, trusting, or both.

TrustHandshakeSecret string

The trust secret used for the handshake with the target domain. This will not be stored.

TrustType string

The type of trust represented by the trust resource.

UpdateTime string

The last update time.

createTime String

The time the instance was created.

lastTrustHeartbeatTime String

The last heartbeat time when the trust was known to be connected.

selectiveAuthentication Boolean

Optional. The trust authentication type, which decides whether the trusted side has forest/domain wide access or selective access to an approved set of resources.

state String

The current state of the trust.

stateDescription String

Additional information about the current state of the trust, if available.

targetDnsIpAddresses List<String>

The target DNS server IP addresses which can resolve the remote domain involved in the trust.

targetDomainName String

The fully qualified target domain name which will be in trust with the current domain.

trustDirection String

The trust direction, which decides if the current domain is trusted, trusting, or both.

trustHandshakeSecret String

The trust secret used for the handshake with the target domain. This will not be stored.

trustType String

The type of trust represented by the trust resource.

updateTime String

The last update time.

createTime string

The time the instance was created.

lastTrustHeartbeatTime string

The last heartbeat time when the trust was known to be connected.

selectiveAuthentication boolean

Optional. The trust authentication type, which decides whether the trusted side has forest/domain wide access or selective access to an approved set of resources.

state string

The current state of the trust.

stateDescription string

Additional information about the current state of the trust, if available.

targetDnsIpAddresses string[]

The target DNS server IP addresses which can resolve the remote domain involved in the trust.

targetDomainName string

The fully qualified target domain name which will be in trust with the current domain.

trustDirection string

The trust direction, which decides if the current domain is trusted, trusting, or both.

trustHandshakeSecret string

The trust secret used for the handshake with the target domain. This will not be stored.

trustType string

The type of trust represented by the trust resource.

updateTime string

The last update time.

create_time str

The time the instance was created.

last_trust_heartbeat_time str

The last heartbeat time when the trust was known to be connected.

selective_authentication bool

Optional. The trust authentication type, which decides whether the trusted side has forest/domain wide access or selective access to an approved set of resources.

state str

The current state of the trust.

state_description str

Additional information about the current state of the trust, if available.

target_dns_ip_addresses Sequence[str]

The target DNS server IP addresses which can resolve the remote domain involved in the trust.

target_domain_name str

The fully qualified target domain name which will be in trust with the current domain.

trust_direction str

The trust direction, which decides if the current domain is trusted, trusting, or both.

trust_handshake_secret str

The trust secret used for the handshake with the target domain. This will not be stored.

trust_type str

The type of trust represented by the trust resource.

update_time str

The last update time.

createTime String

The time the instance was created.

lastTrustHeartbeatTime String

The last heartbeat time when the trust was known to be connected.

selectiveAuthentication Boolean

Optional. The trust authentication type, which decides whether the trusted side has forest/domain wide access or selective access to an approved set of resources.

state String

The current state of the trust.

stateDescription String

Additional information about the current state of the trust, if available.

targetDnsIpAddresses List<String>

The target DNS server IP addresses which can resolve the remote domain involved in the trust.

targetDomainName String

The fully qualified target domain name which will be in trust with the current domain.

trustDirection String

The trust direction, which decides if the current domain is trusted, trusting, or both.

trustHandshakeSecret String

The trust secret used for the handshake with the target domain. This will not be stored.

trustType String

The type of trust represented by the trust resource.

updateTime String

The last update time.

Package Details

Repository
Google Cloud Native pulumi/pulumi-google-native
License
Apache-2.0