Google Cloud Native is in preview. Google Cloud Classic is fully supported.
google-native.managedidentities/v1.Domain
Explore with Pulumi AI
Google Cloud Native is in preview. Google Cloud Classic is fully supported.
Creates a Microsoft AD domain. Auto-naming is currently not supported for this resource.
Create Domain Resource
new Domain(name: string, args: DomainArgs, opts?: CustomResourceOptions);
@overload
def Domain(resource_name: str,
opts: Optional[ResourceOptions] = None,
admin: Optional[str] = None,
audit_logs_enabled: Optional[bool] = None,
authorized_networks: Optional[Sequence[str]] = None,
domain_name: Optional[str] = None,
labels: Optional[Mapping[str, str]] = None,
locations: Optional[Sequence[str]] = None,
name: Optional[str] = None,
project: Optional[str] = None,
reserved_ip_range: Optional[str] = None)
@overload
def Domain(resource_name: str,
args: DomainArgs,
opts: Optional[ResourceOptions] = None)
func NewDomain(ctx *Context, name string, args DomainArgs, opts ...ResourceOption) (*Domain, error)
public Domain(string name, DomainArgs args, CustomResourceOptions? opts = null)
public Domain(String name, DomainArgs args)
public Domain(String name, DomainArgs args, CustomResourceOptions options)
type: google-native:managedidentities/v1:Domain
properties: # The arguments to resource properties.
options: # Bag of options to control resource's behavior.
- name string
- The unique name of the resource.
- args DomainArgs
- The arguments to resource properties.
- opts CustomResourceOptions
- Bag of options to control resource's behavior.
- resource_name str
- The unique name of the resource.
- args DomainArgs
- The arguments to resource properties.
- opts ResourceOptions
- Bag of options to control resource's behavior.
- ctx Context
- Context object for the current deployment.
- name string
- The unique name of the resource.
- args DomainArgs
- The arguments to resource properties.
- opts ResourceOption
- Bag of options to control resource's behavior.
- name string
- The unique name of the resource.
- args DomainArgs
- The arguments to resource properties.
- opts CustomResourceOptions
- Bag of options to control resource's behavior.
- name String
- The unique name of the resource.
- args DomainArgs
- The arguments to resource properties.
- options CustomResourceOptions
- Bag of options to control resource's behavior.
Domain Resource Properties
To learn more about resource properties and how to use them, see Inputs and Outputs in the Architecture and Concepts docs.
Inputs
The Domain resource accepts the following input properties:
- Domain
Name string Required. The fully qualified domain name. e.g. mydomain.myorganization.com, with the following restrictions: * Must contain only lowercase letters, numbers, periods and hyphens. * Must start with a letter. * Must contain between 2-64 characters. * Must end with a number or a letter. * Must not start with period. * First segment length (mydomain for example above) shouldn't exceed 15 chars. * The last segment cannot be fully numeric. * Must be unique within the customer project.
- Locations List<string>
Locations where domain needs to be provisioned. regions e.g. us-west1 or us-east4 Service supports up to 4 locations at once. Each location will use a /26 block.
- Name string
The unique name of the domain using the form:
projects/{project_id}/locations/global/domains/{domain_name}
.- Reserved
Ip stringRange The CIDR range of internal addresses that are reserved for this domain. Reserved networks must be /24 or larger. Ranges must be unique and non-overlapping with existing subnets in [Domain].[authorized_networks].
- Admin string
Optional. The name of delegated administrator account used to perform Active Directory operations. If not specified,
setupadmin
will be used.- Audit
Logs boolEnabled Optional. Configuration for audit logs. True if audit logs are enabled, else false. Default is audit logs disabled.
- List<string>
Optional. The full names of the Google Compute Engine networks the domain instance is connected to. Networks can be added using UpdateDomain. The domain is only available on networks listed in
authorized_networks
. If CIDR subnets overlap between networks, domain creation will fail.- Labels Dictionary<string, string>
Optional. Resource labels that can contain user-provided metadata.
- Project string
- Domain
Name string Required. The fully qualified domain name. e.g. mydomain.myorganization.com, with the following restrictions: * Must contain only lowercase letters, numbers, periods and hyphens. * Must start with a letter. * Must contain between 2-64 characters. * Must end with a number or a letter. * Must not start with period. * First segment length (mydomain for example above) shouldn't exceed 15 chars. * The last segment cannot be fully numeric. * Must be unique within the customer project.
- Locations []string
Locations where domain needs to be provisioned. regions e.g. us-west1 or us-east4 Service supports up to 4 locations at once. Each location will use a /26 block.
- Name string
The unique name of the domain using the form:
projects/{project_id}/locations/global/domains/{domain_name}
.- Reserved
Ip stringRange The CIDR range of internal addresses that are reserved for this domain. Reserved networks must be /24 or larger. Ranges must be unique and non-overlapping with existing subnets in [Domain].[authorized_networks].
- Admin string
Optional. The name of delegated administrator account used to perform Active Directory operations. If not specified,
setupadmin
will be used.- Audit
Logs boolEnabled Optional. Configuration for audit logs. True if audit logs are enabled, else false. Default is audit logs disabled.
- []string
Optional. The full names of the Google Compute Engine networks the domain instance is connected to. Networks can be added using UpdateDomain. The domain is only available on networks listed in
authorized_networks
. If CIDR subnets overlap between networks, domain creation will fail.- Labels map[string]string
Optional. Resource labels that can contain user-provided metadata.
- Project string
- domain
Name String Required. The fully qualified domain name. e.g. mydomain.myorganization.com, with the following restrictions: * Must contain only lowercase letters, numbers, periods and hyphens. * Must start with a letter. * Must contain between 2-64 characters. * Must end with a number or a letter. * Must not start with period. * First segment length (mydomain for example above) shouldn't exceed 15 chars. * The last segment cannot be fully numeric. * Must be unique within the customer project.
- locations List<String>
Locations where domain needs to be provisioned. regions e.g. us-west1 or us-east4 Service supports up to 4 locations at once. Each location will use a /26 block.
- name String
The unique name of the domain using the form:
projects/{project_id}/locations/global/domains/{domain_name}
.- reserved
Ip StringRange The CIDR range of internal addresses that are reserved for this domain. Reserved networks must be /24 or larger. Ranges must be unique and non-overlapping with existing subnets in [Domain].[authorized_networks].
- admin String
Optional. The name of delegated administrator account used to perform Active Directory operations. If not specified,
setupadmin
will be used.- audit
Logs BooleanEnabled Optional. Configuration for audit logs. True if audit logs are enabled, else false. Default is audit logs disabled.
- List<String>
Optional. The full names of the Google Compute Engine networks the domain instance is connected to. Networks can be added using UpdateDomain. The domain is only available on networks listed in
authorized_networks
. If CIDR subnets overlap between networks, domain creation will fail.- labels Map<String,String>
Optional. Resource labels that can contain user-provided metadata.
- project String
- domain
Name string Required. The fully qualified domain name. e.g. mydomain.myorganization.com, with the following restrictions: * Must contain only lowercase letters, numbers, periods and hyphens. * Must start with a letter. * Must contain between 2-64 characters. * Must end with a number or a letter. * Must not start with period. * First segment length (mydomain for example above) shouldn't exceed 15 chars. * The last segment cannot be fully numeric. * Must be unique within the customer project.
- locations string[]
Locations where domain needs to be provisioned. regions e.g. us-west1 or us-east4 Service supports up to 4 locations at once. Each location will use a /26 block.
- name string
The unique name of the domain using the form:
projects/{project_id}/locations/global/domains/{domain_name}
.- reserved
Ip stringRange The CIDR range of internal addresses that are reserved for this domain. Reserved networks must be /24 or larger. Ranges must be unique and non-overlapping with existing subnets in [Domain].[authorized_networks].
- admin string
Optional. The name of delegated administrator account used to perform Active Directory operations. If not specified,
setupadmin
will be used.- audit
Logs booleanEnabled Optional. Configuration for audit logs. True if audit logs are enabled, else false. Default is audit logs disabled.
- string[]
Optional. The full names of the Google Compute Engine networks the domain instance is connected to. Networks can be added using UpdateDomain. The domain is only available on networks listed in
authorized_networks
. If CIDR subnets overlap between networks, domain creation will fail.- labels {[key: string]: string}
Optional. Resource labels that can contain user-provided metadata.
- project string
- domain_
name str Required. The fully qualified domain name. e.g. mydomain.myorganization.com, with the following restrictions: * Must contain only lowercase letters, numbers, periods and hyphens. * Must start with a letter. * Must contain between 2-64 characters. * Must end with a number or a letter. * Must not start with period. * First segment length (mydomain for example above) shouldn't exceed 15 chars. * The last segment cannot be fully numeric. * Must be unique within the customer project.
- locations Sequence[str]
Locations where domain needs to be provisioned. regions e.g. us-west1 or us-east4 Service supports up to 4 locations at once. Each location will use a /26 block.
- name str
The unique name of the domain using the form:
projects/{project_id}/locations/global/domains/{domain_name}
.- reserved_
ip_ strrange The CIDR range of internal addresses that are reserved for this domain. Reserved networks must be /24 or larger. Ranges must be unique and non-overlapping with existing subnets in [Domain].[authorized_networks].
- admin str
Optional. The name of delegated administrator account used to perform Active Directory operations. If not specified,
setupadmin
will be used.- audit_
logs_ boolenabled Optional. Configuration for audit logs. True if audit logs are enabled, else false. Default is audit logs disabled.
- Sequence[str]
Optional. The full names of the Google Compute Engine networks the domain instance is connected to. Networks can be added using UpdateDomain. The domain is only available on networks listed in
authorized_networks
. If CIDR subnets overlap between networks, domain creation will fail.- labels Mapping[str, str]
Optional. Resource labels that can contain user-provided metadata.
- project str
- domain
Name String Required. The fully qualified domain name. e.g. mydomain.myorganization.com, with the following restrictions: * Must contain only lowercase letters, numbers, periods and hyphens. * Must start with a letter. * Must contain between 2-64 characters. * Must end with a number or a letter. * Must not start with period. * First segment length (mydomain for example above) shouldn't exceed 15 chars. * The last segment cannot be fully numeric. * Must be unique within the customer project.
- locations List<String>
Locations where domain needs to be provisioned. regions e.g. us-west1 or us-east4 Service supports up to 4 locations at once. Each location will use a /26 block.
- name String
The unique name of the domain using the form:
projects/{project_id}/locations/global/domains/{domain_name}
.- reserved
Ip StringRange The CIDR range of internal addresses that are reserved for this domain. Reserved networks must be /24 or larger. Ranges must be unique and non-overlapping with existing subnets in [Domain].[authorized_networks].
- admin String
Optional. The name of delegated administrator account used to perform Active Directory operations. If not specified,
setupadmin
will be used.- audit
Logs BooleanEnabled Optional. Configuration for audit logs. True if audit logs are enabled, else false. Default is audit logs disabled.
- List<String>
Optional. The full names of the Google Compute Engine networks the domain instance is connected to. Networks can be added using UpdateDomain. The domain is only available on networks listed in
authorized_networks
. If CIDR subnets overlap between networks, domain creation will fail.- labels Map<String>
Optional. Resource labels that can contain user-provided metadata.
- project String
Outputs
All input properties are implicitly available as output properties. Additionally, the Domain resource produces the following output properties:
- Create
Time string The time the instance was created.
- Fqdn string
The fully-qualified domain name of the exposed domain used by clients to connect to the service. Similar to what would be chosen for an Active Directory set up on an internal network.
- Id string
The provider-assigned unique ID for this managed resource.
- State string
The current state of this domain.
- Status
Message string Additional information about the current status of this domain, if available.
- Trusts
List<Pulumi.
Google Native. Managedidentities. V1. Outputs. Trust Response> The current trusts associated with the domain.
- Update
Time string The last update time.
- Create
Time string The time the instance was created.
- Fqdn string
The fully-qualified domain name of the exposed domain used by clients to connect to the service. Similar to what would be chosen for an Active Directory set up on an internal network.
- Id string
The provider-assigned unique ID for this managed resource.
- State string
The current state of this domain.
- Status
Message string Additional information about the current status of this domain, if available.
- Trusts
[]Trust
Response The current trusts associated with the domain.
- Update
Time string The last update time.
- create
Time String The time the instance was created.
- fqdn String
The fully-qualified domain name of the exposed domain used by clients to connect to the service. Similar to what would be chosen for an Active Directory set up on an internal network.
- id String
The provider-assigned unique ID for this managed resource.
- state String
The current state of this domain.
- status
Message String Additional information about the current status of this domain, if available.
- trusts
List<Trust
Response> The current trusts associated with the domain.
- update
Time String The last update time.
- create
Time string The time the instance was created.
- fqdn string
The fully-qualified domain name of the exposed domain used by clients to connect to the service. Similar to what would be chosen for an Active Directory set up on an internal network.
- id string
The provider-assigned unique ID for this managed resource.
- state string
The current state of this domain.
- status
Message string Additional information about the current status of this domain, if available.
- trusts
Trust
Response[] The current trusts associated with the domain.
- update
Time string The last update time.
- create_
time str The time the instance was created.
- fqdn str
The fully-qualified domain name of the exposed domain used by clients to connect to the service. Similar to what would be chosen for an Active Directory set up on an internal network.
- id str
The provider-assigned unique ID for this managed resource.
- state str
The current state of this domain.
- status_
message str Additional information about the current status of this domain, if available.
- trusts
Sequence[Trust
Response] The current trusts associated with the domain.
- update_
time str The last update time.
- create
Time String The time the instance was created.
- fqdn String
The fully-qualified domain name of the exposed domain used by clients to connect to the service. Similar to what would be chosen for an Active Directory set up on an internal network.
- id String
The provider-assigned unique ID for this managed resource.
- state String
The current state of this domain.
- status
Message String Additional information about the current status of this domain, if available.
- trusts List<Property Map>
The current trusts associated with the domain.
- update
Time String The last update time.
Supporting Types
TrustResponse, TrustResponseArgs
- Create
Time string The time the instance was created.
- Last
Trust stringHeartbeat Time The last heartbeat time when the trust was known to be connected.
- Selective
Authentication bool Optional. The trust authentication type, which decides whether the trusted side has forest/domain wide access or selective access to an approved set of resources.
- State string
The current state of the trust.
- State
Description string Additional information about the current state of the trust, if available.
- Target
Dns List<string>Ip Addresses The target DNS server IP addresses which can resolve the remote domain involved in the trust.
- Target
Domain stringName The fully qualified target domain name which will be in trust with the current domain.
- Trust
Direction string The trust direction, which decides if the current domain is trusted, trusting, or both.
- Trust
Handshake stringSecret The trust secret used for the handshake with the target domain. This will not be stored.
- Trust
Type string The type of trust represented by the trust resource.
- Update
Time string The last update time.
- Create
Time string The time the instance was created.
- Last
Trust stringHeartbeat Time The last heartbeat time when the trust was known to be connected.
- Selective
Authentication bool Optional. The trust authentication type, which decides whether the trusted side has forest/domain wide access or selective access to an approved set of resources.
- State string
The current state of the trust.
- State
Description string Additional information about the current state of the trust, if available.
- Target
Dns []stringIp Addresses The target DNS server IP addresses which can resolve the remote domain involved in the trust.
- Target
Domain stringName The fully qualified target domain name which will be in trust with the current domain.
- Trust
Direction string The trust direction, which decides if the current domain is trusted, trusting, or both.
- Trust
Handshake stringSecret The trust secret used for the handshake with the target domain. This will not be stored.
- Trust
Type string The type of trust represented by the trust resource.
- Update
Time string The last update time.
- create
Time String The time the instance was created.
- last
Trust StringHeartbeat Time The last heartbeat time when the trust was known to be connected.
- selective
Authentication Boolean Optional. The trust authentication type, which decides whether the trusted side has forest/domain wide access or selective access to an approved set of resources.
- state String
The current state of the trust.
- state
Description String Additional information about the current state of the trust, if available.
- target
Dns List<String>Ip Addresses The target DNS server IP addresses which can resolve the remote domain involved in the trust.
- target
Domain StringName The fully qualified target domain name which will be in trust with the current domain.
- trust
Direction String The trust direction, which decides if the current domain is trusted, trusting, or both.
- trust
Handshake StringSecret The trust secret used for the handshake with the target domain. This will not be stored.
- trust
Type String The type of trust represented by the trust resource.
- update
Time String The last update time.
- create
Time string The time the instance was created.
- last
Trust stringHeartbeat Time The last heartbeat time when the trust was known to be connected.
- selective
Authentication boolean Optional. The trust authentication type, which decides whether the trusted side has forest/domain wide access or selective access to an approved set of resources.
- state string
The current state of the trust.
- state
Description string Additional information about the current state of the trust, if available.
- target
Dns string[]Ip Addresses The target DNS server IP addresses which can resolve the remote domain involved in the trust.
- target
Domain stringName The fully qualified target domain name which will be in trust with the current domain.
- trust
Direction string The trust direction, which decides if the current domain is trusted, trusting, or both.
- trust
Handshake stringSecret The trust secret used for the handshake with the target domain. This will not be stored.
- trust
Type string The type of trust represented by the trust resource.
- update
Time string The last update time.
- create_
time str The time the instance was created.
- last_
trust_ strheartbeat_ time The last heartbeat time when the trust was known to be connected.
- selective_
authentication bool Optional. The trust authentication type, which decides whether the trusted side has forest/domain wide access or selective access to an approved set of resources.
- state str
The current state of the trust.
- state_
description str Additional information about the current state of the trust, if available.
- target_
dns_ Sequence[str]ip_ addresses The target DNS server IP addresses which can resolve the remote domain involved in the trust.
- target_
domain_ strname The fully qualified target domain name which will be in trust with the current domain.
- trust_
direction str The trust direction, which decides if the current domain is trusted, trusting, or both.
- trust_
handshake_ strsecret The trust secret used for the handshake with the target domain. This will not be stored.
- trust_
type str The type of trust represented by the trust resource.
- update_
time str The last update time.
- create
Time String The time the instance was created.
- last
Trust StringHeartbeat Time The last heartbeat time when the trust was known to be connected.
- selective
Authentication Boolean Optional. The trust authentication type, which decides whether the trusted side has forest/domain wide access or selective access to an approved set of resources.
- state String
The current state of the trust.
- state
Description String Additional information about the current state of the trust, if available.
- target
Dns List<String>Ip Addresses The target DNS server IP addresses which can resolve the remote domain involved in the trust.
- target
Domain StringName The fully qualified target domain name which will be in trust with the current domain.
- trust
Direction String The trust direction, which decides if the current domain is trusted, trusting, or both.
- trust
Handshake StringSecret The trust secret used for the handshake with the target domain. This will not be stored.
- trust
Type String The type of trust represented by the trust resource.
- update
Time String The last update time.
Package Details
- Repository
- Google Cloud Native pulumi/pulumi-google-native
- License
- Apache-2.0
Google Cloud Native is in preview. Google Cloud Classic is fully supported.