Domain

Creates a Microsoft AD Domain in a given project. Operation Auto-naming is currently not supported for this resource.

Create Domain Resource

new Domain(name: string, args: DomainArgs, opts?: CustomResourceOptions);
@overload
def Domain(resource_name: str,
           opts: Optional[ResourceOptions] = None,
           audit_logs_enabled: Optional[bool] = None,
           authorized_networks: Optional[Sequence[str]] = None,
           domain_name: Optional[str] = None,
           labels: Optional[Mapping[str, str]] = None,
           locations: Optional[Sequence[str]] = None,
           managed_identities_admin_name: Optional[str] = None,
           project: Optional[str] = None,
           reserved_ip_range: Optional[str] = None)
@overload
def Domain(resource_name: str,
           args: DomainArgs,
           opts: Optional[ResourceOptions] = None)
func NewDomain(ctx *Context, name string, args DomainArgs, opts ...ResourceOption) (*Domain, error)
public Domain(string name, DomainArgs args, CustomResourceOptions? opts = null)
public Domain(String name, DomainArgs args)
public Domain(String name, DomainArgs args, CustomResourceOptions options)
type: google-native:managedidentities/v1alpha1:Domain
properties: # The arguments to resource properties.
options: # Bag of options to control resource's behavior.

name string
The unique name of the resource.
args DomainArgs
The arguments to resource properties.
opts CustomResourceOptions
Bag of options to control resource's behavior.
resource_name str
The unique name of the resource.
args DomainArgs
The arguments to resource properties.
opts ResourceOptions
Bag of options to control resource's behavior.
ctx Context
Context object for the current deployment.
name string
The unique name of the resource.
args DomainArgs
The arguments to resource properties.
opts ResourceOption
Bag of options to control resource's behavior.
name string
The unique name of the resource.
args DomainArgs
The arguments to resource properties.
opts CustomResourceOptions
Bag of options to control resource's behavior.
name String
The unique name of the resource.
args DomainArgs
The arguments to resource properties.
options CustomResourceOptions
Bag of options to control resource's behavior.

Domain Resource Properties

To learn more about resource properties and how to use them, see Inputs and Outputs in the Architecture and Concepts docs.

Inputs

The Domain resource accepts the following input properties:

Locations List<string>

Locations where domain needs to be provisioned. regions e.g. us-west1 or us-east4 Service supports up to 4 locations at once. Each location will use a /26 block.

ReservedIpRange string

The CIDR range of internal addresses that are reserved for this domain. Reserved networks must be /24 or larger. Ranges must be unique and non-overlapping with existing subnets in [Domain].[authorized_networks].

AuditLogsEnabled bool

Optional. Configuration for audit logs. True if audit logs are enabled, else false. Default is audit logs disabled.

AuthorizedNetworks List<string>

Optional. The full names of the Google Compute Engine networks to which the instance is connected. Network can be added using UpdateDomain later. Domain is only available on network part of authorized_networks. Caller needs to make sure that CIDR subnets do not overlap between networks, else domain creation will fail.

DomainName string

The fully qualified domain name. e.g. mydomain.myorganization.com, with the following restrictions: * Must contain only lowercase letters, numbers, periods and hyphens. * Must start with a letter. * Must contain between 2-64 characters. * Must end with a number or a letter. * Must not start with period. * Must be unique within the project. * First segment length (mydomain form example above) shouldn't exceed 15 chars. * The last segment cannot be fully numeric.

Labels Dictionary<string, string>

Optional. Resource labels to represent user provided metadata

ManagedIdentitiesAdminName string

Optional. Name of customer-visible admin used to perform Active Directory operations. If not specified setupadmin would be used.

Project string
Locations []string

Locations where domain needs to be provisioned. regions e.g. us-west1 or us-east4 Service supports up to 4 locations at once. Each location will use a /26 block.

ReservedIpRange string

The CIDR range of internal addresses that are reserved for this domain. Reserved networks must be /24 or larger. Ranges must be unique and non-overlapping with existing subnets in [Domain].[authorized_networks].

AuditLogsEnabled bool

Optional. Configuration for audit logs. True if audit logs are enabled, else false. Default is audit logs disabled.

AuthorizedNetworks []string

Optional. The full names of the Google Compute Engine networks to which the instance is connected. Network can be added using UpdateDomain later. Domain is only available on network part of authorized_networks. Caller needs to make sure that CIDR subnets do not overlap between networks, else domain creation will fail.

DomainName string

The fully qualified domain name. e.g. mydomain.myorganization.com, with the following restrictions: * Must contain only lowercase letters, numbers, periods and hyphens. * Must start with a letter. * Must contain between 2-64 characters. * Must end with a number or a letter. * Must not start with period. * Must be unique within the project. * First segment length (mydomain form example above) shouldn't exceed 15 chars. * The last segment cannot be fully numeric.

Labels map[string]string

Optional. Resource labels to represent user provided metadata

ManagedIdentitiesAdminName string

Optional. Name of customer-visible admin used to perform Active Directory operations. If not specified setupadmin would be used.

Project string
locations List<String>

Locations where domain needs to be provisioned. regions e.g. us-west1 or us-east4 Service supports up to 4 locations at once. Each location will use a /26 block.

reservedIpRange String

The CIDR range of internal addresses that are reserved for this domain. Reserved networks must be /24 or larger. Ranges must be unique and non-overlapping with existing subnets in [Domain].[authorized_networks].

auditLogsEnabled Boolean

Optional. Configuration for audit logs. True if audit logs are enabled, else false. Default is audit logs disabled.

authorizedNetworks List<String>

Optional. The full names of the Google Compute Engine networks to which the instance is connected. Network can be added using UpdateDomain later. Domain is only available on network part of authorized_networks. Caller needs to make sure that CIDR subnets do not overlap between networks, else domain creation will fail.

domainName String

The fully qualified domain name. e.g. mydomain.myorganization.com, with the following restrictions: * Must contain only lowercase letters, numbers, periods and hyphens. * Must start with a letter. * Must contain between 2-64 characters. * Must end with a number or a letter. * Must not start with period. * Must be unique within the project. * First segment length (mydomain form example above) shouldn't exceed 15 chars. * The last segment cannot be fully numeric.

labels Map<String,String>

Optional. Resource labels to represent user provided metadata

managedIdentitiesAdminName String

Optional. Name of customer-visible admin used to perform Active Directory operations. If not specified setupadmin would be used.

project String
locations string[]

Locations where domain needs to be provisioned. regions e.g. us-west1 or us-east4 Service supports up to 4 locations at once. Each location will use a /26 block.

reservedIpRange string

The CIDR range of internal addresses that are reserved for this domain. Reserved networks must be /24 or larger. Ranges must be unique and non-overlapping with existing subnets in [Domain].[authorized_networks].

auditLogsEnabled boolean

Optional. Configuration for audit logs. True if audit logs are enabled, else false. Default is audit logs disabled.

authorizedNetworks string[]

Optional. The full names of the Google Compute Engine networks to which the instance is connected. Network can be added using UpdateDomain later. Domain is only available on network part of authorized_networks. Caller needs to make sure that CIDR subnets do not overlap between networks, else domain creation will fail.

domainName string

The fully qualified domain name. e.g. mydomain.myorganization.com, with the following restrictions: * Must contain only lowercase letters, numbers, periods and hyphens. * Must start with a letter. * Must contain between 2-64 characters. * Must end with a number or a letter. * Must not start with period. * Must be unique within the project. * First segment length (mydomain form example above) shouldn't exceed 15 chars. * The last segment cannot be fully numeric.

labels {[key: string]: string}

Optional. Resource labels to represent user provided metadata

managedIdentitiesAdminName string

Optional. Name of customer-visible admin used to perform Active Directory operations. If not specified setupadmin would be used.

project string
locations Sequence[str]

Locations where domain needs to be provisioned. regions e.g. us-west1 or us-east4 Service supports up to 4 locations at once. Each location will use a /26 block.

reserved_ip_range str

The CIDR range of internal addresses that are reserved for this domain. Reserved networks must be /24 or larger. Ranges must be unique and non-overlapping with existing subnets in [Domain].[authorized_networks].

audit_logs_enabled bool

Optional. Configuration for audit logs. True if audit logs are enabled, else false. Default is audit logs disabled.

authorized_networks Sequence[str]

Optional. The full names of the Google Compute Engine networks to which the instance is connected. Network can be added using UpdateDomain later. Domain is only available on network part of authorized_networks. Caller needs to make sure that CIDR subnets do not overlap between networks, else domain creation will fail.

domain_name str

The fully qualified domain name. e.g. mydomain.myorganization.com, with the following restrictions: * Must contain only lowercase letters, numbers, periods and hyphens. * Must start with a letter. * Must contain between 2-64 characters. * Must end with a number or a letter. * Must not start with period. * Must be unique within the project. * First segment length (mydomain form example above) shouldn't exceed 15 chars. * The last segment cannot be fully numeric.

labels Mapping[str, str]

Optional. Resource labels to represent user provided metadata

managed_identities_admin_name str

Optional. Name of customer-visible admin used to perform Active Directory operations. If not specified setupadmin would be used.

project str
locations List<String>

Locations where domain needs to be provisioned. regions e.g. us-west1 or us-east4 Service supports up to 4 locations at once. Each location will use a /26 block.

reservedIpRange String

The CIDR range of internal addresses that are reserved for this domain. Reserved networks must be /24 or larger. Ranges must be unique and non-overlapping with existing subnets in [Domain].[authorized_networks].

auditLogsEnabled Boolean

Optional. Configuration for audit logs. True if audit logs are enabled, else false. Default is audit logs disabled.

authorizedNetworks List<String>

Optional. The full names of the Google Compute Engine networks to which the instance is connected. Network can be added using UpdateDomain later. Domain is only available on network part of authorized_networks. Caller needs to make sure that CIDR subnets do not overlap between networks, else domain creation will fail.

domainName String

The fully qualified domain name. e.g. mydomain.myorganization.com, with the following restrictions: * Must contain only lowercase letters, numbers, periods and hyphens. * Must start with a letter. * Must contain between 2-64 characters. * Must end with a number or a letter. * Must not start with period. * Must be unique within the project. * First segment length (mydomain form example above) shouldn't exceed 15 chars. * The last segment cannot be fully numeric.

labels Map<String>

Optional. Resource labels to represent user provided metadata

managedIdentitiesAdminName String

Optional. Name of customer-visible admin used to perform Active Directory operations. If not specified setupadmin would be used.

project String

Outputs

All input properties are implicitly available as output properties. Additionally, the Domain resource produces the following output properties:

CreateTime string

The time the instance was created. Synthetic field is populated automatically by CCFE. go/ccfe-synthetic-field-user-guide

Fqdn string

Fully-qualified domain name of the exposed domain used by clients to connect to the service. Similar to what would be chosen for an Active Directory that is set up on an internal network.

Id string

The provider-assigned unique ID for this managed resource.

Name string

Unique name of the domain in this scope including projects and location using the form: projects/{project_id}/locations/global/domains/{domain_name}.

State string

The current state of this domain.

StatusMessage string

Additional information about the current status of this domain, if available.

Trusts List<Pulumi.GoogleNative.Managedidentities.V1Alpha1.Outputs.TrustResponse>

The current trusts associated with the domain.

UpdateTime string

Last update time. Synthetic field is populated automatically by CCFE.

CreateTime string

The time the instance was created. Synthetic field is populated automatically by CCFE. go/ccfe-synthetic-field-user-guide

Fqdn string

Fully-qualified domain name of the exposed domain used by clients to connect to the service. Similar to what would be chosen for an Active Directory that is set up on an internal network.

Id string

The provider-assigned unique ID for this managed resource.

Name string

Unique name of the domain in this scope including projects and location using the form: projects/{project_id}/locations/global/domains/{domain_name}.

State string

The current state of this domain.

StatusMessage string

Additional information about the current status of this domain, if available.

Trusts []TrustResponse

The current trusts associated with the domain.

UpdateTime string

Last update time. Synthetic field is populated automatically by CCFE.

createTime String

The time the instance was created. Synthetic field is populated automatically by CCFE. go/ccfe-synthetic-field-user-guide

fqdn String

Fully-qualified domain name of the exposed domain used by clients to connect to the service. Similar to what would be chosen for an Active Directory that is set up on an internal network.

id String

The provider-assigned unique ID for this managed resource.

name String

Unique name of the domain in this scope including projects and location using the form: projects/{project_id}/locations/global/domains/{domain_name}.

state String

The current state of this domain.

statusMessage String

Additional information about the current status of this domain, if available.

trusts List<TrustResponse>

The current trusts associated with the domain.

updateTime String

Last update time. Synthetic field is populated automatically by CCFE.

createTime string

The time the instance was created. Synthetic field is populated automatically by CCFE. go/ccfe-synthetic-field-user-guide

fqdn string

Fully-qualified domain name of the exposed domain used by clients to connect to the service. Similar to what would be chosen for an Active Directory that is set up on an internal network.

id string

The provider-assigned unique ID for this managed resource.

name string

Unique name of the domain in this scope including projects and location using the form: projects/{project_id}/locations/global/domains/{domain_name}.

state string

The current state of this domain.

statusMessage string

Additional information about the current status of this domain, if available.

trusts TrustResponse[]

The current trusts associated with the domain.

updateTime string

Last update time. Synthetic field is populated automatically by CCFE.

create_time str

The time the instance was created. Synthetic field is populated automatically by CCFE. go/ccfe-synthetic-field-user-guide

fqdn str

Fully-qualified domain name of the exposed domain used by clients to connect to the service. Similar to what would be chosen for an Active Directory that is set up on an internal network.

id str

The provider-assigned unique ID for this managed resource.

name str

Unique name of the domain in this scope including projects and location using the form: projects/{project_id}/locations/global/domains/{domain_name}.

state str

The current state of this domain.

status_message str

Additional information about the current status of this domain, if available.

trusts Sequence[TrustResponse]

The current trusts associated with the domain.

update_time str

Last update time. Synthetic field is populated automatically by CCFE.

createTime String

The time the instance was created. Synthetic field is populated automatically by CCFE. go/ccfe-synthetic-field-user-guide

fqdn String

Fully-qualified domain name of the exposed domain used by clients to connect to the service. Similar to what would be chosen for an Active Directory that is set up on an internal network.

id String

The provider-assigned unique ID for this managed resource.

name String

Unique name of the domain in this scope including projects and location using the form: projects/{project_id}/locations/global/domains/{domain_name}.

state String

The current state of this domain.

statusMessage String

Additional information about the current status of this domain, if available.

trusts List<Property Map>

The current trusts associated with the domain.

updateTime String

Last update time. Synthetic field is populated automatically by CCFE.

Supporting Types

TrustResponse

CreateTime string

The time the instance was created.

LastKnownTrustConnectedHeartbeatTime string

The last heartbeat time when the trust was known to be connected.

SelectiveAuthentication bool

The trust authentication type which decides whether the trusted side has forest/domain wide access or selective access to approved set of resources.

State string

The current state of this trust.

StateDescription string

Additional information about the current state of this trust, if available.

TargetDnsIpAddresses List<string>

The target dns server ip addresses which can resolve the remote domain involved in trust.

TargetDomainName string

The fully qualified target domain name which will be in trust with current domain.

TrustDirection string

The trust direction decides the current domain is trusted, trusting or both.

TrustHandshakeSecret string

Input only, and will not be stored. The trust secret used for handshake with target domain.

TrustType string

The type of trust represented by the trust resource.

UpdateTime string

Last update time.

CreateTime string

The time the instance was created.

LastKnownTrustConnectedHeartbeatTime string

The last heartbeat time when the trust was known to be connected.

SelectiveAuthentication bool

The trust authentication type which decides whether the trusted side has forest/domain wide access or selective access to approved set of resources.

State string

The current state of this trust.

StateDescription string

Additional information about the current state of this trust, if available.

TargetDnsIpAddresses []string

The target dns server ip addresses which can resolve the remote domain involved in trust.

TargetDomainName string

The fully qualified target domain name which will be in trust with current domain.

TrustDirection string

The trust direction decides the current domain is trusted, trusting or both.

TrustHandshakeSecret string

Input only, and will not be stored. The trust secret used for handshake with target domain.

TrustType string

The type of trust represented by the trust resource.

UpdateTime string

Last update time.

createTime String

The time the instance was created.

lastKnownTrustConnectedHeartbeatTime String

The last heartbeat time when the trust was known to be connected.

selectiveAuthentication Boolean

The trust authentication type which decides whether the trusted side has forest/domain wide access or selective access to approved set of resources.

state String

The current state of this trust.

stateDescription String

Additional information about the current state of this trust, if available.

targetDnsIpAddresses List<String>

The target dns server ip addresses which can resolve the remote domain involved in trust.

targetDomainName String

The fully qualified target domain name which will be in trust with current domain.

trustDirection String

The trust direction decides the current domain is trusted, trusting or both.

trustHandshakeSecret String

Input only, and will not be stored. The trust secret used for handshake with target domain.

trustType String

The type of trust represented by the trust resource.

updateTime String

Last update time.

createTime string

The time the instance was created.

lastKnownTrustConnectedHeartbeatTime string

The last heartbeat time when the trust was known to be connected.

selectiveAuthentication boolean

The trust authentication type which decides whether the trusted side has forest/domain wide access or selective access to approved set of resources.

state string

The current state of this trust.

stateDescription string

Additional information about the current state of this trust, if available.

targetDnsIpAddresses string[]

The target dns server ip addresses which can resolve the remote domain involved in trust.

targetDomainName string

The fully qualified target domain name which will be in trust with current domain.

trustDirection string

The trust direction decides the current domain is trusted, trusting or both.

trustHandshakeSecret string

Input only, and will not be stored. The trust secret used for handshake with target domain.

trustType string

The type of trust represented by the trust resource.

updateTime string

Last update time.

create_time str

The time the instance was created.

last_known_trust_connected_heartbeat_time str

The last heartbeat time when the trust was known to be connected.

selective_authentication bool

The trust authentication type which decides whether the trusted side has forest/domain wide access or selective access to approved set of resources.

state str

The current state of this trust.

state_description str

Additional information about the current state of this trust, if available.

target_dns_ip_addresses Sequence[str]

The target dns server ip addresses which can resolve the remote domain involved in trust.

target_domain_name str

The fully qualified target domain name which will be in trust with current domain.

trust_direction str

The trust direction decides the current domain is trusted, trusting or both.

trust_handshake_secret str

Input only, and will not be stored. The trust secret used for handshake with target domain.

trust_type str

The type of trust represented by the trust resource.

update_time str

Last update time.

createTime String

The time the instance was created.

lastKnownTrustConnectedHeartbeatTime String

The last heartbeat time when the trust was known to be connected.

selectiveAuthentication Boolean

The trust authentication type which decides whether the trusted side has forest/domain wide access or selective access to approved set of resources.

state String

The current state of this trust.

stateDescription String

Additional information about the current state of this trust, if available.

targetDnsIpAddresses List<String>

The target dns server ip addresses which can resolve the remote domain involved in trust.

targetDomainName String

The fully qualified target domain name which will be in trust with current domain.

trustDirection String

The trust direction decides the current domain is trusted, trusting or both.

trustHandshakeSecret String

Input only, and will not be stored. The trust secret used for handshake with target domain.

trustType String

The type of trust represented by the trust resource.

updateTime String

Last update time.

Package Details

Repository
https://github.com/pulumi/pulumi-google-native
License
Apache-2.0