opentelekomcloud.IdentityAgencyV3
Explore with Pulumi AI
Up-to-date reference of API arguments for IAM agency you can get at documentation portal
Manages an agency resource within OpenTelekomcloud.
Example Usage
import * as pulumi from "@pulumi/pulumi";
import * as opentelekomcloud from "@pulumi/opentelekomcloud";
const agency = new opentelekomcloud.IdentityAgencyV3("agency", {
delegatedDomainName: "***",
description: "test agency",
domainRoles: ["Anti-DDoS Administrator"],
projectRoles: [
{
project: "eu-de",
roles: [
"KMS Administrator",
"CCE ReadOnlyAccess",
],
},
{
allProjects: true,
roles: [
"CES Administrator",
"ER ReadOnlyAccess",
],
},
],
});
import pulumi
import pulumi_opentelekomcloud as opentelekomcloud
agency = opentelekomcloud.IdentityAgencyV3("agency",
delegated_domain_name="***",
description="test agency",
domain_roles=["Anti-DDoS Administrator"],
project_roles=[
{
"project": "eu-de",
"roles": [
"KMS Administrator",
"CCE ReadOnlyAccess",
],
},
{
"all_projects": True,
"roles": [
"CES Administrator",
"ER ReadOnlyAccess",
],
},
])
package main
import (
"github.com/pulumi/pulumi-terraform-provider/sdks/go/opentelekomcloud/opentelekomcloud"
"github.com/pulumi/pulumi/sdk/v3/go/pulumi"
)
func main() {
pulumi.Run(func(ctx *pulumi.Context) error {
_, err := opentelekomcloud.NewIdentityAgencyV3(ctx, "agency", &opentelekomcloud.IdentityAgencyV3Args{
DelegatedDomainName: pulumi.String("***"),
Description: pulumi.String("test agency"),
DomainRoles: pulumi.StringArray{
pulumi.String("Anti-DDoS Administrator"),
},
ProjectRoles: opentelekomcloud.IdentityAgencyV3ProjectRoleArray{
&opentelekomcloud.IdentityAgencyV3ProjectRoleArgs{
Project: pulumi.String("eu-de"),
Roles: pulumi.StringArray{
pulumi.String("KMS Administrator"),
pulumi.String("CCE ReadOnlyAccess"),
},
},
&opentelekomcloud.IdentityAgencyV3ProjectRoleArgs{
AllProjects: pulumi.Bool(true),
Roles: pulumi.StringArray{
pulumi.String("CES Administrator"),
pulumi.String("ER ReadOnlyAccess"),
},
},
},
})
if err != nil {
return err
}
return nil
})
}
using System.Collections.Generic;
using System.Linq;
using Pulumi;
using Opentelekomcloud = Pulumi.Opentelekomcloud;
return await Deployment.RunAsync(() =>
{
var agency = new Opentelekomcloud.IdentityAgencyV3("agency", new()
{
DelegatedDomainName = "***",
Description = "test agency",
DomainRoles = new[]
{
"Anti-DDoS Administrator",
},
ProjectRoles = new[]
{
new Opentelekomcloud.Inputs.IdentityAgencyV3ProjectRoleArgs
{
Project = "eu-de",
Roles = new[]
{
"KMS Administrator",
"CCE ReadOnlyAccess",
},
},
new Opentelekomcloud.Inputs.IdentityAgencyV3ProjectRoleArgs
{
AllProjects = true,
Roles = new[]
{
"CES Administrator",
"ER ReadOnlyAccess",
},
},
},
});
});
package generated_program;
import com.pulumi.Context;
import com.pulumi.Pulumi;
import com.pulumi.core.Output;
import com.pulumi.opentelekomcloud.IdentityAgencyV3;
import com.pulumi.opentelekomcloud.IdentityAgencyV3Args;
import com.pulumi.opentelekomcloud.inputs.IdentityAgencyV3ProjectRoleArgs;
import java.util.List;
import java.util.ArrayList;
import java.util.Map;
import java.io.File;
import java.nio.file.Files;
import java.nio.file.Paths;
public class App {
public static void main(String[] args) {
Pulumi.run(App::stack);
}
public static void stack(Context ctx) {
var agency = new IdentityAgencyV3("agency", IdentityAgencyV3Args.builder()
.delegatedDomainName("***")
.description("test agency")
.domainRoles("Anti-DDoS Administrator")
.projectRoles(
IdentityAgencyV3ProjectRoleArgs.builder()
.project("eu-de")
.roles(
"KMS Administrator",
"CCE ReadOnlyAccess")
.build(),
IdentityAgencyV3ProjectRoleArgs.builder()
.allProjects(true)
.roles(
"CES Administrator",
"ER ReadOnlyAccess")
.build())
.build());
}
}
resources:
agency:
type: opentelekomcloud:IdentityAgencyV3
properties:
delegatedDomainName: '***'
description: test agency
domainRoles:
- Anti-DDoS Administrator
projectRoles:
- project: eu-de
roles:
- KMS Administrator
- CCE ReadOnlyAccess
- allProjects: true
roles:
- CES Administrator
- ER ReadOnlyAccess
Note: It can not set
tenant_name
inprovider "opentelekomcloud"
when using this resource.
Create IdentityAgencyV3 Resource
Resources are created with functions called constructors. To learn more about declaring and configuring resources, see Resources.
Constructor syntax
new IdentityAgencyV3(name: string, args: IdentityAgencyV3Args, opts?: CustomResourceOptions);
@overload
def IdentityAgencyV3(resource_name: str,
args: IdentityAgencyV3Args,
opts: Optional[ResourceOptions] = None)
@overload
def IdentityAgencyV3(resource_name: str,
opts: Optional[ResourceOptions] = None,
delegated_domain_name: Optional[str] = None,
description: Optional[str] = None,
domain_roles: Optional[Sequence[str]] = None,
identity_agency_v3_id: Optional[str] = None,
name: Optional[str] = None,
project_roles: Optional[Sequence[IdentityAgencyV3ProjectRoleArgs]] = None,
timeouts: Optional[IdentityAgencyV3TimeoutsArgs] = None)
func NewIdentityAgencyV3(ctx *Context, name string, args IdentityAgencyV3Args, opts ...ResourceOption) (*IdentityAgencyV3, error)
public IdentityAgencyV3(string name, IdentityAgencyV3Args args, CustomResourceOptions? opts = null)
public IdentityAgencyV3(String name, IdentityAgencyV3Args args)
public IdentityAgencyV3(String name, IdentityAgencyV3Args args, CustomResourceOptions options)
type: opentelekomcloud:IdentityAgencyV3
properties: # The arguments to resource properties.
options: # Bag of options to control resource's behavior.
Parameters
- name string
- The unique name of the resource.
- args IdentityAgencyV3Args
- The arguments to resource properties.
- opts CustomResourceOptions
- Bag of options to control resource's behavior.
- resource_name str
- The unique name of the resource.
- args IdentityAgencyV3Args
- The arguments to resource properties.
- opts ResourceOptions
- Bag of options to control resource's behavior.
- ctx Context
- Context object for the current deployment.
- name string
- The unique name of the resource.
- args IdentityAgencyV3Args
- The arguments to resource properties.
- opts ResourceOption
- Bag of options to control resource's behavior.
- name string
- The unique name of the resource.
- args IdentityAgencyV3Args
- The arguments to resource properties.
- opts CustomResourceOptions
- Bag of options to control resource's behavior.
- name String
- The unique name of the resource.
- args IdentityAgencyV3Args
- The arguments to resource properties.
- options CustomResourceOptions
- Bag of options to control resource's behavior.
Constructor example
The following reference example uses placeholder values for all input properties.
var identityAgencyV3Resource = new Opentelekomcloud.IdentityAgencyV3("identityAgencyV3Resource", new()
{
DelegatedDomainName = "string",
Description = "string",
DomainRoles = new[]
{
"string",
},
IdentityAgencyV3Id = "string",
Name = "string",
ProjectRoles = new[]
{
new Opentelekomcloud.Inputs.IdentityAgencyV3ProjectRoleArgs
{
Roles = new[]
{
"string",
},
AllProjects = false,
Project = "string",
},
},
Timeouts = new Opentelekomcloud.Inputs.IdentityAgencyV3TimeoutsArgs
{
Create = "string",
Delete = "string",
Update = "string",
},
});
example, err := opentelekomcloud.NewIdentityAgencyV3(ctx, "identityAgencyV3Resource", &opentelekomcloud.IdentityAgencyV3Args{
DelegatedDomainName: pulumi.String("string"),
Description: pulumi.String("string"),
DomainRoles: pulumi.StringArray{
pulumi.String("string"),
},
IdentityAgencyV3Id: pulumi.String("string"),
Name: pulumi.String("string"),
ProjectRoles: opentelekomcloud.IdentityAgencyV3ProjectRoleArray{
&opentelekomcloud.IdentityAgencyV3ProjectRoleArgs{
Roles: pulumi.StringArray{
pulumi.String("string"),
},
AllProjects: pulumi.Bool(false),
Project: pulumi.String("string"),
},
},
Timeouts: &opentelekomcloud.IdentityAgencyV3TimeoutsArgs{
Create: pulumi.String("string"),
Delete: pulumi.String("string"),
Update: pulumi.String("string"),
},
})
var identityAgencyV3Resource = new IdentityAgencyV3("identityAgencyV3Resource", IdentityAgencyV3Args.builder()
.delegatedDomainName("string")
.description("string")
.domainRoles("string")
.identityAgencyV3Id("string")
.name("string")
.projectRoles(IdentityAgencyV3ProjectRoleArgs.builder()
.roles("string")
.allProjects(false)
.project("string")
.build())
.timeouts(IdentityAgencyV3TimeoutsArgs.builder()
.create("string")
.delete("string")
.update("string")
.build())
.build());
identity_agency_v3_resource = opentelekomcloud.IdentityAgencyV3("identityAgencyV3Resource",
delegated_domain_name="string",
description="string",
domain_roles=["string"],
identity_agency_v3_id="string",
name="string",
project_roles=[{
"roles": ["string"],
"all_projects": False,
"project": "string",
}],
timeouts={
"create": "string",
"delete": "string",
"update": "string",
})
const identityAgencyV3Resource = new opentelekomcloud.IdentityAgencyV3("identityAgencyV3Resource", {
delegatedDomainName: "string",
description: "string",
domainRoles: ["string"],
identityAgencyV3Id: "string",
name: "string",
projectRoles: [{
roles: ["string"],
allProjects: false,
project: "string",
}],
timeouts: {
create: "string",
"delete": "string",
update: "string",
},
});
type: opentelekomcloud:IdentityAgencyV3
properties:
delegatedDomainName: string
description: string
domainRoles:
- string
identityAgencyV3Id: string
name: string
projectRoles:
- allProjects: false
project: string
roles:
- string
timeouts:
create: string
delete: string
update: string
IdentityAgencyV3 Resource Properties
To learn more about resource properties and how to use them, see Inputs and Outputs in the Architecture and Concepts docs.
Inputs
In Python, inputs that are objects can be passed either as argument classes or as dictionary literals.
The IdentityAgencyV3 resource accepts the following input properties:
- Delegated
Domain stringName - The name of delegated domain.
- Description string
- Provides supplementary information about the agency. The value is a string of 0 to 255 characters.
- Domain
Roles List<string> - An array of role names which stand for the permissions to be granted to agency on domain.
- Identity
Agency stringV3Id - The agency ID.
- Name string
- The name of agency. The name is a string of 1 to 64 characters.
- Project
Roles List<IdentityAgency V3Project Role> - An array of roles and projects which are used to grant permissions to agency on project. The structure is documented below.
- Timeouts
Identity
Agency V3Timeouts
- Delegated
Domain stringName - The name of delegated domain.
- Description string
- Provides supplementary information about the agency. The value is a string of 0 to 255 characters.
- Domain
Roles []string - An array of role names which stand for the permissions to be granted to agency on domain.
- Identity
Agency stringV3Id - The agency ID.
- Name string
- The name of agency. The name is a string of 1 to 64 characters.
- Project
Roles []IdentityAgency V3Project Role Args - An array of roles and projects which are used to grant permissions to agency on project. The structure is documented below.
- Timeouts
Identity
Agency V3Timeouts Args
- delegated
Domain StringName - The name of delegated domain.
- description String
- Provides supplementary information about the agency. The value is a string of 0 to 255 characters.
- domain
Roles List<String> - An array of role names which stand for the permissions to be granted to agency on domain.
- identity
Agency StringV3Id - The agency ID.
- name String
- The name of agency. The name is a string of 1 to 64 characters.
- project
Roles List<IdentityAgency V3Project Role> - An array of roles and projects which are used to grant permissions to agency on project. The structure is documented below.
- timeouts
Identity
Agency V3Timeouts
- delegated
Domain stringName - The name of delegated domain.
- description string
- Provides supplementary information about the agency. The value is a string of 0 to 255 characters.
- domain
Roles string[] - An array of role names which stand for the permissions to be granted to agency on domain.
- identity
Agency stringV3Id - The agency ID.
- name string
- The name of agency. The name is a string of 1 to 64 characters.
- project
Roles IdentityAgency V3Project Role[] - An array of roles and projects which are used to grant permissions to agency on project. The structure is documented below.
- timeouts
Identity
Agency V3Timeouts
- delegated_
domain_ strname - The name of delegated domain.
- description str
- Provides supplementary information about the agency. The value is a string of 0 to 255 characters.
- domain_
roles Sequence[str] - An array of role names which stand for the permissions to be granted to agency on domain.
- identity_
agency_ strv3_ id - The agency ID.
- name str
- The name of agency. The name is a string of 1 to 64 characters.
- project_
roles Sequence[IdentityAgency V3Project Role Args] - An array of roles and projects which are used to grant permissions to agency on project. The structure is documented below.
- timeouts
Identity
Agency V3Timeouts Args
- delegated
Domain StringName - The name of delegated domain.
- description String
- Provides supplementary information about the agency. The value is a string of 0 to 255 characters.
- domain
Roles List<String> - An array of role names which stand for the permissions to be granted to agency on domain.
- identity
Agency StringV3Id - The agency ID.
- name String
- The name of agency. The name is a string of 1 to 64 characters.
- project
Roles List<Property Map> - An array of roles and projects which are used to grant permissions to agency on project. The structure is documented below.
- timeouts Property Map
Outputs
All input properties are implicitly available as output properties. Additionally, the IdentityAgencyV3 resource produces the following output properties:
- Create
Time string - The time when the agency was created.
- Duration string
- Validity period of an agency. The default value is null, indicating that the agency is permanently valid.
- Expire
Time string - The expiration time of agency
- Id string
- The provider-assigned unique ID for this managed resource.
- Create
Time string - The time when the agency was created.
- Duration string
- Validity period of an agency. The default value is null, indicating that the agency is permanently valid.
- Expire
Time string - The expiration time of agency
- Id string
- The provider-assigned unique ID for this managed resource.
- create
Time String - The time when the agency was created.
- duration String
- Validity period of an agency. The default value is null, indicating that the agency is permanently valid.
- expire
Time String - The expiration time of agency
- id String
- The provider-assigned unique ID for this managed resource.
- create
Time string - The time when the agency was created.
- duration string
- Validity period of an agency. The default value is null, indicating that the agency is permanently valid.
- expire
Time string - The expiration time of agency
- id string
- The provider-assigned unique ID for this managed resource.
- create_
time str - The time when the agency was created.
- duration str
- Validity period of an agency. The default value is null, indicating that the agency is permanently valid.
- expire_
time str - The expiration time of agency
- id str
- The provider-assigned unique ID for this managed resource.
- create
Time String - The time when the agency was created.
- duration String
- Validity period of an agency. The default value is null, indicating that the agency is permanently valid.
- expire
Time String - The expiration time of agency
- id String
- The provider-assigned unique ID for this managed resource.
Look up Existing IdentityAgencyV3 Resource
Get an existing IdentityAgencyV3 resource’s state with the given name, ID, and optional extra properties used to qualify the lookup.
public static get(name: string, id: Input<ID>, state?: IdentityAgencyV3State, opts?: CustomResourceOptions): IdentityAgencyV3
@staticmethod
def get(resource_name: str,
id: str,
opts: Optional[ResourceOptions] = None,
create_time: Optional[str] = None,
delegated_domain_name: Optional[str] = None,
description: Optional[str] = None,
domain_roles: Optional[Sequence[str]] = None,
duration: Optional[str] = None,
expire_time: Optional[str] = None,
identity_agency_v3_id: Optional[str] = None,
name: Optional[str] = None,
project_roles: Optional[Sequence[IdentityAgencyV3ProjectRoleArgs]] = None,
timeouts: Optional[IdentityAgencyV3TimeoutsArgs] = None) -> IdentityAgencyV3
func GetIdentityAgencyV3(ctx *Context, name string, id IDInput, state *IdentityAgencyV3State, opts ...ResourceOption) (*IdentityAgencyV3, error)
public static IdentityAgencyV3 Get(string name, Input<string> id, IdentityAgencyV3State? state, CustomResourceOptions? opts = null)
public static IdentityAgencyV3 get(String name, Output<String> id, IdentityAgencyV3State state, CustomResourceOptions options)
resources: _: type: opentelekomcloud:IdentityAgencyV3 get: id: ${id}
- name
- The unique name of the resulting resource.
- id
- The unique provider ID of the resource to lookup.
- state
- Any extra arguments used during the lookup.
- opts
- A bag of options that control this resource's behavior.
- resource_name
- The unique name of the resulting resource.
- id
- The unique provider ID of the resource to lookup.
- name
- The unique name of the resulting resource.
- id
- The unique provider ID of the resource to lookup.
- state
- Any extra arguments used during the lookup.
- opts
- A bag of options that control this resource's behavior.
- name
- The unique name of the resulting resource.
- id
- The unique provider ID of the resource to lookup.
- state
- Any extra arguments used during the lookup.
- opts
- A bag of options that control this resource's behavior.
- name
- The unique name of the resulting resource.
- id
- The unique provider ID of the resource to lookup.
- state
- Any extra arguments used during the lookup.
- opts
- A bag of options that control this resource's behavior.
- Create
Time string - The time when the agency was created.
- Delegated
Domain stringName - The name of delegated domain.
- Description string
- Provides supplementary information about the agency. The value is a string of 0 to 255 characters.
- Domain
Roles List<string> - An array of role names which stand for the permissions to be granted to agency on domain.
- Duration string
- Validity period of an agency. The default value is null, indicating that the agency is permanently valid.
- Expire
Time string - The expiration time of agency
- Identity
Agency stringV3Id - The agency ID.
- Name string
- The name of agency. The name is a string of 1 to 64 characters.
- Project
Roles List<IdentityAgency V3Project Role> - An array of roles and projects which are used to grant permissions to agency on project. The structure is documented below.
- Timeouts
Identity
Agency V3Timeouts
- Create
Time string - The time when the agency was created.
- Delegated
Domain stringName - The name of delegated domain.
- Description string
- Provides supplementary information about the agency. The value is a string of 0 to 255 characters.
- Domain
Roles []string - An array of role names which stand for the permissions to be granted to agency on domain.
- Duration string
- Validity period of an agency. The default value is null, indicating that the agency is permanently valid.
- Expire
Time string - The expiration time of agency
- Identity
Agency stringV3Id - The agency ID.
- Name string
- The name of agency. The name is a string of 1 to 64 characters.
- Project
Roles []IdentityAgency V3Project Role Args - An array of roles and projects which are used to grant permissions to agency on project. The structure is documented below.
- Timeouts
Identity
Agency V3Timeouts Args
- create
Time String - The time when the agency was created.
- delegated
Domain StringName - The name of delegated domain.
- description String
- Provides supplementary information about the agency. The value is a string of 0 to 255 characters.
- domain
Roles List<String> - An array of role names which stand for the permissions to be granted to agency on domain.
- duration String
- Validity period of an agency. The default value is null, indicating that the agency is permanently valid.
- expire
Time String - The expiration time of agency
- identity
Agency StringV3Id - The agency ID.
- name String
- The name of agency. The name is a string of 1 to 64 characters.
- project
Roles List<IdentityAgency V3Project Role> - An array of roles and projects which are used to grant permissions to agency on project. The structure is documented below.
- timeouts
Identity
Agency V3Timeouts
- create
Time string - The time when the agency was created.
- delegated
Domain stringName - The name of delegated domain.
- description string
- Provides supplementary information about the agency. The value is a string of 0 to 255 characters.
- domain
Roles string[] - An array of role names which stand for the permissions to be granted to agency on domain.
- duration string
- Validity period of an agency. The default value is null, indicating that the agency is permanently valid.
- expire
Time string - The expiration time of agency
- identity
Agency stringV3Id - The agency ID.
- name string
- The name of agency. The name is a string of 1 to 64 characters.
- project
Roles IdentityAgency V3Project Role[] - An array of roles and projects which are used to grant permissions to agency on project. The structure is documented below.
- timeouts
Identity
Agency V3Timeouts
- create_
time str - The time when the agency was created.
- delegated_
domain_ strname - The name of delegated domain.
- description str
- Provides supplementary information about the agency. The value is a string of 0 to 255 characters.
- domain_
roles Sequence[str] - An array of role names which stand for the permissions to be granted to agency on domain.
- duration str
- Validity period of an agency. The default value is null, indicating that the agency is permanently valid.
- expire_
time str - The expiration time of agency
- identity_
agency_ strv3_ id - The agency ID.
- name str
- The name of agency. The name is a string of 1 to 64 characters.
- project_
roles Sequence[IdentityAgency V3Project Role Args] - An array of roles and projects which are used to grant permissions to agency on project. The structure is documented below.
- timeouts
Identity
Agency V3Timeouts Args
- create
Time String - The time when the agency was created.
- delegated
Domain StringName - The name of delegated domain.
- description String
- Provides supplementary information about the agency. The value is a string of 0 to 255 characters.
- domain
Roles List<String> - An array of role names which stand for the permissions to be granted to agency on domain.
- duration String
- Validity period of an agency. The default value is null, indicating that the agency is permanently valid.
- expire
Time String - The expiration time of agency
- identity
Agency StringV3Id - The agency ID.
- name String
- The name of agency. The name is a string of 1 to 64 characters.
- project
Roles List<Property Map> - An array of roles and projects which are used to grant permissions to agency on project. The structure is documented below.
- timeouts Property Map
Supporting Types
IdentityAgencyV3ProjectRole, IdentityAgencyV3ProjectRoleArgs
- Roles List<string>
- An array of role names
- All
Projects bool Whether roles are applied to all projects. Either
project
orall_projects
must be provided to specify singleproject_role
element.Note: One or both of
project_role
anddomain_roles
must be input when creating an agency.- Project string
- The name of project
Either
project
orall_projects
must be provided to specify singleproject_role
element.
- Roles []string
- An array of role names
- All
Projects bool Whether roles are applied to all projects. Either
project
orall_projects
must be provided to specify singleproject_role
element.Note: One or both of
project_role
anddomain_roles
must be input when creating an agency.- Project string
- The name of project
Either
project
orall_projects
must be provided to specify singleproject_role
element.
- roles List<String>
- An array of role names
- all
Projects Boolean Whether roles are applied to all projects. Either
project
orall_projects
must be provided to specify singleproject_role
element.Note: One or both of
project_role
anddomain_roles
must be input when creating an agency.- project String
- The name of project
Either
project
orall_projects
must be provided to specify singleproject_role
element.
- roles string[]
- An array of role names
- all
Projects boolean Whether roles are applied to all projects. Either
project
orall_projects
must be provided to specify singleproject_role
element.Note: One or both of
project_role
anddomain_roles
must be input when creating an agency.- project string
- The name of project
Either
project
orall_projects
must be provided to specify singleproject_role
element.
- roles Sequence[str]
- An array of role names
- all_
projects bool Whether roles are applied to all projects. Either
project
orall_projects
must be provided to specify singleproject_role
element.Note: One or both of
project_role
anddomain_roles
must be input when creating an agency.- project str
- The name of project
Either
project
orall_projects
must be provided to specify singleproject_role
element.
- roles List<String>
- An array of role names
- all
Projects Boolean Whether roles are applied to all projects. Either
project
orall_projects
must be provided to specify singleproject_role
element.Note: One or both of
project_role
anddomain_roles
must be input when creating an agency.- project String
- The name of project
Either
project
orall_projects
must be provided to specify singleproject_role
element.
IdentityAgencyV3Timeouts, IdentityAgencyV3TimeoutsArgs
Import
Agencies can be imported using the id
, e.g.
$ pulumi import opentelekomcloud:index/identityAgencyV3:IdentityAgencyV3 this 1bc93b8b-37a4-4b50-92cc-daa4c89d4e4c
To learn more about importing existing cloud resources, see Importing resources.
Package Details
- Repository
- opentelekomcloud opentelekomcloud/terraform-provider-opentelekomcloud
- License
- Notes
- This Pulumi package is based on the
opentelekomcloud
Terraform Provider.