Sign in Dashboard Get started
  1. Registry
  2. Packages
  3. Spectrocloud Provider
  4. API Docs
  5. HardenedImages
Viewing docs for spectrocloud 0.30.5
published on Wednesday, Nov 4, 2026 by spectrocloud
Schema (JSON)
spectrocloud/terraform-provider-spectrocloud

spectrocloud.HardenedImages

spectrocloud
Viewing docs for spectrocloud 0.30.5
published on Wednesday, Nov 4, 2026 by spectrocloud
Schema (JSON)
spectrocloud/terraform-provider-spectrocloud

    Example Usage

    An example of holding two clusters back from the hardened image rollout while every other cluster in the tenant is enrolled.

    import * as pulumi from "@pulumi/pulumi";
import * as spectrocloud from "@pulumi/spectrocloud";

const hardenedImages = new spectrocloud.HardenedImages("hardened_images", {excludedClusterUids: [
    "6512f1a3b0e4d8c7a9f21b40",
    "6512f1a3b0e4d8c7a9f21b57",
]});
export const failedHardenedImageClusters = hardenedImages.clusters.apply(clusters => clusters.filter(cluster => cluster.state == "Failed").map(cluster => (cluster.name)));

    import pulumi
import pulumi_spectrocloud as spectrocloud

hardened_images = spectrocloud.HardenedImages("hardened_images", excluded_cluster_uids=[
    "6512f1a3b0e4d8c7a9f21b40",
    "6512f1a3b0e4d8c7a9f21b57",
])
pulumi.export("failedHardenedImageClusters", hardened_images.clusters.apply(lambda clusters: [cluster.name for cluster in clusters if cluster.state == "Failed"]))

    Example coming soon!

    using System.Collections.Generic;
using System.Linq;
using Pulumi;
using Spectrocloud = Pulumi.Spectrocloud;

return await Deployment.RunAsync(() => 
{
    var hardenedImages = new Spectrocloud.HardenedImages("hardened_images", new()
    {
        ExcludedClusterUids = new[]
        {
            "6512f1a3b0e4d8c7a9f21b40",
            "6512f1a3b0e4d8c7a9f21b57",
        },
    });

    return new Dictionary<string, object?>
    {
        ["failedHardenedImageClusters"] = hardenedImages.Clusters.Apply(clusters => clusters.Where(cluster => cluster.State == "Failed").Select(cluster => 
        {
            return cluster.Name;
        }).ToList()),
    };
});

    Example coming soon!

    Example coming soon!

    Example coming soon!

    Create HardenedImages Resource

    Resources are created with functions called constructors. To learn more about declaring and configuring resources, see Resources.

    Constructor syntax

    new HardenedImages(name: string, args?: HardenedImagesArgs, opts?: CustomResourceOptions);
    @overload
def HardenedImages(resource_name: str,
                   args: Optional[HardenedImagesArgs] = None,
                   opts: Optional[ResourceOptions] = None)

@overload
def HardenedImages(resource_name: str,
                   opts: Optional[ResourceOptions] = None,
                   excluded_cluster_uids: Optional[Sequence[str]] = None,
                   hardened_images_id: Optional[str] = None,
                   timeouts: Optional[HardenedImagesTimeoutsArgs] = None)
    func NewHardenedImages(ctx *Context, name string, args *HardenedImagesArgs, opts ...ResourceOption) (*HardenedImages, error)
    public HardenedImages(string name, HardenedImagesArgs? args = null, CustomResourceOptions? opts = null)
    public HardenedImages(String name, HardenedImagesArgs args)
public HardenedImages(String name, HardenedImagesArgs args, CustomResourceOptions options)

    type: spectrocloud:HardenedImages
properties: # The arguments to resource properties.
options: # Bag of options to control resource's behavior.


    resource "spectrocloud_hardened_images" "name" {
    # resource properties
}

    Parameters

    name string
    The unique name of the resource.
    args HardenedImagesArgs
    The arguments to resource properties.
    opts CustomResourceOptions
    Bag of options to control resource's behavior.
    resource_name str
    The unique name of the resource.
    args HardenedImagesArgs
    The arguments to resource properties.
    opts ResourceOptions
    Bag of options to control resource's behavior.
    ctx Context
    Context object for the current deployment.
    name string
    The unique name of the resource.
    args HardenedImagesArgs
    The arguments to resource properties.
    opts ResourceOption
    Bag of options to control resource's behavior.
    name string
    The unique name of the resource.
    args HardenedImagesArgs
    The arguments to resource properties.
    opts CustomResourceOptions
    Bag of options to control resource's behavior.
    name String
    The unique name of the resource.
    args HardenedImagesArgs
    The arguments to resource properties.
    options CustomResourceOptions
    Bag of options to control resource's behavior.

    Constructor example

    The following reference example uses placeholder values for all input properties.

    var hardenedImagesResource = new Spectrocloud.HardenedImages("hardenedImagesResource", new()
{
    ExcludedClusterUids = new[]
    {
        "string",
    },
    HardenedImagesId = "string",
    Timeouts = new Spectrocloud.Inputs.HardenedImagesTimeoutsArgs
    {
        Create = "string",
        Delete = "string",
        Update = "string",
    },
});

    example, err := spectrocloud.NewHardenedImages(ctx, "hardenedImagesResource", &spectrocloud.HardenedImagesArgs{
	ExcludedClusterUids: pulumi.StringArray{
		pulumi.String("string"),
	},
	HardenedImagesId: pulumi.String("string"),
	Timeouts: &spectrocloud.HardenedImagesTimeoutsArgs{
		Create: pulumi.String("string"),
		Delete: pulumi.String("string"),
		Update: pulumi.String("string"),
	},
})

    resource "spectrocloud_hardened_images" "hardenedImagesResource" {
  lifecycle {
    create_before_destroy = true
  }
  excluded_cluster_uids = ["string"]
  hardened_images_id    = "string"
  _ {
    timeouts = {
      create = "string"
      delete = "string"
      update = "string"
    }
  }
}

    var hardenedImagesResource = new HardenedImages("hardenedImagesResource", HardenedImagesArgs.builder()
    .excludedClusterUids("string")
    .hardenedImagesId("string")
    .timeouts(HardenedImagesTimeoutsArgs.builder()
        .create("string")
        .delete("string")
        .update("string")
        .build())
    .build());

    hardened_images_resource = spectrocloud.HardenedImages("hardenedImagesResource",
    excluded_cluster_uids=["string"],
    hardened_images_id="string",
    timeouts={
        "create": "string",
        "delete": "string",
        "update": "string",
    })

    const hardenedImagesResource = new spectrocloud.HardenedImages("hardenedImagesResource", {
    excludedClusterUids: ["string"],
    hardenedImagesId: "string",
    timeouts: {
        create: "string",
        "delete": "string",
        update: "string",
    },
});

    type: spectrocloud:HardenedImages
properties:
    excludedClusterUids:
        - string
    hardenedImagesId: string
    timeouts:
        create: string
        delete: string
        update: string

    HardenedImages Resource Properties

    To learn more about resource properties and how to use them, see Inputs and Outputs in the Architecture and Concepts docs.

    Inputs

    In Python, inputs that are objects can be passed either as argument classes or as dictionary literals.

    The HardenedImages resource accepts the following input properties:

    ExcludedClusterUids List<string>
    Unique identifiers of the clusters that must not receive the hardened image pull secret. Palette keeps every other cluster in the tenant enrolled. Dropping an identifier from this set re-enrolls that cluster on the next apply.
    HardenedImagesId string
    The ID of this resource.
    Timeouts HardenedImagesTimeouts
    ExcludedClusterUids []string
    Unique identifiers of the clusters that must not receive the hardened image pull secret. Palette keeps every other cluster in the tenant enrolled. Dropping an identifier from this set re-enrolls that cluster on the next apply.
    HardenedImagesId string
    The ID of this resource.
    Timeouts HardenedImagesTimeoutsArgs
    excluded_cluster_uids list(string)
    Unique identifiers of the clusters that must not receive the hardened image pull secret. Palette keeps every other cluster in the tenant enrolled. Dropping an identifier from this set re-enrolls that cluster on the next apply.
    hardened_images_id string
    The ID of this resource.
    timeouts object
    excludedClusterUids List<String>
    Unique identifiers of the clusters that must not receive the hardened image pull secret. Palette keeps every other cluster in the tenant enrolled. Dropping an identifier from this set re-enrolls that cluster on the next apply.
    hardenedImagesId String
    The ID of this resource.
    timeouts HardenedImagesTimeouts
    excludedClusterUids string[]
    Unique identifiers of the clusters that must not receive the hardened image pull secret. Palette keeps every other cluster in the tenant enrolled. Dropping an identifier from this set re-enrolls that cluster on the next apply.
    hardenedImagesId string
    The ID of this resource.
    timeouts HardenedImagesTimeouts
    excluded_cluster_uids Sequence[str]
    Unique identifiers of the clusters that must not receive the hardened image pull secret. Palette keeps every other cluster in the tenant enrolled. Dropping an identifier from this set re-enrolls that cluster on the next apply.
    hardened_images_id str
    The ID of this resource.
    timeouts HardenedImagesTimeoutsArgs
    excludedClusterUids List<String>
    Unique identifiers of the clusters that must not receive the hardened image pull secret. Palette keeps every other cluster in the tenant enrolled. Dropping an identifier from this set re-enrolls that cluster on the next apply.
    hardenedImagesId String
    The ID of this resource.
    timeouts Property Map

    Outputs

    All input properties are implicitly available as output properties. Additionally, the HardenedImages resource produces the following output properties:

    Clusters List<HardenedImagesCluster>
    One entry per cluster in the tenant, reporting how far the hardened image pull secret rollout has progressed on that cluster. Clusters that are currently opted out are listed too.
    FailedClustersCount double
    Number of enrolled clusters that Palette could not deliver the image pull secret to. Inspect the clusters attribute for the per-cluster failure reason.
    Id string
    The provider-assigned unique ID for this managed resource.
    State string
    Aggregated rollout progress for the tenant. Palette reports Completed once every enrolled cluster holds the secret, InProgress while the rollout is running, and Failed when at least one cluster could not be updated.
    Clusters []HardenedImagesCluster
    One entry per cluster in the tenant, reporting how far the hardened image pull secret rollout has progressed on that cluster. Clusters that are currently opted out are listed too.
    FailedClustersCount float64
    Number of enrolled clusters that Palette could not deliver the image pull secret to. Inspect the clusters attribute for the per-cluster failure reason.
    Id string
    The provider-assigned unique ID for this managed resource.
    State string
    Aggregated rollout progress for the tenant. Palette reports Completed once every enrolled cluster holds the secret, InProgress while the rollout is running, and Failed when at least one cluster could not be updated.
    clusters list(object)
    One entry per cluster in the tenant, reporting how far the hardened image pull secret rollout has progressed on that cluster. Clusters that are currently opted out are listed too.
    failed_clusters_count number
    Number of enrolled clusters that Palette could not deliver the image pull secret to. Inspect the clusters attribute for the per-cluster failure reason.
    id string
    The provider-assigned unique ID for this managed resource.
    state string
    Aggregated rollout progress for the tenant. Palette reports Completed once every enrolled cluster holds the secret, InProgress while the rollout is running, and Failed when at least one cluster could not be updated.
    clusters List<HardenedImagesCluster>
    One entry per cluster in the tenant, reporting how far the hardened image pull secret rollout has progressed on that cluster. Clusters that are currently opted out are listed too.
    failedClustersCount Double
    Number of enrolled clusters that Palette could not deliver the image pull secret to. Inspect the clusters attribute for the per-cluster failure reason.
    id String
    The provider-assigned unique ID for this managed resource.
    state String
    Aggregated rollout progress for the tenant. Palette reports Completed once every enrolled cluster holds the secret, InProgress while the rollout is running, and Failed when at least one cluster could not be updated.
    clusters HardenedImagesCluster[]
    One entry per cluster in the tenant, reporting how far the hardened image pull secret rollout has progressed on that cluster. Clusters that are currently opted out are listed too.
    failedClustersCount number
    Number of enrolled clusters that Palette could not deliver the image pull secret to. Inspect the clusters attribute for the per-cluster failure reason.
    id string
    The provider-assigned unique ID for this managed resource.
    state string
    Aggregated rollout progress for the tenant. Palette reports Completed once every enrolled cluster holds the secret, InProgress while the rollout is running, and Failed when at least one cluster could not be updated.
    clusters Sequence[HardenedImagesCluster]
    One entry per cluster in the tenant, reporting how far the hardened image pull secret rollout has progressed on that cluster. Clusters that are currently opted out are listed too.
    failed_clusters_count float
    Number of enrolled clusters that Palette could not deliver the image pull secret to. Inspect the clusters attribute for the per-cluster failure reason.
    id str
    The provider-assigned unique ID for this managed resource.
    state str
    Aggregated rollout progress for the tenant. Palette reports Completed once every enrolled cluster holds the secret, InProgress while the rollout is running, and Failed when at least one cluster could not be updated.
    clusters List<Property Map>
    One entry per cluster in the tenant, reporting how far the hardened image pull secret rollout has progressed on that cluster. Clusters that are currently opted out are listed too.
    failedClustersCount Number
    Number of enrolled clusters that Palette could not deliver the image pull secret to. Inspect the clusters attribute for the per-cluster failure reason.
    id String
    The provider-assigned unique ID for this managed resource.
    state String
    Aggregated rollout progress for the tenant. Palette reports Completed once every enrolled cluster holds the secret, InProgress while the rollout is running, and Failed when at least one cluster could not be updated.

    Look up Existing HardenedImages Resource

    Get an existing HardenedImages resource’s state with the given name, ID, and optional extra properties used to qualify the lookup.

    public static get(name: string, id: Input<ID>, state?: HardenedImagesState, opts?: CustomResourceOptions): HardenedImages
    @staticmethod
def get(resource_name: str,
        id: str,
        opts: Optional[ResourceOptions] = None,
        clusters: Optional[Sequence[HardenedImagesClusterArgs]] = None,
        excluded_cluster_uids: Optional[Sequence[str]] = None,
        failed_clusters_count: Optional[float] = None,
        hardened_images_id: Optional[str] = None,
        state: Optional[str] = None,
        timeouts: Optional[HardenedImagesTimeoutsArgs] = None) -> HardenedImages
    func GetHardenedImages(ctx *Context, name string, id IDInput, state *HardenedImagesState, opts ...ResourceOption) (*HardenedImages, error)
    public static HardenedImages Get(string name, Input<string> id, HardenedImagesState? state, CustomResourceOptions? opts = null)
    public static HardenedImages get(String name, Output<String> id, HardenedImagesState state, CustomResourceOptions options)
    resources:  _:    type: spectrocloud:HardenedImages    get:      id: ${id}
    import {
  to = spectrocloud_hardened_images.example
  id = "${id}"
}
    name
    The unique name of the resulting resource.
    id
    The unique provider ID of the resource to lookup.
    state
    Any extra arguments used during the lookup.
    opts
    A bag of options that control this resource's behavior.
    resource_name
    The unique name of the resulting resource.
    id
    The unique provider ID of the resource to lookup.
    name
    The unique name of the resulting resource.
    id
    The unique provider ID of the resource to lookup.
    state
    Any extra arguments used during the lookup.
    opts
    A bag of options that control this resource's behavior.
    name
    The unique name of the resulting resource.
    id
    The unique provider ID of the resource to lookup.
    state
    Any extra arguments used during the lookup.
    opts
    A bag of options that control this resource's behavior.
    name
    The unique name of the resulting resource.
    id
    The unique provider ID of the resource to lookup.
    state
    Any extra arguments used during the lookup.
    opts
    A bag of options that control this resource's behavior.
    The following state arguments are supported:
    Clusters List<HardenedImagesCluster>
    One entry per cluster in the tenant, reporting how far the hardened image pull secret rollout has progressed on that cluster. Clusters that are currently opted out are listed too.
    ExcludedClusterUids List<string>
    Unique identifiers of the clusters that must not receive the hardened image pull secret. Palette keeps every other cluster in the tenant enrolled. Dropping an identifier from this set re-enrolls that cluster on the next apply.
    FailedClustersCount double
    Number of enrolled clusters that Palette could not deliver the image pull secret to. Inspect the clusters attribute for the per-cluster failure reason.
    HardenedImagesId string
    The ID of this resource.
    State string
    Aggregated rollout progress for the tenant. Palette reports Completed once every enrolled cluster holds the secret, InProgress while the rollout is running, and Failed when at least one cluster could not be updated.
    Timeouts HardenedImagesTimeouts
    Clusters []HardenedImagesClusterArgs
    One entry per cluster in the tenant, reporting how far the hardened image pull secret rollout has progressed on that cluster. Clusters that are currently opted out are listed too.
    ExcludedClusterUids []string
    Unique identifiers of the clusters that must not receive the hardened image pull secret. Palette keeps every other cluster in the tenant enrolled. Dropping an identifier from this set re-enrolls that cluster on the next apply.
    FailedClustersCount float64
    Number of enrolled clusters that Palette could not deliver the image pull secret to. Inspect the clusters attribute for the per-cluster failure reason.
    HardenedImagesId string
    The ID of this resource.
    State string
    Aggregated rollout progress for the tenant. Palette reports Completed once every enrolled cluster holds the secret, InProgress while the rollout is running, and Failed when at least one cluster could not be updated.
    Timeouts HardenedImagesTimeoutsArgs
    clusters list(object)
    One entry per cluster in the tenant, reporting how far the hardened image pull secret rollout has progressed on that cluster. Clusters that are currently opted out are listed too.
    excluded_cluster_uids list(string)
    Unique identifiers of the clusters that must not receive the hardened image pull secret. Palette keeps every other cluster in the tenant enrolled. Dropping an identifier from this set re-enrolls that cluster on the next apply.
    failed_clusters_count number
    Number of enrolled clusters that Palette could not deliver the image pull secret to. Inspect the clusters attribute for the per-cluster failure reason.
    hardened_images_id string
    The ID of this resource.
    state string
    Aggregated rollout progress for the tenant. Palette reports Completed once every enrolled cluster holds the secret, InProgress while the rollout is running, and Failed when at least one cluster could not be updated.
    timeouts object
    clusters List<HardenedImagesCluster>
    One entry per cluster in the tenant, reporting how far the hardened image pull secret rollout has progressed on that cluster. Clusters that are currently opted out are listed too.
    excludedClusterUids List<String>
    Unique identifiers of the clusters that must not receive the hardened image pull secret. Palette keeps every other cluster in the tenant enrolled. Dropping an identifier from this set re-enrolls that cluster on the next apply.
    failedClustersCount Double
    Number of enrolled clusters that Palette could not deliver the image pull secret to. Inspect the clusters attribute for the per-cluster failure reason.
    hardenedImagesId String
    The ID of this resource.
    state String
    Aggregated rollout progress for the tenant. Palette reports Completed once every enrolled cluster holds the secret, InProgress while the rollout is running, and Failed when at least one cluster could not be updated.
    timeouts HardenedImagesTimeouts
    clusters HardenedImagesCluster[]
    One entry per cluster in the tenant, reporting how far the hardened image pull secret rollout has progressed on that cluster. Clusters that are currently opted out are listed too.
    excludedClusterUids string[]
    Unique identifiers of the clusters that must not receive the hardened image pull secret. Palette keeps every other cluster in the tenant enrolled. Dropping an identifier from this set re-enrolls that cluster on the next apply.
    failedClustersCount number
    Number of enrolled clusters that Palette could not deliver the image pull secret to. Inspect the clusters attribute for the per-cluster failure reason.
    hardenedImagesId string
    The ID of this resource.
    state string
    Aggregated rollout progress for the tenant. Palette reports Completed once every enrolled cluster holds the secret, InProgress while the rollout is running, and Failed when at least one cluster could not be updated.
    timeouts HardenedImagesTimeouts
    clusters Sequence[HardenedImagesClusterArgs]
    One entry per cluster in the tenant, reporting how far the hardened image pull secret rollout has progressed on that cluster. Clusters that are currently opted out are listed too.
    excluded_cluster_uids Sequence[str]
    Unique identifiers of the clusters that must not receive the hardened image pull secret. Palette keeps every other cluster in the tenant enrolled. Dropping an identifier from this set re-enrolls that cluster on the next apply.
    failed_clusters_count float
    Number of enrolled clusters that Palette could not deliver the image pull secret to. Inspect the clusters attribute for the per-cluster failure reason.
    hardened_images_id str
    The ID of this resource.
    state str
    Aggregated rollout progress for the tenant. Palette reports Completed once every enrolled cluster holds the secret, InProgress while the rollout is running, and Failed when at least one cluster could not be updated.
    timeouts HardenedImagesTimeoutsArgs
    clusters List<Property Map>
    One entry per cluster in the tenant, reporting how far the hardened image pull secret rollout has progressed on that cluster. Clusters that are currently opted out are listed too.
    excludedClusterUids List<String>
    Unique identifiers of the clusters that must not receive the hardened image pull secret. Palette keeps every other cluster in the tenant enrolled. Dropping an identifier from this set re-enrolls that cluster on the next apply.
    failedClustersCount Number
    Number of enrolled clusters that Palette could not deliver the image pull secret to. Inspect the clusters attribute for the per-cluster failure reason.
    hardenedImagesId String
    The ID of this resource.
    state String
    Aggregated rollout progress for the tenant. Palette reports Completed once every enrolled cluster holds the secret, InProgress while the rollout is running, and Failed when at least one cluster could not be updated.
    timeouts Property Map

    Supporting Types

    HardenedImagesCluster, HardenedImagesClusterArgs

    Exclude bool
    Message string
    Name string
    ProjectName string
    ProjectUid string
    Reason string
    State string
    Uid string
    Exclude bool
    Message string
    Name string
    ProjectName string
    ProjectUid string
    Reason string
    State string
    Uid string
    exclude bool
    message string
    name string
    project_name string
    project_uid string
    reason string
    state string
    uid string
    exclude Boolean
    message String
    name String
    projectName String
    projectUid String
    reason String
    state String
    uid String
    exclude boolean
    message string
    name string
    projectName string
    projectUid string
    reason string
    state string
    uid string
    exclude Boolean
    message String
    name String
    projectName String
    projectUid String
    reason String
    state String
    uid String

    HardenedImagesTimeouts, HardenedImagesTimeoutsArgs

    Create string
    Delete string
    Update string
    Create string
    Delete string
    Update string
    create string
    delete string
    update string
    create String
    delete String
    update String
    create string
    delete string
    update string
    create str
    delete str
    update str
    create String
    delete String
    update String

    Import

    Using pulumi import, import the hardened image configuration using the tenant_uid or the organization name. For example:

    console

    $ pulumi import spectrocloud:index/hardenedImages:HardenedImages example <tenant_uid>

    $ pulumi import spectrocloud:index/hardenedImages:HardenedImages example <organization_name>

    To learn more about importing existing cloud resources, see Importing resources.

    Package Details

    Repository
    spectrocloud spectrocloud/terraform-provider-spectrocloud
    License
    Notes
    This Pulumi package is based on the spectrocloud Terraform Provider.
    spectrocloud
    Viewing docs for spectrocloud 0.30.5
    published on Wednesday, Nov 4, 2026 by spectrocloud
    Schema (JSON)
    spectrocloud/terraform-provider-spectrocloud

      Try Pulumi Cloud free.
      Your team will thank you.

      Start free trial