Provider

stackit v0.0.4, Feb 20 26

Viewing docs for stackit v0.0.4
published on Friday, Feb 20, 2026 by stackitcloud

Schema (JSON)

stackitcloud/pulumi-stackit

Viewing docs for stackit v0.0.4
published on Friday, Feb 20, 2026 by stackitcloud

Schema (JSON)

stackitcloud/pulumi-stackit

The provider type for the stackit package. By default, resources use package-wide configuration settings, however an explicit Provider instance may be created and passed during resource construction to achieve fine-grained programmatic control over provider settings. See the documentation for more information.

Create Provider Resource

Resources are created with functions called constructors. To learn more about declaring and configuring resources, see Resources.

Constructor syntax

new Provider(name: string, args?: ProviderArgs, opts?: CustomResourceOptions);

@overload
def Provider(resource_name: str,
             args: Optional[ProviderArgs] = None,
             opts: Optional[ResourceOptions] = None)

@overload
def Provider(resource_name: str,
             opts: Optional[ResourceOptions] = None,
             authorization_custom_endpoint: Optional[str] = None,
             cdn_custom_endpoint: Optional[str] = None,
             credentials_path: Optional[str] = None,
             default_region: Optional[str] = None,
             dns_custom_endpoint: Optional[str] = None,
             edgecloud_custom_endpoint: Optional[str] = None,
             enable_beta_resources: Optional[bool] = None,
             experiments: Optional[Sequence[str]] = None,
             git_custom_endpoint: Optional[str] = None,
             iaas_custom_endpoint: Optional[str] = None,
             kms_custom_endpoint: Optional[str] = None,
             loadbalancer_custom_endpoint: Optional[str] = None,
             logme_custom_endpoint: Optional[str] = None,
             logs_custom_endpoint: Optional[str] = None,
             mariadb_custom_endpoint: Optional[str] = None,
             modelserving_custom_endpoint: Optional[str] = None,
             mongodbflex_custom_endpoint: Optional[str] = None,
             objectstorage_custom_endpoint: Optional[str] = None,
             observability_custom_endpoint: Optional[str] = None,
             oidc_request_token: Optional[str] = None,
             oidc_request_url: Optional[str] = None,
             opensearch_custom_endpoint: Optional[str] = None,
             postgresflex_custom_endpoint: Optional[str] = None,
             private_key: Optional[str] = None,
             private_key_path: Optional[str] = None,
             rabbitmq_custom_endpoint: Optional[str] = None,
             redis_custom_endpoint: Optional[str] = None,
             region: Optional[str] = None,
             resourcemanager_custom_endpoint: Optional[str] = None,
             scf_custom_endpoint: Optional[str] = None,
             secretsmanager_custom_endpoint: Optional[str] = None,
             server_backup_custom_endpoint: Optional[str] = None,
             server_update_custom_endpoint: Optional[str] = None,
             service_account_custom_endpoint: Optional[str] = None,
             service_account_email: Optional[str] = None,
             service_account_federated_token: Optional[str] = None,
             service_account_federated_token_path: Optional[str] = None,
             service_account_key: Optional[str] = None,
             service_account_key_path: Optional[str] = None,
             service_account_token: Optional[str] = None,
             service_enablement_custom_endpoint: Optional[str] = None,
             sfs_custom_endpoint: Optional[str] = None,
             ske_custom_endpoint: Optional[str] = None,
             sqlserverflex_custom_endpoint: Optional[str] = None,
             token_custom_endpoint: Optional[str] = None,
             use_oidc: Optional[bool] = None)

func NewProvider(ctx *Context, name string, args *ProviderArgs, opts ...ResourceOption) (*Provider, error)

public Provider(string name, ProviderArgs? args = null, CustomResourceOptions? opts = null)

public Provider(String name, ProviderArgs args)
public Provider(String name, ProviderArgs args, CustomResourceOptions options)

type: pulumi:providers:stackit
properties: # The arguments to resource properties.
options: # Bag of options to control resource's behavior.

Parameters

name string: The unique name of the resource.
args ProviderArgs: The arguments to resource properties.
opts CustomResourceOptions: Bag of options to control resource's behavior.

resource_name str: The unique name of the resource.
args ProviderArgs: The arguments to resource properties.
opts ResourceOptions: Bag of options to control resource's behavior.

ctx Context: Context object for the current deployment.
name string: The unique name of the resource.
args ProviderArgs: The arguments to resource properties.
opts ResourceOption: Bag of options to control resource's behavior.

name string: The unique name of the resource.
args ProviderArgs: The arguments to resource properties.
opts CustomResourceOptions: Bag of options to control resource's behavior.

name String: The unique name of the resource.
args ProviderArgs: The arguments to resource properties.
options CustomResourceOptions: Bag of options to control resource's behavior.

Provider Resource Properties

To learn more about resource properties and how to use them, see Inputs and Outputs in the Architecture and Concepts docs.

Inputs

In Python, inputs that are objects can be passed either as argument classes or as dictionary literals.

The Provider resource accepts the following input properties:

AuthorizationCustomEndpoint string: Custom endpoint for the Membership service
CdnCustomEndpoint string: Custom endpoint for the CDN service
CredentialsPath string: Path of JSON from where the credentials are read. Takes precedence over the env var STACKIT_CREDENTIALS_PATH. Default value is ~/.stackit/credentials.json.
DefaultRegion string: Region will be used as the default location for regional services. Not all services require a region, some are global
DnsCustomEndpoint string: Custom endpoint for the DNS service
EdgecloudCustomEndpoint string: Custom endpoint for the Edge Cloud service
EnableBetaResources bool: Enable beta resources. Default is false.
Experiments List<string>: Enables experiments. These are unstable features without official support. More information can be found in the README. Available Experiments: iam, routing-tables, network
GitCustomEndpoint string: Custom endpoint for the Git service
IaasCustomEndpoint string: Custom endpoint for the IaaS service
KmsCustomEndpoint string: Custom endpoint for the KMS service
LoadbalancerCustomEndpoint string: Custom endpoint for the Load Balancer service
LogmeCustomEndpoint string: Custom endpoint for the LogMe service
LogsCustomEndpoint string: Custom endpoint for the Logs service
MariadbCustomEndpoint string: Custom endpoint for the MariaDB service
ModelservingCustomEndpoint string: Custom endpoint for the AI Model Serving service
MongodbflexCustomEndpoint string: Custom endpoint for the MongoDB Flex service
ObjectstorageCustomEndpoint string: Custom endpoint for the Object Storage service
ObservabilityCustomEndpoint string: Custom endpoint for the Observability service
OidcRequestToken string: The bearer token for the request to the OIDC provider. For use when authenticating as a Service Account using OpenID Connect.
OidcRequestUrl string: The URL for the OIDC provider from which to request an ID token. For use when authenticating as a Service Account using OpenID Connect.
OpensearchCustomEndpoint string: Custom endpoint for the OpenSearch service
PostgresflexCustomEndpoint string: Custom endpoint for the PostgresFlex service
PrivateKey string: Private RSA key used for authentication, relevant for the key flow. It takes precedence over the private key that is included in the service account key.
PrivateKeyPath string: Path for the private RSA key used for authentication, relevant for the key flow. It takes precedence over the private key that is included in the service account key.
RabbitmqCustomEndpoint string: Custom endpoint for the RabbitMQ service
RedisCustomEndpoint string: Custom endpoint for the Redis service
Region string: Region will be used as the default location for regional services. Not all services require a region, some are global
Deprecated: This attribute is deprecated. Use 'default_region' instead
ResourcemanagerCustomEndpoint string: Custom endpoint for the Resource Manager service
ScfCustomEndpoint string: Custom endpoint for the Cloud Foundry (SCF) service
SecretsmanagerCustomEndpoint string: Custom endpoint for the Secrets Manager service
ServerBackupCustomEndpoint string: Custom endpoint for the Server Backup service
ServerUpdateCustomEndpoint string: Custom endpoint for the Server Update service
ServiceAccountCustomEndpoint string: Custom endpoint for the Service Account service
ServiceAccountEmail string: Service account email. It can also be set using the environment variable STACKIT_SERVICE_ACCOUNT_EMAIL. It is required if you want to use the resource manager project resource. This value is required using OpenID Connect authentication.
ServiceAccountFederatedToken string: The OIDC ID token for use when authenticating as a Service Account using OpenID Connect.
ServiceAccountFederatedTokenPath string: Path for workload identity assertion. It can also be set using the environment variable STACKIT_FEDERATED_TOKEN_FILE.
ServiceAccountKey string: Service account key used for authentication. If set, the key flow will be used to authenticate all operations.
ServiceAccountKeyPath string: Path for the service account key used for authentication. If set, the key flow will be used to authenticate all operations.
ServiceAccountToken string: Token used for authentication. If set, the token flow will be used to authenticate all operations.
Deprecated: Authentication via Service Account Token is deprecated and will be removed on December 17, 2025. Please use service_account_key or service_account_key_path instead. For a smooth transition, refer to our migration guide: https://docs.stackit.cloud/platform/access-and-identity/service-accounts/migrate-flows/
ServiceEnablementCustomEndpoint string: Custom endpoint for the Service Enablement API
SfsCustomEndpoint string: Custom endpoint for the Stackit Filestorage API
SkeCustomEndpoint string: Custom endpoint for the Kubernetes Engine (SKE) service
SqlserverflexCustomEndpoint string: Custom endpoint for the SQL Server Flex service
TokenCustomEndpoint string: Custom endpoint for the token API, which is used to request access tokens when using the key flow
UseOidc bool: Enables OIDC for Authentication. This can also be sourced from the STACKIT_USE_OIDC Environment Variable. Defaults to false.

AuthorizationCustomEndpoint string: Custom endpoint for the Membership service
CdnCustomEndpoint string: Custom endpoint for the CDN service
CredentialsPath string: Path of JSON from where the credentials are read. Takes precedence over the env var STACKIT_CREDENTIALS_PATH. Default value is ~/.stackit/credentials.json.
DefaultRegion string: Region will be used as the default location for regional services. Not all services require a region, some are global
DnsCustomEndpoint string: Custom endpoint for the DNS service
EdgecloudCustomEndpoint string: Custom endpoint for the Edge Cloud service
EnableBetaResources bool: Enable beta resources. Default is false.
Experiments []string: Enables experiments. These are unstable features without official support. More information can be found in the README. Available Experiments: iam, routing-tables, network
GitCustomEndpoint string: Custom endpoint for the Git service
IaasCustomEndpoint string: Custom endpoint for the IaaS service
KmsCustomEndpoint string: Custom endpoint for the KMS service
LoadbalancerCustomEndpoint string: Custom endpoint for the Load Balancer service
LogmeCustomEndpoint string: Custom endpoint for the LogMe service
LogsCustomEndpoint string: Custom endpoint for the Logs service
MariadbCustomEndpoint string: Custom endpoint for the MariaDB service
ModelservingCustomEndpoint string: Custom endpoint for the AI Model Serving service
MongodbflexCustomEndpoint string: Custom endpoint for the MongoDB Flex service
ObjectstorageCustomEndpoint string: Custom endpoint for the Object Storage service
ObservabilityCustomEndpoint string: Custom endpoint for the Observability service
OidcRequestToken string: The bearer token for the request to the OIDC provider. For use when authenticating as a Service Account using OpenID Connect.
OidcRequestUrl string: The URL for the OIDC provider from which to request an ID token. For use when authenticating as a Service Account using OpenID Connect.
OpensearchCustomEndpoint string: Custom endpoint for the OpenSearch service
PostgresflexCustomEndpoint string: Custom endpoint for the PostgresFlex service
PrivateKey string: Private RSA key used for authentication, relevant for the key flow. It takes precedence over the private key that is included in the service account key.
PrivateKeyPath string: Path for the private RSA key used for authentication, relevant for the key flow. It takes precedence over the private key that is included in the service account key.
RabbitmqCustomEndpoint string: Custom endpoint for the RabbitMQ service
RedisCustomEndpoint string: Custom endpoint for the Redis service
Region string: Region will be used as the default location for regional services. Not all services require a region, some are global
Deprecated: This attribute is deprecated. Use 'default_region' instead
ResourcemanagerCustomEndpoint string: Custom endpoint for the Resource Manager service
ScfCustomEndpoint string: Custom endpoint for the Cloud Foundry (SCF) service
SecretsmanagerCustomEndpoint string: Custom endpoint for the Secrets Manager service
ServerBackupCustomEndpoint string: Custom endpoint for the Server Backup service
ServerUpdateCustomEndpoint string: Custom endpoint for the Server Update service
ServiceAccountCustomEndpoint string: Custom endpoint for the Service Account service
ServiceAccountEmail string: Service account email. It can also be set using the environment variable STACKIT_SERVICE_ACCOUNT_EMAIL. It is required if you want to use the resource manager project resource. This value is required using OpenID Connect authentication.
ServiceAccountFederatedToken string: The OIDC ID token for use when authenticating as a Service Account using OpenID Connect.
ServiceAccountFederatedTokenPath string: Path for workload identity assertion. It can also be set using the environment variable STACKIT_FEDERATED_TOKEN_FILE.
ServiceAccountKey string: Service account key used for authentication. If set, the key flow will be used to authenticate all operations.
ServiceAccountKeyPath string: Path for the service account key used for authentication. If set, the key flow will be used to authenticate all operations.
ServiceAccountToken string: Token used for authentication. If set, the token flow will be used to authenticate all operations.
Deprecated: Authentication via Service Account Token is deprecated and will be removed on December 17, 2025. Please use service_account_key or service_account_key_path instead. For a smooth transition, refer to our migration guide: https://docs.stackit.cloud/platform/access-and-identity/service-accounts/migrate-flows/
ServiceEnablementCustomEndpoint string: Custom endpoint for the Service Enablement API
SfsCustomEndpoint string: Custom endpoint for the Stackit Filestorage API
SkeCustomEndpoint string: Custom endpoint for the Kubernetes Engine (SKE) service
SqlserverflexCustomEndpoint string: Custom endpoint for the SQL Server Flex service
TokenCustomEndpoint string: Custom endpoint for the token API, which is used to request access tokens when using the key flow
UseOidc bool: Enables OIDC for Authentication. This can also be sourced from the STACKIT_USE_OIDC Environment Variable. Defaults to false.

authorizationCustomEndpoint String: Custom endpoint for the Membership service
cdnCustomEndpoint String: Custom endpoint for the CDN service
credentialsPath String: Path of JSON from where the credentials are read. Takes precedence over the env var STACKIT_CREDENTIALS_PATH. Default value is ~/.stackit/credentials.json.
defaultRegion String: Region will be used as the default location for regional services. Not all services require a region, some are global
dnsCustomEndpoint String: Custom endpoint for the DNS service
edgecloudCustomEndpoint String: Custom endpoint for the Edge Cloud service
enableBetaResources Boolean: Enable beta resources. Default is false.
experiments List<String>: Enables experiments. These are unstable features without official support. More information can be found in the README. Available Experiments: iam, routing-tables, network
gitCustomEndpoint String: Custom endpoint for the Git service
iaasCustomEndpoint String: Custom endpoint for the IaaS service
kmsCustomEndpoint String: Custom endpoint for the KMS service
loadbalancerCustomEndpoint String: Custom endpoint for the Load Balancer service
logmeCustomEndpoint String: Custom endpoint for the LogMe service
logsCustomEndpoint String: Custom endpoint for the Logs service
mariadbCustomEndpoint String: Custom endpoint for the MariaDB service
modelservingCustomEndpoint String: Custom endpoint for the AI Model Serving service
mongodbflexCustomEndpoint String: Custom endpoint for the MongoDB Flex service
objectstorageCustomEndpoint String: Custom endpoint for the Object Storage service
observabilityCustomEndpoint String: Custom endpoint for the Observability service
oidcRequestToken String: The bearer token for the request to the OIDC provider. For use when authenticating as a Service Account using OpenID Connect.
oidcRequestUrl String: The URL for the OIDC provider from which to request an ID token. For use when authenticating as a Service Account using OpenID Connect.
opensearchCustomEndpoint String: Custom endpoint for the OpenSearch service
postgresflexCustomEndpoint String: Custom endpoint for the PostgresFlex service
privateKey String: Private RSA key used for authentication, relevant for the key flow. It takes precedence over the private key that is included in the service account key.
privateKeyPath String: Path for the private RSA key used for authentication, relevant for the key flow. It takes precedence over the private key that is included in the service account key.
rabbitmqCustomEndpoint String: Custom endpoint for the RabbitMQ service
redisCustomEndpoint String: Custom endpoint for the Redis service
region String: Region will be used as the default location for regional services. Not all services require a region, some are global
Deprecated: This attribute is deprecated. Use 'default_region' instead
resourcemanagerCustomEndpoint String: Custom endpoint for the Resource Manager service
scfCustomEndpoint String: Custom endpoint for the Cloud Foundry (SCF) service
secretsmanagerCustomEndpoint String: Custom endpoint for the Secrets Manager service
serverBackupCustomEndpoint String: Custom endpoint for the Server Backup service
serverUpdateCustomEndpoint String: Custom endpoint for the Server Update service
serviceAccountCustomEndpoint String: Custom endpoint for the Service Account service
serviceAccountEmail String: Service account email. It can also be set using the environment variable STACKIT_SERVICE_ACCOUNT_EMAIL. It is required if you want to use the resource manager project resource. This value is required using OpenID Connect authentication.
serviceAccountFederatedToken String: The OIDC ID token for use when authenticating as a Service Account using OpenID Connect.
serviceAccountFederatedTokenPath String: Path for workload identity assertion. It can also be set using the environment variable STACKIT_FEDERATED_TOKEN_FILE.
serviceAccountKey String: Service account key used for authentication. If set, the key flow will be used to authenticate all operations.
serviceAccountKeyPath String: Path for the service account key used for authentication. If set, the key flow will be used to authenticate all operations.
serviceAccountToken String: Token used for authentication. If set, the token flow will be used to authenticate all operations.
Deprecated: Authentication via Service Account Token is deprecated and will be removed on December 17, 2025. Please use service_account_key or service_account_key_path instead. For a smooth transition, refer to our migration guide: https://docs.stackit.cloud/platform/access-and-identity/service-accounts/migrate-flows/
serviceEnablementCustomEndpoint String: Custom endpoint for the Service Enablement API
sfsCustomEndpoint String: Custom endpoint for the Stackit Filestorage API
skeCustomEndpoint String: Custom endpoint for the Kubernetes Engine (SKE) service
sqlserverflexCustomEndpoint String: Custom endpoint for the SQL Server Flex service
tokenCustomEndpoint String: Custom endpoint for the token API, which is used to request access tokens when using the key flow
useOidc Boolean: Enables OIDC for Authentication. This can also be sourced from the STACKIT_USE_OIDC Environment Variable. Defaults to false.

authorizationCustomEndpoint string: Custom endpoint for the Membership service
cdnCustomEndpoint string: Custom endpoint for the CDN service
credentialsPath string: Path of JSON from where the credentials are read. Takes precedence over the env var STACKIT_CREDENTIALS_PATH. Default value is ~/.stackit/credentials.json.
defaultRegion string: Region will be used as the default location for regional services. Not all services require a region, some are global
dnsCustomEndpoint string: Custom endpoint for the DNS service
edgecloudCustomEndpoint string: Custom endpoint for the Edge Cloud service
enableBetaResources boolean: Enable beta resources. Default is false.
experiments string[]: Enables experiments. These are unstable features without official support. More information can be found in the README. Available Experiments: iam, routing-tables, network
gitCustomEndpoint string: Custom endpoint for the Git service
iaasCustomEndpoint string: Custom endpoint for the IaaS service
kmsCustomEndpoint string: Custom endpoint for the KMS service
loadbalancerCustomEndpoint string: Custom endpoint for the Load Balancer service
logmeCustomEndpoint string: Custom endpoint for the LogMe service
logsCustomEndpoint string: Custom endpoint for the Logs service
mariadbCustomEndpoint string: Custom endpoint for the MariaDB service
modelservingCustomEndpoint string: Custom endpoint for the AI Model Serving service
mongodbflexCustomEndpoint string: Custom endpoint for the MongoDB Flex service
objectstorageCustomEndpoint string: Custom endpoint for the Object Storage service
observabilityCustomEndpoint string: Custom endpoint for the Observability service
oidcRequestToken string: The bearer token for the request to the OIDC provider. For use when authenticating as a Service Account using OpenID Connect.
oidcRequestUrl string: The URL for the OIDC provider from which to request an ID token. For use when authenticating as a Service Account using OpenID Connect.
opensearchCustomEndpoint string: Custom endpoint for the OpenSearch service
postgresflexCustomEndpoint string: Custom endpoint for the PostgresFlex service
privateKey string: Private RSA key used for authentication, relevant for the key flow. It takes precedence over the private key that is included in the service account key.
privateKeyPath string: Path for the private RSA key used for authentication, relevant for the key flow. It takes precedence over the private key that is included in the service account key.
rabbitmqCustomEndpoint string: Custom endpoint for the RabbitMQ service
redisCustomEndpoint string: Custom endpoint for the Redis service
region string: Region will be used as the default location for regional services. Not all services require a region, some are global
Deprecated: This attribute is deprecated. Use 'default_region' instead
resourcemanagerCustomEndpoint string: Custom endpoint for the Resource Manager service
scfCustomEndpoint string: Custom endpoint for the Cloud Foundry (SCF) service
secretsmanagerCustomEndpoint string: Custom endpoint for the Secrets Manager service
serverBackupCustomEndpoint string: Custom endpoint for the Server Backup service
serverUpdateCustomEndpoint string: Custom endpoint for the Server Update service
serviceAccountCustomEndpoint string: Custom endpoint for the Service Account service
serviceAccountEmail string: Service account email. It can also be set using the environment variable STACKIT_SERVICE_ACCOUNT_EMAIL. It is required if you want to use the resource manager project resource. This value is required using OpenID Connect authentication.
serviceAccountFederatedToken string: The OIDC ID token for use when authenticating as a Service Account using OpenID Connect.
serviceAccountFederatedTokenPath string: Path for workload identity assertion. It can also be set using the environment variable STACKIT_FEDERATED_TOKEN_FILE.
serviceAccountKey string: Service account key used for authentication. If set, the key flow will be used to authenticate all operations.
serviceAccountKeyPath string: Path for the service account key used for authentication. If set, the key flow will be used to authenticate all operations.
serviceAccountToken string: Token used for authentication. If set, the token flow will be used to authenticate all operations.
Deprecated: Authentication via Service Account Token is deprecated and will be removed on December 17, 2025. Please use service_account_key or service_account_key_path instead. For a smooth transition, refer to our migration guide: https://docs.stackit.cloud/platform/access-and-identity/service-accounts/migrate-flows/
serviceEnablementCustomEndpoint string: Custom endpoint for the Service Enablement API
sfsCustomEndpoint string: Custom endpoint for the Stackit Filestorage API
skeCustomEndpoint string: Custom endpoint for the Kubernetes Engine (SKE) service
sqlserverflexCustomEndpoint string: Custom endpoint for the SQL Server Flex service
tokenCustomEndpoint string: Custom endpoint for the token API, which is used to request access tokens when using the key flow
useOidc boolean: Enables OIDC for Authentication. This can also be sourced from the STACKIT_USE_OIDC Environment Variable. Defaults to false.

authorization_custom_endpoint str: Custom endpoint for the Membership service
cdn_custom_endpoint str: Custom endpoint for the CDN service
credentials_path str: Path of JSON from where the credentials are read. Takes precedence over the env var STACKIT_CREDENTIALS_PATH. Default value is ~/.stackit/credentials.json.
default_region str: Region will be used as the default location for regional services. Not all services require a region, some are global
dns_custom_endpoint str: Custom endpoint for the DNS service
edgecloud_custom_endpoint str: Custom endpoint for the Edge Cloud service
enable_beta_resources bool: Enable beta resources. Default is false.
experiments Sequence[str]: Enables experiments. These are unstable features without official support. More information can be found in the README. Available Experiments: iam, routing-tables, network
git_custom_endpoint str: Custom endpoint for the Git service
iaas_custom_endpoint str: Custom endpoint for the IaaS service
kms_custom_endpoint str: Custom endpoint for the KMS service
loadbalancer_custom_endpoint str: Custom endpoint for the Load Balancer service
logme_custom_endpoint str: Custom endpoint for the LogMe service
logs_custom_endpoint str: Custom endpoint for the Logs service
mariadb_custom_endpoint str: Custom endpoint for the MariaDB service
modelserving_custom_endpoint str: Custom endpoint for the AI Model Serving service
mongodbflex_custom_endpoint str: Custom endpoint for the MongoDB Flex service
objectstorage_custom_endpoint str: Custom endpoint for the Object Storage service
observability_custom_endpoint str: Custom endpoint for the Observability service
oidc_request_token str: The bearer token for the request to the OIDC provider. For use when authenticating as a Service Account using OpenID Connect.
oidc_request_url str: The URL for the OIDC provider from which to request an ID token. For use when authenticating as a Service Account using OpenID Connect.
opensearch_custom_endpoint str: Custom endpoint for the OpenSearch service
postgresflex_custom_endpoint str: Custom endpoint for the PostgresFlex service
private_key str: Private RSA key used for authentication, relevant for the key flow. It takes precedence over the private key that is included in the service account key.
private_key_path str: Path for the private RSA key used for authentication, relevant for the key flow. It takes precedence over the private key that is included in the service account key.
rabbitmq_custom_endpoint str: Custom endpoint for the RabbitMQ service
redis_custom_endpoint str: Custom endpoint for the Redis service
region str: Region will be used as the default location for regional services. Not all services require a region, some are global
Deprecated: This attribute is deprecated. Use 'default_region' instead
resourcemanager_custom_endpoint str: Custom endpoint for the Resource Manager service
scf_custom_endpoint str: Custom endpoint for the Cloud Foundry (SCF) service
secretsmanager_custom_endpoint str: Custom endpoint for the Secrets Manager service
server_backup_custom_endpoint str: Custom endpoint for the Server Backup service
server_update_custom_endpoint str: Custom endpoint for the Server Update service
service_account_custom_endpoint str: Custom endpoint for the Service Account service
service_account_email str: Service account email. It can also be set using the environment variable STACKIT_SERVICE_ACCOUNT_EMAIL. It is required if you want to use the resource manager project resource. This value is required using OpenID Connect authentication.
service_account_federated_token str: The OIDC ID token for use when authenticating as a Service Account using OpenID Connect.
service_account_federated_token_path str: Path for workload identity assertion. It can also be set using the environment variable STACKIT_FEDERATED_TOKEN_FILE.
service_account_key str: Service account key used for authentication. If set, the key flow will be used to authenticate all operations.
service_account_key_path str: Path for the service account key used for authentication. If set, the key flow will be used to authenticate all operations.
service_account_token str: Token used for authentication. If set, the token flow will be used to authenticate all operations.
Deprecated: Authentication via Service Account Token is deprecated and will be removed on December 17, 2025. Please use service_account_key or service_account_key_path instead. For a smooth transition, refer to our migration guide: https://docs.stackit.cloud/platform/access-and-identity/service-accounts/migrate-flows/
service_enablement_custom_endpoint str: Custom endpoint for the Service Enablement API
sfs_custom_endpoint str: Custom endpoint for the Stackit Filestorage API
ske_custom_endpoint str: Custom endpoint for the Kubernetes Engine (SKE) service
sqlserverflex_custom_endpoint str: Custom endpoint for the SQL Server Flex service
token_custom_endpoint str: Custom endpoint for the token API, which is used to request access tokens when using the key flow
use_oidc bool: Enables OIDC for Authentication. This can also be sourced from the STACKIT_USE_OIDC Environment Variable. Defaults to false.

authorizationCustomEndpoint String: Custom endpoint for the Membership service
cdnCustomEndpoint String: Custom endpoint for the CDN service
credentialsPath String: Path of JSON from where the credentials are read. Takes precedence over the env var STACKIT_CREDENTIALS_PATH. Default value is ~/.stackit/credentials.json.
defaultRegion String: Region will be used as the default location for regional services. Not all services require a region, some are global
dnsCustomEndpoint String: Custom endpoint for the DNS service
edgecloudCustomEndpoint String: Custom endpoint for the Edge Cloud service
enableBetaResources Boolean: Enable beta resources. Default is false.
experiments List<String>: Enables experiments. These are unstable features without official support. More information can be found in the README. Available Experiments: iam, routing-tables, network
gitCustomEndpoint String: Custom endpoint for the Git service
iaasCustomEndpoint String: Custom endpoint for the IaaS service
kmsCustomEndpoint String: Custom endpoint for the KMS service
loadbalancerCustomEndpoint String: Custom endpoint for the Load Balancer service
logmeCustomEndpoint String: Custom endpoint for the LogMe service
logsCustomEndpoint String: Custom endpoint for the Logs service
mariadbCustomEndpoint String: Custom endpoint for the MariaDB service
modelservingCustomEndpoint String: Custom endpoint for the AI Model Serving service
mongodbflexCustomEndpoint String: Custom endpoint for the MongoDB Flex service
objectstorageCustomEndpoint String: Custom endpoint for the Object Storage service
observabilityCustomEndpoint String: Custom endpoint for the Observability service
oidcRequestToken String: The bearer token for the request to the OIDC provider. For use when authenticating as a Service Account using OpenID Connect.
oidcRequestUrl String: The URL for the OIDC provider from which to request an ID token. For use when authenticating as a Service Account using OpenID Connect.
opensearchCustomEndpoint String: Custom endpoint for the OpenSearch service
postgresflexCustomEndpoint String: Custom endpoint for the PostgresFlex service
privateKey String: Private RSA key used for authentication, relevant for the key flow. It takes precedence over the private key that is included in the service account key.
privateKeyPath String: Path for the private RSA key used for authentication, relevant for the key flow. It takes precedence over the private key that is included in the service account key.
rabbitmqCustomEndpoint String: Custom endpoint for the RabbitMQ service
redisCustomEndpoint String: Custom endpoint for the Redis service
region String: Region will be used as the default location for regional services. Not all services require a region, some are global
Deprecated: This attribute is deprecated. Use 'default_region' instead
resourcemanagerCustomEndpoint String: Custom endpoint for the Resource Manager service
scfCustomEndpoint String: Custom endpoint for the Cloud Foundry (SCF) service
secretsmanagerCustomEndpoint String: Custom endpoint for the Secrets Manager service
serverBackupCustomEndpoint String: Custom endpoint for the Server Backup service
serverUpdateCustomEndpoint String: Custom endpoint for the Server Update service
serviceAccountCustomEndpoint String: Custom endpoint for the Service Account service
serviceAccountEmail String: Service account email. It can also be set using the environment variable STACKIT_SERVICE_ACCOUNT_EMAIL. It is required if you want to use the resource manager project resource. This value is required using OpenID Connect authentication.
serviceAccountFederatedToken String: The OIDC ID token for use when authenticating as a Service Account using OpenID Connect.
serviceAccountFederatedTokenPath String: Path for workload identity assertion. It can also be set using the environment variable STACKIT_FEDERATED_TOKEN_FILE.
serviceAccountKey String: Service account key used for authentication. If set, the key flow will be used to authenticate all operations.
serviceAccountKeyPath String: Path for the service account key used for authentication. If set, the key flow will be used to authenticate all operations.
serviceAccountToken String: Token used for authentication. If set, the token flow will be used to authenticate all operations.
Deprecated: Authentication via Service Account Token is deprecated and will be removed on December 17, 2025. Please use service_account_key or service_account_key_path instead. For a smooth transition, refer to our migration guide: https://docs.stackit.cloud/platform/access-and-identity/service-accounts/migrate-flows/
serviceEnablementCustomEndpoint String: Custom endpoint for the Service Enablement API
sfsCustomEndpoint String: Custom endpoint for the Stackit Filestorage API
skeCustomEndpoint String: Custom endpoint for the Kubernetes Engine (SKE) service
sqlserverflexCustomEndpoint String: Custom endpoint for the SQL Server Flex service
tokenCustomEndpoint String: Custom endpoint for the token API, which is used to request access tokens when using the key flow
useOidc Boolean: Enables OIDC for Authentication. This can also be sourced from the STACKIT_USE_OIDC Environment Variable. Defaults to false.

Outputs

All input properties are implicitly available as output properties. Additionally, the Provider resource produces the following output properties:

Id string: The provider-assigned unique ID for this managed resource.

Id string: The provider-assigned unique ID for this managed resource.

id String: The provider-assigned unique ID for this managed resource.

id string: The provider-assigned unique ID for this managed resource.

id str: The provider-assigned unique ID for this managed resource.

id String: The provider-assigned unique ID for this managed resource.

Provider Resource Methods

TerraformConfig Method

This function returns a Terraform config object with terraform-namecased keys,to be used with the Terraform Module Provider.

Using TerraformConfig

terraformConfig(): Output<Provider.TerraformConfigResult>

def terraform_config() -> Output[Provider.Terraform_configResult]

func (r *Provider) TerraformConfig() (ProviderTerraformConfigResultOutput, error)

public Output<Provider.TerraformConfigResult> TerraformConfig()

TerraformConfig Result

Result Dictionary<string, object>

Result map[string]interface{}

result Map<String,Object>

result {[key: string]: any}

result Mapping[str, Any]

result Map<Any>

Package Details

Repository: stackit stackitcloud/pulumi-stackit
License: Apache-2.0
Notes: This Pulumi package is based on the stackit Terraform Provider.

Viewing docs for stackit v0.0.4
published on Friday, Feb 20, 2026 by stackitcloud

Schema (JSON)

stackitcloud/pulumi-stackit

stackit.Provider

On this page

On this page

Create Provider Resource

Constructor syntax

Parameters

Provider Resource Properties

Inputs

Outputs

Provider Resource Methods

TerraformConfig Method

Using TerraformConfig

TerraformConfig Result

Package Details

On this page

On this page