@huaweicloudos/pulumi
Version:
A Pulumi package for creating and managing Huaweicloud cloud resources.
178 lines • 6.96 kB
JavaScript
;
// *** WARNING: this file was generated by the Pulumi Terraform Bridge (tfgen) Tool. ***
// *** Do not edit by hand unless you're certain you know what you are doing! ***
Object.defineProperty(exports, "__esModule", { value: true });
exports.GroupRoleAssignment = void 0;
const pulumi = require("@pulumi/pulumi");
const utilities = require("../utilities");
/**
* Manages an IAM user group role assignment within HuaweiCloud IAM Service.
* This is an alternative to `huaweicloud.Iam.RoleAssignment`
*
* > **NOTE:** 1. You *must* have admin privileges to use this resource.
* <br/>2. When the resource is created, the permissions will take effect after 15 to 30 minutes.
*
* ## Example Usage
* ### Assign role with project
*
* ```typescript
* import * as pulumi from "@pulumi/pulumi";
* import * as huaweicloud from "@pulumi/huaweicloud";
* import * as pulumi from "@huaweicloudos/pulumi";
*
* const config = new pulumi.Config();
* const projectId = config.requireObject("projectId");
* const testRole = huaweicloud.Iam.getRole({
* name: "rds_adm",
* });
* const testGroup = new huaweicloud.iam.Group("testGroup", {});
* const testGroupRoleAssignment = new huaweicloud.iam.GroupRoleAssignment("testGroupRoleAssignment", {
* groupId: testGroup.id,
* roleId: testRole.then(testRole => testRole.id),
* projectId: projectId,
* });
* ```
* ### Assign role with all projects
*
* ```typescript
* import * as pulumi from "@pulumi/pulumi";
* import * as huaweicloud from "@pulumi/huaweicloud";
* import * as pulumi from "@huaweicloudos/pulumi";
*
* const config = new pulumi.Config();
* const projectId = config.requireObject("projectId");
* const testRole = huaweicloud.Iam.getRole({
* name: "rds_adm",
* });
* const testGroup = new huaweicloud.iam.Group("testGroup", {});
* const all = new huaweicloud.iam.GroupRoleAssignment("all", {
* groupId: testGroup.id,
* roleId: testRole.then(testRole => testRole.id),
* projectId: "all",
* });
* ```
* ### Assign role with domain
*
* ```typescript
* import * as pulumi from "@pulumi/pulumi";
* import * as huaweicloud from "@pulumi/huaweicloud";
* import * as pulumi from "@huaweicloudos/pulumi";
*
* const config = new pulumi.Config();
* const domainId = config.requireObject("domainId");
* const testRole = huaweicloud.Iam.getRole({
* name: "obs_adm",
* });
* const testGroup = new huaweicloud.iam.Group("testGroup", {});
* const testGroupRoleAssignment = new huaweicloud.iam.GroupRoleAssignment("testGroupRoleAssignment", {
* groupId: testGroup.id,
* roleId: testRole.then(testRole => testRole.id),
* domainId: domainId,
* });
* ```
* ### Assign role with enterprise project
*
* ```typescript
* import * as pulumi from "@pulumi/pulumi";
* import * as huaweicloud from "@pulumi/huaweicloud";
* import * as pulumi from "@huaweicloudos/pulumi";
*
* const config = new pulumi.Config();
* const enterpriseProjectId = config.requireObject("enterpriseProjectId");
* const testRole = huaweicloud.Iam.getRole({
* name: "rds_adm",
* });
* const testGroup = new huaweicloud.iam.Group("testGroup", {});
* const testGroupRoleAssignment = new huaweicloud.iam.GroupRoleAssignment("testGroupRoleAssignment", {
* groupId: testGroup.id,
* roleId: testRole.then(testRole => testRole.id),
* enterpriseProjectId: enterpriseProjectId,
* });
* ```
*
* ## Import
*
* The role assignments can be imported using the `group_id`, `role_id` and
*
* `domain_id`, `project_id`,
*
* `enterprise_project_id`, e.g. bash
*
* ```sh
* $ pulumi import huaweicloud:Iam/groupRoleAssignment:GroupRoleAssignment test <group_id>/<role_id>/<domain_id>
* ```
*
* or bash
*
* ```sh
* $ pulumi import huaweicloud:Iam/groupRoleAssignment:GroupRoleAssignment test <group_id>/<role_id>/<project_id>
* ```
*
* or bash
*
* ```sh
* $ pulumi import huaweicloud:Iam/groupRoleAssignment:GroupRoleAssignment test <group_id>/<role_id>/all
* ```
*
* or bash
*
* ```sh
* $ pulumi import huaweicloud:Iam/groupRoleAssignment:GroupRoleAssignment test <group_id>/<role_id>/<enterprise_project_id>
* ```
*/
class GroupRoleAssignment extends pulumi.CustomResource {
/**
* Get an existing GroupRoleAssignment resource's state with the given name, ID, and optional extra
* properties used to qualify the lookup.
*
* @param name The _unique_ name of the resulting resource.
* @param id The _unique_ provider ID of the resource to lookup.
* @param state Any extra arguments used during the lookup.
* @param opts Optional settings to control the behavior of the CustomResource.
*/
static get(name, id, state, opts) {
return new GroupRoleAssignment(name, state, Object.assign(Object.assign({}, opts), { id: id }));
}
/**
* Returns true if the given object is an instance of GroupRoleAssignment. This is designed to work even
* when multiple copies of the Pulumi SDK have been loaded into the same process.
*/
static isInstance(obj) {
if (obj === undefined || obj === null) {
return false;
}
return obj['__pulumiType'] === GroupRoleAssignment.__pulumiType;
}
constructor(name, argsOrState, opts) {
let resourceInputs = {};
opts = opts || {};
if (opts.id) {
const state = argsOrState;
resourceInputs["domainId"] = state ? state.domainId : undefined;
resourceInputs["enterpriseProjectId"] = state ? state.enterpriseProjectId : undefined;
resourceInputs["groupId"] = state ? state.groupId : undefined;
resourceInputs["projectId"] = state ? state.projectId : undefined;
resourceInputs["roleId"] = state ? state.roleId : undefined;
}
else {
const args = argsOrState;
if ((!args || args.groupId === undefined) && !opts.urn) {
throw new Error("Missing required property 'groupId'");
}
if ((!args || args.roleId === undefined) && !opts.urn) {
throw new Error("Missing required property 'roleId'");
}
resourceInputs["domainId"] = args ? args.domainId : undefined;
resourceInputs["enterpriseProjectId"] = args ? args.enterpriseProjectId : undefined;
resourceInputs["groupId"] = args ? args.groupId : undefined;
resourceInputs["projectId"] = args ? args.projectId : undefined;
resourceInputs["roleId"] = args ? args.roleId : undefined;
}
opts = pulumi.mergeOptions(utilities.resourceOptsDefaults(), opts);
super(GroupRoleAssignment.__pulumiType, name, resourceInputs, opts);
}
}
exports.GroupRoleAssignment = GroupRoleAssignment;
/** @internal */
GroupRoleAssignment.__pulumiType = 'huaweicloud:Iam/groupRoleAssignment:GroupRoleAssignment';
//# sourceMappingURL=groupRoleAssignment.js.map