@osmit-gmbh/pulumi-authentik
Version:
A Pulumi package for creating and managing authentik cloud resources.
269 lines (268 loc) • 22.9 kB
TypeScript
import * as pulumi from "@pulumi/pulumi";
/**
* ## Example Usage
*
* ```typescript
* import * as pulumi from "@pulumi/pulumi";
* import * as authentik from "@osmit-gmbh/pulumi-authentik";
*
* // Create policy to match events
* const name = new authentik.PolicyEventMatcher("name", {
* name: "login-from-1.2.3.4",
* action: "login",
* app: "authentik.events",
* clientIp: "1.2.3.4",
* });
* ```
*/
export declare class PolicyEventMatcher extends pulumi.CustomResource {
/**
* Get an existing PolicyEventMatcher resource's state with the given name, ID, and optional extra
* properties used to qualify the lookup.
*
* @param name The _unique_ name of the resulting resource.
* @param id The _unique_ provider ID of the resource to lookup.
* @param state Any extra arguments used during the lookup.
* @param opts Optional settings to control the behavior of the CustomResource.
*/
static get(name: string, id: pulumi.Input<pulumi.ID>, state?: PolicyEventMatcherState, opts?: pulumi.CustomResourceOptions): PolicyEventMatcher;
/**
* Returns true if the given object is an instance of PolicyEventMatcher. This is designed to work even
* when multiple copies of the Pulumi SDK have been loaded into the same process.
*/
static isInstance(obj: any): obj is PolicyEventMatcher;
readonly action: pulumi.Output<string | undefined>;
/**
* Allowed values: - `authentik.tenants` - `authentik.admin` - `authentik.api` - `authentik.crypto` - `authentik.flows` -
* `authentik.outposts` - `authentik.policies.dummy` - `authentik.policies.event_matcher` - `authentik.policies.expiry` -
* `authentik.policies.expression` - `authentik.policies.geoip` - `authentik.policies.password` -
* `authentik.policies.reputation` - `authentik.policies` - `authentik.providers.ldap` - `authentik.providers.oauth2` -
* `authentik.providers.proxy` - `authentik.providers.radius` - `authentik.providers.saml` - `authentik.providers.scim` -
* `authentik.rbac` - `authentik.recovery` - `authentik.sources.kerberos` - `authentik.sources.ldap` -
* `authentik.sources.oauth` - `authentik.sources.plex` - `authentik.sources.saml` - `authentik.sources.scim` -
* `authentik.stages.authenticator` - `authentik.stages.authenticator_duo` - `authentik.stages.authenticator_sms` -
* `authentik.stages.authenticator_static` - `authentik.stages.authenticator_totp` -
* `authentik.stages.authenticator_validate` - `authentik.stages.authenticator_webauthn` - `authentik.stages.captcha` -
* `authentik.stages.consent` - `authentik.stages.deny` - `authentik.stages.dummy` - `authentik.stages.email` -
* `authentik.stages.identification` - `authentik.stages.invitation` - `authentik.stages.password` -
* `authentik.stages.prompt` - `authentik.stages.user_delete` - `authentik.stages.user_login` -
* `authentik.stages.user_logout` - `authentik.stages.user_write` - `authentik.brands` - `authentik.blueprints` -
* `authentik.core` - `authentik.enterprise` - `authentik.enterprise.audit` -
* `authentik.enterprise.providers.google_workspace` - `authentik.enterprise.providers.microsoft_entra` -
* `authentik.enterprise.providers.rac` - `authentik.enterprise.stages.authenticator_endpoint_gdtc` -
* `authentik.enterprise.stages.source` - `authentik.events`
*/
readonly app: pulumi.Output<string | undefined>;
readonly clientIp: pulumi.Output<string | undefined>;
readonly executionLogging: pulumi.Output<boolean | undefined>;
/**
* Allowed values: - `authentik_tenants.domain` - `authentik_crypto.certificatekeypair` - `authentik_flows.flow` -
* `authentik_flows.flowstagebinding` - `authentik_outposts.dockerserviceconnection` -
* `authentik_outposts.kubernetesserviceconnection` - `authentik_outposts.outpost` - `authentik_policies_dummy.dummypolicy`
* - `authentik_policies_event_matcher.eventmatcherpolicy` - `authentik_policies_expiry.passwordexpirypolicy` -
* `authentik_policies_expression.expressionpolicy` - `authentik_policies_geoip.geoippolicy` -
* `authentik_policies_password.passwordpolicy` - `authentik_policies_reputation.reputationpolicy` -
* `authentik_policies.policybinding` - `authentik_providers_ldap.ldapprovider` - `authentik_providers_oauth2.scopemapping`
* - `authentik_providers_oauth2.oauth2provider` - `authentik_providers_proxy.proxyprovider` -
* `authentik_providers_radius.radiusprovider` - `authentik_providers_radius.radiusproviderpropertymapping` -
* `authentik_providers_saml.samlprovider` - `authentik_providers_saml.samlpropertymapping` -
* `authentik_providers_scim.scimprovider` - `authentik_providers_scim.scimmapping` - `authentik_rbac.role` -
* `authentik_sources_kerberos.kerberossource` - `authentik_sources_kerberos.kerberossourcepropertymapping` -
* `authentik_sources_kerberos.userkerberossourceconnection` - `authentik_sources_kerberos.groupkerberossourceconnection` -
* `authentik_sources_ldap.ldapsource` - `authentik_sources_ldap.ldapsourcepropertymapping` -
* `authentik_sources_oauth.oauthsource` - `authentik_sources_oauth.oauthsourcepropertymapping` -
* `authentik_sources_oauth.useroauthsourceconnection` - `authentik_sources_oauth.groupoauthsourceconnection` -
* `authentik_sources_plex.plexsource` - `authentik_sources_plex.plexsourcepropertymapping` -
* `authentik_sources_plex.userplexsourceconnection` - `authentik_sources_plex.groupplexsourceconnection` -
* `authentik_sources_saml.samlsource` - `authentik_sources_saml.samlsourcepropertymapping` -
* `authentik_sources_saml.usersamlsourceconnection` - `authentik_sources_saml.groupsamlsourceconnection` -
* `authentik_sources_scim.scimsource` - `authentik_sources_scim.scimsourcepropertymapping` -
* `authentik_stages_authenticator_duo.authenticatorduostage` - `authentik_stages_authenticator_duo.duodevice` -
* `authentik_stages_authenticator_sms.authenticatorsmsstage` - `authentik_stages_authenticator_sms.smsdevice` -
* `authentik_stages_authenticator_static.authenticatorstaticstage` - `authentik_stages_authenticator_static.staticdevice`
* - `authentik_stages_authenticator_totp.authenticatortotpstage` - `authentik_stages_authenticator_totp.totpdevice` -
* `authentik_stages_authenticator_validate.authenticatorvalidatestage` -
* `authentik_stages_authenticator_webauthn.authenticatorwebauthnstage` -
* `authentik_stages_authenticator_webauthn.webauthndevice` - `authentik_stages_captcha.captchastage` -
* `authentik_stages_consent.consentstage` - `authentik_stages_consent.userconsent` - `authentik_stages_deny.denystage` -
* `authentik_stages_dummy.dummystage` - `authentik_stages_email.emailstage` -
* `authentik_stages_identification.identificationstage` - `authentik_stages_invitation.invitationstage` -
* `authentik_stages_invitation.invitation` - `authentik_stages_password.passwordstage` - `authentik_stages_prompt.prompt`
* - `authentik_stages_prompt.promptstage` - `authentik_stages_user_delete.userdeletestage` -
* `authentik_stages_user_login.userloginstage` - `authentik_stages_user_logout.userlogoutstage` -
* `authentik_stages_user_write.userwritestage` - `authentik_brands.brand` - `authentik_blueprints.blueprintinstance` -
* `authentik_core.group` - `authentik_core.user` - `authentik_core.application` - `authentik_core.token` -
* `authentik_enterprise.license` - `authentik_providers_google_workspace.googleworkspaceprovider` -
* `authentik_providers_google_workspace.googleworkspaceprovidermapping` -
* `authentik_providers_microsoft_entra.microsoftentraprovider` -
* `authentik_providers_microsoft_entra.microsoftentraprovidermapping` - `authentik_providers_rac.racprovider` -
* `authentik_providers_rac.endpoint` - `authentik_providers_rac.racpropertymapping` -
* `authentik_stages_authenticator_endpoint_gdtc.authenticatorendpointgdtcstage` - `authentik_stages_source.sourcestage` -
* `authentik_events.event` - `authentik_events.notificationtransport` - `authentik_events.notification` -
* `authentik_events.notificationrule` - `authentik_events.notificationwebhookmapping`
*/
readonly model: pulumi.Output<string | undefined>;
readonly name: pulumi.Output<string>;
/**
* Create a PolicyEventMatcher resource with the given unique name, arguments, and options.
*
* @param name The _unique_ name of the resource.
* @param args The arguments to use to populate this resource's properties.
* @param opts A bag of options that control this resource's behavior.
*/
constructor(name: string, args?: PolicyEventMatcherArgs, opts?: pulumi.CustomResourceOptions);
}
/**
* Input properties used for looking up and filtering PolicyEventMatcher resources.
*/
export interface PolicyEventMatcherState {
action?: pulumi.Input<string>;
/**
* Allowed values: - `authentik.tenants` - `authentik.admin` - `authentik.api` - `authentik.crypto` - `authentik.flows` -
* `authentik.outposts` - `authentik.policies.dummy` - `authentik.policies.event_matcher` - `authentik.policies.expiry` -
* `authentik.policies.expression` - `authentik.policies.geoip` - `authentik.policies.password` -
* `authentik.policies.reputation` - `authentik.policies` - `authentik.providers.ldap` - `authentik.providers.oauth2` -
* `authentik.providers.proxy` - `authentik.providers.radius` - `authentik.providers.saml` - `authentik.providers.scim` -
* `authentik.rbac` - `authentik.recovery` - `authentik.sources.kerberos` - `authentik.sources.ldap` -
* `authentik.sources.oauth` - `authentik.sources.plex` - `authentik.sources.saml` - `authentik.sources.scim` -
* `authentik.stages.authenticator` - `authentik.stages.authenticator_duo` - `authentik.stages.authenticator_sms` -
* `authentik.stages.authenticator_static` - `authentik.stages.authenticator_totp` -
* `authentik.stages.authenticator_validate` - `authentik.stages.authenticator_webauthn` - `authentik.stages.captcha` -
* `authentik.stages.consent` - `authentik.stages.deny` - `authentik.stages.dummy` - `authentik.stages.email` -
* `authentik.stages.identification` - `authentik.stages.invitation` - `authentik.stages.password` -
* `authentik.stages.prompt` - `authentik.stages.user_delete` - `authentik.stages.user_login` -
* `authentik.stages.user_logout` - `authentik.stages.user_write` - `authentik.brands` - `authentik.blueprints` -
* `authentik.core` - `authentik.enterprise` - `authentik.enterprise.audit` -
* `authentik.enterprise.providers.google_workspace` - `authentik.enterprise.providers.microsoft_entra` -
* `authentik.enterprise.providers.rac` - `authentik.enterprise.stages.authenticator_endpoint_gdtc` -
* `authentik.enterprise.stages.source` - `authentik.events`
*/
app?: pulumi.Input<string>;
clientIp?: pulumi.Input<string>;
executionLogging?: pulumi.Input<boolean>;
/**
* Allowed values: - `authentik_tenants.domain` - `authentik_crypto.certificatekeypair` - `authentik_flows.flow` -
* `authentik_flows.flowstagebinding` - `authentik_outposts.dockerserviceconnection` -
* `authentik_outposts.kubernetesserviceconnection` - `authentik_outposts.outpost` - `authentik_policies_dummy.dummypolicy`
* - `authentik_policies_event_matcher.eventmatcherpolicy` - `authentik_policies_expiry.passwordexpirypolicy` -
* `authentik_policies_expression.expressionpolicy` - `authentik_policies_geoip.geoippolicy` -
* `authentik_policies_password.passwordpolicy` - `authentik_policies_reputation.reputationpolicy` -
* `authentik_policies.policybinding` - `authentik_providers_ldap.ldapprovider` - `authentik_providers_oauth2.scopemapping`
* - `authentik_providers_oauth2.oauth2provider` - `authentik_providers_proxy.proxyprovider` -
* `authentik_providers_radius.radiusprovider` - `authentik_providers_radius.radiusproviderpropertymapping` -
* `authentik_providers_saml.samlprovider` - `authentik_providers_saml.samlpropertymapping` -
* `authentik_providers_scim.scimprovider` - `authentik_providers_scim.scimmapping` - `authentik_rbac.role` -
* `authentik_sources_kerberos.kerberossource` - `authentik_sources_kerberos.kerberossourcepropertymapping` -
* `authentik_sources_kerberos.userkerberossourceconnection` - `authentik_sources_kerberos.groupkerberossourceconnection` -
* `authentik_sources_ldap.ldapsource` - `authentik_sources_ldap.ldapsourcepropertymapping` -
* `authentik_sources_oauth.oauthsource` - `authentik_sources_oauth.oauthsourcepropertymapping` -
* `authentik_sources_oauth.useroauthsourceconnection` - `authentik_sources_oauth.groupoauthsourceconnection` -
* `authentik_sources_plex.plexsource` - `authentik_sources_plex.plexsourcepropertymapping` -
* `authentik_sources_plex.userplexsourceconnection` - `authentik_sources_plex.groupplexsourceconnection` -
* `authentik_sources_saml.samlsource` - `authentik_sources_saml.samlsourcepropertymapping` -
* `authentik_sources_saml.usersamlsourceconnection` - `authentik_sources_saml.groupsamlsourceconnection` -
* `authentik_sources_scim.scimsource` - `authentik_sources_scim.scimsourcepropertymapping` -
* `authentik_stages_authenticator_duo.authenticatorduostage` - `authentik_stages_authenticator_duo.duodevice` -
* `authentik_stages_authenticator_sms.authenticatorsmsstage` - `authentik_stages_authenticator_sms.smsdevice` -
* `authentik_stages_authenticator_static.authenticatorstaticstage` - `authentik_stages_authenticator_static.staticdevice`
* - `authentik_stages_authenticator_totp.authenticatortotpstage` - `authentik_stages_authenticator_totp.totpdevice` -
* `authentik_stages_authenticator_validate.authenticatorvalidatestage` -
* `authentik_stages_authenticator_webauthn.authenticatorwebauthnstage` -
* `authentik_stages_authenticator_webauthn.webauthndevice` - `authentik_stages_captcha.captchastage` -
* `authentik_stages_consent.consentstage` - `authentik_stages_consent.userconsent` - `authentik_stages_deny.denystage` -
* `authentik_stages_dummy.dummystage` - `authentik_stages_email.emailstage` -
* `authentik_stages_identification.identificationstage` - `authentik_stages_invitation.invitationstage` -
* `authentik_stages_invitation.invitation` - `authentik_stages_password.passwordstage` - `authentik_stages_prompt.prompt`
* - `authentik_stages_prompt.promptstage` - `authentik_stages_user_delete.userdeletestage` -
* `authentik_stages_user_login.userloginstage` - `authentik_stages_user_logout.userlogoutstage` -
* `authentik_stages_user_write.userwritestage` - `authentik_brands.brand` - `authentik_blueprints.blueprintinstance` -
* `authentik_core.group` - `authentik_core.user` - `authentik_core.application` - `authentik_core.token` -
* `authentik_enterprise.license` - `authentik_providers_google_workspace.googleworkspaceprovider` -
* `authentik_providers_google_workspace.googleworkspaceprovidermapping` -
* `authentik_providers_microsoft_entra.microsoftentraprovider` -
* `authentik_providers_microsoft_entra.microsoftentraprovidermapping` - `authentik_providers_rac.racprovider` -
* `authentik_providers_rac.endpoint` - `authentik_providers_rac.racpropertymapping` -
* `authentik_stages_authenticator_endpoint_gdtc.authenticatorendpointgdtcstage` - `authentik_stages_source.sourcestage` -
* `authentik_events.event` - `authentik_events.notificationtransport` - `authentik_events.notification` -
* `authentik_events.notificationrule` - `authentik_events.notificationwebhookmapping`
*/
model?: pulumi.Input<string>;
name?: pulumi.Input<string>;
}
/**
* The set of arguments for constructing a PolicyEventMatcher resource.
*/
export interface PolicyEventMatcherArgs {
action?: pulumi.Input<string>;
/**
* Allowed values: - `authentik.tenants` - `authentik.admin` - `authentik.api` - `authentik.crypto` - `authentik.flows` -
* `authentik.outposts` - `authentik.policies.dummy` - `authentik.policies.event_matcher` - `authentik.policies.expiry` -
* `authentik.policies.expression` - `authentik.policies.geoip` - `authentik.policies.password` -
* `authentik.policies.reputation` - `authentik.policies` - `authentik.providers.ldap` - `authentik.providers.oauth2` -
* `authentik.providers.proxy` - `authentik.providers.radius` - `authentik.providers.saml` - `authentik.providers.scim` -
* `authentik.rbac` - `authentik.recovery` - `authentik.sources.kerberos` - `authentik.sources.ldap` -
* `authentik.sources.oauth` - `authentik.sources.plex` - `authentik.sources.saml` - `authentik.sources.scim` -
* `authentik.stages.authenticator` - `authentik.stages.authenticator_duo` - `authentik.stages.authenticator_sms` -
* `authentik.stages.authenticator_static` - `authentik.stages.authenticator_totp` -
* `authentik.stages.authenticator_validate` - `authentik.stages.authenticator_webauthn` - `authentik.stages.captcha` -
* `authentik.stages.consent` - `authentik.stages.deny` - `authentik.stages.dummy` - `authentik.stages.email` -
* `authentik.stages.identification` - `authentik.stages.invitation` - `authentik.stages.password` -
* `authentik.stages.prompt` - `authentik.stages.user_delete` - `authentik.stages.user_login` -
* `authentik.stages.user_logout` - `authentik.stages.user_write` - `authentik.brands` - `authentik.blueprints` -
* `authentik.core` - `authentik.enterprise` - `authentik.enterprise.audit` -
* `authentik.enterprise.providers.google_workspace` - `authentik.enterprise.providers.microsoft_entra` -
* `authentik.enterprise.providers.rac` - `authentik.enterprise.stages.authenticator_endpoint_gdtc` -
* `authentik.enterprise.stages.source` - `authentik.events`
*/
app?: pulumi.Input<string>;
clientIp?: pulumi.Input<string>;
executionLogging?: pulumi.Input<boolean>;
/**
* Allowed values: - `authentik_tenants.domain` - `authentik_crypto.certificatekeypair` - `authentik_flows.flow` -
* `authentik_flows.flowstagebinding` - `authentik_outposts.dockerserviceconnection` -
* `authentik_outposts.kubernetesserviceconnection` - `authentik_outposts.outpost` - `authentik_policies_dummy.dummypolicy`
* - `authentik_policies_event_matcher.eventmatcherpolicy` - `authentik_policies_expiry.passwordexpirypolicy` -
* `authentik_policies_expression.expressionpolicy` - `authentik_policies_geoip.geoippolicy` -
* `authentik_policies_password.passwordpolicy` - `authentik_policies_reputation.reputationpolicy` -
* `authentik_policies.policybinding` - `authentik_providers_ldap.ldapprovider` - `authentik_providers_oauth2.scopemapping`
* - `authentik_providers_oauth2.oauth2provider` - `authentik_providers_proxy.proxyprovider` -
* `authentik_providers_radius.radiusprovider` - `authentik_providers_radius.radiusproviderpropertymapping` -
* `authentik_providers_saml.samlprovider` - `authentik_providers_saml.samlpropertymapping` -
* `authentik_providers_scim.scimprovider` - `authentik_providers_scim.scimmapping` - `authentik_rbac.role` -
* `authentik_sources_kerberos.kerberossource` - `authentik_sources_kerberos.kerberossourcepropertymapping` -
* `authentik_sources_kerberos.userkerberossourceconnection` - `authentik_sources_kerberos.groupkerberossourceconnection` -
* `authentik_sources_ldap.ldapsource` - `authentik_sources_ldap.ldapsourcepropertymapping` -
* `authentik_sources_oauth.oauthsource` - `authentik_sources_oauth.oauthsourcepropertymapping` -
* `authentik_sources_oauth.useroauthsourceconnection` - `authentik_sources_oauth.groupoauthsourceconnection` -
* `authentik_sources_plex.plexsource` - `authentik_sources_plex.plexsourcepropertymapping` -
* `authentik_sources_plex.userplexsourceconnection` - `authentik_sources_plex.groupplexsourceconnection` -
* `authentik_sources_saml.samlsource` - `authentik_sources_saml.samlsourcepropertymapping` -
* `authentik_sources_saml.usersamlsourceconnection` - `authentik_sources_saml.groupsamlsourceconnection` -
* `authentik_sources_scim.scimsource` - `authentik_sources_scim.scimsourcepropertymapping` -
* `authentik_stages_authenticator_duo.authenticatorduostage` - `authentik_stages_authenticator_duo.duodevice` -
* `authentik_stages_authenticator_sms.authenticatorsmsstage` - `authentik_stages_authenticator_sms.smsdevice` -
* `authentik_stages_authenticator_static.authenticatorstaticstage` - `authentik_stages_authenticator_static.staticdevice`
* - `authentik_stages_authenticator_totp.authenticatortotpstage` - `authentik_stages_authenticator_totp.totpdevice` -
* `authentik_stages_authenticator_validate.authenticatorvalidatestage` -
* `authentik_stages_authenticator_webauthn.authenticatorwebauthnstage` -
* `authentik_stages_authenticator_webauthn.webauthndevice` - `authentik_stages_captcha.captchastage` -
* `authentik_stages_consent.consentstage` - `authentik_stages_consent.userconsent` - `authentik_stages_deny.denystage` -
* `authentik_stages_dummy.dummystage` - `authentik_stages_email.emailstage` -
* `authentik_stages_identification.identificationstage` - `authentik_stages_invitation.invitationstage` -
* `authentik_stages_invitation.invitation` - `authentik_stages_password.passwordstage` - `authentik_stages_prompt.prompt`
* - `authentik_stages_prompt.promptstage` - `authentik_stages_user_delete.userdeletestage` -
* `authentik_stages_user_login.userloginstage` - `authentik_stages_user_logout.userlogoutstage` -
* `authentik_stages_user_write.userwritestage` - `authentik_brands.brand` - `authentik_blueprints.blueprintinstance` -
* `authentik_core.group` - `authentik_core.user` - `authentik_core.application` - `authentik_core.token` -
* `authentik_enterprise.license` - `authentik_providers_google_workspace.googleworkspaceprovider` -
* `authentik_providers_google_workspace.googleworkspaceprovidermapping` -
* `authentik_providers_microsoft_entra.microsoftentraprovider` -
* `authentik_providers_microsoft_entra.microsoftentraprovidermapping` - `authentik_providers_rac.racprovider` -
* `authentik_providers_rac.endpoint` - `authentik_providers_rac.racpropertymapping` -
* `authentik_stages_authenticator_endpoint_gdtc.authenticatorendpointgdtcstage` - `authentik_stages_source.sourcestage` -
* `authentik_events.event` - `authentik_events.notificationtransport` - `authentik_events.notification` -
* `authentik_events.notificationrule` - `authentik_events.notificationwebhookmapping`
*/
model?: pulumi.Input<string>;
name?: pulumi.Input<string>;
}