@pulumi/consul/namespacePolicyAttachment.d.ts

A Pulumi package for creating and managing consul resources.

import * as pulumi from "@pulumi/pulumi";
/**
 * > **NOTE:** This feature requires Consul Enterprise.
 *
 * The `consul.NamespacePolicyAttachment` resource links a Consul Namespace and an ACL
 * policy. The link is implemented through an update to the Consul Namespace.
 *
 * > **NOTE:** This resource is only useful to attach policies to a namespace
 * that has been created outside the current Terraform configuration, like the
 * `default` namespace. If the namespace you need to attach a policy to has
 * been created in the current Terraform configuration and will only be used in it,
 * you should use the `policyDefaults` attribute of [`consul.Namespace`](https://www.terraform.io/docs/providers/consul/r/namespace.html).
 *
 * ## Example Usage
 *
 * ### Attach a policy to the default namespace
 *
 * ```typescript
 * import * as pulumi from "@pulumi/pulumi";
 * import * as consul from "@pulumi/consul";
 *
 * const agent = new consul.AclPolicy("agent", {
 *     name: "agent",
 *     rules: `node_prefix \\"\\" {
 *   policy = \\"read\\"
 * }
 * `,
 * });
 * const attachment = new consul.NamespacePolicyAttachment("attachment", {
 *     namespace: "default",
 *     policy: agent.name,
 * });
 * ```
 *
 * ### Attach a policy to a namespace created in another Terraform configuration
 *
 * ### In `first_configuration/main.tf`
 *
 * ```typescript
 * import * as pulumi from "@pulumi/pulumi";
 * import * as consul from "@pulumi/consul";
 *
 * const qa = new consul.Namespace("qa", {name: "qa"});
 * ```
 *
 * ### In `second_configuration/main.tf`
 *
 * ```typescript
 * import * as pulumi from "@pulumi/pulumi";
 * import * as consul from "@pulumi/consul";
 *
 * const agent = new consul.AclPolicy("agent", {
 *     name: "agent",
 *     rules: `node_prefix \\"\\" {
 *   policy = \\"read\\"
 * }
 * `,
 * });
 * const attachment = new consul.NamespacePolicyAttachment("attachment", {
 *     namespace: "qa",
 *     policy: agent.name,
 * });
 * ```
 * **NOTE**: consulAclNamespace would attempt to enforce an empty set of default
 * policies, because its `policyDefaults` attribute is empty. For this reason it
 * is necessary to add the lifecycle clause to prevent Terraform from attempting to
 * empty the set of policies associated to the namespace.
 *
 * ## Import
 *
 * `consul.NamespacePolicyAttachment` can be imported. This is especially useful
 * to manage the policies attached to the `default` namespace:
 *
 * ```sh
 * $ pulumi import consul:index/namespacePolicyAttachment:NamespacePolicyAttachment default default:policy_name
 * ```
 */
export declare class NamespacePolicyAttachment extends pulumi.CustomResource {
    /**
     * Get an existing NamespacePolicyAttachment resource's state with the given name, ID, and optional extra
     * properties used to qualify the lookup.
     *
     * @param name The _unique_ name of the resulting resource.
     * @param id The _unique_ provider ID of the resource to lookup.
     * @param state Any extra arguments used during the lookup.
     * @param opts Optional settings to control the behavior of the CustomResource.
     */
    static get(name: string, id: pulumi.Input<pulumi.ID>, state?: NamespacePolicyAttachmentState, opts?: pulumi.CustomResourceOptions): NamespacePolicyAttachment;
    /**
     * Returns true if the given object is an instance of NamespacePolicyAttachment.  This is designed to work even
     * when multiple copies of the Pulumi SDK have been loaded into the same process.
     */
    static isInstance(obj: any): obj is NamespacePolicyAttachment;
    /**
     * The namespace to attach the policy to.
     */
    readonly namespace: pulumi.Output<string>;
    /**
     * The name of the policy attached to the namespace.
     */
    readonly policy: pulumi.Output<string>;
    /**
     * Create a NamespacePolicyAttachment resource with the given unique name, arguments, and options.
     *
     * @param name The _unique_ name of the resource.
     * @param args The arguments to use to populate this resource's properties.
     * @param opts A bag of options that control this resource's behavior.
     */
    constructor(name: string, args: NamespacePolicyAttachmentArgs, opts?: pulumi.CustomResourceOptions);
}
/**
 * Input properties used for looking up and filtering NamespacePolicyAttachment resources.
 */
export interface NamespacePolicyAttachmentState {
    /**
     * The namespace to attach the policy to.
     */
    namespace?: pulumi.Input<string>;
    /**
     * The name of the policy attached to the namespace.
     */
    policy?: pulumi.Input<string>;
}
/**
 * The set of arguments for constructing a NamespacePolicyAttachment resource.
 */
export interface NamespacePolicyAttachmentArgs {
    /**
     * The namespace to attach the policy to.
     */
    namespace: pulumi.Input<string>;
    /**
     * The name of the policy attached to the namespace.
     */
    policy: pulumi.Input<string>;
}