tenantIamMember.go

// Code generated by the Pulumi SDK Generator DO NOT EDIT.
// *** WARNING: Do not edit by hand unless you're certain you know what you are doing! ***

package v2

import (
	"context"
	"reflect"

	"errors"
	iam "github.com/pulumi/pulumi-google-native/sdk/go/google/iam/v1"
	"github.com/pulumi/pulumi-google-native/sdk/go/google/internal"
	"github.com/pulumi/pulumi/sdk/v3/go/pulumi"
)

// Sets the access control policy for a resource. If the policy exists, it is replaced. Caller must have the right Google IAM permission on the resource.
type TenantIamMember struct {
	pulumi.CustomResourceState

	// An IAM Condition for a given binding. See https://cloud.google.com/iam/docs/conditions-overview for additional details.
	Condition iam.ConditionPtrOutput `pulumi:"condition"`
	// The etag of the resource's IAM policy.
	Etag pulumi.StringOutput `pulumi:"etag"`
	// Identity that will be granted the privilege in role. The entry can have one of the following values:
	//
	//  * user:{emailid}: An email address that represents a specific Google account. For example, alice@gmail.com or joe@example.com.
	//  * serviceAccount:{emailid}: An email address that represents a service account. For example, my-other-app@appspot.gserviceaccount.com.
	//  * group:{emailid}: An email address that represents a Google group. For example, admins@example.com.
	//  * domain:{domain}: A G Suite domain (primary, instead of alias) name that represents all the users of that domain. For example, google.com or example.com.
	Member pulumi.StringOutput `pulumi:"member"`
	// The name of the resource to manage IAM policies for.
	Name pulumi.StringOutput `pulumi:"name"`
	// The project in which the resource belongs. If it is not provided, a default will be supplied.
	Project pulumi.StringOutput `pulumi:"project"`
	// The role that should be applied.
	Role pulumi.StringOutput `pulumi:"role"`
}

// NewTenantIamMember registers a new resource with the given unique name, arguments, and options.
func NewTenantIamMember(ctx *pulumi.Context,
	name string, args *TenantIamMemberArgs, opts ...pulumi.ResourceOption) (*TenantIamMember, error) {
	if args == nil {
		return nil, errors.New("missing one or more required arguments")
	}

	if args.Member == nil {
		return nil, errors.New("invalid value for required argument 'Member'")
	}
	if args.Name == nil {
		return nil, errors.New("invalid value for required argument 'Name'")
	}
	if args.Role == nil {
		return nil, errors.New("invalid value for required argument 'Role'")
	}
	opts = internal.PkgResourceDefaultOpts(opts)
	var resource TenantIamMember
	err := ctx.RegisterResource("google-native:identitytoolkit/v2:TenantIamMember", name, args, &resource, opts...)
	if err != nil {
		return nil, err
	}
	return &resource, nil
}

// GetTenantIamMember gets an existing TenantIamMember resource's state with the given name, ID, and optional
// state properties that are used to uniquely qualify the lookup (nil if not required).
func GetTenantIamMember(ctx *pulumi.Context,
	name string, id pulumi.IDInput, state *TenantIamMemberState, opts ...pulumi.ResourceOption) (*TenantIamMember, error) {
	var resource TenantIamMember
	err := ctx.ReadResource("google-native:identitytoolkit/v2:TenantIamMember", name, id, state, &resource, opts...)
	if err != nil {
		return nil, err
	}
	return &resource, nil
}

// Input properties used for looking up and filtering TenantIamMember resources.
type tenantIamMemberState struct {
}

type TenantIamMemberState struct {
}

func (TenantIamMemberState) ElementType() reflect.Type {
	return reflect.TypeOf((*tenantIamMemberState)(nil)).Elem()
}

type tenantIamMemberArgs struct {
	// An IAM Condition for a given binding.
	Condition *iam.Condition `pulumi:"condition"`
	// Identity that will be granted the privilege in role. The entry can have one of the following values:
	//
	//  * user:{emailid}: An email address that represents a specific Google account. For example, alice@gmail.com or joe@example.com.
	//  * serviceAccount:{emailid}: An email address that represents a service account. For example, my-other-app@appspot.gserviceaccount.com.
	//  * group:{emailid}: An email address that represents a Google group. For example, admins@example.com.
	//  * domain:{domain}: A G Suite domain (primary, instead of alias) name that represents all the users of that domain. For example, google.com or example.com.
	Member string `pulumi:"member"`
	// The name of the resource to manage IAM policies for.
	Name string `pulumi:"name"`
	// The role that should be applied.
	Role string `pulumi:"role"`
}

// The set of arguments for constructing a TenantIamMember resource.
type TenantIamMemberArgs struct {
	// An IAM Condition for a given binding.
	Condition iam.ConditionPtrInput
	// Identity that will be granted the privilege in role. The entry can have one of the following values:
	//
	//  * user:{emailid}: An email address that represents a specific Google account. For example, alice@gmail.com or joe@example.com.
	//  * serviceAccount:{emailid}: An email address that represents a service account. For example, my-other-app@appspot.gserviceaccount.com.
	//  * group:{emailid}: An email address that represents a Google group. For example, admins@example.com.
	//  * domain:{domain}: A G Suite domain (primary, instead of alias) name that represents all the users of that domain. For example, google.com or example.com.
	Member pulumi.StringInput
	// The name of the resource to manage IAM policies for.
	Name pulumi.StringInput
	// The role that should be applied.
	Role pulumi.StringInput
}

func (TenantIamMemberArgs) ElementType() reflect.Type {
	return reflect.TypeOf((*tenantIamMemberArgs)(nil)).Elem()
}

type TenantIamMemberInput interface {
	pulumi.Input

	ToTenantIamMemberOutput() TenantIamMemberOutput
	ToTenantIamMemberOutputWithContext(ctx context.Context) TenantIamMemberOutput
}

func (*TenantIamMember) ElementType() reflect.Type {
	return reflect.TypeOf((**TenantIamMember)(nil)).Elem()
}

func (i *TenantIamMember) ToTenantIamMemberOutput() TenantIamMemberOutput {
	return i.ToTenantIamMemberOutputWithContext(context.Background())
}

func (i *TenantIamMember) ToTenantIamMemberOutputWithContext(ctx context.Context) TenantIamMemberOutput {
	return pulumi.ToOutputWithContext(ctx, i).(TenantIamMemberOutput)
}

type TenantIamMemberOutput struct{ *pulumi.OutputState }

func (TenantIamMemberOutput) ElementType() reflect.Type {
	return reflect.TypeOf((**TenantIamMember)(nil)).Elem()
}

func (o TenantIamMemberOutput) ToTenantIamMemberOutput() TenantIamMemberOutput {
	return o
}

func (o TenantIamMemberOutput) ToTenantIamMemberOutputWithContext(ctx context.Context) TenantIamMemberOutput {
	return o
}

// An IAM Condition for a given binding. See https://cloud.google.com/iam/docs/conditions-overview for additional details.
func (o TenantIamMemberOutput) Condition() iam.ConditionPtrOutput {
	return o.ApplyT(func(v *TenantIamMember) iam.ConditionPtrOutput { return v.Condition }).(iam.ConditionPtrOutput)
}

// The etag of the resource's IAM policy.
func (o TenantIamMemberOutput) Etag() pulumi.StringOutput {
	return o.ApplyT(func(v *TenantIamMember) pulumi.StringOutput { return v.Etag }).(pulumi.StringOutput)
}

// Identity that will be granted the privilege in role. The entry can have one of the following values:
//
//   - user:{emailid}: An email address that represents a specific Google account. For example, alice@gmail.com or joe@example.com.
//   - serviceAccount:{emailid}: An email address that represents a service account. For example, my-other-app@appspot.gserviceaccount.com.
//   - group:{emailid}: An email address that represents a Google group. For example, admins@example.com.
//   - domain:{domain}: A G Suite domain (primary, instead of alias) name that represents all the users of that domain. For example, google.com or example.com.
func (o TenantIamMemberOutput) Member() pulumi.StringOutput {
	return o.ApplyT(func(v *TenantIamMember) pulumi.StringOutput { return v.Member }).(pulumi.StringOutput)
}

// The name of the resource to manage IAM policies for.
func (o TenantIamMemberOutput) Name() pulumi.StringOutput {
	return o.ApplyT(func(v *TenantIamMember) pulumi.StringOutput { return v.Name }).(pulumi.StringOutput)
}

// The project in which the resource belongs. If it is not provided, a default will be supplied.
func (o TenantIamMemberOutput) Project() pulumi.StringOutput {
	return o.ApplyT(func(v *TenantIamMember) pulumi.StringOutput { return v.Project }).(pulumi.StringOutput)
}

// The role that should be applied.
func (o TenantIamMemberOutput) Role() pulumi.StringOutput {
	return o.ApplyT(func(v *TenantIamMember) pulumi.StringOutput { return v.Role }).(pulumi.StringOutput)
}

func init() {
	pulumi.RegisterInputType(reflect.TypeOf((*TenantIamMemberInput)(nil)).Elem(), &TenantIamMember{})
	pulumi.RegisterOutputType(TenantIamMemberOutput{})
}