Module rbac/v1alpha1

@pulumi/kubernetes > rbac > v1alpha1

class ClusterRole

extends CustomResource

ClusterRole is a cluster level, logical grouping of PolicyRules that can be referenced as a unit by a RoleBinding or ClusterRoleBinding.

constructor

new ClusterRole(name: string, args?: inputApi.rbac.v1alpha1.ClusterRole, opts?: pulumi.CustomResourceOptions)

Create a rbac.v1alpha1.ClusterRole resource with the given unique name, arguments, and options.

  • name The unique name of the resource.
  • args The arguments to use to populate this resource's properties.
  • opts A bag of options that control this resource's behavior.

method get

public static get(name: string, id: pulumi.Input<pulumi.ID>, opts?: pulumi.CustomResourceOptions): ClusterRole

Get the state of an existing ClusterRole resource, as identified by id. Typically this ID is of the form /; if is omitted, then (per Kubernetes convention) the ID becomes default/.

Pulumi will keep track of this resource using name as the Pulumi ID.

method getInputs

public getInputs(): inputApi.rbac.v1alpha1.ClusterRole

method getProvider

getProvider(moduleMember: string): ProviderResource | undefined

method isInstance

static isInstance(obj: any): boolean

Returns true if the given object is an instance of CustomResource. This is designed to work even when multiple copies of the Pulumi SDK have been loaded into the same process.

property aggregationRule

public aggregationRule: pulumi.Output<outputApi.rbac.v1alpha1.AggregationRule>;

AggregationRule is an optional field that describes how to build the Rules for this ClusterRole. If AggregationRule is set, then the Rules are controller managed and direct changes to Rules will be stomped by the controller.

property apiVersion

public apiVersion: pulumi.Output<“rbac.authorization.k8s.io/v1alpha1”>;

APIVersion defines the versioned schema of this representation of an object. Servers should convert recognized schemas to the latest internal value, and may reject unrecognized values. More info: https://git.k8s.io/community/contributors/devel/api-conventions.md#resources

property id

id: Output<ID>;

id is the provider-assigned unique ID for this managed resource. It is set during deployments and may be missing (undefined) during planning phases.

property kind

public kind: pulumi.Output<“ClusterRole”>;

Kind is a string value representing the REST resource this object represents. Servers may infer this from the endpoint the client submits requests to. Cannot be updated. In CamelCase. More info: https://git.k8s.io/community/contributors/devel/api-conventions.md#types-kinds

property metadata

public metadata: pulumi.Output<outputApi.meta.v1.ObjectMeta>;

Standard object’s metadata.

property rules

public rules: pulumi.Output<outputApi.rbac.v1alpha1.PolicyRule[]>;

Rules holds all the PolicyRules for this ClusterRole

property urn

urn: Output<URN>;

urn is the stable logical URN used to distinctly address a resource, both before and after deployments.

class ClusterRoleBinding

extends CustomResource

ClusterRoleBinding references a ClusterRole, but not contain it. It can reference a ClusterRole in the global namespace, and adds who information via Subject.

constructor

new ClusterRoleBinding(name: string, args?: inputApi.rbac.v1alpha1.ClusterRoleBinding, opts?: pulumi.CustomResourceOptions)

Create a rbac.v1alpha1.ClusterRoleBinding resource with the given unique name, arguments, and options.

  • name The unique name of the resource.
  • args The arguments to use to populate this resource's properties.
  • opts A bag of options that control this resource's behavior.

method get

public static get(name: string, id: pulumi.Input<pulumi.ID>, opts?: pulumi.CustomResourceOptions): ClusterRoleBinding

Get the state of an existing ClusterRoleBinding resource, as identified by id. Typically this ID is of the form /; if is omitted, then (per Kubernetes convention) the ID becomes default/.

Pulumi will keep track of this resource using name as the Pulumi ID.

method getInputs

public getInputs(): inputApi.rbac.v1alpha1.ClusterRoleBinding

method getProvider

getProvider(moduleMember: string): ProviderResource | undefined

method isInstance

static isInstance(obj: any): boolean

Returns true if the given object is an instance of CustomResource. This is designed to work even when multiple copies of the Pulumi SDK have been loaded into the same process.

property apiVersion

public apiVersion: pulumi.Output<“rbac.authorization.k8s.io/v1alpha1”>;

APIVersion defines the versioned schema of this representation of an object. Servers should convert recognized schemas to the latest internal value, and may reject unrecognized values. More info: https://git.k8s.io/community/contributors/devel/api-conventions.md#resources

property id

id: Output<ID>;

id is the provider-assigned unique ID for this managed resource. It is set during deployments and may be missing (undefined) during planning phases.

property kind

public kind: pulumi.Output<“ClusterRoleBinding”>;

Kind is a string value representing the REST resource this object represents. Servers may infer this from the endpoint the client submits requests to. Cannot be updated. In CamelCase. More info: https://git.k8s.io/community/contributors/devel/api-conventions.md#types-kinds

property metadata

public metadata: pulumi.Output<outputApi.meta.v1.ObjectMeta>;

Standard object’s metadata.

property roleRef

public roleRef: pulumi.Output<outputApi.rbac.v1alpha1.RoleRef>;

RoleRef can only reference a ClusterRole in the global namespace. If the RoleRef cannot be resolved, the Authorizer must return an error.

property subjects

public subjects: pulumi.Output<outputApi.rbac.v1alpha1.Subject[]>;

Subjects holds references to the objects the role applies to.

property urn

urn: Output<URN>;

urn is the stable logical URN used to distinctly address a resource, both before and after deployments.

class ClusterRoleBindingList

extends CustomResource

ClusterRoleBindingList is a collection of ClusterRoleBindings

constructor

new ClusterRoleBindingList(name: string, args?: inputApi.rbac.v1alpha1.ClusterRoleBindingList, opts?: pulumi.CustomResourceOptions)

Create a rbac.v1alpha1.ClusterRoleBindingList resource with the given unique name, arguments, and options.

  • name The unique name of the resource.
  • args The arguments to use to populate this resource's properties.
  • opts A bag of options that control this resource's behavior.

method get

public static get(name: string, id: pulumi.Input<pulumi.ID>, opts?: pulumi.CustomResourceOptions): ClusterRoleBindingList

Get the state of an existing ClusterRoleBindingList resource, as identified by id. Typically this ID is of the form /; if is omitted, then (per Kubernetes convention) the ID becomes default/.

Pulumi will keep track of this resource using name as the Pulumi ID.

method getInputs

public getInputs(): inputApi.rbac.v1alpha1.ClusterRoleBindingList

method getProvider

getProvider(moduleMember: string): ProviderResource | undefined

method isInstance

static isInstance(obj: any): boolean

Returns true if the given object is an instance of CustomResource. This is designed to work even when multiple copies of the Pulumi SDK have been loaded into the same process.

property apiVersion

public apiVersion: pulumi.Output<“rbac.authorization.k8s.io/v1alpha1”>;

APIVersion defines the versioned schema of this representation of an object. Servers should convert recognized schemas to the latest internal value, and may reject unrecognized values. More info: https://git.k8s.io/community/contributors/devel/api-conventions.md#resources

property id

id: Output<ID>;

id is the provider-assigned unique ID for this managed resource. It is set during deployments and may be missing (undefined) during planning phases.

property items

public items: pulumi.Output<outputApi.rbac.v1alpha1.ClusterRoleBinding[]>;

Items is a list of ClusterRoleBindings

property kind

public kind: pulumi.Output<“ClusterRoleBindingList”>;

Kind is a string value representing the REST resource this object represents. Servers may infer this from the endpoint the client submits requests to. Cannot be updated. In CamelCase. More info: https://git.k8s.io/community/contributors/devel/api-conventions.md#types-kinds

property metadata

public metadata: pulumi.Output<outputApi.meta.v1.ListMeta>;

Standard object’s metadata.

property urn

urn: Output<URN>;

urn is the stable logical URN used to distinctly address a resource, both before and after deployments.

class ClusterRoleList

extends CustomResource

ClusterRoleList is a collection of ClusterRoles

constructor

new ClusterRoleList(name: string, args?: inputApi.rbac.v1alpha1.ClusterRoleList, opts?: pulumi.CustomResourceOptions)

Create a rbac.v1alpha1.ClusterRoleList resource with the given unique name, arguments, and options.

  • name The unique name of the resource.
  • args The arguments to use to populate this resource's properties.
  • opts A bag of options that control this resource's behavior.

method get

public static get(name: string, id: pulumi.Input<pulumi.ID>, opts?: pulumi.CustomResourceOptions): ClusterRoleList

Get the state of an existing ClusterRoleList resource, as identified by id. Typically this ID is of the form /; if is omitted, then (per Kubernetes convention) the ID becomes default/.

Pulumi will keep track of this resource using name as the Pulumi ID.

method getInputs

public getInputs(): inputApi.rbac.v1alpha1.ClusterRoleList

method getProvider

getProvider(moduleMember: string): ProviderResource | undefined

method isInstance

static isInstance(obj: any): boolean

Returns true if the given object is an instance of CustomResource. This is designed to work even when multiple copies of the Pulumi SDK have been loaded into the same process.

property apiVersion

public apiVersion: pulumi.Output<“rbac.authorization.k8s.io/v1alpha1”>;

APIVersion defines the versioned schema of this representation of an object. Servers should convert recognized schemas to the latest internal value, and may reject unrecognized values. More info: https://git.k8s.io/community/contributors/devel/api-conventions.md#resources

property id

id: Output<ID>;

id is the provider-assigned unique ID for this managed resource. It is set during deployments and may be missing (undefined) during planning phases.

property items

public items: pulumi.Output<outputApi.rbac.v1alpha1.ClusterRole[]>;

Items is a list of ClusterRoles

property kind

public kind: pulumi.Output<“ClusterRoleList”>;

Kind is a string value representing the REST resource this object represents. Servers may infer this from the endpoint the client submits requests to. Cannot be updated. In CamelCase. More info: https://git.k8s.io/community/contributors/devel/api-conventions.md#types-kinds

property metadata

public metadata: pulumi.Output<outputApi.meta.v1.ListMeta>;

Standard object’s metadata.

property urn

urn: Output<URN>;

urn is the stable logical URN used to distinctly address a resource, both before and after deployments.

class Role

extends CustomResource

Role is a namespaced, logical grouping of PolicyRules that can be referenced as a unit by a RoleBinding.

constructor

new Role(name: string, args?: inputApi.rbac.v1alpha1.Role, opts?: pulumi.CustomResourceOptions)

Create a rbac.v1alpha1.Role resource with the given unique name, arguments, and options.

  • name The unique name of the resource.
  • args The arguments to use to populate this resource's properties.
  • opts A bag of options that control this resource's behavior.

method get

public static get(name: string, id: pulumi.Input<pulumi.ID>, opts?: pulumi.CustomResourceOptions): Role

Get the state of an existing Role resource, as identified by id. Typically this ID is of the form /; if is omitted, then (per Kubernetes convention) the ID becomes default/.

Pulumi will keep track of this resource using name as the Pulumi ID.

method getInputs

public getInputs(): inputApi.rbac.v1alpha1.Role

method getProvider

getProvider(moduleMember: string): ProviderResource | undefined

method isInstance

static isInstance(obj: any): boolean

Returns true if the given object is an instance of CustomResource. This is designed to work even when multiple copies of the Pulumi SDK have been loaded into the same process.

property apiVersion

public apiVersion: pulumi.Output<“rbac.authorization.k8s.io/v1alpha1”>;

APIVersion defines the versioned schema of this representation of an object. Servers should convert recognized schemas to the latest internal value, and may reject unrecognized values. More info: https://git.k8s.io/community/contributors/devel/api-conventions.md#resources

property id

id: Output<ID>;

id is the provider-assigned unique ID for this managed resource. It is set during deployments and may be missing (undefined) during planning phases.

property kind

public kind: pulumi.Output<“Role”>;

Kind is a string value representing the REST resource this object represents. Servers may infer this from the endpoint the client submits requests to. Cannot be updated. In CamelCase. More info: https://git.k8s.io/community/contributors/devel/api-conventions.md#types-kinds

property metadata

public metadata: pulumi.Output<outputApi.meta.v1.ObjectMeta>;

Standard object’s metadata.

property rules

public rules: pulumi.Output<outputApi.rbac.v1alpha1.PolicyRule[]>;

Rules holds all the PolicyRules for this Role

property urn

urn: Output<URN>;

urn is the stable logical URN used to distinctly address a resource, both before and after deployments.

class RoleBinding

extends CustomResource

RoleBinding references a role, but does not contain it. It can reference a Role in the same namespace or a ClusterRole in the global namespace. It adds who information via Subjects and namespace information by which namespace it exists in. RoleBindings in a given namespace only have effect in that namespace.

constructor

new RoleBinding(name: string, args?: inputApi.rbac.v1alpha1.RoleBinding, opts?: pulumi.CustomResourceOptions)

Create a rbac.v1alpha1.RoleBinding resource with the given unique name, arguments, and options.

  • name The unique name of the resource.
  • args The arguments to use to populate this resource's properties.
  • opts A bag of options that control this resource's behavior.

method get

public static get(name: string, id: pulumi.Input<pulumi.ID>, opts?: pulumi.CustomResourceOptions): RoleBinding

Get the state of an existing RoleBinding resource, as identified by id. Typically this ID is of the form /; if is omitted, then (per Kubernetes convention) the ID becomes default/.

Pulumi will keep track of this resource using name as the Pulumi ID.

method getInputs

public getInputs(): inputApi.rbac.v1alpha1.RoleBinding

method getProvider

getProvider(moduleMember: string): ProviderResource | undefined

method isInstance

static isInstance(obj: any): boolean

Returns true if the given object is an instance of CustomResource. This is designed to work even when multiple copies of the Pulumi SDK have been loaded into the same process.

property apiVersion

public apiVersion: pulumi.Output<“rbac.authorization.k8s.io/v1alpha1”>;

APIVersion defines the versioned schema of this representation of an object. Servers should convert recognized schemas to the latest internal value, and may reject unrecognized values. More info: https://git.k8s.io/community/contributors/devel/api-conventions.md#resources

property id

id: Output<ID>;

id is the provider-assigned unique ID for this managed resource. It is set during deployments and may be missing (undefined) during planning phases.

property kind

public kind: pulumi.Output<“RoleBinding”>;

Kind is a string value representing the REST resource this object represents. Servers may infer this from the endpoint the client submits requests to. Cannot be updated. In CamelCase. More info: https://git.k8s.io/community/contributors/devel/api-conventions.md#types-kinds

property metadata

public metadata: pulumi.Output<outputApi.meta.v1.ObjectMeta>;

Standard object’s metadata.

property roleRef

public roleRef: pulumi.Output<outputApi.rbac.v1alpha1.RoleRef>;

RoleRef can reference a Role in the current namespace or a ClusterRole in the global namespace. If the RoleRef cannot be resolved, the Authorizer must return an error.

property subjects

public subjects: pulumi.Output<outputApi.rbac.v1alpha1.Subject[]>;

Subjects holds references to the objects the role applies to.

property urn

urn: Output<URN>;

urn is the stable logical URN used to distinctly address a resource, both before and after deployments.

class RoleBindingList

extends CustomResource

RoleBindingList is a collection of RoleBindings

constructor

new RoleBindingList(name: string, args?: inputApi.rbac.v1alpha1.RoleBindingList, opts?: pulumi.CustomResourceOptions)

Create a rbac.v1alpha1.RoleBindingList resource with the given unique name, arguments, and options.

  • name The unique name of the resource.
  • args The arguments to use to populate this resource's properties.
  • opts A bag of options that control this resource's behavior.

method get

public static get(name: string, id: pulumi.Input<pulumi.ID>, opts?: pulumi.CustomResourceOptions): RoleBindingList

Get the state of an existing RoleBindingList resource, as identified by id. Typically this ID is of the form /; if is omitted, then (per Kubernetes convention) the ID becomes default/.

Pulumi will keep track of this resource using name as the Pulumi ID.

method getInputs

public getInputs(): inputApi.rbac.v1alpha1.RoleBindingList

method getProvider

getProvider(moduleMember: string): ProviderResource | undefined

method isInstance

static isInstance(obj: any): boolean

Returns true if the given object is an instance of CustomResource. This is designed to work even when multiple copies of the Pulumi SDK have been loaded into the same process.

property apiVersion

public apiVersion: pulumi.Output<“rbac.authorization.k8s.io/v1alpha1”>;

APIVersion defines the versioned schema of this representation of an object. Servers should convert recognized schemas to the latest internal value, and may reject unrecognized values. More info: https://git.k8s.io/community/contributors/devel/api-conventions.md#resources

property id

id: Output<ID>;

id is the provider-assigned unique ID for this managed resource. It is set during deployments and may be missing (undefined) during planning phases.

property items

public items: pulumi.Output<outputApi.rbac.v1alpha1.RoleBinding[]>;

Items is a list of RoleBindings

property kind

public kind: pulumi.Output<“RoleBindingList”>;

Kind is a string value representing the REST resource this object represents. Servers may infer this from the endpoint the client submits requests to. Cannot be updated. In CamelCase. More info: https://git.k8s.io/community/contributors/devel/api-conventions.md#types-kinds

property metadata

public metadata: pulumi.Output<outputApi.meta.v1.ListMeta>;

Standard object’s metadata.

property urn

urn: Output<URN>;

urn is the stable logical URN used to distinctly address a resource, both before and after deployments.

class RoleList

extends CustomResource

RoleList is a collection of Roles

constructor

new RoleList(name: string, args?: inputApi.rbac.v1alpha1.RoleList, opts?: pulumi.CustomResourceOptions)

Create a rbac.v1alpha1.RoleList resource with the given unique name, arguments, and options.

  • name The unique name of the resource.
  • args The arguments to use to populate this resource's properties.
  • opts A bag of options that control this resource's behavior.

method get

public static get(name: string, id: pulumi.Input<pulumi.ID>, opts?: pulumi.CustomResourceOptions): RoleList

Get the state of an existing RoleList resource, as identified by id. Typically this ID is of the form /; if is omitted, then (per Kubernetes convention) the ID becomes default/.

Pulumi will keep track of this resource using name as the Pulumi ID.

method getInputs

public getInputs(): inputApi.rbac.v1alpha1.RoleList

method getProvider

getProvider(moduleMember: string): ProviderResource | undefined

method isInstance

static isInstance(obj: any): boolean

Returns true if the given object is an instance of CustomResource. This is designed to work even when multiple copies of the Pulumi SDK have been loaded into the same process.

property apiVersion

public apiVersion: pulumi.Output<“rbac.authorization.k8s.io/v1alpha1”>;

APIVersion defines the versioned schema of this representation of an object. Servers should convert recognized schemas to the latest internal value, and may reject unrecognized values. More info: https://git.k8s.io/community/contributors/devel/api-conventions.md#resources

property id

id: Output<ID>;

id is the provider-assigned unique ID for this managed resource. It is set during deployments and may be missing (undefined) during planning phases.

property items

public items: pulumi.Output<outputApi.rbac.v1alpha1.Role[]>;

Items is a list of Roles

property kind

public kind: pulumi.Output<“RoleList”>;

Kind is a string value representing the REST resource this object represents. Servers may infer this from the endpoint the client submits requests to. Cannot be updated. In CamelCase. More info: https://git.k8s.io/community/contributors/devel/api-conventions.md#types-kinds

property metadata

public metadata: pulumi.Output<outputApi.meta.v1.ListMeta>;

Standard object’s metadata.

property urn

urn: Output<URN>;

urn is the stable logical URN used to distinctly address a resource, both before and after deployments.