com.pulumi.kubernetes.rbac.v1.kotlin.inputs.PolicyRuleArgs.kt Maven / Gradle / Ivy

Go to download
Show more of this group Show more artifacts with this name
Show all versions of pulumi-kubernetes-kotlin Show documentation
Build cloud applications and infrastructure by combining the safety and reliability of infrastructure as code with the power of the Kotlin programming language.
There is a newer version: 4.18.2.0
Show newest version
@file:Suppress("NAME_SHADOWING", "DEPRECATION")

package com.pulumi.kubernetes.rbac.v1.kotlin.inputs

import com.pulumi.core.Output
import com.pulumi.core.Output.of
import com.pulumi.kotlin.ConvertibleToJava
import com.pulumi.kotlin.PulumiNullFieldException
import com.pulumi.kotlin.PulumiTagMarker
import com.pulumi.kubernetes.rbac.v1.inputs.PolicyRuleArgs.builder
import kotlin.String
import kotlin.Suppress
import kotlin.collections.List
import kotlin.jvm.JvmName

/**
 * PolicyRule holds information that describes a policy rule, but does not contain information about who the rule applies to or which namespace the rule applies to.
 * @property apiGroups APIGroups is the name of the APIGroup that contains the resources.  If multiple API groups are specified, any action requested against one of the enumerated resources in any API group will be allowed. "" represents the core API group and "*" represents all API groups.
 * @property nonResourceURLs NonResourceURLs is a set of partial urls that a user should have access to.  *s are allowed, but only as the full, final step in the path Since non-resource URLs are not namespaced, this field is only applicable for ClusterRoles referenced from a ClusterRoleBinding. Rules can either apply to API resources (such as "pods" or "secrets") or non-resource URL paths (such as "/api"),  but not both.
 * @property resourceNames ResourceNames is an optional white list of names that the rule applies to.  An empty set means that everything is allowed.
 * @property resources Resources is a list of resources this rule applies to. '*' represents all resources.
 * @property verbs Verbs is a list of Verbs that apply to ALL the ResourceKinds contained in this rule. '*' represents all verbs.
 */
public data class PolicyRuleArgs(
    public val apiGroups: Output>? = null,
    public val nonResourceURLs: Output>? = null,
    public val resourceNames: Output>? = null,
    public val resources: Output>? = null,
    public val verbs: Output>,
) : ConvertibleToJava {
    override fun toJava(): com.pulumi.kubernetes.rbac.v1.inputs.PolicyRuleArgs =
        com.pulumi.kubernetes.rbac.v1.inputs.PolicyRuleArgs.builder()
            .apiGroups(apiGroups?.applyValue({ args0 -> args0.map({ args0 -> args0 }) }))
            .nonResourceURLs(nonResourceURLs?.applyValue({ args0 -> args0.map({ args0 -> args0 }) }))
            .resourceNames(resourceNames?.applyValue({ args0 -> args0.map({ args0 -> args0 }) }))
            .resources(resources?.applyValue({ args0 -> args0.map({ args0 -> args0 }) }))
            .verbs(verbs.applyValue({ args0 -> args0.map({ args0 -> args0 }) })).build()
}

/**
 * Builder for [PolicyRuleArgs].
 */
@PulumiTagMarker
public class PolicyRuleArgsBuilder internal constructor() {
    private var apiGroups: Output>? = null

    private var nonResourceURLs: Output>? = null

    private var resourceNames: Output>? = null

    private var resources: Output>? = null

    private var verbs: Output>? = null

    /**
     * @param value APIGroups is the name of the APIGroup that contains the resources.  If multiple API groups are specified, any action requested against one of the enumerated resources in any API group will be allowed. "" represents the core API group and "*" represents all API groups.
     */
    @JvmName("mwwksjmiauxldfjf")
    public suspend fun apiGroups(`value`: Output>) {
        this.apiGroups = value
    }

    @JvmName("tdyhinxftcmlhxqm")
    public suspend fun apiGroups(vararg values: Output) {
        this.apiGroups = Output.all(values.asList())
    }

    /**
     * @param values APIGroups is the name of the APIGroup that contains the resources.  If multiple API groups are specified, any action requested against one of the enumerated resources in any API group will be allowed. "" represents the core API group and "*" represents all API groups.
     */
    @JvmName("sjdqxgjvpoojijto")
    public suspend fun apiGroups(values: List>) {
        this.apiGroups = Output.all(values)
    }

    /**
     * @param value NonResourceURLs is a set of partial urls that a user should have access to.  *s are allowed, but only as the full, final step in the path Since non-resource URLs are not namespaced, this field is only applicable for ClusterRoles referenced from a ClusterRoleBinding. Rules can either apply to API resources (such as "pods" or "secrets") or non-resource URL paths (such as "/api"),  but not both.
     */
    @JvmName("thuwulyubgfekpix")
    public suspend fun nonResourceURLs(`value`: Output>) {
        this.nonResourceURLs = value
    }

    @JvmName("mmtbkejolygqcwrx")
    public suspend fun nonResourceURLs(vararg values: Output) {
        this.nonResourceURLs = Output.all(values.asList())
    }

    /**
     * @param values NonResourceURLs is a set of partial urls that a user should have access to.  *s are allowed, but only as the full, final step in the path Since non-resource URLs are not namespaced, this field is only applicable for ClusterRoles referenced from a ClusterRoleBinding. Rules can either apply to API resources (such as "pods" or "secrets") or non-resource URL paths (such as "/api"),  but not both.
     */
    @JvmName("uwdqkjwdeehgpalp")
    public suspend fun nonResourceURLs(values: List>) {
        this.nonResourceURLs = Output.all(values)
    }

    /**
     * @param value ResourceNames is an optional white list of names that the rule applies to.  An empty set means that everything is allowed.
     */
    @JvmName("ywantrkdiuvjvfcu")
    public suspend fun resourceNames(`value`: Output>) {
        this.resourceNames = value
    }

    @JvmName("lylwyxcygmuwwpmm")
    public suspend fun resourceNames(vararg values: Output) {
        this.resourceNames = Output.all(values.asList())
    }

    /**
     * @param values ResourceNames is an optional white list of names that the rule applies to.  An empty set means that everything is allowed.
     */
    @JvmName("bvqacoxiirglfkkm")
    public suspend fun resourceNames(values: List>) {
        this.resourceNames = Output.all(values)
    }

    /**
     * @param value Resources is a list of resources this rule applies to. '*' represents all resources.
     */
    @JvmName("kwsdolkfvxdqfxkd")
    public suspend fun resources(`value`: Output>) {
        this.resources = value
    }

    @JvmName("aantlxgwvgelgxjt")
    public suspend fun resources(vararg values: Output) {
        this.resources = Output.all(values.asList())
    }

    /**
     * @param values Resources is a list of resources this rule applies to. '*' represents all resources.
     */
    @JvmName("wfitwwqrhieodvdf")
    public suspend fun resources(values: List>) {
        this.resources = Output.all(values)
    }

    /**
     * @param value Verbs is a list of Verbs that apply to ALL the ResourceKinds contained in this rule. '*' represents all verbs.
     */
    @JvmName("jqichssrqtyrpkrp")
    public suspend fun verbs(`value`: Output>) {
        this.verbs = value
    }

    @JvmName("mlyceavjbiwhsqxs")
    public suspend fun verbs(vararg values: Output) {
        this.verbs = Output.all(values.asList())
    }

    /**
     * @param values Verbs is a list of Verbs that apply to ALL the ResourceKinds contained in this rule. '*' represents all verbs.
     */
    @JvmName("vsuhhtgxmgblbmqs")
    public suspend fun verbs(values: List>) {
        this.verbs = Output.all(values)
    }

    /**
     * @param value APIGroups is the name of the APIGroup that contains the resources.  If multiple API groups are specified, any action requested against one of the enumerated resources in any API group will be allowed. "" represents the core API group and "*" represents all API groups.
     */
    @JvmName("axluixifyadyglfh")
    public suspend fun apiGroups(`value`: List?) {
        val toBeMapped = value
        val mapped = toBeMapped?.let({ args0 -> of(args0) })
        this.apiGroups = mapped
    }

    /**
     * @param values APIGroups is the name of the APIGroup that contains the resources.  If multiple API groups are specified, any action requested against one of the enumerated resources in any API group will be allowed. "" represents the core API group and "*" represents all API groups.
     */
    @JvmName("rfgjpknejsfmbrna")
    public suspend fun apiGroups(vararg values: String) {
        val toBeMapped = values.toList()
        val mapped = toBeMapped.let({ args0 -> of(args0) })
        this.apiGroups = mapped
    }

    /**
     * @param value NonResourceURLs is a set of partial urls that a user should have access to.  *s are allowed, but only as the full, final step in the path Since non-resource URLs are not namespaced, this field is only applicable for ClusterRoles referenced from a ClusterRoleBinding. Rules can either apply to API resources (such as "pods" or "secrets") or non-resource URL paths (such as "/api"),  but not both.
     */
    @JvmName("eljqvylvyvgduyvr")
    public suspend fun nonResourceURLs(`value`: List?) {
        val toBeMapped = value
        val mapped = toBeMapped?.let({ args0 -> of(args0) })
        this.nonResourceURLs = mapped
    }

    /**
     * @param values NonResourceURLs is a set of partial urls that a user should have access to.  *s are allowed, but only as the full, final step in the path Since non-resource URLs are not namespaced, this field is only applicable for ClusterRoles referenced from a ClusterRoleBinding. Rules can either apply to API resources (such as "pods" or "secrets") or non-resource URL paths (such as "/api"),  but not both.
     */
    @JvmName("tvgalaehreqqnymg")
    public suspend fun nonResourceURLs(vararg values: String) {
        val toBeMapped = values.toList()
        val mapped = toBeMapped.let({ args0 -> of(args0) })
        this.nonResourceURLs = mapped
    }

    /**
     * @param value ResourceNames is an optional white list of names that the rule applies to.  An empty set means that everything is allowed.
     */
    @JvmName("skfdpjfvotvndbqx")
    public suspend fun resourceNames(`value`: List?) {
        val toBeMapped = value
        val mapped = toBeMapped?.let({ args0 -> of(args0) })
        this.resourceNames = mapped
    }

    /**
     * @param values ResourceNames is an optional white list of names that the rule applies to.  An empty set means that everything is allowed.
     */
    @JvmName("fqgipuanpkjolexn")
    public suspend fun resourceNames(vararg values: String) {
        val toBeMapped = values.toList()
        val mapped = toBeMapped.let({ args0 -> of(args0) })
        this.resourceNames = mapped
    }

    /**
     * @param value Resources is a list of resources this rule applies to. '*' represents all resources.
     */
    @JvmName("thfabbwqheglvrqn")
    public suspend fun resources(`value`: List?) {
        val toBeMapped = value
        val mapped = toBeMapped?.let({ args0 -> of(args0) })
        this.resources = mapped
    }

    /**
     * @param values Resources is a list of resources this rule applies to. '*' represents all resources.
     */
    @JvmName("mykakanceeypglvi")
    public suspend fun resources(vararg values: String) {
        val toBeMapped = values.toList()
        val mapped = toBeMapped.let({ args0 -> of(args0) })
        this.resources = mapped
    }

    /**
     * @param value Verbs is a list of Verbs that apply to ALL the ResourceKinds contained in this rule. '*' represents all verbs.
     */
    @JvmName("bsetrlyrxtkwjbyq")
    public suspend fun verbs(`value`: List) {
        val toBeMapped = value
        val mapped = toBeMapped.let({ args0 -> of(args0) })
        this.verbs = mapped
    }

    /**
     * @param values Verbs is a list of Verbs that apply to ALL the ResourceKinds contained in this rule. '*' represents all verbs.
     */
    @JvmName("scfrejwfbryknjwo")
    public suspend fun verbs(vararg values: String) {
        val toBeMapped = values.toList()
        val mapped = toBeMapped.let({ args0 -> of(args0) })
        this.verbs = mapped
    }

    internal fun build(): PolicyRuleArgs = PolicyRuleArgs(
        apiGroups = apiGroups,
        nonResourceURLs = nonResourceURLs,
        resourceNames = resourceNames,
        resources = resources,
        verbs = verbs ?: throw PulumiNullFieldException("verbs"),
    )
}