import * as pulumi from "@pulumi/pulumi"; import * as inputs from "../types/input"; export interface AccountService { /** * Unique human-readable name of the Service. */ name: pulumi.Input; /** * The Service's suspended state. */ suspended?: pulumi.Input; /** * Tags is a map of key, value pairs. */ tags?: pulumi.Input<{ [key: string]: pulumi.Input; }>; token?: pulumi.Input; } export interface AccountUser { /** * The User's email address. Must be unique. */ email: pulumi.Input; /** * External ID is an alternative unique ID this user is represented by within an external service. */ externalId?: pulumi.Input; /** * The User's first name. */ firstName: pulumi.Input; /** * The User's last name. */ lastName: pulumi.Input; /** * Managed By is a read only field for what service manages this user, e.g. StrongDM, Okta, Azure. */ managedBy?: pulumi.Input; /** * Manager ID is the ID of the user's manager. This field is empty when the user has no manager. */ managerId?: pulumi.Input; /** * PermissionLevel is the user's permission level e.g. admin, DBA, user. */ permissionLevel?: pulumi.Input; /** * Resolved Manager ID is the ID of the user's manager derived from the manager_id, if present, or from the SCIM metadata. This is a read-only field that's only populated for get and list. */ resolvedManagerId?: pulumi.Input; /** * SCIM contains the raw SCIM metadata for the user. This is a read-only field. */ scim?: pulumi.Input; /** * The Service's suspended state. */ suspended?: pulumi.Input; /** * Tags is a map of key, value pairs. */ tags?: pulumi.Input<{ [key: string]: pulumi.Input; }>; } export interface ApprovalWorkflowApprovalStep { /** * The approvers for this approval step */ approvers: pulumi.Input[]>; /** * Whether any or all approvers are required to approve for this approval step (optional, defaults to any) */ quantifier?: pulumi.Input; /** * Duration after which this approval step will be skipped if no approval is given (optional, if not provided this step must be manually approved) */ skipAfter?: pulumi.Input; } export interface ApprovalWorkflowApprovalStepApprover { /** * The account id of the approver (only one of account_id, role_id, or reference may be present for one approver) */ accountId?: pulumi.Input; /** * A reference to an approver: 'manager-of-requester' or 'manager-of-manager-of-requester' (only one of account_id, role_id, or reference may be present for one approver) */ reference?: pulumi.Input; /** * The role id of the approver (only one of account_id, role_id, or reference may be present for one approver) */ roleId?: pulumi.Input; } export interface GetApprovalWorkflowApprovalStep { /** * The approvers for this approval step */ approvers: inputs.GetApprovalWorkflowApprovalStepApprover[]; /** * Whether any or all approvers are required to approve for this approval step (optional, defaults to any) */ quantifier?: string; /** * Duration after which this approval step will be skipped if no approval is given (optional, if not provided this step must be manually approved) */ skipAfter?: string; } export interface GetApprovalWorkflowApprovalStepArgs { /** * The approvers for this approval step */ approvers: pulumi.Input[]>; /** * Whether any or all approvers are required to approve for this approval step (optional, defaults to any) */ quantifier?: pulumi.Input; /** * Duration after which this approval step will be skipped if no approval is given (optional, if not provided this step must be manually approved) */ skipAfter?: pulumi.Input; } export interface GetApprovalWorkflowApprovalStepApprover { /** * The account id of the approver (only one of account_id, role_id, or reference may be present for one approver) */ accountId?: string; /** * A reference to an approver: 'manager-of-requester' or 'manager-of-manager-of-requester' (only one of account_id, role_id, or reference may be present for one approver) */ reference?: string; /** * The role id of the approver (only one of account_id, role_id, or reference may be present for one approver) */ roleId?: string; } export interface GetApprovalWorkflowApprovalStepApproverArgs { /** * The account id of the approver (only one of account_id, role_id, or reference may be present for one approver) */ accountId?: pulumi.Input; /** * A reference to an approver: 'manager-of-requester' or 'manager-of-manager-of-requester' (only one of account_id, role_id, or reference may be present for one approver) */ reference?: pulumi.Input; /** * The role id of the approver (only one of account_id, role_id, or reference may be present for one approver) */ roleId?: pulumi.Input; } export interface NodeGateway { /** * The hostname/port tuple which the gateway daemon will bind to. If not provided on create, set to "0.0.0.0:listen_address_port". */ bindAddress?: pulumi.Input; /** * Device is a read only device name uploaded by the gateway process when it comes online. */ device?: pulumi.Input; /** * GatewayFilter can be used to restrict the peering between relays and gateways. Deprecated. */ gatewayFilter?: pulumi.Input; /** * The public hostname/port tuple at which the gateway will be accessible to clients. */ listenAddress: pulumi.Input; /** * Location is a read only network location uploaded by the gateway process when it comes online. */ location?: pulumi.Input; /** * Maintenance Windows define when this node is allowed to restart. If a node is requested to restart, it will check each window to determine if any of them permit it to restart, and if any do, it will. This check is repeated per window until the restart is successfully completed. If not set here, may be set on the command line or via an environment variable on the process itself; any server setting will take precedence over local settings. This setting is ineffective for nodes below version 38.44.0. If this setting is not applied via this remote configuration or via local configuration, the default setting is used: always allow restarts if serving no connections, and allow a restart even if serving connections between 7-8 UTC, any day. */ maintenanceWindows?: pulumi.Input[]>; /** * Unique human-readable name of the Relay. Node names must include only letters, numbers, and hyphens (no spaces, underscores, or other special characters). Generated if not provided on create. */ name?: pulumi.Input; /** * Tags is a map of key, value pairs. */ tags?: pulumi.Input<{ [key: string]: pulumi.Input; }>; token?: pulumi.Input; /** * Version is a read only sdm binary version uploaded by the gateway process when it comes online. */ version?: pulumi.Input; } export interface NodeGatewayMaintenanceWindow { cronSchedule: pulumi.Input; requireIdleness: pulumi.Input; } export interface NodeProxyCluster { /** * The public hostname/port tuple at which the proxy cluster will be accessible to clients. */ address: pulumi.Input; /** * Maintenance Windows define when this node is allowed to restart. If a node is requested to restart, it will check each window to determine if any of them permit it to restart, and if any do, it will. This check is repeated per window until the restart is successfully completed. If not set here, may be set on the command line or via an environment variable on the process itself; any server setting will take precedence over local settings. This setting is ineffective for nodes below version 38.44.0. If this setting is not applied via this remote configuration or via local configuration, the default setting is used: always allow restarts if serving no connections, and allow a restart even if serving connections between 7-8 UTC, any day. */ maintenanceWindows?: pulumi.Input[]>; /** * Unique human-readable name of the Relay. Node names must include only letters, numbers, and hyphens (no spaces, underscores, or other special characters). Generated if not provided on create. */ name?: pulumi.Input; /** * Tags is a map of key, value pairs. */ tags?: pulumi.Input<{ [key: string]: pulumi.Input; }>; } export interface NodeProxyClusterMaintenanceWindow { cronSchedule: pulumi.Input; requireIdleness: pulumi.Input; } export interface NodeRelay { /** * Device is a read only device name uploaded by the gateway process when it comes online. */ device?: pulumi.Input; /** * GatewayFilter can be used to restrict the peering between relays and gateways. Deprecated. */ gatewayFilter?: pulumi.Input; /** * Location is a read only network location uploaded by the gateway process when it comes online. */ location?: pulumi.Input; /** * Maintenance Windows define when this node is allowed to restart. If a node is requested to restart, it will check each window to determine if any of them permit it to restart, and if any do, it will. This check is repeated per window until the restart is successfully completed. If not set here, may be set on the command line or via an environment variable on the process itself; any server setting will take precedence over local settings. This setting is ineffective for nodes below version 38.44.0. If this setting is not applied via this remote configuration or via local configuration, the default setting is used: always allow restarts if serving no connections, and allow a restart even if serving connections between 7-8 UTC, any day. */ maintenanceWindows?: pulumi.Input[]>; /** * Unique human-readable name of the Relay. Node names must include only letters, numbers, and hyphens (no spaces, underscores, or other special characters). Generated if not provided on create. */ name?: pulumi.Input; /** * Tags is a map of key, value pairs. */ tags?: pulumi.Input<{ [key: string]: pulumi.Input; }>; token?: pulumi.Input; /** * Version is a read only sdm binary version uploaded by the gateway process when it comes online. */ version?: pulumi.Input; } export interface NodeRelayMaintenanceWindow { cronSchedule: pulumi.Input; requireIdleness: pulumi.Input; } export interface ResourceAerospike { /** * The bind interface is the IP address to which the port override of a resource is bound (for example, 127.0.0.1). It is automatically generated if not provided and may also be set to one of the ResourceIPAllocationMode constants to select between VNM, loopback, or default allocation. */ bindInterface?: pulumi.Input; /** * A filter applied to the routing logic to pin datasource to nodes. */ egressFilter?: pulumi.Input; /** * The host to dial to initiate a connection from the egress node to this resource. */ hostname: pulumi.Input; /** * Unique human-readable name of the Resource. */ name: pulumi.Input; /** * The password to authenticate with. */ password?: pulumi.Input; /** * The port to dial to initiate a connection from the egress node to this resource. */ port?: pulumi.Input; /** * The local port used by clients to connect to this resource. It is automatically generated if not provided on create and may be re-generated on update by specifying a value of -1. */ portOverride?: pulumi.Input; /** * ID of the proxy cluster for this resource, if any. */ proxyClusterId?: pulumi.Input; /** * ID of the secret store containing credentials for this resource, if any. */ secretStoreId?: pulumi.Input; /** * Subdomain is the local DNS address. (e.g. app-prod1 turns into app-prod1.your-org-name.sdm.network) */ subdomain?: pulumi.Input; /** * Tags is a map of key, value pairs. */ tags?: pulumi.Input<{ [key: string]: pulumi.Input; }>; /** * If true, uses UseServicesAlternates directive for Aerospike connection */ useServicesAlternate?: pulumi.Input; /** * The username to authenticate with. */ username?: pulumi.Input; } export interface ResourceAks { /** * If true, allows users to fallback to the existing authentication mode (Leased Credential or Identity Set) when a resource role is not provided. */ allowResourceRoleBypass?: pulumi.Input; /** * The bind interface is the IP address to which the port override of a resource is bound (for example, 127.0.0.1). It is automatically generated if not provided and may also be set to one of the ResourceIPAllocationMode constants to select between VNM, loopback, or default allocation. */ bindInterface?: pulumi.Input; /** * The CA to authenticate TLS connections with. */ certificateAuthority?: pulumi.Input; /** * The certificate to authenticate TLS connections with. */ clientCertificate?: pulumi.Input; /** * The key to authenticate TLS connections with. */ clientKey?: pulumi.Input; /** * If true, configures discovery of a cluster to be run from a node. */ discoveryEnabled?: pulumi.Input; /** * If a cluster is configured for user impersonation, this is the user to impersonate when running discovery. */ discoveryUsername?: pulumi.Input; /** * A filter applied to the routing logic to pin datasource to nodes. */ egressFilter?: pulumi.Input; /** * The path used to check the health of your connection. Defaults to `default`. This field is required, and is only marked as optional for backwards compatibility. */ healthcheckNamespace?: pulumi.Input; /** * The host to dial to initiate a connection from the egress node to this resource. */ hostname: pulumi.Input; /** * The username to use for healthchecks, when clients otherwise connect with their own identity alias username. */ identityAliasHealthcheckUsername?: pulumi.Input; /** * The ID of the identity set to use for identity connections. */ identitySetId?: pulumi.Input; /** * Unique human-readable name of the Resource. */ name: pulumi.Input; /** * The port to dial to initiate a connection from the egress node to this resource. */ port: pulumi.Input; /** * The local port used by clients to connect to this resource. It is automatically generated if not provided on create and may be re-generated on update by specifying a value of -1. */ portOverride?: pulumi.Input; /** * ID of the proxy cluster for this resource, if any. */ proxyClusterId?: pulumi.Input; /** * ID of the secret store containing credentials for this resource, if any. */ secretStoreId?: pulumi.Input; /** * Subdomain is the local DNS address. (e.g. app-prod1 turns into app-prod1.your-org-name.sdm.network) */ subdomain?: pulumi.Input; /** * Tags is a map of key, value pairs. */ tags?: pulumi.Input<{ [key: string]: pulumi.Input; }>; } export interface ResourceAksBasicAuth { /** * The bind interface is the IP address to which the port override of a resource is bound (for example, 127.0.0.1). It is automatically generated if not provided and may also be set to one of the ResourceIPAllocationMode constants to select between VNM, loopback, or default allocation. */ bindInterface?: pulumi.Input; /** * A filter applied to the routing logic to pin datasource to nodes. */ egressFilter?: pulumi.Input; /** * The path used to check the health of your connection. Defaults to `default`. This field is required, and is only marked as optional for backwards compatibility. */ healthcheckNamespace?: pulumi.Input; /** * The host to dial to initiate a connection from the egress node to this resource. */ hostname: pulumi.Input; /** * Unique human-readable name of the Resource. */ name: pulumi.Input; /** * The password to authenticate with. */ password?: pulumi.Input; /** * The port to dial to initiate a connection from the egress node to this resource. */ port: pulumi.Input; /** * The local port used by clients to connect to this resource. It is automatically generated if not provided on create and may be re-generated on update by specifying a value of -1. */ portOverride?: pulumi.Input; /** * ID of the proxy cluster for this resource, if any. */ proxyClusterId?: pulumi.Input; /** * ID of the secret store containing credentials for this resource, if any. */ secretStoreId?: pulumi.Input; /** * Subdomain is the local DNS address. (e.g. app-prod1 turns into app-prod1.your-org-name.sdm.network) */ subdomain?: pulumi.Input; /** * Tags is a map of key, value pairs. */ tags?: pulumi.Input<{ [key: string]: pulumi.Input; }>; /** * The username to authenticate with. */ username?: pulumi.Input; } export interface ResourceAksServiceAccount { /** * If true, allows users to fallback to the existing authentication mode (Leased Credential or Identity Set) when a resource role is not provided. */ allowResourceRoleBypass?: pulumi.Input; /** * The bind interface is the IP address to which the port override of a resource is bound (for example, 127.0.0.1). It is automatically generated if not provided and may also be set to one of the ResourceIPAllocationMode constants to select between VNM, loopback, or default allocation. */ bindInterface?: pulumi.Input; /** * If true, configures discovery of a cluster to be run from a node. */ discoveryEnabled?: pulumi.Input; /** * If a cluster is configured for user impersonation, this is the user to impersonate when running discovery. */ discoveryUsername?: pulumi.Input; /** * A filter applied to the routing logic to pin datasource to nodes. */ egressFilter?: pulumi.Input; /** * The path used to check the health of your connection. Defaults to `default`. This field is required, and is only marked as optional for backwards compatibility. */ healthcheckNamespace?: pulumi.Input; /** * The host to dial to initiate a connection from the egress node to this resource. */ hostname: pulumi.Input; /** * The username to use for healthchecks, when clients otherwise connect with their own identity alias username. */ identityAliasHealthcheckUsername?: pulumi.Input; /** * The ID of the identity set to use for identity connections. */ identitySetId?: pulumi.Input; /** * Unique human-readable name of the Resource. */ name: pulumi.Input; /** * The port to dial to initiate a connection from the egress node to this resource. */ port: pulumi.Input; /** * The local port used by clients to connect to this resource. It is automatically generated if not provided on create and may be re-generated on update by specifying a value of -1. */ portOverride?: pulumi.Input; /** * ID of the proxy cluster for this resource, if any. */ proxyClusterId?: pulumi.Input; /** * ID of the secret store containing credentials for this resource, if any. */ secretStoreId?: pulumi.Input; /** * Subdomain is the local DNS address. (e.g. app-prod1 turns into app-prod1.your-org-name.sdm.network) */ subdomain?: pulumi.Input; /** * Tags is a map of key, value pairs. */ tags?: pulumi.Input<{ [key: string]: pulumi.Input; }>; /** * The API token to authenticate with. * * kubernetes_user_impersonation: */ token?: pulumi.Input; } export interface ResourceAksServiceAccountUserImpersonation { /** * The bind interface is the IP address to which the port override of a resource is bound (for example, 127.0.0.1). It is automatically generated if not provided and may also be set to one of the ResourceIPAllocationMode constants to select between VNM, loopback, or default allocation. */ bindInterface?: pulumi.Input; /** * A filter applied to the routing logic to pin datasource to nodes. */ egressFilter?: pulumi.Input; /** * The path used to check the health of your connection. Defaults to `default`. This field is required, and is only marked as optional for backwards compatibility. */ healthcheckNamespace?: pulumi.Input; /** * The host to dial to initiate a connection from the egress node to this resource. */ hostname: pulumi.Input; /** * Unique human-readable name of the Resource. */ name: pulumi.Input; /** * The port to dial to initiate a connection from the egress node to this resource. */ port: pulumi.Input; /** * The local port used by clients to connect to this resource. It is automatically generated if not provided on create and may be re-generated on update by specifying a value of -1. */ portOverride?: pulumi.Input; /** * ID of the proxy cluster for this resource, if any. */ proxyClusterId?: pulumi.Input; /** * ID of the secret store containing credentials for this resource, if any. */ secretStoreId?: pulumi.Input; /** * Subdomain is the local DNS address. (e.g. app-prod1 turns into app-prod1.your-org-name.sdm.network) */ subdomain?: pulumi.Input; /** * Tags is a map of key, value pairs. */ tags?: pulumi.Input<{ [key: string]: pulumi.Input; }>; /** * The API token to authenticate with. * * kubernetes_user_impersonation: */ token?: pulumi.Input; } export interface ResourceAksUserImpersonation { /** * The bind interface is the IP address to which the port override of a resource is bound (for example, 127.0.0.1). It is automatically generated if not provided and may also be set to one of the ResourceIPAllocationMode constants to select between VNM, loopback, or default allocation. */ bindInterface?: pulumi.Input; /** * The CA to authenticate TLS connections with. */ certificateAuthority?: pulumi.Input; /** * The certificate to authenticate TLS connections with. */ clientCertificate?: pulumi.Input; /** * The key to authenticate TLS connections with. */ clientKey?: pulumi.Input; /** * A filter applied to the routing logic to pin datasource to nodes. */ egressFilter?: pulumi.Input; /** * The path used to check the health of your connection. Defaults to `default`. This field is required, and is only marked as optional for backwards compatibility. */ healthcheckNamespace?: pulumi.Input; /** * The host to dial to initiate a connection from the egress node to this resource. */ hostname: pulumi.Input; /** * Unique human-readable name of the Resource. */ name: pulumi.Input; /** * The port to dial to initiate a connection from the egress node to this resource. */ port: pulumi.Input; /** * The local port used by clients to connect to this resource. It is automatically generated if not provided on create and may be re-generated on update by specifying a value of -1. */ portOverride?: pulumi.Input; /** * ID of the proxy cluster for this resource, if any. */ proxyClusterId?: pulumi.Input; /** * ID of the secret store containing credentials for this resource, if any. */ secretStoreId?: pulumi.Input; /** * Subdomain is the local DNS address. (e.g. app-prod1 turns into app-prod1.your-org-name.sdm.network) */ subdomain?: pulumi.Input; /** * Tags is a map of key, value pairs. */ tags?: pulumi.Input<{ [key: string]: pulumi.Input; }>; } export interface ResourceAmazonEks { /** * The Access Key ID to use to authenticate. */ accessKey?: pulumi.Input; /** * If true, allows users to fallback to the existing authentication mode (Leased Credential or Identity Set) when a resource role is not provided. */ allowResourceRoleBypass?: pulumi.Input; /** * The bind interface is the IP address to which the port override of a resource is bound (for example, 127.0.0.1). It is automatically generated if not provided and may also be set to one of the ResourceIPAllocationMode constants to select between VNM, loopback, or default allocation. */ bindInterface?: pulumi.Input; /** * The CA to authenticate TLS connections with. */ certificateAuthority?: pulumi.Input; /** * The name of the cluster to connect to. */ clusterName: pulumi.Input; /** * If true, configures discovery of a cluster to be run from a node. */ discoveryEnabled?: pulumi.Input; /** * If a cluster is configured for user impersonation, this is the user to impersonate when running discovery. */ discoveryUsername?: pulumi.Input; /** * A filter applied to the routing logic to pin datasource to nodes. */ egressFilter?: pulumi.Input; /** * The neptune endpoint to connect to as in endpoint.region.neptune.amazonaws.com */ endpoint: pulumi.Input; /** * The path used to check the health of your connection. Defaults to `default`. This field is required, and is only marked as optional for backwards compatibility. */ healthcheckNamespace?: pulumi.Input; /** * The username to use for healthchecks, when clients otherwise connect with their own identity alias username. */ identityAliasHealthcheckUsername?: pulumi.Input; /** * The ID of the identity set to use for identity connections. */ identitySetId?: pulumi.Input; /** * Unique human-readable name of the Resource. */ name: pulumi.Input; /** * The local port used by clients to connect to this resource. It is automatically generated if not provided on create and may be re-generated on update by specifying a value of -1. */ portOverride?: pulumi.Input; /** * ID of the proxy cluster for this resource, if any. */ proxyClusterId?: pulumi.Input; /** * The AWS region to connect to. */ region: pulumi.Input; /** * The role to assume after logging in. */ roleArn?: pulumi.Input; /** * The external ID to associate with assume role requests. Does nothing if a role ARN is not provided. */ roleExternalId?: pulumi.Input; /** * The Secret Access Key to use to authenticate. */ secretAccessKey?: pulumi.Input; /** * ID of the secret store containing credentials for this resource, if any. */ secretStoreId?: pulumi.Input; /** * Subdomain is the local DNS address. (e.g. app-prod1 turns into app-prod1.your-org-name.sdm.network) */ subdomain?: pulumi.Input; /** * Tags is a map of key, value pairs. */ tags?: pulumi.Input<{ [key: string]: pulumi.Input; }>; } export interface ResourceAmazonEksInstanceProfile { /** * If true, allows users to fallback to the existing authentication mode (Leased Credential or Identity Set) when a resource role is not provided. */ allowResourceRoleBypass?: pulumi.Input; /** * The bind interface is the IP address to which the port override of a resource is bound (for example, 127.0.0.1). It is automatically generated if not provided and may also be set to one of the ResourceIPAllocationMode constants to select between VNM, loopback, or default allocation. */ bindInterface?: pulumi.Input; /** * The CA to authenticate TLS connections with. */ certificateAuthority?: pulumi.Input; /** * The name of the cluster to connect to. */ clusterName: pulumi.Input; /** * If true, configures discovery of a cluster to be run from a node. */ discoveryEnabled?: pulumi.Input; /** * If a cluster is configured for user impersonation, this is the user to impersonate when running discovery. */ discoveryUsername?: pulumi.Input; /** * A filter applied to the routing logic to pin datasource to nodes. */ egressFilter?: pulumi.Input; /** * The neptune endpoint to connect to as in endpoint.region.neptune.amazonaws.com */ endpoint: pulumi.Input; /** * The path used to check the health of your connection. Defaults to `default`. This field is required, and is only marked as optional for backwards compatibility. */ healthcheckNamespace?: pulumi.Input; /** * The username to use for healthchecks, when clients otherwise connect with their own identity alias username. */ identityAliasHealthcheckUsername?: pulumi.Input; /** * The ID of the identity set to use for identity connections. */ identitySetId?: pulumi.Input; /** * Unique human-readable name of the Resource. */ name: pulumi.Input; /** * The local port used by clients to connect to this resource. It is automatically generated if not provided on create and may be re-generated on update by specifying a value of -1. */ portOverride?: pulumi.Input; /** * ID of the proxy cluster for this resource, if any. */ proxyClusterId?: pulumi.Input; /** * The AWS region to connect to. */ region: pulumi.Input; /** * The role to assume after logging in. */ roleArn?: pulumi.Input; /** * The external ID to associate with assume role requests. Does nothing if a role ARN is not provided. */ roleExternalId?: pulumi.Input; /** * ID of the secret store containing credentials for this resource, if any. */ secretStoreId?: pulumi.Input; /** * Subdomain is the local DNS address. (e.g. app-prod1 turns into app-prod1.your-org-name.sdm.network) */ subdomain?: pulumi.Input; /** * Tags is a map of key, value pairs. */ tags?: pulumi.Input<{ [key: string]: pulumi.Input; }>; } export interface ResourceAmazonEksInstanceProfileUserImpersonation { /** * The bind interface is the IP address to which the port override of a resource is bound (for example, 127.0.0.1). It is automatically generated if not provided and may also be set to one of the ResourceIPAllocationMode constants to select between VNM, loopback, or default allocation. */ bindInterface?: pulumi.Input; /** * The CA to authenticate TLS connections with. */ certificateAuthority?: pulumi.Input; /** * The name of the cluster to connect to. */ clusterName: pulumi.Input; /** * A filter applied to the routing logic to pin datasource to nodes. */ egressFilter?: pulumi.Input; /** * The neptune endpoint to connect to as in endpoint.region.neptune.amazonaws.com */ endpoint: pulumi.Input; /** * The path used to check the health of your connection. Defaults to `default`. This field is required, and is only marked as optional for backwards compatibility. */ healthcheckNamespace?: pulumi.Input; /** * Unique human-readable name of the Resource. */ name: pulumi.Input; /** * The local port used by clients to connect to this resource. It is automatically generated if not provided on create and may be re-generated on update by specifying a value of -1. */ portOverride?: pulumi.Input; /** * ID of the proxy cluster for this resource, if any. */ proxyClusterId?: pulumi.Input; /** * The AWS region to connect to. */ region: pulumi.Input; /** * The role to assume after logging in. */ roleArn?: pulumi.Input; /** * The external ID to associate with assume role requests. Does nothing if a role ARN is not provided. */ roleExternalId?: pulumi.Input; /** * ID of the secret store containing credentials for this resource, if any. */ secretStoreId?: pulumi.Input; /** * Subdomain is the local DNS address. (e.g. app-prod1 turns into app-prod1.your-org-name.sdm.network) */ subdomain?: pulumi.Input; /** * Tags is a map of key, value pairs. */ tags?: pulumi.Input<{ [key: string]: pulumi.Input; }>; } export interface ResourceAmazonEksUserImpersonation { /** * The Access Key ID to use to authenticate. */ accessKey?: pulumi.Input; /** * The bind interface is the IP address to which the port override of a resource is bound (for example, 127.0.0.1). It is automatically generated if not provided and may also be set to one of the ResourceIPAllocationMode constants to select between VNM, loopback, or default allocation. */ bindInterface?: pulumi.Input; /** * The CA to authenticate TLS connections with. */ certificateAuthority?: pulumi.Input; /** * The name of the cluster to connect to. */ clusterName: pulumi.Input; /** * A filter applied to the routing logic to pin datasource to nodes. */ egressFilter?: pulumi.Input; /** * The neptune endpoint to connect to as in endpoint.region.neptune.amazonaws.com */ endpoint: pulumi.Input; /** * The path used to check the health of your connection. Defaults to `default`. This field is required, and is only marked as optional for backwards compatibility. */ healthcheckNamespace?: pulumi.Input; /** * Unique human-readable name of the Resource. */ name: pulumi.Input; /** * The local port used by clients to connect to this resource. It is automatically generated if not provided on create and may be re-generated on update by specifying a value of -1. */ portOverride?: pulumi.Input; /** * ID of the proxy cluster for this resource, if any. */ proxyClusterId?: pulumi.Input; /** * The AWS region to connect to. */ region: pulumi.Input; /** * The role to assume after logging in. */ roleArn?: pulumi.Input; /** * The external ID to associate with assume role requests. Does nothing if a role ARN is not provided. */ roleExternalId?: pulumi.Input; /** * The Secret Access Key to use to authenticate. */ secretAccessKey?: pulumi.Input; /** * ID of the secret store containing credentials for this resource, if any. */ secretStoreId?: pulumi.Input; /** * Subdomain is the local DNS address. (e.g. app-prod1 turns into app-prod1.your-org-name.sdm.network) */ subdomain?: pulumi.Input; /** * Tags is a map of key, value pairs. */ tags?: pulumi.Input<{ [key: string]: pulumi.Input; }>; } export interface ResourceAmazonEs { /** * The Access Key ID to use to authenticate. */ accessKey?: pulumi.Input; /** * The bind interface is the IP address to which the port override of a resource is bound (for example, 127.0.0.1). It is automatically generated if not provided and may also be set to one of the ResourceIPAllocationMode constants to select between VNM, loopback, or default allocation. */ bindInterface?: pulumi.Input; /** * A filter applied to the routing logic to pin datasource to nodes. */ egressFilter?: pulumi.Input; /** * The neptune endpoint to connect to as in endpoint.region.neptune.amazonaws.com */ endpoint?: pulumi.Input; /** * Unique human-readable name of the Resource. */ name: pulumi.Input; /** * The local port used by clients to connect to this resource. It is automatically generated if not provided on create and may be re-generated on update by specifying a value of -1. */ portOverride?: pulumi.Input; /** * ID of the proxy cluster for this resource, if any. */ proxyClusterId?: pulumi.Input; /** * The AWS region to connect to. */ region: pulumi.Input; /** * The role to assume after logging in. */ roleArn?: pulumi.Input; /** * The external ID to associate with assume role requests. Does nothing if a role ARN is not provided. */ roleExternalId?: pulumi.Input; /** * The Secret Access Key to use to authenticate. */ secretAccessKey?: pulumi.Input; /** * ID of the secret store containing credentials for this resource, if any. */ secretStoreId?: pulumi.Input; /** * Subdomain is the local DNS address. (e.g. app-prod1 turns into app-prod1.your-org-name.sdm.network) */ subdomain?: pulumi.Input; /** * Tags is a map of key, value pairs. */ tags?: pulumi.Input<{ [key: string]: pulumi.Input; }>; } export interface ResourceAmazonEsiam { /** * The bind interface is the IP address to which the port override of a resource is bound (for example, 127.0.0.1). It is automatically generated if not provided and may also be set to one of the ResourceIPAllocationMode constants to select between VNM, loopback, or default allocation. */ bindInterface?: pulumi.Input; /** * A filter applied to the routing logic to pin datasource to nodes. */ egressFilter?: pulumi.Input; /** * The neptune endpoint to connect to as in endpoint.region.neptune.amazonaws.com */ endpoint: pulumi.Input; /** * Unique human-readable name of the Resource. */ name: pulumi.Input; /** * The local port used by clients to connect to this resource. It is automatically generated if not provided on create and may be re-generated on update by specifying a value of -1. */ portOverride?: pulumi.Input; /** * ID of the proxy cluster for this resource, if any. */ proxyClusterId?: pulumi.Input; /** * The AWS region to connect to. */ region: pulumi.Input; /** * The role to assume after logging in. */ roleArn?: pulumi.Input; /** * The external ID to associate with assume role requests. Does nothing if a role ARN is not provided. */ roleExternalId?: pulumi.Input; /** * ID of the secret store containing credentials for this resource, if any. */ secretStoreId?: pulumi.Input; /** * Subdomain is the local DNS address. (e.g. app-prod1 turns into app-prod1.your-org-name.sdm.network) */ subdomain?: pulumi.Input; /** * Tags is a map of key, value pairs. */ tags?: pulumi.Input<{ [key: string]: pulumi.Input; }>; /** * If set, TLS must be used to connect to this resource. */ tlsRequired?: pulumi.Input; } export interface ResourceAmazonmqAmqp { /** * The bind interface is the IP address to which the port override of a resource is bound (for example, 127.0.0.1). It is automatically generated if not provided and may also be set to one of the ResourceIPAllocationMode constants to select between VNM, loopback, or default allocation. */ bindInterface?: pulumi.Input; /** * A filter applied to the routing logic to pin datasource to nodes. */ egressFilter?: pulumi.Input; /** * The host to dial to initiate a connection from the egress node to this resource. */ hostname: pulumi.Input; /** * Unique human-readable name of the Resource. */ name: pulumi.Input; /** * The password to authenticate with. */ password?: pulumi.Input; /** * The port to dial to initiate a connection from the egress node to this resource. */ port?: pulumi.Input; /** * The local port used by clients to connect to this resource. It is automatically generated if not provided on create and may be re-generated on update by specifying a value of -1. */ portOverride?: pulumi.Input; /** * ID of the proxy cluster for this resource, if any. */ proxyClusterId?: pulumi.Input; /** * ID of the secret store containing credentials for this resource, if any. */ secretStoreId?: pulumi.Input; /** * Subdomain is the local DNS address. (e.g. app-prod1 turns into app-prod1.your-org-name.sdm.network) */ subdomain?: pulumi.Input; /** * Tags is a map of key, value pairs. */ tags?: pulumi.Input<{ [key: string]: pulumi.Input; }>; /** * If set, TLS must be used to connect to this resource. */ tlsRequired?: pulumi.Input; /** * The username to authenticate with. */ username?: pulumi.Input; } export interface ResourceAmazonmqAmqp091 { /** * The bind interface is the IP address to which the port override of a resource is bound (for example, 127.0.0.1). It is automatically generated if not provided and may also be set to one of the ResourceIPAllocationMode constants to select between VNM, loopback, or default allocation. */ bindInterface?: pulumi.Input; /** * A filter applied to the routing logic to pin datasource to nodes. */ egressFilter?: pulumi.Input; /** * The host to dial to initiate a connection from the egress node to this resource. */ hostname: pulumi.Input; /** * Unique human-readable name of the Resource. */ name: pulumi.Input; /** * The password to authenticate with. */ password?: pulumi.Input; /** * The port to dial to initiate a connection from the egress node to this resource. */ port?: pulumi.Input; /** * The local port used by clients to connect to this resource. It is automatically generated if not provided on create and may be re-generated on update by specifying a value of -1. */ portOverride?: pulumi.Input; /** * ID of the proxy cluster for this resource, if any. */ proxyClusterId?: pulumi.Input; /** * ID of the secret store containing credentials for this resource, if any. */ secretStoreId?: pulumi.Input; /** * Subdomain is the local DNS address. (e.g. app-prod1 turns into app-prod1.your-org-name.sdm.network) */ subdomain?: pulumi.Input; /** * Tags is a map of key, value pairs. */ tags?: pulumi.Input<{ [key: string]: pulumi.Input; }>; /** * If set, TLS must be used to connect to this resource. */ tlsRequired?: pulumi.Input; /** * The username to authenticate with. */ username?: pulumi.Input; } export interface ResourceAthena { /** * The Access Key ID to use to authenticate. */ accessKey?: pulumi.Input; /** * The AWS S3 output location. */ athenaOutput: pulumi.Input; /** * The bind interface is the IP address to which the port override of a resource is bound (for example, 127.0.0.1). It is automatically generated if not provided and may also be set to one of the ResourceIPAllocationMode constants to select between VNM, loopback, or default allocation. */ bindInterface?: pulumi.Input; /** * A filter applied to the routing logic to pin datasource to nodes. */ egressFilter?: pulumi.Input; /** * Unique human-readable name of the Resource. */ name: pulumi.Input; /** * The local port used by clients to connect to this resource. It is automatically generated if not provided on create and may be re-generated on update by specifying a value of -1. */ portOverride?: pulumi.Input; /** * ID of the proxy cluster for this resource, if any. */ proxyClusterId?: pulumi.Input; /** * The AWS region to connect to. */ region?: pulumi.Input; /** * The role to assume after logging in. */ roleArn?: pulumi.Input; /** * The external ID to associate with assume role requests. Does nothing if a role ARN is not provided. */ roleExternalId?: pulumi.Input; /** * The Secret Access Key to use to authenticate. */ secretAccessKey?: pulumi.Input; /** * ID of the secret store containing credentials for this resource, if any. */ secretStoreId?: pulumi.Input; /** * Subdomain is the local DNS address. (e.g. app-prod1 turns into app-prod1.your-org-name.sdm.network) */ subdomain?: pulumi.Input; /** * Tags is a map of key, value pairs. */ tags?: pulumi.Input<{ [key: string]: pulumi.Input; }>; } export interface ResourceAthenaIam { /** * The bind interface is the IP address to which the port override of a resource is bound (for example, 127.0.0.1). It is automatically generated if not provided and may also be set to one of the ResourceIPAllocationMode constants to select between VNM, loopback, or default allocation. */ bindInterface?: pulumi.Input; /** * A filter applied to the routing logic to pin datasource to nodes. */ egressFilter?: pulumi.Input; /** * Unique human-readable name of the Resource. */ name: pulumi.Input; /** * The AWS S3 output location. */ output: pulumi.Input; /** * The local port used by clients to connect to this resource. It is automatically generated if not provided on create and may be re-generated on update by specifying a value of -1. */ portOverride?: pulumi.Input; /** * ID of the proxy cluster for this resource, if any. */ proxyClusterId?: pulumi.Input; /** * The AWS region to connect to. */ region?: pulumi.Input; /** * The role to assume after logging in. */ roleArn?: pulumi.Input; /** * The external ID to associate with assume role requests. Does nothing if a role ARN is not provided. */ roleExternalId?: pulumi.Input; /** * ID of the secret store containing credentials for this resource, if any. */ secretStoreId?: pulumi.Input; /** * Subdomain is the local DNS address. (e.g. app-prod1 turns into app-prod1.your-org-name.sdm.network) */ subdomain?: pulumi.Input; /** * Tags is a map of key, value pairs. */ tags?: pulumi.Input<{ [key: string]: pulumi.Input; }>; } export interface ResourceAuroraMysql { /** * The bind interface is the IP address to which the port override of a resource is bound (for example, 127.0.0.1). It is automatically generated if not provided and may also be set to one of the ResourceIPAllocationMode constants to select between VNM, loopback, or default allocation. */ bindInterface?: pulumi.Input; /** * The initial database to connect to. This setting does not by itself prevent switching to another database after connecting. */ database?: pulumi.Input; /** * A filter applied to the routing logic to pin datasource to nodes. */ egressFilter?: pulumi.Input; /** * The host to dial to initiate a connection from the egress node to this resource. */ hostname: pulumi.Input; /** * Unique human-readable name of the Resource. */ name: pulumi.Input; /** * The password to authenticate with. */ password?: pulumi.Input; /** * The port to dial to initiate a connection from the egress node to this resource. */ port?: pulumi.Input; /** * The local port used by clients to connect to this resource. It is automatically generated if not provided on create and may be re-generated on update by specifying a value of -1. */ portOverride?: pulumi.Input; /** * ID of the proxy cluster for this resource, if any. */ proxyClusterId?: pulumi.Input; /** * Whether native auth (mysql_native_password) is used for all connections (for backwards compatibility) */ requireNativeAuth?: pulumi.Input; /** * ID of the secret store containing credentials for this resource, if any. */ secretStoreId?: pulumi.Input; /** * Subdomain is the local DNS address. (e.g. app-prod1 turns into app-prod1.your-org-name.sdm.network) */ subdomain?: pulumi.Input; /** * Tags is a map of key, value pairs. */ tags?: pulumi.Input<{ [key: string]: pulumi.Input; }>; /** * If true, appends the hostname to the username when hitting a database.azure.com address */ useAzureSingleServerUsernames?: pulumi.Input; /** * The username to authenticate with. */ username?: pulumi.Input; } export interface ResourceAuroraMysqlIam { /** * The bind interface is the IP address to which the port override of a resource is bound (for example, 127.0.0.1). It is automatically generated if not provided and may also be set to one of the ResourceIPAllocationMode constants to select between VNM, loopback, or default allocation. */ bindInterface?: pulumi.Input; /** * The initial database to connect to. This setting does not by itself prevent switching to another database after connecting. */ database?: pulumi.Input; /** * A filter applied to the routing logic to pin datasource to nodes. */ egressFilter?: pulumi.Input; /** * The host to dial to initiate a connection from the egress node to this resource. */ hostname: pulumi.Input; /** * Unique human-readable name of the Resource. */ name: pulumi.Input; /** * The port to dial to initiate a connection from the egress node to this resource. */ port?: pulumi.Input; /** * The local port used by clients to connect to this resource. It is automatically generated if not provided on create and may be re-generated on update by specifying a value of -1. */ portOverride?: pulumi.Input; /** * ID of the proxy cluster for this resource, if any. */ proxyClusterId?: pulumi.Input; /** * The AWS region to connect to. */ region: pulumi.Input; /** * If provided, the gateway/relay will try to assume this role instead of the underlying compute's role. */ roleAssumptionArn?: pulumi.Input; /** * ID of the secret store containing credentials for this resource, if any. */ secretStoreId?: pulumi.Input; /** * Subdomain is the local DNS address. (e.g. app-prod1 turns into app-prod1.your-org-name.sdm.network) */ subdomain?: pulumi.Input; /** * Tags is a map of key, value pairs. */ tags?: pulumi.Input<{ [key: string]: pulumi.Input; }>; /** * The username to authenticate with. */ username?: pulumi.Input; } export interface ResourceAuroraPostgres { /** * The bind interface is the IP address to which the port override of a resource is bound (for example, 127.0.0.1). It is automatically generated if not provided and may also be set to one of the ResourceIPAllocationMode constants to select between VNM, loopback, or default allocation. */ bindInterface?: pulumi.Input; /** * The initial database to connect to. This setting does not by itself prevent switching to another database after connecting. */ database: pulumi.Input; /** * A filter applied to the routing logic to pin datasource to nodes. */ egressFilter?: pulumi.Input; /** * The host to dial to initiate a connection from the egress node to this resource. */ hostname: pulumi.Input; /** * Unique human-readable name of the Resource. */ name: pulumi.Input; /** * If set, the database configured cannot be changed by users. This setting is not recommended for most use cases, as some clients will insist their database has changed when it has not, leading to user confusion. */ overrideDatabase?: pulumi.Input; /** * The password to authenticate with. */ password?: pulumi.Input; /** * The port to dial to initiate a connection from the egress node to this resource. */ port?: pulumi.Input; /** * The local port used by clients to connect to this resource. It is automatically generated if not provided on create and may be re-generated on update by specifying a value of -1. */ portOverride?: pulumi.Input; /** * ID of the proxy cluster for this resource, if any. */ proxyClusterId?: pulumi.Input; /** * ID of the secret store containing credentials for this resource, if any. */ secretStoreId?: pulumi.Input; /** * Subdomain is the local DNS address. (e.g. app-prod1 turns into app-prod1.your-org-name.sdm.network) */ subdomain?: pulumi.Input; /** * Tags is a map of key, value pairs. */ tags?: pulumi.Input<{ [key: string]: pulumi.Input; }>; /** * The username to authenticate with. */ username?: pulumi.Input; } export interface ResourceAuroraPostgresIam { /** * The bind interface is the IP address to which the port override of a resource is bound (for example, 127.0.0.1). It is automatically generated if not provided and may also be set to one of the ResourceIPAllocationMode constants to select between VNM, loopback, or default allocation. */ bindInterface?: pulumi.Input; /** * The initial database to connect to. This setting does not by itself prevent switching to another database after connecting. */ database: pulumi.Input; /** * A filter applied to the routing logic to pin datasource to nodes. */ egressFilter?: pulumi.Input; /** * The host to dial to initiate a connection from the egress node to this resource. */ hostname: pulumi.Input; /** * Unique human-readable name of the Resource. */ name: pulumi.Input; /** * If set, the database configured cannot be changed by users. This setting is not recommended for most use cases, as some clients will insist their database has changed when it has not, leading to user confusion. */ overrideDatabase?: pulumi.Input; /** * The port to dial to initiate a connection from the egress node to this resource. */ port?: pulumi.Input; /** * The local port used by clients to connect to this resource. It is automatically generated if not provided on create and may be re-generated on update by specifying a value of -1. */ portOverride?: pulumi.Input; /** * ID of the proxy cluster for this resource, if any. */ proxyClusterId?: pulumi.Input; /** * The AWS region to connect to. */ region: pulumi.Input; /** * If provided, the gateway/relay will try to assume this role instead of the underlying compute's role. */ roleAssumptionArn?: pulumi.Input; /** * ID of the secret store containing credentials for this resource, if any. */ secretStoreId?: pulumi.Input; /** * Subdomain is the local DNS address. (e.g. app-prod1 turns into app-prod1.your-org-name.sdm.network) */ subdomain?: pulumi.Input; /** * Tags is a map of key, value pairs. */ tags?: pulumi.Input<{ [key: string]: pulumi.Input; }>; /** * The username to authenticate with. */ username?: pulumi.Input; } export interface ResourceAws { /** * The Access Key ID to use to authenticate. */ accessKey?: pulumi.Input; /** * The bind interface is the IP address to which the port override of a resource is bound (for example, 127.0.0.1). It is automatically generated if not provided and may also be set to one of the ResourceIPAllocationMode constants to select between VNM, loopback, or default allocation. */ bindInterface?: pulumi.Input; /** * A filter applied to the routing logic to pin datasource to nodes. */ egressFilter?: pulumi.Input; /** * The AWS region healthcheck requests should attempt to connect to. */ healthcheckRegion: pulumi.Input; /** * Unique human-readable name of the Resource. */ name: pulumi.Input; /** * The local port used by clients to connect to this resource. It is automatically generated if not provided on create and may be re-generated on update by specifying a value of -1. */ portOverride?: pulumi.Input; /** * ID of the proxy cluster for this resource, if any. */ proxyClusterId?: pulumi.Input; /** * The role to assume after logging in. */ roleArn?: pulumi.Input; /** * The external ID to associate with assume role requests. Does nothing if a role ARN is not provided. */ roleExternalId?: pulumi.Input; /** * The Secret Access Key to use to authenticate. */ secretAccessKey?: pulumi.Input; /** * ID of the secret store containing credentials for this resource, if any. */ secretStoreId?: pulumi.Input; /** * Subdomain is the local DNS address. (e.g. app-prod1 turns into app-prod1.your-org-name.sdm.network) */ subdomain?: pulumi.Input; /** * Tags is a map of key, value pairs. */ tags?: pulumi.Input<{ [key: string]: pulumi.Input; }>; } export interface ResourceAwsConsole { /** * The bind interface is the IP address to which the port override of a resource is bound (for example, 127.0.0.1). It is automatically generated if not provided and may also be set to one of the ResourceIPAllocationMode constants to select between VNM, loopback, or default allocation. */ bindInterface?: pulumi.Input; /** * A filter applied to the routing logic to pin datasource to nodes. */ egressFilter?: pulumi.Input; /** * If true, prefer environment variables to authenticate connection even if EC2 roles are configured. */ enableEnvVariables?: pulumi.Input; /** * The username to use for healthchecks, when clients otherwise connect with their own identity alias username. */ identityAliasHealthcheckUsername?: pulumi.Input; /** * The ID of the identity set to use for identity connections. */ identitySetId?: pulumi.Input; /** * Unique human-readable name of the Resource. */ name: pulumi.Input; /** * The local port used by clients to connect to this resource. It is automatically generated if not provided on create and may be re-generated on update by specifying a value of -1. */ portOverride?: pulumi.Input; /** * ID of the proxy cluster for this resource, if any. */ proxyClusterId?: pulumi.Input; /** * The AWS region to connect to. */ region: pulumi.Input; /** * The role to assume after logging in. */ roleArn?: pulumi.Input; /** * The external ID to associate with assume role requests. Does nothing if a role ARN is not provided. */ roleExternalId?: pulumi.Input; /** * ID of the secret store containing credentials for this resource, if any. */ secretStoreId?: pulumi.Input; /** * The length of time in seconds console sessions will live before needing to reauthenticate. */ sessionExpiry?: pulumi.Input; /** * Subdomain is the local DNS address. (e.g. app-prod1 turns into app-prod1.your-org-name.sdm.network) */ subdomain: pulumi.Input; /** * Tags is a map of key, value pairs. */ tags?: pulumi.Input<{ [key: string]: pulumi.Input; }>; } export interface ResourceAwsConsoleStaticKeyPair { /** * The Access Key ID to use to authenticate. */ accessKey?: pulumi.Input; /** * The bind interface is the IP address to which the port override of a resource is bound (for example, 127.0.0.1). It is automatically generated if not provided and may also be set to one of the ResourceIPAllocationMode constants to select between VNM, loopback, or default allocation. */ bindInterface?: pulumi.Input; /** * A filter applied to the routing logic to pin datasource to nodes. */ egressFilter?: pulumi.Input; /** * The username to use for healthchecks, when clients otherwise connect with their own identity alias username. */ identityAliasHealthcheckUsername?: pulumi.Input; /** * The ID of the identity set to use for identity connections. */ identitySetId?: pulumi.Input; /** * Unique human-readable name of the Resource. */ name: pulumi.Input; /** * The local port used by clients to connect to this resource. It is automatically generated if not provided on create and may be re-generated on update by specifying a value of -1. */ portOverride?: pulumi.Input; /** * ID of the proxy cluster for this resource, if any. */ proxyClusterId?: pulumi.Input; /** * The AWS region to connect to. */ region: pulumi.Input; /** * The role to assume after logging in. */ roleArn?: pulumi.Input; /** * The external ID to associate with assume role requests. Does nothing if a role ARN is not provided. */ roleExternalId?: pulumi.Input; /** * The Secret Access Key to use to authenticate. */ secretAccessKey?: pulumi.Input; /** * ID of the secret store containing credentials for this resource, if any. */ secretStoreId?: pulumi.Input; /** * The length of time in seconds console sessions will live before needing to reauthenticate. */ sessionExpiry?: pulumi.Input; /** * Subdomain is the local DNS address. (e.g. app-prod1 turns into app-prod1.your-org-name.sdm.network) */ subdomain: pulumi.Input; /** * Tags is a map of key, value pairs. */ tags?: pulumi.Input<{ [key: string]: pulumi.Input; }>; } export interface ResourceAwsInstanceProfile { /** * The bind interface is the IP address to which the port override of a resource is bound (for example, 127.0.0.1). It is automatically generated if not provided and may also be set to one of the ResourceIPAllocationMode constants to select between VNM, loopback, or default allocation. */ bindInterface?: pulumi.Input; /** * A filter applied to the routing logic to pin datasource to nodes. */ egressFilter?: pulumi.Input; /** * If true, prefer environment variables to authenticate connection even if EC2 roles are configured. */ enableEnvVariables?: pulumi.Input; /** * Unique human-readable name of the Resource. */ name: pulumi.Input; /** * The local port used by clients to connect to this resource. It is automatically generated if not provided on create and may be re-generated on update by specifying a value of -1. */ portOverride?: pulumi.Input; /** * ID of the proxy cluster for this resource, if any. */ proxyClusterId?: pulumi.Input; /** * The AWS region to connect to. */ region: pulumi.Input; /** * The role to assume after logging in. */ roleArn?: pulumi.Input; /** * The external ID to associate with assume role requests. Does nothing if a role ARN is not provided. */ roleExternalId?: pulumi.Input; /** * ID of the secret store containing credentials for this resource, if any. */ secretStoreId?: pulumi.Input; /** * Subdomain is the local DNS address. (e.g. app-prod1 turns into app-prod1.your-org-name.sdm.network) */ subdomain?: pulumi.Input; /** * Tags is a map of key, value pairs. */ tags?: pulumi.Input<{ [key: string]: pulumi.Input; }>; } export interface ResourceAzure { /** * The application ID to authenticate with. */ appId?: pulumi.Input; /** * The bind interface is the IP address to which the port override of a resource is bound (for example, 127.0.0.1). It is automatically generated if not provided and may also be set to one of the ResourceIPAllocationMode constants to select between VNM, loopback, or default allocation. */ bindInterface?: pulumi.Input; /** * A filter applied to the routing logic to pin datasource to nodes. */ egressFilter?: pulumi.Input; /** * Unique human-readable name of the Resource. */ name: pulumi.Input; /** * The password to authenticate with. */ password?: pulumi.Input; /** * The local port used by clients to connect to this resource. It is automatically generated if not provided on create and may be re-generated on update by specifying a value of -1. */ portOverride?: pulumi.Input; /** * ID of the proxy cluster for this resource, if any. */ proxyClusterId?: pulumi.Input; /** * ID of the secret store containing credentials for this resource, if any. */ secretStoreId?: pulumi.Input; /** * Subdomain is the local DNS address. (e.g. app-prod1 turns into app-prod1.your-org-name.sdm.network) */ subdomain?: pulumi.Input; /** * Tags is a map of key, value pairs. */ tags?: pulumi.Input<{ [key: string]: pulumi.Input; }>; /** * The Azure AD directory (tenant) ID with which to authenticate. * * sql_server_kerberos_ad: */ tenantId?: pulumi.Input; } export interface ResourceAzureCertificate { /** * The application ID to authenticate with. */ appId?: pulumi.Input; /** * The bind interface is the IP address to which the port override of a resource is bound (for example, 127.0.0.1). It is automatically generated if not provided and may also be set to one of the ResourceIPAllocationMode constants to select between VNM, loopback, or default allocation. */ bindInterface?: pulumi.Input; /** * The certificate to authenticate TLS connections with. */ clientCertificate?: pulumi.Input; /** * A filter applied to the routing logic to pin datasource to nodes. */ egressFilter?: pulumi.Input; /** * Unique human-readable name of the Resource. */ name: pulumi.Input; /** * The local port used by clients to connect to this resource. It is automatically generated if not provided on create and may be re-generated on update by specifying a value of -1. */ portOverride?: pulumi.Input; /** * ID of the proxy cluster for this resource, if any. */ proxyClusterId?: pulumi.Input; /** * ID of the secret store containing credentials for this resource, if any. */ secretStoreId?: pulumi.Input; /** * Subdomain is the local DNS address. (e.g. app-prod1 turns into app-prod1.your-org-name.sdm.network) */ subdomain?: pulumi.Input; /** * Tags is a map of key, value pairs. */ tags?: pulumi.Input<{ [key: string]: pulumi.Input; }>; /** * The Azure AD directory (tenant) ID with which to authenticate. * * sql_server_kerberos_ad: */ tenantId?: pulumi.Input; } export interface ResourceAzureMysql { /** * The bind interface is the IP address to which the port override of a resource is bound (for example, 127.0.0.1). It is automatically generated if not provided and may also be set to one of the ResourceIPAllocationMode constants to select between VNM, loopback, or default allocation. */ bindInterface?: pulumi.Input; /** * The initial database to connect to. This setting does not by itself prevent switching to another database after connecting. */ database?: pulumi.Input; /** * A filter applied to the routing logic to pin datasource to nodes. */ egressFilter?: pulumi.Input; /** * The host to dial to initiate a connection from the egress node to this resource. */ hostname: pulumi.Input; /** * Unique human-readable name of the Resource. */ name: pulumi.Input; /** * The password to authenticate with. */ password?: pulumi.Input; /** * The port to dial to initiate a connection from the egress node to this resource. */ port?: pulumi.Input; /** * The local port used by clients to connect to this resource. It is automatically generated if not provided on create and may be re-generated on update by specifying a value of -1. */ portOverride?: pulumi.Input; /** * ID of the proxy cluster for this resource, if any. */ proxyClusterId?: pulumi.Input; /** * Whether native auth (mysql_native_password) is used for all connections (for backwards compatibility) */ requireNativeAuth?: pulumi.Input; /** * ID of the secret store containing credentials for this resource, if any. */ secretStoreId?: pulumi.Input; /** * Subdomain is the local DNS address. (e.g. app-prod1 turns into app-prod1.your-org-name.sdm.network) */ subdomain?: pulumi.Input; /** * Tags is a map of key, value pairs. */ tags?: pulumi.Input<{ [key: string]: pulumi.Input; }>; /** * If true, appends the hostname to the username when hitting a database.azure.com address */ useAzureSingleServerUsernames?: pulumi.Input; /** * The username to authenticate with. */ username?: pulumi.Input; } export interface ResourceAzureMysqlManagedIdentity { /** * The bind interface is the IP address to which the port override of a resource is bound (for example, 127.0.0.1). It is automatically generated if not provided and may also be set to one of the ResourceIPAllocationMode constants to select between VNM, loopback, or default allocation. */ bindInterface?: pulumi.Input; /** * The initial database to connect to. This setting does not by itself prevent switching to another database after connecting. */ database?: pulumi.Input; /** * A filter applied to the routing logic to pin datasource to nodes. */ egressFilter?: pulumi.Input; /** * The host to dial to initiate a connection from the egress node to this resource. */ hostname: pulumi.Input; /** * Unique human-readable name of the Resource. */ name: pulumi.Input; /** * The password to authenticate with. */ password?: pulumi.Input; /** * The port to dial to initiate a connection from the egress node to this resource. */ port?: pulumi.Input; /** * The local port used by clients to connect to this resource. It is automatically generated if not provided on create and may be re-generated on update by specifying a value of -1. */ portOverride?: pulumi.Input; /** * ID of the proxy cluster for this resource, if any. */ proxyClusterId?: pulumi.Input; /** * ID of the secret store containing credentials for this resource, if any. */ secretStoreId?: pulumi.Input; /** * Subdomain is the local DNS address. (e.g. app-prod1 turns into app-prod1.your-org-name.sdm.network) */ subdomain?: pulumi.Input; /** * Tags is a map of key, value pairs. */ tags?: pulumi.Input<{ [key: string]: pulumi.Input; }>; /** * If true, appends the hostname to the username when hitting a database.azure.com address */ useAzureSingleServerUsernames?: pulumi.Input; /** * The username to authenticate with. */ username?: pulumi.Input; } export interface ResourceAzurePostgres { /** * The bind interface is the IP address to which the port override of a resource is bound (for example, 127.0.0.1). It is automatically generated if not provided and may also be set to one of the ResourceIPAllocationMode constants to select between VNM, loopback, or default allocation. */ bindInterface?: pulumi.Input; /** * The initial database to connect to. This setting does not by itself prevent switching to another database after connecting. */ database: pulumi.Input; /** * A filter applied to the routing logic to pin datasource to nodes. */ egressFilter?: pulumi.Input; /** * The host to dial to initiate a connection from the egress node to this resource. */ hostname: pulumi.Input; /** * Unique human-readable name of the Resource. */ name: pulumi.Input; /** * If set, the database configured cannot be changed by users. This setting is not recommended for most use cases, as some clients will insist their database has changed when it has not, leading to user confusion. */ overrideDatabase?: pulumi.Input; /** * The password to authenticate with. */ password?: pulumi.Input; /** * The port to dial to initiate a connection from the egress node to this resource. */ port?: pulumi.Input; /** * The local port used by clients to connect to this resource. It is automatically generated if not provided on create and may be re-generated on update by specifying a value of -1. */ portOverride?: pulumi.Input; /** * ID of the proxy cluster for this resource, if any. */ proxyClusterId?: pulumi.Input; /** * ID of the secret store containing credentials for this resource, if any. */ secretStoreId?: pulumi.Input; /** * Subdomain is the local DNS address. (e.g. app-prod1 turns into app-prod1.your-org-name.sdm.network) */ subdomain?: pulumi.Input; /** * Tags is a map of key, value pairs. */ tags?: pulumi.Input<{ [key: string]: pulumi.Input; }>; /** * The username to authenticate with. */ username?: pulumi.Input; } export interface ResourceAzurePostgresManagedIdentity { /** * The bind interface is the IP address to which the port override of a resource is bound (for example, 127.0.0.1). It is automatically generated if not provided and may also be set to one of the ResourceIPAllocationMode constants to select between VNM, loopback, or default allocation. */ bindInterface?: pulumi.Input; /** * The initial database to connect to. This setting does not by itself prevent switching to another database after connecting. */ database: pulumi.Input; /** * A filter applied to the routing logic to pin datasource to nodes. */ egressFilter?: pulumi.Input; /** * The host to dial to initiate a connection from the egress node to this resource. */ hostname: pulumi.Input; /** * Unique human-readable name of the Resource. */ name: pulumi.Input; /** * If set, the database configured cannot be changed by users. This setting is not recommended for most use cases, as some clients will insist their database has changed when it has not, leading to user confusion. */ overrideDatabase?: pulumi.Input; /** * The password to authenticate with. */ password?: pulumi.Input; /** * The port to dial to initiate a connection from the egress node to this resource. */ port?: pulumi.Input; /** * The local port used by clients to connect to this resource. It is automatically generated if not provided on create and may be re-generated on update by specifying a value of -1. */ portOverride?: pulumi.Input; /** * ID of the proxy cluster for this resource, if any. */ proxyClusterId?: pulumi.Input; /** * ID of the secret store containing credentials for this resource, if any. */ secretStoreId?: pulumi.Input; /** * Subdomain is the local DNS address. (e.g. app-prod1 turns into app-prod1.your-org-name.sdm.network) */ subdomain?: pulumi.Input; /** * Tags is a map of key, value pairs. */ tags?: pulumi.Input<{ [key: string]: pulumi.Input; }>; /** * If true, appends the hostname to the username when hitting a database.azure.com address */ useAzureSingleServerUsernames?: pulumi.Input; /** * The username to authenticate with. */ username?: pulumi.Input; } export interface ResourceBigQuery { /** * The bind interface is the IP address to which the port override of a resource is bound (for example, 127.0.0.1). It is automatically generated if not provided and may also be set to one of the ResourceIPAllocationMode constants to select between VNM, loopback, or default allocation. */ bindInterface?: pulumi.Input; /** * A filter applied to the routing logic to pin datasource to nodes. */ egressFilter?: pulumi.Input; /** * The neptune endpoint to connect to as in endpoint.region.neptune.amazonaws.com */ endpoint: pulumi.Input; /** * Unique human-readable name of the Resource. */ name: pulumi.Input; /** * The local port used by clients to connect to this resource. It is automatically generated if not provided on create and may be re-generated on update by specifying a value of -1. */ portOverride?: pulumi.Input; /** * The private key used to authenticate with the server. */ privateKey?: pulumi.Input; /** * The project to connect to. */ project: pulumi.Input; /** * ID of the proxy cluster for this resource, if any. */ proxyClusterId?: pulumi.Input; /** * ID of the secret store containing credentials for this resource, if any. */ secretStoreId?: pulumi.Input; /** * Subdomain is the local DNS address. (e.g. app-prod1 turns into app-prod1.your-org-name.sdm.network) */ subdomain?: pulumi.Input; /** * Tags is a map of key, value pairs. */ tags?: pulumi.Input<{ [key: string]: pulumi.Input; }>; /** * The username to authenticate with. */ username?: pulumi.Input; } export interface ResourceCassandra { /** * The bind interface is the IP address to which the port override of a resource is bound (for example, 127.0.0.1). It is automatically generated if not provided and may also be set to one of the ResourceIPAllocationMode constants to select between VNM, loopback, or default allocation. */ bindInterface?: pulumi.Input; /** * A filter applied to the routing logic to pin datasource to nodes. */ egressFilter?: pulumi.Input; /** * The host to dial to initiate a connection from the egress node to this resource. */ hostname: pulumi.Input; /** * Unique human-readable name of the Resource. */ name: pulumi.Input; /** * The password to authenticate with. */ password?: pulumi.Input; /** * The port to dial to initiate a connection from the egress node to this resource. */ port?: pulumi.Input; /** * The local port used by clients to connect to this resource. It is automatically generated if not provided on create and may be re-generated on update by specifying a value of -1. */ portOverride?: pulumi.Input; /** * ID of the proxy cluster for this resource, if any. */ proxyClusterId?: pulumi.Input; /** * ID of the secret store containing credentials for this resource, if any. */ secretStoreId?: pulumi.Input; /** * Subdomain is the local DNS address. (e.g. app-prod1 turns into app-prod1.your-org-name.sdm.network) */ subdomain?: pulumi.Input; /** * Tags is a map of key, value pairs. */ tags?: pulumi.Input<{ [key: string]: pulumi.Input; }>; /** * If set, TLS must be used to connect to this resource. */ tlsRequired?: pulumi.Input; /** * The username to authenticate with. */ username?: pulumi.Input; } export interface ResourceCitus { /** * The bind interface is the IP address to which the port override of a resource is bound (for example, 127.0.0.1). It is automatically generated if not provided and may also be set to one of the ResourceIPAllocationMode constants to select between VNM, loopback, or default allocation. */ bindInterface?: pulumi.Input; /** * The initial database to connect to. This setting does not by itself prevent switching to another database after connecting. */ database: pulumi.Input; /** * A filter applied to the routing logic to pin datasource to nodes. */ egressFilter?: pulumi.Input; /** * The host to dial to initiate a connection from the egress node to this resource. */ hostname: pulumi.Input; /** * Unique human-readable name of the Resource. */ name: pulumi.Input; /** * If set, the database configured cannot be changed by users. This setting is not recommended for most use cases, as some clients will insist their database has changed when it has not, leading to user confusion. */ overrideDatabase?: pulumi.Input; /** * The password to authenticate with. */ password?: pulumi.Input; /** * The port to dial to initiate a connection from the egress node to this resource. */ port?: pulumi.Input; /** * The local port used by clients to connect to this resource. It is automatically generated if not provided on create and may be re-generated on update by specifying a value of -1. */ portOverride?: pulumi.Input; /** * ID of the proxy cluster for this resource, if any. */ proxyClusterId?: pulumi.Input; /** * ID of the secret store containing credentials for this resource, if any. */ secretStoreId?: pulumi.Input; /** * Subdomain is the local DNS address. (e.g. app-prod1 turns into app-prod1.your-org-name.sdm.network) */ subdomain?: pulumi.Input; /** * Tags is a map of key, value pairs. */ tags?: pulumi.Input<{ [key: string]: pulumi.Input; }>; /** * The username to authenticate with. */ username?: pulumi.Input; } export interface ResourceClickHouseHttp { /** * The bind interface is the IP address to which the port override of a resource is bound (for example, 127.0.0.1). It is automatically generated if not provided and may also be set to one of the ResourceIPAllocationMode constants to select between VNM, loopback, or default allocation. */ bindInterface?: pulumi.Input; /** * The initial database to connect to. This setting does not by itself prevent switching to another database after connecting. */ database?: pulumi.Input; /** * A filter applied to the routing logic to pin datasource to nodes. */ egressFilter?: pulumi.Input; /** * Unique human-readable name of the Resource. */ name: pulumi.Input; /** * The password to authenticate with. */ password?: pulumi.Input; /** * The local port used by clients to connect to this resource. It is automatically generated if not provided on create and may be re-generated on update by specifying a value of -1. */ portOverride?: pulumi.Input; /** * ID of the proxy cluster for this resource, if any. */ proxyClusterId?: pulumi.Input; /** * ID of the secret store containing credentials for this resource, if any. */ secretStoreId?: pulumi.Input; /** * Tags is a map of key, value pairs. */ tags?: pulumi.Input<{ [key: string]: pulumi.Input; }>; /** * The base address of your website without the path. * * kubernetes: */ url: pulumi.Input; /** * The username to authenticate with. */ username?: pulumi.Input; } export interface ResourceClickHouseMySql { /** * The bind interface is the IP address to which the port override of a resource is bound (for example, 127.0.0.1). It is automatically generated if not provided and may also be set to one of the ResourceIPAllocationMode constants to select between VNM, loopback, or default allocation. */ bindInterface?: pulumi.Input; /** * The initial database to connect to. This setting does not by itself prevent switching to another database after connecting. */ database?: pulumi.Input; /** * A filter applied to the routing logic to pin datasource to nodes. */ egressFilter?: pulumi.Input; /** * The host to dial to initiate a connection from the egress node to this resource. */ hostname: pulumi.Input; /** * Unique human-readable name of the Resource. */ name: pulumi.Input; /** * The password to authenticate with. */ password?: pulumi.Input; /** * The port to dial to initiate a connection from the egress node to this resource. */ port?: pulumi.Input; /** * The local port used by clients to connect to this resource. It is automatically generated if not provided on create and may be re-generated on update by specifying a value of -1. */ portOverride?: pulumi.Input; /** * ID of the proxy cluster for this resource, if any. */ proxyClusterId?: pulumi.Input; /** * Whether native auth (mysql_native_password) is used for all connections (for backwards compatibility) */ requireNativeAuth?: pulumi.Input; /** * ID of the secret store containing credentials for this resource, if any. */ secretStoreId?: pulumi.Input; /** * Subdomain is the local DNS address. (e.g. app-prod1 turns into app-prod1.your-org-name.sdm.network) */ subdomain?: pulumi.Input; /** * Tags is a map of key, value pairs. */ tags?: pulumi.Input<{ [key: string]: pulumi.Input; }>; /** * The username to authenticate with. */ username?: pulumi.Input; } export interface ResourceClickHouseTcp { /** * The bind interface is the IP address to which the port override of a resource is bound (for example, 127.0.0.1). It is automatically generated if not provided and may also be set to one of the ResourceIPAllocationMode constants to select between VNM, loopback, or default allocation. */ bindInterface?: pulumi.Input; /** * The initial database to connect to. This setting does not by itself prevent switching to another database after connecting. */ database?: pulumi.Input; /** * A filter applied to the routing logic to pin datasource to nodes. */ egressFilter?: pulumi.Input; /** * The host to dial to initiate a connection from the egress node to this resource. */ hostname: pulumi.Input; /** * Unique human-readable name of the Resource. */ name: pulumi.Input; /** * The password to authenticate with. */ password?: pulumi.Input; /** * The port to dial to initiate a connection from the egress node to this resource. */ port: pulumi.Input; /** * The local port used by clients to connect to this resource. It is automatically generated if not provided on create and may be re-generated on update by specifying a value of -1. */ portOverride?: pulumi.Input; /** * ID of the proxy cluster for this resource, if any. */ proxyClusterId?: pulumi.Input; /** * ID of the secret store containing credentials for this resource, if any. */ secretStoreId?: pulumi.Input; /** * Subdomain is the local DNS address. (e.g. app-prod1 turns into app-prod1.your-org-name.sdm.network) */ subdomain?: pulumi.Input; /** * Tags is a map of key, value pairs. */ tags?: pulumi.Input<{ [key: string]: pulumi.Input; }>; /** * If set, TLS must be used to connect to this resource. */ tlsRequired?: pulumi.Input; /** * The username to authenticate with. */ username?: pulumi.Input; } export interface ResourceClustrix { /** * The bind interface is the IP address to which the port override of a resource is bound (for example, 127.0.0.1). It is automatically generated if not provided and may also be set to one of the ResourceIPAllocationMode constants to select between VNM, loopback, or default allocation. */ bindInterface?: pulumi.Input; /** * The initial database to connect to. This setting does not by itself prevent switching to another database after connecting. */ database?: pulumi.Input; /** * A filter applied to the routing logic to pin datasource to nodes. */ egressFilter?: pulumi.Input; /** * The host to dial to initiate a connection from the egress node to this resource. */ hostname: pulumi.Input; /** * Unique human-readable name of the Resource. */ name: pulumi.Input; /** * The password to authenticate with. */ password?: pulumi.Input; /** * The port to dial to initiate a connection from the egress node to this resource. */ port?: pulumi.Input; /** * The local port used by clients to connect to this resource. It is automatically generated if not provided on create and may be re-generated on update by specifying a value of -1. */ portOverride?: pulumi.Input; /** * ID of the proxy cluster for this resource, if any. */ proxyClusterId?: pulumi.Input; /** * Whether native auth (mysql_native_password) is used for all connections (for backwards compatibility) */ requireNativeAuth?: pulumi.Input; /** * ID of the secret store containing credentials for this resource, if any. */ secretStoreId?: pulumi.Input; /** * Subdomain is the local DNS address. (e.g. app-prod1 turns into app-prod1.your-org-name.sdm.network) */ subdomain?: pulumi.Input; /** * Tags is a map of key, value pairs. */ tags?: pulumi.Input<{ [key: string]: pulumi.Input; }>; /** * If true, appends the hostname to the username when hitting a database.azure.com address */ useAzureSingleServerUsernames?: pulumi.Input; /** * The username to authenticate with. */ username?: pulumi.Input; } export interface ResourceCockroach { /** * The bind interface is the IP address to which the port override of a resource is bound (for example, 127.0.0.1). It is automatically generated if not provided and may also be set to one of the ResourceIPAllocationMode constants to select between VNM, loopback, or default allocation. */ bindInterface?: pulumi.Input; /** * The initial database to connect to. This setting does not by itself prevent switching to another database after connecting. */ database: pulumi.Input; /** * A filter applied to the routing logic to pin datasource to nodes. */ egressFilter?: pulumi.Input; /** * The host to dial to initiate a connection from the egress node to this resource. */ hostname: pulumi.Input; /** * Unique human-readable name of the Resource. */ name: pulumi.Input; /** * If set, the database configured cannot be changed by users. This setting is not recommended for most use cases, as some clients will insist their database has changed when it has not, leading to user confusion. */ overrideDatabase?: pulumi.Input; /** * The password to authenticate with. */ password?: pulumi.Input; /** * The port to dial to initiate a connection from the egress node to this resource. */ port?: pulumi.Input; /** * The local port used by clients to connect to this resource. It is automatically generated if not provided on create and may be re-generated on update by specifying a value of -1. */ portOverride?: pulumi.Input; /** * ID of the proxy cluster for this resource, if any. */ proxyClusterId?: pulumi.Input; /** * ID of the secret store containing credentials for this resource, if any. */ secretStoreId?: pulumi.Input; /** * Subdomain is the local DNS address. (e.g. app-prod1 turns into app-prod1.your-org-name.sdm.network) */ subdomain?: pulumi.Input; /** * Tags is a map of key, value pairs. */ tags?: pulumi.Input<{ [key: string]: pulumi.Input; }>; /** * The username to authenticate with. */ username?: pulumi.Input; } export interface ResourceCouchbaseDatabase { /** * The bind interface is the IP address to which the port override of a resource is bound (for example, 127.0.0.1). It is automatically generated if not provided and may also be set to one of the ResourceIPAllocationMode constants to select between VNM, loopback, or default allocation. */ bindInterface?: pulumi.Input; /** * A filter applied to the routing logic to pin datasource to nodes. */ egressFilter?: pulumi.Input; /** * The host to dial to initiate a connection from the egress node to this resource. */ hostname: pulumi.Input; /** * The port number for N1QL queries. Default HTTP is 8093. Default HTTPS is 18093. */ n1QlPort: pulumi.Input; /** * Unique human-readable name of the Resource. */ name: pulumi.Input; /** * The password to authenticate with. */ password?: pulumi.Input; /** * The port to dial to initiate a connection from the egress node to this resource. */ port?: pulumi.Input; /** * The local port used by clients to connect to this resource. It is automatically generated if not provided on create and may be re-generated on update by specifying a value of -1. */ portOverride?: pulumi.Input; /** * ID of the proxy cluster for this resource, if any. */ proxyClusterId?: pulumi.Input; /** * ID of the secret store containing credentials for this resource, if any. */ secretStoreId?: pulumi.Input; /** * Subdomain is the local DNS address. (e.g. app-prod1 turns into app-prod1.your-org-name.sdm.network) */ subdomain?: pulumi.Input; /** * Tags is a map of key, value pairs. */ tags?: pulumi.Input<{ [key: string]: pulumi.Input; }>; /** * If set, TLS must be used to connect to this resource. */ tlsRequired?: pulumi.Input; /** * The username to authenticate with. */ username?: pulumi.Input; } export interface ResourceCouchbaseWebUi { /** * The bind interface is the IP address to which the port override of a resource is bound (for example, 127.0.0.1). It is automatically generated if not provided and may also be set to one of the ResourceIPAllocationMode constants to select between VNM, loopback, or default allocation. */ bindInterface?: pulumi.Input; /** * A filter applied to the routing logic to pin datasource to nodes. */ egressFilter?: pulumi.Input; /** * Unique human-readable name of the Resource. */ name: pulumi.Input; /** * The password to authenticate with. */ password?: pulumi.Input; /** * The local port used by clients to connect to this resource. It is automatically generated if not provided on create and may be re-generated on update by specifying a value of -1. */ portOverride?: pulumi.Input; /** * ID of the proxy cluster for this resource, if any. */ proxyClusterId?: pulumi.Input; /** * ID of the secret store containing credentials for this resource, if any. */ secretStoreId?: pulumi.Input; /** * Subdomain is the local DNS address. (e.g. app-prod1 turns into app-prod1.your-org-name.sdm.network) */ subdomain: pulumi.Input; /** * Tags is a map of key, value pairs. */ tags?: pulumi.Input<{ [key: string]: pulumi.Input; }>; /** * The base address of your website without the path. * * kubernetes: */ url: pulumi.Input; /** * The username to authenticate with. */ username?: pulumi.Input; } export interface ResourceDb2I { /** * The bind interface is the IP address to which the port override of a resource is bound (for example, 127.0.0.1). It is automatically generated if not provided and may also be set to one of the ResourceIPAllocationMode constants to select between VNM, loopback, or default allocation. */ bindInterface?: pulumi.Input; /** * A filter applied to the routing logic to pin datasource to nodes. */ egressFilter?: pulumi.Input; /** * The host to dial to initiate a connection from the egress node to this resource. */ hostname: pulumi.Input; /** * Unique human-readable name of the Resource. */ name: pulumi.Input; /** * The password to authenticate with. */ password?: pulumi.Input; /** * The port to dial to initiate a connection from the egress node to this resource. */ port: pulumi.Input; /** * The local port used by clients to connect to this resource. It is automatically generated if not provided on create and may be re-generated on update by specifying a value of -1. */ portOverride?: pulumi.Input; /** * ID of the proxy cluster for this resource, if any. */ proxyClusterId?: pulumi.Input; /** * ID of the secret store containing credentials for this resource, if any. */ secretStoreId?: pulumi.Input; /** * Subdomain is the local DNS address. (e.g. app-prod1 turns into app-prod1.your-org-name.sdm.network) */ subdomain?: pulumi.Input; /** * Tags is a map of key, value pairs. */ tags?: pulumi.Input<{ [key: string]: pulumi.Input; }>; /** * If set, TLS must be used to connect to this resource. */ tlsRequired?: pulumi.Input; /** * The username to authenticate with. */ username?: pulumi.Input; } export interface ResourceDb2Luw { /** * The bind interface is the IP address to which the port override of a resource is bound (for example, 127.0.0.1). It is automatically generated if not provided and may also be set to one of the ResourceIPAllocationMode constants to select between VNM, loopback, or default allocation. */ bindInterface?: pulumi.Input; /** * The initial database to connect to. This setting does not by itself prevent switching to another database after connecting. */ database: pulumi.Input; /** * A filter applied to the routing logic to pin datasource to nodes. */ egressFilter?: pulumi.Input; /** * The host to dial to initiate a connection from the egress node to this resource. */ hostname: pulumi.Input; /** * Unique human-readable name of the Resource. */ name: pulumi.Input; /** * The password to authenticate with. */ password?: pulumi.Input; /** * The port to dial to initiate a connection from the egress node to this resource. */ port?: pulumi.Input; /** * The local port used by clients to connect to this resource. It is automatically generated if not provided on create and may be re-generated on update by specifying a value of -1. */ portOverride?: pulumi.Input; /** * ID of the proxy cluster for this resource, if any. */ proxyClusterId?: pulumi.Input; /** * ID of the secret store containing credentials for this resource, if any. */ secretStoreId?: pulumi.Input; /** * Subdomain is the local DNS address. (e.g. app-prod1 turns into app-prod1.your-org-name.sdm.network) */ subdomain?: pulumi.Input; /** * Tags is a map of key, value pairs. */ tags?: pulumi.Input<{ [key: string]: pulumi.Input; }>; /** * If set, TLS must be used to connect to this resource. */ tlsRequired?: pulumi.Input; /** * The username to authenticate with. */ username?: pulumi.Input; } export interface ResourceDocumentDbHost { /** * The authentication database to use. */ authDatabase: pulumi.Input; /** * The bind interface is the IP address to which the port override of a resource is bound (for example, 127.0.0.1). It is automatically generated if not provided and may also be set to one of the ResourceIPAllocationMode constants to select between VNM, loopback, or default allocation. */ bindInterface?: pulumi.Input; /** * A filter applied to the routing logic to pin datasource to nodes. */ egressFilter?: pulumi.Input; /** * The host to dial to initiate a connection from the egress node to this resource. */ hostname: pulumi.Input; /** * Unique human-readable name of the Resource. */ name: pulumi.Input; /** * The password to authenticate with. */ password?: pulumi.Input; /** * The port to dial to initiate a connection from the egress node to this resource. */ port?: pulumi.Input; /** * The local port used by clients to connect to this resource. It is automatically generated if not provided on create and may be re-generated on update by specifying a value of -1. */ portOverride?: pulumi.Input; /** * ID of the proxy cluster for this resource, if any. */ proxyClusterId?: pulumi.Input; /** * ID of the secret store containing credentials for this resource, if any. */ secretStoreId?: pulumi.Input; /** * Subdomain is the local DNS address. (e.g. app-prod1 turns into app-prod1.your-org-name.sdm.network) */ subdomain?: pulumi.Input; /** * Tags is a map of key, value pairs. */ tags?: pulumi.Input<{ [key: string]: pulumi.Input; }>; /** * The username to authenticate with. */ username?: pulumi.Input; } export interface ResourceDocumentDbHostIam { /** * The bind interface is the IP address to which the port override of a resource is bound (for example, 127.0.0.1). It is automatically generated if not provided and may also be set to one of the ResourceIPAllocationMode constants to select between VNM, loopback, or default allocation. */ bindInterface?: pulumi.Input; /** * A filter applied to the routing logic to pin datasource to nodes. */ egressFilter?: pulumi.Input; /** * The host to dial to initiate a connection from the egress node to this resource. */ hostname: pulumi.Input; /** * Unique human-readable name of the Resource. */ name: pulumi.Input; /** * The port to dial to initiate a connection from the egress node to this resource. */ port?: pulumi.Input; /** * The local port used by clients to connect to this resource. It is automatically generated if not provided on create and may be re-generated on update by specifying a value of -1. */ portOverride?: pulumi.Input; /** * ID of the proxy cluster for this resource, if any. */ proxyClusterId?: pulumi.Input; /** * The AWS region to connect to. */ region: pulumi.Input; /** * ID of the secret store containing credentials for this resource, if any. */ secretStoreId?: pulumi.Input; /** * Subdomain is the local DNS address. (e.g. app-prod1 turns into app-prod1.your-org-name.sdm.network) */ subdomain?: pulumi.Input; /** * Tags is a map of key, value pairs. */ tags?: pulumi.Input<{ [key: string]: pulumi.Input; }>; } export interface ResourceDocumentDbReplicaSet { /** * The authentication database to use. */ authDatabase: pulumi.Input; /** * The bind interface is the IP address to which the port override of a resource is bound (for example, 127.0.0.1). It is automatically generated if not provided and may also be set to one of the ResourceIPAllocationMode constants to select between VNM, loopback, or default allocation. */ bindInterface?: pulumi.Input; /** * Set to connect to a replica instead of the primary node. */ connectToReplica?: pulumi.Input; /** * A filter applied to the routing logic to pin datasource to nodes. */ egressFilter?: pulumi.Input; /** * The host to dial to initiate a connection from the egress node to this resource. */ hostname: pulumi.Input; /** * Unique human-readable name of the Resource. */ name: pulumi.Input; /** * The password to authenticate with. */ password?: pulumi.Input; /** * The local port used by clients to connect to this resource. It is automatically generated if not provided on create and may be re-generated on update by specifying a value of -1. */ portOverride?: pulumi.Input; /** * ID of the proxy cluster for this resource, if any. */ proxyClusterId?: pulumi.Input; /** * The name of the mongo replicaset. */ replicaSet: pulumi.Input; /** * ID of the secret store containing credentials for this resource, if any. */ secretStoreId?: pulumi.Input; /** * Subdomain is the local DNS address. (e.g. app-prod1 turns into app-prod1.your-org-name.sdm.network) */ subdomain?: pulumi.Input; /** * Tags is a map of key, value pairs. */ tags?: pulumi.Input<{ [key: string]: pulumi.Input; }>; /** * The username to authenticate with. */ username?: pulumi.Input; } export interface ResourceDocumentDbReplicaSetIam { /** * The bind interface is the IP address to which the port override of a resource is bound (for example, 127.0.0.1). It is automatically generated if not provided and may also be set to one of the ResourceIPAllocationMode constants to select between VNM, loopback, or default allocation. */ bindInterface?: pulumi.Input; /** * Set to connect to a replica instead of the primary node. */ connectToReplica?: pulumi.Input; /** * A filter applied to the routing logic to pin datasource to nodes. */ egressFilter?: pulumi.Input; /** * The host to dial to initiate a connection from the egress node to this resource. */ hostname: pulumi.Input; /** * Unique human-readable name of the Resource. */ name: pulumi.Input; /** * The local port used by clients to connect to this resource. It is automatically generated if not provided on create and may be re-generated on update by specifying a value of -1. */ portOverride?: pulumi.Input; /** * ID of the proxy cluster for this resource, if any. */ proxyClusterId?: pulumi.Input; /** * The AWS region to connect to. */ region: pulumi.Input; /** * ID of the secret store containing credentials for this resource, if any. */ secretStoreId?: pulumi.Input; /** * Subdomain is the local DNS address. (e.g. app-prod1 turns into app-prod1.your-org-name.sdm.network) */ subdomain?: pulumi.Input; /** * Tags is a map of key, value pairs. */ tags?: pulumi.Input<{ [key: string]: pulumi.Input; }>; } export interface ResourceDruid { /** * The bind interface is the IP address to which the port override of a resource is bound (for example, 127.0.0.1). It is automatically generated if not provided and may also be set to one of the ResourceIPAllocationMode constants to select between VNM, loopback, or default allocation. */ bindInterface?: pulumi.Input; /** * A filter applied to the routing logic to pin datasource to nodes. */ egressFilter?: pulumi.Input; /** * The host to dial to initiate a connection from the egress node to this resource. */ hostname: pulumi.Input; /** * Unique human-readable name of the Resource. */ name: pulumi.Input; /** * The password to authenticate with. */ password?: pulumi.Input; /** * The port to dial to initiate a connection from the egress node to this resource. */ port?: pulumi.Input; /** * The local port used by clients to connect to this resource. It is automatically generated if not provided on create and may be re-generated on update by specifying a value of -1. */ portOverride?: pulumi.Input; /** * ID of the proxy cluster for this resource, if any. */ proxyClusterId?: pulumi.Input; /** * ID of the secret store containing credentials for this resource, if any. */ secretStoreId?: pulumi.Input; /** * Subdomain is the local DNS address. (e.g. app-prod1 turns into app-prod1.your-org-name.sdm.network) */ subdomain?: pulumi.Input; /** * Tags is a map of key, value pairs. */ tags?: pulumi.Input<{ [key: string]: pulumi.Input; }>; /** * The username to authenticate with. */ username?: pulumi.Input; } export interface ResourceDynamoDb { /** * The Access Key ID to use to authenticate. */ accessKey?: pulumi.Input; /** * The bind interface is the IP address to which the port override of a resource is bound (for example, 127.0.0.1). It is automatically generated if not provided and may also be set to one of the ResourceIPAllocationMode constants to select between VNM, loopback, or default allocation. */ bindInterface?: pulumi.Input; /** * A filter applied to the routing logic to pin datasource to nodes. */ egressFilter?: pulumi.Input; /** * The neptune endpoint to connect to as in endpoint.region.neptune.amazonaws.com */ endpoint: pulumi.Input; /** * Unique human-readable name of the Resource. */ name: pulumi.Input; /** * The local port used by clients to connect to this resource. It is automatically generated if not provided on create and may be re-generated on update by specifying a value of -1. */ portOverride?: pulumi.Input; /** * ID of the proxy cluster for this resource, if any. */ proxyClusterId?: pulumi.Input; /** * The AWS region to connect to. */ region: pulumi.Input; /** * The role to assume after logging in. */ roleArn?: pulumi.Input; /** * The external ID to associate with assume role requests. Does nothing if a role ARN is not provided. */ roleExternalId?: pulumi.Input; /** * The Secret Access Key to use to authenticate. */ secretAccessKey?: pulumi.Input; /** * ID of the secret store containing credentials for this resource, if any. */ secretStoreId?: pulumi.Input; /** * Subdomain is the local DNS address. (e.g. app-prod1 turns into app-prod1.your-org-name.sdm.network) */ subdomain?: pulumi.Input; /** * Tags is a map of key, value pairs. */ tags?: pulumi.Input<{ [key: string]: pulumi.Input; }>; } export interface ResourceDynamoDbiam { /** * The bind interface is the IP address to which the port override of a resource is bound (for example, 127.0.0.1). It is automatically generated if not provided and may also be set to one of the ResourceIPAllocationMode constants to select between VNM, loopback, or default allocation. */ bindInterface?: pulumi.Input; /** * A filter applied to the routing logic to pin datasource to nodes. */ egressFilter?: pulumi.Input; /** * The neptune endpoint to connect to as in endpoint.region.neptune.amazonaws.com */ endpoint: pulumi.Input; /** * Unique human-readable name of the Resource. */ name: pulumi.Input; /** * The local port used by clients to connect to this resource. It is automatically generated if not provided on create and may be re-generated on update by specifying a value of -1. */ portOverride?: pulumi.Input; /** * ID of the proxy cluster for this resource, if any. */ proxyClusterId?: pulumi.Input; /** * The AWS region to connect to. */ region: pulumi.Input; /** * The role to assume after logging in. */ roleArn?: pulumi.Input; /** * The external ID to associate with assume role requests. Does nothing if a role ARN is not provided. */ roleExternalId?: pulumi.Input; /** * ID of the secret store containing credentials for this resource, if any. */ secretStoreId?: pulumi.Input; /** * Subdomain is the local DNS address. (e.g. app-prod1 turns into app-prod1.your-org-name.sdm.network) */ subdomain?: pulumi.Input; /** * Tags is a map of key, value pairs. */ tags?: pulumi.Input<{ [key: string]: pulumi.Input; }>; } export interface ResourceElastic { /** * The bind interface is the IP address to which the port override of a resource is bound (for example, 127.0.0.1). It is automatically generated if not provided and may also be set to one of the ResourceIPAllocationMode constants to select between VNM, loopback, or default allocation. */ bindInterface?: pulumi.Input; /** * A filter applied to the routing logic to pin datasource to nodes. */ egressFilter?: pulumi.Input; /** * The host to dial to initiate a connection from the egress node to this resource. */ hostname: pulumi.Input; /** * Unique human-readable name of the Resource. */ name: pulumi.Input; /** * The password to authenticate with. */ password?: pulumi.Input; /** * The port to dial to initiate a connection from the egress node to this resource. */ port?: pulumi.Input; /** * The local port used by clients to connect to this resource. It is automatically generated if not provided on create and may be re-generated on update by specifying a value of -1. */ portOverride?: pulumi.Input; /** * ID of the proxy cluster for this resource, if any. */ proxyClusterId?: pulumi.Input; /** * ID of the secret store containing credentials for this resource, if any. */ secretStoreId?: pulumi.Input; /** * Subdomain is the local DNS address. (e.g. app-prod1 turns into app-prod1.your-org-name.sdm.network) */ subdomain?: pulumi.Input; /** * Tags is a map of key, value pairs. */ tags?: pulumi.Input<{ [key: string]: pulumi.Input; }>; /** * If set, TLS must be used to connect to this resource. */ tlsRequired?: pulumi.Input; /** * The username to authenticate with. */ username?: pulumi.Input; } export interface ResourceElasticacheRedis { /** * The bind interface is the IP address to which the port override of a resource is bound (for example, 127.0.0.1). It is automatically generated if not provided and may also be set to one of the ResourceIPAllocationMode constants to select between VNM, loopback, or default allocation. */ bindInterface?: pulumi.Input; /** * A filter applied to the routing logic to pin datasource to nodes. */ egressFilter?: pulumi.Input; /** * The host to dial to initiate a connection from the egress node to this resource. */ hostname: pulumi.Input; /** * Unique human-readable name of the Resource. */ name: pulumi.Input; /** * The password to authenticate with. */ password?: pulumi.Input; /** * The port to dial to initiate a connection from the egress node to this resource. */ port?: pulumi.Input; /** * The local port used by clients to connect to this resource. It is automatically generated if not provided on create and may be re-generated on update by specifying a value of -1. */ portOverride?: pulumi.Input; /** * ID of the proxy cluster for this resource, if any. */ proxyClusterId?: pulumi.Input; /** * ID of the secret store containing credentials for this resource, if any. */ secretStoreId?: pulumi.Input; /** * Subdomain is the local DNS address. (e.g. app-prod1 turns into app-prod1.your-org-name.sdm.network) */ subdomain?: pulumi.Input; /** * Tags is a map of key, value pairs. */ tags?: pulumi.Input<{ [key: string]: pulumi.Input; }>; /** * If set, TLS must be used to connect to this resource. */ tlsRequired?: pulumi.Input; /** * The username to authenticate with. */ username?: pulumi.Input; } export interface ResourceEntraId { /** * The bind interface is the IP address to which the port override of a resource is bound (for example, 127.0.0.1). It is automatically generated if not provided and may also be set to one of the ResourceIPAllocationMode constants to select between VNM, loopback, or default allocation. */ bindInterface?: pulumi.Input; /** * If true, configures discovery of a cluster to be run from a node. */ discoveryEnabled?: pulumi.Input; /** * A filter applied to the routing logic to pin datasource to nodes. */ egressFilter?: pulumi.Input; /** * comma separated list of group names to filter by. Supports wildcards (*) */ groupNames?: pulumi.Input; /** * The ID of the identity set to use for identity connections. */ identitySetId: pulumi.Input; /** * The management group ID to authenticate scope Privileges to. */ managementGroupId?: pulumi.Input; /** * Unique human-readable name of the Resource. */ name: pulumi.Input; /** * The privilege levels specify which Groups are managed externally */ privilegeLevels?: pulumi.Input; /** * ID of the proxy cluster for this resource, if any. */ proxyClusterId?: pulumi.Input; /** * filters discovered groups to the specified Resource Group */ resourceGroupId?: pulumi.Input; /** * ID of the secret store containing credentials for this resource, if any. */ secretStoreId?: pulumi.Input; /** * Subdomain is the local DNS address. (e.g. app-prod1 turns into app-prod1.your-org-name.sdm.network) */ subdomain?: pulumi.Input; /** * The subscription ID to authenticate scope Privileges to. */ subscriptionId?: pulumi.Input; /** * Tags is a map of key, value pairs. */ tags?: pulumi.Input<{ [key: string]: pulumi.Input; }>; /** * The Azure AD directory (tenant) ID with which to authenticate. * * sql_server_kerberos_ad: */ tenantId: pulumi.Input; } export interface ResourceGcp { /** * The bind interface is the IP address to which the port override of a resource is bound (for example, 127.0.0.1). It is automatically generated if not provided and may also be set to one of the ResourceIPAllocationMode constants to select between VNM, loopback, or default allocation. */ bindInterface?: pulumi.Input; /** * A filter applied to the routing logic to pin datasource to nodes. */ egressFilter?: pulumi.Input; /** * The service account keyfile to authenticate with. */ keyfile?: pulumi.Input; /** * Unique human-readable name of the Resource. */ name: pulumi.Input; /** * The local port used by clients to connect to this resource. It is automatically generated if not provided on create and may be re-generated on update by specifying a value of -1. */ portOverride?: pulumi.Input; /** * ID of the proxy cluster for this resource, if any. */ proxyClusterId?: pulumi.Input; /** * Space separated scopes that this login should assume into when authenticating. */ scopes: pulumi.Input; /** * ID of the secret store containing credentials for this resource, if any. */ secretStoreId?: pulumi.Input; /** * Subdomain is the local DNS address. (e.g. app-prod1 turns into app-prod1.your-org-name.sdm.network) */ subdomain?: pulumi.Input; /** * Tags is a map of key, value pairs. */ tags?: pulumi.Input<{ [key: string]: pulumi.Input; }>; } export interface ResourceGcpConsole { /** * The bind interface is the IP address to which the port override of a resource is bound (for example, 127.0.0.1). It is automatically generated if not provided and may also be set to one of the ResourceIPAllocationMode constants to select between VNM, loopback, or default allocation. */ bindInterface?: pulumi.Input; /** * A filter applied to the routing logic to pin datasource to nodes. */ egressFilter?: pulumi.Input; /** * The username to use for healthchecks, when clients otherwise connect with their own identity alias username. */ identityAliasHealthcheckUsername?: pulumi.Input; /** * The ID of the identity set to use for identity connections. */ identitySetId?: pulumi.Input; /** * Unique human-readable name of the Resource. */ name: pulumi.Input; /** * The local port used by clients to connect to this resource. It is automatically generated if not provided on create and may be re-generated on update by specifying a value of -1. */ portOverride?: pulumi.Input; /** * ID of the proxy cluster for this resource, if any. */ proxyClusterId?: pulumi.Input; /** * ID of the secret store containing credentials for this resource, if any. */ secretStoreId?: pulumi.Input; /** * The length of time in seconds console sessions will live before needing to reauthenticate. */ sessionExpiry?: pulumi.Input; /** * Subdomain is the local DNS address. (e.g. app-prod1 turns into app-prod1.your-org-name.sdm.network) */ subdomain: pulumi.Input; /** * Tags is a map of key, value pairs. */ tags?: pulumi.Input<{ [key: string]: pulumi.Input; }>; /** * The ID of the Workforce Identity Pool in GCP to use for federated authentication. */ workforcePoolId: pulumi.Input; /** * The ID of the Workforce Identity Provider in GCP to use for federated authentication. * * google_gke: */ workforceProviderId: pulumi.Input; } export interface ResourceGcpwif { /** * The bind interface is the IP address to which the port override of a resource is bound (for example, 127.0.0.1). It is automatically generated if not provided and may also be set to one of the ResourceIPAllocationMode constants to select between VNM, loopback, or default allocation. */ bindInterface?: pulumi.Input; /** * A filter applied to the routing logic to pin datasource to nodes. */ egressFilter?: pulumi.Input; /** * The username to use for healthchecks, when clients otherwise connect with their own identity alias username. */ identityAliasHealthcheckUsername?: pulumi.Input; /** * The ID of the identity set to use for identity connections. */ identitySetId?: pulumi.Input; /** * Unique human-readable name of the Resource. */ name: pulumi.Input; /** * The local port used by clients to connect to this resource. It is automatically generated if not provided on create and may be re-generated on update by specifying a value of -1. */ portOverride?: pulumi.Input; /** * When specified, all project scoped requests will use this Project ID, overriding the project ID specified by clients */ projectId?: pulumi.Input; /** * ID of the proxy cluster for this resource, if any. */ proxyClusterId?: pulumi.Input; /** * Space separated scopes that this login should assume into when authenticating. */ scopes: pulumi.Input; /** * ID of the secret store containing credentials for this resource, if any. */ secretStoreId?: pulumi.Input; /** * The length of time in seconds console sessions will live before needing to reauthenticate. */ sessionExpiry?: pulumi.Input; /** * Subdomain is the local DNS address. (e.g. app-prod1 turns into app-prod1.your-org-name.sdm.network) */ subdomain?: pulumi.Input; /** * Tags is a map of key, value pairs. */ tags?: pulumi.Input<{ [key: string]: pulumi.Input; }>; /** * The ID of the Workforce Identity Pool in GCP to use for federated authentication. */ workforcePoolId: pulumi.Input; /** * The ID of the Workforce Identity Provider in GCP to use for federated authentication. * * google_gke: */ workforceProviderId: pulumi.Input; } export interface ResourceGoogleGke { /** * If true, allows users to fallback to the existing authentication mode (Leased Credential or Identity Set) when a resource role is not provided. */ allowResourceRoleBypass?: pulumi.Input; /** * The bind interface is the IP address to which the port override of a resource is bound (for example, 127.0.0.1). It is automatically generated if not provided and may also be set to one of the ResourceIPAllocationMode constants to select between VNM, loopback, or default allocation. */ bindInterface?: pulumi.Input; /** * The CA to authenticate TLS connections with. */ certificateAuthority?: pulumi.Input; /** * If true, configures discovery of a cluster to be run from a node. */ discoveryEnabled?: pulumi.Input; /** * If a cluster is configured for user impersonation, this is the user to impersonate when running discovery. */ discoveryUsername?: pulumi.Input; /** * A filter applied to the routing logic to pin datasource to nodes. */ egressFilter?: pulumi.Input; /** * The neptune endpoint to connect to as in endpoint.region.neptune.amazonaws.com */ endpoint: pulumi.Input; /** * The path used to check the health of your connection. Defaults to `default`. This field is required, and is only marked as optional for backwards compatibility. */ healthcheckNamespace?: pulumi.Input; /** * The username to use for healthchecks, when clients otherwise connect with their own identity alias username. */ identityAliasHealthcheckUsername?: pulumi.Input; /** * The ID of the identity set to use for identity connections. */ identitySetId?: pulumi.Input; /** * Unique human-readable name of the Resource. */ name: pulumi.Input; /** * The local port used by clients to connect to this resource. It is automatically generated if not provided on create and may be re-generated on update by specifying a value of -1. */ portOverride?: pulumi.Input; /** * ID of the proxy cluster for this resource, if any. */ proxyClusterId?: pulumi.Input; /** * ID of the secret store containing credentials for this resource, if any. */ secretStoreId?: pulumi.Input; /** * The service account key to authenticate with. */ serviceAccountKey?: pulumi.Input; /** * Subdomain is the local DNS address. (e.g. app-prod1 turns into app-prod1.your-org-name.sdm.network) */ subdomain?: pulumi.Input; /** * Tags is a map of key, value pairs. */ tags?: pulumi.Input<{ [key: string]: pulumi.Input; }>; } export interface ResourceGoogleGkeUserImpersonation { /** * The bind interface is the IP address to which the port override of a resource is bound (for example, 127.0.0.1). It is automatically generated if not provided and may also be set to one of the ResourceIPAllocationMode constants to select between VNM, loopback, or default allocation. */ bindInterface?: pulumi.Input; /** * The CA to authenticate TLS connections with. */ certificateAuthority?: pulumi.Input; /** * A filter applied to the routing logic to pin datasource to nodes. */ egressFilter?: pulumi.Input; /** * The neptune endpoint to connect to as in endpoint.region.neptune.amazonaws.com */ endpoint: pulumi.Input; /** * The path used to check the health of your connection. Defaults to `default`. This field is required, and is only marked as optional for backwards compatibility. */ healthcheckNamespace?: pulumi.Input; /** * Unique human-readable name of the Resource. */ name: pulumi.Input; /** * The local port used by clients to connect to this resource. It is automatically generated if not provided on create and may be re-generated on update by specifying a value of -1. */ portOverride?: pulumi.Input; /** * ID of the proxy cluster for this resource, if any. */ proxyClusterId?: pulumi.Input; /** * ID of the secret store containing credentials for this resource, if any. */ secretStoreId?: pulumi.Input; /** * The service account key to authenticate with. */ serviceAccountKey?: pulumi.Input; /** * Subdomain is the local DNS address. (e.g. app-prod1 turns into app-prod1.your-org-name.sdm.network) */ subdomain?: pulumi.Input; /** * Tags is a map of key, value pairs. */ tags?: pulumi.Input<{ [key: string]: pulumi.Input; }>; } export interface ResourceGreenplum { /** * The bind interface is the IP address to which the port override of a resource is bound (for example, 127.0.0.1). It is automatically generated if not provided and may also be set to one of the ResourceIPAllocationMode constants to select between VNM, loopback, or default allocation. */ bindInterface?: pulumi.Input; /** * The initial database to connect to. This setting does not by itself prevent switching to another database after connecting. */ database: pulumi.Input; /** * A filter applied to the routing logic to pin datasource to nodes. */ egressFilter?: pulumi.Input; /** * The host to dial to initiate a connection from the egress node to this resource. */ hostname: pulumi.Input; /** * Unique human-readable name of the Resource. */ name: pulumi.Input; /** * If set, the database configured cannot be changed by users. This setting is not recommended for most use cases, as some clients will insist their database has changed when it has not, leading to user confusion. */ overrideDatabase?: pulumi.Input; /** * The password to authenticate with. */ password?: pulumi.Input; /** * The port to dial to initiate a connection from the egress node to this resource. */ port?: pulumi.Input; /** * The local port used by clients to connect to this resource. It is automatically generated if not provided on create and may be re-generated on update by specifying a value of -1. */ portOverride?: pulumi.Input; /** * ID of the proxy cluster for this resource, if any. */ proxyClusterId?: pulumi.Input; /** * ID of the secret store containing credentials for this resource, if any. */ secretStoreId?: pulumi.Input; /** * Subdomain is the local DNS address. (e.g. app-prod1 turns into app-prod1.your-org-name.sdm.network) */ subdomain?: pulumi.Input; /** * Tags is a map of key, value pairs. */ tags?: pulumi.Input<{ [key: string]: pulumi.Input; }>; /** * The username to authenticate with. */ username?: pulumi.Input; } export interface ResourceHttpAuth { /** * The content to set as the authorization header. */ authHeader?: pulumi.Input; /** * The bind interface is the IP address to which the port override of a resource is bound (for example, 127.0.0.1). It is automatically generated if not provided and may also be set to one of the ResourceIPAllocationMode constants to select between VNM, loopback, or default allocation. */ bindInterface?: pulumi.Input; /** * Automatically redirect to this path upon connecting. */ defaultPath?: pulumi.Input; /** * A filter applied to the routing logic to pin datasource to nodes. */ egressFilter?: pulumi.Input; /** * Header names (e.g. Authorization), to omit from logs. */ headersBlacklist?: pulumi.Input; /** * This path will be used to check the health of your site. */ healthcheckPath: pulumi.Input; /** * The host header will be overwritten with this field if provided. */ hostOverride?: pulumi.Input; /** * Unique human-readable name of the Resource. */ name: pulumi.Input; /** * The local port used by clients to connect to this resource. It is automatically generated if not provided on create and may be re-generated on update by specifying a value of -1. */ portOverride?: pulumi.Input; /** * ID of the proxy cluster for this resource, if any. */ proxyClusterId?: pulumi.Input; /** * ID of the secret store containing credentials for this resource, if any. */ secretStoreId?: pulumi.Input; /** * Subdomain is the local DNS address. (e.g. app-prod1 turns into app-prod1.your-org-name.sdm.network) */ subdomain: pulumi.Input; /** * Tags is a map of key, value pairs. */ tags?: pulumi.Input<{ [key: string]: pulumi.Input; }>; /** * The base address of your website without the path. * * kubernetes: */ url: pulumi.Input; } export interface ResourceHttpBasicAuth { /** * The bind interface is the IP address to which the port override of a resource is bound (for example, 127.0.0.1). It is automatically generated if not provided and may also be set to one of the ResourceIPAllocationMode constants to select between VNM, loopback, or default allocation. */ bindInterface?: pulumi.Input; /** * Automatically redirect to this path upon connecting. */ defaultPath?: pulumi.Input; /** * A filter applied to the routing logic to pin datasource to nodes. */ egressFilter?: pulumi.Input; /** * Header names (e.g. Authorization), to omit from logs. */ headersBlacklist?: pulumi.Input; /** * This path will be used to check the health of your site. */ healthcheckPath: pulumi.Input; /** * The host header will be overwritten with this field if provided. */ hostOverride?: pulumi.Input; /** * Unique human-readable name of the Resource. */ name: pulumi.Input; /** * The password to authenticate with. */ password?: pulumi.Input; /** * The local port used by clients to connect to this resource. It is automatically generated if not provided on create and may be re-generated on update by specifying a value of -1. */ portOverride?: pulumi.Input; /** * ID of the proxy cluster for this resource, if any. */ proxyClusterId?: pulumi.Input; /** * ID of the secret store containing credentials for this resource, if any. */ secretStoreId?: pulumi.Input; /** * Subdomain is the local DNS address. (e.g. app-prod1 turns into app-prod1.your-org-name.sdm.network) */ subdomain: pulumi.Input; /** * Tags is a map of key, value pairs. */ tags?: pulumi.Input<{ [key: string]: pulumi.Input; }>; /** * The base address of your website without the path. * * kubernetes: */ url: pulumi.Input; /** * The username to authenticate with. */ username?: pulumi.Input; } export interface ResourceHttpNoAuth { /** * The bind interface is the IP address to which the port override of a resource is bound (for example, 127.0.0.1). It is automatically generated if not provided and may also be set to one of the ResourceIPAllocationMode constants to select between VNM, loopback, or default allocation. */ bindInterface?: pulumi.Input; /** * Automatically redirect to this path upon connecting. */ defaultPath?: pulumi.Input; /** * A filter applied to the routing logic to pin datasource to nodes. */ egressFilter?: pulumi.Input; /** * Header names (e.g. Authorization), to omit from logs. */ headersBlacklist?: pulumi.Input; /** * This path will be used to check the health of your site. */ healthcheckPath: pulumi.Input; /** * The host header will be overwritten with this field if provided. */ hostOverride?: pulumi.Input; /** * Unique human-readable name of the Resource. */ name: pulumi.Input; /** * The local port used by clients to connect to this resource. It is automatically generated if not provided on create and may be re-generated on update by specifying a value of -1. */ portOverride?: pulumi.Input; /** * ID of the proxy cluster for this resource, if any. */ proxyClusterId?: pulumi.Input; /** * ID of the secret store containing credentials for this resource, if any. */ secretStoreId?: pulumi.Input; /** * Subdomain is the local DNS address. (e.g. app-prod1 turns into app-prod1.your-org-name.sdm.network) */ subdomain: pulumi.Input; /** * Tags is a map of key, value pairs. */ tags?: pulumi.Input<{ [key: string]: pulumi.Input; }>; /** * The base address of your website without the path. * * kubernetes: */ url: pulumi.Input; } export interface ResourceKubernetes { /** * If true, allows users to fallback to the existing authentication mode (Leased Credential or Identity Set) when a resource role is not provided. */ allowResourceRoleBypass?: pulumi.Input; /** * The bind interface is the IP address to which the port override of a resource is bound (for example, 127.0.0.1). It is automatically generated if not provided and may also be set to one of the ResourceIPAllocationMode constants to select between VNM, loopback, or default allocation. */ bindInterface?: pulumi.Input; /** * The CA to authenticate TLS connections with. */ certificateAuthority?: pulumi.Input; /** * The certificate to authenticate TLS connections with. */ clientCertificate?: pulumi.Input; /** * The key to authenticate TLS connections with. */ clientKey?: pulumi.Input; /** * If true, configures discovery of a cluster to be run from a node. */ discoveryEnabled?: pulumi.Input; /** * If a cluster is configured for user impersonation, this is the user to impersonate when running discovery. */ discoveryUsername?: pulumi.Input; /** * A filter applied to the routing logic to pin datasource to nodes. */ egressFilter?: pulumi.Input; /** * The path used to check the health of your connection. Defaults to `default`. This field is required, and is only marked as optional for backwards compatibility. */ healthcheckNamespace?: pulumi.Input; /** * The host to dial to initiate a connection from the egress node to this resource. */ hostname: pulumi.Input; /** * The username to use for healthchecks, when clients otherwise connect with their own identity alias username. */ identityAliasHealthcheckUsername?: pulumi.Input; /** * The ID of the identity set to use for identity connections. */ identitySetId?: pulumi.Input; /** * Unique human-readable name of the Resource. */ name: pulumi.Input; /** * The port to dial to initiate a connection from the egress node to this resource. */ port: pulumi.Input; /** * The local port used by clients to connect to this resource. It is automatically generated if not provided on create and may be re-generated on update by specifying a value of -1. */ portOverride?: pulumi.Input; /** * ID of the proxy cluster for this resource, if any. */ proxyClusterId?: pulumi.Input; /** * ID of the secret store containing credentials for this resource, if any. */ secretStoreId?: pulumi.Input; /** * Subdomain is the local DNS address. (e.g. app-prod1 turns into app-prod1.your-org-name.sdm.network) */ subdomain?: pulumi.Input; /** * Tags is a map of key, value pairs. */ tags?: pulumi.Input<{ [key: string]: pulumi.Input; }>; } export interface ResourceKubernetesBasicAuth { /** * The bind interface is the IP address to which the port override of a resource is bound (for example, 127.0.0.1). It is automatically generated if not provided and may also be set to one of the ResourceIPAllocationMode constants to select between VNM, loopback, or default allocation. */ bindInterface?: pulumi.Input; /** * A filter applied to the routing logic to pin datasource to nodes. */ egressFilter?: pulumi.Input; /** * The path used to check the health of your connection. Defaults to `default`. This field is required, and is only marked as optional for backwards compatibility. */ healthcheckNamespace?: pulumi.Input; /** * The host to dial to initiate a connection from the egress node to this resource. */ hostname: pulumi.Input; /** * Unique human-readable name of the Resource. */ name: pulumi.Input; /** * The password to authenticate with. */ password?: pulumi.Input; /** * The port to dial to initiate a connection from the egress node to this resource. */ port: pulumi.Input; /** * The local port used by clients to connect to this resource. It is automatically generated if not provided on create and may be re-generated on update by specifying a value of -1. */ portOverride?: pulumi.Input; /** * ID of the proxy cluster for this resource, if any. */ proxyClusterId?: pulumi.Input; /** * ID of the secret store containing credentials for this resource, if any. */ secretStoreId?: pulumi.Input; /** * Subdomain is the local DNS address. (e.g. app-prod1 turns into app-prod1.your-org-name.sdm.network) */ subdomain?: pulumi.Input; /** * Tags is a map of key, value pairs. */ tags?: pulumi.Input<{ [key: string]: pulumi.Input; }>; /** * The username to authenticate with. */ username?: pulumi.Input; } export interface ResourceKubernetesPodIdentity { /** * If true, allows users to fallback to the existing authentication mode (Leased Credential or Identity Set) when a resource role is not provided. */ allowResourceRoleBypass?: pulumi.Input; /** * The bind interface is the IP address to which the port override of a resource is bound (for example, 127.0.0.1). It is automatically generated if not provided and may also be set to one of the ResourceIPAllocationMode constants to select between VNM, loopback, or default allocation. */ bindInterface?: pulumi.Input; /** * The CA to authenticate TLS connections with. */ certificateAuthority?: pulumi.Input; /** * If true, configures discovery of a cluster to be run from a node. */ discoveryEnabled?: pulumi.Input; /** * If a cluster is configured for user impersonation, this is the user to impersonate when running discovery. */ discoveryUsername?: pulumi.Input; /** * A filter applied to the routing logic to pin datasource to nodes. */ egressFilter?: pulumi.Input; /** * The path used to check the health of your connection. Defaults to `default`. This field is required, and is only marked as optional for backwards compatibility. */ healthcheckNamespace?: pulumi.Input; /** * The username to use for healthchecks, when clients otherwise connect with their own identity alias username. */ identityAliasHealthcheckUsername?: pulumi.Input; /** * The ID of the identity set to use for identity connections. */ identitySetId?: pulumi.Input; /** * Unique human-readable name of the Resource. */ name: pulumi.Input; /** * The local port used by clients to connect to this resource. It is automatically generated if not provided on create and may be re-generated on update by specifying a value of -1. */ portOverride?: pulumi.Input; /** * ID of the proxy cluster for this resource, if any. */ proxyClusterId?: pulumi.Input; /** * ID of the secret store containing credentials for this resource, if any. */ secretStoreId?: pulumi.Input; /** * Subdomain is the local DNS address. (e.g. app-prod1 turns into app-prod1.your-org-name.sdm.network) */ subdomain?: pulumi.Input; /** * Tags is a map of key, value pairs. */ tags?: pulumi.Input<{ [key: string]: pulumi.Input; }>; } export interface ResourceKubernetesServiceAccount { /** * If true, allows users to fallback to the existing authentication mode (Leased Credential or Identity Set) when a resource role is not provided. */ allowResourceRoleBypass?: pulumi.Input; /** * The bind interface is the IP address to which the port override of a resource is bound (for example, 127.0.0.1). It is automatically generated if not provided and may also be set to one of the ResourceIPAllocationMode constants to select between VNM, loopback, or default allocation. */ bindInterface?: pulumi.Input; /** * If true, configures discovery of a cluster to be run from a node. */ discoveryEnabled?: pulumi.Input; /** * If a cluster is configured for user impersonation, this is the user to impersonate when running discovery. */ discoveryUsername?: pulumi.Input; /** * A filter applied to the routing logic to pin datasource to nodes. */ egressFilter?: pulumi.Input; /** * The path used to check the health of your connection. Defaults to `default`. This field is required, and is only marked as optional for backwards compatibility. */ healthcheckNamespace?: pulumi.Input; /** * The host to dial to initiate a connection from the egress node to this resource. */ hostname: pulumi.Input; /** * The username to use for healthchecks, when clients otherwise connect with their own identity alias username. */ identityAliasHealthcheckUsername?: pulumi.Input; /** * The ID of the identity set to use for identity connections. */ identitySetId?: pulumi.Input; /** * Unique human-readable name of the Resource. */ name: pulumi.Input; /** * The port to dial to initiate a connection from the egress node to this resource. */ port: pulumi.Input; /** * The local port used by clients to connect to this resource. It is automatically generated if not provided on create and may be re-generated on update by specifying a value of -1. */ portOverride?: pulumi.Input; /** * ID of the proxy cluster for this resource, if any. */ proxyClusterId?: pulumi.Input; /** * ID of the secret store containing credentials for this resource, if any. */ secretStoreId?: pulumi.Input; /** * Subdomain is the local DNS address. (e.g. app-prod1 turns into app-prod1.your-org-name.sdm.network) */ subdomain?: pulumi.Input; /** * Tags is a map of key, value pairs. */ tags?: pulumi.Input<{ [key: string]: pulumi.Input; }>; /** * The API token to authenticate with. * * kubernetes_user_impersonation: */ token?: pulumi.Input; } export interface ResourceKubernetesServiceAccountUserImpersonation { /** * The bind interface is the IP address to which the port override of a resource is bound (for example, 127.0.0.1). It is automatically generated if not provided and may also be set to one of the ResourceIPAllocationMode constants to select between VNM, loopback, or default allocation. */ bindInterface?: pulumi.Input; /** * A filter applied to the routing logic to pin datasource to nodes. */ egressFilter?: pulumi.Input; /** * The path used to check the health of your connection. Defaults to `default`. This field is required, and is only marked as optional for backwards compatibility. */ healthcheckNamespace?: pulumi.Input; /** * The host to dial to initiate a connection from the egress node to this resource. */ hostname: pulumi.Input; /** * Unique human-readable name of the Resource. */ name: pulumi.Input; /** * The port to dial to initiate a connection from the egress node to this resource. */ port: pulumi.Input; /** * The local port used by clients to connect to this resource. It is automatically generated if not provided on create and may be re-generated on update by specifying a value of -1. */ portOverride?: pulumi.Input; /** * ID of the proxy cluster for this resource, if any. */ proxyClusterId?: pulumi.Input; /** * ID of the secret store containing credentials for this resource, if any. */ secretStoreId?: pulumi.Input; /** * Subdomain is the local DNS address. (e.g. app-prod1 turns into app-prod1.your-org-name.sdm.network) */ subdomain?: pulumi.Input; /** * Tags is a map of key, value pairs. */ tags?: pulumi.Input<{ [key: string]: pulumi.Input; }>; /** * The API token to authenticate with. * * kubernetes_user_impersonation: */ token?: pulumi.Input; } export interface ResourceKubernetesUserImpersonation { /** * The bind interface is the IP address to which the port override of a resource is bound (for example, 127.0.0.1). It is automatically generated if not provided and may also be set to one of the ResourceIPAllocationMode constants to select between VNM, loopback, or default allocation. */ bindInterface?: pulumi.Input; /** * The CA to authenticate TLS connections with. */ certificateAuthority?: pulumi.Input; /** * The certificate to authenticate TLS connections with. */ clientCertificate?: pulumi.Input; /** * The key to authenticate TLS connections with. */ clientKey?: pulumi.Input; /** * A filter applied to the routing logic to pin datasource to nodes. */ egressFilter?: pulumi.Input; /** * The path used to check the health of your connection. Defaults to `default`. This field is required, and is only marked as optional for backwards compatibility. */ healthcheckNamespace?: pulumi.Input; /** * The host to dial to initiate a connection from the egress node to this resource. */ hostname: pulumi.Input; /** * Unique human-readable name of the Resource. */ name: pulumi.Input; /** * The port to dial to initiate a connection from the egress node to this resource. */ port: pulumi.Input; /** * The local port used by clients to connect to this resource. It is automatically generated if not provided on create and may be re-generated on update by specifying a value of -1. */ portOverride?: pulumi.Input; /** * ID of the proxy cluster for this resource, if any. */ proxyClusterId?: pulumi.Input; /** * ID of the secret store containing credentials for this resource, if any. */ secretStoreId?: pulumi.Input; /** * Subdomain is the local DNS address. (e.g. app-prod1 turns into app-prod1.your-org-name.sdm.network) */ subdomain?: pulumi.Input; /** * Tags is a map of key, value pairs. */ tags?: pulumi.Input<{ [key: string]: pulumi.Input; }>; } export interface ResourceMaria { /** * The bind interface is the IP address to which the port override of a resource is bound (for example, 127.0.0.1). It is automatically generated if not provided and may also be set to one of the ResourceIPAllocationMode constants to select between VNM, loopback, or default allocation. */ bindInterface?: pulumi.Input; /** * The initial database to connect to. This setting does not by itself prevent switching to another database after connecting. */ database?: pulumi.Input; /** * A filter applied to the routing logic to pin datasource to nodes. */ egressFilter?: pulumi.Input; /** * The host to dial to initiate a connection from the egress node to this resource. */ hostname: pulumi.Input; /** * Unique human-readable name of the Resource. */ name: pulumi.Input; /** * The password to authenticate with. */ password?: pulumi.Input; /** * The port to dial to initiate a connection from the egress node to this resource. */ port?: pulumi.Input; /** * The local port used by clients to connect to this resource. It is automatically generated if not provided on create and may be re-generated on update by specifying a value of -1. */ portOverride?: pulumi.Input; /** * ID of the proxy cluster for this resource, if any. */ proxyClusterId?: pulumi.Input; /** * Whether native auth (mysql_native_password) is used for all connections (for backwards compatibility) */ requireNativeAuth?: pulumi.Input; /** * ID of the secret store containing credentials for this resource, if any. */ secretStoreId?: pulumi.Input; /** * Subdomain is the local DNS address. (e.g. app-prod1 turns into app-prod1.your-org-name.sdm.network) */ subdomain?: pulumi.Input; /** * Tags is a map of key, value pairs. */ tags?: pulumi.Input<{ [key: string]: pulumi.Input; }>; /** * If true, appends the hostname to the username when hitting a database.azure.com address */ useAzureSingleServerUsernames?: pulumi.Input; /** * The username to authenticate with. */ username?: pulumi.Input; } export interface ResourceMemcached { /** * The bind interface is the IP address to which the port override of a resource is bound (for example, 127.0.0.1). It is automatically generated if not provided and may also be set to one of the ResourceIPAllocationMode constants to select between VNM, loopback, or default allocation. */ bindInterface?: pulumi.Input; /** * A filter applied to the routing logic to pin datasource to nodes. */ egressFilter?: pulumi.Input; /** * The host to dial to initiate a connection from the egress node to this resource. */ hostname: pulumi.Input; /** * Unique human-readable name of the Resource. */ name: pulumi.Input; /** * The port to dial to initiate a connection from the egress node to this resource. */ port?: pulumi.Input; /** * The local port used by clients to connect to this resource. It is automatically generated if not provided on create and may be re-generated on update by specifying a value of -1. */ portOverride?: pulumi.Input; /** * ID of the proxy cluster for this resource, if any. */ proxyClusterId?: pulumi.Input; /** * ID of the secret store containing credentials for this resource, if any. */ secretStoreId?: pulumi.Input; /** * Subdomain is the local DNS address. (e.g. app-prod1 turns into app-prod1.your-org-name.sdm.network) */ subdomain?: pulumi.Input; /** * Tags is a map of key, value pairs. */ tags?: pulumi.Input<{ [key: string]: pulumi.Input; }>; } export interface ResourceMemsql { /** * The bind interface is the IP address to which the port override of a resource is bound (for example, 127.0.0.1). It is automatically generated if not provided and may also be set to one of the ResourceIPAllocationMode constants to select between VNM, loopback, or default allocation. */ bindInterface?: pulumi.Input; /** * The initial database to connect to. This setting does not by itself prevent switching to another database after connecting. */ database?: pulumi.Input; /** * A filter applied to the routing logic to pin datasource to nodes. */ egressFilter?: pulumi.Input; /** * The host to dial to initiate a connection from the egress node to this resource. */ hostname: pulumi.Input; /** * Unique human-readable name of the Resource. */ name: pulumi.Input; /** * The password to authenticate with. */ password?: pulumi.Input; /** * The port to dial to initiate a connection from the egress node to this resource. */ port?: pulumi.Input; /** * The local port used by clients to connect to this resource. It is automatically generated if not provided on create and may be re-generated on update by specifying a value of -1. */ portOverride?: pulumi.Input; /** * ID of the proxy cluster for this resource, if any. */ proxyClusterId?: pulumi.Input; /** * Whether native auth (mysql_native_password) is used for all connections (for backwards compatibility) */ requireNativeAuth?: pulumi.Input; /** * ID of the secret store containing credentials for this resource, if any. */ secretStoreId?: pulumi.Input; /** * Subdomain is the local DNS address. (e.g. app-prod1 turns into app-prod1.your-org-name.sdm.network) */ subdomain?: pulumi.Input; /** * Tags is a map of key, value pairs. */ tags?: pulumi.Input<{ [key: string]: pulumi.Input; }>; /** * If true, appends the hostname to the username when hitting a database.azure.com address */ useAzureSingleServerUsernames?: pulumi.Input; /** * The username to authenticate with. */ username?: pulumi.Input; } export interface ResourceMongoHost { /** * The authentication database to use. */ authDatabase: pulumi.Input; /** * The bind interface is the IP address to which the port override of a resource is bound (for example, 127.0.0.1). It is automatically generated if not provided and may also be set to one of the ResourceIPAllocationMode constants to select between VNM, loopback, or default allocation. */ bindInterface?: pulumi.Input; /** * A filter applied to the routing logic to pin datasource to nodes. */ egressFilter?: pulumi.Input; /** * The host to dial to initiate a connection from the egress node to this resource. */ hostname: pulumi.Input; /** * Unique human-readable name of the Resource. */ name: pulumi.Input; /** * The password to authenticate with. */ password?: pulumi.Input; /** * The port to dial to initiate a connection from the egress node to this resource. */ port?: pulumi.Input; /** * The local port used by clients to connect to this resource. It is automatically generated if not provided on create and may be re-generated on update by specifying a value of -1. */ portOverride?: pulumi.Input; /** * ID of the proxy cluster for this resource, if any. */ proxyClusterId?: pulumi.Input; /** * ID of the secret store containing credentials for this resource, if any. */ secretStoreId?: pulumi.Input; /** * Subdomain is the local DNS address. (e.g. app-prod1 turns into app-prod1.your-org-name.sdm.network) */ subdomain?: pulumi.Input; /** * Tags is a map of key, value pairs. */ tags?: pulumi.Input<{ [key: string]: pulumi.Input; }>; /** * If set, TLS must be used to connect to this resource. */ tlsRequired?: pulumi.Input; /** * The username to authenticate with. */ username?: pulumi.Input; } export interface ResourceMongoLegacyHost { /** * The authentication database to use. */ authDatabase: pulumi.Input; /** * The bind interface is the IP address to which the port override of a resource is bound (for example, 127.0.0.1). It is automatically generated if not provided and may also be set to one of the ResourceIPAllocationMode constants to select between VNM, loopback, or default allocation. */ bindInterface?: pulumi.Input; /** * A filter applied to the routing logic to pin datasource to nodes. */ egressFilter?: pulumi.Input; /** * The host to dial to initiate a connection from the egress node to this resource. */ hostname: pulumi.Input; /** * Unique human-readable name of the Resource. */ name: pulumi.Input; /** * The password to authenticate with. */ password?: pulumi.Input; /** * The port to dial to initiate a connection from the egress node to this resource. */ port?: pulumi.Input; /** * The local port used by clients to connect to this resource. It is automatically generated if not provided on create and may be re-generated on update by specifying a value of -1. */ portOverride?: pulumi.Input; /** * ID of the proxy cluster for this resource, if any. */ proxyClusterId?: pulumi.Input; /** * ID of the secret store containing credentials for this resource, if any. */ secretStoreId?: pulumi.Input; /** * Subdomain is the local DNS address. (e.g. app-prod1 turns into app-prod1.your-org-name.sdm.network) */ subdomain?: pulumi.Input; /** * Tags is a map of key, value pairs. */ tags?: pulumi.Input<{ [key: string]: pulumi.Input; }>; /** * If set, TLS must be used to connect to this resource. */ tlsRequired?: pulumi.Input; /** * The username to authenticate with. */ username?: pulumi.Input; } export interface ResourceMongoLegacyReplicaset { /** * The authentication database to use. */ authDatabase: pulumi.Input; /** * The bind interface is the IP address to which the port override of a resource is bound (for example, 127.0.0.1). It is automatically generated if not provided and may also be set to one of the ResourceIPAllocationMode constants to select between VNM, loopback, or default allocation. */ bindInterface?: pulumi.Input; /** * Set to connect to a replica instead of the primary node. */ connectToReplica?: pulumi.Input; /** * A filter applied to the routing logic to pin datasource to nodes. */ egressFilter?: pulumi.Input; /** * The host to dial to initiate a connection from the egress node to this resource. */ hostname: pulumi.Input; /** * Unique human-readable name of the Resource. */ name: pulumi.Input; /** * The password to authenticate with. */ password?: pulumi.Input; /** * The port to dial to initiate a connection from the egress node to this resource. */ port?: pulumi.Input; /** * The local port used by clients to connect to this resource. It is automatically generated if not provided on create and may be re-generated on update by specifying a value of -1. */ portOverride?: pulumi.Input; /** * ID of the proxy cluster for this resource, if any. */ proxyClusterId?: pulumi.Input; /** * The name of the mongo replicaset. */ replicaSet: pulumi.Input; /** * ID of the secret store containing credentials for this resource, if any. */ secretStoreId?: pulumi.Input; /** * Subdomain is the local DNS address. (e.g. app-prod1 turns into app-prod1.your-org-name.sdm.network) */ subdomain?: pulumi.Input; /** * Tags is a map of key, value pairs. */ tags?: pulumi.Input<{ [key: string]: pulumi.Input; }>; /** * If set, TLS must be used to connect to this resource. */ tlsRequired?: pulumi.Input; /** * The username to authenticate with. */ username?: pulumi.Input; } export interface ResourceMongoReplicaSet { /** * The authentication database to use. */ authDatabase: pulumi.Input; /** * The bind interface is the IP address to which the port override of a resource is bound (for example, 127.0.0.1). It is automatically generated if not provided and may also be set to one of the ResourceIPAllocationMode constants to select between VNM, loopback, or default allocation. */ bindInterface?: pulumi.Input; /** * Set to connect to a replica instead of the primary node. */ connectToReplica?: pulumi.Input; /** * A filter applied to the routing logic to pin datasource to nodes. */ egressFilter?: pulumi.Input; /** * The host to dial to initiate a connection from the egress node to this resource. */ hostname: pulumi.Input; /** * Unique human-readable name of the Resource. */ name: pulumi.Input; /** * The password to authenticate with. */ password?: pulumi.Input; /** * The port to dial to initiate a connection from the egress node to this resource. */ port?: pulumi.Input; /** * The local port used by clients to connect to this resource. It is automatically generated if not provided on create and may be re-generated on update by specifying a value of -1. */ portOverride?: pulumi.Input; /** * ID of the proxy cluster for this resource, if any. */ proxyClusterId?: pulumi.Input; /** * The name of the mongo replicaset. */ replicaSet: pulumi.Input; /** * ID of the secret store containing credentials for this resource, if any. */ secretStoreId?: pulumi.Input; /** * Subdomain is the local DNS address. (e.g. app-prod1 turns into app-prod1.your-org-name.sdm.network) */ subdomain?: pulumi.Input; /** * Tags is a map of key, value pairs. */ tags?: pulumi.Input<{ [key: string]: pulumi.Input; }>; /** * If set, TLS must be used to connect to this resource. */ tlsRequired?: pulumi.Input; /** * The username to authenticate with. */ username?: pulumi.Input; } export interface ResourceMongoShardedCluster { /** * The authentication database to use. */ authDatabase: pulumi.Input; /** * The bind interface is the IP address to which the port override of a resource is bound (for example, 127.0.0.1). It is automatically generated if not provided and may also be set to one of the ResourceIPAllocationMode constants to select between VNM, loopback, or default allocation. */ bindInterface?: pulumi.Input; /** * A filter applied to the routing logic to pin datasource to nodes. */ egressFilter?: pulumi.Input; /** * The host to dial to initiate a connection from the egress node to this resource. */ hostname: pulumi.Input; /** * Unique human-readable name of the Resource. */ name: pulumi.Input; /** * The password to authenticate with. */ password?: pulumi.Input; /** * The local port used by clients to connect to this resource. It is automatically generated if not provided on create and may be re-generated on update by specifying a value of -1. */ portOverride?: pulumi.Input; /** * ID of the proxy cluster for this resource, if any. */ proxyClusterId?: pulumi.Input; /** * ID of the secret store containing credentials for this resource, if any. */ secretStoreId?: pulumi.Input; /** * Subdomain is the local DNS address. (e.g. app-prod1 turns into app-prod1.your-org-name.sdm.network) */ subdomain?: pulumi.Input; /** * Tags is a map of key, value pairs. */ tags?: pulumi.Input<{ [key: string]: pulumi.Input; }>; /** * If set, TLS must be used to connect to this resource. */ tlsRequired?: pulumi.Input; /** * The username to authenticate with. */ username?: pulumi.Input; } export interface ResourceMtlsMysql { /** * The bind interface is the IP address to which the port override of a resource is bound (for example, 127.0.0.1). It is automatically generated if not provided and may also be set to one of the ResourceIPAllocationMode constants to select between VNM, loopback, or default allocation. */ bindInterface?: pulumi.Input; /** * The CA to authenticate TLS connections with. */ certificateAuthority?: pulumi.Input; /** * The certificate to authenticate TLS connections with. */ clientCertificate?: pulumi.Input; /** * The key to authenticate TLS connections with. */ clientKey?: pulumi.Input; /** * The initial database to connect to. This setting does not by itself prevent switching to another database after connecting. */ database?: pulumi.Input; /** * A filter applied to the routing logic to pin datasource to nodes. */ egressFilter?: pulumi.Input; /** * The host to dial to initiate a connection from the egress node to this resource. */ hostname: pulumi.Input; /** * Unique human-readable name of the Resource. */ name: pulumi.Input; /** * The password to authenticate with. */ password?: pulumi.Input; /** * The port to dial to initiate a connection from the egress node to this resource. */ port?: pulumi.Input; /** * The local port used by clients to connect to this resource. It is automatically generated if not provided on create and may be re-generated on update by specifying a value of -1. */ portOverride?: pulumi.Input; /** * ID of the proxy cluster for this resource, if any. */ proxyClusterId?: pulumi.Input; /** * Whether native auth (mysql_native_password) is used for all connections (for backwards compatibility) */ requireNativeAuth?: pulumi.Input; /** * ID of the secret store containing credentials for this resource, if any. */ secretStoreId?: pulumi.Input; /** * Server name for TLS verification (unverified by StrongDM if empty) */ serverName?: pulumi.Input; /** * Subdomain is the local DNS address. (e.g. app-prod1 turns into app-prod1.your-org-name.sdm.network) */ subdomain?: pulumi.Input; /** * Tags is a map of key, value pairs. */ tags?: pulumi.Input<{ [key: string]: pulumi.Input; }>; /** * If true, appends the hostname to the username when hitting a database.azure.com address */ useAzureSingleServerUsernames?: pulumi.Input; /** * The username to authenticate with. */ username?: pulumi.Input; } export interface ResourceMtlsPostgres { /** * The bind interface is the IP address to which the port override of a resource is bound (for example, 127.0.0.1). It is automatically generated if not provided and may also be set to one of the ResourceIPAllocationMode constants to select between VNM, loopback, or default allocation. */ bindInterface?: pulumi.Input; /** * The CA to authenticate TLS connections with. */ certificateAuthority?: pulumi.Input; /** * The certificate to authenticate TLS connections with. */ clientCertificate?: pulumi.Input; /** * The key to authenticate TLS connections with. */ clientKey?: pulumi.Input; /** * The initial database to connect to. This setting does not by itself prevent switching to another database after connecting. */ database: pulumi.Input; /** * A filter applied to the routing logic to pin datasource to nodes. */ egressFilter?: pulumi.Input; /** * The host to dial to initiate a connection from the egress node to this resource. */ hostname: pulumi.Input; /** * Unique human-readable name of the Resource. */ name: pulumi.Input; /** * If set, the database configured cannot be changed by users. This setting is not recommended for most use cases, as some clients will insist their database has changed when it has not, leading to user confusion. */ overrideDatabase?: pulumi.Input; /** * The password to authenticate with. */ password?: pulumi.Input; /** * The port to dial to initiate a connection from the egress node to this resource. */ port?: pulumi.Input; /** * The local port used by clients to connect to this resource. It is automatically generated if not provided on create and may be re-generated on update by specifying a value of -1. */ portOverride?: pulumi.Input; /** * ID of the proxy cluster for this resource, if any. */ proxyClusterId?: pulumi.Input; /** * ID of the secret store containing credentials for this resource, if any. */ secretStoreId?: pulumi.Input; /** * Server name for TLS verification (unverified by StrongDM if empty) */ serverName?: pulumi.Input; /** * Subdomain is the local DNS address. (e.g. app-prod1 turns into app-prod1.your-org-name.sdm.network) */ subdomain?: pulumi.Input; /** * Tags is a map of key, value pairs. */ tags?: pulumi.Input<{ [key: string]: pulumi.Input; }>; /** * The username to authenticate with. */ username?: pulumi.Input; } export interface ResourceMysql { /** * The bind interface is the IP address to which the port override of a resource is bound (for example, 127.0.0.1). It is automatically generated if not provided and may also be set to one of the ResourceIPAllocationMode constants to select between VNM, loopback, or default allocation. */ bindInterface?: pulumi.Input; /** * The initial database to connect to. This setting does not by itself prevent switching to another database after connecting. */ database?: pulumi.Input; /** * A filter applied to the routing logic to pin datasource to nodes. */ egressFilter?: pulumi.Input; /** * The host to dial to initiate a connection from the egress node to this resource. */ hostname: pulumi.Input; /** * Unique human-readable name of the Resource. */ name: pulumi.Input; /** * The password to authenticate with. */ password?: pulumi.Input; /** * The port to dial to initiate a connection from the egress node to this resource. */ port?: pulumi.Input; /** * The local port used by clients to connect to this resource. It is automatically generated if not provided on create and may be re-generated on update by specifying a value of -1. */ portOverride?: pulumi.Input; /** * ID of the proxy cluster for this resource, if any. */ proxyClusterId?: pulumi.Input; /** * Whether native auth (mysql_native_password) is used for all connections (for backwards compatibility) */ requireNativeAuth?: pulumi.Input; /** * ID of the secret store containing credentials for this resource, if any. */ secretStoreId?: pulumi.Input; /** * Subdomain is the local DNS address. (e.g. app-prod1 turns into app-prod1.your-org-name.sdm.network) */ subdomain?: pulumi.Input; /** * Tags is a map of key, value pairs. */ tags?: pulumi.Input<{ [key: string]: pulumi.Input; }>; /** * If true, appends the hostname to the username when hitting a database.azure.com address */ useAzureSingleServerUsernames?: pulumi.Input; /** * The username to authenticate with. */ username?: pulumi.Input; } export interface ResourceNeptune { /** * The bind interface is the IP address to which the port override of a resource is bound (for example, 127.0.0.1). It is automatically generated if not provided and may also be set to one of the ResourceIPAllocationMode constants to select between VNM, loopback, or default allocation. */ bindInterface?: pulumi.Input; /** * A filter applied to the routing logic to pin datasource to nodes. */ egressFilter?: pulumi.Input; /** * The neptune endpoint to connect to as in endpoint.region.neptune.amazonaws.com */ endpoint: pulumi.Input; /** * Unique human-readable name of the Resource. */ name: pulumi.Input; /** * The port to dial to initiate a connection from the egress node to this resource. */ port?: pulumi.Input; /** * The local port used by clients to connect to this resource. It is automatically generated if not provided on create and may be re-generated on update by specifying a value of -1. */ portOverride?: pulumi.Input; /** * ID of the proxy cluster for this resource, if any. */ proxyClusterId?: pulumi.Input; /** * ID of the secret store containing credentials for this resource, if any. */ secretStoreId?: pulumi.Input; /** * Subdomain is the local DNS address. (e.g. app-prod1 turns into app-prod1.your-org-name.sdm.network) */ subdomain?: pulumi.Input; /** * Tags is a map of key, value pairs. */ tags?: pulumi.Input<{ [key: string]: pulumi.Input; }>; } export interface ResourceNeptuneIam { /** * The Access Key ID to use to authenticate. */ accessKey?: pulumi.Input; /** * The bind interface is the IP address to which the port override of a resource is bound (for example, 127.0.0.1). It is automatically generated if not provided and may also be set to one of the ResourceIPAllocationMode constants to select between VNM, loopback, or default allocation. */ bindInterface?: pulumi.Input; /** * A filter applied to the routing logic to pin datasource to nodes. */ egressFilter?: pulumi.Input; /** * The neptune endpoint to connect to as in endpoint.region.neptune.amazonaws.com */ endpoint: pulumi.Input; /** * Unique human-readable name of the Resource. */ name: pulumi.Input; /** * The port to dial to initiate a connection from the egress node to this resource. */ port?: pulumi.Input; /** * The local port used by clients to connect to this resource. It is automatically generated if not provided on create and may be re-generated on update by specifying a value of -1. */ portOverride?: pulumi.Input; /** * ID of the proxy cluster for this resource, if any. */ proxyClusterId?: pulumi.Input; /** * The AWS region to connect to. */ region: pulumi.Input; /** * The role to assume after logging in. */ roleArn?: pulumi.Input; /** * The external ID to associate with assume role requests. Does nothing if a role ARN is not provided. */ roleExternalId?: pulumi.Input; /** * The Secret Access Key to use to authenticate. */ secretAccessKey?: pulumi.Input; /** * ID of the secret store containing credentials for this resource, if any. */ secretStoreId?: pulumi.Input; /** * Subdomain is the local DNS address. (e.g. app-prod1 turns into app-prod1.your-org-name.sdm.network) */ subdomain?: pulumi.Input; /** * Tags is a map of key, value pairs. */ tags?: pulumi.Input<{ [key: string]: pulumi.Input; }>; } export interface ResourceOracle { /** * The bind interface is the IP address to which the port override of a resource is bound (for example, 127.0.0.1). It is automatically generated if not provided and may also be set to one of the ResourceIPAllocationMode constants to select between VNM, loopback, or default allocation. */ bindInterface?: pulumi.Input; /** * The initial database to connect to. This setting does not by itself prevent switching to another database after connecting. */ database: pulumi.Input; /** * A filter applied to the routing logic to pin datasource to nodes. */ egressFilter?: pulumi.Input; /** * The host to dial to initiate a connection from the egress node to this resource. */ hostname: pulumi.Input; /** * Unique human-readable name of the Resource. */ name: pulumi.Input; /** * The password to authenticate with. */ password?: pulumi.Input; /** * The port to dial to initiate a connection from the egress node to this resource. */ port: pulumi.Input; /** * The local port used by clients to connect to this resource. It is automatically generated if not provided on create and may be re-generated on update by specifying a value of -1. */ portOverride?: pulumi.Input; /** * ID of the proxy cluster for this resource, if any. */ proxyClusterId?: pulumi.Input; /** * ID of the secret store containing credentials for this resource, if any. */ secretStoreId?: pulumi.Input; /** * Subdomain is the local DNS address. (e.g. app-prod1 turns into app-prod1.your-org-name.sdm.network) */ subdomain?: pulumi.Input; /** * Tags is a map of key, value pairs. */ tags?: pulumi.Input<{ [key: string]: pulumi.Input; }>; /** * If set, TLS must be used to connect to this resource. */ tlsRequired?: pulumi.Input; /** * The username to authenticate with. */ username?: pulumi.Input; } export interface ResourceOracleNne { /** * The bind interface is the IP address to which the port override of a resource is bound (for example, 127.0.0.1). It is automatically generated if not provided and may also be set to one of the ResourceIPAllocationMode constants to select between VNM, loopback, or default allocation. */ bindInterface?: pulumi.Input; /** * The initial database to connect to. This setting does not by itself prevent switching to another database after connecting. */ database: pulumi.Input; /** * A filter applied to the routing logic to pin datasource to nodes. */ egressFilter?: pulumi.Input; /** * The host to dial to initiate a connection from the egress node to this resource. */ hostname: pulumi.Input; /** * Unique human-readable name of the Resource. */ name: pulumi.Input; /** * The password to authenticate with. */ password?: pulumi.Input; /** * The port to dial to initiate a connection from the egress node to this resource. */ port: pulumi.Input; /** * The local port used by clients to connect to this resource. It is automatically generated if not provided on create and may be re-generated on update by specifying a value of -1. */ portOverride?: pulumi.Input; /** * ID of the proxy cluster for this resource, if any. */ proxyClusterId?: pulumi.Input; /** * ID of the secret store containing credentials for this resource, if any. */ secretStoreId?: pulumi.Input; /** * Subdomain is the local DNS address. (e.g. app-prod1 turns into app-prod1.your-org-name.sdm.network) */ subdomain?: pulumi.Input; /** * Tags is a map of key, value pairs. */ tags?: pulumi.Input<{ [key: string]: pulumi.Input; }>; /** * The username to authenticate with. */ username?: pulumi.Input; } export interface ResourcePostgres { /** * The bind interface is the IP address to which the port override of a resource is bound (for example, 127.0.0.1). It is automatically generated if not provided and may also be set to one of the ResourceIPAllocationMode constants to select between VNM, loopback, or default allocation. */ bindInterface?: pulumi.Input; /** * The initial database to connect to. This setting does not by itself prevent switching to another database after connecting. */ database: pulumi.Input; /** * A filter applied to the routing logic to pin datasource to nodes. */ egressFilter?: pulumi.Input; /** * The host to dial to initiate a connection from the egress node to this resource. */ hostname: pulumi.Input; /** * Unique human-readable name of the Resource. */ name: pulumi.Input; /** * If set, the database configured cannot be changed by users. This setting is not recommended for most use cases, as some clients will insist their database has changed when it has not, leading to user confusion. */ overrideDatabase?: pulumi.Input; /** * The password to authenticate with. */ password?: pulumi.Input; /** * The port to dial to initiate a connection from the egress node to this resource. */ port?: pulumi.Input; /** * The local port used by clients to connect to this resource. It is automatically generated if not provided on create and may be re-generated on update by specifying a value of -1. */ portOverride?: pulumi.Input; /** * ID of the proxy cluster for this resource, if any. */ proxyClusterId?: pulumi.Input; /** * ID of the secret store containing credentials for this resource, if any. */ secretStoreId?: pulumi.Input; /** * Subdomain is the local DNS address. (e.g. app-prod1 turns into app-prod1.your-org-name.sdm.network) */ subdomain?: pulumi.Input; /** * Tags is a map of key, value pairs. */ tags?: pulumi.Input<{ [key: string]: pulumi.Input; }>; /** * The username to authenticate with. */ username?: pulumi.Input; } export interface ResourcePresto { /** * The bind interface is the IP address to which the port override of a resource is bound (for example, 127.0.0.1). It is automatically generated if not provided and may also be set to one of the ResourceIPAllocationMode constants to select between VNM, loopback, or default allocation. */ bindInterface?: pulumi.Input; /** * The initial database to connect to. This setting does not by itself prevent switching to another database after connecting. */ database: pulumi.Input; /** * A filter applied to the routing logic to pin datasource to nodes. */ egressFilter?: pulumi.Input; /** * The host to dial to initiate a connection from the egress node to this resource. */ hostname: pulumi.Input; /** * Unique human-readable name of the Resource. */ name: pulumi.Input; /** * The password to authenticate with. */ password?: pulumi.Input; /** * The port to dial to initiate a connection from the egress node to this resource. */ port?: pulumi.Input; /** * The local port used by clients to connect to this resource. It is automatically generated if not provided on create and may be re-generated on update by specifying a value of -1. */ portOverride?: pulumi.Input; /** * ID of the proxy cluster for this resource, if any. */ proxyClusterId?: pulumi.Input; /** * ID of the secret store containing credentials for this resource, if any. */ secretStoreId?: pulumi.Input; /** * Subdomain is the local DNS address. (e.g. app-prod1 turns into app-prod1.your-org-name.sdm.network) */ subdomain?: pulumi.Input; /** * Tags is a map of key, value pairs. */ tags?: pulumi.Input<{ [key: string]: pulumi.Input; }>; /** * If set, TLS must be used to connect to this resource. */ tlsRequired?: pulumi.Input; /** * The username to authenticate with. */ username?: pulumi.Input; } export interface ResourceRabbitmqAmqp091 { /** * The bind interface is the IP address to which the port override of a resource is bound (for example, 127.0.0.1). It is automatically generated if not provided and may also be set to one of the ResourceIPAllocationMode constants to select between VNM, loopback, or default allocation. */ bindInterface?: pulumi.Input; /** * A filter applied to the routing logic to pin datasource to nodes. */ egressFilter?: pulumi.Input; /** * The host to dial to initiate a connection from the egress node to this resource. */ hostname: pulumi.Input; /** * Unique human-readable name of the Resource. */ name: pulumi.Input; /** * The password to authenticate with. */ password?: pulumi.Input; /** * The port to dial to initiate a connection from the egress node to this resource. */ port?: pulumi.Input; /** * The local port used by clients to connect to this resource. It is automatically generated if not provided on create and may be re-generated on update by specifying a value of -1. */ portOverride?: pulumi.Input; /** * ID of the proxy cluster for this resource, if any. */ proxyClusterId?: pulumi.Input; /** * ID of the secret store containing credentials for this resource, if any. */ secretStoreId?: pulumi.Input; /** * Subdomain is the local DNS address. (e.g. app-prod1 turns into app-prod1.your-org-name.sdm.network) */ subdomain?: pulumi.Input; /** * Tags is a map of key, value pairs. */ tags?: pulumi.Input<{ [key: string]: pulumi.Input; }>; /** * If set, TLS must be used to connect to this resource. */ tlsRequired?: pulumi.Input; /** * The username to authenticate with. */ username?: pulumi.Input; } export interface ResourceRawTcp { /** * The bind interface is the IP address to which the port override of a resource is bound (for example, 127.0.0.1). It is automatically generated if not provided and may also be set to one of the ResourceIPAllocationMode constants to select between VNM, loopback, or default allocation. */ bindInterface?: pulumi.Input; /** * A filter applied to the routing logic to pin datasource to nodes. */ egressFilter?: pulumi.Input; /** * The host to dial to initiate a connection from the egress node to this resource. */ hostname: pulumi.Input; /** * Unique human-readable name of the Resource. */ name: pulumi.Input; /** * The port to dial to initiate a connection from the egress node to this resource. */ port?: pulumi.Input; /** * The local port used by clients to connect to this resource. It is automatically generated if not provided on create and may be re-generated on update by specifying a value of -1. */ portOverride?: pulumi.Input; /** * ID of the proxy cluster for this resource, if any. */ proxyClusterId?: pulumi.Input; /** * ID of the secret store containing credentials for this resource, if any. */ secretStoreId?: pulumi.Input; /** * Subdomain is the local DNS address. (e.g. app-prod1 turns into app-prod1.your-org-name.sdm.network) */ subdomain?: pulumi.Input; /** * Tags is a map of key, value pairs. */ tags?: pulumi.Input<{ [key: string]: pulumi.Input; }>; } export interface ResourceRdp { /** * The bind interface is the IP address to which the port override of a resource is bound (for example, 127.0.0.1). It is automatically generated if not provided and may also be set to one of the ResourceIPAllocationMode constants to select between VNM, loopback, or default allocation. */ bindInterface?: pulumi.Input; /** * When set, network level authentication will not be used. May resolve unexpected authentication errors to older servers. When set, healthchecks cannot detect if a provided username / password pair is correct. */ downgradeNlaConnections?: pulumi.Input; /** * A filter applied to the routing logic to pin datasource to nodes. */ egressFilter?: pulumi.Input; /** * The host to dial to initiate a connection from the egress node to this resource. */ hostname: pulumi.Input; /** * When set, require a resource lock to access the resource to ensure it can only be used by one user at a time. */ lockRequired?: pulumi.Input; /** * Unique human-readable name of the Resource. */ name: pulumi.Input; /** * The password to authenticate with. */ password?: pulumi.Input; /** * The port to dial to initiate a connection from the egress node to this resource. */ port?: pulumi.Input; /** * The local port used by clients to connect to this resource. It is automatically generated if not provided on create and may be re-generated on update by specifying a value of -1. */ portOverride?: pulumi.Input; /** * ID of the proxy cluster for this resource, if any. */ proxyClusterId?: pulumi.Input; /** * ID of the secret store containing credentials for this resource, if any. */ secretStoreId?: pulumi.Input; /** * Subdomain is the local DNS address. (e.g. app-prod1 turns into app-prod1.your-org-name.sdm.network) */ subdomain?: pulumi.Input; /** * Tags is a map of key, value pairs. */ tags?: pulumi.Input<{ [key: string]: pulumi.Input; }>; /** * The username to authenticate with. */ username?: pulumi.Input; } export interface ResourceRdpCert { /** * The bind interface is the IP address to which the port override of a resource is bound (for example, 127.0.0.1). It is automatically generated if not provided and may also be set to one of the ResourceIPAllocationMode constants to select between VNM, loopback, or default allocation. */ bindInterface?: pulumi.Input; /** * A filter applied to the routing logic to pin datasource to nodes. */ egressFilter?: pulumi.Input; /** * The host to dial to initiate a connection from the egress node to this resource. */ hostname: pulumi.Input; /** * The username to use for healthchecks, when clients otherwise connect with their own identity alias username. */ identityAliasHealthcheckUsername?: pulumi.Input; /** * The ID of the identity set to use for identity connections. */ identitySetId?: pulumi.Input; /** * When set, require a resource lock to access the resource to ensure it can only be used by one user at a time. */ lockRequired?: pulumi.Input; /** * Unique human-readable name of the Resource. */ name: pulumi.Input; /** * The port to dial to initiate a connection from the egress node to this resource. */ port?: pulumi.Input; /** * The local port used by clients to connect to this resource. It is automatically generated if not provided on create and may be re-generated on update by specifying a value of -1. */ portOverride?: pulumi.Input; /** * ID of the proxy cluster for this resource, if any. */ proxyClusterId?: pulumi.Input; /** * ID of the secret store containing credentials for this resource, if any. */ secretStoreId?: pulumi.Input; /** * Windows Security Identifier (SID) of the configured Username, required for strong certificate mapping in full enforcement mode. */ sid?: pulumi.Input; /** * Subdomain is the local DNS address. (e.g. app-prod1 turns into app-prod1.your-org-name.sdm.network) */ subdomain?: pulumi.Input; /** * Tags is a map of key, value pairs. */ tags?: pulumi.Input<{ [key: string]: pulumi.Input; }>; /** * The username to authenticate with. */ username?: pulumi.Input; } export interface ResourceRdsPostgresIam { /** * The bind interface is the IP address to which the port override of a resource is bound (for example, 127.0.0.1). It is automatically generated if not provided and may also be set to one of the ResourceIPAllocationMode constants to select between VNM, loopback, or default allocation. */ bindInterface?: pulumi.Input; /** * The initial database to connect to. This setting does not by itself prevent switching to another database after connecting. */ database: pulumi.Input; /** * A filter applied to the routing logic to pin datasource to nodes. */ egressFilter?: pulumi.Input; /** * The host to dial to initiate a connection from the egress node to this resource. */ hostname: pulumi.Input; /** * Unique human-readable name of the Resource. */ name: pulumi.Input; /** * If set, the database configured cannot be changed by users. This setting is not recommended for most use cases, as some clients will insist their database has changed when it has not, leading to user confusion. */ overrideDatabase?: pulumi.Input; /** * The port to dial to initiate a connection from the egress node to this resource. */ port?: pulumi.Input; /** * The local port used by clients to connect to this resource. It is automatically generated if not provided on create and may be re-generated on update by specifying a value of -1. */ portOverride?: pulumi.Input; /** * ID of the proxy cluster for this resource, if any. */ proxyClusterId?: pulumi.Input; /** * The AWS region to connect to. */ region: pulumi.Input; /** * If provided, the gateway/relay will try to assume this role instead of the underlying compute's role. */ roleAssumptionArn?: pulumi.Input; /** * ID of the secret store containing credentials for this resource, if any. */ secretStoreId?: pulumi.Input; /** * Subdomain is the local DNS address. (e.g. app-prod1 turns into app-prod1.your-org-name.sdm.network) */ subdomain?: pulumi.Input; /** * Tags is a map of key, value pairs. */ tags?: pulumi.Input<{ [key: string]: pulumi.Input; }>; /** * The username to authenticate with. */ username?: pulumi.Input; } export interface ResourceRedis { /** * The bind interface is the IP address to which the port override of a resource is bound (for example, 127.0.0.1). It is automatically generated if not provided and may also be set to one of the ResourceIPAllocationMode constants to select between VNM, loopback, or default allocation. */ bindInterface?: pulumi.Input; /** * A filter applied to the routing logic to pin datasource to nodes. */ egressFilter?: pulumi.Input; /** * The host to dial to initiate a connection from the egress node to this resource. */ hostname: pulumi.Input; /** * Unique human-readable name of the Resource. */ name: pulumi.Input; /** * The password to authenticate with. */ password?: pulumi.Input; /** * The port to dial to initiate a connection from the egress node to this resource. */ port?: pulumi.Input; /** * The local port used by clients to connect to this resource. It is automatically generated if not provided on create and may be re-generated on update by specifying a value of -1. */ portOverride?: pulumi.Input; /** * ID of the proxy cluster for this resource, if any. */ proxyClusterId?: pulumi.Input; /** * ID of the secret store containing credentials for this resource, if any. */ secretStoreId?: pulumi.Input; /** * Subdomain is the local DNS address. (e.g. app-prod1 turns into app-prod1.your-org-name.sdm.network) */ subdomain?: pulumi.Input; /** * Tags is a map of key, value pairs. */ tags?: pulumi.Input<{ [key: string]: pulumi.Input; }>; /** * If set, TLS must be used to connect to this resource. */ tlsRequired?: pulumi.Input; /** * The username to authenticate with. */ username?: pulumi.Input; } export interface ResourceRedisCluster { /** * The bind interface is the IP address to which the port override of a resource is bound (for example, 127.0.0.1). It is automatically generated if not provided and may also be set to one of the ResourceIPAllocationMode constants to select between VNM, loopback, or default allocation. */ bindInterface?: pulumi.Input; /** * A filter applied to the routing logic to pin datasource to nodes. */ egressFilter?: pulumi.Input; /** * The host to dial to initiate a connection from the egress node to this resource. */ hostname: pulumi.Input; /** * Unique human-readable name of the Resource. */ name: pulumi.Input; /** * The password to authenticate with. */ password?: pulumi.Input; /** * The port to dial to initiate a connection from the egress node to this resource. */ port?: pulumi.Input; /** * The local port used by clients to connect to this resource. It is automatically generated if not provided on create and may be re-generated on update by specifying a value of -1. */ portOverride?: pulumi.Input; /** * ID of the proxy cluster for this resource, if any. */ proxyClusterId?: pulumi.Input; /** * ID of the secret store containing credentials for this resource, if any. */ secretStoreId?: pulumi.Input; /** * Subdomain is the local DNS address. (e.g. app-prod1 turns into app-prod1.your-org-name.sdm.network) */ subdomain?: pulumi.Input; /** * Tags is a map of key, value pairs. */ tags?: pulumi.Input<{ [key: string]: pulumi.Input; }>; /** * If set, TLS must be used to connect to this resource. */ tlsRequired?: pulumi.Input; /** * The username to authenticate with. */ username?: pulumi.Input; } export interface ResourceRedshift { /** * The bind interface is the IP address to which the port override of a resource is bound (for example, 127.0.0.1). It is automatically generated if not provided and may also be set to one of the ResourceIPAllocationMode constants to select between VNM, loopback, or default allocation. */ bindInterface?: pulumi.Input; /** * The initial database to connect to. This setting does not by itself prevent switching to another database after connecting. */ database: pulumi.Input; /** * A filter applied to the routing logic to pin datasource to nodes. */ egressFilter?: pulumi.Input; /** * The host to dial to initiate a connection from the egress node to this resource. */ hostname: pulumi.Input; /** * Unique human-readable name of the Resource. */ name: pulumi.Input; /** * If set, the database configured cannot be changed by users. This setting is not recommended for most use cases, as some clients will insist their database has changed when it has not, leading to user confusion. */ overrideDatabase?: pulumi.Input; /** * The password to authenticate with. */ password?: pulumi.Input; /** * The port to dial to initiate a connection from the egress node to this resource. */ port?: pulumi.Input; /** * The local port used by clients to connect to this resource. It is automatically generated if not provided on create and may be re-generated on update by specifying a value of -1. */ portOverride?: pulumi.Input; /** * ID of the proxy cluster for this resource, if any. */ proxyClusterId?: pulumi.Input; /** * ID of the secret store containing credentials for this resource, if any. */ secretStoreId?: pulumi.Input; /** * Subdomain is the local DNS address. (e.g. app-prod1 turns into app-prod1.your-org-name.sdm.network) */ subdomain?: pulumi.Input; /** * Tags is a map of key, value pairs. */ tags?: pulumi.Input<{ [key: string]: pulumi.Input; }>; /** * The username to authenticate with. */ username?: pulumi.Input; } export interface ResourceRedshiftIam { /** * The bind interface is the IP address to which the port override of a resource is bound (for example, 127.0.0.1). It is automatically generated if not provided and may also be set to one of the ResourceIPAllocationMode constants to select between VNM, loopback, or default allocation. */ bindInterface?: pulumi.Input; /** * Cluster Identified of Redshift cluster */ clusterId: pulumi.Input; /** * The initial database to connect to. This setting does not by itself prevent switching to another database after connecting. */ database: pulumi.Input; /** * A filter applied to the routing logic to pin datasource to nodes. */ egressFilter?: pulumi.Input; /** * The host to dial to initiate a connection from the egress node to this resource. */ hostname: pulumi.Input; /** * Unique human-readable name of the Resource. */ name: pulumi.Input; /** * If set, the database configured cannot be changed by users. This setting is not recommended for most use cases, as some clients will insist their database has changed when it has not, leading to user confusion. */ overrideDatabase?: pulumi.Input; /** * The port to dial to initiate a connection from the egress node to this resource. */ port?: pulumi.Input; /** * The local port used by clients to connect to this resource. It is automatically generated if not provided on create and may be re-generated on update by specifying a value of -1. */ portOverride?: pulumi.Input; /** * ID of the proxy cluster for this resource, if any. */ proxyClusterId?: pulumi.Input; /** * The AWS region to connect to. */ region: pulumi.Input; /** * If provided, the gateway/relay will try to assume this role instead of the underlying compute's role. */ roleAssumptionArn?: pulumi.Input; /** * ID of the secret store containing credentials for this resource, if any. */ secretStoreId?: pulumi.Input; /** * Subdomain is the local DNS address. (e.g. app-prod1 turns into app-prod1.your-org-name.sdm.network) */ subdomain?: pulumi.Input; /** * Tags is a map of key, value pairs. */ tags?: pulumi.Input<{ [key: string]: pulumi.Input; }>; } export interface ResourceRedshiftServerlessIam { /** * The bind interface is the IP address to which the port override of a resource is bound (for example, 127.0.0.1). It is automatically generated if not provided and may also be set to one of the ResourceIPAllocationMode constants to select between VNM, loopback, or default allocation. */ bindInterface?: pulumi.Input; /** * The initial database to connect to. This setting does not by itself prevent switching to another database after connecting. */ database: pulumi.Input; /** * A filter applied to the routing logic to pin datasource to nodes. */ egressFilter?: pulumi.Input; /** * The host to dial to initiate a connection from the egress node to this resource. */ hostname: pulumi.Input; /** * Unique human-readable name of the Resource. */ name: pulumi.Input; /** * If set, the database configured cannot be changed by users. This setting is not recommended for most use cases, as some clients will insist their database has changed when it has not, leading to user confusion. */ overrideDatabase?: pulumi.Input; /** * The port to dial to initiate a connection from the egress node to this resource. */ port?: pulumi.Input; /** * The local port used by clients to connect to this resource. It is automatically generated if not provided on create and may be re-generated on update by specifying a value of -1. */ portOverride?: pulumi.Input; /** * ID of the proxy cluster for this resource, if any. */ proxyClusterId?: pulumi.Input; /** * The AWS region to connect to. */ region: pulumi.Input; /** * If provided, the gateway/relay will try to assume this role instead of the underlying compute's role. */ roleAssumptionArn?: pulumi.Input; /** * ID of the secret store containing credentials for this resource, if any. */ secretStoreId?: pulumi.Input; /** * Subdomain is the local DNS address. (e.g. app-prod1 turns into app-prod1.your-org-name.sdm.network) */ subdomain?: pulumi.Input; /** * Tags is a map of key, value pairs. */ tags?: pulumi.Input<{ [key: string]: pulumi.Input; }>; /** * Workgroup name in the serverless Redshift * * single_store: */ workgroup: pulumi.Input; } export interface ResourceSingleStore { /** * The bind interface is the IP address to which the port override of a resource is bound (for example, 127.0.0.1). It is automatically generated if not provided and may also be set to one of the ResourceIPAllocationMode constants to select between VNM, loopback, or default allocation. */ bindInterface?: pulumi.Input; /** * The initial database to connect to. This setting does not by itself prevent switching to another database after connecting. */ database?: pulumi.Input; /** * A filter applied to the routing logic to pin datasource to nodes. */ egressFilter?: pulumi.Input; /** * The host to dial to initiate a connection from the egress node to this resource. */ hostname: pulumi.Input; /** * Unique human-readable name of the Resource. */ name: pulumi.Input; /** * The password to authenticate with. */ password?: pulumi.Input; /** * The port to dial to initiate a connection from the egress node to this resource. */ port?: pulumi.Input; /** * The local port used by clients to connect to this resource. It is automatically generated if not provided on create and may be re-generated on update by specifying a value of -1. */ portOverride?: pulumi.Input; /** * ID of the proxy cluster for this resource, if any. */ proxyClusterId?: pulumi.Input; /** * Whether native auth (mysql_native_password) is used for all connections (for backwards compatibility) */ requireNativeAuth?: pulumi.Input; /** * ID of the secret store containing credentials for this resource, if any. */ secretStoreId?: pulumi.Input; /** * Subdomain is the local DNS address. (e.g. app-prod1 turns into app-prod1.your-org-name.sdm.network) */ subdomain?: pulumi.Input; /** * Tags is a map of key, value pairs. */ tags?: pulumi.Input<{ [key: string]: pulumi.Input; }>; /** * If true, appends the hostname to the username when hitting a database.azure.com address */ useAzureSingleServerUsernames?: pulumi.Input; /** * The username to authenticate with. */ username?: pulumi.Input; } export interface ResourceSnowflake { /** * The bind interface is the IP address to which the port override of a resource is bound (for example, 127.0.0.1). It is automatically generated if not provided and may also be set to one of the ResourceIPAllocationMode constants to select between VNM, loopback, or default allocation. */ bindInterface?: pulumi.Input; /** * The initial database to connect to. This setting does not by itself prevent switching to another database after connecting. */ database: pulumi.Input; /** * A filter applied to the routing logic to pin datasource to nodes. */ egressFilter?: pulumi.Input; /** * The host to dial to initiate a connection from the egress node to this resource. */ hostname: pulumi.Input; /** * Unique human-readable name of the Resource. */ name: pulumi.Input; /** * The password to authenticate with. */ password?: pulumi.Input; /** * The local port used by clients to connect to this resource. It is automatically generated if not provided on create and may be re-generated on update by specifying a value of -1. */ portOverride?: pulumi.Input; /** * The private key used to authenticate with the server. */ privateKey?: pulumi.Input; /** * ID of the proxy cluster for this resource, if any. */ proxyClusterId?: pulumi.Input; /** * The Schema to use to direct initial requests. */ schema?: pulumi.Input; /** * ID of the secret store containing credentials for this resource, if any. */ secretStoreId?: pulumi.Input; /** * Subdomain is the local DNS address. (e.g. app-prod1 turns into app-prod1.your-org-name.sdm.network) */ subdomain?: pulumi.Input; /** * Tags is a map of key, value pairs. */ tags?: pulumi.Input<{ [key: string]: pulumi.Input; }>; /** * The username to authenticate with. */ username?: pulumi.Input; } export interface ResourceSnowsight { /** * The bind interface is the IP address to which the port override of a resource is bound (for example, 127.0.0.1). It is automatically generated if not provided and may also be set to one of the ResourceIPAllocationMode constants to select between VNM, loopback, or default allocation. */ bindInterface?: pulumi.Input; /** * A filter applied to the routing logic to pin datasource to nodes. */ egressFilter?: pulumi.Input; /** * The StrongDM user email to use for healthchecks. */ healthcheckUsername: pulumi.Input; /** * Unique human-readable name of the Resource. */ name: pulumi.Input; /** * The local port used by clients to connect to this resource. It is automatically generated if not provided on create and may be re-generated on update by specifying a value of -1. */ portOverride?: pulumi.Input; /** * ID of the proxy cluster for this resource, if any. */ proxyClusterId?: pulumi.Input; /** * The Metadata for your snowflake IDP integration */ samlMetadata?: pulumi.Input; /** * ID of the secret store containing credentials for this resource, if any. */ secretStoreId?: pulumi.Input; /** * Subdomain is the local DNS address. (e.g. app-prod1 turns into app-prod1.your-org-name.sdm.network) */ subdomain: pulumi.Input; /** * Tags is a map of key, value pairs. */ tags?: pulumi.Input<{ [key: string]: pulumi.Input; }>; } export interface ResourceSqlServer { /** * Whether to allow deprecated encryption protocols to be used for this resource. For example, TLS 1.0. */ allowDeprecatedEncryption?: pulumi.Input; /** * The bind interface is the IP address to which the port override of a resource is bound (for example, 127.0.0.1). It is automatically generated if not provided and may also be set to one of the ResourceIPAllocationMode constants to select between VNM, loopback, or default allocation. */ bindInterface?: pulumi.Input; /** * The initial database to connect to. This setting does not by itself prevent switching to another database after connecting. */ database?: pulumi.Input; /** * A filter applied to the routing logic to pin datasource to nodes. */ egressFilter?: pulumi.Input; /** * The host to dial to initiate a connection from the egress node to this resource. */ hostname: pulumi.Input; /** * Unique human-readable name of the Resource. */ name: pulumi.Input; /** * If set, the database configured cannot be changed by users. This setting is not recommended for most use cases, as some clients will insist their database has changed when it has not, leading to user confusion. */ overrideDatabase?: pulumi.Input; /** * The password to authenticate with. */ password?: pulumi.Input; /** * The port to dial to initiate a connection from the egress node to this resource. */ port?: pulumi.Input; /** * The local port used by clients to connect to this resource. It is automatically generated if not provided on create and may be re-generated on update by specifying a value of -1. */ portOverride?: pulumi.Input; /** * ID of the proxy cluster for this resource, if any. */ proxyClusterId?: pulumi.Input; /** * The Schema to use to direct initial requests. */ schema?: pulumi.Input; /** * ID of the secret store containing credentials for this resource, if any. */ secretStoreId?: pulumi.Input; /** * Subdomain is the local DNS address. (e.g. app-prod1 turns into app-prod1.your-org-name.sdm.network) */ subdomain?: pulumi.Input; /** * Tags is a map of key, value pairs. */ tags?: pulumi.Input<{ [key: string]: pulumi.Input; }>; /** * The username to authenticate with. */ username?: pulumi.Input; } export interface ResourceSqlServerAzureAd { /** * Whether to allow deprecated encryption protocols to be used for this resource. For example, TLS 1.0. */ allowDeprecatedEncryption?: pulumi.Input; /** * The bind interface is the IP address to which the port override of a resource is bound (for example, 127.0.0.1). It is automatically generated if not provided and may also be set to one of the ResourceIPAllocationMode constants to select between VNM, loopback, or default allocation. */ bindInterface?: pulumi.Input; /** * The Azure AD application (client) ID with which to authenticate. */ clientId?: pulumi.Input; /** * The initial database to connect to. This setting does not by itself prevent switching to another database after connecting. */ database?: pulumi.Input; /** * A filter applied to the routing logic to pin datasource to nodes. */ egressFilter?: pulumi.Input; /** * The host to dial to initiate a connection from the egress node to this resource. */ hostname: pulumi.Input; /** * Unique human-readable name of the Resource. */ name: pulumi.Input; /** * If set, the database configured cannot be changed by users. This setting is not recommended for most use cases, as some clients will insist their database has changed when it has not, leading to user confusion. */ overrideDatabase?: pulumi.Input; /** * The port to dial to initiate a connection from the egress node to this resource. */ port?: pulumi.Input; /** * The local port used by clients to connect to this resource. It is automatically generated if not provided on create and may be re-generated on update by specifying a value of -1. */ portOverride?: pulumi.Input; /** * ID of the proxy cluster for this resource, if any. */ proxyClusterId?: pulumi.Input; /** * The Schema to use to direct initial requests. */ schema?: pulumi.Input; /** * The Azure AD client secret (application password) with which to authenticate. */ secret?: pulumi.Input; /** * ID of the secret store containing credentials for this resource, if any. */ secretStoreId?: pulumi.Input; /** * Subdomain is the local DNS address. (e.g. app-prod1 turns into app-prod1.your-org-name.sdm.network) */ subdomain?: pulumi.Input; /** * Tags is a map of key, value pairs. */ tags?: pulumi.Input<{ [key: string]: pulumi.Input; }>; /** * The Azure AD directory (tenant) ID with which to authenticate. * * sql_server_kerberos_ad: */ tenantId?: pulumi.Input; } export interface ResourceSqlServerKerberosAd { /** * Whether to allow deprecated encryption protocols to be used for this resource. For example, TLS 1.0. */ allowDeprecatedEncryption?: pulumi.Input; /** * The bind interface is the IP address to which the port override of a resource is bound (for example, 127.0.0.1). It is automatically generated if not provided and may also be set to one of the ResourceIPAllocationMode constants to select between VNM, loopback, or default allocation. */ bindInterface?: pulumi.Input; /** * The initial database to connect to. This setting does not by itself prevent switching to another database after connecting. */ database?: pulumi.Input; /** * A filter applied to the routing logic to pin datasource to nodes. */ egressFilter?: pulumi.Input; /** * The host to dial to initiate a connection from the egress node to this resource. */ hostname: pulumi.Input; /** * The keytab file in base64 format containing an entry with the principal name (username@realm) and key version number with which to authenticate. */ keytab?: pulumi.Input; /** * The Kerberos 5 configuration file (krb5.conf) specifying the Active Directory server (KDC) for the configured realm. */ krbConfig?: pulumi.Input; /** * Unique human-readable name of the Resource. */ name: pulumi.Input; /** * If set, the database configured cannot be changed by users. This setting is not recommended for most use cases, as some clients will insist their database has changed when it has not, leading to user confusion. */ overrideDatabase?: pulumi.Input; /** * The port to dial to initiate a connection from the egress node to this resource. */ port?: pulumi.Input; /** * The local port used by clients to connect to this resource. It is automatically generated if not provided on create and may be re-generated on update by specifying a value of -1. */ portOverride?: pulumi.Input; /** * ID of the proxy cluster for this resource, if any. */ proxyClusterId?: pulumi.Input; /** * The Active Directory domain (realm) to which the configured username belongs. */ realm?: pulumi.Input; /** * The Schema to use to direct initial requests. */ schema?: pulumi.Input; /** * ID of the secret store containing credentials for this resource, if any. */ secretStoreId?: pulumi.Input; /** * The Service Principal Name of the Microsoft SQL Server instance in Active Directory. */ serverSpn: pulumi.Input; /** * Subdomain is the local DNS address. (e.g. app-prod1 turns into app-prod1.your-org-name.sdm.network) */ subdomain?: pulumi.Input; /** * Tags is a map of key, value pairs. */ tags?: pulumi.Input<{ [key: string]: pulumi.Input; }>; /** * The username to authenticate with. */ username?: pulumi.Input; } export interface ResourceSsh { /** * Whether deprecated, insecure key exchanges are allowed for use to connect to the target ssh server. */ allowDeprecatedKeyExchanges?: pulumi.Input; /** * The bind interface is the IP address to which the port override of a resource is bound (for example, 127.0.0.1). It is automatically generated if not provided and may also be set to one of the ResourceIPAllocationMode constants to select between VNM, loopback, or default allocation. */ bindInterface?: pulumi.Input; /** * A filter applied to the routing logic to pin datasource to nodes. */ egressFilter?: pulumi.Input; /** * The host to dial to initiate a connection from the egress node to this resource. */ hostname: pulumi.Input; /** * The key type to use e.g. rsa-2048 or ed25519 */ keyType?: pulumi.Input; /** * Unique human-readable name of the Resource. */ name: pulumi.Input; /** * The port to dial to initiate a connection from the egress node to this resource. */ port: pulumi.Input; /** * Whether port forwarding is allowed through this server. */ portForwarding?: pulumi.Input; /** * The local port used by clients to connect to this resource. It is automatically generated if not provided on create and may be re-generated on update by specifying a value of -1. */ portOverride?: pulumi.Input; /** * ID of the proxy cluster for this resource, if any. */ proxyClusterId?: pulumi.Input; /** * The public key to append to a server's authorized keys. This will be generated after resource creation. */ publicKey?: pulumi.Input; /** * ID of the secret store containing credentials for this resource, if any. */ secretStoreId?: pulumi.Input; /** * Subdomain is the local DNS address. (e.g. app-prod1 turns into app-prod1.your-org-name.sdm.network) */ subdomain?: pulumi.Input; /** * Tags is a map of key, value pairs. */ tags?: pulumi.Input<{ [key: string]: pulumi.Input; }>; /** * The username to authenticate with. */ username?: pulumi.Input; } export interface ResourceSshCert { /** * Whether deprecated, insecure key exchanges are allowed for use to connect to the target ssh server. */ allowDeprecatedKeyExchanges?: pulumi.Input; /** * The bind interface is the IP address to which the port override of a resource is bound (for example, 127.0.0.1). It is automatically generated if not provided and may also be set to one of the ResourceIPAllocationMode constants to select between VNM, loopback, or default allocation. */ bindInterface?: pulumi.Input; /** * A filter applied to the routing logic to pin datasource to nodes. */ egressFilter?: pulumi.Input; /** * The host to dial to initiate a connection from the egress node to this resource. */ hostname: pulumi.Input; /** * The username to use for healthchecks, when clients otherwise connect with their own identity alias username. */ identityAliasHealthcheckUsername?: pulumi.Input; /** * The ID of the identity set to use for identity connections. */ identitySetId?: pulumi.Input; /** * The key type to use e.g. rsa-2048 or ed25519 */ keyType?: pulumi.Input; /** * Unique human-readable name of the Resource. */ name: pulumi.Input; /** * The port to dial to initiate a connection from the egress node to this resource. */ port: pulumi.Input; /** * Whether port forwarding is allowed through this server. */ portForwarding?: pulumi.Input; /** * The local port used by clients to connect to this resource. It is automatically generated if not provided on create and may be re-generated on update by specifying a value of -1. */ portOverride?: pulumi.Input; /** * ID of the proxy cluster for this resource, if any. */ proxyClusterId?: pulumi.Input; /** * ID of the secret store containing credentials for this resource, if any. */ secretStoreId?: pulumi.Input; /** * Subdomain is the local DNS address. (e.g. app-prod1 turns into app-prod1.your-org-name.sdm.network) */ subdomain?: pulumi.Input; /** * Tags is a map of key, value pairs. */ tags?: pulumi.Input<{ [key: string]: pulumi.Input; }>; /** * The username to authenticate with. */ username?: pulumi.Input; } export interface ResourceSshCustomerKey { /** * Whether deprecated, insecure key exchanges are allowed for use to connect to the target ssh server. */ allowDeprecatedKeyExchanges?: pulumi.Input; /** * The bind interface is the IP address to which the port override of a resource is bound (for example, 127.0.0.1). It is automatically generated if not provided and may also be set to one of the ResourceIPAllocationMode constants to select between VNM, loopback, or default allocation. */ bindInterface?: pulumi.Input; /** * A filter applied to the routing logic to pin datasource to nodes. */ egressFilter?: pulumi.Input; /** * The host to dial to initiate a connection from the egress node to this resource. */ hostname: pulumi.Input; /** * The username to use for healthchecks, when clients otherwise connect with their own identity alias username. */ identityAliasHealthcheckUsername?: pulumi.Input; /** * The ID of the identity set to use for identity connections. */ identitySetId?: pulumi.Input; /** * Unique human-readable name of the Resource. */ name: pulumi.Input; /** * The port to dial to initiate a connection from the egress node to this resource. */ port: pulumi.Input; /** * Whether port forwarding is allowed through this server. */ portForwarding?: pulumi.Input; /** * The local port used by clients to connect to this resource. It is automatically generated if not provided on create and may be re-generated on update by specifying a value of -1. */ portOverride?: pulumi.Input; /** * The private key used to authenticate with the server. */ privateKey?: pulumi.Input; /** * ID of the proxy cluster for this resource, if any. */ proxyClusterId?: pulumi.Input; /** * ID of the secret store containing credentials for this resource, if any. */ secretStoreId?: pulumi.Input; /** * Subdomain is the local DNS address. (e.g. app-prod1 turns into app-prod1.your-org-name.sdm.network) */ subdomain?: pulumi.Input; /** * Tags is a map of key, value pairs. */ tags?: pulumi.Input<{ [key: string]: pulumi.Input; }>; /** * The username to authenticate with. */ username?: pulumi.Input; } export interface ResourceSshPassword { /** * Whether deprecated, insecure key exchanges are allowed for use to connect to the target ssh server. */ allowDeprecatedKeyExchanges?: pulumi.Input; /** * The bind interface is the IP address to which the port override of a resource is bound (for example, 127.0.0.1). It is automatically generated if not provided and may also be set to one of the ResourceIPAllocationMode constants to select between VNM, loopback, or default allocation. */ bindInterface?: pulumi.Input; /** * A filter applied to the routing logic to pin datasource to nodes. */ egressFilter?: pulumi.Input; /** * The host to dial to initiate a connection from the egress node to this resource. */ hostname: pulumi.Input; /** * Unique human-readable name of the Resource. */ name: pulumi.Input; /** * The password to authenticate with. */ password?: pulumi.Input; /** * The port to dial to initiate a connection from the egress node to this resource. */ port: pulumi.Input; /** * Whether port forwarding is allowed through this server. */ portForwarding?: pulumi.Input; /** * The local port used by clients to connect to this resource. It is automatically generated if not provided on create and may be re-generated on update by specifying a value of -1. */ portOverride?: pulumi.Input; /** * ID of the proxy cluster for this resource, if any. */ proxyClusterId?: pulumi.Input; /** * ID of the secret store containing credentials for this resource, if any. */ secretStoreId?: pulumi.Input; /** * Subdomain is the local DNS address. (e.g. app-prod1 turns into app-prod1.your-org-name.sdm.network) */ subdomain?: pulumi.Input; /** * Tags is a map of key, value pairs. */ tags?: pulumi.Input<{ [key: string]: pulumi.Input; }>; /** * The username to authenticate with. */ username?: pulumi.Input; } export interface ResourceSybase { /** * The bind interface is the IP address to which the port override of a resource is bound (for example, 127.0.0.1). It is automatically generated if not provided and may also be set to one of the ResourceIPAllocationMode constants to select between VNM, loopback, or default allocation. */ bindInterface?: pulumi.Input; /** * A filter applied to the routing logic to pin datasource to nodes. */ egressFilter?: pulumi.Input; /** * The host to dial to initiate a connection from the egress node to this resource. */ hostname: pulumi.Input; /** * Unique human-readable name of the Resource. */ name: pulumi.Input; /** * The password to authenticate with. */ password?: pulumi.Input; /** * The port to dial to initiate a connection from the egress node to this resource. */ port?: pulumi.Input; /** * The local port used by clients to connect to this resource. It is automatically generated if not provided on create and may be re-generated on update by specifying a value of -1. */ portOverride?: pulumi.Input; /** * ID of the proxy cluster for this resource, if any. */ proxyClusterId?: pulumi.Input; /** * ID of the secret store containing credentials for this resource, if any. */ secretStoreId?: pulumi.Input; /** * Subdomain is the local DNS address. (e.g. app-prod1 turns into app-prod1.your-org-name.sdm.network) */ subdomain?: pulumi.Input; /** * Tags is a map of key, value pairs. */ tags?: pulumi.Input<{ [key: string]: pulumi.Input; }>; /** * The username to authenticate with. */ username?: pulumi.Input; } export interface ResourceSybaseIq { /** * The bind interface is the IP address to which the port override of a resource is bound (for example, 127.0.0.1). It is automatically generated if not provided and may also be set to one of the ResourceIPAllocationMode constants to select between VNM, loopback, or default allocation. */ bindInterface?: pulumi.Input; /** * A filter applied to the routing logic to pin datasource to nodes. */ egressFilter?: pulumi.Input; /** * The host to dial to initiate a connection from the egress node to this resource. */ hostname: pulumi.Input; /** * Unique human-readable name of the Resource. */ name: pulumi.Input; /** * The password to authenticate with. */ password?: pulumi.Input; /** * The port to dial to initiate a connection from the egress node to this resource. */ port?: pulumi.Input; /** * The local port used by clients to connect to this resource. It is automatically generated if not provided on create and may be re-generated on update by specifying a value of -1. */ portOverride?: pulumi.Input; /** * ID of the proxy cluster for this resource, if any. */ proxyClusterId?: pulumi.Input; /** * ID of the secret store containing credentials for this resource, if any. */ secretStoreId?: pulumi.Input; /** * Subdomain is the local DNS address. (e.g. app-prod1 turns into app-prod1.your-org-name.sdm.network) */ subdomain?: pulumi.Input; /** * Tags is a map of key, value pairs. */ tags?: pulumi.Input<{ [key: string]: pulumi.Input; }>; /** * The username to authenticate with. */ username?: pulumi.Input; } export interface ResourceTeradata { /** * The bind interface is the IP address to which the port override of a resource is bound (for example, 127.0.0.1). It is automatically generated if not provided and may also be set to one of the ResourceIPAllocationMode constants to select between VNM, loopback, or default allocation. */ bindInterface?: pulumi.Input; /** * A filter applied to the routing logic to pin datasource to nodes. */ egressFilter?: pulumi.Input; /** * The host to dial to initiate a connection from the egress node to this resource. */ hostname: pulumi.Input; /** * Unique human-readable name of the Resource. */ name: pulumi.Input; /** * The password to authenticate with. */ password?: pulumi.Input; /** * The port to dial to initiate a connection from the egress node to this resource. */ port?: pulumi.Input; /** * The local port used by clients to connect to this resource. It is automatically generated if not provided on create and may be re-generated on update by specifying a value of -1. */ portOverride?: pulumi.Input; /** * ID of the proxy cluster for this resource, if any. */ proxyClusterId?: pulumi.Input; /** * ID of the secret store containing credentials for this resource, if any. */ secretStoreId?: pulumi.Input; /** * Subdomain is the local DNS address. (e.g. app-prod1 turns into app-prod1.your-org-name.sdm.network) */ subdomain?: pulumi.Input; /** * Tags is a map of key, value pairs. */ tags?: pulumi.Input<{ [key: string]: pulumi.Input; }>; /** * The username to authenticate with. */ username?: pulumi.Input; } export interface ResourceTrino { /** * The bind interface is the IP address to which the port override of a resource is bound (for example, 127.0.0.1). It is automatically generated if not provided and may also be set to one of the ResourceIPAllocationMode constants to select between VNM, loopback, or default allocation. */ bindInterface?: pulumi.Input; /** * A filter applied to the routing logic to pin datasource to nodes. */ egressFilter?: pulumi.Input; /** * The host to dial to initiate a connection from the egress node to this resource. */ hostname: pulumi.Input; /** * Unique human-readable name of the Resource. */ name: pulumi.Input; /** * The password to authenticate with. */ password?: pulumi.Input; /** * The port to dial to initiate a connection from the egress node to this resource. */ port?: pulumi.Input; /** * The local port used by clients to connect to this resource. It is automatically generated if not provided on create and may be re-generated on update by specifying a value of -1. */ portOverride?: pulumi.Input; /** * ID of the proxy cluster for this resource, if any. */ proxyClusterId?: pulumi.Input; /** * ID of the secret store containing credentials for this resource, if any. */ secretStoreId?: pulumi.Input; /** * Subdomain is the local DNS address. (e.g. app-prod1 turns into app-prod1.your-org-name.sdm.network) */ subdomain?: pulumi.Input; /** * Tags is a map of key, value pairs. */ tags?: pulumi.Input<{ [key: string]: pulumi.Input; }>; /** * If set, TLS must be used to connect to this resource. */ tlsRequired?: pulumi.Input; /** * The username to authenticate with. */ username?: pulumi.Input; } export interface ResourceVertica { /** * The bind interface is the IP address to which the port override of a resource is bound (for example, 127.0.0.1). It is automatically generated if not provided and may also be set to one of the ResourceIPAllocationMode constants to select between VNM, loopback, or default allocation. */ bindInterface?: pulumi.Input; /** * The initial database to connect to. This setting does not by itself prevent switching to another database after connecting. */ database: pulumi.Input; /** * A filter applied to the routing logic to pin datasource to nodes. */ egressFilter?: pulumi.Input; /** * The host to dial to initiate a connection from the egress node to this resource. */ hostname: pulumi.Input; /** * Unique human-readable name of the Resource. */ name: pulumi.Input; /** * The password to authenticate with. */ password?: pulumi.Input; /** * The port to dial to initiate a connection from the egress node to this resource. */ port?: pulumi.Input; /** * The local port used by clients to connect to this resource. It is automatically generated if not provided on create and may be re-generated on update by specifying a value of -1. */ portOverride?: pulumi.Input; /** * ID of the proxy cluster for this resource, if any. */ proxyClusterId?: pulumi.Input; /** * ID of the secret store containing credentials for this resource, if any. */ secretStoreId?: pulumi.Input; /** * Subdomain is the local DNS address. (e.g. app-prod1 turns into app-prod1.your-org-name.sdm.network) */ subdomain?: pulumi.Input; /** * Tags is a map of key, value pairs. */ tags?: pulumi.Input<{ [key: string]: pulumi.Input; }>; /** * The username to authenticate with. */ username?: pulumi.Input; } export interface SecretEngineActiveDirectory { /** * The default time-to-live duration of the password after it's read. Once the ttl has passed, a password will be rotated. */ afterReadTtl?: pulumi.Input; /** * Distinguished name of object to bind when performing user and group search. Example: cn=vault,ou=Users,dc=example,dc=com */ binddn: pulumi.Input; /** * Password to use along with binddn when performing user search. */ bindpass: pulumi.Input; /** * CA certificate to use when verifying LDAP server certificate, must be x509 PEM encoded. */ certificate?: pulumi.Input; /** * Timeout, in seconds, when attempting to connect to the LDAP server before trying the next URL in the configuration. */ connectionTimeout?: pulumi.Input; /** * If set to true this will prevent password change timestamp validation in Active Directory when validating credentials */ doNotValidateTimestamps?: pulumi.Input; /** * If true, skips LDAP server SSL certificate verification - insecure, use with caution! */ insecureTls?: pulumi.Input; /** * An interval of public/private key rotation for secret engine in days */ keyRotationIntervalDays?: pulumi.Input; /** * The maximum retry duration in case of automatic failure. On failed ttl rotation attempt it will be retried in an increasing intervals until it reaches max_backoff_duration */ maxBackoffDuration?: pulumi.Input; /** * Unique human-readable name of the Secret Engine. */ name: pulumi.Input; /** * Public key linked with a secret engine */ publicKey?: pulumi.Input; /** * Timeout, in seconds, for the connection when making requests against the server before returning back an error. */ requestTimeout?: pulumi.Input; /** * Backing secret store identifier */ secretStoreId: pulumi.Input; /** * Backing Secret Store root path where managed secrets are going to be stored */ secretStoreRootPath: pulumi.Input; /** * If true, issues a StartTLS command after establishing an unencrypted connection. */ startTls?: pulumi.Input; /** * Tags is a map of key, value pairs. */ tags?: pulumi.Input<{ [key: string]: pulumi.Input; }>; /** * The default password time-to-live duration. Once the ttl has passed, a password will be rotated the next time it's requested. */ ttl?: pulumi.Input; /** * The domain (userPrincipalDomain) used to construct a UPN string for authentication. */ upndomain?: pulumi.Input; /** * The LDAP server to connect to. */ url: pulumi.Input; /** * Base DN under which to perform user search. Example: ou=Users,dc=example,dc=com * * key_value: */ userdn?: pulumi.Input; } export interface SecretEngineKeyValue { /** * An interval of public/private key rotation for secret engine in days */ keyRotationIntervalDays?: pulumi.Input; /** * Unique human-readable name of the Secret Engine. */ name: pulumi.Input; /** * Public key linked with a secret engine */ publicKey?: pulumi.Input; /** * Backing secret store identifier */ secretStoreId: pulumi.Input; /** * Backing Secret Store root path where managed secrets are going to be stored */ secretStoreRootPath: pulumi.Input; /** * Tags is a map of key, value pairs. */ tags?: pulumi.Input<{ [key: string]: pulumi.Input; }>; } export interface SecretStoreActiveDirectoryStore { /** * Unique human-readable name of the SecretStore. */ name: pulumi.Input; /** * The URL of the Vault to target */ serverAddress: pulumi.Input; /** * Tags is a map of key, value pairs. */ tags?: pulumi.Input<{ [key: string]: pulumi.Input; }>; } export interface SecretStoreAws { /** * Unique human-readable name of the SecretStore. */ name: pulumi.Input; /** * The AWS region to target e.g. us-east-1 */ region: pulumi.Input; /** * Tags is a map of key, value pairs. */ tags?: pulumi.Input<{ [key: string]: pulumi.Input; }>; } export interface SecretStoreAwsCertX509 { /** * The ARN of the CA in AWS Private CA */ caArn: pulumi.Input; /** * The ARN of the AWS certificate template for requested certificates. Must allow SAN, key usage, and ext key usage passthrough from CSR */ certificateTemplateArn: pulumi.Input; /** * The lifetime of certificates issued by this CA represented in minutes. */ issuedCertTtlMinutes: pulumi.Input; /** * Unique human-readable name of the SecretStore. */ name: pulumi.Input; /** * The AWS region to target e.g. us-east-1 */ region: pulumi.Input; /** * The specified signing algorithm family (RSA or ECDSA) must match the algorithm family of the CA's secret key. e.g. SHA256WITHRSA */ signingAlgo: pulumi.Input; /** * Tags is a map of key, value pairs. */ tags?: pulumi.Input<{ [key: string]: pulumi.Input; }>; } export interface SecretStoreAzureStore { /** * Unique human-readable name of the SecretStore. */ name: pulumi.Input; /** * Tags is a map of key, value pairs. */ tags?: pulumi.Input<{ [key: string]: pulumi.Input; }>; /** * The URI of the key vault to target e.g. https://myvault.vault.azure.net * * cyberark_conjur: */ vaultUri: pulumi.Input; } export interface SecretStoreCyberarkConjur { /** * The URL of the Cyberark instance */ appUrl: pulumi.Input; /** * Unique human-readable name of the SecretStore. */ name: pulumi.Input; /** * Tags is a map of key, value pairs. */ tags?: pulumi.Input<{ [key: string]: pulumi.Input; }>; } export interface SecretStoreCyberarkPam { /** * The URL of the Cyberark instance */ appUrl: pulumi.Input; /** * Unique human-readable name of the SecretStore. */ name: pulumi.Input; /** * Tags is a map of key, value pairs. */ tags?: pulumi.Input<{ [key: string]: pulumi.Input; }>; } export interface SecretStoreCyberarkPamExperimental { /** * The URL of the Cyberark instance */ appUrl: pulumi.Input; /** * Unique human-readable name of the SecretStore. */ name: pulumi.Input; /** * Tags is a map of key, value pairs. */ tags?: pulumi.Input<{ [key: string]: pulumi.Input; }>; } export interface SecretStoreDelineaStore { /** * Unique human-readable name of the SecretStore. */ name: pulumi.Input; /** * The URL of the Delinea instance */ serverUrl?: pulumi.Input; /** * Tags is a map of key, value pairs. */ tags?: pulumi.Input<{ [key: string]: pulumi.Input; }>; /** * The tenant name to target * * gcp_store: */ tenantName?: pulumi.Input; } export interface SecretStoreGcpCertX509Store { /** * The ID of the target CA */ caId?: pulumi.Input; /** * The ID of the target CA pool */ caPoolId: pulumi.Input; /** * The lifetime of certificates issued by this CA represented in minutes. */ issuedCertTtlMinutes: pulumi.Input; /** * The Region for the CA in GCP format e.g. us-west1 */ location: pulumi.Input; /** * Unique human-readable name of the SecretStore. */ name: pulumi.Input; /** * The GCP project ID to target. */ projectId: pulumi.Input; /** * Tags is a map of key, value pairs. */ tags?: pulumi.Input<{ [key: string]: pulumi.Input; }>; } export interface SecretStoreGcpStore { /** * Unique human-readable name of the SecretStore. */ name: pulumi.Input; /** * The GCP project ID to target. */ projectId: pulumi.Input; /** * Tags is a map of key, value pairs. */ tags?: pulumi.Input<{ [key: string]: pulumi.Input; }>; } export interface SecretStoreKeyfactorSshStore { /** * Path to the root CA that signed the certificate passed to the client for HTTPS connection. This is not required if the CA is trusted by the host operating system. This should be a PEM formatted certificate, and doesn't necessarily have to be the CA that signed CertificateFile. */ caFilePath?: pulumi.Input; /** * Path to client certificate in PEM format. This certificate must contain a client certificate that is recognized by the EJBCA instance represented by Hostname. This PEM file may also contain the private key associated with the certificate, but KeyFile can also be set to configure the private key. */ certificateFilePath: pulumi.Input; /** * Name of EJBCA certificate authority that will enroll CSR. */ defaultCertificateAuthorityName: pulumi.Input; /** * Certificate profile name that EJBCA will enroll the CSR with. */ defaultCertificateProfileName: pulumi.Input; /** * End entity profile that EJBCA will enroll the CSR with. */ defaultEndEntityProfileName: pulumi.Input; /** * code used by EJBCA during enrollment. May be left blank if no code is required. */ enrollmentCodeEnvVar?: pulumi.Input; /** * username that used by the EJBCA during enrollment. This can be left out. If so, the username must be auto-generated on the Keyfactor side. */ enrollmentUsernameEnvVar?: pulumi.Input; /** * Path to private key in PEM format. This file should contain the private key associated with the client certificate configured in CertificateFile. */ keyFilePath?: pulumi.Input; /** * Unique human-readable name of the SecretStore. */ name: pulumi.Input; /** * The URL of the Vault to target */ serverAddress: pulumi.Input; /** * Tags is a map of key, value pairs. */ tags?: pulumi.Input<{ [key: string]: pulumi.Input; }>; } export interface SecretStoreKeyfactorX509Store { /** * Path to the root CA that signed the certificate passed to the client for HTTPS connection. This is not required if the CA is trusted by the host operating system. This should be a PEM formatted certificate, and doesn't necessarily have to be the CA that signed CertificateFile. */ caFilePath?: pulumi.Input; /** * Path to client certificate in PEM format. This certificate must contain a client certificate that is recognized by the EJBCA instance represented by Hostname. This PEM file may also contain the private key associated with the certificate, but KeyFile can also be set to configure the private key. */ certificateFilePath: pulumi.Input; /** * Name of EJBCA certificate authority that will enroll CSR. */ defaultCertificateAuthorityName: pulumi.Input; /** * Certificate profile name that EJBCA will enroll the CSR with. */ defaultCertificateProfileName: pulumi.Input; /** * End entity profile that EJBCA will enroll the CSR with. */ defaultEndEntityProfileName: pulumi.Input; /** * code used by EJBCA during enrollment. May be left blank if no code is required. */ enrollmentCodeEnvVar?: pulumi.Input; /** * username that used by the EJBCA during enrollment. This can be left out. If so, the username must be auto-generated on the Keyfactor side. */ enrollmentUsernameEnvVar?: pulumi.Input; /** * Path to private key in PEM format. This file should contain the private key associated with the client certificate configured in CertificateFile. */ keyFilePath?: pulumi.Input; /** * Unique human-readable name of the SecretStore. */ name: pulumi.Input; /** * The URL of the Vault to target */ serverAddress: pulumi.Input; /** * Tags is a map of key, value pairs. */ tags?: pulumi.Input<{ [key: string]: pulumi.Input; }>; } export interface SecretStoreVaultApprole { /** * Unique human-readable name of the SecretStore. */ name: pulumi.Input; /** * The namespace to make requests within */ namespace?: pulumi.Input; /** * The URL of the Vault to target */ serverAddress: pulumi.Input; /** * Tags is a map of key, value pairs. */ tags?: pulumi.Input<{ [key: string]: pulumi.Input; }>; } export interface SecretStoreVaultApproleCertSsh { /** * The lifetime of certificates issued by this CA represented in minutes. */ issuedCertTtlMinutes: pulumi.Input; /** * Unique human-readable name of the SecretStore. */ name: pulumi.Input; /** * The namespace to make requests within */ namespace?: pulumi.Input; /** * The URL of the Vault to target */ serverAddress: pulumi.Input; /** * The signing role to be used for signing certificates */ signingRole: pulumi.Input; /** * The mount point of the SSH engine configured with the desired CA */ sshMountPoint: pulumi.Input; /** * Tags is a map of key, value pairs. */ tags?: pulumi.Input<{ [key: string]: pulumi.Input; }>; } export interface SecretStoreVaultApproleCertX509 { /** * The lifetime of certificates issued by this CA represented in minutes. */ issuedCertTtlMinutes: pulumi.Input; /** * Unique human-readable name of the SecretStore. */ name: pulumi.Input; /** * The namespace to make requests within */ namespace?: pulumi.Input; /** * The mount point of the PKI engine configured with the desired CA */ pkiMountPoint: pulumi.Input; /** * The URL of the Vault to target */ serverAddress: pulumi.Input; /** * The signing role to be used for signing certificates */ signingRole: pulumi.Input; /** * Tags is a map of key, value pairs. */ tags?: pulumi.Input<{ [key: string]: pulumi.Input; }>; } export interface SecretStoreVaultAwsEc2 { /** * Unique human-readable name of the SecretStore. */ name: pulumi.Input; /** * The namespace to make requests within */ namespace?: pulumi.Input; /** * The URL of the Vault to target */ serverAddress: pulumi.Input; /** * Tags is a map of key, value pairs. */ tags?: pulumi.Input<{ [key: string]: pulumi.Input; }>; } export interface SecretStoreVaultAwsIam { /** * Unique human-readable name of the SecretStore. */ name: pulumi.Input; /** * The namespace to make requests within */ namespace?: pulumi.Input; /** * The URL of the Vault to target */ serverAddress: pulumi.Input; /** * Tags is a map of key, value pairs. */ tags?: pulumi.Input<{ [key: string]: pulumi.Input; }>; } export interface SecretStoreVaultTls { /** * A path to a CA file accessible by a Node */ caCertPath?: pulumi.Input; /** * A path to a client certificate file accessible by a Node */ clientCertPath: pulumi.Input; /** * A path to a client key file accessible by a Node */ clientKeyPath: pulumi.Input; /** * Unique human-readable name of the SecretStore. */ name: pulumi.Input; /** * The namespace to make requests within */ namespace?: pulumi.Input; /** * The URL of the Vault to target */ serverAddress: pulumi.Input; /** * Tags is a map of key, value pairs. */ tags?: pulumi.Input<{ [key: string]: pulumi.Input; }>; } export interface SecretStoreVaultTlsCertSsh { /** * A path to a CA file accessible by a Node */ caCertPath?: pulumi.Input; /** * A path to a client certificate file accessible by a Node */ clientCertPath: pulumi.Input; /** * A path to a client key file accessible by a Node */ clientKeyPath: pulumi.Input; /** * The lifetime of certificates issued by this CA represented in minutes. */ issuedCertTtlMinutes: pulumi.Input; /** * Unique human-readable name of the SecretStore. */ name: pulumi.Input; /** * The namespace to make requests within */ namespace?: pulumi.Input; /** * The URL of the Vault to target */ serverAddress: pulumi.Input; /** * The signing role to be used for signing certificates */ signingRole: pulumi.Input; /** * The mount point of the SSH engine configured with the desired CA */ sshMountPoint: pulumi.Input; /** * Tags is a map of key, value pairs. */ tags?: pulumi.Input<{ [key: string]: pulumi.Input; }>; } export interface SecretStoreVaultTlsCertX509 { /** * A path to a CA file accessible by a Node */ caCertPath?: pulumi.Input; /** * A path to a client certificate file accessible by a Node */ clientCertPath: pulumi.Input; /** * A path to a client key file accessible by a Node */ clientKeyPath: pulumi.Input; /** * The lifetime of certificates issued by this CA represented in minutes. */ issuedCertTtlMinutes: pulumi.Input; /** * Unique human-readable name of the SecretStore. */ name: pulumi.Input; /** * The namespace to make requests within */ namespace?: pulumi.Input; /** * The mount point of the PKI engine configured with the desired CA */ pkiMountPoint: pulumi.Input; /** * The URL of the Vault to target */ serverAddress: pulumi.Input; /** * The signing role to be used for signing certificates */ signingRole: pulumi.Input; /** * Tags is a map of key, value pairs. */ tags?: pulumi.Input<{ [key: string]: pulumi.Input; }>; } export interface SecretStoreVaultToken { /** * Unique human-readable name of the SecretStore. */ name: pulumi.Input; /** * The namespace to make requests within */ namespace?: pulumi.Input; /** * The URL of the Vault to target */ serverAddress: pulumi.Input; /** * Tags is a map of key, value pairs. */ tags?: pulumi.Input<{ [key: string]: pulumi.Input; }>; } export interface SecretStoreVaultTokenCertSsh { /** * The lifetime of certificates issued by this CA represented in minutes. */ issuedCertTtlMinutes: pulumi.Input; /** * Unique human-readable name of the SecretStore. */ name: pulumi.Input; /** * The namespace to make requests within */ namespace?: pulumi.Input; /** * The URL of the Vault to target */ serverAddress: pulumi.Input; /** * The signing role to be used for signing certificates */ signingRole: pulumi.Input; /** * The mount point of the SSH engine configured with the desired CA */ sshMountPoint: pulumi.Input; /** * Tags is a map of key, value pairs. */ tags?: pulumi.Input<{ [key: string]: pulumi.Input; }>; } export interface SecretStoreVaultTokenCertX509 { /** * The lifetime of certificates issued by this CA represented in minutes. */ issuedCertTtlMinutes: pulumi.Input; /** * Unique human-readable name of the SecretStore. */ name: pulumi.Input; /** * The namespace to make requests within */ namespace?: pulumi.Input; /** * The mount point of the PKI engine configured with the desired CA */ pkiMountPoint: pulumi.Input; /** * The URL of the Vault to target */ serverAddress: pulumi.Input; /** * The signing role to be used for signing certificates */ signingRole: pulumi.Input; /** * Tags is a map of key, value pairs. */ tags?: pulumi.Input<{ [key: string]: pulumi.Input; }>; }