Google Cloud Native is in preview. Google Cloud Classic is fully supported.
google-native.managedidentities/v1alpha1.Domain
Explore with Pulumi AI
Google Cloud Native is in preview. Google Cloud Classic is fully supported.
Creates a Microsoft AD Domain in a given project. Operation Auto-naming is currently not supported for this resource.
Create Domain Resource
Resources are created with functions called constructors. To learn more about declaring and configuring resources, see Resources.
Constructor syntax
new Domain(name: string, args: DomainArgs, opts?: CustomResourceOptions);@overload
def Domain(resource_name: str,
           args: DomainArgs,
           opts: Optional[ResourceOptions] = None)
@overload
def Domain(resource_name: str,
           opts: Optional[ResourceOptions] = None,
           locations: Optional[Sequence[str]] = None,
           reserved_ip_range: Optional[str] = None,
           audit_logs_enabled: Optional[bool] = None,
           authorized_networks: Optional[Sequence[str]] = None,
           domain_name: Optional[str] = None,
           labels: Optional[Mapping[str, str]] = None,
           managed_identities_admin_name: Optional[str] = None,
           project: Optional[str] = None)func NewDomain(ctx *Context, name string, args DomainArgs, opts ...ResourceOption) (*Domain, error)public Domain(string name, DomainArgs args, CustomResourceOptions? opts = null)
public Domain(String name, DomainArgs args)
public Domain(String name, DomainArgs args, CustomResourceOptions options)
type: google-native:managedidentities/v1alpha1:Domain
properties: # The arguments to resource properties.
options: # Bag of options to control resource's behavior.
Parameters
- name string
- The unique name of the resource.
- args DomainArgs
- The arguments to resource properties.
- opts CustomResourceOptions
- Bag of options to control resource's behavior.
- resource_name str
- The unique name of the resource.
- args DomainArgs
- The arguments to resource properties.
- opts ResourceOptions
- Bag of options to control resource's behavior.
- ctx Context
- Context object for the current deployment.
- name string
- The unique name of the resource.
- args DomainArgs
- The arguments to resource properties.
- opts ResourceOption
- Bag of options to control resource's behavior.
- name string
- The unique name of the resource.
- args DomainArgs
- The arguments to resource properties.
- opts CustomResourceOptions
- Bag of options to control resource's behavior.
- name String
- The unique name of the resource.
- args DomainArgs
- The arguments to resource properties.
- options CustomResourceOptions
- Bag of options to control resource's behavior.
Constructor example
The following reference example uses placeholder values for all input properties.
var exampledomainResourceResourceFromManagedidentitiesv1alpha1 = new GoogleNative.Managedidentities.V1Alpha1.Domain("exampledomainResourceResourceFromManagedidentitiesv1alpha1", new()
{
    Locations = new[]
    {
        "string",
    },
    ReservedIpRange = "string",
    AuditLogsEnabled = false,
    AuthorizedNetworks = new[]
    {
        "string",
    },
    DomainName = "string",
    Labels = 
    {
        { "string", "string" },
    },
    ManagedIdentitiesAdminName = "string",
    Project = "string",
});
example, err := managedidentitiesv1alpha1.NewDomain(ctx, "exampledomainResourceResourceFromManagedidentitiesv1alpha1", &managedidentitiesv1alpha1.DomainArgs{
	Locations: pulumi.StringArray{
		pulumi.String("string"),
	},
	ReservedIpRange:  pulumi.String("string"),
	AuditLogsEnabled: pulumi.Bool(false),
	AuthorizedNetworks: pulumi.StringArray{
		pulumi.String("string"),
	},
	DomainName: pulumi.String("string"),
	Labels: pulumi.StringMap{
		"string": pulumi.String("string"),
	},
	ManagedIdentitiesAdminName: pulumi.String("string"),
	Project:                    pulumi.String("string"),
})
var exampledomainResourceResourceFromManagedidentitiesv1alpha1 = new Domain("exampledomainResourceResourceFromManagedidentitiesv1alpha1", DomainArgs.builder()
    .locations("string")
    .reservedIpRange("string")
    .auditLogsEnabled(false)
    .authorizedNetworks("string")
    .domainName("string")
    .labels(Map.of("string", "string"))
    .managedIdentitiesAdminName("string")
    .project("string")
    .build());
exampledomain_resource_resource_from_managedidentitiesv1alpha1 = google_native.managedidentities.v1alpha1.Domain("exampledomainResourceResourceFromManagedidentitiesv1alpha1",
    locations=["string"],
    reserved_ip_range="string",
    audit_logs_enabled=False,
    authorized_networks=["string"],
    domain_name="string",
    labels={
        "string": "string",
    },
    managed_identities_admin_name="string",
    project="string")
const exampledomainResourceResourceFromManagedidentitiesv1alpha1 = new google_native.managedidentities.v1alpha1.Domain("exampledomainResourceResourceFromManagedidentitiesv1alpha1", {
    locations: ["string"],
    reservedIpRange: "string",
    auditLogsEnabled: false,
    authorizedNetworks: ["string"],
    domainName: "string",
    labels: {
        string: "string",
    },
    managedIdentitiesAdminName: "string",
    project: "string",
});
type: google-native:managedidentities/v1alpha1:Domain
properties:
    auditLogsEnabled: false
    authorizedNetworks:
        - string
    domainName: string
    labels:
        string: string
    locations:
        - string
    managedIdentitiesAdminName: string
    project: string
    reservedIpRange: string
Domain Resource Properties
To learn more about resource properties and how to use them, see Inputs and Outputs in the Architecture and Concepts docs.
Inputs
In Python, inputs that are objects can be passed either as argument classes or as dictionary literals.
The Domain resource accepts the following input properties:
- Locations List<string>
- Locations where domain needs to be provisioned. regions e.g. us-west1 or us-east4 Service supports up to 4 locations at once. Each location will use a /26 block.
- ReservedIp stringRange 
- The CIDR range of internal addresses that are reserved for this domain. Reserved networks must be /24 or larger. Ranges must be unique and non-overlapping with existing subnets in [Domain].[authorized_networks].
- AuditLogs boolEnabled 
- Optional. Configuration for audit logs. True if audit logs are enabled, else false. Default is audit logs disabled.
- List<string>
- Optional. The full names of the Google Compute Engine networks to which the instance is connected. Network can be added using UpdateDomain later. Domain is only available on network part of authorized_networks. Caller needs to make sure that CIDR subnets do not overlap between networks, else domain creation will fail.
- DomainName string
- The fully qualified domain name. e.g. mydomain.myorganization.com, with the following restrictions: * Must contain only lowercase letters, numbers, periods and hyphens. * Must start with a letter. * Must contain between 2-64 characters. * Must end with a number or a letter. * Must not start with period. * Must be unique within the project. * First segment length (mydomain form example above) shouldn't exceed 15 chars. * The last segment cannot be fully numeric.
- Labels Dictionary<string, string>
- Optional. Resource labels to represent user provided metadata
- ManagedIdentities stringAdmin Name 
- Optional. Name of customer-visible admin used to perform Active Directory operations. If not specified setupadminwould be used.
- Project string
- Locations []string
- Locations where domain needs to be provisioned. regions e.g. us-west1 or us-east4 Service supports up to 4 locations at once. Each location will use a /26 block.
- ReservedIp stringRange 
- The CIDR range of internal addresses that are reserved for this domain. Reserved networks must be /24 or larger. Ranges must be unique and non-overlapping with existing subnets in [Domain].[authorized_networks].
- AuditLogs boolEnabled 
- Optional. Configuration for audit logs. True if audit logs are enabled, else false. Default is audit logs disabled.
- []string
- Optional. The full names of the Google Compute Engine networks to which the instance is connected. Network can be added using UpdateDomain later. Domain is only available on network part of authorized_networks. Caller needs to make sure that CIDR subnets do not overlap between networks, else domain creation will fail.
- DomainName string
- The fully qualified domain name. e.g. mydomain.myorganization.com, with the following restrictions: * Must contain only lowercase letters, numbers, periods and hyphens. * Must start with a letter. * Must contain between 2-64 characters. * Must end with a number or a letter. * Must not start with period. * Must be unique within the project. * First segment length (mydomain form example above) shouldn't exceed 15 chars. * The last segment cannot be fully numeric.
- Labels map[string]string
- Optional. Resource labels to represent user provided metadata
- ManagedIdentities stringAdmin Name 
- Optional. Name of customer-visible admin used to perform Active Directory operations. If not specified setupadminwould be used.
- Project string
- locations List<String>
- Locations where domain needs to be provisioned. regions e.g. us-west1 or us-east4 Service supports up to 4 locations at once. Each location will use a /26 block.
- reservedIp StringRange 
- The CIDR range of internal addresses that are reserved for this domain. Reserved networks must be /24 or larger. Ranges must be unique and non-overlapping with existing subnets in [Domain].[authorized_networks].
- auditLogs BooleanEnabled 
- Optional. Configuration for audit logs. True if audit logs are enabled, else false. Default is audit logs disabled.
- List<String>
- Optional. The full names of the Google Compute Engine networks to which the instance is connected. Network can be added using UpdateDomain later. Domain is only available on network part of authorized_networks. Caller needs to make sure that CIDR subnets do not overlap between networks, else domain creation will fail.
- domainName String
- The fully qualified domain name. e.g. mydomain.myorganization.com, with the following restrictions: * Must contain only lowercase letters, numbers, periods and hyphens. * Must start with a letter. * Must contain between 2-64 characters. * Must end with a number or a letter. * Must not start with period. * Must be unique within the project. * First segment length (mydomain form example above) shouldn't exceed 15 chars. * The last segment cannot be fully numeric.
- labels Map<String,String>
- Optional. Resource labels to represent user provided metadata
- managedIdentities StringAdmin Name 
- Optional. Name of customer-visible admin used to perform Active Directory operations. If not specified setupadminwould be used.
- project String
- locations string[]
- Locations where domain needs to be provisioned. regions e.g. us-west1 or us-east4 Service supports up to 4 locations at once. Each location will use a /26 block.
- reservedIp stringRange 
- The CIDR range of internal addresses that are reserved for this domain. Reserved networks must be /24 or larger. Ranges must be unique and non-overlapping with existing subnets in [Domain].[authorized_networks].
- auditLogs booleanEnabled 
- Optional. Configuration for audit logs. True if audit logs are enabled, else false. Default is audit logs disabled.
- string[]
- Optional. The full names of the Google Compute Engine networks to which the instance is connected. Network can be added using UpdateDomain later. Domain is only available on network part of authorized_networks. Caller needs to make sure that CIDR subnets do not overlap between networks, else domain creation will fail.
- domainName string
- The fully qualified domain name. e.g. mydomain.myorganization.com, with the following restrictions: * Must contain only lowercase letters, numbers, periods and hyphens. * Must start with a letter. * Must contain between 2-64 characters. * Must end with a number or a letter. * Must not start with period. * Must be unique within the project. * First segment length (mydomain form example above) shouldn't exceed 15 chars. * The last segment cannot be fully numeric.
- labels {[key: string]: string}
- Optional. Resource labels to represent user provided metadata
- managedIdentities stringAdmin Name 
- Optional. Name of customer-visible admin used to perform Active Directory operations. If not specified setupadminwould be used.
- project string
- locations Sequence[str]
- Locations where domain needs to be provisioned. regions e.g. us-west1 or us-east4 Service supports up to 4 locations at once. Each location will use a /26 block.
- reserved_ip_ strrange 
- The CIDR range of internal addresses that are reserved for this domain. Reserved networks must be /24 or larger. Ranges must be unique and non-overlapping with existing subnets in [Domain].[authorized_networks].
- audit_logs_ boolenabled 
- Optional. Configuration for audit logs. True if audit logs are enabled, else false. Default is audit logs disabled.
- Sequence[str]
- Optional. The full names of the Google Compute Engine networks to which the instance is connected. Network can be added using UpdateDomain later. Domain is only available on network part of authorized_networks. Caller needs to make sure that CIDR subnets do not overlap between networks, else domain creation will fail.
- domain_name str
- The fully qualified domain name. e.g. mydomain.myorganization.com, with the following restrictions: * Must contain only lowercase letters, numbers, periods and hyphens. * Must start with a letter. * Must contain between 2-64 characters. * Must end with a number or a letter. * Must not start with period. * Must be unique within the project. * First segment length (mydomain form example above) shouldn't exceed 15 chars. * The last segment cannot be fully numeric.
- labels Mapping[str, str]
- Optional. Resource labels to represent user provided metadata
- managed_identities_ stradmin_ name 
- Optional. Name of customer-visible admin used to perform Active Directory operations. If not specified setupadminwould be used.
- project str
- locations List<String>
- Locations where domain needs to be provisioned. regions e.g. us-west1 or us-east4 Service supports up to 4 locations at once. Each location will use a /26 block.
- reservedIp StringRange 
- The CIDR range of internal addresses that are reserved for this domain. Reserved networks must be /24 or larger. Ranges must be unique and non-overlapping with existing subnets in [Domain].[authorized_networks].
- auditLogs BooleanEnabled 
- Optional. Configuration for audit logs. True if audit logs are enabled, else false. Default is audit logs disabled.
- List<String>
- Optional. The full names of the Google Compute Engine networks to which the instance is connected. Network can be added using UpdateDomain later. Domain is only available on network part of authorized_networks. Caller needs to make sure that CIDR subnets do not overlap between networks, else domain creation will fail.
- domainName String
- The fully qualified domain name. e.g. mydomain.myorganization.com, with the following restrictions: * Must contain only lowercase letters, numbers, periods and hyphens. * Must start with a letter. * Must contain between 2-64 characters. * Must end with a number or a letter. * Must not start with period. * Must be unique within the project. * First segment length (mydomain form example above) shouldn't exceed 15 chars. * The last segment cannot be fully numeric.
- labels Map<String>
- Optional. Resource labels to represent user provided metadata
- managedIdentities StringAdmin Name 
- Optional. Name of customer-visible admin used to perform Active Directory operations. If not specified setupadminwould be used.
- project String
Outputs
All input properties are implicitly available as output properties. Additionally, the Domain resource produces the following output properties:
- CreateTime string
- The time the instance was created. Synthetic field is populated automatically by CCFE. go/ccfe-synthetic-field-user-guide
- Fqdn string
- Fully-qualified domain name of the exposed domain used by clients to connect to the service. Similar to what would be chosen for an Active Directory that is set up on an internal network.
- Id string
- The provider-assigned unique ID for this managed resource.
- Name string
- Unique name of the domain in this scope including projects and location using the form: projects/{project_id}/locations/global/domains/{domain_name}.
- State string
- The current state of this domain.
- StatusMessage string
- Additional information about the current status of this domain, if available.
- Trusts
List<Pulumi.Google Native. Managedidentities. V1Alpha1. Outputs. Trust Response> 
- The current trusts associated with the domain.
- UpdateTime string
- Last update time. Synthetic field is populated automatically by CCFE.
- CreateTime string
- The time the instance was created. Synthetic field is populated automatically by CCFE. go/ccfe-synthetic-field-user-guide
- Fqdn string
- Fully-qualified domain name of the exposed domain used by clients to connect to the service. Similar to what would be chosen for an Active Directory that is set up on an internal network.
- Id string
- The provider-assigned unique ID for this managed resource.
- Name string
- Unique name of the domain in this scope including projects and location using the form: projects/{project_id}/locations/global/domains/{domain_name}.
- State string
- The current state of this domain.
- StatusMessage string
- Additional information about the current status of this domain, if available.
- Trusts
[]TrustResponse 
- The current trusts associated with the domain.
- UpdateTime string
- Last update time. Synthetic field is populated automatically by CCFE.
- createTime String
- The time the instance was created. Synthetic field is populated automatically by CCFE. go/ccfe-synthetic-field-user-guide
- fqdn String
- Fully-qualified domain name of the exposed domain used by clients to connect to the service. Similar to what would be chosen for an Active Directory that is set up on an internal network.
- id String
- The provider-assigned unique ID for this managed resource.
- name String
- Unique name of the domain in this scope including projects and location using the form: projects/{project_id}/locations/global/domains/{domain_name}.
- state String
- The current state of this domain.
- statusMessage String
- Additional information about the current status of this domain, if available.
- trusts
List<TrustResponse> 
- The current trusts associated with the domain.
- updateTime String
- Last update time. Synthetic field is populated automatically by CCFE.
- createTime string
- The time the instance was created. Synthetic field is populated automatically by CCFE. go/ccfe-synthetic-field-user-guide
- fqdn string
- Fully-qualified domain name of the exposed domain used by clients to connect to the service. Similar to what would be chosen for an Active Directory that is set up on an internal network.
- id string
- The provider-assigned unique ID for this managed resource.
- name string
- Unique name of the domain in this scope including projects and location using the form: projects/{project_id}/locations/global/domains/{domain_name}.
- state string
- The current state of this domain.
- statusMessage string
- Additional information about the current status of this domain, if available.
- trusts
TrustResponse[] 
- The current trusts associated with the domain.
- updateTime string
- Last update time. Synthetic field is populated automatically by CCFE.
- create_time str
- The time the instance was created. Synthetic field is populated automatically by CCFE. go/ccfe-synthetic-field-user-guide
- fqdn str
- Fully-qualified domain name of the exposed domain used by clients to connect to the service. Similar to what would be chosen for an Active Directory that is set up on an internal network.
- id str
- The provider-assigned unique ID for this managed resource.
- name str
- Unique name of the domain in this scope including projects and location using the form: projects/{project_id}/locations/global/domains/{domain_name}.
- state str
- The current state of this domain.
- status_message str
- Additional information about the current status of this domain, if available.
- trusts
Sequence[TrustResponse] 
- The current trusts associated with the domain.
- update_time str
- Last update time. Synthetic field is populated automatically by CCFE.
- createTime String
- The time the instance was created. Synthetic field is populated automatically by CCFE. go/ccfe-synthetic-field-user-guide
- fqdn String
- Fully-qualified domain name of the exposed domain used by clients to connect to the service. Similar to what would be chosen for an Active Directory that is set up on an internal network.
- id String
- The provider-assigned unique ID for this managed resource.
- name String
- Unique name of the domain in this scope including projects and location using the form: projects/{project_id}/locations/global/domains/{domain_name}.
- state String
- The current state of this domain.
- statusMessage String
- Additional information about the current status of this domain, if available.
- trusts List<Property Map>
- The current trusts associated with the domain.
- updateTime String
- Last update time. Synthetic field is populated automatically by CCFE.
Supporting Types
TrustResponse, TrustResponseArgs    
- CreateTime string
- The time the instance was created.
- LastKnown stringTrust Connected Heartbeat Time 
- The last heartbeat time when the trust was known to be connected.
- SelectiveAuthentication bool
- The trust authentication type which decides whether the trusted side has forest/domain wide access or selective access to approved set of resources.
- State string
- The current state of this trust.
- StateDescription string
- Additional information about the current state of this trust, if available.
- TargetDns List<string>Ip Addresses 
- The target dns server ip addresses which can resolve the remote domain involved in trust.
- TargetDomain stringName 
- The fully qualified target domain name which will be in trust with current domain.
- TrustDirection string
- The trust direction decides the current domain is trusted, trusting or both.
- TrustHandshake stringSecret 
- Input only, and will not be stored. The trust secret used for handshake with target domain.
- TrustType string
- The type of trust represented by the trust resource.
- UpdateTime string
- Last update time.
- CreateTime string
- The time the instance was created.
- LastKnown stringTrust Connected Heartbeat Time 
- The last heartbeat time when the trust was known to be connected.
- SelectiveAuthentication bool
- The trust authentication type which decides whether the trusted side has forest/domain wide access or selective access to approved set of resources.
- State string
- The current state of this trust.
- StateDescription string
- Additional information about the current state of this trust, if available.
- TargetDns []stringIp Addresses 
- The target dns server ip addresses which can resolve the remote domain involved in trust.
- TargetDomain stringName 
- The fully qualified target domain name which will be in trust with current domain.
- TrustDirection string
- The trust direction decides the current domain is trusted, trusting or both.
- TrustHandshake stringSecret 
- Input only, and will not be stored. The trust secret used for handshake with target domain.
- TrustType string
- The type of trust represented by the trust resource.
- UpdateTime string
- Last update time.
- createTime String
- The time the instance was created.
- lastKnown StringTrust Connected Heartbeat Time 
- The last heartbeat time when the trust was known to be connected.
- selectiveAuthentication Boolean
- The trust authentication type which decides whether the trusted side has forest/domain wide access or selective access to approved set of resources.
- state String
- The current state of this trust.
- stateDescription String
- Additional information about the current state of this trust, if available.
- targetDns List<String>Ip Addresses 
- The target dns server ip addresses which can resolve the remote domain involved in trust.
- targetDomain StringName 
- The fully qualified target domain name which will be in trust with current domain.
- trustDirection String
- The trust direction decides the current domain is trusted, trusting or both.
- trustHandshake StringSecret 
- Input only, and will not be stored. The trust secret used for handshake with target domain.
- trustType String
- The type of trust represented by the trust resource.
- updateTime String
- Last update time.
- createTime string
- The time the instance was created.
- lastKnown stringTrust Connected Heartbeat Time 
- The last heartbeat time when the trust was known to be connected.
- selectiveAuthentication boolean
- The trust authentication type which decides whether the trusted side has forest/domain wide access or selective access to approved set of resources.
- state string
- The current state of this trust.
- stateDescription string
- Additional information about the current state of this trust, if available.
- targetDns string[]Ip Addresses 
- The target dns server ip addresses which can resolve the remote domain involved in trust.
- targetDomain stringName 
- The fully qualified target domain name which will be in trust with current domain.
- trustDirection string
- The trust direction decides the current domain is trusted, trusting or both.
- trustHandshake stringSecret 
- Input only, and will not be stored. The trust secret used for handshake with target domain.
- trustType string
- The type of trust represented by the trust resource.
- updateTime string
- Last update time.
- create_time str
- The time the instance was created.
- last_known_ strtrust_ connected_ heartbeat_ time 
- The last heartbeat time when the trust was known to be connected.
- selective_authentication bool
- The trust authentication type which decides whether the trusted side has forest/domain wide access or selective access to approved set of resources.
- state str
- The current state of this trust.
- state_description str
- Additional information about the current state of this trust, if available.
- target_dns_ Sequence[str]ip_ addresses 
- The target dns server ip addresses which can resolve the remote domain involved in trust.
- target_domain_ strname 
- The fully qualified target domain name which will be in trust with current domain.
- trust_direction str
- The trust direction decides the current domain is trusted, trusting or both.
- trust_handshake_ strsecret 
- Input only, and will not be stored. The trust secret used for handshake with target domain.
- trust_type str
- The type of trust represented by the trust resource.
- update_time str
- Last update time.
- createTime String
- The time the instance was created.
- lastKnown StringTrust Connected Heartbeat Time 
- The last heartbeat time when the trust was known to be connected.
- selectiveAuthentication Boolean
- The trust authentication type which decides whether the trusted side has forest/domain wide access or selective access to approved set of resources.
- state String
- The current state of this trust.
- stateDescription String
- Additional information about the current state of this trust, if available.
- targetDns List<String>Ip Addresses 
- The target dns server ip addresses which can resolve the remote domain involved in trust.
- targetDomain StringName 
- The fully qualified target domain name which will be in trust with current domain.
- trustDirection String
- The trust direction decides the current domain is trusted, trusting or both.
- trustHandshake StringSecret 
- Input only, and will not be stored. The trust secret used for handshake with target domain.
- trustType String
- The type of trust represented by the trust resource.
- updateTime String
- Last update time.
Package Details
- Repository
- Google Cloud Native pulumi/pulumi-google-native
- License
- Apache-2.0
Google Cloud Native is in preview. Google Cloud Classic is fully supported.