Docs Home Pulumi IaC Pulumi ESC Pulumi Insights Pulumi Cloud Packages Tutorials
  1. Packages
  2. Google Cloud (GCP) Classic
  3. API Docs
  4. applicationintegration
  5. AuthConfig
Google Cloud v8.25.1 published on Wednesday, Apr 9, 2025 by Pulumi
pulumi/pulumi-gcp

gcp.applicationintegration.AuthConfig

Explore with Pulumi AI

Google Cloud v8.25.1 published on Wednesday, Apr 9, 2025 by Pulumi
pulumi/pulumi-gcp

The AuthConfig resource use to hold channels and connection config data.

To get more information about AuthConfig, see:

Example Usage

Integrations Auth Config Basic

import * as pulumi from "@pulumi/pulumi";
import * as gcp from "@pulumi/gcp";

const client = new gcp.applicationintegration.Client("client", {location: "us-west1"});
const basicExample = new gcp.applicationintegration.AuthConfig("basic_example", {
    location: "us-west1",
    displayName: "test-authconfig",
    description: "Test auth config created via terraform",
    decryptedCredential: {
        credentialType: "USERNAME_AND_PASSWORD",
        usernameAndPassword: {
            username: "test-username",
            password: "test-password",
        },
    },
}, {
    dependsOn: [client],
});
Copy
import pulumi
import pulumi_gcp as gcp

client = gcp.applicationintegration.Client("client", location="us-west1")
basic_example = gcp.applicationintegration.AuthConfig("basic_example",
    location="us-west1",
    display_name="test-authconfig",
    description="Test auth config created via terraform",
    decrypted_credential={
        "credential_type": "USERNAME_AND_PASSWORD",
        "username_and_password": {
            "username": "test-username",
            "password": "test-password",
        },
    },
    opts = pulumi.ResourceOptions(depends_on=[client]))
Copy
package main

import (
	"github.com/pulumi/pulumi-gcp/sdk/v8/go/gcp/applicationintegration"
	"github.com/pulumi/pulumi/sdk/v3/go/pulumi"
)

func main() {
	pulumi.Run(func(ctx *pulumi.Context) error {
		client, err := applicationintegration.NewClient(ctx, "client", &applicationintegration.ClientArgs{
			Location: pulumi.String("us-west1"),
		})
		if err != nil {
			return err
		}
		_, err = applicationintegration.NewAuthConfig(ctx, "basic_example", &applicationintegration.AuthConfigArgs{
			Location:    pulumi.String("us-west1"),
			DisplayName: pulumi.String("test-authconfig"),
			Description: pulumi.String("Test auth config created via terraform"),
			DecryptedCredential: &applicationintegration.AuthConfigDecryptedCredentialArgs{
				CredentialType: pulumi.String("USERNAME_AND_PASSWORD"),
				UsernameAndPassword: &applicationintegration.AuthConfigDecryptedCredentialUsernameAndPasswordArgs{
					Username: pulumi.String("test-username"),
					Password: pulumi.String("test-password"),
				},
			},
		}, pulumi.DependsOn([]pulumi.Resource{
			client,
		}))
		if err != nil {
			return err
		}
		return nil
	})
}
Copy
using System.Collections.Generic;
using System.Linq;
using Pulumi;
using Gcp = Pulumi.Gcp;

return await Deployment.RunAsync(() => 
{
    var client = new Gcp.ApplicationIntegration.Client("client", new()
    {
        Location = "us-west1",
    });

    var basicExample = new Gcp.ApplicationIntegration.AuthConfig("basic_example", new()
    {
        Location = "us-west1",
        DisplayName = "test-authconfig",
        Description = "Test auth config created via terraform",
        DecryptedCredential = new Gcp.ApplicationIntegration.Inputs.AuthConfigDecryptedCredentialArgs
        {
            CredentialType = "USERNAME_AND_PASSWORD",
            UsernameAndPassword = new Gcp.ApplicationIntegration.Inputs.AuthConfigDecryptedCredentialUsernameAndPasswordArgs
            {
                Username = "test-username",
                Password = "test-password",
            },
        },
    }, new CustomResourceOptions
    {
        DependsOn =
        {
            client,
        },
    });

});
Copy
package generated_program;

import com.pulumi.Context;
import com.pulumi.Pulumi;
import com.pulumi.core.Output;
import com.pulumi.gcp.applicationintegration.Client;
import com.pulumi.gcp.applicationintegration.ClientArgs;
import com.pulumi.gcp.applicationintegration.AuthConfig;
import com.pulumi.gcp.applicationintegration.AuthConfigArgs;
import com.pulumi.gcp.applicationintegration.inputs.AuthConfigDecryptedCredentialArgs;
import com.pulumi.gcp.applicationintegration.inputs.AuthConfigDecryptedCredentialUsernameAndPasswordArgs;
import com.pulumi.resources.CustomResourceOptions;
import java.util.List;
import java.util.ArrayList;
import java.util.Map;
import java.io.File;
import java.nio.file.Files;
import java.nio.file.Paths;

public class App {
    public static void main(String[] args) {
        Pulumi.run(App::stack);
    }

    public static void stack(Context ctx) {
        var client = new Client("client", ClientArgs.builder()
            .location("us-west1")
            .build());

        var basicExample = new AuthConfig("basicExample", AuthConfigArgs.builder()
            .location("us-west1")
            .displayName("test-authconfig")
            .description("Test auth config created via terraform")
            .decryptedCredential(AuthConfigDecryptedCredentialArgs.builder()
                .credentialType("USERNAME_AND_PASSWORD")
                .usernameAndPassword(AuthConfigDecryptedCredentialUsernameAndPasswordArgs.builder()
                    .username("test-username")
                    .password("test-password")
                    .build())
                .build())
            .build(), CustomResourceOptions.builder()
                .dependsOn(client)
                .build());

    }
}
Copy
resources:
  client:
    type: gcp:applicationintegration:Client
    properties:
      location: us-west1
  basicExample:
    type: gcp:applicationintegration:AuthConfig
    name: basic_example
    properties:
      location: us-west1
      displayName: test-authconfig
      description: Test auth config created via terraform
      decryptedCredential:
        credentialType: USERNAME_AND_PASSWORD
        usernameAndPassword:
          username: test-username
          password: test-password
    options:
      dependsOn:
        - ${client}
Copy

Create AuthConfig Resource

Resources are created with functions called constructors. To learn more about declaring and configuring resources, see Resources.

Constructor syntax

new AuthConfig(name: string, args: AuthConfigArgs, opts?: CustomResourceOptions);
@overload
def AuthConfig(resource_name: str,
               args: AuthConfigArgs,
               opts: Optional[ResourceOptions] = None)

@overload
def AuthConfig(resource_name: str,
               opts: Optional[ResourceOptions] = None,
               display_name: Optional[str] = None,
               location: Optional[str] = None,
               client_certificate: Optional[AuthConfigClientCertificateArgs] = None,
               decrypted_credential: Optional[AuthConfigDecryptedCredentialArgs] = None,
               description: Optional[str] = None,
               expiry_notification_durations: Optional[Sequence[str]] = None,
               override_valid_time: Optional[str] = None,
               project: Optional[str] = None,
               visibility: Optional[str] = None)
func NewAuthConfig(ctx *Context, name string, args AuthConfigArgs, opts ...ResourceOption) (*AuthConfig, error)
public AuthConfig(string name, AuthConfigArgs args, CustomResourceOptions? opts = null)
public AuthConfig(String name, AuthConfigArgs args)
public AuthConfig(String name, AuthConfigArgs args, CustomResourceOptions options)

type: gcp:applicationintegration:AuthConfig
properties: # The arguments to resource properties.
options: # Bag of options to control resource's behavior.

Parameters

name This property is required. string
The unique name of the resource.
args This property is required. AuthConfigArgs
The arguments to resource properties.
opts CustomResourceOptions
Bag of options to control resource's behavior.
resource_name This property is required. str
The unique name of the resource.
args This property is required. AuthConfigArgs
The arguments to resource properties.
opts ResourceOptions
Bag of options to control resource's behavior.
ctx Context
Context object for the current deployment.
name This property is required. string
The unique name of the resource.
args This property is required. AuthConfigArgs
The arguments to resource properties.
opts ResourceOption
Bag of options to control resource's behavior.
name This property is required. string
The unique name of the resource.
args This property is required. AuthConfigArgs
The arguments to resource properties.
opts CustomResourceOptions
Bag of options to control resource's behavior.
name This property is required. String
The unique name of the resource.
args This property is required. AuthConfigArgs
The arguments to resource properties.
options CustomResourceOptions
Bag of options to control resource's behavior.

Constructor example

The following reference example uses placeholder values for all input properties.

var authConfigResource = new Gcp.ApplicationIntegration.AuthConfig("authConfigResource", new()
{
    DisplayName = "string",
    Location = "string",
    ClientCertificate = new Gcp.ApplicationIntegration.Inputs.AuthConfigClientCertificateArgs
    {
        EncryptedPrivateKey = "string",
        SslCertificate = "string",
        Passphrase = "string",
    },
    DecryptedCredential = new Gcp.ApplicationIntegration.Inputs.AuthConfigDecryptedCredentialArgs
    {
        CredentialType = "string",
        AuthToken = new Gcp.ApplicationIntegration.Inputs.AuthConfigDecryptedCredentialAuthTokenArgs
        {
            Token = "string",
            Type = "string",
        },
        Jwt = new Gcp.ApplicationIntegration.Inputs.AuthConfigDecryptedCredentialJwtArgs
        {
            Jwt = "string",
            JwtHeader = "string",
            JwtPayload = "string",
            Secret = "string",
        },
        Oauth2AuthorizationCode = new Gcp.ApplicationIntegration.Inputs.AuthConfigDecryptedCredentialOauth2AuthorizationCodeArgs
        {
            AuthEndpoint = "string",
            ClientId = "string",
            ClientSecret = "string",
            Scope = "string",
            TokenEndpoint = "string",
        },
        Oauth2ClientCredentials = new Gcp.ApplicationIntegration.Inputs.AuthConfigDecryptedCredentialOauth2ClientCredentialsArgs
        {
            ClientId = "string",
            ClientSecret = "string",
            RequestType = "string",
            Scope = "string",
            TokenEndpoint = "string",
            TokenParams = new Gcp.ApplicationIntegration.Inputs.AuthConfigDecryptedCredentialOauth2ClientCredentialsTokenParamsArgs
            {
                Entries = new[]
                {
                    new Gcp.ApplicationIntegration.Inputs.AuthConfigDecryptedCredentialOauth2ClientCredentialsTokenParamsEntryArgs
                    {
                        Key = new Gcp.ApplicationIntegration.Inputs.AuthConfigDecryptedCredentialOauth2ClientCredentialsTokenParamsEntryKeyArgs
                        {
                            LiteralValue = new Gcp.ApplicationIntegration.Inputs.AuthConfigDecryptedCredentialOauth2ClientCredentialsTokenParamsEntryKeyLiteralValueArgs
                            {
                                StringValue = "string",
                            },
                        },
                        Value = new Gcp.ApplicationIntegration.Inputs.AuthConfigDecryptedCredentialOauth2ClientCredentialsTokenParamsEntryValueArgs
                        {
                            LiteralValue = new Gcp.ApplicationIntegration.Inputs.AuthConfigDecryptedCredentialOauth2ClientCredentialsTokenParamsEntryValueLiteralValueArgs
                            {
                                StringValue = "string",
                            },
                        },
                    },
                },
            },
        },
        OidcToken = new Gcp.ApplicationIntegration.Inputs.AuthConfigDecryptedCredentialOidcTokenArgs
        {
            Audience = "string",
            ServiceAccountEmail = "string",
            Token = "string",
            TokenExpireTime = "string",
        },
        ServiceAccountCredentials = new Gcp.ApplicationIntegration.Inputs.AuthConfigDecryptedCredentialServiceAccountCredentialsArgs
        {
            Scope = "string",
            ServiceAccount = "string",
        },
        UsernameAndPassword = new Gcp.ApplicationIntegration.Inputs.AuthConfigDecryptedCredentialUsernameAndPasswordArgs
        {
            Password = "string",
            Username = "string",
        },
    },
    Description = "string",
    ExpiryNotificationDurations = new[]
    {
        "string",
    },
    OverrideValidTime = "string",
    Project = "string",
    Visibility = "string",
});
Copy
example, err := applicationintegration.NewAuthConfig(ctx, "authConfigResource", &applicationintegration.AuthConfigArgs{
	DisplayName: pulumi.String("string"),
	Location:    pulumi.String("string"),
	ClientCertificate: &applicationintegration.AuthConfigClientCertificateArgs{
		EncryptedPrivateKey: pulumi.String("string"),
		SslCertificate:      pulumi.String("string"),
		Passphrase:          pulumi.String("string"),
	},
	DecryptedCredential: &applicationintegration.AuthConfigDecryptedCredentialArgs{
		CredentialType: pulumi.String("string"),
		AuthToken: &applicationintegration.AuthConfigDecryptedCredentialAuthTokenArgs{
			Token: pulumi.String("string"),
			Type:  pulumi.String("string"),
		},
		Jwt: &applicationintegration.AuthConfigDecryptedCredentialJwtArgs{
			Jwt:        pulumi.String("string"),
			JwtHeader:  pulumi.String("string"),
			JwtPayload: pulumi.String("string"),
			Secret:     pulumi.String("string"),
		},
		Oauth2AuthorizationCode: &applicationintegration.AuthConfigDecryptedCredentialOauth2AuthorizationCodeArgs{
			AuthEndpoint:  pulumi.String("string"),
			ClientId:      pulumi.String("string"),
			ClientSecret:  pulumi.String("string"),
			Scope:         pulumi.String("string"),
			TokenEndpoint: pulumi.String("string"),
		},
		Oauth2ClientCredentials: &applicationintegration.AuthConfigDecryptedCredentialOauth2ClientCredentialsArgs{
			ClientId:      pulumi.String("string"),
			ClientSecret:  pulumi.String("string"),
			RequestType:   pulumi.String("string"),
			Scope:         pulumi.String("string"),
			TokenEndpoint: pulumi.String("string"),
			TokenParams: &applicationintegration.AuthConfigDecryptedCredentialOauth2ClientCredentialsTokenParamsArgs{
				Entries: applicationintegration.AuthConfigDecryptedCredentialOauth2ClientCredentialsTokenParamsEntryArray{
					&applicationintegration.AuthConfigDecryptedCredentialOauth2ClientCredentialsTokenParamsEntryArgs{
						Key: &applicationintegration.AuthConfigDecryptedCredentialOauth2ClientCredentialsTokenParamsEntryKeyArgs{
							LiteralValue: &applicationintegration.AuthConfigDecryptedCredentialOauth2ClientCredentialsTokenParamsEntryKeyLiteralValueArgs{
								StringValue: pulumi.String("string"),
							},
						},
						Value: &applicationintegration.AuthConfigDecryptedCredentialOauth2ClientCredentialsTokenParamsEntryValueArgs{
							LiteralValue: &applicationintegration.AuthConfigDecryptedCredentialOauth2ClientCredentialsTokenParamsEntryValueLiteralValueArgs{
								StringValue: pulumi.String("string"),
							},
						},
					},
				},
			},
		},
		OidcToken: &applicationintegration.AuthConfigDecryptedCredentialOidcTokenArgs{
			Audience:            pulumi.String("string"),
			ServiceAccountEmail: pulumi.String("string"),
			Token:               pulumi.String("string"),
			TokenExpireTime:     pulumi.String("string"),
		},
		ServiceAccountCredentials: &applicationintegration.AuthConfigDecryptedCredentialServiceAccountCredentialsArgs{
			Scope:          pulumi.String("string"),
			ServiceAccount: pulumi.String("string"),
		},
		UsernameAndPassword: &applicationintegration.AuthConfigDecryptedCredentialUsernameAndPasswordArgs{
			Password: pulumi.String("string"),
			Username: pulumi.String("string"),
		},
	},
	Description: pulumi.String("string"),
	ExpiryNotificationDurations: pulumi.StringArray{
		pulumi.String("string"),
	},
	OverrideValidTime: pulumi.String("string"),
	Project:           pulumi.String("string"),
	Visibility:        pulumi.String("string"),
})
Copy
var authConfigResource = new AuthConfig("authConfigResource", AuthConfigArgs.builder()
    .displayName("string")
    .location("string")
    .clientCertificate(AuthConfigClientCertificateArgs.builder()
        .encryptedPrivateKey("string")
        .sslCertificate("string")
        .passphrase("string")
        .build())
    .decryptedCredential(AuthConfigDecryptedCredentialArgs.builder()
        .credentialType("string")
        .authToken(AuthConfigDecryptedCredentialAuthTokenArgs.builder()
            .token("string")
            .type("string")
            .build())
        .jwt(AuthConfigDecryptedCredentialJwtArgs.builder()
            .jwt("string")
            .jwtHeader("string")
            .jwtPayload("string")
            .secret("string")
            .build())
        .oauth2AuthorizationCode(AuthConfigDecryptedCredentialOauth2AuthorizationCodeArgs.builder()
            .authEndpoint("string")
            .clientId("string")
            .clientSecret("string")
            .scope("string")
            .tokenEndpoint("string")
            .build())
        .oauth2ClientCredentials(AuthConfigDecryptedCredentialOauth2ClientCredentialsArgs.builder()
            .clientId("string")
            .clientSecret("string")
            .requestType("string")
            .scope("string")
            .tokenEndpoint("string")
            .tokenParams(AuthConfigDecryptedCredentialOauth2ClientCredentialsTokenParamsArgs.builder()
                .entries(AuthConfigDecryptedCredentialOauth2ClientCredentialsTokenParamsEntryArgs.builder()
                    .key(AuthConfigDecryptedCredentialOauth2ClientCredentialsTokenParamsEntryKeyArgs.builder()
                        .literalValue(AuthConfigDecryptedCredentialOauth2ClientCredentialsTokenParamsEntryKeyLiteralValueArgs.builder()
                            .stringValue("string")
                            .build())
                        .build())
                    .value(AuthConfigDecryptedCredentialOauth2ClientCredentialsTokenParamsEntryValueArgs.builder()
                        .literalValue(AuthConfigDecryptedCredentialOauth2ClientCredentialsTokenParamsEntryValueLiteralValueArgs.builder()
                            .stringValue("string")
                            .build())
                        .build())
                    .build())
                .build())
            .build())
        .oidcToken(AuthConfigDecryptedCredentialOidcTokenArgs.builder()
            .audience("string")
            .serviceAccountEmail("string")
            .token("string")
            .tokenExpireTime("string")
            .build())
        .serviceAccountCredentials(AuthConfigDecryptedCredentialServiceAccountCredentialsArgs.builder()
            .scope("string")
            .serviceAccount("string")
            .build())
        .usernameAndPassword(AuthConfigDecryptedCredentialUsernameAndPasswordArgs.builder()
            .password("string")
            .username("string")
            .build())
        .build())
    .description("string")
    .expiryNotificationDurations("string")
    .overrideValidTime("string")
    .project("string")
    .visibility("string")
    .build());
Copy
auth_config_resource = gcp.applicationintegration.AuthConfig("authConfigResource",
    display_name="string",
    location="string",
    client_certificate={
        "encrypted_private_key": "string",
        "ssl_certificate": "string",
        "passphrase": "string",
    },
    decrypted_credential={
        "credential_type": "string",
        "auth_token": {
            "token": "string",
            "type": "string",
        },
        "jwt": {
            "jwt": "string",
            "jwt_header": "string",
            "jwt_payload": "string",
            "secret": "string",
        },
        "oauth2_authorization_code": {
            "auth_endpoint": "string",
            "client_id": "string",
            "client_secret": "string",
            "scope": "string",
            "token_endpoint": "string",
        },
        "oauth2_client_credentials": {
            "client_id": "string",
            "client_secret": "string",
            "request_type": "string",
            "scope": "string",
            "token_endpoint": "string",
            "token_params": {
                "entries": [{
                    "key": {
                        "literal_value": {
                            "string_value": "string",
                        },
                    },
                    "value": {
                        "literal_value": {
                            "string_value": "string",
                        },
                    },
                }],
            },
        },
        "oidc_token": {
            "audience": "string",
            "service_account_email": "string",
            "token": "string",
            "token_expire_time": "string",
        },
        "service_account_credentials": {
            "scope": "string",
            "service_account": "string",
        },
        "username_and_password": {
            "password": "string",
            "username": "string",
        },
    },
    description="string",
    expiry_notification_durations=["string"],
    override_valid_time="string",
    project="string",
    visibility="string")
Copy
const authConfigResource = new gcp.applicationintegration.AuthConfig("authConfigResource", {
    displayName: "string",
    location: "string",
    clientCertificate: {
        encryptedPrivateKey: "string",
        sslCertificate: "string",
        passphrase: "string",
    },
    decryptedCredential: {
        credentialType: "string",
        authToken: {
            token: "string",
            type: "string",
        },
        jwt: {
            jwt: "string",
            jwtHeader: "string",
            jwtPayload: "string",
            secret: "string",
        },
        oauth2AuthorizationCode: {
            authEndpoint: "string",
            clientId: "string",
            clientSecret: "string",
            scope: "string",
            tokenEndpoint: "string",
        },
        oauth2ClientCredentials: {
            clientId: "string",
            clientSecret: "string",
            requestType: "string",
            scope: "string",
            tokenEndpoint: "string",
            tokenParams: {
                entries: [{
                    key: {
                        literalValue: {
                            stringValue: "string",
                        },
                    },
                    value: {
                        literalValue: {
                            stringValue: "string",
                        },
                    },
                }],
            },
        },
        oidcToken: {
            audience: "string",
            serviceAccountEmail: "string",
            token: "string",
            tokenExpireTime: "string",
        },
        serviceAccountCredentials: {
            scope: "string",
            serviceAccount: "string",
        },
        usernameAndPassword: {
            password: "string",
            username: "string",
        },
    },
    description: "string",
    expiryNotificationDurations: ["string"],
    overrideValidTime: "string",
    project: "string",
    visibility: "string",
});
Copy
type: gcp:applicationintegration:AuthConfig
properties:
    clientCertificate:
        encryptedPrivateKey: string
        passphrase: string
        sslCertificate: string
    decryptedCredential:
        authToken:
            token: string
            type: string
        credentialType: string
        jwt:
            jwt: string
            jwtHeader: string
            jwtPayload: string
            secret: string
        oauth2AuthorizationCode:
            authEndpoint: string
            clientId: string
            clientSecret: string
            scope: string
            tokenEndpoint: string
        oauth2ClientCredentials:
            clientId: string
            clientSecret: string
            requestType: string
            scope: string
            tokenEndpoint: string
            tokenParams:
                entries:
                    - key:
                        literalValue:
                            stringValue: string
                      value:
                        literalValue:
                            stringValue: string
        oidcToken:
            audience: string
            serviceAccountEmail: string
            token: string
            tokenExpireTime: string
        serviceAccountCredentials:
            scope: string
            serviceAccount: string
        usernameAndPassword:
            password: string
            username: string
    description: string
    displayName: string
    expiryNotificationDurations:
        - string
    location: string
    overrideValidTime: string
    project: string
    visibility: string
Copy

AuthConfig Resource Properties

To learn more about resource properties and how to use them, see Inputs and Outputs in the Architecture and Concepts docs.

Inputs

In Python, inputs that are objects can be passed either as argument classes or as dictionary literals.

The AuthConfig resource accepts the following input properties:

DisplayName This property is required. string
The name of the auth config.
Location
This property is required.
Changes to this property will trigger replacement.
string
Location in which client needs to be provisioned.

ClientCertificate AuthConfigClientCertificate
Raw client certificate Structure is documented below.
DecryptedCredential AuthConfigDecryptedCredential
Raw auth credentials. Structure is documented below.
Description string
A description of the auth config.
ExpiryNotificationDurations List<string>
User can define the time to receive notification after which the auth config becomes invalid. Support up to 30 days. Support granularity in hours. A duration in seconds with up to nine fractional digits, ending with 's'. Example: "3.5s".
OverrideValidTime string
User provided expiry time to override. For the example of Salesforce, username/password credentials can be valid for 6 months depending on the instance settings. A timestamp in RFC3339 UTC "Zulu" format, with nanosecond resolution and up to nine fractional digits. Examples: "2014-10-02T15:01:23Z" and "2014-10-02T15:01:23.045123456Z".
Project Changes to this property will trigger replacement. string
The ID of the project in which the resource belongs. If it is not provided, the provider project is used.
Visibility string
The visibility of the auth config. Possible values are: PRIVATE, CLIENT_VISIBLE.
DisplayName This property is required. string
The name of the auth config.
Location
This property is required.
Changes to this property will trigger replacement.
string
Location in which client needs to be provisioned.

ClientCertificate AuthConfigClientCertificateArgs
Raw client certificate Structure is documented below.
DecryptedCredential AuthConfigDecryptedCredentialArgs
Raw auth credentials. Structure is documented below.
Description string
A description of the auth config.
ExpiryNotificationDurations []string
User can define the time to receive notification after which the auth config becomes invalid. Support up to 30 days. Support granularity in hours. A duration in seconds with up to nine fractional digits, ending with 's'. Example: "3.5s".
OverrideValidTime string
User provided expiry time to override. For the example of Salesforce, username/password credentials can be valid for 6 months depending on the instance settings. A timestamp in RFC3339 UTC "Zulu" format, with nanosecond resolution and up to nine fractional digits. Examples: "2014-10-02T15:01:23Z" and "2014-10-02T15:01:23.045123456Z".
Project Changes to this property will trigger replacement. string
The ID of the project in which the resource belongs. If it is not provided, the provider project is used.
Visibility string
The visibility of the auth config. Possible values are: PRIVATE, CLIENT_VISIBLE.
displayName This property is required. String
The name of the auth config.
location
This property is required.
Changes to this property will trigger replacement.
String
Location in which client needs to be provisioned.

clientCertificate AuthConfigClientCertificate
Raw client certificate Structure is documented below.
decryptedCredential AuthConfigDecryptedCredential
Raw auth credentials. Structure is documented below.
description String
A description of the auth config.
expiryNotificationDurations List<String>
User can define the time to receive notification after which the auth config becomes invalid. Support up to 30 days. Support granularity in hours. A duration in seconds with up to nine fractional digits, ending with 's'. Example: "3.5s".
overrideValidTime String
User provided expiry time to override. For the example of Salesforce, username/password credentials can be valid for 6 months depending on the instance settings. A timestamp in RFC3339 UTC "Zulu" format, with nanosecond resolution and up to nine fractional digits. Examples: "2014-10-02T15:01:23Z" and "2014-10-02T15:01:23.045123456Z".
project Changes to this property will trigger replacement. String
The ID of the project in which the resource belongs. If it is not provided, the provider project is used.
visibility String
The visibility of the auth config. Possible values are: PRIVATE, CLIENT_VISIBLE.
displayName This property is required. string
The name of the auth config.
location
This property is required.
Changes to this property will trigger replacement.
string
Location in which client needs to be provisioned.

clientCertificate AuthConfigClientCertificate
Raw client certificate Structure is documented below.
decryptedCredential AuthConfigDecryptedCredential
Raw auth credentials. Structure is documented below.
description string
A description of the auth config.
expiryNotificationDurations string[]
User can define the time to receive notification after which the auth config becomes invalid. Support up to 30 days. Support granularity in hours. A duration in seconds with up to nine fractional digits, ending with 's'. Example: "3.5s".
overrideValidTime string
User provided expiry time to override. For the example of Salesforce, username/password credentials can be valid for 6 months depending on the instance settings. A timestamp in RFC3339 UTC "Zulu" format, with nanosecond resolution and up to nine fractional digits. Examples: "2014-10-02T15:01:23Z" and "2014-10-02T15:01:23.045123456Z".
project Changes to this property will trigger replacement. string
The ID of the project in which the resource belongs. If it is not provided, the provider project is used.
visibility string
The visibility of the auth config. Possible values are: PRIVATE, CLIENT_VISIBLE.
display_name This property is required. str
The name of the auth config.
location
This property is required.
Changes to this property will trigger replacement.
str
Location in which client needs to be provisioned.

client_certificate AuthConfigClientCertificateArgs
Raw client certificate Structure is documented below.
decrypted_credential AuthConfigDecryptedCredentialArgs
Raw auth credentials. Structure is documented below.
description str
A description of the auth config.
expiry_notification_durations Sequence[str]
User can define the time to receive notification after which the auth config becomes invalid. Support up to 30 days. Support granularity in hours. A duration in seconds with up to nine fractional digits, ending with 's'. Example: "3.5s".
override_valid_time str
User provided expiry time to override. For the example of Salesforce, username/password credentials can be valid for 6 months depending on the instance settings. A timestamp in RFC3339 UTC "Zulu" format, with nanosecond resolution and up to nine fractional digits. Examples: "2014-10-02T15:01:23Z" and "2014-10-02T15:01:23.045123456Z".
project Changes to this property will trigger replacement. str
The ID of the project in which the resource belongs. If it is not provided, the provider project is used.
visibility str
The visibility of the auth config. Possible values are: PRIVATE, CLIENT_VISIBLE.
displayName This property is required. String
The name of the auth config.
location
This property is required.
Changes to this property will trigger replacement.
String
Location in which client needs to be provisioned.

clientCertificate Property Map
Raw client certificate Structure is documented below.
decryptedCredential Property Map
Raw auth credentials. Structure is documented below.
description String
A description of the auth config.
expiryNotificationDurations List<String>
User can define the time to receive notification after which the auth config becomes invalid. Support up to 30 days. Support granularity in hours. A duration in seconds with up to nine fractional digits, ending with 's'. Example: "3.5s".
overrideValidTime String
User provided expiry time to override. For the example of Salesforce, username/password credentials can be valid for 6 months depending on the instance settings. A timestamp in RFC3339 UTC "Zulu" format, with nanosecond resolution and up to nine fractional digits. Examples: "2014-10-02T15:01:23Z" and "2014-10-02T15:01:23.045123456Z".
project Changes to this property will trigger replacement. String
The ID of the project in which the resource belongs. If it is not provided, the provider project is used.
visibility String
The visibility of the auth config. Possible values are: PRIVATE, CLIENT_VISIBLE.

Outputs

All input properties are implicitly available as output properties. Additionally, the AuthConfig resource produces the following output properties:

CertificateId string
Certificate id for client certificate.
CreateTime string
The timestamp when the auth config is created. A timestamp in RFC3339 UTC "Zulu" format, with nanosecond resolution and up to nine fractional digits. Examples: "2014-10-02T15:01:23Z" and "2014-10-02T15:01:23.045123456Z".
CreatorEmail string
The creator's email address. Generated based on the End User Credentials/LOAS role of the user making the call.
CredentialType string
Credential type of the encrypted credential.
EncryptedCredential string
Auth credential encrypted by Cloud KMS. Can be decrypted as Credential with proper KMS key. A base64-encoded string.
Id string
The provider-assigned unique ID for this managed resource.
LastModifierEmail string
The last modifier's email address. Generated based on the End User Credentials/LOAS role of the user making the call.
Name string
Resource name of the auth config.
Reason string
The reason / details of the current status.
State string
The status of the auth config.
UpdateTime string
The timestamp when the auth config is modified. A timestamp in RFC3339 UTC "Zulu" format, with nanosecond resolution and up to nine fractional digits. Examples: "2014-10-02T15:01:23Z" and "2014-10-02T15:01:23.045123456Z".
ValidTime string
The time until the auth config is valid. Empty or max value is considered the auth config won't expire. A timestamp in RFC3339 UTC "Zulu" format, with nanosecond resolution and up to nine fractional digits. Examples: "2014-10-02T15:01:23Z" and "2014-10-02T15:01:23.045123456Z".
CertificateId string
Certificate id for client certificate.
CreateTime string
The timestamp when the auth config is created. A timestamp in RFC3339 UTC "Zulu" format, with nanosecond resolution and up to nine fractional digits. Examples: "2014-10-02T15:01:23Z" and "2014-10-02T15:01:23.045123456Z".
CreatorEmail string
The creator's email address. Generated based on the End User Credentials/LOAS role of the user making the call.
CredentialType string
Credential type of the encrypted credential.
EncryptedCredential string
Auth credential encrypted by Cloud KMS. Can be decrypted as Credential with proper KMS key. A base64-encoded string.
Id string
The provider-assigned unique ID for this managed resource.
LastModifierEmail string
The last modifier's email address. Generated based on the End User Credentials/LOAS role of the user making the call.
Name string
Resource name of the auth config.
Reason string
The reason / details of the current status.
State string
The status of the auth config.
UpdateTime string
The timestamp when the auth config is modified. A timestamp in RFC3339 UTC "Zulu" format, with nanosecond resolution and up to nine fractional digits. Examples: "2014-10-02T15:01:23Z" and "2014-10-02T15:01:23.045123456Z".
ValidTime string
The time until the auth config is valid. Empty or max value is considered the auth config won't expire. A timestamp in RFC3339 UTC "Zulu" format, with nanosecond resolution and up to nine fractional digits. Examples: "2014-10-02T15:01:23Z" and "2014-10-02T15:01:23.045123456Z".
certificateId String
Certificate id for client certificate.
createTime String
The timestamp when the auth config is created. A timestamp in RFC3339 UTC "Zulu" format, with nanosecond resolution and up to nine fractional digits. Examples: "2014-10-02T15:01:23Z" and "2014-10-02T15:01:23.045123456Z".
creatorEmail String
The creator's email address. Generated based on the End User Credentials/LOAS role of the user making the call.
credentialType String
Credential type of the encrypted credential.
encryptedCredential String
Auth credential encrypted by Cloud KMS. Can be decrypted as Credential with proper KMS key. A base64-encoded string.
id String
The provider-assigned unique ID for this managed resource.
lastModifierEmail String
The last modifier's email address. Generated based on the End User Credentials/LOAS role of the user making the call.
name String
Resource name of the auth config.
reason String
The reason / details of the current status.
state String
The status of the auth config.
updateTime String
The timestamp when the auth config is modified. A timestamp in RFC3339 UTC "Zulu" format, with nanosecond resolution and up to nine fractional digits. Examples: "2014-10-02T15:01:23Z" and "2014-10-02T15:01:23.045123456Z".
validTime String
The time until the auth config is valid. Empty or max value is considered the auth config won't expire. A timestamp in RFC3339 UTC "Zulu" format, with nanosecond resolution and up to nine fractional digits. Examples: "2014-10-02T15:01:23Z" and "2014-10-02T15:01:23.045123456Z".
certificateId string
Certificate id for client certificate.
createTime string
The timestamp when the auth config is created. A timestamp in RFC3339 UTC "Zulu" format, with nanosecond resolution and up to nine fractional digits. Examples: "2014-10-02T15:01:23Z" and "2014-10-02T15:01:23.045123456Z".
creatorEmail string
The creator's email address. Generated based on the End User Credentials/LOAS role of the user making the call.
credentialType string
Credential type of the encrypted credential.
encryptedCredential string
Auth credential encrypted by Cloud KMS. Can be decrypted as Credential with proper KMS key. A base64-encoded string.
id string
The provider-assigned unique ID for this managed resource.
lastModifierEmail string
The last modifier's email address. Generated based on the End User Credentials/LOAS role of the user making the call.
name string
Resource name of the auth config.
reason string
The reason / details of the current status.
state string
The status of the auth config.
updateTime string
The timestamp when the auth config is modified. A timestamp in RFC3339 UTC "Zulu" format, with nanosecond resolution and up to nine fractional digits. Examples: "2014-10-02T15:01:23Z" and "2014-10-02T15:01:23.045123456Z".
validTime string
The time until the auth config is valid. Empty or max value is considered the auth config won't expire. A timestamp in RFC3339 UTC "Zulu" format, with nanosecond resolution and up to nine fractional digits. Examples: "2014-10-02T15:01:23Z" and "2014-10-02T15:01:23.045123456Z".
certificate_id str
Certificate id for client certificate.
create_time str
The timestamp when the auth config is created. A timestamp in RFC3339 UTC "Zulu" format, with nanosecond resolution and up to nine fractional digits. Examples: "2014-10-02T15:01:23Z" and "2014-10-02T15:01:23.045123456Z".
creator_email str
The creator's email address. Generated based on the End User Credentials/LOAS role of the user making the call.
credential_type str
Credential type of the encrypted credential.
encrypted_credential str
Auth credential encrypted by Cloud KMS. Can be decrypted as Credential with proper KMS key. A base64-encoded string.
id str
The provider-assigned unique ID for this managed resource.
last_modifier_email str
The last modifier's email address. Generated based on the End User Credentials/LOAS role of the user making the call.
name str
Resource name of the auth config.
reason str
The reason / details of the current status.
state str
The status of the auth config.
update_time str
The timestamp when the auth config is modified. A timestamp in RFC3339 UTC "Zulu" format, with nanosecond resolution and up to nine fractional digits. Examples: "2014-10-02T15:01:23Z" and "2014-10-02T15:01:23.045123456Z".
valid_time str
The time until the auth config is valid. Empty or max value is considered the auth config won't expire. A timestamp in RFC3339 UTC "Zulu" format, with nanosecond resolution and up to nine fractional digits. Examples: "2014-10-02T15:01:23Z" and "2014-10-02T15:01:23.045123456Z".
certificateId String
Certificate id for client certificate.
createTime String
The timestamp when the auth config is created. A timestamp in RFC3339 UTC "Zulu" format, with nanosecond resolution and up to nine fractional digits. Examples: "2014-10-02T15:01:23Z" and "2014-10-02T15:01:23.045123456Z".
creatorEmail String
The creator's email address. Generated based on the End User Credentials/LOAS role of the user making the call.
credentialType String
Credential type of the encrypted credential.
encryptedCredential String
Auth credential encrypted by Cloud KMS. Can be decrypted as Credential with proper KMS key. A base64-encoded string.
id String
The provider-assigned unique ID for this managed resource.
lastModifierEmail String
The last modifier's email address. Generated based on the End User Credentials/LOAS role of the user making the call.
name String
Resource name of the auth config.
reason String
The reason / details of the current status.
state String
The status of the auth config.
updateTime String
The timestamp when the auth config is modified. A timestamp in RFC3339 UTC "Zulu" format, with nanosecond resolution and up to nine fractional digits. Examples: "2014-10-02T15:01:23Z" and "2014-10-02T15:01:23.045123456Z".
validTime String
The time until the auth config is valid. Empty or max value is considered the auth config won't expire. A timestamp in RFC3339 UTC "Zulu" format, with nanosecond resolution and up to nine fractional digits. Examples: "2014-10-02T15:01:23Z" and "2014-10-02T15:01:23.045123456Z".

Look up Existing AuthConfig Resource

Get an existing AuthConfig resource’s state with the given name, ID, and optional extra properties used to qualify the lookup.

public static get(name: string, id: Input<ID>, state?: AuthConfigState, opts?: CustomResourceOptions): AuthConfig
@staticmethod
def get(resource_name: str,
        id: str,
        opts: Optional[ResourceOptions] = None,
        certificate_id: Optional[str] = None,
        client_certificate: Optional[AuthConfigClientCertificateArgs] = None,
        create_time: Optional[str] = None,
        creator_email: Optional[str] = None,
        credential_type: Optional[str] = None,
        decrypted_credential: Optional[AuthConfigDecryptedCredentialArgs] = None,
        description: Optional[str] = None,
        display_name: Optional[str] = None,
        encrypted_credential: Optional[str] = None,
        expiry_notification_durations: Optional[Sequence[str]] = None,
        last_modifier_email: Optional[str] = None,
        location: Optional[str] = None,
        name: Optional[str] = None,
        override_valid_time: Optional[str] = None,
        project: Optional[str] = None,
        reason: Optional[str] = None,
        state: Optional[str] = None,
        update_time: Optional[str] = None,
        valid_time: Optional[str] = None,
        visibility: Optional[str] = None) -> AuthConfig
func GetAuthConfig(ctx *Context, name string, id IDInput, state *AuthConfigState, opts ...ResourceOption) (*AuthConfig, error)
public static AuthConfig Get(string name, Input<string> id, AuthConfigState? state, CustomResourceOptions? opts = null)
public static AuthConfig get(String name, Output<String> id, AuthConfigState state, CustomResourceOptions options)
resources:  _:    type: gcp:applicationintegration:AuthConfig    get:      id: ${id}
name This property is required.
The unique name of the resulting resource.
id This property is required.
The unique provider ID of the resource to lookup.
state
Any extra arguments used during the lookup.
opts
A bag of options that control this resource's behavior.
resource_name This property is required.
The unique name of the resulting resource.
id This property is required.
The unique provider ID of the resource to lookup.
name This property is required.
The unique name of the resulting resource.
id This property is required.
The unique provider ID of the resource to lookup.
state
Any extra arguments used during the lookup.
opts
A bag of options that control this resource's behavior.
name This property is required.
The unique name of the resulting resource.
id This property is required.
The unique provider ID of the resource to lookup.
state
Any extra arguments used during the lookup.
opts
A bag of options that control this resource's behavior.
name This property is required.
The unique name of the resulting resource.
id This property is required.
The unique provider ID of the resource to lookup.
state
Any extra arguments used during the lookup.
opts
A bag of options that control this resource's behavior.
The following state arguments are supported:
CertificateId string
Certificate id for client certificate.
ClientCertificate AuthConfigClientCertificate
Raw client certificate Structure is documented below.
CreateTime string
The timestamp when the auth config is created. A timestamp in RFC3339 UTC "Zulu" format, with nanosecond resolution and up to nine fractional digits. Examples: "2014-10-02T15:01:23Z" and "2014-10-02T15:01:23.045123456Z".
CreatorEmail string
The creator's email address. Generated based on the End User Credentials/LOAS role of the user making the call.
CredentialType string
Credential type of the encrypted credential.
DecryptedCredential AuthConfigDecryptedCredential
Raw auth credentials. Structure is documented below.
Description string
A description of the auth config.
DisplayName string
The name of the auth config.
EncryptedCredential string
Auth credential encrypted by Cloud KMS. Can be decrypted as Credential with proper KMS key. A base64-encoded string.
ExpiryNotificationDurations List<string>
User can define the time to receive notification after which the auth config becomes invalid. Support up to 30 days. Support granularity in hours. A duration in seconds with up to nine fractional digits, ending with 's'. Example: "3.5s".
LastModifierEmail string
The last modifier's email address. Generated based on the End User Credentials/LOAS role of the user making the call.
Location Changes to this property will trigger replacement. string
Location in which client needs to be provisioned.

Name string
Resource name of the auth config.
OverrideValidTime string
User provided expiry time to override. For the example of Salesforce, username/password credentials can be valid for 6 months depending on the instance settings. A timestamp in RFC3339 UTC "Zulu" format, with nanosecond resolution and up to nine fractional digits. Examples: "2014-10-02T15:01:23Z" and "2014-10-02T15:01:23.045123456Z".
Project Changes to this property will trigger replacement. string
The ID of the project in which the resource belongs. If it is not provided, the provider project is used.
Reason string
The reason / details of the current status.
State string
The status of the auth config.
UpdateTime string
The timestamp when the auth config is modified. A timestamp in RFC3339 UTC "Zulu" format, with nanosecond resolution and up to nine fractional digits. Examples: "2014-10-02T15:01:23Z" and "2014-10-02T15:01:23.045123456Z".
ValidTime string
The time until the auth config is valid. Empty or max value is considered the auth config won't expire. A timestamp in RFC3339 UTC "Zulu" format, with nanosecond resolution and up to nine fractional digits. Examples: "2014-10-02T15:01:23Z" and "2014-10-02T15:01:23.045123456Z".
Visibility string
The visibility of the auth config. Possible values are: PRIVATE, CLIENT_VISIBLE.
CertificateId string
Certificate id for client certificate.
ClientCertificate AuthConfigClientCertificateArgs
Raw client certificate Structure is documented below.
CreateTime string
The timestamp when the auth config is created. A timestamp in RFC3339 UTC "Zulu" format, with nanosecond resolution and up to nine fractional digits. Examples: "2014-10-02T15:01:23Z" and "2014-10-02T15:01:23.045123456Z".
CreatorEmail string
The creator's email address. Generated based on the End User Credentials/LOAS role of the user making the call.
CredentialType string
Credential type of the encrypted credential.
DecryptedCredential AuthConfigDecryptedCredentialArgs
Raw auth credentials. Structure is documented below.
Description string
A description of the auth config.
DisplayName string
The name of the auth config.
EncryptedCredential string
Auth credential encrypted by Cloud KMS. Can be decrypted as Credential with proper KMS key. A base64-encoded string.
ExpiryNotificationDurations []string
User can define the time to receive notification after which the auth config becomes invalid. Support up to 30 days. Support granularity in hours. A duration in seconds with up to nine fractional digits, ending with 's'. Example: "3.5s".
LastModifierEmail string
The last modifier's email address. Generated based on the End User Credentials/LOAS role of the user making the call.
Location Changes to this property will trigger replacement. string
Location in which client needs to be provisioned.

Name string
Resource name of the auth config.
OverrideValidTime string
User provided expiry time to override. For the example of Salesforce, username/password credentials can be valid for 6 months depending on the instance settings. A timestamp in RFC3339 UTC "Zulu" format, with nanosecond resolution and up to nine fractional digits. Examples: "2014-10-02T15:01:23Z" and "2014-10-02T15:01:23.045123456Z".
Project Changes to this property will trigger replacement. string
The ID of the project in which the resource belongs. If it is not provided, the provider project is used.
Reason string
The reason / details of the current status.
State string
The status of the auth config.
UpdateTime string
The timestamp when the auth config is modified. A timestamp in RFC3339 UTC "Zulu" format, with nanosecond resolution and up to nine fractional digits. Examples: "2014-10-02T15:01:23Z" and "2014-10-02T15:01:23.045123456Z".
ValidTime string
The time until the auth config is valid. Empty or max value is considered the auth config won't expire. A timestamp in RFC3339 UTC "Zulu" format, with nanosecond resolution and up to nine fractional digits. Examples: "2014-10-02T15:01:23Z" and "2014-10-02T15:01:23.045123456Z".
Visibility string
The visibility of the auth config. Possible values are: PRIVATE, CLIENT_VISIBLE.
certificateId String
Certificate id for client certificate.
clientCertificate AuthConfigClientCertificate
Raw client certificate Structure is documented below.
createTime String
The timestamp when the auth config is created. A timestamp in RFC3339 UTC "Zulu" format, with nanosecond resolution and up to nine fractional digits. Examples: "2014-10-02T15:01:23Z" and "2014-10-02T15:01:23.045123456Z".
creatorEmail String
The creator's email address. Generated based on the End User Credentials/LOAS role of the user making the call.
credentialType String
Credential type of the encrypted credential.
decryptedCredential AuthConfigDecryptedCredential
Raw auth credentials. Structure is documented below.
description String
A description of the auth config.
displayName String
The name of the auth config.
encryptedCredential String
Auth credential encrypted by Cloud KMS. Can be decrypted as Credential with proper KMS key. A base64-encoded string.
expiryNotificationDurations List<String>
User can define the time to receive notification after which the auth config becomes invalid. Support up to 30 days. Support granularity in hours. A duration in seconds with up to nine fractional digits, ending with 's'. Example: "3.5s".
lastModifierEmail String
The last modifier's email address. Generated based on the End User Credentials/LOAS role of the user making the call.
location Changes to this property will trigger replacement. String
Location in which client needs to be provisioned.

name String
Resource name of the auth config.
overrideValidTime String
User provided expiry time to override. For the example of Salesforce, username/password credentials can be valid for 6 months depending on the instance settings. A timestamp in RFC3339 UTC "Zulu" format, with nanosecond resolution and up to nine fractional digits. Examples: "2014-10-02T15:01:23Z" and "2014-10-02T15:01:23.045123456Z".
project Changes to this property will trigger replacement. String
The ID of the project in which the resource belongs. If it is not provided, the provider project is used.
reason String
The reason / details of the current status.
state String
The status of the auth config.
updateTime String
The timestamp when the auth config is modified. A timestamp in RFC3339 UTC "Zulu" format, with nanosecond resolution and up to nine fractional digits. Examples: "2014-10-02T15:01:23Z" and "2014-10-02T15:01:23.045123456Z".
validTime String
The time until the auth config is valid. Empty or max value is considered the auth config won't expire. A timestamp in RFC3339 UTC "Zulu" format, with nanosecond resolution and up to nine fractional digits. Examples: "2014-10-02T15:01:23Z" and "2014-10-02T15:01:23.045123456Z".
visibility String
The visibility of the auth config. Possible values are: PRIVATE, CLIENT_VISIBLE.
certificateId string
Certificate id for client certificate.
clientCertificate AuthConfigClientCertificate
Raw client certificate Structure is documented below.
createTime string
The timestamp when the auth config is created. A timestamp in RFC3339 UTC "Zulu" format, with nanosecond resolution and up to nine fractional digits. Examples: "2014-10-02T15:01:23Z" and "2014-10-02T15:01:23.045123456Z".
creatorEmail string
The creator's email address. Generated based on the End User Credentials/LOAS role of the user making the call.
credentialType string
Credential type of the encrypted credential.
decryptedCredential AuthConfigDecryptedCredential
Raw auth credentials. Structure is documented below.
description string
A description of the auth config.
displayName string
The name of the auth config.
encryptedCredential string
Auth credential encrypted by Cloud KMS. Can be decrypted as Credential with proper KMS key. A base64-encoded string.
expiryNotificationDurations string[]
User can define the time to receive notification after which the auth config becomes invalid. Support up to 30 days. Support granularity in hours. A duration in seconds with up to nine fractional digits, ending with 's'. Example: "3.5s".
lastModifierEmail string
The last modifier's email address. Generated based on the End User Credentials/LOAS role of the user making the call.
location Changes to this property will trigger replacement. string
Location in which client needs to be provisioned.

name string
Resource name of the auth config.
overrideValidTime string
User provided expiry time to override. For the example of Salesforce, username/password credentials can be valid for 6 months depending on the instance settings. A timestamp in RFC3339 UTC "Zulu" format, with nanosecond resolution and up to nine fractional digits. Examples: "2014-10-02T15:01:23Z" and "2014-10-02T15:01:23.045123456Z".
project Changes to this property will trigger replacement. string
The ID of the project in which the resource belongs. If it is not provided, the provider project is used.
reason string
The reason / details of the current status.
state string
The status of the auth config.
updateTime string
The timestamp when the auth config is modified. A timestamp in RFC3339 UTC "Zulu" format, with nanosecond resolution and up to nine fractional digits. Examples: "2014-10-02T15:01:23Z" and "2014-10-02T15:01:23.045123456Z".
validTime string
The time until the auth config is valid. Empty or max value is considered the auth config won't expire. A timestamp in RFC3339 UTC "Zulu" format, with nanosecond resolution and up to nine fractional digits. Examples: "2014-10-02T15:01:23Z" and "2014-10-02T15:01:23.045123456Z".
visibility string
The visibility of the auth config. Possible values are: PRIVATE, CLIENT_VISIBLE.
certificate_id str
Certificate id for client certificate.
client_certificate AuthConfigClientCertificateArgs
Raw client certificate Structure is documented below.
create_time str
The timestamp when the auth config is created. A timestamp in RFC3339 UTC "Zulu" format, with nanosecond resolution and up to nine fractional digits. Examples: "2014-10-02T15:01:23Z" and "2014-10-02T15:01:23.045123456Z".
creator_email str
The creator's email address. Generated based on the End User Credentials/LOAS role of the user making the call.
credential_type str
Credential type of the encrypted credential.
decrypted_credential AuthConfigDecryptedCredentialArgs
Raw auth credentials. Structure is documented below.
description str
A description of the auth config.
display_name str
The name of the auth config.
encrypted_credential str
Auth credential encrypted by Cloud KMS. Can be decrypted as Credential with proper KMS key. A base64-encoded string.
expiry_notification_durations Sequence[str]
User can define the time to receive notification after which the auth config becomes invalid. Support up to 30 days. Support granularity in hours. A duration in seconds with up to nine fractional digits, ending with 's'. Example: "3.5s".
last_modifier_email str
The last modifier's email address. Generated based on the End User Credentials/LOAS role of the user making the call.
location Changes to this property will trigger replacement. str
Location in which client needs to be provisioned.

name str
Resource name of the auth config.
override_valid_time str
User provided expiry time to override. For the example of Salesforce, username/password credentials can be valid for 6 months depending on the instance settings. A timestamp in RFC3339 UTC "Zulu" format, with nanosecond resolution and up to nine fractional digits. Examples: "2014-10-02T15:01:23Z" and "2014-10-02T15:01:23.045123456Z".
project Changes to this property will trigger replacement. str
The ID of the project in which the resource belongs. If it is not provided, the provider project is used.
reason str
The reason / details of the current status.
state str
The status of the auth config.
update_time str
The timestamp when the auth config is modified. A timestamp in RFC3339 UTC "Zulu" format, with nanosecond resolution and up to nine fractional digits. Examples: "2014-10-02T15:01:23Z" and "2014-10-02T15:01:23.045123456Z".
valid_time str
The time until the auth config is valid. Empty or max value is considered the auth config won't expire. A timestamp in RFC3339 UTC "Zulu" format, with nanosecond resolution and up to nine fractional digits. Examples: "2014-10-02T15:01:23Z" and "2014-10-02T15:01:23.045123456Z".
visibility str
The visibility of the auth config. Possible values are: PRIVATE, CLIENT_VISIBLE.
certificateId String
Certificate id for client certificate.
clientCertificate Property Map
Raw client certificate Structure is documented below.
createTime String
The timestamp when the auth config is created. A timestamp in RFC3339 UTC "Zulu" format, with nanosecond resolution and up to nine fractional digits. Examples: "2014-10-02T15:01:23Z" and "2014-10-02T15:01:23.045123456Z".
creatorEmail String
The creator's email address. Generated based on the End User Credentials/LOAS role of the user making the call.
credentialType String
Credential type of the encrypted credential.
decryptedCredential Property Map
Raw auth credentials. Structure is documented below.
description String
A description of the auth config.
displayName String
The name of the auth config.
encryptedCredential String
Auth credential encrypted by Cloud KMS. Can be decrypted as Credential with proper KMS key. A base64-encoded string.
expiryNotificationDurations List<String>
User can define the time to receive notification after which the auth config becomes invalid. Support up to 30 days. Support granularity in hours. A duration in seconds with up to nine fractional digits, ending with 's'. Example: "3.5s".
lastModifierEmail String
The last modifier's email address. Generated based on the End User Credentials/LOAS role of the user making the call.
location Changes to this property will trigger replacement. String
Location in which client needs to be provisioned.

name String
Resource name of the auth config.
overrideValidTime String
User provided expiry time to override. For the example of Salesforce, username/password credentials can be valid for 6 months depending on the instance settings. A timestamp in RFC3339 UTC "Zulu" format, with nanosecond resolution and up to nine fractional digits. Examples: "2014-10-02T15:01:23Z" and "2014-10-02T15:01:23.045123456Z".
project Changes to this property will trigger replacement. String
The ID of the project in which the resource belongs. If it is not provided, the provider project is used.
reason String
The reason / details of the current status.
state String
The status of the auth config.
updateTime String
The timestamp when the auth config is modified. A timestamp in RFC3339 UTC "Zulu" format, with nanosecond resolution and up to nine fractional digits. Examples: "2014-10-02T15:01:23Z" and "2014-10-02T15:01:23.045123456Z".
validTime String
The time until the auth config is valid. Empty or max value is considered the auth config won't expire. A timestamp in RFC3339 UTC "Zulu" format, with nanosecond resolution and up to nine fractional digits. Examples: "2014-10-02T15:01:23Z" and "2014-10-02T15:01:23.045123456Z".
visibility String
The visibility of the auth config. Possible values are: PRIVATE, CLIENT_VISIBLE.

Supporting Types

AuthConfigClientCertificate
, AuthConfigClientCertificateArgs

EncryptedPrivateKey This property is required. string
The ssl certificate encoded in PEM format. This string must include the begin header and end footer lines.
SslCertificate This property is required. string
The ssl certificate encoded in PEM format. This string must include the begin header and end footer lines.
Passphrase string
'passphrase' should be left unset if private key is not encrypted. Note that 'passphrase' is not the password for web server, but an extra layer of security to protected private key.
EncryptedPrivateKey This property is required. string
The ssl certificate encoded in PEM format. This string must include the begin header and end footer lines.
SslCertificate This property is required. string
The ssl certificate encoded in PEM format. This string must include the begin header and end footer lines.
Passphrase string
'passphrase' should be left unset if private key is not encrypted. Note that 'passphrase' is not the password for web server, but an extra layer of security to protected private key.
encryptedPrivateKey This property is required. String
The ssl certificate encoded in PEM format. This string must include the begin header and end footer lines.
sslCertificate This property is required. String
The ssl certificate encoded in PEM format. This string must include the begin header and end footer lines.
passphrase String
'passphrase' should be left unset if private key is not encrypted. Note that 'passphrase' is not the password for web server, but an extra layer of security to protected private key.
encryptedPrivateKey This property is required. string
The ssl certificate encoded in PEM format. This string must include the begin header and end footer lines.
sslCertificate This property is required. string
The ssl certificate encoded in PEM format. This string must include the begin header and end footer lines.
passphrase string
'passphrase' should be left unset if private key is not encrypted. Note that 'passphrase' is not the password for web server, but an extra layer of security to protected private key.
encrypted_private_key This property is required. str
The ssl certificate encoded in PEM format. This string must include the begin header and end footer lines.
ssl_certificate This property is required. str
The ssl certificate encoded in PEM format. This string must include the begin header and end footer lines.
passphrase str
'passphrase' should be left unset if private key is not encrypted. Note that 'passphrase' is not the password for web server, but an extra layer of security to protected private key.
encryptedPrivateKey This property is required. String
The ssl certificate encoded in PEM format. This string must include the begin header and end footer lines.
sslCertificate This property is required. String
The ssl certificate encoded in PEM format. This string must include the begin header and end footer lines.
passphrase String
'passphrase' should be left unset if private key is not encrypted. Note that 'passphrase' is not the password for web server, but an extra layer of security to protected private key.

AuthConfigDecryptedCredential
, AuthConfigDecryptedCredentialArgs

CredentialType This property is required. string
Credential type associated with auth configs.
AuthToken AuthConfigDecryptedCredentialAuthToken
Auth token credential. Structure is documented below.
Jwt AuthConfigDecryptedCredentialJwt
JWT credential. Structure is documented below.
Oauth2AuthorizationCode AuthConfigDecryptedCredentialOauth2AuthorizationCode
OAuth2 authorization code credential. Structure is documented below.
Oauth2ClientCredentials AuthConfigDecryptedCredentialOauth2ClientCredentials
OAuth2 client credentials. Structure is documented below.
OidcToken AuthConfigDecryptedCredentialOidcToken
Google OIDC ID Token. Structure is documented below.
ServiceAccountCredentials AuthConfigDecryptedCredentialServiceAccountCredentials
Service account credential. Structure is documented below.
UsernameAndPassword AuthConfigDecryptedCredentialUsernameAndPassword
Username and password credential. Structure is documented below.
CredentialType This property is required. string
Credential type associated with auth configs.
AuthToken AuthConfigDecryptedCredentialAuthToken
Auth token credential. Structure is documented below.
Jwt AuthConfigDecryptedCredentialJwt
JWT credential. Structure is documented below.
Oauth2AuthorizationCode AuthConfigDecryptedCredentialOauth2AuthorizationCode
OAuth2 authorization code credential. Structure is documented below.
Oauth2ClientCredentials AuthConfigDecryptedCredentialOauth2ClientCredentials
OAuth2 client credentials. Structure is documented below.
OidcToken AuthConfigDecryptedCredentialOidcToken
Google OIDC ID Token. Structure is documented below.
ServiceAccountCredentials AuthConfigDecryptedCredentialServiceAccountCredentials
Service account credential. Structure is documented below.
UsernameAndPassword AuthConfigDecryptedCredentialUsernameAndPassword
Username and password credential. Structure is documented below.
credentialType This property is required. String
Credential type associated with auth configs.
authToken AuthConfigDecryptedCredentialAuthToken
Auth token credential. Structure is documented below.
jwt AuthConfigDecryptedCredentialJwt
JWT credential. Structure is documented below.
oauth2AuthorizationCode AuthConfigDecryptedCredentialOauth2AuthorizationCode
OAuth2 authorization code credential. Structure is documented below.
oauth2ClientCredentials AuthConfigDecryptedCredentialOauth2ClientCredentials
OAuth2 client credentials. Structure is documented below.
oidcToken AuthConfigDecryptedCredentialOidcToken
Google OIDC ID Token. Structure is documented below.
serviceAccountCredentials AuthConfigDecryptedCredentialServiceAccountCredentials
Service account credential. Structure is documented below.
usernameAndPassword AuthConfigDecryptedCredentialUsernameAndPassword
Username and password credential. Structure is documented below.
credentialType This property is required. string
Credential type associated with auth configs.
authToken AuthConfigDecryptedCredentialAuthToken
Auth token credential. Structure is documented below.
jwt AuthConfigDecryptedCredentialJwt
JWT credential. Structure is documented below.
oauth2AuthorizationCode AuthConfigDecryptedCredentialOauth2AuthorizationCode
OAuth2 authorization code credential. Structure is documented below.
oauth2ClientCredentials AuthConfigDecryptedCredentialOauth2ClientCredentials
OAuth2 client credentials. Structure is documented below.
oidcToken AuthConfigDecryptedCredentialOidcToken
Google OIDC ID Token. Structure is documented below.
serviceAccountCredentials AuthConfigDecryptedCredentialServiceAccountCredentials
Service account credential. Structure is documented below.
usernameAndPassword AuthConfigDecryptedCredentialUsernameAndPassword
Username and password credential. Structure is documented below.
credential_type This property is required. str
Credential type associated with auth configs.
auth_token AuthConfigDecryptedCredentialAuthToken
Auth token credential. Structure is documented below.
jwt AuthConfigDecryptedCredentialJwt
JWT credential. Structure is documented below.
oauth2_authorization_code AuthConfigDecryptedCredentialOauth2AuthorizationCode
OAuth2 authorization code credential. Structure is documented below.
oauth2_client_credentials AuthConfigDecryptedCredentialOauth2ClientCredentials
OAuth2 client credentials. Structure is documented below.
oidc_token AuthConfigDecryptedCredentialOidcToken
Google OIDC ID Token. Structure is documented below.
service_account_credentials AuthConfigDecryptedCredentialServiceAccountCredentials
Service account credential. Structure is documented below.
username_and_password AuthConfigDecryptedCredentialUsernameAndPassword
Username and password credential. Structure is documented below.
credentialType This property is required. String
Credential type associated with auth configs.
authToken Property Map
Auth token credential. Structure is documented below.
jwt Property Map
JWT credential. Structure is documented below.
oauth2AuthorizationCode Property Map
OAuth2 authorization code credential. Structure is documented below.
oauth2ClientCredentials Property Map
OAuth2 client credentials. Structure is documented below.
oidcToken Property Map
Google OIDC ID Token. Structure is documented below.
serviceAccountCredentials Property Map
Service account credential. Structure is documented below.
usernameAndPassword Property Map
Username and password credential. Structure is documented below.

AuthConfigDecryptedCredentialAuthToken
, AuthConfigDecryptedCredentialAuthTokenArgs

Token string
The token for the auth type.
Type string
Authentication type, e.g. "Basic", "Bearer", etc.
Token string
The token for the auth type.
Type string
Authentication type, e.g. "Basic", "Bearer", etc.
token String
The token for the auth type.
type String
Authentication type, e.g. "Basic", "Bearer", etc.
token string
The token for the auth type.
type string
Authentication type, e.g. "Basic", "Bearer", etc.
token str
The token for the auth type.
type str
Authentication type, e.g. "Basic", "Bearer", etc.
token String
The token for the auth type.
type String
Authentication type, e.g. "Basic", "Bearer", etc.

AuthConfigDecryptedCredentialJwt
, AuthConfigDecryptedCredentialJwtArgs

Jwt string
(Output) The token calculated by the header, payload and signature.
JwtHeader string
Identifies which algorithm is used to generate the signature.
JwtPayload string
Contains a set of claims. The JWT specification defines seven Registered Claim Names which are the standard fields commonly included in tokens. Custom claims are usually also included, depending on the purpose of the token.
Secret string
User's pre-shared secret to sign the token.
Jwt string
(Output) The token calculated by the header, payload and signature.
JwtHeader string
Identifies which algorithm is used to generate the signature.
JwtPayload string
Contains a set of claims. The JWT specification defines seven Registered Claim Names which are the standard fields commonly included in tokens. Custom claims are usually also included, depending on the purpose of the token.
Secret string
User's pre-shared secret to sign the token.
jwt String
(Output) The token calculated by the header, payload and signature.
jwtHeader String
Identifies which algorithm is used to generate the signature.
jwtPayload String
Contains a set of claims. The JWT specification defines seven Registered Claim Names which are the standard fields commonly included in tokens. Custom claims are usually also included, depending on the purpose of the token.
secret String
User's pre-shared secret to sign the token.
jwt string
(Output) The token calculated by the header, payload and signature.
jwtHeader string
Identifies which algorithm is used to generate the signature.
jwtPayload string
Contains a set of claims. The JWT specification defines seven Registered Claim Names which are the standard fields commonly included in tokens. Custom claims are usually also included, depending on the purpose of the token.
secret string
User's pre-shared secret to sign the token.
jwt str
(Output) The token calculated by the header, payload and signature.
jwt_header str
Identifies which algorithm is used to generate the signature.
jwt_payload str
Contains a set of claims. The JWT specification defines seven Registered Claim Names which are the standard fields commonly included in tokens. Custom claims are usually also included, depending on the purpose of the token.
secret str
User's pre-shared secret to sign the token.
jwt String
(Output) The token calculated by the header, payload and signature.
jwtHeader String
Identifies which algorithm is used to generate the signature.
jwtPayload String
Contains a set of claims. The JWT specification defines seven Registered Claim Names which are the standard fields commonly included in tokens. Custom claims are usually also included, depending on the purpose of the token.
secret String
User's pre-shared secret to sign the token.

AuthConfigDecryptedCredentialOauth2AuthorizationCode
, AuthConfigDecryptedCredentialOauth2AuthorizationCodeArgs

AuthEndpoint string
The auth url endpoint to send the auth code request to.
ClientId string
The client's id.
ClientSecret string
The client's secret.
Scope string
A space-delimited list of requested scope permissions.
TokenEndpoint string
The token url endpoint to send the token request to.
AuthEndpoint string
The auth url endpoint to send the auth code request to.
ClientId string
The client's id.
ClientSecret string
The client's secret.
Scope string
A space-delimited list of requested scope permissions.
TokenEndpoint string
The token url endpoint to send the token request to.
authEndpoint String
The auth url endpoint to send the auth code request to.
clientId String
The client's id.
clientSecret String
The client's secret.
scope String
A space-delimited list of requested scope permissions.
tokenEndpoint String
The token url endpoint to send the token request to.
authEndpoint string
The auth url endpoint to send the auth code request to.
clientId string
The client's id.
clientSecret string
The client's secret.
scope string
A space-delimited list of requested scope permissions.
tokenEndpoint string
The token url endpoint to send the token request to.
auth_endpoint str
The auth url endpoint to send the auth code request to.
client_id str
The client's id.
client_secret str
The client's secret.
scope str
A space-delimited list of requested scope permissions.
token_endpoint str
The token url endpoint to send the token request to.
authEndpoint String
The auth url endpoint to send the auth code request to.
clientId String
The client's id.
clientSecret String
The client's secret.
scope String
A space-delimited list of requested scope permissions.
tokenEndpoint String
The token url endpoint to send the token request to.

AuthConfigDecryptedCredentialOauth2ClientCredentials
, AuthConfigDecryptedCredentialOauth2ClientCredentialsArgs

ClientId string
The client's ID.
ClientSecret string
The client's secret.
RequestType string
Represent how to pass parameters to fetch access token Possible values: ["REQUEST_TYPE_UNSPECIFIED", "REQUEST_BODY", "QUERY_PARAMETERS", "ENCODED_HEADER"]
Scope string
A space-delimited list of requested scope permissions.
TokenEndpoint string
The token endpoint is used by the client to obtain an access token by presenting its authorization grant or refresh token.
TokenParams AuthConfigDecryptedCredentialOauth2ClientCredentialsTokenParams
Token parameters for the auth request.
ClientId string
The client's ID.
ClientSecret string
The client's secret.
RequestType string
Represent how to pass parameters to fetch access token Possible values: ["REQUEST_TYPE_UNSPECIFIED", "REQUEST_BODY", "QUERY_PARAMETERS", "ENCODED_HEADER"]
Scope string
A space-delimited list of requested scope permissions.
TokenEndpoint string
The token endpoint is used by the client to obtain an access token by presenting its authorization grant or refresh token.
TokenParams AuthConfigDecryptedCredentialOauth2ClientCredentialsTokenParams
Token parameters for the auth request.
clientId String
The client's ID.
clientSecret String
The client's secret.
requestType String
Represent how to pass parameters to fetch access token Possible values: ["REQUEST_TYPE_UNSPECIFIED", "REQUEST_BODY", "QUERY_PARAMETERS", "ENCODED_HEADER"]
scope String
A space-delimited list of requested scope permissions.
tokenEndpoint String
The token endpoint is used by the client to obtain an access token by presenting its authorization grant or refresh token.
tokenParams AuthConfigDecryptedCredentialOauth2ClientCredentialsTokenParams
Token parameters for the auth request.
clientId string
The client's ID.
clientSecret string
The client's secret.
requestType string
Represent how to pass parameters to fetch access token Possible values: ["REQUEST_TYPE_UNSPECIFIED", "REQUEST_BODY", "QUERY_PARAMETERS", "ENCODED_HEADER"]
scope string
A space-delimited list of requested scope permissions.
tokenEndpoint string
The token endpoint is used by the client to obtain an access token by presenting its authorization grant or refresh token.
tokenParams AuthConfigDecryptedCredentialOauth2ClientCredentialsTokenParams
Token parameters for the auth request.
client_id str
The client's ID.
client_secret str
The client's secret.
request_type str
Represent how to pass parameters to fetch access token Possible values: ["REQUEST_TYPE_UNSPECIFIED", "REQUEST_BODY", "QUERY_PARAMETERS", "ENCODED_HEADER"]
scope str
A space-delimited list of requested scope permissions.
token_endpoint str
The token endpoint is used by the client to obtain an access token by presenting its authorization grant or refresh token.
token_params AuthConfigDecryptedCredentialOauth2ClientCredentialsTokenParams
Token parameters for the auth request.
clientId String
The client's ID.
clientSecret String
The client's secret.
requestType String
Represent how to pass parameters to fetch access token Possible values: ["REQUEST_TYPE_UNSPECIFIED", "REQUEST_BODY", "QUERY_PARAMETERS", "ENCODED_HEADER"]
scope String
A space-delimited list of requested scope permissions.
tokenEndpoint String
The token endpoint is used by the client to obtain an access token by presenting its authorization grant or refresh token.
tokenParams Property Map
Token parameters for the auth request.

AuthConfigDecryptedCredentialOauth2ClientCredentialsTokenParams
, AuthConfigDecryptedCredentialOauth2ClientCredentialsTokenParamsArgs

Entries List<AuthConfigDecryptedCredentialOauth2ClientCredentialsTokenParamsEntry>
A list of parameter map entries. Structure is documented below.
Entries []AuthConfigDecryptedCredentialOauth2ClientCredentialsTokenParamsEntry
A list of parameter map entries. Structure is documented below.
entries List<AuthConfigDecryptedCredentialOauth2ClientCredentialsTokenParamsEntry>
A list of parameter map entries. Structure is documented below.
entries AuthConfigDecryptedCredentialOauth2ClientCredentialsTokenParamsEntry[]
A list of parameter map entries. Structure is documented below.
entries Sequence[AuthConfigDecryptedCredentialOauth2ClientCredentialsTokenParamsEntry]
A list of parameter map entries. Structure is documented below.
entries List<Property Map>
A list of parameter map entries. Structure is documented below.

AuthConfigDecryptedCredentialOauth2ClientCredentialsTokenParamsEntry
, AuthConfigDecryptedCredentialOauth2ClientCredentialsTokenParamsEntryArgs

Key AuthConfigDecryptedCredentialOauth2ClientCredentialsTokenParamsEntryKey
Key of the map entry. Structure is documented below.
Value AuthConfigDecryptedCredentialOauth2ClientCredentialsTokenParamsEntryValue
Value of the map entry. Structure is documented below.
Key AuthConfigDecryptedCredentialOauth2ClientCredentialsTokenParamsEntryKey
Key of the map entry. Structure is documented below.
Value AuthConfigDecryptedCredentialOauth2ClientCredentialsTokenParamsEntryValue
Value of the map entry. Structure is documented below.
key AuthConfigDecryptedCredentialOauth2ClientCredentialsTokenParamsEntryKey
Key of the map entry. Structure is documented below.
value AuthConfigDecryptedCredentialOauth2ClientCredentialsTokenParamsEntryValue
Value of the map entry. Structure is documented below.
key AuthConfigDecryptedCredentialOauth2ClientCredentialsTokenParamsEntryKey
Key of the map entry. Structure is documented below.
value AuthConfigDecryptedCredentialOauth2ClientCredentialsTokenParamsEntryValue
Value of the map entry. Structure is documented below.
key AuthConfigDecryptedCredentialOauth2ClientCredentialsTokenParamsEntryKey
Key of the map entry. Structure is documented below.
value AuthConfigDecryptedCredentialOauth2ClientCredentialsTokenParamsEntryValue
Value of the map entry. Structure is documented below.
key Property Map
Key of the map entry. Structure is documented below.
value Property Map
Value of the map entry. Structure is documented below.

AuthConfigDecryptedCredentialOauth2ClientCredentialsTokenParamsEntryKey
, AuthConfigDecryptedCredentialOauth2ClientCredentialsTokenParamsEntryKeyArgs

literalValue Property Map
Passing a literal value Structure is documented below.

AuthConfigDecryptedCredentialOauth2ClientCredentialsTokenParamsEntryKeyLiteralValue
, AuthConfigDecryptedCredentialOauth2ClientCredentialsTokenParamsEntryKeyLiteralValueArgs

StringValue string
String.
StringValue string
String.
stringValue String
String.
stringValue string
String.
string_value str
String.
stringValue String
String.

AuthConfigDecryptedCredentialOauth2ClientCredentialsTokenParamsEntryValue
, AuthConfigDecryptedCredentialOauth2ClientCredentialsTokenParamsEntryValueArgs

literalValue Property Map
Passing a literal value Structure is documented below.

AuthConfigDecryptedCredentialOauth2ClientCredentialsTokenParamsEntryValueLiteralValue
, AuthConfigDecryptedCredentialOauth2ClientCredentialsTokenParamsEntryValueLiteralValueArgs

StringValue string
String.
StringValue string
String.
stringValue String
String.
stringValue string
String.
string_value str
String.
stringValue String
String.

AuthConfigDecryptedCredentialOidcToken
, AuthConfigDecryptedCredentialOidcTokenArgs

Audience string
Audience to be used when generating OIDC token. The audience claim identifies the recipients that the JWT is intended for.
ServiceAccountEmail string
The service account email to be used as the identity for the token.
Token string
(Output) ID token obtained for the service account.
TokenExpireTime string
(Output) The approximate time until the token retrieved is valid. A timestamp in RFC3339 UTC "Zulu" format, with nanosecond resolution and up to nine fractional digits. Examples: "2014-10-02T15:01:23Z" and "2014-10-02T15:01:23.045123456Z".
Audience string
Audience to be used when generating OIDC token. The audience claim identifies the recipients that the JWT is intended for.
ServiceAccountEmail string
The service account email to be used as the identity for the token.
Token string
(Output) ID token obtained for the service account.
TokenExpireTime string
(Output) The approximate time until the token retrieved is valid. A timestamp in RFC3339 UTC "Zulu" format, with nanosecond resolution and up to nine fractional digits. Examples: "2014-10-02T15:01:23Z" and "2014-10-02T15:01:23.045123456Z".
audience String
Audience to be used when generating OIDC token. The audience claim identifies the recipients that the JWT is intended for.
serviceAccountEmail String
The service account email to be used as the identity for the token.
token String
(Output) ID token obtained for the service account.
tokenExpireTime String
(Output) The approximate time until the token retrieved is valid. A timestamp in RFC3339 UTC "Zulu" format, with nanosecond resolution and up to nine fractional digits. Examples: "2014-10-02T15:01:23Z" and "2014-10-02T15:01:23.045123456Z".
audience string
Audience to be used when generating OIDC token. The audience claim identifies the recipients that the JWT is intended for.
serviceAccountEmail string
The service account email to be used as the identity for the token.
token string
(Output) ID token obtained for the service account.
tokenExpireTime string
(Output) The approximate time until the token retrieved is valid. A timestamp in RFC3339 UTC "Zulu" format, with nanosecond resolution and up to nine fractional digits. Examples: "2014-10-02T15:01:23Z" and "2014-10-02T15:01:23.045123456Z".
audience str
Audience to be used when generating OIDC token. The audience claim identifies the recipients that the JWT is intended for.
service_account_email str
The service account email to be used as the identity for the token.
token str
(Output) ID token obtained for the service account.
token_expire_time str
(Output) The approximate time until the token retrieved is valid. A timestamp in RFC3339 UTC "Zulu" format, with nanosecond resolution and up to nine fractional digits. Examples: "2014-10-02T15:01:23Z" and "2014-10-02T15:01:23.045123456Z".
audience String
Audience to be used when generating OIDC token. The audience claim identifies the recipients that the JWT is intended for.
serviceAccountEmail String
The service account email to be used as the identity for the token.
token String
(Output) ID token obtained for the service account.
tokenExpireTime String
(Output) The approximate time until the token retrieved is valid. A timestamp in RFC3339 UTC "Zulu" format, with nanosecond resolution and up to nine fractional digits. Examples: "2014-10-02T15:01:23Z" and "2014-10-02T15:01:23.045123456Z".

AuthConfigDecryptedCredentialServiceAccountCredentials
, AuthConfigDecryptedCredentialServiceAccountCredentialsArgs

Scope string
A space-delimited list of requested scope permissions.
ServiceAccount string
Name of the service account that has the permission to make the request.
Scope string
A space-delimited list of requested scope permissions.
ServiceAccount string
Name of the service account that has the permission to make the request.
scope String
A space-delimited list of requested scope permissions.
serviceAccount String
Name of the service account that has the permission to make the request.
scope string
A space-delimited list of requested scope permissions.
serviceAccount string
Name of the service account that has the permission to make the request.
scope str
A space-delimited list of requested scope permissions.
service_account str
Name of the service account that has the permission to make the request.
scope String
A space-delimited list of requested scope permissions.
serviceAccount String
Name of the service account that has the permission to make the request.

AuthConfigDecryptedCredentialUsernameAndPassword
, AuthConfigDecryptedCredentialUsernameAndPasswordArgs

Password string

Password to be used.

The oauth2_authorization_code block supports:

Username string
Username to be used.
Password string

Password to be used.

The oauth2_authorization_code block supports:

Username string
Username to be used.
password String

Password to be used.

The oauth2_authorization_code block supports:

username String
Username to be used.
password string

Password to be used.

The oauth2_authorization_code block supports:

username string
Username to be used.
password str

Password to be used.

The oauth2_authorization_code block supports:

username str
Username to be used.
password String

Password to be used.

The oauth2_authorization_code block supports:

username String
Username to be used.

Import

AuthConfig can be imported using any of these accepted formats:

  • {{project}}/{{name}}

  • {{project}} {{name}}

  • {{name}}

When using the pulumi import command, AuthConfig can be imported using one of the formats above. For example:

$ pulumi import gcp:applicationintegration/authConfig:AuthConfig default {{project}}/{{name}}
Copy
$ pulumi import gcp:applicationintegration/authConfig:AuthConfig default "{{project}} {{name}}"
Copy
$ pulumi import gcp:applicationintegration/authConfig:AuthConfig default {{name}}
Copy

To learn more about importing existing cloud resources, see Importing resources.

Package Details

Repository
Google Cloud (GCP) Classic pulumi/pulumi-gcp
License
Apache-2.0
Notes
This Pulumi package is based on the google-beta Terraform Provider.
Google Cloud v8.25.1 published on Wednesday, Apr 9, 2025 by Pulumi
pulumi/pulumi-gcp