Google Cloud v8.21.0, Mar 5 25

Google Cloud v8.21.0 published on Wednesday, Mar 5, 2025 by Pulumi

gcp.netapp.ActiveDirectory

Explore with Pulumi AI

Google Cloud v8.21.0 published on Wednesday, Mar 5, 2025 by Pulumi

pulumi/pulumi-gcp

Example Usage

Netapp Active Directory Full

import * as pulumi from "@pulumi/pulumi";
import * as gcp from "@pulumi/gcp";

const testActiveDirectoryFull = new gcp.netapp.ActiveDirectory("test_active_directory_full", {
    name: "test-active-directory-full",
    location: "us-central1",
    domain: "ad.internal",
    dns: "172.30.64.3",
    netBiosPrefix: "smbserver",
    username: "user",
    password: "pass",
    aesEncryption: false,
    backupOperators: [
        "test1",
        "test2",
    ],
    administrators: [
        "test1",
        "test2",
    ],
    description: "ActiveDirectory is the public representation of the active directory config.",
    encryptDcConnections: false,
    kdcHostname: "hostname",
    kdcIp: "10.10.0.11",
    labels: {
        foo: "bar",
    },
    ldapSigning: false,
    nfsUsersWithLdap: false,
    organizationalUnit: "CN=Computers",
    securityOperators: [
        "test1",
        "test2",
    ],
    site: "test-site",
});

import pulumi
import pulumi_gcp as gcp

test_active_directory_full = gcp.netapp.ActiveDirectory("test_active_directory_full",
    name="test-active-directory-full",
    location="us-central1",
    domain="ad.internal",
    dns="172.30.64.3",
    net_bios_prefix="smbserver",
    username="user",
    password="pass",
    aes_encryption=False,
    backup_operators=[
        "test1",
        "test2",
    ],
    administrators=[
        "test1",
        "test2",
    ],
    description="ActiveDirectory is the public representation of the active directory config.",
    encrypt_dc_connections=False,
    kdc_hostname="hostname",
    kdc_ip="10.10.0.11",
    labels={
        "foo": "bar",
    },
    ldap_signing=False,
    nfs_users_with_ldap=False,
    organizational_unit="CN=Computers",
    security_operators=[
        "test1",
        "test2",
    ],
    site="test-site")

package main

import (
	"github.com/pulumi/pulumi-gcp/sdk/v8/go/gcp/netapp"
	"github.com/pulumi/pulumi/sdk/v3/go/pulumi"
)

func main() {
	pulumi.Run(func(ctx *pulumi.Context) error {
		_, err := netapp.NewActiveDirectory(ctx, "test_active_directory_full", &netapp.ActiveDirectoryArgs{
			Name:          pulumi.String("test-active-directory-full"),
			Location:      pulumi.String("us-central1"),
			Domain:        pulumi.String("ad.internal"),
			Dns:           pulumi.String("172.30.64.3"),
			NetBiosPrefix: pulumi.String("smbserver"),
			Username:      pulumi.String("user"),
			Password:      pulumi.String("pass"),
			AesEncryption: pulumi.Bool(false),
			BackupOperators: pulumi.StringArray{
				pulumi.String("test1"),
				pulumi.String("test2"),
			},
			Administrators: pulumi.StringArray{
				pulumi.String("test1"),
				pulumi.String("test2"),
			},
			Description:          pulumi.String("ActiveDirectory is the public representation of the active directory config."),
			EncryptDcConnections: pulumi.Bool(false),
			KdcHostname:          pulumi.String("hostname"),
			KdcIp:                pulumi.String("10.10.0.11"),
			Labels: pulumi.StringMap{
				"foo": pulumi.String("bar"),
			},
			LdapSigning:        pulumi.Bool(false),
			NfsUsersWithLdap:   pulumi.Bool(false),
			OrganizationalUnit: pulumi.String("CN=Computers"),
			SecurityOperators: pulumi.StringArray{
				pulumi.String("test1"),
				pulumi.String("test2"),
			},
			Site: pulumi.String("test-site"),
		})
		if err != nil {
			return err
		}
		return nil
	})
}

using System.Collections.Generic;
using System.Linq;
using Pulumi;
using Gcp = Pulumi.Gcp;

return await Deployment.RunAsync(() => 
{
    var testActiveDirectoryFull = new Gcp.Netapp.ActiveDirectory("test_active_directory_full", new()
    {
        Name = "test-active-directory-full",
        Location = "us-central1",
        Domain = "ad.internal",
        Dns = "172.30.64.3",
        NetBiosPrefix = "smbserver",
        Username = "user",
        Password = "pass",
        AesEncryption = false,
        BackupOperators = new[]
        {
            "test1",
            "test2",
        },
        Administrators = new[]
        {
            "test1",
            "test2",
        },
        Description = "ActiveDirectory is the public representation of the active directory config.",
        EncryptDcConnections = false,
        KdcHostname = "hostname",
        KdcIp = "10.10.0.11",
        Labels = 
        {
            { "foo", "bar" },
        },
        LdapSigning = false,
        NfsUsersWithLdap = false,
        OrganizationalUnit = "CN=Computers",
        SecurityOperators = new[]
        {
            "test1",
            "test2",
        },
        Site = "test-site",
    });

});

package generated_program;

import com.pulumi.Context;
import com.pulumi.Pulumi;
import com.pulumi.core.Output;
import com.pulumi.gcp.netapp.ActiveDirectory;
import com.pulumi.gcp.netapp.ActiveDirectoryArgs;
import java.util.List;
import java.util.ArrayList;
import java.util.Map;
import java.io.File;
import java.nio.file.Files;
import java.nio.file.Paths;

public class App {
    public static void main(String[] args) {
        Pulumi.run(App::stack);
    }

    public static void stack(Context ctx) {
        var testActiveDirectoryFull = new ActiveDirectory("testActiveDirectoryFull", ActiveDirectoryArgs.builder()
            .name("test-active-directory-full")
            .location("us-central1")
            .domain("ad.internal")
            .dns("172.30.64.3")
            .netBiosPrefix("smbserver")
            .username("user")
            .password("pass")
            .aesEncryption(false)
            .backupOperators(            
                "test1",
                "test2")
            .administrators(            
                "test1",
                "test2")
            .description("ActiveDirectory is the public representation of the active directory config.")
            .encryptDcConnections(false)
            .kdcHostname("hostname")
            .kdcIp("10.10.0.11")
            .labels(Map.of("foo", "bar"))
            .ldapSigning(false)
            .nfsUsersWithLdap(false)
            .organizationalUnit("CN=Computers")
            .securityOperators(            
                "test1",
                "test2")
            .site("test-site")
            .build());

    }
}

resources:
  testActiveDirectoryFull:
    type: gcp:netapp:ActiveDirectory
    name: test_active_directory_full
    properties:
      name: test-active-directory-full
      location: us-central1
      domain: ad.internal
      dns: 172.30.64.3
      netBiosPrefix: smbserver
      username: user
      password: pass
      aesEncryption: false
      backupOperators:
        - test1
        - test2
      administrators:
        - test1
        - test2
      description: ActiveDirectory is the public representation of the active directory config.
      encryptDcConnections: false
      kdcHostname: hostname
      kdcIp: 10.10.0.11
      labels:
        foo: bar
      ldapSigning: false
      nfsUsersWithLdap: false
      organizationalUnit: CN=Computers
      securityOperators:
        - test1
        - test2
      site: test-site

Create ActiveDirectory Resource

Resources are created with functions called constructors. To learn more about declaring and configuring resources, see Resources.

Constructor syntax

new ActiveDirectory(name: string, args: ActiveDirectoryArgs, opts?: CustomResourceOptions);

@overload
def ActiveDirectory(resource_name: str,
                    args: ActiveDirectoryArgs,
                    opts: Optional[ResourceOptions] = None)

@overload
def ActiveDirectory(resource_name: str,
                    opts: Optional[ResourceOptions] = None,
                    location: Optional[str] = None,
                    username: Optional[str] = None,
                    password: Optional[str] = None,
                    net_bios_prefix: Optional[str] = None,
                    dns: Optional[str] = None,
                    domain: Optional[str] = None,
                    ldap_signing: Optional[bool] = None,
                    description: Optional[str] = None,
                    kdc_ip: Optional[str] = None,
                    labels: Optional[Mapping[str, str]] = None,
                    administrators: Optional[Sequence[str]] = None,
                    encrypt_dc_connections: Optional[bool] = None,
                    name: Optional[str] = None,
                    kdc_hostname: Optional[str] = None,
                    nfs_users_with_ldap: Optional[bool] = None,
                    organizational_unit: Optional[str] = None,
                    backup_operators: Optional[Sequence[str]] = None,
                    project: Optional[str] = None,
                    security_operators: Optional[Sequence[str]] = None,
                    site: Optional[str] = None,
                    aes_encryption: Optional[bool] = None)

func NewActiveDirectory(ctx *Context, name string, args ActiveDirectoryArgs, opts ...ResourceOption) (*ActiveDirectory, error)

public ActiveDirectory(string name, ActiveDirectoryArgs args, CustomResourceOptions? opts = null)

public ActiveDirectory(String name, ActiveDirectoryArgs args)
public ActiveDirectory(String name, ActiveDirectoryArgs args, CustomResourceOptions options)

type: gcp:netapp:ActiveDirectory
properties: # The arguments to resource properties.
options: # Bag of options to control resource's behavior.

Parameters

name string: The unique name of the resource.
args ActiveDirectoryArgs: The arguments to resource properties.
opts CustomResourceOptions: Bag of options to control resource's behavior.

resource_name str: The unique name of the resource.
args ActiveDirectoryArgs: The arguments to resource properties.
opts ResourceOptions: Bag of options to control resource's behavior.

ctx Context: Context object for the current deployment.
name string: The unique name of the resource.
args ActiveDirectoryArgs: The arguments to resource properties.
opts ResourceOption: Bag of options to control resource's behavior.

name string: The unique name of the resource.
args ActiveDirectoryArgs: The arguments to resource properties.
opts CustomResourceOptions: Bag of options to control resource's behavior.

name String: The unique name of the resource.
args ActiveDirectoryArgs: The arguments to resource properties.
options CustomResourceOptions: Bag of options to control resource's behavior.

Constructor example

The following reference example uses placeholder values for all input properties.

var activeDirectoryResource = new Gcp.Netapp.ActiveDirectory("activeDirectoryResource", new()
{
    Location = "string",
    Username = "string",
    Password = "string",
    NetBiosPrefix = "string",
    Dns = "string",
    Domain = "string",
    LdapSigning = false,
    Description = "string",
    KdcIp = "string",
    Labels = 
    {
        { "string", "string" },
    },
    Administrators = new[]
    {
        "string",
    },
    EncryptDcConnections = false,
    Name = "string",
    KdcHostname = "string",
    NfsUsersWithLdap = false,
    OrganizationalUnit = "string",
    BackupOperators = new[]
    {
        "string",
    },
    Project = "string",
    SecurityOperators = new[]
    {
        "string",
    },
    Site = "string",
    AesEncryption = false,
});

example, err := netapp.NewActiveDirectory(ctx, "activeDirectoryResource", &netapp.ActiveDirectoryArgs{
	Location:      pulumi.String("string"),
	Username:      pulumi.String("string"),
	Password:      pulumi.String("string"),
	NetBiosPrefix: pulumi.String("string"),
	Dns:           pulumi.String("string"),
	Domain:        pulumi.String("string"),
	LdapSigning:   pulumi.Bool(false),
	Description:   pulumi.String("string"),
	KdcIp:         pulumi.String("string"),
	Labels: pulumi.StringMap{
		"string": pulumi.String("string"),
	},
	Administrators: pulumi.StringArray{
		pulumi.String("string"),
	},
	EncryptDcConnections: pulumi.Bool(false),
	Name:                 pulumi.String("string"),
	KdcHostname:          pulumi.String("string"),
	NfsUsersWithLdap:     pulumi.Bool(false),
	OrganizationalUnit:   pulumi.String("string"),
	BackupOperators: pulumi.StringArray{
		pulumi.String("string"),
	},
	Project: pulumi.String("string"),
	SecurityOperators: pulumi.StringArray{
		pulumi.String("string"),
	},
	Site:          pulumi.String("string"),
	AesEncryption: pulumi.Bool(false),
})

var activeDirectoryResource = new ActiveDirectory("activeDirectoryResource", ActiveDirectoryArgs.builder()
    .location("string")
    .username("string")
    .password("string")
    .netBiosPrefix("string")
    .dns("string")
    .domain("string")
    .ldapSigning(false)
    .description("string")
    .kdcIp("string")
    .labels(Map.of("string", "string"))
    .administrators("string")
    .encryptDcConnections(false)
    .name("string")
    .kdcHostname("string")
    .nfsUsersWithLdap(false)
    .organizationalUnit("string")
    .backupOperators("string")
    .project("string")
    .securityOperators("string")
    .site("string")
    .aesEncryption(false)
    .build());

active_directory_resource = gcp.netapp.ActiveDirectory("activeDirectoryResource",
    location="string",
    username="string",
    password="string",
    net_bios_prefix="string",
    dns="string",
    domain="string",
    ldap_signing=False,
    description="string",
    kdc_ip="string",
    labels={
        "string": "string",
    },
    administrators=["string"],
    encrypt_dc_connections=False,
    name="string",
    kdc_hostname="string",
    nfs_users_with_ldap=False,
    organizational_unit="string",
    backup_operators=["string"],
    project="string",
    security_operators=["string"],
    site="string",
    aes_encryption=False)

const activeDirectoryResource = new gcp.netapp.ActiveDirectory("activeDirectoryResource", {
    location: "string",
    username: "string",
    password: "string",
    netBiosPrefix: "string",
    dns: "string",
    domain: "string",
    ldapSigning: false,
    description: "string",
    kdcIp: "string",
    labels: {
        string: "string",
    },
    administrators: ["string"],
    encryptDcConnections: false,
    name: "string",
    kdcHostname: "string",
    nfsUsersWithLdap: false,
    organizationalUnit: "string",
    backupOperators: ["string"],
    project: "string",
    securityOperators: ["string"],
    site: "string",
    aesEncryption: false,
});

type: gcp:netapp:ActiveDirectory
properties:
    administrators:
        - string
    aesEncryption: false
    backupOperators:
        - string
    description: string
    dns: string
    domain: string
    encryptDcConnections: false
    kdcHostname: string
    kdcIp: string
    labels:
        string: string
    ldapSigning: false
    location: string
    name: string
    netBiosPrefix: string
    nfsUsersWithLdap: false
    organizationalUnit: string
    password: string
    project: string
    securityOperators:
        - string
    site: string
    username: string

ActiveDirectory Resource Properties

To learn more about resource properties and how to use them, see Inputs and Outputs in the Architecture and Concepts docs.

Inputs

In Python, inputs that are objects can be passed either as argument classes or as dictionary literals.

The ActiveDirectory resource accepts the following input properties:

Dns string

Comma separated list of DNS server IP addresses for the Active Directory domain.

Domain string

Fully qualified domain name for the Active Directory domain.

Location string

Name of the region for the policy to apply to.

NetBiosPrefix string

NetBIOS name prefix of the server to be created. A five-character random ID is generated automatically, for example, -6f9a, and appended to the prefix. The full UNC share path will have the following format: \\NetBIOS_PREFIX-ABCD.DOMAIN_NAME\SHARE_NAME

Password string

Username string

Username for the Active Directory account with permissions to create the compute account within the specified organizational unit.

Administrators List<string>

Domain user accounts to be added to the local Administrators group of the SMB service. Comma-separated list of domain users or groups. The Domain Admin group is automatically added when the service joins your domain as a hidden group.

AesEncryption bool

Enables AES-128 and AES-256 encryption for Kerberos-based communication with Active Directory.

BackupOperators List<string>

Domain user/group accounts to be added to the Backup Operators group of the SMB service. The Backup Operators group allows members to backup and restore files regardless of whether they have read or write access to the files. Comma-separated list.

Description string

An optional description of this resource.

EncryptDcConnections bool

If enabled, traffic between the SMB server to Domain Controller (DC) will be encrypted.

KdcHostname string

Hostname of the Active Directory server used as Kerberos Key Distribution Center. Only required for volumes using kerberized NFSv4.1

KdcIp string

IP address of the Active Directory server used as Kerberos Key Distribution Center.

Labels Dictionary<string, string>

Labels as key value pairs. Example: { "owner": "Bob", "department": "finance", "purpose": "testing" }.

Note: This field is non-authoritative, and will only manage the labels present in your configuration. Please refer to the field effective_labels for all of the labels present on the resource.

LdapSigning bool

Specifies whether or not the LDAP traffic needs to be signed.

Name string

The resource name of the Active Directory pool. Needs to be unique per location.

NfsUsersWithLdap bool

Local UNIX users on clients without valid user information in Active Directory are blocked from access to LDAP enabled volumes. This option can be used to temporarily switch such volumes to AUTH_SYS authentication (user ID + 1-16 groups).

OrganizationalUnit string

Name of the Organizational Unit where you intend to create the computer account for NetApp Volumes. Defaults to CN=Computers if left empty.

Project string

The ID of the project in which the resource belongs. If it is not provided, the provider project is used.

SecurityOperators List<string>

Domain accounts that require elevated privileges such as SeSecurityPrivilege to manage security logs. Comma-separated list.

Site string

Specifies an Active Directory site to manage domain controller selection. Use when Active Directory domain controllers in multiple regions are configured. Defaults to Default-First-Site-Name if left empty.

Dns string

Comma separated list of DNS server IP addresses for the Active Directory domain.

Domain string

Fully qualified domain name for the Active Directory domain.

Location string

Name of the region for the policy to apply to.

NetBiosPrefix string

Password string

Username string

Username for the Active Directory account with permissions to create the compute account within the specified organizational unit.

Administrators []string

AesEncryption bool

Enables AES-128 and AES-256 encryption for Kerberos-based communication with Active Directory.

BackupOperators []string

Description string

An optional description of this resource.

EncryptDcConnections bool

If enabled, traffic between the SMB server to Domain Controller (DC) will be encrypted.

KdcHostname string

Hostname of the Active Directory server used as Kerberos Key Distribution Center. Only required for volumes using kerberized NFSv4.1

KdcIp string

IP address of the Active Directory server used as Kerberos Key Distribution Center.

Labels map[string]string

Labels as key value pairs. Example: { "owner": "Bob", "department": "finance", "purpose": "testing" }.

Note: This field is non-authoritative, and will only manage the labels present in your configuration. Please refer to the field effective_labels for all of the labels present on the resource.

LdapSigning bool

Specifies whether or not the LDAP traffic needs to be signed.

Name string

The resource name of the Active Directory pool. Needs to be unique per location.

NfsUsersWithLdap bool

OrganizationalUnit string

Name of the Organizational Unit where you intend to create the computer account for NetApp Volumes. Defaults to CN=Computers if left empty.

Project string

The ID of the project in which the resource belongs. If it is not provided, the provider project is used.

SecurityOperators []string

Domain accounts that require elevated privileges such as SeSecurityPrivilege to manage security logs. Comma-separated list.

Site string

dns String

Comma separated list of DNS server IP addresses for the Active Directory domain.

domain String

Fully qualified domain name for the Active Directory domain.

location String

Name of the region for the policy to apply to.

netBiosPrefix String

password String

username String

Username for the Active Directory account with permissions to create the compute account within the specified organizational unit.

administrators List<String>

aesEncryption Boolean

Enables AES-128 and AES-256 encryption for Kerberos-based communication with Active Directory.

backupOperators List<String>

description String

An optional description of this resource.

encryptDcConnections Boolean

If enabled, traffic between the SMB server to Domain Controller (DC) will be encrypted.

kdcHostname String

Hostname of the Active Directory server used as Kerberos Key Distribution Center. Only required for volumes using kerberized NFSv4.1

kdcIp String

IP address of the Active Directory server used as Kerberos Key Distribution Center.

labels Map<String,String>

Labels as key value pairs. Example: { "owner": "Bob", "department": "finance", "purpose": "testing" }.

Note: This field is non-authoritative, and will only manage the labels present in your configuration. Please refer to the field effective_labels for all of the labels present on the resource.

ldapSigning Boolean

Specifies whether or not the LDAP traffic needs to be signed.

name String

The resource name of the Active Directory pool. Needs to be unique per location.

nfsUsersWithLdap Boolean

organizationalUnit String

Name of the Organizational Unit where you intend to create the computer account for NetApp Volumes. Defaults to CN=Computers if left empty.

project String

The ID of the project in which the resource belongs. If it is not provided, the provider project is used.

securityOperators List<String>

Domain accounts that require elevated privileges such as SeSecurityPrivilege to manage security logs. Comma-separated list.

site String

dns string

Comma separated list of DNS server IP addresses for the Active Directory domain.

domain string

Fully qualified domain name for the Active Directory domain.

location string

Name of the region for the policy to apply to.

netBiosPrefix string

password string

username string

Username for the Active Directory account with permissions to create the compute account within the specified organizational unit.

administrators string[]

aesEncryption boolean

Enables AES-128 and AES-256 encryption for Kerberos-based communication with Active Directory.

backupOperators string[]

description string

An optional description of this resource.

encryptDcConnections boolean

If enabled, traffic between the SMB server to Domain Controller (DC) will be encrypted.

kdcHostname string

Hostname of the Active Directory server used as Kerberos Key Distribution Center. Only required for volumes using kerberized NFSv4.1

kdcIp string

IP address of the Active Directory server used as Kerberos Key Distribution Center.

labels {[key: string]: string}

Labels as key value pairs. Example: { "owner": "Bob", "department": "finance", "purpose": "testing" }.

Note: This field is non-authoritative, and will only manage the labels present in your configuration. Please refer to the field effective_labels for all of the labels present on the resource.

ldapSigning boolean

Specifies whether or not the LDAP traffic needs to be signed.

name string

The resource name of the Active Directory pool. Needs to be unique per location.

nfsUsersWithLdap boolean

organizationalUnit string

Name of the Organizational Unit where you intend to create the computer account for NetApp Volumes. Defaults to CN=Computers if left empty.

project string

The ID of the project in which the resource belongs. If it is not provided, the provider project is used.

securityOperators string[]

Domain accounts that require elevated privileges such as SeSecurityPrivilege to manage security logs. Comma-separated list.

site string

dns str

Comma separated list of DNS server IP addresses for the Active Directory domain.

domain str

Fully qualified domain name for the Active Directory domain.

location str

Name of the region for the policy to apply to.

net_bios_prefix str

password str

username str

Username for the Active Directory account with permissions to create the compute account within the specified organizational unit.

administrators Sequence[str]

aes_encryption bool

Enables AES-128 and AES-256 encryption for Kerberos-based communication with Active Directory.

backup_operators Sequence[str]

description str

An optional description of this resource.

encrypt_dc_connections bool

If enabled, traffic between the SMB server to Domain Controller (DC) will be encrypted.

kdc_hostname str

Hostname of the Active Directory server used as Kerberos Key Distribution Center. Only required for volumes using kerberized NFSv4.1

kdc_ip str

IP address of the Active Directory server used as Kerberos Key Distribution Center.

labels Mapping[str, str]

Labels as key value pairs. Example: { "owner": "Bob", "department": "finance", "purpose": "testing" }.

Note: This field is non-authoritative, and will only manage the labels present in your configuration. Please refer to the field effective_labels for all of the labels present on the resource.

ldap_signing bool

Specifies whether or not the LDAP traffic needs to be signed.

name str

The resource name of the Active Directory pool. Needs to be unique per location.

nfs_users_with_ldap bool

organizational_unit str

Name of the Organizational Unit where you intend to create the computer account for NetApp Volumes. Defaults to CN=Computers if left empty.

project str

The ID of the project in which the resource belongs. If it is not provided, the provider project is used.

security_operators Sequence[str]

Domain accounts that require elevated privileges such as SeSecurityPrivilege to manage security logs. Comma-separated list.

site str

dns String

Comma separated list of DNS server IP addresses for the Active Directory domain.

domain String

Fully qualified domain name for the Active Directory domain.

location String

Name of the region for the policy to apply to.

netBiosPrefix String

password String

username String

Username for the Active Directory account with permissions to create the compute account within the specified organizational unit.

administrators List<String>

aesEncryption Boolean

Enables AES-128 and AES-256 encryption for Kerberos-based communication with Active Directory.

backupOperators List<String>

description String

An optional description of this resource.

encryptDcConnections Boolean

If enabled, traffic between the SMB server to Domain Controller (DC) will be encrypted.

kdcHostname String

Hostname of the Active Directory server used as Kerberos Key Distribution Center. Only required for volumes using kerberized NFSv4.1

kdcIp String

IP address of the Active Directory server used as Kerberos Key Distribution Center.

labels Map<String>

Labels as key value pairs. Example: { "owner": "Bob", "department": "finance", "purpose": "testing" }.

Note: This field is non-authoritative, and will only manage the labels present in your configuration. Please refer to the field effective_labels for all of the labels present on the resource.

ldapSigning Boolean

Specifies whether or not the LDAP traffic needs to be signed.

name String

The resource name of the Active Directory pool. Needs to be unique per location.

nfsUsersWithLdap Boolean

organizationalUnit String

Name of the Organizational Unit where you intend to create the computer account for NetApp Volumes. Defaults to CN=Computers if left empty.

project String

The ID of the project in which the resource belongs. If it is not provided, the provider project is used.

securityOperators List<String>

Domain accounts that require elevated privileges such as SeSecurityPrivilege to manage security logs. Comma-separated list.

site String

Outputs

All input properties are implicitly available as output properties. Additionally, the ActiveDirectory resource produces the following output properties:

CreateTime string: Create time of the active directory. A timestamp in RFC3339 UTC "Zulu" format. Examples: "2023-06-22T09:13:01.617Z".
EffectiveLabels Dictionary<string, string>: All of labels (key/value pairs) present on the resource in GCP, including the labels configured through Pulumi, other clients and services.
Id string: The provider-assigned unique ID for this managed resource.
PulumiLabels Dictionary<string, string>: The combination of labels configured directly on the resource and default labels configured on the provider.
State string: The state of the Active Directory policy (not the Active Directory itself).
StateDetails string: The state details of the Active Directory.

CreateTime string: Create time of the active directory. A timestamp in RFC3339 UTC "Zulu" format. Examples: "2023-06-22T09:13:01.617Z".
EffectiveLabels map[string]string: All of labels (key/value pairs) present on the resource in GCP, including the labels configured through Pulumi, other clients and services.
Id string: The provider-assigned unique ID for this managed resource.
PulumiLabels map[string]string: The combination of labels configured directly on the resource and default labels configured on the provider.
State string: The state of the Active Directory policy (not the Active Directory itself).
StateDetails string: The state details of the Active Directory.

createTime String: Create time of the active directory. A timestamp in RFC3339 UTC "Zulu" format. Examples: "2023-06-22T09:13:01.617Z".
effectiveLabels Map<String,String>: All of labels (key/value pairs) present on the resource in GCP, including the labels configured through Pulumi, other clients and services.
id String: The provider-assigned unique ID for this managed resource.
pulumiLabels Map<String,String>: The combination of labels configured directly on the resource and default labels configured on the provider.
state String: The state of the Active Directory policy (not the Active Directory itself).
stateDetails String: The state details of the Active Directory.

createTime string: Create time of the active directory. A timestamp in RFC3339 UTC "Zulu" format. Examples: "2023-06-22T09:13:01.617Z".
effectiveLabels {[key: string]: string}: All of labels (key/value pairs) present on the resource in GCP, including the labels configured through Pulumi, other clients and services.
id string: The provider-assigned unique ID for this managed resource.
pulumiLabels {[key: string]: string}: The combination of labels configured directly on the resource and default labels configured on the provider.
state string: The state of the Active Directory policy (not the Active Directory itself).
stateDetails string: The state details of the Active Directory.

create_time str: Create time of the active directory. A timestamp in RFC3339 UTC "Zulu" format. Examples: "2023-06-22T09:13:01.617Z".
effective_labels Mapping[str, str]: All of labels (key/value pairs) present on the resource in GCP, including the labels configured through Pulumi, other clients and services.
id str: The provider-assigned unique ID for this managed resource.
pulumi_labels Mapping[str, str]: The combination of labels configured directly on the resource and default labels configured on the provider.
state str: The state of the Active Directory policy (not the Active Directory itself).
state_details str: The state details of the Active Directory.

createTime String: Create time of the active directory. A timestamp in RFC3339 UTC "Zulu" format. Examples: "2023-06-22T09:13:01.617Z".
effectiveLabels Map<String>: All of labels (key/value pairs) present on the resource in GCP, including the labels configured through Pulumi, other clients and services.
id String: The provider-assigned unique ID for this managed resource.
pulumiLabels Map<String>: The combination of labels configured directly on the resource and default labels configured on the provider.
state String: The state of the Active Directory policy (not the Active Directory itself).
stateDetails String: The state details of the Active Directory.

Look up Existing ActiveDirectory Resource

Get an existing ActiveDirectory resource’s state with the given name, ID, and optional extra properties used to qualify the lookup.

public static get(name: string, id: Input<ID>, state?: ActiveDirectoryState, opts?: CustomResourceOptions): ActiveDirectory

@staticmethod
def get(resource_name: str,
        id: str,
        opts: Optional[ResourceOptions] = None,
        administrators: Optional[Sequence[str]] = None,
        aes_encryption: Optional[bool] = None,
        backup_operators: Optional[Sequence[str]] = None,
        create_time: Optional[str] = None,
        description: Optional[str] = None,
        dns: Optional[str] = None,
        domain: Optional[str] = None,
        effective_labels: Optional[Mapping[str, str]] = None,
        encrypt_dc_connections: Optional[bool] = None,
        kdc_hostname: Optional[str] = None,
        kdc_ip: Optional[str] = None,
        labels: Optional[Mapping[str, str]] = None,
        ldap_signing: Optional[bool] = None,
        location: Optional[str] = None,
        name: Optional[str] = None,
        net_bios_prefix: Optional[str] = None,
        nfs_users_with_ldap: Optional[bool] = None,
        organizational_unit: Optional[str] = None,
        password: Optional[str] = None,
        project: Optional[str] = None,
        pulumi_labels: Optional[Mapping[str, str]] = None,
        security_operators: Optional[Sequence[str]] = None,
        site: Optional[str] = None,
        state: Optional[str] = None,
        state_details: Optional[str] = None,
        username: Optional[str] = None) -> ActiveDirectory

func GetActiveDirectory(ctx *Context, name string, id IDInput, state *ActiveDirectoryState, opts ...ResourceOption) (*ActiveDirectory, error)

public static ActiveDirectory Get(string name, Input<string> id, ActiveDirectoryState? state, CustomResourceOptions? opts = null)

public static ActiveDirectory get(String name, Output<String> id, ActiveDirectoryState state, CustomResourceOptions options)

resources:  _:    type: gcp:netapp:ActiveDirectory    get:      id: ${id}

name: The unique name of the resulting resource.
id: The unique provider ID of the resource to lookup.
state: Any extra arguments used during the lookup.
opts: A bag of options that control this resource's behavior.

resource_name: The unique name of the resulting resource.
id: The unique provider ID of the resource to lookup.

name: The unique name of the resulting resource.
id: The unique provider ID of the resource to lookup.
state: Any extra arguments used during the lookup.
opts: A bag of options that control this resource's behavior.

name: The unique name of the resulting resource.
id: The unique provider ID of the resource to lookup.
state: Any extra arguments used during the lookup.
opts: A bag of options that control this resource's behavior.

name: The unique name of the resulting resource.
id: The unique provider ID of the resource to lookup.
state: Any extra arguments used during the lookup.
opts: A bag of options that control this resource's behavior.

The following state arguments are supported:

Administrators List<string>

AesEncryption bool

Enables AES-128 and AES-256 encryption for Kerberos-based communication with Active Directory.

BackupOperators List<string>

CreateTime string

Create time of the active directory. A timestamp in RFC3339 UTC "Zulu" format. Examples: "2023-06-22T09:13:01.617Z".

Description string

An optional description of this resource.

Dns string

Comma separated list of DNS server IP addresses for the Active Directory domain.

Domain string

Fully qualified domain name for the Active Directory domain.

EffectiveLabels Dictionary<string, string>

All of labels (key/value pairs) present on the resource in GCP, including the labels configured through Pulumi, other clients and services.

EncryptDcConnections bool

If enabled, traffic between the SMB server to Domain Controller (DC) will be encrypted.

KdcHostname string

Hostname of the Active Directory server used as Kerberos Key Distribution Center. Only required for volumes using kerberized NFSv4.1

KdcIp string

IP address of the Active Directory server used as Kerberos Key Distribution Center.

Labels Dictionary<string, string>

Labels as key value pairs. Example: { "owner": "Bob", "department": "finance", "purpose": "testing" }.

Note: This field is non-authoritative, and will only manage the labels present in your configuration. Please refer to the field effective_labels for all of the labels present on the resource.

LdapSigning bool

Specifies whether or not the LDAP traffic needs to be signed.

Location string

Name of the region for the policy to apply to.

Name string

The resource name of the Active Directory pool. Needs to be unique per location.

NetBiosPrefix string

NfsUsersWithLdap bool

OrganizationalUnit string

Name of the Organizational Unit where you intend to create the computer account for NetApp Volumes. Defaults to CN=Computers if left empty.

Password string

Project string

The ID of the project in which the resource belongs. If it is not provided, the provider project is used.

PulumiLabels Dictionary<string, string>

The combination of labels configured directly on the resource and default labels configured on the provider.

SecurityOperators List<string>

Domain accounts that require elevated privileges such as SeSecurityPrivilege to manage security logs. Comma-separated list.

Site string

State string

The state of the Active Directory policy (not the Active Directory itself).

StateDetails string

The state details of the Active Directory.

Username string

Username for the Active Directory account with permissions to create the compute account within the specified organizational unit.

Administrators []string

AesEncryption bool

Enables AES-128 and AES-256 encryption for Kerberos-based communication with Active Directory.

BackupOperators []string

CreateTime string

Create time of the active directory. A timestamp in RFC3339 UTC "Zulu" format. Examples: "2023-06-22T09:13:01.617Z".

Description string

An optional description of this resource.

Dns string

Comma separated list of DNS server IP addresses for the Active Directory domain.

Domain string

Fully qualified domain name for the Active Directory domain.

EffectiveLabels map[string]string

All of labels (key/value pairs) present on the resource in GCP, including the labels configured through Pulumi, other clients and services.

EncryptDcConnections bool

If enabled, traffic between the SMB server to Domain Controller (DC) will be encrypted.

KdcHostname string

Hostname of the Active Directory server used as Kerberos Key Distribution Center. Only required for volumes using kerberized NFSv4.1

KdcIp string

IP address of the Active Directory server used as Kerberos Key Distribution Center.

Labels map[string]string

Labels as key value pairs. Example: { "owner": "Bob", "department": "finance", "purpose": "testing" }.

Note: This field is non-authoritative, and will only manage the labels present in your configuration. Please refer to the field effective_labels for all of the labels present on the resource.

LdapSigning bool

Specifies whether or not the LDAP traffic needs to be signed.

Location string

Name of the region for the policy to apply to.

Name string

The resource name of the Active Directory pool. Needs to be unique per location.

NetBiosPrefix string

NfsUsersWithLdap bool

OrganizationalUnit string

Name of the Organizational Unit where you intend to create the computer account for NetApp Volumes. Defaults to CN=Computers if left empty.

Password string

Project string

The ID of the project in which the resource belongs. If it is not provided, the provider project is used.

PulumiLabels map[string]string

The combination of labels configured directly on the resource and default labels configured on the provider.

SecurityOperators []string

Domain accounts that require elevated privileges such as SeSecurityPrivilege to manage security logs. Comma-separated list.

Site string

State string

The state of the Active Directory policy (not the Active Directory itself).

StateDetails string

The state details of the Active Directory.

Username string

Username for the Active Directory account with permissions to create the compute account within the specified organizational unit.

administrators List<String>

aesEncryption Boolean

Enables AES-128 and AES-256 encryption for Kerberos-based communication with Active Directory.

backupOperators List<String>

createTime String

Create time of the active directory. A timestamp in RFC3339 UTC "Zulu" format. Examples: "2023-06-22T09:13:01.617Z".

description String

An optional description of this resource.

dns String

Comma separated list of DNS server IP addresses for the Active Directory domain.

domain String

Fully qualified domain name for the Active Directory domain.

effectiveLabels Map<String,String>

All of labels (key/value pairs) present on the resource in GCP, including the labels configured through Pulumi, other clients and services.

encryptDcConnections Boolean

If enabled, traffic between the SMB server to Domain Controller (DC) will be encrypted.

kdcHostname String

Hostname of the Active Directory server used as Kerberos Key Distribution Center. Only required for volumes using kerberized NFSv4.1

kdcIp String

IP address of the Active Directory server used as Kerberos Key Distribution Center.

labels Map<String,String>

Labels as key value pairs. Example: { "owner": "Bob", "department": "finance", "purpose": "testing" }.

Note: This field is non-authoritative, and will only manage the labels present in your configuration. Please refer to the field effective_labels for all of the labels present on the resource.

ldapSigning Boolean

Specifies whether or not the LDAP traffic needs to be signed.

location String

Name of the region for the policy to apply to.

name String

The resource name of the Active Directory pool. Needs to be unique per location.

netBiosPrefix String

nfsUsersWithLdap Boolean

organizationalUnit String

Name of the Organizational Unit where you intend to create the computer account for NetApp Volumes. Defaults to CN=Computers if left empty.

password String

project String

The ID of the project in which the resource belongs. If it is not provided, the provider project is used.

pulumiLabels Map<String,String>

The combination of labels configured directly on the resource and default labels configured on the provider.

securityOperators List<String>

Domain accounts that require elevated privileges such as SeSecurityPrivilege to manage security logs. Comma-separated list.

site String

state String

The state of the Active Directory policy (not the Active Directory itself).

stateDetails String

The state details of the Active Directory.

username String

Username for the Active Directory account with permissions to create the compute account within the specified organizational unit.

administrators string[]

aesEncryption boolean

Enables AES-128 and AES-256 encryption for Kerberos-based communication with Active Directory.

backupOperators string[]

createTime string

Create time of the active directory. A timestamp in RFC3339 UTC "Zulu" format. Examples: "2023-06-22T09:13:01.617Z".

description string

An optional description of this resource.

dns string

Comma separated list of DNS server IP addresses for the Active Directory domain.

domain string

Fully qualified domain name for the Active Directory domain.

effectiveLabels {[key: string]: string}

All of labels (key/value pairs) present on the resource in GCP, including the labels configured through Pulumi, other clients and services.

encryptDcConnections boolean

If enabled, traffic between the SMB server to Domain Controller (DC) will be encrypted.

kdcHostname string

Hostname of the Active Directory server used as Kerberos Key Distribution Center. Only required for volumes using kerberized NFSv4.1

kdcIp string

IP address of the Active Directory server used as Kerberos Key Distribution Center.

labels {[key: string]: string}

Labels as key value pairs. Example: { "owner": "Bob", "department": "finance", "purpose": "testing" }.

Note: This field is non-authoritative, and will only manage the labels present in your configuration. Please refer to the field effective_labels for all of the labels present on the resource.

ldapSigning boolean

Specifies whether or not the LDAP traffic needs to be signed.

location string

Name of the region for the policy to apply to.

name string

The resource name of the Active Directory pool. Needs to be unique per location.

netBiosPrefix string

nfsUsersWithLdap boolean

organizationalUnit string

Name of the Organizational Unit where you intend to create the computer account for NetApp Volumes. Defaults to CN=Computers if left empty.

password string

project string

The ID of the project in which the resource belongs. If it is not provided, the provider project is used.

pulumiLabels {[key: string]: string}

The combination of labels configured directly on the resource and default labels configured on the provider.

securityOperators string[]

Domain accounts that require elevated privileges such as SeSecurityPrivilege to manage security logs. Comma-separated list.

site string

state string

The state of the Active Directory policy (not the Active Directory itself).

stateDetails string

The state details of the Active Directory.

username string

Username for the Active Directory account with permissions to create the compute account within the specified organizational unit.

administrators Sequence[str]

aes_encryption bool

Enables AES-128 and AES-256 encryption for Kerberos-based communication with Active Directory.

backup_operators Sequence[str]

create_time str

Create time of the active directory. A timestamp in RFC3339 UTC "Zulu" format. Examples: "2023-06-22T09:13:01.617Z".

description str

An optional description of this resource.

dns str

Comma separated list of DNS server IP addresses for the Active Directory domain.

domain str

Fully qualified domain name for the Active Directory domain.

effective_labels Mapping[str, str]

All of labels (key/value pairs) present on the resource in GCP, including the labels configured through Pulumi, other clients and services.

encrypt_dc_connections bool

If enabled, traffic between the SMB server to Domain Controller (DC) will be encrypted.

kdc_hostname str

Hostname of the Active Directory server used as Kerberos Key Distribution Center. Only required for volumes using kerberized NFSv4.1

kdc_ip str

IP address of the Active Directory server used as Kerberos Key Distribution Center.

labels Mapping[str, str]

Labels as key value pairs. Example: { "owner": "Bob", "department": "finance", "purpose": "testing" }.

Note: This field is non-authoritative, and will only manage the labels present in your configuration. Please refer to the field effective_labels for all of the labels present on the resource.

ldap_signing bool

Specifies whether or not the LDAP traffic needs to be signed.

location str

Name of the region for the policy to apply to.

name str

The resource name of the Active Directory pool. Needs to be unique per location.

net_bios_prefix str

nfs_users_with_ldap bool

organizational_unit str

Name of the Organizational Unit where you intend to create the computer account for NetApp Volumes. Defaults to CN=Computers if left empty.

password str

project str

The ID of the project in which the resource belongs. If it is not provided, the provider project is used.

pulumi_labels Mapping[str, str]

The combination of labels configured directly on the resource and default labels configured on the provider.

security_operators Sequence[str]

Domain accounts that require elevated privileges such as SeSecurityPrivilege to manage security logs. Comma-separated list.

site str

state str

The state of the Active Directory policy (not the Active Directory itself).

state_details str

The state details of the Active Directory.

username str

Username for the Active Directory account with permissions to create the compute account within the specified organizational unit.

administrators List<String>

aesEncryption Boolean

Enables AES-128 and AES-256 encryption for Kerberos-based communication with Active Directory.

backupOperators List<String>

createTime String

Create time of the active directory. A timestamp in RFC3339 UTC "Zulu" format. Examples: "2023-06-22T09:13:01.617Z".

description String

An optional description of this resource.

dns String

Comma separated list of DNS server IP addresses for the Active Directory domain.

domain String

Fully qualified domain name for the Active Directory domain.

effectiveLabels Map<String>

All of labels (key/value pairs) present on the resource in GCP, including the labels configured through Pulumi, other clients and services.

encryptDcConnections Boolean

If enabled, traffic between the SMB server to Domain Controller (DC) will be encrypted.

kdcHostname String

Hostname of the Active Directory server used as Kerberos Key Distribution Center. Only required for volumes using kerberized NFSv4.1

kdcIp String

IP address of the Active Directory server used as Kerberos Key Distribution Center.

labels Map<String>

Labels as key value pairs. Example: { "owner": "Bob", "department": "finance", "purpose": "testing" }.

Note: This field is non-authoritative, and will only manage the labels present in your configuration. Please refer to the field effective_labels for all of the labels present on the resource.

ldapSigning Boolean

Specifies whether or not the LDAP traffic needs to be signed.

location String

Name of the region for the policy to apply to.

name String

The resource name of the Active Directory pool. Needs to be unique per location.

netBiosPrefix String

nfsUsersWithLdap Boolean

organizationalUnit String

Name of the Organizational Unit where you intend to create the computer account for NetApp Volumes. Defaults to CN=Computers if left empty.

password String

project String

The ID of the project in which the resource belongs. If it is not provided, the provider project is used.

pulumiLabels Map<String>

The combination of labels configured directly on the resource and default labels configured on the provider.

securityOperators List<String>

Domain accounts that require elevated privileges such as SeSecurityPrivilege to manage security logs. Comma-separated list.

site String

state String

The state of the Active Directory policy (not the Active Directory itself).

stateDetails String

The state details of the Active Directory.

username String

Username for the Active Directory account with permissions to create the compute account within the specified organizational unit.

Import

ActiveDirectory can be imported using any of these accepted formats:

projects/{{project}}/locations/{{location}}/activeDirectories/{{name}}
{{project}}/{{location}}/{{name}}
{{location}}/{{name}}

When using the pulumi import command, ActiveDirectory can be imported using one of the formats above. For example:

$ pulumi import gcp:netapp/activeDirectory:ActiveDirectory default projects/{{project}}/locations/{{location}}/activeDirectories/{{name}}

$ pulumi import gcp:netapp/activeDirectory:ActiveDirectory default {{project}}/{{location}}/{{name}}

$ pulumi import gcp:netapp/activeDirectory:ActiveDirectory default {{location}}/{{name}}

To learn more about importing existing cloud resources, see Importing resources.

Package Details

Repository: Google Cloud (GCP) Classic pulumi/pulumi-gcp
License: Apache-2.0
Notes: This Pulumi package is based on the google-beta Terraform Provider.

Google Cloud v8.21.0 published on Wednesday, Mar 5, 2025 by Pulumi

pulumi/pulumi-gcp

gcp.netapp.ActiveDirectory

On this page

On this page

Example Usage

Netapp Active Directory Full

Create ActiveDirectory Resource

Constructor syntax

Parameters

Constructor example

ActiveDirectory Resource Properties

Inputs

Outputs

Look up Existing ActiveDirectory Resource

Import

Package Details

On this page

On this page