azuredevops.ServiceEndpointAzureEcr
Explore with Pulumi AI
Manages a Azure Container Registry service endpoint within Azure DevOps.
Example Usage
Service Principal
import * as pulumi from "@pulumi/pulumi";
import * as azuredevops from "@pulumi/azuredevops";
const example = new azuredevops.Project("example", {
name: "Example Project",
visibility: "private",
versionControl: "Git",
workItemTemplate: "Agile",
description: "Managed by Terraform",
});
// azure container registry service connection
const exampleServiceEndpointAzureEcr = new azuredevops.ServiceEndpointAzureEcr("example", {
projectId: example.id,
serviceEndpointName: "Example AzureCR",
resourceGroup: "example-rg",
azurecrSpnTenantid: "00000000-0000-0000-0000-000000000000",
azurecrName: "ExampleAcr",
azurecrSubscriptionId: "00000000-0000-0000-0000-000000000000",
azurecrSubscriptionName: "subscription name",
});
import pulumi
import pulumi_azuredevops as azuredevops
example = azuredevops.Project("example",
name="Example Project",
visibility="private",
version_control="Git",
work_item_template="Agile",
description="Managed by Terraform")
# azure container registry service connection
example_service_endpoint_azure_ecr = azuredevops.ServiceEndpointAzureEcr("example",
project_id=example.id,
service_endpoint_name="Example AzureCR",
resource_group="example-rg",
azurecr_spn_tenantid="00000000-0000-0000-0000-000000000000",
azurecr_name="ExampleAcr",
azurecr_subscription_id="00000000-0000-0000-0000-000000000000",
azurecr_subscription_name="subscription name")
package main
import (
"github.com/pulumi/pulumi-azuredevops/sdk/v3/go/azuredevops"
"github.com/pulumi/pulumi/sdk/v3/go/pulumi"
)
func main() {
pulumi.Run(func(ctx *pulumi.Context) error {
example, err := azuredevops.NewProject(ctx, "example", &azuredevops.ProjectArgs{
Name: pulumi.String("Example Project"),
Visibility: pulumi.String("private"),
VersionControl: pulumi.String("Git"),
WorkItemTemplate: pulumi.String("Agile"),
Description: pulumi.String("Managed by Terraform"),
})
if err != nil {
return err
}
// azure container registry service connection
_, err = azuredevops.NewServiceEndpointAzureEcr(ctx, "example", &azuredevops.ServiceEndpointAzureEcrArgs{
ProjectId: example.ID(),
ServiceEndpointName: pulumi.String("Example AzureCR"),
ResourceGroup: pulumi.String("example-rg"),
AzurecrSpnTenantid: pulumi.String("00000000-0000-0000-0000-000000000000"),
AzurecrName: pulumi.String("ExampleAcr"),
AzurecrSubscriptionId: pulumi.String("00000000-0000-0000-0000-000000000000"),
AzurecrSubscriptionName: pulumi.String("subscription name"),
})
if err != nil {
return err
}
return nil
})
}
using System.Collections.Generic;
using System.Linq;
using Pulumi;
using AzureDevOps = Pulumi.AzureDevOps;
return await Deployment.RunAsync(() =>
{
var example = new AzureDevOps.Project("example", new()
{
Name = "Example Project",
Visibility = "private",
VersionControl = "Git",
WorkItemTemplate = "Agile",
Description = "Managed by Terraform",
});
// azure container registry service connection
var exampleServiceEndpointAzureEcr = new AzureDevOps.ServiceEndpointAzureEcr("example", new()
{
ProjectId = example.Id,
ServiceEndpointName = "Example AzureCR",
ResourceGroup = "example-rg",
AzurecrSpnTenantid = "00000000-0000-0000-0000-000000000000",
AzurecrName = "ExampleAcr",
AzurecrSubscriptionId = "00000000-0000-0000-0000-000000000000",
AzurecrSubscriptionName = "subscription name",
});
});
package generated_program;
import com.pulumi.Context;
import com.pulumi.Pulumi;
import com.pulumi.core.Output;
import com.pulumi.azuredevops.Project;
import com.pulumi.azuredevops.ProjectArgs;
import com.pulumi.azuredevops.ServiceEndpointAzureEcr;
import com.pulumi.azuredevops.ServiceEndpointAzureEcrArgs;
import java.util.List;
import java.util.ArrayList;
import java.util.Map;
import java.io.File;
import java.nio.file.Files;
import java.nio.file.Paths;
public class App {
public static void main(String[] args) {
Pulumi.run(App::stack);
}
public static void stack(Context ctx) {
var example = new Project("example", ProjectArgs.builder()
.name("Example Project")
.visibility("private")
.versionControl("Git")
.workItemTemplate("Agile")
.description("Managed by Terraform")
.build());
// azure container registry service connection
var exampleServiceEndpointAzureEcr = new ServiceEndpointAzureEcr("exampleServiceEndpointAzureEcr", ServiceEndpointAzureEcrArgs.builder()
.projectId(example.id())
.serviceEndpointName("Example AzureCR")
.resourceGroup("example-rg")
.azurecrSpnTenantid("00000000-0000-0000-0000-000000000000")
.azurecrName("ExampleAcr")
.azurecrSubscriptionId("00000000-0000-0000-0000-000000000000")
.azurecrSubscriptionName("subscription name")
.build());
}
}
resources:
example:
type: azuredevops:Project
properties:
name: Example Project
visibility: private
versionControl: Git
workItemTemplate: Agile
description: Managed by Terraform
# azure container registry service connection
exampleServiceEndpointAzureEcr:
type: azuredevops:ServiceEndpointAzureEcr
name: example
properties:
projectId: ${example.id}
serviceEndpointName: Example AzureCR
resourceGroup: example-rg
azurecrSpnTenantid: 00000000-0000-0000-0000-000000000000
azurecrName: ExampleAcr
azurecrSubscriptionId: 00000000-0000-0000-0000-000000000000
azurecrSubscriptionName: subscription name
WorkloadIdentityFederation
import * as pulumi from "@pulumi/pulumi";
import * as azure from "@pulumi/azure";
import * as azuredevops from "@pulumi/azuredevops";
const example = new azuredevops.Project("example", {
name: "Example Project",
visibility: "private",
versionControl: "Git",
workItemTemplate: "Agile",
description: "Managed by Terraform",
});
const identity = new azure.core.ResourceGroup("identity", {
name: "identity",
location: "UK South",
});
const exampleUserAssignedIdentity = new azure.authorization.UserAssignedIdentity("example", {
location: identity.location,
name: "example-identity",
resourceGroupName: "azurerm_resource_group.identity.name",
});
// azure container registry service connection
const exampleServiceEndpointAzureEcr = new azuredevops.ServiceEndpointAzureEcr("example", {
projectId: example.id,
resourceGroup: "Example AzureCR ResourceGroup",
serviceEndpointName: "Example AzureCR",
serviceEndpointAuthenticationScheme: "WorkloadIdentityFederation",
azurecrSpnTenantid: "00000000-0000-0000-0000-000000000000",
azurecrName: "ExampleAcr",
azurecrSubscriptionId: "00000000-0000-0000-0000-000000000000",
azurecrSubscriptionName: "subscription name",
credentials: {
serviceprincipalid: exampleUserAssignedIdentity.clientId,
},
});
const exampleFederatedIdentityCredential = new azure.armmsi.FederatedIdentityCredential("example", {
name: "example-federated-credential",
resourceGroupName: identity.name,
parentId: exampleUserAssignedIdentity.id,
audience: "api://AzureADTokenExchange",
issuer: exampleAzuredevopsServiceendpointAzurerm.workloadIdentityFederationIssuer,
subject: exampleAzuredevopsServiceendpointAzurerm.workloadIdentityFederationSubject,
});
import pulumi
import pulumi_azure as azure
import pulumi_azuredevops as azuredevops
example = azuredevops.Project("example",
name="Example Project",
visibility="private",
version_control="Git",
work_item_template="Agile",
description="Managed by Terraform")
identity = azure.core.ResourceGroup("identity",
name="identity",
location="UK South")
example_user_assigned_identity = azure.authorization.UserAssignedIdentity("example",
location=identity.location,
name="example-identity",
resource_group_name="azurerm_resource_group.identity.name")
# azure container registry service connection
example_service_endpoint_azure_ecr = azuredevops.ServiceEndpointAzureEcr("example",
project_id=example.id,
resource_group="Example AzureCR ResourceGroup",
service_endpoint_name="Example AzureCR",
service_endpoint_authentication_scheme="WorkloadIdentityFederation",
azurecr_spn_tenantid="00000000-0000-0000-0000-000000000000",
azurecr_name="ExampleAcr",
azurecr_subscription_id="00000000-0000-0000-0000-000000000000",
azurecr_subscription_name="subscription name",
credentials={
"serviceprincipalid": example_user_assigned_identity.client_id,
})
example_federated_identity_credential = azure.armmsi.FederatedIdentityCredential("example",
name="example-federated-credential",
resource_group_name=identity.name,
parent_id=example_user_assigned_identity.id,
audience="api://AzureADTokenExchange",
issuer=example_azuredevops_serviceendpoint_azurerm["workloadIdentityFederationIssuer"],
subject=example_azuredevops_serviceendpoint_azurerm["workloadIdentityFederationSubject"])
package main
import (
"github.com/pulumi/pulumi-azure/sdk/v5/go/azure/armmsi"
"github.com/pulumi/pulumi-azure/sdk/v5/go/azure/authorization"
"github.com/pulumi/pulumi-azure/sdk/v5/go/azure/core"
"github.com/pulumi/pulumi-azuredevops/sdk/v3/go/azuredevops"
"github.com/pulumi/pulumi/sdk/v3/go/pulumi"
)
func main() {
pulumi.Run(func(ctx *pulumi.Context) error {
example, err := azuredevops.NewProject(ctx, "example", &azuredevops.ProjectArgs{
Name: pulumi.String("Example Project"),
Visibility: pulumi.String("private"),
VersionControl: pulumi.String("Git"),
WorkItemTemplate: pulumi.String("Agile"),
Description: pulumi.String("Managed by Terraform"),
})
if err != nil {
return err
}
identity, err := core.NewResourceGroup(ctx, "identity", &core.ResourceGroupArgs{
Name: pulumi.String("identity"),
Location: pulumi.String("UK South"),
})
if err != nil {
return err
}
exampleUserAssignedIdentity, err := authorization.NewUserAssignedIdentity(ctx, "example", &authorization.UserAssignedIdentityArgs{
Location: identity.Location,
Name: pulumi.String("example-identity"),
ResourceGroupName: pulumi.String("azurerm_resource_group.identity.name"),
})
if err != nil {
return err
}
// azure container registry service connection
_, err = azuredevops.NewServiceEndpointAzureEcr(ctx, "example", &azuredevops.ServiceEndpointAzureEcrArgs{
ProjectId: example.ID(),
ResourceGroup: pulumi.String("Example AzureCR ResourceGroup"),
ServiceEndpointName: pulumi.String("Example AzureCR"),
ServiceEndpointAuthenticationScheme: pulumi.String("WorkloadIdentityFederation"),
AzurecrSpnTenantid: pulumi.String("00000000-0000-0000-0000-000000000000"),
AzurecrName: pulumi.String("ExampleAcr"),
AzurecrSubscriptionId: pulumi.String("00000000-0000-0000-0000-000000000000"),
AzurecrSubscriptionName: pulumi.String("subscription name"),
Credentials: &azuredevops.ServiceEndpointAzureEcrCredentialsArgs{
Serviceprincipalid: exampleUserAssignedIdentity.ClientId,
},
})
if err != nil {
return err
}
_, err = armmsi.NewFederatedIdentityCredential(ctx, "example", &armmsi.FederatedIdentityCredentialArgs{
Name: pulumi.String("example-federated-credential"),
ResourceGroupName: identity.Name,
ParentId: exampleUserAssignedIdentity.ID(),
Audience: pulumi.String("api://AzureADTokenExchange"),
Issuer: pulumi.Any(exampleAzuredevopsServiceendpointAzurerm.WorkloadIdentityFederationIssuer),
Subject: pulumi.Any(exampleAzuredevopsServiceendpointAzurerm.WorkloadIdentityFederationSubject),
})
if err != nil {
return err
}
return nil
})
}
using System.Collections.Generic;
using System.Linq;
using Pulumi;
using Azure = Pulumi.Azure;
using AzureDevOps = Pulumi.AzureDevOps;
return await Deployment.RunAsync(() =>
{
var example = new AzureDevOps.Project("example", new()
{
Name = "Example Project",
Visibility = "private",
VersionControl = "Git",
WorkItemTemplate = "Agile",
Description = "Managed by Terraform",
});
var identity = new Azure.Core.ResourceGroup("identity", new()
{
Name = "identity",
Location = "UK South",
});
var exampleUserAssignedIdentity = new Azure.Authorization.UserAssignedIdentity("example", new()
{
Location = identity.Location,
Name = "example-identity",
ResourceGroupName = "azurerm_resource_group.identity.name",
});
// azure container registry service connection
var exampleServiceEndpointAzureEcr = new AzureDevOps.ServiceEndpointAzureEcr("example", new()
{
ProjectId = example.Id,
ResourceGroup = "Example AzureCR ResourceGroup",
ServiceEndpointName = "Example AzureCR",
ServiceEndpointAuthenticationScheme = "WorkloadIdentityFederation",
AzurecrSpnTenantid = "00000000-0000-0000-0000-000000000000",
AzurecrName = "ExampleAcr",
AzurecrSubscriptionId = "00000000-0000-0000-0000-000000000000",
AzurecrSubscriptionName = "subscription name",
Credentials = new AzureDevOps.Inputs.ServiceEndpointAzureEcrCredentialsArgs
{
Serviceprincipalid = exampleUserAssignedIdentity.ClientId,
},
});
var exampleFederatedIdentityCredential = new Azure.ArmMsi.FederatedIdentityCredential("example", new()
{
Name = "example-federated-credential",
ResourceGroupName = identity.Name,
ParentId = exampleUserAssignedIdentity.Id,
Audience = "api://AzureADTokenExchange",
Issuer = exampleAzuredevopsServiceendpointAzurerm.WorkloadIdentityFederationIssuer,
Subject = exampleAzuredevopsServiceendpointAzurerm.WorkloadIdentityFederationSubject,
});
});
package generated_program;
import com.pulumi.Context;
import com.pulumi.Pulumi;
import com.pulumi.core.Output;
import com.pulumi.azuredevops.Project;
import com.pulumi.azuredevops.ProjectArgs;
import com.pulumi.azure.core.ResourceGroup;
import com.pulumi.azure.core.ResourceGroupArgs;
import com.pulumi.azure.authorization.UserAssignedIdentity;
import com.pulumi.azure.authorization.UserAssignedIdentityArgs;
import com.pulumi.azuredevops.ServiceEndpointAzureEcr;
import com.pulumi.azuredevops.ServiceEndpointAzureEcrArgs;
import com.pulumi.azuredevops.inputs.ServiceEndpointAzureEcrCredentialsArgs;
import com.pulumi.azure.armmsi.FederatedIdentityCredential;
import com.pulumi.azure.armmsi.FederatedIdentityCredentialArgs;
import java.util.List;
import java.util.ArrayList;
import java.util.Map;
import java.io.File;
import java.nio.file.Files;
import java.nio.file.Paths;
public class App {
public static void main(String[] args) {
Pulumi.run(App::stack);
}
public static void stack(Context ctx) {
var example = new Project("example", ProjectArgs.builder()
.name("Example Project")
.visibility("private")
.versionControl("Git")
.workItemTemplate("Agile")
.description("Managed by Terraform")
.build());
var identity = new ResourceGroup("identity", ResourceGroupArgs.builder()
.name("identity")
.location("UK South")
.build());
var exampleUserAssignedIdentity = new UserAssignedIdentity("exampleUserAssignedIdentity", UserAssignedIdentityArgs.builder()
.location(identity.location())
.name("example-identity")
.resourceGroupName("azurerm_resource_group.identity.name")
.build());
// azure container registry service connection
var exampleServiceEndpointAzureEcr = new ServiceEndpointAzureEcr("exampleServiceEndpointAzureEcr", ServiceEndpointAzureEcrArgs.builder()
.projectId(example.id())
.resourceGroup("Example AzureCR ResourceGroup")
.serviceEndpointName("Example AzureCR")
.serviceEndpointAuthenticationScheme("WorkloadIdentityFederation")
.azurecrSpnTenantid("00000000-0000-0000-0000-000000000000")
.azurecrName("ExampleAcr")
.azurecrSubscriptionId("00000000-0000-0000-0000-000000000000")
.azurecrSubscriptionName("subscription name")
.credentials(ServiceEndpointAzureEcrCredentialsArgs.builder()
.serviceprincipalid(exampleUserAssignedIdentity.clientId())
.build())
.build());
var exampleFederatedIdentityCredential = new FederatedIdentityCredential("exampleFederatedIdentityCredential", FederatedIdentityCredentialArgs.builder()
.name("example-federated-credential")
.resourceGroupName(identity.name())
.parentId(exampleUserAssignedIdentity.id())
.audience("api://AzureADTokenExchange")
.issuer(exampleAzuredevopsServiceendpointAzurerm.workloadIdentityFederationIssuer())
.subject(exampleAzuredevopsServiceendpointAzurerm.workloadIdentityFederationSubject())
.build());
}
}
resources:
example:
type: azuredevops:Project
properties:
name: Example Project
visibility: private
versionControl: Git
workItemTemplate: Agile
description: Managed by Terraform
identity:
type: azure:core:ResourceGroup
properties:
name: identity
location: UK South
exampleUserAssignedIdentity:
type: azure:authorization:UserAssignedIdentity
name: example
properties:
location: ${identity.location}
name: example-identity
resourceGroupName: azurerm_resource_group.identity.name
# azure container registry service connection
exampleServiceEndpointAzureEcr:
type: azuredevops:ServiceEndpointAzureEcr
name: example
properties:
projectId: ${example.id}
resourceGroup: Example AzureCR ResourceGroup
serviceEndpointName: Example AzureCR
serviceEndpointAuthenticationScheme: WorkloadIdentityFederation
azurecrSpnTenantid: 00000000-0000-0000-0000-000000000000
azurecrName: ExampleAcr
azurecrSubscriptionId: 00000000-0000-0000-0000-000000000000
azurecrSubscriptionName: subscription name
credentials:
serviceprincipalid: ${exampleUserAssignedIdentity.clientId}
exampleFederatedIdentityCredential:
type: azure:armmsi:FederatedIdentityCredential
name: example
properties:
name: example-federated-credential
resourceGroupName: ${identity.name}
parentId: ${exampleUserAssignedIdentity.id}
audience: api://AzureADTokenExchange
issuer: ${exampleAzuredevopsServiceendpointAzurerm.workloadIdentityFederationIssuer}
subject: ${exampleAzuredevopsServiceendpointAzurerm.workloadIdentityFederationSubject}
Relevant Links
Create ServiceEndpointAzureEcr Resource
Resources are created with functions called constructors. To learn more about declaring and configuring resources, see Resources.
Constructor syntax
new ServiceEndpointAzureEcr(name: string, args: ServiceEndpointAzureEcrArgs, opts?: CustomResourceOptions);
@overload
def ServiceEndpointAzureEcr(resource_name: str,
args: ServiceEndpointAzureEcrArgs,
opts: Optional[ResourceOptions] = None)
@overload
def ServiceEndpointAzureEcr(resource_name: str,
opts: Optional[ResourceOptions] = None,
azurecr_name: Optional[str] = None,
azurecr_spn_tenantid: Optional[str] = None,
azurecr_subscription_id: Optional[str] = None,
azurecr_subscription_name: Optional[str] = None,
project_id: Optional[str] = None,
service_endpoint_name: Optional[str] = None,
authorization: Optional[Mapping[str, str]] = None,
credentials: Optional[ServiceEndpointAzureEcrCredentialsArgs] = None,
description: Optional[str] = None,
resource_group: Optional[str] = None,
service_endpoint_authentication_scheme: Optional[str] = None)
func NewServiceEndpointAzureEcr(ctx *Context, name string, args ServiceEndpointAzureEcrArgs, opts ...ResourceOption) (*ServiceEndpointAzureEcr, error)
public ServiceEndpointAzureEcr(string name, ServiceEndpointAzureEcrArgs args, CustomResourceOptions? opts = null)
public ServiceEndpointAzureEcr(String name, ServiceEndpointAzureEcrArgs args)
public ServiceEndpointAzureEcr(String name, ServiceEndpointAzureEcrArgs args, CustomResourceOptions options)
type: azuredevops:ServiceEndpointAzureEcr
properties: # The arguments to resource properties.
options: # Bag of options to control resource's behavior.
Parameters
- name string
- The unique name of the resource.
- args ServiceEndpointAzureEcrArgs
- The arguments to resource properties.
- opts CustomResourceOptions
- Bag of options to control resource's behavior.
- resource_name str
- The unique name of the resource.
- args ServiceEndpointAzureEcrArgs
- The arguments to resource properties.
- opts ResourceOptions
- Bag of options to control resource's behavior.
- ctx Context
- Context object for the current deployment.
- name string
- The unique name of the resource.
- args ServiceEndpointAzureEcrArgs
- The arguments to resource properties.
- opts ResourceOption
- Bag of options to control resource's behavior.
- name string
- The unique name of the resource.
- args ServiceEndpointAzureEcrArgs
- The arguments to resource properties.
- opts CustomResourceOptions
- Bag of options to control resource's behavior.
- name String
- The unique name of the resource.
- args ServiceEndpointAzureEcrArgs
- The arguments to resource properties.
- options CustomResourceOptions
- Bag of options to control resource's behavior.
Constructor example
The following reference example uses placeholder values for all input properties.
var serviceEndpointAzureEcrResource = new AzureDevOps.ServiceEndpointAzureEcr("serviceEndpointAzureEcrResource", new()
{
AzurecrName = "string",
AzurecrSpnTenantid = "string",
AzurecrSubscriptionId = "string",
AzurecrSubscriptionName = "string",
ProjectId = "string",
ServiceEndpointName = "string",
Authorization =
{
{ "string", "string" },
},
Credentials = new AzureDevOps.Inputs.ServiceEndpointAzureEcrCredentialsArgs
{
Serviceprincipalid = "string",
},
Description = "string",
ResourceGroup = "string",
ServiceEndpointAuthenticationScheme = "string",
});
example, err := azuredevops.NewServiceEndpointAzureEcr(ctx, "serviceEndpointAzureEcrResource", &azuredevops.ServiceEndpointAzureEcrArgs{
AzurecrName: pulumi.String("string"),
AzurecrSpnTenantid: pulumi.String("string"),
AzurecrSubscriptionId: pulumi.String("string"),
AzurecrSubscriptionName: pulumi.String("string"),
ProjectId: pulumi.String("string"),
ServiceEndpointName: pulumi.String("string"),
Authorization: pulumi.StringMap{
"string": pulumi.String("string"),
},
Credentials: &azuredevops.ServiceEndpointAzureEcrCredentialsArgs{
Serviceprincipalid: pulumi.String("string"),
},
Description: pulumi.String("string"),
ResourceGroup: pulumi.String("string"),
ServiceEndpointAuthenticationScheme: pulumi.String("string"),
})
var serviceEndpointAzureEcrResource = new ServiceEndpointAzureEcr("serviceEndpointAzureEcrResource", ServiceEndpointAzureEcrArgs.builder()
.azurecrName("string")
.azurecrSpnTenantid("string")
.azurecrSubscriptionId("string")
.azurecrSubscriptionName("string")
.projectId("string")
.serviceEndpointName("string")
.authorization(Map.of("string", "string"))
.credentials(ServiceEndpointAzureEcrCredentialsArgs.builder()
.serviceprincipalid("string")
.build())
.description("string")
.resourceGroup("string")
.serviceEndpointAuthenticationScheme("string")
.build());
service_endpoint_azure_ecr_resource = azuredevops.ServiceEndpointAzureEcr("serviceEndpointAzureEcrResource",
azurecr_name="string",
azurecr_spn_tenantid="string",
azurecr_subscription_id="string",
azurecr_subscription_name="string",
project_id="string",
service_endpoint_name="string",
authorization={
"string": "string",
},
credentials={
"serviceprincipalid": "string",
},
description="string",
resource_group="string",
service_endpoint_authentication_scheme="string")
const serviceEndpointAzureEcrResource = new azuredevops.ServiceEndpointAzureEcr("serviceEndpointAzureEcrResource", {
azurecrName: "string",
azurecrSpnTenantid: "string",
azurecrSubscriptionId: "string",
azurecrSubscriptionName: "string",
projectId: "string",
serviceEndpointName: "string",
authorization: {
string: "string",
},
credentials: {
serviceprincipalid: "string",
},
description: "string",
resourceGroup: "string",
serviceEndpointAuthenticationScheme: "string",
});
type: azuredevops:ServiceEndpointAzureEcr
properties:
authorization:
string: string
azurecrName: string
azurecrSpnTenantid: string
azurecrSubscriptionId: string
azurecrSubscriptionName: string
credentials:
serviceprincipalid: string
description: string
projectId: string
resourceGroup: string
serviceEndpointAuthenticationScheme: string
serviceEndpointName: string
ServiceEndpointAzureEcr Resource Properties
To learn more about resource properties and how to use them, see Inputs and Outputs in the Architecture and Concepts docs.
Inputs
The ServiceEndpointAzureEcr resource accepts the following input properties:
- Azurecr
Name string - The Azure container registry name.
- Azurecr
Spn stringTenantid - The tenant id of the service principal.
- Azurecr
Subscription stringId - The subscription id of the Azure targets.
- Azurecr
Subscription stringName - The subscription name of the Azure targets.
- Project
Id string - The ID of the project.
- Service
Endpoint stringName - The name you will use to refer to this service connection in task inputs.
- Dictionary<string, string>
- Credentials
Pulumi.
Azure Dev Ops. Inputs. Service Endpoint Azure Ecr Credentials - A
credentials
block. - Description string
- Resource
Group string - The resource group to which the container registry belongs.
- Service
Endpoint stringAuthentication Scheme - Specifies the type of azurerm endpoint, either
WorkloadIdentityFederation
,ManagedServiceIdentity
orServicePrincipal
. Defaults toServicePrincipal
for backwards compatibility.ManagedServiceIdentity
has not yet been implemented for this resource.
- Azurecr
Name string - The Azure container registry name.
- Azurecr
Spn stringTenantid - The tenant id of the service principal.
- Azurecr
Subscription stringId - The subscription id of the Azure targets.
- Azurecr
Subscription stringName - The subscription name of the Azure targets.
- Project
Id string - The ID of the project.
- Service
Endpoint stringName - The name you will use to refer to this service connection in task inputs.
- map[string]string
- Credentials
Service
Endpoint Azure Ecr Credentials Args - A
credentials
block. - Description string
- Resource
Group string - The resource group to which the container registry belongs.
- Service
Endpoint stringAuthentication Scheme - Specifies the type of azurerm endpoint, either
WorkloadIdentityFederation
,ManagedServiceIdentity
orServicePrincipal
. Defaults toServicePrincipal
for backwards compatibility.ManagedServiceIdentity
has not yet been implemented for this resource.
- azurecr
Name String - The Azure container registry name.
- azurecr
Spn StringTenantid - The tenant id of the service principal.
- azurecr
Subscription StringId - The subscription id of the Azure targets.
- azurecr
Subscription StringName - The subscription name of the Azure targets.
- project
Id String - The ID of the project.
- service
Endpoint StringName - The name you will use to refer to this service connection in task inputs.
- Map<String,String>
- credentials
Service
Endpoint Azure Ecr Credentials - A
credentials
block. - description String
- resource
Group String - The resource group to which the container registry belongs.
- service
Endpoint StringAuthentication Scheme - Specifies the type of azurerm endpoint, either
WorkloadIdentityFederation
,ManagedServiceIdentity
orServicePrincipal
. Defaults toServicePrincipal
for backwards compatibility.ManagedServiceIdentity
has not yet been implemented for this resource.
- azurecr
Name string - The Azure container registry name.
- azurecr
Spn stringTenantid - The tenant id of the service principal.
- azurecr
Subscription stringId - The subscription id of the Azure targets.
- azurecr
Subscription stringName - The subscription name of the Azure targets.
- project
Id string - The ID of the project.
- service
Endpoint stringName - The name you will use to refer to this service connection in task inputs.
- {[key: string]: string}
- credentials
Service
Endpoint Azure Ecr Credentials - A
credentials
block. - description string
- resource
Group string - The resource group to which the container registry belongs.
- service
Endpoint stringAuthentication Scheme - Specifies the type of azurerm endpoint, either
WorkloadIdentityFederation
,ManagedServiceIdentity
orServicePrincipal
. Defaults toServicePrincipal
for backwards compatibility.ManagedServiceIdentity
has not yet been implemented for this resource.
- azurecr_
name str - The Azure container registry name.
- azurecr_
spn_ strtenantid - The tenant id of the service principal.
- azurecr_
subscription_ strid - The subscription id of the Azure targets.
- azurecr_
subscription_ strname - The subscription name of the Azure targets.
- project_
id str - The ID of the project.
- service_
endpoint_ strname - The name you will use to refer to this service connection in task inputs.
- Mapping[str, str]
- credentials
Service
Endpoint Azure Ecr Credentials Args - A
credentials
block. - description str
- resource_
group str - The resource group to which the container registry belongs.
- service_
endpoint_ strauthentication_ scheme - Specifies the type of azurerm endpoint, either
WorkloadIdentityFederation
,ManagedServiceIdentity
orServicePrincipal
. Defaults toServicePrincipal
for backwards compatibility.ManagedServiceIdentity
has not yet been implemented for this resource.
- azurecr
Name String - The Azure container registry name.
- azurecr
Spn StringTenantid - The tenant id of the service principal.
- azurecr
Subscription StringId - The subscription id of the Azure targets.
- azurecr
Subscription StringName - The subscription name of the Azure targets.
- project
Id String - The ID of the project.
- service
Endpoint StringName - The name you will use to refer to this service connection in task inputs.
- Map<String>
- credentials Property Map
- A
credentials
block. - description String
- resource
Group String - The resource group to which the container registry belongs.
- service
Endpoint StringAuthentication Scheme - Specifies the type of azurerm endpoint, either
WorkloadIdentityFederation
,ManagedServiceIdentity
orServicePrincipal
. Defaults toServicePrincipal
for backwards compatibility.ManagedServiceIdentity
has not yet been implemented for this resource.
Outputs
All input properties are implicitly available as output properties. Additionally, the ServiceEndpointAzureEcr resource produces the following output properties:
- App
Object stringId - Az
Spn stringRole Assignment Id - Az
Spn stringRole Permissions - Id string
- The provider-assigned unique ID for this managed resource.
- Service
Principal stringId - The service principal ID.
- Spn
Object stringId - Workload
Identity stringFederation Issuer - The issuer of the workload identity federation service principal.
- Workload
Identity stringFederation Subject - The subject of the workload identity federation service principal.
- App
Object stringId - Az
Spn stringRole Assignment Id - Az
Spn stringRole Permissions - Id string
- The provider-assigned unique ID for this managed resource.
- Service
Principal stringId - The service principal ID.
- Spn
Object stringId - Workload
Identity stringFederation Issuer - The issuer of the workload identity federation service principal.
- Workload
Identity stringFederation Subject - The subject of the workload identity federation service principal.
- app
Object StringId - az
Spn StringRole Assignment Id - az
Spn StringRole Permissions - id String
- The provider-assigned unique ID for this managed resource.
- service
Principal StringId - The service principal ID.
- spn
Object StringId - workload
Identity StringFederation Issuer - The issuer of the workload identity federation service principal.
- workload
Identity StringFederation Subject - The subject of the workload identity federation service principal.
- app
Object stringId - az
Spn stringRole Assignment Id - az
Spn stringRole Permissions - id string
- The provider-assigned unique ID for this managed resource.
- service
Principal stringId - The service principal ID.
- spn
Object stringId - workload
Identity stringFederation Issuer - The issuer of the workload identity federation service principal.
- workload
Identity stringFederation Subject - The subject of the workload identity federation service principal.
- app_
object_ strid - az_
spn_ strrole_ assignment_ id - az_
spn_ strrole_ permissions - id str
- The provider-assigned unique ID for this managed resource.
- service_
principal_ strid - The service principal ID.
- spn_
object_ strid - workload_
identity_ strfederation_ issuer - The issuer of the workload identity federation service principal.
- workload_
identity_ strfederation_ subject - The subject of the workload identity federation service principal.
- app
Object StringId - az
Spn StringRole Assignment Id - az
Spn StringRole Permissions - id String
- The provider-assigned unique ID for this managed resource.
- service
Principal StringId - The service principal ID.
- spn
Object StringId - workload
Identity StringFederation Issuer - The issuer of the workload identity federation service principal.
- workload
Identity StringFederation Subject - The subject of the workload identity federation service principal.
Look up Existing ServiceEndpointAzureEcr Resource
Get an existing ServiceEndpointAzureEcr resource’s state with the given name, ID, and optional extra properties used to qualify the lookup.
public static get(name: string, id: Input<ID>, state?: ServiceEndpointAzureEcrState, opts?: CustomResourceOptions): ServiceEndpointAzureEcr
@staticmethod
def get(resource_name: str,
id: str,
opts: Optional[ResourceOptions] = None,
app_object_id: Optional[str] = None,
authorization: Optional[Mapping[str, str]] = None,
az_spn_role_assignment_id: Optional[str] = None,
az_spn_role_permissions: Optional[str] = None,
azurecr_name: Optional[str] = None,
azurecr_spn_tenantid: Optional[str] = None,
azurecr_subscription_id: Optional[str] = None,
azurecr_subscription_name: Optional[str] = None,
credentials: Optional[ServiceEndpointAzureEcrCredentialsArgs] = None,
description: Optional[str] = None,
project_id: Optional[str] = None,
resource_group: Optional[str] = None,
service_endpoint_authentication_scheme: Optional[str] = None,
service_endpoint_name: Optional[str] = None,
service_principal_id: Optional[str] = None,
spn_object_id: Optional[str] = None,
workload_identity_federation_issuer: Optional[str] = None,
workload_identity_federation_subject: Optional[str] = None) -> ServiceEndpointAzureEcr
func GetServiceEndpointAzureEcr(ctx *Context, name string, id IDInput, state *ServiceEndpointAzureEcrState, opts ...ResourceOption) (*ServiceEndpointAzureEcr, error)
public static ServiceEndpointAzureEcr Get(string name, Input<string> id, ServiceEndpointAzureEcrState? state, CustomResourceOptions? opts = null)
public static ServiceEndpointAzureEcr get(String name, Output<String> id, ServiceEndpointAzureEcrState state, CustomResourceOptions options)
Resource lookup is not supported in YAML
- name
- The unique name of the resulting resource.
- id
- The unique provider ID of the resource to lookup.
- state
- Any extra arguments used during the lookup.
- opts
- A bag of options that control this resource's behavior.
- resource_name
- The unique name of the resulting resource.
- id
- The unique provider ID of the resource to lookup.
- name
- The unique name of the resulting resource.
- id
- The unique provider ID of the resource to lookup.
- state
- Any extra arguments used during the lookup.
- opts
- A bag of options that control this resource's behavior.
- name
- The unique name of the resulting resource.
- id
- The unique provider ID of the resource to lookup.
- state
- Any extra arguments used during the lookup.
- opts
- A bag of options that control this resource's behavior.
- name
- The unique name of the resulting resource.
- id
- The unique provider ID of the resource to lookup.
- state
- Any extra arguments used during the lookup.
- opts
- A bag of options that control this resource's behavior.
- App
Object stringId - Dictionary<string, string>
- Az
Spn stringRole Assignment Id - Az
Spn stringRole Permissions - Azurecr
Name string - The Azure container registry name.
- Azurecr
Spn stringTenantid - The tenant id of the service principal.
- Azurecr
Subscription stringId - The subscription id of the Azure targets.
- Azurecr
Subscription stringName - The subscription name of the Azure targets.
- Credentials
Pulumi.
Azure Dev Ops. Inputs. Service Endpoint Azure Ecr Credentials - A
credentials
block. - Description string
- Project
Id string - The ID of the project.
- Resource
Group string - The resource group to which the container registry belongs.
- Service
Endpoint stringAuthentication Scheme - Specifies the type of azurerm endpoint, either
WorkloadIdentityFederation
,ManagedServiceIdentity
orServicePrincipal
. Defaults toServicePrincipal
for backwards compatibility.ManagedServiceIdentity
has not yet been implemented for this resource. - Service
Endpoint stringName - The name you will use to refer to this service connection in task inputs.
- Service
Principal stringId - The service principal ID.
- Spn
Object stringId - Workload
Identity stringFederation Issuer - The issuer of the workload identity federation service principal.
- Workload
Identity stringFederation Subject - The subject of the workload identity federation service principal.
- App
Object stringId - map[string]string
- Az
Spn stringRole Assignment Id - Az
Spn stringRole Permissions - Azurecr
Name string - The Azure container registry name.
- Azurecr
Spn stringTenantid - The tenant id of the service principal.
- Azurecr
Subscription stringId - The subscription id of the Azure targets.
- Azurecr
Subscription stringName - The subscription name of the Azure targets.
- Credentials
Service
Endpoint Azure Ecr Credentials Args - A
credentials
block. - Description string
- Project
Id string - The ID of the project.
- Resource
Group string - The resource group to which the container registry belongs.
- Service
Endpoint stringAuthentication Scheme - Specifies the type of azurerm endpoint, either
WorkloadIdentityFederation
,ManagedServiceIdentity
orServicePrincipal
. Defaults toServicePrincipal
for backwards compatibility.ManagedServiceIdentity
has not yet been implemented for this resource. - Service
Endpoint stringName - The name you will use to refer to this service connection in task inputs.
- Service
Principal stringId - The service principal ID.
- Spn
Object stringId - Workload
Identity stringFederation Issuer - The issuer of the workload identity federation service principal.
- Workload
Identity stringFederation Subject - The subject of the workload identity federation service principal.
- app
Object StringId - Map<String,String>
- az
Spn StringRole Assignment Id - az
Spn StringRole Permissions - azurecr
Name String - The Azure container registry name.
- azurecr
Spn StringTenantid - The tenant id of the service principal.
- azurecr
Subscription StringId - The subscription id of the Azure targets.
- azurecr
Subscription StringName - The subscription name of the Azure targets.
- credentials
Service
Endpoint Azure Ecr Credentials - A
credentials
block. - description String
- project
Id String - The ID of the project.
- resource
Group String - The resource group to which the container registry belongs.
- service
Endpoint StringAuthentication Scheme - Specifies the type of azurerm endpoint, either
WorkloadIdentityFederation
,ManagedServiceIdentity
orServicePrincipal
. Defaults toServicePrincipal
for backwards compatibility.ManagedServiceIdentity
has not yet been implemented for this resource. - service
Endpoint StringName - The name you will use to refer to this service connection in task inputs.
- service
Principal StringId - The service principal ID.
- spn
Object StringId - workload
Identity StringFederation Issuer - The issuer of the workload identity federation service principal.
- workload
Identity StringFederation Subject - The subject of the workload identity federation service principal.
- app
Object stringId - {[key: string]: string}
- az
Spn stringRole Assignment Id - az
Spn stringRole Permissions - azurecr
Name string - The Azure container registry name.
- azurecr
Spn stringTenantid - The tenant id of the service principal.
- azurecr
Subscription stringId - The subscription id of the Azure targets.
- azurecr
Subscription stringName - The subscription name of the Azure targets.
- credentials
Service
Endpoint Azure Ecr Credentials - A
credentials
block. - description string
- project
Id string - The ID of the project.
- resource
Group string - The resource group to which the container registry belongs.
- service
Endpoint stringAuthentication Scheme - Specifies the type of azurerm endpoint, either
WorkloadIdentityFederation
,ManagedServiceIdentity
orServicePrincipal
. Defaults toServicePrincipal
for backwards compatibility.ManagedServiceIdentity
has not yet been implemented for this resource. - service
Endpoint stringName - The name you will use to refer to this service connection in task inputs.
- service
Principal stringId - The service principal ID.
- spn
Object stringId - workload
Identity stringFederation Issuer - The issuer of the workload identity federation service principal.
- workload
Identity stringFederation Subject - The subject of the workload identity federation service principal.
- app_
object_ strid - Mapping[str, str]
- az_
spn_ strrole_ assignment_ id - az_
spn_ strrole_ permissions - azurecr_
name str - The Azure container registry name.
- azurecr_
spn_ strtenantid - The tenant id of the service principal.
- azurecr_
subscription_ strid - The subscription id of the Azure targets.
- azurecr_
subscription_ strname - The subscription name of the Azure targets.
- credentials
Service
Endpoint Azure Ecr Credentials Args - A
credentials
block. - description str
- project_
id str - The ID of the project.
- resource_
group str - The resource group to which the container registry belongs.
- service_
endpoint_ strauthentication_ scheme - Specifies the type of azurerm endpoint, either
WorkloadIdentityFederation
,ManagedServiceIdentity
orServicePrincipal
. Defaults toServicePrincipal
for backwards compatibility.ManagedServiceIdentity
has not yet been implemented for this resource. - service_
endpoint_ strname - The name you will use to refer to this service connection in task inputs.
- service_
principal_ strid - The service principal ID.
- spn_
object_ strid - workload_
identity_ strfederation_ issuer - The issuer of the workload identity federation service principal.
- workload_
identity_ strfederation_ subject - The subject of the workload identity federation service principal.
- app
Object StringId - Map<String>
- az
Spn StringRole Assignment Id - az
Spn StringRole Permissions - azurecr
Name String - The Azure container registry name.
- azurecr
Spn StringTenantid - The tenant id of the service principal.
- azurecr
Subscription StringId - The subscription id of the Azure targets.
- azurecr
Subscription StringName - The subscription name of the Azure targets.
- credentials Property Map
- A
credentials
block. - description String
- project
Id String - The ID of the project.
- resource
Group String - The resource group to which the container registry belongs.
- service
Endpoint StringAuthentication Scheme - Specifies the type of azurerm endpoint, either
WorkloadIdentityFederation
,ManagedServiceIdentity
orServicePrincipal
. Defaults toServicePrincipal
for backwards compatibility.ManagedServiceIdentity
has not yet been implemented for this resource. - service
Endpoint StringName - The name you will use to refer to this service connection in task inputs.
- service
Principal StringId - The service principal ID.
- spn
Object StringId - workload
Identity StringFederation Issuer - The issuer of the workload identity federation service principal.
- workload
Identity StringFederation Subject - The subject of the workload identity federation service principal.
Supporting Types
ServiceEndpointAzureEcrCredentials, ServiceEndpointAzureEcrCredentialsArgs
- Serviceprincipalid string
- The service principal application Id
- Serviceprincipalid string
- The service principal application Id
- serviceprincipalid String
- The service principal application Id
- serviceprincipalid string
- The service principal application Id
- serviceprincipalid str
- The service principal application Id
- serviceprincipalid String
- The service principal application Id
Import
Azure DevOps Service Endpoint Azure Container Registry can be imported using projectID/serviceEndpointID or projectName/serviceEndpointID
$ pulumi import azuredevops:index/serviceEndpointAzureEcr:ServiceEndpointAzureEcr example 00000000-0000-0000-0000-000000000000/00000000-0000-0000-0000-000000000000
To learn more about importing existing cloud resources, see Importing resources.
Package Details
- Repository
- Azure DevOps pulumi/pulumi-azuredevops
- License
- Apache-2.0
- Notes
- This Pulumi package is based on the
azuredevops
Terraform Provider.