Docs Home Pulumi IaC Pulumi ESC Pulumi Insights Pulumi Cloud Packages Tutorials
  1. Packages
  2. Konnect Provider
  3. API Docs
  4. GatewayPluginAcl
konnect 2.6.0 published on Tuesday, Apr 22, 2025 by kong
kong/terraform-provider-konnect

konnect.GatewayPluginAcl

Explore with Pulumi AI

konnect 2.6.0 published on Tuesday, Apr 22, 2025 by kong
kong/terraform-provider-konnect

GatewayPluginACL Resource

Example Usage

Coming soon!

Coming soon!

Coming soon!

Coming soon!

package generated_program;

import com.pulumi.Context;
import com.pulumi.Pulumi;
import com.pulumi.core.Output;
import com.pulumi.konnect.GatewayPluginAcl;
import com.pulumi.konnect.GatewayPluginAclArgs;
import com.pulumi.konnect.inputs.GatewayPluginAclConfigArgs;
import com.pulumi.konnect.inputs.GatewayPluginAclOrderingArgs;
import com.pulumi.konnect.inputs.GatewayPluginAclOrderingAfterArgs;
import com.pulumi.konnect.inputs.GatewayPluginAclOrderingBeforeArgs;
import com.pulumi.konnect.inputs.GatewayPluginAclRouteArgs;
import com.pulumi.konnect.inputs.GatewayPluginAclServiceArgs;
import java.util.List;
import java.util.ArrayList;
import java.util.Map;
import java.io.File;
import java.nio.file.Files;
import java.nio.file.Paths;

public class App {
    public static void main(String[] args) {
        Pulumi.run(App::stack);
    }

    public static void stack(Context ctx) {
        var myGatewaypluginacl = new GatewayPluginAcl("myGatewaypluginacl", GatewayPluginAclArgs.builder()
            .config(GatewayPluginAclConfigArgs.builder()
                .allow("...")
                .always_use_authenticated_groups(false)
                .deny("...")
                .hide_groups_header(false)
                .include_consumer_groups(false)
                .build())
            .controlPlaneId("9524ec7d-36d9-465d-a8c5-83a3c9390458")
            .createdAt(2)
            .enabled(false)
            .gatewayPluginAclId("...my_id...")
            .instanceName("...my_instance_name...")
            .ordering(GatewayPluginAclOrderingArgs.builder()
                .after(GatewayPluginAclOrderingAfterArgs.builder()
                    .access("...")
                    .build())
                .before(GatewayPluginAclOrderingBeforeArgs.builder()
                    .access("...")
                    .build())
                .build())
            .protocols("grpc")
            .route(GatewayPluginAclRouteArgs.builder()
                .id("...my_id...")
                .build())
            .service(GatewayPluginAclServiceArgs.builder()
                .id("...my_id...")
                .build())
            .tags("...")
            .updatedAt(4)
            .build());

    }
}
Copy
resources:
  myGatewaypluginacl:
    type: konnect:GatewayPluginAcl
    properties:
      config:
        allow:
          - '...'
        always_use_authenticated_groups: false
        deny:
          - '...'
        hide_groups_header: false
        include_consumer_groups: false
      controlPlaneId: 9524ec7d-36d9-465d-a8c5-83a3c9390458
      createdAt: 2
      enabled: false
      gatewayPluginAclId: '...my_id...'
      instanceName: '...my_instance_name...'
      ordering:
        after:
          access:
            - '...'
        before:
          access:
            - '...'
      protocols:
        - grpc
      route:
        id: '...my_id...'
      service:
        id: '...my_id...'
      tags:
        - '...'
      updatedAt: 4
Copy

Create GatewayPluginAcl Resource

Resources are created with functions called constructors. To learn more about declaring and configuring resources, see Resources.

Constructor syntax

new GatewayPluginAcl(name: string, args: GatewayPluginAclArgs, opts?: CustomResourceOptions);
@overload
def GatewayPluginAcl(resource_name: str,
                     args: GatewayPluginAclArgs,
                     opts: Optional[ResourceOptions] = None)

@overload
def GatewayPluginAcl(resource_name: str,
                     opts: Optional[ResourceOptions] = None,
                     control_plane_id: Optional[str] = None,
                     config: Optional[GatewayPluginAclConfigArgs] = None,
                     created_at: Optional[float] = None,
                     enabled: Optional[bool] = None,
                     gateway_plugin_acl_id: Optional[str] = None,
                     instance_name: Optional[str] = None,
                     ordering: Optional[GatewayPluginAclOrderingArgs] = None,
                     protocols: Optional[Sequence[str]] = None,
                     route: Optional[GatewayPluginAclRouteArgs] = None,
                     service: Optional[GatewayPluginAclServiceArgs] = None,
                     tags: Optional[Sequence[str]] = None,
                     updated_at: Optional[float] = None)
func NewGatewayPluginAcl(ctx *Context, name string, args GatewayPluginAclArgs, opts ...ResourceOption) (*GatewayPluginAcl, error)
public GatewayPluginAcl(string name, GatewayPluginAclArgs args, CustomResourceOptions? opts = null)
public GatewayPluginAcl(String name, GatewayPluginAclArgs args)
public GatewayPluginAcl(String name, GatewayPluginAclArgs args, CustomResourceOptions options)

type: konnect:GatewayPluginAcl
properties: # The arguments to resource properties.
options: # Bag of options to control resource's behavior.

Parameters

name This property is required. string
The unique name of the resource.
args This property is required. GatewayPluginAclArgs
The arguments to resource properties.
opts CustomResourceOptions
Bag of options to control resource's behavior.
resource_name This property is required. str
The unique name of the resource.
args This property is required. GatewayPluginAclArgs
The arguments to resource properties.
opts ResourceOptions
Bag of options to control resource's behavior.
ctx Context
Context object for the current deployment.
name This property is required. string
The unique name of the resource.
args This property is required. GatewayPluginAclArgs
The arguments to resource properties.
opts ResourceOption
Bag of options to control resource's behavior.
name This property is required. string
The unique name of the resource.
args This property is required. GatewayPluginAclArgs
The arguments to resource properties.
opts CustomResourceOptions
Bag of options to control resource's behavior.
name This property is required. String
The unique name of the resource.
args This property is required. GatewayPluginAclArgs
The arguments to resource properties.
options CustomResourceOptions
Bag of options to control resource's behavior.

Constructor example

The following reference example uses placeholder values for all input properties.

var gatewayPluginAclResource = new Konnect.GatewayPluginAcl("gatewayPluginAclResource", new()
{
    ControlPlaneId = "string",
    Config = new Konnect.Inputs.GatewayPluginAclConfigArgs
    {
        Allows = new[]
        {
            "string",
        },
        AlwaysUseAuthenticatedGroups = false,
        Denies = new[]
        {
            "string",
        },
        HideGroupsHeader = false,
        IncludeConsumerGroups = false,
    },
    CreatedAt = 0,
    Enabled = false,
    GatewayPluginAclId = "string",
    InstanceName = "string",
    Ordering = new Konnect.Inputs.GatewayPluginAclOrderingArgs
    {
        After = new Konnect.Inputs.GatewayPluginAclOrderingAfterArgs
        {
            Accesses = new[]
            {
                "string",
            },
        },
        Before = new Konnect.Inputs.GatewayPluginAclOrderingBeforeArgs
        {
            Accesses = new[]
            {
                "string",
            },
        },
    },
    Protocols = new[]
    {
        "string",
    },
    Route = new Konnect.Inputs.GatewayPluginAclRouteArgs
    {
        Id = "string",
    },
    Service = new Konnect.Inputs.GatewayPluginAclServiceArgs
    {
        Id = "string",
    },
    Tags = new[]
    {
        "string",
    },
    UpdatedAt = 0,
});
Copy
example, err := konnect.NewGatewayPluginAcl(ctx, "gatewayPluginAclResource", &konnect.GatewayPluginAclArgs{
	ControlPlaneId: pulumi.String("string"),
	Config: &konnect.GatewayPluginAclConfigArgs{
		Allows: pulumi.StringArray{
			pulumi.String("string"),
		},
		AlwaysUseAuthenticatedGroups: pulumi.Bool(false),
		Denies: pulumi.StringArray{
			pulumi.String("string"),
		},
		HideGroupsHeader:      pulumi.Bool(false),
		IncludeConsumerGroups: pulumi.Bool(false),
	},
	CreatedAt:          pulumi.Float64(0),
	Enabled:            pulumi.Bool(false),
	GatewayPluginAclId: pulumi.String("string"),
	InstanceName:       pulumi.String("string"),
	Ordering: &konnect.GatewayPluginAclOrderingArgs{
		After: &konnect.GatewayPluginAclOrderingAfterArgs{
			Accesses: pulumi.StringArray{
				pulumi.String("string"),
			},
		},
		Before: &konnect.GatewayPluginAclOrderingBeforeArgs{
			Accesses: pulumi.StringArray{
				pulumi.String("string"),
			},
		},
	},
	Protocols: pulumi.StringArray{
		pulumi.String("string"),
	},
	Route: &konnect.GatewayPluginAclRouteArgs{
		Id: pulumi.String("string"),
	},
	Service: &konnect.GatewayPluginAclServiceArgs{
		Id: pulumi.String("string"),
	},
	Tags: pulumi.StringArray{
		pulumi.String("string"),
	},
	UpdatedAt: pulumi.Float64(0),
})
Copy
var gatewayPluginAclResource = new GatewayPluginAcl("gatewayPluginAclResource", GatewayPluginAclArgs.builder()
    .controlPlaneId("string")
    .config(GatewayPluginAclConfigArgs.builder()
        .allows("string")
        .alwaysUseAuthenticatedGroups(false)
        .denies("string")
        .hideGroupsHeader(false)
        .includeConsumerGroups(false)
        .build())
    .createdAt(0)
    .enabled(false)
    .gatewayPluginAclId("string")
    .instanceName("string")
    .ordering(GatewayPluginAclOrderingArgs.builder()
        .after(GatewayPluginAclOrderingAfterArgs.builder()
            .accesses("string")
            .build())
        .before(GatewayPluginAclOrderingBeforeArgs.builder()
            .accesses("string")
            .build())
        .build())
    .protocols("string")
    .route(GatewayPluginAclRouteArgs.builder()
        .id("string")
        .build())
    .service(GatewayPluginAclServiceArgs.builder()
        .id("string")
        .build())
    .tags("string")
    .updatedAt(0)
    .build());
Copy
gateway_plugin_acl_resource = konnect.GatewayPluginAcl("gatewayPluginAclResource",
    control_plane_id="string",
    config={
        "allows": ["string"],
        "always_use_authenticated_groups": False,
        "denies": ["string"],
        "hide_groups_header": False,
        "include_consumer_groups": False,
    },
    created_at=0,
    enabled=False,
    gateway_plugin_acl_id="string",
    instance_name="string",
    ordering={
        "after": {
            "accesses": ["string"],
        },
        "before": {
            "accesses": ["string"],
        },
    },
    protocols=["string"],
    route={
        "id": "string",
    },
    service={
        "id": "string",
    },
    tags=["string"],
    updated_at=0)
Copy
const gatewayPluginAclResource = new konnect.GatewayPluginAcl("gatewayPluginAclResource", {
    controlPlaneId: "string",
    config: {
        allows: ["string"],
        alwaysUseAuthenticatedGroups: false,
        denies: ["string"],
        hideGroupsHeader: false,
        includeConsumerGroups: false,
    },
    createdAt: 0,
    enabled: false,
    gatewayPluginAclId: "string",
    instanceName: "string",
    ordering: {
        after: {
            accesses: ["string"],
        },
        before: {
            accesses: ["string"],
        },
    },
    protocols: ["string"],
    route: {
        id: "string",
    },
    service: {
        id: "string",
    },
    tags: ["string"],
    updatedAt: 0,
});
Copy
type: konnect:GatewayPluginAcl
properties:
    config:
        allows:
            - string
        alwaysUseAuthenticatedGroups: false
        denies:
            - string
        hideGroupsHeader: false
        includeConsumerGroups: false
    controlPlaneId: string
    createdAt: 0
    enabled: false
    gatewayPluginAclId: string
    instanceName: string
    ordering:
        after:
            accesses:
                - string
        before:
            accesses:
                - string
    protocols:
        - string
    route:
        id: string
    service:
        id: string
    tags:
        - string
    updatedAt: 0
Copy

GatewayPluginAcl Resource Properties

To learn more about resource properties and how to use them, see Inputs and Outputs in the Architecture and Concepts docs.

Inputs

In Python, inputs that are objects can be passed either as argument classes or as dictionary literals.

The GatewayPluginAcl resource accepts the following input properties:

ControlPlaneId This property is required. string
The UUID of your control plane. This variable is available in the Konnect manager. Requires replacement if changed.
Config GatewayPluginAclConfig
CreatedAt double
Unix epoch when the resource was created.
Enabled bool
Whether the plugin is applied.
GatewayPluginAclId string
The ID of this resource.
InstanceName string
Ordering GatewayPluginAclOrdering
Protocols List<string>
A set of strings representing HTTP protocols.
Route GatewayPluginAclRoute
If set, the plugin will only activate when receiving requests via the specified route. Leave unset for the plugin to activate regardless of the route being used.
Service GatewayPluginAclService
If set, the plugin will only activate when receiving requests via one of the routes belonging to the specified Service. Leave unset for the plugin to activate regardless of the Service being matched.
Tags List<string>
An optional set of strings associated with the Plugin for grouping and filtering.
UpdatedAt double
Unix epoch when the resource was last updated.
ControlPlaneId This property is required. string
The UUID of your control plane. This variable is available in the Konnect manager. Requires replacement if changed.
Config GatewayPluginAclConfigArgs
CreatedAt float64
Unix epoch when the resource was created.
Enabled bool
Whether the plugin is applied.
GatewayPluginAclId string
The ID of this resource.
InstanceName string
Ordering GatewayPluginAclOrderingArgs
Protocols []string
A set of strings representing HTTP protocols.
Route GatewayPluginAclRouteArgs
If set, the plugin will only activate when receiving requests via the specified route. Leave unset for the plugin to activate regardless of the route being used.
Service GatewayPluginAclServiceArgs
If set, the plugin will only activate when receiving requests via one of the routes belonging to the specified Service. Leave unset for the plugin to activate regardless of the Service being matched.
Tags []string
An optional set of strings associated with the Plugin for grouping and filtering.
UpdatedAt float64
Unix epoch when the resource was last updated.
controlPlaneId This property is required. String
The UUID of your control plane. This variable is available in the Konnect manager. Requires replacement if changed.
config GatewayPluginAclConfig
createdAt Double
Unix epoch when the resource was created.
enabled Boolean
Whether the plugin is applied.
gatewayPluginAclId String
The ID of this resource.
instanceName String
ordering GatewayPluginAclOrdering
protocols List<String>
A set of strings representing HTTP protocols.
route GatewayPluginAclRoute
If set, the plugin will only activate when receiving requests via the specified route. Leave unset for the plugin to activate regardless of the route being used.
service GatewayPluginAclService
If set, the plugin will only activate when receiving requests via one of the routes belonging to the specified Service. Leave unset for the plugin to activate regardless of the Service being matched.
tags List<String>
An optional set of strings associated with the Plugin for grouping and filtering.
updatedAt Double
Unix epoch when the resource was last updated.
controlPlaneId This property is required. string
The UUID of your control plane. This variable is available in the Konnect manager. Requires replacement if changed.
config GatewayPluginAclConfig
createdAt number
Unix epoch when the resource was created.
enabled boolean
Whether the plugin is applied.
gatewayPluginAclId string
The ID of this resource.
instanceName string
ordering GatewayPluginAclOrdering
protocols string[]
A set of strings representing HTTP protocols.
route GatewayPluginAclRoute
If set, the plugin will only activate when receiving requests via the specified route. Leave unset for the plugin to activate regardless of the route being used.
service GatewayPluginAclService
If set, the plugin will only activate when receiving requests via one of the routes belonging to the specified Service. Leave unset for the plugin to activate regardless of the Service being matched.
tags string[]
An optional set of strings associated with the Plugin for grouping and filtering.
updatedAt number
Unix epoch when the resource was last updated.
control_plane_id This property is required. str
The UUID of your control plane. This variable is available in the Konnect manager. Requires replacement if changed.
config GatewayPluginAclConfigArgs
created_at float
Unix epoch when the resource was created.
enabled bool
Whether the plugin is applied.
gateway_plugin_acl_id str
The ID of this resource.
instance_name str
ordering GatewayPluginAclOrderingArgs
protocols Sequence[str]
A set of strings representing HTTP protocols.
route GatewayPluginAclRouteArgs
If set, the plugin will only activate when receiving requests via the specified route. Leave unset for the plugin to activate regardless of the route being used.
service GatewayPluginAclServiceArgs
If set, the plugin will only activate when receiving requests via one of the routes belonging to the specified Service. Leave unset for the plugin to activate regardless of the Service being matched.
tags Sequence[str]
An optional set of strings associated with the Plugin for grouping and filtering.
updated_at float
Unix epoch when the resource was last updated.
controlPlaneId This property is required. String
The UUID of your control plane. This variable is available in the Konnect manager. Requires replacement if changed.
config Property Map
createdAt Number
Unix epoch when the resource was created.
enabled Boolean
Whether the plugin is applied.
gatewayPluginAclId String
The ID of this resource.
instanceName String
ordering Property Map
protocols List<String>
A set of strings representing HTTP protocols.
route Property Map
If set, the plugin will only activate when receiving requests via the specified route. Leave unset for the plugin to activate regardless of the route being used.
service Property Map
If set, the plugin will only activate when receiving requests via one of the routes belonging to the specified Service. Leave unset for the plugin to activate regardless of the Service being matched.
tags List<String>
An optional set of strings associated with the Plugin for grouping and filtering.
updatedAt Number
Unix epoch when the resource was last updated.

Outputs

All input properties are implicitly available as output properties. Additionally, the GatewayPluginAcl resource produces the following output properties:

Id string
The provider-assigned unique ID for this managed resource.
Id string
The provider-assigned unique ID for this managed resource.
id String
The provider-assigned unique ID for this managed resource.
id string
The provider-assigned unique ID for this managed resource.
id str
The provider-assigned unique ID for this managed resource.
id String
The provider-assigned unique ID for this managed resource.

Look up Existing GatewayPluginAcl Resource

Get an existing GatewayPluginAcl resource’s state with the given name, ID, and optional extra properties used to qualify the lookup.

public static get(name: string, id: Input<ID>, state?: GatewayPluginAclState, opts?: CustomResourceOptions): GatewayPluginAcl
@staticmethod
def get(resource_name: str,
        id: str,
        opts: Optional[ResourceOptions] = None,
        config: Optional[GatewayPluginAclConfigArgs] = None,
        control_plane_id: Optional[str] = None,
        created_at: Optional[float] = None,
        enabled: Optional[bool] = None,
        gateway_plugin_acl_id: Optional[str] = None,
        instance_name: Optional[str] = None,
        ordering: Optional[GatewayPluginAclOrderingArgs] = None,
        protocols: Optional[Sequence[str]] = None,
        route: Optional[GatewayPluginAclRouteArgs] = None,
        service: Optional[GatewayPluginAclServiceArgs] = None,
        tags: Optional[Sequence[str]] = None,
        updated_at: Optional[float] = None) -> GatewayPluginAcl
func GetGatewayPluginAcl(ctx *Context, name string, id IDInput, state *GatewayPluginAclState, opts ...ResourceOption) (*GatewayPluginAcl, error)
public static GatewayPluginAcl Get(string name, Input<string> id, GatewayPluginAclState? state, CustomResourceOptions? opts = null)
public static GatewayPluginAcl get(String name, Output<String> id, GatewayPluginAclState state, CustomResourceOptions options)
resources:  _:    type: konnect:GatewayPluginAcl    get:      id: ${id}
name This property is required.
The unique name of the resulting resource.
id This property is required.
The unique provider ID of the resource to lookup.
state
Any extra arguments used during the lookup.
opts
A bag of options that control this resource's behavior.
resource_name This property is required.
The unique name of the resulting resource.
id This property is required.
The unique provider ID of the resource to lookup.
name This property is required.
The unique name of the resulting resource.
id This property is required.
The unique provider ID of the resource to lookup.
state
Any extra arguments used during the lookup.
opts
A bag of options that control this resource's behavior.
name This property is required.
The unique name of the resulting resource.
id This property is required.
The unique provider ID of the resource to lookup.
state
Any extra arguments used during the lookup.
opts
A bag of options that control this resource's behavior.
name This property is required.
The unique name of the resulting resource.
id This property is required.
The unique provider ID of the resource to lookup.
state
Any extra arguments used during the lookup.
opts
A bag of options that control this resource's behavior.
The following state arguments are supported:
Config GatewayPluginAclConfig
ControlPlaneId string
The UUID of your control plane. This variable is available in the Konnect manager. Requires replacement if changed.
CreatedAt double
Unix epoch when the resource was created.
Enabled bool
Whether the plugin is applied.
GatewayPluginAclId string
The ID of this resource.
InstanceName string
Ordering GatewayPluginAclOrdering
Protocols List<string>
A set of strings representing HTTP protocols.
Route GatewayPluginAclRoute
If set, the plugin will only activate when receiving requests via the specified route. Leave unset for the plugin to activate regardless of the route being used.
Service GatewayPluginAclService
If set, the plugin will only activate when receiving requests via one of the routes belonging to the specified Service. Leave unset for the plugin to activate regardless of the Service being matched.
Tags List<string>
An optional set of strings associated with the Plugin for grouping and filtering.
UpdatedAt double
Unix epoch when the resource was last updated.
Config GatewayPluginAclConfigArgs
ControlPlaneId string
The UUID of your control plane. This variable is available in the Konnect manager. Requires replacement if changed.
CreatedAt float64
Unix epoch when the resource was created.
Enabled bool
Whether the plugin is applied.
GatewayPluginAclId string
The ID of this resource.
InstanceName string
Ordering GatewayPluginAclOrderingArgs
Protocols []string
A set of strings representing HTTP protocols.
Route GatewayPluginAclRouteArgs
If set, the plugin will only activate when receiving requests via the specified route. Leave unset for the plugin to activate regardless of the route being used.
Service GatewayPluginAclServiceArgs
If set, the plugin will only activate when receiving requests via one of the routes belonging to the specified Service. Leave unset for the plugin to activate regardless of the Service being matched.
Tags []string
An optional set of strings associated with the Plugin for grouping and filtering.
UpdatedAt float64
Unix epoch when the resource was last updated.
config GatewayPluginAclConfig
controlPlaneId String
The UUID of your control plane. This variable is available in the Konnect manager. Requires replacement if changed.
createdAt Double
Unix epoch when the resource was created.
enabled Boolean
Whether the plugin is applied.
gatewayPluginAclId String
The ID of this resource.
instanceName String
ordering GatewayPluginAclOrdering
protocols List<String>
A set of strings representing HTTP protocols.
route GatewayPluginAclRoute
If set, the plugin will only activate when receiving requests via the specified route. Leave unset for the plugin to activate regardless of the route being used.
service GatewayPluginAclService
If set, the plugin will only activate when receiving requests via one of the routes belonging to the specified Service. Leave unset for the plugin to activate regardless of the Service being matched.
tags List<String>
An optional set of strings associated with the Plugin for grouping and filtering.
updatedAt Double
Unix epoch when the resource was last updated.
config GatewayPluginAclConfig
controlPlaneId string
The UUID of your control plane. This variable is available in the Konnect manager. Requires replacement if changed.
createdAt number
Unix epoch when the resource was created.
enabled boolean
Whether the plugin is applied.
gatewayPluginAclId string
The ID of this resource.
instanceName string
ordering GatewayPluginAclOrdering
protocols string[]
A set of strings representing HTTP protocols.
route GatewayPluginAclRoute
If set, the plugin will only activate when receiving requests via the specified route. Leave unset for the plugin to activate regardless of the route being used.
service GatewayPluginAclService
If set, the plugin will only activate when receiving requests via one of the routes belonging to the specified Service. Leave unset for the plugin to activate regardless of the Service being matched.
tags string[]
An optional set of strings associated with the Plugin for grouping and filtering.
updatedAt number
Unix epoch when the resource was last updated.
config GatewayPluginAclConfigArgs
control_plane_id str
The UUID of your control plane. This variable is available in the Konnect manager. Requires replacement if changed.
created_at float
Unix epoch when the resource was created.
enabled bool
Whether the plugin is applied.
gateway_plugin_acl_id str
The ID of this resource.
instance_name str
ordering GatewayPluginAclOrderingArgs
protocols Sequence[str]
A set of strings representing HTTP protocols.
route GatewayPluginAclRouteArgs
If set, the plugin will only activate when receiving requests via the specified route. Leave unset for the plugin to activate regardless of the route being used.
service GatewayPluginAclServiceArgs
If set, the plugin will only activate when receiving requests via one of the routes belonging to the specified Service. Leave unset for the plugin to activate regardless of the Service being matched.
tags Sequence[str]
An optional set of strings associated with the Plugin for grouping and filtering.
updated_at float
Unix epoch when the resource was last updated.
config Property Map
controlPlaneId String
The UUID of your control plane. This variable is available in the Konnect manager. Requires replacement if changed.
createdAt Number
Unix epoch when the resource was created.
enabled Boolean
Whether the plugin is applied.
gatewayPluginAclId String
The ID of this resource.
instanceName String
ordering Property Map
protocols List<String>
A set of strings representing HTTP protocols.
route Property Map
If set, the plugin will only activate when receiving requests via the specified route. Leave unset for the plugin to activate regardless of the route being used.
service Property Map
If set, the plugin will only activate when receiving requests via one of the routes belonging to the specified Service. Leave unset for the plugin to activate regardless of the Service being matched.
tags List<String>
An optional set of strings associated with the Plugin for grouping and filtering.
updatedAt Number
Unix epoch when the resource was last updated.

Supporting Types

GatewayPluginAclConfig
, GatewayPluginAclConfigArgs

Allows List<string>
Arbitrary group names that are allowed to consume the service or route. One of config.allow or config.deny must be specified.
AlwaysUseAuthenticatedGroups bool
If enabled (true), the authenticated groups will always be used even when an authenticated consumer already exists. If the authenticated groups don't exist, it will fallback to use the groups associated with the consumer. By default the authenticated groups will only be used when there is no consumer or the consumer is anonymous.
Denies List<string>
Arbitrary group names that are not allowed to consume the service or route. One of config.allow or config.deny must be specified.
HideGroupsHeader bool
If enabled (true), prevents the X-Consumer-Groups header from being sent in the request to the upstream service.
IncludeConsumerGroups bool
If enabled (true), allows the consumer-groups to be used in the allow|deny fields
Allows []string
Arbitrary group names that are allowed to consume the service or route. One of config.allow or config.deny must be specified.
AlwaysUseAuthenticatedGroups bool
If enabled (true), the authenticated groups will always be used even when an authenticated consumer already exists. If the authenticated groups don't exist, it will fallback to use the groups associated with the consumer. By default the authenticated groups will only be used when there is no consumer or the consumer is anonymous.
Denies []string
Arbitrary group names that are not allowed to consume the service or route. One of config.allow or config.deny must be specified.
HideGroupsHeader bool
If enabled (true), prevents the X-Consumer-Groups header from being sent in the request to the upstream service.
IncludeConsumerGroups bool
If enabled (true), allows the consumer-groups to be used in the allow|deny fields
allows List<String>
Arbitrary group names that are allowed to consume the service or route. One of config.allow or config.deny must be specified.
alwaysUseAuthenticatedGroups Boolean
If enabled (true), the authenticated groups will always be used even when an authenticated consumer already exists. If the authenticated groups don't exist, it will fallback to use the groups associated with the consumer. By default the authenticated groups will only be used when there is no consumer or the consumer is anonymous.
denies List<String>
Arbitrary group names that are not allowed to consume the service or route. One of config.allow or config.deny must be specified.
hideGroupsHeader Boolean
If enabled (true), prevents the X-Consumer-Groups header from being sent in the request to the upstream service.
includeConsumerGroups Boolean
If enabled (true), allows the consumer-groups to be used in the allow|deny fields
allows string[]
Arbitrary group names that are allowed to consume the service or route. One of config.allow or config.deny must be specified.
alwaysUseAuthenticatedGroups boolean
If enabled (true), the authenticated groups will always be used even when an authenticated consumer already exists. If the authenticated groups don't exist, it will fallback to use the groups associated with the consumer. By default the authenticated groups will only be used when there is no consumer or the consumer is anonymous.
denies string[]
Arbitrary group names that are not allowed to consume the service or route. One of config.allow or config.deny must be specified.
hideGroupsHeader boolean
If enabled (true), prevents the X-Consumer-Groups header from being sent in the request to the upstream service.
includeConsumerGroups boolean
If enabled (true), allows the consumer-groups to be used in the allow|deny fields
allows Sequence[str]
Arbitrary group names that are allowed to consume the service or route. One of config.allow or config.deny must be specified.
always_use_authenticated_groups bool
If enabled (true), the authenticated groups will always be used even when an authenticated consumer already exists. If the authenticated groups don't exist, it will fallback to use the groups associated with the consumer. By default the authenticated groups will only be used when there is no consumer or the consumer is anonymous.
denies Sequence[str]
Arbitrary group names that are not allowed to consume the service or route. One of config.allow or config.deny must be specified.
hide_groups_header bool
If enabled (true), prevents the X-Consumer-Groups header from being sent in the request to the upstream service.
include_consumer_groups bool
If enabled (true), allows the consumer-groups to be used in the allow|deny fields
allows List<String>
Arbitrary group names that are allowed to consume the service or route. One of config.allow or config.deny must be specified.
alwaysUseAuthenticatedGroups Boolean
If enabled (true), the authenticated groups will always be used even when an authenticated consumer already exists. If the authenticated groups don't exist, it will fallback to use the groups associated with the consumer. By default the authenticated groups will only be used when there is no consumer or the consumer is anonymous.
denies List<String>
Arbitrary group names that are not allowed to consume the service or route. One of config.allow or config.deny must be specified.
hideGroupsHeader Boolean
If enabled (true), prevents the X-Consumer-Groups header from being sent in the request to the upstream service.
includeConsumerGroups Boolean
If enabled (true), allows the consumer-groups to be used in the allow|deny fields

GatewayPluginAclOrdering
, GatewayPluginAclOrderingArgs

GatewayPluginAclOrderingAfter
, GatewayPluginAclOrderingAfterArgs

Accesses List<string>
Accesses []string
accesses List<String>
accesses string[]
accesses Sequence[str]
accesses List<String>

GatewayPluginAclOrderingBefore
, GatewayPluginAclOrderingBeforeArgs

Accesses List<string>
Accesses []string
accesses List<String>
accesses string[]
accesses Sequence[str]
accesses List<String>

GatewayPluginAclRoute
, GatewayPluginAclRouteArgs

Id string
Id string
id String
id string
id str
id String

GatewayPluginAclService
, GatewayPluginAclServiceArgs

Id string
Id string
id String
id string
id str
id String

Import

$ pulumi import konnect:index/gatewayPluginAcl:GatewayPluginAcl my_konnect_gateway_plugin_acl "{ \"control_plane_id\": \"9524ec7d-36d9-465d-a8c5-83a3c9390458\", \"id\": \"3473c251-5b6c-4f45-b1ff-7ede735a366d\"}"
Copy

To learn more about importing existing cloud resources, see Importing resources.

Package Details

Repository
konnect kong/terraform-provider-konnect
License
Notes
This Pulumi package is based on the konnect Terraform Provider.
konnect 2.6.0 published on Tuesday, Apr 22, 2025 by kong
kong/terraform-provider-konnect