import * as pulumi from "@pulumi/pulumi"; import * as inputs from "../types/input"; import * as outputs from "../types/output"; /** * Manages a Linux Function App. * * > **Note:** This Terraform resource is specifically designed to provision the infrastructure for a Function App, which can host one or more individual functions. To package and deploy application code to the Function App, tools like [Azure Functions Core Tools](https://learn.microsoft.com/azure/azure-functions/functions-run-local) or Azure CLI can be utilized, however application code deployment must typically be performed individually for each Function App. * * ## Example Usage * * ```typescript * import * as pulumi from "@pulumi/pulumi"; * import * as azure from "@pulumi/azure"; * * const example = new azure.core.ResourceGroup("example", { * name: "example-resources", * location: "West Europe", * }); * const exampleAccount = new azure.storage.Account("example", { * name: "linuxfunctionappsa", * resourceGroupName: example.name, * location: example.location, * accountTier: "Standard", * accountReplicationType: "LRS", * }); * const exampleServicePlan = new azure.appservice.ServicePlan("example", { * name: "example-app-service-plan", * resourceGroupName: example.name, * location: example.location, * osType: "Linux", * skuName: "B1", * }); * const exampleLinuxFunctionApp = new azure.appservice.LinuxFunctionApp("example", { * name: "example-linux-function-app", * resourceGroupName: example.name, * location: example.location, * storageAccountName: exampleAccount.name, * storageAccountAccessKey: exampleAccount.primaryAccessKey, * servicePlanId: exampleServicePlan.id, * siteConfig: {}, * }); * ``` * * ## API Providers * * * This resource uses the following Azure API Providers: * * * `Microsoft.Web` - 2023-12-01, 2023-01-01 * * ## Import * * Linux Function Apps can be imported using the `resource id`, e.g. * * ```sh * $ pulumi import azure:appservice/linuxFunctionApp:LinuxFunctionApp example /subscriptions/12345678-1234-9876-4563-123456789012/resourceGroups/resGroup1/providers/Microsoft.Web/sites/site1 * ``` */ export declare class LinuxFunctionApp extends pulumi.CustomResource { /** * Get an existing LinuxFunctionApp resource's state with the given name, ID, and optional extra * properties used to qualify the lookup. * * @param name The _unique_ name of the resulting resource. * @param id The _unique_ provider ID of the resource to lookup. * @param state Any extra arguments used during the lookup. * @param opts Optional settings to control the behavior of the CustomResource. */ static get(name: string, id: pulumi.Input, state?: LinuxFunctionAppState, opts?: pulumi.CustomResourceOptions): LinuxFunctionApp; /** * Returns true if the given object is an instance of LinuxFunctionApp. This is designed to work even * when multiple copies of the Pulumi SDK have been loaded into the same process. */ static isInstance(obj: any): obj is LinuxFunctionApp; /** * A map of key-value pairs for [App Settings](https://docs.microsoft.com/azure/azure-functions/functions-app-settings) and custom values. * * > **Note:** For runtime related settings, please use `nodeVersion` in `siteConfig` to set the node version and use `functionsExtensionVersion` to set the function runtime version, terraform will assign the values to the key `WEBSITE_NODE_DEFAULT_VERSION` and `FUNCTIONS_EXTENSION_VERSION` in app setting. * * > **Note:** For storage related settings, please use related properties that are available such as `storageAccountAccessKey`, terraform will assign the value to keys such as `WEBSITE_CONTENTAZUREFILECONNECTIONSTRING`, `AzureWebJobsStorage` in app_setting. * * > **Note:** For application insight related settings, please use `applicationInsightsConnectionString` and `applicationInsightsKey`, terraform will assign the value to the key `APPINSIGHTS_INSTRUMENTATIONKEY` and `APPLICATIONINSIGHTS_CONNECTION_STRING` in app setting. * * > **Note:** For health check related settings, please use `healthCheckEvictionTimeInMin`, terraform will assign the value to the key `WEBSITE_HEALTHCHECK_MAXPINGFAILURES` in app setting. * * > **Note:** Please create a predefined share if you are restricting your storage account to a virtual network by setting `WEBSITE_CONTENTOVERVNET` to 1 in app_setting. */ readonly appSettings: pulumi.Output<{ [key: string]: string; } | undefined>; /** * A `authSettings` block as defined below. */ readonly authSettings: pulumi.Output; /** * An `authSettingsV2` block as defined below. */ readonly authSettingsV2: pulumi.Output; /** * A `backup` block as defined below. */ readonly backup: pulumi.Output; /** * Should built in logging be enabled. Configures `AzureWebJobsDashboard` app setting based on the configured storage setting. Defaults to `true`. * * > **Note:** `builtinLoggingEnabled` is only supported for function app whose function runtime is running on version 1.x. */ readonly builtinLoggingEnabled: pulumi.Output; /** * Should the function app use Client Certificates. */ readonly clientCertificateEnabled: pulumi.Output; /** * Paths to exclude when using client certificates, separated by ; */ readonly clientCertificateExclusionPaths: pulumi.Output; /** * The mode of the Function App's client certificates requirement for incoming requests. Possible values are `Required`, `Optional`, and `OptionalInteractiveUser`. Defaults to `Optional`. */ readonly clientCertificateMode: pulumi.Output; /** * One or more `connectionString` blocks as defined below. */ readonly connectionStrings: pulumi.Output; /** * Should the settings for linking the Function App to storage be suppressed. */ readonly contentShareForceDisabled: pulumi.Output; /** * The identifier used by App Service to perform domain ownership verification via DNS TXT record. */ readonly customDomainVerificationId: pulumi.Output; /** * The amount of memory in gigabyte-seconds that your application is allowed to consume per day. Setting this value only affects function apps under the consumption plan. Defaults to `0`. */ readonly dailyMemoryTimeQuota: pulumi.Output; /** * The default hostname of the Linux Function App. */ readonly defaultHostname: pulumi.Output; /** * Is the Function App enabled? Defaults to `true`. */ readonly enabled: pulumi.Output; /** * Should the default FTP Basic Authentication publishing profile be enabled. Defaults to `true`. */ readonly ftpPublishBasicAuthenticationEnabled: pulumi.Output; /** * The runtime version associated with the Function App. Defaults to `~4`. */ readonly functionsExtensionVersion: pulumi.Output; /** * The ID of the App Service Environment used by Function App. */ readonly hostingEnvironmentId: pulumi.Output; /** * Can the Function App only be accessed via HTTPS? Defaults to `false`. */ readonly httpsOnly: pulumi.Output; /** * A `identity` block as defined below. */ readonly identity: pulumi.Output; /** * The User Assigned Identity ID used for accessing KeyVault secrets. The identity must be assigned to the application in the `identity` block. [For more information see - Access vaults with a user-assigned identity](https://docs.microsoft.com/azure/app-service/app-service-key-vault-references#access-vaults-with-a-user-assigned-identity) */ readonly keyVaultReferenceIdentityId: pulumi.Output; /** * The Kind value for this Linux Function App. */ readonly kind: pulumi.Output; /** * The Azure Region where the Linux Function App should exist. Changing this forces a new Linux Function App to be created. */ readonly location: pulumi.Output; /** * The name which should be used for this Linux Function App. Changing this forces a new Linux Function App to be created. Limit the function name to 32 characters to avoid naming collisions. For more information about [Function App naming rule](https://docs.microsoft.com/en-us/azure/azure-resource-manager/management/resource-name-rules#microsoftweb) and [Host ID Collisions](https://github.com/Azure/azure-functions-host/wiki/Host-IDs#host-id-collisions) */ readonly name: pulumi.Output; /** * A list of outbound IP addresses. For example `["52.23.25.3", "52.143.43.12"]` */ readonly outboundIpAddressLists: pulumi.Output; /** * A comma separated list of outbound IP addresses as a string. For example `52.23.25.3,52.143.43.12`. */ readonly outboundIpAddresses: pulumi.Output; /** * A list of possible outbound IP addresses, not all of which are necessarily in use. This is a superset of `outboundIpAddressList`. For example `["52.23.25.3", "52.143.43.12"]`. */ readonly possibleOutboundIpAddressLists: pulumi.Output; /** * A comma separated list of possible outbound IP addresses as a string. For example `52.23.25.3,52.143.43.12,52.143.43.17`. This is a superset of `outboundIpAddresses`. */ readonly possibleOutboundIpAddresses: pulumi.Output; /** * Should public network access be enabled for the Function App. Defaults to `true`. */ readonly publicNetworkAccessEnabled: pulumi.Output; /** * The name of the Resource Group where the Linux Function App should exist. Changing this forces a new Linux Function App to be created. */ readonly resourceGroupName: pulumi.Output; /** * The ID of the App Service Plan within which to create this Function App. */ readonly servicePlanId: pulumi.Output; /** * A `siteConfig` block as defined below. */ readonly siteConfig: pulumi.Output; /** * A `siteCredential` block as defined below. */ readonly siteCredentials: pulumi.Output; /** * A `stickySettings` block as defined below. */ readonly stickySettings: pulumi.Output; /** * The access key which will be used to access the backend storage account for the Function App. Conflicts with `storageUsesManagedIdentity`. */ readonly storageAccountAccessKey: pulumi.Output; /** * The backend storage account name which will be used by this Function App. */ readonly storageAccountName: pulumi.Output; /** * One or more `storageAccount` blocks as defined below. */ readonly storageAccounts: pulumi.Output; /** * The Key Vault Secret ID, optionally including version, that contains the Connection String to connect to the storage account for this Function App. * * > **Note:** `storageKeyVaultSecretId` cannot be used with `storageAccountName`. * * > **Note:** `storageKeyVaultSecretId` used without a version will use the latest version of the secret, however, the service can take up to 24h to pick up a rotation of the latest version. See the [official docs](https://docs.microsoft.com/azure/app-service/app-service-key-vault-references#rotation) for more information. */ readonly storageKeyVaultSecretId: pulumi.Output; /** * Should the Function App use Managed Identity to access the storage account. Conflicts with `storageAccountAccessKey`. * * > **Note:** One of `storageAccountAccessKey` or `storageUsesManagedIdentity` must be specified when using `storageAccountName`. */ readonly storageUsesManagedIdentity: pulumi.Output; /** * A mapping of tags which should be assigned to the Linux Function App. */ readonly tags: pulumi.Output<{ [key: string]: string; } | undefined>; /** * Whether backup and restore operations over the linked virtual network are enabled. Defaults to `false`. */ readonly virtualNetworkBackupRestoreEnabled: pulumi.Output; /** * The subnet id which will be used by this Function App for [regional virtual network integration](https://docs.microsoft.com/en-us/azure/app-service/overview-vnet-integration#regional-virtual-network-integration). * * > **Note:** The AzureRM Terraform provider provides regional virtual network integration via the standalone resource appServiceVirtualNetworkSwiftConnection and in-line within this resource using the `virtualNetworkSubnetId` property. You cannot use both methods simultaneously. If the virtual network is set via the resource `appServiceVirtualNetworkSwiftConnection` then `ignoreChanges` should be used in the function app configuration. * * > **Note:** Assigning the `virtualNetworkSubnetId` property requires [RBAC permissions on the subnet](https://docs.microsoft.com/en-us/azure/app-service/overview-vnet-integration#permissions) */ readonly virtualNetworkSubnetId: pulumi.Output; /** * Should the traffic for the image pull be routed over virtual network enabled. Defaults to `false`. * * > **Note:** The feature can also be enabled via the app setting `WEBSITE_PULL_IMAGE_OVER_VNET`. Must be set to `true` when running in an App Service Environment. */ readonly vnetImagePullEnabled: pulumi.Output; /** * Should the default WebDeploy Basic Authentication publishing credentials enabled. Defaults to `true`. * * > **Note:** Setting this value to true will disable the ability to use `zipDeployFile` which currently relies on the default publishing profile. */ readonly webdeployPublishBasicAuthenticationEnabled: pulumi.Output; /** * The local path and filename of the Zip packaged application to deploy to this Linux Function App. * * > **Note:** Using this value requires either `WEBSITE_RUN_FROM_PACKAGE=1` or `SCM_DO_BUILD_DURING_DEPLOYMENT=true` to be set on the App in `appSettings`. Refer to the [Azure docs](https://learn.microsoft.com/en-us/azure/azure-functions/functions-deployment-technologies) for further details. */ readonly zipDeployFile: pulumi.Output; /** * Create a LinuxFunctionApp resource with the given unique name, arguments, and options. * * @param name The _unique_ name of the resource. * @param args The arguments to use to populate this resource's properties. * @param opts A bag of options that control this resource's behavior. */ constructor(name: string, args: LinuxFunctionAppArgs, opts?: pulumi.CustomResourceOptions); } /** * Input properties used for looking up and filtering LinuxFunctionApp resources. */ export interface LinuxFunctionAppState { /** * A map of key-value pairs for [App Settings](https://docs.microsoft.com/azure/azure-functions/functions-app-settings) and custom values. * * > **Note:** For runtime related settings, please use `nodeVersion` in `siteConfig` to set the node version and use `functionsExtensionVersion` to set the function runtime version, terraform will assign the values to the key `WEBSITE_NODE_DEFAULT_VERSION` and `FUNCTIONS_EXTENSION_VERSION` in app setting. * * > **Note:** For storage related settings, please use related properties that are available such as `storageAccountAccessKey`, terraform will assign the value to keys such as `WEBSITE_CONTENTAZUREFILECONNECTIONSTRING`, `AzureWebJobsStorage` in app_setting. * * > **Note:** For application insight related settings, please use `applicationInsightsConnectionString` and `applicationInsightsKey`, terraform will assign the value to the key `APPINSIGHTS_INSTRUMENTATIONKEY` and `APPLICATIONINSIGHTS_CONNECTION_STRING` in app setting. * * > **Note:** For health check related settings, please use `healthCheckEvictionTimeInMin`, terraform will assign the value to the key `WEBSITE_HEALTHCHECK_MAXPINGFAILURES` in app setting. * * > **Note:** Please create a predefined share if you are restricting your storage account to a virtual network by setting `WEBSITE_CONTENTOVERVNET` to 1 in app_setting. */ appSettings?: pulumi.Input<{ [key: string]: pulumi.Input; }>; /** * A `authSettings` block as defined below. */ authSettings?: pulumi.Input; /** * An `authSettingsV2` block as defined below. */ authSettingsV2?: pulumi.Input; /** * A `backup` block as defined below. */ backup?: pulumi.Input; /** * Should built in logging be enabled. Configures `AzureWebJobsDashboard` app setting based on the configured storage setting. Defaults to `true`. * * > **Note:** `builtinLoggingEnabled` is only supported for function app whose function runtime is running on version 1.x. */ builtinLoggingEnabled?: pulumi.Input; /** * Should the function app use Client Certificates. */ clientCertificateEnabled?: pulumi.Input; /** * Paths to exclude when using client certificates, separated by ; */ clientCertificateExclusionPaths?: pulumi.Input; /** * The mode of the Function App's client certificates requirement for incoming requests. Possible values are `Required`, `Optional`, and `OptionalInteractiveUser`. Defaults to `Optional`. */ clientCertificateMode?: pulumi.Input; /** * One or more `connectionString` blocks as defined below. */ connectionStrings?: pulumi.Input[]>; /** * Should the settings for linking the Function App to storage be suppressed. */ contentShareForceDisabled?: pulumi.Input; /** * The identifier used by App Service to perform domain ownership verification via DNS TXT record. */ customDomainVerificationId?: pulumi.Input; /** * The amount of memory in gigabyte-seconds that your application is allowed to consume per day. Setting this value only affects function apps under the consumption plan. Defaults to `0`. */ dailyMemoryTimeQuota?: pulumi.Input; /** * The default hostname of the Linux Function App. */ defaultHostname?: pulumi.Input; /** * Is the Function App enabled? Defaults to `true`. */ enabled?: pulumi.Input; /** * Should the default FTP Basic Authentication publishing profile be enabled. Defaults to `true`. */ ftpPublishBasicAuthenticationEnabled?: pulumi.Input; /** * The runtime version associated with the Function App. Defaults to `~4`. */ functionsExtensionVersion?: pulumi.Input; /** * The ID of the App Service Environment used by Function App. */ hostingEnvironmentId?: pulumi.Input; /** * Can the Function App only be accessed via HTTPS? Defaults to `false`. */ httpsOnly?: pulumi.Input; /** * A `identity` block as defined below. */ identity?: pulumi.Input; /** * The User Assigned Identity ID used for accessing KeyVault secrets. The identity must be assigned to the application in the `identity` block. [For more information see - Access vaults with a user-assigned identity](https://docs.microsoft.com/azure/app-service/app-service-key-vault-references#access-vaults-with-a-user-assigned-identity) */ keyVaultReferenceIdentityId?: pulumi.Input; /** * The Kind value for this Linux Function App. */ kind?: pulumi.Input; /** * The Azure Region where the Linux Function App should exist. Changing this forces a new Linux Function App to be created. */ location?: pulumi.Input; /** * The name which should be used for this Linux Function App. Changing this forces a new Linux Function App to be created. Limit the function name to 32 characters to avoid naming collisions. For more information about [Function App naming rule](https://docs.microsoft.com/en-us/azure/azure-resource-manager/management/resource-name-rules#microsoftweb) and [Host ID Collisions](https://github.com/Azure/azure-functions-host/wiki/Host-IDs#host-id-collisions) */ name?: pulumi.Input; /** * A list of outbound IP addresses. For example `["52.23.25.3", "52.143.43.12"]` */ outboundIpAddressLists?: pulumi.Input[]>; /** * A comma separated list of outbound IP addresses as a string. For example `52.23.25.3,52.143.43.12`. */ outboundIpAddresses?: pulumi.Input; /** * A list of possible outbound IP addresses, not all of which are necessarily in use. This is a superset of `outboundIpAddressList`. For example `["52.23.25.3", "52.143.43.12"]`. */ possibleOutboundIpAddressLists?: pulumi.Input[]>; /** * A comma separated list of possible outbound IP addresses as a string. For example `52.23.25.3,52.143.43.12,52.143.43.17`. This is a superset of `outboundIpAddresses`. */ possibleOutboundIpAddresses?: pulumi.Input; /** * Should public network access be enabled for the Function App. Defaults to `true`. */ publicNetworkAccessEnabled?: pulumi.Input; /** * The name of the Resource Group where the Linux Function App should exist. Changing this forces a new Linux Function App to be created. */ resourceGroupName?: pulumi.Input; /** * The ID of the App Service Plan within which to create this Function App. */ servicePlanId?: pulumi.Input; /** * A `siteConfig` block as defined below. */ siteConfig?: pulumi.Input; /** * A `siteCredential` block as defined below. */ siteCredentials?: pulumi.Input[]>; /** * A `stickySettings` block as defined below. */ stickySettings?: pulumi.Input; /** * The access key which will be used to access the backend storage account for the Function App. Conflicts with `storageUsesManagedIdentity`. */ storageAccountAccessKey?: pulumi.Input; /** * The backend storage account name which will be used by this Function App. */ storageAccountName?: pulumi.Input; /** * One or more `storageAccount` blocks as defined below. */ storageAccounts?: pulumi.Input[]>; /** * The Key Vault Secret ID, optionally including version, that contains the Connection String to connect to the storage account for this Function App. * * > **Note:** `storageKeyVaultSecretId` cannot be used with `storageAccountName`. * * > **Note:** `storageKeyVaultSecretId` used without a version will use the latest version of the secret, however, the service can take up to 24h to pick up a rotation of the latest version. See the [official docs](https://docs.microsoft.com/azure/app-service/app-service-key-vault-references#rotation) for more information. */ storageKeyVaultSecretId?: pulumi.Input; /** * Should the Function App use Managed Identity to access the storage account. Conflicts with `storageAccountAccessKey`. * * > **Note:** One of `storageAccountAccessKey` or `storageUsesManagedIdentity` must be specified when using `storageAccountName`. */ storageUsesManagedIdentity?: pulumi.Input; /** * A mapping of tags which should be assigned to the Linux Function App. */ tags?: pulumi.Input<{ [key: string]: pulumi.Input; }>; /** * Whether backup and restore operations over the linked virtual network are enabled. Defaults to `false`. */ virtualNetworkBackupRestoreEnabled?: pulumi.Input; /** * The subnet id which will be used by this Function App for [regional virtual network integration](https://docs.microsoft.com/en-us/azure/app-service/overview-vnet-integration#regional-virtual-network-integration). * * > **Note:** The AzureRM Terraform provider provides regional virtual network integration via the standalone resource appServiceVirtualNetworkSwiftConnection and in-line within this resource using the `virtualNetworkSubnetId` property. You cannot use both methods simultaneously. If the virtual network is set via the resource `appServiceVirtualNetworkSwiftConnection` then `ignoreChanges` should be used in the function app configuration. * * > **Note:** Assigning the `virtualNetworkSubnetId` property requires [RBAC permissions on the subnet](https://docs.microsoft.com/en-us/azure/app-service/overview-vnet-integration#permissions) */ virtualNetworkSubnetId?: pulumi.Input; /** * Should the traffic for the image pull be routed over virtual network enabled. Defaults to `false`. * * > **Note:** The feature can also be enabled via the app setting `WEBSITE_PULL_IMAGE_OVER_VNET`. Must be set to `true` when running in an App Service Environment. */ vnetImagePullEnabled?: pulumi.Input; /** * Should the default WebDeploy Basic Authentication publishing credentials enabled. Defaults to `true`. * * > **Note:** Setting this value to true will disable the ability to use `zipDeployFile` which currently relies on the default publishing profile. */ webdeployPublishBasicAuthenticationEnabled?: pulumi.Input; /** * The local path and filename of the Zip packaged application to deploy to this Linux Function App. * * > **Note:** Using this value requires either `WEBSITE_RUN_FROM_PACKAGE=1` or `SCM_DO_BUILD_DURING_DEPLOYMENT=true` to be set on the App in `appSettings`. Refer to the [Azure docs](https://learn.microsoft.com/en-us/azure/azure-functions/functions-deployment-technologies) for further details. */ zipDeployFile?: pulumi.Input; } /** * The set of arguments for constructing a LinuxFunctionApp resource. */ export interface LinuxFunctionAppArgs { /** * A map of key-value pairs for [App Settings](https://docs.microsoft.com/azure/azure-functions/functions-app-settings) and custom values. * * > **Note:** For runtime related settings, please use `nodeVersion` in `siteConfig` to set the node version and use `functionsExtensionVersion` to set the function runtime version, terraform will assign the values to the key `WEBSITE_NODE_DEFAULT_VERSION` and `FUNCTIONS_EXTENSION_VERSION` in app setting. * * > **Note:** For storage related settings, please use related properties that are available such as `storageAccountAccessKey`, terraform will assign the value to keys such as `WEBSITE_CONTENTAZUREFILECONNECTIONSTRING`, `AzureWebJobsStorage` in app_setting. * * > **Note:** For application insight related settings, please use `applicationInsightsConnectionString` and `applicationInsightsKey`, terraform will assign the value to the key `APPINSIGHTS_INSTRUMENTATIONKEY` and `APPLICATIONINSIGHTS_CONNECTION_STRING` in app setting. * * > **Note:** For health check related settings, please use `healthCheckEvictionTimeInMin`, terraform will assign the value to the key `WEBSITE_HEALTHCHECK_MAXPINGFAILURES` in app setting. * * > **Note:** Please create a predefined share if you are restricting your storage account to a virtual network by setting `WEBSITE_CONTENTOVERVNET` to 1 in app_setting. */ appSettings?: pulumi.Input<{ [key: string]: pulumi.Input; }>; /** * A `authSettings` block as defined below. */ authSettings?: pulumi.Input; /** * An `authSettingsV2` block as defined below. */ authSettingsV2?: pulumi.Input; /** * A `backup` block as defined below. */ backup?: pulumi.Input; /** * Should built in logging be enabled. Configures `AzureWebJobsDashboard` app setting based on the configured storage setting. Defaults to `true`. * * > **Note:** `builtinLoggingEnabled` is only supported for function app whose function runtime is running on version 1.x. */ builtinLoggingEnabled?: pulumi.Input; /** * Should the function app use Client Certificates. */ clientCertificateEnabled?: pulumi.Input; /** * Paths to exclude when using client certificates, separated by ; */ clientCertificateExclusionPaths?: pulumi.Input; /** * The mode of the Function App's client certificates requirement for incoming requests. Possible values are `Required`, `Optional`, and `OptionalInteractiveUser`. Defaults to `Optional`. */ clientCertificateMode?: pulumi.Input; /** * One or more `connectionString` blocks as defined below. */ connectionStrings?: pulumi.Input[]>; /** * Should the settings for linking the Function App to storage be suppressed. */ contentShareForceDisabled?: pulumi.Input; /** * The amount of memory in gigabyte-seconds that your application is allowed to consume per day. Setting this value only affects function apps under the consumption plan. Defaults to `0`. */ dailyMemoryTimeQuota?: pulumi.Input; /** * Is the Function App enabled? Defaults to `true`. */ enabled?: pulumi.Input; /** * Should the default FTP Basic Authentication publishing profile be enabled. Defaults to `true`. */ ftpPublishBasicAuthenticationEnabled?: pulumi.Input; /** * The runtime version associated with the Function App. Defaults to `~4`. */ functionsExtensionVersion?: pulumi.Input; /** * Can the Function App only be accessed via HTTPS? Defaults to `false`. */ httpsOnly?: pulumi.Input; /** * A `identity` block as defined below. */ identity?: pulumi.Input; /** * The User Assigned Identity ID used for accessing KeyVault secrets. The identity must be assigned to the application in the `identity` block. [For more information see - Access vaults with a user-assigned identity](https://docs.microsoft.com/azure/app-service/app-service-key-vault-references#access-vaults-with-a-user-assigned-identity) */ keyVaultReferenceIdentityId?: pulumi.Input; /** * The Azure Region where the Linux Function App should exist. Changing this forces a new Linux Function App to be created. */ location?: pulumi.Input; /** * The name which should be used for this Linux Function App. Changing this forces a new Linux Function App to be created. Limit the function name to 32 characters to avoid naming collisions. For more information about [Function App naming rule](https://docs.microsoft.com/en-us/azure/azure-resource-manager/management/resource-name-rules#microsoftweb) and [Host ID Collisions](https://github.com/Azure/azure-functions-host/wiki/Host-IDs#host-id-collisions) */ name?: pulumi.Input; /** * Should public network access be enabled for the Function App. Defaults to `true`. */ publicNetworkAccessEnabled?: pulumi.Input; /** * The name of the Resource Group where the Linux Function App should exist. Changing this forces a new Linux Function App to be created. */ resourceGroupName: pulumi.Input; /** * The ID of the App Service Plan within which to create this Function App. */ servicePlanId: pulumi.Input; /** * A `siteConfig` block as defined below. */ siteConfig: pulumi.Input; /** * A `stickySettings` block as defined below. */ stickySettings?: pulumi.Input; /** * The access key which will be used to access the backend storage account for the Function App. Conflicts with `storageUsesManagedIdentity`. */ storageAccountAccessKey?: pulumi.Input; /** * The backend storage account name which will be used by this Function App. */ storageAccountName?: pulumi.Input; /** * One or more `storageAccount` blocks as defined below. */ storageAccounts?: pulumi.Input[]>; /** * The Key Vault Secret ID, optionally including version, that contains the Connection String to connect to the storage account for this Function App. * * > **Note:** `storageKeyVaultSecretId` cannot be used with `storageAccountName`. * * > **Note:** `storageKeyVaultSecretId` used without a version will use the latest version of the secret, however, the service can take up to 24h to pick up a rotation of the latest version. See the [official docs](https://docs.microsoft.com/azure/app-service/app-service-key-vault-references#rotation) for more information. */ storageKeyVaultSecretId?: pulumi.Input; /** * Should the Function App use Managed Identity to access the storage account. Conflicts with `storageAccountAccessKey`. * * > **Note:** One of `storageAccountAccessKey` or `storageUsesManagedIdentity` must be specified when using `storageAccountName`. */ storageUsesManagedIdentity?: pulumi.Input; /** * A mapping of tags which should be assigned to the Linux Function App. */ tags?: pulumi.Input<{ [key: string]: pulumi.Input; }>; /** * Whether backup and restore operations over the linked virtual network are enabled. Defaults to `false`. */ virtualNetworkBackupRestoreEnabled?: pulumi.Input; /** * The subnet id which will be used by this Function App for [regional virtual network integration](https://docs.microsoft.com/en-us/azure/app-service/overview-vnet-integration#regional-virtual-network-integration). * * > **Note:** The AzureRM Terraform provider provides regional virtual network integration via the standalone resource appServiceVirtualNetworkSwiftConnection and in-line within this resource using the `virtualNetworkSubnetId` property. You cannot use both methods simultaneously. If the virtual network is set via the resource `appServiceVirtualNetworkSwiftConnection` then `ignoreChanges` should be used in the function app configuration. * * > **Note:** Assigning the `virtualNetworkSubnetId` property requires [RBAC permissions on the subnet](https://docs.microsoft.com/en-us/azure/app-service/overview-vnet-integration#permissions) */ virtualNetworkSubnetId?: pulumi.Input; /** * Should the traffic for the image pull be routed over virtual network enabled. Defaults to `false`. * * > **Note:** The feature can also be enabled via the app setting `WEBSITE_PULL_IMAGE_OVER_VNET`. Must be set to `true` when running in an App Service Environment. */ vnetImagePullEnabled?: pulumi.Input; /** * Should the default WebDeploy Basic Authentication publishing credentials enabled. Defaults to `true`. * * > **Note:** Setting this value to true will disable the ability to use `zipDeployFile` which currently relies on the default publishing profile. */ webdeployPublishBasicAuthenticationEnabled?: pulumi.Input; /** * The local path and filename of the Zip packaged application to deploy to this Linux Function App. * * > **Note:** Using this value requires either `WEBSITE_RUN_FROM_PACKAGE=1` or `SCM_DO_BUILD_DURING_DEPLOYMENT=true` to be set on the App in `appSettings`. Refer to the [Azure docs](https://learn.microsoft.com/en-us/azure/azure-functions/functions-deployment-technologies) for further details. */ zipDeployFile?: pulumi.Input; }