import * as pulumi from "@pulumi/pulumi"; import * as inputs from "../types/input"; import * as outputs from "../types/output"; /** * Manages a Linux Function App Slot. * * ## Example Usage * * ```typescript * import * as pulumi from "@pulumi/pulumi"; * import * as azure from "@pulumi/azure"; * * const example = new azure.core.ResourceGroup("example", { * name: "example-resources", * location: "West Europe", * }); * const exampleAccount = new azure.storage.Account("example", { * name: "linuxfunctionappsa", * resourceGroupName: example.name, * location: example.location, * accountTier: "Standard", * accountReplicationType: "LRS", * }); * const exampleServicePlan = new azure.appservice.ServicePlan("example", { * name: "example-app-service-plan", * resourceGroupName: example.name, * location: example.location, * osType: "Linux", * skuName: "Y1", * }); * const exampleLinuxFunctionApp = new azure.appservice.LinuxFunctionApp("example", { * name: "example-linux-function-app", * resourceGroupName: example.name, * location: example.location, * servicePlanId: exampleServicePlan.id, * storageAccountName: exampleAccount.name, * siteConfig: {}, * }); * const exampleLinuxFunctionAppSlot = new azure.appservice.LinuxFunctionAppSlot("example", { * name: "example-linux-function-app-slot", * functionAppId: exampleLinuxFunctionApp.id, * storageAccountName: exampleAccount.name, * siteConfig: {}, * }); * ``` * * ## API Providers * * * This resource uses the following Azure API Providers: * * * `Microsoft.Web` - 2023-12-01, 2023-01-01 * * ## Import * * A Linux Function App Slot can be imported using the `resource id`, e.g. * * ```sh * $ pulumi import azure:appservice/linuxFunctionAppSlot:LinuxFunctionAppSlot example "/subscriptions/12345678-1234-9876-4563-123456789012/resourceGroups/resGroup1/providers/Microsoft.Web/sites/site1/slots/slot1" * ``` */ export declare class LinuxFunctionAppSlot extends pulumi.CustomResource { /** * Get an existing LinuxFunctionAppSlot resource's state with the given name, ID, and optional extra * properties used to qualify the lookup. * * @param name The _unique_ name of the resulting resource. * @param id The _unique_ provider ID of the resource to lookup. * @param state Any extra arguments used during the lookup. * @param opts Optional settings to control the behavior of the CustomResource. */ static get(name: string, id: pulumi.Input, state?: LinuxFunctionAppSlotState, opts?: pulumi.CustomResourceOptions): LinuxFunctionAppSlot; /** * Returns true if the given object is an instance of LinuxFunctionAppSlot. This is designed to work even * when multiple copies of the Pulumi SDK have been loaded into the same process. */ static isInstance(obj: any): obj is LinuxFunctionAppSlot; /** * A map of key-value pairs for [App Settings](https://docs.microsoft.com/azure/azure-functions/functions-app-settings) and custom values. */ readonly appSettings: pulumi.Output<{ [key: string]: string; } | undefined>; /** * an `authSettings` block as detailed below. */ readonly authSettings: pulumi.Output; /** * an `authSettingsV2` block as detailed below. */ readonly authSettingsV2: pulumi.Output; /** * a `backup` block as detailed below. */ readonly backup: pulumi.Output; /** * Should built in logging be enabled. Configures `AzureWebJobsDashboard` app setting based on the configured storage setting. Defaults to `true`. */ readonly builtinLoggingEnabled: pulumi.Output; /** * Should the Function App Slot use Client Certificates. */ readonly clientCertificateEnabled: pulumi.Output; /** * Paths to exclude when using client certificates, separated by ; */ readonly clientCertificateExclusionPaths: pulumi.Output; /** * The mode of the Function App Slot's client certificates requirement for incoming requests. Possible values are `Required`, `Optional`, and `OptionalInteractiveUser`. Defaults to `Optional`. */ readonly clientCertificateMode: pulumi.Output; /** * a `connectionString` block as detailed below. */ readonly connectionStrings: pulumi.Output; /** * Force disable the content share settings. */ readonly contentShareForceDisabled: pulumi.Output; /** * The identifier used by App Service to perform domain ownership verification via DNS TXT record. */ readonly customDomainVerificationId: pulumi.Output; /** * The amount of memory in gigabyte-seconds that your application is allowed to consume per day. Setting this value only affects function apps in Consumption Plans. Defaults to `0`. */ readonly dailyMemoryTimeQuota: pulumi.Output; /** * The default hostname of the Linux Function App Slot. */ readonly defaultHostname: pulumi.Output; /** * Is the Linux Function App Slot enabled. Defaults to `true`. */ readonly enabled: pulumi.Output; /** * Are the default FTP Basic Authentication publishing credentials enabled. Defaults to `true`. */ readonly ftpPublishBasicAuthenticationEnabled: pulumi.Output; /** * The ID of the Linux Function App this Slot is a member of. Changing this forces a new resource to be created. */ readonly functionAppId: pulumi.Output; /** * The runtime version associated with the Function App Slot. Defaults to `~4`. */ readonly functionsExtensionVersion: pulumi.Output; /** * The ID of the App Service Environment used by Function App Slot. */ readonly hostingEnvironmentId: pulumi.Output; /** * Can the Function App Slot only be accessed via HTTPS?. Defaults to `false`. */ readonly httpsOnly: pulumi.Output; /** * An `identity` block as detailed below. */ readonly identity: pulumi.Output; /** * The User Assigned Identity ID used for accessing KeyVault secrets. The identity must be assigned to the application in the `identity` block. [For more information see - Access vaults with a user-assigned identity](https://docs.microsoft.com/azure/app-service/app-service-key-vault-references#access-vaults-with-a-user-assigned-identity) */ readonly keyVaultReferenceIdentityId: pulumi.Output; /** * The Kind value for this Linux Function App Slot. */ readonly kind: pulumi.Output; /** * Specifies the name of the Function App Slot. Changing this forces a new resource to be created. */ readonly name: pulumi.Output; /** * A list of outbound IP addresses. For example `["52.23.25.3", "52.143.43.12"]` */ readonly outboundIpAddressLists: pulumi.Output; /** * A comma separated list of outbound IP addresses as a string. For example `52.23.25.3,52.143.43.12`. */ readonly outboundIpAddresses: pulumi.Output; /** * A list of possible outbound IP addresses, not all of which are necessarily in use. This is a superset of `outboundIpAddressList`. For example `["52.23.25.3", "52.143.43.12"]`. */ readonly possibleOutboundIpAddressLists: pulumi.Output; /** * A comma separated list of possible outbound IP addresses as a string. For example `52.23.25.3,52.143.43.12,52.143.43.17`. This is a superset of `outboundIpAddresses`. For example `["52.23.25.3", "52.143.43.12","52.143.43.17"]`. */ readonly possibleOutboundIpAddresses: pulumi.Output; /** * Should public network access be enabled for the Function App. Defaults to `true`. */ readonly publicNetworkAccessEnabled: pulumi.Output; /** * The ID of the Service Plan in which to run this slot. If not specified the same Service Plan as the Linux Function App will be used. */ readonly servicePlanId: pulumi.Output; /** * a `siteConfig` block as detailed below. */ readonly siteConfig: pulumi.Output; /** * A `siteCredential` block as defined below. */ readonly siteCredentials: pulumi.Output; /** * The access key which will be used to access the storage account for the Function App Slot. */ readonly storageAccountAccessKey: pulumi.Output; /** * The backend storage account name which will be used by this Function App Slot. */ readonly storageAccountName: pulumi.Output; /** * One or more `storageAccount` blocks as defined below. */ readonly storageAccounts: pulumi.Output; /** * The Key Vault Secret ID, optionally including version, that contains the Connection String to connect to the storage account for this Function App. * * > **Note:** `storageKeyVaultSecretId` cannot be used with `storageAccountName`. * * > **Note:** `storageKeyVaultSecretId` used without a version will use the latest version of the secret, however, the service can take up to 24h to pick up a rotation of the latest version. See the [official docs](https://docs.microsoft.com/azure/app-service/app-service-key-vault-references#rotation) for more information. */ readonly storageKeyVaultSecretId: pulumi.Output; /** * Should the Function App Slot use its Managed Identity to access storage. * * > **Note:** One of `storageAccountAccessKey` or `storageUsesManagedIdentity` must be specified when using `storageAccountName`. */ readonly storageUsesManagedIdentity: pulumi.Output; /** * A mapping of tags which should be assigned to the Linux Function App. */ readonly tags: pulumi.Output<{ [key: string]: string; } | undefined>; /** * Whether backup and restore operations over the linked virtual network are enabled. Defaults to `false`. */ readonly virtualNetworkBackupRestoreEnabled: pulumi.Output; /** * The subnet id which will be used by this Function App Slot for [regional virtual network integration](https://docs.microsoft.com/en-us/azure/app-service/overview-vnet-integration#regional-virtual-network-integration). * * > **Note:** The AzureRM Terraform provider provides regional virtual network integration via the standalone resource appServiceVirtualNetworkSwiftConnection and in-line within this resource using the `virtualNetworkSubnetId` property. You cannot use both methods simultaneously. If the virtual network is set via the resource `appServiceVirtualNetworkSwiftConnection` then `ignoreChanges` should be used in the function app slot configuration. * * > **Note:** Assigning the `virtualNetworkSubnetId` property requires [RBAC permissions on the subnet](https://docs.microsoft.com/en-us/azure/app-service/overview-vnet-integration#permissions) */ readonly virtualNetworkSubnetId: pulumi.Output; /** * Specifies whether traffic for the image pull should be routed over virtual network. Defaults to `false`. * * > **Note:** The feature can also be enabled via the app setting `WEBSITE_PULL_IMAGE_OVER_VNET`. The Setting is enabled by default for an app running in the App Service Environment. */ readonly vnetImagePullEnabled: pulumi.Output; /** * Should the default WebDeploy Basic Authentication publishing credentials enabled. Defaults to `true`. */ readonly webdeployPublishBasicAuthenticationEnabled: pulumi.Output; /** * Create a LinuxFunctionAppSlot resource with the given unique name, arguments, and options. * * @param name The _unique_ name of the resource. * @param args The arguments to use to populate this resource's properties. * @param opts A bag of options that control this resource's behavior. */ constructor(name: string, args: LinuxFunctionAppSlotArgs, opts?: pulumi.CustomResourceOptions); } /** * Input properties used for looking up and filtering LinuxFunctionAppSlot resources. */ export interface LinuxFunctionAppSlotState { /** * A map of key-value pairs for [App Settings](https://docs.microsoft.com/azure/azure-functions/functions-app-settings) and custom values. */ appSettings?: pulumi.Input<{ [key: string]: pulumi.Input; }>; /** * an `authSettings` block as detailed below. */ authSettings?: pulumi.Input; /** * an `authSettingsV2` block as detailed below. */ authSettingsV2?: pulumi.Input; /** * a `backup` block as detailed below. */ backup?: pulumi.Input; /** * Should built in logging be enabled. Configures `AzureWebJobsDashboard` app setting based on the configured storage setting. Defaults to `true`. */ builtinLoggingEnabled?: pulumi.Input; /** * Should the Function App Slot use Client Certificates. */ clientCertificateEnabled?: pulumi.Input; /** * Paths to exclude when using client certificates, separated by ; */ clientCertificateExclusionPaths?: pulumi.Input; /** * The mode of the Function App Slot's client certificates requirement for incoming requests. Possible values are `Required`, `Optional`, and `OptionalInteractiveUser`. Defaults to `Optional`. */ clientCertificateMode?: pulumi.Input; /** * a `connectionString` block as detailed below. */ connectionStrings?: pulumi.Input[]>; /** * Force disable the content share settings. */ contentShareForceDisabled?: pulumi.Input; /** * The identifier used by App Service to perform domain ownership verification via DNS TXT record. */ customDomainVerificationId?: pulumi.Input; /** * The amount of memory in gigabyte-seconds that your application is allowed to consume per day. Setting this value only affects function apps in Consumption Plans. Defaults to `0`. */ dailyMemoryTimeQuota?: pulumi.Input; /** * The default hostname of the Linux Function App Slot. */ defaultHostname?: pulumi.Input; /** * Is the Linux Function App Slot enabled. Defaults to `true`. */ enabled?: pulumi.Input; /** * Are the default FTP Basic Authentication publishing credentials enabled. Defaults to `true`. */ ftpPublishBasicAuthenticationEnabled?: pulumi.Input; /** * The ID of the Linux Function App this Slot is a member of. Changing this forces a new resource to be created. */ functionAppId?: pulumi.Input; /** * The runtime version associated with the Function App Slot. Defaults to `~4`. */ functionsExtensionVersion?: pulumi.Input; /** * The ID of the App Service Environment used by Function App Slot. */ hostingEnvironmentId?: pulumi.Input; /** * Can the Function App Slot only be accessed via HTTPS?. Defaults to `false`. */ httpsOnly?: pulumi.Input; /** * An `identity` block as detailed below. */ identity?: pulumi.Input; /** * The User Assigned Identity ID used for accessing KeyVault secrets. The identity must be assigned to the application in the `identity` block. [For more information see - Access vaults with a user-assigned identity](https://docs.microsoft.com/azure/app-service/app-service-key-vault-references#access-vaults-with-a-user-assigned-identity) */ keyVaultReferenceIdentityId?: pulumi.Input; /** * The Kind value for this Linux Function App Slot. */ kind?: pulumi.Input; /** * Specifies the name of the Function App Slot. Changing this forces a new resource to be created. */ name?: pulumi.Input; /** * A list of outbound IP addresses. For example `["52.23.25.3", "52.143.43.12"]` */ outboundIpAddressLists?: pulumi.Input[]>; /** * A comma separated list of outbound IP addresses as a string. For example `52.23.25.3,52.143.43.12`. */ outboundIpAddresses?: pulumi.Input; /** * A list of possible outbound IP addresses, not all of which are necessarily in use. This is a superset of `outboundIpAddressList`. For example `["52.23.25.3", "52.143.43.12"]`. */ possibleOutboundIpAddressLists?: pulumi.Input[]>; /** * A comma separated list of possible outbound IP addresses as a string. For example `52.23.25.3,52.143.43.12,52.143.43.17`. This is a superset of `outboundIpAddresses`. For example `["52.23.25.3", "52.143.43.12","52.143.43.17"]`. */ possibleOutboundIpAddresses?: pulumi.Input; /** * Should public network access be enabled for the Function App. Defaults to `true`. */ publicNetworkAccessEnabled?: pulumi.Input; /** * The ID of the Service Plan in which to run this slot. If not specified the same Service Plan as the Linux Function App will be used. */ servicePlanId?: pulumi.Input; /** * a `siteConfig` block as detailed below. */ siteConfig?: pulumi.Input; /** * A `siteCredential` block as defined below. */ siteCredentials?: pulumi.Input[]>; /** * The access key which will be used to access the storage account for the Function App Slot. */ storageAccountAccessKey?: pulumi.Input; /** * The backend storage account name which will be used by this Function App Slot. */ storageAccountName?: pulumi.Input; /** * One or more `storageAccount` blocks as defined below. */ storageAccounts?: pulumi.Input[]>; /** * The Key Vault Secret ID, optionally including version, that contains the Connection String to connect to the storage account for this Function App. * * > **Note:** `storageKeyVaultSecretId` cannot be used with `storageAccountName`. * * > **Note:** `storageKeyVaultSecretId` used without a version will use the latest version of the secret, however, the service can take up to 24h to pick up a rotation of the latest version. See the [official docs](https://docs.microsoft.com/azure/app-service/app-service-key-vault-references#rotation) for more information. */ storageKeyVaultSecretId?: pulumi.Input; /** * Should the Function App Slot use its Managed Identity to access storage. * * > **Note:** One of `storageAccountAccessKey` or `storageUsesManagedIdentity` must be specified when using `storageAccountName`. */ storageUsesManagedIdentity?: pulumi.Input; /** * A mapping of tags which should be assigned to the Linux Function App. */ tags?: pulumi.Input<{ [key: string]: pulumi.Input; }>; /** * Whether backup and restore operations over the linked virtual network are enabled. Defaults to `false`. */ virtualNetworkBackupRestoreEnabled?: pulumi.Input; /** * The subnet id which will be used by this Function App Slot for [regional virtual network integration](https://docs.microsoft.com/en-us/azure/app-service/overview-vnet-integration#regional-virtual-network-integration). * * > **Note:** The AzureRM Terraform provider provides regional virtual network integration via the standalone resource appServiceVirtualNetworkSwiftConnection and in-line within this resource using the `virtualNetworkSubnetId` property. You cannot use both methods simultaneously. If the virtual network is set via the resource `appServiceVirtualNetworkSwiftConnection` then `ignoreChanges` should be used in the function app slot configuration. * * > **Note:** Assigning the `virtualNetworkSubnetId` property requires [RBAC permissions on the subnet](https://docs.microsoft.com/en-us/azure/app-service/overview-vnet-integration#permissions) */ virtualNetworkSubnetId?: pulumi.Input; /** * Specifies whether traffic for the image pull should be routed over virtual network. Defaults to `false`. * * > **Note:** The feature can also be enabled via the app setting `WEBSITE_PULL_IMAGE_OVER_VNET`. The Setting is enabled by default for an app running in the App Service Environment. */ vnetImagePullEnabled?: pulumi.Input; /** * Should the default WebDeploy Basic Authentication publishing credentials enabled. Defaults to `true`. */ webdeployPublishBasicAuthenticationEnabled?: pulumi.Input; } /** * The set of arguments for constructing a LinuxFunctionAppSlot resource. */ export interface LinuxFunctionAppSlotArgs { /** * A map of key-value pairs for [App Settings](https://docs.microsoft.com/azure/azure-functions/functions-app-settings) and custom values. */ appSettings?: pulumi.Input<{ [key: string]: pulumi.Input; }>; /** * an `authSettings` block as detailed below. */ authSettings?: pulumi.Input; /** * an `authSettingsV2` block as detailed below. */ authSettingsV2?: pulumi.Input; /** * a `backup` block as detailed below. */ backup?: pulumi.Input; /** * Should built in logging be enabled. Configures `AzureWebJobsDashboard` app setting based on the configured storage setting. Defaults to `true`. */ builtinLoggingEnabled?: pulumi.Input; /** * Should the Function App Slot use Client Certificates. */ clientCertificateEnabled?: pulumi.Input; /** * Paths to exclude when using client certificates, separated by ; */ clientCertificateExclusionPaths?: pulumi.Input; /** * The mode of the Function App Slot's client certificates requirement for incoming requests. Possible values are `Required`, `Optional`, and `OptionalInteractiveUser`. Defaults to `Optional`. */ clientCertificateMode?: pulumi.Input; /** * a `connectionString` block as detailed below. */ connectionStrings?: pulumi.Input[]>; /** * Force disable the content share settings. */ contentShareForceDisabled?: pulumi.Input; /** * The amount of memory in gigabyte-seconds that your application is allowed to consume per day. Setting this value only affects function apps in Consumption Plans. Defaults to `0`. */ dailyMemoryTimeQuota?: pulumi.Input; /** * Is the Linux Function App Slot enabled. Defaults to `true`. */ enabled?: pulumi.Input; /** * Are the default FTP Basic Authentication publishing credentials enabled. Defaults to `true`. */ ftpPublishBasicAuthenticationEnabled?: pulumi.Input; /** * The ID of the Linux Function App this Slot is a member of. Changing this forces a new resource to be created. */ functionAppId: pulumi.Input; /** * The runtime version associated with the Function App Slot. Defaults to `~4`. */ functionsExtensionVersion?: pulumi.Input; /** * Can the Function App Slot only be accessed via HTTPS?. Defaults to `false`. */ httpsOnly?: pulumi.Input; /** * An `identity` block as detailed below. */ identity?: pulumi.Input; /** * The User Assigned Identity ID used for accessing KeyVault secrets. The identity must be assigned to the application in the `identity` block. [For more information see - Access vaults with a user-assigned identity](https://docs.microsoft.com/azure/app-service/app-service-key-vault-references#access-vaults-with-a-user-assigned-identity) */ keyVaultReferenceIdentityId?: pulumi.Input; /** * Specifies the name of the Function App Slot. Changing this forces a new resource to be created. */ name?: pulumi.Input; /** * Should public network access be enabled for the Function App. Defaults to `true`. */ publicNetworkAccessEnabled?: pulumi.Input; /** * The ID of the Service Plan in which to run this slot. If not specified the same Service Plan as the Linux Function App will be used. */ servicePlanId?: pulumi.Input; /** * a `siteConfig` block as detailed below. */ siteConfig: pulumi.Input; /** * The access key which will be used to access the storage account for the Function App Slot. */ storageAccountAccessKey?: pulumi.Input; /** * The backend storage account name which will be used by this Function App Slot. */ storageAccountName?: pulumi.Input; /** * One or more `storageAccount` blocks as defined below. */ storageAccounts?: pulumi.Input[]>; /** * The Key Vault Secret ID, optionally including version, that contains the Connection String to connect to the storage account for this Function App. * * > **Note:** `storageKeyVaultSecretId` cannot be used with `storageAccountName`. * * > **Note:** `storageKeyVaultSecretId` used without a version will use the latest version of the secret, however, the service can take up to 24h to pick up a rotation of the latest version. See the [official docs](https://docs.microsoft.com/azure/app-service/app-service-key-vault-references#rotation) for more information. */ storageKeyVaultSecretId?: pulumi.Input; /** * Should the Function App Slot use its Managed Identity to access storage. * * > **Note:** One of `storageAccountAccessKey` or `storageUsesManagedIdentity` must be specified when using `storageAccountName`. */ storageUsesManagedIdentity?: pulumi.Input; /** * A mapping of tags which should be assigned to the Linux Function App. */ tags?: pulumi.Input<{ [key: string]: pulumi.Input; }>; /** * Whether backup and restore operations over the linked virtual network are enabled. Defaults to `false`. */ virtualNetworkBackupRestoreEnabled?: pulumi.Input; /** * The subnet id which will be used by this Function App Slot for [regional virtual network integration](https://docs.microsoft.com/en-us/azure/app-service/overview-vnet-integration#regional-virtual-network-integration). * * > **Note:** The AzureRM Terraform provider provides regional virtual network integration via the standalone resource appServiceVirtualNetworkSwiftConnection and in-line within this resource using the `virtualNetworkSubnetId` property. You cannot use both methods simultaneously. If the virtual network is set via the resource `appServiceVirtualNetworkSwiftConnection` then `ignoreChanges` should be used in the function app slot configuration. * * > **Note:** Assigning the `virtualNetworkSubnetId` property requires [RBAC permissions on the subnet](https://docs.microsoft.com/en-us/azure/app-service/overview-vnet-integration#permissions) */ virtualNetworkSubnetId?: pulumi.Input; /** * Specifies whether traffic for the image pull should be routed over virtual network. Defaults to `false`. * * > **Note:** The feature can also be enabled via the app setting `WEBSITE_PULL_IMAGE_OVER_VNET`. The Setting is enabled by default for an app running in the App Service Environment. */ vnetImagePullEnabled?: pulumi.Input; /** * Should the default WebDeploy Basic Authentication publishing credentials enabled. Defaults to `true`. */ webdeployPublishBasicAuthenticationEnabled?: pulumi.Input; }