import * as pulumi from "@pulumi/pulumi";
import * as inputs from "../types/input";
import * as outputs from "../types/output";
/**
 * Manages a Backup Instance to back up a Kubernetes Cluster.
 *
 * ## Example Usage
 *
 * ```typescript
 * import * as pulumi from "@pulumi/pulumi";
 * import * as azure from "@pulumi/azure";
 *
 * const current = azure.core.getClientConfig({});
 * const example = new azure.core.ResourceGroup("example", {
 *     name: "example",
 *     location: "West Europe",
 * });
 * const snap = new azure.core.ResourceGroup("snap", {
 *     name: "example-snap",
 *     location: "West Europe",
 * });
 * const exampleBackupVault = new azure.dataprotection.BackupVault("example", {
 *     name: "example",
 *     resourceGroupName: example.name,
 *     location: example.location,
 *     datastoreType: "VaultStore",
 *     redundancy: "LocallyRedundant",
 *     identity: {
 *         type: "SystemAssigned",
 *     },
 * });
 * const exampleKubernetesCluster = new azure.containerservice.KubernetesCluster("example", {
 *     name: "example",
 *     location: example.location,
 *     resourceGroupName: example.name,
 *     dnsPrefix: "dns",
 *     defaultNodePool: {
 *         name: "default",
 *         nodeCount: 1,
 *         vmSize: "Standard_DS2_v2",
 *         hostEncryptionEnabled: true,
 *     },
 *     identity: {
 *         type: "SystemAssigned",
 *     },
 * });
 * const aksClusterTrustedAccess = new azure.containerservice.ClusterTrustedAccessRoleBinding("aks_cluster_trusted_access", {
 *     kubernetesClusterId: exampleKubernetesCluster.id,
 *     name: "example",
 *     roles: ["Microsoft.DataProtection/backupVaults/backup-operator"],
 *     sourceResourceId: exampleBackupVault.id,
 * });
 * const exampleAccount = new azure.storage.Account("example", {
 *     name: "example",
 *     resourceGroupName: example.name,
 *     location: example.location,
 *     accountTier: "Standard",
 *     accountReplicationType: "LRS",
 * });
 * const exampleContainer = new azure.storage.Container("example", {
 *     name: "example",
 *     storageAccountName: exampleAccount.name,
 *     containerAccessType: "private",
 * });
 * const exampleKubernetesClusterExtension = new azure.containerservice.KubernetesClusterExtension("example", {
 *     name: "example",
 *     clusterId: exampleKubernetesCluster.id,
 *     extensionType: "Microsoft.DataProtection.Kubernetes",
 *     releaseTrain: "stable",
 *     releaseNamespace: "dataprotection-microsoft",
 *     configurationSettings: {
 *         "configuration.backupStorageLocation.bucket": exampleContainer.name,
 *         "configuration.backupStorageLocation.config.resourceGroup": example.name,
 *         "configuration.backupStorageLocation.config.storageAccount": exampleAccount.name,
 *         "configuration.backupStorageLocation.config.subscriptionId": current.then(current => current.subscriptionId),
 *         "credentials.tenantId": current.then(current => current.tenantId),
 *     },
 * });
 * const testExtensionAndStorageAccountPermission = new azure.authorization.Assignment("test_extension_and_storage_account_permission", {
 *     scope: exampleAccount.id,
 *     roleDefinitionName: "Storage Account Contributor",
 *     principalId: exampleKubernetesClusterExtension.aksAssignedIdentities.apply(aksAssignedIdentities => aksAssignedIdentities[0].principalId),
 * });
 * const testVaultMsiReadOnCluster = new azure.authorization.Assignment("test_vault_msi_read_on_cluster", {
 *     scope: exampleKubernetesCluster.id,
 *     roleDefinitionName: "Reader",
 *     principalId: exampleBackupVault.identity.apply(identity => identity?.principalId),
 * });
 * const testVaultMsiReadOnSnapRg = new azure.authorization.Assignment("test_vault_msi_read_on_snap_rg", {
 *     scope: snap.id,
 *     roleDefinitionName: "Reader",
 *     principalId: exampleBackupVault.identity.apply(identity => identity?.principalId),
 * });
 * const testVaultMsiSnapshotContributorOnSnapRg = new azure.authorization.Assignment("test_vault_msi_snapshot_contributor_on_snap_rg", {
 *     scope: snap.id,
 *     roleDefinitionName: "Disk Snapshot Contributor",
 *     principalId: exampleBackupVault.identity.apply(identity => identity?.principalId),
 * });
 * const testVaultDataOperatorOnSnapRg = new azure.authorization.Assignment("test_vault_data_operator_on_snap_rg", {
 *     scope: snap.id,
 *     roleDefinitionName: "Data Operator for Managed Disks",
 *     principalId: exampleBackupVault.identity.apply(identity => identity?.principalId),
 * });
 * const testVaultDataContributorOnStorage = new azure.authorization.Assignment("test_vault_data_contributor_on_storage", {
 *     scope: exampleAccount.id,
 *     roleDefinitionName: "Storage Blob Data Contributor",
 *     principalId: exampleBackupVault.identity.apply(identity => identity?.principalId),
 * });
 * const testClusterMsiContributorOnSnapRg = new azure.authorization.Assignment("test_cluster_msi_contributor_on_snap_rg", {
 *     scope: snap.id,
 *     roleDefinitionName: "Contributor",
 *     principalId: exampleKubernetesCluster.identity.apply(identity => identity?.principalId),
 * });
 * const exampleBackupPolicyKubernetesCluster = new azure.dataprotection.BackupPolicyKubernetesCluster("example", {
 *     name: "example",
 *     resourceGroupName: example.name,
 *     vaultName: exampleBackupVault.name,
 *     backupRepeatingTimeIntervals: ["R/2023-05-23T02:30:00+00:00/P1W"],
 *     retentionRules: [{
 *         name: "Daily",
 *         priority: 25,
 *         lifeCycles: [{
 *             duration: "P84D",
 *             dataStoreType: "OperationalStore",
 *         }],
 *         criteria: {
 *             daysOfWeeks: ["Thursday"],
 *             monthsOfYears: ["November"],
 *             weeksOfMonths: ["First"],
 *             scheduledBackupTimes: ["2023-05-23T02:30:00Z"],
 *         },
 *     }],
 *     defaultRetentionRule: {
 *         lifeCycles: [{
 *             duration: "P14D",
 *             dataStoreType: "OperationalStore",
 *         }],
 *     },
 * });
 * const exampleBackupInstanceKubernetesCluster = new azure.dataprotection.BackupInstanceKubernetesCluster("example", {
 *     name: "example",
 *     location: example.location,
 *     vaultId: exampleBackupVault.id,
 *     kubernetesClusterId: exampleKubernetesCluster.id,
 *     snapshotResourceGroupName: snap.name,
 *     backupPolicyId: exampleBackupPolicyKubernetesCluster.id,
 *     backupDatasourceParameters: {
 *         excludedNamespaces: ["test-excluded-namespaces"],
 *         excludedResourceTypes: ["exvolumesnapshotcontents.snapshot.storage.k8s.io"],
 *         clusterScopedResourcesEnabled: true,
 *         includedNamespaces: ["test-included-namespaces"],
 *         includedResourceTypes: ["involumesnapshotcontents.snapshot.storage.k8s.io"],
 *         labelSelectors: ["kubernetes.io/metadata.name:test"],
 *         volumeSnapshotEnabled: true,
 *     },
 * }, {
 *     dependsOn: [
 *         testExtensionAndStorageAccountPermission,
 *         testVaultMsiReadOnCluster,
 *         testVaultMsiReadOnSnapRg,
 *         testClusterMsiContributorOnSnapRg,
 *         testVaultMsiSnapshotContributorOnSnapRg,
 *         testVaultDataOperatorOnSnapRg,
 *         testVaultDataContributorOnStorage,
 *     ],
 * });
 * ```
 *
 * ## API Providers
 *
 * <!-- This section is generated, changes will be overwritten -->
 * This resource uses the following Azure API Providers:
 *
 * * `Microsoft.DataProtection` - 2025-07-01
 *
 * ## Import
 *
 * Backup Instance Kubernetes Cluster can be imported using the `resource id`, e.g.
 *
 * ```sh
 * $ pulumi import azure:dataprotection/backupInstanceKubernetesCluster:BackupInstanceKubernetesCluster example /subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/group1/providers/Microsoft.DataProtection/backupVaults/vault1/backupInstances/backupInstance1
 * ```
 */
export declare class BackupInstanceKubernetesCluster extends pulumi.CustomResource {
    /**
     * Get an existing BackupInstanceKubernetesCluster resource's state with the given name, ID, and optional extra
     * properties used to qualify the lookup.
     *
     * @param name The _unique_ name of the resulting resource.
     * @param id The _unique_ provider ID of the resource to lookup.
     * @param state Any extra arguments used during the lookup.
     * @param opts Optional settings to control the behavior of the CustomResource.
     */
    static get(name: string, id: pulumi.Input<pulumi.ID>, state?: BackupInstanceKubernetesClusterState, opts?: pulumi.CustomResourceOptions): BackupInstanceKubernetesCluster;
    /**
     * Returns true if the given object is an instance of BackupInstanceKubernetesCluster.  This is designed to work even
     * when multiple copies of the Pulumi SDK have been loaded into the same process.
     */
    static isInstance(obj: any): obj is BackupInstanceKubernetesCluster;
    /**
     * A `backupDatasourceParameters` block as defined below. Changing this forces a new resource to be created.
     */
    readonly backupDatasourceParameters: pulumi.Output<outputs.dataprotection.BackupInstanceKubernetesClusterBackupDatasourceParameters | undefined>;
    /**
     * The ID of the Backup Policy. Changing this forces a new resource to be created.
     */
    readonly backupPolicyId: pulumi.Output<string>;
    /**
     * The ID of the Kubernetes Cluster. Changing this forces a new resource to be created.
     */
    readonly kubernetesClusterId: pulumi.Output<string>;
    /**
     * The location of the Backup Instance Kubernetes Cluster. Changing this forces a new resource to be created.
     */
    readonly location: pulumi.Output<string>;
    /**
     * The name which should be used for this Backup Instance Kubernetes Cluster. Changing this forces a new resource to be created.
     */
    readonly name: pulumi.Output<string>;
    /**
     * The protection state of the Backup Instance Kubernetes Cluster.
     */
    readonly protectionState: pulumi.Output<string>;
    /**
     * The name of the Resource Group where snapshots are stored. Changing this forces a new resource to be created.
     */
    readonly snapshotResourceGroupName: pulumi.Output<string>;
    /**
     * The ID of the Backup Vault within which the Backup Instance Kubernetes Cluster should exist. Changing this forces a new resource to be created.
     */
    readonly vaultId: pulumi.Output<string>;
    /**
     * Create a BackupInstanceKubernetesCluster resource with the given unique name, arguments, and options.
     *
     * @param name The _unique_ name of the resource.
     * @param args The arguments to use to populate this resource's properties.
     * @param opts A bag of options that control this resource's behavior.
     */
    constructor(name: string, args: BackupInstanceKubernetesClusterArgs, opts?: pulumi.CustomResourceOptions);
}
/**
 * Input properties used for looking up and filtering BackupInstanceKubernetesCluster resources.
 */
export interface BackupInstanceKubernetesClusterState {
    /**
     * A `backupDatasourceParameters` block as defined below. Changing this forces a new resource to be created.
     */
    backupDatasourceParameters?: pulumi.Input<inputs.dataprotection.BackupInstanceKubernetesClusterBackupDatasourceParameters | undefined>;
    /**
     * The ID of the Backup Policy. Changing this forces a new resource to be created.
     */
    backupPolicyId?: pulumi.Input<string | undefined>;
    /**
     * The ID of the Kubernetes Cluster. Changing this forces a new resource to be created.
     */
    kubernetesClusterId?: pulumi.Input<string | undefined>;
    /**
     * The location of the Backup Instance Kubernetes Cluster. Changing this forces a new resource to be created.
     */
    location?: pulumi.Input<string | undefined>;
    /**
     * The name which should be used for this Backup Instance Kubernetes Cluster. Changing this forces a new resource to be created.
     */
    name?: pulumi.Input<string | undefined>;
    /**
     * The protection state of the Backup Instance Kubernetes Cluster.
     */
    protectionState?: pulumi.Input<string | undefined>;
    /**
     * The name of the Resource Group where snapshots are stored. Changing this forces a new resource to be created.
     */
    snapshotResourceGroupName?: pulumi.Input<string | undefined>;
    /**
     * The ID of the Backup Vault within which the Backup Instance Kubernetes Cluster should exist. Changing this forces a new resource to be created.
     */
    vaultId?: pulumi.Input<string | undefined>;
}
/**
 * The set of arguments for constructing a BackupInstanceKubernetesCluster resource.
 */
export interface BackupInstanceKubernetesClusterArgs {
    /**
     * A `backupDatasourceParameters` block as defined below. Changing this forces a new resource to be created.
     */
    backupDatasourceParameters?: pulumi.Input<inputs.dataprotection.BackupInstanceKubernetesClusterBackupDatasourceParameters | undefined>;
    /**
     * The ID of the Backup Policy. Changing this forces a new resource to be created.
     */
    backupPolicyId: pulumi.Input<string>;
    /**
     * The ID of the Kubernetes Cluster. Changing this forces a new resource to be created.
     */
    kubernetesClusterId: pulumi.Input<string>;
    /**
     * The location of the Backup Instance Kubernetes Cluster. Changing this forces a new resource to be created.
     */
    location?: pulumi.Input<string | undefined>;
    /**
     * The name which should be used for this Backup Instance Kubernetes Cluster. Changing this forces a new resource to be created.
     */
    name?: pulumi.Input<string | undefined>;
    /**
     * The name of the Resource Group where snapshots are stored. Changing this forces a new resource to be created.
     */
    snapshotResourceGroupName: pulumi.Input<string>;
    /**
     * The ID of the Backup Vault within which the Backup Instance Kubernetes Cluster should exist. Changing this forces a new resource to be created.
     */
    vaultId: pulumi.Input<string>;
}
//# sourceMappingURL=backupInstanceKubernetesCluster.d.ts.map