Components

The package exposes provider-specific publisher components. Each page
lists required inputs, common optional inputs, outputs, and examples for
Pulumi YAML, TypeScript, Python, C#, Go, Java, and Rust.

The Java examples use the published
com.pulumi:netskope-publisher
SDK. The Rust examples use the published
pulumi-netskope-publisher
crate plus Pulumi Gestalt. See
SDK installation
for package manager setup.

• AWS
• Azure
• GCP
• Kubernetes
• vSphere
• ESXi Native
• Hcloud
• Nutanix
• OpenStack
• OVH
• Scaleway
• OCI
• Alicloud
• Proxmox VE
• DigitalOcean
• Vultr
• Exoscale
• UpCloud
• Stackit
• Equinix Metal
• Outscale
• OpenTelekomCloud
• TencentCloud
• Yandex Cloud
• Hyper-V (experimental)
• Netskope Registration

NPA application resources:

• PrivateApp registers a Netskope Private Access private application.
• TagPublisherAssignment reconciles private app tags to placement-labeled publisher pools.
• RealtimeProtectionPolicy manages one NPA realtime protection rule for app access.

The TypeScript package and Go executable provider both support managed
Netskope registration or pre-created registration tokens. Kubernetes
deployments additionally support chart API enrollment.

Shared inputs

Input	Description
tenantUrl	Netskope tenant URL. Required unless registrations is supplied.
bearerToken	Secret Netskope API token. Required unless registrations is supplied.
registrations	Pre-created publisher IDs and registration tokens keyed by publisher name.
namePrefix	Prefix used when deriving names. Defaults to npa-publisher.
names	Explicit publisher names. Overrides namePrefix and replicas.
replicas	Number of derived names when names is omitted.
placementLabels	Pulumi-side labels used to select publisher pools for private app assignment.
tags	Platform tags or labels where supported.
wizardPath	Absolute path to npa_publisher_wizard.

ESXi Native is direct-host ESXi support and does not replace the vSphere
component. Bootstrap-mode providers use Ubuntu 22.04 images or templates
and provider-specific user-data placement.

VM-backed cloud providers accept bootstrap and install-user controls:
bootstrap, bootstrapUrl, nonat, installUser,
installUserPassword, installUserPasswordIsHash,
installUserSshAuthorizedKeys, deleteDefaultUser, and
guestNetworkInterface.

Shared outputs

Output	Description
publisherNames	Resolved publisher names.
publishers	Secret map keyed by publisher name. Includes publisherId, registrationToken, vmId, privateIp, publicIp, and placementLabels when applicable.

Kubernetes also returns helmReleaseNames.