@pulumi/cloudflare 4.6.0 → 4.7.0-alpha.1653338920

package/ruleset.d.ts

@@ -165,6 +165,27 @@ import { input as inputs, output as outputs } from "./types";
  *     }],
  *     zoneId: "cb029e245cfdd66dc8d2e570d5dd3322",
  * });
+ * // Change origin for an API route
+ * const httpOriginExample = new cloudflare.Ruleset("http_origin_example", {
+ *     description: "Change origin for a route",
+ *     kind: "zone",
+ *     name: "Change to some origin",
+ *     phase: "http_request_origin",
+ *     rules: [{
+ *         action: "route",
+ *         actionParameters: {
+ *             hostHeader: "some.host",
+ *             origin: {
+ *                 host: "some.host",
+ *                 port: 80,
+ *             },
+ *         },
+ *         description: "change origin to some.host",
+ *         enabled: true,
+ *         expression: "(http.request.uri.path matches \"^/api/\")",
+ *     }],
+ *     zoneId: "cb029e245cfdd66dc8d2e570d5dd3322",
+ * });
  * ```
  *
  * ## Import
@@ -204,7 +225,7 @@ export declare class Ruleset extends pulumi.CustomResource {
      */
     readonly name: pulumi.Output<string>;
     /**
-     * Point in the request/response lifecycle where the ruleset will be created. Valid values are `"ddosL4"`, `"ddosL7"`, `"httpRequestFirewallCustom"`, `"httpRequestFirewallManaged"`, `"httpRequestLateTransform"`, `"httpResponseHeadersTransform"`, `"httpRequestMain"`, `"httpRequestSanitize"`, `"httpRequestTransform"`, `"httpResponseFirewallManaged"`, `"magicTransit"`, or `"httpRatelimit"`.
+     * Point in the request/response lifecycle where the ruleset will be created. Valid values are `"ddosL4"`, `"ddosL7"`, `"httpRequestFirewallCustom"`, `"httpRequestFirewallManaged"`, `"httpRequestLateTransform"`, `"httpResponseHeadersTransform"`, `"httpRequestOrigin"`, `"httpRequestMain"`, `"httpRequestSanitize"`, `"httpRequestTransform"`, `"httpResponseFirewallManaged"`, `"magicTransit"`, or `"httpRatelimit"`.
      */
     readonly phase: pulumi.Output<string>;
     /**
@@ -249,7 +270,7 @@ export interface RulesetState {
      */
     name?: pulumi.Input<string>;
     /**
-     * Point in the request/response lifecycle where the ruleset will be created. Valid values are `"ddosL4"`, `"ddosL7"`, `"httpRequestFirewallCustom"`, `"httpRequestFirewallManaged"`, `"httpRequestLateTransform"`, `"httpResponseHeadersTransform"`, `"httpRequestMain"`, `"httpRequestSanitize"`, `"httpRequestTransform"`, `"httpResponseFirewallManaged"`, `"magicTransit"`, or `"httpRatelimit"`.
+     * Point in the request/response lifecycle where the ruleset will be created. Valid values are `"ddosL4"`, `"ddosL7"`, `"httpRequestFirewallCustom"`, `"httpRequestFirewallManaged"`, `"httpRequestLateTransform"`, `"httpResponseHeadersTransform"`, `"httpRequestOrigin"`, `"httpRequestMain"`, `"httpRequestSanitize"`, `"httpRequestTransform"`, `"httpResponseFirewallManaged"`, `"magicTransit"`, or `"httpRatelimit"`.
      */
     phase?: pulumi.Input<string>;
     /**
@@ -286,7 +307,7 @@ export interface RulesetArgs {
      */
     name: pulumi.Input<string>;
     /**
-     * Point in the request/response lifecycle where the ruleset will be created. Valid values are `"ddosL4"`, `"ddosL7"`, `"httpRequestFirewallCustom"`, `"httpRequestFirewallManaged"`, `"httpRequestLateTransform"`, `"httpResponseHeadersTransform"`, `"httpRequestMain"`, `"httpRequestSanitize"`, `"httpRequestTransform"`, `"httpResponseFirewallManaged"`, `"magicTransit"`, or `"httpRatelimit"`.
+     * Point in the request/response lifecycle where the ruleset will be created. Valid values are `"ddosL4"`, `"ddosL7"`, `"httpRequestFirewallCustom"`, `"httpRequestFirewallManaged"`, `"httpRequestLateTransform"`, `"httpResponseHeadersTransform"`, `"httpRequestOrigin"`, `"httpRequestMain"`, `"httpRequestSanitize"`, `"httpRequestTransform"`, `"httpResponseFirewallManaged"`, `"magicTransit"`, or `"httpRatelimit"`.
      */
     phase: pulumi.Input<string>;
     /**

package/ruleset.js

@@ -170,6 +170,27 @@ const utilities = require("./utilities");
  *     }],
  *     zoneId: "cb029e245cfdd66dc8d2e570d5dd3322",
  * });
+ * // Change origin for an API route
+ * const httpOriginExample = new cloudflare.Ruleset("http_origin_example", {
+ *     description: "Change origin for a route",
+ *     kind: "zone",
+ *     name: "Change to some origin",
+ *     phase: "http_request_origin",
+ *     rules: [{
+ *         action: "route",
+ *         actionParameters: {
+ *             hostHeader: "some.host",
+ *             origin: {
+ *                 host: "some.host",
+ *                 port: 80,
+ *             },
+ *         },
+ *         description: "change origin to some.host",
+ *         enabled: true,
+ *         expression: "(http.request.uri.path matches \"^/api/\")",
+ *     }],
+ *     zoneId: "cb029e245cfdd66dc8d2e570d5dd3322",
+ * });
  * ```
  *
  * ## Import

package/ruleset.js.map

@@ -1 +1 @@
-{"version":3,"file":"ruleset.js","sourceRoot":"","sources":["../ruleset.ts"],"names":[],"mappings":";AAAA,wFAAwF;AACxF,iFAAiF;;;AAEjF,yCAAyC;AAEzC,yCAAyC;AAEzC;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;GA0KG;AACH,MAAa,OAAQ,SAAQ,MAAM,CAAC,cAAc;IAqE9C,YAAY,IAAY,EAAE,WAAwC,EAAE,IAAmC;QACnG,IAAI,cAAc,GAAkB,EAAE,CAAC;QACvC,IAAI,GAAG,IAAI,IAAI,EAAE,CAAC;QAClB,IAAI,IAAI,CAAC,EAAE,EAAE;YACT,MAAM,KAAK,GAAG,WAAuC,CAAC;YACtD,cAAc,CAAC,WAAW,CAAC,GAAG,KAAK,CAAC,CAAC,CAAC,KAAK,CAAC,SAAS,CAAC,CAAC,CAAC,SAAS,CAAC;YAClE,cAAc,CAAC,aAAa,CAAC,GAAG,KAAK,CAAC,CAAC,CAAC,KAAK,CAAC,WAAW,CAAC,CAAC,CAAC,SAAS,CAAC;YACtE,cAAc,CAAC,MAAM,CAAC,GAAG,KAAK,CAAC,CAAC,CAAC,KAAK,CAAC,IAAI,CAAC,CAAC,CAAC,SAAS,CAAC;YACxD,cAAc,CAAC,MAAM,CAAC,GAAG,KAAK,CAAC,CAAC,CAAC,KAAK,CAAC,IAAI,CAAC,CAAC,CAAC,SAAS,CAAC;YACxD,cAAc,CAAC,OAAO,CAAC,GAAG,KAAK,CAAC,CAAC,CAAC,KAAK,CAAC,KAAK,CAAC,CAAC,CAAC,SAAS,CAAC;YAC1D,cAAc,CAAC,OAAO,CAAC,GAAG,KAAK,CAAC,CAAC,CAAC,KAAK,CAAC,KAAK,CAAC,CAAC,CAAC,SAAS,CAAC;YAC1D,cAAc,CAAC,0BAA0B,CAAC,GAAG,KAAK,CAAC,CAAC,CAAC,KAAK,CAAC,wBAAwB,CAAC,CAAC,CAAC,SAAS,CAAC;YAChG,cAAc,CAAC,QAAQ,CAAC,GAAG,KAAK,CAAC,CAAC,CAAC,KAAK,CAAC,MAAM,CAAC,CAAC,CAAC,SAAS,CAAC;SAC/D;aAAM;YACH,MAAM,IAAI,GAAG,WAAsC,CAAC;YACpD,IAAI,CAAC,CAAC,IAAI,IAAI,IAAI,CAAC,IAAI,KAAK,SAAS,CAAC,IAAI,CAAC,IAAI,CAAC,GAAG,EAAE;gBACjD,MAAM,IAAI,KAAK,CAAC,kCAAkC,CAAC,CAAC;aACvD;YACD,IAAI,CAAC,CAAC,IAAI,IAAI,IAAI,CAAC,IAAI,KAAK,SAAS,CAAC,IAAI,CAAC,IAAI,CAAC,GAAG,EAAE;gBACjD,MAAM,IAAI,KAAK,CAAC,kCAAkC,CAAC,CAAC;aACvD;YACD,IAAI,CAAC,CAAC,IAAI,IAAI,IAAI,CAAC,KAAK,KAAK,SAAS,CAAC,IAAI,CAAC,IAAI,CAAC,GAAG,EAAE;gBAClD,MAAM,IAAI,KAAK,CAAC,mCAAmC,CAAC,CAAC;aACxD;YACD,cAAc,CAAC,WAAW,CAAC,GAAG,IAAI,CAAC,CAAC,CAAC,IAAI,CAAC,SAAS,CAAC,CAAC,CAAC,SAAS,CAAC;YAChE,cAAc,CAAC,aAAa,CAAC,GAAG,IAAI,CAAC,CAAC,CAAC,IAAI,CAAC,WAAW,CAAC,CAAC,CAAC,SAAS,CAAC;YACpE,cAAc,CAAC,MAAM,CAAC,GAAG,IAAI,CAAC,CAAC,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC,CAAC,SAAS,CAAC;YACtD,cAAc,CAAC,MAAM,CAAC,GAAG,IAAI,CAAC,CAAC,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC,CAAC,SAAS,CAAC;YACtD,cAAc,CAAC,OAAO,CAAC,GAAG,IAAI,CAAC,CAAC,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC,CAAC,SAAS,CAAC;YACxD,cAAc,CAAC,OAAO,CAAC,GAAG,IAAI,CAAC,CAAC,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC,CAAC,SAAS,CAAC;YACxD,cAAc,CAAC,0BAA0B,CAAC,GAAG,IAAI,CAAC,CAAC,CAAC,IAAI,CAAC,wBAAwB,CAAC,CAAC,CAAC,SAAS,CAAC;YAC9F,cAAc,CAAC,QAAQ,CAAC,GAAG,IAAI,CAAC,CAAC,CAAC,IAAI,CAAC,MAAM,CAAC,CAAC,CAAC,SAAS,CAAC;SAC7D;QACD,IAAI,GAAG,MAAM,CAAC,YAAY,CAAC,SAAS,CAAC,oBAAoB,EAAE,EAAE,IAAI,CAAC,CAAC;QACnE,KAAK,CAAC,OAAO,CAAC,YAAY,EAAE,IAAI,EAAE,cAAc,EAAE,IAAI,CAAC,CAAC;IAC5D,CAAC;IAvGD;;;;;;;;OAQG;IACI,MAAM,CAAC,GAAG,CAAC,IAAY,EAAE,EAA2B,EAAE,KAAoB,EAAE,IAAmC;QAClH,OAAO,IAAI,OAAO,CAAC,IAAI,EAAO,KAAK,kCAAO,IAAI,KAAE,EAAE,EAAE,EAAE,IAAG,CAAC;IAC9D,CAAC;IAKD;;;OAGG;IACI,MAAM,CAAC,UAAU,CAAC,GAAQ;QAC7B,IAAI,GAAG,KAAK,SAAS,IAAI,GAAG,KAAK,IAAI,EAAE;YACnC,OAAO,KAAK,CAAC;SAChB;QACD,OAAO,GAAG,CAAC,cAAc,CAAC,KAAK,OAAO,CAAC,YAAY,CAAC;IACxD,CAAC;;AA1BL,0BAyGC;AA3FG,gBAAgB;AACO,oBAAY,GAAG,kCAAkC,CAAC"}
+{"version":3,"file":"ruleset.js","sourceRoot":"","sources":["../ruleset.ts"],"names":[],"mappings":";AAAA,wFAAwF;AACxF,iFAAiF;;;AAEjF,yCAAyC;AAEzC,yCAAyC;AAEzC;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;GA+LG;AACH,MAAa,OAAQ,SAAQ,MAAM,CAAC,cAAc;IAqE9C,YAAY,IAAY,EAAE,WAAwC,EAAE,IAAmC;QACnG,IAAI,cAAc,GAAkB,EAAE,CAAC;QACvC,IAAI,GAAG,IAAI,IAAI,EAAE,CAAC;QAClB,IAAI,IAAI,CAAC,EAAE,EAAE;YACT,MAAM,KAAK,GAAG,WAAuC,CAAC;YACtD,cAAc,CAAC,WAAW,CAAC,GAAG,KAAK,CAAC,CAAC,CAAC,KAAK,CAAC,SAAS,CAAC,CAAC,CAAC,SAAS,CAAC;YAClE,cAAc,CAAC,aAAa,CAAC,GAAG,KAAK,CAAC,CAAC,CAAC,KAAK,CAAC,WAAW,CAAC,CAAC,CAAC,SAAS,CAAC;YACtE,cAAc,CAAC,MAAM,CAAC,GAAG,KAAK,CAAC,CAAC,CAAC,KAAK,CAAC,IAAI,CAAC,CAAC,CAAC,SAAS,CAAC;YACxD,cAAc,CAAC,MAAM,CAAC,GAAG,KAAK,CAAC,CAAC,CAAC,KAAK,CAAC,IAAI,CAAC,CAAC,CAAC,SAAS,CAAC;YACxD,cAAc,CAAC,OAAO,CAAC,GAAG,KAAK,CAAC,CAAC,CAAC,KAAK,CAAC,KAAK,CAAC,CAAC,CAAC,SAAS,CAAC;YAC1D,cAAc,CAAC,OAAO,CAAC,GAAG,KAAK,CAAC,CAAC,CAAC,KAAK,CAAC,KAAK,CAAC,CAAC,CAAC,SAAS,CAAC;YAC1D,cAAc,CAAC,0BAA0B,CAAC,GAAG,KAAK,CAAC,CAAC,CAAC,KAAK,CAAC,wBAAwB,CAAC,CAAC,CAAC,SAAS,CAAC;YAChG,cAAc,CAAC,QAAQ,CAAC,GAAG,KAAK,CAAC,CAAC,CAAC,KAAK,CAAC,MAAM,CAAC,CAAC,CAAC,SAAS,CAAC;SAC/D;aAAM;YACH,MAAM,IAAI,GAAG,WAAsC,CAAC;YACpD,IAAI,CAAC,CAAC,IAAI,IAAI,IAAI,CAAC,IAAI,KAAK,SAAS,CAAC,IAAI,CAAC,IAAI,CAAC,GAAG,EAAE;gBACjD,MAAM,IAAI,KAAK,CAAC,kCAAkC,CAAC,CAAC;aACvD;YACD,IAAI,CAAC,CAAC,IAAI,IAAI,IAAI,CAAC,IAAI,KAAK,SAAS,CAAC,IAAI,CAAC,IAAI,CAAC,GAAG,EAAE;gBACjD,MAAM,IAAI,KAAK,CAAC,kCAAkC,CAAC,CAAC;aACvD;YACD,IAAI,CAAC,CAAC,IAAI,IAAI,IAAI,CAAC,KAAK,KAAK,SAAS,CAAC,IAAI,CAAC,IAAI,CAAC,GAAG,EAAE;gBAClD,MAAM,IAAI,KAAK,CAAC,mCAAmC,CAAC,CAAC;aACxD;YACD,cAAc,CAAC,WAAW,CAAC,GAAG,IAAI,CAAC,CAAC,CAAC,IAAI,CAAC,SAAS,CAAC,CAAC,CAAC,SAAS,CAAC;YAChE,cAAc,CAAC,aAAa,CAAC,GAAG,IAAI,CAAC,CAAC,CAAC,IAAI,CAAC,WAAW,CAAC,CAAC,CAAC,SAAS,CAAC;YACpE,cAAc,CAAC,MAAM,CAAC,GAAG,IAAI,CAAC,CAAC,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC,CAAC,SAAS,CAAC;YACtD,cAAc,CAAC,MAAM,CAAC,GAAG,IAAI,CAAC,CAAC,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC,CAAC,SAAS,CAAC;YACtD,cAAc,CAAC,OAAO,CAAC,GAAG,IAAI,CAAC,CAAC,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC,CAAC,SAAS,CAAC;YACxD,cAAc,CAAC,OAAO,CAAC,GAAG,IAAI,CAAC,CAAC,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC,CAAC,SAAS,CAAC;YACxD,cAAc,CAAC,0BAA0B,CAAC,GAAG,IAAI,CAAC,CAAC,CAAC,IAAI,CAAC,wBAAwB,CAAC,CAAC,CAAC,SAAS,CAAC;YAC9F,cAAc,CAAC,QAAQ,CAAC,GAAG,IAAI,CAAC,CAAC,CAAC,IAAI,CAAC,MAAM,CAAC,CAAC,CAAC,SAAS,CAAC;SAC7D;QACD,IAAI,GAAG,MAAM,CAAC,YAAY,CAAC,SAAS,CAAC,oBAAoB,EAAE,EAAE,IAAI,CAAC,CAAC;QACnE,KAAK,CAAC,OAAO,CAAC,YAAY,EAAE,IAAI,EAAE,cAAc,EAAE,IAAI,CAAC,CAAC;IAC5D,CAAC;IAvGD;;;;;;;;OAQG;IACI,MAAM,CAAC,GAAG,CAAC,IAAY,EAAE,EAA2B,EAAE,KAAoB,EAAE,IAAmC;QAClH,OAAO,IAAI,OAAO,CAAC,IAAI,EAAO,KAAK,kCAAO,IAAI,KAAE,EAAE,EAAE,EAAE,IAAG,CAAC;IAC9D,CAAC;IAKD;;;OAGG;IACI,MAAM,CAAC,UAAU,CAAC,GAAQ;QAC7B,IAAI,GAAG,KAAK,SAAS,IAAI,GAAG,KAAK,IAAI,EAAE;YACnC,OAAO,KAAK,CAAC;SAChB;QACD,OAAO,GAAG,CAAC,cAAc,CAAC,KAAK,OAAO,CAAC,YAAY,CAAC;IACxD,CAAC;;AA1BL,0BAyGC;AA3FG,gBAAgB;AACO,oBAAY,GAAG,kCAAkC,CAAC"}

package/teamsList.d.ts

@@ -62,7 +62,7 @@ export declare class TeamsList extends pulumi.CustomResource {
      */
     readonly name: pulumi.Output<string>;
     /**
-     * The teams list type. Valid values are `SERIAL`, `URL`, `DOMAIN`, and `EMAIL`.
+     * The teams list type. Valid values are `IP`, `SERIAL`, `URL`, `DOMAIN`, and `EMAIL`.
      */
     readonly type: pulumi.Output<string>;
     /**
@@ -95,7 +95,7 @@ export interface TeamsListState {
      */
     name?: pulumi.Input<string>;
     /**
-     * The teams list type. Valid values are `SERIAL`, `URL`, `DOMAIN`, and `EMAIL`.
+     * The teams list type. Valid values are `IP`, `SERIAL`, `URL`, `DOMAIN`, and `EMAIL`.
      */
     type?: pulumi.Input<string>;
 }
@@ -120,7 +120,7 @@ export interface TeamsListArgs {
      */
     name: pulumi.Input<string>;
     /**
-     * The teams list type. Valid values are `SERIAL`, `URL`, `DOMAIN`, and `EMAIL`.
+     * The teams list type. Valid values are `IP`, `SERIAL`, `URL`, `DOMAIN`, and `EMAIL`.
      */
     type: pulumi.Input<string>;
 }

package/tunnelRoute.d.ts

@@ -0,0 +1,127 @@
+import * as pulumi from "@pulumi/pulumi";
+/**
+ * Provides a resource, that manages Cloudflare tunnel routes for Zero Trust. Tunnel
+ * routes are used to direct IP traffic through Cloudflare Tunnels.
+ *
+ * ## Example Usage
+ *
+ * ```typescript
+ * import * as pulumi from "@pulumi/pulumi";
+ * import * as cloudflare from "@pulumi/cloudflare";
+ *
+ * const example = new cloudflare.TunnelRoute("example", {
+ *     accountId: "c4a7362d577a6c3019a474fd6f485821",
+ *     comment: "New tunnel route for documentation",
+ *     network: "192.0.2.24/32",
+ *     tunnelId: "f70ff985-a4ef-4643-bbbc-4a0ed4fc8415",
+ * });
+ * ```
+ *
+ * ```typescript
+ * import * as pulumi from "@pulumi/pulumi";
+ * import * as cloudflare from "@pulumi/cloudflare";
+ *
+ * const tunnel = new cloudflare.ArgoTunnel("tunnel", {
+ *     accountId: "c4a7362d577a6c3019a474fd6f485821",
+ *     name: "my_tunnel",
+ *     secret: "AQIDBAUGBwgBAgMEBQYHCAECAwQFBgcIAQIDBAUGBwg=",
+ * });
+ * const example = new cloudflare.TunnelRoute("example", {
+ *     accountId: "c4a7362d577a6c3019a474fd6f485821",
+ *     tunnelId: tunnel.id,
+ *     network: "192.0.2.24/32",
+ *     comment: "New tunnel route for documentation",
+ * });
+ * ```
+ *
+ * ## Import
+ *
+ * An existing tunnel route can be imported using the account ID and network CIDR.
+ *
+ * ```sh
+ *  $ pulumi import cloudflare:index/tunnelRoute:TunnelRoute cloudflare_tunnel_route c4a7362d577a6c3019a474fd6f485821/192.0.2.24/32
+ * ```
+ */
+export declare class TunnelRoute extends pulumi.CustomResource {
+    /**
+     * Get an existing TunnelRoute resource's state with the given name, ID, and optional extra
+     * properties used to qualify the lookup.
+     *
+     * @param name The _unique_ name of the resulting resource.
+     * @param id The _unique_ provider ID of the resource to lookup.
+     * @param state Any extra arguments used during the lookup.
+     * @param opts Optional settings to control the behavior of the CustomResource.
+     */
+    static get(name: string, id: pulumi.Input<pulumi.ID>, state?: TunnelRouteState, opts?: pulumi.CustomResourceOptions): TunnelRoute;
+    /**
+     * Returns true if the given object is an instance of TunnelRoute.  This is designed to work even
+     * when multiple copies of the Pulumi SDK have been loaded into the same process.
+     */
+    static isInstance(obj: any): obj is TunnelRoute;
+    /**
+     * The ID of the account where the tunnel route is being created.
+     */
+    readonly accountId: pulumi.Output<string>;
+    /**
+     * Description of the tunnel route.
+     */
+    readonly comment: pulumi.Output<string | undefined>;
+    /**
+     * The IPv4 or IPv6 network that should use this tunnel route, in CIDR notation.
+     */
+    readonly network: pulumi.Output<string>;
+    /**
+     * The ID of the tunnel that will service the tunnel route.
+     */
+    readonly tunnelId: pulumi.Output<string>;
+    /**
+     * Create a TunnelRoute resource with the given unique name, arguments, and options.
+     *
+     * @param name The _unique_ name of the resource.
+     * @param args The arguments to use to populate this resource's properties.
+     * @param opts A bag of options that control this resource's behavior.
+     */
+    constructor(name: string, args: TunnelRouteArgs, opts?: pulumi.CustomResourceOptions);
+}
+/**
+ * Input properties used for looking up and filtering TunnelRoute resources.
+ */
+export interface TunnelRouteState {
+    /**
+     * The ID of the account where the tunnel route is being created.
+     */
+    accountId?: pulumi.Input<string>;
+    /**
+     * Description of the tunnel route.
+     */
+    comment?: pulumi.Input<string>;
+    /**
+     * The IPv4 or IPv6 network that should use this tunnel route, in CIDR notation.
+     */
+    network?: pulumi.Input<string>;
+    /**
+     * The ID of the tunnel that will service the tunnel route.
+     */
+    tunnelId?: pulumi.Input<string>;
+}
+/**
+ * The set of arguments for constructing a TunnelRoute resource.
+ */
+export interface TunnelRouteArgs {
+    /**
+     * The ID of the account where the tunnel route is being created.
+     */
+    accountId: pulumi.Input<string>;
+    /**
+     * Description of the tunnel route.
+     */
+    comment?: pulumi.Input<string>;
+    /**
+     * The IPv4 or IPv6 network that should use this tunnel route, in CIDR notation.
+     */
+    network: pulumi.Input<string>;
+    /**
+     * The ID of the tunnel that will service the tunnel route.
+     */
+    tunnelId: pulumi.Input<string>;
+}

package/tunnelRoute.js

@@ -0,0 +1,107 @@
+"use strict";
+// *** WARNING: this file was generated by the Pulumi Terraform Bridge (tfgen) Tool. ***
+// *** Do not edit by hand unless you're certain you know what you are doing! ***
+Object.defineProperty(exports, "__esModule", { value: true });
+exports.TunnelRoute = void 0;
+const pulumi = require("@pulumi/pulumi");
+const utilities = require("./utilities");
+/**
+ * Provides a resource, that manages Cloudflare tunnel routes for Zero Trust. Tunnel
+ * routes are used to direct IP traffic through Cloudflare Tunnels.
+ *
+ * ## Example Usage
+ *
+ * ```typescript
+ * import * as pulumi from "@pulumi/pulumi";
+ * import * as cloudflare from "@pulumi/cloudflare";
+ *
+ * const example = new cloudflare.TunnelRoute("example", {
+ *     accountId: "c4a7362d577a6c3019a474fd6f485821",
+ *     comment: "New tunnel route for documentation",
+ *     network: "192.0.2.24/32",
+ *     tunnelId: "f70ff985-a4ef-4643-bbbc-4a0ed4fc8415",
+ * });
+ * ```
+ *
+ * ```typescript
+ * import * as pulumi from "@pulumi/pulumi";
+ * import * as cloudflare from "@pulumi/cloudflare";
+ *
+ * const tunnel = new cloudflare.ArgoTunnel("tunnel", {
+ *     accountId: "c4a7362d577a6c3019a474fd6f485821",
+ *     name: "my_tunnel",
+ *     secret: "AQIDBAUGBwgBAgMEBQYHCAECAwQFBgcIAQIDBAUGBwg=",
+ * });
+ * const example = new cloudflare.TunnelRoute("example", {
+ *     accountId: "c4a7362d577a6c3019a474fd6f485821",
+ *     tunnelId: tunnel.id,
+ *     network: "192.0.2.24/32",
+ *     comment: "New tunnel route for documentation",
+ * });
+ * ```
+ *
+ * ## Import
+ *
+ * An existing tunnel route can be imported using the account ID and network CIDR.
+ *
+ * ```sh
+ *  $ pulumi import cloudflare:index/tunnelRoute:TunnelRoute cloudflare_tunnel_route c4a7362d577a6c3019a474fd6f485821/192.0.2.24/32
+ * ```
+ */
+class TunnelRoute extends pulumi.CustomResource {
+    constructor(name, argsOrState, opts) {
+        let resourceInputs = {};
+        opts = opts || {};
+        if (opts.id) {
+            const state = argsOrState;
+            resourceInputs["accountId"] = state ? state.accountId : undefined;
+            resourceInputs["comment"] = state ? state.comment : undefined;
+            resourceInputs["network"] = state ? state.network : undefined;
+            resourceInputs["tunnelId"] = state ? state.tunnelId : undefined;
+        }
+        else {
+            const args = argsOrState;
+            if ((!args || args.accountId === undefined) && !opts.urn) {
+                throw new Error("Missing required property 'accountId'");
+            }
+            if ((!args || args.network === undefined) && !opts.urn) {
+                throw new Error("Missing required property 'network'");
+            }
+            if ((!args || args.tunnelId === undefined) && !opts.urn) {
+                throw new Error("Missing required property 'tunnelId'");
+            }
+            resourceInputs["accountId"] = args ? args.accountId : undefined;
+            resourceInputs["comment"] = args ? args.comment : undefined;
+            resourceInputs["network"] = args ? args.network : undefined;
+            resourceInputs["tunnelId"] = args ? args.tunnelId : undefined;
+        }
+        opts = pulumi.mergeOptions(utilities.resourceOptsDefaults(), opts);
+        super(TunnelRoute.__pulumiType, name, resourceInputs, opts);
+    }
+    /**
+     * Get an existing TunnelRoute resource's state with the given name, ID, and optional extra
+     * properties used to qualify the lookup.
+     *
+     * @param name The _unique_ name of the resulting resource.
+     * @param id The _unique_ provider ID of the resource to lookup.
+     * @param state Any extra arguments used during the lookup.
+     * @param opts Optional settings to control the behavior of the CustomResource.
+     */
+    static get(name, id, state, opts) {
+        return new TunnelRoute(name, state, Object.assign(Object.assign({}, opts), { id: id }));
+    }
+    /**
+     * Returns true if the given object is an instance of TunnelRoute.  This is designed to work even
+     * when multiple copies of the Pulumi SDK have been loaded into the same process.
+     */
+    static isInstance(obj) {
+        if (obj === undefined || obj === null) {
+            return false;
+        }
+        return obj['__pulumiType'] === TunnelRoute.__pulumiType;
+    }
+}
+exports.TunnelRoute = TunnelRoute;
+/** @internal */
+TunnelRoute.__pulumiType = 'cloudflare:index/tunnelRoute:TunnelRoute';
+//# sourceMappingURL=tunnelRoute.js.map

package/tunnelRoute.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"tunnelRoute.js","sourceRoot":"","sources":["../tunnelRoute.ts"],"names":[],"mappings":";AAAA,wFAAwF;AACxF,iFAAiF;;;AAEjF,yCAAyC;AACzC,yCAAyC;AAEzC;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;GA0CG;AACH,MAAa,WAAY,SAAQ,MAAM,CAAC,cAAc;IAqDlD,YAAY,IAAY,EAAE,WAAgD,EAAE,IAAmC;QAC3G,IAAI,cAAc,GAAkB,EAAE,CAAC;QACvC,IAAI,GAAG,IAAI,IAAI,EAAE,CAAC;QAClB,IAAI,IAAI,CAAC,EAAE,EAAE;YACT,MAAM,KAAK,GAAG,WAA2C,CAAC;YAC1D,cAAc,CAAC,WAAW,CAAC,GAAG,KAAK,CAAC,CAAC,CAAC,KAAK,CAAC,SAAS,CAAC,CAAC,CAAC,SAAS,CAAC;YAClE,cAAc,CAAC,SAAS,CAAC,GAAG,KAAK,CAAC,CAAC,CAAC,KAAK,CAAC,OAAO,CAAC,CAAC,CAAC,SAAS,CAAC;YAC9D,cAAc,CAAC,SAAS,CAAC,GAAG,KAAK,CAAC,CAAC,CAAC,KAAK,CAAC,OAAO,CAAC,CAAC,CAAC,SAAS,CAAC;YAC9D,cAAc,CAAC,UAAU,CAAC,GAAG,KAAK,CAAC,CAAC,CAAC,KAAK,CAAC,QAAQ,CAAC,CAAC,CAAC,SAAS,CAAC;SACnE;aAAM;YACH,MAAM,IAAI,GAAG,WAA0C,CAAC;YACxD,IAAI,CAAC,CAAC,IAAI,IAAI,IAAI,CAAC,SAAS,KAAK,SAAS,CAAC,IAAI,CAAC,IAAI,CAAC,GAAG,EAAE;gBACtD,MAAM,IAAI,KAAK,CAAC,uCAAuC,CAAC,CAAC;aAC5D;YACD,IAAI,CAAC,CAAC,IAAI,IAAI,IAAI,CAAC,OAAO,KAAK,SAAS,CAAC,IAAI,CAAC,IAAI,CAAC,GAAG,EAAE;gBACpD,MAAM,IAAI,KAAK,CAAC,qCAAqC,CAAC,CAAC;aAC1D;YACD,IAAI,CAAC,CAAC,IAAI,IAAI,IAAI,CAAC,QAAQ,KAAK,SAAS,CAAC,IAAI,CAAC,IAAI,CAAC,GAAG,EAAE;gBACrD,MAAM,IAAI,KAAK,CAAC,sCAAsC,CAAC,CAAC;aAC3D;YACD,cAAc,CAAC,WAAW,CAAC,GAAG,IAAI,CAAC,CAAC,CAAC,IAAI,CAAC,SAAS,CAAC,CAAC,CAAC,SAAS,CAAC;YAChE,cAAc,CAAC,SAAS,CAAC,GAAG,IAAI,CAAC,CAAC,CAAC,IAAI,CAAC,OAAO,CAAC,CAAC,CAAC,SAAS,CAAC;YAC5D,cAAc,CAAC,SAAS,CAAC,GAAG,IAAI,CAAC,CAAC,CAAC,IAAI,CAAC,OAAO,CAAC,CAAC,CAAC,SAAS,CAAC;YAC5D,cAAc,CAAC,UAAU,CAAC,GAAG,IAAI,CAAC,CAAC,CAAC,IAAI,CAAC,QAAQ,CAAC,CAAC,CAAC,SAAS,CAAC;SACjE;QACD,IAAI,GAAG,MAAM,CAAC,YAAY,CAAC,SAAS,CAAC,oBAAoB,EAAE,EAAE,IAAI,CAAC,CAAC;QACnE,KAAK,CAAC,WAAW,CAAC,YAAY,EAAE,IAAI,EAAE,cAAc,EAAE,IAAI,CAAC,CAAC;IAChE,CAAC;IA/ED;;;;;;;;OAQG;IACI,MAAM,CAAC,GAAG,CAAC,IAAY,EAAE,EAA2B,EAAE,KAAwB,EAAE,IAAmC;QACtH,OAAO,IAAI,WAAW,CAAC,IAAI,EAAO,KAAK,kCAAO,IAAI,KAAE,EAAE,EAAE,EAAE,IAAG,CAAC;IAClE,CAAC;IAKD;;;OAGG;IACI,MAAM,CAAC,UAAU,CAAC,GAAQ;QAC7B,IAAI,GAAG,KAAK,SAAS,IAAI,GAAG,KAAK,IAAI,EAAE;YACnC,OAAO,KAAK,CAAC;SAChB;QACD,OAAO,GAAG,CAAC,cAAc,CAAC,KAAK,WAAW,CAAC,YAAY,CAAC;IAC5D,CAAC;;AA1BL,kCAiFC;AAnEG,gBAAgB;AACO,wBAAY,GAAG,0CAA0C,CAAC"}

package/types/input.d.ts

@@ -969,6 +969,41 @@ export interface NotificationPolicyEmailIntegration {
      */
     name?: pulumi.Input<string>;
 }
+export interface NotificationPolicyFilters {
+    /**
+     * State of the pool to alert on. Example: `"true"`, `"false"`.
+     */
+    enableds?: pulumi.Input<pulumi.Input<string>[]>;
+    /**
+     * Identifier health check.
+     */
+    healthCheckIds?: pulumi.Input<pulumi.Input<string>[]>;
+    /**
+     * A numerical limit. Example: `"100"`
+     */
+    limits?: pulumi.Input<pulumi.Input<string>[]>;
+    /**
+     * Load balancer pool identifier.
+     */
+    poolIds?: pulumi.Input<pulumi.Input<string>[]>;
+    /**
+     * Product name. Available values: `"workerRequests"`, `"workerDurableObjectsRequests"`, `"workerDurableObjectsDuration"`, `"workerDurableObjectsDataTransfer"`, `"workerDurableObjectsStoredData"`, `"workerDurableObjectsStorageDeletes"`, `"workerDurableObjectsStorageWrites"`, `"workerDurableObjectsStorageReads"`.
+     */
+    products?: pulumi.Input<pulumi.Input<string>[]>;
+    services?: pulumi.Input<pulumi.Input<string>[]>;
+    /**
+     * A numerical limit. Example: `"99.9"`
+     */
+    slos?: pulumi.Input<pulumi.Input<string>[]>;
+    /**
+     * Status to alert on. Example: `"Unhealthy"`, `"Healthy"`.
+     */
+    statuses?: pulumi.Input<pulumi.Input<string>[]>;
+    /**
+     * A list of zone identifiers.
+     */
+    zones?: pulumi.Input<pulumi.Input<string>[]>;
+}
 export interface NotificationPolicyPagerdutyIntegration {
     id: pulumi.Input<string>;
     /**
@@ -1387,7 +1422,7 @@ export interface RulesetRule {
     /**
      * Brief summary of the ruleset rule and its intended use.
      */
-    description: pulumi.Input<string>;
+    description?: pulumi.Input<string>;
     /**
      * Defines if the current rule-level override enables or disables the rule.
      */
@@ -1404,6 +1439,10 @@ export interface RulesetRule {
      * Rule ID to apply the override to.
      */
     id?: pulumi.Input<string>;
+    /**
+     * List parameters to configure how the rule generates logs (refer to the nested schema).
+     */
+    logging?: pulumi.Input<inputs.RulesetRuleLogging>;
     /**
      * List of parameters that configure HTTP rate limiting behaviour (refer to the nested schema).
      */
@@ -1419,6 +1458,10 @@ export interface RulesetRuleActionParameters {
      * List of HTTP header modifications to perform in the ruleset rule (refer to the nested schema).
      */
     headers?: pulumi.Input<pulumi.Input<inputs.RulesetRuleActionParametersHeader>[]>;
+    /**
+     * Host Header that request origin receives.
+     */
+    hostHeader?: pulumi.Input<string>;
     /**
      * Rule ID to apply the override to.
      */
@@ -1428,6 +1471,10 @@ export interface RulesetRuleActionParameters {
      * List of properties to configure WAF payload logging (refer to the nested schema).
      */
     matchedData?: pulumi.Input<inputs.RulesetRuleActionParametersMatchedData>;
+    /**
+     * List of properties to change request origin (refer to the nested schema).
+     */
+    origin?: pulumi.Input<inputs.RulesetRuleActionParametersOrigin>;
     /**
      * List of override configurations to apply to the ruleset (refer to the nested schema).
      */
@@ -1485,6 +1532,16 @@ export interface RulesetRuleActionParametersMatchedData {
      */
     publicKey?: pulumi.Input<string>;
 }
+export interface RulesetRuleActionParametersOrigin {
+    /**
+     * Origin Hostname where request is sent.
+     */
+    host?: pulumi.Input<string>;
+    /**
+     * Oirign Port where request is sent.
+     */
+    port?: pulumi.Input<number>;
+}
 export interface RulesetRuleActionParametersOverrides {
     /**
      * Action to perform in the rule-level override. Valid values are `"block"`, `"challenge"`, `"ddosDynamic"`, `"execute"`, `"forceConnectionClose"`, `"jsChallenge"`, `"managedChallenge"`, `"log"`, `"rewrite"`, `"score"`, or `"skip"`.
@@ -1554,6 +1611,9 @@ export interface RulesetRuleActionParametersResponse {
     statusCode?: pulumi.Input<number>;
 }
 export interface RulesetRuleActionParametersUri {
+    /**
+     * List of properties to change request origin (refer to the nested schema).
+     */
     origin?: pulumi.Input<boolean>;
     /**
      * URI path configuration when performing a URL rewrite (refer to the nested schema).
@@ -1594,6 +1654,12 @@ export interface RulesetRuleExposedCredentialCheck {
      */
     usernameExpression?: pulumi.Input<string>;
 }
+export interface RulesetRuleLogging {
+    /**
+     * Defines if the current rule-level override enables or disables the rule.
+     */
+    enabled?: pulumi.Input<boolean>;
+}
 export interface RulesetRuleRatelimit {
     /**
      * List of parameters that define how Cloudflare tracks the request rate for this rule.

package/types/output.d.ts

@@ -1069,6 +1069,41 @@ export interface NotificationPolicyEmailIntegration {
      */
     name?: string;
 }
+export interface NotificationPolicyFilters {
+    /**
+     * State of the pool to alert on. Example: `"true"`, `"false"`.
+     */
+    enableds?: string[];
+    /**
+     * Identifier health check.
+     */
+    healthCheckIds?: string[];
+    /**
+     * A numerical limit. Example: `"100"`
+     */
+    limits?: string[];
+    /**
+     * Load balancer pool identifier.
+     */
+    poolIds?: string[];
+    /**
+     * Product name. Available values: `"workerRequests"`, `"workerDurableObjectsRequests"`, `"workerDurableObjectsDuration"`, `"workerDurableObjectsDataTransfer"`, `"workerDurableObjectsStoredData"`, `"workerDurableObjectsStorageDeletes"`, `"workerDurableObjectsStorageWrites"`, `"workerDurableObjectsStorageReads"`.
+     */
+    products?: string[];
+    services?: string[];
+    /**
+     * A numerical limit. Example: `"99.9"`
+     */
+    slos?: string[];
+    /**
+     * Status to alert on. Example: `"Unhealthy"`, `"Healthy"`.
+     */
+    statuses?: string[];
+    /**
+     * A list of zone identifiers.
+     */
+    zones?: string[];
+}
 export interface NotificationPolicyPagerdutyIntegration {
     id: string;
     /**
@@ -1487,7 +1522,7 @@ export interface RulesetRule {
     /**
      * Brief summary of the ruleset rule and its intended use.
      */
-    description: string;
+    description?: string;
     /**
      * Defines if the current rule-level override enables or disables the rule.
      */
@@ -1504,6 +1539,10 @@ export interface RulesetRule {
      * Rule ID to apply the override to.
      */
     id: string;
+    /**
+     * List parameters to configure how the rule generates logs (refer to the nested schema).
+     */
+    logging?: outputs.RulesetRuleLogging;
     /**
      * List of parameters that configure HTTP rate limiting behaviour (refer to the nested schema).
      */
@@ -1519,6 +1558,10 @@ export interface RulesetRuleActionParameters {
      * List of HTTP header modifications to perform in the ruleset rule (refer to the nested schema).
      */
     headers?: outputs.RulesetRuleActionParametersHeader[];
+    /**
+     * Host Header that request origin receives.
+     */
+    hostHeader?: string;
     /**
      * Rule ID to apply the override to.
      */
@@ -1528,6 +1571,10 @@ export interface RulesetRuleActionParameters {
      * List of properties to configure WAF payload logging (refer to the nested schema).
      */
     matchedData?: outputs.RulesetRuleActionParametersMatchedData;
+    /**
+     * List of properties to change request origin (refer to the nested schema).
+     */
+    origin?: outputs.RulesetRuleActionParametersOrigin;
     /**
      * List of override configurations to apply to the ruleset (refer to the nested schema).
      */
@@ -1585,6 +1632,16 @@ export interface RulesetRuleActionParametersMatchedData {
      */
     publicKey?: string;
 }
+export interface RulesetRuleActionParametersOrigin {
+    /**
+     * Origin Hostname where request is sent.
+     */
+    host?: string;
+    /**
+     * Oirign Port where request is sent.
+     */
+    port?: number;
+}
 export interface RulesetRuleActionParametersOverrides {
     /**
      * Action to perform in the rule-level override. Valid values are `"block"`, `"challenge"`, `"ddosDynamic"`, `"execute"`, `"forceConnectionClose"`, `"jsChallenge"`, `"managedChallenge"`, `"log"`, `"rewrite"`, `"score"`, or `"skip"`.
@@ -1654,6 +1711,9 @@ export interface RulesetRuleActionParametersResponse {
     statusCode?: number;
 }
 export interface RulesetRuleActionParametersUri {
+    /**
+     * List of properties to change request origin (refer to the nested schema).
+     */
     origin?: boolean;
     /**
      * URI path configuration when performing a URL rewrite (refer to the nested schema).
@@ -1694,6 +1754,12 @@ export interface RulesetRuleExposedCredentialCheck {
      */
     usernameExpression?: string;
 }
+export interface RulesetRuleLogging {
+    /**
+     * Defines if the current rule-level override enables or disables the rule.
+     */
+    enabled?: boolean;
+}
 export interface RulesetRuleRatelimit {
     /**
      * List of parameters that define how Cloudflare tracks the request rate for this rule.

package/workerCronTrigger.d.ts

@@ -49,6 +49,7 @@ export declare class WorkerCronTrigger extends pulumi.CustomResource {
      * when multiple copies of the Pulumi SDK have been loaded into the same process.
      */
     static isInstance(obj: any): obj is WorkerCronTrigger;
+    readonly accountId: pulumi.Output<string>;
     /**
      * List of cron expressions to execute the Worker Script
      */
@@ -70,6 +71,7 @@ export declare class WorkerCronTrigger extends pulumi.CustomResource {
  * Input properties used for looking up and filtering WorkerCronTrigger resources.
  */
 export interface WorkerCronTriggerState {
+    accountId?: pulumi.Input<string>;
     /**
      * List of cron expressions to execute the Worker Script
      */
@@ -83,6 +85,7 @@ export interface WorkerCronTriggerState {
  * The set of arguments for constructing a WorkerCronTrigger resource.
  */
 export interface WorkerCronTriggerArgs {
+    accountId: pulumi.Input<string>;
     /**
      * List of cron expressions to execute the Worker Script
      */

package/workerCronTrigger.js

@@ -45,17 +45,22 @@ class WorkerCronTrigger extends pulumi.CustomResource {
         opts = opts || {};
         if (opts.id) {
             const state = argsOrState;
+            resourceInputs["accountId"] = state ? state.accountId : undefined;
             resourceInputs["schedules"] = state ? state.schedules : undefined;
             resourceInputs["scriptName"] = state ? state.scriptName : undefined;
         }
         else {
             const args = argsOrState;
+            if ((!args || args.accountId === undefined) && !opts.urn) {
+                throw new Error("Missing required property 'accountId'");
+            }
             if ((!args || args.schedules === undefined) && !opts.urn) {
                 throw new Error("Missing required property 'schedules'");
             }
             if ((!args || args.scriptName === undefined) && !opts.urn) {
                 throw new Error("Missing required property 'scriptName'");
             }
+            resourceInputs["accountId"] = args ? args.accountId : undefined;
             resourceInputs["schedules"] = args ? args.schedules : undefined;
             resourceInputs["scriptName"] = args ? args.scriptName : undefined;
         }