@pulumi/cloudflare 5.50.0-alpha.1744436206 → 6.0.0

package/zoneDnsSettings.d.ts

@@ -0,0 +1,164 @@
+import * as pulumi from "@pulumi/pulumi";
+import * as inputs from "./types/input";
+import * as outputs from "./types/output";
+/**
+ * ## Example Usage
+ */
+export declare class ZoneDnsSettings extends pulumi.CustomResource {
+    /**
+     * Get an existing ZoneDnsSettings resource's state with the given name, ID, and optional extra
+     * properties used to qualify the lookup.
+     *
+     * @param name The _unique_ name of the resulting resource.
+     * @param id The _unique_ provider ID of the resource to lookup.
+     * @param state Any extra arguments used during the lookup.
+     * @param opts Optional settings to control the behavior of the CustomResource.
+     */
+    static get(name: string, id: pulumi.Input<pulumi.ID>, state?: ZoneDnsSettingsState, opts?: pulumi.CustomResourceOptions): ZoneDnsSettings;
+    /**
+     * Returns true if the given object is an instance of ZoneDnsSettings.  This is designed to work even
+     * when multiple copies of the Pulumi SDK have been loaded into the same process.
+     */
+    static isInstance(obj: any): obj is ZoneDnsSettings;
+    /**
+     * Whether to flatten all CNAME records in the zone. Note that, due to DNS limitations, a CNAME record at the zone apex will always be flattened.
+     */
+    readonly flattenAllCnames: pulumi.Output<boolean | undefined>;
+    /**
+     * Whether to enable Foundation DNS Advanced Nameservers on the zone.
+     */
+    readonly foundationDns: pulumi.Output<boolean | undefined>;
+    /**
+     * Settings for this internal zone.
+     */
+    readonly internalDns: pulumi.Output<outputs.ZoneDnsSettingsInternalDns>;
+    /**
+     * Whether to enable multi-provider DNS, which causes Cloudflare to activate the zone even when non-Cloudflare NS records exist, and to respect NS records at the zone apex during outbound zone transfers.
+     */
+    readonly multiProvider: pulumi.Output<boolean | undefined>;
+    /**
+     * Settings determining the nameservers through which the zone should be available.
+     */
+    readonly nameservers: pulumi.Output<outputs.ZoneDnsSettingsNameservers>;
+    /**
+     * The time to live (TTL) of the zone's nameserver (NS) records.
+     */
+    readonly nsTtl: pulumi.Output<number | undefined>;
+    /**
+     * Allows a Secondary DNS zone to use (proxied) override records and CNAME flattening at the zone apex.
+     */
+    readonly secondaryOverrides: pulumi.Output<boolean | undefined>;
+    /**
+     * Components of the zone's SOA record.
+     */
+    readonly soa: pulumi.Output<outputs.ZoneDnsSettingsSoa>;
+    /**
+     * Identifier
+     */
+    readonly zoneId: pulumi.Output<string>;
+    /**
+     * Whether the zone mode is a regular or CDN/DNS only zone.
+     * Available values: "standard", "cdn*only", "dns*only".
+     */
+    readonly zoneMode: pulumi.Output<string | undefined>;
+    /**
+     * Create a ZoneDnsSettings resource with the given unique name, arguments, and options.
+     *
+     * @param name The _unique_ name of the resource.
+     * @param args The arguments to use to populate this resource's properties.
+     * @param opts A bag of options that control this resource's behavior.
+     */
+    constructor(name: string, args: ZoneDnsSettingsArgs, opts?: pulumi.CustomResourceOptions);
+}
+/**
+ * Input properties used for looking up and filtering ZoneDnsSettings resources.
+ */
+export interface ZoneDnsSettingsState {
+    /**
+     * Whether to flatten all CNAME records in the zone. Note that, due to DNS limitations, a CNAME record at the zone apex will always be flattened.
+     */
+    flattenAllCnames?: pulumi.Input<boolean>;
+    /**
+     * Whether to enable Foundation DNS Advanced Nameservers on the zone.
+     */
+    foundationDns?: pulumi.Input<boolean>;
+    /**
+     * Settings for this internal zone.
+     */
+    internalDns?: pulumi.Input<inputs.ZoneDnsSettingsInternalDns>;
+    /**
+     * Whether to enable multi-provider DNS, which causes Cloudflare to activate the zone even when non-Cloudflare NS records exist, and to respect NS records at the zone apex during outbound zone transfers.
+     */
+    multiProvider?: pulumi.Input<boolean>;
+    /**
+     * Settings determining the nameservers through which the zone should be available.
+     */
+    nameservers?: pulumi.Input<inputs.ZoneDnsSettingsNameservers>;
+    /**
+     * The time to live (TTL) of the zone's nameserver (NS) records.
+     */
+    nsTtl?: pulumi.Input<number>;
+    /**
+     * Allows a Secondary DNS zone to use (proxied) override records and CNAME flattening at the zone apex.
+     */
+    secondaryOverrides?: pulumi.Input<boolean>;
+    /**
+     * Components of the zone's SOA record.
+     */
+    soa?: pulumi.Input<inputs.ZoneDnsSettingsSoa>;
+    /**
+     * Identifier
+     */
+    zoneId?: pulumi.Input<string>;
+    /**
+     * Whether the zone mode is a regular or CDN/DNS only zone.
+     * Available values: "standard", "cdn*only", "dns*only".
+     */
+    zoneMode?: pulumi.Input<string>;
+}
+/**
+ * The set of arguments for constructing a ZoneDnsSettings resource.
+ */
+export interface ZoneDnsSettingsArgs {
+    /**
+     * Whether to flatten all CNAME records in the zone. Note that, due to DNS limitations, a CNAME record at the zone apex will always be flattened.
+     */
+    flattenAllCnames?: pulumi.Input<boolean>;
+    /**
+     * Whether to enable Foundation DNS Advanced Nameservers on the zone.
+     */
+    foundationDns?: pulumi.Input<boolean>;
+    /**
+     * Settings for this internal zone.
+     */
+    internalDns?: pulumi.Input<inputs.ZoneDnsSettingsInternalDns>;
+    /**
+     * Whether to enable multi-provider DNS, which causes Cloudflare to activate the zone even when non-Cloudflare NS records exist, and to respect NS records at the zone apex during outbound zone transfers.
+     */
+    multiProvider?: pulumi.Input<boolean>;
+    /**
+     * Settings determining the nameservers through which the zone should be available.
+     */
+    nameservers?: pulumi.Input<inputs.ZoneDnsSettingsNameservers>;
+    /**
+     * The time to live (TTL) of the zone's nameserver (NS) records.
+     */
+    nsTtl?: pulumi.Input<number>;
+    /**
+     * Allows a Secondary DNS zone to use (proxied) override records and CNAME flattening at the zone apex.
+     */
+    secondaryOverrides?: pulumi.Input<boolean>;
+    /**
+     * Components of the zone's SOA record.
+     */
+    soa?: pulumi.Input<inputs.ZoneDnsSettingsSoa>;
+    /**
+     * Identifier
+     */
+    zoneId: pulumi.Input<string>;
+    /**
+     * Whether the zone mode is a regular or CDN/DNS only zone.
+     * Available values: "standard", "cdn*only", "dns*only".
+     */
+    zoneMode?: pulumi.Input<string>;
+}

package/zoneDnsSettings.js

@@ -0,0 +1,73 @@
+"use strict";
+// *** WARNING: this file was generated by the Pulumi Terraform Bridge (tfgen) Tool. ***
+// *** Do not edit by hand unless you're certain you know what you are doing! ***
+Object.defineProperty(exports, "__esModule", { value: true });
+exports.ZoneDnsSettings = void 0;
+const pulumi = require("@pulumi/pulumi");
+const utilities = require("./utilities");
+/**
+ * ## Example Usage
+ */
+class ZoneDnsSettings extends pulumi.CustomResource {
+    /**
+     * Get an existing ZoneDnsSettings resource's state with the given name, ID, and optional extra
+     * properties used to qualify the lookup.
+     *
+     * @param name The _unique_ name of the resulting resource.
+     * @param id The _unique_ provider ID of the resource to lookup.
+     * @param state Any extra arguments used during the lookup.
+     * @param opts Optional settings to control the behavior of the CustomResource.
+     */
+    static get(name, id, state, opts) {
+        return new ZoneDnsSettings(name, state, Object.assign(Object.assign({}, opts), { id: id }));
+    }
+    /**
+     * Returns true if the given object is an instance of ZoneDnsSettings.  This is designed to work even
+     * when multiple copies of the Pulumi SDK have been loaded into the same process.
+     */
+    static isInstance(obj) {
+        if (obj === undefined || obj === null) {
+            return false;
+        }
+        return obj['__pulumiType'] === ZoneDnsSettings.__pulumiType;
+    }
+    constructor(name, argsOrState, opts) {
+        let resourceInputs = {};
+        opts = opts || {};
+        if (opts.id) {
+            const state = argsOrState;
+            resourceInputs["flattenAllCnames"] = state ? state.flattenAllCnames : undefined;
+            resourceInputs["foundationDns"] = state ? state.foundationDns : undefined;
+            resourceInputs["internalDns"] = state ? state.internalDns : undefined;
+            resourceInputs["multiProvider"] = state ? state.multiProvider : undefined;
+            resourceInputs["nameservers"] = state ? state.nameservers : undefined;
+            resourceInputs["nsTtl"] = state ? state.nsTtl : undefined;
+            resourceInputs["secondaryOverrides"] = state ? state.secondaryOverrides : undefined;
+            resourceInputs["soa"] = state ? state.soa : undefined;
+            resourceInputs["zoneId"] = state ? state.zoneId : undefined;
+            resourceInputs["zoneMode"] = state ? state.zoneMode : undefined;
+        }
+        else {
+            const args = argsOrState;
+            if ((!args || args.zoneId === undefined) && !opts.urn) {
+                throw new Error("Missing required property 'zoneId'");
+            }
+            resourceInputs["flattenAllCnames"] = args ? args.flattenAllCnames : undefined;
+            resourceInputs["foundationDns"] = args ? args.foundationDns : undefined;
+            resourceInputs["internalDns"] = args ? args.internalDns : undefined;
+            resourceInputs["multiProvider"] = args ? args.multiProvider : undefined;
+            resourceInputs["nameservers"] = args ? args.nameservers : undefined;
+            resourceInputs["nsTtl"] = args ? args.nsTtl : undefined;
+            resourceInputs["secondaryOverrides"] = args ? args.secondaryOverrides : undefined;
+            resourceInputs["soa"] = args ? args.soa : undefined;
+            resourceInputs["zoneId"] = args ? args.zoneId : undefined;
+            resourceInputs["zoneMode"] = args ? args.zoneMode : undefined;
+        }
+        opts = pulumi.mergeOptions(utilities.resourceOptsDefaults(), opts);
+        super(ZoneDnsSettings.__pulumiType, name, resourceInputs, opts);
+    }
+}
+exports.ZoneDnsSettings = ZoneDnsSettings;
+/** @internal */
+ZoneDnsSettings.__pulumiType = 'cloudflare:index/zoneDnsSettings:ZoneDnsSettings';
+//# sourceMappingURL=zoneDnsSettings.js.map

package/zoneDnsSettings.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"zoneDnsSettings.js","sourceRoot":"","sources":["../zoneDnsSettings.ts"],"names":[],"mappings":";AAAA,wFAAwF;AACxF,iFAAiF;;;AAEjF,yCAAyC;AAGzC,yCAAyC;AAEzC;;GAEG;AACH,MAAa,eAAgB,SAAQ,MAAM,CAAC,cAAc;IACtD;;;;;;;;OAQG;IACI,MAAM,CAAC,GAAG,CAAC,IAAY,EAAE,EAA2B,EAAE,KAA4B,EAAE,IAAmC;QAC1H,OAAO,IAAI,eAAe,CAAC,IAAI,EAAO,KAAK,kCAAO,IAAI,KAAE,EAAE,EAAE,EAAE,IAAG,CAAC;IACtE,CAAC;IAKD;;;OAGG;IACI,MAAM,CAAC,UAAU,CAAC,GAAQ;QAC7B,IAAI,GAAG,KAAK,SAAS,IAAI,GAAG,KAAK,IAAI,EAAE;YACnC,OAAO,KAAK,CAAC;SAChB;QACD,OAAO,GAAG,CAAC,cAAc,CAAC,KAAK,eAAe,CAAC,YAAY,CAAC;IAChE,CAAC;IAoDD,YAAY,IAAY,EAAE,WAAwD,EAAE,IAAmC;QACnH,IAAI,cAAc,GAAkB,EAAE,CAAC;QACvC,IAAI,GAAG,IAAI,IAAI,EAAE,CAAC;QAClB,IAAI,IAAI,CAAC,EAAE,EAAE;YACT,MAAM,KAAK,GAAG,WAA+C,CAAC;YAC9D,cAAc,CAAC,kBAAkB,CAAC,GAAG,KAAK,CAAC,CAAC,CAAC,KAAK,CAAC,gBAAgB,CAAC,CAAC,CAAC,SAAS,CAAC;YAChF,cAAc,CAAC,eAAe,CAAC,GAAG,KAAK,CAAC,CAAC,CAAC,KAAK,CAAC,aAAa,CAAC,CAAC,CAAC,SAAS,CAAC;YAC1E,cAAc,CAAC,aAAa,CAAC,GAAG,KAAK,CAAC,CAAC,CAAC,KAAK,CAAC,WAAW,CAAC,CAAC,CAAC,SAAS,CAAC;YACtE,cAAc,CAAC,eAAe,CAAC,GAAG,KAAK,CAAC,CAAC,CAAC,KAAK,CAAC,aAAa,CAAC,CAAC,CAAC,SAAS,CAAC;YAC1E,cAAc,CAAC,aAAa,CAAC,GAAG,KAAK,CAAC,CAAC,CAAC,KAAK,CAAC,WAAW,CAAC,CAAC,CAAC,SAAS,CAAC;YACtE,cAAc,CAAC,OAAO,CAAC,GAAG,KAAK,CAAC,CAAC,CAAC,KAAK,CAAC,KAAK,CAAC,CAAC,CAAC,SAAS,CAAC;YAC1D,cAAc,CAAC,oBAAoB,CAAC,GAAG,KAAK,CAAC,CAAC,CAAC,KAAK,CAAC,kBAAkB,CAAC,CAAC,CAAC,SAAS,CAAC;YACpF,cAAc,CAAC,KAAK,CAAC,GAAG,KAAK,CAAC,CAAC,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC,CAAC,SAAS,CAAC;YACtD,cAAc,CAAC,QAAQ,CAAC,GAAG,KAAK,CAAC,CAAC,CAAC,KAAK,CAAC,MAAM,CAAC,CAAC,CAAC,SAAS,CAAC;YAC5D,cAAc,CAAC,UAAU,CAAC,GAAG,KAAK,CAAC,CAAC,CAAC,KAAK,CAAC,QAAQ,CAAC,CAAC,CAAC,SAAS,CAAC;SACnE;aAAM;YACH,MAAM,IAAI,GAAG,WAA8C,CAAC;YAC5D,IAAI,CAAC,CAAC,IAAI,IAAI,IAAI,CAAC,MAAM,KAAK,SAAS,CAAC,IAAI,CAAC,IAAI,CAAC,GAAG,EAAE;gBACnD,MAAM,IAAI,KAAK,CAAC,oCAAoC,CAAC,CAAC;aACzD;YACD,cAAc,CAAC,kBAAkB,CAAC,GAAG,IAAI,CAAC,CAAC,CAAC,IAAI,CAAC,gBAAgB,CAAC,CAAC,CAAC,SAAS,CAAC;YAC9E,cAAc,CAAC,eAAe,CAAC,GAAG,IAAI,CAAC,CAAC,CAAC,IAAI,CAAC,aAAa,CAAC,CAAC,CAAC,SAAS,CAAC;YACxE,cAAc,CAAC,aAAa,CAAC,GAAG,IAAI,CAAC,CAAC,CAAC,IAAI,CAAC,WAAW,CAAC,CAAC,CAAC,SAAS,CAAC;YACpE,cAAc,CAAC,eAAe,CAAC,GAAG,IAAI,CAAC,CAAC,CAAC,IAAI,CAAC,aAAa,CAAC,CAAC,CAAC,SAAS,CAAC;YACxE,cAAc,CAAC,aAAa,CAAC,GAAG,IAAI,CAAC,CAAC,CAAC,IAAI,CAAC,WAAW,CAAC,CAAC,CAAC,SAAS,CAAC;YACpE,cAAc,CAAC,OAAO,CAAC,GAAG,IAAI,CAAC,CAAC,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC,CAAC,SAAS,CAAC;YACxD,cAAc,CAAC,oBAAoB,CAAC,GAAG,IAAI,CAAC,CAAC,CAAC,IAAI,CAAC,kBAAkB,CAAC,CAAC,CAAC,SAAS,CAAC;YAClF,cAAc,CAAC,KAAK,CAAC,GAAG,IAAI,CAAC,CAAC,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC,CAAC,SAAS,CAAC;YACpD,cAAc,CAAC,QAAQ,CAAC,GAAG,IAAI,CAAC,CAAC,CAAC,IAAI,CAAC,MAAM,CAAC,CAAC,CAAC,SAAS,CAAC;YAC1D,cAAc,CAAC,UAAU,CAAC,GAAG,IAAI,CAAC,CAAC,CAAC,IAAI,CAAC,QAAQ,CAAC,CAAC,CAAC,SAAS,CAAC;SACjE;QACD,IAAI,GAAG,MAAM,CAAC,YAAY,CAAC,SAAS,CAAC,oBAAoB,EAAE,EAAE,IAAI,CAAC,CAAC;QACnE,KAAK,CAAC,eAAe,CAAC,YAAY,EAAE,IAAI,EAAE,cAAc,EAAE,IAAI,CAAC,CAAC;IACpE,CAAC;;AA/GL,0CAgHC;AAlGG,gBAAgB;AACO,4BAAY,GAAG,kDAAkD,CAAC"}

package/zoneDnssec.d.ts

@@ -1,21 +1,23 @@
 import * as pulumi from "@pulumi/pulumi";
 /**
- * Provides a Cloudflare resource to create and modify zone DNSSEC settings.
- *
  * ## Example Usage
  *
  * ```typescript
  * import * as pulumi from "@pulumi/pulumi";
  * import * as cloudflare from "@pulumi/cloudflare";
  *
- * const example = new cloudflare.Zone("example", {zone: "example.com"});
- * const exampleZoneDnssec = new cloudflare.ZoneDnssec("example", {zoneId: example.id});
+ * const exampleZoneDnssec = new cloudflare.ZoneDnssec("example_zone_dnssec", {
+ *     zoneId: "023e105f4ecef8ad9ca31a8372d0c353",
+ *     dnssecMultiSigner: false,
+ *     dnssecPresigned: true,
+ *     status: "active",
+ * });
  * ```
  *
  * ## Import
  *
  * ```sh
- * $ pulumi import cloudflare:index/zoneDnssec:ZoneDnssec example <zone_id>
+ * $ pulumi import cloudflare:index/zoneDnssec:ZoneDnssec example '<zone_id>'
  * ```
  */
 export declare class ZoneDnssec extends pulumi.CustomResource {
@@ -35,51 +37,65 @@ export declare class ZoneDnssec extends pulumi.CustomResource {
      */
     static isInstance(obj: any): obj is ZoneDnssec;
     /**
-     * Zone DNSSEC algorithm.
+     * Algorithm key code.
      */
     readonly algorithm: pulumi.Output<string>;
     /**
-     * Zone DNSSEC digest.
+     * Digest hash.
      */
     readonly digest: pulumi.Output<string>;
     /**
-     * Digest algorithm use for Zone DNSSEC.
+     * Type of digest algorithm.
      */
     readonly digestAlgorithm: pulumi.Output<string>;
     /**
-     * Digest Type for Zone DNSSEC.
+     * Coded type for digest algorithm.
      */
     readonly digestType: pulumi.Output<string>;
     /**
-     * DS for the Zone DNSSEC.
+     * If true, multi-signer DNSSEC is enabled on the zone, allowing multiple
+     * providers to serve a DNSSEC-signed zone at the same time.
+     * This is required for DNSKEY records (except those automatically
+     * generated by Cloudflare) to be added to the zone.
+     */
+    readonly dnssecMultiSigner: pulumi.Output<boolean | undefined>;
+    /**
+     * If true, allows Cloudflare to transfer in a DNSSEC-signed zone including signatures from an external provider, without
+     * requiring Cloudflare to sign any records on the fly. Note that this feature has some limitations. See [Cloudflare as
+     * Secondary](https://developers.cloudflare.com/dns/zone-setups/zone-transfers/cloudflare-as-secondary/setup/#dnssec) for
+     * details.
+     */
+    readonly dnssecPresigned: pulumi.Output<boolean | undefined>;
+    /**
+     * Full DS record.
      */
     readonly ds: pulumi.Output<string>;
     /**
-     * Zone DNSSEC flags.
+     * Flag for DNSSEC record.
      */
     readonly flags: pulumi.Output<number>;
     /**
-     * Key Tag for the Zone DNSSEC.
+     * Code for key tag.
      */
     readonly keyTag: pulumi.Output<number>;
     /**
-     * Key type used for Zone DNSSEC.
+     * Algorithm key type.
      */
     readonly keyType: pulumi.Output<string>;
     /**
-     * Zone DNSSEC updated time.
+     * When DNSSEC was last modified.
      */
     readonly modifiedOn: pulumi.Output<string>;
     /**
-     * Public Key for the Zone DNSSEC.
+     * Public key for DS record.
      */
     readonly publicKey: pulumi.Output<string>;
     /**
-     * The status of the Zone DNSSEC.
+     * Status of DNSSEC, based on user-desired state and presence of necessary records. Available values: "active", "disabled".
      */
-    readonly status: pulumi.Output<string>;
+    readonly status: pulumi.Output<string | undefined>;
     /**
-     * The zone identifier to target for the resource. **Modifying this attribute will force creation of a new resource.**
+     * Identifier
      */
     readonly zoneId: pulumi.Output<string>;
     /**
@@ -96,51 +112,65 @@ export declare class ZoneDnssec extends pulumi.CustomResource {
  */
 export interface ZoneDnssecState {
     /**
-     * Zone DNSSEC algorithm.
+     * Algorithm key code.
      */
     algorithm?: pulumi.Input<string>;
     /**
-     * Zone DNSSEC digest.
+     * Digest hash.
      */
     digest?: pulumi.Input<string>;
     /**
-     * Digest algorithm use for Zone DNSSEC.
+     * Type of digest algorithm.
      */
     digestAlgorithm?: pulumi.Input<string>;
     /**
-     * Digest Type for Zone DNSSEC.
+     * Coded type for digest algorithm.
      */
     digestType?: pulumi.Input<string>;
     /**
-     * DS for the Zone DNSSEC.
+     * If true, multi-signer DNSSEC is enabled on the zone, allowing multiple
+     * providers to serve a DNSSEC-signed zone at the same time.
+     * This is required for DNSKEY records (except those automatically
+     * generated by Cloudflare) to be added to the zone.
+     */
+    dnssecMultiSigner?: pulumi.Input<boolean>;
+    /**
+     * If true, allows Cloudflare to transfer in a DNSSEC-signed zone including signatures from an external provider, without
+     * requiring Cloudflare to sign any records on the fly. Note that this feature has some limitations. See [Cloudflare as
+     * Secondary](https://developers.cloudflare.com/dns/zone-setups/zone-transfers/cloudflare-as-secondary/setup/#dnssec) for
+     * details.
+     */
+    dnssecPresigned?: pulumi.Input<boolean>;
+    /**
+     * Full DS record.
      */
     ds?: pulumi.Input<string>;
     /**
-     * Zone DNSSEC flags.
+     * Flag for DNSSEC record.
      */
     flags?: pulumi.Input<number>;
     /**
-     * Key Tag for the Zone DNSSEC.
+     * Code for key tag.
      */
     keyTag?: pulumi.Input<number>;
     /**
-     * Key type used for Zone DNSSEC.
+     * Algorithm key type.
      */
     keyType?: pulumi.Input<string>;
     /**
-     * Zone DNSSEC updated time.
+     * When DNSSEC was last modified.
      */
     modifiedOn?: pulumi.Input<string>;
     /**
-     * Public Key for the Zone DNSSEC.
+     * Public key for DS record.
      */
     publicKey?: pulumi.Input<string>;
     /**
-     * The status of the Zone DNSSEC.
+     * Status of DNSSEC, based on user-desired state and presence of necessary records. Available values: "active", "disabled".
      */
     status?: pulumi.Input<string>;
     /**
-     * The zone identifier to target for the resource. **Modifying this attribute will force creation of a new resource.**
+     * Identifier
      */
     zoneId?: pulumi.Input<string>;
 }
@@ -149,11 +179,25 @@ export interface ZoneDnssecState {
  */
 export interface ZoneDnssecArgs {
     /**
-     * Zone DNSSEC updated time.
+     * If true, multi-signer DNSSEC is enabled on the zone, allowing multiple
+     * providers to serve a DNSSEC-signed zone at the same time.
+     * This is required for DNSKEY records (except those automatically
+     * generated by Cloudflare) to be added to the zone.
      */
-    modifiedOn?: pulumi.Input<string>;
+    dnssecMultiSigner?: pulumi.Input<boolean>;
+    /**
+     * If true, allows Cloudflare to transfer in a DNSSEC-signed zone including signatures from an external provider, without
+     * requiring Cloudflare to sign any records on the fly. Note that this feature has some limitations. See [Cloudflare as
+     * Secondary](https://developers.cloudflare.com/dns/zone-setups/zone-transfers/cloudflare-as-secondary/setup/#dnssec) for
+     * details.
+     */
+    dnssecPresigned?: pulumi.Input<boolean>;
+    /**
+     * Status of DNSSEC, based on user-desired state and presence of necessary records. Available values: "active", "disabled".
+     */
+    status?: pulumi.Input<string>;
     /**
-     * The zone identifier to target for the resource. **Modifying this attribute will force creation of a new resource.**
+     * Identifier
      */
     zoneId: pulumi.Input<string>;
 }

package/zoneDnssec.js

@@ -6,22 +6,24 @@ exports.ZoneDnssec = void 0;
 const pulumi = require("@pulumi/pulumi");
 const utilities = require("./utilities");
 /**
- * Provides a Cloudflare resource to create and modify zone DNSSEC settings.
- *
  * ## Example Usage
  *
  * ```typescript
  * import * as pulumi from "@pulumi/pulumi";
  * import * as cloudflare from "@pulumi/cloudflare";
  *
- * const example = new cloudflare.Zone("example", {zone: "example.com"});
- * const exampleZoneDnssec = new cloudflare.ZoneDnssec("example", {zoneId: example.id});
+ * const exampleZoneDnssec = new cloudflare.ZoneDnssec("example_zone_dnssec", {
+ *     zoneId: "023e105f4ecef8ad9ca31a8372d0c353",
+ *     dnssecMultiSigner: false,
+ *     dnssecPresigned: true,
+ *     status: "active",
+ * });
  * ```
  *
  * ## Import
  *
  * ```sh
- * $ pulumi import cloudflare:index/zoneDnssec:ZoneDnssec example <zone_id>
+ * $ pulumi import cloudflare:index/zoneDnssec:ZoneDnssec example '<zone_id>'
  * ```
  */
 class ZoneDnssec extends pulumi.CustomResource {
@@ -56,6 +58,8 @@ class ZoneDnssec extends pulumi.CustomResource {
             resourceInputs["digest"] = state ? state.digest : undefined;
             resourceInputs["digestAlgorithm"] = state ? state.digestAlgorithm : undefined;
             resourceInputs["digestType"] = state ? state.digestType : undefined;
+            resourceInputs["dnssecMultiSigner"] = state ? state.dnssecMultiSigner : undefined;
+            resourceInputs["dnssecPresigned"] = state ? state.dnssecPresigned : undefined;
             resourceInputs["ds"] = state ? state.ds : undefined;
             resourceInputs["flags"] = state ? state.flags : undefined;
             resourceInputs["keyTag"] = state ? state.keyTag : undefined;
@@ -70,7 +74,9 @@ class ZoneDnssec extends pulumi.CustomResource {
             if ((!args || args.zoneId === undefined) && !opts.urn) {
                 throw new Error("Missing required property 'zoneId'");
             }
-            resourceInputs["modifiedOn"] = args ? args.modifiedOn : undefined;
+            resourceInputs["dnssecMultiSigner"] = args ? args.dnssecMultiSigner : undefined;
+            resourceInputs["dnssecPresigned"] = args ? args.dnssecPresigned : undefined;
+            resourceInputs["status"] = args ? args.status : undefined;
             resourceInputs["zoneId"] = args ? args.zoneId : undefined;
             resourceInputs["algorithm"] = undefined /*out*/;
             resourceInputs["digest"] = undefined /*out*/;
@@ -80,8 +86,8 @@ class ZoneDnssec extends pulumi.CustomResource {
             resourceInputs["flags"] = undefined /*out*/;
             resourceInputs["keyTag"] = undefined /*out*/;
             resourceInputs["keyType"] = undefined /*out*/;
+            resourceInputs["modifiedOn"] = undefined /*out*/;
             resourceInputs["publicKey"] = undefined /*out*/;
-            resourceInputs["status"] = undefined /*out*/;
         }
         opts = pulumi.mergeOptions(utilities.resourceOptsDefaults(), opts);
         super(ZoneDnssec.__pulumiType, name, resourceInputs, opts);

package/zoneDnssec.js.map

@@ -1 +1 @@
-{"version":3,"file":"zoneDnssec.js","sourceRoot":"","sources":["../zoneDnssec.ts"],"names":[],"mappings":";AAAA,wFAAwF;AACxF,iFAAiF;;;AAEjF,yCAAyC;AACzC,yCAAyC;AAEzC;;;;;;;;;;;;;;;;;;GAkBG;AACH,MAAa,UAAW,SAAQ,MAAM,CAAC,cAAc;IACjD;;;;;;;;OAQG;IACI,MAAM,CAAC,GAAG,CAAC,IAAY,EAAE,EAA2B,EAAE,KAAuB,EAAE,IAAmC;QACrH,OAAO,IAAI,UAAU,CAAC,IAAI,EAAO,KAAK,kCAAO,IAAI,KAAE,EAAE,EAAE,EAAE,IAAG,CAAC;IACjE,CAAC;IAKD;;;OAGG;IACI,MAAM,CAAC,UAAU,CAAC,GAAQ;QAC7B,IAAI,GAAG,KAAK,SAAS,IAAI,GAAG,KAAK,IAAI,EAAE;YACnC,OAAO,KAAK,CAAC;SAChB;QACD,OAAO,GAAG,CAAC,cAAc,CAAC,KAAK,UAAU,CAAC,YAAY,CAAC;IAC3D,CAAC;IA2DD,YAAY,IAAY,EAAE,WAA8C,EAAE,IAAmC;QACzG,IAAI,cAAc,GAAkB,EAAE,CAAC;QACvC,IAAI,GAAG,IAAI,IAAI,EAAE,CAAC;QAClB,IAAI,IAAI,CAAC,EAAE,EAAE;YACT,MAAM,KAAK,GAAG,WAA0C,CAAC;YACzD,cAAc,CAAC,WAAW,CAAC,GAAG,KAAK,CAAC,CAAC,CAAC,KAAK,CAAC,SAAS,CAAC,CAAC,CAAC,SAAS,CAAC;YAClE,cAAc,CAAC,QAAQ,CAAC,GAAG,KAAK,CAAC,CAAC,CAAC,KAAK,CAAC,MAAM,CAAC,CAAC,CAAC,SAAS,CAAC;YAC5D,cAAc,CAAC,iBAAiB,CAAC,GAAG,KAAK,CAAC,CAAC,CAAC,KAAK,CAAC,eAAe,CAAC,CAAC,CAAC,SAAS,CAAC;YAC9E,cAAc,CAAC,YAAY,CAAC,GAAG,KAAK,CAAC,CAAC,CAAC,KAAK,CAAC,UAAU,CAAC,CAAC,CAAC,SAAS,CAAC;YACpE,cAAc,CAAC,IAAI,CAAC,GAAG,KAAK,CAAC,CAAC,CAAC,KAAK,CAAC,EAAE,CAAC,CAAC,CAAC,SAAS,CAAC;YACpD,cAAc,CAAC,OAAO,CAAC,GAAG,KAAK,CAAC,CAAC,CAAC,KAAK,CAAC,KAAK,CAAC,CAAC,CAAC,SAAS,CAAC;YAC1D,cAAc,CAAC,QAAQ,CAAC,GAAG,KAAK,CAAC,CAAC,CAAC,KAAK,CAAC,MAAM,CAAC,CAAC,CAAC,SAAS,CAAC;YAC5D,cAAc,CAAC,SAAS,CAAC,GAAG,KAAK,CAAC,CAAC,CAAC,KAAK,CAAC,OAAO,CAAC,CAAC,CAAC,SAAS,CAAC;YAC9D,cAAc,CAAC,YAAY,CAAC,GAAG,KAAK,CAAC,CAAC,CAAC,KAAK,CAAC,UAAU,CAAC,CAAC,CAAC,SAAS,CAAC;YACpE,cAAc,CAAC,WAAW,CAAC,GAAG,KAAK,CAAC,CAAC,CAAC,KAAK,CAAC,SAAS,CAAC,CAAC,CAAC,SAAS,CAAC;YAClE,cAAc,CAAC,QAAQ,CAAC,GAAG,KAAK,CAAC,CAAC,CAAC,KAAK,CAAC,MAAM,CAAC,CAAC,CAAC,SAAS,CAAC;YAC5D,cAAc,CAAC,QAAQ,CAAC,GAAG,KAAK,CAAC,CAAC,CAAC,KAAK,CAAC,MAAM,CAAC,CAAC,CAAC,SAAS,CAAC;SAC/D;aAAM;YACH,MAAM,IAAI,GAAG,WAAyC,CAAC;YACvD,IAAI,CAAC,CAAC,IAAI,IAAI,IAAI,CAAC,MAAM,KAAK,SAAS,CAAC,IAAI,CAAC,IAAI,CAAC,GAAG,EAAE;gBACnD,MAAM,IAAI,KAAK,CAAC,oCAAoC,CAAC,CAAC;aACzD;YACD,cAAc,CAAC,YAAY,CAAC,GAAG,IAAI,CAAC,CAAC,CAAC,IAAI,CAAC,UAAU,CAAC,CAAC,CAAC,SAAS,CAAC;YAClE,cAAc,CAAC,QAAQ,CAAC,GAAG,IAAI,CAAC,CAAC,CAAC,IAAI,CAAC,MAAM,CAAC,CAAC,CAAC,SAAS,CAAC;YAC1D,cAAc,CAAC,WAAW,CAAC,GAAG,SAAS,CAAC,OAAO,CAAC;YAChD,cAAc,CAAC,QAAQ,CAAC,GAAG,SAAS,CAAC,OAAO,CAAC;YAC7C,cAAc,CAAC,iBAAiB,CAAC,GAAG,SAAS,CAAC,OAAO,CAAC;YACtD,cAAc,CAAC,YAAY,CAAC,GAAG,SAAS,CAAC,OAAO,CAAC;YACjD,cAAc,CAAC,IAAI,CAAC,GAAG,SAAS,CAAC,OAAO,CAAC;YACzC,cAAc,CAAC,OAAO,CAAC,GAAG,SAAS,CAAC,OAAO,CAAC;YAC5C,cAAc,CAAC,QAAQ,CAAC,GAAG,SAAS,CAAC,OAAO,CAAC;YAC7C,cAAc,CAAC,SAAS,CAAC,GAAG,SAAS,CAAC,OAAO,CAAC;YAC9C,cAAc,CAAC,WAAW,CAAC,GAAG,SAAS,CAAC,OAAO,CAAC;YAChD,cAAc,CAAC,QAAQ,CAAC,GAAG,SAAS,CAAC,OAAO,CAAC;SAChD;QACD,IAAI,GAAG,MAAM,CAAC,YAAY,CAAC,SAAS,CAAC,oBAAoB,EAAE,EAAE,IAAI,CAAC,CAAC;QACnE,KAAK,CAAC,UAAU,CAAC,YAAY,EAAE,IAAI,EAAE,cAAc,EAAE,IAAI,CAAC,CAAC;IAC/D,CAAC;;AA1HL,gCA2HC;AA7GG,gBAAgB;AACO,uBAAY,GAAG,wCAAwC,CAAC"}
+{"version":3,"file":"zoneDnssec.js","sourceRoot":"","sources":["../zoneDnssec.ts"],"names":[],"mappings":";AAAA,wFAAwF;AACxF,iFAAiF;;;AAEjF,yCAAyC;AACzC,yCAAyC;AAEzC;;;;;;;;;;;;;;;;;;;;GAoBG;AACH,MAAa,UAAW,SAAQ,MAAM,CAAC,cAAc;IACjD;;;;;;;;OAQG;IACI,MAAM,CAAC,GAAG,CAAC,IAAY,EAAE,EAA2B,EAAE,KAAuB,EAAE,IAAmC;QACrH,OAAO,IAAI,UAAU,CAAC,IAAI,EAAO,KAAK,kCAAO,IAAI,KAAE,EAAE,EAAE,EAAE,IAAG,CAAC;IACjE,CAAC;IAKD;;;OAGG;IACI,MAAM,CAAC,UAAU,CAAC,GAAQ;QAC7B,IAAI,GAAG,KAAK,SAAS,IAAI,GAAG,KAAK,IAAI,EAAE;YACnC,OAAO,KAAK,CAAC;SAChB;QACD,OAAO,GAAG,CAAC,cAAc,CAAC,KAAK,UAAU,CAAC,YAAY,CAAC;IAC3D,CAAC;IAyED,YAAY,IAAY,EAAE,WAA8C,EAAE,IAAmC;QACzG,IAAI,cAAc,GAAkB,EAAE,CAAC;QACvC,IAAI,GAAG,IAAI,IAAI,EAAE,CAAC;QAClB,IAAI,IAAI,CAAC,EAAE,EAAE;YACT,MAAM,KAAK,GAAG,WAA0C,CAAC;YACzD,cAAc,CAAC,WAAW,CAAC,GAAG,KAAK,CAAC,CAAC,CAAC,KAAK,CAAC,SAAS,CAAC,CAAC,CAAC,SAAS,CAAC;YAClE,cAAc,CAAC,QAAQ,CAAC,GAAG,KAAK,CAAC,CAAC,CAAC,KAAK,CAAC,MAAM,CAAC,CAAC,CAAC,SAAS,CAAC;YAC5D,cAAc,CAAC,iBAAiB,CAAC,GAAG,KAAK,CAAC,CAAC,CAAC,KAAK,CAAC,eAAe,CAAC,CAAC,CAAC,SAAS,CAAC;YAC9E,cAAc,CAAC,YAAY,CAAC,GAAG,KAAK,CAAC,CAAC,CAAC,KAAK,CAAC,UAAU,CAAC,CAAC,CAAC,SAAS,CAAC;YACpE,cAAc,CAAC,mBAAmB,CAAC,GAAG,KAAK,CAAC,CAAC,CAAC,KAAK,CAAC,iBAAiB,CAAC,CAAC,CAAC,SAAS,CAAC;YAClF,cAAc,CAAC,iBAAiB,CAAC,GAAG,KAAK,CAAC,CAAC,CAAC,KAAK,CAAC,eAAe,CAAC,CAAC,CAAC,SAAS,CAAC;YAC9E,cAAc,CAAC,IAAI,CAAC,GAAG,KAAK,CAAC,CAAC,CAAC,KAAK,CAAC,EAAE,CAAC,CAAC,CAAC,SAAS,CAAC;YACpD,cAAc,CAAC,OAAO,CAAC,GAAG,KAAK,CAAC,CAAC,CAAC,KAAK,CAAC,KAAK,CAAC,CAAC,CAAC,SAAS,CAAC;YAC1D,cAAc,CAAC,QAAQ,CAAC,GAAG,KAAK,CAAC,CAAC,CAAC,KAAK,CAAC,MAAM,CAAC,CAAC,CAAC,SAAS,CAAC;YAC5D,cAAc,CAAC,SAAS,CAAC,GAAG,KAAK,CAAC,CAAC,CAAC,KAAK,CAAC,OAAO,CAAC,CAAC,CAAC,SAAS,CAAC;YAC9D,cAAc,CAAC,YAAY,CAAC,GAAG,KAAK,CAAC,CAAC,CAAC,KAAK,CAAC,UAAU,CAAC,CAAC,CAAC,SAAS,CAAC;YACpE,cAAc,CAAC,WAAW,CAAC,GAAG,KAAK,CAAC,CAAC,CAAC,KAAK,CAAC,SAAS,CAAC,CAAC,CAAC,SAAS,CAAC;YAClE,cAAc,CAAC,QAAQ,CAAC,GAAG,KAAK,CAAC,CAAC,CAAC,KAAK,CAAC,MAAM,CAAC,CAAC,CAAC,SAAS,CAAC;YAC5D,cAAc,CAAC,QAAQ,CAAC,GAAG,KAAK,CAAC,CAAC,CAAC,KAAK,CAAC,MAAM,CAAC,CAAC,CAAC,SAAS,CAAC;SAC/D;aAAM;YACH,MAAM,IAAI,GAAG,WAAyC,CAAC;YACvD,IAAI,CAAC,CAAC,IAAI,IAAI,IAAI,CAAC,MAAM,KAAK,SAAS,CAAC,IAAI,CAAC,IAAI,CAAC,GAAG,EAAE;gBACnD,MAAM,IAAI,KAAK,CAAC,oCAAoC,CAAC,CAAC;aACzD;YACD,cAAc,CAAC,mBAAmB,CAAC,GAAG,IAAI,CAAC,CAAC,CAAC,IAAI,CAAC,iBAAiB,CAAC,CAAC,CAAC,SAAS,CAAC;YAChF,cAAc,CAAC,iBAAiB,CAAC,GAAG,IAAI,CAAC,CAAC,CAAC,IAAI,CAAC,eAAe,CAAC,CAAC,CAAC,SAAS,CAAC;YAC5E,cAAc,CAAC,QAAQ,CAAC,GAAG,IAAI,CAAC,CAAC,CAAC,IAAI,CAAC,MAAM,CAAC,CAAC,CAAC,SAAS,CAAC;YAC1D,cAAc,CAAC,QAAQ,CAAC,GAAG,IAAI,CAAC,CAAC,CAAC,IAAI,CAAC,MAAM,CAAC,CAAC,CAAC,SAAS,CAAC;YAC1D,cAAc,CAAC,WAAW,CAAC,GAAG,SAAS,CAAC,OAAO,CAAC;YAChD,cAAc,CAAC,QAAQ,CAAC,GAAG,SAAS,CAAC,OAAO,CAAC;YAC7C,cAAc,CAAC,iBAAiB,CAAC,GAAG,SAAS,CAAC,OAAO,CAAC;YACtD,cAAc,CAAC,YAAY,CAAC,GAAG,SAAS,CAAC,OAAO,CAAC;YACjD,cAAc,CAAC,IAAI,CAAC,GAAG,SAAS,CAAC,OAAO,CAAC;YACzC,cAAc,CAAC,OAAO,CAAC,GAAG,SAAS,CAAC,OAAO,CAAC;YAC5C,cAAc,CAAC,QAAQ,CAAC,GAAG,SAAS,CAAC,OAAO,CAAC;YAC7C,cAAc,CAAC,SAAS,CAAC,GAAG,SAAS,CAAC,OAAO,CAAC;YAC9C,cAAc,CAAC,YAAY,CAAC,GAAG,SAAS,CAAC,OAAO,CAAC;YACjD,cAAc,CAAC,WAAW,CAAC,GAAG,SAAS,CAAC,OAAO,CAAC;SACnD;QACD,IAAI,GAAG,MAAM,CAAC,YAAY,CAAC,SAAS,CAAC,oBAAoB,EAAE,EAAE,IAAI,CAAC,CAAC;QACnE,KAAK,CAAC,UAAU,CAAC,YAAY,EAAE,IAAI,EAAE,cAAc,EAAE,IAAI,CAAC,CAAC;IAC/D,CAAC;;AA5IL,gCA6IC;AA/HG,gBAAgB;AACO,uBAAY,GAAG,wCAAwC,CAAC"}

package/zoneHold.d.ts

@@ -1,24 +1,18 @@
 import * as pulumi from "@pulumi/pulumi";
 /**
- * Provides a Cloudflare Zone Hold resource that prevents adding
- * the hostname to another account for use.
- *
  * ## Example Usage
  *
  * ```typescript
  * import * as pulumi from "@pulumi/pulumi";
  * import * as cloudflare from "@pulumi/cloudflare";
  *
- * const example = new cloudflare.ZoneHold("example", {
- *     zoneId: "0da42c8d2132a9ddaf714f9e7c920711",
- *     hold: true,
- * });
+ * const exampleZoneHold = new cloudflare.ZoneHold("example_zone_hold", {zoneId: "023e105f4ecef8ad9ca31a8372d0c353"});
  * ```
  *
  * ## Import
  *
  * ```sh
- * $ pulumi import cloudflare:index/zoneHold:ZoneHold example <zone_id>
+ * $ pulumi import cloudflare:index/zoneHold:ZoneHold example '<zone_id>'
  * ```
  */
 export declare class ZoneHold extends pulumi.CustomResource {
@@ -37,20 +31,24 @@ export declare class ZoneHold extends pulumi.CustomResource {
      * when multiple copies of the Pulumi SDK have been loaded into the same process.
      */
     static isInstance(obj: any): obj is ZoneHold;
-    /**
-     * Enablement status of the zone hold.
-     */
     readonly hold: pulumi.Output<boolean>;
     /**
-     * The RFC3339 compatible timestamp when to automatically re-enable the zone hold.
+     * If `holdAfter` is provided and future-dated, the hold will be temporarily disabled,
+     * then automatically re-enabled by the system at the time specified
+     * in this RFC3339-formatted timestamp. A past-dated `holdAfter` value will have
+     * no effect on an existing, enabled hold. Providing an empty string will set its value
+     * to the current time.
      */
     readonly holdAfter: pulumi.Output<string>;
     /**
-     * Whether to extend to block any subdomain of the given zone.
+     * If `true`, the zone hold will extend to block any subdomain of the given zone, as well
+     * as SSL4SaaS Custom Hostnames. For example, a zone hold on a zone with the hostname
+     * 'example.com' and include_subdomains=true will block 'example.com',
+     * 'staging.example.com', 'api.staging.example.com', etc.
      */
-    readonly includeSubdomains: pulumi.Output<boolean | undefined>;
+    readonly includeSubdomains: pulumi.Output<boolean>;
     /**
-     * The zone identifier to target for the resource.
+     * Identifier
      */
     readonly zoneId: pulumi.Output<string>;
     /**
@@ -66,20 +64,24 @@ export declare class ZoneHold extends pulumi.CustomResource {
  * Input properties used for looking up and filtering ZoneHold resources.
  */
 export interface ZoneHoldState {
-    /**
-     * Enablement status of the zone hold.
-     */
     hold?: pulumi.Input<boolean>;
     /**
-     * The RFC3339 compatible timestamp when to automatically re-enable the zone hold.
+     * If `holdAfter` is provided and future-dated, the hold will be temporarily disabled,
+     * then automatically re-enabled by the system at the time specified
+     * in this RFC3339-formatted timestamp. A past-dated `holdAfter` value will have
+     * no effect on an existing, enabled hold. Providing an empty string will set its value
+     * to the current time.
      */
     holdAfter?: pulumi.Input<string>;
     /**
-     * Whether to extend to block any subdomain of the given zone.
+     * If `true`, the zone hold will extend to block any subdomain of the given zone, as well
+     * as SSL4SaaS Custom Hostnames. For example, a zone hold on a zone with the hostname
+     * 'example.com' and include_subdomains=true will block 'example.com',
+     * 'staging.example.com', 'api.staging.example.com', etc.
      */
     includeSubdomains?: pulumi.Input<boolean>;
     /**
-     * The zone identifier to target for the resource.
+     * Identifier
      */
     zoneId?: pulumi.Input<string>;
 }
@@ -88,19 +90,22 @@ export interface ZoneHoldState {
  */
 export interface ZoneHoldArgs {
     /**
-     * Enablement status of the zone hold.
-     */
-    hold: pulumi.Input<boolean>;
-    /**
-     * The RFC3339 compatible timestamp when to automatically re-enable the zone hold.
+     * If `holdAfter` is provided and future-dated, the hold will be temporarily disabled,
+     * then automatically re-enabled by the system at the time specified
+     * in this RFC3339-formatted timestamp. A past-dated `holdAfter` value will have
+     * no effect on an existing, enabled hold. Providing an empty string will set its value
+     * to the current time.
      */
     holdAfter?: pulumi.Input<string>;
     /**
-     * Whether to extend to block any subdomain of the given zone.
+     * If `true`, the zone hold will extend to block any subdomain of the given zone, as well
+     * as SSL4SaaS Custom Hostnames. For example, a zone hold on a zone with the hostname
+     * 'example.com' and include_subdomains=true will block 'example.com',
+     * 'staging.example.com', 'api.staging.example.com', etc.
      */
     includeSubdomains?: pulumi.Input<boolean>;
     /**
-     * The zone identifier to target for the resource.
+     * Identifier
      */
     zoneId: pulumi.Input<string>;
 }