pulumi-cloudflare 6.10.1__py3-none-any.whl → 6.11.0__py3-none-any.whl

pulumi_cloudflare/teams_rule.py

@@ -42,7 +42,7 @@ class TeamsRuleArgs:
         :param pulumi.Input[_builtins.str] description: Specify the rule description.
         :param pulumi.Input[_builtins.bool] enabled: Specify whether the rule is enabled.
         :param pulumi.Input['TeamsRuleExpirationArgs'] expiration: Defines the expiration time stamp and default duration of a DNS policy. Takes precedence over the policy's `schedule` configuration, if any. This  does not apply to HTTP or network policies. Settable only for `dns` rules.
-        :param pulumi.Input[Sequence[pulumi.Input[_builtins.str]]] filters: Specify the protocol or layer to evaluate the traffic, identity, and device posture expressions.
+        :param pulumi.Input[Sequence[pulumi.Input[_builtins.str]]] filters: Specify the protocol or layer to evaluate the traffic, identity, and device posture expressions. Can only contain a single value.
         :param pulumi.Input['TeamsRuleScheduleArgs'] schedule: Defines the schedule for activating DNS policies. Settable only for `dns` and `dns_resolver` rules.
         """
         pulumi.set(__self__, "account_id", account_id)
@@ -152,7 +152,7 @@ class TeamsRuleArgs:
     @pulumi.getter
     def filters(self) -> Optional[pulumi.Input[Sequence[pulumi.Input[_builtins.str]]]]:
         """
-        Specify the protocol or layer to evaluate the traffic, identity, and device posture expressions.
+        Specify the protocol or layer to evaluate the traffic, identity, and device posture expressions. Can only contain a single value.
         """
         return pulumi.get(self, "filters")
 
@@ -241,7 +241,7 @@ class _TeamsRuleState:
         :param pulumi.Input[_builtins.str] description: Specify the rule description.
         :param pulumi.Input[_builtins.bool] enabled: Specify whether the rule is enabled.
         :param pulumi.Input['TeamsRuleExpirationArgs'] expiration: Defines the expiration time stamp and default duration of a DNS policy. Takes precedence over the policy's `schedule` configuration, if any. This  does not apply to HTTP or network policies. Settable only for `dns` rules.
-        :param pulumi.Input[Sequence[pulumi.Input[_builtins.str]]] filters: Specify the protocol or layer to evaluate the traffic, identity, and device posture expressions.
+        :param pulumi.Input[Sequence[pulumi.Input[_builtins.str]]] filters: Specify the protocol or layer to evaluate the traffic, identity, and device posture expressions. Can only contain a single value.
         :param pulumi.Input[_builtins.str] name: Specify the rule name.
         :param pulumi.Input[_builtins.bool] read_only: Indicate that this rule is shared via the Orgs API and read only.
         :param pulumi.Input['TeamsRuleScheduleArgs'] schedule: Defines the schedule for activating DNS policies. Settable only for `dns` and `dns_resolver` rules.
@@ -385,7 +385,7 @@ class _TeamsRuleState:
     @pulumi.getter
     def filters(self) -> Optional[pulumi.Input[Sequence[pulumi.Input[_builtins.str]]]]:
         """
-        Specify the protocol or layer to evaluate the traffic, identity, and device posture expressions.
+        Specify the protocol or layer to evaluate the traffic, identity, and device posture expressions. Can only contain a single value.
         """
         return pulumi.get(self, "filters")
 
@@ -551,6 +551,132 @@ class TeamsRule(pulumi.CustomResource):
         """
         ## Example Usage
 
+        ```python
+        import pulumi
+        import pulumi_cloudflare as cloudflare
+
+        example_zero_trust_gateway_policy = cloudflare.ZeroTrustGatewayPolicy("example_zero_trust_gateway_policy",
+            account_id="699d98642c564d2e855e9661899b7252",
+            action="allow",
+            name="block bad websites",
+            description="Block bad websites based on their host name.",
+            device_posture="any(device_posture.checks.passed[*] in {\\"1308749e-fcfb-4ebc-b051-fe022b632644\\"})",
+            enabled=True,
+            expiration={
+                "expires_at": "2014-01-01T05:20:20Z",
+                "duration": 10,
+            },
+            filters=["http"],
+            identity="any(identity.groups.name[*] in {\\"finance\\"})",
+            precedence=0,
+            rule_settings={
+                "add_headers": {
+                    "My-Next-Header": [
+                        "foo",
+                        "bar",
+                    ],
+                    "X-Custom-Header-Name": ["somecustomvalue"],
+                },
+                "allow_child_bypass": False,
+                "audit_ssh": {
+                    "command_logging": False,
+                },
+                "biso_admin_controls": {
+                    "copy": "remote_only",
+                    "dcp": True,
+                    "dd": True,
+                    "dk": True,
+                    "download": "enabled",
+                    "dp": False,
+                    "du": True,
+                    "keyboard": "enabled",
+                    "paste": "enabled",
+                    "printing": "enabled",
+                    "upload": "enabled",
+                    "version": "v1",
+                },
+                "block_page": {
+                    "target_uri": "https://example.com",
+                    "include_context": True,
+                },
+                "block_page_enabled": True,
+                "block_reason": "This website is a security risk",
+                "bypass_parent_rule": False,
+                "check_session": {
+                    "duration": "300s",
+                    "enforce": True,
+                },
+                "dns_resolvers": {
+                    "ipv4s": [{
+                        "ip": "2.2.2.2",
+                        "port": 5053,
+                        "route_through_private_network": True,
+                        "vnet_id": "f174e90a-fafe-4643-bbbc-4a0ed4fc8415",
+                    }],
+                    "ipv6s": [{
+                        "ip": "2001:DB8::",
+                        "port": 5053,
+                        "route_through_private_network": True,
+                        "vnet_id": "f174e90a-fafe-4643-bbbc-4a0ed4fc8415",
+                    }],
+                },
+                "egress": {
+                    "ipv4": "192.0.2.2",
+                    "ipv4_fallback": "192.0.2.3",
+                    "ipv6": "2001:DB8::/64",
+                },
+                "ignore_cname_category_matches": True,
+                "insecure_disable_dnssec_validation": False,
+                "ip_categories": True,
+                "ip_indicator_feeds": True,
+                "l4override": {
+                    "ip": "1.1.1.1",
+                    "port": 0,
+                },
+                "notification_settings": {
+                    "enabled": True,
+                    "include_context": True,
+                    "msg": "msg",
+                    "support_url": "support_url",
+                },
+                "override_host": "example.com",
+                "override_ips": [
+                    "1.1.1.1",
+                    "2.2.2.2",
+                ],
+                "payload_log": {
+                    "enabled": True,
+                },
+                "quarantine": {
+                    "file_types": ["exe"],
+                },
+                "redirect": {
+                    "target_uri": "https://example.com",
+                    "include_context": True,
+                    "preserve_path_and_query": True,
+                },
+                "resolve_dns_internally": {
+                    "fallback": "none",
+                    "view_id": "view_id",
+                },
+                "resolve_dns_through_cloudflare": True,
+                "untrusted_cert": {
+                    "action": "error",
+                },
+            },
+            schedule={
+                "fri": "08:00-12:30,13:30-17:00",
+                "mon": "08:00-12:30,13:30-17:00",
+                "sat": "08:00-12:30,13:30-17:00",
+                "sun": "08:00-12:30,13:30-17:00",
+                "thu": "08:00-12:30,13:30-17:00",
+                "time_zone": "America/New York",
+                "tue": "08:00-12:30,13:30-17:00",
+                "wed": "08:00-12:30,13:30-17:00",
+            },
+            traffic="http.request.uri matches \\".*a/partial/uri.*\\" and http.request.host in $01302951-49f9-47c9-a400-0297e60b6a10")
+        ```
+
         ## Import
 
         ```sh
@@ -564,7 +690,7 @@ class TeamsRule(pulumi.CustomResource):
         :param pulumi.Input[_builtins.str] description: Specify the rule description.
         :param pulumi.Input[_builtins.bool] enabled: Specify whether the rule is enabled.
         :param pulumi.Input[Union['TeamsRuleExpirationArgs', 'TeamsRuleExpirationArgsDict']] expiration: Defines the expiration time stamp and default duration of a DNS policy. Takes precedence over the policy's `schedule` configuration, if any. This  does not apply to HTTP or network policies. Settable only for `dns` rules.
-        :param pulumi.Input[Sequence[pulumi.Input[_builtins.str]]] filters: Specify the protocol or layer to evaluate the traffic, identity, and device posture expressions.
+        :param pulumi.Input[Sequence[pulumi.Input[_builtins.str]]] filters: Specify the protocol or layer to evaluate the traffic, identity, and device posture expressions. Can only contain a single value.
         :param pulumi.Input[_builtins.str] name: Specify the rule name.
         :param pulumi.Input[Union['TeamsRuleScheduleArgs', 'TeamsRuleScheduleArgsDict']] schedule: Defines the schedule for activating DNS policies. Settable only for `dns` and `dns_resolver` rules.
         """
@@ -577,6 +703,132 @@ class TeamsRule(pulumi.CustomResource):
         """
         ## Example Usage
 
+        ```python
+        import pulumi
+        import pulumi_cloudflare as cloudflare
+
+        example_zero_trust_gateway_policy = cloudflare.ZeroTrustGatewayPolicy("example_zero_trust_gateway_policy",
+            account_id="699d98642c564d2e855e9661899b7252",
+            action="allow",
+            name="block bad websites",
+            description="Block bad websites based on their host name.",
+            device_posture="any(device_posture.checks.passed[*] in {\\"1308749e-fcfb-4ebc-b051-fe022b632644\\"})",
+            enabled=True,
+            expiration={
+                "expires_at": "2014-01-01T05:20:20Z",
+                "duration": 10,
+            },
+            filters=["http"],
+            identity="any(identity.groups.name[*] in {\\"finance\\"})",
+            precedence=0,
+            rule_settings={
+                "add_headers": {
+                    "My-Next-Header": [
+                        "foo",
+                        "bar",
+                    ],
+                    "X-Custom-Header-Name": ["somecustomvalue"],
+                },
+                "allow_child_bypass": False,
+                "audit_ssh": {
+                    "command_logging": False,
+                },
+                "biso_admin_controls": {
+                    "copy": "remote_only",
+                    "dcp": True,
+                    "dd": True,
+                    "dk": True,
+                    "download": "enabled",
+                    "dp": False,
+                    "du": True,
+                    "keyboard": "enabled",
+                    "paste": "enabled",
+                    "printing": "enabled",
+                    "upload": "enabled",
+                    "version": "v1",
+                },
+                "block_page": {
+                    "target_uri": "https://example.com",
+                    "include_context": True,
+                },
+                "block_page_enabled": True,
+                "block_reason": "This website is a security risk",
+                "bypass_parent_rule": False,
+                "check_session": {
+                    "duration": "300s",
+                    "enforce": True,
+                },
+                "dns_resolvers": {
+                    "ipv4s": [{
+                        "ip": "2.2.2.2",
+                        "port": 5053,
+                        "route_through_private_network": True,
+                        "vnet_id": "f174e90a-fafe-4643-bbbc-4a0ed4fc8415",
+                    }],
+                    "ipv6s": [{
+                        "ip": "2001:DB8::",
+                        "port": 5053,
+                        "route_through_private_network": True,
+                        "vnet_id": "f174e90a-fafe-4643-bbbc-4a0ed4fc8415",
+                    }],
+                },
+                "egress": {
+                    "ipv4": "192.0.2.2",
+                    "ipv4_fallback": "192.0.2.3",
+                    "ipv6": "2001:DB8::/64",
+                },
+                "ignore_cname_category_matches": True,
+                "insecure_disable_dnssec_validation": False,
+                "ip_categories": True,
+                "ip_indicator_feeds": True,
+                "l4override": {
+                    "ip": "1.1.1.1",
+                    "port": 0,
+                },
+                "notification_settings": {
+                    "enabled": True,
+                    "include_context": True,
+                    "msg": "msg",
+                    "support_url": "support_url",
+                },
+                "override_host": "example.com",
+                "override_ips": [
+                    "1.1.1.1",
+                    "2.2.2.2",
+                ],
+                "payload_log": {
+                    "enabled": True,
+                },
+                "quarantine": {
+                    "file_types": ["exe"],
+                },
+                "redirect": {
+                    "target_uri": "https://example.com",
+                    "include_context": True,
+                    "preserve_path_and_query": True,
+                },
+                "resolve_dns_internally": {
+                    "fallback": "none",
+                    "view_id": "view_id",
+                },
+                "resolve_dns_through_cloudflare": True,
+                "untrusted_cert": {
+                    "action": "error",
+                },
+            },
+            schedule={
+                "fri": "08:00-12:30,13:30-17:00",
+                "mon": "08:00-12:30,13:30-17:00",
+                "sat": "08:00-12:30,13:30-17:00",
+                "sun": "08:00-12:30,13:30-17:00",
+                "thu": "08:00-12:30,13:30-17:00",
+                "time_zone": "America/New York",
+                "tue": "08:00-12:30,13:30-17:00",
+                "wed": "08:00-12:30,13:30-17:00",
+            },
+            traffic="http.request.uri matches \\".*a/partial/uri.*\\" and http.request.host in $01302951-49f9-47c9-a400-0297e60b6a10")
+        ```
+
         ## Import
 
         ```sh
@@ -694,7 +946,7 @@ class TeamsRule(pulumi.CustomResource):
         :param pulumi.Input[_builtins.str] description: Specify the rule description.
         :param pulumi.Input[_builtins.bool] enabled: Specify whether the rule is enabled.
         :param pulumi.Input[Union['TeamsRuleExpirationArgs', 'TeamsRuleExpirationArgsDict']] expiration: Defines the expiration time stamp and default duration of a DNS policy. Takes precedence over the policy's `schedule` configuration, if any. This  does not apply to HTTP or network policies. Settable only for `dns` rules.
-        :param pulumi.Input[Sequence[pulumi.Input[_builtins.str]]] filters: Specify the protocol or layer to evaluate the traffic, identity, and device posture expressions.
+        :param pulumi.Input[Sequence[pulumi.Input[_builtins.str]]] filters: Specify the protocol or layer to evaluate the traffic, identity, and device posture expressions. Can only contain a single value.
         :param pulumi.Input[_builtins.str] name: Specify the rule name.
         :param pulumi.Input[_builtins.bool] read_only: Indicate that this rule is shared via the Orgs API and read only.
         :param pulumi.Input[Union['TeamsRuleScheduleArgs', 'TeamsRuleScheduleArgsDict']] schedule: Defines the schedule for activating DNS policies. Settable only for `dns` and `dns_resolver` rules.
@@ -790,7 +1042,7 @@ class TeamsRule(pulumi.CustomResource):
     @pulumi.getter
     def filters(self) -> pulumi.Output[Optional[Sequence[_builtins.str]]]:
         """
-        Specify the protocol or layer to evaluate the traffic, identity, and device posture expressions.
+        Specify the protocol or layer to evaluate the traffic, identity, and device posture expressions. Can only contain a single value.
         """
         return pulumi.get(self, "filters")
 

pulumi_cloudflare/tunnel_config.py

@@ -24,7 +24,8 @@ class TunnelConfigArgs:
                  account_id: pulumi.Input[_builtins.str],
                  tunnel_id: pulumi.Input[_builtins.str],
                  config: Optional[pulumi.Input['TunnelConfigConfigArgs']] = None,
-                 source: Optional[pulumi.Input[_builtins.str]] = None):
+                 source: Optional[pulumi.Input[_builtins.str]] = None,
+                 warp_routing_enabled: Optional[pulumi.Input[_builtins.bool]] = None):
         """
         The set of arguments for constructing a TunnelConfig resource.
         :param pulumi.Input[_builtins.str] account_id: Identifier.
@@ -32,6 +33,7 @@ class TunnelConfigArgs:
         :param pulumi.Input['TunnelConfigConfigArgs'] config: The tunnel configuration and ingress rules.
         :param pulumi.Input[_builtins.str] source: Indicates if this is a locally or remotely configured tunnel. If `local`, manage the tunnel using a YAML file on the origin machine. If `cloudflare`, manage the tunnel's configuration on the Zero Trust dashboard.
                Available values: "local", "cloudflare".
+        :param pulumi.Input[_builtins.bool] warp_routing_enabled: Enable private network access from WARP users to private network routes. This is enabled if the tunnel has an assigned route.
         """
         pulumi.set(__self__, "account_id", account_id)
         pulumi.set(__self__, "tunnel_id", tunnel_id)
@@ -39,6 +41,8 @@ class TunnelConfigArgs:
             pulumi.set(__self__, "config", config)
         if source is not None:
             pulumi.set(__self__, "source", source)
+        if warp_routing_enabled is not None:
+            pulumi.set(__self__, "warp_routing_enabled", warp_routing_enabled)
 
     @_builtins.property
     @pulumi.getter(name="accountId")
@@ -89,6 +93,18 @@ class TunnelConfigArgs:
     def source(self, value: Optional[pulumi.Input[_builtins.str]]):
         pulumi.set(self, "source", value)
 
+    @_builtins.property
+    @pulumi.getter(name="warpRoutingEnabled")
+    def warp_routing_enabled(self) -> Optional[pulumi.Input[_builtins.bool]]:
+        """
+        Enable private network access from WARP users to private network routes. This is enabled if the tunnel has an assigned route.
+        """
+        return pulumi.get(self, "warp_routing_enabled")
+
+    @warp_routing_enabled.setter
+    def warp_routing_enabled(self, value: Optional[pulumi.Input[_builtins.bool]]):
+        pulumi.set(self, "warp_routing_enabled", value)
+
 
 @pulumi.input_type
 class _TunnelConfigState:
@@ -98,7 +114,8 @@ class _TunnelConfigState:
                  created_at: Optional[pulumi.Input[_builtins.str]] = None,
                  source: Optional[pulumi.Input[_builtins.str]] = None,
                  tunnel_id: Optional[pulumi.Input[_builtins.str]] = None,
-                 version: Optional[pulumi.Input[_builtins.int]] = None):
+                 version: Optional[pulumi.Input[_builtins.int]] = None,
+                 warp_routing_enabled: Optional[pulumi.Input[_builtins.bool]] = None):
         """
         Input properties used for looking up and filtering TunnelConfig resources.
         :param pulumi.Input[_builtins.str] account_id: Identifier.
@@ -107,6 +124,7 @@ class _TunnelConfigState:
                Available values: "local", "cloudflare".
         :param pulumi.Input[_builtins.str] tunnel_id: UUID of the tunnel.
         :param pulumi.Input[_builtins.int] version: The version of the Tunnel Configuration.
+        :param pulumi.Input[_builtins.bool] warp_routing_enabled: Enable private network access from WARP users to private network routes. This is enabled if the tunnel has an assigned route.
         """
         if account_id is not None:
             pulumi.set(__self__, "account_id", account_id)
@@ -120,6 +138,8 @@ class _TunnelConfigState:
             pulumi.set(__self__, "tunnel_id", tunnel_id)
         if version is not None:
             pulumi.set(__self__, "version", version)
+        if warp_routing_enabled is not None:
+            pulumi.set(__self__, "warp_routing_enabled", warp_routing_enabled)
 
     @_builtins.property
     @pulumi.getter(name="accountId")
@@ -191,6 +211,18 @@ class _TunnelConfigState:
     def version(self, value: Optional[pulumi.Input[_builtins.int]]):
         pulumi.set(self, "version", value)
 
+    @_builtins.property
+    @pulumi.getter(name="warpRoutingEnabled")
+    def warp_routing_enabled(self) -> Optional[pulumi.Input[_builtins.bool]]:
+        """
+        Enable private network access from WARP users to private network routes. This is enabled if the tunnel has an assigned route.
+        """
+        return pulumi.get(self, "warp_routing_enabled")
+
+    @warp_routing_enabled.setter
+    def warp_routing_enabled(self, value: Optional[pulumi.Input[_builtins.bool]]):
+        pulumi.set(self, "warp_routing_enabled", value)
+
 
 warnings.warn("""cloudflare.index/tunnelconfig.TunnelConfig has been deprecated in favor of cloudflare.index/zerotrusttunnelcloudflaredconfig.ZeroTrustTunnelCloudflaredConfig""", DeprecationWarning)
 
@@ -207,6 +239,7 @@ class TunnelConfig(pulumi.CustomResource):
                  config: Optional[pulumi.Input[Union['TunnelConfigConfigArgs', 'TunnelConfigConfigArgsDict']]] = None,
                  source: Optional[pulumi.Input[_builtins.str]] = None,
                  tunnel_id: Optional[pulumi.Input[_builtins.str]] = None,
+                 warp_routing_enabled: Optional[pulumi.Input[_builtins.bool]] = None,
                  __props__=None):
         """
         ## Example Usage
@@ -224,6 +257,7 @@ class TunnelConfig(pulumi.CustomResource):
         :param pulumi.Input[_builtins.str] source: Indicates if this is a locally or remotely configured tunnel. If `local`, manage the tunnel using a YAML file on the origin machine. If `cloudflare`, manage the tunnel's configuration on the Zero Trust dashboard.
                Available values: "local", "cloudflare".
         :param pulumi.Input[_builtins.str] tunnel_id: UUID of the tunnel.
+        :param pulumi.Input[_builtins.bool] warp_routing_enabled: Enable private network access from WARP users to private network routes. This is enabled if the tunnel has an assigned route.
         """
         ...
     @overload
@@ -259,6 +293,7 @@ class TunnelConfig(pulumi.CustomResource):
                  config: Optional[pulumi.Input[Union['TunnelConfigConfigArgs', 'TunnelConfigConfigArgsDict']]] = None,
                  source: Optional[pulumi.Input[_builtins.str]] = None,
                  tunnel_id: Optional[pulumi.Input[_builtins.str]] = None,
+                 warp_routing_enabled: Optional[pulumi.Input[_builtins.bool]] = None,
                  __props__=None):
         pulumi.log.warn("""TunnelConfig is deprecated: cloudflare.index/tunnelconfig.TunnelConfig has been deprecated in favor of cloudflare.index/zerotrusttunnelcloudflaredconfig.ZeroTrustTunnelCloudflaredConfig""")
         opts = pulumi.ResourceOptions.merge(_utilities.get_resource_opts_defaults(), opts)
@@ -277,6 +312,7 @@ class TunnelConfig(pulumi.CustomResource):
             if tunnel_id is None and not opts.urn:
                 raise TypeError("Missing required property 'tunnel_id'")
             __props__.__dict__["tunnel_id"] = tunnel_id
+            __props__.__dict__["warp_routing_enabled"] = warp_routing_enabled
             __props__.__dict__["created_at"] = None
             __props__.__dict__["version"] = None
         alias_opts = pulumi.ResourceOptions(aliases=[pulumi.Alias(type_="cloudflare:index/tunnelConfig:TunnelConfig")])
@@ -296,7 +332,8 @@ class TunnelConfig(pulumi.CustomResource):
             created_at: Optional[pulumi.Input[_builtins.str]] = None,
             source: Optional[pulumi.Input[_builtins.str]] = None,
             tunnel_id: Optional[pulumi.Input[_builtins.str]] = None,
-            version: Optional[pulumi.Input[_builtins.int]] = None) -> 'TunnelConfig':
+            version: Optional[pulumi.Input[_builtins.int]] = None,
+            warp_routing_enabled: Optional[pulumi.Input[_builtins.bool]] = None) -> 'TunnelConfig':
         """
         Get an existing TunnelConfig resource's state with the given name, id, and optional extra
         properties used to qualify the lookup.
@@ -310,6 +347,7 @@ class TunnelConfig(pulumi.CustomResource):
                Available values: "local", "cloudflare".
         :param pulumi.Input[_builtins.str] tunnel_id: UUID of the tunnel.
         :param pulumi.Input[_builtins.int] version: The version of the Tunnel Configuration.
+        :param pulumi.Input[_builtins.bool] warp_routing_enabled: Enable private network access from WARP users to private network routes. This is enabled if the tunnel has an assigned route.
         """
         opts = pulumi.ResourceOptions.merge(opts, pulumi.ResourceOptions(id=id))
 
@@ -321,6 +359,7 @@ class TunnelConfig(pulumi.CustomResource):
         __props__.__dict__["source"] = source
         __props__.__dict__["tunnel_id"] = tunnel_id
         __props__.__dict__["version"] = version
+        __props__.__dict__["warp_routing_enabled"] = warp_routing_enabled
         return TunnelConfig(resource_name, opts=opts, __props__=__props__)
 
     @_builtins.property
@@ -369,3 +408,11 @@ class TunnelConfig(pulumi.CustomResource):
         """
         return pulumi.get(self, "version")
 
+    @_builtins.property
+    @pulumi.getter(name="warpRoutingEnabled")
+    def warp_routing_enabled(self) -> pulumi.Output[_builtins.bool]:
+        """
+        Enable private network access from WARP users to private network routes. This is enabled if the tunnel has an assigned route.
+        """
+        return pulumi.get(self, "warp_routing_enabled")
+

pulumi_cloudflare/worker.py

@@ -144,6 +144,7 @@ class _WorkerState:
                  logpush: Optional[pulumi.Input[_builtins.bool]] = None,
                  name: Optional[pulumi.Input[_builtins.str]] = None,
                  observability: Optional[pulumi.Input['WorkerObservabilityArgs']] = None,
+                 references: Optional[pulumi.Input['WorkerReferencesArgs']] = None,
                  subdomain: Optional[pulumi.Input['WorkerSubdomainArgs']] = None,
                  tags: Optional[pulumi.Input[Sequence[pulumi.Input[_builtins.str]]]] = None,
                  tail_consumers: Optional[pulumi.Input[Sequence[pulumi.Input['WorkerTailConsumerArgs']]]] = None,
@@ -155,6 +156,7 @@ class _WorkerState:
         :param pulumi.Input[_builtins.bool] logpush: Whether logpush is enabled for the Worker.
         :param pulumi.Input[_builtins.str] name: Name of the Worker.
         :param pulumi.Input['WorkerObservabilityArgs'] observability: Observability settings for the Worker.
+        :param pulumi.Input['WorkerReferencesArgs'] references: Other resources that reference the Worker and depend on it existing.
         :param pulumi.Input['WorkerSubdomainArgs'] subdomain: Subdomain settings for the Worker.
         :param pulumi.Input[Sequence[pulumi.Input[_builtins.str]]] tags: Tags associated with the Worker.
         :param pulumi.Input[Sequence[pulumi.Input['WorkerTailConsumerArgs']]] tail_consumers: Other Workers that should consume logs from the Worker.
@@ -170,6 +172,8 @@ class _WorkerState:
             pulumi.set(__self__, "name", name)
         if observability is not None:
             pulumi.set(__self__, "observability", observability)
+        if references is not None:
+            pulumi.set(__self__, "references", references)
         if subdomain is not None:
             pulumi.set(__self__, "subdomain", subdomain)
         if tags is not None:
@@ -239,6 +243,18 @@ class _WorkerState:
     def observability(self, value: Optional[pulumi.Input['WorkerObservabilityArgs']]):
         pulumi.set(self, "observability", value)
 
+    @_builtins.property
+    @pulumi.getter
+    def references(self) -> Optional[pulumi.Input['WorkerReferencesArgs']]:
+        """
+        Other resources that reference the Worker and depend on it existing.
+        """
+        return pulumi.get(self, "references")
+
+    @references.setter
+    def references(self, value: Optional[pulumi.Input['WorkerReferencesArgs']]):
+        pulumi.set(self, "references", value)
+
     @_builtins.property
     @pulumi.getter
     def subdomain(self) -> Optional[pulumi.Input['WorkerSubdomainArgs']]:
@@ -305,6 +321,36 @@ class Worker(pulumi.CustomResource):
         """
         ## Example Usage
 
+        ```python
+        import pulumi
+        import pulumi_cloudflare as cloudflare
+
+        example_worker = cloudflare.Worker("example_worker",
+            account_id="023e105f4ecef8ad9ca31a8372d0c353",
+            name="my-worker",
+            logpush=True,
+            observability={
+                "enabled": True,
+                "head_sampling_rate": 1,
+                "logs": {
+                    "enabled": True,
+                    "head_sampling_rate": 1,
+                    "invocation_logs": True,
+                },
+            },
+            subdomain={
+                "enabled": True,
+                "previews_enabled": True,
+            },
+            tags=[
+                "my-team",
+                "my-public-api",
+            ],
+            tail_consumers=[{
+                "name": "my-tail-consumer",
+            }])
+        ```
+
         ## Import
 
         ```sh
@@ -330,6 +376,36 @@ class Worker(pulumi.CustomResource):
         """
         ## Example Usage
 
+        ```python
+        import pulumi
+        import pulumi_cloudflare as cloudflare
+
+        example_worker = cloudflare.Worker("example_worker",
+            account_id="023e105f4ecef8ad9ca31a8372d0c353",
+            name="my-worker",
+            logpush=True,
+            observability={
+                "enabled": True,
+                "head_sampling_rate": 1,
+                "logs": {
+                    "enabled": True,
+                    "head_sampling_rate": 1,
+                    "invocation_logs": True,
+                },
+            },
+            subdomain={
+                "enabled": True,
+                "previews_enabled": True,
+            },
+            tags=[
+                "my-team",
+                "my-public-api",
+            ],
+            tail_consumers=[{
+                "name": "my-tail-consumer",
+            }])
+        ```
+
         ## Import
 
         ```sh
@@ -379,6 +455,7 @@ class Worker(pulumi.CustomResource):
             __props__.__dict__["tags"] = tags
             __props__.__dict__["tail_consumers"] = tail_consumers
             __props__.__dict__["created_on"] = None
+            __props__.__dict__["references"] = None
             __props__.__dict__["updated_on"] = None
         super(Worker, __self__).__init__(
             'cloudflare:index/worker:Worker',
@@ -395,6 +472,7 @@ class Worker(pulumi.CustomResource):
             logpush: Optional[pulumi.Input[_builtins.bool]] = None,
             name: Optional[pulumi.Input[_builtins.str]] = None,
             observability: Optional[pulumi.Input[Union['WorkerObservabilityArgs', 'WorkerObservabilityArgsDict']]] = None,
+            references: Optional[pulumi.Input[Union['WorkerReferencesArgs', 'WorkerReferencesArgsDict']]] = None,
             subdomain: Optional[pulumi.Input[Union['WorkerSubdomainArgs', 'WorkerSubdomainArgsDict']]] = None,
             tags: Optional[pulumi.Input[Sequence[pulumi.Input[_builtins.str]]]] = None,
             tail_consumers: Optional[pulumi.Input[Sequence[pulumi.Input[Union['WorkerTailConsumerArgs', 'WorkerTailConsumerArgsDict']]]]] = None,
@@ -411,6 +489,7 @@ class Worker(pulumi.CustomResource):
         :param pulumi.Input[_builtins.bool] logpush: Whether logpush is enabled for the Worker.
         :param pulumi.Input[_builtins.str] name: Name of the Worker.
         :param pulumi.Input[Union['WorkerObservabilityArgs', 'WorkerObservabilityArgsDict']] observability: Observability settings for the Worker.
+        :param pulumi.Input[Union['WorkerReferencesArgs', 'WorkerReferencesArgsDict']] references: Other resources that reference the Worker and depend on it existing.
         :param pulumi.Input[Union['WorkerSubdomainArgs', 'WorkerSubdomainArgsDict']] subdomain: Subdomain settings for the Worker.
         :param pulumi.Input[Sequence[pulumi.Input[_builtins.str]]] tags: Tags associated with the Worker.
         :param pulumi.Input[Sequence[pulumi.Input[Union['WorkerTailConsumerArgs', 'WorkerTailConsumerArgsDict']]]] tail_consumers: Other Workers that should consume logs from the Worker.
@@ -425,6 +504,7 @@ class Worker(pulumi.CustomResource):
         __props__.__dict__["logpush"] = logpush
         __props__.__dict__["name"] = name
         __props__.__dict__["observability"] = observability
+        __props__.__dict__["references"] = references
         __props__.__dict__["subdomain"] = subdomain
         __props__.__dict__["tags"] = tags
         __props__.__dict__["tail_consumers"] = tail_consumers
@@ -471,6 +551,14 @@ class Worker(pulumi.CustomResource):
         """
         return pulumi.get(self, "observability")
 
+    @_builtins.property
+    @pulumi.getter
+    def references(self) -> pulumi.Output['outputs.WorkerReferences']:
+        """
+        Other resources that reference the Worker and depend on it existing.
+        """
+        return pulumi.get(self, "references")
+
     @_builtins.property
     @pulumi.getter
     def subdomain(self) -> pulumi.Output['outputs.WorkerSubdomain']: