pulumi-gcp 7.12.0a1709102105__py3-none-any.whl → 7.12.0a1709149267__py3-none-any.whl
Sign up to get free protection for your applications and to get access to all the features.
- pulumi_gcp/accessapproval/get_folder_service_account.py +2 -2
- pulumi_gcp/accessapproval/get_organization_service_account.py +2 -2
- pulumi_gcp/accessapproval/get_project_service_account.py +2 -2
- pulumi_gcp/accesscontextmanager/access_level.py +10 -8
- pulumi_gcp/accesscontextmanager/access_level_condition.py +2 -0
- pulumi_gcp/accesscontextmanager/access_levels.py +16 -16
- pulumi_gcp/accesscontextmanager/access_policy.py +12 -6
- pulumi_gcp/accesscontextmanager/access_policy_iam_binding.py +10 -2
- pulumi_gcp/accesscontextmanager/access_policy_iam_member.py +10 -2
- pulumi_gcp/accesscontextmanager/access_policy_iam_policy.py +10 -2
- pulumi_gcp/accesscontextmanager/authorized_orgs_desc.py +8 -6
- pulumi_gcp/accesscontextmanager/gcp_user_access_binding.py +80 -0
- pulumi_gcp/accesscontextmanager/get_access_policy_iam_policy.py +2 -2
- pulumi_gcp/accesscontextmanager/service_perimeter.py +34 -24
- pulumi_gcp/accesscontextmanager/service_perimeter_resource.py +6 -4
- pulumi_gcp/accesscontextmanager/service_perimeters.py +14 -12
- pulumi_gcp/activedirectory/domain_trust.py +6 -6
- pulumi_gcp/activedirectory/peering.py +20 -22
- pulumi_gcp/alloydb/backup.py +62 -66
- pulumi_gcp/alloydb/cluster.py +78 -82
- pulumi_gcp/alloydb/instance.py +70 -74
- pulumi_gcp/alloydb/user.py +44 -48
- pulumi_gcp/apigateway/api.py +2 -4
- pulumi_gcp/apigateway/api_config.py +86 -14
- pulumi_gcp/apigateway/api_config_iam_binding.py +18 -24
- pulumi_gcp/apigateway/api_config_iam_member.py +18 -24
- pulumi_gcp/apigateway/api_config_iam_policy.py +18 -24
- pulumi_gcp/apigateway/api_iam_binding.py +18 -24
- pulumi_gcp/apigateway/api_iam_member.py +18 -24
- pulumi_gcp/apigateway/api_iam_policy.py +18 -24
- pulumi_gcp/apigateway/gateway.py +16 -22
- pulumi_gcp/apigateway/gateway_iam_binding.py +24 -30
- pulumi_gcp/apigateway/gateway_iam_member.py +24 -30
- pulumi_gcp/apigateway/gateway_iam_policy.py +24 -30
- pulumi_gcp/apigee/addons_config.py +22 -26
- pulumi_gcp/apigee/endpoint_attachment.py +14 -14
- pulumi_gcp/apigee/env_group.py +16 -14
- pulumi_gcp/apigee/env_group_attachment.py +0 -100
- pulumi_gcp/apigee/environment.py +14 -12
- pulumi_gcp/apigee/environment_iam_binding.py +12 -12
- pulumi_gcp/apigee/environment_iam_member.py +12 -12
- pulumi_gcp/apigee/environment_iam_policy.py +12 -12
- pulumi_gcp/apigee/get_environment_iam_policy.py +4 -4
- pulumi_gcp/apigee/instance.py +84 -76
- pulumi_gcp/apigee/instance_attachment.py +0 -100
- pulumi_gcp/apigee/keystores_aliases_self_signed_cert.py +40 -40
- pulumi_gcp/apigee/nat_address.py +42 -36
- pulumi_gcp/apigee/organization.py +62 -58
- pulumi_gcp/apigee/sync_authorization.py +16 -12
- pulumi_gcp/apigee/target_server.py +34 -36
- pulumi_gcp/appengine/application.py +8 -2
- pulumi_gcp/appengine/application_url_dispatch_rules.py +12 -6
- pulumi_gcp/appengine/domain_mapping.py +2 -2
- pulumi_gcp/appengine/engine_split_traffic.py +12 -6
- pulumi_gcp/appengine/firewall_rule.py +6 -2
- pulumi_gcp/appengine/flexible_app_version.py +20 -12
- pulumi_gcp/appengine/service_network_settings.py +14 -8
- pulumi_gcp/appengine/standard_app_version.py +18 -12
- pulumi_gcp/artifactregistry/get_repository_iam_policy.py +6 -6
- pulumi_gcp/artifactregistry/repository.py +78 -82
- pulumi_gcp/artifactregistry/repository_iam_binding.py +18 -18
- pulumi_gcp/artifactregistry/repository_iam_member.py +18 -18
- pulumi_gcp/artifactregistry/repository_iam_policy.py +18 -18
- pulumi_gcp/artifactregistry/vpcsc_config.py +2 -4
- pulumi_gcp/assuredworkloads/workload.py +16 -18
- pulumi_gcp/backupdisasterrecovery/management_server.py +20 -24
- pulumi_gcp/beyondcorp/app_connection.py +44 -30
- pulumi_gcp/beyondcorp/app_connector.py +22 -16
- pulumi_gcp/beyondcorp/app_gateway.py +20 -16
- pulumi_gcp/biglake/catalog.py +6 -2
- pulumi_gcp/biglake/database.py +14 -4
- pulumi_gcp/biglake/table.py +20 -6
- pulumi_gcp/bigquery/app_profile.py +8 -0
- pulumi_gcp/bigquery/capacity_commitment.py +4 -4
- pulumi_gcp/bigquery/connection.py +72 -54
- pulumi_gcp/bigquery/connection_iam_binding.py +18 -18
- pulumi_gcp/bigquery/connection_iam_member.py +18 -18
- pulumi_gcp/bigquery/connection_iam_policy.py +18 -18
- pulumi_gcp/bigquery/data_transfer_config.py +8 -12
- pulumi_gcp/bigquery/dataset.py +20 -14
- pulumi_gcp/bigquery/dataset_access.py +16 -16
- pulumi_gcp/bigquery/dataset_iam_binding.py +4 -4
- pulumi_gcp/bigquery/dataset_iam_member.py +4 -4
- pulumi_gcp/bigquery/dataset_iam_policy.py +4 -4
- pulumi_gcp/bigquery/get_connection_iam_policy.py +6 -6
- pulumi_gcp/bigquery/get_dataset_iam_policy.py +2 -2
- pulumi_gcp/bigquery/get_default_service_account.py +4 -4
- pulumi_gcp/bigquery/get_table_iam_policy.py +6 -6
- pulumi_gcp/bigquery/iam_binding.py +36 -36
- pulumi_gcp/bigquery/iam_member.py +36 -36
- pulumi_gcp/bigquery/iam_policy.py +36 -36
- pulumi_gcp/bigquery/job.py +326 -20
- pulumi_gcp/bigquery/reservation.py +14 -12
- pulumi_gcp/bigquery/reservation_assignment.py +2 -0
- pulumi_gcp/bigquery/routine.py +22 -22
- pulumi_gcp/bigquery/table.py +8 -8
- pulumi_gcp/bigqueryanalyticshub/data_exchange.py +6 -6
- pulumi_gcp/bigqueryanalyticshub/data_exchange_iam_binding.py +18 -18
- pulumi_gcp/bigqueryanalyticshub/data_exchange_iam_member.py +18 -18
- pulumi_gcp/bigqueryanalyticshub/data_exchange_iam_policy.py +18 -18
- pulumi_gcp/bigqueryanalyticshub/get_data_exchange_iam_policy.py +6 -6
- pulumi_gcp/bigqueryanalyticshub/get_listing_iam_policy.py +8 -8
- pulumi_gcp/bigqueryanalyticshub/listing.py +16 -16
- pulumi_gcp/bigqueryanalyticshub/listing_iam_binding.py +24 -24
- pulumi_gcp/bigqueryanalyticshub/listing_iam_member.py +24 -24
- pulumi_gcp/bigqueryanalyticshub/listing_iam_policy.py +24 -24
- pulumi_gcp/bigquerydatapolicy/data_policy.py +4 -4
- pulumi_gcp/bigquerydatapolicy/data_policy_iam_binding.py +18 -18
- pulumi_gcp/bigquerydatapolicy/data_policy_iam_member.py +18 -18
- pulumi_gcp/bigquerydatapolicy/data_policy_iam_policy.py +18 -18
- pulumi_gcp/bigquerydatapolicy/get_iam_policy.py +6 -6
- pulumi_gcp/bigtable/gc_policy.py +0 -208
- pulumi_gcp/bigtable/get_instance_iam_policy.py +2 -2
- pulumi_gcp/bigtable/get_table_iam_policy.py +4 -4
- pulumi_gcp/bigtable/instance.py +14 -10
- pulumi_gcp/bigtable/instance_iam_binding.py +8 -8
- pulumi_gcp/bigtable/instance_iam_member.py +8 -8
- pulumi_gcp/bigtable/instance_iam_policy.py +8 -8
- pulumi_gcp/bigtable/table.py +18 -12
- pulumi_gcp/bigtable/table_iam_binding.py +8 -8
- pulumi_gcp/bigtable/table_iam_member.py +8 -8
- pulumi_gcp/bigtable/table_iam_policy.py +8 -8
- pulumi_gcp/billing/account_iam_binding.py +8 -8
- pulumi_gcp/billing/account_iam_member.py +8 -8
- pulumi_gcp/billing/account_iam_policy.py +8 -8
- pulumi_gcp/billing/budget.py +2 -2
- pulumi_gcp/billing/project_info.py +28 -0
- pulumi_gcp/binaryauthorization/attestor.py +74 -52
- pulumi_gcp/binaryauthorization/attestor_iam_binding.py +12 -12
- pulumi_gcp/binaryauthorization/attestor_iam_member.py +12 -12
- pulumi_gcp/binaryauthorization/attestor_iam_policy.py +12 -12
- pulumi_gcp/binaryauthorization/get_attestor_iam_policy.py +4 -4
- pulumi_gcp/binaryauthorization/policy.py +48 -32
- pulumi_gcp/blockchainnodeengine/blockchain_nodes.py +38 -38
- pulumi_gcp/certificateauthority/authority.py +34 -42
- pulumi_gcp/certificateauthority/ca_pool.py +274 -6
- pulumi_gcp/certificateauthority/ca_pool_iam_binding.py +12 -12
- pulumi_gcp/certificateauthority/ca_pool_iam_member.py +12 -12
- pulumi_gcp/certificateauthority/ca_pool_iam_policy.py +12 -12
- pulumi_gcp/certificateauthority/certificate.py +264 -44
- pulumi_gcp/certificateauthority/certificate_template.py +168 -0
- pulumi_gcp/certificateauthority/certificate_template_iam_binding.py +12 -12
- pulumi_gcp/certificateauthority/certificate_template_iam_member.py +12 -12
- pulumi_gcp/certificateauthority/certificate_template_iam_policy.py +12 -12
- pulumi_gcp/certificateauthority/get_ca_pool_iam_policy.py +2 -2
- pulumi_gcp/certificateauthority/get_certificate_template_iam_policy.py +2 -2
- pulumi_gcp/certificatemanager/certificate.py +114 -84
- pulumi_gcp/certificatemanager/certificate_issuance_config.py +34 -32
- pulumi_gcp/certificatemanager/certificate_map.py +2 -0
- pulumi_gcp/certificatemanager/certificate_map_entry.py +12 -2
- pulumi_gcp/certificatemanager/dns_authorization.py +2 -0
- pulumi_gcp/certificatemanager/trust_config.py +8 -4
- pulumi_gcp/cloudasset/folder_feed.py +82 -0
- pulumi_gcp/cloudasset/organization_feed.py +74 -0
- pulumi_gcp/cloudasset/project_feed.py +70 -0
- pulumi_gcp/cloudbuild/bitbucket_server_config.py +98 -14
- pulumi_gcp/cloudbuild/get_trigger.py +2 -2
- pulumi_gcp/cloudbuild/trigger.py +650 -122
- pulumi_gcp/cloudbuild/worker_pool.py +20 -16
- pulumi_gcp/cloudbuildv2/connection.py +20 -18
- pulumi_gcp/cloudbuildv2/connection_iam_binding.py +18 -12
- pulumi_gcp/cloudbuildv2/connection_iam_member.py +18 -12
- pulumi_gcp/cloudbuildv2/connection_iam_policy.py +18 -12
- pulumi_gcp/cloudbuildv2/get_connection_iam_policy.py +6 -6
- pulumi_gcp/cloudbuildv2/repository.py +18 -14
- pulumi_gcp/clouddeploy/automation.py +16 -16
- pulumi_gcp/clouddeploy/custom_target_type.py +38 -32
- pulumi_gcp/clouddeploy/delivery_pipeline.py +40 -38
- pulumi_gcp/clouddeploy/get_delivery_pipeline_iam_policy.py +6 -6
- pulumi_gcp/clouddeploy/target.py +26 -24
- pulumi_gcp/clouddomains/registration.py +74 -74
- pulumi_gcp/cloudfunctions/function.py +20 -4
- pulumi_gcp/cloudfunctions/function_iam_binding.py +18 -18
- pulumi_gcp/cloudfunctions/function_iam_member.py +18 -18
- pulumi_gcp/cloudfunctions/function_iam_policy.py +18 -18
- pulumi_gcp/cloudfunctions/get_function_iam_policy.py +6 -6
- pulumi_gcp/cloudfunctionsv2/function.py +776 -42
- pulumi_gcp/cloudfunctionsv2/function_iam_binding.py +18 -18
- pulumi_gcp/cloudfunctionsv2/function_iam_member.py +18 -18
- pulumi_gcp/cloudfunctionsv2/function_iam_policy.py +18 -18
- pulumi_gcp/cloudfunctionsv2/get_function.py +4 -4
- pulumi_gcp/cloudfunctionsv2/get_function_iam_policy.py +6 -6
- pulumi_gcp/cloudidentity/group.py +8 -8
- pulumi_gcp/cloudidentity/group_membership.py +4 -4
- pulumi_gcp/cloudids/endpoint.py +12 -10
- pulumi_gcp/cloudrun/domain_mapping.py +10 -6
- pulumi_gcp/cloudrun/get_service.py +4 -4
- pulumi_gcp/cloudrun/get_service_iam_policy.py +6 -6
- pulumi_gcp/cloudrun/iam_binding.py +18 -18
- pulumi_gcp/cloudrun/iam_member.py +18 -18
- pulumi_gcp/cloudrun/iam_policy.py +18 -18
- pulumi_gcp/cloudrun/service.py +28 -14
- pulumi_gcp/cloudrunv2/get_job.py +4 -4
- pulumi_gcp/cloudrunv2/get_job_iam_policy.py +6 -6
- pulumi_gcp/cloudrunv2/get_service.py +4 -4
- pulumi_gcp/cloudrunv2/get_service_iam_policy.py +6 -6
- pulumi_gcp/cloudrunv2/job.py +56 -46
- pulumi_gcp/cloudrunv2/job_iam_binding.py +18 -12
- pulumi_gcp/cloudrunv2/job_iam_member.py +18 -12
- pulumi_gcp/cloudrunv2/job_iam_policy.py +18 -12
- pulumi_gcp/cloudrunv2/service.py +94 -68
- pulumi_gcp/cloudrunv2/service_iam_binding.py +18 -12
- pulumi_gcp/cloudrunv2/service_iam_member.py +18 -12
- pulumi_gcp/cloudrunv2/service_iam_policy.py +18 -12
- pulumi_gcp/cloudscheduler/job.py +168 -26
- pulumi_gcp/cloudtasks/get_queue_iam_policy.py +6 -6
- pulumi_gcp/cloudtasks/queue.py +18 -12
- pulumi_gcp/cloudtasks/queue_iam_binding.py +18 -12
- pulumi_gcp/cloudtasks/queue_iam_member.py +18 -12
- pulumi_gcp/cloudtasks/queue_iam_policy.py +18 -12
- pulumi_gcp/composer/get_environment.py +22 -0
- pulumi_gcp/composer/get_image_versions.py +2 -0
- pulumi_gcp/compute/address.py +32 -18
- pulumi_gcp/compute/attached_disk.py +8 -6
- pulumi_gcp/compute/autoscaler.py +34 -28
- pulumi_gcp/compute/backend_bucket.py +42 -16
- pulumi_gcp/compute/backend_bucket_signed_url_key.py +16 -8
- pulumi_gcp/compute/backend_service.py +350 -34
- pulumi_gcp/compute/backend_service_signed_url_key.py +98 -0
- pulumi_gcp/compute/disk.py +26 -18
- pulumi_gcp/compute/disk_async_replication.py +4 -0
- pulumi_gcp/compute/disk_iam_binding.py +18 -12
- pulumi_gcp/compute/disk_iam_member.py +18 -12
- pulumi_gcp/compute/disk_iam_policy.py +18 -12
- pulumi_gcp/compute/disk_resource_policy_attachment.py +12 -6
- pulumi_gcp/compute/external_vpn_gateway.py +40 -16
- pulumi_gcp/compute/firewall.py +16 -12
- pulumi_gcp/compute/firewall_policy.py +4 -4
- pulumi_gcp/compute/firewall_policy_association.py +10 -8
- pulumi_gcp/compute/firewall_policy_rule.py +4 -2
- pulumi_gcp/compute/forwarding_rule.py +1840 -22
- pulumi_gcp/compute/get_address.py +6 -2
- pulumi_gcp/compute/get_addresses.py +6 -2
- pulumi_gcp/compute/get_backend_service.py +32 -0
- pulumi_gcp/compute/get_disk.py +0 -2
- pulumi_gcp/compute/get_disk_iam_policy.py +6 -6
- pulumi_gcp/compute/get_global_address.py +6 -2
- pulumi_gcp/compute/get_image.py +0 -2
- pulumi_gcp/compute/get_image_iam_policy.py +4 -4
- pulumi_gcp/compute/get_instance_iam_policy.py +6 -6
- pulumi_gcp/compute/get_instance_serial_port.py +10 -8
- pulumi_gcp/compute/get_instance_template.py +0 -22
- pulumi_gcp/compute/get_lbip_ranges.py +4 -2
- pulumi_gcp/compute/get_machine_types.py +100 -0
- pulumi_gcp/compute/get_netblock_ip_ranges.py +4 -2
- pulumi_gcp/compute/get_network_peering.py +16 -4
- pulumi_gcp/compute/get_node_types.py +4 -2
- pulumi_gcp/compute/get_region_disk_iam_policy.py +6 -6
- pulumi_gcp/compute/get_region_instance_template.py +4 -0
- pulumi_gcp/compute/get_regions.py +2 -0
- pulumi_gcp/compute/get_snapshot.py +4 -0
- pulumi_gcp/compute/get_snapshot_iam_policy.py +4 -4
- pulumi_gcp/compute/get_subnetwork_iam_policy.py +6 -6
- pulumi_gcp/compute/global_address.py +12 -10
- pulumi_gcp/compute/global_forwarding_rule.py +1574 -56
- pulumi_gcp/compute/global_network_endpoint.py +2 -0
- pulumi_gcp/compute/global_network_endpoint_group.py +8 -4
- pulumi_gcp/compute/ha_vpn_gateway.py +38 -10
- pulumi_gcp/compute/health_check.py +114 -90
- pulumi_gcp/compute/http_health_check.py +6 -4
- pulumi_gcp/compute/https_health_check.py +6 -4
- pulumi_gcp/compute/image.py +22 -14
- pulumi_gcp/compute/image_iam_binding.py +24 -24
- pulumi_gcp/compute/image_iam_member.py +24 -24
- pulumi_gcp/compute/image_iam_policy.py +24 -24
- pulumi_gcp/compute/instance.py +16 -14
- pulumi_gcp/compute/instance_from_machine_image.py +4 -4
- pulumi_gcp/compute/instance_from_template.py +10 -6
- pulumi_gcp/compute/instance_group.py +108 -6
- pulumi_gcp/compute/instance_group_manager.py +16 -12
- pulumi_gcp/compute/instance_group_membership.py +6 -4
- pulumi_gcp/compute/instance_group_named_port.py +22 -10
- pulumi_gcp/compute/instance_iam_binding.py +36 -36
- pulumi_gcp/compute/instance_iam_member.py +36 -36
- pulumi_gcp/compute/instance_iam_policy.py +36 -36
- pulumi_gcp/compute/instance_settings.py +4 -6
- pulumi_gcp/compute/instance_template.py +150 -12
- pulumi_gcp/compute/interconnect_attachment.py +28 -10
- pulumi_gcp/compute/machine_image.py +30 -24
- pulumi_gcp/compute/machine_image_iam_binding.py +36 -48
- pulumi_gcp/compute/machine_image_iam_member.py +36 -48
- pulumi_gcp/compute/machine_image_iam_policy.py +36 -48
- pulumi_gcp/compute/managed_ssl_certificate.py +212 -0
- pulumi_gcp/compute/manged_ssl_certificate.py +212 -0
- pulumi_gcp/compute/network.py +18 -14
- pulumi_gcp/compute/network_attachment.py +60 -52
- pulumi_gcp/compute/network_edge_security_service.py +4 -4
- pulumi_gcp/compute/network_endpoint.py +32 -22
- pulumi_gcp/compute/network_endpoint_group.py +20 -10
- pulumi_gcp/compute/network_endpoint_list.py +44 -32
- pulumi_gcp/compute/network_firewall_policy.py +6 -2
- pulumi_gcp/compute/network_firewall_policy_association.py +8 -4
- pulumi_gcp/compute/network_firewall_policy_rule.py +14 -10
- pulumi_gcp/compute/network_peering.py +16 -4
- pulumi_gcp/compute/network_peering_routes_config.py +38 -18
- pulumi_gcp/compute/node_group.py +28 -10
- pulumi_gcp/compute/node_template.py +12 -8
- pulumi_gcp/compute/organization_security_policy.py +2 -4
- pulumi_gcp/compute/organization_security_policy_association.py +22 -28
- pulumi_gcp/compute/organization_security_policy_rule.py +10 -14
- pulumi_gcp/compute/packet_mirroring.py +128 -0
- pulumi_gcp/compute/per_instance_config.py +16 -8
- pulumi_gcp/compute/project_metadata.py +6 -8
- pulumi_gcp/compute/public_advertised_prefix.py +2 -0
- pulumi_gcp/compute/public_delegated_prefix.py +4 -0
- pulumi_gcp/compute/region_autoscaler.py +14 -8
- pulumi_gcp/compute/region_backend_service.py +462 -2
- pulumi_gcp/compute/region_commitment.py +20 -16
- pulumi_gcp/compute/region_disk.py +20 -8
- pulumi_gcp/compute/region_disk_iam_binding.py +18 -12
- pulumi_gcp/compute/region_disk_iam_member.py +18 -12
- pulumi_gcp/compute/region_disk_iam_policy.py +18 -12
- pulumi_gcp/compute/region_disk_resource_policy_attachment.py +16 -6
- pulumi_gcp/compute/region_health_check.py +114 -90
- pulumi_gcp/compute/region_instance_group_manager.py +14 -8
- pulumi_gcp/compute/region_network_endpoint.py +16 -4
- pulumi_gcp/compute/region_network_endpoint_group.py +166 -32
- pulumi_gcp/compute/region_network_firewall_policy.py +6 -2
- pulumi_gcp/compute/region_network_firewall_policy_association.py +8 -4
- pulumi_gcp/compute/region_network_firewall_policy_rule.py +14 -10
- pulumi_gcp/compute/region_per_instance_config.py +12 -4
- pulumi_gcp/compute/region_security_policy.py +12 -12
- pulumi_gcp/compute/region_security_policy_rule.py +38 -48
- pulumi_gcp/compute/region_ssl_certificate.py +138 -32
- pulumi_gcp/compute/region_target_http_proxy.py +88 -4
- pulumi_gcp/compute/region_target_https_proxy.py +96 -0
- pulumi_gcp/compute/region_target_tcp_proxy.py +52 -0
- pulumi_gcp/compute/region_url_map.py +1038 -0
- pulumi_gcp/compute/reservation.py +10 -8
- pulumi_gcp/compute/resource_policy.py +60 -48
- pulumi_gcp/compute/route.py +206 -4
- pulumi_gcp/compute/router.py +18 -6
- pulumi_gcp/compute/router_interface.py +6 -4
- pulumi_gcp/compute/router_nat.py +82 -42
- pulumi_gcp/compute/router_peer.py +72 -42
- pulumi_gcp/compute/security_policy.py +120 -108
- pulumi_gcp/compute/security_scan_config.py +4 -6
- pulumi_gcp/compute/service_attachment.py +376 -0
- pulumi_gcp/compute/snapshot.py +8 -0
- pulumi_gcp/compute/snapshot_iam_binding.py +12 -6
- pulumi_gcp/compute/snapshot_iam_member.py +12 -6
- pulumi_gcp/compute/snapshot_iam_policy.py +12 -6
- pulumi_gcp/compute/ssl_certificate.py +118 -30
- pulumi_gcp/compute/ssl_policy.py +20 -12
- pulumi_gcp/compute/subnetwork.py +58 -30
- pulumi_gcp/compute/subnetwork_iam_binding.py +36 -36
- pulumi_gcp/compute/subnetwork_iam_member.py +36 -36
- pulumi_gcp/compute/subnetwork_iam_policy.py +36 -36
- pulumi_gcp/compute/target_grpc_proxy.py +176 -0
- pulumi_gcp/compute/target_http_proxy.py +166 -10
- pulumi_gcp/compute/target_https_proxy.py +336 -14
- pulumi_gcp/compute/target_instance.py +136 -16
- pulumi_gcp/compute/target_pool.py +40 -0
- pulumi_gcp/compute/target_ssl_proxy.py +54 -0
- pulumi_gcp/compute/target_tcp_proxy.py +44 -0
- pulumi_gcp/compute/url_map.py +1146 -0
- pulumi_gcp/compute/vpn_gateway.py +28 -24
- pulumi_gcp/compute/vpn_tunnel.py +40 -36
- pulumi_gcp/container/_inputs.py +0 -188
- pulumi_gcp/container/attached_cluster.py +124 -0
- pulumi_gcp/container/aws_cluster.py +46 -42
- pulumi_gcp/container/aws_node_pool.py +34 -26
- pulumi_gcp/container/azure_client.py +6 -4
- pulumi_gcp/container/azure_cluster.py +30 -26
- pulumi_gcp/container/azure_node_pool.py +12 -6
- pulumi_gcp/container/cluster.py +62 -6
- pulumi_gcp/container/get_attached_versions.py +2 -2
- pulumi_gcp/container/get_aws_versions.py +2 -2
- pulumi_gcp/container/get_azure_versions.py +2 -2
- pulumi_gcp/container/get_engine_versions.py +2 -0
- pulumi_gcp/container/node_pool.py +68 -2
- pulumi_gcp/container/outputs.py +0 -188
- pulumi_gcp/container/registry.py +4 -4
- pulumi_gcp/containeranalysis/get_note_iam_policy.py +4 -4
- pulumi_gcp/containeranalysis/note.py +32 -26
- pulumi_gcp/containeranalysis/note_iam_binding.py +12 -12
- pulumi_gcp/containeranalysis/note_iam_member.py +12 -12
- pulumi_gcp/containeranalysis/note_iam_policy.py +12 -12
- pulumi_gcp/databasemigrationservice/connection_profile.py +138 -46
- pulumi_gcp/databasemigrationservice/private_connection.py +6 -6
- pulumi_gcp/datacatalog/entry.py +12 -12
- pulumi_gcp/datacatalog/entry_group.py +8 -8
- pulumi_gcp/datacatalog/entry_group_iam_binding.py +6 -6
- pulumi_gcp/datacatalog/entry_group_iam_member.py +6 -6
- pulumi_gcp/datacatalog/entry_group_iam_policy.py +6 -6
- pulumi_gcp/datacatalog/get_entry_group_iam_policy.py +2 -2
- pulumi_gcp/datacatalog/get_policy_tag_iam_policy.py +2 -2
- pulumi_gcp/datacatalog/get_tag_template_iam_policy.py +2 -2
- pulumi_gcp/datacatalog/get_taxonomy_iam_policy.py +2 -2
- pulumi_gcp/datacatalog/policy_tag.py +14 -16
- pulumi_gcp/datacatalog/policy_tag_iam_binding.py +6 -6
- pulumi_gcp/datacatalog/policy_tag_iam_member.py +6 -6
- pulumi_gcp/datacatalog/policy_tag_iam_policy.py +6 -6
- pulumi_gcp/datacatalog/tag.py +22 -22
- pulumi_gcp/datacatalog/tag_template.py +16 -16
- pulumi_gcp/datacatalog/tag_template_iam_binding.py +6 -6
- pulumi_gcp/datacatalog/tag_template_iam_member.py +6 -6
- pulumi_gcp/datacatalog/tag_template_iam_policy.py +6 -6
- pulumi_gcp/datacatalog/taxonomy.py +6 -6
- pulumi_gcp/datacatalog/taxonomy_iam_binding.py +6 -6
- pulumi_gcp/datacatalog/taxonomy_iam_member.py +6 -6
- pulumi_gcp/datacatalog/taxonomy_iam_policy.py +6 -6
- pulumi_gcp/dataflow/flex_template_job.py +18 -18
- pulumi_gcp/dataflow/job.py +34 -26
- pulumi_gcp/dataflow/pipeline.py +4 -2
- pulumi_gcp/dataform/repository.py +28 -36
- pulumi_gcp/dataform/repository_release_config.py +16 -20
- pulumi_gcp/dataform/repository_workflow_config.py +26 -32
- pulumi_gcp/datafusion/get_instance_iam_policy.py +6 -6
- pulumi_gcp/datafusion/instance.py +60 -40
- pulumi_gcp/dataloss/prevention_deidentify_template.py +206 -10
- pulumi_gcp/dataloss/prevention_inspect_template.py +270 -42
- pulumi_gcp/dataloss/prevention_job_trigger.py +368 -192
- pulumi_gcp/dataloss/prevention_stored_info_type.py +24 -20
- pulumi_gcp/dataplex/asset.py +16 -10
- pulumi_gcp/dataplex/asset_iam_binding.py +30 -30
- pulumi_gcp/dataplex/asset_iam_member.py +30 -30
- pulumi_gcp/dataplex/asset_iam_policy.py +30 -30
- pulumi_gcp/dataplex/datascan.py +90 -92
- pulumi_gcp/dataplex/datascan_iam_binding.py +18 -18
- pulumi_gcp/dataplex/datascan_iam_member.py +18 -18
- pulumi_gcp/dataplex/datascan_iam_policy.py +18 -18
- pulumi_gcp/dataplex/get_asset_iam_policy.py +10 -10
- pulumi_gcp/dataplex/get_datascan_iam_policy.py +6 -6
- pulumi_gcp/dataplex/get_lake_iam_policy.py +6 -6
- pulumi_gcp/dataplex/get_task_iam_policy.py +8 -8
- pulumi_gcp/dataplex/get_zone_iam_policy.py +8 -8
- pulumi_gcp/dataplex/lake.py +8 -6
- pulumi_gcp/dataplex/lake_iam_binding.py +18 -18
- pulumi_gcp/dataplex/lake_iam_member.py +18 -18
- pulumi_gcp/dataplex/lake_iam_policy.py +18 -18
- pulumi_gcp/dataplex/task.py +300 -0
- pulumi_gcp/dataplex/task_iam_binding.py +24 -24
- pulumi_gcp/dataplex/task_iam_member.py +24 -24
- pulumi_gcp/dataplex/task_iam_policy.py +24 -24
- pulumi_gcp/dataplex/zone.py +4 -0
- pulumi_gcp/dataplex/zone_iam_binding.py +24 -24
- pulumi_gcp/dataplex/zone_iam_member.py +24 -24
- pulumi_gcp/dataplex/zone_iam_policy.py +24 -24
- pulumi_gcp/dataproc/autoscaling_policy.py +2 -0
- pulumi_gcp/dataproc/autoscaling_policy_iam_binding.py +18 -18
- pulumi_gcp/dataproc/autoscaling_policy_iam_member.py +18 -18
- pulumi_gcp/dataproc/autoscaling_policy_iam_policy.py +18 -18
- pulumi_gcp/dataproc/cluster.py +18 -10
- pulumi_gcp/dataproc/cluster_iam_binding.py +8 -8
- pulumi_gcp/dataproc/cluster_iam_member.py +8 -8
- pulumi_gcp/dataproc/cluster_iam_policy.py +8 -8
- pulumi_gcp/dataproc/get_autoscaling_policy_iam_policy.py +6 -6
- pulumi_gcp/dataproc/get_cluster_iam_policy.py +2 -2
- pulumi_gcp/dataproc/get_job_iam_policy.py +2 -2
- pulumi_gcp/dataproc/get_metastore_service.py +4 -4
- pulumi_gcp/dataproc/get_metastore_service_iam_policy.py +6 -6
- pulumi_gcp/dataproc/job.py +6 -2
- pulumi_gcp/dataproc/job_iam_binding.py +8 -8
- pulumi_gcp/dataproc/job_iam_member.py +8 -8
- pulumi_gcp/dataproc/job_iam_policy.py +8 -8
- pulumi_gcp/dataproc/metastore_federation.py +16 -24
- pulumi_gcp/dataproc/metastore_service.py +64 -56
- pulumi_gcp/dataproc/metastore_service_iam_binding.py +18 -18
- pulumi_gcp/dataproc/metastore_service_iam_member.py +18 -18
- pulumi_gcp/dataproc/metastore_service_iam_policy.py +18 -18
- pulumi_gcp/dataproc/workflow_template.py +58 -56
- pulumi_gcp/datastore/data_store_index.py +4 -4
- pulumi_gcp/datastream/connection_profile.py +52 -36
- pulumi_gcp/datastream/private_connection.py +4 -4
- pulumi_gcp/datastream/stream.py +52 -30
- pulumi_gcp/deploymentmanager/deployment.py +6 -2
- pulumi_gcp/diagflow/agent.py +20 -20
- pulumi_gcp/diagflow/cx_agent.py +4 -2
- pulumi_gcp/diagflow/cx_entity_type.py +2 -2
- pulumi_gcp/diagflow/cx_environment.py +2 -2
- pulumi_gcp/diagflow/cx_flow.py +6 -4
- pulumi_gcp/diagflow/cx_intent.py +2 -2
- pulumi_gcp/diagflow/cx_page.py +6 -6
- pulumi_gcp/diagflow/cx_security_settings.py +6 -4
- pulumi_gcp/diagflow/cx_test_case.py +6 -6
- pulumi_gcp/diagflow/cx_version.py +2 -2
- pulumi_gcp/diagflow/cx_webhook.py +2 -2
- pulumi_gcp/diagflow/entity_type.py +6 -8
- pulumi_gcp/diagflow/fulfillment.py +6 -8
- pulumi_gcp/diagflow/intent.py +32 -30
- pulumi_gcp/discoveryengine/chat_engine.py +4 -4
- pulumi_gcp/discoveryengine/data_store.py +8 -8
- pulumi_gcp/discoveryengine/search_engine.py +8 -8
- pulumi_gcp/dns/dns_managed_zone_iam_binding.py +12 -12
- pulumi_gcp/dns/dns_managed_zone_iam_member.py +12 -12
- pulumi_gcp/dns/dns_managed_zone_iam_policy.py +12 -12
- pulumi_gcp/dns/get_keys.py +2 -0
- pulumi_gcp/dns/get_managed_zone_iam_policy.py +4 -4
- pulumi_gcp/dns/managed_zone.py +82 -38
- pulumi_gcp/dns/policy.py +14 -4
- pulumi_gcp/dns/record_set.py +76 -44
- pulumi_gcp/dns/response_policy.py +16 -4
- pulumi_gcp/dns/response_policy_rule.py +12 -4
- pulumi_gcp/edgecontainer/cluster.py +54 -48
- pulumi_gcp/edgecontainer/node_pool.py +34 -16
- pulumi_gcp/edgecontainer/vpn_connection.py +12 -8
- pulumi_gcp/edgenetwork/network.py +2 -2
- pulumi_gcp/edgenetwork/subnet.py +8 -8
- pulumi_gcp/endpoints/get_service_iam_policy.py +2 -2
- pulumi_gcp/endpoints/service.py +12 -12
- pulumi_gcp/endpoints/service_iam_binding.py +6 -6
- pulumi_gcp/endpoints/service_iam_member.py +6 -6
- pulumi_gcp/endpoints/service_iam_policy.py +6 -6
- pulumi_gcp/essentialcontacts/document_ai_processor.py +2 -2
- pulumi_gcp/essentialcontacts/document_ai_processor_default_version.py +8 -8
- pulumi_gcp/essentialcontacts/document_ai_warehouse_document_schema.py +18 -18
- pulumi_gcp/eventarc/channel.py +10 -10
- pulumi_gcp/eventarc/google_channel_config.py +8 -8
- pulumi_gcp/eventarc/trigger.py +6 -2
- pulumi_gcp/filestore/backup.py +4 -0
- pulumi_gcp/filestore/instance.py +44 -30
- pulumi_gcp/filestore/snapshot.py +8 -0
- pulumi_gcp/firebase/_inputs.py +0 -6
- pulumi_gcp/firebase/android_app.py +8 -12
- pulumi_gcp/firebase/app_check_debug_token.py +38 -0
- pulumi_gcp/firebase/app_check_service_config.py +6 -12
- pulumi_gcp/firebase/apple_app.py +8 -12
- pulumi_gcp/firebase/database_instance.py +26 -36
- pulumi_gcp/firebase/extensions_instance.py +8 -10
- pulumi_gcp/firebase/hosting_channel.py +14 -22
- pulumi_gcp/firebase/hosting_custom_domain.py +40 -54
- pulumi_gcp/firebase/hosting_release.py +48 -66
- pulumi_gcp/firebase/hosting_site.py +6 -12
- pulumi_gcp/firebase/hosting_version.py +66 -86
- pulumi_gcp/firebase/outputs.py +0 -6
- pulumi_gcp/firebase/project.py +10 -10
- pulumi_gcp/firebase/storage_bucket.py +10 -12
- pulumi_gcp/firebase/web_app.py +46 -40
- pulumi_gcp/firebaserules/release.py +20 -24
- pulumi_gcp/firebaserules/ruleset.py +10 -10
- pulumi_gcp/firestore/backup_schedule.py +4 -0
- pulumi_gcp/firestore/database.py +40 -32
- pulumi_gcp/firestore/document.py +132 -0
- pulumi_gcp/firestore/field.py +126 -0
- pulumi_gcp/firestore/index.py +94 -10
- pulumi_gcp/folder/access_approval_settings.py +26 -18
- pulumi_gcp/folder/get_iam_policy.py +2 -2
- pulumi_gcp/folder/iam_audit_config.py +42 -42
- pulumi_gcp/folder/iam_member.py +42 -42
- pulumi_gcp/folder/iam_policy.py +42 -42
- pulumi_gcp/folder/organization_policy.py +22 -22
- pulumi_gcp/gkebackup/backup_plan.py +28 -4
- pulumi_gcp/gkebackup/backup_plan_iam_binding.py +18 -12
- pulumi_gcp/gkebackup/backup_plan_iam_member.py +18 -12
- pulumi_gcp/gkebackup/backup_plan_iam_policy.py +18 -12
- pulumi_gcp/gkebackup/get_backup_plan_iam_policy.py +6 -6
- pulumi_gcp/gkebackup/get_restore_plan_iam_policy.py +6 -6
- pulumi_gcp/gkebackup/restore_plan.py +48 -12
- pulumi_gcp/gkebackup/restore_plan_iam_binding.py +48 -12
- pulumi_gcp/gkebackup/restore_plan_iam_member.py +48 -12
- pulumi_gcp/gkebackup/restore_plan_iam_policy.py +48 -12
- pulumi_gcp/gkehub/feature.py +200 -38
- pulumi_gcp/gkehub/feature_iam_binding.py +18 -12
- pulumi_gcp/gkehub/feature_iam_member.py +18 -12
- pulumi_gcp/gkehub/feature_iam_policy.py +18 -12
- pulumi_gcp/gkehub/feature_membership.py +54 -22
- pulumi_gcp/gkehub/fleet.py +4 -4
- pulumi_gcp/gkehub/get_feature_iam_policy.py +6 -6
- pulumi_gcp/gkehub/get_membership_iam_policy.py +6 -6
- pulumi_gcp/gkehub/get_scope_iam_policy.py +4 -4
- pulumi_gcp/gkehub/membership.py +24 -18
- pulumi_gcp/gkehub/membership_binding.py +64 -0
- pulumi_gcp/gkehub/membership_iam_binding.py +18 -18
- pulumi_gcp/gkehub/membership_iam_member.py +18 -18
- pulumi_gcp/gkehub/membership_iam_policy.py +18 -18
- pulumi_gcp/gkehub/membership_rbac_role_binding.py +60 -0
- pulumi_gcp/gkehub/namespace.py +44 -0
- pulumi_gcp/gkehub/scope.py +6 -6
- pulumi_gcp/gkehub/scope_iam_binding.py +12 -12
- pulumi_gcp/gkehub/scope_iam_member.py +12 -12
- pulumi_gcp/gkehub/scope_iam_policy.py +12 -12
- pulumi_gcp/gkehub/scope_rbac_role_binding.py +36 -0
- pulumi_gcp/gkeonprem/bare_metal_admin_cluster.py +126 -122
- pulumi_gcp/gkeonprem/bare_metal_cluster.py +242 -236
- pulumi_gcp/gkeonprem/bare_metal_node_pool.py +8 -0
- pulumi_gcp/gkeonprem/v_mware_cluster.py +242 -236
- pulumi_gcp/gkeonprem/v_mware_node_pool.py +4 -180
- pulumi_gcp/healthcare/consent_store.py +32 -10
- pulumi_gcp/healthcare/consent_store_iam_binding.py +12 -12
- pulumi_gcp/healthcare/consent_store_iam_member.py +12 -12
- pulumi_gcp/healthcare/consent_store_iam_policy.py +12 -12
- pulumi_gcp/healthcare/dataset.py +2 -0
- pulumi_gcp/healthcare/dataset_iam_binding.py +8 -8
- pulumi_gcp/healthcare/dataset_iam_member.py +8 -8
- pulumi_gcp/healthcare/dataset_iam_policy.py +8 -8
- pulumi_gcp/healthcare/dicom_store.py +30 -26
- pulumi_gcp/healthcare/dicom_store_iam_binding.py +14 -14
- pulumi_gcp/healthcare/dicom_store_iam_member.py +14 -14
- pulumi_gcp/healthcare/dicom_store_iam_policy.py +14 -14
- pulumi_gcp/healthcare/fhir_store.py +44 -24
- pulumi_gcp/healthcare/fhir_store_iam_binding.py +14 -14
- pulumi_gcp/healthcare/fhir_store_iam_member.py +14 -14
- pulumi_gcp/healthcare/fhir_store_iam_policy.py +14 -14
- pulumi_gcp/healthcare/get_consent_store_iam_policy.py +4 -4
- pulumi_gcp/healthcare/get_dataset_iam_policy.py +2 -2
- pulumi_gcp/healthcare/get_dicom_store_iam_policy.py +2 -2
- pulumi_gcp/healthcare/get_fhir_store_iam_policy.py +2 -2
- pulumi_gcp/healthcare/get_hl7_v2_store_iam_policy.py +2 -2
- pulumi_gcp/healthcare/hl7_store.py +30 -20
- pulumi_gcp/healthcare/hl7_store_iam_binding.py +14 -14
- pulumi_gcp/healthcare/hl7_store_iam_member.py +14 -14
- pulumi_gcp/healthcare/hl7_store_iam_policy.py +14 -14
- pulumi_gcp/iam/_inputs.py +0 -18
- pulumi_gcp/iam/access_boundary_policy.py +100 -0
- pulumi_gcp/iam/deny_policy.py +92 -0
- pulumi_gcp/iam/outputs.py +0 -18
- pulumi_gcp/iam/workforce_pool.py +20 -20
- pulumi_gcp/iam/workforce_pool_provider.py +0 -21
- pulumi_gcp/iam/workload_identity_pool.py +6 -6
- pulumi_gcp/iam/workload_identity_pool_provider.py +8 -46
- pulumi_gcp/iap/app_engine_service_iam_binding.py +56 -56
- pulumi_gcp/iap/app_engine_service_iam_member.py +56 -56
- pulumi_gcp/iap/app_engine_service_iam_policy.py +56 -56
- pulumi_gcp/iap/app_engine_version_iam_binding.py +68 -68
- pulumi_gcp/iap/app_engine_version_iam_member.py +68 -68
- pulumi_gcp/iap/app_engine_version_iam_policy.py +68 -68
- pulumi_gcp/iap/brand.py +12 -6
- pulumi_gcp/iap/client.py +14 -8
- pulumi_gcp/iap/get_app_engine_service_iam_policy.py +6 -6
- pulumi_gcp/iap/get_app_engine_version_iam_policy.py +8 -8
- pulumi_gcp/iap/get_client.py +2 -2
- pulumi_gcp/iap/get_tunnel_iam_policy.py +2 -2
- pulumi_gcp/iap/get_tunnel_instance_iam_policy.py +6 -6
- pulumi_gcp/iap/get_web_backend_service_iam_policy.py +4 -4
- pulumi_gcp/iap/get_web_iam_policy.py +2 -2
- pulumi_gcp/iap/get_web_region_backend_service_iam_policy.py +6 -6
- pulumi_gcp/iap/get_web_type_app_engine_iam_policy.py +4 -4
- pulumi_gcp/iap/get_web_type_compute_iam_policy.py +2 -2
- pulumi_gcp/iap/tunnel_iam_binding.py +12 -12
- pulumi_gcp/iap/tunnel_iam_member.py +12 -12
- pulumi_gcp/iap/tunnel_iam_policy.py +12 -12
- pulumi_gcp/iap/tunnel_instance_iam_binding.py +36 -36
- pulumi_gcp/iap/tunnel_instance_iam_member.py +36 -36
- pulumi_gcp/iap/tunnel_instance_iam_policy.py +36 -36
- pulumi_gcp/iap/web_backend_service_iam_binding.py +24 -24
- pulumi_gcp/iap/web_backend_service_iam_member.py +24 -24
- pulumi_gcp/iap/web_backend_service_iam_policy.py +24 -24
- pulumi_gcp/iap/web_iam_binding.py +12 -12
- pulumi_gcp/iap/web_iam_member.py +12 -12
- pulumi_gcp/iap/web_iam_policy.py +12 -12
- pulumi_gcp/iap/web_region_backend_service_iam_binding.py +36 -36
- pulumi_gcp/iap/web_region_backend_service_iam_member.py +36 -36
- pulumi_gcp/iap/web_region_backend_service_iam_policy.py +36 -36
- pulumi_gcp/iap/web_type_app_enging_iam_binding.py +24 -24
- pulumi_gcp/iap/web_type_app_enging_iam_member.py +24 -24
- pulumi_gcp/iap/web_type_app_enging_iam_policy.py +24 -24
- pulumi_gcp/iap/web_type_compute_iam_binding.py +12 -12
- pulumi_gcp/iap/web_type_compute_iam_member.py +12 -12
- pulumi_gcp/iap/web_type_compute_iam_policy.py +12 -12
- pulumi_gcp/identityplatform/config.py +12 -8
- pulumi_gcp/identityplatform/default_supported_idp_config.py +8 -8
- pulumi_gcp/identityplatform/inbound_saml_config.py +8 -4
- pulumi_gcp/identityplatform/oauth_idp_config.py +10 -8
- pulumi_gcp/identityplatform/tenant.py +4 -4
- pulumi_gcp/identityplatform/tenant_default_supported_idp_config.py +2 -2
- pulumi_gcp/identityplatform/tenant_inbound_saml_config.py +8 -4
- pulumi_gcp/identityplatform/tenant_oauth_idp_config.py +4 -2
- pulumi_gcp/integrationconnectors/connection.py +16 -14
- pulumi_gcp/integrationconnectors/endpoint_attachment.py +8 -6
- pulumi_gcp/kms/crypto_key.py +16 -4
- pulumi_gcp/kms/crypto_key_iam_binding.py +32 -26
- pulumi_gcp/kms/crypto_key_iam_member.py +32 -26
- pulumi_gcp/kms/crypto_key_iam_policy.py +32 -26
- pulumi_gcp/kms/crypto_key_version.py +8 -2
- pulumi_gcp/kms/get_crypto_key_iam_policy.py +2 -2
- pulumi_gcp/kms/get_kms_crypto_key_version.py +2 -2
- pulumi_gcp/kms/get_kms_key_ring.py +4 -4
- pulumi_gcp/kms/key_ring.py +6 -2
- pulumi_gcp/kms/key_ring_iam_binding.py +52 -44
- pulumi_gcp/kms/key_ring_iam_member.py +52 -44
- pulumi_gcp/kms/key_ring_iam_policy.py +52 -44
- pulumi_gcp/kms/secret_ciphertext.py +20 -12
- pulumi_gcp/logging/billing_account_exclusion.py +2 -0
- pulumi_gcp/logging/billing_account_sink.py +8 -2
- pulumi_gcp/logging/folder_exclusion.py +2 -0
- pulumi_gcp/logging/folder_settings.py +12 -14
- pulumi_gcp/logging/folder_sink.py +8 -2
- pulumi_gcp/logging/linked_dataset.py +22 -24
- pulumi_gcp/logging/log_view.py +8 -6
- pulumi_gcp/logging/metric.py +78 -68
- pulumi_gcp/logging/organization_exclusion.py +6 -4
- pulumi_gcp/logging/organization_settings.py +10 -12
- pulumi_gcp/logging/organization_sink.py +8 -2
- pulumi_gcp/logging/project_bucket_config.py +178 -0
- pulumi_gcp/logging/project_exclusion.py +2 -0
- pulumi_gcp/looker/instance.py +76 -70
- pulumi_gcp/memcache/instance.py +10 -6
- pulumi_gcp/migrationcenter/group.py +6 -6
- pulumi_gcp/ml/engine_model.py +8 -4
- pulumi_gcp/monitoring/alert_policy.py +58 -58
- pulumi_gcp/monitoring/custom_service.py +2 -2
- pulumi_gcp/monitoring/dashboard.py +0 -4
- pulumi_gcp/monitoring/generic_service.py +18 -18
- pulumi_gcp/monitoring/get_app_engine_service.py +10 -2
- pulumi_gcp/monitoring/get_cluster_istio_service.py +10 -8
- pulumi_gcp/monitoring/get_istio_canonical_service.py +6 -4
- pulumi_gcp/monitoring/get_mesh_istio_service.py +6 -4
- pulumi_gcp/monitoring/get_notification_channel.py +2 -2
- pulumi_gcp/monitoring/metric_descriptor.py +34 -34
- pulumi_gcp/monitoring/monitored_project.py +14 -4
- pulumi_gcp/monitoring/notification_channel.py +8 -8
- pulumi_gcp/monitoring/slo.py +238 -4
- pulumi_gcp/monitoring/uptime_check_config.py +106 -102
- pulumi_gcp/netapp/active_directory.py +4 -2
- pulumi_gcp/netapp/backup_policy.py +12 -10
- pulumi_gcp/netapp/backup_vault.py +4 -2
- pulumi_gcp/netapp/kmsconfig.py +14 -6
- pulumi_gcp/netapp/storage_pool.py +12 -8
- pulumi_gcp/netapp/volume.py +12 -8
- pulumi_gcp/netapp/volume_snapshot.py +16 -12
- pulumi_gcp/networkconnectivity/hub.py +6 -4
- pulumi_gcp/networkconnectivity/policy_based_route.py +18 -6
- pulumi_gcp/networkconnectivity/service_connection_policy.py +12 -4
- pulumi_gcp/networkconnectivity/spoke.py +28 -8
- pulumi_gcp/networkmanagement/connectivity_test.py +36 -22
- pulumi_gcp/networksecurity/address_group.py +32 -26
- pulumi_gcp/networksecurity/authorization_policy.py +8 -8
- pulumi_gcp/networksecurity/client_tls_policy.py +8 -8
- pulumi_gcp/networksecurity/firewall_endpoint.py +4 -4
- pulumi_gcp/networksecurity/gateway_security_policy.py +38 -54
- pulumi_gcp/networksecurity/gateway_security_policy_rule.py +20 -12
- pulumi_gcp/networksecurity/security_profile.py +8 -8
- pulumi_gcp/networksecurity/security_profile_group.py +10 -10
- pulumi_gcp/networksecurity/server_tls_policy.py +30 -28
- pulumi_gcp/networksecurity/tls_inspection_policy.py +28 -44
- pulumi_gcp/networksecurity/url_list.py +6 -2
- pulumi_gcp/networkservices/edge_cache_keyset.py +4 -0
- pulumi_gcp/networkservices/edge_cache_origin.py +12 -4
- pulumi_gcp/networkservices/edge_cache_service.py +270 -16
- pulumi_gcp/networkservices/endpoint_policy.py +8 -8
- pulumi_gcp/networkservices/gateway.py +96 -60
- pulumi_gcp/networkservices/grpc_route.py +12 -12
- pulumi_gcp/networkservices/http_route.py +26 -26
- pulumi_gcp/networkservices/mesh.py +8 -8
- pulumi_gcp/networkservices/service_binding.py +16 -20
- pulumi_gcp/networkservices/tcp_route.py +298 -0
- pulumi_gcp/networkservices/tls_route.py +214 -0
- pulumi_gcp/notebooks/environment.py +6 -4
- pulumi_gcp/notebooks/get_instance_iam_policy.py +6 -6
- pulumi_gcp/notebooks/get_runtime_iam_policy.py +6 -6
- pulumi_gcp/notebooks/instance.py +38 -28
- pulumi_gcp/notebooks/instance_iam_binding.py +18 -18
- pulumi_gcp/notebooks/instance_iam_member.py +18 -18
- pulumi_gcp/notebooks/instance_iam_policy.py +18 -18
- pulumi_gcp/notebooks/runtime.py +74 -64
- pulumi_gcp/notebooks/runtime_iam_binding.py +18 -18
- pulumi_gcp/notebooks/runtime_iam_member.py +18 -18
- pulumi_gcp/notebooks/runtime_iam_policy.py +18 -18
- pulumi_gcp/organizations/access_approval_settings.py +34 -26
- pulumi_gcp/organizations/get_billing_account.py +6 -2
- pulumi_gcp/organizations/get_folders.py +2 -2
- pulumi_gcp/organizations/get_iam_policy.py +0 -62
- pulumi_gcp/organizations/iam_audit_config.py +8 -8
- pulumi_gcp/organizations/iam_binding.py +4 -4
- pulumi_gcp/organizations/iam_custom_role.py +8 -8
- pulumi_gcp/organizations/iam_member.py +42 -42
- pulumi_gcp/organizations/iam_policy.py +42 -42
- pulumi_gcp/organizations/policy.py +26 -26
- pulumi_gcp/organizations/project.py +16 -4
- pulumi_gcp/orgpolicy/custom_constraint.py +14 -8
- pulumi_gcp/orgpolicy/policy.py +46 -22
- pulumi_gcp/osconfig/guest_policies.py +16 -22
- pulumi_gcp/osconfig/os_policy_assignment.py +42 -40
- pulumi_gcp/osconfig/patch_deployment.py +122 -120
- pulumi_gcp/oslogin/ssh_public_key.py +4 -2
- pulumi_gcp/projects/access_approval_settings.py +24 -22
- pulumi_gcp/projects/api_key.py +50 -10
- pulumi_gcp/projects/default_service_accounts.py +10 -10
- pulumi_gcp/projects/iam_audit_config.py +46 -46
- pulumi_gcp/projects/iam_binding.py +46 -46
- pulumi_gcp/projects/iam_custom_role.py +6 -6
- pulumi_gcp/projects/iam_member.py +46 -46
- pulumi_gcp/projects/iam_policy.py +46 -46
- pulumi_gcp/projects/organization_policy.py +26 -26
- pulumi_gcp/projects/service.py +4 -4
- pulumi_gcp/projects/service_identity.py +6 -8
- pulumi_gcp/projects/usage_export_bucket.py +16 -4
- pulumi_gcp/pubsub/get_schema_iam_policy.py +4 -4
- pulumi_gcp/pubsub/get_subscription_iam_policy.py +2 -2
- pulumi_gcp/pubsub/get_topic_iam_policy.py +4 -4
- pulumi_gcp/pubsub/lite_reservation.py +2 -0
- pulumi_gcp/pubsub/lite_subscription.py +10 -6
- pulumi_gcp/pubsub/lite_topic.py +10 -6
- pulumi_gcp/pubsub/schema.py +22 -18
- pulumi_gcp/pubsub/schema_iam_binding.py +12 -12
- pulumi_gcp/pubsub/schema_iam_member.py +12 -12
- pulumi_gcp/pubsub/schema_iam_policy.py +12 -12
- pulumi_gcp/pubsub/subscription.py +204 -96
- pulumi_gcp/pubsub/subscription_iam_binding.py +8 -8
- pulumi_gcp/pubsub/subscription_iam_member.py +8 -8
- pulumi_gcp/pubsub/subscription_iam_policy.py +8 -8
- pulumi_gcp/pubsub/topic.py +46 -24
- pulumi_gcp/pubsub/topic_iam_binding.py +12 -12
- pulumi_gcp/pubsub/topic_iam_member.py +12 -12
- pulumi_gcp/pubsub/topic_iam_policy.py +12 -12
- pulumi_gcp/recaptcha/enterprise_key.py +54 -54
- pulumi_gcp/redis/cluster.py +32 -24
- pulumi_gcp/redis/instance.py +132 -14
- pulumi_gcp/resourcemanager/lien.py +12 -8
- pulumi_gcp/runtimeconfig/config.py +6 -2
- pulumi_gcp/runtimeconfig/get_variable.py +4 -4
- pulumi_gcp/runtimeconfig/variable.py +20 -8
- pulumi_gcp/secretmanager/get_secret_iam_policy.py +4 -4
- pulumi_gcp/secretmanager/secret.py +16 -18
- pulumi_gcp/secretmanager/secret_iam_binding.py +12 -12
- pulumi_gcp/secretmanager/secret_iam_member.py +12 -12
- pulumi_gcp/secretmanager/secret_iam_policy.py +12 -12
- pulumi_gcp/secretmanager/secret_version.py +4 -4
- pulumi_gcp/securesourcemanager/get_instance_iam_policy.py +6 -6
- pulumi_gcp/securesourcemanager/instance.py +144 -14
- pulumi_gcp/securitycenter/get_source_iam_policy.py +2 -2
- pulumi_gcp/securitycenter/instance_iam_binding.py +60 -40
- pulumi_gcp/securitycenter/instance_iam_member.py +60 -40
- pulumi_gcp/securitycenter/instance_iam_policy.py +60 -40
- pulumi_gcp/securitycenter/mute_config.py +6 -6
- pulumi_gcp/securitycenter/notification_config.py +4 -4
- pulumi_gcp/securitycenter/organization_custom_module.py +40 -40
- pulumi_gcp/securitycenter/project_custom_module.py +36 -36
- pulumi_gcp/securitycenter/source.py +6 -6
- pulumi_gcp/securitycenter/source_iam_binding.py +6 -6
- pulumi_gcp/securitycenter/source_iam_member.py +6 -6
- pulumi_gcp/securitycenter/source_iam_policy.py +6 -6
- pulumi_gcp/securityposture/posture.py +46 -46
- pulumi_gcp/serviceaccount/account.py +2 -2
- pulumi_gcp/serviceaccount/get_account.py +34 -0
- pulumi_gcp/serviceaccount/get_account_access_token.py +8 -10
- pulumi_gcp/serviceaccount/get_account_key.py +4 -4
- pulumi_gcp/serviceaccount/get_iam_policy.py +2 -2
- pulumi_gcp/serviceaccount/key.py +46 -2
- pulumi_gcp/servicedirectory/endpoint.py +28 -40
- pulumi_gcp/servicedirectory/namespace.py +2 -4
- pulumi_gcp/servicedirectory/namespace_iam_binding.py +14 -12
- pulumi_gcp/servicedirectory/namespace_iam_member.py +14 -12
- pulumi_gcp/servicedirectory/namespace_iam_policy.py +14 -12
- pulumi_gcp/servicedirectory/service.py +10 -14
- pulumi_gcp/servicedirectory/service_iam_binding.py +14 -12
- pulumi_gcp/servicedirectory/service_iam_member.py +14 -12
- pulumi_gcp/servicedirectory/service_iam_policy.py +14 -12
- pulumi_gcp/servicenetworking/connection.py +8 -6
- pulumi_gcp/servicenetworking/peered_dns_domain.py +6 -4
- pulumi_gcp/serviceusage/consumer_quota_override.py +126 -0
- pulumi_gcp/sourcerepo/get_repository_iam_policy.py +4 -4
- pulumi_gcp/sourcerepo/repository.py +20 -16
- pulumi_gcp/sourcerepo/repository_iam_binding.py +12 -12
- pulumi_gcp/sourcerepo/repository_iam_member.py +12 -12
- pulumi_gcp/sourcerepo/repository_iam_policy.py +12 -12
- pulumi_gcp/spanner/database.py +2 -0
- pulumi_gcp/spanner/database_iam_binding.py +12 -12
- pulumi_gcp/spanner/database_iam_member.py +12 -12
- pulumi_gcp/spanner/database_iam_policy.py +12 -12
- pulumi_gcp/spanner/get_database_iam_policy.py +6 -6
- pulumi_gcp/spanner/get_instance_iam_policy.py +4 -4
- pulumi_gcp/spanner/instance.py +16 -16
- pulumi_gcp/spanner/instance_iam_binding.py +8 -8
- pulumi_gcp/spanner/instance_iam_member.py +8 -8
- pulumi_gcp/spanner/instance_iam_policy.py +8 -8
- pulumi_gcp/sql/database.py +14 -4
- pulumi_gcp/sql/database_instance.py +76 -26
- pulumi_gcp/sql/get_backup_run.py +2 -2
- pulumi_gcp/sql/get_ca_certs.py +32 -0
- pulumi_gcp/sql/get_database.py +2 -2
- pulumi_gcp/sql/get_databases.py +2 -2
- pulumi_gcp/sql/source_representation_instance.py +20 -16
- pulumi_gcp/sql/ssl_cert.py +6 -4
- pulumi_gcp/sql/user.py +154 -0
- pulumi_gcp/storage/bucket.py +44 -38
- pulumi_gcp/storage/bucket_access_control.py +8 -4
- pulumi_gcp/storage/bucket_acl.py +6 -2
- pulumi_gcp/storage/bucket_iam_binding.py +12 -12
- pulumi_gcp/storage/bucket_iam_member.py +12 -12
- pulumi_gcp/storage/bucket_iam_policy.py +12 -12
- pulumi_gcp/storage/bucket_object.py +14 -12
- pulumi_gcp/storage/default_object_access_control.py +8 -4
- pulumi_gcp/storage/default_object_acl.py +6 -2
- pulumi_gcp/storage/get_bucket_iam_policy.py +2 -2
- pulumi_gcp/storage/get_bucket_object.py +4 -4
- pulumi_gcp/storage/get_object_signed_url.py +6 -4
- pulumi_gcp/storage/get_project_service_account.py +6 -6
- pulumi_gcp/storage/hmac_key.py +2 -2
- pulumi_gcp/storage/insights_report_config.py +14 -14
- pulumi_gcp/storage/notification.py +20 -18
- pulumi_gcp/storage/object_access_control.py +10 -4
- pulumi_gcp/storage/object_acl.py +8 -2
- pulumi_gcp/storage/transfer_agent_pool.py +6 -6
- pulumi_gcp/storage/transfer_job.py +30 -38
- pulumi_gcp/tags/get_tag_key_iam_policy.py +2 -2
- pulumi_gcp/tags/get_tag_value_iam_policy.py +2 -2
- pulumi_gcp/tags/location_tag_binding.py +44 -32
- pulumi_gcp/tags/tag_binding.py +16 -10
- pulumi_gcp/tags/tag_key.py +4 -4
- pulumi_gcp/tags/tag_key_iam_binding.py +6 -6
- pulumi_gcp/tags/tag_key_iam_member.py +6 -6
- pulumi_gcp/tags/tag_key_iam_policy.py +6 -6
- pulumi_gcp/tags/tag_value.py +8 -8
- pulumi_gcp/tags/tag_value_iam_binding.py +6 -6
- pulumi_gcp/tags/tag_value_iam_member.py +6 -6
- pulumi_gcp/tags/tag_value_iam_policy.py +6 -6
- pulumi_gcp/tpu/get_tensorflow_versions.py +2 -0
- pulumi_gcp/tpu/get_v2_accelerator_types.py +10 -8
- pulumi_gcp/tpu/get_v2_runtime_versions.py +2 -0
- pulumi_gcp/tpu/node.py +12 -6
- pulumi_gcp/tpu/v2_vm.py +134 -2
- pulumi_gcp/vertex/ai_dataset.py +6 -6
- pulumi_gcp/vertex/ai_endpoint.py +28 -26
- pulumi_gcp/vertex/ai_feature_group.py +8 -6
- pulumi_gcp/vertex/ai_feature_group_feature.py +12 -8
- pulumi_gcp/vertex/ai_feature_online_store.py +26 -24
- pulumi_gcp/vertex/ai_feature_online_store_featureview.py +36 -28
- pulumi_gcp/vertex/ai_feature_store.py +30 -26
- pulumi_gcp/vertex/ai_feature_store_entity_type.py +12 -8
- pulumi_gcp/vertex/ai_feature_store_entity_type_feature.py +18 -12
- pulumi_gcp/vertex/ai_index.py +8 -0
- pulumi_gcp/vertex/ai_index_endpoint.py +36 -36
- pulumi_gcp/vertex/ai_metadata_store.py +2 -0
- pulumi_gcp/vertex/ai_tensorboard.py +12 -14
- pulumi_gcp/vmwareengine/cluster.py +12 -0
- pulumi_gcp/vmwareengine/external_access_rule.py +16 -0
- pulumi_gcp/vmwareengine/external_address.py +10 -4
- pulumi_gcp/vmwareengine/get_network.py +4 -4
- pulumi_gcp/vmwareengine/get_network_policy.py +4 -4
- pulumi_gcp/vmwareengine/get_private_cloud.py +4 -4
- pulumi_gcp/vmwareengine/network.py +56 -4
- pulumi_gcp/vmwareengine/network_peering.py +12 -2
- pulumi_gcp/vmwareengine/network_policy.py +8 -0
- pulumi_gcp/vmwareengine/private_cloud.py +8 -0
- pulumi_gcp/vmwareengine/subnet.py +6 -0
- pulumi_gcp/vpcaccess/connector.py +16 -6
- pulumi_gcp/vpcaccess/get_connector.py +2 -0
- pulumi_gcp/workbench/get_instance_iam_policy.py +6 -6
- pulumi_gcp/workbench/instance.py +42 -26
- pulumi_gcp/workflows/workflow.py +98 -0
- pulumi_gcp/workstations/workstation.py +26 -30
- pulumi_gcp/workstations/workstation_cluster.py +48 -48
- pulumi_gcp/workstations/workstation_config.py +182 -194
- {pulumi_gcp-7.12.0a1709102105.dist-info → pulumi_gcp-7.12.0a1709149267.dist-info}/METADATA +1 -1
- pulumi_gcp-7.12.0a1709149267.dist-info/RECORD +1489 -0
- pulumi_gcp-7.12.0a1709102105.dist-info/RECORD +0 -1489
- {pulumi_gcp-7.12.0a1709102105.dist-info → pulumi_gcp-7.12.0a1709149267.dist-info}/WHEEL +0 -0
- {pulumi_gcp-7.12.0a1709102105.dist-info → pulumi_gcp-7.12.0a1709149267.dist-info}/top_level.txt +0 -0
@@ -598,17 +598,122 @@ class Certificate(pulumi.CustomResource):
|
|
598
598
|
`tier = "ENTERPRISE"`
|
599
599
|
|
600
600
|
## Example Usage
|
601
|
+
### Privateca Certificate Generated Key
|
602
|
+
|
603
|
+
```python
|
604
|
+
import pulumi
|
605
|
+
import pulumi_gcp as gcp
|
606
|
+
import pulumi_std as std
|
607
|
+
import pulumi_tls as tls
|
608
|
+
|
609
|
+
default = gcp.certificateauthority.CaPool("default",
|
610
|
+
location="us-central1",
|
611
|
+
name="default",
|
612
|
+
tier="ENTERPRISE")
|
613
|
+
default_authority = gcp.certificateauthority.Authority("default",
|
614
|
+
location="us-central1",
|
615
|
+
pool=default.name,
|
616
|
+
certificate_authority_id="my-authority",
|
617
|
+
config=gcp.certificateauthority.AuthorityConfigArgs(
|
618
|
+
subject_config=gcp.certificateauthority.AuthorityConfigSubjectConfigArgs(
|
619
|
+
subject=gcp.certificateauthority.AuthorityConfigSubjectConfigSubjectArgs(
|
620
|
+
organization="HashiCorp",
|
621
|
+
common_name="my-certificate-authority",
|
622
|
+
),
|
623
|
+
subject_alt_name=gcp.certificateauthority.AuthorityConfigSubjectConfigSubjectAltNameArgs(
|
624
|
+
dns_names=["hashicorp.com"],
|
625
|
+
),
|
626
|
+
),
|
627
|
+
x509_config=gcp.certificateauthority.AuthorityConfigX509ConfigArgs(
|
628
|
+
ca_options=gcp.certificateauthority.AuthorityConfigX509ConfigCaOptionsArgs(
|
629
|
+
is_ca=True,
|
630
|
+
),
|
631
|
+
key_usage=gcp.certificateauthority.AuthorityConfigX509ConfigKeyUsageArgs(
|
632
|
+
base_key_usage=gcp.certificateauthority.AuthorityConfigX509ConfigKeyUsageBaseKeyUsageArgs(
|
633
|
+
cert_sign=True,
|
634
|
+
crl_sign=True,
|
635
|
+
),
|
636
|
+
extended_key_usage=gcp.certificateauthority.AuthorityConfigX509ConfigKeyUsageExtendedKeyUsageArgs(
|
637
|
+
server_auth=True,
|
638
|
+
),
|
639
|
+
),
|
640
|
+
),
|
641
|
+
),
|
642
|
+
key_spec=gcp.certificateauthority.AuthorityKeySpecArgs(
|
643
|
+
algorithm="RSA_PKCS1_4096_SHA256",
|
644
|
+
),
|
645
|
+
deletion_protection=False,
|
646
|
+
skip_grace_period=True,
|
647
|
+
ignore_active_certificates_on_deletion=True)
|
648
|
+
cert_key = tls.PrivateKey("cert_key", algorithm="RSA")
|
649
|
+
default_certificate = gcp.certificateauthority.Certificate("default",
|
650
|
+
location="us-central1",
|
651
|
+
pool=default.name,
|
652
|
+
certificate_authority=default_authority.certificate_authority_id,
|
653
|
+
lifetime="86000s",
|
654
|
+
name="cert-1",
|
655
|
+
config=gcp.certificateauthority.CertificateConfigArgs(
|
656
|
+
subject_config=gcp.certificateauthority.CertificateConfigSubjectConfigArgs(
|
657
|
+
subject=gcp.certificateauthority.CertificateConfigSubjectConfigSubjectArgs(
|
658
|
+
common_name="san1.example.com",
|
659
|
+
country_code="us",
|
660
|
+
organization="google",
|
661
|
+
organizational_unit="enterprise",
|
662
|
+
locality="mountain view",
|
663
|
+
province="california",
|
664
|
+
street_address="1600 amphitheatre parkway",
|
665
|
+
),
|
666
|
+
subject_alt_name=gcp.certificateauthority.CertificateConfigSubjectConfigSubjectAltNameArgs(
|
667
|
+
email_addresses=["email@example.com"],
|
668
|
+
ip_addresses=["127.0.0.1"],
|
669
|
+
uris=["http://www.ietf.org/rfc/rfc3986.txt"],
|
670
|
+
),
|
671
|
+
),
|
672
|
+
x509_config=gcp.certificateauthority.CertificateConfigX509ConfigArgs(
|
673
|
+
ca_options=gcp.certificateauthority.CertificateConfigX509ConfigCaOptionsArgs(
|
674
|
+
is_ca=True,
|
675
|
+
),
|
676
|
+
key_usage=gcp.certificateauthority.CertificateConfigX509ConfigKeyUsageArgs(
|
677
|
+
base_key_usage=gcp.certificateauthority.CertificateConfigX509ConfigKeyUsageBaseKeyUsageArgs(
|
678
|
+
cert_sign=True,
|
679
|
+
crl_sign=True,
|
680
|
+
),
|
681
|
+
extended_key_usage=gcp.certificateauthority.CertificateConfigX509ConfigKeyUsageExtendedKeyUsageArgs(
|
682
|
+
server_auth=False,
|
683
|
+
),
|
684
|
+
),
|
685
|
+
name_constraints=gcp.certificateauthority.CertificateConfigX509ConfigNameConstraintsArgs(
|
686
|
+
critical=True,
|
687
|
+
permitted_dns_names=["*.example.com"],
|
688
|
+
excluded_dns_names=["*.deny.example.com"],
|
689
|
+
permitted_ip_ranges=["10.0.0.0/8"],
|
690
|
+
excluded_ip_ranges=["10.1.1.0/24"],
|
691
|
+
permitted_email_addresses=[".example.com"],
|
692
|
+
excluded_email_addresses=[".deny.example.com"],
|
693
|
+
permitted_uris=[".example.com"],
|
694
|
+
excluded_uris=[".deny.example.com"],
|
695
|
+
),
|
696
|
+
),
|
697
|
+
public_key=gcp.certificateauthority.CertificateConfigPublicKeyArgs(
|
698
|
+
format="PEM",
|
699
|
+
key=std.base64encode_output(input=cert_key.public_key_pem).apply(lambda invoke: invoke.result),
|
700
|
+
),
|
701
|
+
))
|
702
|
+
```
|
601
703
|
### Privateca Certificate With Template
|
602
704
|
|
603
705
|
```python
|
604
706
|
import pulumi
|
605
707
|
import pulumi_gcp as gcp
|
708
|
+
import pulumi_std as std
|
606
709
|
|
607
|
-
|
710
|
+
default = gcp.certificateauthority.CaPool("default",
|
608
711
|
location="us-central1",
|
712
|
+
name="my-pool",
|
609
713
|
tier="ENTERPRISE")
|
610
|
-
default_certificate_template = gcp.certificateauthority.CertificateTemplate("
|
714
|
+
default_certificate_template = gcp.certificateauthority.CertificateTemplate("default",
|
611
715
|
location="us-central1",
|
716
|
+
name="my-certificate-template",
|
612
717
|
description="An updated sample certificate template",
|
613
718
|
identity_constraints=gcp.certificateauthority.CertificateTemplateIdentityConstraintsArgs(
|
614
719
|
allow_subject_alt_names_passthrough=True,
|
@@ -679,9 +784,9 @@ class Certificate(pulumi.CustomResource):
|
|
679
784
|
],
|
680
785
|
)],
|
681
786
|
))
|
682
|
-
default_authority = gcp.certificateauthority.Authority("
|
787
|
+
default_authority = gcp.certificateauthority.Authority("default",
|
683
788
|
location="us-central1",
|
684
|
-
pool=
|
789
|
+
pool=default.name,
|
685
790
|
certificate_authority_id="my-authority",
|
686
791
|
config=gcp.certificateauthority.AuthorityConfigArgs(
|
687
792
|
subject_config=gcp.certificateauthority.AuthorityConfigSubjectConfigArgs(
|
@@ -714,12 +819,13 @@ class Certificate(pulumi.CustomResource):
|
|
714
819
|
deletion_protection=False,
|
715
820
|
skip_grace_period=True,
|
716
821
|
ignore_active_certificates_on_deletion=True)
|
717
|
-
default_certificate = gcp.certificateauthority.Certificate("
|
822
|
+
default_certificate = gcp.certificateauthority.Certificate("default",
|
718
823
|
location="us-central1",
|
719
|
-
pool=
|
824
|
+
pool=default.name,
|
720
825
|
certificate_authority=default_authority.certificate_authority_id,
|
826
|
+
name="my-certificate",
|
721
827
|
lifetime="860s",
|
722
|
-
pem_csr=
|
828
|
+
pem_csr=std.file(input="test-fixtures/rsa_csr.pem").result,
|
723
829
|
certificate_template=default_certificate_template.id)
|
724
830
|
```
|
725
831
|
### Privateca Certificate Csr
|
@@ -727,13 +833,15 @@ class Certificate(pulumi.CustomResource):
|
|
727
833
|
```python
|
728
834
|
import pulumi
|
729
835
|
import pulumi_gcp as gcp
|
836
|
+
import pulumi_std as std
|
730
837
|
|
731
|
-
|
838
|
+
default = gcp.certificateauthority.CaPool("default",
|
732
839
|
location="us-central1",
|
840
|
+
name="my-pool",
|
733
841
|
tier="ENTERPRISE")
|
734
|
-
default_authority = gcp.certificateauthority.Authority("
|
842
|
+
default_authority = gcp.certificateauthority.Authority("default",
|
735
843
|
location="us-central1",
|
736
|
-
pool=
|
844
|
+
pool=default.name,
|
737
845
|
certificate_authority_id="my-authority",
|
738
846
|
config=gcp.certificateauthority.AuthorityConfigArgs(
|
739
847
|
subject_config=gcp.certificateauthority.AuthorityConfigSubjectConfigArgs(
|
@@ -766,26 +874,28 @@ class Certificate(pulumi.CustomResource):
|
|
766
874
|
deletion_protection=False,
|
767
875
|
skip_grace_period=True,
|
768
876
|
ignore_active_certificates_on_deletion=True)
|
769
|
-
default_certificate = gcp.certificateauthority.Certificate("
|
877
|
+
default_certificate = gcp.certificateauthority.Certificate("default",
|
770
878
|
location="us-central1",
|
771
|
-
pool=
|
879
|
+
pool=default.name,
|
772
880
|
certificate_authority=default_authority.certificate_authority_id,
|
881
|
+
name="my-certificate",
|
773
882
|
lifetime="860s",
|
774
|
-
pem_csr=
|
883
|
+
pem_csr=std.file(input="test-fixtures/rsa_csr.pem").result)
|
775
884
|
```
|
776
885
|
### Privateca Certificate No Authority
|
777
886
|
|
778
887
|
```python
|
779
888
|
import pulumi
|
780
|
-
import base64
|
781
889
|
import pulumi_gcp as gcp
|
890
|
+
import pulumi_std as std
|
782
891
|
|
783
|
-
|
892
|
+
default = gcp.certificateauthority.CaPool("default",
|
784
893
|
location="us-central1",
|
894
|
+
name="my-pool",
|
785
895
|
tier="ENTERPRISE")
|
786
|
-
default_authority = gcp.certificateauthority.Authority("
|
896
|
+
default_authority = gcp.certificateauthority.Authority("default",
|
787
897
|
location="us-central1",
|
788
|
-
pool=
|
898
|
+
pool=default.name,
|
789
899
|
certificate_authority_id="my-authority",
|
790
900
|
config=gcp.certificateauthority.AuthorityConfigArgs(
|
791
901
|
subject_config=gcp.certificateauthority.AuthorityConfigSubjectConfigArgs(
|
@@ -820,9 +930,10 @@ class Certificate(pulumi.CustomResource):
|
|
820
930
|
deletion_protection=False,
|
821
931
|
skip_grace_period=True,
|
822
932
|
ignore_active_certificates_on_deletion=True)
|
823
|
-
default_certificate = gcp.certificateauthority.Certificate("
|
933
|
+
default_certificate = gcp.certificateauthority.Certificate("default",
|
824
934
|
location="us-central1",
|
825
|
-
pool=
|
935
|
+
pool=default.name,
|
936
|
+
name="my-certificate",
|
826
937
|
lifetime="860s",
|
827
938
|
config=gcp.certificateauthority.CertificateConfigArgs(
|
828
939
|
subject_config=gcp.certificateauthority.CertificateConfigSubjectConfigArgs(
|
@@ -852,10 +963,9 @@ class Certificate(pulumi.CustomResource):
|
|
852
963
|
),
|
853
964
|
public_key=gcp.certificateauthority.CertificateConfigPublicKeyArgs(
|
854
965
|
format="PEM",
|
855
|
-
key=
|
966
|
+
key=std.filebase64(input="test-fixtures/rsa_public.pem").result,
|
856
967
|
),
|
857
|
-
)
|
858
|
-
opts=pulumi.ResourceOptions(depends_on=[default_authority]))
|
968
|
+
))
|
859
969
|
```
|
860
970
|
|
861
971
|
## Import
|
@@ -926,17 +1036,122 @@ class Certificate(pulumi.CustomResource):
|
|
926
1036
|
`tier = "ENTERPRISE"`
|
927
1037
|
|
928
1038
|
## Example Usage
|
1039
|
+
### Privateca Certificate Generated Key
|
1040
|
+
|
1041
|
+
```python
|
1042
|
+
import pulumi
|
1043
|
+
import pulumi_gcp as gcp
|
1044
|
+
import pulumi_std as std
|
1045
|
+
import pulumi_tls as tls
|
1046
|
+
|
1047
|
+
default = gcp.certificateauthority.CaPool("default",
|
1048
|
+
location="us-central1",
|
1049
|
+
name="default",
|
1050
|
+
tier="ENTERPRISE")
|
1051
|
+
default_authority = gcp.certificateauthority.Authority("default",
|
1052
|
+
location="us-central1",
|
1053
|
+
pool=default.name,
|
1054
|
+
certificate_authority_id="my-authority",
|
1055
|
+
config=gcp.certificateauthority.AuthorityConfigArgs(
|
1056
|
+
subject_config=gcp.certificateauthority.AuthorityConfigSubjectConfigArgs(
|
1057
|
+
subject=gcp.certificateauthority.AuthorityConfigSubjectConfigSubjectArgs(
|
1058
|
+
organization="HashiCorp",
|
1059
|
+
common_name="my-certificate-authority",
|
1060
|
+
),
|
1061
|
+
subject_alt_name=gcp.certificateauthority.AuthorityConfigSubjectConfigSubjectAltNameArgs(
|
1062
|
+
dns_names=["hashicorp.com"],
|
1063
|
+
),
|
1064
|
+
),
|
1065
|
+
x509_config=gcp.certificateauthority.AuthorityConfigX509ConfigArgs(
|
1066
|
+
ca_options=gcp.certificateauthority.AuthorityConfigX509ConfigCaOptionsArgs(
|
1067
|
+
is_ca=True,
|
1068
|
+
),
|
1069
|
+
key_usage=gcp.certificateauthority.AuthorityConfigX509ConfigKeyUsageArgs(
|
1070
|
+
base_key_usage=gcp.certificateauthority.AuthorityConfigX509ConfigKeyUsageBaseKeyUsageArgs(
|
1071
|
+
cert_sign=True,
|
1072
|
+
crl_sign=True,
|
1073
|
+
),
|
1074
|
+
extended_key_usage=gcp.certificateauthority.AuthorityConfigX509ConfigKeyUsageExtendedKeyUsageArgs(
|
1075
|
+
server_auth=True,
|
1076
|
+
),
|
1077
|
+
),
|
1078
|
+
),
|
1079
|
+
),
|
1080
|
+
key_spec=gcp.certificateauthority.AuthorityKeySpecArgs(
|
1081
|
+
algorithm="RSA_PKCS1_4096_SHA256",
|
1082
|
+
),
|
1083
|
+
deletion_protection=False,
|
1084
|
+
skip_grace_period=True,
|
1085
|
+
ignore_active_certificates_on_deletion=True)
|
1086
|
+
cert_key = tls.PrivateKey("cert_key", algorithm="RSA")
|
1087
|
+
default_certificate = gcp.certificateauthority.Certificate("default",
|
1088
|
+
location="us-central1",
|
1089
|
+
pool=default.name,
|
1090
|
+
certificate_authority=default_authority.certificate_authority_id,
|
1091
|
+
lifetime="86000s",
|
1092
|
+
name="cert-1",
|
1093
|
+
config=gcp.certificateauthority.CertificateConfigArgs(
|
1094
|
+
subject_config=gcp.certificateauthority.CertificateConfigSubjectConfigArgs(
|
1095
|
+
subject=gcp.certificateauthority.CertificateConfigSubjectConfigSubjectArgs(
|
1096
|
+
common_name="san1.example.com",
|
1097
|
+
country_code="us",
|
1098
|
+
organization="google",
|
1099
|
+
organizational_unit="enterprise",
|
1100
|
+
locality="mountain view",
|
1101
|
+
province="california",
|
1102
|
+
street_address="1600 amphitheatre parkway",
|
1103
|
+
),
|
1104
|
+
subject_alt_name=gcp.certificateauthority.CertificateConfigSubjectConfigSubjectAltNameArgs(
|
1105
|
+
email_addresses=["email@example.com"],
|
1106
|
+
ip_addresses=["127.0.0.1"],
|
1107
|
+
uris=["http://www.ietf.org/rfc/rfc3986.txt"],
|
1108
|
+
),
|
1109
|
+
),
|
1110
|
+
x509_config=gcp.certificateauthority.CertificateConfigX509ConfigArgs(
|
1111
|
+
ca_options=gcp.certificateauthority.CertificateConfigX509ConfigCaOptionsArgs(
|
1112
|
+
is_ca=True,
|
1113
|
+
),
|
1114
|
+
key_usage=gcp.certificateauthority.CertificateConfigX509ConfigKeyUsageArgs(
|
1115
|
+
base_key_usage=gcp.certificateauthority.CertificateConfigX509ConfigKeyUsageBaseKeyUsageArgs(
|
1116
|
+
cert_sign=True,
|
1117
|
+
crl_sign=True,
|
1118
|
+
),
|
1119
|
+
extended_key_usage=gcp.certificateauthority.CertificateConfigX509ConfigKeyUsageExtendedKeyUsageArgs(
|
1120
|
+
server_auth=False,
|
1121
|
+
),
|
1122
|
+
),
|
1123
|
+
name_constraints=gcp.certificateauthority.CertificateConfigX509ConfigNameConstraintsArgs(
|
1124
|
+
critical=True,
|
1125
|
+
permitted_dns_names=["*.example.com"],
|
1126
|
+
excluded_dns_names=["*.deny.example.com"],
|
1127
|
+
permitted_ip_ranges=["10.0.0.0/8"],
|
1128
|
+
excluded_ip_ranges=["10.1.1.0/24"],
|
1129
|
+
permitted_email_addresses=[".example.com"],
|
1130
|
+
excluded_email_addresses=[".deny.example.com"],
|
1131
|
+
permitted_uris=[".example.com"],
|
1132
|
+
excluded_uris=[".deny.example.com"],
|
1133
|
+
),
|
1134
|
+
),
|
1135
|
+
public_key=gcp.certificateauthority.CertificateConfigPublicKeyArgs(
|
1136
|
+
format="PEM",
|
1137
|
+
key=std.base64encode_output(input=cert_key.public_key_pem).apply(lambda invoke: invoke.result),
|
1138
|
+
),
|
1139
|
+
))
|
1140
|
+
```
|
929
1141
|
### Privateca Certificate With Template
|
930
1142
|
|
931
1143
|
```python
|
932
1144
|
import pulumi
|
933
1145
|
import pulumi_gcp as gcp
|
1146
|
+
import pulumi_std as std
|
934
1147
|
|
935
|
-
|
1148
|
+
default = gcp.certificateauthority.CaPool("default",
|
936
1149
|
location="us-central1",
|
1150
|
+
name="my-pool",
|
937
1151
|
tier="ENTERPRISE")
|
938
|
-
default_certificate_template = gcp.certificateauthority.CertificateTemplate("
|
1152
|
+
default_certificate_template = gcp.certificateauthority.CertificateTemplate("default",
|
939
1153
|
location="us-central1",
|
1154
|
+
name="my-certificate-template",
|
940
1155
|
description="An updated sample certificate template",
|
941
1156
|
identity_constraints=gcp.certificateauthority.CertificateTemplateIdentityConstraintsArgs(
|
942
1157
|
allow_subject_alt_names_passthrough=True,
|
@@ -1007,9 +1222,9 @@ class Certificate(pulumi.CustomResource):
|
|
1007
1222
|
],
|
1008
1223
|
)],
|
1009
1224
|
))
|
1010
|
-
default_authority = gcp.certificateauthority.Authority("
|
1225
|
+
default_authority = gcp.certificateauthority.Authority("default",
|
1011
1226
|
location="us-central1",
|
1012
|
-
pool=
|
1227
|
+
pool=default.name,
|
1013
1228
|
certificate_authority_id="my-authority",
|
1014
1229
|
config=gcp.certificateauthority.AuthorityConfigArgs(
|
1015
1230
|
subject_config=gcp.certificateauthority.AuthorityConfigSubjectConfigArgs(
|
@@ -1042,12 +1257,13 @@ class Certificate(pulumi.CustomResource):
|
|
1042
1257
|
deletion_protection=False,
|
1043
1258
|
skip_grace_period=True,
|
1044
1259
|
ignore_active_certificates_on_deletion=True)
|
1045
|
-
default_certificate = gcp.certificateauthority.Certificate("
|
1260
|
+
default_certificate = gcp.certificateauthority.Certificate("default",
|
1046
1261
|
location="us-central1",
|
1047
|
-
pool=
|
1262
|
+
pool=default.name,
|
1048
1263
|
certificate_authority=default_authority.certificate_authority_id,
|
1264
|
+
name="my-certificate",
|
1049
1265
|
lifetime="860s",
|
1050
|
-
pem_csr=
|
1266
|
+
pem_csr=std.file(input="test-fixtures/rsa_csr.pem").result,
|
1051
1267
|
certificate_template=default_certificate_template.id)
|
1052
1268
|
```
|
1053
1269
|
### Privateca Certificate Csr
|
@@ -1055,13 +1271,15 @@ class Certificate(pulumi.CustomResource):
|
|
1055
1271
|
```python
|
1056
1272
|
import pulumi
|
1057
1273
|
import pulumi_gcp as gcp
|
1274
|
+
import pulumi_std as std
|
1058
1275
|
|
1059
|
-
|
1276
|
+
default = gcp.certificateauthority.CaPool("default",
|
1060
1277
|
location="us-central1",
|
1278
|
+
name="my-pool",
|
1061
1279
|
tier="ENTERPRISE")
|
1062
|
-
default_authority = gcp.certificateauthority.Authority("
|
1280
|
+
default_authority = gcp.certificateauthority.Authority("default",
|
1063
1281
|
location="us-central1",
|
1064
|
-
pool=
|
1282
|
+
pool=default.name,
|
1065
1283
|
certificate_authority_id="my-authority",
|
1066
1284
|
config=gcp.certificateauthority.AuthorityConfigArgs(
|
1067
1285
|
subject_config=gcp.certificateauthority.AuthorityConfigSubjectConfigArgs(
|
@@ -1094,26 +1312,28 @@ class Certificate(pulumi.CustomResource):
|
|
1094
1312
|
deletion_protection=False,
|
1095
1313
|
skip_grace_period=True,
|
1096
1314
|
ignore_active_certificates_on_deletion=True)
|
1097
|
-
default_certificate = gcp.certificateauthority.Certificate("
|
1315
|
+
default_certificate = gcp.certificateauthority.Certificate("default",
|
1098
1316
|
location="us-central1",
|
1099
|
-
pool=
|
1317
|
+
pool=default.name,
|
1100
1318
|
certificate_authority=default_authority.certificate_authority_id,
|
1319
|
+
name="my-certificate",
|
1101
1320
|
lifetime="860s",
|
1102
|
-
pem_csr=
|
1321
|
+
pem_csr=std.file(input="test-fixtures/rsa_csr.pem").result)
|
1103
1322
|
```
|
1104
1323
|
### Privateca Certificate No Authority
|
1105
1324
|
|
1106
1325
|
```python
|
1107
1326
|
import pulumi
|
1108
|
-
import base64
|
1109
1327
|
import pulumi_gcp as gcp
|
1328
|
+
import pulumi_std as std
|
1110
1329
|
|
1111
|
-
|
1330
|
+
default = gcp.certificateauthority.CaPool("default",
|
1112
1331
|
location="us-central1",
|
1332
|
+
name="my-pool",
|
1113
1333
|
tier="ENTERPRISE")
|
1114
|
-
default_authority = gcp.certificateauthority.Authority("
|
1334
|
+
default_authority = gcp.certificateauthority.Authority("default",
|
1115
1335
|
location="us-central1",
|
1116
|
-
pool=
|
1336
|
+
pool=default.name,
|
1117
1337
|
certificate_authority_id="my-authority",
|
1118
1338
|
config=gcp.certificateauthority.AuthorityConfigArgs(
|
1119
1339
|
subject_config=gcp.certificateauthority.AuthorityConfigSubjectConfigArgs(
|
@@ -1148,9 +1368,10 @@ class Certificate(pulumi.CustomResource):
|
|
1148
1368
|
deletion_protection=False,
|
1149
1369
|
skip_grace_period=True,
|
1150
1370
|
ignore_active_certificates_on_deletion=True)
|
1151
|
-
default_certificate = gcp.certificateauthority.Certificate("
|
1371
|
+
default_certificate = gcp.certificateauthority.Certificate("default",
|
1152
1372
|
location="us-central1",
|
1153
|
-
pool=
|
1373
|
+
pool=default.name,
|
1374
|
+
name="my-certificate",
|
1154
1375
|
lifetime="860s",
|
1155
1376
|
config=gcp.certificateauthority.CertificateConfigArgs(
|
1156
1377
|
subject_config=gcp.certificateauthority.CertificateConfigSubjectConfigArgs(
|
@@ -1180,10 +1401,9 @@ class Certificate(pulumi.CustomResource):
|
|
1180
1401
|
),
|
1181
1402
|
public_key=gcp.certificateauthority.CertificateConfigPublicKeyArgs(
|
1182
1403
|
format="PEM",
|
1183
|
-
key=
|
1404
|
+
key=std.filebase64(input="test-fixtures/rsa_public.pem").result,
|
1184
1405
|
),
|
1185
|
-
)
|
1186
|
-
opts=pulumi.ResourceOptions(depends_on=[default_authority]))
|
1406
|
+
))
|
1187
1407
|
```
|
1188
1408
|
|
1189
1409
|
## Import
|
@@ -381,6 +381,90 @@ class CertificateTemplate(pulumi.CustomResource):
|
|
381
381
|
* [Understanding Certificate Templates](https://cloud.google.com/certificate-authority-service/docs/certificate-template)
|
382
382
|
* [Common configurations and Certificate Profiles](https://cloud.google.com/certificate-authority-service/docs/certificate-profile)
|
383
383
|
## Example Usage
|
384
|
+
### Basic_certificate_template
|
385
|
+
An example of a basic privateca certificate template
|
386
|
+
```python
|
387
|
+
import pulumi
|
388
|
+
import pulumi_gcp as gcp
|
389
|
+
|
390
|
+
primary = gcp.certificateauthority.CertificateTemplate("primary",
|
391
|
+
location="us-west1",
|
392
|
+
name="template",
|
393
|
+
description="An updated sample certificate template",
|
394
|
+
identity_constraints=gcp.certificateauthority.CertificateTemplateIdentityConstraintsArgs(
|
395
|
+
allow_subject_alt_names_passthrough=True,
|
396
|
+
allow_subject_passthrough=True,
|
397
|
+
cel_expression=gcp.certificateauthority.CertificateTemplateIdentityConstraintsCelExpressionArgs(
|
398
|
+
description="Always true",
|
399
|
+
expression="true",
|
400
|
+
location="any.file.anywhere",
|
401
|
+
title="Sample expression",
|
402
|
+
),
|
403
|
+
),
|
404
|
+
passthrough_extensions=gcp.certificateauthority.CertificateTemplatePassthroughExtensionsArgs(
|
405
|
+
additional_extensions=[gcp.certificateauthority.CertificateTemplatePassthroughExtensionsAdditionalExtensionArgs(
|
406
|
+
object_id_paths=[
|
407
|
+
1,
|
408
|
+
6,
|
409
|
+
],
|
410
|
+
)],
|
411
|
+
known_extensions=["EXTENDED_KEY_USAGE"],
|
412
|
+
),
|
413
|
+
predefined_values=gcp.certificateauthority.CertificateTemplatePredefinedValuesArgs(
|
414
|
+
additional_extensions=[gcp.certificateauthority.CertificateTemplatePredefinedValuesAdditionalExtensionArgs(
|
415
|
+
object_id=gcp.certificateauthority.CertificateTemplatePredefinedValuesAdditionalExtensionObjectIdArgs(
|
416
|
+
object_id_paths=[
|
417
|
+
1,
|
418
|
+
6,
|
419
|
+
],
|
420
|
+
),
|
421
|
+
value="c3RyaW5nCg==",
|
422
|
+
critical=True,
|
423
|
+
)],
|
424
|
+
aia_ocsp_servers=["string"],
|
425
|
+
ca_options=gcp.certificateauthority.CertificateTemplatePredefinedValuesCaOptionsArgs(
|
426
|
+
is_ca=False,
|
427
|
+
max_issuer_path_length=6,
|
428
|
+
),
|
429
|
+
key_usage=gcp.certificateauthority.CertificateTemplatePredefinedValuesKeyUsageArgs(
|
430
|
+
base_key_usage=gcp.certificateauthority.CertificateTemplatePredefinedValuesKeyUsageBaseKeyUsageArgs(
|
431
|
+
cert_sign=False,
|
432
|
+
content_commitment=True,
|
433
|
+
crl_sign=False,
|
434
|
+
data_encipherment=True,
|
435
|
+
decipher_only=True,
|
436
|
+
digital_signature=True,
|
437
|
+
encipher_only=True,
|
438
|
+
key_agreement=True,
|
439
|
+
key_encipherment=True,
|
440
|
+
),
|
441
|
+
extended_key_usage=gcp.certificateauthority.CertificateTemplatePredefinedValuesKeyUsageExtendedKeyUsageArgs(
|
442
|
+
client_auth=True,
|
443
|
+
code_signing=True,
|
444
|
+
email_protection=True,
|
445
|
+
ocsp_signing=True,
|
446
|
+
server_auth=True,
|
447
|
+
time_stamping=True,
|
448
|
+
),
|
449
|
+
unknown_extended_key_usages=[gcp.certificateauthority.CertificateTemplatePredefinedValuesKeyUsageUnknownExtendedKeyUsageArgs(
|
450
|
+
object_id_paths=[
|
451
|
+
1,
|
452
|
+
6,
|
453
|
+
],
|
454
|
+
)],
|
455
|
+
),
|
456
|
+
policy_ids=[gcp.certificateauthority.CertificateTemplatePredefinedValuesPolicyIdArgs(
|
457
|
+
object_id_paths=[
|
458
|
+
1,
|
459
|
+
6,
|
460
|
+
],
|
461
|
+
)],
|
462
|
+
),
|
463
|
+
project="my-project-name",
|
464
|
+
labels={
|
465
|
+
"label-two": "value-two",
|
466
|
+
})
|
467
|
+
```
|
384
468
|
|
385
469
|
## Import
|
386
470
|
|
@@ -433,6 +517,90 @@ class CertificateTemplate(pulumi.CustomResource):
|
|
433
517
|
* [Understanding Certificate Templates](https://cloud.google.com/certificate-authority-service/docs/certificate-template)
|
434
518
|
* [Common configurations and Certificate Profiles](https://cloud.google.com/certificate-authority-service/docs/certificate-profile)
|
435
519
|
## Example Usage
|
520
|
+
### Basic_certificate_template
|
521
|
+
An example of a basic privateca certificate template
|
522
|
+
```python
|
523
|
+
import pulumi
|
524
|
+
import pulumi_gcp as gcp
|
525
|
+
|
526
|
+
primary = gcp.certificateauthority.CertificateTemplate("primary",
|
527
|
+
location="us-west1",
|
528
|
+
name="template",
|
529
|
+
description="An updated sample certificate template",
|
530
|
+
identity_constraints=gcp.certificateauthority.CertificateTemplateIdentityConstraintsArgs(
|
531
|
+
allow_subject_alt_names_passthrough=True,
|
532
|
+
allow_subject_passthrough=True,
|
533
|
+
cel_expression=gcp.certificateauthority.CertificateTemplateIdentityConstraintsCelExpressionArgs(
|
534
|
+
description="Always true",
|
535
|
+
expression="true",
|
536
|
+
location="any.file.anywhere",
|
537
|
+
title="Sample expression",
|
538
|
+
),
|
539
|
+
),
|
540
|
+
passthrough_extensions=gcp.certificateauthority.CertificateTemplatePassthroughExtensionsArgs(
|
541
|
+
additional_extensions=[gcp.certificateauthority.CertificateTemplatePassthroughExtensionsAdditionalExtensionArgs(
|
542
|
+
object_id_paths=[
|
543
|
+
1,
|
544
|
+
6,
|
545
|
+
],
|
546
|
+
)],
|
547
|
+
known_extensions=["EXTENDED_KEY_USAGE"],
|
548
|
+
),
|
549
|
+
predefined_values=gcp.certificateauthority.CertificateTemplatePredefinedValuesArgs(
|
550
|
+
additional_extensions=[gcp.certificateauthority.CertificateTemplatePredefinedValuesAdditionalExtensionArgs(
|
551
|
+
object_id=gcp.certificateauthority.CertificateTemplatePredefinedValuesAdditionalExtensionObjectIdArgs(
|
552
|
+
object_id_paths=[
|
553
|
+
1,
|
554
|
+
6,
|
555
|
+
],
|
556
|
+
),
|
557
|
+
value="c3RyaW5nCg==",
|
558
|
+
critical=True,
|
559
|
+
)],
|
560
|
+
aia_ocsp_servers=["string"],
|
561
|
+
ca_options=gcp.certificateauthority.CertificateTemplatePredefinedValuesCaOptionsArgs(
|
562
|
+
is_ca=False,
|
563
|
+
max_issuer_path_length=6,
|
564
|
+
),
|
565
|
+
key_usage=gcp.certificateauthority.CertificateTemplatePredefinedValuesKeyUsageArgs(
|
566
|
+
base_key_usage=gcp.certificateauthority.CertificateTemplatePredefinedValuesKeyUsageBaseKeyUsageArgs(
|
567
|
+
cert_sign=False,
|
568
|
+
content_commitment=True,
|
569
|
+
crl_sign=False,
|
570
|
+
data_encipherment=True,
|
571
|
+
decipher_only=True,
|
572
|
+
digital_signature=True,
|
573
|
+
encipher_only=True,
|
574
|
+
key_agreement=True,
|
575
|
+
key_encipherment=True,
|
576
|
+
),
|
577
|
+
extended_key_usage=gcp.certificateauthority.CertificateTemplatePredefinedValuesKeyUsageExtendedKeyUsageArgs(
|
578
|
+
client_auth=True,
|
579
|
+
code_signing=True,
|
580
|
+
email_protection=True,
|
581
|
+
ocsp_signing=True,
|
582
|
+
server_auth=True,
|
583
|
+
time_stamping=True,
|
584
|
+
),
|
585
|
+
unknown_extended_key_usages=[gcp.certificateauthority.CertificateTemplatePredefinedValuesKeyUsageUnknownExtendedKeyUsageArgs(
|
586
|
+
object_id_paths=[
|
587
|
+
1,
|
588
|
+
6,
|
589
|
+
],
|
590
|
+
)],
|
591
|
+
),
|
592
|
+
policy_ids=[gcp.certificateauthority.CertificateTemplatePredefinedValuesPolicyIdArgs(
|
593
|
+
object_id_paths=[
|
594
|
+
1,
|
595
|
+
6,
|
596
|
+
],
|
597
|
+
)],
|
598
|
+
),
|
599
|
+
project="my-project-name",
|
600
|
+
labels={
|
601
|
+
"label-two": "value-two",
|
602
|
+
})
|
603
|
+
```
|
436
604
|
|
437
605
|
## Import
|
438
606
|
|