pulumi-gcp 7.14.0a1710186287__py3-none-any.whl → 7.14.1__py3-none-any.whl

pulumi_gcp/compute/_inputs.py

@@ -9352,22 +9352,36 @@ class InstanceGroupManagerAutoHealingPoliciesArgs:
 @pulumi.input_type
 class InstanceGroupManagerInstanceLifecyclePolicyArgs:
     def __init__(__self__, *,
+                 default_action_on_failure: Optional[pulumi.Input[str]] = None,
                  force_update_on_repair: Optional[pulumi.Input[str]] = None):
         """
-        :param pulumi.Input[str] force_update_on_repair: ), Specifies whether to apply the group's latest configuration when repairing a VM. Valid options are: `YES`, `NO`. If `YES` and you updated the group's instance template or per-instance configurations after the VM was created, then these changes are applied when VM is repaired. If `NO` (default), then updates are applied in accordance with the group's update policy type.
-               
+        :param pulumi.Input[str] default_action_on_failure: , Default behavior for all instance or health check failures. Valid options are: `REPAIR`, `DO_NOTHING`. If `DO_NOTHING` then instances will not be repaired. If `REPAIR` (default), then failed instances will be repaired.
                - - -
+        :param pulumi.Input[str] force_update_on_repair: , Specifies whether to apply the group's latest configuration when repairing a VM. Valid options are: `YES`, `NO`. If `YES` and you updated the group's instance template or per-instance configurations after the VM was created, then these changes are applied when VM is repaired. If `NO` (default), then updates are applied in accordance with the group's update policy type.
         """
+        if default_action_on_failure is not None:
+            pulumi.set(__self__, "default_action_on_failure", default_action_on_failure)
         if force_update_on_repair is not None:
             pulumi.set(__self__, "force_update_on_repair", force_update_on_repair)
 
+    @property
+    @pulumi.getter(name="defaultActionOnFailure")
+    def default_action_on_failure(self) -> Optional[pulumi.Input[str]]:
+        """
+        , Default behavior for all instance or health check failures. Valid options are: `REPAIR`, `DO_NOTHING`. If `DO_NOTHING` then instances will not be repaired. If `REPAIR` (default), then failed instances will be repaired.
+        - - -
+        """
+        return pulumi.get(self, "default_action_on_failure")
+
+    @default_action_on_failure.setter
+    def default_action_on_failure(self, value: Optional[pulumi.Input[str]]):
+        pulumi.set(self, "default_action_on_failure", value)
+
     @property
     @pulumi.getter(name="forceUpdateOnRepair")
     def force_update_on_repair(self) -> Optional[pulumi.Input[str]]:
         """
-        ), Specifies whether to apply the group's latest configuration when repairing a VM. Valid options are: `YES`, `NO`. If `YES` and you updated the group's instance template or per-instance configurations after the VM was created, then these changes are applied when VM is repaired. If `NO` (default), then updates are applied in accordance with the group's update policy type.
-
-        - - -
+        , Specifies whether to apply the group's latest configuration when repairing a VM. Valid options are: `YES`, `NO`. If `YES` and you updated the group's instance template or per-instance configurations after the VM was created, then these changes are applied when VM is repaired. If `NO` (default), then updates are applied in accordance with the group's update policy type.
         """
         return pulumi.get(self, "force_update_on_repair")
 
@@ -18576,20 +18590,38 @@ class RegionInstanceGroupManagerAutoHealingPoliciesArgs:
 @pulumi.input_type
 class RegionInstanceGroupManagerInstanceLifecyclePolicyArgs:
     def __init__(__self__, *,
+                 default_action_on_failure: Optional[pulumi.Input[str]] = None,
                  force_update_on_repair: Optional[pulumi.Input[str]] = None):
         """
-        :param pulumi.Input[str] force_update_on_repair: ), Specifies whether to apply the group's latest configuration when repairing a VM. Valid options are: YES, NO. If YES and you updated the group's instance template or per-instance configurations after the VM was created, then these changes are applied when VM is repaired. If NO (default), then updates are applied in accordance with the group's update policy type.
+        :param pulumi.Input[str] default_action_on_failure: , Default behavior for all instance or health check failures. Valid options are: `REPAIR`, `DO_NOTHING`. If `DO_NOTHING` then instances will not be repaired. If `REPAIR` (default), then failed instances will be repaired.
+               
                - - -
+        :param pulumi.Input[str] force_update_on_repair: , Specifies whether to apply the group's latest configuration when repairing a VM. Valid options are: `YES`, `NO`. If `YES` and you updated the group's instance template or per-instance configurations after the VM was created, then these changes are applied when VM is repaired. If `NO` (default), then updates are applied in accordance with the group's update policy type.
         """
+        if default_action_on_failure is not None:
+            pulumi.set(__self__, "default_action_on_failure", default_action_on_failure)
         if force_update_on_repair is not None:
             pulumi.set(__self__, "force_update_on_repair", force_update_on_repair)
 
+    @property
+    @pulumi.getter(name="defaultActionOnFailure")
+    def default_action_on_failure(self) -> Optional[pulumi.Input[str]]:
+        """
+        , Default behavior for all instance or health check failures. Valid options are: `REPAIR`, `DO_NOTHING`. If `DO_NOTHING` then instances will not be repaired. If `REPAIR` (default), then failed instances will be repaired.
+
+        - - -
+        """
+        return pulumi.get(self, "default_action_on_failure")
+
+    @default_action_on_failure.setter
+    def default_action_on_failure(self, value: Optional[pulumi.Input[str]]):
+        pulumi.set(self, "default_action_on_failure", value)
+
     @property
     @pulumi.getter(name="forceUpdateOnRepair")
     def force_update_on_repair(self) -> Optional[pulumi.Input[str]]:
         """
-        ), Specifies whether to apply the group's latest configuration when repairing a VM. Valid options are: YES, NO. If YES and you updated the group's instance template or per-instance configurations after the VM was created, then these changes are applied when VM is repaired. If NO (default), then updates are applied in accordance with the group's update policy type.
-        - - -
+        , Specifies whether to apply the group's latest configuration when repairing a VM. Valid options are: `YES`, `NO`. If `YES` and you updated the group's instance template or per-instance configurations after the VM was created, then these changes are applied when VM is repaired. If `NO` (default), then updates are applied in accordance with the group's update policy type.
         """
         return pulumi.get(self, "force_update_on_repair")
 
@@ -30020,14 +30052,21 @@ class ServiceAttachmentConnectedEndpointArgs:
 class ServiceAttachmentConsumerAcceptListArgs:
     def __init__(__self__, *,
                  connection_limit: pulumi.Input[int],
-                 project_id_or_num: pulumi.Input[str]):
+                 network_url: Optional[pulumi.Input[str]] = None,
+                 project_id_or_num: Optional[pulumi.Input[str]] = None):
         """
         :param pulumi.Input[int] connection_limit: The number of consumer forwarding rules the consumer project can
                create.
+        :param pulumi.Input[str] network_url: The network that is allowed to connect to this service attachment.
+               Only one of project_id_or_num and network_url may be set.
         :param pulumi.Input[str] project_id_or_num: A project that is allowed to connect to this service attachment.
+               Only one of project_id_or_num and network_url may be set.
         """
         pulumi.set(__self__, "connection_limit", connection_limit)
-        pulumi.set(__self__, "project_id_or_num", project_id_or_num)
+        if network_url is not None:
+            pulumi.set(__self__, "network_url", network_url)
+        if project_id_or_num is not None:
+            pulumi.set(__self__, "project_id_or_num", project_id_or_num)
 
     @property
     @pulumi.getter(name="connectionLimit")
@@ -30042,16 +30081,30 @@ class ServiceAttachmentConsumerAcceptListArgs:
     def connection_limit(self, value: pulumi.Input[int]):
         pulumi.set(self, "connection_limit", value)
 
+    @property
+    @pulumi.getter(name="networkUrl")
+    def network_url(self) -> Optional[pulumi.Input[str]]:
+        """
+        The network that is allowed to connect to this service attachment.
+        Only one of project_id_or_num and network_url may be set.
+        """
+        return pulumi.get(self, "network_url")
+
+    @network_url.setter
+    def network_url(self, value: Optional[pulumi.Input[str]]):
+        pulumi.set(self, "network_url", value)
+
     @property
     @pulumi.getter(name="projectIdOrNum")
-    def project_id_or_num(self) -> pulumi.Input[str]:
+    def project_id_or_num(self) -> Optional[pulumi.Input[str]]:
         """
         A project that is allowed to connect to this service attachment.
+        Only one of project_id_or_num and network_url may be set.
         """
         return pulumi.get(self, "project_id_or_num")
 
     @project_id_or_num.setter
-    def project_id_or_num(self, value: pulumi.Input[str]):
+    def project_id_or_num(self, value: Optional[pulumi.Input[str]]):
         pulumi.set(self, "project_id_or_num", value)
 
 

pulumi_gcp/compute/outputs.py

@@ -9382,7 +9382,9 @@ class InstanceGroupManagerInstanceLifecyclePolicy(dict):
     @staticmethod
     def __key_warning(key: str):
         suggest = None
-        if key == "forceUpdateOnRepair":
+        if key == "defaultActionOnFailure":
+            suggest = "default_action_on_failure"
+        elif key == "forceUpdateOnRepair":
             suggest = "force_update_on_repair"
 
         if suggest:
@@ -9397,22 +9399,32 @@ class InstanceGroupManagerInstanceLifecyclePolicy(dict):
         return super().get(key, default)
 
     def __init__(__self__, *,
+                 default_action_on_failure: Optional[str] = None,
                  force_update_on_repair: Optional[str] = None):
         """
-        :param str force_update_on_repair: ), Specifies whether to apply the group's latest configuration when repairing a VM. Valid options are: `YES`, `NO`. If `YES` and you updated the group's instance template or per-instance configurations after the VM was created, then these changes are applied when VM is repaired. If `NO` (default), then updates are applied in accordance with the group's update policy type.
-               
+        :param str default_action_on_failure: , Default behavior for all instance or health check failures. Valid options are: `REPAIR`, `DO_NOTHING`. If `DO_NOTHING` then instances will not be repaired. If `REPAIR` (default), then failed instances will be repaired.
                - - -
+        :param str force_update_on_repair: , Specifies whether to apply the group's latest configuration when repairing a VM. Valid options are: `YES`, `NO`. If `YES` and you updated the group's instance template or per-instance configurations after the VM was created, then these changes are applied when VM is repaired. If `NO` (default), then updates are applied in accordance with the group's update policy type.
         """
+        if default_action_on_failure is not None:
+            pulumi.set(__self__, "default_action_on_failure", default_action_on_failure)
         if force_update_on_repair is not None:
             pulumi.set(__self__, "force_update_on_repair", force_update_on_repair)
 
+    @property
+    @pulumi.getter(name="defaultActionOnFailure")
+    def default_action_on_failure(self) -> Optional[str]:
+        """
+        , Default behavior for all instance or health check failures. Valid options are: `REPAIR`, `DO_NOTHING`. If `DO_NOTHING` then instances will not be repaired. If `REPAIR` (default), then failed instances will be repaired.
+        - - -
+        """
+        return pulumi.get(self, "default_action_on_failure")
+
     @property
     @pulumi.getter(name="forceUpdateOnRepair")
     def force_update_on_repair(self) -> Optional[str]:
         """
-        ), Specifies whether to apply the group's latest configuration when repairing a VM. Valid options are: `YES`, `NO`. If `YES` and you updated the group's instance template or per-instance configurations after the VM was created, then these changes are applied when VM is repaired. If `NO` (default), then updates are applied in accordance with the group's update policy type.
-
-        - - -
+        , Specifies whether to apply the group's latest configuration when repairing a VM. Valid options are: `YES`, `NO`. If `YES` and you updated the group's instance template or per-instance configurations after the VM was created, then these changes are applied when VM is repaired. If `NO` (default), then updates are applied in accordance with the group's update policy type.
         """
         return pulumi.get(self, "force_update_on_repair")
 
@@ -18547,7 +18559,9 @@ class RegionInstanceGroupManagerInstanceLifecyclePolicy(dict):
     @staticmethod
     def __key_warning(key: str):
         suggest = None
-        if key == "forceUpdateOnRepair":
+        if key == "defaultActionOnFailure":
+            suggest = "default_action_on_failure"
+        elif key == "forceUpdateOnRepair":
             suggest = "force_update_on_repair"
 
         if suggest:
@@ -18562,20 +18576,34 @@ class RegionInstanceGroupManagerInstanceLifecyclePolicy(dict):
         return super().get(key, default)
 
     def __init__(__self__, *,
+                 default_action_on_failure: Optional[str] = None,
                  force_update_on_repair: Optional[str] = None):
         """
-        :param str force_update_on_repair: ), Specifies whether to apply the group's latest configuration when repairing a VM. Valid options are: YES, NO. If YES and you updated the group's instance template or per-instance configurations after the VM was created, then these changes are applied when VM is repaired. If NO (default), then updates are applied in accordance with the group's update policy type.
+        :param str default_action_on_failure: , Default behavior for all instance or health check failures. Valid options are: `REPAIR`, `DO_NOTHING`. If `DO_NOTHING` then instances will not be repaired. If `REPAIR` (default), then failed instances will be repaired.
+               
                - - -
+        :param str force_update_on_repair: , Specifies whether to apply the group's latest configuration when repairing a VM. Valid options are: `YES`, `NO`. If `YES` and you updated the group's instance template or per-instance configurations after the VM was created, then these changes are applied when VM is repaired. If `NO` (default), then updates are applied in accordance with the group's update policy type.
         """
+        if default_action_on_failure is not None:
+            pulumi.set(__self__, "default_action_on_failure", default_action_on_failure)
         if force_update_on_repair is not None:
             pulumi.set(__self__, "force_update_on_repair", force_update_on_repair)
 
+    @property
+    @pulumi.getter(name="defaultActionOnFailure")
+    def default_action_on_failure(self) -> Optional[str]:
+        """
+        , Default behavior for all instance or health check failures. Valid options are: `REPAIR`, `DO_NOTHING`. If `DO_NOTHING` then instances will not be repaired. If `REPAIR` (default), then failed instances will be repaired.
+
+        - - -
+        """
+        return pulumi.get(self, "default_action_on_failure")
+
     @property
     @pulumi.getter(name="forceUpdateOnRepair")
     def force_update_on_repair(self) -> Optional[str]:
         """
-        ), Specifies whether to apply the group's latest configuration when repairing a VM. Valid options are: YES, NO. If YES and you updated the group's instance template or per-instance configurations after the VM was created, then these changes are applied when VM is repaired. If NO (default), then updates are applied in accordance with the group's update policy type.
-        - - -
+        , Specifies whether to apply the group's latest configuration when repairing a VM. Valid options are: `YES`, `NO`. If `YES` and you updated the group's instance template or per-instance configurations after the VM was created, then these changes are applied when VM is repaired. If `NO` (default), then updates are applied in accordance with the group's update policy type.
         """
         return pulumi.get(self, "force_update_on_repair")
 
@@ -30925,6 +30953,8 @@ class ServiceAttachmentConsumerAcceptList(dict):
         suggest = None
         if key == "connectionLimit":
             suggest = "connection_limit"
+        elif key == "networkUrl":
+            suggest = "network_url"
         elif key == "projectIdOrNum":
             suggest = "project_id_or_num"
 
@@ -30941,14 +30971,21 @@ class ServiceAttachmentConsumerAcceptList(dict):
 
     def __init__(__self__, *,
                  connection_limit: int,
-                 project_id_or_num: str):
+                 network_url: Optional[str] = None,
+                 project_id_or_num: Optional[str] = None):
         """
         :param int connection_limit: The number of consumer forwarding rules the consumer project can
                create.
+        :param str network_url: The network that is allowed to connect to this service attachment.
+               Only one of project_id_or_num and network_url may be set.
         :param str project_id_or_num: A project that is allowed to connect to this service attachment.
+               Only one of project_id_or_num and network_url may be set.
         """
         pulumi.set(__self__, "connection_limit", connection_limit)
-        pulumi.set(__self__, "project_id_or_num", project_id_or_num)
+        if network_url is not None:
+            pulumi.set(__self__, "network_url", network_url)
+        if project_id_or_num is not None:
+            pulumi.set(__self__, "project_id_or_num", project_id_or_num)
 
     @property
     @pulumi.getter(name="connectionLimit")
@@ -30959,11 +30996,21 @@ class ServiceAttachmentConsumerAcceptList(dict):
         """
         return pulumi.get(self, "connection_limit")
 
+    @property
+    @pulumi.getter(name="networkUrl")
+    def network_url(self) -> Optional[str]:
+        """
+        The network that is allowed to connect to this service attachment.
+        Only one of project_id_or_num and network_url may be set.
+        """
+        return pulumi.get(self, "network_url")
+
     @property
     @pulumi.getter(name="projectIdOrNum")
-    def project_id_or_num(self) -> str:
+    def project_id_or_num(self) -> Optional[str]:
         """
         A project that is allowed to connect to this service attachment.
+        Only one of project_id_or_num and network_url may be set.
         """
         return pulumi.get(self, "project_id_or_num")
 
@@ -41971,12 +42018,23 @@ class GetInstanceGroupManagerAutoHealingPolicyResult(dict):
 @pulumi.output_type
 class GetInstanceGroupManagerInstanceLifecyclePolicyResult(dict):
     def __init__(__self__, *,
+                 default_action_on_failure: str,
                  force_update_on_repair: str):
         """
+        :param str default_action_on_failure: Default behavior for all instance or health check failures.
         :param str force_update_on_repair: Specifies whether to apply the group's latest configuration when repairing a VM. Valid options are: YES, NO. If YES and you updated the group's instance template or per-instance configurations after the VM was created, then these changes are applied when VM is repaired. If NO (default), then updates are applied in accordance with the group's update policy type.
         """
+        pulumi.set(__self__, "default_action_on_failure", default_action_on_failure)
         pulumi.set(__self__, "force_update_on_repair", force_update_on_repair)
 
+    @property
+    @pulumi.getter(name="defaultActionOnFailure")
+    def default_action_on_failure(self) -> str:
+        """
+        Default behavior for all instance or health check failures.
+        """
+        return pulumi.get(self, "default_action_on_failure")
+
     @property
     @pulumi.getter(name="forceUpdateOnRepair")
     def force_update_on_repair(self) -> str:

pulumi_gcp/compute/service_attachment.py

@@ -710,6 +710,81 @@ class ServiceAttachment(pulumi.CustomResource):
             ip_address=psc_ilb_consumer_address.id)
         ```
         <!--End PulumiCodeChooser -->
+        ### Service Attachment Explicit Networks
+
+        <!--Start PulumiCodeChooser -->
+        ```python
+        import pulumi
+        import pulumi_gcp as gcp
+
+        psc_ilb_consumer_network = gcp.compute.Network("psc_ilb_consumer_network",
+            name="psc-ilb-consumer-network",
+            auto_create_subnetworks=False)
+        producer_service_health_check = gcp.compute.HealthCheck("producer_service_health_check",
+            name="producer-service-health-check",
+            check_interval_sec=1,
+            timeout_sec=1,
+            tcp_health_check=gcp.compute.HealthCheckTcpHealthCheckArgs(
+                port=80,
+            ))
+        producer_service_backend = gcp.compute.RegionBackendService("producer_service_backend",
+            name="producer-service",
+            region="us-west2",
+            health_checks=producer_service_health_check.id)
+        psc_ilb_network = gcp.compute.Network("psc_ilb_network",
+            name="psc-ilb-network",
+            auto_create_subnetworks=False)
+        psc_ilb_producer_subnetwork = gcp.compute.Subnetwork("psc_ilb_producer_subnetwork",
+            name="psc-ilb-producer-subnetwork",
+            region="us-west2",
+            network=psc_ilb_network.id,
+            ip_cidr_range="10.0.0.0/16")
+        psc_ilb_target_service = gcp.compute.ForwardingRule("psc_ilb_target_service",
+            name="producer-forwarding-rule",
+            region="us-west2",
+            load_balancing_scheme="INTERNAL",
+            backend_service=producer_service_backend.id,
+            all_ports=True,
+            network=psc_ilb_network.name,
+            subnetwork=psc_ilb_producer_subnetwork.name)
+        psc_ilb_nat = gcp.compute.Subnetwork("psc_ilb_nat",
+            name="psc-ilb-nat",
+            region="us-west2",
+            network=psc_ilb_network.id,
+            purpose="PRIVATE_SERVICE_CONNECT",
+            ip_cidr_range="10.1.0.0/16")
+        psc_ilb_service_attachment = gcp.compute.ServiceAttachment("psc_ilb_service_attachment",
+            name="my-psc-ilb",
+            region="us-west2",
+            description="A service attachment configured with Terraform",
+            enable_proxy_protocol=False,
+            connection_preference="ACCEPT_MANUAL",
+            nat_subnets=[psc_ilb_nat.id],
+            target_service=psc_ilb_target_service.id,
+            consumer_accept_lists=[gcp.compute.ServiceAttachmentConsumerAcceptListArgs(
+                network_url=psc_ilb_consumer_network.self_link,
+                connection_limit=1,
+            )])
+        psc_ilb_consumer_subnetwork = gcp.compute.Subnetwork("psc_ilb_consumer_subnetwork",
+            name="psc-ilb-consumer-network",
+            ip_cidr_range="10.0.0.0/16",
+            region="us-west2",
+            network=psc_ilb_consumer_network.id)
+        psc_ilb_consumer_address = gcp.compute.Address("psc_ilb_consumer_address",
+            name="psc-ilb-consumer-address",
+            region="us-west2",
+            subnetwork=psc_ilb_consumer_subnetwork.id,
+            address_type="INTERNAL")
+        psc_ilb_consumer = gcp.compute.ForwardingRule("psc_ilb_consumer",
+            name="psc-ilb-consumer-forwarding-rule",
+            region="us-west2",
+            target=psc_ilb_service_attachment.id,
+            load_balancing_scheme="",
+            network=psc_ilb_consumer_network.id,
+            subnetwork=psc_ilb_consumer_subnetwork.id,
+            ip_address=psc_ilb_consumer_address.id)
+        ```
+        <!--End PulumiCodeChooser -->
         ### Service Attachment Reconcile Connections
 
         <!--Start PulumiCodeChooser -->
@@ -988,6 +1063,81 @@ class ServiceAttachment(pulumi.CustomResource):
             ip_address=psc_ilb_consumer_address.id)
         ```
         <!--End PulumiCodeChooser -->
+        ### Service Attachment Explicit Networks
+
+        <!--Start PulumiCodeChooser -->
+        ```python
+        import pulumi
+        import pulumi_gcp as gcp
+
+        psc_ilb_consumer_network = gcp.compute.Network("psc_ilb_consumer_network",
+            name="psc-ilb-consumer-network",
+            auto_create_subnetworks=False)
+        producer_service_health_check = gcp.compute.HealthCheck("producer_service_health_check",
+            name="producer-service-health-check",
+            check_interval_sec=1,
+            timeout_sec=1,
+            tcp_health_check=gcp.compute.HealthCheckTcpHealthCheckArgs(
+                port=80,
+            ))
+        producer_service_backend = gcp.compute.RegionBackendService("producer_service_backend",
+            name="producer-service",
+            region="us-west2",
+            health_checks=producer_service_health_check.id)
+        psc_ilb_network = gcp.compute.Network("psc_ilb_network",
+            name="psc-ilb-network",
+            auto_create_subnetworks=False)
+        psc_ilb_producer_subnetwork = gcp.compute.Subnetwork("psc_ilb_producer_subnetwork",
+            name="psc-ilb-producer-subnetwork",
+            region="us-west2",
+            network=psc_ilb_network.id,
+            ip_cidr_range="10.0.0.0/16")
+        psc_ilb_target_service = gcp.compute.ForwardingRule("psc_ilb_target_service",
+            name="producer-forwarding-rule",
+            region="us-west2",
+            load_balancing_scheme="INTERNAL",
+            backend_service=producer_service_backend.id,
+            all_ports=True,
+            network=psc_ilb_network.name,
+            subnetwork=psc_ilb_producer_subnetwork.name)
+        psc_ilb_nat = gcp.compute.Subnetwork("psc_ilb_nat",
+            name="psc-ilb-nat",
+            region="us-west2",
+            network=psc_ilb_network.id,
+            purpose="PRIVATE_SERVICE_CONNECT",
+            ip_cidr_range="10.1.0.0/16")
+        psc_ilb_service_attachment = gcp.compute.ServiceAttachment("psc_ilb_service_attachment",
+            name="my-psc-ilb",
+            region="us-west2",
+            description="A service attachment configured with Terraform",
+            enable_proxy_protocol=False,
+            connection_preference="ACCEPT_MANUAL",
+            nat_subnets=[psc_ilb_nat.id],
+            target_service=psc_ilb_target_service.id,
+            consumer_accept_lists=[gcp.compute.ServiceAttachmentConsumerAcceptListArgs(
+                network_url=psc_ilb_consumer_network.self_link,
+                connection_limit=1,
+            )])
+        psc_ilb_consumer_subnetwork = gcp.compute.Subnetwork("psc_ilb_consumer_subnetwork",
+            name="psc-ilb-consumer-network",
+            ip_cidr_range="10.0.0.0/16",
+            region="us-west2",
+            network=psc_ilb_consumer_network.id)
+        psc_ilb_consumer_address = gcp.compute.Address("psc_ilb_consumer_address",
+            name="psc-ilb-consumer-address",
+            region="us-west2",
+            subnetwork=psc_ilb_consumer_subnetwork.id,
+            address_type="INTERNAL")
+        psc_ilb_consumer = gcp.compute.ForwardingRule("psc_ilb_consumer",
+            name="psc-ilb-consumer-forwarding-rule",
+            region="us-west2",
+            target=psc_ilb_service_attachment.id,
+            load_balancing_scheme="",
+            network=psc_ilb_consumer_network.id,
+            subnetwork=psc_ilb_consumer_subnetwork.id,
+            ip_address=psc_ilb_consumer_address.id)
+        ```
+        <!--End PulumiCodeChooser -->
         ### Service Attachment Reconcile Connections
 
         <!--Start PulumiCodeChooser -->

pulumi_gcp/dataflow/flex_template_job.py

@@ -74,12 +74,12 @@ class FlexTemplateJobArgs:
         :param pulumi.Input[str] region: The region in which the created job should run.
         :param pulumi.Input[str] sdk_container_image: Docker registry location of container image to use for the 'worker harness. Default is the container for the version of
                the SDK. Note this field is only valid for portable pipelines.
-        :param pulumi.Input[str] service_account_email: The Service Account email used to create the job.
+        :param pulumi.Input[str] service_account_email: Service account email to run the workers as.
         :param pulumi.Input[bool] skip_wait_on_job_termination: If true, treat DRAINING and CANCELLING as terminal job states and do not wait for further changes before removing from
                terraform state and moving on. WARNING: this will lead to job name conflicts if you do not ensure that the job names are
                different, e.g. by embedding a release ID or by using a random_id.
         :param pulumi.Input[str] staging_location: The Cloud Storage path to use for staging files. Must be a valid Cloud Storage URL, beginning with gs://.
-        :param pulumi.Input[str] subnetwork: The subnetwork to which VMs will be assigned. Should be of the form "regions/REGION/subnetworks/SUBNETWORK".
+        :param pulumi.Input[str] subnetwork: Compute Engine subnetwork for launching instances to run your pipeline.
         :param pulumi.Input[str] temp_location: The Cloud Storage path to use for temporary files. Must be a valid Cloud Storage URL, beginning with gs://.
         :param pulumi.Input[Mapping[str, Any]] transform_name_mapping: Only applicable when updating a pipeline. Map of transform name prefixes of the job to be replaced with the
                corresponding name prefixes of the new job.
@@ -368,7 +368,7 @@ class FlexTemplateJobArgs:
     @pulumi.getter(name="serviceAccountEmail")
     def service_account_email(self) -> Optional[pulumi.Input[str]]:
         """
-        The Service Account email used to create the job.
+        Service account email to run the workers as.
         """
         return pulumi.get(self, "service_account_email")
 
@@ -406,7 +406,7 @@ class FlexTemplateJobArgs:
     @pulumi.getter
     def subnetwork(self) -> Optional[pulumi.Input[str]]:
         """
-        The subnetwork to which VMs will be assigned. Should be of the form "regions/REGION/subnetworks/SUBNETWORK".
+        Compute Engine subnetwork for launching instances to run your pipeline.
         """
         return pulumi.get(self, "subnetwork")
 
@@ -512,13 +512,13 @@ class _FlexTemplateJobState:
         :param pulumi.Input[str] region: The region in which the created job should run.
         :param pulumi.Input[str] sdk_container_image: Docker registry location of container image to use for the 'worker harness. Default is the container for the version of
                the SDK. Note this field is only valid for portable pipelines.
-        :param pulumi.Input[str] service_account_email: The Service Account email used to create the job.
+        :param pulumi.Input[str] service_account_email: Service account email to run the workers as.
         :param pulumi.Input[bool] skip_wait_on_job_termination: If true, treat DRAINING and CANCELLING as terminal job states and do not wait for further changes before removing from
                terraform state and moving on. WARNING: this will lead to job name conflicts if you do not ensure that the job names are
                different, e.g. by embedding a release ID or by using a random_id.
         :param pulumi.Input[str] staging_location: The Cloud Storage path to use for staging files. Must be a valid Cloud Storage URL, beginning with gs://.
         :param pulumi.Input[str] state: The current state of the resource, selected from the [JobState enum](https://cloud.google.com/dataflow/docs/reference/rest/v1b3/projects.jobs#Job.JobState)
-        :param pulumi.Input[str] subnetwork: The subnetwork to which VMs will be assigned. Should be of the form "regions/REGION/subnetworks/SUBNETWORK".
+        :param pulumi.Input[str] subnetwork: Compute Engine subnetwork for launching instances to run your pipeline.
         :param pulumi.Input[str] temp_location: The Cloud Storage path to use for temporary files. Must be a valid Cloud Storage URL, beginning with gs://.
         :param pulumi.Input[Mapping[str, Any]] transform_name_mapping: Only applicable when updating a pipeline. Map of transform name prefixes of the job to be replaced with the
                corresponding name prefixes of the new job.
@@ -856,7 +856,7 @@ class _FlexTemplateJobState:
     @pulumi.getter(name="serviceAccountEmail")
     def service_account_email(self) -> Optional[pulumi.Input[str]]:
         """
-        The Service Account email used to create the job.
+        Service account email to run the workers as.
         """
         return pulumi.get(self, "service_account_email")
 
@@ -906,7 +906,7 @@ class _FlexTemplateJobState:
     @pulumi.getter
     def subnetwork(self) -> Optional[pulumi.Input[str]]:
         """
-        The subnetwork to which VMs will be assigned. Should be of the form "regions/REGION/subnetworks/SUBNETWORK".
+        Compute Engine subnetwork for launching instances to run your pipeline.
         """
         return pulumi.get(self, "subnetwork")
 
@@ -1095,12 +1095,12 @@ class FlexTemplateJob(pulumi.CustomResource):
         :param pulumi.Input[str] region: The region in which the created job should run.
         :param pulumi.Input[str] sdk_container_image: Docker registry location of container image to use for the 'worker harness. Default is the container for the version of
                the SDK. Note this field is only valid for portable pipelines.
-        :param pulumi.Input[str] service_account_email: The Service Account email used to create the job.
+        :param pulumi.Input[str] service_account_email: Service account email to run the workers as.
         :param pulumi.Input[bool] skip_wait_on_job_termination: If true, treat DRAINING and CANCELLING as terminal job states and do not wait for further changes before removing from
                terraform state and moving on. WARNING: this will lead to job name conflicts if you do not ensure that the job names are
                different, e.g. by embedding a release ID or by using a random_id.
         :param pulumi.Input[str] staging_location: The Cloud Storage path to use for staging files. Must be a valid Cloud Storage URL, beginning with gs://.
-        :param pulumi.Input[str] subnetwork: The subnetwork to which VMs will be assigned. Should be of the form "regions/REGION/subnetworks/SUBNETWORK".
+        :param pulumi.Input[str] subnetwork: Compute Engine subnetwork for launching instances to run your pipeline.
         :param pulumi.Input[str] temp_location: The Cloud Storage path to use for temporary files. Must be a valid Cloud Storage URL, beginning with gs://.
         :param pulumi.Input[Mapping[str, Any]] transform_name_mapping: Only applicable when updating a pipeline. Map of transform name prefixes of the job to be replaced with the
                corresponding name prefixes of the new job.
@@ -1353,13 +1353,13 @@ class FlexTemplateJob(pulumi.CustomResource):
         :param pulumi.Input[str] region: The region in which the created job should run.
         :param pulumi.Input[str] sdk_container_image: Docker registry location of container image to use for the 'worker harness. Default is the container for the version of
                the SDK. Note this field is only valid for portable pipelines.
-        :param pulumi.Input[str] service_account_email: The Service Account email used to create the job.
+        :param pulumi.Input[str] service_account_email: Service account email to run the workers as.
         :param pulumi.Input[bool] skip_wait_on_job_termination: If true, treat DRAINING and CANCELLING as terminal job states and do not wait for further changes before removing from
                terraform state and moving on. WARNING: this will lead to job name conflicts if you do not ensure that the job names are
                different, e.g. by embedding a release ID or by using a random_id.
         :param pulumi.Input[str] staging_location: The Cloud Storage path to use for staging files. Must be a valid Cloud Storage URL, beginning with gs://.
         :param pulumi.Input[str] state: The current state of the resource, selected from the [JobState enum](https://cloud.google.com/dataflow/docs/reference/rest/v1b3/projects.jobs#Job.JobState)
-        :param pulumi.Input[str] subnetwork: The subnetwork to which VMs will be assigned. Should be of the form "regions/REGION/subnetworks/SUBNETWORK".
+        :param pulumi.Input[str] subnetwork: Compute Engine subnetwork for launching instances to run your pipeline.
         :param pulumi.Input[str] temp_location: The Cloud Storage path to use for temporary files. Must be a valid Cloud Storage URL, beginning with gs://.
         :param pulumi.Input[Mapping[str, Any]] transform_name_mapping: Only applicable when updating a pipeline. Map of transform name prefixes of the job to be replaced with the
                corresponding name prefixes of the new job.
@@ -1589,7 +1589,7 @@ class FlexTemplateJob(pulumi.CustomResource):
     @pulumi.getter(name="serviceAccountEmail")
     def service_account_email(self) -> pulumi.Output[str]:
         """
-        The Service Account email used to create the job.
+        Service account email to run the workers as.
         """
         return pulumi.get(self, "service_account_email")
 
@@ -1623,7 +1623,7 @@ class FlexTemplateJob(pulumi.CustomResource):
     @pulumi.getter
     def subnetwork(self) -> pulumi.Output[str]:
         """
-        The subnetwork to which VMs will be assigned. Should be of the form "regions/REGION/subnetworks/SUBNETWORK".
+        Compute Engine subnetwork for launching instances to run your pipeline.
         """
         return pulumi.get(self, "subnetwork")