pulumi-gcp 7.15.0a1711038061__py3-none-any.whl → 7.16.0__py3-none-any.whl

pulumi_gcp/kms/outputs.py

@@ -18,6 +18,8 @@ __all__ = [
     'CryptoKeyVersionAttestationCertChains',
     'CryptoKeyVersionAttestationExternalProtectionLevelOptions',
     'CryptoKeyVersionTemplate',
+    'EkmConnectionServiceResolver',
+    'EkmConnectionServiceResolverServerCertificate',
     'KeyRingIAMBindingCondition',
     'KeyRingIAMMemberCondition',
     'KeyRingImportJobAttestation',
@@ -403,6 +405,246 @@ class CryptoKeyVersionTemplate(dict):
         return pulumi.get(self, "protection_level")
 
 
+@pulumi.output_type
+class EkmConnectionServiceResolver(dict):
+    @staticmethod
+    def __key_warning(key: str):
+        suggest = None
+        if key == "serverCertificates":
+            suggest = "server_certificates"
+        elif key == "serviceDirectoryService":
+            suggest = "service_directory_service"
+        elif key == "endpointFilter":
+            suggest = "endpoint_filter"
+
+        if suggest:
+            pulumi.log.warn(f"Key '{key}' not found in EkmConnectionServiceResolver. Access the value via the '{suggest}' property getter instead.")
+
+    def __getitem__(self, key: str) -> Any:
+        EkmConnectionServiceResolver.__key_warning(key)
+        return super().__getitem__(key)
+
+    def get(self, key: str, default = None) -> Any:
+        EkmConnectionServiceResolver.__key_warning(key)
+        return super().get(key, default)
+
+    def __init__(__self__, *,
+                 hostname: str,
+                 server_certificates: Sequence['outputs.EkmConnectionServiceResolverServerCertificate'],
+                 service_directory_service: str,
+                 endpoint_filter: Optional[str] = None):
+        """
+        :param str hostname: Required. The hostname of the EKM replica used at TLS and HTTP layers.
+        :param Sequence['EkmConnectionServiceResolverServerCertificateArgs'] server_certificates: Required. A list of leaf server certificates used to authenticate HTTPS connections to the EKM replica. Currently, a maximum of 10 Certificate is supported.
+               Structure is documented below.
+        :param str service_directory_service: Required. The resource name of the Service Directory service pointing to an EKM replica, in the format projects/*/locations/*/namespaces/*/services/*
+        :param str endpoint_filter: Optional. The filter applied to the endpoints of the resolved service. If no filter is specified, all endpoints will be considered. An endpoint will be chosen arbitrarily from the filtered list for each request. For endpoint filter syntax and examples, see https://cloud.google.com/service-directory/docs/reference/rpc/google.cloud.servicedirectory.v1#resolveservicerequest.
+        """
+        pulumi.set(__self__, "hostname", hostname)
+        pulumi.set(__self__, "server_certificates", server_certificates)
+        pulumi.set(__self__, "service_directory_service", service_directory_service)
+        if endpoint_filter is not None:
+            pulumi.set(__self__, "endpoint_filter", endpoint_filter)
+
+    @property
+    @pulumi.getter
+    def hostname(self) -> str:
+        """
+        Required. The hostname of the EKM replica used at TLS and HTTP layers.
+        """
+        return pulumi.get(self, "hostname")
+
+    @property
+    @pulumi.getter(name="serverCertificates")
+    def server_certificates(self) -> Sequence['outputs.EkmConnectionServiceResolverServerCertificate']:
+        """
+        Required. A list of leaf server certificates used to authenticate HTTPS connections to the EKM replica. Currently, a maximum of 10 Certificate is supported.
+        Structure is documented below.
+        """
+        return pulumi.get(self, "server_certificates")
+
+    @property
+    @pulumi.getter(name="serviceDirectoryService")
+    def service_directory_service(self) -> str:
+        """
+        Required. The resource name of the Service Directory service pointing to an EKM replica, in the format projects/*/locations/*/namespaces/*/services/*
+        """
+        return pulumi.get(self, "service_directory_service")
+
+    @property
+    @pulumi.getter(name="endpointFilter")
+    def endpoint_filter(self) -> Optional[str]:
+        """
+        Optional. The filter applied to the endpoints of the resolved service. If no filter is specified, all endpoints will be considered. An endpoint will be chosen arbitrarily from the filtered list for each request. For endpoint filter syntax and examples, see https://cloud.google.com/service-directory/docs/reference/rpc/google.cloud.servicedirectory.v1#resolveservicerequest.
+        """
+        return pulumi.get(self, "endpoint_filter")
+
+
+@pulumi.output_type
+class EkmConnectionServiceResolverServerCertificate(dict):
+    @staticmethod
+    def __key_warning(key: str):
+        suggest = None
+        if key == "rawDer":
+            suggest = "raw_der"
+        elif key == "notAfterTime":
+            suggest = "not_after_time"
+        elif key == "notBeforeTime":
+            suggest = "not_before_time"
+        elif key == "serialNumber":
+            suggest = "serial_number"
+        elif key == "sha256Fingerprint":
+            suggest = "sha256_fingerprint"
+        elif key == "subjectAlternativeDnsNames":
+            suggest = "subject_alternative_dns_names"
+
+        if suggest:
+            pulumi.log.warn(f"Key '{key}' not found in EkmConnectionServiceResolverServerCertificate. Access the value via the '{suggest}' property getter instead.")
+
+    def __getitem__(self, key: str) -> Any:
+        EkmConnectionServiceResolverServerCertificate.__key_warning(key)
+        return super().__getitem__(key)
+
+    def get(self, key: str, default = None) -> Any:
+        EkmConnectionServiceResolverServerCertificate.__key_warning(key)
+        return super().get(key, default)
+
+    def __init__(__self__, *,
+                 raw_der: str,
+                 issuer: Optional[str] = None,
+                 not_after_time: Optional[str] = None,
+                 not_before_time: Optional[str] = None,
+                 parsed: Optional[bool] = None,
+                 serial_number: Optional[str] = None,
+                 sha256_fingerprint: Optional[str] = None,
+                 subject: Optional[str] = None,
+                 subject_alternative_dns_names: Optional[Sequence[str]] = None):
+        """
+        :param str raw_der: Required. The raw certificate bytes in DER format. A base64-encoded string.
+        :param str issuer: (Output)
+               Output only. The issuer distinguished name in RFC 2253 format. Only present if parsed is true.
+        :param str not_after_time: (Output)
+               Output only. The certificate is not valid after this time. Only present if parsed is true.
+               A timestamp in RFC3339 UTC "Zulu" format, with nanosecond resolution and up to nine fractional digits. Examples: "2014-10-02T15:01:23Z" and "2014-10-02T15:01:23.045123456Z".
+        :param str not_before_time: (Output)
+               Output only. The certificate is not valid before this time. Only present if parsed is true.
+               A timestamp in RFC3339 UTC "Zulu" format, with nanosecond resolution and up to nine fractional digits. Examples: "2014-10-02T15:01:23Z" and "2014-10-02T15:01:23.045123456Z".
+        :param bool parsed: (Output)
+               Output only. True if the certificate was parsed successfully.
+        :param str serial_number: (Output)
+               Output only. The certificate serial number as a hex string. Only present if parsed is true.
+        :param str sha256_fingerprint: (Output)
+               Output only. The SHA-256 certificate fingerprint as a hex string. Only present if parsed is true.
+        :param str subject: (Output)
+               Output only. The subject distinguished name in RFC 2253 format. Only present if parsed is true.
+        :param Sequence[str] subject_alternative_dns_names: (Output)
+               Output only. The subject Alternative DNS names. Only present if parsed is true.
+               
+               - - -
+        """
+        pulumi.set(__self__, "raw_der", raw_der)
+        if issuer is not None:
+            pulumi.set(__self__, "issuer", issuer)
+        if not_after_time is not None:
+            pulumi.set(__self__, "not_after_time", not_after_time)
+        if not_before_time is not None:
+            pulumi.set(__self__, "not_before_time", not_before_time)
+        if parsed is not None:
+            pulumi.set(__self__, "parsed", parsed)
+        if serial_number is not None:
+            pulumi.set(__self__, "serial_number", serial_number)
+        if sha256_fingerprint is not None:
+            pulumi.set(__self__, "sha256_fingerprint", sha256_fingerprint)
+        if subject is not None:
+            pulumi.set(__self__, "subject", subject)
+        if subject_alternative_dns_names is not None:
+            pulumi.set(__self__, "subject_alternative_dns_names", subject_alternative_dns_names)
+
+    @property
+    @pulumi.getter(name="rawDer")
+    def raw_der(self) -> str:
+        """
+        Required. The raw certificate bytes in DER format. A base64-encoded string.
+        """
+        return pulumi.get(self, "raw_der")
+
+    @property
+    @pulumi.getter
+    def issuer(self) -> Optional[str]:
+        """
+        (Output)
+        Output only. The issuer distinguished name in RFC 2253 format. Only present if parsed is true.
+        """
+        return pulumi.get(self, "issuer")
+
+    @property
+    @pulumi.getter(name="notAfterTime")
+    def not_after_time(self) -> Optional[str]:
+        """
+        (Output)
+        Output only. The certificate is not valid after this time. Only present if parsed is true.
+        A timestamp in RFC3339 UTC "Zulu" format, with nanosecond resolution and up to nine fractional digits. Examples: "2014-10-02T15:01:23Z" and "2014-10-02T15:01:23.045123456Z".
+        """
+        return pulumi.get(self, "not_after_time")
+
+    @property
+    @pulumi.getter(name="notBeforeTime")
+    def not_before_time(self) -> Optional[str]:
+        """
+        (Output)
+        Output only. The certificate is not valid before this time. Only present if parsed is true.
+        A timestamp in RFC3339 UTC "Zulu" format, with nanosecond resolution and up to nine fractional digits. Examples: "2014-10-02T15:01:23Z" and "2014-10-02T15:01:23.045123456Z".
+        """
+        return pulumi.get(self, "not_before_time")
+
+    @property
+    @pulumi.getter
+    def parsed(self) -> Optional[bool]:
+        """
+        (Output)
+        Output only. True if the certificate was parsed successfully.
+        """
+        return pulumi.get(self, "parsed")
+
+    @property
+    @pulumi.getter(name="serialNumber")
+    def serial_number(self) -> Optional[str]:
+        """
+        (Output)
+        Output only. The certificate serial number as a hex string. Only present if parsed is true.
+        """
+        return pulumi.get(self, "serial_number")
+
+    @property
+    @pulumi.getter(name="sha256Fingerprint")
+    def sha256_fingerprint(self) -> Optional[str]:
+        """
+        (Output)
+        Output only. The SHA-256 certificate fingerprint as a hex string. Only present if parsed is true.
+        """
+        return pulumi.get(self, "sha256_fingerprint")
+
+    @property
+    @pulumi.getter
+    def subject(self) -> Optional[str]:
+        """
+        (Output)
+        Output only. The subject distinguished name in RFC 2253 format. Only present if parsed is true.
+        """
+        return pulumi.get(self, "subject")
+
+    @property
+    @pulumi.getter(name="subjectAlternativeDnsNames")
+    def subject_alternative_dns_names(self) -> Optional[Sequence[str]]:
+        """
+        (Output)
+        Output only. The subject Alternative DNS names. Only present if parsed is true.
+
+        - - -
+        """
+        return pulumi.get(self, "subject_alternative_dns_names")
+
+
 @pulumi.output_type
 class KeyRingIAMBindingCondition(dict):
     def __init__(__self__, *,

pulumi_gcp/monitoring/_inputs.py

@@ -182,6 +182,7 @@ class AlertPolicyAlertStrategyNotificationRateLimitArgs:
                  period: Optional[pulumi.Input[str]] = None):
         """
         :param pulumi.Input[str] period: Not more than one notification per period.
+               A duration in seconds with up to nine fractional digits, terminated by 's'. Example "60.5s".
         """
         if period is not None:
             pulumi.set(__self__, "period", period)
@@ -191,6 +192,7 @@ class AlertPolicyAlertStrategyNotificationRateLimitArgs:
     def period(self) -> Optional[pulumi.Input[str]]:
         """
         Not more than one notification per period.
+        A duration in seconds with up to nine fractional digits, terminated by 's'. Example "60.5s".
         """
         return pulumi.get(self, "period")
 

pulumi_gcp/monitoring/outputs.py

@@ -209,6 +209,7 @@ class AlertPolicyAlertStrategyNotificationRateLimit(dict):
                  period: Optional[str] = None):
         """
         :param str period: Not more than one notification per period.
+               A duration in seconds with up to nine fractional digits, terminated by 's'. Example "60.5s".
         """
         if period is not None:
             pulumi.set(__self__, "period", period)
@@ -218,6 +219,7 @@ class AlertPolicyAlertStrategyNotificationRateLimit(dict):
     def period(self) -> Optional[str]:
         """
         Not more than one notification per period.
+        A duration in seconds with up to nine fractional digits, terminated by 's'. Example "60.5s".
         """
         return pulumi.get(self, "period")
 

pulumi_gcp/networksecurity/__init__.py

@@ -12,6 +12,7 @@ from .address_group_iam_policy import *
 from .authorization_policy import *
 from .client_tls_policy import *
 from .firewall_endpoint import *
+from .firewall_endpoint_association import *
 from .gateway_security_policy import *
 from .gateway_security_policy_rule import *
 from .get_address_group_iam_policy import *

pulumi_gcp/networksecurity/firewall_endpoint.py

@@ -14,12 +14,14 @@ __all__ = ['FirewallEndpointArgs', 'FirewallEndpoint']
 @pulumi.input_type
 class FirewallEndpointArgs:
     def __init__(__self__, *,
+                 billing_project_id: pulumi.Input[str],
                  location: pulumi.Input[str],
                  parent: pulumi.Input[str],
                  labels: Optional[pulumi.Input[Mapping[str, pulumi.Input[str]]]] = None,
                  name: Optional[pulumi.Input[str]] = None):
         """
         The set of arguments for constructing a FirewallEndpoint resource.
+        :param pulumi.Input[str] billing_project_id: Project to bill on endpoint uptime usage.
         :param pulumi.Input[str] location: The location (zone) of the firewall endpoint.
         :param pulumi.Input[str] parent: The name of the parent this firewall endpoint belongs to.
                Format: organizations/{organization_id}.
@@ -32,6 +34,7 @@ class FirewallEndpointArgs:
                Please refer to the field `effective_labels` for all of the labels present on the resource.
         :param pulumi.Input[str] name: The name of the firewall endpoint resource.
         """
+        pulumi.set(__self__, "billing_project_id", billing_project_id)
         pulumi.set(__self__, "location", location)
         pulumi.set(__self__, "parent", parent)
         if labels is not None:
@@ -39,6 +42,18 @@ class FirewallEndpointArgs:
         if name is not None:
             pulumi.set(__self__, "name", name)
 
+    @property
+    @pulumi.getter(name="billingProjectId")
+    def billing_project_id(self) -> pulumi.Input[str]:
+        """
+        Project to bill on endpoint uptime usage.
+        """
+        return pulumi.get(self, "billing_project_id")
+
+    @billing_project_id.setter
+    def billing_project_id(self, value: pulumi.Input[str]):
+        pulumi.set(self, "billing_project_id", value)
+
     @property
     @pulumi.getter
     def location(self) -> pulumi.Input[str]:
@@ -99,6 +114,7 @@ class FirewallEndpointArgs:
 class _FirewallEndpointState:
     def __init__(__self__, *,
                  associated_networks: Optional[pulumi.Input[Sequence[pulumi.Input[str]]]] = None,
+                 billing_project_id: Optional[pulumi.Input[str]] = None,
                  create_time: Optional[pulumi.Input[str]] = None,
                  effective_labels: Optional[pulumi.Input[Mapping[str, pulumi.Input[str]]]] = None,
                  labels: Optional[pulumi.Input[Mapping[str, pulumi.Input[str]]]] = None,
@@ -116,6 +132,7 @@ class _FirewallEndpointState:
                This is a projection of the FirewallEndpointAssociations pointing at this
                endpoint. A network will only appear in this list after traffic routing is
                fully configured. Format: projects/{project}/global/networks/{name}.
+        :param pulumi.Input[str] billing_project_id: Project to bill on endpoint uptime usage.
         :param pulumi.Input[str] create_time: Time the firewall endpoint was created in UTC.
         :param pulumi.Input[Mapping[str, pulumi.Input[str]]] effective_labels: All of labels (key/value pairs) present on the resource in GCP, including the labels configured through Pulumi, other clients and services.
         :param pulumi.Input[Mapping[str, pulumi.Input[str]]] labels: A map of key/value label pairs to assign to the resource.
@@ -138,6 +155,8 @@ class _FirewallEndpointState:
         """
         if associated_networks is not None:
             pulumi.set(__self__, "associated_networks", associated_networks)
+        if billing_project_id is not None:
+            pulumi.set(__self__, "billing_project_id", billing_project_id)
         if create_time is not None:
             pulumi.set(__self__, "create_time", create_time)
         if effective_labels is not None:
@@ -176,6 +195,18 @@ class _FirewallEndpointState:
     def associated_networks(self, value: Optional[pulumi.Input[Sequence[pulumi.Input[str]]]]):
         pulumi.set(self, "associated_networks", value)
 
+    @property
+    @pulumi.getter(name="billingProjectId")
+    def billing_project_id(self) -> Optional[pulumi.Input[str]]:
+        """
+        Project to bill on endpoint uptime usage.
+        """
+        return pulumi.get(self, "billing_project_id")
+
+    @billing_project_id.setter
+    def billing_project_id(self, value: Optional[pulumi.Input[str]]):
+        pulumi.set(self, "billing_project_id", value)
+
     @property
     @pulumi.getter(name="createTime")
     def create_time(self) -> Optional[pulumi.Input[str]]:
@@ -322,6 +353,7 @@ class FirewallEndpoint(pulumi.CustomResource):
     def __init__(__self__,
                  resource_name: str,
                  opts: Optional[pulumi.ResourceOptions] = None,
+                 billing_project_id: Optional[pulumi.Input[str]] = None,
                  labels: Optional[pulumi.Input[Mapping[str, pulumi.Input[str]]]] = None,
                  location: Optional[pulumi.Input[str]] = None,
                  name: Optional[pulumi.Input[str]] = None,
@@ -361,6 +393,7 @@ class FirewallEndpoint(pulumi.CustomResource):
 
         :param str resource_name: The name of the resource.
         :param pulumi.ResourceOptions opts: Options for the resource.
+        :param pulumi.Input[str] billing_project_id: Project to bill on endpoint uptime usage.
         :param pulumi.Input[Mapping[str, pulumi.Input[str]]] labels: A map of key/value label pairs to assign to the resource.
                
                **Note**: This field is non-authoritative, and will only manage the labels present in your configuration.
@@ -426,6 +459,7 @@ class FirewallEndpoint(pulumi.CustomResource):
     def _internal_init(__self__,
                  resource_name: str,
                  opts: Optional[pulumi.ResourceOptions] = None,
+                 billing_project_id: Optional[pulumi.Input[str]] = None,
                  labels: Optional[pulumi.Input[Mapping[str, pulumi.Input[str]]]] = None,
                  location: Optional[pulumi.Input[str]] = None,
                  name: Optional[pulumi.Input[str]] = None,
@@ -439,6 +473,9 @@ class FirewallEndpoint(pulumi.CustomResource):
                 raise TypeError('__props__ is only valid when passed in combination with a valid opts.id to get an existing resource')
             __props__ = FirewallEndpointArgs.__new__(FirewallEndpointArgs)
 
+            if billing_project_id is None and not opts.urn:
+                raise TypeError("Missing required property 'billing_project_id'")
+            __props__.__dict__["billing_project_id"] = billing_project_id
             __props__.__dict__["labels"] = labels
             if location is None and not opts.urn:
                 raise TypeError("Missing required property 'location'")
@@ -468,6 +505,7 @@ class FirewallEndpoint(pulumi.CustomResource):
             id: pulumi.Input[str],
             opts: Optional[pulumi.ResourceOptions] = None,
             associated_networks: Optional[pulumi.Input[Sequence[pulumi.Input[str]]]] = None,
+            billing_project_id: Optional[pulumi.Input[str]] = None,
             create_time: Optional[pulumi.Input[str]] = None,
             effective_labels: Optional[pulumi.Input[Mapping[str, pulumi.Input[str]]]] = None,
             labels: Optional[pulumi.Input[Mapping[str, pulumi.Input[str]]]] = None,
@@ -490,6 +528,7 @@ class FirewallEndpoint(pulumi.CustomResource):
                This is a projection of the FirewallEndpointAssociations pointing at this
                endpoint. A network will only appear in this list after traffic routing is
                fully configured. Format: projects/{project}/global/networks/{name}.
+        :param pulumi.Input[str] billing_project_id: Project to bill on endpoint uptime usage.
         :param pulumi.Input[str] create_time: Time the firewall endpoint was created in UTC.
         :param pulumi.Input[Mapping[str, pulumi.Input[str]]] effective_labels: All of labels (key/value pairs) present on the resource in GCP, including the labels configured through Pulumi, other clients and services.
         :param pulumi.Input[Mapping[str, pulumi.Input[str]]] labels: A map of key/value label pairs to assign to the resource.
@@ -515,6 +554,7 @@ class FirewallEndpoint(pulumi.CustomResource):
         __props__ = _FirewallEndpointState.__new__(_FirewallEndpointState)
 
         __props__.__dict__["associated_networks"] = associated_networks
+        __props__.__dict__["billing_project_id"] = billing_project_id
         __props__.__dict__["create_time"] = create_time
         __props__.__dict__["effective_labels"] = effective_labels
         __props__.__dict__["labels"] = labels
@@ -539,6 +579,14 @@ class FirewallEndpoint(pulumi.CustomResource):
         """
         return pulumi.get(self, "associated_networks")
 
+    @property
+    @pulumi.getter(name="billingProjectId")
+    def billing_project_id(self) -> pulumi.Output[str]:
+        """
+        Project to bill on endpoint uptime usage.
+        """
+        return pulumi.get(self, "billing_project_id")
+
     @property
     @pulumi.getter(name="createTime")
     def create_time(self) -> pulumi.Output[str]: