pulumi-gcp 7.21.0__py3-none-any.whl → 7.21.0a1714002516__py3-none-any.whl
This diff represents the content of publicly available package versions that have been released to one of the supported registries. The information contained in this diff is provided for informational purposes only and reflects changes between package versions as they appear in their respective public registries.
- pulumi_gcp/__init__.py +0 -40
- pulumi_gcp/alloydb/_inputs.py +0 -74
- pulumi_gcp/alloydb/backup.py +12 -0
- pulumi_gcp/alloydb/cluster.py +12 -0
- pulumi_gcp/alloydb/instance.py +81 -90
- pulumi_gcp/alloydb/outputs.py +0 -98
- pulumi_gcp/apigee/environment.py +0 -47
- pulumi_gcp/apigee/sharedflow.py +20 -0
- pulumi_gcp/appengine/flexible_app_version.py +20 -0
- pulumi_gcp/applicationintegration/__init__.py +0 -1
- pulumi_gcp/applicationintegration/_inputs.py +0 -843
- pulumi_gcp/applicationintegration/outputs.py +0 -891
- pulumi_gcp/bigquerydatapolicy/_inputs.py +4 -21
- pulumi_gcp/bigquerydatapolicy/data_policy.py +0 -78
- pulumi_gcp/bigquerydatapolicy/outputs.py +3 -16
- pulumi_gcp/certificateauthority/_inputs.py +12 -92
- pulumi_gcp/certificateauthority/authority.py +27 -117
- pulumi_gcp/certificateauthority/certificate.py +0 -176
- pulumi_gcp/certificateauthority/outputs.py +12 -144
- pulumi_gcp/cloudbuild/worker_pool.py +12 -0
- pulumi_gcp/cloudbuildv2/connection.py +12 -0
- pulumi_gcp/cloudbuildv2/repository.py +12 -0
- pulumi_gcp/clouddeploy/automation.py +12 -0
- pulumi_gcp/clouddeploy/custom_target_type.py +12 -0
- pulumi_gcp/clouddeploy/delivery_pipeline.py +12 -0
- pulumi_gcp/clouddeploy/target.py +12 -0
- pulumi_gcp/cloudrunv2/job.py +12 -0
- pulumi_gcp/cloudrunv2/service.py +12 -0
- pulumi_gcp/composer/__init__.py +0 -1
- pulumi_gcp/composer/environment.py +47 -35
- pulumi_gcp/compute/__init__.py +0 -1
- pulumi_gcp/compute/_inputs.py +58 -121
- pulumi_gcp/compute/forwarding_rule.py +13 -0
- pulumi_gcp/compute/global_address.py +12 -0
- pulumi_gcp/compute/global_forwarding_rule.py +282 -0
- pulumi_gcp/compute/instance_from_machine_image.py +46 -14
- pulumi_gcp/compute/instance_from_template.py +46 -14
- pulumi_gcp/compute/outputs.py +65 -120
- pulumi_gcp/compute/region_instance_template.py +13 -0
- pulumi_gcp/compute/region_target_https_proxy.py +0 -257
- pulumi_gcp/compute/region_url_map.py +470 -0
- pulumi_gcp/container/attached_cluster.py +12 -0
- pulumi_gcp/container/aws_cluster.py +12 -0
- pulumi_gcp/container/aws_node_pool.py +12 -0
- pulumi_gcp/container/azure_cluster.py +12 -0
- pulumi_gcp/container/azure_node_pool.py +12 -0
- pulumi_gcp/container/cluster.py +20 -0
- pulumi_gcp/dataflow/flex_template_job.py +39 -0
- pulumi_gcp/dataloss/__init__.py +0 -1
- pulumi_gcp/dataloss/_inputs.py +0 -1040
- pulumi_gcp/dataloss/outputs.py +0 -1123
- pulumi_gcp/dataproc/cluster.py +20 -0
- pulumi_gcp/dataproc/workflow_template.py +26 -21
- pulumi_gcp/deploymentmanager/deployment.py +34 -0
- pulumi_gcp/dns/_inputs.py +2 -2
- pulumi_gcp/dns/outputs.py +2 -2
- pulumi_gcp/dns/record_set.py +36 -2
- pulumi_gcp/filestore/get_instance.py +1 -11
- pulumi_gcp/filestore/instance.py +0 -101
- pulumi_gcp/firebase/_inputs.py +0 -16
- pulumi_gcp/firebase/android_app.py +27 -0
- pulumi_gcp/firebase/app_check_play_integrity_config.py +0 -20
- pulumi_gcp/firebase/app_check_recaptcha_enterprise_config.py +0 -10
- pulumi_gcp/firebase/app_check_service_config.py +125 -0
- pulumi_gcp/firebase/apple_app.py +27 -0
- pulumi_gcp/firebase/hosting_custom_domain.py +27 -0
- pulumi_gcp/firebase/hosting_version.py +0 -44
- pulumi_gcp/firebase/outputs.py +0 -12
- pulumi_gcp/firebase/web_app.py +20 -0
- pulumi_gcp/firestore/database.py +68 -0
- pulumi_gcp/gkeonprem/bare_metal_admin_cluster.py +12 -0
- pulumi_gcp/gkeonprem/bare_metal_cluster.py +12 -0
- pulumi_gcp/gkeonprem/bare_metal_node_pool.py +12 -0
- pulumi_gcp/gkeonprem/v_mware_cluster.py +12 -0
- pulumi_gcp/gkeonprem/v_mware_node_pool.py +12 -0
- pulumi_gcp/logging/folder_sink.py +0 -54
- pulumi_gcp/logging/organization_sink.py +0 -54
- pulumi_gcp/monitoring/_inputs.py +2 -46
- pulumi_gcp/monitoring/outputs.py +2 -40
- pulumi_gcp/monitoring/uptime_check_config.py +0 -6
- pulumi_gcp/netapp/active_directory.py +20 -0
- pulumi_gcp/netapp/volume_replication.py +68 -0
- pulumi_gcp/networkconnectivity/__init__.py +0 -1
- pulumi_gcp/provider.py +1 -3
- pulumi_gcp/secretmanager/get_secret.py +3 -13
- pulumi_gcp/secretmanager/outputs.py +1 -20
- pulumi_gcp/secretmanager/secret.py +15 -90
- pulumi_gcp/servicenetworking/connection.py +20 -0
- pulumi_gcp/spanner/database.py +41 -0
- pulumi_gcp/spanner/instance.py +40 -0
- pulumi_gcp/storage/__init__.py +0 -1
- pulumi_gcp/storage/bucket.py +12 -0
- pulumi_gcp/storage/outputs.py +0 -63
- pulumi_gcp/workstations/workstation.py +12 -0
- pulumi_gcp/workstations/workstation_cluster.py +12 -0
- pulumi_gcp/workstations/workstation_config.py +12 -0
- {pulumi_gcp-7.21.0.dist-info → pulumi_gcp-7.21.0a1714002516.dist-info}/METADATA +1 -1
- {pulumi_gcp-7.21.0.dist-info → pulumi_gcp-7.21.0a1714002516.dist-info}/RECORD +100 -106
- pulumi_gcp/applicationintegration/auth_config.py +0 -998
- pulumi_gcp/composer/user_workloads_secret.py +0 -441
- pulumi_gcp/compute/security_policy_rule.py +0 -850
- pulumi_gcp/dataloss/prevention_discovery_config.py +0 -737
- pulumi_gcp/networkconnectivity/internal_range.py +0 -1024
- pulumi_gcp/storage/get_bucket_objects.py +0 -153
- {pulumi_gcp-7.21.0.dist-info → pulumi_gcp-7.21.0a1714002516.dist-info}/WHEEL +0 -0
- {pulumi_gcp-7.21.0.dist-info → pulumi_gcp-7.21.0a1714002516.dist-info}/top_level.txt +0 -0
@@ -20,7 +20,6 @@ class RegionTargetHttpsProxyArgs:
|
|
20
20
|
name: Optional[pulumi.Input[str]] = None,
|
21
21
|
project: Optional[pulumi.Input[str]] = None,
|
22
22
|
region: Optional[pulumi.Input[str]] = None,
|
23
|
-
server_tls_policy: Optional[pulumi.Input[str]] = None,
|
24
23
|
ssl_certificates: Optional[pulumi.Input[Sequence[pulumi.Input[str]]]] = None,
|
25
24
|
ssl_policy: Optional[pulumi.Input[str]] = None):
|
26
25
|
"""
|
@@ -46,15 +45,6 @@ class RegionTargetHttpsProxyArgs:
|
|
46
45
|
If it is not provided, the provider project is used.
|
47
46
|
:param pulumi.Input[str] region: The Region in which the created target https proxy should reside.
|
48
47
|
If it is not provided, the provider region is used.
|
49
|
-
:param pulumi.Input[str] server_tls_policy: A URL referring to a networksecurity.ServerTlsPolicy
|
50
|
-
resource that describes how the proxy should authenticate inbound
|
51
|
-
traffic. serverTlsPolicy only applies to a global TargetHttpsProxy
|
52
|
-
attached to globalForwardingRules with the loadBalancingScheme
|
53
|
-
set to INTERNAL_SELF_MANAGED or EXTERNAL or EXTERNAL_MANAGED.
|
54
|
-
For details which ServerTlsPolicy resources are accepted with
|
55
|
-
INTERNAL_SELF_MANAGED and which with EXTERNAL, EXTERNAL_MANAGED
|
56
|
-
loadBalancingScheme consult ServerTlsPolicy documentation.
|
57
|
-
If left blank, communications are not encrypted.
|
58
48
|
:param pulumi.Input[Sequence[pulumi.Input[str]]] ssl_certificates: URLs to SslCertificate resources that are used to authenticate connections between users and the load balancer.
|
59
49
|
At least one SSL certificate must be specified. Currently, you may specify up to 15 SSL certificates.
|
60
50
|
sslCertificates do not apply when the load balancing scheme is set to INTERNAL_SELF_MANAGED.
|
@@ -73,8 +63,6 @@ class RegionTargetHttpsProxyArgs:
|
|
73
63
|
pulumi.set(__self__, "project", project)
|
74
64
|
if region is not None:
|
75
65
|
pulumi.set(__self__, "region", region)
|
76
|
-
if server_tls_policy is not None:
|
77
|
-
pulumi.set(__self__, "server_tls_policy", server_tls_policy)
|
78
66
|
if ssl_certificates is not None:
|
79
67
|
pulumi.set(__self__, "ssl_certificates", ssl_certificates)
|
80
68
|
if ssl_policy is not None:
|
@@ -167,26 +155,6 @@ class RegionTargetHttpsProxyArgs:
|
|
167
155
|
def region(self, value: Optional[pulumi.Input[str]]):
|
168
156
|
pulumi.set(self, "region", value)
|
169
157
|
|
170
|
-
@property
|
171
|
-
@pulumi.getter(name="serverTlsPolicy")
|
172
|
-
def server_tls_policy(self) -> Optional[pulumi.Input[str]]:
|
173
|
-
"""
|
174
|
-
A URL referring to a networksecurity.ServerTlsPolicy
|
175
|
-
resource that describes how the proxy should authenticate inbound
|
176
|
-
traffic. serverTlsPolicy only applies to a global TargetHttpsProxy
|
177
|
-
attached to globalForwardingRules with the loadBalancingScheme
|
178
|
-
set to INTERNAL_SELF_MANAGED or EXTERNAL or EXTERNAL_MANAGED.
|
179
|
-
For details which ServerTlsPolicy resources are accepted with
|
180
|
-
INTERNAL_SELF_MANAGED and which with EXTERNAL, EXTERNAL_MANAGED
|
181
|
-
loadBalancingScheme consult ServerTlsPolicy documentation.
|
182
|
-
If left blank, communications are not encrypted.
|
183
|
-
"""
|
184
|
-
return pulumi.get(self, "server_tls_policy")
|
185
|
-
|
186
|
-
@server_tls_policy.setter
|
187
|
-
def server_tls_policy(self, value: Optional[pulumi.Input[str]]):
|
188
|
-
pulumi.set(self, "server_tls_policy", value)
|
189
|
-
|
190
158
|
@property
|
191
159
|
@pulumi.getter(name="sslCertificates")
|
192
160
|
def ssl_certificates(self) -> Optional[pulumi.Input[Sequence[pulumi.Input[str]]]]:
|
@@ -227,7 +195,6 @@ class _RegionTargetHttpsProxyState:
|
|
227
195
|
proxy_id: Optional[pulumi.Input[int]] = None,
|
228
196
|
region: Optional[pulumi.Input[str]] = None,
|
229
197
|
self_link: Optional[pulumi.Input[str]] = None,
|
230
|
-
server_tls_policy: Optional[pulumi.Input[str]] = None,
|
231
198
|
ssl_certificates: Optional[pulumi.Input[Sequence[pulumi.Input[str]]]] = None,
|
232
199
|
ssl_policy: Optional[pulumi.Input[str]] = None,
|
233
200
|
url_map: Optional[pulumi.Input[str]] = None):
|
@@ -252,15 +219,6 @@ class _RegionTargetHttpsProxyState:
|
|
252
219
|
:param pulumi.Input[str] region: The Region in which the created target https proxy should reside.
|
253
220
|
If it is not provided, the provider region is used.
|
254
221
|
:param pulumi.Input[str] self_link: The URI of the created resource.
|
255
|
-
:param pulumi.Input[str] server_tls_policy: A URL referring to a networksecurity.ServerTlsPolicy
|
256
|
-
resource that describes how the proxy should authenticate inbound
|
257
|
-
traffic. serverTlsPolicy only applies to a global TargetHttpsProxy
|
258
|
-
attached to globalForwardingRules with the loadBalancingScheme
|
259
|
-
set to INTERNAL_SELF_MANAGED or EXTERNAL or EXTERNAL_MANAGED.
|
260
|
-
For details which ServerTlsPolicy resources are accepted with
|
261
|
-
INTERNAL_SELF_MANAGED and which with EXTERNAL, EXTERNAL_MANAGED
|
262
|
-
loadBalancingScheme consult ServerTlsPolicy documentation.
|
263
|
-
If left blank, communications are not encrypted.
|
264
222
|
:param pulumi.Input[Sequence[pulumi.Input[str]]] ssl_certificates: URLs to SslCertificate resources that are used to authenticate connections between users and the load balancer.
|
265
223
|
At least one SSL certificate must be specified. Currently, you may specify up to 15 SSL certificates.
|
266
224
|
sslCertificates do not apply when the load balancing scheme is set to INTERNAL_SELF_MANAGED.
|
@@ -289,8 +247,6 @@ class _RegionTargetHttpsProxyState:
|
|
289
247
|
pulumi.set(__self__, "region", region)
|
290
248
|
if self_link is not None:
|
291
249
|
pulumi.set(__self__, "self_link", self_link)
|
292
|
-
if server_tls_policy is not None:
|
293
|
-
pulumi.set(__self__, "server_tls_policy", server_tls_policy)
|
294
250
|
if ssl_certificates is not None:
|
295
251
|
pulumi.set(__self__, "ssl_certificates", ssl_certificates)
|
296
252
|
if ssl_policy is not None:
|
@@ -405,26 +361,6 @@ class _RegionTargetHttpsProxyState:
|
|
405
361
|
def self_link(self, value: Optional[pulumi.Input[str]]):
|
406
362
|
pulumi.set(self, "self_link", value)
|
407
363
|
|
408
|
-
@property
|
409
|
-
@pulumi.getter(name="serverTlsPolicy")
|
410
|
-
def server_tls_policy(self) -> Optional[pulumi.Input[str]]:
|
411
|
-
"""
|
412
|
-
A URL referring to a networksecurity.ServerTlsPolicy
|
413
|
-
resource that describes how the proxy should authenticate inbound
|
414
|
-
traffic. serverTlsPolicy only applies to a global TargetHttpsProxy
|
415
|
-
attached to globalForwardingRules with the loadBalancingScheme
|
416
|
-
set to INTERNAL_SELF_MANAGED or EXTERNAL or EXTERNAL_MANAGED.
|
417
|
-
For details which ServerTlsPolicy resources are accepted with
|
418
|
-
INTERNAL_SELF_MANAGED and which with EXTERNAL, EXTERNAL_MANAGED
|
419
|
-
loadBalancingScheme consult ServerTlsPolicy documentation.
|
420
|
-
If left blank, communications are not encrypted.
|
421
|
-
"""
|
422
|
-
return pulumi.get(self, "server_tls_policy")
|
423
|
-
|
424
|
-
@server_tls_policy.setter
|
425
|
-
def server_tls_policy(self, value: Optional[pulumi.Input[str]]):
|
426
|
-
pulumi.set(self, "server_tls_policy", value)
|
427
|
-
|
428
364
|
@property
|
429
365
|
@pulumi.getter(name="sslCertificates")
|
430
366
|
def ssl_certificates(self) -> Optional[pulumi.Input[Sequence[pulumi.Input[str]]]]:
|
@@ -480,7 +416,6 @@ class RegionTargetHttpsProxy(pulumi.CustomResource):
|
|
480
416
|
name: Optional[pulumi.Input[str]] = None,
|
481
417
|
project: Optional[pulumi.Input[str]] = None,
|
482
418
|
region: Optional[pulumi.Input[str]] = None,
|
483
|
-
server_tls_policy: Optional[pulumi.Input[str]] = None,
|
484
419
|
ssl_certificates: Optional[pulumi.Input[Sequence[pulumi.Input[str]]]] = None,
|
485
420
|
ssl_policy: Optional[pulumi.Input[str]] = None,
|
486
421
|
url_map: Optional[pulumi.Input[str]] = None,
|
@@ -545,83 +480,6 @@ class RegionTargetHttpsProxy(pulumi.CustomResource):
|
|
545
480
|
url_map=default_region_url_map.id,
|
546
481
|
ssl_certificates=[default_region_ssl_certificate.id])
|
547
482
|
```
|
548
|
-
### Region Target Https Proxy Mtls
|
549
|
-
|
550
|
-
```python
|
551
|
-
import pulumi
|
552
|
-
import pulumi_gcp as gcp
|
553
|
-
import pulumi_std as std
|
554
|
-
|
555
|
-
project = gcp.organizations.get_project()
|
556
|
-
default_trust_config = gcp.certificatemanager.TrustConfig("default",
|
557
|
-
location="us-central1",
|
558
|
-
name="my-trust-config",
|
559
|
-
description="sample description for trust config",
|
560
|
-
trust_stores=[gcp.certificatemanager.TrustConfigTrustStoreArgs(
|
561
|
-
trust_anchors=[gcp.certificatemanager.TrustConfigTrustStoreTrustAnchorArgs(
|
562
|
-
pem_certificate=std.file(input="test-fixtures/ca_cert.pem").result,
|
563
|
-
)],
|
564
|
-
intermediate_cas=[gcp.certificatemanager.TrustConfigTrustStoreIntermediateCaArgs(
|
565
|
-
pem_certificate=std.file(input="test-fixtures/ca_cert.pem").result,
|
566
|
-
)],
|
567
|
-
)],
|
568
|
-
labels={
|
569
|
-
"foo": "bar",
|
570
|
-
})
|
571
|
-
default_server_tls_policy = gcp.networksecurity.ServerTlsPolicy("default",
|
572
|
-
location="us-central1",
|
573
|
-
name="my-tls-policy",
|
574
|
-
description="my description",
|
575
|
-
allow_open=False,
|
576
|
-
mtls_policy=gcp.networksecurity.ServerTlsPolicyMtlsPolicyArgs(
|
577
|
-
client_validation_mode="REJECT_INVALID",
|
578
|
-
client_validation_trust_config=default_trust_config.name.apply(lambda name: f"projects/{project.number}/locations/us-central1/trustConfigs/{name}"),
|
579
|
-
))
|
580
|
-
default_region_ssl_certificate = gcp.compute.RegionSslCertificate("default",
|
581
|
-
region="us-central1",
|
582
|
-
name="my-certificate",
|
583
|
-
private_key=std.file(input="path/to/private.key").result,
|
584
|
-
certificate=std.file(input="path/to/certificate.crt").result)
|
585
|
-
default_region_health_check = gcp.compute.RegionHealthCheck("default",
|
586
|
-
region="us-central1",
|
587
|
-
name="http-health-check",
|
588
|
-
check_interval_sec=1,
|
589
|
-
timeout_sec=1,
|
590
|
-
http_health_check=gcp.compute.RegionHealthCheckHttpHealthCheckArgs(
|
591
|
-
port=80,
|
592
|
-
))
|
593
|
-
default_region_backend_service = gcp.compute.RegionBackendService("default",
|
594
|
-
region="us-central1",
|
595
|
-
name="backend-service",
|
596
|
-
port_name="http",
|
597
|
-
protocol="HTTP",
|
598
|
-
timeout_sec=10,
|
599
|
-
load_balancing_scheme="INTERNAL_MANAGED",
|
600
|
-
health_checks=default_region_health_check.id)
|
601
|
-
default_region_url_map = gcp.compute.RegionUrlMap("default",
|
602
|
-
region="us-central1",
|
603
|
-
name="url-map",
|
604
|
-
description="a description",
|
605
|
-
default_service=default_region_backend_service.id,
|
606
|
-
host_rules=[gcp.compute.RegionUrlMapHostRuleArgs(
|
607
|
-
hosts=["mysite.com"],
|
608
|
-
path_matcher="allpaths",
|
609
|
-
)],
|
610
|
-
path_matchers=[gcp.compute.RegionUrlMapPathMatcherArgs(
|
611
|
-
name="allpaths",
|
612
|
-
default_service=default_region_backend_service.id,
|
613
|
-
path_rules=[gcp.compute.RegionUrlMapPathMatcherPathRuleArgs(
|
614
|
-
paths=["/*"],
|
615
|
-
service=default_region_backend_service.id,
|
616
|
-
)],
|
617
|
-
)])
|
618
|
-
default = gcp.compute.RegionTargetHttpsProxy("default",
|
619
|
-
region="us-central1",
|
620
|
-
name="test-mtls-proxy",
|
621
|
-
url_map=default_region_url_map.id,
|
622
|
-
ssl_certificates=[default_region_ssl_certificate.id],
|
623
|
-
server_tls_policy=default_server_tls_policy.id)
|
624
|
-
```
|
625
483
|
### Region Target Https Proxy Certificate Manager Certificate
|
626
484
|
|
627
485
|
```python
|
@@ -700,15 +558,6 @@ class RegionTargetHttpsProxy(pulumi.CustomResource):
|
|
700
558
|
If it is not provided, the provider project is used.
|
701
559
|
:param pulumi.Input[str] region: The Region in which the created target https proxy should reside.
|
702
560
|
If it is not provided, the provider region is used.
|
703
|
-
:param pulumi.Input[str] server_tls_policy: A URL referring to a networksecurity.ServerTlsPolicy
|
704
|
-
resource that describes how the proxy should authenticate inbound
|
705
|
-
traffic. serverTlsPolicy only applies to a global TargetHttpsProxy
|
706
|
-
attached to globalForwardingRules with the loadBalancingScheme
|
707
|
-
set to INTERNAL_SELF_MANAGED or EXTERNAL or EXTERNAL_MANAGED.
|
708
|
-
For details which ServerTlsPolicy resources are accepted with
|
709
|
-
INTERNAL_SELF_MANAGED and which with EXTERNAL, EXTERNAL_MANAGED
|
710
|
-
loadBalancingScheme consult ServerTlsPolicy documentation.
|
711
|
-
If left blank, communications are not encrypted.
|
712
561
|
:param pulumi.Input[Sequence[pulumi.Input[str]]] ssl_certificates: URLs to SslCertificate resources that are used to authenticate connections between users and the load balancer.
|
713
562
|
At least one SSL certificate must be specified. Currently, you may specify up to 15 SSL certificates.
|
714
563
|
sslCertificates do not apply when the load balancing scheme is set to INTERNAL_SELF_MANAGED.
|
@@ -787,83 +636,6 @@ class RegionTargetHttpsProxy(pulumi.CustomResource):
|
|
787
636
|
url_map=default_region_url_map.id,
|
788
637
|
ssl_certificates=[default_region_ssl_certificate.id])
|
789
638
|
```
|
790
|
-
### Region Target Https Proxy Mtls
|
791
|
-
|
792
|
-
```python
|
793
|
-
import pulumi
|
794
|
-
import pulumi_gcp as gcp
|
795
|
-
import pulumi_std as std
|
796
|
-
|
797
|
-
project = gcp.organizations.get_project()
|
798
|
-
default_trust_config = gcp.certificatemanager.TrustConfig("default",
|
799
|
-
location="us-central1",
|
800
|
-
name="my-trust-config",
|
801
|
-
description="sample description for trust config",
|
802
|
-
trust_stores=[gcp.certificatemanager.TrustConfigTrustStoreArgs(
|
803
|
-
trust_anchors=[gcp.certificatemanager.TrustConfigTrustStoreTrustAnchorArgs(
|
804
|
-
pem_certificate=std.file(input="test-fixtures/ca_cert.pem").result,
|
805
|
-
)],
|
806
|
-
intermediate_cas=[gcp.certificatemanager.TrustConfigTrustStoreIntermediateCaArgs(
|
807
|
-
pem_certificate=std.file(input="test-fixtures/ca_cert.pem").result,
|
808
|
-
)],
|
809
|
-
)],
|
810
|
-
labels={
|
811
|
-
"foo": "bar",
|
812
|
-
})
|
813
|
-
default_server_tls_policy = gcp.networksecurity.ServerTlsPolicy("default",
|
814
|
-
location="us-central1",
|
815
|
-
name="my-tls-policy",
|
816
|
-
description="my description",
|
817
|
-
allow_open=False,
|
818
|
-
mtls_policy=gcp.networksecurity.ServerTlsPolicyMtlsPolicyArgs(
|
819
|
-
client_validation_mode="REJECT_INVALID",
|
820
|
-
client_validation_trust_config=default_trust_config.name.apply(lambda name: f"projects/{project.number}/locations/us-central1/trustConfigs/{name}"),
|
821
|
-
))
|
822
|
-
default_region_ssl_certificate = gcp.compute.RegionSslCertificate("default",
|
823
|
-
region="us-central1",
|
824
|
-
name="my-certificate",
|
825
|
-
private_key=std.file(input="path/to/private.key").result,
|
826
|
-
certificate=std.file(input="path/to/certificate.crt").result)
|
827
|
-
default_region_health_check = gcp.compute.RegionHealthCheck("default",
|
828
|
-
region="us-central1",
|
829
|
-
name="http-health-check",
|
830
|
-
check_interval_sec=1,
|
831
|
-
timeout_sec=1,
|
832
|
-
http_health_check=gcp.compute.RegionHealthCheckHttpHealthCheckArgs(
|
833
|
-
port=80,
|
834
|
-
))
|
835
|
-
default_region_backend_service = gcp.compute.RegionBackendService("default",
|
836
|
-
region="us-central1",
|
837
|
-
name="backend-service",
|
838
|
-
port_name="http",
|
839
|
-
protocol="HTTP",
|
840
|
-
timeout_sec=10,
|
841
|
-
load_balancing_scheme="INTERNAL_MANAGED",
|
842
|
-
health_checks=default_region_health_check.id)
|
843
|
-
default_region_url_map = gcp.compute.RegionUrlMap("default",
|
844
|
-
region="us-central1",
|
845
|
-
name="url-map",
|
846
|
-
description="a description",
|
847
|
-
default_service=default_region_backend_service.id,
|
848
|
-
host_rules=[gcp.compute.RegionUrlMapHostRuleArgs(
|
849
|
-
hosts=["mysite.com"],
|
850
|
-
path_matcher="allpaths",
|
851
|
-
)],
|
852
|
-
path_matchers=[gcp.compute.RegionUrlMapPathMatcherArgs(
|
853
|
-
name="allpaths",
|
854
|
-
default_service=default_region_backend_service.id,
|
855
|
-
path_rules=[gcp.compute.RegionUrlMapPathMatcherPathRuleArgs(
|
856
|
-
paths=["/*"],
|
857
|
-
service=default_region_backend_service.id,
|
858
|
-
)],
|
859
|
-
)])
|
860
|
-
default = gcp.compute.RegionTargetHttpsProxy("default",
|
861
|
-
region="us-central1",
|
862
|
-
name="test-mtls-proxy",
|
863
|
-
url_map=default_region_url_map.id,
|
864
|
-
ssl_certificates=[default_region_ssl_certificate.id],
|
865
|
-
server_tls_policy=default_server_tls_policy.id)
|
866
|
-
```
|
867
639
|
### Region Target Https Proxy Certificate Manager Certificate
|
868
640
|
|
869
641
|
```python
|
@@ -944,7 +716,6 @@ class RegionTargetHttpsProxy(pulumi.CustomResource):
|
|
944
716
|
name: Optional[pulumi.Input[str]] = None,
|
945
717
|
project: Optional[pulumi.Input[str]] = None,
|
946
718
|
region: Optional[pulumi.Input[str]] = None,
|
947
|
-
server_tls_policy: Optional[pulumi.Input[str]] = None,
|
948
719
|
ssl_certificates: Optional[pulumi.Input[Sequence[pulumi.Input[str]]]] = None,
|
949
720
|
ssl_policy: Optional[pulumi.Input[str]] = None,
|
950
721
|
url_map: Optional[pulumi.Input[str]] = None,
|
@@ -962,7 +733,6 @@ class RegionTargetHttpsProxy(pulumi.CustomResource):
|
|
962
733
|
__props__.__dict__["name"] = name
|
963
734
|
__props__.__dict__["project"] = project
|
964
735
|
__props__.__dict__["region"] = region
|
965
|
-
__props__.__dict__["server_tls_policy"] = server_tls_policy
|
966
736
|
__props__.__dict__["ssl_certificates"] = ssl_certificates
|
967
737
|
__props__.__dict__["ssl_policy"] = ssl_policy
|
968
738
|
if url_map is None and not opts.urn:
|
@@ -989,7 +759,6 @@ class RegionTargetHttpsProxy(pulumi.CustomResource):
|
|
989
759
|
proxy_id: Optional[pulumi.Input[int]] = None,
|
990
760
|
region: Optional[pulumi.Input[str]] = None,
|
991
761
|
self_link: Optional[pulumi.Input[str]] = None,
|
992
|
-
server_tls_policy: Optional[pulumi.Input[str]] = None,
|
993
762
|
ssl_certificates: Optional[pulumi.Input[Sequence[pulumi.Input[str]]]] = None,
|
994
763
|
ssl_policy: Optional[pulumi.Input[str]] = None,
|
995
764
|
url_map: Optional[pulumi.Input[str]] = None) -> 'RegionTargetHttpsProxy':
|
@@ -1019,15 +788,6 @@ class RegionTargetHttpsProxy(pulumi.CustomResource):
|
|
1019
788
|
:param pulumi.Input[str] region: The Region in which the created target https proxy should reside.
|
1020
789
|
If it is not provided, the provider region is used.
|
1021
790
|
:param pulumi.Input[str] self_link: The URI of the created resource.
|
1022
|
-
:param pulumi.Input[str] server_tls_policy: A URL referring to a networksecurity.ServerTlsPolicy
|
1023
|
-
resource that describes how the proxy should authenticate inbound
|
1024
|
-
traffic. serverTlsPolicy only applies to a global TargetHttpsProxy
|
1025
|
-
attached to globalForwardingRules with the loadBalancingScheme
|
1026
|
-
set to INTERNAL_SELF_MANAGED or EXTERNAL or EXTERNAL_MANAGED.
|
1027
|
-
For details which ServerTlsPolicy resources are accepted with
|
1028
|
-
INTERNAL_SELF_MANAGED and which with EXTERNAL, EXTERNAL_MANAGED
|
1029
|
-
loadBalancingScheme consult ServerTlsPolicy documentation.
|
1030
|
-
If left blank, communications are not encrypted.
|
1031
791
|
:param pulumi.Input[Sequence[pulumi.Input[str]]] ssl_certificates: URLs to SslCertificate resources that are used to authenticate connections between users and the load balancer.
|
1032
792
|
At least one SSL certificate must be specified. Currently, you may specify up to 15 SSL certificates.
|
1033
793
|
sslCertificates do not apply when the load balancing scheme is set to INTERNAL_SELF_MANAGED.
|
@@ -1052,7 +812,6 @@ class RegionTargetHttpsProxy(pulumi.CustomResource):
|
|
1052
812
|
__props__.__dict__["proxy_id"] = proxy_id
|
1053
813
|
__props__.__dict__["region"] = region
|
1054
814
|
__props__.__dict__["self_link"] = self_link
|
1055
|
-
__props__.__dict__["server_tls_policy"] = server_tls_policy
|
1056
815
|
__props__.__dict__["ssl_certificates"] = ssl_certificates
|
1057
816
|
__props__.__dict__["ssl_policy"] = ssl_policy
|
1058
817
|
__props__.__dict__["url_map"] = url_map
|
@@ -1133,22 +892,6 @@ class RegionTargetHttpsProxy(pulumi.CustomResource):
|
|
1133
892
|
"""
|
1134
893
|
return pulumi.get(self, "self_link")
|
1135
894
|
|
1136
|
-
@property
|
1137
|
-
@pulumi.getter(name="serverTlsPolicy")
|
1138
|
-
def server_tls_policy(self) -> pulumi.Output[Optional[str]]:
|
1139
|
-
"""
|
1140
|
-
A URL referring to a networksecurity.ServerTlsPolicy
|
1141
|
-
resource that describes how the proxy should authenticate inbound
|
1142
|
-
traffic. serverTlsPolicy only applies to a global TargetHttpsProxy
|
1143
|
-
attached to globalForwardingRules with the loadBalancingScheme
|
1144
|
-
set to INTERNAL_SELF_MANAGED or EXTERNAL or EXTERNAL_MANAGED.
|
1145
|
-
For details which ServerTlsPolicy resources are accepted with
|
1146
|
-
INTERNAL_SELF_MANAGED and which with EXTERNAL, EXTERNAL_MANAGED
|
1147
|
-
loadBalancingScheme consult ServerTlsPolicy documentation.
|
1148
|
-
If left blank, communications are not encrypted.
|
1149
|
-
"""
|
1150
|
-
return pulumi.get(self, "server_tls_policy")
|
1151
|
-
|
1152
895
|
@property
|
1153
896
|
@pulumi.getter(name="sslCertificates")
|
1154
897
|
def ssl_certificates(self) -> pulumi.Output[Optional[Sequence[str]]]:
|