pulumi-gcp 7.21.0__py3-none-any.whl → 7.21.0a1714002516__py3-none-any.whl

pulumi_gcp/compute/global_forwarding_rule.py

@@ -1186,6 +1186,147 @@ class GlobalForwardingRule(pulumi.CustomResource):
 
         ## Example Usage
 
+        ### External Ssl Proxy Lb Mig Backend
+
+        ```python
+        import pulumi
+        import pulumi_gcp as gcp
+        import pulumi_tls as tls
+
+        # External SSL proxy load balancer with managed instance group backend
+        # VPC
+        default = gcp.compute.Network("default",
+            name="ssl-proxy-xlb-network",
+            auto_create_subnetworks=False)
+        # backend subnet
+        default_subnetwork = gcp.compute.Subnetwork("default",
+            name="ssl-proxy-xlb-subnet",
+            ip_cidr_range="10.0.1.0/24",
+            region="us-central1",
+            network=default.id)
+        # reserved IP address
+        default_global_address = gcp.compute.GlobalAddress("default", name="ssl-proxy-xlb-ip")
+        # Self-signed regional SSL certificate for testing
+        default_private_key = tls.PrivateKey("default",
+            algorithm="RSA",
+            rsa_bits=2048)
+        default_self_signed_cert = tls.SelfSignedCert("default",
+            key_algorithm=default_private_key.algorithm,
+            private_key_pem=default_private_key.private_key_pem,
+            validity_period_hours=12,
+            early_renewal_hours=3,
+            allowed_uses=[
+                "key_encipherment",
+                "digital_signature",
+                "server_auth",
+            ],
+            dns_names=["example.com"],
+            subject=tls.SelfSignedCertSubjectArgs(
+                common_name="example.com",
+                organization="ACME Examples, Inc",
+            ))
+        default_ssl_certificate = gcp.compute.SSLCertificate("default",
+            name="default-cert",
+            private_key=default_private_key.private_key_pem,
+            certificate=default_self_signed_cert.cert_pem)
+        default_health_check = gcp.compute.HealthCheck("default",
+            name="ssl-proxy-health-check",
+            timeout_sec=1,
+            check_interval_sec=1,
+            tcp_health_check=gcp.compute.HealthCheckTcpHealthCheckArgs(
+                port=443,
+            ))
+        # instance template
+        default_instance_template = gcp.compute.InstanceTemplate("default",
+            network_interfaces=[gcp.compute.InstanceTemplateNetworkInterfaceArgs(
+                access_configs=[gcp.compute.InstanceTemplateNetworkInterfaceAccessConfigArgs()],
+                network=default.id,
+                subnetwork=default_subnetwork.id,
+            )],
+            name="ssl-proxy-xlb-mig-template",
+            machine_type="e2-small",
+            tags=["allow-health-check"],
+            disks=[gcp.compute.InstanceTemplateDiskArgs(
+                source_image="debian-cloud/debian-10",
+                auto_delete=True,
+                boot=True,
+            )],
+            metadata={
+                "startup-script": \"\"\"#! /bin/bash
+        set -euo pipefail
+        export DEBIAN_FRONTEND=noninteractive
+        sudo apt-get update
+        sudo apt-get install  -y apache2 jq
+        sudo a2ensite default-ssl
+        sudo a2enmod ssl
+        sudo service apache2 restart
+        NAME=$(curl -H "Metadata-Flavor: Google" "http://metadata.google.internal/computeMetadata/v1/instance/hostname")
+        IP=$(curl -H "Metadata-Flavor: Google" "http://metadata.google.internal/computeMetadata/v1/instance/network-interfaces/0/ip")
+        METADATA=$(curl -f -H "Metadata-Flavor: Google" "http://metadata.google.internal/computeMetadata/v1/instance/attributes/?recursive=True" | jq 'del(.["startup-script"])')
+        cat <<EOF > /var/www/html/index.html
+        <h1>SSL Load Balancer</h1>
+        <pre>
+        Name: $NAME
+        IP: $IP
+        Metadata: $METADATA
+        </pre>
+        EOF
+        \"\"\",
+            })
+        # MIG
+        default_instance_group_manager = gcp.compute.InstanceGroupManager("default",
+            name="ssl-proxy-xlb-mig1",
+            zone="us-central1-c",
+            named_ports=[gcp.compute.InstanceGroupManagerNamedPortArgs(
+                name="tcp",
+                port=443,
+            )],
+            versions=[gcp.compute.InstanceGroupManagerVersionArgs(
+                instance_template=default_instance_template.id,
+                name="primary",
+            )],
+            base_instance_name="vm",
+            target_size=2)
+        # backend service
+        default_backend_service = gcp.compute.BackendService("default",
+            name="ssl-proxy-xlb-backend-service",
+            protocol="SSL",
+            port_name="tcp",
+            load_balancing_scheme="EXTERNAL",
+            timeout_sec=10,
+            health_checks=default_health_check.id,
+            backends=[gcp.compute.BackendServiceBackendArgs(
+                group=default_instance_group_manager.instance_group,
+                balancing_mode="UTILIZATION",
+                max_utilization=1,
+                capacity_scaler=1,
+            )])
+        default_target_ssl_proxy = gcp.compute.TargetSSLProxy("default",
+            name="test-proxy",
+            backend_service=default_backend_service.id,
+            ssl_certificates=[default_ssl_certificate.id])
+        # forwarding rule
+        default_global_forwarding_rule = gcp.compute.GlobalForwardingRule("default",
+            name="ssl-proxy-xlb-forwarding-rule",
+            ip_protocol="TCP",
+            load_balancing_scheme="EXTERNAL",
+            port_range="443",
+            target=default_target_ssl_proxy.id,
+            ip_address=default_global_address.id)
+        # allow access from health check ranges
+        default_firewall = gcp.compute.Firewall("default",
+            name="ssl-proxy-xlb-fw-allow-hc",
+            direction="INGRESS",
+            network=default.id,
+            source_ranges=[
+                "130.211.0.0/22",
+                "35.191.0.0/16",
+            ],
+            allows=[gcp.compute.FirewallAllowArgs(
+                protocol="tcp",
+            )],
+            target_tags=["allow-health-check"])
+        ```
         ### External Tcp Proxy Lb Mig Backend
 
         ```python
@@ -2085,6 +2226,147 @@ class GlobalForwardingRule(pulumi.CustomResource):
 
         ## Example Usage
 
+        ### External Ssl Proxy Lb Mig Backend
+
+        ```python
+        import pulumi
+        import pulumi_gcp as gcp
+        import pulumi_tls as tls
+
+        # External SSL proxy load balancer with managed instance group backend
+        # VPC
+        default = gcp.compute.Network("default",
+            name="ssl-proxy-xlb-network",
+            auto_create_subnetworks=False)
+        # backend subnet
+        default_subnetwork = gcp.compute.Subnetwork("default",
+            name="ssl-proxy-xlb-subnet",
+            ip_cidr_range="10.0.1.0/24",
+            region="us-central1",
+            network=default.id)
+        # reserved IP address
+        default_global_address = gcp.compute.GlobalAddress("default", name="ssl-proxy-xlb-ip")
+        # Self-signed regional SSL certificate for testing
+        default_private_key = tls.PrivateKey("default",
+            algorithm="RSA",
+            rsa_bits=2048)
+        default_self_signed_cert = tls.SelfSignedCert("default",
+            key_algorithm=default_private_key.algorithm,
+            private_key_pem=default_private_key.private_key_pem,
+            validity_period_hours=12,
+            early_renewal_hours=3,
+            allowed_uses=[
+                "key_encipherment",
+                "digital_signature",
+                "server_auth",
+            ],
+            dns_names=["example.com"],
+            subject=tls.SelfSignedCertSubjectArgs(
+                common_name="example.com",
+                organization="ACME Examples, Inc",
+            ))
+        default_ssl_certificate = gcp.compute.SSLCertificate("default",
+            name="default-cert",
+            private_key=default_private_key.private_key_pem,
+            certificate=default_self_signed_cert.cert_pem)
+        default_health_check = gcp.compute.HealthCheck("default",
+            name="ssl-proxy-health-check",
+            timeout_sec=1,
+            check_interval_sec=1,
+            tcp_health_check=gcp.compute.HealthCheckTcpHealthCheckArgs(
+                port=443,
+            ))
+        # instance template
+        default_instance_template = gcp.compute.InstanceTemplate("default",
+            network_interfaces=[gcp.compute.InstanceTemplateNetworkInterfaceArgs(
+                access_configs=[gcp.compute.InstanceTemplateNetworkInterfaceAccessConfigArgs()],
+                network=default.id,
+                subnetwork=default_subnetwork.id,
+            )],
+            name="ssl-proxy-xlb-mig-template",
+            machine_type="e2-small",
+            tags=["allow-health-check"],
+            disks=[gcp.compute.InstanceTemplateDiskArgs(
+                source_image="debian-cloud/debian-10",
+                auto_delete=True,
+                boot=True,
+            )],
+            metadata={
+                "startup-script": \"\"\"#! /bin/bash
+        set -euo pipefail
+        export DEBIAN_FRONTEND=noninteractive
+        sudo apt-get update
+        sudo apt-get install  -y apache2 jq
+        sudo a2ensite default-ssl
+        sudo a2enmod ssl
+        sudo service apache2 restart
+        NAME=$(curl -H "Metadata-Flavor: Google" "http://metadata.google.internal/computeMetadata/v1/instance/hostname")
+        IP=$(curl -H "Metadata-Flavor: Google" "http://metadata.google.internal/computeMetadata/v1/instance/network-interfaces/0/ip")
+        METADATA=$(curl -f -H "Metadata-Flavor: Google" "http://metadata.google.internal/computeMetadata/v1/instance/attributes/?recursive=True" | jq 'del(.["startup-script"])')
+        cat <<EOF > /var/www/html/index.html
+        <h1>SSL Load Balancer</h1>
+        <pre>
+        Name: $NAME
+        IP: $IP
+        Metadata: $METADATA
+        </pre>
+        EOF
+        \"\"\",
+            })
+        # MIG
+        default_instance_group_manager = gcp.compute.InstanceGroupManager("default",
+            name="ssl-proxy-xlb-mig1",
+            zone="us-central1-c",
+            named_ports=[gcp.compute.InstanceGroupManagerNamedPortArgs(
+                name="tcp",
+                port=443,
+            )],
+            versions=[gcp.compute.InstanceGroupManagerVersionArgs(
+                instance_template=default_instance_template.id,
+                name="primary",
+            )],
+            base_instance_name="vm",
+            target_size=2)
+        # backend service
+        default_backend_service = gcp.compute.BackendService("default",
+            name="ssl-proxy-xlb-backend-service",
+            protocol="SSL",
+            port_name="tcp",
+            load_balancing_scheme="EXTERNAL",
+            timeout_sec=10,
+            health_checks=default_health_check.id,
+            backends=[gcp.compute.BackendServiceBackendArgs(
+                group=default_instance_group_manager.instance_group,
+                balancing_mode="UTILIZATION",
+                max_utilization=1,
+                capacity_scaler=1,
+            )])
+        default_target_ssl_proxy = gcp.compute.TargetSSLProxy("default",
+            name="test-proxy",
+            backend_service=default_backend_service.id,
+            ssl_certificates=[default_ssl_certificate.id])
+        # forwarding rule
+        default_global_forwarding_rule = gcp.compute.GlobalForwardingRule("default",
+            name="ssl-proxy-xlb-forwarding-rule",
+            ip_protocol="TCP",
+            load_balancing_scheme="EXTERNAL",
+            port_range="443",
+            target=default_target_ssl_proxy.id,
+            ip_address=default_global_address.id)
+        # allow access from health check ranges
+        default_firewall = gcp.compute.Firewall("default",
+            name="ssl-proxy-xlb-fw-allow-hc",
+            direction="INGRESS",
+            network=default.id,
+            source_ranges=[
+                "130.211.0.0/22",
+                "35.191.0.0/16",
+            ],
+            allows=[gcp.compute.FirewallAllowArgs(
+                protocol="tcp",
+            )],
+            target_tags=["allow-health-check"])
+        ```
         ### External Tcp Proxy Lb Mig Backend
 
         ```python

pulumi_gcp/compute/instance_from_machine_image.py

@@ -51,6 +51,8 @@ class InstanceFromMachineImageArgs:
                
                - - -
         :param pulumi.Input['InstanceFromMachineImageAdvancedMachineFeaturesArgs'] advanced_machine_features: Controls for advanced machine-related behavior features.
+        :param pulumi.Input[bool] allow_stopping_for_update: If true, allows Terraform to stop the instance to update its properties. If you try to update a property that requires
+               stopping the instance without setting this field, the update will fail.
         :param pulumi.Input[bool] can_ip_forward: Whether sending and receiving of packets with non-matching source or destination IPs is allowed.
         :param pulumi.Input['InstanceFromMachineImageConfidentialInstanceConfigArgs'] confidential_instance_config: The Confidential VM config being used by the instance. on_host_maintenance has to be set to TERMINATE or this will fail
                to create.
@@ -60,8 +62,8 @@ class InstanceFromMachineImageArgs:
         :param pulumi.Input[bool] enable_display: Whether the instance has virtual displays enabled.
         :param pulumi.Input[Sequence[pulumi.Input['InstanceFromMachineImageGuestAcceleratorArgs']]] guest_accelerators: List of the type and count of accelerator cards attached to the instance.
         :param pulumi.Input[str] hostname: A custom hostname for the instance. Must be a fully qualified DNS name and RFC-1035-valid. Valid format is a series of
-               labels 1-63 characters long matching the regular expression a-z, concatenated with periods. The entire hostname must not
-               exceed 253 characters. Changing this forces a new resource to be created.
+               labels 1-63 characters long matching the regular expression [a-z]([-a-z0-9]*[a-z0-9]), concatenated with periods. The
+               entire hostname must not exceed 253 characters. Changing this forces a new resource to be created.
         :param pulumi.Input[Mapping[str, pulumi.Input[str]]] labels: A set of key/value label pairs assigned to the instance. **Note**: This field is non-authoritative, and will only manage
                the labels present in your configuration. Please refer to the field 'effective_labels' for all of the labels present on
                the resource.
@@ -178,6 +180,10 @@ class InstanceFromMachineImageArgs:
     @property
     @pulumi.getter(name="allowStoppingForUpdate")
     def allow_stopping_for_update(self) -> Optional[pulumi.Input[bool]]:
+        """
+        If true, allows Terraform to stop the instance to update its properties. If you try to update a property that requires
+        stopping the instance without setting this field, the update will fail.
+        """
         return pulumi.get(self, "allow_stopping_for_update")
 
     @allow_stopping_for_update.setter
@@ -274,8 +280,8 @@ class InstanceFromMachineImageArgs:
     def hostname(self) -> Optional[pulumi.Input[str]]:
         """
         A custom hostname for the instance. Must be a fully qualified DNS name and RFC-1035-valid. Valid format is a series of
-        labels 1-63 characters long matching the regular expression a-z, concatenated with periods. The entire hostname must not
-        exceed 253 characters. Changing this forces a new resource to be created.
+        labels 1-63 characters long matching the regular expression [a-z]([-a-z0-9]*[a-z0-9]), concatenated with periods. The
+        entire hostname must not exceed 253 characters. Changing this forces a new resource to be created.
         """
         return pulumi.get(self, "hostname")
 
@@ -546,6 +552,8 @@ class _InstanceFromMachineImageState:
         """
         Input properties used for looking up and filtering InstanceFromMachineImage resources.
         :param pulumi.Input['InstanceFromMachineImageAdvancedMachineFeaturesArgs'] advanced_machine_features: Controls for advanced machine-related behavior features.
+        :param pulumi.Input[bool] allow_stopping_for_update: If true, allows Terraform to stop the instance to update its properties. If you try to update a property that requires
+               stopping the instance without setting this field, the update will fail.
         :param pulumi.Input[Sequence[pulumi.Input['InstanceFromMachineImageAttachedDiskArgs']]] attached_disks: List of disks attached to the instance
         :param pulumi.Input[Sequence[pulumi.Input['InstanceFromMachineImageBootDiskArgs']]] boot_disks: The boot disk for the instance.
         :param pulumi.Input[bool] can_ip_forward: Whether sending and receiving of packets with non-matching source or destination IPs is allowed.
@@ -558,11 +566,13 @@ class _InstanceFromMachineImageState:
         :param pulumi.Input[bool] deletion_protection: Whether deletion protection is enabled on this instance.
         :param pulumi.Input[str] description: A brief description of the resource.
         :param pulumi.Input[str] desired_status: Desired status of the instance. Either "RUNNING" or "TERMINATED".
+        :param pulumi.Input[Mapping[str, pulumi.Input[str]]] effective_labels: All of labels (key/value pairs) present on the resource in GCP, including the labels configured through Terraform, other
+               clients and services.
         :param pulumi.Input[bool] enable_display: Whether the instance has virtual displays enabled.
         :param pulumi.Input[Sequence[pulumi.Input['InstanceFromMachineImageGuestAcceleratorArgs']]] guest_accelerators: List of the type and count of accelerator cards attached to the instance.
         :param pulumi.Input[str] hostname: A custom hostname for the instance. Must be a fully qualified DNS name and RFC-1035-valid. Valid format is a series of
-               labels 1-63 characters long matching the regular expression a-z, concatenated with periods. The entire hostname must not
-               exceed 253 characters. Changing this forces a new resource to be created.
+               labels 1-63 characters long matching the regular expression [a-z]([-a-z0-9]*[a-z0-9]), concatenated with periods. The
+               entire hostname must not exceed 253 characters. Changing this forces a new resource to be created.
         :param pulumi.Input[str] instance_id: The server-assigned unique identifier of this instance.
         :param pulumi.Input[str] label_fingerprint: The unique fingerprint of the labels.
         :param pulumi.Input[Mapping[str, pulumi.Input[str]]] labels: A set of key/value label pairs assigned to the instance. **Note**: This field is non-authoritative, and will only manage
@@ -700,6 +710,10 @@ class _InstanceFromMachineImageState:
     @property
     @pulumi.getter(name="allowStoppingForUpdate")
     def allow_stopping_for_update(self) -> Optional[pulumi.Input[bool]]:
+        """
+        If true, allows Terraform to stop the instance to update its properties. If you try to update a property that requires
+        stopping the instance without setting this field, the update will fail.
+        """
         return pulumi.get(self, "allow_stopping_for_update")
 
     @allow_stopping_for_update.setter
@@ -820,6 +834,10 @@ class _InstanceFromMachineImageState:
     @property
     @pulumi.getter(name="effectiveLabels")
     def effective_labels(self) -> Optional[pulumi.Input[Mapping[str, pulumi.Input[str]]]]:
+        """
+        All of labels (key/value pairs) present on the resource in GCP, including the labels configured through Terraform, other
+        clients and services.
+        """
         return pulumi.get(self, "effective_labels")
 
     @effective_labels.setter
@@ -855,8 +873,8 @@ class _InstanceFromMachineImageState:
     def hostname(self) -> Optional[pulumi.Input[str]]:
         """
         A custom hostname for the instance. Must be a fully qualified DNS name and RFC-1035-valid. Valid format is a series of
-        labels 1-63 characters long matching the regular expression a-z, concatenated with periods. The entire hostname must not
-        exceed 253 characters. Changing this forces a new resource to be created.
+        labels 1-63 characters long matching the regular expression [a-z]([-a-z0-9]*[a-z0-9]), concatenated with periods. The
+        entire hostname must not exceed 253 characters. Changing this forces a new resource to be created.
         """
         return pulumi.get(self, "hostname")
 
@@ -1243,6 +1261,8 @@ class InstanceFromMachineImage(pulumi.CustomResource):
         :param str resource_name: The name of the resource.
         :param pulumi.ResourceOptions opts: Options for the resource.
         :param pulumi.Input[pulumi.InputType['InstanceFromMachineImageAdvancedMachineFeaturesArgs']] advanced_machine_features: Controls for advanced machine-related behavior features.
+        :param pulumi.Input[bool] allow_stopping_for_update: If true, allows Terraform to stop the instance to update its properties. If you try to update a property that requires
+               stopping the instance without setting this field, the update will fail.
         :param pulumi.Input[bool] can_ip_forward: Whether sending and receiving of packets with non-matching source or destination IPs is allowed.
         :param pulumi.Input[pulumi.InputType['InstanceFromMachineImageConfidentialInstanceConfigArgs']] confidential_instance_config: The Confidential VM config being used by the instance. on_host_maintenance has to be set to TERMINATE or this will fail
                to create.
@@ -1252,8 +1272,8 @@ class InstanceFromMachineImage(pulumi.CustomResource):
         :param pulumi.Input[bool] enable_display: Whether the instance has virtual displays enabled.
         :param pulumi.Input[Sequence[pulumi.Input[pulumi.InputType['InstanceFromMachineImageGuestAcceleratorArgs']]]] guest_accelerators: List of the type and count of accelerator cards attached to the instance.
         :param pulumi.Input[str] hostname: A custom hostname for the instance. Must be a fully qualified DNS name and RFC-1035-valid. Valid format is a series of
-               labels 1-63 characters long matching the regular expression a-z, concatenated with periods. The entire hostname must not
-               exceed 253 characters. Changing this forces a new resource to be created.
+               labels 1-63 characters long matching the regular expression [a-z]([-a-z0-9]*[a-z0-9]), concatenated with periods. The
+               entire hostname must not exceed 253 characters. Changing this forces a new resource to be created.
         :param pulumi.Input[Mapping[str, pulumi.Input[str]]] labels: A set of key/value label pairs assigned to the instance. **Note**: This field is non-authoritative, and will only manage
                the labels present in your configuration. Please refer to the field 'effective_labels' for all of the labels present on
                the resource.
@@ -1474,6 +1494,8 @@ class InstanceFromMachineImage(pulumi.CustomResource):
         :param pulumi.Input[str] id: The unique provider ID of the resource to lookup.
         :param pulumi.ResourceOptions opts: Options for the resource.
         :param pulumi.Input[pulumi.InputType['InstanceFromMachineImageAdvancedMachineFeaturesArgs']] advanced_machine_features: Controls for advanced machine-related behavior features.
+        :param pulumi.Input[bool] allow_stopping_for_update: If true, allows Terraform to stop the instance to update its properties. If you try to update a property that requires
+               stopping the instance without setting this field, the update will fail.
         :param pulumi.Input[Sequence[pulumi.Input[pulumi.InputType['InstanceFromMachineImageAttachedDiskArgs']]]] attached_disks: List of disks attached to the instance
         :param pulumi.Input[Sequence[pulumi.Input[pulumi.InputType['InstanceFromMachineImageBootDiskArgs']]]] boot_disks: The boot disk for the instance.
         :param pulumi.Input[bool] can_ip_forward: Whether sending and receiving of packets with non-matching source or destination IPs is allowed.
@@ -1486,11 +1508,13 @@ class InstanceFromMachineImage(pulumi.CustomResource):
         :param pulumi.Input[bool] deletion_protection: Whether deletion protection is enabled on this instance.
         :param pulumi.Input[str] description: A brief description of the resource.
         :param pulumi.Input[str] desired_status: Desired status of the instance. Either "RUNNING" or "TERMINATED".
+        :param pulumi.Input[Mapping[str, pulumi.Input[str]]] effective_labels: All of labels (key/value pairs) present on the resource in GCP, including the labels configured through Terraform, other
+               clients and services.
         :param pulumi.Input[bool] enable_display: Whether the instance has virtual displays enabled.
         :param pulumi.Input[Sequence[pulumi.Input[pulumi.InputType['InstanceFromMachineImageGuestAcceleratorArgs']]]] guest_accelerators: List of the type and count of accelerator cards attached to the instance.
         :param pulumi.Input[str] hostname: A custom hostname for the instance. Must be a fully qualified DNS name and RFC-1035-valid. Valid format is a series of
-               labels 1-63 characters long matching the regular expression a-z, concatenated with periods. The entire hostname must not
-               exceed 253 characters. Changing this forces a new resource to be created.
+               labels 1-63 characters long matching the regular expression [a-z]([-a-z0-9]*[a-z0-9]), concatenated with periods. The
+               entire hostname must not exceed 253 characters. Changing this forces a new resource to be created.
         :param pulumi.Input[str] instance_id: The server-assigned unique identifier of this instance.
         :param pulumi.Input[str] label_fingerprint: The unique fingerprint of the labels.
         :param pulumi.Input[Mapping[str, pulumi.Input[str]]] labels: A set of key/value label pairs assigned to the instance. **Note**: This field is non-authoritative, and will only manage
@@ -1589,6 +1613,10 @@ class InstanceFromMachineImage(pulumi.CustomResource):
     @property
     @pulumi.getter(name="allowStoppingForUpdate")
     def allow_stopping_for_update(self) -> pulumi.Output[bool]:
+        """
+        If true, allows Terraform to stop the instance to update its properties. If you try to update a property that requires
+        stopping the instance without setting this field, the update will fail.
+        """
         return pulumi.get(self, "allow_stopping_for_update")
 
     @property
@@ -1669,6 +1697,10 @@ class InstanceFromMachineImage(pulumi.CustomResource):
     @property
     @pulumi.getter(name="effectiveLabels")
     def effective_labels(self) -> pulumi.Output[Mapping[str, str]]:
+        """
+        All of labels (key/value pairs) present on the resource in GCP, including the labels configured through Terraform, other
+        clients and services.
+        """
         return pulumi.get(self, "effective_labels")
 
     @property
@@ -1692,8 +1724,8 @@ class InstanceFromMachineImage(pulumi.CustomResource):
     def hostname(self) -> pulumi.Output[str]:
         """
         A custom hostname for the instance. Must be a fully qualified DNS name and RFC-1035-valid. Valid format is a series of
-        labels 1-63 characters long matching the regular expression a-z, concatenated with periods. The entire hostname must not
-        exceed 253 characters. Changing this forces a new resource to be created.
+        labels 1-63 characters long matching the regular expression [a-z]([-a-z0-9]*[a-z0-9]), concatenated with periods. The
+        entire hostname must not exceed 253 characters. Changing this forces a new resource to be created.
         """
         return pulumi.get(self, "hostname")
 

pulumi_gcp/compute/instance_from_template.py

@@ -55,6 +55,8 @@ class InstanceFromTemplateArgs:
                
                - - -
         :param pulumi.Input['InstanceFromTemplateAdvancedMachineFeaturesArgs'] advanced_machine_features: Controls for advanced machine-related behavior features.
+        :param pulumi.Input[bool] allow_stopping_for_update: If true, allows Terraform to stop the instance to update its properties. If you try to update a property that requires
+               stopping the instance without setting this field, the update will fail.
         :param pulumi.Input[Sequence[pulumi.Input['InstanceFromTemplateAttachedDiskArgs']]] attached_disks: List of disks attached to the instance
         :param pulumi.Input['InstanceFromTemplateBootDiskArgs'] boot_disk: The boot disk for the instance.
         :param pulumi.Input[bool] can_ip_forward: Whether sending and receiving of packets with non-matching source or destination IPs is allowed.
@@ -66,8 +68,8 @@ class InstanceFromTemplateArgs:
         :param pulumi.Input[bool] enable_display: Whether the instance has virtual displays enabled.
         :param pulumi.Input[Sequence[pulumi.Input['InstanceFromTemplateGuestAcceleratorArgs']]] guest_accelerators: List of the type and count of accelerator cards attached to the instance.
         :param pulumi.Input[str] hostname: A custom hostname for the instance. Must be a fully qualified DNS name and RFC-1035-valid. Valid format is a series of
-               labels 1-63 characters long matching the regular expression a-z, concatenated with periods. The entire hostname must not
-               exceed 253 characters. Changing this forces a new resource to be created.
+               labels 1-63 characters long matching the regular expression [a-z]([-a-z0-9]*[a-z0-9]), concatenated with periods. The
+               entire hostname must not exceed 253 characters. Changing this forces a new resource to be created.
         :param pulumi.Input[Mapping[str, pulumi.Input[str]]] labels: A set of key/value label pairs assigned to the instance. **Note**: This field is non-authoritative, and will only manage
                the labels present in your configuration. Please refer to the field 'effective_labels' for all of the labels present on
                the resource.
@@ -190,6 +192,10 @@ class InstanceFromTemplateArgs:
     @property
     @pulumi.getter(name="allowStoppingForUpdate")
     def allow_stopping_for_update(self) -> Optional[pulumi.Input[bool]]:
+        """
+        If true, allows Terraform to stop the instance to update its properties. If you try to update a property that requires
+        stopping the instance without setting this field, the update will fail.
+        """
         return pulumi.get(self, "allow_stopping_for_update")
 
     @allow_stopping_for_update.setter
@@ -310,8 +316,8 @@ class InstanceFromTemplateArgs:
     def hostname(self) -> Optional[pulumi.Input[str]]:
         """
         A custom hostname for the instance. Must be a fully qualified DNS name and RFC-1035-valid. Valid format is a series of
-        labels 1-63 characters long matching the regular expression a-z, concatenated with periods. The entire hostname must not
-        exceed 253 characters. Changing this forces a new resource to be created.
+        labels 1-63 characters long matching the regular expression [a-z]([-a-z0-9]*[a-z0-9]), concatenated with periods. The
+        entire hostname must not exceed 253 characters. Changing this forces a new resource to be created.
         """
         return pulumi.get(self, "hostname")
 
@@ -592,6 +598,8 @@ class _InstanceFromTemplateState:
         """
         Input properties used for looking up and filtering InstanceFromTemplate resources.
         :param pulumi.Input['InstanceFromTemplateAdvancedMachineFeaturesArgs'] advanced_machine_features: Controls for advanced machine-related behavior features.
+        :param pulumi.Input[bool] allow_stopping_for_update: If true, allows Terraform to stop the instance to update its properties. If you try to update a property that requires
+               stopping the instance without setting this field, the update will fail.
         :param pulumi.Input[Sequence[pulumi.Input['InstanceFromTemplateAttachedDiskArgs']]] attached_disks: List of disks attached to the instance
         :param pulumi.Input['InstanceFromTemplateBootDiskArgs'] boot_disk: The boot disk for the instance.
         :param pulumi.Input[bool] can_ip_forward: Whether sending and receiving of packets with non-matching source or destination IPs is allowed.
@@ -604,11 +612,13 @@ class _InstanceFromTemplateState:
         :param pulumi.Input[bool] deletion_protection: Whether deletion protection is enabled on this instance.
         :param pulumi.Input[str] description: A brief description of the resource.
         :param pulumi.Input[str] desired_status: Desired status of the instance. Either "RUNNING" or "TERMINATED".
+        :param pulumi.Input[Mapping[str, pulumi.Input[str]]] effective_labels: All of labels (key/value pairs) present on the resource in GCP, including the labels configured through Terraform, other
+               clients and services.
         :param pulumi.Input[bool] enable_display: Whether the instance has virtual displays enabled.
         :param pulumi.Input[Sequence[pulumi.Input['InstanceFromTemplateGuestAcceleratorArgs']]] guest_accelerators: List of the type and count of accelerator cards attached to the instance.
         :param pulumi.Input[str] hostname: A custom hostname for the instance. Must be a fully qualified DNS name and RFC-1035-valid. Valid format is a series of
-               labels 1-63 characters long matching the regular expression a-z, concatenated with periods. The entire hostname must not
-               exceed 253 characters. Changing this forces a new resource to be created.
+               labels 1-63 characters long matching the regular expression [a-z]([-a-z0-9]*[a-z0-9]), concatenated with periods. The
+               entire hostname must not exceed 253 characters. Changing this forces a new resource to be created.
         :param pulumi.Input[str] instance_id: The server-assigned unique identifier of this instance.
         :param pulumi.Input[str] label_fingerprint: The unique fingerprint of the labels.
         :param pulumi.Input[Mapping[str, pulumi.Input[str]]] labels: A set of key/value label pairs assigned to the instance. **Note**: This field is non-authoritative, and will only manage
@@ -745,6 +755,10 @@ class _InstanceFromTemplateState:
     @property
     @pulumi.getter(name="allowStoppingForUpdate")
     def allow_stopping_for_update(self) -> Optional[pulumi.Input[bool]]:
+        """
+        If true, allows Terraform to stop the instance to update its properties. If you try to update a property that requires
+        stopping the instance without setting this field, the update will fail.
+        """
         return pulumi.get(self, "allow_stopping_for_update")
 
     @allow_stopping_for_update.setter
@@ -865,6 +879,10 @@ class _InstanceFromTemplateState:
     @property
     @pulumi.getter(name="effectiveLabels")
     def effective_labels(self) -> Optional[pulumi.Input[Mapping[str, pulumi.Input[str]]]]:
+        """
+        All of labels (key/value pairs) present on the resource in GCP, including the labels configured through Terraform, other
+        clients and services.
+        """
         return pulumi.get(self, "effective_labels")
 
     @effective_labels.setter
@@ -900,8 +918,8 @@ class _InstanceFromTemplateState:
     def hostname(self) -> Optional[pulumi.Input[str]]:
         """
         A custom hostname for the instance. Must be a fully qualified DNS name and RFC-1035-valid. Valid format is a series of
-        labels 1-63 characters long matching the regular expression a-z, concatenated with periods. The entire hostname must not
-        exceed 253 characters. Changing this forces a new resource to be created.
+        labels 1-63 characters long matching the regular expression [a-z]([-a-z0-9]*[a-z0-9]), concatenated with periods. The
+        entire hostname must not exceed 253 characters. Changing this forces a new resource to be created.
         """
         return pulumi.get(self, "hostname")
 
@@ -1310,6 +1328,8 @@ class InstanceFromTemplate(pulumi.CustomResource):
         :param str resource_name: The name of the resource.
         :param pulumi.ResourceOptions opts: Options for the resource.
         :param pulumi.Input[pulumi.InputType['InstanceFromTemplateAdvancedMachineFeaturesArgs']] advanced_machine_features: Controls for advanced machine-related behavior features.
+        :param pulumi.Input[bool] allow_stopping_for_update: If true, allows Terraform to stop the instance to update its properties. If you try to update a property that requires
+               stopping the instance without setting this field, the update will fail.
         :param pulumi.Input[Sequence[pulumi.Input[pulumi.InputType['InstanceFromTemplateAttachedDiskArgs']]]] attached_disks: List of disks attached to the instance
         :param pulumi.Input[pulumi.InputType['InstanceFromTemplateBootDiskArgs']] boot_disk: The boot disk for the instance.
         :param pulumi.Input[bool] can_ip_forward: Whether sending and receiving of packets with non-matching source or destination IPs is allowed.
@@ -1321,8 +1341,8 @@ class InstanceFromTemplate(pulumi.CustomResource):
         :param pulumi.Input[bool] enable_display: Whether the instance has virtual displays enabled.
         :param pulumi.Input[Sequence[pulumi.Input[pulumi.InputType['InstanceFromTemplateGuestAcceleratorArgs']]]] guest_accelerators: List of the type and count of accelerator cards attached to the instance.
         :param pulumi.Input[str] hostname: A custom hostname for the instance. Must be a fully qualified DNS name and RFC-1035-valid. Valid format is a series of
-               labels 1-63 characters long matching the regular expression a-z, concatenated with periods. The entire hostname must not
-               exceed 253 characters. Changing this forces a new resource to be created.
+               labels 1-63 characters long matching the regular expression [a-z]([-a-z0-9]*[a-z0-9]), concatenated with periods. The
+               entire hostname must not exceed 253 characters. Changing this forces a new resource to be created.
         :param pulumi.Input[Mapping[str, pulumi.Input[str]]] labels: A set of key/value label pairs assigned to the instance. **Note**: This field is non-authoritative, and will only manage
                the labels present in your configuration. Please refer to the field 'effective_labels' for all of the labels present on
                the resource.
@@ -1566,6 +1586,8 @@ class InstanceFromTemplate(pulumi.CustomResource):
         :param pulumi.Input[str] id: The unique provider ID of the resource to lookup.
         :param pulumi.ResourceOptions opts: Options for the resource.
         :param pulumi.Input[pulumi.InputType['InstanceFromTemplateAdvancedMachineFeaturesArgs']] advanced_machine_features: Controls for advanced machine-related behavior features.
+        :param pulumi.Input[bool] allow_stopping_for_update: If true, allows Terraform to stop the instance to update its properties. If you try to update a property that requires
+               stopping the instance without setting this field, the update will fail.
         :param pulumi.Input[Sequence[pulumi.Input[pulumi.InputType['InstanceFromTemplateAttachedDiskArgs']]]] attached_disks: List of disks attached to the instance
         :param pulumi.Input[pulumi.InputType['InstanceFromTemplateBootDiskArgs']] boot_disk: The boot disk for the instance.
         :param pulumi.Input[bool] can_ip_forward: Whether sending and receiving of packets with non-matching source or destination IPs is allowed.
@@ -1578,11 +1600,13 @@ class InstanceFromTemplate(pulumi.CustomResource):
         :param pulumi.Input[bool] deletion_protection: Whether deletion protection is enabled on this instance.
         :param pulumi.Input[str] description: A brief description of the resource.
         :param pulumi.Input[str] desired_status: Desired status of the instance. Either "RUNNING" or "TERMINATED".
+        :param pulumi.Input[Mapping[str, pulumi.Input[str]]] effective_labels: All of labels (key/value pairs) present on the resource in GCP, including the labels configured through Terraform, other
+               clients and services.
         :param pulumi.Input[bool] enable_display: Whether the instance has virtual displays enabled.
         :param pulumi.Input[Sequence[pulumi.Input[pulumi.InputType['InstanceFromTemplateGuestAcceleratorArgs']]]] guest_accelerators: List of the type and count of accelerator cards attached to the instance.
         :param pulumi.Input[str] hostname: A custom hostname for the instance. Must be a fully qualified DNS name and RFC-1035-valid. Valid format is a series of
-               labels 1-63 characters long matching the regular expression a-z, concatenated with periods. The entire hostname must not
-               exceed 253 characters. Changing this forces a new resource to be created.
+               labels 1-63 characters long matching the regular expression [a-z]([-a-z0-9]*[a-z0-9]), concatenated with periods. The
+               entire hostname must not exceed 253 characters. Changing this forces a new resource to be created.
         :param pulumi.Input[str] instance_id: The server-assigned unique identifier of this instance.
         :param pulumi.Input[str] label_fingerprint: The unique fingerprint of the labels.
         :param pulumi.Input[Mapping[str, pulumi.Input[str]]] labels: A set of key/value label pairs assigned to the instance. **Note**: This field is non-authoritative, and will only manage
@@ -1680,6 +1704,10 @@ class InstanceFromTemplate(pulumi.CustomResource):
     @property
     @pulumi.getter(name="allowStoppingForUpdate")
     def allow_stopping_for_update(self) -> pulumi.Output[bool]:
+        """
+        If true, allows Terraform to stop the instance to update its properties. If you try to update a property that requires
+        stopping the instance without setting this field, the update will fail.
+        """
         return pulumi.get(self, "allow_stopping_for_update")
 
     @property
@@ -1760,6 +1788,10 @@ class InstanceFromTemplate(pulumi.CustomResource):
     @property
     @pulumi.getter(name="effectiveLabels")
     def effective_labels(self) -> pulumi.Output[Mapping[str, str]]:
+        """
+        All of labels (key/value pairs) present on the resource in GCP, including the labels configured through Terraform, other
+        clients and services.
+        """
         return pulumi.get(self, "effective_labels")
 
     @property
@@ -1783,8 +1815,8 @@ class InstanceFromTemplate(pulumi.CustomResource):
     def hostname(self) -> pulumi.Output[str]:
         """
         A custom hostname for the instance. Must be a fully qualified DNS name and RFC-1035-valid. Valid format is a series of
-        labels 1-63 characters long matching the regular expression a-z, concatenated with periods. The entire hostname must not
-        exceed 253 characters. Changing this forces a new resource to be created.
+        labels 1-63 characters long matching the regular expression [a-z]([-a-z0-9]*[a-z0-9]), concatenated with periods. The
+        entire hostname must not exceed 253 characters. Changing this forces a new resource to be created.
         """
         return pulumi.get(self, "hostname")