pulumi-gcp 7.23.0__py3-none-any.whl → 7.23.0a1715695885__py3-none-any.whl
This diff represents the content of publicly available package versions that have been released to one of the supported registries. The information contained in this diff is provided for informational purposes only and reflects changes between package versions as they appear in their respective public registries.
- pulumi_gcp/__init__.py +0 -24
- pulumi_gcp/bigquery/table.py +0 -47
- pulumi_gcp/bigtable/__init__.py +0 -1
- pulumi_gcp/bigtable/_inputs.py +0 -101
- pulumi_gcp/bigtable/outputs.py +0 -119
- pulumi_gcp/certificateauthority/certificate_template.py +0 -70
- pulumi_gcp/cloudbuildv2/repository.py +2 -2
- pulumi_gcp/clouddeploy/_inputs.py +0 -96
- pulumi_gcp/clouddeploy/custom_target_type.py +0 -46
- pulumi_gcp/clouddeploy/delivery_pipeline.py +7 -7
- pulumi_gcp/clouddeploy/outputs.py +1 -96
- pulumi_gcp/clouddeploy/target.py +7 -54
- pulumi_gcp/compute/_inputs.py +0 -689
- pulumi_gcp/compute/firewall_policy_rule.py +10 -125
- pulumi_gcp/compute/network_firewall_policy_rule.py +10 -125
- pulumi_gcp/compute/outputs.py +0 -684
- pulumi_gcp/compute/region_network_firewall_policy_rule.py +10 -125
- pulumi_gcp/compute/region_security_policy_rule.py +1 -230
- pulumi_gcp/container/_inputs.py +3 -67
- pulumi_gcp/container/outputs.py +4 -93
- pulumi_gcp/dataflow/flex_template_job.py +7 -7
- pulumi_gcp/dataflow/job.py +7 -7
- pulumi_gcp/iam/_inputs.py +2 -191
- pulumi_gcp/iam/outputs.py +2 -197
- pulumi_gcp/iam/workforce_pool_provider.py +0 -245
- pulumi_gcp/integrationconnectors/__init__.py +0 -1
- pulumi_gcp/networkconnectivity/__init__.py +0 -1
- pulumi_gcp/networksecurity/firewall_endpoint.py +0 -34
- pulumi_gcp/networksecurity/firewall_endpoint_association.py +0 -24
- pulumi_gcp/networksecurity/security_profile.py +0 -16
- pulumi_gcp/networksecurity/security_profile_group.py +0 -18
- pulumi_gcp/networksecurity/tls_inspection_policy.py +0 -16
- pulumi_gcp/orgpolicy/policy.py +2 -2
- pulumi_gcp/pubsub/subscription.py +4 -4
- pulumi_gcp/pulumi-plugin.json +1 -1
- {pulumi_gcp-7.23.0.dist-info → pulumi_gcp-7.23.0a1715695885.dist-info}/METADATA +1 -1
- {pulumi_gcp-7.23.0.dist-info → pulumi_gcp-7.23.0a1715695885.dist-info}/RECORD +39 -42
- pulumi_gcp/bigtable/authorized_view.py +0 -440
- pulumi_gcp/integrationconnectors/managed_zone.py +0 -753
- pulumi_gcp/networkconnectivity/regional_endpoint.py +0 -946
- {pulumi_gcp-7.23.0.dist-info → pulumi_gcp-7.23.0a1715695885.dist-info}/WHEEL +0 -0
- {pulumi_gcp-7.23.0.dist-info → pulumi_gcp-7.23.0a1715695885.dist-info}/top_level.txt +0 -0
@@ -24,13 +24,11 @@ class FirewallPolicyRuleArgs:
|
|
24
24
|
description: Optional[pulumi.Input[str]] = None,
|
25
25
|
disabled: Optional[pulumi.Input[bool]] = None,
|
26
26
|
enable_logging: Optional[pulumi.Input[bool]] = None,
|
27
|
-
security_profile_group: Optional[pulumi.Input[str]] = None,
|
28
27
|
target_resources: Optional[pulumi.Input[Sequence[pulumi.Input[str]]]] = None,
|
29
|
-
target_service_accounts: Optional[pulumi.Input[Sequence[pulumi.Input[str]]]] = None
|
30
|
-
tls_inspect: Optional[pulumi.Input[bool]] = None):
|
28
|
+
target_service_accounts: Optional[pulumi.Input[Sequence[pulumi.Input[str]]]] = None):
|
31
29
|
"""
|
32
30
|
The set of arguments for constructing a FirewallPolicyRule resource.
|
33
|
-
:param pulumi.Input[str] action: The Action to perform when the client connection triggers the rule. Valid actions are "allow", "deny"
|
31
|
+
:param pulumi.Input[str] action: The Action to perform when the client connection triggers the rule. Valid actions are "allow", "deny" and "goto_next".
|
34
32
|
:param pulumi.Input[str] direction: The direction in which this rule applies. Possible values: INGRESS, EGRESS
|
35
33
|
:param pulumi.Input[str] firewall_policy: The firewall policy of the resource.
|
36
34
|
:param pulumi.Input['FirewallPolicyRuleMatchArgs'] match: A match condition that incoming traffic is evaluated against. If it evaluates to true, the corresponding 'action' is enforced.
|
@@ -41,14 +39,9 @@ class FirewallPolicyRuleArgs:
|
|
41
39
|
:param pulumi.Input[bool] enable_logging: Denotes whether to enable logging for a particular rule. If logging is enabled, logs will be exported to the configured
|
42
40
|
export destination in Stackdriver. Logs may be exported to BigQuery or Pub/Sub. Note: you cannot enable logging on
|
43
41
|
"goto_next" rules.
|
44
|
-
:param pulumi.Input[str] security_profile_group: A fully-qualified URL of a SecurityProfileGroup resource. Example:
|
45
|
-
https://networksecurity.googleapis.com/v1/organizations/{organizationId}/locations/global/securityProfileGroups/my-security-profile-group.
|
46
|
-
It must be specified if action = 'apply_security_profile_group' and cannot be specified for other actions.
|
47
42
|
:param pulumi.Input[Sequence[pulumi.Input[str]]] target_resources: A list of network resource URLs to which this rule applies. This field allows you to control which network's VMs get
|
48
43
|
this rule. If this field is left blank, all VMs within the organization will receive the rule.
|
49
44
|
:param pulumi.Input[Sequence[pulumi.Input[str]]] target_service_accounts: A list of service accounts indicating the sets of instances that are applied with this rule.
|
50
|
-
:param pulumi.Input[bool] tls_inspect: Boolean flag indicating if the traffic should be TLS decrypted. It can be set only if action =
|
51
|
-
'apply_security_profile_group' and cannot be set for other actions.
|
52
45
|
"""
|
53
46
|
pulumi.set(__self__, "action", action)
|
54
47
|
pulumi.set(__self__, "direction", direction)
|
@@ -61,20 +54,16 @@ class FirewallPolicyRuleArgs:
|
|
61
54
|
pulumi.set(__self__, "disabled", disabled)
|
62
55
|
if enable_logging is not None:
|
63
56
|
pulumi.set(__self__, "enable_logging", enable_logging)
|
64
|
-
if security_profile_group is not None:
|
65
|
-
pulumi.set(__self__, "security_profile_group", security_profile_group)
|
66
57
|
if target_resources is not None:
|
67
58
|
pulumi.set(__self__, "target_resources", target_resources)
|
68
59
|
if target_service_accounts is not None:
|
69
60
|
pulumi.set(__self__, "target_service_accounts", target_service_accounts)
|
70
|
-
if tls_inspect is not None:
|
71
|
-
pulumi.set(__self__, "tls_inspect", tls_inspect)
|
72
61
|
|
73
62
|
@property
|
74
63
|
@pulumi.getter
|
75
64
|
def action(self) -> pulumi.Input[str]:
|
76
65
|
"""
|
77
|
-
The Action to perform when the client connection triggers the rule. Valid actions are "allow", "deny"
|
66
|
+
The Action to perform when the client connection triggers the rule. Valid actions are "allow", "deny" and "goto_next".
|
78
67
|
"""
|
79
68
|
return pulumi.get(self, "action")
|
80
69
|
|
@@ -169,20 +158,6 @@ class FirewallPolicyRuleArgs:
|
|
169
158
|
def enable_logging(self, value: Optional[pulumi.Input[bool]]):
|
170
159
|
pulumi.set(self, "enable_logging", value)
|
171
160
|
|
172
|
-
@property
|
173
|
-
@pulumi.getter(name="securityProfileGroup")
|
174
|
-
def security_profile_group(self) -> Optional[pulumi.Input[str]]:
|
175
|
-
"""
|
176
|
-
A fully-qualified URL of a SecurityProfileGroup resource. Example:
|
177
|
-
https://networksecurity.googleapis.com/v1/organizations/{organizationId}/locations/global/securityProfileGroups/my-security-profile-group.
|
178
|
-
It must be specified if action = 'apply_security_profile_group' and cannot be specified for other actions.
|
179
|
-
"""
|
180
|
-
return pulumi.get(self, "security_profile_group")
|
181
|
-
|
182
|
-
@security_profile_group.setter
|
183
|
-
def security_profile_group(self, value: Optional[pulumi.Input[str]]):
|
184
|
-
pulumi.set(self, "security_profile_group", value)
|
185
|
-
|
186
161
|
@property
|
187
162
|
@pulumi.getter(name="targetResources")
|
188
163
|
def target_resources(self) -> Optional[pulumi.Input[Sequence[pulumi.Input[str]]]]:
|
@@ -208,19 +183,6 @@ class FirewallPolicyRuleArgs:
|
|
208
183
|
def target_service_accounts(self, value: Optional[pulumi.Input[Sequence[pulumi.Input[str]]]]):
|
209
184
|
pulumi.set(self, "target_service_accounts", value)
|
210
185
|
|
211
|
-
@property
|
212
|
-
@pulumi.getter(name="tlsInspect")
|
213
|
-
def tls_inspect(self) -> Optional[pulumi.Input[bool]]:
|
214
|
-
"""
|
215
|
-
Boolean flag indicating if the traffic should be TLS decrypted. It can be set only if action =
|
216
|
-
'apply_security_profile_group' and cannot be set for other actions.
|
217
|
-
"""
|
218
|
-
return pulumi.get(self, "tls_inspect")
|
219
|
-
|
220
|
-
@tls_inspect.setter
|
221
|
-
def tls_inspect(self, value: Optional[pulumi.Input[bool]]):
|
222
|
-
pulumi.set(self, "tls_inspect", value)
|
223
|
-
|
224
186
|
|
225
187
|
@pulumi.input_type
|
226
188
|
class _FirewallPolicyRuleState:
|
@@ -235,13 +197,11 @@ class _FirewallPolicyRuleState:
|
|
235
197
|
match: Optional[pulumi.Input['FirewallPolicyRuleMatchArgs']] = None,
|
236
198
|
priority: Optional[pulumi.Input[int]] = None,
|
237
199
|
rule_tuple_count: Optional[pulumi.Input[int]] = None,
|
238
|
-
security_profile_group: Optional[pulumi.Input[str]] = None,
|
239
200
|
target_resources: Optional[pulumi.Input[Sequence[pulumi.Input[str]]]] = None,
|
240
|
-
target_service_accounts: Optional[pulumi.Input[Sequence[pulumi.Input[str]]]] = None
|
241
|
-
tls_inspect: Optional[pulumi.Input[bool]] = None):
|
201
|
+
target_service_accounts: Optional[pulumi.Input[Sequence[pulumi.Input[str]]]] = None):
|
242
202
|
"""
|
243
203
|
Input properties used for looking up and filtering FirewallPolicyRule resources.
|
244
|
-
:param pulumi.Input[str] action: The Action to perform when the client connection triggers the rule. Valid actions are "allow", "deny"
|
204
|
+
:param pulumi.Input[str] action: The Action to perform when the client connection triggers the rule. Valid actions are "allow", "deny" and "goto_next".
|
245
205
|
:param pulumi.Input[str] description: An optional description for this resource.
|
246
206
|
:param pulumi.Input[str] direction: The direction in which this rule applies. Possible values: INGRESS, EGRESS
|
247
207
|
:param pulumi.Input[bool] disabled: Denotes whether the firewall policy rule is disabled. When set to true, the firewall policy rule is not enforced and
|
@@ -254,14 +214,9 @@ class _FirewallPolicyRuleState:
|
|
254
214
|
:param pulumi.Input['FirewallPolicyRuleMatchArgs'] match: A match condition that incoming traffic is evaluated against. If it evaluates to true, the corresponding 'action' is enforced.
|
255
215
|
:param pulumi.Input[int] priority: An integer indicating the priority of a rule in the list. The priority must be a positive value between 0 and 2147483647. Rules are evaluated from highest to lowest priority where 0 is the highest priority and 2147483647 is the lowest prority.
|
256
216
|
:param pulumi.Input[int] rule_tuple_count: Calculation of the complexity of a single firewall policy rule.
|
257
|
-
:param pulumi.Input[str] security_profile_group: A fully-qualified URL of a SecurityProfileGroup resource. Example:
|
258
|
-
https://networksecurity.googleapis.com/v1/organizations/{organizationId}/locations/global/securityProfileGroups/my-security-profile-group.
|
259
|
-
It must be specified if action = 'apply_security_profile_group' and cannot be specified for other actions.
|
260
217
|
:param pulumi.Input[Sequence[pulumi.Input[str]]] target_resources: A list of network resource URLs to which this rule applies. This field allows you to control which network's VMs get
|
261
218
|
this rule. If this field is left blank, all VMs within the organization will receive the rule.
|
262
219
|
:param pulumi.Input[Sequence[pulumi.Input[str]]] target_service_accounts: A list of service accounts indicating the sets of instances that are applied with this rule.
|
263
|
-
:param pulumi.Input[bool] tls_inspect: Boolean flag indicating if the traffic should be TLS decrypted. It can be set only if action =
|
264
|
-
'apply_security_profile_group' and cannot be set for other actions.
|
265
220
|
"""
|
266
221
|
if action is not None:
|
267
222
|
pulumi.set(__self__, "action", action)
|
@@ -283,20 +238,16 @@ class _FirewallPolicyRuleState:
|
|
283
238
|
pulumi.set(__self__, "priority", priority)
|
284
239
|
if rule_tuple_count is not None:
|
285
240
|
pulumi.set(__self__, "rule_tuple_count", rule_tuple_count)
|
286
|
-
if security_profile_group is not None:
|
287
|
-
pulumi.set(__self__, "security_profile_group", security_profile_group)
|
288
241
|
if target_resources is not None:
|
289
242
|
pulumi.set(__self__, "target_resources", target_resources)
|
290
243
|
if target_service_accounts is not None:
|
291
244
|
pulumi.set(__self__, "target_service_accounts", target_service_accounts)
|
292
|
-
if tls_inspect is not None:
|
293
|
-
pulumi.set(__self__, "tls_inspect", tls_inspect)
|
294
245
|
|
295
246
|
@property
|
296
247
|
@pulumi.getter
|
297
248
|
def action(self) -> Optional[pulumi.Input[str]]:
|
298
249
|
"""
|
299
|
-
The Action to perform when the client connection triggers the rule. Valid actions are "allow", "deny"
|
250
|
+
The Action to perform when the client connection triggers the rule. Valid actions are "allow", "deny" and "goto_next".
|
300
251
|
"""
|
301
252
|
return pulumi.get(self, "action")
|
302
253
|
|
@@ -415,20 +366,6 @@ class _FirewallPolicyRuleState:
|
|
415
366
|
def rule_tuple_count(self, value: Optional[pulumi.Input[int]]):
|
416
367
|
pulumi.set(self, "rule_tuple_count", value)
|
417
368
|
|
418
|
-
@property
|
419
|
-
@pulumi.getter(name="securityProfileGroup")
|
420
|
-
def security_profile_group(self) -> Optional[pulumi.Input[str]]:
|
421
|
-
"""
|
422
|
-
A fully-qualified URL of a SecurityProfileGroup resource. Example:
|
423
|
-
https://networksecurity.googleapis.com/v1/organizations/{organizationId}/locations/global/securityProfileGroups/my-security-profile-group.
|
424
|
-
It must be specified if action = 'apply_security_profile_group' and cannot be specified for other actions.
|
425
|
-
"""
|
426
|
-
return pulumi.get(self, "security_profile_group")
|
427
|
-
|
428
|
-
@security_profile_group.setter
|
429
|
-
def security_profile_group(self, value: Optional[pulumi.Input[str]]):
|
430
|
-
pulumi.set(self, "security_profile_group", value)
|
431
|
-
|
432
369
|
@property
|
433
370
|
@pulumi.getter(name="targetResources")
|
434
371
|
def target_resources(self) -> Optional[pulumi.Input[Sequence[pulumi.Input[str]]]]:
|
@@ -454,19 +391,6 @@ class _FirewallPolicyRuleState:
|
|
454
391
|
def target_service_accounts(self, value: Optional[pulumi.Input[Sequence[pulumi.Input[str]]]]):
|
455
392
|
pulumi.set(self, "target_service_accounts", value)
|
456
393
|
|
457
|
-
@property
|
458
|
-
@pulumi.getter(name="tlsInspect")
|
459
|
-
def tls_inspect(self) -> Optional[pulumi.Input[bool]]:
|
460
|
-
"""
|
461
|
-
Boolean flag indicating if the traffic should be TLS decrypted. It can be set only if action =
|
462
|
-
'apply_security_profile_group' and cannot be set for other actions.
|
463
|
-
"""
|
464
|
-
return pulumi.get(self, "tls_inspect")
|
465
|
-
|
466
|
-
@tls_inspect.setter
|
467
|
-
def tls_inspect(self, value: Optional[pulumi.Input[bool]]):
|
468
|
-
pulumi.set(self, "tls_inspect", value)
|
469
|
-
|
470
394
|
|
471
395
|
class FirewallPolicyRule(pulumi.CustomResource):
|
472
396
|
@overload
|
@@ -481,10 +405,8 @@ class FirewallPolicyRule(pulumi.CustomResource):
|
|
481
405
|
firewall_policy: Optional[pulumi.Input[str]] = None,
|
482
406
|
match: Optional[pulumi.Input[pulumi.InputType['FirewallPolicyRuleMatchArgs']]] = None,
|
483
407
|
priority: Optional[pulumi.Input[int]] = None,
|
484
|
-
security_profile_group: Optional[pulumi.Input[str]] = None,
|
485
408
|
target_resources: Optional[pulumi.Input[Sequence[pulumi.Input[str]]]] = None,
|
486
409
|
target_service_accounts: Optional[pulumi.Input[Sequence[pulumi.Input[str]]]] = None,
|
487
|
-
tls_inspect: Optional[pulumi.Input[bool]] = None,
|
488
410
|
__props__=None):
|
489
411
|
"""
|
490
412
|
The Compute FirewallPolicyRule resource
|
@@ -560,7 +482,7 @@ class FirewallPolicyRule(pulumi.CustomResource):
|
|
560
482
|
|
561
483
|
:param str resource_name: The name of the resource.
|
562
484
|
:param pulumi.ResourceOptions opts: Options for the resource.
|
563
|
-
:param pulumi.Input[str] action: The Action to perform when the client connection triggers the rule. Valid actions are "allow", "deny"
|
485
|
+
:param pulumi.Input[str] action: The Action to perform when the client connection triggers the rule. Valid actions are "allow", "deny" and "goto_next".
|
564
486
|
:param pulumi.Input[str] description: An optional description for this resource.
|
565
487
|
:param pulumi.Input[str] direction: The direction in which this rule applies. Possible values: INGRESS, EGRESS
|
566
488
|
:param pulumi.Input[bool] disabled: Denotes whether the firewall policy rule is disabled. When set to true, the firewall policy rule is not enforced and
|
@@ -571,14 +493,9 @@ class FirewallPolicyRule(pulumi.CustomResource):
|
|
571
493
|
:param pulumi.Input[str] firewall_policy: The firewall policy of the resource.
|
572
494
|
:param pulumi.Input[pulumi.InputType['FirewallPolicyRuleMatchArgs']] match: A match condition that incoming traffic is evaluated against. If it evaluates to true, the corresponding 'action' is enforced.
|
573
495
|
:param pulumi.Input[int] priority: An integer indicating the priority of a rule in the list. The priority must be a positive value between 0 and 2147483647. Rules are evaluated from highest to lowest priority where 0 is the highest priority and 2147483647 is the lowest prority.
|
574
|
-
:param pulumi.Input[str] security_profile_group: A fully-qualified URL of a SecurityProfileGroup resource. Example:
|
575
|
-
https://networksecurity.googleapis.com/v1/organizations/{organizationId}/locations/global/securityProfileGroups/my-security-profile-group.
|
576
|
-
It must be specified if action = 'apply_security_profile_group' and cannot be specified for other actions.
|
577
496
|
:param pulumi.Input[Sequence[pulumi.Input[str]]] target_resources: A list of network resource URLs to which this rule applies. This field allows you to control which network's VMs get
|
578
497
|
this rule. If this field is left blank, all VMs within the organization will receive the rule.
|
579
498
|
:param pulumi.Input[Sequence[pulumi.Input[str]]] target_service_accounts: A list of service accounts indicating the sets of instances that are applied with this rule.
|
580
|
-
:param pulumi.Input[bool] tls_inspect: Boolean flag indicating if the traffic should be TLS decrypted. It can be set only if action =
|
581
|
-
'apply_security_profile_group' and cannot be set for other actions.
|
582
499
|
"""
|
583
500
|
...
|
584
501
|
@overload
|
@@ -681,10 +598,8 @@ class FirewallPolicyRule(pulumi.CustomResource):
|
|
681
598
|
firewall_policy: Optional[pulumi.Input[str]] = None,
|
682
599
|
match: Optional[pulumi.Input[pulumi.InputType['FirewallPolicyRuleMatchArgs']]] = None,
|
683
600
|
priority: Optional[pulumi.Input[int]] = None,
|
684
|
-
security_profile_group: Optional[pulumi.Input[str]] = None,
|
685
601
|
target_resources: Optional[pulumi.Input[Sequence[pulumi.Input[str]]]] = None,
|
686
602
|
target_service_accounts: Optional[pulumi.Input[Sequence[pulumi.Input[str]]]] = None,
|
687
|
-
tls_inspect: Optional[pulumi.Input[bool]] = None,
|
688
603
|
__props__=None):
|
689
604
|
opts = pulumi.ResourceOptions.merge(_utilities.get_resource_opts_defaults(), opts)
|
690
605
|
if not isinstance(opts, pulumi.ResourceOptions):
|
@@ -712,10 +627,8 @@ class FirewallPolicyRule(pulumi.CustomResource):
|
|
712
627
|
if priority is None and not opts.urn:
|
713
628
|
raise TypeError("Missing required property 'priority'")
|
714
629
|
__props__.__dict__["priority"] = priority
|
715
|
-
__props__.__dict__["security_profile_group"] = security_profile_group
|
716
630
|
__props__.__dict__["target_resources"] = target_resources
|
717
631
|
__props__.__dict__["target_service_accounts"] = target_service_accounts
|
718
|
-
__props__.__dict__["tls_inspect"] = tls_inspect
|
719
632
|
__props__.__dict__["kind"] = None
|
720
633
|
__props__.__dict__["rule_tuple_count"] = None
|
721
634
|
super(FirewallPolicyRule, __self__).__init__(
|
@@ -738,10 +651,8 @@ class FirewallPolicyRule(pulumi.CustomResource):
|
|
738
651
|
match: Optional[pulumi.Input[pulumi.InputType['FirewallPolicyRuleMatchArgs']]] = None,
|
739
652
|
priority: Optional[pulumi.Input[int]] = None,
|
740
653
|
rule_tuple_count: Optional[pulumi.Input[int]] = None,
|
741
|
-
security_profile_group: Optional[pulumi.Input[str]] = None,
|
742
654
|
target_resources: Optional[pulumi.Input[Sequence[pulumi.Input[str]]]] = None,
|
743
|
-
target_service_accounts: Optional[pulumi.Input[Sequence[pulumi.Input[str]]]] = None
|
744
|
-
tls_inspect: Optional[pulumi.Input[bool]] = None) -> 'FirewallPolicyRule':
|
655
|
+
target_service_accounts: Optional[pulumi.Input[Sequence[pulumi.Input[str]]]] = None) -> 'FirewallPolicyRule':
|
745
656
|
"""
|
746
657
|
Get an existing FirewallPolicyRule resource's state with the given name, id, and optional extra
|
747
658
|
properties used to qualify the lookup.
|
@@ -749,7 +660,7 @@ class FirewallPolicyRule(pulumi.CustomResource):
|
|
749
660
|
:param str resource_name: The unique name of the resulting resource.
|
750
661
|
:param pulumi.Input[str] id: The unique provider ID of the resource to lookup.
|
751
662
|
:param pulumi.ResourceOptions opts: Options for the resource.
|
752
|
-
:param pulumi.Input[str] action: The Action to perform when the client connection triggers the rule. Valid actions are "allow", "deny"
|
663
|
+
:param pulumi.Input[str] action: The Action to perform when the client connection triggers the rule. Valid actions are "allow", "deny" and "goto_next".
|
753
664
|
:param pulumi.Input[str] description: An optional description for this resource.
|
754
665
|
:param pulumi.Input[str] direction: The direction in which this rule applies. Possible values: INGRESS, EGRESS
|
755
666
|
:param pulumi.Input[bool] disabled: Denotes whether the firewall policy rule is disabled. When set to true, the firewall policy rule is not enforced and
|
@@ -762,14 +673,9 @@ class FirewallPolicyRule(pulumi.CustomResource):
|
|
762
673
|
:param pulumi.Input[pulumi.InputType['FirewallPolicyRuleMatchArgs']] match: A match condition that incoming traffic is evaluated against. If it evaluates to true, the corresponding 'action' is enforced.
|
763
674
|
:param pulumi.Input[int] priority: An integer indicating the priority of a rule in the list. The priority must be a positive value between 0 and 2147483647. Rules are evaluated from highest to lowest priority where 0 is the highest priority and 2147483647 is the lowest prority.
|
764
675
|
:param pulumi.Input[int] rule_tuple_count: Calculation of the complexity of a single firewall policy rule.
|
765
|
-
:param pulumi.Input[str] security_profile_group: A fully-qualified URL of a SecurityProfileGroup resource. Example:
|
766
|
-
https://networksecurity.googleapis.com/v1/organizations/{organizationId}/locations/global/securityProfileGroups/my-security-profile-group.
|
767
|
-
It must be specified if action = 'apply_security_profile_group' and cannot be specified for other actions.
|
768
676
|
:param pulumi.Input[Sequence[pulumi.Input[str]]] target_resources: A list of network resource URLs to which this rule applies. This field allows you to control which network's VMs get
|
769
677
|
this rule. If this field is left blank, all VMs within the organization will receive the rule.
|
770
678
|
:param pulumi.Input[Sequence[pulumi.Input[str]]] target_service_accounts: A list of service accounts indicating the sets of instances that are applied with this rule.
|
771
|
-
:param pulumi.Input[bool] tls_inspect: Boolean flag indicating if the traffic should be TLS decrypted. It can be set only if action =
|
772
|
-
'apply_security_profile_group' and cannot be set for other actions.
|
773
679
|
"""
|
774
680
|
opts = pulumi.ResourceOptions.merge(opts, pulumi.ResourceOptions(id=id))
|
775
681
|
|
@@ -785,17 +691,15 @@ class FirewallPolicyRule(pulumi.CustomResource):
|
|
785
691
|
__props__.__dict__["match"] = match
|
786
692
|
__props__.__dict__["priority"] = priority
|
787
693
|
__props__.__dict__["rule_tuple_count"] = rule_tuple_count
|
788
|
-
__props__.__dict__["security_profile_group"] = security_profile_group
|
789
694
|
__props__.__dict__["target_resources"] = target_resources
|
790
695
|
__props__.__dict__["target_service_accounts"] = target_service_accounts
|
791
|
-
__props__.__dict__["tls_inspect"] = tls_inspect
|
792
696
|
return FirewallPolicyRule(resource_name, opts=opts, __props__=__props__)
|
793
697
|
|
794
698
|
@property
|
795
699
|
@pulumi.getter
|
796
700
|
def action(self) -> pulumi.Output[str]:
|
797
701
|
"""
|
798
|
-
The Action to perform when the client connection triggers the rule. Valid actions are "allow", "deny"
|
702
|
+
The Action to perform when the client connection triggers the rule. Valid actions are "allow", "deny" and "goto_next".
|
799
703
|
"""
|
800
704
|
return pulumi.get(self, "action")
|
801
705
|
|
@@ -874,16 +778,6 @@ class FirewallPolicyRule(pulumi.CustomResource):
|
|
874
778
|
"""
|
875
779
|
return pulumi.get(self, "rule_tuple_count")
|
876
780
|
|
877
|
-
@property
|
878
|
-
@pulumi.getter(name="securityProfileGroup")
|
879
|
-
def security_profile_group(self) -> pulumi.Output[Optional[str]]:
|
880
|
-
"""
|
881
|
-
A fully-qualified URL of a SecurityProfileGroup resource. Example:
|
882
|
-
https://networksecurity.googleapis.com/v1/organizations/{organizationId}/locations/global/securityProfileGroups/my-security-profile-group.
|
883
|
-
It must be specified if action = 'apply_security_profile_group' and cannot be specified for other actions.
|
884
|
-
"""
|
885
|
-
return pulumi.get(self, "security_profile_group")
|
886
|
-
|
887
781
|
@property
|
888
782
|
@pulumi.getter(name="targetResources")
|
889
783
|
def target_resources(self) -> pulumi.Output[Optional[Sequence[str]]]:
|
@@ -901,12 +795,3 @@ class FirewallPolicyRule(pulumi.CustomResource):
|
|
901
795
|
"""
|
902
796
|
return pulumi.get(self, "target_service_accounts")
|
903
797
|
|
904
|
-
@property
|
905
|
-
@pulumi.getter(name="tlsInspect")
|
906
|
-
def tls_inspect(self) -> pulumi.Output[Optional[bool]]:
|
907
|
-
"""
|
908
|
-
Boolean flag indicating if the traffic should be TLS decrypted. It can be set only if action =
|
909
|
-
'apply_security_profile_group' and cannot be set for other actions.
|
910
|
-
"""
|
911
|
-
return pulumi.get(self, "tls_inspect")
|
912
|
-
|