pulumi-gcp 7.23.0__py3-none-any.whl → 7.23.0a1715695885__py3-none-any.whl
This diff represents the content of publicly available package versions that have been released to one of the supported registries. The information contained in this diff is provided for informational purposes only and reflects changes between package versions as they appear in their respective public registries.
- pulumi_gcp/__init__.py +0 -24
- pulumi_gcp/bigquery/table.py +0 -47
- pulumi_gcp/bigtable/__init__.py +0 -1
- pulumi_gcp/bigtable/_inputs.py +0 -101
- pulumi_gcp/bigtable/outputs.py +0 -119
- pulumi_gcp/certificateauthority/certificate_template.py +0 -70
- pulumi_gcp/cloudbuildv2/repository.py +2 -2
- pulumi_gcp/clouddeploy/_inputs.py +0 -96
- pulumi_gcp/clouddeploy/custom_target_type.py +0 -46
- pulumi_gcp/clouddeploy/delivery_pipeline.py +7 -7
- pulumi_gcp/clouddeploy/outputs.py +1 -96
- pulumi_gcp/clouddeploy/target.py +7 -54
- pulumi_gcp/compute/_inputs.py +0 -689
- pulumi_gcp/compute/firewall_policy_rule.py +10 -125
- pulumi_gcp/compute/network_firewall_policy_rule.py +10 -125
- pulumi_gcp/compute/outputs.py +0 -684
- pulumi_gcp/compute/region_network_firewall_policy_rule.py +10 -125
- pulumi_gcp/compute/region_security_policy_rule.py +1 -230
- pulumi_gcp/container/_inputs.py +3 -67
- pulumi_gcp/container/outputs.py +4 -93
- pulumi_gcp/dataflow/flex_template_job.py +7 -7
- pulumi_gcp/dataflow/job.py +7 -7
- pulumi_gcp/iam/_inputs.py +2 -191
- pulumi_gcp/iam/outputs.py +2 -197
- pulumi_gcp/iam/workforce_pool_provider.py +0 -245
- pulumi_gcp/integrationconnectors/__init__.py +0 -1
- pulumi_gcp/networkconnectivity/__init__.py +0 -1
- pulumi_gcp/networksecurity/firewall_endpoint.py +0 -34
- pulumi_gcp/networksecurity/firewall_endpoint_association.py +0 -24
- pulumi_gcp/networksecurity/security_profile.py +0 -16
- pulumi_gcp/networksecurity/security_profile_group.py +0 -18
- pulumi_gcp/networksecurity/tls_inspection_policy.py +0 -16
- pulumi_gcp/orgpolicy/policy.py +2 -2
- pulumi_gcp/pubsub/subscription.py +4 -4
- pulumi_gcp/pulumi-plugin.json +1 -1
- {pulumi_gcp-7.23.0.dist-info → pulumi_gcp-7.23.0a1715695885.dist-info}/METADATA +1 -1
- {pulumi_gcp-7.23.0.dist-info → pulumi_gcp-7.23.0a1715695885.dist-info}/RECORD +39 -42
- pulumi_gcp/bigtable/authorized_view.py +0 -440
- pulumi_gcp/integrationconnectors/managed_zone.py +0 -753
- pulumi_gcp/networkconnectivity/regional_endpoint.py +0 -946
- {pulumi_gcp-7.23.0.dist-info → pulumi_gcp-7.23.0a1715695885.dist-info}/WHEEL +0 -0
- {pulumi_gcp-7.23.0.dist-info → pulumi_gcp-7.23.0a1715695885.dist-info}/top_level.txt +0 -0
@@ -23,10 +23,8 @@ class RegionSecurityPolicyRuleArgs:
|
|
23
23
|
description: Optional[pulumi.Input[str]] = None,
|
24
24
|
match: Optional[pulumi.Input['RegionSecurityPolicyRuleMatchArgs']] = None,
|
25
25
|
network_match: Optional[pulumi.Input['RegionSecurityPolicyRuleNetworkMatchArgs']] = None,
|
26
|
-
preconfigured_waf_config: Optional[pulumi.Input['RegionSecurityPolicyRulePreconfiguredWafConfigArgs']] = None,
|
27
26
|
preview: Optional[pulumi.Input[bool]] = None,
|
28
|
-
project: Optional[pulumi.Input[str]] = None
|
29
|
-
rate_limit_options: Optional[pulumi.Input['RegionSecurityPolicyRuleRateLimitOptionsArgs']] = None):
|
27
|
+
project: Optional[pulumi.Input[str]] = None):
|
30
28
|
"""
|
31
29
|
The set of arguments for constructing a RegionSecurityPolicyRule resource.
|
32
30
|
:param pulumi.Input[str] action: The Action to perform when the rule is matched. The following are the valid actions:
|
@@ -56,14 +54,9 @@ class RegionSecurityPolicyRuleArgs:
|
|
56
54
|
networkMatch: srcIpRanges: - "192.0.2.0/24" - "198.51.100.0/24" userDefinedFields: - name: "ipv4_fragment_offset" values: - "1-0x1fff"
|
57
55
|
The above match condition matches packets with a source IP in 192.0.2.0/24 or 198.51.100.0/24 and a user-defined field named "ipv4_fragment_offset" with a value between 1 and 0x1fff inclusive
|
58
56
|
Structure is documented below.
|
59
|
-
:param pulumi.Input['RegionSecurityPolicyRulePreconfiguredWafConfigArgs'] preconfigured_waf_config: Preconfigured WAF configuration to be applied for the rule.
|
60
|
-
If the rule does not evaluate preconfigured WAF rules, i.e., if evaluatePreconfiguredWaf() is not used, this field will have no effect.
|
61
|
-
Structure is documented below.
|
62
57
|
:param pulumi.Input[bool] preview: If set to true, the specified action is not enforced.
|
63
58
|
:param pulumi.Input[str] project: The ID of the project in which the resource belongs.
|
64
59
|
If it is not provided, the provider project is used.
|
65
|
-
:param pulumi.Input['RegionSecurityPolicyRuleRateLimitOptionsArgs'] rate_limit_options: Must be specified if the action is "rate_based_ban" or "throttle". Cannot be specified for any other actions.
|
66
|
-
Structure is documented below.
|
67
60
|
"""
|
68
61
|
pulumi.set(__self__, "action", action)
|
69
62
|
pulumi.set(__self__, "priority", priority)
|
@@ -75,14 +68,10 @@ class RegionSecurityPolicyRuleArgs:
|
|
75
68
|
pulumi.set(__self__, "match", match)
|
76
69
|
if network_match is not None:
|
77
70
|
pulumi.set(__self__, "network_match", network_match)
|
78
|
-
if preconfigured_waf_config is not None:
|
79
|
-
pulumi.set(__self__, "preconfigured_waf_config", preconfigured_waf_config)
|
80
71
|
if preview is not None:
|
81
72
|
pulumi.set(__self__, "preview", preview)
|
82
73
|
if project is not None:
|
83
74
|
pulumi.set(__self__, "project", project)
|
84
|
-
if rate_limit_options is not None:
|
85
|
-
pulumi.set(__self__, "rate_limit_options", rate_limit_options)
|
86
75
|
|
87
76
|
@property
|
88
77
|
@pulumi.getter
|
@@ -188,20 +177,6 @@ class RegionSecurityPolicyRuleArgs:
|
|
188
177
|
def network_match(self, value: Optional[pulumi.Input['RegionSecurityPolicyRuleNetworkMatchArgs']]):
|
189
178
|
pulumi.set(self, "network_match", value)
|
190
179
|
|
191
|
-
@property
|
192
|
-
@pulumi.getter(name="preconfiguredWafConfig")
|
193
|
-
def preconfigured_waf_config(self) -> Optional[pulumi.Input['RegionSecurityPolicyRulePreconfiguredWafConfigArgs']]:
|
194
|
-
"""
|
195
|
-
Preconfigured WAF configuration to be applied for the rule.
|
196
|
-
If the rule does not evaluate preconfigured WAF rules, i.e., if evaluatePreconfiguredWaf() is not used, this field will have no effect.
|
197
|
-
Structure is documented below.
|
198
|
-
"""
|
199
|
-
return pulumi.get(self, "preconfigured_waf_config")
|
200
|
-
|
201
|
-
@preconfigured_waf_config.setter
|
202
|
-
def preconfigured_waf_config(self, value: Optional[pulumi.Input['RegionSecurityPolicyRulePreconfiguredWafConfigArgs']]):
|
203
|
-
pulumi.set(self, "preconfigured_waf_config", value)
|
204
|
-
|
205
180
|
@property
|
206
181
|
@pulumi.getter
|
207
182
|
def preview(self) -> Optional[pulumi.Input[bool]]:
|
@@ -227,19 +202,6 @@ class RegionSecurityPolicyRuleArgs:
|
|
227
202
|
def project(self, value: Optional[pulumi.Input[str]]):
|
228
203
|
pulumi.set(self, "project", value)
|
229
204
|
|
230
|
-
@property
|
231
|
-
@pulumi.getter(name="rateLimitOptions")
|
232
|
-
def rate_limit_options(self) -> Optional[pulumi.Input['RegionSecurityPolicyRuleRateLimitOptionsArgs']]:
|
233
|
-
"""
|
234
|
-
Must be specified if the action is "rate_based_ban" or "throttle". Cannot be specified for any other actions.
|
235
|
-
Structure is documented below.
|
236
|
-
"""
|
237
|
-
return pulumi.get(self, "rate_limit_options")
|
238
|
-
|
239
|
-
@rate_limit_options.setter
|
240
|
-
def rate_limit_options(self, value: Optional[pulumi.Input['RegionSecurityPolicyRuleRateLimitOptionsArgs']]):
|
241
|
-
pulumi.set(self, "rate_limit_options", value)
|
242
|
-
|
243
205
|
|
244
206
|
@pulumi.input_type
|
245
207
|
class _RegionSecurityPolicyRuleState:
|
@@ -248,11 +210,9 @@ class _RegionSecurityPolicyRuleState:
|
|
248
210
|
description: Optional[pulumi.Input[str]] = None,
|
249
211
|
match: Optional[pulumi.Input['RegionSecurityPolicyRuleMatchArgs']] = None,
|
250
212
|
network_match: Optional[pulumi.Input['RegionSecurityPolicyRuleNetworkMatchArgs']] = None,
|
251
|
-
preconfigured_waf_config: Optional[pulumi.Input['RegionSecurityPolicyRulePreconfiguredWafConfigArgs']] = None,
|
252
213
|
preview: Optional[pulumi.Input[bool]] = None,
|
253
214
|
priority: Optional[pulumi.Input[int]] = None,
|
254
215
|
project: Optional[pulumi.Input[str]] = None,
|
255
|
-
rate_limit_options: Optional[pulumi.Input['RegionSecurityPolicyRuleRateLimitOptionsArgs']] = None,
|
256
216
|
region: Optional[pulumi.Input[str]] = None,
|
257
217
|
security_policy: Optional[pulumi.Input[str]] = None):
|
258
218
|
"""
|
@@ -276,17 +236,12 @@ class _RegionSecurityPolicyRuleState:
|
|
276
236
|
networkMatch: srcIpRanges: - "192.0.2.0/24" - "198.51.100.0/24" userDefinedFields: - name: "ipv4_fragment_offset" values: - "1-0x1fff"
|
277
237
|
The above match condition matches packets with a source IP in 192.0.2.0/24 or 198.51.100.0/24 and a user-defined field named "ipv4_fragment_offset" with a value between 1 and 0x1fff inclusive
|
278
238
|
Structure is documented below.
|
279
|
-
:param pulumi.Input['RegionSecurityPolicyRulePreconfiguredWafConfigArgs'] preconfigured_waf_config: Preconfigured WAF configuration to be applied for the rule.
|
280
|
-
If the rule does not evaluate preconfigured WAF rules, i.e., if evaluatePreconfiguredWaf() is not used, this field will have no effect.
|
281
|
-
Structure is documented below.
|
282
239
|
:param pulumi.Input[bool] preview: If set to true, the specified action is not enforced.
|
283
240
|
:param pulumi.Input[int] priority: An integer indicating the priority of a rule in the list.
|
284
241
|
The priority must be a positive value between 0 and 2147483647.
|
285
242
|
Rules are evaluated from highest to lowest priority where 0 is the highest priority and 2147483647 is the lowest priority.
|
286
243
|
:param pulumi.Input[str] project: The ID of the project in which the resource belongs.
|
287
244
|
If it is not provided, the provider project is used.
|
288
|
-
:param pulumi.Input['RegionSecurityPolicyRuleRateLimitOptionsArgs'] rate_limit_options: Must be specified if the action is "rate_based_ban" or "throttle". Cannot be specified for any other actions.
|
289
|
-
Structure is documented below.
|
290
245
|
:param pulumi.Input[str] region: The Region in which the created Region Security Policy rule should reside.
|
291
246
|
:param pulumi.Input[str] security_policy: The name of the security policy this rule belongs to.
|
292
247
|
|
@@ -301,16 +256,12 @@ class _RegionSecurityPolicyRuleState:
|
|
301
256
|
pulumi.set(__self__, "match", match)
|
302
257
|
if network_match is not None:
|
303
258
|
pulumi.set(__self__, "network_match", network_match)
|
304
|
-
if preconfigured_waf_config is not None:
|
305
|
-
pulumi.set(__self__, "preconfigured_waf_config", preconfigured_waf_config)
|
306
259
|
if preview is not None:
|
307
260
|
pulumi.set(__self__, "preview", preview)
|
308
261
|
if priority is not None:
|
309
262
|
pulumi.set(__self__, "priority", priority)
|
310
263
|
if project is not None:
|
311
264
|
pulumi.set(__self__, "project", project)
|
312
|
-
if rate_limit_options is not None:
|
313
|
-
pulumi.set(__self__, "rate_limit_options", rate_limit_options)
|
314
265
|
if region is not None:
|
315
266
|
pulumi.set(__self__, "region", region)
|
316
267
|
if security_policy is not None:
|
@@ -379,20 +330,6 @@ class _RegionSecurityPolicyRuleState:
|
|
379
330
|
def network_match(self, value: Optional[pulumi.Input['RegionSecurityPolicyRuleNetworkMatchArgs']]):
|
380
331
|
pulumi.set(self, "network_match", value)
|
381
332
|
|
382
|
-
@property
|
383
|
-
@pulumi.getter(name="preconfiguredWafConfig")
|
384
|
-
def preconfigured_waf_config(self) -> Optional[pulumi.Input['RegionSecurityPolicyRulePreconfiguredWafConfigArgs']]:
|
385
|
-
"""
|
386
|
-
Preconfigured WAF configuration to be applied for the rule.
|
387
|
-
If the rule does not evaluate preconfigured WAF rules, i.e., if evaluatePreconfiguredWaf() is not used, this field will have no effect.
|
388
|
-
Structure is documented below.
|
389
|
-
"""
|
390
|
-
return pulumi.get(self, "preconfigured_waf_config")
|
391
|
-
|
392
|
-
@preconfigured_waf_config.setter
|
393
|
-
def preconfigured_waf_config(self, value: Optional[pulumi.Input['RegionSecurityPolicyRulePreconfiguredWafConfigArgs']]):
|
394
|
-
pulumi.set(self, "preconfigured_waf_config", value)
|
395
|
-
|
396
333
|
@property
|
397
334
|
@pulumi.getter
|
398
335
|
def preview(self) -> Optional[pulumi.Input[bool]]:
|
@@ -432,19 +369,6 @@ class _RegionSecurityPolicyRuleState:
|
|
432
369
|
def project(self, value: Optional[pulumi.Input[str]]):
|
433
370
|
pulumi.set(self, "project", value)
|
434
371
|
|
435
|
-
@property
|
436
|
-
@pulumi.getter(name="rateLimitOptions")
|
437
|
-
def rate_limit_options(self) -> Optional[pulumi.Input['RegionSecurityPolicyRuleRateLimitOptionsArgs']]:
|
438
|
-
"""
|
439
|
-
Must be specified if the action is "rate_based_ban" or "throttle". Cannot be specified for any other actions.
|
440
|
-
Structure is documented below.
|
441
|
-
"""
|
442
|
-
return pulumi.get(self, "rate_limit_options")
|
443
|
-
|
444
|
-
@rate_limit_options.setter
|
445
|
-
def rate_limit_options(self, value: Optional[pulumi.Input['RegionSecurityPolicyRuleRateLimitOptionsArgs']]):
|
446
|
-
pulumi.set(self, "rate_limit_options", value)
|
447
|
-
|
448
372
|
@property
|
449
373
|
@pulumi.getter
|
450
374
|
def region(self) -> Optional[pulumi.Input[str]]:
|
@@ -482,11 +406,9 @@ class RegionSecurityPolicyRule(pulumi.CustomResource):
|
|
482
406
|
description: Optional[pulumi.Input[str]] = None,
|
483
407
|
match: Optional[pulumi.Input[pulumi.InputType['RegionSecurityPolicyRuleMatchArgs']]] = None,
|
484
408
|
network_match: Optional[pulumi.Input[pulumi.InputType['RegionSecurityPolicyRuleNetworkMatchArgs']]] = None,
|
485
|
-
preconfigured_waf_config: Optional[pulumi.Input[pulumi.InputType['RegionSecurityPolicyRulePreconfiguredWafConfigArgs']]] = None,
|
486
409
|
preview: Optional[pulumi.Input[bool]] = None,
|
487
410
|
priority: Optional[pulumi.Input[int]] = None,
|
488
411
|
project: Optional[pulumi.Input[str]] = None,
|
489
|
-
rate_limit_options: Optional[pulumi.Input[pulumi.InputType['RegionSecurityPolicyRuleRateLimitOptionsArgs']]] = None,
|
490
412
|
region: Optional[pulumi.Input[str]] = None,
|
491
413
|
security_policy: Optional[pulumi.Input[str]] = None,
|
492
414
|
__props__=None):
|
@@ -559,63 +481,6 @@ class RegionSecurityPolicyRule(pulumi.CustomResource):
|
|
559
481
|
action="allow",
|
560
482
|
preview=True)
|
561
483
|
```
|
562
|
-
### Region Security Policy Rule With Preconfigured Waf Config
|
563
|
-
|
564
|
-
```python
|
565
|
-
import pulumi
|
566
|
-
import pulumi_gcp as gcp
|
567
|
-
|
568
|
-
default = gcp.compute.RegionSecurityPolicy("default",
|
569
|
-
region="asia-southeast1",
|
570
|
-
name="policyruletest",
|
571
|
-
description="basic region security policy",
|
572
|
-
type="CLOUD_ARMOR")
|
573
|
-
policy_rule = gcp.compute.RegionSecurityPolicyRule("policy_rule",
|
574
|
-
region="asia-southeast1",
|
575
|
-
security_policy=default.name,
|
576
|
-
description="new rule",
|
577
|
-
priority=100,
|
578
|
-
match=gcp.compute.RegionSecurityPolicyRuleMatchArgs(
|
579
|
-
versioned_expr="SRC_IPS_V1",
|
580
|
-
config=gcp.compute.RegionSecurityPolicyRuleMatchConfigArgs(
|
581
|
-
src_ip_ranges=["10.10.0.0/16"],
|
582
|
-
),
|
583
|
-
),
|
584
|
-
preconfigured_waf_config=gcp.compute.RegionSecurityPolicyRulePreconfiguredWafConfigArgs(
|
585
|
-
exclusions=[
|
586
|
-
gcp.compute.RegionSecurityPolicyRulePreconfiguredWafConfigExclusionArgs(
|
587
|
-
request_uris=[gcp.compute.RegionSecurityPolicyRulePreconfiguredWafConfigExclusionRequestUriArgs(
|
588
|
-
operator="STARTS_WITH",
|
589
|
-
value="/admin",
|
590
|
-
)],
|
591
|
-
target_rule_set="rce-stable",
|
592
|
-
),
|
593
|
-
gcp.compute.RegionSecurityPolicyRulePreconfiguredWafConfigExclusionArgs(
|
594
|
-
request_query_params=[
|
595
|
-
gcp.compute.RegionSecurityPolicyRulePreconfiguredWafConfigExclusionRequestQueryParamArgs(
|
596
|
-
operator="CONTAINS",
|
597
|
-
value="password",
|
598
|
-
),
|
599
|
-
gcp.compute.RegionSecurityPolicyRulePreconfiguredWafConfigExclusionRequestQueryParamArgs(
|
600
|
-
operator="STARTS_WITH",
|
601
|
-
value="freeform",
|
602
|
-
),
|
603
|
-
gcp.compute.RegionSecurityPolicyRulePreconfiguredWafConfigExclusionRequestQueryParamArgs(
|
604
|
-
operator="EQUALS",
|
605
|
-
value="description",
|
606
|
-
),
|
607
|
-
],
|
608
|
-
target_rule_set="xss-stable",
|
609
|
-
target_rule_ids=[
|
610
|
-
"owasp-crs-v030001-id941330-xss",
|
611
|
-
"owasp-crs-v030001-id941340-xss",
|
612
|
-
],
|
613
|
-
),
|
614
|
-
],
|
615
|
-
),
|
616
|
-
action="allow",
|
617
|
-
preview=True)
|
618
|
-
```
|
619
484
|
### Region Security Policy Rule With Network Match
|
620
485
|
|
621
486
|
```python
|
@@ -716,17 +581,12 @@ class RegionSecurityPolicyRule(pulumi.CustomResource):
|
|
716
581
|
networkMatch: srcIpRanges: - "192.0.2.0/24" - "198.51.100.0/24" userDefinedFields: - name: "ipv4_fragment_offset" values: - "1-0x1fff"
|
717
582
|
The above match condition matches packets with a source IP in 192.0.2.0/24 or 198.51.100.0/24 and a user-defined field named "ipv4_fragment_offset" with a value between 1 and 0x1fff inclusive
|
718
583
|
Structure is documented below.
|
719
|
-
:param pulumi.Input[pulumi.InputType['RegionSecurityPolicyRulePreconfiguredWafConfigArgs']] preconfigured_waf_config: Preconfigured WAF configuration to be applied for the rule.
|
720
|
-
If the rule does not evaluate preconfigured WAF rules, i.e., if evaluatePreconfiguredWaf() is not used, this field will have no effect.
|
721
|
-
Structure is documented below.
|
722
584
|
:param pulumi.Input[bool] preview: If set to true, the specified action is not enforced.
|
723
585
|
:param pulumi.Input[int] priority: An integer indicating the priority of a rule in the list.
|
724
586
|
The priority must be a positive value between 0 and 2147483647.
|
725
587
|
Rules are evaluated from highest to lowest priority where 0 is the highest priority and 2147483647 is the lowest priority.
|
726
588
|
:param pulumi.Input[str] project: The ID of the project in which the resource belongs.
|
727
589
|
If it is not provided, the provider project is used.
|
728
|
-
:param pulumi.Input[pulumi.InputType['RegionSecurityPolicyRuleRateLimitOptionsArgs']] rate_limit_options: Must be specified if the action is "rate_based_ban" or "throttle". Cannot be specified for any other actions.
|
729
|
-
Structure is documented below.
|
730
590
|
:param pulumi.Input[str] region: The Region in which the created Region Security Policy rule should reside.
|
731
591
|
:param pulumi.Input[str] security_policy: The name of the security policy this rule belongs to.
|
732
592
|
|
@@ -808,63 +668,6 @@ class RegionSecurityPolicyRule(pulumi.CustomResource):
|
|
808
668
|
action="allow",
|
809
669
|
preview=True)
|
810
670
|
```
|
811
|
-
### Region Security Policy Rule With Preconfigured Waf Config
|
812
|
-
|
813
|
-
```python
|
814
|
-
import pulumi
|
815
|
-
import pulumi_gcp as gcp
|
816
|
-
|
817
|
-
default = gcp.compute.RegionSecurityPolicy("default",
|
818
|
-
region="asia-southeast1",
|
819
|
-
name="policyruletest",
|
820
|
-
description="basic region security policy",
|
821
|
-
type="CLOUD_ARMOR")
|
822
|
-
policy_rule = gcp.compute.RegionSecurityPolicyRule("policy_rule",
|
823
|
-
region="asia-southeast1",
|
824
|
-
security_policy=default.name,
|
825
|
-
description="new rule",
|
826
|
-
priority=100,
|
827
|
-
match=gcp.compute.RegionSecurityPolicyRuleMatchArgs(
|
828
|
-
versioned_expr="SRC_IPS_V1",
|
829
|
-
config=gcp.compute.RegionSecurityPolicyRuleMatchConfigArgs(
|
830
|
-
src_ip_ranges=["10.10.0.0/16"],
|
831
|
-
),
|
832
|
-
),
|
833
|
-
preconfigured_waf_config=gcp.compute.RegionSecurityPolicyRulePreconfiguredWafConfigArgs(
|
834
|
-
exclusions=[
|
835
|
-
gcp.compute.RegionSecurityPolicyRulePreconfiguredWafConfigExclusionArgs(
|
836
|
-
request_uris=[gcp.compute.RegionSecurityPolicyRulePreconfiguredWafConfigExclusionRequestUriArgs(
|
837
|
-
operator="STARTS_WITH",
|
838
|
-
value="/admin",
|
839
|
-
)],
|
840
|
-
target_rule_set="rce-stable",
|
841
|
-
),
|
842
|
-
gcp.compute.RegionSecurityPolicyRulePreconfiguredWafConfigExclusionArgs(
|
843
|
-
request_query_params=[
|
844
|
-
gcp.compute.RegionSecurityPolicyRulePreconfiguredWafConfigExclusionRequestQueryParamArgs(
|
845
|
-
operator="CONTAINS",
|
846
|
-
value="password",
|
847
|
-
),
|
848
|
-
gcp.compute.RegionSecurityPolicyRulePreconfiguredWafConfigExclusionRequestQueryParamArgs(
|
849
|
-
operator="STARTS_WITH",
|
850
|
-
value="freeform",
|
851
|
-
),
|
852
|
-
gcp.compute.RegionSecurityPolicyRulePreconfiguredWafConfigExclusionRequestQueryParamArgs(
|
853
|
-
operator="EQUALS",
|
854
|
-
value="description",
|
855
|
-
),
|
856
|
-
],
|
857
|
-
target_rule_set="xss-stable",
|
858
|
-
target_rule_ids=[
|
859
|
-
"owasp-crs-v030001-id941330-xss",
|
860
|
-
"owasp-crs-v030001-id941340-xss",
|
861
|
-
],
|
862
|
-
),
|
863
|
-
],
|
864
|
-
),
|
865
|
-
action="allow",
|
866
|
-
preview=True)
|
867
|
-
```
|
868
671
|
### Region Security Policy Rule With Network Match
|
869
672
|
|
870
673
|
```python
|
@@ -963,11 +766,9 @@ class RegionSecurityPolicyRule(pulumi.CustomResource):
|
|
963
766
|
description: Optional[pulumi.Input[str]] = None,
|
964
767
|
match: Optional[pulumi.Input[pulumi.InputType['RegionSecurityPolicyRuleMatchArgs']]] = None,
|
965
768
|
network_match: Optional[pulumi.Input[pulumi.InputType['RegionSecurityPolicyRuleNetworkMatchArgs']]] = None,
|
966
|
-
preconfigured_waf_config: Optional[pulumi.Input[pulumi.InputType['RegionSecurityPolicyRulePreconfiguredWafConfigArgs']]] = None,
|
967
769
|
preview: Optional[pulumi.Input[bool]] = None,
|
968
770
|
priority: Optional[pulumi.Input[int]] = None,
|
969
771
|
project: Optional[pulumi.Input[str]] = None,
|
970
|
-
rate_limit_options: Optional[pulumi.Input[pulumi.InputType['RegionSecurityPolicyRuleRateLimitOptionsArgs']]] = None,
|
971
772
|
region: Optional[pulumi.Input[str]] = None,
|
972
773
|
security_policy: Optional[pulumi.Input[str]] = None,
|
973
774
|
__props__=None):
|
@@ -985,13 +786,11 @@ class RegionSecurityPolicyRule(pulumi.CustomResource):
|
|
985
786
|
__props__.__dict__["description"] = description
|
986
787
|
__props__.__dict__["match"] = match
|
987
788
|
__props__.__dict__["network_match"] = network_match
|
988
|
-
__props__.__dict__["preconfigured_waf_config"] = preconfigured_waf_config
|
989
789
|
__props__.__dict__["preview"] = preview
|
990
790
|
if priority is None and not opts.urn:
|
991
791
|
raise TypeError("Missing required property 'priority'")
|
992
792
|
__props__.__dict__["priority"] = priority
|
993
793
|
__props__.__dict__["project"] = project
|
994
|
-
__props__.__dict__["rate_limit_options"] = rate_limit_options
|
995
794
|
if region is None and not opts.urn:
|
996
795
|
raise TypeError("Missing required property 'region'")
|
997
796
|
__props__.__dict__["region"] = region
|
@@ -1012,11 +811,9 @@ class RegionSecurityPolicyRule(pulumi.CustomResource):
|
|
1012
811
|
description: Optional[pulumi.Input[str]] = None,
|
1013
812
|
match: Optional[pulumi.Input[pulumi.InputType['RegionSecurityPolicyRuleMatchArgs']]] = None,
|
1014
813
|
network_match: Optional[pulumi.Input[pulumi.InputType['RegionSecurityPolicyRuleNetworkMatchArgs']]] = None,
|
1015
|
-
preconfigured_waf_config: Optional[pulumi.Input[pulumi.InputType['RegionSecurityPolicyRulePreconfiguredWafConfigArgs']]] = None,
|
1016
814
|
preview: Optional[pulumi.Input[bool]] = None,
|
1017
815
|
priority: Optional[pulumi.Input[int]] = None,
|
1018
816
|
project: Optional[pulumi.Input[str]] = None,
|
1019
|
-
rate_limit_options: Optional[pulumi.Input[pulumi.InputType['RegionSecurityPolicyRuleRateLimitOptionsArgs']]] = None,
|
1020
817
|
region: Optional[pulumi.Input[str]] = None,
|
1021
818
|
security_policy: Optional[pulumi.Input[str]] = None) -> 'RegionSecurityPolicyRule':
|
1022
819
|
"""
|
@@ -1045,17 +842,12 @@ class RegionSecurityPolicyRule(pulumi.CustomResource):
|
|
1045
842
|
networkMatch: srcIpRanges: - "192.0.2.0/24" - "198.51.100.0/24" userDefinedFields: - name: "ipv4_fragment_offset" values: - "1-0x1fff"
|
1046
843
|
The above match condition matches packets with a source IP in 192.0.2.0/24 or 198.51.100.0/24 and a user-defined field named "ipv4_fragment_offset" with a value between 1 and 0x1fff inclusive
|
1047
844
|
Structure is documented below.
|
1048
|
-
:param pulumi.Input[pulumi.InputType['RegionSecurityPolicyRulePreconfiguredWafConfigArgs']] preconfigured_waf_config: Preconfigured WAF configuration to be applied for the rule.
|
1049
|
-
If the rule does not evaluate preconfigured WAF rules, i.e., if evaluatePreconfiguredWaf() is not used, this field will have no effect.
|
1050
|
-
Structure is documented below.
|
1051
845
|
:param pulumi.Input[bool] preview: If set to true, the specified action is not enforced.
|
1052
846
|
:param pulumi.Input[int] priority: An integer indicating the priority of a rule in the list.
|
1053
847
|
The priority must be a positive value between 0 and 2147483647.
|
1054
848
|
Rules are evaluated from highest to lowest priority where 0 is the highest priority and 2147483647 is the lowest priority.
|
1055
849
|
:param pulumi.Input[str] project: The ID of the project in which the resource belongs.
|
1056
850
|
If it is not provided, the provider project is used.
|
1057
|
-
:param pulumi.Input[pulumi.InputType['RegionSecurityPolicyRuleRateLimitOptionsArgs']] rate_limit_options: Must be specified if the action is "rate_based_ban" or "throttle". Cannot be specified for any other actions.
|
1058
|
-
Structure is documented below.
|
1059
851
|
:param pulumi.Input[str] region: The Region in which the created Region Security Policy rule should reside.
|
1060
852
|
:param pulumi.Input[str] security_policy: The name of the security policy this rule belongs to.
|
1061
853
|
|
@@ -1070,11 +862,9 @@ class RegionSecurityPolicyRule(pulumi.CustomResource):
|
|
1070
862
|
__props__.__dict__["description"] = description
|
1071
863
|
__props__.__dict__["match"] = match
|
1072
864
|
__props__.__dict__["network_match"] = network_match
|
1073
|
-
__props__.__dict__["preconfigured_waf_config"] = preconfigured_waf_config
|
1074
865
|
__props__.__dict__["preview"] = preview
|
1075
866
|
__props__.__dict__["priority"] = priority
|
1076
867
|
__props__.__dict__["project"] = project
|
1077
|
-
__props__.__dict__["rate_limit_options"] = rate_limit_options
|
1078
868
|
__props__.__dict__["region"] = region
|
1079
869
|
__props__.__dict__["security_policy"] = security_policy
|
1080
870
|
return RegionSecurityPolicyRule(resource_name, opts=opts, __props__=__props__)
|
@@ -1126,16 +916,6 @@ class RegionSecurityPolicyRule(pulumi.CustomResource):
|
|
1126
916
|
"""
|
1127
917
|
return pulumi.get(self, "network_match")
|
1128
918
|
|
1129
|
-
@property
|
1130
|
-
@pulumi.getter(name="preconfiguredWafConfig")
|
1131
|
-
def preconfigured_waf_config(self) -> pulumi.Output[Optional['outputs.RegionSecurityPolicyRulePreconfiguredWafConfig']]:
|
1132
|
-
"""
|
1133
|
-
Preconfigured WAF configuration to be applied for the rule.
|
1134
|
-
If the rule does not evaluate preconfigured WAF rules, i.e., if evaluatePreconfiguredWaf() is not used, this field will have no effect.
|
1135
|
-
Structure is documented below.
|
1136
|
-
"""
|
1137
|
-
return pulumi.get(self, "preconfigured_waf_config")
|
1138
|
-
|
1139
919
|
@property
|
1140
920
|
@pulumi.getter
|
1141
921
|
def preview(self) -> pulumi.Output[Optional[bool]]:
|
@@ -1163,15 +943,6 @@ class RegionSecurityPolicyRule(pulumi.CustomResource):
|
|
1163
943
|
"""
|
1164
944
|
return pulumi.get(self, "project")
|
1165
945
|
|
1166
|
-
@property
|
1167
|
-
@pulumi.getter(name="rateLimitOptions")
|
1168
|
-
def rate_limit_options(self) -> pulumi.Output[Optional['outputs.RegionSecurityPolicyRuleRateLimitOptions']]:
|
1169
|
-
"""
|
1170
|
-
Must be specified if the action is "rate_based_ban" or "throttle". Cannot be specified for any other actions.
|
1171
|
-
Structure is documented below.
|
1172
|
-
"""
|
1173
|
-
return pulumi.get(self, "rate_limit_options")
|
1174
|
-
|
1175
946
|
@property
|
1176
947
|
@pulumi.getter
|
1177
948
|
def region(self) -> pulumi.Output[str]:
|
pulumi_gcp/container/_inputs.py
CHANGED
@@ -4551,18 +4551,14 @@ class ClusterDefaultSnatStatusArgs:
|
|
4551
4551
|
@pulumi.input_type
|
4552
4552
|
class ClusterDnsConfigArgs:
|
4553
4553
|
def __init__(__self__, *,
|
4554
|
-
additive_vpc_scope_dns_domain: Optional[pulumi.Input[str]] = None,
|
4555
4554
|
cluster_dns: Optional[pulumi.Input[str]] = None,
|
4556
4555
|
cluster_dns_domain: Optional[pulumi.Input[str]] = None,
|
4557
4556
|
cluster_dns_scope: Optional[pulumi.Input[str]] = None):
|
4558
4557
|
"""
|
4559
|
-
:param pulumi.Input[str] additive_vpc_scope_dns_domain: This will enable Cloud DNS additive VPC scope. Must provide a domain name that is unique within the VPC. For this to work `cluster_dns = "CLOUD_DNS"` and `cluster_dns_scope = "CLUSTER_SCOPE"` must both be set as well.
|
4560
4558
|
:param pulumi.Input[str] cluster_dns: Which in-cluster DNS provider should be used. `PROVIDER_UNSPECIFIED` (default) or `PLATFORM_DEFAULT` or `CLOUD_DNS`.
|
4561
4559
|
:param pulumi.Input[str] cluster_dns_domain: The suffix used for all cluster service records.
|
4562
4560
|
:param pulumi.Input[str] cluster_dns_scope: The scope of access to cluster DNS records. `DNS_SCOPE_UNSPECIFIED` (default) or `CLUSTER_SCOPE` or `VPC_SCOPE`.
|
4563
4561
|
"""
|
4564
|
-
if additive_vpc_scope_dns_domain is not None:
|
4565
|
-
pulumi.set(__self__, "additive_vpc_scope_dns_domain", additive_vpc_scope_dns_domain)
|
4566
4562
|
if cluster_dns is not None:
|
4567
4563
|
pulumi.set(__self__, "cluster_dns", cluster_dns)
|
4568
4564
|
if cluster_dns_domain is not None:
|
@@ -4570,18 +4566,6 @@ class ClusterDnsConfigArgs:
|
|
4570
4566
|
if cluster_dns_scope is not None:
|
4571
4567
|
pulumi.set(__self__, "cluster_dns_scope", cluster_dns_scope)
|
4572
4568
|
|
4573
|
-
@property
|
4574
|
-
@pulumi.getter(name="additiveVpcScopeDnsDomain")
|
4575
|
-
def additive_vpc_scope_dns_domain(self) -> Optional[pulumi.Input[str]]:
|
4576
|
-
"""
|
4577
|
-
This will enable Cloud DNS additive VPC scope. Must provide a domain name that is unique within the VPC. For this to work `cluster_dns = "CLOUD_DNS"` and `cluster_dns_scope = "CLUSTER_SCOPE"` must both be set as well.
|
4578
|
-
"""
|
4579
|
-
return pulumi.get(self, "additive_vpc_scope_dns_domain")
|
4580
|
-
|
4581
|
-
@additive_vpc_scope_dns_domain.setter
|
4582
|
-
def additive_vpc_scope_dns_domain(self, value: Optional[pulumi.Input[str]]):
|
4583
|
-
pulumi.set(self, "additive_vpc_scope_dns_domain", value)
|
4584
|
-
|
4585
4569
|
@property
|
4586
4570
|
@pulumi.getter(name="clusterDns")
|
4587
4571
|
def cluster_dns(self) -> Optional[pulumi.Input[str]]:
|
@@ -6461,15 +6445,11 @@ class ClusterNodeConfigArgs:
|
|
6461
6445
|
@pulumi.input_type
|
6462
6446
|
class ClusterNodeConfigAdvancedMachineFeaturesArgs:
|
6463
6447
|
def __init__(__self__, *,
|
6464
|
-
threads_per_core: pulumi.Input[int]
|
6465
|
-
enable_nested_virtualization: Optional[pulumi.Input[bool]] = None):
|
6448
|
+
threads_per_core: pulumi.Input[int]):
|
6466
6449
|
"""
|
6467
6450
|
:param pulumi.Input[int] threads_per_core: The number of threads per physical core. To disable simultaneous multithreading (SMT) set this to 1. If unset, the maximum number of threads supported per core by the underlying processor is assumed.
|
6468
|
-
:param pulumi.Input[bool] enable_nested_virtualization: Defines whether the instance should have nested virtualization enabled. Defaults to false.
|
6469
6451
|
"""
|
6470
6452
|
pulumi.set(__self__, "threads_per_core", threads_per_core)
|
6471
|
-
if enable_nested_virtualization is not None:
|
6472
|
-
pulumi.set(__self__, "enable_nested_virtualization", enable_nested_virtualization)
|
6473
6453
|
|
6474
6454
|
@property
|
6475
6455
|
@pulumi.getter(name="threadsPerCore")
|
@@ -6483,18 +6463,6 @@ class ClusterNodeConfigAdvancedMachineFeaturesArgs:
|
|
6483
6463
|
def threads_per_core(self, value: pulumi.Input[int]):
|
6484
6464
|
pulumi.set(self, "threads_per_core", value)
|
6485
6465
|
|
6486
|
-
@property
|
6487
|
-
@pulumi.getter(name="enableNestedVirtualization")
|
6488
|
-
def enable_nested_virtualization(self) -> Optional[pulumi.Input[bool]]:
|
6489
|
-
"""
|
6490
|
-
Defines whether the instance should have nested virtualization enabled. Defaults to false.
|
6491
|
-
"""
|
6492
|
-
return pulumi.get(self, "enable_nested_virtualization")
|
6493
|
-
|
6494
|
-
@enable_nested_virtualization.setter
|
6495
|
-
def enable_nested_virtualization(self, value: Optional[pulumi.Input[bool]]):
|
6496
|
-
pulumi.set(self, "enable_nested_virtualization", value)
|
6497
|
-
|
6498
6466
|
|
6499
6467
|
@pulumi.input_type
|
6500
6468
|
class ClusterNodeConfigConfidentialNodesArgs:
|
@@ -8981,15 +8949,11 @@ class ClusterNodePoolNodeConfigArgs:
|
|
8981
8949
|
@pulumi.input_type
|
8982
8950
|
class ClusterNodePoolNodeConfigAdvancedMachineFeaturesArgs:
|
8983
8951
|
def __init__(__self__, *,
|
8984
|
-
threads_per_core: pulumi.Input[int]
|
8985
|
-
enable_nested_virtualization: Optional[pulumi.Input[bool]] = None):
|
8952
|
+
threads_per_core: pulumi.Input[int]):
|
8986
8953
|
"""
|
8987
8954
|
:param pulumi.Input[int] threads_per_core: The number of threads per physical core. To disable simultaneous multithreading (SMT) set this to 1. If unset, the maximum number of threads supported per core by the underlying processor is assumed.
|
8988
|
-
:param pulumi.Input[bool] enable_nested_virtualization: Defines whether the instance should have nested virtualization enabled. Defaults to false.
|
8989
8955
|
"""
|
8990
8956
|
pulumi.set(__self__, "threads_per_core", threads_per_core)
|
8991
|
-
if enable_nested_virtualization is not None:
|
8992
|
-
pulumi.set(__self__, "enable_nested_virtualization", enable_nested_virtualization)
|
8993
8957
|
|
8994
8958
|
@property
|
8995
8959
|
@pulumi.getter(name="threadsPerCore")
|
@@ -9003,18 +8967,6 @@ class ClusterNodePoolNodeConfigAdvancedMachineFeaturesArgs:
|
|
9003
8967
|
def threads_per_core(self, value: pulumi.Input[int]):
|
9004
8968
|
pulumi.set(self, "threads_per_core", value)
|
9005
8969
|
|
9006
|
-
@property
|
9007
|
-
@pulumi.getter(name="enableNestedVirtualization")
|
9008
|
-
def enable_nested_virtualization(self) -> Optional[pulumi.Input[bool]]:
|
9009
|
-
"""
|
9010
|
-
Defines whether the instance should have nested virtualization enabled. Defaults to false.
|
9011
|
-
"""
|
9012
|
-
return pulumi.get(self, "enable_nested_virtualization")
|
9013
|
-
|
9014
|
-
@enable_nested_virtualization.setter
|
9015
|
-
def enable_nested_virtualization(self, value: Optional[pulumi.Input[bool]]):
|
9016
|
-
pulumi.set(self, "enable_nested_virtualization", value)
|
9017
|
-
|
9018
8970
|
|
9019
8971
|
@pulumi.input_type
|
9020
8972
|
class ClusterNodePoolNodeConfigConfidentialNodesArgs:
|
@@ -11860,15 +11812,11 @@ class NodePoolNodeConfigArgs:
|
|
11860
11812
|
@pulumi.input_type
|
11861
11813
|
class NodePoolNodeConfigAdvancedMachineFeaturesArgs:
|
11862
11814
|
def __init__(__self__, *,
|
11863
|
-
threads_per_core: pulumi.Input[int]
|
11864
|
-
enable_nested_virtualization: Optional[pulumi.Input[bool]] = None):
|
11815
|
+
threads_per_core: pulumi.Input[int]):
|
11865
11816
|
"""
|
11866
11817
|
:param pulumi.Input[int] threads_per_core: The number of threads per physical core. To disable simultaneous multithreading (SMT) set this to 1. If unset, the maximum number of threads supported per core by the underlying processor is assumed.
|
11867
|
-
:param pulumi.Input[bool] enable_nested_virtualization: Whether the node should have nested virtualization enabled.
|
11868
11818
|
"""
|
11869
11819
|
pulumi.set(__self__, "threads_per_core", threads_per_core)
|
11870
|
-
if enable_nested_virtualization is not None:
|
11871
|
-
pulumi.set(__self__, "enable_nested_virtualization", enable_nested_virtualization)
|
11872
11820
|
|
11873
11821
|
@property
|
11874
11822
|
@pulumi.getter(name="threadsPerCore")
|
@@ -11882,18 +11830,6 @@ class NodePoolNodeConfigAdvancedMachineFeaturesArgs:
|
|
11882
11830
|
def threads_per_core(self, value: pulumi.Input[int]):
|
11883
11831
|
pulumi.set(self, "threads_per_core", value)
|
11884
11832
|
|
11885
|
-
@property
|
11886
|
-
@pulumi.getter(name="enableNestedVirtualization")
|
11887
|
-
def enable_nested_virtualization(self) -> Optional[pulumi.Input[bool]]:
|
11888
|
-
"""
|
11889
|
-
Whether the node should have nested virtualization enabled.
|
11890
|
-
"""
|
11891
|
-
return pulumi.get(self, "enable_nested_virtualization")
|
11892
|
-
|
11893
|
-
@enable_nested_virtualization.setter
|
11894
|
-
def enable_nested_virtualization(self, value: Optional[pulumi.Input[bool]]):
|
11895
|
-
pulumi.set(self, "enable_nested_virtualization", value)
|
11896
|
-
|
11897
11833
|
|
11898
11834
|
@pulumi.input_type
|
11899
11835
|
class NodePoolNodeConfigConfidentialNodesArgs:
|