pulumi-gcp 7.24.0a1715926460__py3-none-any.whl → 7.24.0a1716510380__py3-none-any.whl
This diff represents the content of publicly available package versions that have been released to one of the supported registries. The information contained in this diff is provided for informational purposes only and reflects changes between package versions as they appear in their respective public registries.
- pulumi_gcp/bigquery/_inputs.py +16 -0
- pulumi_gcp/bigquery/dataset_access.py +56 -0
- pulumi_gcp/bigquery/outputs.py +16 -0
- pulumi_gcp/cloudfunctions/function.py +21 -0
- pulumi_gcp/compute/_inputs.py +280 -0
- pulumi_gcp/compute/backend_service.py +315 -0
- pulumi_gcp/compute/outputs.py +288 -0
- pulumi_gcp/compute/region_backend_service.py +315 -0
- pulumi_gcp/compute/router_peer.py +88 -0
- pulumi_gcp/compute/security_policy.py +49 -0
- pulumi_gcp/container/_inputs.py +12 -0
- pulumi_gcp/container/outputs.py +12 -0
- pulumi_gcp/dataproc/_inputs.py +120 -46
- pulumi_gcp/dataproc/outputs.py +120 -46
- pulumi_gcp/networkservices/_inputs.py +18 -0
- pulumi_gcp/networkservices/outputs.py +18 -0
- pulumi_gcp/organizations/_inputs.py +10 -0
- pulumi_gcp/organizations/outputs.py +10 -0
- pulumi_gcp/pulumi-plugin.json +1 -1
- {pulumi_gcp-7.24.0a1715926460.dist-info → pulumi_gcp-7.24.0a1716510380.dist-info}/METADATA +1 -1
- {pulumi_gcp-7.24.0a1715926460.dist-info → pulumi_gcp-7.24.0a1716510380.dist-info}/RECORD +23 -23
- {pulumi_gcp-7.24.0a1715926460.dist-info → pulumi_gcp-7.24.0a1716510380.dist-info}/WHEEL +0 -0
- {pulumi_gcp-7.24.0a1715926460.dist-info → pulumi_gcp-7.24.0a1716510380.dist-info}/top_level.txt +0 -0
@@ -89,6 +89,51 @@ class RegionBackendServiceArgs:
|
|
89
89
|
Possible values are: `EXTERNAL`, `EXTERNAL_MANAGED`, `INTERNAL`, `INTERNAL_MANAGED`.
|
90
90
|
:param pulumi.Input[str] locality_lb_policy: The load balancing algorithm used within the scope of the locality.
|
91
91
|
The possible values are:
|
92
|
+
* `ROUND_ROBIN`: This is a simple policy in which each healthy backend
|
93
|
+
is selected in round robin order.
|
94
|
+
* `LEAST_REQUEST`: An O(1) algorithm which selects two random healthy
|
95
|
+
hosts and picks the host which has fewer active requests.
|
96
|
+
* `RING_HASH`: The ring/modulo hash load balancer implements consistent
|
97
|
+
hashing to backends. The algorithm has the property that the
|
98
|
+
addition/removal of a host from a set of N hosts only affects
|
99
|
+
1/N of the requests.
|
100
|
+
* `RANDOM`: The load balancer selects a random healthy host.
|
101
|
+
* `ORIGINAL_DESTINATION`: Backend host is selected based on the client
|
102
|
+
connection metadata, i.e., connections are opened
|
103
|
+
to the same address as the destination address of
|
104
|
+
the incoming connection before the connection
|
105
|
+
was redirected to the load balancer.
|
106
|
+
* `MAGLEV`: used as a drop in replacement for the ring hash load balancer.
|
107
|
+
Maglev is not as stable as ring hash but has faster table lookup
|
108
|
+
build times and host selection times. For more information about
|
109
|
+
Maglev, refer to https://ai.google/research/pubs/pub44824
|
110
|
+
* `WEIGHTED_MAGLEV`: Per-instance weighted Load Balancing via health check
|
111
|
+
reported weights. If set, the Backend Service must
|
112
|
+
configure a non legacy HTTP-based Health Check, and
|
113
|
+
health check replies are expected to contain
|
114
|
+
non-standard HTTP response header field
|
115
|
+
X-Load-Balancing-Endpoint-Weight to specify the
|
116
|
+
per-instance weights. If set, Load Balancing is weight
|
117
|
+
based on the per-instance weights reported in the last
|
118
|
+
processed health check replies, as long as every
|
119
|
+
instance either reported a valid weight or had
|
120
|
+
UNAVAILABLE_WEIGHT. Otherwise, Load Balancing remains
|
121
|
+
equal-weight.
|
122
|
+
|
123
|
+
This field is applicable to either:
|
124
|
+
* A regional backend service with the service_protocol set to HTTP, HTTPS, or HTTP2,
|
125
|
+
and loadBalancingScheme set to INTERNAL_MANAGED.
|
126
|
+
* A global backend service with the load_balancing_scheme set to INTERNAL_SELF_MANAGED.
|
127
|
+
* A regional backend service with loadBalancingScheme set to EXTERNAL (External Network
|
128
|
+
Load Balancing). Only MAGLEV and WEIGHTED_MAGLEV values are possible for External
|
129
|
+
Network Load Balancing. The default is MAGLEV.
|
130
|
+
|
131
|
+
If session_affinity is not NONE, and this field is not set to MAGLEV, WEIGHTED_MAGLEV,
|
132
|
+
or RING_HASH, session affinity settings will not take effect.
|
133
|
+
Only ROUND_ROBIN and RING_HASH are supported when the backend service is referenced
|
134
|
+
by a URL map that is bound to target gRPC proxy that has validate_for_proxyless
|
135
|
+
field set to true.
|
136
|
+
Possible values are: `ROUND_ROBIN`, `LEAST_REQUEST`, `RING_HASH`, `RANDOM`, `ORIGINAL_DESTINATION`, `MAGLEV`, `WEIGHTED_MAGLEV`.
|
92
137
|
:param pulumi.Input['RegionBackendServiceLogConfigArgs'] log_config: This field denotes the logging options for the load balancer traffic served by this backend service.
|
93
138
|
If logging is enabled, logs will be exported to Stackdriver.
|
94
139
|
Structure is documented below.
|
@@ -377,6 +422,51 @@ class RegionBackendServiceArgs:
|
|
377
422
|
"""
|
378
423
|
The load balancing algorithm used within the scope of the locality.
|
379
424
|
The possible values are:
|
425
|
+
* `ROUND_ROBIN`: This is a simple policy in which each healthy backend
|
426
|
+
is selected in round robin order.
|
427
|
+
* `LEAST_REQUEST`: An O(1) algorithm which selects two random healthy
|
428
|
+
hosts and picks the host which has fewer active requests.
|
429
|
+
* `RING_HASH`: The ring/modulo hash load balancer implements consistent
|
430
|
+
hashing to backends. The algorithm has the property that the
|
431
|
+
addition/removal of a host from a set of N hosts only affects
|
432
|
+
1/N of the requests.
|
433
|
+
* `RANDOM`: The load balancer selects a random healthy host.
|
434
|
+
* `ORIGINAL_DESTINATION`: Backend host is selected based on the client
|
435
|
+
connection metadata, i.e., connections are opened
|
436
|
+
to the same address as the destination address of
|
437
|
+
the incoming connection before the connection
|
438
|
+
was redirected to the load balancer.
|
439
|
+
* `MAGLEV`: used as a drop in replacement for the ring hash load balancer.
|
440
|
+
Maglev is not as stable as ring hash but has faster table lookup
|
441
|
+
build times and host selection times. For more information about
|
442
|
+
Maglev, refer to https://ai.google/research/pubs/pub44824
|
443
|
+
* `WEIGHTED_MAGLEV`: Per-instance weighted Load Balancing via health check
|
444
|
+
reported weights. If set, the Backend Service must
|
445
|
+
configure a non legacy HTTP-based Health Check, and
|
446
|
+
health check replies are expected to contain
|
447
|
+
non-standard HTTP response header field
|
448
|
+
X-Load-Balancing-Endpoint-Weight to specify the
|
449
|
+
per-instance weights. If set, Load Balancing is weight
|
450
|
+
based on the per-instance weights reported in the last
|
451
|
+
processed health check replies, as long as every
|
452
|
+
instance either reported a valid weight or had
|
453
|
+
UNAVAILABLE_WEIGHT. Otherwise, Load Balancing remains
|
454
|
+
equal-weight.
|
455
|
+
|
456
|
+
This field is applicable to either:
|
457
|
+
* A regional backend service with the service_protocol set to HTTP, HTTPS, or HTTP2,
|
458
|
+
and loadBalancingScheme set to INTERNAL_MANAGED.
|
459
|
+
* A global backend service with the load_balancing_scheme set to INTERNAL_SELF_MANAGED.
|
460
|
+
* A regional backend service with loadBalancingScheme set to EXTERNAL (External Network
|
461
|
+
Load Balancing). Only MAGLEV and WEIGHTED_MAGLEV values are possible for External
|
462
|
+
Network Load Balancing. The default is MAGLEV.
|
463
|
+
|
464
|
+
If session_affinity is not NONE, and this field is not set to MAGLEV, WEIGHTED_MAGLEV,
|
465
|
+
or RING_HASH, session affinity settings will not take effect.
|
466
|
+
Only ROUND_ROBIN and RING_HASH are supported when the backend service is referenced
|
467
|
+
by a URL map that is bound to target gRPC proxy that has validate_for_proxyless
|
468
|
+
field set to true.
|
469
|
+
Possible values are: `ROUND_ROBIN`, `LEAST_REQUEST`, `RING_HASH`, `RANDOM`, `ORIGINAL_DESTINATION`, `MAGLEV`, `WEIGHTED_MAGLEV`.
|
380
470
|
"""
|
381
471
|
return pulumi.get(self, "locality_lb_policy")
|
382
472
|
|
@@ -643,6 +733,51 @@ class _RegionBackendServiceState:
|
|
643
733
|
Possible values are: `EXTERNAL`, `EXTERNAL_MANAGED`, `INTERNAL`, `INTERNAL_MANAGED`.
|
644
734
|
:param pulumi.Input[str] locality_lb_policy: The load balancing algorithm used within the scope of the locality.
|
645
735
|
The possible values are:
|
736
|
+
* `ROUND_ROBIN`: This is a simple policy in which each healthy backend
|
737
|
+
is selected in round robin order.
|
738
|
+
* `LEAST_REQUEST`: An O(1) algorithm which selects two random healthy
|
739
|
+
hosts and picks the host which has fewer active requests.
|
740
|
+
* `RING_HASH`: The ring/modulo hash load balancer implements consistent
|
741
|
+
hashing to backends. The algorithm has the property that the
|
742
|
+
addition/removal of a host from a set of N hosts only affects
|
743
|
+
1/N of the requests.
|
744
|
+
* `RANDOM`: The load balancer selects a random healthy host.
|
745
|
+
* `ORIGINAL_DESTINATION`: Backend host is selected based on the client
|
746
|
+
connection metadata, i.e., connections are opened
|
747
|
+
to the same address as the destination address of
|
748
|
+
the incoming connection before the connection
|
749
|
+
was redirected to the load balancer.
|
750
|
+
* `MAGLEV`: used as a drop in replacement for the ring hash load balancer.
|
751
|
+
Maglev is not as stable as ring hash but has faster table lookup
|
752
|
+
build times and host selection times. For more information about
|
753
|
+
Maglev, refer to https://ai.google/research/pubs/pub44824
|
754
|
+
* `WEIGHTED_MAGLEV`: Per-instance weighted Load Balancing via health check
|
755
|
+
reported weights. If set, the Backend Service must
|
756
|
+
configure a non legacy HTTP-based Health Check, and
|
757
|
+
health check replies are expected to contain
|
758
|
+
non-standard HTTP response header field
|
759
|
+
X-Load-Balancing-Endpoint-Weight to specify the
|
760
|
+
per-instance weights. If set, Load Balancing is weight
|
761
|
+
based on the per-instance weights reported in the last
|
762
|
+
processed health check replies, as long as every
|
763
|
+
instance either reported a valid weight or had
|
764
|
+
UNAVAILABLE_WEIGHT. Otherwise, Load Balancing remains
|
765
|
+
equal-weight.
|
766
|
+
|
767
|
+
This field is applicable to either:
|
768
|
+
* A regional backend service with the service_protocol set to HTTP, HTTPS, or HTTP2,
|
769
|
+
and loadBalancingScheme set to INTERNAL_MANAGED.
|
770
|
+
* A global backend service with the load_balancing_scheme set to INTERNAL_SELF_MANAGED.
|
771
|
+
* A regional backend service with loadBalancingScheme set to EXTERNAL (External Network
|
772
|
+
Load Balancing). Only MAGLEV and WEIGHTED_MAGLEV values are possible for External
|
773
|
+
Network Load Balancing. The default is MAGLEV.
|
774
|
+
|
775
|
+
If session_affinity is not NONE, and this field is not set to MAGLEV, WEIGHTED_MAGLEV,
|
776
|
+
or RING_HASH, session affinity settings will not take effect.
|
777
|
+
Only ROUND_ROBIN and RING_HASH are supported when the backend service is referenced
|
778
|
+
by a URL map that is bound to target gRPC proxy that has validate_for_proxyless
|
779
|
+
field set to true.
|
780
|
+
Possible values are: `ROUND_ROBIN`, `LEAST_REQUEST`, `RING_HASH`, `RANDOM`, `ORIGINAL_DESTINATION`, `MAGLEV`, `WEIGHTED_MAGLEV`.
|
646
781
|
:param pulumi.Input['RegionBackendServiceLogConfigArgs'] log_config: This field denotes the logging options for the load balancer traffic served by this backend service.
|
647
782
|
If logging is enabled, logs will be exported to Stackdriver.
|
648
783
|
Structure is documented below.
|
@@ -977,6 +1112,51 @@ class _RegionBackendServiceState:
|
|
977
1112
|
"""
|
978
1113
|
The load balancing algorithm used within the scope of the locality.
|
979
1114
|
The possible values are:
|
1115
|
+
* `ROUND_ROBIN`: This is a simple policy in which each healthy backend
|
1116
|
+
is selected in round robin order.
|
1117
|
+
* `LEAST_REQUEST`: An O(1) algorithm which selects two random healthy
|
1118
|
+
hosts and picks the host which has fewer active requests.
|
1119
|
+
* `RING_HASH`: The ring/modulo hash load balancer implements consistent
|
1120
|
+
hashing to backends. The algorithm has the property that the
|
1121
|
+
addition/removal of a host from a set of N hosts only affects
|
1122
|
+
1/N of the requests.
|
1123
|
+
* `RANDOM`: The load balancer selects a random healthy host.
|
1124
|
+
* `ORIGINAL_DESTINATION`: Backend host is selected based on the client
|
1125
|
+
connection metadata, i.e., connections are opened
|
1126
|
+
to the same address as the destination address of
|
1127
|
+
the incoming connection before the connection
|
1128
|
+
was redirected to the load balancer.
|
1129
|
+
* `MAGLEV`: used as a drop in replacement for the ring hash load balancer.
|
1130
|
+
Maglev is not as stable as ring hash but has faster table lookup
|
1131
|
+
build times and host selection times. For more information about
|
1132
|
+
Maglev, refer to https://ai.google/research/pubs/pub44824
|
1133
|
+
* `WEIGHTED_MAGLEV`: Per-instance weighted Load Balancing via health check
|
1134
|
+
reported weights. If set, the Backend Service must
|
1135
|
+
configure a non legacy HTTP-based Health Check, and
|
1136
|
+
health check replies are expected to contain
|
1137
|
+
non-standard HTTP response header field
|
1138
|
+
X-Load-Balancing-Endpoint-Weight to specify the
|
1139
|
+
per-instance weights. If set, Load Balancing is weight
|
1140
|
+
based on the per-instance weights reported in the last
|
1141
|
+
processed health check replies, as long as every
|
1142
|
+
instance either reported a valid weight or had
|
1143
|
+
UNAVAILABLE_WEIGHT. Otherwise, Load Balancing remains
|
1144
|
+
equal-weight.
|
1145
|
+
|
1146
|
+
This field is applicable to either:
|
1147
|
+
* A regional backend service with the service_protocol set to HTTP, HTTPS, or HTTP2,
|
1148
|
+
and loadBalancingScheme set to INTERNAL_MANAGED.
|
1149
|
+
* A global backend service with the load_balancing_scheme set to INTERNAL_SELF_MANAGED.
|
1150
|
+
* A regional backend service with loadBalancingScheme set to EXTERNAL (External Network
|
1151
|
+
Load Balancing). Only MAGLEV and WEIGHTED_MAGLEV values are possible for External
|
1152
|
+
Network Load Balancing. The default is MAGLEV.
|
1153
|
+
|
1154
|
+
If session_affinity is not NONE, and this field is not set to MAGLEV, WEIGHTED_MAGLEV,
|
1155
|
+
or RING_HASH, session affinity settings will not take effect.
|
1156
|
+
Only ROUND_ROBIN and RING_HASH are supported when the backend service is referenced
|
1157
|
+
by a URL map that is bound to target gRPC proxy that has validate_for_proxyless
|
1158
|
+
field set to true.
|
1159
|
+
Possible values are: `ROUND_ROBIN`, `LEAST_REQUEST`, `RING_HASH`, `RANDOM`, `ORIGINAL_DESTINATION`, `MAGLEV`, `WEIGHTED_MAGLEV`.
|
980
1160
|
"""
|
981
1161
|
return pulumi.get(self, "locality_lb_policy")
|
982
1162
|
|
@@ -1538,6 +1718,51 @@ class RegionBackendService(pulumi.CustomResource):
|
|
1538
1718
|
Possible values are: `EXTERNAL`, `EXTERNAL_MANAGED`, `INTERNAL`, `INTERNAL_MANAGED`.
|
1539
1719
|
:param pulumi.Input[str] locality_lb_policy: The load balancing algorithm used within the scope of the locality.
|
1540
1720
|
The possible values are:
|
1721
|
+
* `ROUND_ROBIN`: This is a simple policy in which each healthy backend
|
1722
|
+
is selected in round robin order.
|
1723
|
+
* `LEAST_REQUEST`: An O(1) algorithm which selects two random healthy
|
1724
|
+
hosts and picks the host which has fewer active requests.
|
1725
|
+
* `RING_HASH`: The ring/modulo hash load balancer implements consistent
|
1726
|
+
hashing to backends. The algorithm has the property that the
|
1727
|
+
addition/removal of a host from a set of N hosts only affects
|
1728
|
+
1/N of the requests.
|
1729
|
+
* `RANDOM`: The load balancer selects a random healthy host.
|
1730
|
+
* `ORIGINAL_DESTINATION`: Backend host is selected based on the client
|
1731
|
+
connection metadata, i.e., connections are opened
|
1732
|
+
to the same address as the destination address of
|
1733
|
+
the incoming connection before the connection
|
1734
|
+
was redirected to the load balancer.
|
1735
|
+
* `MAGLEV`: used as a drop in replacement for the ring hash load balancer.
|
1736
|
+
Maglev is not as stable as ring hash but has faster table lookup
|
1737
|
+
build times and host selection times. For more information about
|
1738
|
+
Maglev, refer to https://ai.google/research/pubs/pub44824
|
1739
|
+
* `WEIGHTED_MAGLEV`: Per-instance weighted Load Balancing via health check
|
1740
|
+
reported weights. If set, the Backend Service must
|
1741
|
+
configure a non legacy HTTP-based Health Check, and
|
1742
|
+
health check replies are expected to contain
|
1743
|
+
non-standard HTTP response header field
|
1744
|
+
X-Load-Balancing-Endpoint-Weight to specify the
|
1745
|
+
per-instance weights. If set, Load Balancing is weight
|
1746
|
+
based on the per-instance weights reported in the last
|
1747
|
+
processed health check replies, as long as every
|
1748
|
+
instance either reported a valid weight or had
|
1749
|
+
UNAVAILABLE_WEIGHT. Otherwise, Load Balancing remains
|
1750
|
+
equal-weight.
|
1751
|
+
|
1752
|
+
This field is applicable to either:
|
1753
|
+
* A regional backend service with the service_protocol set to HTTP, HTTPS, or HTTP2,
|
1754
|
+
and loadBalancingScheme set to INTERNAL_MANAGED.
|
1755
|
+
* A global backend service with the load_balancing_scheme set to INTERNAL_SELF_MANAGED.
|
1756
|
+
* A regional backend service with loadBalancingScheme set to EXTERNAL (External Network
|
1757
|
+
Load Balancing). Only MAGLEV and WEIGHTED_MAGLEV values are possible for External
|
1758
|
+
Network Load Balancing. The default is MAGLEV.
|
1759
|
+
|
1760
|
+
If session_affinity is not NONE, and this field is not set to MAGLEV, WEIGHTED_MAGLEV,
|
1761
|
+
or RING_HASH, session affinity settings will not take effect.
|
1762
|
+
Only ROUND_ROBIN and RING_HASH are supported when the backend service is referenced
|
1763
|
+
by a URL map that is bound to target gRPC proxy that has validate_for_proxyless
|
1764
|
+
field set to true.
|
1765
|
+
Possible values are: `ROUND_ROBIN`, `LEAST_REQUEST`, `RING_HASH`, `RANDOM`, `ORIGINAL_DESTINATION`, `MAGLEV`, `WEIGHTED_MAGLEV`.
|
1541
1766
|
:param pulumi.Input[pulumi.InputType['RegionBackendServiceLogConfigArgs']] log_config: This field denotes the logging options for the load balancer traffic served by this backend service.
|
1542
1767
|
If logging is enabled, logs will be exported to Stackdriver.
|
1543
1768
|
Structure is documented below.
|
@@ -2051,6 +2276,51 @@ class RegionBackendService(pulumi.CustomResource):
|
|
2051
2276
|
Possible values are: `EXTERNAL`, `EXTERNAL_MANAGED`, `INTERNAL`, `INTERNAL_MANAGED`.
|
2052
2277
|
:param pulumi.Input[str] locality_lb_policy: The load balancing algorithm used within the scope of the locality.
|
2053
2278
|
The possible values are:
|
2279
|
+
* `ROUND_ROBIN`: This is a simple policy in which each healthy backend
|
2280
|
+
is selected in round robin order.
|
2281
|
+
* `LEAST_REQUEST`: An O(1) algorithm which selects two random healthy
|
2282
|
+
hosts and picks the host which has fewer active requests.
|
2283
|
+
* `RING_HASH`: The ring/modulo hash load balancer implements consistent
|
2284
|
+
hashing to backends. The algorithm has the property that the
|
2285
|
+
addition/removal of a host from a set of N hosts only affects
|
2286
|
+
1/N of the requests.
|
2287
|
+
* `RANDOM`: The load balancer selects a random healthy host.
|
2288
|
+
* `ORIGINAL_DESTINATION`: Backend host is selected based on the client
|
2289
|
+
connection metadata, i.e., connections are opened
|
2290
|
+
to the same address as the destination address of
|
2291
|
+
the incoming connection before the connection
|
2292
|
+
was redirected to the load balancer.
|
2293
|
+
* `MAGLEV`: used as a drop in replacement for the ring hash load balancer.
|
2294
|
+
Maglev is not as stable as ring hash but has faster table lookup
|
2295
|
+
build times and host selection times. For more information about
|
2296
|
+
Maglev, refer to https://ai.google/research/pubs/pub44824
|
2297
|
+
* `WEIGHTED_MAGLEV`: Per-instance weighted Load Balancing via health check
|
2298
|
+
reported weights. If set, the Backend Service must
|
2299
|
+
configure a non legacy HTTP-based Health Check, and
|
2300
|
+
health check replies are expected to contain
|
2301
|
+
non-standard HTTP response header field
|
2302
|
+
X-Load-Balancing-Endpoint-Weight to specify the
|
2303
|
+
per-instance weights. If set, Load Balancing is weight
|
2304
|
+
based on the per-instance weights reported in the last
|
2305
|
+
processed health check replies, as long as every
|
2306
|
+
instance either reported a valid weight or had
|
2307
|
+
UNAVAILABLE_WEIGHT. Otherwise, Load Balancing remains
|
2308
|
+
equal-weight.
|
2309
|
+
|
2310
|
+
This field is applicable to either:
|
2311
|
+
* A regional backend service with the service_protocol set to HTTP, HTTPS, or HTTP2,
|
2312
|
+
and loadBalancingScheme set to INTERNAL_MANAGED.
|
2313
|
+
* A global backend service with the load_balancing_scheme set to INTERNAL_SELF_MANAGED.
|
2314
|
+
* A regional backend service with loadBalancingScheme set to EXTERNAL (External Network
|
2315
|
+
Load Balancing). Only MAGLEV and WEIGHTED_MAGLEV values are possible for External
|
2316
|
+
Network Load Balancing. The default is MAGLEV.
|
2317
|
+
|
2318
|
+
If session_affinity is not NONE, and this field is not set to MAGLEV, WEIGHTED_MAGLEV,
|
2319
|
+
or RING_HASH, session affinity settings will not take effect.
|
2320
|
+
Only ROUND_ROBIN and RING_HASH are supported when the backend service is referenced
|
2321
|
+
by a URL map that is bound to target gRPC proxy that has validate_for_proxyless
|
2322
|
+
field set to true.
|
2323
|
+
Possible values are: `ROUND_ROBIN`, `LEAST_REQUEST`, `RING_HASH`, `RANDOM`, `ORIGINAL_DESTINATION`, `MAGLEV`, `WEIGHTED_MAGLEV`.
|
2054
2324
|
:param pulumi.Input[pulumi.InputType['RegionBackendServiceLogConfigArgs']] log_config: This field denotes the logging options for the load balancer traffic served by this backend service.
|
2055
2325
|
If logging is enabled, logs will be exported to Stackdriver.
|
2056
2326
|
Structure is documented below.
|
@@ -2296,6 +2566,51 @@ class RegionBackendService(pulumi.CustomResource):
|
|
2296
2566
|
"""
|
2297
2567
|
The load balancing algorithm used within the scope of the locality.
|
2298
2568
|
The possible values are:
|
2569
|
+
* `ROUND_ROBIN`: This is a simple policy in which each healthy backend
|
2570
|
+
is selected in round robin order.
|
2571
|
+
* `LEAST_REQUEST`: An O(1) algorithm which selects two random healthy
|
2572
|
+
hosts and picks the host which has fewer active requests.
|
2573
|
+
* `RING_HASH`: The ring/modulo hash load balancer implements consistent
|
2574
|
+
hashing to backends. The algorithm has the property that the
|
2575
|
+
addition/removal of a host from a set of N hosts only affects
|
2576
|
+
1/N of the requests.
|
2577
|
+
* `RANDOM`: The load balancer selects a random healthy host.
|
2578
|
+
* `ORIGINAL_DESTINATION`: Backend host is selected based on the client
|
2579
|
+
connection metadata, i.e., connections are opened
|
2580
|
+
to the same address as the destination address of
|
2581
|
+
the incoming connection before the connection
|
2582
|
+
was redirected to the load balancer.
|
2583
|
+
* `MAGLEV`: used as a drop in replacement for the ring hash load balancer.
|
2584
|
+
Maglev is not as stable as ring hash but has faster table lookup
|
2585
|
+
build times and host selection times. For more information about
|
2586
|
+
Maglev, refer to https://ai.google/research/pubs/pub44824
|
2587
|
+
* `WEIGHTED_MAGLEV`: Per-instance weighted Load Balancing via health check
|
2588
|
+
reported weights. If set, the Backend Service must
|
2589
|
+
configure a non legacy HTTP-based Health Check, and
|
2590
|
+
health check replies are expected to contain
|
2591
|
+
non-standard HTTP response header field
|
2592
|
+
X-Load-Balancing-Endpoint-Weight to specify the
|
2593
|
+
per-instance weights. If set, Load Balancing is weight
|
2594
|
+
based on the per-instance weights reported in the last
|
2595
|
+
processed health check replies, as long as every
|
2596
|
+
instance either reported a valid weight or had
|
2597
|
+
UNAVAILABLE_WEIGHT. Otherwise, Load Balancing remains
|
2598
|
+
equal-weight.
|
2599
|
+
|
2600
|
+
This field is applicable to either:
|
2601
|
+
* A regional backend service with the service_protocol set to HTTP, HTTPS, or HTTP2,
|
2602
|
+
and loadBalancingScheme set to INTERNAL_MANAGED.
|
2603
|
+
* A global backend service with the load_balancing_scheme set to INTERNAL_SELF_MANAGED.
|
2604
|
+
* A regional backend service with loadBalancingScheme set to EXTERNAL (External Network
|
2605
|
+
Load Balancing). Only MAGLEV and WEIGHTED_MAGLEV values are possible for External
|
2606
|
+
Network Load Balancing. The default is MAGLEV.
|
2607
|
+
|
2608
|
+
If session_affinity is not NONE, and this field is not set to MAGLEV, WEIGHTED_MAGLEV,
|
2609
|
+
or RING_HASH, session affinity settings will not take effect.
|
2610
|
+
Only ROUND_ROBIN and RING_HASH are supported when the backend service is referenced
|
2611
|
+
by a URL map that is bound to target gRPC proxy that has validate_for_proxyless
|
2612
|
+
field set to true.
|
2613
|
+
Possible values are: `ROUND_ROBIN`, `LEAST_REQUEST`, `RING_HASH`, `RANDOM`, `ORIGINAL_DESTINATION`, `MAGLEV`, `WEIGHTED_MAGLEV`.
|
2299
2614
|
"""
|
2300
2615
|
return pulumi.get(self, "locality_lb_policy")
|
2301
2616
|
|
@@ -53,6 +53,14 @@ class RouterPeerArgs:
|
|
53
53
|
Possible values are: `DEFAULT`, `CUSTOM`.
|
54
54
|
:param pulumi.Input[Sequence[pulumi.Input[str]]] advertised_groups: User-specified list of prefix groups to advertise in custom
|
55
55
|
mode, which currently supports the following option:
|
56
|
+
* `ALL_SUBNETS`: Advertises all of the router's own VPC subnets.
|
57
|
+
This excludes any routes learned for subnets that use VPC Network
|
58
|
+
Peering.
|
59
|
+
|
60
|
+
Note that this field can only be populated if advertiseMode is `CUSTOM`
|
61
|
+
and overrides the list defined for the router (in the "bgp" message).
|
62
|
+
These groups are advertised in addition to any specified prefixes.
|
63
|
+
Leave this field blank to advertise no custom groups.
|
56
64
|
:param pulumi.Input[Sequence[pulumi.Input['RouterPeerAdvertisedIpRangeArgs']]] advertised_ip_ranges: User-specified list of individual IP ranges to advertise in
|
57
65
|
custom mode. This field can only be populated if advertiseMode
|
58
66
|
is `CUSTOM` and is advertised to all peers of the router. These IP
|
@@ -204,6 +212,14 @@ class RouterPeerArgs:
|
|
204
212
|
"""
|
205
213
|
User-specified list of prefix groups to advertise in custom
|
206
214
|
mode, which currently supports the following option:
|
215
|
+
* `ALL_SUBNETS`: Advertises all of the router's own VPC subnets.
|
216
|
+
This excludes any routes learned for subnets that use VPC Network
|
217
|
+
Peering.
|
218
|
+
|
219
|
+
Note that this field can only be populated if advertiseMode is `CUSTOM`
|
220
|
+
and overrides the list defined for the router (in the "bgp" message).
|
221
|
+
These groups are advertised in addition to any specified prefixes.
|
222
|
+
Leave this field blank to advertise no custom groups.
|
207
223
|
"""
|
208
224
|
return pulumi.get(self, "advertised_groups")
|
209
225
|
|
@@ -480,6 +496,14 @@ class _RouterPeerState:
|
|
480
496
|
Possible values are: `DEFAULT`, `CUSTOM`.
|
481
497
|
:param pulumi.Input[Sequence[pulumi.Input[str]]] advertised_groups: User-specified list of prefix groups to advertise in custom
|
482
498
|
mode, which currently supports the following option:
|
499
|
+
* `ALL_SUBNETS`: Advertises all of the router's own VPC subnets.
|
500
|
+
This excludes any routes learned for subnets that use VPC Network
|
501
|
+
Peering.
|
502
|
+
|
503
|
+
Note that this field can only be populated if advertiseMode is `CUSTOM`
|
504
|
+
and overrides the list defined for the router (in the "bgp" message).
|
505
|
+
These groups are advertised in addition to any specified prefixes.
|
506
|
+
Leave this field blank to advertise no custom groups.
|
483
507
|
:param pulumi.Input[Sequence[pulumi.Input['RouterPeerAdvertisedIpRangeArgs']]] advertised_ip_ranges: User-specified list of individual IP ranges to advertise in
|
484
508
|
custom mode. This field can only be populated if advertiseMode
|
485
509
|
is `CUSTOM` and is advertised to all peers of the router. These IP
|
@@ -506,6 +530,14 @@ class _RouterPeerState:
|
|
506
530
|
If you do not specify the next hop addresses, Google Cloud automatically
|
507
531
|
assigns unused addresses from the 2600:2d00:0:2::/64 or 2600:2d00:0:3::/64 range for you.
|
508
532
|
:param pulumi.Input[str] management_type: The resource that configures and manages this BGP peer.
|
533
|
+
* `MANAGED_BY_USER` is the default value and can be managed by
|
534
|
+
you or other users
|
535
|
+
* `MANAGED_BY_ATTACHMENT` is a BGP peer that is configured and
|
536
|
+
managed by Cloud Interconnect, specifically by an
|
537
|
+
InterconnectAttachment of type PARTNER. Google automatically
|
538
|
+
creates, updates, and deletes this type of BGP peer when the
|
539
|
+
PARTNER InterconnectAttachment is created, updated,
|
540
|
+
or deleted.
|
509
541
|
:param pulumi.Input['RouterPeerMd5AuthenticationKeyArgs'] md5_authentication_key: Configuration for MD5 authentication on the BGP session.
|
510
542
|
Structure is documented below.
|
511
543
|
:param pulumi.Input[str] name: Name of this BGP peer. The name must be 1-63 characters long,
|
@@ -604,6 +636,14 @@ class _RouterPeerState:
|
|
604
636
|
"""
|
605
637
|
User-specified list of prefix groups to advertise in custom
|
606
638
|
mode, which currently supports the following option:
|
639
|
+
* `ALL_SUBNETS`: Advertises all of the router's own VPC subnets.
|
640
|
+
This excludes any routes learned for subnets that use VPC Network
|
641
|
+
Peering.
|
642
|
+
|
643
|
+
Note that this field can only be populated if advertiseMode is `CUSTOM`
|
644
|
+
and overrides the list defined for the router (in the "bgp" message).
|
645
|
+
These groups are advertised in addition to any specified prefixes.
|
646
|
+
Leave this field blank to advertise no custom groups.
|
607
647
|
"""
|
608
648
|
return pulumi.get(self, "advertised_groups")
|
609
649
|
|
@@ -751,6 +791,14 @@ class _RouterPeerState:
|
|
751
791
|
def management_type(self) -> Optional[pulumi.Input[str]]:
|
752
792
|
"""
|
753
793
|
The resource that configures and manages this BGP peer.
|
794
|
+
* `MANAGED_BY_USER` is the default value and can be managed by
|
795
|
+
you or other users
|
796
|
+
* `MANAGED_BY_ATTACHMENT` is a BGP peer that is configured and
|
797
|
+
managed by Cloud Interconnect, specifically by an
|
798
|
+
InterconnectAttachment of type PARTNER. Google automatically
|
799
|
+
creates, updates, and deletes this type of BGP peer when the
|
800
|
+
PARTNER InterconnectAttachment is created, updated,
|
801
|
+
or deleted.
|
754
802
|
"""
|
755
803
|
return pulumi.get(self, "management_type")
|
756
804
|
|
@@ -1134,6 +1182,14 @@ class RouterPeer(pulumi.CustomResource):
|
|
1134
1182
|
Possible values are: `DEFAULT`, `CUSTOM`.
|
1135
1183
|
:param pulumi.Input[Sequence[pulumi.Input[str]]] advertised_groups: User-specified list of prefix groups to advertise in custom
|
1136
1184
|
mode, which currently supports the following option:
|
1185
|
+
* `ALL_SUBNETS`: Advertises all of the router's own VPC subnets.
|
1186
|
+
This excludes any routes learned for subnets that use VPC Network
|
1187
|
+
Peering.
|
1188
|
+
|
1189
|
+
Note that this field can only be populated if advertiseMode is `CUSTOM`
|
1190
|
+
and overrides the list defined for the router (in the "bgp" message).
|
1191
|
+
These groups are advertised in addition to any specified prefixes.
|
1192
|
+
Leave this field blank to advertise no custom groups.
|
1137
1193
|
:param pulumi.Input[Sequence[pulumi.Input[pulumi.InputType['RouterPeerAdvertisedIpRangeArgs']]]] advertised_ip_ranges: User-specified list of individual IP ranges to advertise in
|
1138
1194
|
custom mode. This field can only be populated if advertiseMode
|
1139
1195
|
is `CUSTOM` and is advertised to all peers of the router. These IP
|
@@ -1516,6 +1572,14 @@ class RouterPeer(pulumi.CustomResource):
|
|
1516
1572
|
Possible values are: `DEFAULT`, `CUSTOM`.
|
1517
1573
|
:param pulumi.Input[Sequence[pulumi.Input[str]]] advertised_groups: User-specified list of prefix groups to advertise in custom
|
1518
1574
|
mode, which currently supports the following option:
|
1575
|
+
* `ALL_SUBNETS`: Advertises all of the router's own VPC subnets.
|
1576
|
+
This excludes any routes learned for subnets that use VPC Network
|
1577
|
+
Peering.
|
1578
|
+
|
1579
|
+
Note that this field can only be populated if advertiseMode is `CUSTOM`
|
1580
|
+
and overrides the list defined for the router (in the "bgp" message).
|
1581
|
+
These groups are advertised in addition to any specified prefixes.
|
1582
|
+
Leave this field blank to advertise no custom groups.
|
1519
1583
|
:param pulumi.Input[Sequence[pulumi.Input[pulumi.InputType['RouterPeerAdvertisedIpRangeArgs']]]] advertised_ip_ranges: User-specified list of individual IP ranges to advertise in
|
1520
1584
|
custom mode. This field can only be populated if advertiseMode
|
1521
1585
|
is `CUSTOM` and is advertised to all peers of the router. These IP
|
@@ -1542,6 +1606,14 @@ class RouterPeer(pulumi.CustomResource):
|
|
1542
1606
|
If you do not specify the next hop addresses, Google Cloud automatically
|
1543
1607
|
assigns unused addresses from the 2600:2d00:0:2::/64 or 2600:2d00:0:3::/64 range for you.
|
1544
1608
|
:param pulumi.Input[str] management_type: The resource that configures and manages this BGP peer.
|
1609
|
+
* `MANAGED_BY_USER` is the default value and can be managed by
|
1610
|
+
you or other users
|
1611
|
+
* `MANAGED_BY_ATTACHMENT` is a BGP peer that is configured and
|
1612
|
+
managed by Cloud Interconnect, specifically by an
|
1613
|
+
InterconnectAttachment of type PARTNER. Google automatically
|
1614
|
+
creates, updates, and deletes this type of BGP peer when the
|
1615
|
+
PARTNER InterconnectAttachment is created, updated,
|
1616
|
+
or deleted.
|
1545
1617
|
:param pulumi.Input[pulumi.InputType['RouterPeerMd5AuthenticationKeyArgs']] md5_authentication_key: Configuration for MD5 authentication on the BGP session.
|
1546
1618
|
Structure is documented below.
|
1547
1619
|
:param pulumi.Input[str] name: Name of this BGP peer. The name must be 1-63 characters long,
|
@@ -1618,6 +1690,14 @@ class RouterPeer(pulumi.CustomResource):
|
|
1618
1690
|
"""
|
1619
1691
|
User-specified list of prefix groups to advertise in custom
|
1620
1692
|
mode, which currently supports the following option:
|
1693
|
+
* `ALL_SUBNETS`: Advertises all of the router's own VPC subnets.
|
1694
|
+
This excludes any routes learned for subnets that use VPC Network
|
1695
|
+
Peering.
|
1696
|
+
|
1697
|
+
Note that this field can only be populated if advertiseMode is `CUSTOM`
|
1698
|
+
and overrides the list defined for the router (in the "bgp" message).
|
1699
|
+
These groups are advertised in addition to any specified prefixes.
|
1700
|
+
Leave this field blank to advertise no custom groups.
|
1621
1701
|
"""
|
1622
1702
|
return pulumi.get(self, "advertised_groups")
|
1623
1703
|
|
@@ -1721,6 +1801,14 @@ class RouterPeer(pulumi.CustomResource):
|
|
1721
1801
|
def management_type(self) -> pulumi.Output[str]:
|
1722
1802
|
"""
|
1723
1803
|
The resource that configures and manages this BGP peer.
|
1804
|
+
* `MANAGED_BY_USER` is the default value and can be managed by
|
1805
|
+
you or other users
|
1806
|
+
* `MANAGED_BY_ATTACHMENT` is a BGP peer that is configured and
|
1807
|
+
managed by Cloud Interconnect, specifically by an
|
1808
|
+
InterconnectAttachment of type PARTNER. Google automatically
|
1809
|
+
creates, updates, and deletes this type of BGP peer when the
|
1810
|
+
PARTNER InterconnectAttachment is created, updated,
|
1811
|
+
or deleted.
|
1724
1812
|
"""
|
1725
1813
|
return pulumi.get(self, "management_type")
|
1726
1814
|
|
@@ -40,6 +40,13 @@ class SecurityPolicyArgs:
|
|
40
40
|
rule (rule with priority 2147483647 and match "\\*"). If no rules are provided when creating a
|
41
41
|
security policy, a default rule with action "allow" will be added. Structure is documented below.
|
42
42
|
:param pulumi.Input[str] type: The type indicates the intended use of the security policy. This field can be set only at resource creation time.
|
43
|
+
* `CLOUD_ARMOR` - Cloud Armor backend security policies can be configured to filter incoming HTTP requests targeting backend services.
|
44
|
+
They filter requests before they hit the origin servers.
|
45
|
+
* `CLOUD_ARMOR_EDGE` - Cloud Armor edge security policies can be configured to filter incoming HTTP requests targeting backend services
|
46
|
+
(including Cloud CDN-enabled) as well as backend buckets (Cloud Storage).
|
47
|
+
They filter requests before the request is served from Google's cache.
|
48
|
+
* `CLOUD_ARMOR_INTERNAL_SERVICE` - Cloud Armor internal service policies can be configured to filter HTTP requests targeting services
|
49
|
+
managed by Traffic Director in a service mesh. They filter requests before the request is served from the application.
|
43
50
|
"""
|
44
51
|
if adaptive_protection_config is not None:
|
45
52
|
pulumi.set(__self__, "adaptive_protection_config", adaptive_protection_config)
|
@@ -153,6 +160,13 @@ class SecurityPolicyArgs:
|
|
153
160
|
def type(self) -> Optional[pulumi.Input[str]]:
|
154
161
|
"""
|
155
162
|
The type indicates the intended use of the security policy. This field can be set only at resource creation time.
|
163
|
+
* `CLOUD_ARMOR` - Cloud Armor backend security policies can be configured to filter incoming HTTP requests targeting backend services.
|
164
|
+
They filter requests before they hit the origin servers.
|
165
|
+
* `CLOUD_ARMOR_EDGE` - Cloud Armor edge security policies can be configured to filter incoming HTTP requests targeting backend services
|
166
|
+
(including Cloud CDN-enabled) as well as backend buckets (Cloud Storage).
|
167
|
+
They filter requests before the request is served from Google's cache.
|
168
|
+
* `CLOUD_ARMOR_INTERNAL_SERVICE` - Cloud Armor internal service policies can be configured to filter HTTP requests targeting services
|
169
|
+
managed by Traffic Director in a service mesh. They filter requests before the request is served from the application.
|
156
170
|
"""
|
157
171
|
return pulumi.get(self, "type")
|
158
172
|
|
@@ -192,6 +206,13 @@ class _SecurityPolicyState:
|
|
192
206
|
security policy, a default rule with action "allow" will be added. Structure is documented below.
|
193
207
|
:param pulumi.Input[str] self_link: The URI of the created resource.
|
194
208
|
:param pulumi.Input[str] type: The type indicates the intended use of the security policy. This field can be set only at resource creation time.
|
209
|
+
* `CLOUD_ARMOR` - Cloud Armor backend security policies can be configured to filter incoming HTTP requests targeting backend services.
|
210
|
+
They filter requests before they hit the origin servers.
|
211
|
+
* `CLOUD_ARMOR_EDGE` - Cloud Armor edge security policies can be configured to filter incoming HTTP requests targeting backend services
|
212
|
+
(including Cloud CDN-enabled) as well as backend buckets (Cloud Storage).
|
213
|
+
They filter requests before the request is served from Google's cache.
|
214
|
+
* `CLOUD_ARMOR_INTERNAL_SERVICE` - Cloud Armor internal service policies can be configured to filter HTTP requests targeting services
|
215
|
+
managed by Traffic Director in a service mesh. They filter requests before the request is served from the application.
|
195
216
|
"""
|
196
217
|
if adaptive_protection_config is not None:
|
197
218
|
pulumi.set(__self__, "adaptive_protection_config", adaptive_protection_config)
|
@@ -333,6 +354,13 @@ class _SecurityPolicyState:
|
|
333
354
|
def type(self) -> Optional[pulumi.Input[str]]:
|
334
355
|
"""
|
335
356
|
The type indicates the intended use of the security policy. This field can be set only at resource creation time.
|
357
|
+
* `CLOUD_ARMOR` - Cloud Armor backend security policies can be configured to filter incoming HTTP requests targeting backend services.
|
358
|
+
They filter requests before they hit the origin servers.
|
359
|
+
* `CLOUD_ARMOR_EDGE` - Cloud Armor edge security policies can be configured to filter incoming HTTP requests targeting backend services
|
360
|
+
(including Cloud CDN-enabled) as well as backend buckets (Cloud Storage).
|
361
|
+
They filter requests before the request is served from Google's cache.
|
362
|
+
* `CLOUD_ARMOR_INTERNAL_SERVICE` - Cloud Armor internal service policies can be configured to filter HTTP requests targeting services
|
363
|
+
managed by Traffic Director in a service mesh. They filter requests before the request is served from the application.
|
336
364
|
"""
|
337
365
|
return pulumi.get(self, "type")
|
338
366
|
|
@@ -545,6 +573,13 @@ class SecurityPolicy(pulumi.CustomResource):
|
|
545
573
|
rule (rule with priority 2147483647 and match "\\*"). If no rules are provided when creating a
|
546
574
|
security policy, a default rule with action "allow" will be added. Structure is documented below.
|
547
575
|
:param pulumi.Input[str] type: The type indicates the intended use of the security policy. This field can be set only at resource creation time.
|
576
|
+
* `CLOUD_ARMOR` - Cloud Armor backend security policies can be configured to filter incoming HTTP requests targeting backend services.
|
577
|
+
They filter requests before they hit the origin servers.
|
578
|
+
* `CLOUD_ARMOR_EDGE` - Cloud Armor edge security policies can be configured to filter incoming HTTP requests targeting backend services
|
579
|
+
(including Cloud CDN-enabled) as well as backend buckets (Cloud Storage).
|
580
|
+
They filter requests before the request is served from Google's cache.
|
581
|
+
* `CLOUD_ARMOR_INTERNAL_SERVICE` - Cloud Armor internal service policies can be configured to filter HTTP requests targeting services
|
582
|
+
managed by Traffic Director in a service mesh. They filter requests before the request is served from the application.
|
548
583
|
"""
|
549
584
|
...
|
550
585
|
@overload
|
@@ -811,6 +846,13 @@ class SecurityPolicy(pulumi.CustomResource):
|
|
811
846
|
security policy, a default rule with action "allow" will be added. Structure is documented below.
|
812
847
|
:param pulumi.Input[str] self_link: The URI of the created resource.
|
813
848
|
:param pulumi.Input[str] type: The type indicates the intended use of the security policy. This field can be set only at resource creation time.
|
849
|
+
* `CLOUD_ARMOR` - Cloud Armor backend security policies can be configured to filter incoming HTTP requests targeting backend services.
|
850
|
+
They filter requests before they hit the origin servers.
|
851
|
+
* `CLOUD_ARMOR_EDGE` - Cloud Armor edge security policies can be configured to filter incoming HTTP requests targeting backend services
|
852
|
+
(including Cloud CDN-enabled) as well as backend buckets (Cloud Storage).
|
853
|
+
They filter requests before the request is served from Google's cache.
|
854
|
+
* `CLOUD_ARMOR_INTERNAL_SERVICE` - Cloud Armor internal service policies can be configured to filter HTTP requests targeting services
|
855
|
+
managed by Traffic Director in a service mesh. They filter requests before the request is served from the application.
|
814
856
|
"""
|
815
857
|
opts = pulumi.ResourceOptions.merge(opts, pulumi.ResourceOptions(id=id))
|
816
858
|
|
@@ -911,6 +953,13 @@ class SecurityPolicy(pulumi.CustomResource):
|
|
911
953
|
def type(self) -> pulumi.Output[str]:
|
912
954
|
"""
|
913
955
|
The type indicates the intended use of the security policy. This field can be set only at resource creation time.
|
956
|
+
* `CLOUD_ARMOR` - Cloud Armor backend security policies can be configured to filter incoming HTTP requests targeting backend services.
|
957
|
+
They filter requests before they hit the origin servers.
|
958
|
+
* `CLOUD_ARMOR_EDGE` - Cloud Armor edge security policies can be configured to filter incoming HTTP requests targeting backend services
|
959
|
+
(including Cloud CDN-enabled) as well as backend buckets (Cloud Storage).
|
960
|
+
They filter requests before the request is served from Google's cache.
|
961
|
+
* `CLOUD_ARMOR_INTERNAL_SERVICE` - Cloud Armor internal service policies can be configured to filter HTTP requests targeting services
|
962
|
+
managed by Traffic Director in a service mesh. They filter requests before the request is served from the application.
|
914
963
|
"""
|
915
964
|
return pulumi.get(self, "type")
|
916
965
|
|