pulumi-gcp 7.24.0a1716510380__py3-none-any.whl → 7.25.0__py3-none-any.whl

pulumi_gcp/networkservices/__init__.py

@@ -12,6 +12,8 @@ from .endpoint_policy import *
 from .gateway import *
 from .grpc_route import *
 from .http_route import *
+from .lb_route_extension import *
+from .lb_traffic_extension import *
 from .mesh import *
 from .service_binding import *
 from .tcp_route import *

pulumi_gcp/networkservices/_inputs.py

@@ -72,6 +72,12 @@ __all__ = [
     'HttpRouteRuleMatchHeaderArgs',
     'HttpRouteRuleMatchHeaderRangeMatchArgs',
     'HttpRouteRuleMatchQueryParameterArgs',
+    'LbRouteExtensionExtensionChainArgs',
+    'LbRouteExtensionExtensionChainExtensionArgs',
+    'LbRouteExtensionExtensionChainMatchConditionArgs',
+    'LbTrafficExtensionExtensionChainArgs',
+    'LbTrafficExtensionExtensionChainExtensionArgs',
+    'LbTrafficExtensionExtensionChainMatchConditionArgs',
     'TcpRouteRuleArgs',
     'TcpRouteRuleActionArgs',
     'TcpRouteRuleActionDestinationArgs',
@@ -4272,6 +4278,454 @@ class HttpRouteRuleMatchQueryParameterArgs:
         pulumi.set(self, "regex_match", value)
 
 
+@pulumi.input_type
+class LbRouteExtensionExtensionChainArgs:
+    def __init__(__self__, *,
+                 extensions: pulumi.Input[Sequence[pulumi.Input['LbRouteExtensionExtensionChainExtensionArgs']]],
+                 match_condition: pulumi.Input['LbRouteExtensionExtensionChainMatchConditionArgs'],
+                 name: pulumi.Input[str]):
+        """
+        :param pulumi.Input[Sequence[pulumi.Input['LbRouteExtensionExtensionChainExtensionArgs']]] extensions: A set of extensions to execute for the matching request.
+               At least one extension is required. Up to 3 extensions can be defined for each extension chain for
+               LbTrafficExtension resource. LbRouteExtension chains are limited to 1 extension per extension chain.
+               Structure is documented below.
+        :param pulumi.Input['LbRouteExtensionExtensionChainMatchConditionArgs'] match_condition: Conditions under which this chain is invoked for a request.
+               Structure is documented below.
+        :param pulumi.Input[str] name: The name for this extension chain. The name is logged as part of the HTTP request logs.
+               The name must conform with RFC-1034, is restricted to lower-cased letters, numbers and hyphens,
+               and can have a maximum length of 63 characters. Additionally, the first character must be a letter
+               and the last character must be a letter or a number.
+        """
+        pulumi.set(__self__, "extensions", extensions)
+        pulumi.set(__self__, "match_condition", match_condition)
+        pulumi.set(__self__, "name", name)
+
+    @property
+    @pulumi.getter
+    def extensions(self) -> pulumi.Input[Sequence[pulumi.Input['LbRouteExtensionExtensionChainExtensionArgs']]]:
+        """
+        A set of extensions to execute for the matching request.
+        At least one extension is required. Up to 3 extensions can be defined for each extension chain for
+        LbTrafficExtension resource. LbRouteExtension chains are limited to 1 extension per extension chain.
+        Structure is documented below.
+        """
+        return pulumi.get(self, "extensions")
+
+    @extensions.setter
+    def extensions(self, value: pulumi.Input[Sequence[pulumi.Input['LbRouteExtensionExtensionChainExtensionArgs']]]):
+        pulumi.set(self, "extensions", value)
+
+    @property
+    @pulumi.getter(name="matchCondition")
+    def match_condition(self) -> pulumi.Input['LbRouteExtensionExtensionChainMatchConditionArgs']:
+        """
+        Conditions under which this chain is invoked for a request.
+        Structure is documented below.
+        """
+        return pulumi.get(self, "match_condition")
+
+    @match_condition.setter
+    def match_condition(self, value: pulumi.Input['LbRouteExtensionExtensionChainMatchConditionArgs']):
+        pulumi.set(self, "match_condition", value)
+
+    @property
+    @pulumi.getter
+    def name(self) -> pulumi.Input[str]:
+        """
+        The name for this extension chain. The name is logged as part of the HTTP request logs.
+        The name must conform with RFC-1034, is restricted to lower-cased letters, numbers and hyphens,
+        and can have a maximum length of 63 characters. Additionally, the first character must be a letter
+        and the last character must be a letter or a number.
+        """
+        return pulumi.get(self, "name")
+
+    @name.setter
+    def name(self, value: pulumi.Input[str]):
+        pulumi.set(self, "name", value)
+
+
+@pulumi.input_type
+class LbRouteExtensionExtensionChainExtensionArgs:
+    def __init__(__self__, *,
+                 name: pulumi.Input[str],
+                 service: pulumi.Input[str],
+                 authority: Optional[pulumi.Input[str]] = None,
+                 fail_open: Optional[pulumi.Input[bool]] = None,
+                 forward_headers: Optional[pulumi.Input[Sequence[pulumi.Input[str]]]] = None,
+                 timeout: Optional[pulumi.Input[str]] = None):
+        """
+        :param pulumi.Input[str] name: The name for this extension. The name is logged as part of the HTTP request logs.
+               The name must conform with RFC-1034, is restricted to lower-cased letters, numbers and hyphens,
+               and can have a maximum length of 63 characters. Additionally, the first character must be a letter
+               and the last a letter or a number.
+        :param pulumi.Input[str] service: The reference to the service that runs the extension. Must be a reference to a backend service
+        :param pulumi.Input[str] authority: The :authority header in the gRPC request sent from Envoy to the extension service.
+        :param pulumi.Input[bool] fail_open: Determines how the proxy behaves if the call to the extension fails or times out.
+               When set to TRUE, request or response processing continues without error.
+               Any subsequent extensions in the extension chain are also executed.
+               When set to FALSE: * If response headers have not been delivered to the downstream client,
+               a generic 500 error is returned to the client. The error response can be tailored by
+               configuring a custom error response in the load balancer.
+        :param pulumi.Input[Sequence[pulumi.Input[str]]] forward_headers: List of the HTTP headers to forward to the extension (from the client or backend).
+               If omitted, all headers are sent. Each element is a string indicating the header name.
+               
+               - - -
+        :param pulumi.Input[str] timeout: Specifies the timeout for each individual message on the stream. The timeout must be between 10-1000 milliseconds.
+               A duration in seconds with up to nine fractional digits, ending with 's'. Example: "3.5s".
+        """
+        pulumi.set(__self__, "name", name)
+        pulumi.set(__self__, "service", service)
+        if authority is not None:
+            pulumi.set(__self__, "authority", authority)
+        if fail_open is not None:
+            pulumi.set(__self__, "fail_open", fail_open)
+        if forward_headers is not None:
+            pulumi.set(__self__, "forward_headers", forward_headers)
+        if timeout is not None:
+            pulumi.set(__self__, "timeout", timeout)
+
+    @property
+    @pulumi.getter
+    def name(self) -> pulumi.Input[str]:
+        """
+        The name for this extension. The name is logged as part of the HTTP request logs.
+        The name must conform with RFC-1034, is restricted to lower-cased letters, numbers and hyphens,
+        and can have a maximum length of 63 characters. Additionally, the first character must be a letter
+        and the last a letter or a number.
+        """
+        return pulumi.get(self, "name")
+
+    @name.setter
+    def name(self, value: pulumi.Input[str]):
+        pulumi.set(self, "name", value)
+
+    @property
+    @pulumi.getter
+    def service(self) -> pulumi.Input[str]:
+        """
+        The reference to the service that runs the extension. Must be a reference to a backend service
+        """
+        return pulumi.get(self, "service")
+
+    @service.setter
+    def service(self, value: pulumi.Input[str]):
+        pulumi.set(self, "service", value)
+
+    @property
+    @pulumi.getter
+    def authority(self) -> Optional[pulumi.Input[str]]:
+        """
+        The :authority header in the gRPC request sent from Envoy to the extension service.
+        """
+        return pulumi.get(self, "authority")
+
+    @authority.setter
+    def authority(self, value: Optional[pulumi.Input[str]]):
+        pulumi.set(self, "authority", value)
+
+    @property
+    @pulumi.getter(name="failOpen")
+    def fail_open(self) -> Optional[pulumi.Input[bool]]:
+        """
+        Determines how the proxy behaves if the call to the extension fails or times out.
+        When set to TRUE, request or response processing continues without error.
+        Any subsequent extensions in the extension chain are also executed.
+        When set to FALSE: * If response headers have not been delivered to the downstream client,
+        a generic 500 error is returned to the client. The error response can be tailored by
+        configuring a custom error response in the load balancer.
+        """
+        return pulumi.get(self, "fail_open")
+
+    @fail_open.setter
+    def fail_open(self, value: Optional[pulumi.Input[bool]]):
+        pulumi.set(self, "fail_open", value)
+
+    @property
+    @pulumi.getter(name="forwardHeaders")
+    def forward_headers(self) -> Optional[pulumi.Input[Sequence[pulumi.Input[str]]]]:
+        """
+        List of the HTTP headers to forward to the extension (from the client or backend).
+        If omitted, all headers are sent. Each element is a string indicating the header name.
+
+        - - -
+        """
+        return pulumi.get(self, "forward_headers")
+
+    @forward_headers.setter
+    def forward_headers(self, value: Optional[pulumi.Input[Sequence[pulumi.Input[str]]]]):
+        pulumi.set(self, "forward_headers", value)
+
+    @property
+    @pulumi.getter
+    def timeout(self) -> Optional[pulumi.Input[str]]:
+        """
+        Specifies the timeout for each individual message on the stream. The timeout must be between 10-1000 milliseconds.
+        A duration in seconds with up to nine fractional digits, ending with 's'. Example: "3.5s".
+        """
+        return pulumi.get(self, "timeout")
+
+    @timeout.setter
+    def timeout(self, value: Optional[pulumi.Input[str]]):
+        pulumi.set(self, "timeout", value)
+
+
+@pulumi.input_type
+class LbRouteExtensionExtensionChainMatchConditionArgs:
+    def __init__(__self__, *,
+                 cel_expression: pulumi.Input[str]):
+        """
+        :param pulumi.Input[str] cel_expression: A Common Expression Language (CEL) expression that is used to match requests for which the extension chain is executed.
+        """
+        pulumi.set(__self__, "cel_expression", cel_expression)
+
+    @property
+    @pulumi.getter(name="celExpression")
+    def cel_expression(self) -> pulumi.Input[str]:
+        """
+        A Common Expression Language (CEL) expression that is used to match requests for which the extension chain is executed.
+        """
+        return pulumi.get(self, "cel_expression")
+
+    @cel_expression.setter
+    def cel_expression(self, value: pulumi.Input[str]):
+        pulumi.set(self, "cel_expression", value)
+
+
+@pulumi.input_type
+class LbTrafficExtensionExtensionChainArgs:
+    def __init__(__self__, *,
+                 extensions: pulumi.Input[Sequence[pulumi.Input['LbTrafficExtensionExtensionChainExtensionArgs']]],
+                 match_condition: pulumi.Input['LbTrafficExtensionExtensionChainMatchConditionArgs'],
+                 name: pulumi.Input[str]):
+        """
+        :param pulumi.Input[Sequence[pulumi.Input['LbTrafficExtensionExtensionChainExtensionArgs']]] extensions: A set of extensions to execute for the matching request.
+               At least one extension is required. Up to 3 extensions can be defined for each extension chain for
+               LbTrafficExtension resource. LbRouteExtension chains are limited to 1 extension per extension chain.
+               Structure is documented below.
+        :param pulumi.Input['LbTrafficExtensionExtensionChainMatchConditionArgs'] match_condition: Conditions under which this chain is invoked for a request.
+               Structure is documented below.
+        :param pulumi.Input[str] name: The name for this extension chain. The name is logged as part of the HTTP request logs.
+               The name must conform with RFC-1034, is restricted to lower-cased letters, numbers and hyphens,
+               and can have a maximum length of 63 characters. Additionally, the first character must be a letter
+               and the last a letter or a number.
+        """
+        pulumi.set(__self__, "extensions", extensions)
+        pulumi.set(__self__, "match_condition", match_condition)
+        pulumi.set(__self__, "name", name)
+
+    @property
+    @pulumi.getter
+    def extensions(self) -> pulumi.Input[Sequence[pulumi.Input['LbTrafficExtensionExtensionChainExtensionArgs']]]:
+        """
+        A set of extensions to execute for the matching request.
+        At least one extension is required. Up to 3 extensions can be defined for each extension chain for
+        LbTrafficExtension resource. LbRouteExtension chains are limited to 1 extension per extension chain.
+        Structure is documented below.
+        """
+        return pulumi.get(self, "extensions")
+
+    @extensions.setter
+    def extensions(self, value: pulumi.Input[Sequence[pulumi.Input['LbTrafficExtensionExtensionChainExtensionArgs']]]):
+        pulumi.set(self, "extensions", value)
+
+    @property
+    @pulumi.getter(name="matchCondition")
+    def match_condition(self) -> pulumi.Input['LbTrafficExtensionExtensionChainMatchConditionArgs']:
+        """
+        Conditions under which this chain is invoked for a request.
+        Structure is documented below.
+        """
+        return pulumi.get(self, "match_condition")
+
+    @match_condition.setter
+    def match_condition(self, value: pulumi.Input['LbTrafficExtensionExtensionChainMatchConditionArgs']):
+        pulumi.set(self, "match_condition", value)
+
+    @property
+    @pulumi.getter
+    def name(self) -> pulumi.Input[str]:
+        """
+        The name for this extension chain. The name is logged as part of the HTTP request logs.
+        The name must conform with RFC-1034, is restricted to lower-cased letters, numbers and hyphens,
+        and can have a maximum length of 63 characters. Additionally, the first character must be a letter
+        and the last a letter or a number.
+        """
+        return pulumi.get(self, "name")
+
+    @name.setter
+    def name(self, value: pulumi.Input[str]):
+        pulumi.set(self, "name", value)
+
+
+@pulumi.input_type
+class LbTrafficExtensionExtensionChainExtensionArgs:
+    def __init__(__self__, *,
+                 name: pulumi.Input[str],
+                 service: pulumi.Input[str],
+                 authority: Optional[pulumi.Input[str]] = None,
+                 fail_open: Optional[pulumi.Input[bool]] = None,
+                 forward_headers: Optional[pulumi.Input[Sequence[pulumi.Input[str]]]] = None,
+                 supported_events: Optional[pulumi.Input[Sequence[pulumi.Input[str]]]] = None,
+                 timeout: Optional[pulumi.Input[str]] = None):
+        """
+        :param pulumi.Input[str] name: The name for this extension. The name is logged as part of the HTTP request logs.
+               The name must conform with RFC-1034, is restricted to lower-cased letters, numbers and hyphens,
+               and can have a maximum length of 63 characters. Additionally, the first character must be a letter
+               and the last a letter or a number.
+        :param pulumi.Input[str] service: The reference to the service that runs the extension. Must be a reference to a backend service
+        :param pulumi.Input[str] authority: The :authority header in the gRPC request sent from Envoy to the extension service.
+        :param pulumi.Input[bool] fail_open: Determines how the proxy behaves if the call to the extension fails or times out.
+               When set to TRUE, request or response processing continues without error.
+               Any subsequent extensions in the extension chain are also executed.
+               When set to FALSE: * If response headers have not been delivered to the downstream client,
+               a generic 500 error is returned to the client. The error response can be tailored by
+               configuring a custom error response in the load balancer.
+        :param pulumi.Input[Sequence[pulumi.Input[str]]] forward_headers: List of the HTTP headers to forward to the extension (from the client or backend).
+               If omitted, all headers are sent. Each element is a string indicating the header name.
+        :param pulumi.Input[Sequence[pulumi.Input[str]]] supported_events: A set of events during request or response processing for which this extension is called.
+               This field is required for the LbTrafficExtension resource. It's not relevant for the LbRouteExtension
+               resource. Possible values:`EVENT_TYPE_UNSPECIFIED`, `REQUEST_HEADERS`, `REQUEST_BODY`, `RESPONSE_HEADERS`,
+               `RESPONSE_BODY`, `RESPONSE_BODY` and `RESPONSE_BODY`.
+               
+               - - -
+        :param pulumi.Input[str] timeout: Specifies the timeout for each individual message on the stream. The timeout must be between 10-1000 milliseconds.
+               A duration in seconds with up to nine fractional digits, ending with 's'. Example: "3.5s".
+        """
+        pulumi.set(__self__, "name", name)
+        pulumi.set(__self__, "service", service)
+        if authority is not None:
+            pulumi.set(__self__, "authority", authority)
+        if fail_open is not None:
+            pulumi.set(__self__, "fail_open", fail_open)
+        if forward_headers is not None:
+            pulumi.set(__self__, "forward_headers", forward_headers)
+        if supported_events is not None:
+            pulumi.set(__self__, "supported_events", supported_events)
+        if timeout is not None:
+            pulumi.set(__self__, "timeout", timeout)
+
+    @property
+    @pulumi.getter
+    def name(self) -> pulumi.Input[str]:
+        """
+        The name for this extension. The name is logged as part of the HTTP request logs.
+        The name must conform with RFC-1034, is restricted to lower-cased letters, numbers and hyphens,
+        and can have a maximum length of 63 characters. Additionally, the first character must be a letter
+        and the last a letter or a number.
+        """
+        return pulumi.get(self, "name")
+
+    @name.setter
+    def name(self, value: pulumi.Input[str]):
+        pulumi.set(self, "name", value)
+
+    @property
+    @pulumi.getter
+    def service(self) -> pulumi.Input[str]:
+        """
+        The reference to the service that runs the extension. Must be a reference to a backend service
+        """
+        return pulumi.get(self, "service")
+
+    @service.setter
+    def service(self, value: pulumi.Input[str]):
+        pulumi.set(self, "service", value)
+
+    @property
+    @pulumi.getter
+    def authority(self) -> Optional[pulumi.Input[str]]:
+        """
+        The :authority header in the gRPC request sent from Envoy to the extension service.
+        """
+        return pulumi.get(self, "authority")
+
+    @authority.setter
+    def authority(self, value: Optional[pulumi.Input[str]]):
+        pulumi.set(self, "authority", value)
+
+    @property
+    @pulumi.getter(name="failOpen")
+    def fail_open(self) -> Optional[pulumi.Input[bool]]:
+        """
+        Determines how the proxy behaves if the call to the extension fails or times out.
+        When set to TRUE, request or response processing continues without error.
+        Any subsequent extensions in the extension chain are also executed.
+        When set to FALSE: * If response headers have not been delivered to the downstream client,
+        a generic 500 error is returned to the client. The error response can be tailored by
+        configuring a custom error response in the load balancer.
+        """
+        return pulumi.get(self, "fail_open")
+
+    @fail_open.setter
+    def fail_open(self, value: Optional[pulumi.Input[bool]]):
+        pulumi.set(self, "fail_open", value)
+
+    @property
+    @pulumi.getter(name="forwardHeaders")
+    def forward_headers(self) -> Optional[pulumi.Input[Sequence[pulumi.Input[str]]]]:
+        """
+        List of the HTTP headers to forward to the extension (from the client or backend).
+        If omitted, all headers are sent. Each element is a string indicating the header name.
+        """
+        return pulumi.get(self, "forward_headers")
+
+    @forward_headers.setter
+    def forward_headers(self, value: Optional[pulumi.Input[Sequence[pulumi.Input[str]]]]):
+        pulumi.set(self, "forward_headers", value)
+
+    @property
+    @pulumi.getter(name="supportedEvents")
+    def supported_events(self) -> Optional[pulumi.Input[Sequence[pulumi.Input[str]]]]:
+        """
+        A set of events during request or response processing for which this extension is called.
+        This field is required for the LbTrafficExtension resource. It's not relevant for the LbRouteExtension
+        resource. Possible values:`EVENT_TYPE_UNSPECIFIED`, `REQUEST_HEADERS`, `REQUEST_BODY`, `RESPONSE_HEADERS`,
+        `RESPONSE_BODY`, `RESPONSE_BODY` and `RESPONSE_BODY`.
+
+        - - -
+        """
+        return pulumi.get(self, "supported_events")
+
+    @supported_events.setter
+    def supported_events(self, value: Optional[pulumi.Input[Sequence[pulumi.Input[str]]]]):
+        pulumi.set(self, "supported_events", value)
+
+    @property
+    @pulumi.getter
+    def timeout(self) -> Optional[pulumi.Input[str]]:
+        """
+        Specifies the timeout for each individual message on the stream. The timeout must be between 10-1000 milliseconds.
+        A duration in seconds with up to nine fractional digits, ending with 's'. Example: "3.5s".
+        """
+        return pulumi.get(self, "timeout")
+
+    @timeout.setter
+    def timeout(self, value: Optional[pulumi.Input[str]]):
+        pulumi.set(self, "timeout", value)
+
+
+@pulumi.input_type
+class LbTrafficExtensionExtensionChainMatchConditionArgs:
+    def __init__(__self__, *,
+                 cel_expression: pulumi.Input[str]):
+        """
+        :param pulumi.Input[str] cel_expression: A Common Expression Language (CEL) expression that is used to match requests for which the extension chain is executed.
+        """
+        pulumi.set(__self__, "cel_expression", cel_expression)
+
+    @property
+    @pulumi.getter(name="celExpression")
+    def cel_expression(self) -> pulumi.Input[str]:
+        """
+        A Common Expression Language (CEL) expression that is used to match requests for which the extension chain is executed.
+        """
+        return pulumi.get(self, "cel_expression")
+
+    @cel_expression.setter
+    def cel_expression(self, value: pulumi.Input[str]):
+        pulumi.set(self, "cel_expression", value)
+
+
 @pulumi.input_type
 class TcpRouteRuleArgs:
     def __init__(__self__, *,

pulumi_gcp/networkservices/gateway.py

@@ -798,7 +798,8 @@ class Gateway(pulumi.CustomResource):
             gateway_security_policy=default_gateway_security_policy.id,
             network=default_network.id,
             subnetwork=default_subnetwork.id,
-            delete_swg_autogen_router_on_destroy=True)
+            delete_swg_autogen_router_on_destroy=True,
+            opts=pulumi.ResourceOptions(depends_on=[proxyonlysubnet]))
         ```
         ### Network Services Gateway Multiple Swp Same Network
 
@@ -854,7 +855,8 @@ class Gateway(pulumi.CustomResource):
             gateway_security_policy=default_gateway_security_policy.id,
             network=default_network.id,
             subnetwork=default_subnetwork.id,
-            delete_swg_autogen_router_on_destroy=True)
+            delete_swg_autogen_router_on_destroy=True,
+            opts=pulumi.ResourceOptions(depends_on=[proxyonlysubnet]))
         gateway2 = gcp.networkservices.Gateway("gateway2",
             name="my-gateway2",
             location="us-south1",
@@ -866,7 +868,8 @@ class Gateway(pulumi.CustomResource):
             gateway_security_policy=default_gateway_security_policy.id,
             network=default_network.id,
             subnetwork=default_subnetwork.id,
-            delete_swg_autogen_router_on_destroy=True)
+            delete_swg_autogen_router_on_destroy=True,
+            opts=pulumi.ResourceOptions(depends_on=[proxyonlysubnet]))
         ```
 
         ## Import
@@ -1035,7 +1038,8 @@ class Gateway(pulumi.CustomResource):
             gateway_security_policy=default_gateway_security_policy.id,
             network=default_network.id,
             subnetwork=default_subnetwork.id,
-            delete_swg_autogen_router_on_destroy=True)
+            delete_swg_autogen_router_on_destroy=True,
+            opts=pulumi.ResourceOptions(depends_on=[proxyonlysubnet]))
         ```
         ### Network Services Gateway Multiple Swp Same Network
 
@@ -1091,7 +1095,8 @@ class Gateway(pulumi.CustomResource):
             gateway_security_policy=default_gateway_security_policy.id,
             network=default_network.id,
             subnetwork=default_subnetwork.id,
-            delete_swg_autogen_router_on_destroy=True)
+            delete_swg_autogen_router_on_destroy=True,
+            opts=pulumi.ResourceOptions(depends_on=[proxyonlysubnet]))
         gateway2 = gcp.networkservices.Gateway("gateway2",
             name="my-gateway2",
             location="us-south1",
@@ -1103,7 +1108,8 @@ class Gateway(pulumi.CustomResource):
             gateway_security_policy=default_gateway_security_policy.id,
             network=default_network.id,
             subnetwork=default_subnetwork.id,
-            delete_swg_autogen_router_on_destroy=True)
+            delete_swg_autogen_router_on_destroy=True,
+            opts=pulumi.ResourceOptions(depends_on=[proxyonlysubnet]))
         ```
 
         ## Import