pulumi-gcp 7.25.0a1717135845__py3-none-any.whl → 7.26.0__py3-none-any.whl

pulumi_gcp/networksecurity/address_group_iam_policy.py

@@ -23,7 +23,9 @@ class AddressGroupIamPolicyArgs:
         :param pulumi.Input[str] policy_data: The policy data generated by
                a `organizations_get_iam_policy` data source.
         :param pulumi.Input[str] location: The location of the gateway security policy.
-               Used to find the parent resource to bind the IAM policy to
+               Used to find the parent resource to bind the IAM policy to. If not specified,
+               the value will be parsed from the identifier of the parent resource. If no location is provided in the parent identifier and no
+               location is specified, it is taken from the provider configuration.
         :param pulumi.Input[str] name: Used to find the parent resource to bind the IAM policy to
         :param pulumi.Input[str] project: The ID of the project in which the resource belongs.
                If it is not provided, the project will be parsed from the identifier of the parent resource. If no project is provided in the parent identifier and no project is specified, the provider project is used.
@@ -54,7 +56,9 @@ class AddressGroupIamPolicyArgs:
     def location(self) -> Optional[pulumi.Input[str]]:
         """
         The location of the gateway security policy.
-        Used to find the parent resource to bind the IAM policy to
+        Used to find the parent resource to bind the IAM policy to. If not specified,
+        the value will be parsed from the identifier of the parent resource. If no location is provided in the parent identifier and no
+        location is specified, it is taken from the provider configuration.
         """
         return pulumi.get(self, "location")
 
@@ -100,7 +104,9 @@ class _AddressGroupIamPolicyState:
         Input properties used for looking up and filtering AddressGroupIamPolicy resources.
         :param pulumi.Input[str] etag: (Computed) The etag of the IAM policy.
         :param pulumi.Input[str] location: The location of the gateway security policy.
-               Used to find the parent resource to bind the IAM policy to
+               Used to find the parent resource to bind the IAM policy to. If not specified,
+               the value will be parsed from the identifier of the parent resource. If no location is provided in the parent identifier and no
+               location is specified, it is taken from the provider configuration.
         :param pulumi.Input[str] name: Used to find the parent resource to bind the IAM policy to
         :param pulumi.Input[str] policy_data: The policy data generated by
                a `organizations_get_iam_policy` data source.
@@ -135,7 +141,9 @@ class _AddressGroupIamPolicyState:
     def location(self) -> Optional[pulumi.Input[str]]:
         """
         The location of the gateway security policy.
-        Used to find the parent resource to bind the IAM policy to
+        Used to find the parent resource to bind the IAM policy to. If not specified,
+        the value will be parsed from the identifier of the parent resource. If no location is provided in the parent identifier and no
+        location is specified, it is taken from the provider configuration.
         """
         return pulumi.get(self, "location")
 
@@ -248,7 +256,9 @@ class AddressGroupIamPolicy(pulumi.CustomResource):
         :param str resource_name: The name of the resource.
         :param pulumi.ResourceOptions opts: Options for the resource.
         :param pulumi.Input[str] location: The location of the gateway security policy.
-               Used to find the parent resource to bind the IAM policy to
+               Used to find the parent resource to bind the IAM policy to. If not specified,
+               the value will be parsed from the identifier of the parent resource. If no location is provided in the parent identifier and no
+               location is specified, it is taken from the provider configuration.
         :param pulumi.Input[str] name: Used to find the parent resource to bind the IAM policy to
         :param pulumi.Input[str] policy_data: The policy data generated by
                a `organizations_get_iam_policy` data source.
@@ -373,7 +383,9 @@ class AddressGroupIamPolicy(pulumi.CustomResource):
         :param pulumi.ResourceOptions opts: Options for the resource.
         :param pulumi.Input[str] etag: (Computed) The etag of the IAM policy.
         :param pulumi.Input[str] location: The location of the gateway security policy.
-               Used to find the parent resource to bind the IAM policy to
+               Used to find the parent resource to bind the IAM policy to. If not specified,
+               the value will be parsed from the identifier of the parent resource. If no location is provided in the parent identifier and no
+               location is specified, it is taken from the provider configuration.
         :param pulumi.Input[str] name: Used to find the parent resource to bind the IAM policy to
         :param pulumi.Input[str] policy_data: The policy data generated by
                a `organizations_get_iam_policy` data source.
@@ -404,7 +416,9 @@ class AddressGroupIamPolicy(pulumi.CustomResource):
     def location(self) -> pulumi.Output[str]:
         """
         The location of the gateway security policy.
-        Used to find the parent resource to bind the IAM policy to
+        Used to find the parent resource to bind the IAM policy to. If not specified,
+        the value will be parsed from the identifier of the parent resource. If no location is provided in the parent identifier and no
+        location is specified, it is taken from the provider configuration.
         """
         return pulumi.get(self, "location")
 

pulumi_gcp/networksecurity/get_address_group_iam_policy.py

@@ -105,7 +105,9 @@ def get_address_group_iam_policy(location: Optional[str] = None,
 
 
     :param str location: The location of the gateway security policy.
-           Used to find the parent resource to bind the IAM policy to
+           Used to find the parent resource to bind the IAM policy to. If not specified,
+           the value will be parsed from the identifier of the parent resource. If no location is provided in the parent identifier and no
+           location is specified, it is taken from the provider configuration.
     :param str name: Used to find the parent resource to bind the IAM policy to
     :param str project: The ID of the project in which the resource belongs.
            If it is not provided, the project will be parsed from the identifier of the parent resource. If no project is provided in the parent identifier and no project is specified, the provider project is used.
@@ -136,7 +138,9 @@ def get_address_group_iam_policy_output(location: Optional[pulumi.Input[Optional
 
 
     :param str location: The location of the gateway security policy.
-           Used to find the parent resource to bind the IAM policy to
+           Used to find the parent resource to bind the IAM policy to. If not specified,
+           the value will be parsed from the identifier of the parent resource. If no location is provided in the parent identifier and no
+           location is specified, it is taken from the provider configuration.
     :param str name: Used to find the parent resource to bind the IAM policy to
     :param str project: The ID of the project in which the resource belongs.
            If it is not provided, the project will be parsed from the identifier of the parent resource. If no project is provided in the parent identifier and no project is specified, the provider project is used.

pulumi_gcp/networkservices/__init__.py

@@ -12,6 +12,7 @@ from .endpoint_policy import *
 from .gateway import *
 from .grpc_route import *
 from .http_route import *
+from .lb_route_extension import *
 from .lb_traffic_extension import *
 from .mesh import *
 from .service_binding import *

pulumi_gcp/networkservices/_inputs.py

@@ -72,6 +72,9 @@ __all__ = [
     'HttpRouteRuleMatchHeaderArgs',
     'HttpRouteRuleMatchHeaderRangeMatchArgs',
     'HttpRouteRuleMatchQueryParameterArgs',
+    'LbRouteExtensionExtensionChainArgs',
+    'LbRouteExtensionExtensionChainExtensionArgs',
+    'LbRouteExtensionExtensionChainMatchConditionArgs',
     'LbTrafficExtensionExtensionChainArgs',
     'LbTrafficExtensionExtensionChainExtensionArgs',
     'LbTrafficExtensionExtensionChainMatchConditionArgs',
@@ -4275,6 +4278,219 @@ class HttpRouteRuleMatchQueryParameterArgs:
         pulumi.set(self, "regex_match", value)
 
 
+@pulumi.input_type
+class LbRouteExtensionExtensionChainArgs:
+    def __init__(__self__, *,
+                 extensions: pulumi.Input[Sequence[pulumi.Input['LbRouteExtensionExtensionChainExtensionArgs']]],
+                 match_condition: pulumi.Input['LbRouteExtensionExtensionChainMatchConditionArgs'],
+                 name: pulumi.Input[str]):
+        """
+        :param pulumi.Input[Sequence[pulumi.Input['LbRouteExtensionExtensionChainExtensionArgs']]] extensions: A set of extensions to execute for the matching request.
+               At least one extension is required. Up to 3 extensions can be defined for each extension chain for
+               LbTrafficExtension resource. LbRouteExtension chains are limited to 1 extension per extension chain.
+               Structure is documented below.
+        :param pulumi.Input['LbRouteExtensionExtensionChainMatchConditionArgs'] match_condition: Conditions under which this chain is invoked for a request.
+               Structure is documented below.
+        :param pulumi.Input[str] name: The name for this extension chain. The name is logged as part of the HTTP request logs.
+               The name must conform with RFC-1034, is restricted to lower-cased letters, numbers and hyphens,
+               and can have a maximum length of 63 characters. Additionally, the first character must be a letter
+               and the last character must be a letter or a number.
+        """
+        pulumi.set(__self__, "extensions", extensions)
+        pulumi.set(__self__, "match_condition", match_condition)
+        pulumi.set(__self__, "name", name)
+
+    @property
+    @pulumi.getter
+    def extensions(self) -> pulumi.Input[Sequence[pulumi.Input['LbRouteExtensionExtensionChainExtensionArgs']]]:
+        """
+        A set of extensions to execute for the matching request.
+        At least one extension is required. Up to 3 extensions can be defined for each extension chain for
+        LbTrafficExtension resource. LbRouteExtension chains are limited to 1 extension per extension chain.
+        Structure is documented below.
+        """
+        return pulumi.get(self, "extensions")
+
+    @extensions.setter
+    def extensions(self, value: pulumi.Input[Sequence[pulumi.Input['LbRouteExtensionExtensionChainExtensionArgs']]]):
+        pulumi.set(self, "extensions", value)
+
+    @property
+    @pulumi.getter(name="matchCondition")
+    def match_condition(self) -> pulumi.Input['LbRouteExtensionExtensionChainMatchConditionArgs']:
+        """
+        Conditions under which this chain is invoked for a request.
+        Structure is documented below.
+        """
+        return pulumi.get(self, "match_condition")
+
+    @match_condition.setter
+    def match_condition(self, value: pulumi.Input['LbRouteExtensionExtensionChainMatchConditionArgs']):
+        pulumi.set(self, "match_condition", value)
+
+    @property
+    @pulumi.getter
+    def name(self) -> pulumi.Input[str]:
+        """
+        The name for this extension chain. The name is logged as part of the HTTP request logs.
+        The name must conform with RFC-1034, is restricted to lower-cased letters, numbers and hyphens,
+        and can have a maximum length of 63 characters. Additionally, the first character must be a letter
+        and the last character must be a letter or a number.
+        """
+        return pulumi.get(self, "name")
+
+    @name.setter
+    def name(self, value: pulumi.Input[str]):
+        pulumi.set(self, "name", value)
+
+
+@pulumi.input_type
+class LbRouteExtensionExtensionChainExtensionArgs:
+    def __init__(__self__, *,
+                 name: pulumi.Input[str],
+                 service: pulumi.Input[str],
+                 authority: Optional[pulumi.Input[str]] = None,
+                 fail_open: Optional[pulumi.Input[bool]] = None,
+                 forward_headers: Optional[pulumi.Input[Sequence[pulumi.Input[str]]]] = None,
+                 timeout: Optional[pulumi.Input[str]] = None):
+        """
+        :param pulumi.Input[str] name: The name for this extension. The name is logged as part of the HTTP request logs.
+               The name must conform with RFC-1034, is restricted to lower-cased letters, numbers and hyphens,
+               and can have a maximum length of 63 characters. Additionally, the first character must be a letter
+               and the last a letter or a number.
+        :param pulumi.Input[str] service: The reference to the service that runs the extension. Must be a reference to a backend service
+        :param pulumi.Input[str] authority: The :authority header in the gRPC request sent from Envoy to the extension service.
+        :param pulumi.Input[bool] fail_open: Determines how the proxy behaves if the call to the extension fails or times out.
+               When set to TRUE, request or response processing continues without error.
+               Any subsequent extensions in the extension chain are also executed.
+               When set to FALSE: * If response headers have not been delivered to the downstream client,
+               a generic 500 error is returned to the client. The error response can be tailored by
+               configuring a custom error response in the load balancer.
+        :param pulumi.Input[Sequence[pulumi.Input[str]]] forward_headers: List of the HTTP headers to forward to the extension (from the client or backend).
+               If omitted, all headers are sent. Each element is a string indicating the header name.
+               
+               - - -
+        :param pulumi.Input[str] timeout: Specifies the timeout for each individual message on the stream. The timeout must be between 10-1000 milliseconds.
+               A duration in seconds with up to nine fractional digits, ending with 's'. Example: "3.5s".
+        """
+        pulumi.set(__self__, "name", name)
+        pulumi.set(__self__, "service", service)
+        if authority is not None:
+            pulumi.set(__self__, "authority", authority)
+        if fail_open is not None:
+            pulumi.set(__self__, "fail_open", fail_open)
+        if forward_headers is not None:
+            pulumi.set(__self__, "forward_headers", forward_headers)
+        if timeout is not None:
+            pulumi.set(__self__, "timeout", timeout)
+
+    @property
+    @pulumi.getter
+    def name(self) -> pulumi.Input[str]:
+        """
+        The name for this extension. The name is logged as part of the HTTP request logs.
+        The name must conform with RFC-1034, is restricted to lower-cased letters, numbers and hyphens,
+        and can have a maximum length of 63 characters. Additionally, the first character must be a letter
+        and the last a letter or a number.
+        """
+        return pulumi.get(self, "name")
+
+    @name.setter
+    def name(self, value: pulumi.Input[str]):
+        pulumi.set(self, "name", value)
+
+    @property
+    @pulumi.getter
+    def service(self) -> pulumi.Input[str]:
+        """
+        The reference to the service that runs the extension. Must be a reference to a backend service
+        """
+        return pulumi.get(self, "service")
+
+    @service.setter
+    def service(self, value: pulumi.Input[str]):
+        pulumi.set(self, "service", value)
+
+    @property
+    @pulumi.getter
+    def authority(self) -> Optional[pulumi.Input[str]]:
+        """
+        The :authority header in the gRPC request sent from Envoy to the extension service.
+        """
+        return pulumi.get(self, "authority")
+
+    @authority.setter
+    def authority(self, value: Optional[pulumi.Input[str]]):
+        pulumi.set(self, "authority", value)
+
+    @property
+    @pulumi.getter(name="failOpen")
+    def fail_open(self) -> Optional[pulumi.Input[bool]]:
+        """
+        Determines how the proxy behaves if the call to the extension fails or times out.
+        When set to TRUE, request or response processing continues without error.
+        Any subsequent extensions in the extension chain are also executed.
+        When set to FALSE: * If response headers have not been delivered to the downstream client,
+        a generic 500 error is returned to the client. The error response can be tailored by
+        configuring a custom error response in the load balancer.
+        """
+        return pulumi.get(self, "fail_open")
+
+    @fail_open.setter
+    def fail_open(self, value: Optional[pulumi.Input[bool]]):
+        pulumi.set(self, "fail_open", value)
+
+    @property
+    @pulumi.getter(name="forwardHeaders")
+    def forward_headers(self) -> Optional[pulumi.Input[Sequence[pulumi.Input[str]]]]:
+        """
+        List of the HTTP headers to forward to the extension (from the client or backend).
+        If omitted, all headers are sent. Each element is a string indicating the header name.
+
+        - - -
+        """
+        return pulumi.get(self, "forward_headers")
+
+    @forward_headers.setter
+    def forward_headers(self, value: Optional[pulumi.Input[Sequence[pulumi.Input[str]]]]):
+        pulumi.set(self, "forward_headers", value)
+
+    @property
+    @pulumi.getter
+    def timeout(self) -> Optional[pulumi.Input[str]]:
+        """
+        Specifies the timeout for each individual message on the stream. The timeout must be between 10-1000 milliseconds.
+        A duration in seconds with up to nine fractional digits, ending with 's'. Example: "3.5s".
+        """
+        return pulumi.get(self, "timeout")
+
+    @timeout.setter
+    def timeout(self, value: Optional[pulumi.Input[str]]):
+        pulumi.set(self, "timeout", value)
+
+
+@pulumi.input_type
+class LbRouteExtensionExtensionChainMatchConditionArgs:
+    def __init__(__self__, *,
+                 cel_expression: pulumi.Input[str]):
+        """
+        :param pulumi.Input[str] cel_expression: A Common Expression Language (CEL) expression that is used to match requests for which the extension chain is executed.
+        """
+        pulumi.set(__self__, "cel_expression", cel_expression)
+
+    @property
+    @pulumi.getter(name="celExpression")
+    def cel_expression(self) -> pulumi.Input[str]:
+        """
+        A Common Expression Language (CEL) expression that is used to match requests for which the extension chain is executed.
+        """
+        return pulumi.get(self, "cel_expression")
+
+    @cel_expression.setter
+    def cel_expression(self, value: pulumi.Input[str]):
+        pulumi.set(self, "cel_expression", value)
+
+
 @pulumi.input_type
 class LbTrafficExtensionExtensionChainArgs:
     def __init__(__self__, *,
@@ -4344,22 +4560,20 @@ class LbTrafficExtensionExtensionChainArgs:
 @pulumi.input_type
 class LbTrafficExtensionExtensionChainExtensionArgs:
     def __init__(__self__, *,
-                 authority: pulumi.Input[str],
                  name: pulumi.Input[str],
                  service: pulumi.Input[str],
-                 timeout: pulumi.Input[str],
+                 authority: Optional[pulumi.Input[str]] = None,
                  fail_open: Optional[pulumi.Input[bool]] = None,
                  forward_headers: Optional[pulumi.Input[Sequence[pulumi.Input[str]]]] = None,
-                 supported_events: Optional[pulumi.Input[Sequence[pulumi.Input[str]]]] = None):
+                 supported_events: Optional[pulumi.Input[Sequence[pulumi.Input[str]]]] = None,
+                 timeout: Optional[pulumi.Input[str]] = None):
         """
-        :param pulumi.Input[str] authority: The :authority header in the gRPC request sent from Envoy to the extension service.
         :param pulumi.Input[str] name: The name for this extension. The name is logged as part of the HTTP request logs.
                The name must conform with RFC-1034, is restricted to lower-cased letters, numbers and hyphens,
                and can have a maximum length of 63 characters. Additionally, the first character must be a letter
                and the last a letter or a number.
         :param pulumi.Input[str] service: The reference to the service that runs the extension. Must be a reference to a backend service
-        :param pulumi.Input[str] timeout: Specifies the timeout for each individual message on the stream. The timeout must be between 10-1000 milliseconds.
-               A duration in seconds with up to nine fractional digits, ending with 's'. Example: "3.5s".
+        :param pulumi.Input[str] authority: The :authority header in the gRPC request sent from Envoy to the extension service.
         :param pulumi.Input[bool] fail_open: Determines how the proxy behaves if the call to the extension fails or times out.
                When set to TRUE, request or response processing continues without error.
                Any subsequent extensions in the extension chain are also executed.
@@ -4374,29 +4588,21 @@ class LbTrafficExtensionExtensionChainExtensionArgs:
                `RESPONSE_BODY`, `RESPONSE_BODY` and `RESPONSE_BODY`.
                
                - - -
+        :param pulumi.Input[str] timeout: Specifies the timeout for each individual message on the stream. The timeout must be between 10-1000 milliseconds.
+               A duration in seconds with up to nine fractional digits, ending with 's'. Example: "3.5s".
         """
-        pulumi.set(__self__, "authority", authority)
         pulumi.set(__self__, "name", name)
         pulumi.set(__self__, "service", service)
-        pulumi.set(__self__, "timeout", timeout)
+        if authority is not None:
+            pulumi.set(__self__, "authority", authority)
         if fail_open is not None:
             pulumi.set(__self__, "fail_open", fail_open)
         if forward_headers is not None:
             pulumi.set(__self__, "forward_headers", forward_headers)
         if supported_events is not None:
             pulumi.set(__self__, "supported_events", supported_events)
-
-    @property
-    @pulumi.getter
-    def authority(self) -> pulumi.Input[str]:
-        """
-        The :authority header in the gRPC request sent from Envoy to the extension service.
-        """
-        return pulumi.get(self, "authority")
-
-    @authority.setter
-    def authority(self, value: pulumi.Input[str]):
-        pulumi.set(self, "authority", value)
+        if timeout is not None:
+            pulumi.set(__self__, "timeout", timeout)
 
     @property
     @pulumi.getter
@@ -4427,16 +4633,15 @@ class LbTrafficExtensionExtensionChainExtensionArgs:
 
     @property
     @pulumi.getter
-    def timeout(self) -> pulumi.Input[str]:
+    def authority(self) -> Optional[pulumi.Input[str]]:
         """
-        Specifies the timeout for each individual message on the stream. The timeout must be between 10-1000 milliseconds.
-        A duration in seconds with up to nine fractional digits, ending with 's'. Example: "3.5s".
+        The :authority header in the gRPC request sent from Envoy to the extension service.
         """
-        return pulumi.get(self, "timeout")
+        return pulumi.get(self, "authority")
 
-    @timeout.setter
-    def timeout(self, value: pulumi.Input[str]):
-        pulumi.set(self, "timeout", value)
+    @authority.setter
+    def authority(self, value: Optional[pulumi.Input[str]]):
+        pulumi.set(self, "authority", value)
 
     @property
     @pulumi.getter(name="failOpen")
@@ -4485,6 +4690,19 @@ class LbTrafficExtensionExtensionChainExtensionArgs:
     def supported_events(self, value: Optional[pulumi.Input[Sequence[pulumi.Input[str]]]]):
         pulumi.set(self, "supported_events", value)
 
+    @property
+    @pulumi.getter
+    def timeout(self) -> Optional[pulumi.Input[str]]:
+        """
+        Specifies the timeout for each individual message on the stream. The timeout must be between 10-1000 milliseconds.
+        A duration in seconds with up to nine fractional digits, ending with 's'. Example: "3.5s".
+        """
+        return pulumi.get(self, "timeout")
+
+    @timeout.setter
+    def timeout(self, value: Optional[pulumi.Input[str]]):
+        pulumi.set(self, "timeout", value)
+
 
 @pulumi.input_type
 class LbTrafficExtensionExtensionChainMatchConditionArgs: