pulumi-gcp 8.19.0a1739290509__py3-none-any.whl → 8.19.1a1739444689__py3-none-any.whl

pulumi_gcp/compute/__init__.py

@@ -133,6 +133,7 @@ from .network_endpoint_group import *
 from .network_endpoint_list import *
 from .network_firewall_policy import *
 from .network_firewall_policy_association import *
+from .network_firewall_policy_packet_mirroring_rule import *
 from .network_firewall_policy_rule import *
 from .network_firewall_policy_with_rules import *
 from .network_peering import *

pulumi_gcp/compute/_inputs.py

@@ -411,6 +411,12 @@ __all__ = [
     'NetworkAttachmentConnectionEndpointArgsDict',
     'NetworkEndpointListNetworkEndpointArgs',
     'NetworkEndpointListNetworkEndpointArgsDict',
+    'NetworkFirewallPolicyPacketMirroringRuleMatchArgs',
+    'NetworkFirewallPolicyPacketMirroringRuleMatchArgsDict',
+    'NetworkFirewallPolicyPacketMirroringRuleMatchLayer4ConfigArgs',
+    'NetworkFirewallPolicyPacketMirroringRuleMatchLayer4ConfigArgsDict',
+    'NetworkFirewallPolicyPacketMirroringRuleTargetSecureTagArgs',
+    'NetworkFirewallPolicyPacketMirroringRuleTargetSecureTagArgsDict',
     'NetworkFirewallPolicyRuleMatchArgs',
     'NetworkFirewallPolicyRuleMatchArgsDict',
     'NetworkFirewallPolicyRuleMatchLayer4ConfigArgs',
@@ -22038,6 +22044,204 @@ class NetworkEndpointListNetworkEndpointArgs:
         pulumi.set(self, "port", value)
 
 
+if not MYPY:
+    class NetworkFirewallPolicyPacketMirroringRuleMatchArgsDict(TypedDict):
+        layer4_configs: pulumi.Input[Sequence[pulumi.Input['NetworkFirewallPolicyPacketMirroringRuleMatchLayer4ConfigArgsDict']]]
+        """
+        Pairs of IP protocols and ports that the rule should match.
+        Structure is documented below.
+
+
+        <a name="nested_match_layer4_configs"></a>The `layer4_configs` block supports:
+        """
+        dest_ip_ranges: NotRequired[pulumi.Input[Sequence[pulumi.Input[str]]]]
+        """
+        CIDR IP address range. Maximum number of destination CIDR IP ranges allowed is 5000.
+        """
+        src_ip_ranges: NotRequired[pulumi.Input[Sequence[pulumi.Input[str]]]]
+        """
+        CIDR IP address range. Maximum number of source CIDR IP ranges allowed is 5000.
+        """
+elif False:
+    NetworkFirewallPolicyPacketMirroringRuleMatchArgsDict: TypeAlias = Mapping[str, Any]
+
+@pulumi.input_type
+class NetworkFirewallPolicyPacketMirroringRuleMatchArgs:
+    def __init__(__self__, *,
+                 layer4_configs: pulumi.Input[Sequence[pulumi.Input['NetworkFirewallPolicyPacketMirroringRuleMatchLayer4ConfigArgs']]],
+                 dest_ip_ranges: Optional[pulumi.Input[Sequence[pulumi.Input[str]]]] = None,
+                 src_ip_ranges: Optional[pulumi.Input[Sequence[pulumi.Input[str]]]] = None):
+        """
+        :param pulumi.Input[Sequence[pulumi.Input['NetworkFirewallPolicyPacketMirroringRuleMatchLayer4ConfigArgs']]] layer4_configs: Pairs of IP protocols and ports that the rule should match.
+               Structure is documented below.
+               
+               
+               <a name="nested_match_layer4_configs"></a>The `layer4_configs` block supports:
+        :param pulumi.Input[Sequence[pulumi.Input[str]]] dest_ip_ranges: CIDR IP address range. Maximum number of destination CIDR IP ranges allowed is 5000.
+        :param pulumi.Input[Sequence[pulumi.Input[str]]] src_ip_ranges: CIDR IP address range. Maximum number of source CIDR IP ranges allowed is 5000.
+        """
+        pulumi.set(__self__, "layer4_configs", layer4_configs)
+        if dest_ip_ranges is not None:
+            pulumi.set(__self__, "dest_ip_ranges", dest_ip_ranges)
+        if src_ip_ranges is not None:
+            pulumi.set(__self__, "src_ip_ranges", src_ip_ranges)
+
+    @property
+    @pulumi.getter(name="layer4Configs")
+    def layer4_configs(self) -> pulumi.Input[Sequence[pulumi.Input['NetworkFirewallPolicyPacketMirroringRuleMatchLayer4ConfigArgs']]]:
+        """
+        Pairs of IP protocols and ports that the rule should match.
+        Structure is documented below.
+
+
+        <a name="nested_match_layer4_configs"></a>The `layer4_configs` block supports:
+        """
+        return pulumi.get(self, "layer4_configs")
+
+    @layer4_configs.setter
+    def layer4_configs(self, value: pulumi.Input[Sequence[pulumi.Input['NetworkFirewallPolicyPacketMirroringRuleMatchLayer4ConfigArgs']]]):
+        pulumi.set(self, "layer4_configs", value)
+
+    @property
+    @pulumi.getter(name="destIpRanges")
+    def dest_ip_ranges(self) -> Optional[pulumi.Input[Sequence[pulumi.Input[str]]]]:
+        """
+        CIDR IP address range. Maximum number of destination CIDR IP ranges allowed is 5000.
+        """
+        return pulumi.get(self, "dest_ip_ranges")
+
+    @dest_ip_ranges.setter
+    def dest_ip_ranges(self, value: Optional[pulumi.Input[Sequence[pulumi.Input[str]]]]):
+        pulumi.set(self, "dest_ip_ranges", value)
+
+    @property
+    @pulumi.getter(name="srcIpRanges")
+    def src_ip_ranges(self) -> Optional[pulumi.Input[Sequence[pulumi.Input[str]]]]:
+        """
+        CIDR IP address range. Maximum number of source CIDR IP ranges allowed is 5000.
+        """
+        return pulumi.get(self, "src_ip_ranges")
+
+    @src_ip_ranges.setter
+    def src_ip_ranges(self, value: Optional[pulumi.Input[Sequence[pulumi.Input[str]]]]):
+        pulumi.set(self, "src_ip_ranges", value)
+
+
+if not MYPY:
+    class NetworkFirewallPolicyPacketMirroringRuleMatchLayer4ConfigArgsDict(TypedDict):
+        ip_protocol: pulumi.Input[str]
+        """
+        The IP protocol to which this rule applies. The protocol type is required when creating a firewall rule.
+        This value can either be one of the following well known protocol strings (tcp, udp, icmp, esp, ah, ipip, sctp), or the IP protocol number.
+        """
+        ports: NotRequired[pulumi.Input[Sequence[pulumi.Input[str]]]]
+        """
+        An optional list of ports to which this rule applies. This field is only applicable for UDP or TCP protocol. Each entry must be either an integer or a range. If not specified, this rule applies to connections through any port.
+        Example inputs include: ["22"], ["80","443"], and ["12345-12349"].
+        """
+elif False:
+    NetworkFirewallPolicyPacketMirroringRuleMatchLayer4ConfigArgsDict: TypeAlias = Mapping[str, Any]
+
+@pulumi.input_type
+class NetworkFirewallPolicyPacketMirroringRuleMatchLayer4ConfigArgs:
+    def __init__(__self__, *,
+                 ip_protocol: pulumi.Input[str],
+                 ports: Optional[pulumi.Input[Sequence[pulumi.Input[str]]]] = None):
+        """
+        :param pulumi.Input[str] ip_protocol: The IP protocol to which this rule applies. The protocol type is required when creating a firewall rule.
+               This value can either be one of the following well known protocol strings (tcp, udp, icmp, esp, ah, ipip, sctp), or the IP protocol number.
+        :param pulumi.Input[Sequence[pulumi.Input[str]]] ports: An optional list of ports to which this rule applies. This field is only applicable for UDP or TCP protocol. Each entry must be either an integer or a range. If not specified, this rule applies to connections through any port.
+               Example inputs include: ["22"], ["80","443"], and ["12345-12349"].
+        """
+        pulumi.set(__self__, "ip_protocol", ip_protocol)
+        if ports is not None:
+            pulumi.set(__self__, "ports", ports)
+
+    @property
+    @pulumi.getter(name="ipProtocol")
+    def ip_protocol(self) -> pulumi.Input[str]:
+        """
+        The IP protocol to which this rule applies. The protocol type is required when creating a firewall rule.
+        This value can either be one of the following well known protocol strings (tcp, udp, icmp, esp, ah, ipip, sctp), or the IP protocol number.
+        """
+        return pulumi.get(self, "ip_protocol")
+
+    @ip_protocol.setter
+    def ip_protocol(self, value: pulumi.Input[str]):
+        pulumi.set(self, "ip_protocol", value)
+
+    @property
+    @pulumi.getter
+    def ports(self) -> Optional[pulumi.Input[Sequence[pulumi.Input[str]]]]:
+        """
+        An optional list of ports to which this rule applies. This field is only applicable for UDP or TCP protocol. Each entry must be either an integer or a range. If not specified, this rule applies to connections through any port.
+        Example inputs include: ["22"], ["80","443"], and ["12345-12349"].
+        """
+        return pulumi.get(self, "ports")
+
+    @ports.setter
+    def ports(self, value: Optional[pulumi.Input[Sequence[pulumi.Input[str]]]]):
+        pulumi.set(self, "ports", value)
+
+
+if not MYPY:
+    class NetworkFirewallPolicyPacketMirroringRuleTargetSecureTagArgsDict(TypedDict):
+        name: NotRequired[pulumi.Input[str]]
+        """
+        Name of the secure tag, created with TagManager's TagValue API.
+        diff_suppress_func: 'tpgresource.CompareSelfLinkOrResourceName'
+        """
+        state: NotRequired[pulumi.Input[str]]
+        """
+        (Output)
+        State of the secure tag, either EFFECTIVE or INEFFECTIVE. A secure tag is INEFFECTIVE when it is deleted or its network is deleted.
+        """
+elif False:
+    NetworkFirewallPolicyPacketMirroringRuleTargetSecureTagArgsDict: TypeAlias = Mapping[str, Any]
+
+@pulumi.input_type
+class NetworkFirewallPolicyPacketMirroringRuleTargetSecureTagArgs:
+    def __init__(__self__, *,
+                 name: Optional[pulumi.Input[str]] = None,
+                 state: Optional[pulumi.Input[str]] = None):
+        """
+        :param pulumi.Input[str] name: Name of the secure tag, created with TagManager's TagValue API.
+               diff_suppress_func: 'tpgresource.CompareSelfLinkOrResourceName'
+        :param pulumi.Input[str] state: (Output)
+               State of the secure tag, either EFFECTIVE or INEFFECTIVE. A secure tag is INEFFECTIVE when it is deleted or its network is deleted.
+        """
+        if name is not None:
+            pulumi.set(__self__, "name", name)
+        if state is not None:
+            pulumi.set(__self__, "state", state)
+
+    @property
+    @pulumi.getter
+    def name(self) -> Optional[pulumi.Input[str]]:
+        """
+        Name of the secure tag, created with TagManager's TagValue API.
+        diff_suppress_func: 'tpgresource.CompareSelfLinkOrResourceName'
+        """
+        return pulumi.get(self, "name")
+
+    @name.setter
+    def name(self, value: Optional[pulumi.Input[str]]):
+        pulumi.set(self, "name", value)
+
+    @property
+    @pulumi.getter
+    def state(self) -> Optional[pulumi.Input[str]]:
+        """
+        (Output)
+        State of the secure tag, either EFFECTIVE or INEFFECTIVE. A secure tag is INEFFECTIVE when it is deleted or its network is deleted.
+        """
+        return pulumi.get(self, "state")
+
+    @state.setter
+    def state(self, value: Optional[pulumi.Input[str]]):
+        pulumi.set(self, "state", value)
+
+
 if not MYPY:
     class NetworkFirewallPolicyRuleMatchArgsDict(TypedDict):
         layer4_configs: pulumi.Input[Sequence[pulumi.Input['NetworkFirewallPolicyRuleMatchLayer4ConfigArgsDict']]]

pulumi_gcp/compute/firewall_policy.py

@@ -25,11 +25,12 @@ class FirewallPolicyArgs:
         """
         The set of arguments for constructing a FirewallPolicy resource.
         :param pulumi.Input[str] parent: The parent of the firewall policy.
-        :param pulumi.Input[str] short_name: User-provided name of the Organization firewall policy. The name should be unique in the organization in which the firewall policy is created. The name must be 1-63 characters long, and comply with RFC1035. Specifically, the name must be 1-63 characters long and match the regular expression a-z? which means the first character must be a lowercase letter, and all following characters must be a dash, lowercase letter, or digit, except the last character, which cannot be a dash.
-               
                
                
                - - -
+        :param pulumi.Input[str] short_name: User-provided name of the Organization firewall policy. The name should be unique in the organization in which the firewall policy is created.
+               This field is not applicable to network firewall policies. This name must be set on creation and cannot be changed. The name must be 1-63 characters long, and comply with RFC1035.
+               Specifically, the name must be 1-63 characters long and match the regular expression a-z? which means the first character must be a lowercase letter, and all following characters must be a dash, lowercase letter, or digit, except the last character, which cannot be a dash.
         :param pulumi.Input[str] description: An optional description of this resource. Provide this property when you create the resource.
         """
         pulumi.set(__self__, "parent", parent)
@@ -42,6 +43,9 @@ class FirewallPolicyArgs:
     def parent(self) -> pulumi.Input[str]:
         """
         The parent of the firewall policy.
+
+
+        - - -
         """
         return pulumi.get(self, "parent")
 
@@ -53,11 +57,9 @@ class FirewallPolicyArgs:
     @pulumi.getter(name="shortName")
     def short_name(self) -> pulumi.Input[str]:
         """
-        User-provided name of the Organization firewall policy. The name should be unique in the organization in which the firewall policy is created. The name must be 1-63 characters long, and comply with RFC1035. Specifically, the name must be 1-63 characters long and match the regular expression a-z? which means the first character must be a lowercase letter, and all following characters must be a dash, lowercase letter, or digit, except the last character, which cannot be a dash.
-
-
-
-        - - -
+        User-provided name of the Organization firewall policy. The name should be unique in the organization in which the firewall policy is created.
+        This field is not applicable to network firewall policies. This name must be set on creation and cannot be changed. The name must be 1-63 characters long, and comply with RFC1035.
+        Specifically, the name must be 1-63 characters long and match the regular expression a-z? which means the first character must be a lowercase letter, and all following characters must be a dash, lowercase letter, or digit, except the last character, which cannot be a dash.
         """
         return pulumi.get(self, "short_name")
 
@@ -99,14 +101,15 @@ class _FirewallPolicyState:
         :param pulumi.Input[str] firewall_policy_id: The unique identifier for the resource. This identifier is defined by the server.
         :param pulumi.Input[str] name: Name of the resource. It is a numeric ID allocated by GCP which uniquely identifies the Firewall Policy.
         :param pulumi.Input[str] parent: The parent of the firewall policy.
-        :param pulumi.Input[int] rule_tuple_count: Total count of all firewall policy rule tuples. A firewall policy can not exceed a set number of tuples.
-        :param pulumi.Input[str] self_link: Server-defined URL for the resource.
-        :param pulumi.Input[str] self_link_with_id: Server-defined URL for this resource with the resource id.
-        :param pulumi.Input[str] short_name: User-provided name of the Organization firewall policy. The name should be unique in the organization in which the firewall policy is created. The name must be 1-63 characters long, and comply with RFC1035. Specifically, the name must be 1-63 characters long and match the regular expression a-z? which means the first character must be a lowercase letter, and all following characters must be a dash, lowercase letter, or digit, except the last character, which cannot be a dash.
-               
                
                
                - - -
+        :param pulumi.Input[int] rule_tuple_count: Total count of all firewall policy rule tuples. A firewall policy can not exceed a set number of tuples.
+        :param pulumi.Input[str] self_link: Server-defined URL for the resource.
+        :param pulumi.Input[str] self_link_with_id: Server-defined URL for this resource with the resource id.
+        :param pulumi.Input[str] short_name: User-provided name of the Organization firewall policy. The name should be unique in the organization in which the firewall policy is created.
+               This field is not applicable to network firewall policies. This name must be set on creation and cannot be changed. The name must be 1-63 characters long, and comply with RFC1035.
+               Specifically, the name must be 1-63 characters long and match the regular expression a-z? which means the first character must be a lowercase letter, and all following characters must be a dash, lowercase letter, or digit, except the last character, which cannot be a dash.
         """
         if creation_timestamp is not None:
             pulumi.set(__self__, "creation_timestamp", creation_timestamp)
@@ -194,6 +197,9 @@ class _FirewallPolicyState:
     def parent(self) -> Optional[pulumi.Input[str]]:
         """
         The parent of the firewall policy.
+
+
+        - - -
         """
         return pulumi.get(self, "parent")
 
@@ -241,11 +247,9 @@ class _FirewallPolicyState:
     @pulumi.getter(name="shortName")
     def short_name(self) -> Optional[pulumi.Input[str]]:
         """
-        User-provided name of the Organization firewall policy. The name should be unique in the organization in which the firewall policy is created. The name must be 1-63 characters long, and comply with RFC1035. Specifically, the name must be 1-63 characters long and match the regular expression a-z? which means the first character must be a lowercase letter, and all following characters must be a dash, lowercase letter, or digit, except the last character, which cannot be a dash.
-
-
-
-        - - -
+        User-provided name of the Organization firewall policy. The name should be unique in the organization in which the firewall policy is created.
+        This field is not applicable to network firewall policies. This name must be set on creation and cannot be changed. The name must be 1-63 characters long, and comply with RFC1035.
+        Specifically, the name must be 1-63 characters long and match the regular expression a-z? which means the first character must be a lowercase letter, and all following characters must be a dash, lowercase letter, or digit, except the last character, which cannot be a dash.
         """
         return pulumi.get(self, "short_name")
 
@@ -264,20 +268,16 @@ class FirewallPolicy(pulumi.CustomResource):
                  short_name: Optional[pulumi.Input[str]] = None,
                  __props__=None):
         """
-        Hierarchical firewall policy rules let you create and enforce a consistent firewall policy across your organization. Rules can explicitly allow or deny connections or delegate evaluation to lower level policies. Policies can be created within organizations or folders.
-
-        This resource should be generally be used with `compute.FirewallPolicyAssociation` and `compute.FirewallPolicyRule`
-
-        For more information see the [official documentation](https://cloud.google.com/vpc/docs/firewall-policies)
-
         ## Example Usage
 
+        ### Firewall Policy
+
         ```python
         import pulumi
         import pulumi_gcp as gcp
 
         default = gcp.compute.FirewallPolicy("default",
-            parent="organizations/12345",
+            parent="organizations/123456789",
             short_name="my-policy",
             description="Example Resource")
         ```
@@ -286,6 +286,12 @@ class FirewallPolicy(pulumi.CustomResource):
 
         FirewallPolicy can be imported using any of these accepted formats:
 
+        * `locations/global/firewallPolicies/{{name}}`
+
+        * `{{name}}`
+
+        When using the `pulumi import` command, FirewallPolicy can be imported using one of the formats above. For example:
+
         ```sh
         $ pulumi import gcp:compute/firewallPolicy:FirewallPolicy default locations/global/firewallPolicies/{{name}}
         ```
@@ -298,11 +304,12 @@ class FirewallPolicy(pulumi.CustomResource):
         :param pulumi.ResourceOptions opts: Options for the resource.
         :param pulumi.Input[str] description: An optional description of this resource. Provide this property when you create the resource.
         :param pulumi.Input[str] parent: The parent of the firewall policy.
-        :param pulumi.Input[str] short_name: User-provided name of the Organization firewall policy. The name should be unique in the organization in which the firewall policy is created. The name must be 1-63 characters long, and comply with RFC1035. Specifically, the name must be 1-63 characters long and match the regular expression a-z? which means the first character must be a lowercase letter, and all following characters must be a dash, lowercase letter, or digit, except the last character, which cannot be a dash.
-               
                
                
                - - -
+        :param pulumi.Input[str] short_name: User-provided name of the Organization firewall policy. The name should be unique in the organization in which the firewall policy is created.
+               This field is not applicable to network firewall policies. This name must be set on creation and cannot be changed. The name must be 1-63 characters long, and comply with RFC1035.
+               Specifically, the name must be 1-63 characters long and match the regular expression a-z? which means the first character must be a lowercase letter, and all following characters must be a dash, lowercase letter, or digit, except the last character, which cannot be a dash.
         """
         ...
     @overload
@@ -311,20 +318,16 @@ class FirewallPolicy(pulumi.CustomResource):
                  args: FirewallPolicyArgs,
                  opts: Optional[pulumi.ResourceOptions] = None):
         """
-        Hierarchical firewall policy rules let you create and enforce a consistent firewall policy across your organization. Rules can explicitly allow or deny connections or delegate evaluation to lower level policies. Policies can be created within organizations or folders.
-
-        This resource should be generally be used with `compute.FirewallPolicyAssociation` and `compute.FirewallPolicyRule`
-
-        For more information see the [official documentation](https://cloud.google.com/vpc/docs/firewall-policies)
-
         ## Example Usage
 
+        ### Firewall Policy
+
         ```python
         import pulumi
         import pulumi_gcp as gcp
 
         default = gcp.compute.FirewallPolicy("default",
-            parent="organizations/12345",
+            parent="organizations/123456789",
             short_name="my-policy",
             description="Example Resource")
         ```
@@ -333,6 +336,12 @@ class FirewallPolicy(pulumi.CustomResource):
 
         FirewallPolicy can be imported using any of these accepted formats:
 
+        * `locations/global/firewallPolicies/{{name}}`
+
+        * `{{name}}`
+
+        When using the `pulumi import` command, FirewallPolicy can be imported using one of the formats above. For example:
+
         ```sh
         $ pulumi import gcp:compute/firewallPolicy:FirewallPolicy default locations/global/firewallPolicies/{{name}}
         ```
@@ -415,14 +424,15 @@ class FirewallPolicy(pulumi.CustomResource):
         :param pulumi.Input[str] firewall_policy_id: The unique identifier for the resource. This identifier is defined by the server.
         :param pulumi.Input[str] name: Name of the resource. It is a numeric ID allocated by GCP which uniquely identifies the Firewall Policy.
         :param pulumi.Input[str] parent: The parent of the firewall policy.
-        :param pulumi.Input[int] rule_tuple_count: Total count of all firewall policy rule tuples. A firewall policy can not exceed a set number of tuples.
-        :param pulumi.Input[str] self_link: Server-defined URL for the resource.
-        :param pulumi.Input[str] self_link_with_id: Server-defined URL for this resource with the resource id.
-        :param pulumi.Input[str] short_name: User-provided name of the Organization firewall policy. The name should be unique in the organization in which the firewall policy is created. The name must be 1-63 characters long, and comply with RFC1035. Specifically, the name must be 1-63 characters long and match the regular expression a-z? which means the first character must be a lowercase letter, and all following characters must be a dash, lowercase letter, or digit, except the last character, which cannot be a dash.
-               
                
                
                - - -
+        :param pulumi.Input[int] rule_tuple_count: Total count of all firewall policy rule tuples. A firewall policy can not exceed a set number of tuples.
+        :param pulumi.Input[str] self_link: Server-defined URL for the resource.
+        :param pulumi.Input[str] self_link_with_id: Server-defined URL for this resource with the resource id.
+        :param pulumi.Input[str] short_name: User-provided name of the Organization firewall policy. The name should be unique in the organization in which the firewall policy is created.
+               This field is not applicable to network firewall policies. This name must be set on creation and cannot be changed. The name must be 1-63 characters long, and comply with RFC1035.
+               Specifically, the name must be 1-63 characters long and match the regular expression a-z? which means the first character must be a lowercase letter, and all following characters must be a dash, lowercase letter, or digit, except the last character, which cannot be a dash.
         """
         opts = pulumi.ResourceOptions.merge(opts, pulumi.ResourceOptions(id=id))
 
@@ -485,6 +495,9 @@ class FirewallPolicy(pulumi.CustomResource):
     def parent(self) -> pulumi.Output[str]:
         """
         The parent of the firewall policy.
+
+
+        - - -
         """
         return pulumi.get(self, "parent")
 
@@ -516,11 +529,9 @@ class FirewallPolicy(pulumi.CustomResource):
     @pulumi.getter(name="shortName")
     def short_name(self) -> pulumi.Output[str]:
         """
-        User-provided name of the Organization firewall policy. The name should be unique in the organization in which the firewall policy is created. The name must be 1-63 characters long, and comply with RFC1035. Specifically, the name must be 1-63 characters long and match the regular expression a-z? which means the first character must be a lowercase letter, and all following characters must be a dash, lowercase letter, or digit, except the last character, which cannot be a dash.
-
-
-
-        - - -
+        User-provided name of the Organization firewall policy. The name should be unique in the organization in which the firewall policy is created.
+        This field is not applicable to network firewall policies. This name must be set on creation and cannot be changed. The name must be 1-63 characters long, and comply with RFC1035.
+        Specifically, the name must be 1-63 characters long and match the regular expression a-z? which means the first character must be a lowercase letter, and all following characters must be a dash, lowercase letter, or digit, except the last character, which cannot be a dash.
         """
         return pulumi.get(self, "short_name")
 

pulumi_gcp/compute/forwarding_rule.py

@@ -27,6 +27,7 @@ class ForwardingRuleArgs:
                  backend_service: Optional[pulumi.Input[str]] = None,
                  description: Optional[pulumi.Input[str]] = None,
                  ip_address: Optional[pulumi.Input[str]] = None,
+                 ip_collection: Optional[pulumi.Input[str]] = None,
                  ip_protocol: Optional[pulumi.Input[str]] = None,
                  ip_version: Optional[pulumi.Input[str]] = None,
                  is_mirroring_collector: Optional[pulumi.Input[bool]] = None,
@@ -106,6 +107,15 @@ class ForwardingRuleArgs:
                specifications](https://cloud.google.com/load-balancing/docs/forwarding-rule-concepts#ip_address_specifications).
                When reading an `IPAddress`, the API always returns the IP
                address number.
+        :param pulumi.Input[str] ip_collection: Resource reference of a PublicDelegatedPrefix. The PDP must be a sub-PDP
+               in EXTERNAL_IPV6_FORWARDING_RULE_CREATION mode.
+               Use one of the following formats to specify a sub-PDP when creating an
+               IPv6 NetLB forwarding rule using BYOIP:
+               Full resource URL, as in:
+               * `https://www.googleapis.com/compute/v1/projects/{{projectId}}/regions/{{region}}/publicDelegatedPrefixes/{{sub-pdp-name}}`
+               Partial URL, as in:
+               * `projects/{{projectId}}/regions/region/publicDelegatedPrefixes/{{sub-pdp-name}}`
+               * `regions/{{region}}/publicDelegatedPrefixes/{{sub-pdp-name}}`
         :param pulumi.Input[str] ip_protocol: The IP protocol to which this rule applies.
                For protocol forwarding, valid
                options are `TCP`, `UDP`, `ESP`,
@@ -255,6 +265,8 @@ class ForwardingRuleArgs:
             pulumi.set(__self__, "description", description)
         if ip_address is not None:
             pulumi.set(__self__, "ip_address", ip_address)
+        if ip_collection is not None:
+            pulumi.set(__self__, "ip_collection", ip_collection)
         if ip_protocol is not None:
             pulumi.set(__self__, "ip_protocol", ip_protocol)
         if ip_version is not None:
@@ -418,6 +430,26 @@ class ForwardingRuleArgs:
     def ip_address(self, value: Optional[pulumi.Input[str]]):
         pulumi.set(self, "ip_address", value)
 
+    @property
+    @pulumi.getter(name="ipCollection")
+    def ip_collection(self) -> Optional[pulumi.Input[str]]:
+        """
+        Resource reference of a PublicDelegatedPrefix. The PDP must be a sub-PDP
+        in EXTERNAL_IPV6_FORWARDING_RULE_CREATION mode.
+        Use one of the following formats to specify a sub-PDP when creating an
+        IPv6 NetLB forwarding rule using BYOIP:
+        Full resource URL, as in:
+        * `https://www.googleapis.com/compute/v1/projects/{{projectId}}/regions/{{region}}/publicDelegatedPrefixes/{{sub-pdp-name}}`
+        Partial URL, as in:
+        * `projects/{{projectId}}/regions/region/publicDelegatedPrefixes/{{sub-pdp-name}}`
+        * `regions/{{region}}/publicDelegatedPrefixes/{{sub-pdp-name}}`
+        """
+        return pulumi.get(self, "ip_collection")
+
+    @ip_collection.setter
+    def ip_collection(self, value: Optional[pulumi.Input[str]]):
+        pulumi.set(self, "ip_collection", value)
+
     @property
     @pulumi.getter(name="ipProtocol")
     def ip_protocol(self) -> Optional[pulumi.Input[str]]:
@@ -775,6 +807,7 @@ class _ForwardingRuleState:
                  effective_labels: Optional[pulumi.Input[Mapping[str, pulumi.Input[str]]]] = None,
                  forwarding_rule_id: Optional[pulumi.Input[int]] = None,
                  ip_address: Optional[pulumi.Input[str]] = None,
+                 ip_collection: Optional[pulumi.Input[str]] = None,
                  ip_protocol: Optional[pulumi.Input[str]] = None,
                  ip_version: Optional[pulumi.Input[str]] = None,
                  is_mirroring_collector: Optional[pulumi.Input[bool]] = None,
@@ -864,6 +897,15 @@ class _ForwardingRuleState:
                specifications](https://cloud.google.com/load-balancing/docs/forwarding-rule-concepts#ip_address_specifications).
                When reading an `IPAddress`, the API always returns the IP
                address number.
+        :param pulumi.Input[str] ip_collection: Resource reference of a PublicDelegatedPrefix. The PDP must be a sub-PDP
+               in EXTERNAL_IPV6_FORWARDING_RULE_CREATION mode.
+               Use one of the following formats to specify a sub-PDP when creating an
+               IPv6 NetLB forwarding rule using BYOIP:
+               Full resource URL, as in:
+               * `https://www.googleapis.com/compute/v1/projects/{{projectId}}/regions/{{region}}/publicDelegatedPrefixes/{{sub-pdp-name}}`
+               Partial URL, as in:
+               * `projects/{{projectId}}/regions/region/publicDelegatedPrefixes/{{sub-pdp-name}}`
+               * `regions/{{region}}/publicDelegatedPrefixes/{{sub-pdp-name}}`
         :param pulumi.Input[str] ip_protocol: The IP protocol to which this rule applies.
                For protocol forwarding, valid
                options are `TCP`, `UDP`, `ESP`,
@@ -1030,6 +1072,8 @@ class _ForwardingRuleState:
             pulumi.set(__self__, "forwarding_rule_id", forwarding_rule_id)
         if ip_address is not None:
             pulumi.set(__self__, "ip_address", ip_address)
+        if ip_collection is not None:
+            pulumi.set(__self__, "ip_collection", ip_collection)
         if ip_protocol is not None:
             pulumi.set(__self__, "ip_protocol", ip_protocol)
         if ip_version is not None:
@@ -1253,6 +1297,26 @@ class _ForwardingRuleState:
     def ip_address(self, value: Optional[pulumi.Input[str]]):
         pulumi.set(self, "ip_address", value)
 
+    @property
+    @pulumi.getter(name="ipCollection")
+    def ip_collection(self) -> Optional[pulumi.Input[str]]:
+        """
+        Resource reference of a PublicDelegatedPrefix. The PDP must be a sub-PDP
+        in EXTERNAL_IPV6_FORWARDING_RULE_CREATION mode.
+        Use one of the following formats to specify a sub-PDP when creating an
+        IPv6 NetLB forwarding rule using BYOIP:
+        Full resource URL, as in:
+        * `https://www.googleapis.com/compute/v1/projects/{{projectId}}/regions/{{region}}/publicDelegatedPrefixes/{{sub-pdp-name}}`
+        Partial URL, as in:
+        * `projects/{{projectId}}/regions/region/publicDelegatedPrefixes/{{sub-pdp-name}}`
+        * `regions/{{region}}/publicDelegatedPrefixes/{{sub-pdp-name}}`
+        """
+        return pulumi.get(self, "ip_collection")
+
+    @ip_collection.setter
+    def ip_collection(self, value: Optional[pulumi.Input[str]]):
+        pulumi.set(self, "ip_collection", value)
+
     @property
     @pulumi.getter(name="ipProtocol")
     def ip_protocol(self) -> Optional[pulumi.Input[str]]:
@@ -1683,6 +1747,7 @@ class ForwardingRule(pulumi.CustomResource):
                  backend_service: Optional[pulumi.Input[str]] = None,
                  description: Optional[pulumi.Input[str]] = None,
                  ip_address: Optional[pulumi.Input[str]] = None,
+                 ip_collection: Optional[pulumi.Input[str]] = None,
                  ip_protocol: Optional[pulumi.Input[str]] = None,
                  ip_version: Optional[pulumi.Input[str]] = None,
                  is_mirroring_collector: Optional[pulumi.Input[bool]] = None,
@@ -2457,6 +2522,15 @@ class ForwardingRule(pulumi.CustomResource):
                specifications](https://cloud.google.com/load-balancing/docs/forwarding-rule-concepts#ip_address_specifications).
                When reading an `IPAddress`, the API always returns the IP
                address number.
+        :param pulumi.Input[str] ip_collection: Resource reference of a PublicDelegatedPrefix. The PDP must be a sub-PDP
+               in EXTERNAL_IPV6_FORWARDING_RULE_CREATION mode.
+               Use one of the following formats to specify a sub-PDP when creating an
+               IPv6 NetLB forwarding rule using BYOIP:
+               Full resource URL, as in:
+               * `https://www.googleapis.com/compute/v1/projects/{{projectId}}/regions/{{region}}/publicDelegatedPrefixes/{{sub-pdp-name}}`
+               Partial URL, as in:
+               * `projects/{{projectId}}/regions/region/publicDelegatedPrefixes/{{sub-pdp-name}}`
+               * `regions/{{region}}/publicDelegatedPrefixes/{{sub-pdp-name}}`
         :param pulumi.Input[str] ip_protocol: The IP protocol to which this rule applies.
                For protocol forwarding, valid
                options are `TCP`, `UDP`, `ESP`,
@@ -3315,6 +3389,7 @@ class ForwardingRule(pulumi.CustomResource):
                  backend_service: Optional[pulumi.Input[str]] = None,
                  description: Optional[pulumi.Input[str]] = None,
                  ip_address: Optional[pulumi.Input[str]] = None,
+                 ip_collection: Optional[pulumi.Input[str]] = None,
                  ip_protocol: Optional[pulumi.Input[str]] = None,
                  ip_version: Optional[pulumi.Input[str]] = None,
                  is_mirroring_collector: Optional[pulumi.Input[bool]] = None,
@@ -3349,6 +3424,7 @@ class ForwardingRule(pulumi.CustomResource):
             __props__.__dict__["backend_service"] = backend_service
             __props__.__dict__["description"] = description
             __props__.__dict__["ip_address"] = ip_address
+            __props__.__dict__["ip_collection"] = ip_collection
             __props__.__dict__["ip_protocol"] = ip_protocol
             __props__.__dict__["ip_version"] = ip_version
             __props__.__dict__["is_mirroring_collector"] = is_mirroring_collector
@@ -3400,6 +3476,7 @@ class ForwardingRule(pulumi.CustomResource):
             effective_labels: Optional[pulumi.Input[Mapping[str, pulumi.Input[str]]]] = None,
             forwarding_rule_id: Optional[pulumi.Input[int]] = None,
             ip_address: Optional[pulumi.Input[str]] = None,
+            ip_collection: Optional[pulumi.Input[str]] = None,
             ip_protocol: Optional[pulumi.Input[str]] = None,
             ip_version: Optional[pulumi.Input[str]] = None,
             is_mirroring_collector: Optional[pulumi.Input[bool]] = None,
@@ -3494,6 +3571,15 @@ class ForwardingRule(pulumi.CustomResource):
                specifications](https://cloud.google.com/load-balancing/docs/forwarding-rule-concepts#ip_address_specifications).
                When reading an `IPAddress`, the API always returns the IP
                address number.
+        :param pulumi.Input[str] ip_collection: Resource reference of a PublicDelegatedPrefix. The PDP must be a sub-PDP
+               in EXTERNAL_IPV6_FORWARDING_RULE_CREATION mode.
+               Use one of the following formats to specify a sub-PDP when creating an
+               IPv6 NetLB forwarding rule using BYOIP:
+               Full resource URL, as in:
+               * `https://www.googleapis.com/compute/v1/projects/{{projectId}}/regions/{{region}}/publicDelegatedPrefixes/{{sub-pdp-name}}`
+               Partial URL, as in:
+               * `projects/{{projectId}}/regions/region/publicDelegatedPrefixes/{{sub-pdp-name}}`
+               * `regions/{{region}}/publicDelegatedPrefixes/{{sub-pdp-name}}`
         :param pulumi.Input[str] ip_protocol: The IP protocol to which this rule applies.
                For protocol forwarding, valid
                options are `TCP`, `UDP`, `ESP`,
@@ -3654,6 +3740,7 @@ class ForwardingRule(pulumi.CustomResource):
         __props__.__dict__["effective_labels"] = effective_labels
         __props__.__dict__["forwarding_rule_id"] = forwarding_rule_id
         __props__.__dict__["ip_address"] = ip_address
+        __props__.__dict__["ip_collection"] = ip_collection
         __props__.__dict__["ip_protocol"] = ip_protocol
         __props__.__dict__["ip_version"] = ip_version
         __props__.__dict__["is_mirroring_collector"] = is_mirroring_collector
@@ -3813,6 +3900,22 @@ class ForwardingRule(pulumi.CustomResource):
         """
         return pulumi.get(self, "ip_address")
 
+    @property
+    @pulumi.getter(name="ipCollection")
+    def ip_collection(self) -> pulumi.Output[Optional[str]]:
+        """
+        Resource reference of a PublicDelegatedPrefix. The PDP must be a sub-PDP
+        in EXTERNAL_IPV6_FORWARDING_RULE_CREATION mode.
+        Use one of the following formats to specify a sub-PDP when creating an
+        IPv6 NetLB forwarding rule using BYOIP:
+        Full resource URL, as in:
+        * `https://www.googleapis.com/compute/v1/projects/{{projectId}}/regions/{{region}}/publicDelegatedPrefixes/{{sub-pdp-name}}`
+        Partial URL, as in:
+        * `projects/{{projectId}}/regions/region/publicDelegatedPrefixes/{{sub-pdp-name}}`
+        * `regions/{{region}}/publicDelegatedPrefixes/{{sub-pdp-name}}`
+        """
+        return pulumi.get(self, "ip_collection")
+
     @property
     @pulumi.getter(name="ipProtocol")
     def ip_protocol(self) -> pulumi.Output[str]: