pulumi-gcp 8.22.0a1741888019__py3-none-any.whl → 8.23.0__py3-none-any.whl
This diff represents the content of publicly available package versions that have been released to one of the supported registries. The information contained in this diff is provided for informational purposes only and reflects changes between package versions as they appear in their respective public registries.
- pulumi_gcp/__init__.py +32 -0
- pulumi_gcp/alloydb/_inputs.py +27 -1
- pulumi_gcp/alloydb/outputs.py +33 -2
- pulumi_gcp/applicationintegration/client.py +18 -24
- pulumi_gcp/bigquery/_inputs.py +20 -0
- pulumi_gcp/bigquery/outputs.py +12 -0
- pulumi_gcp/bigquery/table.py +61 -0
- pulumi_gcp/bigtable/table.py +7 -7
- pulumi_gcp/clouddeploy/_inputs.py +20 -0
- pulumi_gcp/clouddeploy/outputs.py +15 -1
- pulumi_gcp/cloudfunctions/function.py +11 -11
- pulumi_gcp/cloudfunctionsv2/function.py +24 -24
- pulumi_gcp/cloudidentity/get_group_transitive_memberships.py +41 -2
- pulumi_gcp/cloudidentity/outputs.py +18 -38
- pulumi_gcp/compute/firewall_policy.py +20 -0
- pulumi_gcp/compute/region_network_endpoint_group.py +2 -2
- pulumi_gcp/compute/subnetwork.py +109 -1
- pulumi_gcp/compute/target_https_proxy.py +7 -7
- pulumi_gcp/config/__init__.pyi +2 -0
- pulumi_gcp/config/vars.py +4 -0
- pulumi_gcp/container/_inputs.py +3 -3
- pulumi_gcp/container/get_attached_versions.py +2 -2
- pulumi_gcp/container/outputs.py +4 -4
- pulumi_gcp/dataform/repository.py +49 -0
- pulumi_gcp/dataproc/get_metastore_service.py +26 -4
- pulumi_gcp/dataproc/metastore_federation.py +56 -0
- pulumi_gcp/dataproc/metastore_service.py +58 -2
- pulumi_gcp/eventarc/__init__.py +1 -0
- pulumi_gcp/eventarc/_inputs.py +1758 -0
- pulumi_gcp/eventarc/outputs.py +1337 -0
- pulumi_gcp/eventarc/pipeline.py +1596 -0
- pulumi_gcp/firebase/__init__.py +1 -0
- pulumi_gcp/firebase/_inputs.py +154 -0
- pulumi_gcp/firebase/app_hosting_backend.py +1303 -0
- pulumi_gcp/firebase/hosting_version.py +2 -2
- pulumi_gcp/firebase/outputs.py +127 -0
- pulumi_gcp/kms/get_key_rings.py +39 -2
- pulumi_gcp/managedkafka/__init__.py +2 -0
- pulumi_gcp/managedkafka/_inputs.py +263 -0
- pulumi_gcp/managedkafka/connect_cluster.py +795 -0
- pulumi_gcp/managedkafka/connector.py +695 -0
- pulumi_gcp/managedkafka/outputs.py +248 -0
- pulumi_gcp/memorystore/instance.py +7 -7
- pulumi_gcp/monitoring/uptime_check_config.py +2 -2
- pulumi_gcp/networksecurity/_inputs.py +643 -0
- pulumi_gcp/networksecurity/gateway_security_policy.py +0 -7
- pulumi_gcp/networksecurity/mirroring_deployment.py +22 -0
- pulumi_gcp/networksecurity/mirroring_deployment_group.py +20 -0
- pulumi_gcp/networksecurity/mirroring_endpoint_group.py +24 -0
- pulumi_gcp/networksecurity/mirroring_endpoint_group_association.py +28 -0
- pulumi_gcp/networksecurity/outputs.py +475 -0
- pulumi_gcp/networksecurity/tls_inspection_policy.py +14 -0
- pulumi_gcp/networkservices/gateway.py +242 -120
- pulumi_gcp/projects/__init__.py +2 -0
- pulumi_gcp/projects/get_iam_custom_role.py +198 -0
- pulumi_gcp/projects/get_iam_custom_roles.py +164 -0
- pulumi_gcp/projects/outputs.py +96 -0
- pulumi_gcp/provider.py +20 -0
- pulumi_gcp/pulumi-plugin.json +1 -1
- pulumi_gcp/servicenetworking/peered_dns_domain.py +4 -0
- pulumi_gcp/sql/outputs.py +8 -8
- pulumi_gcp/storage/_inputs.py +14 -6
- pulumi_gcp/storage/insights_report_config.py +121 -20
- pulumi_gcp/storage/outputs.py +7 -4
- pulumi_gcp/workflows/workflow.py +75 -7
- {pulumi_gcp-8.22.0a1741888019.dist-info → pulumi_gcp-8.23.0.dist-info}/METADATA +2 -2
- {pulumi_gcp-8.22.0a1741888019.dist-info → pulumi_gcp-8.23.0.dist-info}/RECORD +69 -63
- {pulumi_gcp-8.22.0a1741888019.dist-info → pulumi_gcp-8.23.0.dist-info}/WHEEL +1 -1
- {pulumi_gcp-8.22.0a1741888019.dist-info → pulumi_gcp-8.23.0.dist-info}/top_level.txt +0 -0
@@ -25,7 +25,9 @@ class GatewayArgs:
|
|
25
25
|
certificate_urls: Optional[pulumi.Input[Sequence[pulumi.Input[str]]]] = None,
|
26
26
|
delete_swg_autogen_router_on_destroy: Optional[pulumi.Input[bool]] = None,
|
27
27
|
description: Optional[pulumi.Input[str]] = None,
|
28
|
+
envoy_headers: Optional[pulumi.Input[str]] = None,
|
28
29
|
gateway_security_policy: Optional[pulumi.Input[str]] = None,
|
30
|
+
ip_version: Optional[pulumi.Input[str]] = None,
|
29
31
|
labels: Optional[pulumi.Input[Mapping[str, pulumi.Input[str]]]] = None,
|
30
32
|
location: Optional[pulumi.Input[str]] = None,
|
31
33
|
name: Optional[pulumi.Input[str]] = None,
|
@@ -38,46 +40,52 @@ class GatewayArgs:
|
|
38
40
|
"""
|
39
41
|
The set of arguments for constructing a Gateway resource.
|
40
42
|
:param pulumi.Input[Sequence[pulumi.Input[int]]] ports: One or more port numbers (1-65535), on which the Gateway will receive traffic.
|
41
|
-
The proxy binds to the specified ports. Gateways of type 'SECURE_WEB_GATEWAY' are
|
42
|
-
|
43
|
-
:param pulumi.Input[str] type: Immutable. The type of the customer
|
44
|
-
Possible values are: `
|
45
|
-
:param pulumi.Input[Sequence[pulumi.Input[str]]] addresses: Zero or one IPv4
|
46
|
-
an IP from the subnetwork is allocated
|
47
|
-
|
43
|
+
The proxy binds to the specified ports. Gateways of type 'SECURE_WEB_GATEWAY' are limited to 1 port.
|
44
|
+
Gateways of type 'OPEN_MESH' listen on 0.0.0.0 for IPv4 and :: for IPv6 and support multiple ports.
|
45
|
+
:param pulumi.Input[str] type: Immutable. The type of the customer managed gateway.
|
46
|
+
Possible values are: `OPEN_MESH`, `SECURE_WEB_GATEWAY`.
|
47
|
+
:param pulumi.Input[Sequence[pulumi.Input[str]]] addresses: Zero or one IPv4 or IPv6 address on which the Gateway will receive the traffic.
|
48
|
+
When no address is provided, an IP from the subnetwork is allocated.
|
49
|
+
This field only applies to gateways of type 'SECURE_WEB_GATEWAY'.
|
50
|
+
Gateways of type 'OPEN_MESH' listen on 0.0.0.0 for IPv4 and :: for IPv6.
|
48
51
|
:param pulumi.Input[Sequence[pulumi.Input[str]]] certificate_urls: A fully-qualified Certificates URL reference. The proxy presents a Certificate (selected based on SNI) when establishing a TLS connection.
|
49
52
|
This feature only applies to gateways of type 'SECURE_WEB_GATEWAY'.
|
50
53
|
:param pulumi.Input[bool] delete_swg_autogen_router_on_destroy: When deleting a gateway of type 'SECURE_WEB_GATEWAY', this boolean option will also delete auto generated router by the gateway creation.
|
51
54
|
If there is no other gateway of type 'SECURE_WEB_GATEWAY' remaining for that region and network it will be deleted.
|
52
55
|
:param pulumi.Input[str] description: A free-text description of the resource. Max length 1024 characters.
|
56
|
+
:param pulumi.Input[str] envoy_headers: Determines if envoy will insert internal debug headers into upstream requests.
|
57
|
+
Other Envoy headers may still be injected.
|
58
|
+
By default, envoy will not insert any debug headers.
|
59
|
+
Possible values are: `NONE`, `DEBUG_HEADERS`.
|
53
60
|
:param pulumi.Input[str] gateway_security_policy: A fully-qualified GatewaySecurityPolicy URL reference. Defines how a server should apply security policy to inbound (VM to Proxy) initiated connections.
|
54
|
-
For example:
|
61
|
+
For example: 'projects/*/locations/*/gatewaySecurityPolicies/swg-policy'.
|
55
62
|
This policy is specific to gateways of type 'SECURE_WEB_GATEWAY'.
|
63
|
+
:param pulumi.Input[str] ip_version: The IP Version that will be used by this gateway.
|
64
|
+
Possible values are: `IPV4`, `IPV6`.
|
56
65
|
:param pulumi.Input[Mapping[str, pulumi.Input[str]]] labels: Set of label tags associated with the Gateway resource.
|
66
|
+
|
57
67
|
**Note**: This field is non-authoritative, and will only manage the labels present in your configuration.
|
58
68
|
Please refer to the field `effective_labels` for all of the labels present on the resource.
|
59
69
|
:param pulumi.Input[str] location: The location of the gateway.
|
60
70
|
The default value is `global`.
|
61
|
-
:param pulumi.Input[str] name:
|
71
|
+
:param pulumi.Input[str] name: Name of the Gateway resource.
|
62
72
|
|
63
73
|
|
64
74
|
- - -
|
65
75
|
:param pulumi.Input[str] network: The relative resource name identifying the VPC network that is using this configuration.
|
66
|
-
For example:
|
76
|
+
For example: 'projects/*/global/networks/network-1'.
|
67
77
|
Currently, this field is specific to gateways of type 'SECURE_WEB_GATEWAY'.
|
68
78
|
:param pulumi.Input[str] project: The ID of the project in which the resource belongs.
|
69
79
|
If it is not provided, the provider project is used.
|
70
80
|
:param pulumi.Input[str] routing_mode: The routing mode of the Gateway. This field is configurable only for gateways of type SECURE_WEB_GATEWAY. This field is required for gateways of type SECURE_WEB_GATEWAY.
|
71
81
|
Possible values are: `NEXT_HOP_ROUTING_MODE`.
|
72
82
|
:param pulumi.Input[str] scope: Immutable. Scope determines how configuration across multiple Gateway instances are merged.
|
73
|
-
The configuration for multiple Gateway instances with the same scope will be merged as presented as
|
74
|
-
a single coniguration to the proxy/load balancer.
|
83
|
+
The configuration for multiple Gateway instances with the same scope will be merged as presented as a single coniguration to the proxy/load balancer.
|
75
84
|
Max length 64 characters. Scope should start with a letter and can only have letters, numbers, hyphens.
|
76
|
-
:param pulumi.Input[str] server_tls_policy: A fully-qualified ServerTLSPolicy URL reference. Specifies how TLS traffic is terminated.
|
77
|
-
If empty, TLS termination is disabled.
|
85
|
+
:param pulumi.Input[str] server_tls_policy: A fully-qualified ServerTLSPolicy URL reference. Specifies how TLS traffic is terminated. If empty, TLS termination is disabled.
|
78
86
|
:param pulumi.Input[str] subnetwork: The relative resource name identifying the subnetwork in which this SWG is allocated.
|
79
|
-
For example:
|
80
|
-
Currently, this field is specific to gateways of type 'SECURE_WEB_GATEWAY.
|
87
|
+
For example: projects/*/regions/us-central1/subnetworks/network-1.
|
88
|
+
Currently, this field is specific to gateways of type 'SECURE_WEB_GATEWAY'.
|
81
89
|
"""
|
82
90
|
pulumi.set(__self__, "ports", ports)
|
83
91
|
pulumi.set(__self__, "type", type)
|
@@ -89,8 +97,12 @@ class GatewayArgs:
|
|
89
97
|
pulumi.set(__self__, "delete_swg_autogen_router_on_destroy", delete_swg_autogen_router_on_destroy)
|
90
98
|
if description is not None:
|
91
99
|
pulumi.set(__self__, "description", description)
|
100
|
+
if envoy_headers is not None:
|
101
|
+
pulumi.set(__self__, "envoy_headers", envoy_headers)
|
92
102
|
if gateway_security_policy is not None:
|
93
103
|
pulumi.set(__self__, "gateway_security_policy", gateway_security_policy)
|
104
|
+
if ip_version is not None:
|
105
|
+
pulumi.set(__self__, "ip_version", ip_version)
|
94
106
|
if labels is not None:
|
95
107
|
pulumi.set(__self__, "labels", labels)
|
96
108
|
if location is not None:
|
@@ -115,8 +127,8 @@ class GatewayArgs:
|
|
115
127
|
def ports(self) -> pulumi.Input[Sequence[pulumi.Input[int]]]:
|
116
128
|
"""
|
117
129
|
One or more port numbers (1-65535), on which the Gateway will receive traffic.
|
118
|
-
The proxy binds to the specified ports. Gateways of type 'SECURE_WEB_GATEWAY' are
|
119
|
-
|
130
|
+
The proxy binds to the specified ports. Gateways of type 'SECURE_WEB_GATEWAY' are limited to 1 port.
|
131
|
+
Gateways of type 'OPEN_MESH' listen on 0.0.0.0 for IPv4 and :: for IPv6 and support multiple ports.
|
120
132
|
"""
|
121
133
|
return pulumi.get(self, "ports")
|
122
134
|
|
@@ -128,8 +140,8 @@ class GatewayArgs:
|
|
128
140
|
@pulumi.getter
|
129
141
|
def type(self) -> pulumi.Input[str]:
|
130
142
|
"""
|
131
|
-
Immutable. The type of the customer
|
132
|
-
Possible values are: `
|
143
|
+
Immutable. The type of the customer managed gateway.
|
144
|
+
Possible values are: `OPEN_MESH`, `SECURE_WEB_GATEWAY`.
|
133
145
|
"""
|
134
146
|
return pulumi.get(self, "type")
|
135
147
|
|
@@ -141,9 +153,10 @@ class GatewayArgs:
|
|
141
153
|
@pulumi.getter
|
142
154
|
def addresses(self) -> Optional[pulumi.Input[Sequence[pulumi.Input[str]]]]:
|
143
155
|
"""
|
144
|
-
Zero or one IPv4
|
145
|
-
an IP from the subnetwork is allocated
|
146
|
-
|
156
|
+
Zero or one IPv4 or IPv6 address on which the Gateway will receive the traffic.
|
157
|
+
When no address is provided, an IP from the subnetwork is allocated.
|
158
|
+
This field only applies to gateways of type 'SECURE_WEB_GATEWAY'.
|
159
|
+
Gateways of type 'OPEN_MESH' listen on 0.0.0.0 for IPv4 and :: for IPv6.
|
147
160
|
"""
|
148
161
|
return pulumi.get(self, "addresses")
|
149
162
|
|
@@ -189,12 +202,27 @@ class GatewayArgs:
|
|
189
202
|
def description(self, value: Optional[pulumi.Input[str]]):
|
190
203
|
pulumi.set(self, "description", value)
|
191
204
|
|
205
|
+
@property
|
206
|
+
@pulumi.getter(name="envoyHeaders")
|
207
|
+
def envoy_headers(self) -> Optional[pulumi.Input[str]]:
|
208
|
+
"""
|
209
|
+
Determines if envoy will insert internal debug headers into upstream requests.
|
210
|
+
Other Envoy headers may still be injected.
|
211
|
+
By default, envoy will not insert any debug headers.
|
212
|
+
Possible values are: `NONE`, `DEBUG_HEADERS`.
|
213
|
+
"""
|
214
|
+
return pulumi.get(self, "envoy_headers")
|
215
|
+
|
216
|
+
@envoy_headers.setter
|
217
|
+
def envoy_headers(self, value: Optional[pulumi.Input[str]]):
|
218
|
+
pulumi.set(self, "envoy_headers", value)
|
219
|
+
|
192
220
|
@property
|
193
221
|
@pulumi.getter(name="gatewaySecurityPolicy")
|
194
222
|
def gateway_security_policy(self) -> Optional[pulumi.Input[str]]:
|
195
223
|
"""
|
196
224
|
A fully-qualified GatewaySecurityPolicy URL reference. Defines how a server should apply security policy to inbound (VM to Proxy) initiated connections.
|
197
|
-
For example:
|
225
|
+
For example: 'projects/*/locations/*/gatewaySecurityPolicies/swg-policy'.
|
198
226
|
This policy is specific to gateways of type 'SECURE_WEB_GATEWAY'.
|
199
227
|
"""
|
200
228
|
return pulumi.get(self, "gateway_security_policy")
|
@@ -203,11 +231,25 @@ class GatewayArgs:
|
|
203
231
|
def gateway_security_policy(self, value: Optional[pulumi.Input[str]]):
|
204
232
|
pulumi.set(self, "gateway_security_policy", value)
|
205
233
|
|
234
|
+
@property
|
235
|
+
@pulumi.getter(name="ipVersion")
|
236
|
+
def ip_version(self) -> Optional[pulumi.Input[str]]:
|
237
|
+
"""
|
238
|
+
The IP Version that will be used by this gateway.
|
239
|
+
Possible values are: `IPV4`, `IPV6`.
|
240
|
+
"""
|
241
|
+
return pulumi.get(self, "ip_version")
|
242
|
+
|
243
|
+
@ip_version.setter
|
244
|
+
def ip_version(self, value: Optional[pulumi.Input[str]]):
|
245
|
+
pulumi.set(self, "ip_version", value)
|
246
|
+
|
206
247
|
@property
|
207
248
|
@pulumi.getter
|
208
249
|
def labels(self) -> Optional[pulumi.Input[Mapping[str, pulumi.Input[str]]]]:
|
209
250
|
"""
|
210
251
|
Set of label tags associated with the Gateway resource.
|
252
|
+
|
211
253
|
**Note**: This field is non-authoritative, and will only manage the labels present in your configuration.
|
212
254
|
Please refer to the field `effective_labels` for all of the labels present on the resource.
|
213
255
|
"""
|
@@ -234,7 +276,7 @@ class GatewayArgs:
|
|
234
276
|
@pulumi.getter
|
235
277
|
def name(self) -> Optional[pulumi.Input[str]]:
|
236
278
|
"""
|
237
|
-
|
279
|
+
Name of the Gateway resource.
|
238
280
|
|
239
281
|
|
240
282
|
- - -
|
@@ -250,7 +292,7 @@ class GatewayArgs:
|
|
250
292
|
def network(self) -> Optional[pulumi.Input[str]]:
|
251
293
|
"""
|
252
294
|
The relative resource name identifying the VPC network that is using this configuration.
|
253
|
-
For example:
|
295
|
+
For example: 'projects/*/global/networks/network-1'.
|
254
296
|
Currently, this field is specific to gateways of type 'SECURE_WEB_GATEWAY'.
|
255
297
|
"""
|
256
298
|
return pulumi.get(self, "network")
|
@@ -290,8 +332,7 @@ class GatewayArgs:
|
|
290
332
|
def scope(self) -> Optional[pulumi.Input[str]]:
|
291
333
|
"""
|
292
334
|
Immutable. Scope determines how configuration across multiple Gateway instances are merged.
|
293
|
-
The configuration for multiple Gateway instances with the same scope will be merged as presented as
|
294
|
-
a single coniguration to the proxy/load balancer.
|
335
|
+
The configuration for multiple Gateway instances with the same scope will be merged as presented as a single coniguration to the proxy/load balancer.
|
295
336
|
Max length 64 characters. Scope should start with a letter and can only have letters, numbers, hyphens.
|
296
337
|
"""
|
297
338
|
return pulumi.get(self, "scope")
|
@@ -304,8 +345,7 @@ class GatewayArgs:
|
|
304
345
|
@pulumi.getter(name="serverTlsPolicy")
|
305
346
|
def server_tls_policy(self) -> Optional[pulumi.Input[str]]:
|
306
347
|
"""
|
307
|
-
A fully-qualified ServerTLSPolicy URL reference. Specifies how TLS traffic is terminated.
|
308
|
-
If empty, TLS termination is disabled.
|
348
|
+
A fully-qualified ServerTLSPolicy URL reference. Specifies how TLS traffic is terminated. If empty, TLS termination is disabled.
|
309
349
|
"""
|
310
350
|
return pulumi.get(self, "server_tls_policy")
|
311
351
|
|
@@ -318,8 +358,8 @@ class GatewayArgs:
|
|
318
358
|
def subnetwork(self) -> Optional[pulumi.Input[str]]:
|
319
359
|
"""
|
320
360
|
The relative resource name identifying the subnetwork in which this SWG is allocated.
|
321
|
-
For example:
|
322
|
-
Currently, this field is specific to gateways of type 'SECURE_WEB_GATEWAY.
|
361
|
+
For example: projects/*/regions/us-central1/subnetworks/network-1.
|
362
|
+
Currently, this field is specific to gateways of type 'SECURE_WEB_GATEWAY'.
|
323
363
|
"""
|
324
364
|
return pulumi.get(self, "subnetwork")
|
325
365
|
|
@@ -337,7 +377,9 @@ class _GatewayState:
|
|
337
377
|
delete_swg_autogen_router_on_destroy: Optional[pulumi.Input[bool]] = None,
|
338
378
|
description: Optional[pulumi.Input[str]] = None,
|
339
379
|
effective_labels: Optional[pulumi.Input[Mapping[str, pulumi.Input[str]]]] = None,
|
380
|
+
envoy_headers: Optional[pulumi.Input[str]] = None,
|
340
381
|
gateway_security_policy: Optional[pulumi.Input[str]] = None,
|
382
|
+
ip_version: Optional[pulumi.Input[str]] = None,
|
341
383
|
labels: Optional[pulumi.Input[Mapping[str, pulumi.Input[str]]]] = None,
|
342
384
|
location: Optional[pulumi.Input[str]] = None,
|
343
385
|
name: Optional[pulumi.Input[str]] = None,
|
@@ -354,34 +396,42 @@ class _GatewayState:
|
|
354
396
|
update_time: Optional[pulumi.Input[str]] = None):
|
355
397
|
"""
|
356
398
|
Input properties used for looking up and filtering Gateway resources.
|
357
|
-
:param pulumi.Input[Sequence[pulumi.Input[str]]] addresses: Zero or one IPv4
|
358
|
-
an IP from the subnetwork is allocated
|
359
|
-
|
399
|
+
:param pulumi.Input[Sequence[pulumi.Input[str]]] addresses: Zero or one IPv4 or IPv6 address on which the Gateway will receive the traffic.
|
400
|
+
When no address is provided, an IP from the subnetwork is allocated.
|
401
|
+
This field only applies to gateways of type 'SECURE_WEB_GATEWAY'.
|
402
|
+
Gateways of type 'OPEN_MESH' listen on 0.0.0.0 for IPv4 and :: for IPv6.
|
360
403
|
:param pulumi.Input[Sequence[pulumi.Input[str]]] certificate_urls: A fully-qualified Certificates URL reference. The proxy presents a Certificate (selected based on SNI) when establishing a TLS connection.
|
361
404
|
This feature only applies to gateways of type 'SECURE_WEB_GATEWAY'.
|
362
|
-
:param pulumi.Input[str] create_time:
|
405
|
+
:param pulumi.Input[str] create_time: The timestamp when the resource was created.
|
363
406
|
:param pulumi.Input[bool] delete_swg_autogen_router_on_destroy: When deleting a gateway of type 'SECURE_WEB_GATEWAY', this boolean option will also delete auto generated router by the gateway creation.
|
364
407
|
If there is no other gateway of type 'SECURE_WEB_GATEWAY' remaining for that region and network it will be deleted.
|
365
408
|
:param pulumi.Input[str] description: A free-text description of the resource. Max length 1024 characters.
|
366
409
|
:param pulumi.Input[Mapping[str, pulumi.Input[str]]] effective_labels: All of labels (key/value pairs) present on the resource in GCP, including the labels configured through Pulumi, other clients and services.
|
410
|
+
:param pulumi.Input[str] envoy_headers: Determines if envoy will insert internal debug headers into upstream requests.
|
411
|
+
Other Envoy headers may still be injected.
|
412
|
+
By default, envoy will not insert any debug headers.
|
413
|
+
Possible values are: `NONE`, `DEBUG_HEADERS`.
|
367
414
|
:param pulumi.Input[str] gateway_security_policy: A fully-qualified GatewaySecurityPolicy URL reference. Defines how a server should apply security policy to inbound (VM to Proxy) initiated connections.
|
368
|
-
For example:
|
415
|
+
For example: 'projects/*/locations/*/gatewaySecurityPolicies/swg-policy'.
|
369
416
|
This policy is specific to gateways of type 'SECURE_WEB_GATEWAY'.
|
417
|
+
:param pulumi.Input[str] ip_version: The IP Version that will be used by this gateway.
|
418
|
+
Possible values are: `IPV4`, `IPV6`.
|
370
419
|
:param pulumi.Input[Mapping[str, pulumi.Input[str]]] labels: Set of label tags associated with the Gateway resource.
|
420
|
+
|
371
421
|
**Note**: This field is non-authoritative, and will only manage the labels present in your configuration.
|
372
422
|
Please refer to the field `effective_labels` for all of the labels present on the resource.
|
373
423
|
:param pulumi.Input[str] location: The location of the gateway.
|
374
424
|
The default value is `global`.
|
375
|
-
:param pulumi.Input[str] name:
|
425
|
+
:param pulumi.Input[str] name: Name of the Gateway resource.
|
376
426
|
|
377
427
|
|
378
428
|
- - -
|
379
429
|
:param pulumi.Input[str] network: The relative resource name identifying the VPC network that is using this configuration.
|
380
|
-
For example:
|
430
|
+
For example: 'projects/*/global/networks/network-1'.
|
381
431
|
Currently, this field is specific to gateways of type 'SECURE_WEB_GATEWAY'.
|
382
432
|
:param pulumi.Input[Sequence[pulumi.Input[int]]] ports: One or more port numbers (1-65535), on which the Gateway will receive traffic.
|
383
|
-
The proxy binds to the specified ports. Gateways of type 'SECURE_WEB_GATEWAY' are
|
384
|
-
|
433
|
+
The proxy binds to the specified ports. Gateways of type 'SECURE_WEB_GATEWAY' are limited to 1 port.
|
434
|
+
Gateways of type 'OPEN_MESH' listen on 0.0.0.0 for IPv4 and :: for IPv6 and support multiple ports.
|
385
435
|
:param pulumi.Input[str] project: The ID of the project in which the resource belongs.
|
386
436
|
If it is not provided, the provider project is used.
|
387
437
|
:param pulumi.Input[Mapping[str, pulumi.Input[str]]] pulumi_labels: The combination of labels configured directly on the resource
|
@@ -389,18 +439,16 @@ class _GatewayState:
|
|
389
439
|
:param pulumi.Input[str] routing_mode: The routing mode of the Gateway. This field is configurable only for gateways of type SECURE_WEB_GATEWAY. This field is required for gateways of type SECURE_WEB_GATEWAY.
|
390
440
|
Possible values are: `NEXT_HOP_ROUTING_MODE`.
|
391
441
|
:param pulumi.Input[str] scope: Immutable. Scope determines how configuration across multiple Gateway instances are merged.
|
392
|
-
The configuration for multiple Gateway instances with the same scope will be merged as presented as
|
393
|
-
a single coniguration to the proxy/load balancer.
|
442
|
+
The configuration for multiple Gateway instances with the same scope will be merged as presented as a single coniguration to the proxy/load balancer.
|
394
443
|
Max length 64 characters. Scope should start with a letter and can only have letters, numbers, hyphens.
|
395
444
|
:param pulumi.Input[str] self_link: Server-defined URL of this resource.
|
396
|
-
:param pulumi.Input[str] server_tls_policy: A fully-qualified ServerTLSPolicy URL reference. Specifies how TLS traffic is terminated.
|
397
|
-
If empty, TLS termination is disabled.
|
445
|
+
:param pulumi.Input[str] server_tls_policy: A fully-qualified ServerTLSPolicy URL reference. Specifies how TLS traffic is terminated. If empty, TLS termination is disabled.
|
398
446
|
:param pulumi.Input[str] subnetwork: The relative resource name identifying the subnetwork in which this SWG is allocated.
|
399
|
-
For example:
|
400
|
-
Currently, this field is specific to gateways of type 'SECURE_WEB_GATEWAY.
|
401
|
-
:param pulumi.Input[str] type: Immutable. The type of the customer
|
402
|
-
Possible values are: `
|
403
|
-
:param pulumi.Input[str] update_time:
|
447
|
+
For example: projects/*/regions/us-central1/subnetworks/network-1.
|
448
|
+
Currently, this field is specific to gateways of type 'SECURE_WEB_GATEWAY'.
|
449
|
+
:param pulumi.Input[str] type: Immutable. The type of the customer managed gateway.
|
450
|
+
Possible values are: `OPEN_MESH`, `SECURE_WEB_GATEWAY`.
|
451
|
+
:param pulumi.Input[str] update_time: The timestamp when the resource was updated.
|
404
452
|
"""
|
405
453
|
if addresses is not None:
|
406
454
|
pulumi.set(__self__, "addresses", addresses)
|
@@ -414,8 +462,12 @@ class _GatewayState:
|
|
414
462
|
pulumi.set(__self__, "description", description)
|
415
463
|
if effective_labels is not None:
|
416
464
|
pulumi.set(__self__, "effective_labels", effective_labels)
|
465
|
+
if envoy_headers is not None:
|
466
|
+
pulumi.set(__self__, "envoy_headers", envoy_headers)
|
417
467
|
if gateway_security_policy is not None:
|
418
468
|
pulumi.set(__self__, "gateway_security_policy", gateway_security_policy)
|
469
|
+
if ip_version is not None:
|
470
|
+
pulumi.set(__self__, "ip_version", ip_version)
|
419
471
|
if labels is not None:
|
420
472
|
pulumi.set(__self__, "labels", labels)
|
421
473
|
if location is not None:
|
@@ -449,9 +501,10 @@ class _GatewayState:
|
|
449
501
|
@pulumi.getter
|
450
502
|
def addresses(self) -> Optional[pulumi.Input[Sequence[pulumi.Input[str]]]]:
|
451
503
|
"""
|
452
|
-
Zero or one IPv4
|
453
|
-
an IP from the subnetwork is allocated
|
454
|
-
|
504
|
+
Zero or one IPv4 or IPv6 address on which the Gateway will receive the traffic.
|
505
|
+
When no address is provided, an IP from the subnetwork is allocated.
|
506
|
+
This field only applies to gateways of type 'SECURE_WEB_GATEWAY'.
|
507
|
+
Gateways of type 'OPEN_MESH' listen on 0.0.0.0 for IPv4 and :: for IPv6.
|
455
508
|
"""
|
456
509
|
return pulumi.get(self, "addresses")
|
457
510
|
|
@@ -476,7 +529,7 @@ class _GatewayState:
|
|
476
529
|
@pulumi.getter(name="createTime")
|
477
530
|
def create_time(self) -> Optional[pulumi.Input[str]]:
|
478
531
|
"""
|
479
|
-
|
532
|
+
The timestamp when the resource was created.
|
480
533
|
"""
|
481
534
|
return pulumi.get(self, "create_time")
|
482
535
|
|
@@ -521,12 +574,27 @@ class _GatewayState:
|
|
521
574
|
def effective_labels(self, value: Optional[pulumi.Input[Mapping[str, pulumi.Input[str]]]]):
|
522
575
|
pulumi.set(self, "effective_labels", value)
|
523
576
|
|
577
|
+
@property
|
578
|
+
@pulumi.getter(name="envoyHeaders")
|
579
|
+
def envoy_headers(self) -> Optional[pulumi.Input[str]]:
|
580
|
+
"""
|
581
|
+
Determines if envoy will insert internal debug headers into upstream requests.
|
582
|
+
Other Envoy headers may still be injected.
|
583
|
+
By default, envoy will not insert any debug headers.
|
584
|
+
Possible values are: `NONE`, `DEBUG_HEADERS`.
|
585
|
+
"""
|
586
|
+
return pulumi.get(self, "envoy_headers")
|
587
|
+
|
588
|
+
@envoy_headers.setter
|
589
|
+
def envoy_headers(self, value: Optional[pulumi.Input[str]]):
|
590
|
+
pulumi.set(self, "envoy_headers", value)
|
591
|
+
|
524
592
|
@property
|
525
593
|
@pulumi.getter(name="gatewaySecurityPolicy")
|
526
594
|
def gateway_security_policy(self) -> Optional[pulumi.Input[str]]:
|
527
595
|
"""
|
528
596
|
A fully-qualified GatewaySecurityPolicy URL reference. Defines how a server should apply security policy to inbound (VM to Proxy) initiated connections.
|
529
|
-
For example:
|
597
|
+
For example: 'projects/*/locations/*/gatewaySecurityPolicies/swg-policy'.
|
530
598
|
This policy is specific to gateways of type 'SECURE_WEB_GATEWAY'.
|
531
599
|
"""
|
532
600
|
return pulumi.get(self, "gateway_security_policy")
|
@@ -535,11 +603,25 @@ class _GatewayState:
|
|
535
603
|
def gateway_security_policy(self, value: Optional[pulumi.Input[str]]):
|
536
604
|
pulumi.set(self, "gateway_security_policy", value)
|
537
605
|
|
606
|
+
@property
|
607
|
+
@pulumi.getter(name="ipVersion")
|
608
|
+
def ip_version(self) -> Optional[pulumi.Input[str]]:
|
609
|
+
"""
|
610
|
+
The IP Version that will be used by this gateway.
|
611
|
+
Possible values are: `IPV4`, `IPV6`.
|
612
|
+
"""
|
613
|
+
return pulumi.get(self, "ip_version")
|
614
|
+
|
615
|
+
@ip_version.setter
|
616
|
+
def ip_version(self, value: Optional[pulumi.Input[str]]):
|
617
|
+
pulumi.set(self, "ip_version", value)
|
618
|
+
|
538
619
|
@property
|
539
620
|
@pulumi.getter
|
540
621
|
def labels(self) -> Optional[pulumi.Input[Mapping[str, pulumi.Input[str]]]]:
|
541
622
|
"""
|
542
623
|
Set of label tags associated with the Gateway resource.
|
624
|
+
|
543
625
|
**Note**: This field is non-authoritative, and will only manage the labels present in your configuration.
|
544
626
|
Please refer to the field `effective_labels` for all of the labels present on the resource.
|
545
627
|
"""
|
@@ -566,7 +648,7 @@ class _GatewayState:
|
|
566
648
|
@pulumi.getter
|
567
649
|
def name(self) -> Optional[pulumi.Input[str]]:
|
568
650
|
"""
|
569
|
-
|
651
|
+
Name of the Gateway resource.
|
570
652
|
|
571
653
|
|
572
654
|
- - -
|
@@ -582,7 +664,7 @@ class _GatewayState:
|
|
582
664
|
def network(self) -> Optional[pulumi.Input[str]]:
|
583
665
|
"""
|
584
666
|
The relative resource name identifying the VPC network that is using this configuration.
|
585
|
-
For example:
|
667
|
+
For example: 'projects/*/global/networks/network-1'.
|
586
668
|
Currently, this field is specific to gateways of type 'SECURE_WEB_GATEWAY'.
|
587
669
|
"""
|
588
670
|
return pulumi.get(self, "network")
|
@@ -596,8 +678,8 @@ class _GatewayState:
|
|
596
678
|
def ports(self) -> Optional[pulumi.Input[Sequence[pulumi.Input[int]]]]:
|
597
679
|
"""
|
598
680
|
One or more port numbers (1-65535), on which the Gateway will receive traffic.
|
599
|
-
The proxy binds to the specified ports. Gateways of type 'SECURE_WEB_GATEWAY' are
|
600
|
-
|
681
|
+
The proxy binds to the specified ports. Gateways of type 'SECURE_WEB_GATEWAY' are limited to 1 port.
|
682
|
+
Gateways of type 'OPEN_MESH' listen on 0.0.0.0 for IPv4 and :: for IPv6 and support multiple ports.
|
601
683
|
"""
|
602
684
|
return pulumi.get(self, "ports")
|
603
685
|
|
@@ -649,8 +731,7 @@ class _GatewayState:
|
|
649
731
|
def scope(self) -> Optional[pulumi.Input[str]]:
|
650
732
|
"""
|
651
733
|
Immutable. Scope determines how configuration across multiple Gateway instances are merged.
|
652
|
-
The configuration for multiple Gateway instances with the same scope will be merged as presented as
|
653
|
-
a single coniguration to the proxy/load balancer.
|
734
|
+
The configuration for multiple Gateway instances with the same scope will be merged as presented as a single coniguration to the proxy/load balancer.
|
654
735
|
Max length 64 characters. Scope should start with a letter and can only have letters, numbers, hyphens.
|
655
736
|
"""
|
656
737
|
return pulumi.get(self, "scope")
|
@@ -675,8 +756,7 @@ class _GatewayState:
|
|
675
756
|
@pulumi.getter(name="serverTlsPolicy")
|
676
757
|
def server_tls_policy(self) -> Optional[pulumi.Input[str]]:
|
677
758
|
"""
|
678
|
-
A fully-qualified ServerTLSPolicy URL reference. Specifies how TLS traffic is terminated.
|
679
|
-
If empty, TLS termination is disabled.
|
759
|
+
A fully-qualified ServerTLSPolicy URL reference. Specifies how TLS traffic is terminated. If empty, TLS termination is disabled.
|
680
760
|
"""
|
681
761
|
return pulumi.get(self, "server_tls_policy")
|
682
762
|
|
@@ -689,8 +769,8 @@ class _GatewayState:
|
|
689
769
|
def subnetwork(self) -> Optional[pulumi.Input[str]]:
|
690
770
|
"""
|
691
771
|
The relative resource name identifying the subnetwork in which this SWG is allocated.
|
692
|
-
For example:
|
693
|
-
Currently, this field is specific to gateways of type 'SECURE_WEB_GATEWAY.
|
772
|
+
For example: projects/*/regions/us-central1/subnetworks/network-1.
|
773
|
+
Currently, this field is specific to gateways of type 'SECURE_WEB_GATEWAY'.
|
694
774
|
"""
|
695
775
|
return pulumi.get(self, "subnetwork")
|
696
776
|
|
@@ -702,8 +782,8 @@ class _GatewayState:
|
|
702
782
|
@pulumi.getter
|
703
783
|
def type(self) -> Optional[pulumi.Input[str]]:
|
704
784
|
"""
|
705
|
-
Immutable. The type of the customer
|
706
|
-
Possible values are: `
|
785
|
+
Immutable. The type of the customer managed gateway.
|
786
|
+
Possible values are: `OPEN_MESH`, `SECURE_WEB_GATEWAY`.
|
707
787
|
"""
|
708
788
|
return pulumi.get(self, "type")
|
709
789
|
|
@@ -715,7 +795,7 @@ class _GatewayState:
|
|
715
795
|
@pulumi.getter(name="updateTime")
|
716
796
|
def update_time(self) -> Optional[pulumi.Input[str]]:
|
717
797
|
"""
|
718
|
-
|
798
|
+
The timestamp when the resource was updated.
|
719
799
|
"""
|
720
800
|
return pulumi.get(self, "update_time")
|
721
801
|
|
@@ -733,7 +813,9 @@ class Gateway(pulumi.CustomResource):
|
|
733
813
|
certificate_urls: Optional[pulumi.Input[Sequence[pulumi.Input[str]]]] = None,
|
734
814
|
delete_swg_autogen_router_on_destroy: Optional[pulumi.Input[bool]] = None,
|
735
815
|
description: Optional[pulumi.Input[str]] = None,
|
816
|
+
envoy_headers: Optional[pulumi.Input[str]] = None,
|
736
817
|
gateway_security_policy: Optional[pulumi.Input[str]] = None,
|
818
|
+
ip_version: Optional[pulumi.Input[str]] = None,
|
737
819
|
labels: Optional[pulumi.Input[Mapping[str, pulumi.Input[str]]]] = None,
|
738
820
|
location: Optional[pulumi.Input[str]] = None,
|
739
821
|
name: Optional[pulumi.Input[str]] = None,
|
@@ -940,47 +1022,53 @@ class Gateway(pulumi.CustomResource):
|
|
940
1022
|
|
941
1023
|
:param str resource_name: The name of the resource.
|
942
1024
|
:param pulumi.ResourceOptions opts: Options for the resource.
|
943
|
-
:param pulumi.Input[Sequence[pulumi.Input[str]]] addresses: Zero or one IPv4
|
944
|
-
an IP from the subnetwork is allocated
|
945
|
-
|
1025
|
+
:param pulumi.Input[Sequence[pulumi.Input[str]]] addresses: Zero or one IPv4 or IPv6 address on which the Gateway will receive the traffic.
|
1026
|
+
When no address is provided, an IP from the subnetwork is allocated.
|
1027
|
+
This field only applies to gateways of type 'SECURE_WEB_GATEWAY'.
|
1028
|
+
Gateways of type 'OPEN_MESH' listen on 0.0.0.0 for IPv4 and :: for IPv6.
|
946
1029
|
:param pulumi.Input[Sequence[pulumi.Input[str]]] certificate_urls: A fully-qualified Certificates URL reference. The proxy presents a Certificate (selected based on SNI) when establishing a TLS connection.
|
947
1030
|
This feature only applies to gateways of type 'SECURE_WEB_GATEWAY'.
|
948
1031
|
:param pulumi.Input[bool] delete_swg_autogen_router_on_destroy: When deleting a gateway of type 'SECURE_WEB_GATEWAY', this boolean option will also delete auto generated router by the gateway creation.
|
949
1032
|
If there is no other gateway of type 'SECURE_WEB_GATEWAY' remaining for that region and network it will be deleted.
|
950
1033
|
:param pulumi.Input[str] description: A free-text description of the resource. Max length 1024 characters.
|
1034
|
+
:param pulumi.Input[str] envoy_headers: Determines if envoy will insert internal debug headers into upstream requests.
|
1035
|
+
Other Envoy headers may still be injected.
|
1036
|
+
By default, envoy will not insert any debug headers.
|
1037
|
+
Possible values are: `NONE`, `DEBUG_HEADERS`.
|
951
1038
|
:param pulumi.Input[str] gateway_security_policy: A fully-qualified GatewaySecurityPolicy URL reference. Defines how a server should apply security policy to inbound (VM to Proxy) initiated connections.
|
952
|
-
For example:
|
1039
|
+
For example: 'projects/*/locations/*/gatewaySecurityPolicies/swg-policy'.
|
953
1040
|
This policy is specific to gateways of type 'SECURE_WEB_GATEWAY'.
|
1041
|
+
:param pulumi.Input[str] ip_version: The IP Version that will be used by this gateway.
|
1042
|
+
Possible values are: `IPV4`, `IPV6`.
|
954
1043
|
:param pulumi.Input[Mapping[str, pulumi.Input[str]]] labels: Set of label tags associated with the Gateway resource.
|
1044
|
+
|
955
1045
|
**Note**: This field is non-authoritative, and will only manage the labels present in your configuration.
|
956
1046
|
Please refer to the field `effective_labels` for all of the labels present on the resource.
|
957
1047
|
:param pulumi.Input[str] location: The location of the gateway.
|
958
1048
|
The default value is `global`.
|
959
|
-
:param pulumi.Input[str] name:
|
1049
|
+
:param pulumi.Input[str] name: Name of the Gateway resource.
|
960
1050
|
|
961
1051
|
|
962
1052
|
- - -
|
963
1053
|
:param pulumi.Input[str] network: The relative resource name identifying the VPC network that is using this configuration.
|
964
|
-
For example:
|
1054
|
+
For example: 'projects/*/global/networks/network-1'.
|
965
1055
|
Currently, this field is specific to gateways of type 'SECURE_WEB_GATEWAY'.
|
966
1056
|
:param pulumi.Input[Sequence[pulumi.Input[int]]] ports: One or more port numbers (1-65535), on which the Gateway will receive traffic.
|
967
|
-
The proxy binds to the specified ports. Gateways of type 'SECURE_WEB_GATEWAY' are
|
968
|
-
|
1057
|
+
The proxy binds to the specified ports. Gateways of type 'SECURE_WEB_GATEWAY' are limited to 1 port.
|
1058
|
+
Gateways of type 'OPEN_MESH' listen on 0.0.0.0 for IPv4 and :: for IPv6 and support multiple ports.
|
969
1059
|
:param pulumi.Input[str] project: The ID of the project in which the resource belongs.
|
970
1060
|
If it is not provided, the provider project is used.
|
971
1061
|
:param pulumi.Input[str] routing_mode: The routing mode of the Gateway. This field is configurable only for gateways of type SECURE_WEB_GATEWAY. This field is required for gateways of type SECURE_WEB_GATEWAY.
|
972
1062
|
Possible values are: `NEXT_HOP_ROUTING_MODE`.
|
973
1063
|
:param pulumi.Input[str] scope: Immutable. Scope determines how configuration across multiple Gateway instances are merged.
|
974
|
-
The configuration for multiple Gateway instances with the same scope will be merged as presented as
|
975
|
-
a single coniguration to the proxy/load balancer.
|
1064
|
+
The configuration for multiple Gateway instances with the same scope will be merged as presented as a single coniguration to the proxy/load balancer.
|
976
1065
|
Max length 64 characters. Scope should start with a letter and can only have letters, numbers, hyphens.
|
977
|
-
:param pulumi.Input[str] server_tls_policy: A fully-qualified ServerTLSPolicy URL reference. Specifies how TLS traffic is terminated.
|
978
|
-
If empty, TLS termination is disabled.
|
1066
|
+
:param pulumi.Input[str] server_tls_policy: A fully-qualified ServerTLSPolicy URL reference. Specifies how TLS traffic is terminated. If empty, TLS termination is disabled.
|
979
1067
|
:param pulumi.Input[str] subnetwork: The relative resource name identifying the subnetwork in which this SWG is allocated.
|
980
|
-
For example:
|
981
|
-
Currently, this field is specific to gateways of type 'SECURE_WEB_GATEWAY.
|
982
|
-
:param pulumi.Input[str] type: Immutable. The type of the customer
|
983
|
-
Possible values are: `
|
1068
|
+
For example: projects/*/regions/us-central1/subnetworks/network-1.
|
1069
|
+
Currently, this field is specific to gateways of type 'SECURE_WEB_GATEWAY'.
|
1070
|
+
:param pulumi.Input[str] type: Immutable. The type of the customer managed gateway.
|
1071
|
+
Possible values are: `OPEN_MESH`, `SECURE_WEB_GATEWAY`.
|
984
1072
|
"""
|
985
1073
|
...
|
986
1074
|
@overload
|
@@ -1199,7 +1287,9 @@ class Gateway(pulumi.CustomResource):
|
|
1199
1287
|
certificate_urls: Optional[pulumi.Input[Sequence[pulumi.Input[str]]]] = None,
|
1200
1288
|
delete_swg_autogen_router_on_destroy: Optional[pulumi.Input[bool]] = None,
|
1201
1289
|
description: Optional[pulumi.Input[str]] = None,
|
1290
|
+
envoy_headers: Optional[pulumi.Input[str]] = None,
|
1202
1291
|
gateway_security_policy: Optional[pulumi.Input[str]] = None,
|
1292
|
+
ip_version: Optional[pulumi.Input[str]] = None,
|
1203
1293
|
labels: Optional[pulumi.Input[Mapping[str, pulumi.Input[str]]]] = None,
|
1204
1294
|
location: Optional[pulumi.Input[str]] = None,
|
1205
1295
|
name: Optional[pulumi.Input[str]] = None,
|
@@ -1224,7 +1314,9 @@ class Gateway(pulumi.CustomResource):
|
|
1224
1314
|
__props__.__dict__["certificate_urls"] = certificate_urls
|
1225
1315
|
__props__.__dict__["delete_swg_autogen_router_on_destroy"] = delete_swg_autogen_router_on_destroy
|
1226
1316
|
__props__.__dict__["description"] = description
|
1317
|
+
__props__.__dict__["envoy_headers"] = envoy_headers
|
1227
1318
|
__props__.__dict__["gateway_security_policy"] = gateway_security_policy
|
1319
|
+
__props__.__dict__["ip_version"] = ip_version
|
1228
1320
|
__props__.__dict__["labels"] = labels
|
1229
1321
|
__props__.__dict__["location"] = location
|
1230
1322
|
__props__.__dict__["name"] = name
|
@@ -1263,7 +1355,9 @@ class Gateway(pulumi.CustomResource):
|
|
1263
1355
|
delete_swg_autogen_router_on_destroy: Optional[pulumi.Input[bool]] = None,
|
1264
1356
|
description: Optional[pulumi.Input[str]] = None,
|
1265
1357
|
effective_labels: Optional[pulumi.Input[Mapping[str, pulumi.Input[str]]]] = None,
|
1358
|
+
envoy_headers: Optional[pulumi.Input[str]] = None,
|
1266
1359
|
gateway_security_policy: Optional[pulumi.Input[str]] = None,
|
1360
|
+
ip_version: Optional[pulumi.Input[str]] = None,
|
1267
1361
|
labels: Optional[pulumi.Input[Mapping[str, pulumi.Input[str]]]] = None,
|
1268
1362
|
location: Optional[pulumi.Input[str]] = None,
|
1269
1363
|
name: Optional[pulumi.Input[str]] = None,
|
@@ -1285,34 +1379,42 @@ class Gateway(pulumi.CustomResource):
|
|
1285
1379
|
:param str resource_name: The unique name of the resulting resource.
|
1286
1380
|
:param pulumi.Input[str] id: The unique provider ID of the resource to lookup.
|
1287
1381
|
:param pulumi.ResourceOptions opts: Options for the resource.
|
1288
|
-
:param pulumi.Input[Sequence[pulumi.Input[str]]] addresses: Zero or one IPv4
|
1289
|
-
an IP from the subnetwork is allocated
|
1290
|
-
|
1382
|
+
:param pulumi.Input[Sequence[pulumi.Input[str]]] addresses: Zero or one IPv4 or IPv6 address on which the Gateway will receive the traffic.
|
1383
|
+
When no address is provided, an IP from the subnetwork is allocated.
|
1384
|
+
This field only applies to gateways of type 'SECURE_WEB_GATEWAY'.
|
1385
|
+
Gateways of type 'OPEN_MESH' listen on 0.0.0.0 for IPv4 and :: for IPv6.
|
1291
1386
|
:param pulumi.Input[Sequence[pulumi.Input[str]]] certificate_urls: A fully-qualified Certificates URL reference. The proxy presents a Certificate (selected based on SNI) when establishing a TLS connection.
|
1292
1387
|
This feature only applies to gateways of type 'SECURE_WEB_GATEWAY'.
|
1293
|
-
:param pulumi.Input[str] create_time:
|
1388
|
+
:param pulumi.Input[str] create_time: The timestamp when the resource was created.
|
1294
1389
|
:param pulumi.Input[bool] delete_swg_autogen_router_on_destroy: When deleting a gateway of type 'SECURE_WEB_GATEWAY', this boolean option will also delete auto generated router by the gateway creation.
|
1295
1390
|
If there is no other gateway of type 'SECURE_WEB_GATEWAY' remaining for that region and network it will be deleted.
|
1296
1391
|
:param pulumi.Input[str] description: A free-text description of the resource. Max length 1024 characters.
|
1297
1392
|
:param pulumi.Input[Mapping[str, pulumi.Input[str]]] effective_labels: All of labels (key/value pairs) present on the resource in GCP, including the labels configured through Pulumi, other clients and services.
|
1393
|
+
:param pulumi.Input[str] envoy_headers: Determines if envoy will insert internal debug headers into upstream requests.
|
1394
|
+
Other Envoy headers may still be injected.
|
1395
|
+
By default, envoy will not insert any debug headers.
|
1396
|
+
Possible values are: `NONE`, `DEBUG_HEADERS`.
|
1298
1397
|
:param pulumi.Input[str] gateway_security_policy: A fully-qualified GatewaySecurityPolicy URL reference. Defines how a server should apply security policy to inbound (VM to Proxy) initiated connections.
|
1299
|
-
For example:
|
1398
|
+
For example: 'projects/*/locations/*/gatewaySecurityPolicies/swg-policy'.
|
1300
1399
|
This policy is specific to gateways of type 'SECURE_WEB_GATEWAY'.
|
1400
|
+
:param pulumi.Input[str] ip_version: The IP Version that will be used by this gateway.
|
1401
|
+
Possible values are: `IPV4`, `IPV6`.
|
1301
1402
|
:param pulumi.Input[Mapping[str, pulumi.Input[str]]] labels: Set of label tags associated with the Gateway resource.
|
1403
|
+
|
1302
1404
|
**Note**: This field is non-authoritative, and will only manage the labels present in your configuration.
|
1303
1405
|
Please refer to the field `effective_labels` for all of the labels present on the resource.
|
1304
1406
|
:param pulumi.Input[str] location: The location of the gateway.
|
1305
1407
|
The default value is `global`.
|
1306
|
-
:param pulumi.Input[str] name:
|
1408
|
+
:param pulumi.Input[str] name: Name of the Gateway resource.
|
1307
1409
|
|
1308
1410
|
|
1309
1411
|
- - -
|
1310
1412
|
:param pulumi.Input[str] network: The relative resource name identifying the VPC network that is using this configuration.
|
1311
|
-
For example:
|
1413
|
+
For example: 'projects/*/global/networks/network-1'.
|
1312
1414
|
Currently, this field is specific to gateways of type 'SECURE_WEB_GATEWAY'.
|
1313
1415
|
:param pulumi.Input[Sequence[pulumi.Input[int]]] ports: One or more port numbers (1-65535), on which the Gateway will receive traffic.
|
1314
|
-
The proxy binds to the specified ports. Gateways of type 'SECURE_WEB_GATEWAY' are
|
1315
|
-
|
1416
|
+
The proxy binds to the specified ports. Gateways of type 'SECURE_WEB_GATEWAY' are limited to 1 port.
|
1417
|
+
Gateways of type 'OPEN_MESH' listen on 0.0.0.0 for IPv4 and :: for IPv6 and support multiple ports.
|
1316
1418
|
:param pulumi.Input[str] project: The ID of the project in which the resource belongs.
|
1317
1419
|
If it is not provided, the provider project is used.
|
1318
1420
|
:param pulumi.Input[Mapping[str, pulumi.Input[str]]] pulumi_labels: The combination of labels configured directly on the resource
|
@@ -1320,18 +1422,16 @@ class Gateway(pulumi.CustomResource):
|
|
1320
1422
|
:param pulumi.Input[str] routing_mode: The routing mode of the Gateway. This field is configurable only for gateways of type SECURE_WEB_GATEWAY. This field is required for gateways of type SECURE_WEB_GATEWAY.
|
1321
1423
|
Possible values are: `NEXT_HOP_ROUTING_MODE`.
|
1322
1424
|
:param pulumi.Input[str] scope: Immutable. Scope determines how configuration across multiple Gateway instances are merged.
|
1323
|
-
The configuration for multiple Gateway instances with the same scope will be merged as presented as
|
1324
|
-
a single coniguration to the proxy/load balancer.
|
1425
|
+
The configuration for multiple Gateway instances with the same scope will be merged as presented as a single coniguration to the proxy/load balancer.
|
1325
1426
|
Max length 64 characters. Scope should start with a letter and can only have letters, numbers, hyphens.
|
1326
1427
|
:param pulumi.Input[str] self_link: Server-defined URL of this resource.
|
1327
|
-
:param pulumi.Input[str] server_tls_policy: A fully-qualified ServerTLSPolicy URL reference. Specifies how TLS traffic is terminated.
|
1328
|
-
If empty, TLS termination is disabled.
|
1428
|
+
:param pulumi.Input[str] server_tls_policy: A fully-qualified ServerTLSPolicy URL reference. Specifies how TLS traffic is terminated. If empty, TLS termination is disabled.
|
1329
1429
|
:param pulumi.Input[str] subnetwork: The relative resource name identifying the subnetwork in which this SWG is allocated.
|
1330
|
-
For example:
|
1331
|
-
Currently, this field is specific to gateways of type 'SECURE_WEB_GATEWAY.
|
1332
|
-
:param pulumi.Input[str] type: Immutable. The type of the customer
|
1333
|
-
Possible values are: `
|
1334
|
-
:param pulumi.Input[str] update_time:
|
1430
|
+
For example: projects/*/regions/us-central1/subnetworks/network-1.
|
1431
|
+
Currently, this field is specific to gateways of type 'SECURE_WEB_GATEWAY'.
|
1432
|
+
:param pulumi.Input[str] type: Immutable. The type of the customer managed gateway.
|
1433
|
+
Possible values are: `OPEN_MESH`, `SECURE_WEB_GATEWAY`.
|
1434
|
+
:param pulumi.Input[str] update_time: The timestamp when the resource was updated.
|
1335
1435
|
"""
|
1336
1436
|
opts = pulumi.ResourceOptions.merge(opts, pulumi.ResourceOptions(id=id))
|
1337
1437
|
|
@@ -1343,7 +1443,9 @@ class Gateway(pulumi.CustomResource):
|
|
1343
1443
|
__props__.__dict__["delete_swg_autogen_router_on_destroy"] = delete_swg_autogen_router_on_destroy
|
1344
1444
|
__props__.__dict__["description"] = description
|
1345
1445
|
__props__.__dict__["effective_labels"] = effective_labels
|
1446
|
+
__props__.__dict__["envoy_headers"] = envoy_headers
|
1346
1447
|
__props__.__dict__["gateway_security_policy"] = gateway_security_policy
|
1448
|
+
__props__.__dict__["ip_version"] = ip_version
|
1347
1449
|
__props__.__dict__["labels"] = labels
|
1348
1450
|
__props__.__dict__["location"] = location
|
1349
1451
|
__props__.__dict__["name"] = name
|
@@ -1364,9 +1466,10 @@ class Gateway(pulumi.CustomResource):
|
|
1364
1466
|
@pulumi.getter
|
1365
1467
|
def addresses(self) -> pulumi.Output[Sequence[str]]:
|
1366
1468
|
"""
|
1367
|
-
Zero or one IPv4
|
1368
|
-
an IP from the subnetwork is allocated
|
1369
|
-
|
1469
|
+
Zero or one IPv4 or IPv6 address on which the Gateway will receive the traffic.
|
1470
|
+
When no address is provided, an IP from the subnetwork is allocated.
|
1471
|
+
This field only applies to gateways of type 'SECURE_WEB_GATEWAY'.
|
1472
|
+
Gateways of type 'OPEN_MESH' listen on 0.0.0.0 for IPv4 and :: for IPv6.
|
1370
1473
|
"""
|
1371
1474
|
return pulumi.get(self, "addresses")
|
1372
1475
|
|
@@ -1383,7 +1486,7 @@ class Gateway(pulumi.CustomResource):
|
|
1383
1486
|
@pulumi.getter(name="createTime")
|
1384
1487
|
def create_time(self) -> pulumi.Output[str]:
|
1385
1488
|
"""
|
1386
|
-
|
1489
|
+
The timestamp when the resource was created.
|
1387
1490
|
"""
|
1388
1491
|
return pulumi.get(self, "create_time")
|
1389
1492
|
|
@@ -1412,21 +1515,42 @@ class Gateway(pulumi.CustomResource):
|
|
1412
1515
|
"""
|
1413
1516
|
return pulumi.get(self, "effective_labels")
|
1414
1517
|
|
1518
|
+
@property
|
1519
|
+
@pulumi.getter(name="envoyHeaders")
|
1520
|
+
def envoy_headers(self) -> pulumi.Output[Optional[str]]:
|
1521
|
+
"""
|
1522
|
+
Determines if envoy will insert internal debug headers into upstream requests.
|
1523
|
+
Other Envoy headers may still be injected.
|
1524
|
+
By default, envoy will not insert any debug headers.
|
1525
|
+
Possible values are: `NONE`, `DEBUG_HEADERS`.
|
1526
|
+
"""
|
1527
|
+
return pulumi.get(self, "envoy_headers")
|
1528
|
+
|
1415
1529
|
@property
|
1416
1530
|
@pulumi.getter(name="gatewaySecurityPolicy")
|
1417
1531
|
def gateway_security_policy(self) -> pulumi.Output[Optional[str]]:
|
1418
1532
|
"""
|
1419
1533
|
A fully-qualified GatewaySecurityPolicy URL reference. Defines how a server should apply security policy to inbound (VM to Proxy) initiated connections.
|
1420
|
-
For example:
|
1534
|
+
For example: 'projects/*/locations/*/gatewaySecurityPolicies/swg-policy'.
|
1421
1535
|
This policy is specific to gateways of type 'SECURE_WEB_GATEWAY'.
|
1422
1536
|
"""
|
1423
1537
|
return pulumi.get(self, "gateway_security_policy")
|
1424
1538
|
|
1539
|
+
@property
|
1540
|
+
@pulumi.getter(name="ipVersion")
|
1541
|
+
def ip_version(self) -> pulumi.Output[Optional[str]]:
|
1542
|
+
"""
|
1543
|
+
The IP Version that will be used by this gateway.
|
1544
|
+
Possible values are: `IPV4`, `IPV6`.
|
1545
|
+
"""
|
1546
|
+
return pulumi.get(self, "ip_version")
|
1547
|
+
|
1425
1548
|
@property
|
1426
1549
|
@pulumi.getter
|
1427
1550
|
def labels(self) -> pulumi.Output[Optional[Mapping[str, str]]]:
|
1428
1551
|
"""
|
1429
1552
|
Set of label tags associated with the Gateway resource.
|
1553
|
+
|
1430
1554
|
**Note**: This field is non-authoritative, and will only manage the labels present in your configuration.
|
1431
1555
|
Please refer to the field `effective_labels` for all of the labels present on the resource.
|
1432
1556
|
"""
|
@@ -1445,7 +1569,7 @@ class Gateway(pulumi.CustomResource):
|
|
1445
1569
|
@pulumi.getter
|
1446
1570
|
def name(self) -> pulumi.Output[str]:
|
1447
1571
|
"""
|
1448
|
-
|
1572
|
+
Name of the Gateway resource.
|
1449
1573
|
|
1450
1574
|
|
1451
1575
|
- - -
|
@@ -1457,7 +1581,7 @@ class Gateway(pulumi.CustomResource):
|
|
1457
1581
|
def network(self) -> pulumi.Output[Optional[str]]:
|
1458
1582
|
"""
|
1459
1583
|
The relative resource name identifying the VPC network that is using this configuration.
|
1460
|
-
For example:
|
1584
|
+
For example: 'projects/*/global/networks/network-1'.
|
1461
1585
|
Currently, this field is specific to gateways of type 'SECURE_WEB_GATEWAY'.
|
1462
1586
|
"""
|
1463
1587
|
return pulumi.get(self, "network")
|
@@ -1467,8 +1591,8 @@ class Gateway(pulumi.CustomResource):
|
|
1467
1591
|
def ports(self) -> pulumi.Output[Sequence[int]]:
|
1468
1592
|
"""
|
1469
1593
|
One or more port numbers (1-65535), on which the Gateway will receive traffic.
|
1470
|
-
The proxy binds to the specified ports. Gateways of type 'SECURE_WEB_GATEWAY' are
|
1471
|
-
|
1594
|
+
The proxy binds to the specified ports. Gateways of type 'SECURE_WEB_GATEWAY' are limited to 1 port.
|
1595
|
+
Gateways of type 'OPEN_MESH' listen on 0.0.0.0 for IPv4 and :: for IPv6 and support multiple ports.
|
1472
1596
|
"""
|
1473
1597
|
return pulumi.get(self, "ports")
|
1474
1598
|
|
@@ -1504,8 +1628,7 @@ class Gateway(pulumi.CustomResource):
|
|
1504
1628
|
def scope(self) -> pulumi.Output[Optional[str]]:
|
1505
1629
|
"""
|
1506
1630
|
Immutable. Scope determines how configuration across multiple Gateway instances are merged.
|
1507
|
-
The configuration for multiple Gateway instances with the same scope will be merged as presented as
|
1508
|
-
a single coniguration to the proxy/load balancer.
|
1631
|
+
The configuration for multiple Gateway instances with the same scope will be merged as presented as a single coniguration to the proxy/load balancer.
|
1509
1632
|
Max length 64 characters. Scope should start with a letter and can only have letters, numbers, hyphens.
|
1510
1633
|
"""
|
1511
1634
|
return pulumi.get(self, "scope")
|
@@ -1522,8 +1645,7 @@ class Gateway(pulumi.CustomResource):
|
|
1522
1645
|
@pulumi.getter(name="serverTlsPolicy")
|
1523
1646
|
def server_tls_policy(self) -> pulumi.Output[Optional[str]]:
|
1524
1647
|
"""
|
1525
|
-
A fully-qualified ServerTLSPolicy URL reference. Specifies how TLS traffic is terminated.
|
1526
|
-
If empty, TLS termination is disabled.
|
1648
|
+
A fully-qualified ServerTLSPolicy URL reference. Specifies how TLS traffic is terminated. If empty, TLS termination is disabled.
|
1527
1649
|
"""
|
1528
1650
|
return pulumi.get(self, "server_tls_policy")
|
1529
1651
|
|
@@ -1532,8 +1654,8 @@ class Gateway(pulumi.CustomResource):
|
|
1532
1654
|
def subnetwork(self) -> pulumi.Output[Optional[str]]:
|
1533
1655
|
"""
|
1534
1656
|
The relative resource name identifying the subnetwork in which this SWG is allocated.
|
1535
|
-
For example:
|
1536
|
-
Currently, this field is specific to gateways of type 'SECURE_WEB_GATEWAY.
|
1657
|
+
For example: projects/*/regions/us-central1/subnetworks/network-1.
|
1658
|
+
Currently, this field is specific to gateways of type 'SECURE_WEB_GATEWAY'.
|
1537
1659
|
"""
|
1538
1660
|
return pulumi.get(self, "subnetwork")
|
1539
1661
|
|
@@ -1541,8 +1663,8 @@ class Gateway(pulumi.CustomResource):
|
|
1541
1663
|
@pulumi.getter
|
1542
1664
|
def type(self) -> pulumi.Output[str]:
|
1543
1665
|
"""
|
1544
|
-
Immutable. The type of the customer
|
1545
|
-
Possible values are: `
|
1666
|
+
Immutable. The type of the customer managed gateway.
|
1667
|
+
Possible values are: `OPEN_MESH`, `SECURE_WEB_GATEWAY`.
|
1546
1668
|
"""
|
1547
1669
|
return pulumi.get(self, "type")
|
1548
1670
|
|
@@ -1550,7 +1672,7 @@ class Gateway(pulumi.CustomResource):
|
|
1550
1672
|
@pulumi.getter(name="updateTime")
|
1551
1673
|
def update_time(self) -> pulumi.Output[str]:
|
1552
1674
|
"""
|
1553
|
-
|
1675
|
+
The timestamp when the resource was updated.
|
1554
1676
|
"""
|
1555
1677
|
return pulumi.get(self, "update_time")
|
1556
1678
|
|