pulumi-gcp 8.25.0a1743575622__py3-none-any.whl → 8.25.0a1743706148__py3-none-any.whl

pulumi_gcp/compute/backend_service.py

@@ -51,7 +51,8 @@ class BackendServiceArgs:
                  service_lb_policy: Optional[pulumi.Input[str]] = None,
                  session_affinity: Optional[pulumi.Input[str]] = None,
                  strong_session_affinity_cookie: Optional[pulumi.Input['BackendServiceStrongSessionAffinityCookieArgs']] = None,
-                 timeout_sec: Optional[pulumi.Input[int]] = None):
+                 timeout_sec: Optional[pulumi.Input[int]] = None,
+                 tls_settings: Optional[pulumi.Input['BackendServiceTlsSettingsArgs']] = None):
         """
         The set of arguments for constructing a BackendService resource.
         :param pulumi.Input[int] affinity_cookie_ttl_sec: Lifetime of cookies in seconds if session_affinity is
@@ -209,6 +210,8 @@ class BackendServiceArgs:
                For more information see, [Backend service settings](https://cloud.google.com/compute/docs/reference/rest/v1/backendServices).
                The default is 30 seconds.
                The full range of timeout values allowed goes from 1 through 2,147,483,647 seconds.
+        :param pulumi.Input['BackendServiceTlsSettingsArgs'] tls_settings: Configuration for Backend Authenticated TLS and mTLS. May only be specified when the backend protocol is SSL, HTTPS or HTTP2.
+               Structure is documented below.
         """
         if affinity_cookie_ttl_sec is not None:
             pulumi.set(__self__, "affinity_cookie_ttl_sec", affinity_cookie_ttl_sec)
@@ -272,6 +275,8 @@ class BackendServiceArgs:
             pulumi.set(__self__, "strong_session_affinity_cookie", strong_session_affinity_cookie)
         if timeout_sec is not None:
             pulumi.set(__self__, "timeout_sec", timeout_sec)
+        if tls_settings is not None:
+            pulumi.set(__self__, "tls_settings", tls_settings)
 
     @property
     @pulumi.getter(name="affinityCookieTtlSec")
@@ -769,6 +774,19 @@ class BackendServiceArgs:
     def timeout_sec(self, value: Optional[pulumi.Input[int]]):
         pulumi.set(self, "timeout_sec", value)
 
+    @property
+    @pulumi.getter(name="tlsSettings")
+    def tls_settings(self) -> Optional[pulumi.Input['BackendServiceTlsSettingsArgs']]:
+        """
+        Configuration for Backend Authenticated TLS and mTLS. May only be specified when the backend protocol is SSL, HTTPS or HTTP2.
+        Structure is documented below.
+        """
+        return pulumi.get(self, "tls_settings")
+
+    @tls_settings.setter
+    def tls_settings(self, value: Optional[pulumi.Input['BackendServiceTlsSettingsArgs']]):
+        pulumi.set(self, "tls_settings", value)
+
 
 @pulumi.input_type
 class _BackendServiceState:
@@ -807,7 +825,8 @@ class _BackendServiceState:
                  service_lb_policy: Optional[pulumi.Input[str]] = None,
                  session_affinity: Optional[pulumi.Input[str]] = None,
                  strong_session_affinity_cookie: Optional[pulumi.Input['BackendServiceStrongSessionAffinityCookieArgs']] = None,
-                 timeout_sec: Optional[pulumi.Input[int]] = None):
+                 timeout_sec: Optional[pulumi.Input[int]] = None,
+                 tls_settings: Optional[pulumi.Input['BackendServiceTlsSettingsArgs']] = None):
         """
         Input properties used for looking up and filtering BackendService resources.
         :param pulumi.Input[int] affinity_cookie_ttl_sec: Lifetime of cookies in seconds if session_affinity is
@@ -970,6 +989,8 @@ class _BackendServiceState:
                For more information see, [Backend service settings](https://cloud.google.com/compute/docs/reference/rest/v1/backendServices).
                The default is 30 seconds.
                The full range of timeout values allowed goes from 1 through 2,147,483,647 seconds.
+        :param pulumi.Input['BackendServiceTlsSettingsArgs'] tls_settings: Configuration for Backend Authenticated TLS and mTLS. May only be specified when the backend protocol is SSL, HTTPS or HTTP2.
+               Structure is documented below.
         """
         if affinity_cookie_ttl_sec is not None:
             pulumi.set(__self__, "affinity_cookie_ttl_sec", affinity_cookie_ttl_sec)
@@ -1041,6 +1062,8 @@ class _BackendServiceState:
             pulumi.set(__self__, "strong_session_affinity_cookie", strong_session_affinity_cookie)
         if timeout_sec is not None:
             pulumi.set(__self__, "timeout_sec", timeout_sec)
+        if tls_settings is not None:
+            pulumi.set(__self__, "tls_settings", tls_settings)
 
     @property
     @pulumi.getter(name="affinityCookieTtlSec")
@@ -1587,6 +1610,19 @@ class _BackendServiceState:
     def timeout_sec(self, value: Optional[pulumi.Input[int]]):
         pulumi.set(self, "timeout_sec", value)
 
+    @property
+    @pulumi.getter(name="tlsSettings")
+    def tls_settings(self) -> Optional[pulumi.Input['BackendServiceTlsSettingsArgs']]:
+        """
+        Configuration for Backend Authenticated TLS and mTLS. May only be specified when the backend protocol is SSL, HTTPS or HTTP2.
+        Structure is documented below.
+        """
+        return pulumi.get(self, "tls_settings")
+
+    @tls_settings.setter
+    def tls_settings(self, value: Optional[pulumi.Input['BackendServiceTlsSettingsArgs']]):
+        pulumi.set(self, "tls_settings", value)
+
 
 class BackendService(pulumi.CustomResource):
     @overload
@@ -1624,6 +1660,7 @@ class BackendService(pulumi.CustomResource):
                  session_affinity: Optional[pulumi.Input[str]] = None,
                  strong_session_affinity_cookie: Optional[pulumi.Input[Union['BackendServiceStrongSessionAffinityCookieArgs', 'BackendServiceStrongSessionAffinityCookieArgsDict']]] = None,
                  timeout_sec: Optional[pulumi.Input[int]] = None,
+                 tls_settings: Optional[pulumi.Input[Union['BackendServiceTlsSettingsArgs', 'BackendServiceTlsSettingsArgsDict']]] = None,
                  __props__=None):
         """
         A Backend Service defines a group of virtual machines that will serve
@@ -1975,6 +2012,38 @@ class BackendService(pulumi.CustomResource):
                 ],
             }])
         ```
+        ### Backend Service Tls Settings
+
+        ```python
+        import pulumi
+        import pulumi_gcp as gcp
+
+        default_health_check = gcp.compute.HealthCheck("default",
+            name="health-check",
+            http_health_check={
+                "port": 80,
+            })
+        default_backend_authentication_config = gcp.networksecurity.BackendAuthenticationConfig("default",
+            name="authentication",
+            well_known_roots="PUBLIC_ROOTS")
+        default = gcp.compute.BackendService("default",
+            name="backend-service",
+            health_checks=default_health_check.id,
+            load_balancing_scheme="EXTERNAL_MANAGED",
+            protocol="HTTPS",
+            tls_settings={
+                "sni": "example.com",
+                "subject_alt_names": [
+                    {
+                        "dns_name": "example.com",
+                    },
+                    {
+                        "uniform_resource_identifier": "https://example.com",
+                    },
+                ],
+                "authentication_config": default_backend_authentication_config.id.apply(lambda id: f"//networksecurity.googleapis.com/{id}"),
+            })
+        ```
 
         ## Import
 
@@ -2157,6 +2226,8 @@ class BackendService(pulumi.CustomResource):
                For more information see, [Backend service settings](https://cloud.google.com/compute/docs/reference/rest/v1/backendServices).
                The default is 30 seconds.
                The full range of timeout values allowed goes from 1 through 2,147,483,647 seconds.
+        :param pulumi.Input[Union['BackendServiceTlsSettingsArgs', 'BackendServiceTlsSettingsArgsDict']] tls_settings: Configuration for Backend Authenticated TLS and mTLS. May only be specified when the backend protocol is SSL, HTTPS or HTTP2.
+               Structure is documented below.
         """
         ...
     @overload
@@ -2514,6 +2585,38 @@ class BackendService(pulumi.CustomResource):
                 ],
             }])
         ```
+        ### Backend Service Tls Settings
+
+        ```python
+        import pulumi
+        import pulumi_gcp as gcp
+
+        default_health_check = gcp.compute.HealthCheck("default",
+            name="health-check",
+            http_health_check={
+                "port": 80,
+            })
+        default_backend_authentication_config = gcp.networksecurity.BackendAuthenticationConfig("default",
+            name="authentication",
+            well_known_roots="PUBLIC_ROOTS")
+        default = gcp.compute.BackendService("default",
+            name="backend-service",
+            health_checks=default_health_check.id,
+            load_balancing_scheme="EXTERNAL_MANAGED",
+            protocol="HTTPS",
+            tls_settings={
+                "sni": "example.com",
+                "subject_alt_names": [
+                    {
+                        "dns_name": "example.com",
+                    },
+                    {
+                        "uniform_resource_identifier": "https://example.com",
+                    },
+                ],
+                "authentication_config": default_backend_authentication_config.id.apply(lambda id: f"//networksecurity.googleapis.com/{id}"),
+            })
+        ```
 
         ## Import
 
@@ -2585,6 +2688,7 @@ class BackendService(pulumi.CustomResource):
                  session_affinity: Optional[pulumi.Input[str]] = None,
                  strong_session_affinity_cookie: Optional[pulumi.Input[Union['BackendServiceStrongSessionAffinityCookieArgs', 'BackendServiceStrongSessionAffinityCookieArgsDict']]] = None,
                  timeout_sec: Optional[pulumi.Input[int]] = None,
+                 tls_settings: Optional[pulumi.Input[Union['BackendServiceTlsSettingsArgs', 'BackendServiceTlsSettingsArgsDict']]] = None,
                  __props__=None):
         opts = pulumi.ResourceOptions.merge(_utilities.get_resource_opts_defaults(), opts)
         if not isinstance(opts, pulumi.ResourceOptions):
@@ -2625,6 +2729,7 @@ class BackendService(pulumi.CustomResource):
             __props__.__dict__["session_affinity"] = session_affinity
             __props__.__dict__["strong_session_affinity_cookie"] = strong_session_affinity_cookie
             __props__.__dict__["timeout_sec"] = timeout_sec
+            __props__.__dict__["tls_settings"] = tls_settings
             __props__.__dict__["creation_timestamp"] = None
             __props__.__dict__["fingerprint"] = None
             __props__.__dict__["generated_id"] = None
@@ -2673,7 +2778,8 @@ class BackendService(pulumi.CustomResource):
             service_lb_policy: Optional[pulumi.Input[str]] = None,
             session_affinity: Optional[pulumi.Input[str]] = None,
             strong_session_affinity_cookie: Optional[pulumi.Input[Union['BackendServiceStrongSessionAffinityCookieArgs', 'BackendServiceStrongSessionAffinityCookieArgsDict']]] = None,
-            timeout_sec: Optional[pulumi.Input[int]] = None) -> 'BackendService':
+            timeout_sec: Optional[pulumi.Input[int]] = None,
+            tls_settings: Optional[pulumi.Input[Union['BackendServiceTlsSettingsArgs', 'BackendServiceTlsSettingsArgsDict']]] = None) -> 'BackendService':
         """
         Get an existing BackendService resource's state with the given name, id, and optional extra
         properties used to qualify the lookup.
@@ -2841,6 +2947,8 @@ class BackendService(pulumi.CustomResource):
                For more information see, [Backend service settings](https://cloud.google.com/compute/docs/reference/rest/v1/backendServices).
                The default is 30 seconds.
                The full range of timeout values allowed goes from 1 through 2,147,483,647 seconds.
+        :param pulumi.Input[Union['BackendServiceTlsSettingsArgs', 'BackendServiceTlsSettingsArgsDict']] tls_settings: Configuration for Backend Authenticated TLS and mTLS. May only be specified when the backend protocol is SSL, HTTPS or HTTP2.
+               Structure is documented below.
         """
         opts = pulumi.ResourceOptions.merge(opts, pulumi.ResourceOptions(id=id))
 
@@ -2881,6 +2989,7 @@ class BackendService(pulumi.CustomResource):
         __props__.__dict__["session_affinity"] = session_affinity
         __props__.__dict__["strong_session_affinity_cookie"] = strong_session_affinity_cookie
         __props__.__dict__["timeout_sec"] = timeout_sec
+        __props__.__dict__["tls_settings"] = tls_settings
         return BackendService(resource_name, opts=opts, __props__=__props__)
 
     @property
@@ -3288,3 +3397,12 @@ class BackendService(pulumi.CustomResource):
         """
         return pulumi.get(self, "timeout_sec")
 
+    @property
+    @pulumi.getter(name="tlsSettings")
+    def tls_settings(self) -> pulumi.Output[Optional['outputs.BackendServiceTlsSettings']]:
+        """
+        Configuration for Backend Authenticated TLS and mTLS. May only be specified when the backend protocol is SSL, HTTPS or HTTP2.
+        Structure is documented below.
+        """
+        return pulumi.get(self, "tls_settings")
+

pulumi_gcp/compute/get_backend_service.py

@@ -27,7 +27,7 @@ class GetBackendServiceResult:
     """
     A collection of values returned by getBackendService.
     """
-    def __init__(__self__, affinity_cookie_ttl_sec=None, backends=None, cdn_policies=None, circuit_breakers=None, compression_mode=None, connection_draining_timeout_sec=None, consistent_hash=None, creation_timestamp=None, custom_metrics=None, custom_request_headers=None, custom_response_headers=None, description=None, edge_security_policy=None, enable_cdn=None, fingerprint=None, generated_id=None, health_checks=None, iaps=None, id=None, ip_address_selection_policy=None, load_balancing_scheme=None, locality_lb_policies=None, locality_lb_policy=None, log_configs=None, name=None, outlier_detections=None, port_name=None, project=None, protocol=None, security_policy=None, security_settings=None, self_link=None, service_lb_policy=None, session_affinity=None, strong_session_affinity_cookies=None, timeout_sec=None):
+    def __init__(__self__, affinity_cookie_ttl_sec=None, backends=None, cdn_policies=None, circuit_breakers=None, compression_mode=None, connection_draining_timeout_sec=None, consistent_hash=None, creation_timestamp=None, custom_metrics=None, custom_request_headers=None, custom_response_headers=None, description=None, edge_security_policy=None, enable_cdn=None, fingerprint=None, generated_id=None, health_checks=None, iaps=None, id=None, ip_address_selection_policy=None, load_balancing_scheme=None, locality_lb_policies=None, locality_lb_policy=None, log_configs=None, name=None, outlier_detections=None, port_name=None, project=None, protocol=None, security_policy=None, security_settings=None, self_link=None, service_lb_policy=None, session_affinity=None, strong_session_affinity_cookies=None, timeout_sec=None, tls_settings=None):
         if affinity_cookie_ttl_sec and not isinstance(affinity_cookie_ttl_sec, int):
             raise TypeError("Expected argument 'affinity_cookie_ttl_sec' to be a int")
         pulumi.set(__self__, "affinity_cookie_ttl_sec", affinity_cookie_ttl_sec)
@@ -136,6 +136,9 @@ class GetBackendServiceResult:
         if timeout_sec and not isinstance(timeout_sec, int):
             raise TypeError("Expected argument 'timeout_sec' to be a int")
         pulumi.set(__self__, "timeout_sec", timeout_sec)
+        if tls_settings and not isinstance(tls_settings, list):
+            raise TypeError("Expected argument 'tls_settings' to be a list")
+        pulumi.set(__self__, "tls_settings", tls_settings)
 
     @property
     @pulumi.getter(name="affinityCookieTtlSec")
@@ -356,6 +359,11 @@ class GetBackendServiceResult:
         """
         return pulumi.get(self, "timeout_sec")
 
+    @property
+    @pulumi.getter(name="tlsSettings")
+    def tls_settings(self) -> Sequence['outputs.GetBackendServiceTlsSettingResult']:
+        return pulumi.get(self, "tls_settings")
+
 
 class AwaitableGetBackendServiceResult(GetBackendServiceResult):
     # pylint: disable=using-constant-test
@@ -398,7 +406,8 @@ class AwaitableGetBackendServiceResult(GetBackendServiceResult):
             service_lb_policy=self.service_lb_policy,
             session_affinity=self.session_affinity,
             strong_session_affinity_cookies=self.strong_session_affinity_cookies,
-            timeout_sec=self.timeout_sec)
+            timeout_sec=self.timeout_sec,
+            tls_settings=self.tls_settings)
 
 
 def get_backend_service(name: Optional[str] = None,
@@ -469,7 +478,8 @@ def get_backend_service(name: Optional[str] = None,
         service_lb_policy=pulumi.get(__ret__, 'service_lb_policy'),
         session_affinity=pulumi.get(__ret__, 'session_affinity'),
         strong_session_affinity_cookies=pulumi.get(__ret__, 'strong_session_affinity_cookies'),
-        timeout_sec=pulumi.get(__ret__, 'timeout_sec'))
+        timeout_sec=pulumi.get(__ret__, 'timeout_sec'),
+        tls_settings=pulumi.get(__ret__, 'tls_settings'))
 def get_backend_service_output(name: Optional[pulumi.Input[str]] = None,
                                project: Optional[pulumi.Input[Optional[str]]] = None,
                                opts: Optional[Union[pulumi.InvokeOptions, pulumi.InvokeOutputOptions]] = None) -> pulumi.Output[GetBackendServiceResult]:
@@ -537,4 +547,5 @@ def get_backend_service_output(name: Optional[pulumi.Input[str]] = None,
         service_lb_policy=pulumi.get(__response__, 'service_lb_policy'),
         session_affinity=pulumi.get(__response__, 'session_affinity'),
         strong_session_affinity_cookies=pulumi.get(__response__, 'strong_session_affinity_cookies'),
-        timeout_sec=pulumi.get(__response__, 'timeout_sec')))
+        timeout_sec=pulumi.get(__response__, 'timeout_sec'),
+        tls_settings=pulumi.get(__response__, 'tls_settings')))

pulumi_gcp/compute/get_instance.py

@@ -27,7 +27,7 @@ class GetInstanceResult:
     """
     A collection of values returned by getInstance.
     """
-    def __init__(__self__, advanced_machine_features=None, allow_stopping_for_update=None, attached_disks=None, boot_disks=None, can_ip_forward=None, confidential_instance_configs=None, cpu_platform=None, creation_timestamp=None, current_status=None, deletion_protection=None, description=None, desired_status=None, effective_labels=None, enable_display=None, guest_accelerators=None, hostname=None, id=None, instance_id=None, key_revocation_action_type=None, label_fingerprint=None, labels=None, machine_type=None, metadata=None, metadata_fingerprint=None, metadata_startup_script=None, min_cpu_platform=None, name=None, network_interfaces=None, network_performance_configs=None, params=None, partner_metadata=None, project=None, pulumi_labels=None, reservation_affinities=None, resource_policies=None, schedulings=None, scratch_disks=None, self_link=None, service_accounts=None, shielded_instance_configs=None, tags=None, tags_fingerprint=None, zone=None):
+    def __init__(__self__, advanced_machine_features=None, allow_stopping_for_update=None, attached_disks=None, boot_disks=None, can_ip_forward=None, confidential_instance_configs=None, cpu_platform=None, creation_timestamp=None, current_status=None, deletion_protection=None, description=None, desired_status=None, effective_labels=None, enable_display=None, guest_accelerators=None, hostname=None, id=None, instance_encryption_keys=None, instance_id=None, key_revocation_action_type=None, label_fingerprint=None, labels=None, machine_type=None, metadata=None, metadata_fingerprint=None, metadata_startup_script=None, min_cpu_platform=None, name=None, network_interfaces=None, network_performance_configs=None, params=None, partner_metadata=None, project=None, pulumi_labels=None, reservation_affinities=None, resource_policies=None, schedulings=None, scratch_disks=None, self_link=None, service_accounts=None, shielded_instance_configs=None, tags=None, tags_fingerprint=None, zone=None):
         if advanced_machine_features and not isinstance(advanced_machine_features, list):
             raise TypeError("Expected argument 'advanced_machine_features' to be a list")
         pulumi.set(__self__, "advanced_machine_features", advanced_machine_features)
@@ -79,6 +79,9 @@ class GetInstanceResult:
         if id and not isinstance(id, str):
             raise TypeError("Expected argument 'id' to be a str")
         pulumi.set(__self__, "id", id)
+        if instance_encryption_keys and not isinstance(instance_encryption_keys, list):
+            raise TypeError("Expected argument 'instance_encryption_keys' to be a list")
+        pulumi.set(__self__, "instance_encryption_keys", instance_encryption_keys)
         if instance_id and not isinstance(instance_id, str):
             raise TypeError("Expected argument 'instance_id' to be a str")
         pulumi.set(__self__, "instance_id", instance_id)
@@ -276,6 +279,11 @@ class GetInstanceResult:
         """
         return pulumi.get(self, "id")
 
+    @property
+    @pulumi.getter(name="instanceEncryptionKeys")
+    def instance_encryption_keys(self) -> Sequence['outputs.GetInstanceInstanceEncryptionKeyResult']:
+        return pulumi.get(self, "instance_encryption_keys")
+
     @property
     @pulumi.getter(name="instanceId")
     def instance_id(self) -> str:
@@ -484,6 +492,7 @@ class AwaitableGetInstanceResult(GetInstanceResult):
             guest_accelerators=self.guest_accelerators,
             hostname=self.hostname,
             id=self.id,
+            instance_encryption_keys=self.instance_encryption_keys,
             instance_id=self.instance_id,
             key_revocation_action_type=self.key_revocation_action_type,
             label_fingerprint=self.label_fingerprint,
@@ -569,6 +578,7 @@ def get_instance(name: Optional[str] = None,
         guest_accelerators=pulumi.get(__ret__, 'guest_accelerators'),
         hostname=pulumi.get(__ret__, 'hostname'),
         id=pulumi.get(__ret__, 'id'),
+        instance_encryption_keys=pulumi.get(__ret__, 'instance_encryption_keys'),
         instance_id=pulumi.get(__ret__, 'instance_id'),
         key_revocation_action_type=pulumi.get(__ret__, 'key_revocation_action_type'),
         label_fingerprint=pulumi.get(__ret__, 'label_fingerprint'),
@@ -651,6 +661,7 @@ def get_instance_output(name: Optional[pulumi.Input[Optional[str]]] = None,
         guest_accelerators=pulumi.get(__response__, 'guest_accelerators'),
         hostname=pulumi.get(__response__, 'hostname'),
         id=pulumi.get(__response__, 'id'),
+        instance_encryption_keys=pulumi.get(__response__, 'instance_encryption_keys'),
         instance_id=pulumi.get(__response__, 'instance_id'),
         key_revocation_action_type=pulumi.get(__response__, 'key_revocation_action_type'),
         label_fingerprint=pulumi.get(__response__, 'label_fingerprint'),