pulumi-gcp 8.3.0a1727223968__py3-none-any.whl → 8.3.0a1727226164__py3-none-any.whl

pulumi_gcp/compute/region_backend_service.py

@@ -113,7 +113,8 @@ class RegionBackendServiceArgs:
                build times and host selection times. For more information about
                Maglev, refer to https://ai.google/research/pubs/pub44824
                * `WEIGHTED_MAGLEV`: Per-instance weighted Load Balancing via health check
-               reported weights. If set, the Backend Service must
+               reported weights. Only applicable to loadBalancingScheme
+               EXTERNAL. If set, the Backend Service must
                configure a non legacy HTTP-based Health Check, and
                health check replies are expected to contain
                non-standard HTTP response header field
@@ -124,14 +125,14 @@ class RegionBackendServiceArgs:
                instance either reported a valid weight or had
                UNAVAILABLE_WEIGHT. Otherwise, Load Balancing remains
                equal-weight.
-               This field is applicable to either:
+               locality_lb_policy is applicable to either:
                * A regional backend service with the service_protocol set to HTTP, HTTPS, or HTTP2,
                and loadBalancingScheme set to INTERNAL_MANAGED.
                * A global backend service with the load_balancing_scheme set to INTERNAL_SELF_MANAGED.
                * A regional backend service with loadBalancingScheme set to EXTERNAL (External Network
                Load Balancing). Only MAGLEV and WEIGHTED_MAGLEV values are possible for External
                Network Load Balancing. The default is MAGLEV.
-               If session_affinity is not NONE, and this field is not set to MAGLEV, WEIGHTED_MAGLEV,
+               If session_affinity is not NONE, and locality_lb_policy is not set to MAGLEV, WEIGHTED_MAGLEV,
                or RING_HASH, session affinity settings will not take effect.
                Only ROUND_ROBIN and RING_HASH are supported when the backend service is referenced
                by a URL map that is bound to target gRPC proxy that has validate_for_proxyless
@@ -446,7 +447,8 @@ class RegionBackendServiceArgs:
         build times and host selection times. For more information about
         Maglev, refer to https://ai.google/research/pubs/pub44824
         * `WEIGHTED_MAGLEV`: Per-instance weighted Load Balancing via health check
-        reported weights. If set, the Backend Service must
+        reported weights. Only applicable to loadBalancingScheme
+        EXTERNAL. If set, the Backend Service must
         configure a non legacy HTTP-based Health Check, and
         health check replies are expected to contain
         non-standard HTTP response header field
@@ -457,14 +459,14 @@ class RegionBackendServiceArgs:
         instance either reported a valid weight or had
         UNAVAILABLE_WEIGHT. Otherwise, Load Balancing remains
         equal-weight.
-        This field is applicable to either:
+        locality_lb_policy is applicable to either:
         * A regional backend service with the service_protocol set to HTTP, HTTPS, or HTTP2,
         and loadBalancingScheme set to INTERNAL_MANAGED.
         * A global backend service with the load_balancing_scheme set to INTERNAL_SELF_MANAGED.
         * A regional backend service with loadBalancingScheme set to EXTERNAL (External Network
         Load Balancing). Only MAGLEV and WEIGHTED_MAGLEV values are possible for External
         Network Load Balancing. The default is MAGLEV.
-        If session_affinity is not NONE, and this field is not set to MAGLEV, WEIGHTED_MAGLEV,
+        If session_affinity is not NONE, and locality_lb_policy is not set to MAGLEV, WEIGHTED_MAGLEV,
         or RING_HASH, session affinity settings will not take effect.
         Only ROUND_ROBIN and RING_HASH are supported when the backend service is referenced
         by a URL map that is bound to target gRPC proxy that has validate_for_proxyless
@@ -757,7 +759,8 @@ class _RegionBackendServiceState:
                build times and host selection times. For more information about
                Maglev, refer to https://ai.google/research/pubs/pub44824
                * `WEIGHTED_MAGLEV`: Per-instance weighted Load Balancing via health check
-               reported weights. If set, the Backend Service must
+               reported weights. Only applicable to loadBalancingScheme
+               EXTERNAL. If set, the Backend Service must
                configure a non legacy HTTP-based Health Check, and
                health check replies are expected to contain
                non-standard HTTP response header field
@@ -768,14 +771,14 @@ class _RegionBackendServiceState:
                instance either reported a valid weight or had
                UNAVAILABLE_WEIGHT. Otherwise, Load Balancing remains
                equal-weight.
-               This field is applicable to either:
+               locality_lb_policy is applicable to either:
                * A regional backend service with the service_protocol set to HTTP, HTTPS, or HTTP2,
                and loadBalancingScheme set to INTERNAL_MANAGED.
                * A global backend service with the load_balancing_scheme set to INTERNAL_SELF_MANAGED.
                * A regional backend service with loadBalancingScheme set to EXTERNAL (External Network
                Load Balancing). Only MAGLEV and WEIGHTED_MAGLEV values are possible for External
                Network Load Balancing. The default is MAGLEV.
-               If session_affinity is not NONE, and this field is not set to MAGLEV, WEIGHTED_MAGLEV,
+               If session_affinity is not NONE, and locality_lb_policy is not set to MAGLEV, WEIGHTED_MAGLEV,
                or RING_HASH, session affinity settings will not take effect.
                Only ROUND_ROBIN and RING_HASH are supported when the backend service is referenced
                by a URL map that is bound to target gRPC proxy that has validate_for_proxyless
@@ -1136,7 +1139,8 @@ class _RegionBackendServiceState:
         build times and host selection times. For more information about
         Maglev, refer to https://ai.google/research/pubs/pub44824
         * `WEIGHTED_MAGLEV`: Per-instance weighted Load Balancing via health check
-        reported weights. If set, the Backend Service must
+        reported weights. Only applicable to loadBalancingScheme
+        EXTERNAL. If set, the Backend Service must
         configure a non legacy HTTP-based Health Check, and
         health check replies are expected to contain
         non-standard HTTP response header field
@@ -1147,14 +1151,14 @@ class _RegionBackendServiceState:
         instance either reported a valid weight or had
         UNAVAILABLE_WEIGHT. Otherwise, Load Balancing remains
         equal-weight.
-        This field is applicable to either:
+        locality_lb_policy is applicable to either:
         * A regional backend service with the service_protocol set to HTTP, HTTPS, or HTTP2,
         and loadBalancingScheme set to INTERNAL_MANAGED.
         * A global backend service with the load_balancing_scheme set to INTERNAL_SELF_MANAGED.
         * A regional backend service with loadBalancingScheme set to EXTERNAL (External Network
         Load Balancing). Only MAGLEV and WEIGHTED_MAGLEV values are possible for External
         Network Load Balancing. The default is MAGLEV.
-        If session_affinity is not NONE, and this field is not set to MAGLEV, WEIGHTED_MAGLEV,
+        If session_affinity is not NONE, and locality_lb_policy is not set to MAGLEV, WEIGHTED_MAGLEV,
         or RING_HASH, session affinity settings will not take effect.
         Only ROUND_ROBIN and RING_HASH are supported when the backend service is referenced
         by a URL map that is bound to target gRPC proxy that has validate_for_proxyless
@@ -1743,7 +1747,8 @@ class RegionBackendService(pulumi.CustomResource):
                build times and host selection times. For more information about
                Maglev, refer to https://ai.google/research/pubs/pub44824
                * `WEIGHTED_MAGLEV`: Per-instance weighted Load Balancing via health check
-               reported weights. If set, the Backend Service must
+               reported weights. Only applicable to loadBalancingScheme
+               EXTERNAL. If set, the Backend Service must
                configure a non legacy HTTP-based Health Check, and
                health check replies are expected to contain
                non-standard HTTP response header field
@@ -1754,14 +1759,14 @@ class RegionBackendService(pulumi.CustomResource):
                instance either reported a valid weight or had
                UNAVAILABLE_WEIGHT. Otherwise, Load Balancing remains
                equal-weight.
-               This field is applicable to either:
+               locality_lb_policy is applicable to either:
                * A regional backend service with the service_protocol set to HTTP, HTTPS, or HTTP2,
                and loadBalancingScheme set to INTERNAL_MANAGED.
                * A global backend service with the load_balancing_scheme set to INTERNAL_SELF_MANAGED.
                * A regional backend service with loadBalancingScheme set to EXTERNAL (External Network
                Load Balancing). Only MAGLEV and WEIGHTED_MAGLEV values are possible for External
                Network Load Balancing. The default is MAGLEV.
-               If session_affinity is not NONE, and this field is not set to MAGLEV, WEIGHTED_MAGLEV,
+               If session_affinity is not NONE, and locality_lb_policy is not set to MAGLEV, WEIGHTED_MAGLEV,
                or RING_HASH, session affinity settings will not take effect.
                Only ROUND_ROBIN and RING_HASH are supported when the backend service is referenced
                by a URL map that is bound to target gRPC proxy that has validate_for_proxyless
@@ -2302,7 +2307,8 @@ class RegionBackendService(pulumi.CustomResource):
                build times and host selection times. For more information about
                Maglev, refer to https://ai.google/research/pubs/pub44824
                * `WEIGHTED_MAGLEV`: Per-instance weighted Load Balancing via health check
-               reported weights. If set, the Backend Service must
+               reported weights. Only applicable to loadBalancingScheme
+               EXTERNAL. If set, the Backend Service must
                configure a non legacy HTTP-based Health Check, and
                health check replies are expected to contain
                non-standard HTTP response header field
@@ -2313,14 +2319,14 @@ class RegionBackendService(pulumi.CustomResource):
                instance either reported a valid weight or had
                UNAVAILABLE_WEIGHT. Otherwise, Load Balancing remains
                equal-weight.
-               This field is applicable to either:
+               locality_lb_policy is applicable to either:
                * A regional backend service with the service_protocol set to HTTP, HTTPS, or HTTP2,
                and loadBalancingScheme set to INTERNAL_MANAGED.
                * A global backend service with the load_balancing_scheme set to INTERNAL_SELF_MANAGED.
                * A regional backend service with loadBalancingScheme set to EXTERNAL (External Network
                Load Balancing). Only MAGLEV and WEIGHTED_MAGLEV values are possible for External
                Network Load Balancing. The default is MAGLEV.
-               If session_affinity is not NONE, and this field is not set to MAGLEV, WEIGHTED_MAGLEV,
+               If session_affinity is not NONE, and locality_lb_policy is not set to MAGLEV, WEIGHTED_MAGLEV,
                or RING_HASH, session affinity settings will not take effect.
                Only ROUND_ROBIN and RING_HASH are supported when the backend service is referenced
                by a URL map that is bound to target gRPC proxy that has validate_for_proxyless
@@ -2547,7 +2553,7 @@ class RegionBackendService(pulumi.CustomResource):
 
     @property
     @pulumi.getter
-    def iap(self) -> pulumi.Output[Optional['outputs.RegionBackendServiceIap']]:
+    def iap(self) -> pulumi.Output['outputs.RegionBackendServiceIap']:
         """
         Settings for enabling Cloud Identity Aware Proxy
         Structure is documented below.
@@ -2592,7 +2598,8 @@ class RegionBackendService(pulumi.CustomResource):
         build times and host selection times. For more information about
         Maglev, refer to https://ai.google/research/pubs/pub44824
         * `WEIGHTED_MAGLEV`: Per-instance weighted Load Balancing via health check
-        reported weights. If set, the Backend Service must
+        reported weights. Only applicable to loadBalancingScheme
+        EXTERNAL. If set, the Backend Service must
         configure a non legacy HTTP-based Health Check, and
         health check replies are expected to contain
         non-standard HTTP response header field
@@ -2603,14 +2610,14 @@ class RegionBackendService(pulumi.CustomResource):
         instance either reported a valid weight or had
         UNAVAILABLE_WEIGHT. Otherwise, Load Balancing remains
         equal-weight.
-        This field is applicable to either:
+        locality_lb_policy is applicable to either:
         * A regional backend service with the service_protocol set to HTTP, HTTPS, or HTTP2,
         and loadBalancingScheme set to INTERNAL_MANAGED.
         * A global backend service with the load_balancing_scheme set to INTERNAL_SELF_MANAGED.
         * A regional backend service with loadBalancingScheme set to EXTERNAL (External Network
         Load Balancing). Only MAGLEV and WEIGHTED_MAGLEV values are possible for External
         Network Load Balancing. The default is MAGLEV.
-        If session_affinity is not NONE, and this field is not set to MAGLEV, WEIGHTED_MAGLEV,
+        If session_affinity is not NONE, and locality_lb_policy is not set to MAGLEV, WEIGHTED_MAGLEV,
         or RING_HASH, session affinity settings will not take effect.
         Only ROUND_ROBIN and RING_HASH are supported when the backend service is referenced
         by a URL map that is bound to target gRPC proxy that has validate_for_proxyless

pulumi_gcp/compute/router_nat.py

@@ -93,6 +93,9 @@ class RouterNatArgs:
                Possible values are: `MANUAL_ONLY`, `AUTO_ONLY`.
         :param pulumi.Input[Sequence[pulumi.Input[str]]] nat_ips: Self-links of NAT IPs. Only valid if natIpAllocateOption
                is set to MANUAL_ONLY.
+               If this field is used alongside with a count created list of address resources `google_compute_address.foobar.*.self_link`,
+               the access level resource for the address resource must have a `lifecycle` block with `create_before_destroy = true` so
+               the number of resources can be increased/decreased without triggering the `resourceInUseByAnotherResource` error.
         :param pulumi.Input[str] project: The ID of the project in which the resource belongs.
                If it is not provided, the provider project is used.
         :param pulumi.Input[str] region: Region where the router and NAT reside.
@@ -354,6 +357,9 @@ class RouterNatArgs:
         """
         Self-links of NAT IPs. Only valid if natIpAllocateOption
         is set to MANUAL_ONLY.
+        If this field is used alongside with a count created list of address resources `google_compute_address.foobar.*.self_link`,
+        the access level resource for the address resource must have a `lifecycle` block with `create_before_destroy = true` so
+        the number of resources can be increased/decreased without triggering the `resourceInUseByAnotherResource` error.
         """
         return pulumi.get(self, "nat_ips")
 
@@ -542,6 +548,9 @@ class _RouterNatState:
                Possible values are: `MANUAL_ONLY`, `AUTO_ONLY`.
         :param pulumi.Input[Sequence[pulumi.Input[str]]] nat_ips: Self-links of NAT IPs. Only valid if natIpAllocateOption
                is set to MANUAL_ONLY.
+               If this field is used alongside with a count created list of address resources `google_compute_address.foobar.*.self_link`,
+               the access level resource for the address resource must have a `lifecycle` block with `create_before_destroy = true` so
+               the number of resources can be increased/decreased without triggering the `resourceInUseByAnotherResource` error.
         :param pulumi.Input[str] project: The ID of the project in which the resource belongs.
                If it is not provided, the provider project is used.
         :param pulumi.Input[str] region: Region where the router and NAT reside.
@@ -783,6 +792,9 @@ class _RouterNatState:
         """
         Self-links of NAT IPs. Only valid if natIpAllocateOption
         is set to MANUAL_ONLY.
+        If this field is used alongside with a count created list of address resources `google_compute_address.foobar.*.self_link`,
+        the access level resource for the address resource must have a `lifecycle` block with `create_before_destroy = true` so
+        the number of resources can be increased/decreased without triggering the `resourceInUseByAnotherResource` error.
         """
         return pulumi.get(self, "nat_ips")
 
@@ -980,6 +992,9 @@ class RouterNat(pulumi.CustomResource):
         """
         A NAT service created in a router.
 
+        > **Note:** Recreating a `compute.Address` that is being used by `compute.RouterNat` will give a `resourceInUseByAnotherResource` error.
+        Use `lifecycle.create_before_destroy` on this address resource to avoid this type of error as shown in the Manual Ips example.
+
         To get more information about RouterNat, see:
 
         * [API documentation](https://cloud.google.com/compute/docs/reference/rest/v1/routers)
@@ -1018,39 +1033,6 @@ class RouterNat(pulumi.CustomResource):
                 "filter": "ERRORS_ONLY",
             })
         ```
-        ### Router Nat Manual Ips
-
-        ```python
-        import pulumi
-        import pulumi_gcp as gcp
-
-        net = gcp.compute.Network("net", name="my-network")
-        subnet = gcp.compute.Subnetwork("subnet",
-            name="my-subnetwork",
-            network=net.id,
-            ip_cidr_range="10.0.0.0/16",
-            region="us-central1")
-        router = gcp.compute.Router("router",
-            name="my-router",
-            region=subnet.region,
-            network=net.id)
-        address = []
-        for range in [{"value": i} for i in range(0, 2)]:
-            address.append(gcp.compute.Address(f"address-{range['value']}",
-                name=f"nat-manual-ip-{range['value']}",
-                region=subnet.region))
-        nat_manual = gcp.compute.RouterNat("nat_manual",
-            name="my-router-nat",
-            router=router.name,
-            region=router.region,
-            nat_ip_allocate_option="MANUAL_ONLY",
-            nat_ips=[__item.self_link for __item in address],
-            source_subnetwork_ip_ranges_to_nat="LIST_OF_SUBNETWORKS",
-            subnetworks=[{
-                "name": subnet.id,
-                "source_ip_ranges_to_nats": ["ALL_IP_RANGES"],
-            }])
-        ```
         ### Router Nat Rules
 
         ```python
@@ -1221,6 +1203,9 @@ class RouterNat(pulumi.CustomResource):
                Possible values are: `MANUAL_ONLY`, `AUTO_ONLY`.
         :param pulumi.Input[Sequence[pulumi.Input[str]]] nat_ips: Self-links of NAT IPs. Only valid if natIpAllocateOption
                is set to MANUAL_ONLY.
+               If this field is used alongside with a count created list of address resources `google_compute_address.foobar.*.self_link`,
+               the access level resource for the address resource must have a `lifecycle` block with `create_before_destroy = true` so
+               the number of resources can be increased/decreased without triggering the `resourceInUseByAnotherResource` error.
         :param pulumi.Input[str] project: The ID of the project in which the resource belongs.
                If it is not provided, the provider project is used.
         :param pulumi.Input[str] region: Region where the router and NAT reside.
@@ -1267,6 +1252,9 @@ class RouterNat(pulumi.CustomResource):
         """
         A NAT service created in a router.
 
+        > **Note:** Recreating a `compute.Address` that is being used by `compute.RouterNat` will give a `resourceInUseByAnotherResource` error.
+        Use `lifecycle.create_before_destroy` on this address resource to avoid this type of error as shown in the Manual Ips example.
+
         To get more information about RouterNat, see:
 
         * [API documentation](https://cloud.google.com/compute/docs/reference/rest/v1/routers)
@@ -1305,39 +1293,6 @@ class RouterNat(pulumi.CustomResource):
                 "filter": "ERRORS_ONLY",
             })
         ```
-        ### Router Nat Manual Ips
-
-        ```python
-        import pulumi
-        import pulumi_gcp as gcp
-
-        net = gcp.compute.Network("net", name="my-network")
-        subnet = gcp.compute.Subnetwork("subnet",
-            name="my-subnetwork",
-            network=net.id,
-            ip_cidr_range="10.0.0.0/16",
-            region="us-central1")
-        router = gcp.compute.Router("router",
-            name="my-router",
-            region=subnet.region,
-            network=net.id)
-        address = []
-        for range in [{"value": i} for i in range(0, 2)]:
-            address.append(gcp.compute.Address(f"address-{range['value']}",
-                name=f"nat-manual-ip-{range['value']}",
-                region=subnet.region))
-        nat_manual = gcp.compute.RouterNat("nat_manual",
-            name="my-router-nat",
-            router=router.name,
-            region=router.region,
-            nat_ip_allocate_option="MANUAL_ONLY",
-            nat_ips=[__item.self_link for __item in address],
-            source_subnetwork_ip_ranges_to_nat="LIST_OF_SUBNETWORKS",
-            subnetworks=[{
-                "name": subnet.id,
-                "source_ip_ranges_to_nats": ["ALL_IP_RANGES"],
-            }])
-        ```
         ### Router Nat Rules
 
         ```python
@@ -1620,6 +1575,9 @@ class RouterNat(pulumi.CustomResource):
                Possible values are: `MANUAL_ONLY`, `AUTO_ONLY`.
         :param pulumi.Input[Sequence[pulumi.Input[str]]] nat_ips: Self-links of NAT IPs. Only valid if natIpAllocateOption
                is set to MANUAL_ONLY.
+               If this field is used alongside with a count created list of address resources `google_compute_address.foobar.*.self_link`,
+               the access level resource for the address resource must have a `lifecycle` block with `create_before_destroy = true` so
+               the number of resources can be increased/decreased without triggering the `resourceInUseByAnotherResource` error.
         :param pulumi.Input[str] project: The ID of the project in which the resource belongs.
                If it is not provided, the provider project is used.
         :param pulumi.Input[str] region: Region where the router and NAT reside.
@@ -1799,6 +1757,9 @@ class RouterNat(pulumi.CustomResource):
         """
         Self-links of NAT IPs. Only valid if natIpAllocateOption
         is set to MANUAL_ONLY.
+        If this field is used alongside with a count created list of address resources `google_compute_address.foobar.*.self_link`,
+        the access level resource for the address resource must have a `lifecycle` block with `create_before_destroy = true` so
+        the number of resources can be increased/decreased without triggering the `resourceInUseByAnotherResource` error.
         """
         return pulumi.get(self, "nat_ips")
 

pulumi_gcp/config/__init__.pyi

@@ -303,6 +303,8 @@ scopes: Optional[str]
 
 secretManagerCustomEndpoint: Optional[str]
 
+secretManagerRegionalCustomEndpoint: Optional[str]
+
 secureSourceManagerCustomEndpoint: Optional[str]
 
 securityCenterCustomEndpoint: Optional[str]

pulumi_gcp/config/vars.py

@@ -597,6 +597,10 @@ class _ExportableConfig(types.ModuleType):
     def secret_manager_custom_endpoint(self) -> Optional[str]:
         return __config__.get('secretManagerCustomEndpoint')
 
+    @property
+    def secret_manager_regional_custom_endpoint(self) -> Optional[str]:
+        return __config__.get('secretManagerRegionalCustomEndpoint')
+
     @property
     def secure_source_manager_custom_endpoint(self) -> Optional[str]:
         return __config__.get('secureSourceManagerCustomEndpoint')