pulumi-gcp 8.31.0a1747205151__py3-none-any.whl → 8.32.0__py3-none-any.whl

pulumi_gcp/networkconnectivity/internal_range.py

@@ -27,6 +27,7 @@ class InternalRangeArgs:
                  usage: pulumi.Input[builtins.str],
                  description: Optional[pulumi.Input[builtins.str]] = None,
                  exclude_cidr_ranges: Optional[pulumi.Input[Sequence[pulumi.Input[builtins.str]]]] = None,
+                 immutable: Optional[pulumi.Input[builtins.bool]] = None,
                  ip_cidr_range: Optional[pulumi.Input[builtins.str]] = None,
                  labels: Optional[pulumi.Input[Mapping[str, pulumi.Input[builtins.str]]]] = None,
                  migration: Optional[pulumi.Input['InternalRangeMigrationArgs']] = None,
@@ -48,6 +49,7 @@ class InternalRangeArgs:
         :param pulumi.Input[builtins.str] description: An optional description of this resource.
         :param pulumi.Input[Sequence[pulumi.Input[builtins.str]]] exclude_cidr_ranges: Optional. List of IP CIDR ranges to be excluded. Resulting reserved Internal Range will not overlap with any CIDR blocks mentioned in this list.
                Only IPv4 CIDR ranges are supported.
+        :param pulumi.Input[builtins.bool] immutable: Immutable ranges cannot have their fields modified, except for labels and description.
         :param pulumi.Input[builtins.str] ip_cidr_range: The IP range that this internal range defines.
                NOTE: IPv6 ranges are limited to usage=EXTERNAL_TO_VPC and peering=FOR_SELF
                NOTE: For IPv6 Ranges this field is compulsory, i.e. the address range must be specified explicitly.
@@ -76,6 +78,8 @@ class InternalRangeArgs:
             pulumi.set(__self__, "description", description)
         if exclude_cidr_ranges is not None:
             pulumi.set(__self__, "exclude_cidr_ranges", exclude_cidr_ranges)
+        if immutable is not None:
+            pulumi.set(__self__, "immutable", immutable)
         if ip_cidr_range is not None:
             pulumi.set(__self__, "ip_cidr_range", ip_cidr_range)
         if labels is not None:
@@ -159,6 +163,18 @@ class InternalRangeArgs:
     def exclude_cidr_ranges(self, value: Optional[pulumi.Input[Sequence[pulumi.Input[builtins.str]]]]):
         pulumi.set(self, "exclude_cidr_ranges", value)
 
+    @property
+    @pulumi.getter
+    def immutable(self) -> Optional[pulumi.Input[builtins.bool]]:
+        """
+        Immutable ranges cannot have their fields modified, except for labels and description.
+        """
+        return pulumi.get(self, "immutable")
+
+    @immutable.setter
+    def immutable(self, value: Optional[pulumi.Input[builtins.bool]]):
+        pulumi.set(self, "immutable", value)
+
     @property
     @pulumi.getter(name="ipCidrRange")
     def ip_cidr_range(self) -> Optional[pulumi.Input[builtins.str]]:
@@ -274,6 +290,7 @@ class _InternalRangeState:
                  description: Optional[pulumi.Input[builtins.str]] = None,
                  effective_labels: Optional[pulumi.Input[Mapping[str, pulumi.Input[builtins.str]]]] = None,
                  exclude_cidr_ranges: Optional[pulumi.Input[Sequence[pulumi.Input[builtins.str]]]] = None,
+                 immutable: Optional[pulumi.Input[builtins.bool]] = None,
                  ip_cidr_range: Optional[pulumi.Input[builtins.str]] = None,
                  labels: Optional[pulumi.Input[Mapping[str, pulumi.Input[builtins.str]]]] = None,
                  migration: Optional[pulumi.Input['InternalRangeMigrationArgs']] = None,
@@ -293,6 +310,7 @@ class _InternalRangeState:
         :param pulumi.Input[Mapping[str, pulumi.Input[builtins.str]]] effective_labels: All of labels (key/value pairs) present on the resource in GCP, including the labels configured through Pulumi, other clients and services.
         :param pulumi.Input[Sequence[pulumi.Input[builtins.str]]] exclude_cidr_ranges: Optional. List of IP CIDR ranges to be excluded. Resulting reserved Internal Range will not overlap with any CIDR blocks mentioned in this list.
                Only IPv4 CIDR ranges are supported.
+        :param pulumi.Input[builtins.bool] immutable: Immutable ranges cannot have their fields modified, except for labels and description.
         :param pulumi.Input[builtins.str] ip_cidr_range: The IP range that this internal range defines.
                NOTE: IPv6 ranges are limited to usage=EXTERNAL_TO_VPC and peering=FOR_SELF
                NOTE: For IPv6 Ranges this field is compulsory, i.e. the address range must be specified explicitly.
@@ -333,6 +351,8 @@ class _InternalRangeState:
             pulumi.set(__self__, "effective_labels", effective_labels)
         if exclude_cidr_ranges is not None:
             pulumi.set(__self__, "exclude_cidr_ranges", exclude_cidr_ranges)
+        if immutable is not None:
+            pulumi.set(__self__, "immutable", immutable)
         if ip_cidr_range is not None:
             pulumi.set(__self__, "ip_cidr_range", ip_cidr_range)
         if labels is not None:
@@ -397,6 +417,18 @@ class _InternalRangeState:
     def exclude_cidr_ranges(self, value: Optional[pulumi.Input[Sequence[pulumi.Input[builtins.str]]]]):
         pulumi.set(self, "exclude_cidr_ranges", value)
 
+    @property
+    @pulumi.getter
+    def immutable(self) -> Optional[pulumi.Input[builtins.bool]]:
+        """
+        Immutable ranges cannot have their fields modified, except for labels and description.
+        """
+        return pulumi.get(self, "immutable")
+
+    @immutable.setter
+    def immutable(self, value: Optional[pulumi.Input[builtins.bool]]):
+        pulumi.set(self, "immutable", value)
+
     @property
     @pulumi.getter(name="ipCidrRange")
     def ip_cidr_range(self) -> Optional[pulumi.Input[builtins.str]]:
@@ -582,6 +614,7 @@ class InternalRange(pulumi.CustomResource):
                  opts: Optional[pulumi.ResourceOptions] = None,
                  description: Optional[pulumi.Input[builtins.str]] = None,
                  exclude_cidr_ranges: Optional[pulumi.Input[Sequence[pulumi.Input[builtins.str]]]] = None,
+                 immutable: Optional[pulumi.Input[builtins.bool]] = None,
                  ip_cidr_range: Optional[pulumi.Input[builtins.str]] = None,
                  labels: Optional[pulumi.Input[Mapping[str, pulumi.Input[builtins.str]]]] = None,
                  migration: Optional[pulumi.Input[Union['InternalRangeMigrationArgs', 'InternalRangeMigrationArgsDict']]] = None,
@@ -742,6 +775,7 @@ class InternalRange(pulumi.CustomResource):
         :param pulumi.Input[builtins.str] description: An optional description of this resource.
         :param pulumi.Input[Sequence[pulumi.Input[builtins.str]]] exclude_cidr_ranges: Optional. List of IP CIDR ranges to be excluded. Resulting reserved Internal Range will not overlap with any CIDR blocks mentioned in this list.
                Only IPv4 CIDR ranges are supported.
+        :param pulumi.Input[builtins.bool] immutable: Immutable ranges cannot have their fields modified, except for labels and description.
         :param pulumi.Input[builtins.str] ip_cidr_range: The IP range that this internal range defines.
                NOTE: IPv6 ranges are limited to usage=EXTERNAL_TO_VPC and peering=FOR_SELF
                NOTE: For IPv6 Ranges this field is compulsory, i.e. the address range must be specified explicitly.
@@ -937,6 +971,7 @@ class InternalRange(pulumi.CustomResource):
                  opts: Optional[pulumi.ResourceOptions] = None,
                  description: Optional[pulumi.Input[builtins.str]] = None,
                  exclude_cidr_ranges: Optional[pulumi.Input[Sequence[pulumi.Input[builtins.str]]]] = None,
+                 immutable: Optional[pulumi.Input[builtins.bool]] = None,
                  ip_cidr_range: Optional[pulumi.Input[builtins.str]] = None,
                  labels: Optional[pulumi.Input[Mapping[str, pulumi.Input[builtins.str]]]] = None,
                  migration: Optional[pulumi.Input[Union['InternalRangeMigrationArgs', 'InternalRangeMigrationArgsDict']]] = None,
@@ -959,6 +994,7 @@ class InternalRange(pulumi.CustomResource):
 
             __props__.__dict__["description"] = description
             __props__.__dict__["exclude_cidr_ranges"] = exclude_cidr_ranges
+            __props__.__dict__["immutable"] = immutable
             __props__.__dict__["ip_cidr_range"] = ip_cidr_range
             __props__.__dict__["labels"] = labels
             __props__.__dict__["migration"] = migration
@@ -994,6 +1030,7 @@ class InternalRange(pulumi.CustomResource):
             description: Optional[pulumi.Input[builtins.str]] = None,
             effective_labels: Optional[pulumi.Input[Mapping[str, pulumi.Input[builtins.str]]]] = None,
             exclude_cidr_ranges: Optional[pulumi.Input[Sequence[pulumi.Input[builtins.str]]]] = None,
+            immutable: Optional[pulumi.Input[builtins.bool]] = None,
             ip_cidr_range: Optional[pulumi.Input[builtins.str]] = None,
             labels: Optional[pulumi.Input[Mapping[str, pulumi.Input[builtins.str]]]] = None,
             migration: Optional[pulumi.Input[Union['InternalRangeMigrationArgs', 'InternalRangeMigrationArgsDict']]] = None,
@@ -1018,6 +1055,7 @@ class InternalRange(pulumi.CustomResource):
         :param pulumi.Input[Mapping[str, pulumi.Input[builtins.str]]] effective_labels: All of labels (key/value pairs) present on the resource in GCP, including the labels configured through Pulumi, other clients and services.
         :param pulumi.Input[Sequence[pulumi.Input[builtins.str]]] exclude_cidr_ranges: Optional. List of IP CIDR ranges to be excluded. Resulting reserved Internal Range will not overlap with any CIDR blocks mentioned in this list.
                Only IPv4 CIDR ranges are supported.
+        :param pulumi.Input[builtins.bool] immutable: Immutable ranges cannot have their fields modified, except for labels and description.
         :param pulumi.Input[builtins.str] ip_cidr_range: The IP range that this internal range defines.
                NOTE: IPv6 ranges are limited to usage=EXTERNAL_TO_VPC and peering=FOR_SELF
                NOTE: For IPv6 Ranges this field is compulsory, i.e. the address range must be specified explicitly.
@@ -1059,6 +1097,7 @@ class InternalRange(pulumi.CustomResource):
         __props__.__dict__["description"] = description
         __props__.__dict__["effective_labels"] = effective_labels
         __props__.__dict__["exclude_cidr_ranges"] = exclude_cidr_ranges
+        __props__.__dict__["immutable"] = immutable
         __props__.__dict__["ip_cidr_range"] = ip_cidr_range
         __props__.__dict__["labels"] = labels
         __props__.__dict__["migration"] = migration
@@ -1099,6 +1138,14 @@ class InternalRange(pulumi.CustomResource):
         """
         return pulumi.get(self, "exclude_cidr_ranges")
 
+    @property
+    @pulumi.getter
+    def immutable(self) -> pulumi.Output[Optional[builtins.bool]]:
+        """
+        Immutable ranges cannot have their fields modified, except for labels and description.
+        """
+        return pulumi.get(self, "immutable")
+
     @property
     @pulumi.getter(name="ipCidrRange")
     def ip_cidr_range(self) -> pulumi.Output[builtins.str]:

pulumi_gcp/networkconnectivity/regional_endpoint.py

@@ -38,7 +38,7 @@ class RegionalEndpointArgs:
                
                
                - - -
-        :param pulumi.Input[builtins.str] target_google_api: The service endpoint this private regional endpoint connects to. Format: `{apiname}.{region}.p.rep.googleapis.com` Example: \\"cloudkms.us-central1.p.rep.googleapis.com\\".
+        :param pulumi.Input[builtins.str] target_google_api: The service endpoint this private regional endpoint connects to. Format: `{apiname}.{region}.rep.googleapis.com` Example: \\"cloudkms.us-central1.rep.googleapis.com\\".
         :param pulumi.Input[builtins.str] address: The IP Address of the Regional Endpoint. When no address is provided, an IP from the subnetwork is allocated. Use one of the following formats: * IPv4 address as in `10.0.0.1` * Address resource URI as in `projects/{project}/regions/{region}/addresses/{address_name}`
                > **Note:** This field accepts both a reference to a Compute Address resource, which is the resource name of which format is given in the description, and IP literal value. If the user chooses to input a reserved address value; they need to make sure that the reserved address is in IPv4 version, its purpose is GCE_ENDPOINT, its type is INTERNAL and its status is RESERVED. If the user chooses to input an IP literal, they need to make sure that it's a valid IPv4 address (x.x.x.x) within the subnetwork.
         :param pulumi.Input[builtins.str] description: A description of this resource.
@@ -102,7 +102,7 @@ class RegionalEndpointArgs:
     @pulumi.getter(name="targetGoogleApi")
     def target_google_api(self) -> pulumi.Input[builtins.str]:
         """
-        The service endpoint this private regional endpoint connects to. Format: `{apiname}.{region}.p.rep.googleapis.com` Example: \\"cloudkms.us-central1.p.rep.googleapis.com\\".
+        The service endpoint this private regional endpoint connects to. Format: `{apiname}.{region}.rep.googleapis.com` Example: \\"cloudkms.us-central1.rep.googleapis.com\\".
         """
         return pulumi.get(self, "target_google_api")
 
@@ -243,7 +243,7 @@ class _RegionalEndpointState:
         :param pulumi.Input[Mapping[str, pulumi.Input[builtins.str]]] pulumi_labels: The combination of labels configured directly on the resource
                and default labels configured on the provider.
         :param pulumi.Input[builtins.str] subnetwork: The name of the subnetwork from which the IP address will be allocated. Format: `projects/{project}/regions/{region}/subnetworks/{subnetwork}`
-        :param pulumi.Input[builtins.str] target_google_api: The service endpoint this private regional endpoint connects to. Format: `{apiname}.{region}.p.rep.googleapis.com` Example: \\"cloudkms.us-central1.p.rep.googleapis.com\\".
+        :param pulumi.Input[builtins.str] target_google_api: The service endpoint this private regional endpoint connects to. Format: `{apiname}.{region}.rep.googleapis.com` Example: \\"cloudkms.us-central1.rep.googleapis.com\\".
         :param pulumi.Input[builtins.str] update_time: Time when the RegionalEndpoint was updated.
         """
         if access_type is not None:
@@ -447,7 +447,7 @@ class _RegionalEndpointState:
     @pulumi.getter(name="targetGoogleApi")
     def target_google_api(self) -> Optional[pulumi.Input[builtins.str]]:
         """
-        The service endpoint this private regional endpoint connects to. Format: `{apiname}.{region}.p.rep.googleapis.com` Example: \\"cloudkms.us-central1.p.rep.googleapis.com\\".
+        The service endpoint this private regional endpoint connects to. Format: `{apiname}.{region}.rep.googleapis.com` Example: \\"cloudkms.us-central1.rep.googleapis.com\\".
         """
         return pulumi.get(self, "target_google_api")
 
@@ -513,12 +513,12 @@ class RegionalEndpoint(pulumi.CustomResource):
         default = gcp.networkconnectivity.RegionalEndpoint("default",
             name="my-rep",
             location="us-central1",
-            target_google_api="storage.us-central1.p.rep.googleapis.com",
+            target_google_api="storage.us-central1.rep.googleapis.com",
             access_type="REGIONAL",
             address="192.168.0.5",
             network=my_network.id,
             subnetwork=my_subnetwork.id,
-            description="My RegionalEndpoint targeting Google API storage.us-central1.p.rep.googleapis.com",
+            description="My RegionalEndpoint targeting Google API storage.us-central1.rep.googleapis.com",
             labels={
                 "env": "default",
             })
@@ -540,7 +540,7 @@ class RegionalEndpoint(pulumi.CustomResource):
         default = gcp.networkconnectivity.RegionalEndpoint("default",
             name="my-rep",
             location="us-central1",
-            target_google_api="storage.us-central1.p.rep.googleapis.com",
+            target_google_api="storage.us-central1.rep.googleapis.com",
             access_type="GLOBAL",
             address="192.168.0.4",
             network=my_network.id,
@@ -591,7 +591,7 @@ class RegionalEndpoint(pulumi.CustomResource):
         :param pulumi.Input[builtins.str] project: The ID of the project in which the resource belongs.
                If it is not provided, the provider project is used.
         :param pulumi.Input[builtins.str] subnetwork: The name of the subnetwork from which the IP address will be allocated. Format: `projects/{project}/regions/{region}/subnetworks/{subnetwork}`
-        :param pulumi.Input[builtins.str] target_google_api: The service endpoint this private regional endpoint connects to. Format: `{apiname}.{region}.p.rep.googleapis.com` Example: \\"cloudkms.us-central1.p.rep.googleapis.com\\".
+        :param pulumi.Input[builtins.str] target_google_api: The service endpoint this private regional endpoint connects to. Format: `{apiname}.{region}.rep.googleapis.com` Example: \\"cloudkms.us-central1.rep.googleapis.com\\".
         """
         ...
     @overload
@@ -627,12 +627,12 @@ class RegionalEndpoint(pulumi.CustomResource):
         default = gcp.networkconnectivity.RegionalEndpoint("default",
             name="my-rep",
             location="us-central1",
-            target_google_api="storage.us-central1.p.rep.googleapis.com",
+            target_google_api="storage.us-central1.rep.googleapis.com",
             access_type="REGIONAL",
             address="192.168.0.5",
             network=my_network.id,
             subnetwork=my_subnetwork.id,
-            description="My RegionalEndpoint targeting Google API storage.us-central1.p.rep.googleapis.com",
+            description="My RegionalEndpoint targeting Google API storage.us-central1.rep.googleapis.com",
             labels={
                 "env": "default",
             })
@@ -654,7 +654,7 @@ class RegionalEndpoint(pulumi.CustomResource):
         default = gcp.networkconnectivity.RegionalEndpoint("default",
             name="my-rep",
             location="us-central1",
-            target_google_api="storage.us-central1.p.rep.googleapis.com",
+            target_google_api="storage.us-central1.rep.googleapis.com",
             access_type="GLOBAL",
             address="192.168.0.4",
             network=my_network.id,
@@ -797,7 +797,7 @@ class RegionalEndpoint(pulumi.CustomResource):
         :param pulumi.Input[Mapping[str, pulumi.Input[builtins.str]]] pulumi_labels: The combination of labels configured directly on the resource
                and default labels configured on the provider.
         :param pulumi.Input[builtins.str] subnetwork: The name of the subnetwork from which the IP address will be allocated. Format: `projects/{project}/regions/{region}/subnetworks/{subnetwork}`
-        :param pulumi.Input[builtins.str] target_google_api: The service endpoint this private regional endpoint connects to. Format: `{apiname}.{region}.p.rep.googleapis.com` Example: \\"cloudkms.us-central1.p.rep.googleapis.com\\".
+        :param pulumi.Input[builtins.str] target_google_api: The service endpoint this private regional endpoint connects to. Format: `{apiname}.{region}.rep.googleapis.com` Example: \\"cloudkms.us-central1.rep.googleapis.com\\".
         :param pulumi.Input[builtins.str] update_time: Time when the RegionalEndpoint was updated.
         """
         opts = pulumi.ResourceOptions.merge(opts, pulumi.ResourceOptions(id=id))
@@ -939,7 +939,7 @@ class RegionalEndpoint(pulumi.CustomResource):
     @pulumi.getter(name="targetGoogleApi")
     def target_google_api(self) -> pulumi.Output[builtins.str]:
         """
-        The service endpoint this private regional endpoint connects to. Format: `{apiname}.{region}.p.rep.googleapis.com` Example: \\"cloudkms.us-central1.p.rep.googleapis.com\\".
+        The service endpoint this private regional endpoint connects to. Format: `{apiname}.{region}.rep.googleapis.com` Example: \\"cloudkms.us-central1.rep.googleapis.com\\".
         """
         return pulumi.get(self, "target_google_api")
 

pulumi_gcp/networksecurity/intercept_deployment.py

@@ -460,6 +460,11 @@ class InterceptDeployment(pulumi.CustomResource):
                  project: Optional[pulumi.Input[builtins.str]] = None,
                  __props__=None):
         """
+        A deployment represents a zonal intercept backend ready to accept
+        GENEVE-encapsulated traffic, e.g. a zonal instance group fronted by an
+        internal passthrough load balancer. Deployments are always part of a
+        global deployment group which represents a global intercept service.
+
         ## Example Usage
 
         ### Network Security Intercept Deployment Basic
@@ -565,6 +570,11 @@ class InterceptDeployment(pulumi.CustomResource):
                  args: InterceptDeploymentArgs,
                  opts: Optional[pulumi.ResourceOptions] = None):
         """
+        A deployment represents a zonal intercept backend ready to accept
+        GENEVE-encapsulated traffic, e.g. a zonal instance group fronted by an
+        internal passthrough load balancer. Deployments are always part of a
+        global deployment group which represents a global intercept service.
+
         ## Example Usage
 
         ### Network Security Intercept Deployment Basic

pulumi_gcp/networksecurity/intercept_deployment_group.py

@@ -454,6 +454,10 @@ class InterceptDeploymentGroup(pulumi.CustomResource):
                  project: Optional[pulumi.Input[builtins.str]] = None,
                  __props__=None):
         """
+        A deployment group aggregates many zonal intercept backends (deployments)
+        into a single global intercept service. Consumers can connect this service
+        using an endpoint group.
+
         ## Example Usage
 
         ### Network Security Intercept Deployment Group Basic
@@ -525,6 +529,10 @@ class InterceptDeploymentGroup(pulumi.CustomResource):
                  args: InterceptDeploymentGroupArgs,
                  opts: Optional[pulumi.ResourceOptions] = None):
         """
+        A deployment group aggregates many zonal intercept backends (deployments)
+        into a single global intercept service. Consumers can connect this service
+        using an endpoint group.
+
         ## Example Usage
 
         ### Network Security Intercept Deployment Group Basic

pulumi_gcp/networksecurity/intercept_endpoint_group.py

@@ -454,6 +454,12 @@ class InterceptEndpointGroup(pulumi.CustomResource):
                  project: Optional[pulumi.Input[builtins.str]] = None,
                  __props__=None):
         """
+        An endpoint group is a consumer frontend for a deployment group (backend).
+        In order to configure intercept for a network, consumers must create:
+        - An association between their network and the endpoint group.
+        - A security profile that points to the endpoint group.
+        - A firewall rule that references the security profile (group).
+
         ## Example Usage
 
         ### Network Security Intercept Endpoint Group Basic
@@ -529,6 +535,12 @@ class InterceptEndpointGroup(pulumi.CustomResource):
                  args: InterceptEndpointGroupArgs,
                  opts: Optional[pulumi.ResourceOptions] = None):
         """
+        An endpoint group is a consumer frontend for a deployment group (backend).
+        In order to configure intercept for a network, consumers must create:
+        - An association between their network and the endpoint group.
+        - A security profile that points to the endpoint group.
+        - A firewall rule that references the security profile (group).
+
         ## Example Usage
 
         ### Network Security Intercept Endpoint Group Basic

pulumi_gcp/networksecurity/intercept_endpoint_group_association.py

@@ -472,6 +472,14 @@ class InterceptEndpointGroupAssociation(pulumi.CustomResource):
                  project: Optional[pulumi.Input[builtins.str]] = None,
                  __props__=None):
         """
+        An endpoint group association represents a link between a network and an
+        endpoint group in the organization.
+
+        Creating an association creates the networking infrastructure linking the
+        network to the endpoint group, but does not enable intercept by itself.
+        To enable intercept, the user must also create a network firewall policy
+        containing intercept rules and associate it with the network.
+
         ## Example Usage
 
         ### Network Security Intercept Endpoint Group Association Basic
@@ -556,6 +564,14 @@ class InterceptEndpointGroupAssociation(pulumi.CustomResource):
                  args: InterceptEndpointGroupAssociationInitArgs,
                  opts: Optional[pulumi.ResourceOptions] = None):
         """
+        An endpoint group association represents a link between a network and an
+        endpoint group in the organization.
+
+        Creating an association creates the networking infrastructure linking the
+        network to the endpoint group, but does not enable intercept by itself.
+        To enable intercept, the user must also create a network firewall policy
+        containing intercept rules and associate it with the network.
+
         ## Example Usage
 
         ### Network Security Intercept Endpoint Group Association Basic

pulumi_gcp/networkservices/_inputs.py

@@ -22,6 +22,8 @@ __all__ = [
     'EdgeCacheKeysetValidationSharedKeyArgsDict',
     'EdgeCacheOriginAwsV4AuthenticationArgs',
     'EdgeCacheOriginAwsV4AuthenticationArgsDict',
+    'EdgeCacheOriginFlexShieldingArgs',
+    'EdgeCacheOriginFlexShieldingArgsDict',
     'EdgeCacheOriginOriginOverrideActionArgs',
     'EdgeCacheOriginOriginOverrideActionArgsDict',
     'EdgeCacheOriginOriginOverrideActionHeaderActionArgs',
@@ -382,6 +384,47 @@ class EdgeCacheOriginAwsV4AuthenticationArgs:
         pulumi.set(self, "secret_access_key_version", value)
 
 
+if not MYPY:
+    class EdgeCacheOriginFlexShieldingArgsDict(TypedDict):
+        flex_shielding_regions: NotRequired[pulumi.Input[builtins.str]]
+        """
+        Whenever possible, content will be fetched from origin and cached in or
+        near the specified origin. Best effort.
+        You must specify exactly one FlexShieldingRegion.
+        Each value may be one of: `AFRICA_SOUTH1`, `ME_CENTRAL1`.
+        """
+elif False:
+    EdgeCacheOriginFlexShieldingArgsDict: TypeAlias = Mapping[str, Any]
+
+@pulumi.input_type
+class EdgeCacheOriginFlexShieldingArgs:
+    def __init__(__self__, *,
+                 flex_shielding_regions: Optional[pulumi.Input[builtins.str]] = None):
+        """
+        :param pulumi.Input[builtins.str] flex_shielding_regions: Whenever possible, content will be fetched from origin and cached in or
+               near the specified origin. Best effort.
+               You must specify exactly one FlexShieldingRegion.
+               Each value may be one of: `AFRICA_SOUTH1`, `ME_CENTRAL1`.
+        """
+        if flex_shielding_regions is not None:
+            pulumi.set(__self__, "flex_shielding_regions", flex_shielding_regions)
+
+    @property
+    @pulumi.getter(name="flexShieldingRegions")
+    def flex_shielding_regions(self) -> Optional[pulumi.Input[builtins.str]]:
+        """
+        Whenever possible, content will be fetched from origin and cached in or
+        near the specified origin. Best effort.
+        You must specify exactly one FlexShieldingRegion.
+        Each value may be one of: `AFRICA_SOUTH1`, `ME_CENTRAL1`.
+        """
+        return pulumi.get(self, "flex_shielding_regions")
+
+    @flex_shielding_regions.setter
+    def flex_shielding_regions(self, value: Optional[pulumi.Input[builtins.str]]):
+        pulumi.set(self, "flex_shielding_regions", value)
+
+
 if not MYPY:
     class EdgeCacheOriginOriginOverrideActionArgsDict(TypedDict):
         header_action: NotRequired[pulumi.Input['EdgeCacheOriginOriginOverrideActionHeaderActionArgsDict']]

pulumi_gcp/networkservices/edge_cache_origin.py

@@ -26,6 +26,7 @@ class EdgeCacheOriginArgs:
                  aws_v4_authentication: Optional[pulumi.Input['EdgeCacheOriginAwsV4AuthenticationArgs']] = None,
                  description: Optional[pulumi.Input[builtins.str]] = None,
                  failover_origin: Optional[pulumi.Input[builtins.str]] = None,
+                 flex_shielding: Optional[pulumi.Input['EdgeCacheOriginFlexShieldingArgs']] = None,
                  labels: Optional[pulumi.Input[Mapping[str, pulumi.Input[builtins.str]]]] = None,
                  max_attempts: Optional[pulumi.Input[builtins.int]] = None,
                  name: Optional[pulumi.Input[builtins.str]] = None,
@@ -49,6 +50,9 @@ class EdgeCacheOriginArgs:
                After maxAttempts is reached, the configured failoverOrigin will be used to fulfil the request.
                The value of timeout.maxAttemptsTimeout dictates the timeout across all origins.
                A reference to a Topic resource.
+        :param pulumi.Input['EdgeCacheOriginFlexShieldingArgs'] flex_shielding: The FlexShieldingOptions to be used for all routes to this origin.
+               If not set, defaults to a global caching layer in front of the origin.
+               Structure is documented below.
         :param pulumi.Input[Mapping[str, pulumi.Input[builtins.str]]] labels: Set of label tags associated with the EdgeCache resource.
                **Note**: This field is non-authoritative, and will only manage the labels present in your configuration.
                Please refer to the field `effective_labels` for all of the labels present on the resource.
@@ -102,6 +106,8 @@ class EdgeCacheOriginArgs:
             pulumi.set(__self__, "description", description)
         if failover_origin is not None:
             pulumi.set(__self__, "failover_origin", failover_origin)
+        if flex_shielding is not None:
+            pulumi.set(__self__, "flex_shielding", flex_shielding)
         if labels is not None:
             pulumi.set(__self__, "labels", labels)
         if max_attempts is not None:
@@ -178,6 +184,20 @@ class EdgeCacheOriginArgs:
     def failover_origin(self, value: Optional[pulumi.Input[builtins.str]]):
         pulumi.set(self, "failover_origin", value)
 
+    @property
+    @pulumi.getter(name="flexShielding")
+    def flex_shielding(self) -> Optional[pulumi.Input['EdgeCacheOriginFlexShieldingArgs']]:
+        """
+        The FlexShieldingOptions to be used for all routes to this origin.
+        If not set, defaults to a global caching layer in front of the origin.
+        Structure is documented below.
+        """
+        return pulumi.get(self, "flex_shielding")
+
+    @flex_shielding.setter
+    def flex_shielding(self, value: Optional[pulumi.Input['EdgeCacheOriginFlexShieldingArgs']]):
+        pulumi.set(self, "flex_shielding", value)
+
     @property
     @pulumi.getter
     def labels(self) -> Optional[pulumi.Input[Mapping[str, pulumi.Input[builtins.str]]]]:
@@ -341,6 +361,7 @@ class _EdgeCacheOriginState:
                  description: Optional[pulumi.Input[builtins.str]] = None,
                  effective_labels: Optional[pulumi.Input[Mapping[str, pulumi.Input[builtins.str]]]] = None,
                  failover_origin: Optional[pulumi.Input[builtins.str]] = None,
+                 flex_shielding: Optional[pulumi.Input['EdgeCacheOriginFlexShieldingArgs']] = None,
                  labels: Optional[pulumi.Input[Mapping[str, pulumi.Input[builtins.str]]]] = None,
                  max_attempts: Optional[pulumi.Input[builtins.int]] = None,
                  name: Optional[pulumi.Input[builtins.str]] = None,
@@ -363,6 +384,9 @@ class _EdgeCacheOriginState:
                After maxAttempts is reached, the configured failoverOrigin will be used to fulfil the request.
                The value of timeout.maxAttemptsTimeout dictates the timeout across all origins.
                A reference to a Topic resource.
+        :param pulumi.Input['EdgeCacheOriginFlexShieldingArgs'] flex_shielding: The FlexShieldingOptions to be used for all routes to this origin.
+               If not set, defaults to a global caching layer in front of the origin.
+               Structure is documented below.
         :param pulumi.Input[Mapping[str, pulumi.Input[builtins.str]]] labels: Set of label tags associated with the EdgeCache resource.
                **Note**: This field is non-authoritative, and will only manage the labels present in your configuration.
                Please refer to the field `effective_labels` for all of the labels present on the resource.
@@ -423,6 +447,8 @@ class _EdgeCacheOriginState:
             pulumi.set(__self__, "effective_labels", effective_labels)
         if failover_origin is not None:
             pulumi.set(__self__, "failover_origin", failover_origin)
+        if flex_shielding is not None:
+            pulumi.set(__self__, "flex_shielding", flex_shielding)
         if labels is not None:
             pulumi.set(__self__, "labels", labels)
         if max_attempts is not None:
@@ -500,6 +526,20 @@ class _EdgeCacheOriginState:
     def failover_origin(self, value: Optional[pulumi.Input[builtins.str]]):
         pulumi.set(self, "failover_origin", value)
 
+    @property
+    @pulumi.getter(name="flexShielding")
+    def flex_shielding(self) -> Optional[pulumi.Input['EdgeCacheOriginFlexShieldingArgs']]:
+        """
+        The FlexShieldingOptions to be used for all routes to this origin.
+        If not set, defaults to a global caching layer in front of the origin.
+        Structure is documented below.
+        """
+        return pulumi.get(self, "flex_shielding")
+
+    @flex_shielding.setter
+    def flex_shielding(self, value: Optional[pulumi.Input['EdgeCacheOriginFlexShieldingArgs']]):
+        pulumi.set(self, "flex_shielding", value)
+
     @property
     @pulumi.getter
     def labels(self) -> Optional[pulumi.Input[Mapping[str, pulumi.Input[builtins.str]]]]:
@@ -693,6 +733,7 @@ class EdgeCacheOrigin(pulumi.CustomResource):
                  aws_v4_authentication: Optional[pulumi.Input[Union['EdgeCacheOriginAwsV4AuthenticationArgs', 'EdgeCacheOriginAwsV4AuthenticationArgsDict']]] = None,
                  description: Optional[pulumi.Input[builtins.str]] = None,
                  failover_origin: Optional[pulumi.Input[builtins.str]] = None,
+                 flex_shielding: Optional[pulumi.Input[Union['EdgeCacheOriginFlexShieldingArgs', 'EdgeCacheOriginFlexShieldingArgsDict']]] = None,
                  labels: Optional[pulumi.Input[Mapping[str, pulumi.Input[builtins.str]]]] = None,
                  max_attempts: Optional[pulumi.Input[builtins.int]] = None,
                  name: Optional[pulumi.Input[builtins.str]] = None,
@@ -842,6 +883,9 @@ class EdgeCacheOrigin(pulumi.CustomResource):
                After maxAttempts is reached, the configured failoverOrigin will be used to fulfil the request.
                The value of timeout.maxAttemptsTimeout dictates the timeout across all origins.
                A reference to a Topic resource.
+        :param pulumi.Input[Union['EdgeCacheOriginFlexShieldingArgs', 'EdgeCacheOriginFlexShieldingArgsDict']] flex_shielding: The FlexShieldingOptions to be used for all routes to this origin.
+               If not set, defaults to a global caching layer in front of the origin.
+               Structure is documented below.
         :param pulumi.Input[Mapping[str, pulumi.Input[builtins.str]]] labels: Set of label tags associated with the EdgeCache resource.
                **Note**: This field is non-authoritative, and will only manage the labels present in your configuration.
                Please refer to the field `effective_labels` for all of the labels present on the resource.
@@ -1044,6 +1088,7 @@ class EdgeCacheOrigin(pulumi.CustomResource):
                  aws_v4_authentication: Optional[pulumi.Input[Union['EdgeCacheOriginAwsV4AuthenticationArgs', 'EdgeCacheOriginAwsV4AuthenticationArgsDict']]] = None,
                  description: Optional[pulumi.Input[builtins.str]] = None,
                  failover_origin: Optional[pulumi.Input[builtins.str]] = None,
+                 flex_shielding: Optional[pulumi.Input[Union['EdgeCacheOriginFlexShieldingArgs', 'EdgeCacheOriginFlexShieldingArgsDict']]] = None,
                  labels: Optional[pulumi.Input[Mapping[str, pulumi.Input[builtins.str]]]] = None,
                  max_attempts: Optional[pulumi.Input[builtins.int]] = None,
                  name: Optional[pulumi.Input[builtins.str]] = None,
@@ -1067,6 +1112,7 @@ class EdgeCacheOrigin(pulumi.CustomResource):
             __props__.__dict__["aws_v4_authentication"] = aws_v4_authentication
             __props__.__dict__["description"] = description
             __props__.__dict__["failover_origin"] = failover_origin
+            __props__.__dict__["flex_shielding"] = flex_shielding
             __props__.__dict__["labels"] = labels
             __props__.__dict__["max_attempts"] = max_attempts
             __props__.__dict__["name"] = name
@@ -1098,6 +1144,7 @@ class EdgeCacheOrigin(pulumi.CustomResource):
             description: Optional[pulumi.Input[builtins.str]] = None,
             effective_labels: Optional[pulumi.Input[Mapping[str, pulumi.Input[builtins.str]]]] = None,
             failover_origin: Optional[pulumi.Input[builtins.str]] = None,
+            flex_shielding: Optional[pulumi.Input[Union['EdgeCacheOriginFlexShieldingArgs', 'EdgeCacheOriginFlexShieldingArgsDict']]] = None,
             labels: Optional[pulumi.Input[Mapping[str, pulumi.Input[builtins.str]]]] = None,
             max_attempts: Optional[pulumi.Input[builtins.int]] = None,
             name: Optional[pulumi.Input[builtins.str]] = None,
@@ -1125,6 +1172,9 @@ class EdgeCacheOrigin(pulumi.CustomResource):
                After maxAttempts is reached, the configured failoverOrigin will be used to fulfil the request.
                The value of timeout.maxAttemptsTimeout dictates the timeout across all origins.
                A reference to a Topic resource.
+        :param pulumi.Input[Union['EdgeCacheOriginFlexShieldingArgs', 'EdgeCacheOriginFlexShieldingArgsDict']] flex_shielding: The FlexShieldingOptions to be used for all routes to this origin.
+               If not set, defaults to a global caching layer in front of the origin.
+               Structure is documented below.
         :param pulumi.Input[Mapping[str, pulumi.Input[builtins.str]]] labels: Set of label tags associated with the EdgeCache resource.
                **Note**: This field is non-authoritative, and will only manage the labels present in your configuration.
                Please refer to the field `effective_labels` for all of the labels present on the resource.
@@ -1185,6 +1235,7 @@ class EdgeCacheOrigin(pulumi.CustomResource):
         __props__.__dict__["description"] = description
         __props__.__dict__["effective_labels"] = effective_labels
         __props__.__dict__["failover_origin"] = failover_origin
+        __props__.__dict__["flex_shielding"] = flex_shielding
         __props__.__dict__["labels"] = labels
         __props__.__dict__["max_attempts"] = max_attempts
         __props__.__dict__["name"] = name
@@ -1235,6 +1286,16 @@ class EdgeCacheOrigin(pulumi.CustomResource):
         """
         return pulumi.get(self, "failover_origin")
 
+    @property
+    @pulumi.getter(name="flexShielding")
+    def flex_shielding(self) -> pulumi.Output[Optional['outputs.EdgeCacheOriginFlexShielding']]:
+        """
+        The FlexShieldingOptions to be used for all routes to this origin.
+        If not set, defaults to a global caching layer in front of the origin.
+        Structure is documented below.
+        """
+        return pulumi.get(self, "flex_shielding")
+
     @property
     @pulumi.getter
     def labels(self) -> pulumi.Output[Optional[Mapping[str, builtins.str]]]: