pulumi-gcp 8.33.0a1749001887__py3-none-any.whl → 8.34.0__py3-none-any.whl

pulumi_gcp/netapp/backup_vault.py

@@ -14,6 +14,8 @@ if sys.version_info >= (3, 11):
 else:
     from typing_extensions import NotRequired, TypedDict, TypeAlias
 from .. import _utilities
+from . import outputs
+from ._inputs import *
 
 __all__ = ['BackupVaultArgs', 'BackupVault']
 
@@ -22,6 +24,7 @@ class BackupVaultArgs:
     def __init__(__self__, *,
                  location: pulumi.Input[builtins.str],
                  backup_region: Optional[pulumi.Input[builtins.str]] = None,
+                 backup_retention_policy: Optional[pulumi.Input['BackupVaultBackupRetentionPolicyArgs']] = None,
                  backup_vault_type: Optional[pulumi.Input[builtins.str]] = None,
                  description: Optional[pulumi.Input[builtins.str]] = None,
                  labels: Optional[pulumi.Input[Mapping[str, pulumi.Input[builtins.str]]]] = None,
@@ -31,6 +34,8 @@ class BackupVaultArgs:
         The set of arguments for constructing a BackupVault resource.
         :param pulumi.Input[builtins.str] location: Location (region) of the backup vault.
         :param pulumi.Input[builtins.str] backup_region: Region in which backup is stored.
+        :param pulumi.Input['BackupVaultBackupRetentionPolicyArgs'] backup_retention_policy: Backup retention policy defining the retention of the backups.
+               Structure is documented below.
         :param pulumi.Input[builtins.str] backup_vault_type: Type of the backup vault to be created. Default is IN_REGION.
                Possible values are: `BACKUP_VAULT_TYPE_UNSPECIFIED`, `IN_REGION`, `CROSS_REGION`.
         :param pulumi.Input[builtins.str] description: An optional description of this resource.
@@ -48,6 +53,8 @@ class BackupVaultArgs:
         pulumi.set(__self__, "location", location)
         if backup_region is not None:
             pulumi.set(__self__, "backup_region", backup_region)
+        if backup_retention_policy is not None:
+            pulumi.set(__self__, "backup_retention_policy", backup_retention_policy)
         if backup_vault_type is not None:
             pulumi.set(__self__, "backup_vault_type", backup_vault_type)
         if description is not None:
@@ -83,6 +90,19 @@ class BackupVaultArgs:
     def backup_region(self, value: Optional[pulumi.Input[builtins.str]]):
         pulumi.set(self, "backup_region", value)
 
+    @property
+    @pulumi.getter(name="backupRetentionPolicy")
+    def backup_retention_policy(self) -> Optional[pulumi.Input['BackupVaultBackupRetentionPolicyArgs']]:
+        """
+        Backup retention policy defining the retention of the backups.
+        Structure is documented below.
+        """
+        return pulumi.get(self, "backup_retention_policy")
+
+    @backup_retention_policy.setter
+    def backup_retention_policy(self, value: Optional[pulumi.Input['BackupVaultBackupRetentionPolicyArgs']]):
+        pulumi.set(self, "backup_retention_policy", value)
+
     @property
     @pulumi.getter(name="backupVaultType")
     def backup_vault_type(self) -> Optional[pulumi.Input[builtins.str]]:
@@ -156,6 +176,7 @@ class BackupVaultArgs:
 class _BackupVaultState:
     def __init__(__self__, *,
                  backup_region: Optional[pulumi.Input[builtins.str]] = None,
+                 backup_retention_policy: Optional[pulumi.Input['BackupVaultBackupRetentionPolicyArgs']] = None,
                  backup_vault_type: Optional[pulumi.Input[builtins.str]] = None,
                  create_time: Optional[pulumi.Input[builtins.str]] = None,
                  description: Optional[pulumi.Input[builtins.str]] = None,
@@ -172,6 +193,8 @@ class _BackupVaultState:
         """
         Input properties used for looking up and filtering BackupVault resources.
         :param pulumi.Input[builtins.str] backup_region: Region in which backup is stored.
+        :param pulumi.Input['BackupVaultBackupRetentionPolicyArgs'] backup_retention_policy: Backup retention policy defining the retention of the backups.
+               Structure is documented below.
         :param pulumi.Input[builtins.str] backup_vault_type: Type of the backup vault to be created. Default is IN_REGION.
                Possible values are: `BACKUP_VAULT_TYPE_UNSPECIFIED`, `IN_REGION`, `CROSS_REGION`.
         :param pulumi.Input[builtins.str] create_time: Create time of the backup vault. A timestamp in RFC3339 UTC "Zulu" format. Examples: "2023-06-22T09:13:01.617Z".
@@ -197,6 +220,8 @@ class _BackupVaultState:
         """
         if backup_region is not None:
             pulumi.set(__self__, "backup_region", backup_region)
+        if backup_retention_policy is not None:
+            pulumi.set(__self__, "backup_retention_policy", backup_retention_policy)
         if backup_vault_type is not None:
             pulumi.set(__self__, "backup_vault_type", backup_vault_type)
         if create_time is not None:
@@ -236,6 +261,19 @@ class _BackupVaultState:
     def backup_region(self, value: Optional[pulumi.Input[builtins.str]]):
         pulumi.set(self, "backup_region", value)
 
+    @property
+    @pulumi.getter(name="backupRetentionPolicy")
+    def backup_retention_policy(self) -> Optional[pulumi.Input['BackupVaultBackupRetentionPolicyArgs']]:
+        """
+        Backup retention policy defining the retention of the backups.
+        Structure is documented below.
+        """
+        return pulumi.get(self, "backup_retention_policy")
+
+    @backup_retention_policy.setter
+    def backup_retention_policy(self, value: Optional[pulumi.Input['BackupVaultBackupRetentionPolicyArgs']]):
+        pulumi.set(self, "backup_retention_policy", value)
+
     @property
     @pulumi.getter(name="backupVaultType")
     def backup_vault_type(self) -> Optional[pulumi.Input[builtins.str]]:
@@ -409,6 +447,7 @@ class BackupVault(pulumi.CustomResource):
                  resource_name: str,
                  opts: Optional[pulumi.ResourceOptions] = None,
                  backup_region: Optional[pulumi.Input[builtins.str]] = None,
+                 backup_retention_policy: Optional[pulumi.Input[Union['BackupVaultBackupRetentionPolicyArgs', 'BackupVaultBackupRetentionPolicyArgsDict']]] = None,
                  backup_vault_type: Optional[pulumi.Input[builtins.str]] = None,
                  description: Optional[pulumi.Input[builtins.str]] = None,
                  labels: Optional[pulumi.Input[Mapping[str, pulumi.Input[builtins.str]]]] = None,
@@ -470,6 +509,8 @@ class BackupVault(pulumi.CustomResource):
         :param str resource_name: The name of the resource.
         :param pulumi.ResourceOptions opts: Options for the resource.
         :param pulumi.Input[builtins.str] backup_region: Region in which backup is stored.
+        :param pulumi.Input[Union['BackupVaultBackupRetentionPolicyArgs', 'BackupVaultBackupRetentionPolicyArgsDict']] backup_retention_policy: Backup retention policy defining the retention of the backups.
+               Structure is documented below.
         :param pulumi.Input[builtins.str] backup_vault_type: Type of the backup vault to be created. Default is IN_REGION.
                Possible values are: `BACKUP_VAULT_TYPE_UNSPECIFIED`, `IN_REGION`, `CROSS_REGION`.
         :param pulumi.Input[builtins.str] description: An optional description of this resource.
@@ -558,6 +599,7 @@ class BackupVault(pulumi.CustomResource):
                  resource_name: str,
                  opts: Optional[pulumi.ResourceOptions] = None,
                  backup_region: Optional[pulumi.Input[builtins.str]] = None,
+                 backup_retention_policy: Optional[pulumi.Input[Union['BackupVaultBackupRetentionPolicyArgs', 'BackupVaultBackupRetentionPolicyArgsDict']]] = None,
                  backup_vault_type: Optional[pulumi.Input[builtins.str]] = None,
                  description: Optional[pulumi.Input[builtins.str]] = None,
                  labels: Optional[pulumi.Input[Mapping[str, pulumi.Input[builtins.str]]]] = None,
@@ -574,6 +616,7 @@ class BackupVault(pulumi.CustomResource):
             __props__ = BackupVaultArgs.__new__(BackupVaultArgs)
 
             __props__.__dict__["backup_region"] = backup_region
+            __props__.__dict__["backup_retention_policy"] = backup_retention_policy
             __props__.__dict__["backup_vault_type"] = backup_vault_type
             __props__.__dict__["description"] = description
             __props__.__dict__["labels"] = labels
@@ -602,6 +645,7 @@ class BackupVault(pulumi.CustomResource):
             id: pulumi.Input[str],
             opts: Optional[pulumi.ResourceOptions] = None,
             backup_region: Optional[pulumi.Input[builtins.str]] = None,
+            backup_retention_policy: Optional[pulumi.Input[Union['BackupVaultBackupRetentionPolicyArgs', 'BackupVaultBackupRetentionPolicyArgsDict']]] = None,
             backup_vault_type: Optional[pulumi.Input[builtins.str]] = None,
             create_time: Optional[pulumi.Input[builtins.str]] = None,
             description: Optional[pulumi.Input[builtins.str]] = None,
@@ -623,6 +667,8 @@ class BackupVault(pulumi.CustomResource):
         :param pulumi.Input[str] id: The unique provider ID of the resource to lookup.
         :param pulumi.ResourceOptions opts: Options for the resource.
         :param pulumi.Input[builtins.str] backup_region: Region in which backup is stored.
+        :param pulumi.Input[Union['BackupVaultBackupRetentionPolicyArgs', 'BackupVaultBackupRetentionPolicyArgsDict']] backup_retention_policy: Backup retention policy defining the retention of the backups.
+               Structure is documented below.
         :param pulumi.Input[builtins.str] backup_vault_type: Type of the backup vault to be created. Default is IN_REGION.
                Possible values are: `BACKUP_VAULT_TYPE_UNSPECIFIED`, `IN_REGION`, `CROSS_REGION`.
         :param pulumi.Input[builtins.str] create_time: Create time of the backup vault. A timestamp in RFC3339 UTC "Zulu" format. Examples: "2023-06-22T09:13:01.617Z".
@@ -651,6 +697,7 @@ class BackupVault(pulumi.CustomResource):
         __props__ = _BackupVaultState.__new__(_BackupVaultState)
 
         __props__.__dict__["backup_region"] = backup_region
+        __props__.__dict__["backup_retention_policy"] = backup_retention_policy
         __props__.__dict__["backup_vault_type"] = backup_vault_type
         __props__.__dict__["create_time"] = create_time
         __props__.__dict__["description"] = description
@@ -674,6 +721,15 @@ class BackupVault(pulumi.CustomResource):
         """
         return pulumi.get(self, "backup_region")
 
+    @property
+    @pulumi.getter(name="backupRetentionPolicy")
+    def backup_retention_policy(self) -> pulumi.Output[Optional['outputs.BackupVaultBackupRetentionPolicy']]:
+        """
+        Backup retention policy defining the retention of the backups.
+        Structure is documented below.
+        """
+        return pulumi.get(self, "backup_retention_policy")
+
     @property
     @pulumi.getter(name="backupVaultType")
     def backup_vault_type(self) -> pulumi.Output[builtins.str]:

pulumi_gcp/netapp/outputs.py

@@ -17,6 +17,7 @@ from .. import _utilities
 from . import outputs
 
 __all__ = [
+    'BackupVaultBackupRetentionPolicy',
     'VolumeBackupConfig',
     'VolumeExportPolicy',
     'VolumeExportPolicyRule',
@@ -35,6 +36,97 @@ __all__ = [
     'VolumeTieringPolicy',
 ]
 
+@pulumi.output_type
+class BackupVaultBackupRetentionPolicy(dict):
+    @staticmethod
+    def __key_warning(key: str):
+        suggest = None
+        if key == "backupMinimumEnforcedRetentionDays":
+            suggest = "backup_minimum_enforced_retention_days"
+        elif key == "dailyBackupImmutable":
+            suggest = "daily_backup_immutable"
+        elif key == "manualBackupImmutable":
+            suggest = "manual_backup_immutable"
+        elif key == "monthlyBackupImmutable":
+            suggest = "monthly_backup_immutable"
+        elif key == "weeklyBackupImmutable":
+            suggest = "weekly_backup_immutable"
+
+        if suggest:
+            pulumi.log.warn(f"Key '{key}' not found in BackupVaultBackupRetentionPolicy. Access the value via the '{suggest}' property getter instead.")
+
+    def __getitem__(self, key: str) -> Any:
+        BackupVaultBackupRetentionPolicy.__key_warning(key)
+        return super().__getitem__(key)
+
+    def get(self, key: str, default = None) -> Any:
+        BackupVaultBackupRetentionPolicy.__key_warning(key)
+        return super().get(key, default)
+
+    def __init__(__self__, *,
+                 backup_minimum_enforced_retention_days: builtins.int,
+                 daily_backup_immutable: Optional[builtins.bool] = None,
+                 manual_backup_immutable: Optional[builtins.bool] = None,
+                 monthly_backup_immutable: Optional[builtins.bool] = None,
+                 weekly_backup_immutable: Optional[builtins.bool] = None):
+        """
+        :param builtins.int backup_minimum_enforced_retention_days: Minimum retention duration in days for backups in the backup vault.
+        :param builtins.bool daily_backup_immutable: Indicates if the daily backups are immutable. At least one of daily_backup_immutable, weekly_backup_immutable, monthly_backup_immutable and manual_backup_immutable must be true.
+        :param builtins.bool manual_backup_immutable: Indicates if the manual backups are immutable. At least one of daily_backup_immutable, weekly_backup_immutable, monthly_backup_immutable and manual_backup_immutable must be true.
+        :param builtins.bool monthly_backup_immutable: Indicates if the monthly backups are immutable. At least one of daily_backup_immutable, weekly_backup_immutable, monthly_backup_immutable and manual_backup_immutable must be true.
+        :param builtins.bool weekly_backup_immutable: Indicates if the weekly backups are immutable. At least one of daily_backup_immutable, weekly_backup_immutable, monthly_backup_immutable and manual_backup_immutable must be true.
+        """
+        pulumi.set(__self__, "backup_minimum_enforced_retention_days", backup_minimum_enforced_retention_days)
+        if daily_backup_immutable is not None:
+            pulumi.set(__self__, "daily_backup_immutable", daily_backup_immutable)
+        if manual_backup_immutable is not None:
+            pulumi.set(__self__, "manual_backup_immutable", manual_backup_immutable)
+        if monthly_backup_immutable is not None:
+            pulumi.set(__self__, "monthly_backup_immutable", monthly_backup_immutable)
+        if weekly_backup_immutable is not None:
+            pulumi.set(__self__, "weekly_backup_immutable", weekly_backup_immutable)
+
+    @property
+    @pulumi.getter(name="backupMinimumEnforcedRetentionDays")
+    def backup_minimum_enforced_retention_days(self) -> builtins.int:
+        """
+        Minimum retention duration in days for backups in the backup vault.
+        """
+        return pulumi.get(self, "backup_minimum_enforced_retention_days")
+
+    @property
+    @pulumi.getter(name="dailyBackupImmutable")
+    def daily_backup_immutable(self) -> Optional[builtins.bool]:
+        """
+        Indicates if the daily backups are immutable. At least one of daily_backup_immutable, weekly_backup_immutable, monthly_backup_immutable and manual_backup_immutable must be true.
+        """
+        return pulumi.get(self, "daily_backup_immutable")
+
+    @property
+    @pulumi.getter(name="manualBackupImmutable")
+    def manual_backup_immutable(self) -> Optional[builtins.bool]:
+        """
+        Indicates if the manual backups are immutable. At least one of daily_backup_immutable, weekly_backup_immutable, monthly_backup_immutable and manual_backup_immutable must be true.
+        """
+        return pulumi.get(self, "manual_backup_immutable")
+
+    @property
+    @pulumi.getter(name="monthlyBackupImmutable")
+    def monthly_backup_immutable(self) -> Optional[builtins.bool]:
+        """
+        Indicates if the monthly backups are immutable. At least one of daily_backup_immutable, weekly_backup_immutable, monthly_backup_immutable and manual_backup_immutable must be true.
+        """
+        return pulumi.get(self, "monthly_backup_immutable")
+
+    @property
+    @pulumi.getter(name="weeklyBackupImmutable")
+    def weekly_backup_immutable(self) -> Optional[builtins.bool]:
+        """
+        Indicates if the weekly backups are immutable. At least one of daily_backup_immutable, weekly_backup_immutable, monthly_backup_immutable and manual_backup_immutable must be true.
+        """
+        return pulumi.get(self, "weekly_backup_immutable")
+
+
 @pulumi.output_type
 class VolumeBackupConfig(dict):
     @staticmethod

pulumi_gcp/networkconnectivity/_inputs.py

@@ -192,11 +192,11 @@ if not MYPY:
         protocol_version: pulumi.Input[builtins.str]
         """
         Internet protocol versions this policy-based route applies to.
-        Possible values are: `IPV4`.
+        Possible values are: `IPV4`, `IPV6`.
         """
         dest_range: NotRequired[pulumi.Input[builtins.str]]
         """
-        The destination IP range of outgoing packets that this policy-based route applies to. Default is "0.0.0.0/0" if protocol version is IPv4.
+        The destination IP range of outgoing packets that this policy-based route applies to. Default is "0.0.0.0/0".
 
         - - -
         """
@@ -206,7 +206,7 @@ if not MYPY:
         """
         src_range: NotRequired[pulumi.Input[builtins.str]]
         """
-        The source IP range of outgoing packets that this policy-based route applies to. Default is "0.0.0.0/0" if protocol version is IPv4.
+        The source IP range of outgoing packets that this policy-based route applies to. Default is "0.0.0.0/0".
         """
 elif False:
     PolicyBasedRouteFilterArgsDict: TypeAlias = Mapping[str, Any]
@@ -220,12 +220,12 @@ class PolicyBasedRouteFilterArgs:
                  src_range: Optional[pulumi.Input[builtins.str]] = None):
         """
         :param pulumi.Input[builtins.str] protocol_version: Internet protocol versions this policy-based route applies to.
-               Possible values are: `IPV4`.
-        :param pulumi.Input[builtins.str] dest_range: The destination IP range of outgoing packets that this policy-based route applies to. Default is "0.0.0.0/0" if protocol version is IPv4.
+               Possible values are: `IPV4`, `IPV6`.
+        :param pulumi.Input[builtins.str] dest_range: The destination IP range of outgoing packets that this policy-based route applies to. Default is "0.0.0.0/0".
                
                - - -
         :param pulumi.Input[builtins.str] ip_protocol: The IP protocol that this policy-based route applies to. Valid values are 'TCP', 'UDP', and 'ALL'. Default is 'ALL'.
-        :param pulumi.Input[builtins.str] src_range: The source IP range of outgoing packets that this policy-based route applies to. Default is "0.0.0.0/0" if protocol version is IPv4.
+        :param pulumi.Input[builtins.str] src_range: The source IP range of outgoing packets that this policy-based route applies to. Default is "0.0.0.0/0".
         """
         pulumi.set(__self__, "protocol_version", protocol_version)
         if dest_range is not None:
@@ -240,7 +240,7 @@ class PolicyBasedRouteFilterArgs:
     def protocol_version(self) -> pulumi.Input[builtins.str]:
         """
         Internet protocol versions this policy-based route applies to.
-        Possible values are: `IPV4`.
+        Possible values are: `IPV4`, `IPV6`.
         """
         return pulumi.get(self, "protocol_version")
 
@@ -252,7 +252,7 @@ class PolicyBasedRouteFilterArgs:
     @pulumi.getter(name="destRange")
     def dest_range(self) -> Optional[pulumi.Input[builtins.str]]:
         """
-        The destination IP range of outgoing packets that this policy-based route applies to. Default is "0.0.0.0/0" if protocol version is IPv4.
+        The destination IP range of outgoing packets that this policy-based route applies to. Default is "0.0.0.0/0".
 
         - - -
         """
@@ -278,7 +278,7 @@ class PolicyBasedRouteFilterArgs:
     @pulumi.getter(name="srcRange")
     def src_range(self) -> Optional[pulumi.Input[builtins.str]]:
         """
-        The source IP range of outgoing packets that this policy-based route applies to. Default is "0.0.0.0/0" if protocol version is IPv4.
+        The source IP range of outgoing packets that this policy-based route applies to. Default is "0.0.0.0/0".
         """
         return pulumi.get(self, "src_range")
 

pulumi_gcp/networkconnectivity/outputs.py

@@ -164,12 +164,12 @@ class PolicyBasedRouteFilter(dict):
                  src_range: Optional[builtins.str] = None):
         """
         :param builtins.str protocol_version: Internet protocol versions this policy-based route applies to.
-               Possible values are: `IPV4`.
-        :param builtins.str dest_range: The destination IP range of outgoing packets that this policy-based route applies to. Default is "0.0.0.0/0" if protocol version is IPv4.
+               Possible values are: `IPV4`, `IPV6`.
+        :param builtins.str dest_range: The destination IP range of outgoing packets that this policy-based route applies to. Default is "0.0.0.0/0".
                
                - - -
         :param builtins.str ip_protocol: The IP protocol that this policy-based route applies to. Valid values are 'TCP', 'UDP', and 'ALL'. Default is 'ALL'.
-        :param builtins.str src_range: The source IP range of outgoing packets that this policy-based route applies to. Default is "0.0.0.0/0" if protocol version is IPv4.
+        :param builtins.str src_range: The source IP range of outgoing packets that this policy-based route applies to. Default is "0.0.0.0/0".
         """
         pulumi.set(__self__, "protocol_version", protocol_version)
         if dest_range is not None:
@@ -184,7 +184,7 @@ class PolicyBasedRouteFilter(dict):
     def protocol_version(self) -> builtins.str:
         """
         Internet protocol versions this policy-based route applies to.
-        Possible values are: `IPV4`.
+        Possible values are: `IPV4`, `IPV6`.
         """
         return pulumi.get(self, "protocol_version")
 
@@ -192,7 +192,7 @@ class PolicyBasedRouteFilter(dict):
     @pulumi.getter(name="destRange")
     def dest_range(self) -> Optional[builtins.str]:
         """
-        The destination IP range of outgoing packets that this policy-based route applies to. Default is "0.0.0.0/0" if protocol version is IPv4.
+        The destination IP range of outgoing packets that this policy-based route applies to. Default is "0.0.0.0/0".
 
         - - -
         """
@@ -210,7 +210,7 @@ class PolicyBasedRouteFilter(dict):
     @pulumi.getter(name="srcRange")
     def src_range(self) -> Optional[builtins.str]:
         """
-        The source IP range of outgoing packets that this policy-based route applies to. Default is "0.0.0.0/0" if protocol version is IPv4.
+        The source IP range of outgoing packets that this policy-based route applies to. Default is "0.0.0.0/0".
         """
         return pulumi.get(self, "src_range")
 

pulumi_gcp/networkconnectivity/spoke.py

@@ -689,15 +689,15 @@ class Spoke(pulumi.CustomResource):
         import pulumi_gcp as gcp
 
         network = gcp.compute.Network("network",
-            name="tf-test-network_9394",
+            name="tf-test-network_35305",
             auto_create_subnetworks=False)
         subnetwork = gcp.compute.Subnetwork("subnetwork",
-            name="tf-test-subnet_11380",
+            name="tf-test-subnet_62793",
             ip_cidr_range="10.0.0.0/28",
             region="us-central1",
             network=network.self_link)
         instance = gcp.compute.Instance("instance",
-            name="tf-test-instance_35305",
+            name="tf-test-instance_55438",
             machine_type="e2-medium",
             can_ip_forward=True,
             zone="us-central1-a",
@@ -714,13 +714,13 @@ class Spoke(pulumi.CustomResource):
                 }],
             }])
         basic_hub = gcp.networkconnectivity.Hub("basic_hub",
-            name="tf-test-hub_62793",
+            name="tf-test-hub_32706",
             description="A sample hub",
             labels={
                 "label-two": "value-one",
             })
         primary = gcp.networkconnectivity.Spoke("primary",
-            name="tf-test-name_55438",
+            name="tf-test-name_49082",
             location="us-central1",
             description="A sample spoke with a linked routher appliance instance",
             labels={
@@ -952,8 +952,8 @@ class Spoke(pulumi.CustomResource):
             hub=star_hub.id,
             auto_accept={
                 "auto_accept_projects": [
-                    "foo_32706",
-                    "bar_49082",
+                    "foo_60365",
+                    "bar_80215",
                 ],
             })
         primary = gcp.networkconnectivity.Spoke("primary",
@@ -1150,15 +1150,15 @@ class Spoke(pulumi.CustomResource):
         import pulumi_gcp as gcp
 
         network = gcp.compute.Network("network",
-            name="tf-test-network_9394",
+            name="tf-test-network_35305",
             auto_create_subnetworks=False)
         subnetwork = gcp.compute.Subnetwork("subnetwork",
-            name="tf-test-subnet_11380",
+            name="tf-test-subnet_62793",
             ip_cidr_range="10.0.0.0/28",
             region="us-central1",
             network=network.self_link)
         instance = gcp.compute.Instance("instance",
-            name="tf-test-instance_35305",
+            name="tf-test-instance_55438",
             machine_type="e2-medium",
             can_ip_forward=True,
             zone="us-central1-a",
@@ -1175,13 +1175,13 @@ class Spoke(pulumi.CustomResource):
                 }],
             }])
         basic_hub = gcp.networkconnectivity.Hub("basic_hub",
-            name="tf-test-hub_62793",
+            name="tf-test-hub_32706",
             description="A sample hub",
             labels={
                 "label-two": "value-one",
             })
         primary = gcp.networkconnectivity.Spoke("primary",
-            name="tf-test-name_55438",
+            name="tf-test-name_49082",
             location="us-central1",
             description="A sample spoke with a linked routher appliance instance",
             labels={
@@ -1413,8 +1413,8 @@ class Spoke(pulumi.CustomResource):
             hub=star_hub.id,
             auto_accept={
                 "auto_accept_projects": [
-                    "foo_32706",
-                    "bar_49082",
+                    "foo_60365",
+                    "bar_80215",
                 ],
             })
         primary = gcp.networkconnectivity.Spoke("primary",

pulumi_gcp/networksecurity/backend_authentication_config.py

@@ -479,6 +479,38 @@ class BackendAuthenticationConfig(pulumi.CustomResource):
             client_certificate=certificate.id,
             trust_config=trust_config.id)
         ```
+        ### Backend Service Tls Settings
+
+        ```python
+        import pulumi
+        import pulumi_gcp as gcp
+
+        default_health_check = gcp.compute.HealthCheck("default",
+            name="health-check",
+            http_health_check={
+                "port": 80,
+            })
+        default_backend_authentication_config = gcp.networksecurity.BackendAuthenticationConfig("default",
+            name="authentication",
+            well_known_roots="PUBLIC_ROOTS")
+        default = gcp.compute.BackendService("default",
+            name="backend-service",
+            health_checks=default_health_check.id,
+            load_balancing_scheme="EXTERNAL_MANAGED",
+            protocol="HTTPS",
+            tls_settings={
+                "sni": "example.com",
+                "subject_alt_names": [
+                    {
+                        "dns_name": "example.com",
+                    },
+                    {
+                        "uniform_resource_identifier": "https://example.com",
+                    },
+                ],
+                "authentication_config": default_backend_authentication_config.id.apply(lambda id: f"//networksecurity.googleapis.com/{id}"),
+            })
+        ```
 
         ## Import
 
@@ -594,6 +626,38 @@ class BackendAuthenticationConfig(pulumi.CustomResource):
             client_certificate=certificate.id,
             trust_config=trust_config.id)
         ```
+        ### Backend Service Tls Settings
+
+        ```python
+        import pulumi
+        import pulumi_gcp as gcp
+
+        default_health_check = gcp.compute.HealthCheck("default",
+            name="health-check",
+            http_health_check={
+                "port": 80,
+            })
+        default_backend_authentication_config = gcp.networksecurity.BackendAuthenticationConfig("default",
+            name="authentication",
+            well_known_roots="PUBLIC_ROOTS")
+        default = gcp.compute.BackendService("default",
+            name="backend-service",
+            health_checks=default_health_check.id,
+            load_balancing_scheme="EXTERNAL_MANAGED",
+            protocol="HTTPS",
+            tls_settings={
+                "sni": "example.com",
+                "subject_alt_names": [
+                    {
+                        "dns_name": "example.com",
+                    },
+                    {
+                        "uniform_resource_identifier": "https://example.com",
+                    },
+                ],
+                "authentication_config": default_backend_authentication_config.id.apply(lambda id: f"//networksecurity.googleapis.com/{id}"),
+            })
+        ```
 
         ## Import
 

pulumi_gcp/orgpolicy/policy.py

@@ -315,7 +315,7 @@ class Policy(pulumi.CustomResource):
         import pulumi_gcp as gcp
 
         constraint = gcp.orgpolicy.CustomConstraint("constraint",
-            name="custom.disableGkeAutoUpgrade_80215",
+            name="custom.disableGkeAutoUpgrade_32081",
             parent="organizations/123456789",
             display_name="Disable GKE auto upgrade",
             description="Only allow GKE NodePool resource to be created or updated if AutoUpgrade is not enabled where this custom constraint is enforced.",
@@ -504,7 +504,7 @@ class Policy(pulumi.CustomResource):
         import pulumi_gcp as gcp
 
         constraint = gcp.orgpolicy.CustomConstraint("constraint",
-            name="custom.disableGkeAutoUpgrade_80215",
+            name="custom.disableGkeAutoUpgrade_32081",
             parent="organizations/123456789",
             display_name="Disable GKE auto upgrade",
             description="Only allow GKE NodePool resource to be created or updated if AutoUpgrade is not enabled where this custom constraint is enforced.",