pulumi-gcp 8.34.0a1749538186__py3-none-any.whl → 8.34.0a1749648575__py3-none-any.whl

pulumi_gcp/gkeonprem/vmware_admin_cluster.py

@@ -37,6 +37,7 @@ class VmwareAdminClusterArgs:
                  name: Optional[pulumi.Input[builtins.str]] = None,
                  on_prem_version: Optional[pulumi.Input[builtins.str]] = None,
                  platform_config: Optional[pulumi.Input['VmwareAdminClusterPlatformConfigArgs']] = None,
+                 private_registry_config: Optional[pulumi.Input['VmwareAdminClusterPrivateRegistryConfigArgs']] = None,
                  project: Optional[pulumi.Input[builtins.str]] = None,
                  vcenter: Optional[pulumi.Input['VmwareAdminClusterVcenterArgs']] = None):
         """
@@ -62,6 +63,7 @@ class VmwareAdminClusterArgs:
         :param pulumi.Input[builtins.str] name: The VMware admin cluster resource name.
         :param pulumi.Input[builtins.str] on_prem_version: The Anthos clusters on the VMware version for the admin cluster.
         :param pulumi.Input['VmwareAdminClusterPlatformConfigArgs'] platform_config: The VMware platform configuration.
+        :param pulumi.Input['VmwareAdminClusterPrivateRegistryConfigArgs'] private_registry_config: Configuration for private registry.
         :param pulumi.Input['VmwareAdminClusterVcenterArgs'] vcenter: Specifies vCenter config for the admin cluster.
         """
         pulumi.set(__self__, "location", location)
@@ -92,6 +94,8 @@ class VmwareAdminClusterArgs:
             pulumi.set(__self__, "on_prem_version", on_prem_version)
         if platform_config is not None:
             pulumi.set(__self__, "platform_config", platform_config)
+        if private_registry_config is not None:
+            pulumi.set(__self__, "private_registry_config", private_registry_config)
         if project is not None:
             pulumi.set(__self__, "project", project)
         if vcenter is not None:
@@ -283,6 +287,18 @@ class VmwareAdminClusterArgs:
     def platform_config(self, value: Optional[pulumi.Input['VmwareAdminClusterPlatformConfigArgs']]):
         pulumi.set(self, "platform_config", value)
 
+    @property
+    @pulumi.getter(name="privateRegistryConfig")
+    def private_registry_config(self) -> Optional[pulumi.Input['VmwareAdminClusterPrivateRegistryConfigArgs']]:
+        """
+        Configuration for private registry.
+        """
+        return pulumi.get(self, "private_registry_config")
+
+    @private_registry_config.setter
+    def private_registry_config(self, value: Optional[pulumi.Input['VmwareAdminClusterPrivateRegistryConfigArgs']]):
+        pulumi.set(self, "private_registry_config", value)
+
     @property
     @pulumi.getter
     def project(self) -> Optional[pulumi.Input[builtins.str]]:
@@ -330,6 +346,7 @@ class _VmwareAdminClusterState:
                  network_config: Optional[pulumi.Input['VmwareAdminClusterNetworkConfigArgs']] = None,
                  on_prem_version: Optional[pulumi.Input[builtins.str]] = None,
                  platform_config: Optional[pulumi.Input['VmwareAdminClusterPlatformConfigArgs']] = None,
+                 private_registry_config: Optional[pulumi.Input['VmwareAdminClusterPrivateRegistryConfigArgs']] = None,
                  project: Optional[pulumi.Input[builtins.str]] = None,
                  reconciling: Optional[pulumi.Input[builtins.bool]] = None,
                  state: Optional[pulumi.Input[builtins.str]] = None,
@@ -380,6 +397,7 @@ class _VmwareAdminClusterState:
                Structure is documented below.
         :param pulumi.Input[builtins.str] on_prem_version: The Anthos clusters on the VMware version for the admin cluster.
         :param pulumi.Input['VmwareAdminClusterPlatformConfigArgs'] platform_config: The VMware platform configuration.
+        :param pulumi.Input['VmwareAdminClusterPrivateRegistryConfigArgs'] private_registry_config: Configuration for private registry.
         :param pulumi.Input[builtins.bool] reconciling: If set, there are currently changes in flight to the VMware admin cluster.
         :param pulumi.Input[builtins.str] state: (Output)
                The lifecycle state of the condition.
@@ -433,6 +451,8 @@ class _VmwareAdminClusterState:
             pulumi.set(__self__, "on_prem_version", on_prem_version)
         if platform_config is not None:
             pulumi.set(__self__, "platform_config", platform_config)
+        if private_registry_config is not None:
+            pulumi.set(__self__, "private_registry_config", private_registry_config)
         if project is not None:
             pulumi.set(__self__, "project", project)
         if reconciling is not None:
@@ -729,6 +749,18 @@ class _VmwareAdminClusterState:
     def platform_config(self, value: Optional[pulumi.Input['VmwareAdminClusterPlatformConfigArgs']]):
         pulumi.set(self, "platform_config", value)
 
+    @property
+    @pulumi.getter(name="privateRegistryConfig")
+    def private_registry_config(self) -> Optional[pulumi.Input['VmwareAdminClusterPrivateRegistryConfigArgs']]:
+        """
+        Configuration for private registry.
+        """
+        return pulumi.get(self, "private_registry_config")
+
+    @private_registry_config.setter
+    def private_registry_config(self, value: Optional[pulumi.Input['VmwareAdminClusterPrivateRegistryConfigArgs']]):
+        pulumi.set(self, "private_registry_config", value)
+
     @property
     @pulumi.getter
     def project(self) -> Optional[pulumi.Input[builtins.str]]:
@@ -834,6 +866,7 @@ class VmwareAdminCluster(pulumi.CustomResource):
                  network_config: Optional[pulumi.Input[Union['VmwareAdminClusterNetworkConfigArgs', 'VmwareAdminClusterNetworkConfigArgsDict']]] = None,
                  on_prem_version: Optional[pulumi.Input[builtins.str]] = None,
                  platform_config: Optional[pulumi.Input[Union['VmwareAdminClusterPlatformConfigArgs', 'VmwareAdminClusterPlatformConfigArgsDict']]] = None,
+                 private_registry_config: Optional[pulumi.Input[Union['VmwareAdminClusterPrivateRegistryConfigArgs', 'VmwareAdminClusterPrivateRegistryConfigArgsDict']]] = None,
                  project: Optional[pulumi.Input[builtins.str]] = None,
                  vcenter: Optional[pulumi.Input[Union['VmwareAdminClusterVcenterArgs', 'VmwareAdminClusterVcenterArgsDict']]] = None,
                  __props__=None):
@@ -884,6 +917,10 @@ class VmwareAdminCluster(pulumi.CustomResource):
                     "partition": "test-parition",
                     "snat_pool": "test-snat-pool",
                 },
+            },
+            private_registry_config={
+                "address": "test-address",
+                "ca_cert": "test-ca-cert",
             })
         ```
         ### Gkeonprem Vmware Admin Cluster Full
@@ -977,6 +1014,10 @@ class VmwareAdminCluster(pulumi.CustomResource):
             },
             platform_config={
                 "required_platform_version": "1.31.0",
+            },
+            private_registry_config={
+                "address": "test-address",
+                "ca_cert": "test-ca-cert",
             })
         ```
         ### Gkeonprem Vmware Admin Cluster Metallb
@@ -1021,6 +1062,10 @@ class VmwareAdminCluster(pulumi.CustomResource):
                 "metal_lb_config": {
                     "enabled": True,
                 },
+            },
+            private_registry_config={
+                "address": "test-address",
+                "ca_cert": "test-ca-cert",
             })
         ```
 
@@ -1071,6 +1116,7 @@ class VmwareAdminCluster(pulumi.CustomResource):
                Structure is documented below.
         :param pulumi.Input[builtins.str] on_prem_version: The Anthos clusters on the VMware version for the admin cluster.
         :param pulumi.Input[Union['VmwareAdminClusterPlatformConfigArgs', 'VmwareAdminClusterPlatformConfigArgsDict']] platform_config: The VMware platform configuration.
+        :param pulumi.Input[Union['VmwareAdminClusterPrivateRegistryConfigArgs', 'VmwareAdminClusterPrivateRegistryConfigArgsDict']] private_registry_config: Configuration for private registry.
         :param pulumi.Input[Union['VmwareAdminClusterVcenterArgs', 'VmwareAdminClusterVcenterArgsDict']] vcenter: Specifies vCenter config for the admin cluster.
         """
         ...
@@ -1126,6 +1172,10 @@ class VmwareAdminCluster(pulumi.CustomResource):
                     "partition": "test-parition",
                     "snat_pool": "test-snat-pool",
                 },
+            },
+            private_registry_config={
+                "address": "test-address",
+                "ca_cert": "test-ca-cert",
             })
         ```
         ### Gkeonprem Vmware Admin Cluster Full
@@ -1219,6 +1269,10 @@ class VmwareAdminCluster(pulumi.CustomResource):
             },
             platform_config={
                 "required_platform_version": "1.31.0",
+            },
+            private_registry_config={
+                "address": "test-address",
+                "ca_cert": "test-ca-cert",
             })
         ```
         ### Gkeonprem Vmware Admin Cluster Metallb
@@ -1263,6 +1317,10 @@ class VmwareAdminCluster(pulumi.CustomResource):
                 "metal_lb_config": {
                     "enabled": True,
                 },
+            },
+            private_registry_config={
+                "address": "test-address",
+                "ca_cert": "test-ca-cert",
             })
         ```
 
@@ -1320,6 +1378,7 @@ class VmwareAdminCluster(pulumi.CustomResource):
                  network_config: Optional[pulumi.Input[Union['VmwareAdminClusterNetworkConfigArgs', 'VmwareAdminClusterNetworkConfigArgsDict']]] = None,
                  on_prem_version: Optional[pulumi.Input[builtins.str]] = None,
                  platform_config: Optional[pulumi.Input[Union['VmwareAdminClusterPlatformConfigArgs', 'VmwareAdminClusterPlatformConfigArgsDict']]] = None,
+                 private_registry_config: Optional[pulumi.Input[Union['VmwareAdminClusterPrivateRegistryConfigArgs', 'VmwareAdminClusterPrivateRegistryConfigArgsDict']]] = None,
                  project: Optional[pulumi.Input[builtins.str]] = None,
                  vcenter: Optional[pulumi.Input[Union['VmwareAdminClusterVcenterArgs', 'VmwareAdminClusterVcenterArgsDict']]] = None,
                  __props__=None):
@@ -1350,6 +1409,7 @@ class VmwareAdminCluster(pulumi.CustomResource):
             __props__.__dict__["network_config"] = network_config
             __props__.__dict__["on_prem_version"] = on_prem_version
             __props__.__dict__["platform_config"] = platform_config
+            __props__.__dict__["private_registry_config"] = private_registry_config
             __props__.__dict__["project"] = project
             __props__.__dict__["vcenter"] = vcenter
             __props__.__dict__["create_time"] = None
@@ -1396,6 +1456,7 @@ class VmwareAdminCluster(pulumi.CustomResource):
             network_config: Optional[pulumi.Input[Union['VmwareAdminClusterNetworkConfigArgs', 'VmwareAdminClusterNetworkConfigArgsDict']]] = None,
             on_prem_version: Optional[pulumi.Input[builtins.str]] = None,
             platform_config: Optional[pulumi.Input[Union['VmwareAdminClusterPlatformConfigArgs', 'VmwareAdminClusterPlatformConfigArgsDict']]] = None,
+            private_registry_config: Optional[pulumi.Input[Union['VmwareAdminClusterPrivateRegistryConfigArgs', 'VmwareAdminClusterPrivateRegistryConfigArgsDict']]] = None,
             project: Optional[pulumi.Input[builtins.str]] = None,
             reconciling: Optional[pulumi.Input[builtins.bool]] = None,
             state: Optional[pulumi.Input[builtins.str]] = None,
@@ -1451,6 +1512,7 @@ class VmwareAdminCluster(pulumi.CustomResource):
                Structure is documented below.
         :param pulumi.Input[builtins.str] on_prem_version: The Anthos clusters on the VMware version for the admin cluster.
         :param pulumi.Input[Union['VmwareAdminClusterPlatformConfigArgs', 'VmwareAdminClusterPlatformConfigArgsDict']] platform_config: The VMware platform configuration.
+        :param pulumi.Input[Union['VmwareAdminClusterPrivateRegistryConfigArgs', 'VmwareAdminClusterPrivateRegistryConfigArgsDict']] private_registry_config: Configuration for private registry.
         :param pulumi.Input[builtins.bool] reconciling: If set, there are currently changes in flight to the VMware admin cluster.
         :param pulumi.Input[builtins.str] state: (Output)
                The lifecycle state of the condition.
@@ -1486,6 +1548,7 @@ class VmwareAdminCluster(pulumi.CustomResource):
         __props__.__dict__["network_config"] = network_config
         __props__.__dict__["on_prem_version"] = on_prem_version
         __props__.__dict__["platform_config"] = platform_config
+        __props__.__dict__["private_registry_config"] = private_registry_config
         __props__.__dict__["project"] = project
         __props__.__dict__["reconciling"] = reconciling
         __props__.__dict__["state"] = state
@@ -1688,6 +1751,14 @@ class VmwareAdminCluster(pulumi.CustomResource):
         """
         return pulumi.get(self, "platform_config")
 
+    @property
+    @pulumi.getter(name="privateRegistryConfig")
+    def private_registry_config(self) -> pulumi.Output[Optional['outputs.VmwareAdminClusterPrivateRegistryConfig']]:
+        """
+        Configuration for private registry.
+        """
+        return pulumi.get(self, "private_registry_config")
+
     @property
     @pulumi.getter
     def project(self) -> pulumi.Output[builtins.str]:

pulumi_gcp/iam/workload_identity_pool_namespace.py

@@ -339,7 +339,7 @@ class WorkloadIdentityPoolNamespace(pulumi.CustomResource):
             mode="TRUST_DOMAIN")
         example = gcp.iam.WorkloadIdentityPoolNamespace("example",
             workload_identity_pool_id=pool.workload_identity_pool_id,
-            workload_identity_pool_namespace_id="example-nmspc")
+            workload_identity_pool_namespace_id="example-namespace")
         ```
         ### Iam Workload Identity Pool Namespace Full
 
@@ -352,7 +352,7 @@ class WorkloadIdentityPoolNamespace(pulumi.CustomResource):
             mode="TRUST_DOMAIN")
         example = gcp.iam.WorkloadIdentityPoolNamespace("example",
             workload_identity_pool_id=pool.workload_identity_pool_id,
-            workload_identity_pool_namespace_id="example-nmspc",
+            workload_identity_pool_namespace_id="example-namespace",
             description="Example Namespace in a Workload Identity Pool",
             disabled=True)
         ```
@@ -423,7 +423,7 @@ class WorkloadIdentityPoolNamespace(pulumi.CustomResource):
             mode="TRUST_DOMAIN")
         example = gcp.iam.WorkloadIdentityPoolNamespace("example",
             workload_identity_pool_id=pool.workload_identity_pool_id,
-            workload_identity_pool_namespace_id="example-nmspc")
+            workload_identity_pool_namespace_id="example-namespace")
         ```
         ### Iam Workload Identity Pool Namespace Full
 
@@ -436,7 +436,7 @@ class WorkloadIdentityPoolNamespace(pulumi.CustomResource):
             mode="TRUST_DOMAIN")
         example = gcp.iam.WorkloadIdentityPoolNamespace("example",
             workload_identity_pool_id=pool.workload_identity_pool_id,
-            workload_identity_pool_namespace_id="example-nmspc",
+            workload_identity_pool_namespace_id="example-namespace",
             description="Example Namespace in a Workload Identity Pool",
             disabled=True)
         ```

pulumi_gcp/iap/tunnel_dest_group.py

@@ -255,7 +255,7 @@ class TunnelDestGroup(pulumi.CustomResource):
 
         dest_group = gcp.iap.TunnelDestGroup("dest_group",
             region="us-central1",
-            group_name="testgroup_13293",
+            group_name="testgroup_33395",
             cidrs=[
                 "10.1.0.0/16",
                 "192.168.10.0/24",
@@ -341,7 +341,7 @@ class TunnelDestGroup(pulumi.CustomResource):
 
         dest_group = gcp.iap.TunnelDestGroup("dest_group",
             region="us-central1",
-            group_name="testgroup_13293",
+            group_name="testgroup_33395",
             cidrs=[
                 "10.1.0.0/16",
                 "192.168.10.0/24",

pulumi_gcp/integrationconnectors/managed_zone.py

@@ -380,8 +380,8 @@ class ManagedZone(pulumi.CustomResource):
         import pulumi_gcp as gcp
 
         target_project = gcp.organizations.Project("target_project",
-            project_id="tf-test_40289",
-            name="tf-test_33395",
+            project_id="tf-test_76044",
+            name="tf-test_69391",
             org_id="123456789",
             billing_account="000000-0000000-0000000-000000",
             deletion_policy="DELETE")
@@ -402,8 +402,8 @@ class ManagedZone(pulumi.CustomResource):
             auto_create_subnetworks=False,
             opts = pulumi.ResourceOptions(depends_on=[compute]))
         zone = gcp.dns.ManagedZone("zone",
-            name="tf-test-dns_76044",
-            dns_name="private_69391.example.com.",
+            name="tf-test-dns_8270",
+            dns_name="private_41150.example.com.",
             visibility="private",
             private_visibility_config={
                 "networks": [{
@@ -491,8 +491,8 @@ class ManagedZone(pulumi.CustomResource):
         import pulumi_gcp as gcp
 
         target_project = gcp.organizations.Project("target_project",
-            project_id="tf-test_40289",
-            name="tf-test_33395",
+            project_id="tf-test_76044",
+            name="tf-test_69391",
             org_id="123456789",
             billing_account="000000-0000000-0000000-000000",
             deletion_policy="DELETE")
@@ -513,8 +513,8 @@ class ManagedZone(pulumi.CustomResource):
             auto_create_subnetworks=False,
             opts = pulumi.ResourceOptions(depends_on=[compute]))
         zone = gcp.dns.ManagedZone("zone",
-            name="tf-test-dns_76044",
-            dns_name="private_69391.example.com.",
+            name="tf-test-dns_8270",
+            dns_name="private_41150.example.com.",
             visibility="private",
             private_visibility_config={
                 "networks": [{

pulumi_gcp/managedkafka/connect_cluster.py

@@ -389,8 +389,8 @@ class ConnectCluster(pulumi.CustomResource):
         import pulumi_time as time
 
         project = gcp.organizations.Project("project",
-            project_id="tf-test_8270",
-            name="tf-test_41150",
+            project_id="tf-test_89313",
+            name="tf-test_60646",
             org_id="123456789",
             billing_account="000000-0000000-0000000-000000",
             deletion_policy="DELETE")
@@ -516,8 +516,8 @@ class ConnectCluster(pulumi.CustomResource):
         import pulumi_time as time
 
         project = gcp.organizations.Project("project",
-            project_id="tf-test_8270",
-            name="tf-test_41150",
+            project_id="tf-test_89313",
+            name="tf-test_60646",
             org_id="123456789",
             billing_account="000000-0000000-0000000-000000",
             deletion_policy="DELETE")

pulumi_gcp/managedkafka/connector.py

@@ -300,8 +300,8 @@ class Connector(pulumi.CustomResource):
         import pulumi_time as time
 
         project = gcp.organizations.Project("project",
-            project_id="tf-test_89313",
-            name="tf-test_60646",
+            project_id="tf-test_9394",
+            name="tf-test_11380",
             org_id="123456789",
             billing_account="000000-0000000-0000000-000000",
             deletion_policy="DELETE")
@@ -459,8 +459,8 @@ class Connector(pulumi.CustomResource):
         import pulumi_time as time
 
         project = gcp.organizations.Project("project",
-            project_id="tf-test_89313",
-            name="tf-test_60646",
+            project_id="tf-test_9394",
+            name="tf-test_11380",
             org_id="123456789",
             billing_account="000000-0000000-0000000-000000",
             deletion_policy="DELETE")

pulumi_gcp/networkconnectivity/spoke.py

@@ -689,15 +689,15 @@ class Spoke(pulumi.CustomResource):
         import pulumi_gcp as gcp
 
         network = gcp.compute.Network("network",
-            name="tf-test-network_9394",
+            name="tf-test-network_35305",
             auto_create_subnetworks=False)
         subnetwork = gcp.compute.Subnetwork("subnetwork",
-            name="tf-test-subnet_11380",
+            name="tf-test-subnet_62793",
             ip_cidr_range="10.0.0.0/28",
             region="us-central1",
             network=network.self_link)
         instance = gcp.compute.Instance("instance",
-            name="tf-test-instance_35305",
+            name="tf-test-instance_55438",
             machine_type="e2-medium",
             can_ip_forward=True,
             zone="us-central1-a",
@@ -714,13 +714,13 @@ class Spoke(pulumi.CustomResource):
                 }],
             }])
         basic_hub = gcp.networkconnectivity.Hub("basic_hub",
-            name="tf-test-hub_62793",
+            name="tf-test-hub_32706",
             description="A sample hub",
             labels={
                 "label-two": "value-one",
             })
         primary = gcp.networkconnectivity.Spoke("primary",
-            name="tf-test-name_55438",
+            name="tf-test-name_49082",
             location="us-central1",
             description="A sample spoke with a linked routher appliance instance",
             labels={
@@ -952,8 +952,8 @@ class Spoke(pulumi.CustomResource):
             hub=star_hub.id,
             auto_accept={
                 "auto_accept_projects": [
-                    "foo_32706",
-                    "bar_49082",
+                    "foo_60365",
+                    "bar_80215",
                 ],
             })
         primary = gcp.networkconnectivity.Spoke("primary",
@@ -1150,15 +1150,15 @@ class Spoke(pulumi.CustomResource):
         import pulumi_gcp as gcp
 
         network = gcp.compute.Network("network",
-            name="tf-test-network_9394",
+            name="tf-test-network_35305",
             auto_create_subnetworks=False)
         subnetwork = gcp.compute.Subnetwork("subnetwork",
-            name="tf-test-subnet_11380",
+            name="tf-test-subnet_62793",
             ip_cidr_range="10.0.0.0/28",
             region="us-central1",
             network=network.self_link)
         instance = gcp.compute.Instance("instance",
-            name="tf-test-instance_35305",
+            name="tf-test-instance_55438",
             machine_type="e2-medium",
             can_ip_forward=True,
             zone="us-central1-a",
@@ -1175,13 +1175,13 @@ class Spoke(pulumi.CustomResource):
                 }],
             }])
         basic_hub = gcp.networkconnectivity.Hub("basic_hub",
-            name="tf-test-hub_62793",
+            name="tf-test-hub_32706",
             description="A sample hub",
             labels={
                 "label-two": "value-one",
             })
         primary = gcp.networkconnectivity.Spoke("primary",
-            name="tf-test-name_55438",
+            name="tf-test-name_49082",
             location="us-central1",
             description="A sample spoke with a linked routher appliance instance",
             labels={
@@ -1413,8 +1413,8 @@ class Spoke(pulumi.CustomResource):
             hub=star_hub.id,
             auto_accept={
                 "auto_accept_projects": [
-                    "foo_32706",
-                    "bar_49082",
+                    "foo_60365",
+                    "bar_80215",
                 ],
             })
         primary = gcp.networkconnectivity.Spoke("primary",

pulumi_gcp/networksecurity/backend_authentication_config.py

@@ -479,6 +479,38 @@ class BackendAuthenticationConfig(pulumi.CustomResource):
             client_certificate=certificate.id,
             trust_config=trust_config.id)
         ```
+        ### Backend Service Tls Settings
+
+        ```python
+        import pulumi
+        import pulumi_gcp as gcp
+
+        default_health_check = gcp.compute.HealthCheck("default",
+            name="health-check",
+            http_health_check={
+                "port": 80,
+            })
+        default_backend_authentication_config = gcp.networksecurity.BackendAuthenticationConfig("default",
+            name="authentication",
+            well_known_roots="PUBLIC_ROOTS")
+        default = gcp.compute.BackendService("default",
+            name="backend-service",
+            health_checks=default_health_check.id,
+            load_balancing_scheme="EXTERNAL_MANAGED",
+            protocol="HTTPS",
+            tls_settings={
+                "sni": "example.com",
+                "subject_alt_names": [
+                    {
+                        "dns_name": "example.com",
+                    },
+                    {
+                        "uniform_resource_identifier": "https://example.com",
+                    },
+                ],
+                "authentication_config": default_backend_authentication_config.id.apply(lambda id: f"//networksecurity.googleapis.com/{id}"),
+            })
+        ```
 
         ## Import
 
@@ -594,6 +626,38 @@ class BackendAuthenticationConfig(pulumi.CustomResource):
             client_certificate=certificate.id,
             trust_config=trust_config.id)
         ```
+        ### Backend Service Tls Settings
+
+        ```python
+        import pulumi
+        import pulumi_gcp as gcp
+
+        default_health_check = gcp.compute.HealthCheck("default",
+            name="health-check",
+            http_health_check={
+                "port": 80,
+            })
+        default_backend_authentication_config = gcp.networksecurity.BackendAuthenticationConfig("default",
+            name="authentication",
+            well_known_roots="PUBLIC_ROOTS")
+        default = gcp.compute.BackendService("default",
+            name="backend-service",
+            health_checks=default_health_check.id,
+            load_balancing_scheme="EXTERNAL_MANAGED",
+            protocol="HTTPS",
+            tls_settings={
+                "sni": "example.com",
+                "subject_alt_names": [
+                    {
+                        "dns_name": "example.com",
+                    },
+                    {
+                        "uniform_resource_identifier": "https://example.com",
+                    },
+                ],
+                "authentication_config": default_backend_authentication_config.id.apply(lambda id: f"//networksecurity.googleapis.com/{id}"),
+            })
+        ```
 
         ## Import
 

pulumi_gcp/orgpolicy/policy.py

@@ -315,7 +315,7 @@ class Policy(pulumi.CustomResource):
         import pulumi_gcp as gcp
 
         constraint = gcp.orgpolicy.CustomConstraint("constraint",
-            name="custom.disableGkeAutoUpgrade_80215",
+            name="custom.disableGkeAutoUpgrade_32081",
             parent="organizations/123456789",
             display_name="Disable GKE auto upgrade",
             description="Only allow GKE NodePool resource to be created or updated if AutoUpgrade is not enabled where this custom constraint is enforced.",
@@ -504,7 +504,7 @@ class Policy(pulumi.CustomResource):
         import pulumi_gcp as gcp
 
         constraint = gcp.orgpolicy.CustomConstraint("constraint",
-            name="custom.disableGkeAutoUpgrade_80215",
+            name="custom.disableGkeAutoUpgrade_32081",
             parent="organizations/123456789",
             display_name="Disable GKE auto upgrade",
             description="Only allow GKE NodePool resource to be created or updated if AutoUpgrade is not enabled where this custom constraint is enforced.",