pulumi-gcp 8.35.0a1750142992__py3-none-any.whl → 8.35.0a1750229953__py3-none-any.whl

pulumi_gcp/compute/outputs.py

@@ -508,6 +508,22 @@ __all__ = [
     'RegionUrlMapDefaultUrlRedirect',
     'RegionUrlMapHostRule',
     'RegionUrlMapPathMatcher',
+    'RegionUrlMapPathMatcherDefaultRouteAction',
+    'RegionUrlMapPathMatcherDefaultRouteActionCorsPolicy',
+    'RegionUrlMapPathMatcherDefaultRouteActionFaultInjectionPolicy',
+    'RegionUrlMapPathMatcherDefaultRouteActionFaultInjectionPolicyAbort',
+    'RegionUrlMapPathMatcherDefaultRouteActionFaultInjectionPolicyDelay',
+    'RegionUrlMapPathMatcherDefaultRouteActionFaultInjectionPolicyDelayFixedDelay',
+    'RegionUrlMapPathMatcherDefaultRouteActionMaxStreamDuration',
+    'RegionUrlMapPathMatcherDefaultRouteActionRequestMirrorPolicy',
+    'RegionUrlMapPathMatcherDefaultRouteActionRetryPolicy',
+    'RegionUrlMapPathMatcherDefaultRouteActionRetryPolicyPerTryTimeout',
+    'RegionUrlMapPathMatcherDefaultRouteActionTimeout',
+    'RegionUrlMapPathMatcherDefaultRouteActionUrlRewrite',
+    'RegionUrlMapPathMatcherDefaultRouteActionWeightedBackendService',
+    'RegionUrlMapPathMatcherDefaultRouteActionWeightedBackendServiceHeaderAction',
+    'RegionUrlMapPathMatcherDefaultRouteActionWeightedBackendServiceHeaderActionRequestHeadersToAdd',
+    'RegionUrlMapPathMatcherDefaultRouteActionWeightedBackendServiceHeaderActionResponseHeadersToAdd',
     'RegionUrlMapPathMatcherDefaultUrlRedirect',
     'RegionUrlMapPathMatcherPathRule',
     'RegionUrlMapPathMatcherPathRuleRouteAction',
@@ -764,6 +780,10 @@ __all__ = [
     'URLMapPathMatcherRouteRuleRouteActionWeightedBackendServiceHeaderActionResponseHeadersToAdd',
     'URLMapPathMatcherRouteRuleUrlRedirect',
     'URLMapTest',
+    'URLMapTestHeader',
+    'VPNTunnelCipherSuite',
+    'VPNTunnelCipherSuitePhase1',
+    'VPNTunnelCipherSuitePhase2',
     'GetAddressesAddressResult',
     'GetBackendBucketCdnPolicyResult',
     'GetBackendBucketCdnPolicyBypassCacheOnRequestHeaderResult',
@@ -38395,7 +38415,9 @@ class RegionUrlMapPathMatcher(dict):
     @staticmethod
     def __key_warning(key: str):
         suggest = None
-        if key == "defaultService":
+        if key == "defaultRouteAction":
+            suggest = "default_route_action"
+        elif key == "defaultService":
             suggest = "default_service"
         elif key == "defaultUrlRedirect":
             suggest = "default_url_redirect"
@@ -38405,124 +38427,1243 @@ class RegionUrlMapPathMatcher(dict):
             suggest = "route_rules"
 
         if suggest:
-            pulumi.log.warn(f"Key '{key}' not found in RegionUrlMapPathMatcher. Access the value via the '{suggest}' property getter instead.")
+            pulumi.log.warn(f"Key '{key}' not found in RegionUrlMapPathMatcher. Access the value via the '{suggest}' property getter instead.")
+
+    def __getitem__(self, key: str) -> Any:
+        RegionUrlMapPathMatcher.__key_warning(key)
+        return super().__getitem__(key)
+
+    def get(self, key: str, default = None) -> Any:
+        RegionUrlMapPathMatcher.__key_warning(key)
+        return super().get(key, default)
+
+    def __init__(__self__, *,
+                 name: builtins.str,
+                 default_route_action: Optional['outputs.RegionUrlMapPathMatcherDefaultRouteAction'] = None,
+                 default_service: Optional[builtins.str] = None,
+                 default_url_redirect: Optional['outputs.RegionUrlMapPathMatcherDefaultUrlRedirect'] = None,
+                 description: Optional[builtins.str] = None,
+                 path_rules: Optional[Sequence['outputs.RegionUrlMapPathMatcherPathRule']] = None,
+                 route_rules: Optional[Sequence['outputs.RegionUrlMapPathMatcherRouteRule']] = None):
+        """
+        :param builtins.str name: The name to which this PathMatcher is referred by the HostRule.
+        :param 'RegionUrlMapPathMatcherDefaultRouteActionArgs' default_route_action: defaultRouteAction takes effect when none of the pathRules or routeRules match. The load balancer performs
+               advanced routing actions like URL rewrites, header transformations, etc. prior to forwarding the request
+               to the selected backend. If defaultRouteAction specifies any weightedBackendServices, defaultService must not be set.
+               Conversely if defaultService is set, defaultRouteAction cannot contain any weightedBackendServices.
+               Only one of defaultRouteAction or defaultUrlRedirect must be set.
+               Structure is documented below.
+        :param builtins.str default_service: A reference to a RegionBackendService resource. This will be used if
+               none of the pathRules defined by this PathMatcher is matched by
+               the URL's path portion.
+        :param 'RegionUrlMapPathMatcherDefaultUrlRedirectArgs' default_url_redirect: When none of the specified hostRules match, the request is redirected to a URL specified
+               by defaultUrlRedirect. If defaultUrlRedirect is specified, defaultService or
+               defaultRouteAction must not be set.
+               Structure is documented below.
+        :param builtins.str description: An optional description of this resource.
+        :param Sequence['RegionUrlMapPathMatcherPathRuleArgs'] path_rules: The list of path rules. Use this list instead of routeRules when routing based
+               on simple path matching is all that's required. The order by which path rules
+               are specified does not matter. Matches are always done on the longest-path-first
+               basis. For example: a pathRule with a path /a/b/c/* will match before /a/b/*
+               irrespective of the order in which those paths appear in this list. Within a
+               given pathMatcher, only one of pathRules or routeRules must be set.
+               Structure is documented below.
+        :param Sequence['RegionUrlMapPathMatcherRouteRuleArgs'] route_rules: The list of ordered HTTP route rules. Use this list instead of pathRules when
+               advanced route matching and routing actions are desired. The order of specifying
+               routeRules matters: the first rule that matches will cause its specified routing
+               action to take effect. Within a given pathMatcher, only one of pathRules or
+               routeRules must be set. routeRules are not supported in UrlMaps intended for
+               External load balancers.
+               Structure is documented below.
+        """
+        pulumi.set(__self__, "name", name)
+        if default_route_action is not None:
+            pulumi.set(__self__, "default_route_action", default_route_action)
+        if default_service is not None:
+            pulumi.set(__self__, "default_service", default_service)
+        if default_url_redirect is not None:
+            pulumi.set(__self__, "default_url_redirect", default_url_redirect)
+        if description is not None:
+            pulumi.set(__self__, "description", description)
+        if path_rules is not None:
+            pulumi.set(__self__, "path_rules", path_rules)
+        if route_rules is not None:
+            pulumi.set(__self__, "route_rules", route_rules)
+
+    @property
+    @pulumi.getter
+    def name(self) -> builtins.str:
+        """
+        The name to which this PathMatcher is referred by the HostRule.
+        """
+        return pulumi.get(self, "name")
+
+    @property
+    @pulumi.getter(name="defaultRouteAction")
+    def default_route_action(self) -> Optional['outputs.RegionUrlMapPathMatcherDefaultRouteAction']:
+        """
+        defaultRouteAction takes effect when none of the pathRules or routeRules match. The load balancer performs
+        advanced routing actions like URL rewrites, header transformations, etc. prior to forwarding the request
+        to the selected backend. If defaultRouteAction specifies any weightedBackendServices, defaultService must not be set.
+        Conversely if defaultService is set, defaultRouteAction cannot contain any weightedBackendServices.
+        Only one of defaultRouteAction or defaultUrlRedirect must be set.
+        Structure is documented below.
+        """
+        return pulumi.get(self, "default_route_action")
+
+    @property
+    @pulumi.getter(name="defaultService")
+    def default_service(self) -> Optional[builtins.str]:
+        """
+        A reference to a RegionBackendService resource. This will be used if
+        none of the pathRules defined by this PathMatcher is matched by
+        the URL's path portion.
+        """
+        return pulumi.get(self, "default_service")
+
+    @property
+    @pulumi.getter(name="defaultUrlRedirect")
+    def default_url_redirect(self) -> Optional['outputs.RegionUrlMapPathMatcherDefaultUrlRedirect']:
+        """
+        When none of the specified hostRules match, the request is redirected to a URL specified
+        by defaultUrlRedirect. If defaultUrlRedirect is specified, defaultService or
+        defaultRouteAction must not be set.
+        Structure is documented below.
+        """
+        return pulumi.get(self, "default_url_redirect")
+
+    @property
+    @pulumi.getter
+    def description(self) -> Optional[builtins.str]:
+        """
+        An optional description of this resource.
+        """
+        return pulumi.get(self, "description")
+
+    @property
+    @pulumi.getter(name="pathRules")
+    def path_rules(self) -> Optional[Sequence['outputs.RegionUrlMapPathMatcherPathRule']]:
+        """
+        The list of path rules. Use this list instead of routeRules when routing based
+        on simple path matching is all that's required. The order by which path rules
+        are specified does not matter. Matches are always done on the longest-path-first
+        basis. For example: a pathRule with a path /a/b/c/* will match before /a/b/*
+        irrespective of the order in which those paths appear in this list. Within a
+        given pathMatcher, only one of pathRules or routeRules must be set.
+        Structure is documented below.
+        """
+        return pulumi.get(self, "path_rules")
+
+    @property
+    @pulumi.getter(name="routeRules")
+    def route_rules(self) -> Optional[Sequence['outputs.RegionUrlMapPathMatcherRouteRule']]:
+        """
+        The list of ordered HTTP route rules. Use this list instead of pathRules when
+        advanced route matching and routing actions are desired. The order of specifying
+        routeRules matters: the first rule that matches will cause its specified routing
+        action to take effect. Within a given pathMatcher, only one of pathRules or
+        routeRules must be set. routeRules are not supported in UrlMaps intended for
+        External load balancers.
+        Structure is documented below.
+        """
+        return pulumi.get(self, "route_rules")
+
+
+@pulumi.output_type
+class RegionUrlMapPathMatcherDefaultRouteAction(dict):
+    @staticmethod
+    def __key_warning(key: str):
+        suggest = None
+        if key == "corsPolicy":
+            suggest = "cors_policy"
+        elif key == "faultInjectionPolicy":
+            suggest = "fault_injection_policy"
+        elif key == "maxStreamDuration":
+            suggest = "max_stream_duration"
+        elif key == "requestMirrorPolicy":
+            suggest = "request_mirror_policy"
+        elif key == "retryPolicy":
+            suggest = "retry_policy"
+        elif key == "urlRewrite":
+            suggest = "url_rewrite"
+        elif key == "weightedBackendServices":
+            suggest = "weighted_backend_services"
+
+        if suggest:
+            pulumi.log.warn(f"Key '{key}' not found in RegionUrlMapPathMatcherDefaultRouteAction. Access the value via the '{suggest}' property getter instead.")
+
+    def __getitem__(self, key: str) -> Any:
+        RegionUrlMapPathMatcherDefaultRouteAction.__key_warning(key)
+        return super().__getitem__(key)
+
+    def get(self, key: str, default = None) -> Any:
+        RegionUrlMapPathMatcherDefaultRouteAction.__key_warning(key)
+        return super().get(key, default)
+
+    def __init__(__self__, *,
+                 cors_policy: Optional['outputs.RegionUrlMapPathMatcherDefaultRouteActionCorsPolicy'] = None,
+                 fault_injection_policy: Optional['outputs.RegionUrlMapPathMatcherDefaultRouteActionFaultInjectionPolicy'] = None,
+                 max_stream_duration: Optional['outputs.RegionUrlMapPathMatcherDefaultRouteActionMaxStreamDuration'] = None,
+                 request_mirror_policy: Optional['outputs.RegionUrlMapPathMatcherDefaultRouteActionRequestMirrorPolicy'] = None,
+                 retry_policy: Optional['outputs.RegionUrlMapPathMatcherDefaultRouteActionRetryPolicy'] = None,
+                 timeout: Optional['outputs.RegionUrlMapPathMatcherDefaultRouteActionTimeout'] = None,
+                 url_rewrite: Optional['outputs.RegionUrlMapPathMatcherDefaultRouteActionUrlRewrite'] = None,
+                 weighted_backend_services: Optional[Sequence['outputs.RegionUrlMapPathMatcherDefaultRouteActionWeightedBackendService']] = None):
+        """
+        :param 'RegionUrlMapPathMatcherDefaultRouteActionCorsPolicyArgs' cors_policy: The specification for allowing client side cross-origin requests. Please see
+               [W3C Recommendation for Cross Origin Resource Sharing](https://www.w3.org/TR/cors/)
+               Structure is documented below.
+        :param 'RegionUrlMapPathMatcherDefaultRouteActionFaultInjectionPolicyArgs' fault_injection_policy: The specification for fault injection introduced into traffic to test the resiliency of clients to backend service failure.
+               As part of fault injection, when clients send requests to a backend service, delays can be introduced by a load balancer on a percentage of requests before sending those requests to the backend service.
+               Similarly requests from clients can be aborted by the load balancer for a percentage of requests.
+               timeout and retryPolicy is ignored by clients that are configured with a faultInjectionPolicy if: 1. The traffic is generated by fault injection AND 2. The fault injection is not a delay fault injection.
+               Fault injection is not supported with the global external HTTP(S) load balancer (classic). To see which load balancers support fault injection, see Load balancing: [Routing and traffic management features](https://cloud.google.com/load-balancing/docs/features#routing-traffic-management).
+               Structure is documented below.
+        :param 'RegionUrlMapPathMatcherDefaultRouteActionMaxStreamDurationArgs' max_stream_duration: Specifies the maximum duration (timeout) for streams on the selected route.
+               Unlike the `Timeout` field where the timeout duration starts from the time the request
+               has been fully processed (known as end-of-stream), the duration in this field
+               is computed from the beginning of the stream until the response has been processed,
+               including all retries. A stream that does not complete in this duration is closed.
+               Structure is documented below.
+        :param 'RegionUrlMapPathMatcherDefaultRouteActionRequestMirrorPolicyArgs' request_mirror_policy: Specifies the policy on how requests intended for the route's backends are shadowed to a separate mirrored backend service.
+               The load balancer does not wait for responses from the shadow service. Before sending traffic to the shadow service, the host / authority header is suffixed with -shadow.
+               Not supported when the URL map is bound to a target gRPC proxy that has the validateForProxyless field set to true.
+               Structure is documented below.
+        :param 'RegionUrlMapPathMatcherDefaultRouteActionRetryPolicyArgs' retry_policy: Specifies the retry policy associated with this route.
+               Structure is documented below.
+        :param 'RegionUrlMapPathMatcherDefaultRouteActionTimeoutArgs' timeout: Specifies the timeout for the selected route. Timeout is computed from the time the request has been fully processed (known as end-of-stream) up until the response has been processed. Timeout includes all retries.
+               If not specified, this field uses the largest timeout among all backend services associated with the route.
+               Not supported when the URL map is bound to a target gRPC proxy that has validateForProxyless field set to true.
+               Structure is documented below.
+        :param 'RegionUrlMapPathMatcherDefaultRouteActionUrlRewriteArgs' url_rewrite: The spec to modify the URL of the request, before forwarding the request to the matched service.
+               urlRewrite is the only action supported in UrlMaps for external HTTP(S) load balancers.
+               Not supported when the URL map is bound to a target gRPC proxy that has the validateForProxyless field set to true.
+               Structure is documented below.
+        :param Sequence['RegionUrlMapPathMatcherDefaultRouteActionWeightedBackendServiceArgs'] weighted_backend_services: A list of weighted backend services to send traffic to when a route match occurs. The weights determine the fraction of traffic that flows to their corresponding backend service. If all traffic needs to go to a single backend service, there must be one weightedBackendService with weight set to a non-zero number.
+               After a backend service is identified and before forwarding the request to the backend service, advanced routing actions such as URL rewrites and header transformations are applied depending on additional settings specified in this HttpRouteAction.
+               Structure is documented below.
+        """
+        if cors_policy is not None:
+            pulumi.set(__self__, "cors_policy", cors_policy)
+        if fault_injection_policy is not None:
+            pulumi.set(__self__, "fault_injection_policy", fault_injection_policy)
+        if max_stream_duration is not None:
+            pulumi.set(__self__, "max_stream_duration", max_stream_duration)
+        if request_mirror_policy is not None:
+            pulumi.set(__self__, "request_mirror_policy", request_mirror_policy)
+        if retry_policy is not None:
+            pulumi.set(__self__, "retry_policy", retry_policy)
+        if timeout is not None:
+            pulumi.set(__self__, "timeout", timeout)
+        if url_rewrite is not None:
+            pulumi.set(__self__, "url_rewrite", url_rewrite)
+        if weighted_backend_services is not None:
+            pulumi.set(__self__, "weighted_backend_services", weighted_backend_services)
+
+    @property
+    @pulumi.getter(name="corsPolicy")
+    def cors_policy(self) -> Optional['outputs.RegionUrlMapPathMatcherDefaultRouteActionCorsPolicy']:
+        """
+        The specification for allowing client side cross-origin requests. Please see
+        [W3C Recommendation for Cross Origin Resource Sharing](https://www.w3.org/TR/cors/)
+        Structure is documented below.
+        """
+        return pulumi.get(self, "cors_policy")
+
+    @property
+    @pulumi.getter(name="faultInjectionPolicy")
+    def fault_injection_policy(self) -> Optional['outputs.RegionUrlMapPathMatcherDefaultRouteActionFaultInjectionPolicy']:
+        """
+        The specification for fault injection introduced into traffic to test the resiliency of clients to backend service failure.
+        As part of fault injection, when clients send requests to a backend service, delays can be introduced by a load balancer on a percentage of requests before sending those requests to the backend service.
+        Similarly requests from clients can be aborted by the load balancer for a percentage of requests.
+        timeout and retryPolicy is ignored by clients that are configured with a faultInjectionPolicy if: 1. The traffic is generated by fault injection AND 2. The fault injection is not a delay fault injection.
+        Fault injection is not supported with the global external HTTP(S) load balancer (classic). To see which load balancers support fault injection, see Load balancing: [Routing and traffic management features](https://cloud.google.com/load-balancing/docs/features#routing-traffic-management).
+        Structure is documented below.
+        """
+        return pulumi.get(self, "fault_injection_policy")
+
+    @property
+    @pulumi.getter(name="maxStreamDuration")
+    def max_stream_duration(self) -> Optional['outputs.RegionUrlMapPathMatcherDefaultRouteActionMaxStreamDuration']:
+        """
+        Specifies the maximum duration (timeout) for streams on the selected route.
+        Unlike the `Timeout` field where the timeout duration starts from the time the request
+        has been fully processed (known as end-of-stream), the duration in this field
+        is computed from the beginning of the stream until the response has been processed,
+        including all retries. A stream that does not complete in this duration is closed.
+        Structure is documented below.
+        """
+        return pulumi.get(self, "max_stream_duration")
+
+    @property
+    @pulumi.getter(name="requestMirrorPolicy")
+    def request_mirror_policy(self) -> Optional['outputs.RegionUrlMapPathMatcherDefaultRouteActionRequestMirrorPolicy']:
+        """
+        Specifies the policy on how requests intended for the route's backends are shadowed to a separate mirrored backend service.
+        The load balancer does not wait for responses from the shadow service. Before sending traffic to the shadow service, the host / authority header is suffixed with -shadow.
+        Not supported when the URL map is bound to a target gRPC proxy that has the validateForProxyless field set to true.
+        Structure is documented below.
+        """
+        return pulumi.get(self, "request_mirror_policy")
+
+    @property
+    @pulumi.getter(name="retryPolicy")
+    def retry_policy(self) -> Optional['outputs.RegionUrlMapPathMatcherDefaultRouteActionRetryPolicy']:
+        """
+        Specifies the retry policy associated with this route.
+        Structure is documented below.
+        """
+        return pulumi.get(self, "retry_policy")
+
+    @property
+    @pulumi.getter
+    def timeout(self) -> Optional['outputs.RegionUrlMapPathMatcherDefaultRouteActionTimeout']:
+        """
+        Specifies the timeout for the selected route. Timeout is computed from the time the request has been fully processed (known as end-of-stream) up until the response has been processed. Timeout includes all retries.
+        If not specified, this field uses the largest timeout among all backend services associated with the route.
+        Not supported when the URL map is bound to a target gRPC proxy that has validateForProxyless field set to true.
+        Structure is documented below.
+        """
+        return pulumi.get(self, "timeout")
+
+    @property
+    @pulumi.getter(name="urlRewrite")
+    def url_rewrite(self) -> Optional['outputs.RegionUrlMapPathMatcherDefaultRouteActionUrlRewrite']:
+        """
+        The spec to modify the URL of the request, before forwarding the request to the matched service.
+        urlRewrite is the only action supported in UrlMaps for external HTTP(S) load balancers.
+        Not supported when the URL map is bound to a target gRPC proxy that has the validateForProxyless field set to true.
+        Structure is documented below.
+        """
+        return pulumi.get(self, "url_rewrite")
+
+    @property
+    @pulumi.getter(name="weightedBackendServices")
+    def weighted_backend_services(self) -> Optional[Sequence['outputs.RegionUrlMapPathMatcherDefaultRouteActionWeightedBackendService']]:
+        """
+        A list of weighted backend services to send traffic to when a route match occurs. The weights determine the fraction of traffic that flows to their corresponding backend service. If all traffic needs to go to a single backend service, there must be one weightedBackendService with weight set to a non-zero number.
+        After a backend service is identified and before forwarding the request to the backend service, advanced routing actions such as URL rewrites and header transformations are applied depending on additional settings specified in this HttpRouteAction.
+        Structure is documented below.
+        """
+        return pulumi.get(self, "weighted_backend_services")
+
+
+@pulumi.output_type
+class RegionUrlMapPathMatcherDefaultRouteActionCorsPolicy(dict):
+    @staticmethod
+    def __key_warning(key: str):
+        suggest = None
+        if key == "allowCredentials":
+            suggest = "allow_credentials"
+        elif key == "allowHeaders":
+            suggest = "allow_headers"
+        elif key == "allowMethods":
+            suggest = "allow_methods"
+        elif key == "allowOriginRegexes":
+            suggest = "allow_origin_regexes"
+        elif key == "allowOrigins":
+            suggest = "allow_origins"
+        elif key == "exposeHeaders":
+            suggest = "expose_headers"
+        elif key == "maxAge":
+            suggest = "max_age"
+
+        if suggest:
+            pulumi.log.warn(f"Key '{key}' not found in RegionUrlMapPathMatcherDefaultRouteActionCorsPolicy. Access the value via the '{suggest}' property getter instead.")
+
+    def __getitem__(self, key: str) -> Any:
+        RegionUrlMapPathMatcherDefaultRouteActionCorsPolicy.__key_warning(key)
+        return super().__getitem__(key)
+
+    def get(self, key: str, default = None) -> Any:
+        RegionUrlMapPathMatcherDefaultRouteActionCorsPolicy.__key_warning(key)
+        return super().get(key, default)
+
+    def __init__(__self__, *,
+                 allow_credentials: Optional[builtins.bool] = None,
+                 allow_headers: Optional[Sequence[builtins.str]] = None,
+                 allow_methods: Optional[Sequence[builtins.str]] = None,
+                 allow_origin_regexes: Optional[Sequence[builtins.str]] = None,
+                 allow_origins: Optional[Sequence[builtins.str]] = None,
+                 disabled: Optional[builtins.bool] = None,
+                 expose_headers: Optional[Sequence[builtins.str]] = None,
+                 max_age: Optional[builtins.int] = None):
+        """
+        :param builtins.bool allow_credentials: In response to a preflight request, setting this to true indicates that the actual request can include user credentials. This field translates to the Access-Control-Allow-Credentials header.
+               Default is false.
+        :param Sequence[builtins.str] allow_headers: Specifies the content for the Access-Control-Allow-Headers header.
+        :param Sequence[builtins.str] allow_methods: Specifies the content for the Access-Control-Allow-Methods header.
+        :param Sequence[builtins.str] allow_origin_regexes: Specifies the regualar expression patterns that match allowed origins. For regular expression grammar
+               please see en.cppreference.com/w/cpp/regex/ecmascript
+               An origin is allowed if it matches either an item in allowOrigins or an item in allowOriginRegexes.
+        :param Sequence[builtins.str] allow_origins: Specifies the list of origins that will be allowed to do CORS requests.
+               An origin is allowed if it matches either an item in allowOrigins or an item in allowOriginRegexes.
+        :param builtins.bool disabled: If true, the setting specifies the CORS policy is disabled. The default value of false, which indicates that the CORS policy is in effect.
+        :param Sequence[builtins.str] expose_headers: Specifies the content for the Access-Control-Expose-Headers header.
+        :param builtins.int max_age: Specifies how long results of a preflight request can be cached in seconds.
+               This translates to the Access-Control-Max-Age header.
+        """
+        if allow_credentials is not None:
+            pulumi.set(__self__, "allow_credentials", allow_credentials)
+        if allow_headers is not None:
+            pulumi.set(__self__, "allow_headers", allow_headers)
+        if allow_methods is not None:
+            pulumi.set(__self__, "allow_methods", allow_methods)
+        if allow_origin_regexes is not None:
+            pulumi.set(__self__, "allow_origin_regexes", allow_origin_regexes)
+        if allow_origins is not None:
+            pulumi.set(__self__, "allow_origins", allow_origins)
+        if disabled is not None:
+            pulumi.set(__self__, "disabled", disabled)
+        if expose_headers is not None:
+            pulumi.set(__self__, "expose_headers", expose_headers)
+        if max_age is not None:
+            pulumi.set(__self__, "max_age", max_age)
+
+    @property
+    @pulumi.getter(name="allowCredentials")
+    def allow_credentials(self) -> Optional[builtins.bool]:
+        """
+        In response to a preflight request, setting this to true indicates that the actual request can include user credentials. This field translates to the Access-Control-Allow-Credentials header.
+        Default is false.
+        """
+        return pulumi.get(self, "allow_credentials")
+
+    @property
+    @pulumi.getter(name="allowHeaders")
+    def allow_headers(self) -> Optional[Sequence[builtins.str]]:
+        """
+        Specifies the content for the Access-Control-Allow-Headers header.
+        """
+        return pulumi.get(self, "allow_headers")
+
+    @property
+    @pulumi.getter(name="allowMethods")
+    def allow_methods(self) -> Optional[Sequence[builtins.str]]:
+        """
+        Specifies the content for the Access-Control-Allow-Methods header.
+        """
+        return pulumi.get(self, "allow_methods")
+
+    @property
+    @pulumi.getter(name="allowOriginRegexes")
+    def allow_origin_regexes(self) -> Optional[Sequence[builtins.str]]:
+        """
+        Specifies the regualar expression patterns that match allowed origins. For regular expression grammar
+        please see en.cppreference.com/w/cpp/regex/ecmascript
+        An origin is allowed if it matches either an item in allowOrigins or an item in allowOriginRegexes.
+        """
+        return pulumi.get(self, "allow_origin_regexes")
+
+    @property
+    @pulumi.getter(name="allowOrigins")
+    def allow_origins(self) -> Optional[Sequence[builtins.str]]:
+        """
+        Specifies the list of origins that will be allowed to do CORS requests.
+        An origin is allowed if it matches either an item in allowOrigins or an item in allowOriginRegexes.
+        """
+        return pulumi.get(self, "allow_origins")
+
+    @property
+    @pulumi.getter
+    def disabled(self) -> Optional[builtins.bool]:
+        """
+        If true, the setting specifies the CORS policy is disabled. The default value of false, which indicates that the CORS policy is in effect.
+        """
+        return pulumi.get(self, "disabled")
+
+    @property
+    @pulumi.getter(name="exposeHeaders")
+    def expose_headers(self) -> Optional[Sequence[builtins.str]]:
+        """
+        Specifies the content for the Access-Control-Expose-Headers header.
+        """
+        return pulumi.get(self, "expose_headers")
+
+    @property
+    @pulumi.getter(name="maxAge")
+    def max_age(self) -> Optional[builtins.int]:
+        """
+        Specifies how long results of a preflight request can be cached in seconds.
+        This translates to the Access-Control-Max-Age header.
+        """
+        return pulumi.get(self, "max_age")
+
+
+@pulumi.output_type
+class RegionUrlMapPathMatcherDefaultRouteActionFaultInjectionPolicy(dict):
+    def __init__(__self__, *,
+                 abort: Optional['outputs.RegionUrlMapPathMatcherDefaultRouteActionFaultInjectionPolicyAbort'] = None,
+                 delay: Optional['outputs.RegionUrlMapPathMatcherDefaultRouteActionFaultInjectionPolicyDelay'] = None):
+        """
+        :param 'RegionUrlMapPathMatcherDefaultRouteActionFaultInjectionPolicyAbortArgs' abort: The specification for how client requests are aborted as part of fault injection.
+               Structure is documented below.
+        :param 'RegionUrlMapPathMatcherDefaultRouteActionFaultInjectionPolicyDelayArgs' delay: The specification for how client requests are delayed as part of fault injection, before being sent to a backend service.
+               Structure is documented below.
+        """
+        if abort is not None:
+            pulumi.set(__self__, "abort", abort)
+        if delay is not None:
+            pulumi.set(__self__, "delay", delay)
+
+    @property
+    @pulumi.getter
+    def abort(self) -> Optional['outputs.RegionUrlMapPathMatcherDefaultRouteActionFaultInjectionPolicyAbort']:
+        """
+        The specification for how client requests are aborted as part of fault injection.
+        Structure is documented below.
+        """
+        return pulumi.get(self, "abort")
+
+    @property
+    @pulumi.getter
+    def delay(self) -> Optional['outputs.RegionUrlMapPathMatcherDefaultRouteActionFaultInjectionPolicyDelay']:
+        """
+        The specification for how client requests are delayed as part of fault injection, before being sent to a backend service.
+        Structure is documented below.
+        """
+        return pulumi.get(self, "delay")
+
+
+@pulumi.output_type
+class RegionUrlMapPathMatcherDefaultRouteActionFaultInjectionPolicyAbort(dict):
+    @staticmethod
+    def __key_warning(key: str):
+        suggest = None
+        if key == "httpStatus":
+            suggest = "http_status"
+
+        if suggest:
+            pulumi.log.warn(f"Key '{key}' not found in RegionUrlMapPathMatcherDefaultRouteActionFaultInjectionPolicyAbort. Access the value via the '{suggest}' property getter instead.")
+
+    def __getitem__(self, key: str) -> Any:
+        RegionUrlMapPathMatcherDefaultRouteActionFaultInjectionPolicyAbort.__key_warning(key)
+        return super().__getitem__(key)
+
+    def get(self, key: str, default = None) -> Any:
+        RegionUrlMapPathMatcherDefaultRouteActionFaultInjectionPolicyAbort.__key_warning(key)
+        return super().get(key, default)
+
+    def __init__(__self__, *,
+                 http_status: Optional[builtins.int] = None,
+                 percentage: Optional[builtins.float] = None):
+        """
+        :param builtins.int http_status: The HTTP status code used to abort the request.
+               The value must be between 200 and 599 inclusive.
+        :param builtins.float percentage: The percentage of traffic (connections/operations/requests) which will be aborted as part of fault injection.
+               The value must be between 0.0 and 100.0 inclusive.
+        """
+        if http_status is not None:
+            pulumi.set(__self__, "http_status", http_status)
+        if percentage is not None:
+            pulumi.set(__self__, "percentage", percentage)
+
+    @property
+    @pulumi.getter(name="httpStatus")
+    def http_status(self) -> Optional[builtins.int]:
+        """
+        The HTTP status code used to abort the request.
+        The value must be between 200 and 599 inclusive.
+        """
+        return pulumi.get(self, "http_status")
+
+    @property
+    @pulumi.getter
+    def percentage(self) -> Optional[builtins.float]:
+        """
+        The percentage of traffic (connections/operations/requests) which will be aborted as part of fault injection.
+        The value must be between 0.0 and 100.0 inclusive.
+        """
+        return pulumi.get(self, "percentage")
+
+
+@pulumi.output_type
+class RegionUrlMapPathMatcherDefaultRouteActionFaultInjectionPolicyDelay(dict):
+    @staticmethod
+    def __key_warning(key: str):
+        suggest = None
+        if key == "fixedDelay":
+            suggest = "fixed_delay"
+
+        if suggest:
+            pulumi.log.warn(f"Key '{key}' not found in RegionUrlMapPathMatcherDefaultRouteActionFaultInjectionPolicyDelay. Access the value via the '{suggest}' property getter instead.")
+
+    def __getitem__(self, key: str) -> Any:
+        RegionUrlMapPathMatcherDefaultRouteActionFaultInjectionPolicyDelay.__key_warning(key)
+        return super().__getitem__(key)
+
+    def get(self, key: str, default = None) -> Any:
+        RegionUrlMapPathMatcherDefaultRouteActionFaultInjectionPolicyDelay.__key_warning(key)
+        return super().get(key, default)
+
+    def __init__(__self__, *,
+                 fixed_delay: Optional['outputs.RegionUrlMapPathMatcherDefaultRouteActionFaultInjectionPolicyDelayFixedDelay'] = None,
+                 percentage: Optional[builtins.float] = None):
+        """
+        :param 'RegionUrlMapPathMatcherDefaultRouteActionFaultInjectionPolicyDelayFixedDelayArgs' fixed_delay: Specifies the value of the fixed delay interval.
+               Structure is documented below.
+        :param builtins.float percentage: The percentage of traffic (connections/operations/requests) on which delay will be introduced as part of fault injection.
+               The value must be between 0.0 and 100.0 inclusive.
+        """
+        if fixed_delay is not None:
+            pulumi.set(__self__, "fixed_delay", fixed_delay)
+        if percentage is not None:
+            pulumi.set(__self__, "percentage", percentage)
+
+    @property
+    @pulumi.getter(name="fixedDelay")
+    def fixed_delay(self) -> Optional['outputs.RegionUrlMapPathMatcherDefaultRouteActionFaultInjectionPolicyDelayFixedDelay']:
+        """
+        Specifies the value of the fixed delay interval.
+        Structure is documented below.
+        """
+        return pulumi.get(self, "fixed_delay")
+
+    @property
+    @pulumi.getter
+    def percentage(self) -> Optional[builtins.float]:
+        """
+        The percentage of traffic (connections/operations/requests) on which delay will be introduced as part of fault injection.
+        The value must be between 0.0 and 100.0 inclusive.
+        """
+        return pulumi.get(self, "percentage")
+
+
+@pulumi.output_type
+class RegionUrlMapPathMatcherDefaultRouteActionFaultInjectionPolicyDelayFixedDelay(dict):
+    def __init__(__self__, *,
+                 nanos: Optional[builtins.int] = None,
+                 seconds: Optional[builtins.str] = None):
+        """
+        :param builtins.int nanos: Span of time that's a fraction of a second at nanosecond resolution. Durations less than one second are
+               represented with a 0 seconds field and a positive nanos field. Must be from 0 to 999,999,999 inclusive.
+        :param builtins.str seconds: Span of time at a resolution of a second. Must be from 0 to 315,576,000,000 inclusive.
+               Note: these bounds are computed from: 60 sec/min * 60 min/hr * 24 hr/day * 365.25 days/year * 10000 years
+        """
+        if nanos is not None:
+            pulumi.set(__self__, "nanos", nanos)
+        if seconds is not None:
+            pulumi.set(__self__, "seconds", seconds)
+
+    @property
+    @pulumi.getter
+    def nanos(self) -> Optional[builtins.int]:
+        """
+        Span of time that's a fraction of a second at nanosecond resolution. Durations less than one second are
+        represented with a 0 seconds field and a positive nanos field. Must be from 0 to 999,999,999 inclusive.
+        """
+        return pulumi.get(self, "nanos")
+
+    @property
+    @pulumi.getter
+    def seconds(self) -> Optional[builtins.str]:
+        """
+        Span of time at a resolution of a second. Must be from 0 to 315,576,000,000 inclusive.
+        Note: these bounds are computed from: 60 sec/min * 60 min/hr * 24 hr/day * 365.25 days/year * 10000 years
+        """
+        return pulumi.get(self, "seconds")
+
+
+@pulumi.output_type
+class RegionUrlMapPathMatcherDefaultRouteActionMaxStreamDuration(dict):
+    def __init__(__self__, *,
+                 seconds: builtins.str,
+                 nanos: Optional[builtins.int] = None):
+        """
+        :param builtins.str seconds: Span of time at a resolution of a second. Must be from 0 to 315,576,000,000 inclusive.
+               Note: these bounds are computed from: 60 sec/min * 60 min/hr * 24 hr/day * 365.25 days/year * 10000 years
+        :param builtins.int nanos: Span of time that's a fraction of a second at nanosecond resolution. Durations less than one second are represented
+               with a 0 seconds field and a positive nanos field. Must be from 0 to 999,999,999 inclusive.
+        """
+        pulumi.set(__self__, "seconds", seconds)
+        if nanos is not None:
+            pulumi.set(__self__, "nanos", nanos)
+
+    @property
+    @pulumi.getter
+    def seconds(self) -> builtins.str:
+        """
+        Span of time at a resolution of a second. Must be from 0 to 315,576,000,000 inclusive.
+        Note: these bounds are computed from: 60 sec/min * 60 min/hr * 24 hr/day * 365.25 days/year * 10000 years
+        """
+        return pulumi.get(self, "seconds")
+
+    @property
+    @pulumi.getter
+    def nanos(self) -> Optional[builtins.int]:
+        """
+        Span of time that's a fraction of a second at nanosecond resolution. Durations less than one second are represented
+        with a 0 seconds field and a positive nanos field. Must be from 0 to 999,999,999 inclusive.
+        """
+        return pulumi.get(self, "nanos")
+
+
+@pulumi.output_type
+class RegionUrlMapPathMatcherDefaultRouteActionRequestMirrorPolicy(dict):
+    @staticmethod
+    def __key_warning(key: str):
+        suggest = None
+        if key == "backendService":
+            suggest = "backend_service"
+
+        if suggest:
+            pulumi.log.warn(f"Key '{key}' not found in RegionUrlMapPathMatcherDefaultRouteActionRequestMirrorPolicy. Access the value via the '{suggest}' property getter instead.")
+
+    def __getitem__(self, key: str) -> Any:
+        RegionUrlMapPathMatcherDefaultRouteActionRequestMirrorPolicy.__key_warning(key)
+        return super().__getitem__(key)
+
+    def get(self, key: str, default = None) -> Any:
+        RegionUrlMapPathMatcherDefaultRouteActionRequestMirrorPolicy.__key_warning(key)
+        return super().get(key, default)
+
+    def __init__(__self__, *,
+                 backend_service: builtins.str):
+        """
+        :param builtins.str backend_service: The full or partial URL to the RegionBackendService resource being mirrored to.
+               The backend service configured for a mirroring policy must reference backends that are of the same type as the original backend service matched in the URL map.
+               Serverless NEG backends are not currently supported as a mirrored backend service.
+        """
+        pulumi.set(__self__, "backend_service", backend_service)
+
+    @property
+    @pulumi.getter(name="backendService")
+    def backend_service(self) -> builtins.str:
+        """
+        The full or partial URL to the RegionBackendService resource being mirrored to.
+        The backend service configured for a mirroring policy must reference backends that are of the same type as the original backend service matched in the URL map.
+        Serverless NEG backends are not currently supported as a mirrored backend service.
+        """
+        return pulumi.get(self, "backend_service")
+
+
+@pulumi.output_type
+class RegionUrlMapPathMatcherDefaultRouteActionRetryPolicy(dict):
+    @staticmethod
+    def __key_warning(key: str):
+        suggest = None
+        if key == "numRetries":
+            suggest = "num_retries"
+        elif key == "perTryTimeout":
+            suggest = "per_try_timeout"
+        elif key == "retryConditions":
+            suggest = "retry_conditions"
+
+        if suggest:
+            pulumi.log.warn(f"Key '{key}' not found in RegionUrlMapPathMatcherDefaultRouteActionRetryPolicy. Access the value via the '{suggest}' property getter instead.")
+
+    def __getitem__(self, key: str) -> Any:
+        RegionUrlMapPathMatcherDefaultRouteActionRetryPolicy.__key_warning(key)
+        return super().__getitem__(key)
+
+    def get(self, key: str, default = None) -> Any:
+        RegionUrlMapPathMatcherDefaultRouteActionRetryPolicy.__key_warning(key)
+        return super().get(key, default)
+
+    def __init__(__self__, *,
+                 num_retries: Optional[builtins.int] = None,
+                 per_try_timeout: Optional['outputs.RegionUrlMapPathMatcherDefaultRouteActionRetryPolicyPerTryTimeout'] = None,
+                 retry_conditions: Optional[Sequence[builtins.str]] = None):
+        """
+        :param builtins.int num_retries: Specifies the allowed number retries. This number must be > 0. If not specified, defaults to 1.
+        :param 'RegionUrlMapPathMatcherDefaultRouteActionRetryPolicyPerTryTimeoutArgs' per_try_timeout: Specifies a non-zero timeout per retry attempt.
+               If not specified, will use the timeout set in HttpRouteAction. If timeout in HttpRouteAction is not set,
+               will use the largest timeout among all backend services associated with the route.
+               Structure is documented below.
+        :param Sequence[builtins.str] retry_conditions: Specifies one or more conditions when this retry policy applies.
+               Valid values are listed below. Only the following codes are supported when the URL map is bound to target gRPC proxy that has validateForProxyless field set to true: cancelled, deadline-exceeded, internal, resource-exhausted, unavailable.
+               - 5xx : retry is attempted if the instance or endpoint responds with any 5xx response code, or if the instance or endpoint does not respond at all. For example, disconnects, reset, read timeout, connection failure, and refused streams.
+               - gateway-error : Similar to 5xx, but only applies to response codes 502, 503 or 504.
+               - connect-failure : a retry is attempted on failures connecting to the instance or endpoint. For example, connection timeouts.
+               - retriable-4xx : a retry is attempted if the instance or endpoint responds with a 4xx response code. The only error that you can retry is error code 409.
+               - refused-stream : a retry is attempted if the instance or endpoint resets the stream with a REFUSED_STREAM error code. This reset type indicates that it is safe to retry.
+               - cancelled : a retry is attempted if the gRPC status code in the response header is set to cancelled.
+               - deadline-exceeded : a retry is attempted if the gRPC status code in the response header is set to deadline-exceeded.
+               - internal :  a retry is attempted if the gRPC status code in the response header is set to internal.
+               - resource-exhausted : a retry is attempted if the gRPC status code in the response header is set to resource-exhausted.
+               - unavailable : a retry is attempted if the gRPC status code in the response header is set to unavailable.
+        """
+        if num_retries is not None:
+            pulumi.set(__self__, "num_retries", num_retries)
+        if per_try_timeout is not None:
+            pulumi.set(__self__, "per_try_timeout", per_try_timeout)
+        if retry_conditions is not None:
+            pulumi.set(__self__, "retry_conditions", retry_conditions)
+
+    @property
+    @pulumi.getter(name="numRetries")
+    def num_retries(self) -> Optional[builtins.int]:
+        """
+        Specifies the allowed number retries. This number must be > 0. If not specified, defaults to 1.
+        """
+        return pulumi.get(self, "num_retries")
+
+    @property
+    @pulumi.getter(name="perTryTimeout")
+    def per_try_timeout(self) -> Optional['outputs.RegionUrlMapPathMatcherDefaultRouteActionRetryPolicyPerTryTimeout']:
+        """
+        Specifies a non-zero timeout per retry attempt.
+        If not specified, will use the timeout set in HttpRouteAction. If timeout in HttpRouteAction is not set,
+        will use the largest timeout among all backend services associated with the route.
+        Structure is documented below.
+        """
+        return pulumi.get(self, "per_try_timeout")
+
+    @property
+    @pulumi.getter(name="retryConditions")
+    def retry_conditions(self) -> Optional[Sequence[builtins.str]]:
+        """
+        Specifies one or more conditions when this retry policy applies.
+        Valid values are listed below. Only the following codes are supported when the URL map is bound to target gRPC proxy that has validateForProxyless field set to true: cancelled, deadline-exceeded, internal, resource-exhausted, unavailable.
+        - 5xx : retry is attempted if the instance or endpoint responds with any 5xx response code, or if the instance or endpoint does not respond at all. For example, disconnects, reset, read timeout, connection failure, and refused streams.
+        - gateway-error : Similar to 5xx, but only applies to response codes 502, 503 or 504.
+        - connect-failure : a retry is attempted on failures connecting to the instance or endpoint. For example, connection timeouts.
+        - retriable-4xx : a retry is attempted if the instance or endpoint responds with a 4xx response code. The only error that you can retry is error code 409.
+        - refused-stream : a retry is attempted if the instance or endpoint resets the stream with a REFUSED_STREAM error code. This reset type indicates that it is safe to retry.
+        - cancelled : a retry is attempted if the gRPC status code in the response header is set to cancelled.
+        - deadline-exceeded : a retry is attempted if the gRPC status code in the response header is set to deadline-exceeded.
+        - internal :  a retry is attempted if the gRPC status code in the response header is set to internal.
+        - resource-exhausted : a retry is attempted if the gRPC status code in the response header is set to resource-exhausted.
+        - unavailable : a retry is attempted if the gRPC status code in the response header is set to unavailable.
+        """
+        return pulumi.get(self, "retry_conditions")
+
+
+@pulumi.output_type
+class RegionUrlMapPathMatcherDefaultRouteActionRetryPolicyPerTryTimeout(dict):
+    def __init__(__self__, *,
+                 nanos: Optional[builtins.int] = None,
+                 seconds: Optional[builtins.str] = None):
+        """
+        :param builtins.int nanos: Span of time that's a fraction of a second at nanosecond resolution. Durations less than one second are
+               represented with a 0 seconds field and a positive nanos field. Must be from 0 to 999,999,999 inclusive.
+        :param builtins.str seconds: Span of time at a resolution of a second. Must be from 0 to 315,576,000,000 inclusive.
+               Note: these bounds are computed from: 60 sec/min * 60 min/hr * 24 hr/day * 365.25 days/year * 10000 years
+        """
+        if nanos is not None:
+            pulumi.set(__self__, "nanos", nanos)
+        if seconds is not None:
+            pulumi.set(__self__, "seconds", seconds)
+
+    @property
+    @pulumi.getter
+    def nanos(self) -> Optional[builtins.int]:
+        """
+        Span of time that's a fraction of a second at nanosecond resolution. Durations less than one second are
+        represented with a 0 seconds field and a positive nanos field. Must be from 0 to 999,999,999 inclusive.
+        """
+        return pulumi.get(self, "nanos")
+
+    @property
+    @pulumi.getter
+    def seconds(self) -> Optional[builtins.str]:
+        """
+        Span of time at a resolution of a second. Must be from 0 to 315,576,000,000 inclusive.
+        Note: these bounds are computed from: 60 sec/min * 60 min/hr * 24 hr/day * 365.25 days/year * 10000 years
+        """
+        return pulumi.get(self, "seconds")
+
+
+@pulumi.output_type
+class RegionUrlMapPathMatcherDefaultRouteActionTimeout(dict):
+    def __init__(__self__, *,
+                 nanos: Optional[builtins.int] = None,
+                 seconds: Optional[builtins.str] = None):
+        """
+        :param builtins.int nanos: Span of time that's a fraction of a second at nanosecond resolution. Durations less than one second are represented with a 0 seconds field and a positive nanos field. Must be from 0 to 999,999,999 inclusive.
+        :param builtins.str seconds: Span of time at a resolution of a second. Must be from 0 to 315,576,000,000 inclusive. Note: these bounds are computed from: 60 sec/min * 60 min/hr * 24 hr/day * 365.25 days/year * 10000 years
+        """
+        if nanos is not None:
+            pulumi.set(__self__, "nanos", nanos)
+        if seconds is not None:
+            pulumi.set(__self__, "seconds", seconds)
+
+    @property
+    @pulumi.getter
+    def nanos(self) -> Optional[builtins.int]:
+        """
+        Span of time that's a fraction of a second at nanosecond resolution. Durations less than one second are represented with a 0 seconds field and a positive nanos field. Must be from 0 to 999,999,999 inclusive.
+        """
+        return pulumi.get(self, "nanos")
+
+    @property
+    @pulumi.getter
+    def seconds(self) -> Optional[builtins.str]:
+        """
+        Span of time at a resolution of a second. Must be from 0 to 315,576,000,000 inclusive. Note: these bounds are computed from: 60 sec/min * 60 min/hr * 24 hr/day * 365.25 days/year * 10000 years
+        """
+        return pulumi.get(self, "seconds")
+
+
+@pulumi.output_type
+class RegionUrlMapPathMatcherDefaultRouteActionUrlRewrite(dict):
+    @staticmethod
+    def __key_warning(key: str):
+        suggest = None
+        if key == "hostRewrite":
+            suggest = "host_rewrite"
+        elif key == "pathPrefixRewrite":
+            suggest = "path_prefix_rewrite"
+        elif key == "pathTemplateRewrite":
+            suggest = "path_template_rewrite"
+
+        if suggest:
+            pulumi.log.warn(f"Key '{key}' not found in RegionUrlMapPathMatcherDefaultRouteActionUrlRewrite. Access the value via the '{suggest}' property getter instead.")
 
     def __getitem__(self, key: str) -> Any:
-        RegionUrlMapPathMatcher.__key_warning(key)
+        RegionUrlMapPathMatcherDefaultRouteActionUrlRewrite.__key_warning(key)
         return super().__getitem__(key)
 
     def get(self, key: str, default = None) -> Any:
-        RegionUrlMapPathMatcher.__key_warning(key)
+        RegionUrlMapPathMatcherDefaultRouteActionUrlRewrite.__key_warning(key)
         return super().get(key, default)
 
     def __init__(__self__, *,
-                 name: builtins.str,
-                 default_service: Optional[builtins.str] = None,
-                 default_url_redirect: Optional['outputs.RegionUrlMapPathMatcherDefaultUrlRedirect'] = None,
-                 description: Optional[builtins.str] = None,
-                 path_rules: Optional[Sequence['outputs.RegionUrlMapPathMatcherPathRule']] = None,
-                 route_rules: Optional[Sequence['outputs.RegionUrlMapPathMatcherRouteRule']] = None):
+                 host_rewrite: Optional[builtins.str] = None,
+                 path_prefix_rewrite: Optional[builtins.str] = None,
+                 path_template_rewrite: Optional[builtins.str] = None):
         """
-        :param builtins.str name: The name to which this PathMatcher is referred by the HostRule.
-        :param builtins.str default_service: A reference to a RegionBackendService resource. This will be used if
-               none of the pathRules defined by this PathMatcher is matched by
-               the URL's path portion.
-        :param 'RegionUrlMapPathMatcherDefaultUrlRedirectArgs' default_url_redirect: When none of the specified hostRules match, the request is redirected to a URL specified
-               by defaultUrlRedirect. If defaultUrlRedirect is specified, defaultService or
-               defaultRouteAction must not be set.
+        :param builtins.str host_rewrite: Before forwarding the request to the selected service, the request's host header is replaced with contents of hostRewrite.
+               The value must be from 1 to 255 characters.
+        :param builtins.str path_prefix_rewrite: Before forwarding the request to the selected backend service, the matching portion of the request's path is replaced by pathPrefixRewrite.
+               The value must be from 1 to 1024 characters.
+        :param builtins.str path_template_rewrite: If specified, the pattern rewrites the URL path (based on the :path header) using the HTTP template syntax.
+               A corresponding pathTemplateMatch must be specified. Any template variables must exist in the pathTemplateMatch field.
+               * At least one variable must be specified in the pathTemplateMatch field
+               * You can omit variables from the rewritten URL
+               * The * and ** operators cannot be matched unless they have a corresponding variable name - e.g. {format=*} or {var=**}.
+               For example, a pathTemplateMatch of /static/{format=**} could be rewritten as /static/content/{format} to prefix
+               /content to the URL. Variables can also be re-ordered in a rewrite, so that /{country}/{format}/{suffix=**} can be
+               rewritten as /content/{format}/{country}/{suffix}.
+               At least one non-empty routeRules[].matchRules[].path_template_match is required.
+               Only one of pathPrefixRewrite or pathTemplateRewrite may be specified.
+        """
+        if host_rewrite is not None:
+            pulumi.set(__self__, "host_rewrite", host_rewrite)
+        if path_prefix_rewrite is not None:
+            pulumi.set(__self__, "path_prefix_rewrite", path_prefix_rewrite)
+        if path_template_rewrite is not None:
+            pulumi.set(__self__, "path_template_rewrite", path_template_rewrite)
+
+    @property
+    @pulumi.getter(name="hostRewrite")
+    def host_rewrite(self) -> Optional[builtins.str]:
+        """
+        Before forwarding the request to the selected service, the request's host header is replaced with contents of hostRewrite.
+        The value must be from 1 to 255 characters.
+        """
+        return pulumi.get(self, "host_rewrite")
+
+    @property
+    @pulumi.getter(name="pathPrefixRewrite")
+    def path_prefix_rewrite(self) -> Optional[builtins.str]:
+        """
+        Before forwarding the request to the selected backend service, the matching portion of the request's path is replaced by pathPrefixRewrite.
+        The value must be from 1 to 1024 characters.
+        """
+        return pulumi.get(self, "path_prefix_rewrite")
+
+    @property
+    @pulumi.getter(name="pathTemplateRewrite")
+    def path_template_rewrite(self) -> Optional[builtins.str]:
+        """
+        If specified, the pattern rewrites the URL path (based on the :path header) using the HTTP template syntax.
+        A corresponding pathTemplateMatch must be specified. Any template variables must exist in the pathTemplateMatch field.
+        * At least one variable must be specified in the pathTemplateMatch field
+        * You can omit variables from the rewritten URL
+        * The * and ** operators cannot be matched unless they have a corresponding variable name - e.g. {format=*} or {var=**}.
+        For example, a pathTemplateMatch of /static/{format=**} could be rewritten as /static/content/{format} to prefix
+        /content to the URL. Variables can also be re-ordered in a rewrite, so that /{country}/{format}/{suffix=**} can be
+        rewritten as /content/{format}/{country}/{suffix}.
+        At least one non-empty routeRules[].matchRules[].path_template_match is required.
+        Only one of pathPrefixRewrite or pathTemplateRewrite may be specified.
+        """
+        return pulumi.get(self, "path_template_rewrite")
+
+
+@pulumi.output_type
+class RegionUrlMapPathMatcherDefaultRouteActionWeightedBackendService(dict):
+    @staticmethod
+    def __key_warning(key: str):
+        suggest = None
+        if key == "backendService":
+            suggest = "backend_service"
+        elif key == "headerAction":
+            suggest = "header_action"
+
+        if suggest:
+            pulumi.log.warn(f"Key '{key}' not found in RegionUrlMapPathMatcherDefaultRouteActionWeightedBackendService. Access the value via the '{suggest}' property getter instead.")
+
+    def __getitem__(self, key: str) -> Any:
+        RegionUrlMapPathMatcherDefaultRouteActionWeightedBackendService.__key_warning(key)
+        return super().__getitem__(key)
+
+    def get(self, key: str, default = None) -> Any:
+        RegionUrlMapPathMatcherDefaultRouteActionWeightedBackendService.__key_warning(key)
+        return super().get(key, default)
+
+    def __init__(__self__, *,
+                 backend_service: Optional[builtins.str] = None,
+                 header_action: Optional['outputs.RegionUrlMapPathMatcherDefaultRouteActionWeightedBackendServiceHeaderAction'] = None,
+                 weight: Optional[builtins.int] = None):
+        """
+        :param builtins.str backend_service: The full or partial URL to the default BackendService resource. Before forwarding the request to backendService, the load balancer applies any relevant headerActions specified as part of this backendServiceWeight.
+        :param 'RegionUrlMapPathMatcherDefaultRouteActionWeightedBackendServiceHeaderActionArgs' header_action: Specifies changes to request and response headers that need to take effect for the selected backendService.
+               headerAction specified here take effect before headerAction in the enclosing HttpRouteRule, PathMatcher and UrlMap.
+               headerAction is not supported for load balancers that have their loadBalancingScheme set to EXTERNAL.
+               Not supported when the URL map is bound to a target gRPC proxy that has validateForProxyless field set to true.
                Structure is documented below.
-        :param builtins.str description: An optional description of this resource.
-        :param Sequence['RegionUrlMapPathMatcherPathRuleArgs'] path_rules: The list of path rules. Use this list instead of routeRules when routing based
-               on simple path matching is all that's required. The order by which path rules
-               are specified does not matter. Matches are always done on the longest-path-first
-               basis. For example: a pathRule with a path /a/b/c/* will match before /a/b/*
-               irrespective of the order in which those paths appear in this list. Within a
-               given pathMatcher, only one of pathRules or routeRules must be set.
+        :param builtins.int weight: Specifies the fraction of traffic sent to a backend service, computed as weight / (sum of all weightedBackendService weights in routeAction) .
+               The selection of a backend service is determined only for new traffic. Once a user's request has been directed to a backend service, subsequent requests are sent to the same backend service as determined by the backend service's session affinity policy.
+               The value must be from 0 to 1000.
+        """
+        if backend_service is not None:
+            pulumi.set(__self__, "backend_service", backend_service)
+        if header_action is not None:
+            pulumi.set(__self__, "header_action", header_action)
+        if weight is not None:
+            pulumi.set(__self__, "weight", weight)
+
+    @property
+    @pulumi.getter(name="backendService")
+    def backend_service(self) -> Optional[builtins.str]:
+        """
+        The full or partial URL to the default BackendService resource. Before forwarding the request to backendService, the load balancer applies any relevant headerActions specified as part of this backendServiceWeight.
+        """
+        return pulumi.get(self, "backend_service")
+
+    @property
+    @pulumi.getter(name="headerAction")
+    def header_action(self) -> Optional['outputs.RegionUrlMapPathMatcherDefaultRouteActionWeightedBackendServiceHeaderAction']:
+        """
+        Specifies changes to request and response headers that need to take effect for the selected backendService.
+        headerAction specified here take effect before headerAction in the enclosing HttpRouteRule, PathMatcher and UrlMap.
+        headerAction is not supported for load balancers that have their loadBalancingScheme set to EXTERNAL.
+        Not supported when the URL map is bound to a target gRPC proxy that has validateForProxyless field set to true.
+        Structure is documented below.
+        """
+        return pulumi.get(self, "header_action")
+
+    @property
+    @pulumi.getter
+    def weight(self) -> Optional[builtins.int]:
+        """
+        Specifies the fraction of traffic sent to a backend service, computed as weight / (sum of all weightedBackendService weights in routeAction) .
+        The selection of a backend service is determined only for new traffic. Once a user's request has been directed to a backend service, subsequent requests are sent to the same backend service as determined by the backend service's session affinity policy.
+        The value must be from 0 to 1000.
+        """
+        return pulumi.get(self, "weight")
+
+
+@pulumi.output_type
+class RegionUrlMapPathMatcherDefaultRouteActionWeightedBackendServiceHeaderAction(dict):
+    @staticmethod
+    def __key_warning(key: str):
+        suggest = None
+        if key == "requestHeadersToAdds":
+            suggest = "request_headers_to_adds"
+        elif key == "requestHeadersToRemoves":
+            suggest = "request_headers_to_removes"
+        elif key == "responseHeadersToAdds":
+            suggest = "response_headers_to_adds"
+        elif key == "responseHeadersToRemoves":
+            suggest = "response_headers_to_removes"
+
+        if suggest:
+            pulumi.log.warn(f"Key '{key}' not found in RegionUrlMapPathMatcherDefaultRouteActionWeightedBackendServiceHeaderAction. Access the value via the '{suggest}' property getter instead.")
+
+    def __getitem__(self, key: str) -> Any:
+        RegionUrlMapPathMatcherDefaultRouteActionWeightedBackendServiceHeaderAction.__key_warning(key)
+        return super().__getitem__(key)
+
+    def get(self, key: str, default = None) -> Any:
+        RegionUrlMapPathMatcherDefaultRouteActionWeightedBackendServiceHeaderAction.__key_warning(key)
+        return super().get(key, default)
+
+    def __init__(__self__, *,
+                 request_headers_to_adds: Optional[Sequence['outputs.RegionUrlMapPathMatcherDefaultRouteActionWeightedBackendServiceHeaderActionRequestHeadersToAdd']] = None,
+                 request_headers_to_removes: Optional[Sequence[builtins.str]] = None,
+                 response_headers_to_adds: Optional[Sequence['outputs.RegionUrlMapPathMatcherDefaultRouteActionWeightedBackendServiceHeaderActionResponseHeadersToAdd']] = None,
+                 response_headers_to_removes: Optional[Sequence[builtins.str]] = None):
+        """
+        :param Sequence['RegionUrlMapPathMatcherDefaultRouteActionWeightedBackendServiceHeaderActionRequestHeadersToAddArgs'] request_headers_to_adds: Headers to add to a matching request before forwarding the request to the backendService.
                Structure is documented below.
-        :param Sequence['RegionUrlMapPathMatcherRouteRuleArgs'] route_rules: The list of ordered HTTP route rules. Use this list instead of pathRules when
-               advanced route matching and routing actions are desired. The order of specifying
-               routeRules matters: the first rule that matches will cause its specified routing
-               action to take effect. Within a given pathMatcher, only one of pathRules or
-               routeRules must be set. routeRules are not supported in UrlMaps intended for
-               External load balancers.
+        :param Sequence[builtins.str] request_headers_to_removes: A list of header names for headers that need to be removed from the request before forwarding the request to the backendService.
+        :param Sequence['RegionUrlMapPathMatcherDefaultRouteActionWeightedBackendServiceHeaderActionResponseHeadersToAddArgs'] response_headers_to_adds: Headers to add the response before sending the response back to the client.
                Structure is documented below.
+        :param Sequence[builtins.str] response_headers_to_removes: A list of header names for headers that need to be removed from the response before sending the response back to the client.
         """
-        pulumi.set(__self__, "name", name)
-        if default_service is not None:
-            pulumi.set(__self__, "default_service", default_service)
-        if default_url_redirect is not None:
-            pulumi.set(__self__, "default_url_redirect", default_url_redirect)
-        if description is not None:
-            pulumi.set(__self__, "description", description)
-        if path_rules is not None:
-            pulumi.set(__self__, "path_rules", path_rules)
-        if route_rules is not None:
-            pulumi.set(__self__, "route_rules", route_rules)
+        if request_headers_to_adds is not None:
+            pulumi.set(__self__, "request_headers_to_adds", request_headers_to_adds)
+        if request_headers_to_removes is not None:
+            pulumi.set(__self__, "request_headers_to_removes", request_headers_to_removes)
+        if response_headers_to_adds is not None:
+            pulumi.set(__self__, "response_headers_to_adds", response_headers_to_adds)
+        if response_headers_to_removes is not None:
+            pulumi.set(__self__, "response_headers_to_removes", response_headers_to_removes)
 
     @property
-    @pulumi.getter
-    def name(self) -> builtins.str:
+    @pulumi.getter(name="requestHeadersToAdds")
+    def request_headers_to_adds(self) -> Optional[Sequence['outputs.RegionUrlMapPathMatcherDefaultRouteActionWeightedBackendServiceHeaderActionRequestHeadersToAdd']]:
         """
-        The name to which this PathMatcher is referred by the HostRule.
+        Headers to add to a matching request before forwarding the request to the backendService.
+        Structure is documented below.
         """
-        return pulumi.get(self, "name")
+        return pulumi.get(self, "request_headers_to_adds")
 
     @property
-    @pulumi.getter(name="defaultService")
-    def default_service(self) -> Optional[builtins.str]:
+    @pulumi.getter(name="requestHeadersToRemoves")
+    def request_headers_to_removes(self) -> Optional[Sequence[builtins.str]]:
         """
-        A reference to a RegionBackendService resource. This will be used if
-        none of the pathRules defined by this PathMatcher is matched by
-        the URL's path portion.
+        A list of header names for headers that need to be removed from the request before forwarding the request to the backendService.
         """
-        return pulumi.get(self, "default_service")
+        return pulumi.get(self, "request_headers_to_removes")
 
     @property
-    @pulumi.getter(name="defaultUrlRedirect")
-    def default_url_redirect(self) -> Optional['outputs.RegionUrlMapPathMatcherDefaultUrlRedirect']:
+    @pulumi.getter(name="responseHeadersToAdds")
+    def response_headers_to_adds(self) -> Optional[Sequence['outputs.RegionUrlMapPathMatcherDefaultRouteActionWeightedBackendServiceHeaderActionResponseHeadersToAdd']]:
         """
-        When none of the specified hostRules match, the request is redirected to a URL specified
-        by defaultUrlRedirect. If defaultUrlRedirect is specified, defaultService or
-        defaultRouteAction must not be set.
+        Headers to add the response before sending the response back to the client.
         Structure is documented below.
         """
-        return pulumi.get(self, "default_url_redirect")
+        return pulumi.get(self, "response_headers_to_adds")
+
+    @property
+    @pulumi.getter(name="responseHeadersToRemoves")
+    def response_headers_to_removes(self) -> Optional[Sequence[builtins.str]]:
+        """
+        A list of header names for headers that need to be removed from the response before sending the response back to the client.
+        """
+        return pulumi.get(self, "response_headers_to_removes")
+
+
+@pulumi.output_type
+class RegionUrlMapPathMatcherDefaultRouteActionWeightedBackendServiceHeaderActionRequestHeadersToAdd(dict):
+    @staticmethod
+    def __key_warning(key: str):
+        suggest = None
+        if key == "headerName":
+            suggest = "header_name"
+        elif key == "headerValue":
+            suggest = "header_value"
+
+        if suggest:
+            pulumi.log.warn(f"Key '{key}' not found in RegionUrlMapPathMatcherDefaultRouteActionWeightedBackendServiceHeaderActionRequestHeadersToAdd. Access the value via the '{suggest}' property getter instead.")
+
+    def __getitem__(self, key: str) -> Any:
+        RegionUrlMapPathMatcherDefaultRouteActionWeightedBackendServiceHeaderActionRequestHeadersToAdd.__key_warning(key)
+        return super().__getitem__(key)
+
+    def get(self, key: str, default = None) -> Any:
+        RegionUrlMapPathMatcherDefaultRouteActionWeightedBackendServiceHeaderActionRequestHeadersToAdd.__key_warning(key)
+        return super().get(key, default)
+
+    def __init__(__self__, *,
+                 header_name: Optional[builtins.str] = None,
+                 header_value: Optional[builtins.str] = None,
+                 replace: Optional[builtins.bool] = None):
+        """
+        :param builtins.str header_name: The name of the header.
+        :param builtins.str header_value: The value of the header to add.
+        :param builtins.bool replace: If false, headerValue is appended to any values that already exist for the header. If true, headerValue is set for the header, discarding any values that were set for that header.
+               The default value is false.
+        """
+        if header_name is not None:
+            pulumi.set(__self__, "header_name", header_name)
+        if header_value is not None:
+            pulumi.set(__self__, "header_value", header_value)
+        if replace is not None:
+            pulumi.set(__self__, "replace", replace)
+
+    @property
+    @pulumi.getter(name="headerName")
+    def header_name(self) -> Optional[builtins.str]:
+        """
+        The name of the header.
+        """
+        return pulumi.get(self, "header_name")
+
+    @property
+    @pulumi.getter(name="headerValue")
+    def header_value(self) -> Optional[builtins.str]:
+        """
+        The value of the header to add.
+        """
+        return pulumi.get(self, "header_value")
 
     @property
     @pulumi.getter
-    def description(self) -> Optional[builtins.str]:
+    def replace(self) -> Optional[builtins.bool]:
         """
-        An optional description of this resource.
+        If false, headerValue is appended to any values that already exist for the header. If true, headerValue is set for the header, discarding any values that were set for that header.
+        The default value is false.
         """
-        return pulumi.get(self, "description")
+        return pulumi.get(self, "replace")
+
+
+@pulumi.output_type
+class RegionUrlMapPathMatcherDefaultRouteActionWeightedBackendServiceHeaderActionResponseHeadersToAdd(dict):
+    @staticmethod
+    def __key_warning(key: str):
+        suggest = None
+        if key == "headerName":
+            suggest = "header_name"
+        elif key == "headerValue":
+            suggest = "header_value"
+
+        if suggest:
+            pulumi.log.warn(f"Key '{key}' not found in RegionUrlMapPathMatcherDefaultRouteActionWeightedBackendServiceHeaderActionResponseHeadersToAdd. Access the value via the '{suggest}' property getter instead.")
+
+    def __getitem__(self, key: str) -> Any:
+        RegionUrlMapPathMatcherDefaultRouteActionWeightedBackendServiceHeaderActionResponseHeadersToAdd.__key_warning(key)
+        return super().__getitem__(key)
+
+    def get(self, key: str, default = None) -> Any:
+        RegionUrlMapPathMatcherDefaultRouteActionWeightedBackendServiceHeaderActionResponseHeadersToAdd.__key_warning(key)
+        return super().get(key, default)
+
+    def __init__(__self__, *,
+                 header_name: Optional[builtins.str] = None,
+                 header_value: Optional[builtins.str] = None,
+                 replace: Optional[builtins.bool] = None):
+        """
+        :param builtins.str header_name: The name of the header.
+        :param builtins.str header_value: The value of the header to add.
+        :param builtins.bool replace: If false, headerValue is appended to any values that already exist for the header. If true, headerValue is set for the header, discarding any values that were set for that header.
+               The default value is false.
+        """
+        if header_name is not None:
+            pulumi.set(__self__, "header_name", header_name)
+        if header_value is not None:
+            pulumi.set(__self__, "header_value", header_value)
+        if replace is not None:
+            pulumi.set(__self__, "replace", replace)
 
     @property
-    @pulumi.getter(name="pathRules")
-    def path_rules(self) -> Optional[Sequence['outputs.RegionUrlMapPathMatcherPathRule']]:
+    @pulumi.getter(name="headerName")
+    def header_name(self) -> Optional[builtins.str]:
         """
-        The list of path rules. Use this list instead of routeRules when routing based
-        on simple path matching is all that's required. The order by which path rules
-        are specified does not matter. Matches are always done on the longest-path-first
-        basis. For example: a pathRule with a path /a/b/c/* will match before /a/b/*
-        irrespective of the order in which those paths appear in this list. Within a
-        given pathMatcher, only one of pathRules or routeRules must be set.
-        Structure is documented below.
+        The name of the header.
         """
-        return pulumi.get(self, "path_rules")
+        return pulumi.get(self, "header_name")
 
     @property
-    @pulumi.getter(name="routeRules")
-    def route_rules(self) -> Optional[Sequence['outputs.RegionUrlMapPathMatcherRouteRule']]:
+    @pulumi.getter(name="headerValue")
+    def header_value(self) -> Optional[builtins.str]:
         """
-        The list of ordered HTTP route rules. Use this list instead of pathRules when
-        advanced route matching and routing actions are desired. The order of specifying
-        routeRules matters: the first rule that matches will cause its specified routing
-        action to take effect. Within a given pathMatcher, only one of pathRules or
-        routeRules must be set. routeRules are not supported in UrlMaps intended for
-        External load balancers.
-        Structure is documented below.
+        The value of the header to add.
         """
-        return pulumi.get(self, "route_rules")
+        return pulumi.get(self, "header_value")
+
+    @property
+    @pulumi.getter
+    def replace(self) -> Optional[builtins.bool]:
+        """
+        If false, headerValue is appended to any values that already exist for the header. If true, headerValue is set for the header, discarding any values that were set for that header.
+        The default value is false.
+        """
+        return pulumi.get(self, "replace")
 
 
 @pulumi.output_type
@@ -41656,17 +42797,16 @@ class RegionUrlMapPathMatcherRouteRuleRouteActionUrlRewrite(dict):
                The value must be from 1 to 255 characters.
         :param builtins.str path_prefix_rewrite: Before forwarding the request to the selected backend service, the matching portion of the request's path is replaced by pathPrefixRewrite.
                The value must be from 1 to 1024 characters.
-        :param builtins.str path_template_rewrite: Prior to forwarding the request to the selected origin, if the
-               request matched a pathTemplateMatch, the matching portion of the
-               request's path is replaced re-written using the pattern specified
-               by pathTemplateRewrite.
-               pathTemplateRewrite must be between 1 and 255 characters
-               (inclusive), must start with a '/', and must only use variables
-               captured by the route's pathTemplate matchers.
-               pathTemplateRewrite may only be used when all of a route's
-               MatchRules specify pathTemplate.
-               Only one of pathPrefixRewrite and pathTemplateRewrite may be
-               specified.
+        :param builtins.str path_template_rewrite: If specified, the pattern rewrites the URL path (based on the :path header) using the HTTP template syntax.
+               A corresponding pathTemplateMatch must be specified. Any template variables must exist in the pathTemplateMatch field.
+               * At least one variable must be specified in the pathTemplateMatch field
+               * You can omit variables from the rewritten URL
+               * The * and ** operators cannot be matched unless they have a corresponding variable name - e.g. {format=*} or {var=**}.
+               For example, a pathTemplateMatch of /static/{format=**} could be rewritten as /static/content/{format} to prefix
+               /content to the URL. Variables can also be re-ordered in a rewrite, so that /{country}/{format}/{suffix=**} can be
+               rewritten as /content/{format}/{country}/{suffix}.
+               At least one non-empty routeRules[].matchRules[].path_template_match is required.
+               Only one of pathPrefixRewrite or pathTemplateRewrite may be specified.
         """
         if host_rewrite is not None:
             pulumi.set(__self__, "host_rewrite", host_rewrite)
@@ -41697,17 +42837,16 @@ class RegionUrlMapPathMatcherRouteRuleRouteActionUrlRewrite(dict):
     @pulumi.getter(name="pathTemplateRewrite")
     def path_template_rewrite(self) -> Optional[builtins.str]:
         """
-        Prior to forwarding the request to the selected origin, if the
-        request matched a pathTemplateMatch, the matching portion of the
-        request's path is replaced re-written using the pattern specified
-        by pathTemplateRewrite.
-        pathTemplateRewrite must be between 1 and 255 characters
-        (inclusive), must start with a '/', and must only use variables
-        captured by the route's pathTemplate matchers.
-        pathTemplateRewrite may only be used when all of a route's
-        MatchRules specify pathTemplate.
-        Only one of pathPrefixRewrite and pathTemplateRewrite may be
-        specified.
+        If specified, the pattern rewrites the URL path (based on the :path header) using the HTTP template syntax.
+        A corresponding pathTemplateMatch must be specified. Any template variables must exist in the pathTemplateMatch field.
+        * At least one variable must be specified in the pathTemplateMatch field
+        * You can omit variables from the rewritten URL
+        * The * and ** operators cannot be matched unless they have a corresponding variable name - e.g. {format=*} or {var=**}.
+        For example, a pathTemplateMatch of /static/{format=**} could be rewritten as /static/content/{format} to prefix
+        /content to the URL. Variables can also be re-ordered in a rewrite, so that /{country}/{format}/{suffix=**} can be
+        rewritten as /content/{format}/{country}/{suffix}.
+        At least one non-empty routeRules[].matchRules[].path_template_match is required.
+        Only one of pathPrefixRewrite or pathTemplateRewrite may be specified.
         """
         return pulumi.get(self, "path_template_rewrite")
 
@@ -57201,22 +58340,59 @@ class URLMapPathMatcherRouteRuleUrlRedirect(dict):
 
 @pulumi.output_type
 class URLMapTest(dict):
+    @staticmethod
+    def __key_warning(key: str):
+        suggest = None
+        if key == "expectedOutputUrl":
+            suggest = "expected_output_url"
+        elif key == "expectedRedirectResponseCode":
+            suggest = "expected_redirect_response_code"
+
+        if suggest:
+            pulumi.log.warn(f"Key '{key}' not found in URLMapTest. Access the value via the '{suggest}' property getter instead.")
+
+    def __getitem__(self, key: str) -> Any:
+        URLMapTest.__key_warning(key)
+        return super().__getitem__(key)
+
+    def get(self, key: str, default = None) -> Any:
+        URLMapTest.__key_warning(key)
+        return super().get(key, default)
+
     def __init__(__self__, *,
                  host: builtins.str,
                  path: builtins.str,
-                 service: builtins.str,
-                 description: Optional[builtins.str] = None):
+                 description: Optional[builtins.str] = None,
+                 expected_output_url: Optional[builtins.str] = None,
+                 expected_redirect_response_code: Optional[builtins.int] = None,
+                 headers: Optional[Sequence['outputs.URLMapTestHeader']] = None,
+                 service: Optional[builtins.str] = None):
         """
         :param builtins.str host: Host portion of the URL.
         :param builtins.str path: Path portion of the URL.
-        :param builtins.str service: The backend service or backend bucket link that should be matched by this test.
         :param builtins.str description: Description of this test case.
+        :param builtins.str expected_output_url: The expected output URL evaluated by the load balancer containing the scheme, host, path and query parameters.
+               For rules that forward requests to backends, the test passes only when expectedOutputUrl matches the request forwarded by the load balancer to backends. For rules with urlRewrite, the test verifies that the forwarded request matches hostRewrite and pathPrefixRewrite in the urlRewrite action. When service is specified, expectedOutputUrl`s scheme is ignored.
+               For rules with urlRedirect, the test passes only if expectedOutputUrl matches the URL in the load balancer's redirect response. If urlRedirect specifies httpsRedirect, the test passes only if the scheme in expectedOutputUrl is also set to HTTPS. If urlRedirect specifies stripQuery, the test passes only if expectedOutputUrl does not contain any query parameters.
+               expectedOutputUrl is optional when service is specified.
+        :param builtins.int expected_redirect_response_code: For rules with urlRedirect, the test passes only if expectedRedirectResponseCode matches the HTTP status code in load balancer's redirect response.
+               expectedRedirectResponseCode cannot be set when service is set.
+        :param Sequence['URLMapTestHeaderArgs'] headers: HTTP headers for this request.
+               Structure is documented below.
+        :param builtins.str service: The backend service or backend bucket link that should be matched by this test.
         """
         pulumi.set(__self__, "host", host)
         pulumi.set(__self__, "path", path)
-        pulumi.set(__self__, "service", service)
         if description is not None:
             pulumi.set(__self__, "description", description)
+        if expected_output_url is not None:
+            pulumi.set(__self__, "expected_output_url", expected_output_url)
+        if expected_redirect_response_code is not None:
+            pulumi.set(__self__, "expected_redirect_response_code", expected_redirect_response_code)
+        if headers is not None:
+            pulumi.set(__self__, "headers", headers)
+        if service is not None:
+            pulumi.set(__self__, "service", service)
 
     @property
     @pulumi.getter
@@ -57236,19 +58412,216 @@ class URLMapTest(dict):
 
     @property
     @pulumi.getter
-    def service(self) -> builtins.str:
+    def description(self) -> Optional[builtins.str]:
+        """
+        Description of this test case.
+        """
+        return pulumi.get(self, "description")
+
+    @property
+    @pulumi.getter(name="expectedOutputUrl")
+    def expected_output_url(self) -> Optional[builtins.str]:
+        """
+        The expected output URL evaluated by the load balancer containing the scheme, host, path and query parameters.
+        For rules that forward requests to backends, the test passes only when expectedOutputUrl matches the request forwarded by the load balancer to backends. For rules with urlRewrite, the test verifies that the forwarded request matches hostRewrite and pathPrefixRewrite in the urlRewrite action. When service is specified, expectedOutputUrl`s scheme is ignored.
+        For rules with urlRedirect, the test passes only if expectedOutputUrl matches the URL in the load balancer's redirect response. If urlRedirect specifies httpsRedirect, the test passes only if the scheme in expectedOutputUrl is also set to HTTPS. If urlRedirect specifies stripQuery, the test passes only if expectedOutputUrl does not contain any query parameters.
+        expectedOutputUrl is optional when service is specified.
+        """
+        return pulumi.get(self, "expected_output_url")
+
+    @property
+    @pulumi.getter(name="expectedRedirectResponseCode")
+    def expected_redirect_response_code(self) -> Optional[builtins.int]:
+        """
+        For rules with urlRedirect, the test passes only if expectedRedirectResponseCode matches the HTTP status code in load balancer's redirect response.
+        expectedRedirectResponseCode cannot be set when service is set.
+        """
+        return pulumi.get(self, "expected_redirect_response_code")
+
+    @property
+    @pulumi.getter
+    def headers(self) -> Optional[Sequence['outputs.URLMapTestHeader']]:
+        """
+        HTTP headers for this request.
+        Structure is documented below.
+        """
+        return pulumi.get(self, "headers")
+
+    @property
+    @pulumi.getter
+    def service(self) -> Optional[builtins.str]:
         """
         The backend service or backend bucket link that should be matched by this test.
         """
         return pulumi.get(self, "service")
 
+
+@pulumi.output_type
+class URLMapTestHeader(dict):
+    def __init__(__self__, *,
+                 name: builtins.str,
+                 value: builtins.str):
+        """
+        :param builtins.str name: Header name.
+        :param builtins.str value: Header value.
+        """
+        pulumi.set(__self__, "name", name)
+        pulumi.set(__self__, "value", value)
+
     @property
     @pulumi.getter
-    def description(self) -> Optional[builtins.str]:
+    def name(self) -> builtins.str:
         """
-        Description of this test case.
+        Header name.
         """
-        return pulumi.get(self, "description")
+        return pulumi.get(self, "name")
+
+    @property
+    @pulumi.getter
+    def value(self) -> builtins.str:
+        """
+        Header value.
+        """
+        return pulumi.get(self, "value")
+
+
+@pulumi.output_type
+class VPNTunnelCipherSuite(dict):
+    def __init__(__self__, *,
+                 phase1: Optional['outputs.VPNTunnelCipherSuitePhase1'] = None,
+                 phase2: Optional['outputs.VPNTunnelCipherSuitePhase2'] = None):
+        """
+        :param 'VPNTunnelCipherSuitePhase1Args' phase1: Cipher configuration for phase 1 of the IKE protocol.
+               Structure is documented below.
+        :param 'VPNTunnelCipherSuitePhase2Args' phase2: Cipher configuration for phase 2 of the IKE protocol.
+               Structure is documented below.
+               
+               
+               <a name="nested_cipher_suite_phase1"></a>The `phase1` block supports:
+        """
+        if phase1 is not None:
+            pulumi.set(__self__, "phase1", phase1)
+        if phase2 is not None:
+            pulumi.set(__self__, "phase2", phase2)
+
+    @property
+    @pulumi.getter
+    def phase1(self) -> Optional['outputs.VPNTunnelCipherSuitePhase1']:
+        """
+        Cipher configuration for phase 1 of the IKE protocol.
+        Structure is documented below.
+        """
+        return pulumi.get(self, "phase1")
+
+    @property
+    @pulumi.getter
+    def phase2(self) -> Optional['outputs.VPNTunnelCipherSuitePhase2']:
+        """
+        Cipher configuration for phase 2 of the IKE protocol.
+        Structure is documented below.
+
+
+        <a name="nested_cipher_suite_phase1"></a>The `phase1` block supports:
+        """
+        return pulumi.get(self, "phase2")
+
+
+@pulumi.output_type
+class VPNTunnelCipherSuitePhase1(dict):
+    def __init__(__self__, *,
+                 dhs: Optional[Sequence[builtins.str]] = None,
+                 encryptions: Optional[Sequence[builtins.str]] = None,
+                 integrities: Optional[Sequence[builtins.str]] = None,
+                 prves: Optional[Sequence[builtins.str]] = None):
+        """
+        :param Sequence[builtins.str] dhs: Diffie-Hellman groups.
+        :param Sequence[builtins.str] encryptions: Encryption algorithms.
+        :param Sequence[builtins.str] integrities: Integrity algorithms.
+        :param Sequence[builtins.str] prves: Pseudo-random functions.
+        """
+        if dhs is not None:
+            pulumi.set(__self__, "dhs", dhs)
+        if encryptions is not None:
+            pulumi.set(__self__, "encryptions", encryptions)
+        if integrities is not None:
+            pulumi.set(__self__, "integrities", integrities)
+        if prves is not None:
+            pulumi.set(__self__, "prves", prves)
+
+    @property
+    @pulumi.getter
+    def dhs(self) -> Optional[Sequence[builtins.str]]:
+        """
+        Diffie-Hellman groups.
+        """
+        return pulumi.get(self, "dhs")
+
+    @property
+    @pulumi.getter
+    def encryptions(self) -> Optional[Sequence[builtins.str]]:
+        """
+        Encryption algorithms.
+        """
+        return pulumi.get(self, "encryptions")
+
+    @property
+    @pulumi.getter
+    def integrities(self) -> Optional[Sequence[builtins.str]]:
+        """
+        Integrity algorithms.
+        """
+        return pulumi.get(self, "integrities")
+
+    @property
+    @pulumi.getter
+    def prves(self) -> Optional[Sequence[builtins.str]]:
+        """
+        Pseudo-random functions.
+        """
+        return pulumi.get(self, "prves")
+
+
+@pulumi.output_type
+class VPNTunnelCipherSuitePhase2(dict):
+    def __init__(__self__, *,
+                 encryptions: Optional[Sequence[builtins.str]] = None,
+                 integrities: Optional[Sequence[builtins.str]] = None,
+                 pfs: Optional[Sequence[builtins.str]] = None):
+        """
+        :param Sequence[builtins.str] encryptions: Encryption algorithms.
+        :param Sequence[builtins.str] integrities: Integrity algorithms.
+        :param Sequence[builtins.str] pfs: Perfect forward secrecy groups.
+        """
+        if encryptions is not None:
+            pulumi.set(__self__, "encryptions", encryptions)
+        if integrities is not None:
+            pulumi.set(__self__, "integrities", integrities)
+        if pfs is not None:
+            pulumi.set(__self__, "pfs", pfs)
+
+    @property
+    @pulumi.getter
+    def encryptions(self) -> Optional[Sequence[builtins.str]]:
+        """
+        Encryption algorithms.
+        """
+        return pulumi.get(self, "encryptions")
+
+    @property
+    @pulumi.getter
+    def integrities(self) -> Optional[Sequence[builtins.str]]:
+        """
+        Integrity algorithms.
+        """
+        return pulumi.get(self, "integrities")
+
+    @property
+    @pulumi.getter
+    def pfs(self) -> Optional[Sequence[builtins.str]]:
+        """
+        Perfect forward secrecy groups.
+        """
+        return pulumi.get(self, "pfs")
 
 
 @pulumi.output_type