pulumi-gcp 8.35.0a1750225231__py3-none-any.whl → 8.36.0__py3-none-any.whl

pulumi_gcp/compute/instance_template.py

@@ -1428,7 +1428,7 @@ class InstanceTemplate(pulumi.CustomResource):
                 "confidential_instance_type": "SEV",
             },
             disks=[{
-                "source_image": "ubuntu-os-cloud/ubuntu-2004-lts",
+                "source_image": "ubuntu-os-cloud/ubuntu-2204-lts",
             }],
             service_account={
                 "email": default.email,
@@ -1760,7 +1760,7 @@ class InstanceTemplate(pulumi.CustomResource):
                 "confidential_instance_type": "SEV",
             },
             disks=[{
-                "source_image": "ubuntu-os-cloud/ubuntu-2004-lts",
+                "source_image": "ubuntu-os-cloud/ubuntu-2204-lts",
             }],
             service_account={
                 "email": default.email,

pulumi_gcp/compute/interconnect.py

@@ -92,7 +92,7 @@ class InterconnectArgs:
                specified, the default value is false, which allocates non-MACsec capable ports first if
                available). Note that MACSEC is still technically allowed for compatibility reasons, but it
                does not work with the API, and will be removed in an upcoming major version.
-               Each value may be one of: `MACSEC`, `IF_MACSEC`.
+               Each value may be one of: `MACSEC`, `CROSS_SITE_NETWORK`, `IF_MACSEC`.
         """
         pulumi.set(__self__, "interconnect_type", interconnect_type)
         pulumi.set(__self__, "link_type", link_type)
@@ -332,7 +332,7 @@ class InterconnectArgs:
         specified, the default value is false, which allocates non-MACsec capable ports first if
         available). Note that MACSEC is still technically allowed for compatibility reasons, but it
         does not work with the API, and will be removed in an upcoming major version.
-        Each value may be one of: `MACSEC`, `IF_MACSEC`.
+        Each value may be one of: `MACSEC`, `CROSS_SITE_NETWORK`, `IF_MACSEC`.
         """
         return pulumi.get(self, "requested_features")
 
@@ -374,7 +374,8 @@ class _InterconnectState:
                  requested_features: Optional[pulumi.Input[Sequence[pulumi.Input[builtins.str]]]] = None,
                  requested_link_count: Optional[pulumi.Input[builtins.int]] = None,
                  satisfies_pzs: Optional[pulumi.Input[builtins.bool]] = None,
-                 state: Optional[pulumi.Input[builtins.str]] = None):
+                 state: Optional[pulumi.Input[builtins.str]] = None,
+                 wire_groups: Optional[pulumi.Input[Sequence[pulumi.Input[builtins.str]]]] = None):
         """
         Input properties used for looking up and filtering Interconnect resources.
         :param pulumi.Input[builtins.bool] admin_enabled: Administrative status of the interconnect. When this is set to true, the Interconnect is
@@ -464,7 +465,7 @@ class _InterconnectState:
                specified, the default value is false, which allocates non-MACsec capable ports first if
                available). Note that MACSEC is still technically allowed for compatibility reasons, but it
                does not work with the API, and will be removed in an upcoming major version.
-               Each value may be one of: `MACSEC`, `IF_MACSEC`.
+               Each value may be one of: `MACSEC`, `CROSS_SITE_NETWORK`, `IF_MACSEC`.
         :param pulumi.Input[builtins.int] requested_link_count: Target number of physical links in the link bundle, as requested by the customer.
         :param pulumi.Input[builtins.bool] satisfies_pzs: Reserved for future use.
         :param pulumi.Input[builtins.str] state: (Output)
@@ -475,6 +476,8 @@ class _InterconnectState:
                - CANCELLED: The outage associated with this notification was cancelled before the
                outage was due to start.
                - COMPLETED: The outage associated with this notification is complete.
+        :param pulumi.Input[Sequence[pulumi.Input[builtins.str]]] wire_groups: A list of the URLs of all CrossSiteNetwork WireGroups configured to use this Interconnect. The Interconnect cannot be
+               deleted if this list is non-empty.
         """
         if admin_enabled is not None:
             pulumi.set(__self__, "admin_enabled", admin_enabled)
@@ -538,6 +541,8 @@ class _InterconnectState:
             pulumi.set(__self__, "satisfies_pzs", satisfies_pzs)
         if state is not None:
             pulumi.set(__self__, "state", state)
+        if wire_groups is not None:
+            pulumi.set(__self__, "wire_groups", wire_groups)
 
     @property
     @pulumi.getter(name="adminEnabled")
@@ -927,7 +932,7 @@ class _InterconnectState:
         specified, the default value is false, which allocates non-MACsec capable ports first if
         available). Note that MACSEC is still technically allowed for compatibility reasons, but it
         does not work with the API, and will be removed in an upcoming major version.
-        Each value may be one of: `MACSEC`, `IF_MACSEC`.
+        Each value may be one of: `MACSEC`, `CROSS_SITE_NETWORK`, `IF_MACSEC`.
         """
         return pulumi.get(self, "requested_features")
 
@@ -978,6 +983,19 @@ class _InterconnectState:
     def state(self, value: Optional[pulumi.Input[builtins.str]]):
         pulumi.set(self, "state", value)
 
+    @property
+    @pulumi.getter(name="wireGroups")
+    def wire_groups(self) -> Optional[pulumi.Input[Sequence[pulumi.Input[builtins.str]]]]:
+        """
+        A list of the URLs of all CrossSiteNetwork WireGroups configured to use this Interconnect. The Interconnect cannot be
+        deleted if this list is non-empty.
+        """
+        return pulumi.get(self, "wire_groups")
+
+    @wire_groups.setter
+    def wire_groups(self, value: Optional[pulumi.Input[Sequence[pulumi.Input[builtins.str]]]]):
+        pulumi.set(self, "wire_groups", value)
+
 
 @pulumi.type_token("gcp:compute/interconnect:Interconnect")
 class Interconnect(pulumi.CustomResource):
@@ -1025,7 +1043,7 @@ class Interconnect(pulumi.CustomResource):
             customer_name="example_customer",
             interconnect_type="DEDICATED",
             link_type="LINK_TYPE_ETHERNET_10G_LR",
-            location=f"https://www.googleapis.com/compute/v1/projects/{project.name}/global/interconnectLocations/iad-zone1-1",
+            location=f"https://www.googleapis.com/compute/v1/{project.id}/global/interconnectLocations/iad-zone1-1",
             requested_link_count=1)
         ```
 
@@ -1107,7 +1125,7 @@ class Interconnect(pulumi.CustomResource):
                specified, the default value is false, which allocates non-MACsec capable ports first if
                available). Note that MACSEC is still technically allowed for compatibility reasons, but it
                does not work with the API, and will be removed in an upcoming major version.
-               Each value may be one of: `MACSEC`, `IF_MACSEC`.
+               Each value may be one of: `MACSEC`, `CROSS_SITE_NETWORK`, `IF_MACSEC`.
         :param pulumi.Input[builtins.int] requested_link_count: Target number of physical links in the link bundle, as requested by the customer.
         """
         ...
@@ -1140,7 +1158,7 @@ class Interconnect(pulumi.CustomResource):
             customer_name="example_customer",
             interconnect_type="DEDICATED",
             link_type="LINK_TYPE_ETHERNET_10G_LR",
-            location=f"https://www.googleapis.com/compute/v1/projects/{project.name}/global/interconnectLocations/iad-zone1-1",
+            location=f"https://www.googleapis.com/compute/v1/{project.id}/global/interconnectLocations/iad-zone1-1",
             requested_link_count=1)
         ```
 
@@ -1246,6 +1264,7 @@ class Interconnect(pulumi.CustomResource):
             __props__.__dict__["pulumi_labels"] = None
             __props__.__dict__["satisfies_pzs"] = None
             __props__.__dict__["state"] = None
+            __props__.__dict__["wire_groups"] = None
         secret_opts = pulumi.ResourceOptions(additional_secret_outputs=["effectiveLabels", "pulumiLabels"])
         opts = pulumi.ResourceOptions.merge(opts, secret_opts)
         super(Interconnect, __self__).__init__(
@@ -1288,7 +1307,8 @@ class Interconnect(pulumi.CustomResource):
             requested_features: Optional[pulumi.Input[Sequence[pulumi.Input[builtins.str]]]] = None,
             requested_link_count: Optional[pulumi.Input[builtins.int]] = None,
             satisfies_pzs: Optional[pulumi.Input[builtins.bool]] = None,
-            state: Optional[pulumi.Input[builtins.str]] = None) -> 'Interconnect':
+            state: Optional[pulumi.Input[builtins.str]] = None,
+            wire_groups: Optional[pulumi.Input[Sequence[pulumi.Input[builtins.str]]]] = None) -> 'Interconnect':
         """
         Get an existing Interconnect resource's state with the given name, id, and optional extra
         properties used to qualify the lookup.
@@ -1383,7 +1403,7 @@ class Interconnect(pulumi.CustomResource):
                specified, the default value is false, which allocates non-MACsec capable ports first if
                available). Note that MACSEC is still technically allowed for compatibility reasons, but it
                does not work with the API, and will be removed in an upcoming major version.
-               Each value may be one of: `MACSEC`, `IF_MACSEC`.
+               Each value may be one of: `MACSEC`, `CROSS_SITE_NETWORK`, `IF_MACSEC`.
         :param pulumi.Input[builtins.int] requested_link_count: Target number of physical links in the link bundle, as requested by the customer.
         :param pulumi.Input[builtins.bool] satisfies_pzs: Reserved for future use.
         :param pulumi.Input[builtins.str] state: (Output)
@@ -1394,6 +1414,8 @@ class Interconnect(pulumi.CustomResource):
                - CANCELLED: The outage associated with this notification was cancelled before the
                outage was due to start.
                - COMPLETED: The outage associated with this notification is complete.
+        :param pulumi.Input[Sequence[pulumi.Input[builtins.str]]] wire_groups: A list of the URLs of all CrossSiteNetwork WireGroups configured to use this Interconnect. The Interconnect cannot be
+               deleted if this list is non-empty.
         """
         opts = pulumi.ResourceOptions.merge(opts, pulumi.ResourceOptions(id=id))
 
@@ -1430,6 +1452,7 @@ class Interconnect(pulumi.CustomResource):
         __props__.__dict__["requested_link_count"] = requested_link_count
         __props__.__dict__["satisfies_pzs"] = satisfies_pzs
         __props__.__dict__["state"] = state
+        __props__.__dict__["wire_groups"] = wire_groups
         return Interconnect(resource_name, opts=opts, __props__=__props__)
 
     @property
@@ -1712,7 +1735,7 @@ class Interconnect(pulumi.CustomResource):
         specified, the default value is false, which allocates non-MACsec capable ports first if
         available). Note that MACSEC is still technically allowed for compatibility reasons, but it
         does not work with the API, and will be removed in an upcoming major version.
-        Each value may be one of: `MACSEC`, `IF_MACSEC`.
+        Each value may be one of: `MACSEC`, `CROSS_SITE_NETWORK`, `IF_MACSEC`.
         """
         return pulumi.get(self, "requested_features")
 
@@ -1747,3 +1770,12 @@ class Interconnect(pulumi.CustomResource):
         """
         return pulumi.get(self, "state")
 
+    @property
+    @pulumi.getter(name="wireGroups")
+    def wire_groups(self) -> pulumi.Output[Sequence[builtins.str]]:
+        """
+        A list of the URLs of all CrossSiteNetwork WireGroups configured to use this Interconnect. The Interconnect cannot be
+        deleted if this list is non-empty.
+        """
+        return pulumi.get(self, "wire_groups")
+

pulumi_gcp/compute/node_template.py

@@ -46,6 +46,9 @@ class NodeTemplateArgs:
                node template
                Structure is documented below.
         :param pulumi.Input[builtins.str] name: Name of the resource.
+               
+               
+               - - -
         :param pulumi.Input[Mapping[str, pulumi.Input[builtins.str]]] node_affinity_labels: Labels to use for node affinity, which will be used in
                instance scheduling.
         :param pulumi.Input[builtins.str] node_type: Node type to use for nodes group that are created from this template.
@@ -145,6 +148,9 @@ class NodeTemplateArgs:
     def name(self) -> Optional[pulumi.Input[builtins.str]]:
         """
         Name of the resource.
+
+
+        - - -
         """
         return pulumi.get(self, "name")
 
@@ -265,6 +271,9 @@ class _NodeTemplateState:
                node template
                Structure is documented below.
         :param pulumi.Input[builtins.str] name: Name of the resource.
+               
+               
+               - - -
         :param pulumi.Input[Mapping[str, pulumi.Input[builtins.str]]] node_affinity_labels: Labels to use for node affinity, which will be used in
                instance scheduling.
         :param pulumi.Input[builtins.str] node_type: Node type to use for nodes group that are created from this template.
@@ -381,6 +390,9 @@ class _NodeTemplateState:
     def name(self) -> Optional[pulumi.Input[builtins.str]]:
         """
         Name of the resource.
+
+
+        - - -
         """
         return pulumi.get(self, "name")
 
@@ -620,6 +632,9 @@ class NodeTemplate(pulumi.CustomResource):
                node template
                Structure is documented below.
         :param pulumi.Input[builtins.str] name: Name of the resource.
+               
+               
+               - - -
         :param pulumi.Input[Mapping[str, pulumi.Input[builtins.str]]] node_affinity_labels: Labels to use for node affinity, which will be used in
                instance scheduling.
         :param pulumi.Input[builtins.str] node_type: Node type to use for nodes group that are created from this template.
@@ -839,6 +854,9 @@ class NodeTemplate(pulumi.CustomResource):
                node template
                Structure is documented below.
         :param pulumi.Input[builtins.str] name: Name of the resource.
+               
+               
+               - - -
         :param pulumi.Input[Mapping[str, pulumi.Input[builtins.str]]] node_affinity_labels: Labels to use for node affinity, which will be used in
                instance scheduling.
         :param pulumi.Input[builtins.str] node_type: Node type to use for nodes group that are created from this template.
@@ -927,6 +945,9 @@ class NodeTemplate(pulumi.CustomResource):
     def name(self) -> pulumi.Output[builtins.str]:
         """
         Name of the resource.
+
+
+        - - -
         """
         return pulumi.get(self, "name")
 

pulumi_gcp/compute/outputs.py

@@ -36815,8 +36815,9 @@ class RegionSecurityPolicyRuleRateLimitOptions(dict):
                * SNI: Server name indication in the TLS session of the HTTPS request. The key value is truncated to the first 128 bytes. The key type defaults to ALL on a HTTP session.
                * REGION_CODE: The country/region from which the request originates.
                * TLS_JA3_FINGERPRINT: JA3 TLS/SSL fingerprint if the client connects using HTTPS, HTTP/2 or HTTP/3. If not available, the key type defaults to ALL.
+               * TLS_JA4_FINGERPRINT: JA4 TLS/SSL fingerprint if the client connects using HTTPS, HTTP/2 or HTTP/3. If not available, the key type defaults to ALL.
                * USER_IP: The IP address of the originating client, which is resolved based on "userIpRequestHeaders" configured with the security policy. If there is no "userIpRequestHeaders" configuration or an IP address cannot be resolved from it, the key type defaults to IP.
-               Possible values are: `ALL`, `IP`, `HTTP_HEADER`, `XFF_IP`, `HTTP_COOKIE`, `HTTP_PATH`, `SNI`, `REGION_CODE`, `TLS_JA3_FINGERPRINT`, `USER_IP`.
+               Possible values are: `ALL`, `IP`, `HTTP_HEADER`, `XFF_IP`, `HTTP_COOKIE`, `HTTP_PATH`, `SNI`, `REGION_CODE`, `TLS_JA3_FINGERPRINT`, `TLS_JA4_FINGERPRINT`, `USER_IP`.
         :param Sequence['RegionSecurityPolicyRuleRateLimitOptionsEnforceOnKeyConfigArgs'] enforce_on_key_configs: If specified, any combination of values of enforceOnKeyType/enforceOnKeyName is treated as the key on which ratelimit threshold/action is enforced.
                You can specify up to 3 enforceOnKeyConfigs.
                If enforceOnKeyConfigs is specified, enforceOnKey must not be specified.
@@ -36888,8 +36889,9 @@ class RegionSecurityPolicyRuleRateLimitOptions(dict):
         * SNI: Server name indication in the TLS session of the HTTPS request. The key value is truncated to the first 128 bytes. The key type defaults to ALL on a HTTP session.
         * REGION_CODE: The country/region from which the request originates.
         * TLS_JA3_FINGERPRINT: JA3 TLS/SSL fingerprint if the client connects using HTTPS, HTTP/2 or HTTP/3. If not available, the key type defaults to ALL.
+        * TLS_JA4_FINGERPRINT: JA4 TLS/SSL fingerprint if the client connects using HTTPS, HTTP/2 or HTTP/3. If not available, the key type defaults to ALL.
         * USER_IP: The IP address of the originating client, which is resolved based on "userIpRequestHeaders" configured with the security policy. If there is no "userIpRequestHeaders" configuration or an IP address cannot be resolved from it, the key type defaults to IP.
-        Possible values are: `ALL`, `IP`, `HTTP_HEADER`, `XFF_IP`, `HTTP_COOKIE`, `HTTP_PATH`, `SNI`, `REGION_CODE`, `TLS_JA3_FINGERPRINT`, `USER_IP`.
+        Possible values are: `ALL`, `IP`, `HTTP_HEADER`, `XFF_IP`, `HTTP_COOKIE`, `HTTP_PATH`, `SNI`, `REGION_CODE`, `TLS_JA3_FINGERPRINT`, `TLS_JA4_FINGERPRINT`, `USER_IP`.
         """
         return pulumi.get(self, "enforce_on_key")
 
@@ -37019,8 +37021,9 @@ class RegionSecurityPolicyRuleRateLimitOptionsEnforceOnKeyConfig(dict):
                * SNI: Server name indication in the TLS session of the HTTPS request. The key value is truncated to the first 128 bytes. The key type defaults to ALL on a HTTP session.
                * REGION_CODE: The country/region from which the request originates.
                * TLS_JA3_FINGERPRINT: JA3 TLS/SSL fingerprint if the client connects using HTTPS, HTTP/2 or HTTP/3. If not available, the key type defaults to ALL.
+               * TLS_JA4_FINGERPRINT: JA4 TLS/SSL fingerprint if the client connects using HTTPS, HTTP/2 or HTTP/3. If not available, the key type defaults to ALL.
                * USER_IP: The IP address of the originating client, which is resolved based on "userIpRequestHeaders" configured with the security policy. If there is no "userIpRequestHeaders" configuration or an IP address cannot be resolved from it, the key type defaults to IP.
-               Possible values are: `ALL`, `IP`, `HTTP_HEADER`, `XFF_IP`, `HTTP_COOKIE`, `HTTP_PATH`, `SNI`, `REGION_CODE`, `TLS_JA3_FINGERPRINT`, `USER_IP`.
+               Possible values are: `ALL`, `IP`, `HTTP_HEADER`, `XFF_IP`, `HTTP_COOKIE`, `HTTP_PATH`, `SNI`, `REGION_CODE`, `TLS_JA3_FINGERPRINT`, `TLS_JA4_FINGERPRINT`, `USER_IP`.
         """
         if enforce_on_key_name is not None:
             pulumi.set(__self__, "enforce_on_key_name", enforce_on_key_name)
@@ -37051,8 +37054,9 @@ class RegionSecurityPolicyRuleRateLimitOptionsEnforceOnKeyConfig(dict):
         * SNI: Server name indication in the TLS session of the HTTPS request. The key value is truncated to the first 128 bytes. The key type defaults to ALL on a HTTP session.
         * REGION_CODE: The country/region from which the request originates.
         * TLS_JA3_FINGERPRINT: JA3 TLS/SSL fingerprint if the client connects using HTTPS, HTTP/2 or HTTP/3. If not available, the key type defaults to ALL.
+        * TLS_JA4_FINGERPRINT: JA4 TLS/SSL fingerprint if the client connects using HTTPS, HTTP/2 or HTTP/3. If not available, the key type defaults to ALL.
         * USER_IP: The IP address of the originating client, which is resolved based on "userIpRequestHeaders" configured with the security policy. If there is no "userIpRequestHeaders" configuration or an IP address cannot be resolved from it, the key type defaults to IP.
-        Possible values are: `ALL`, `IP`, `HTTP_HEADER`, `XFF_IP`, `HTTP_COOKIE`, `HTTP_PATH`, `SNI`, `REGION_CODE`, `TLS_JA3_FINGERPRINT`, `USER_IP`.
+        Possible values are: `ALL`, `IP`, `HTTP_HEADER`, `XFF_IP`, `HTTP_COOKIE`, `HTTP_PATH`, `SNI`, `REGION_CODE`, `TLS_JA3_FINGERPRINT`, `TLS_JA4_FINGERPRINT`, `USER_IP`.
         """
         return pulumi.get(self, "enforce_on_key_type")
 
@@ -48910,8 +48914,9 @@ class SecurityPolicyRuleRateLimitOptions(dict):
                * SNI: Server name indication in the TLS session of the HTTPS request. The key value is truncated to the first 128 bytes. The key type defaults to ALL on a HTTP session.
                * REGION_CODE: The country/region from which the request originates.
                * TLS_JA3_FINGERPRINT: JA3 TLS/SSL fingerprint if the client connects using HTTPS, HTTP/2 or HTTP/3. If not available, the key type defaults to ALL.
+               * TLS_JA4_FINGERPRINT: JA4 TLS/SSL fingerprint if the client connects using HTTPS, HTTP/2 or HTTP/3. If not available, the key type defaults to ALL.
                * USER_IP: The IP address of the originating client, which is resolved based on "userIpRequestHeaders" configured with the security policy. If there is no "userIpRequestHeaders" configuration or an IP address cannot be resolved from it, the key type defaults to IP.
-               Possible values are: `ALL`, `IP`, `HTTP_HEADER`, `XFF_IP`, `HTTP_COOKIE`, `HTTP_PATH`, `SNI`, `REGION_CODE`, `TLS_JA3_FINGERPRINT`, `USER_IP`.
+               Possible values are: `ALL`, `IP`, `HTTP_HEADER`, `XFF_IP`, `HTTP_COOKIE`, `HTTP_PATH`, `SNI`, `REGION_CODE`, `TLS_JA3_FINGERPRINT`, `TLS_JA4_FINGERPRINT`, `USER_IP`.
         :param Sequence['SecurityPolicyRuleRateLimitOptionsEnforceOnKeyConfigArgs'] enforce_on_key_configs: If specified, any combination of values of enforceOnKeyType/enforceOnKeyName is treated as the key on which ratelimit threshold/action is enforced.
                You can specify up to 3 enforceOnKeyConfigs.
                If enforceOnKeyConfigs is specified, enforceOnKey must not be specified.
@@ -48987,8 +48992,9 @@ class SecurityPolicyRuleRateLimitOptions(dict):
         * SNI: Server name indication in the TLS session of the HTTPS request. The key value is truncated to the first 128 bytes. The key type defaults to ALL on a HTTP session.
         * REGION_CODE: The country/region from which the request originates.
         * TLS_JA3_FINGERPRINT: JA3 TLS/SSL fingerprint if the client connects using HTTPS, HTTP/2 or HTTP/3. If not available, the key type defaults to ALL.
+        * TLS_JA4_FINGERPRINT: JA4 TLS/SSL fingerprint if the client connects using HTTPS, HTTP/2 or HTTP/3. If not available, the key type defaults to ALL.
         * USER_IP: The IP address of the originating client, which is resolved based on "userIpRequestHeaders" configured with the security policy. If there is no "userIpRequestHeaders" configuration or an IP address cannot be resolved from it, the key type defaults to IP.
-        Possible values are: `ALL`, `IP`, `HTTP_HEADER`, `XFF_IP`, `HTTP_COOKIE`, `HTTP_PATH`, `SNI`, `REGION_CODE`, `TLS_JA3_FINGERPRINT`, `USER_IP`.
+        Possible values are: `ALL`, `IP`, `HTTP_HEADER`, `XFF_IP`, `HTTP_COOKIE`, `HTTP_PATH`, `SNI`, `REGION_CODE`, `TLS_JA3_FINGERPRINT`, `TLS_JA4_FINGERPRINT`, `USER_IP`.
         """
         return pulumi.get(self, "enforce_on_key")
 
@@ -49127,8 +49133,9 @@ class SecurityPolicyRuleRateLimitOptionsEnforceOnKeyConfig(dict):
                * SNI: Server name indication in the TLS session of the HTTPS request. The key value is truncated to the first 128 bytes. The key type defaults to ALL on a HTTP session.
                * REGION_CODE: The country/region from which the request originates.
                * TLS_JA3_FINGERPRINT: JA3 TLS/SSL fingerprint if the client connects using HTTPS, HTTP/2 or HTTP/3. If not available, the key type defaults to ALL.
+               * TLS_JA4_FINGERPRINT: JA4 TLS/SSL fingerprint if the client connects using HTTPS, HTTP/2 or HTTP/3. If not available, the key type defaults to ALL.
                * USER_IP: The IP address of the originating client, which is resolved based on "userIpRequestHeaders" configured with the security policy. If there is no "userIpRequestHeaders" configuration or an IP address cannot be resolved from it, the key type defaults to IP.
-               Possible values are: `ALL`, `IP`, `HTTP_HEADER`, `XFF_IP`, `HTTP_COOKIE`, `HTTP_PATH`, `SNI`, `REGION_CODE`, `TLS_JA3_FINGERPRINT`, `USER_IP`.
+               Possible values are: `ALL`, `IP`, `HTTP_HEADER`, `XFF_IP`, `HTTP_COOKIE`, `HTTP_PATH`, `SNI`, `REGION_CODE`, `TLS_JA3_FINGERPRINT`, `TLS_JA4_FINGERPRINT`, `USER_IP`.
         """
         if enforce_on_key_name is not None:
             pulumi.set(__self__, "enforce_on_key_name", enforce_on_key_name)
@@ -49159,8 +49166,9 @@ class SecurityPolicyRuleRateLimitOptionsEnforceOnKeyConfig(dict):
         * SNI: Server name indication in the TLS session of the HTTPS request. The key value is truncated to the first 128 bytes. The key type defaults to ALL on a HTTP session.
         * REGION_CODE: The country/region from which the request originates.
         * TLS_JA3_FINGERPRINT: JA3 TLS/SSL fingerprint if the client connects using HTTPS, HTTP/2 or HTTP/3. If not available, the key type defaults to ALL.
+        * TLS_JA4_FINGERPRINT: JA4 TLS/SSL fingerprint if the client connects using HTTPS, HTTP/2 or HTTP/3. If not available, the key type defaults to ALL.
         * USER_IP: The IP address of the originating client, which is resolved based on "userIpRequestHeaders" configured with the security policy. If there is no "userIpRequestHeaders" configuration or an IP address cannot be resolved from it, the key type defaults to IP.
-        Possible values are: `ALL`, `IP`, `HTTP_HEADER`, `XFF_IP`, `HTTP_COOKIE`, `HTTP_PATH`, `SNI`, `REGION_CODE`, `TLS_JA3_FINGERPRINT`, `USER_IP`.
+        Possible values are: `ALL`, `IP`, `HTTP_HEADER`, `XFF_IP`, `HTTP_COOKIE`, `HTTP_PATH`, `SNI`, `REGION_CODE`, `TLS_JA3_FINGERPRINT`, `TLS_JA4_FINGERPRINT`, `USER_IP`.
         """
         return pulumi.get(self, "enforce_on_key_type")
 

pulumi_gcp/compute/service_attachment.py

@@ -34,7 +34,8 @@ class ServiceAttachmentArgs:
                  project: Optional[pulumi.Input[builtins.str]] = None,
                  propagated_connection_limit: Optional[pulumi.Input[builtins.int]] = None,
                  reconcile_connections: Optional[pulumi.Input[builtins.bool]] = None,
-                 region: Optional[pulumi.Input[builtins.str]] = None):
+                 region: Optional[pulumi.Input[builtins.str]] = None,
+                 send_propagated_connection_limit_if_zero: Optional[pulumi.Input[builtins.bool]] = None):
         """
         The set of arguments for constructing a ServiceAttachment resource.
         :param pulumi.Input[builtins.str] connection_preference: The connection preference to use for this service attachment. Valid
@@ -69,11 +70,15 @@ class ServiceAttachmentArgs:
                This limit lets the service producer limit how many propagated Private Service Connect connections can be established to this service attachment from a single consumer.
                If the connection preference of the service attachment is ACCEPT_MANUAL, the limit applies to each project or network that is listed in the consumer accept list.
                If the connection preference of the service attachment is ACCEPT_AUTOMATIC, the limit applies to each project that contains a connected endpoint.
-               If unspecified, the default propagated connection limit is 250.
+               If unspecified, the default propagated connection limit is 250. To explicitly send a zero value, set `send_propagated_connection_limit_if_zero = true`.
         :param pulumi.Input[builtins.bool] reconcile_connections: This flag determines whether a consumer accept/reject list change can reconcile the statuses of existing ACCEPTED or REJECTED PSC endpoints.
                If false, connection policy update will only affect existing PENDING PSC endpoints. Existing ACCEPTED/REJECTED endpoints will remain untouched regardless how the connection policy is modified .
                If true, update will affect both PENDING and ACCEPTED/REJECTED PSC endpoints. For example, an ACCEPTED PSC endpoint will be moved to REJECTED if its project is added to the reject list.
         :param pulumi.Input[builtins.str] region: URL of the region where the resource resides.
+        :param pulumi.Input[builtins.bool] send_propagated_connection_limit_if_zero: Controls the behavior of propagated_connection_limit.
+               When false, setting propagated_connection_limit to zero causes the provider to use to the API's default value.
+               When true, the provider will set propagated_connection_limit to zero.
+               Defaults to false.
         """
         pulumi.set(__self__, "connection_preference", connection_preference)
         pulumi.set(__self__, "enable_proxy_protocol", enable_proxy_protocol)
@@ -97,6 +102,8 @@ class ServiceAttachmentArgs:
             pulumi.set(__self__, "reconcile_connections", reconcile_connections)
         if region is not None:
             pulumi.set(__self__, "region", region)
+        if send_propagated_connection_limit_if_zero is not None:
+            pulumi.set(__self__, "send_propagated_connection_limit_if_zero", send_propagated_connection_limit_if_zero)
 
     @property
     @pulumi.getter(name="connectionPreference")
@@ -244,7 +251,7 @@ class ServiceAttachmentArgs:
         This limit lets the service producer limit how many propagated Private Service Connect connections can be established to this service attachment from a single consumer.
         If the connection preference of the service attachment is ACCEPT_MANUAL, the limit applies to each project or network that is listed in the consumer accept list.
         If the connection preference of the service attachment is ACCEPT_AUTOMATIC, the limit applies to each project that contains a connected endpoint.
-        If unspecified, the default propagated connection limit is 250.
+        If unspecified, the default propagated connection limit is 250. To explicitly send a zero value, set `send_propagated_connection_limit_if_zero = true`.
         """
         return pulumi.get(self, "propagated_connection_limit")
 
@@ -278,6 +285,21 @@ class ServiceAttachmentArgs:
     def region(self, value: Optional[pulumi.Input[builtins.str]]):
         pulumi.set(self, "region", value)
 
+    @property
+    @pulumi.getter(name="sendPropagatedConnectionLimitIfZero")
+    def send_propagated_connection_limit_if_zero(self) -> Optional[pulumi.Input[builtins.bool]]:
+        """
+        Controls the behavior of propagated_connection_limit.
+        When false, setting propagated_connection_limit to zero causes the provider to use to the API's default value.
+        When true, the provider will set propagated_connection_limit to zero.
+        Defaults to false.
+        """
+        return pulumi.get(self, "send_propagated_connection_limit_if_zero")
+
+    @send_propagated_connection_limit_if_zero.setter
+    def send_propagated_connection_limit_if_zero(self, value: Optional[pulumi.Input[builtins.bool]]):
+        pulumi.set(self, "send_propagated_connection_limit_if_zero", value)
+
 
 @pulumi.input_type
 class _ServiceAttachmentState:
@@ -297,6 +319,7 @@ class _ServiceAttachmentState:
                  reconcile_connections: Optional[pulumi.Input[builtins.bool]] = None,
                  region: Optional[pulumi.Input[builtins.str]] = None,
                  self_link: Optional[pulumi.Input[builtins.str]] = None,
+                 send_propagated_connection_limit_if_zero: Optional[pulumi.Input[builtins.bool]] = None,
                  target_service: Optional[pulumi.Input[builtins.str]] = None):
         """
         Input properties used for looking up and filtering ServiceAttachment resources.
@@ -336,12 +359,16 @@ class _ServiceAttachmentState:
                This limit lets the service producer limit how many propagated Private Service Connect connections can be established to this service attachment from a single consumer.
                If the connection preference of the service attachment is ACCEPT_MANUAL, the limit applies to each project or network that is listed in the consumer accept list.
                If the connection preference of the service attachment is ACCEPT_AUTOMATIC, the limit applies to each project that contains a connected endpoint.
-               If unspecified, the default propagated connection limit is 250.
+               If unspecified, the default propagated connection limit is 250. To explicitly send a zero value, set `send_propagated_connection_limit_if_zero = true`.
         :param pulumi.Input[builtins.bool] reconcile_connections: This flag determines whether a consumer accept/reject list change can reconcile the statuses of existing ACCEPTED or REJECTED PSC endpoints.
                If false, connection policy update will only affect existing PENDING PSC endpoints. Existing ACCEPTED/REJECTED endpoints will remain untouched regardless how the connection policy is modified .
                If true, update will affect both PENDING and ACCEPTED/REJECTED PSC endpoints. For example, an ACCEPTED PSC endpoint will be moved to REJECTED if its project is added to the reject list.
         :param pulumi.Input[builtins.str] region: URL of the region where the resource resides.
         :param pulumi.Input[builtins.str] self_link: The URI of the created resource.
+        :param pulumi.Input[builtins.bool] send_propagated_connection_limit_if_zero: Controls the behavior of propagated_connection_limit.
+               When false, setting propagated_connection_limit to zero causes the provider to use to the API's default value.
+               When true, the provider will set propagated_connection_limit to zero.
+               Defaults to false.
         :param pulumi.Input[builtins.str] target_service: The URL of a service serving the endpoint identified by this service attachment.
         """
         if connected_endpoints is not None:
@@ -374,6 +401,8 @@ class _ServiceAttachmentState:
             pulumi.set(__self__, "region", region)
         if self_link is not None:
             pulumi.set(__self__, "self_link", self_link)
+        if send_propagated_connection_limit_if_zero is not None:
+            pulumi.set(__self__, "send_propagated_connection_limit_if_zero", send_propagated_connection_limit_if_zero)
         if target_service is not None:
             pulumi.set(__self__, "target_service", target_service)
 
@@ -538,7 +567,7 @@ class _ServiceAttachmentState:
         This limit lets the service producer limit how many propagated Private Service Connect connections can be established to this service attachment from a single consumer.
         If the connection preference of the service attachment is ACCEPT_MANUAL, the limit applies to each project or network that is listed in the consumer accept list.
         If the connection preference of the service attachment is ACCEPT_AUTOMATIC, the limit applies to each project that contains a connected endpoint.
-        If unspecified, the default propagated connection limit is 250.
+        If unspecified, the default propagated connection limit is 250. To explicitly send a zero value, set `send_propagated_connection_limit_if_zero = true`.
         """
         return pulumi.get(self, "propagated_connection_limit")
 
@@ -584,6 +613,21 @@ class _ServiceAttachmentState:
     def self_link(self, value: Optional[pulumi.Input[builtins.str]]):
         pulumi.set(self, "self_link", value)
 
+    @property
+    @pulumi.getter(name="sendPropagatedConnectionLimitIfZero")
+    def send_propagated_connection_limit_if_zero(self) -> Optional[pulumi.Input[builtins.bool]]:
+        """
+        Controls the behavior of propagated_connection_limit.
+        When false, setting propagated_connection_limit to zero causes the provider to use to the API's default value.
+        When true, the provider will set propagated_connection_limit to zero.
+        Defaults to false.
+        """
+        return pulumi.get(self, "send_propagated_connection_limit_if_zero")
+
+    @send_propagated_connection_limit_if_zero.setter
+    def send_propagated_connection_limit_if_zero(self, value: Optional[pulumi.Input[builtins.bool]]):
+        pulumi.set(self, "send_propagated_connection_limit_if_zero", value)
+
     @property
     @pulumi.getter(name="targetService")
     def target_service(self) -> Optional[pulumi.Input[builtins.str]]:
@@ -615,6 +659,7 @@ class ServiceAttachment(pulumi.CustomResource):
                  propagated_connection_limit: Optional[pulumi.Input[builtins.int]] = None,
                  reconcile_connections: Optional[pulumi.Input[builtins.bool]] = None,
                  region: Optional[pulumi.Input[builtins.str]] = None,
+                 send_propagated_connection_limit_if_zero: Optional[pulumi.Input[builtins.bool]] = None,
                  target_service: Optional[pulumi.Input[builtins.str]] = None,
                  __props__=None):
         """
@@ -953,11 +998,15 @@ class ServiceAttachment(pulumi.CustomResource):
                This limit lets the service producer limit how many propagated Private Service Connect connections can be established to this service attachment from a single consumer.
                If the connection preference of the service attachment is ACCEPT_MANUAL, the limit applies to each project or network that is listed in the consumer accept list.
                If the connection preference of the service attachment is ACCEPT_AUTOMATIC, the limit applies to each project that contains a connected endpoint.
-               If unspecified, the default propagated connection limit is 250.
+               If unspecified, the default propagated connection limit is 250. To explicitly send a zero value, set `send_propagated_connection_limit_if_zero = true`.
         :param pulumi.Input[builtins.bool] reconcile_connections: This flag determines whether a consumer accept/reject list change can reconcile the statuses of existing ACCEPTED or REJECTED PSC endpoints.
                If false, connection policy update will only affect existing PENDING PSC endpoints. Existing ACCEPTED/REJECTED endpoints will remain untouched regardless how the connection policy is modified .
                If true, update will affect both PENDING and ACCEPTED/REJECTED PSC endpoints. For example, an ACCEPTED PSC endpoint will be moved to REJECTED if its project is added to the reject list.
         :param pulumi.Input[builtins.str] region: URL of the region where the resource resides.
+        :param pulumi.Input[builtins.bool] send_propagated_connection_limit_if_zero: Controls the behavior of propagated_connection_limit.
+               When false, setting propagated_connection_limit to zero causes the provider to use to the API's default value.
+               When true, the provider will set propagated_connection_limit to zero.
+               Defaults to false.
         :param pulumi.Input[builtins.str] target_service: The URL of a service serving the endpoint identified by this service attachment.
         """
         ...
@@ -1296,6 +1345,7 @@ class ServiceAttachment(pulumi.CustomResource):
                  propagated_connection_limit: Optional[pulumi.Input[builtins.int]] = None,
                  reconcile_connections: Optional[pulumi.Input[builtins.bool]] = None,
                  region: Optional[pulumi.Input[builtins.str]] = None,
+                 send_propagated_connection_limit_if_zero: Optional[pulumi.Input[builtins.bool]] = None,
                  target_service: Optional[pulumi.Input[builtins.str]] = None,
                  __props__=None):
         opts = pulumi.ResourceOptions.merge(_utilities.get_resource_opts_defaults(), opts)
@@ -1324,6 +1374,7 @@ class ServiceAttachment(pulumi.CustomResource):
             __props__.__dict__["propagated_connection_limit"] = propagated_connection_limit
             __props__.__dict__["reconcile_connections"] = reconcile_connections
             __props__.__dict__["region"] = region
+            __props__.__dict__["send_propagated_connection_limit_if_zero"] = send_propagated_connection_limit_if_zero
             if target_service is None and not opts.urn:
                 raise TypeError("Missing required property 'target_service'")
             __props__.__dict__["target_service"] = target_service
@@ -1355,6 +1406,7 @@ class ServiceAttachment(pulumi.CustomResource):
             reconcile_connections: Optional[pulumi.Input[builtins.bool]] = None,
             region: Optional[pulumi.Input[builtins.str]] = None,
             self_link: Optional[pulumi.Input[builtins.str]] = None,
+            send_propagated_connection_limit_if_zero: Optional[pulumi.Input[builtins.bool]] = None,
             target_service: Optional[pulumi.Input[builtins.str]] = None) -> 'ServiceAttachment':
         """
         Get an existing ServiceAttachment resource's state with the given name, id, and optional extra
@@ -1399,12 +1451,16 @@ class ServiceAttachment(pulumi.CustomResource):
                This limit lets the service producer limit how many propagated Private Service Connect connections can be established to this service attachment from a single consumer.
                If the connection preference of the service attachment is ACCEPT_MANUAL, the limit applies to each project or network that is listed in the consumer accept list.
                If the connection preference of the service attachment is ACCEPT_AUTOMATIC, the limit applies to each project that contains a connected endpoint.
-               If unspecified, the default propagated connection limit is 250.
+               If unspecified, the default propagated connection limit is 250. To explicitly send a zero value, set `send_propagated_connection_limit_if_zero = true`.
         :param pulumi.Input[builtins.bool] reconcile_connections: This flag determines whether a consumer accept/reject list change can reconcile the statuses of existing ACCEPTED or REJECTED PSC endpoints.
                If false, connection policy update will only affect existing PENDING PSC endpoints. Existing ACCEPTED/REJECTED endpoints will remain untouched regardless how the connection policy is modified .
                If true, update will affect both PENDING and ACCEPTED/REJECTED PSC endpoints. For example, an ACCEPTED PSC endpoint will be moved to REJECTED if its project is added to the reject list.
         :param pulumi.Input[builtins.str] region: URL of the region where the resource resides.
         :param pulumi.Input[builtins.str] self_link: The URI of the created resource.
+        :param pulumi.Input[builtins.bool] send_propagated_connection_limit_if_zero: Controls the behavior of propagated_connection_limit.
+               When false, setting propagated_connection_limit to zero causes the provider to use to the API's default value.
+               When true, the provider will set propagated_connection_limit to zero.
+               Defaults to false.
         :param pulumi.Input[builtins.str] target_service: The URL of a service serving the endpoint identified by this service attachment.
         """
         opts = pulumi.ResourceOptions.merge(opts, pulumi.ResourceOptions(id=id))
@@ -1426,6 +1482,7 @@ class ServiceAttachment(pulumi.CustomResource):
         __props__.__dict__["reconcile_connections"] = reconcile_connections
         __props__.__dict__["region"] = region
         __props__.__dict__["self_link"] = self_link
+        __props__.__dict__["send_propagated_connection_limit_if_zero"] = send_propagated_connection_limit_if_zero
         __props__.__dict__["target_service"] = target_service
         return ServiceAttachment(resource_name, opts=opts, __props__=__props__)
 
@@ -1546,7 +1603,7 @@ class ServiceAttachment(pulumi.CustomResource):
         This limit lets the service producer limit how many propagated Private Service Connect connections can be established to this service attachment from a single consumer.
         If the connection preference of the service attachment is ACCEPT_MANUAL, the limit applies to each project or network that is listed in the consumer accept list.
         If the connection preference of the service attachment is ACCEPT_AUTOMATIC, the limit applies to each project that contains a connected endpoint.
-        If unspecified, the default propagated connection limit is 250.
+        If unspecified, the default propagated connection limit is 250. To explicitly send a zero value, set `send_propagated_connection_limit_if_zero = true`.
         """
         return pulumi.get(self, "propagated_connection_limit")
 
@@ -1576,6 +1633,17 @@ class ServiceAttachment(pulumi.CustomResource):
         """
         return pulumi.get(self, "self_link")
 
+    @property
+    @pulumi.getter(name="sendPropagatedConnectionLimitIfZero")
+    def send_propagated_connection_limit_if_zero(self) -> pulumi.Output[Optional[builtins.bool]]:
+        """
+        Controls the behavior of propagated_connection_limit.
+        When false, setting propagated_connection_limit to zero causes the provider to use to the API's default value.
+        When true, the provider will set propagated_connection_limit to zero.
+        Defaults to false.
+        """
+        return pulumi.get(self, "send_propagated_connection_limit_if_zero")
+
     @property
     @pulumi.getter(name="targetService")
     def target_service(self) -> pulumi.Output[builtins.str]:

pulumi_gcp/config/__init__.pyi

@@ -118,6 +118,8 @@ composerCustomEndpoint: Optional[str]
 
 computeCustomEndpoint: Optional[str]
 
+contactCenterInsightsCustomEndpoint: Optional[str]
+
 containerAnalysisCustomEndpoint: Optional[str]
 
 containerAttachedCustomEndpoint: Optional[str]

pulumi_gcp/config/vars.py

@@ -226,6 +226,10 @@ class _ExportableConfig(types.ModuleType):
     def compute_custom_endpoint(self) -> Optional[str]:
         return __config__.get('computeCustomEndpoint')
 
+    @property
+    def contact_center_insights_custom_endpoint(self) -> Optional[str]:
+        return __config__.get('contactCenterInsightsCustomEndpoint')
+
     @property
     def container_analysis_custom_endpoint(self) -> Optional[str]:
         return __config__.get('containerAnalysisCustomEndpoint')

pulumi_gcp/contactcenterinsights/__init__.py

@@ -0,0 +1,9 @@
+# coding=utf-8
+# *** WARNING: this file was generated by pulumi-language-python. ***
+# *** Do not edit by hand unless you're certain you know what you are doing! ***
+
+import builtins
+from .. import _utilities
+import typing
+# Export this package's modules as members:
+from .view import *