Docs Home Pulumi IaC Pulumi ESC Pulumi Insights Pulumi Cloud Packages Tutorials
  1. Packages
  2. Google Cloud Native
  3. API Docs
  4. compute
  5. compute/alpha
  6. ServiceAttachment

Google Cloud Native is in preview. Google Cloud Classic is fully supported.

Google Cloud Native v0.32.0 published on Wednesday, Nov 29, 2023 by Pulumi
pulumi/pulumi-google-native

google-native.compute/alpha.ServiceAttachment

Explore with Pulumi AI

Google Cloud Native is in preview. Google Cloud Classic is fully supported.

Google Cloud Native v0.32.0 published on Wednesday, Nov 29, 2023 by Pulumi
pulumi/pulumi-google-native

Creates a ServiceAttachment in the specified project in the given scope using the parameters that are included in the request.

Create ServiceAttachment Resource

Resources are created with functions called constructors. To learn more about declaring and configuring resources, see Resources.

Constructor syntax

new ServiceAttachment(name: string, args: ServiceAttachmentArgs, opts?: CustomResourceOptions);
@overload
def ServiceAttachment(resource_name: str,
                      args: ServiceAttachmentArgs,
                      opts: Optional[ResourceOptions] = None)

@overload
def ServiceAttachment(resource_name: str,
                      opts: Optional[ResourceOptions] = None,
                      region: Optional[str] = None,
                      domain_names: Optional[Sequence[str]] = None,
                      reconcile_connections: Optional[bool] = None,
                      description: Optional[str] = None,
                      connection_preference: Optional[ServiceAttachmentConnectionPreference] = None,
                      enable_proxy_protocol: Optional[bool] = None,
                      name: Optional[str] = None,
                      consumer_reject_lists: Optional[Sequence[str]] = None,
                      project: Optional[str] = None,
                      nat_subnets: Optional[Sequence[str]] = None,
                      propagated_connection_limit: Optional[int] = None,
                      producer_forwarding_rule: Optional[str] = None,
                      consumer_accept_lists: Optional[Sequence[ServiceAttachmentConsumerProjectLimitArgs]] = None,
                      request_id: Optional[str] = None,
                      target_service: Optional[str] = None,
                      tunneling_config: Optional[ServiceAttachmentTunnelingConfigArgs] = None)
func NewServiceAttachment(ctx *Context, name string, args ServiceAttachmentArgs, opts ...ResourceOption) (*ServiceAttachment, error)
public ServiceAttachment(string name, ServiceAttachmentArgs args, CustomResourceOptions? opts = null)
public ServiceAttachment(String name, ServiceAttachmentArgs args)
public ServiceAttachment(String name, ServiceAttachmentArgs args, CustomResourceOptions options)

type: google-native:compute/alpha:ServiceAttachment
properties: # The arguments to resource properties.
options: # Bag of options to control resource's behavior.

Parameters

name This property is required. string
The unique name of the resource.
args This property is required. ServiceAttachmentArgs
The arguments to resource properties.
opts CustomResourceOptions
Bag of options to control resource's behavior.
resource_name This property is required. str
The unique name of the resource.
args This property is required. ServiceAttachmentArgs
The arguments to resource properties.
opts ResourceOptions
Bag of options to control resource's behavior.
ctx Context
Context object for the current deployment.
name This property is required. string
The unique name of the resource.
args This property is required. ServiceAttachmentArgs
The arguments to resource properties.
opts ResourceOption
Bag of options to control resource's behavior.
name This property is required. string
The unique name of the resource.
args This property is required. ServiceAttachmentArgs
The arguments to resource properties.
opts CustomResourceOptions
Bag of options to control resource's behavior.
name This property is required. String
The unique name of the resource.
args This property is required. ServiceAttachmentArgs
The arguments to resource properties.
options CustomResourceOptions
Bag of options to control resource's behavior.

Constructor example

The following reference example uses placeholder values for all input properties.

var serviceAttachmentResource = new GoogleNative.Compute.Alpha.ServiceAttachment("serviceAttachmentResource", new()
{
    Region = "string",
    DomainNames = new[]
    {
        "string",
    },
    ReconcileConnections = false,
    Description = "string",
    ConnectionPreference = GoogleNative.Compute.Alpha.ServiceAttachmentConnectionPreference.AcceptAutomatic,
    EnableProxyProtocol = false,
    Name = "string",
    ConsumerRejectLists = new[]
    {
        "string",
    },
    Project = "string",
    NatSubnets = new[]
    {
        "string",
    },
    PropagatedConnectionLimit = 0,
    ProducerForwardingRule = "string",
    ConsumerAcceptLists = new[]
    {
        new GoogleNative.Compute.Alpha.Inputs.ServiceAttachmentConsumerProjectLimitArgs
        {
            ConnectionLimit = 0,
            NetworkUrl = "string",
            ProjectIdOrNum = "string",
        },
    },
    RequestId = "string",
    TargetService = "string",
    TunnelingConfig = new GoogleNative.Compute.Alpha.Inputs.ServiceAttachmentTunnelingConfigArgs
    {
        EncapsulationProfile = GoogleNative.Compute.Alpha.ServiceAttachmentTunnelingConfigEncapsulationProfile.GeneveSecurityV1,
        RoutingMode = GoogleNative.Compute.Alpha.ServiceAttachmentTunnelingConfigRoutingMode.PacketInjection,
    },
});
Copy
example, err := compute.NewServiceAttachment(ctx, "serviceAttachmentResource", &compute.ServiceAttachmentArgs{
	Region: pulumi.String("string"),
	DomainNames: pulumi.StringArray{
		pulumi.String("string"),
	},
	ReconcileConnections: pulumi.Bool(false),
	Description:          pulumi.String("string"),
	ConnectionPreference: compute.ServiceAttachmentConnectionPreferenceAcceptAutomatic,
	EnableProxyProtocol:  pulumi.Bool(false),
	Name:                 pulumi.String("string"),
	ConsumerRejectLists: pulumi.StringArray{
		pulumi.String("string"),
	},
	Project: pulumi.String("string"),
	NatSubnets: pulumi.StringArray{
		pulumi.String("string"),
	},
	PropagatedConnectionLimit: pulumi.Int(0),
	ProducerForwardingRule:    pulumi.String("string"),
	ConsumerAcceptLists: compute.ServiceAttachmentConsumerProjectLimitArray{
		&compute.ServiceAttachmentConsumerProjectLimitArgs{
			ConnectionLimit: pulumi.Int(0),
			NetworkUrl:      pulumi.String("string"),
			ProjectIdOrNum:  pulumi.String("string"),
		},
	},
	RequestId:     pulumi.String("string"),
	TargetService: pulumi.String("string"),
	TunnelingConfig: &compute.ServiceAttachmentTunnelingConfigArgs{
		EncapsulationProfile: compute.ServiceAttachmentTunnelingConfigEncapsulationProfileGeneveSecurityV1,
		RoutingMode:          compute.ServiceAttachmentTunnelingConfigRoutingModePacketInjection,
	},
})
Copy
var serviceAttachmentResource = new ServiceAttachment("serviceAttachmentResource", ServiceAttachmentArgs.builder()
    .region("string")
    .domainNames("string")
    .reconcileConnections(false)
    .description("string")
    .connectionPreference("ACCEPT_AUTOMATIC")
    .enableProxyProtocol(false)
    .name("string")
    .consumerRejectLists("string")
    .project("string")
    .natSubnets("string")
    .propagatedConnectionLimit(0)
    .producerForwardingRule("string")
    .consumerAcceptLists(ServiceAttachmentConsumerProjectLimitArgs.builder()
        .connectionLimit(0)
        .networkUrl("string")
        .projectIdOrNum("string")
        .build())
    .requestId("string")
    .targetService("string")
    .tunnelingConfig(ServiceAttachmentTunnelingConfigArgs.builder()
        .encapsulationProfile("GENEVE_SECURITY_V1")
        .routingMode("PACKET_INJECTION")
        .build())
    .build());
Copy
service_attachment_resource = google_native.compute.alpha.ServiceAttachment("serviceAttachmentResource",
    region="string",
    domain_names=["string"],
    reconcile_connections=False,
    description="string",
    connection_preference=google_native.compute.alpha.ServiceAttachmentConnectionPreference.ACCEPT_AUTOMATIC,
    enable_proxy_protocol=False,
    name="string",
    consumer_reject_lists=["string"],
    project="string",
    nat_subnets=["string"],
    propagated_connection_limit=0,
    producer_forwarding_rule="string",
    consumer_accept_lists=[{
        "connection_limit": 0,
        "network_url": "string",
        "project_id_or_num": "string",
    }],
    request_id="string",
    target_service="string",
    tunneling_config={
        "encapsulation_profile": google_native.compute.alpha.ServiceAttachmentTunnelingConfigEncapsulationProfile.GENEVE_SECURITY_V1,
        "routing_mode": google_native.compute.alpha.ServiceAttachmentTunnelingConfigRoutingMode.PACKET_INJECTION,
    })
Copy
const serviceAttachmentResource = new google_native.compute.alpha.ServiceAttachment("serviceAttachmentResource", {
    region: "string",
    domainNames: ["string"],
    reconcileConnections: false,
    description: "string",
    connectionPreference: google_native.compute.alpha.ServiceAttachmentConnectionPreference.AcceptAutomatic,
    enableProxyProtocol: false,
    name: "string",
    consumerRejectLists: ["string"],
    project: "string",
    natSubnets: ["string"],
    propagatedConnectionLimit: 0,
    producerForwardingRule: "string",
    consumerAcceptLists: [{
        connectionLimit: 0,
        networkUrl: "string",
        projectIdOrNum: "string",
    }],
    requestId: "string",
    targetService: "string",
    tunnelingConfig: {
        encapsulationProfile: google_native.compute.alpha.ServiceAttachmentTunnelingConfigEncapsulationProfile.GeneveSecurityV1,
        routingMode: google_native.compute.alpha.ServiceAttachmentTunnelingConfigRoutingMode.PacketInjection,
    },
});
Copy
type: google-native:compute/alpha:ServiceAttachment
properties:
    connectionPreference: ACCEPT_AUTOMATIC
    consumerAcceptLists:
        - connectionLimit: 0
          networkUrl: string
          projectIdOrNum: string
    consumerRejectLists:
        - string
    description: string
    domainNames:
        - string
    enableProxyProtocol: false
    name: string
    natSubnets:
        - string
    producerForwardingRule: string
    project: string
    propagatedConnectionLimit: 0
    reconcileConnections: false
    region: string
    requestId: string
    targetService: string
    tunnelingConfig:
        encapsulationProfile: GENEVE_SECURITY_V1
        routingMode: PACKET_INJECTION
Copy

ServiceAttachment Resource Properties

To learn more about resource properties and how to use them, see Inputs and Outputs in the Architecture and Concepts docs.

Inputs

In Python, inputs that are objects can be passed either as argument classes or as dictionary literals.

The ServiceAttachment resource accepts the following input properties:

Region
This property is required.
Changes to this property will trigger replacement.
string
ConnectionPreference Pulumi.GoogleNative.Compute.Alpha.ServiceAttachmentConnectionPreference
The connection preference of service attachment. The value can be set to ACCEPT_AUTOMATIC. An ACCEPT_AUTOMATIC service attachment is one that always accepts the connection from consumer forwarding rules.
ConsumerAcceptLists List<Pulumi.GoogleNative.Compute.Alpha.Inputs.ServiceAttachmentConsumerProjectLimit>
Projects that are allowed to connect to this service attachment.
ConsumerRejectLists List<string>
Projects that are not allowed to connect to this service attachment. The project can be specified using its id or number.
Description string
An optional description of this resource. Provide this property when you create the resource.
DomainNames List<string>
If specified, the domain name will be used during the integration between the PSC connected endpoints and the Cloud DNS. For example, this is a valid domain name: "p.mycompany.com.". Current max number of domain names supported is 1.
EnableProxyProtocol bool
If true, enable the proxy protocol which is for supplying client TCP/IP address data in TCP connections that traverse proxies on their way to destination servers.
Name string
Name of the resource. Provided by the client when the resource is created. The name must be 1-63 characters long, and comply with RFC1035. Specifically, the name must be 1-63 characters long and match the regular expression [a-z]([-a-z0-9]*[a-z0-9])? which means the first character must be a lowercase letter, and all following characters must be a dash, lowercase letter, or digit, except the last character, which cannot be a dash.
NatSubnets List<string>
An array of URLs where each entry is the URL of a subnet provided by the service producer to use for NAT in this service attachment.
ProducerForwardingRule string
The URL of a forwarding rule with loadBalancingScheme INTERNAL* that is serving the endpoint identified by this service attachment.
Project Changes to this property will trigger replacement. string
PropagatedConnectionLimit int
The number of VPCs to which this endpoint is allowed to be propagated per accept list resource (project or network). For ACCEPT_AUTOMATIC service attachment, this limit is default to per project.
ReconcileConnections bool
This flag determines whether a consumer accept/reject list change can reconcile the statuses of existing ACCEPTED or REJECTED PSC endpoints. - If false, connection policy update will only affect existing PENDING PSC endpoints. Existing ACCEPTED/REJECTED endpoints will remain untouched regardless how the connection policy is modified . - If true, update will affect both PENDING and ACCEPTED/REJECTED PSC endpoints. For example, an ACCEPTED PSC endpoint will be moved to REJECTED if its project is added to the reject list. For newly created service attachment, this boolean defaults to false.
RequestId string
An optional request ID to identify requests. Specify a unique request ID so that if you must retry your request, the server will know to ignore the request if it has already been completed. For example, consider a situation where you make an initial request and the request times out. If you make the request again with the same request ID, the server can check if original operation with the same request ID was received, and if so, will ignore the second request. This prevents clients from accidentally creating duplicate commitments. The request ID must be a valid UUID with the exception that zero UUID is not supported ( 00000000-0000-0000-0000-000000000000).
TargetService string
The URL of a service serving the endpoint identified by this service attachment.
TunnelingConfig Pulumi.GoogleNative.Compute.Alpha.Inputs.ServiceAttachmentTunnelingConfig
When a tunneling config is set on this service attachment it will encapsulate traffic between consumer and producer. When tunneling is enabled: - nat_subnets must be unset - enable_proxy_protocol must be false - producer_forwarding_rule must be a L4 ILB. -
Region
This property is required.
Changes to this property will trigger replacement.
string
ConnectionPreference ServiceAttachmentConnectionPreference
The connection preference of service attachment. The value can be set to ACCEPT_AUTOMATIC. An ACCEPT_AUTOMATIC service attachment is one that always accepts the connection from consumer forwarding rules.
ConsumerAcceptLists []ServiceAttachmentConsumerProjectLimitArgs
Projects that are allowed to connect to this service attachment.
ConsumerRejectLists []string
Projects that are not allowed to connect to this service attachment. The project can be specified using its id or number.
Description string
An optional description of this resource. Provide this property when you create the resource.
DomainNames []string
If specified, the domain name will be used during the integration between the PSC connected endpoints and the Cloud DNS. For example, this is a valid domain name: "p.mycompany.com.". Current max number of domain names supported is 1.
EnableProxyProtocol bool
If true, enable the proxy protocol which is for supplying client TCP/IP address data in TCP connections that traverse proxies on their way to destination servers.
Name string
Name of the resource. Provided by the client when the resource is created. The name must be 1-63 characters long, and comply with RFC1035. Specifically, the name must be 1-63 characters long and match the regular expression [a-z]([-a-z0-9]*[a-z0-9])? which means the first character must be a lowercase letter, and all following characters must be a dash, lowercase letter, or digit, except the last character, which cannot be a dash.
NatSubnets []string
An array of URLs where each entry is the URL of a subnet provided by the service producer to use for NAT in this service attachment.
ProducerForwardingRule string
The URL of a forwarding rule with loadBalancingScheme INTERNAL* that is serving the endpoint identified by this service attachment.
Project Changes to this property will trigger replacement. string
PropagatedConnectionLimit int
The number of VPCs to which this endpoint is allowed to be propagated per accept list resource (project or network). For ACCEPT_AUTOMATIC service attachment, this limit is default to per project.
ReconcileConnections bool
This flag determines whether a consumer accept/reject list change can reconcile the statuses of existing ACCEPTED or REJECTED PSC endpoints. - If false, connection policy update will only affect existing PENDING PSC endpoints. Existing ACCEPTED/REJECTED endpoints will remain untouched regardless how the connection policy is modified . - If true, update will affect both PENDING and ACCEPTED/REJECTED PSC endpoints. For example, an ACCEPTED PSC endpoint will be moved to REJECTED if its project is added to the reject list. For newly created service attachment, this boolean defaults to false.
RequestId string
An optional request ID to identify requests. Specify a unique request ID so that if you must retry your request, the server will know to ignore the request if it has already been completed. For example, consider a situation where you make an initial request and the request times out. If you make the request again with the same request ID, the server can check if original operation with the same request ID was received, and if so, will ignore the second request. This prevents clients from accidentally creating duplicate commitments. The request ID must be a valid UUID with the exception that zero UUID is not supported ( 00000000-0000-0000-0000-000000000000).
TargetService string
The URL of a service serving the endpoint identified by this service attachment.
TunnelingConfig ServiceAttachmentTunnelingConfigArgs
When a tunneling config is set on this service attachment it will encapsulate traffic between consumer and producer. When tunneling is enabled: - nat_subnets must be unset - enable_proxy_protocol must be false - producer_forwarding_rule must be a L4 ILB. -
region
This property is required.
Changes to this property will trigger replacement.
String
connectionPreference ServiceAttachmentConnectionPreference
The connection preference of service attachment. The value can be set to ACCEPT_AUTOMATIC. An ACCEPT_AUTOMATIC service attachment is one that always accepts the connection from consumer forwarding rules.
consumerAcceptLists List<ServiceAttachmentConsumerProjectLimit>
Projects that are allowed to connect to this service attachment.
consumerRejectLists List<String>
Projects that are not allowed to connect to this service attachment. The project can be specified using its id or number.
description String
An optional description of this resource. Provide this property when you create the resource.
domainNames List<String>
If specified, the domain name will be used during the integration between the PSC connected endpoints and the Cloud DNS. For example, this is a valid domain name: "p.mycompany.com.". Current max number of domain names supported is 1.
enableProxyProtocol Boolean
If true, enable the proxy protocol which is for supplying client TCP/IP address data in TCP connections that traverse proxies on their way to destination servers.
name String
Name of the resource. Provided by the client when the resource is created. The name must be 1-63 characters long, and comply with RFC1035. Specifically, the name must be 1-63 characters long and match the regular expression [a-z]([-a-z0-9]*[a-z0-9])? which means the first character must be a lowercase letter, and all following characters must be a dash, lowercase letter, or digit, except the last character, which cannot be a dash.
natSubnets List<String>
An array of URLs where each entry is the URL of a subnet provided by the service producer to use for NAT in this service attachment.
producerForwardingRule String
The URL of a forwarding rule with loadBalancingScheme INTERNAL* that is serving the endpoint identified by this service attachment.
project Changes to this property will trigger replacement. String
propagatedConnectionLimit Integer
The number of VPCs to which this endpoint is allowed to be propagated per accept list resource (project or network). For ACCEPT_AUTOMATIC service attachment, this limit is default to per project.
reconcileConnections Boolean
This flag determines whether a consumer accept/reject list change can reconcile the statuses of existing ACCEPTED or REJECTED PSC endpoints. - If false, connection policy update will only affect existing PENDING PSC endpoints. Existing ACCEPTED/REJECTED endpoints will remain untouched regardless how the connection policy is modified . - If true, update will affect both PENDING and ACCEPTED/REJECTED PSC endpoints. For example, an ACCEPTED PSC endpoint will be moved to REJECTED if its project is added to the reject list. For newly created service attachment, this boolean defaults to false.
requestId String
An optional request ID to identify requests. Specify a unique request ID so that if you must retry your request, the server will know to ignore the request if it has already been completed. For example, consider a situation where you make an initial request and the request times out. If you make the request again with the same request ID, the server can check if original operation with the same request ID was received, and if so, will ignore the second request. This prevents clients from accidentally creating duplicate commitments. The request ID must be a valid UUID with the exception that zero UUID is not supported ( 00000000-0000-0000-0000-000000000000).
targetService String
The URL of a service serving the endpoint identified by this service attachment.
tunnelingConfig ServiceAttachmentTunnelingConfig
When a tunneling config is set on this service attachment it will encapsulate traffic between consumer and producer. When tunneling is enabled: - nat_subnets must be unset - enable_proxy_protocol must be false - producer_forwarding_rule must be a L4 ILB. -
region
This property is required.
Changes to this property will trigger replacement.
string
connectionPreference ServiceAttachmentConnectionPreference
The connection preference of service attachment. The value can be set to ACCEPT_AUTOMATIC. An ACCEPT_AUTOMATIC service attachment is one that always accepts the connection from consumer forwarding rules.
consumerAcceptLists ServiceAttachmentConsumerProjectLimit[]
Projects that are allowed to connect to this service attachment.
consumerRejectLists string[]
Projects that are not allowed to connect to this service attachment. The project can be specified using its id or number.
description string
An optional description of this resource. Provide this property when you create the resource.
domainNames string[]
If specified, the domain name will be used during the integration between the PSC connected endpoints and the Cloud DNS. For example, this is a valid domain name: "p.mycompany.com.". Current max number of domain names supported is 1.
enableProxyProtocol boolean
If true, enable the proxy protocol which is for supplying client TCP/IP address data in TCP connections that traverse proxies on their way to destination servers.
name string
Name of the resource. Provided by the client when the resource is created. The name must be 1-63 characters long, and comply with RFC1035. Specifically, the name must be 1-63 characters long and match the regular expression [a-z]([-a-z0-9]*[a-z0-9])? which means the first character must be a lowercase letter, and all following characters must be a dash, lowercase letter, or digit, except the last character, which cannot be a dash.
natSubnets string[]
An array of URLs where each entry is the URL of a subnet provided by the service producer to use for NAT in this service attachment.
producerForwardingRule string
The URL of a forwarding rule with loadBalancingScheme INTERNAL* that is serving the endpoint identified by this service attachment.
project Changes to this property will trigger replacement. string
propagatedConnectionLimit number
The number of VPCs to which this endpoint is allowed to be propagated per accept list resource (project or network). For ACCEPT_AUTOMATIC service attachment, this limit is default to per project.
reconcileConnections boolean
This flag determines whether a consumer accept/reject list change can reconcile the statuses of existing ACCEPTED or REJECTED PSC endpoints. - If false, connection policy update will only affect existing PENDING PSC endpoints. Existing ACCEPTED/REJECTED endpoints will remain untouched regardless how the connection policy is modified . - If true, update will affect both PENDING and ACCEPTED/REJECTED PSC endpoints. For example, an ACCEPTED PSC endpoint will be moved to REJECTED if its project is added to the reject list. For newly created service attachment, this boolean defaults to false.
requestId string
An optional request ID to identify requests. Specify a unique request ID so that if you must retry your request, the server will know to ignore the request if it has already been completed. For example, consider a situation where you make an initial request and the request times out. If you make the request again with the same request ID, the server can check if original operation with the same request ID was received, and if so, will ignore the second request. This prevents clients from accidentally creating duplicate commitments. The request ID must be a valid UUID with the exception that zero UUID is not supported ( 00000000-0000-0000-0000-000000000000).
targetService string
The URL of a service serving the endpoint identified by this service attachment.
tunnelingConfig ServiceAttachmentTunnelingConfig
When a tunneling config is set on this service attachment it will encapsulate traffic between consumer and producer. When tunneling is enabled: - nat_subnets must be unset - enable_proxy_protocol must be false - producer_forwarding_rule must be a L4 ILB. -
region
This property is required.
Changes to this property will trigger replacement.
str
connection_preference ServiceAttachmentConnectionPreference
The connection preference of service attachment. The value can be set to ACCEPT_AUTOMATIC. An ACCEPT_AUTOMATIC service attachment is one that always accepts the connection from consumer forwarding rules.
consumer_accept_lists Sequence[ServiceAttachmentConsumerProjectLimitArgs]
Projects that are allowed to connect to this service attachment.
consumer_reject_lists Sequence[str]
Projects that are not allowed to connect to this service attachment. The project can be specified using its id or number.
description str
An optional description of this resource. Provide this property when you create the resource.
domain_names Sequence[str]
If specified, the domain name will be used during the integration between the PSC connected endpoints and the Cloud DNS. For example, this is a valid domain name: "p.mycompany.com.". Current max number of domain names supported is 1.
enable_proxy_protocol bool
If true, enable the proxy protocol which is for supplying client TCP/IP address data in TCP connections that traverse proxies on their way to destination servers.
name str
Name of the resource. Provided by the client when the resource is created. The name must be 1-63 characters long, and comply with RFC1035. Specifically, the name must be 1-63 characters long and match the regular expression [a-z]([-a-z0-9]*[a-z0-9])? which means the first character must be a lowercase letter, and all following characters must be a dash, lowercase letter, or digit, except the last character, which cannot be a dash.
nat_subnets Sequence[str]
An array of URLs where each entry is the URL of a subnet provided by the service producer to use for NAT in this service attachment.
producer_forwarding_rule str
The URL of a forwarding rule with loadBalancingScheme INTERNAL* that is serving the endpoint identified by this service attachment.
project Changes to this property will trigger replacement. str
propagated_connection_limit int
The number of VPCs to which this endpoint is allowed to be propagated per accept list resource (project or network). For ACCEPT_AUTOMATIC service attachment, this limit is default to per project.
reconcile_connections bool
This flag determines whether a consumer accept/reject list change can reconcile the statuses of existing ACCEPTED or REJECTED PSC endpoints. - If false, connection policy update will only affect existing PENDING PSC endpoints. Existing ACCEPTED/REJECTED endpoints will remain untouched regardless how the connection policy is modified . - If true, update will affect both PENDING and ACCEPTED/REJECTED PSC endpoints. For example, an ACCEPTED PSC endpoint will be moved to REJECTED if its project is added to the reject list. For newly created service attachment, this boolean defaults to false.
request_id str
An optional request ID to identify requests. Specify a unique request ID so that if you must retry your request, the server will know to ignore the request if it has already been completed. For example, consider a situation where you make an initial request and the request times out. If you make the request again with the same request ID, the server can check if original operation with the same request ID was received, and if so, will ignore the second request. This prevents clients from accidentally creating duplicate commitments. The request ID must be a valid UUID with the exception that zero UUID is not supported ( 00000000-0000-0000-0000-000000000000).
target_service str
The URL of a service serving the endpoint identified by this service attachment.
tunneling_config ServiceAttachmentTunnelingConfigArgs
When a tunneling config is set on this service attachment it will encapsulate traffic between consumer and producer. When tunneling is enabled: - nat_subnets must be unset - enable_proxy_protocol must be false - producer_forwarding_rule must be a L4 ILB. -
region
This property is required.
Changes to this property will trigger replacement.
String
connectionPreference "ACCEPT_AUTOMATIC" | "ACCEPT_MANUAL" | "CONNECTION_PREFERENCE_UNSPECIFIED"
The connection preference of service attachment. The value can be set to ACCEPT_AUTOMATIC. An ACCEPT_AUTOMATIC service attachment is one that always accepts the connection from consumer forwarding rules.
consumerAcceptLists List<Property Map>
Projects that are allowed to connect to this service attachment.
consumerRejectLists List<String>
Projects that are not allowed to connect to this service attachment. The project can be specified using its id or number.
description String
An optional description of this resource. Provide this property when you create the resource.
domainNames List<String>
If specified, the domain name will be used during the integration between the PSC connected endpoints and the Cloud DNS. For example, this is a valid domain name: "p.mycompany.com.". Current max number of domain names supported is 1.
enableProxyProtocol Boolean
If true, enable the proxy protocol which is for supplying client TCP/IP address data in TCP connections that traverse proxies on their way to destination servers.
name String
Name of the resource. Provided by the client when the resource is created. The name must be 1-63 characters long, and comply with RFC1035. Specifically, the name must be 1-63 characters long and match the regular expression [a-z]([-a-z0-9]*[a-z0-9])? which means the first character must be a lowercase letter, and all following characters must be a dash, lowercase letter, or digit, except the last character, which cannot be a dash.
natSubnets List<String>
An array of URLs where each entry is the URL of a subnet provided by the service producer to use for NAT in this service attachment.
producerForwardingRule String
The URL of a forwarding rule with loadBalancingScheme INTERNAL* that is serving the endpoint identified by this service attachment.
project Changes to this property will trigger replacement. String
propagatedConnectionLimit Number
The number of VPCs to which this endpoint is allowed to be propagated per accept list resource (project or network). For ACCEPT_AUTOMATIC service attachment, this limit is default to per project.
reconcileConnections Boolean
This flag determines whether a consumer accept/reject list change can reconcile the statuses of existing ACCEPTED or REJECTED PSC endpoints. - If false, connection policy update will only affect existing PENDING PSC endpoints. Existing ACCEPTED/REJECTED endpoints will remain untouched regardless how the connection policy is modified . - If true, update will affect both PENDING and ACCEPTED/REJECTED PSC endpoints. For example, an ACCEPTED PSC endpoint will be moved to REJECTED if its project is added to the reject list. For newly created service attachment, this boolean defaults to false.
requestId String
An optional request ID to identify requests. Specify a unique request ID so that if you must retry your request, the server will know to ignore the request if it has already been completed. For example, consider a situation where you make an initial request and the request times out. If you make the request again with the same request ID, the server can check if original operation with the same request ID was received, and if so, will ignore the second request. This prevents clients from accidentally creating duplicate commitments. The request ID must be a valid UUID with the exception that zero UUID is not supported ( 00000000-0000-0000-0000-000000000000).
targetService String
The URL of a service serving the endpoint identified by this service attachment.
tunnelingConfig Property Map
When a tunneling config is set on this service attachment it will encapsulate traffic between consumer and producer. When tunneling is enabled: - nat_subnets must be unset - enable_proxy_protocol must be false - producer_forwarding_rule must be a L4 ILB. -

Outputs

All input properties are implicitly available as output properties. Additionally, the ServiceAttachment resource produces the following output properties:

ConnectedEndpoints List<Pulumi.GoogleNative.Compute.Alpha.Outputs.ServiceAttachmentConnectedEndpointResponse>
An array of connections for all the consumers connected to this service attachment.
CreationTimestamp string
Creation timestamp in RFC3339 text format.
Fingerprint string
Fingerprint of this resource. A hash of the contents stored in this object. This field is used in optimistic locking. This field will be ignored when inserting a ServiceAttachment. An up-to-date fingerprint must be provided in order to patch/update the ServiceAttachment; otherwise, the request will fail with error 412 conditionNotMet. To see the latest fingerprint, make a get() request to retrieve the ServiceAttachment.
Id string
The provider-assigned unique ID for this managed resource.
Kind string
Type of the resource. Always compute#serviceAttachment for service attachments.
PscServiceAttachmentId Pulumi.GoogleNative.Compute.Alpha.Outputs.Uint128Response
An 128-bit global unique ID of the PSC service attachment.
SelfLink string
Server-defined URL for the resource.
ConnectedEndpoints []ServiceAttachmentConnectedEndpointResponse
An array of connections for all the consumers connected to this service attachment.
CreationTimestamp string
Creation timestamp in RFC3339 text format.
Fingerprint string
Fingerprint of this resource. A hash of the contents stored in this object. This field is used in optimistic locking. This field will be ignored when inserting a ServiceAttachment. An up-to-date fingerprint must be provided in order to patch/update the ServiceAttachment; otherwise, the request will fail with error 412 conditionNotMet. To see the latest fingerprint, make a get() request to retrieve the ServiceAttachment.
Id string
The provider-assigned unique ID for this managed resource.
Kind string
Type of the resource. Always compute#serviceAttachment for service attachments.
PscServiceAttachmentId Uint128Response
An 128-bit global unique ID of the PSC service attachment.
SelfLink string
Server-defined URL for the resource.
connectedEndpoints List<ServiceAttachmentConnectedEndpointResponse>
An array of connections for all the consumers connected to this service attachment.
creationTimestamp String
Creation timestamp in RFC3339 text format.
fingerprint String
Fingerprint of this resource. A hash of the contents stored in this object. This field is used in optimistic locking. This field will be ignored when inserting a ServiceAttachment. An up-to-date fingerprint must be provided in order to patch/update the ServiceAttachment; otherwise, the request will fail with error 412 conditionNotMet. To see the latest fingerprint, make a get() request to retrieve the ServiceAttachment.
id String
The provider-assigned unique ID for this managed resource.
kind String
Type of the resource. Always compute#serviceAttachment for service attachments.
pscServiceAttachmentId Uint128Response
An 128-bit global unique ID of the PSC service attachment.
selfLink String
Server-defined URL for the resource.
connectedEndpoints ServiceAttachmentConnectedEndpointResponse[]
An array of connections for all the consumers connected to this service attachment.
creationTimestamp string
Creation timestamp in RFC3339 text format.
fingerprint string
Fingerprint of this resource. A hash of the contents stored in this object. This field is used in optimistic locking. This field will be ignored when inserting a ServiceAttachment. An up-to-date fingerprint must be provided in order to patch/update the ServiceAttachment; otherwise, the request will fail with error 412 conditionNotMet. To see the latest fingerprint, make a get() request to retrieve the ServiceAttachment.
id string
The provider-assigned unique ID for this managed resource.
kind string
Type of the resource. Always compute#serviceAttachment for service attachments.
pscServiceAttachmentId Uint128Response
An 128-bit global unique ID of the PSC service attachment.
selfLink string
Server-defined URL for the resource.
connected_endpoints Sequence[ServiceAttachmentConnectedEndpointResponse]
An array of connections for all the consumers connected to this service attachment.
creation_timestamp str
Creation timestamp in RFC3339 text format.
fingerprint str
Fingerprint of this resource. A hash of the contents stored in this object. This field is used in optimistic locking. This field will be ignored when inserting a ServiceAttachment. An up-to-date fingerprint must be provided in order to patch/update the ServiceAttachment; otherwise, the request will fail with error 412 conditionNotMet. To see the latest fingerprint, make a get() request to retrieve the ServiceAttachment.
id str
The provider-assigned unique ID for this managed resource.
kind str
Type of the resource. Always compute#serviceAttachment for service attachments.
psc_service_attachment_id Uint128Response
An 128-bit global unique ID of the PSC service attachment.
self_link str
Server-defined URL for the resource.
connectedEndpoints List<Property Map>
An array of connections for all the consumers connected to this service attachment.
creationTimestamp String
Creation timestamp in RFC3339 text format.
fingerprint String
Fingerprint of this resource. A hash of the contents stored in this object. This field is used in optimistic locking. This field will be ignored when inserting a ServiceAttachment. An up-to-date fingerprint must be provided in order to patch/update the ServiceAttachment; otherwise, the request will fail with error 412 conditionNotMet. To see the latest fingerprint, make a get() request to retrieve the ServiceAttachment.
id String
The provider-assigned unique ID for this managed resource.
kind String
Type of the resource. Always compute#serviceAttachment for service attachments.
pscServiceAttachmentId Property Map
An 128-bit global unique ID of the PSC service attachment.
selfLink String
Server-defined URL for the resource.

Supporting Types

ServiceAttachmentConnectedEndpointResponse
, ServiceAttachmentConnectedEndpointResponseArgs

ConsumerNetwork This property is required. string
The url of the consumer network.
Endpoint This property is required. string
The url of a connected endpoint.
PscConnectionId This property is required. string
The PSC connection id of the connected endpoint.
Status This property is required. string
The status of a connected endpoint to this service attachment.
ConsumerNetwork This property is required. string
The url of the consumer network.
Endpoint This property is required. string
The url of a connected endpoint.
PscConnectionId This property is required. string
The PSC connection id of the connected endpoint.
Status This property is required. string
The status of a connected endpoint to this service attachment.
consumerNetwork This property is required. String
The url of the consumer network.
endpoint This property is required. String
The url of a connected endpoint.
pscConnectionId This property is required. String
The PSC connection id of the connected endpoint.
status This property is required. String
The status of a connected endpoint to this service attachment.
consumerNetwork This property is required. string
The url of the consumer network.
endpoint This property is required. string
The url of a connected endpoint.
pscConnectionId This property is required. string
The PSC connection id of the connected endpoint.
status This property is required. string
The status of a connected endpoint to this service attachment.
consumer_network This property is required. str
The url of the consumer network.
endpoint This property is required. str
The url of a connected endpoint.
psc_connection_id This property is required. str
The PSC connection id of the connected endpoint.
status This property is required. str
The status of a connected endpoint to this service attachment.
consumerNetwork This property is required. String
The url of the consumer network.
endpoint This property is required. String
The url of a connected endpoint.
pscConnectionId This property is required. String
The PSC connection id of the connected endpoint.
status This property is required. String
The status of a connected endpoint to this service attachment.

ServiceAttachmentConnectionPreference
, ServiceAttachmentConnectionPreferenceArgs

AcceptAutomatic
ACCEPT_AUTOMATIC
AcceptManual
ACCEPT_MANUAL
ConnectionPreferenceUnspecified
CONNECTION_PREFERENCE_UNSPECIFIED
ServiceAttachmentConnectionPreferenceAcceptAutomatic
ACCEPT_AUTOMATIC
ServiceAttachmentConnectionPreferenceAcceptManual
ACCEPT_MANUAL
ServiceAttachmentConnectionPreferenceConnectionPreferenceUnspecified
CONNECTION_PREFERENCE_UNSPECIFIED
AcceptAutomatic
ACCEPT_AUTOMATIC
AcceptManual
ACCEPT_MANUAL
ConnectionPreferenceUnspecified
CONNECTION_PREFERENCE_UNSPECIFIED
AcceptAutomatic
ACCEPT_AUTOMATIC
AcceptManual
ACCEPT_MANUAL
ConnectionPreferenceUnspecified
CONNECTION_PREFERENCE_UNSPECIFIED
ACCEPT_AUTOMATIC
ACCEPT_AUTOMATIC
ACCEPT_MANUAL
ACCEPT_MANUAL
CONNECTION_PREFERENCE_UNSPECIFIED
CONNECTION_PREFERENCE_UNSPECIFIED
"ACCEPT_AUTOMATIC"
ACCEPT_AUTOMATIC
"ACCEPT_MANUAL"
ACCEPT_MANUAL
"CONNECTION_PREFERENCE_UNSPECIFIED"
CONNECTION_PREFERENCE_UNSPECIFIED

ServiceAttachmentConsumerProjectLimit
, ServiceAttachmentConsumerProjectLimitArgs

ConnectionLimit int
The value of the limit to set.
NetworkUrl string
The network URL for the network to set the limit for.
ProjectIdOrNum string
The project id or number for the project to set the limit for.
ConnectionLimit int
The value of the limit to set.
NetworkUrl string
The network URL for the network to set the limit for.
ProjectIdOrNum string
The project id or number for the project to set the limit for.
connectionLimit Integer
The value of the limit to set.
networkUrl String
The network URL for the network to set the limit for.
projectIdOrNum String
The project id or number for the project to set the limit for.
connectionLimit number
The value of the limit to set.
networkUrl string
The network URL for the network to set the limit for.
projectIdOrNum string
The project id or number for the project to set the limit for.
connection_limit int
The value of the limit to set.
network_url str
The network URL for the network to set the limit for.
project_id_or_num str
The project id or number for the project to set the limit for.
connectionLimit Number
The value of the limit to set.
networkUrl String
The network URL for the network to set the limit for.
projectIdOrNum String
The project id or number for the project to set the limit for.

ServiceAttachmentConsumerProjectLimitResponse
, ServiceAttachmentConsumerProjectLimitResponseArgs

ConnectionLimit This property is required. int
The value of the limit to set.
NetworkUrl This property is required. string
The network URL for the network to set the limit for.
ProjectIdOrNum This property is required. string
The project id or number for the project to set the limit for.
ConnectionLimit This property is required. int
The value of the limit to set.
NetworkUrl This property is required. string
The network URL for the network to set the limit for.
ProjectIdOrNum This property is required. string
The project id or number for the project to set the limit for.
connectionLimit This property is required. Integer
The value of the limit to set.
networkUrl This property is required. String
The network URL for the network to set the limit for.
projectIdOrNum This property is required. String
The project id or number for the project to set the limit for.
connectionLimit This property is required. number
The value of the limit to set.
networkUrl This property is required. string
The network URL for the network to set the limit for.
projectIdOrNum This property is required. string
The project id or number for the project to set the limit for.
connection_limit This property is required. int
The value of the limit to set.
network_url This property is required. str
The network URL for the network to set the limit for.
project_id_or_num This property is required. str
The project id or number for the project to set the limit for.
connectionLimit This property is required. Number
The value of the limit to set.
networkUrl This property is required. String
The network URL for the network to set the limit for.
projectIdOrNum This property is required. String
The project id or number for the project to set the limit for.

ServiceAttachmentTunnelingConfig
, ServiceAttachmentTunnelingConfigArgs

EncapsulationProfile Pulumi.GoogleNative.Compute.Alpha.ServiceAttachmentTunnelingConfigEncapsulationProfile
Specify the encapsulation protocol and what metadata to include in incoming encapsulated packet headers.
RoutingMode Pulumi.GoogleNative.Compute.Alpha.ServiceAttachmentTunnelingConfigRoutingMode
How this Service Attachment will treat traffic sent to the tunnel_ip, destined for the consumer network.
EncapsulationProfile ServiceAttachmentTunnelingConfigEncapsulationProfile
Specify the encapsulation protocol and what metadata to include in incoming encapsulated packet headers.
RoutingMode ServiceAttachmentTunnelingConfigRoutingMode
How this Service Attachment will treat traffic sent to the tunnel_ip, destined for the consumer network.
encapsulationProfile ServiceAttachmentTunnelingConfigEncapsulationProfile
Specify the encapsulation protocol and what metadata to include in incoming encapsulated packet headers.
routingMode ServiceAttachmentTunnelingConfigRoutingMode
How this Service Attachment will treat traffic sent to the tunnel_ip, destined for the consumer network.
encapsulationProfile ServiceAttachmentTunnelingConfigEncapsulationProfile
Specify the encapsulation protocol and what metadata to include in incoming encapsulated packet headers.
routingMode ServiceAttachmentTunnelingConfigRoutingMode
How this Service Attachment will treat traffic sent to the tunnel_ip, destined for the consumer network.
encapsulation_profile ServiceAttachmentTunnelingConfigEncapsulationProfile
Specify the encapsulation protocol and what metadata to include in incoming encapsulated packet headers.
routing_mode ServiceAttachmentTunnelingConfigRoutingMode
How this Service Attachment will treat traffic sent to the tunnel_ip, destined for the consumer network.
encapsulationProfile "GENEVE_SECURITY_V1" | "UNSPECIFIED_ENCAPSULATION_PROFILE"
Specify the encapsulation protocol and what metadata to include in incoming encapsulated packet headers.
routingMode "PACKET_INJECTION" | "STANDARD_ROUTING" | "UNSPECIFIED_ROUTING_MODE"
How this Service Attachment will treat traffic sent to the tunnel_ip, destined for the consumer network.

ServiceAttachmentTunnelingConfigEncapsulationProfile
, ServiceAttachmentTunnelingConfigEncapsulationProfileArgs

GeneveSecurityV1
GENEVE_SECURITY_V1Use GENEVE encapsulation protocol and include the SECURITY_V1 set of GENEVE headers.
UnspecifiedEncapsulationProfile
UNSPECIFIED_ENCAPSULATION_PROFILE
ServiceAttachmentTunnelingConfigEncapsulationProfileGeneveSecurityV1
GENEVE_SECURITY_V1Use GENEVE encapsulation protocol and include the SECURITY_V1 set of GENEVE headers.
ServiceAttachmentTunnelingConfigEncapsulationProfileUnspecifiedEncapsulationProfile
UNSPECIFIED_ENCAPSULATION_PROFILE
GeneveSecurityV1
GENEVE_SECURITY_V1Use GENEVE encapsulation protocol and include the SECURITY_V1 set of GENEVE headers.
UnspecifiedEncapsulationProfile
UNSPECIFIED_ENCAPSULATION_PROFILE
GeneveSecurityV1
GENEVE_SECURITY_V1Use GENEVE encapsulation protocol and include the SECURITY_V1 set of GENEVE headers.
UnspecifiedEncapsulationProfile
UNSPECIFIED_ENCAPSULATION_PROFILE
GENEVE_SECURITY_V1
GENEVE_SECURITY_V1Use GENEVE encapsulation protocol and include the SECURITY_V1 set of GENEVE headers.
UNSPECIFIED_ENCAPSULATION_PROFILE
UNSPECIFIED_ENCAPSULATION_PROFILE
"GENEVE_SECURITY_V1"
GENEVE_SECURITY_V1Use GENEVE encapsulation protocol and include the SECURITY_V1 set of GENEVE headers.
"UNSPECIFIED_ENCAPSULATION_PROFILE"
UNSPECIFIED_ENCAPSULATION_PROFILE

ServiceAttachmentTunnelingConfigResponse
, ServiceAttachmentTunnelingConfigResponseArgs

EncapsulationProfile This property is required. string
Specify the encapsulation protocol and what metadata to include in incoming encapsulated packet headers.
RoutingMode This property is required. string
How this Service Attachment will treat traffic sent to the tunnel_ip, destined for the consumer network.
EncapsulationProfile This property is required. string
Specify the encapsulation protocol and what metadata to include in incoming encapsulated packet headers.
RoutingMode This property is required. string
How this Service Attachment will treat traffic sent to the tunnel_ip, destined for the consumer network.
encapsulationProfile This property is required. String
Specify the encapsulation protocol and what metadata to include in incoming encapsulated packet headers.
routingMode This property is required. String
How this Service Attachment will treat traffic sent to the tunnel_ip, destined for the consumer network.
encapsulationProfile This property is required. string
Specify the encapsulation protocol and what metadata to include in incoming encapsulated packet headers.
routingMode This property is required. string
How this Service Attachment will treat traffic sent to the tunnel_ip, destined for the consumer network.
encapsulation_profile This property is required. str
Specify the encapsulation protocol and what metadata to include in incoming encapsulated packet headers.
routing_mode This property is required. str
How this Service Attachment will treat traffic sent to the tunnel_ip, destined for the consumer network.
encapsulationProfile This property is required. String
Specify the encapsulation protocol and what metadata to include in incoming encapsulated packet headers.
routingMode This property is required. String
How this Service Attachment will treat traffic sent to the tunnel_ip, destined for the consumer network.

ServiceAttachmentTunnelingConfigRoutingMode
, ServiceAttachmentTunnelingConfigRoutingModeArgs

PacketInjection
PACKET_INJECTIONTraffic sent to this service attachment will be reinjected into the consumer network.
StandardRouting
STANDARD_ROUTINGResponse traffic, after de-encapsulation, will be returned to the client.
UnspecifiedRoutingMode
UNSPECIFIED_ROUTING_MODE
ServiceAttachmentTunnelingConfigRoutingModePacketInjection
PACKET_INJECTIONTraffic sent to this service attachment will be reinjected into the consumer network.
ServiceAttachmentTunnelingConfigRoutingModeStandardRouting
STANDARD_ROUTINGResponse traffic, after de-encapsulation, will be returned to the client.
ServiceAttachmentTunnelingConfigRoutingModeUnspecifiedRoutingMode
UNSPECIFIED_ROUTING_MODE
PacketInjection
PACKET_INJECTIONTraffic sent to this service attachment will be reinjected into the consumer network.
StandardRouting
STANDARD_ROUTINGResponse traffic, after de-encapsulation, will be returned to the client.
UnspecifiedRoutingMode
UNSPECIFIED_ROUTING_MODE
PacketInjection
PACKET_INJECTIONTraffic sent to this service attachment will be reinjected into the consumer network.
StandardRouting
STANDARD_ROUTINGResponse traffic, after de-encapsulation, will be returned to the client.
UnspecifiedRoutingMode
UNSPECIFIED_ROUTING_MODE
PACKET_INJECTION
PACKET_INJECTIONTraffic sent to this service attachment will be reinjected into the consumer network.
STANDARD_ROUTING
STANDARD_ROUTINGResponse traffic, after de-encapsulation, will be returned to the client.
UNSPECIFIED_ROUTING_MODE
UNSPECIFIED_ROUTING_MODE
"PACKET_INJECTION"
PACKET_INJECTIONTraffic sent to this service attachment will be reinjected into the consumer network.
"STANDARD_ROUTING"
STANDARD_ROUTINGResponse traffic, after de-encapsulation, will be returned to the client.
"UNSPECIFIED_ROUTING_MODE"
UNSPECIFIED_ROUTING_MODE

Uint128Response
, Uint128ResponseArgs

High This property is required. string
Low This property is required. string
High This property is required. string
Low This property is required. string
high This property is required. String
low This property is required. String
high This property is required. string
low This property is required. string
high This property is required. str
low This property is required. str
high This property is required. String
low This property is required. String

Package Details

Repository
Google Cloud Native pulumi/pulumi-google-native
License
Apache-2.0

Google Cloud Native is in preview. Google Cloud Classic is fully supported.

Google Cloud Native v0.32.0 published on Wednesday, Nov 29, 2023 by Pulumi
pulumi/pulumi-google-native