Docs Home
Google Cloud v8.31.0 published on Thursday, May 15, 2025 by Pulumi
gcp.dns.ManagedZone
Explore with Pulumi AI
A zone is a subtree of the DNS namespace under one administrative responsibility. A ManagedZone is a resource that represents a DNS zone hosted by the Cloud DNS service.
To get more information about ManagedZone, see:
- API documentation
- How-to Guides
Example Usage
Dns Managed Zone Basic
import * as pulumi from "@pulumi/pulumi";
import * as gcp from "@pulumi/gcp";
const example_zone = new gcp.dns.ManagedZone("example-zone", {
name: "example-zone",
dnsName: "my-domain.com.",
description: "Example DNS zone",
labels: {
foo: "bar",
},
});
import pulumi
import pulumi_gcp as gcp
example_zone = gcp.dns.ManagedZone("example-zone",
name="example-zone",
dns_name="my-domain.com.",
description="Example DNS zone",
labels={
"foo": "bar",
})
package main
import (
"github.com/pulumi/pulumi-gcp/sdk/v8/go/gcp/dns"
"github.com/pulumi/pulumi/sdk/v3/go/pulumi"
)
func main() {
pulumi.Run(func(ctx *pulumi.Context) error {
_, err := dns.NewManagedZone(ctx, "example-zone", &dns.ManagedZoneArgs{
Name: pulumi.String("example-zone"),
DnsName: pulumi.String("my-domain.com."),
Description: pulumi.String("Example DNS zone"),
Labels: pulumi.StringMap{
"foo": pulumi.String("bar"),
},
})
if err != nil {
return err
}
return nil
})
}
using System.Collections.Generic;
using System.Linq;
using Pulumi;
using Gcp = Pulumi.Gcp;
return await Deployment.RunAsync(() =>
{
var example_zone = new Gcp.Dns.ManagedZone("example-zone", new()
{
Name = "example-zone",
DnsName = "my-domain.com.",
Description = "Example DNS zone",
Labels =
{
{ "foo", "bar" },
},
});
});
package generated_program;
import com.pulumi.Context;
import com.pulumi.Pulumi;
import com.pulumi.core.Output;
import com.pulumi.gcp.dns.ManagedZone;
import com.pulumi.gcp.dns.ManagedZoneArgs;
import java.util.List;
import java.util.ArrayList;
import java.util.Map;
import java.io.File;
import java.nio.file.Files;
import java.nio.file.Paths;
public class App {
public static void main(String[] args) {
Pulumi.run(App::stack);
}
public static void stack(Context ctx) {
var example_zone = new ManagedZone("example-zone", ManagedZoneArgs.builder()
.name("example-zone")
.dnsName("my-domain.com.")
.description("Example DNS zone")
.labels(Map.of("foo", "bar"))
.build());
}
}
resources:
example-zone:
type: gcp:dns:ManagedZone
properties:
name: example-zone
dnsName: my-domain.com.
description: Example DNS zone
labels:
foo: bar
Dns Managed Zone Private
import * as pulumi from "@pulumi/pulumi";
import * as gcp from "@pulumi/gcp";
const network_1 = new gcp.compute.Network("network-1", {
name: "network-1",
autoCreateSubnetworks: false,
});
const network_2 = new gcp.compute.Network("network-2", {
name: "network-2",
autoCreateSubnetworks: false,
});
const private_zone = new gcp.dns.ManagedZone("private-zone", {
name: "private-zone",
dnsName: "private.example.com.",
description: "Example private DNS zone",
labels: {
foo: "bar",
},
visibility: "private",
privateVisibilityConfig: {
networks: [
{
networkUrl: network_1.id,
},
{
networkUrl: network_2.id,
},
],
},
});
import pulumi
import pulumi_gcp as gcp
network_1 = gcp.compute.Network("network-1",
name="network-1",
auto_create_subnetworks=False)
network_2 = gcp.compute.Network("network-2",
name="network-2",
auto_create_subnetworks=False)
private_zone = gcp.dns.ManagedZone("private-zone",
name="private-zone",
dns_name="private.example.com.",
description="Example private DNS zone",
labels={
"foo": "bar",
},
visibility="private",
private_visibility_config={
"networks": [
{
"network_url": network_1.id,
},
{
"network_url": network_2.id,
},
],
})
package main
import (
"github.com/pulumi/pulumi-gcp/sdk/v8/go/gcp/compute"
"github.com/pulumi/pulumi-gcp/sdk/v8/go/gcp/dns"
"github.com/pulumi/pulumi/sdk/v3/go/pulumi"
)
func main() {
pulumi.Run(func(ctx *pulumi.Context) error {
network_1, err := compute.NewNetwork(ctx, "network-1", &compute.NetworkArgs{
Name: pulumi.String("network-1"),
AutoCreateSubnetworks: pulumi.Bool(false),
})
if err != nil {
return err
}
network_2, err := compute.NewNetwork(ctx, "network-2", &compute.NetworkArgs{
Name: pulumi.String("network-2"),
AutoCreateSubnetworks: pulumi.Bool(false),
})
if err != nil {
return err
}
_, err = dns.NewManagedZone(ctx, "private-zone", &dns.ManagedZoneArgs{
Name: pulumi.String("private-zone"),
DnsName: pulumi.String("private.example.com."),
Description: pulumi.String("Example private DNS zone"),
Labels: pulumi.StringMap{
"foo": pulumi.String("bar"),
},
Visibility: pulumi.String("private"),
PrivateVisibilityConfig: &dns.ManagedZonePrivateVisibilityConfigArgs{
Networks: dns.ManagedZonePrivateVisibilityConfigNetworkArray{
&dns.ManagedZonePrivateVisibilityConfigNetworkArgs{
NetworkUrl: network_1.ID(),
},
&dns.ManagedZonePrivateVisibilityConfigNetworkArgs{
NetworkUrl: network_2.ID(),
},
},
},
})
if err != nil {
return err
}
return nil
})
}
using System.Collections.Generic;
using System.Linq;
using Pulumi;
using Gcp = Pulumi.Gcp;
return await Deployment.RunAsync(() =>
{
var network_1 = new Gcp.Compute.Network("network-1", new()
{
Name = "network-1",
AutoCreateSubnetworks = false,
});
var network_2 = new Gcp.Compute.Network("network-2", new()
{
Name = "network-2",
AutoCreateSubnetworks = false,
});
var private_zone = new Gcp.Dns.ManagedZone("private-zone", new()
{
Name = "private-zone",
DnsName = "private.example.com.",
Description = "Example private DNS zone",
Labels =
{
{ "foo", "bar" },
},
Visibility = "private",
PrivateVisibilityConfig = new Gcp.Dns.Inputs.ManagedZonePrivateVisibilityConfigArgs
{
Networks = new[]
{
new Gcp.Dns.Inputs.ManagedZonePrivateVisibilityConfigNetworkArgs
{
NetworkUrl = network_1.Id,
},
new Gcp.Dns.Inputs.ManagedZonePrivateVisibilityConfigNetworkArgs
{
NetworkUrl = network_2.Id,
},
},
},
});
});
package generated_program;
import com.pulumi.Context;
import com.pulumi.Pulumi;
import com.pulumi.core.Output;
import com.pulumi.gcp.compute.Network;
import com.pulumi.gcp.compute.NetworkArgs;
import com.pulumi.gcp.dns.ManagedZone;
import com.pulumi.gcp.dns.ManagedZoneArgs;
import com.pulumi.gcp.dns.inputs.ManagedZonePrivateVisibilityConfigArgs;
import java.util.List;
import java.util.ArrayList;
import java.util.Map;
import java.io.File;
import java.nio.file.Files;
import java.nio.file.Paths;
public class App {
public static void main(String[] args) {
Pulumi.run(App::stack);
}
public static void stack(Context ctx) {
var network_1 = new Network("network-1", NetworkArgs.builder()
.name("network-1")
.autoCreateSubnetworks(false)
.build());
var network_2 = new Network("network-2", NetworkArgs.builder()
.name("network-2")
.autoCreateSubnetworks(false)
.build());
var private_zone = new ManagedZone("private-zone", ManagedZoneArgs.builder()
.name("private-zone")
.dnsName("private.example.com.")
.description("Example private DNS zone")
.labels(Map.of("foo", "bar"))
.visibility("private")
.privateVisibilityConfig(ManagedZonePrivateVisibilityConfigArgs.builder()
.networks(
ManagedZonePrivateVisibilityConfigNetworkArgs.builder()
.networkUrl(network_1.id())
.build(),
ManagedZonePrivateVisibilityConfigNetworkArgs.builder()
.networkUrl(network_2.id())
.build())
.build())
.build());
}
}
resources:
private-zone:
type: gcp:dns:ManagedZone
properties:
name: private-zone
dnsName: private.example.com.
description: Example private DNS zone
labels:
foo: bar
visibility: private
privateVisibilityConfig:
networks:
- networkUrl: ${["network-1"].id}
- networkUrl: ${["network-2"].id}
network-1:
type: gcp:compute:Network
properties:
name: network-1
autoCreateSubnetworks: false
network-2:
type: gcp:compute:Network
properties:
name: network-2
autoCreateSubnetworks: false
Dns Managed Zone Private Forwarding
import * as pulumi from "@pulumi/pulumi";
import * as gcp from "@pulumi/gcp";
const network_1 = new gcp.compute.Network("network-1", {
name: "network-1",
autoCreateSubnetworks: false,
});
const network_2 = new gcp.compute.Network("network-2", {
name: "network-2",
autoCreateSubnetworks: false,
});
const private_zone = new gcp.dns.ManagedZone("private-zone", {
name: "private-zone",
dnsName: "private.example.com.",
description: "Example private DNS zone",
labels: {
foo: "bar",
},
visibility: "private",
privateVisibilityConfig: {
networks: [
{
networkUrl: network_1.id,
},
{
networkUrl: network_2.id,
},
],
},
forwardingConfig: {
targetNameServers: [
{
ipv4Address: "172.16.1.10",
},
{
ipv4Address: "172.16.1.20",
},
],
},
});
import pulumi
import pulumi_gcp as gcp
network_1 = gcp.compute.Network("network-1",
name="network-1",
auto_create_subnetworks=False)
network_2 = gcp.compute.Network("network-2",
name="network-2",
auto_create_subnetworks=False)
private_zone = gcp.dns.ManagedZone("private-zone",
name="private-zone",
dns_name="private.example.com.",
description="Example private DNS zone",
labels={
"foo": "bar",
},
visibility="private",
private_visibility_config={
"networks": [
{
"network_url": network_1.id,
},
{
"network_url": network_2.id,
},
],
},
forwarding_config={
"target_name_servers": [
{
"ipv4_address": "172.16.1.10",
},
{
"ipv4_address": "172.16.1.20",
},
],
})
package main
import (
"github.com/pulumi/pulumi-gcp/sdk/v8/go/gcp/compute"
"github.com/pulumi/pulumi-gcp/sdk/v8/go/gcp/dns"
"github.com/pulumi/pulumi/sdk/v3/go/pulumi"
)
func main() {
pulumi.Run(func(ctx *pulumi.Context) error {
network_1, err := compute.NewNetwork(ctx, "network-1", &compute.NetworkArgs{
Name: pulumi.String("network-1"),
AutoCreateSubnetworks: pulumi.Bool(false),
})
if err != nil {
return err
}
network_2, err := compute.NewNetwork(ctx, "network-2", &compute.NetworkArgs{
Name: pulumi.String("network-2"),
AutoCreateSubnetworks: pulumi.Bool(false),
})
if err != nil {
return err
}
_, err = dns.NewManagedZone(ctx, "private-zone", &dns.ManagedZoneArgs{
Name: pulumi.String("private-zone"),
DnsName: pulumi.String("private.example.com."),
Description: pulumi.String("Example private DNS zone"),
Labels: pulumi.StringMap{
"foo": pulumi.String("bar"),
},
Visibility: pulumi.String("private"),
PrivateVisibilityConfig: &dns.ManagedZonePrivateVisibilityConfigArgs{
Networks: dns.ManagedZonePrivateVisibilityConfigNetworkArray{
&dns.ManagedZonePrivateVisibilityConfigNetworkArgs{
NetworkUrl: network_1.ID(),
},
&dns.ManagedZonePrivateVisibilityConfigNetworkArgs{
NetworkUrl: network_2.ID(),
},
},
},
ForwardingConfig: &dns.ManagedZoneForwardingConfigArgs{
TargetNameServers: dns.ManagedZoneForwardingConfigTargetNameServerArray{
&dns.ManagedZoneForwardingConfigTargetNameServerArgs{
Ipv4Address: pulumi.String("172.16.1.10"),
},
&dns.ManagedZoneForwardingConfigTargetNameServerArgs{
Ipv4Address: pulumi.String("172.16.1.20"),
},
},
},
})
if err != nil {
return err
}
return nil
})
}
using System.Collections.Generic;
using System.Linq;
using Pulumi;
using Gcp = Pulumi.Gcp;
return await Deployment.RunAsync(() =>
{
var network_1 = new Gcp.Compute.Network("network-1", new()
{
Name = "network-1",
AutoCreateSubnetworks = false,
});
var network_2 = new Gcp.Compute.Network("network-2", new()
{
Name = "network-2",
AutoCreateSubnetworks = false,
});
var private_zone = new Gcp.Dns.ManagedZone("private-zone", new()
{
Name = "private-zone",
DnsName = "private.example.com.",
Description = "Example private DNS zone",
Labels =
{
{ "foo", "bar" },
},
Visibility = "private",
PrivateVisibilityConfig = new Gcp.Dns.Inputs.ManagedZonePrivateVisibilityConfigArgs
{
Networks = new[]
{
new Gcp.Dns.Inputs.ManagedZonePrivateVisibilityConfigNetworkArgs
{
NetworkUrl = network_1.Id,
},
new Gcp.Dns.Inputs.ManagedZonePrivateVisibilityConfigNetworkArgs
{
NetworkUrl = network_2.Id,
},
},
},
ForwardingConfig = new Gcp.Dns.Inputs.ManagedZoneForwardingConfigArgs
{
TargetNameServers = new[]
{
new Gcp.Dns.Inputs.ManagedZoneForwardingConfigTargetNameServerArgs
{
Ipv4Address = "172.16.1.10",
},
new Gcp.Dns.Inputs.ManagedZoneForwardingConfigTargetNameServerArgs
{
Ipv4Address = "172.16.1.20",
},
},
},
});
});
package generated_program;
import com.pulumi.Context;
import com.pulumi.Pulumi;
import com.pulumi.core.Output;
import com.pulumi.gcp.compute.Network;
import com.pulumi.gcp.compute.NetworkArgs;
import com.pulumi.gcp.dns.ManagedZone;
import com.pulumi.gcp.dns.ManagedZoneArgs;
import com.pulumi.gcp.dns.inputs.ManagedZonePrivateVisibilityConfigArgs;
import com.pulumi.gcp.dns.inputs.ManagedZoneForwardingConfigArgs;
import java.util.List;
import java.util.ArrayList;
import java.util.Map;
import java.io.File;
import java.nio.file.Files;
import java.nio.file.Paths;
public class App {
public static void main(String[] args) {
Pulumi.run(App::stack);
}
public static void stack(Context ctx) {
var network_1 = new Network("network-1", NetworkArgs.builder()
.name("network-1")
.autoCreateSubnetworks(false)
.build());
var network_2 = new Network("network-2", NetworkArgs.builder()
.name("network-2")
.autoCreateSubnetworks(false)
.build());
var private_zone = new ManagedZone("private-zone", ManagedZoneArgs.builder()
.name("private-zone")
.dnsName("private.example.com.")
.description("Example private DNS zone")
.labels(Map.of("foo", "bar"))
.visibility("private")
.privateVisibilityConfig(ManagedZonePrivateVisibilityConfigArgs.builder()
.networks(
ManagedZonePrivateVisibilityConfigNetworkArgs.builder()
.networkUrl(network_1.id())
.build(),
ManagedZonePrivateVisibilityConfigNetworkArgs.builder()
.networkUrl(network_2.id())
.build())
.build())
.forwardingConfig(ManagedZoneForwardingConfigArgs.builder()
.targetNameServers(
ManagedZoneForwardingConfigTargetNameServerArgs.builder()
.ipv4Address("172.16.1.10")
.build(),
ManagedZoneForwardingConfigTargetNameServerArgs.builder()
.ipv4Address("172.16.1.20")
.build())
.build())
.build());
}
}
resources:
private-zone:
type: gcp:dns:ManagedZone
properties:
name: private-zone
dnsName: private.example.com.
description: Example private DNS zone
labels:
foo: bar
visibility: private
privateVisibilityConfig:
networks:
- networkUrl: ${["network-1"].id}
- networkUrl: ${["network-2"].id}
forwardingConfig:
targetNameServers:
- ipv4Address: 172.16.1.10
- ipv4Address: 172.16.1.20
network-1:
type: gcp:compute:Network
properties:
name: network-1
autoCreateSubnetworks: false
network-2:
type: gcp:compute:Network
properties:
name: network-2
autoCreateSubnetworks: false
Dns Managed Zone Private Gke
import * as pulumi from "@pulumi/pulumi";
import * as gcp from "@pulumi/gcp";
const network_1 = new gcp.compute.Network("network-1", {
name: "network-1",
autoCreateSubnetworks: false,
});
const subnetwork_1 = new gcp.compute.Subnetwork("subnetwork-1", {
name: network_1.name,
network: network_1.name,
ipCidrRange: "10.0.36.0/24",
region: "us-central1",
privateIpGoogleAccess: true,
secondaryIpRanges: [
{
rangeName: "pod",
ipCidrRange: "10.0.0.0/19",
},
{
rangeName: "svc",
ipCidrRange: "10.0.32.0/22",
},
],
});
const cluster_1 = new gcp.container.Cluster("cluster-1", {
name: "cluster-1",
location: "us-central1-c",
initialNodeCount: 1,
networkingMode: "VPC_NATIVE",
defaultSnatStatus: {
disabled: true,
},
network: network_1.name,
subnetwork: subnetwork_1.name,
privateClusterConfig: {
enablePrivateEndpoint: true,
enablePrivateNodes: true,
masterIpv4CidrBlock: "10.42.0.0/28",
masterGlobalAccessConfig: {
enabled: true,
},
},
masterAuthorizedNetworksConfig: {},
ipAllocationPolicy: {
clusterSecondaryRangeName: subnetwork_1.secondaryIpRanges.apply(secondaryIpRanges => secondaryIpRanges[0].rangeName),
servicesSecondaryRangeName: subnetwork_1.secondaryIpRanges.apply(secondaryIpRanges => secondaryIpRanges[1].rangeName),
},
deletionProtection: true,
});
const private_zone_gke = new gcp.dns.ManagedZone("private-zone-gke", {
name: "private-zone",
dnsName: "private.example.com.",
description: "Example private DNS zone",
labels: {
foo: "bar",
},
visibility: "private",
privateVisibilityConfig: {
gkeClusters: [{
gkeClusterName: cluster_1.id,
}],
},
});
import pulumi
import pulumi_gcp as gcp
network_1 = gcp.compute.Network("network-1",
name="network-1",
auto_create_subnetworks=False)
subnetwork_1 = gcp.compute.Subnetwork("subnetwork-1",
name=network_1.name,
network=network_1.name,
ip_cidr_range="10.0.36.0/24",
region="us-central1",
private_ip_google_access=True,
secondary_ip_ranges=[
{
"range_name": "pod",
"ip_cidr_range": "10.0.0.0/19",
},
{
"range_name": "svc",
"ip_cidr_range": "10.0.32.0/22",
},
])
cluster_1 = gcp.container.Cluster("cluster-1",
name="cluster-1",
location="us-central1-c",
initial_node_count=1,
networking_mode="VPC_NATIVE",
default_snat_status={
"disabled": True,
},
network=network_1.name,
subnetwork=subnetwork_1.name,
private_cluster_config={
"enable_private_endpoint": True,
"enable_private_nodes": True,
"master_ipv4_cidr_block": "10.42.0.0/28",
"master_global_access_config": {
"enabled": True,
},
},
master_authorized_networks_config={},
ip_allocation_policy={
"cluster_secondary_range_name": subnetwork_1.secondary_ip_ranges[0].range_name,
"services_secondary_range_name": subnetwork_1.secondary_ip_ranges[1].range_name,
},
deletion_protection=True)
private_zone_gke = gcp.dns.ManagedZone("private-zone-gke",
name="private-zone",
dns_name="private.example.com.",
description="Example private DNS zone",
labels={
"foo": "bar",
},
visibility="private",
private_visibility_config={
"gke_clusters": [{
"gke_cluster_name": cluster_1.id,
}],
})
package main
import (
"github.com/pulumi/pulumi-gcp/sdk/v8/go/gcp/compute"
"github.com/pulumi/pulumi-gcp/sdk/v8/go/gcp/container"
"github.com/pulumi/pulumi-gcp/sdk/v8/go/gcp/dns"
"github.com/pulumi/pulumi/sdk/v3/go/pulumi"
)
func main() {
pulumi.Run(func(ctx *pulumi.Context) error {
network_1, err := compute.NewNetwork(ctx, "network-1", &compute.NetworkArgs{
Name: pulumi.String("network-1"),
AutoCreateSubnetworks: pulumi.Bool(false),
})
if err != nil {
return err
}
subnetwork_1, err := compute.NewSubnetwork(ctx, "subnetwork-1", &compute.SubnetworkArgs{
Name: network_1.Name,
Network: network_1.Name,
IpCidrRange: pulumi.String("10.0.36.0/24"),
Region: pulumi.String("us-central1"),
PrivateIpGoogleAccess: pulumi.Bool(true),
SecondaryIpRanges: compute.SubnetworkSecondaryIpRangeArray{
&compute.SubnetworkSecondaryIpRangeArgs{
RangeName: pulumi.String("pod"),
IpCidrRange: pulumi.String("10.0.0.0/19"),
},
&compute.SubnetworkSecondaryIpRangeArgs{
RangeName: pulumi.String("svc"),
IpCidrRange: pulumi.String("10.0.32.0/22"),
},
},
})
if err != nil {
return err
}
cluster_1, err := container.NewCluster(ctx, "cluster-1", &container.ClusterArgs{
Name: pulumi.String("cluster-1"),
Location: pulumi.String("us-central1-c"),
InitialNodeCount: pulumi.Int(1),
NetworkingMode: pulumi.String("VPC_NATIVE"),
DefaultSnatStatus: &container.ClusterDefaultSnatStatusArgs{
Disabled: pulumi.Bool(true),
},
Network: network_1.Name,
Subnetwork: subnetwork_1.Name,
PrivateClusterConfig: &container.ClusterPrivateClusterConfigArgs{
EnablePrivateEndpoint: pulumi.Bool(true),
EnablePrivateNodes: pulumi.Bool(true),
MasterIpv4CidrBlock: pulumi.String("10.42.0.0/28"),
MasterGlobalAccessConfig: &container.ClusterPrivateClusterConfigMasterGlobalAccessConfigArgs{
Enabled: pulumi.Bool(true),
},
},
MasterAuthorizedNetworksConfig: &container.ClusterMasterAuthorizedNetworksConfigArgs{},
IpAllocationPolicy: &container.ClusterIpAllocationPolicyArgs{
ClusterSecondaryRangeName: subnetwork_1.SecondaryIpRanges.ApplyT(func(secondaryIpRanges []compute.SubnetworkSecondaryIpRange) (*string, error) {
return &secondaryIpRanges[0].RangeName, nil
}).(pulumi.StringPtrOutput),
ServicesSecondaryRangeName: subnetwork_1.SecondaryIpRanges.ApplyT(func(secondaryIpRanges []compute.SubnetworkSecondaryIpRange) (*string, error) {
return &secondaryIpRanges[1].RangeName, nil
}).(pulumi.StringPtrOutput),
},
DeletionProtection: pulumi.Bool(true),
})
if err != nil {
return err
}
_, err = dns.NewManagedZone(ctx, "private-zone-gke", &dns.ManagedZoneArgs{
Name: pulumi.String("private-zone"),
DnsName: pulumi.String("private.example.com."),
Description: pulumi.String("Example private DNS zone"),
Labels: pulumi.StringMap{
"foo": pulumi.String("bar"),
},
Visibility: pulumi.String("private"),
PrivateVisibilityConfig: &dns.ManagedZonePrivateVisibilityConfigArgs{
GkeClusters: dns.ManagedZonePrivateVisibilityConfigGkeClusterArray{
&dns.ManagedZonePrivateVisibilityConfigGkeClusterArgs{
GkeClusterName: cluster_1.ID(),
},
},
},
})
if err != nil {
return err
}
return nil
})
}
using System.Collections.Generic;
using System.Linq;
using Pulumi;
using Gcp = Pulumi.Gcp;
return await Deployment.RunAsync(() =>
{
var network_1 = new Gcp.Compute.Network("network-1", new()
{
Name = "network-1",
AutoCreateSubnetworks = false,
});
var subnetwork_1 = new Gcp.Compute.Subnetwork("subnetwork-1", new()
{
Name = network_1.Name,
Network = network_1.Name,
IpCidrRange = "10.0.36.0/24",
Region = "us-central1",
PrivateIpGoogleAccess = true,
SecondaryIpRanges = new[]
{
new Gcp.Compute.Inputs.SubnetworkSecondaryIpRangeArgs
{
RangeName = "pod",
IpCidrRange = "10.0.0.0/19",
},
new Gcp.Compute.Inputs.SubnetworkSecondaryIpRangeArgs
{
RangeName = "svc",
IpCidrRange = "10.0.32.0/22",
},
},
});
var cluster_1 = new Gcp.Container.Cluster("cluster-1", new()
{
Name = "cluster-1",
Location = "us-central1-c",
InitialNodeCount = 1,
NetworkingMode = "VPC_NATIVE",
DefaultSnatStatus = new Gcp.Container.Inputs.ClusterDefaultSnatStatusArgs
{
Disabled = true,
},
Network = network_1.Name,
Subnetwork = subnetwork_1.Name,
PrivateClusterConfig = new Gcp.Container.Inputs.ClusterPrivateClusterConfigArgs
{
EnablePrivateEndpoint = true,
EnablePrivateNodes = true,
MasterIpv4CidrBlock = "10.42.0.0/28",
MasterGlobalAccessConfig = new Gcp.Container.Inputs.ClusterPrivateClusterConfigMasterGlobalAccessConfigArgs
{
Enabled = true,
},
},
MasterAuthorizedNetworksConfig = null,
IpAllocationPolicy = new Gcp.Container.Inputs.ClusterIpAllocationPolicyArgs
{
ClusterSecondaryRangeName = subnetwork_1.SecondaryIpRanges.Apply(secondaryIpRanges => secondaryIpRanges[0].RangeName),
ServicesSecondaryRangeName = subnetwork_1.SecondaryIpRanges.Apply(secondaryIpRanges => secondaryIpRanges[1].RangeName),
},
DeletionProtection = true,
});
var private_zone_gke = new Gcp.Dns.ManagedZone("private-zone-gke", new()
{
Name = "private-zone",
DnsName = "private.example.com.",
Description = "Example private DNS zone",
Labels =
{
{ "foo", "bar" },
},
Visibility = "private",
PrivateVisibilityConfig = new Gcp.Dns.Inputs.ManagedZonePrivateVisibilityConfigArgs
{
GkeClusters = new[]
{
new Gcp.Dns.Inputs.ManagedZonePrivateVisibilityConfigGkeClusterArgs
{
GkeClusterName = cluster_1.Id,
},
},
},
});
});
package generated_program;
import com.pulumi.Context;
import com.pulumi.Pulumi;
import com.pulumi.core.Output;
import com.pulumi.gcp.compute.Network;
import com.pulumi.gcp.compute.NetworkArgs;
import com.pulumi.gcp.compute.Subnetwork;
import com.pulumi.gcp.compute.SubnetworkArgs;
import com.pulumi.gcp.compute.inputs.SubnetworkSecondaryIpRangeArgs;
import com.pulumi.gcp.container.Cluster;
import com.pulumi.gcp.container.ClusterArgs;
import com.pulumi.gcp.container.inputs.ClusterDefaultSnatStatusArgs;
import com.pulumi.gcp.container.inputs.ClusterPrivateClusterConfigArgs;
import com.pulumi.gcp.container.inputs.ClusterPrivateClusterConfigMasterGlobalAccessConfigArgs;
import com.pulumi.gcp.container.inputs.ClusterMasterAuthorizedNetworksConfigArgs;
import com.pulumi.gcp.container.inputs.ClusterIpAllocationPolicyArgs;
import com.pulumi.gcp.dns.ManagedZone;
import com.pulumi.gcp.dns.ManagedZoneArgs;
import com.pulumi.gcp.dns.inputs.ManagedZonePrivateVisibilityConfigArgs;
import java.util.List;
import java.util.ArrayList;
import java.util.Map;
import java.io.File;
import java.nio.file.Files;
import java.nio.file.Paths;
public class App {
public static void main(String[] args) {
Pulumi.run(App::stack);
}
public static void stack(Context ctx) {
var network_1 = new Network("network-1", NetworkArgs.builder()
.name("network-1")
.autoCreateSubnetworks(false)
.build());
var subnetwork_1 = new Subnetwork("subnetwork-1", SubnetworkArgs.builder()
.name(network_1.name())
.network(network_1.name())
.ipCidrRange("10.0.36.0/24")
.region("us-central1")
.privateIpGoogleAccess(true)
.secondaryIpRanges(
SubnetworkSecondaryIpRangeArgs.builder()
.rangeName("pod")
.ipCidrRange("10.0.0.0/19")
.build(),
SubnetworkSecondaryIpRangeArgs.builder()
.rangeName("svc")
.ipCidrRange("10.0.32.0/22")
.build())
.build());
var cluster_1 = new Cluster("cluster-1", ClusterArgs.builder()
.name("cluster-1")
.location("us-central1-c")
.initialNodeCount(1)
.networkingMode("VPC_NATIVE")
.defaultSnatStatus(ClusterDefaultSnatStatusArgs.builder()
.disabled(true)
.build())
.network(network_1.name())
.subnetwork(subnetwork_1.name())
.privateClusterConfig(ClusterPrivateClusterConfigArgs.builder()
.enablePrivateEndpoint(true)
.enablePrivateNodes(true)
.masterIpv4CidrBlock("10.42.0.0/28")
.masterGlobalAccessConfig(ClusterPrivateClusterConfigMasterGlobalAccessConfigArgs.builder()
.enabled(true)
.build())
.build())
.masterAuthorizedNetworksConfig(ClusterMasterAuthorizedNetworksConfigArgs.builder()
.build())
.ipAllocationPolicy(ClusterIpAllocationPolicyArgs.builder()
.clusterSecondaryRangeName(subnetwork_1.secondaryIpRanges().applyValue(_secondaryIpRanges -> _secondaryIpRanges[0].rangeName()))
.servicesSecondaryRangeName(subnetwork_1.secondaryIpRanges().applyValue(_secondaryIpRanges -> _secondaryIpRanges[1].rangeName()))
.build())
.deletionProtection(true)
.build());
var private_zone_gke = new ManagedZone("private-zone-gke", ManagedZoneArgs.builder()
.name("private-zone")
.dnsName("private.example.com.")
.description("Example private DNS zone")
.labels(Map.of("foo", "bar"))
.visibility("private")
.privateVisibilityConfig(ManagedZonePrivateVisibilityConfigArgs.builder()
.gkeClusters(ManagedZonePrivateVisibilityConfigGkeClusterArgs.builder()
.gkeClusterName(cluster_1.id())
.build())
.build())
.build());
}
}
resources:
private-zone-gke:
type: gcp:dns:ManagedZone
properties:
name: private-zone
dnsName: private.example.com.
description: Example private DNS zone
labels:
foo: bar
visibility: private
privateVisibilityConfig:
gkeClusters:
- gkeClusterName: ${["cluster-1"].id}
network-1:
type: gcp:compute:Network
properties:
name: network-1
autoCreateSubnetworks: false
subnetwork-1:
type: gcp:compute:Subnetwork
properties:
name: ${["network-1"].name}
network: ${["network-1"].name}
ipCidrRange: 10.0.36.0/24
region: us-central1
privateIpGoogleAccess: true
secondaryIpRanges:
- rangeName: pod
ipCidrRange: 10.0.0.0/19
- rangeName: svc
ipCidrRange: 10.0.32.0/22
cluster-1:
type: gcp:container:Cluster
properties:
name: cluster-1
location: us-central1-c
initialNodeCount: 1
networkingMode: VPC_NATIVE
defaultSnatStatus:
disabled: true
network: ${["network-1"].name}
subnetwork: ${["subnetwork-1"].name}
privateClusterConfig:
enablePrivateEndpoint: true
enablePrivateNodes: true
masterIpv4CidrBlock: 10.42.0.0/28
masterGlobalAccessConfig:
enabled: true
masterAuthorizedNetworksConfig: {}
ipAllocationPolicy:
clusterSecondaryRangeName: ${["subnetwork-1"].secondaryIpRanges[0].rangeName}
servicesSecondaryRangeName: ${["subnetwork-1"].secondaryIpRanges[1].rangeName}
deletionProtection: true
Dns Managed Zone Private Peering
import * as pulumi from "@pulumi/pulumi";
import * as gcp from "@pulumi/gcp";
const network_source = new gcp.compute.Network("network-source", {
name: "network-source",
autoCreateSubnetworks: false,
});
const network_target = new gcp.compute.Network("network-target", {
name: "network-target",
autoCreateSubnetworks: false,
});
const peering_zone = new gcp.dns.ManagedZone("peering-zone", {
name: "peering-zone",
dnsName: "peering.example.com.",
description: "Example private DNS peering zone",
visibility: "private",
privateVisibilityConfig: {
networks: [{
networkUrl: network_source.id,
}],
},
peeringConfig: {
targetNetwork: {
networkUrl: network_target.id,
},
},
});
import pulumi
import pulumi_gcp as gcp
network_source = gcp.compute.Network("network-source",
name="network-source",
auto_create_subnetworks=False)
network_target = gcp.compute.Network("network-target",
name="network-target",
auto_create_subnetworks=False)
peering_zone = gcp.dns.ManagedZone("peering-zone",
name="peering-zone",
dns_name="peering.example.com.",
description="Example private DNS peering zone",
visibility="private",
private_visibility_config={
"networks": [{
"network_url": network_source.id,
}],
},
peering_config={
"target_network": {
"network_url": network_target.id,
},
})
package main
import (
"github.com/pulumi/pulumi-gcp/sdk/v8/go/gcp/compute"
"github.com/pulumi/pulumi-gcp/sdk/v8/go/gcp/dns"
"github.com/pulumi/pulumi/sdk/v3/go/pulumi"
)
func main() {
pulumi.Run(func(ctx *pulumi.Context) error {
network_source, err := compute.NewNetwork(ctx, "network-source", &compute.NetworkArgs{
Name: pulumi.String("network-source"),
AutoCreateSubnetworks: pulumi.Bool(false),
})
if err != nil {
return err
}
network_target, err := compute.NewNetwork(ctx, "network-target", &compute.NetworkArgs{
Name: pulumi.String("network-target"),
AutoCreateSubnetworks: pulumi.Bool(false),
})
if err != nil {
return err
}
_, err = dns.NewManagedZone(ctx, "peering-zone", &dns.ManagedZoneArgs{
Name: pulumi.String("peering-zone"),
DnsName: pulumi.String("peering.example.com."),
Description: pulumi.String("Example private DNS peering zone"),
Visibility: pulumi.String("private"),
PrivateVisibilityConfig: &dns.ManagedZonePrivateVisibilityConfigArgs{
Networks: dns.ManagedZonePrivateVisibilityConfigNetworkArray{
&dns.ManagedZonePrivateVisibilityConfigNetworkArgs{
NetworkUrl: network_source.ID(),
},
},
},
PeeringConfig: &dns.ManagedZonePeeringConfigArgs{
TargetNetwork: &dns.ManagedZonePeeringConfigTargetNetworkArgs{
NetworkUrl: network_target.ID(),
},
},
})
if err != nil {
return err
}
return nil
})
}
using System.Collections.Generic;
using System.Linq;
using Pulumi;
using Gcp = Pulumi.Gcp;
return await Deployment.RunAsync(() =>
{
var network_source = new Gcp.Compute.Network("network-source", new()
{
Name = "network-source",
AutoCreateSubnetworks = false,
});
var network_target = new Gcp.Compute.Network("network-target", new()
{
Name = "network-target",
AutoCreateSubnetworks = false,
});
var peering_zone = new Gcp.Dns.ManagedZone("peering-zone", new()
{
Name = "peering-zone",
DnsName = "peering.example.com.",
Description = "Example private DNS peering zone",
Visibility = "private",
PrivateVisibilityConfig = new Gcp.Dns.Inputs.ManagedZonePrivateVisibilityConfigArgs
{
Networks = new[]
{
new Gcp.Dns.Inputs.ManagedZonePrivateVisibilityConfigNetworkArgs
{
NetworkUrl = network_source.Id,
},
},
},
PeeringConfig = new Gcp.Dns.Inputs.ManagedZonePeeringConfigArgs
{
TargetNetwork = new Gcp.Dns.Inputs.ManagedZonePeeringConfigTargetNetworkArgs
{
NetworkUrl = network_target.Id,
},
},
});
});
package generated_program;
import com.pulumi.Context;
import com.pulumi.Pulumi;
import com.pulumi.core.Output;
import com.pulumi.gcp.compute.Network;
import com.pulumi.gcp.compute.NetworkArgs;
import com.pulumi.gcp.dns.ManagedZone;
import com.pulumi.gcp.dns.ManagedZoneArgs;
import com.pulumi.gcp.dns.inputs.ManagedZonePrivateVisibilityConfigArgs;
import com.pulumi.gcp.dns.inputs.ManagedZonePeeringConfigArgs;
import com.pulumi.gcp.dns.inputs.ManagedZonePeeringConfigTargetNetworkArgs;
import java.util.List;
import java.util.ArrayList;
import java.util.Map;
import java.io.File;
import java.nio.file.Files;
import java.nio.file.Paths;
public class App {
public static void main(String[] args) {
Pulumi.run(App::stack);
}
public static void stack(Context ctx) {
var network_source = new Network("network-source", NetworkArgs.builder()
.name("network-source")
.autoCreateSubnetworks(false)
.build());
var network_target = new Network("network-target", NetworkArgs.builder()
.name("network-target")
.autoCreateSubnetworks(false)
.build());
var peering_zone = new ManagedZone("peering-zone", ManagedZoneArgs.builder()
.name("peering-zone")
.dnsName("peering.example.com.")
.description("Example private DNS peering zone")
.visibility("private")
.privateVisibilityConfig(ManagedZonePrivateVisibilityConfigArgs.builder()
.networks(ManagedZonePrivateVisibilityConfigNetworkArgs.builder()
.networkUrl(network_source.id())
.build())
.build())
.peeringConfig(ManagedZonePeeringConfigArgs.builder()
.targetNetwork(ManagedZonePeeringConfigTargetNetworkArgs.builder()
.networkUrl(network_target.id())
.build())
.build())
.build());
}
}
resources:
peering-zone:
type: gcp:dns:ManagedZone
properties:
name: peering-zone
dnsName: peering.example.com.
description: Example private DNS peering zone
visibility: private
privateVisibilityConfig:
networks:
- networkUrl: ${["network-source"].id}
peeringConfig:
targetNetwork:
networkUrl: ${["network-target"].id}
network-source:
type: gcp:compute:Network
properties:
name: network-source
autoCreateSubnetworks: false
network-target:
type: gcp:compute:Network
properties:
name: network-target
autoCreateSubnetworks: false
Dns Managed Zone Service Directory
import * as pulumi from "@pulumi/pulumi";
import * as gcp from "@pulumi/gcp";
const example = new gcp.servicedirectory.Namespace("example", {
namespaceId: "example",
location: "us-central1",
});
const sd_zone = new gcp.dns.ManagedZone("sd-zone", {
name: "peering-zone",
dnsName: "services.example.com.",
description: "Example private DNS Service Directory zone",
visibility: "private",
serviceDirectoryConfig: {
namespace: {
namespaceUrl: example.id,
},
},
});
const network = new gcp.compute.Network("network", {
name: "network",
autoCreateSubnetworks: false,
});
import pulumi
import pulumi_gcp as gcp
example = gcp.servicedirectory.Namespace("example",
namespace_id="example",
location="us-central1")
sd_zone = gcp.dns.ManagedZone("sd-zone",
name="peering-zone",
dns_name="services.example.com.",
description="Example private DNS Service Directory zone",
visibility="private",
service_directory_config={
"namespace": {
"namespace_url": example.id,
},
})
network = gcp.compute.Network("network",
name="network",
auto_create_subnetworks=False)
package main
import (
"github.com/pulumi/pulumi-gcp/sdk/v8/go/gcp/compute"
"github.com/pulumi/pulumi-gcp/sdk/v8/go/gcp/dns"
"github.com/pulumi/pulumi-gcp/sdk/v8/go/gcp/servicedirectory"
"github.com/pulumi/pulumi/sdk/v3/go/pulumi"
)
func main() {
pulumi.Run(func(ctx *pulumi.Context) error {
example, err := servicedirectory.NewNamespace(ctx, "example", &servicedirectory.NamespaceArgs{
NamespaceId: pulumi.String("example"),
Location: pulumi.String("us-central1"),
})
if err != nil {
return err
}
_, err = dns.NewManagedZone(ctx, "sd-zone", &dns.ManagedZoneArgs{
Name: pulumi.String("peering-zone"),
DnsName: pulumi.String("services.example.com."),
Description: pulumi.String("Example private DNS Service Directory zone"),
Visibility: pulumi.String("private"),
ServiceDirectoryConfig: &dns.ManagedZoneServiceDirectoryConfigArgs{
Namespace: &dns.ManagedZoneServiceDirectoryConfigNamespaceArgs{
NamespaceUrl: example.ID(),
},
},
})
if err != nil {
return err
}
_, err = compute.NewNetwork(ctx, "network", &compute.NetworkArgs{
Name: pulumi.String("network"),
AutoCreateSubnetworks: pulumi.Bool(false),
})
if err != nil {
return err
}
return nil
})
}
using System.Collections.Generic;
using System.Linq;
using Pulumi;
using Gcp = Pulumi.Gcp;
return await Deployment.RunAsync(() =>
{
var example = new Gcp.ServiceDirectory.Namespace("example", new()
{
NamespaceId = "example",
Location = "us-central1",
});
var sd_zone = new Gcp.Dns.ManagedZone("sd-zone", new()
{
Name = "peering-zone",
DnsName = "services.example.com.",
Description = "Example private DNS Service Directory zone",
Visibility = "private",
ServiceDirectoryConfig = new Gcp.Dns.Inputs.ManagedZoneServiceDirectoryConfigArgs
{
Namespace = new Gcp.Dns.Inputs.ManagedZoneServiceDirectoryConfigNamespaceArgs
{
NamespaceUrl = example.Id,
},
},
});
var network = new Gcp.Compute.Network("network", new()
{
Name = "network",
AutoCreateSubnetworks = false,
});
});
package generated_program;
import com.pulumi.Context;
import com.pulumi.Pulumi;
import com.pulumi.core.Output;
import com.pulumi.gcp.servicedirectory.Namespace;
import com.pulumi.gcp.servicedirectory.NamespaceArgs;
import com.pulumi.gcp.dns.ManagedZone;
import com.pulumi.gcp.dns.ManagedZoneArgs;
import com.pulumi.gcp.dns.inputs.ManagedZoneServiceDirectoryConfigArgs;
import com.pulumi.gcp.dns.inputs.ManagedZoneServiceDirectoryConfigNamespaceArgs;
import com.pulumi.gcp.compute.Network;
import com.pulumi.gcp.compute.NetworkArgs;
import java.util.List;
import java.util.ArrayList;
import java.util.Map;
import java.io.File;
import java.nio.file.Files;
import java.nio.file.Paths;
public class App {
public static void main(String[] args) {
Pulumi.run(App::stack);
}
public static void stack(Context ctx) {
var example = new Namespace("example", NamespaceArgs.builder()
.namespaceId("example")
.location("us-central1")
.build());
var sd_zone = new ManagedZone("sd-zone", ManagedZoneArgs.builder()
.name("peering-zone")
.dnsName("services.example.com.")
.description("Example private DNS Service Directory zone")
.visibility("private")
.serviceDirectoryConfig(ManagedZoneServiceDirectoryConfigArgs.builder()
.namespace(ManagedZoneServiceDirectoryConfigNamespaceArgs.builder()
.namespaceUrl(example.id())
.build())
.build())
.build());
var network = new Network("network", NetworkArgs.builder()
.name("network")
.autoCreateSubnetworks(false)
.build());
}
}
resources:
sd-zone:
type: gcp:dns:ManagedZone
properties:
name: peering-zone
dnsName: services.example.com.
description: Example private DNS Service Directory zone
visibility: private
serviceDirectoryConfig:
namespace:
namespaceUrl: ${example.id}
example:
type: gcp:servicedirectory:Namespace
properties:
namespaceId: example
location: us-central1
network:
type: gcp:compute:Network
properties:
name: network
autoCreateSubnetworks: false
Dns Managed Zone Cloud Logging
import * as pulumi from "@pulumi/pulumi";
import * as gcp from "@pulumi/gcp";
const cloud_logging_enabled_zone = new gcp.dns.ManagedZone("cloud-logging-enabled-zone", {
name: "cloud-logging-enabled-zone",
dnsName: "services.example.com.",
description: "Example cloud logging enabled DNS zone",
labels: {
foo: "bar",
},
cloudLoggingConfig: {
enableLogging: true,
},
});
import pulumi
import pulumi_gcp as gcp
cloud_logging_enabled_zone = gcp.dns.ManagedZone("cloud-logging-enabled-zone",
name="cloud-logging-enabled-zone",
dns_name="services.example.com.",
description="Example cloud logging enabled DNS zone",
labels={
"foo": "bar",
},
cloud_logging_config={
"enable_logging": True,
})
package main
import (
"github.com/pulumi/pulumi-gcp/sdk/v8/go/gcp/dns"
"github.com/pulumi/pulumi/sdk/v3/go/pulumi"
)
func main() {
pulumi.Run(func(ctx *pulumi.Context) error {
_, err := dns.NewManagedZone(ctx, "cloud-logging-enabled-zone", &dns.ManagedZoneArgs{
Name: pulumi.String("cloud-logging-enabled-zone"),
DnsName: pulumi.String("services.example.com."),
Description: pulumi.String("Example cloud logging enabled DNS zone"),
Labels: pulumi.StringMap{
"foo": pulumi.String("bar"),
},
CloudLoggingConfig: &dns.ManagedZoneCloudLoggingConfigArgs{
EnableLogging: pulumi.Bool(true),
},
})
if err != nil {
return err
}
return nil
})
}
using System.Collections.Generic;
using System.Linq;
using Pulumi;
using Gcp = Pulumi.Gcp;
return await Deployment.RunAsync(() =>
{
var cloud_logging_enabled_zone = new Gcp.Dns.ManagedZone("cloud-logging-enabled-zone", new()
{
Name = "cloud-logging-enabled-zone",
DnsName = "services.example.com.",
Description = "Example cloud logging enabled DNS zone",
Labels =
{
{ "foo", "bar" },
},
CloudLoggingConfig = new Gcp.Dns.Inputs.ManagedZoneCloudLoggingConfigArgs
{
EnableLogging = true,
},
});
});
package generated_program;
import com.pulumi.Context;
import com.pulumi.Pulumi;
import com.pulumi.core.Output;
import com.pulumi.gcp.dns.ManagedZone;
import com.pulumi.gcp.dns.ManagedZoneArgs;
import com.pulumi.gcp.dns.inputs.ManagedZoneCloudLoggingConfigArgs;
import java.util.List;
import java.util.ArrayList;
import java.util.Map;
import java.io.File;
import java.nio.file.Files;
import java.nio.file.Paths;
public class App {
public static void main(String[] args) {
Pulumi.run(App::stack);
}
public static void stack(Context ctx) {
var cloud_logging_enabled_zone = new ManagedZone("cloud-logging-enabled-zone", ManagedZoneArgs.builder()
.name("cloud-logging-enabled-zone")
.dnsName("services.example.com.")
.description("Example cloud logging enabled DNS zone")
.labels(Map.of("foo", "bar"))
.cloudLoggingConfig(ManagedZoneCloudLoggingConfigArgs.builder()
.enableLogging(true)
.build())
.build());
}
}
resources:
cloud-logging-enabled-zone:
type: gcp:dns:ManagedZone
properties:
name: cloud-logging-enabled-zone
dnsName: services.example.com.
description: Example cloud logging enabled DNS zone
labels:
foo: bar
cloudLoggingConfig:
enableLogging: true
Create ManagedZone Resource
Resources are created with functions called constructors. To learn more about declaring and configuring resources, see Resources.
Constructor syntax
new ManagedZone(name: string, args: ManagedZoneArgs, opts?: CustomResourceOptions);@overload
def ManagedZone(resource_name: str,
args: ManagedZoneArgs,
opts: Optional[ResourceOptions] = None)
@overload
def ManagedZone(resource_name: str,
opts: Optional[ResourceOptions] = None,
dns_name: Optional[str] = None,
labels: Optional[Mapping[str, str]] = None,
description: Optional[str] = None,
dnssec_config: Optional[ManagedZoneDnssecConfigArgs] = None,
force_destroy: Optional[bool] = None,
forwarding_config: Optional[ManagedZoneForwardingConfigArgs] = None,
cloud_logging_config: Optional[ManagedZoneCloudLoggingConfigArgs] = None,
name: Optional[str] = None,
peering_config: Optional[ManagedZonePeeringConfigArgs] = None,
private_visibility_config: Optional[ManagedZonePrivateVisibilityConfigArgs] = None,
project: Optional[str] = None,
reverse_lookup: Optional[bool] = None,
service_directory_config: Optional[ManagedZoneServiceDirectoryConfigArgs] = None,
visibility: Optional[str] = None)func NewManagedZone(ctx *Context, name string, args ManagedZoneArgs, opts ...ResourceOption) (*ManagedZone, error)public ManagedZone(string name, ManagedZoneArgs args, CustomResourceOptions? opts = null)
public ManagedZone(String name, ManagedZoneArgs args)
public ManagedZone(String name, ManagedZoneArgs args, CustomResourceOptions options)
type: gcp:dns:ManagedZone
properties: # The arguments to resource properties.
options: # Bag of options to control resource's behavior.
Parameters
- name string
- The unique name of the resource.
- args ManagedZoneArgs
- The arguments to resource properties.
- opts CustomResourceOptions
- Bag of options to control resource's behavior.
- resource_name str
- The unique name of the resource.
- args ManagedZoneArgs
- The arguments to resource properties.
- opts ResourceOptions
- Bag of options to control resource's behavior.
- ctx Context
- Context object for the current deployment.
- name string
- The unique name of the resource.
- args ManagedZoneArgs
- The arguments to resource properties.
- opts ResourceOption
- Bag of options to control resource's behavior.
- name string
- The unique name of the resource.
- args ManagedZoneArgs
- The arguments to resource properties.
- opts CustomResourceOptions
- Bag of options to control resource's behavior.
- name String
- The unique name of the resource.
- args ManagedZoneArgs
- The arguments to resource properties.
- options CustomResourceOptions
- Bag of options to control resource's behavior.
Constructor example
The following reference example uses placeholder values for all input properties.
var managedZoneResource = new Gcp.Dns.ManagedZone("managedZoneResource", new()
{
DnsName = "string",
Labels =
{
{ "string", "string" },
},
Description = "string",
DnssecConfig = new Gcp.Dns.Inputs.ManagedZoneDnssecConfigArgs
{
DefaultKeySpecs = new[]
{
new Gcp.Dns.Inputs.ManagedZoneDnssecConfigDefaultKeySpecArgs
{
Algorithm = "string",
KeyLength = 0,
KeyType = "string",
Kind = "string",
},
},
Kind = "string",
NonExistence = "string",
State = "string",
},
ForceDestroy = false,
ForwardingConfig = new Gcp.Dns.Inputs.ManagedZoneForwardingConfigArgs
{
TargetNameServers = new[]
{
new Gcp.Dns.Inputs.ManagedZoneForwardingConfigTargetNameServerArgs
{
DomainName = "string",
ForwardingPath = "string",
Ipv4Address = "string",
},
},
},
CloudLoggingConfig = new Gcp.Dns.Inputs.ManagedZoneCloudLoggingConfigArgs
{
EnableLogging = false,
},
Name = "string",
PeeringConfig = new Gcp.Dns.Inputs.ManagedZonePeeringConfigArgs
{
TargetNetwork = new Gcp.Dns.Inputs.ManagedZonePeeringConfigTargetNetworkArgs
{
NetworkUrl = "string",
},
},
PrivateVisibilityConfig = new Gcp.Dns.Inputs.ManagedZonePrivateVisibilityConfigArgs
{
GkeClusters = new[]
{
new Gcp.Dns.Inputs.ManagedZonePrivateVisibilityConfigGkeClusterArgs
{
GkeClusterName = "string",
},
},
Networks = new[]
{
new Gcp.Dns.Inputs.ManagedZonePrivateVisibilityConfigNetworkArgs
{
NetworkUrl = "string",
},
},
},
Project = "string",
ReverseLookup = false,
ServiceDirectoryConfig = new Gcp.Dns.Inputs.ManagedZoneServiceDirectoryConfigArgs
{
Namespace = new Gcp.Dns.Inputs.ManagedZoneServiceDirectoryConfigNamespaceArgs
{
NamespaceUrl = "string",
},
},
Visibility = "string",
});
example, err := dns.NewManagedZone(ctx, "managedZoneResource", &dns.ManagedZoneArgs{
DnsName: pulumi.String("string"),
Labels: pulumi.StringMap{
"string": pulumi.String("string"),
},
Description: pulumi.String("string"),
DnssecConfig: &dns.ManagedZoneDnssecConfigArgs{
DefaultKeySpecs: dns.ManagedZoneDnssecConfigDefaultKeySpecArray{
&dns.ManagedZoneDnssecConfigDefaultKeySpecArgs{
Algorithm: pulumi.String("string"),
KeyLength: pulumi.Int(0),
KeyType: pulumi.String("string"),
Kind: pulumi.String("string"),
},
},
Kind: pulumi.String("string"),
NonExistence: pulumi.String("string"),
State: pulumi.String("string"),
},
ForceDestroy: pulumi.Bool(false),
ForwardingConfig: &dns.ManagedZoneForwardingConfigArgs{
TargetNameServers: dns.ManagedZoneForwardingConfigTargetNameServerArray{
&dns.ManagedZoneForwardingConfigTargetNameServerArgs{
DomainName: pulumi.String("string"),
ForwardingPath: pulumi.String("string"),
Ipv4Address: pulumi.String("string"),
},
},
},
CloudLoggingConfig: &dns.ManagedZoneCloudLoggingConfigArgs{
EnableLogging: pulumi.Bool(false),
},
Name: pulumi.String("string"),
PeeringConfig: &dns.ManagedZonePeeringConfigArgs{
TargetNetwork: &dns.ManagedZonePeeringConfigTargetNetworkArgs{
NetworkUrl: pulumi.String("string"),
},
},
PrivateVisibilityConfig: &dns.ManagedZonePrivateVisibilityConfigArgs{
GkeClusters: dns.ManagedZonePrivateVisibilityConfigGkeClusterArray{
&dns.ManagedZonePrivateVisibilityConfigGkeClusterArgs{
GkeClusterName: pulumi.String("string"),
},
},
Networks: dns.ManagedZonePrivateVisibilityConfigNetworkArray{
&dns.ManagedZonePrivateVisibilityConfigNetworkArgs{
NetworkUrl: pulumi.String("string"),
},
},
},
Project: pulumi.String("string"),
ReverseLookup: pulumi.Bool(false),
ServiceDirectoryConfig: &dns.ManagedZoneServiceDirectoryConfigArgs{
Namespace: &dns.ManagedZoneServiceDirectoryConfigNamespaceArgs{
NamespaceUrl: pulumi.String("string"),
},
},
Visibility: pulumi.String("string"),
})
var managedZoneResource = new com.pulumi.gcp.dns.ManagedZone("managedZoneResource", com.pulumi.gcp.dns.ManagedZoneArgs.builder()
.dnsName("string")
.labels(Map.of("string", "string"))
.description("string")
.dnssecConfig(ManagedZoneDnssecConfigArgs.builder()
.defaultKeySpecs(ManagedZoneDnssecConfigDefaultKeySpecArgs.builder()
.algorithm("string")
.keyLength(0)
.keyType("string")
.kind("string")
.build())
.kind("string")
.nonExistence("string")
.state("string")
.build())
.forceDestroy(false)
.forwardingConfig(ManagedZoneForwardingConfigArgs.builder()
.targetNameServers(ManagedZoneForwardingConfigTargetNameServerArgs.builder()
.domainName("string")
.forwardingPath("string")
.ipv4Address("string")
.build())
.build())
.cloudLoggingConfig(ManagedZoneCloudLoggingConfigArgs.builder()
.enableLogging(false)
.build())
.name("string")
.peeringConfig(ManagedZonePeeringConfigArgs.builder()
.targetNetwork(ManagedZonePeeringConfigTargetNetworkArgs.builder()
.networkUrl("string")
.build())
.build())
.privateVisibilityConfig(ManagedZonePrivateVisibilityConfigArgs.builder()
.gkeClusters(ManagedZonePrivateVisibilityConfigGkeClusterArgs.builder()
.gkeClusterName("string")
.build())
.networks(ManagedZonePrivateVisibilityConfigNetworkArgs.builder()
.networkUrl("string")
.build())
.build())
.project("string")
.reverseLookup(false)
.serviceDirectoryConfig(ManagedZoneServiceDirectoryConfigArgs.builder()
.namespace(ManagedZoneServiceDirectoryConfigNamespaceArgs.builder()
.namespaceUrl("string")
.build())
.build())
.visibility("string")
.build());
managed_zone_resource = gcp.dns.ManagedZone("managedZoneResource",
dns_name="string",
labels={
"string": "string",
},
description="string",
dnssec_config={
"default_key_specs": [{
"algorithm": "string",
"key_length": 0,
"key_type": "string",
"kind": "string",
}],
"kind": "string",
"non_existence": "string",
"state": "string",
},
force_destroy=False,
forwarding_config={
"target_name_servers": [{
"domain_name": "string",
"forwarding_path": "string",
"ipv4_address": "string",
}],
},
cloud_logging_config={
"enable_logging": False,
},
name="string",
peering_config={
"target_network": {
"network_url": "string",
},
},
private_visibility_config={
"gke_clusters": [{
"gke_cluster_name": "string",
}],
"networks": [{
"network_url": "string",
}],
},
project="string",
reverse_lookup=False,
service_directory_config={
"namespace": {
"namespace_url": "string",
},
},
visibility="string")
const managedZoneResource = new gcp.dns.ManagedZone("managedZoneResource", {
dnsName: "string",
labels: {
string: "string",
},
description: "string",
dnssecConfig: {
defaultKeySpecs: [{
algorithm: "string",
keyLength: 0,
keyType: "string",
kind: "string",
}],
kind: "string",
nonExistence: "string",
state: "string",
},
forceDestroy: false,
forwardingConfig: {
targetNameServers: [{
domainName: "string",
forwardingPath: "string",
ipv4Address: "string",
}],
},
cloudLoggingConfig: {
enableLogging: false,
},
name: "string",
peeringConfig: {
targetNetwork: {
networkUrl: "string",
},
},
privateVisibilityConfig: {
gkeClusters: [{
gkeClusterName: "string",
}],
networks: [{
networkUrl: "string",
}],
},
project: "string",
reverseLookup: false,
serviceDirectoryConfig: {
namespace: {
namespaceUrl: "string",
},
},
visibility: "string",
});
type: gcp:dns:ManagedZone
properties:
cloudLoggingConfig:
enableLogging: false
description: string
dnsName: string
dnssecConfig:
defaultKeySpecs:
- algorithm: string
keyLength: 0
keyType: string
kind: string
kind: string
nonExistence: string
state: string
forceDestroy: false
forwardingConfig:
targetNameServers:
- domainName: string
forwardingPath: string
ipv4Address: string
labels:
string: string
name: string
peeringConfig:
targetNetwork:
networkUrl: string
privateVisibilityConfig:
gkeClusters:
- gkeClusterName: string
networks:
- networkUrl: string
project: string
reverseLookup: false
serviceDirectoryConfig:
namespace:
namespaceUrl: string
visibility: string
ManagedZone Resource Properties
To learn more about resource properties and how to use them, see Inputs and Outputs in the Architecture and Concepts docs.
Inputs
In Python, inputs that are objects can be passed either as argument classes or as dictionary literals.
The ManagedZone resource accepts the following input properties:
- Dns
Name string - The DNS name of this managed zone, for instance "example.com.".
- Cloud
Logging ManagedConfig Zone Cloud Logging Config - Cloud logging configuration Structure is documented below.
- Description string
- A textual description field. Defaults to 'Managed by Pulumi'.
- Dnssec
Config ManagedZone Dnssec Config - DNSSEC configuration Structure is documented below.
- Force
Destroy bool - Set this true to delete all records in the zone.
- Forwarding
Config ManagedZone Forwarding Config - The presence for this field indicates that outbound forwarding is enabled for this zone. The value of this field contains the set of destinations to forward to. Structure is documented below.
- Labels Dictionary<string, string>
A set of key/value label pairs to assign to this ManagedZone.
Note: This field is non-authoritative, and will only manage the labels present in your configuration. Please refer to the field
effective_labelsfor all of the labels present on the resource.- Name string
- User assigned name for this resource.
Must be unique within the project.
- Peering
Config ManagedZone Peering Config - The presence of this field indicates that DNS Peering is enabled for this zone. The value of this field contains the network to peer with. Structure is documented below.
- Private
Visibility ManagedConfig Zone Private Visibility Config - For privately visible zones, the set of Virtual Private Cloud
resources that the zone is visible from. At least one of
gke_clustersornetworksmust be specified. Structure is documented below. - Project string
- The ID of the project in which the resource belongs. If it is not provided, the provider project is used.
- Reverse
Lookup bool - Specifies if this is a managed reverse lookup zone. If true, Cloud DNS will resolve reverse
lookup queries using automatically configured records for VPC resources. This only applies
to networks listed under
private_visibility_config. - Service
Directory ManagedConfig Zone Service Directory Config - The presence of this field indicates that this zone is backed by Service Directory. The value of this field contains information related to the namespace associated with the zone. Structure is documented below.
- Visibility string
- The zone's visibility: public zones are exposed to the Internet,
while private zones are visible only to Virtual Private Cloud resources.
Default value is
public. Possible values are:private,public.
- Dns
Name string - The DNS name of this managed zone, for instance "example.com.".
- Cloud
Logging ManagedConfig Zone Cloud Logging Config Args - Cloud logging configuration Structure is documented below.
- Description string
- A textual description field. Defaults to 'Managed by Pulumi'.
- Dnssec
Config ManagedZone Dnssec Config Args - DNSSEC configuration Structure is documented below.
- Force
Destroy bool - Set this true to delete all records in the zone.
- Forwarding
Config ManagedZone Forwarding Config Args - The presence for this field indicates that outbound forwarding is enabled for this zone. The value of this field contains the set of destinations to forward to. Structure is documented below.
- Labels map[string]string
A set of key/value label pairs to assign to this ManagedZone.
Note: This field is non-authoritative, and will only manage the labels present in your configuration. Please refer to the field
effective_labelsfor all of the labels present on the resource.- Name string
- User assigned name for this resource.
Must be unique within the project.
- Peering
Config ManagedZone Peering Config Args - The presence of this field indicates that DNS Peering is enabled for this zone. The value of this field contains the network to peer with. Structure is documented below.
- Private
Visibility ManagedConfig Zone Private Visibility Config Args - For privately visible zones, the set of Virtual Private Cloud
resources that the zone is visible from. At least one of
gke_clustersornetworksmust be specified. Structure is documented below. - Project string
- The ID of the project in which the resource belongs. If it is not provided, the provider project is used.
- Reverse
Lookup bool - Specifies if this is a managed reverse lookup zone. If true, Cloud DNS will resolve reverse
lookup queries using automatically configured records for VPC resources. This only applies
to networks listed under
private_visibility_config. - Service
Directory ManagedConfig Zone Service Directory Config Args - The presence of this field indicates that this zone is backed by Service Directory. The value of this field contains information related to the namespace associated with the zone. Structure is documented below.
- Visibility string
- The zone's visibility: public zones are exposed to the Internet,
while private zones are visible only to Virtual Private Cloud resources.
Default value is
public. Possible values are:private,public.
- dns
Name String - The DNS name of this managed zone, for instance "example.com.".
- cloud
Logging ManagedConfig Zone Cloud Logging Config - Cloud logging configuration Structure is documented below.
- description String
- A textual description field. Defaults to 'Managed by Pulumi'.
- dnssec
Config ManagedZone Dnssec Config - DNSSEC configuration Structure is documented below.
- force
Destroy Boolean - Set this true to delete all records in the zone.
- forwarding
Config ManagedZone Forwarding Config - The presence for this field indicates that outbound forwarding is enabled for this zone. The value of this field contains the set of destinations to forward to. Structure is documented below.
- labels Map<String,String>
A set of key/value label pairs to assign to this ManagedZone.
Note: This field is non-authoritative, and will only manage the labels present in your configuration. Please refer to the field
effective_labelsfor all of the labels present on the resource.- name String
- User assigned name for this resource.
Must be unique within the project.
- peering
Config ManagedZone Peering Config - The presence of this field indicates that DNS Peering is enabled for this zone. The value of this field contains the network to peer with. Structure is documented below.
- private
Visibility ManagedConfig Zone Private Visibility Config - For privately visible zones, the set of Virtual Private Cloud
resources that the zone is visible from. At least one of
gke_clustersornetworksmust be specified. Structure is documented below. - project String
- The ID of the project in which the resource belongs. If it is not provided, the provider project is used.
- reverse
Lookup Boolean - Specifies if this is a managed reverse lookup zone. If true, Cloud DNS will resolve reverse
lookup queries using automatically configured records for VPC resources. This only applies
to networks listed under
private_visibility_config. - service
Directory ManagedConfig Zone Service Directory Config - The presence of this field indicates that this zone is backed by Service Directory. The value of this field contains information related to the namespace associated with the zone. Structure is documented below.
- visibility String
- The zone's visibility: public zones are exposed to the Internet,
while private zones are visible only to Virtual Private Cloud resources.
Default value is
public. Possible values are:private,public.
- dns
Name string - The DNS name of this managed zone, for instance "example.com.".
- cloud
Logging ManagedConfig Zone Cloud Logging Config - Cloud logging configuration Structure is documented below.
- description string
- A textual description field. Defaults to 'Managed by Pulumi'.
- dnssec
Config ManagedZone Dnssec Config - DNSSEC configuration Structure is documented below.
- force
Destroy boolean - Set this true to delete all records in the zone.
- forwarding
Config ManagedZone Forwarding Config - The presence for this field indicates that outbound forwarding is enabled for this zone. The value of this field contains the set of destinations to forward to. Structure is documented below.
- labels {[key: string]: string}
A set of key/value label pairs to assign to this ManagedZone.
Note: This field is non-authoritative, and will only manage the labels present in your configuration. Please refer to the field
effective_labelsfor all of the labels present on the resource.- name string
- User assigned name for this resource.
Must be unique within the project.
- peering
Config ManagedZone Peering Config - The presence of this field indicates that DNS Peering is enabled for this zone. The value of this field contains the network to peer with. Structure is documented below.
- private
Visibility ManagedConfig Zone Private Visibility Config - For privately visible zones, the set of Virtual Private Cloud
resources that the zone is visible from. At least one of
gke_clustersornetworksmust be specified. Structure is documented below. - project string
- The ID of the project in which the resource belongs. If it is not provided, the provider project is used.
- reverse
Lookup boolean - Specifies if this is a managed reverse lookup zone. If true, Cloud DNS will resolve reverse
lookup queries using automatically configured records for VPC resources. This only applies
to networks listed under
private_visibility_config. - service
Directory ManagedConfig Zone Service Directory Config - The presence of this field indicates that this zone is backed by Service Directory. The value of this field contains information related to the namespace associated with the zone. Structure is documented below.
- visibility string
- The zone's visibility: public zones are exposed to the Internet,
while private zones are visible only to Virtual Private Cloud resources.
Default value is
public. Possible values are:private,public.
- dns_
name str - The DNS name of this managed zone, for instance "example.com.".
- cloud_
logging_ Managedconfig Zone Cloud Logging Config Args - Cloud logging configuration Structure is documented below.
- description str
- A textual description field. Defaults to 'Managed by Pulumi'.
- dnssec_
config ManagedZone Dnssec Config Args - DNSSEC configuration Structure is documented below.
- force_
destroy bool - Set this true to delete all records in the zone.
- forwarding_
config ManagedZone Forwarding Config Args - The presence for this field indicates that outbound forwarding is enabled for this zone. The value of this field contains the set of destinations to forward to. Structure is documented below.
- labels Mapping[str, str]
A set of key/value label pairs to assign to this ManagedZone.
Note: This field is non-authoritative, and will only manage the labels present in your configuration. Please refer to the field
effective_labelsfor all of the labels present on the resource.- name str
- User assigned name for this resource.
Must be unique within the project.
- peering_
config ManagedZone Peering Config Args - The presence of this field indicates that DNS Peering is enabled for this zone. The value of this field contains the network to peer with. Structure is documented below.
- private_
visibility_ Managedconfig Zone Private Visibility Config Args - For privately visible zones, the set of Virtual Private Cloud
resources that the zone is visible from. At least one of
gke_clustersornetworksmust be specified. Structure is documented below. - project str
- The ID of the project in which the resource belongs. If it is not provided, the provider project is used.
- reverse_
lookup bool - Specifies if this is a managed reverse lookup zone. If true, Cloud DNS will resolve reverse
lookup queries using automatically configured records for VPC resources. This only applies
to networks listed under
private_visibility_config. - service_
directory_ Managedconfig Zone Service Directory Config Args - The presence of this field indicates that this zone is backed by Service Directory. The value of this field contains information related to the namespace associated with the zone. Structure is documented below.
- visibility str
- The zone's visibility: public zones are exposed to the Internet,
while private zones are visible only to Virtual Private Cloud resources.
Default value is
public. Possible values are:private,public.
- dns
Name String - The DNS name of this managed zone, for instance "example.com.".
- cloud
Logging Property MapConfig - Cloud logging configuration Structure is documented below.
- description String
- A textual description field. Defaults to 'Managed by Pulumi'.
- dnssec
Config Property Map - DNSSEC configuration Structure is documented below.
- force
Destroy Boolean - Set this true to delete all records in the zone.
- forwarding
Config Property Map - The presence for this field indicates that outbound forwarding is enabled for this zone. The value of this field contains the set of destinations to forward to. Structure is documented below.
- labels Map<String>
A set of key/value label pairs to assign to this ManagedZone.
Note: This field is non-authoritative, and will only manage the labels present in your configuration. Please refer to the field
effective_labelsfor all of the labels present on the resource.- name String
- User assigned name for this resource.
Must be unique within the project.
- peering
Config Property Map - The presence of this field indicates that DNS Peering is enabled for this zone. The value of this field contains the network to peer with. Structure is documented below.
- private
Visibility Property MapConfig - For privately visible zones, the set of Virtual Private Cloud
resources that the zone is visible from. At least one of
gke_clustersornetworksmust be specified. Structure is documented below. - project String
- The ID of the project in which the resource belongs. If it is not provided, the provider project is used.
- reverse
Lookup Boolean - Specifies if this is a managed reverse lookup zone. If true, Cloud DNS will resolve reverse
lookup queries using automatically configured records for VPC resources. This only applies
to networks listed under
private_visibility_config. - service
Directory Property MapConfig - The presence of this field indicates that this zone is backed by Service Directory. The value of this field contains information related to the namespace associated with the zone. Structure is documented below.
- visibility String
- The zone's visibility: public zones are exposed to the Internet,
while private zones are visible only to Virtual Private Cloud resources.
Default value is
public. Possible values are:private,public.
Outputs
All input properties are implicitly available as output properties. Additionally, the ManagedZone resource produces the following output properties:
- Creation
Time string - The time that this resource was created on the server. This is in RFC3339 text format.
- Effective
Labels Dictionary<string, string> - All of labels (key/value pairs) present on the resource in GCP, including the labels configured through Pulumi, other clients and services.
- Id string
- The provider-assigned unique ID for this managed resource.
- Managed
Zone stringId - Unique identifier for the resource; defined by the server.
- Name
Servers List<string> - Delegate your managed_zone to these virtual name servers; defined by the server
- Pulumi
Labels Dictionary<string, string> - The combination of labels configured directly on the resource and default labels configured on the provider.
- Creation
Time string - The time that this resource was created on the server. This is in RFC3339 text format.
- Effective
Labels map[string]string - All of labels (key/value pairs) present on the resource in GCP, including the labels configured through Pulumi, other clients and services.
- Id string
- The provider-assigned unique ID for this managed resource.
- Managed
Zone stringId - Unique identifier for the resource; defined by the server.
- Name
Servers []string - Delegate your managed_zone to these virtual name servers; defined by the server
- Pulumi
Labels map[string]string - The combination of labels configured directly on the resource and default labels configured on the provider.
- creation
Time String - The time that this resource was created on the server. This is in RFC3339 text format.
- effective
Labels Map<String,String> - All of labels (key/value pairs) present on the resource in GCP, including the labels configured through Pulumi, other clients and services.
- id String
- The provider-assigned unique ID for this managed resource.
- managed
Zone StringId - Unique identifier for the resource; defined by the server.
- name
Servers List<String> - Delegate your managed_zone to these virtual name servers; defined by the server
- pulumi
Labels Map<String,String> - The combination of labels configured directly on the resource and default labels configured on the provider.
- creation
Time string - The time that this resource was created on the server. This is in RFC3339 text format.
- effective
Labels {[key: string]: string} - All of labels (key/value pairs) present on the resource in GCP, including the labels configured through Pulumi, other clients and services.
- id string
- The provider-assigned unique ID for this managed resource.
- managed
Zone stringId - Unique identifier for the resource; defined by the server.
- name
Servers string[] - Delegate your managed_zone to these virtual name servers; defined by the server
- pulumi
Labels {[key: string]: string} - The combination of labels configured directly on the resource and default labels configured on the provider.
- creation_
time str - The time that this resource was created on the server. This is in RFC3339 text format.
- effective_
labels Mapping[str, str] - All of labels (key/value pairs) present on the resource in GCP, including the labels configured through Pulumi, other clients and services.
- id str
- The provider-assigned unique ID for this managed resource.
- managed_
zone_ strid - Unique identifier for the resource; defined by the server.
- name_
servers Sequence[str] - Delegate your managed_zone to these virtual name servers; defined by the server
- pulumi_
labels Mapping[str, str] - The combination of labels configured directly on the resource and default labels configured on the provider.
- creation
Time String - The time that this resource was created on the server. This is in RFC3339 text format.
- effective
Labels Map<String> - All of labels (key/value pairs) present on the resource in GCP, including the labels configured through Pulumi, other clients and services.
- id String
- The provider-assigned unique ID for this managed resource.
- managed
Zone StringId - Unique identifier for the resource; defined by the server.
- name
Servers List<String> - Delegate your managed_zone to these virtual name servers; defined by the server
- pulumi
Labels Map<String> - The combination of labels configured directly on the resource and default labels configured on the provider.
Look up Existing ManagedZone Resource
Get an existing ManagedZone resource’s state with the given name, ID, and optional extra properties used to qualify the lookup.
public static get(name: string, id: Input<ID>, state?: ManagedZoneState, opts?: CustomResourceOptions): ManagedZone@staticmethod
def get(resource_name: str,
id: str,
opts: Optional[ResourceOptions] = None,
cloud_logging_config: Optional[ManagedZoneCloudLoggingConfigArgs] = None,
creation_time: Optional[str] = None,
description: Optional[str] = None,
dns_name: Optional[str] = None,
dnssec_config: Optional[ManagedZoneDnssecConfigArgs] = None,
effective_labels: Optional[Mapping[str, str]] = None,
force_destroy: Optional[bool] = None,
forwarding_config: Optional[ManagedZoneForwardingConfigArgs] = None,
labels: Optional[Mapping[str, str]] = None,
managed_zone_id: Optional[str] = None,
name: Optional[str] = None,
name_servers: Optional[Sequence[str]] = None,
peering_config: Optional[ManagedZonePeeringConfigArgs] = None,
private_visibility_config: Optional[ManagedZonePrivateVisibilityConfigArgs] = None,
project: Optional[str] = None,
pulumi_labels: Optional[Mapping[str, str]] = None,
reverse_lookup: Optional[bool] = None,
service_directory_config: Optional[ManagedZoneServiceDirectoryConfigArgs] = None,
visibility: Optional[str] = None) -> ManagedZonefunc GetManagedZone(ctx *Context, name string, id IDInput, state *ManagedZoneState, opts ...ResourceOption) (*ManagedZone, error)public static ManagedZone Get(string name, Input<string> id, ManagedZoneState? state, CustomResourceOptions? opts = null)public static ManagedZone get(String name, Output<String> id, ManagedZoneState state, CustomResourceOptions options)resources: _: type: gcp:dns:ManagedZone get: id: ${id}- name
- The unique name of the resulting resource.
- id
- The unique provider ID of the resource to lookup.
- state
- Any extra arguments used during the lookup.
- opts
- A bag of options that control this resource's behavior.
- resource_name
- The unique name of the resulting resource.
- id
- The unique provider ID of the resource to lookup.
- name
- The unique name of the resulting resource.
- id
- The unique provider ID of the resource to lookup.
- state
- Any extra arguments used during the lookup.
- opts
- A bag of options that control this resource's behavior.
- name
- The unique name of the resulting resource.
- id
- The unique provider ID of the resource to lookup.
- state
- Any extra arguments used during the lookup.
- opts
- A bag of options that control this resource's behavior.
- name
- The unique name of the resulting resource.
- id
- The unique provider ID of the resource to lookup.
- state
- Any extra arguments used during the lookup.
- opts
- A bag of options that control this resource's behavior.
- Cloud
Logging ManagedConfig Zone Cloud Logging Config - Cloud logging configuration Structure is documented below.
- Creation
Time string - The time that this resource was created on the server. This is in RFC3339 text format.
- Description string
- A textual description field. Defaults to 'Managed by Pulumi'.
- Dns
Name string - The DNS name of this managed zone, for instance "example.com.".
- Dnssec
Config ManagedZone Dnssec Config - DNSSEC configuration Structure is documented below.
- Effective
Labels Dictionary<string, string> - All of labels (key/value pairs) present on the resource in GCP, including the labels configured through Pulumi, other clients and services.
- Force
Destroy bool - Set this true to delete all records in the zone.
- Forwarding
Config ManagedZone Forwarding Config - The presence for this field indicates that outbound forwarding is enabled for this zone. The value of this field contains the set of destinations to forward to. Structure is documented below.
- Labels Dictionary<string, string>
A set of key/value label pairs to assign to this ManagedZone.
Note: This field is non-authoritative, and will only manage the labels present in your configuration. Please refer to the field
effective_labelsfor all of the labels present on the resource.- Managed
Zone stringId - Unique identifier for the resource; defined by the server.
- Name string
- User assigned name for this resource.
Must be unique within the project.
- Name
Servers List<string> - Delegate your managed_zone to these virtual name servers; defined by the server
- Peering
Config ManagedZone Peering Config - The presence of this field indicates that DNS Peering is enabled for this zone. The value of this field contains the network to peer with. Structure is documented below.
- Private
Visibility ManagedConfig Zone Private Visibility Config - For privately visible zones, the set of Virtual Private Cloud
resources that the zone is visible from. At least one of
gke_clustersornetworksmust be specified. Structure is documented below. - Project string
- The ID of the project in which the resource belongs. If it is not provided, the provider project is used.
- Pulumi
Labels Dictionary<string, string> - The combination of labels configured directly on the resource and default labels configured on the provider.
- Reverse
Lookup bool - Specifies if this is a managed reverse lookup zone. If true, Cloud DNS will resolve reverse
lookup queries using automatically configured records for VPC resources. This only applies
to networks listed under
private_visibility_config. - Service
Directory ManagedConfig Zone Service Directory Config - The presence of this field indicates that this zone is backed by Service Directory. The value of this field contains information related to the namespace associated with the zone. Structure is documented below.
- Visibility string
- The zone's visibility: public zones are exposed to the Internet,
while private zones are visible only to Virtual Private Cloud resources.
Default value is
public. Possible values are:private,public.
- Cloud
Logging ManagedConfig Zone Cloud Logging Config Args - Cloud logging configuration Structure is documented below.
- Creation
Time string - The time that this resource was created on the server. This is in RFC3339 text format.
- Description string
- A textual description field. Defaults to 'Managed by Pulumi'.
- Dns
Name string - The DNS name of this managed zone, for instance "example.com.".
- Dnssec
Config ManagedZone Dnssec Config Args - DNSSEC configuration Structure is documented below.
- Effective
Labels map[string]string - All of labels (key/value pairs) present on the resource in GCP, including the labels configured through Pulumi, other clients and services.
- Force
Destroy bool - Set this true to delete all records in the zone.
- Forwarding
Config ManagedZone Forwarding Config Args - The presence for this field indicates that outbound forwarding is enabled for this zone. The value of this field contains the set of destinations to forward to. Structure is documented below.
- Labels map[string]string
A set of key/value label pairs to assign to this ManagedZone.
Note: This field is non-authoritative, and will only manage the labels present in your configuration. Please refer to the field
effective_labelsfor all of the labels present on the resource.- Managed
Zone stringId - Unique identifier for the resource; defined by the server.
- Name string
- User assigned name for this resource.
Must be unique within the project.
- Name
Servers []string - Delegate your managed_zone to these virtual name servers; defined by the server
- Peering
Config ManagedZone Peering Config Args - The presence of this field indicates that DNS Peering is enabled for this zone. The value of this field contains the network to peer with. Structure is documented below.
- Private
Visibility ManagedConfig Zone Private Visibility Config Args - For privately visible zones, the set of Virtual Private Cloud
resources that the zone is visible from. At least one of
gke_clustersornetworksmust be specified. Structure is documented below. - Project string
- The ID of the project in which the resource belongs. If it is not provided, the provider project is used.
- Pulumi
Labels map[string]string - The combination of labels configured directly on the resource and default labels configured on the provider.
- Reverse
Lookup bool - Specifies if this is a managed reverse lookup zone. If true, Cloud DNS will resolve reverse
lookup queries using automatically configured records for VPC resources. This only applies
to networks listed under
private_visibility_config. - Service
Directory ManagedConfig Zone Service Directory Config Args - The presence of this field indicates that this zone is backed by Service Directory. The value of this field contains information related to the namespace associated with the zone. Structure is documented below.
- Visibility string
- The zone's visibility: public zones are exposed to the Internet,
while private zones are visible only to Virtual Private Cloud resources.
Default value is
public. Possible values are:private,public.
- cloud
Logging ManagedConfig Zone Cloud Logging Config - Cloud logging configuration Structure is documented below.
- creation
Time String - The time that this resource was created on the server. This is in RFC3339 text format.
- description String
- A textual description field. Defaults to 'Managed by Pulumi'.
- dns
Name String - The DNS name of this managed zone, for instance "example.com.".
- dnssec
Config ManagedZone Dnssec Config - DNSSEC configuration Structure is documented below.
- effective
Labels Map<String,String> - All of labels (key/value pairs) present on the resource in GCP, including the labels configured through Pulumi, other clients and services.
- force
Destroy Boolean - Set this true to delete all records in the zone.
- forwarding
Config ManagedZone Forwarding Config - The presence for this field indicates that outbound forwarding is enabled for this zone. The value of this field contains the set of destinations to forward to. Structure is documented below.
- labels Map<String,String>
A set of key/value label pairs to assign to this ManagedZone.
Note: This field is non-authoritative, and will only manage the labels present in your configuration. Please refer to the field
effective_labelsfor all of the labels present on the resource.- managed
Zone StringId - Unique identifier for the resource; defined by the server.
- name String
- User assigned name for this resource.
Must be unique within the project.
- name
Servers List<String> - Delegate your managed_zone to these virtual name servers; defined by the server
- peering
Config ManagedZone Peering Config - The presence of this field indicates that DNS Peering is enabled for this zone. The value of this field contains the network to peer with. Structure is documented below.
- private
Visibility ManagedConfig Zone Private Visibility Config - For privately visible zones, the set of Virtual Private Cloud
resources that the zone is visible from. At least one of
gke_clustersornetworksmust be specified. Structure is documented below. - project String
- The ID of the project in which the resource belongs. If it is not provided, the provider project is used.
- pulumi
Labels Map<String,String> - The combination of labels configured directly on the resource and default labels configured on the provider.
- reverse
Lookup Boolean - Specifies if this is a managed reverse lookup zone. If true, Cloud DNS will resolve reverse
lookup queries using automatically configured records for VPC resources. This only applies
to networks listed under
private_visibility_config. - service
Directory ManagedConfig Zone Service Directory Config - The presence of this field indicates that this zone is backed by Service Directory. The value of this field contains information related to the namespace associated with the zone. Structure is documented below.
- visibility String
- The zone's visibility: public zones are exposed to the Internet,
while private zones are visible only to Virtual Private Cloud resources.
Default value is
public. Possible values are:private,public.
- cloud
Logging ManagedConfig Zone Cloud Logging Config - Cloud logging configuration Structure is documented below.
- creation
Time string - The time that this resource was created on the server. This is in RFC3339 text format.
- description string
- A textual description field. Defaults to 'Managed by Pulumi'.
- dns
Name string - The DNS name of this managed zone, for instance "example.com.".
- dnssec
Config ManagedZone Dnssec Config - DNSSEC configuration Structure is documented below.
- effective
Labels {[key: string]: string} - All of labels (key/value pairs) present on the resource in GCP, including the labels configured through Pulumi, other clients and services.
- force
Destroy boolean - Set this true to delete all records in the zone.
- forwarding
Config ManagedZone Forwarding Config - The presence for this field indicates that outbound forwarding is enabled for this zone. The value of this field contains the set of destinations to forward to. Structure is documented below.
- labels {[key: string]: string}
A set of key/value label pairs to assign to this ManagedZone.
Note: This field is non-authoritative, and will only manage the labels present in your configuration. Please refer to the field
effective_labelsfor all of the labels present on the resource.- managed
Zone stringId - Unique identifier for the resource; defined by the server.
- name string
- User assigned name for this resource.
Must be unique within the project.
- name
Servers string[] - Delegate your managed_zone to these virtual name servers; defined by the server
- peering
Config ManagedZone Peering Config - The presence of this field indicates that DNS Peering is enabled for this zone. The value of this field contains the network to peer with. Structure is documented below.
- private
Visibility ManagedConfig Zone Private Visibility Config - For privately visible zones, the set of Virtual Private Cloud
resources that the zone is visible from. At least one of
gke_clustersornetworksmust be specified. Structure is documented below. - project string
- The ID of the project in which the resource belongs. If it is not provided, the provider project is used.
- pulumi
Labels {[key: string]: string} - The combination of labels configured directly on the resource and default labels configured on the provider.
- reverse
Lookup boolean - Specifies if this is a managed reverse lookup zone. If true, Cloud DNS will resolve reverse
lookup queries using automatically configured records for VPC resources. This only applies
to networks listed under
private_visibility_config. - service
Directory ManagedConfig Zone Service Directory Config - The presence of this field indicates that this zone is backed by Service Directory. The value of this field contains information related to the namespace associated with the zone. Structure is documented below.
- visibility string
- The zone's visibility: public zones are exposed to the Internet,
while private zones are visible only to Virtual Private Cloud resources.
Default value is
public. Possible values are:private,public.
- cloud_
logging_ Managedconfig Zone Cloud Logging Config Args - Cloud logging configuration Structure is documented below.
- creation_
time str - The time that this resource was created on the server. This is in RFC3339 text format.
- description str
- A textual description field. Defaults to 'Managed by Pulumi'.
- dns_
name str - The DNS name of this managed zone, for instance "example.com.".
- dnssec_
config ManagedZone Dnssec Config Args - DNSSEC configuration Structure is documented below.
- effective_
labels Mapping[str, str] - All of labels (key/value pairs) present on the resource in GCP, including the labels configured through Pulumi, other clients and services.
- force_
destroy bool - Set this true to delete all records in the zone.
- forwarding_
config ManagedZone Forwarding Config Args - The presence for this field indicates that outbound forwarding is enabled for this zone. The value of this field contains the set of destinations to forward to. Structure is documented below.
- labels Mapping[str, str]
A set of key/value label pairs to assign to this ManagedZone.
Note: This field is non-authoritative, and will only manage the labels present in your configuration. Please refer to the field
effective_labelsfor all of the labels present on the resource.- managed_
zone_ strid - Unique identifier for the resource; defined by the server.
- name str
- User assigned name for this resource.
Must be unique within the project.
- name_
servers Sequence[str] - Delegate your managed_zone to these virtual name servers; defined by the server
- peering_
config ManagedZone Peering Config Args - The presence of this field indicates that DNS Peering is enabled for this zone. The value of this field contains the network to peer with. Structure is documented below.
- private_
visibility_ Managedconfig Zone Private Visibility Config Args - For privately visible zones, the set of Virtual Private Cloud
resources that the zone is visible from. At least one of
gke_clustersornetworksmust be specified. Structure is documented below. - project str
- The ID of the project in which the resource belongs. If it is not provided, the provider project is used.
- pulumi_
labels Mapping[str, str] - The combination of labels configured directly on the resource and default labels configured on the provider.
- reverse_
lookup bool - Specifies if this is a managed reverse lookup zone. If true, Cloud DNS will resolve reverse
lookup queries using automatically configured records for VPC resources. This only applies
to networks listed under
private_visibility_config. - service_
directory_ Managedconfig Zone Service Directory Config Args - The presence of this field indicates that this zone is backed by Service Directory. The value of this field contains information related to the namespace associated with the zone. Structure is documented below.
- visibility str
- The zone's visibility: public zones are exposed to the Internet,
while private zones are visible only to Virtual Private Cloud resources.
Default value is
public. Possible values are:private,public.
- cloud
Logging Property MapConfig - Cloud logging configuration Structure is documented below.
- creation
Time String - The time that this resource was created on the server. This is in RFC3339 text format.
- description String
- A textual description field. Defaults to 'Managed by Pulumi'.
- dns
Name String - The DNS name of this managed zone, for instance "example.com.".
- dnssec
Config Property Map - DNSSEC configuration Structure is documented below.
- effective
Labels Map<String> - All of labels (key/value pairs) present on the resource in GCP, including the labels configured through Pulumi, other clients and services.
- force
Destroy Boolean - Set this true to delete all records in the zone.
- forwarding
Config Property Map - The presence for this field indicates that outbound forwarding is enabled for this zone. The value of this field contains the set of destinations to forward to. Structure is documented below.
- labels Map<String>
A set of key/value label pairs to assign to this ManagedZone.
Note: This field is non-authoritative, and will only manage the labels present in your configuration. Please refer to the field
effective_labelsfor all of the labels present on the resource.- managed
Zone StringId - Unique identifier for the resource; defined by the server.
- name String
- User assigned name for this resource.
Must be unique within the project.
- name
Servers List<String> - Delegate your managed_zone to these virtual name servers; defined by the server
- peering
Config Property Map - The presence of this field indicates that DNS Peering is enabled for this zone. The value of this field contains the network to peer with. Structure is documented below.
- private
Visibility Property MapConfig - For privately visible zones, the set of Virtual Private Cloud
resources that the zone is visible from. At least one of
gke_clustersornetworksmust be specified. Structure is documented below. - project String
- The ID of the project in which the resource belongs. If it is not provided, the provider project is used.
- pulumi
Labels Map<String> - The combination of labels configured directly on the resource and default labels configured on the provider.
- reverse
Lookup Boolean - Specifies if this is a managed reverse lookup zone. If true, Cloud DNS will resolve reverse
lookup queries using automatically configured records for VPC resources. This only applies
to networks listed under
private_visibility_config. - service
Directory Property MapConfig - The presence of this field indicates that this zone is backed by Service Directory. The value of this field contains information related to the namespace associated with the zone. Structure is documented below.
- visibility String
- The zone's visibility: public zones are exposed to the Internet,
while private zones are visible only to Virtual Private Cloud resources.
Default value is
public. Possible values are:private,public.
Supporting Types
ManagedZoneCloudLoggingConfig, ManagedZoneCloudLoggingConfigArgs
- Enable
Logging bool - If set, enable query logging for this ManagedZone. False by default, making logging opt-in.
- Enable
Logging bool - If set, enable query logging for this ManagedZone. False by default, making logging opt-in.
- enable
Logging Boolean - If set, enable query logging for this ManagedZone. False by default, making logging opt-in.
- enable
Logging boolean - If set, enable query logging for this ManagedZone. False by default, making logging opt-in.
- enable_
logging bool - If set, enable query logging for this ManagedZone. False by default, making logging opt-in.
- enable
Logging Boolean - If set, enable query logging for this ManagedZone. False by default, making logging opt-in.
ManagedZoneDnssecConfig, ManagedZoneDnssecConfigArgs
- Default
Key List<ManagedSpecs Zone Dnssec Config Default Key Spec> - Specifies parameters that will be used for generating initial DnsKeys
for this ManagedZone. If you provide a spec for keySigning or zoneSigning,
you must also provide one for the other.
default_key_specs can only be updated when the state is
off. Structure is documented below. - Kind string
- Identifies what kind of resource this is
- Non
Existence string - Specifies the mechanism used to provide authenticated denial-of-existence responses.
non_existence can only be updated when the state is
off. Possible values are:nsec,nsec3. - State string
- Specifies whether DNSSEC is enabled, and what mode it is in
Possible values are:
off,on,transfer.
- Default
Key []ManagedSpecs Zone Dnssec Config Default Key Spec - Specifies parameters that will be used for generating initial DnsKeys
for this ManagedZone. If you provide a spec for keySigning or zoneSigning,
you must also provide one for the other.
default_key_specs can only be updated when the state is
off. Structure is documented below. - Kind string
- Identifies what kind of resource this is
- Non
Existence string - Specifies the mechanism used to provide authenticated denial-of-existence responses.
non_existence can only be updated when the state is
off. Possible values are:nsec,nsec3. - State string
- Specifies whether DNSSEC is enabled, and what mode it is in
Possible values are:
off,on,transfer.
- default
Key List<ManagedSpecs Zone Dnssec Config Default Key Spec> - Specifies parameters that will be used for generating initial DnsKeys
for this ManagedZone. If you provide a spec for keySigning or zoneSigning,
you must also provide one for the other.
default_key_specs can only be updated when the state is
off. Structure is documented below. - kind String
- Identifies what kind of resource this is
- non
Existence String - Specifies the mechanism used to provide authenticated denial-of-existence responses.
non_existence can only be updated when the state is
off. Possible values are:nsec,nsec3. - state String
- Specifies whether DNSSEC is enabled, and what mode it is in
Possible values are:
off,on,transfer.
- default
Key ManagedSpecs Zone Dnssec Config Default Key Spec[] - Specifies parameters that will be used for generating initial DnsKeys
for this ManagedZone. If you provide a spec for keySigning or zoneSigning,
you must also provide one for the other.
default_key_specs can only be updated when the state is
off. Structure is documented below. - kind string
- Identifies what kind of resource this is
- non
Existence string - Specifies the mechanism used to provide authenticated denial-of-existence responses.
non_existence can only be updated when the state is
off. Possible values are:nsec,nsec3. - state string
- Specifies whether DNSSEC is enabled, and what mode it is in
Possible values are:
off,on,transfer.
- default_
key_ Sequence[Managedspecs Zone Dnssec Config Default Key Spec] - Specifies parameters that will be used for generating initial DnsKeys
for this ManagedZone. If you provide a spec for keySigning or zoneSigning,
you must also provide one for the other.
default_key_specs can only be updated when the state is
off. Structure is documented below. - kind str
- Identifies what kind of resource this is
- non_
existence str - Specifies the mechanism used to provide authenticated denial-of-existence responses.
non_existence can only be updated when the state is
off. Possible values are:nsec,nsec3. - state str
- Specifies whether DNSSEC is enabled, and what mode it is in
Possible values are:
off,on,transfer.
- default
Key List<Property Map>Specs - Specifies parameters that will be used for generating initial DnsKeys
for this ManagedZone. If you provide a spec for keySigning or zoneSigning,
you must also provide one for the other.
default_key_specs can only be updated when the state is
off. Structure is documented below. - kind String
- Identifies what kind of resource this is
- non
Existence String - Specifies the mechanism used to provide authenticated denial-of-existence responses.
non_existence can only be updated when the state is
off. Possible values are:nsec,nsec3. - state String
- Specifies whether DNSSEC is enabled, and what mode it is in
Possible values are:
off,on,transfer.
ManagedZoneDnssecConfigDefaultKeySpec, ManagedZoneDnssecConfigDefaultKeySpecArgs
- Algorithm string
- String mnemonic specifying the DNSSEC algorithm of this key
Possible values are:
ecdsap256sha256,ecdsap384sha384,rsasha1,rsasha256,rsasha512. - Key
Length int - Length of the keys in bits
- Key
Type string - Specifies whether this is a key signing key (KSK) or a zone
signing key (ZSK). Key signing keys have the Secure Entry
Point flag set and, when active, will only be used to sign
resource record sets of type DNSKEY. Zone signing keys do
not have the Secure Entry Point flag set and will be used
to sign all other types of resource record sets.
Possible values are:
keySigning,zoneSigning. - Kind string
- Identifies what kind of resource this is
- Algorithm string
- String mnemonic specifying the DNSSEC algorithm of this key
Possible values are:
ecdsap256sha256,ecdsap384sha384,rsasha1,rsasha256,rsasha512. - Key
Length int - Length of the keys in bits
- Key
Type string - Specifies whether this is a key signing key (KSK) or a zone
signing key (ZSK). Key signing keys have the Secure Entry
Point flag set and, when active, will only be used to sign
resource record sets of type DNSKEY. Zone signing keys do
not have the Secure Entry Point flag set and will be used
to sign all other types of resource record sets.
Possible values are:
keySigning,zoneSigning. - Kind string
- Identifies what kind of resource this is
- algorithm String
- String mnemonic specifying the DNSSEC algorithm of this key
Possible values are:
ecdsap256sha256,ecdsap384sha384,rsasha1,rsasha256,rsasha512. - key
Length Integer - Length of the keys in bits
- key
Type String - Specifies whether this is a key signing key (KSK) or a zone
signing key (ZSK). Key signing keys have the Secure Entry
Point flag set and, when active, will only be used to sign
resource record sets of type DNSKEY. Zone signing keys do
not have the Secure Entry Point flag set and will be used
to sign all other types of resource record sets.
Possible values are:
keySigning,zoneSigning. - kind String
- Identifies what kind of resource this is
- algorithm string
- String mnemonic specifying the DNSSEC algorithm of this key
Possible values are:
ecdsap256sha256,ecdsap384sha384,rsasha1,rsasha256,rsasha512. - key
Length number - Length of the keys in bits
- key
Type string - Specifies whether this is a key signing key (KSK) or a zone
signing key (ZSK). Key signing keys have the Secure Entry
Point flag set and, when active, will only be used to sign
resource record sets of type DNSKEY. Zone signing keys do
not have the Secure Entry Point flag set and will be used
to sign all other types of resource record sets.
Possible values are:
keySigning,zoneSigning. - kind string
- Identifies what kind of resource this is
- algorithm str
- String mnemonic specifying the DNSSEC algorithm of this key
Possible values are:
ecdsap256sha256,ecdsap384sha384,rsasha1,rsasha256,rsasha512. - key_
length int - Length of the keys in bits
- key_
type str - Specifies whether this is a key signing key (KSK) or a zone
signing key (ZSK). Key signing keys have the Secure Entry
Point flag set and, when active, will only be used to sign
resource record sets of type DNSKEY. Zone signing keys do
not have the Secure Entry Point flag set and will be used
to sign all other types of resource record sets.
Possible values are:
keySigning,zoneSigning. - kind str
- Identifies what kind of resource this is
- algorithm String
- String mnemonic specifying the DNSSEC algorithm of this key
Possible values are:
ecdsap256sha256,ecdsap384sha384,rsasha1,rsasha256,rsasha512. - key
Length Number - Length of the keys in bits
- key
Type String - Specifies whether this is a key signing key (KSK) or a zone
signing key (ZSK). Key signing keys have the Secure Entry
Point flag set and, when active, will only be used to sign
resource record sets of type DNSKEY. Zone signing keys do
not have the Secure Entry Point flag set and will be used
to sign all other types of resource record sets.
Possible values are:
keySigning,zoneSigning. - kind String
- Identifies what kind of resource this is
ManagedZoneForwardingConfig, ManagedZoneForwardingConfigArgs
- Target
Name List<ManagedServers Zone Forwarding Config Target Name Server> - List of target name servers to forward to. Cloud DNS will select the best available name server if more than one target is given. Structure is documented below.
- Target
Name []ManagedServers Zone Forwarding Config Target Name Server - List of target name servers to forward to. Cloud DNS will select the best available name server if more than one target is given. Structure is documented below.
- target
Name List<ManagedServers Zone Forwarding Config Target Name Server> - List of target name servers to forward to. Cloud DNS will select the best available name server if more than one target is given. Structure is documented below.
- target
Name ManagedServers Zone Forwarding Config Target Name Server[] - List of target name servers to forward to. Cloud DNS will select the best available name server if more than one target is given. Structure is documented below.
- target_
name_ Sequence[Managedservers Zone Forwarding Config Target Name Server] - List of target name servers to forward to. Cloud DNS will select the best available name server if more than one target is given. Structure is documented below.
- target
Name List<Property Map>Servers - List of target name servers to forward to. Cloud DNS will select the best available name server if more than one target is given. Structure is documented below.
ManagedZoneForwardingConfigTargetNameServer, ManagedZoneForwardingConfigTargetNameServerArgs
- Domain
Name string - Fully qualified domain name for the forwarding target.
- Forwarding
Path string - Forwarding path for this TargetNameServer. If unset or
defaultCloud DNS will make forwarding decision based on address ranges, i.e. RFC1918 addresses go to the VPC, Non-RFC1918 addresses go to the Internet. When set toprivate, Cloud DNS will always send queries through VPC for this target Possible values are:default,private. - Ipv4Address string
- IPv4 address of a target name server.
- Domain
Name string - Fully qualified domain name for the forwarding target.
- Forwarding
Path string - Forwarding path for this TargetNameServer. If unset or
defaultCloud DNS will make forwarding decision based on address ranges, i.e. RFC1918 addresses go to the VPC, Non-RFC1918 addresses go to the Internet. When set toprivate, Cloud DNS will always send queries through VPC for this target Possible values are:default,private. - Ipv4Address string
- IPv4 address of a target name server.
- domain
Name String - Fully qualified domain name for the forwarding target.
- forwarding
Path String - Forwarding path for this TargetNameServer. If unset or
defaultCloud DNS will make forwarding decision based on address ranges, i.e. RFC1918 addresses go to the VPC, Non-RFC1918 addresses go to the Internet. When set toprivate, Cloud DNS will always send queries through VPC for this target Possible values are:default,private. - ipv4Address String
- IPv4 address of a target name server.
- domain
Name string - Fully qualified domain name for the forwarding target.
- forwarding
Path string - Forwarding path for this TargetNameServer. If unset or
defaultCloud DNS will make forwarding decision based on address ranges, i.e. RFC1918 addresses go to the VPC, Non-RFC1918 addresses go to the Internet. When set toprivate, Cloud DNS will always send queries through VPC for this target Possible values are:default,private. - ipv4Address string
- IPv4 address of a target name server.
- domain_
name str - Fully qualified domain name for the forwarding target.
- forwarding_
path str - Forwarding path for this TargetNameServer. If unset or
defaultCloud DNS will make forwarding decision based on address ranges, i.e. RFC1918 addresses go to the VPC, Non-RFC1918 addresses go to the Internet. When set toprivate, Cloud DNS will always send queries through VPC for this target Possible values are:default,private. - ipv4_
address str - IPv4 address of a target name server.
- domain
Name String - Fully qualified domain name for the forwarding target.
- forwarding
Path String - Forwarding path for this TargetNameServer. If unset or
defaultCloud DNS will make forwarding decision based on address ranges, i.e. RFC1918 addresses go to the VPC, Non-RFC1918 addresses go to the Internet. When set toprivate, Cloud DNS will always send queries through VPC for this target Possible values are:default,private. - ipv4Address String
- IPv4 address of a target name server.
ManagedZonePeeringConfig, ManagedZonePeeringConfigArgs
- Target
Network ManagedZone Peering Config Target Network - The network with which to peer. Structure is documented below.
- Target
Network ManagedZone Peering Config Target Network - The network with which to peer. Structure is documented below.
- target
Network ManagedZone Peering Config Target Network - The network with which to peer. Structure is documented below.
- target
Network ManagedZone Peering Config Target Network - The network with which to peer. Structure is documented below.
- target_
network ManagedZone Peering Config Target Network - The network with which to peer. Structure is documented below.
- target
Network Property Map - The network with which to peer. Structure is documented below.
ManagedZonePeeringConfigTargetNetwork, ManagedZonePeeringConfigTargetNetworkArgs
- Network
Url string - The id or fully qualified URL of the VPC network to forward queries to.
This should be formatted like
projects/{project}/global/networks/{network}orhttps://www.googleapis.com/compute/v1/projects/{project}/global/networks/{network}
- Network
Url string - The id or fully qualified URL of the VPC network to forward queries to.
This should be formatted like
projects/{project}/global/networks/{network}orhttps://www.googleapis.com/compute/v1/projects/{project}/global/networks/{network}
- network
Url String - The id or fully qualified URL of the VPC network to forward queries to.
This should be formatted like
projects/{project}/global/networks/{network}orhttps://www.googleapis.com/compute/v1/projects/{project}/global/networks/{network}
- network
Url string - The id or fully qualified URL of the VPC network to forward queries to.
This should be formatted like
projects/{project}/global/networks/{network}orhttps://www.googleapis.com/compute/v1/projects/{project}/global/networks/{network}
- network_
url str - The id or fully qualified URL of the VPC network to forward queries to.
This should be formatted like
projects/{project}/global/networks/{network}orhttps://www.googleapis.com/compute/v1/projects/{project}/global/networks/{network}
- network
Url String - The id or fully qualified URL of the VPC network to forward queries to.
This should be formatted like
projects/{project}/global/networks/{network}orhttps://www.googleapis.com/compute/v1/projects/{project}/global/networks/{network}
ManagedZonePrivateVisibilityConfig, ManagedZonePrivateVisibilityConfigArgs
- Gke
Clusters List<ManagedZone Private Visibility Config Gke Cluster> - The list of Google Kubernetes Engine clusters that can see this zone. Structure is documented below.
- Networks
List<Managed
Zone Private Visibility Config Network>
- Gke
Clusters []ManagedZone Private Visibility Config Gke Cluster - The list of Google Kubernetes Engine clusters that can see this zone. Structure is documented below.
- Networks
[]Managed
Zone Private Visibility Config Network
- gke
Clusters List<ManagedZone Private Visibility Config Gke Cluster> - The list of Google Kubernetes Engine clusters that can see this zone. Structure is documented below.
- networks
List<Managed
Zone Private Visibility Config Network>
- gke
Clusters ManagedZone Private Visibility Config Gke Cluster[] - The list of Google Kubernetes Engine clusters that can see this zone. Structure is documented below.
- networks
Managed
Zone Private Visibility Config Network[]
- gke_
clusters Sequence[ManagedZone Private Visibility Config Gke Cluster] - The list of Google Kubernetes Engine clusters that can see this zone. Structure is documented below.
- networks
Sequence[Managed
Zone Private Visibility Config Network]
- gke
Clusters List<Property Map> - The list of Google Kubernetes Engine clusters that can see this zone. Structure is documented below.
- networks List<Property Map>
ManagedZonePrivateVisibilityConfigGkeCluster, ManagedZonePrivateVisibilityConfigGkeClusterArgs
- Gke
Cluster stringName - The resource name of the cluster to bind this ManagedZone to.
This should be specified in the format like
projects/*/locations/*/clusters/*
- Gke
Cluster stringName - The resource name of the cluster to bind this ManagedZone to.
This should be specified in the format like
projects/*/locations/*/clusters/*
- gke
Cluster StringName - The resource name of the cluster to bind this ManagedZone to.
This should be specified in the format like
projects/*/locations/*/clusters/*
- gke
Cluster stringName - The resource name of the cluster to bind this ManagedZone to.
This should be specified in the format like
projects/*/locations/*/clusters/*
- gke_
cluster_ strname - The resource name of the cluster to bind this ManagedZone to.
This should be specified in the format like
projects/*/locations/*/clusters/*
- gke
Cluster StringName - The resource name of the cluster to bind this ManagedZone to.
This should be specified in the format like
projects/*/locations/*/clusters/*
ManagedZonePrivateVisibilityConfigNetwork, ManagedZonePrivateVisibilityConfigNetworkArgs
- Network
Url string - The id or fully qualified URL of the VPC network to bind to.
This should be formatted like
projects/{project}/global/networks/{network}orhttps://www.googleapis.com/compute/v1/projects/{project}/global/networks/{network}
- Network
Url string - The id or fully qualified URL of the VPC network to bind to.
This should be formatted like
projects/{project}/global/networks/{network}orhttps://www.googleapis.com/compute/v1/projects/{project}/global/networks/{network}
- network
Url String - The id or fully qualified URL of the VPC network to bind to.
This should be formatted like
projects/{project}/global/networks/{network}orhttps://www.googleapis.com/compute/v1/projects/{project}/global/networks/{network}
- network
Url string - The id or fully qualified URL of the VPC network to bind to.
This should be formatted like
projects/{project}/global/networks/{network}orhttps://www.googleapis.com/compute/v1/projects/{project}/global/networks/{network}
- network_
url str - The id or fully qualified URL of the VPC network to bind to.
This should be formatted like
projects/{project}/global/networks/{network}orhttps://www.googleapis.com/compute/v1/projects/{project}/global/networks/{network}
- network
Url String - The id or fully qualified URL of the VPC network to bind to.
This should be formatted like
projects/{project}/global/networks/{network}orhttps://www.googleapis.com/compute/v1/projects/{project}/global/networks/{network}
ManagedZoneServiceDirectoryConfig, ManagedZoneServiceDirectoryConfigArgs
- Namespace
Managed
Zone Service Directory Config Namespace - The namespace associated with the zone. Structure is documented below.
- Namespace
Managed
Zone Service Directory Config Namespace - The namespace associated with the zone. Structure is documented below.
- namespace
Managed
Zone Service Directory Config Namespace - The namespace associated with the zone. Structure is documented below.
- namespace
Managed
Zone Service Directory Config Namespace - The namespace associated with the zone. Structure is documented below.
- namespace
Managed
Zone Service Directory Config Namespace - The namespace associated with the zone. Structure is documented below.
- namespace Property Map
- The namespace associated with the zone. Structure is documented below.
ManagedZoneServiceDirectoryConfigNamespace, ManagedZoneServiceDirectoryConfigNamespaceArgs
- Namespace
Url string - The fully qualified or partial URL of the service directory namespace that should be
associated with the zone. This should be formatted like
https://servicedirectory.googleapis.com/v1/projects/{project}/locations/{location}/namespaces/{namespace_id}or simplyprojects/{project}/locations/{location}/namespaces/{namespace_id}Ignored forpublicvisibility zones.
- Namespace
Url string - The fully qualified or partial URL of the service directory namespace that should be
associated with the zone. This should be formatted like
https://servicedirectory.googleapis.com/v1/projects/{project}/locations/{location}/namespaces/{namespace_id}or simplyprojects/{project}/locations/{location}/namespaces/{namespace_id}Ignored forpublicvisibility zones.
- namespace
Url String - The fully qualified or partial URL of the service directory namespace that should be
associated with the zone. This should be formatted like
https://servicedirectory.googleapis.com/v1/projects/{project}/locations/{location}/namespaces/{namespace_id}or simplyprojects/{project}/locations/{location}/namespaces/{namespace_id}Ignored forpublicvisibility zones.
- namespace
Url string - The fully qualified or partial URL of the service directory namespace that should be
associated with the zone. This should be formatted like
https://servicedirectory.googleapis.com/v1/projects/{project}/locations/{location}/namespaces/{namespace_id}or simplyprojects/{project}/locations/{location}/namespaces/{namespace_id}Ignored forpublicvisibility zones.
- namespace_
url str - The fully qualified or partial URL of the service directory namespace that should be
associated with the zone. This should be formatted like
https://servicedirectory.googleapis.com/v1/projects/{project}/locations/{location}/namespaces/{namespace_id}or simplyprojects/{project}/locations/{location}/namespaces/{namespace_id}Ignored forpublicvisibility zones.
- namespace
Url String - The fully qualified or partial URL of the service directory namespace that should be
associated with the zone. This should be formatted like
https://servicedirectory.googleapis.com/v1/projects/{project}/locations/{location}/namespaces/{namespace_id}or simplyprojects/{project}/locations/{location}/namespaces/{namespace_id}Ignored forpublicvisibility zones.
Import
ManagedZone can be imported using any of these accepted formats:
projects/{{project}}/managedZones/{{name}}{{project}}/{{name}}{{name}}
When using the pulumi import command, ManagedZone can be imported using one of the formats above. For example:
$ pulumi import gcp:dns/managedZone:ManagedZone default projects/{{project}}/managedZones/{{name}}
$ pulumi import gcp:dns/managedZone:ManagedZone default {{project}}/{{name}}
$ pulumi import gcp:dns/managedZone:ManagedZone default {{name}}
To learn more about importing existing cloud resources, see Importing resources.
Package Details
- Repository
- Google Cloud (GCP) Classic pulumi/pulumi-gcp
- License
- Apache-2.0
- Notes
- This Pulumi package is based on the
google-betaTerraform Provider.