1. Registry
  2. Packages
  3. Google Cloud (GCP)
  4. API Docs
  5. networkservices
  6. AgentConnectivityTemplate
Viewing docs for Google Cloud v10.2.0
published on Tuesday, Oct 20, 2026 by Pulumi
gcp logo
Viewing docs for Google Cloud v10.2.0
published on Tuesday, Oct 20, 2026 by Pulumi

    AgentConnectivityTemplate represents a reusable network configuration.

    To get more information about AgentConnectivityTemplate, see:

    Example Usage

    Network Services Agent Connectivity Template Basic

    import * as pulumi from "@pulumi/pulumi";
    import * as gcp from "@pulumi/gcp";
    
    const project = gcp.organizations.getProject({});
    const _default = new gcp.networkservices.AgentConnectivityTemplate("default", {
        agentConnectivityTemplateId: "my-connectivity-template",
        location: "us-west2",
        description: "A basic configuration for Agent Connectivity Template",
        labels: {
            env: "test",
            tier: "gold",
        },
        agentCompute: "GKE",
        deploymentModel: "CENTRALIZED",
        accessPath: "CLIENT_TO_AGENT",
    });
    
    import pulumi
    import pulumi_gcp as gcp
    
    project = gcp.organizations.get_project()
    default = gcp.networkservices.AgentConnectivityTemplate("default",
        agent_connectivity_template_id="my-connectivity-template",
        location="us-west2",
        description="A basic configuration for Agent Connectivity Template",
        labels={
            "env": "test",
            "tier": "gold",
        },
        agent_compute="GKE",
        deployment_model="CENTRALIZED",
        access_path="CLIENT_TO_AGENT")
    
    package main
    
    import (
    	"github.com/pulumi/pulumi-gcp/sdk/v10/go/gcp/networkservices"
    	"github.com/pulumi/pulumi-gcp/sdk/v10/go/gcp/organizations"
    	"github.com/pulumi/pulumi/sdk/v3/go/pulumi"
    )
    
    func main() {
    	pulumi.Run(func(ctx *pulumi.Context) error {
    		_, err := organizations.LookupProject(ctx, &organizations.LookupProjectArgs{}, nil)
    		if err != nil {
    			return err
    		}
    		_, err = networkservices.NewAgentConnectivityTemplate(ctx, "default", &networkservices.AgentConnectivityTemplateArgs{
    			AgentConnectivityTemplateId: pulumi.String("my-connectivity-template"),
    			Location:                    pulumi.String("us-west2"),
    			Description:                 pulumi.String("A basic configuration for Agent Connectivity Template"),
    			Labels: pulumi.StringMap{
    				"env":  pulumi.String("test"),
    				"tier": pulumi.String("gold"),
    			},
    			AgentCompute:    pulumi.String("GKE"),
    			DeploymentModel: pulumi.String("CENTRALIZED"),
    			AccessPath:      pulumi.String("CLIENT_TO_AGENT"),
    		})
    		if err != nil {
    			return err
    		}
    		return nil
    	})
    }
    
    using System.Collections.Generic;
    using System.Linq;
    using Pulumi;
    using Gcp = Pulumi.Gcp;
    
    return await Deployment.RunAsync(() => 
    {
        var project = Gcp.Organizations.GetProject.Invoke();
    
        var @default = new Gcp.NetworkServices.AgentConnectivityTemplate("default", new()
        {
            AgentConnectivityTemplateId = "my-connectivity-template",
            Location = "us-west2",
            Description = "A basic configuration for Agent Connectivity Template",
            Labels = 
            {
                { "env", "test" },
                { "tier", "gold" },
            },
            AgentCompute = "GKE",
            DeploymentModel = "CENTRALIZED",
            AccessPath = "CLIENT_TO_AGENT",
        });
    
    });
    
    package generated_program;
    
    import com.pulumi.Context;
    import com.pulumi.Pulumi;
    import com.pulumi.core.Output;
    import com.pulumi.gcp.organizations.OrganizationsFunctions;
    import com.pulumi.gcp.organizations.inputs.GetProjectArgs;
    import com.pulumi.gcp.networkservices.AgentConnectivityTemplate;
    import com.pulumi.gcp.networkservices.AgentConnectivityTemplateArgs;
    import java.util.ArrayList;
    import java.util.Arrays;
    import java.util.Map;
    import java.io.File;
    import java.nio.file.Files;
    import java.nio.file.Paths;
    
    public class App {
        public static void main(String[] args) {
            Pulumi.run(App::stack);
        }
    
        public static void stack(Context ctx) {
            final var project = OrganizationsFunctions.getProject(GetProjectArgs.builder()
                .build());
    
            var default_ = new AgentConnectivityTemplate("default", AgentConnectivityTemplateArgs.builder()
                .agentConnectivityTemplateId("my-connectivity-template")
                .location("us-west2")
                .description("A basic configuration for Agent Connectivity Template")
                .labels(Map.ofEntries(
                    Map.entry("env", "test"),
                    Map.entry("tier", "gold")
                ))
                .agentCompute("GKE")
                .deploymentModel("CENTRALIZED")
                .accessPath("CLIENT_TO_AGENT")
                .build());
    
        }
    }
    
    resources:
      default:
        type: gcp:networkservices:AgentConnectivityTemplate
        properties:
          agentConnectivityTemplateId: my-connectivity-template
          location: us-west2
          description: A basic configuration for Agent Connectivity Template
          labels:
            env: test
            tier: gold
          agentCompute: GKE
          deploymentModel: CENTRALIZED
          accessPath: CLIENT_TO_AGENT
    variables:
      project:
        fn::invoke:
          function: gcp:organizations:getProject
          arguments: {}
    
    terraform {
      required_providers {
        gcp = {
          source = "pulumi/gcp"
        }
      }
    }
    
    data "gcp_organizations_project" "project" {
    }
    
    resource "gcp_networkservices_agent_connectivity_template" "default" {
      lifecycle {
        create_before_destroy = true
      }
      agent_connectivity_template_id = "my-connectivity-template"
      location                       = "us-west2"
      description                    = "A basic configuration for Agent Connectivity Template"
      labels = {
        "env"  = "test"
        "tier" = "gold"
      }
      agent_compute    = "GKE"
      deployment_model = "CENTRALIZED"
      access_path      = "CLIENT_TO_AGENT"
    }
    

    Network Services Agent Connectivity Template Advanced

    import * as pulumi from "@pulumi/pulumi";
    import * as gcp from "@pulumi/gcp";
    import * as std from "@pulumi/std";
    
    const project = gcp.organizations.getProject({});
    const _default = new gcp.compute.Network("default", {
        name: "my-network",
        autoCreateSubnetworks: false,
    });
    const defaultSubnetwork = new gcp.compute.Subnetwork("default", {
        name: "my-subnetwork",
        region: "us-west2",
        network: _default.id,
        ipCidrRange: "10.0.0.0/16",
    });
    const defaultNetworkAttachment = new gcp.compute.NetworkAttachment("default", {
        name: "my-attachment",
        region: "us-west2",
        connectionPreference: "ACCEPT_AUTOMATIC",
        subnetworks: [defaultSubnetwork.id],
    });
    const defaultManagedZone = new gcp.dns.ManagedZone("default", {
        name: "my-zone",
        dnsName: "example.com.",
        description: "Private zone used by AgentGateway DNS peering",
        visibility: "private",
        privateVisibilityConfig: {
            networks: [{
                networkUrl: _default.id,
            }],
        },
    });
    const defaultTrustConfig = new gcp.certificatemanager.TrustConfig("default", {
        name: "my-trust-config",
        location: "us-west2",
        trustStores: [{
            trustAnchors: [{
                pemCertificate: std.file({
                    input: "test-fixtures/cert.pem",
                }).then(invoke => invoke.result),
            }],
            intermediateCas: [{
                pemCertificate: std.file({
                    input: "test-fixtures/cert.pem",
                }).then(invoke => invoke.result),
            }],
        }],
    });
    const defaultAgentConnectivityTemplate = new gcp.networkservices.AgentConnectivityTemplate("default", {
        agentConnectivityTemplateId: "my-connectivity-template",
        location: "us-west2",
        description: "An advanced configuration for Agent Connectivity Template",
        agentCompute: "GKE",
        deploymentModel: "CENTRALIZED",
        accessTypes: ["PRIVATE"],
        accessPath: "AGENT_TO_ANYWHERE",
        egressNetworkConfig: {
            vpcEgress: "ALL_TRAFFIC",
            networkAttachment: defaultNetworkAttachment.id,
            dnsPeeringConfig: {
                domains: [defaultManagedZone.dnsName],
                targetNetwork: _default.id,
            },
            tlsConfig: {
                trustConfig: pulumi.all([project, defaultTrustConfig.name]).apply(([project, name]) => `projects/${project.number}/locations/us-west2/trustConfigs/${name}`),
                additionalRoots: "NO_ADDITIONAL_ROOTS",
            },
        },
    });
    
    import pulumi
    import pulumi_gcp as gcp
    import pulumi_std as std
    
    project = gcp.organizations.get_project()
    default = gcp.compute.Network("default",
        name="my-network",
        auto_create_subnetworks=False)
    default_subnetwork = gcp.compute.Subnetwork("default",
        name="my-subnetwork",
        region="us-west2",
        network=default.id,
        ip_cidr_range="10.0.0.0/16")
    default_network_attachment = gcp.compute.NetworkAttachment("default",
        name="my-attachment",
        region="us-west2",
        connection_preference="ACCEPT_AUTOMATIC",
        subnetworks=[default_subnetwork.id])
    default_managed_zone = gcp.dns.ManagedZone("default",
        name="my-zone",
        dns_name="example.com.",
        description="Private zone used by AgentGateway DNS peering",
        visibility="private",
        private_visibility_config={
            "networks": [{
                "network_url": default.id,
            }],
        })
    default_trust_config = gcp.certificatemanager.TrustConfig("default",
        name="my-trust-config",
        location="us-west2",
        trust_stores=[{
            "trust_anchors": [{
                "pem_certificate": std.file(input="test-fixtures/cert.pem").result,
            }],
            "intermediate_cas": [{
                "pem_certificate": std.file(input="test-fixtures/cert.pem").result,
            }],
        }])
    default_agent_connectivity_template = gcp.networkservices.AgentConnectivityTemplate("default",
        agent_connectivity_template_id="my-connectivity-template",
        location="us-west2",
        description="An advanced configuration for Agent Connectivity Template",
        agent_compute="GKE",
        deployment_model="CENTRALIZED",
        access_types=["PRIVATE"],
        access_path="AGENT_TO_ANYWHERE",
        egress_network_config={
            "vpc_egress": "ALL_TRAFFIC",
            "network_attachment": default_network_attachment.id,
            "dns_peering_config": {
                "domains": [default_managed_zone.dns_name],
                "target_network": default.id,
            },
            "tls_config": {
                "trust_config": default_trust_config.name.apply(lambda name: f"projects/{project.number}/locations/us-west2/trustConfigs/{name}"),
                "additional_roots": "NO_ADDITIONAL_ROOTS",
            },
        })
    
    package main
    
    import (
    	"fmt"
    
    	"github.com/pulumi/pulumi-gcp/sdk/v10/go/gcp/certificatemanager"
    	"github.com/pulumi/pulumi-gcp/sdk/v10/go/gcp/compute"
    	"github.com/pulumi/pulumi-gcp/sdk/v10/go/gcp/dns"
    	"github.com/pulumi/pulumi-gcp/sdk/v10/go/gcp/networkservices"
    	"github.com/pulumi/pulumi-gcp/sdk/v10/go/gcp/organizations"
    	"github.com/pulumi/pulumi-std/sdk/go/std"
    	"github.com/pulumi/pulumi/sdk/v3/go/pulumi"
    )
    
    func main() {
    	pulumi.Run(func(ctx *pulumi.Context) error {
    		project, err := organizations.LookupProject(ctx, &organizations.LookupProjectArgs{}, nil)
    		if err != nil {
    			return err
    		}
    		_default, err := compute.NewNetwork(ctx, "default", &compute.NetworkArgs{
    			Name:                  pulumi.String("my-network"),
    			AutoCreateSubnetworks: pulumi.Bool(false),
    		})
    		if err != nil {
    			return err
    		}
    		defaultSubnetwork, err := compute.NewSubnetwork(ctx, "default", &compute.SubnetworkArgs{
    			Name:        pulumi.String("my-subnetwork"),
    			Region:      pulumi.String("us-west2"),
    			Network:     _default.ID(),
    			IpCidrRange: pulumi.String("10.0.0.0/16"),
    		})
    		if err != nil {
    			return err
    		}
    		defaultNetworkAttachment, err := compute.NewNetworkAttachment(ctx, "default", &compute.NetworkAttachmentArgs{
    			Name:                 pulumi.String("my-attachment"),
    			Region:               pulumi.String("us-west2"),
    			ConnectionPreference: pulumi.String("ACCEPT_AUTOMATIC"),
    			Subnetworks: pulumi.StringArray{
    				defaultSubnetwork.ID(),
    			},
    		})
    		if err != nil {
    			return err
    		}
    		defaultManagedZone, err := dns.NewManagedZone(ctx, "default", &dns.ManagedZoneArgs{
    			Name:        pulumi.String("my-zone"),
    			DnsName:     pulumi.String("example.com."),
    			Description: pulumi.String("Private zone used by AgentGateway DNS peering"),
    			Visibility:  pulumi.String("private"),
    			PrivateVisibilityConfig: &dns.ManagedZonePrivateVisibilityConfigArgs{
    				Networks: dns.ManagedZonePrivateVisibilityConfigNetworkArray{
    					&dns.ManagedZonePrivateVisibilityConfigNetworkArgs{
    						NetworkUrl: _default.ID(),
    					},
    				},
    			},
    		})
    		if err != nil {
    			return err
    		}
    		invokeFile, err := std.File(ctx, &std.FileArgs{
    			Input: "test-fixtures/cert.pem",
    		}, nil)
    		if err != nil {
    			return err
    		}
    		invokeFile1, err := std.File(ctx, &std.FileArgs{
    			Input: "test-fixtures/cert.pem",
    		}, nil)
    		if err != nil {
    			return err
    		}
    		defaultTrustConfig, err := certificatemanager.NewTrustConfig(ctx, "default", &certificatemanager.TrustConfigArgs{
    			Name:     pulumi.String("my-trust-config"),
    			Location: pulumi.String("us-west2"),
    			TrustStores: certificatemanager.TrustConfigTrustStoreArray{
    				&certificatemanager.TrustConfigTrustStoreArgs{
    					TrustAnchors: certificatemanager.TrustConfigTrustStoreTrustAnchorArray{
    						&certificatemanager.TrustConfigTrustStoreTrustAnchorArgs{
    							PemCertificate: pulumi.String(invokeFile.Result),
    						},
    					},
    					IntermediateCas: certificatemanager.TrustConfigTrustStoreIntermediateCaArray{
    						&certificatemanager.TrustConfigTrustStoreIntermediateCaArgs{
    							PemCertificate: pulumi.String(invokeFile1.Result),
    						},
    					},
    				},
    			},
    		})
    		if err != nil {
    			return err
    		}
    		_, err = networkservices.NewAgentConnectivityTemplate(ctx, "default", &networkservices.AgentConnectivityTemplateArgs{
    			AgentConnectivityTemplateId: pulumi.String("my-connectivity-template"),
    			Location:                    pulumi.String("us-west2"),
    			Description:                 pulumi.String("An advanced configuration for Agent Connectivity Template"),
    			AgentCompute:                pulumi.String("GKE"),
    			DeploymentModel:             pulumi.String("CENTRALIZED"),
    			AccessTypes: pulumi.StringArray{
    				pulumi.String("PRIVATE"),
    			},
    			AccessPath: pulumi.String("AGENT_TO_ANYWHERE"),
    			EgressNetworkConfig: &networkservices.AgentConnectivityTemplateEgressNetworkConfigArgs{
    				VpcEgress:         pulumi.String("ALL_TRAFFIC"),
    				NetworkAttachment: defaultNetworkAttachment.ID(),
    				DnsPeeringConfig: &networkservices.AgentConnectivityTemplateEgressNetworkConfigDnsPeeringConfigArgs{
    					Domains: pulumi.StringArray{
    						defaultManagedZone.DnsName,
    					},
    					TargetNetwork: _default.ID(),
    				},
    				TlsConfig: &networkservices.AgentConnectivityTemplateEgressNetworkConfigTlsConfigArgs{
    					TrustConfig: defaultTrustConfig.Name.ApplyT(func(name string) (string, error) {
    						return fmt.Sprintf("projects/%v/locations/us-west2/trustConfigs/%v", project.Number, name), nil
    					}).(pulumi.StringOutput),
    					AdditionalRoots: pulumi.String("NO_ADDITIONAL_ROOTS"),
    				},
    			},
    		})
    		if err != nil {
    			return err
    		}
    		return nil
    	})
    }
    
    using System.Collections.Generic;
    using System.Linq;
    using Pulumi;
    using Gcp = Pulumi.Gcp;
    using Std = Pulumi.Std;
    
    return await Deployment.RunAsync(() => 
    {
        var project = Gcp.Organizations.GetProject.Invoke();
    
        var @default = new Gcp.Compute.Network("default", new()
        {
            Name = "my-network",
            AutoCreateSubnetworks = false,
        });
    
        var defaultSubnetwork = new Gcp.Compute.Subnetwork("default", new()
        {
            Name = "my-subnetwork",
            Region = "us-west2",
            Network = @default.Id,
            IpCidrRange = "10.0.0.0/16",
        });
    
        var defaultNetworkAttachment = new Gcp.Compute.NetworkAttachment("default", new()
        {
            Name = "my-attachment",
            Region = "us-west2",
            ConnectionPreference = "ACCEPT_AUTOMATIC",
            Subnetworks = new[]
            {
                defaultSubnetwork.Id,
            },
        });
    
        var defaultManagedZone = new Gcp.Dns.ManagedZone("default", new()
        {
            Name = "my-zone",
            DnsName = "example.com.",
            Description = "Private zone used by AgentGateway DNS peering",
            Visibility = "private",
            PrivateVisibilityConfig = new Gcp.Dns.Inputs.ManagedZonePrivateVisibilityConfigArgs
            {
                Networks = new[]
                {
                    new Gcp.Dns.Inputs.ManagedZonePrivateVisibilityConfigNetworkArgs
                    {
                        NetworkUrl = @default.Id,
                    },
                },
            },
        });
    
        var defaultTrustConfig = new Gcp.CertificateManager.TrustConfig("default", new()
        {
            Name = "my-trust-config",
            Location = "us-west2",
            TrustStores = new[]
            {
                new Gcp.CertificateManager.Inputs.TrustConfigTrustStoreArgs
                {
                    TrustAnchors = new[]
                    {
                        new Gcp.CertificateManager.Inputs.TrustConfigTrustStoreTrustAnchorArgs
                        {
                            PemCertificate = Std.File.Invoke(new()
                            {
                                Input = "test-fixtures/cert.pem",
                            }).Apply(invoke => invoke.Result),
                        },
                    },
                    IntermediateCas = new[]
                    {
                        new Gcp.CertificateManager.Inputs.TrustConfigTrustStoreIntermediateCaArgs
                        {
                            PemCertificate = Std.File.Invoke(new()
                            {
                                Input = "test-fixtures/cert.pem",
                            }).Apply(invoke => invoke.Result),
                        },
                    },
                },
            },
        });
    
        var defaultAgentConnectivityTemplate = new Gcp.NetworkServices.AgentConnectivityTemplate("default", new()
        {
            AgentConnectivityTemplateId = "my-connectivity-template",
            Location = "us-west2",
            Description = "An advanced configuration for Agent Connectivity Template",
            AgentCompute = "GKE",
            DeploymentModel = "CENTRALIZED",
            AccessTypes = new[]
            {
                "PRIVATE",
            },
            AccessPath = "AGENT_TO_ANYWHERE",
            EgressNetworkConfig = new Gcp.NetworkServices.Inputs.AgentConnectivityTemplateEgressNetworkConfigArgs
            {
                VpcEgress = "ALL_TRAFFIC",
                NetworkAttachment = defaultNetworkAttachment.Id,
                DnsPeeringConfig = new Gcp.NetworkServices.Inputs.AgentConnectivityTemplateEgressNetworkConfigDnsPeeringConfigArgs
                {
                    Domains = new[]
                    {
                        defaultManagedZone.DnsName,
                    },
                    TargetNetwork = @default.Id,
                },
                TlsConfig = new Gcp.NetworkServices.Inputs.AgentConnectivityTemplateEgressNetworkConfigTlsConfigArgs
                {
                    TrustConfig = Output.Tuple(project, defaultTrustConfig.Name).Apply(values =>
                    {
                        var project = values.Item1;
                        var name = values.Item2;
                        return $"projects/{project.Apply(getProjectResult => getProjectResult.Number)}/locations/us-west2/trustConfigs/{name}";
                    }),
                    AdditionalRoots = "NO_ADDITIONAL_ROOTS",
                },
            },
        });
    
    });
    
    package generated_program;
    
    import com.pulumi.Context;
    import com.pulumi.Pulumi;
    import com.pulumi.core.Output;
    import com.pulumi.gcp.organizations.OrganizationsFunctions;
    import com.pulumi.gcp.organizations.inputs.GetProjectArgs;
    import com.pulumi.gcp.compute.Network;
    import com.pulumi.gcp.compute.NetworkArgs;
    import com.pulumi.gcp.compute.Subnetwork;
    import com.pulumi.gcp.compute.SubnetworkArgs;
    import com.pulumi.gcp.compute.NetworkAttachment;
    import com.pulumi.gcp.compute.NetworkAttachmentArgs;
    import com.pulumi.gcp.dns.ManagedZone;
    import com.pulumi.gcp.dns.ManagedZoneArgs;
    import com.pulumi.gcp.dns.inputs.ManagedZonePrivateVisibilityConfigArgs;
    import com.pulumi.gcp.dns.inputs.ManagedZonePrivateVisibilityConfigNetworkArgs;
    import com.pulumi.gcp.certificatemanager.TrustConfig;
    import com.pulumi.gcp.certificatemanager.TrustConfigArgs;
    import com.pulumi.gcp.certificatemanager.inputs.TrustConfigTrustStoreArgs;
    import com.pulumi.gcp.certificatemanager.inputs.TrustConfigTrustStoreTrustAnchorArgs;
    import com.pulumi.gcp.certificatemanager.inputs.TrustConfigTrustStoreIntermediateCaArgs;
    import com.pulumi.std.StdFunctions;
    import com.pulumi.std.inputs.FileArgs;
    import com.pulumi.gcp.networkservices.AgentConnectivityTemplate;
    import com.pulumi.gcp.networkservices.AgentConnectivityTemplateArgs;
    import com.pulumi.gcp.networkservices.inputs.AgentConnectivityTemplateEgressNetworkConfigArgs;
    import com.pulumi.gcp.networkservices.inputs.AgentConnectivityTemplateEgressNetworkConfigDnsPeeringConfigArgs;
    import com.pulumi.gcp.networkservices.inputs.AgentConnectivityTemplateEgressNetworkConfigTlsConfigArgs;
    import java.util.ArrayList;
    import java.util.Arrays;
    import java.util.Map;
    import java.io.File;
    import java.nio.file.Files;
    import java.nio.file.Paths;
    
    public class App {
        public static void main(String[] args) {
            Pulumi.run(App::stack);
        }
    
        public static void stack(Context ctx) {
            final var project = OrganizationsFunctions.getProject(GetProjectArgs.builder()
                .build());
    
            var default_ = new Network("default", NetworkArgs.builder()
                .name("my-network")
                .autoCreateSubnetworks(false)
                .build());
    
            var defaultSubnetwork = new Subnetwork("defaultSubnetwork", SubnetworkArgs.builder()
                .name("my-subnetwork")
                .region("us-west2")
                .network(default_.id())
                .ipCidrRange("10.0.0.0/16")
                .build());
    
            var defaultNetworkAttachment = new NetworkAttachment("defaultNetworkAttachment", NetworkAttachmentArgs.builder()
                .name("my-attachment")
                .region("us-west2")
                .connectionPreference("ACCEPT_AUTOMATIC")
                .subnetworks(defaultSubnetwork.id())
                .build());
    
            var defaultManagedZone = new ManagedZone("defaultManagedZone", ManagedZoneArgs.builder()
                .name("my-zone")
                .dnsName("example.com.")
                .description("Private zone used by AgentGateway DNS peering")
                .visibility("private")
                .privateVisibilityConfig(ManagedZonePrivateVisibilityConfigArgs.builder()
                    .networks(ManagedZonePrivateVisibilityConfigNetworkArgs.builder()
                        .networkUrl(default_.id())
                        .build())
                    .build())
                .build());
    
            var defaultTrustConfig = new TrustConfig("defaultTrustConfig", TrustConfigArgs.builder()
                .name("my-trust-config")
                .location("us-west2")
                .trustStores(TrustConfigTrustStoreArgs.builder()
                    .trustAnchors(TrustConfigTrustStoreTrustAnchorArgs.builder()
                        .pemCertificate(StdFunctions.file(FileArgs.builder()
                            .input("test-fixtures/cert.pem")
                            .build()).result())
                        .build())
                    .intermediateCas(TrustConfigTrustStoreIntermediateCaArgs.builder()
                        .pemCertificate(StdFunctions.file(FileArgs.builder()
                            .input("test-fixtures/cert.pem")
                            .build()).result())
                        .build())
                    .build())
                .build());
    
            var defaultAgentConnectivityTemplate = new AgentConnectivityTemplate("defaultAgentConnectivityTemplate", AgentConnectivityTemplateArgs.builder()
                .agentConnectivityTemplateId("my-connectivity-template")
                .location("us-west2")
                .description("An advanced configuration for Agent Connectivity Template")
                .agentCompute("GKE")
                .deploymentModel("CENTRALIZED")
                .accessTypes("PRIVATE")
                .accessPath("AGENT_TO_ANYWHERE")
                .egressNetworkConfig(AgentConnectivityTemplateEgressNetworkConfigArgs.builder()
                    .vpcEgress("ALL_TRAFFIC")
                    .networkAttachment(defaultNetworkAttachment.id())
                    .dnsPeeringConfig(AgentConnectivityTemplateEgressNetworkConfigDnsPeeringConfigArgs.builder()
                        .domains(defaultManagedZone.dnsName())
                        .targetNetwork(default_.id())
                        .build())
                    .tlsConfig(AgentConnectivityTemplateEgressNetworkConfigTlsConfigArgs.builder()
                        .trustConfig(defaultTrustConfig.name().applyValue(_name -> String.format("projects/%s/locations/us-west2/trustConfigs/%s", project.number(),_name)))
                        .additionalRoots("NO_ADDITIONAL_ROOTS")
                        .build())
                    .build())
                .build());
    
        }
    }
    
    resources:
      default:
        type: gcp:compute:Network
        properties:
          name: my-network
          autoCreateSubnetworks: false
      defaultSubnetwork:
        type: gcp:compute:Subnetwork
        name: default
        properties:
          name: my-subnetwork
          region: us-west2
          network: ${default.id}
          ipCidrRange: 10.0.0.0/16
      defaultNetworkAttachment:
        type: gcp:compute:NetworkAttachment
        name: default
        properties:
          name: my-attachment
          region: us-west2
          connectionPreference: ACCEPT_AUTOMATIC
          subnetworks:
            - ${defaultSubnetwork.id}
      defaultManagedZone:
        type: gcp:dns:ManagedZone
        name: default
        properties:
          name: my-zone
          dnsName: example.com.
          description: Private zone used by AgentGateway DNS peering
          visibility: private
          privateVisibilityConfig:
            networks:
              - networkUrl: ${default.id}
      defaultTrustConfig:
        type: gcp:certificatemanager:TrustConfig
        name: default
        properties:
          name: my-trust-config
          location: us-west2
          trustStores:
            - trustAnchors:
                - pemCertificate:
                    fn::invoke:
                      function: std:file
                      arguments:
                        input: test-fixtures/cert.pem
                      return: result
              intermediateCas:
                - pemCertificate:
                    fn::invoke:
                      function: std:file
                      arguments:
                        input: test-fixtures/cert.pem
                      return: result
      defaultAgentConnectivityTemplate:
        type: gcp:networkservices:AgentConnectivityTemplate
        name: default
        properties:
          agentConnectivityTemplateId: my-connectivity-template
          location: us-west2
          description: An advanced configuration for Agent Connectivity Template
          agentCompute: GKE
          deploymentModel: CENTRALIZED
          accessTypes:
            - PRIVATE
          accessPath: AGENT_TO_ANYWHERE
          egressNetworkConfig:
            vpcEgress: ALL_TRAFFIC
            networkAttachment: ${defaultNetworkAttachment.id}
            dnsPeeringConfig:
              domains:
                - ${defaultManagedZone.dnsName}
              targetNetwork: ${default.id}
            tlsConfig:
              trustConfig: projects/${project.number}/locations/us-west2/trustConfigs/${defaultTrustConfig.name}
              additionalRoots: NO_ADDITIONAL_ROOTS
    variables:
      project:
        fn::invoke:
          function: gcp:organizations:getProject
          arguments: {}
    
    terraform {
      required_providers {
        gcp = {
          source = "pulumi/gcp"
        }
        std = {
          source = "pulumi/std"
        }
      }
    }
    
    data "gcp_organizations_project" "project" {
    }
    
    resource "gcp_compute_network" "default" {
      lifecycle {
        create_before_destroy = true
      }
      name                    = "my-network"
      auto_create_subnetworks = false
    }
    resource "gcp_compute_subnetwork" "default" {
      lifecycle {
        create_before_destroy = true
      }
      name          = "my-subnetwork"
      region        = "us-west2"
      network       = gcp_compute_network.default.id
      ip_cidr_range = "10.0.0.0/16"
    }
    resource "gcp_compute_network_attachment" "default" {
      lifecycle {
        create_before_destroy = true
      }
      name                  = "my-attachment"
      region                = "us-west2"
      connection_preference = "ACCEPT_AUTOMATIC"
      subnetworks           = [gcp_compute_subnetwork.default.id]
    }
    resource "gcp_dns_managed_zone" "default" {
      lifecycle {
        create_before_destroy = true
      }
      name        = "my-zone"
      dns_name    = "example.com."
      description = "Private zone used by AgentGateway DNS peering"
      visibility  = "private"
      private_visibility_config = {
        networks = [{
          network_url = gcp_compute_network.default.id
        }]
      }
    }
    resource "gcp_certificatemanager_trust_config" "default" {
      lifecycle {
        create_before_destroy = true
      }
      name     = "my-trust-config"
      location = "us-west2"
      trust_stores {
        trust_anchors {
          pem_certificate = file("test-fixtures/cert.pem")
        }
        intermediate_cas {
          pem_certificate = file("test-fixtures/cert.pem")
        }
      }
    }
    resource "gcp_networkservices_agent_connectivity_template" "default" {
      lifecycle {
        create_before_destroy = true
      }
      agent_connectivity_template_id = "my-connectivity-template"
      location                       = "us-west2"
      description                    = "An advanced configuration for Agent Connectivity Template"
      agent_compute                  = "GKE"
      deployment_model               = "CENTRALIZED"
      access_types                   = ["PRIVATE"]
      access_path                    = "AGENT_TO_ANYWHERE"
      egress_network_config = {
        vpc_egress         = "ALL_TRAFFIC"
        network_attachment = gcp_compute_network_attachment.default.id
        dns_peering_config = {
          domains        = [gcp_dns_managed_zone.default.dns_name]
          target_network = gcp_compute_network.default.id
        }
        tls_config = {
          trust_config     ="projects/${data.gcp_organizations_project.project.number}/locations/us-west2/trustConfigs/${gcp_certificatemanager_trust_config.default.name}"
          additional_roots = "NO_ADDITIONAL_ROOTS"
        }
      }
    }
    

    Create AgentConnectivityTemplate Resource

    Resources are created with functions called constructors. To learn more about declaring and configuring resources, see Resources.

    Constructor syntax

    new AgentConnectivityTemplate(name: string, args: AgentConnectivityTemplateArgs, opts?: CustomResourceOptions);
    @overload
    def AgentConnectivityTemplate(resource_name: str,
                                  args: AgentConnectivityTemplateArgs,
                                  opts: Optional[ResourceOptions] = None)
    
    @overload
    def AgentConnectivityTemplate(resource_name: str,
                                  opts: Optional[ResourceOptions] = None,
                                  access_path: Optional[str] = None,
                                  agent_connectivity_template_id: Optional[str] = None,
                                  location: Optional[str] = None,
                                  access_types: Optional[Sequence[str]] = None,
                                  agent_compute: Optional[str] = None,
                                  deletion_policy: Optional[str] = None,
                                  deployment_model: Optional[str] = None,
                                  description: Optional[str] = None,
                                  egress_network_config: Optional[AgentConnectivityTemplateEgressNetworkConfigArgs] = None,
                                  labels: Optional[Mapping[str, str]] = None,
                                  project: Optional[str] = None)
    func NewAgentConnectivityTemplate(ctx *Context, name string, args AgentConnectivityTemplateArgs, opts ...ResourceOption) (*AgentConnectivityTemplate, error)
    public AgentConnectivityTemplate(string name, AgentConnectivityTemplateArgs args, CustomResourceOptions? opts = null)
    public AgentConnectivityTemplate(String name, AgentConnectivityTemplateArgs args)
    public AgentConnectivityTemplate(String name, AgentConnectivityTemplateArgs args, CustomResourceOptions options)
    
    type: gcp:networkservices:AgentConnectivityTemplate
    properties: # The arguments to resource properties.
    options: # Bag of options to control resource's behavior.
    
    
    resource "gcp_networkservices_agent_connectivity_template" "name" {
        # resource properties
    }

    Parameters

    name string
    The unique name of the resource.
    args AgentConnectivityTemplateArgs
    The arguments to resource properties.
    opts CustomResourceOptions
    Bag of options to control resource's behavior.
    resource_name str
    The unique name of the resource.
    args AgentConnectivityTemplateArgs
    The arguments to resource properties.
    opts ResourceOptions
    Bag of options to control resource's behavior.
    ctx Context
    Context object for the current deployment.
    name string
    The unique name of the resource.
    args AgentConnectivityTemplateArgs
    The arguments to resource properties.
    opts ResourceOption
    Bag of options to control resource's behavior.
    name string
    The unique name of the resource.
    args AgentConnectivityTemplateArgs
    The arguments to resource properties.
    opts CustomResourceOptions
    Bag of options to control resource's behavior.
    name String
    The unique name of the resource.
    args AgentConnectivityTemplateArgs
    The arguments to resource properties.
    options CustomResourceOptions
    Bag of options to control resource's behavior.

    Constructor example

    The following reference example uses placeholder values for all input properties.

    var agentConnectivityTemplateResource = new Gcp.NetworkServices.AgentConnectivityTemplate("agentConnectivityTemplateResource", new()
    {
        AccessPath = "string",
        AgentConnectivityTemplateId = "string",
        Location = "string",
        AccessTypes = new[]
        {
            "string",
        },
        AgentCompute = "string",
        DeletionPolicy = "string",
        DeploymentModel = "string",
        Description = "string",
        EgressNetworkConfig = new Gcp.NetworkServices.Inputs.AgentConnectivityTemplateEgressNetworkConfigArgs
        {
            DnsPeeringConfig = new Gcp.NetworkServices.Inputs.AgentConnectivityTemplateEgressNetworkConfigDnsPeeringConfigArgs
            {
                TargetNetwork = "string",
                Domains = new[]
                {
                    "string",
                },
            },
            NetworkAttachment = "string",
            TlsConfig = new Gcp.NetworkServices.Inputs.AgentConnectivityTemplateEgressNetworkConfigTlsConfigArgs
            {
                AdditionalRoots = "string",
                TrustConfig = "string",
            },
            VpcEgress = "string",
        },
        Labels = 
        {
            { "string", "string" },
        },
        Project = "string",
    });
    
    example, err := networkservices.NewAgentConnectivityTemplate(ctx, "agentConnectivityTemplateResource", &networkservices.AgentConnectivityTemplateArgs{
    	AccessPath:                  pulumi.String("string"),
    	AgentConnectivityTemplateId: pulumi.String("string"),
    	Location:                    pulumi.String("string"),
    	AccessTypes: pulumi.StringArray{
    		pulumi.String("string"),
    	},
    	AgentCompute:    pulumi.String("string"),
    	DeletionPolicy:  pulumi.String("string"),
    	DeploymentModel: pulumi.String("string"),
    	Description:     pulumi.String("string"),
    	EgressNetworkConfig: &networkservices.AgentConnectivityTemplateEgressNetworkConfigArgs{
    		DnsPeeringConfig: &networkservices.AgentConnectivityTemplateEgressNetworkConfigDnsPeeringConfigArgs{
    			TargetNetwork: pulumi.String("string"),
    			Domains: pulumi.StringArray{
    				pulumi.String("string"),
    			},
    		},
    		NetworkAttachment: pulumi.String("string"),
    		TlsConfig: &networkservices.AgentConnectivityTemplateEgressNetworkConfigTlsConfigArgs{
    			AdditionalRoots: pulumi.String("string"),
    			TrustConfig:     pulumi.String("string"),
    		},
    		VpcEgress: pulumi.String("string"),
    	},
    	Labels: pulumi.StringMap{
    		"string": pulumi.String("string"),
    	},
    	Project: pulumi.String("string"),
    })
    
    resource "gcp_networkservices_agent_connectivity_template" "agentConnectivityTemplateResource" {
      lifecycle {
        create_before_destroy = true
      }
      access_path                    = "string"
      agent_connectivity_template_id = "string"
      location                       = "string"
      access_types                   = ["string"]
      agent_compute                  = "string"
      deletion_policy                = "string"
      deployment_model               = "string"
      description                    = "string"
      egress_network_config = {
        dns_peering_config = {
          target_network = "string"
          domains        = ["string"]
        }
        network_attachment = "string"
        tls_config = {
          additional_roots = "string"
          trust_config     = "string"
        }
        vpc_egress = "string"
      }
      labels = {
        "string" = "string"
      }
      project = "string"
    }
    
    var agentConnectivityTemplateResource = new AgentConnectivityTemplate("agentConnectivityTemplateResource", AgentConnectivityTemplateArgs.builder()
        .accessPath("string")
        .agentConnectivityTemplateId("string")
        .location("string")
        .accessTypes("string")
        .agentCompute("string")
        .deletionPolicy("string")
        .deploymentModel("string")
        .description("string")
        .egressNetworkConfig(AgentConnectivityTemplateEgressNetworkConfigArgs.builder()
            .dnsPeeringConfig(AgentConnectivityTemplateEgressNetworkConfigDnsPeeringConfigArgs.builder()
                .targetNetwork("string")
                .domains("string")
                .build())
            .networkAttachment("string")
            .tlsConfig(AgentConnectivityTemplateEgressNetworkConfigTlsConfigArgs.builder()
                .additionalRoots("string")
                .trustConfig("string")
                .build())
            .vpcEgress("string")
            .build())
        .labels(Map.of("string", "string"))
        .project("string")
        .build());
    
    agent_connectivity_template_resource = gcp.networkservices.AgentConnectivityTemplate("agentConnectivityTemplateResource",
        access_path="string",
        agent_connectivity_template_id="string",
        location="string",
        access_types=["string"],
        agent_compute="string",
        deletion_policy="string",
        deployment_model="string",
        description="string",
        egress_network_config={
            "dns_peering_config": {
                "target_network": "string",
                "domains": ["string"],
            },
            "network_attachment": "string",
            "tls_config": {
                "additional_roots": "string",
                "trust_config": "string",
            },
            "vpc_egress": "string",
        },
        labels={
            "string": "string",
        },
        project="string")
    
    const agentConnectivityTemplateResource = new gcp.networkservices.AgentConnectivityTemplate("agentConnectivityTemplateResource", {
        accessPath: "string",
        agentConnectivityTemplateId: "string",
        location: "string",
        accessTypes: ["string"],
        agentCompute: "string",
        deletionPolicy: "string",
        deploymentModel: "string",
        description: "string",
        egressNetworkConfig: {
            dnsPeeringConfig: {
                targetNetwork: "string",
                domains: ["string"],
            },
            networkAttachment: "string",
            tlsConfig: {
                additionalRoots: "string",
                trustConfig: "string",
            },
            vpcEgress: "string",
        },
        labels: {
            string: "string",
        },
        project: "string",
    });
    
    type: gcp:networkservices:AgentConnectivityTemplate
    properties:
        accessPath: string
        accessTypes:
            - string
        agentCompute: string
        agentConnectivityTemplateId: string
        deletionPolicy: string
        deploymentModel: string
        description: string
        egressNetworkConfig:
            dnsPeeringConfig:
                domains:
                    - string
                targetNetwork: string
            networkAttachment: string
            tlsConfig:
                additionalRoots: string
                trustConfig: string
            vpcEgress: string
        labels:
            string: string
        location: string
        project: string
    

    AgentConnectivityTemplate Resource Properties

    To learn more about resource properties and how to use them, see Inputs and Outputs in the Architecture and Concepts docs.

    Inputs

    In Python, inputs that are objects can be passed either as argument classes or as dictionary literals.

    The AgentConnectivityTemplate resource accepts the following input properties:

    AccessPath string
    The path of the access. The path is immutable once set. Exactly one path can be set. Possible values are: CLIENT_TO_AGENT, AGENT_TO_ANYWHERE.
    AgentConnectivityTemplateId string
    Short name of the AgentConnectivityTemplate resource.
    Location string
    The location of the AgentConnectivityTemplate.
    AccessTypes List<string>
    The types of network access provided to the gateway. Both PUBLIC and PRIVATE can be configured. Each value may be one of: PUBLIC, PRIVATE.
    AgentCompute string
    The compute environment where the agent is hosted. Exactly one type of compute must be chosen. Possible values are: GKE, CLOUD_RUN.
    DeletionPolicy string
    Whether Terraform will be prevented from destroying the resource. Defaults to DELETE. When a 'terraform destroy' or 'pulumi up' would delete the resource, the command will fail if this field is set to "PREVENT" in Terraform state. When set to "ABANDON", the command will remove the resource from Terraform management without updating or deleting the resource in the API. When set to "DELETE", deleting the resource is allowed.
    DeploymentModel string
    The deployment model for the gateway. Possible values are: CENTRALIZED, AMBIENT.
    Description string
    A free-text description of the resource. Max length 1024 characters.
    EgressNetworkConfig AgentConnectivityTemplateEgressNetworkConfig
    Configuration for egress network traffic. Structure is documented below.
    Labels Dictionary<string, string>

    Set of label tags associated with the AgentConnectivityTemplate resource.

    Note: This field is non-authoritative, and will only manage the labels present in your configuration. Please refer to the field effectiveLabels for all of the labels present on the resource.

    Project string
    The ID of the project in which the resource belongs. If it is not provided, the provider project is used.
    AccessPath string
    The path of the access. The path is immutable once set. Exactly one path can be set. Possible values are: CLIENT_TO_AGENT, AGENT_TO_ANYWHERE.
    AgentConnectivityTemplateId string
    Short name of the AgentConnectivityTemplate resource.
    Location string
    The location of the AgentConnectivityTemplate.
    AccessTypes []string
    The types of network access provided to the gateway. Both PUBLIC and PRIVATE can be configured. Each value may be one of: PUBLIC, PRIVATE.
    AgentCompute string
    The compute environment where the agent is hosted. Exactly one type of compute must be chosen. Possible values are: GKE, CLOUD_RUN.
    DeletionPolicy string
    Whether Terraform will be prevented from destroying the resource. Defaults to DELETE. When a 'terraform destroy' or 'pulumi up' would delete the resource, the command will fail if this field is set to "PREVENT" in Terraform state. When set to "ABANDON", the command will remove the resource from Terraform management without updating or deleting the resource in the API. When set to "DELETE", deleting the resource is allowed.
    DeploymentModel string
    The deployment model for the gateway. Possible values are: CENTRALIZED, AMBIENT.
    Description string
    A free-text description of the resource. Max length 1024 characters.
    EgressNetworkConfig AgentConnectivityTemplateEgressNetworkConfigArgs
    Configuration for egress network traffic. Structure is documented below.
    Labels map[string]string

    Set of label tags associated with the AgentConnectivityTemplate resource.

    Note: This field is non-authoritative, and will only manage the labels present in your configuration. Please refer to the field effectiveLabels for all of the labels present on the resource.

    Project string
    The ID of the project in which the resource belongs. If it is not provided, the provider project is used.
    access_path string
    The path of the access. The path is immutable once set. Exactly one path can be set. Possible values are: CLIENT_TO_AGENT, AGENT_TO_ANYWHERE.
    agent_connectivity_template_id string
    Short name of the AgentConnectivityTemplate resource.
    location string
    The location of the AgentConnectivityTemplate.
    access_types list(string)
    The types of network access provided to the gateway. Both PUBLIC and PRIVATE can be configured. Each value may be one of: PUBLIC, PRIVATE.
    agent_compute string
    The compute environment where the agent is hosted. Exactly one type of compute must be chosen. Possible values are: GKE, CLOUD_RUN.
    deletion_policy string
    Whether Terraform will be prevented from destroying the resource. Defaults to DELETE. When a 'terraform destroy' or 'pulumi up' would delete the resource, the command will fail if this field is set to "PREVENT" in Terraform state. When set to "ABANDON", the command will remove the resource from Terraform management without updating or deleting the resource in the API. When set to "DELETE", deleting the resource is allowed.
    deployment_model string
    The deployment model for the gateway. Possible values are: CENTRALIZED, AMBIENT.
    description string
    A free-text description of the resource. Max length 1024 characters.
    egress_network_config object
    Configuration for egress network traffic. Structure is documented below.
    labels map(string)

    Set of label tags associated with the AgentConnectivityTemplate resource.

    Note: This field is non-authoritative, and will only manage the labels present in your configuration. Please refer to the field effectiveLabels for all of the labels present on the resource.

    project string
    The ID of the project in which the resource belongs. If it is not provided, the provider project is used.
    accessPath String
    The path of the access. The path is immutable once set. Exactly one path can be set. Possible values are: CLIENT_TO_AGENT, AGENT_TO_ANYWHERE.
    agentConnectivityTemplateId String
    Short name of the AgentConnectivityTemplate resource.
    location String
    The location of the AgentConnectivityTemplate.
    accessTypes List<String>
    The types of network access provided to the gateway. Both PUBLIC and PRIVATE can be configured. Each value may be one of: PUBLIC, PRIVATE.
    agentCompute String
    The compute environment where the agent is hosted. Exactly one type of compute must be chosen. Possible values are: GKE, CLOUD_RUN.
    deletionPolicy String
    Whether Terraform will be prevented from destroying the resource. Defaults to DELETE. When a 'terraform destroy' or 'pulumi up' would delete the resource, the command will fail if this field is set to "PREVENT" in Terraform state. When set to "ABANDON", the command will remove the resource from Terraform management without updating or deleting the resource in the API. When set to "DELETE", deleting the resource is allowed.
    deploymentModel String
    The deployment model for the gateway. Possible values are: CENTRALIZED, AMBIENT.
    description String
    A free-text description of the resource. Max length 1024 characters.
    egressNetworkConfig AgentConnectivityTemplateEgressNetworkConfig
    Configuration for egress network traffic. Structure is documented below.
    labels Map<String,String>

    Set of label tags associated with the AgentConnectivityTemplate resource.

    Note: This field is non-authoritative, and will only manage the labels present in your configuration. Please refer to the field effectiveLabels for all of the labels present on the resource.

    project String
    The ID of the project in which the resource belongs. If it is not provided, the provider project is used.
    accessPath string
    The path of the access. The path is immutable once set. Exactly one path can be set. Possible values are: CLIENT_TO_AGENT, AGENT_TO_ANYWHERE.
    agentConnectivityTemplateId string
    Short name of the AgentConnectivityTemplate resource.
    location string
    The location of the AgentConnectivityTemplate.
    accessTypes string[]
    The types of network access provided to the gateway. Both PUBLIC and PRIVATE can be configured. Each value may be one of: PUBLIC, PRIVATE.
    agentCompute string
    The compute environment where the agent is hosted. Exactly one type of compute must be chosen. Possible values are: GKE, CLOUD_RUN.
    deletionPolicy string
    Whether Terraform will be prevented from destroying the resource. Defaults to DELETE. When a 'terraform destroy' or 'pulumi up' would delete the resource, the command will fail if this field is set to "PREVENT" in Terraform state. When set to "ABANDON", the command will remove the resource from Terraform management without updating or deleting the resource in the API. When set to "DELETE", deleting the resource is allowed.
    deploymentModel string
    The deployment model for the gateway. Possible values are: CENTRALIZED, AMBIENT.
    description string
    A free-text description of the resource. Max length 1024 characters.
    egressNetworkConfig AgentConnectivityTemplateEgressNetworkConfig
    Configuration for egress network traffic. Structure is documented below.
    labels {[key: string]: string}

    Set of label tags associated with the AgentConnectivityTemplate resource.

    Note: This field is non-authoritative, and will only manage the labels present in your configuration. Please refer to the field effectiveLabels for all of the labels present on the resource.

    project string
    The ID of the project in which the resource belongs. If it is not provided, the provider project is used.
    access_path str
    The path of the access. The path is immutable once set. Exactly one path can be set. Possible values are: CLIENT_TO_AGENT, AGENT_TO_ANYWHERE.
    agent_connectivity_template_id str
    Short name of the AgentConnectivityTemplate resource.
    location str
    The location of the AgentConnectivityTemplate.
    access_types Sequence[str]
    The types of network access provided to the gateway. Both PUBLIC and PRIVATE can be configured. Each value may be one of: PUBLIC, PRIVATE.
    agent_compute str
    The compute environment where the agent is hosted. Exactly one type of compute must be chosen. Possible values are: GKE, CLOUD_RUN.
    deletion_policy str
    Whether Terraform will be prevented from destroying the resource. Defaults to DELETE. When a 'terraform destroy' or 'pulumi up' would delete the resource, the command will fail if this field is set to "PREVENT" in Terraform state. When set to "ABANDON", the command will remove the resource from Terraform management without updating or deleting the resource in the API. When set to "DELETE", deleting the resource is allowed.
    deployment_model str
    The deployment model for the gateway. Possible values are: CENTRALIZED, AMBIENT.
    description str
    A free-text description of the resource. Max length 1024 characters.
    egress_network_config AgentConnectivityTemplateEgressNetworkConfigArgs
    Configuration for egress network traffic. Structure is documented below.
    labels Mapping[str, str]

    Set of label tags associated with the AgentConnectivityTemplate resource.

    Note: This field is non-authoritative, and will only manage the labels present in your configuration. Please refer to the field effectiveLabels for all of the labels present on the resource.

    project str
    The ID of the project in which the resource belongs. If it is not provided, the provider project is used.
    accessPath String
    The path of the access. The path is immutable once set. Exactly one path can be set. Possible values are: CLIENT_TO_AGENT, AGENT_TO_ANYWHERE.
    agentConnectivityTemplateId String
    Short name of the AgentConnectivityTemplate resource.
    location String
    The location of the AgentConnectivityTemplate.
    accessTypes List<String>
    The types of network access provided to the gateway. Both PUBLIC and PRIVATE can be configured. Each value may be one of: PUBLIC, PRIVATE.
    agentCompute String
    The compute environment where the agent is hosted. Exactly one type of compute must be chosen. Possible values are: GKE, CLOUD_RUN.
    deletionPolicy String
    Whether Terraform will be prevented from destroying the resource. Defaults to DELETE. When a 'terraform destroy' or 'pulumi up' would delete the resource, the command will fail if this field is set to "PREVENT" in Terraform state. When set to "ABANDON", the command will remove the resource from Terraform management without updating or deleting the resource in the API. When set to "DELETE", deleting the resource is allowed.
    deploymentModel String
    The deployment model for the gateway. Possible values are: CENTRALIZED, AMBIENT.
    description String
    A free-text description of the resource. Max length 1024 characters.
    egressNetworkConfig Property Map
    Configuration for egress network traffic. Structure is documented below.
    labels Map<String>

    Set of label tags associated with the AgentConnectivityTemplate resource.

    Note: This field is non-authoritative, and will only manage the labels present in your configuration. Please refer to the field effectiveLabels for all of the labels present on the resource.

    project String
    The ID of the project in which the resource belongs. If it is not provided, the provider project is used.

    Outputs

    All input properties are implicitly available as output properties. Additionally, the AgentConnectivityTemplate resource produces the following output properties:

    CreateTime string
    The timestamp when the resource was created.
    EffectiveLabels Dictionary<string, string>
    All of labels (key/value pairs) present on the resource in GCP, including the labels configured through Pulumi, other clients and services.
    Etag string
    Etag of the resource. If this is provided, it must match the server's etag. If the provided etag does not match the server's etag, the request will fail with a 409 ABORTED error.
    Id string
    The provider-assigned unique ID for this managed resource.
    Name string
    Identifier. Name of the resource.
    PulumiLabels Dictionary<string, string>
    The combination of labels configured directly on the resource and default labels configured on the provider.
    UpdateTime string
    The timestamp when the resource was updated.
    CreateTime string
    The timestamp when the resource was created.
    EffectiveLabels map[string]string
    All of labels (key/value pairs) present on the resource in GCP, including the labels configured through Pulumi, other clients and services.
    Etag string
    Etag of the resource. If this is provided, it must match the server's etag. If the provided etag does not match the server's etag, the request will fail with a 409 ABORTED error.
    Id string
    The provider-assigned unique ID for this managed resource.
    Name string
    Identifier. Name of the resource.
    PulumiLabels map[string]string
    The combination of labels configured directly on the resource and default labels configured on the provider.
    UpdateTime string
    The timestamp when the resource was updated.
    create_time string
    The timestamp when the resource was created.
    effective_labels map(string)
    All of labels (key/value pairs) present on the resource in GCP, including the labels configured through Pulumi, other clients and services.
    etag string
    Etag of the resource. If this is provided, it must match the server's etag. If the provided etag does not match the server's etag, the request will fail with a 409 ABORTED error.
    id string
    The provider-assigned unique ID for this managed resource.
    name string
    Identifier. Name of the resource.
    pulumi_labels map(string)
    The combination of labels configured directly on the resource and default labels configured on the provider.
    update_time string
    The timestamp when the resource was updated.
    createTime String
    The timestamp when the resource was created.
    effectiveLabels Map<String,String>
    All of labels (key/value pairs) present on the resource in GCP, including the labels configured through Pulumi, other clients and services.
    etag String
    Etag of the resource. If this is provided, it must match the server's etag. If the provided etag does not match the server's etag, the request will fail with a 409 ABORTED error.
    id String
    The provider-assigned unique ID for this managed resource.
    name String
    Identifier. Name of the resource.
    pulumiLabels Map<String,String>
    The combination of labels configured directly on the resource and default labels configured on the provider.
    updateTime String
    The timestamp when the resource was updated.
    createTime string
    The timestamp when the resource was created.
    effectiveLabels {[key: string]: string}
    All of labels (key/value pairs) present on the resource in GCP, including the labels configured through Pulumi, other clients and services.
    etag string
    Etag of the resource. If this is provided, it must match the server's etag. If the provided etag does not match the server's etag, the request will fail with a 409 ABORTED error.
    id string
    The provider-assigned unique ID for this managed resource.
    name string
    Identifier. Name of the resource.
    pulumiLabels {[key: string]: string}
    The combination of labels configured directly on the resource and default labels configured on the provider.
    updateTime string
    The timestamp when the resource was updated.
    create_time str
    The timestamp when the resource was created.
    effective_labels Mapping[str, str]
    All of labels (key/value pairs) present on the resource in GCP, including the labels configured through Pulumi, other clients and services.
    etag str
    Etag of the resource. If this is provided, it must match the server's etag. If the provided etag does not match the server's etag, the request will fail with a 409 ABORTED error.
    id str
    The provider-assigned unique ID for this managed resource.
    name str
    Identifier. Name of the resource.
    pulumi_labels Mapping[str, str]
    The combination of labels configured directly on the resource and default labels configured on the provider.
    update_time str
    The timestamp when the resource was updated.
    createTime String
    The timestamp when the resource was created.
    effectiveLabels Map<String>
    All of labels (key/value pairs) present on the resource in GCP, including the labels configured through Pulumi, other clients and services.
    etag String
    Etag of the resource. If this is provided, it must match the server's etag. If the provided etag does not match the server's etag, the request will fail with a 409 ABORTED error.
    id String
    The provider-assigned unique ID for this managed resource.
    name String
    Identifier. Name of the resource.
    pulumiLabels Map<String>
    The combination of labels configured directly on the resource and default labels configured on the provider.
    updateTime String
    The timestamp when the resource was updated.

    Look up Existing AgentConnectivityTemplate Resource

    Get an existing AgentConnectivityTemplate resource’s state with the given name, ID, and optional extra properties used to qualify the lookup.

    public static get(name: string, id: Input<ID>, state?: AgentConnectivityTemplateState, opts?: CustomResourceOptions): AgentConnectivityTemplate
    @staticmethod
    def get(resource_name: str,
            id: str,
            opts: Optional[ResourceOptions] = None,
            access_path: Optional[str] = None,
            access_types: Optional[Sequence[str]] = None,
            agent_compute: Optional[str] = None,
            agent_connectivity_template_id: Optional[str] = None,
            create_time: Optional[str] = None,
            deletion_policy: Optional[str] = None,
            deployment_model: Optional[str] = None,
            description: Optional[str] = None,
            effective_labels: Optional[Mapping[str, str]] = None,
            egress_network_config: Optional[AgentConnectivityTemplateEgressNetworkConfigArgs] = None,
            etag: Optional[str] = None,
            labels: Optional[Mapping[str, str]] = None,
            location: Optional[str] = None,
            name: Optional[str] = None,
            project: Optional[str] = None,
            pulumi_labels: Optional[Mapping[str, str]] = None,
            update_time: Optional[str] = None) -> AgentConnectivityTemplate
    func GetAgentConnectivityTemplate(ctx *Context, name string, id IDInput, state *AgentConnectivityTemplateState, opts ...ResourceOption) (*AgentConnectivityTemplate, error)
    public static AgentConnectivityTemplate Get(string name, Input<string> id, AgentConnectivityTemplateState? state, CustomResourceOptions? opts = null)
    public static AgentConnectivityTemplate get(String name, Output<String> id, AgentConnectivityTemplateState state, CustomResourceOptions options)
    resources:  _:    type: gcp:networkservices:AgentConnectivityTemplate    get:      id: ${id}
    import {
      to = gcp_networkservices_agent_connectivity_template.example
      id = "${id}"
    }
    
    name
    The unique name of the resulting resource.
    id
    The unique provider ID of the resource to lookup.
    state
    Any extra arguments used during the lookup.
    opts
    A bag of options that control this resource's behavior.
    resource_name
    The unique name of the resulting resource.
    id
    The unique provider ID of the resource to lookup.
    name
    The unique name of the resulting resource.
    id
    The unique provider ID of the resource to lookup.
    state
    Any extra arguments used during the lookup.
    opts
    A bag of options that control this resource's behavior.
    name
    The unique name of the resulting resource.
    id
    The unique provider ID of the resource to lookup.
    state
    Any extra arguments used during the lookup.
    opts
    A bag of options that control this resource's behavior.
    name
    The unique name of the resulting resource.
    id
    The unique provider ID of the resource to lookup.
    state
    Any extra arguments used during the lookup.
    opts
    A bag of options that control this resource's behavior.
    The following state arguments are supported:
    AccessPath string
    The path of the access. The path is immutable once set. Exactly one path can be set. Possible values are: CLIENT_TO_AGENT, AGENT_TO_ANYWHERE.
    AccessTypes List<string>
    The types of network access provided to the gateway. Both PUBLIC and PRIVATE can be configured. Each value may be one of: PUBLIC, PRIVATE.
    AgentCompute string
    The compute environment where the agent is hosted. Exactly one type of compute must be chosen. Possible values are: GKE, CLOUD_RUN.
    AgentConnectivityTemplateId string
    Short name of the AgentConnectivityTemplate resource.
    CreateTime string
    The timestamp when the resource was created.
    DeletionPolicy string
    Whether Terraform will be prevented from destroying the resource. Defaults to DELETE. When a 'terraform destroy' or 'pulumi up' would delete the resource, the command will fail if this field is set to "PREVENT" in Terraform state. When set to "ABANDON", the command will remove the resource from Terraform management without updating or deleting the resource in the API. When set to "DELETE", deleting the resource is allowed.
    DeploymentModel string
    The deployment model for the gateway. Possible values are: CENTRALIZED, AMBIENT.
    Description string
    A free-text description of the resource. Max length 1024 characters.
    EffectiveLabels Dictionary<string, string>
    All of labels (key/value pairs) present on the resource in GCP, including the labels configured through Pulumi, other clients and services.
    EgressNetworkConfig AgentConnectivityTemplateEgressNetworkConfig
    Configuration for egress network traffic. Structure is documented below.
    Etag string
    Etag of the resource. If this is provided, it must match the server's etag. If the provided etag does not match the server's etag, the request will fail with a 409 ABORTED error.
    Labels Dictionary<string, string>

    Set of label tags associated with the AgentConnectivityTemplate resource.

    Note: This field is non-authoritative, and will only manage the labels present in your configuration. Please refer to the field effectiveLabels for all of the labels present on the resource.

    Location string
    The location of the AgentConnectivityTemplate.
    Name string
    Identifier. Name of the resource.
    Project string
    The ID of the project in which the resource belongs. If it is not provided, the provider project is used.
    PulumiLabels Dictionary<string, string>
    The combination of labels configured directly on the resource and default labels configured on the provider.
    UpdateTime string
    The timestamp when the resource was updated.
    AccessPath string
    The path of the access. The path is immutable once set. Exactly one path can be set. Possible values are: CLIENT_TO_AGENT, AGENT_TO_ANYWHERE.
    AccessTypes []string
    The types of network access provided to the gateway. Both PUBLIC and PRIVATE can be configured. Each value may be one of: PUBLIC, PRIVATE.
    AgentCompute string
    The compute environment where the agent is hosted. Exactly one type of compute must be chosen. Possible values are: GKE, CLOUD_RUN.
    AgentConnectivityTemplateId string
    Short name of the AgentConnectivityTemplate resource.
    CreateTime string
    The timestamp when the resource was created.
    DeletionPolicy string
    Whether Terraform will be prevented from destroying the resource. Defaults to DELETE. When a 'terraform destroy' or 'pulumi up' would delete the resource, the command will fail if this field is set to "PREVENT" in Terraform state. When set to "ABANDON", the command will remove the resource from Terraform management without updating or deleting the resource in the API. When set to "DELETE", deleting the resource is allowed.
    DeploymentModel string
    The deployment model for the gateway. Possible values are: CENTRALIZED, AMBIENT.
    Description string
    A free-text description of the resource. Max length 1024 characters.
    EffectiveLabels map[string]string
    All of labels (key/value pairs) present on the resource in GCP, including the labels configured through Pulumi, other clients and services.
    EgressNetworkConfig AgentConnectivityTemplateEgressNetworkConfigArgs
    Configuration for egress network traffic. Structure is documented below.
    Etag string
    Etag of the resource. If this is provided, it must match the server's etag. If the provided etag does not match the server's etag, the request will fail with a 409 ABORTED error.
    Labels map[string]string

    Set of label tags associated with the AgentConnectivityTemplate resource.

    Note: This field is non-authoritative, and will only manage the labels present in your configuration. Please refer to the field effectiveLabels for all of the labels present on the resource.

    Location string
    The location of the AgentConnectivityTemplate.
    Name string
    Identifier. Name of the resource.
    Project string
    The ID of the project in which the resource belongs. If it is not provided, the provider project is used.
    PulumiLabels map[string]string
    The combination of labels configured directly on the resource and default labels configured on the provider.
    UpdateTime string
    The timestamp when the resource was updated.
    access_path string
    The path of the access. The path is immutable once set. Exactly one path can be set. Possible values are: CLIENT_TO_AGENT, AGENT_TO_ANYWHERE.
    access_types list(string)
    The types of network access provided to the gateway. Both PUBLIC and PRIVATE can be configured. Each value may be one of: PUBLIC, PRIVATE.
    agent_compute string
    The compute environment where the agent is hosted. Exactly one type of compute must be chosen. Possible values are: GKE, CLOUD_RUN.
    agent_connectivity_template_id string
    Short name of the AgentConnectivityTemplate resource.
    create_time string
    The timestamp when the resource was created.
    deletion_policy string
    Whether Terraform will be prevented from destroying the resource. Defaults to DELETE. When a 'terraform destroy' or 'pulumi up' would delete the resource, the command will fail if this field is set to "PREVENT" in Terraform state. When set to "ABANDON", the command will remove the resource from Terraform management without updating or deleting the resource in the API. When set to "DELETE", deleting the resource is allowed.
    deployment_model string
    The deployment model for the gateway. Possible values are: CENTRALIZED, AMBIENT.
    description string
    A free-text description of the resource. Max length 1024 characters.
    effective_labels map(string)
    All of labels (key/value pairs) present on the resource in GCP, including the labels configured through Pulumi, other clients and services.
    egress_network_config object
    Configuration for egress network traffic. Structure is documented below.
    etag string
    Etag of the resource. If this is provided, it must match the server's etag. If the provided etag does not match the server's etag, the request will fail with a 409 ABORTED error.
    labels map(string)

    Set of label tags associated with the AgentConnectivityTemplate resource.

    Note: This field is non-authoritative, and will only manage the labels present in your configuration. Please refer to the field effectiveLabels for all of the labels present on the resource.

    location string
    The location of the AgentConnectivityTemplate.
    name string
    Identifier. Name of the resource.
    project string
    The ID of the project in which the resource belongs. If it is not provided, the provider project is used.
    pulumi_labels map(string)
    The combination of labels configured directly on the resource and default labels configured on the provider.
    update_time string
    The timestamp when the resource was updated.
    accessPath String
    The path of the access. The path is immutable once set. Exactly one path can be set. Possible values are: CLIENT_TO_AGENT, AGENT_TO_ANYWHERE.
    accessTypes List<String>
    The types of network access provided to the gateway. Both PUBLIC and PRIVATE can be configured. Each value may be one of: PUBLIC, PRIVATE.
    agentCompute String
    The compute environment where the agent is hosted. Exactly one type of compute must be chosen. Possible values are: GKE, CLOUD_RUN.
    agentConnectivityTemplateId String
    Short name of the AgentConnectivityTemplate resource.
    createTime String
    The timestamp when the resource was created.
    deletionPolicy String
    Whether Terraform will be prevented from destroying the resource. Defaults to DELETE. When a 'terraform destroy' or 'pulumi up' would delete the resource, the command will fail if this field is set to "PREVENT" in Terraform state. When set to "ABANDON", the command will remove the resource from Terraform management without updating or deleting the resource in the API. When set to "DELETE", deleting the resource is allowed.
    deploymentModel String
    The deployment model for the gateway. Possible values are: CENTRALIZED, AMBIENT.
    description String
    A free-text description of the resource. Max length 1024 characters.
    effectiveLabels Map<String,String>
    All of labels (key/value pairs) present on the resource in GCP, including the labels configured through Pulumi, other clients and services.
    egressNetworkConfig AgentConnectivityTemplateEgressNetworkConfig
    Configuration for egress network traffic. Structure is documented below.
    etag String
    Etag of the resource. If this is provided, it must match the server's etag. If the provided etag does not match the server's etag, the request will fail with a 409 ABORTED error.
    labels Map<String,String>

    Set of label tags associated with the AgentConnectivityTemplate resource.

    Note: This field is non-authoritative, and will only manage the labels present in your configuration. Please refer to the field effectiveLabels for all of the labels present on the resource.

    location String
    The location of the AgentConnectivityTemplate.
    name String
    Identifier. Name of the resource.
    project String
    The ID of the project in which the resource belongs. If it is not provided, the provider project is used.
    pulumiLabels Map<String,String>
    The combination of labels configured directly on the resource and default labels configured on the provider.
    updateTime String
    The timestamp when the resource was updated.
    accessPath string
    The path of the access. The path is immutable once set. Exactly one path can be set. Possible values are: CLIENT_TO_AGENT, AGENT_TO_ANYWHERE.
    accessTypes string[]
    The types of network access provided to the gateway. Both PUBLIC and PRIVATE can be configured. Each value may be one of: PUBLIC, PRIVATE.
    agentCompute string
    The compute environment where the agent is hosted. Exactly one type of compute must be chosen. Possible values are: GKE, CLOUD_RUN.
    agentConnectivityTemplateId string
    Short name of the AgentConnectivityTemplate resource.
    createTime string
    The timestamp when the resource was created.
    deletionPolicy string
    Whether Terraform will be prevented from destroying the resource. Defaults to DELETE. When a 'terraform destroy' or 'pulumi up' would delete the resource, the command will fail if this field is set to "PREVENT" in Terraform state. When set to "ABANDON", the command will remove the resource from Terraform management without updating or deleting the resource in the API. When set to "DELETE", deleting the resource is allowed.
    deploymentModel string
    The deployment model for the gateway. Possible values are: CENTRALIZED, AMBIENT.
    description string
    A free-text description of the resource. Max length 1024 characters.
    effectiveLabels {[key: string]: string}
    All of labels (key/value pairs) present on the resource in GCP, including the labels configured through Pulumi, other clients and services.
    egressNetworkConfig AgentConnectivityTemplateEgressNetworkConfig
    Configuration for egress network traffic. Structure is documented below.
    etag string
    Etag of the resource. If this is provided, it must match the server's etag. If the provided etag does not match the server's etag, the request will fail with a 409 ABORTED error.
    labels {[key: string]: string}

    Set of label tags associated with the AgentConnectivityTemplate resource.

    Note: This field is non-authoritative, and will only manage the labels present in your configuration. Please refer to the field effectiveLabels for all of the labels present on the resource.

    location string
    The location of the AgentConnectivityTemplate.
    name string
    Identifier. Name of the resource.
    project string
    The ID of the project in which the resource belongs. If it is not provided, the provider project is used.
    pulumiLabels {[key: string]: string}
    The combination of labels configured directly on the resource and default labels configured on the provider.
    updateTime string
    The timestamp when the resource was updated.
    access_path str
    The path of the access. The path is immutable once set. Exactly one path can be set. Possible values are: CLIENT_TO_AGENT, AGENT_TO_ANYWHERE.
    access_types Sequence[str]
    The types of network access provided to the gateway. Both PUBLIC and PRIVATE can be configured. Each value may be one of: PUBLIC, PRIVATE.
    agent_compute str
    The compute environment where the agent is hosted. Exactly one type of compute must be chosen. Possible values are: GKE, CLOUD_RUN.
    agent_connectivity_template_id str
    Short name of the AgentConnectivityTemplate resource.
    create_time str
    The timestamp when the resource was created.
    deletion_policy str
    Whether Terraform will be prevented from destroying the resource. Defaults to DELETE. When a 'terraform destroy' or 'pulumi up' would delete the resource, the command will fail if this field is set to "PREVENT" in Terraform state. When set to "ABANDON", the command will remove the resource from Terraform management without updating or deleting the resource in the API. When set to "DELETE", deleting the resource is allowed.
    deployment_model str
    The deployment model for the gateway. Possible values are: CENTRALIZED, AMBIENT.
    description str
    A free-text description of the resource. Max length 1024 characters.
    effective_labels Mapping[str, str]
    All of labels (key/value pairs) present on the resource in GCP, including the labels configured through Pulumi, other clients and services.
    egress_network_config AgentConnectivityTemplateEgressNetworkConfigArgs
    Configuration for egress network traffic. Structure is documented below.
    etag str
    Etag of the resource. If this is provided, it must match the server's etag. If the provided etag does not match the server's etag, the request will fail with a 409 ABORTED error.
    labels Mapping[str, str]

    Set of label tags associated with the AgentConnectivityTemplate resource.

    Note: This field is non-authoritative, and will only manage the labels present in your configuration. Please refer to the field effectiveLabels for all of the labels present on the resource.

    location str
    The location of the AgentConnectivityTemplate.
    name str
    Identifier. Name of the resource.
    project str
    The ID of the project in which the resource belongs. If it is not provided, the provider project is used.
    pulumi_labels Mapping[str, str]
    The combination of labels configured directly on the resource and default labels configured on the provider.
    update_time str
    The timestamp when the resource was updated.
    accessPath String
    The path of the access. The path is immutable once set. Exactly one path can be set. Possible values are: CLIENT_TO_AGENT, AGENT_TO_ANYWHERE.
    accessTypes List<String>
    The types of network access provided to the gateway. Both PUBLIC and PRIVATE can be configured. Each value may be one of: PUBLIC, PRIVATE.
    agentCompute String
    The compute environment where the agent is hosted. Exactly one type of compute must be chosen. Possible values are: GKE, CLOUD_RUN.
    agentConnectivityTemplateId String
    Short name of the AgentConnectivityTemplate resource.
    createTime String
    The timestamp when the resource was created.
    deletionPolicy String
    Whether Terraform will be prevented from destroying the resource. Defaults to DELETE. When a 'terraform destroy' or 'pulumi up' would delete the resource, the command will fail if this field is set to "PREVENT" in Terraform state. When set to "ABANDON", the command will remove the resource from Terraform management without updating or deleting the resource in the API. When set to "DELETE", deleting the resource is allowed.
    deploymentModel String
    The deployment model for the gateway. Possible values are: CENTRALIZED, AMBIENT.
    description String
    A free-text description of the resource. Max length 1024 characters.
    effectiveLabels Map<String>
    All of labels (key/value pairs) present on the resource in GCP, including the labels configured through Pulumi, other clients and services.
    egressNetworkConfig Property Map
    Configuration for egress network traffic. Structure is documented below.
    etag String
    Etag of the resource. If this is provided, it must match the server's etag. If the provided etag does not match the server's etag, the request will fail with a 409 ABORTED error.
    labels Map<String>

    Set of label tags associated with the AgentConnectivityTemplate resource.

    Note: This field is non-authoritative, and will only manage the labels present in your configuration. Please refer to the field effectiveLabels for all of the labels present on the resource.

    location String
    The location of the AgentConnectivityTemplate.
    name String
    Identifier. Name of the resource.
    project String
    The ID of the project in which the resource belongs. If it is not provided, the provider project is used.
    pulumiLabels Map<String>
    The combination of labels configured directly on the resource and default labels configured on the provider.
    updateTime String
    The timestamp when the resource was updated.

    Supporting Types

    AgentConnectivityTemplateEgressNetworkConfig, AgentConnectivityTemplateEgressNetworkConfigArgs

    DnsPeeringConfig AgentConnectivityTemplateEgressNetworkConfigDnsPeeringConfig
    DNS peering configuration for the AgentConnectivityTemplate. When set, the gateway will resolve queries for the configured domains via Cloud DNS in the specified targetNetwork. Structure is documented below.
    NetworkAttachment string
    The network attachment resource name. Format: projects/{project}/regions/{region}/networkAttachments/{network_attachment_id}
    TlsConfig AgentConnectivityTemplateEgressNetworkConfigTlsConfig
    The TLS configuration for the egress traffic. Structure is documented below.
    VpcEgress string
    The VPC egress setting. Possible values are: ALL_TRAFFIC, PRIVATE_RANGES_ONLY.
    DnsPeeringConfig AgentConnectivityTemplateEgressNetworkConfigDnsPeeringConfig
    DNS peering configuration for the AgentConnectivityTemplate. When set, the gateway will resolve queries for the configured domains via Cloud DNS in the specified targetNetwork. Structure is documented below.
    NetworkAttachment string
    The network attachment resource name. Format: projects/{project}/regions/{region}/networkAttachments/{network_attachment_id}
    TlsConfig AgentConnectivityTemplateEgressNetworkConfigTlsConfig
    The TLS configuration for the egress traffic. Structure is documented below.
    VpcEgress string
    The VPC egress setting. Possible values are: ALL_TRAFFIC, PRIVATE_RANGES_ONLY.
    dns_peering_config object
    DNS peering configuration for the AgentConnectivityTemplate. When set, the gateway will resolve queries for the configured domains via Cloud DNS in the specified targetNetwork. Structure is documented below.
    network_attachment string
    The network attachment resource name. Format: projects/{project}/regions/{region}/networkAttachments/{network_attachment_id}
    tls_config object
    The TLS configuration for the egress traffic. Structure is documented below.
    vpc_egress string
    The VPC egress setting. Possible values are: ALL_TRAFFIC, PRIVATE_RANGES_ONLY.
    dnsPeeringConfig AgentConnectivityTemplateEgressNetworkConfigDnsPeeringConfig
    DNS peering configuration for the AgentConnectivityTemplate. When set, the gateway will resolve queries for the configured domains via Cloud DNS in the specified targetNetwork. Structure is documented below.
    networkAttachment String
    The network attachment resource name. Format: projects/{project}/regions/{region}/networkAttachments/{network_attachment_id}
    tlsConfig AgentConnectivityTemplateEgressNetworkConfigTlsConfig
    The TLS configuration for the egress traffic. Structure is documented below.
    vpcEgress String
    The VPC egress setting. Possible values are: ALL_TRAFFIC, PRIVATE_RANGES_ONLY.
    dnsPeeringConfig AgentConnectivityTemplateEgressNetworkConfigDnsPeeringConfig
    DNS peering configuration for the AgentConnectivityTemplate. When set, the gateway will resolve queries for the configured domains via Cloud DNS in the specified targetNetwork. Structure is documented below.
    networkAttachment string
    The network attachment resource name. Format: projects/{project}/regions/{region}/networkAttachments/{network_attachment_id}
    tlsConfig AgentConnectivityTemplateEgressNetworkConfigTlsConfig
    The TLS configuration for the egress traffic. Structure is documented below.
    vpcEgress string
    The VPC egress setting. Possible values are: ALL_TRAFFIC, PRIVATE_RANGES_ONLY.
    dns_peering_config AgentConnectivityTemplateEgressNetworkConfigDnsPeeringConfig
    DNS peering configuration for the AgentConnectivityTemplate. When set, the gateway will resolve queries for the configured domains via Cloud DNS in the specified targetNetwork. Structure is documented below.
    network_attachment str
    The network attachment resource name. Format: projects/{project}/regions/{region}/networkAttachments/{network_attachment_id}
    tls_config AgentConnectivityTemplateEgressNetworkConfigTlsConfig
    The TLS configuration for the egress traffic. Structure is documented below.
    vpc_egress str
    The VPC egress setting. Possible values are: ALL_TRAFFIC, PRIVATE_RANGES_ONLY.
    dnsPeeringConfig Property Map
    DNS peering configuration for the AgentConnectivityTemplate. When set, the gateway will resolve queries for the configured domains via Cloud DNS in the specified targetNetwork. Structure is documented below.
    networkAttachment String
    The network attachment resource name. Format: projects/{project}/regions/{region}/networkAttachments/{network_attachment_id}
    tlsConfig Property Map
    The TLS configuration for the egress traffic. Structure is documented below.
    vpcEgress String
    The VPC egress setting. Possible values are: ALL_TRAFFIC, PRIVATE_RANGES_ONLY.

    AgentConnectivityTemplateEgressNetworkConfigDnsPeeringConfig, AgentConnectivityTemplateEgressNetworkConfigDnsPeeringConfigArgs

    TargetNetwork string
    The URI of the target VPC network for DNS peering. Must be of the form projects/{project}/global/networks/{network}.
    Domain string

    (Optional, Deprecated) The domain name to peer for DNS resolution. Must be a fully qualified domain name ending with a dot (for example, example.com.).

    Warning: domain is deprecated and will be removed in a future major release. Use domains instead.

    Deprecated: domain is deprecated and will be removed in a future major release. Use domains instead.

    Domains List<string>
    The list of domain names to peer for DNS resolution. Each entry must be a fully qualified domain name ending with a dot (for example, example.com.). At least one domain must be specified between domain and domains.
    TargetNetwork string
    The URI of the target VPC network for DNS peering. Must be of the form projects/{project}/global/networks/{network}.
    Domain string

    (Optional, Deprecated) The domain name to peer for DNS resolution. Must be a fully qualified domain name ending with a dot (for example, example.com.).

    Warning: domain is deprecated and will be removed in a future major release. Use domains instead.

    Deprecated: domain is deprecated and will be removed in a future major release. Use domains instead.

    Domains []string
    The list of domain names to peer for DNS resolution. Each entry must be a fully qualified domain name ending with a dot (for example, example.com.). At least one domain must be specified between domain and domains.
    target_network string
    The URI of the target VPC network for DNS peering. Must be of the form projects/{project}/global/networks/{network}.
    domain string

    (Optional, Deprecated) The domain name to peer for DNS resolution. Must be a fully qualified domain name ending with a dot (for example, example.com.).

    Warning: domain is deprecated and will be removed in a future major release. Use domains instead.

    Deprecated: domain is deprecated and will be removed in a future major release. Use domains instead.

    domains list(string)
    The list of domain names to peer for DNS resolution. Each entry must be a fully qualified domain name ending with a dot (for example, example.com.). At least one domain must be specified between domain and domains.
    targetNetwork String
    The URI of the target VPC network for DNS peering. Must be of the form projects/{project}/global/networks/{network}.
    domain String

    (Optional, Deprecated) The domain name to peer for DNS resolution. Must be a fully qualified domain name ending with a dot (for example, example.com.).

    Warning: domain is deprecated and will be removed in a future major release. Use domains instead.

    Deprecated: domain is deprecated and will be removed in a future major release. Use domains instead.

    domains List<String>
    The list of domain names to peer for DNS resolution. Each entry must be a fully qualified domain name ending with a dot (for example, example.com.). At least one domain must be specified between domain and domains.
    targetNetwork string
    The URI of the target VPC network for DNS peering. Must be of the form projects/{project}/global/networks/{network}.
    domain string

    (Optional, Deprecated) The domain name to peer for DNS resolution. Must be a fully qualified domain name ending with a dot (for example, example.com.).

    Warning: domain is deprecated and will be removed in a future major release. Use domains instead.

    Deprecated: domain is deprecated and will be removed in a future major release. Use domains instead.

    domains string[]
    The list of domain names to peer for DNS resolution. Each entry must be a fully qualified domain name ending with a dot (for example, example.com.). At least one domain must be specified between domain and domains.
    target_network str
    The URI of the target VPC network for DNS peering. Must be of the form projects/{project}/global/networks/{network}.
    domain str

    (Optional, Deprecated) The domain name to peer for DNS resolution. Must be a fully qualified domain name ending with a dot (for example, example.com.).

    Warning: domain is deprecated and will be removed in a future major release. Use domains instead.

    Deprecated: domain is deprecated and will be removed in a future major release. Use domains instead.

    domains Sequence[str]
    The list of domain names to peer for DNS resolution. Each entry must be a fully qualified domain name ending with a dot (for example, example.com.). At least one domain must be specified between domain and domains.
    targetNetwork String
    The URI of the target VPC network for DNS peering. Must be of the form projects/{project}/global/networks/{network}.
    domain String

    (Optional, Deprecated) The domain name to peer for DNS resolution. Must be a fully qualified domain name ending with a dot (for example, example.com.).

    Warning: domain is deprecated and will be removed in a future major release. Use domains instead.

    Deprecated: domain is deprecated and will be removed in a future major release. Use domains instead.

    domains List<String>
    The list of domain names to peer for DNS resolution. Each entry must be a fully qualified domain name ending with a dot (for example, example.com.). At least one domain must be specified between domain and domains.

    AgentConnectivityTemplateEgressNetworkConfigTlsConfig, AgentConnectivityTemplateEgressNetworkConfigTlsConfigArgs

    AdditionalRoots string
    Defines whether additional roots should be trusted. Possible values are: NO_ADDITIONAL_ROOTS, PUBLICLY_TRUSTED_ROOTS.
    TrustConfig string
    The trust config resource name. Format: projects/{project}/locations/{location}/trustConfigs/{trust_config}
    AdditionalRoots string
    Defines whether additional roots should be trusted. Possible values are: NO_ADDITIONAL_ROOTS, PUBLICLY_TRUSTED_ROOTS.
    TrustConfig string
    The trust config resource name. Format: projects/{project}/locations/{location}/trustConfigs/{trust_config}
    additional_roots string
    Defines whether additional roots should be trusted. Possible values are: NO_ADDITIONAL_ROOTS, PUBLICLY_TRUSTED_ROOTS.
    trust_config string
    The trust config resource name. Format: projects/{project}/locations/{location}/trustConfigs/{trust_config}
    additionalRoots String
    Defines whether additional roots should be trusted. Possible values are: NO_ADDITIONAL_ROOTS, PUBLICLY_TRUSTED_ROOTS.
    trustConfig String
    The trust config resource name. Format: projects/{project}/locations/{location}/trustConfigs/{trust_config}
    additionalRoots string
    Defines whether additional roots should be trusted. Possible values are: NO_ADDITIONAL_ROOTS, PUBLICLY_TRUSTED_ROOTS.
    trustConfig string
    The trust config resource name. Format: projects/{project}/locations/{location}/trustConfigs/{trust_config}
    additional_roots str
    Defines whether additional roots should be trusted. Possible values are: NO_ADDITIONAL_ROOTS, PUBLICLY_TRUSTED_ROOTS.
    trust_config str
    The trust config resource name. Format: projects/{project}/locations/{location}/trustConfigs/{trust_config}
    additionalRoots String
    Defines whether additional roots should be trusted. Possible values are: NO_ADDITIONAL_ROOTS, PUBLICLY_TRUSTED_ROOTS.
    trustConfig String
    The trust config resource name. Format: projects/{project}/locations/{location}/trustConfigs/{trust_config}

    Import

    AgentConnectivityTemplate can be imported using any of these accepted formats:

    • projects/{{project}}/locations/{{location}}/agentConnectivityTemplates/{{agent_connectivity_template_id}}
    • {{project}}/{{location}}/{{agent_connectivity_template_id}}
    • {{location}}/{{agent_connectivity_template_id}}

    When using the pulumi import command, AgentConnectivityTemplate can be imported using one of the formats above. For example:

    $ pulumi import gcp:networkservices/agentConnectivityTemplate:AgentConnectivityTemplate default projects/{{project}}/locations/{{location}}/agentConnectivityTemplates/{{agent_connectivity_template_id}}
    $ pulumi import gcp:networkservices/agentConnectivityTemplate:AgentConnectivityTemplate default {{project}}/{{location}}/{{agent_connectivity_template_id}}
    $ pulumi import gcp:networkservices/agentConnectivityTemplate:AgentConnectivityTemplate default {{location}}/{{agent_connectivity_template_id}}
    

    To learn more about importing existing cloud resources, see Importing resources.

    Package Details

    Repository
    Google Cloud (GCP) pulumi/pulumi-gcp
    License
    Apache-2.0
    Notes
    This Pulumi package is based on the google-beta Terraform Provider.
    gcp logo
    Viewing docs for Google Cloud v10.2.0
    published on Tuesday, Oct 20, 2026 by Pulumi

      Try Pulumi Cloud free.
      Your team will thank you.

      Start free trial