published on Tuesday, Oct 20, 2026 by Pulumi
published on Tuesday, Oct 20, 2026 by Pulumi
AgentConnectivityTemplate represents a reusable network configuration.
To get more information about AgentConnectivityTemplate, see:
Example Usage
Network Services Agent Connectivity Template Basic
import * as pulumi from "@pulumi/pulumi";
import * as gcp from "@pulumi/gcp";
const project = gcp.organizations.getProject({});
const _default = new gcp.networkservices.AgentConnectivityTemplate("default", {
agentConnectivityTemplateId: "my-connectivity-template",
location: "us-west2",
description: "A basic configuration for Agent Connectivity Template",
labels: {
env: "test",
tier: "gold",
},
agentCompute: "GKE",
deploymentModel: "CENTRALIZED",
accessPath: "CLIENT_TO_AGENT",
});
import pulumi
import pulumi_gcp as gcp
project = gcp.organizations.get_project()
default = gcp.networkservices.AgentConnectivityTemplate("default",
agent_connectivity_template_id="my-connectivity-template",
location="us-west2",
description="A basic configuration for Agent Connectivity Template",
labels={
"env": "test",
"tier": "gold",
},
agent_compute="GKE",
deployment_model="CENTRALIZED",
access_path="CLIENT_TO_AGENT")
package main
import (
"github.com/pulumi/pulumi-gcp/sdk/v10/go/gcp/networkservices"
"github.com/pulumi/pulumi-gcp/sdk/v10/go/gcp/organizations"
"github.com/pulumi/pulumi/sdk/v3/go/pulumi"
)
func main() {
pulumi.Run(func(ctx *pulumi.Context) error {
_, err := organizations.LookupProject(ctx, &organizations.LookupProjectArgs{}, nil)
if err != nil {
return err
}
_, err = networkservices.NewAgentConnectivityTemplate(ctx, "default", &networkservices.AgentConnectivityTemplateArgs{
AgentConnectivityTemplateId: pulumi.String("my-connectivity-template"),
Location: pulumi.String("us-west2"),
Description: pulumi.String("A basic configuration for Agent Connectivity Template"),
Labels: pulumi.StringMap{
"env": pulumi.String("test"),
"tier": pulumi.String("gold"),
},
AgentCompute: pulumi.String("GKE"),
DeploymentModel: pulumi.String("CENTRALIZED"),
AccessPath: pulumi.String("CLIENT_TO_AGENT"),
})
if err != nil {
return err
}
return nil
})
}
using System.Collections.Generic;
using System.Linq;
using Pulumi;
using Gcp = Pulumi.Gcp;
return await Deployment.RunAsync(() =>
{
var project = Gcp.Organizations.GetProject.Invoke();
var @default = new Gcp.NetworkServices.AgentConnectivityTemplate("default", new()
{
AgentConnectivityTemplateId = "my-connectivity-template",
Location = "us-west2",
Description = "A basic configuration for Agent Connectivity Template",
Labels =
{
{ "env", "test" },
{ "tier", "gold" },
},
AgentCompute = "GKE",
DeploymentModel = "CENTRALIZED",
AccessPath = "CLIENT_TO_AGENT",
});
});
package generated_program;
import com.pulumi.Context;
import com.pulumi.Pulumi;
import com.pulumi.core.Output;
import com.pulumi.gcp.organizations.OrganizationsFunctions;
import com.pulumi.gcp.organizations.inputs.GetProjectArgs;
import com.pulumi.gcp.networkservices.AgentConnectivityTemplate;
import com.pulumi.gcp.networkservices.AgentConnectivityTemplateArgs;
import java.util.ArrayList;
import java.util.Arrays;
import java.util.Map;
import java.io.File;
import java.nio.file.Files;
import java.nio.file.Paths;
public class App {
public static void main(String[] args) {
Pulumi.run(App::stack);
}
public static void stack(Context ctx) {
final var project = OrganizationsFunctions.getProject(GetProjectArgs.builder()
.build());
var default_ = new AgentConnectivityTemplate("default", AgentConnectivityTemplateArgs.builder()
.agentConnectivityTemplateId("my-connectivity-template")
.location("us-west2")
.description("A basic configuration for Agent Connectivity Template")
.labels(Map.ofEntries(
Map.entry("env", "test"),
Map.entry("tier", "gold")
))
.agentCompute("GKE")
.deploymentModel("CENTRALIZED")
.accessPath("CLIENT_TO_AGENT")
.build());
}
}
resources:
default:
type: gcp:networkservices:AgentConnectivityTemplate
properties:
agentConnectivityTemplateId: my-connectivity-template
location: us-west2
description: A basic configuration for Agent Connectivity Template
labels:
env: test
tier: gold
agentCompute: GKE
deploymentModel: CENTRALIZED
accessPath: CLIENT_TO_AGENT
variables:
project:
fn::invoke:
function: gcp:organizations:getProject
arguments: {}
terraform {
required_providers {
gcp = {
source = "pulumi/gcp"
}
}
}
data "gcp_organizations_project" "project" {
}
resource "gcp_networkservices_agent_connectivity_template" "default" {
lifecycle {
create_before_destroy = true
}
agent_connectivity_template_id = "my-connectivity-template"
location = "us-west2"
description = "A basic configuration for Agent Connectivity Template"
labels = {
"env" = "test"
"tier" = "gold"
}
agent_compute = "GKE"
deployment_model = "CENTRALIZED"
access_path = "CLIENT_TO_AGENT"
}
Network Services Agent Connectivity Template Advanced
import * as pulumi from "@pulumi/pulumi";
import * as gcp from "@pulumi/gcp";
import * as std from "@pulumi/std";
const project = gcp.organizations.getProject({});
const _default = new gcp.compute.Network("default", {
name: "my-network",
autoCreateSubnetworks: false,
});
const defaultSubnetwork = new gcp.compute.Subnetwork("default", {
name: "my-subnetwork",
region: "us-west2",
network: _default.id,
ipCidrRange: "10.0.0.0/16",
});
const defaultNetworkAttachment = new gcp.compute.NetworkAttachment("default", {
name: "my-attachment",
region: "us-west2",
connectionPreference: "ACCEPT_AUTOMATIC",
subnetworks: [defaultSubnetwork.id],
});
const defaultManagedZone = new gcp.dns.ManagedZone("default", {
name: "my-zone",
dnsName: "example.com.",
description: "Private zone used by AgentGateway DNS peering",
visibility: "private",
privateVisibilityConfig: {
networks: [{
networkUrl: _default.id,
}],
},
});
const defaultTrustConfig = new gcp.certificatemanager.TrustConfig("default", {
name: "my-trust-config",
location: "us-west2",
trustStores: [{
trustAnchors: [{
pemCertificate: std.file({
input: "test-fixtures/cert.pem",
}).then(invoke => invoke.result),
}],
intermediateCas: [{
pemCertificate: std.file({
input: "test-fixtures/cert.pem",
}).then(invoke => invoke.result),
}],
}],
});
const defaultAgentConnectivityTemplate = new gcp.networkservices.AgentConnectivityTemplate("default", {
agentConnectivityTemplateId: "my-connectivity-template",
location: "us-west2",
description: "An advanced configuration for Agent Connectivity Template",
agentCompute: "GKE",
deploymentModel: "CENTRALIZED",
accessTypes: ["PRIVATE"],
accessPath: "AGENT_TO_ANYWHERE",
egressNetworkConfig: {
vpcEgress: "ALL_TRAFFIC",
networkAttachment: defaultNetworkAttachment.id,
dnsPeeringConfig: {
domains: [defaultManagedZone.dnsName],
targetNetwork: _default.id,
},
tlsConfig: {
trustConfig: pulumi.all([project, defaultTrustConfig.name]).apply(([project, name]) => `projects/${project.number}/locations/us-west2/trustConfigs/${name}`),
additionalRoots: "NO_ADDITIONAL_ROOTS",
},
},
});
import pulumi
import pulumi_gcp as gcp
import pulumi_std as std
project = gcp.organizations.get_project()
default = gcp.compute.Network("default",
name="my-network",
auto_create_subnetworks=False)
default_subnetwork = gcp.compute.Subnetwork("default",
name="my-subnetwork",
region="us-west2",
network=default.id,
ip_cidr_range="10.0.0.0/16")
default_network_attachment = gcp.compute.NetworkAttachment("default",
name="my-attachment",
region="us-west2",
connection_preference="ACCEPT_AUTOMATIC",
subnetworks=[default_subnetwork.id])
default_managed_zone = gcp.dns.ManagedZone("default",
name="my-zone",
dns_name="example.com.",
description="Private zone used by AgentGateway DNS peering",
visibility="private",
private_visibility_config={
"networks": [{
"network_url": default.id,
}],
})
default_trust_config = gcp.certificatemanager.TrustConfig("default",
name="my-trust-config",
location="us-west2",
trust_stores=[{
"trust_anchors": [{
"pem_certificate": std.file(input="test-fixtures/cert.pem").result,
}],
"intermediate_cas": [{
"pem_certificate": std.file(input="test-fixtures/cert.pem").result,
}],
}])
default_agent_connectivity_template = gcp.networkservices.AgentConnectivityTemplate("default",
agent_connectivity_template_id="my-connectivity-template",
location="us-west2",
description="An advanced configuration for Agent Connectivity Template",
agent_compute="GKE",
deployment_model="CENTRALIZED",
access_types=["PRIVATE"],
access_path="AGENT_TO_ANYWHERE",
egress_network_config={
"vpc_egress": "ALL_TRAFFIC",
"network_attachment": default_network_attachment.id,
"dns_peering_config": {
"domains": [default_managed_zone.dns_name],
"target_network": default.id,
},
"tls_config": {
"trust_config": default_trust_config.name.apply(lambda name: f"projects/{project.number}/locations/us-west2/trustConfigs/{name}"),
"additional_roots": "NO_ADDITIONAL_ROOTS",
},
})
package main
import (
"fmt"
"github.com/pulumi/pulumi-gcp/sdk/v10/go/gcp/certificatemanager"
"github.com/pulumi/pulumi-gcp/sdk/v10/go/gcp/compute"
"github.com/pulumi/pulumi-gcp/sdk/v10/go/gcp/dns"
"github.com/pulumi/pulumi-gcp/sdk/v10/go/gcp/networkservices"
"github.com/pulumi/pulumi-gcp/sdk/v10/go/gcp/organizations"
"github.com/pulumi/pulumi-std/sdk/go/std"
"github.com/pulumi/pulumi/sdk/v3/go/pulumi"
)
func main() {
pulumi.Run(func(ctx *pulumi.Context) error {
project, err := organizations.LookupProject(ctx, &organizations.LookupProjectArgs{}, nil)
if err != nil {
return err
}
_default, err := compute.NewNetwork(ctx, "default", &compute.NetworkArgs{
Name: pulumi.String("my-network"),
AutoCreateSubnetworks: pulumi.Bool(false),
})
if err != nil {
return err
}
defaultSubnetwork, err := compute.NewSubnetwork(ctx, "default", &compute.SubnetworkArgs{
Name: pulumi.String("my-subnetwork"),
Region: pulumi.String("us-west2"),
Network: _default.ID(),
IpCidrRange: pulumi.String("10.0.0.0/16"),
})
if err != nil {
return err
}
defaultNetworkAttachment, err := compute.NewNetworkAttachment(ctx, "default", &compute.NetworkAttachmentArgs{
Name: pulumi.String("my-attachment"),
Region: pulumi.String("us-west2"),
ConnectionPreference: pulumi.String("ACCEPT_AUTOMATIC"),
Subnetworks: pulumi.StringArray{
defaultSubnetwork.ID(),
},
})
if err != nil {
return err
}
defaultManagedZone, err := dns.NewManagedZone(ctx, "default", &dns.ManagedZoneArgs{
Name: pulumi.String("my-zone"),
DnsName: pulumi.String("example.com."),
Description: pulumi.String("Private zone used by AgentGateway DNS peering"),
Visibility: pulumi.String("private"),
PrivateVisibilityConfig: &dns.ManagedZonePrivateVisibilityConfigArgs{
Networks: dns.ManagedZonePrivateVisibilityConfigNetworkArray{
&dns.ManagedZonePrivateVisibilityConfigNetworkArgs{
NetworkUrl: _default.ID(),
},
},
},
})
if err != nil {
return err
}
invokeFile, err := std.File(ctx, &std.FileArgs{
Input: "test-fixtures/cert.pem",
}, nil)
if err != nil {
return err
}
invokeFile1, err := std.File(ctx, &std.FileArgs{
Input: "test-fixtures/cert.pem",
}, nil)
if err != nil {
return err
}
defaultTrustConfig, err := certificatemanager.NewTrustConfig(ctx, "default", &certificatemanager.TrustConfigArgs{
Name: pulumi.String("my-trust-config"),
Location: pulumi.String("us-west2"),
TrustStores: certificatemanager.TrustConfigTrustStoreArray{
&certificatemanager.TrustConfigTrustStoreArgs{
TrustAnchors: certificatemanager.TrustConfigTrustStoreTrustAnchorArray{
&certificatemanager.TrustConfigTrustStoreTrustAnchorArgs{
PemCertificate: pulumi.String(invokeFile.Result),
},
},
IntermediateCas: certificatemanager.TrustConfigTrustStoreIntermediateCaArray{
&certificatemanager.TrustConfigTrustStoreIntermediateCaArgs{
PemCertificate: pulumi.String(invokeFile1.Result),
},
},
},
},
})
if err != nil {
return err
}
_, err = networkservices.NewAgentConnectivityTemplate(ctx, "default", &networkservices.AgentConnectivityTemplateArgs{
AgentConnectivityTemplateId: pulumi.String("my-connectivity-template"),
Location: pulumi.String("us-west2"),
Description: pulumi.String("An advanced configuration for Agent Connectivity Template"),
AgentCompute: pulumi.String("GKE"),
DeploymentModel: pulumi.String("CENTRALIZED"),
AccessTypes: pulumi.StringArray{
pulumi.String("PRIVATE"),
},
AccessPath: pulumi.String("AGENT_TO_ANYWHERE"),
EgressNetworkConfig: &networkservices.AgentConnectivityTemplateEgressNetworkConfigArgs{
VpcEgress: pulumi.String("ALL_TRAFFIC"),
NetworkAttachment: defaultNetworkAttachment.ID(),
DnsPeeringConfig: &networkservices.AgentConnectivityTemplateEgressNetworkConfigDnsPeeringConfigArgs{
Domains: pulumi.StringArray{
defaultManagedZone.DnsName,
},
TargetNetwork: _default.ID(),
},
TlsConfig: &networkservices.AgentConnectivityTemplateEgressNetworkConfigTlsConfigArgs{
TrustConfig: defaultTrustConfig.Name.ApplyT(func(name string) (string, error) {
return fmt.Sprintf("projects/%v/locations/us-west2/trustConfigs/%v", project.Number, name), nil
}).(pulumi.StringOutput),
AdditionalRoots: pulumi.String("NO_ADDITIONAL_ROOTS"),
},
},
})
if err != nil {
return err
}
return nil
})
}
using System.Collections.Generic;
using System.Linq;
using Pulumi;
using Gcp = Pulumi.Gcp;
using Std = Pulumi.Std;
return await Deployment.RunAsync(() =>
{
var project = Gcp.Organizations.GetProject.Invoke();
var @default = new Gcp.Compute.Network("default", new()
{
Name = "my-network",
AutoCreateSubnetworks = false,
});
var defaultSubnetwork = new Gcp.Compute.Subnetwork("default", new()
{
Name = "my-subnetwork",
Region = "us-west2",
Network = @default.Id,
IpCidrRange = "10.0.0.0/16",
});
var defaultNetworkAttachment = new Gcp.Compute.NetworkAttachment("default", new()
{
Name = "my-attachment",
Region = "us-west2",
ConnectionPreference = "ACCEPT_AUTOMATIC",
Subnetworks = new[]
{
defaultSubnetwork.Id,
},
});
var defaultManagedZone = new Gcp.Dns.ManagedZone("default", new()
{
Name = "my-zone",
DnsName = "example.com.",
Description = "Private zone used by AgentGateway DNS peering",
Visibility = "private",
PrivateVisibilityConfig = new Gcp.Dns.Inputs.ManagedZonePrivateVisibilityConfigArgs
{
Networks = new[]
{
new Gcp.Dns.Inputs.ManagedZonePrivateVisibilityConfigNetworkArgs
{
NetworkUrl = @default.Id,
},
},
},
});
var defaultTrustConfig = new Gcp.CertificateManager.TrustConfig("default", new()
{
Name = "my-trust-config",
Location = "us-west2",
TrustStores = new[]
{
new Gcp.CertificateManager.Inputs.TrustConfigTrustStoreArgs
{
TrustAnchors = new[]
{
new Gcp.CertificateManager.Inputs.TrustConfigTrustStoreTrustAnchorArgs
{
PemCertificate = Std.File.Invoke(new()
{
Input = "test-fixtures/cert.pem",
}).Apply(invoke => invoke.Result),
},
},
IntermediateCas = new[]
{
new Gcp.CertificateManager.Inputs.TrustConfigTrustStoreIntermediateCaArgs
{
PemCertificate = Std.File.Invoke(new()
{
Input = "test-fixtures/cert.pem",
}).Apply(invoke => invoke.Result),
},
},
},
},
});
var defaultAgentConnectivityTemplate = new Gcp.NetworkServices.AgentConnectivityTemplate("default", new()
{
AgentConnectivityTemplateId = "my-connectivity-template",
Location = "us-west2",
Description = "An advanced configuration for Agent Connectivity Template",
AgentCompute = "GKE",
DeploymentModel = "CENTRALIZED",
AccessTypes = new[]
{
"PRIVATE",
},
AccessPath = "AGENT_TO_ANYWHERE",
EgressNetworkConfig = new Gcp.NetworkServices.Inputs.AgentConnectivityTemplateEgressNetworkConfigArgs
{
VpcEgress = "ALL_TRAFFIC",
NetworkAttachment = defaultNetworkAttachment.Id,
DnsPeeringConfig = new Gcp.NetworkServices.Inputs.AgentConnectivityTemplateEgressNetworkConfigDnsPeeringConfigArgs
{
Domains = new[]
{
defaultManagedZone.DnsName,
},
TargetNetwork = @default.Id,
},
TlsConfig = new Gcp.NetworkServices.Inputs.AgentConnectivityTemplateEgressNetworkConfigTlsConfigArgs
{
TrustConfig = Output.Tuple(project, defaultTrustConfig.Name).Apply(values =>
{
var project = values.Item1;
var name = values.Item2;
return $"projects/{project.Apply(getProjectResult => getProjectResult.Number)}/locations/us-west2/trustConfigs/{name}";
}),
AdditionalRoots = "NO_ADDITIONAL_ROOTS",
},
},
});
});
package generated_program;
import com.pulumi.Context;
import com.pulumi.Pulumi;
import com.pulumi.core.Output;
import com.pulumi.gcp.organizations.OrganizationsFunctions;
import com.pulumi.gcp.organizations.inputs.GetProjectArgs;
import com.pulumi.gcp.compute.Network;
import com.pulumi.gcp.compute.NetworkArgs;
import com.pulumi.gcp.compute.Subnetwork;
import com.pulumi.gcp.compute.SubnetworkArgs;
import com.pulumi.gcp.compute.NetworkAttachment;
import com.pulumi.gcp.compute.NetworkAttachmentArgs;
import com.pulumi.gcp.dns.ManagedZone;
import com.pulumi.gcp.dns.ManagedZoneArgs;
import com.pulumi.gcp.dns.inputs.ManagedZonePrivateVisibilityConfigArgs;
import com.pulumi.gcp.dns.inputs.ManagedZonePrivateVisibilityConfigNetworkArgs;
import com.pulumi.gcp.certificatemanager.TrustConfig;
import com.pulumi.gcp.certificatemanager.TrustConfigArgs;
import com.pulumi.gcp.certificatemanager.inputs.TrustConfigTrustStoreArgs;
import com.pulumi.gcp.certificatemanager.inputs.TrustConfigTrustStoreTrustAnchorArgs;
import com.pulumi.gcp.certificatemanager.inputs.TrustConfigTrustStoreIntermediateCaArgs;
import com.pulumi.std.StdFunctions;
import com.pulumi.std.inputs.FileArgs;
import com.pulumi.gcp.networkservices.AgentConnectivityTemplate;
import com.pulumi.gcp.networkservices.AgentConnectivityTemplateArgs;
import com.pulumi.gcp.networkservices.inputs.AgentConnectivityTemplateEgressNetworkConfigArgs;
import com.pulumi.gcp.networkservices.inputs.AgentConnectivityTemplateEgressNetworkConfigDnsPeeringConfigArgs;
import com.pulumi.gcp.networkservices.inputs.AgentConnectivityTemplateEgressNetworkConfigTlsConfigArgs;
import java.util.ArrayList;
import java.util.Arrays;
import java.util.Map;
import java.io.File;
import java.nio.file.Files;
import java.nio.file.Paths;
public class App {
public static void main(String[] args) {
Pulumi.run(App::stack);
}
public static void stack(Context ctx) {
final var project = OrganizationsFunctions.getProject(GetProjectArgs.builder()
.build());
var default_ = new Network("default", NetworkArgs.builder()
.name("my-network")
.autoCreateSubnetworks(false)
.build());
var defaultSubnetwork = new Subnetwork("defaultSubnetwork", SubnetworkArgs.builder()
.name("my-subnetwork")
.region("us-west2")
.network(default_.id())
.ipCidrRange("10.0.0.0/16")
.build());
var defaultNetworkAttachment = new NetworkAttachment("defaultNetworkAttachment", NetworkAttachmentArgs.builder()
.name("my-attachment")
.region("us-west2")
.connectionPreference("ACCEPT_AUTOMATIC")
.subnetworks(defaultSubnetwork.id())
.build());
var defaultManagedZone = new ManagedZone("defaultManagedZone", ManagedZoneArgs.builder()
.name("my-zone")
.dnsName("example.com.")
.description("Private zone used by AgentGateway DNS peering")
.visibility("private")
.privateVisibilityConfig(ManagedZonePrivateVisibilityConfigArgs.builder()
.networks(ManagedZonePrivateVisibilityConfigNetworkArgs.builder()
.networkUrl(default_.id())
.build())
.build())
.build());
var defaultTrustConfig = new TrustConfig("defaultTrustConfig", TrustConfigArgs.builder()
.name("my-trust-config")
.location("us-west2")
.trustStores(TrustConfigTrustStoreArgs.builder()
.trustAnchors(TrustConfigTrustStoreTrustAnchorArgs.builder()
.pemCertificate(StdFunctions.file(FileArgs.builder()
.input("test-fixtures/cert.pem")
.build()).result())
.build())
.intermediateCas(TrustConfigTrustStoreIntermediateCaArgs.builder()
.pemCertificate(StdFunctions.file(FileArgs.builder()
.input("test-fixtures/cert.pem")
.build()).result())
.build())
.build())
.build());
var defaultAgentConnectivityTemplate = new AgentConnectivityTemplate("defaultAgentConnectivityTemplate", AgentConnectivityTemplateArgs.builder()
.agentConnectivityTemplateId("my-connectivity-template")
.location("us-west2")
.description("An advanced configuration for Agent Connectivity Template")
.agentCompute("GKE")
.deploymentModel("CENTRALIZED")
.accessTypes("PRIVATE")
.accessPath("AGENT_TO_ANYWHERE")
.egressNetworkConfig(AgentConnectivityTemplateEgressNetworkConfigArgs.builder()
.vpcEgress("ALL_TRAFFIC")
.networkAttachment(defaultNetworkAttachment.id())
.dnsPeeringConfig(AgentConnectivityTemplateEgressNetworkConfigDnsPeeringConfigArgs.builder()
.domains(defaultManagedZone.dnsName())
.targetNetwork(default_.id())
.build())
.tlsConfig(AgentConnectivityTemplateEgressNetworkConfigTlsConfigArgs.builder()
.trustConfig(defaultTrustConfig.name().applyValue(_name -> String.format("projects/%s/locations/us-west2/trustConfigs/%s", project.number(),_name)))
.additionalRoots("NO_ADDITIONAL_ROOTS")
.build())
.build())
.build());
}
}
resources:
default:
type: gcp:compute:Network
properties:
name: my-network
autoCreateSubnetworks: false
defaultSubnetwork:
type: gcp:compute:Subnetwork
name: default
properties:
name: my-subnetwork
region: us-west2
network: ${default.id}
ipCidrRange: 10.0.0.0/16
defaultNetworkAttachment:
type: gcp:compute:NetworkAttachment
name: default
properties:
name: my-attachment
region: us-west2
connectionPreference: ACCEPT_AUTOMATIC
subnetworks:
- ${defaultSubnetwork.id}
defaultManagedZone:
type: gcp:dns:ManagedZone
name: default
properties:
name: my-zone
dnsName: example.com.
description: Private zone used by AgentGateway DNS peering
visibility: private
privateVisibilityConfig:
networks:
- networkUrl: ${default.id}
defaultTrustConfig:
type: gcp:certificatemanager:TrustConfig
name: default
properties:
name: my-trust-config
location: us-west2
trustStores:
- trustAnchors:
- pemCertificate:
fn::invoke:
function: std:file
arguments:
input: test-fixtures/cert.pem
return: result
intermediateCas:
- pemCertificate:
fn::invoke:
function: std:file
arguments:
input: test-fixtures/cert.pem
return: result
defaultAgentConnectivityTemplate:
type: gcp:networkservices:AgentConnectivityTemplate
name: default
properties:
agentConnectivityTemplateId: my-connectivity-template
location: us-west2
description: An advanced configuration for Agent Connectivity Template
agentCompute: GKE
deploymentModel: CENTRALIZED
accessTypes:
- PRIVATE
accessPath: AGENT_TO_ANYWHERE
egressNetworkConfig:
vpcEgress: ALL_TRAFFIC
networkAttachment: ${defaultNetworkAttachment.id}
dnsPeeringConfig:
domains:
- ${defaultManagedZone.dnsName}
targetNetwork: ${default.id}
tlsConfig:
trustConfig: projects/${project.number}/locations/us-west2/trustConfigs/${defaultTrustConfig.name}
additionalRoots: NO_ADDITIONAL_ROOTS
variables:
project:
fn::invoke:
function: gcp:organizations:getProject
arguments: {}
terraform {
required_providers {
gcp = {
source = "pulumi/gcp"
}
std = {
source = "pulumi/std"
}
}
}
data "gcp_organizations_project" "project" {
}
resource "gcp_compute_network" "default" {
lifecycle {
create_before_destroy = true
}
name = "my-network"
auto_create_subnetworks = false
}
resource "gcp_compute_subnetwork" "default" {
lifecycle {
create_before_destroy = true
}
name = "my-subnetwork"
region = "us-west2"
network = gcp_compute_network.default.id
ip_cidr_range = "10.0.0.0/16"
}
resource "gcp_compute_network_attachment" "default" {
lifecycle {
create_before_destroy = true
}
name = "my-attachment"
region = "us-west2"
connection_preference = "ACCEPT_AUTOMATIC"
subnetworks = [gcp_compute_subnetwork.default.id]
}
resource "gcp_dns_managed_zone" "default" {
lifecycle {
create_before_destroy = true
}
name = "my-zone"
dns_name = "example.com."
description = "Private zone used by AgentGateway DNS peering"
visibility = "private"
private_visibility_config = {
networks = [{
network_url = gcp_compute_network.default.id
}]
}
}
resource "gcp_certificatemanager_trust_config" "default" {
lifecycle {
create_before_destroy = true
}
name = "my-trust-config"
location = "us-west2"
trust_stores {
trust_anchors {
pem_certificate = file("test-fixtures/cert.pem")
}
intermediate_cas {
pem_certificate = file("test-fixtures/cert.pem")
}
}
}
resource "gcp_networkservices_agent_connectivity_template" "default" {
lifecycle {
create_before_destroy = true
}
agent_connectivity_template_id = "my-connectivity-template"
location = "us-west2"
description = "An advanced configuration for Agent Connectivity Template"
agent_compute = "GKE"
deployment_model = "CENTRALIZED"
access_types = ["PRIVATE"]
access_path = "AGENT_TO_ANYWHERE"
egress_network_config = {
vpc_egress = "ALL_TRAFFIC"
network_attachment = gcp_compute_network_attachment.default.id
dns_peering_config = {
domains = [gcp_dns_managed_zone.default.dns_name]
target_network = gcp_compute_network.default.id
}
tls_config = {
trust_config ="projects/${data.gcp_organizations_project.project.number}/locations/us-west2/trustConfigs/${gcp_certificatemanager_trust_config.default.name}"
additional_roots = "NO_ADDITIONAL_ROOTS"
}
}
}
Create AgentConnectivityTemplate Resource
Resources are created with functions called constructors. To learn more about declaring and configuring resources, see Resources.
Constructor syntax
new AgentConnectivityTemplate(name: string, args: AgentConnectivityTemplateArgs, opts?: CustomResourceOptions);@overload
def AgentConnectivityTemplate(resource_name: str,
args: AgentConnectivityTemplateArgs,
opts: Optional[ResourceOptions] = None)
@overload
def AgentConnectivityTemplate(resource_name: str,
opts: Optional[ResourceOptions] = None,
access_path: Optional[str] = None,
agent_connectivity_template_id: Optional[str] = None,
location: Optional[str] = None,
access_types: Optional[Sequence[str]] = None,
agent_compute: Optional[str] = None,
deletion_policy: Optional[str] = None,
deployment_model: Optional[str] = None,
description: Optional[str] = None,
egress_network_config: Optional[AgentConnectivityTemplateEgressNetworkConfigArgs] = None,
labels: Optional[Mapping[str, str]] = None,
project: Optional[str] = None)func NewAgentConnectivityTemplate(ctx *Context, name string, args AgentConnectivityTemplateArgs, opts ...ResourceOption) (*AgentConnectivityTemplate, error)public AgentConnectivityTemplate(string name, AgentConnectivityTemplateArgs args, CustomResourceOptions? opts = null)
public AgentConnectivityTemplate(String name, AgentConnectivityTemplateArgs args)
public AgentConnectivityTemplate(String name, AgentConnectivityTemplateArgs args, CustomResourceOptions options)
type: gcp:networkservices:AgentConnectivityTemplate
properties: # The arguments to resource properties.
options: # Bag of options to control resource's behavior.
resource "gcp_networkservices_agent_connectivity_template" "name" {
# resource properties
}Parameters
- name string
- The unique name of the resource.
- args AgentConnectivityTemplateArgs
- The arguments to resource properties.
- opts CustomResourceOptions
- Bag of options to control resource's behavior.
- resource_name str
- The unique name of the resource.
- args AgentConnectivityTemplateArgs
- The arguments to resource properties.
- opts ResourceOptions
- Bag of options to control resource's behavior.
- ctx Context
- Context object for the current deployment.
- name string
- The unique name of the resource.
- args AgentConnectivityTemplateArgs
- The arguments to resource properties.
- opts ResourceOption
- Bag of options to control resource's behavior.
- name string
- The unique name of the resource.
- args AgentConnectivityTemplateArgs
- The arguments to resource properties.
- opts CustomResourceOptions
- Bag of options to control resource's behavior.
- name String
- The unique name of the resource.
- args AgentConnectivityTemplateArgs
- The arguments to resource properties.
- options CustomResourceOptions
- Bag of options to control resource's behavior.
Constructor example
The following reference example uses placeholder values for all input properties.
var agentConnectivityTemplateResource = new Gcp.NetworkServices.AgentConnectivityTemplate("agentConnectivityTemplateResource", new()
{
AccessPath = "string",
AgentConnectivityTemplateId = "string",
Location = "string",
AccessTypes = new[]
{
"string",
},
AgentCompute = "string",
DeletionPolicy = "string",
DeploymentModel = "string",
Description = "string",
EgressNetworkConfig = new Gcp.NetworkServices.Inputs.AgentConnectivityTemplateEgressNetworkConfigArgs
{
DnsPeeringConfig = new Gcp.NetworkServices.Inputs.AgentConnectivityTemplateEgressNetworkConfigDnsPeeringConfigArgs
{
TargetNetwork = "string",
Domains = new[]
{
"string",
},
},
NetworkAttachment = "string",
TlsConfig = new Gcp.NetworkServices.Inputs.AgentConnectivityTemplateEgressNetworkConfigTlsConfigArgs
{
AdditionalRoots = "string",
TrustConfig = "string",
},
VpcEgress = "string",
},
Labels =
{
{ "string", "string" },
},
Project = "string",
});
example, err := networkservices.NewAgentConnectivityTemplate(ctx, "agentConnectivityTemplateResource", &networkservices.AgentConnectivityTemplateArgs{
AccessPath: pulumi.String("string"),
AgentConnectivityTemplateId: pulumi.String("string"),
Location: pulumi.String("string"),
AccessTypes: pulumi.StringArray{
pulumi.String("string"),
},
AgentCompute: pulumi.String("string"),
DeletionPolicy: pulumi.String("string"),
DeploymentModel: pulumi.String("string"),
Description: pulumi.String("string"),
EgressNetworkConfig: &networkservices.AgentConnectivityTemplateEgressNetworkConfigArgs{
DnsPeeringConfig: &networkservices.AgentConnectivityTemplateEgressNetworkConfigDnsPeeringConfigArgs{
TargetNetwork: pulumi.String("string"),
Domains: pulumi.StringArray{
pulumi.String("string"),
},
},
NetworkAttachment: pulumi.String("string"),
TlsConfig: &networkservices.AgentConnectivityTemplateEgressNetworkConfigTlsConfigArgs{
AdditionalRoots: pulumi.String("string"),
TrustConfig: pulumi.String("string"),
},
VpcEgress: pulumi.String("string"),
},
Labels: pulumi.StringMap{
"string": pulumi.String("string"),
},
Project: pulumi.String("string"),
})
resource "gcp_networkservices_agent_connectivity_template" "agentConnectivityTemplateResource" {
lifecycle {
create_before_destroy = true
}
access_path = "string"
agent_connectivity_template_id = "string"
location = "string"
access_types = ["string"]
agent_compute = "string"
deletion_policy = "string"
deployment_model = "string"
description = "string"
egress_network_config = {
dns_peering_config = {
target_network = "string"
domains = ["string"]
}
network_attachment = "string"
tls_config = {
additional_roots = "string"
trust_config = "string"
}
vpc_egress = "string"
}
labels = {
"string" = "string"
}
project = "string"
}
var agentConnectivityTemplateResource = new AgentConnectivityTemplate("agentConnectivityTemplateResource", AgentConnectivityTemplateArgs.builder()
.accessPath("string")
.agentConnectivityTemplateId("string")
.location("string")
.accessTypes("string")
.agentCompute("string")
.deletionPolicy("string")
.deploymentModel("string")
.description("string")
.egressNetworkConfig(AgentConnectivityTemplateEgressNetworkConfigArgs.builder()
.dnsPeeringConfig(AgentConnectivityTemplateEgressNetworkConfigDnsPeeringConfigArgs.builder()
.targetNetwork("string")
.domains("string")
.build())
.networkAttachment("string")
.tlsConfig(AgentConnectivityTemplateEgressNetworkConfigTlsConfigArgs.builder()
.additionalRoots("string")
.trustConfig("string")
.build())
.vpcEgress("string")
.build())
.labels(Map.of("string", "string"))
.project("string")
.build());
agent_connectivity_template_resource = gcp.networkservices.AgentConnectivityTemplate("agentConnectivityTemplateResource",
access_path="string",
agent_connectivity_template_id="string",
location="string",
access_types=["string"],
agent_compute="string",
deletion_policy="string",
deployment_model="string",
description="string",
egress_network_config={
"dns_peering_config": {
"target_network": "string",
"domains": ["string"],
},
"network_attachment": "string",
"tls_config": {
"additional_roots": "string",
"trust_config": "string",
},
"vpc_egress": "string",
},
labels={
"string": "string",
},
project="string")
const agentConnectivityTemplateResource = new gcp.networkservices.AgentConnectivityTemplate("agentConnectivityTemplateResource", {
accessPath: "string",
agentConnectivityTemplateId: "string",
location: "string",
accessTypes: ["string"],
agentCompute: "string",
deletionPolicy: "string",
deploymentModel: "string",
description: "string",
egressNetworkConfig: {
dnsPeeringConfig: {
targetNetwork: "string",
domains: ["string"],
},
networkAttachment: "string",
tlsConfig: {
additionalRoots: "string",
trustConfig: "string",
},
vpcEgress: "string",
},
labels: {
string: "string",
},
project: "string",
});
type: gcp:networkservices:AgentConnectivityTemplate
properties:
accessPath: string
accessTypes:
- string
agentCompute: string
agentConnectivityTemplateId: string
deletionPolicy: string
deploymentModel: string
description: string
egressNetworkConfig:
dnsPeeringConfig:
domains:
- string
targetNetwork: string
networkAttachment: string
tlsConfig:
additionalRoots: string
trustConfig: string
vpcEgress: string
labels:
string: string
location: string
project: string
AgentConnectivityTemplate Resource Properties
To learn more about resource properties and how to use them, see Inputs and Outputs in the Architecture and Concepts docs.
Inputs
In Python, inputs that are objects can be passed either as argument classes or as dictionary literals.
The AgentConnectivityTemplate resource accepts the following input properties:
- Access
Path string - The path of the access.
The path is immutable once set. Exactly one path can be set.
Possible values are:
CLIENT_TO_AGENT,AGENT_TO_ANYWHERE. - Agent
Connectivity stringTemplate Id - Short name of the AgentConnectivityTemplate resource.
- Location string
- The location of the AgentConnectivityTemplate.
- Access
Types List<string> - The types of network access provided to the gateway.
Both PUBLIC and PRIVATE can be configured.
Each value may be one of:
PUBLIC,PRIVATE. - Agent
Compute string - The compute environment where the agent is hosted.
Exactly one type of compute must be chosen.
Possible values are:
GKE,CLOUD_RUN. - Deletion
Policy string - Whether Terraform will be prevented from destroying the resource. Defaults to DELETE. When a 'terraform destroy' or 'pulumi up' would delete the resource, the command will fail if this field is set to "PREVENT" in Terraform state. When set to "ABANDON", the command will remove the resource from Terraform management without updating or deleting the resource in the API. When set to "DELETE", deleting the resource is allowed.
- Deployment
Model string - The deployment model for the gateway.
Possible values are:
CENTRALIZED,AMBIENT. - Description string
- A free-text description of the resource. Max length 1024 characters.
- Egress
Network AgentConfig Connectivity Template Egress Network Config - Configuration for egress network traffic. Structure is documented below.
- Labels Dictionary<string, string>
Set of label tags associated with the AgentConnectivityTemplate resource.
Note: This field is non-authoritative, and will only manage the labels present in your configuration. Please refer to the field
effectiveLabelsfor all of the labels present on the resource.- Project string
- The ID of the project in which the resource belongs. If it is not provided, the provider project is used.
- Access
Path string - The path of the access.
The path is immutable once set. Exactly one path can be set.
Possible values are:
CLIENT_TO_AGENT,AGENT_TO_ANYWHERE. - Agent
Connectivity stringTemplate Id - Short name of the AgentConnectivityTemplate resource.
- Location string
- The location of the AgentConnectivityTemplate.
- Access
Types []string - The types of network access provided to the gateway.
Both PUBLIC and PRIVATE can be configured.
Each value may be one of:
PUBLIC,PRIVATE. - Agent
Compute string - The compute environment where the agent is hosted.
Exactly one type of compute must be chosen.
Possible values are:
GKE,CLOUD_RUN. - Deletion
Policy string - Whether Terraform will be prevented from destroying the resource. Defaults to DELETE. When a 'terraform destroy' or 'pulumi up' would delete the resource, the command will fail if this field is set to "PREVENT" in Terraform state. When set to "ABANDON", the command will remove the resource from Terraform management without updating or deleting the resource in the API. When set to "DELETE", deleting the resource is allowed.
- Deployment
Model string - The deployment model for the gateway.
Possible values are:
CENTRALIZED,AMBIENT. - Description string
- A free-text description of the resource. Max length 1024 characters.
- Egress
Network AgentConfig Connectivity Template Egress Network Config Args - Configuration for egress network traffic. Structure is documented below.
- Labels map[string]string
Set of label tags associated with the AgentConnectivityTemplate resource.
Note: This field is non-authoritative, and will only manage the labels present in your configuration. Please refer to the field
effectiveLabelsfor all of the labels present on the resource.- Project string
- The ID of the project in which the resource belongs. If it is not provided, the provider project is used.
- access_
path string - The path of the access.
The path is immutable once set. Exactly one path can be set.
Possible values are:
CLIENT_TO_AGENT,AGENT_TO_ANYWHERE. - agent_
connectivity_ stringtemplate_ id - Short name of the AgentConnectivityTemplate resource.
- location string
- The location of the AgentConnectivityTemplate.
- access_
types list(string) - The types of network access provided to the gateway.
Both PUBLIC and PRIVATE can be configured.
Each value may be one of:
PUBLIC,PRIVATE. - agent_
compute string - The compute environment where the agent is hosted.
Exactly one type of compute must be chosen.
Possible values are:
GKE,CLOUD_RUN. - deletion_
policy string - Whether Terraform will be prevented from destroying the resource. Defaults to DELETE. When a 'terraform destroy' or 'pulumi up' would delete the resource, the command will fail if this field is set to "PREVENT" in Terraform state. When set to "ABANDON", the command will remove the resource from Terraform management without updating or deleting the resource in the API. When set to "DELETE", deleting the resource is allowed.
- deployment_
model string - The deployment model for the gateway.
Possible values are:
CENTRALIZED,AMBIENT. - description string
- A free-text description of the resource. Max length 1024 characters.
- egress_
network_ objectconfig - Configuration for egress network traffic. Structure is documented below.
- labels map(string)
Set of label tags associated with the AgentConnectivityTemplate resource.
Note: This field is non-authoritative, and will only manage the labels present in your configuration. Please refer to the field
effectiveLabelsfor all of the labels present on the resource.- project string
- The ID of the project in which the resource belongs. If it is not provided, the provider project is used.
- access
Path String - The path of the access.
The path is immutable once set. Exactly one path can be set.
Possible values are:
CLIENT_TO_AGENT,AGENT_TO_ANYWHERE. - agent
Connectivity StringTemplate Id - Short name of the AgentConnectivityTemplate resource.
- location String
- The location of the AgentConnectivityTemplate.
- access
Types List<String> - The types of network access provided to the gateway.
Both PUBLIC and PRIVATE can be configured.
Each value may be one of:
PUBLIC,PRIVATE. - agent
Compute String - The compute environment where the agent is hosted.
Exactly one type of compute must be chosen.
Possible values are:
GKE,CLOUD_RUN. - deletion
Policy String - Whether Terraform will be prevented from destroying the resource. Defaults to DELETE. When a 'terraform destroy' or 'pulumi up' would delete the resource, the command will fail if this field is set to "PREVENT" in Terraform state. When set to "ABANDON", the command will remove the resource from Terraform management without updating or deleting the resource in the API. When set to "DELETE", deleting the resource is allowed.
- deployment
Model String - The deployment model for the gateway.
Possible values are:
CENTRALIZED,AMBIENT. - description String
- A free-text description of the resource. Max length 1024 characters.
- egress
Network AgentConfig Connectivity Template Egress Network Config - Configuration for egress network traffic. Structure is documented below.
- labels Map<String,String>
Set of label tags associated with the AgentConnectivityTemplate resource.
Note: This field is non-authoritative, and will only manage the labels present in your configuration. Please refer to the field
effectiveLabelsfor all of the labels present on the resource.- project String
- The ID of the project in which the resource belongs. If it is not provided, the provider project is used.
- access
Path string - The path of the access.
The path is immutable once set. Exactly one path can be set.
Possible values are:
CLIENT_TO_AGENT,AGENT_TO_ANYWHERE. - agent
Connectivity stringTemplate Id - Short name of the AgentConnectivityTemplate resource.
- location string
- The location of the AgentConnectivityTemplate.
- access
Types string[] - The types of network access provided to the gateway.
Both PUBLIC and PRIVATE can be configured.
Each value may be one of:
PUBLIC,PRIVATE. - agent
Compute string - The compute environment where the agent is hosted.
Exactly one type of compute must be chosen.
Possible values are:
GKE,CLOUD_RUN. - deletion
Policy string - Whether Terraform will be prevented from destroying the resource. Defaults to DELETE. When a 'terraform destroy' or 'pulumi up' would delete the resource, the command will fail if this field is set to "PREVENT" in Terraform state. When set to "ABANDON", the command will remove the resource from Terraform management without updating or deleting the resource in the API. When set to "DELETE", deleting the resource is allowed.
- deployment
Model string - The deployment model for the gateway.
Possible values are:
CENTRALIZED,AMBIENT. - description string
- A free-text description of the resource. Max length 1024 characters.
- egress
Network AgentConfig Connectivity Template Egress Network Config - Configuration for egress network traffic. Structure is documented below.
- labels {[key: string]: string}
Set of label tags associated with the AgentConnectivityTemplate resource.
Note: This field is non-authoritative, and will only manage the labels present in your configuration. Please refer to the field
effectiveLabelsfor all of the labels present on the resource.- project string
- The ID of the project in which the resource belongs. If it is not provided, the provider project is used.
- access_
path str - The path of the access.
The path is immutable once set. Exactly one path can be set.
Possible values are:
CLIENT_TO_AGENT,AGENT_TO_ANYWHERE. - agent_
connectivity_ strtemplate_ id - Short name of the AgentConnectivityTemplate resource.
- location str
- The location of the AgentConnectivityTemplate.
- access_
types Sequence[str] - The types of network access provided to the gateway.
Both PUBLIC and PRIVATE can be configured.
Each value may be one of:
PUBLIC,PRIVATE. - agent_
compute str - The compute environment where the agent is hosted.
Exactly one type of compute must be chosen.
Possible values are:
GKE,CLOUD_RUN. - deletion_
policy str - Whether Terraform will be prevented from destroying the resource. Defaults to DELETE. When a 'terraform destroy' or 'pulumi up' would delete the resource, the command will fail if this field is set to "PREVENT" in Terraform state. When set to "ABANDON", the command will remove the resource from Terraform management without updating or deleting the resource in the API. When set to "DELETE", deleting the resource is allowed.
- deployment_
model str - The deployment model for the gateway.
Possible values are:
CENTRALIZED,AMBIENT. - description str
- A free-text description of the resource. Max length 1024 characters.
- egress_
network_ Agentconfig Connectivity Template Egress Network Config Args - Configuration for egress network traffic. Structure is documented below.
- labels Mapping[str, str]
Set of label tags associated with the AgentConnectivityTemplate resource.
Note: This field is non-authoritative, and will only manage the labels present in your configuration. Please refer to the field
effectiveLabelsfor all of the labels present on the resource.- project str
- The ID of the project in which the resource belongs. If it is not provided, the provider project is used.
- access
Path String - The path of the access.
The path is immutable once set. Exactly one path can be set.
Possible values are:
CLIENT_TO_AGENT,AGENT_TO_ANYWHERE. - agent
Connectivity StringTemplate Id - Short name of the AgentConnectivityTemplate resource.
- location String
- The location of the AgentConnectivityTemplate.
- access
Types List<String> - The types of network access provided to the gateway.
Both PUBLIC and PRIVATE can be configured.
Each value may be one of:
PUBLIC,PRIVATE. - agent
Compute String - The compute environment where the agent is hosted.
Exactly one type of compute must be chosen.
Possible values are:
GKE,CLOUD_RUN. - deletion
Policy String - Whether Terraform will be prevented from destroying the resource. Defaults to DELETE. When a 'terraform destroy' or 'pulumi up' would delete the resource, the command will fail if this field is set to "PREVENT" in Terraform state. When set to "ABANDON", the command will remove the resource from Terraform management without updating or deleting the resource in the API. When set to "DELETE", deleting the resource is allowed.
- deployment
Model String - The deployment model for the gateway.
Possible values are:
CENTRALIZED,AMBIENT. - description String
- A free-text description of the resource. Max length 1024 characters.
- egress
Network Property MapConfig - Configuration for egress network traffic. Structure is documented below.
- labels Map<String>
Set of label tags associated with the AgentConnectivityTemplate resource.
Note: This field is non-authoritative, and will only manage the labels present in your configuration. Please refer to the field
effectiveLabelsfor all of the labels present on the resource.- project String
- The ID of the project in which the resource belongs. If it is not provided, the provider project is used.
Outputs
All input properties are implicitly available as output properties. Additionally, the AgentConnectivityTemplate resource produces the following output properties:
- Create
Time string - The timestamp when the resource was created.
- Effective
Labels Dictionary<string, string> - All of labels (key/value pairs) present on the resource in GCP, including the labels configured through Pulumi, other clients and services.
- Etag string
- Etag of the resource. If this is provided, it must match the server's etag. If the provided etag does not match the server's etag, the request will fail with a 409 ABORTED error.
- Id string
- The provider-assigned unique ID for this managed resource.
- Name string
- Identifier. Name of the resource.
- Pulumi
Labels Dictionary<string, string> - The combination of labels configured directly on the resource and default labels configured on the provider.
- Update
Time string - The timestamp when the resource was updated.
- Create
Time string - The timestamp when the resource was created.
- Effective
Labels map[string]string - All of labels (key/value pairs) present on the resource in GCP, including the labels configured through Pulumi, other clients and services.
- Etag string
- Etag of the resource. If this is provided, it must match the server's etag. If the provided etag does not match the server's etag, the request will fail with a 409 ABORTED error.
- Id string
- The provider-assigned unique ID for this managed resource.
- Name string
- Identifier. Name of the resource.
- Pulumi
Labels map[string]string - The combination of labels configured directly on the resource and default labels configured on the provider.
- Update
Time string - The timestamp when the resource was updated.
- create_
time string - The timestamp when the resource was created.
- effective_
labels map(string) - All of labels (key/value pairs) present on the resource in GCP, including the labels configured through Pulumi, other clients and services.
- etag string
- Etag of the resource. If this is provided, it must match the server's etag. If the provided etag does not match the server's etag, the request will fail with a 409 ABORTED error.
- id string
- The provider-assigned unique ID for this managed resource.
- name string
- Identifier. Name of the resource.
- pulumi_
labels map(string) - The combination of labels configured directly on the resource and default labels configured on the provider.
- update_
time string - The timestamp when the resource was updated.
- create
Time String - The timestamp when the resource was created.
- effective
Labels Map<String,String> - All of labels (key/value pairs) present on the resource in GCP, including the labels configured through Pulumi, other clients and services.
- etag String
- Etag of the resource. If this is provided, it must match the server's etag. If the provided etag does not match the server's etag, the request will fail with a 409 ABORTED error.
- id String
- The provider-assigned unique ID for this managed resource.
- name String
- Identifier. Name of the resource.
- pulumi
Labels Map<String,String> - The combination of labels configured directly on the resource and default labels configured on the provider.
- update
Time String - The timestamp when the resource was updated.
- create
Time string - The timestamp when the resource was created.
- effective
Labels {[key: string]: string} - All of labels (key/value pairs) present on the resource in GCP, including the labels configured through Pulumi, other clients and services.
- etag string
- Etag of the resource. If this is provided, it must match the server's etag. If the provided etag does not match the server's etag, the request will fail with a 409 ABORTED error.
- id string
- The provider-assigned unique ID for this managed resource.
- name string
- Identifier. Name of the resource.
- pulumi
Labels {[key: string]: string} - The combination of labels configured directly on the resource and default labels configured on the provider.
- update
Time string - The timestamp when the resource was updated.
- create_
time str - The timestamp when the resource was created.
- effective_
labels Mapping[str, str] - All of labels (key/value pairs) present on the resource in GCP, including the labels configured through Pulumi, other clients and services.
- etag str
- Etag of the resource. If this is provided, it must match the server's etag. If the provided etag does not match the server's etag, the request will fail with a 409 ABORTED error.
- id str
- The provider-assigned unique ID for this managed resource.
- name str
- Identifier. Name of the resource.
- pulumi_
labels Mapping[str, str] - The combination of labels configured directly on the resource and default labels configured on the provider.
- update_
time str - The timestamp when the resource was updated.
- create
Time String - The timestamp when the resource was created.
- effective
Labels Map<String> - All of labels (key/value pairs) present on the resource in GCP, including the labels configured through Pulumi, other clients and services.
- etag String
- Etag of the resource. If this is provided, it must match the server's etag. If the provided etag does not match the server's etag, the request will fail with a 409 ABORTED error.
- id String
- The provider-assigned unique ID for this managed resource.
- name String
- Identifier. Name of the resource.
- pulumi
Labels Map<String> - The combination of labels configured directly on the resource and default labels configured on the provider.
- update
Time String - The timestamp when the resource was updated.
Look up Existing AgentConnectivityTemplate Resource
Get an existing AgentConnectivityTemplate resource’s state with the given name, ID, and optional extra properties used to qualify the lookup.
public static get(name: string, id: Input<ID>, state?: AgentConnectivityTemplateState, opts?: CustomResourceOptions): AgentConnectivityTemplate@staticmethod
def get(resource_name: str,
id: str,
opts: Optional[ResourceOptions] = None,
access_path: Optional[str] = None,
access_types: Optional[Sequence[str]] = None,
agent_compute: Optional[str] = None,
agent_connectivity_template_id: Optional[str] = None,
create_time: Optional[str] = None,
deletion_policy: Optional[str] = None,
deployment_model: Optional[str] = None,
description: Optional[str] = None,
effective_labels: Optional[Mapping[str, str]] = None,
egress_network_config: Optional[AgentConnectivityTemplateEgressNetworkConfigArgs] = None,
etag: Optional[str] = None,
labels: Optional[Mapping[str, str]] = None,
location: Optional[str] = None,
name: Optional[str] = None,
project: Optional[str] = None,
pulumi_labels: Optional[Mapping[str, str]] = None,
update_time: Optional[str] = None) -> AgentConnectivityTemplatefunc GetAgentConnectivityTemplate(ctx *Context, name string, id IDInput, state *AgentConnectivityTemplateState, opts ...ResourceOption) (*AgentConnectivityTemplate, error)public static AgentConnectivityTemplate Get(string name, Input<string> id, AgentConnectivityTemplateState? state, CustomResourceOptions? opts = null)public static AgentConnectivityTemplate get(String name, Output<String> id, AgentConnectivityTemplateState state, CustomResourceOptions options)resources: _: type: gcp:networkservices:AgentConnectivityTemplate get: id: ${id}import {
to = gcp_networkservices_agent_connectivity_template.example
id = "${id}"
}
- name
- The unique name of the resulting resource.
- id
- The unique provider ID of the resource to lookup.
- state
- Any extra arguments used during the lookup.
- opts
- A bag of options that control this resource's behavior.
- resource_name
- The unique name of the resulting resource.
- id
- The unique provider ID of the resource to lookup.
- name
- The unique name of the resulting resource.
- id
- The unique provider ID of the resource to lookup.
- state
- Any extra arguments used during the lookup.
- opts
- A bag of options that control this resource's behavior.
- name
- The unique name of the resulting resource.
- id
- The unique provider ID of the resource to lookup.
- state
- Any extra arguments used during the lookup.
- opts
- A bag of options that control this resource's behavior.
- name
- The unique name of the resulting resource.
- id
- The unique provider ID of the resource to lookup.
- state
- Any extra arguments used during the lookup.
- opts
- A bag of options that control this resource's behavior.
- Access
Path string - The path of the access.
The path is immutable once set. Exactly one path can be set.
Possible values are:
CLIENT_TO_AGENT,AGENT_TO_ANYWHERE. - Access
Types List<string> - The types of network access provided to the gateway.
Both PUBLIC and PRIVATE can be configured.
Each value may be one of:
PUBLIC,PRIVATE. - Agent
Compute string - The compute environment where the agent is hosted.
Exactly one type of compute must be chosen.
Possible values are:
GKE,CLOUD_RUN. - Agent
Connectivity stringTemplate Id - Short name of the AgentConnectivityTemplate resource.
- Create
Time string - The timestamp when the resource was created.
- Deletion
Policy string - Whether Terraform will be prevented from destroying the resource. Defaults to DELETE. When a 'terraform destroy' or 'pulumi up' would delete the resource, the command will fail if this field is set to "PREVENT" in Terraform state. When set to "ABANDON", the command will remove the resource from Terraform management without updating or deleting the resource in the API. When set to "DELETE", deleting the resource is allowed.
- Deployment
Model string - The deployment model for the gateway.
Possible values are:
CENTRALIZED,AMBIENT. - Description string
- A free-text description of the resource. Max length 1024 characters.
- Effective
Labels Dictionary<string, string> - All of labels (key/value pairs) present on the resource in GCP, including the labels configured through Pulumi, other clients and services.
- Egress
Network AgentConfig Connectivity Template Egress Network Config - Configuration for egress network traffic. Structure is documented below.
- Etag string
- Etag of the resource. If this is provided, it must match the server's etag. If the provided etag does not match the server's etag, the request will fail with a 409 ABORTED error.
- Labels Dictionary<string, string>
Set of label tags associated with the AgentConnectivityTemplate resource.
Note: This field is non-authoritative, and will only manage the labels present in your configuration. Please refer to the field
effectiveLabelsfor all of the labels present on the resource.- Location string
- The location of the AgentConnectivityTemplate.
- Name string
- Identifier. Name of the resource.
- Project string
- The ID of the project in which the resource belongs. If it is not provided, the provider project is used.
- Pulumi
Labels Dictionary<string, string> - The combination of labels configured directly on the resource and default labels configured on the provider.
- Update
Time string - The timestamp when the resource was updated.
- Access
Path string - The path of the access.
The path is immutable once set. Exactly one path can be set.
Possible values are:
CLIENT_TO_AGENT,AGENT_TO_ANYWHERE. - Access
Types []string - The types of network access provided to the gateway.
Both PUBLIC and PRIVATE can be configured.
Each value may be one of:
PUBLIC,PRIVATE. - Agent
Compute string - The compute environment where the agent is hosted.
Exactly one type of compute must be chosen.
Possible values are:
GKE,CLOUD_RUN. - Agent
Connectivity stringTemplate Id - Short name of the AgentConnectivityTemplate resource.
- Create
Time string - The timestamp when the resource was created.
- Deletion
Policy string - Whether Terraform will be prevented from destroying the resource. Defaults to DELETE. When a 'terraform destroy' or 'pulumi up' would delete the resource, the command will fail if this field is set to "PREVENT" in Terraform state. When set to "ABANDON", the command will remove the resource from Terraform management without updating or deleting the resource in the API. When set to "DELETE", deleting the resource is allowed.
- Deployment
Model string - The deployment model for the gateway.
Possible values are:
CENTRALIZED,AMBIENT. - Description string
- A free-text description of the resource. Max length 1024 characters.
- Effective
Labels map[string]string - All of labels (key/value pairs) present on the resource in GCP, including the labels configured through Pulumi, other clients and services.
- Egress
Network AgentConfig Connectivity Template Egress Network Config Args - Configuration for egress network traffic. Structure is documented below.
- Etag string
- Etag of the resource. If this is provided, it must match the server's etag. If the provided etag does not match the server's etag, the request will fail with a 409 ABORTED error.
- Labels map[string]string
Set of label tags associated with the AgentConnectivityTemplate resource.
Note: This field is non-authoritative, and will only manage the labels present in your configuration. Please refer to the field
effectiveLabelsfor all of the labels present on the resource.- Location string
- The location of the AgentConnectivityTemplate.
- Name string
- Identifier. Name of the resource.
- Project string
- The ID of the project in which the resource belongs. If it is not provided, the provider project is used.
- Pulumi
Labels map[string]string - The combination of labels configured directly on the resource and default labels configured on the provider.
- Update
Time string - The timestamp when the resource was updated.
- access_
path string - The path of the access.
The path is immutable once set. Exactly one path can be set.
Possible values are:
CLIENT_TO_AGENT,AGENT_TO_ANYWHERE. - access_
types list(string) - The types of network access provided to the gateway.
Both PUBLIC and PRIVATE can be configured.
Each value may be one of:
PUBLIC,PRIVATE. - agent_
compute string - The compute environment where the agent is hosted.
Exactly one type of compute must be chosen.
Possible values are:
GKE,CLOUD_RUN. - agent_
connectivity_ stringtemplate_ id - Short name of the AgentConnectivityTemplate resource.
- create_
time string - The timestamp when the resource was created.
- deletion_
policy string - Whether Terraform will be prevented from destroying the resource. Defaults to DELETE. When a 'terraform destroy' or 'pulumi up' would delete the resource, the command will fail if this field is set to "PREVENT" in Terraform state. When set to "ABANDON", the command will remove the resource from Terraform management without updating or deleting the resource in the API. When set to "DELETE", deleting the resource is allowed.
- deployment_
model string - The deployment model for the gateway.
Possible values are:
CENTRALIZED,AMBIENT. - description string
- A free-text description of the resource. Max length 1024 characters.
- effective_
labels map(string) - All of labels (key/value pairs) present on the resource in GCP, including the labels configured through Pulumi, other clients and services.
- egress_
network_ objectconfig - Configuration for egress network traffic. Structure is documented below.
- etag string
- Etag of the resource. If this is provided, it must match the server's etag. If the provided etag does not match the server's etag, the request will fail with a 409 ABORTED error.
- labels map(string)
Set of label tags associated with the AgentConnectivityTemplate resource.
Note: This field is non-authoritative, and will only manage the labels present in your configuration. Please refer to the field
effectiveLabelsfor all of the labels present on the resource.- location string
- The location of the AgentConnectivityTemplate.
- name string
- Identifier. Name of the resource.
- project string
- The ID of the project in which the resource belongs. If it is not provided, the provider project is used.
- pulumi_
labels map(string) - The combination of labels configured directly on the resource and default labels configured on the provider.
- update_
time string - The timestamp when the resource was updated.
- access
Path String - The path of the access.
The path is immutable once set. Exactly one path can be set.
Possible values are:
CLIENT_TO_AGENT,AGENT_TO_ANYWHERE. - access
Types List<String> - The types of network access provided to the gateway.
Both PUBLIC and PRIVATE can be configured.
Each value may be one of:
PUBLIC,PRIVATE. - agent
Compute String - The compute environment where the agent is hosted.
Exactly one type of compute must be chosen.
Possible values are:
GKE,CLOUD_RUN. - agent
Connectivity StringTemplate Id - Short name of the AgentConnectivityTemplate resource.
- create
Time String - The timestamp when the resource was created.
- deletion
Policy String - Whether Terraform will be prevented from destroying the resource. Defaults to DELETE. When a 'terraform destroy' or 'pulumi up' would delete the resource, the command will fail if this field is set to "PREVENT" in Terraform state. When set to "ABANDON", the command will remove the resource from Terraform management without updating or deleting the resource in the API. When set to "DELETE", deleting the resource is allowed.
- deployment
Model String - The deployment model for the gateway.
Possible values are:
CENTRALIZED,AMBIENT. - description String
- A free-text description of the resource. Max length 1024 characters.
- effective
Labels Map<String,String> - All of labels (key/value pairs) present on the resource in GCP, including the labels configured through Pulumi, other clients and services.
- egress
Network AgentConfig Connectivity Template Egress Network Config - Configuration for egress network traffic. Structure is documented below.
- etag String
- Etag of the resource. If this is provided, it must match the server's etag. If the provided etag does not match the server's etag, the request will fail with a 409 ABORTED error.
- labels Map<String,String>
Set of label tags associated with the AgentConnectivityTemplate resource.
Note: This field is non-authoritative, and will only manage the labels present in your configuration. Please refer to the field
effectiveLabelsfor all of the labels present on the resource.- location String
- The location of the AgentConnectivityTemplate.
- name String
- Identifier. Name of the resource.
- project String
- The ID of the project in which the resource belongs. If it is not provided, the provider project is used.
- pulumi
Labels Map<String,String> - The combination of labels configured directly on the resource and default labels configured on the provider.
- update
Time String - The timestamp when the resource was updated.
- access
Path string - The path of the access.
The path is immutable once set. Exactly one path can be set.
Possible values are:
CLIENT_TO_AGENT,AGENT_TO_ANYWHERE. - access
Types string[] - The types of network access provided to the gateway.
Both PUBLIC and PRIVATE can be configured.
Each value may be one of:
PUBLIC,PRIVATE. - agent
Compute string - The compute environment where the agent is hosted.
Exactly one type of compute must be chosen.
Possible values are:
GKE,CLOUD_RUN. - agent
Connectivity stringTemplate Id - Short name of the AgentConnectivityTemplate resource.
- create
Time string - The timestamp when the resource was created.
- deletion
Policy string - Whether Terraform will be prevented from destroying the resource. Defaults to DELETE. When a 'terraform destroy' or 'pulumi up' would delete the resource, the command will fail if this field is set to "PREVENT" in Terraform state. When set to "ABANDON", the command will remove the resource from Terraform management without updating or deleting the resource in the API. When set to "DELETE", deleting the resource is allowed.
- deployment
Model string - The deployment model for the gateway.
Possible values are:
CENTRALIZED,AMBIENT. - description string
- A free-text description of the resource. Max length 1024 characters.
- effective
Labels {[key: string]: string} - All of labels (key/value pairs) present on the resource in GCP, including the labels configured through Pulumi, other clients and services.
- egress
Network AgentConfig Connectivity Template Egress Network Config - Configuration for egress network traffic. Structure is documented below.
- etag string
- Etag of the resource. If this is provided, it must match the server's etag. If the provided etag does not match the server's etag, the request will fail with a 409 ABORTED error.
- labels {[key: string]: string}
Set of label tags associated with the AgentConnectivityTemplate resource.
Note: This field is non-authoritative, and will only manage the labels present in your configuration. Please refer to the field
effectiveLabelsfor all of the labels present on the resource.- location string
- The location of the AgentConnectivityTemplate.
- name string
- Identifier. Name of the resource.
- project string
- The ID of the project in which the resource belongs. If it is not provided, the provider project is used.
- pulumi
Labels {[key: string]: string} - The combination of labels configured directly on the resource and default labels configured on the provider.
- update
Time string - The timestamp when the resource was updated.
- access_
path str - The path of the access.
The path is immutable once set. Exactly one path can be set.
Possible values are:
CLIENT_TO_AGENT,AGENT_TO_ANYWHERE. - access_
types Sequence[str] - The types of network access provided to the gateway.
Both PUBLIC and PRIVATE can be configured.
Each value may be one of:
PUBLIC,PRIVATE. - agent_
compute str - The compute environment where the agent is hosted.
Exactly one type of compute must be chosen.
Possible values are:
GKE,CLOUD_RUN. - agent_
connectivity_ strtemplate_ id - Short name of the AgentConnectivityTemplate resource.
- create_
time str - The timestamp when the resource was created.
- deletion_
policy str - Whether Terraform will be prevented from destroying the resource. Defaults to DELETE. When a 'terraform destroy' or 'pulumi up' would delete the resource, the command will fail if this field is set to "PREVENT" in Terraform state. When set to "ABANDON", the command will remove the resource from Terraform management without updating or deleting the resource in the API. When set to "DELETE", deleting the resource is allowed.
- deployment_
model str - The deployment model for the gateway.
Possible values are:
CENTRALIZED,AMBIENT. - description str
- A free-text description of the resource. Max length 1024 characters.
- effective_
labels Mapping[str, str] - All of labels (key/value pairs) present on the resource in GCP, including the labels configured through Pulumi, other clients and services.
- egress_
network_ Agentconfig Connectivity Template Egress Network Config Args - Configuration for egress network traffic. Structure is documented below.
- etag str
- Etag of the resource. If this is provided, it must match the server's etag. If the provided etag does not match the server's etag, the request will fail with a 409 ABORTED error.
- labels Mapping[str, str]
Set of label tags associated with the AgentConnectivityTemplate resource.
Note: This field is non-authoritative, and will only manage the labels present in your configuration. Please refer to the field
effectiveLabelsfor all of the labels present on the resource.- location str
- The location of the AgentConnectivityTemplate.
- name str
- Identifier. Name of the resource.
- project str
- The ID of the project in which the resource belongs. If it is not provided, the provider project is used.
- pulumi_
labels Mapping[str, str] - The combination of labels configured directly on the resource and default labels configured on the provider.
- update_
time str - The timestamp when the resource was updated.
- access
Path String - The path of the access.
The path is immutable once set. Exactly one path can be set.
Possible values are:
CLIENT_TO_AGENT,AGENT_TO_ANYWHERE. - access
Types List<String> - The types of network access provided to the gateway.
Both PUBLIC and PRIVATE can be configured.
Each value may be one of:
PUBLIC,PRIVATE. - agent
Compute String - The compute environment where the agent is hosted.
Exactly one type of compute must be chosen.
Possible values are:
GKE,CLOUD_RUN. - agent
Connectivity StringTemplate Id - Short name of the AgentConnectivityTemplate resource.
- create
Time String - The timestamp when the resource was created.
- deletion
Policy String - Whether Terraform will be prevented from destroying the resource. Defaults to DELETE. When a 'terraform destroy' or 'pulumi up' would delete the resource, the command will fail if this field is set to "PREVENT" in Terraform state. When set to "ABANDON", the command will remove the resource from Terraform management without updating or deleting the resource in the API. When set to "DELETE", deleting the resource is allowed.
- deployment
Model String - The deployment model for the gateway.
Possible values are:
CENTRALIZED,AMBIENT. - description String
- A free-text description of the resource. Max length 1024 characters.
- effective
Labels Map<String> - All of labels (key/value pairs) present on the resource in GCP, including the labels configured through Pulumi, other clients and services.
- egress
Network Property MapConfig - Configuration for egress network traffic. Structure is documented below.
- etag String
- Etag of the resource. If this is provided, it must match the server's etag. If the provided etag does not match the server's etag, the request will fail with a 409 ABORTED error.
- labels Map<String>
Set of label tags associated with the AgentConnectivityTemplate resource.
Note: This field is non-authoritative, and will only manage the labels present in your configuration. Please refer to the field
effectiveLabelsfor all of the labels present on the resource.- location String
- The location of the AgentConnectivityTemplate.
- name String
- Identifier. Name of the resource.
- project String
- The ID of the project in which the resource belongs. If it is not provided, the provider project is used.
- pulumi
Labels Map<String> - The combination of labels configured directly on the resource and default labels configured on the provider.
- update
Time String - The timestamp when the resource was updated.
Supporting Types
AgentConnectivityTemplateEgressNetworkConfig, AgentConnectivityTemplateEgressNetworkConfigArgs
- Dns
Peering AgentConfig Connectivity Template Egress Network Config Dns Peering Config - DNS peering configuration for the AgentConnectivityTemplate.
When set, the gateway will resolve queries for the configured
domainsvia Cloud DNS in the specifiedtargetNetwork. Structure is documented below. - Network
Attachment string - The network attachment resource name. Format: projects/{project}/regions/{region}/networkAttachments/{network_attachment_id}
- Tls
Config AgentConnectivity Template Egress Network Config Tls Config - The TLS configuration for the egress traffic. Structure is documented below.
- Vpc
Egress string - The VPC egress setting.
Possible values are:
ALL_TRAFFIC,PRIVATE_RANGES_ONLY.
- Dns
Peering AgentConfig Connectivity Template Egress Network Config Dns Peering Config - DNS peering configuration for the AgentConnectivityTemplate.
When set, the gateway will resolve queries for the configured
domainsvia Cloud DNS in the specifiedtargetNetwork. Structure is documented below. - Network
Attachment string - The network attachment resource name. Format: projects/{project}/regions/{region}/networkAttachments/{network_attachment_id}
- Tls
Config AgentConnectivity Template Egress Network Config Tls Config - The TLS configuration for the egress traffic. Structure is documented below.
- Vpc
Egress string - The VPC egress setting.
Possible values are:
ALL_TRAFFIC,PRIVATE_RANGES_ONLY.
- dns_
peering_ objectconfig - DNS peering configuration for the AgentConnectivityTemplate.
When set, the gateway will resolve queries for the configured
domainsvia Cloud DNS in the specifiedtargetNetwork. Structure is documented below. - network_
attachment string - The network attachment resource name. Format: projects/{project}/regions/{region}/networkAttachments/{network_attachment_id}
- tls_
config object - The TLS configuration for the egress traffic. Structure is documented below.
- vpc_
egress string - The VPC egress setting.
Possible values are:
ALL_TRAFFIC,PRIVATE_RANGES_ONLY.
- dns
Peering AgentConfig Connectivity Template Egress Network Config Dns Peering Config - DNS peering configuration for the AgentConnectivityTemplate.
When set, the gateway will resolve queries for the configured
domainsvia Cloud DNS in the specifiedtargetNetwork. Structure is documented below. - network
Attachment String - The network attachment resource name. Format: projects/{project}/regions/{region}/networkAttachments/{network_attachment_id}
- tls
Config AgentConnectivity Template Egress Network Config Tls Config - The TLS configuration for the egress traffic. Structure is documented below.
- vpc
Egress String - The VPC egress setting.
Possible values are:
ALL_TRAFFIC,PRIVATE_RANGES_ONLY.
- dns
Peering AgentConfig Connectivity Template Egress Network Config Dns Peering Config - DNS peering configuration for the AgentConnectivityTemplate.
When set, the gateway will resolve queries for the configured
domainsvia Cloud DNS in the specifiedtargetNetwork. Structure is documented below. - network
Attachment string - The network attachment resource name. Format: projects/{project}/regions/{region}/networkAttachments/{network_attachment_id}
- tls
Config AgentConnectivity Template Egress Network Config Tls Config - The TLS configuration for the egress traffic. Structure is documented below.
- vpc
Egress string - The VPC egress setting.
Possible values are:
ALL_TRAFFIC,PRIVATE_RANGES_ONLY.
- dns_
peering_ Agentconfig Connectivity Template Egress Network Config Dns Peering Config - DNS peering configuration for the AgentConnectivityTemplate.
When set, the gateway will resolve queries for the configured
domainsvia Cloud DNS in the specifiedtargetNetwork. Structure is documented below. - network_
attachment str - The network attachment resource name. Format: projects/{project}/regions/{region}/networkAttachments/{network_attachment_id}
- tls_
config AgentConnectivity Template Egress Network Config Tls Config - The TLS configuration for the egress traffic. Structure is documented below.
- vpc_
egress str - The VPC egress setting.
Possible values are:
ALL_TRAFFIC,PRIVATE_RANGES_ONLY.
- dns
Peering Property MapConfig - DNS peering configuration for the AgentConnectivityTemplate.
When set, the gateway will resolve queries for the configured
domainsvia Cloud DNS in the specifiedtargetNetwork. Structure is documented below. - network
Attachment String - The network attachment resource name. Format: projects/{project}/regions/{region}/networkAttachments/{network_attachment_id}
- tls
Config Property Map - The TLS configuration for the egress traffic. Structure is documented below.
- vpc
Egress String - The VPC egress setting.
Possible values are:
ALL_TRAFFIC,PRIVATE_RANGES_ONLY.
AgentConnectivityTemplateEgressNetworkConfigDnsPeeringConfig, AgentConnectivityTemplateEgressNetworkConfigDnsPeeringConfigArgs
- Target
Network string - The URI of the target VPC network for DNS peering. Must be of the
form
projects/{project}/global/networks/{network}. - Domain string
(Optional, Deprecated) The domain name to peer for DNS resolution. Must be a fully qualified domain name ending with a dot (for example,
example.com.).Warning:
domainis deprecated and will be removed in a future major release. Usedomainsinstead.- Domains List<string>
- The list of domain names to peer for DNS resolution. Each entry
must be a fully qualified domain name ending with a dot
(for example,
example.com.). At least one domain must be specified betweendomainanddomains.
- Target
Network string - The URI of the target VPC network for DNS peering. Must be of the
form
projects/{project}/global/networks/{network}. - Domain string
(Optional, Deprecated) The domain name to peer for DNS resolution. Must be a fully qualified domain name ending with a dot (for example,
example.com.).Warning:
domainis deprecated and will be removed in a future major release. Usedomainsinstead.- Domains []string
- The list of domain names to peer for DNS resolution. Each entry
must be a fully qualified domain name ending with a dot
(for example,
example.com.). At least one domain must be specified betweendomainanddomains.
- target_
network string - The URI of the target VPC network for DNS peering. Must be of the
form
projects/{project}/global/networks/{network}. - domain string
(Optional, Deprecated) The domain name to peer for DNS resolution. Must be a fully qualified domain name ending with a dot (for example,
example.com.).Warning:
domainis deprecated and will be removed in a future major release. Usedomainsinstead.- domains list(string)
- The list of domain names to peer for DNS resolution. Each entry
must be a fully qualified domain name ending with a dot
(for example,
example.com.). At least one domain must be specified betweendomainanddomains.
- target
Network String - The URI of the target VPC network for DNS peering. Must be of the
form
projects/{project}/global/networks/{network}. - domain String
(Optional, Deprecated) The domain name to peer for DNS resolution. Must be a fully qualified domain name ending with a dot (for example,
example.com.).Warning:
domainis deprecated and will be removed in a future major release. Usedomainsinstead.- domains List<String>
- The list of domain names to peer for DNS resolution. Each entry
must be a fully qualified domain name ending with a dot
(for example,
example.com.). At least one domain must be specified betweendomainanddomains.
- target
Network string - The URI of the target VPC network for DNS peering. Must be of the
form
projects/{project}/global/networks/{network}. - domain string
(Optional, Deprecated) The domain name to peer for DNS resolution. Must be a fully qualified domain name ending with a dot (for example,
example.com.).Warning:
domainis deprecated and will be removed in a future major release. Usedomainsinstead.- domains string[]
- The list of domain names to peer for DNS resolution. Each entry
must be a fully qualified domain name ending with a dot
(for example,
example.com.). At least one domain must be specified betweendomainanddomains.
- target_
network str - The URI of the target VPC network for DNS peering. Must be of the
form
projects/{project}/global/networks/{network}. - domain str
(Optional, Deprecated) The domain name to peer for DNS resolution. Must be a fully qualified domain name ending with a dot (for example,
example.com.).Warning:
domainis deprecated and will be removed in a future major release. Usedomainsinstead.- domains Sequence[str]
- The list of domain names to peer for DNS resolution. Each entry
must be a fully qualified domain name ending with a dot
(for example,
example.com.). At least one domain must be specified betweendomainanddomains.
- target
Network String - The URI of the target VPC network for DNS peering. Must be of the
form
projects/{project}/global/networks/{network}. - domain String
(Optional, Deprecated) The domain name to peer for DNS resolution. Must be a fully qualified domain name ending with a dot (for example,
example.com.).Warning:
domainis deprecated and will be removed in a future major release. Usedomainsinstead.- domains List<String>
- The list of domain names to peer for DNS resolution. Each entry
must be a fully qualified domain name ending with a dot
(for example,
example.com.). At least one domain must be specified betweendomainanddomains.
AgentConnectivityTemplateEgressNetworkConfigTlsConfig, AgentConnectivityTemplateEgressNetworkConfigTlsConfigArgs
- Additional
Roots string - Defines whether additional roots should be trusted.
Possible values are:
NO_ADDITIONAL_ROOTS,PUBLICLY_TRUSTED_ROOTS. - Trust
Config string - The trust config resource name. Format: projects/{project}/locations/{location}/trustConfigs/{trust_config}
- Additional
Roots string - Defines whether additional roots should be trusted.
Possible values are:
NO_ADDITIONAL_ROOTS,PUBLICLY_TRUSTED_ROOTS. - Trust
Config string - The trust config resource name. Format: projects/{project}/locations/{location}/trustConfigs/{trust_config}
- additional_
roots string - Defines whether additional roots should be trusted.
Possible values are:
NO_ADDITIONAL_ROOTS,PUBLICLY_TRUSTED_ROOTS. - trust_
config string - The trust config resource name. Format: projects/{project}/locations/{location}/trustConfigs/{trust_config}
- additional
Roots String - Defines whether additional roots should be trusted.
Possible values are:
NO_ADDITIONAL_ROOTS,PUBLICLY_TRUSTED_ROOTS. - trust
Config String - The trust config resource name. Format: projects/{project}/locations/{location}/trustConfigs/{trust_config}
- additional
Roots string - Defines whether additional roots should be trusted.
Possible values are:
NO_ADDITIONAL_ROOTS,PUBLICLY_TRUSTED_ROOTS. - trust
Config string - The trust config resource name. Format: projects/{project}/locations/{location}/trustConfigs/{trust_config}
- additional_
roots str - Defines whether additional roots should be trusted.
Possible values are:
NO_ADDITIONAL_ROOTS,PUBLICLY_TRUSTED_ROOTS. - trust_
config str - The trust config resource name. Format: projects/{project}/locations/{location}/trustConfigs/{trust_config}
- additional
Roots String - Defines whether additional roots should be trusted.
Possible values are:
NO_ADDITIONAL_ROOTS,PUBLICLY_TRUSTED_ROOTS. - trust
Config String - The trust config resource name. Format: projects/{project}/locations/{location}/trustConfigs/{trust_config}
Import
AgentConnectivityTemplate can be imported using any of these accepted formats:
projects/{{project}}/locations/{{location}}/agentConnectivityTemplates/{{agent_connectivity_template_id}}{{project}}/{{location}}/{{agent_connectivity_template_id}}{{location}}/{{agent_connectivity_template_id}}
When using the pulumi import command, AgentConnectivityTemplate can be imported using one of the formats above. For example:
$ pulumi import gcp:networkservices/agentConnectivityTemplate:AgentConnectivityTemplate default projects/{{project}}/locations/{{location}}/agentConnectivityTemplates/{{agent_connectivity_template_id}}
$ pulumi import gcp:networkservices/agentConnectivityTemplate:AgentConnectivityTemplate default {{project}}/{{location}}/{{agent_connectivity_template_id}}
$ pulumi import gcp:networkservices/agentConnectivityTemplate:AgentConnectivityTemplate default {{location}}/{{agent_connectivity_template_id}}
To learn more about importing existing cloud resources, see Importing resources.
Package Details
- Repository
- Google Cloud (GCP) pulumi/pulumi-gcp
- License
- Apache-2.0
- Notes
- This Pulumi package is based on the
google-betaTerraform Provider.
published on Tuesday, Oct 20, 2026 by Pulumi