gcp_networkservices_gateway

addresses

Type: UNORDERED_LIST_STRING
Provider name: addresses
Description: Optional. Zero or one IPv4 or IPv6 address on which the Gateway will receive the traffic. When no address is provided, an IP from the subnetwork is allocated This field only applies to gateways of type ‘SECURE_WEB_GATEWAY’. Gateways of type ‘OPEN_MESH’ listen on 0.0.0.0 for IPv4 and :: for IPv6.

ancestors

Type: UNORDERED_LIST_STRING

certificate_urls

Type: UNORDERED_LIST_STRING
Provider name: certificateUrls
Description: Optional. A fully-qualified Certificates URL reference. The proxy presents a Certificate (selected based on SNI) when establishing a TLS connection. This feature only applies to gateways of type ‘SECURE_WEB_GATEWAY’.

create_time

Type: TIMESTAMP
Provider name: createTime
Description: Output only. The timestamp when the resource was created.

description

Type: STRING
Provider name: description
Description: Optional. A free-text description of the resource. Max length 1024 characters.

envoy_headers

Type: STRING
Provider name: envoyHeaders
Description: Optional. Determines if envoy will insert internal debug headers into upstream requests. Other Envoy headers may still be injected. By default, envoy will not insert any debug headers.
Possible values:

  • ENVOY_HEADERS_UNSPECIFIED - Defaults to NONE.
  • NONE - Suppress envoy debug headers.
  • DEBUG_HEADERS - Envoy will insert default internal debug headers into upstream requests: x-envoy-attempt-count x-envoy-is-timeout-retry x-envoy-expected-rq-timeout-ms x-envoy-original-path x-envoy-upstream-stream-duration-ms

gateway_security_policy

Type: STRING
Provider name: gatewaySecurityPolicy
Description: Optional. A fully-qualified GatewaySecurityPolicy URL reference. Defines how a server should apply security policy to inbound (VM to Proxy) initiated connections. For example: projects/*/locations/*/gatewaySecurityPolicies/swg-policy. This policy is specific to gateways of type ‘SECURE_WEB_GATEWAY’.

ip_version

Type: STRING
Provider name: ipVersion
Description: Optional. The IP Version that will be used by this gateway. Valid options are IPV4 or IPV6. Default is IPV4.
Possible values:

  • IP_VERSION_UNSPECIFIED - The type when IP version is not specified. Defaults to IPV4.
  • IPV4 - The type for IP version 4.
  • IPV6 - The type for IP version 6.

labels

Type: UNORDERED_LIST_STRING

name

Type: STRING
Provider name: name
Description: Identifier. Name of the Gateway resource. It matches pattern projects/*/locations/*/gateways/.

network

Type: STRING
Provider name: network
Description: Optional. The relative resource name identifying the VPC network that is using this configuration. For example: projects/*/global/networks/network-1. Currently, this field is specific to gateways of type ‘SECURE_WEB_GATEWAY’.

organization_id

Type: STRING

parent

Type: STRING

ports

Type: UNORDERED_LIST_INT32
Provider name: ports
Description: Required. One or more port numbers (1-65535), on which the Gateway will receive traffic. The proxy binds to the specified ports. Gateways of type ‘SECURE_WEB_GATEWAY’ are limited to 1 port. Gateways of type ‘OPEN_MESH’ listen on 0.0.0.0 for IPv4 and :: for IPv6 and support multiple ports.

project_id

Type: STRING

project_number

Type: STRING

resource_name

Type: STRING

routing_mode

Type: STRING
Provider name: routingMode
Description: Optional. The routing mode of the Gateway. This field is configurable only for gateways of type SECURE_WEB_GATEWAY. This field is required for gateways of type SECURE_WEB_GATEWAY.
Possible values:

  • EXPLICIT_ROUTING_MODE - The routing mode is explicit; clients are configured to send traffic through the gateway. This is the default routing mode.
  • NEXT_HOP_ROUTING_MODE - The routing mode is next-hop. Clients are unaware of the gateway, and a route (advanced route or other route type) can be configured to direct traffic from client to gateway. The gateway then acts as a next-hop to the destination.

scope

Type: STRING
Provider name: scope
Description: Optional. Scope determines how configuration across multiple Gateway instances are merged. The configuration for multiple Gateway instances with the same scope will be merged as presented as a single configuration to the proxy/load balancer. Max length 64 characters. Scope should start with a letter and can only have letters, numbers, hyphens.

Type: STRING
Provider name: selfLink
Description: Output only. Server-defined URL of this resource

server_tls_policy

Type: STRING
Provider name: serverTlsPolicy
Description: Optional. A fully-qualified ServerTLSPolicy URL reference. Specifies how TLS traffic is terminated. If empty, TLS termination is disabled.

subnetwork

Type: STRING
Provider name: subnetwork
Description: Optional. The relative resource name identifying the subnetwork in which this SWG is allocated. For example: projects/*/regions/us-central1/subnetworks/network-1 Currently, this field is specific to gateways of type ‘SECURE_WEB_GATEWAY".

tags

Type: UNORDERED_LIST_STRING

type

Type: STRING
Provider name: type
Description: Immutable. The type of the customer managed gateway. This field is required. If unspecified, an error is returned.
Possible values:

  • TYPE_UNSPECIFIED - The type of the customer managed gateway is unspecified.
  • OPEN_MESH - The type of the customer managed gateway is TrafficDirector Open Mesh.
  • SECURE_WEB_GATEWAY - The type of the customer managed gateway is SecureWebGateway (SWG).

update_time

Type: TIMESTAMP
Provider name: updateTime
Description: Output only. The timestamp when the resource was updated.

PREVIEWING: bryce/soar-blog