Docs Home Pulumi IaC Pulumi ESC Pulumi Cloud Packages Tutorials
  1. Packages
  2. Google Cloud Native
  3. API Docs
  4. compute
  5. compute/beta
  6. Subnetwork

Google Cloud Native is in preview. Google Cloud Classic is fully supported.

Google Cloud Native v0.32.0 published on Wednesday, Nov 29, 2023 by Pulumi
pulumi/pulumi-google-native

google-native.compute/beta.Subnetwork

Explore with Pulumi AI

google-native logo

Google Cloud Native is in preview. Google Cloud Classic is fully supported.

Google Cloud Native v0.32.0 published on Wednesday, Nov 29, 2023 by Pulumi
pulumi/pulumi-google-native

    Creates a subnetwork in the specified project using the data included in the request.

    Create Subnetwork Resource

    Resources are created with functions called constructors. To learn more about declaring and configuring resources, see Resources.

    Constructor syntax

    new Subnetwork(name: string, args: SubnetworkArgs, opts?: CustomResourceOptions);
    @overload
def Subnetwork(resource_name: str,
               args: SubnetworkArgs,
               opts: Optional[ResourceOptions] = None)

@overload
def Subnetwork(resource_name: str,
               opts: Optional[ResourceOptions] = None,
               region: Optional[str] = None,
               network: Optional[str] = None,
               external_ipv6_prefix: Optional[str] = None,
               private_ipv6_google_access: Optional[SubnetworkPrivateIpv6GoogleAccess] = None,
               project: Optional[str] = None,
               ipv6_access_type: Optional[SubnetworkIpv6AccessType] = None,
               log_config: Optional[SubnetworkLogConfigArgs] = None,
               name: Optional[str] = None,
               allow_subnet_cidr_routes_overlap: Optional[bool] = None,
               stack_type: Optional[SubnetworkStackType] = None,
               enable_flow_logs: Optional[bool] = None,
               ip_cidr_range: Optional[str] = None,
               purpose: Optional[SubnetworkPurpose] = None,
               description: Optional[str] = None,
               request_id: Optional[str] = None,
               reserved_internal_range: Optional[str] = None,
               role: Optional[SubnetworkRole] = None,
               secondary_ip_ranges: Optional[Sequence[SubnetworkSecondaryRangeArgs]] = None,
               private_ip_google_access: Optional[bool] = None)
    func NewSubnetwork(ctx *Context, name string, args SubnetworkArgs, opts ...ResourceOption) (*Subnetwork, error)
    public Subnetwork(string name, SubnetworkArgs args, CustomResourceOptions? opts = null)
    public Subnetwork(String name, SubnetworkArgs args)
public Subnetwork(String name, SubnetworkArgs args, CustomResourceOptions options)

    type: google-native:compute/beta:Subnetwork
properties: # The arguments to resource properties.
options: # Bag of options to control resource's behavior.

    Parameters

    name string
    The unique name of the resource.
    args SubnetworkArgs
    The arguments to resource properties.
    opts CustomResourceOptions
    Bag of options to control resource's behavior.
    resource_name str
    The unique name of the resource.
    args SubnetworkArgs
    The arguments to resource properties.
    opts ResourceOptions
    Bag of options to control resource's behavior.
    ctx Context
    Context object for the current deployment.
    name string
    The unique name of the resource.
    args SubnetworkArgs
    The arguments to resource properties.
    opts ResourceOption
    Bag of options to control resource's behavior.
    name string
    The unique name of the resource.
    args SubnetworkArgs
    The arguments to resource properties.
    opts CustomResourceOptions
    Bag of options to control resource's behavior.
    name String
    The unique name of the resource.
    args SubnetworkArgs
    The arguments to resource properties.
    options CustomResourceOptions
    Bag of options to control resource's behavior.

    Constructor example

    The following reference example uses placeholder values for all input properties.

    var google_nativeSubnetworkResource = new GoogleNative.Compute.Beta.Subnetwork("google-nativeSubnetworkResource", new()
{
    Region = "string",
    Network = "string",
    ExternalIpv6Prefix = "string",
    PrivateIpv6GoogleAccess = GoogleNative.Compute.Beta.SubnetworkPrivateIpv6GoogleAccess.DisableGoogleAccess,
    Project = "string",
    Ipv6AccessType = GoogleNative.Compute.Beta.SubnetworkIpv6AccessType.External,
    LogConfig = new GoogleNative.Compute.Beta.Inputs.SubnetworkLogConfigArgs
    {
        AggregationInterval = GoogleNative.Compute.Beta.SubnetworkLogConfigAggregationInterval.Interval10Min,
        Enable = false,
        FilterExpr = "string",
        FlowSampling = 0,
        Metadata = GoogleNative.Compute.Beta.SubnetworkLogConfigMetadata.CustomMetadata,
        MetadataFields = new[]
        {
            "string",
        },
    },
    Name = "string",
    AllowSubnetCidrRoutesOverlap = false,
    StackType = GoogleNative.Compute.Beta.SubnetworkStackType.Ipv4Ipv6,
    EnableFlowLogs = false,
    IpCidrRange = "string",
    Purpose = GoogleNative.Compute.Beta.SubnetworkPurpose.GlobalManagedProxy,
    Description = "string",
    RequestId = "string",
    ReservedInternalRange = "string",
    Role = GoogleNative.Compute.Beta.SubnetworkRole.Active,
    SecondaryIpRanges = new[]
    {
        new GoogleNative.Compute.Beta.Inputs.SubnetworkSecondaryRangeArgs
        {
            IpCidrRange = "string",
            RangeName = "string",
            ReservedInternalRange = "string",
        },
    },
    PrivateIpGoogleAccess = false,
});

    example, err := computebeta.NewSubnetwork(ctx, "google-nativeSubnetworkResource", &computebeta.SubnetworkArgs{
	Region:                  pulumi.String("string"),
	Network:                 pulumi.String("string"),
	ExternalIpv6Prefix:      pulumi.String("string"),
	PrivateIpv6GoogleAccess: computebeta.SubnetworkPrivateIpv6GoogleAccessDisableGoogleAccess,
	Project:                 pulumi.String("string"),
	Ipv6AccessType:          computebeta.SubnetworkIpv6AccessTypeExternal,
	LogConfig: &compute.SubnetworkLogConfigArgs{
		AggregationInterval: computebeta.SubnetworkLogConfigAggregationIntervalInterval10Min,
		Enable:              pulumi.Bool(false),
		FilterExpr:          pulumi.String("string"),
		FlowSampling:        pulumi.Float64(0),
		Metadata:            computebeta.SubnetworkLogConfigMetadataCustomMetadata,
		MetadataFields: pulumi.StringArray{
			pulumi.String("string"),
		},
	},
	Name:                         pulumi.String("string"),
	AllowSubnetCidrRoutesOverlap: pulumi.Bool(false),
	StackType:                    computebeta.SubnetworkStackTypeIpv4Ipv6,
	EnableFlowLogs:               pulumi.Bool(false),
	IpCidrRange:                  pulumi.String("string"),
	Purpose:                      computebeta.SubnetworkPurposeGlobalManagedProxy,
	Description:                  pulumi.String("string"),
	RequestId:                    pulumi.String("string"),
	ReservedInternalRange:        pulumi.String("string"),
	Role:                         computebeta.SubnetworkRoleActive,
	SecondaryIpRanges: compute.SubnetworkSecondaryRangeArray{
		&compute.SubnetworkSecondaryRangeArgs{
			IpCidrRange:           pulumi.String("string"),
			RangeName:             pulumi.String("string"),
			ReservedInternalRange: pulumi.String("string"),
		},
	},
	PrivateIpGoogleAccess: pulumi.Bool(false),
})

    var google_nativeSubnetworkResource = new Subnetwork("google-nativeSubnetworkResource", SubnetworkArgs.builder()
    .region("string")
    .network("string")
    .externalIpv6Prefix("string")
    .privateIpv6GoogleAccess("DISABLE_GOOGLE_ACCESS")
    .project("string")
    .ipv6AccessType("EXTERNAL")
    .logConfig(SubnetworkLogConfigArgs.builder()
        .aggregationInterval("INTERVAL_10_MIN")
        .enable(false)
        .filterExpr("string")
        .flowSampling(0)
        .metadata("CUSTOM_METADATA")
        .metadataFields("string")
        .build())
    .name("string")
    .allowSubnetCidrRoutesOverlap(false)
    .stackType("IPV4_IPV6")
    .enableFlowLogs(false)
    .ipCidrRange("string")
    .purpose("GLOBAL_MANAGED_PROXY")
    .description("string")
    .requestId("string")
    .reservedInternalRange("string")
    .role("ACTIVE")
    .secondaryIpRanges(SubnetworkSecondaryRangeArgs.builder()
        .ipCidrRange("string")
        .rangeName("string")
        .reservedInternalRange("string")
        .build())
    .privateIpGoogleAccess(false)
    .build());

    google_native_subnetwork_resource = google_native.compute.beta.Subnetwork("google-nativeSubnetworkResource",
    region="string",
    network="string",
    external_ipv6_prefix="string",
    private_ipv6_google_access=google_native.compute.beta.SubnetworkPrivateIpv6GoogleAccess.DISABLE_GOOGLE_ACCESS,
    project="string",
    ipv6_access_type=google_native.compute.beta.SubnetworkIpv6AccessType.EXTERNAL,
    log_config={
        "aggregation_interval": google_native.compute.beta.SubnetworkLogConfigAggregationInterval.INTERVAL10_MIN,
        "enable": False,
        "filter_expr": "string",
        "flow_sampling": 0,
        "metadata": google_native.compute.beta.SubnetworkLogConfigMetadata.CUSTOM_METADATA,
        "metadata_fields": ["string"],
    },
    name="string",
    allow_subnet_cidr_routes_overlap=False,
    stack_type=google_native.compute.beta.SubnetworkStackType.IPV4_IPV6,
    enable_flow_logs=False,
    ip_cidr_range="string",
    purpose=google_native.compute.beta.SubnetworkPurpose.GLOBAL_MANAGED_PROXY,
    description="string",
    request_id="string",
    reserved_internal_range="string",
    role=google_native.compute.beta.SubnetworkRole.ACTIVE,
    secondary_ip_ranges=[{
        "ip_cidr_range": "string",
        "range_name": "string",
        "reserved_internal_range": "string",
    }],
    private_ip_google_access=False)

    const google_nativeSubnetworkResource = new google_native.compute.beta.Subnetwork("google-nativeSubnetworkResource", {
    region: "string",
    network: "string",
    externalIpv6Prefix: "string",
    privateIpv6GoogleAccess: google_native.compute.beta.SubnetworkPrivateIpv6GoogleAccess.DisableGoogleAccess,
    project: "string",
    ipv6AccessType: google_native.compute.beta.SubnetworkIpv6AccessType.External,
    logConfig: {
        aggregationInterval: google_native.compute.beta.SubnetworkLogConfigAggregationInterval.Interval10Min,
        enable: false,
        filterExpr: "string",
        flowSampling: 0,
        metadata: google_native.compute.beta.SubnetworkLogConfigMetadata.CustomMetadata,
        metadataFields: ["string"],
    },
    name: "string",
    allowSubnetCidrRoutesOverlap: false,
    stackType: google_native.compute.beta.SubnetworkStackType.Ipv4Ipv6,
    enableFlowLogs: false,
    ipCidrRange: "string",
    purpose: google_native.compute.beta.SubnetworkPurpose.GlobalManagedProxy,
    description: "string",
    requestId: "string",
    reservedInternalRange: "string",
    role: google_native.compute.beta.SubnetworkRole.Active,
    secondaryIpRanges: [{
        ipCidrRange: "string",
        rangeName: "string",
        reservedInternalRange: "string",
    }],
    privateIpGoogleAccess: false,
});

    type: google-native:compute/beta:Subnetwork
properties:
    allowSubnetCidrRoutesOverlap: false
    description: string
    enableFlowLogs: false
    externalIpv6Prefix: string
    ipCidrRange: string
    ipv6AccessType: EXTERNAL
    logConfig:
        aggregationInterval: INTERVAL_10_MIN
        enable: false
        filterExpr: string
        flowSampling: 0
        metadata: CUSTOM_METADATA
        metadataFields:
            - string
    name: string
    network: string
    privateIpGoogleAccess: false
    privateIpv6GoogleAccess: DISABLE_GOOGLE_ACCESS
    project: string
    purpose: GLOBAL_MANAGED_PROXY
    region: string
    requestId: string
    reservedInternalRange: string
    role: ACTIVE
    secondaryIpRanges:
        - ipCidrRange: string
          rangeName: string
          reservedInternalRange: string
    stackType: IPV4_IPV6

    Subnetwork Resource Properties

    To learn more about resource properties and how to use them, see Inputs and Outputs in the Architecture and Concepts docs.

    Inputs

    In Python, inputs that are objects can be passed either as argument classes or as dictionary literals.

    The Subnetwork resource accepts the following input properties:

    Region string
    URL of the region where the Subnetwork resides. This field can be set only at resource creation time.
    AllowSubnetCidrRoutesOverlap bool
    Whether this subnetwork's ranges can conflict with existing static routes. Setting this to true allows this subnetwork's primary and secondary ranges to overlap with (and contain) static routes that have already been configured on the corresponding network. For example if a static route has range 10.1.0.0/16, a subnet range 10.0.0.0/8 could only be created if allow_conflicting_routes=true. Overlapping is only allowed on subnetwork operations; routes whose ranges conflict with this subnetwork's ranges won't be allowed unless route.allow_conflicting_subnetworks is set to true. Typically packets destined to IPs within the subnetwork (which may contain private/sensitive data) are prevented from leaving the virtual network. Setting this field to true will disable this feature. The default value is false and applies to all existing subnetworks and automatically created subnetworks. This field cannot be set to true at resource creation time.
    Description string
    An optional description of this resource. Provide this property when you create the resource. This field can be set only at resource creation time.
    EnableFlowLogs bool
    Whether to enable flow logging for this subnetwork. If this field is not explicitly set, it will not appear in get listings. If not set the default behavior is determined by the org policy, if there is no org policy specified, then it will default to disabled. This field isn't supported if the subnet purpose field is set to REGIONAL_MANAGED_PROXY.
    ExternalIpv6Prefix string
    The external IPv6 address range that is owned by this subnetwork.
    IpCidrRange string
    The range of internal addresses that are owned by this subnetwork. Provide this property when you create the subnetwork. For example, 10.0.0.0/8 or 100.64.0.0/10. Ranges must be unique and non-overlapping within a network. Only IPv4 is supported. This field is set at resource creation time. The range can be any range listed in the Valid ranges list. The range can be expanded after creation using expandIpCidrRange.
    Ipv6AccessType Pulumi.GoogleNative.Compute.Beta.SubnetworkIpv6AccessType
    The access type of IPv6 address this subnet holds. It's immutable and can only be specified during creation or the first time the subnet is updated into IPV4_IPV6 dual stack.
    LogConfig Pulumi.GoogleNative.Compute.Beta.Inputs.SubnetworkLogConfig
    This field denotes the VPC flow logging options for this subnetwork. If logging is enabled, logs are exported to Cloud Logging.
    Name string
    The name of the resource, provided by the client when initially creating the resource. The name must be 1-63 characters long, and comply with RFC1035. Specifically, the name must be 1-63 characters long and match the regular expression [a-z]([-a-z0-9]*[a-z0-9])? which means the first character must be a lowercase letter, and all following characters must be a dash, lowercase letter, or digit, except the last character, which cannot be a dash.
    Network string
    The URL of the network to which this subnetwork belongs, provided by the client when initially creating the subnetwork. This field can be set only at resource creation time.
    PrivateIpGoogleAccess bool
    Whether the VMs in this subnet can access Google services without assigned external IP addresses. This field can be both set at resource creation time and updated using setPrivateIpGoogleAccess.
    PrivateIpv6GoogleAccess Pulumi.GoogleNative.Compute.Beta.SubnetworkPrivateIpv6GoogleAccess
    This field is for internal use. This field can be both set at resource creation time and updated using patch.
    Project string
    Purpose Pulumi.GoogleNative.Compute.Beta.SubnetworkPurpose
    The purpose of the resource. This field can be either PRIVATE, REGIONAL_MANAGED_PROXY, PRIVATE_SERVICE_CONNECT, or INTERNAL_HTTPS_LOAD_BALANCER. PRIVATE is the default purpose for user-created subnets or subnets that are automatically created in auto mode networks. A subnet with purpose set to REGIONAL_MANAGED_PROXY is a user-created subnetwork that is reserved for regional Envoy-based load balancers. A subnet with purpose set to PRIVATE_SERVICE_CONNECT is used to publish services using Private Service Connect. A subnet with purpose set to INTERNAL_HTTPS_LOAD_BALANCER is a proxy-only subnet that can be used only by regional internal HTTP(S) load balancers. Note that REGIONAL_MANAGED_PROXY is the preferred setting for all regional Envoy load balancers. If unspecified, the subnet purpose defaults to PRIVATE. The enableFlowLogs field isn't supported if the subnet purpose field is set to REGIONAL_MANAGED_PROXY.
    RequestId string
    An optional request ID to identify requests. Specify a unique request ID so that if you must retry your request, the server will know to ignore the request if it has already been completed. For example, consider a situation where you make an initial request and the request times out. If you make the request again with the same request ID, the server can check if original operation with the same request ID was received, and if so, will ignore the second request. This prevents clients from accidentally creating duplicate commitments. The request ID must be a valid UUID with the exception that zero UUID is not supported ( 00000000-0000-0000-0000-000000000000).
    ReservedInternalRange string
    The URL of the reserved internal range.
    Role Pulumi.GoogleNative.Compute.Beta.SubnetworkRole
    The role of subnetwork. Currently, this field is only used when purpose = REGIONAL_MANAGED_PROXY. The value can be set to ACTIVE or BACKUP. An ACTIVE subnetwork is one that is currently being used for Envoy-based load balancers in a region. A BACKUP subnetwork is one that is ready to be promoted to ACTIVE or is currently draining. This field can be updated with a patch request.
    SecondaryIpRanges List<Pulumi.GoogleNative.Compute.Beta.Inputs.SubnetworkSecondaryRange>
    An array of configurations for secondary IP ranges for VM instances contained in this subnetwork. The primary IP of such VM must belong to the primary ipCidrRange of the subnetwork. The alias IPs may belong to either primary or secondary ranges. This field can be updated with a patch request.
    StackType Pulumi.GoogleNative.Compute.Beta.SubnetworkStackType
    The stack type for the subnet. If set to IPV4_ONLY, new VMs in the subnet are assigned IPv4 addresses only. If set to IPV4_IPV6, new VMs in the subnet can be assigned both IPv4 and IPv6 addresses. If not specified, IPV4_ONLY is used. This field can be both set at resource creation time and updated using patch.
    Region string
    URL of the region where the Subnetwork resides. This field can be set only at resource creation time.
    AllowSubnetCidrRoutesOverlap bool
    Whether this subnetwork's ranges can conflict with existing static routes. Setting this to true allows this subnetwork's primary and secondary ranges to overlap with (and contain) static routes that have already been configured on the corresponding network. For example if a static route has range 10.1.0.0/16, a subnet range 10.0.0.0/8 could only be created if allow_conflicting_routes=true. Overlapping is only allowed on subnetwork operations; routes whose ranges conflict with this subnetwork's ranges won't be allowed unless route.allow_conflicting_subnetworks is set to true. Typically packets destined to IPs within the subnetwork (which may contain private/sensitive data) are prevented from leaving the virtual network. Setting this field to true will disable this feature. The default value is false and applies to all existing subnetworks and automatically created subnetworks. This field cannot be set to true at resource creation time.
    Description string
    An optional description of this resource. Provide this property when you create the resource. This field can be set only at resource creation time.
    EnableFlowLogs bool
    Whether to enable flow logging for this subnetwork. If this field is not explicitly set, it will not appear in get listings. If not set the default behavior is determined by the org policy, if there is no org policy specified, then it will default to disabled. This field isn't supported if the subnet purpose field is set to REGIONAL_MANAGED_PROXY.
    ExternalIpv6Prefix string
    The external IPv6 address range that is owned by this subnetwork.
    IpCidrRange string
    The range of internal addresses that are owned by this subnetwork. Provide this property when you create the subnetwork. For example, 10.0.0.0/8 or 100.64.0.0/10. Ranges must be unique and non-overlapping within a network. Only IPv4 is supported. This field is set at resource creation time. The range can be any range listed in the Valid ranges list. The range can be expanded after creation using expandIpCidrRange.
    Ipv6AccessType SubnetworkIpv6AccessType
    The access type of IPv6 address this subnet holds. It's immutable and can only be specified during creation or the first time the subnet is updated into IPV4_IPV6 dual stack.
    LogConfig SubnetworkLogConfigArgs
    This field denotes the VPC flow logging options for this subnetwork. If logging is enabled, logs are exported to Cloud Logging.
    Name string
    The name of the resource, provided by the client when initially creating the resource. The name must be 1-63 characters long, and comply with RFC1035. Specifically, the name must be 1-63 characters long and match the regular expression [a-z]([-a-z0-9]*[a-z0-9])? which means the first character must be a lowercase letter, and all following characters must be a dash, lowercase letter, or digit, except the last character, which cannot be a dash.
    Network string
    The URL of the network to which this subnetwork belongs, provided by the client when initially creating the subnetwork. This field can be set only at resource creation time.
    PrivateIpGoogleAccess bool
    Whether the VMs in this subnet can access Google services without assigned external IP addresses. This field can be both set at resource creation time and updated using setPrivateIpGoogleAccess.
    PrivateIpv6GoogleAccess SubnetworkPrivateIpv6GoogleAccess
    This field is for internal use. This field can be both set at resource creation time and updated using patch.
    Project string
    Purpose SubnetworkPurpose
    The purpose of the resource. This field can be either PRIVATE, REGIONAL_MANAGED_PROXY, PRIVATE_SERVICE_CONNECT, or INTERNAL_HTTPS_LOAD_BALANCER. PRIVATE is the default purpose for user-created subnets or subnets that are automatically created in auto mode networks. A subnet with purpose set to REGIONAL_MANAGED_PROXY is a user-created subnetwork that is reserved for regional Envoy-based load balancers. A subnet with purpose set to PRIVATE_SERVICE_CONNECT is used to publish services using Private Service Connect. A subnet with purpose set to INTERNAL_HTTPS_LOAD_BALANCER is a proxy-only subnet that can be used only by regional internal HTTP(S) load balancers. Note that REGIONAL_MANAGED_PROXY is the preferred setting for all regional Envoy load balancers. If unspecified, the subnet purpose defaults to PRIVATE. The enableFlowLogs field isn't supported if the subnet purpose field is set to REGIONAL_MANAGED_PROXY.
    RequestId string
    An optional request ID to identify requests. Specify a unique request ID so that if you must retry your request, the server will know to ignore the request if it has already been completed. For example, consider a situation where you make an initial request and the request times out. If you make the request again with the same request ID, the server can check if original operation with the same request ID was received, and if so, will ignore the second request. This prevents clients from accidentally creating duplicate commitments. The request ID must be a valid UUID with the exception that zero UUID is not supported ( 00000000-0000-0000-0000-000000000000).
    ReservedInternalRange string
    The URL of the reserved internal range.
    Role SubnetworkRole
    The role of subnetwork. Currently, this field is only used when purpose = REGIONAL_MANAGED_PROXY. The value can be set to ACTIVE or BACKUP. An ACTIVE subnetwork is one that is currently being used for Envoy-based load balancers in a region. A BACKUP subnetwork is one that is ready to be promoted to ACTIVE or is currently draining. This field can be updated with a patch request.
    SecondaryIpRanges []SubnetworkSecondaryRangeArgs
    An array of configurations for secondary IP ranges for VM instances contained in this subnetwork. The primary IP of such VM must belong to the primary ipCidrRange of the subnetwork. The alias IPs may belong to either primary or secondary ranges. This field can be updated with a patch request.
    StackType SubnetworkStackType
    The stack type for the subnet. If set to IPV4_ONLY, new VMs in the subnet are assigned IPv4 addresses only. If set to IPV4_IPV6, new VMs in the subnet can be assigned both IPv4 and IPv6 addresses. If not specified, IPV4_ONLY is used. This field can be both set at resource creation time and updated using patch.
    region String
    URL of the region where the Subnetwork resides. This field can be set only at resource creation time.
    allowSubnetCidrRoutesOverlap Boolean
    Whether this subnetwork's ranges can conflict with existing static routes. Setting this to true allows this subnetwork's primary and secondary ranges to overlap with (and contain) static routes that have already been configured on the corresponding network. For example if a static route has range 10.1.0.0/16, a subnet range 10.0.0.0/8 could only be created if allow_conflicting_routes=true. Overlapping is only allowed on subnetwork operations; routes whose ranges conflict with this subnetwork's ranges won't be allowed unless route.allow_conflicting_subnetworks is set to true. Typically packets destined to IPs within the subnetwork (which may contain private/sensitive data) are prevented from leaving the virtual network. Setting this field to true will disable this feature. The default value is false and applies to all existing subnetworks and automatically created subnetworks. This field cannot be set to true at resource creation time.
    description String
    An optional description of this resource. Provide this property when you create the resource. This field can be set only at resource creation time.
    enableFlowLogs Boolean
    Whether to enable flow logging for this subnetwork. If this field is not explicitly set, it will not appear in get listings. If not set the default behavior is determined by the org policy, if there is no org policy specified, then it will default to disabled. This field isn't supported if the subnet purpose field is set to REGIONAL_MANAGED_PROXY.
    externalIpv6Prefix String
    The external IPv6 address range that is owned by this subnetwork.
    ipCidrRange String
    The range of internal addresses that are owned by this subnetwork. Provide this property when you create the subnetwork. For example, 10.0.0.0/8 or 100.64.0.0/10. Ranges must be unique and non-overlapping within a network. Only IPv4 is supported. This field is set at resource creation time. The range can be any range listed in the Valid ranges list. The range can be expanded after creation using expandIpCidrRange.
    ipv6AccessType SubnetworkIpv6AccessType
    The access type of IPv6 address this subnet holds. It's immutable and can only be specified during creation or the first time the subnet is updated into IPV4_IPV6 dual stack.
    logConfig SubnetworkLogConfig
    This field denotes the VPC flow logging options for this subnetwork. If logging is enabled, logs are exported to Cloud Logging.
    name String
    The name of the resource, provided by the client when initially creating the resource. The name must be 1-63 characters long, and comply with RFC1035. Specifically, the name must be 1-63 characters long and match the regular expression [a-z]([-a-z0-9]*[a-z0-9])? which means the first character must be a lowercase letter, and all following characters must be a dash, lowercase letter, or digit, except the last character, which cannot be a dash.
    network String
    The URL of the network to which this subnetwork belongs, provided by the client when initially creating the subnetwork. This field can be set only at resource creation time.
    privateIpGoogleAccess Boolean
    Whether the VMs in this subnet can access Google services without assigned external IP addresses. This field can be both set at resource creation time and updated using setPrivateIpGoogleAccess.
    privateIpv6GoogleAccess SubnetworkPrivateIpv6GoogleAccess
    This field is for internal use. This field can be both set at resource creation time and updated using patch.
    project String
    purpose SubnetworkPurpose
    The purpose of the resource. This field can be either PRIVATE, REGIONAL_MANAGED_PROXY, PRIVATE_SERVICE_CONNECT, or INTERNAL_HTTPS_LOAD_BALANCER. PRIVATE is the default purpose for user-created subnets or subnets that are automatically created in auto mode networks. A subnet with purpose set to REGIONAL_MANAGED_PROXY is a user-created subnetwork that is reserved for regional Envoy-based load balancers. A subnet with purpose set to PRIVATE_SERVICE_CONNECT is used to publish services using Private Service Connect. A subnet with purpose set to INTERNAL_HTTPS_LOAD_BALANCER is a proxy-only subnet that can be used only by regional internal HTTP(S) load balancers. Note that REGIONAL_MANAGED_PROXY is the preferred setting for all regional Envoy load balancers. If unspecified, the subnet purpose defaults to PRIVATE. The enableFlowLogs field isn't supported if the subnet purpose field is set to REGIONAL_MANAGED_PROXY.
    requestId String
    An optional request ID to identify requests. Specify a unique request ID so that if you must retry your request, the server will know to ignore the request if it has already been completed. For example, consider a situation where you make an initial request and the request times out. If you make the request again with the same request ID, the server can check if original operation with the same request ID was received, and if so, will ignore the second request. This prevents clients from accidentally creating duplicate commitments. The request ID must be a valid UUID with the exception that zero UUID is not supported ( 00000000-0000-0000-0000-000000000000).
    reservedInternalRange String
    The URL of the reserved internal range.
    role SubnetworkRole
    The role of subnetwork. Currently, this field is only used when purpose = REGIONAL_MANAGED_PROXY. The value can be set to ACTIVE or BACKUP. An ACTIVE subnetwork is one that is currently being used for Envoy-based load balancers in a region. A BACKUP subnetwork is one that is ready to be promoted to ACTIVE or is currently draining. This field can be updated with a patch request.
    secondaryIpRanges List<SubnetworkSecondaryRange>
    An array of configurations for secondary IP ranges for VM instances contained in this subnetwork. The primary IP of such VM must belong to the primary ipCidrRange of the subnetwork. The alias IPs may belong to either primary or secondary ranges. This field can be updated with a patch request.
    stackType SubnetworkStackType
    The stack type for the subnet. If set to IPV4_ONLY, new VMs in the subnet are assigned IPv4 addresses only. If set to IPV4_IPV6, new VMs in the subnet can be assigned both IPv4 and IPv6 addresses. If not specified, IPV4_ONLY is used. This field can be both set at resource creation time and updated using patch.
    region string
    URL of the region where the Subnetwork resides. This field can be set only at resource creation time.
    allowSubnetCidrRoutesOverlap boolean
    Whether this subnetwork's ranges can conflict with existing static routes. Setting this to true allows this subnetwork's primary and secondary ranges to overlap with (and contain) static routes that have already been configured on the corresponding network. For example if a static route has range 10.1.0.0/16, a subnet range 10.0.0.0/8 could only be created if allow_conflicting_routes=true. Overlapping is only allowed on subnetwork operations; routes whose ranges conflict with this subnetwork's ranges won't be allowed unless route.allow_conflicting_subnetworks is set to true. Typically packets destined to IPs within the subnetwork (which may contain private/sensitive data) are prevented from leaving the virtual network. Setting this field to true will disable this feature. The default value is false and applies to all existing subnetworks and automatically created subnetworks. This field cannot be set to true at resource creation time.
    description string
    An optional description of this resource. Provide this property when you create the resource. This field can be set only at resource creation time.
    enableFlowLogs boolean
    Whether to enable flow logging for this subnetwork. If this field is not explicitly set, it will not appear in get listings. If not set the default behavior is determined by the org policy, if there is no org policy specified, then it will default to disabled. This field isn't supported if the subnet purpose field is set to REGIONAL_MANAGED_PROXY.
    externalIpv6Prefix string
    The external IPv6 address range that is owned by this subnetwork.
    ipCidrRange string
    The range of internal addresses that are owned by this subnetwork. Provide this property when you create the subnetwork. For example, 10.0.0.0/8 or 100.64.0.0/10. Ranges must be unique and non-overlapping within a network. Only IPv4 is supported. This field is set at resource creation time. The range can be any range listed in the Valid ranges list. The range can be expanded after creation using expandIpCidrRange.
    ipv6AccessType SubnetworkIpv6AccessType
    The access type of IPv6 address this subnet holds. It's immutable and can only be specified during creation or the first time the subnet is updated into IPV4_IPV6 dual stack.
    logConfig SubnetworkLogConfig
    This field denotes the VPC flow logging options for this subnetwork. If logging is enabled, logs are exported to Cloud Logging.
    name string
    The name of the resource, provided by the client when initially creating the resource. The name must be 1-63 characters long, and comply with RFC1035. Specifically, the name must be 1-63 characters long and match the regular expression [a-z]([-a-z0-9]*[a-z0-9])? which means the first character must be a lowercase letter, and all following characters must be a dash, lowercase letter, or digit, except the last character, which cannot be a dash.
    network string
    The URL of the network to which this subnetwork belongs, provided by the client when initially creating the subnetwork. This field can be set only at resource creation time.
    privateIpGoogleAccess boolean
    Whether the VMs in this subnet can access Google services without assigned external IP addresses. This field can be both set at resource creation time and updated using setPrivateIpGoogleAccess.
    privateIpv6GoogleAccess SubnetworkPrivateIpv6GoogleAccess
    This field is for internal use. This field can be both set at resource creation time and updated using patch.
    project string
    purpose SubnetworkPurpose
    The purpose of the resource. This field can be either PRIVATE, REGIONAL_MANAGED_PROXY, PRIVATE_SERVICE_CONNECT, or INTERNAL_HTTPS_LOAD_BALANCER. PRIVATE is the default purpose for user-created subnets or subnets that are automatically created in auto mode networks. A subnet with purpose set to REGIONAL_MANAGED_PROXY is a user-created subnetwork that is reserved for regional Envoy-based load balancers. A subnet with purpose set to PRIVATE_SERVICE_CONNECT is used to publish services using Private Service Connect. A subnet with purpose set to INTERNAL_HTTPS_LOAD_BALANCER is a proxy-only subnet that can be used only by regional internal HTTP(S) load balancers. Note that REGIONAL_MANAGED_PROXY is the preferred setting for all regional Envoy load balancers. If unspecified, the subnet purpose defaults to PRIVATE. The enableFlowLogs field isn't supported if the subnet purpose field is set to REGIONAL_MANAGED_PROXY.
    requestId string
    An optional request ID to identify requests. Specify a unique request ID so that if you must retry your request, the server will know to ignore the request if it has already been completed. For example, consider a situation where you make an initial request and the request times out. If you make the request again with the same request ID, the server can check if original operation with the same request ID was received, and if so, will ignore the second request. This prevents clients from accidentally creating duplicate commitments. The request ID must be a valid UUID with the exception that zero UUID is not supported ( 00000000-0000-0000-0000-000000000000).
    reservedInternalRange string
    The URL of the reserved internal range.
    role SubnetworkRole
    The role of subnetwork. Currently, this field is only used when purpose = REGIONAL_MANAGED_PROXY. The value can be set to ACTIVE or BACKUP. An ACTIVE subnetwork is one that is currently being used for Envoy-based load balancers in a region. A BACKUP subnetwork is one that is ready to be promoted to ACTIVE or is currently draining. This field can be updated with a patch request.
    secondaryIpRanges SubnetworkSecondaryRange[]
    An array of configurations for secondary IP ranges for VM instances contained in this subnetwork. The primary IP of such VM must belong to the primary ipCidrRange of the subnetwork. The alias IPs may belong to either primary or secondary ranges. This field can be updated with a patch request.
    stackType SubnetworkStackType
    The stack type for the subnet. If set to IPV4_ONLY, new VMs in the subnet are assigned IPv4 addresses only. If set to IPV4_IPV6, new VMs in the subnet can be assigned both IPv4 and IPv6 addresses. If not specified, IPV4_ONLY is used. This field can be both set at resource creation time and updated using patch.
    region str
    URL of the region where the Subnetwork resides. This field can be set only at resource creation time.
    allow_subnet_cidr_routes_overlap bool
    Whether this subnetwork's ranges can conflict with existing static routes. Setting this to true allows this subnetwork's primary and secondary ranges to overlap with (and contain) static routes that have already been configured on the corresponding network. For example if a static route has range 10.1.0.0/16, a subnet range 10.0.0.0/8 could only be created if allow_conflicting_routes=true. Overlapping is only allowed on subnetwork operations; routes whose ranges conflict with this subnetwork's ranges won't be allowed unless route.allow_conflicting_subnetworks is set to true. Typically packets destined to IPs within the subnetwork (which may contain private/sensitive data) are prevented from leaving the virtual network. Setting this field to true will disable this feature. The default value is false and applies to all existing subnetworks and automatically created subnetworks. This field cannot be set to true at resource creation time.
    description str
    An optional description of this resource. Provide this property when you create the resource. This field can be set only at resource creation time.
    enable_flow_logs bool
    Whether to enable flow logging for this subnetwork. If this field is not explicitly set, it will not appear in get listings. If not set the default behavior is determined by the org policy, if there is no org policy specified, then it will default to disabled. This field isn't supported if the subnet purpose field is set to REGIONAL_MANAGED_PROXY.
    external_ipv6_prefix str
    The external IPv6 address range that is owned by this subnetwork.
    ip_cidr_range str
    The range of internal addresses that are owned by this subnetwork. Provide this property when you create the subnetwork. For example, 10.0.0.0/8 or 100.64.0.0/10. Ranges must be unique and non-overlapping within a network. Only IPv4 is supported. This field is set at resource creation time. The range can be any range listed in the Valid ranges list. The range can be expanded after creation using expandIpCidrRange.
    ipv6_access_type SubnetworkIpv6AccessType
    The access type of IPv6 address this subnet holds. It's immutable and can only be specified during creation or the first time the subnet is updated into IPV4_IPV6 dual stack.
    log_config SubnetworkLogConfigArgs
    This field denotes the VPC flow logging options for this subnetwork. If logging is enabled, logs are exported to Cloud Logging.
    name str
    The name of the resource, provided by the client when initially creating the resource. The name must be 1-63 characters long, and comply with RFC1035. Specifically, the name must be 1-63 characters long and match the regular expression [a-z]([-a-z0-9]*[a-z0-9])? which means the first character must be a lowercase letter, and all following characters must be a dash, lowercase letter, or digit, except the last character, which cannot be a dash.
    network str
    The URL of the network to which this subnetwork belongs, provided by the client when initially creating the subnetwork. This field can be set only at resource creation time.
    private_ip_google_access bool
    Whether the VMs in this subnet can access Google services without assigned external IP addresses. This field can be both set at resource creation time and updated using setPrivateIpGoogleAccess.
    private_ipv6_google_access SubnetworkPrivateIpv6GoogleAccess
    This field is for internal use. This field can be both set at resource creation time and updated using patch.
    project str
    purpose SubnetworkPurpose
    The purpose of the resource. This field can be either PRIVATE, REGIONAL_MANAGED_PROXY, PRIVATE_SERVICE_CONNECT, or INTERNAL_HTTPS_LOAD_BALANCER. PRIVATE is the default purpose for user-created subnets or subnets that are automatically created in auto mode networks. A subnet with purpose set to REGIONAL_MANAGED_PROXY is a user-created subnetwork that is reserved for regional Envoy-based load balancers. A subnet with purpose set to PRIVATE_SERVICE_CONNECT is used to publish services using Private Service Connect. A subnet with purpose set to INTERNAL_HTTPS_LOAD_BALANCER is a proxy-only subnet that can be used only by regional internal HTTP(S) load balancers. Note that REGIONAL_MANAGED_PROXY is the preferred setting for all regional Envoy load balancers. If unspecified, the subnet purpose defaults to PRIVATE. The enableFlowLogs field isn't supported if the subnet purpose field is set to REGIONAL_MANAGED_PROXY.
    request_id str
    An optional request ID to identify requests. Specify a unique request ID so that if you must retry your request, the server will know to ignore the request if it has already been completed. For example, consider a situation where you make an initial request and the request times out. If you make the request again with the same request ID, the server can check if original operation with the same request ID was received, and if so, will ignore the second request. This prevents clients from accidentally creating duplicate commitments. The request ID must be a valid UUID with the exception that zero UUID is not supported ( 00000000-0000-0000-0000-000000000000).
    reserved_internal_range str
    The URL of the reserved internal range.
    role SubnetworkRole
    The role of subnetwork. Currently, this field is only used when purpose = REGIONAL_MANAGED_PROXY. The value can be set to ACTIVE or BACKUP. An ACTIVE subnetwork is one that is currently being used for Envoy-based load balancers in a region. A BACKUP subnetwork is one that is ready to be promoted to ACTIVE or is currently draining. This field can be updated with a patch request.
    secondary_ip_ranges Sequence[SubnetworkSecondaryRangeArgs]
    An array of configurations for secondary IP ranges for VM instances contained in this subnetwork. The primary IP of such VM must belong to the primary ipCidrRange of the subnetwork. The alias IPs may belong to either primary or secondary ranges. This field can be updated with a patch request.
    stack_type SubnetworkStackType
    The stack type for the subnet. If set to IPV4_ONLY, new VMs in the subnet are assigned IPv4 addresses only. If set to IPV4_IPV6, new VMs in the subnet can be assigned both IPv4 and IPv6 addresses. If not specified, IPV4_ONLY is used. This field can be both set at resource creation time and updated using patch.
    region String
    URL of the region where the Subnetwork resides. This field can be set only at resource creation time.
    allowSubnetCidrRoutesOverlap Boolean
    Whether this subnetwork's ranges can conflict with existing static routes. Setting this to true allows this subnetwork's primary and secondary ranges to overlap with (and contain) static routes that have already been configured on the corresponding network. For example if a static route has range 10.1.0.0/16, a subnet range 10.0.0.0/8 could only be created if allow_conflicting_routes=true. Overlapping is only allowed on subnetwork operations; routes whose ranges conflict with this subnetwork's ranges won't be allowed unless route.allow_conflicting_subnetworks is set to true. Typically packets destined to IPs within the subnetwork (which may contain private/sensitive data) are prevented from leaving the virtual network. Setting this field to true will disable this feature. The default value is false and applies to all existing subnetworks and automatically created subnetworks. This field cannot be set to true at resource creation time.
    description String
    An optional description of this resource. Provide this property when you create the resource. This field can be set only at resource creation time.
    enableFlowLogs Boolean
    Whether to enable flow logging for this subnetwork. If this field is not explicitly set, it will not appear in get listings. If not set the default behavior is determined by the org policy, if there is no org policy specified, then it will default to disabled. This field isn't supported if the subnet purpose field is set to REGIONAL_MANAGED_PROXY.
    externalIpv6Prefix String
    The external IPv6 address range that is owned by this subnetwork.
    ipCidrRange String
    The range of internal addresses that are owned by this subnetwork. Provide this property when you create the subnetwork. For example, 10.0.0.0/8 or 100.64.0.0/10. Ranges must be unique and non-overlapping within a network. Only IPv4 is supported. This field is set at resource creation time. The range can be any range listed in the Valid ranges list. The range can be expanded after creation using expandIpCidrRange.
    ipv6AccessType "EXTERNAL" | "INTERNAL"
    The access type of IPv6 address this subnet holds. It's immutable and can only be specified during creation or the first time the subnet is updated into IPV4_IPV6 dual stack.
    logConfig Property Map
    This field denotes the VPC flow logging options for this subnetwork. If logging is enabled, logs are exported to Cloud Logging.
    name String
    The name of the resource, provided by the client when initially creating the resource. The name must be 1-63 characters long, and comply with RFC1035. Specifically, the name must be 1-63 characters long and match the regular expression [a-z]([-a-z0-9]*[a-z0-9])? which means the first character must be a lowercase letter, and all following characters must be a dash, lowercase letter, or digit, except the last character, which cannot be a dash.
    network String
    The URL of the network to which this subnetwork belongs, provided by the client when initially creating the subnetwork. This field can be set only at resource creation time.
    privateIpGoogleAccess Boolean
    Whether the VMs in this subnet can access Google services without assigned external IP addresses. This field can be both set at resource creation time and updated using setPrivateIpGoogleAccess.
    privateIpv6GoogleAccess "DISABLE_GOOGLE_ACCESS" | "ENABLE_BIDIRECTIONAL_ACCESS_TO_GOOGLE" | "ENABLE_OUTBOUND_VM_ACCESS_TO_GOOGLE"
    This field is for internal use. This field can be both set at resource creation time and updated using patch.
    project String
    purpose "GLOBAL_MANAGED_PROXY" | "INTERNAL_HTTPS_LOAD_BALANCER" | "PRIVATE" | "PRIVATE_NAT" | "PRIVATE_RFC_1918" | "PRIVATE_SERVICE_CONNECT" | "REGIONAL_MANAGED_PROXY"
    The purpose of the resource. This field can be either PRIVATE, REGIONAL_MANAGED_PROXY, PRIVATE_SERVICE_CONNECT, or INTERNAL_HTTPS_LOAD_BALANCER. PRIVATE is the default purpose for user-created subnets or subnets that are automatically created in auto mode networks. A subnet with purpose set to REGIONAL_MANAGED_PROXY is a user-created subnetwork that is reserved for regional Envoy-based load balancers. A subnet with purpose set to PRIVATE_SERVICE_CONNECT is used to publish services using Private Service Connect. A subnet with purpose set to INTERNAL_HTTPS_LOAD_BALANCER is a proxy-only subnet that can be used only by regional internal HTTP(S) load balancers. Note that REGIONAL_MANAGED_PROXY is the preferred setting for all regional Envoy load balancers. If unspecified, the subnet purpose defaults to PRIVATE. The enableFlowLogs field isn't supported if the subnet purpose field is set to REGIONAL_MANAGED_PROXY.
    requestId String
    An optional request ID to identify requests. Specify a unique request ID so that if you must retry your request, the server will know to ignore the request if it has already been completed. For example, consider a situation where you make an initial request and the request times out. If you make the request again with the same request ID, the server can check if original operation with the same request ID was received, and if so, will ignore the second request. This prevents clients from accidentally creating duplicate commitments. The request ID must be a valid UUID with the exception that zero UUID is not supported ( 00000000-0000-0000-0000-000000000000).
    reservedInternalRange String
    The URL of the reserved internal range.
    role "ACTIVE" | "BACKUP"
    The role of subnetwork. Currently, this field is only used when purpose = REGIONAL_MANAGED_PROXY. The value can be set to ACTIVE or BACKUP. An ACTIVE subnetwork is one that is currently being used for Envoy-based load balancers in a region. A BACKUP subnetwork is one that is ready to be promoted to ACTIVE or is currently draining. This field can be updated with a patch request.
    secondaryIpRanges List<Property Map>
    An array of configurations for secondary IP ranges for VM instances contained in this subnetwork. The primary IP of such VM must belong to the primary ipCidrRange of the subnetwork. The alias IPs may belong to either primary or secondary ranges. This field can be updated with a patch request.
    stackType "IPV4_IPV6" | "IPV4_ONLY"
    The stack type for the subnet. If set to IPV4_ONLY, new VMs in the subnet are assigned IPv4 addresses only. If set to IPV4_IPV6, new VMs in the subnet can be assigned both IPv4 and IPv6 addresses. If not specified, IPV4_ONLY is used. This field can be both set at resource creation time and updated using patch.

    Outputs

    All input properties are implicitly available as output properties. Additionally, the Subnetwork resource produces the following output properties:

    CreationTimestamp string
    Creation timestamp in RFC3339 text format.
    Fingerprint string
    Fingerprint of this resource. A hash of the contents stored in this object. This field is used in optimistic locking. This field will be ignored when inserting a Subnetwork. An up-to-date fingerprint must be provided in order to update the Subnetwork, otherwise the request will fail with error 412 conditionNotMet. To see the latest fingerprint, make a get() request to retrieve a Subnetwork.
    GatewayAddress string
    The gateway address for default routes to reach destination addresses outside this subnetwork.
    Id string
    The provider-assigned unique ID for this managed resource.
    InternalIpv6Prefix string
    The internal IPv6 address range that is assigned to this subnetwork.
    Ipv6CidrRange string
    This field is for internal use.
    Kind string
    Type of the resource. Always compute#subnetwork for Subnetwork resources.
    SelfLink string
    Server-defined URL for the resource.
    State string
    The state of the subnetwork, which can be one of the following values: READY: Subnetwork is created and ready to use DRAINING: only applicable to subnetworks that have the purpose set to INTERNAL_HTTPS_LOAD_BALANCER and indicates that connections to the load balancer are being drained. A subnetwork that is draining cannot be used or modified until it reaches a status of READY
    CreationTimestamp string
    Creation timestamp in RFC3339 text format.
    Fingerprint string
    Fingerprint of this resource. A hash of the contents stored in this object. This field is used in optimistic locking. This field will be ignored when inserting a Subnetwork. An up-to-date fingerprint must be provided in order to update the Subnetwork, otherwise the request will fail with error 412 conditionNotMet. To see the latest fingerprint, make a get() request to retrieve a Subnetwork.
    GatewayAddress string
    The gateway address for default routes to reach destination addresses outside this subnetwork.
    Id string
    The provider-assigned unique ID for this managed resource.
    InternalIpv6Prefix string
    The internal IPv6 address range that is assigned to this subnetwork.
    Ipv6CidrRange string
    This field is for internal use.
    Kind string
    Type of the resource. Always compute#subnetwork for Subnetwork resources.
    SelfLink string
    Server-defined URL for the resource.
    State string
    The state of the subnetwork, which can be one of the following values: READY: Subnetwork is created and ready to use DRAINING: only applicable to subnetworks that have the purpose set to INTERNAL_HTTPS_LOAD_BALANCER and indicates that connections to the load balancer are being drained. A subnetwork that is draining cannot be used or modified until it reaches a status of READY
    creationTimestamp String
    Creation timestamp in RFC3339 text format.
    fingerprint String
    Fingerprint of this resource. A hash of the contents stored in this object. This field is used in optimistic locking. This field will be ignored when inserting a Subnetwork. An up-to-date fingerprint must be provided in order to update the Subnetwork, otherwise the request will fail with error 412 conditionNotMet. To see the latest fingerprint, make a get() request to retrieve a Subnetwork.
    gatewayAddress String
    The gateway address for default routes to reach destination addresses outside this subnetwork.
    id String
    The provider-assigned unique ID for this managed resource.
    internalIpv6Prefix String
    The internal IPv6 address range that is assigned to this subnetwork.
    ipv6CidrRange String
    This field is for internal use.
    kind String
    Type of the resource. Always compute#subnetwork for Subnetwork resources.
    selfLink String
    Server-defined URL for the resource.
    state String
    The state of the subnetwork, which can be one of the following values: READY: Subnetwork is created and ready to use DRAINING: only applicable to subnetworks that have the purpose set to INTERNAL_HTTPS_LOAD_BALANCER and indicates that connections to the load balancer are being drained. A subnetwork that is draining cannot be used or modified until it reaches a status of READY
    creationTimestamp string
    Creation timestamp in RFC3339 text format.
    fingerprint string
    Fingerprint of this resource. A hash of the contents stored in this object. This field is used in optimistic locking. This field will be ignored when inserting a Subnetwork. An up-to-date fingerprint must be provided in order to update the Subnetwork, otherwise the request will fail with error 412 conditionNotMet. To see the latest fingerprint, make a get() request to retrieve a Subnetwork.
    gatewayAddress string
    The gateway address for default routes to reach destination addresses outside this subnetwork.
    id string
    The provider-assigned unique ID for this managed resource.
    internalIpv6Prefix string
    The internal IPv6 address range that is assigned to this subnetwork.
    ipv6CidrRange string
    This field is for internal use.
    kind string
    Type of the resource. Always compute#subnetwork for Subnetwork resources.
    selfLink string
    Server-defined URL for the resource.
    state string
    The state of the subnetwork, which can be one of the following values: READY: Subnetwork is created and ready to use DRAINING: only applicable to subnetworks that have the purpose set to INTERNAL_HTTPS_LOAD_BALANCER and indicates that connections to the load balancer are being drained. A subnetwork that is draining cannot be used or modified until it reaches a status of READY
    creation_timestamp str
    Creation timestamp in RFC3339 text format.
    fingerprint str
    Fingerprint of this resource. A hash of the contents stored in this object. This field is used in optimistic locking. This field will be ignored when inserting a Subnetwork. An up-to-date fingerprint must be provided in order to update the Subnetwork, otherwise the request will fail with error 412 conditionNotMet. To see the latest fingerprint, make a get() request to retrieve a Subnetwork.
    gateway_address str
    The gateway address for default routes to reach destination addresses outside this subnetwork.
    id str
    The provider-assigned unique ID for this managed resource.
    internal_ipv6_prefix str
    The internal IPv6 address range that is assigned to this subnetwork.
    ipv6_cidr_range str
    This field is for internal use.
    kind str
    Type of the resource. Always compute#subnetwork for Subnetwork resources.
    self_link str
    Server-defined URL for the resource.
    state str
    The state of the subnetwork, which can be one of the following values: READY: Subnetwork is created and ready to use DRAINING: only applicable to subnetworks that have the purpose set to INTERNAL_HTTPS_LOAD_BALANCER and indicates that connections to the load balancer are being drained. A subnetwork that is draining cannot be used or modified until it reaches a status of READY
    creationTimestamp String
    Creation timestamp in RFC3339 text format.
    fingerprint String
    Fingerprint of this resource. A hash of the contents stored in this object. This field is used in optimistic locking. This field will be ignored when inserting a Subnetwork. An up-to-date fingerprint must be provided in order to update the Subnetwork, otherwise the request will fail with error 412 conditionNotMet. To see the latest fingerprint, make a get() request to retrieve a Subnetwork.
    gatewayAddress String
    The gateway address for default routes to reach destination addresses outside this subnetwork.
    id String
    The provider-assigned unique ID for this managed resource.
    internalIpv6Prefix String
    The internal IPv6 address range that is assigned to this subnetwork.
    ipv6CidrRange String
    This field is for internal use.
    kind String
    Type of the resource. Always compute#subnetwork for Subnetwork resources.
    selfLink String
    Server-defined URL for the resource.
    state String
    The state of the subnetwork, which can be one of the following values: READY: Subnetwork is created and ready to use DRAINING: only applicable to subnetworks that have the purpose set to INTERNAL_HTTPS_LOAD_BALANCER and indicates that connections to the load balancer are being drained. A subnetwork that is draining cannot be used or modified until it reaches a status of READY

    Supporting Types

    SubnetworkIpv6AccessType, SubnetworkIpv6AccessTypeArgs

    External
    EXTERNALVMs on this subnet will be assigned IPv6 addresses that are accessible via the Internet, as well as the VPC network.
    Internal
    INTERNALVMs on this subnet will be assigned IPv6 addresses that are only accessible over the VPC network.
    SubnetworkIpv6AccessTypeExternal
    EXTERNALVMs on this subnet will be assigned IPv6 addresses that are accessible via the Internet, as well as the VPC network.
    SubnetworkIpv6AccessTypeInternal
    INTERNALVMs on this subnet will be assigned IPv6 addresses that are only accessible over the VPC network.
    External
    EXTERNALVMs on this subnet will be assigned IPv6 addresses that are accessible via the Internet, as well as the VPC network.
    Internal
    INTERNALVMs on this subnet will be assigned IPv6 addresses that are only accessible over the VPC network.
    External
    EXTERNALVMs on this subnet will be assigned IPv6 addresses that are accessible via the Internet, as well as the VPC network.
    Internal
    INTERNALVMs on this subnet will be assigned IPv6 addresses that are only accessible over the VPC network.
    EXTERNAL
    EXTERNALVMs on this subnet will be assigned IPv6 addresses that are accessible via the Internet, as well as the VPC network.
    INTERNAL
    INTERNALVMs on this subnet will be assigned IPv6 addresses that are only accessible over the VPC network.
    "EXTERNAL"
    EXTERNALVMs on this subnet will be assigned IPv6 addresses that are accessible via the Internet, as well as the VPC network.
    "INTERNAL"
    INTERNALVMs on this subnet will be assigned IPv6 addresses that are only accessible over the VPC network.

    SubnetworkLogConfig, SubnetworkLogConfigArgs

    AggregationInterval Pulumi.GoogleNative.Compute.Beta.SubnetworkLogConfigAggregationInterval
    Can only be specified if VPC flow logging for this subnetwork is enabled. Toggles the aggregation interval for collecting flow logs. Increasing the interval time will reduce the amount of generated flow logs for long lasting connections. Default is an interval of 5 seconds per connection.
    Enable bool
    Whether to enable flow logging for this subnetwork. If this field is not explicitly set, it will not appear in get listings. If not set the default behavior is determined by the org policy, if there is no org policy specified, then it will default to disabled. Flow logging isn't supported if the subnet purpose field is set to REGIONAL_MANAGED_PROXY.
    FilterExpr string
    Can only be specified if VPC flow logs for this subnetwork is enabled. The filter expression is used to define which VPC flow logs should be exported to Cloud Logging.
    FlowSampling double
    Can only be specified if VPC flow logging for this subnetwork is enabled. The value of the field must be in [0, 1]. Set the sampling rate of VPC flow logs within the subnetwork where 1.0 means all collected logs are reported and 0.0 means no logs are reported. Default is 0.5 unless otherwise specified by the org policy, which means half of all collected logs are reported.
    Metadata Pulumi.GoogleNative.Compute.Beta.SubnetworkLogConfigMetadata
    Can only be specified if VPC flow logs for this subnetwork is enabled. Configures whether all, none or a subset of metadata fields should be added to the reported VPC flow logs. Default is EXCLUDE_ALL_METADATA.
    MetadataFields List<string>
    Can only be specified if VPC flow logs for this subnetwork is enabled and "metadata" was set to CUSTOM_METADATA.
    AggregationInterval SubnetworkLogConfigAggregationInterval
    Can only be specified if VPC flow logging for this subnetwork is enabled. Toggles the aggregation interval for collecting flow logs. Increasing the interval time will reduce the amount of generated flow logs for long lasting connections. Default is an interval of 5 seconds per connection.
    Enable bool
    Whether to enable flow logging for this subnetwork. If this field is not explicitly set, it will not appear in get listings. If not set the default behavior is determined by the org policy, if there is no org policy specified, then it will default to disabled. Flow logging isn't supported if the subnet purpose field is set to REGIONAL_MANAGED_PROXY.
    FilterExpr string
    Can only be specified if VPC flow logs for this subnetwork is enabled. The filter expression is used to define which VPC flow logs should be exported to Cloud Logging.
    FlowSampling float64
    Can only be specified if VPC flow logging for this subnetwork is enabled. The value of the field must be in [0, 1]. Set the sampling rate of VPC flow logs within the subnetwork where 1.0 means all collected logs are reported and 0.0 means no logs are reported. Default is 0.5 unless otherwise specified by the org policy, which means half of all collected logs are reported.
    Metadata SubnetworkLogConfigMetadata
    Can only be specified if VPC flow logs for this subnetwork is enabled. Configures whether all, none or a subset of metadata fields should be added to the reported VPC flow logs. Default is EXCLUDE_ALL_METADATA.
    MetadataFields []string
    Can only be specified if VPC flow logs for this subnetwork is enabled and "metadata" was set to CUSTOM_METADATA.
    aggregationInterval SubnetworkLogConfigAggregationInterval
    Can only be specified if VPC flow logging for this subnetwork is enabled. Toggles the aggregation interval for collecting flow logs. Increasing the interval time will reduce the amount of generated flow logs for long lasting connections. Default is an interval of 5 seconds per connection.
    enable Boolean
    Whether to enable flow logging for this subnetwork. If this field is not explicitly set, it will not appear in get listings. If not set the default behavior is determined by the org policy, if there is no org policy specified, then it will default to disabled. Flow logging isn't supported if the subnet purpose field is set to REGIONAL_MANAGED_PROXY.
    filterExpr String
    Can only be specified if VPC flow logs for this subnetwork is enabled. The filter expression is used to define which VPC flow logs should be exported to Cloud Logging.
    flowSampling Double
    Can only be specified if VPC flow logging for this subnetwork is enabled. The value of the field must be in [0, 1]. Set the sampling rate of VPC flow logs within the subnetwork where 1.0 means all collected logs are reported and 0.0 means no logs are reported. Default is 0.5 unless otherwise specified by the org policy, which means half of all collected logs are reported.
    metadata SubnetworkLogConfigMetadata
    Can only be specified if VPC flow logs for this subnetwork is enabled. Configures whether all, none or a subset of metadata fields should be added to the reported VPC flow logs. Default is EXCLUDE_ALL_METADATA.
    metadataFields List<String>
    Can only be specified if VPC flow logs for this subnetwork is enabled and "metadata" was set to CUSTOM_METADATA.
    aggregationInterval SubnetworkLogConfigAggregationInterval
    Can only be specified if VPC flow logging for this subnetwork is enabled. Toggles the aggregation interval for collecting flow logs. Increasing the interval time will reduce the amount of generated flow logs for long lasting connections. Default is an interval of 5 seconds per connection.
    enable boolean
    Whether to enable flow logging for this subnetwork. If this field is not explicitly set, it will not appear in get listings. If not set the default behavior is determined by the org policy, if there is no org policy specified, then it will default to disabled. Flow logging isn't supported if the subnet purpose field is set to REGIONAL_MANAGED_PROXY.
    filterExpr string
    Can only be specified if VPC flow logs for this subnetwork is enabled. The filter expression is used to define which VPC flow logs should be exported to Cloud Logging.
    flowSampling number
    Can only be specified if VPC flow logging for this subnetwork is enabled. The value of the field must be in [0, 1]. Set the sampling rate of VPC flow logs within the subnetwork where 1.0 means all collected logs are reported and 0.0 means no logs are reported. Default is 0.5 unless otherwise specified by the org policy, which means half of all collected logs are reported.
    metadata SubnetworkLogConfigMetadata
    Can only be specified if VPC flow logs for this subnetwork is enabled. Configures whether all, none or a subset of metadata fields should be added to the reported VPC flow logs. Default is EXCLUDE_ALL_METADATA.
    metadataFields string[]
    Can only be specified if VPC flow logs for this subnetwork is enabled and "metadata" was set to CUSTOM_METADATA.
    aggregation_interval SubnetworkLogConfigAggregationInterval
    Can only be specified if VPC flow logging for this subnetwork is enabled. Toggles the aggregation interval for collecting flow logs. Increasing the interval time will reduce the amount of generated flow logs for long lasting connections. Default is an interval of 5 seconds per connection.
    enable bool
    Whether to enable flow logging for this subnetwork. If this field is not explicitly set, it will not appear in get listings. If not set the default behavior is determined by the org policy, if there is no org policy specified, then it will default to disabled. Flow logging isn't supported if the subnet purpose field is set to REGIONAL_MANAGED_PROXY.
    filter_expr str
    Can only be specified if VPC flow logs for this subnetwork is enabled. The filter expression is used to define which VPC flow logs should be exported to Cloud Logging.
    flow_sampling float
    Can only be specified if VPC flow logging for this subnetwork is enabled. The value of the field must be in [0, 1]. Set the sampling rate of VPC flow logs within the subnetwork where 1.0 means all collected logs are reported and 0.0 means no logs are reported. Default is 0.5 unless otherwise specified by the org policy, which means half of all collected logs are reported.
    metadata SubnetworkLogConfigMetadata
    Can only be specified if VPC flow logs for this subnetwork is enabled. Configures whether all, none or a subset of metadata fields should be added to the reported VPC flow logs. Default is EXCLUDE_ALL_METADATA.
    metadata_fields Sequence[str]
    Can only be specified if VPC flow logs for this subnetwork is enabled and "metadata" was set to CUSTOM_METADATA.
    aggregationInterval "INTERVAL_10_MIN" | "INTERVAL_15_MIN" | "INTERVAL_1_MIN" | "INTERVAL_30_SEC" | "INTERVAL_5_MIN" | "INTERVAL_5_SEC"
    Can only be specified if VPC flow logging for this subnetwork is enabled. Toggles the aggregation interval for collecting flow logs. Increasing the interval time will reduce the amount of generated flow logs for long lasting connections. Default is an interval of 5 seconds per connection.
    enable Boolean
    Whether to enable flow logging for this subnetwork. If this field is not explicitly set, it will not appear in get listings. If not set the default behavior is determined by the org policy, if there is no org policy specified, then it will default to disabled. Flow logging isn't supported if the subnet purpose field is set to REGIONAL_MANAGED_PROXY.
    filterExpr String
    Can only be specified if VPC flow logs for this subnetwork is enabled. The filter expression is used to define which VPC flow logs should be exported to Cloud Logging.
    flowSampling Number
    Can only be specified if VPC flow logging for this subnetwork is enabled. The value of the field must be in [0, 1]. Set the sampling rate of VPC flow logs within the subnetwork where 1.0 means all collected logs are reported and 0.0 means no logs are reported. Default is 0.5 unless otherwise specified by the org policy, which means half of all collected logs are reported.
    metadata "CUSTOM_METADATA" | "EXCLUDE_ALL_METADATA" | "INCLUDE_ALL_METADATA"
    Can only be specified if VPC flow logs for this subnetwork is enabled. Configures whether all, none or a subset of metadata fields should be added to the reported VPC flow logs. Default is EXCLUDE_ALL_METADATA.
    metadataFields List<String>
    Can only be specified if VPC flow logs for this subnetwork is enabled and "metadata" was set to CUSTOM_METADATA.

    SubnetworkLogConfigAggregationInterval, SubnetworkLogConfigAggregationIntervalArgs

    Interval10Min
    INTERVAL_10_MIN
    Interval15Min
    INTERVAL_15_MIN
    Interval1Min
    INTERVAL_1_MIN
    Interval30Sec
    INTERVAL_30_SEC
    Interval5Min
    INTERVAL_5_MIN
    Interval5Sec
    INTERVAL_5_SEC
    SubnetworkLogConfigAggregationIntervalInterval10Min
    INTERVAL_10_MIN
    SubnetworkLogConfigAggregationIntervalInterval15Min
    INTERVAL_15_MIN
    SubnetworkLogConfigAggregationIntervalInterval1Min
    INTERVAL_1_MIN
    SubnetworkLogConfigAggregationIntervalInterval30Sec
    INTERVAL_30_SEC
    SubnetworkLogConfigAggregationIntervalInterval5Min
    INTERVAL_5_MIN
    SubnetworkLogConfigAggregationIntervalInterval5Sec
    INTERVAL_5_SEC
    Interval10Min
    INTERVAL_10_MIN
    Interval15Min
    INTERVAL_15_MIN
    Interval1Min
    INTERVAL_1_MIN
    Interval30Sec
    INTERVAL_30_SEC
    Interval5Min
    INTERVAL_5_MIN
    Interval5Sec
    INTERVAL_5_SEC
    Interval10Min
    INTERVAL_10_MIN
    Interval15Min
    INTERVAL_15_MIN
    Interval1Min
    INTERVAL_1_MIN
    Interval30Sec
    INTERVAL_30_SEC
    Interval5Min
    INTERVAL_5_MIN
    Interval5Sec
    INTERVAL_5_SEC
    INTERVAL10_MIN
    INTERVAL_10_MIN
    INTERVAL15_MIN
    INTERVAL_15_MIN
    INTERVAL1_MIN
    INTERVAL_1_MIN
    INTERVAL30_SEC
    INTERVAL_30_SEC
    INTERVAL5_MIN
    INTERVAL_5_MIN
    INTERVAL5_SEC
    INTERVAL_5_SEC
    "INTERVAL_10_MIN"
    INTERVAL_10_MIN
    "INTERVAL_15_MIN"
    INTERVAL_15_MIN
    "INTERVAL_1_MIN"
    INTERVAL_1_MIN
    "INTERVAL_30_SEC"
    INTERVAL_30_SEC
    "INTERVAL_5_MIN"
    INTERVAL_5_MIN
    "INTERVAL_5_SEC"
    INTERVAL_5_SEC

    SubnetworkLogConfigMetadata, SubnetworkLogConfigMetadataArgs

    CustomMetadata
    CUSTOM_METADATA
    ExcludeAllMetadata
    EXCLUDE_ALL_METADATA
    IncludeAllMetadata
    INCLUDE_ALL_METADATA
    SubnetworkLogConfigMetadataCustomMetadata
    CUSTOM_METADATA
    SubnetworkLogConfigMetadataExcludeAllMetadata
    EXCLUDE_ALL_METADATA
    SubnetworkLogConfigMetadataIncludeAllMetadata
    INCLUDE_ALL_METADATA
    CustomMetadata
    CUSTOM_METADATA
    ExcludeAllMetadata
    EXCLUDE_ALL_METADATA
    IncludeAllMetadata
    INCLUDE_ALL_METADATA
    CustomMetadata
    CUSTOM_METADATA
    ExcludeAllMetadata
    EXCLUDE_ALL_METADATA
    IncludeAllMetadata
    INCLUDE_ALL_METADATA
    CUSTOM_METADATA
    CUSTOM_METADATA
    EXCLUDE_ALL_METADATA
    EXCLUDE_ALL_METADATA
    INCLUDE_ALL_METADATA
    INCLUDE_ALL_METADATA
    "CUSTOM_METADATA"
    CUSTOM_METADATA
    "EXCLUDE_ALL_METADATA"
    EXCLUDE_ALL_METADATA
    "INCLUDE_ALL_METADATA"
    INCLUDE_ALL_METADATA

    SubnetworkLogConfigResponse, SubnetworkLogConfigResponseArgs

    AggregationInterval string
    Can only be specified if VPC flow logging for this subnetwork is enabled. Toggles the aggregation interval for collecting flow logs. Increasing the interval time will reduce the amount of generated flow logs for long lasting connections. Default is an interval of 5 seconds per connection.
    Enable bool
    Whether to enable flow logging for this subnetwork. If this field is not explicitly set, it will not appear in get listings. If not set the default behavior is determined by the org policy, if there is no org policy specified, then it will default to disabled. Flow logging isn't supported if the subnet purpose field is set to REGIONAL_MANAGED_PROXY.
    FilterExpr string
    Can only be specified if VPC flow logs for this subnetwork is enabled. The filter expression is used to define which VPC flow logs should be exported to Cloud Logging.
    FlowSampling double
    Can only be specified if VPC flow logging for this subnetwork is enabled. The value of the field must be in [0, 1]. Set the sampling rate of VPC flow logs within the subnetwork where 1.0 means all collected logs are reported and 0.0 means no logs are reported. Default is 0.5 unless otherwise specified by the org policy, which means half of all collected logs are reported.
    Metadata string
    Can only be specified if VPC flow logs for this subnetwork is enabled. Configures whether all, none or a subset of metadata fields should be added to the reported VPC flow logs. Default is EXCLUDE_ALL_METADATA.
    MetadataFields List<string>
    Can only be specified if VPC flow logs for this subnetwork is enabled and "metadata" was set to CUSTOM_METADATA.
    AggregationInterval string
    Can only be specified if VPC flow logging for this subnetwork is enabled. Toggles the aggregation interval for collecting flow logs. Increasing the interval time will reduce the amount of generated flow logs for long lasting connections. Default is an interval of 5 seconds per connection.
    Enable bool
    Whether to enable flow logging for this subnetwork. If this field is not explicitly set, it will not appear in get listings. If not set the default behavior is determined by the org policy, if there is no org policy specified, then it will default to disabled. Flow logging isn't supported if the subnet purpose field is set to REGIONAL_MANAGED_PROXY.
    FilterExpr string
    Can only be specified if VPC flow logs for this subnetwork is enabled. The filter expression is used to define which VPC flow logs should be exported to Cloud Logging.
    FlowSampling float64
    Can only be specified if VPC flow logging for this subnetwork is enabled. The value of the field must be in [0, 1]. Set the sampling rate of VPC flow logs within the subnetwork where 1.0 means all collected logs are reported and 0.0 means no logs are reported. Default is 0.5 unless otherwise specified by the org policy, which means half of all collected logs are reported.
    Metadata string
    Can only be specified if VPC flow logs for this subnetwork is enabled. Configures whether all, none or a subset of metadata fields should be added to the reported VPC flow logs. Default is EXCLUDE_ALL_METADATA.
    MetadataFields []string
    Can only be specified if VPC flow logs for this subnetwork is enabled and "metadata" was set to CUSTOM_METADATA.
    aggregationInterval String
    Can only be specified if VPC flow logging for this subnetwork is enabled. Toggles the aggregation interval for collecting flow logs. Increasing the interval time will reduce the amount of generated flow logs for long lasting connections. Default is an interval of 5 seconds per connection.
    enable Boolean
    Whether to enable flow logging for this subnetwork. If this field is not explicitly set, it will not appear in get listings. If not set the default behavior is determined by the org policy, if there is no org policy specified, then it will default to disabled. Flow logging isn't supported if the subnet purpose field is set to REGIONAL_MANAGED_PROXY.
    filterExpr String
    Can only be specified if VPC flow logs for this subnetwork is enabled. The filter expression is used to define which VPC flow logs should be exported to Cloud Logging.
    flowSampling Double
    Can only be specified if VPC flow logging for this subnetwork is enabled. The value of the field must be in [0, 1]. Set the sampling rate of VPC flow logs within the subnetwork where 1.0 means all collected logs are reported and 0.0 means no logs are reported. Default is 0.5 unless otherwise specified by the org policy, which means half of all collected logs are reported.
    metadata String
    Can only be specified if VPC flow logs for this subnetwork is enabled. Configures whether all, none or a subset of metadata fields should be added to the reported VPC flow logs. Default is EXCLUDE_ALL_METADATA.
    metadataFields List<String>
    Can only be specified if VPC flow logs for this subnetwork is enabled and "metadata" was set to CUSTOM_METADATA.
    aggregationInterval string
    Can only be specified if VPC flow logging for this subnetwork is enabled. Toggles the aggregation interval for collecting flow logs. Increasing the interval time will reduce the amount of generated flow logs for long lasting connections. Default is an interval of 5 seconds per connection.
    enable boolean
    Whether to enable flow logging for this subnetwork. If this field is not explicitly set, it will not appear in get listings. If not set the default behavior is determined by the org policy, if there is no org policy specified, then it will default to disabled. Flow logging isn't supported if the subnet purpose field is set to REGIONAL_MANAGED_PROXY.
    filterExpr string
    Can only be specified if VPC flow logs for this subnetwork is enabled. The filter expression is used to define which VPC flow logs should be exported to Cloud Logging.
    flowSampling number
    Can only be specified if VPC flow logging for this subnetwork is enabled. The value of the field must be in [0, 1]. Set the sampling rate of VPC flow logs within the subnetwork where 1.0 means all collected logs are reported and 0.0 means no logs are reported. Default is 0.5 unless otherwise specified by the org policy, which means half of all collected logs are reported.
    metadata string
    Can only be specified if VPC flow logs for this subnetwork is enabled. Configures whether all, none or a subset of metadata fields should be added to the reported VPC flow logs. Default is EXCLUDE_ALL_METADATA.
    metadataFields string[]
    Can only be specified if VPC flow logs for this subnetwork is enabled and "metadata" was set to CUSTOM_METADATA.
    aggregation_interval str
    Can only be specified if VPC flow logging for this subnetwork is enabled. Toggles the aggregation interval for collecting flow logs. Increasing the interval time will reduce the amount of generated flow logs for long lasting connections. Default is an interval of 5 seconds per connection.
    enable bool
    Whether to enable flow logging for this subnetwork. If this field is not explicitly set, it will not appear in get listings. If not set the default behavior is determined by the org policy, if there is no org policy specified, then it will default to disabled. Flow logging isn't supported if the subnet purpose field is set to REGIONAL_MANAGED_PROXY.
    filter_expr str
    Can only be specified if VPC flow logs for this subnetwork is enabled. The filter expression is used to define which VPC flow logs should be exported to Cloud Logging.
    flow_sampling float
    Can only be specified if VPC flow logging for this subnetwork is enabled. The value of the field must be in [0, 1]. Set the sampling rate of VPC flow logs within the subnetwork where 1.0 means all collected logs are reported and 0.0 means no logs are reported. Default is 0.5 unless otherwise specified by the org policy, which means half of all collected logs are reported.
    metadata str
    Can only be specified if VPC flow logs for this subnetwork is enabled. Configures whether all, none or a subset of metadata fields should be added to the reported VPC flow logs. Default is EXCLUDE_ALL_METADATA.
    metadata_fields Sequence[str]
    Can only be specified if VPC flow logs for this subnetwork is enabled and "metadata" was set to CUSTOM_METADATA.
    aggregationInterval String
    Can only be specified if VPC flow logging for this subnetwork is enabled. Toggles the aggregation interval for collecting flow logs. Increasing the interval time will reduce the amount of generated flow logs for long lasting connections. Default is an interval of 5 seconds per connection.
    enable Boolean
    Whether to enable flow logging for this subnetwork. If this field is not explicitly set, it will not appear in get listings. If not set the default behavior is determined by the org policy, if there is no org policy specified, then it will default to disabled. Flow logging isn't supported if the subnet purpose field is set to REGIONAL_MANAGED_PROXY.
    filterExpr String
    Can only be specified if VPC flow logs for this subnetwork is enabled. The filter expression is used to define which VPC flow logs should be exported to Cloud Logging.
    flowSampling Number
    Can only be specified if VPC flow logging for this subnetwork is enabled. The value of the field must be in [0, 1]. Set the sampling rate of VPC flow logs within the subnetwork where 1.0 means all collected logs are reported and 0.0 means no logs are reported. Default is 0.5 unless otherwise specified by the org policy, which means half of all collected logs are reported.
    metadata String
    Can only be specified if VPC flow logs for this subnetwork is enabled. Configures whether all, none or a subset of metadata fields should be added to the reported VPC flow logs. Default is EXCLUDE_ALL_METADATA.
    metadataFields List<String>
    Can only be specified if VPC flow logs for this subnetwork is enabled and "metadata" was set to CUSTOM_METADATA.

    SubnetworkPrivateIpv6GoogleAccess, SubnetworkPrivateIpv6GoogleAccessArgs

    DisableGoogleAccess
    DISABLE_GOOGLE_ACCESSDisable private IPv6 access to/from Google services.
    EnableBidirectionalAccessToGoogle
    ENABLE_BIDIRECTIONAL_ACCESS_TO_GOOGLEBidirectional private IPv6 access to/from Google services.
    EnableOutboundVmAccessToGoogle
    ENABLE_OUTBOUND_VM_ACCESS_TO_GOOGLEOutbound private IPv6 access from VMs in this subnet to Google services.
    SubnetworkPrivateIpv6GoogleAccessDisableGoogleAccess
    DISABLE_GOOGLE_ACCESSDisable private IPv6 access to/from Google services.
    SubnetworkPrivateIpv6GoogleAccessEnableBidirectionalAccessToGoogle
    ENABLE_BIDIRECTIONAL_ACCESS_TO_GOOGLEBidirectional private IPv6 access to/from Google services.
    SubnetworkPrivateIpv6GoogleAccessEnableOutboundVmAccessToGoogle
    ENABLE_OUTBOUND_VM_ACCESS_TO_GOOGLEOutbound private IPv6 access from VMs in this subnet to Google services.
    DisableGoogleAccess
    DISABLE_GOOGLE_ACCESSDisable private IPv6 access to/from Google services.
    EnableBidirectionalAccessToGoogle
    ENABLE_BIDIRECTIONAL_ACCESS_TO_GOOGLEBidirectional private IPv6 access to/from Google services.
    EnableOutboundVmAccessToGoogle
    ENABLE_OUTBOUND_VM_ACCESS_TO_GOOGLEOutbound private IPv6 access from VMs in this subnet to Google services.
    DisableGoogleAccess
    DISABLE_GOOGLE_ACCESSDisable private IPv6 access to/from Google services.
    EnableBidirectionalAccessToGoogle
    ENABLE_BIDIRECTIONAL_ACCESS_TO_GOOGLEBidirectional private IPv6 access to/from Google services.
    EnableOutboundVmAccessToGoogle
    ENABLE_OUTBOUND_VM_ACCESS_TO_GOOGLEOutbound private IPv6 access from VMs in this subnet to Google services.
    DISABLE_GOOGLE_ACCESS
    DISABLE_GOOGLE_ACCESSDisable private IPv6 access to/from Google services.
    ENABLE_BIDIRECTIONAL_ACCESS_TO_GOOGLE
    ENABLE_BIDIRECTIONAL_ACCESS_TO_GOOGLEBidirectional private IPv6 access to/from Google services.
    ENABLE_OUTBOUND_VM_ACCESS_TO_GOOGLE
    ENABLE_OUTBOUND_VM_ACCESS_TO_GOOGLEOutbound private IPv6 access from VMs in this subnet to Google services.
    "DISABLE_GOOGLE_ACCESS"
    DISABLE_GOOGLE_ACCESSDisable private IPv6 access to/from Google services.
    "ENABLE_BIDIRECTIONAL_ACCESS_TO_GOOGLE"
    ENABLE_BIDIRECTIONAL_ACCESS_TO_GOOGLEBidirectional private IPv6 access to/from Google services.
    "ENABLE_OUTBOUND_VM_ACCESS_TO_GOOGLE"
    ENABLE_OUTBOUND_VM_ACCESS_TO_GOOGLEOutbound private IPv6 access from VMs in this subnet to Google services.

    SubnetworkPurpose, SubnetworkPurposeArgs

    GlobalManagedProxy
    GLOBAL_MANAGED_PROXYSubnet reserved for Global Envoy-based Load Balancing.
    InternalHttpsLoadBalancer
    INTERNAL_HTTPS_LOAD_BALANCERSubnet reserved for Internal HTTP(S) Load Balancing.
    Private
    PRIVATERegular user created or automatically created subnet.
    PrivateNat
    PRIVATE_NATSubnetwork used as source range for Private NAT Gateways.
    PrivateRfc1918
    PRIVATE_RFC_1918Regular user created or automatically created subnet.
    PrivateServiceConnect
    PRIVATE_SERVICE_CONNECTSubnetworks created for Private Service Connect in the producer network.
    RegionalManagedProxy
    REGIONAL_MANAGED_PROXYSubnetwork used for Regional Envoy-based Load Balancing.
    SubnetworkPurposeGlobalManagedProxy
    GLOBAL_MANAGED_PROXYSubnet reserved for Global Envoy-based Load Balancing.
    SubnetworkPurposeInternalHttpsLoadBalancer
    INTERNAL_HTTPS_LOAD_BALANCERSubnet reserved for Internal HTTP(S) Load Balancing.
    SubnetworkPurposePrivate
    PRIVATERegular user created or automatically created subnet.
    SubnetworkPurposePrivateNat
    PRIVATE_NATSubnetwork used as source range for Private NAT Gateways.
    SubnetworkPurposePrivateRfc1918
    PRIVATE_RFC_1918Regular user created or automatically created subnet.
    SubnetworkPurposePrivateServiceConnect
    PRIVATE_SERVICE_CONNECTSubnetworks created for Private Service Connect in the producer network.
    SubnetworkPurposeRegionalManagedProxy
    REGIONAL_MANAGED_PROXYSubnetwork used for Regional Envoy-based Load Balancing.
    GlobalManagedProxy
    GLOBAL_MANAGED_PROXYSubnet reserved for Global Envoy-based Load Balancing.
    InternalHttpsLoadBalancer
    INTERNAL_HTTPS_LOAD_BALANCERSubnet reserved for Internal HTTP(S) Load Balancing.
    Private
    PRIVATERegular user created or automatically created subnet.
    PrivateNat
    PRIVATE_NATSubnetwork used as source range for Private NAT Gateways.
    PrivateRfc1918
    PRIVATE_RFC_1918Regular user created or automatically created subnet.
    PrivateServiceConnect
    PRIVATE_SERVICE_CONNECTSubnetworks created for Private Service Connect in the producer network.
    RegionalManagedProxy
    REGIONAL_MANAGED_PROXYSubnetwork used for Regional Envoy-based Load Balancing.
    GlobalManagedProxy
    GLOBAL_MANAGED_PROXYSubnet reserved for Global Envoy-based Load Balancing.
    InternalHttpsLoadBalancer
    INTERNAL_HTTPS_LOAD_BALANCERSubnet reserved for Internal HTTP(S) Load Balancing.
    Private
    PRIVATERegular user created or automatically created subnet.
    PrivateNat
    PRIVATE_NATSubnetwork used as source range for Private NAT Gateways.
    PrivateRfc1918
    PRIVATE_RFC_1918Regular user created or automatically created subnet.
    PrivateServiceConnect
    PRIVATE_SERVICE_CONNECTSubnetworks created for Private Service Connect in the producer network.
    RegionalManagedProxy
    REGIONAL_MANAGED_PROXYSubnetwork used for Regional Envoy-based Load Balancing.
    GLOBAL_MANAGED_PROXY
    GLOBAL_MANAGED_PROXYSubnet reserved for Global Envoy-based Load Balancing.
    INTERNAL_HTTPS_LOAD_BALANCER
    INTERNAL_HTTPS_LOAD_BALANCERSubnet reserved for Internal HTTP(S) Load Balancing.
    PRIVATE
    PRIVATERegular user created or automatically created subnet.
    PRIVATE_NAT
    PRIVATE_NATSubnetwork used as source range for Private NAT Gateways.
    PRIVATE_RFC1918
    PRIVATE_RFC_1918Regular user created or automatically created subnet.
    PRIVATE_SERVICE_CONNECT
    PRIVATE_SERVICE_CONNECTSubnetworks created for Private Service Connect in the producer network.
    REGIONAL_MANAGED_PROXY
    REGIONAL_MANAGED_PROXYSubnetwork used for Regional Envoy-based Load Balancing.
    "GLOBAL_MANAGED_PROXY"
    GLOBAL_MANAGED_PROXYSubnet reserved for Global Envoy-based Load Balancing.
    "INTERNAL_HTTPS_LOAD_BALANCER"
    INTERNAL_HTTPS_LOAD_BALANCERSubnet reserved for Internal HTTP(S) Load Balancing.
    "PRIVATE"
    PRIVATERegular user created or automatically created subnet.
    "PRIVATE_NAT"
    PRIVATE_NATSubnetwork used as source range for Private NAT Gateways.
    "PRIVATE_RFC_1918"
    PRIVATE_RFC_1918Regular user created or automatically created subnet.
    "PRIVATE_SERVICE_CONNECT"
    PRIVATE_SERVICE_CONNECTSubnetworks created for Private Service Connect in the producer network.
    "REGIONAL_MANAGED_PROXY"
    REGIONAL_MANAGED_PROXYSubnetwork used for Regional Envoy-based Load Balancing.

    SubnetworkRole, SubnetworkRoleArgs

    Active
    ACTIVEThe ACTIVE subnet that is currently used.
    Backup
    BACKUPThe BACKUP subnet that could be promoted to ACTIVE.
    SubnetworkRoleActive
    ACTIVEThe ACTIVE subnet that is currently used.
    SubnetworkRoleBackup
    BACKUPThe BACKUP subnet that could be promoted to ACTIVE.
    Active
    ACTIVEThe ACTIVE subnet that is currently used.
    Backup
    BACKUPThe BACKUP subnet that could be promoted to ACTIVE.
    Active
    ACTIVEThe ACTIVE subnet that is currently used.
    Backup
    BACKUPThe BACKUP subnet that could be promoted to ACTIVE.
    ACTIVE
    ACTIVEThe ACTIVE subnet that is currently used.
    BACKUP
    BACKUPThe BACKUP subnet that could be promoted to ACTIVE.
    "ACTIVE"
    ACTIVEThe ACTIVE subnet that is currently used.
    "BACKUP"
    BACKUPThe BACKUP subnet that could be promoted to ACTIVE.

    SubnetworkSecondaryRange, SubnetworkSecondaryRangeArgs

    IpCidrRange string
    The range of IP addresses belonging to this subnetwork secondary range. Provide this property when you create the subnetwork. Ranges must be unique and non-overlapping with all primary and secondary IP ranges within a network. Only IPv4 is supported. The range can be any range listed in the Valid ranges list.
    RangeName string
    The name associated with this subnetwork secondary range, used when adding an alias IP range to a VM instance. The name must be 1-63 characters long, and comply with RFC1035. The name must be unique within the subnetwork.
    ReservedInternalRange string
    The URL of the reserved internal range.
    IpCidrRange string
    The range of IP addresses belonging to this subnetwork secondary range. Provide this property when you create the subnetwork. Ranges must be unique and non-overlapping with all primary and secondary IP ranges within a network. Only IPv4 is supported. The range can be any range listed in the Valid ranges list.
    RangeName string
    The name associated with this subnetwork secondary range, used when adding an alias IP range to a VM instance. The name must be 1-63 characters long, and comply with RFC1035. The name must be unique within the subnetwork.
    ReservedInternalRange string
    The URL of the reserved internal range.
    ipCidrRange String
    The range of IP addresses belonging to this subnetwork secondary range. Provide this property when you create the subnetwork. Ranges must be unique and non-overlapping with all primary and secondary IP ranges within a network. Only IPv4 is supported. The range can be any range listed in the Valid ranges list.
    rangeName String
    The name associated with this subnetwork secondary range, used when adding an alias IP range to a VM instance. The name must be 1-63 characters long, and comply with RFC1035. The name must be unique within the subnetwork.
    reservedInternalRange String
    The URL of the reserved internal range.
    ipCidrRange string
    The range of IP addresses belonging to this subnetwork secondary range. Provide this property when you create the subnetwork. Ranges must be unique and non-overlapping with all primary and secondary IP ranges within a network. Only IPv4 is supported. The range can be any range listed in the Valid ranges list.
    rangeName string
    The name associated with this subnetwork secondary range, used when adding an alias IP range to a VM instance. The name must be 1-63 characters long, and comply with RFC1035. The name must be unique within the subnetwork.
    reservedInternalRange string
    The URL of the reserved internal range.
    ip_cidr_range str
    The range of IP addresses belonging to this subnetwork secondary range. Provide this property when you create the subnetwork. Ranges must be unique and non-overlapping with all primary and secondary IP ranges within a network. Only IPv4 is supported. The range can be any range listed in the Valid ranges list.
    range_name str
    The name associated with this subnetwork secondary range, used when adding an alias IP range to a VM instance. The name must be 1-63 characters long, and comply with RFC1035. The name must be unique within the subnetwork.
    reserved_internal_range str
    The URL of the reserved internal range.
    ipCidrRange String
    The range of IP addresses belonging to this subnetwork secondary range. Provide this property when you create the subnetwork. Ranges must be unique and non-overlapping with all primary and secondary IP ranges within a network. Only IPv4 is supported. The range can be any range listed in the Valid ranges list.
    rangeName String
    The name associated with this subnetwork secondary range, used when adding an alias IP range to a VM instance. The name must be 1-63 characters long, and comply with RFC1035. The name must be unique within the subnetwork.
    reservedInternalRange String
    The URL of the reserved internal range.

    SubnetworkSecondaryRangeResponse, SubnetworkSecondaryRangeResponseArgs

    IpCidrRange string
    The range of IP addresses belonging to this subnetwork secondary range. Provide this property when you create the subnetwork. Ranges must be unique and non-overlapping with all primary and secondary IP ranges within a network. Only IPv4 is supported. The range can be any range listed in the Valid ranges list.
    RangeName string
    The name associated with this subnetwork secondary range, used when adding an alias IP range to a VM instance. The name must be 1-63 characters long, and comply with RFC1035. The name must be unique within the subnetwork.
    ReservedInternalRange string
    The URL of the reserved internal range.
    IpCidrRange string
    The range of IP addresses belonging to this subnetwork secondary range. Provide this property when you create the subnetwork. Ranges must be unique and non-overlapping with all primary and secondary IP ranges within a network. Only IPv4 is supported. The range can be any range listed in the Valid ranges list.
    RangeName string
    The name associated with this subnetwork secondary range, used when adding an alias IP range to a VM instance. The name must be 1-63 characters long, and comply with RFC1035. The name must be unique within the subnetwork.
    ReservedInternalRange string
    The URL of the reserved internal range.
    ipCidrRange String
    The range of IP addresses belonging to this subnetwork secondary range. Provide this property when you create the subnetwork. Ranges must be unique and non-overlapping with all primary and secondary IP ranges within a network. Only IPv4 is supported. The range can be any range listed in the Valid ranges list.
    rangeName String
    The name associated with this subnetwork secondary range, used when adding an alias IP range to a VM instance. The name must be 1-63 characters long, and comply with RFC1035. The name must be unique within the subnetwork.
    reservedInternalRange String
    The URL of the reserved internal range.
    ipCidrRange string
    The range of IP addresses belonging to this subnetwork secondary range. Provide this property when you create the subnetwork. Ranges must be unique and non-overlapping with all primary and secondary IP ranges within a network. Only IPv4 is supported. The range can be any range listed in the Valid ranges list.
    rangeName string
    The name associated with this subnetwork secondary range, used when adding an alias IP range to a VM instance. The name must be 1-63 characters long, and comply with RFC1035. The name must be unique within the subnetwork.
    reservedInternalRange string
    The URL of the reserved internal range.
    ip_cidr_range str
    The range of IP addresses belonging to this subnetwork secondary range. Provide this property when you create the subnetwork. Ranges must be unique and non-overlapping with all primary and secondary IP ranges within a network. Only IPv4 is supported. The range can be any range listed in the Valid ranges list.
    range_name str
    The name associated with this subnetwork secondary range, used when adding an alias IP range to a VM instance. The name must be 1-63 characters long, and comply with RFC1035. The name must be unique within the subnetwork.
    reserved_internal_range str
    The URL of the reserved internal range.
    ipCidrRange String
    The range of IP addresses belonging to this subnetwork secondary range. Provide this property when you create the subnetwork. Ranges must be unique and non-overlapping with all primary and secondary IP ranges within a network. Only IPv4 is supported. The range can be any range listed in the Valid ranges list.
    rangeName String
    The name associated with this subnetwork secondary range, used when adding an alias IP range to a VM instance. The name must be 1-63 characters long, and comply with RFC1035. The name must be unique within the subnetwork.
    reservedInternalRange String
    The URL of the reserved internal range.

    SubnetworkStackType, SubnetworkStackTypeArgs

    Ipv4Ipv6
    IPV4_IPV6New VMs in this subnet can have both IPv4 and IPv6 addresses.
    Ipv4Only
    IPV4_ONLYNew VMs in this subnet will only be assigned IPv4 addresses.
    SubnetworkStackTypeIpv4Ipv6
    IPV4_IPV6New VMs in this subnet can have both IPv4 and IPv6 addresses.
    SubnetworkStackTypeIpv4Only
    IPV4_ONLYNew VMs in this subnet will only be assigned IPv4 addresses.
    Ipv4Ipv6
    IPV4_IPV6New VMs in this subnet can have both IPv4 and IPv6 addresses.
    Ipv4Only
    IPV4_ONLYNew VMs in this subnet will only be assigned IPv4 addresses.
    Ipv4Ipv6
    IPV4_IPV6New VMs in this subnet can have both IPv4 and IPv6 addresses.
    Ipv4Only
    IPV4_ONLYNew VMs in this subnet will only be assigned IPv4 addresses.
    IPV4_IPV6
    IPV4_IPV6New VMs in this subnet can have both IPv4 and IPv6 addresses.
    IPV4_ONLY
    IPV4_ONLYNew VMs in this subnet will only be assigned IPv4 addresses.
    "IPV4_IPV6"
    IPV4_IPV6New VMs in this subnet can have both IPv4 and IPv6 addresses.
    "IPV4_ONLY"
    IPV4_ONLYNew VMs in this subnet will only be assigned IPv4 addresses.

    Package Details

    Repository
    Google Cloud Native pulumi/pulumi-google-native
    License
    Apache-2.0
    google-native logo

    Google Cloud Native is in preview. Google Cloud Classic is fully supported.

    Google Cloud Native v0.32.0 published on Wednesday, Nov 29, 2023 by Pulumi
    pulumi/pulumi-google-native