import * as pulumi from "@pulumi/pulumi"; /** * Represents a Regional SSL policy. SSL policies give you the ability to control the * features of SSL that your SSL proxy or HTTPS load balancer negotiates. * * To get more information about RegionSslPolicy, see: * * * [API documentation](https://cloud.google.com/compute/docs/reference/rest/v1/regionSslPolicies) * * How-to Guides * * [Using SSL Policies](https://cloud.google.com/compute/docs/load-balancing/ssl-policies) * * ## Import * * RegionSslPolicy can be imported using any of these accepted formats: * * * `projects/{{project}}/regions/{{region}}/sslPolicies/{{name}}` * * `{{project}}/{{region}}/{{name}}` * * `{{region}}/{{name}}` * * `{{name}}` * * When using the `pulumi import` command, RegionSslPolicy can be imported using one of the formats above. For example: * * ```sh * $ pulumi import gcp:compute/regionSslPolicy:RegionSslPolicy default projects/{{project}}/regions/{{region}}/sslPolicies/{{name}} * $ pulumi import gcp:compute/regionSslPolicy:RegionSslPolicy default {{project}}/{{region}}/{{name}} * $ pulumi import gcp:compute/regionSslPolicy:RegionSslPolicy default {{region}}/{{name}} * $ pulumi import gcp:compute/regionSslPolicy:RegionSslPolicy default {{name}} * ``` */ export declare class RegionSslPolicy extends pulumi.CustomResource { /** * Get an existing RegionSslPolicy resource's state with the given name, ID, and optional extra * properties used to qualify the lookup. * * @param name The _unique_ name of the resulting resource. * @param id The _unique_ provider ID of the resource to lookup. * @param state Any extra arguments used during the lookup. * @param opts Optional settings to control the behavior of the CustomResource. */ static get(name: string, id: pulumi.Input, state?: RegionSslPolicyState, opts?: pulumi.CustomResourceOptions): RegionSslPolicy; /** * Returns true if the given object is an instance of RegionSslPolicy. This is designed to work even * when multiple copies of the Pulumi SDK have been loaded into the same process. */ static isInstance(obj: any): obj is RegionSslPolicy; /** * Creation timestamp in RFC3339 text format. */ readonly creationTimestamp: pulumi.Output; /** * A list of features enabled when the selected profile is CUSTOM. The * method returns the set of features that can be specified in this * list. This field must be empty if the profile is not CUSTOM. * See the [official documentation](https://cloud.google.com/compute/docs/load-balancing/ssl-policies#profilefeaturesupport) * for which ciphers are available to use. **Note**: this argument * *must* be present when using the `CUSTOM` profile. This argument * *must not* be present when using any other profile. */ readonly customFeatures: pulumi.Output; /** * An optional description of this resource. */ readonly description: pulumi.Output; /** * The list of features enabled in the SSL policy. */ readonly enabledFeatures: pulumi.Output; /** * Fingerprint of this resource. A hash of the contents stored in this * object. This field is used in optimistic locking. */ readonly fingerprint: pulumi.Output; /** * The minimum version of SSL protocol that can be used by the clients * to establish a connection with the load balancer. When set to * `TLS_1_3`, the profile field must be set to `RESTRICTED`. * Default value is `TLS_1_0`. * Possible values are: `TLS_1_0`, `TLS_1_1`, `TLS_1_2`, `TLS_1_3`. */ readonly minTlsVersion: pulumi.Output; /** * Name of the resource. Provided by the client when the resource is * created. The name must be 1-63 characters long, and comply with * RFC1035. Specifically, the name must be 1-63 characters long and match * the regular expression `a-z?` which means the * first character must be a lowercase letter, and all following * characters must be a dash, lowercase letter, or digit, except the last * character, which cannot be a dash. */ readonly name: pulumi.Output; /** * Profile specifies the set of SSL features that can be used by the * load balancer when negotiating SSL with clients. If using `CUSTOM`, * the set of SSL features to enable must be specified in the * `customFeatures` field. * See the [official documentation](https://cloud.google.com/compute/docs/load-balancing/ssl-policies#profilefeaturesupport) * for information on what cipher suites each profile provides. If * `CUSTOM` is used, the `customFeatures` attribute **must be set**. * If set to `FIPS_202205`, `minTlsVersion` must also be set to * `TLS_1_2`. * Default value is `COMPATIBLE`. * Possible values are: `COMPATIBLE`, `MODERN`, `RESTRICTED`, `CUSTOM`, `FIPS_202205`. */ readonly profile: pulumi.Output; /** * The ID of the project in which the resource belongs. * If it is not provided, the provider project is used. */ readonly project: pulumi.Output; /** * The region where the regional SSL policy resides. */ readonly region: pulumi.Output; /** * The URI of the created resource. */ readonly selfLink: pulumi.Output; /** * Create a RegionSslPolicy resource with the given unique name, arguments, and options. * * @param name The _unique_ name of the resource. * @param args The arguments to use to populate this resource's properties. * @param opts A bag of options that control this resource's behavior. */ constructor(name: string, args?: RegionSslPolicyArgs, opts?: pulumi.CustomResourceOptions); } /** * Input properties used for looking up and filtering RegionSslPolicy resources. */ export interface RegionSslPolicyState { /** * Creation timestamp in RFC3339 text format. */ creationTimestamp?: pulumi.Input; /** * A list of features enabled when the selected profile is CUSTOM. The * method returns the set of features that can be specified in this * list. This field must be empty if the profile is not CUSTOM. * See the [official documentation](https://cloud.google.com/compute/docs/load-balancing/ssl-policies#profilefeaturesupport) * for which ciphers are available to use. **Note**: this argument * *must* be present when using the `CUSTOM` profile. This argument * *must not* be present when using any other profile. */ customFeatures?: pulumi.Input[]>; /** * An optional description of this resource. */ description?: pulumi.Input; /** * The list of features enabled in the SSL policy. */ enabledFeatures?: pulumi.Input[]>; /** * Fingerprint of this resource. A hash of the contents stored in this * object. This field is used in optimistic locking. */ fingerprint?: pulumi.Input; /** * The minimum version of SSL protocol that can be used by the clients * to establish a connection with the load balancer. When set to * `TLS_1_3`, the profile field must be set to `RESTRICTED`. * Default value is `TLS_1_0`. * Possible values are: `TLS_1_0`, `TLS_1_1`, `TLS_1_2`, `TLS_1_3`. */ minTlsVersion?: pulumi.Input; /** * Name of the resource. Provided by the client when the resource is * created. The name must be 1-63 characters long, and comply with * RFC1035. Specifically, the name must be 1-63 characters long and match * the regular expression `a-z?` which means the * first character must be a lowercase letter, and all following * characters must be a dash, lowercase letter, or digit, except the last * character, which cannot be a dash. */ name?: pulumi.Input; /** * Profile specifies the set of SSL features that can be used by the * load balancer when negotiating SSL with clients. If using `CUSTOM`, * the set of SSL features to enable must be specified in the * `customFeatures` field. * See the [official documentation](https://cloud.google.com/compute/docs/load-balancing/ssl-policies#profilefeaturesupport) * for information on what cipher suites each profile provides. If * `CUSTOM` is used, the `customFeatures` attribute **must be set**. * If set to `FIPS_202205`, `minTlsVersion` must also be set to * `TLS_1_2`. * Default value is `COMPATIBLE`. * Possible values are: `COMPATIBLE`, `MODERN`, `RESTRICTED`, `CUSTOM`, `FIPS_202205`. */ profile?: pulumi.Input; /** * The ID of the project in which the resource belongs. * If it is not provided, the provider project is used. */ project?: pulumi.Input; /** * The region where the regional SSL policy resides. */ region?: pulumi.Input; /** * The URI of the created resource. */ selfLink?: pulumi.Input; } /** * The set of arguments for constructing a RegionSslPolicy resource. */ export interface RegionSslPolicyArgs { /** * A list of features enabled when the selected profile is CUSTOM. The * method returns the set of features that can be specified in this * list. This field must be empty if the profile is not CUSTOM. * See the [official documentation](https://cloud.google.com/compute/docs/load-balancing/ssl-policies#profilefeaturesupport) * for which ciphers are available to use. **Note**: this argument * *must* be present when using the `CUSTOM` profile. This argument * *must not* be present when using any other profile. */ customFeatures?: pulumi.Input[]>; /** * An optional description of this resource. */ description?: pulumi.Input; /** * The minimum version of SSL protocol that can be used by the clients * to establish a connection with the load balancer. When set to * `TLS_1_3`, the profile field must be set to `RESTRICTED`. * Default value is `TLS_1_0`. * Possible values are: `TLS_1_0`, `TLS_1_1`, `TLS_1_2`, `TLS_1_3`. */ minTlsVersion?: pulumi.Input; /** * Name of the resource. Provided by the client when the resource is * created. The name must be 1-63 characters long, and comply with * RFC1035. Specifically, the name must be 1-63 characters long and match * the regular expression `a-z?` which means the * first character must be a lowercase letter, and all following * characters must be a dash, lowercase letter, or digit, except the last * character, which cannot be a dash. */ name?: pulumi.Input; /** * Profile specifies the set of SSL features that can be used by the * load balancer when negotiating SSL with clients. If using `CUSTOM`, * the set of SSL features to enable must be specified in the * `customFeatures` field. * See the [official documentation](https://cloud.google.com/compute/docs/load-balancing/ssl-policies#profilefeaturesupport) * for information on what cipher suites each profile provides. If * `CUSTOM` is used, the `customFeatures` attribute **must be set**. * If set to `FIPS_202205`, `minTlsVersion` must also be set to * `TLS_1_2`. * Default value is `COMPATIBLE`. * Possible values are: `COMPATIBLE`, `MODERN`, `RESTRICTED`, `CUSTOM`, `FIPS_202205`. */ profile?: pulumi.Input; /** * The ID of the project in which the resource belongs. * If it is not provided, the provider project is used. */ project?: pulumi.Input; /** * The region where the regional SSL policy resides. */ region?: pulumi.Input; }