compute library

Compute Engine resources: instances, addresses, firewalls, networks, subnetworks, hierarchical firewall policies with rules, organization Cloud Armor policies, BYOIP advertised/delegated prefixes (apply- excluded), Hyperdisk Storage Pools (pool capacity is never_apply), Cross-Site / wire groups (Partner Cross-Cloud Interconnect $17+/h is never_apply), and packet mirroring (mirrored GiBy is never_apply).

Classes

ComputeAutoscalerAutoscalerAutoscalingPolicy: autoscaling_policy block — the heart of the autoscaler. Combines a replica range (minReplicas..maxReplicas) with one or more signal sub-blocks (cpuUtilization, loadBalancingUtilization, metrics) and optional smoothing controls (cooldownPeriod, scaleInControl, scalingSchedules).
ComputeAutoscalerAutoscalerCpuUtilization: cpu_utilization block. Drives autoscaling against the average CPU usage of instances in the target MIG.
ComputeAutoscalerAutoscalerLoadBalancingUtilization: load_balancing_utilization block. Drives autoscaling against backend-capacity utilization (HTTP(S) load balancer with utilization balancing mode).
ComputeAutoscalerAutoscalerMetric: One metric entry — a custom Stackdriver / Cloud Monitoring signal. Exactly one of target / singleInstanceAssignment is typically set; the GCP API enforces the constraint at apply time.
ComputeAutoscalerAutoscalerScaleInControl: scale_in_control block. Caps how aggressively the autoscaler may shed replicas inside a timeWindowSec-second sliding window — useful for stateful workloads that need warm capacity to drain gracefully.
ComputeAutoscalerAutoscalerScaleInReplicas: max_scaled_in_replicas sub-block. Express the cap as either a fixed count or a percent of the current MIG size; the schema requires at least one of the two.
ComputeAutoscalerAutoscalerScalingSchedule: One scaling_schedules entry. The Dart Map<String, _> key becomes the schedule's name on the wire (the schema models this as a set of blocks with name baked in).
ComputeBackendBucketBackendBucketCdnBypassCacheOnRequestHeader: Cache-bypass rule keyed on a request header name (one entry in cdn_policy.bypass_cache_on_request_headers, max 5 entries).
ComputeBackendBucketBackendBucketCdnCacheKeyPolicy: cdn_policy.cache_key_policy (max_items=1). Buckets only expose the queryStringWhitelist / includeHttpHeaders axes — unlike BackendServiceCdnCacheKeyPolicy, there is no host / protocol / query-string-as-a-whole toggle.
ComputeBackendBucketBackendBucketCdnNegativeCachingPolicy: One row in cdn_policy.negative_caching_policy.
ComputeBackendBucketBackendBucketCdnPolicy: cdn_policy block — Cloud CDN configuration for this backend bucket. Only honored when GoogleComputeBackendBucket.enableCdn is true. Distinct type from BackendServiceCdnPolicy: the shape is similar but the schema has bucket-specific quirks (no cacheKeyPolicy.includeHost / includeProtocol / includeQueryString — buckets only expose the queryStringWhitelist / includeHttpHeaders axes).
ComputeBackendBucketBackendBucketParams: params block — currently only carries resource-manager tags applied at creation time. Immutable: changes force replacement.
ComputeBackendServiceBackendServiceAwsV4Authentication: security_settings.aws_v4_authentication (max_items=1). accessKey is sensitive.
ComputeBackendServiceBackendServiceBackend: One entry in the backends set. The backend's group is the self-link of an Instance Group, Network Endpoint Group, or backend bucket — all backends in a single service must share the same kind (no mixing IG with NEG).
ComputeBackendServiceBackendServiceBackendCustomMetric: One entry under backend.custom_metrics — a signal exported by the backend that the load balancer should consider when balancingMode is BackendServiceBalancingMode.customMetrics.
ComputeBackendServiceBackendServiceCdnBypassCacheOnRequestHeader: Cache-bypass rule keyed on a request header name.
ComputeBackendServiceBackendServiceCdnCacheKeyPolicy: cdn_policy.cache_key_policy (max_items=1).
ComputeBackendServiceBackendServiceCdnNegativeCachingPolicy: One row in cdn_policy.negative_caching_policy.
ComputeBackendServiceBackendServiceCdnPolicy: cdn_policy block. Only honored when enableCdn is true.
ComputeBackendServiceBackendServiceCircuitBreakers: circuit_breakers block — caps on simultaneous activity per backend before the load balancer trips. Only honored for INTERNAL_SELF_MANAGED / INTERNAL_MANAGED / EXTERNAL_MANAGED schemes.
ComputeBackendServiceBackendServiceConsistentHash: consistent_hash block. Only meaningful when LocalityLbPolicy is ringHash or maglev.
ComputeBackendServiceBackendServiceConsistentHashHttpCookie: consistent_hash.http_cookie (max_items=1).
ComputeBackendServiceBackendServiceCustomMetric: One entry under the top-level custom_metrics. Mirrors ComputeBackendServiceBackendServiceBackendCustomMetric but without maxUtilization (schema only models name + dry_run at this scope).
ComputeBackendServiceBackendServiceDuration: google.protobuf.Duration-shaped value used by several sub-blocks (consistent_hash.http_cookie.ttl, strong_session_affinity_cookie.ttl, outlier_detection.base_ejection_time, etc.).
ComputeBackendServiceBackendServiceIap: iap block. Wraps the backend service in Cloud IAP, which gates requests on an authenticated end-user identity / IAM check before they reach the backend.
ComputeBackendServiceBackendServiceLocalityLbBuiltinPolicy: Built-in locality_lb_policies[].policy (max_items=1).
ComputeBackendServiceBackendServiceLocalityLbCustomPolicy: Caller-supplied xDS locality_lb_policies[].custom_policy (max_items=1).
ComputeBackendServiceBackendServiceLocalityLbPolicyEntry: One entry under locality_lb_policies. Exactly one of policy / customPolicy should be set per entry.
ComputeBackendServiceBackendServiceLogConfig: log_config block — Cloud Logging export configuration for the backend service.
ComputeBackendServiceBackendServiceMaxStreamDuration: max_stream_duration block. Schema quirk: the seconds attribute is typed as a string (not a number) — pass a decimal string like "30" or "30.500".
ComputeBackendServiceBackendServiceOutlierDetection: outlier_detection block — passive health checking. Hosts that exceed the configured failure thresholds are ejected from the load balancing pool for base_ejection_time * consecutive-ejection-count.
ComputeBackendServiceBackendServiceParams: params block — currently only carries resource-manager tags.
ComputeBackendServiceBackendServiceSecuritySettings: security_settings block — mTLS / TLS policy used when dialing backends.
ComputeBackendServiceBackendServiceStrongSessionAffinityCookie: strong_session_affinity_cookie block. Used only when sessionAffinity is SessionAffinity.strongCookieAffinity.
ComputeBackendServiceBackendServiceTlsSettings: tls_settings block — newer (TLS 1.3 / authentication-config-based) TLS configuration; preferred over security_settings when both would otherwise apply.
ComputeBackendServiceBackendServiceTlsSubjectAltName: One entry under tls_settings.subject_alt_names. Exactly one of dnsName / uniformResourceIdentifier should be set.
ComputeDiskGuestOsFeature: One entry of the guest_os_features block (repeatable list).
ComputeFirewallAllowPolicy
ComputeFirewallDenyPolicy
ComputeFirewallFirewallAllowRule: One allow entry: an IP protocol plus optional list of port specs.
ComputeFirewallFirewallDenyRule: One deny entry. Same shape as ComputeFirewallFirewallAllowRule; kept separate so caller intent is obvious at the call site (allow: vs deny: lists are mutually exclusive per GCP API).
ComputeFirewallFirewallLogConfig: Firewall logging configuration (single block, max_items=1). Setting this enables Cloud Logging export for matched traffic.
ComputeFirewallPolicyRuleMatch: Typed helper for the match block of google_compute_firewall_policy_rule (derived from provider schema).
ComputeFirewallPolicyRuleMatchLayer4Configs: Typed helper for the match.layer4_configs block of google_compute_firewall_policy_rule (derived from provider schema).
ComputeFirewallPolicyRuleMatchSrcSecureTags: Typed helper for the match.src_secure_tags block of google_compute_firewall_policy_rule (derived from provider schema).
ComputeFirewallPolicyRuleTargetSecureTags: Typed helper for the target_secure_tags block of google_compute_firewall_policy_rule (derived from provider schema).
ComputeFirewallPolicyWithRulesRule: Typed helper for the rule block of google_compute_firewall_policy_with_rules (derived from provider schema).
ComputeFirewallPolicyWithRulesRuleMatch: Typed helper for the rule.match block of google_compute_firewall_policy_with_rules (derived from provider schema).
ComputeFirewallPolicyWithRulesRuleMatchLayer4Config: Typed helper for the rule.match.layer4_config block of google_compute_firewall_policy_with_rules (derived from provider schema).
ComputeFirewallPolicyWithRulesRuleMatchSrcSecureTag: Typed helper for the rule.match.src_secure_tag block of google_compute_firewall_policy_with_rules (derived from provider schema).
ComputeFirewallPolicyWithRulesRuleTargetSecureTag: Typed helper for the rule.target_secure_tag block of google_compute_firewall_policy_with_rules (derived from provider schema).
ComputeFirewallRulePolicy
ComputeForwardingRuleForwardingRuleServiceDirectoryRegistration: One entry in service_directory_registrations. The schema caps the list at one entry; populated only for forwarding rules whose loadBalancingScheme is INTERNAL or INTERNAL_MANAGED so other consumers in the same project can resolve the rule by Service Directory name.
ComputeGlobalForwardingRuleGlobalForwardingRuleMetadataFilter: One entry in metadata_filters. Only consulted by Traffic Director (loadBalancingScheme: INTERNAL_SELF_MANAGED) forwarding rules — silently ignored for every other scheme. xDS clients present node metadata in their config request; this filter gates which routing config gets returned to which client.
ComputeGlobalForwardingRuleGlobalForwardingRuleMetadataFilterLabel: One metadata_filters[*].filter_labels[*] entry. Both name and value are required by the provider schema; lengths are capped at 1024 characters by the API (not enforced here).
ComputeGlobalForwardingRuleGlobalForwardingRuleServiceDirectoryRegistration: One entry in service_directory_registrations. The schema caps the list at one entry; populated only for Private Service Connect forwarding rules that target Google APIs (so other consumers in the same project can resolve the rule by Service Directory name).
ComputeGlobalVmExtensionPolicyExtensionPolicies: Typed helper for the extension_policies block of google_compute_global_vm_extension_policy (derived from provider schema).
ComputeGlobalVmExtensionPolicyInstanceSelectors: Typed helper for the instance_selectors block of google_compute_global_vm_extension_policy (derived from provider schema).
ComputeGlobalVmExtensionPolicyInstanceSelectorsLabelSelector: Typed helper for the instance_selectors.label_selector block of google_compute_global_vm_extension_policy (derived from provider schema).
ComputeGlobalVmExtensionPolicyRolloutOperation: Typed helper for the rollout_operation block of google_compute_global_vm_extension_policy (derived from provider schema).
ComputeGlobalVmExtensionPolicyRolloutOperationRolloutInput: Typed helper for the rollout_operation.rollout_input block of google_compute_global_vm_extension_policy (derived from provider schema).
ComputeHealthCheckGrpcHealthCheckConfig: grpc_health_check block. Probes via the gRPC Health Checking Protocol (grpc.health.v1.Health/Check).
ComputeHealthCheckHealthCheckLogConfig: log_config block. Toggles Cloud Logging export of probe results.
ComputeHealthCheckHttp2HealthCheckConfig: http2_health_check block.
ComputeHealthCheckHttpHealthCheckConfig: http_health_check block. Set this (and only this) to make the resource an HTTP health check.
ComputeHealthCheckHttpsHealthCheckConfig: https_health_check block.
ComputeHealthCheckProtocol: Mutually exclusive per-protocol config block. Each concrete *Config type below is a sealed variant with its own blockKey.
ComputeHealthCheckSslHealthCheckConfig: ssl_health_check block. Pure SSL/TLS probe.
ComputeHealthCheckTcpHealthCheckConfig: tcp_health_check block. Pure TCP connect-or-payload probe.
ComputeImageDiskSource: Create the image from a Persistent Disk (name or self-link).
ComputeImageImageSource: Create the image from another Image (name or self-link).
ComputeImageSnapshotSource: Create the image from a Persistent Disk Snapshot (name or self-link).
ComputeImageSource: Image source for GoogleComputeImage. Sealed so callers pick exactly one of source_disk / source_image / source_snapshot at the type level (MM documents mutual exclusion in prose; there is no exactly_one_of metadata on this resource).
ComputeInstanceAccessConfig: One entry inside network_interface.access_config. An access config gives the interface an external IPv4 address (ephemeral when natIp is null, static when it's a reserved IP).
ComputeInstanceAdvancedMachineFeatures: advanced_machine_features block (max_items=1). Per-CPU tuning knobs.
ComputeInstanceAliasIpRange: One entry inside network_interface.alias_ip_range. Alias IPs let pods / containers running on the instance use secondary CIDR ranges from the attached subnetwork.
ComputeInstanceAttachedDisk: One entry inside attached_disk. Attaches an existing persistent disk to the instance.
ComputeInstanceBootDisk: boot_disk block (single, required by GCP). At least one of initializeParams (create a new disk) or source (attach an existing disk) is required by Terraform; this helper does not enforce that because both are nullable in the schema.
ComputeInstanceConfidentialInstanceConfig: confidential_instance_config block (max_items=1). Enables Confidential VM. Requires scheduling.on_host_maintenance = TERMINATE.
ComputeInstanceGroupManagerInstanceGroupManagerAllInstancesConfig: all_instances_config block. Patches labels and metadata onto every VM the MIG manages, overlaying the instance template's values.
ComputeInstanceGroupManagerInstanceGroupManagerAutoHealingPolicy: auto_healing_policies block. When a VM fails its healthCheck for longer than the initial-delay window, the MIG recreates it. Schema marks both fields as required.
ComputeInstanceGroupManagerInstanceGroupManagerInstanceLifecyclePolicy: instance_lifecycle_policy block — fine-grained behavior on failures and template updates.
ComputeInstanceGroupManagerInstanceGroupManagerNamedPort: One entry in namedPorts. Backend services that reference this MIG by port_name look up the matching port number here.
ComputeInstanceGroupManagerInstanceGroupManagerResourcePolicies: resource_policies block — wires the MIG to a google_compute_resource_policy workload policy.
ComputeInstanceGroupManagerInstanceGroupManagerStandbyPolicy: standby_policy block — controls how the MIG resumes VMs from a standby pool during scale-out.
ComputeInstanceGroupManagerInstanceGroupManagerStatefulDisk: One entry in statefulDisks. Marks a disk attached at deviceName as stateful — the MIG preserves the disk across VM recreates per deleteRule.
ComputeInstanceGroupManagerInstanceGroupManagerStatefulIp: One entry in statefulInternalIps / statefulExternalIps. Both blocks share the same shape.
ComputeInstanceGroupManagerInstanceGroupManagerTargetSizePolicy: One entry in targetSizePolicies. Configures whether the MIG creates VMs individually or all at once to reach GoogleComputeInstanceGroupManager.targetSize.
ComputeInstanceGroupManagerInstanceGroupManagerUpdatePolicy: update_policy block. Drives how the MIG rolls a new ComputeInstanceGroupManagerInstanceGroupManagerVersion across its members.
ComputeInstanceGroupManagerInstanceGroupManagerVersion: One entry in versions. Each version pins an instanceTemplate (a google_compute_instance_template self-link, typically a within-batch sibling) and optionally caps how many instances run that version via targetSize.
ComputeInstanceGroupManagerInstanceGroupManagerVersionTargetSize: version.target_size (max_items=1). Exactly one of fixed or percent should be set.
ComputeInstanceGuestAccelerator: One entry inside guest_accelerator. Attaches a GPU / TPU to the VM.
ComputeInstanceInitializeParams: boot_disk.initialize_params block. Creates a new disk inline at instance-create time. Mutually exclusive with bootDisk.source (which attaches an existing disk).
ComputeInstanceInstanceParams: params block (max_items=1). Carries request-side parameters that are not persisted on the resource (currently only resource manager tags applied at instance-create time).
ComputeInstanceIpv6AccessConfig: One entry inside network_interface.ipv6_access_config. GCP currently allows at most one IPv6 access config per interface.
ComputeInstanceNetworkInterface: One entry inside network_interface. At least one is required by GCP.
ComputeInstanceNetworkPerformanceConfig: network_performance_config block (max_items=1). Selects the Tier 1 network egress profile.
ComputeInstanceNodeAffinity: One entry inside scheduling.node_affinities. Sole-tenant placement uses this to bind the VM to a node group with matching labels.
ComputeInstanceReservationAffinity: reservation_affinity block (max_items=1). Controls whether and how the VM consumes capacity from a Compute Engine reservation.
ComputeInstanceScheduling: scheduling block (max_items=1). Controls preemptibility, host maintenance, max run duration, and sole-tenant affinities.
ComputeInstanceSchedulingDuration: scheduling.max_run_duration / scheduling.local_ssd_recovery_timeout sub-block (Duration shape). Both fields take this same shape.
ComputeInstanceScratchDisk: One entry inside scratch_disk. Local SSD scratch disks are instance-lifetime only -- contents are lost on stop/start.
ComputeInstanceServiceAccount: service_account block (max_items=1). When set, the VM's metadata exposes a Google service account credential to the guest.
ComputeInstanceSettingsMetadata: Typed helper for the metadata block of google_compute_instance_settings (derived from provider schema).
ComputeInstanceShieldedInstanceConfig: shielded_instance_config block (max_items=1). Enables Shielded VM features (secure boot / vTPM / integrity monitoring).
ComputeInstanceSpecificReservation: reservation_affinity.specific_reservation sub-block (max_items=1). Only meaningful when ComputeInstanceReservationAffinity.type is ReservationAffinityType.specificReservation.
ComputeInstanceTemplateInstanceTemplateAccessConfig: One entry inside network_interface.access_config. An access config gives the interface an external IPv4 address (ephemeral when natIp is null, static when it's a reserved IP).
ComputeInstanceTemplateInstanceTemplateAdvancedMachineFeatures: advanced_machine_features block (max_items=1). Per-CPU tuning knobs.
ComputeInstanceTemplateInstanceTemplateAliasIpRange: One entry inside network_interface.alias_ip_range. Alias IPs let pods / containers running on instances created from this template use secondary CIDR ranges from the attached subnetwork.
ComputeInstanceTemplateInstanceTemplateConfidentialInstanceConfig: confidential_instance_config block (max_items=1). Enables Confidential VM. Requires scheduling.on_host_maintenance = TERMINATE.
ComputeInstanceTemplateInstanceTemplateDisk: One entry inside disk. Templates require min_items=1. Each disk either initializes a new disk inline (sourceImage / sourceSnapshot) or attaches an existing one (source).
ComputeInstanceTemplateInstanceTemplateDiskEncryptionKey: disk.disk_encryption_key block (max_items=1). Customer-managed KMS CryptoKey used to encrypt the disk at rest.
ComputeInstanceTemplateInstanceTemplateGuestAccelerator: One entry inside guest_accelerator. Attaches a GPU / TPU to instances created from this template. Both fields are required by the schema.
ComputeInstanceTemplateInstanceTemplateIpv6AccessConfig: One entry inside network_interface.ipv6_access_config. GCP currently allows at most one IPv6 access config per interface; only PREMIUM tier is valid for IPv6 today.
ComputeInstanceTemplateInstanceTemplateNetworkInterface: One entry inside network_interface. At least one is required by GCP.
ComputeInstanceTemplateInstanceTemplateNetworkPerformanceConfig: network_performance_config block (max_items=1). Selects the Tier 1 network egress profile.
ComputeInstanceTemplateInstanceTemplateNodeAffinity: One entry inside scheduling.node_affinities. Sole-tenant placement uses this to bind instances to a node group with matching labels.
ComputeInstanceTemplateInstanceTemplateOnInstanceStopAction: scheduling.on_instance_stop_action block (max_items=1). Defines extra behaviour applied when the chosen instance_termination_action runs.
ComputeInstanceTemplateInstanceTemplateReservationAffinity: reservation_affinity block (max_items=1). Controls whether and how instances created from this template consume capacity from a Compute Engine reservation.
ComputeInstanceTemplateInstanceTemplateScheduling: scheduling block (max_items=1). Controls preemptibility, host maintenance, max run duration, and sole-tenant affinities.
ComputeInstanceTemplateInstanceTemplateSchedulingDuration: scheduling.max_run_duration / scheduling.local_ssd_recovery_timeout sub-block (Duration shape). Both fields take this same shape.
ComputeInstanceTemplateInstanceTemplateServiceAccount: service_account block (max_items=1). When set, instances created from this template expose a Google service account credential to the guest via the metadata service.
ComputeInstanceTemplateInstanceTemplateShieldedInstanceConfig: shielded_instance_config block (max_items=1). Enables Shielded VM features (secure boot / vTPM / integrity monitoring).
ComputeInstanceTemplateInstanceTemplateSourceImageEncryptionKey: disk.source_image_encryption_key block (max_items=1). Customer-supplied key that decrypted the source image. Instance templates do not persist customer-supplied keys, so MIGs cannot create disks from images encrypted with your own keys via a template.
ComputeInstanceTemplateInstanceTemplateSourceSnapshotEncryptionKey: disk.source_snapshot_encryption_key block (max_items=1). Customer- supplied key that decrypted the source snapshot.
ComputeInstanceTemplateInstanceTemplateSpecificReservation: reservation_affinity.specific_reservation sub-block (max_items=1). Only meaningful when ComputeInstanceTemplateInstanceTemplateReservationAffinity.type is InstanceTemplateReservationAffinityType.specificReservation.
ComputeInterconnectAttachmentGroupAttachments: Typed helper for the attachments block of google_compute_interconnect_attachment_group (derived from provider schema).
ComputeInterconnectAttachmentGroupIntent: Typed helper for the intent block of google_compute_interconnect_attachment_group (derived from provider schema).
ComputeInterconnectGroupIntent: Typed helper for the intent block of google_compute_interconnect_group (derived from provider schema).
ComputeInterconnectGroupInterconnects: Typed helper for the interconnects block of google_compute_interconnect_group (derived from provider schema).
ComputeManagedSslCertificateManagedSslCertificateConfig: managed block payload (single block, max_items=1). Carries the list of domains Google should issue the certificate for.
ComputeNetworkEndpointsNetworkEndpoints: Typed helper for the network_endpoints block of google_compute_network_endpoints (derived from provider schema).
ComputeNetworkFirewallPolicyRuleMatch: Typed helper for the match block of google_compute_network_firewall_policy_rule (derived from provider schema).
ComputeNetworkFirewallPolicyRuleMatchLayer4Configs: Typed helper for the match.layer4_configs block of google_compute_network_firewall_policy_rule (derived from provider schema).
ComputeNetworkFirewallPolicyRuleMatchSrcSecureTags: Typed helper for the match.src_secure_tags block of google_compute_network_firewall_policy_rule (derived from provider schema).
ComputeNetworkFirewallPolicyRuleTargetSecureTags: Typed helper for the target_secure_tags block of google_compute_network_firewall_policy_rule (derived from provider schema).
ComputeNetworkFirewallPolicyWithRulesRule: Typed helper for the rule block of google_compute_network_firewall_policy_with_rules (derived from provider schema).
ComputeNetworkFirewallPolicyWithRulesRuleMatch: Typed helper for the rule.match block of google_compute_network_firewall_policy_with_rules (derived from provider schema).
ComputeNetworkFirewallPolicyWithRulesRuleMatchLayer4Config: Typed helper for the rule.match.layer4_config block of google_compute_network_firewall_policy_with_rules (derived from provider schema).
ComputeNetworkFirewallPolicyWithRulesRuleMatchSrcSecureTag: Typed helper for the rule.match.src_secure_tag block of google_compute_network_firewall_policy_with_rules (derived from provider schema).
ComputeNetworkFirewallPolicyWithRulesRuleTargetSecureTag: Typed helper for the rule.target_secure_tag block of google_compute_network_firewall_policy_with_rules (derived from provider schema).
ComputeNodeGroupAutoscalingPolicy: Typed helper for the autoscaling_policy block of google_compute_node_group (derived from provider schema).
ComputeNodeGroupMaintenanceWindow: Typed helper for the maintenance_window block of google_compute_node_group (derived from provider schema).
ComputeNodeGroupShareSettings: Typed helper for the share_settings block of google_compute_node_group (derived from provider schema).
ComputeNodeGroupShareSettingsProjectMap: Typed helper for the share_settings.project_map block of google_compute_node_group (derived from provider schema).
ComputeNodeTemplateAccelerators: Typed helper for the accelerators block of google_compute_node_template (derived from provider schema).
ComputeNodeTemplateDisks: Typed helper for the disks block of google_compute_node_template (derived from provider schema).
ComputeNodeTemplateNodeTypeFlexibility: Typed helper for the node_type_flexibility block of google_compute_node_template (derived from provider schema).
ComputeNodeTemplateServerBinding: Typed helper for the server_binding block of google_compute_node_template (derived from provider schema).
ComputeOrganizationSecurityPolicyRuleHeaderAction: Typed helper for the header_action block of google_compute_organization_security_policy_rule (derived from provider schema).
ComputeOrganizationSecurityPolicyRuleHeaderActionRequestHeadersToAdds: Typed helper for the header_action.request_headers_to_adds block of google_compute_organization_security_policy_rule (derived from provider schema).
ComputeOrganizationSecurityPolicyRuleMatch: Typed helper for the match block of google_compute_organization_security_policy_rule (derived from provider schema).
ComputeOrganizationSecurityPolicyRuleMatchConfig: Typed helper for the match.config block of google_compute_organization_security_policy_rule (derived from provider schema).
ComputeOrganizationSecurityPolicyRuleMatchExpr: Typed helper for the match.expr block of google_compute_organization_security_policy_rule (derived from provider schema).
ComputeOrganizationSecurityPolicyRulePreconfiguredWafConfig: Typed helper for the preconfigured_waf_config block of google_compute_organization_security_policy_rule (derived from provider schema).
ComputeOrganizationSecurityPolicyRulePreconfiguredWafConfigExclusion: Typed helper for the preconfigured_waf_config.exclusion block of google_compute_organization_security_policy_rule (derived from provider schema).
ComputeOrganizationSecurityPolicyRulePreconfiguredWafConfigExclusionRequestCookie: Typed helper for the preconfigured_waf_config.exclusion.request_cookie block of google_compute_organization_security_policy_rule (derived from provider schema).
ComputeOrganizationSecurityPolicyRulePreconfiguredWafConfigExclusionRequestHeader: Typed helper for the preconfigured_waf_config.exclusion.request_header block of google_compute_organization_security_policy_rule (derived from provider schema).
ComputeOrganizationSecurityPolicyRulePreconfiguredWafConfigExclusionRequestQueryParam: Typed helper for the preconfigured_waf_config.exclusion.request_query_param block of google_compute_organization_security_policy_rule (derived from provider schema).
ComputeOrganizationSecurityPolicyRulePreconfiguredWafConfigExclusionRequestUri: Typed helper for the preconfigured_waf_config.exclusion.request_uri block of google_compute_organization_security_policy_rule (derived from provider schema).
ComputeOrganizationSecurityPolicyRuleRedirectOptions: Typed helper for the redirect_options block of google_compute_organization_security_policy_rule (derived from provider schema).
ComputePacketMirroringCollectorIlb: Typed helper for the collector_ilb block of google_compute_packet_mirroring (derived from provider schema).
ComputePacketMirroringFilter: Typed helper for the filter block of google_compute_packet_mirroring (derived from provider schema).
ComputePacketMirroringMirroredResources: Typed helper for the mirrored_resources block of google_compute_packet_mirroring (derived from provider schema).
ComputePacketMirroringMirroredResourcesInstances: Typed helper for the mirrored_resources.instances block of google_compute_packet_mirroring (derived from provider schema).
ComputePacketMirroringMirroredResourcesSubnetworks: Typed helper for the mirrored_resources.subnetworks block of google_compute_packet_mirroring (derived from provider schema).
ComputePacketMirroringNetwork: Typed helper for the network block of google_compute_packet_mirroring (derived from provider schema).
ComputePerInstanceConfigPreservedState: Typed helper for the preserved_state block of google_compute_per_instance_config (derived from provider schema).
ComputePerInstanceConfigPreservedStateDisk: Typed helper for the preserved_state.disk block of google_compute_per_instance_config (derived from provider schema).
ComputePerInstanceConfigPreservedStateExternalIp: Typed helper for the preserved_state.external_ip block of google_compute_per_instance_config (derived from provider schema).
ComputePerInstanceConfigPreservedStateExternalIpIpAddress: Typed helper for the preserved_state.external_ip.ip_address block of google_compute_per_instance_config (derived from provider schema).
ComputePerInstanceConfigPreservedStateInternalIp: Typed helper for the preserved_state.internal_ip block of google_compute_per_instance_config (derived from provider schema).
ComputePerInstanceConfigPreservedStateInternalIpIpAddress: Typed helper for the preserved_state.internal_ip.ip_address block of google_compute_per_instance_config (derived from provider schema).
ComputePreviewFeatureRolloutOperation: Typed helper for the rollout_operation block of google_compute_preview_feature (derived from provider schema).
ComputePreviewFeatureRolloutOperationRolloutInput: Typed helper for the rollout_operation.rollout_input block of google_compute_preview_feature (derived from provider schema).
ComputeRegionAutoscalerRegionAutoscalerAutoscalingPolicy: autoscaling_policy block — the heart of the autoscaler. Combines a replica range (minReplicas..maxReplicas) with one or more signal sub-blocks (cpuUtilization, loadBalancingUtilization, metrics) and optional smoothing controls (cooldownPeriod, scaleInControl, scalingSchedules).
ComputeRegionAutoscalerRegionAutoscalerCpuUtilization: cpu_utilization block. Drives autoscaling against the average CPU usage of instances in the target regional MIG.
ComputeRegionAutoscalerRegionAutoscalerLoadBalancingUtilization: load_balancing_utilization block. Drives autoscaling against backend-capacity utilization (HTTP(S) load balancer with utilization balancing mode).
ComputeRegionAutoscalerRegionAutoscalerMetric: One metric entry — a custom Stackdriver / Cloud Monitoring signal. Exactly one of target / singleInstanceAssignment is typically set; the GCP API enforces the constraint at apply time.
ComputeRegionAutoscalerRegionAutoscalerScaleInControl: scale_in_control block. Caps how aggressively the autoscaler may shed replicas inside a timeWindowSec-second sliding window — useful for stateful workloads that need warm capacity to drain gracefully.
ComputeRegionAutoscalerRegionAutoscalerScaleInReplicas: max_scaled_in_replicas sub-block. Express the cap as either a fixed count or a percent of the current MIG size; the schema requires at least one of the two.
ComputeRegionAutoscalerRegionAutoscalerScalingSchedule: One scaling_schedules entry. The Dart Map<String, _> key becomes the schedule's name on the wire (the schema models this as a set of blocks with name baked in).
ComputeRegionBackendServiceRegionBackendServiceBackend: One entry in the backends set. The backend's group is the self-link of an Instance Group, regional MIG, or regional Network Endpoint Group — all backends in a single service must share the same kind (no mixing IG with NEG). Note: regional backends carry a failover flag (used by ComputeRegionBackendServiceRegionBackendServiceFailoverPolicy) and do not support the global resource's preference field.
ComputeRegionBackendServiceRegionBackendServiceBackendCustomMetric: One entry under backend.custom_metrics — a signal exported by the backend that the load balancer should consider when balancingMode is RegionBackendServiceBalancingMode.customMetrics.
ComputeRegionBackendServiceRegionBackendServiceCdnCacheKeyPolicy: cdn_policy.cache_key_policy (max_items=1).
ComputeRegionBackendServiceRegionBackendServiceCdnNegativeCachingPolicy: One row in cdn_policy.negative_caching_policy. The regional schema does not model the ttl attribute (status-code key only).
ComputeRegionBackendServiceRegionBackendServiceCdnPolicy: cdn_policy block. Only honored when enableCdn is true. The regional schema omits the global resource's bypass_cache_on_request_headers and request_coalescing fields.
ComputeRegionBackendServiceRegionBackendServiceCircuitBreakers: circuit_breakers block — caps on simultaneous activity per backend before the load balancer trips. Only honored for INTERNAL_SELF_MANAGED / INTERNAL_MANAGED / EXTERNAL_MANAGED schemes.
ComputeRegionBackendServiceRegionBackendServiceConnectionTrackingPolicy: connection_tracking_policy block — connection-tracking behavior for Passthrough Network Load Balancers (and the Internal LB family).
ComputeRegionBackendServiceRegionBackendServiceConsistentHash: consistent_hash block. Only meaningful when RegionBackendServiceLocalityLbPolicy is ringHash or maglev.
ComputeRegionBackendServiceRegionBackendServiceConsistentHashHttpCookie: consistent_hash.http_cookie (max_items=1).
ComputeRegionBackendServiceRegionBackendServiceCustomMetric: One entry under the top-level custom_metrics. Mirrors ComputeRegionBackendServiceRegionBackendServiceBackendCustomMetric but without maxUtilization (schema only models name + dry_run at this scope).
ComputeRegionBackendServiceRegionBackendServiceDuration: google.protobuf.Duration-shaped value used by several sub-blocks (consistent_hash.http_cookie.ttl, strong_session_affinity_cookie.ttl, outlier_detection.base_ejection_time, outlier_detection.interval).
ComputeRegionBackendServiceRegionBackendServiceFailoverPolicy: failover_policy block — only meaningful for Internal Passthrough NLBs. Backends are split into primary / failover pools (see ComputeRegionBackendServiceRegionBackendServiceBackend.failover); when the primary pool's healthy fraction drops below failoverRatio, traffic is shifted to the failover pool.
ComputeRegionBackendServiceRegionBackendServiceHaPolicy: ha_policy block — self-managed HA for External / Internal Passthrough NLBs. Conflicts with sessionAffinity, failoverPolicy, and healthChecks — when haPolicy is set, the caller is responsible for tracking endpoint health and electing a leader.
ComputeRegionBackendServiceRegionBackendServiceHaPolicyLeader: ha_policy.leader (max_items=1).
ComputeRegionBackendServiceRegionBackendServiceHaPolicyLeaderNetworkEndpoint: ha_policy.leader.network_endpoint (max_items=1).
ComputeRegionBackendServiceRegionBackendServiceIap: iap block. Wraps the regional backend service in Cloud IAP, which gates requests on an authenticated end-user identity / IAM check before they reach the backend.
ComputeRegionBackendServiceRegionBackendServiceLogConfig: log_config block — Cloud Logging export configuration for the regional backend service.
ComputeRegionBackendServiceRegionBackendServiceNetworkPassThroughLbTrafficPolicy: network_pass_through_lb_traffic_policy block — traffic steering for Internal Passthrough NLBs (currently only zonal-affinity).
ComputeRegionBackendServiceRegionBackendServiceOutlierDetection: outlier_detection block — passive health checking. Hosts that exceed the configured failure thresholds are ejected from the load balancing pool for base_ejection_time * consecutive-ejection-count.
ComputeRegionBackendServiceRegionBackendServiceParams: params block — currently only carries resource-manager tags.
ComputeRegionBackendServiceRegionBackendServiceStrongSessionAffinityCookie: strong_session_affinity_cookie block. Used only when sessionAffinity is RegionBackendServiceSessionAffinity.strongCookieAffinity.
ComputeRegionBackendServiceRegionBackendServiceTlsSettings: tls_settings block — TLS / mTLS configuration used when dialing backends. Only meaningful when protocol is SSL, HTTPS, or HTTP2. The regional resource does not surface security_settings — this is the only TLS-config block available here.
ComputeRegionBackendServiceRegionBackendServiceTlsSubjectAltName: One entry under tls_settings.subject_alt_names. Exactly one of dnsName / uniformResourceIdentifier should be set.
ComputeRegionBackendServiceRegionBackendServiceZonalAffinity: network_pass_through_lb_traffic_policy.zonal_affinity (max_items=1). New connections are load balanced across healthy backend endpoints in the local zone first; behavior when the in-zone healthy fraction drops below spilloverRatio is governed by spillover.
ComputeRegionCommitmentLicenseResource: Typed helper for the license_resource block of google_compute_region_commitment (derived from provider schema).
ComputeRegionCommitmentParams: Typed helper for the params block of google_compute_region_commitment (derived from provider schema).
ComputeRegionCommitmentResources: Typed helper for the resources block of google_compute_region_commitment (derived from provider schema).
ComputeRegionDiskGuestOsFeature: One entry of the guest_os_features block (repeatable list).
ComputeRegionHealthCheckProtocol
ComputeRegionHealthCheckRegionHealthCheckGrpcConfig: grpc_health_check block. Probes via the gRPC Health Checking Protocol (grpc.health.v1.Health/Check).
ComputeRegionHealthCheckRegionHealthCheckHttp2Config: http2_health_check block.
ComputeRegionHealthCheckRegionHealthCheckHttpConfig: http_health_check block. Set this (and only this) to make the resource an HTTP health check.
ComputeRegionHealthCheckRegionHealthCheckHttpsConfig: https_health_check block.
ComputeRegionHealthCheckRegionHealthCheckLogConfig: log_config block. Toggles Cloud Logging export of probe results.
ComputeRegionHealthCheckRegionHealthCheckSslConfig: ssl_health_check block. Pure SSL/TLS probe.
ComputeRegionHealthCheckRegionHealthCheckTcpConfig: tcp_health_check block. Pure TCP connect-or-payload probe.
ComputeRegionInstanceGroupManagerRegionInstanceGroupManagerAllInstancesConfig: all_instances_config block. Patches labels and metadata onto every VM the MIG manages, overlaying the instance template's values.
ComputeRegionInstanceGroupManagerRegionInstanceGroupManagerAutoHealingPolicy: auto_healing_policies block. When a VM fails its healthCheck for longer than the initial-delay window, the MIG recreates it. Schema marks both fields as required.
ComputeRegionInstanceGroupManagerRegionInstanceGroupManagerInstanceFlexibilityPolicy: instance_flexibility_policy block — regional only. Lets the MIG pick from multiple machine types when creating new VMs, instead of the single machine type set on the instance template.
ComputeRegionInstanceGroupManagerRegionInstanceGroupManagerInstanceLifecyclePolicy: instance_lifecycle_policy block — fine-grained behavior on failures and template updates.
ComputeRegionInstanceGroupManagerRegionInstanceGroupManagerInstanceSelection: One entry in ComputeRegionInstanceGroupManagerRegionInstanceGroupManagerInstanceFlexibilityPolicy.instanceSelections.
ComputeRegionInstanceGroupManagerRegionInstanceGroupManagerNamedPort: One entry in namedPorts. Backend services that reference this MIG by port_name look up the matching port number here.
ComputeRegionInstanceGroupManagerRegionInstanceGroupManagerResourcePolicies: resource_policies block — wires the MIG to a google_compute_resource_policy workload policy.
ComputeRegionInstanceGroupManagerRegionInstanceGroupManagerStandbyPolicy: standby_policy block — controls how the MIG resumes VMs from a standby pool during scale-out.
ComputeRegionInstanceGroupManagerRegionInstanceGroupManagerStatefulDisk: One entry in statefulDisks. Marks a disk attached at deviceName as stateful — the MIG preserves the disk across VM recreates per deleteRule. Note: cross-zone instance redistribution must be disabled (set ComputeRegionInstanceGroupManagerRegionInstanceGroupManagerUpdatePolicy.instanceRedistributionType to RegionInstanceGroupManagerInstanceRedistributionType.none) before updating stateful disks on an existing regional MIG.
ComputeRegionInstanceGroupManagerRegionInstanceGroupManagerStatefulIp: One entry in statefulInternalIps / statefulExternalIps. Both blocks share the same shape.
ComputeRegionInstanceGroupManagerRegionInstanceGroupManagerTargetSizePolicy: One entry in targetSizePolicies. Configures whether the MIG creates VMs individually or all at once to reach GoogleComputeRegionInstanceGroupManager.targetSize.
ComputeRegionInstanceGroupManagerRegionInstanceGroupManagerUpdatePolicy: update_policy block. Drives how the regional MIG rolls a new ComputeRegionInstanceGroupManagerRegionInstanceGroupManagerVersion across its members and how aggressively it rebalances across distributionPolicyZones.
ComputeRegionInstanceGroupManagerRegionInstanceGroupManagerVersion: One entry in versions. Each version pins an instanceTemplate (a google_compute_instance_template self-link, typically a within-batch sibling) and optionally caps how many instances run that version via targetSize.
ComputeRegionInstanceGroupManagerRegionInstanceGroupManagerVersionTargetSize: version.target_size (max_items=1). Exactly one of fixed or percent should be set.
ComputeRegionInstantSnapshotParams: params block (max=1). Carries request-time metadata such as Resource Manager tags applied at create time.
ComputeRegionNetworkEndpointGroupRegionNetworkEndpointGroupAppEngine: app_engine slot of google_compute_region_network_endpoint_group. Only valid when networkEndpointType is RegionNetworkEndpointGroupType.serverless and mutually exclusive with cloudRun / cloudFunction.
ComputeRegionNetworkEndpointGroupRegionNetworkEndpointGroupCloudFunction: cloud_function slot of google_compute_region_network_endpoint_group. Only valid when networkEndpointType is RegionNetworkEndpointGroupType.serverless and mutually exclusive with cloudRun / appEngine.
ComputeRegionNetworkEndpointGroupRegionNetworkEndpointGroupCloudRun: cloud_run slot of google_compute_region_network_endpoint_group. Only valid when networkEndpointType is RegionNetworkEndpointGroupType.serverless and mutually exclusive with cloudFunction / appEngine.
ComputeRegionNetworkFirewallPolicyRuleMatch: Typed helper for the match block of google_compute_region_network_firewall_policy_rule (derived from provider schema).
ComputeRegionNetworkFirewallPolicyRuleMatchLayer4Configs: Typed helper for the match.layer4_configs block of google_compute_region_network_firewall_policy_rule (derived from provider schema).
ComputeRegionNetworkFirewallPolicyRuleMatchSrcSecureTags: Typed helper for the match.src_secure_tags block of google_compute_region_network_firewall_policy_rule (derived from provider schema).
ComputeRegionNetworkFirewallPolicyRuleTargetSecureTags: Typed helper for the target_secure_tags block of google_compute_region_network_firewall_policy_rule (derived from provider schema).
ComputeRegionNetworkFirewallPolicyWithRulesRule: Typed helper for the rule block of google_compute_region_network_firewall_policy_with_rules (derived from provider schema).
ComputeRegionNetworkFirewallPolicyWithRulesRuleMatch: Typed helper for the rule.match block of google_compute_region_network_firewall_policy_with_rules (derived from provider schema).
ComputeRegionNetworkFirewallPolicyWithRulesRuleMatchLayer4Config: Typed helper for the rule.match.layer4_config block of google_compute_region_network_firewall_policy_with_rules (derived from provider schema).
ComputeRegionNetworkFirewallPolicyWithRulesRuleMatchSrcSecureTag: Typed helper for the rule.match.src_secure_tag block of google_compute_region_network_firewall_policy_with_rules (derived from provider schema).
ComputeRegionNetworkFirewallPolicyWithRulesRuleTargetSecureTag: Typed helper for the rule.target_secure_tag block of google_compute_region_network_firewall_policy_with_rules (derived from provider schema).
ComputeRegionPerInstanceConfigPreservedState: Typed helper for the preserved_state block of google_compute_region_per_instance_config (derived from provider schema).
ComputeRegionPerInstanceConfigPreservedStateDisk: Typed helper for the preserved_state.disk block of google_compute_region_per_instance_config (derived from provider schema).
ComputeRegionPerInstanceConfigPreservedStateExternalIp: Typed helper for the preserved_state.external_ip block of google_compute_region_per_instance_config (derived from provider schema).
ComputeRegionPerInstanceConfigPreservedStateExternalIpIpAddress: Typed helper for the preserved_state.external_ip.ip_address block of google_compute_region_per_instance_config (derived from provider schema).
ComputeRegionPerInstanceConfigPreservedStateInternalIp: Typed helper for the preserved_state.internal_ip block of google_compute_region_per_instance_config (derived from provider schema).
ComputeRegionPerInstanceConfigPreservedStateInternalIpIpAddress: Typed helper for the preserved_state.internal_ip.ip_address block of google_compute_region_per_instance_config (derived from provider schema).
ComputeRegionResizeRequestRequestedRunDuration: Typed helper for the requested_run_duration block of google_compute_region_resize_request (derived from provider schema).
ComputeRegionSecurityPolicyRegionSecurityPolicyAdvancedOptionsConfig
ComputeRegionSecurityPolicyRegionSecurityPolicyDdosProtectionConfig
ComputeRegionSecurityPolicyRegionSecurityPolicyJsonCustomConfig
ComputeRegionSecurityPolicyRegionSecurityPolicyRule: One entry in rules[]. Rules are evaluated from highest priority (lowest numeric value) to lowest priority. Cloud Armor REQUIRES a default rule at priority 2147483647 matching all traffic ('*') -- if you omit it the provider injects one with action allow.
ComputeRegionSecurityPolicyRegionSecurityPolicyRuleEnforceOnKeyConfig
ComputeRegionSecurityPolicyRegionSecurityPolicyRuleMatch: rules.match -- mutually-exclusive config (versioned predicate) or expr (CEL) variants.
ComputeRegionSecurityPolicyRegionSecurityPolicyRuleMatchConfig
ComputeRegionSecurityPolicyRegionSecurityPolicyRuleMatchExpr
ComputeRegionSecurityPolicyRegionSecurityPolicyRulePreconfiguredWafConfig
ComputeRegionSecurityPolicyRegionSecurityPolicyRulePreconfiguredWafExclusion
ComputeRegionSecurityPolicyRegionSecurityPolicyRulePreconfiguredWafExclusionMatch
ComputeRegionSecurityPolicyRegionSecurityPolicyRuleRateLimitOptions: rules.rate_limit_options -- required when action is rate_based_ban or throttle.
ComputeRegionSecurityPolicyRegionSecurityPolicyRuleRateLimitThreshold
ComputeRegionSecurityPolicyRegionSecurityPolicyUserDefinedField
ComputeRegionSecurityPolicyRuleMatch
ComputeRegionSecurityPolicyRuleMatchConfig
ComputeRegionSecurityPolicyRulePreconfiguredWafConfig
ComputeRegionSecurityPolicyRulePreconfiguredWafExclusion
ComputeRegionSecurityPolicyRulePreconfiguredWafExclusionMatch
ComputeRegionSecurityPolicyRuleRateLimitEnforceOnKeyConfig
ComputeRegionSecurityPolicyRuleRateLimitOptions
ComputeRegionUrlMapRegionUrlMapCachePolicy
ComputeRegionUrlMapRegionUrlMapHeaderAction: header_action block. Adds / removes headers on requests forwarded to the backend and / or responses returned to the client. Used at the top-level URL-map slot and inside ComputeRegionUrlMapRegionUrlMapRouteRule.headerAction.
ComputeRegionUrlMapRegionUrlMapHeaderMatch: One match_rules[].header_matches[] entry. The schema permits one of exactMatch / prefixMatch / suffixMatch / regexMatch / presentMatch / rangeMatch per entry; invertMatch negates the outcome. Validation is left to the GCP API.
ComputeRegionUrlMapRegionUrlMapHeaderMatchRange: header_matches.range_match block. Both bounds required by the schema.
ComputeRegionUrlMapRegionUrlMapHeaderToAdd: One entry in ComputeRegionUrlMapRegionUrlMapHeaderAction.requestHeadersToAdd / ComputeRegionUrlMapRegionUrlMapHeaderAction.responseHeadersToAdd. All three fields are required by the schema at the top-level header_action slot.
ComputeRegionUrlMapRegionUrlMapHostRule: One host_rule entry. Binds a set of Host: header values to a ComputeRegionUrlMapRegionUrlMapPathMatcher by name. Multiple host_rule entries can point at the same pathMatcher.
ComputeRegionUrlMapRegionUrlMapMetadataFilter
ComputeRegionUrlMapRegionUrlMapPathMatcher: One path_matcher entry. Each path matcher is named (so ComputeRegionUrlMapRegionUrlMapHostRule can reference it) and carries a fallback defaultService plus the path-based routing rules.
ComputeRegionUrlMapRegionUrlMapPathRule: One path_matcher.path_rule[] entry. Matches request paths against the paths glob list (e.g. ['/login', '/login/*']) and dispatches to either a service OR an inline urlRedirect -- exactly one of the two must be set per the GCP API.
ComputeRegionUrlMapRegionUrlMapQueryParameterMatch: One match_rules[].query_parameter_matches[] entry. Matches a single query parameter by name with a chosen predicate.
ComputeRegionUrlMapRegionUrlMapRouteAction
ComputeRegionUrlMapRegionUrlMapRouteRule: One path_matcher.route_rules[] entry. Priority-ordered routing with header / query / regex match support; the GCP equivalent of an Envoy route_config.
ComputeRegionUrlMapRegionUrlMapRouteRuleMatch: One route_rules[].match_rules[] entry. Carries the actual matching predicates (one or more of full path / prefix / regex / path template, optionally further refined by header / query / metadata filters).
ComputeRegionUrlMapRegionUrlMapTest: One test[] entry. Each test states "a request to host+path should resolve to service" and is evaluated by GCP at apply time -- if the routing pipeline produces a different service, the apply FAILS. Effectively a contract test for the URL map's routing table.
ComputeRegionUrlMapRegionUrlMapTestHeader: One entry in ComputeRegionUrlMapRegionUrlMapTest.headers. Both fields required by the schema.
ComputeRegionUrlMapRegionUrlMapUrlRedirect: default_url_redirect / path_rule.url_redirect / route_rules.url_redirect block. Returns an HTTP redirect to the client instead of forwarding to a backend.
ComputeReservationDeleteAfterDuration: Typed helper for the delete_after_duration block of google_compute_reservation (derived from provider schema).
ComputeReservationParams: Typed helper for the params block of google_compute_reservation (derived from provider schema).
ComputeReservationReservationSharingPolicy: Typed helper for the reservation_sharing_policy block of google_compute_reservation (derived from provider schema).
ComputeReservationShareSettings: Typed helper for the share_settings block of google_compute_reservation (derived from provider schema).
ComputeReservationShareSettingsProjectMap: Typed helper for the share_settings.project_map block of google_compute_reservation (derived from provider schema).
ComputeReservationSpecificReservation: Typed helper for the specific_reservation block of google_compute_reservation (derived from provider schema).
ComputeReservationSpecificReservationInstanceProperties: Typed helper for the specific_reservation.instance_properties block of google_compute_reservation (derived from provider schema).
ComputeReservationSpecificReservationInstancePropertiesGuestAccelerators: Typed helper for the specific_reservation.instance_properties.guest_accelerators block of google_compute_reservation (derived from provider schema).
ComputeReservationSpecificReservationInstancePropertiesLocalSsds: Typed helper for the specific_reservation.instance_properties.local_ssds block of google_compute_reservation (derived from provider schema).
ComputeResizeRequestRequestedRunDuration: Typed helper for the requested_run_duration block of google_compute_resize_request (derived from provider schema).
ComputeResourcePolicyDailySchedule: Daily snapshot schedule.
ComputeResourcePolicyDayOfWeek: One entry of a weekly snapshot schedule.
ComputeResourcePolicyHourlySchedule: Hourly snapshot schedule.
ComputeResourcePolicyRetentionPolicy: Retention policy for scheduled snapshots.
ComputeResourcePolicySnapshotProperties: Properties applied to snapshots created by the schedule.
ComputeResourcePolicySnapshotSchedule: Snapshot cadence — choose exactly one of hourly / daily / weekly.
ComputeResourcePolicySnapshotSchedulePolicy: snapshot_schedule_policy block.
ComputeResourcePolicyWeeklySchedule: Weekly snapshot schedule (one or more ComputeResourcePolicyDayOfWeek).
ComputeResourcePolicyWorkloadPolicy: workload_policy block.
ComputeRolloutPlanWaves: Typed helper for the waves block of google_compute_rollout_plan (derived from provider schema).
ComputeRolloutPlanWavesOrchestrationOptions: Typed helper for the waves.orchestration_options block of google_compute_rollout_plan (derived from provider schema).
ComputeRolloutPlanWavesOrchestrationOptionsDelays: Typed helper for the waves.orchestration_options.delays block of google_compute_rollout_plan (derived from provider schema).
ComputeRolloutPlanWavesSelectors: Typed helper for the waves.selectors block of google_compute_rollout_plan (derived from provider schema).
ComputeRolloutPlanWavesSelectorsLocationSelector: Typed helper for the waves.selectors.location_selector block of google_compute_rollout_plan (derived from provider schema).
ComputeRolloutPlanWavesSelectorsResourceHierarchySelector: Typed helper for the waves.selectors.resource_hierarchy_selector block of google_compute_rollout_plan (derived from provider schema).
ComputeRolloutPlanWavesValidation: Typed helper for the waves.validation block of google_compute_rollout_plan (derived from provider schema).
ComputeRolloutPlanWavesValidationTimeBasedValidationMetadata: Typed helper for the waves.validation.time_based_validation_metadata block of google_compute_rollout_plan (derived from provider schema).
ComputeRouteGatewayNextHop: Route via the default internet gateway (default-internet-gateway).
ComputeRouteIlbNextHop: Route via an internal load balancer.
ComputeRouteInstanceNextHop: Route via a Compute Engine VM instance (name or self-link).
ComputeRouteIpNextHop: Route via an explicit next-hop IP address.
ComputeRouteNextHop: Next-hop target for GoogleComputeRoute. Sealed so the provider exactly_one_of on the next_hop_* attributes is exhaustive at the type level.
ComputeRouterBgp: bgp block — local BGP session parameters for a Cloud Router.
ComputeRouterNamedSetElements: Typed helper for the elements block of google_compute_router_named_set (derived from provider schema).
ComputeRouterNatLogConfig: Typed helper for the log_config block of google_compute_router_nat (derived from provider schema).
ComputeRouterNatNat64Subnetwork: Typed helper for the nat64_subnetwork block of google_compute_router_nat (derived from provider schema).
ComputeRouterNatRules: Typed helper for the rules block of google_compute_router_nat (derived from provider schema).
ComputeRouterNatRulesAction: Typed helper for the rules.action block of google_compute_router_nat (derived from provider schema).
ComputeRouterNatSubnetwork: Typed helper for the subnetwork block of google_compute_router_nat (derived from provider schema).
ComputeRouterPeerAdvertisedIpRanges: Typed helper for the advertised_ip_ranges block of google_compute_router_peer (derived from provider schema).
ComputeRouterPeerBfd: Typed helper for the bfd block of google_compute_router_peer (derived from provider schema).
ComputeRouterPeerCustomLearnedIpRanges: Typed helper for the custom_learned_ip_ranges block of google_compute_router_peer (derived from provider schema).
ComputeRouterPeerMd5AuthenticationKey: Typed helper for the md5_authentication_key block of google_compute_router_peer (derived from provider schema).
ComputeRouterRoutePolicyTerms: Typed helper for the terms block of google_compute_router_route_policy (derived from provider schema).
ComputeRouterRoutePolicyTermsActions: Typed helper for the terms.actions block of google_compute_router_route_policy (derived from provider schema).
ComputeRouterRoutePolicyTermsMatch: Typed helper for the terms.match block of google_compute_router_route_policy (derived from provider schema).
ComputeRouteVpnTunnelNextHop: Route via a Cloud VPN tunnel.
ComputeSecurityPolicyRuleMatch: match block — condition that fires this standalone rule.
ComputeSecurityPolicyRuleMatchConfig
ComputeSecurityPolicyRulePreconfiguredWafConfig
ComputeSecurityPolicyRulePreconfiguredWafExclusion
ComputeSecurityPolicyRulePreconfiguredWafExclusionMatch
ComputeSecurityPolicyRuleRateLimitEnforceOnKeyConfig
ComputeSecurityPolicyRuleRateLimitOptions
ComputeSecurityPolicySecurityPolicyAdaptiveProtectionConfig: adaptive_protection_config -- Google's ML-driven layer-7 DDoS auto-mitigation. When enabled, Cloud Armor watches traffic patterns and proposes / auto-deploys rules during a suspected attack.
ComputeSecurityPolicySecurityPolicyAdaptiveProtectionThresholdConfig: One entry in threshold_configs. The numeric knobs are passed through verbatim -- consult the Cloud Armor adaptive-protection docs for tuning guidance.
ComputeSecurityPolicySecurityPolicyAdvancedOptionsConfig: advanced_options_config -- knobs that apply across the whole policy: JSON-body inspection for preconfigured WAF rules, log verbosity, and client-IP resolution headers.
ComputeSecurityPolicySecurityPolicyJsonCustomConfig: advanced_options_config.json_custom_config -- list of additional Content-Type values Cloud Armor should treat as JSON for WAF body inspection (beyond the default application/json).
ComputeSecurityPolicySecurityPolicyLayer7DdosDefenseConfig: layer_7_ddos_defense_config block. Pair enable with ruleVisibility (typically 'STANDARD'); per-segment thresholds can be tuned via thresholdConfigs for tenants with predictable traffic shape.
ComputeSecurityPolicySecurityPolicyRecaptchaOptionsConfig: recaptcha_options_config -- policy-wide reCAPTCHA site key used for redirect-to-reCAPTCHA actions. Only the redirect site key is exposed by Terraform today; if unset, Cloud Armor uses a Google- managed key.
ComputeSecurityPolicySecurityPolicyRule: One entry in rule[]. Rules are evaluated from highest priority (lowest numeric value) to lowest priority. The first match wins and its action is enforced. Cloud Armor REQUIRES a default rule at priority 2147483647 matching all traffic ('*') -- if you omit it the provider injects one with SecurityPolicyRuleAction.allow, which silently disables a deny-list policy. Always author the default rule explicitly.
ComputeSecurityPolicySecurityPolicyRuleEnforceOnKeyConfig: One entry in rate_limit_options.enforce_on_key_configs. Lets a rule key on a composite of attributes (e.g. "(client IP, region)").
ComputeSecurityPolicySecurityPolicyRuleHeaderAction: rule.header_action -- request-header rewrites applied alongside the rule's match action. Useful for tagging matched requests so downstream services (or Cloud Logging) can see which Cloud Armor rule fired.
ComputeSecurityPolicySecurityPolicyRuleHeaderAdd: One header rewrite in ComputeSecurityPolicySecurityPolicyRuleHeaderAction.requestHeadersToAdds. headerValue is optional -- omitting it adds the header with an empty string value.
ComputeSecurityPolicySecurityPolicyRuleMatch: rule.match -- the condition under which a rule fires. Mutually-exclusive variants:
ComputeSecurityPolicySecurityPolicyRuleMatchConfig: match.config -- payload for the SRC_IPS_V1 predicate. The only field today is srcIpRanges; the schema limits this to 10 entries per rule. Pass ['*'] to match ALL inbound IPs (the canonical default-deny / default-allow shape).
ComputeSecurityPolicySecurityPolicyRuleMatchExpr: match.expr -- a user-defined Common Expression Language (CEL) predicate evaluated against the request. The expression is passed to Cloud Armor as an opaque string; the Dart wrapper does NOT type-check CEL syntax, so callers are responsible for matching Cloud Armor's CEL dialect (see https://cloud.google.com/armor/docs/rules-language-reference).
ComputeSecurityPolicySecurityPolicyRuleRateLimitOptions: rule.rate_limit_options -- threshold + action plumbing for SecurityPolicyRuleAction.throttle and SecurityPolicyRuleAction.rateBasedBan. Throttle simply rejects requests over the threshold; rate-based ban additionally locks the offending key out for banDurationSec seconds once it trips banThreshold.
ComputeSecurityPolicySecurityPolicyRuleRateLimitThreshold: rate_limit_threshold / ban_threshold shape. Count of requests per fixed intervalSec window.
ComputeSecurityPolicySecurityPolicyRuleRedirectOptions: rule.redirect_options -- redirect target shape, also reused as rate_limit_options.exceed_redirect_options. Two flavors: 'EXTERNAL_302' requires target (an HTTPS URL Cloud Armor 302s to); 'GOOGLE_RECAPTCHA' swaps the request for a Google-hosted reCAPTCHA challenge and MUST NOT set target.
ComputeSecurityPolicySecurityPolicyTrafficGranularityConfig: One entry in traffic_granularity_configs. enableEachUniqueValue (true) and value (non-empty string) are mutually exclusive: the schema rejects setting both.
ComputeSnapshotDiskSource: Create the snapshot from a Persistent Disk (name or self-link).
ComputeSnapshotInstantSource: Create the snapshot from a zonal Instant Snapshot (name or self-link).
ComputeSnapshotSettingsStorageLocation: Typed helper for the storage_location block of google_compute_snapshot_settings (derived from provider schema).
ComputeSnapshotSettingsStorageLocationLocations: Typed helper for the storage_location.locations block of google_compute_snapshot_settings (derived from provider schema).
ComputeSnapshotSource: Snapshot source for GoogleComputeSnapshot. Sealed so the provider exactly_one_of on source_disk / source_instant_snapshot is exhaustive at the type level.
ComputeStoragePoolParams: Typed helper for the params block of google_compute_storage_pool (derived from provider schema).
ComputeSubnetworkSecondaryIpRange: One secondary_ip_range entry. Defines an alias IP range usable by instances in this subnetwork (typically consumed by GKE pods/services).
ComputeSubnetworkSubnetworkLogConfig: log_config block. Enables VPC flow logs for the subnetwork. Flow logging is not supported when the subnetwork purpose is REGIONAL_MANAGED_PROXY or GLOBAL_MANAGED_PROXY.
ComputeUrlMapUrlMapCachePolicy
ComputeUrlMapUrlMapHeaderAction: header_action block. Adds / removes headers on requests forwarded to the backend and / or responses returned to the client. Used at the top-level URL-map slot and inside ComputeUrlMapUrlMapRouteRule.headerAction.
ComputeUrlMapUrlMapHeaderMatch: One match_rules[].header_matches[] entry. The schema permits one of exactMatch / prefixMatch / suffixMatch / regexMatch / presentMatch / rangeMatch per entry; invertMatch negates the outcome. Validation is left to the GCP API.
ComputeUrlMapUrlMapHeaderMatchRange: header_matches.range_match block. Both bounds required by the schema.
ComputeUrlMapUrlMapHeaderToAdd: One entry in ComputeUrlMapUrlMapHeaderAction.requestHeadersToAdd / ComputeUrlMapUrlMapHeaderAction.responseHeadersToAdd. All three fields are required by the schema at the top-level header_action slot.
ComputeUrlMapUrlMapHostRule: One host_rule entry. Binds a set of Host: header values to a ComputeUrlMapUrlMapPathMatcher by name. Multiple host_rule entries can point at the same pathMatcher.
ComputeUrlMapUrlMapMetadataFilter
ComputeUrlMapUrlMapPathMatcher: One path_matcher entry. Each path matcher is named (so ComputeUrlMapUrlMapHostRule can reference it) and carries a fallback defaultService plus the path-based routing rules.
ComputeUrlMapUrlMapPathRule: One path_matcher.path_rule[] entry. Matches request paths against the paths glob list (e.g. ['/login', '/login/*']) and dispatches to either a service OR an inline urlRedirect -- exactly one of the two must be set per the GCP API.
ComputeUrlMapUrlMapQueryParameterMatch: One match_rules[].query_parameter_matches[] entry. Matches a single query parameter by name with a chosen predicate.
ComputeUrlMapUrlMapRouteAction
ComputeUrlMapUrlMapRouteRule: One path_matcher.route_rules[] entry. Priority-ordered routing with header / query / regex match support; the GCP equivalent of an Envoy route_config.
ComputeUrlMapUrlMapRouteRuleMatch: One route_rules[].match_rules[] entry. Carries the actual matching predicates (one or more of full path / prefix / regex / path template, optionally further refined by header / query / metadata filters).
ComputeUrlMapUrlMapTest: One test[] entry. Each test states "a request to host+path should resolve to service" and is evaluated by GCP at apply time -- if the routing pipeline produces a different service, the apply FAILS. Effectively a contract test for the URL map's routing table.
ComputeUrlMapUrlMapTestHeader: One entry in ComputeUrlMapUrlMapTest.headers. Both fields required by the schema.
ComputeUrlMapUrlMapUrlRedirect: default_url_redirect / path_rule.url_redirect / route_rules.url_redirect block. Returns an HTTP redirect to the client instead of forwarding to a backend.
ComputeWireGroupEndpoints: Typed helper for the endpoints block of google_compute_wire_group (derived from provider schema).
ComputeWireGroupEndpointsInterconnects: Typed helper for the endpoints.interconnects block of google_compute_wire_group (derived from provider schema).
ComputeWireGroupWireProperties: Typed helper for the wire_properties block of google_compute_wire_group (derived from provider schema).
GoogleComputeAddress: Factory wrapper for google_compute_address.
GoogleComputeAttachedDisk: Factory wrapper for google_compute_attached_disk.
GoogleComputeAutoscaler: Factory wrapper for google_compute_autoscaler.
GoogleComputeBackendBucket: Factory wrapper for google_compute_backend_bucket.
GoogleComputeBackendBucketSignedUrlKey: Factory wrapper for google_compute_backend_bucket_signed_url_key.
GoogleComputeBackendService: Factory wrapper for google_compute_backend_service.
GoogleComputeBackendServiceSignedUrlKey: Factory wrapper for google_compute_backend_service_signed_url_key.
GoogleComputeBulkPerInstanceConfig: Factory wrapper for google_compute_bulk_per_instance_config.
GoogleComputeCrossSiteNetwork: Factory wrapper for google_compute_cross_site_network.
GoogleComputeDisk: Factory wrapper for google_compute_disk.
GoogleComputeDiskAsyncReplication: Factory wrapper for google_compute_disk_async_replication.
GoogleComputeDiskIamBinding: Factory wrapper for google_compute_disk_iam_binding.
GoogleComputeDiskIamMember: Factory wrapper for google_compute_disk_iam_member.
GoogleComputeDiskIamPolicy: Factory wrapper for google_compute_disk_iam_policy.
GoogleComputeDiskResourcePolicyAttachment: Factory wrapper for google_compute_disk_resource_policy_attachment.
GoogleComputeExternalVpnGateway: Factory wrapper for google_compute_external_vpn_gateway.
GoogleComputeFirewall: Factory wrapper for google_compute_firewall.
GoogleComputeFirewallPolicy: Factory wrapper for google_compute_firewall_policy.
GoogleComputeFirewallPolicyAssociation: Factory wrapper for google_compute_firewall_policy_association.
GoogleComputeFirewallPolicyIamBinding: Factory wrapper for google_compute_firewall_policy_iam_binding.
GoogleComputeFirewallPolicyIamMember: Factory wrapper for google_compute_firewall_policy_iam_member.
GoogleComputeFirewallPolicyIamPolicy: Factory wrapper for google_compute_firewall_policy_iam_policy.
GoogleComputeFirewallPolicyRule: Factory wrapper for google_compute_firewall_policy_rule.
GoogleComputeFirewallPolicyWithRules: Factory wrapper for google_compute_firewall_policy_with_rules.
GoogleComputeForwardingRule: Factory wrapper for google_compute_forwarding_rule.
GoogleComputeGlobalAddress: Factory wrapper for google_compute_global_address.
GoogleComputeGlobalForwardingRule: Factory wrapper for google_compute_global_forwarding_rule.
GoogleComputeGlobalNetworkEndpoint: Factory wrapper for google_compute_global_network_endpoint.
GoogleComputeGlobalNetworkEndpointGroup: Factory wrapper for google_compute_global_network_endpoint_group.
GoogleComputeGlobalVmExtensionPolicy: Factory wrapper for google_compute_global_vm_extension_policy.
GoogleComputeHaVpnGateway: Factory wrapper for google_compute_ha_vpn_gateway.
GoogleComputeHealthCheck: Factory wrapper for google_compute_health_check.
GoogleComputeHttpHealthCheck: Factory wrapper for google_compute_http_health_check.
GoogleComputeHttpsHealthCheck: Factory wrapper for google_compute_https_health_check.
GoogleComputeImage: Factory wrapper for google_compute_image.
GoogleComputeImageIamBinding: Factory wrapper for google_compute_image_iam_binding.
GoogleComputeImageIamMember: Factory wrapper for google_compute_image_iam_member.
GoogleComputeImageIamPolicy: Factory wrapper for google_compute_image_iam_policy.
GoogleComputeInstance: Factory wrapper for google_compute_instance.
GoogleComputeInstanceFromTemplate: Factory wrapper for google_compute_instance_from_template.
GoogleComputeInstanceGroup: Factory wrapper for google_compute_instance_group.
GoogleComputeInstanceGroupManager: Factory wrapper for google_compute_instance_group_manager.
GoogleComputeInstanceGroupMembership: Factory wrapper for google_compute_instance_group_membership.
GoogleComputeInstanceGroupNamedPort: Factory wrapper for google_compute_instance_group_named_port.
GoogleComputeInstanceIamBinding: Factory wrapper for google_compute_instance_iam_binding.
GoogleComputeInstanceIamMember: Factory wrapper for google_compute_instance_iam_member.
GoogleComputeInstanceIamPolicy: Factory wrapper for google_compute_instance_iam_policy.
GoogleComputeInstanceSettings: Factory wrapper for google_compute_instance_settings.
GoogleComputeInstanceTemplate: Factory wrapper for google_compute_instance_template.
GoogleComputeInstanceTemplateIamBinding: Factory wrapper for google_compute_instance_template_iam_binding.
GoogleComputeInstanceTemplateIamMember: Factory wrapper for google_compute_instance_template_iam_member.
GoogleComputeInstanceTemplateIamPolicy: Factory wrapper for google_compute_instance_template_iam_policy.
GoogleComputeInstantSnapshot: Factory wrapper for google_compute_instant_snapshot.
GoogleComputeInstantSnapshotIamBinding: Factory wrapper for google_compute_instant_snapshot_iam_binding.
GoogleComputeInstantSnapshotIamMember: Factory wrapper for google_compute_instant_snapshot_iam_member.
GoogleComputeInstantSnapshotIamPolicy: Factory wrapper for google_compute_instant_snapshot_iam_policy.
GoogleComputeInterconnect: Factory wrapper for google_compute_interconnect.
GoogleComputeInterconnectAttachment: Factory wrapper for google_compute_interconnect_attachment.
GoogleComputeInterconnectAttachmentGroup: Factory wrapper for google_compute_interconnect_attachment_group.
GoogleComputeInterconnectGroup: Factory wrapper for google_compute_interconnect_group.
GoogleComputeManagedSslCertificate: Factory wrapper for google_compute_managed_ssl_certificate.
GoogleComputeNetwork: Factory wrapper for google_compute_network.
GoogleComputeNetworkAttachment: Factory wrapper for google_compute_network_attachment.
GoogleComputeNetworkEndpoint: Factory wrapper for google_compute_network_endpoint.
GoogleComputeNetworkEndpointGroup: Factory wrapper for google_compute_network_endpoint_group.
GoogleComputeNetworkEndpoints: Factory wrapper for google_compute_network_endpoints.
GoogleComputeNetworkFirewallPolicy: Factory wrapper for google_compute_network_firewall_policy.
GoogleComputeNetworkFirewallPolicyAssociation: Factory wrapper for google_compute_network_firewall_policy_association.
GoogleComputeNetworkFirewallPolicyIamBinding: Factory wrapper for google_compute_network_firewall_policy_iam_binding.
GoogleComputeNetworkFirewallPolicyIamMember: Factory wrapper for google_compute_network_firewall_policy_iam_member.
GoogleComputeNetworkFirewallPolicyIamPolicy: Factory wrapper for google_compute_network_firewall_policy_iam_policy.
GoogleComputeNetworkFirewallPolicyRule: Factory wrapper for google_compute_network_firewall_policy_rule.
GoogleComputeNetworkFirewallPolicyWithRules: Factory wrapper for google_compute_network_firewall_policy_with_rules.
GoogleComputeNetworkPeering: Factory wrapper for google_compute_network_peering.
GoogleComputeNetworkPeeringRoutesConfig: Factory wrapper for google_compute_network_peering_routes_config.
GoogleComputeNodeGroup: Factory wrapper for google_compute_node_group.
GoogleComputeNodeTemplate: Factory wrapper for google_compute_node_template.
GoogleComputeOrganizationSecurityPolicy: Factory wrapper for google_compute_organization_security_policy.
GoogleComputeOrganizationSecurityPolicyAssociation: Factory wrapper for google_compute_organization_security_policy_association.
GoogleComputeOrganizationSecurityPolicyRule: Factory wrapper for google_compute_organization_security_policy_rule.
GoogleComputePacketMirroring: Factory wrapper for google_compute_packet_mirroring.
GoogleComputePerInstanceConfig: Factory wrapper for google_compute_per_instance_config.
GoogleComputePreviewFeature: Factory wrapper for google_compute_preview_feature.
GoogleComputeProjectCloudArmorTier: Factory wrapper for google_compute_project_cloud_armor_tier.
GoogleComputeProjectDefaultNetworkTier: Factory wrapper for google_compute_project_default_network_tier.
GoogleComputeProjectMetadata: Factory wrapper for google_compute_project_metadata.
GoogleComputeProjectMetadataItem: Factory wrapper for google_compute_project_metadata_item.
GoogleComputePublicAdvertisedPrefix: Factory wrapper for google_compute_public_advertised_prefix.
GoogleComputePublicDelegatedPrefix: Factory wrapper for google_compute_public_delegated_prefix.
GoogleComputeRegionAutoscaler: Factory wrapper for google_compute_region_autoscaler.
GoogleComputeRegionBackendService: Factory wrapper for google_compute_region_backend_service.
GoogleComputeRegionCommitment: Factory wrapper for google_compute_region_commitment.
GoogleComputeRegionCompositeHealthCheck: Factory wrapper for google_compute_region_composite_health_check.
GoogleComputeRegionDisk: Factory wrapper for google_compute_region_disk.
GoogleComputeRegionDiskIamBinding: Factory wrapper for google_compute_region_disk_iam_binding.
GoogleComputeRegionDiskIamMember: Factory wrapper for google_compute_region_disk_iam_member.
GoogleComputeRegionDiskIamPolicy: Factory wrapper for google_compute_region_disk_iam_policy.
GoogleComputeRegionDiskResourcePolicyAttachment: Factory wrapper for google_compute_region_disk_resource_policy_attachment.
GoogleComputeRegionHealthAggregationPolicy: Factory wrapper for google_compute_region_health_aggregation_policy.
GoogleComputeRegionHealthCheck: Factory wrapper for google_compute_region_health_check.
GoogleComputeRegionHealthSource: Factory wrapper for google_compute_region_health_source.
GoogleComputeRegionInstanceGroupManager: Factory wrapper for google_compute_region_instance_group_manager.
GoogleComputeRegionInstanceTemplate: Factory wrapper for google_compute_region_instance_template.
GoogleComputeRegionInstantSnapshot: Factory wrapper for google_compute_region_instant_snapshot.
GoogleComputeRegionInstantSnapshotIamBinding: Factory wrapper for google_compute_region_instant_snapshot_iam_binding.
GoogleComputeRegionInstantSnapshotIamMember: Factory wrapper for google_compute_region_instant_snapshot_iam_member.
GoogleComputeRegionInstantSnapshotIamPolicy: Factory wrapper for google_compute_region_instant_snapshot_iam_policy.
GoogleComputeRegionNetworkEndpoint: Factory wrapper for google_compute_region_network_endpoint.
GoogleComputeRegionNetworkEndpointGroup: Factory wrapper for google_compute_region_network_endpoint_group.
GoogleComputeRegionNetworkFirewallPolicy: Factory wrapper for google_compute_region_network_firewall_policy.
GoogleComputeRegionNetworkFirewallPolicyAssociation: Factory wrapper for google_compute_region_network_firewall_policy_association.
GoogleComputeRegionNetworkFirewallPolicyIamBinding: Factory wrapper for google_compute_region_network_firewall_policy_iam_binding.
GoogleComputeRegionNetworkFirewallPolicyIamMember: Factory wrapper for google_compute_region_network_firewall_policy_iam_member.
GoogleComputeRegionNetworkFirewallPolicyIamPolicy: Factory wrapper for google_compute_region_network_firewall_policy_iam_policy.
GoogleComputeRegionNetworkFirewallPolicyRule: Factory wrapper for google_compute_region_network_firewall_policy_rule.
GoogleComputeRegionNetworkFirewallPolicyWithRules: Factory wrapper for google_compute_region_network_firewall_policy_with_rules.
GoogleComputeRegionPerInstanceConfig: Factory wrapper for google_compute_region_per_instance_config.
GoogleComputeRegionResizeRequest: Factory wrapper for google_compute_region_resize_request.
GoogleComputeRegionSecurityPolicy: Factory wrapper for google_compute_region_security_policy.
GoogleComputeRegionSecurityPolicyRule: Factory wrapper for google_compute_region_security_policy_rule.
GoogleComputeRegionSslCertificate: Factory wrapper for google_compute_region_ssl_certificate.
GoogleComputeRegionSslPolicy: Factory wrapper for google_compute_region_ssl_policy.
GoogleComputeRegionTargetHttpProxy: Factory wrapper for google_compute_region_target_http_proxy.
GoogleComputeRegionTargetHttpsProxy: Factory wrapper for google_compute_region_target_https_proxy.
GoogleComputeRegionTargetTcpProxy: Factory wrapper for google_compute_region_target_tcp_proxy.
GoogleComputeRegionUrlMap: Factory wrapper for google_compute_region_url_map.
GoogleComputeReservation: Factory wrapper for google_compute_reservation.
GoogleComputeResizeRequest: Factory wrapper for google_compute_resize_request.
GoogleComputeResourcePolicy: Factory wrapper for google_compute_resource_policy.
GoogleComputeResourcePolicyAttachment: Factory wrapper for google_compute_resource_policy_attachment.
GoogleComputeRolloutPlan: Factory wrapper for google_compute_rollout_plan.
GoogleComputeRoute: Factory wrapper for google_compute_route.
GoogleComputeRouter: Factory wrapper for google_compute_router.
GoogleComputeRouterInterface: Factory wrapper for google_compute_router_interface.
GoogleComputeRouterNamedSet: Factory wrapper for google_compute_router_named_set.
GoogleComputeRouterNat: Factory wrapper for google_compute_router_nat.
GoogleComputeRouterNatAddress: Factory wrapper for google_compute_router_nat_address.
GoogleComputeRouterPeer: Factory wrapper for google_compute_router_peer.
GoogleComputeRouterRoutePolicy: Factory wrapper for google_compute_router_route_policy.
GoogleComputeSecurityPolicy: Factory wrapper for google_compute_security_policy.
GoogleComputeSecurityPolicyRule: Factory wrapper for google_compute_security_policy_rule.
GoogleComputeServiceAttachment: Factory wrapper for google_compute_service_attachment.
GoogleComputeSharedVpcHostProject: Factory wrapper for google_compute_shared_vpc_host_project.
GoogleComputeSharedVpcServiceProject: Factory wrapper for google_compute_shared_vpc_service_project.
GoogleComputeSnapshot: Factory wrapper for google_compute_snapshot.
GoogleComputeSnapshotIamBinding: Factory wrapper for google_compute_snapshot_iam_binding.
GoogleComputeSnapshotIamMember: Factory wrapper for google_compute_snapshot_iam_member.
GoogleComputeSnapshotIamPolicy: Factory wrapper for google_compute_snapshot_iam_policy.
GoogleComputeSnapshotSettings: Factory wrapper for google_compute_snapshot_settings.
GoogleComputeSslCertificate: Factory wrapper for google_compute_ssl_certificate.
GoogleComputeSslPolicy: Factory wrapper for google_compute_ssl_policy.
GoogleComputeStoragePool: Factory wrapper for google_compute_storage_pool.
GoogleComputeStoragePoolIamBinding: Factory wrapper for google_compute_storage_pool_iam_binding.
GoogleComputeStoragePoolIamMember: Factory wrapper for google_compute_storage_pool_iam_member.
GoogleComputeStoragePoolIamPolicy: Factory wrapper for google_compute_storage_pool_iam_policy.
GoogleComputeSubnetwork: Factory wrapper for google_compute_subnetwork.
GoogleComputeSubnetworkIamBinding: Factory wrapper for google_compute_subnetwork_iam_binding.
GoogleComputeSubnetworkIamMember: Factory wrapper for google_compute_subnetwork_iam_member.
GoogleComputeSubnetworkIamPolicy: Factory wrapper for google_compute_subnetwork_iam_policy.
GoogleComputeTargetGrpcProxy: Factory wrapper for google_compute_target_grpc_proxy.
GoogleComputeTargetHttpProxy: Factory wrapper for google_compute_target_http_proxy.
GoogleComputeTargetHttpsProxy: Factory wrapper for google_compute_target_https_proxy.
GoogleComputeTargetInstance: Factory wrapper for google_compute_target_instance.
GoogleComputeTargetPool: Factory wrapper for google_compute_target_pool.
GoogleComputeTargetSslProxy: Factory wrapper for google_compute_target_ssl_proxy.
GoogleComputeTargetTcpProxy: Factory wrapper for google_compute_target_tcp_proxy.
GoogleComputeUrlMap: Factory wrapper for google_compute_url_map.
GoogleComputeVpnGateway: Factory wrapper for google_compute_vpn_gateway.
GoogleComputeVpnTunnel: Factory wrapper for google_compute_vpn_tunnel.
GoogleComputeWireGroup: Factory wrapper for google_compute_wire_group.
GoogleComputeZoneVmExtensionPolicy: Factory wrapper for google_compute_zone_vm_extension_policy.

Enums

AccessConfigNetworkTier: network_interface.access_config.network_tier -- service tier for the external IP. STANDARD is regional; PREMIUM is global.
AddressType: Address allocation scope: INTERNAL (VPC-private) or EXTERNAL (public IP).
AutoscalerCpuPredictiveMethod: Predictive autoscaling method for ComputeAutoscalerAutoscalerCpuUtilization.
AutoscalerMetricType: Defines how a custom-metric value is interpreted by the autoscaler. Mirrors the API's utilizationTargetType enum.
AutoscalerMode: Operating mode for the autoscaling policy. The schema declares this as a free-form string — the enum below pins the API-accepted set so callers cannot mis-spell it. Default is on when the field is omitted from the request.
BackendBucketCacheMode: cdn_policy.cache_mode. Enabling CDN (enable_cdn = true) without setting this defaults to CACHE_ALL_STATIC. Note: this is a distinct type from BackendServiceCacheMode — bucket-side CDN policies are not interchangeable with service-side policies.
BackendBucketCompressionMode: compression_mode — Brotli / gzip negotiation based on the client's Accept-Encoding header. Note: this is a distinct type from BackendServiceCompressionMode even though the wire values (AUTOMATIC / DISABLED) coincide.
BackendBucketLoadBalancingScheme: load_balancing_scheme. The bucket can be left scheme-less (the usual case — works with classic global external and global application external load balancers) or set to internalManaged for cross-region internal layer-7 load balancing. Important: when internalManaged is set, enable_cdn must be false (Cloud CDN is not available for internal schemes).
BackendServiceBalancingMode: Per-backend balancing mode. See ComputeBackendServiceBackendServiceBackend.balancingMode.
BackendServiceCacheMode: cdn_policy.cache_mode. Enabling CDN (enable_cdn = true) without setting this defaults to CACHE_ALL_STATIC.
BackendServiceCompressionMode: compression_mode. Brotli / gzip negotiation based on the client's Accept-Encoding header.
BackendServiceLogOptionalMode: log_config.optional_mode. Controls which optional access-log fields are exported when ComputeBackendServiceBackendServiceLogConfig.enable is true.
BackendServicePreference: backend.preference. Cannot be set when load_balancing_scheme is EXTERNAL.
BackendServiceProtocol: Wire protocol the backend service uses to talk to backends. HTTP2 and H2C require an HTTP(S)-class load balancer; TCP, SSL, and UDP are for Network Load Balancing / Traffic Director TCP routing. GRPC is required when the URL map is bound to a target gRPC proxy.
BgpBestPathSelectionMode: BGP best-path selection algorithm for the VPC.
BgpInterRegionCost: BGP inter-region cost calculation behaviour. Used when bgpBestPathSelectionMode == standard.
ComputeDiskGuestOsFeatureType: guest_os_features[].type for zonal persistent disks.
ComputeExternalVpnGatewayRedundancyType: Compute External Vpn Gateway Redundancy enum for redundancy_type.
ComputeFirewallPolicyRuleDirection: Compute Firewall Policy Rule enum for direction.
ComputeFirewallPolicyRuleMatchDestNetworkContext: dest_network_context — derived from the provider schema description.
ComputeFirewallPolicyRuleMatchSrcNetworkContext: src_network_context — derived from the provider schema description.
ComputeFirewallPolicyWithRulesRuleDirection: direction — derived from the provider schema description.
ComputeHaVpnGatewayGatewayIpVersion: Compute Ha Vpn Gateway Gateway Ip enum for gateway_ip_version.
ComputeHaVpnGatewayStackType: Compute Ha Vpn Gateway Stack enum for stack_type.
ComputeInstanceNetworkPerformanceConfigTotalEgressBandwidthTier: network_performance_config.total_egress_bandwidth_tier — VM egress bandwidth profile.
ComputeInterconnectAttachmentBandwidth: Compute Interconnect Attachment enum for bandwidth.
ComputeInterconnectAttachmentEncryption: Compute Interconnect Attachment enum for encryption.
ComputeInterconnectAttachmentGroupIntentAvailabilitySla: availability_sla — derived from the provider schema description.
ComputeInterconnectAttachmentStackType: Compute Interconnect Attachment Stack enum for stack_type.
ComputeInterconnectAttachmentState: Compute Interconnect Attachment enum for state.
ComputeInterconnectAttachmentType: Compute Interconnect Attachment enum for type.
ComputeInterconnectGroupIntentTopologyCapability: topology_capability — derived from the provider schema description.
ComputeInterconnectInterconnectType: Compute Interconnect Interconnect enum for interconnect_type.
ComputeInterconnectLinkType: Compute Interconnect Link enum for link_type.
ComputeInterconnectOperationalStatus: Compute Interconnect Operational enum for operational_status.
ComputeInterconnectState: Compute Interconnect enum for state.
ComputeNetworkAttachmentConnectionPreference: Compute Network Attachment Connection enum for connection_preference.
ComputeNetworkFirewallPolicyRuleDirection: Compute Network Firewall Policy Rule enum for direction.
ComputeNetworkFirewallPolicyRuleMatchDestNetworkContext: dest_network_context — derived from the provider schema description.
ComputeNetworkFirewallPolicyRuleMatchSrcNetworkContext: src_network_context — derived from the provider schema description.
ComputeNetworkFirewallPolicyRuleTargetType: Compute Network Firewall Policy Rule Target enum for target_type.
ComputeNetworkFirewallPolicyWithRulesPolicyType: Compute Network Firewall Policy With Rules Policy enum for policy_type.
ComputeNetworkFirewallPolicyWithRulesRuleDirection: direction — derived from the provider schema description.
ComputeNetworkPeeringStackType: stack_type — IP version stack of the peering. Default (when unset) is ComputeNetworkPeeringStackType.ipv4Only.
ComputeNetworkPeeringUpdateStrategy: update_strategy — how changes to peering config are reconciled. Default (when unset) is ComputeNetworkPeeringUpdateStrategy.independent.
ComputeNodeGroupAutoscalingPolicyMode: mode — derived from the provider schema description.
ComputeNodeGroupShareSettingsShareType: share_type — derived from the provider schema description.
ComputeNodeTemplateCpuOvercommitType: Compute Node Template Cpu Overcommit enum for cpu_overcommit_type.
ComputeNodeTemplateServerBindingType: type — derived from the provider schema description.
ComputePacketMirroringEnable: Compute Packet Mirroring enum for enable.
ComputePacketMirroringFilterDirection: direction — derived from the provider schema description.
ComputePerInstanceConfigPreservedStateDiskDeleteRule: delete_rule — derived from the provider schema description.
ComputePerInstanceConfigPreservedStateDiskMode: mode — derived from the provider schema description.
ComputePerInstanceConfigPreservedStateExternalIpAutoDelete: auto_delete — derived from the provider schema description.
ComputePerInstanceConfigPreservedStateInternalIpAutoDelete: auto_delete — derived from the provider schema description.
ComputePreviewFeatureActivationStatus: Compute Preview Feature Activation enum for activation_status.
ComputeProjectCloudArmorTier: Cloud Armor managed protection tier for the project. Prefer caStandard in smoke stacks — Enterprise Annual bills ~$3000/mo.
ComputeProjectDefaultNetworkTier: Default network service tier for new external IPs in the project. PREMIUM uses Google's global backbone; STANDARD is regional/ISP.
ComputePublicAdvertisedPrefixIpv6AccessType: Compute Public Advertised Prefix Ipv6 Access enum for ipv6_access_type.
ComputePublicAdvertisedPrefixPdpScope: Compute Public Advertised Prefix Pdp enum for pdp_scope.
ComputePublicDelegatedPrefixIpv6AccessType: Compute Public Delegated Prefix Ipv6 Access enum for ipv6_access_type.
ComputePublicDelegatedPrefixMode: Compute Public Delegated Prefix enum for mode.
ComputeRegionCommitmentCategory: Compute Region Commitment enum for category.
ComputeRegionCommitmentPlan: Compute Region Commitment enum for plan.
ComputeRegionCommitmentStatus: Compute Region Commitment enum for status.
ComputeRegionDiskGuestOsFeatureType: guest_os_features[].type for regional persistent disks.
ComputeRegionHealthAggregationPolicyPolicyType: Compute Region Health Aggregation Policy Policy enum for policy_type.
ComputeRegionHealthSourceSourceType: Compute Region Health Source Source enum for source_type.
ComputeRegionInstantSnapshotDeletionPolicy: Terraform deletion_policy for regional instant snapshots.
ComputeRegionNetworkFirewallPolicyPolicyType: Compute Region Network Firewall Policy Policy enum for policy_type.
ComputeRegionNetworkFirewallPolicyRuleDirection: Compute Region Network Firewall Policy Rule enum for direction.
ComputeRegionNetworkFirewallPolicyRuleMatchDestNetworkContext: dest_network_context — derived from the provider schema description.
ComputeRegionNetworkFirewallPolicyRuleMatchSrcNetworkContext: src_network_context — derived from the provider schema description.
ComputeRegionNetworkFirewallPolicyRuleTargetType: Compute Region Network Firewall Policy Rule Target enum for target_type.
ComputeRegionNetworkFirewallPolicyWithRulesPolicyType: Compute Region Network Firewall Policy With Rules Policy enum for policy_type.
ComputeRegionNetworkFirewallPolicyWithRulesRuleDirection: direction — derived from the provider schema description.
ComputeRegionNetworkFirewallPolicyWithRulesRuleTargetType: target_type — derived from the provider schema description.
ComputeRegionPerInstanceConfigPreservedStateDiskDeleteRule: delete_rule — derived from the provider schema description.
ComputeRegionPerInstanceConfigPreservedStateDiskMode: mode — derived from the provider schema description.
ComputeRegionPerInstanceConfigPreservedStateExternalIpAutoDelete: auto_delete — derived from the provider schema description.
ComputeRegionPerInstanceConfigPreservedStateInternalIpAutoDelete: auto_delete — derived from the provider schema description.
ComputeReservationReservationSharingPolicyServiceShareType: service_share_type — derived from the provider schema description.
ComputeReservationShareSettingsShareType: share_type — derived from the provider schema description.
ComputeReservationSpecificReservationInstancePropertiesLocalSsdsInterface: interface — derived from the provider schema description.
ComputeResourcePolicyMaxTopologyDistance: Maximum topology distance for a high-throughput workload policy.
ComputeResourcePolicyOnSourceDiskDelete: Behaviour when the source disk of a scheduled snapshot is deleted.
ComputeResourcePolicySnapshotDayOfWeek: Day of week for a weekly snapshot schedule.
ComputeResourcePolicyWorkloadType: Workload-placement intent for a GoogleComputeResourcePolicy.
ComputeRolloutPlanLocationScope: Compute Rollout Plan Location enum for location_scope.
ComputeRolloutPlanWavesOrchestrationOptionsDelaysDelimiter: delimiter — derived from the provider schema description.
ComputeRolloutPlanWavesOrchestrationOptionsDelaysType: type — derived from the provider schema description.
ComputeRouterBgpAdvertiseMode: bgp.advertise_mode — which BGP prefix advertisement mode the router uses. Default (when unset) is ComputeRouterBgpAdvertiseMode.defaultMode.
ComputeRouterNamedSetType: Compute Router Named Set enum for type.
ComputeRouterNatAutoNetworkTier: Compute Router Nat Auto Network enum for auto_network_tier.
ComputeRouterNatLogConfigFilter: filter — derived from the provider schema description.
ComputeRouterNatNatIpAllocateOption: Compute Router Nat Nat Ip Allocate enum for nat_ip_allocate_option.
ComputeRouterNatSourceSubnetworkIpRangesToNat: Compute Router Nat Source Subnetwork Ip Ranges To enum for source_subnetwork_ip_ranges_to_nat.
ComputeRouterNatSourceSubnetworkIpRangesToNat64: Compute Router Nat Source Subnetwork Ip Ranges To enum for source_subnetwork_ip_ranges_to_nat64.
ComputeRouterNatType: Compute Router Nat enum for type.
ComputeRouterPeerAdvertiseMode: advertise_mode — BGP prefix advertisement mode of this peer. Default (when unset) is ComputeRouterPeerAdvertiseMode.defaultMode.
ComputeRouterPeerBfdSessionInitializationMode: session_initialization_mode — derived from the provider schema description.
ComputeRouterRoutePolicyType: Compute Router Route Policy enum for type.
ComputeSnapshotSettingsStorageLocationPolicy: policy — derived from the provider schema description.
ComputeSnapshotSnapshotType: Compute Snapshot Snapshot enum for snapshot_type.
ComputeStoragePoolCapacityProvisioningType: Compute Storage Pool Capacity Provisioning enum for capacity_provisioning_type.
ComputeStoragePoolPerformanceProvisioningType: Compute Storage Pool Performance Provisioning enum for performance_provisioning_type.
ComputeTargetInstanceNatPolicy: Compute Target Instance Nat enum for nat_policy.
ConfidentialInstanceType: confidential_instance_config.confidential_instance_type -- confidential computing technology. SEV and SEV_SNP require AMD CPUs (the latter also requires min_cpu_platform = "AMD Milan"). TDX requires Intel.
ExternalManagedMigrationState: external_managed_migration_state. Drives the Classic ALB → Application Load Balancer migration. State must transition PREPARE → optional TEST_BY_PERCENTAGE → TEST_ALL_TRAFFIC before the load balancing scheme can flip from EXTERNAL to EXTERNAL_MANAGED; same order in reverse to roll back.
FirewallDirection: Direction of traffic this firewall rule applies to. For ingress, at least one of sourceRanges / sourceTags / sourceServiceAccounts is required by GCP.
FirewallLogMetadata: Whether to include or exclude metadata for firewall logs. Used as the metadata field of ComputeFirewallFirewallLogConfig.
ForwardingRuleIpProtocol: IP protocol for google_compute_forwarding_rule.ip_protocol. The set of protocols accepted at apply time depends on the load balancing scheme and target type — Application Load Balancers want tcp; protocol forwarding rules may also pick udp / esp / ah / sctp / icmp.
ForwardingRuleIpVersion: IP version for the regional forwarding rule's VIP. Default IPV4. Selecting ipv6 requires a regional IPv6 GoogleComputeAddress for GoogleComputeForwardingRule.ipAddress, and (for external IPv6 NetLB rules) typically pairs with GoogleComputeForwardingRule.ipCollection pointing at a PublicDelegatedPrefix in EXTERNAL_IPV6_FORWARDING_RULE_CREATION mode.
ForwardingRuleLoadBalancingScheme: load_balancing_scheme. Picks which regional load balancer variant this forwarding rule fronts.
ForwardingRuleNetworkTier: network_tier. Unlike global forwarding rules (which only accept PREMIUM), regional forwarding rules accept both tiers. The tier must match the tier of the referenced GoogleComputeForwardingRule.ipAddress when one is supplied. Leave null to inherit the provider default (PREMIUM).
GlobalAddressIpVersion: IP protocol version for the global address. Default ipv4.
GlobalAddressPurpose: purpose for google_compute_global_address. Selects the role the reserved range plays.
GlobalAddressType: address_type for google_compute_global_address. Default external (public IP). Use internal for in-VPC ranges (private-services peering, internal load balancer VIPs).
GlobalForwardingRuleIpProtocol: IP protocol for google_compute_global_forwarding_rule.ip_protocol. The set of protocols accepted at apply time depends on the load balancing scheme and target type — Application Load Balancers want tcp; protocol forwarding rules may also pick udp / esp / ah / sctp / icmp.
GlobalForwardingRuleIpVersion: IP version for the global forwarding rule's VIP. Default IPV4. Selecting ipv6 requires a global IPv6 GoogleComputeGlobalAddress for GoogleComputeGlobalForwardingRule.ipAddress.
GlobalForwardingRuleLoadBalancingScheme: load_balancing_scheme. Picks which load balancer variant this forwarding rule fronts.
GlobalForwardingRuleMetadataFilterMatchCriteria: metadata_filters[*].filter_match_criteria. Controls how the nested ComputeGlobalForwardingRuleGlobalForwardingRuleMetadataFilterLabel entries combine.
GlobalForwardingRuleMigrationState: external_managed_backend_bucket_migration_state. Drives the canary migration of backend buckets attached to this forwarding rule from EXTERNAL (Classic ALB) to EXTERNAL_MANAGED (modern global external ALB).
GlobalForwardingRuleNetworkTier: network_tier. For global forwarding rules GCP only accepts PREMIUM at apply time — the schema lists STANDARD for symmetry with the regional resource, but supplying it on a global rule errors out. Leave the field null (provider default = PREMIUM) unless overriding is explicitly needed.
GlobalNetworkEndpointGroupType: network_endpoint_type for google_compute_global_network_endpoint_group.
HealthCheckPortSpecification: port_specification value shared by every per-protocol config block.
HealthCheckProxyHeader: proxy_header value used inside every per-protocol HTTP-shaped block (HTTP, HTTPS, HTTP2, TCP, SSL). Defaults to none on the GCP API.
HealthCheckType: Health-check protocol. Computed on the resource (the GCP API derives it from which per-protocol config block was set), so callers don't set this directly — they pick the matching *HealthCheck block. Listed here for use in == comparisons against the derived type getter.
InstanceGroupManagerListManagedInstancesResults: list_managed_instances_results — pagination for the listManagedInstances API on this MIG.
InstanceGroupManagerUpdatePolicyAction: update_policy.minimal_action / update_policy.most_disruptive_allowed_action. Shared enum — both fields accept the same value set.
InstanceGroupManagerUpdatePolicyReplacementMethod: update_policy.replacement_method. SUBSTITUTE (default) replaces VMs with newly-named ones; RECREATE preserves instance names but requires max_unavailable_* > 0.
InstanceGroupManagerUpdatePolicyType: update_policy.type. Controls whether the MIG actively performs the rolling update or waits for an external action (resize, recreate-instances) to apply it.
InstanceTemplateAccessConfigNetworkTier: network_interface.access_config.network_tier -- service tier for the external IP. STANDARD is regional; PREMIUM is global.
InstanceTemplateConfidentialInstanceType: confidential_instance_config.confidential_instance_type -- confidential computing technology. SEV and SEV_SNP require AMD CPUs (the latter also requires min_cpu_platform = "AMD Milan"). TDX requires Intel.
InstanceTemplateDiskMode: disk.mode -- read / write mode for an attached or boot disk. Boot disks must be READ_WRITE.
InstanceTemplateInstanceTerminationAction: scheduling.instance_termination_action -- action when a SPOT VM is preempted or max_run_duration elapses.
InstanceTemplateNicType: network_interface.nic_type -- vNIC family used for the interface.
InstanceTemplateOnHostMaintenance: scheduling.on_host_maintenance -- behaviour during host maintenance. MIGRATE (live migration) is the default for standard VMs; preemptible / SPOT / confidential VMs must use TERMINATE.
InstanceTemplatePerformanceMonitoringUnit: advanced_machine_features.performance_monitoring_unit -- PMU level exposed to the guest. ARCHITECTURAL is the minimum stable subset; ENHANCED exposes the broadest set of counters.
InstanceTemplateProvisioningModel: scheduling.provisioning_model -- VM provisioning model. STANDARD runs at on-demand prices with no termination guarantees from GCP; SPOT runs at preemptible prices and may be reclaimed at any time.
InstanceTemplateReservationAffinityType: reservation_affinity.type -- reservation consumption mode. Pair specificReservation with InstanceTemplateReservationAffinityType.specificReservation to target a named reservation; noReservation opts out.
InstanceTerminationAction: scheduling.instance_termination_action -- action when a SPOT VM is preempted or max_run_duration elapses.
IpAddressSelectionPolicy: ip_address_selection_policy. Controls IPv4-vs-IPv6 preference when the load balancer dials a backend (or when a proxyless gRPC client dials directly).
Ipv6EndpointType: IPv6 endpoint type. Used when GoogleComputeAddress.ipVersion is IpVersion.ipv6.
IpVersion: IP protocol version for the address.
LoadBalancingScheme: load_balancing_scheme. A backend service of one scheme cannot be repurposed for another — the value is effectively immutable except through the ExternalManagedMigrationState dance.
LocalityLbPolicy: locality_lb_policy. See the schema docstring for the matrix of which values are valid for which combination of protocol and load_balancing_scheme — Cloud Load Balancing silently coerces invalid values to the scheme's default at apply time.
ManagedSslCertificateType: Certificate provisioning mode. The schema for this resource accepts only MANAGED, and that value is the default — the enum exists for symmetry with the legacy unified google_compute_ssl_certificate resource (which historically distinguished MANAGED from SELF_MANAGED). For new code, omit type entirely.
NetworkEndpointGroupType: network_endpoint_type for google_compute_network_endpoint_group.
NetworkFirewallPolicyEnforcementOrder: Order in which a network firewall policy is enforced relative to classic firewall rules.
NetworkTier: Network service tier. PREMIUM uses Google's premium global backbone; STANDARD uses ISP-level routing (cheaper, regional).
NicType: network_interface.nic_type -- vNIC family used for the interface.
OnHostMaintenance: scheduling.on_host_maintenance -- behaviour during host maintenance. MIGRATE (live migration) is the default for standard VMs; preemptible / SPOT / confidential VMs must use TERMINATE.
PerformanceMonitoringUnit: advanced_machine_features.performance_monitoring_unit -- PMU level exposed to the guest. ARCHITECTURAL is the minimum stable subset; ENHANCED exposes the broadest set of counters.
ProvisioningModel: scheduling.provisioning_model -- VM provisioning model. STANDARD runs at on-demand prices with no termination guarantees from GCP; SPOT runs at preemptible prices and may be reclaimed at any time.
QuicOverride: QUIC negotiation policy for the HTTPS target proxy. When set to none (the default), Google manages whether QUIC is offered to clients; enable always offers QUIC; disable never offers it.
RegionAutoscalerCpuPredictiveMethod: Predictive autoscaling method for ComputeRegionAutoscalerRegionAutoscalerCpuUtilization.
RegionAutoscalerMetricType: Defines how a custom-metric value is interpreted by the autoscaler. Mirrors the API's utilizationTargetType enum.
RegionAutoscalerMode: Operating mode for the autoscaling policy. The schema declares this as a free-form string — the enum below pins the API-accepted set so callers cannot mis-spell it. Default is on when the field is omitted from the request.
RegionBackendServiceBalancingMode: Per-backend balancing mode. See ComputeRegionBackendServiceRegionBackendServiceBackend.balancingMode. Note: the regional resource omits the global IN_FLIGHT mode.
RegionBackendServiceCacheMode: cdn_policy.cache_mode. Enabling CDN (enable_cdn = true) without setting this defaults to CACHE_ALL_STATIC.
RegionBackendServiceConnectionPersistence: connection_tracking_policy.connection_persistence_on_unhealthy_backends. Whether existing connections persist on backends that have become unhealthy. Default DEFAULT_FOR_PROTOCOL.
RegionBackendServiceFastIpMove: ha_policy.fast_ip_move. Controls fast IP-move behavior for self-managed HA on Passthrough NLBs.
RegionBackendServiceIpAddressSelectionPolicy: ip_address_selection_policy. Controls IPv4-vs-IPv6 preference when the load balancer dials a backend (or when a proxyless gRPC client dials directly).
RegionBackendServiceLoadBalancingScheme: load_balancing_scheme. A backend service of one scheme cannot be repurposed for another — the value is effectively immutable.
RegionBackendServiceLocalityLbPolicy: locality_lb_policy. See the schema docstring for the matrix of which values are valid for which combination of protocol and load_balancing_scheme — Cloud Load Balancing silently coerces invalid values to the scheme's default at apply time. For External Passthrough NLBs only maglev and weightedMaglev are honored; for INTERNAL_MANAGED with HTTP-class protocols the full set is available.
RegionBackendServiceLogOptionalMode: log_config.optional_mode. Controls which optional access-log fields are exported when ComputeRegionBackendServiceRegionBackendServiceLogConfig.enable is true.
RegionBackendServiceProtocol: Wire protocol the regional backend service uses to talk to backends. HTTP2 and H2C require an HTTP(S)-class load balancer; TCP, SSL, and UDP are for Passthrough Network Load Balancing / regional internal proxy routing. GRPC is required when the URL map is bound to a regional target gRPC proxy.
RegionBackendServiceSessionAffinity: session_affinity. Applicable only when the locality LB policy is one of MAGLEV, WEIGHTED_MAGLEV, or RING_HASH for HTTP-class balancers; for Passthrough NLBs clientIp and the 5-tuple variants apply directly. The regional resource adds clientIpNoDestination (Passthrough NLB variant that ignores the destination tuple component) versus the global resource.
RegionBackendServiceTrackingMode: connection_tracking_policy.tracking_mode. Connection-tracking key: perConnection tracks 5-tuple (default); perSession tracks 3-tuple.
RegionBackendServiceZonalAffinitySpillover: network_pass_through_lb_traffic_policy.zonal_affinity.spillover. Zonal-affinity selector for Internal Passthrough NLBs.
RegionHealthCheckPortSpecification: port_specification value shared by every per-protocol config block.
RegionHealthCheckProxyHeader: proxy_header value used inside the per-protocol HTTP-shaped blocks (HTTP, HTTPS, HTTP2, TCP, SSL). Defaults to none on the GCP API.
RegionHealthCheckType: Health-check protocol on a regional health check. Computed on the resource (the GCP API derives it from which per-protocol config block was set), so callers don't set this directly — they pick the matching *HealthCheck block. Listed here for use in == comparisons against the derived type getter.
RegionInstanceGroupManagerDistributionPolicyTargetShape: distribution_policy_target_shape. Controls how strictly the MIG converges on an even spread across distributionPolicyZones during proactive or resize-triggered rebalancing.
RegionInstanceGroupManagerInstanceRedistributionType: update_policy.instance_redistribution_type (regional only). PROACTIVE (default) keeps zones balanced as VMs come and go; NONE disables proactive rebalancing.
RegionInstanceGroupManagerListManagedInstancesResults: list_managed_instances_results — pagination for the listManagedInstances API on this regional MIG.
RegionInstanceGroupManagerUpdatePolicyAction: update_policy.minimal_action / update_policy.most_disruptive_allowed_action. Shared enum — both fields accept the same value set.
RegionInstanceGroupManagerUpdatePolicyReplacementMethod: update_policy.replacement_method. SUBSTITUTE (default) replaces VMs with newly-named ones; RECREATE preserves instance names but requires max_unavailable_* > 0.
RegionInstanceGroupManagerUpdatePolicyType: update_policy.type. Controls whether the MIG actively performs the rolling update or waits for an external action (resize, recreate-instances) to apply it.
RegionNetworkEndpointGroupType: network_endpoint_type for google_compute_region_network_endpoint_group. Defaults to serverless on the API side.
RegionSecurityPolicyDdosProtection: ddos_protection_config.ddos_protection -- DDoS protection tier for network load balancing policies.
RegionSecurityPolicyJsonParsing: advanced_options_config.json_parsing -- JSON body parsing mode for preconfigured WAF evaluation. Regional policies also support GraphQL body parsing via standardWithGraphql.
RegionSecurityPolicyType
RegionSecurityPolicyUserDefinedFieldBase: user_defined_fields.base -- header anchor for a user-defined match field in CLOUD_ARMOR_NETWORK policies.
RegionSslPolicyMinTlsVersion
RegionSslPolicyProfile
RegionTargetTcpProxyProxyHeader
RegionUrlMapCacheMode: route_action.cache_policy.cache_mode and nested cache policy blocks.
RegionUrlMapMetadataFilterMatchCriteria: match_rules.metadata_filters.filter_match_criteria.
RegionUrlMapRedirectResponseCode: HTTP redirect response code emitted by a default_url_redirect / path_rule.url_redirect / route_rules.url_redirect block. The schema declares this as a free-form string -- the enum below pins the API-accepted set so callers cannot mis-spell it.
ReservationAffinityType: reservation_affinity.type -- reservation consumption mode. Pair specificReservation with a ReservationAffinityType.specificReservation value to target a named reservation; noReservation opts out.
RoutingMode: Routing mode for google_compute_network. Controls how routes are advertised between VPC subnets (regional) or all subnets (global).
ScratchDiskInterface: scratch_disk.interface -- attach bus for the local SSD. Defaults to NVME; SCSI is retained for legacy machine families.
SecurityPolicyJsonParsing: advanced_options_config.json_parsing -- whether Cloud Armor parses JSON request bodies during WAF evaluation. standard is required for the JSON-aware preconfigured WAF rules to inspect body content; otherwise default disabled keeps inspection limited to URI / headers / query string.
SecurityPolicyLogLevel: advanced_options_config.log_level -- verbosity of Cloud Armor's Cloud Logging output. verbose includes preconfigured-WAF rule match details and is the recommended setting during policy tuning; switch back to normal for steady-state to control log volume.
SecurityPolicyRuleAction: rule.action -- what Cloud Armor does when the ComputeSecurityPolicySecurityPolicyRule matches. The deny(NNN) actions return a fixed HTTP status to the client; rateBasedBan and throttle REQUIRE ComputeSecurityPolicySecurityPolicyRule.rateLimitOptions; redirect REQUIRES ComputeSecurityPolicySecurityPolicyRule.redirectOptions. The Terraform value preserves the literal provider strings (parentheses and digits included) -- the Dart variants pick identifier-safe names.
SecurityPolicyRuleMatchVersionedExpr: match.versioned_expr -- Cloud Armor's only built-in predicate today. Pair with ComputeSecurityPolicySecurityPolicyRuleMatchConfig.srcIpRanges to match by source IP / CIDR. For richer matching (geo, path, headers), use ComputeSecurityPolicySecurityPolicyRuleMatchExpr (CEL) instead.
SecurityPolicyRuleRateLimitEnforceOnKey: rate_limit_options.enforce_on_key / enforce_on_key_configs.enforce_on_key_type.
SecurityPolicyType: type -- intended use of the security policy. Forces replacement when changed. The default (when unset on create) is SecurityPolicyType.cloudArmor.
SecurityPolicyWafExclusionOperator: Operator for preconfigured WAF exclusion match clauses.
ServiceAttachmentConnectionPreference: Connection preference for google_compute_service_attachment.connection_preference.
SessionAffinity: session_affinity. Applicable only when the locality LB policy is one of MAGLEV, WEIGHTED_MAGLEV, or RING_HASH (otherwise the setting is silently ignored).
SslPolicyMinTlsVersion: min_tls_version — the protocol-version floor. TLS 1.3 is always offered by the load balancer and is not selectable as a minimum here; the API only exposes the 1.0 / 1.1 / 1.2 floors. To force TLS 1.3 only, pair tls12 with SslPolicyProfile.restricted, which drops the legacy 1.x suites from the negotiated set.
SslPolicyProfile: profile — the curated cipher-suite preset. See the class-level security guidance for picking between restricted (compliance default), modern (modern browsers only), compatible (permissive legacy default), fips202205 (FIPS 202205-pinned), and custom (caller-supplied via GoogleComputeSslPolicy.customFeatures).
SubnetworkIpv6AccessType: Access type of the IPv6 address range held by the subnetwork. Immutable after creation. Only meaningful when SubnetworkStackType includes IPv6.
SubnetworkLogConfigAggregationInterval: VPC flow log aggregation interval. The default on GCP is interval5Sec (denser sampling, higher cost).
SubnetworkLogConfigMetadata: VPC flow log metadata-inclusion mode. Pair customMetadata with the ComputeSubnetworkSubnetworkLogConfig.metadataFields selector.
SubnetworkPurpose: Purpose of the subnetwork. Defaults to private when unspecified.
SubnetworkResolveSubnetMask: ARP resolution mode for the subnetwork. Controls which ranges respond to ARP requests. Used only by reserved-internal-range subnetworks.
SubnetworkRole: Role of a managed-proxy subnetwork. Only meaningful when purpose is REGIONAL_MANAGED_PROXY or GLOBAL_MANAGED_PROXY.
SubnetworkStackType: IP stack type for the subnetwork. Immutable after creation.
TargetSslProxyProxyHeader
TargetTcpProxyProxyHeader
TlsEarlyData: TLS 1.3 0-RTT ("Early Data") acceptance policy. Early Data lets a TLS resumption handshake carry the initial application payload alongside the handshake itself, eliminating the extra round trip at the cost of replay risk.
UrlMapCacheMode: route_action.cache_policy.cache_mode and nested cache policy blocks.
UrlMapMetadataFilterMatchCriteria: match_rules.metadata_filters.filter_match_criteria.
UrlMapRedirectResponseCode: HTTP redirect response code emitted by a default_url_redirect / path_rule.url_redirect / route_rules.url_redirect block. The schema declares this as a free-form string -- the enum below pins the API-accepted set so callers cannot mis-spell it.

compute library

Classes

Enums

terradart_google package

compute library