gcp_securesourcemanager_instance

ancestors

Type: UNORDERED_LIST_STRING

create_time

Type: TIMESTAMP
Provider name: createTime
Description: Output only. Create timestamp.

host_config

Type: STRUCT
Provider name: hostConfig
Description: Output only. A list of hostnames for this instance.

• api
  Type: STRING
  Provider name: api
  Description: Output only. API hostname.
  
• git_http
  Type: STRING
  Provider name: gitHttp
  Description: Output only. Git HTTP hostname.
  
• git_ssh
  Type: STRING
  Provider name: gitSsh
  Description: Output only. Git SSH hostname.
  
• html
  Type: STRING
  Provider name: html
  Description: Output only. HTML hostname.
  

kms_key

Type: STRING
Provider name: kmsKey
Description: Optional. Immutable. Customer-managed encryption key name, in the format projects//locations//keyRings//cryptoKeys/.

labels

Type: UNORDERED_LIST_STRING

name

Type: STRING
Provider name: name
Description: Optional. A unique identifier for an instance. The name should be of the format: projects/{project_number}/locations/{location_id}/instances/{instance_id} project_number: Maps to a unique int64 id assigned to each project. location_id: Refers to the region where the instance will be deployed. Since Secure Source Manager is a regional service, it must be one of the valid GCP regions. instance_id: User provided name for the instance, must be unique for a project_number and location_id combination.

organization_id

Type: STRING

parent

Type: STRING

private_config

Type: STRUCT
Provider name: privateConfig
Description: Optional. Private settings for private instance.

• ca_pool
  Type: STRING
  Provider name: caPool
  Description: Optional. Immutable. CA pool resource, resource must in the format of projects/{project}/locations/{location}/caPools/{ca_pool}.
  
• http_service_attachment
  Type: STRING
  Provider name: httpServiceAttachment
  Description: Output only. Service Attachment for HTTP, resource is in the format of projects/{project}/regions/{region}/serviceAttachments/{service_attachment}.
  
• is_private
  Type: BOOLEAN
  Provider name: isPrivate
  Description: Required. Immutable. Indicate if it’s private instance.
  
• psc_allowed_projects
  Type: UNORDERED_LIST_STRING
  Provider name: pscAllowedProjects
  Description: Optional. Additional allowed projects for setting up PSC connections. Instance host project is automatically allowed and does not need to be included in this list.
  
• ssh_service_attachment
  Type: STRING
  Provider name: sshServiceAttachment
  Description: Output only. Service Attachment for SSH, resource is in the format of projects/{project}/regions/{region}/serviceAttachments/{service_attachment}.
  

project_id

Type: STRING

project_number

Type: STRING

resource_name

Type: STRING

state

Type: STRING
Provider name: state
Description: Output only. Current state of the instance.
Possible values:

• STATE_UNSPECIFIED - Not set. This should only be the case for incoming requests.
  
• CREATING - Instance is being created.
  
• ACTIVE - Instance is ready.
  
• DELETING - Instance is being deleted.
  
• PAUSED - Instance is paused.
  
• UNKNOWN - Instance is unknown, we are not sure if it’s functioning.
  

state_note

Type: STRING
Provider name: stateNote
Description: Output only. An optional field providing information about the current instance state.
Possible values:

• STATE_NOTE_UNSPECIFIED - STATE_NOTE_UNSPECIFIED as the first value of State.
  
• PAUSED_CMEK_UNAVAILABLE - CMEK access is unavailable.
  
• INSTANCE_RESUMING - INSTANCE_RESUMING indicates that the instance was previously paused and is under the process of being brought back.
  

tags

Type: UNORDERED_LIST_STRING

update_time

Type: TIMESTAMP
Provider name: updateTime
Description: Output only. Update timestamp.

workforce_identity_federation_config

Type: STRUCT
Provider name: workforceIdentityFederationConfig
Description: Optional. Configuration for Workforce Identity Federation to support third party identity provider. If unset, defaults to the Google OIDC IdP.

• enabled
  Type: BOOLEAN
  Provider name: enabled
  Description: Optional. Immutable. Whether Workforce Identity Federation is enabled.