1. Docs
  2. Reference
  3. API
  4. @pulumi/gcp
  5. dns

Module dns

This page documents the language specification for the gcp package. If you're looking for help working with the inputs, outputs, or functions of gcp resources in a Pulumi program, please see the resource documentation for examples and API reference.

Resources

Functions

Others

Resources

Resource ManagedZone

class ManagedZone extends CustomResource

A zone is a subtree of the DNS namespace under one administrative responsibility. A ManagedZone is a resource that represents a DNS zone hosted by the Cloud DNS service.

To get more information about ManagedZone, see:

Example Usage - Dns Managed Zone Basic

import * as pulumi from "@pulumi/pulumi";
import * as gcp from "@pulumi/gcp";

const exampleZone = new gcp.dns.ManagedZone("example-zone", {
    description: "Example DNS zone",
    dnsName: "my-domain.com.",
    labels: {
        foo: "bar",
    },
});

Example Usage - Dns Managed Zone Private

import * as pulumi from "@pulumi/pulumi";
import * as gcp from "@pulumi/gcp";

const network1 = new gcp.compute.Network("network-1", {autoCreateSubnetworks: false});
const network2 = new gcp.compute.Network("network-2", {autoCreateSubnetworks: false});
const privateZone = new gcp.dns.ManagedZone("private-zone", {
    dnsName: "private.example.com.",
    description: "Example private DNS zone",
    labels: {
        foo: "bar",
    },
    visibility: "private",
    private_visibility_config: {
        networks: [
            {
                networkUrl: network_1.selfLink,
            },
            {
                networkUrl: network_2.selfLink,
            },
        ],
    },
});

Example Usage - Dns Managed Zone Private Forwarding

import * as pulumi from "@pulumi/pulumi";
import * as gcp from "@pulumi/gcp";

const network1 = new gcp.compute.Network("network-1", {autoCreateSubnetworks: false});
const network2 = new gcp.compute.Network("network-2", {autoCreateSubnetworks: false});
const privateZone = new gcp.dns.ManagedZone("private-zone", {
    dnsName: "private.example.com.",
    description: "Example private DNS zone",
    labels: {
        foo: "bar",
    },
    visibility: "private",
    private_visibility_config: {
        networks: [
            {
                networkUrl: network_1.selfLink,
            },
            {
                networkUrl: network_2.selfLink,
            },
        ],
    },
    forwarding_config: {
        target_name_servers: [
            {
                ipv4Address: "172.16.1.10",
            },
            {
                ipv4Address: "172.16.1.20",
            },
        ],
    },
});

Example Usage - Dns Managed Zone Private Peering

import * as pulumi from "@pulumi/pulumi";
import * as gcp from "@pulumi/gcp";

const networkSource = new gcp.compute.Network("network-source", {autoCreateSubnetworks: false});
const networkTarget = new gcp.compute.Network("network-target", {autoCreateSubnetworks: false});
const peeringZone = new gcp.dns.ManagedZone("peering-zone", {
    dnsName: "peering.example.com.",
    description: "Example private DNS peering zone",
    visibility: "private",
    private_visibility_config: {
        networks: [{
            networkUrl: network_source.selfLink,
        }],
    },
    peering_config: {
        target_network: {
            networkUrl: network_target.selfLink,
        },
    },
});

Example Usage - Dns Managed Zone Service Directory

import * as pulumi from "@pulumi/pulumi";
import * as gcp from "@pulumi/gcp";

const example = new gcp.servicedirectory.Namespace("example", {
    namespaceId: "example",
    location: "us-central1",
});
const sdZone = new gcp.dns.ManagedZone("sd-zone", {
    dnsName: "services.example.com.",
    description: "Example private DNS Service Directory zone",
    visibility: "private",
    service_directory_config: {
        namespace: {
            namespaceUrl: example.id,
        },
    },
});
const network = new gcp.compute.Network("network", {autoCreateSubnetworks: false});

constructor

new ManagedZone(name: string, args: ManagedZoneArgs, opts?: pulumi.CustomResourceOptions)

Create a ManagedZone resource with the given unique name, arguments, and options.

  • name The unique name of the resource.
  • args The arguments to use to populate this resource's properties.
  • opts A bag of options that control this resource's behavior.

method get

public static get(name: string, id: pulumi.Input<pulumi.ID>, state?: ManagedZoneState, opts?: pulumi.CustomResourceOptions): ManagedZone

Get an existing ManagedZone resource’s state with the given name, ID, and optional extra properties used to qualify the lookup.

method getProvider

getProvider(moduleMember: string): ProviderResource | undefined

method isInstance

public static isInstance(obj: any): obj is ManagedZone

Returns true if the given object is an instance of ManagedZone. This is designed to work even when multiple copies of the Pulumi SDK have been loaded into the same process.

property description

public description: pulumi.Output<string>;

A textual description field. Defaults to ‘Managed by Pulumi’.

property dnsName

public dnsName: pulumi.Output<string>;

The DNS name of this managed zone, for instance “example.com.”.

property dnssecConfig

public dnssecConfig: pulumi.Output<ManagedZoneDnssecConfig | undefined>;

DNSSEC configuration Structure is documented below.

property forwardingConfig

public forwardingConfig: pulumi.Output<ManagedZoneForwardingConfig | undefined>;

The presence for this field indicates that outbound forwarding is enabled for this zone. The value of this field contains the set of destinations to forward to. Structure is documented below.

property id

id: Output<ID>;

id is the provider-assigned unique ID for this managed resource. It is set during deployments and may be missing (undefined) during planning phases.

property labels

public labels: pulumi.Output<{[key: string]: string} | undefined>;

A set of key/value label pairs to assign to this ManagedZone.

property name

public name: pulumi.Output<string>;

User assigned name for this resource. Must be unique within the project.

property nameServers

public nameServers: pulumi.Output<string[]>;

Delegate your managed_zone to these virtual name servers; defined by the server

property peeringConfig

public peeringConfig: pulumi.Output<ManagedZonePeeringConfig | undefined>;

The presence of this field indicates that DNS Peering is enabled for this zone. The value of this field contains the network to peer with. Structure is documented below.

property privateVisibilityConfig

public privateVisibilityConfig: pulumi.Output<ManagedZonePrivateVisibilityConfig | undefined>;

For privately visible zones, the set of Virtual Private Cloud resources that the zone is visible from. Structure is documented below.

property project

public project: pulumi.Output<string>;

The ID of the project in which the resource belongs. If it is not provided, the provider project is used.

property reverseLookup

public reverseLookup: pulumi.Output<boolean | undefined>;

Specifies if this is a managed reverse lookup zone. If true, Cloud DNS will resolve reverse lookup queries using automatically configured records for VPC resources. This only applies to networks listed under privateVisibilityConfig.

property serviceDirectoryConfig

public serviceDirectoryConfig: pulumi.Output<ManagedZoneServiceDirectoryConfig | undefined>;

The presence of this field indicates that this zone is backed by Service Directory. The value of this field contains information related to the namespace associated with the zone. Structure is documented below.

property urn

urn: Output<URN>;

urn is the stable logical URN used to distinctly address a resource, both before and after deployments.

property visibility

public visibility: pulumi.Output<string | undefined>;

The zone’s visibility: public zones are exposed to the Internet, while private zones are visible only to Virtual Private Cloud resources.

Resource Policy

class Policy extends CustomResource

A policy is a collection of DNS rules applied to one or more Virtual Private Cloud resources.

To get more information about Policy, see:

Example Usage - Dns Policy Basic

import * as pulumi from "@pulumi/pulumi";
import * as gcp from "@pulumi/gcp";

const network1 = new gcp.compute.Network("network-1", {autoCreateSubnetworks: false});
const network2 = new gcp.compute.Network("network-2", {autoCreateSubnetworks: false});
const examplePolicy = new gcp.dns.Policy("example-policy", {
    enableInboundForwarding: true,
    enableLogging: true,
    alternative_name_server_config: {
        target_name_servers: [
            {
                ipv4Address: "172.16.1.10",
            },
            {
                ipv4Address: "172.16.1.20",
            },
        ],
    },
    networks: [
        {
            networkUrl: network_1.selfLink,
        },
        {
            networkUrl: network_2.selfLink,
        },
    ],
});

constructor

new Policy(name: string, args?: PolicyArgs, opts?: pulumi.CustomResourceOptions)

Create a Policy resource with the given unique name, arguments, and options.

  • name The unique name of the resource.
  • args The arguments to use to populate this resource's properties.
  • opts A bag of options that control this resource's behavior.

method get

public static get(name: string, id: pulumi.Input<pulumi.ID>, state?: PolicyState, opts?: pulumi.CustomResourceOptions): Policy

Get an existing Policy resource’s state with the given name, ID, and optional extra properties used to qualify the lookup.

method getProvider

getProvider(moduleMember: string): ProviderResource | undefined

method isInstance

public static isInstance(obj: any): obj is Policy

Returns true if the given object is an instance of Policy. This is designed to work even when multiple copies of the Pulumi SDK have been loaded into the same process.

property alternativeNameServerConfig

public alternativeNameServerConfig: pulumi.Output<PolicyAlternativeNameServerConfig | undefined>;

Sets an alternative name server for the associated networks. When specified, all DNS queries are forwarded to a name server that you choose. Names such as .internal are not available when an alternative name server is specified. Structure is documented below.

property description

public description: pulumi.Output<string | undefined>;

A textual description field. Defaults to ‘Managed by Pulumi’.

property enableInboundForwarding

public enableInboundForwarding: pulumi.Output<boolean | undefined>;

Allows networks bound to this policy to receive DNS queries sent by VMs or applications over VPN connections. When enabled, a virtual IP address will be allocated from each of the sub-networks that are bound to this policy.

property enableLogging

public enableLogging: pulumi.Output<boolean | undefined>;

Controls whether logging is enabled for the networks bound to this policy. Defaults to no logging if not set.

property id

id: Output<ID>;

id is the provider-assigned unique ID for this managed resource. It is set during deployments and may be missing (undefined) during planning phases.

property name

public name: pulumi.Output<string>;

User assigned name for this policy.

property networks

public networks: pulumi.Output<PolicyNetwork[] | undefined>;

List of network names specifying networks to which this policy is applied. Structure is documented below.

property project

public project: pulumi.Output<string>;

The ID of the project in which the resource belongs. If it is not provided, the provider project is used.

property urn

urn: Output<URN>;

urn is the stable logical URN used to distinctly address a resource, both before and after deployments.

Resource RecordSet

class RecordSet extends CustomResource

Manages a set of DNS records within Google Cloud DNS. For more information see the official documentation and API.

Note: The provider treats this resource as an authoritative record set. This means existing records (including the default records) for the given type will be overwritten when you create this resource in the provider. In addition, the Google Cloud DNS API requires NS records to be present at all times, so the provider will not actually remove NS records during destroy but will report that it did.

Example Usage

Binding a DNS name to the ephemeral IP of a new instance:
import * as pulumi from "@pulumi/pulumi";
import * as gcp from "@pulumi/gcp";

const frontendInstance = new gcp.compute.Instance("frontendInstance", {
    machineType: "g1-small",
    zone: "us-central1-b",
    boot_disk: {
        initialize_params: {
            image: "debian-cloud/debian-9",
        },
    },
    network_interface: [{
        network: "default",
        access_config: [{}],
    }],
});
const prod = new gcp.dns.ManagedZone("prod", {dnsName: "prod.mydomain.com."});
const frontendRecordSet = new gcp.dns.RecordSet("frontendRecordSet", {
    type: "A",
    ttl: 300,
    managedZone: prod.name,
    rrdatas: [frontendInstance.networkInterfaces.apply(networkInterfaces => networkInterfaces[0].accessConfigs?[0]?.natIp)],
});
Adding an A record
import * as pulumi from "@pulumi/pulumi";
import * as gcp from "@pulumi/gcp";

const prod = new gcp.dns.ManagedZone("prod", {dnsName: "prod.mydomain.com."});
const recordSet = new gcp.dns.RecordSet("recordSet", {
    managedZone: prod.name,
    type: "A",
    ttl: 300,
    rrdatas: ["8.8.8.8"],
});
Adding an MX record
import * as pulumi from "@pulumi/pulumi";
import * as gcp from "@pulumi/gcp";

const prod = new gcp.dns.ManagedZone("prod", {dnsName: "prod.mydomain.com."});
const mx = new gcp.dns.RecordSet("mx", {
    managedZone: prod.name,
    type: "MX",
    ttl: 3600,
    rrdatas: [
        "1 aspmx.l.google.com.",
        "5 alt1.aspmx.l.google.com.",
        "5 alt2.aspmx.l.google.com.",
        "10 alt3.aspmx.l.google.com.",
        "10 alt4.aspmx.l.google.com.",
    ],
});
Adding an SPF record
import * as pulumi from "@pulumi/pulumi";
import * as gcp from "@pulumi/gcp";

const prod = new gcp.dns.ManagedZone("prod", {dnsName: "prod.mydomain.com."});
const spf = new gcp.dns.RecordSet("spf", {
    managedZone: prod.name,
    type: "TXT",
    ttl: 300,
    rrdatas: ["\"v=spf1 ip4:111.111.111.111 include:backoff.email-example.com -all\""],
});
Adding a CNAME record
import * as pulumi from "@pulumi/pulumi";
import * as gcp from "@pulumi/gcp";

const prod = new gcp.dns.ManagedZone("prod", {dnsName: "prod.mydomain.com."});
const cname = new gcp.dns.RecordSet("cname", {
    managedZone: prod.name,
    type: "CNAME",
    ttl: 300,
    rrdatas: ["frontend.mydomain.com."],
});

constructor

new RecordSet(name: string, args: RecordSetArgs, opts?: pulumi.CustomResourceOptions)

Create a RecordSet resource with the given unique name, arguments, and options.

  • name The unique name of the resource.
  • args The arguments to use to populate this resource's properties.
  • opts A bag of options that control this resource's behavior.

method get

public static get(name: string, id: pulumi.Input<pulumi.ID>, state?: RecordSetState, opts?: pulumi.CustomResourceOptions): RecordSet

Get an existing RecordSet resource’s state with the given name, ID, and optional extra properties used to qualify the lookup.

method getProvider

getProvider(moduleMember: string): ProviderResource | undefined

method isInstance

public static isInstance(obj: any): obj is RecordSet

Returns true if the given object is an instance of RecordSet. This is designed to work even when multiple copies of the Pulumi SDK have been loaded into the same process.

property id

id: Output<ID>;

id is the provider-assigned unique ID for this managed resource. It is set during deployments and may be missing (undefined) during planning phases.

property managedZone

public managedZone: pulumi.Output<string>;

The name of the zone in which this record set will reside.

property name

public name: pulumi.Output<string>;

The DNS name this record set will apply to.

property project

public project: pulumi.Output<string>;

The ID of the project in which the resource belongs. If it is not provided, the provider project is used.

property rrdatas

public rrdatas: pulumi.Output<string[]>;

The string data for the records in this record set whose meaning depends on the DNS type. For TXT record, if the string data contains spaces, add surrounding \" if you don’t want your string to get split on spaces. To specify a single record value longer than 255 characters such as a TXT record for DKIM, add \"\" inside the provider configuration string (e.g. "first255characters\"\"morecharacters").

property ttl

public ttl: pulumi.Output<number>;

The time-to-live of this record set (seconds).

property type

public type: pulumi.Output<string>;

The DNS record set type.

property urn

urn: Output<URN>;

urn is the stable logical URN used to distinctly address a resource, both before and after deployments.

Functions

Function getKeys

getKeys(args: GetKeysArgs, opts?: pulumi.InvokeOptions): Promise<GetKeysResult>

Get the DNSKEY and DS records of DNSSEC-signed managed zones. For more information see the official documentation and API.

Example Usage

import * as pulumi from "@pulumi/pulumi";
import * as gcp from "@pulumi/gcp";

const foo = new gcp.dns.ManagedZone("foo", {
    dnsName: "foo.bar.",
    dnssec_config: {
        state: "on",
        nonExistence: "nsec3",
    },
});
const fooDnsKeys = foo.id.apply(id => gcp.dns.getKeys({
    managedZone: id,
}));
export const fooDnsDsRecord = fooDnsKeys.keySigningKeys[0].dsRecord;

Function getManagedZone

getManagedZone(args: GetManagedZoneArgs, opts?: pulumi.InvokeOptions): Promise<GetManagedZoneResult>

Provides access to a zone’s attributes within Google Cloud DNS. For more information see the official documentation and API.

import * as pulumi from "@pulumi/pulumi";
import * as gcp from "@pulumi/gcp";

const envDnsZone = gcp.dns.getManagedZone({
    name: "qa-zone",
});
const dns = new gcp.dns.RecordSet("dns", {
    type: "TXT",
    ttl: 300,
    managedZone: envDnsZone.then(envDnsZone => envDnsZone.name),
    rrdatas: ["test"],
});

Others

interface GetKeysArgs

interface GetKeysArgs

A collection of arguments for invoking getKeys.

property managedZone

managedZone: string;

The name or id of the Cloud DNS managed zone.

property project

project?: undefined | string;

The ID of the project in which the resource belongs. If project is not provided, the provider project is used.

interface GetKeysResult

interface GetKeysResult

A collection of values returned by getKeys.

property id

id: string;

The provider-assigned unique ID for this managed resource.

property keySigningKeys

keySigningKeys: GetKeysKeySigningKey[];

A list of Key-signing key (KSK) records. Structure is documented below. Additionally, the DS record is provided:

property managedZone

managedZone: string;

property project

project: string;

property zoneSigningKeys

zoneSigningKeys: GetKeysZoneSigningKey[];

A list of Zone-signing key (ZSK) records. Structure is documented below.

interface GetManagedZoneArgs

interface GetManagedZoneArgs

A collection of arguments for invoking getManagedZone.

property name

name: string;

A unique name for the resource.

property project

project?: undefined | string;

The ID of the project for the Google Cloud DNS zone.

interface GetManagedZoneResult

interface GetManagedZoneResult

A collection of values returned by getManagedZone.

property description

description: string;

A textual description field.

property dnsName

dnsName: string;

The fully qualified DNS name of this zone, e.g. example.io..

property id

id: string;

The provider-assigned unique ID for this managed resource.

property name

name: string;

property nameServers

nameServers: string[];

The list of nameservers that will be authoritative for this domain. Use NS records to redirect from your DNS provider to these names, thus making Google Cloud DNS authoritative for this zone.

property project

project?: undefined | string;

property visibility

visibility: string;

The zone’s visibility: public zones are exposed to the Internet, while private zones are visible only to Virtual Private Cloud resources.

interface ManagedZoneArgs

interface ManagedZoneArgs

The set of arguments for constructing a ManagedZone resource.

property description

description?: pulumi.Input<string>;

A textual description field. Defaults to ‘Managed by Pulumi’.

property dnsName

dnsName: pulumi.Input<string>;

The DNS name of this managed zone, for instance “example.com.”.

property dnssecConfig

dnssecConfig?: pulumi.Input<ManagedZoneDnssecConfig>;

DNSSEC configuration Structure is documented below.

property forwardingConfig

forwardingConfig?: pulumi.Input<ManagedZoneForwardingConfig>;

The presence for this field indicates that outbound forwarding is enabled for this zone. The value of this field contains the set of destinations to forward to. Structure is documented below.

property labels

labels?: pulumi.Input<{[key: string]: pulumi.Input<string>}>;

A set of key/value label pairs to assign to this ManagedZone.

property name

name?: pulumi.Input<string>;

User assigned name for this resource. Must be unique within the project.

property peeringConfig

peeringConfig?: pulumi.Input<ManagedZonePeeringConfig>;

The presence of this field indicates that DNS Peering is enabled for this zone. The value of this field contains the network to peer with. Structure is documented below.

property privateVisibilityConfig

privateVisibilityConfig?: pulumi.Input<ManagedZonePrivateVisibilityConfig>;

For privately visible zones, the set of Virtual Private Cloud resources that the zone is visible from. Structure is documented below.

property project

project?: pulumi.Input<string>;

The ID of the project in which the resource belongs. If it is not provided, the provider project is used.

property reverseLookup

reverseLookup?: pulumi.Input<boolean>;

Specifies if this is a managed reverse lookup zone. If true, Cloud DNS will resolve reverse lookup queries using automatically configured records for VPC resources. This only applies to networks listed under privateVisibilityConfig.

property serviceDirectoryConfig

serviceDirectoryConfig?: pulumi.Input<ManagedZoneServiceDirectoryConfig>;

The presence of this field indicates that this zone is backed by Service Directory. The value of this field contains information related to the namespace associated with the zone. Structure is documented below.

property visibility

visibility?: pulumi.Input<string>;

The zone’s visibility: public zones are exposed to the Internet, while private zones are visible only to Virtual Private Cloud resources.

interface ManagedZoneState

interface ManagedZoneState

Input properties used for looking up and filtering ManagedZone resources.

property description

description?: pulumi.Input<string>;

A textual description field. Defaults to ‘Managed by Pulumi’.

property dnsName

dnsName?: pulumi.Input<string>;

The DNS name of this managed zone, for instance “example.com.”.

property dnssecConfig

dnssecConfig?: pulumi.Input<ManagedZoneDnssecConfig>;

DNSSEC configuration Structure is documented below.

property forwardingConfig

forwardingConfig?: pulumi.Input<ManagedZoneForwardingConfig>;

The presence for this field indicates that outbound forwarding is enabled for this zone. The value of this field contains the set of destinations to forward to. Structure is documented below.

property labels

labels?: pulumi.Input<{[key: string]: pulumi.Input<string>}>;

A set of key/value label pairs to assign to this ManagedZone.

property name

name?: pulumi.Input<string>;

User assigned name for this resource. Must be unique within the project.

property nameServers

nameServers?: pulumi.Input<pulumi.Input<string>[]>;

Delegate your managed_zone to these virtual name servers; defined by the server

property peeringConfig

peeringConfig?: pulumi.Input<ManagedZonePeeringConfig>;

The presence of this field indicates that DNS Peering is enabled for this zone. The value of this field contains the network to peer with. Structure is documented below.

property privateVisibilityConfig

privateVisibilityConfig?: pulumi.Input<ManagedZonePrivateVisibilityConfig>;

For privately visible zones, the set of Virtual Private Cloud resources that the zone is visible from. Structure is documented below.

property project

project?: pulumi.Input<string>;

The ID of the project in which the resource belongs. If it is not provided, the provider project is used.

property reverseLookup

reverseLookup?: pulumi.Input<boolean>;

Specifies if this is a managed reverse lookup zone. If true, Cloud DNS will resolve reverse lookup queries using automatically configured records for VPC resources. This only applies to networks listed under privateVisibilityConfig.

property serviceDirectoryConfig

serviceDirectoryConfig?: pulumi.Input<ManagedZoneServiceDirectoryConfig>;

The presence of this field indicates that this zone is backed by Service Directory. The value of this field contains information related to the namespace associated with the zone. Structure is documented below.

property visibility

visibility?: pulumi.Input<string>;

The zone’s visibility: public zones are exposed to the Internet, while private zones are visible only to Virtual Private Cloud resources.

interface PolicyArgs

interface PolicyArgs

The set of arguments for constructing a Policy resource.

property alternativeNameServerConfig

alternativeNameServerConfig?: pulumi.Input<PolicyAlternativeNameServerConfig>;

Sets an alternative name server for the associated networks. When specified, all DNS queries are forwarded to a name server that you choose. Names such as .internal are not available when an alternative name server is specified. Structure is documented below.

property description

description?: pulumi.Input<string>;

A textual description field. Defaults to ‘Managed by Pulumi’.

property enableInboundForwarding

enableInboundForwarding?: pulumi.Input<boolean>;

Allows networks bound to this policy to receive DNS queries sent by VMs or applications over VPN connections. When enabled, a virtual IP address will be allocated from each of the sub-networks that are bound to this policy.

property enableLogging

enableLogging?: pulumi.Input<boolean>;

Controls whether logging is enabled for the networks bound to this policy. Defaults to no logging if not set.

property name

name?: pulumi.Input<string>;

User assigned name for this policy.

property networks

networks?: pulumi.Input<pulumi.Input<PolicyNetwork>[]>;

List of network names specifying networks to which this policy is applied. Structure is documented below.

property project

project?: pulumi.Input<string>;

The ID of the project in which the resource belongs. If it is not provided, the provider project is used.

interface PolicyState

interface PolicyState

Input properties used for looking up and filtering Policy resources.

property alternativeNameServerConfig

alternativeNameServerConfig?: pulumi.Input<PolicyAlternativeNameServerConfig>;

Sets an alternative name server for the associated networks. When specified, all DNS queries are forwarded to a name server that you choose. Names such as .internal are not available when an alternative name server is specified. Structure is documented below.

property description

description?: pulumi.Input<string>;

A textual description field. Defaults to ‘Managed by Pulumi’.

property enableInboundForwarding

enableInboundForwarding?: pulumi.Input<boolean>;

Allows networks bound to this policy to receive DNS queries sent by VMs or applications over VPN connections. When enabled, a virtual IP address will be allocated from each of the sub-networks that are bound to this policy.

property enableLogging

enableLogging?: pulumi.Input<boolean>;

Controls whether logging is enabled for the networks bound to this policy. Defaults to no logging if not set.

property name

name?: pulumi.Input<string>;

User assigned name for this policy.

property networks

networks?: pulumi.Input<pulumi.Input<PolicyNetwork>[]>;

List of network names specifying networks to which this policy is applied. Structure is documented below.

property project

project?: pulumi.Input<string>;

The ID of the project in which the resource belongs. If it is not provided, the provider project is used.

interface RecordSetArgs

interface RecordSetArgs

The set of arguments for constructing a RecordSet resource.

property managedZone

managedZone: pulumi.Input<string>;

The name of the zone in which this record set will reside.

property name

name?: pulumi.Input<string>;

The DNS name this record set will apply to.

property project

project?: pulumi.Input<string>;

The ID of the project in which the resource belongs. If it is not provided, the provider project is used.

property rrdatas

rrdatas: pulumi.Input<pulumi.Input<string>[]>;

The string data for the records in this record set whose meaning depends on the DNS type. For TXT record, if the string data contains spaces, add surrounding \" if you don’t want your string to get split on spaces. To specify a single record value longer than 255 characters such as a TXT record for DKIM, add \"\" inside the provider configuration string (e.g. "first255characters\"\"morecharacters").

property ttl

ttl: pulumi.Input<number>;

The time-to-live of this record set (seconds).

property type

type: pulumi.Input<string>;

The DNS record set type.

interface RecordSetState

interface RecordSetState

Input properties used for looking up and filtering RecordSet resources.

property managedZone

managedZone?: pulumi.Input<string>;

The name of the zone in which this record set will reside.

property name

name?: pulumi.Input<string>;

The DNS name this record set will apply to.

property project

project?: pulumi.Input<string>;

The ID of the project in which the resource belongs. If it is not provided, the provider project is used.

property rrdatas

rrdatas?: pulumi.Input<pulumi.Input<string>[]>;

The string data for the records in this record set whose meaning depends on the DNS type. For TXT record, if the string data contains spaces, add surrounding \" if you don’t want your string to get split on spaces. To specify a single record value longer than 255 characters such as a TXT record for DKIM, add \"\" inside the provider configuration string (e.g. "first255characters\"\"morecharacters").

property ttl

ttl?: pulumi.Input<number>;

The time-to-live of this record set (seconds).

property type

type?: pulumi.Input<string>;

The DNS record set type.