- Resource: Instance
 - PrivateConfig
 - State
 - StateNote
 - HostConfig
 - WorkforceIdentityFederationConfig
 - Methods
 
Resource: Instance
A resource that represents a Secure Source Manager instance.
| JSON representation | 
|---|
{ "name": string, "createTime": string, "updateTime": string, "labels": { string: string, ... }, "privateConfig": { object (  | 
              
| Fields | |
|---|---|
name | 
                
                   
 Optional. A unique identifier for an instance. The name should be of the format:  
 
 
  | 
              
createTime | 
                
                   
 Output only. Create timestamp. Uses RFC 3339, where generated output will always be Z-normalized and use 0, 3, 6 or 9 fractional digits. Offsets other than "Z" are also accepted. Examples:   | 
              
updateTime | 
                
                   
 Output only. Update timestamp. Uses RFC 3339, where generated output will always be Z-normalized and use 0, 3, 6 or 9 fractional digits. Offsets other than "Z" are also accepted. Examples:   | 
              
labels | 
                
                   
 Optional. Labels as key value pairs. An object containing a list of   | 
              
privateConfig | 
                
                   
 Optional. Private settings for private instance.  | 
              
state | 
                
                   
 Output only. Current state of the instance.  | 
              
stateNote | 
                
                   
 Output only. An optional field providing information about the current instance state.  | 
              
kmsKey | 
                
                   
 Optional. Immutable. Customer-managed encryption key name, in the format projects/*/locations/*/keyRings/*/cryptoKeys/*.  | 
              
hostConfig | 
                
                   
 Output only. A list of hostnames for this instance.  | 
              
workforceIdentityFederationConfig | 
                
                   
 Optional. Configuration for Workforce Identity Federation to support third party identity provider. If unset, defaults to the Google OIDC IdP.  | 
              
PrivateConfig
PrivateConfig includes settings for private instance.
| JSON representation | 
|---|
{ "isPrivate": boolean, "caPool": string, "httpServiceAttachment": string, "sshServiceAttachment": string, "pscAllowedProjects": [ string ] }  | 
              
| Fields | |
|---|---|
isPrivate | 
                
                   
 Required. Immutable. Indicate if it's private instance.  | 
              
caPool | 
                
                   
 Optional. Immutable. CA pool resource, resource must in the format of   | 
              
httpServiceAttachment | 
                
                   
 Output only. Service Attachment for HTTP, resource is in the format of   | 
              
sshServiceAttachment | 
                
                   
 Output only. Service Attachment for SSH, resource is in the format of   | 
              
pscAllowedProjects[] | 
                
                   
 Optional. Additional allowed projects for setting up PSC connections. Instance host project is automatically allowed and does not need to be included in this list.  | 
              
State
Secure Source Manager instance state.
| Enums | |
|---|---|
STATE_UNSPECIFIED | 
                Not set. This should only be the case for incoming requests. | 
CREATING | 
                Instance is being created. | 
ACTIVE | 
                Instance is ready. | 
DELETING | 
                Instance is being deleted. | 
PAUSED | 
                Instance is paused. | 
UNKNOWN | 
                Instance is unknown, we are not sure if it's functioning. | 
StateNote
Provides information about the current instance state.
| Enums | |
|---|---|
STATE_NOTE_UNSPECIFIED | 
                STATE_NOTE_UNSPECIFIED as the first value of State. | 
PAUSED_CMEK_UNAVAILABLE | 
                CMEK access is unavailable. | 
INSTANCE_RESUMING | 
                INSTANCE_RESUMING indicates that the instance was previously paused and is under the process of being brought back.  | 
              
HostConfig
HostConfig has different instance endpoints.
| JSON representation | 
|---|
{ "html": string, "api": string, "gitHttp": string, "gitSsh": string }  | 
              
| Fields | |
|---|---|
html | 
                
                   
 Output only. HTML hostname.  | 
              
api | 
                
                   
 Output only. API hostname.  | 
              
gitHttp | 
                
                   
 Output only. Git HTTP hostname.  | 
              
gitSsh | 
                
                   
 Output only. Git SSH hostname.  | 
              
WorkforceIdentityFederationConfig
WorkforceIdentityFederationConfig allows this instance to support users from external identity providers.
| JSON representation | 
|---|
{ "enabled": boolean }  | 
              
| Fields | |
|---|---|
enabled | 
                
                   
 Optional. Immutable. Whether Workforce Identity Federation is enabled.  | 
              
Methods | 
            |
|---|---|
                
 | 
              Creates a new instance in a given project and location. | 
                
 | 
              Deletes a single instance. | 
                
 | 
              Gets details of a single instance. | 
                
 | 
              Gets the access control policy for a resource. | 
                
 | 
              Lists Instances in a given project and location. | 
                
 | 
              Sets the access control policy on the specified resource. | 
                
 | 
              Returns permissions that a caller has on the specified resource. |