GCP Component

Java examples use the published
com.pulumi:netskope-publisher
SDK. Rust examples use the published
pulumi-netskope-publisher
crate plus Pulumi Gestalt.

GcpPublisher creates one Compute Engine instance per publisher name.

Inputs

Required:

  • project
  • zone
  • network
  • subnetwork
  • image
  • tenantUrl and bearerToken, unless registrations is provided

Use a stock Ubuntu image for bootstrap mode:

1
projects/ubuntu-os-cloud/global/images/family/ubuntu-2204-lts

Common optional inputs include machineType, assignPublicIp,
networkTags, serviceAccount, bootstrap, bootstrapUrl, nonat,
installUser, installUserPassword, installUserPasswordIsHash,
installUserSshAuthorizedKeys, deleteDefaultUser,
guestNetworkInterface, tags, namePrefix, names, and replicas.

GCP has no public Netskope Publisher image, so the component normally
runs the bootstrap script from cloud-init. Set bootstrap: false only
when using a custom image that already has npa_publisher_wizard.

Outputs

  • publisherNames
  • secret publishers

Pulumi YAML

1
2
3
4
5
6
7
8
9
10
11
12
13
14
15
16
17
18
19
20
21
22
23
24
25
26
name: netskope-publisher-gcp
runtime: yaml
config:
  tenantUrl:
    type: String
  bearerToken:
    type: String
    secret: true
resources:
  publisher:
    type: netskope-publisher:index:GcpPublisher
    properties:
      namePrefix: pub-eu
      replicas: 2
      tenantUrl: ${tenantUrl}
      bearerToken: ${bearerToken}
      project: my-gcp-project
      zone: europe-west4-a
      network: default
      subnetwork: default
      image: projects/ubuntu-os-cloud/global/images/family/ubuntu-2204-lts
      machineType: e2-medium
      bootstrap: true
outputs:
  publisherNames: ${publisher.publisherNames}
  publishers: ${publisher.publishers}

TypeScript

1
2
3
4
5
6
7
8
9
10
11
12
13
14
15
16
17
18
19
20
21
22
23
24
import * as pulumi from "@pulumi/pulumi";
import { GcpPublisher } from "@johninnl/pulumi-netskope-publisher";

const netskope = new pulumi.Config("netskope");
const config = new pulumi.Config();

const publisher = new GcpPublisher("publisher", {
  namePrefix: "pub-gcp",
  replicas: 2,
  tenantUrl: netskope.require("tenantUrl"),
  bearerToken: netskope.requireSecret("bearerToken"),
  project: config.require("project"),
  zone: config.require("zone"),
  network: config.require("network"),
  subnetwork: config.require("subnetwork"),
  image: config.require("image"),
  machineType: "e2-medium",
  assignPublicIp: false,
  nonat: true,
  tags: { service: "npa" },
});

export const publisherNames = publisher.publisherNames;
export const publishers = pulumi.secret(publisher.publishers);

Python

1
2
3
4
5
6
7
8
9
10
11
12
13
14
15
16
17
18
19
20
21
22
23
24
25
import pulumi
from pulumi_netskope_publisher import GcpPublisher

netskope = pulumi.Config("netskope")
config = pulumi.Config()

publisher = GcpPublisher(
    "publisher",
    name_prefix="pub-gcp",
    replicas=2,
    tenant_url=netskope.require("tenantUrl"),
    bearer_token=netskope.require_secret("bearerToken"),
    project=config.require("project"),
    zone=config.require("zone"),
    network=config.require("network"),
    subnetwork=config.require("subnetwork"),
    image=config.require("image"),
    machine_type="e2-medium",
    assign_public_ip=False,
    nonat=True,
    tags={"service": "npa"},
)

pulumi.export("publisherNames", publisher.publisher_names)
pulumi.export("publishers", pulumi.Output.secret(publisher.publishers))

C#

1
2
3
4
5
6
7
8
9
10
11
12
13
14
15
16
17
18
19
20
21
22
23
24
25
26
27
28
29
30
31
32
using System.Collections.Generic;
using Pulumi;
using JohninNL.Pulumi.NetskopePublisher;

return await Deployment.RunAsync(() =>
{
    var netskope = new Config("netskope");
    var config = new Config();

    var publisher = new GcpPublisher("publisher", new GcpPublisherArgs
    {
        NamePrefix = "pub-gcp",
        Replicas = 2,
        TenantUrl = netskope.Require("tenantUrl"),
        BearerToken = netskope.RequireSecret("bearerToken"),
        Project = config.Require("project"),
        Zone = config.Require("zone"),
        Network = config.Require("network"),
        Subnetwork = config.Require("subnetwork"),
        Image = config.Require("image"),
        MachineType = "e2-medium",
        AssignPublicIp = false,
        Nonat = true,
        Tags = { { "service", "npa" } },
    });

    return new Dictionary<string, object?>
    {
        ["publisherNames"] = publisher.PublisherNames,
        ["publishers"] = Output.CreateSecret(publisher.Publishers),
    };
});

Go

1
2
3
4
5
6
7
8
9
10
11
12
13
14
15
16
17
18
19
20
21
22
publisher, err := netskopepublisher.NewGcpPublisher(ctx, "publisher", &netskopepublisher.GcpPublisherArgs{
	NamePrefix:    pulumi.String("pub-gcp"),
	Replicas:      pulumi.Int(2),
	TenantUrl:     pulumi.String(netskope.Require("tenantUrl")),
	BearerToken:      netskope.RequireSecret("bearerToken"),
	Project:       pulumi.String(cfg.Require("project")),
	Zone:          pulumi.String(cfg.Require("zone")),
	Network:       pulumi.String(cfg.Require("network")),
	Subnetwork:    pulumi.String(cfg.Require("subnetwork")),
	Image:         pulumi.String(cfg.Require("image")),
	MachineType:   pulumi.String("e2-medium"),
	AssignPublicIp: pulumi.Bool(false),
	Nonat:         pulumi.Bool(true),
	Tags: pulumi.StringMap{
		"service": pulumi.String("npa"),
	},
})
if err != nil {
	return err
}
ctx.Export("publisherNames", publisher.PublisherNames)
ctx.Export("publishers", pulumi.ToSecret(publisher.Publishers))

Java

1
2
3
4
5
6
7
8
9
10
11
12
13
14
15
16
17
var publisher = new GcpPublisher("publisher", GcpPublisherArgs.builder()
    .namePrefix("pub-gcp")
    .replicas(2)
    .tenantUrl(netskope.require("tenantUrl"))
    .bearerToken(netskope.requireSecret("bearerToken"))
    .project(config.require("project"))
    .zone(config.require("zone"))
    .network(config.require("network"))
    .subnetwork(config.require("subnetwork"))
    .image(config.require("image"))
    .machineType("e2-medium")
    .assignPublicIp(false)
    .nonat(true)
    .build());

ctx.export("publisherNames", publisher.publisherNames());
ctx.export("publishers", Output.secret(publisher.publishers()));

Rust

1
2
3
4
5
6
7
8
9
10
11
12
13
14
15
16
17
18
19
20
21
let publisher = netskope::gcp_publisher::create(
    ctx,
    "publisher",
    netskope::gcp_publisher::GcpPublisherArgs::builder()
        .name_prefix("pub-gcp")
        .replicas(2)
        .tenant_url("https://tenant.goskope.com")
        .bearer_token("secret-token")
        .project("my-gcp-project")
        .zone("europe-west4-a")
        .network("default")
        .subnetwork("default")
        .image("projects/ubuntu-os-cloud/global/images/family/ubuntu-2204-lts")
        .machine_type("e2-medium")
        .assign_public_ip(false)
        .nonat(true)
        .build_struct(),
);

add_export("publisherNames", &publisher.publisher_names);
add_export("publishers", &publisher.publishers);