update samples for version 1.2.0

resources/computefirewall/allow-rule-firewall/compute_v1beta1_computenetwork.yaml

@@ -4,4 +4,4 @@ metadata:
   name: computefirewall-dep-allow
 spec:
   routingMode: REGIONAL
-  autoCreateSubnetworks: true
+  autoCreateSubnetworks: false

resources/computefirewall/deny-rule-firewall/compute_v1beta1_computenetwork.yaml

@@ -4,4 +4,4 @@ metadata:
   name: computefirewall-dep-deny
 spec:
   routingMode: REGIONAL
-  autoCreateSubnetworks: true
+  autoCreateSubnetworks: false

resources/computenetworkendpointgroup/compute_v1beta1_computenetwork.yaml

@@ -0,0 +1,7 @@
+apiVersion: compute.cnrm.cloud.google.com/v1beta1
+kind: ComputeNetwork
+metadata:
+  name: computenetworkendpointgroup-dep
+spec:
+  routingMode: REGIONAL
+  autoCreateSubnetworks: false

resources/computenetworkendpointgroup/compute_v1beta1_computenetworkendpointgroup.yaml

@@ -0,0 +1,12 @@
+apiVersion: compute.cnrm.cloud.google.com/v1beta1
+kind: ComputeNetworkEndpointGroup
+metadata:
+  name: computenetworkendpointgroup-sample
+spec:
+  networkRef:
+    name: computenetworkendpointgroup-dep
+  subnetworkRef:
+    name: computenetworkendpointgroup-dep
+  location: us-west1-a
+  defaultPort: 90
+  description: A network endpoint group living in a specific us-west1 subnetwork, whose member endpoints will serve on port number 90 by default.

resources/computenetworkendpointgroup/compute_v1beta1_computesubnetwork.yaml

@@ -0,0 +1,9 @@
+apiVersion: compute.cnrm.cloud.google.com/v1beta1
+kind: ComputeSubnetwork
+metadata:
+  name: computenetworkendpointgroup-dep
+spec:
+  ipCidrRange: 10.2.0.0/16
+  region: us-west1
+  networkRef:
+    name: computenetworkendpointgroup-dep

resources/iampolicy/project-level-policy/iam_v1beta1_iampolicy.yaml

@@ -1,6 +1,9 @@
 # **WARNING**: The bindings here represent the full declarative intent for the project.
 # It will fully overwrite the existing policy on the given project.
 #
+# For finer-grained control over the project's IAM policy, it is recommended
+# that the IAMPolicyMember resource be used instead.
+#
 # This sample assumes the following additional APIs are enabled:
 #   - compute.googleapis.com
 #   - container.googleapis.com
@@ -12,6 +15,13 @@
 apiVersion: iam.cnrm.cloud.google.com/v1beta1
 kind: IAMPolicy
 metadata:
+  annotations:
+    # By default, the underlying GCP resource is deleted upon deletion of the
+    # K8s resource representing it (i.e. the entire IAM policy object of the
+    # GCP project will be wiped out if you delete this IAMPolicy resource). Set
+    # the 'deletion-policy' to 'abandon' to prevent the underlying GCP resource
+    # from being deleted upon deletion of this K8s resource.
+    cnrm.cloud.google.com/deletion-policy: abandon
   labels:
     label-one: value-one
   name: iampolicy-sample-projectlevel