@pulumi/docker 4.5.0-alpha.1698126220 → 4.5.0-alpha.1698202604

package/container.d.ts

@@ -148,7 +148,7 @@ export declare class Container extends pulumi.CustomResource {
      */
     readonly hostname: pulumi.Output<string>;
     /**
-     * Additional hosts to add to the container.
+     * Hostname to add
      */
     readonly hosts: pulumi.Output<outputs.ContainerHost[] | undefined>;
     /**
@@ -164,7 +164,7 @@ export declare class Container extends pulumi.CustomResource {
      */
     readonly ipcMode: pulumi.Output<string>;
     /**
-     * User-defined key/value metadata
+     * User-defined key/value metadata.
      */
     readonly labels: pulumi.Output<outputs.ContainerLabel[]>;
     /**
@@ -203,7 +203,7 @@ export declare class Container extends pulumi.CustomResource {
      */
     readonly mustRun: pulumi.Output<boolean | undefined>;
     /**
-     * The name of the container.
+     * The name or id of the network to use. You can use `name` or `id` attribute from a `docker.Network` resource.
      */
     readonly name: pulumi.Output<string>;
     /**
@@ -235,7 +235,7 @@ export declare class Container extends pulumi.CustomResource {
      */
     readonly publishAllPorts: pulumi.Output<boolean | undefined>;
     /**
-     * If `true`, the container will be started as readonly. Defaults to `false`.
+     * Whether the mount should be read-only.
      */
     readonly readOnly: pulumi.Output<boolean | undefined>;
     /**
@@ -434,7 +434,7 @@ export interface ContainerState {
      */
     hostname?: pulumi.Input<string>;
     /**
-     * Additional hosts to add to the container.
+     * Hostname to add
      */
     hosts?: pulumi.Input<pulumi.Input<inputs.ContainerHost>[]>;
     /**
@@ -450,7 +450,7 @@ export interface ContainerState {
      */
     ipcMode?: pulumi.Input<string>;
     /**
-     * User-defined key/value metadata
+     * User-defined key/value metadata.
      */
     labels?: pulumi.Input<pulumi.Input<inputs.ContainerLabel>[]>;
     /**
@@ -489,7 +489,7 @@ export interface ContainerState {
      */
     mustRun?: pulumi.Input<boolean>;
     /**
-     * The name of the container.
+     * The name or id of the network to use. You can use `name` or `id` attribute from a `docker.Network` resource.
      */
     name?: pulumi.Input<string>;
     /**
@@ -521,7 +521,7 @@ export interface ContainerState {
      */
     publishAllPorts?: pulumi.Input<boolean>;
     /**
-     * If `true`, the container will be started as readonly. Defaults to `false`.
+     * Whether the mount should be read-only.
      */
     readOnly?: pulumi.Input<boolean>;
     /**
@@ -700,7 +700,7 @@ export interface ContainerArgs {
      */
     hostname?: pulumi.Input<string>;
     /**
-     * Additional hosts to add to the container.
+     * Hostname to add
      */
     hosts?: pulumi.Input<pulumi.Input<inputs.ContainerHost>[]>;
     /**
@@ -716,7 +716,7 @@ export interface ContainerArgs {
      */
     ipcMode?: pulumi.Input<string>;
     /**
-     * User-defined key/value metadata
+     * User-defined key/value metadata.
      */
     labels?: pulumi.Input<pulumi.Input<inputs.ContainerLabel>[]>;
     /**
@@ -755,7 +755,7 @@ export interface ContainerArgs {
      */
     mustRun?: pulumi.Input<boolean>;
     /**
-     * The name of the container.
+     * The name or id of the network to use. You can use `name` or `id` attribute from a `docker.Network` resource.
      */
     name?: pulumi.Input<string>;
     /**
@@ -783,7 +783,7 @@ export interface ContainerArgs {
      */
     publishAllPorts?: pulumi.Input<boolean>;
     /**
-     * If `true`, the container will be started as readonly. Defaults to `false`.
+     * Whether the mount should be read-only.
      */
     readOnly?: pulumi.Input<boolean>;
     /**

package/package.json

@@ -1,6 +1,6 @@
 {
     "name": "@pulumi/docker",
-    "version": "v4.5.0-alpha.1698126220+2889f9dd",
+    "version": "v4.5.0-alpha.1698202604+4071f456",
     "description": "A Pulumi package for interacting with Docker in Pulumi programs",
     "keywords": [
         "pulumi",

package/plugin.d.ts

@@ -79,7 +79,7 @@ export declare class Plugin extends pulumi.CustomResource {
      */
     readonly grantPermissions: pulumi.Output<outputs.PluginGrantPermission[] | undefined>;
     /**
-     * Docker Plugin name
+     * The name of the permission
      */
     readonly name: pulumi.Output<string>;
     /**
@@ -132,7 +132,7 @@ export interface PluginState {
      */
     grantPermissions?: pulumi.Input<pulumi.Input<inputs.PluginGrantPermission>[]>;
     /**
-     * Docker Plugin name
+     * The name of the permission
      */
     name?: pulumi.Input<string>;
     /**
@@ -177,7 +177,7 @@ export interface PluginArgs {
      */
     grantPermissions?: pulumi.Input<pulumi.Input<inputs.PluginGrantPermission>[]>;
     /**
-     * Docker Plugin name
+     * The name of the permission
      */
     name?: pulumi.Input<string>;
 }

package/remoteImage.d.ts

@@ -57,7 +57,7 @@ export declare class RemoteImage extends pulumi.CustomResource {
      */
     readonly build: pulumi.Output<outputs.RemoteImageBuild | undefined>;
     /**
-     * If true, then the image is removed forcibly when the resource is destroyed.
+     * Always remove intermediate containers
      */
     readonly forceRemove: pulumi.Output<boolean | undefined>;
     /**
@@ -69,11 +69,11 @@ export declare class RemoteImage extends pulumi.CustomResource {
      */
     readonly keepLocally: pulumi.Output<boolean | undefined>;
     /**
-     * The name of the Docker image, including any tags or SHA256 repo digests.
+     * type of ulimit, e.g. `nofile`
      */
     readonly name: pulumi.Output<string>;
     /**
-     * The platform to use when pulling the image. Defaults to the platform of the current machine.
+     * Set platform if server is multi-platform capable
      */
     readonly platform: pulumi.Output<string | undefined>;
     /**
@@ -108,7 +108,7 @@ export interface RemoteImageState {
      */
     build?: pulumi.Input<inputs.RemoteImageBuild>;
     /**
-     * If true, then the image is removed forcibly when the resource is destroyed.
+     * Always remove intermediate containers
      */
     forceRemove?: pulumi.Input<boolean>;
     /**
@@ -120,11 +120,11 @@ export interface RemoteImageState {
      */
     keepLocally?: pulumi.Input<boolean>;
     /**
-     * The name of the Docker image, including any tags or SHA256 repo digests.
+     * type of ulimit, e.g. `nofile`
      */
     name?: pulumi.Input<string>;
     /**
-     * The platform to use when pulling the image. Defaults to the platform of the current machine.
+     * Set platform if server is multi-platform capable
      */
     platform?: pulumi.Input<string>;
     /**
@@ -151,7 +151,7 @@ export interface RemoteImageArgs {
      */
     build?: pulumi.Input<inputs.RemoteImageBuild>;
     /**
-     * If true, then the image is removed forcibly when the resource is destroyed.
+     * Always remove intermediate containers
      */
     forceRemove?: pulumi.Input<boolean>;
     /**
@@ -159,11 +159,11 @@ export interface RemoteImageArgs {
      */
     keepLocally?: pulumi.Input<boolean>;
     /**
-     * The name of the Docker image, including any tags or SHA256 repo digests.
+     * type of ulimit, e.g. `nofile`
      */
     name: pulumi.Input<string>;
     /**
-     * The platform to use when pulling the image. Defaults to the platform of the current machine.
+     * Set platform if server is multi-platform capable
      */
     platform?: pulumi.Input<string>;
     /**

package/service.d.ts

@@ -69,11 +69,11 @@ export declare class Service extends pulumi.CustomResource {
      */
     readonly labels: pulumi.Output<outputs.ServiceLabel[]>;
     /**
-     * Scheduling mode for the service
+     * The mode of resolution to use for internal load balancing between tasks
      */
     readonly mode: pulumi.Output<outputs.ServiceMode>;
     /**
-     * Name of the service
+     * A random name for the port
      */
     readonly name: pulumi.Output<string>;
     /**
@@ -118,11 +118,11 @@ export interface ServiceState {
      */
     labels?: pulumi.Input<pulumi.Input<inputs.ServiceLabel>[]>;
     /**
-     * Scheduling mode for the service
+     * The mode of resolution to use for internal load balancing between tasks
      */
     mode?: pulumi.Input<inputs.ServiceMode>;
     /**
-     * Name of the service
+     * A random name for the port
      */
     name?: pulumi.Input<string>;
     /**
@@ -159,11 +159,11 @@ export interface ServiceArgs {
      */
     labels?: pulumi.Input<pulumi.Input<inputs.ServiceLabel>[]>;
     /**
-     * Scheduling mode for the service
+     * The mode of resolution to use for internal load balancing between tasks
      */
     mode?: pulumi.Input<inputs.ServiceMode>;
     /**
-     * Name of the service
+     * A random name for the port
      */
     name?: pulumi.Input<string>;
     /**

package/types/input.d.ts

@@ -107,21 +107,39 @@ export interface ContainerMount {
     volumeOptions?: pulumi.Input<inputs.ContainerMountVolumeOptions>;
 }
 export interface ContainerMountBindOptions {
+    /**
+     * A propagation mode with the value.
+     */
     propagation?: pulumi.Input<string>;
 }
 export interface ContainerMountTmpfsOptions {
+    /**
+     * The permission mode for the tmpfs mount in an integer.
+     */
     mode?: pulumi.Input<number>;
+    /**
+     * The size for the tmpfs mount in bytes.
+     */
     sizeBytes?: pulumi.Input<number>;
 }
 export interface ContainerMountVolumeOptions {
+    /**
+     * Name of the driver to use to create the volume.
+     */
     driverName?: pulumi.Input<string>;
+    /**
+     * key/value map of driver specific options.
+     */
     driverOptions?: pulumi.Input<{
         [key: string]: pulumi.Input<string>;
     }>;
     /**
-     * User-defined key/value metadata
+     * User-defined key/value metadata.
      */
     labels?: pulumi.Input<pulumi.Input<inputs.ContainerMountVolumeOptionsLabel>[]>;
+    /**
+     * Populate volume with data from the target.
+     */
     noCopy?: pulumi.Input<boolean>;
 }
 export interface ContainerMountVolumeOptionsLabel {
@@ -490,21 +508,51 @@ export interface RemoteImageBuild {
     version?: pulumi.Input<string>;
 }
 export interface RemoteImageBuildAuthConfig {
+    /**
+     * the auth token
+     */
     auth?: pulumi.Input<string>;
+    /**
+     * the user emal
+     */
     email?: pulumi.Input<string>;
+    /**
+     * hostname of the registry
+     */
     hostName: pulumi.Input<string>;
+    /**
+     * the identity token
+     */
     identityToken?: pulumi.Input<string>;
+    /**
+     * the registry password
+     */
     password?: pulumi.Input<string>;
+    /**
+     * the registry token
+     */
     registryToken?: pulumi.Input<string>;
+    /**
+     * the server address
+     */
     serverAddress?: pulumi.Input<string>;
+    /**
+     * the registry user name
+     */
     userName?: pulumi.Input<string>;
 }
 export interface RemoteImageBuildUlimit {
+    /**
+     * soft limit
+     */
     hard: pulumi.Input<number>;
     /**
-     * The name of the Docker image, including any tags or SHA256 repo digests.
+     * type of ulimit, e.g. `nofile`
      */
     name: pulumi.Input<string>;
+    /**
+     * hard limit
+     */
     soft: pulumi.Input<number>;
 }
 export interface SecretLabel {
@@ -553,12 +601,24 @@ export interface ServiceEndpointSpec {
 }
 export interface ServiceEndpointSpecPort {
     /**
-     * Name of the service
+     * A random name for the port
      */
     name?: pulumi.Input<string>;
+    /**
+     * Rrepresents the protocol of a port: `tcp`, `udp` or `sctp`. Defaults to `tcp`.
+     */
     protocol?: pulumi.Input<string>;
+    /**
+     * Represents the mode in which the port is to be published: 'ingress' or 'host'. Defaults to `ingress`.
+     */
     publishMode?: pulumi.Input<string>;
+    /**
+     * The port on the swarm hosts
+     */
     publishedPort?: pulumi.Input<number>;
+    /**
+     * The port inside the container
+     */
     targetPort: pulumi.Input<number>;
 }
 export interface ServiceLabel {
@@ -582,6 +642,9 @@ export interface ServiceMode {
     replicated?: pulumi.Input<inputs.ServiceModeReplicated>;
 }
 export interface ServiceModeReplicated {
+    /**
+     * The amount of replicas of the service. Defaults to `1`
+     */
     replicas?: pulumi.Input<number>;
 }
 export interface ServiceRollbackConfig {
@@ -645,57 +708,165 @@ export interface ServiceTaskSpec {
     runtime?: pulumi.Input<string>;
 }
 export interface ServiceTaskSpecContainerSpec {
+    /**
+     * Arguments to the command
+     */
     args?: pulumi.Input<pulumi.Input<string>[]>;
+    /**
+     * The command/entrypoint to be run in the image. According to the [docker cli](https://github.com/docker/cli/blob/v20.10.7/cli/command/service/opts.go#L705) the override of the entrypoint is also passed to the `command` property and there is no `entrypoint` attribute in the `ContainerSpec` of the service.
+     */
     commands?: pulumi.Input<pulumi.Input<string>[]>;
+    /**
+     * References to zero or more configs that will be exposed to the service
+     */
     configs?: pulumi.Input<pulumi.Input<inputs.ServiceTaskSpecContainerSpecConfig>[]>;
+    /**
+     * The working directory for commands to run in
+     */
     dir?: pulumi.Input<string>;
+    /**
+     * Specification for DNS related configurations in resolver configuration file (`resolv.conf`)
+     */
     dnsConfig?: pulumi.Input<inputs.ServiceTaskSpecContainerSpecDnsConfig>;
+    /**
+     * A list of environment variables in the form VAR="value"
+     */
     env?: pulumi.Input<{
         [key: string]: pulumi.Input<string>;
     }>;
+    /**
+     * A list of additional groups that the container process will run as
+     */
     groups?: pulumi.Input<pulumi.Input<string>[]>;
+    /**
+     * A test to perform to check that the container is healthy
+     */
     healthcheck?: pulumi.Input<inputs.ServiceTaskSpecContainerSpecHealthcheck>;
+    /**
+     * The hostname to use for the container, as a valid RFC 1123 hostname
+     */
     hostname?: pulumi.Input<string>;
+    /**
+     * A list of hostname/IP mappings to add to the container's hosts file
+     */
     hosts?: pulumi.Input<pulumi.Input<inputs.ServiceTaskSpecContainerSpecHost>[]>;
+    /**
+     * The image name to use for the containers of the service, like `nginx:1.17.6`. Also use the data-source or resource of `docker.RemoteImage` with the `repoDigest` or `docker.RegistryImage` with the `name` attribute for this, as shown in the examples.
+     */
     image: pulumi.Input<string>;
+    /**
+     * Isolation technology of the containers running the service. (Windows only). Defaults to `default`.
+     */
     isolation?: pulumi.Input<string>;
     /**
      * User-defined key/value metadata
      */
     labels?: pulumi.Input<pulumi.Input<inputs.ServiceTaskSpecContainerSpecLabel>[]>;
+    /**
+     * Specification for mounts to be added to containers created as part of the service
+     */
     mounts?: pulumi.Input<pulumi.Input<inputs.ServiceTaskSpecContainerSpecMount>[]>;
+    /**
+     * Security options for the container
+     */
     privileges?: pulumi.Input<inputs.ServiceTaskSpecContainerSpecPrivileges>;
+    /**
+     * Whether the mount should be read-only
+     */
     readOnly?: pulumi.Input<boolean>;
+    /**
+     * References to zero or more secrets that will be exposed to the service
+     */
     secrets?: pulumi.Input<pulumi.Input<inputs.ServiceTaskSpecContainerSpecSecret>[]>;
+    /**
+     * Amount of time to wait for the container to terminate before forcefully removing it (ms|s|m|h). If not specified or '0s' the destroy will not check if all tasks/containers of the service terminate.
+     */
     stopGracePeriod?: pulumi.Input<string>;
+    /**
+     * Signal to stop the container
+     */
     stopSignal?: pulumi.Input<string>;
+    /**
+     * Sysctls config (Linux only)
+     */
     sysctl?: pulumi.Input<{
         [key: string]: any;
     }>;
+    /**
+     * SELinux user label
+     */
     user?: pulumi.Input<string>;
 }
 export interface ServiceTaskSpecContainerSpecConfig {
+    /**
+     * ID of the specific config that we're referencing
+     */
     configId: pulumi.Input<string>;
+    /**
+     * Name of the config that this references, but this is just provided for lookup/display purposes. The config in the reference will be identified by its ID
+     */
     configName?: pulumi.Input<string>;
+    /**
+     * Represents the file GID. Defaults to `0`.
+     */
     fileGid?: pulumi.Input<string>;
+    /**
+     * Represents represents the FileMode of the file. Defaults to `0o444`.
+     */
     fileMode?: pulumi.Input<number>;
+    /**
+     * Represents the final filename in the filesystem
+     */
     fileName: pulumi.Input<string>;
+    /**
+     * Represents the file UID. Defaults to `0`.
+     */
     fileUid?: pulumi.Input<string>;
 }
 export interface ServiceTaskSpecContainerSpecDnsConfig {
+    /**
+     * The IP addresses of the name servers
+     */
     nameservers: pulumi.Input<pulumi.Input<string>[]>;
+    /**
+     * A list of internal resolver variables to be modified (e.g., `debug`, `ndots:3`, etc.)
+     */
     options?: pulumi.Input<pulumi.Input<string>[]>;
+    /**
+     * A search list for host-name lookup
+     */
     searches?: pulumi.Input<pulumi.Input<string>[]>;
 }
 export interface ServiceTaskSpecContainerSpecHealthcheck {
+    /**
+     * Time between running the check (ms|s|m|h). Defaults to `0s`.
+     */
     interval?: pulumi.Input<string>;
+    /**
+     * Consecutive failures needed to report unhealthy. Defaults to `0`
+     */
     retries?: pulumi.Input<number>;
+    /**
+     * Start period for the container to initialize before counting retries towards unstable (ms|s|m|h). Defaults to `0s`.
+     */
     startPeriod?: pulumi.Input<string>;
+    /**
+     * The test to perform as list
+     */
     tests: pulumi.Input<pulumi.Input<string>[]>;
+    /**
+     * The timeout of the service to reach the desired state `(s|m)`. Defaults to `3m`
+     */
     timeout?: pulumi.Input<string>;
 }
 export interface ServiceTaskSpecContainerSpecHost {
+    /**
+     * The name of the host
+     */
     host: pulumi.Input<string>;
+    /**
+     * The ip of the host
+     */
     ip: pulumi.Input<string>;
 }
 export interface ServiceTaskSpecContainerSpecLabel {
@@ -709,26 +880,59 @@ export interface ServiceTaskSpecContainerSpecLabel {
     value: pulumi.Input<string>;
 }
 export interface ServiceTaskSpecContainerSpecMount {
+    /**
+     * Optional configuration for the bind type
+     */
     bindOptions?: pulumi.Input<inputs.ServiceTaskSpecContainerSpecMountBindOptions>;
+    /**
+     * Whether the mount should be read-only
+     */
     readOnly?: pulumi.Input<boolean>;
+    /**
+     * Mount source (e.g. a volume name, a host path)
+     */
     source?: pulumi.Input<string>;
+    /**
+     * Container path
+     */
     target: pulumi.Input<string>;
+    /**
+     * Optional configuration for the tmpfs type
+     */
     tmpfsOptions?: pulumi.Input<inputs.ServiceTaskSpecContainerSpecMountTmpfsOptions>;
+    /**
+     * The mount type
+     */
     type: pulumi.Input<string>;
+    /**
+     * Optional configuration for the volume type
+     */
     volumeOptions?: pulumi.Input<inputs.ServiceTaskSpecContainerSpecMountVolumeOptions>;
 }
 export interface ServiceTaskSpecContainerSpecMountBindOptions {
+    /**
+     * Bind propagation refers to whether or not mounts created within a given bind-mount or named volume can be propagated to replicas of that mount. See the [docs](https://docs.docker.com/storage/bind-mounts/#configure-bind-propagation) for details. Defaults to `rprivate`
+     */
     propagation?: pulumi.Input<string>;
 }
 export interface ServiceTaskSpecContainerSpecMountTmpfsOptions {
     /**
-     * Scheduling mode for the service
+     * The mode of resolution to use for internal load balancing between tasks
      */
     mode?: pulumi.Input<number>;
+    /**
+     * The size for the tmpfs mount in bytes
+     */
     sizeBytes?: pulumi.Input<number>;
 }
 export interface ServiceTaskSpecContainerSpecMountVolumeOptions {
+    /**
+     * Name of the driver to use to create the volume
+     */
     driverName?: pulumi.Input<string>;
+    /**
+     * key/value map of driver specific options
+     */
     driverOptions?: pulumi.Input<{
         [key: string]: pulumi.Input<string>;
     }>;
@@ -736,6 +940,9 @@ export interface ServiceTaskSpecContainerSpecMountVolumeOptions {
      * User-defined key/value metadata
      */
     labels?: pulumi.Input<pulumi.Input<inputs.ServiceTaskSpecContainerSpecMountVolumeOptionsLabel>[]>;
+    /**
+     * Populate volume with data from the target
+     */
     noCopy?: pulumi.Input<boolean>;
 }
 export interface ServiceTaskSpecContainerSpecMountVolumeOptionsLabel {
@@ -749,76 +956,187 @@ export interface ServiceTaskSpecContainerSpecMountVolumeOptionsLabel {
     value: pulumi.Input<string>;
 }
 export interface ServiceTaskSpecContainerSpecPrivileges {
+    /**
+     * CredentialSpec for managed service account (Windows only)
+     */
     credentialSpec?: pulumi.Input<inputs.ServiceTaskSpecContainerSpecPrivilegesCredentialSpec>;
+    /**
+     * SELinux labels of the container
+     */
     seLinuxContext?: pulumi.Input<inputs.ServiceTaskSpecContainerSpecPrivilegesSeLinuxContext>;
 }
 export interface ServiceTaskSpecContainerSpecPrivilegesCredentialSpec {
+    /**
+     * Load credential spec from this file
+     */
     file?: pulumi.Input<string>;
+    /**
+     * Load credential spec from this value in the Windows registry
+     */
     registry?: pulumi.Input<string>;
 }
 export interface ServiceTaskSpecContainerSpecPrivilegesSeLinuxContext {
+    /**
+     * Disable SELinux
+     */
     disable?: pulumi.Input<boolean>;
+    /**
+     * SELinux level label
+     */
     level?: pulumi.Input<string>;
+    /**
+     * SELinux role label
+     */
     role?: pulumi.Input<string>;
+    /**
+     * The mount type
+     */
     type?: pulumi.Input<string>;
+    /**
+     * SELinux user label
+     */
     user?: pulumi.Input<string>;
 }
 export interface ServiceTaskSpecContainerSpecSecret {
+    /**
+     * Represents the file GID. Defaults to `0`.
+     */
     fileGid?: pulumi.Input<string>;
+    /**
+     * Represents represents the FileMode of the file. Defaults to `0o444`.
+     */
     fileMode?: pulumi.Input<number>;
+    /**
+     * Represents the final filename in the filesystem
+     */
     fileName: pulumi.Input<string>;
+    /**
+     * Represents the file UID. Defaults to `0`.
+     */
     fileUid?: pulumi.Input<string>;
+    /**
+     * ID of the specific secret that we're referencing
+     */
     secretId: pulumi.Input<string>;
+    /**
+     * Name of the secret that this references, but this is just provided for lookup/display purposes. The config in the reference will be identified by its ID
+     */
     secretName?: pulumi.Input<string>;
 }
 export interface ServiceTaskSpecLogDriver {
     /**
-     * Name of the service
+     * A random name for the port
      */
     name: pulumi.Input<string>;
+    /**
+     * A list of internal resolver variables to be modified (e.g., `debug`, `ndots:3`, etc.)
+     */
     options?: pulumi.Input<{
         [key: string]: pulumi.Input<string>;
     }>;
 }
 export interface ServiceTaskSpecNetworksAdvanced {
+    /**
+     * The network aliases of the container in the specific network.
+     */
     aliases?: pulumi.Input<pulumi.Input<string>[]>;
+    /**
+     * An array of driver options for the network, e.g. `opts1=value`
+     */
     driverOpts?: pulumi.Input<pulumi.Input<string>[]>;
     /**
-     * Name of the service
+     * A random name for the port
      */
     name: pulumi.Input<string>;
 }
 export interface ServiceTaskSpecPlacement {
+    /**
+     * An array of constraints. e.g.: `node.role==manager`
+     */
     constraints?: pulumi.Input<pulumi.Input<string>[]>;
+    /**
+     * Maximum number of replicas for per node (default value is `0`, which is unlimited)
+     */
     maxReplicas?: pulumi.Input<number>;
+    /**
+     * Platforms stores all the platforms that the service's image can run on
+     */
     platforms?: pulumi.Input<pulumi.Input<inputs.ServiceTaskSpecPlacementPlatform>[]>;
+    /**
+     * Preferences provide a way to make the scheduler aware of factors such as topology. They are provided in order from highest to lowest precedence, e.g.: `spread=node.role.manager`
+     */
     prefs?: pulumi.Input<pulumi.Input<string>[]>;
 }
 export interface ServiceTaskSpecPlacementPlatform {
+    /**
+     * The architecture, e.g. `amd64`
+     */
     architecture: pulumi.Input<string>;
+    /**
+     * The operation system, e.g. `linux`
+     */
     os: pulumi.Input<string>;
 }
 export interface ServiceTaskSpecResources {
+    /**
+     * Describes the resources which can be advertised by a node and requested by a task
+     */
     limits?: pulumi.Input<inputs.ServiceTaskSpecResourcesLimits>;
+    /**
+     * An object describing the resources which can be advertised by a node and requested by a task
+     */
     reservation?: pulumi.Input<inputs.ServiceTaskSpecResourcesReservation>;
 }
 export interface ServiceTaskSpecResourcesLimits {
+    /**
+     * The amounf of memory in bytes the container allocates
+     */
     memoryBytes?: pulumi.Input<number>;
+    /**
+     * CPU shares in units of `1/1e9` (or `10^-9`) of the CPU. Should be at least `1000000`
+     */
     nanoCpus?: pulumi.Input<number>;
 }
 export interface ServiceTaskSpecResourcesReservation {
+    /**
+     * User-defined resources can be either Integer resources (e.g, `SSD=3`) or String resources (e.g, GPU=UUID1)
+     */
     genericResources?: pulumi.Input<inputs.ServiceTaskSpecResourcesReservationGenericResources>;
+    /**
+     * The amounf of memory in bytes the container allocates
+     */
     memoryBytes?: pulumi.Input<number>;
+    /**
+     * CPU shares in units of `1/1e9` (or `10^-9`) of the CPU. Should be at least `1000000`
+     */
     nanoCpus?: pulumi.Input<number>;
 }
 export interface ServiceTaskSpecResourcesReservationGenericResources {
+    /**
+     * The Integer resources
+     */
     discreteResourcesSpecs?: pulumi.Input<pulumi.Input<string>[]>;
+    /**
+     * The String resources
+     */
     namedResourcesSpecs?: pulumi.Input<pulumi.Input<string>[]>;
 }
 export interface ServiceTaskSpecRestartPolicy {
+    /**
+     * Condition for restart
+     */
     condition?: pulumi.Input<string>;
+    /**
+     * The interval to check if the desired state is reached `(ms|s)`. Defaults to `7s`.
+     */
     delay?: pulumi.Input<string>;
+    /**
+     * Maximum attempts to restart a given container before giving up (default value is `0`, which is ignored)
+     */
     maxAttempts?: pulumi.Input<number>;
+    /**
+     * The time window used to evaluate the restart policy (default value is `0`, which is unbounded) (ms|s|m|h)
+     */
     window?: pulumi.Input<string>;
 }
 export interface ServiceUpdateConfig {

package/types/output.d.ts

@@ -96,21 +96,39 @@ export interface ContainerMount {
     volumeOptions?: outputs.ContainerMountVolumeOptions;
 }
 export interface ContainerMountBindOptions {
+    /**
+     * A propagation mode with the value.
+     */
     propagation?: string;
 }
 export interface ContainerMountTmpfsOptions {
+    /**
+     * The permission mode for the tmpfs mount in an integer.
+     */
     mode?: number;
+    /**
+     * The size for the tmpfs mount in bytes.
+     */
     sizeBytes?: number;
 }
 export interface ContainerMountVolumeOptions {
+    /**
+     * Name of the driver to use to create the volume.
+     */
     driverName?: string;
+    /**
+     * key/value map of driver specific options.
+     */
     driverOptions?: {
         [key: string]: string;
     };
     /**
-     * User-defined key/value metadata
+     * User-defined key/value metadata.
      */
     labels?: outputs.ContainerMountVolumeOptionsLabel[];
+    /**
+     * Populate volume with data from the target.
+     */
     noCopy?: boolean;
 }
 export interface ContainerMountVolumeOptionsLabel {
@@ -427,21 +445,51 @@ export interface RemoteImageBuild {
     version?: string;
 }
 export interface RemoteImageBuildAuthConfig {
+    /**
+     * the auth token
+     */
     auth?: string;
+    /**
+     * the user emal
+     */
     email?: string;
+    /**
+     * hostname of the registry
+     */
     hostName: string;
+    /**
+     * the identity token
+     */
     identityToken?: string;
+    /**
+     * the registry password
+     */
     password?: string;
+    /**
+     * the registry token
+     */
     registryToken?: string;
+    /**
+     * the server address
+     */
     serverAddress?: string;
+    /**
+     * the registry user name
+     */
     userName?: string;
 }
 export interface RemoteImageBuildUlimit {
+    /**
+     * soft limit
+     */
     hard: number;
     /**
-     * The name of the Docker image, including any tags or SHA256 repo digests.
+     * type of ulimit, e.g. `nofile`
      */
     name: string;
+    /**
+     * hard limit
+     */
     soft: number;
 }
 export interface SecretLabel {
@@ -490,12 +538,24 @@ export interface ServiceEndpointSpec {
 }
 export interface ServiceEndpointSpecPort {
     /**
-     * Name of the service
+     * A random name for the port
      */
     name?: string;
+    /**
+     * Rrepresents the protocol of a port: `tcp`, `udp` or `sctp`. Defaults to `tcp`.
+     */
     protocol?: string;
+    /**
+     * Represents the mode in which the port is to be published: 'ingress' or 'host'. Defaults to `ingress`.
+     */
     publishMode?: string;
+    /**
+     * The port on the swarm hosts
+     */
     publishedPort: number;
+    /**
+     * The port inside the container
+     */
     targetPort: number;
 }
 export interface ServiceLabel {
@@ -519,6 +579,9 @@ export interface ServiceMode {
     replicated: outputs.ServiceModeReplicated;
 }
 export interface ServiceModeReplicated {
+    /**
+     * The amount of replicas of the service. Defaults to `1`
+     */
     replicas?: number;
 }
 export interface ServiceRollbackConfig {
@@ -582,57 +645,165 @@ export interface ServiceTaskSpec {
     runtime: string;
 }
 export interface ServiceTaskSpecContainerSpec {
+    /**
+     * Arguments to the command
+     */
     args?: string[];
+    /**
+     * The command/entrypoint to be run in the image. According to the [docker cli](https://github.com/docker/cli/blob/v20.10.7/cli/command/service/opts.go#L705) the override of the entrypoint is also passed to the `command` property and there is no `entrypoint` attribute in the `ContainerSpec` of the service.
+     */
     commands?: string[];
+    /**
+     * References to zero or more configs that will be exposed to the service
+     */
     configs?: outputs.ServiceTaskSpecContainerSpecConfig[];
+    /**
+     * The working directory for commands to run in
+     */
     dir?: string;
+    /**
+     * Specification for DNS related configurations in resolver configuration file (`resolv.conf`)
+     */
     dnsConfig: outputs.ServiceTaskSpecContainerSpecDnsConfig;
+    /**
+     * A list of environment variables in the form VAR="value"
+     */
     env?: {
         [key: string]: string;
     };
+    /**
+     * A list of additional groups that the container process will run as
+     */
     groups?: string[];
+    /**
+     * A test to perform to check that the container is healthy
+     */
     healthcheck: outputs.ServiceTaskSpecContainerSpecHealthcheck;
+    /**
+     * The hostname to use for the container, as a valid RFC 1123 hostname
+     */
     hostname?: string;
+    /**
+     * A list of hostname/IP mappings to add to the container's hosts file
+     */
     hosts?: outputs.ServiceTaskSpecContainerSpecHost[];
+    /**
+     * The image name to use for the containers of the service, like `nginx:1.17.6`. Also use the data-source or resource of `docker.RemoteImage` with the `repoDigest` or `docker.RegistryImage` with the `name` attribute for this, as shown in the examples.
+     */
     image: string;
+    /**
+     * Isolation technology of the containers running the service. (Windows only). Defaults to `default`.
+     */
     isolation?: string;
     /**
      * User-defined key/value metadata
      */
     labels?: outputs.ServiceTaskSpecContainerSpecLabel[];
+    /**
+     * Specification for mounts to be added to containers created as part of the service
+     */
     mounts?: outputs.ServiceTaskSpecContainerSpecMount[];
+    /**
+     * Security options for the container
+     */
     privileges?: outputs.ServiceTaskSpecContainerSpecPrivileges;
+    /**
+     * Whether the mount should be read-only
+     */
     readOnly?: boolean;
+    /**
+     * References to zero or more secrets that will be exposed to the service
+     */
     secrets?: outputs.ServiceTaskSpecContainerSpecSecret[];
+    /**
+     * Amount of time to wait for the container to terminate before forcefully removing it (ms|s|m|h). If not specified or '0s' the destroy will not check if all tasks/containers of the service terminate.
+     */
     stopGracePeriod: string;
+    /**
+     * Signal to stop the container
+     */
     stopSignal?: string;
+    /**
+     * Sysctls config (Linux only)
+     */
     sysctl?: {
         [key: string]: any;
     };
+    /**
+     * SELinux user label
+     */
     user?: string;
 }
 export interface ServiceTaskSpecContainerSpecConfig {
+    /**
+     * ID of the specific config that we're referencing
+     */
     configId: string;
+    /**
+     * Name of the config that this references, but this is just provided for lookup/display purposes. The config in the reference will be identified by its ID
+     */
     configName?: string;
+    /**
+     * Represents the file GID. Defaults to `0`.
+     */
     fileGid?: string;
+    /**
+     * Represents represents the FileMode of the file. Defaults to `0o444`.
+     */
     fileMode?: number;
+    /**
+     * Represents the final filename in the filesystem
+     */
     fileName: string;
+    /**
+     * Represents the file UID. Defaults to `0`.
+     */
     fileUid?: string;
 }
 export interface ServiceTaskSpecContainerSpecDnsConfig {
+    /**
+     * The IP addresses of the name servers
+     */
     nameservers: string[];
+    /**
+     * A list of internal resolver variables to be modified (e.g., `debug`, `ndots:3`, etc.)
+     */
     options?: string[];
+    /**
+     * A search list for host-name lookup
+     */
     searches?: string[];
 }
 export interface ServiceTaskSpecContainerSpecHealthcheck {
+    /**
+     * Time between running the check (ms|s|m|h). Defaults to `0s`.
+     */
     interval?: string;
+    /**
+     * Consecutive failures needed to report unhealthy. Defaults to `0`
+     */
     retries?: number;
+    /**
+     * Start period for the container to initialize before counting retries towards unstable (ms|s|m|h). Defaults to `0s`.
+     */
     startPeriod?: string;
+    /**
+     * The test to perform as list
+     */
     tests: string[];
+    /**
+     * The timeout of the service to reach the desired state `(s|m)`. Defaults to `3m`
+     */
     timeout?: string;
 }
 export interface ServiceTaskSpecContainerSpecHost {
+    /**
+     * The name of the host
+     */
     host: string;
+    /**
+     * The ip of the host
+     */
     ip: string;
 }
 export interface ServiceTaskSpecContainerSpecLabel {
@@ -646,26 +817,59 @@ export interface ServiceTaskSpecContainerSpecLabel {
     value: string;
 }
 export interface ServiceTaskSpecContainerSpecMount {
+    /**
+     * Optional configuration for the bind type
+     */
     bindOptions?: outputs.ServiceTaskSpecContainerSpecMountBindOptions;
+    /**
+     * Whether the mount should be read-only
+     */
     readOnly?: boolean;
+    /**
+     * Mount source (e.g. a volume name, a host path)
+     */
     source?: string;
+    /**
+     * Container path
+     */
     target: string;
+    /**
+     * Optional configuration for the tmpfs type
+     */
     tmpfsOptions?: outputs.ServiceTaskSpecContainerSpecMountTmpfsOptions;
+    /**
+     * The mount type
+     */
     type: string;
+    /**
+     * Optional configuration for the volume type
+     */
     volumeOptions?: outputs.ServiceTaskSpecContainerSpecMountVolumeOptions;
 }
 export interface ServiceTaskSpecContainerSpecMountBindOptions {
+    /**
+     * Bind propagation refers to whether or not mounts created within a given bind-mount or named volume can be propagated to replicas of that mount. See the [docs](https://docs.docker.com/storage/bind-mounts/#configure-bind-propagation) for details. Defaults to `rprivate`
+     */
     propagation?: string;
 }
 export interface ServiceTaskSpecContainerSpecMountTmpfsOptions {
     /**
-     * Scheduling mode for the service
+     * The mode of resolution to use for internal load balancing between tasks
      */
     mode?: number;
+    /**
+     * The size for the tmpfs mount in bytes
+     */
     sizeBytes?: number;
 }
 export interface ServiceTaskSpecContainerSpecMountVolumeOptions {
+    /**
+     * Name of the driver to use to create the volume
+     */
     driverName?: string;
+    /**
+     * key/value map of driver specific options
+     */
     driverOptions?: {
         [key: string]: string;
     };
@@ -673,6 +877,9 @@ export interface ServiceTaskSpecContainerSpecMountVolumeOptions {
      * User-defined key/value metadata
      */
     labels?: outputs.ServiceTaskSpecContainerSpecMountVolumeOptionsLabel[];
+    /**
+     * Populate volume with data from the target
+     */
     noCopy?: boolean;
 }
 export interface ServiceTaskSpecContainerSpecMountVolumeOptionsLabel {
@@ -686,76 +893,187 @@ export interface ServiceTaskSpecContainerSpecMountVolumeOptionsLabel {
     value: string;
 }
 export interface ServiceTaskSpecContainerSpecPrivileges {
+    /**
+     * CredentialSpec for managed service account (Windows only)
+     */
     credentialSpec?: outputs.ServiceTaskSpecContainerSpecPrivilegesCredentialSpec;
+    /**
+     * SELinux labels of the container
+     */
     seLinuxContext?: outputs.ServiceTaskSpecContainerSpecPrivilegesSeLinuxContext;
 }
 export interface ServiceTaskSpecContainerSpecPrivilegesCredentialSpec {
+    /**
+     * Load credential spec from this file
+     */
     file?: string;
+    /**
+     * Load credential spec from this value in the Windows registry
+     */
     registry?: string;
 }
 export interface ServiceTaskSpecContainerSpecPrivilegesSeLinuxContext {
+    /**
+     * Disable SELinux
+     */
     disable?: boolean;
+    /**
+     * SELinux level label
+     */
     level?: string;
+    /**
+     * SELinux role label
+     */
     role?: string;
+    /**
+     * The mount type
+     */
     type?: string;
+    /**
+     * SELinux user label
+     */
     user?: string;
 }
 export interface ServiceTaskSpecContainerSpecSecret {
+    /**
+     * Represents the file GID. Defaults to `0`.
+     */
     fileGid?: string;
+    /**
+     * Represents represents the FileMode of the file. Defaults to `0o444`.
+     */
     fileMode?: number;
+    /**
+     * Represents the final filename in the filesystem
+     */
     fileName: string;
+    /**
+     * Represents the file UID. Defaults to `0`.
+     */
     fileUid?: string;
+    /**
+     * ID of the specific secret that we're referencing
+     */
     secretId: string;
+    /**
+     * Name of the secret that this references, but this is just provided for lookup/display purposes. The config in the reference will be identified by its ID
+     */
     secretName?: string;
 }
 export interface ServiceTaskSpecLogDriver {
     /**
-     * Name of the service
+     * A random name for the port
      */
     name: string;
+    /**
+     * A list of internal resolver variables to be modified (e.g., `debug`, `ndots:3`, etc.)
+     */
     options?: {
         [key: string]: string;
     };
 }
 export interface ServiceTaskSpecNetworksAdvanced {
+    /**
+     * The network aliases of the container in the specific network.
+     */
     aliases?: string[];
+    /**
+     * An array of driver options for the network, e.g. `opts1=value`
+     */
     driverOpts?: string[];
     /**
-     * Name of the service
+     * A random name for the port
      */
     name: string;
 }
 export interface ServiceTaskSpecPlacement {
+    /**
+     * An array of constraints. e.g.: `node.role==manager`
+     */
     constraints?: string[];
+    /**
+     * Maximum number of replicas for per node (default value is `0`, which is unlimited)
+     */
     maxReplicas?: number;
+    /**
+     * Platforms stores all the platforms that the service's image can run on
+     */
     platforms?: outputs.ServiceTaskSpecPlacementPlatform[];
+    /**
+     * Preferences provide a way to make the scheduler aware of factors such as topology. They are provided in order from highest to lowest precedence, e.g.: `spread=node.role.manager`
+     */
     prefs?: string[];
 }
 export interface ServiceTaskSpecPlacementPlatform {
+    /**
+     * The architecture, e.g. `amd64`
+     */
     architecture: string;
+    /**
+     * The operation system, e.g. `linux`
+     */
     os: string;
 }
 export interface ServiceTaskSpecResources {
+    /**
+     * Describes the resources which can be advertised by a node and requested by a task
+     */
     limits?: outputs.ServiceTaskSpecResourcesLimits;
+    /**
+     * An object describing the resources which can be advertised by a node and requested by a task
+     */
     reservation?: outputs.ServiceTaskSpecResourcesReservation;
 }
 export interface ServiceTaskSpecResourcesLimits {
+    /**
+     * The amounf of memory in bytes the container allocates
+     */
     memoryBytes?: number;
+    /**
+     * CPU shares in units of `1/1e9` (or `10^-9`) of the CPU. Should be at least `1000000`
+     */
     nanoCpus?: number;
 }
 export interface ServiceTaskSpecResourcesReservation {
+    /**
+     * User-defined resources can be either Integer resources (e.g, `SSD=3`) or String resources (e.g, GPU=UUID1)
+     */
     genericResources?: outputs.ServiceTaskSpecResourcesReservationGenericResources;
+    /**
+     * The amounf of memory in bytes the container allocates
+     */
     memoryBytes?: number;
+    /**
+     * CPU shares in units of `1/1e9` (or `10^-9`) of the CPU. Should be at least `1000000`
+     */
     nanoCpus?: number;
 }
 export interface ServiceTaskSpecResourcesReservationGenericResources {
+    /**
+     * The Integer resources
+     */
     discreteResourcesSpecs?: string[];
+    /**
+     * The String resources
+     */
     namedResourcesSpecs?: string[];
 }
 export interface ServiceTaskSpecRestartPolicy {
+    /**
+     * Condition for restart
+     */
     condition?: string;
+    /**
+     * The interval to check if the desired state is reached `(ms|s)`. Defaults to `7s`.
+     */
     delay?: string;
+    /**
+     * Maximum attempts to restart a given container before giving up (default value is `0`, which is ignored)
+     */
     maxAttempts?: number;
+    /**
+     * The time window used to evaluate the restart policy (default value is `0`, which is unbounded) (ms|s|m|h)
+     */
     window?: string;
 }
 export interface ServiceUpdateConfig {