@pulumi/gcp 5.24.0 → 5.26.0

package/types/input.d.ts

@@ -2993,7 +2993,7 @@ export declare namespace bigquery {
          * When set, configures hive partitioning
          * support. Not all storage formats support hive partitioning -- requesting hive
          * partitioning on an unsupported format will lead to an error, as will providing
-         * an invalid specification.
+         * an invalid specification. Structure is documented below.
          */
         hivePartitioningOptions?: pulumi.Input<inputs.bigquery.TableExternalDataConfigurationHivePartitioningOptions>;
         /**
@@ -5822,6 +5822,10 @@ export declare namespace cloudrun {
          * TimeoutSeconds holds the max duration the instance is allowed for responding to a request.
          */
         timeoutSeconds?: pulumi.Input<number>;
+        /**
+         * Volume represents a named volume in a container.
+         * Structure is documented below.
+         */
         volumes?: pulumi.Input<pulumi.Input<inputs.cloudrun.ServiceTemplateSpecVolume>[]>;
     }
     interface ServiceTemplateSpecContainer {
@@ -5887,6 +5891,11 @@ export declare namespace cloudrun {
          * Structure is documented below.
          */
         resources?: pulumi.Input<inputs.cloudrun.ServiceTemplateSpecContainerResources>;
+        /**
+         * Volume to mount into the container's filesystem.
+         * Only supports SecretVolumeSources.
+         * Structure is documented below.
+         */
         volumeMounts?: pulumi.Input<pulumi.Input<inputs.cloudrun.ServiceTemplateSpecContainerVolumeMount>[]>;
         /**
          * -
@@ -5915,6 +5924,10 @@ export declare namespace cloudrun {
          * Defaults to "".
          */
         value?: pulumi.Input<string>;
+        /**
+         * Source for the environment variable's value. Only supports secret_key_ref.
+         * Structure is documented below.
+         */
         valueFrom?: pulumi.Input<inputs.cloudrun.ServiceTemplateSpecContainerEnvValueFrom>;
     }
     interface ServiceTemplateSpecContainerEnvFrom {
@@ -6365,18 +6378,19 @@ export declare namespace composer {
         /**
          * The configuration settings for Cloud SQL instance used internally
          * by Apache Airflow software. This field is supported for Cloud
-         * Composer environments in versions composer-1.*.*-airflow-*.*.*.
+         * Composer environments in versions composer-1.*.*-airflow-*.*.*. Structure is documented below.
          */
         databaseConfig?: pulumi.Input<inputs.composer.EnvironmentConfigDatabaseConfig>;
         /**
          * The encryption options for the Cloud Composer environment and its
          * dependencies. This field is supported for Cloud Composer environments in
-         * versions composer-1.*.*-airflow-*.*.*.
+         * versions composer-1.*.*-airflow-*.*.*. Structure is documented below.
          */
         encryptionConfig?: pulumi.Input<inputs.composer.EnvironmentConfigEncryptionConfig>;
+        environmentSize?: pulumi.Input<string>;
         gkeCluster?: pulumi.Input<string>;
         /**
-         * The configuration settings for Cloud Composer maintenance window.
+         * The configuration settings for Cloud Composer maintenance window. Structure is documented below.
          */
         maintenanceWindow?: pulumi.Input<inputs.composer.EnvironmentConfigMaintenanceWindow>;
         /**
@@ -6401,9 +6415,15 @@ export declare namespace composer {
         /**
          * The configuration settings for the Airflow web server App Engine instance.
          * This field is supported for Cloud Composer environments in versions
-         * composer-1.*.*-airflow-*.*.*.
+         * composer-1.*.*-airflow-*.*.*. Structure is documented below.
          */
         webServerConfig?: pulumi.Input<inputs.composer.EnvironmentConfigWebServerConfig>;
+        /**
+         * The network-level access control policy for the Airflow web server.
+         * If unspecified, no network-level access restrictions will be applied.
+         * This field is supported for Cloud Composer environments in versions
+         * composer-1.*.*-airflow-*.*.*.
+         */
         webServerNetworkAccessControl?: pulumi.Input<inputs.composer.EnvironmentConfigWebServerNetworkAccessControl>;
         /**
          * The Kubernetes workloads configuration for GKE cluster associated with the
@@ -6453,6 +6473,12 @@ export declare namespace composer {
          * for Cloud Composer environments in versions composer-1.*.*-airflow-*.*.*.
          */
         diskSizeGb?: pulumi.Input<number>;
+        /**
+         * Deploys 'ip-masq-agent' daemon set in the GKE cluster and defines
+         * nonMasqueradeCIDRs equals to pod IP range so IP masquerading is used for
+         * all destination addresses, except between pods traffic.
+         * See the [documentation](https://cloud.google.com/kubernetes-engine/docs/how-to/ip-masquerade-agent).
+         */
         enableIpMasqAgent?: pulumi.Input<boolean>;
         /**
          * Configuration for controlling how IPs are allocated in the GKE cluster.
@@ -6521,7 +6547,7 @@ export declare namespace composer {
          * supported for Cloud Composer environments in versions
          * composer-1.*.*-airflow-*.*.*.
          */
-        zone: pulumi.Input<string>;
+        zone?: pulumi.Input<string>;
     }
     interface EnvironmentConfigNodeConfigIpAllocationPolicy {
         /**
@@ -6583,6 +6609,10 @@ export declare namespace composer {
          * composer-1.*.*-airflow-*.*.*.
          */
         enablePrivateEndpoint?: pulumi.Input<boolean>;
+        /**
+         * When enabled, IPs from public (non-RFC1918) ranges can be used for
+         * `ip_allocation_policy.cluster_ipv4_cidr_block` and `ip_allocation_policy.service_ipv4_cidr_block`.
+         */
         enablePrivatelyUsedPublicIps?: pulumi.Input<boolean>;
         /**
          * The IP range in CIDR notation to use for the hosted master network. This range is used
@@ -7854,7 +7884,7 @@ export declare namespace compute {
          */
         destIpRanges?: pulumi.Input<pulumi.Input<string>[]>;
         /**
-         * Pairs of IP protocols and ports that the rule should match.
+         * Pairs of IP protocols and ports that the rule should match. Structure is documented below.
          */
         layer4Configs: pulumi.Input<pulumi.Input<inputs.compute.FirewallPolicyRuleMatchLayer4Config>[]>;
         /**
@@ -12368,17 +12398,17 @@ export declare namespace compute {
     }
     interface SecurityPolicyAdaptiveProtectionConfig {
         /**
-         * ) Configuration for [Google Cloud Armor Adaptive Protection Layer 7 DDoS Defense](https://cloud.google.com/armor/docs/adaptive-protection-overview?hl=en). Structure is documented below.
+         * Configuration for [Google Cloud Armor Adaptive Protection Layer 7 DDoS Defense](https://cloud.google.com/armor/docs/adaptive-protection-overview?hl=en). Structure is documented below.
          */
         layer7DdosDefenseConfig?: pulumi.Input<inputs.compute.SecurityPolicyAdaptiveProtectionConfigLayer7DdosDefenseConfig>;
     }
     interface SecurityPolicyAdaptiveProtectionConfigLayer7DdosDefenseConfig {
         /**
-         * ) If set to true, enables CAAP for L7 DDoS detection.
+         * If set to true, enables CAAP for L7 DDoS detection.
          */
         enable?: pulumi.Input<boolean>;
         /**
-         * ) Rule visibility can be one of the following: STANDARD - opaque rules. (default) PREMIUM - transparent rules.
+         * Rule visibility can be one of the following: STANDARD - opaque rules. (default) PREMIUM - transparent rules.
          */
         ruleVisibility?: pulumi.Input<string>;
     }
@@ -14716,16 +14746,10 @@ export declare namespace container {
     }
     interface ClusterDnsConfig {
         /**
-         * Which in-cluster DNS provider should be used. `PROVIDER_UNSPECIFIED` (default) or `PLATFORM_DEFAULT` or `CLOUD_DNS`.
+         * Which in-cluster DNS provider shoul
          */
         clusterDns?: pulumi.Input<string>;
-        /**
-         * The suffix used for all cluster service records.
-         */
         clusterDnsDomain?: pulumi.Input<string>;
-        /**
-         * The scope of access to cluster DNS records. `DNS_SCOPE_UNSPECIFIED` (default) or `CLUSTER_SCOPE` or `VPC_SCOPE`.
-         */
         clusterDnsScope?: pulumi.Input<string>;
     }
     interface ClusterIpAllocationPolicy {
@@ -14761,8 +14785,7 @@ export declare namespace container {
     }
     interface ClusterLoggingConfig {
         /**
-         * The GKE components exposing logs. Only `SYSTEM_COMPONENTS`
-         * is supported.
+         * The GKE components exposing logs. `SYSTEM_COMPONENTS` and in beta provider, both `SYSTEM_COMPONENTS` and `WORKLOADS` are supported.
          */
         enableComponents: pulumi.Input<pulumi.Input<string>[]>;
     }
@@ -14838,8 +14861,7 @@ export declare namespace container {
     }
     interface ClusterMonitoringConfig {
         /**
-         * The GKE components exposing logs. Only `SYSTEM_COMPONENTS`
-         * is supported.
+         * The GKE components exposing logs. `SYSTEM_COMPONENTS` and in beta provider, both `SYSTEM_COMPONENTS` and `WORKLOADS` are supported.
          */
         enableComponents: pulumi.Input<pulumi.Input<string>[]>;
     }
@@ -14988,6 +15010,10 @@ export declare namespace container {
          * The number of the guest accelerator cards exposed to this instance.
          */
         count: pulumi.Input<number>;
+        /**
+         * Size of partitions to create on the GPU. Valid values are described in the NVIDIA mig [user guide](https://docs.nvidia.com/datacenter/tesla/mig-user-guide/#partitioning).
+         */
+        gpuPartitionSize?: pulumi.Input<string>;
         /**
          * The accelerator type resource to expose to this instance. E.g. `nvidia-tesla-k80`.
          */
@@ -15086,10 +15112,6 @@ export declare namespace container {
          * `removeDefaultNodePool` to `true`.
          */
         initialNodeCount?: pulumi.Input<number>;
-        /**
-         * List of instance group URLs which have been assigned
-         * to the cluster.
-         */
         instanceGroupUrls?: pulumi.Input<pulumi.Input<string>[]>;
         management?: pulumi.Input<inputs.container.ClusterNodePoolManagement>;
         maxPodsPerNode?: pulumi.Input<number>;
@@ -15100,8 +15122,8 @@ export declare namespace container {
         name?: pulumi.Input<string>;
         namePrefix?: pulumi.Input<string>;
         /**
-         * ) Configuration for
-         * [Adding Pod IP address ranges](https://cloud.google.com/kubernetes-engine/docs/how-to/multi-pod-cidr)) to the node pool.
+         * Configuration for
+         * [Adding Pod IP address ranges](https://cloud.google.com/kubernetes-engine/docs/how-to/multi-pod-cidr)) to the node pool. Structure is documented below
          */
         networkConfig?: pulumi.Input<inputs.container.ClusterNodePoolNetworkConfig>;
         /**
@@ -15133,15 +15155,15 @@ export declare namespace container {
     }
     interface ClusterNodePoolNetworkConfig {
         /**
-         * ) Whether to create a new range for pod IPs in this node pool. Defaults are provided for `podRange` and `podIpv4CidrBlock` if they are not specified.
+         * Whether to create a new range for pod IPs in this node pool. Defaults are provided for `podRange` and `podIpv4CidrBlock` if they are not specified.
          */
         createPodRange?: pulumi.Input<boolean>;
         /**
-         * ) The IP address range for pod IPs in this node pool. Only applicable if createPodRange is true. Set to blank to have a range chosen with the default size. Set to /netmask (e.g. /14) to have a range chosen with a specific netmask. Set to a CIDR notation (e.g. 10.96.0.0/14) to pick a specific range to use.
+         * The IP address range for pod IPs in this node pool. Only applicable if createPodRange is true. Set to blank to have a range chosen with the default size. Set to /netmask (e.g. /14) to have a range chosen with a specific netmask. Set to a CIDR notation (e.g. 10.96.0.0/14) to pick a specific range to use.
          */
         podIpv4CidrBlock?: pulumi.Input<string>;
         /**
-         * ) The ID of the secondary range for pod IPs. If `createPodRange` is true, this ID is used for the new range. If `createPodRange` is false, uses an existing secondary range with this ID.
+         * The ID of the secondary range for pod IPs. If `createPodRange` is true, this ID is used for the new range. If `createPodRange` is false, uses an existing secondary range with this ID.
          */
         podRange: pulumi.Input<string>;
     }
@@ -15279,6 +15301,10 @@ export declare namespace container {
          * The number of the guest accelerator cards exposed to this instance.
          */
         count: pulumi.Input<number>;
+        /**
+         * Size of partitions to create on the GPU. Valid values are described in the NVIDIA mig [user guide](https://docs.nvidia.com/datacenter/tesla/mig-user-guide/#partitioning).
+         */
+        gpuPartitionSize?: pulumi.Input<string>;
         /**
          * The accelerator type resource to expose to this instance. E.g. `nvidia-tesla-k80`.
          */
@@ -15487,9 +15513,15 @@ export declare namespace container {
     }
     interface ClusterWorkloadIdentityConfig {
         /**
-         * Currently, the only supported identity namespace is the project's default.
+         * - Currently, the only supported identity namespace is the project's default.
+         *
+         * @deprecated This field will be removed in a future major release as it has been deprecated in the API. Use `workload_pool` instead.
+         */
+        identityNamespace?: pulumi.Input<string>;
+        /**
+         * The workload pool to attach all Kubernetes service accounts to. Currently, the only supported identity namespace is the project of the cluster.
          */
-        identityNamespace: pulumi.Input<string>;
+        workloadPool?: pulumi.Input<string>;
     }
     interface NodePoolAutoscaling {
         /**
@@ -15549,6 +15581,7 @@ export declare namespace container {
     }
     interface NodePoolNodeConfigGuestAccelerator {
         count: pulumi.Input<number>;
+        gpuPartitionSize?: pulumi.Input<string>;
         type: pulumi.Input<string>;
     }
     interface NodePoolNodeConfigKubeletConfig {
@@ -17056,7 +17089,7 @@ export declare namespace dataproc {
         lifecycleConfig?: pulumi.Input<inputs.dataproc.ClusterClusterConfigLifecycleConfig>;
         /**
          * The Google Compute Engine config settings for the master instances
-         * in a cluster.. Structure defined below.
+         * in a cluster. Structure defined below.
          */
         masterConfig?: pulumi.Input<inputs.dataproc.ClusterClusterConfigMasterConfig>;
         /**
@@ -17100,7 +17133,7 @@ export declare namespace dataproc {
         tempBucket?: pulumi.Input<string>;
         /**
          * The Google Compute Engine config settings for the worker instances
-         * in a cluster.. Structure defined below.
+         * in a cluster. Structure defined below.
          */
         workerConfig?: pulumi.Input<inputs.dataproc.ClusterClusterConfigWorkerConfig>;
     }
@@ -19683,6 +19716,13 @@ export declare namespace filestore {
         squashMode?: pulumi.Input<string>;
     }
     interface InstanceNetwork {
+        /**
+         * The network connect mode of the Filestore instance.
+         * If not provided, the connect mode defaults to
+         * DIRECT_PEERING.
+         * Default value is `DIRECT_PEERING`.
+         * Possible values are `DIRECT_PEERING` and `PRIVATE_SERVICE_ACCESS`.
+         */
         connectMode?: pulumi.Input<string>;
         /**
          * -
@@ -19945,19 +19985,19 @@ export declare namespace gameservices {
 export declare namespace gkehub {
     interface FeatureMembershipConfigmanagement {
         /**
-         * Binauthz configuration for the cluster.
+         * Binauthz configuration for the cluster. Structure is documented below.
          */
         binauthz?: pulumi.Input<inputs.gkehub.FeatureMembershipConfigmanagementBinauthz>;
         /**
-         * Config Sync configuration for the cluster.
+         * Config Sync configuration for the cluster. Structure is documented below.
          */
         configSync?: pulumi.Input<inputs.gkehub.FeatureMembershipConfigmanagementConfigSync>;
         /**
-         * Hierarchy Controller configuration for the cluster.
+         * Hierarchy Controller configuration for the cluster. Structure is documented below.
          */
         hierarchyController?: pulumi.Input<inputs.gkehub.FeatureMembershipConfigmanagementHierarchyController>;
         /**
-         * Policy Controller configuration for the cluster.
+         * Policy Controller configuration for the cluster. Structure is documented below.
          */
         policyController?: pulumi.Input<inputs.gkehub.FeatureMembershipConfigmanagementPolicyController>;
         /**
@@ -19974,7 +20014,7 @@ export declare namespace gkehub {
     interface FeatureMembershipConfigmanagementConfigSync {
         /**
          * -
-         * (Optional)
+         * (Optional) Structure is documented below.
          */
         git?: pulumi.Input<inputs.gkehub.FeatureMembershipConfigmanagementConfigSyncGit>;
         /**
@@ -25466,7 +25506,14 @@ export declare namespace vertex {
 }
 export declare namespace vpcaccess {
     interface ConnectorSubnet {
+        /**
+         * Subnet name (relative, not fully qualified). E.g. if the full subnet selfLink is
+         * https://compute.googleapis.com/compute/v1/projects/{project}/regions/{region}/subnetworks/{subnetName} the correct input for this field would be {subnetName}"
+         */
         name?: pulumi.Input<string>;
+        /**
+         * Project in which the subnet exists. If not set, this project is assumed to be the project for which the connector create request was issued.
+         */
         projectId?: pulumi.Input<string>;
     }
 }