@pulumi/gcp 5.25.0 → 6.0.0

package/types/output.d.ts

@@ -2988,7 +2988,7 @@ export declare namespace bigquery {
          * When set, configures hive partitioning
          * support. Not all storage formats support hive partitioning -- requesting hive
          * partitioning on an unsupported format will lead to an error, as will providing
-         * an invalid specification.
+         * an invalid specification. Structure is documented below.
          */
         hivePartitioningOptions?: outputs.bigquery.TableExternalDataConfigurationHivePartitioningOptions;
         /**
@@ -6073,6 +6073,10 @@ export declare namespace cloudrun {
          * TimeoutSeconds holds the max duration the instance is allowed for responding to a request.
          */
         timeoutSeconds: number;
+        /**
+         * Volume represents a named volume in a container.
+         * Structure is documented below.
+         */
         volumes?: outputs.cloudrun.ServiceTemplateSpecVolume[];
     }
     interface ServiceTemplateSpecContainer {
@@ -6138,6 +6142,11 @@ export declare namespace cloudrun {
          * Structure is documented below.
          */
         resources: outputs.cloudrun.ServiceTemplateSpecContainerResources;
+        /**
+         * Volume to mount into the container's filesystem.
+         * Only supports SecretVolumeSources.
+         * Structure is documented below.
+         */
         volumeMounts?: outputs.cloudrun.ServiceTemplateSpecContainerVolumeMount[];
         /**
          * -
@@ -6166,6 +6175,10 @@ export declare namespace cloudrun {
          * Defaults to "".
          */
         value?: string;
+        /**
+         * Source for the environment variable's value. Only supports secret_key_ref.
+         * Structure is documented below.
+         */
         valueFrom?: outputs.cloudrun.ServiceTemplateSpecContainerEnvValueFrom;
     }
     interface ServiceTemplateSpecContainerEnvFrom {
@@ -6244,7 +6257,7 @@ export declare namespace cloudrun {
         /**
          * Volume's name.
          */
-        name?: string;
+        name: string;
         /**
          * Protocol used on port. Defaults to TCP.
          */
@@ -6613,392 +6626,103 @@ export declare namespace composer {
     interface EnvironmentConfig {
         airflowUri: string;
         dagGcsPrefix: string;
-        /**
-         * The configuration settings for Cloud SQL instance used internally
-         * by Apache Airflow software. This field is supported for Cloud
-         * Composer environments in versions composer-1.*.*-airflow-*.*.*.
-         */
         databaseConfig: outputs.composer.EnvironmentConfigDatabaseConfig;
-        /**
-         * The encryption options for the Cloud Composer environment and its
-         * dependencies. This field is supported for Cloud Composer environments in
-         * versions composer-1.*.*-airflow-*.*.*.
-         */
         encryptionConfig: outputs.composer.EnvironmentConfigEncryptionConfig;
+        environmentSize?: string;
         gkeCluster: string;
-        /**
-         * The configuration settings for Cloud Composer maintenance window.
-         */
         maintenanceWindow: outputs.composer.EnvironmentConfigMaintenanceWindow;
-        /**
-         * The configuration used for the Kubernetes Engine cluster.  Structure is documented below.
-         */
         nodeConfig: outputs.composer.EnvironmentConfigNodeConfig;
-        /**
-         * The number of nodes in the Kubernetes Engine cluster that
-         * will be used to run this environment. This field is
-         * supported for Cloud Composer environments in versions
-         * composer-1.*.*-airflow-*.*.*.
-         */
         nodeCount: number;
-        /**
-         * The configuration used for the Private IP Cloud Composer environment. Structure is documented below.
-         */
         privateEnvironmentConfig: outputs.composer.EnvironmentConfigPrivateEnvironmentConfig;
-        /**
-         * The configuration settings for software inside the environment.  Structure is documented below.
-         */
         softwareConfig: outputs.composer.EnvironmentConfigSoftwareConfig;
-        /**
-         * The configuration settings for the Airflow web server App Engine instance.
-         * This field is supported for Cloud Composer environments in versions
-         * composer-1.*.*-airflow-*.*.*.
-         */
         webServerConfig: outputs.composer.EnvironmentConfigWebServerConfig;
         webServerNetworkAccessControl: outputs.composer.EnvironmentConfigWebServerNetworkAccessControl;
-        /**
-         * The Kubernetes workloads configuration for GKE cluster associated with the
-         * Cloud Composer environment. Supported for Cloud Composer environments in
-         * versions composer-2.*.*-airflow-*.*.* and newer.
-         */
         workloadsConfig: outputs.composer.EnvironmentConfigWorkloadsConfig;
     }
     interface EnvironmentConfigDatabaseConfig {
-        /**
-         * Machine type on which Airflow web server is running. It has to be one of: composer-n1-webserver-2,
-         * composer-n1-webserver-4 or composer-n1-webserver-8.
-         * Value custom is returned only in response, if Airflow web server parameters were
-         * manually changed to a non-standard values.
-         */
         machineType: string;
     }
     interface EnvironmentConfigEncryptionConfig {
-        /**
-         * Customer-managed Encryption Key available through Google's Key Management Service. It must
-         * be the fully qualified resource name,
-         * i.e. projects/project-id/locations/location/keyRings/keyring/cryptoKeys/key. Cannot be updated.
-         */
         kmsKeyName: string;
     }
     interface EnvironmentConfigMaintenanceWindow {
-        /**
-         * Maintenance window end time. It is used only to calculate the duration of the maintenance window.
-         * The value for end-time must be in the future, relative to 'start_time'.
-         */
         endTime: string;
-        /**
-         * Maintenance window recurrence. Format is a subset of RFC-5545 (https://tools.ietf.org/html/rfc5545) 'RRULE'.
-         * The only allowed values for 'FREQ' field are 'FREQ=DAILY' and 'FREQ=WEEKLY;BYDAY=...'.
-         * Example values: 'FREQ=WEEKLY;BYDAY=TU,WE', 'FREQ=DAILY'.
-         */
         recurrence: string;
-        /**
-         * Start time of the first recurrence of the maintenance window.
-         */
         startTime: string;
     }
     interface EnvironmentConfigNodeConfig {
-        /**
-         * The disk size in GB used for node VMs. Minimum size is 20GB.
-         * If unspecified, defaults to 100GB. Cannot be updated. This field is supported
-         * for Cloud Composer environments in versions composer-1.*.*-airflow-*.*.*.
-         */
         diskSizeGb: number;
         enableIpMasqAgent: boolean;
-        /**
-         * Configuration for controlling how IPs are allocated in the GKE cluster.
-         * Structure is documented below.
-         * Cannot be updated.
-         */
         ipAllocationPolicy: outputs.composer.EnvironmentConfigNodeConfigIpAllocationPolicy;
-        /**
-         * Machine type on which Airflow web server is running. It has to be one of: composer-n1-webserver-2,
-         * composer-n1-webserver-4 or composer-n1-webserver-8.
-         * Value custom is returned only in response, if Airflow web server parameters were
-         * manually changed to a non-standard values.
-         */
         machineType: string;
-        /**
-         * The maximum pods per node in the GKE cluster allocated during environment
-         * creation. Lowering this value reduces IP address consumption by the Cloud
-         * Composer Kubernetes cluster. This value can only be set if the environment is VPC-Native.
-         * The range of possible values is 8-110, and the default is 32.
-         * Cannot be updated. This field is supported for Cloud Composer environments
-         * in versions composer-1.*.*-airflow-*.*.*.
-         */
         maxPodsPerNode: number;
-        /**
-         * The Compute Engine network to be used for machine
-         * communications, specified as a self-link, relative resource name
-         * (e.g. "projects/{project}/global/networks/{network}"), by name.
-         */
         network: string;
-        /**
-         * The set of Google API scopes to be made available on all node
-         * VMs. Cannot be updated. If empty, defaults to
-         * `["https://www.googleapis.com/auth/cloud-platform"]`. This field is
-         * supported for Cloud Composer environments in versions
-         * composer-1.*.*-airflow-*.*.*.
-         */
         oauthScopes: string[];
-        /**
-         * The Google Cloud Platform Service Account to be used by the
-         * node VMs. If a service account is not specified, the "default"
-         * Compute Engine service account is used. Cannot be updated. If given,
-         * note that the service account must have `roles/composer.worker`
-         * for any GCP resources created under the Cloud Composer Environment.
-         */
         serviceAccount: string;
-        /**
-         * The Compute Engine subnetwork to be used for machine
-         * communications, , specified as a self-link, relative resource name (e.g.
-         * "projects/{project}/regions/{region}/subnetworks/{subnetwork}"), or by name. If subnetwork is provided,
-         * network must also be provided and the subnetwork must belong to the enclosing environment's project and region.
-         */
         subnetwork?: string;
-        /**
-         * The list of instance tags applied to all node VMs. Tags are
-         * used to identify valid sources or targets for network
-         * firewalls. Each tag within the list must comply with RFC1035.
-         * Cannot be updated. This field is supported for Cloud Composer
-         * environments in versions composer-1.*.*-airflow-*.*.*.
-         */
         tags?: string[];
-        /**
-         * The Compute Engine zone in which to deploy the VMs running the
-         * Apache Airflow software, specified as the zone name or
-         * relative resource name (e.g. "projects/{project}/zones/{zone}"). Must
-         * belong to the enclosing environment's project and region. This field is
-         * supported for Cloud Composer environments in versions
-         * composer-1.*.*-airflow-*.*.*.
-         */
         zone: string;
     }
     interface EnvironmentConfigNodeConfigIpAllocationPolicy {
-        /**
-         * The IP address range used to allocate IP addresses to pods in the cluster.
-         * For Cloud Composer environments in versions composer-1.*.*-airflow-*.*.*,
-         * this field is applicable only when `useIpAliases` is true.
-         * Set to blank to have GKE choose a range with the default size.
-         * Set to /netmask (e.g. /14) to have GKE choose a range with a specific netmask.
-         * Set to a CIDR notation (e.g. 10.96.0.0/14) from the RFC-1918 private networks
-         * (e.g. 10.0.0.0/8, 172.16.0.0/12, 192.168.0.0/16) to pick a specific range to use.
-         * Specify either `clusterSecondaryRangeName` or `clusterIpv4CidrBlock` but not both.
-         */
         clusterIpv4CidrBlock?: string;
-        /**
-         * The name of the cluster's secondary range used to allocate IP addresses to pods.
-         * Specify either `clusterSecondaryRangeName` or `clusterIpv4CidrBlock` but not both.
-         * For Cloud Composer environments in versions composer-1.*.*-airflow-*.*.*,
-         * this field is applicable only when `useIpAliases` is true.
-         */
         clusterSecondaryRangeName?: string;
-        /**
-         * The IP address range used to allocate IP addresses in this cluster.
-         * For Cloud Composer environments in versions composer-1.*.*-airflow-*.*.*,
-         * this field is applicable only when `useIpAliases` is true.
-         * Set to blank to have GKE choose a range with the default size.
-         * Set to /netmask (e.g. /14) to have GKE choose a range with a specific netmask.
-         * Set to a CIDR notation (e.g. 10.96.0.0/14) from the RFC-1918 private networks
-         * (e.g. 10.0.0.0/8, 172.16.0.0/12, 192.168.0.0/16) to pick a specific range to use.
-         * Specify either `servicesSecondaryRangeName` or `servicesIpv4CidrBlock` but not both.
-         */
         servicesIpv4CidrBlock?: string;
-        /**
-         * The name of the services' secondary range used to allocate IP addresses to the cluster.
-         * Specify either `servicesSecondaryRangeName` or `servicesIpv4CidrBlock` but not both.
-         * For Cloud Composer environments in versions composer-1.*.*-airflow-*.*.*,
-         * this field is applicable only when `useIpAliases` is true.
-         */
         servicesSecondaryRangeName?: string;
-        /**
-         * Whether or not to enable Alias IPs in the GKE cluster. If true, a VPC-native cluster is created.
-         * Defaults to true if the `ipAllocationPolicy` block is present in config.
-         * This field is only supported for Cloud Composer environments in versions
-         * composer-1.*.*-airflow-*.*.*. Environments in newer versions always use
-         * VPC-native GKE clusters.
-         */
-        useIpAliases: boolean;
+        useIpAliases?: boolean;
     }
     interface EnvironmentConfigPrivateEnvironmentConfig {
         cloudComposerNetworkIpv4CidrBlock: string;
-        /**
-         * The CIDR block from which IP range in tenant project will be reserved for Cloud SQL. Needs to be disjoint from `webServerIpv4CidrBlock`
-         */
         cloudSqlIpv4CidrBlock: string;
-        /**
-         * -
-         * If true, access to the public endpoint of the GKE cluster is denied.
-         * If this field is set to true, `ip_allocation_policy.use_ip_aliases` must
-         * be set to true for Cloud Composer environments in versions
-         * composer-1.*.*-airflow-*.*.*.
-         */
         enablePrivateEndpoint?: boolean;
         enablePrivatelyUsedPublicIps: boolean;
-        /**
-         * The IP range in CIDR notation to use for the hosted master network. This range is used
-         * for assigning internal IP addresses to the cluster master or set of masters and to the
-         * internal load balancer virtual IP. This range must not overlap with any other ranges
-         * in use within the cluster's network.
-         * If left blank, the default value of is used. See [documentation](https://cloud.google.com/composer/docs/how-to/managing/configuring-private-ip#defaults) for default values per region.
-         */
         masterIpv4CidrBlock: string;
-        /**
-         * The CIDR block from which IP range for web server will be reserved. Needs to be disjoint from `masterIpv4CidrBlock` and `cloudSqlIpv4CidrBlock`. This field is supported for Cloud Composer environments in versions composer-1.*.*-airflow-*.*.*.
-         */
         webServerIpv4CidrBlock: string;
     }
     interface EnvironmentConfigSoftwareConfig {
-        /**
-         * -
-         * (Optional) Apache Airflow configuration properties to override. Property keys contain the section and property names,
-         * separated by a hyphen, for example "core-dags_are_paused_at_creation".
-         */
         airflowConfigOverrides?: {
             [key: string]: string;
         };
-        /**
-         * Additional environment variables to provide to the Apache Airflow scheduler, worker, and webserver processes.
-         * Environment variable names must match the regular expression `[a-zA-Z_][a-zA-Z0-9_]*`.
-         * They cannot specify Apache Airflow software configuration overrides (they cannot match the regular expression
-         * `AIRFLOW__[A-Z0-9_]+__[A-Z0-9_]+`), and they cannot match any of the following reserved names:
-         * ```typescript
-         * import * as pulumi from "@pulumi/pulumi";
-         * ```
-         */
         envVariables?: {
             [key: string]: string;
         };
-        /**
-         * -
-         * The version of the software running in the environment. This encapsulates both the version of Cloud Composer
-         * functionality and the version of Apache Airflow. It must match the regular expression
-         * `composer-[0-9]+\.[0-9]+(\.[0-9]+)?-airflow-[0-9]+\.[0-9]+(\.[0-9]+.*)?`.
-         * The Cloud Composer portion of the version is a semantic version.
-         * The portion of the image version following 'airflow-' is an official Apache Airflow repository release name.
-         * See [documentation](https://cloud.google.com/composer/docs/reference/rest/v1beta1/projects.locations.environments#softwareconfig)
-         * for allowed release names.
-         */
         imageVersion: string;
-        /**
-         * Custom Python Package Index (PyPI) packages to be installed
-         * in the environment. Keys refer to the lowercase package name (e.g. "numpy"). Values are the lowercase extras and
-         * version specifier (e.g. "==1.12.0", "[devel,gcp_api]", "[devel]>=1.8.2, <1.9.2"). To specify a package without
-         * pinning it to a version specifier, use the empty string as the value.
-         */
         pypiPackages?: {
             [key: string]: string;
         };
-        /**
-         * -
-         * The major version of Python used to run the Apache Airflow scheduler, worker, and webserver processes.
-         * Can be set to '2' or '3'. If not specified, the default is '2'. Cannot be
-         * updated. This field is supported for Cloud Composer environments in versions
-         * composer-1.*.*-airflow-*.*.*. Environments in newer versions always use
-         * Python major version 3.
-         */
         pythonVersion: string;
-        /**
-         * -
-         * The number of schedulers for Airflow. This field is supported for Cloud Composer environments in versions composer-1.*.*-airflow-2.*.*.`
-         */
         schedulerCount: number;
     }
     interface EnvironmentConfigWebServerConfig {
-        /**
-         * Machine type on which Airflow web server is running. It has to be one of: composer-n1-webserver-2,
-         * composer-n1-webserver-4 or composer-n1-webserver-8.
-         * Value custom is returned only in response, if Airflow web server parameters were
-         * manually changed to a non-standard values.
-         */
         machineType: string;
     }
     interface EnvironmentConfigWebServerNetworkAccessControl {
-        /**
-         * -
-         * A collection of allowed IP ranges with descriptions. Structure is documented below.
-         */
         allowedIpRanges: outputs.composer.EnvironmentConfigWebServerNetworkAccessControlAllowedIpRange[];
     }
     interface EnvironmentConfigWebServerNetworkAccessControlAllowedIpRange {
-        /**
-         * A description of this ip range.
-         */
         description?: string;
-        /**
-         * IP address or range, defined using CIDR notation, of requests that this rule applies to.
-         * Examples: `192.168.1.1` or `192.168.0.0/16` or `2001:db8::/32` or `2001:0db8:0000:0042:0000:8a2e:0370:7334`.
-         * IP range prefixes should be properly truncated. For example,
-         * `1.2.3.4/24` should be truncated to `1.2.3.0/24`. Similarly, for IPv6, `2001:db8::1/32` should be truncated to `2001:db8::/32`.
-         */
         value: string;
     }
     interface EnvironmentConfigWorkloadsConfig {
-        /**
-         * Configuration for resources used by Airflow schedulers.
-         */
         scheduler?: outputs.composer.EnvironmentConfigWorkloadsConfigScheduler;
-        /**
-         * Configuration for resources used by Airflow web server.
-         */
         webServer?: outputs.composer.EnvironmentConfigWorkloadsConfigWebServer;
-        /**
-         * Configuration for resources used by Airflow workers.
-         */
         worker?: outputs.composer.EnvironmentConfigWorkloadsConfigWorker;
     }
     interface EnvironmentConfigWorkloadsConfigScheduler {
-        /**
-         * The number of schedulers.
-         */
         count?: number;
-        /**
-         * CPU request and limit for a single Airflow worker replica.
-         */
         cpu?: number;
-        /**
-         * Memory (GB) request and limit for a single Airflow worker replica.
-         */
         memoryGb?: number;
-        /**
-         * Storage (GB) request and limit for Airflow web server.
-         */
         storageGb?: number;
     }
     interface EnvironmentConfigWorkloadsConfigWebServer {
-        /**
-         * CPU request and limit for a single Airflow worker replica.
-         */
         cpu?: number;
-        /**
-         * Memory (GB) request and limit for a single Airflow worker replica.
-         */
         memoryGb?: number;
-        /**
-         * Storage (GB) request and limit for Airflow web server.
-         */
         storageGb?: number;
     }
     interface EnvironmentConfigWorkloadsConfigWorker {
-        /**
-         * CPU request and limit for a single Airflow worker replica.
-         */
         cpu?: number;
-        /**
-         * Maximum number of workers for autoscaling.
-         */
         maxCount?: number;
-        /**
-         * Memory (GB) request and limit for a single Airflow worker replica.
-         */
         memoryGb?: number;
-        /**
-         * Minimum number of workers for autoscaling.
-         */
         minCount?: number;
-        /**
-         * Storage (GB) request and limit for Airflow web server.
-         */
         storageGb?: number;
     }
     interface GetEnvironmentConfig {
@@ -7006,6 +6730,7 @@ export declare namespace composer {
         dagGcsPrefix: string;
         databaseConfigs: outputs.composer.GetEnvironmentConfigDatabaseConfig[];
         encryptionConfigs: outputs.composer.GetEnvironmentConfigEncryptionConfig[];
+        environmentSize: string;
         gkeCluster: string;
         maintenanceWindows: outputs.composer.GetEnvironmentConfigMaintenanceWindow[];
         nodeConfigs: outputs.composer.GetEnvironmentConfigNodeConfig[];
@@ -8216,7 +7941,7 @@ export declare namespace compute {
          */
         destIpRanges?: string[];
         /**
-         * Pairs of IP protocols and ports that the rule should match.
+         * Pairs of IP protocols and ports that the rule should match. Structure is documented below.
          */
         layer4Configs: outputs.compute.FirewallPolicyRuleMatchLayer4Config[];
         /**
@@ -9817,7 +9542,7 @@ export declare namespace compute {
          */
         maxUnavailablePercent?: number;
         /**
-         * , Minimum number of seconds to wait for after a newly created instance becomes available. This value must be from range [0, 3600]
+         * ), Minimum number of seconds to wait for after a newly created instance becomes available. This value must be from range [0, 3600]
          */
         minReadySec?: number;
         /**
@@ -11835,7 +11560,7 @@ export declare namespace compute {
          */
         maxUnavailablePercent?: number;
         /**
-         * , Minimum number of seconds to wait for after a newly created instance becomes available. This value must be from range [0, 3600]
+         * ), Minimum number of seconds to wait for after a newly created instance becomes available. This value must be from range [0, 3600]
          */
         minReadySec?: number;
         /**
@@ -13505,17 +13230,17 @@ export declare namespace compute {
     }
     interface SecurityPolicyAdaptiveProtectionConfig {
         /**
-         * ) Configuration for [Google Cloud Armor Adaptive Protection Layer 7 DDoS Defense](https://cloud.google.com/armor/docs/adaptive-protection-overview?hl=en). Structure is documented below.
+         * Configuration for [Google Cloud Armor Adaptive Protection Layer 7 DDoS Defense](https://cloud.google.com/armor/docs/adaptive-protection-overview?hl=en). Structure is documented below.
          */
         layer7DdosDefenseConfig?: outputs.compute.SecurityPolicyAdaptiveProtectionConfigLayer7DdosDefenseConfig;
     }
     interface SecurityPolicyAdaptiveProtectionConfigLayer7DdosDefenseConfig {
         /**
-         * ) If set to true, enables CAAP for L7 DDoS detection.
+         * If set to true, enables CAAP for L7 DDoS detection.
          */
         enable?: boolean;
         /**
-         * ) Rule visibility can be one of the following: STANDARD - opaque rules. (default) PREMIUM - transparent rules.
+         * Rule visibility can be one of the following: STANDARD - opaque rules. (default) PREMIUM - transparent rules.
          */
         ruleVisibility?: string;
     }
@@ -15902,8 +15627,7 @@ export declare namespace container {
     }
     interface ClusterLoggingConfig {
         /**
-         * The GKE components exposing logs. Only `SYSTEM_COMPONENTS`
-         * is supported.
+         * The GKE components exposing logs. `SYSTEM_COMPONENTS` and in beta provider, both `SYSTEM_COMPONENTS` and `WORKLOADS` are supported.
          */
         enableComponents: string[];
     }
@@ -15945,16 +15669,6 @@ export declare namespace container {
         clientCertificateConfig: outputs.container.ClusterMasterAuthClientCertificateConfig;
         clientKey: string;
         clusterCaCertificate: string;
-        /**
-         * The password to use for HTTP basic authentication when accessing
-         * the Kubernetes master endpoint. This has been deprecated as of GKE 1.19.
-         */
-        password?: string;
-        /**
-         * The username to use for HTTP basic authentication when accessing
-         * the Kubernetes master endpoint. If not present basic auth will be disabled. This has been deprecated as of GKE 1.19.
-         */
-        username?: string;
     }
     interface ClusterMasterAuthClientCertificateConfig {
         issueClientCertificate: boolean;
@@ -15979,8 +15693,7 @@ export declare namespace container {
     }
     interface ClusterMonitoringConfig {
         /**
-         * The GKE components exposing logs. Only `SYSTEM_COMPONENTS`
-         * is supported.
+         * The GKE components exposing logs. `SYSTEM_COMPONENTS` and in beta provider, both `SYSTEM_COMPONENTS` and `WORKLOADS` are supported.
          */
         enableComponents: string[];
     }
@@ -16129,6 +15842,10 @@ export declare namespace container {
          * The number of the guest accelerator cards exposed to this instance.
          */
         count: number;
+        /**
+         * Size of partitions to create on the GPU. Valid values are described in the NVIDIA mig [user guide](https://docs.nvidia.com/datacenter/tesla/mig-user-guide/#partitioning).
+         */
+        gpuPartitionSize?: string;
         /**
          * The accelerator type resource to expose to this instance. E.g. `nvidia-tesla-k80`.
          */
@@ -16203,18 +15920,7 @@ export declare namespace container {
          * * GCE_METADATA: Expose all Compute Engine metadata to pods.
          * * GKE_METADATA: Run the GKE Metadata Server on this node. The GKE Metadata Server exposes a metadata API to workloads that is compatible with the V1 Compute Metadata APIs exposed by the Compute Engine and App Engine Metadata Servers. This feature can only be enabled if [workload identity](https://cloud.google.com/kubernetes-engine/docs/how-to/workload-identity) is enabled at the cluster level.
          */
-        mode?: string;
-        /**
-         * How to expose the node metadata to the workload running on the node. This is deprecated in favor of `mode`
-         * Accepted values are:
-         * * UNSPECIFIED: Not Set
-         * * SECURE: Prevent workloads not in hostNetwork from accessing certain VM metadata, specifically kube-env, which contains Kubelet credentials, and the instance identity token. See [Metadata Concealment](https://cloud.google.com/kubernetes-engine/docs/how-to/metadata-proxy) documentation.
-         * * EXPOSE: Expose all VM metadata to pods.
-         * * GKE_METADATA_SERVER: Enables [workload identity](https://cloud.google.com/kubernetes-engine/docs/how-to/workload-identity) on the node.
-         *
-         * @deprecated Deprecated in favor of mode.
-         */
-        nodeMetadata: string;
+        mode: string;
     }
     interface ClusterNodePool {
         autoscaling?: outputs.container.ClusterNodePoolAutoscaling;
@@ -16227,11 +15933,8 @@ export declare namespace container {
          * `removeDefaultNodePool` to `true`.
          */
         initialNodeCount: number;
-        /**
-         * List of instance group URLs which have been assigned
-         * to the cluster.
-         */
         instanceGroupUrls: string[];
+        managedInstanceGroupUrls: string[];
         management: outputs.container.ClusterNodePoolManagement;
         maxPodsPerNode: number;
         /**
@@ -16241,8 +15944,8 @@ export declare namespace container {
         name: string;
         namePrefix: string;
         /**
-         * ) Configuration for
-         * [Adding Pod IP address ranges](https://cloud.google.com/kubernetes-engine/docs/how-to/multi-pod-cidr)) to the node pool.
+         * Configuration for
+         * [Adding Pod IP address ranges](https://cloud.google.com/kubernetes-engine/docs/how-to/multi-pod-cidr)) to the node pool. Structure is documented below
          */
         networkConfig: outputs.container.ClusterNodePoolNetworkConfig;
         /**
@@ -16274,15 +15977,15 @@ export declare namespace container {
     }
     interface ClusterNodePoolNetworkConfig {
         /**
-         * ) Whether to create a new range for pod IPs in this node pool. Defaults are provided for `podRange` and `podIpv4CidrBlock` if they are not specified.
+         * Whether to create a new range for pod IPs in this node pool. Defaults are provided for `podRange` and `podIpv4CidrBlock` if they are not specified.
          */
         createPodRange?: boolean;
         /**
-         * ) The IP address range for pod IPs in this node pool. Only applicable if createPodRange is true. Set to blank to have a range chosen with the default size. Set to /netmask (e.g. /14) to have a range chosen with a specific netmask. Set to a CIDR notation (e.g. 10.96.0.0/14) to pick a specific range to use.
+         * The IP address range for pod IPs in this node pool. Only applicable if createPodRange is true. Set to blank to have a range chosen with the default size. Set to /netmask (e.g. /14) to have a range chosen with a specific netmask. Set to a CIDR notation (e.g. 10.96.0.0/14) to pick a specific range to use.
          */
         podIpv4CidrBlock: string;
         /**
-         * ) The ID of the secondary range for pod IPs. If `createPodRange` is true, this ID is used for the new range. If `createPodRange` is false, uses an existing secondary range with this ID.
+         * The ID of the secondary range for pod IPs. If `createPodRange` is true, this ID is used for the new range. If `createPodRange` is false, uses an existing secondary range with this ID.
          */
         podRange: string;
     }
@@ -16420,6 +16123,10 @@ export declare namespace container {
          * The number of the guest accelerator cards exposed to this instance.
          */
         count: number;
+        /**
+         * Size of partitions to create on the GPU. Valid values are described in the NVIDIA mig [user guide](https://docs.nvidia.com/datacenter/tesla/mig-user-guide/#partitioning).
+         */
+        gpuPartitionSize?: string;
         /**
          * The accelerator type resource to expose to this instance. E.g. `nvidia-tesla-k80`.
          */
@@ -16494,18 +16201,7 @@ export declare namespace container {
          * * GCE_METADATA: Expose all Compute Engine metadata to pods.
          * * GKE_METADATA: Run the GKE Metadata Server on this node. The GKE Metadata Server exposes a metadata API to workloads that is compatible with the V1 Compute Metadata APIs exposed by the Compute Engine and App Engine Metadata Servers. This feature can only be enabled if [workload identity](https://cloud.google.com/kubernetes-engine/docs/how-to/workload-identity) is enabled at the cluster level.
          */
-        mode?: string;
-        /**
-         * How to expose the node metadata to the workload running on the node. This is deprecated in favor of `mode`
-         * Accepted values are:
-         * * UNSPECIFIED: Not Set
-         * * SECURE: Prevent workloads not in hostNetwork from accessing certain VM metadata, specifically kube-env, which contains Kubelet credentials, and the instance identity token. See [Metadata Concealment](https://cloud.google.com/kubernetes-engine/docs/how-to/metadata-proxy) documentation.
-         * * EXPOSE: Expose all VM metadata to pods.
-         * * GKE_METADATA_SERVER: Enables [workload identity](https://cloud.google.com/kubernetes-engine/docs/how-to/workload-identity) on the node.
-         *
-         * @deprecated Deprecated in favor of mode.
-         */
-        nodeMetadata: string;
+        mode: string;
     }
     interface ClusterNodePoolUpgradeSettings {
         maxSurge: number;
@@ -16628,9 +16324,9 @@ export declare namespace container {
     }
     interface ClusterWorkloadIdentityConfig {
         /**
-         * Currently, the only supported identity namespace is the project's default.
+         * The workload pool to attach all Kubernetes service accounts to. Currently, the only supported identity namespace is the project of the cluster.
          */
-        identityNamespace: string;
+        workloadPool?: string;
     }
     interface GetClusterAddonsConfig {
         cloudrunConfigs: outputs.container.GetClusterAddonsConfigCloudrunConfig[];
@@ -16742,8 +16438,6 @@ export declare namespace container {
         clientCertificateConfigs: outputs.container.GetClusterMasterAuthClientCertificateConfig[];
         clientKey: string;
         clusterCaCertificate: string;
-        password: string;
-        username: string;
     }
     interface GetClusterMasterAuthClientCertificateConfig {
         issueClientCertificate: boolean;
@@ -16794,6 +16488,7 @@ export declare namespace container {
     }
     interface GetClusterNodeConfigGuestAccelerator {
         count: number;
+        gpuPartitionSize: string;
         type: string;
     }
     interface GetClusterNodeConfigKubeletConfig {
@@ -16820,12 +16515,12 @@ export declare namespace container {
     }
     interface GetClusterNodeConfigWorkloadMetadataConfig {
         mode: string;
-        nodeMetadata: string;
     }
     interface GetClusterNodePool {
         autoscalings: outputs.container.GetClusterNodePoolAutoscaling[];
         initialNodeCount: number;
         instanceGroupUrls: string[];
+        managedInstanceGroupUrls: string[];
         managements: outputs.container.GetClusterNodePoolManagement[];
         maxPodsPerNode: number;
         /**
@@ -16885,6 +16580,7 @@ export declare namespace container {
     }
     interface GetClusterNodePoolNodeConfigGuestAccelerator {
         count: number;
+        gpuPartitionSize: string;
         type: string;
     }
     interface GetClusterNodePoolNodeConfigKubeletConfig {
@@ -16911,7 +16607,6 @@ export declare namespace container {
     }
     interface GetClusterNodePoolNodeConfigWorkloadMetadataConfig {
         mode: string;
-        nodeMetadata: string;
     }
     interface GetClusterNodePoolUpgradeSetting {
         maxSurge: number;
@@ -16954,7 +16649,7 @@ export declare namespace container {
         enabled: boolean;
     }
     interface GetClusterWorkloadIdentityConfig {
-        identityNamespace: string;
+        workloadPool: string;
     }
     interface NodePoolAutoscaling {
         /**
@@ -17014,6 +16709,7 @@ export declare namespace container {
     }
     interface NodePoolNodeConfigGuestAccelerator {
         count: number;
+        gpuPartitionSize?: string;
         type: string;
     }
     interface NodePoolNodeConfigKubeletConfig {
@@ -17039,11 +16735,7 @@ export declare namespace container {
         value: string;
     }
     interface NodePoolNodeConfigWorkloadMetadataConfig {
-        mode?: string;
-        /**
-         * @deprecated Deprecated in favor of mode.
-         */
-        nodeMetadata: string;
+        mode: string;
     }
     interface NodePoolUpgradeSettings {
         /**
@@ -18521,7 +18213,7 @@ export declare namespace dataproc {
         lifecycleConfig?: outputs.dataproc.ClusterClusterConfigLifecycleConfig;
         /**
          * The Google Compute Engine config settings for the master instances
-         * in a cluster.. Structure defined below.
+         * in a cluster. Structure defined below.
          */
         masterConfig: outputs.dataproc.ClusterClusterConfigMasterConfig;
         /**
@@ -18565,7 +18257,7 @@ export declare namespace dataproc {
         tempBucket: string;
         /**
          * The Google Compute Engine config settings for the worker instances
-         * in a cluster.. Structure defined below.
+         * in a cluster. Structure defined below.
          */
         workerConfig: outputs.dataproc.ClusterClusterConfigWorkerConfig;
     }
@@ -21248,6 +20940,13 @@ export declare namespace filestore {
         squashMode?: string;
     }
     interface InstanceNetwork {
+        /**
+         * The network connect mode of the Filestore instance.
+         * If not provided, the connect mode defaults to
+         * DIRECT_PEERING.
+         * Default value is `DIRECT_PEERING`.
+         * Possible values are `DIRECT_PEERING` and `PRIVATE_SERVICE_ACCESS`.
+         */
         connectMode?: string;
         /**
          * -
@@ -21537,19 +21236,19 @@ export declare namespace gameservices {
 export declare namespace gkehub {
     interface FeatureMembershipConfigmanagement {
         /**
-         * Binauthz configuration for the cluster.
+         * Binauthz configuration for the cluster. Structure is documented below.
          */
         binauthz?: outputs.gkehub.FeatureMembershipConfigmanagementBinauthz;
         /**
-         * Config Sync configuration for the cluster.
+         * Config Sync configuration for the cluster. Structure is documented below.
          */
         configSync?: outputs.gkehub.FeatureMembershipConfigmanagementConfigSync;
         /**
-         * Hierarchy Controller configuration for the cluster.
+         * Hierarchy Controller configuration for the cluster. Structure is documented below.
          */
         hierarchyController?: outputs.gkehub.FeatureMembershipConfigmanagementHierarchyController;
         /**
-         * Policy Controller configuration for the cluster.
+         * Policy Controller configuration for the cluster. Structure is documented below.
          */
         policyController?: outputs.gkehub.FeatureMembershipConfigmanagementPolicyController;
         /**
@@ -21566,7 +21265,7 @@ export declare namespace gkehub {
     interface FeatureMembershipConfigmanagementConfigSync {
         /**
          * -
-         * (Optional)
+         * (Optional) Structure is documented below.
          */
         git?: outputs.gkehub.FeatureMembershipConfigmanagementConfigSyncGit;
         /**
@@ -22376,9 +22075,7 @@ export declare namespace kms {
          */
         algorithm: string;
         /**
-         * The protection level to use when creating a version based on this template.
-         * Default value is `SOFTWARE`.
-         * Possible values are `SOFTWARE` and `HSM`.
+         * The protection level to use when creating a version based on this template. Possible values include "SOFTWARE", "HSM", "EXTERNAL". Defaults to "SOFTWARE".
          */
         protectionLevel?: string;
     }
@@ -26510,41 +26207,22 @@ export declare namespace sql {
          * This specifies when the instance should be
          * active. Can be either `ALWAYS`, `NEVER` or `ON_DEMAND`.
          */
-        activationPolicy: string;
-        /**
-         * This property is only applicable to First Generation instances.
-         * First Generation instances are now deprecated, see [here](https://cloud.google.com/sql/docs/mysql/upgrade-2nd-gen)
-         * for information on how to upgrade to Second Generation instances.
-         * A list of Google App Engine (GAE) project names that are allowed to access this instance.
-         *
-         * @deprecated This property is only applicable to First Generation instances, and First Generation instances are now deprecated.
-         */
-        authorizedGaeApplications: string[];
+        activationPolicy?: string;
         /**
          * The availability type of the Cloud SQL
          * instance, high availability (`REGIONAL`) or single zone (`ZONAL`).' For MySQL
          * instances, ensure that `settings.backup_configuration.enabled` and
          * `settings.backup_configuration.binary_log_enabled` are both set to `true`.
          */
-        availabilityType: string;
+        availabilityType?: string;
         backupConfiguration: outputs.sql.DatabaseInstanceSettingsBackupConfiguration;
         /**
          * The name of server instance collation.
          */
         collation?: string;
-        /**
-         * This property is only applicable to First Generation instances.
-         * First Generation instances are now deprecated, see [here](https://cloud.google.com/sql/docs/mysql/upgrade-2nd-gen)
-         * for information on how to upgrade to Second Generation instances.
-         * Specific to read instances, indicates
-         * when crash-safe replication flags are enabled.
-         *
-         * @deprecated This property is only applicable to First Generation instances, and First Generation instances are now deprecated.
-         */
-        crashSafeReplication: boolean;
         databaseFlags?: outputs.sql.DatabaseInstanceSettingsDatabaseFlag[];
         /**
-         * Configuration to increase storage size automatically.  Note that future `pulumi apply` calls will attempt to resize the disk to the value specified in `diskSize` - if this is set, do not set `diskSize`.
+         * Configuration to increase storage size automatically.  Note that future apply calls will attempt to resize the disk to the value specified in `diskSize` - if this is set, do not set `diskSize`.
          */
         diskAutoresize?: boolean;
         diskAutoresizeLimit?: number;
@@ -26555,7 +26233,7 @@ export declare namespace sql {
         /**
          * The type of data disk: PD_SSD or PD_HDD.
          */
-        diskType: string;
+        diskType?: string;
         insightsConfig?: outputs.sql.DatabaseInstanceSettingsInsightsConfig;
         ipConfiguration: outputs.sql.DatabaseInstanceSettingsIpConfiguration;
         locationPreference: outputs.sql.DatabaseInstanceSettingsLocationPreference;
@@ -26564,15 +26242,6 @@ export declare namespace sql {
          * Pricing plan for this instance, can only be `PER_USE`.
          */
         pricingPlan?: string;
-        /**
-         * This property is only applicable to First Generation instances.
-         * First Generation instances are now deprecated, see [here](https://cloud.google.com/sql/docs/mysql/upgrade-2nd-gen)
-         * for information on how to upgrade to Second Generation instances.
-         * Replication type for this instance, can be one of `ASYNCHRONOUS` or `SYNCHRONOUS`.
-         *
-         * @deprecated This property is only applicable to First Generation instances, and First Generation instances are now deprecated.
-         */
-        replicationType: string;
         /**
          * The machine type to use. See [tiers](https://cloud.google.com/sql/docs/admin-api/v1beta4/tiers)
          * for more details and supported versions. Postgres supports only shared-core machine types,
@@ -26787,11 +26456,9 @@ export declare namespace sql {
     }
     interface GetDatabaseInstanceSetting {
         activationPolicy: string;
-        authorizedGaeApplications: string[];
         availabilityType: string;
         backupConfigurations: outputs.sql.GetDatabaseInstanceSettingBackupConfiguration[];
         collation: string;
-        crashSafeReplication: boolean;
         databaseFlags: outputs.sql.GetDatabaseInstanceSettingDatabaseFlag[];
         diskAutoresize: boolean;
         diskAutoresizeLimit: number;
@@ -26802,7 +26469,6 @@ export declare namespace sql {
         locationPreferences: outputs.sql.GetDatabaseInstanceSettingLocationPreference[];
         maintenanceWindows: outputs.sql.GetDatabaseInstanceSettingMaintenanceWindow[];
         pricingPlan: string;
-        replicationType: string;
         tier: string;
         userLabels: {
             [key: string]: string;
@@ -27338,7 +27004,14 @@ export declare namespace vertex {
 }
 export declare namespace vpcaccess {
     interface ConnectorSubnet {
+        /**
+         * Subnet name (relative, not fully qualified). E.g. if the full subnet selfLink is
+         * https://compute.googleapis.com/compute/v1/projects/{project}/regions/{region}/subnetworks/{subnetName} the correct input for this field would be {subnetName}"
+         */
         name?: string;
+        /**
+         * Project in which the subnet exists. If not set, this project is assumed to be the project for which the connector create request was issued.
+         */
         projectId: string;
     }
 }