@pulumi/gcp 6.14.0 → 6.15.0

package/types/output.d.ts

@@ -4891,6 +4891,89 @@ export declare namespace certificateauthority {
          */
         objectIdPaths: number[];
     }
+    interface GetAuthorityAccessUrl {
+        caCertificateAccessUrl: string;
+        crlAccessUrls: string[];
+    }
+    interface GetAuthorityConfig {
+        subjectConfigs: outputs.certificateauthority.GetAuthorityConfigSubjectConfig[];
+        x509Configs: outputs.certificateauthority.GetAuthorityConfigX509Config[];
+    }
+    interface GetAuthorityConfigSubjectConfig {
+        subjectAltNames: outputs.certificateauthority.GetAuthorityConfigSubjectConfigSubjectAltName[];
+        subjects: outputs.certificateauthority.GetAuthorityConfigSubjectConfigSubject[];
+    }
+    interface GetAuthorityConfigSubjectConfigSubject {
+        commonName: string;
+        countryCode: string;
+        locality: string;
+        organization: string;
+        organizationalUnit: string;
+        postalCode: string;
+        province: string;
+        streetAddress: string;
+    }
+    interface GetAuthorityConfigSubjectConfigSubjectAltName {
+        dnsNames: string[];
+        emailAddresses: string[];
+        ipAddresses: string[];
+        uris: string[];
+    }
+    interface GetAuthorityConfigX509Config {
+        additionalExtensions: outputs.certificateauthority.GetAuthorityConfigX509ConfigAdditionalExtension[];
+        aiaOcspServers: string[];
+        caOptions: outputs.certificateauthority.GetAuthorityConfigX509ConfigCaOption[];
+        keyUsages: outputs.certificateauthority.GetAuthorityConfigX509ConfigKeyUsage[];
+        policyIds: outputs.certificateauthority.GetAuthorityConfigX509ConfigPolicyId[];
+    }
+    interface GetAuthorityConfigX509ConfigAdditionalExtension {
+        critical: boolean;
+        objectIds: outputs.certificateauthority.GetAuthorityConfigX509ConfigAdditionalExtensionObjectId[];
+        value: string;
+    }
+    interface GetAuthorityConfigX509ConfigAdditionalExtensionObjectId {
+        objectIdPaths: number[];
+    }
+    interface GetAuthorityConfigX509ConfigCaOption {
+        isCa: boolean;
+        maxIssuerPathLength: number;
+        nonCa: boolean;
+        zeroMaxIssuerPathLength: boolean;
+    }
+    interface GetAuthorityConfigX509ConfigKeyUsage {
+        baseKeyUsages: outputs.certificateauthority.GetAuthorityConfigX509ConfigKeyUsageBaseKeyUsage[];
+        extendedKeyUsages: outputs.certificateauthority.GetAuthorityConfigX509ConfigKeyUsageExtendedKeyUsage[];
+        unknownExtendedKeyUsages: outputs.certificateauthority.GetAuthorityConfigX509ConfigKeyUsageUnknownExtendedKeyUsage[];
+    }
+    interface GetAuthorityConfigX509ConfigKeyUsageBaseKeyUsage {
+        certSign: boolean;
+        contentCommitment: boolean;
+        crlSign: boolean;
+        dataEncipherment: boolean;
+        decipherOnly: boolean;
+        digitalSignature: boolean;
+        encipherOnly: boolean;
+        keyAgreement: boolean;
+        keyEncipherment: boolean;
+    }
+    interface GetAuthorityConfigX509ConfigKeyUsageExtendedKeyUsage {
+        clientAuth: boolean;
+        codeSigning: boolean;
+        emailProtection: boolean;
+        ocspSigning: boolean;
+        serverAuth: boolean;
+        timeStamping: boolean;
+    }
+    interface GetAuthorityConfigX509ConfigKeyUsageUnknownExtendedKeyUsage {
+        objectIdPaths: number[];
+    }
+    interface GetAuthorityConfigX509ConfigPolicyId {
+        objectIdPaths: number[];
+    }
+    interface GetAuthorityKeySpec {
+        algorithm: string;
+        cloudKmsKeyVersion: string;
+    }
 }
 export declare namespace cloudasset {
     interface FolderFeedCondition {
@@ -5560,7 +5643,7 @@ export declare namespace cloudbuild {
         /**
          * If true, workers are created without any public address, which prevents network egress to public IPs.
          */
-        noExternalIp?: boolean;
+        noExternalIp: boolean;
     }
 }
 export declare namespace cloudfunctions {
@@ -5696,6 +5779,209 @@ export declare namespace cloudfunctions {
         url: string;
     }
 }
+export declare namespace cloudfunctionsv2 {
+    interface FunctionBuildConfig {
+        /**
+         * -
+         * The Cloud Build name of the latest successful
+         * deployment of the function.
+         */
+        build: string;
+        /**
+         * User managed repository created in Artifact Registry optionally with a customer managed encryption key.
+         */
+        dockerRepository?: string;
+        /**
+         * The name of the function (as defined in source code) that will be executed.
+         * Defaults to the resource name suffix, if not specified. For backward
+         * compatibility, if function with given name is not found, then the system
+         * will try to use function named "function". For Node.js this is name of a
+         * function exported by the module specified in source_location.
+         */
+        entryPoint?: string;
+        /**
+         * Environment variables that shall be available during function execution.
+         */
+        environmentVariables: {
+            [key: string]: string;
+        };
+        /**
+         * The runtime in which to run the function. Required when deploying a new
+         * function, optional when updating an existing function.
+         */
+        runtime?: string;
+        /**
+         * The location of the function source code.
+         * Structure is documented below.
+         */
+        source?: outputs.cloudfunctionsv2.FunctionBuildConfigSource;
+        /**
+         * Name of the Cloud Build Custom Worker Pool that should be used to build the function.
+         */
+        workerPool?: string;
+    }
+    interface FunctionBuildConfigSource {
+        /**
+         * If provided, get the source from this location in a Cloud Source Repository.
+         * Structure is documented below.
+         */
+        repoSource?: outputs.cloudfunctionsv2.FunctionBuildConfigSourceRepoSource;
+        /**
+         * If provided, get the source from this location in Google Cloud Storage.
+         * Structure is documented below.
+         */
+        storageSource?: outputs.cloudfunctionsv2.FunctionBuildConfigSourceStorageSource;
+    }
+    interface FunctionBuildConfigSourceRepoSource {
+        /**
+         * Regex matching branches to build.
+         */
+        branchName?: string;
+        /**
+         * Regex matching tags to build.
+         */
+        commitSha?: string;
+        /**
+         * Directory, relative to the source root, in which to run the build.
+         */
+        dir?: string;
+        /**
+         * Only trigger a build if the revision regex does
+         * NOT match the revision regex.
+         */
+        invertRegex?: boolean;
+        /**
+         * ID of the project that owns the Cloud Source Repository. If omitted, the
+         * project ID requesting the build is assumed.
+         */
+        projectId?: string;
+        /**
+         * Name of the Cloud Source Repository.
+         */
+        repoName?: string;
+        /**
+         * Regex matching tags to build.
+         */
+        tagName?: string;
+    }
+    interface FunctionBuildConfigSourceStorageSource {
+        /**
+         * Google Cloud Storage bucket containing the source
+         */
+        bucket?: string;
+        /**
+         * Google Cloud Storage generation for the object. If the generation
+         * is omitted, the latest generation will be used.
+         */
+        generation?: number;
+        /**
+         * Google Cloud Storage object containing the source.
+         */
+        object?: string;
+    }
+    interface FunctionEventTrigger {
+        /**
+         * Required. The type of event to observe.
+         */
+        eventType?: string;
+        /**
+         * The name of a Pub/Sub topic in the same project that will be used
+         * as the transport topic for the event delivery.
+         */
+        pubsubTopic?: string;
+        /**
+         * Describes the retry policy in case of function's execution failure.
+         * Retried execution is charged as any other execution.
+         * Possible values are `RETRY_POLICY_UNSPECIFIED`, `RETRY_POLICY_DO_NOT_RETRY`, and `RETRY_POLICY_RETRY`.
+         */
+        retryPolicy?: string;
+        /**
+         * -
+         * The email of the service account for this function.
+         */
+        serviceAccountEmail: string;
+        /**
+         * -
+         * The resource name of the Eventarc trigger.
+         */
+        trigger: string;
+        /**
+         * The region that the trigger will be in. The trigger will only receive
+         * events originating in this region. It can be the same
+         * region as the function, a different region or multi-region, or the global
+         * region. If not provided, defaults to the same region as the function.
+         */
+        triggerRegion?: string;
+    }
+    interface FunctionServiceConfig {
+        /**
+         * Whether 100% of traffic is routed to the latest revision. Defaults to true.
+         */
+        allTrafficOnLatestRevision?: boolean;
+        /**
+         * The amount of memory available for a function.
+         * Defaults to 256M. Supported units are k, M, G, Mi, Gi. If no unit is
+         * supplied the value is interpreted as bytes.
+         */
+        availableMemory?: string;
+        /**
+         * Environment variables that shall be available during function execution.
+         */
+        environmentVariables?: {
+            [key: string]: string;
+        };
+        /**
+         * -
+         * URIs of the Service deployed
+         */
+        gcfUri: string;
+        /**
+         * Available ingress settings. Defaults to "ALLOW_ALL" if unspecified.
+         * Default value is `ALLOW_ALL`.
+         * Possible values are `ALLOW_ALL`, `ALLOW_INTERNAL_ONLY`, and `ALLOW_INTERNAL_AND_GCLB`.
+         */
+        ingressSettings?: string;
+        /**
+         * The limit on the maximum number of function instances that may coexist at a
+         * given time.
+         */
+        maxInstanceCount?: number;
+        /**
+         * The limit on the minimum number of function instances that may coexist at a
+         * given time.
+         */
+        minInstanceCount?: number;
+        /**
+         * Name of the service associated with a Function.
+         */
+        service: string;
+        /**
+         * -
+         * The email of the service account for this function.
+         */
+        serviceAccountEmail: string;
+        /**
+         * The function execution timeout. Execution is considered failed and
+         * can be terminated if the function is not completed at the end of the
+         * timeout period. Defaults to 60 seconds.
+         */
+        timeoutSeconds?: number;
+        /**
+         * -
+         * URI of the Service deployed.
+         */
+        uri: string;
+        /**
+         * The Serverless VPC Access connector that this cloud function can connect to.
+         */
+        vpcConnector?: string;
+        /**
+         * Available egress settings.
+         * Possible values are `VPC_CONNECTOR_EGRESS_SETTINGS_UNSPECIFIED`, `PRIVATE_RANGES_ONLY`, and `ALL_TRAFFIC`.
+         */
+        vpcConnectorEgressSettings?: string;
+    }
+}
 export declare namespace cloudidentity {
     interface GetGroupMembershipsMembership {
         createTime: string;
@@ -8604,6 +8890,9 @@ export declare namespace compute {
          * Whether the instance is preemptible.
          */
         preemptible: boolean;
+        /**
+         * (Beta) Describe the type of preemptible VM.
+         */
         provisioningModel: string;
     }
     interface GetInstanceSchedulingNodeAffinity {
@@ -8869,6 +9158,9 @@ export declare namespace compute {
          * [here](https://cloud.google.com/compute/docs/instances/preemptible).
          */
         preemptible: boolean;
+        /**
+         * (Beta) Describe the type of preemptible VM.
+         */
         provisioningModel: string;
     }
     interface GetInstanceTemplateSchedulingNodeAffinity {
@@ -8984,6 +9276,7 @@ export declare namespace compute {
         advertisedGroups: string[];
         advertisedIpRanges: outputs.compute.GetRouterBgpAdvertisedIpRange[];
         asn: number;
+        keepaliveInterval: number;
     }
     interface GetRouterBgpAdvertisedIpRange {
         description: string;
@@ -9416,7 +9709,7 @@ export declare namespace compute {
         deviceName: string;
         /**
          * A 256-bit [customer-supplied encryption key]
-         * (https://cloud.google.com/compute/docs/disks/customer-supplied-encryption),
+         * (<https://cloud.google.com/compute/docs/disks/customer-supplied-encryption>),
          * encoded in [RFC 4648 base64](https://tools.ietf.org/html/rfc4648#section-4)
          * to encrypt this disk. Only one of `kmsKeySelfLink` and `diskEncryptionKeyRaw` may be set.
          */
@@ -9453,7 +9746,7 @@ export declare namespace compute {
         deviceName: string;
         /**
          * A 256-bit [customer-supplied encryption key]
-         * (https://cloud.google.com/compute/docs/disks/customer-supplied-encryption),
+         * (<https://cloud.google.com/compute/docs/disks/customer-supplied-encryption>),
          * encoded in [RFC 4648 base64](https://tools.ietf.org/html/rfc4648#section-4)
          * to encrypt this disk. Only one of `kmsKeySelfLink` and `diskEncryptionKeyRaw` may be set.
          */
@@ -10082,6 +10375,12 @@ export declare namespace compute {
          * set to false.  Defaults to false.
          */
         preemptible?: boolean;
+        /**
+         * Describe the type of preemptible VM. This field accepts the value `STANDARD` or `SPOT`. If the value is `STANDARD`, there will be no discount. If this   is set to `SPOT`,
+         * `preemptible` should be `true` and `autoRestart` should be
+         * `false`. For more info about
+         * `SPOT`, read [here](https://cloud.google.com/compute/docs/instances/spot)
+         */
         provisioningModel: string;
     }
     interface InstanceSchedulingNodeAffinity {
@@ -10406,6 +10705,12 @@ export declare namespace compute {
          * [here](https://cloud.google.com/compute/docs/instances/preemptible).
          */
         preemptible?: boolean;
+        /**
+         * Describe the type of preemptible VM. This field accepts the value `STANDARD` or `SPOT`. If the value is `STANDARD`, there will be no discount. If this   is set to `SPOT`,
+         * `preemptible` should be `true` and `autoRestart` should be
+         * `false`. For more info about
+         * `SPOT`, read [here](https://cloud.google.com/compute/docs/instances/spot)
+         */
         provisioningModel: string;
     }
     interface InstanceTemplateSchedulingNodeAffinity {
@@ -11328,6 +11633,16 @@ export declare namespace compute {
          */
         failoverRatio?: number;
     }
+    interface RegionBackendServiceIamBindingCondition {
+        description?: string;
+        expression: string;
+        title: string;
+    }
+    interface RegionBackendServiceIamMemberCondition {
+        description?: string;
+        expression: string;
+        title: string;
+    }
     interface RegionBackendServiceIap {
         /**
          * OAuth2 Client ID for IAP
@@ -13532,6 +13847,14 @@ export declare namespace compute {
          * will have the same local ASN.
          */
         asn: number;
+        /**
+         * The interval in seconds between BGP keepalive messages that are sent to the peer.
+         * Hold time is three times the interval at which keepalive messages are sent, and the hold time is the
+         * maximum number of seconds allowed to elapse between successive keepalive messages that BGP receives from a peer.
+         * BGP will use the smaller of either the local hold time value or the peer's hold time value as the hold time for
+         * the BGP connection between the two peers. If set, this value must be between 20 and 60. The default is 20.
+         */
+        keepaliveInterval?: number;
     }
     interface RouterBgpAdvertisedIpRange {
         /**
@@ -20726,7 +21049,7 @@ export declare namespace dataproc {
         /**
          * Required. Cloud Storage URI of executable file.
          */
-        executableFile?: string;
+        executableFile: string;
         /**
          * Optional. Amount of time executable has to complete. Default is 10 minutes (see JSON representation of (https://developers.google.com/protocol-buffers/docs/proto3#json)). Cluster creation fails with an explanatory error message (the name of the executable that caused the error and the exceeded timeout period) if the executable is not completed at end of the timeout period.
          */