@pulumi/gcp 6.3.0 → 6.4.0

package/types/input.d.ts

@@ -3573,7 +3573,7 @@ export declare namespace binaryauthorization {
 export declare namespace certificateauthority {
     interface AuthorityAccessUrl {
         caCertificateAccessUrl?: pulumi.Input<string>;
-        crlAccessUrl?: pulumi.Input<string>;
+        crlAccessUrls?: pulumi.Input<pulumi.Input<string>[]>;
     }
     interface AuthorityConfig {
         /**
@@ -14693,6 +14693,10 @@ export declare namespace container {
          * for more information.
          */
         minCpuPlatform?: pulumi.Input<string>;
+        /**
+         * Setting this field will assign instances of this pool to run on the specified node group. This is useful for running workloads on [sole tenant nodes](https://cloud.google.com/compute/docs/nodes/sole-tenant-nodes).
+         */
+        nodeGroup?: pulumi.Input<string>;
         /**
          * The set of Google API scopes to be made available
          * on all of the node VMs under the "default" service account.
@@ -14706,7 +14710,8 @@ export declare namespace container {
          */
         preemptible?: pulumi.Input<boolean>;
         /**
-         * [GKE Sandbox](https://cloud.google.com/kubernetes-engine/docs/how-to/sandbox-pods) configuration. When enabling this feature you must specify `imageType = "COS_CONTAINERD"` and `nodeVersion = "1.12.7-gke.17"` or later to use it.
+         * ) [GKE Sandbox](https://cloud.google.com/kubernetes-engine/docs/how-to/sandbox-pods) configuration. When enabling this feature you must specify `imageType = "COS_CONTAINERD"` and `nodeVersion = "1.12.7-gke.17"` or later to use it.
+         * >>>>>>> v4.3.0
          * Structure is documented below.
          */
         sandboxConfig?: pulumi.Input<inputs.container.ClusterNodeConfigSandboxConfig>;
@@ -14719,6 +14724,12 @@ export declare namespace container {
          * Shielded Instance options. Structure is documented below.
          */
         shieldedInstanceConfig?: pulumi.Input<inputs.container.ClusterNodeConfigShieldedInstanceConfig>;
+        /**
+         * ) A boolean
+         * that represents whether the underlying node VMs are spot. See the [official documentation](https://cloud.google.com/kubernetes-engine/docs/concepts/spot-vms)
+         * for more information. Defaults to false.
+         */
+        spot?: pulumi.Input<boolean>;
         /**
          * The list of instance tags applied to all nodes. Tags are used to identify
          * valid sources or targets for network firewalls.
@@ -14990,6 +15001,10 @@ export declare namespace container {
          * for more information.
          */
         minCpuPlatform?: pulumi.Input<string>;
+        /**
+         * Setting this field will assign instances of this pool to run on the specified node group. This is useful for running workloads on [sole tenant nodes](https://cloud.google.com/compute/docs/nodes/sole-tenant-nodes).
+         */
+        nodeGroup?: pulumi.Input<string>;
         /**
          * The set of Google API scopes to be made available
          * on all of the node VMs under the "default" service account.
@@ -15003,7 +15018,8 @@ export declare namespace container {
          */
         preemptible?: pulumi.Input<boolean>;
         /**
-         * [GKE Sandbox](https://cloud.google.com/kubernetes-engine/docs/how-to/sandbox-pods) configuration. When enabling this feature you must specify `imageType = "COS_CONTAINERD"` and `nodeVersion = "1.12.7-gke.17"` or later to use it.
+         * ) [GKE Sandbox](https://cloud.google.com/kubernetes-engine/docs/how-to/sandbox-pods) configuration. When enabling this feature you must specify `imageType = "COS_CONTAINERD"` and `nodeVersion = "1.12.7-gke.17"` or later to use it.
+         * >>>>>>> v4.3.0
          * Structure is documented below.
          */
         sandboxConfig?: pulumi.Input<inputs.container.ClusterNodePoolNodeConfigSandboxConfig>;
@@ -15016,6 +15032,12 @@ export declare namespace container {
          * Shielded Instance options. Structure is documented below.
          */
         shieldedInstanceConfig?: pulumi.Input<inputs.container.ClusterNodePoolNodeConfigShieldedInstanceConfig>;
+        /**
+         * ) A boolean
+         * that represents whether the underlying node VMs are spot. See the [official documentation](https://cloud.google.com/kubernetes-engine/docs/concepts/spot-vms)
+         * for more information. Defaults to false.
+         */
+        spot?: pulumi.Input<boolean>;
         /**
          * The list of instance tags applied to all nodes. Tags are used to identify
          * valid sources or targets for network firewalls.
@@ -15306,11 +15328,13 @@ export declare namespace container {
             [key: string]: pulumi.Input<string>;
         }>;
         minCpuPlatform?: pulumi.Input<string>;
+        nodeGroup?: pulumi.Input<string>;
         oauthScopes?: pulumi.Input<pulumi.Input<string>[]>;
         preemptible?: pulumi.Input<boolean>;
         sandboxConfig?: pulumi.Input<inputs.container.NodePoolNodeConfigSandboxConfig>;
         serviceAccount?: pulumi.Input<string>;
         shieldedInstanceConfig?: pulumi.Input<inputs.container.NodePoolNodeConfigShieldedInstanceConfig>;
+        spot?: pulumi.Input<boolean>;
         tags?: pulumi.Input<pulumi.Input<string>[]>;
         taints?: pulumi.Input<pulumi.Input<inputs.container.NodePoolNodeConfigTaint>[]>;
         workloadMetadataConfig?: pulumi.Input<inputs.container.NodePoolNodeConfigWorkloadMetadataConfig>;
@@ -22663,6 +22687,375 @@ export declare namespace notebooks {
          */
         project: pulumi.Input<string>;
     }
+    interface RuntimeAccessConfig {
+        /**
+         * The type of access mode this instance. For valid values, see
+         * `https://cloud.google.com/vertex-ai/docs/workbench/reference/
+         * rest/v1/projects.locations.runtimes#RuntimeAccessType`.
+         */
+        accessType?: pulumi.Input<string>;
+        /**
+         * -
+         * The proxy endpoint that is used to access the runtime.
+         */
+        proxyUri?: pulumi.Input<string>;
+        /**
+         * The owner of this runtime after creation. Format: `alias@example.com`.
+         * Currently supports one owner only.
+         */
+        runtimeOwner?: pulumi.Input<string>;
+    }
+    interface RuntimeMetric {
+        systemMetrics?: pulumi.Input<{
+            [key: string]: pulumi.Input<string>;
+        }>;
+    }
+    interface RuntimeSoftwareConfig {
+        /**
+         * Specify a custom Cloud Storage path where the GPU driver is stored.
+         * If not specified, we'll automatically choose from official GPU drivers.
+         */
+        customGpuDriverPath?: pulumi.Input<string>;
+        /**
+         * Verifies core internal services are running. Default: True.
+         */
+        enableHealthMonitoring?: pulumi.Input<boolean>;
+        /**
+         * Runtime will automatically shutdown after idle_shutdown_time.
+         * Default: True
+         */
+        idleShutdown?: pulumi.Input<boolean>;
+        /**
+         * Time in minutes to wait before shuting down runtime.
+         * Default: 180 minutes
+         */
+        idleShutdownTimeout?: pulumi.Input<number>;
+        /**
+         * Install Nvidia Driver automatically.
+         */
+        installGpuDriver?: pulumi.Input<boolean>;
+        /**
+         * Cron expression in UTC timezone for schedule instance auto upgrade.
+         * Please follow the [cron format](https://en.wikipedia.org/wiki/Cron).
+         */
+        notebookUpgradeSchedule?: pulumi.Input<string>;
+        /**
+         * Path to a Bash script that automatically runs after a notebook instance
+         * fully boots up. The path must be a URL or
+         * Cloud Storage path (gs://path-to-file/file-name).
+         */
+        postStartupScript?: pulumi.Input<string>;
+    }
+    interface RuntimeVirtualMachine {
+        /**
+         * -
+         * The unique identifier of the Managed Compute Engine instance.
+         */
+        instanceId?: pulumi.Input<string>;
+        /**
+         * -
+         * The user-friendly name of the Managed Compute Engine instance.
+         */
+        instanceName?: pulumi.Input<string>;
+        /**
+         * Virtual Machine configuration settings.
+         * Structure is documented below.
+         */
+        virtualMachineConfig?: pulumi.Input<inputs.notebooks.RuntimeVirtualMachineVirtualMachineConfig>;
+    }
+    interface RuntimeVirtualMachineVirtualMachineConfig {
+        /**
+         * The Compute Engine accelerator configuration for this runtime.
+         * Structure is documented below.
+         */
+        acceleratorConfig?: pulumi.Input<inputs.notebooks.RuntimeVirtualMachineVirtualMachineConfigAcceleratorConfig>;
+        /**
+         * Use a list of container images to start the notebook instance.
+         * Structure is documented below.
+         */
+        containerImages?: pulumi.Input<pulumi.Input<inputs.notebooks.RuntimeVirtualMachineVirtualMachineConfigContainerImage>[]>;
+        /**
+         * Data disk option configuration settings.
+         * Structure is documented below.
+         */
+        dataDisk: pulumi.Input<inputs.notebooks.RuntimeVirtualMachineVirtualMachineConfigDataDisk>;
+        /**
+         * Encryption settings for virtual machine data disk.
+         * Structure is documented below.
+         */
+        encryptionConfig?: pulumi.Input<inputs.notebooks.RuntimeVirtualMachineVirtualMachineConfigEncryptionConfig>;
+        /**
+         * -
+         * The Compute Engine guest attributes. (see [Project and instance
+         * guest attributes](https://cloud.google.com/compute/docs/
+         * storing-retrieving-metadata#guest_attributes)).
+         */
+        guestAttributes?: pulumi.Input<{
+            [key: string]: pulumi.Input<string>;
+        }>;
+        /**
+         * If true, runtime will only have internal IP addresses. By default,
+         * runtimes are not restricted to internal IP addresses, and will
+         * have ephemeral external IP addresses assigned to each vm. This
+         * `internalIpOnly` restriction can only be enabled for subnetwork
+         * enabled networks, and all dependencies must be configured to be
+         * accessible without external IP addresses.
+         */
+        internalIpOnly?: pulumi.Input<boolean>;
+        /**
+         * Labels to apply to this disk. These can be later modified
+         * by the disks.setLabels method. This field is only
+         * applicable for persistent disks.
+         */
+        labels?: pulumi.Input<{
+            [key: string]: pulumi.Input<string>;
+        }>;
+        /**
+         * The Compute Engine machine type used for runtimes.
+         */
+        machineType: pulumi.Input<string>;
+        /**
+         * The Compute Engine metadata entries to add to virtual machine.
+         * (see [Project and instance metadata](https://cloud.google.com
+         * /compute/docs/storing-retrieving-metadata#project_and_instance
+         * _metadata)).
+         */
+        metadata?: pulumi.Input<{
+            [key: string]: pulumi.Input<string>;
+        }>;
+        /**
+         * The Compute Engine network to be used for machine communications.
+         * Cannot be specified with subnetwork. If neither `network` nor
+         * `subnet` is specified, the "default" network of the project is
+         * used, if it exists. A full URL or partial URI. Examples:
+         * * `https://www.googleapis.com/compute/v1/projects/[projectId]/
+         * regions/global/default`
+         * * `projects/[projectId]/regions/global/default`
+         * Runtimes are managed resources inside Google Infrastructure.
+         * Runtimes support the following network configurations:
+         * * Google Managed Network (Network & subnet are empty)
+         * * Consumer Project VPC (network & subnet are required). Requires
+         * configuring Private Service Access.
+         * * Shared VPC (network & subnet are required). Requires
+         * configuring Private Service Access.
+         */
+        network?: pulumi.Input<string>;
+        /**
+         * The type of vNIC to be used on this interface. This may be gVNIC
+         * or VirtioNet.
+         * Possible values are `UNSPECIFIED_NIC_TYPE`, `VIRTIO_NET`, and `GVNIC`.
+         */
+        nicType?: pulumi.Input<string>;
+        /**
+         * Shielded VM Instance configuration settings.
+         * Structure is documented below.
+         */
+        shieldedInstanceConfig?: pulumi.Input<inputs.notebooks.RuntimeVirtualMachineVirtualMachineConfigShieldedInstanceConfig>;
+        /**
+         * The Compute Engine subnetwork to be used for machine
+         * communications. Cannot be specified with network. A full URL or
+         * partial URI are valid. Examples:
+         * * `https://www.googleapis.com/compute/v1/projects/[projectId]/
+         * regions/us-east1/subnetworks/sub0`
+         * * `projects/[projectId]/regions/us-east1/subnetworks/sub0`
+         */
+        subnet?: pulumi.Input<string>;
+        /**
+         * The Compute Engine tags to add to runtime (see [Tagging instances]
+         * (https://cloud.google.com/compute/docs/
+         * label-or-tag-resources#tags)).
+         */
+        tags?: pulumi.Input<pulumi.Input<string>[]>;
+        /**
+         * -
+         * The zone where the virtual machine is located.
+         */
+        zone?: pulumi.Input<string>;
+    }
+    interface RuntimeVirtualMachineVirtualMachineConfigAcceleratorConfig {
+        /**
+         * Count of cores of this accelerator.
+         */
+        coreCount?: pulumi.Input<number>;
+        /**
+         * Accelerator model. For valid values, see
+         * `https://cloud.google.com/vertex-ai/docs/workbench/reference/
+         * rest/v1/projects.locations.runtimes#AcceleratorType`
+         */
+        type?: pulumi.Input<string>;
+    }
+    interface RuntimeVirtualMachineVirtualMachineConfigContainerImage {
+        /**
+         * The path to the container image repository.
+         * For example: gcr.io/{project_id}/{imageName}
+         */
+        repository: pulumi.Input<string>;
+        /**
+         * The tag of the container image. If not specified, this defaults to the latest tag.
+         */
+        tag?: pulumi.Input<string>;
+    }
+    interface RuntimeVirtualMachineVirtualMachineConfigDataDisk {
+        /**
+         * -
+         * Optional. Specifies whether the disk will be auto-deleted
+         * when the instance is deleted (but not when the disk is
+         * detached from the instance).
+         */
+        autoDelete?: pulumi.Input<boolean>;
+        /**
+         * -
+         * Optional. Indicates that this is a boot disk. The virtual
+         * machine will use the first partition of the disk for its
+         * root filesystem.
+         */
+        boot?: pulumi.Input<boolean>;
+        /**
+         * -
+         * Optional. Specifies a unique device name of your choice
+         * that is reflected into the /dev/disk/by-id/google-* tree
+         * of a Linux operating system running within the instance.
+         * This name can be used to reference the device for mounting,
+         * resizing, and so on, from within the instance.
+         * If not specified, the server chooses a default device name
+         * to apply to this disk, in the form persistent-disk-x, where
+         * x is a number assigned by Google Compute Engine. This field
+         * is only applicable for persistent disks.
+         */
+        deviceName?: pulumi.Input<string>;
+        /**
+         * -
+         * Indicates a list of features to enable on the guest operating
+         * system. Applicable only for bootable images. To see a list of
+         * available features, read `https://cloud.google.com/compute/docs/
+         * images/create-delete-deprecate-private-images#guest-os-features`
+         * options. ``
+         */
+        guestOsFeatures?: pulumi.Input<pulumi.Input<string>[]>;
+        /**
+         * -
+         * Output only. A zero-based index to this disk, where 0 is
+         * reserved for the boot disk. If you have many disks attached
+         * to an instance, each disk would have a unique index number.
+         */
+        index?: pulumi.Input<number>;
+        /**
+         * Input only. Specifies the parameters for a new disk that will
+         * be created alongside the new instance. Use initialization
+         * parameters to create boot disks or local SSDs attached to the
+         * new instance. This property is mutually exclusive with the
+         * source property; you can only define one or the other, but not
+         * both.
+         * Structure is documented below.
+         */
+        initializeParams?: pulumi.Input<inputs.notebooks.RuntimeVirtualMachineVirtualMachineConfigDataDiskInitializeParams>;
+        /**
+         * "Specifies the disk interface to use for attaching this disk,
+         * which is either SCSI or NVME. The default is SCSI. Persistent
+         * disks must always use SCSI and the request will fail if you attempt
+         * to attach a persistent disk in any other format than SCSI. Local SSDs
+         * can use either NVME or SCSI. For performance characteristics of SCSI
+         * over NVMe, see Local SSD performance. Valid values: * NVME * SCSI".
+         */
+        interface?: pulumi.Input<string>;
+        /**
+         * -
+         * Type of the resource. Always compute#attachedDisk for attached
+         * disks.
+         */
+        kind?: pulumi.Input<string>;
+        /**
+         * -
+         * Output only. Any valid publicly visible licenses.
+         */
+        licenses?: pulumi.Input<pulumi.Input<string>[]>;
+        /**
+         * The mode in which to attach this disk, either READ_WRITE
+         * or READ_ONLY. If not specified, the default is to attach
+         * the disk in READ_WRITE mode.
+         */
+        mode?: pulumi.Input<string>;
+        /**
+         * Specifies a valid partial or full URL to an existing
+         * Persistent Disk resource.
+         */
+        source?: pulumi.Input<string>;
+        /**
+         * Accelerator model. For valid values, see
+         * `https://cloud.google.com/vertex-ai/docs/workbench/reference/
+         * rest/v1/projects.locations.runtimes#AcceleratorType`
+         */
+        type?: pulumi.Input<string>;
+    }
+    interface RuntimeVirtualMachineVirtualMachineConfigDataDiskInitializeParams {
+        /**
+         * Provide this property when creating the disk.
+         */
+        description?: pulumi.Input<string>;
+        /**
+         * Specifies the disk name. If not specified, the default is
+         * to use the name of the instance. If the disk with the
+         * instance name exists already in the given zone/region, a
+         * new name will be automatically generated.
+         */
+        diskName?: pulumi.Input<string>;
+        /**
+         * Specifies the size of the disk in base-2 GB. If not
+         * specified, the disk will be the same size as the image
+         * (usually 10GB). If specified, the size must be equal to
+         * or larger than 10GB. Default 100 GB.
+         */
+        diskSizeGb?: pulumi.Input<number>;
+        /**
+         * The type of the boot disk attached to this runtime,
+         * defaults to standard persistent disk. For valid values,
+         * see `https://cloud.google.com/vertex-ai/docs/workbench/
+         * reference/rest/v1/projects.locations.runtimes#disktype`
+         */
+        diskType?: pulumi.Input<string>;
+        /**
+         * Labels to apply to this disk. These can be later modified
+         * by the disks.setLabels method. This field is only
+         * applicable for persistent disks.
+         */
+        labels?: pulumi.Input<{
+            [key: string]: pulumi.Input<string>;
+        }>;
+    }
+    interface RuntimeVirtualMachineVirtualMachineConfigEncryptionConfig {
+        /**
+         * The Cloud KMS resource identifier of the customer-managed
+         * encryption key used to protect a resource, such as a disks.
+         * It has the following format:
+         * `projects/{PROJECT_ID}/locations/{REGION}/keyRings/
+         * {KEY_RING_NAME}/cryptoKeys/{KEY_NAME}`
+         */
+        kmsKey?: pulumi.Input<string>;
+    }
+    interface RuntimeVirtualMachineVirtualMachineConfigShieldedInstanceConfig {
+        /**
+         * Defines whether the instance has integrity monitoring enabled.
+         * Enables monitoring and attestation of the boot integrity of
+         * the instance. The attestation is performed against the
+         * integrity policy baseline. This baseline is initially derived
+         * from the implicitly trusted boot image when the instance is
+         * created. Enabled by default.
+         */
+        enableIntegrityMonitoring?: pulumi.Input<boolean>;
+        /**
+         * Defines whether the instance has Secure Boot enabled.Secure
+         * Boot helps ensure that the system only runs authentic software
+         * by verifying the digital signature of all boot components, and
+         * halting the boot process if signature verification fails.
+         * Disabled by default.
+         */
+        enableSecureBoot?: pulumi.Input<boolean>;
+        /**
+         * Defines whether the instance has the vTPM enabled. Enabled by
+         * default.
+         */
+        enableVtpm?: pulumi.Input<boolean>;
+    }
 }
 export declare namespace organizations {
     interface AccessApprovalSettingsEnrolledService {
@@ -24274,6 +24667,13 @@ export declare namespace pubsub {
     }
 }
 export declare namespace redis {
+    interface InstanceNode {
+        /**
+         * an identifier for the resource with format `projects/{{project}}/locations/{{region}}/instances/{{name}}`
+         */
+        id?: pulumi.Input<string>;
+        zone?: pulumi.Input<string>;
+    }
     interface InstanceServerCaCert {
         cert?: pulumi.Input<string>;
         createTime?: pulumi.Input<string>;
@@ -25213,6 +25613,16 @@ export declare namespace vertex {
          */
         fixedNodeCount: pulumi.Input<number>;
     }
+    interface AiMetadataStoreEncryptionSpec {
+        /**
+         * Required. The Cloud KMS resource identifier of the customer managed encryption key used to protect a resource.
+         * Has the form: projects/my-project/locations/my-region/keyRings/my-kr/cryptoKeys/my-key. The key needs to be in the same region as where the resource is created.
+         */
+        kmsKeyName?: pulumi.Input<string>;
+    }
+    interface AiMetadataStoreState {
+        diskUtilizationBytes?: pulumi.Input<string>;
+    }
 }
 export declare namespace vpcaccess {
     interface ConnectorSubnet {