@pulumi/gcp 6.44.0 → 6.45.0

package/gkebackup/index.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"index.js","sourceRoot":"","sources":["../../gkebackup/index.ts"],"names":[],"mappings":";AAAA,wFAAwF;AACxF,iFAAiF;;;AAEjF,yCAAyC;AACzC,0CAA0C;AAK7B,QAAA,UAAU,GAA6C,IAAW,CAAC;AAChF,SAAS,CAAC,QAAQ,CAAC,OAAO,EAAE,CAAC,YAAY,CAAC,EAAE,GAAG,EAAE,CAAC,OAAO,CAAC,cAAc,CAAC,CAAC,CAAC;AAG3E,MAAM,OAAO,GAAG;IACZ,OAAO,EAAE,SAAS,CAAC,UAAU,EAAE;IAC/B,SAAS,EAAE,CAAC,IAAY,EAAE,IAAY,EAAE,GAAW,EAAmB,EAAE;QACpE,QAAQ,IAAI,EAAE;YACV,KAAK,qCAAqC;gBACtC,OAAO,IAAI,kBAAU,CAAC,IAAI,EAAO,SAAS,EAAE,EAAE,GAAG,EAAE,CAAC,CAAA;YACxD;gBACI,MAAM,IAAI,KAAK,CAAC,yBAAyB,IAAI,EAAE,CAAC,CAAC;SACxD;IACL,CAAC;CACJ,CAAC;AACF,MAAM,CAAC,OAAO,CAAC,sBAAsB,CAAC,KAAK,EAAE,sBAAsB,EAAE,OAAO,CAAC,CAAA"}

package/gkehub/featureMembership.d.ts

@@ -95,6 +95,7 @@ import * as outputs from "../types/output";
  *     membership: membership.membershipId,
  *     mesh: {
  *         management: "MANAGEMENT_AUTOMATIC",
+ *         controlPlane: "AUTOMATIC",
  *     },
  * }, {
  *     provider: google_beta,

package/gkehub/featureMembership.js

@@ -99,6 +99,7 @@ const utilities = require("../utilities");
  *     membership: membership.membershipId,
  *     mesh: {
  *         management: "MANAGEMENT_AUTOMATIC",
+ *         controlPlane: "AUTOMATIC",
  *     },
  * }, {
  *     provider: google_beta,

package/gkehub/featureMembership.js.map

@@ -1 +1 @@
-{"version":3,"file":"featureMembership.js","sourceRoot":"","sources":["../../gkehub/featureMembership.ts"],"names":[],"mappings":";AAAA,wFAAwF;AACxF,iFAAiF;;;AAEjF,yCAAyC;AAGzC,0CAA0C;AAE1C;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;GAmHG;AACH,MAAa,iBAAkB,SAAQ,MAAM,CAAC,cAAc;IACxD;;;;;;;;OAQG;IACI,MAAM,CAAC,GAAG,CAAC,IAAY,EAAE,EAA2B,EAAE,KAA8B,EAAE,IAAmC;QAC5H,OAAO,IAAI,iBAAiB,CAAC,IAAI,EAAO,KAAK,kCAAO,IAAI,KAAE,EAAE,EAAE,EAAE,IAAG,CAAC;IACxE,CAAC;IAKD;;;OAGG;IACI,MAAM,CAAC,UAAU,CAAC,GAAQ;QAC7B,IAAI,GAAG,KAAK,SAAS,IAAI,GAAG,KAAK,IAAI,EAAE;YACnC,OAAO,KAAK,CAAC;SAChB;QACD,OAAO,GAAG,CAAC,cAAc,CAAC,KAAK,iBAAiB,CAAC,YAAY,CAAC;IAClE,CAAC;IAmCD,YAAY,IAAY,EAAE,WAA4D,EAAE,IAAmC;QACvH,IAAI,cAAc,GAAkB,EAAE,CAAC;QACvC,IAAI,GAAG,IAAI,IAAI,EAAE,CAAC;QAClB,IAAI,IAAI,CAAC,EAAE,EAAE;YACT,MAAM,KAAK,GAAG,WAAiD,CAAC;YAChE,cAAc,CAAC,kBAAkB,CAAC,GAAG,KAAK,CAAC,CAAC,CAAC,KAAK,CAAC,gBAAgB,CAAC,CAAC,CAAC,SAAS,CAAC;YAChF,cAAc,CAAC,SAAS,CAAC,GAAG,KAAK,CAAC,CAAC,CAAC,KAAK,CAAC,OAAO,CAAC,CAAC,CAAC,SAAS,CAAC;YAC9D,cAAc,CAAC,UAAU,CAAC,GAAG,KAAK,CAAC,CAAC,CAAC,KAAK,CAAC,QAAQ,CAAC,CAAC,CAAC,SAAS,CAAC;YAChE,cAAc,CAAC,YAAY,CAAC,GAAG,KAAK,CAAC,CAAC,CAAC,KAAK,CAAC,UAAU,CAAC,CAAC,CAAC,SAAS,CAAC;YACpE,cAAc,CAAC,MAAM,CAAC,GAAG,KAAK,CAAC,CAAC,CAAC,KAAK,CAAC,IAAI,CAAC,CAAC,CAAC,SAAS,CAAC;YACxD,cAAc,CAAC,SAAS,CAAC,GAAG,KAAK,CAAC,CAAC,CAAC,KAAK,CAAC,OAAO,CAAC,CAAC,CAAC,SAAS,CAAC;SACjE;aAAM;YACH,MAAM,IAAI,GAAG,WAAgD,CAAC;YAC9D,IAAI,CAAC,CAAC,IAAI,IAAI,IAAI,CAAC,OAAO,KAAK,SAAS,CAAC,IAAI,CAAC,IAAI,CAAC,GAAG,EAAE;gBACpD,MAAM,IAAI,KAAK,CAAC,qCAAqC,CAAC,CAAC;aAC1D;YACD,IAAI,CAAC,CAAC,IAAI,IAAI,IAAI,CAAC,QAAQ,KAAK,SAAS,CAAC,IAAI,CAAC,IAAI,CAAC,GAAG,EAAE;gBACrD,MAAM,IAAI,KAAK,CAAC,sCAAsC,CAAC,CAAC;aAC3D;YACD,IAAI,CAAC,CAAC,IAAI,IAAI,IAAI,CAAC,UAAU,KAAK,SAAS,CAAC,IAAI,CAAC,IAAI,CAAC,GAAG,EAAE;gBACvD,MAAM,IAAI,KAAK,CAAC,wCAAwC,CAAC,CAAC;aAC7D;YACD,cAAc,CAAC,kBAAkB,CAAC,GAAG,IAAI,CAAC,CAAC,CAAC,IAAI,CAAC,gBAAgB,CAAC,CAAC,CAAC,SAAS,CAAC;YAC9E,cAAc,CAAC,SAAS,CAAC,GAAG,IAAI,CAAC,CAAC,CAAC,IAAI,CAAC,OAAO,CAAC,CAAC,CAAC,SAAS,CAAC;YAC5D,cAAc,CAAC,UAAU,CAAC,GAAG,IAAI,CAAC,CAAC,CAAC,IAAI,CAAC,QAAQ,CAAC,CAAC,CAAC,SAAS,CAAC;YAC9D,cAAc,CAAC,YAAY,CAAC,GAAG,IAAI,CAAC,CAAC,CAAC,IAAI,CAAC,UAAU,CAAC,CAAC,CAAC,SAAS,CAAC;YAClE,cAAc,CAAC,MAAM,CAAC,GAAG,IAAI,CAAC,CAAC,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC,CAAC,SAAS,CAAC;YACtD,cAAc,CAAC,SAAS,CAAC,GAAG,IAAI,CAAC,CAAC,CAAC,IAAI,CAAC,OAAO,CAAC,CAAC,CAAC,SAAS,CAAC;SAC/D;QACD,IAAI,GAAG,MAAM,CAAC,YAAY,CAAC,SAAS,CAAC,oBAAoB,EAAE,EAAE,IAAI,CAAC,CAAC;QACnE,KAAK,CAAC,iBAAiB,CAAC,YAAY,EAAE,IAAI,EAAE,cAAc,EAAE,IAAI,CAAC,CAAC;IACtE,CAAC;;AA5FL,8CA6FC;AA/EG,gBAAgB;AACO,8BAAY,GAAG,gDAAgD,CAAC"}
+{"version":3,"file":"featureMembership.js","sourceRoot":"","sources":["../../gkehub/featureMembership.ts"],"names":[],"mappings":";AAAA,wFAAwF;AACxF,iFAAiF;;;AAEjF,yCAAyC;AAGzC,0CAA0C;AAE1C;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;GAoHG;AACH,MAAa,iBAAkB,SAAQ,MAAM,CAAC,cAAc;IACxD;;;;;;;;OAQG;IACI,MAAM,CAAC,GAAG,CAAC,IAAY,EAAE,EAA2B,EAAE,KAA8B,EAAE,IAAmC;QAC5H,OAAO,IAAI,iBAAiB,CAAC,IAAI,EAAO,KAAK,kCAAO,IAAI,KAAE,EAAE,EAAE,EAAE,IAAG,CAAC;IACxE,CAAC;IAKD;;;OAGG;IACI,MAAM,CAAC,UAAU,CAAC,GAAQ;QAC7B,IAAI,GAAG,KAAK,SAAS,IAAI,GAAG,KAAK,IAAI,EAAE;YACnC,OAAO,KAAK,CAAC;SAChB;QACD,OAAO,GAAG,CAAC,cAAc,CAAC,KAAK,iBAAiB,CAAC,YAAY,CAAC;IAClE,CAAC;IAmCD,YAAY,IAAY,EAAE,WAA4D,EAAE,IAAmC;QACvH,IAAI,cAAc,GAAkB,EAAE,CAAC;QACvC,IAAI,GAAG,IAAI,IAAI,EAAE,CAAC;QAClB,IAAI,IAAI,CAAC,EAAE,EAAE;YACT,MAAM,KAAK,GAAG,WAAiD,CAAC;YAChE,cAAc,CAAC,kBAAkB,CAAC,GAAG,KAAK,CAAC,CAAC,CAAC,KAAK,CAAC,gBAAgB,CAAC,CAAC,CAAC,SAAS,CAAC;YAChF,cAAc,CAAC,SAAS,CAAC,GAAG,KAAK,CAAC,CAAC,CAAC,KAAK,CAAC,OAAO,CAAC,CAAC,CAAC,SAAS,CAAC;YAC9D,cAAc,CAAC,UAAU,CAAC,GAAG,KAAK,CAAC,CAAC,CAAC,KAAK,CAAC,QAAQ,CAAC,CAAC,CAAC,SAAS,CAAC;YAChE,cAAc,CAAC,YAAY,CAAC,GAAG,KAAK,CAAC,CAAC,CAAC,KAAK,CAAC,UAAU,CAAC,CAAC,CAAC,SAAS,CAAC;YACpE,cAAc,CAAC,MAAM,CAAC,GAAG,KAAK,CAAC,CAAC,CAAC,KAAK,CAAC,IAAI,CAAC,CAAC,CAAC,SAAS,CAAC;YACxD,cAAc,CAAC,SAAS,CAAC,GAAG,KAAK,CAAC,CAAC,CAAC,KAAK,CAAC,OAAO,CAAC,CAAC,CAAC,SAAS,CAAC;SACjE;aAAM;YACH,MAAM,IAAI,GAAG,WAAgD,CAAC;YAC9D,IAAI,CAAC,CAAC,IAAI,IAAI,IAAI,CAAC,OAAO,KAAK,SAAS,CAAC,IAAI,CAAC,IAAI,CAAC,GAAG,EAAE;gBACpD,MAAM,IAAI,KAAK,CAAC,qCAAqC,CAAC,CAAC;aAC1D;YACD,IAAI,CAAC,CAAC,IAAI,IAAI,IAAI,CAAC,QAAQ,KAAK,SAAS,CAAC,IAAI,CAAC,IAAI,CAAC,GAAG,EAAE;gBACrD,MAAM,IAAI,KAAK,CAAC,sCAAsC,CAAC,CAAC;aAC3D;YACD,IAAI,CAAC,CAAC,IAAI,IAAI,IAAI,CAAC,UAAU,KAAK,SAAS,CAAC,IAAI,CAAC,IAAI,CAAC,GAAG,EAAE;gBACvD,MAAM,IAAI,KAAK,CAAC,wCAAwC,CAAC,CAAC;aAC7D;YACD,cAAc,CAAC,kBAAkB,CAAC,GAAG,IAAI,CAAC,CAAC,CAAC,IAAI,CAAC,gBAAgB,CAAC,CAAC,CAAC,SAAS,CAAC;YAC9E,cAAc,CAAC,SAAS,CAAC,GAAG,IAAI,CAAC,CAAC,CAAC,IAAI,CAAC,OAAO,CAAC,CAAC,CAAC,SAAS,CAAC;YAC5D,cAAc,CAAC,UAAU,CAAC,GAAG,IAAI,CAAC,CAAC,CAAC,IAAI,CAAC,QAAQ,CAAC,CAAC,CAAC,SAAS,CAAC;YAC9D,cAAc,CAAC,YAAY,CAAC,GAAG,IAAI,CAAC,CAAC,CAAC,IAAI,CAAC,UAAU,CAAC,CAAC,CAAC,SAAS,CAAC;YAClE,cAAc,CAAC,MAAM,CAAC,GAAG,IAAI,CAAC,CAAC,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC,CAAC,SAAS,CAAC;YACtD,cAAc,CAAC,SAAS,CAAC,GAAG,IAAI,CAAC,CAAC,CAAC,IAAI,CAAC,OAAO,CAAC,CAAC,CAAC,SAAS,CAAC;SAC/D;QACD,IAAI,GAAG,MAAM,CAAC,YAAY,CAAC,SAAS,CAAC,oBAAoB,EAAE,EAAE,IAAI,CAAC,CAAC;QACnE,KAAK,CAAC,iBAAiB,CAAC,YAAY,EAAE,IAAI,EAAE,cAAc,EAAE,IAAI,CAAC,CAAC;IACtE,CAAC;;AA5FL,8CA6FC;AA/EG,gBAAgB;AACO,8BAAY,GAAG,gDAAgD,CAAC"}

package/iam/index.d.ts

@@ -16,6 +16,9 @@ export declare const getWorkloadIdentityPoolProviderOutput: typeof import("./get
 export { WorkforcePoolArgs, WorkforcePoolState } from "./workforcePool";
 export type WorkforcePool = import("./workforcePool").WorkforcePool;
 export declare const WorkforcePool: typeof import("./workforcePool").WorkforcePool;
+export { WorkforcePoolProviderArgs, WorkforcePoolProviderState } from "./workforcePoolProvider";
+export type WorkforcePoolProvider = import("./workforcePoolProvider").WorkforcePoolProvider;
+export declare const WorkforcePoolProvider: typeof import("./workforcePoolProvider").WorkforcePoolProvider;
 export { WorkloadIdentityPoolArgs, WorkloadIdentityPoolState } from "./workloadIdentityPool";
 export type WorkloadIdentityPool = import("./workloadIdentityPool").WorkloadIdentityPool;
 export declare const WorkloadIdentityPool: typeof import("./workloadIdentityPool").WorkloadIdentityPool;

package/iam/index.js

@@ -2,7 +2,7 @@
 // *** WARNING: this file was generated by the Pulumi Terraform Bridge (tfgen) Tool. ***
 // *** Do not edit by hand unless you're certain you know what you are doing! ***
 Object.defineProperty(exports, "__esModule", { value: true });
-exports.WorkloadIdentityPoolProvider = exports.WorkloadIdentityPool = exports.WorkforcePool = exports.getWorkloadIdentityPoolProviderOutput = exports.getWorkloadIdentityPoolProvider = exports.getWorkloadIdentityPoolOutput = exports.getWorkloadIdentityPool = exports.getTestablePermissionsOutput = exports.getTestablePermissions = exports.getRuleOutput = exports.getRule = exports.DenyPolicy = void 0;
+exports.WorkloadIdentityPoolProvider = exports.WorkloadIdentityPool = exports.WorkforcePoolProvider = exports.WorkforcePool = exports.getWorkloadIdentityPoolProviderOutput = exports.getWorkloadIdentityPoolProvider = exports.getWorkloadIdentityPoolOutput = exports.getWorkloadIdentityPool = exports.getTestablePermissionsOutput = exports.getTestablePermissions = exports.getRuleOutput = exports.getRule = exports.DenyPolicy = void 0;
 const pulumi = require("@pulumi/pulumi");
 const utilities = require("../utilities");
 exports.DenyPolicy = null;
@@ -21,6 +21,8 @@ exports.getWorkloadIdentityPoolProviderOutput = null;
 utilities.lazyLoad(exports, ["getWorkloadIdentityPoolProvider", "getWorkloadIdentityPoolProviderOutput"], () => require("./getWorkloadIdentityPoolProvider"));
 exports.WorkforcePool = null;
 utilities.lazyLoad(exports, ["WorkforcePool"], () => require("./workforcePool"));
+exports.WorkforcePoolProvider = null;
+utilities.lazyLoad(exports, ["WorkforcePoolProvider"], () => require("./workforcePoolProvider"));
 exports.WorkloadIdentityPool = null;
 utilities.lazyLoad(exports, ["WorkloadIdentityPool"], () => require("./workloadIdentityPool"));
 exports.WorkloadIdentityPoolProvider = null;
@@ -33,6 +35,8 @@ const _module = {
                 return new exports.DenyPolicy(name, undefined, { urn });
             case "gcp:iam/workforcePool:WorkforcePool":
                 return new exports.WorkforcePool(name, undefined, { urn });
+            case "gcp:iam/workforcePoolProvider:WorkforcePoolProvider":
+                return new exports.WorkforcePoolProvider(name, undefined, { urn });
             case "gcp:iam/workloadIdentityPool:WorkloadIdentityPool":
                 return new exports.WorkloadIdentityPool(name, undefined, { urn });
             case "gcp:iam/workloadIdentityPoolProvider:WorkloadIdentityPoolProvider":
@@ -44,6 +48,7 @@ const _module = {
 };
 pulumi.runtime.registerResourceModule("gcp", "iam/denyPolicy", _module);
 pulumi.runtime.registerResourceModule("gcp", "iam/workforcePool", _module);
+pulumi.runtime.registerResourceModule("gcp", "iam/workforcePoolProvider", _module);
 pulumi.runtime.registerResourceModule("gcp", "iam/workloadIdentityPool", _module);
 pulumi.runtime.registerResourceModule("gcp", "iam/workloadIdentityPoolProvider", _module);
 //# sourceMappingURL=index.js.map

package/iam/index.js.map

@@ -1 +1 @@
-{"version":3,"file":"index.js","sourceRoot":"","sources":["../../iam/index.ts"],"names":[],"mappings":";AAAA,wFAAwF;AACxF,iFAAiF;;;AAEjF,yCAAyC;AACzC,0CAA0C;AAK7B,QAAA,UAAU,GAA6C,IAAW,CAAC;AAChF,SAAS,CAAC,QAAQ,CAAC,OAAO,EAAE,CAAC,YAAY,CAAC,EAAE,GAAG,EAAE,CAAC,OAAO,CAAC,cAAc,CAAC,CAAC,CAAC;AAG9D,QAAA,OAAO,GAAuC,IAAW,CAAC;AAC1D,QAAA,aAAa,GAA6C,IAAW,CAAC;AACnF,SAAS,CAAC,QAAQ,CAAC,OAAO,EAAE,CAAC,SAAS,EAAC,eAAe,CAAC,EAAE,GAAG,EAAE,CAAC,OAAO,CAAC,WAAW,CAAC,CAAC,CAAC;AAGxE,QAAA,sBAAsB,GAAqE,IAAW,CAAC;AACvG,QAAA,4BAA4B,GAA2E,IAAW,CAAC;AAChI,SAAS,CAAC,QAAQ,CAAC,OAAO,EAAE,CAAC,wBAAwB,EAAC,8BAA8B,CAAC,EAAE,GAAG,EAAE,CAAC,OAAO,CAAC,0BAA0B,CAAC,CAAC,CAAC;AAGrH,QAAA,uBAAuB,GAAuE,IAAW,CAAC;AAC1G,QAAA,6BAA6B,GAA6E,IAAW,CAAC;AACnI,SAAS,CAAC,QAAQ,CAAC,OAAO,EAAE,CAAC,yBAAyB,EAAC,+BAA+B,CAAC,EAAE,GAAG,EAAE,CAAC,OAAO,CAAC,2BAA2B,CAAC,CAAC,CAAC;AAGxH,QAAA,+BAA+B,GAAuF,IAAW,CAAC;AAClI,QAAA,qCAAqC,GAA6F,IAAW,CAAC;AAC3J,SAAS,CAAC,QAAQ,CAAC,OAAO,EAAE,CAAC,iCAAiC,EAAC,uCAAuC,CAAC,EAAE,GAAG,EAAE,CAAC,OAAO,CAAC,mCAAmC,CAAC,CAAC,CAAC;AAIhJ,QAAA,aAAa,GAAmD,IAAW,CAAC;AACzF,SAAS,CAAC,QAAQ,CAAC,OAAO,EAAE,CAAC,eAAe,CAAC,EAAE,GAAG,EAAE,CAAC,OAAO,CAAC,iBAAiB,CAAC,CAAC,CAAC;AAIpE,QAAA,oBAAoB,GAAiE,IAAW,CAAC;AAC9G,SAAS,CAAC,QAAQ,CAAC,OAAO,EAAE,CAAC,sBAAsB,CAAC,EAAE,GAAG,EAAE,CAAC,OAAO,CAAC,wBAAwB,CAAC,CAAC,CAAC;AAIlF,QAAA,4BAA4B,GAAiF,IAAW,CAAC;AACtI,SAAS,CAAC,QAAQ,CAAC,OAAO,EAAE,CAAC,8BAA8B,CAAC,EAAE,GAAG,EAAE,CAAC,OAAO,CAAC,gCAAgC,CAAC,CAAC,CAAC;AAG/G,MAAM,OAAO,GAAG;IACZ,OAAO,EAAE,SAAS,CAAC,UAAU,EAAE;IAC/B,SAAS,EAAE,CAAC,IAAY,EAAE,IAAY,EAAE,GAAW,EAAmB,EAAE;QACpE,QAAQ,IAAI,EAAE;YACV,KAAK,+BAA+B;gBAChC,OAAO,IAAI,kBAAU,CAAC,IAAI,EAAO,SAAS,EAAE,EAAE,GAAG,EAAE,CAAC,CAAA;YACxD,KAAK,qCAAqC;gBACtC,OAAO,IAAI,qBAAa,CAAC,IAAI,EAAO,SAAS,EAAE,EAAE,GAAG,EAAE,CAAC,CAAA;YAC3D,KAAK,mDAAmD;gBACpD,OAAO,IAAI,4BAAoB,CAAC,IAAI,EAAO,SAAS,EAAE,EAAE,GAAG,EAAE,CAAC,CAAA;YAClE,KAAK,mEAAmE;gBACpE,OAAO,IAAI,oCAA4B,CAAC,IAAI,EAAO,SAAS,EAAE,EAAE,GAAG,EAAE,CAAC,CAAA;YAC1E;gBACI,MAAM,IAAI,KAAK,CAAC,yBAAyB,IAAI,EAAE,CAAC,CAAC;SACxD;IACL,CAAC;CACJ,CAAC;AACF,MAAM,CAAC,OAAO,CAAC,sBAAsB,CAAC,KAAK,EAAE,gBAAgB,EAAE,OAAO,CAAC,CAAA;AACvE,MAAM,CAAC,OAAO,CAAC,sBAAsB,CAAC,KAAK,EAAE,mBAAmB,EAAE,OAAO,CAAC,CAAA;AAC1E,MAAM,CAAC,OAAO,CAAC,sBAAsB,CAAC,KAAK,EAAE,0BAA0B,EAAE,OAAO,CAAC,CAAA;AACjF,MAAM,CAAC,OAAO,CAAC,sBAAsB,CAAC,KAAK,EAAE,kCAAkC,EAAE,OAAO,CAAC,CAAA"}
+{"version":3,"file":"index.js","sourceRoot":"","sources":["../../iam/index.ts"],"names":[],"mappings":";AAAA,wFAAwF;AACxF,iFAAiF;;;AAEjF,yCAAyC;AACzC,0CAA0C;AAK7B,QAAA,UAAU,GAA6C,IAAW,CAAC;AAChF,SAAS,CAAC,QAAQ,CAAC,OAAO,EAAE,CAAC,YAAY,CAAC,EAAE,GAAG,EAAE,CAAC,OAAO,CAAC,cAAc,CAAC,CAAC,CAAC;AAG9D,QAAA,OAAO,GAAuC,IAAW,CAAC;AAC1D,QAAA,aAAa,GAA6C,IAAW,CAAC;AACnF,SAAS,CAAC,QAAQ,CAAC,OAAO,EAAE,CAAC,SAAS,EAAC,eAAe,CAAC,EAAE,GAAG,EAAE,CAAC,OAAO,CAAC,WAAW,CAAC,CAAC,CAAC;AAGxE,QAAA,sBAAsB,GAAqE,IAAW,CAAC;AACvG,QAAA,4BAA4B,GAA2E,IAAW,CAAC;AAChI,SAAS,CAAC,QAAQ,CAAC,OAAO,EAAE,CAAC,wBAAwB,EAAC,8BAA8B,CAAC,EAAE,GAAG,EAAE,CAAC,OAAO,CAAC,0BAA0B,CAAC,CAAC,CAAC;AAGrH,QAAA,uBAAuB,GAAuE,IAAW,CAAC;AAC1G,QAAA,6BAA6B,GAA6E,IAAW,CAAC;AACnI,SAAS,CAAC,QAAQ,CAAC,OAAO,EAAE,CAAC,yBAAyB,EAAC,+BAA+B,CAAC,EAAE,GAAG,EAAE,CAAC,OAAO,CAAC,2BAA2B,CAAC,CAAC,CAAC;AAGxH,QAAA,+BAA+B,GAAuF,IAAW,CAAC;AAClI,QAAA,qCAAqC,GAA6F,IAAW,CAAC;AAC3J,SAAS,CAAC,QAAQ,CAAC,OAAO,EAAE,CAAC,iCAAiC,EAAC,uCAAuC,CAAC,EAAE,GAAG,EAAE,CAAC,OAAO,CAAC,mCAAmC,CAAC,CAAC,CAAC;AAIhJ,QAAA,aAAa,GAAmD,IAAW,CAAC;AACzF,SAAS,CAAC,QAAQ,CAAC,OAAO,EAAE,CAAC,eAAe,CAAC,EAAE,GAAG,EAAE,CAAC,OAAO,CAAC,iBAAiB,CAAC,CAAC,CAAC;AAIpE,QAAA,qBAAqB,GAAmE,IAAW,CAAC;AACjH,SAAS,CAAC,QAAQ,CAAC,OAAO,EAAE,CAAC,uBAAuB,CAAC,EAAE,GAAG,EAAE,CAAC,OAAO,CAAC,yBAAyB,CAAC,CAAC,CAAC;AAIpF,QAAA,oBAAoB,GAAiE,IAAW,CAAC;AAC9G,SAAS,CAAC,QAAQ,CAAC,OAAO,EAAE,CAAC,sBAAsB,CAAC,EAAE,GAAG,EAAE,CAAC,OAAO,CAAC,wBAAwB,CAAC,CAAC,CAAC;AAIlF,QAAA,4BAA4B,GAAiF,IAAW,CAAC;AACtI,SAAS,CAAC,QAAQ,CAAC,OAAO,EAAE,CAAC,8BAA8B,CAAC,EAAE,GAAG,EAAE,CAAC,OAAO,CAAC,gCAAgC,CAAC,CAAC,CAAC;AAG/G,MAAM,OAAO,GAAG;IACZ,OAAO,EAAE,SAAS,CAAC,UAAU,EAAE;IAC/B,SAAS,EAAE,CAAC,IAAY,EAAE,IAAY,EAAE,GAAW,EAAmB,EAAE;QACpE,QAAQ,IAAI,EAAE;YACV,KAAK,+BAA+B;gBAChC,OAAO,IAAI,kBAAU,CAAC,IAAI,EAAO,SAAS,EAAE,EAAE,GAAG,EAAE,CAAC,CAAA;YACxD,KAAK,qCAAqC;gBACtC,OAAO,IAAI,qBAAa,CAAC,IAAI,EAAO,SAAS,EAAE,EAAE,GAAG,EAAE,CAAC,CAAA;YAC3D,KAAK,qDAAqD;gBACtD,OAAO,IAAI,6BAAqB,CAAC,IAAI,EAAO,SAAS,EAAE,EAAE,GAAG,EAAE,CAAC,CAAA;YACnE,KAAK,mDAAmD;gBACpD,OAAO,IAAI,4BAAoB,CAAC,IAAI,EAAO,SAAS,EAAE,EAAE,GAAG,EAAE,CAAC,CAAA;YAClE,KAAK,mEAAmE;gBACpE,OAAO,IAAI,oCAA4B,CAAC,IAAI,EAAO,SAAS,EAAE,EAAE,GAAG,EAAE,CAAC,CAAA;YAC1E;gBACI,MAAM,IAAI,KAAK,CAAC,yBAAyB,IAAI,EAAE,CAAC,CAAC;SACxD;IACL,CAAC;CACJ,CAAC;AACF,MAAM,CAAC,OAAO,CAAC,sBAAsB,CAAC,KAAK,EAAE,gBAAgB,EAAE,OAAO,CAAC,CAAA;AACvE,MAAM,CAAC,OAAO,CAAC,sBAAsB,CAAC,KAAK,EAAE,mBAAmB,EAAE,OAAO,CAAC,CAAA;AAC1E,MAAM,CAAC,OAAO,CAAC,sBAAsB,CAAC,KAAK,EAAE,2BAA2B,EAAE,OAAO,CAAC,CAAA;AAClF,MAAM,CAAC,OAAO,CAAC,sBAAsB,CAAC,KAAK,EAAE,0BAA0B,EAAE,OAAO,CAAC,CAAA;AACjF,MAAM,CAAC,OAAO,CAAC,sBAAsB,CAAC,KAAK,EAAE,kCAAkC,EAAE,OAAO,CAAC,CAAA"}

package/iam/workforcePoolProvider.d.ts

@@ -0,0 +1,510 @@
+import * as pulumi from "@pulumi/pulumi";
+import * as inputs from "../types/input";
+import * as outputs from "../types/output";
+/**
+ * ## Example Usage
+ * ### Iam Workforce Pool Provider Saml Basic
+ *
+ * ```typescript
+ * import * as pulumi from "@pulumi/pulumi";
+ * import * as gcp from "@pulumi/gcp";
+ *
+ * const pool = new gcp.iam.WorkforcePool("pool", {
+ *     workforcePoolId: "example-pool",
+ *     parent: "organizations/123456789",
+ *     location: "global",
+ * }, {
+ *     provider: google_beta,
+ * });
+ * const example = new gcp.iam.WorkforcePoolProvider("example", {
+ *     workforcePoolId: pool.workforcePoolId,
+ *     location: pool.location,
+ *     providerId: "example-prvdr",
+ *     attributeMapping: {
+ *         "google.subject": "assertion.sub",
+ *     },
+ *     saml: {
+ *         idpMetadataXml: "<?xml version=\"1.0\"?><md:EntityDescriptor xmlns:md=\"urn:oasis:names:tc:SAML:2.0:metadata\" entityID=\"https://test.com\"><md:IDPSSODescriptor protocolSupportEnumeration=\"urn:oasis:names:tc:SAML:2.0:protocol\"> <md:KeyDescriptor use=\"signing\"><ds:KeyInfo xmlns:ds=\"http://www.w3.org/2000/09/xmldsig#\"><ds:X509Data><ds:X509Certificate>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</ds:X509Certificate></ds:X509Data></ds:KeyInfo></md:KeyDescriptor><md:SingleSignOnService Binding=\"urn:oasis:names:tc:SAML:2.0:bindings:HTTP-Redirect\" Location=\"https://test.com/sso\"/></md:IDPSSODescriptor></md:EntityDescriptor>",
+ *     },
+ * }, {
+ *     provider: google_beta,
+ * });
+ * ```
+ * ### Iam Workforce Pool Provider Saml Full
+ *
+ * ```typescript
+ * import * as pulumi from "@pulumi/pulumi";
+ * import * as gcp from "@pulumi/gcp";
+ *
+ * const pool = new gcp.iam.WorkforcePool("pool", {
+ *     workforcePoolId: "example-pool",
+ *     parent: "organizations/123456789",
+ *     location: "global",
+ * }, {
+ *     provider: google_beta,
+ * });
+ * const example = new gcp.iam.WorkforcePoolProvider("example", {
+ *     workforcePoolId: pool.workforcePoolId,
+ *     location: pool.location,
+ *     providerId: "example-prvdr",
+ *     attributeMapping: {
+ *         "google.subject": "assertion.sub",
+ *     },
+ *     saml: {
+ *         idpMetadataXml: "<?xml version=\"1.0\"?><md:EntityDescriptor xmlns:md=\"urn:oasis:names:tc:SAML:2.0:metadata\" entityID=\"https://test.com\"><md:IDPSSODescriptor protocolSupportEnumeration=\"urn:oasis:names:tc:SAML:2.0:protocol\"> <md:KeyDescriptor use=\"signing\"><ds:KeyInfo xmlns:ds=\"http://www.w3.org/2000/09/xmldsig#\"><ds:X509Data><ds:X509Certificate>MIIDpDCCAoygAwIBAgIGAX7/5qPhMA0GCSqGSIb3DQEBCwUAMIGSMQswCQYDVQQGEwJVUzETMBEGA1UECAwKQ2FsaWZvcm5pYTEWMBQGA1UEBwwNU2FuIEZyYW5jaXNjbzENMAsGA1UECgwET2t0YTEUMBIGA1UECwwLU1NPUHJvdmlkZXIxEzARBgNVBAMMCmRldi00NTg0MjExHDAaBgkqhkiG9w0BCQEWDWluZm9Ab2t0YS5jb20wHhcNMjIwMjE2MDAxOTEyWhcNMzIwMjE2MDAyMDEyWjCBkjELMAkGA1UEBhMCVVMxEzARBgNVBAgMCkNhbGlmb3JuaWExFjAUBgNVBAcMDVNhbiBGcmFuY2lzY28xDTALBgNVBAoMBE9rdGExFDASBgNVBAsMC1NTT1Byb3ZpZGVyMRMwEQYDVQQDDApkZXYtNDU4NDIxMRwwGgYJKoZIhvcNAQkBFg1pbmZvQG9rdGEuY29tMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxrBl7GKz52cRpxF9xCsirnRuMxnhFBaUrsHqAQrLqWmdlpNYZTVg+T9iQ+aq/iE68L+BRZcZniKIvW58wqqS0ltXVvIkXuDSvnvnkkI5yMIVErR20K8jSOKQm1FmK+fgAJ4koshFiu9oLiqu0Ejc0DuL3/XRsb4RuxjktKTb1khgBBtb+7idEk0sFR0RPefAweXImJkDHDm7SxjDwGJUubbqpdTxasPr0W+AHI1VUzsUsTiHAoyb0XDkYqHfDzhj/ZdIEl4zHQ3bEZvlD984ztAnmX2SuFLLKfXeAAGHei8MMixJvwxYkkPeYZ/5h8WgBZPP4heS2CPjwYExt29L8QIDAQABMA0GCSqGSIb3DQEBCwUAA4IBAQARjJFz++a9Z5IQGFzsZMrX2EDR5ML4xxUiQkbhld1S1PljOLcYFARDmUC2YYHOueU4ee8Jid9nPGEUebV/4Jok+b+oQh+dWMgiWjSLI7h5q4OYZ3VJtdlVwgMFt2iz+/4yBKMUZ50g3Qgg36vE34us+eKitg759JgCNsibxn0qtJgSPm0sgP2L6yTaLnoEUbXBRxCwynTSkp9ZijZqEzbhN0e2dWv7Rx/nfpohpDP6vEiFImKFHpDSv3M/5de1ytQzPFrZBYt9WlzlYwE1aD9FHCxdd+rWgYMVVoRaRmndpV/Rq3QUuDuFJtaoX11bC7ExkOpg9KstZzA63i3VcfYv</ds:X509Certificate></ds:X509Data></ds:KeyInfo></md:KeyDescriptor><md:SingleSignOnService Binding=\"urn:oasis:names:tc:SAML:2.0:bindings:HTTP-Redirect\" Location=\"https://test.com/sso\"/></md:IDPSSODescriptor></md:EntityDescriptor>",
+ *     },
+ *     displayName: "Display name",
+ *     description: "A sample SAML workforce pool provider.",
+ *     disabled: false,
+ *     attributeCondition: "true",
+ * }, {
+ *     provider: google_beta,
+ * });
+ * ```
+ * ### Iam Workforce Pool Provider Oidc Basic
+ *
+ * ```typescript
+ * import * as pulumi from "@pulumi/pulumi";
+ * import * as gcp from "@pulumi/gcp";
+ *
+ * const pool = new gcp.iam.WorkforcePool("pool", {
+ *     workforcePoolId: "example-pool",
+ *     parent: "organizations/123456789",
+ *     location: "global",
+ * }, {
+ *     provider: google_beta,
+ * });
+ * const example = new gcp.iam.WorkforcePoolProvider("example", {
+ *     workforcePoolId: pool.workforcePoolId,
+ *     location: pool.location,
+ *     providerId: "example-prvdr",
+ *     attributeMapping: {
+ *         "google.subject": "assertion.sub",
+ *     },
+ *     oidc: {
+ *         issuerUri: "https://accounts.google.com",
+ *         clientId: "client-id",
+ *     },
+ * }, {
+ *     provider: google_beta,
+ * });
+ * ```
+ * ### Iam Workforce Pool Provider Oidc Full
+ *
+ * ```typescript
+ * import * as pulumi from "@pulumi/pulumi";
+ * import * as gcp from "@pulumi/gcp";
+ *
+ * const pool = new gcp.iam.WorkforcePool("pool", {
+ *     workforcePoolId: "example-pool",
+ *     parent: "organizations/123456789",
+ *     location: "global",
+ * }, {
+ *     provider: google_beta,
+ * });
+ * const example = new gcp.iam.WorkforcePoolProvider("example", {
+ *     workforcePoolId: pool.workforcePoolId,
+ *     location: pool.location,
+ *     providerId: "example-prvdr",
+ *     attributeMapping: {
+ *         "google.subject": "assertion.sub",
+ *     },
+ *     oidc: {
+ *         issuerUri: "https://accounts.google.com",
+ *         clientId: "client-id",
+ *     },
+ *     displayName: "Display name",
+ *     description: "A sample OIDC workforce pool provider.",
+ *     disabled: false,
+ *     attributeCondition: "true",
+ * }, {
+ *     provider: google_beta,
+ * });
+ * ```
+ *
+ * ## Import
+ *
+ * WorkforcePoolProvider can be imported using any of these accepted formats
+ *
+ * ```sh
+ *  $ pulumi import gcp:iam/workforcePoolProvider:WorkforcePoolProvider default locations/{{location}}/workforcePools/{{workforce_pool_id}}/providers/{{provider_id}}
+ * ```
+ *
+ * ```sh
+ *  $ pulumi import gcp:iam/workforcePoolProvider:WorkforcePoolProvider default {{location}}/{{workforce_pool_id}}/{{provider_id}}
+ * ```
+ */
+export declare class WorkforcePoolProvider extends pulumi.CustomResource {
+    /**
+     * Get an existing WorkforcePoolProvider resource's state with the given name, ID, and optional extra
+     * properties used to qualify the lookup.
+     *
+     * @param name The _unique_ name of the resulting resource.
+     * @param id The _unique_ provider ID of the resource to lookup.
+     * @param state Any extra arguments used during the lookup.
+     * @param opts Optional settings to control the behavior of the CustomResource.
+     */
+    static get(name: string, id: pulumi.Input<pulumi.ID>, state?: WorkforcePoolProviderState, opts?: pulumi.CustomResourceOptions): WorkforcePoolProvider;
+    /**
+     * Returns true if the given object is an instance of WorkforcePoolProvider.  This is designed to work even
+     * when multiple copies of the Pulumi SDK have been loaded into the same process.
+     */
+    static isInstance(obj: any): obj is WorkforcePoolProvider;
+    /**
+     * A [Common Expression Language](https://opensource.google/projects/cel) expression, in
+     * plain text, to restrict what otherwise valid authentication credentials issued by the
+     * provider should not be accepted.
+     * The expression must output a boolean representing whether to allow the federation.
+     * The following keywords may be referenced in the expressions:
+     * * `assertion`: JSON representing the authentication credential issued by the provider.
+     * * `google`: The Google attributes mapped from the assertion in the `attributeMappings`.
+     * `google.profile_photo` and `google.display_name` are not supported.
+     * * `attribute`: The custom attributes mapped from the assertion in the `attributeMappings`.
+     * The maximum length of the attribute condition expression is 4096 characters.
+     * If unspecified, all valid authentication credentials will be accepted.
+     * The following example shows how to only allow credentials with a mapped `google.groups` value of `admins`:
+     * ```typescript
+     * import * as pulumi from "@pulumi/pulumi";
+     * ```
+     */
+    readonly attributeCondition: pulumi.Output<string | undefined>;
+    /**
+     * Maps attributes from the authentication credentials issued by an external identity provider
+     * to Google Cloud attributes, such as `subject` and `segment`.
+     * Each key must be a string specifying the Google Cloud IAM attribute to map to.
+     * The following keys are supported:
+     * * `google.subject`: The principal IAM is authenticating. You can reference this value in IAM bindings.
+     * This is also the subject that appears in Cloud Logging logs. This is a required field and
+     * the mapped subject cannot exceed 127 bytes.
+     * * `google.groups`: Groups the authenticating user belongs to. You can grant groups access to
+     * resources using an IAM `principalSet` binding; access applies to all members of the group.
+     * * `google.display_name`: The name of the authenticated user. This is an optional field and
+     * the mapped display name cannot exceed 100 bytes. If not set, `google.subject` will be displayed instead.
+     * This attribute cannot be referenced in IAM bindings.
+     * * `google.profile_photo`: The URL that specifies the authenticated user's thumbnail photo.
+     * This is an optional field. When set, the image will be visible as the user's profile picture.
+     * If not set, a generic user icon will be displayed instead.
+     * This attribute cannot be referenced in IAM bindings.
+     * You can also provide custom attributes by specifying `attribute.{custom_attribute}`, where {custom_attribute}
+     * is the name of the custom attribute to be mapped. You can define a maximum of 50 custom attributes.
+     * The maximum length of a mapped attribute key is 100 characters, and the key may only contain the characters [a-z0-9_].
+     * You can reference these attributes in IAM policies to define fine-grained access for a workforce pool
+     * to Google Cloud resources. For example:
+     * * `google.subject`:
+     * `principal://iam.googleapis.com/locations/{location}/workforcePools/{pool}/subject/{value}`
+     * * `google.groups`:
+     * `principalSet://iam.googleapis.com/locations/{location}/workforcePools/{pool}/group/{value}`
+     * * `attribute.{custom_attribute}`:
+     * `principalSet://iam.googleapis.com/locations/{location}/workforcePools/{pool}/attribute.{custom_attribute}/{value}`
+     * Each value must be a [Common Expression Language](https://opensource.google/projects/cel)
+     * function that maps an identity provider credential to the normalized attribute specified
+     * by the corresponding map key.
+     * You can use the `assertion` keyword in the expression to access a JSON representation of
+     * the authentication credential issued by the provider.
+     * The maximum length of an attribute mapping expression is 2048 characters. When evaluated,
+     * the total size of all mapped attributes must not exceed 8KB.
+     * For OIDC providers, you must supply a custom mapping that includes the `google.subject` attribute.
+     * For example, the following maps the sub claim of the incoming credential to the `subject` attribute
+     * on a Google token:
+     * ```typescript
+     * import * as pulumi from "@pulumi/pulumi";
+     * ```
+     * An object containing a list of `"key": value` pairs.
+     * Example: `{ "name": "wrench", "mass": "1.3kg", "count": "3" }`.
+     */
+    readonly attributeMapping: pulumi.Output<{
+        [key: string]: string;
+    } | undefined>;
+    /**
+     * A user-specified description of the provider. Cannot exceed 256 characters.
+     */
+    readonly description: pulumi.Output<string | undefined>;
+    /**
+     * Whether the provider is disabled. You cannot use a disabled provider to exchange tokens.
+     * However, existing tokens still grant access.
+     */
+    readonly disabled: pulumi.Output<boolean | undefined>;
+    /**
+     * A user-specified display name for the provider. Cannot exceed 32 characters.
+     */
+    readonly displayName: pulumi.Output<string | undefined>;
+    /**
+     * The location for the resource.
+     */
+    readonly location: pulumi.Output<string>;
+    /**
+     * Output only. The resource name of the provider. Format:
+     * 'locations/{location}/workforcePools/{workforcePoolId}/providers/{providerId}'
+     */
+    readonly name: pulumi.Output<string>;
+    /**
+     * Represents an OpenId Connect 1.0 identity provider.
+     * Structure is documented below.
+     */
+    readonly oidc: pulumi.Output<outputs.iam.WorkforcePoolProviderOidc | undefined>;
+    /**
+     * The ID for the provider, which becomes the final component of the resource name.
+     * This value must be 4-32 characters, and may contain the characters [a-z0-9-].
+     * The prefix `gcp-` is reserved for use by Google, and may not be specified.
+     */
+    readonly providerId: pulumi.Output<string>;
+    /**
+     * Represents a SAML identity provider.
+     * Structure is documented below.
+     */
+    readonly saml: pulumi.Output<outputs.iam.WorkforcePoolProviderSaml | undefined>;
+    /**
+     * The current state of the provider. * STATE_UNSPECIFIED: State unspecified. * ACTIVE: The provider is active and may be
+     * used to validate authentication credentials. * DELETED: The provider is soft-deleted. Soft-deleted providers are
+     * permanently deleted after approximately 30 days. You can restore a soft-deleted provider using
+     * [providers.undelete](https://cloud.google.com/iam/docs/reference/rest/v1/locations.workforcePools.providers/undelete#google.iam.admin.v1.WorkforcePools.UndeleteWorkforcePoolProvider).
+     */
+    readonly state: pulumi.Output<string>;
+    /**
+     * The ID to use for the pool, which becomes the final component of the resource name.
+     * The IDs must be a globally unique string of 6 to 63 lowercase letters, digits, or hyphens.
+     * It must start with a letter, and cannot have a trailing hyphen.
+     * The prefix `gcp-` is reserved for use by Google, and may not be specified.
+     */
+    readonly workforcePoolId: pulumi.Output<string>;
+    /**
+     * Create a WorkforcePoolProvider resource with the given unique name, arguments, and options.
+     *
+     * @param name The _unique_ name of the resource.
+     * @param args The arguments to use to populate this resource's properties.
+     * @param opts A bag of options that control this resource's behavior.
+     */
+    constructor(name: string, args: WorkforcePoolProviderArgs, opts?: pulumi.CustomResourceOptions);
+}
+/**
+ * Input properties used for looking up and filtering WorkforcePoolProvider resources.
+ */
+export interface WorkforcePoolProviderState {
+    /**
+     * A [Common Expression Language](https://opensource.google/projects/cel) expression, in
+     * plain text, to restrict what otherwise valid authentication credentials issued by the
+     * provider should not be accepted.
+     * The expression must output a boolean representing whether to allow the federation.
+     * The following keywords may be referenced in the expressions:
+     * * `assertion`: JSON representing the authentication credential issued by the provider.
+     * * `google`: The Google attributes mapped from the assertion in the `attributeMappings`.
+     * `google.profile_photo` and `google.display_name` are not supported.
+     * * `attribute`: The custom attributes mapped from the assertion in the `attributeMappings`.
+     * The maximum length of the attribute condition expression is 4096 characters.
+     * If unspecified, all valid authentication credentials will be accepted.
+     * The following example shows how to only allow credentials with a mapped `google.groups` value of `admins`:
+     * ```typescript
+     * import * as pulumi from "@pulumi/pulumi";
+     * ```
+     */
+    attributeCondition?: pulumi.Input<string>;
+    /**
+     * Maps attributes from the authentication credentials issued by an external identity provider
+     * to Google Cloud attributes, such as `subject` and `segment`.
+     * Each key must be a string specifying the Google Cloud IAM attribute to map to.
+     * The following keys are supported:
+     * * `google.subject`: The principal IAM is authenticating. You can reference this value in IAM bindings.
+     * This is also the subject that appears in Cloud Logging logs. This is a required field and
+     * the mapped subject cannot exceed 127 bytes.
+     * * `google.groups`: Groups the authenticating user belongs to. You can grant groups access to
+     * resources using an IAM `principalSet` binding; access applies to all members of the group.
+     * * `google.display_name`: The name of the authenticated user. This is an optional field and
+     * the mapped display name cannot exceed 100 bytes. If not set, `google.subject` will be displayed instead.
+     * This attribute cannot be referenced in IAM bindings.
+     * * `google.profile_photo`: The URL that specifies the authenticated user's thumbnail photo.
+     * This is an optional field. When set, the image will be visible as the user's profile picture.
+     * If not set, a generic user icon will be displayed instead.
+     * This attribute cannot be referenced in IAM bindings.
+     * You can also provide custom attributes by specifying `attribute.{custom_attribute}`, where {custom_attribute}
+     * is the name of the custom attribute to be mapped. You can define a maximum of 50 custom attributes.
+     * The maximum length of a mapped attribute key is 100 characters, and the key may only contain the characters [a-z0-9_].
+     * You can reference these attributes in IAM policies to define fine-grained access for a workforce pool
+     * to Google Cloud resources. For example:
+     * * `google.subject`:
+     * `principal://iam.googleapis.com/locations/{location}/workforcePools/{pool}/subject/{value}`
+     * * `google.groups`:
+     * `principalSet://iam.googleapis.com/locations/{location}/workforcePools/{pool}/group/{value}`
+     * * `attribute.{custom_attribute}`:
+     * `principalSet://iam.googleapis.com/locations/{location}/workforcePools/{pool}/attribute.{custom_attribute}/{value}`
+     * Each value must be a [Common Expression Language](https://opensource.google/projects/cel)
+     * function that maps an identity provider credential to the normalized attribute specified
+     * by the corresponding map key.
+     * You can use the `assertion` keyword in the expression to access a JSON representation of
+     * the authentication credential issued by the provider.
+     * The maximum length of an attribute mapping expression is 2048 characters. When evaluated,
+     * the total size of all mapped attributes must not exceed 8KB.
+     * For OIDC providers, you must supply a custom mapping that includes the `google.subject` attribute.
+     * For example, the following maps the sub claim of the incoming credential to the `subject` attribute
+     * on a Google token:
+     * ```typescript
+     * import * as pulumi from "@pulumi/pulumi";
+     * ```
+     * An object containing a list of `"key": value` pairs.
+     * Example: `{ "name": "wrench", "mass": "1.3kg", "count": "3" }`.
+     */
+    attributeMapping?: pulumi.Input<{
+        [key: string]: pulumi.Input<string>;
+    }>;
+    /**
+     * A user-specified description of the provider. Cannot exceed 256 characters.
+     */
+    description?: pulumi.Input<string>;
+    /**
+     * Whether the provider is disabled. You cannot use a disabled provider to exchange tokens.
+     * However, existing tokens still grant access.
+     */
+    disabled?: pulumi.Input<boolean>;
+    /**
+     * A user-specified display name for the provider. Cannot exceed 32 characters.
+     */
+    displayName?: pulumi.Input<string>;
+    /**
+     * The location for the resource.
+     */
+    location?: pulumi.Input<string>;
+    /**
+     * Output only. The resource name of the provider. Format:
+     * 'locations/{location}/workforcePools/{workforcePoolId}/providers/{providerId}'
+     */
+    name?: pulumi.Input<string>;
+    /**
+     * Represents an OpenId Connect 1.0 identity provider.
+     * Structure is documented below.
+     */
+    oidc?: pulumi.Input<inputs.iam.WorkforcePoolProviderOidc>;
+    /**
+     * The ID for the provider, which becomes the final component of the resource name.
+     * This value must be 4-32 characters, and may contain the characters [a-z0-9-].
+     * The prefix `gcp-` is reserved for use by Google, and may not be specified.
+     */
+    providerId?: pulumi.Input<string>;
+    /**
+     * Represents a SAML identity provider.
+     * Structure is documented below.
+     */
+    saml?: pulumi.Input<inputs.iam.WorkforcePoolProviderSaml>;
+    /**
+     * The current state of the provider. * STATE_UNSPECIFIED: State unspecified. * ACTIVE: The provider is active and may be
+     * used to validate authentication credentials. * DELETED: The provider is soft-deleted. Soft-deleted providers are
+     * permanently deleted after approximately 30 days. You can restore a soft-deleted provider using
+     * [providers.undelete](https://cloud.google.com/iam/docs/reference/rest/v1/locations.workforcePools.providers/undelete#google.iam.admin.v1.WorkforcePools.UndeleteWorkforcePoolProvider).
+     */
+    state?: pulumi.Input<string>;
+    /**
+     * The ID to use for the pool, which becomes the final component of the resource name.
+     * The IDs must be a globally unique string of 6 to 63 lowercase letters, digits, or hyphens.
+     * It must start with a letter, and cannot have a trailing hyphen.
+     * The prefix `gcp-` is reserved for use by Google, and may not be specified.
+     */
+    workforcePoolId?: pulumi.Input<string>;
+}
+/**
+ * The set of arguments for constructing a WorkforcePoolProvider resource.
+ */
+export interface WorkforcePoolProviderArgs {
+    /**
+     * A [Common Expression Language](https://opensource.google/projects/cel) expression, in
+     * plain text, to restrict what otherwise valid authentication credentials issued by the
+     * provider should not be accepted.
+     * The expression must output a boolean representing whether to allow the federation.
+     * The following keywords may be referenced in the expressions:
+     * * `assertion`: JSON representing the authentication credential issued by the provider.
+     * * `google`: The Google attributes mapped from the assertion in the `attributeMappings`.
+     * `google.profile_photo` and `google.display_name` are not supported.
+     * * `attribute`: The custom attributes mapped from the assertion in the `attributeMappings`.
+     * The maximum length of the attribute condition expression is 4096 characters.
+     * If unspecified, all valid authentication credentials will be accepted.
+     * The following example shows how to only allow credentials with a mapped `google.groups` value of `admins`:
+     * ```typescript
+     * import * as pulumi from "@pulumi/pulumi";
+     * ```
+     */
+    attributeCondition?: pulumi.Input<string>;
+    /**
+     * Maps attributes from the authentication credentials issued by an external identity provider
+     * to Google Cloud attributes, such as `subject` and `segment`.
+     * Each key must be a string specifying the Google Cloud IAM attribute to map to.
+     * The following keys are supported:
+     * * `google.subject`: The principal IAM is authenticating. You can reference this value in IAM bindings.
+     * This is also the subject that appears in Cloud Logging logs. This is a required field and
+     * the mapped subject cannot exceed 127 bytes.
+     * * `google.groups`: Groups the authenticating user belongs to. You can grant groups access to
+     * resources using an IAM `principalSet` binding; access applies to all members of the group.
+     * * `google.display_name`: The name of the authenticated user. This is an optional field and
+     * the mapped display name cannot exceed 100 bytes. If not set, `google.subject` will be displayed instead.
+     * This attribute cannot be referenced in IAM bindings.
+     * * `google.profile_photo`: The URL that specifies the authenticated user's thumbnail photo.
+     * This is an optional field. When set, the image will be visible as the user's profile picture.
+     * If not set, a generic user icon will be displayed instead.
+     * This attribute cannot be referenced in IAM bindings.
+     * You can also provide custom attributes by specifying `attribute.{custom_attribute}`, where {custom_attribute}
+     * is the name of the custom attribute to be mapped. You can define a maximum of 50 custom attributes.
+     * The maximum length of a mapped attribute key is 100 characters, and the key may only contain the characters [a-z0-9_].
+     * You can reference these attributes in IAM policies to define fine-grained access for a workforce pool
+     * to Google Cloud resources. For example:
+     * * `google.subject`:
+     * `principal://iam.googleapis.com/locations/{location}/workforcePools/{pool}/subject/{value}`
+     * * `google.groups`:
+     * `principalSet://iam.googleapis.com/locations/{location}/workforcePools/{pool}/group/{value}`
+     * * `attribute.{custom_attribute}`:
+     * `principalSet://iam.googleapis.com/locations/{location}/workforcePools/{pool}/attribute.{custom_attribute}/{value}`
+     * Each value must be a [Common Expression Language](https://opensource.google/projects/cel)
+     * function that maps an identity provider credential to the normalized attribute specified
+     * by the corresponding map key.
+     * You can use the `assertion` keyword in the expression to access a JSON representation of
+     * the authentication credential issued by the provider.
+     * The maximum length of an attribute mapping expression is 2048 characters. When evaluated,
+     * the total size of all mapped attributes must not exceed 8KB.
+     * For OIDC providers, you must supply a custom mapping that includes the `google.subject` attribute.
+     * For example, the following maps the sub claim of the incoming credential to the `subject` attribute
+     * on a Google token:
+     * ```typescript
+     * import * as pulumi from "@pulumi/pulumi";
+     * ```
+     * An object containing a list of `"key": value` pairs.
+     * Example: `{ "name": "wrench", "mass": "1.3kg", "count": "3" }`.
+     */
+    attributeMapping?: pulumi.Input<{
+        [key: string]: pulumi.Input<string>;
+    }>;
+    /**
+     * A user-specified description of the provider. Cannot exceed 256 characters.
+     */
+    description?: pulumi.Input<string>;
+    /**
+     * Whether the provider is disabled. You cannot use a disabled provider to exchange tokens.
+     * However, existing tokens still grant access.
+     */
+    disabled?: pulumi.Input<boolean>;
+    /**
+     * A user-specified display name for the provider. Cannot exceed 32 characters.
+     */
+    displayName?: pulumi.Input<string>;
+    /**
+     * The location for the resource.
+     */
+    location: pulumi.Input<string>;
+    /**
+     * Represents an OpenId Connect 1.0 identity provider.
+     * Structure is documented below.
+     */
+    oidc?: pulumi.Input<inputs.iam.WorkforcePoolProviderOidc>;
+    /**
+     * The ID for the provider, which becomes the final component of the resource name.
+     * This value must be 4-32 characters, and may contain the characters [a-z0-9-].
+     * The prefix `gcp-` is reserved for use by Google, and may not be specified.
+     */
+    providerId: pulumi.Input<string>;
+    /**
+     * Represents a SAML identity provider.
+     * Structure is documented below.
+     */
+    saml?: pulumi.Input<inputs.iam.WorkforcePoolProviderSaml>;
+    /**
+     * The ID to use for the pool, which becomes the final component of the resource name.
+     * The IDs must be a globally unique string of 6 to 63 lowercase letters, digits, or hyphens.
+     * It must start with a letter, and cannot have a trailing hyphen.
+     * The prefix `gcp-` is reserved for use by Google, and may not be specified.
+     */
+    workforcePoolId: pulumi.Input<string>;
+}