@pulumi/gcp 7.7.0 → 7.7.1

package/types/input.d.ts

@@ -3324,24 +3324,63 @@ export declare namespace appengine {
 }
 export declare namespace artifactregistry {
     interface RepositoryCleanupPolicy {
+        /**
+         * Policy action.
+         * Possible values are: `DELETE`, `KEEP`.
+         */
         action?: pulumi.Input<string>;
+        /**
+         * Policy condition for matching versions.
+         * Structure is documented below.
+         */
         condition?: pulumi.Input<inputs.artifactregistry.RepositoryCleanupPolicyCondition>;
         /**
          * The identifier for this object. Format specified above.
          */
         id: pulumi.Input<string>;
+        /**
+         * Policy condition for retaining a minimum number of versions. May only be
+         * specified with a Keep action.
+         * Structure is documented below.
+         */
         mostRecentVersions?: pulumi.Input<inputs.artifactregistry.RepositoryCleanupPolicyMostRecentVersions>;
     }
     interface RepositoryCleanupPolicyCondition {
+        /**
+         * Match versions newer than a duration.
+         */
         newerThan?: pulumi.Input<string>;
+        /**
+         * Match versions older than a duration.
+         */
         olderThan?: pulumi.Input<string>;
+        /**
+         * Match versions by package prefix. Applied on any prefix match.
+         */
         packageNamePrefixes?: pulumi.Input<pulumi.Input<string>[]>;
+        /**
+         * Match versions by tag prefix. Applied on any prefix match.
+         */
         tagPrefixes?: pulumi.Input<pulumi.Input<string>[]>;
+        /**
+         * Match versions by tag status.
+         * Default value is `ANY`.
+         * Possible values are: `TAGGED`, `UNTAGGED`, `ANY`.
+         */
         tagState?: pulumi.Input<string>;
+        /**
+         * Match versions by version name prefix. Applied on any prefix match.
+         */
         versionNamePrefixes?: pulumi.Input<pulumi.Input<string>[]>;
     }
     interface RepositoryCleanupPolicyMostRecentVersions {
+        /**
+         * Minimum number of versions to keep.
+         */
         keepCount?: pulumi.Input<number>;
+        /**
+         * Match versions by package prefix. Applied on any prefix match.
+         */
         packageNamePrefixes?: pulumi.Input<pulumi.Input<string>[]>;
     }
     interface RepositoryDockerConfig {
@@ -3527,12 +3566,27 @@ export declare namespace artifactregistry {
 }
 export declare namespace assuredworkloads {
     interface WorkloadComplianceStatus {
+        /**
+         * Number of current orgPolicy violations which are acknowledged.
+         */
         acknowledgedViolationCounts?: pulumi.Input<pulumi.Input<number>[]>;
+        /**
+         * Number of current orgPolicy violations which are not acknowledged.
+         */
         activeViolationCounts?: pulumi.Input<pulumi.Input<number>[]>;
     }
     interface WorkloadEkmProvisioningResponse {
+        /**
+         * Indicates Ekm provisioning error if any. Possible values: EKM_PROVISIONING_ERROR_DOMAIN_UNSPECIFIED, UNSPECIFIED_ERROR, GOOGLE_SERVER_ERROR, EXTERNAL_USER_ERROR, EXTERNAL_PARTNER_ERROR, TIMEOUT_ERROR
+         */
         ekmProvisioningErrorDomain?: pulumi.Input<string>;
+        /**
+         * Detailed error message if Ekm provisioning fails Possible values: EKM_PROVISIONING_ERROR_MAPPING_UNSPECIFIED, INVALID_SERVICE_ACCOUNT, MISSING_METRICS_SCOPE_ADMIN_PERMISSION, MISSING_EKM_CONNECTION_ADMIN_PERMISSION
+         */
         ekmProvisioningErrorMapping?: pulumi.Input<string>;
+        /**
+         * Indicates Ekm enrollment Provisioning of a given workload. Possible values: EKM_PROVISIONING_STATE_UNSPECIFIED, EKM_PROVISIONING_STATE_PENDING, EKM_PROVISIONING_STATE_FAILED, EKM_PROVISIONING_STATE_COMPLETED
+         */
         ekmProvisioningState?: pulumi.Input<string>;
     }
     interface WorkloadKmsSettings {
@@ -3584,7 +3638,13 @@ export declare namespace assuredworkloads {
         resourceType?: pulumi.Input<string>;
     }
     interface WorkloadSaaEnrollmentResponse {
+        /**
+         * Indicates SAA enrollment setup error if any.
+         */
         setupErrors?: pulumi.Input<pulumi.Input<string>[]>;
+        /**
+         * Indicates SAA enrollment status of a given workload. Possible values: SETUP_STATE_UNSPECIFIED, STATUS_PENDING, STATUS_COMPLETE
+         */
         setupStatus?: pulumi.Input<string>;
     }
 }
@@ -5175,9 +5235,21 @@ export declare namespace bigquery {
         columns: pulumi.Input<pulumi.Input<string>[]>;
     }
     interface TableTableReplicationInfo {
+        /**
+         * The interval at which the source materialized view is polled for updates. The default is 300000.
+         */
         replicationIntervalMs?: pulumi.Input<number>;
+        /**
+         * The ID of the source dataset.
+         */
         sourceDatasetId: pulumi.Input<string>;
+        /**
+         * The ID of the source project.
+         */
         sourceProjectId: pulumi.Input<string>;
+        /**
+         * The ID of the source materialized view.
+         */
         sourceTableId: pulumi.Input<string>;
     }
     interface TableTimePartitioning {
@@ -5349,6 +5421,9 @@ export declare namespace bigtable {
          * If no value is set, Cloud Bigtable automatically allocates nodes based on your data footprint and optimized for 50% storage utilization.
          */
         numNodes?: pulumi.Input<number>;
+        /**
+         * The state of the cluster
+         */
         state?: pulumi.Input<string>;
         /**
          * The storage type to use. One of `"SSD"` or
@@ -8806,8 +8881,17 @@ export declare namespace cloudbuildv2 {
         title: pulumi.Input<string>;
     }
     interface ConnectionInstallationState {
+        /**
+         * Output only. Link to follow for next action. Empty string if the installation is already complete.
+         */
         actionUri?: pulumi.Input<string>;
+        /**
+         * Output only. Message of what the user should do next to continue the installation. Empty string if the installation is already complete.
+         */
         message?: pulumi.Input<string>;
+        /**
+         * Output only. Current step of the installation process. Possible values: STAGE_UNSPECIFIED, PENDING_CREATE_APP, PENDING_USER_OAUTH, PENDING_INSTALL_APP, COMPLETE
+         */
         stage?: pulumi.Input<string>;
     }
 }
@@ -8878,11 +8962,23 @@ export declare namespace clouddeploy {
         }>;
     }
     interface DeliveryPipelineCondition {
+        /**
+         * Details around the Pipeline's overall status.
+         */
         pipelineReadyConditions?: pulumi.Input<pulumi.Input<inputs.clouddeploy.DeliveryPipelineConditionPipelineReadyCondition>[]>;
+        /**
+         * Details around targets enumerated in the pipeline.
+         */
         targetsPresentConditions?: pulumi.Input<pulumi.Input<inputs.clouddeploy.DeliveryPipelineConditionTargetsPresentCondition>[]>;
+        /**
+         * Details on the whether the targets enumerated in the pipeline are of the same type.
+         */
         targetsTypeConditions?: pulumi.Input<pulumi.Input<inputs.clouddeploy.DeliveryPipelineConditionTargetsTypeCondition>[]>;
     }
     interface DeliveryPipelineConditionPipelineReadyCondition {
+        /**
+         * True if the Pipeline is in a valid state. Otherwise at least one condition in `PipelineCondition` is in an invalid state. Iterate over those conditions and see which condition(s) has status = false to find out what is wrong with the Pipeline.
+         */
         status?: pulumi.Input<boolean>;
         /**
          * Output only. Most recent time at which the pipeline was updated.
@@ -8890,7 +8986,13 @@ export declare namespace clouddeploy {
         updateTime?: pulumi.Input<string>;
     }
     interface DeliveryPipelineConditionTargetsPresentCondition {
+        /**
+         * The list of Target names that are missing. For example, projects/{project_id}/locations/{location_name}/targets/{target_name}.
+         */
         missingTargets?: pulumi.Input<pulumi.Input<string>[]>;
+        /**
+         * True if there aren't any missing Targets.
+         */
         status?: pulumi.Input<boolean>;
         /**
          * Output only. Most recent time at which the pipeline was updated.
@@ -8898,7 +9000,13 @@ export declare namespace clouddeploy {
         updateTime?: pulumi.Input<string>;
     }
     interface DeliveryPipelineConditionTargetsTypeCondition {
+        /**
+         * Human readable error message.
+         */
         errorDetails?: pulumi.Input<string>;
+        /**
+         * True if the targets are all a comparable type. For example this is true if all targets are GKE clusters. This is false if some targets are Cloud Run targets and others are GKE clusters.
+         */
         status?: pulumi.Input<boolean>;
     }
     interface DeliveryPipelineSerialPipeline {
@@ -9570,6 +9678,9 @@ export declare namespace cloudfunctions {
         version: pulumi.Input<string>;
     }
     interface FunctionSourceRepository {
+        /**
+         * The URL pointing to the hosted repository where the function was defined at the time of deployment.
+         */
         deployedUrl?: pulumi.Input<string>;
         /**
          * The URL pointing to the hosted repository where the function is defined. There are supported Cloud Source Repository URLs in the following formats:
@@ -10887,6 +10998,15 @@ export declare namespace cloudrun {
         name: pulumi.Input<string>;
     }
     interface ServiceTemplateSpecVolume {
+        /**
+         * A filesystem specified by the Container Storage Interface (CSI).
+         * Structure is documented below.
+         */
+        csi?: pulumi.Input<inputs.cloudrun.ServiceTemplateSpecVolumeCsi>;
+        /**
+         * Ephemeral storage which can be backed by real disks (HD, SSD), network storage or memory (i.e. tmpfs). For now only in memory (tmpfs) is supported. It is ephemeral in the sense that when the sandbox is taken down, the data is destroyed with it (it does not persist across sandbox runs).
+         * Structure is documented below.
+         */
         emptyDir?: pulumi.Input<inputs.cloudrun.ServiceTemplateSpecVolumeEmptyDir>;
         /**
          * Volume's name.
@@ -10900,6 +11020,29 @@ export declare namespace cloudrun {
          */
         secret?: pulumi.Input<inputs.cloudrun.ServiceTemplateSpecVolumeSecret>;
     }
+    interface ServiceTemplateSpecVolumeCsi {
+        /**
+         * Unique name representing the type of file system to be created. Cloud Run supports the following values:
+         * * gcsfuse.run.googleapis.com: Mount a Google Cloud Storage bucket using GCSFuse. This driver requires the
+         * run.googleapis.com/execution-environment annotation to be set to "gen2" and
+         * run.googleapis.com/launch-stage set to "BETA" or "ALPHA".
+         */
+        driver: pulumi.Input<string>;
+        /**
+         * If true, all mounts created from this volume will be read-only.
+         */
+        readOnly?: pulumi.Input<boolean>;
+        /**
+         * Driver-specific attributes. The following options are supported for available drivers:
+         * * gcsfuse.run.googleapis.com
+         * * bucketName: The name of the Cloud Storage Bucket that backs this volume. The Cloud Run Service identity must have access to this bucket.
+         *
+         * - - -
+         */
+        volumeAttributes?: pulumi.Input<{
+            [key: string]: pulumi.Input<string>;
+        }>;
+    }
     interface ServiceTemplateSpecVolumeEmptyDir {
         /**
          * The medium on which the data is stored. The default is "" which means to use the node's default medium. Must be an empty string (default) or Memory.
@@ -10907,8 +11050,6 @@ export declare namespace cloudrun {
         medium?: pulumi.Input<string>;
         /**
          * Limit on the storage usable by this EmptyDir volume. The size limit is also applicable for memory medium. The maximum usage on memory medium EmptyDir would be the minimum value between the SizeLimit specified here and the sum of memory limits of all containers in a pod. This field's values are of the 'Quantity' k8s type: https://kubernetes.io/docs/reference/kubernetes-api/common-definitions/quantity/. The default is nil which means that the limit is undefined. More info: https://kubernetes.io/docs/concepts/storage/volumes/#emptydir.
-         *
-         * - - -
          */
         sizeLimit?: pulumi.Input<string>;
     }
@@ -11256,6 +11397,10 @@ export declare namespace cloudrunv2 {
          * Structure is documented below.
          */
         cloudSqlInstance?: pulumi.Input<inputs.cloudrunv2.JobTemplateTemplateVolumeCloudSqlInstance>;
+        /**
+         * Ephemeral storage used as a shared volume.
+         * Structure is documented below.
+         */
         emptyDir?: pulumi.Input<inputs.cloudrunv2.JobTemplateTemplateVolumeEmptyDir>;
         /**
          * Volume's name.
@@ -11825,6 +11970,10 @@ export declare namespace cloudrunv2 {
          * Structure is documented below.
          */
         cloudSqlInstance?: pulumi.Input<inputs.cloudrunv2.ServiceTemplateVolumeCloudSqlInstance>;
+        /**
+         * Ephemeral storage used as a shared volume.
+         * Structure is documented below.
+         */
         emptyDir?: pulumi.Input<inputs.cloudrunv2.ServiceTemplateVolumeEmptyDir>;
         /**
          * Represents a GCS Bucket mounted as a volume.
@@ -12313,151 +12462,455 @@ export declare namespace cloudtasks {
 }
 export declare namespace composer {
     interface EnvironmentConfig {
+        /**
+         * The URI of the Apache Airflow Web UI hosted within this environment.
+         */
         airflowUri?: pulumi.Input<string>;
+        /**
+         * The Cloud Storage prefix of the DAGs for this environment. Although Cloud Storage objects reside in a flat namespace, a hierarchical file tree can be simulated using '/'-delimited object name prefixes. DAG objects for this environment reside in a simulated directory with this prefix.
+         */
         dagGcsPrefix?: pulumi.Input<string>;
+        /**
+         * The configuration setting for Airflow data retention mechanism. This field is supported for Cloud Composer environments in versions composer-2.0.32-airflow-2.1.4. or newer
+         */
+        dataRetentionConfig?: pulumi.Input<inputs.composer.EnvironmentConfigDataRetentionConfig>;
+        /**
+         * The configuration of Cloud SQL instance that is used by the Apache Airflow software. This field is supported for Cloud Composer environments in versions composer-1.*.*-airflow-*.*.*.
+         */
         databaseConfig?: pulumi.Input<inputs.composer.EnvironmentConfigDatabaseConfig>;
+        /**
+         * Optional. If true, builds performed during operations that install Python packages have only private connectivity to Google services. If false, the builds also have access to the internet.
+         */
         enablePrivateBuildsOnly?: pulumi.Input<boolean>;
+        /**
+         * Optional. If true, a private Composer environment will be created.
+         */
         enablePrivateEnvironment?: pulumi.Input<boolean>;
+        /**
+         * The encryption options for the Composer environment and its dependencies.
+         */
         encryptionConfig?: pulumi.Input<inputs.composer.EnvironmentConfigEncryptionConfig>;
+        /**
+         * The size of the Cloud Composer environment. This field is supported for Cloud Composer environments in versions composer-2.*.*-airflow-*.*.* and newer.
+         */
         environmentSize?: pulumi.Input<string>;
+        /**
+         * The Kubernetes Engine cluster used to run this environment.
+         */
         gkeCluster?: pulumi.Input<string>;
+        /**
+         * The configuration for Cloud Composer maintenance window.
+         */
         maintenanceWindow?: pulumi.Input<inputs.composer.EnvironmentConfigMaintenanceWindow>;
+        /**
+         * Configuration options for the master authorized networks feature. Enabled master authorized networks will disallow all external traffic to access Kubernetes master through HTTPS except traffic from the given CIDR blocks, Google Compute Engine Public IPs and Google Prod IPs.
+         */
         masterAuthorizedNetworksConfig?: pulumi.Input<inputs.composer.EnvironmentConfigMasterAuthorizedNetworksConfig>;
+        /**
+         * The configuration used for the Kubernetes Engine cluster.
+         */
         nodeConfig?: pulumi.Input<inputs.composer.EnvironmentConfigNodeConfig>;
+        /**
+         * The number of nodes in the Kubernetes Engine cluster that will be used to run this environment. This field is supported for Cloud Composer environments in versions composer-1.*.*-airflow-*.*.*.
+         */
         nodeCount?: pulumi.Input<number>;
+        /**
+         * The configuration used for the Private IP Cloud Composer environment.
+         */
         privateEnvironmentConfig?: pulumi.Input<inputs.composer.EnvironmentConfigPrivateEnvironmentConfig>;
+        /**
+         * The recovery configuration settings for the Cloud Composer environment
+         */
         recoveryConfig?: pulumi.Input<inputs.composer.EnvironmentConfigRecoveryConfig>;
+        /**
+         * Whether high resilience is enabled or not. This field is supported for Cloud Composer environments in versions composer-2.1.15-airflow-*.*.* and newer.
+         */
         resilienceMode?: pulumi.Input<string>;
+        /**
+         * The configuration settings for software inside the environment.
+         */
         softwareConfig?: pulumi.Input<inputs.composer.EnvironmentConfigSoftwareConfig>;
+        /**
+         * The configuration settings for the Airflow web server App Engine instance. This field is supported for Cloud Composer environments in versions composer-1.*.*-airflow-*.*.*.
+         */
         webServerConfig?: pulumi.Input<inputs.composer.EnvironmentConfigWebServerConfig>;
+        /**
+         * Network-level access control policy for the Airflow web server.
+         */
         webServerNetworkAccessControl?: pulumi.Input<inputs.composer.EnvironmentConfigWebServerNetworkAccessControl>;
+        /**
+         * The workloads configuration settings for the GKE cluster associated with the Cloud Composer environment. Supported for Cloud Composer environments in versions composer-2.*.*-airflow-*.*.* and newer.
+         */
         workloadsConfig?: pulumi.Input<inputs.composer.EnvironmentConfigWorkloadsConfig>;
     }
+    interface EnvironmentConfigDataRetentionConfig {
+        /**
+         * Optional. The configuration setting for Task Logs.
+         */
+        taskLogsRetentionConfigs: pulumi.Input<pulumi.Input<inputs.composer.EnvironmentConfigDataRetentionConfigTaskLogsRetentionConfig>[]>;
+    }
+    interface EnvironmentConfigDataRetentionConfigTaskLogsRetentionConfig {
+        /**
+         * Whether logs in cloud logging only is enabled or not. This field is supported for Cloud Composer environments in versions composer-2.0.32-airflow-2.1.4 and newer.
+         */
+        storageMode?: pulumi.Input<string>;
+    }
     interface EnvironmentConfigDatabaseConfig {
+        /**
+         * Optional. Cloud SQL machine type used by Airflow database. It has to be one of: db-n1-standard-2, db-n1-standard-4, db-n1-standard-8 or db-n1-standard-16. If not specified, db-n1-standard-2 will be used.
+         */
         machineType?: pulumi.Input<string>;
+        /**
+         * Optional. Cloud SQL database preferred zone.
+         */
         zone?: pulumi.Input<string>;
     }
     interface EnvironmentConfigEncryptionConfig {
+        /**
+         * Optional. Customer-managed Encryption Key available through Google's Key Management Service. Cannot be updated.
+         */
         kmsKeyName: pulumi.Input<string>;
     }
     interface EnvironmentConfigMaintenanceWindow {
+        /**
+         * Maintenance window end time. It is used only to calculate the duration of the maintenance window. The value for end-time must be in the future, relative to 'start_time'.
+         */
         endTime: pulumi.Input<string>;
+        /**
+         * Maintenance window recurrence. Format is a subset of RFC-5545 (https://tools.ietf.org/html/rfc5545) 'RRULE'. The only allowed values for 'FREQ' field are 'FREQ=DAILY' and 'FREQ=WEEKLY;BYDAY=...'. Example values: 'FREQ=WEEKLY;BYDAY=TU,WE', 'FREQ=DAILY'.
+         */
         recurrence: pulumi.Input<string>;
+        /**
+         * Start time of the first recurrence of the maintenance window.
+         */
         startTime: pulumi.Input<string>;
     }
     interface EnvironmentConfigMasterAuthorizedNetworksConfig {
+        /**
+         * cidr_blocks define up to 50 external networks that could access Kubernetes master through HTTPS.
+         */
         cidrBlocks?: pulumi.Input<pulumi.Input<inputs.composer.EnvironmentConfigMasterAuthorizedNetworksConfigCidrBlock>[]>;
+        /**
+         * Whether or not master authorized networks is enabled.
+         */
         enabled: pulumi.Input<boolean>;
     }
     interface EnvironmentConfigMasterAuthorizedNetworksConfigCidrBlock {
+        /**
+         * cidr_block must be specified in CIDR notation.
+         */
         cidrBlock: pulumi.Input<string>;
+        /**
+         * display_name is a field for users to identify CIDR blocks.
+         */
         displayName?: pulumi.Input<string>;
     }
     interface EnvironmentConfigNodeConfig {
+        /**
+         * IPv4 cidr range that will be used by Composer internal components.
+         */
         composerInternalIpv4CidrBlock?: pulumi.Input<string>;
+        /**
+         * The disk size in GB used for node VMs. Minimum size is 20GB. If unspecified, defaults to 100GB. Cannot be updated. This field is supported for Cloud Composer environments in versions composer-1.*.*-airflow-*.*.*.
+         */
         diskSizeGb?: pulumi.Input<number>;
+        /**
+         * Deploys 'ip-masq-agent' daemon set in the GKE cluster and defines nonMasqueradeCIDRs equals to pod IP range so IP masquerading is used for all destination addresses, except between pods traffic. See: https://cloud.google.com/kubernetes-engine/docs/how-to/ip-masquerade-agent
+         */
         enableIpMasqAgent?: pulumi.Input<boolean>;
+        /**
+         * Configuration for controlling how IPs are allocated in the GKE cluster. Cannot be updated.
+         */
         ipAllocationPolicy?: pulumi.Input<inputs.composer.EnvironmentConfigNodeConfigIpAllocationPolicy>;
+        /**
+         * The Compute Engine machine type used for cluster instances, specified as a name or relative resource name. For example: "projects/{project}/zones/{zone}/machineTypes/{machineType}". Must belong to the enclosing environment's project and region/zone. This field is supported for Cloud Composer environments in versions composer-1.*.*-airflow-*.*.*.
+         */
         machineType?: pulumi.Input<string>;
+        /**
+         * The maximum pods per node in the GKE cluster allocated during environment creation. Lowering this value reduces IP address consumption by the Cloud Composer Kubernetes cluster. This value can only be set during environment creation, and only if the environment is VPC-Native. The range of possible values is 8-110, and the default is 32. Cannot be updated. This field is supported for Cloud Composer environments in versions composer-1.*.*-airflow-*.*.*.
+         */
         maxPodsPerNode?: pulumi.Input<number>;
+        /**
+         * The Compute Engine machine type used for cluster instances, specified as a name or relative resource name. For example: "projects/{project}/zones/{zone}/machineTypes/{machineType}". Must belong to the enclosing environment's project and region/zone. The network must belong to the environment's project. If unspecified, the "default" network ID in the environment's project is used. If a Custom Subnet Network is provided, subnetwork must also be provided.
+         */
         network?: pulumi.Input<string>;
+        /**
+         * The set of Google API scopes to be made available on all node VMs. Cannot be updated. If empty, defaults to ["https://www.googleapis.com/auth/cloud-platform"]. This field is supported for Cloud Composer environments in versions composer-1.*.*-airflow-*.*.*.
+         */
         oauthScopes?: pulumi.Input<pulumi.Input<string>[]>;
+        /**
+         * The Google Cloud Platform Service Account to be used by the node VMs. If a service account is not specified, the "default" Compute Engine service account is used. Cannot be updated. If given, note that the service account must have roles/composer.worker for any GCP resources created under the Cloud Composer Environment.
+         */
         serviceAccount?: pulumi.Input<string>;
+        /**
+         * The Compute Engine subnetwork to be used for machine communications, , specified as a self-link, relative resource name (e.g. "projects/{project}/regions/{region}/subnetworks/{subnetwork}"), or by name. If subnetwork is provided, network must also be provided and the subnetwork must belong to the enclosing environment's project and region.
+         */
         subnetwork?: pulumi.Input<string>;
+        /**
+         * The list of instance tags applied to all node VMs. Tags are used to identify valid sources or targets for network firewalls. Each tag within the list must comply with RFC1035. Cannot be updated.
+         */
         tags?: pulumi.Input<pulumi.Input<string>[]>;
+        /**
+         * The Compute Engine zone in which to deploy the VMs running the Apache Airflow software, specified as the zone name or relative resource name (e.g. "projects/{project}/zones/{zone}"). Must belong to the enclosing environment's project and region. This field is supported for Cloud Composer environments in versions composer-1.*.*-airflow-*.*.*.
+         */
         zone?: pulumi.Input<string>;
     }
     interface EnvironmentConfigNodeConfigIpAllocationPolicy {
+        /**
+         * The IP address range used to allocate IP addresses to pods in the cluster. For Cloud Composer environments in versions composer-1.*.*-airflow-*.*.*, this field is applicable only when useIpAliases is true. Set to blank to have GKE choose a range with the default size. Set to /netmask (e.g. /14) to have GKE choose a range with a specific netmask. Set to a CIDR notation (e.g. 10.96.0.0/14) from the RFC-1918 private networks (e.g. 10.0.0.0/8, 172.16.0.0/12, 192.168.0.0/16) to pick a specific range to use. Specify either clusterSecondaryRangeName or clusterIpv4CidrBlock but not both.
+         */
         clusterIpv4CidrBlock?: pulumi.Input<string>;
+        /**
+         * The name of the cluster's secondary range used to allocate IP addresses to pods. Specify either clusterSecondaryRangeName or clusterIpv4CidrBlock but not both. For Cloud Composer environments in versions composer-1.*.*-airflow-*.*.*, this field is applicable only when useIpAliases is true.
+         */
         clusterSecondaryRangeName?: pulumi.Input<string>;
+        /**
+         * The IP address range used to allocate IP addresses in this cluster. For Cloud Composer environments in versions composer-1.*.*-airflow-*.*.*, this field is applicable only when useIpAliases is true. Set to blank to have GKE choose a range with the default size. Set to /netmask (e.g. /14) to have GKE choose a range with a specific netmask. Set to a CIDR notation (e.g. 10.96.0.0/14) from the RFC-1918 private networks (e.g. 10.0.0.0/8, 172.16.0.0/12, 192.168.0.0/16) to pick a specific range to use. Specify either servicesSecondaryRangeName or servicesIpv4CidrBlock but not both.
+         */
         servicesIpv4CidrBlock?: pulumi.Input<string>;
+        /**
+         * The name of the services' secondary range used to allocate IP addresses to the cluster. Specify either servicesSecondaryRangeName or servicesIpv4CidrBlock but not both. For Cloud Composer environments in versions composer-1.*.*-airflow-*.*.*, this field is applicable only when useIpAliases is true.
+         */
         servicesSecondaryRangeName?: pulumi.Input<string>;
+        /**
+         * Whether or not to enable Alias IPs in the GKE cluster. If true, a VPC-native cluster is created. Defaults to true if the ipAllocationPolicy block is present in config. This field is only supported for Cloud Composer environments in versions composer-1.*.*-airflow-*.*.*. Environments in newer versions always use VPC-native GKE clusters.
+         */
         useIpAliases?: pulumi.Input<boolean>;
     }
     interface EnvironmentConfigPrivateEnvironmentConfig {
+        /**
+         * When specified, the environment will use Private Service Connect instead of VPC peerings to connect to Cloud SQL in the Tenant Project, and the PSC endpoint in the Customer Project will use an IP address from this subnetwork. This field is supported for Cloud Composer environments in versions composer-2.*.*-airflow-*.*.* and newer.
+         */
         cloudComposerConnectionSubnetwork?: pulumi.Input<string>;
+        /**
+         * The CIDR block from which IP range for Cloud Composer Network in tenant project will be reserved. Needs to be disjoint from private_cluster_config.master_ipv4_cidr_block and cloud_sql_ipv4_cidr_block. This field is supported for Cloud Composer environments in versions composer-2.*.*-airflow-*.*.* and newer.
+         */
         cloudComposerNetworkIpv4CidrBlock?: pulumi.Input<string>;
+        /**
+         * The CIDR block from which IP range in tenant project will be reserved for Cloud SQL. Needs to be disjoint from web_server_ipv4_cidr_block.
+         */
         cloudSqlIpv4CidrBlock?: pulumi.Input<string>;
+        /**
+         * Mode of internal communication within the Composer environment. Must be one of "VPC_PEERING" or "PRIVATE_SERVICE_CONNECT".
+         */
         connectionType?: pulumi.Input<string>;
+        /**
+         * If true, access to the public endpoint of the GKE cluster is denied. If this field is set to true, ip_allocation_policy.use_ip_aliases must be set to true for Cloud Composer environments in versions composer-1.*.*-airflow-*.*.*.
+         */
         enablePrivateEndpoint?: pulumi.Input<boolean>;
+        /**
+         * When enabled, IPs from public (non-RFC1918) ranges can be used for ip_allocation_policy.cluster_ipv4_cidr_block and ip_allocation_policy.service_ipv4_cidr_block.
+         */
         enablePrivatelyUsedPublicIps?: pulumi.Input<boolean>;
+        /**
+         * The IP range in CIDR notation to use for the hosted master network. This range is used for assigning internal IP addresses to the cluster master or set of masters and to the internal load balancer virtual IP. This range must not overlap with any other ranges in use within the cluster's network. If left blank, the default value of '172.16.0.0/28' is used.
+         */
         masterIpv4CidrBlock?: pulumi.Input<string>;
+        /**
+         * The CIDR block from which IP range for web server will be reserved. Needs to be disjoint from masterIpv4CidrBlock and cloud_sql_ipv4_cidr_block. This field is supported for Cloud Composer environments in versions composer-1.*.*-airflow-*.*.*.
+         */
         webServerIpv4CidrBlock?: pulumi.Input<string>;
     }
     interface EnvironmentConfigRecoveryConfig {
+        /**
+         * The configuration settings for scheduled snapshots.
+         */
         scheduledSnapshotsConfig?: pulumi.Input<inputs.composer.EnvironmentConfigRecoveryConfigScheduledSnapshotsConfig>;
     }
     interface EnvironmentConfigRecoveryConfigScheduledSnapshotsConfig {
+        /**
+         * When enabled, Cloud Composer periodically saves snapshots of your environment to a Cloud Storage bucket.
+         */
         enabled: pulumi.Input<boolean>;
+        /**
+         * Snapshot schedule, in the unix-cron format.
+         */
         snapshotCreationSchedule?: pulumi.Input<string>;
+        /**
+         * the URI of a bucket folder where to save the snapshot.
+         */
         snapshotLocation?: pulumi.Input<string>;
+        /**
+         * A time zone for the schedule. This value is a time offset and does not take into account daylight saving time changes. Valid values are from UTC-12 to UTC+12. Examples: UTC, UTC-01, UTC+03.
+         */
         timeZone?: pulumi.Input<string>;
     }
     interface EnvironmentConfigSoftwareConfig {
+        /**
+         * Apache Airflow configuration properties to override. Property keys contain the section and property names, separated by a hyphen, for example "core-dags_are_paused_at_creation". Section names must not contain hyphens ("-"), opening square brackets ("["), or closing square brackets ("]"). The property name must not be empty and cannot contain "=" or ";". Section and property names cannot contain characters: "." Apache Airflow configuration property names must be written in snake_case. Property values can contain any character, and can be written in any lower/upper case format. Certain Apache Airflow configuration property values are blacklisted, and cannot be overridden.
+         */
         airflowConfigOverrides?: pulumi.Input<{
             [key: string]: pulumi.Input<string>;
         }>;
+        /**
+         * The configuration for Cloud Data Lineage integration. Supported for Cloud Composer environments in versions composer-2.1.2-airflow-*.*.* and newer
+         */
         cloudDataLineageIntegration?: pulumi.Input<inputs.composer.EnvironmentConfigSoftwareConfigCloudDataLineageIntegration>;
+        /**
+         * Additional environment variables to provide to the Apache Airflow scheduler, worker, and webserver processes. Environment variable names must match the regular expression [a-zA-Z_][a-zA-Z0-9_]*. They cannot specify Apache Airflow software configuration overrides (they cannot match the regular expression AIRFLOW__[A-Z0-9_]+__[A-Z0-9_]+), and they cannot match any of the following reserved names: AIRFLOW_HOME C_FORCE_ROOT CONTAINER_NAME DAGS_FOLDER GCP_PROJECT GCS_BUCKET GKE_CLUSTER_NAME SQL_DATABASE SQL_INSTANCE SQL_PASSWORD SQL_PROJECT SQL_REGION SQL_USER.
+         */
         envVariables?: pulumi.Input<{
             [key: string]: pulumi.Input<string>;
         }>;
+        /**
+         * The version of the software running in the environment. This encapsulates both the version of Cloud Composer functionality and the version of Apache Airflow. It must match the regular expression composer-([0-9]+(\.[0-9]+\.[0-9]+(-preview\.[0-9]+)?)?|latest)-airflow-([0-9]+(\.[0-9]+(\.[0-9]+)?)?). The Cloud Composer portion of the image version is a full semantic version, or an alias in the form of major version number or 'latest'. The Apache Airflow portion of the image version is a full semantic version that points to one of the supported Apache Airflow versions, or an alias in the form of only major or major.minor versions specified. See documentation for more details and version list.
+         */
         imageVersion?: pulumi.Input<string>;
+        /**
+         * Custom Python Package Index (PyPI) packages to be installed in the environment. Keys refer to the lowercase package name (e.g. "numpy"). Values are the lowercase extras and version specifier (e.g. "==1.12.0", "[devel,gcp_api]", "[devel]>=1.8.2, <1.9.2"). To specify a package without pinning it to a version specifier, use the empty string as the value.
+         */
         pypiPackages?: pulumi.Input<{
             [key: string]: pulumi.Input<string>;
         }>;
+        /**
+         * The major version of Python used to run the Apache Airflow scheduler, worker, and webserver processes. Can be set to '2' or '3'. If not specified, the default is '2'. Cannot be updated. This field is supported for Cloud Composer environments in versions composer-1.*.*-airflow-*.*.*. Environments in newer versions always use Python major version 3.
+         */
         pythonVersion?: pulumi.Input<string>;
+        /**
+         * The number of schedulers for Airflow. This field is supported for Cloud Composer environments in versions composer-1.*.*-airflow-2.*.*.
+         */
         schedulerCount?: pulumi.Input<number>;
+        /**
+         * Should be either 'ENABLED' or 'DISABLED'. Defaults to 'ENABLED'. Used in Composer 3.
+         */
         webServerPluginsMode?: pulumi.Input<string>;
     }
     interface EnvironmentConfigSoftwareConfigCloudDataLineageIntegration {
+        /**
+         * Whether or not Cloud Data Lineage integration is enabled.
+         */
         enabled: pulumi.Input<boolean>;
     }
     interface EnvironmentConfigWebServerConfig {
+        /**
+         * Optional. Machine type on which Airflow web server is running. It has to be one of: composer-n1-webserver-2, composer-n1-webserver-4 or composer-n1-webserver-8. If not specified, composer-n1-webserver-2 will be used. Value custom is returned only in response, if Airflow web server parameters were manually changed to a non-standard values.
+         */
         machineType: pulumi.Input<string>;
     }
     interface EnvironmentConfigWebServerNetworkAccessControl {
+        /**
+         * A collection of allowed IP ranges with descriptions.
+         */
         allowedIpRanges?: pulumi.Input<pulumi.Input<inputs.composer.EnvironmentConfigWebServerNetworkAccessControlAllowedIpRange>[]>;
     }
     interface EnvironmentConfigWebServerNetworkAccessControlAllowedIpRange {
+        /**
+         * A description of this ip range.
+         */
         description?: pulumi.Input<string>;
+        /**
+         * IP address or range, defined using CIDR notation, of requests that this rule applies to. Examples: 192.168.1.1 or 192.168.0.0/16 or 2001:db8::/32 or 2001:0db8:0000:0042:0000:8a2e:0370:7334. IP range prefixes should be properly truncated. For example, 1.2.3.4/24 should be truncated to 1.2.3.0/24. Similarly, for IPv6, 2001:db8::1/32 should be truncated to 2001:db8::/32.
+         */
         value: pulumi.Input<string>;
     }
     interface EnvironmentConfigWorkloadsConfig {
+        /**
+         * Configuration for resources used by DAG processor.
+         */
         dagProcessor?: pulumi.Input<inputs.composer.EnvironmentConfigWorkloadsConfigDagProcessor>;
+        /**
+         * Configuration for resources used by Airflow schedulers.
+         */
         scheduler?: pulumi.Input<inputs.composer.EnvironmentConfigWorkloadsConfigScheduler>;
+        /**
+         * Configuration for resources used by Airflow triggerers.
+         */
         triggerer?: pulumi.Input<inputs.composer.EnvironmentConfigWorkloadsConfigTriggerer>;
+        /**
+         * Configuration for resources used by Airflow web server.
+         */
         webServer?: pulumi.Input<inputs.composer.EnvironmentConfigWorkloadsConfigWebServer>;
+        /**
+         * Configuration for resources used by Airflow workers.
+         */
         worker?: pulumi.Input<inputs.composer.EnvironmentConfigWorkloadsConfigWorker>;
     }
     interface EnvironmentConfigWorkloadsConfigDagProcessor {
+        /**
+         * CPU request and limit for DAG processor.
+         */
         cpu?: pulumi.Input<number>;
+        /**
+         * Memory (GB) request and limit for DAG processor.
+         */
         memoryGb?: pulumi.Input<number>;
+        /**
+         * Storage (GB) request and limit for DAG processor.
+         */
         storageGb?: pulumi.Input<number>;
     }
     interface EnvironmentConfigWorkloadsConfigScheduler {
+        /**
+         * The number of schedulers.
+         */
         count?: pulumi.Input<number>;
+        /**
+         * CPU request and limit for a single Airflow scheduler replica
+         */
         cpu?: pulumi.Input<number>;
+        /**
+         * Memory (GB) request and limit for a single Airflow scheduler replica.
+         */
         memoryGb?: pulumi.Input<number>;
+        /**
+         * Storage (GB) request and limit for a single Airflow scheduler replica.
+         */
         storageGb?: pulumi.Input<number>;
     }
     interface EnvironmentConfigWorkloadsConfigTriggerer {
+        /**
+         * The number of triggerers.
+         */
         count: pulumi.Input<number>;
+        /**
+         * CPU request and limit for a single Airflow triggerer replica.
+         */
         cpu: pulumi.Input<number>;
+        /**
+         * Memory (GB) request and limit for a single Airflow triggerer replica.
+         */
         memoryGb: pulumi.Input<number>;
     }
     interface EnvironmentConfigWorkloadsConfigWebServer {
+        /**
+         * CPU request and limit for Airflow web server.
+         */
         cpu?: pulumi.Input<number>;
+        /**
+         * Memory (GB) request and limit for Airflow web server.
+         */
         memoryGb?: pulumi.Input<number>;
+        /**
+         * Storage (GB) request and limit for Airflow web server.
+         */
         storageGb?: pulumi.Input<number>;
     }
     interface EnvironmentConfigWorkloadsConfigWorker {
+        /**
+         * CPU request and limit for a single Airflow worker replica.
+         */
         cpu?: pulumi.Input<number>;
+        /**
+         * Maximum number of workers for autoscaling.
+         */
         maxCount?: pulumi.Input<number>;
+        /**
+         * Memory (GB) request and limit for a single Airflow worker replica.
+         */
         memoryGb?: pulumi.Input<number>;
+        /**
+         * Minimum number of workers for autoscaling.
+         */
         minCount?: pulumi.Input<number>;
+        /**
+         * Storage (GB) request and limit for a single Airflow worker replica.
+         */
         storageGb?: pulumi.Input<number>;
     }
     interface EnvironmentStorageConfig {
+        /**
+         * Optional. Name of an existing Cloud Storage bucket to be used by the environment.
+         */
         bucket: pulumi.Input<string>;
     }
 }
@@ -13987,6 +14440,9 @@ export declare namespace compute {
          * to encrypt this disk. Only one of `kmsKeySelfLink` and `diskEncryptionKeyRaw` may be set.
          */
         diskEncryptionKeyRaw?: pulumi.Input<string>;
+        /**
+         * The RFC 4648 base64 encoded SHA-256 hash of the customer-supplied encryption key that protects this resource.
+         */
         diskEncryptionKeySha256?: pulumi.Input<string>;
         /**
          * The selfLink of the encryption key that is
@@ -14025,6 +14481,9 @@ export declare namespace compute {
          * may be set.
          */
         diskEncryptionKeyRaw?: pulumi.Input<string>;
+        /**
+         * The RFC 4648 base64 encoded SHA-256 hash of the customer-supplied encryption key that protects this resource.
+         */
         diskEncryptionKeySha256?: pulumi.Input<string>;
         /**
          * Parameters for a new disk that will be created
@@ -14095,6 +14554,9 @@ export declare namespace compute {
          * To update your hyperdisk more frequently, you'll need to manually delete and recreate it.
          */
         provisionedThroughput?: pulumi.Input<number>;
+        /**
+         * A map of resource manager tags. Resource manager tag keys and values have the same definition as resource manager tags. Keys must be in the format tagKeys/{tag_key_id}, and values are in the format tagValues/456. The field is ignored (both PUT & PATCH) when empty.
+         */
         resourceManagerTags?: pulumi.Input<{
             [key: string]: any;
         }>;
@@ -14115,127 +14577,357 @@ export declare namespace compute {
         enableConfidentialCompute: pulumi.Input<boolean>;
     }
     interface InstanceFromMachineImageAdvancedMachineFeatures {
+        /**
+         * Whether to enable nested virtualization or not.
+         */
         enableNestedVirtualization?: pulumi.Input<boolean>;
+        /**
+         * The number of threads per physical core. To disable simultaneous multithreading (SMT) set this to 1. If unset, the maximum number of threads supported per core by the underlying processor is assumed.
+         */
         threadsPerCore?: pulumi.Input<number>;
+        /**
+         * The number of physical cores to expose to an instance. Multiply by the number of threads per core to compute the total number of virtual CPUs to expose to the instance. If unset, the number of cores is inferred from the instance\'s nominal CPU count and the underlying platform\'s SMT width.
+         */
         visibleCoreCount?: pulumi.Input<number>;
     }
     interface InstanceFromMachineImageAttachedDisk {
+        /**
+         * Name with which the attached disk is accessible under /dev/disk/by-id/
+         */
         deviceName?: pulumi.Input<string>;
+        /**
+         * A 256-bit customer-supplied encryption key, encoded in RFC 4648 base64 to encrypt this disk. Only one of kmsKeySelfLink and diskEncryptionKeyRaw may be set.
+         */
         diskEncryptionKeyRaw?: pulumi.Input<string>;
+        /**
+         * The RFC 4648 base64 encoded SHA-256 hash of the customer-supplied encryption key that protects this resource.
+         */
         diskEncryptionKeySha256?: pulumi.Input<string>;
+        /**
+         * The selfLink of the encryption key that is stored in Google Cloud KMS to encrypt this disk. Only one of kmsKeySelfLink and diskEncryptionKeyRaw may be set.
+         */
         kmsKeySelfLink?: pulumi.Input<string>;
+        /**
+         * Read/write mode for the disk. One of "READ_ONLY" or "READ_WRITE".
+         */
         mode?: pulumi.Input<string>;
+        /**
+         * The name or selfLink of the disk attached to this instance.
+         */
         source: pulumi.Input<string>;
     }
     interface InstanceFromMachineImageBootDisk {
+        /**
+         * Whether the disk will be auto-deleted when the instance is deleted.
+         */
         autoDelete?: pulumi.Input<boolean>;
+        /**
+         * Name with which attached disk will be accessible under /dev/disk/by-id/
+         */
         deviceName?: pulumi.Input<string>;
+        /**
+         * A 256-bit customer-supplied encryption key, encoded in RFC 4648 base64 to encrypt this disk. Only one of kmsKeySelfLink and diskEncryptionKeyRaw may be set.
+         */
         diskEncryptionKeyRaw?: pulumi.Input<string>;
+        /**
+         * The RFC 4648 base64 encoded SHA-256 hash of the customer-supplied encryption key that protects this resource.
+         */
         diskEncryptionKeySha256?: pulumi.Input<string>;
+        /**
+         * Parameters with which a disk was created alongside the instance.
+         */
         initializeParams?: pulumi.Input<inputs.compute.InstanceFromMachineImageBootDiskInitializeParams>;
+        /**
+         * The selfLink of the encryption key that is stored in Google Cloud KMS to encrypt this disk. Only one of kmsKeySelfLink and diskEncryptionKeyRaw may be set.
+         */
         kmsKeySelfLink?: pulumi.Input<string>;
+        /**
+         * Read/write mode for the disk. One of "READ_ONLY" or "READ_WRITE".
+         */
         mode?: pulumi.Input<string>;
+        /**
+         * The name or selfLink of the disk attached to this instance.
+         */
         source?: pulumi.Input<string>;
     }
     interface InstanceFromMachineImageBootDiskInitializeParams {
+        /**
+         * A flag to enable confidential compute mode on boot disk
+         */
         enableConfidentialCompute?: pulumi.Input<boolean>;
+        /**
+         * The image from which this disk was initialised.
+         */
         image?: pulumi.Input<string>;
+        /**
+         * A set of key/value label pairs assigned to the disk.
+         */
         labels?: pulumi.Input<{
             [key: string]: any;
         }>;
+        /**
+         * Indicates how many IOPS to provision for the disk. This sets the number of I/O operations per second that the disk can handle. Values must be between 10,000 and 120,000.
+         */
         provisionedIops?: pulumi.Input<number>;
+        /**
+         * Indicates how much throughput to provision for the disk. This sets the number of throughput mb per second that the disk can handle. Values must be between 1 and 7,124.
+         */
         provisionedThroughput?: pulumi.Input<number>;
+        /**
+         * A map of resource manager tags. Resource manager tag keys and values have the same definition as resource manager tags. Keys must be in the format tagKeys/{tag_key_id}, and values are in the format tagValues/456. The field is ignored (both PUT & PATCH) when empty.
+         */
         resourceManagerTags?: pulumi.Input<{
             [key: string]: any;
         }>;
+        /**
+         * The size of the image in gigabytes.
+         */
         size?: pulumi.Input<number>;
+        /**
+         * The Google Compute Engine disk type. Such as pd-standard, pd-ssd or pd-balanced.
+         */
         type?: pulumi.Input<string>;
     }
     interface InstanceFromMachineImageConfidentialInstanceConfig {
+        /**
+         * Defines whether the instance should have confidential compute enabled.
+         */
         enableConfidentialCompute: pulumi.Input<boolean>;
     }
     interface InstanceFromMachineImageGuestAccelerator {
+        /**
+         * The number of the guest accelerator cards exposed to this instance.
+         */
         count: pulumi.Input<number>;
+        /**
+         * The accelerator type resource exposed to this instance. E.g. nvidia-tesla-k80.
+         */
         type: pulumi.Input<string>;
     }
     interface InstanceFromMachineImageNetworkInterface {
+        /**
+         * Access configurations, i.e. IPs via which this instance can be accessed via the Internet.
+         */
         accessConfigs?: pulumi.Input<pulumi.Input<inputs.compute.InstanceFromMachineImageNetworkInterfaceAccessConfig>[]>;
+        /**
+         * An array of alias IP ranges for this network interface.
+         */
         aliasIpRanges?: pulumi.Input<pulumi.Input<inputs.compute.InstanceFromMachineImageNetworkInterfaceAliasIpRange>[]>;
+        /**
+         * The prefix length of the primary internal IPv6 range.
+         */
         internalIpv6PrefixLength?: pulumi.Input<number>;
+        /**
+         * An array of IPv6 access configurations for this interface. Currently, only one IPv6 access config, DIRECT_IPV6, is supported. If there is no ipv6AccessConfig specified, then this instance will have no external IPv6 Internet access.
+         */
         ipv6AccessConfigs?: pulumi.Input<pulumi.Input<inputs.compute.InstanceFromMachineImageNetworkInterfaceIpv6AccessConfig>[]>;
+        /**
+         * One of EXTERNAL, INTERNAL to indicate whether the IP can be accessed from the Internet. This field is always inherited from its subnetwork.
+         */
         ipv6AccessType?: pulumi.Input<string>;
+        /**
+         * An IPv6 internal network address for this network interface. If not specified, Google Cloud will automatically assign an internal IPv6 address from the instance's subnetwork.
+         */
         ipv6Address?: pulumi.Input<string>;
         /**
          * A unique name for the resource, required by GCE.
          * Changing this forces a new resource to be created.
          */
         name?: pulumi.Input<string>;
+        /**
+         * The name or selfLink of the network attached to this interface.
+         */
         network?: pulumi.Input<string>;
+        /**
+         * The URL of the network attachment that this interface should connect to in the following format: projects/{projectNumber}/regions/{region_name}/networkAttachments/{network_attachment_name}.
+         */
         networkAttachment?: pulumi.Input<string>;
+        /**
+         * The private IP address assigned to the instance.
+         */
         networkIp?: pulumi.Input<string>;
+        /**
+         * The type of vNIC to be used on this interface. Possible values:GVNIC, VIRTIO_NET
+         */
         nicType?: pulumi.Input<string>;
+        /**
+         * The networking queue count that's specified by users for the network interface. Both Rx and Tx queues will be set to this number. It will be empty if not specified.
+         */
         queueCount?: pulumi.Input<number>;
+        /**
+         * A full or partial URL to a security policy to add to this instance. If this field is set to an empty string it will remove the associated security policy.
+         */
         securityPolicy?: pulumi.Input<string>;
+        /**
+         * The stack type for this network interface to identify whether the IPv6 feature is enabled or not. If not specified, IPV4_ONLY will be used.
+         */
         stackType?: pulumi.Input<string>;
+        /**
+         * The name or selfLink of the subnetwork attached to this interface.
+         */
         subnetwork?: pulumi.Input<string>;
+        /**
+         * The project in which the subnetwork belongs.
+         */
         subnetworkProject?: pulumi.Input<string>;
     }
     interface InstanceFromMachineImageNetworkInterfaceAccessConfig {
+        /**
+         * The IP address that is be 1:1 mapped to the instance's network ip.
+         */
         natIp?: pulumi.Input<string>;
+        /**
+         * The networking tier used for configuring this instance. One of PREMIUM or STANDARD.
+         */
         networkTier?: pulumi.Input<string>;
+        /**
+         * The DNS domain name for the public PTR record.
+         */
         publicPtrDomainName?: pulumi.Input<string>;
+        /**
+         * A full or partial URL to a security policy to add to this instance. If this field is set to an empty string it will remove the associated security policy.
+         */
         securityPolicy?: pulumi.Input<string>;
     }
     interface InstanceFromMachineImageNetworkInterfaceAliasIpRange {
+        /**
+         * The IP CIDR range represented by this alias IP range.
+         */
         ipCidrRange: pulumi.Input<string>;
+        /**
+         * The subnetwork secondary range name specifying the secondary range from which to allocate the IP CIDR range for this alias IP range.
+         */
         subnetworkRangeName?: pulumi.Input<string>;
     }
     interface InstanceFromMachineImageNetworkInterfaceIpv6AccessConfig {
+        /**
+         * The first IPv6 address of the external IPv6 range associated with this instance, prefix length is stored in externalIpv6PrefixLength in ipv6AccessConfig. To use a static external IP address, it must be unused and in the same region as the instance's zone. If not specified, Google Cloud will automatically assign an external IPv6 address from the instance's subnetwork.
+         */
         externalIpv6?: pulumi.Input<string>;
+        /**
+         * The prefix length of the external IPv6 range.
+         */
         externalIpv6PrefixLength?: pulumi.Input<string>;
         /**
          * A unique name for the resource, required by GCE.
          * Changing this forces a new resource to be created.
          */
         name?: pulumi.Input<string>;
+        /**
+         * The service-level to be provided for IPv6 traffic when the subnet has an external subnet. Only PREMIUM tier is valid for IPv6
+         */
         networkTier: pulumi.Input<string>;
+        /**
+         * The domain name to be used when creating DNSv6 records for the external IPv6 ranges.
+         */
         publicPtrDomainName?: pulumi.Input<string>;
+        /**
+         * A full or partial URL to a security policy to add to this instance. If this field is set to an empty string it will remove the associated security policy.
+         */
         securityPolicy?: pulumi.Input<string>;
     }
     interface InstanceFromMachineImageNetworkPerformanceConfig {
+        /**
+         * The egress bandwidth tier to enable. Possible values:TIER_1, DEFAULT
+         */
         totalEgressBandwidthTier: pulumi.Input<string>;
     }
     interface InstanceFromMachineImageParams {
+        /**
+         * A map of resource manager tags. Resource manager tag keys and values have the same definition as resource manager tags. Keys must be in the format tagKeys/{tag_key_id}, and values are in the format tagValues/456. The field is ignored (both PUT & PATCH) when empty.
+         */
         resourceManagerTags?: pulumi.Input<{
             [key: string]: any;
         }>;
     }
     interface InstanceFromMachineImageReservationAffinity {
+        /**
+         * Specifies the label selector for the reservation to use.
+         */
         specificReservation?: pulumi.Input<inputs.compute.InstanceFromMachineImageReservationAffinitySpecificReservation>;
+        /**
+         * The type of reservation from which this instance can consume resources.
+         */
         type: pulumi.Input<string>;
     }
     interface InstanceFromMachineImageReservationAffinitySpecificReservation {
+        /**
+         * Corresponds to the label key of a reservation resource. To target a SPECIFIC_RESERVATION by name, specify compute.googleapis.com/reservation-name as the key and specify the name of your reservation as the only value.
+         */
         key: pulumi.Input<string>;
+        /**
+         * Corresponds to the label values of a reservation resource.
+         */
         values: pulumi.Input<pulumi.Input<string>[]>;
     }
     interface InstanceFromMachineImageScheduling {
+        /**
+         * Specifies if the instance should be restarted if it was terminated by Compute Engine (not a user).
+         */
         automaticRestart?: pulumi.Input<boolean>;
+        /**
+         * Specifies the action GCE should take when SPOT VM is preempted.
+         */
         instanceTerminationAction?: pulumi.Input<string>;
+        /**
+         * Specifies the maximum amount of time a Local Ssd Vm should wait while
+         *   recovery of the Local Ssd state is attempted. Its value should be in
+         *   between 0 and 168 hours with hour granularity and the default value being 1
+         *   hour.
+         */
         localSsdRecoveryTimeout?: pulumi.Input<inputs.compute.InstanceFromMachineImageSchedulingLocalSsdRecoveryTimeout>;
+        /**
+         * Specifies the frequency of planned maintenance events. The accepted values are: PERIODIC
+         */
         maintenanceInterval?: pulumi.Input<string>;
+        /**
+         * The timeout for new network connections to hosts.
+         */
         maxRunDuration?: pulumi.Input<inputs.compute.InstanceFromMachineImageSchedulingMaxRunDuration>;
         minNodeCpus?: pulumi.Input<number>;
+        /**
+         * Specifies node affinities or anti-affinities to determine which sole-tenant nodes your instances and managed instance groups will use as host systems.
+         */
         nodeAffinities?: pulumi.Input<pulumi.Input<inputs.compute.InstanceFromMachineImageSchedulingNodeAffinity>[]>;
+        /**
+         * Describes maintenance behavior for the instance. One of MIGRATE or TERMINATE,
+         */
         onHostMaintenance?: pulumi.Input<string>;
+        /**
+         * Whether the instance is preemptible.
+         */
         preemptible?: pulumi.Input<boolean>;
+        /**
+         * Whether the instance is spot. If this is set as SPOT.
+         */
         provisioningModel?: pulumi.Input<string>;
     }
     interface InstanceFromMachineImageSchedulingLocalSsdRecoveryTimeout {
+        /**
+         * Span of time that's a fraction of a second at nanosecond
+         * resolution. Durations less than one second are represented
+         * with a 0 seconds field and a positive nanos field. Must
+         * be from 0 to 999,999,999 inclusive.
+         */
         nanos?: pulumi.Input<number>;
+        /**
+         * Span of time at a resolution of a second.
+         * Must be from 0 to 315,576,000,000 inclusive.
+         */
         seconds: pulumi.Input<number>;
     }
     interface InstanceFromMachineImageSchedulingMaxRunDuration {
+        /**
+         * Span of time that's a fraction of a second at nanosecond
+         * resolution. Durations less than one second are represented
+         * with a 0 seconds field and a positive nanos field. Must
+         * be from 0 to 999,999,999 inclusive.
+         */
         nanos?: pulumi.Input<number>;
+        /**
+         * Span of time at a resolution of a second.
+         * Must be from 0 to 315,576,000,000 inclusive.
+         */
         seconds: pulumi.Input<number>;
     }
     interface InstanceFromMachineImageSchedulingNodeAffinity {
@@ -14244,141 +14936,395 @@ export declare namespace compute {
         values: pulumi.Input<pulumi.Input<string>[]>;
     }
     interface InstanceFromMachineImageScratchDisk {
+        /**
+         * Name with which the attached disk is accessible under /dev/disk/by-id/
+         */
         deviceName?: pulumi.Input<string>;
+        /**
+         * The disk interface used for attaching this disk. One of SCSI or NVME.
+         */
         interface: pulumi.Input<string>;
+        /**
+         * The size of the disk in gigabytes. One of 375 or 3000.
+         */
         size?: pulumi.Input<number>;
     }
     interface InstanceFromMachineImageServiceAccount {
+        /**
+         * The service account e-mail address.
+         */
         email?: pulumi.Input<string>;
+        /**
+         * A list of service scopes.
+         */
         scopes: pulumi.Input<pulumi.Input<string>[]>;
     }
     interface InstanceFromMachineImageShieldedInstanceConfig {
+        /**
+         * Whether integrity monitoring is enabled for the instance.
+         */
         enableIntegrityMonitoring?: pulumi.Input<boolean>;
+        /**
+         * Whether secure boot is enabled for the instance.
+         */
         enableSecureBoot?: pulumi.Input<boolean>;
+        /**
+         * Whether the instance uses vTPM.
+         */
         enableVtpm?: pulumi.Input<boolean>;
     }
     interface InstanceFromTemplateAdvancedMachineFeatures {
+        /**
+         * Whether to enable nested virtualization or not.
+         */
         enableNestedVirtualization?: pulumi.Input<boolean>;
+        /**
+         * The number of threads per physical core. To disable simultaneous multithreading (SMT) set this to 1. If unset, the maximum number of threads supported per core by the underlying processor is assumed.
+         */
         threadsPerCore?: pulumi.Input<number>;
+        /**
+         * The number of physical cores to expose to an instance. Multiply by the number of threads per core to compute the total number of virtual CPUs to expose to the instance. If unset, the number of cores is inferred from the instance\'s nominal CPU count and the underlying platform\'s SMT width.
+         */
         visibleCoreCount?: pulumi.Input<number>;
     }
     interface InstanceFromTemplateAttachedDisk {
+        /**
+         * Name with which the attached disk is accessible under /dev/disk/by-id/
+         */
         deviceName?: pulumi.Input<string>;
+        /**
+         * A 256-bit customer-supplied encryption key, encoded in RFC 4648 base64 to encrypt this disk. Only one of kmsKeySelfLink and diskEncryptionKeyRaw may be set.
+         */
         diskEncryptionKeyRaw?: pulumi.Input<string>;
+        /**
+         * The RFC 4648 base64 encoded SHA-256 hash of the customer-supplied encryption key that protects this resource.
+         */
         diskEncryptionKeySha256?: pulumi.Input<string>;
+        /**
+         * The selfLink of the encryption key that is stored in Google Cloud KMS to encrypt this disk. Only one of kmsKeySelfLink and diskEncryptionKeyRaw may be set.
+         */
         kmsKeySelfLink?: pulumi.Input<string>;
+        /**
+         * Read/write mode for the disk. One of "READ_ONLY" or "READ_WRITE".
+         */
         mode?: pulumi.Input<string>;
+        /**
+         * The name or selfLink of the disk attached to this instance.
+         */
         source: pulumi.Input<string>;
     }
     interface InstanceFromTemplateBootDisk {
+        /**
+         * Whether the disk will be auto-deleted when the instance is deleted.
+         */
         autoDelete?: pulumi.Input<boolean>;
+        /**
+         * Name with which attached disk will be accessible under /dev/disk/by-id/
+         */
         deviceName?: pulumi.Input<string>;
+        /**
+         * A 256-bit customer-supplied encryption key, encoded in RFC 4648 base64 to encrypt this disk. Only one of kmsKeySelfLink and diskEncryptionKeyRaw may be set.
+         */
         diskEncryptionKeyRaw?: pulumi.Input<string>;
+        /**
+         * The RFC 4648 base64 encoded SHA-256 hash of the customer-supplied encryption key that protects this resource.
+         */
         diskEncryptionKeySha256?: pulumi.Input<string>;
+        /**
+         * Parameters with which a disk was created alongside the instance.
+         */
         initializeParams?: pulumi.Input<inputs.compute.InstanceFromTemplateBootDiskInitializeParams>;
+        /**
+         * The selfLink of the encryption key that is stored in Google Cloud KMS to encrypt this disk. Only one of kmsKeySelfLink and diskEncryptionKeyRaw may be set.
+         */
         kmsKeySelfLink?: pulumi.Input<string>;
+        /**
+         * Read/write mode for the disk. One of "READ_ONLY" or "READ_WRITE".
+         */
         mode?: pulumi.Input<string>;
+        /**
+         * The name or selfLink of the disk attached to this instance.
+         */
         source?: pulumi.Input<string>;
     }
     interface InstanceFromTemplateBootDiskInitializeParams {
+        /**
+         * A flag to enable confidential compute mode on boot disk
+         */
         enableConfidentialCompute?: pulumi.Input<boolean>;
+        /**
+         * The image from which this disk was initialised.
+         */
         image?: pulumi.Input<string>;
+        /**
+         * A set of key/value label pairs assigned to the disk.
+         */
         labels?: pulumi.Input<{
             [key: string]: any;
         }>;
+        /**
+         * Indicates how many IOPS to provision for the disk. This sets the number of I/O operations per second that the disk can handle. Values must be between 10,000 and 120,000.
+         */
         provisionedIops?: pulumi.Input<number>;
+        /**
+         * Indicates how much throughput to provision for the disk. This sets the number of throughput mb per second that the disk can handle. Values must be between 1 and 7,124.
+         */
         provisionedThroughput?: pulumi.Input<number>;
+        /**
+         * A map of resource manager tags. Resource manager tag keys and values have the same definition as resource manager tags. Keys must be in the format tagKeys/{tag_key_id}, and values are in the format tagValues/456. The field is ignored (both PUT & PATCH) when empty.
+         */
         resourceManagerTags?: pulumi.Input<{
             [key: string]: any;
         }>;
+        /**
+         * The size of the image in gigabytes.
+         */
         size?: pulumi.Input<number>;
+        /**
+         * The Google Compute Engine disk type. Such as pd-standard, pd-ssd or pd-balanced.
+         */
         type?: pulumi.Input<string>;
     }
     interface InstanceFromTemplateConfidentialInstanceConfig {
+        /**
+         * Defines whether the instance should have confidential compute enabled.
+         */
         enableConfidentialCompute: pulumi.Input<boolean>;
     }
     interface InstanceFromTemplateGuestAccelerator {
+        /**
+         * The number of the guest accelerator cards exposed to this instance.
+         */
         count: pulumi.Input<number>;
+        /**
+         * The accelerator type resource exposed to this instance. E.g. nvidia-tesla-k80.
+         */
         type: pulumi.Input<string>;
     }
     interface InstanceFromTemplateNetworkInterface {
+        /**
+         * Access configurations, i.e. IPs via which this instance can be accessed via the Internet.
+         */
         accessConfigs?: pulumi.Input<pulumi.Input<inputs.compute.InstanceFromTemplateNetworkInterfaceAccessConfig>[]>;
+        /**
+         * An array of alias IP ranges for this network interface.
+         */
         aliasIpRanges?: pulumi.Input<pulumi.Input<inputs.compute.InstanceFromTemplateNetworkInterfaceAliasIpRange>[]>;
+        /**
+         * The prefix length of the primary internal IPv6 range.
+         */
         internalIpv6PrefixLength?: pulumi.Input<number>;
+        /**
+         * An array of IPv6 access configurations for this interface. Currently, only one IPv6 access config, DIRECT_IPV6, is supported. If there is no ipv6AccessConfig specified, then this instance will have no external IPv6 Internet access.
+         */
         ipv6AccessConfigs?: pulumi.Input<pulumi.Input<inputs.compute.InstanceFromTemplateNetworkInterfaceIpv6AccessConfig>[]>;
+        /**
+         * One of EXTERNAL, INTERNAL to indicate whether the IP can be accessed from the Internet. This field is always inherited from its subnetwork.
+         */
         ipv6AccessType?: pulumi.Input<string>;
+        /**
+         * An IPv6 internal network address for this network interface. If not specified, Google Cloud will automatically assign an internal IPv6 address from the instance's subnetwork.
+         */
         ipv6Address?: pulumi.Input<string>;
         /**
          * A unique name for the resource, required by GCE.
          * Changing this forces a new resource to be created.
          */
         name?: pulumi.Input<string>;
+        /**
+         * The name or selfLink of the network attached to this interface.
+         */
         network?: pulumi.Input<string>;
+        /**
+         * The URL of the network attachment that this interface should connect to in the following format: projects/{projectNumber}/regions/{region_name}/networkAttachments/{network_attachment_name}.
+         */
         networkAttachment?: pulumi.Input<string>;
+        /**
+         * The private IP address assigned to the instance.
+         */
         networkIp?: pulumi.Input<string>;
+        /**
+         * The type of vNIC to be used on this interface. Possible values:GVNIC, VIRTIO_NET
+         */
         nicType?: pulumi.Input<string>;
+        /**
+         * The networking queue count that's specified by users for the network interface. Both Rx and Tx queues will be set to this number. It will be empty if not specified.
+         */
         queueCount?: pulumi.Input<number>;
+        /**
+         * A full or partial URL to a security policy to add to this instance. If this field is set to an empty string it will remove the associated security policy.
+         */
         securityPolicy?: pulumi.Input<string>;
+        /**
+         * The stack type for this network interface to identify whether the IPv6 feature is enabled or not. If not specified, IPV4_ONLY will be used.
+         */
         stackType?: pulumi.Input<string>;
+        /**
+         * The name or selfLink of the subnetwork attached to this interface.
+         */
         subnetwork?: pulumi.Input<string>;
+        /**
+         * The project in which the subnetwork belongs.
+         */
         subnetworkProject?: pulumi.Input<string>;
     }
     interface InstanceFromTemplateNetworkInterfaceAccessConfig {
+        /**
+         * The IP address that is be 1:1 mapped to the instance's network ip.
+         */
         natIp?: pulumi.Input<string>;
+        /**
+         * The networking tier used for configuring this instance. One of PREMIUM or STANDARD.
+         */
         networkTier?: pulumi.Input<string>;
+        /**
+         * The DNS domain name for the public PTR record.
+         */
         publicPtrDomainName?: pulumi.Input<string>;
+        /**
+         * A full or partial URL to a security policy to add to this instance. If this field is set to an empty string it will remove the associated security policy.
+         */
         securityPolicy?: pulumi.Input<string>;
     }
     interface InstanceFromTemplateNetworkInterfaceAliasIpRange {
+        /**
+         * The IP CIDR range represented by this alias IP range.
+         */
         ipCidrRange: pulumi.Input<string>;
+        /**
+         * The subnetwork secondary range name specifying the secondary range from which to allocate the IP CIDR range for this alias IP range.
+         */
         subnetworkRangeName?: pulumi.Input<string>;
     }
     interface InstanceFromTemplateNetworkInterfaceIpv6AccessConfig {
+        /**
+         * The first IPv6 address of the external IPv6 range associated with this instance, prefix length is stored in externalIpv6PrefixLength in ipv6AccessConfig. To use a static external IP address, it must be unused and in the same region as the instance's zone. If not specified, Google Cloud will automatically assign an external IPv6 address from the instance's subnetwork.
+         */
         externalIpv6?: pulumi.Input<string>;
+        /**
+         * The prefix length of the external IPv6 range.
+         */
         externalIpv6PrefixLength?: pulumi.Input<string>;
         /**
          * A unique name for the resource, required by GCE.
          * Changing this forces a new resource to be created.
          */
         name?: pulumi.Input<string>;
+        /**
+         * The service-level to be provided for IPv6 traffic when the subnet has an external subnet. Only PREMIUM tier is valid for IPv6
+         */
         networkTier: pulumi.Input<string>;
+        /**
+         * The domain name to be used when creating DNSv6 records for the external IPv6 ranges.
+         */
         publicPtrDomainName?: pulumi.Input<string>;
+        /**
+         * A full or partial URL to a security policy to add to this instance. If this field is set to an empty string it will remove the associated security policy.
+         */
         securityPolicy?: pulumi.Input<string>;
     }
     interface InstanceFromTemplateNetworkPerformanceConfig {
+        /**
+         * The egress bandwidth tier to enable. Possible values:TIER_1, DEFAULT
+         */
         totalEgressBandwidthTier: pulumi.Input<string>;
     }
     interface InstanceFromTemplateParams {
+        /**
+         * A map of resource manager tags. Resource manager tag keys and values have the same definition as resource manager tags. Keys must be in the format tagKeys/{tag_key_id}, and values are in the format tagValues/456. The field is ignored (both PUT & PATCH) when empty.
+         */
         resourceManagerTags?: pulumi.Input<{
             [key: string]: any;
         }>;
     }
     interface InstanceFromTemplateReservationAffinity {
+        /**
+         * Specifies the label selector for the reservation to use.
+         */
         specificReservation?: pulumi.Input<inputs.compute.InstanceFromTemplateReservationAffinitySpecificReservation>;
+        /**
+         * The type of reservation from which this instance can consume resources.
+         */
         type: pulumi.Input<string>;
     }
     interface InstanceFromTemplateReservationAffinitySpecificReservation {
+        /**
+         * Corresponds to the label key of a reservation resource. To target a SPECIFIC_RESERVATION by name, specify compute.googleapis.com/reservation-name as the key and specify the name of your reservation as the only value.
+         */
         key: pulumi.Input<string>;
+        /**
+         * Corresponds to the label values of a reservation resource.
+         */
         values: pulumi.Input<pulumi.Input<string>[]>;
     }
     interface InstanceFromTemplateScheduling {
+        /**
+         * Specifies if the instance should be restarted if it was terminated by Compute Engine (not a user).
+         */
         automaticRestart?: pulumi.Input<boolean>;
+        /**
+         * Specifies the action GCE should take when SPOT VM is preempted.
+         */
         instanceTerminationAction?: pulumi.Input<string>;
+        /**
+         * Specifies the maximum amount of time a Local Ssd Vm should wait while
+         *   recovery of the Local Ssd state is attempted. Its value should be in
+         *   between 0 and 168 hours with hour granularity and the default value being 1
+         *   hour.
+         */
         localSsdRecoveryTimeout?: pulumi.Input<inputs.compute.InstanceFromTemplateSchedulingLocalSsdRecoveryTimeout>;
+        /**
+         * Specifies the frequency of planned maintenance events. The accepted values are: PERIODIC
+         */
         maintenanceInterval?: pulumi.Input<string>;
+        /**
+         * The timeout for new network connections to hosts.
+         */
         maxRunDuration?: pulumi.Input<inputs.compute.InstanceFromTemplateSchedulingMaxRunDuration>;
         minNodeCpus?: pulumi.Input<number>;
+        /**
+         * Specifies node affinities or anti-affinities to determine which sole-tenant nodes your instances and managed instance groups will use as host systems.
+         */
         nodeAffinities?: pulumi.Input<pulumi.Input<inputs.compute.InstanceFromTemplateSchedulingNodeAffinity>[]>;
+        /**
+         * Describes maintenance behavior for the instance. One of MIGRATE or TERMINATE,
+         */
         onHostMaintenance?: pulumi.Input<string>;
+        /**
+         * Whether the instance is preemptible.
+         */
         preemptible?: pulumi.Input<boolean>;
+        /**
+         * Whether the instance is spot. If this is set as SPOT.
+         */
         provisioningModel?: pulumi.Input<string>;
     }
     interface InstanceFromTemplateSchedulingLocalSsdRecoveryTimeout {
+        /**
+         * Span of time that's a fraction of a second at nanosecond
+         * resolution. Durations less than one second are represented
+         * with a 0 seconds field and a positive nanos field. Must
+         * be from 0 to 999,999,999 inclusive.
+         */
         nanos?: pulumi.Input<number>;
+        /**
+         * Span of time at a resolution of a second.
+         * Must be from 0 to 315,576,000,000 inclusive.
+         */
         seconds: pulumi.Input<number>;
     }
     interface InstanceFromTemplateSchedulingMaxRunDuration {
+        /**
+         * Span of time that's a fraction of a second at nanosecond
+         * resolution. Durations less than one second are represented
+         * with a 0 seconds field and a positive nanos field. Must
+         * be from 0 to 999,999,999 inclusive.
+         */
         nanos?: pulumi.Input<number>;
+        /**
+         * Span of time at a resolution of a second.
+         * Must be from 0 to 315,576,000,000 inclusive.
+         */
         seconds: pulumi.Input<number>;
     }
     interface InstanceFromTemplateSchedulingNodeAffinity {
@@ -14387,22 +15333,46 @@ export declare namespace compute {
         values: pulumi.Input<pulumi.Input<string>[]>;
     }
     interface InstanceFromTemplateScratchDisk {
+        /**
+         * Name with which the attached disk is accessible under /dev/disk/by-id/
+         */
         deviceName?: pulumi.Input<string>;
+        /**
+         * The disk interface used for attaching this disk. One of SCSI or NVME.
+         */
         interface: pulumi.Input<string>;
+        /**
+         * The size of the disk in gigabytes. One of 375 or 3000.
+         */
         size?: pulumi.Input<number>;
     }
     interface InstanceFromTemplateServiceAccount {
+        /**
+         * The service account e-mail address.
+         */
         email?: pulumi.Input<string>;
+        /**
+         * A list of service scopes.
+         */
         scopes: pulumi.Input<pulumi.Input<string>[]>;
     }
     interface InstanceFromTemplateShieldedInstanceConfig {
+        /**
+         * Whether integrity monitoring is enabled for the instance.
+         */
         enableIntegrityMonitoring?: pulumi.Input<boolean>;
+        /**
+         * Whether secure boot is enabled for the instance.
+         */
         enableSecureBoot?: pulumi.Input<boolean>;
+        /**
+         * Whether the instance uses vTPM.
+         */
         enableVtpm?: pulumi.Input<boolean>;
     }
     interface InstanceGroupManagerAllInstancesConfig {
         /**
-         * ), The label key-value pairs that you want to patch onto the instance.
+         * , The label key-value pairs that you want to patch onto the instance.
          *
          * - - -
          */
@@ -14410,7 +15380,7 @@ export declare namespace compute {
             [key: string]: pulumi.Input<string>;
         }>;
         /**
-         * ), The metadata key-value pairs that you want to patch onto the instance. For more information, see [Project and instance metadata](https://cloud.google.com/compute/docs/metadata#project_and_instance_metadata).
+         * , The metadata key-value pairs that you want to patch onto the instance. For more information, see [Project and instance metadata](https://cloud.google.com/compute/docs/metadata#project_and_instance_metadata).
          */
         metadata?: pulumi.Input<{
             [key: string]: pulumi.Input<string>;
@@ -14478,7 +15448,6 @@ export declare namespace compute {
     }
     interface InstanceGroupManagerStatus {
         /**
-         * )
          * Properties to set on all instances in the group. After setting
          * allInstancesConfig on the group, you must update the group's instances to
          * apply the configuration.
@@ -14498,6 +15467,9 @@ export declare namespace compute {
         versionTargets?: pulumi.Input<pulumi.Input<inputs.compute.InstanceGroupManagerStatusVersionTarget>[]>;
     }
     interface InstanceGroupManagerStatusAllInstancesConfig {
+        /**
+         * A bit indicating whether this configuration has been applied to all managed instances in the group.
+         */
         effective?: pulumi.Input<boolean>;
     }
     interface InstanceGroupManagerStatusStateful {
@@ -14517,6 +15489,9 @@ export declare namespace compute {
         allEffective?: pulumi.Input<boolean>;
     }
     interface InstanceGroupManagerStatusVersionTarget {
+        /**
+         * A bit indicating whether version target has been reached in this managed instance group, i.e. all instances are in their target version. Instances' target version are specified by version field on Instance Group Manager.
+         */
         isReached?: pulumi.Input<boolean>;
     }
     interface InstanceGroupManagerUpdatePolicy {
@@ -14537,7 +15512,7 @@ export declare namespace compute {
          */
         maxUnavailablePercent?: pulumi.Input<number>;
         /**
-         * ), Minimum number of seconds to wait for after a newly created instance becomes available. This value must be from range [0, 3600]
+         * , Minimum number of seconds to wait for after a newly created instance becomes available. This value must be from range [0, 3600]
          */
         minReadySec?: pulumi.Input<number>;
         /**
@@ -14603,7 +15578,7 @@ export declare namespace compute {
          */
         count: pulumi.Input<number>;
         /**
-         * The GCE disk type. Such as pd-standard, pd-balanced or pd-ssd.
+         * The accelerator type resource to expose to this instance. E.g. `nvidia-tesla-k80`.
          */
         type: pulumi.Input<string>;
     }
@@ -14644,6 +15619,9 @@ export declare namespace compute {
         title: pulumi.Input<string>;
     }
     interface InstanceNetworkInterface {
+        /**
+         * Access configurations, i.e. IPs via which this instance can be accessed via the Internet.
+         */
         accessConfigs?: pulumi.Input<pulumi.Input<inputs.compute.InstanceNetworkInterfaceAccessConfig>[]>;
         /**
          * An
@@ -14651,6 +15629,9 @@ export declare namespace compute {
          * interfaces on subnet-mode networks. Structure documented below.
          */
         aliasIpRanges?: pulumi.Input<pulumi.Input<inputs.compute.InstanceNetworkInterfaceAliasIpRange>[]>;
+        /**
+         * The prefix length of the primary internal IPv6 range.
+         */
         internalIpv6PrefixLength?: pulumi.Input<number>;
         /**
          * An array of IPv6 access configurations for this interface.
@@ -14663,6 +15644,9 @@ export declare namespace compute {
          * This field is always inherited from its subnetwork.
          */
         ipv6AccessType?: pulumi.Input<string>;
+        /**
+         * An IPv6 internal network address for this network interface. If not specified, Google Cloud will automatically assign an internal IPv6 address from the instance's subnetwork.
+         */
         ipv6Address?: pulumi.Input<string>;
         /**
          * A unique name for the resource, required by GCE.
@@ -14675,6 +15659,9 @@ export declare namespace compute {
          * be inferred from the subnetwork.
          */
         network?: pulumi.Input<string>;
+        /**
+         * The URL of the network attachment that this interface should connect to in the following format: `projects/{projectNumber}/regions/{region_name}/networkAttachments/{network_attachment_name}`.
+         */
         networkAttachment?: pulumi.Input<string>;
         /**
          * The private IP address to assign to the instance. If
@@ -14689,6 +15676,9 @@ export declare namespace compute {
          * The networking queue count that's specified by users for the network interface. Both Rx and Tx queues will be set to this number. It will be empty if not specified.
          */
         queueCount?: pulumi.Input<number>;
+        /**
+         * A full or partial URL to a security policy to add to this instance. If this field is set to an empty string it will remove the associated security policy.
+         */
         securityPolicy?: pulumi.Input<string>;
         /**
          * The stack type for this network interface to identify whether the IPv6 feature is enabled or not. Values are IPV4_IPV6 or IPV4_ONLY. If not specified, IPV4_ONLY will be used.
@@ -14728,6 +15718,9 @@ export declare namespace compute {
          * records for the external IPv6 ranges..
          */
         publicPtrDomainName?: pulumi.Input<string>;
+        /**
+         * A full or partial URL to a security policy to add to this instance. If this field is set to an empty string it will remove the associated security policy.
+         */
         securityPolicy?: pulumi.Input<string>;
     }
     interface InstanceNetworkInterfaceAliasIpRange {
@@ -14772,6 +15765,9 @@ export declare namespace compute {
          * records for the external IPv6 ranges..
          */
         publicPtrDomainName?: pulumi.Input<string>;
+        /**
+         * A full or partial URL to a security policy to add to this instance. If this field is set to an empty string it will remove the associated security policy.
+         */
         securityPolicy?: pulumi.Input<string>;
     }
     interface InstanceNetworkPerformanceConfig {
@@ -14782,6 +15778,9 @@ export declare namespace compute {
         totalEgressBandwidthTier: pulumi.Input<string>;
     }
     interface InstanceParams {
+        /**
+         * A map of resource manager tags. Resource manager tag keys and values have the same definition as resource manager tags. Keys must be in the format tagKeys/{tag_key_id}, and values are in the format tagValues/456. The field is ignored (both PUT & PATCH) when empty.
+         */
         resourceManagerTags?: pulumi.Input<{
             [key: string]: any;
         }>;
@@ -14818,8 +15817,21 @@ export declare namespace compute {
          * Describe the type of termination action for VM. Can be `STOP` or `DELETE`.  Read more on [here](https://cloud.google.com/compute/docs/instances/create-use-spot)
          */
         instanceTerminationAction?: pulumi.Input<string>;
+        /**
+         * Specifies the maximum amount of time a Local Ssd Vm should wait while
+         *   recovery of the Local Ssd state is attempted. Its value should be in
+         *   between 0 and 168 hours with hour granularity and the default value being 1
+         *   hour.
+         */
         localSsdRecoveryTimeout?: pulumi.Input<inputs.compute.InstanceSchedulingLocalSsdRecoveryTimeout>;
+        /**
+         * Specifies the frequency of planned maintenance events. The accepted values are: `PERIODIC`.
+         */
         maintenanceInterval?: pulumi.Input<string>;
+        /**
+         * The duration of the instance. Instance will run and be terminated after then, the termination action could be defined in `instanceTerminationAction`. Only support `DELETE` `instanceTerminationAction` at this point. Structure is documented below.
+         * <a name="nestedMaxRunDuration"></a>The `maxRunDuration` block supports:
+         */
         maxRunDuration?: pulumi.Input<inputs.compute.InstanceSchedulingMaxRunDuration>;
         /**
          * The minimum number of virtual CPUs this instance will consume when running on a sole-tenant node.
@@ -14963,7 +15975,7 @@ export declare namespace compute {
          */
         threadsPerCore?: pulumi.Input<number>;
         /**
-         * ) The number of physical cores to expose to an instance. [visible cores info (VC)](https://cloud.google.com/compute/docs/instances/customize-visible-cores).
+         * The number of physical cores to expose to an instance. [visible cores info (VC)](https://cloud.google.com/compute/docs/instances/customize-visible-cores).
          */
         visibleCoreCount?: pulumi.Input<number>;
     }
@@ -15136,8 +16148,7 @@ export declare namespace compute {
          */
         count: pulumi.Input<number>;
         /**
-         * The type of GCE disk, can be either `"SCRATCH"` or
-         * `"PERSISTENT"`.
+         * The accelerator type resource to expose to this instance. E.g. `nvidia-tesla-k80`.
          */
         type: pulumi.Input<string>;
     }
@@ -15157,6 +16168,9 @@ export declare namespace compute {
          * interfaces on subnet-mode networks. Structure documented below.
          */
         aliasIpRanges?: pulumi.Input<pulumi.Input<inputs.compute.InstanceTemplateNetworkInterfaceAliasIpRange>[]>;
+        /**
+         * The prefix length of the primary internal IPv6 range.
+         */
         internalIpv6PrefixLength?: pulumi.Input<number>;
         /**
          * An array of IPv6 access configurations for this interface.
@@ -15164,7 +16178,13 @@ export declare namespace compute {
          * specified, then this instance will have no external IPv6 Internet access. Structure documented below.
          */
         ipv6AccessConfigs?: pulumi.Input<pulumi.Input<inputs.compute.InstanceTemplateNetworkInterfaceIpv6AccessConfig>[]>;
+        /**
+         * One of EXTERNAL, INTERNAL to indicate whether the IP can be accessed from the Internet. This field is always inherited from its subnetwork.
+         */
         ipv6AccessType?: pulumi.Input<string>;
+        /**
+         * An IPv6 internal network address for this network interface. If not specified, Google Cloud will automatically assign an internal IPv6 address from the instance's subnetwork.
+         */
         ipv6Address?: pulumi.Input<string>;
         /**
          * The name of the instance template. If you leave
@@ -15178,7 +16198,7 @@ export declare namespace compute {
          */
         network?: pulumi.Input<string>;
         /**
-         * ) The URL of the network attachment that this interface should connect to in the following format: projects/{projectNumber}/regions/{region_name}/networkAttachments/{network_attachment_name}.
+         * The URL of the network attachment that this interface should connect to in the following format: projects/{projectNumber}/regions/{region_name}/networkAttachments/{network_attachment_name}.
          */
         networkAttachment?: pulumi.Input<string>;
         /**
@@ -15221,6 +16241,9 @@ export declare namespace compute {
          * subnet has an external subnet. Only PREMIUM and STANDARD tier is valid for IPv6.
          */
         networkTier?: pulumi.Input<string>;
+        /**
+         * The DNS domain name for the public PTR record.The DNS domain name for the public PTR record.
+         */
         publicPtrDomainName?: pulumi.Input<string>;
     }
     interface InstanceTemplateNetworkInterfaceAliasIpRange {
@@ -15240,7 +16263,13 @@ export declare namespace compute {
         subnetworkRangeName?: pulumi.Input<string>;
     }
     interface InstanceTemplateNetworkInterfaceIpv6AccessConfig {
+        /**
+         * The first IPv6 address of the external IPv6 range associated with this instance, prefix length is stored in externalIpv6PrefixLength in ipv6AccessConfig. The field is output only, an IPv6 address from a subnetwork associated with the instance will be allocated dynamically.
+         */
         externalIpv6?: pulumi.Input<string>;
+        /**
+         * The prefix length of the external IPv6 range.
+         */
         externalIpv6PrefixLength?: pulumi.Input<string>;
         /**
          * The name of the instance template. If you leave
@@ -15252,6 +16281,9 @@ export declare namespace compute {
          * subnet has an external subnet. Only PREMIUM and STANDARD tier is valid for IPv6.
          */
         networkTier: pulumi.Input<string>;
+        /**
+         * The domain name to be used when creating DNSv6 records for the external IPv6 ranges.
+         */
         publicPtrDomainName?: pulumi.Input<string>;
     }
     interface InstanceTemplateNetworkPerformanceConfig {
@@ -15292,13 +16324,25 @@ export declare namespace compute {
          * Describe the type of termination action for `SPOT` VM. Can be `STOP` or `DELETE`.  Read more on [here](https://cloud.google.com/compute/docs/instances/create-use-spot)
          */
         instanceTerminationAction?: pulumi.Input<string>;
+        /**
+         * Specifies the maximum amount of time a Local Ssd Vm should wait while
+         *   recovery of the Local Ssd state is attempted. Its value should be in
+         *   between 0 and 168 hours with hour granularity and the default value being 1
+         *   hour.
+         */
         localSsdRecoveryTimeouts?: pulumi.Input<pulumi.Input<inputs.compute.InstanceTemplateSchedulingLocalSsdRecoveryTimeout>[]>;
+        /**
+         * Specifies the frequency of planned maintenance events. The accepted values are: `PERIODIC`.
+         */
         maintenanceInterval?: pulumi.Input<string>;
         /**
-         * Beta - The duration of the instance. Instance will run and be terminated after then, the termination action could be defined in `instanceTerminationAction`. Only support `DELETE` `instanceTerminationAction` at this point. Structure is documented below.
+         * The duration of the instance. Instance will run and be terminated after then, the termination action could be defined in `instanceTerminationAction`. Only support `DELETE` `instanceTerminationAction` at this point. Structure is documented below.
          * <a name="nestedMaxRunDuration"></a>The `maxRunDuration` block supports:
          */
         maxRunDuration?: pulumi.Input<inputs.compute.InstanceTemplateSchedulingMaxRunDuration>;
+        /**
+         * Minimum number of cpus for the instance.
+         */
         minNodeCpus?: pulumi.Input<number>;
         /**
          * Specifies node affinities or anti-affinities
@@ -17019,7 +18063,7 @@ export declare namespace compute {
     }
     interface RegionInstanceGroupManagerAllInstancesConfig {
         /**
-         * ), The label key-value pairs that you want to patch onto the instance.
+         * , The label key-value pairs that you want to patch onto the instance.
          *
          * - - -
          */
@@ -17027,7 +18071,7 @@ export declare namespace compute {
             [key: string]: pulumi.Input<string>;
         }>;
         /**
-         * ), The metadata key-value pairs that you want to patch onto the instance. For more information, see [Project and instance metadata](https://cloud.google.com/compute/docs/metadata#project_and_instance_metadata).
+         * , The metadata key-value pairs that you want to patch onto the instance. For more information, see [Project and instance metadata](https://cloud.google.com/compute/docs/metadata#project_and_instance_metadata).
          */
         metadata?: pulumi.Input<{
             [key: string]: pulumi.Input<string>;
@@ -17094,7 +18138,6 @@ export declare namespace compute {
     }
     interface RegionInstanceGroupManagerStatus {
         /**
-         * )
          * Properties to set on all instances in the group. After setting
          * allInstancesConfig on the group, you must update the group's instances to
          * apply the configuration.
@@ -17114,6 +18157,9 @@ export declare namespace compute {
         versionTargets?: pulumi.Input<pulumi.Input<inputs.compute.RegionInstanceGroupManagerStatusVersionTarget>[]>;
     }
     interface RegionInstanceGroupManagerStatusAllInstancesConfig {
+        /**
+         * A bit indicating whether this configuration has been applied to all managed instances in the group.
+         */
         effective?: pulumi.Input<boolean>;
     }
     interface RegionInstanceGroupManagerStatusStateful {
@@ -17133,6 +18179,9 @@ export declare namespace compute {
         allEffective?: pulumi.Input<boolean>;
     }
     interface RegionInstanceGroupManagerStatusVersionTarget {
+        /**
+         * A bit indicating whether version target has been reached in this managed instance group, i.e. all instances are in their target version. Instances' target version are specified by version field on Instance Group Manager.
+         */
         isReached?: pulumi.Input<boolean>;
     }
     interface RegionInstanceGroupManagerUpdatePolicy {
@@ -17157,7 +18206,7 @@ export declare namespace compute {
          */
         maxUnavailablePercent?: pulumi.Input<number>;
         /**
-         * ), Minimum number of seconds to wait for after a newly created instance becomes available. This value must be from range [0, 3600]
+         * , Minimum number of seconds to wait for after a newly created instance becomes available. This value must be from range [0, 3600]
          */
         minReadySec?: pulumi.Input<number>;
         /**
@@ -17390,8 +18439,7 @@ export declare namespace compute {
          */
         count: pulumi.Input<number>;
         /**
-         * The type of GCE disk, can be either `"SCRATCH"` or
-         * `"PERSISTENT"`.
+         * The accelerator type resource to expose to this instance. E.g. `nvidia-tesla-k80`.
          */
         type: pulumi.Input<string>;
     }
@@ -17403,6 +18451,9 @@ export declare namespace compute {
          * interfaces on subnet-mode networks. Structure documented below.
          */
         aliasIpRanges?: pulumi.Input<pulumi.Input<inputs.compute.RegionInstanceTemplateNetworkInterfaceAliasIpRange>[]>;
+        /**
+         * The prefix length of the primary internal IPv6 range.
+         */
         internalIpv6PrefixLength?: pulumi.Input<number>;
         /**
          * An array of IPv6 access configurations for this interface.
@@ -17410,8 +18461,17 @@ export declare namespace compute {
          * specified, then this instance will have no external IPv6 Internet access. Structure documented below.
          */
         ipv6AccessConfigs?: pulumi.Input<pulumi.Input<inputs.compute.RegionInstanceTemplateNetworkInterfaceIpv6AccessConfig>[]>;
+        /**
+         * One of EXTERNAL, INTERNAL to indicate whether the IP can be accessed from the Internet. This field is always inherited from its subnetwork.
+         */
         ipv6AccessType?: pulumi.Input<string>;
+        /**
+         * An IPv6 internal network address for this network interface. If not specified, Google Cloud will automatically assign an internal IPv6 address from the instance's subnetwork.
+         */
         ipv6Address?: pulumi.Input<string>;
+        /**
+         * The name of the network_interface.
+         */
         name?: pulumi.Input<string>;
         /**
          * The name or selfLink of the network to attach this interface to.
@@ -17459,6 +18519,9 @@ export declare namespace compute {
          * subnet has an external subnet. Only PREMIUM and STANDARD tier is valid for IPv6.
          */
         networkTier?: pulumi.Input<string>;
+        /**
+         * The DNS domain name for the public PTR record.The DNS domain name for the public PTR record.
+         */
         publicPtrDomainName?: pulumi.Input<string>;
     }
     interface RegionInstanceTemplateNetworkInterfaceAliasIpRange {
@@ -17478,14 +18541,26 @@ export declare namespace compute {
         subnetworkRangeName?: pulumi.Input<string>;
     }
     interface RegionInstanceTemplateNetworkInterfaceIpv6AccessConfig {
+        /**
+         * The first IPv6 address of the external IPv6 range associated with this instance, prefix length is stored in externalIpv6PrefixLength in ipv6AccessConfig. The field is output only, an IPv6 address from a subnetwork associated with the instance will be allocated dynamically.
+         */
         externalIpv6?: pulumi.Input<string>;
+        /**
+         * The prefix length of the external IPv6 range.
+         */
         externalIpv6PrefixLength?: pulumi.Input<string>;
+        /**
+         * The name of this access configuration.
+         */
         name?: pulumi.Input<string>;
         /**
          * The service-level to be provided for IPv6 traffic when the
          * subnet has an external subnet. Only PREMIUM and STANDARD tier is valid for IPv6.
          */
         networkTier: pulumi.Input<string>;
+        /**
+         * The domain name to be used when creating DNSv6 records for the external IPv6 ranges.
+         */
         publicPtrDomainName?: pulumi.Input<string>;
     }
     interface RegionInstanceTemplateNetworkPerformanceConfig {
@@ -17526,16 +18601,24 @@ export declare namespace compute {
          * Describe the type of termination action for `SPOT` VM. Can be `STOP` or `DELETE`.  Read more on [here](https://cloud.google.com/compute/docs/instances/create-use-spot)
          */
         instanceTerminationAction?: pulumi.Input<string>;
+        /**
+         * Specifies the maximum amount of time a Local Ssd Vm should wait while
+         *   recovery of the Local Ssd state is attempted. Its value should be in
+         *   between 0 and 168 hours with hour granularity and the default value being 1
+         *   hour.
+         */
         localSsdRecoveryTimeouts?: pulumi.Input<pulumi.Input<inputs.compute.RegionInstanceTemplateSchedulingLocalSsdRecoveryTimeout>[]>;
         /**
          * Specifies the frequency of planned maintenance events. The accepted values are: `PERIODIC`.
-         * <a name="nestedGuestAccelerator"></a>The `guestAccelerator` block supports:
          */
         maintenanceInterval?: pulumi.Input<string>;
         /**
          * The duration of the instance. Instance will run and be terminated after then, the termination action could be defined in `instanceTerminationAction`. Only support `DELETE` `instanceTerminationAction` at this point. Structure is documented below.
          */
         maxRunDuration?: pulumi.Input<inputs.compute.RegionInstanceTemplateSchedulingMaxRunDuration>;
+        /**
+         * Minimum number of cpus for the instance.
+         */
         minNodeCpus?: pulumi.Input<number>;
         /**
          * Specifies node affinities or anti-affinities
@@ -19580,6 +20663,9 @@ export declare namespace compute {
          * Possible values are: `COLLOCATED`.
          */
         collocation?: pulumi.Input<string>;
+        /**
+         * Specifies the number of max logical switches.
+         */
         maxDistance?: pulumi.Input<number>;
         /**
          * Number of VMs in this placement group. Google does not recommend that you use this field
@@ -19839,6 +20925,11 @@ export declare namespace compute {
          * This field is used for public NAT.
          */
         sourceNatActiveIps?: pulumi.Input<pulumi.Input<string>[]>;
+        /**
+         * A list of URLs of the subnetworks used as source ranges for this NAT Rule.
+         * These subnetworks must have purpose set to PRIVATE_NAT.
+         * This field is used for private NAT.
+         */
         sourceNatActiveRanges?: pulumi.Input<pulumi.Input<string>[]>;
         /**
          * A list of URLs of the IP resources to be drained.
@@ -19847,6 +20938,11 @@ export declare namespace compute {
          * This field is used for public NAT.
          */
         sourceNatDrainIps?: pulumi.Input<pulumi.Input<string>[]>;
+        /**
+         * A list of URLs of subnetworks representing source ranges to be drained.
+         * This is only supported on patch/update, and these subnetworks must have previously been used as active ranges in this NAT Rule.
+         * This field is used for private NAT.
+         */
         sourceNatDrainRanges?: pulumi.Input<pulumi.Input<string>[]>;
     }
     interface RouterNatSubnetwork {
@@ -19914,6 +21010,9 @@ export declare namespace compute {
         sessionInitializationMode: pulumi.Input<string>;
     }
     interface RouterPeerMd5AuthenticationKey {
+        /**
+         * Value of the key.
+         */
         key: pulumi.Input<string>;
         /**
          * Name of this BGP peer. The name must be 1-63 characters long,
@@ -19927,7 +21026,7 @@ export declare namespace compute {
     }
     interface SecurityPolicyAdaptiveProtectionConfig {
         /**
-         * ) Configuration for [Automatically deploy Adaptive Protection suggested rules](https://cloud.google.com/armor/docs/adaptive-protection-auto-deploy?hl=en). Structure is documented below.
+         * Configuration for [Automatically deploy Adaptive Protection suggested rules](https://cloud.google.com/armor/docs/adaptive-protection-auto-deploy?hl=en). Structure is documented below.
          *
          * <a name="nestedLayer7DdosDefenseConfig"></a>The `layer7DdosDefenseConfig` block supports:
          */
@@ -19980,7 +21079,7 @@ export declare namespace compute {
          */
         logLevel?: pulumi.Input<string>;
         /**
-         * ) An optional list of case-insensitive request header names to use for resolving the callers client IP address.
+         * An optional list of case-insensitive request header names to use for resolving the callers client IP address.
          */
         userIpRequestHeaders?: pulumi.Input<pulumi.Input<string>[]>;
     }
@@ -20018,7 +21117,7 @@ export declare namespace compute {
          */
         match: pulumi.Input<inputs.compute.SecurityPolicyRuleMatch>;
         /**
-         * ) Preconfigured WAF configuration to be applied for the rule. If the rule does not evaluate preconfigured WAF rules, i.e., if `evaluatePreconfiguredWaf()` is not used, this field will have no effect. Structure is documented below.
+         * Preconfigured WAF configuration to be applied for the rule. If the rule does not evaluate preconfigured WAF rules, i.e., if `evaluatePreconfiguredWaf()` is not used, this field will have no effect. Structure is documented below.
          */
         preconfiguredWafConfig?: pulumi.Input<inputs.compute.SecurityPolicyRulePreconfiguredWafConfig>;
         /**
@@ -20189,7 +21288,7 @@ export declare namespace compute {
          */
         enforceOnKey?: pulumi.Input<string>;
         /**
-         * ) If specified, any combination of values of enforce_on_key_type/enforce_on_key_name is treated as the key on which rate limit threshold/action is enforced. You can specify up to 3 enforce_on_key_configs. If `enforceOnKeyConfigs` is specified, `enforceOnKey` must be set to an empty string. Structure is documented below.
+         * If specified, any combination of values of enforce_on_key_type/enforce_on_key_name is treated as the key on which rate limit threshold/action is enforced. You can specify up to 3 enforce_on_key_configs. If `enforceOnKeyConfigs` is specified, `enforceOnKey` must be set to an empty string. Structure is documented below.
          *
          * **Note:** To avoid the conflict between `enforceOnKey` and `enforceOnKeyConfigs`, the field `enforceOnKey` needs to be set to an empty string.
          */
@@ -22536,7 +23635,7 @@ export declare namespace container {
          */
         iamInstanceProfile: pulumi.Input<string>;
         /**
-         * (Beta only) Details of placement information for an instance.
+         * Details of placement information for an instance.
          */
         instancePlacement?: pulumi.Input<inputs.container.AwsClusterControlPlaneInstancePlacement>;
         /**
@@ -22709,8 +23808,17 @@ export declare namespace container {
         vpcId: pulumi.Input<string>;
     }
     interface AwsClusterWorkloadIdentityConfig {
+        /**
+         * The ID of the OIDC Identity Provider (IdP) associated to the Workload Identity Pool.
+         */
         identityProvider?: pulumi.Input<string>;
+        /**
+         * The OIDC issuer URL for this cluster.
+         */
         issuerUri?: pulumi.Input<string>;
+        /**
+         * The Workload Identity Pool associated to the cluster.
+         */
         workloadPool?: pulumi.Input<string>;
     }
     interface AwsNodePoolAutoscaling {
@@ -22737,11 +23845,11 @@ export declare namespace container {
          */
         iamInstanceProfile: pulumi.Input<string>;
         /**
-         * (Beta only) The OS image type to use on node pool instances.
+         * The OS image type to use on node pool instances.
          */
         imageType?: pulumi.Input<string>;
         /**
-         * (Beta only) Details of placement information for an instance.
+         * Details of placement information for an instance.
          */
         instancePlacement?: pulumi.Input<inputs.container.AwsNodePoolConfigInstancePlacement>;
         /**
@@ -22767,7 +23875,7 @@ export declare namespace container {
          */
         securityGroupIds?: pulumi.Input<pulumi.Input<string>[]>;
         /**
-         * (Beta only) Optional. When specified, the node pool will provision Spot instances from the set of spot_config.instance_types. This field is mutually exclusive with `instanceType`
+         * Optional. When specified, the node pool will provision Spot instances from the set of spot_config.instance_types. This field is mutually exclusive with `instanceType`
          */
         spotConfig?: pulumi.Input<inputs.container.AwsNodePoolConfigSpotConfig>;
         /**
@@ -23054,8 +24162,17 @@ export declare namespace container {
         virtualNetworkId: pulumi.Input<string>;
     }
     interface AzureClusterWorkloadIdentityConfig {
+        /**
+         * The ID of the OIDC Identity Provider (IdP) associated to the Workload Identity Pool.
+         */
         identityProvider?: pulumi.Input<string>;
+        /**
+         * The OIDC issuer URL for this cluster.
+         */
         issuerUri?: pulumi.Input<string>;
+        /**
+         * The Workload Identity Pool associated to the cluster.
+         */
         workloadPool?: pulumi.Input<string>;
     }
     interface AzureNodePoolAutoscaling {
@@ -23070,7 +24187,7 @@ export declare namespace container {
     }
     interface AzureNodePoolConfig {
         /**
-         * (Beta only) The OS image type to use on node pool instances.
+         * The OS image type to use on node pool instances.
          */
         imageType?: pulumi.Input<string>;
         /**
@@ -23340,7 +24457,7 @@ export declare namespace container {
          */
         autoProvisioningDefaults?: pulumi.Input<inputs.container.ClusterClusterAutoscalingAutoProvisioningDefaults>;
         /**
-         * ) Configuration
+         * Configuration
          * options for the [Autoscaling profile](https://cloud.google.com/kubernetes-engine/docs/concepts/cluster-autoscaler#autoscaling_profiles)
          * feature, which lets you choose whether the cluster autoscaler should optimize for resource utilization or resource availability
          * when deciding to remove nodes from a cluster. Can be `BALANCED` or `OPTIMIZE_UTILIZATION`. Defaults to `BALANCED`.
@@ -23416,9 +24533,15 @@ export declare namespace container {
          * Specifies whether node auto-upgrade is enabled for the node pool. If enabled, node auto-upgrade helps keep the nodes in your node pool up to date with the latest release version of Kubernetes.
          */
         autoUpgrade?: pulumi.Input<boolean>;
+        /**
+         * Specifies the Auto Upgrade knobs for the node pool.
+         */
         upgradeOptions?: pulumi.Input<pulumi.Input<inputs.container.ClusterClusterAutoscalingAutoProvisioningDefaultsManagementUpgradeOption>[]>;
     }
     interface ClusterClusterAutoscalingAutoProvisioningDefaultsManagementUpgradeOption {
+        /**
+         * This field is set when upgrades are about to commence with the approximate start time for the upgrades, in RFC3339 text format.
+         */
         autoUpgradeStartTime?: pulumi.Input<string>;
         /**
          * Description of the cluster.
@@ -23558,7 +24681,13 @@ export declare namespace container {
         enabledApis: pulumi.Input<pulumi.Input<string>[]>;
     }
     interface ClusterFleet {
+        /**
+         * Full resource name of the registered fleet membership of the cluster.
+         */
         membership?: pulumi.Input<string>;
+        /**
+         * Whether the cluster has been registered via the fleet API.
+         */
         preRegistered?: pulumi.Input<boolean>;
         /**
          * The name of the Fleet host project where this cluster will be registered.
@@ -23598,6 +24727,9 @@ export declare namespace container {
          * `clusterIpv4CidrBlock` can be used to automatically create a GKE-managed one.
          */
         clusterSecondaryRangeName?: pulumi.Input<string>;
+        /**
+         * Configuration for cluster level pod cidr overprovision. Default is disabled=false.
+         */
         podCidrOverprovisionConfig?: pulumi.Input<inputs.container.ClusterIpAllocationPolicyPodCidrOverprovisionConfig>;
         /**
          * The IP address range of the services IPs in this cluster.
@@ -23713,6 +24845,9 @@ export declare namespace container {
         startTime: pulumi.Input<string>;
     }
     interface ClusterMasterAuth {
+        /**
+         * Base64 encoded public certificate used by clients to authenticate to the cluster endpoint.
+         */
         clientCertificate?: pulumi.Input<string>;
         /**
          * Whether client certificate authorization is enabled for this cluster.  For example:
@@ -23724,10 +24859,19 @@ export declare namespace container {
          * This block also contains several computed attributes, documented below.
          */
         clientCertificateConfig: pulumi.Input<inputs.container.ClusterMasterAuthClientCertificateConfig>;
+        /**
+         * Base64 encoded private key used by clients to authenticate to the cluster endpoint.
+         */
         clientKey?: pulumi.Input<string>;
+        /**
+         * Base64 encoded public certificate that is the root of trust for the cluster.
+         */
         clusterCaCertificate?: pulumi.Input<string>;
     }
     interface ClusterMasterAuthClientCertificateConfig {
+        /**
+         * Whether client certificate authorization is enabled for this cluster.
+         */
         issueClientCertificate: pulumi.Input<boolean>;
     }
     interface ClusterMasterAuthorizedNetworksConfig {
@@ -23823,14 +24967,16 @@ export declare namespace container {
          * (e.g. 'pd-standard', 'pd-balanced' or 'pd-ssd'). If unspecified, the default disk type is 'pd-standard'
          */
         diskType?: pulumi.Input<string>;
+        /**
+         * List of kubernetes taints applied to each node.
+         */
         effectiveTaints?: pulumi.Input<pulumi.Input<inputs.container.ClusterNodeConfigEffectiveTaint>[]>;
         /**
-         * )
          * Enabling Confidential Storage will create boot disk with confidential mode. It is disabled by default.
          */
         enableConfidentialStorage?: pulumi.Input<boolean>;
         /**
-         * ) Parameters for the ephemeral storage filesystem. If unspecified, ephemeral storage is backed by the boot disk. Structure is documented below.
+         * Parameters for the ephemeral storage filesystem. If unspecified, ephemeral storage is backed by the boot disk. Structure is documented below.
          *
          * ```typescript
          * import * as pulumi from "@pulumi/pulumi";
@@ -23883,6 +25029,9 @@ export declare namespace container {
          * ```
          */
         gvnic?: pulumi.Input<inputs.container.ClusterNodeConfigGvnic>;
+        /**
+         * The maintenance policy for the hosts on which the GKE VMs run on.
+         */
         hostMaintenancePolicy?: pulumi.Input<inputs.container.ClusterNodeConfigHostMaintenancePolicy>;
         /**
          * The image type to use for this node. Note that changing the image type
@@ -23975,6 +25124,9 @@ export declare namespace container {
         resourceLabels?: pulumi.Input<{
             [key: string]: pulumi.Input<string>;
         }>;
+        /**
+         * Sandbox configuration for this node.
+         */
         sandboxConfig?: pulumi.Input<inputs.container.ClusterNodeConfigSandboxConfig>;
         /**
          * The service account to be used by the Node VMs.
@@ -24124,6 +25276,9 @@ export declare namespace container {
         enabled: pulumi.Input<boolean>;
     }
     interface ClusterNodeConfigHostMaintenancePolicy {
+        /**
+         * .
+         */
         maintenanceInterval: pulumi.Input<string>;
     }
     interface ClusterNodeConfigKubeletConfig {
@@ -24226,6 +25381,9 @@ export declare namespace container {
         enableSecureBoot?: pulumi.Input<boolean>;
     }
     interface ClusterNodeConfigSoleTenantConfig {
+        /**
+         * .
+         */
         nodeAffinities: pulumi.Input<pulumi.Input<inputs.container.ClusterNodeConfigSoleTenantConfigNodeAffinity>[]>;
     }
     interface ClusterNodeConfigSoleTenantConfigNodeAffinity {
@@ -24267,6 +25425,9 @@ export declare namespace container {
         mode: pulumi.Input<string>;
     }
     interface ClusterNodePool {
+        /**
+         * Configuration required by cluster autoscaler to adjust the size of the node pool to the current cluster usage.
+         */
         autoscaling?: pulumi.Input<inputs.container.ClusterNodePoolAutoscaling>;
         /**
          * The number of nodes to create in this
@@ -24277,12 +25438,21 @@ export declare namespace container {
          * `removeDefaultNodePool` to `true`.
          */
         initialNodeCount?: pulumi.Input<number>;
+        /**
+         * The resource URLs of the managed instance groups associated with this node pool.
+         */
         instanceGroupUrls?: pulumi.Input<pulumi.Input<string>[]>;
+        /**
+         * List of instance group URLs which have been assigned to this node pool.
+         */
         managedInstanceGroupUrls?: pulumi.Input<pulumi.Input<string>[]>;
         /**
          * NodeManagement configuration for this NodePool. Structure is documented below.
          */
         management?: pulumi.Input<inputs.container.ClusterNodePoolManagement>;
+        /**
+         * The maximum number of pods per node in this node pool. Note that this does not work on node pools which are "route-based" - that is, node pools belonging to clusters that do not have IP Aliasing enabled.
+         */
         maxPodsPerNode?: pulumi.Input<number>;
         /**
          * The name of the cluster, unique within the project and
@@ -24291,6 +25461,9 @@ export declare namespace container {
          * - - -
          */
         name?: pulumi.Input<string>;
+        /**
+         * Creates a unique name for the node pool beginning with the specified prefix. Conflicts with name.
+         */
         namePrefix?: pulumi.Input<string>;
         /**
          * Configuration for
@@ -24305,6 +25478,9 @@ export declare namespace container {
          * Structure is documented below.
          */
         nodeConfig?: pulumi.Input<inputs.container.ClusterNodePoolNodeConfig>;
+        /**
+         * The number of nodes per instance group. This field can be used to update the number of nodes per instance group but should not be used alongside autoscaling.
+         */
         nodeCount?: pulumi.Input<number>;
         /**
          * The list of zones in which the cluster's nodes
@@ -24320,7 +25496,13 @@ export declare namespace container {
          * preferred.
          */
         nodeLocations?: pulumi.Input<pulumi.Input<string>[]>;
+        /**
+         * Specifies the node placement policy
+         */
         placementPolicy?: pulumi.Input<inputs.container.ClusterNodePoolPlacementPolicy>;
+        /**
+         * Specifies the configuration of queued provisioning
+         */
         queuedProvisioning?: pulumi.Input<inputs.container.ClusterNodePoolQueuedProvisioning>;
         /**
          * Specifies the upgrade settings for NAP created node pools. Structure is documented below.
@@ -24345,10 +25527,25 @@ export declare namespace container {
         tags?: pulumi.Input<pulumi.Input<string>[]>;
     }
     interface ClusterNodePoolAutoscaling {
+        /**
+         * Location policy specifies the algorithm used when scaling-up the node pool. "BALANCED" - Is a best effort policy that aims to balance the sizes of available zones. "ANY" - Instructs the cluster autoscaler to prioritize utilization of unused reservations, and reduces preemption risk for Spot VMs.
+         */
         locationPolicy?: pulumi.Input<string>;
+        /**
+         * Maximum number of nodes per zone in the node pool. Must be >= min_node_count. Cannot be used with total limits.
+         */
         maxNodeCount?: pulumi.Input<number>;
+        /**
+         * Minimum number of nodes per zone in the node pool. Must be >=0 and <= max_node_count. Cannot be used with total limits.
+         */
         minNodeCount?: pulumi.Input<number>;
+        /**
+         * Maximum number of all nodes in the node pool. Must be >= total_min_node_count. Cannot be used with per zone limits.
+         */
         totalMaxNodeCount?: pulumi.Input<number>;
+        /**
+         * Minimum number of all nodes in the node pool. Must be >=0 and <= total_max_node_count. Cannot be used with per zone limits.
+         */
         totalMinNodeCount?: pulumi.Input<number>;
     }
     interface ClusterNodePoolDefaults {
@@ -24359,7 +25556,7 @@ export declare namespace container {
     }
     interface ClusterNodePoolDefaultsNodeConfigDefaults {
         /**
-         * ) The default Google Container Filesystem (GCFS) configuration at the cluster level. e.g. enable [image streaming](https://cloud.google.com/kubernetes-engine/docs/how-to/image-streaming) across all the node pools within the cluster. Structure is documented below.
+         * The default Google Container Filesystem (GCFS) configuration at the cluster level. e.g. enable [image streaming](https://cloud.google.com/kubernetes-engine/docs/how-to/image-streaming) across all the node pools within the cluster. Structure is documented below.
          */
         gcfsConfig?: pulumi.Input<inputs.container.ClusterNodePoolDefaultsNodeConfigDefaultsGcfsConfig>;
         /**
@@ -24386,7 +25583,13 @@ export declare namespace container {
         autoUpgrade?: pulumi.Input<boolean>;
     }
     interface ClusterNodePoolNetworkConfig {
+        /**
+         * We specify the additional node networks for this node pool using this list. Each node network corresponds to an additional interface
+         */
         additionalNodeNetworkConfigs?: pulumi.Input<pulumi.Input<inputs.container.ClusterNodePoolNetworkConfigAdditionalNodeNetworkConfig>[]>;
+        /**
+         * We specify the additional pod networks for this node pool using this list. Each pod network corresponds to an additional alias IP range for the node
+         */
         additionalPodNetworkConfigs?: pulumi.Input<pulumi.Input<inputs.container.ClusterNodePoolNetworkConfigAdditionalPodNetworkConfig>[]>;
         /**
          * Whether to create a new range for pod IPs in this node pool. Defaults are provided for `podRange` and `podIpv4CidrBlock` if they are not specified.
@@ -24403,6 +25606,9 @@ export declare namespace container {
          * Network bandwidth tier configuration.
          */
         networkPerformanceConfig?: pulumi.Input<inputs.container.ClusterNodePoolNetworkConfigNetworkPerformanceConfig>;
+        /**
+         * Configuration for node-pool level pod cidr overprovision. If not set, the cluster level setting will be inherited
+         */
         podCidrOverprovisionConfig?: pulumi.Input<inputs.container.ClusterNodePoolNetworkConfigPodCidrOverprovisionConfig>;
         /**
          * The IP address range for pod IPs in this node pool. Only applicable if createPodRange is true. Set to blank to have a range chosen with the default size. Set to /netmask (e.g. /14) to have a range chosen with a specific netmask. Set to a CIDR notation (e.g. 10.96.0.0/14) to pick a specific range to use.
@@ -24427,7 +25633,13 @@ export declare namespace container {
         subnetwork?: pulumi.Input<string>;
     }
     interface ClusterNodePoolNetworkConfigAdditionalPodNetworkConfig {
+        /**
+         * The maximum number of pods per node which use this pod network.
+         */
         maxPodsPerNode?: pulumi.Input<number>;
+        /**
+         * The name of the secondary range on the subnet which provides IP address for this pod range.
+         */
         secondaryPodRange?: pulumi.Input<string>;
         /**
          * The name or selfLink of the Google Compute Engine
@@ -24473,14 +25685,16 @@ export declare namespace container {
          * (e.g. 'pd-standard', 'pd-balanced' or 'pd-ssd'). If unspecified, the default disk type is 'pd-standard'
          */
         diskType?: pulumi.Input<string>;
+        /**
+         * List of kubernetes taints applied to each node.
+         */
         effectiveTaints?: pulumi.Input<pulumi.Input<inputs.container.ClusterNodePoolNodeConfigEffectiveTaint>[]>;
         /**
-         * )
          * Enabling Confidential Storage will create boot disk with confidential mode. It is disabled by default.
          */
         enableConfidentialStorage?: pulumi.Input<boolean>;
         /**
-         * ) Parameters for the ephemeral storage filesystem. If unspecified, ephemeral storage is backed by the boot disk. Structure is documented below.
+         * Parameters for the ephemeral storage filesystem. If unspecified, ephemeral storage is backed by the boot disk. Structure is documented below.
          *
          * ```typescript
          * import * as pulumi from "@pulumi/pulumi";
@@ -24533,6 +25747,9 @@ export declare namespace container {
          * ```
          */
         gvnic?: pulumi.Input<inputs.container.ClusterNodePoolNodeConfigGvnic>;
+        /**
+         * The maintenance policy for the hosts on which the GKE VMs run on.
+         */
         hostMaintenancePolicy?: pulumi.Input<inputs.container.ClusterNodePoolNodeConfigHostMaintenancePolicy>;
         /**
          * The image type to use for this node. Note that changing the image type
@@ -24625,6 +25842,9 @@ export declare namespace container {
         resourceLabels?: pulumi.Input<{
             [key: string]: pulumi.Input<string>;
         }>;
+        /**
+         * Sandbox configuration for this node.
+         */
         sandboxConfig?: pulumi.Input<inputs.container.ClusterNodePoolNodeConfigSandboxConfig>;
         /**
          * The service account to be used by the Node VMs.
@@ -24774,6 +25994,9 @@ export declare namespace container {
         enabled: pulumi.Input<boolean>;
     }
     interface ClusterNodePoolNodeConfigHostMaintenancePolicy {
+        /**
+         * .
+         */
         maintenanceInterval: pulumi.Input<string>;
     }
     interface ClusterNodePoolNodeConfigKubeletConfig {
@@ -24876,6 +26099,9 @@ export declare namespace container {
         enableSecureBoot?: pulumi.Input<boolean>;
     }
     interface ClusterNodePoolNodeConfigSoleTenantConfig {
+        /**
+         * .
+         */
         nodeAffinities: pulumi.Input<pulumi.Input<inputs.container.ClusterNodePoolNodeConfigSoleTenantConfigNodeAffinity>[]>;
     }
     interface ClusterNodePoolNodeConfigSoleTenantConfigNodeAffinity {
@@ -24917,7 +26143,13 @@ export declare namespace container {
         mode: pulumi.Input<string>;
     }
     interface ClusterNodePoolPlacementPolicy {
+        /**
+         * If set, refers to the name of a custom resource policy supplied by the user. The resource policy must be in the same project and region as the node pool. If not found, InvalidArgument error is returned.
+         */
         policyName?: pulumi.Input<string>;
+        /**
+         * TPU placement topology for pod slice node pool. https://cloud.google.com/tpu/docs/types-topologies#tpu_topologies
+         */
         tpuTopology?: pulumi.Input<string>;
         /**
          * Telemetry integration for the cluster. Supported values (`ENABLED, DISABLED, SYSTEM_ONLY`);
@@ -25071,17 +26303,17 @@ export declare namespace container {
     }
     interface ClusterProtectConfig {
         /**
-         * ) WorkloadConfig defines which actions are enabled for a cluster's workload configurations. Structure is documented below
+         * WorkloadConfig defines which actions are enabled for a cluster's workload configurations. Structure is documented below
          */
         workloadConfig?: pulumi.Input<inputs.container.ClusterProtectConfigWorkloadConfig>;
         /**
-         * ) Sets which mode to use for Protect workload vulnerability scanning feature. Accepted values are DISABLED, BASIC.
+         * Sets which mode to use for Protect workload vulnerability scanning feature. Accepted values are DISABLED, BASIC.
          */
         workloadVulnerabilityMode?: pulumi.Input<string>;
     }
     interface ClusterProtectConfigWorkloadConfig {
         /**
-         * ) Sets which mode of auditing should be used for the cluster's workloads. Accepted values are DISABLED, BASIC.
+         * Sets which mode of auditing should be used for the cluster's workloads. Accepted values are DISABLED, BASIC.
          */
         auditMode: pulumi.Input<string>;
     }
@@ -25122,6 +26354,9 @@ export declare namespace container {
         enableResourceConsumptionMetering?: pulumi.Input<boolean>;
     }
     interface ClusterResourceUsageExportConfigBigqueryDestination {
+        /**
+         * The ID of a BigQuery Dataset.
+         */
         datasetId: pulumi.Input<string>;
     }
     interface ClusterSecurityPostureConfig {
@@ -25145,7 +26380,13 @@ export declare namespace container {
          * Enable Binary Authorization for this cluster. Deprecated in favor of `evaluationMode`.
          */
         enabled: pulumi.Input<boolean>;
+        /**
+         * IPv4 CIDR block reserved for Cloud TPU in the VPC.
+         */
         ipv4CidrBlock?: pulumi.Input<string>;
+        /**
+         * Whether to use service networking for Cloud TPU or not
+         */
         useServiceNetworking?: pulumi.Input<boolean>;
     }
     interface ClusterVerticalPodAutoscaling {
@@ -25231,7 +26472,13 @@ export declare namespace container {
          * Whether nodes have internal IP addresses only.
          */
         enablePrivateNodes?: pulumi.Input<boolean>;
+        /**
+         * Network bandwidth tier configuration.
+         */
         networkPerformanceConfig?: pulumi.Input<inputs.container.NodePoolNetworkConfigNetworkPerformanceConfig>;
+        /**
+         * Configuration for node-pool level pod cidr overprovision. If not set, the cluster level setting will be inherited
+         */
         podCidrOverprovisionConfig?: pulumi.Input<inputs.container.NodePoolNetworkConfigPodCidrOverprovisionConfig>;
         /**
          * The IP address range for pod IPs in this node pool. Only applicable if createPodRange is true. Set to blank to have a range chosen with the default size. Set to /netmask (e.g. /14) to have a range chosen with a specific netmask. Set to a CIDR notation (e.g. 10.96.0.0/14) to pick a specific range to use.
@@ -25267,60 +26514,174 @@ export declare namespace container {
         subnetwork?: pulumi.Input<string>;
     }
     interface NodePoolNetworkConfigNetworkPerformanceConfig {
+        /**
+         * Specifies the total network bandwidth tier for the NodePool.
+         */
         totalEgressBandwidthTier: pulumi.Input<string>;
     }
     interface NodePoolNetworkConfigPodCidrOverprovisionConfig {
         disabled: pulumi.Input<boolean>;
     }
     interface NodePoolNodeConfig {
+        /**
+         * Specifies options for controlling advanced machine features.
+         */
         advancedMachineFeatures?: pulumi.Input<inputs.container.NodePoolNodeConfigAdvancedMachineFeatures>;
+        /**
+         * The Customer Managed Encryption Key used to encrypt the boot disk attached to each node in the node pool.
+         */
         bootDiskKmsKey?: pulumi.Input<string>;
         /**
          * Configuration for Confidential Nodes feature. Structure is documented below.
          */
         confidentialNodes?: pulumi.Input<inputs.container.NodePoolNodeConfigConfidentialNodes>;
+        /**
+         * Size of the disk attached to each node, specified in GB. The smallest allowed disk size is 10GB.
+         */
         diskSizeGb?: pulumi.Input<number>;
+        /**
+         * Type of the disk attached to each node. Such as pd-standard, pd-balanced or pd-ssd
+         */
         diskType?: pulumi.Input<string>;
+        /**
+         * List of kubernetes taints applied to each node.
+         */
         effectiveTaints?: pulumi.Input<pulumi.Input<inputs.container.NodePoolNodeConfigEffectiveTaint>[]>;
+        /**
+         * If enabled boot disks are configured with confidential mode.
+         */
         enableConfidentialStorage?: pulumi.Input<boolean>;
+        /**
+         * Parameters for the ephemeral storage filesystem. If unspecified, ephemeral storage is backed by the boot disk.
+         */
         ephemeralStorageConfig?: pulumi.Input<inputs.container.NodePoolNodeConfigEphemeralStorageConfig>;
+        /**
+         * Parameters for the ephemeral storage filesystem. If unspecified, ephemeral storage is backed by the boot disk.
+         */
         ephemeralStorageLocalSsdConfig?: pulumi.Input<inputs.container.NodePoolNodeConfigEphemeralStorageLocalSsdConfig>;
+        /**
+         * Enable or disable NCCL Fast Socket in the node pool.
+         */
         fastSocket?: pulumi.Input<inputs.container.NodePoolNodeConfigFastSocket>;
+        /**
+         * GCFS configuration for this node.
+         */
         gcfsConfig?: pulumi.Input<inputs.container.NodePoolNodeConfigGcfsConfig>;
+        /**
+         * List of the type and count of accelerator cards attached to the instance.
+         */
         guestAccelerators?: pulumi.Input<pulumi.Input<inputs.container.NodePoolNodeConfigGuestAccelerator>[]>;
+        /**
+         * Enable or disable gvnic in the node pool.
+         */
         gvnic?: pulumi.Input<inputs.container.NodePoolNodeConfigGvnic>;
+        /**
+         * The maintenance policy for the hosts on which the GKE VMs run on.
+         */
         hostMaintenancePolicy?: pulumi.Input<inputs.container.NodePoolNodeConfigHostMaintenancePolicy>;
+        /**
+         * The image type to use for this node. Note that for a given image type, the latest version of it will be used.
+         */
         imageType?: pulumi.Input<string>;
+        /**
+         * Node kubelet configs.
+         */
         kubeletConfig?: pulumi.Input<inputs.container.NodePoolNodeConfigKubeletConfig>;
+        /**
+         * The map of Kubernetes labels (key/value pairs) to be applied to each node. These will added in addition to any default label(s) that Kubernetes may apply to the node.
+         */
         labels?: pulumi.Input<{
             [key: string]: pulumi.Input<string>;
         }>;
+        /**
+         * Parameters that can be configured on Linux nodes.
+         */
         linuxNodeConfig?: pulumi.Input<inputs.container.NodePoolNodeConfigLinuxNodeConfig>;
+        /**
+         * Parameters for raw-block local NVMe SSDs.
+         */
         localNvmeSsdBlockConfig?: pulumi.Input<inputs.container.NodePoolNodeConfigLocalNvmeSsdBlockConfig>;
+        /**
+         * The number of local SSD disks to be attached to the node.
+         */
         localSsdCount?: pulumi.Input<number>;
+        /**
+         * Type of logging agent that is used as the default value for node pools in the cluster. Valid values include DEFAULT and MAX_THROUGHPUT.
+         */
         loggingVariant?: pulumi.Input<string>;
+        /**
+         * The name of a Google Compute Engine machine type.
+         */
         machineType?: pulumi.Input<string>;
+        /**
+         * The metadata key/value pairs assigned to instances in the cluster.
+         */
         metadata?: pulumi.Input<{
             [key: string]: pulumi.Input<string>;
         }>;
+        /**
+         * Minimum CPU platform to be used by this instance. The instance may be scheduled on the specified or newer CPU platform.
+         */
         minCpuPlatform?: pulumi.Input<string>;
+        /**
+         * Setting this field will assign instances of this pool to run on the specified node group. This is useful for running workloads on sole tenant nodes.
+         */
         nodeGroup?: pulumi.Input<string>;
+        /**
+         * The set of Google API scopes to be made available on all of the node VMs.
+         */
         oauthScopes?: pulumi.Input<pulumi.Input<string>[]>;
+        /**
+         * Whether the nodes are created as preemptible VM instances.
+         */
         preemptible?: pulumi.Input<boolean>;
+        /**
+         * The reservation affinity configuration for the node pool.
+         */
         reservationAffinity?: pulumi.Input<inputs.container.NodePoolNodeConfigReservationAffinity>;
+        /**
+         * The GCE resource labels (a map of key/value pairs) to be applied to the node pool.
+         */
         resourceLabels?: pulumi.Input<{
             [key: string]: pulumi.Input<string>;
         }>;
+        /**
+         * Sandbox configuration for this node.
+         */
         sandboxConfig?: pulumi.Input<inputs.container.NodePoolNodeConfigSandboxConfig>;
+        /**
+         * The Google Cloud Platform Service Account to be used by the node VMs.
+         */
         serviceAccount?: pulumi.Input<string>;
+        /**
+         * Shielded Instance options.
+         */
         shieldedInstanceConfig?: pulumi.Input<inputs.container.NodePoolNodeConfigShieldedInstanceConfig>;
+        /**
+         * Node affinity options for sole tenant node pools.
+         */
         soleTenantConfig?: pulumi.Input<inputs.container.NodePoolNodeConfigSoleTenantConfig>;
+        /**
+         * Whether the nodes are created as spot VM instances.
+         */
         spot?: pulumi.Input<boolean>;
+        /**
+         * The list of instance tags applied to all nodes.
+         */
         tags?: pulumi.Input<pulumi.Input<string>[]>;
+        /**
+         * List of Kubernetes taints to be applied to each node.
+         */
         taints?: pulumi.Input<pulumi.Input<inputs.container.NodePoolNodeConfigTaint>[]>;
+        /**
+         * The workload metadata configuration for this node.
+         */
         workloadMetadataConfig?: pulumi.Input<inputs.container.NodePoolNodeConfigWorkloadMetadataConfig>;
     }
     interface NodePoolNodeConfigAdvancedMachineFeatures {
+        /**
+         * The number of threads per physical core. To disable simultaneous multithreading (SMT) set this to 1. If unset, the maximum number of threads supported per core by the underlying processor is assumed.
+         */
         threadsPerCore: pulumi.Input<number>;
     }
     interface NodePoolNodeConfigConfidentialNodes {
@@ -25331,14 +26692,29 @@ export declare namespace container {
         enabled: pulumi.Input<boolean>;
     }
     interface NodePoolNodeConfigEffectiveTaint {
+        /**
+         * Effect for taint.
+         */
         effect?: pulumi.Input<string>;
+        /**
+         * Key for taint.
+         */
         key?: pulumi.Input<string>;
+        /**
+         * Value for taint.
+         */
         value?: pulumi.Input<string>;
     }
     interface NodePoolNodeConfigEphemeralStorageConfig {
+        /**
+         * Number of local SSDs to use to back ephemeral storage. Uses NVMe interfaces. Each local SSD must be 375 or 3000 GB in size, and all local SSDs must share the same size.
+         */
         localSsdCount: pulumi.Input<number>;
     }
     interface NodePoolNodeConfigEphemeralStorageLocalSsdConfig {
+        /**
+         * Number of local SSDs to use to back ephemeral storage. Uses NVMe interfaces. Each local SSD must be 375 or 3000 GB in size, and all local SSDs must share the same size.
+         */
         localSsdCount: pulumi.Input<number>;
     }
     interface NodePoolNodeConfigFastSocket {
@@ -25356,9 +26732,21 @@ export declare namespace container {
         enabled: pulumi.Input<boolean>;
     }
     interface NodePoolNodeConfigGuestAccelerator {
+        /**
+         * The number of the accelerator cards exposed to an instance.
+         */
         count: pulumi.Input<number>;
+        /**
+         * Configuration for auto installation of GPU driver.
+         */
         gpuDriverInstallationConfig?: pulumi.Input<inputs.container.NodePoolNodeConfigGuestAcceleratorGpuDriverInstallationConfig>;
+        /**
+         * Size of partitions to create on the GPU. Valid values are described in the NVIDIA mig user guide (https://docs.nvidia.com/datacenter/tesla/mig-user-guide/#partitioning)
+         */
         gpuPartitionSize?: pulumi.Input<string>;
+        /**
+         * Configuration for GPU sharing.
+         */
         gpuSharingConfig?: pulumi.Input<inputs.container.NodePoolNodeConfigGuestAcceleratorGpuSharingConfig>;
         /**
          * The type of the policy. Supports a single value: COMPACT.
@@ -25368,10 +26756,19 @@ export declare namespace container {
         type: pulumi.Input<string>;
     }
     interface NodePoolNodeConfigGuestAcceleratorGpuDriverInstallationConfig {
+        /**
+         * Mode for how the GPU driver is installed.
+         */
         gpuDriverVersion: pulumi.Input<string>;
     }
     interface NodePoolNodeConfigGuestAcceleratorGpuSharingConfig {
+        /**
+         * The type of GPU sharing strategy to enable on the GPU node. Possible values are described in the API package (https://pkg.go.dev/google.golang.org/api/container/v1#GPUSharingConfig)
+         */
         gpuSharingStrategy: pulumi.Input<string>;
+        /**
+         * The maximum number of containers that can share a GPU.
+         */
         maxSharedClientsPerGpu: pulumi.Input<number>;
     }
     interface NodePoolNodeConfigGvnic {
@@ -25382,49 +26779,115 @@ export declare namespace container {
         enabled: pulumi.Input<boolean>;
     }
     interface NodePoolNodeConfigHostMaintenancePolicy {
+        /**
+         * .
+         */
         maintenanceInterval: pulumi.Input<string>;
     }
     interface NodePoolNodeConfigKubeletConfig {
+        /**
+         * Enable CPU CFS quota enforcement for containers that specify CPU limits.
+         */
         cpuCfsQuota?: pulumi.Input<boolean>;
+        /**
+         * Set the CPU CFS quota period value 'cpu.cfs_period_us'.
+         */
         cpuCfsQuotaPeriod?: pulumi.Input<string>;
+        /**
+         * Control the CPU management policy on the node.
+         */
         cpuManagerPolicy: pulumi.Input<string>;
+        /**
+         * Controls the maximum number of processes allowed to run in a pod.
+         */
         podPidsLimit?: pulumi.Input<number>;
     }
     interface NodePoolNodeConfigLinuxNodeConfig {
+        /**
+         * cgroupMode specifies the cgroup mode to be used on the node.
+         */
         cgroupMode?: pulumi.Input<string>;
+        /**
+         * The Linux kernel parameters to be applied to the nodes and all pods running on the nodes.
+         */
         sysctls?: pulumi.Input<{
             [key: string]: pulumi.Input<string>;
         }>;
     }
     interface NodePoolNodeConfigLocalNvmeSsdBlockConfig {
+        /**
+         * Number of raw-block local NVMe SSD disks to be attached to the node. Each local SSD is 375 GB in size.
+         */
         localSsdCount: pulumi.Input<number>;
     }
     interface NodePoolNodeConfigReservationAffinity {
+        /**
+         * Corresponds to the type of reservation consumption.
+         */
         consumeReservationType: pulumi.Input<string>;
+        /**
+         * The label key of a reservation resource.
+         */
         key?: pulumi.Input<string>;
+        /**
+         * The label values of the reservation resource.
+         */
         values?: pulumi.Input<pulumi.Input<string>[]>;
     }
     interface NodePoolNodeConfigSandboxConfig {
+        /**
+         * Type of the sandbox to use for the node (e.g. 'gvisor')
+         */
         sandboxType: pulumi.Input<string>;
     }
     interface NodePoolNodeConfigShieldedInstanceConfig {
+        /**
+         * Defines whether the instance has integrity monitoring enabled.
+         */
         enableIntegrityMonitoring?: pulumi.Input<boolean>;
+        /**
+         * Defines whether the instance has Secure Boot enabled.
+         */
         enableSecureBoot?: pulumi.Input<boolean>;
     }
     interface NodePoolNodeConfigSoleTenantConfig {
+        /**
+         * .
+         */
         nodeAffinities: pulumi.Input<pulumi.Input<inputs.container.NodePoolNodeConfigSoleTenantConfigNodeAffinity>[]>;
     }
     interface NodePoolNodeConfigSoleTenantConfigNodeAffinity {
+        /**
+         * .
+         */
         key: pulumi.Input<string>;
+        /**
+         * .
+         */
         operator: pulumi.Input<string>;
+        /**
+         * .
+         */
         values: pulumi.Input<pulumi.Input<string>[]>;
     }
     interface NodePoolNodeConfigTaint {
+        /**
+         * Effect for taint.
+         */
         effect: pulumi.Input<string>;
+        /**
+         * Key for taint.
+         */
         key: pulumi.Input<string>;
+        /**
+         * Value for taint.
+         */
         value: pulumi.Input<string>;
     }
     interface NodePoolNodeConfigWorkloadMetadataConfig {
+        /**
+         * Mode is the configuration for how to expose metadata to workloads running on the node.
+         */
         mode: pulumi.Input<string>;
     }
     interface NodePoolPlacementPolicy {
@@ -31509,13 +32972,25 @@ export declare namespace dataplex {
         encoding?: pulumi.Input<string>;
     }
     interface AssetDiscoveryStatus {
+        /**
+         * The duration of the last discovery run.
+         */
         lastRunDuration?: pulumi.Input<string>;
+        /**
+         * The start time of the last discovery run.
+         */
         lastRunTime?: pulumi.Input<string>;
+        /**
+         * Additional information about the current state.
+         */
         message?: pulumi.Input<string>;
         /**
          * Output only. Current state of the asset. Possible values: STATE_UNSPECIFIED, ACTIVE, CREATING, DELETING, ACTION_REQUIRED
          */
         state?: pulumi.Input<string>;
+        /**
+         * Data Stats of the asset reported by discovery.
+         */
         stats?: pulumi.Input<pulumi.Input<inputs.dataplex.AssetDiscoveryStatusStat>[]>;
         /**
          * Output only. The time when the asset was last updated.
@@ -31523,9 +32998,21 @@ export declare namespace dataplex {
         updateTime?: pulumi.Input<string>;
     }
     interface AssetDiscoveryStatusStat {
+        /**
+         * The count of data items within the referenced resource.
+         */
         dataItems?: pulumi.Input<number>;
+        /**
+         * The number of stored data bytes within the referenced resource.
+         */
         dataSize?: pulumi.Input<number>;
+        /**
+         * The count of fileset entities within the referenced resource.
+         */
         filesets?: pulumi.Input<number>;
+        /**
+         * The count of table entities within the referenced resource.
+         */
         tables?: pulumi.Input<number>;
     }
     interface AssetIamBindingCondition {
@@ -31555,6 +33042,9 @@ export declare namespace dataplex {
         type: pulumi.Input<string>;
     }
     interface AssetResourceStatus {
+        /**
+         * Additional information about the current state.
+         */
         message?: pulumi.Input<string>;
         /**
          * Output only. Current state of the asset. Possible values: STATE_UNSPECIFIED, ACTIVE, CREATING, DELETING, ACTION_REQUIRED
@@ -31566,6 +33056,9 @@ export declare namespace dataplex {
         updateTime?: pulumi.Input<string>;
     }
     interface AssetSecurityStatus {
+        /**
+         * Additional information about the current state.
+         */
         message?: pulumi.Input<string>;
         /**
          * Output only. Current state of the asset. Possible values: STATE_UNSPECIFIED, ACTIVE, CREATING, DELETING, ACTION_REQUIRED
@@ -31881,7 +33374,13 @@ export declare namespace dataplex {
         title: pulumi.Input<string>;
     }
     interface LakeAssetStatus {
+        /**
+         * Number of active assets.
+         */
         activeAssets?: pulumi.Input<number>;
+        /**
+         * Number of assets that are in process of updating the security policy on attached resources.
+         */
         securityPolicyApplyingAssets?: pulumi.Input<number>;
         /**
          * Output only. The time when the lake was last updated.
@@ -31905,7 +33404,13 @@ export declare namespace dataplex {
         service?: pulumi.Input<string>;
     }
     interface LakeMetastoreStatus {
+        /**
+         * The URI of the endpoint used to access the Metastore service.
+         */
         endpoint?: pulumi.Input<string>;
+        /**
+         * Additional information about the current status.
+         */
         message?: pulumi.Input<string>;
         /**
          * Output only. Current state of the lake. Possible values: STATE_UNSPECIFIED, ACTIVE, CREATING, DELETING, ACTION_REQUIRED
@@ -32212,7 +33717,13 @@ export declare namespace dataplex {
         type: pulumi.Input<string>;
     }
     interface ZoneAssetStatus {
+        /**
+         * Number of active assets.
+         */
         activeAssets?: pulumi.Input<number>;
+        /**
+         * Number of assets that are in process of updating the security policy on attached resources.
+         */
         securityPolicyApplyingAssets?: pulumi.Input<number>;
         /**
          * Output only. The time when the zone was last updated.
@@ -32424,6 +33935,9 @@ export declare namespace dataproc {
          * Structure defined below.
          */
         auxiliaryNodeGroups?: pulumi.Input<pulumi.Input<inputs.dataproc.ClusterClusterConfigAuxiliaryNodeGroup>[]>;
+        /**
+         * The name of the cloud storage bucket ultimately used to house the staging data for the cluster. If stagingBucket is specified, it will contain this value, otherwise it will be the auto generated name.
+         */
         bucket?: pulumi.Input<string>;
         /**
          * The Compute Engine accelerator (GPU) configuration for these instances. Can be specified multiple times.
@@ -32520,6 +34034,9 @@ export declare namespace dataproc {
         policyUri: pulumi.Input<string>;
     }
     interface ClusterClusterConfigAuxiliaryNodeGroup {
+        /**
+         * A node group ID. Generated if not specified. The ID must contain only letters (a-z, A-Z), numbers (0-9), underscores (_), and hyphens (-). Cannot begin or end with underscore or hyphen. Must consist of from 3 to 33 characters.
+         */
         nodeGroupId?: pulumi.Input<string>;
         /**
          * Node group configuration.
@@ -32554,6 +34071,9 @@ export declare namespace dataproc {
          * Disk Config
          */
         diskConfig?: pulumi.Input<inputs.dataproc.ClusterClusterConfigAuxiliaryNodeGroupNodeGroupNodeGroupConfigDiskConfig>;
+        /**
+         * List of auxiliary node group instance names which have been assigned to the cluster.
+         */
         instanceNames?: pulumi.Input<pulumi.Input<string>[]>;
         /**
          * The name of a Google Compute Engine machine type
@@ -32640,6 +34160,9 @@ export declare namespace dataproc {
          * on the cluster from external sources (aka Component Gateway). Defaults to false.
          */
         enableHttpPortAccess: pulumi.Input<boolean>;
+        /**
+         * The map of port descriptions to URLs. Will only be populated if enableHttpPortAccess is true.
+         */
         httpPorts?: pulumi.Input<{
             [key: string]: any;
         }>;
@@ -32779,6 +34302,9 @@ export declare namespace dataproc {
          * (no jobs running). After this TTL, the cluster will be deleted. Valid range: [10m, 14d].
          */
         idleDeleteTtl?: pulumi.Input<string>;
+        /**
+         * Time when the cluster became idle (most recent job finished) and became eligible for deletion due to idleness.
+         */
         idleStartTime?: pulumi.Input<string>;
     }
     interface ClusterClusterConfigMasterConfig {
@@ -32795,6 +34321,9 @@ export declare namespace dataproc {
          * for more information.
          */
         imageUri?: pulumi.Input<string>;
+        /**
+         * List of master instance names which have been assigned to the cluster.
+         */
         instanceNames?: pulumi.Input<pulumi.Input<string>[]>;
         /**
          * The name of a Google Compute Engine machine type
@@ -32867,6 +34396,9 @@ export declare namespace dataproc {
          * Instance flexibility Policy allowing a mixture of VM shapes and provisioning models.
          */
         instanceFlexibilityPolicy?: pulumi.Input<inputs.dataproc.ClusterClusterConfigPreemptibleWorkerConfigInstanceFlexibilityPolicy>;
+        /**
+         * List of preemptible instance names which have been assigned to the cluster.
+         */
         instanceNames?: pulumi.Input<pulumi.Input<string>[]>;
         /**
          * Specifies the number of preemptible nodes to create.
@@ -32907,6 +34439,9 @@ export declare namespace dataproc {
          * List of instance selection options that the group will use when creating new VMs.
          */
         instanceSelectionLists?: pulumi.Input<pulumi.Input<inputs.dataproc.ClusterClusterConfigPreemptibleWorkerConfigInstanceFlexibilityPolicyInstanceSelectionList>[]>;
+        /**
+         * A list of instance selection results in the group.
+         */
         instanceSelectionResults?: pulumi.Input<pulumi.Input<inputs.dataproc.ClusterClusterConfigPreemptibleWorkerConfigInstanceFlexibilityPolicyInstanceSelectionResult>[]>;
     }
     interface ClusterClusterConfigPreemptibleWorkerConfigInstanceFlexibilityPolicyInstanceSelectionList {
@@ -32928,6 +34463,9 @@ export declare namespace dataproc {
          * computed value (currently `n1-standard-4`).
          */
         machineType?: pulumi.Input<string>;
+        /**
+         * Number of VM provisioned with the machine_type.
+         */
         vmCount?: pulumi.Input<number>;
     }
     interface ClusterClusterConfigSecurityConfig {
@@ -33062,6 +34600,9 @@ export declare namespace dataproc {
          * for more information.
          */
         imageUri?: pulumi.Input<string>;
+        /**
+         * List of master/worker instance names which have been assigned to the cluster.
+         */
         instanceNames?: pulumi.Input<pulumi.Input<string>[]>;
         /**
          * The name of a Google Compute Engine machine type
@@ -33323,6 +34864,9 @@ export declare namespace dataproc {
          * HCFS URIs of jar files to add to the CLASSPATHs of the Spark driver and tasks.
          */
         jarFileUris?: pulumi.Input<pulumi.Input<string>[]>;
+        /**
+         * The runtime logging config of the job
+         */
         loggingConfig?: pulumi.Input<inputs.dataproc.JobHadoopConfigLoggingConfig>;
         /**
          * The name of the driver's main class. The jar file containing the class must be in the default CLASSPATH or specified in `jarFileUris`. Conflicts with `mainJarFileUri`
@@ -33342,6 +34886,9 @@ export declare namespace dataproc {
         }>;
     }
     interface JobHadoopConfigLoggingConfig {
+        /**
+         * Optional. The per-package log levels for the driver. This may include 'root' package name to configure rootLogger. Examples: 'com.google = FATAL', 'root = INFO', 'org.apache = DEBUG'.
+         */
         driverLogLevels: pulumi.Input<{
             [key: string]: pulumi.Input<string>;
         }>;
@@ -33399,6 +34946,9 @@ export declare namespace dataproc {
          * * `logging_config.driver_log_levels`- (Required) The per-package log levels for the driver. This may include 'root' package name to configure rootLogger. Examples: 'com.google = FATAL', 'root = INFO', 'org.apache = DEBUG'
          */
         jarFileUris?: pulumi.Input<pulumi.Input<string>[]>;
+        /**
+         * The runtime logging config of the job
+         */
         loggingConfig?: pulumi.Input<inputs.dataproc.JobPigConfigLoggingConfig>;
         /**
          * A mapping of property names to values, used to configure Pig. Properties that conflict with values set by the Cloud Dataproc API may be overwritten. Can include properties set in `/etc/hadoop/conf/*-site.xml`, `/etc/pig/conf/pig.properties`, and classes in user code.
@@ -33424,12 +34974,21 @@ export declare namespace dataproc {
         }>;
     }
     interface JobPigConfigLoggingConfig {
+        /**
+         * Optional. The per-package log levels for the driver. This may include 'root' package name to configure rootLogger. Examples: 'com.google = FATAL', 'root = INFO', 'org.apache = DEBUG'.
+         */
         driverLogLevels: pulumi.Input<{
             [key: string]: pulumi.Input<string>;
         }>;
     }
     interface JobPlacement {
+        /**
+         * The name of the cluster where the job will be submitted
+         */
         clusterName: pulumi.Input<string>;
+        /**
+         * Output-only. A cluster UUID generated by the Cloud Dataproc service when the job is submitted
+         */
         clusterUuid?: pulumi.Input<string>;
     }
     interface JobPrestoConfig {
@@ -33441,6 +35000,9 @@ export declare namespace dataproc {
          * Whether to continue executing queries if a query fails. Setting to true can be useful when executing independent parallel queries. Defaults to false.
          */
         continueOnFailure?: pulumi.Input<boolean>;
+        /**
+         * The runtime logging config of the job
+         */
         loggingConfig?: pulumi.Input<inputs.dataproc.JobPrestoConfigLoggingConfig>;
         /**
          * The format in which query output will be displayed. See the Presto documentation for supported output formats.
@@ -33466,6 +35028,9 @@ export declare namespace dataproc {
         queryLists?: pulumi.Input<pulumi.Input<string>[]>;
     }
     interface JobPrestoConfigLoggingConfig {
+        /**
+         * Optional. The per-package log levels for the driver. This may include 'root' package name to configure rootLogger. Examples: 'com.google = FATAL', 'root = INFO', 'org.apache = DEBUG'.
+         */
         driverLogLevels: pulumi.Input<{
             [key: string]: pulumi.Input<string>;
         }>;
@@ -33487,6 +35052,9 @@ export declare namespace dataproc {
          * HCFS URIs of jar files to add to the CLASSPATHs of the Python driver and tasks.
          */
         jarFileUris?: pulumi.Input<pulumi.Input<string>[]>;
+        /**
+         * The runtime logging config of the job
+         */
         loggingConfig?: pulumi.Input<inputs.dataproc.JobPysparkConfigLoggingConfig>;
         /**
          * The HCFS URI of the main Python file to use as the driver. Must be a .py file.
@@ -33506,15 +35074,27 @@ export declare namespace dataproc {
         pythonFileUris?: pulumi.Input<pulumi.Input<string>[]>;
     }
     interface JobPysparkConfigLoggingConfig {
+        /**
+         * Optional. The per-package log levels for the driver. This may include 'root' package name to configure rootLogger. Examples: 'com.google = FATAL', 'root = INFO', 'org.apache = DEBUG'.
+         */
         driverLogLevels: pulumi.Input<{
             [key: string]: pulumi.Input<string>;
         }>;
     }
     interface JobReference {
+        /**
+         * The job ID, which must be unique within the project. The job ID is generated by the server upon job submission or provided by the user as a means to perform retries without creating duplicate jobs
+         */
         jobId?: pulumi.Input<string>;
     }
     interface JobScheduling {
+        /**
+         * Maximum number of times per hour a driver may be restarted as a result of driver exiting with non-zero code before job is reported failed.
+         */
         maxFailuresPerHour: pulumi.Input<number>;
+        /**
+         * Maximum number of times in total a driver may be restarted as a result of driver exiting with non-zero code before job is reported failed.
+         */
         maxFailuresTotal: pulumi.Input<number>;
     }
     interface JobSparkConfig {
@@ -33534,6 +35114,9 @@ export declare namespace dataproc {
          * HCFS URIs of jar files to add to the CLASSPATHs of the Spark driver and tasks.
          */
         jarFileUris?: pulumi.Input<pulumi.Input<string>[]>;
+        /**
+         * The runtime logging config of the job
+         */
         loggingConfig?: pulumi.Input<inputs.dataproc.JobSparkConfigLoggingConfig>;
         /**
          * The class containing the main method of the driver. Must be in a
@@ -33555,6 +35138,9 @@ export declare namespace dataproc {
         }>;
     }
     interface JobSparkConfigLoggingConfig {
+        /**
+         * Optional. The per-package log levels for the driver. This may include 'root' package name to configure rootLogger. Examples: 'com.google = FATAL', 'root = INFO', 'org.apache = DEBUG'.
+         */
         driverLogLevels: pulumi.Input<{
             [key: string]: pulumi.Input<string>;
         }>;
@@ -33566,6 +35152,9 @@ export declare namespace dataproc {
          * * `logging_config.driver_log_levels`- (Required) The per-package log levels for the driver. This may include 'root' package name to configure rootLogger. Examples: 'com.google = FATAL', 'root = INFO', 'org.apache = DEBUG'
          */
         jarFileUris?: pulumi.Input<pulumi.Input<string>[]>;
+        /**
+         * The runtime logging config of the job
+         */
         loggingConfig?: pulumi.Input<inputs.dataproc.JobSparksqlConfigLoggingConfig>;
         /**
          * A mapping of property names to values, used to configure Spark SQL's SparkConf. Properties that conflict with values set by the Cloud Dataproc API may be overwritten.
@@ -33591,14 +35180,29 @@ export declare namespace dataproc {
         }>;
     }
     interface JobSparksqlConfigLoggingConfig {
+        /**
+         * Optional. The per-package log levels for the driver. This may include 'root' package name to configure rootLogger. Examples: 'com.google = FATAL', 'root = INFO', 'org.apache = DEBUG'.
+         */
         driverLogLevels: pulumi.Input<{
             [key: string]: pulumi.Input<string>;
         }>;
     }
     interface JobStatus {
+        /**
+         * Output-only. Optional job state details, such as an error description if the state is ERROR
+         */
         details?: pulumi.Input<string>;
+        /**
+         * Output-only. A state message specifying the overall job state
+         */
         state?: pulumi.Input<string>;
+        /**
+         * Output-only. The time when this state was entered
+         */
         stateStartTime?: pulumi.Input<string>;
+        /**
+         * Output-only. Additional state information, which includes status reported by the agent
+         */
         substate?: pulumi.Input<string>;
     }
     interface MetastoreFederationBackendMetastore {
@@ -33747,6 +35351,9 @@ export declare namespace dataproc {
          * Structure is documented below.
          */
         consumers: pulumi.Input<pulumi.Input<inputs.dataproc.MetastoreServiceNetworkConfigConsumer>[]>;
+        /**
+         * Enables custom routes to be imported and exported for the Dataproc Metastore service's peered VPC network.
+         */
         customRoutesEnabled?: pulumi.Input<boolean>;
     }
     interface MetastoreServiceNetworkConfigConsumer {
@@ -34549,7 +36156,13 @@ export declare namespace dataproc {
         numLocalSsds?: pulumi.Input<number>;
     }
     interface WorkflowTemplatePlacementManagedClusterConfigMasterConfigManagedGroupConfig {
+        /**
+         * Output only. The name of the Instance Group Manager for this group.
+         */
         instanceGroupManagerName?: pulumi.Input<string>;
+        /**
+         * Output only. The name of the Instance Template used for the Managed Instance Group.
+         */
         instanceTemplateName?: pulumi.Input<string>;
     }
     interface WorkflowTemplatePlacementManagedClusterConfigMetastoreConfig {
@@ -34625,7 +36238,13 @@ export declare namespace dataproc {
         numLocalSsds?: pulumi.Input<number>;
     }
     interface WorkflowTemplatePlacementManagedClusterConfigSecondaryWorkerConfigManagedGroupConfig {
+        /**
+         * Output only. The name of the Instance Group Manager for this group.
+         */
         instanceGroupManagerName?: pulumi.Input<string>;
+        /**
+         * Output only. The name of the Instance Template used for the Managed Instance Group.
+         */
         instanceTemplateName?: pulumi.Input<string>;
     }
     interface WorkflowTemplatePlacementManagedClusterConfigSecurityConfig {
@@ -34794,7 +36413,13 @@ export declare namespace dataproc {
         numLocalSsds?: pulumi.Input<number>;
     }
     interface WorkflowTemplatePlacementManagedClusterConfigWorkerConfigManagedGroupConfig {
+        /**
+         * Output only. The name of the Instance Group Manager for this group.
+         */
         instanceGroupManagerName?: pulumi.Input<string>;
+        /**
+         * Output only. The name of the Instance Template used for the Managed Instance Group.
+         */
         instanceTemplateName?: pulumi.Input<string>;
     }
 }
@@ -37909,23 +39534,71 @@ export declare namespace dns {
         title: pulumi.Input<string>;
     }
     interface GetManagedZonesManagedZone {
+        /**
+         * A textual description field.
+         */
         description?: string;
+        /**
+         * The fully qualified DNS name of this zone.
+         */
         dnsName?: string;
+        /**
+         * DNS managed zone identifier
+         */
         id?: string;
+        /**
+         * Unique identifier for the resource; defined by the server.
+         */
         managedZoneId?: number;
+        /**
+         * A unique name for the resource.
+         */
         name?: string;
+        /**
+         * The list of nameservers that will be authoritative for this domain. Use NS records to redirect from your DNS provider to these names, thus making Google Cloud DNS authoritative for this zone.
+         */
         nameServers?: string[];
+        /**
+         * The ID of the project for the Google Cloud.
+         */
         project?: string;
+        /**
+         * The zone's visibility: public zones are exposed to the Internet, while private zones are visible only to Virtual Private Cloud resources.
+         */
         visibility?: string;
     }
     interface GetManagedZonesManagedZoneArgs {
+        /**
+         * A textual description field.
+         */
         description?: pulumi.Input<string>;
+        /**
+         * The fully qualified DNS name of this zone.
+         */
         dnsName?: pulumi.Input<string>;
+        /**
+         * DNS managed zone identifier
+         */
         id?: pulumi.Input<string>;
+        /**
+         * Unique identifier for the resource; defined by the server.
+         */
         managedZoneId?: pulumi.Input<number>;
+        /**
+         * A unique name for the resource.
+         */
         name?: pulumi.Input<string>;
+        /**
+         * The list of nameservers that will be authoritative for this domain. Use NS records to redirect from your DNS provider to these names, thus making Google Cloud DNS authoritative for this zone.
+         */
         nameServers?: pulumi.Input<pulumi.Input<string>[]>;
+        /**
+         * The ID of the project for the Google Cloud.
+         */
         project?: pulumi.Input<string>;
+        /**
+         * The zone's visibility: public zones are exposed to the Internet, while private zones are visible only to Virtual Private Cloud resources.
+         */
         visibility?: pulumi.Input<string>;
     }
     interface ManagedZoneCloudLoggingConfig {
@@ -38992,7 +40665,7 @@ export declare namespace essentialcontacts {
 export declare namespace eventarc {
     interface TriggerDestination {
         /**
-         * [WARNING] Configuring a Cloud Function in Trigger is not supported as of today. The Cloud Function resource name. Format: projects/{project}/locations/{location}/functions/{function}
+         * The Cloud Function resource name. Only Cloud Functions V2 is supported. Format projects/{project}/locations/{location}/functions/{function} This is a read-only field. [WARNING] Creating Cloud Functions V2 triggers is only supported via the Cloud Functions product. An error will be returned if the user sets this value.
          */
         cloudFunction?: pulumi.Input<string>;
         /**
@@ -39218,7 +40891,8 @@ export declare namespace firebase {
         /**
          * Params whose values are only available at deployment time.
          * Unlike other params, these will not be set as environment variables on
-         * functions.
+         * functions. See a full list of system parameters at
+         * https://firebase.google.com/docs/extensions/publishers/parameters#system_parameters
          */
         systemParams?: pulumi.Input<{
             [key: string]: pulumi.Input<string>;
@@ -39591,6 +41265,9 @@ export declare namespace firebase {
 }
 export declare namespace firebaserules {
     interface RulesetMetadata {
+        /**
+         * Services that this ruleset has declarations for (e.g., "cloud.firestore"). There may be 0+ of these.
+         */
         services?: pulumi.Input<pulumi.Input<string>[]>;
     }
     interface RulesetSource {
@@ -39768,6 +41445,9 @@ export declare namespace folder {
          * or `deny` - (Optional) One or the other must be set.
          */
         allow?: pulumi.Input<inputs.folder.OrganizationPolicyListPolicyAllow>;
+        /**
+         * One or the other must be set.
+         */
         deny?: pulumi.Input<inputs.folder.OrganizationPolicyListPolicyDeny>;
         /**
          * If set to true, the values from the effective Policy of the parent resource
@@ -40512,6 +42192,9 @@ export declare namespace gkehub {
          * (Optional) Structure is documented below.
          */
         git?: pulumi.Input<inputs.gkehub.FeatureMembershipConfigmanagementConfigSyncGit>;
+        /**
+         * The Email of the Google Cloud Service Account (GSA) used for exporting Config Sync metrics to Cloud Monitoring. The GSA should have the Monitoring Metric Writer(roles/monitoring.metricWriter) IAM role. The Kubernetes ServiceAccount `default` in the namespace `config-management-monitoring` should be bound to the GSA.
+         */
         metricsGcpServiceAccountEmail?: pulumi.Input<string>;
         /**
          * (Optional) Supported from ACM versions 1.12.0 onwards. Structure is documented below.
@@ -40640,6 +42323,8 @@ export declare namespace gkehub {
     }
     interface FeatureMembershipMesh {
         /**
+         * **DEPRECATED** Whether to automatically manage Service Mesh control planes. Possible values: CONTROL_PLANE_MANAGEMENT_UNSPECIFIED, AUTOMATIC, MANUAL
+         *
          * @deprecated Deprecated in favor of the `management` field
          */
         controlPlane?: pulumi.Input<string>;
@@ -44819,12 +46504,33 @@ export declare namespace kms {
 }
 export declare namespace logging {
     interface BillingAccountBucketConfigCmekSettings {
+        /**
+         * The resource name for the configured Cloud KMS key.
+         * KMS key name format:
+         * "projects/[PROJECT_ID]/locations/[LOCATION]/keyRings/[KEYRING]/cryptoKeys/[KEY]"
+         * To enable CMEK for the bucket, set this field to a valid kmsKeyName for which the associated service account has the required cloudkms.cryptoKeyEncrypterDecrypter roles assigned for the key.
+         * The Cloud KMS key used by the bucket can be updated by changing the kmsKeyName to a new valid key name. Encryption operations that are in progress will be completed with the key that was in use when they started. Decryption operations will be completed using the key that was used at the time of encryption unless access to that key has been revoked.
+         * See [Enabling CMEK for Logging Buckets](https://cloud.google.com/logging/docs/routing/managed-encryption-storage) for more information.
+         */
         kmsKeyName: pulumi.Input<string>;
+        /**
+         * The CryptoKeyVersion resource name for the configured Cloud KMS key.
+         * KMS key name format:
+         * "projects/[PROJECT_ID]/locations/[LOCATION]/keyRings/[KEYRING]/cryptoKeys/[KEY]/cryptoKeyVersions/[VERSION]"
+         * For example:
+         * "projects/my-project/locations/us-central1/keyRings/my-ring/cryptoKeys/my-key/cryptoKeyVersions/1"
+         * This is a read-only field used to convey the specific configured CryptoKeyVersion of kmsKey that has been configured. It will be populated in cases where the CMEK settings are bound to a single key version.
+         */
         kmsKeyVersionName?: pulumi.Input<string>;
         /**
          * The resource name of the bucket. For example: "projects/my-project-id/locations/my-location/buckets/my-bucket-id"
          */
         name?: pulumi.Input<string>;
+        /**
+         * The service account associated with a project for which CMEK will apply.
+         * Before enabling CMEK for a logging bucket, you must first assign the cloudkms.cryptoKeyEncrypterDecrypter role to the service account associated with the project for which CMEK will apply. Use [v2.getCmekSettings](https://cloud.google.com/logging/docs/reference/v2/rest/v2/TopLevel/getCmekSettings#google.logging.v2.ConfigServiceV2.GetCmekSettings) to obtain the service account ID.
+         * See [Enabling CMEK for Logging Buckets](https://cloud.google.com/logging/docs/routing/managed-encryption-storage) for more information.
+         */
         serviceAccountId?: pulumi.Input<string>;
     }
     interface BillingAccountBucketConfigIndexConfig {
@@ -44867,12 +46573,33 @@ export declare namespace logging {
         name: pulumi.Input<string>;
     }
     interface FolderBucketConfigCmekSettings {
+        /**
+         * The resource name for the configured Cloud KMS key.
+         * KMS key name format:
+         * "projects/[PROJECT_ID]/locations/[LOCATION]/keyRings/[KEYRING]/cryptoKeys/[KEY]"
+         * To enable CMEK for the bucket, set this field to a valid kmsKeyName for which the associated service account has the required cloudkms.cryptoKeyEncrypterDecrypter roles assigned for the key.
+         * The Cloud KMS key used by the bucket can be updated by changing the kmsKeyName to a new valid key name. Encryption operations that are in progress will be completed with the key that was in use when they started. Decryption operations will be completed using the key that was used at the time of encryption unless access to that key has been revoked.
+         * See [Enabling CMEK for Logging Buckets](https://cloud.google.com/logging/docs/routing/managed-encryption-storage) for more information.
+         */
         kmsKeyName: pulumi.Input<string>;
+        /**
+         * The CryptoKeyVersion resource name for the configured Cloud KMS key.
+         * KMS key name format:
+         * "projects/[PROJECT_ID]/locations/[LOCATION]/keyRings/[KEYRING]/cryptoKeys/[KEY]/cryptoKeyVersions/[VERSION]"
+         * For example:
+         * "projects/my-project/locations/us-central1/keyRings/my-ring/cryptoKeys/my-key/cryptoKeyVersions/1"
+         * This is a read-only field used to convey the specific configured CryptoKeyVersion of kmsKey that has been configured. It will be populated in cases where the CMEK settings are bound to a single key version.
+         */
         kmsKeyVersionName?: pulumi.Input<string>;
         /**
          * The resource name of the bucket. For example: "folders/my-folder-id/locations/my-location/buckets/my-bucket-id"
          */
         name?: pulumi.Input<string>;
+        /**
+         * The service account associated with a project for which CMEK will apply.
+         * Before enabling CMEK for a logging bucket, you must first assign the cloudkms.cryptoKeyEncrypterDecrypter role to the service account associated with the project for which CMEK will apply. Use [v2.getCmekSettings](https://cloud.google.com/logging/docs/reference/v2/rest/v2/TopLevel/getCmekSettings#google.logging.v2.ConfigServiceV2.GetCmekSettings) to obtain the service account ID.
+         * See [Enabling CMEK for Logging Buckets](https://cloud.google.com/logging/docs/routing/managed-encryption-storage) for more information.
+         */
         serviceAccountId?: pulumi.Input<string>;
     }
     interface FolderBucketConfigIndexConfig {
@@ -45030,12 +46757,33 @@ export declare namespace logging {
         valueType?: pulumi.Input<string>;
     }
     interface OrganizationBucketConfigCmekSettings {
+        /**
+         * The resource name for the configured Cloud KMS key.
+         * KMS key name format:
+         * "projects/[PROJECT_ID]/locations/[LOCATION]/keyRings/[KEYRING]/cryptoKeys/[KEY]"
+         * To enable CMEK for the bucket, set this field to a valid kmsKeyName for which the associated service account has the required cloudkms.cryptoKeyEncrypterDecrypter roles assigned for the key.
+         * The Cloud KMS key used by the bucket can be updated by changing the kmsKeyName to a new valid key name. Encryption operations that are in progress will be completed with the key that was in use when they started. Decryption operations will be completed using the key that was used at the time of encryption unless access to that key has been revoked.
+         * See [Enabling CMEK for Logging Buckets](https://cloud.google.com/logging/docs/routing/managed-encryption-storage) for more information.
+         */
         kmsKeyName: pulumi.Input<string>;
+        /**
+         * The CryptoKeyVersion resource name for the configured Cloud KMS key.
+         * KMS key name format:
+         * "projects/[PROJECT_ID]/locations/[LOCATION]/keyRings/[KEYRING]/cryptoKeys/[KEY]/cryptoKeyVersions/[VERSION]"
+         * For example:
+         * "projects/my-project/locations/us-central1/keyRings/my-ring/cryptoKeys/my-key/cryptoKeyVersions/1"
+         * This is a read-only field used to convey the specific configured CryptoKeyVersion of kmsKey that has been configured. It will be populated in cases where the CMEK settings are bound to a single key version.
+         */
         kmsKeyVersionName?: pulumi.Input<string>;
         /**
          * The resource name of the bucket. For example: "organizations/my-organization-id/locations/my-location/buckets/my-bucket-id"
          */
         name?: pulumi.Input<string>;
+        /**
+         * The service account associated with a project for which CMEK will apply.
+         * Before enabling CMEK for a logging bucket, you must first assign the cloudkms.cryptoKeyEncrypterDecrypter role to the service account associated with the project for which CMEK will apply. Use [v2.getCmekSettings](https://cloud.google.com/logging/docs/reference/v2/rest/v2/TopLevel/getCmekSettings#google.logging.v2.ConfigServiceV2.GetCmekSettings) to obtain the service account ID.
+         * See [Enabling CMEK for Logging Buckets](https://cloud.google.com/logging/docs/routing/managed-encryption-storage) for more information.
+         */
         serviceAccountId?: pulumi.Input<string>;
     }
     interface OrganizationBucketConfigIndexConfig {
@@ -47029,6 +48777,9 @@ export declare namespace netapp {
 }
 export declare namespace networkconnectivity {
     interface HubRoutingVpc {
+        /**
+         * The URI of the VPC network.
+         */
         uri?: pulumi.Input<string>;
     }
     interface PolicyBasedRouteFilter {
@@ -49526,6 +51277,9 @@ export declare namespace organizations {
          * or `deny` - (Optional) One or the other must be set.
          */
         allow?: pulumi.Input<inputs.organizations.PolicyListPolicyAllow>;
+        /**
+         * One or the other must be set.
+         */
         deny?: pulumi.Input<inputs.organizations.PolicyListPolicyDeny>;
         /**
          * If set to true, the values from the effective Policy of the parent resource
@@ -51666,6 +53420,9 @@ export declare namespace projects {
          * or `deny` - (Optional) One or the other must be set.
          */
         allow?: pulumi.Input<inputs.projects.OrganizationPolicyListPolicyAllow>;
+        /**
+         * One or the other must be set.
+         */
         deny?: pulumi.Input<inputs.projects.OrganizationPolicyListPolicyDeny>;
         /**
          * If set to true, the values from the effective Policy of the parent resource
@@ -51768,16 +53525,23 @@ export declare namespace pubsub {
     }
     interface SubscriptionBigqueryConfig {
         /**
-         * When true and useTopicSchema is true, any fields that are a part of the topic schema that are not part of the BigQuery table schema are dropped when writing to BigQuery.
-         * Otherwise, the schemas must be kept in sync and any messages with extra fields are not written and remain in the subscription's backlog.
+         * When true and useTopicSchema or useTableSchema is true, any fields that are a part of the topic schema or message schema that
+         * are not part of the BigQuery table schema are dropped when writing to BigQuery. Otherwise, the schemas must be kept in sync
+         * and any messages with extra fields are not written and remain in the subscription's backlog.
          */
         dropUnknownFields?: pulumi.Input<boolean>;
         /**
          * The name of the table to which to write data, of the form {projectId}:{datasetId}.{tableId}
          */
         table: pulumi.Input<string>;
+        /**
+         * When true, use the BigQuery table's schema as the columns to write to in BigQuery. Messages
+         * must be published in JSON format. Only one of useTopicSchema and useTableSchema can be set.
+         */
+        useTableSchema?: pulumi.Input<boolean>;
         /**
          * When true, use the topic's schema as the columns to write to in BigQuery, if it exists.
+         * Only one of useTopicSchema and useTableSchema can be set.
          */
         useTopicSchema?: pulumi.Input<boolean>;
         /**
@@ -52837,6 +54601,372 @@ export declare namespace securitycenter {
         title: pulumi.Input<string>;
     }
 }
+export declare namespace securityposture {
+    interface PosturePolicySet {
+        /**
+         * Description of the policy set.
+         */
+        description?: pulumi.Input<string>;
+        /**
+         * List of security policy
+         * Structure is documented below.
+         */
+        policies?: pulumi.Input<pulumi.Input<inputs.securityposture.PosturePolicySetPolicy>[]>;
+        /**
+         * ID of the policy set.
+         */
+        policySetId: pulumi.Input<string>;
+    }
+    interface PosturePolicySetPolicy {
+        /**
+         * Mapping for policy to security standards and controls.
+         * Structure is documented below.
+         */
+        complianceStandards?: pulumi.Input<pulumi.Input<inputs.securityposture.PosturePolicySetPolicyComplianceStandard>[]>;
+        /**
+         * Policy constraint definition.It can have the definition of one of following constraints: orgPolicyConstraint orgPolicyConstraintCustom securityHealthAnalyticsModule securityHealthAnalyticsCustomModule
+         * Structure is documented below.
+         */
+        constraint: pulumi.Input<inputs.securityposture.PosturePolicySetPolicyConstraint>;
+        /**
+         * Description of the policy.
+         */
+        description?: pulumi.Input<string>;
+        /**
+         * ID of the policy.
+         */
+        policyId: pulumi.Input<string>;
+    }
+    interface PosturePolicySetPolicyComplianceStandard {
+        /**
+         * Mapping of security controls for the policy.
+         */
+        control?: pulumi.Input<string>;
+        /**
+         * Mapping of compliance standards for the policy.
+         */
+        standard?: pulumi.Input<string>;
+    }
+    interface PosturePolicySetPolicyConstraint {
+        /**
+         * Organization policy canned constraint definition.
+         * Structure is documented below.
+         */
+        orgPolicyConstraint?: pulumi.Input<inputs.securityposture.PosturePolicySetPolicyConstraintOrgPolicyConstraint>;
+        /**
+         * Organization policy custom constraint policy definition.
+         * Structure is documented below.
+         */
+        orgPolicyConstraintCustom?: pulumi.Input<inputs.securityposture.PosturePolicySetPolicyConstraintOrgPolicyConstraintCustom>;
+        /**
+         * Definition of Security Health Analytics Custom Module.
+         * Structure is documented below.
+         */
+        securityHealthAnalyticsCustomModule?: pulumi.Input<inputs.securityposture.PosturePolicySetPolicyConstraintSecurityHealthAnalyticsCustomModule>;
+        /**
+         * Security Health Analytics built-in detector definition.
+         * Structure is documented below.
+         */
+        securityHealthAnalyticsModule?: pulumi.Input<inputs.securityposture.PosturePolicySetPolicyConstraintSecurityHealthAnalyticsModule>;
+    }
+    interface PosturePolicySetPolicyConstraintOrgPolicyConstraint {
+        /**
+         * Organization policy canned constraint Id
+         */
+        cannedConstraintId: pulumi.Input<string>;
+        /**
+         * Definition of policy rules
+         * Structure is documented below.
+         */
+        policyRules: pulumi.Input<pulumi.Input<inputs.securityposture.PosturePolicySetPolicyConstraintOrgPolicyConstraintPolicyRule>[]>;
+    }
+    interface PosturePolicySetPolicyConstraintOrgPolicyConstraintCustom {
+        /**
+         * Organization policy custom constraint definition.
+         * Structure is documented below.
+         */
+        customConstraint?: pulumi.Input<inputs.securityposture.PosturePolicySetPolicyConstraintOrgPolicyConstraintCustomCustomConstraint>;
+        /**
+         * Definition of policy rules
+         * Structure is documented below.
+         */
+        policyRules: pulumi.Input<pulumi.Input<inputs.securityposture.PosturePolicySetPolicyConstraintOrgPolicyConstraintCustomPolicyRule>[]>;
+    }
+    interface PosturePolicySetPolicyConstraintOrgPolicyConstraintCustomCustomConstraint {
+        /**
+         * The action to take if the condition is met.
+         * Possible values are: `ALLOW`, `DENY`.
+         */
+        actionType: pulumi.Input<string>;
+        /**
+         * A CEL condition that refers to a supported service resource, for example `resource.management.autoUpgrade == false`. For details about CEL usage, see [Common Expression Language](https://cloud.google.com/resource-manager/docs/organization-policy/creating-managing-custom-constraints#common_expression_language).
+         */
+        condition: pulumi.Input<string>;
+        /**
+         * A human-friendly description of the constraint to display as an error message when the policy is violated.
+         */
+        description?: pulumi.Input<string>;
+        /**
+         * A human-friendly name for the constraint.
+         */
+        displayName?: pulumi.Input<string>;
+        /**
+         * A list of RESTful methods for which to enforce the constraint. Can be `CREATE`, `UPDATE`, or both. Not all Google Cloud services support both methods. To see supported methods for each service, find the service in [Supported services](https://cloud.google.com/resource-manager/docs/organization-policy/custom-constraint-supported-services).
+         */
+        methodTypes: pulumi.Input<pulumi.Input<string>[]>;
+        /**
+         * Immutable. The name of the custom constraint. This is unique within the organization.
+         */
+        name: pulumi.Input<string>;
+        /**
+         * Immutable. The fully qualified name of the Google Cloud REST resource containing the object and field you want to restrict. For example, `container.googleapis.com/NodePool`.
+         */
+        resourceTypes: pulumi.Input<pulumi.Input<string>[]>;
+    }
+    interface PosturePolicySetPolicyConstraintOrgPolicyConstraintCustomPolicyRule {
+        /**
+         * Setting this to true means that all values are allowed. This field can be set only in policies for list constraints.
+         */
+        allowAll?: pulumi.Input<boolean>;
+        /**
+         * Setting this to true means that all values are denied. This field can be set only in policies for list constraints.
+         */
+        denyAll?: pulumi.Input<boolean>;
+        /**
+         * If `true`, then the policy is enforced. If `false`, then any configuration is acceptable.
+         * This field can be set only in policies for boolean constraints.
+         */
+        enforce?: pulumi.Input<boolean>;
+        /**
+         * Represents a textual expression in the Common Expression Language (CEL) syntax. CEL is a C-like expression language.
+         * This page details the objects and attributes that are used to the build the CEL expressions for
+         * custom access levels - https://cloud.google.com/access-context-manager/docs/custom-access-level-spec.
+         * Structure is documented below.
+         */
+        expr?: pulumi.Input<inputs.securityposture.PosturePolicySetPolicyConstraintOrgPolicyConstraintCustomPolicyRuleExpr>;
+        /**
+         * List of values to be used for this policy rule. This field can be set only in policies for list constraints.
+         * Structure is documented below.
+         */
+        values?: pulumi.Input<inputs.securityposture.PosturePolicySetPolicyConstraintOrgPolicyConstraintCustomPolicyRuleValues>;
+    }
+    interface PosturePolicySetPolicyConstraintOrgPolicyConstraintCustomPolicyRuleExpr {
+        /**
+         * Description of the expression
+         */
+        description?: pulumi.Input<string>;
+        /**
+         * Textual representation of an expression in Common Expression Language syntax.
+         */
+        expression: pulumi.Input<string>;
+        /**
+         * String indicating the location of the expression for error reporting, e.g. a file name and a position in the file
+         */
+        location?: pulumi.Input<string>;
+        /**
+         * Title for the expression, i.e. a short string describing its purpose.
+         */
+        title?: pulumi.Input<string>;
+    }
+    interface PosturePolicySetPolicyConstraintOrgPolicyConstraintCustomPolicyRuleValues {
+        /**
+         * List of values allowed at this resource.
+         */
+        allowedValues?: pulumi.Input<pulumi.Input<string>[]>;
+        /**
+         * List of values denied at this resource.
+         */
+        deniedValues?: pulumi.Input<pulumi.Input<string>[]>;
+    }
+    interface PosturePolicySetPolicyConstraintOrgPolicyConstraintPolicyRule {
+        /**
+         * Setting this to true means that all values are allowed. This field can be set only in policies for list constraints.
+         */
+        allowAll?: pulumi.Input<boolean>;
+        /**
+         * Setting this to true means that all values are denied. This field can be set only in policies for list constraints.
+         */
+        denyAll?: pulumi.Input<boolean>;
+        /**
+         * If `true`, then the policy is enforced. If `false`, then any configuration is acceptable.
+         * This field can be set only in policies for boolean constraints.
+         */
+        enforce?: pulumi.Input<boolean>;
+        /**
+         * Represents a textual expression in the Common Expression Language (CEL) syntax. CEL is a C-like expression language.
+         * This page details the objects and attributes that are used to the build the CEL expressions for
+         * custom access levels - https://cloud.google.com/access-context-manager/docs/custom-access-level-spec.
+         * Structure is documented below.
+         */
+        expr?: pulumi.Input<inputs.securityposture.PosturePolicySetPolicyConstraintOrgPolicyConstraintPolicyRuleExpr>;
+        /**
+         * List of values to be used for this policy rule. This field can be set only in policies for list constraints.
+         * Structure is documented below.
+         */
+        values?: pulumi.Input<inputs.securityposture.PosturePolicySetPolicyConstraintOrgPolicyConstraintPolicyRuleValues>;
+    }
+    interface PosturePolicySetPolicyConstraintOrgPolicyConstraintPolicyRuleExpr {
+        /**
+         * Description of the expression
+         */
+        description?: pulumi.Input<string>;
+        /**
+         * Textual representation of an expression in Common Expression Language syntax.
+         */
+        expression: pulumi.Input<string>;
+        /**
+         * String indicating the location of the expression for error reporting, e.g. a file name and a position in the file
+         */
+        location?: pulumi.Input<string>;
+        /**
+         * Title for the expression, i.e. a short string describing its purpose.
+         */
+        title?: pulumi.Input<string>;
+    }
+    interface PosturePolicySetPolicyConstraintOrgPolicyConstraintPolicyRuleValues {
+        /**
+         * List of values allowed at this resource.
+         */
+        allowedValues?: pulumi.Input<pulumi.Input<string>[]>;
+        /**
+         * List of values denied at this resource.
+         */
+        deniedValues?: pulumi.Input<pulumi.Input<string>[]>;
+    }
+    interface PosturePolicySetPolicyConstraintSecurityHealthAnalyticsCustomModule {
+        /**
+         * Custom module details.
+         * Structure is documented below.
+         */
+        config: pulumi.Input<inputs.securityposture.PosturePolicySetPolicyConstraintSecurityHealthAnalyticsCustomModuleConfig>;
+        /**
+         * The display name of the Security Health Analytics custom module. This
+         * display name becomes the finding category for all findings that are
+         * returned by this custom module.
+         */
+        displayName?: pulumi.Input<string>;
+        /**
+         * (Output)
+         * A server generated id of custom module.
+         */
+        id?: pulumi.Input<string>;
+        /**
+         * The state of enablement for the module at its level of the resource hierarchy.
+         * Possible values are: `ENABLEMENT_STATE_UNSPECIFIED`, `ENABLED`, `DISABLED`.
+         */
+        moduleEnablementState?: pulumi.Input<string>;
+    }
+    interface PosturePolicySetPolicyConstraintSecurityHealthAnalyticsCustomModuleConfig {
+        /**
+         * Custom output properties. A set of optional name-value pairs that define custom source properties to
+         * return with each finding that is generated by the custom module. The custom
+         * source properties that are defined here are included in the finding JSON
+         * under `sourceProperties`.
+         * Structure is documented below.
+         */
+        customOutput?: pulumi.Input<inputs.securityposture.PosturePolicySetPolicyConstraintSecurityHealthAnalyticsCustomModuleConfigCustomOutput>;
+        /**
+         * Text that describes the vulnerability or misconfiguration that the custom
+         * module detects.
+         */
+        description?: pulumi.Input<string>;
+        /**
+         * The CEL expression to evaluate to produce findings.When the expression
+         * evaluates to true against a resource, a finding is generated.
+         * Structure is documented below.
+         */
+        predicate: pulumi.Input<inputs.securityposture.PosturePolicySetPolicyConstraintSecurityHealthAnalyticsCustomModuleConfigPredicate>;
+        /**
+         * An explanation of the recommended steps that security teams can take to
+         * resolve the detected issue
+         */
+        recommendation?: pulumi.Input<string>;
+        /**
+         * The resource types that the custom module operates on. Each custom module
+         * can specify up to 5 resource types.
+         * Structure is documented below.
+         */
+        resourceSelector: pulumi.Input<inputs.securityposture.PosturePolicySetPolicyConstraintSecurityHealthAnalyticsCustomModuleConfigResourceSelector>;
+        /**
+         * The severity to assign to findings generated by the module.
+         * Possible values are: `SEVERITY_UNSPECIFIED`, `CRITICAL`, `HIGH`, `MEDIUM`, `LOW`.
+         */
+        severity: pulumi.Input<string>;
+    }
+    interface PosturePolicySetPolicyConstraintSecurityHealthAnalyticsCustomModuleConfigCustomOutput {
+        /**
+         * A list of custom output properties to add to the finding.
+         * Structure is documented below.
+         */
+        properties?: pulumi.Input<pulumi.Input<inputs.securityposture.PosturePolicySetPolicyConstraintSecurityHealthAnalyticsCustomModuleConfigCustomOutputProperty>[]>;
+    }
+    interface PosturePolicySetPolicyConstraintSecurityHealthAnalyticsCustomModuleConfigCustomOutputProperty {
+        /**
+         * Name of the property for the custom output.
+         */
+        name: pulumi.Input<string>;
+        /**
+         * The CEL expression for the custom output. A resource property can be
+         * specified to return the value of the property or a text string enclosed
+         * in quotation marks.
+         * Structure is documented below.
+         */
+        valueExpression?: pulumi.Input<inputs.securityposture.PosturePolicySetPolicyConstraintSecurityHealthAnalyticsCustomModuleConfigCustomOutputPropertyValueExpression>;
+    }
+    interface PosturePolicySetPolicyConstraintSecurityHealthAnalyticsCustomModuleConfigCustomOutputPropertyValueExpression {
+        /**
+         * Description of the expression
+         */
+        description?: pulumi.Input<string>;
+        /**
+         * Textual representation of an expression in Common Expression Language syntax.
+         */
+        expression: pulumi.Input<string>;
+        /**
+         * String indicating the location of the expression for error reporting, e.g. a file name and a position in the file
+         */
+        location?: pulumi.Input<string>;
+        /**
+         * Title for the expression, i.e. a short string describing its purpose.
+         */
+        title?: pulumi.Input<string>;
+    }
+    interface PosturePolicySetPolicyConstraintSecurityHealthAnalyticsCustomModuleConfigPredicate {
+        /**
+         * Description of the expression
+         */
+        description?: pulumi.Input<string>;
+        /**
+         * Textual representation of an expression in Common Expression Language syntax.
+         */
+        expression: pulumi.Input<string>;
+        /**
+         * String indicating the location of the expression for error reporting, e.g. a file name and a position in the file
+         */
+        location?: pulumi.Input<string>;
+        /**
+         * Title for the expression, i.e. a short string describing its purpose.
+         */
+        title?: pulumi.Input<string>;
+    }
+    interface PosturePolicySetPolicyConstraintSecurityHealthAnalyticsCustomModuleConfigResourceSelector {
+        /**
+         * The resource types to run the detector on.
+         */
+        resourceTypes: pulumi.Input<pulumi.Input<string>[]>;
+    }
+    interface PosturePolicySetPolicyConstraintSecurityHealthAnalyticsModule {
+        /**
+         * The state of enablement for the module at its level of the resource hierarchy.
+         * Possible values are: `ENABLEMENT_STATE_UNSPECIFIED`, `ENABLED`, `DISABLED`.
+         */
+        moduleEnablementState?: pulumi.Input<string>;
+        /**
+         * The name of the module eg: BIGQUERY_TABLE_CMEK_DISABLED.
+         */
+        moduleName: pulumi.Input<string>;
+    }
+}
 export declare namespace serviceaccount {
     interface IAMBindingCondition {
         /**
@@ -53116,14 +55246,26 @@ export declare namespace sql {
         project?: pulumi.Input<string>;
     }
     interface DatabaseInstanceServerCaCert {
+        /**
+         * The CA Certificate used to connect to the SQL Instance via SSL.
+         */
         cert?: pulumi.Input<string>;
+        /**
+         * The CN valid for the CA Cert.
+         */
         commonName?: pulumi.Input<string>;
+        /**
+         * Creation time of the CA Cert.
+         */
         createTime?: pulumi.Input<string>;
         /**
          * The [RFC 3339](https://tools.ietf.org/html/rfc3339)
          * formatted date time string indicating when this whitelist expires.
          */
         expirationTime?: pulumi.Input<string>;
+        /**
+         * SHA Fingerprint of the CA Cert.
+         */
         sha1Fingerprint?: pulumi.Input<string>;
     }
     interface DatabaseInstanceSettings {
@@ -53152,8 +55294,14 @@ export declare namespace sql {
          * Specifies if connections must use Cloud SQL connectors.
          */
         connectorEnforcement?: pulumi.Input<string>;
+        /**
+         * Data cache configurations.
+         */
         dataCacheConfig?: pulumi.Input<inputs.sql.DatabaseInstanceSettingsDataCacheConfig>;
         databaseFlags?: pulumi.Input<pulumi.Input<inputs.sql.DatabaseInstanceSettingsDatabaseFlag>[]>;
+        /**
+         * Configuration to protect against accidental instance deletion.
+         */
         deletionProtectionEnabled?: pulumi.Input<boolean>;
         denyMaintenancePeriod?: pulumi.Input<inputs.sql.DatabaseInstanceSettingsDenyMaintenancePeriod>;
         /**
@@ -53176,9 +55324,15 @@ export declare namespace sql {
          * The edition of the instance, can be `ENTERPRISE` or `ENTERPRISE_PLUS`.
          */
         edition?: pulumi.Input<string>;
+        /**
+         * Configuration of Query Insights.
+         */
         insightsConfig?: pulumi.Input<inputs.sql.DatabaseInstanceSettingsInsightsConfig>;
         ipConfiguration?: pulumi.Input<inputs.sql.DatabaseInstanceSettingsIpConfiguration>;
         locationPreference?: pulumi.Input<inputs.sql.DatabaseInstanceSettingsLocationPreference>;
+        /**
+         * Declares a one-hour maintenance window when an Instance can automatically restart to apply updates. The maintenance window is specified in UTC time.
+         */
         maintenanceWindow?: pulumi.Input<inputs.sql.DatabaseInstanceSettingsMaintenanceWindow>;
         passwordValidationPolicy?: pulumi.Input<inputs.sql.DatabaseInstanceSettingsPasswordValidationPolicy>;
         /**
@@ -53202,6 +55356,9 @@ export declare namespace sql {
         userLabels?: pulumi.Input<{
             [key: string]: pulumi.Input<string>;
         }>;
+        /**
+         * Used to make sure changes to the settings block are atomic.
+         */
         version?: pulumi.Input<number>;
     }
     interface DatabaseInstanceSettingsActiveDirectoryConfig {
@@ -53338,6 +55495,9 @@ export declare namespace sql {
          * This setting can be updated, but it cannot be removed after it is set.
          */
         privateNetwork?: pulumi.Input<string>;
+        /**
+         * PSC settings for a Cloud SQL instance.
+         */
         pscConfigs?: pulumi.Input<pulumi.Input<inputs.sql.DatabaseInstanceSettingsIpConfigurationPscConfig>[]>;
         /**
          * Whether SSL connections over IP are enforced or not. To change this field, also set the corresponding value in `sslMode`.
@@ -53488,7 +55648,13 @@ export declare namespace sql {
         passwordExpirationTime?: pulumi.Input<string>;
     }
     interface UserSqlServerUserDetail {
+        /**
+         * If the user has been disabled.
+         */
         disabled?: pulumi.Input<boolean>;
+        /**
+         * The server roles for this user in the database.
+         */
         serverRoles?: pulumi.Input<pulumi.Input<string>[]>;
     }
 }
@@ -54546,6 +56712,47 @@ export declare namespace vertex {
          */
         cron?: pulumi.Input<string>;
     }
+    interface AiFeatureOnlineStoreFeatureviewVectorSearchConfig {
+        /**
+         * Configuration options for using brute force search, which simply implements the standard linear search in the database for each query. It is primarily meant for benchmarking and to generate the ground truth for approximate search.
+         */
+        bruteForceConfig?: pulumi.Input<inputs.vertex.AiFeatureOnlineStoreFeatureviewVectorSearchConfigBruteForceConfig>;
+        /**
+         * Column of crowding. This column contains crowding attribute which is a constraint on a neighbor list produced by nearest neighbor search requiring that no more than some value k' of the k neighbors returned have the same value of crowdingAttribute.
+         */
+        crowdingColumn?: pulumi.Input<string>;
+        /**
+         * The distance measure used in nearest neighbor search.
+         * For details on allowed values, see the [API documentation](https://cloud.google.com/vertex-ai/docs/reference/rest/v1beta1/projects.locations.featureOnlineStores.featureViews#DistanceMeasureType).
+         * Possible values are: `SQUARED_L2_DISTANCE`, `COSINE_DISTANCE`, `DOT_PRODUCT_DISTANCE`.
+         */
+        distanceMeasureType?: pulumi.Input<string>;
+        /**
+         * Column of embedding. This column contains the source data to create index for vector search.
+         */
+        embeddingColumn: pulumi.Input<string>;
+        /**
+         * The number of dimensions of the input embedding.
+         */
+        embeddingDimension?: pulumi.Input<number>;
+        /**
+         * Columns of features that are used to filter vector search results.
+         */
+        filterColumns?: pulumi.Input<pulumi.Input<string>[]>;
+        /**
+         * Configuration options for the tree-AH algorithm (Shallow tree + Asymmetric Hashing). Please refer to this paper for more details: https://arxiv.org/abs/1908.10396
+         * Structure is documented below.
+         */
+        treeAhConfig?: pulumi.Input<inputs.vertex.AiFeatureOnlineStoreFeatureviewVectorSearchConfigTreeAhConfig>;
+    }
+    interface AiFeatureOnlineStoreFeatureviewVectorSearchConfigBruteForceConfig {
+    }
+    interface AiFeatureOnlineStoreFeatureviewVectorSearchConfigTreeAhConfig {
+        /**
+         * Number of embeddings on each leaf node. The default value is 1000 if not set.
+         */
+        leafNodeEmbeddingCount?: pulumi.Input<string>;
+    }
     interface AiFeatureOnlineStoreOptimized {
     }
     interface AiFeatureStoreEncryptionSpec {
@@ -54620,6 +56827,11 @@ export declare namespace vertex {
          */
         disabled?: pulumi.Input<boolean>;
         /**
+         * Configuration of the snapshot analysis based monitoring pipeline running interval. The value is rolled up to full day.
+         * A duration in seconds with up to nine fractional digits, terminated by 's'. Example: "3.5s".
+         *
+         * > **Warning:** `monitoringInterval` is deprecated and will be removed in a future release.
+         *
          * @deprecated `monitoring_interval` is deprecated and will be removed in a future release.
          */
         monitoringInterval?: pulumi.Input<string>;
@@ -55495,6 +57707,16 @@ export declare namespace workstations {
          */
         sourceSnapshot?: pulumi.Input<string>;
     }
+    interface WorkstationConfigReadinessCheck {
+        /**
+         * Path to which the request should be sent.
+         */
+        path: pulumi.Input<string>;
+        /**
+         * Port to which the request should be sent.
+         */
+        port: pulumi.Input<number>;
+    }
     interface WorkstationIamBindingCondition {
         description?: pulumi.Input<string>;
         expression: pulumi.Input<string>;