@pulumi/gcp 8.20.0 → 8.20.1

package/types/output.d.ts

@@ -2291,6 +2291,283 @@ export declare namespace alloydb {
          */
         upgradeTime?: string;
     }
+    interface GetClusterAutomatedBackupPolicy {
+        /**
+         * The length of the time window during which a backup can be taken. If a backup does not succeed within this time window, it will be canceled and considered failed.
+         *
+         * The backup window must be at least 5 minutes long. There is no upper bound on the window. If not set, it will default to 1 hour.
+         *
+         * A duration in seconds with up to nine fractional digits, terminated by 's'. Example: "3.5s".
+         */
+        backupWindow: string;
+        /**
+         * Whether automated backups are enabled.
+         */
+        enabled: boolean;
+        /**
+         * EncryptionConfig describes the encryption config of a cluster or a backup that is encrypted with a CMEK (customer-managed encryption key).
+         */
+        encryptionConfigs: outputs.alloydb.GetClusterAutomatedBackupPolicyEncryptionConfig[];
+        /**
+         * Labels to apply to backups created using this configuration.
+         */
+        labels: {
+            [key: string]: string;
+        };
+        /**
+         * (optional)
+         * The canonical id of the location.If it is not provided, the provider project is used. For example: us-east1.
+         */
+        location: string;
+        /**
+         * Quantity-based Backup retention policy to retain recent backups. Conflicts with 'time_based_retention', both can't be set together.
+         */
+        quantityBasedRetentions: outputs.alloydb.GetClusterAutomatedBackupPolicyQuantityBasedRetention[];
+        /**
+         * Time-based Backup retention policy. Conflicts with 'quantity_based_retention', both can't be set together.
+         */
+        timeBasedRetentions: outputs.alloydb.GetClusterAutomatedBackupPolicyTimeBasedRetention[];
+        /**
+         * Weekly schedule for the Backup.
+         */
+        weeklySchedules: outputs.alloydb.GetClusterAutomatedBackupPolicyWeeklySchedule[];
+    }
+    interface GetClusterAutomatedBackupPolicyEncryptionConfig {
+        /**
+         * The fully-qualified resource name of the KMS key. Each Cloud KMS key is regionalized and has the following format: projects/[PROJECT]/locations/[REGION]/keyRings/[RING]/cryptoKeys/[KEY_NAME].
+         */
+        kmsKeyName: string;
+    }
+    interface GetClusterAutomatedBackupPolicyQuantityBasedRetention {
+        /**
+         * The number of backups to retain.
+         */
+        count: number;
+    }
+    interface GetClusterAutomatedBackupPolicyTimeBasedRetention {
+        /**
+         * The retention period.
+         * A duration in seconds with up to nine fractional digits, terminated by 's'. Example: "3.5s".
+         */
+        retentionPeriod: string;
+    }
+    interface GetClusterAutomatedBackupPolicyWeeklySchedule {
+        /**
+         * The days of the week to perform a backup. At least one day of the week must be provided. Possible values: ["MONDAY", "TUESDAY", "WEDNESDAY", "THURSDAY", "FRIDAY", "SATURDAY", "SUNDAY"]
+         */
+        daysOfWeeks: string[];
+        /**
+         * The times during the day to start a backup. At least one start time must be provided. The start times are assumed to be in UTC and to be an exact hour (e.g., 04:00:00).
+         */
+        startTimes: outputs.alloydb.GetClusterAutomatedBackupPolicyWeeklyScheduleStartTime[];
+    }
+    interface GetClusterAutomatedBackupPolicyWeeklyScheduleStartTime {
+        /**
+         * Hours of day in 24 hour format. Should be from 0 to 23. An API may choose to allow the value "24:00:00" for scenarios like business closing time.
+         */
+        hours: number;
+        /**
+         * Minutes of hour of day. Currently, only the value 0 is supported.
+         */
+        minutes: number;
+        /**
+         * Fractions of seconds in nanoseconds. Currently, only the value 0 is supported.
+         */
+        nanos: number;
+        /**
+         * Seconds of minutes of the time. Currently, only the value 0 is supported.
+         */
+        seconds: number;
+    }
+    interface GetClusterBackupSource {
+        /**
+         * The name of the backup resource.
+         */
+        backupName: string;
+    }
+    interface GetClusterContinuousBackupConfig {
+        /**
+         * Whether continuous backup recovery is enabled. If not set, defaults to true.
+         */
+        enabled: boolean;
+        /**
+         * EncryptionConfig describes the encryption config of a cluster or a backup that is encrypted with a CMEK (customer-managed encryption key).
+         */
+        encryptionConfigs: outputs.alloydb.GetClusterContinuousBackupConfigEncryptionConfig[];
+        /**
+         * The numbers of days that are eligible to restore from using PITR. To support the entire recovery window, backups and logs are retained for one day more than the recovery window.
+         *
+         * If not set, defaults to 14 days.
+         */
+        recoveryWindowDays: number;
+    }
+    interface GetClusterContinuousBackupConfigEncryptionConfig {
+        /**
+         * The fully-qualified resource name of the KMS key. Each Cloud KMS key is regionalized and has the following format: projects/[PROJECT]/locations/[REGION]/keyRings/[RING]/cryptoKeys/[KEY_NAME].
+         */
+        kmsKeyName: string;
+    }
+    interface GetClusterContinuousBackupInfo {
+        /**
+         * The earliest restorable time that can be restored to. Output only field.
+         */
+        earliestRestorableTime: string;
+        /**
+         * When ContinuousBackup was most recently enabled. Set to null if ContinuousBackup is not enabled.
+         */
+        enabledTime: string;
+        /**
+         * Output only. The encryption information for the WALs and backups required for ContinuousBackup.
+         */
+        encryptionInfos: outputs.alloydb.GetClusterContinuousBackupInfoEncryptionInfo[];
+        /**
+         * Days of the week on which a continuous backup is taken. Output only field. Ignored if passed into the request.
+         */
+        schedules: string[];
+    }
+    interface GetClusterContinuousBackupInfoEncryptionInfo {
+        /**
+         * Output only. Type of encryption.
+         */
+        encryptionType: string;
+        /**
+         * Output only. Cloud KMS key versions that are being used to protect the database or the backup.
+         */
+        kmsKeyVersions: string[];
+    }
+    interface GetClusterEncryptionConfig {
+        /**
+         * The fully-qualified resource name of the KMS key. Each Cloud KMS key is regionalized and has the following format: projects/[PROJECT]/locations/[REGION]/keyRings/[RING]/cryptoKeys/[KEY_NAME].
+         */
+        kmsKeyName: string;
+    }
+    interface GetClusterEncryptionInfo {
+        /**
+         * Output only. Type of encryption.
+         */
+        encryptionType: string;
+        /**
+         * Output only. Cloud KMS key versions that are being used to protect the database or the backup.
+         */
+        kmsKeyVersions: string[];
+    }
+    interface GetClusterInitialUser {
+        /**
+         * The initial password for the user.
+         */
+        password: string;
+        /**
+         * The database username.
+         */
+        user: string;
+    }
+    interface GetClusterMaintenanceUpdatePolicy {
+        /**
+         * Preferred windows to perform maintenance. Currently limited to 1.
+         */
+        maintenanceWindows: outputs.alloydb.GetClusterMaintenanceUpdatePolicyMaintenanceWindow[];
+    }
+    interface GetClusterMaintenanceUpdatePolicyMaintenanceWindow {
+        /**
+         * Preferred day of the week for maintenance, e.g. MONDAY, TUESDAY, etc. Possible values: ["MONDAY", "TUESDAY", "WEDNESDAY", "THURSDAY", "FRIDAY", "SATURDAY", "SUNDAY"]
+         */
+        day: string;
+        /**
+         * Preferred time to start the maintenance operation on the specified day. Maintenance will start within 1 hour of this time.
+         */
+        startTimes: outputs.alloydb.GetClusterMaintenanceUpdatePolicyMaintenanceWindowStartTime[];
+    }
+    interface GetClusterMaintenanceUpdatePolicyMaintenanceWindowStartTime {
+        /**
+         * Hours of day in 24 hour format. Should be from 0 to 23.
+         */
+        hours: number;
+        /**
+         * Minutes of hour of day. Currently, only the value 0 is supported.
+         */
+        minutes: number;
+        /**
+         * Fractions of seconds in nanoseconds. Currently, only the value 0 is supported.
+         */
+        nanos: number;
+        /**
+         * Seconds of minutes of the time. Currently, only the value 0 is supported.
+         */
+        seconds: number;
+    }
+    interface GetClusterMigrationSource {
+        /**
+         * The host and port of the on-premises instance in host:port format
+         */
+        hostPort: string;
+        /**
+         * Place holder for the external source identifier(e.g DMS job name) that created the cluster.
+         */
+        referenceId: string;
+        /**
+         * Type of migration source.
+         */
+        sourceType: string;
+    }
+    interface GetClusterNetworkConfig {
+        /**
+         * The name of the allocated IP range for the private IP AlloyDB cluster. For example: "google-managed-services-default".
+         * If set, the instance IPs for this cluster will be created in the allocated range.
+         */
+        allocatedIpRange: string;
+        /**
+         * The resource link for the VPC network in which cluster resources are created and from which they are accessible via Private IP. The network must belong to the same project as the cluster.
+         * It is specified in the form: "projects/{projectNumber}/global/networks/{network_id}".
+         */
+        network: string;
+    }
+    interface GetClusterPscConfig {
+        /**
+         * Create an instance that allows connections from Private Service Connect endpoints to the instance.
+         */
+        pscEnabled: boolean;
+    }
+    interface GetClusterRestoreBackupSource {
+        /**
+         * The name of the backup that this cluster is restored from.
+         */
+        backupName: string;
+    }
+    interface GetClusterRestoreContinuousBackupSource {
+        /**
+         * The name of the source cluster that this cluster is restored from.
+         */
+        cluster: string;
+        /**
+         * The point in time that this cluster is restored to, in RFC 3339 format.
+         */
+        pointInTime: string;
+    }
+    interface GetClusterSecondaryConfig {
+        /**
+         * Name of the primary cluster must be in the format
+         * 'projects/{project}/locations/{location}/clusters/{cluster_id}'
+         */
+        primaryClusterName: string;
+    }
+    interface GetClusterTrialMetadata {
+        /**
+         * End time of the trial cluster.
+         */
+        endTime: string;
+        /**
+         * Grace end time of the trial cluster.
+         */
+        graceEndTime: string;
+        /**
+         * Start time of the trial cluster.
+         */
+        startTime: string;
+        /**
+         * Upgrade time of the trial cluster to standard cluster.
+         */
+        upgradeTime: string;
+    }
     interface GetInstanceClientConnectionConfig {
         /**
          * Configuration to enforce connectors only (ex: AuthProxy) connections to the database.
@@ -3846,7 +4123,7 @@ export declare namespace appengine {
     interface StandardAppVersionAutomaticScalingStandardSchedulerSettings {
         /**
          * Maximum number of instances to run for this version. Set to zero to disable maxInstances configuration.
-         * **Note:** Starting from February 17, 2025, App Engine sets the maxInstances default for standard environment deployments to 20. This change doesn't impact existing apps. To override the default, specify a new value between 0 and 2147483647, and deploy a new version or redeploy over an existing version. To disable the maxInstances default configuration setting, specify the maximum permitted value 2147483647.
+         * **Note:** Starting from March 2025, App Engine sets the maxInstances default for standard environment deployments to 20. This change doesn't impact existing apps. To override the default, specify a new value between 0 and 2147483647, and deploy a new version or redeploy over an existing version. To disable the maxInstances default configuration setting, specify the maximum permitted value 2147483647.
          */
         maxInstances: number;
         /**
@@ -6258,9 +6535,8 @@ export declare namespace bigquery {
     interface DataTransferConfigSensitiveParams {
         /**
          * The Secret Access Key of the AWS account transferring data from.
-         * **Note**: This property is sensitive and will not be displayed in the plan.
          */
-        secretAccessKey: string;
+        secretAccessKey?: string;
     }
     interface DatasetAccess {
         /**
@@ -58943,6 +59219,130 @@ export declare namespace deploymentmanager {
     }
 }
 export declare namespace developerconnect {
+    interface ConnectionBitbucketCloudConfig {
+        /**
+         * Represents a personal access token that authorized the Connection,
+         * and associated metadata.
+         * Structure is documented below.
+         */
+        authorizerCredential: outputs.developerconnect.ConnectionBitbucketCloudConfigAuthorizerCredential;
+        /**
+         * Represents a personal access token that authorized the Connection,
+         * and associated metadata.
+         * Structure is documented below.
+         */
+        readAuthorizerCredential: outputs.developerconnect.ConnectionBitbucketCloudConfigReadAuthorizerCredential;
+        /**
+         * Required. Immutable. SecretManager resource containing the webhook secret used to verify webhook
+         * events, formatted as `projects/*/secrets/*/versions/*`. This is used to
+         * validate and create webhooks.
+         */
+        webhookSecretSecretVersion: string;
+        /**
+         * Required. The Bitbucket Cloud Workspace ID to be connected to Google Cloud Platform.
+         */
+        workspace: string;
+    }
+    interface ConnectionBitbucketCloudConfigAuthorizerCredential {
+        /**
+         * Required. A SecretManager resource containing the user token that authorizes
+         * the Developer Connect connection. Format:
+         * `projects/*/secrets/*/versions/*`.
+         */
+        userTokenSecretVersion: string;
+        /**
+         * (Output)
+         * Output only. The username associated with this token.
+         */
+        username: string;
+    }
+    interface ConnectionBitbucketCloudConfigReadAuthorizerCredential {
+        /**
+         * Required. A SecretManager resource containing the user token that authorizes
+         * the Developer Connect connection. Format:
+         * `projects/*/secrets/*/versions/*`.
+         */
+        userTokenSecretVersion: string;
+        /**
+         * (Output)
+         * Output only. The username associated with this token.
+         */
+        username: string;
+    }
+    interface ConnectionBitbucketDataCenterConfig {
+        /**
+         * Represents a personal access token that authorized the Connection,
+         * and associated metadata.
+         * Structure is documented below.
+         */
+        authorizerCredential: outputs.developerconnect.ConnectionBitbucketDataCenterConfigAuthorizerCredential;
+        /**
+         * Required. The URI of the Bitbucket Data Center host this connection is for.
+         */
+        hostUri: string;
+        /**
+         * Represents a personal access token that authorized the Connection,
+         * and associated metadata.
+         * Structure is documented below.
+         */
+        readAuthorizerCredential: outputs.developerconnect.ConnectionBitbucketDataCenterConfigReadAuthorizerCredential;
+        /**
+         * (Output)
+         * Output only. Version of the Bitbucket Data Center server running on the `hostUri`.
+         */
+        serverVersion: string;
+        /**
+         * ServiceDirectoryConfig represents Service Directory configuration for a
+         * connection.
+         * Structure is documented below.
+         */
+        serviceDirectoryConfig?: outputs.developerconnect.ConnectionBitbucketDataCenterConfigServiceDirectoryConfig;
+        /**
+         * Optional. SSL certificate authority to trust when making requests to Bitbucket Data
+         * Center.
+         */
+        sslCaCertificate?: string;
+        /**
+         * Required. Immutable. SecretManager resource containing the webhook secret used to verify webhook
+         * events, formatted as `projects/*/secrets/*/versions/*`. This is used to
+         * validate webhooks.
+         */
+        webhookSecretSecretVersion: string;
+    }
+    interface ConnectionBitbucketDataCenterConfigAuthorizerCredential {
+        /**
+         * Required. A SecretManager resource containing the user token that authorizes
+         * the Developer Connect connection. Format:
+         * `projects/*/secrets/*/versions/*`.
+         */
+        userTokenSecretVersion: string;
+        /**
+         * (Output)
+         * Output only. The username associated with this token.
+         */
+        username: string;
+    }
+    interface ConnectionBitbucketDataCenterConfigReadAuthorizerCredential {
+        /**
+         * Required. A SecretManager resource containing the user token that authorizes
+         * the Developer Connect connection. Format:
+         * `projects/*/secrets/*/versions/*`.
+         */
+        userTokenSecretVersion: string;
+        /**
+         * (Output)
+         * Output only. The username associated with this token.
+         */
+        username: string;
+    }
+    interface ConnectionBitbucketDataCenterConfigServiceDirectoryConfig {
+        /**
+         * Required. The Service Directory service name.
+         * Format:
+         * projects/{project}/locations/{location}/namespaces/{namespace}/services/{service}.
+         */
+        service: string;
+    }
     interface ConnectionCryptoKeyConfig {
         /**
          * Required. The name of the key which is used to encrypt/decrypt customer data. For key
@@ -83410,6 +83810,16 @@ export declare namespace projects {
          */
         allowedIps: string[];
     }
+    interface GetAncestryAncestor {
+        /**
+         * If it's a project, the `projectId` is exported, else the numeric folder id or organization id.
+         */
+        id: string;
+        /**
+         * One of `"project"`, `"folder"` or `"organization"`.
+         */
+        type: string;
+    }
     interface GetOrganizationPolicyBooleanPolicy {
         /**
          * If true, then the Policy is enforced. If false, then any configuration is acceptable.
@@ -90402,11 +90812,42 @@ export declare namespace tpu {
          * Text description of the TPU.
          */
         description?: string;
+        /**
+         * Network configurations for the TPU node.
+         * Structure is documented below.
+         */
+        networkConfig: outputs.tpu.V2QueuedResourceTpuNodeSpecNodeNetworkConfig;
         /**
          * Runtime version for the TPU.
          */
         runtimeVersion: string;
     }
+    interface V2QueuedResourceTpuNodeSpecNodeNetworkConfig {
+        /**
+         * Allows the TPU node to send and receive packets with non-matching destination or source
+         * IPs. This is required if you plan to use the TPU workers to forward routes.
+         */
+        canIpForward?: boolean;
+        /**
+         * Indicates that external IP addresses would be associated with the TPU workers. If set to
+         * false, the specified subnetwork or network should have Private Google Access enabled.
+         */
+        enableExternalIps?: boolean;
+        /**
+         * The name of the network for the TPU node. It must be a preexisting Google Compute Engine
+         * network. If none is provided, "default" will be used.
+         */
+        network: string;
+        /**
+         * Specifies networking queue count for TPU VM instance's network interface.
+         */
+        queueCount?: number;
+        /**
+         * The name of the subnetwork for the TPU node. It must be a preexisting Google Compute
+         * Engine subnetwork. If none is provided, "default" will be used.
+         */
+        subnetwork: string;
+    }
     interface V2VmAcceleratorConfig {
         /**
          * Topology of TPU in chips.