@pulumi/gcp 9.27.0 → 9.28.0

package/types/input.d.ts

@@ -6836,6 +6836,10 @@ export declare namespace backupdisasterrecovery {
          * Required. Target project for the Compute Engine instance.
          */
         project: pulumi.Input<string>;
+        /**
+         * If true, use the BackupDR P4SA credentials for same-project restores. Default is false.
+         */
+        useProjectServiceAccount?: pulumi.Input<boolean | undefined>;
         /**
          * Required. The zone of the Compute Engine instance.
          */
@@ -6966,6 +6970,10 @@ export declare namespace backupdisasterrecovery {
          * Required. Target project for the disk.
          */
         project: pulumi.Input<string>;
+        /**
+         * If true, use the BackupDR P4SA credentials for same-project restores. Default is false.
+         */
+        useProjectServiceAccount?: pulumi.Input<boolean | undefined>;
         /**
          * Required. Target zone for the disk.
          */
@@ -6984,6 +6992,10 @@ export declare namespace backupdisasterrecovery {
          * Required. Target URLs of the replica zones for the disk.
          */
         replicaZones: pulumi.Input<pulumi.Input<string>[]>;
+        /**
+         * If true, use the BackupDR P4SA credentials for same-project restores. Default is false.
+         */
+        useProjectServiceAccount?: pulumi.Input<boolean | undefined>;
     }
     interface RestoreWorkloadTargetResource {
         /**
@@ -23911,6 +23923,175 @@ export declare namespace chronicle {
          */
         filterOperator?: pulumi.Input<string | undefined>;
     }
+    interface ParserChangelog {
+        /**
+         * all the changelog of a parser.
+         * Structure is documented below.
+         */
+        entries?: pulumi.Input<pulumi.Input<inputs.chronicle.ParserChangelogEntry>[] | undefined>;
+    }
+    interface ParserChangelogEntry {
+        /**
+         * (Output)
+         * The changelog message.
+         */
+        changeMessage?: pulumi.Input<string | undefined>;
+        /**
+         * (Output)
+         * Time at which changelog was created.
+         */
+        createTime?: pulumi.Input<string | undefined>;
+        /**
+         * (Output)
+         * Flag whether the entry is added or deleted.
+         * This will be true in case of rollback and false in case of upgrade.
+         */
+        deleted?: pulumi.Input<boolean | undefined>;
+        /**
+         * (Output)
+         * The parser version for which the changelog is created.
+         */
+        parserVersion?: pulumi.Input<string | undefined>;
+    }
+    interface ParserCreator {
+        /**
+         * (Output)
+         * The name of the author, who created this parser.
+         */
+        author?: pulumi.Input<string | undefined>;
+        /**
+         * (Output)
+         * The customer who created it, This can represent the partner as well.
+         * In case of prebuilt parser this will be empty.
+         */
+        customer?: pulumi.Input<string | undefined>;
+        /**
+         * (Output)
+         * The source of the parser.
+         * Possible values:
+         * GOOGLE
+         * CUSTOM_GOOGLE_OVERRIDE
+         * PARTNER
+         * CUSTOMER
+         */
+        source?: pulumi.Input<string | undefined>;
+    }
+    interface ParserLowCode {
+        /**
+         * A representation of a parser extension as a set of field extractors.
+         * Structure is documented below.
+         */
+        fieldExtractors?: pulumi.Input<inputs.chronicle.ParserLowCodeFieldExtractors | undefined>;
+        /**
+         * The log used to create this low code parser in the UI.
+         */
+        log?: pulumi.Input<string | undefined>;
+    }
+    interface ParserLowCodeFieldExtractors {
+        /**
+         * Whether to append repeated fields or not.
+         * When false, repeated fields will be replaced.
+         */
+        appendRepeatedFields?: pulumi.Input<boolean | undefined>;
+        /**
+         * List of FieldExtractors.
+         * Structure is documented below.
+         */
+        extractors?: pulumi.Input<pulumi.Input<inputs.chronicle.ParserLowCodeFieldExtractorsExtractor>[] | undefined>;
+        /**
+         * Possible values:
+         * JSON
+         * CSV
+         * XML
+         */
+        logFormat?: pulumi.Input<string | undefined>;
+        /**
+         * PreProcessConfig holds the GROK expression to extract the syslog header.
+         * Structure is documented below.
+         */
+        preprocessConfig?: pulumi.Input<inputs.chronicle.ParserLowCodeFieldExtractorsPreprocessConfig | undefined>;
+        /**
+         * (Output)
+         * CBN snippet generated from field extractors.
+         */
+        transformedCbnSnippet?: pulumi.Input<string | undefined>;
+    }
+    interface ParserLowCodeFieldExtractorsExtractor {
+        /**
+         * Path in generated event which is to be populated. This is required if the
+         * FieldExtractor is used to specify the parser extension.
+         */
+        destinationPath?: pulumi.Input<string | undefined>;
+        /**
+         * Field path could be a json path, xml path or csv column name
+         * depending on log format. It refers to a section or substring in raw log.
+         * This is required if the FieldExtractor is used to specify the parser
+         * extension.
+         */
+        fieldPath?: pulumi.Input<string | undefined>;
+        /**
+         * Operator used for precondition.
+         * Possible values:
+         * EQUALS
+         * NOT_EQUALS
+         */
+        preconditionOp?: pulumi.Input<string | undefined>;
+        /**
+         * Precondition path could be a json path, xml path or csv column name
+         * depending on log format. It refers to a section or substring in raw log.
+         */
+        preconditionPath?: pulumi.Input<string | undefined>;
+        /**
+         * Precondition value.
+         */
+        preconditionValue?: pulumi.Input<string | undefined>;
+        /**
+         * Value to be mapped to the destination path directly.
+         */
+        value?: pulumi.Input<string | undefined>;
+    }
+    interface ParserLowCodeFieldExtractorsPreprocessConfig {
+        /**
+         * GROK Regex to extract the structured part of the log.
+         * syntax documentation:
+         * www.elastic.co/guide/en/logstash/current/plugins-filters-grok.html
+         */
+        grokRegex?: pulumi.Input<string | undefined>;
+        /**
+         * Target field name for the structured part of the log.
+         * This should match a SEMANTIC identifier from the grok expression.
+         */
+        target?: pulumi.Input<string | undefined>;
+    }
+    interface ParserVersionInfo {
+        /**
+         * Signifies if the parser is disabled for auto upgrade. If true, the parser
+         * will not be upgraded by the auto upgrade process.
+         */
+        autoUpgradeDisabled: pulumi.Input<boolean>;
+        /**
+         * (Output)
+         * The resource name of latest Parser for this logtype.
+         * Format:
+         * projects/{project}/locations/{region}/instances/{instance}/logTypes/{log_type}/parsers/{parser}/{id}
+         */
+        latestParser?: pulumi.Input<string | undefined>;
+        /**
+         * (Output)
+         * The version for the latest available stable version of the parser.
+         */
+        latestParserVersion?: pulumi.Input<string | undefined>;
+        /**
+         * (Output)
+         * Signifies if rollback is available for this parser version.
+         */
+        rollbackAvailable?: pulumi.Input<boolean | undefined>;
+        /**
+         * (Output)
+         * The version of the parser.
+         */
+        version?: pulumi.Input<string | undefined>;
+    }
     interface ReferenceListEntry {
         /**
          * Required. The value of the entry. Maximum length is 512 characters.
@@ -30362,6 +30543,14 @@ export declare namespace cloudrunv2 {
         annotations?: pulumi.Input<{
             [key: string]: pulumi.Input<string>;
         } | undefined>;
+        /**
+         * Arbitrary identifier for the API client.
+         */
+        client?: pulumi.Input<string | undefined>;
+        /**
+         * Arbitrary version identifier for the API client.
+         */
+        clientVersion?: pulumi.Input<string | undefined>;
         /**
          * Holds the containers that define the unit of execution for this WorkerPool.
          * Structure is documented below.
@@ -30563,7 +30752,16 @@ export declare namespace cloudrunv2 {
         /**
          * Required. The header field name
          */
-        port: pulumi.Input<number>;
+        name?: pulumi.Input<string | undefined>;
+        /**
+         * (Optional, Deprecated)
+         * Required. The header field name
+         *
+         * > **Warning:** `port` field is deprecated and will be removed in a future major release. It was never supported by the API.
+         *
+         * @deprecated `port` field is deprecated and will be removed in a future major release. It was never supported by the API.
+         */
+        port?: pulumi.Input<number | undefined>;
         /**
          * Optional. The header field value
          */
@@ -30645,7 +30843,16 @@ export declare namespace cloudrunv2 {
         /**
          * Required. The header field name
          */
-        port: pulumi.Input<number>;
+        name?: pulumi.Input<string | undefined>;
+        /**
+         * (Optional, Deprecated)
+         * Required. The header field name
+         *
+         * > **Warning:** `port` field is deprecated and will be removed in a future major release. It was never supported by the API.
+         *
+         * @deprecated `port` field is deprecated and will be removed in a future major release. It was never supported by the API.
+         */
+        port?: pulumi.Input<number | undefined>;
         /**
          * Optional. The header field value
          */
@@ -31555,7 +31762,7 @@ export declare namespace cloudsecuritycompliance {
         majorRevisionId: pulumi.Input<string>;
         /**
          * The name of the CloudControl in the format:
-         * “organizations/{organization}/locations/{location}/cloudControls/{cloud-control}”
+         * "{parent}/locations/{location}/cloudControls/{cloud-control}"
          */
         name: pulumi.Input<string>;
         /**
@@ -31647,7 +31854,7 @@ export declare namespace cloudsecuritycompliance {
         /**
          * (Output)
          * The name of the CloudControlDeployment. The format is:
-         * organizations/{org}/locations/{location}/cloudControlDeployments/{cloud_control_deployment_id}
+         * {parent}/locations/{location}/cloudControlDeployments/{cloud_control_deployment_id}
          */
         cloudControlDeployment?: pulumi.Input<string | undefined>;
     }
@@ -31673,8 +31880,7 @@ export declare namespace cloudsecuritycompliance {
         majorRevisionId: pulumi.Input<string>;
         /**
          * The name of the CloudControl in the format:
-         * “organizations/{organization}/locations/{location}/
-         * cloudControls/{cloud-control}”
+         * "{parent}/locations/{location}/cloudControls/{cloud-control}"
          */
         name: pulumi.Input<string>;
         /**
@@ -31765,7 +31971,7 @@ export declare namespace cloudsecuritycompliance {
     interface FrameworkDeploymentFramework {
         /**
          * In the format:
-         * organizations/{org}/locations/{location}/frameworks/{framework}
+         * {parent}/locations/{location}/frameworks/{framework}
          */
         framework: pulumi.Input<string>;
         /**
@@ -46960,6 +47166,16 @@ export declare namespace compute {
          */
         seconds?: pulumi.Input<string | undefined>;
     }
+    interface ReservationParams {
+        /**
+         * Resource manager tags to be bound to the reservation. Tag keys and values have the
+         * same definition as resource manager tags. Keys must be in the format tagKeys/{tag_key_id},
+         * and values are in the format tagValues/456.
+         */
+        resourceManagerTags?: pulumi.Input<{
+            [key: string]: pulumi.Input<string>;
+        } | undefined>;
+    }
     interface ReservationReservationSharingPolicy {
         /**
          * Sharing config for all Google Cloud services.
@@ -53965,8 +54181,6 @@ export declare namespace container {
         parallelstoreCsiDriverConfig?: pulumi.Input<inputs.container.ClusterAddonsConfigParallelstoreCsiDriverConfig | undefined>;
         /**
          * The status of the Pod Snapshot addon. It is disabled by default. Set `enabled = true` to enable.
-         *
-         * This example `addonsConfig` disables two addons:
          */
         podSnapshotConfig?: pulumi.Input<inputs.container.ClusterAddonsConfigPodSnapshotConfig | undefined>;
         /**
@@ -53990,6 +54204,15 @@ export declare namespace container {
          * It is disabled by default. Set `enabled = true` to enable.
          */
         sliceControllerConfig?: pulumi.Input<inputs.container.ClusterAddonsConfigSliceControllerConfig | undefined>;
+        /**
+         * The status of the Slurm Operator addon,
+         * which creates slurm related CRDs and KCP pods to manage them.
+         * Defaults to disabled for Standard clusters; set `enabled = true` to enable.
+         * It can not be enabled for Autopilot clusters.
+         *
+         * This example `addonsConfig` disables two addons:
+         */
+        slurmOperatorConfig?: pulumi.Input<inputs.container.ClusterAddonsConfigSlurmOperatorConfig | undefined>;
         /**
          * .
          * The status of the Stateful HA addon, which provides automatic configurable failover for stateful applications.
@@ -54114,6 +54337,9 @@ export declare namespace container {
     interface ClusterAddonsConfigSliceControllerConfig {
         enabled: pulumi.Input<boolean>;
     }
+    interface ClusterAddonsConfigSlurmOperatorConfig {
+        enabled: pulumi.Input<boolean>;
+    }
     interface ClusterAddonsConfigStatefulHaConfig {
         enabled: pulumi.Input<boolean>;
     }
@@ -55056,6 +55282,10 @@ export declare namespace container {
          * Setting this field will assign instances of this pool to run on the specified node group. This is useful for running workloads on [sole tenant nodes](https://cloud.google.com/compute/docs/nodes/sole-tenant-nodes).
          */
         nodeGroup?: pulumi.Input<string | undefined>;
+        /**
+         * The node image configuration to use for this node pool. Structure is documented below.
+         */
+        nodeImageConfigs?: pulumi.Input<pulumi.Input<inputs.container.ClusterNodeConfigNodeImageConfig>[] | undefined>;
         /**
          * The set of Google API scopes to be made available
          * on all of the node VMs under the "default" service account.
@@ -55748,6 +55978,16 @@ export declare namespace container {
          */
         localSsdCount: pulumi.Input<number>;
     }
+    interface ClusterNodeConfigNodeImageConfig {
+        /**
+         * The name of the image to use for this node.
+         */
+        image?: pulumi.Input<string | undefined>;
+        /**
+         * The project containing the image to use for this node.
+         */
+        imageProject?: pulumi.Input<string | undefined>;
+    }
     interface ClusterNodeConfigReservationAffinity {
         /**
          * The type of reservation consumption
@@ -56465,6 +56705,10 @@ export declare namespace container {
          * Setting this field will assign instances of this pool to run on the specified node group. This is useful for running workloads on [sole tenant nodes](https://cloud.google.com/compute/docs/nodes/sole-tenant-nodes).
          */
         nodeGroup?: pulumi.Input<string | undefined>;
+        /**
+         * The node image configuration to use for this node pool. Structure is documented below.
+         */
+        nodeImageConfigs?: pulumi.Input<pulumi.Input<inputs.container.ClusterNodePoolNodeConfigNodeImageConfig>[] | undefined>;
         /**
          * The set of Google API scopes to be made available
          * on all of the node VMs under the "default" service account.
@@ -57157,6 +57401,16 @@ export declare namespace container {
          */
         localSsdCount: pulumi.Input<number>;
     }
+    interface ClusterNodePoolNodeConfigNodeImageConfig {
+        /**
+         * The name of the image to use for this node.
+         */
+        image?: pulumi.Input<string | undefined>;
+        /**
+         * The project containing the image to use for this node.
+         */
+        imageProject?: pulumi.Input<string | undefined>;
+    }
     interface ClusterNodePoolNodeConfigReservationAffinity {
         /**
          * The type of reservation consumption
@@ -57904,6 +58158,10 @@ export declare namespace container {
          * Setting this field will assign instances of this pool to run on the specified node group. This is useful for running workloads on sole tenant nodes.
          */
         nodeGroup?: pulumi.Input<string | undefined>;
+        /**
+         * The node image configuration to use for this node pool.
+         */
+        nodeImageConfigs?: pulumi.Input<pulumi.Input<inputs.container.NodePoolNodeConfigNodeImageConfig>[] | undefined>;
         /**
          * The set of Google API scopes to be made available on all of the node VMs.
          */
@@ -58535,6 +58793,16 @@ export declare namespace container {
          */
         localSsdCount: pulumi.Input<number>;
     }
+    interface NodePoolNodeConfigNodeImageConfig {
+        /**
+         * The name of the image to use for this node.
+         */
+        image?: pulumi.Input<string | undefined>;
+        /**
+         * The project containing the image to use for this node.
+         */
+        imageProject?: pulumi.Input<string | undefined>;
+    }
     interface NodePoolNodeConfigReservationAffinity {
         /**
          * The type of reservation consumption
@@ -93595,6 +93863,25 @@ export declare namespace migrationcenter {
     }
     interface DiscoveryClientErrorDetail {
     }
+    interface ImportDataFileUploadFileInfo {
+        /**
+         * (Output)
+         * The headers that were used to sign the URI.
+         */
+        headers?: pulumi.Input<{
+            [key: string]: pulumi.Input<string>;
+        } | undefined>;
+        /**
+         * (Output)
+         * Upload URI for the file.
+         */
+        signedUri?: pulumi.Input<string | undefined>;
+        /**
+         * (Output)
+         * Expiration time of the upload URI.
+         */
+        uriExpirationTime?: pulumi.Input<string | undefined>;
+    }
     interface ImportJobExecutionReport {
         /**
          * (Output)
@@ -98695,7 +98982,7 @@ export declare namespace networksecurity {
          */
         notOperations?: pulumi.Input<pulumi.Input<inputs.networksecurity.AuthzPolicyHttpRuleToNotOperation>[] | undefined>;
         /**
-         * Describes properties of one or more targets of a request. At least one of operations or notOperations must be specified. Limited to 1 operation. A match occurs when ANY operation (in operations or notOperations) matches. Within an operation, the match follows AND semantics across fields and OR semantics within a field, i.e. a match occurs when ANY path matches AND ANY header matches and ANY method matches.
+         * Describes properties of one or more targets of a request. At least one of operations or notOperations must be specified. Limited to 1 operation.
          * Structure is documented below.
          */
         operations?: pulumi.Input<pulumi.Input<inputs.networksecurity.AuthzPolicyHttpRuleToOperation>[] | undefined>;
@@ -99019,6 +99306,139 @@ export declare namespace networksecurity {
          */
         suffix?: pulumi.Input<string | undefined>;
     }
+    interface AuthzPolicyNetworkRule {
+        /**
+         * Describes properties of one or more sources of a request.
+         * Structure is documented below.
+         */
+        from?: pulumi.Input<inputs.networksecurity.AuthzPolicyNetworkRuleFrom | undefined>;
+        /**
+         * Describes properties of one or more targets of a request
+         * Structure is documented below.
+         */
+        to?: pulumi.Input<inputs.networksecurity.AuthzPolicyNetworkRuleTo | undefined>;
+    }
+    interface AuthzPolicyNetworkRuleFrom {
+        /**
+         * Describes the negated properties of request sources. Matches requests from sources that do not match the criteria specified in this field. At least one of sources or notSources must be specified. Limited to 1 not_source.
+         * Structure is documented below.
+         */
+        notSources?: pulumi.Input<pulumi.Input<inputs.networksecurity.AuthzPolicyNetworkRuleFromNotSource>[] | undefined>;
+        /**
+         * Describes the properties of a request's sources. At least one of sources or notSources must be specified. Limited to 1 source. A match occurs when ANY source (in sources or notSources) matches the request. Within a single source, the match follows AND semantics across fields and OR semantics within a single field, i.e. a match occurs when ANY principal matches AND ANY ipBlocks match.
+         * Structure is documented below.
+         */
+        sources?: pulumi.Input<pulumi.Input<inputs.networksecurity.AuthzPolicyNetworkRuleFromSource>[] | undefined>;
+    }
+    interface AuthzPolicyNetworkRuleFromNotSource {
+        /**
+         * A list of IP addresses or IP address ranges to match against the source IP address of the request. Limited to 10 ipBlocks per Authorization Policy
+         * Structure is documented below.
+         */
+        ipBlocks?: pulumi.Input<pulumi.Input<inputs.networksecurity.AuthzPolicyNetworkRuleFromNotSourceIpBlock>[] | undefined>;
+        /**
+         * A list of identities derived from the client's certificate. This field will not match on a request unless mutual TLS is enabled for the Forwarding rule or Gateway. Each identity is a string whose value is matched against the URI SAN, or DNS SAN or the subject field in the client's certificate. The match can be exact, prefix, suffix or a substring match. One of exact, prefix, suffix or contains must be specified.
+         * Limited to 5 principals.
+         * Structure is documented below.
+         */
+        principals?: pulumi.Input<pulumi.Input<inputs.networksecurity.AuthzPolicyNetworkRuleFromNotSourcePrincipal>[] | undefined>;
+    }
+    interface AuthzPolicyNetworkRuleFromNotSourceIpBlock {
+        /**
+         * The length of the address range.
+         */
+        length: pulumi.Input<number>;
+        /**
+         * The address prefix.
+         */
+        prefix: pulumi.Input<string>;
+    }
+    interface AuthzPolicyNetworkRuleFromNotSourcePrincipal {
+        /**
+         * Required. A non-empty string whose value is matched against the principal value based on the principalSelector.
+         * Only exact match can be applied for CLIENT_CERT_URI_SAN, CLIENT_CERT_DNS_NAME_SAN, CLIENT_CERT_COMMON_NAME selectors.
+         * Structure is documented below.
+         */
+        principal?: pulumi.Input<inputs.networksecurity.AuthzPolicyNetworkRuleFromNotSourcePrincipalPrincipal | undefined>;
+        /**
+         * An enum to decide what principal value the principal rule will match against. If not specified, the PrincipalSelector is CLIENT_CERT_URI_SAN.
+         * Default value is `CLIENT_CERT_URI_SAN`.
+         * Possible values are: `PRINCIPAL_SELECTOR_UNSPECIFIED`, `CLIENT_CERT_URI_SAN`, `CLIENT_CERT_DNS_NAME_SAN`, `CLIENT_CERT_COMMON_NAME`.
+         */
+        principalSelector?: pulumi.Input<string | undefined>;
+    }
+    interface AuthzPolicyNetworkRuleFromNotSourcePrincipalPrincipal {
+        /**
+         * The input string must match exactly the string specified here.
+         * Examples:
+         * * abc only matches the value abc.
+         */
+        exact?: pulumi.Input<string | undefined>;
+    }
+    interface AuthzPolicyNetworkRuleFromSource {
+        /**
+         * A list of IP addresses or IP address ranges to match against the source IP address of the request. Limited to 10 ipBlocks per Authorization Policy
+         * Structure is documented below.
+         */
+        ipBlocks?: pulumi.Input<pulumi.Input<inputs.networksecurity.AuthzPolicyNetworkRuleFromSourceIpBlock>[] | undefined>;
+        /**
+         * A list of identities derived from the client's certificate. This field will not match on a request unless mutual TLS is enabled for the Forwarding rule or Gateway. Each identity is a string whose value is matched against the URI SAN, or DNS SAN or the subject field in the client's certificate. The match can be exact, prefix, suffix or a substring match. One of exact, prefix, suffix or contains must be specified.
+         * Limited to 5 principals.
+         * Structure is documented below.
+         */
+        principals?: pulumi.Input<pulumi.Input<inputs.networksecurity.AuthzPolicyNetworkRuleFromSourcePrincipal>[] | undefined>;
+    }
+    interface AuthzPolicyNetworkRuleFromSourceIpBlock {
+        /**
+         * The length of the address range.
+         */
+        length: pulumi.Input<number>;
+        /**
+         * The address prefix.
+         */
+        prefix: pulumi.Input<string>;
+    }
+    interface AuthzPolicyNetworkRuleFromSourcePrincipal {
+        /**
+         * Required. A non-empty string whose value is matched against the principal value based on the principalSelector.
+         * Only exact match can be applied for CLIENT_CERT_URI_SAN, CLIENT_CERT_DNS_NAME_SAN, CLIENT_CERT_COMMON_NAME selectors.
+         * Structure is documented below.
+         */
+        principal?: pulumi.Input<inputs.networksecurity.AuthzPolicyNetworkRuleFromSourcePrincipalPrincipal | undefined>;
+        /**
+         * An enum to decide what principal value the principal rule will match against. If not specified, the PrincipalSelector is CLIENT_CERT_URI_SAN.
+         * Default value is `CLIENT_CERT_URI_SAN`.
+         * Possible values are: `PRINCIPAL_SELECTOR_UNSPECIFIED`, `CLIENT_CERT_URI_SAN`, `CLIENT_CERT_DNS_NAME_SAN`, `CLIENT_CERT_COMMON_NAME`.
+         */
+        principalSelector?: pulumi.Input<string | undefined>;
+    }
+    interface AuthzPolicyNetworkRuleFromSourcePrincipalPrincipal {
+        /**
+         * The input string must match exactly the string specified here.
+         * Examples:
+         * * abc only matches the value abc.
+         */
+        exact?: pulumi.Input<string | undefined>;
+    }
+    interface AuthzPolicyNetworkRuleTo {
+        /**
+         * Describes properties of one or more targets of a request. At least one of operations or notOperations must be specified. Limited to 1 operation.
+         * Structure is documented below.
+         */
+        operations?: pulumi.Input<pulumi.Input<inputs.networksecurity.AuthzPolicyNetworkRuleToOperation>[] | undefined>;
+    }
+    interface AuthzPolicyNetworkRuleToOperation {
+        /**
+         * Structure is documented below.
+         */
+        snis?: pulumi.Input<pulumi.Input<inputs.networksecurity.AuthzPolicyNetworkRuleToOperationSni>[] | undefined>;
+    }
+    interface AuthzPolicyNetworkRuleToOperationSni {
+        /**
+         * (Optional)
+         */
+        exact?: pulumi.Input<string | undefined>;
+    }
     interface AuthzPolicyTarget {
         /**
          * Required when targeting forwarding rules and secure web proxy. Must not be specified when targeting Agent
@@ -112899,6 +113319,14 @@ export declare namespace pubsub {
          * Possible values are: `ENCODING_UNSPECIFIED`, `JSON`, `BINARY`.
          */
         encoding?: pulumi.Input<string | undefined>;
+        /**
+         * The minimum (inclusive) revision allowed for validating messages. If empty or not present, allow any revision to be validated against lastRevision or any revision created before.
+         */
+        firstRevisionId?: pulumi.Input<string | undefined>;
+        /**
+         * The maximum (inclusive) revision allowed for validating messages. If empty or not present, allow any revision to be validated against firstRevision or any revision created after.
+         */
+        lastRevisionId?: pulumi.Input<string | undefined>;
         /**
          * The name of the schema that messages published should be
          * validated against. Format is projects/{project}/schemas/{schema}.
@@ -116529,10 +116957,18 @@ export declare namespace sql {
          * A comma-separated list of networks or a comma-separated list of network-project pairs. Each project in this list is represented by a project number (numeric) or by a project ID (alphanumeric). This allows Private Service Connect connections to be created automatically for the specified networks.
          */
         pscAutoConnections?: pulumi.Input<pulumi.Input<inputs.sql.DatabaseInstanceSettingsIpConfigurationPscConfigPscAutoConnection>[] | undefined>;
+        /**
+         * Whether PSC auto DNS is enabled for this instance.
+         */
+        pscAutoDnsEnabled?: pulumi.Input<boolean | undefined>;
         /**
          * Whether PSC connectivity is enabled for this instance.
          */
         pscEnabled?: pulumi.Input<boolean | undefined>;
+        /**
+         * Whether PSC write endpoint DNS is enabled for this instance. This is only supported for Enterprise Plus edition instances.
+         */
+        pscWriteEndpointDnsEnabled?: pulumi.Input<boolean | undefined>;
     }
     interface DatabaseInstanceSettingsIpConfigurationPscConfigPscAutoConnection {
         /**