@pulumi/gcp 9.31.0 → 9.32.1

package/types/input.d.ts

@@ -578,6 +578,12 @@ export declare namespace accesscontextmanager {
          * An AccessLevel resource name that allows resources outside the ServicePerimeter to be accessed from the inside.
          */
         accessLevel?: pulumi.Input<string | undefined>;
+        /**
+         * A Private Service Connect endpoint that is allowed to access data outside the perimeter.
+         * The Private Service Connect endpoint may be in any organization, not just the organization that the perimeter is defined in.
+         * Structure is documented below.
+         */
+        pscEndpoint?: pulumi.Input<inputs.accesscontextmanager.ServicePerimeterDryRunEgressPolicyEgressFromSourcePscEndpoint | undefined>;
         /**
          * A Google Cloud resource that is allowed to egress the perimeter.
          * Requests from these resources are allowed to access data outside the perimeter.
@@ -588,6 +594,13 @@ export declare namespace accesscontextmanager {
          */
         resource?: pulumi.Input<string | undefined>;
     }
+    interface ServicePerimeterDryRunEgressPolicyEgressFromSourcePscEndpoint {
+        /**
+         * The full resource name of the global forwarding rule that identifies a Private Service Connect endpoint.
+         * Forwarding rule format: `//compute.googleapis.com/projects/{PROJECT_ID}/global/forwardingRules/{FORWARDING_RULE_ID}`.
+         */
+        forwardingRule?: pulumi.Input<string | undefined>;
+    }
     interface ServicePerimeterDryRunEgressPolicyEgressTo {
         /**
          * A list of external resources that are allowed to be accessed. A request
@@ -679,6 +692,12 @@ export declare namespace accesscontextmanager {
          * If * is specified, then all IngressSources will be allowed.
          */
         accessLevel?: pulumi.Input<string | undefined>;
+        /**
+         * A Private Service Connect endpoint that is allowed to access the perimeter.
+         * The Private Service Connect endpoint may be in any organization, not just the organization that the perimeter is defined in.
+         * Structure is documented below.
+         */
+        pscEndpoint?: pulumi.Input<inputs.accesscontextmanager.ServicePerimeterDryRunIngressPolicyIngressFromSourcePscEndpoint | undefined>;
         /**
          * A Google Cloud resource that is allowed to ingress the perimeter.
          * Requests from these resources will be allowed to access perimeter data.
@@ -689,6 +708,13 @@ export declare namespace accesscontextmanager {
          */
         resource?: pulumi.Input<string | undefined>;
     }
+    interface ServicePerimeterDryRunIngressPolicyIngressFromSourcePscEndpoint {
+        /**
+         * The full resource name of the global forwarding rule that identifies a Private Service Connect endpoint.
+         * Forwarding rule format: `//compute.googleapis.com/projects/{PROJECT_ID}/global/forwardingRules/{FORWARDING_RULE_ID}`.
+         */
+        forwardingRule?: pulumi.Input<string | undefined>;
+    }
     interface ServicePerimeterDryRunIngressPolicyIngressTo {
         /**
          * A list of `ApiOperations` the sources specified in corresponding `IngressFrom`
@@ -775,6 +801,12 @@ export declare namespace accesscontextmanager {
          * An AccessLevel resource name that allows resources outside the ServicePerimeter to be accessed from the inside.
          */
         accessLevel?: pulumi.Input<string | undefined>;
+        /**
+         * A Private Service Connect endpoint that is allowed to access data outside the perimeter.
+         * The Private Service Connect endpoint may be in any organization, not just the organization that the perimeter is defined in.
+         * Structure is documented below.
+         */
+        pscEndpoint?: pulumi.Input<inputs.accesscontextmanager.ServicePerimeterEgressPolicyEgressFromSourcePscEndpoint | undefined>;
         /**
          * A Google Cloud resource that is allowed to egress the perimeter.
          * Requests from these resources are allowed to access data outside the perimeter.
@@ -785,6 +817,13 @@ export declare namespace accesscontextmanager {
          */
         resource?: pulumi.Input<string | undefined>;
     }
+    interface ServicePerimeterEgressPolicyEgressFromSourcePscEndpoint {
+        /**
+         * The full resource name of the global forwarding rule that identifies a Private Service Connect endpoint.
+         * Forwarding rule format: `//compute.googleapis.com/projects/{PROJECT_ID}/global/forwardingRules/{FORWARDING_RULE_ID}`.
+         */
+        forwardingRule?: pulumi.Input<string | undefined>;
+    }
     interface ServicePerimeterEgressPolicyEgressTo {
         /**
          * A list of external resources that are allowed to be accessed. A request
@@ -876,6 +915,12 @@ export declare namespace accesscontextmanager {
          * If * is specified, then all IngressSources will be allowed.
          */
         accessLevel?: pulumi.Input<string | undefined>;
+        /**
+         * A Private Service Connect endpoint that is allowed to access the perimeter.
+         * The Private Service Connect endpoint may be in any organization, not just the organization that the perimeter is defined in.
+         * Structure is documented below.
+         */
+        pscEndpoint?: pulumi.Input<inputs.accesscontextmanager.ServicePerimeterIngressPolicyIngressFromSourcePscEndpoint | undefined>;
         /**
          * A Google Cloud resource that is allowed to ingress the perimeter.
          * Requests from these resources will be allowed to access perimeter data.
@@ -889,6 +934,13 @@ export declare namespace accesscontextmanager {
          */
         resource?: pulumi.Input<string | undefined>;
     }
+    interface ServicePerimeterIngressPolicyIngressFromSourcePscEndpoint {
+        /**
+         * The full resource name of the global forwarding rule that identifies a Private Service Connect endpoint.
+         * Forwarding rule format: `//compute.googleapis.com/projects/{PROJECT_ID}/global/forwardingRules/{FORWARDING_RULE_ID}`.
+         */
+        forwardingRule?: pulumi.Input<string | undefined>;
+    }
     interface ServicePerimeterIngressPolicyIngressTo {
         /**
          * A list of `ApiOperations` the sources specified in corresponding `IngressFrom`
@@ -1040,6 +1092,12 @@ export declare namespace accesscontextmanager {
          * An AccessLevel resource name that allows resources outside the ServicePerimeter to be accessed from the inside.
          */
         accessLevel?: pulumi.Input<string | undefined>;
+        /**
+         * A Private Service Connect endpoint that is allowed to access data outside the perimeter.
+         * The Private Service Connect endpoint may be in any organization, not just the organization that the perimeter is defined in.
+         * Structure is documented below.
+         */
+        pscEndpoint?: pulumi.Input<inputs.accesscontextmanager.ServicePerimeterSpecEgressPolicyEgressFromSourcePscEndpoint | undefined>;
         /**
          * A Google Cloud resource that is allowed to egress the perimeter.
          * Requests from these resources are allowed to access data outside the perimeter.
@@ -1050,6 +1108,13 @@ export declare namespace accesscontextmanager {
          */
         resource?: pulumi.Input<string | undefined>;
     }
+    interface ServicePerimeterSpecEgressPolicyEgressFromSourcePscEndpoint {
+        /**
+         * The full resource name of the global forwarding rule that identifies a Private Service Connect endpoint.
+         * Forwarding rule format: `//compute.googleapis.com/projects/{PROJECT_ID}/global/forwardingRules/{FORWARDING_RULE_ID}`.
+         */
+        forwardingRule?: pulumi.Input<string | undefined>;
+    }
     interface ServicePerimeterSpecEgressPolicyEgressTo {
         /**
          * A list of external resources that are allowed to be accessed. A request
@@ -1150,6 +1215,12 @@ export declare namespace accesscontextmanager {
          * An AccessLevel resource name that allows resources outside the ServicePerimeter to be accessed from the inside.
          */
         accessLevel?: pulumi.Input<string | undefined>;
+        /**
+         * A Private Service Connect endpoint that is allowed to access data outside the perimeter.
+         * The Private Service Connect endpoint may be in any organization, not just the organization that the perimeter is defined in.
+         * Structure is documented below.
+         */
+        pscEndpoint?: pulumi.Input<inputs.accesscontextmanager.ServicePerimeterSpecIngressPolicyIngressFromSourcePscEndpoint | undefined>;
         /**
          * A Google Cloud resource that is allowed to egress the perimeter.
          * Requests from these resources are allowed to access data outside the perimeter.
@@ -1160,6 +1231,13 @@ export declare namespace accesscontextmanager {
          */
         resource?: pulumi.Input<string | undefined>;
     }
+    interface ServicePerimeterSpecIngressPolicyIngressFromSourcePscEndpoint {
+        /**
+         * The full resource name of the global forwarding rule that identifies a Private Service Connect endpoint.
+         * Forwarding rule format: `//compute.googleapis.com/projects/{PROJECT_ID}/global/forwardingRules/{FORWARDING_RULE_ID}`.
+         */
+        forwardingRule?: pulumi.Input<string | undefined>;
+    }
     interface ServicePerimeterSpecIngressPolicyIngressTo {
         /**
          * A list of `ApiOperations` the sources specified in corresponding `IngressFrom`
@@ -1215,6 +1293,12 @@ export declare namespace accesscontextmanager {
         permission?: pulumi.Input<string | undefined>;
     }
     interface ServicePerimeterSpecVpcAccessibleServices {
+        /**
+         * Specifies which Google services are allowed to be accessed from
+         * VPC networks in the service perimeter.
+         * Structure is documented below.
+         */
+        allowedServicePatterns?: pulumi.Input<pulumi.Input<inputs.accesscontextmanager.ServicePerimeterSpecVpcAccessibleServicesAllowedServicePattern>[] | undefined>;
         /**
          * The list of APIs usable within the Service Perimeter.
          * Must be empty unless `enableRestriction` is True.
@@ -1225,6 +1309,43 @@ export declare namespace accesscontextmanager {
          * list of APIs specified in 'allowedServices'.
          */
         enableRestriction?: pulumi.Input<boolean | undefined>;
+        /**
+         * Defines the enforcement scopes of service patterns.
+         * Each value may be one of: `GOOGLE_APIS_VIA_PRIVATE_PATH`.
+         */
+        servicePatternsEnforcementScopes?: pulumi.Input<pulumi.Input<string>[] | undefined>;
+    }
+    interface ServicePerimeterSpecVpcAccessibleServicesAllowedServicePattern {
+        /**
+         * Modifiers to apply to the requests that match the URL pattern.
+         * Structure is documented below.
+         */
+        modifiers?: pulumi.Input<pulumi.Input<inputs.accesscontextmanager.ServicePerimeterSpecVpcAccessibleServicesAllowedServicePatternModifier>[] | undefined>;
+        /**
+         * URL pattern to allow.
+         */
+        pattern?: pulumi.Input<string | undefined>;
+        /**
+         * Supported service to allow.
+         */
+        service?: pulumi.Input<string | undefined>;
+    }
+    interface ServicePerimeterSpecVpcAccessibleServicesAllowedServicePatternModifier {
+        /**
+         * Adds additional HTTP request headers.
+         * Structure is documented below.
+         */
+        addRequestHeader?: pulumi.Input<inputs.accesscontextmanager.ServicePerimeterSpecVpcAccessibleServicesAllowedServicePatternModifierAddRequestHeader | undefined>;
+    }
+    interface ServicePerimeterSpecVpcAccessibleServicesAllowedServicePatternModifierAddRequestHeader {
+        /**
+         * HTTP header key.
+         */
+        key: pulumi.Input<string>;
+        /**
+         * HTTP header value.
+         */
+        value: pulumi.Input<string>;
     }
     interface ServicePerimeterStatus {
         /**
@@ -1323,6 +1444,12 @@ export declare namespace accesscontextmanager {
          * An AccessLevel resource name that allows resources outside the ServicePerimeter to be accessed from the inside.
          */
         accessLevel?: pulumi.Input<string | undefined>;
+        /**
+         * A Private Service Connect endpoint that is allowed to access data outside the perimeter.
+         * The Private Service Connect endpoint may be in any organization, not just the organization that the perimeter is defined in.
+         * Structure is documented below.
+         */
+        pscEndpoint?: pulumi.Input<inputs.accesscontextmanager.ServicePerimeterStatusEgressPolicyEgressFromSourcePscEndpoint | undefined>;
         /**
          * A Google Cloud resource that is allowed to egress the perimeter.
          * Requests from these resources are allowed to access data outside the perimeter.
@@ -1333,6 +1460,13 @@ export declare namespace accesscontextmanager {
          */
         resource?: pulumi.Input<string | undefined>;
     }
+    interface ServicePerimeterStatusEgressPolicyEgressFromSourcePscEndpoint {
+        /**
+         * The full resource name of the global forwarding rule that identifies a Private Service Connect endpoint.
+         * Forwarding rule format: `//compute.googleapis.com/projects/{PROJECT_ID}/global/forwardingRules/{FORWARDING_RULE_ID}`.
+         */
+        forwardingRule?: pulumi.Input<string | undefined>;
+    }
     interface ServicePerimeterStatusEgressPolicyEgressTo {
         /**
          * A list of external resources that are allowed to be accessed. A request
@@ -1433,6 +1567,12 @@ export declare namespace accesscontextmanager {
          * An AccessLevel resource name that allows resources outside the ServicePerimeter to be accessed from the inside.
          */
         accessLevel?: pulumi.Input<string | undefined>;
+        /**
+         * A Private Service Connect endpoint that is allowed to access data outside the perimeter.
+         * The Private Service Connect endpoint may be in any organization, not just the organization that the perimeter is defined in.
+         * Structure is documented below.
+         */
+        pscEndpoint?: pulumi.Input<inputs.accesscontextmanager.ServicePerimeterStatusIngressPolicyIngressFromSourcePscEndpoint | undefined>;
         /**
          * A Google Cloud resource that is allowed to egress the perimeter.
          * Requests from these resources are allowed to access data outside the perimeter.
@@ -1443,6 +1583,13 @@ export declare namespace accesscontextmanager {
          */
         resource?: pulumi.Input<string | undefined>;
     }
+    interface ServicePerimeterStatusIngressPolicyIngressFromSourcePscEndpoint {
+        /**
+         * The full resource name of the global forwarding rule that identifies a Private Service Connect endpoint.
+         * Forwarding rule format: `//compute.googleapis.com/projects/{PROJECT_ID}/global/forwardingRules/{FORWARDING_RULE_ID}`.
+         */
+        forwardingRule?: pulumi.Input<string | undefined>;
+    }
     interface ServicePerimeterStatusIngressPolicyIngressTo {
         /**
          * A list of `ApiOperations` the sources specified in corresponding `IngressFrom`
@@ -1498,6 +1645,12 @@ export declare namespace accesscontextmanager {
         permission?: pulumi.Input<string | undefined>;
     }
     interface ServicePerimeterStatusVpcAccessibleServices {
+        /**
+         * Specifies which Google services are allowed to be accessed from
+         * VPC networks in the service perimeter.
+         * Structure is documented below.
+         */
+        allowedServicePatterns?: pulumi.Input<pulumi.Input<inputs.accesscontextmanager.ServicePerimeterStatusVpcAccessibleServicesAllowedServicePattern>[] | undefined>;
         /**
          * The list of APIs usable within the Service Perimeter.
          * Must be empty unless `enableRestriction` is True.
@@ -1508,6 +1661,43 @@ export declare namespace accesscontextmanager {
          * list of APIs specified in 'allowedServices'.
          */
         enableRestriction?: pulumi.Input<boolean | undefined>;
+        /**
+         * Defines the enforcement scopes of service patterns.
+         * Each value may be one of: `GOOGLE_APIS_VIA_PRIVATE_PATH`.
+         */
+        servicePatternsEnforcementScopes?: pulumi.Input<pulumi.Input<string>[] | undefined>;
+    }
+    interface ServicePerimeterStatusVpcAccessibleServicesAllowedServicePattern {
+        /**
+         * Modifiers to apply to the requests that match the URL pattern.
+         * Structure is documented below.
+         */
+        modifiers?: pulumi.Input<pulumi.Input<inputs.accesscontextmanager.ServicePerimeterStatusVpcAccessibleServicesAllowedServicePatternModifier>[] | undefined>;
+        /**
+         * URL pattern to allow.
+         */
+        pattern?: pulumi.Input<string | undefined>;
+        /**
+         * Supported service to allow.
+         */
+        service?: pulumi.Input<string | undefined>;
+    }
+    interface ServicePerimeterStatusVpcAccessibleServicesAllowedServicePatternModifier {
+        /**
+         * Adds additional HTTP request headers.
+         * Structure is documented below.
+         */
+        addRequestHeader?: pulumi.Input<inputs.accesscontextmanager.ServicePerimeterStatusVpcAccessibleServicesAllowedServicePatternModifierAddRequestHeader | undefined>;
+    }
+    interface ServicePerimeterStatusVpcAccessibleServicesAllowedServicePatternModifierAddRequestHeader {
+        /**
+         * HTTP header key.
+         */
+        key: pulumi.Input<string>;
+        /**
+         * HTTP header value.
+         */
+        value: pulumi.Input<string>;
     }
     interface ServicePerimetersServicePerimeter {
         /**
@@ -1681,6 +1871,12 @@ export declare namespace accesscontextmanager {
          * An AccessLevel resource name that allows resources outside the ServicePerimeter to be accessed from the inside.
          */
         accessLevel?: pulumi.Input<string | undefined>;
+        /**
+         * A Private Service Connect endpoint that is allowed to access data outside the perimeter.
+         * The Private Service Connect endpoint may be in any organization, not just the organization that the perimeter is defined in.
+         * Structure is documented below.
+         */
+        pscEndpoint?: pulumi.Input<inputs.accesscontextmanager.ServicePerimetersServicePerimeterSpecEgressPolicyEgressFromSourcePscEndpoint | undefined>;
         /**
          * A Google Cloud resource that is allowed to egress the perimeter.
          * Requests from these resources are allowed to access data outside the perimeter.
@@ -1691,6 +1887,13 @@ export declare namespace accesscontextmanager {
          */
         resource?: pulumi.Input<string | undefined>;
     }
+    interface ServicePerimetersServicePerimeterSpecEgressPolicyEgressFromSourcePscEndpoint {
+        /**
+         * The full resource name of the global forwarding rule that identifies a Private Service Connect endpoint.
+         * Forwarding rule format: `//compute.googleapis.com/projects/{PROJECT_ID}/global/forwardingRules/{FORWARDING_RULE_ID}`.
+         */
+        forwardingRule?: pulumi.Input<string | undefined>;
+    }
     interface ServicePerimetersServicePerimeterSpecEgressPolicyEgressTo {
         /**
          * A list of external resources that are allowed to be accessed. A request
@@ -1791,6 +1994,12 @@ export declare namespace accesscontextmanager {
          * An AccessLevel resource name that allows resources outside the ServicePerimeter to be accessed from the inside.
          */
         accessLevel?: pulumi.Input<string | undefined>;
+        /**
+         * A Private Service Connect endpoint that is allowed to access data outside the perimeter.
+         * The Private Service Connect endpoint may be in any organization, not just the organization that the perimeter is defined in.
+         * Structure is documented below.
+         */
+        pscEndpoint?: pulumi.Input<inputs.accesscontextmanager.ServicePerimetersServicePerimeterSpecIngressPolicyIngressFromSourcePscEndpoint | undefined>;
         /**
          * A Google Cloud resource that is allowed to egress the perimeter.
          * Requests from these resources are allowed to access data outside the perimeter.
@@ -1801,6 +2010,13 @@ export declare namespace accesscontextmanager {
          */
         resource?: pulumi.Input<string | undefined>;
     }
+    interface ServicePerimetersServicePerimeterSpecIngressPolicyIngressFromSourcePscEndpoint {
+        /**
+         * The full resource name of the global forwarding rule that identifies a Private Service Connect endpoint.
+         * Forwarding rule format: `//compute.googleapis.com/projects/{PROJECT_ID}/global/forwardingRules/{FORWARDING_RULE_ID}`.
+         */
+        forwardingRule?: pulumi.Input<string | undefined>;
+    }
     interface ServicePerimetersServicePerimeterSpecIngressPolicyIngressTo {
         /**
          * A list of `ApiOperations` the sources specified in corresponding `IngressFrom`
@@ -1856,6 +2072,12 @@ export declare namespace accesscontextmanager {
         permission?: pulumi.Input<string | undefined>;
     }
     interface ServicePerimetersServicePerimeterSpecVpcAccessibleServices {
+        /**
+         * Specifies which Google services are allowed to be accessed from
+         * VPC networks in the service perimeter.
+         * Structure is documented below.
+         */
+        allowedServicePatterns?: pulumi.Input<pulumi.Input<inputs.accesscontextmanager.ServicePerimetersServicePerimeterSpecVpcAccessibleServicesAllowedServicePattern>[] | undefined>;
         /**
          * The list of APIs usable within the Service Perimeter.
          * Must be empty unless `enableRestriction` is True.
@@ -1866,6 +2088,43 @@ export declare namespace accesscontextmanager {
          * list of APIs specified in 'allowedServices'.
          */
         enableRestriction?: pulumi.Input<boolean | undefined>;
+        /**
+         * Defines the enforcement scopes of service patterns.
+         * Each value may be one of: `GOOGLE_APIS_VIA_PRIVATE_PATH`.
+         */
+        servicePatternsEnforcementScopes?: pulumi.Input<pulumi.Input<string>[] | undefined>;
+    }
+    interface ServicePerimetersServicePerimeterSpecVpcAccessibleServicesAllowedServicePattern {
+        /**
+         * Modifiers to apply to the requests that match the URL pattern.
+         * Structure is documented below.
+         */
+        modifiers?: pulumi.Input<pulumi.Input<inputs.accesscontextmanager.ServicePerimetersServicePerimeterSpecVpcAccessibleServicesAllowedServicePatternModifier>[] | undefined>;
+        /**
+         * URL pattern to allow.
+         */
+        pattern?: pulumi.Input<string | undefined>;
+        /**
+         * Supported service to allow.
+         */
+        service?: pulumi.Input<string | undefined>;
+    }
+    interface ServicePerimetersServicePerimeterSpecVpcAccessibleServicesAllowedServicePatternModifier {
+        /**
+         * Adds additional HTTP request headers.
+         * Structure is documented below.
+         */
+        addRequestHeader?: pulumi.Input<inputs.accesscontextmanager.ServicePerimetersServicePerimeterSpecVpcAccessibleServicesAllowedServicePatternModifierAddRequestHeader | undefined>;
+    }
+    interface ServicePerimetersServicePerimeterSpecVpcAccessibleServicesAllowedServicePatternModifierAddRequestHeader {
+        /**
+         * HTTP header key.
+         */
+        key: pulumi.Input<string>;
+        /**
+         * HTTP header value.
+         */
+        value: pulumi.Input<string>;
     }
     interface ServicePerimetersServicePerimeterStatus {
         /**
@@ -1966,6 +2225,12 @@ export declare namespace accesscontextmanager {
          * An AccessLevel resource name that allows resources outside the ServicePerimeter to be accessed from the inside.
          */
         accessLevel?: pulumi.Input<string | undefined>;
+        /**
+         * A Private Service Connect endpoint that is allowed to access data outside the perimeter.
+         * The Private Service Connect endpoint may be in any organization, not just the organization that the perimeter is defined in.
+         * Structure is documented below.
+         */
+        pscEndpoint?: pulumi.Input<inputs.accesscontextmanager.ServicePerimetersServicePerimeterStatusEgressPolicyEgressFromSourcePscEndpoint | undefined>;
         /**
          * A Google Cloud resource that is allowed to egress the perimeter.
          * Requests from these resources are allowed to access data outside the perimeter.
@@ -1976,6 +2241,13 @@ export declare namespace accesscontextmanager {
          */
         resource?: pulumi.Input<string | undefined>;
     }
+    interface ServicePerimetersServicePerimeterStatusEgressPolicyEgressFromSourcePscEndpoint {
+        /**
+         * The full resource name of the global forwarding rule that identifies a Private Service Connect endpoint.
+         * Forwarding rule format: `//compute.googleapis.com/projects/{PROJECT_ID}/global/forwardingRules/{FORWARDING_RULE_ID}`.
+         */
+        forwardingRule?: pulumi.Input<string | undefined>;
+    }
     interface ServicePerimetersServicePerimeterStatusEgressPolicyEgressTo {
         /**
          * A list of external resources that are allowed to be accessed. A request
@@ -2076,6 +2348,12 @@ export declare namespace accesscontextmanager {
          * An AccessLevel resource name that allows resources outside the ServicePerimeter to be accessed from the inside.
          */
         accessLevel?: pulumi.Input<string | undefined>;
+        /**
+         * A Private Service Connect endpoint that is allowed to access data outside the perimeter.
+         * The Private Service Connect endpoint may be in any organization, not just the organization that the perimeter is defined in.
+         * Structure is documented below.
+         */
+        pscEndpoint?: pulumi.Input<inputs.accesscontextmanager.ServicePerimetersServicePerimeterStatusIngressPolicyIngressFromSourcePscEndpoint | undefined>;
         /**
          * A Google Cloud resource that is allowed to egress the perimeter.
          * Requests from these resources are allowed to access data outside the perimeter.
@@ -2086,6 +2364,13 @@ export declare namespace accesscontextmanager {
          */
         resource?: pulumi.Input<string | undefined>;
     }
+    interface ServicePerimetersServicePerimeterStatusIngressPolicyIngressFromSourcePscEndpoint {
+        /**
+         * The full resource name of the global forwarding rule that identifies a Private Service Connect endpoint.
+         * Forwarding rule format: `//compute.googleapis.com/projects/{PROJECT_ID}/global/forwardingRules/{FORWARDING_RULE_ID}`.
+         */
+        forwardingRule?: pulumi.Input<string | undefined>;
+    }
     interface ServicePerimetersServicePerimeterStatusIngressPolicyIngressTo {
         /**
          * A list of `ApiOperations` the sources specified in corresponding `IngressFrom`
@@ -2141,6 +2426,12 @@ export declare namespace accesscontextmanager {
         permission?: pulumi.Input<string | undefined>;
     }
     interface ServicePerimetersServicePerimeterStatusVpcAccessibleServices {
+        /**
+         * Specifies which Google services are allowed to be accessed from
+         * VPC networks in the service perimeter.
+         * Structure is documented below.
+         */
+        allowedServicePatterns?: pulumi.Input<pulumi.Input<inputs.accesscontextmanager.ServicePerimetersServicePerimeterStatusVpcAccessibleServicesAllowedServicePattern>[] | undefined>;
         /**
          * The list of APIs usable within the Service Perimeter.
          * Must be empty unless `enableRestriction` is True.
@@ -2151,6 +2442,43 @@ export declare namespace accesscontextmanager {
          * list of APIs specified in 'allowedServices'.
          */
         enableRestriction?: pulumi.Input<boolean | undefined>;
+        /**
+         * Defines the enforcement scopes of service patterns.
+         * Each value may be one of: `GOOGLE_APIS_VIA_PRIVATE_PATH`.
+         */
+        servicePatternsEnforcementScopes?: pulumi.Input<pulumi.Input<string>[] | undefined>;
+    }
+    interface ServicePerimetersServicePerimeterStatusVpcAccessibleServicesAllowedServicePattern {
+        /**
+         * Modifiers to apply to the requests that match the URL pattern.
+         * Structure is documented below.
+         */
+        modifiers?: pulumi.Input<pulumi.Input<inputs.accesscontextmanager.ServicePerimetersServicePerimeterStatusVpcAccessibleServicesAllowedServicePatternModifier>[] | undefined>;
+        /**
+         * URL pattern to allow.
+         */
+        pattern?: pulumi.Input<string | undefined>;
+        /**
+         * Supported service to allow.
+         */
+        service?: pulumi.Input<string | undefined>;
+    }
+    interface ServicePerimetersServicePerimeterStatusVpcAccessibleServicesAllowedServicePatternModifier {
+        /**
+         * Adds additional HTTP request headers.
+         * Structure is documented below.
+         */
+        addRequestHeader?: pulumi.Input<inputs.accesscontextmanager.ServicePerimetersServicePerimeterStatusVpcAccessibleServicesAllowedServicePatternModifierAddRequestHeader | undefined>;
+    }
+    interface ServicePerimetersServicePerimeterStatusVpcAccessibleServicesAllowedServicePatternModifierAddRequestHeader {
+        /**
+         * HTTP header key.
+         */
+        key: pulumi.Input<string>;
+        /**
+         * HTTP header value.
+         */
+        value: pulumi.Input<string>;
     }
 }
 export declare namespace agentregistry {
@@ -7535,6 +7863,175 @@ export declare namespace biglake {
         expression: pulumi.Input<string>;
         title: pulumi.Input<string>;
     }
+    interface HiveTableIamBindingCondition {
+        description?: pulumi.Input<string | undefined>;
+        expression: pulumi.Input<string>;
+        title: pulumi.Input<string>;
+    }
+    interface HiveTableIamMemberCondition {
+        description?: pulumi.Input<string | undefined>;
+        expression: pulumi.Input<string>;
+        title: pulumi.Input<string>;
+    }
+    interface HiveTablePartitionKey {
+        /**
+         * Comment of the field.
+         */
+        comment?: pulumi.Input<string | undefined>;
+        /**
+         * Name of the field.
+         */
+        name: pulumi.Input<string>;
+        /**
+         * Type of the field.
+         */
+        type: pulumi.Input<string>;
+    }
+    interface HiveTableStorageDescriptor {
+        /**
+         * Reducer grouping columns, clustering columns, and bucketing columns.
+         */
+        bucketCols?: pulumi.Input<pulumi.Input<string>[] | undefined>;
+        /**
+         * Specifies the columns of the table (the schema).
+         * Structure is documented below.
+         */
+        columns: pulumi.Input<pulumi.Input<inputs.biglake.HiveTableStorageDescriptorColumn>[]>;
+        /**
+         * Whether the table data is compressed.
+         */
+        compressed?: pulumi.Input<boolean | undefined>;
+        /**
+         * The fully qualified Java class name of the input format.
+         */
+        inputFormat?: pulumi.Input<string | undefined>;
+        /**
+         * The Cloud Storage URI where the table data is located.
+         */
+        locationUri?: pulumi.Input<string | undefined>;
+        /**
+         * The number of buckets in the table.
+         */
+        numBuckets?: pulumi.Input<number | undefined>;
+        /**
+         * The fully qualified Java class name of the output format.
+         */
+        outputFormat?: pulumi.Input<string | undefined>;
+        /**
+         * Key-value pairs for the storage descriptor.
+         */
+        parameters?: pulumi.Input<{
+            [key: string]: pulumi.Input<string>;
+        } | undefined>;
+        /**
+         * Serialization and deserialization information.
+         * Structure is documented below.
+         */
+        serdeInfo?: pulumi.Input<inputs.biglake.HiveTableStorageDescriptorSerdeInfo | undefined>;
+        /**
+         * Table data skew information.
+         * Structure is documented below.
+         */
+        skewedInfo?: pulumi.Input<inputs.biglake.HiveTableStorageDescriptorSkewedInfo | undefined>;
+        /**
+         * Sort order of the data in each bucket.
+         * Structure is documented below.
+         */
+        sortCols?: pulumi.Input<pulumi.Input<inputs.biglake.HiveTableStorageDescriptorSortCol>[] | undefined>;
+        /**
+         * Whether the table is stored as sub directories.
+         */
+        storedAsSubDirs?: pulumi.Input<boolean | undefined>;
+    }
+    interface HiveTableStorageDescriptorColumn {
+        /**
+         * Comment of the field.
+         */
+        comment?: pulumi.Input<string | undefined>;
+        /**
+         * Name of the field.
+         */
+        name: pulumi.Input<string>;
+        /**
+         * Type of the field.
+         */
+        type: pulumi.Input<string>;
+    }
+    interface HiveTableStorageDescriptorSerdeInfo {
+        /**
+         * Description of the SerDe.
+         */
+        description?: pulumi.Input<string | undefined>;
+        /**
+         * The fully qualified Java class name of the deserializer.
+         */
+        deserializerClass?: pulumi.Input<string | undefined>;
+        /**
+         * Name of the SerDe, table name by default.
+         */
+        name: pulumi.Input<string>;
+        /**
+         * Parameters of the SerDe.
+         */
+        parameters?: pulumi.Input<{
+            [key: string]: pulumi.Input<string>;
+        } | undefined>;
+        /**
+         * The SerDe type.
+         * Possible values are: `SERDE_TYPE_UNSPECIFIED`, `HIVE`, `SCHEMA_REGISTRY`.
+         */
+        serdeType?: pulumi.Input<string | undefined>;
+        /**
+         * The fully qualified Java class name of the serialization library.
+         */
+        serializationLib: pulumi.Input<string>;
+        /**
+         * The fully qualified Java class name of the serializer.
+         */
+        serializerClass?: pulumi.Input<string | undefined>;
+    }
+    interface HiveTableStorageDescriptorSkewedInfo {
+        /**
+         * The column names that are skewed.
+         */
+        skewedColNames: pulumi.Input<pulumi.Input<string>[]>;
+        /**
+         * The skewed column values.
+         * Structure is documented below.
+         */
+        skewedColValues: pulumi.Input<pulumi.Input<inputs.biglake.HiveTableStorageDescriptorSkewedInfoSkewedColValue>[]>;
+        /**
+         * The skewed key values locations.
+         * Structure is documented below.
+         */
+        skewedKeyValuesLocations: pulumi.Input<pulumi.Input<inputs.biglake.HiveTableStorageDescriptorSkewedInfoSkewedKeyValuesLocation>[]>;
+    }
+    interface HiveTableStorageDescriptorSkewedInfoSkewedColValue {
+        /**
+         * (Required)
+         */
+        values: pulumi.Input<pulumi.Input<string>[]>;
+    }
+    interface HiveTableStorageDescriptorSkewedInfoSkewedKeyValuesLocation {
+        /**
+         * (Required)
+         */
+        location: pulumi.Input<string>;
+        /**
+         * (Required)
+         */
+        values: pulumi.Input<pulumi.Input<string>[]>;
+    }
+    interface HiveTableStorageDescriptorSortCol {
+        /**
+         * The column name.
+         */
+        col: pulumi.Input<string>;
+        /**
+         * Sort order: 1 for Ascending, 0 for Descending.
+         */
+        order: pulumi.Input<number>;
+    }
     interface IcebergCatalogFederatedCatalogOptions {
         /**
          * Configuration for an AWS Glue remote catalog. Exactly one of
@@ -35941,6 +36438,134 @@ export declare namespace compute {
          */
         serviceDirectoryRegion?: pulumi.Input<string | undefined>;
     }
+    interface GlobalVmExtensionPolicyExtensionPolicy {
+        /**
+         * The identifier for this object. Format specified above.
+         */
+        extensionName: pulumi.Input<string>;
+        /**
+         * The version pinning for the extension.
+         */
+        pinnedVersion?: pulumi.Input<string | undefined>;
+        /**
+         * String configuration payload.
+         */
+        stringConfig?: pulumi.Input<string | undefined>;
+    }
+    interface GlobalVmExtensionPolicyInstanceSelector {
+        /**
+         * LabelSelector matches VM labels.
+         * Structure is documented below.
+         */
+        labelSelector?: pulumi.Input<inputs.compute.GlobalVmExtensionPolicyInstanceSelectorLabelSelector | undefined>;
+    }
+    interface GlobalVmExtensionPolicyInstanceSelectorLabelSelector {
+        /**
+         * Labels as key value pairs.
+         */
+        inclusionLabels?: pulumi.Input<{
+            [key: string]: pulumi.Input<string>;
+        } | undefined>;
+    }
+    interface GlobalVmExtensionPolicyRolloutOperation {
+        /**
+         * Rollout input settings.
+         * Structure is documented below.
+         */
+        rolloutInput: pulumi.Input<inputs.compute.GlobalVmExtensionPolicyRolloutOperationRolloutInput>;
+        /**
+         * (Output)
+         * Rollout status.
+         * Structure is documented below.
+         */
+        rolloutStatuses?: pulumi.Input<pulumi.Input<inputs.compute.GlobalVmExtensionPolicyRolloutOperationRolloutStatus>[] | undefined>;
+    }
+    interface GlobalVmExtensionPolicyRolloutOperationRolloutInput {
+        /**
+         * Specifies the behavior of the rollout if a conflict is detected.
+         */
+        conflictBehavior?: pulumi.Input<string | undefined>;
+        /**
+         * The name of the rollout plan.
+         */
+        name?: pulumi.Input<string | undefined>;
+        /**
+         * Specifies the predefined rollout plan for the policy.
+         */
+        predefinedRolloutPlan?: pulumi.Input<string | undefined>;
+        /**
+         * The UUID that identifies a policy rollout retry attempt. It should only be set when retrying an existing rollout. Updating this field along with other policy fields (description, extension_policies, instance_selectors, priority) in the same plan will return an error.
+         *
+         * <a name="nestedRolloutOperationRolloutStatus"></a>The `rolloutStatus` block contains:
+         */
+        retryUuid?: pulumi.Input<string | undefined>;
+    }
+    interface GlobalVmExtensionPolicyRolloutOperationRolloutStatus {
+        /**
+         * The current rollouts for the latest version of the resource.
+         */
+        currentRollouts?: pulumi.Input<pulumi.Input<inputs.compute.GlobalVmExtensionPolicyRolloutOperationRolloutStatusCurrentRollout>[] | undefined>;
+        /**
+         * Rollout status of the previous rollout.
+         */
+        previousRollouts?: pulumi.Input<pulumi.Input<inputs.compute.GlobalVmExtensionPolicyRolloutOperationRolloutStatusPreviousRollout>[] | undefined>;
+    }
+    interface GlobalVmExtensionPolicyRolloutOperationRolloutStatusCurrentRollout {
+        /**
+         * The rollout status for each location.
+         */
+        locationRolloutStatuses?: pulumi.Input<pulumi.Input<inputs.compute.GlobalVmExtensionPolicyRolloutOperationRolloutStatusCurrentRolloutLocationRolloutStatus>[] | undefined>;
+        /**
+         * The name of the rollout.
+         */
+        rollout?: pulumi.Input<string | undefined>;
+        /**
+         * The name of the rollout plan.
+         */
+        rolloutPlan?: pulumi.Input<string | undefined>;
+        /**
+         * The overall state of the rollout.
+         */
+        state?: pulumi.Input<string | undefined>;
+    }
+    interface GlobalVmExtensionPolicyRolloutOperationRolloutStatusCurrentRolloutLocationRolloutStatus {
+        /**
+         * The identifier for this object. Format specified above.
+         */
+        locationName: pulumi.Input<string>;
+        /**
+         * The state of the location rollout.
+         */
+        state?: pulumi.Input<string | undefined>;
+    }
+    interface GlobalVmExtensionPolicyRolloutOperationRolloutStatusPreviousRollout {
+        /**
+         * The rollout status for each location.
+         */
+        locationRolloutStatuses?: pulumi.Input<pulumi.Input<inputs.compute.GlobalVmExtensionPolicyRolloutOperationRolloutStatusPreviousRolloutLocationRolloutStatus>[] | undefined>;
+        /**
+         * The name of the rollout.
+         */
+        rollout?: pulumi.Input<string | undefined>;
+        /**
+         * The name of the rollout plan.
+         */
+        rolloutPlan?: pulumi.Input<string | undefined>;
+        /**
+         * The overall state of the rollout.
+         */
+        state?: pulumi.Input<string | undefined>;
+    }
+    interface GlobalVmExtensionPolicyRolloutOperationRolloutStatusPreviousRolloutLocationRolloutStatus {
+        /**
+         * The identifier for this object. Format specified above.
+         */
+        locationName: pulumi.Input<string>;
+        /**
+         * The state of the location rollout.
+         */
+        state?: pulumi.Input<string | undefined>;
+    }
     interface HaVpnGatewayParams {
         /**
          * Resource manager tags to be bound to the HaVpnGateway. Tag keys and values have the
@@ -37351,7 +37976,7 @@ export declare namespace compute {
          */
         preemptionNoticeDuration?: pulumi.Input<inputs.compute.InstanceFromMachineImageSchedulingPreemptionNoticeDuration | undefined>;
         /**
-         * Whether the instance is spot. If this is set as SPOT.
+         * Describes the desired provisioning model for the instance. Possible values are STANDARD, SPOT, FLEX_START, and RESERVATION_BOUND. For STANDARD, resources are provisioned immediately. For SPOT, resources are offered at a discount compared to standard pricing but may be preempted. For FLEX_START, resources are offered at a discount with flexible start times. For RESERVATION_BOUND, the instance is bound to a specific reservation and will only consume capacity from that reservation.
          */
         provisioningModel?: pulumi.Input<string | undefined>;
         /**
@@ -38004,7 +38629,7 @@ export declare namespace compute {
          */
         preemptionNoticeDuration?: pulumi.Input<inputs.compute.InstanceFromTemplateSchedulingPreemptionNoticeDuration | undefined>;
         /**
-         * Whether the instance is spot. If this is set as SPOT.
+         * Describes the desired provisioning model for the instance. Possible values are STANDARD, SPOT, FLEX_START, and RESERVATION_BOUND. For STANDARD, resources are provisioned immediately. For SPOT, resources are offered at a discount compared to standard pricing but may be preempted. For FLEX_START, resources are offered at a discount with flexible start times. For RESERVATION_BOUND, the instance is bound to a specific reservation and will only consume capacity from that reservation.
          */
         provisioningModel?: pulumi.Input<string | undefined>;
         /**
@@ -38748,10 +39373,13 @@ export declare namespace compute {
          */
         preemptionNoticeDuration?: pulumi.Input<inputs.compute.InstanceSchedulingPreemptionNoticeDuration | undefined>;
         /**
-         * Describe the type of preemptible VM. This field accepts the value `STANDARD` or `SPOT`. If the value is `STANDARD`, there will be no discount. If this   is set to `SPOT`,
+         * Describe the type of provisioning model for the instance. This field accepts the value `STANDARD`, `SPOT`, `FLEX_START`, or `RESERVATION_BOUND`. If the value is `STANDARD`, there will be no discount. If this is set to `SPOT`,
          * `preemptible` should be `true` and `automaticRestart` should be
          * `false`. For more info about
-         * `SPOT`, read [here](https://cloud.google.com/compute/docs/instances/spot)
+         * `SPOT`, read [here](https://cloud.google.com/compute/docs/instances/spot).
+         * If this is set to `FLEX_START`, `automaticRestart` should be `false` and `instanceTerminationAction` should be set to `DELETE`. A `maxRunDuration` must also be specified. For more info about
+         * `FLEX_START`, read [here](https://cloud.google.com/compute/docs/instances/flex-start-vms).
+         * If this is set to `RESERVATION_BOUND`, the instance is bound to a specific reservation and will only consume capacity from that reservation. A `reservationAffinity` block with `type` set to `SPECIFIC_RESERVATION` should also be configured.
          */
         provisioningModel?: pulumi.Input<string | undefined>;
         /**
@@ -39450,10 +40078,13 @@ export declare namespace compute {
          */
         preemptionNoticeDuration?: pulumi.Input<inputs.compute.InstanceTemplateSchedulingPreemptionNoticeDuration | undefined>;
         /**
-         * Describe the type of preemptible VM. This field accepts the value `STANDARD` or `SPOT`. If the value is `STANDARD`, there will be no discount. If this   is set to `SPOT`,
+         * Describe the type of provisioning model for the instance. This field accepts the value `STANDARD`, `SPOT`, `FLEX_START`, or `RESERVATION_BOUND`. If the value is `STANDARD`, there will be no discount. If this is set to `SPOT`,
          * `preemptible` should be `true` and `automaticRestart` should be
          * `false`. For more info about
-         * `SPOT`, read [here](https://cloud.google.com/compute/docs/instances/spot)
+         * `SPOT`, read [here](https://cloud.google.com/compute/docs/instances/spot).
+         * If this is set to `FLEX_START`, `automaticRestart` should be `false` and `instanceTerminationAction` should be set to `DELETE`. A `maxRunDuration` must also be specified. For more info about
+         * `FLEX_START`, read [here](https://cloud.google.com/compute/docs/instances/flex-start-vms).
+         * If this is set to `RESERVATION_BOUND`, the instance is bound to a specific reservation and will only consume capacity from that reservation. A `reservationAffinity` block with `type` set to `SPECIFIC_RESERVATION` should also be configured.
          */
         provisioningModel?: pulumi.Input<string | undefined>;
         /**
@@ -44101,10 +44732,13 @@ export declare namespace compute {
          */
         preemptionNoticeDuration?: pulumi.Input<inputs.compute.RegionInstanceTemplateSchedulingPreemptionNoticeDuration | undefined>;
         /**
-         * Describe the type of preemptible VM. This field accepts the value `STANDARD` or `SPOT`. If the value is `STANDARD`, there will be no discount. If this   is set to `SPOT`,
+         * Describe the type of provisioning model for the instance. This field accepts the value `STANDARD`, `SPOT`, `FLEX_START`, or `RESERVATION_BOUND`. If the value is `STANDARD`, there will be no discount. If this is set to `SPOT`,
          * `preemptible` should be `true` and `automaticRestart` should be
          * `false`. For more info about
-         * `SPOT`, read [here](https://cloud.google.com/compute/docs/instances/spot)
+         * `SPOT`, read [here](https://cloud.google.com/compute/docs/instances/spot).
+         * If this is set to `FLEX_START`, `automaticRestart` should be `false` and `instanceTerminationAction` should be set to `DELETE`. A `maxRunDuration` must also be specified. For more info about
+         * `FLEX_START`, read [here](https://cloud.google.com/compute/docs/instances/flex-start-vms).
+         * If this is set to `RESERVATION_BOUND`, the instance is bound to a specific reservation and will only consume capacity from that reservation. A `reservationAffinity` block with `type` set to `SPECIFIC_RESERVATION` should also be configured.
          */
         provisioningModel?: pulumi.Input<string | undefined>;
         /**
@@ -56750,11 +57384,11 @@ export declare namespace container {
     }
     interface ClusterNodeConfigNodeImageConfig {
         /**
-         * The name of the image to use for this node.
+         * The Operating System image for the node pool. This is a private feature, please contact your Google account team for allowlisting this feature.
          */
         image?: pulumi.Input<string | undefined>;
         /**
-         * The project containing the image to use for this node.
+         * The GCP project storing the Operating System image for the node pool. This is a private feature, please contact your Google account team for allowlisting this feature.
          */
         imageProject?: pulumi.Input<string | undefined>;
     }
@@ -58235,11 +58869,11 @@ export declare namespace container {
     }
     interface ClusterNodePoolNodeConfigNodeImageConfig {
         /**
-         * The name of the image to use for this node.
+         * The Operating System image for the node pool. This is a private feature, please contact your Google account team for allowlisting this feature.
          */
         image?: pulumi.Input<string | undefined>;
         /**
-         * The project containing the image to use for this node.
+         * The GCP project storing the Operating System image for the node pool. This is a private feature, please contact your Google account team for allowlisting this feature.
          */
         imageProject?: pulumi.Input<string | undefined>;
     }
@@ -59694,11 +60328,11 @@ export declare namespace container {
     }
     interface NodePoolNodeConfigNodeImageConfig {
         /**
-         * The name of the image to use for this node.
+         * The Operating System image for the node pool. This is a private feature, please contact your Google account team for allowlisting this feature.
          */
         image?: pulumi.Input<string | undefined>;
         /**
-         * The project containing the image to use for this node.
+         * The GCP project storing the Operating System image for the node pool. This is a private feature, please contact your Google account team for allowlisting this feature.
          */
         imageProject?: pulumi.Input<string | undefined>;
     }
@@ -61196,6 +61830,10 @@ export declare namespace dataform {
          * The Git remote's default branch name.
          */
         defaultBranch: pulumi.Input<string>;
+        /**
+         * The name of the Developer Connect GitRepositoryLink to use for machine credentials. Must be in the format projects/*&#47;locations/*&#47;connections/*&#47;gitRepositoryLinks/*.
+         */
+        gitRepositoryLink?: pulumi.Input<string | undefined>;
         /**
          * Authentication fields for remote uris using SSH protocol.
          * Structure is documented below.
@@ -69260,7 +69898,13 @@ export declare namespace dataproc {
     }
     interface ClusterClusterConfigGceClusterConfigConfidentialInstanceConfig {
         /**
-         * Defines whether the instance should have confidential compute enabled.
+         * Defines the confidential compute type of the instance. Valid values are `"CONFIDENTIAL_INSTANCE_TYPE_UNSPECIFIED"`, `"SEV"`, `"SEV_SNP"`, `"TDX"`.
+         */
+        confidentialInstanceType?: pulumi.Input<string | undefined>;
+        /**
+         * Defines whether the instance should have confidential compute enabled. `enableConfidentialCompute` is deprecated and will be removed in a future major release. Use `confidentialInstanceType` instead.
+         *
+         * @deprecated enable_confidential_compute is deprecated and will be removed in a future major release. Use confidentialInstanceType instead.
          */
         enableConfidentialCompute?: pulumi.Input<boolean | undefined>;
     }
@@ -69450,6 +70094,10 @@ export declare namespace dataproc {
         instanceSelectionResults?: pulumi.Input<pulumi.Input<inputs.dataproc.ClusterClusterConfigMasterConfigInstanceFlexibilityPolicyInstanceSelectionResult>[] | undefined>;
     }
     interface ClusterClusterConfigMasterConfigInstanceFlexibilityPolicyInstanceSelectionList {
+        /**
+         * Disk configuration to apply to the instances in this instance selection.
+         */
+        diskConfig?: pulumi.Input<inputs.dataproc.ClusterClusterConfigMasterConfigInstanceFlexibilityPolicyInstanceSelectionListDiskConfig | undefined>;
         /**
          * Full machine-type names, e.g. `"n1-standard-16"`.
          */
@@ -69459,6 +70107,32 @@ export declare namespace dataproc {
          */
         rank?: pulumi.Input<number | undefined>;
     }
+    interface ClusterClusterConfigMasterConfigInstanceFlexibilityPolicyInstanceSelectionListDiskConfig {
+        /**
+         * Indicates how many IOPS to provision for the disk.
+         */
+        bootDiskProvisionedIops?: pulumi.Input<number | undefined>;
+        /**
+         * Indicates how much throughput to provision for the disk.
+         */
+        bootDiskProvisionedThroughput?: pulumi.Input<number | undefined>;
+        /**
+         * Size of the primary disk attached to each node, specified in GB. The smallest allowed disk size is 10GB.
+         */
+        bootDiskSizeGb?: pulumi.Input<number | undefined>;
+        /**
+         * The disk type of the primary disk attached to each node. Such as "pd-ssd" or "pd-standard".
+         */
+        bootDiskType?: pulumi.Input<string | undefined>;
+        /**
+         * Interface type of local SSDs (no Local SSDs or NVMe).
+         */
+        localSsdInterface?: pulumi.Input<string | undefined>;
+        /**
+         * The amount of local SSD disks that will be attached to each cluster node. Defaults to 0.
+         */
+        numLocalSsds?: pulumi.Input<number | undefined>;
+    }
     interface ClusterClusterConfigMasterConfigInstanceFlexibilityPolicyInstanceSelectionResult {
         /**
          * Full machine-type names, e.g. "n1-standard-16".
@@ -69553,6 +70227,10 @@ export declare namespace dataproc {
         provisioningModelMix?: pulumi.Input<inputs.dataproc.ClusterClusterConfigPreemptibleWorkerConfigInstanceFlexibilityPolicyProvisioningModelMix | undefined>;
     }
     interface ClusterClusterConfigPreemptibleWorkerConfigInstanceFlexibilityPolicyInstanceSelectionList {
+        /**
+         * Optional. Disk configuration to apply to the instances in this instance selection.
+         */
+        diskConfig?: pulumi.Input<inputs.dataproc.ClusterClusterConfigPreemptibleWorkerConfigInstanceFlexibilityPolicyInstanceSelectionListDiskConfig | undefined>;
         /**
          * Full machine-type names, e.g. `"n1-standard-16"`.
          */
@@ -69562,6 +70240,32 @@ export declare namespace dataproc {
          */
         rank?: pulumi.Input<number | undefined>;
     }
+    interface ClusterClusterConfigPreemptibleWorkerConfigInstanceFlexibilityPolicyInstanceSelectionListDiskConfig {
+        /**
+         * Indicates how many IOPS to provision for the disk. This sets the number of I/O operations per second that the disk can handle.
+         */
+        bootDiskProvisionedIops?: pulumi.Input<number | undefined>;
+        /**
+         * Indicates how much throughput to provision for the disk. This sets the number of throughput mb per second that the disk can handle.
+         */
+        bootDiskProvisionedThroughput?: pulumi.Input<number | undefined>;
+        /**
+         * Size of the primary disk attached to each node, specified in GB. The smallest allowed disk size is 10GB.
+         */
+        bootDiskSizeGb?: pulumi.Input<number | undefined>;
+        /**
+         * The disk type of the primary disk attached to each node. Such as "pd-ssd" or "pd-standard".
+         */
+        bootDiskType?: pulumi.Input<string | undefined>;
+        /**
+         * Interface type of local SSDs (no Local SSDs or NVMe). Valid values: "scsi" (Small Computer System Interface), "nvme" (Non-Volatile Memory Express).
+         */
+        localSsdInterface?: pulumi.Input<string | undefined>;
+        /**
+         * The amount of local SSD disks that will be attached to each cluster node. Defaults to 0.
+         */
+        numLocalSsds?: pulumi.Input<number | undefined>;
+    }
     interface ClusterClusterConfigPreemptibleWorkerConfigInstanceFlexibilityPolicyInstanceSelectionResult {
         /**
          * Full machine-type names, e.g. "n1-standard-16".
@@ -69825,6 +70529,10 @@ export declare namespace dataproc {
         instanceSelectionResults?: pulumi.Input<pulumi.Input<inputs.dataproc.ClusterClusterConfigWorkerConfigInstanceFlexibilityPolicyInstanceSelectionResult>[] | undefined>;
     }
     interface ClusterClusterConfigWorkerConfigInstanceFlexibilityPolicyInstanceSelectionList {
+        /**
+         * Disk configuration to apply to the instances in this instance selection.
+         */
+        diskConfig?: pulumi.Input<inputs.dataproc.ClusterClusterConfigWorkerConfigInstanceFlexibilityPolicyInstanceSelectionListDiskConfig | undefined>;
         /**
          * Full machine-type names, e.g. `"n1-standard-16"`.
          */
@@ -69834,6 +70542,32 @@ export declare namespace dataproc {
          */
         rank?: pulumi.Input<number | undefined>;
     }
+    interface ClusterClusterConfigWorkerConfigInstanceFlexibilityPolicyInstanceSelectionListDiskConfig {
+        /**
+         * Indicates how many IOPS to provision for the disk.
+         */
+        bootDiskProvisionedIops?: pulumi.Input<number | undefined>;
+        /**
+         * Indicates how much throughput to provision for the disk.
+         */
+        bootDiskProvisionedThroughput?: pulumi.Input<number | undefined>;
+        /**
+         * Size of the primary disk attached to each node, specified in GB. The smallest allowed disk size is 10GB.
+         */
+        bootDiskSizeGb?: pulumi.Input<number | undefined>;
+        /**
+         * The disk type of the primary disk attached to each node. Such as "pd-ssd" or "pd-standard".
+         */
+        bootDiskType?: pulumi.Input<string | undefined>;
+        /**
+         * Interface type of local SSDs (no Local SSDs or NVMe).
+         */
+        localSsdInterface?: pulumi.Input<string | undefined>;
+        /**
+         * The amount of local SSD disks that will be attached to each cluster node. Defaults to 0.
+         */
+        numLocalSsds?: pulumi.Input<number | undefined>;
+    }
     interface ClusterClusterConfigWorkerConfigInstanceFlexibilityPolicyInstanceSelectionResult {
         /**
          * Full machine-type names, e.g. "n1-standard-16".
@@ -80159,10 +80893,18 @@ export declare namespace discoveryengine {
     interface DataStoreDocumentProcessingConfigDefaultParsingConfigDigitalParsingConfig {
     }
     interface DataStoreDocumentProcessingConfigDefaultParsingConfigLayoutParsingConfig {
+        /**
+         * If true, the processed document will be made available for the GetProcessedDocument API.
+         */
+        enableGetProcessedDocument?: pulumi.Input<boolean | undefined>;
         /**
          * If true, the LLM based annotation is added to the image during parsing.
          */
         enableImageAnnotation?: pulumi.Input<boolean | undefined>;
+        /**
+         * If true, the pdf layout will be refined using an LLM.
+         */
+        enableLlmLayoutParsing?: pulumi.Input<boolean | undefined>;
         /**
          * If true, the LLM based annotation is added to the table during parsing.
          */
@@ -80213,10 +80955,18 @@ export declare namespace discoveryengine {
     interface DataStoreDocumentProcessingConfigParsingConfigOverrideDigitalParsingConfig {
     }
     interface DataStoreDocumentProcessingConfigParsingConfigOverrideLayoutParsingConfig {
+        /**
+         * If true, the processed document will be made available for the GetProcessedDocument API.
+         */
+        enableGetProcessedDocument?: pulumi.Input<boolean | undefined>;
         /**
          * If true, the LLM based annotation is added to the image during parsing.
          */
         enableImageAnnotation?: pulumi.Input<boolean | undefined>;
+        /**
+         * If true, the pdf layout will be refined using an LLM.
+         */
+        enableLlmLayoutParsing?: pulumi.Input<boolean | undefined>;
         /**
          * If true, the LLM based annotation is added to the table during parsing.
          */
@@ -118187,6 +118937,10 @@ export declare namespace sql {
          * The project ID of consumer service project of this consumer endpoint.
          */
         consumerServiceProjectId?: pulumi.Input<string | undefined>;
+        /**
+         * (Output) The status of the automated DNS provisioning for the instance.
+         */
+        instanceAutoDnsStatus?: pulumi.Input<string | undefined>;
         /**
          * (Output) The IP address of the consumer endpoint.
          */
@@ -118203,6 +118957,10 @@ export declare namespace sql {
          * (Output) The connection status of the consumer endpoint.
          */
         status?: pulumi.Input<string | undefined>;
+        /**
+         * (Output) The status of the automated DNS provisioning for the write endpoint.
+         */
+        writeEndpointAutoDnsStatus?: pulumi.Input<string | undefined>;
     }
     interface DatabaseInstanceSettingsLocationPreference {
         /**
@@ -124449,6 +125207,10 @@ export declare namespace workbench {
         metadata?: pulumi.Input<{
             [key: string]: pulumi.Input<string>;
         } | undefined>;
+        /**
+         * Optional. The minimum CPU platform to use for this instance.
+         */
+        minCpuPlatform?: pulumi.Input<string | undefined>;
         /**
          * The network interfaces for the VM. Supports only one interface.
          * Structure is documented below.
@@ -124561,6 +125323,10 @@ export declare namespace workbench {
          * Learn more about using your own encryption keys.'
          */
         kmsKey?: pulumi.Input<string | undefined>;
+        /**
+         * Optional. Resource policies applied to this disk.
+         */
+        resourcePolicies?: pulumi.Input<pulumi.Input<string>[] | undefined>;
     }
     interface InstanceGceSetupNetworkInterface {
         /**
@@ -124913,6 +125679,12 @@ export declare namespace workstations {
          * See https://cloud.google.com/workstations/docs/reference/rest/v1/projects.locations.workstationClusters.workstationConfigs#GceInstance.FIELDS.enable_nested_virtualization
          */
         enableNestedVirtualization?: pulumi.Input<boolean | undefined>;
+        /**
+         * Client-specified metadata key-value pairs, to be passed to the start-up script in the VM.
+         */
+        instanceMetadata?: pulumi.Input<{
+            [key: string]: pulumi.Input<string>;
+        } | undefined>;
         /**
          * The name of a Compute Engine machine type.
          */