@pulumi/gitlab 8.4.0-alpha.1726827157 → 8.4.0

package/applicationSettings.d.ts

@@ -1,4 +1,6 @@
 import * as pulumi from "@pulumi/pulumi";
+import * as inputs from "./types/input";
+import * as outputs from "./types/output";
 /**
  * ## Example Usage
  */
@@ -42,6 +44,10 @@ export declare class ApplicationSettings extends pulumi.CustomResource {
      * (If enabled, requires: akismet*api*key) Enable or disable Akismet spam protection.
      */
     readonly akismetEnabled: pulumi.Output<boolean>;
+    /**
+     * Set to true to allow users to delete their accounts. Premium and Ultimate only.
+     */
+    readonly allowAccountDeletion: pulumi.Output<boolean>;
     /**
      * Set to true to allow group owners to manage LDAP.
      */
@@ -54,10 +60,22 @@ export declare class ApplicationSettings extends pulumi.CustomResource {
      * Allow requests to the local network from web hooks and services.
      */
     readonly allowLocalRequestsFromWebHooksAndServices: pulumi.Output<boolean>;
+    /**
+     * Indicates whether users assigned up to the Guest role can create groups and personal projects.
+     */
+    readonly allowProjectCreationForGuestAndBelow: pulumi.Output<boolean>;
+    /**
+     * Allow using a registration token to create a runner.
+     */
+    readonly allowRunnerRegistrationToken: pulumi.Output<boolean>;
     /**
      * Set the duration for which the jobs are considered as old and expired. After that time passes, the jobs are archived and no longer able to be retried. Make it empty to never expire jobs. It has to be no less than 1 day, for example: 15 days, 1 month, 2 years.
      */
     readonly archiveBuildsInHumanReadable: pulumi.Output<string>;
+    /**
+     * Maximum limit of AsciiDoc include directives being processed in any one document. Maximum: 64.
+     */
+    readonly asciidocMaxIncludes: pulumi.Output<number>;
     /**
      * Assets that match these domains are not proxied. Wildcards allowed. Your GitLab installation URL is automatically allowlisted. GitLab restart is required to apply changes.
      */
@@ -78,6 +96,10 @@ export declare class ApplicationSettings extends pulumi.CustomResource {
      * By default, we write to the authorizedKeys file to support Git over SSH without additional configuration. GitLab can be optimized to authenticate SSH keys via the database file. Only disable this if you have configured your OpenSSH server to use the AuthorizedKeysCommand.
      */
     readonly authorizedKeysEnabled: pulumi.Output<boolean>;
+    /**
+     * When enabled, users will get automatically banned from the application when they download more than the maximum number of unique projects in the time period specified by max*number*of*repository*downloads and max*number*of*repository*downloads*within*time_period respectively. Introduced in GitLab 15.4. Self-managed, Ultimate only.
+     */
+    readonly autoBanUserOnExcessiveProjectsDownload: pulumi.Output<boolean>;
     /**
      * Specify a domain to use by default for every project’s Auto Review Apps and Auto Deploy stages.
      */
@@ -90,6 +112,18 @@ export declare class ApplicationSettings extends pulumi.CustomResource {
      * Enabling this permits automatic allocation of purchased storage in a namespace.
      */
     readonly automaticPurchasedStorageAllocation: pulumi.Output<boolean>;
+    /**
+     * Maximum simultaneous Direct Transfer batches to process.
+     */
+    readonly bulkImportConcurrentPipelineBatchLimit: pulumi.Output<number>;
+    /**
+     * Enable migrating GitLab groups by direct transfer. Introduced in GitLab 15.8.
+     */
+    readonly bulkImportEnabled: pulumi.Output<boolean>;
+    /**
+     * Maximum download file size when importing from source GitLab instances by direct transfer. Introduced in GitLab 16.3.
+     */
+    readonly bulkImportMaxDownloadFileSize: pulumi.Output<number>;
     /**
      * Indicates whether users can create top-level groups. Introduced in GitLab 15.5.
      */
@@ -98,10 +132,30 @@ export declare class ApplicationSettings extends pulumi.CustomResource {
      * Enabling this makes only licensed EE features available to projects if the project namespace’s plan includes the feature or if the project is public.
      */
     readonly checkNamespacePlan: pulumi.Output<boolean>;
+    /**
+     * The maximum number of includes per pipeline.
+     */
+    readonly ciMaxIncludes: pulumi.Output<number>;
+    /**
+     * The maximum amount of memory, in bytes, that can be allocated for the pipeline configuration, with all included YAML configuration files.
+     */
+    readonly ciMaxTotalYamlSizeBytes: pulumi.Output<number>;
     /**
      * Custom hostname (for private commit emails).
      */
     readonly commitEmailHostname: pulumi.Output<string>;
+    /**
+     * Maximum number of simultaneous import jobs for the Bitbucket Cloud importer. Introduced in GitLab 16.11.
+     */
+    readonly concurrentBitbucketImportJobsLimit: pulumi.Output<number>;
+    /**
+     * Maximum number of simultaneous import jobs for the Bitbucket Server importer. Introduced in GitLab 16.11.
+     */
+    readonly concurrentBitbucketServerImportJobsLimit: pulumi.Output<number>;
+    /**
+     * Maximum number of simultaneous import jobs for the GitHub importer. Introduced in GitLab 16.11.
+     */
+    readonly concurrentGithubImportJobsLimit: pulumi.Output<number>;
     /**
      * Enable cleanup policies for all projects.
      */
@@ -130,6 +184,14 @@ export declare class ApplicationSettings extends pulumi.CustomResource {
      * Enable automatic deactivation of dormant users.
      */
     readonly deactivateDormantUsers: pulumi.Output<boolean>;
+    /**
+     * Length of time (in days) after which a user is considered dormant. Introduced in GitLab 15.3.
+     */
+    readonly deactivateDormantUsersPeriod: pulumi.Output<number>;
+    /**
+     * Default timeout for decompressing archived files, in seconds. Set to 0 to disable timeouts. Introduced in GitLab 16.4.
+     */
+    readonly decompressArchiveFileTimeout: pulumi.Output<number>;
     /**
      * Set the default expiration time for each job’s artifacts.
      */
@@ -142,6 +204,10 @@ export declare class ApplicationSettings extends pulumi.CustomResource {
      * Determine if developers can push to the default branch. Can take: 0 (not protected, both users with the Developer role or Maintainer role can push new commits and force push), 1 (partially protected, users with the Developer role or Maintainer role can push new commits, but cannot force push) or 2 (fully protected, users with the Developer or Maintainer role cannot push new commits, but users with the Developer or Maintainer role can; no one can force push) as a parameter. Default is 2.
      */
     readonly defaultBranchProtection: pulumi.Output<number>;
+    /**
+     * The default*branch*protection*defaults attribute describes the default branch protection defaults. All parameters are optional.
+     */
+    readonly defaultBranchProtectionDefaults: pulumi.Output<outputs.ApplicationSettingsDefaultBranchProtectionDefaults>;
     /**
      * Default CI/CD configuration file and path for new projects (.gitlab-ci.yml if not set).
      */
@@ -150,6 +216,10 @@ export declare class ApplicationSettings extends pulumi.CustomResource {
      * What visibility level new groups receive. Can take private, internal and public as a parameter.
      */
     readonly defaultGroupVisibility: pulumi.Output<string>;
+    /**
+     * Default preferred language for users who are not logged in.
+     */
+    readonly defaultPreferredLanguage: pulumi.Output<string>;
     /**
      * Default project creation protection. Can take: 0 (No one), 1 (Maintainers) or 2 (Developers + Maintainers).
      */
@@ -166,14 +236,30 @@ export declare class ApplicationSettings extends pulumi.CustomResource {
      * What visibility level new snippets receive. Can take private, internal and public as a parameter.
      */
     readonly defaultSnippetVisibility: pulumi.Output<string>;
+    /**
+     * Default syntax highlighting theme for users who are new or not signed in. See IDs of available themes (https://gitlab.com/gitlab-org/gitlab/blob/master/lib/gitlab/themes.rb#L16)
+     */
+    readonly defaultSyntaxHighlightingTheme: pulumi.Output<number>;
     /**
      * Enable inactive project deletion feature. Introduced in GitLab 14.10. Became operational in GitLab 15.0 (with feature flag inactive*projects*deletion).
      */
     readonly deleteInactiveProjects: pulumi.Output<boolean>;
+    /**
+     * Specifies whether users who have not confirmed their email should be deleted. When set to true, unconfirmed users are deleted after unconfirmed*users*delete*after*days days. Introduced in GitLab 16.1. Self-managed, Premium and Ultimate only.
+     */
+    readonly deleteUnconfirmedUsers: pulumi.Output<boolean>;
     /**
      * The number of days to wait before deleting a project or group that is marked for deletion. Value must be between 1 and 90.
      */
     readonly deletionAdjournedPeriod: pulumi.Output<number>;
+    /**
+     * (If enabled, requires diagramsnet_url) Enable Diagrams.net integration.
+     */
+    readonly diagramsnetEnabled: pulumi.Output<boolean>;
+    /**
+     * The Diagrams.net instance URL for integration.
+     */
+    readonly diagramsnetUrl: pulumi.Output<string>;
     /**
      * Maximum files in a diff.
      */
@@ -186,10 +272,18 @@ export declare class ApplicationSettings extends pulumi.CustomResource {
      * Maximum diff patch size, in bytes.
      */
     readonly diffMaxPatchBytes: pulumi.Output<number>;
+    /**
+     * Stops administrators from connecting their GitLab accounts to non-trusted OAuth 2.0 applications that have the api, read*api, read*repository, write*repository, read*registry, write_registry, or sudo scopes. Introduced in GitLab 15.6.
+     */
+    readonly disableAdminOauthScopes: pulumi.Output<boolean>;
     /**
      * Disable display of RSS/Atom and calendar feed tokens (introduced in GitLab 13.7).
      */
     readonly disableFeedToken: pulumi.Output<boolean>;
+    /**
+     * Disable personal access tokens. Introduced in GitLab 15.7. Self-managed, Premium and Ultimate only. There is no method available to enable a personal access token that’s been disabled through the API. This is a known issue.
+     */
+    readonly disablePersonalAccessTokens: pulumi.Output<boolean>;
     /**
      * Disabled OAuth sign-in sources.
      */
@@ -210,10 +304,18 @@ export declare class ApplicationSettings extends pulumi.CustomResource {
      * Users with email addresses that match these domains cannot sign up. Wildcards allowed. Use separate lines for multiple entries. Ex: domain.com, *.domain.com.
      */
     readonly domainDenylists: pulumi.Output<string[]>;
+    /**
+     * Maximum downstream pipeline trigger rate. Introduced in GitLab 16.10.
+     */
+    readonly downstreamPipelineTriggerLimitPerProjectUserSha: pulumi.Output<number>;
     /**
      * The minimum allowed bit length of an uploaded DSA key. 0 means no restriction. -1 disables DSA keys.
      */
     readonly dsaKeyRestriction: pulumi.Output<number>;
+    /**
+     * Indicates whether GitLab Duo features are enabled for this instance. Introduced in GitLab 16.10. Self-managed, Premium and Ultimate only.
+     */
+    readonly duoFeaturesEnabled: pulumi.Output<boolean>;
     /**
      * The minimum allowed curve size (in bits) of an uploaded ECDSA key. 0 means no restriction. -1 disables ECDSA keys.
      */
@@ -1034,6 +1136,10 @@ export interface ApplicationSettingsState {
      * (If enabled, requires: akismet*api*key) Enable or disable Akismet spam protection.
      */
     akismetEnabled?: pulumi.Input<boolean>;
+    /**
+     * Set to true to allow users to delete their accounts. Premium and Ultimate only.
+     */
+    allowAccountDeletion?: pulumi.Input<boolean>;
     /**
      * Set to true to allow group owners to manage LDAP.
      */
@@ -1046,10 +1152,22 @@ export interface ApplicationSettingsState {
      * Allow requests to the local network from web hooks and services.
      */
     allowLocalRequestsFromWebHooksAndServices?: pulumi.Input<boolean>;
+    /**
+     * Indicates whether users assigned up to the Guest role can create groups and personal projects.
+     */
+    allowProjectCreationForGuestAndBelow?: pulumi.Input<boolean>;
+    /**
+     * Allow using a registration token to create a runner.
+     */
+    allowRunnerRegistrationToken?: pulumi.Input<boolean>;
     /**
      * Set the duration for which the jobs are considered as old and expired. After that time passes, the jobs are archived and no longer able to be retried. Make it empty to never expire jobs. It has to be no less than 1 day, for example: 15 days, 1 month, 2 years.
      */
     archiveBuildsInHumanReadable?: pulumi.Input<string>;
+    /**
+     * Maximum limit of AsciiDoc include directives being processed in any one document. Maximum: 64.
+     */
+    asciidocMaxIncludes?: pulumi.Input<number>;
     /**
      * Assets that match these domains are not proxied. Wildcards allowed. Your GitLab installation URL is automatically allowlisted. GitLab restart is required to apply changes.
      */
@@ -1070,6 +1188,10 @@ export interface ApplicationSettingsState {
      * By default, we write to the authorizedKeys file to support Git over SSH without additional configuration. GitLab can be optimized to authenticate SSH keys via the database file. Only disable this if you have configured your OpenSSH server to use the AuthorizedKeysCommand.
      */
     authorizedKeysEnabled?: pulumi.Input<boolean>;
+    /**
+     * When enabled, users will get automatically banned from the application when they download more than the maximum number of unique projects in the time period specified by max*number*of*repository*downloads and max*number*of*repository*downloads*within*time_period respectively. Introduced in GitLab 15.4. Self-managed, Ultimate only.
+     */
+    autoBanUserOnExcessiveProjectsDownload?: pulumi.Input<boolean>;
     /**
      * Specify a domain to use by default for every project’s Auto Review Apps and Auto Deploy stages.
      */
@@ -1082,6 +1204,18 @@ export interface ApplicationSettingsState {
      * Enabling this permits automatic allocation of purchased storage in a namespace.
      */
     automaticPurchasedStorageAllocation?: pulumi.Input<boolean>;
+    /**
+     * Maximum simultaneous Direct Transfer batches to process.
+     */
+    bulkImportConcurrentPipelineBatchLimit?: pulumi.Input<number>;
+    /**
+     * Enable migrating GitLab groups by direct transfer. Introduced in GitLab 15.8.
+     */
+    bulkImportEnabled?: pulumi.Input<boolean>;
+    /**
+     * Maximum download file size when importing from source GitLab instances by direct transfer. Introduced in GitLab 16.3.
+     */
+    bulkImportMaxDownloadFileSize?: pulumi.Input<number>;
     /**
      * Indicates whether users can create top-level groups. Introduced in GitLab 15.5.
      */
@@ -1090,10 +1224,30 @@ export interface ApplicationSettingsState {
      * Enabling this makes only licensed EE features available to projects if the project namespace’s plan includes the feature or if the project is public.
      */
     checkNamespacePlan?: pulumi.Input<boolean>;
+    /**
+     * The maximum number of includes per pipeline.
+     */
+    ciMaxIncludes?: pulumi.Input<number>;
+    /**
+     * The maximum amount of memory, in bytes, that can be allocated for the pipeline configuration, with all included YAML configuration files.
+     */
+    ciMaxTotalYamlSizeBytes?: pulumi.Input<number>;
     /**
      * Custom hostname (for private commit emails).
      */
     commitEmailHostname?: pulumi.Input<string>;
+    /**
+     * Maximum number of simultaneous import jobs for the Bitbucket Cloud importer. Introduced in GitLab 16.11.
+     */
+    concurrentBitbucketImportJobsLimit?: pulumi.Input<number>;
+    /**
+     * Maximum number of simultaneous import jobs for the Bitbucket Server importer. Introduced in GitLab 16.11.
+     */
+    concurrentBitbucketServerImportJobsLimit?: pulumi.Input<number>;
+    /**
+     * Maximum number of simultaneous import jobs for the GitHub importer. Introduced in GitLab 16.11.
+     */
+    concurrentGithubImportJobsLimit?: pulumi.Input<number>;
     /**
      * Enable cleanup policies for all projects.
      */
@@ -1122,6 +1276,14 @@ export interface ApplicationSettingsState {
      * Enable automatic deactivation of dormant users.
      */
     deactivateDormantUsers?: pulumi.Input<boolean>;
+    /**
+     * Length of time (in days) after which a user is considered dormant. Introduced in GitLab 15.3.
+     */
+    deactivateDormantUsersPeriod?: pulumi.Input<number>;
+    /**
+     * Default timeout for decompressing archived files, in seconds. Set to 0 to disable timeouts. Introduced in GitLab 16.4.
+     */
+    decompressArchiveFileTimeout?: pulumi.Input<number>;
     /**
      * Set the default expiration time for each job’s artifacts.
      */
@@ -1134,6 +1296,10 @@ export interface ApplicationSettingsState {
      * Determine if developers can push to the default branch. Can take: 0 (not protected, both users with the Developer role or Maintainer role can push new commits and force push), 1 (partially protected, users with the Developer role or Maintainer role can push new commits, but cannot force push) or 2 (fully protected, users with the Developer or Maintainer role cannot push new commits, but users with the Developer or Maintainer role can; no one can force push) as a parameter. Default is 2.
      */
     defaultBranchProtection?: pulumi.Input<number>;
+    /**
+     * The default*branch*protection*defaults attribute describes the default branch protection defaults. All parameters are optional.
+     */
+    defaultBranchProtectionDefaults?: pulumi.Input<inputs.ApplicationSettingsDefaultBranchProtectionDefaults>;
     /**
      * Default CI/CD configuration file and path for new projects (.gitlab-ci.yml if not set).
      */
@@ -1142,6 +1308,10 @@ export interface ApplicationSettingsState {
      * What visibility level new groups receive. Can take private, internal and public as a parameter.
      */
     defaultGroupVisibility?: pulumi.Input<string>;
+    /**
+     * Default preferred language for users who are not logged in.
+     */
+    defaultPreferredLanguage?: pulumi.Input<string>;
     /**
      * Default project creation protection. Can take: 0 (No one), 1 (Maintainers) or 2 (Developers + Maintainers).
      */
@@ -1158,14 +1328,30 @@ export interface ApplicationSettingsState {
      * What visibility level new snippets receive. Can take private, internal and public as a parameter.
      */
     defaultSnippetVisibility?: pulumi.Input<string>;
+    /**
+     * Default syntax highlighting theme for users who are new or not signed in. See IDs of available themes (https://gitlab.com/gitlab-org/gitlab/blob/master/lib/gitlab/themes.rb#L16)
+     */
+    defaultSyntaxHighlightingTheme?: pulumi.Input<number>;
     /**
      * Enable inactive project deletion feature. Introduced in GitLab 14.10. Became operational in GitLab 15.0 (with feature flag inactive*projects*deletion).
      */
     deleteInactiveProjects?: pulumi.Input<boolean>;
+    /**
+     * Specifies whether users who have not confirmed their email should be deleted. When set to true, unconfirmed users are deleted after unconfirmed*users*delete*after*days days. Introduced in GitLab 16.1. Self-managed, Premium and Ultimate only.
+     */
+    deleteUnconfirmedUsers?: pulumi.Input<boolean>;
     /**
      * The number of days to wait before deleting a project or group that is marked for deletion. Value must be between 1 and 90.
      */
     deletionAdjournedPeriod?: pulumi.Input<number>;
+    /**
+     * (If enabled, requires diagramsnet_url) Enable Diagrams.net integration.
+     */
+    diagramsnetEnabled?: pulumi.Input<boolean>;
+    /**
+     * The Diagrams.net instance URL for integration.
+     */
+    diagramsnetUrl?: pulumi.Input<string>;
     /**
      * Maximum files in a diff.
      */
@@ -1178,10 +1364,18 @@ export interface ApplicationSettingsState {
      * Maximum diff patch size, in bytes.
      */
     diffMaxPatchBytes?: pulumi.Input<number>;
+    /**
+     * Stops administrators from connecting their GitLab accounts to non-trusted OAuth 2.0 applications that have the api, read*api, read*repository, write*repository, read*registry, write_registry, or sudo scopes. Introduced in GitLab 15.6.
+     */
+    disableAdminOauthScopes?: pulumi.Input<boolean>;
     /**
      * Disable display of RSS/Atom and calendar feed tokens (introduced in GitLab 13.7).
      */
     disableFeedToken?: pulumi.Input<boolean>;
+    /**
+     * Disable personal access tokens. Introduced in GitLab 15.7. Self-managed, Premium and Ultimate only. There is no method available to enable a personal access token that’s been disabled through the API. This is a known issue.
+     */
+    disablePersonalAccessTokens?: pulumi.Input<boolean>;
     /**
      * Disabled OAuth sign-in sources.
      */
@@ -1202,10 +1396,18 @@ export interface ApplicationSettingsState {
      * Users with email addresses that match these domains cannot sign up. Wildcards allowed. Use separate lines for multiple entries. Ex: domain.com, *.domain.com.
      */
     domainDenylists?: pulumi.Input<pulumi.Input<string>[]>;
+    /**
+     * Maximum downstream pipeline trigger rate. Introduced in GitLab 16.10.
+     */
+    downstreamPipelineTriggerLimitPerProjectUserSha?: pulumi.Input<number>;
     /**
      * The minimum allowed bit length of an uploaded DSA key. 0 means no restriction. -1 disables DSA keys.
      */
     dsaKeyRestriction?: pulumi.Input<number>;
+    /**
+     * Indicates whether GitLab Duo features are enabled for this instance. Introduced in GitLab 16.10. Self-managed, Premium and Ultimate only.
+     */
+    duoFeaturesEnabled?: pulumi.Input<boolean>;
     /**
      * The minimum allowed curve size (in bits) of an uploaded ECDSA key. 0 means no restriction. -1 disables ECDSA keys.
      */
@@ -2018,6 +2220,10 @@ export interface ApplicationSettingsArgs {
      * (If enabled, requires: akismet*api*key) Enable or disable Akismet spam protection.
      */
     akismetEnabled?: pulumi.Input<boolean>;
+    /**
+     * Set to true to allow users to delete their accounts. Premium and Ultimate only.
+     */
+    allowAccountDeletion?: pulumi.Input<boolean>;
     /**
      * Set to true to allow group owners to manage LDAP.
      */
@@ -2030,10 +2236,22 @@ export interface ApplicationSettingsArgs {
      * Allow requests to the local network from web hooks and services.
      */
     allowLocalRequestsFromWebHooksAndServices?: pulumi.Input<boolean>;
+    /**
+     * Indicates whether users assigned up to the Guest role can create groups and personal projects.
+     */
+    allowProjectCreationForGuestAndBelow?: pulumi.Input<boolean>;
+    /**
+     * Allow using a registration token to create a runner.
+     */
+    allowRunnerRegistrationToken?: pulumi.Input<boolean>;
     /**
      * Set the duration for which the jobs are considered as old and expired. After that time passes, the jobs are archived and no longer able to be retried. Make it empty to never expire jobs. It has to be no less than 1 day, for example: 15 days, 1 month, 2 years.
      */
     archiveBuildsInHumanReadable?: pulumi.Input<string>;
+    /**
+     * Maximum limit of AsciiDoc include directives being processed in any one document. Maximum: 64.
+     */
+    asciidocMaxIncludes?: pulumi.Input<number>;
     /**
      * Assets that match these domains are not proxied. Wildcards allowed. Your GitLab installation URL is automatically allowlisted. GitLab restart is required to apply changes.
      */
@@ -2054,6 +2272,10 @@ export interface ApplicationSettingsArgs {
      * By default, we write to the authorizedKeys file to support Git over SSH without additional configuration. GitLab can be optimized to authenticate SSH keys via the database file. Only disable this if you have configured your OpenSSH server to use the AuthorizedKeysCommand.
      */
     authorizedKeysEnabled?: pulumi.Input<boolean>;
+    /**
+     * When enabled, users will get automatically banned from the application when they download more than the maximum number of unique projects in the time period specified by max*number*of*repository*downloads and max*number*of*repository*downloads*within*time_period respectively. Introduced in GitLab 15.4. Self-managed, Ultimate only.
+     */
+    autoBanUserOnExcessiveProjectsDownload?: pulumi.Input<boolean>;
     /**
      * Specify a domain to use by default for every project’s Auto Review Apps and Auto Deploy stages.
      */
@@ -2066,6 +2288,18 @@ export interface ApplicationSettingsArgs {
      * Enabling this permits automatic allocation of purchased storage in a namespace.
      */
     automaticPurchasedStorageAllocation?: pulumi.Input<boolean>;
+    /**
+     * Maximum simultaneous Direct Transfer batches to process.
+     */
+    bulkImportConcurrentPipelineBatchLimit?: pulumi.Input<number>;
+    /**
+     * Enable migrating GitLab groups by direct transfer. Introduced in GitLab 15.8.
+     */
+    bulkImportEnabled?: pulumi.Input<boolean>;
+    /**
+     * Maximum download file size when importing from source GitLab instances by direct transfer. Introduced in GitLab 16.3.
+     */
+    bulkImportMaxDownloadFileSize?: pulumi.Input<number>;
     /**
      * Indicates whether users can create top-level groups. Introduced in GitLab 15.5.
      */
@@ -2074,10 +2308,30 @@ export interface ApplicationSettingsArgs {
      * Enabling this makes only licensed EE features available to projects if the project namespace’s plan includes the feature or if the project is public.
      */
     checkNamespacePlan?: pulumi.Input<boolean>;
+    /**
+     * The maximum number of includes per pipeline.
+     */
+    ciMaxIncludes?: pulumi.Input<number>;
+    /**
+     * The maximum amount of memory, in bytes, that can be allocated for the pipeline configuration, with all included YAML configuration files.
+     */
+    ciMaxTotalYamlSizeBytes?: pulumi.Input<number>;
     /**
      * Custom hostname (for private commit emails).
      */
     commitEmailHostname?: pulumi.Input<string>;
+    /**
+     * Maximum number of simultaneous import jobs for the Bitbucket Cloud importer. Introduced in GitLab 16.11.
+     */
+    concurrentBitbucketImportJobsLimit?: pulumi.Input<number>;
+    /**
+     * Maximum number of simultaneous import jobs for the Bitbucket Server importer. Introduced in GitLab 16.11.
+     */
+    concurrentBitbucketServerImportJobsLimit?: pulumi.Input<number>;
+    /**
+     * Maximum number of simultaneous import jobs for the GitHub importer. Introduced in GitLab 16.11.
+     */
+    concurrentGithubImportJobsLimit?: pulumi.Input<number>;
     /**
      * Enable cleanup policies for all projects.
      */
@@ -2106,6 +2360,14 @@ export interface ApplicationSettingsArgs {
      * Enable automatic deactivation of dormant users.
      */
     deactivateDormantUsers?: pulumi.Input<boolean>;
+    /**
+     * Length of time (in days) after which a user is considered dormant. Introduced in GitLab 15.3.
+     */
+    deactivateDormantUsersPeriod?: pulumi.Input<number>;
+    /**
+     * Default timeout for decompressing archived files, in seconds. Set to 0 to disable timeouts. Introduced in GitLab 16.4.
+     */
+    decompressArchiveFileTimeout?: pulumi.Input<number>;
     /**
      * Set the default expiration time for each job’s artifacts.
      */
@@ -2118,6 +2380,10 @@ export interface ApplicationSettingsArgs {
      * Determine if developers can push to the default branch. Can take: 0 (not protected, both users with the Developer role or Maintainer role can push new commits and force push), 1 (partially protected, users with the Developer role or Maintainer role can push new commits, but cannot force push) or 2 (fully protected, users with the Developer or Maintainer role cannot push new commits, but users with the Developer or Maintainer role can; no one can force push) as a parameter. Default is 2.
      */
     defaultBranchProtection?: pulumi.Input<number>;
+    /**
+     * The default*branch*protection*defaults attribute describes the default branch protection defaults. All parameters are optional.
+     */
+    defaultBranchProtectionDefaults?: pulumi.Input<inputs.ApplicationSettingsDefaultBranchProtectionDefaults>;
     /**
      * Default CI/CD configuration file and path for new projects (.gitlab-ci.yml if not set).
      */
@@ -2126,6 +2392,10 @@ export interface ApplicationSettingsArgs {
      * What visibility level new groups receive. Can take private, internal and public as a parameter.
      */
     defaultGroupVisibility?: pulumi.Input<string>;
+    /**
+     * Default preferred language for users who are not logged in.
+     */
+    defaultPreferredLanguage?: pulumi.Input<string>;
     /**
      * Default project creation protection. Can take: 0 (No one), 1 (Maintainers) or 2 (Developers + Maintainers).
      */
@@ -2142,14 +2412,30 @@ export interface ApplicationSettingsArgs {
      * What visibility level new snippets receive. Can take private, internal and public as a parameter.
      */
     defaultSnippetVisibility?: pulumi.Input<string>;
+    /**
+     * Default syntax highlighting theme for users who are new or not signed in. See IDs of available themes (https://gitlab.com/gitlab-org/gitlab/blob/master/lib/gitlab/themes.rb#L16)
+     */
+    defaultSyntaxHighlightingTheme?: pulumi.Input<number>;
     /**
      * Enable inactive project deletion feature. Introduced in GitLab 14.10. Became operational in GitLab 15.0 (with feature flag inactive*projects*deletion).
      */
     deleteInactiveProjects?: pulumi.Input<boolean>;
+    /**
+     * Specifies whether users who have not confirmed their email should be deleted. When set to true, unconfirmed users are deleted after unconfirmed*users*delete*after*days days. Introduced in GitLab 16.1. Self-managed, Premium and Ultimate only.
+     */
+    deleteUnconfirmedUsers?: pulumi.Input<boolean>;
     /**
      * The number of days to wait before deleting a project or group that is marked for deletion. Value must be between 1 and 90.
      */
     deletionAdjournedPeriod?: pulumi.Input<number>;
+    /**
+     * (If enabled, requires diagramsnet_url) Enable Diagrams.net integration.
+     */
+    diagramsnetEnabled?: pulumi.Input<boolean>;
+    /**
+     * The Diagrams.net instance URL for integration.
+     */
+    diagramsnetUrl?: pulumi.Input<string>;
     /**
      * Maximum files in a diff.
      */
@@ -2162,10 +2448,18 @@ export interface ApplicationSettingsArgs {
      * Maximum diff patch size, in bytes.
      */
     diffMaxPatchBytes?: pulumi.Input<number>;
+    /**
+     * Stops administrators from connecting their GitLab accounts to non-trusted OAuth 2.0 applications that have the api, read*api, read*repository, write*repository, read*registry, write_registry, or sudo scopes. Introduced in GitLab 15.6.
+     */
+    disableAdminOauthScopes?: pulumi.Input<boolean>;
     /**
      * Disable display of RSS/Atom and calendar feed tokens (introduced in GitLab 13.7).
      */
     disableFeedToken?: pulumi.Input<boolean>;
+    /**
+     * Disable personal access tokens. Introduced in GitLab 15.7. Self-managed, Premium and Ultimate only. There is no method available to enable a personal access token that’s been disabled through the API. This is a known issue.
+     */
+    disablePersonalAccessTokens?: pulumi.Input<boolean>;
     /**
      * Disabled OAuth sign-in sources.
      */
@@ -2186,10 +2480,18 @@ export interface ApplicationSettingsArgs {
      * Users with email addresses that match these domains cannot sign up. Wildcards allowed. Use separate lines for multiple entries. Ex: domain.com, *.domain.com.
      */
     domainDenylists?: pulumi.Input<pulumi.Input<string>[]>;
+    /**
+     * Maximum downstream pipeline trigger rate. Introduced in GitLab 16.10.
+     */
+    downstreamPipelineTriggerLimitPerProjectUserSha?: pulumi.Input<number>;
     /**
      * The minimum allowed bit length of an uploaded DSA key. 0 means no restriction. -1 disables DSA keys.
      */
     dsaKeyRestriction?: pulumi.Input<number>;
+    /**
+     * Indicates whether GitLab Duo features are enabled for this instance. Introduced in GitLab 16.10. Self-managed, Premium and Ultimate only.
+     */
+    duoFeaturesEnabled?: pulumi.Input<boolean>;
     /**
      * The minimum allowed curve size (in bits) of an uploaded ECDSA key. 0 means no restriction. -1 disables ECDSA keys.
      */