pulumi-gcp 6.68.0a1697867869__py3-none-any.whl → 6.68.0a1698199636__py3-none-any.whl

pulumi_gcp/iam/_inputs.py

@@ -45,7 +45,11 @@ class AccessBoundaryPolicyRuleArgs:
              _setter: Callable[[Any, Any], None],
              access_boundary_rule: Optional[pulumi.Input['AccessBoundaryPolicyRuleAccessBoundaryRuleArgs']] = None,
              description: Optional[pulumi.Input[str]] = None,
-             opts: Optional[pulumi.ResourceOptions]=None):
+             opts: Optional[pulumi.ResourceOptions] = None,
+             **kwargs):
+        if access_boundary_rule is None and 'accessBoundaryRule' in kwargs:
+            access_boundary_rule = kwargs['accessBoundaryRule']
+
         if access_boundary_rule is not None:
             _setter("access_boundary_rule", access_boundary_rule)
         if description is not None:
@@ -101,7 +105,15 @@ class AccessBoundaryPolicyRuleAccessBoundaryRuleArgs:
              availability_condition: Optional[pulumi.Input['AccessBoundaryPolicyRuleAccessBoundaryRuleAvailabilityConditionArgs']] = None,
              available_permissions: Optional[pulumi.Input[Sequence[pulumi.Input[str]]]] = None,
              available_resource: Optional[pulumi.Input[str]] = None,
-             opts: Optional[pulumi.ResourceOptions]=None):
+             opts: Optional[pulumi.ResourceOptions] = None,
+             **kwargs):
+        if availability_condition is None and 'availabilityCondition' in kwargs:
+            availability_condition = kwargs['availabilityCondition']
+        if available_permissions is None and 'availablePermissions' in kwargs:
+            available_permissions = kwargs['availablePermissions']
+        if available_resource is None and 'availableResource' in kwargs:
+            available_resource = kwargs['availableResource']
+
         if availability_condition is not None:
             _setter("availability_condition", availability_condition)
         if available_permissions is not None:
@@ -175,11 +187,15 @@ class AccessBoundaryPolicyRuleAccessBoundaryRuleAvailabilityConditionArgs:
     @staticmethod
     def _configure(
              _setter: Callable[[Any, Any], None],
-             expression: pulumi.Input[str],
+             expression: Optional[pulumi.Input[str]] = None,
              description: Optional[pulumi.Input[str]] = None,
              location: Optional[pulumi.Input[str]] = None,
              title: Optional[pulumi.Input[str]] = None,
-             opts: Optional[pulumi.ResourceOptions]=None):
+             opts: Optional[pulumi.ResourceOptions] = None,
+             **kwargs):
+        if expression is None:
+            raise TypeError("Missing 'expression' argument")
+
         _setter("expression", expression)
         if description is not None:
             _setter("description", description)
@@ -262,7 +278,11 @@ class DenyPolicyRuleArgs:
              _setter: Callable[[Any, Any], None],
              deny_rule: Optional[pulumi.Input['DenyPolicyRuleDenyRuleArgs']] = None,
              description: Optional[pulumi.Input[str]] = None,
-             opts: Optional[pulumi.ResourceOptions]=None):
+             opts: Optional[pulumi.ResourceOptions] = None,
+             **kwargs):
+        if deny_rule is None and 'denyRule' in kwargs:
+            deny_rule = kwargs['denyRule']
+
         if deny_rule is not None:
             _setter("deny_rule", deny_rule)
         if description is not None:
@@ -330,7 +350,19 @@ class DenyPolicyRuleDenyRuleArgs:
              denied_principals: Optional[pulumi.Input[Sequence[pulumi.Input[str]]]] = None,
              exception_permissions: Optional[pulumi.Input[Sequence[pulumi.Input[str]]]] = None,
              exception_principals: Optional[pulumi.Input[Sequence[pulumi.Input[str]]]] = None,
-             opts: Optional[pulumi.ResourceOptions]=None):
+             opts: Optional[pulumi.ResourceOptions] = None,
+             **kwargs):
+        if denial_condition is None and 'denialCondition' in kwargs:
+            denial_condition = kwargs['denialCondition']
+        if denied_permissions is None and 'deniedPermissions' in kwargs:
+            denied_permissions = kwargs['deniedPermissions']
+        if denied_principals is None and 'deniedPrincipals' in kwargs:
+            denied_principals = kwargs['deniedPrincipals']
+        if exception_permissions is None and 'exceptionPermissions' in kwargs:
+            exception_permissions = kwargs['exceptionPermissions']
+        if exception_principals is None and 'exceptionPrincipals' in kwargs:
+            exception_principals = kwargs['exceptionPrincipals']
+
         if denial_condition is not None:
             _setter("denial_condition", denial_condition)
         if denied_permissions is not None:
@@ -436,11 +468,15 @@ class DenyPolicyRuleDenyRuleDenialConditionArgs:
     @staticmethod
     def _configure(
              _setter: Callable[[Any, Any], None],
-             expression: pulumi.Input[str],
+             expression: Optional[pulumi.Input[str]] = None,
              description: Optional[pulumi.Input[str]] = None,
              location: Optional[pulumi.Input[str]] = None,
              title: Optional[pulumi.Input[str]] = None,
-             opts: Optional[pulumi.ResourceOptions]=None):
+             opts: Optional[pulumi.ResourceOptions] = None,
+             **kwargs):
+        if expression is None:
+            raise TypeError("Missing 'expression' argument")
+
         _setter("expression", expression)
         if description is not None:
             _setter("description", description)
@@ -530,12 +566,28 @@ class WorkforcePoolProviderOidcArgs:
     @staticmethod
     def _configure(
              _setter: Callable[[Any, Any], None],
-             client_id: pulumi.Input[str],
-             issuer_uri: pulumi.Input[str],
+             client_id: Optional[pulumi.Input[str]] = None,
+             issuer_uri: Optional[pulumi.Input[str]] = None,
              client_secret: Optional[pulumi.Input['WorkforcePoolProviderOidcClientSecretArgs']] = None,
              jwks_json: Optional[pulumi.Input[str]] = None,
              web_sso_config: Optional[pulumi.Input['WorkforcePoolProviderOidcWebSsoConfigArgs']] = None,
-             opts: Optional[pulumi.ResourceOptions]=None):
+             opts: Optional[pulumi.ResourceOptions] = None,
+             **kwargs):
+        if client_id is None and 'clientId' in kwargs:
+            client_id = kwargs['clientId']
+        if client_id is None:
+            raise TypeError("Missing 'client_id' argument")
+        if issuer_uri is None and 'issuerUri' in kwargs:
+            issuer_uri = kwargs['issuerUri']
+        if issuer_uri is None:
+            raise TypeError("Missing 'issuer_uri' argument")
+        if client_secret is None and 'clientSecret' in kwargs:
+            client_secret = kwargs['clientSecret']
+        if jwks_json is None and 'jwksJson' in kwargs:
+            jwks_json = kwargs['jwksJson']
+        if web_sso_config is None and 'webSsoConfig' in kwargs:
+            web_sso_config = kwargs['webSsoConfig']
+
         _setter("client_id", client_id)
         _setter("issuer_uri", issuer_uri)
         if client_secret is not None:
@@ -621,7 +673,9 @@ class WorkforcePoolProviderOidcClientSecretArgs:
     def _configure(
              _setter: Callable[[Any, Any], None],
              value: Optional[pulumi.Input['WorkforcePoolProviderOidcClientSecretValueArgs']] = None,
-             opts: Optional[pulumi.ResourceOptions]=None):
+             opts: Optional[pulumi.ResourceOptions] = None,
+             **kwargs):
+
         if value is not None:
             _setter("value", value)
 
@@ -658,9 +712,15 @@ class WorkforcePoolProviderOidcClientSecretValueArgs:
     @staticmethod
     def _configure(
              _setter: Callable[[Any, Any], None],
-             plain_text: pulumi.Input[str],
+             plain_text: Optional[pulumi.Input[str]] = None,
              thumbprint: Optional[pulumi.Input[str]] = None,
-             opts: Optional[pulumi.ResourceOptions]=None):
+             opts: Optional[pulumi.ResourceOptions] = None,
+             **kwargs):
+        if plain_text is None and 'plainText' in kwargs:
+            plain_text = kwargs['plainText']
+        if plain_text is None:
+            raise TypeError("Missing 'plain_text' argument")
+
         _setter("plain_text", plain_text)
         if thumbprint is not None:
             _setter("thumbprint", thumbprint)
@@ -720,10 +780,22 @@ class WorkforcePoolProviderOidcWebSsoConfigArgs:
     @staticmethod
     def _configure(
              _setter: Callable[[Any, Any], None],
-             assertion_claims_behavior: pulumi.Input[str],
-             response_type: pulumi.Input[str],
+             assertion_claims_behavior: Optional[pulumi.Input[str]] = None,
+             response_type: Optional[pulumi.Input[str]] = None,
              additional_scopes: Optional[pulumi.Input[Sequence[pulumi.Input[str]]]] = None,
-             opts: Optional[pulumi.ResourceOptions]=None):
+             opts: Optional[pulumi.ResourceOptions] = None,
+             **kwargs):
+        if assertion_claims_behavior is None and 'assertionClaimsBehavior' in kwargs:
+            assertion_claims_behavior = kwargs['assertionClaimsBehavior']
+        if assertion_claims_behavior is None:
+            raise TypeError("Missing 'assertion_claims_behavior' argument")
+        if response_type is None and 'responseType' in kwargs:
+            response_type = kwargs['responseType']
+        if response_type is None:
+            raise TypeError("Missing 'response_type' argument")
+        if additional_scopes is None and 'additionalScopes' in kwargs:
+            additional_scopes = kwargs['additionalScopes']
+
         _setter("assertion_claims_behavior", assertion_claims_behavior)
         _setter("response_type", response_type)
         if additional_scopes is not None:
@@ -800,8 +872,14 @@ class WorkforcePoolProviderSamlArgs:
     @staticmethod
     def _configure(
              _setter: Callable[[Any, Any], None],
-             idp_metadata_xml: pulumi.Input[str],
-             opts: Optional[pulumi.ResourceOptions]=None):
+             idp_metadata_xml: Optional[pulumi.Input[str]] = None,
+             opts: Optional[pulumi.ResourceOptions] = None,
+             **kwargs):
+        if idp_metadata_xml is None and 'idpMetadataXml' in kwargs:
+            idp_metadata_xml = kwargs['idpMetadataXml']
+        if idp_metadata_xml is None:
+            raise TypeError("Missing 'idp_metadata_xml' argument")
+
         _setter("idp_metadata_xml", idp_metadata_xml)
 
     @property
@@ -843,8 +921,14 @@ class WorkloadIdentityPoolProviderAwsArgs:
     @staticmethod
     def _configure(
              _setter: Callable[[Any, Any], None],
-             account_id: pulumi.Input[str],
-             opts: Optional[pulumi.ResourceOptions]=None):
+             account_id: Optional[pulumi.Input[str]] = None,
+             opts: Optional[pulumi.ResourceOptions] = None,
+             **kwargs):
+        if account_id is None and 'accountId' in kwargs:
+            account_id = kwargs['accountId']
+        if account_id is None:
+            raise TypeError("Missing 'account_id' argument")
+
         _setter("account_id", account_id)
 
     @property
@@ -875,18 +959,12 @@ class WorkloadIdentityPoolProviderOidcArgs:
                If this list is empty, the OIDC token audience must be equal to the full canonical
                resource name of the WorkloadIdentityPoolProvider, with or without the HTTPS prefix.
                For example:
-               ```python
-               import pulumi
-               ```
         :param pulumi.Input[str] jwks_json: OIDC JWKs in JSON String format. For details on definition of a
                JWK, see https:tools.ietf.org/html/rfc7517. If not set, then we
                use the `jwks_uri` from the discovery document fetched from the
                .well-known path for the `issuer_uri`. Currently, RSA and EC asymmetric
                keys are supported. The JWK must use following format and include only
                the following fields:
-               ```python
-               import pulumi
-               ```
         """
         WorkloadIdentityPoolProviderOidcArgs._configure(
             lambda key, value: pulumi.set(__self__, key, value),
@@ -897,10 +975,20 @@ class WorkloadIdentityPoolProviderOidcArgs:
     @staticmethod
     def _configure(
              _setter: Callable[[Any, Any], None],
-             issuer_uri: pulumi.Input[str],
+             issuer_uri: Optional[pulumi.Input[str]] = None,
              allowed_audiences: Optional[pulumi.Input[Sequence[pulumi.Input[str]]]] = None,
              jwks_json: Optional[pulumi.Input[str]] = None,
-             opts: Optional[pulumi.ResourceOptions]=None):
+             opts: Optional[pulumi.ResourceOptions] = None,
+             **kwargs):
+        if issuer_uri is None and 'issuerUri' in kwargs:
+            issuer_uri = kwargs['issuerUri']
+        if issuer_uri is None:
+            raise TypeError("Missing 'issuer_uri' argument")
+        if allowed_audiences is None and 'allowedAudiences' in kwargs:
+            allowed_audiences = kwargs['allowedAudiences']
+        if jwks_json is None and 'jwksJson' in kwargs:
+            jwks_json = kwargs['jwksJson']
+
         _setter("issuer_uri", issuer_uri)
         if allowed_audiences is not None:
             _setter("allowed_audiences", allowed_audiences)
@@ -930,9 +1018,6 @@ class WorkloadIdentityPoolProviderOidcArgs:
         If this list is empty, the OIDC token audience must be equal to the full canonical
         resource name of the WorkloadIdentityPoolProvider, with or without the HTTPS prefix.
         For example:
-        ```python
-        import pulumi
-        ```
         """
         return pulumi.get(self, "allowed_audiences")
 
@@ -950,9 +1035,6 @@ class WorkloadIdentityPoolProviderOidcArgs:
         .well-known path for the `issuer_uri`. Currently, RSA and EC asymmetric
         keys are supported. The JWK must use following format and include only
         the following fields:
-        ```python
-        import pulumi
-        ```
         """
         return pulumi.get(self, "jwks_json")
 

pulumi_gcp/iam/access_boundary_policy.py

@@ -38,11 +38,19 @@ class AccessBoundaryPolicyArgs:
     @staticmethod
     def _configure(
              _setter: Callable[[Any, Any], None],
-             parent: pulumi.Input[str],
-             rules: pulumi.Input[Sequence[pulumi.Input['AccessBoundaryPolicyRuleArgs']]],
+             parent: Optional[pulumi.Input[str]] = None,
+             rules: Optional[pulumi.Input[Sequence[pulumi.Input['AccessBoundaryPolicyRuleArgs']]]] = None,
              display_name: Optional[pulumi.Input[str]] = None,
              name: Optional[pulumi.Input[str]] = None,
-             opts: Optional[pulumi.ResourceOptions]=None):
+             opts: Optional[pulumi.ResourceOptions] = None,
+             **kwargs):
+        if parent is None:
+            raise TypeError("Missing 'parent' argument")
+        if rules is None:
+            raise TypeError("Missing 'rules' argument")
+        if display_name is None and 'displayName' in kwargs:
+            display_name = kwargs['displayName']
+
         _setter("parent", parent)
         _setter("rules", rules)
         if display_name is not None:
@@ -133,7 +141,11 @@ class _AccessBoundaryPolicyState:
              name: Optional[pulumi.Input[str]] = None,
              parent: Optional[pulumi.Input[str]] = None,
              rules: Optional[pulumi.Input[Sequence[pulumi.Input['AccessBoundaryPolicyRuleArgs']]]] = None,
-             opts: Optional[pulumi.ResourceOptions]=None):
+             opts: Optional[pulumi.ResourceOptions] = None,
+             **kwargs):
+        if display_name is None and 'displayName' in kwargs:
+            display_name = kwargs['displayName']
+
         if display_name is not None:
             _setter("display_name", display_name)
         if etag is not None:

pulumi_gcp/iam/deny_policy.py

@@ -38,11 +38,19 @@ class DenyPolicyArgs:
     @staticmethod
     def _configure(
              _setter: Callable[[Any, Any], None],
-             parent: pulumi.Input[str],
-             rules: pulumi.Input[Sequence[pulumi.Input['DenyPolicyRuleArgs']]],
+             parent: Optional[pulumi.Input[str]] = None,
+             rules: Optional[pulumi.Input[Sequence[pulumi.Input['DenyPolicyRuleArgs']]]] = None,
              display_name: Optional[pulumi.Input[str]] = None,
              name: Optional[pulumi.Input[str]] = None,
-             opts: Optional[pulumi.ResourceOptions]=None):
+             opts: Optional[pulumi.ResourceOptions] = None,
+             **kwargs):
+        if parent is None:
+            raise TypeError("Missing 'parent' argument")
+        if rules is None:
+            raise TypeError("Missing 'rules' argument")
+        if display_name is None and 'displayName' in kwargs:
+            display_name = kwargs['displayName']
+
         _setter("parent", parent)
         _setter("rules", rules)
         if display_name is not None:
@@ -133,7 +141,11 @@ class _DenyPolicyState:
              name: Optional[pulumi.Input[str]] = None,
              parent: Optional[pulumi.Input[str]] = None,
              rules: Optional[pulumi.Input[Sequence[pulumi.Input['DenyPolicyRuleArgs']]]] = None,
-             opts: Optional[pulumi.ResourceOptions]=None):
+             opts: Optional[pulumi.ResourceOptions] = None,
+             **kwargs):
+        if display_name is None and 'displayName' in kwargs:
+            display_name = kwargs['displayName']
+
         if display_name is not None:
             _setter("display_name", display_name)
         if etag is not None:

pulumi_gcp/iam/get_rule.py

@@ -94,14 +94,6 @@ def get_rule(name: Optional[str] = None,
     """
     Use this data source to get information about a Google IAM Role.
 
-    ```python
-    import pulumi
-    import pulumi_gcp as gcp
-
-    roleinfo = gcp.iam.get_rule(name="roles/compute.viewer")
-    pulumi.export("theRolePermissions", roleinfo.included_permissions)
-    ```
-
 
     :param str name: The name of the Role to lookup in the form `roles/{ROLE_NAME}`, `organizations/{ORGANIZATION_ID}/roles/{ROLE_NAME}` or `projects/{PROJECT_ID}/roles/{ROLE_NAME}`
     """
@@ -124,14 +116,6 @@ def get_rule_output(name: Optional[pulumi.Input[str]] = None,
     """
     Use this data source to get information about a Google IAM Role.
 
-    ```python
-    import pulumi
-    import pulumi_gcp as gcp
-
-    roleinfo = gcp.iam.get_rule(name="roles/compute.viewer")
-    pulumi.export("theRolePermissions", roleinfo.included_permissions)
-    ```
-
 
     :param str name: The name of the Role to lookup in the form `roles/{ROLE_NAME}`, `organizations/{ORGANIZATION_ID}/roles/{ROLE_NAME}` or `projects/{PROJECT_ID}/roles/{ROLE_NAME}`
     """

pulumi_gcp/iam/get_testable_permissions.py

@@ -94,21 +94,6 @@ def get_testable_permissions(custom_support_level: Optional[str] = None,
     """
     Retrieve a list of testable permissions for a resource. Testable permissions mean the permissions that user can add or remove in a role at a given resource. The resource can be referenced either via the full resource name or via a URI.
 
-    ## Example Usage
-
-    Retrieve all the supported permissions able to be set on `my-project` that are in either GA or BETA. This is useful for dynamically constructing custom roles.
-
-    ```python
-    import pulumi
-    import pulumi_gcp as gcp
-
-    perms = gcp.iam.get_testable_permissions(full_resource_name="//cloudresourcemanager.googleapis.com/projects/my-project",
-        stages=[
-            "GA",
-            "BETA",
-        ])
-    ```
-
 
     :param str custom_support_level: The level of support for custom roles. Can be one of `"NOT_SUPPORTED"`, `"SUPPORTED"`, `"TESTING"`. Default is `"SUPPORTED"`
     :param str full_resource_name: See [full resource name documentation](https://cloud.google.com/apis/design/resource_names#full_resource_name) for more detail.
@@ -137,21 +122,6 @@ def get_testable_permissions_output(custom_support_level: Optional[pulumi.Input[
     """
     Retrieve a list of testable permissions for a resource. Testable permissions mean the permissions that user can add or remove in a role at a given resource. The resource can be referenced either via the full resource name or via a URI.
 
-    ## Example Usage
-
-    Retrieve all the supported permissions able to be set on `my-project` that are in either GA or BETA. This is useful for dynamically constructing custom roles.
-
-    ```python
-    import pulumi
-    import pulumi_gcp as gcp
-
-    perms = gcp.iam.get_testable_permissions(full_resource_name="//cloudresourcemanager.googleapis.com/projects/my-project",
-        stages=[
-            "GA",
-            "BETA",
-        ])
-    ```
-
 
     :param str custom_support_level: The level of support for custom roles. Can be one of `"NOT_SUPPORTED"`, `"SUPPORTED"`, `"TESTING"`. Default is `"SUPPORTED"`
     :param str full_resource_name: See [full resource name documentation](https://cloud.google.com/apis/design/resource_names#full_resource_name) for more detail.

pulumi_gcp/iam/get_workload_identity_pool.py

@@ -113,14 +113,6 @@ def get_workload_identity_pool(project: Optional[str] = None,
     """
     Get a IAM workload identity pool from Google Cloud by its id.
     > **Note:** The following resource requires the Beta IAM role `roles/iam.workloadIdentityPoolAdmin` in order to succeed. `OWNER` and `EDITOR` roles do not include the necessary permissions.
-    ## Example Usage
-
-    ```python
-    import pulumi
-    import pulumi_gcp as gcp
-
-    foo = gcp.iam.get_workload_identity_pool(workload_identity_pool_id="foo-pool")
-    ```
 
 
     :param str project: The project in which the resource belongs. If it
@@ -154,14 +146,6 @@ def get_workload_identity_pool_output(project: Optional[pulumi.Input[Optional[st
     """
     Get a IAM workload identity pool from Google Cloud by its id.
     > **Note:** The following resource requires the Beta IAM role `roles/iam.workloadIdentityPoolAdmin` in order to succeed. `OWNER` and `EDITOR` roles do not include the necessary permissions.
-    ## Example Usage
-
-    ```python
-    import pulumi
-    import pulumi_gcp as gcp
-
-    foo = gcp.iam.get_workload_identity_pool(workload_identity_pool_id="foo-pool")
-    ```
 
 
     :param str project: The project in which the resource belongs. If it

pulumi_gcp/iam/get_workload_identity_pool_provider.py

@@ -160,16 +160,6 @@ def get_workload_identity_pool_provider(project: Optional[str] = None,
     """
     Get a IAM workload identity provider from Google Cloud by its id.
 
-    ## Example Usage
-
-    ```python
-    import pulumi
-    import pulumi_gcp as gcp
-
-    foo = gcp.iam.get_workload_identity_pool_provider(workload_identity_pool_id="foo-pool",
-        workload_identity_pool_provider_id="bar-provider")
-    ```
-
 
     :param str project: The project in which the resource belongs. If it
            is not provided, the provider project is used.
@@ -211,16 +201,6 @@ def get_workload_identity_pool_provider_output(project: Optional[pulumi.Input[Op
     """
     Get a IAM workload identity provider from Google Cloud by its id.
 
-    ## Example Usage
-
-    ```python
-    import pulumi
-    import pulumi_gcp as gcp
-
-    foo = gcp.iam.get_workload_identity_pool_provider(workload_identity_pool_id="foo-pool",
-        workload_identity_pool_provider_id="bar-provider")
-    ```
-
 
     :param str project: The project in which the resource belongs. If it
            is not provided, the provider project is used.