pulumi-gcp 6.68.0a1697867869__py3-none-any.whl → 6.68.0a1698199636__py3-none-any.whl

pulumi_gcp/cloudfunctionsv2/function.py

@@ -72,7 +72,17 @@ class FunctionArgs:
              name: Optional[pulumi.Input[str]] = None,
              project: Optional[pulumi.Input[str]] = None,
              service_config: Optional[pulumi.Input['FunctionServiceConfigArgs']] = None,
-             opts: Optional[pulumi.ResourceOptions]=None):
+             opts: Optional[pulumi.ResourceOptions] = None,
+             **kwargs):
+        if build_config is None and 'buildConfig' in kwargs:
+            build_config = kwargs['buildConfig']
+        if event_trigger is None and 'eventTrigger' in kwargs:
+            event_trigger = kwargs['eventTrigger']
+        if kms_key_name is None and 'kmsKeyName' in kwargs:
+            kms_key_name = kwargs['kmsKeyName']
+        if service_config is None and 'serviceConfig' in kwargs:
+            service_config = kwargs['serviceConfig']
+
         if build_config is not None:
             _setter("build_config", build_config)
         if description is not None:
@@ -287,7 +297,19 @@ class _FunctionState:
              state: Optional[pulumi.Input[str]] = None,
              update_time: Optional[pulumi.Input[str]] = None,
              url: Optional[pulumi.Input[str]] = None,
-             opts: Optional[pulumi.ResourceOptions]=None):
+             opts: Optional[pulumi.ResourceOptions] = None,
+             **kwargs):
+        if build_config is None and 'buildConfig' in kwargs:
+            build_config = kwargs['buildConfig']
+        if event_trigger is None and 'eventTrigger' in kwargs:
+            event_trigger = kwargs['eventTrigger']
+        if kms_key_name is None and 'kmsKeyName' in kwargs:
+            kms_key_name = kwargs['kmsKeyName']
+        if service_config is None and 'serviceConfig' in kwargs:
+            service_config = kwargs['serviceConfig']
+        if update_time is None and 'updateTime' in kwargs:
+            update_time = kwargs['updateTime']
+
         if build_config is not None:
             _setter("build_config", build_config)
         if description is not None:
@@ -506,186 +528,6 @@ class Function(pulumi.CustomResource):
         * [API documentation](https://cloud.google.com/functions/docs/reference/rest/v2beta/projects.locations.functions)
 
         ## Example Usage
-        ### Cloudfunctions2 Basic Gcs
-
-        ```python
-        import pulumi
-        import pulumi_gcp as gcp
-
-        source_bucket = gcp.storage.Bucket("source-bucket",
-            location="US",
-            uniform_bucket_level_access=True)
-        object = gcp.storage.BucketObject("object",
-            bucket=source_bucket.name,
-            source=pulumi.FileAsset("function-source.zip"))
-        # Add path to the zipped function source code
-        trigger_bucket = gcp.storage.Bucket("trigger-bucket",
-            location="us-central1",
-            uniform_bucket_level_access=True)
-        gcs_account = gcp.storage.get_project_service_account()
-        # To use GCS CloudEvent triggers, the GCS service account requires the Pub/Sub Publisher(roles/pubsub.publisher) IAM role in the specified project.
-        # (See https://cloud.google.com/eventarc/docs/run/quickstart-storage#before-you-begin)
-        gcs_pubsub_publishing = gcp.projects.IAMMember("gcs-pubsub-publishing",
-            project="my-project-name",
-            role="roles/pubsub.publisher",
-            member=f"serviceAccount:{gcs_account.email_address}")
-        account = gcp.service_account.Account("account",
-            account_id="gcf-sa",
-            display_name="Test Service Account - used for both the cloud function and eventarc trigger in the test")
-        # Permissions on the service account used by the function and Eventarc trigger
-        invoking = gcp.projects.IAMMember("invoking",
-            project="my-project-name",
-            role="roles/run.invoker",
-            member=account.email.apply(lambda email: f"serviceAccount:{email}"),
-            opts=pulumi.ResourceOptions(depends_on=[gcs_pubsub_publishing]))
-        event_receiving = gcp.projects.IAMMember("event-receiving",
-            project="my-project-name",
-            role="roles/eventarc.eventReceiver",
-            member=account.email.apply(lambda email: f"serviceAccount:{email}"),
-            opts=pulumi.ResourceOptions(depends_on=[invoking]))
-        artifactregistry_reader = gcp.projects.IAMMember("artifactregistry-reader",
-            project="my-project-name",
-            role="roles/artifactregistry.reader",
-            member=account.email.apply(lambda email: f"serviceAccount:{email}"),
-            opts=pulumi.ResourceOptions(depends_on=[event_receiving]))
-        function = gcp.cloudfunctionsv2.Function("function",
-            location="us-central1",
-            description="a new function",
-            build_config=gcp.cloudfunctionsv2.FunctionBuildConfigArgs(
-                runtime="nodejs12",
-                entry_point="entryPoint",
-                environment_variables={
-                    "BUILD_CONFIG_TEST": "build_test",
-                },
-                source=gcp.cloudfunctionsv2.FunctionBuildConfigSourceArgs(
-                    storage_source=gcp.cloudfunctionsv2.FunctionBuildConfigSourceStorageSourceArgs(
-                        bucket=source_bucket.name,
-                        object=object.name,
-                    ),
-                ),
-            ),
-            service_config=gcp.cloudfunctionsv2.FunctionServiceConfigArgs(
-                max_instance_count=3,
-                min_instance_count=1,
-                available_memory="256M",
-                timeout_seconds=60,
-                environment_variables={
-                    "SERVICE_CONFIG_TEST": "config_test",
-                },
-                ingress_settings="ALLOW_INTERNAL_ONLY",
-                all_traffic_on_latest_revision=True,
-                service_account_email=account.email,
-            ),
-            event_trigger=gcp.cloudfunctionsv2.FunctionEventTriggerArgs(
-                trigger_region="us-central1",
-                event_type="google.cloud.storage.object.v1.finalized",
-                retry_policy="RETRY_POLICY_RETRY",
-                service_account_email=account.email,
-                event_filters=[gcp.cloudfunctionsv2.FunctionEventTriggerEventFilterArgs(
-                    attribute="bucket",
-                    value=trigger_bucket.name,
-                )],
-            ),
-            opts=pulumi.ResourceOptions(depends_on=[
-                    event_receiving,
-                    artifactregistry_reader,
-                ]))
-        ```
-        ### Cloudfunctions2 Basic Auditlogs
-
-        ```python
-        import pulumi
-        import pulumi_gcp as gcp
-
-        # This example follows the examples shown in this Google Cloud Community blog post
-        # https://medium.com/google-cloud/applying-a-path-pattern-when-filtering-in-eventarc-f06b937b4c34
-        # and the docs:
-        # https://cloud.google.com/eventarc/docs/path-patterns
-        source_bucket = gcp.storage.Bucket("source-bucket",
-            location="US",
-            uniform_bucket_level_access=True)
-        object = gcp.storage.BucketObject("object",
-            bucket=source_bucket.name,
-            source=pulumi.FileAsset("function-source.zip"))
-        # Add path to the zipped function source code
-        account = gcp.service_account.Account("account",
-            account_id="gcf-sa",
-            display_name="Test Service Account - used for both the cloud function and eventarc trigger in the test")
-        # Note: The right way of listening for Cloud Storage events is to use a Cloud Storage trigger.
-        # Here we use Audit Logs to monitor the bucket so path patterns can be used in the example of
-        # google_cloudfunctions2_function below (Audit Log events have path pattern support)
-        audit_log_bucket = gcp.storage.Bucket("audit-log-bucket",
-            location="us-central1",
-            uniform_bucket_level_access=True)
-        # Permissions on the service account used by the function and Eventarc trigger
-        invoking = gcp.projects.IAMMember("invoking",
-            project="my-project-name",
-            role="roles/run.invoker",
-            member=account.email.apply(lambda email: f"serviceAccount:{email}"))
-        event_receiving = gcp.projects.IAMMember("event-receiving",
-            project="my-project-name",
-            role="roles/eventarc.eventReceiver",
-            member=account.email.apply(lambda email: f"serviceAccount:{email}"),
-            opts=pulumi.ResourceOptions(depends_on=[invoking]))
-        artifactregistry_reader = gcp.projects.IAMMember("artifactregistry-reader",
-            project="my-project-name",
-            role="roles/artifactregistry.reader",
-            member=account.email.apply(lambda email: f"serviceAccount:{email}"),
-            opts=pulumi.ResourceOptions(depends_on=[event_receiving]))
-        function = gcp.cloudfunctionsv2.Function("function",
-            location="us-central1",
-            description="a new function",
-            build_config=gcp.cloudfunctionsv2.FunctionBuildConfigArgs(
-                runtime="nodejs12",
-                entry_point="entryPoint",
-                environment_variables={
-                    "BUILD_CONFIG_TEST": "build_test",
-                },
-                source=gcp.cloudfunctionsv2.FunctionBuildConfigSourceArgs(
-                    storage_source=gcp.cloudfunctionsv2.FunctionBuildConfigSourceStorageSourceArgs(
-                        bucket=source_bucket.name,
-                        object=object.name,
-                    ),
-                ),
-            ),
-            service_config=gcp.cloudfunctionsv2.FunctionServiceConfigArgs(
-                max_instance_count=3,
-                min_instance_count=1,
-                available_memory="256M",
-                timeout_seconds=60,
-                environment_variables={
-                    "SERVICE_CONFIG_TEST": "config_test",
-                },
-                ingress_settings="ALLOW_INTERNAL_ONLY",
-                all_traffic_on_latest_revision=True,
-                service_account_email=account.email,
-            ),
-            event_trigger=gcp.cloudfunctionsv2.FunctionEventTriggerArgs(
-                trigger_region="us-central1",
-                event_type="google.cloud.audit.log.v1.written",
-                retry_policy="RETRY_POLICY_RETRY",
-                service_account_email=account.email,
-                event_filters=[
-                    gcp.cloudfunctionsv2.FunctionEventTriggerEventFilterArgs(
-                        attribute="serviceName",
-                        value="storage.googleapis.com",
-                    ),
-                    gcp.cloudfunctionsv2.FunctionEventTriggerEventFilterArgs(
-                        attribute="methodName",
-                        value="storage.objects.create",
-                    ),
-                    gcp.cloudfunctionsv2.FunctionEventTriggerEventFilterArgs(
-                        attribute="resourceName",
-                        value=audit_log_bucket.name.apply(lambda name: f"/projects/_/buckets/{name}/objects/*.txt"),
-                        operator="match-path-pattern",
-                    ),
-                ],
-            ),
-            opts=pulumi.ResourceOptions(depends_on=[
-                    event_receiving,
-                    artifactregistry_reader,
-                ]))
-        ```
 
         ## Import
 
@@ -740,186 +582,6 @@ class Function(pulumi.CustomResource):
         * [API documentation](https://cloud.google.com/functions/docs/reference/rest/v2beta/projects.locations.functions)
 
         ## Example Usage
-        ### Cloudfunctions2 Basic Gcs
-
-        ```python
-        import pulumi
-        import pulumi_gcp as gcp
-
-        source_bucket = gcp.storage.Bucket("source-bucket",
-            location="US",
-            uniform_bucket_level_access=True)
-        object = gcp.storage.BucketObject("object",
-            bucket=source_bucket.name,
-            source=pulumi.FileAsset("function-source.zip"))
-        # Add path to the zipped function source code
-        trigger_bucket = gcp.storage.Bucket("trigger-bucket",
-            location="us-central1",
-            uniform_bucket_level_access=True)
-        gcs_account = gcp.storage.get_project_service_account()
-        # To use GCS CloudEvent triggers, the GCS service account requires the Pub/Sub Publisher(roles/pubsub.publisher) IAM role in the specified project.
-        # (See https://cloud.google.com/eventarc/docs/run/quickstart-storage#before-you-begin)
-        gcs_pubsub_publishing = gcp.projects.IAMMember("gcs-pubsub-publishing",
-            project="my-project-name",
-            role="roles/pubsub.publisher",
-            member=f"serviceAccount:{gcs_account.email_address}")
-        account = gcp.service_account.Account("account",
-            account_id="gcf-sa",
-            display_name="Test Service Account - used for both the cloud function and eventarc trigger in the test")
-        # Permissions on the service account used by the function and Eventarc trigger
-        invoking = gcp.projects.IAMMember("invoking",
-            project="my-project-name",
-            role="roles/run.invoker",
-            member=account.email.apply(lambda email: f"serviceAccount:{email}"),
-            opts=pulumi.ResourceOptions(depends_on=[gcs_pubsub_publishing]))
-        event_receiving = gcp.projects.IAMMember("event-receiving",
-            project="my-project-name",
-            role="roles/eventarc.eventReceiver",
-            member=account.email.apply(lambda email: f"serviceAccount:{email}"),
-            opts=pulumi.ResourceOptions(depends_on=[invoking]))
-        artifactregistry_reader = gcp.projects.IAMMember("artifactregistry-reader",
-            project="my-project-name",
-            role="roles/artifactregistry.reader",
-            member=account.email.apply(lambda email: f"serviceAccount:{email}"),
-            opts=pulumi.ResourceOptions(depends_on=[event_receiving]))
-        function = gcp.cloudfunctionsv2.Function("function",
-            location="us-central1",
-            description="a new function",
-            build_config=gcp.cloudfunctionsv2.FunctionBuildConfigArgs(
-                runtime="nodejs12",
-                entry_point="entryPoint",
-                environment_variables={
-                    "BUILD_CONFIG_TEST": "build_test",
-                },
-                source=gcp.cloudfunctionsv2.FunctionBuildConfigSourceArgs(
-                    storage_source=gcp.cloudfunctionsv2.FunctionBuildConfigSourceStorageSourceArgs(
-                        bucket=source_bucket.name,
-                        object=object.name,
-                    ),
-                ),
-            ),
-            service_config=gcp.cloudfunctionsv2.FunctionServiceConfigArgs(
-                max_instance_count=3,
-                min_instance_count=1,
-                available_memory="256M",
-                timeout_seconds=60,
-                environment_variables={
-                    "SERVICE_CONFIG_TEST": "config_test",
-                },
-                ingress_settings="ALLOW_INTERNAL_ONLY",
-                all_traffic_on_latest_revision=True,
-                service_account_email=account.email,
-            ),
-            event_trigger=gcp.cloudfunctionsv2.FunctionEventTriggerArgs(
-                trigger_region="us-central1",
-                event_type="google.cloud.storage.object.v1.finalized",
-                retry_policy="RETRY_POLICY_RETRY",
-                service_account_email=account.email,
-                event_filters=[gcp.cloudfunctionsv2.FunctionEventTriggerEventFilterArgs(
-                    attribute="bucket",
-                    value=trigger_bucket.name,
-                )],
-            ),
-            opts=pulumi.ResourceOptions(depends_on=[
-                    event_receiving,
-                    artifactregistry_reader,
-                ]))
-        ```
-        ### Cloudfunctions2 Basic Auditlogs
-
-        ```python
-        import pulumi
-        import pulumi_gcp as gcp
-
-        # This example follows the examples shown in this Google Cloud Community blog post
-        # https://medium.com/google-cloud/applying-a-path-pattern-when-filtering-in-eventarc-f06b937b4c34
-        # and the docs:
-        # https://cloud.google.com/eventarc/docs/path-patterns
-        source_bucket = gcp.storage.Bucket("source-bucket",
-            location="US",
-            uniform_bucket_level_access=True)
-        object = gcp.storage.BucketObject("object",
-            bucket=source_bucket.name,
-            source=pulumi.FileAsset("function-source.zip"))
-        # Add path to the zipped function source code
-        account = gcp.service_account.Account("account",
-            account_id="gcf-sa",
-            display_name="Test Service Account - used for both the cloud function and eventarc trigger in the test")
-        # Note: The right way of listening for Cloud Storage events is to use a Cloud Storage trigger.
-        # Here we use Audit Logs to monitor the bucket so path patterns can be used in the example of
-        # google_cloudfunctions2_function below (Audit Log events have path pattern support)
-        audit_log_bucket = gcp.storage.Bucket("audit-log-bucket",
-            location="us-central1",
-            uniform_bucket_level_access=True)
-        # Permissions on the service account used by the function and Eventarc trigger
-        invoking = gcp.projects.IAMMember("invoking",
-            project="my-project-name",
-            role="roles/run.invoker",
-            member=account.email.apply(lambda email: f"serviceAccount:{email}"))
-        event_receiving = gcp.projects.IAMMember("event-receiving",
-            project="my-project-name",
-            role="roles/eventarc.eventReceiver",
-            member=account.email.apply(lambda email: f"serviceAccount:{email}"),
-            opts=pulumi.ResourceOptions(depends_on=[invoking]))
-        artifactregistry_reader = gcp.projects.IAMMember("artifactregistry-reader",
-            project="my-project-name",
-            role="roles/artifactregistry.reader",
-            member=account.email.apply(lambda email: f"serviceAccount:{email}"),
-            opts=pulumi.ResourceOptions(depends_on=[event_receiving]))
-        function = gcp.cloudfunctionsv2.Function("function",
-            location="us-central1",
-            description="a new function",
-            build_config=gcp.cloudfunctionsv2.FunctionBuildConfigArgs(
-                runtime="nodejs12",
-                entry_point="entryPoint",
-                environment_variables={
-                    "BUILD_CONFIG_TEST": "build_test",
-                },
-                source=gcp.cloudfunctionsv2.FunctionBuildConfigSourceArgs(
-                    storage_source=gcp.cloudfunctionsv2.FunctionBuildConfigSourceStorageSourceArgs(
-                        bucket=source_bucket.name,
-                        object=object.name,
-                    ),
-                ),
-            ),
-            service_config=gcp.cloudfunctionsv2.FunctionServiceConfigArgs(
-                max_instance_count=3,
-                min_instance_count=1,
-                available_memory="256M",
-                timeout_seconds=60,
-                environment_variables={
-                    "SERVICE_CONFIG_TEST": "config_test",
-                },
-                ingress_settings="ALLOW_INTERNAL_ONLY",
-                all_traffic_on_latest_revision=True,
-                service_account_email=account.email,
-            ),
-            event_trigger=gcp.cloudfunctionsv2.FunctionEventTriggerArgs(
-                trigger_region="us-central1",
-                event_type="google.cloud.audit.log.v1.written",
-                retry_policy="RETRY_POLICY_RETRY",
-                service_account_email=account.email,
-                event_filters=[
-                    gcp.cloudfunctionsv2.FunctionEventTriggerEventFilterArgs(
-                        attribute="serviceName",
-                        value="storage.googleapis.com",
-                    ),
-                    gcp.cloudfunctionsv2.FunctionEventTriggerEventFilterArgs(
-                        attribute="methodName",
-                        value="storage.objects.create",
-                    ),
-                    gcp.cloudfunctionsv2.FunctionEventTriggerEventFilterArgs(
-                        attribute="resourceName",
-                        value=audit_log_bucket.name.apply(lambda name: f"/projects/_/buckets/{name}/objects/*.txt"),
-                        operator="match-path-pattern",
-                    ),
-                ],
-            ),
-            opts=pulumi.ResourceOptions(depends_on=[
-                    event_receiving,
-                    artifactregistry_reader,
-                ]))
-        ```
 
         ## Import
 
@@ -974,29 +636,17 @@ class Function(pulumi.CustomResource):
                 raise TypeError('__props__ is only valid when passed in combination with a valid opts.id to get an existing resource')
             __props__ = FunctionArgs.__new__(FunctionArgs)
 
-            if build_config is not None and not isinstance(build_config, FunctionBuildConfigArgs):
-                build_config = build_config or {}
-                def _setter(key, value):
-                    build_config[key] = value
-                FunctionBuildConfigArgs._configure(_setter, **build_config)
+            build_config = _utilities.configure(build_config, FunctionBuildConfigArgs, True)
             __props__.__dict__["build_config"] = build_config
             __props__.__dict__["description"] = description
-            if event_trigger is not None and not isinstance(event_trigger, FunctionEventTriggerArgs):
-                event_trigger = event_trigger or {}
-                def _setter(key, value):
-                    event_trigger[key] = value
-                FunctionEventTriggerArgs._configure(_setter, **event_trigger)
+            event_trigger = _utilities.configure(event_trigger, FunctionEventTriggerArgs, True)
             __props__.__dict__["event_trigger"] = event_trigger
             __props__.__dict__["kms_key_name"] = kms_key_name
             __props__.__dict__["labels"] = labels
             __props__.__dict__["location"] = location
             __props__.__dict__["name"] = name
             __props__.__dict__["project"] = project
-            if service_config is not None and not isinstance(service_config, FunctionServiceConfigArgs):
-                service_config = service_config or {}
-                def _setter(key, value):
-                    service_config[key] = value
-                FunctionServiceConfigArgs._configure(_setter, **service_config)
+            service_config = _utilities.configure(service_config, FunctionServiceConfigArgs, True)
             __props__.__dict__["service_config"] = service_config
             __props__.__dict__["environment"] = None
             __props__.__dict__["state"] = None

pulumi_gcp/cloudfunctionsv2/function_iam_binding.py

@@ -56,13 +56,23 @@ class FunctionIamBindingArgs:
     @staticmethod
     def _configure(
              _setter: Callable[[Any, Any], None],
-             cloud_function: pulumi.Input[str],
-             members: pulumi.Input[Sequence[pulumi.Input[str]]],
-             role: pulumi.Input[str],
+             cloud_function: Optional[pulumi.Input[str]] = None,
+             members: Optional[pulumi.Input[Sequence[pulumi.Input[str]]]] = None,
+             role: Optional[pulumi.Input[str]] = None,
              condition: Optional[pulumi.Input['FunctionIamBindingConditionArgs']] = None,
              location: Optional[pulumi.Input[str]] = None,
              project: Optional[pulumi.Input[str]] = None,
-             opts: Optional[pulumi.ResourceOptions]=None):
+             opts: Optional[pulumi.ResourceOptions] = None,
+             **kwargs):
+        if cloud_function is None and 'cloudFunction' in kwargs:
+            cloud_function = kwargs['cloudFunction']
+        if cloud_function is None:
+            raise TypeError("Missing 'cloud_function' argument")
+        if members is None:
+            raise TypeError("Missing 'members' argument")
+        if role is None:
+            raise TypeError("Missing 'role' argument")
+
         _setter("cloud_function", cloud_function)
         _setter("members", members)
         _setter("role", role)
@@ -208,7 +218,11 @@ class _FunctionIamBindingState:
              members: Optional[pulumi.Input[Sequence[pulumi.Input[str]]]] = None,
              project: Optional[pulumi.Input[str]] = None,
              role: Optional[pulumi.Input[str]] = None,
-             opts: Optional[pulumi.ResourceOptions]=None):
+             opts: Optional[pulumi.ResourceOptions] = None,
+             **kwargs):
+        if cloud_function is None and 'cloudFunction' in kwargs:
+            cloud_function = kwargs['cloudFunction']
+
         if cloud_function is not None:
             _setter("cloud_function", cloud_function)
         if condition is not None:
@@ -345,51 +359,6 @@ class FunctionIamBinding(pulumi.CustomResource):
 
         > **Note:** `cloudfunctionsv2.FunctionIamBinding` resources **can be** used in conjunction with `cloudfunctionsv2.FunctionIamMember` resources **only if** they do not grant privilege to the same role.
 
-        ## google\\_cloudfunctions2\\_function\\_iam\\_policy
-
-        ```python
-        import pulumi
-        import pulumi_gcp as gcp
-
-        admin = gcp.organizations.get_iam_policy(bindings=[gcp.organizations.GetIAMPolicyBindingArgs(
-            role="roles/viewer",
-            members=["user:jane@example.com"],
-        )])
-        policy = gcp.cloudfunctionsv2.FunctionIamPolicy("policy",
-            project=google_cloudfunctions2_function["function"]["project"],
-            location=google_cloudfunctions2_function["function"]["location"],
-            cloud_function=google_cloudfunctions2_function["function"]["name"],
-            policy_data=admin.policy_data)
-        ```
-
-        ## google\\_cloudfunctions2\\_function\\_iam\\_binding
-
-        ```python
-        import pulumi
-        import pulumi_gcp as gcp
-
-        binding = gcp.cloudfunctionsv2.FunctionIamBinding("binding",
-            project=google_cloudfunctions2_function["function"]["project"],
-            location=google_cloudfunctions2_function["function"]["location"],
-            cloud_function=google_cloudfunctions2_function["function"]["name"],
-            role="roles/viewer",
-            members=["user:jane@example.com"])
-        ```
-
-        ## google\\_cloudfunctions2\\_function\\_iam\\_member
-
-        ```python
-        import pulumi
-        import pulumi_gcp as gcp
-
-        member = gcp.cloudfunctionsv2.FunctionIamMember("member",
-            project=google_cloudfunctions2_function["function"]["project"],
-            location=google_cloudfunctions2_function["function"]["location"],
-            cloud_function=google_cloudfunctions2_function["function"]["name"],
-            role="roles/viewer",
-            member="user:jane@example.com")
-        ```
-
         ## Import
 
         For all import syntaxes, the "resource in question" can take any of the following forms* projects/{{project}}/locations/{{location}}/functions/{{cloud_function}} * {{project}}/{{location}}/{{cloud_function}} * {{location}}/{{cloud_function}} * {{cloud_function}} Any variables not passed in the import command will be taken from the provider configuration. Cloud Functions (2nd gen) function IAM resources can be imported using the resource identifiers, role, and member. IAM member imports use space-delimited identifiersthe resource in question, the role, and the member identity, e.g.
@@ -457,51 +426,6 @@ class FunctionIamBinding(pulumi.CustomResource):
 
         > **Note:** `cloudfunctionsv2.FunctionIamBinding` resources **can be** used in conjunction with `cloudfunctionsv2.FunctionIamMember` resources **only if** they do not grant privilege to the same role.
 
-        ## google\\_cloudfunctions2\\_function\\_iam\\_policy
-
-        ```python
-        import pulumi
-        import pulumi_gcp as gcp
-
-        admin = gcp.organizations.get_iam_policy(bindings=[gcp.organizations.GetIAMPolicyBindingArgs(
-            role="roles/viewer",
-            members=["user:jane@example.com"],
-        )])
-        policy = gcp.cloudfunctionsv2.FunctionIamPolicy("policy",
-            project=google_cloudfunctions2_function["function"]["project"],
-            location=google_cloudfunctions2_function["function"]["location"],
-            cloud_function=google_cloudfunctions2_function["function"]["name"],
-            policy_data=admin.policy_data)
-        ```
-
-        ## google\\_cloudfunctions2\\_function\\_iam\\_binding
-
-        ```python
-        import pulumi
-        import pulumi_gcp as gcp
-
-        binding = gcp.cloudfunctionsv2.FunctionIamBinding("binding",
-            project=google_cloudfunctions2_function["function"]["project"],
-            location=google_cloudfunctions2_function["function"]["location"],
-            cloud_function=google_cloudfunctions2_function["function"]["name"],
-            role="roles/viewer",
-            members=["user:jane@example.com"])
-        ```
-
-        ## google\\_cloudfunctions2\\_function\\_iam\\_member
-
-        ```python
-        import pulumi
-        import pulumi_gcp as gcp
-
-        member = gcp.cloudfunctionsv2.FunctionIamMember("member",
-            project=google_cloudfunctions2_function["function"]["project"],
-            location=google_cloudfunctions2_function["function"]["location"],
-            cloud_function=google_cloudfunctions2_function["function"]["name"],
-            role="roles/viewer",
-            member="user:jane@example.com")
-        ```
-
         ## Import
 
         For all import syntaxes, the "resource in question" can take any of the following forms* projects/{{project}}/locations/{{location}}/functions/{{cloud_function}} * {{project}}/{{location}}/{{cloud_function}} * {{location}}/{{cloud_function}} * {{cloud_function}} Any variables not passed in the import command will be taken from the provider configuration. Cloud Functions (2nd gen) function IAM resources can be imported using the resource identifiers, role, and member. IAM member imports use space-delimited identifiersthe resource in question, the role, and the member identity, e.g.
@@ -563,11 +487,7 @@ class FunctionIamBinding(pulumi.CustomResource):
             if cloud_function is None and not opts.urn:
                 raise TypeError("Missing required property 'cloud_function'")
             __props__.__dict__["cloud_function"] = cloud_function
-            if condition is not None and not isinstance(condition, FunctionIamBindingConditionArgs):
-                condition = condition or {}
-                def _setter(key, value):
-                    condition[key] = value
-                FunctionIamBindingConditionArgs._configure(_setter, **condition)
+            condition = _utilities.configure(condition, FunctionIamBindingConditionArgs, True)
             __props__.__dict__["condition"] = condition
             __props__.__dict__["location"] = location
             if members is None and not opts.urn: