pulumi-gcp 7.0.0rc0__py3-none-any.whl → 7.1.0__py3-none-any.whl

pulumi_gcp/spanner/outputs.py

@@ -8,13 +8,20 @@ import pulumi
 import pulumi.runtime
 from typing import Any, Mapping, Optional, Sequence, Union, overload
 from .. import _utilities
+from . import outputs
 
 __all__ = [
     'DatabaseEncryptionConfig',
     'DatabaseIAMBindingCondition',
     'DatabaseIAMMemberCondition',
+    'InstanceAutoscalingConfig',
+    'InstanceAutoscalingConfigAutoscalingLimits',
+    'InstanceAutoscalingConfigAutoscalingTargets',
     'InstanceIAMBindingCondition',
     'InstanceIAMMemberCondition',
+    'GetInstanceAutoscalingConfigResult',
+    'GetInstanceAutoscalingConfigAutoscalingLimitResult',
+    'GetInstanceAutoscalingConfigAutoscalingTargetResult',
 ]
 
 @pulumi.output_type
@@ -108,6 +115,178 @@ class DatabaseIAMMemberCondition(dict):
         return pulumi.get(self, "description")
 
 
+@pulumi.output_type
+class InstanceAutoscalingConfig(dict):
+    @staticmethod
+    def __key_warning(key: str):
+        suggest = None
+        if key == "autoscalingLimits":
+            suggest = "autoscaling_limits"
+        elif key == "autoscalingTargets":
+            suggest = "autoscaling_targets"
+
+        if suggest:
+            pulumi.log.warn(f"Key '{key}' not found in InstanceAutoscalingConfig. Access the value via the '{suggest}' property getter instead.")
+
+    def __getitem__(self, key: str) -> Any:
+        InstanceAutoscalingConfig.__key_warning(key)
+        return super().__getitem__(key)
+
+    def get(self, key: str, default = None) -> Any:
+        InstanceAutoscalingConfig.__key_warning(key)
+        return super().get(key, default)
+
+    def __init__(__self__, *,
+                 autoscaling_limits: Optional['outputs.InstanceAutoscalingConfigAutoscalingLimits'] = None,
+                 autoscaling_targets: Optional['outputs.InstanceAutoscalingConfigAutoscalingTargets'] = None):
+        """
+        :param 'InstanceAutoscalingConfigAutoscalingLimitsArgs' autoscaling_limits: Defines scale in controls to reduce the risk of response latency
+               and outages due to abrupt scale-in events
+               Structure is documented below.
+        :param 'InstanceAutoscalingConfigAutoscalingTargetsArgs' autoscaling_targets: Defines scale in controls to reduce the risk of response latency
+               and outages due to abrupt scale-in events
+               Structure is documented below.
+        """
+        if autoscaling_limits is not None:
+            pulumi.set(__self__, "autoscaling_limits", autoscaling_limits)
+        if autoscaling_targets is not None:
+            pulumi.set(__self__, "autoscaling_targets", autoscaling_targets)
+
+    @property
+    @pulumi.getter(name="autoscalingLimits")
+    def autoscaling_limits(self) -> Optional['outputs.InstanceAutoscalingConfigAutoscalingLimits']:
+        """
+        Defines scale in controls to reduce the risk of response latency
+        and outages due to abrupt scale-in events
+        Structure is documented below.
+        """
+        return pulumi.get(self, "autoscaling_limits")
+
+    @property
+    @pulumi.getter(name="autoscalingTargets")
+    def autoscaling_targets(self) -> Optional['outputs.InstanceAutoscalingConfigAutoscalingTargets']:
+        """
+        Defines scale in controls to reduce the risk of response latency
+        and outages due to abrupt scale-in events
+        Structure is documented below.
+        """
+        return pulumi.get(self, "autoscaling_targets")
+
+
+@pulumi.output_type
+class InstanceAutoscalingConfigAutoscalingLimits(dict):
+    @staticmethod
+    def __key_warning(key: str):
+        suggest = None
+        if key == "maxProcessingUnits":
+            suggest = "max_processing_units"
+        elif key == "minProcessingUnits":
+            suggest = "min_processing_units"
+
+        if suggest:
+            pulumi.log.warn(f"Key '{key}' not found in InstanceAutoscalingConfigAutoscalingLimits. Access the value via the '{suggest}' property getter instead.")
+
+    def __getitem__(self, key: str) -> Any:
+        InstanceAutoscalingConfigAutoscalingLimits.__key_warning(key)
+        return super().__getitem__(key)
+
+    def get(self, key: str, default = None) -> Any:
+        InstanceAutoscalingConfigAutoscalingLimits.__key_warning(key)
+        return super().get(key, default)
+
+    def __init__(__self__, *,
+                 max_processing_units: Optional[int] = None,
+                 min_processing_units: Optional[int] = None):
+        """
+        :param int max_processing_units: Specifies maximum number of processing units allocated to the instance.
+               If set, this number should be multiples of 1000 and be greater than or equal to
+               min_processing_units.
+        :param int min_processing_units: Specifies minimum number of processing units allocated to the instance.
+               If set, this number should be multiples of 1000.
+        """
+        if max_processing_units is not None:
+            pulumi.set(__self__, "max_processing_units", max_processing_units)
+        if min_processing_units is not None:
+            pulumi.set(__self__, "min_processing_units", min_processing_units)
+
+    @property
+    @pulumi.getter(name="maxProcessingUnits")
+    def max_processing_units(self) -> Optional[int]:
+        """
+        Specifies maximum number of processing units allocated to the instance.
+        If set, this number should be multiples of 1000 and be greater than or equal to
+        min_processing_units.
+        """
+        return pulumi.get(self, "max_processing_units")
+
+    @property
+    @pulumi.getter(name="minProcessingUnits")
+    def min_processing_units(self) -> Optional[int]:
+        """
+        Specifies minimum number of processing units allocated to the instance.
+        If set, this number should be multiples of 1000.
+        """
+        return pulumi.get(self, "min_processing_units")
+
+
+@pulumi.output_type
+class InstanceAutoscalingConfigAutoscalingTargets(dict):
+    @staticmethod
+    def __key_warning(key: str):
+        suggest = None
+        if key == "highPriorityCpuUtilizationPercent":
+            suggest = "high_priority_cpu_utilization_percent"
+        elif key == "storageUtilizationPercent":
+            suggest = "storage_utilization_percent"
+
+        if suggest:
+            pulumi.log.warn(f"Key '{key}' not found in InstanceAutoscalingConfigAutoscalingTargets. Access the value via the '{suggest}' property getter instead.")
+
+    def __getitem__(self, key: str) -> Any:
+        InstanceAutoscalingConfigAutoscalingTargets.__key_warning(key)
+        return super().__getitem__(key)
+
+    def get(self, key: str, default = None) -> Any:
+        InstanceAutoscalingConfigAutoscalingTargets.__key_warning(key)
+        return super().get(key, default)
+
+    def __init__(__self__, *,
+                 high_priority_cpu_utilization_percent: Optional[int] = None,
+                 storage_utilization_percent: Optional[int] = None):
+        """
+        :param int high_priority_cpu_utilization_percent: Specifies the target high priority cpu utilization percentage that the autoscaler
+               should be trying to achieve for the instance.
+               This number is on a scale from 0 (no utilization) to 100 (full utilization)..
+        :param int storage_utilization_percent: Specifies the target storage utilization percentage that the autoscaler
+               should be trying to achieve for the instance.
+               This number is on a scale from 0 (no utilization) to 100 (full utilization).
+        """
+        if high_priority_cpu_utilization_percent is not None:
+            pulumi.set(__self__, "high_priority_cpu_utilization_percent", high_priority_cpu_utilization_percent)
+        if storage_utilization_percent is not None:
+            pulumi.set(__self__, "storage_utilization_percent", storage_utilization_percent)
+
+    @property
+    @pulumi.getter(name="highPriorityCpuUtilizationPercent")
+    def high_priority_cpu_utilization_percent(self) -> Optional[int]:
+        """
+        Specifies the target high priority cpu utilization percentage that the autoscaler
+        should be trying to achieve for the instance.
+        This number is on a scale from 0 (no utilization) to 100 (full utilization)..
+        """
+        return pulumi.get(self, "high_priority_cpu_utilization_percent")
+
+    @property
+    @pulumi.getter(name="storageUtilizationPercent")
+    def storage_utilization_percent(self) -> Optional[int]:
+        """
+        Specifies the target storage utilization percentage that the autoscaler
+        should be trying to achieve for the instance.
+        This number is on a scale from 0 (no utilization) to 100 (full utilization).
+        """
+        return pulumi.get(self, "storage_utilization_percent")
+
+
 @pulumi.output_type
 class InstanceIAMBindingCondition(dict):
     def __init__(__self__, *,
@@ -162,3 +341,60 @@ class InstanceIAMMemberCondition(dict):
         return pulumi.get(self, "description")
 
 
+@pulumi.output_type
+class GetInstanceAutoscalingConfigResult(dict):
+    def __init__(__self__, *,
+                 autoscaling_limits: Sequence['outputs.GetInstanceAutoscalingConfigAutoscalingLimitResult'],
+                 autoscaling_targets: Sequence['outputs.GetInstanceAutoscalingConfigAutoscalingTargetResult']):
+        pulumi.set(__self__, "autoscaling_limits", autoscaling_limits)
+        pulumi.set(__self__, "autoscaling_targets", autoscaling_targets)
+
+    @property
+    @pulumi.getter(name="autoscalingLimits")
+    def autoscaling_limits(self) -> Sequence['outputs.GetInstanceAutoscalingConfigAutoscalingLimitResult']:
+        return pulumi.get(self, "autoscaling_limits")
+
+    @property
+    @pulumi.getter(name="autoscalingTargets")
+    def autoscaling_targets(self) -> Sequence['outputs.GetInstanceAutoscalingConfigAutoscalingTargetResult']:
+        return pulumi.get(self, "autoscaling_targets")
+
+
+@pulumi.output_type
+class GetInstanceAutoscalingConfigAutoscalingLimitResult(dict):
+    def __init__(__self__, *,
+                 max_processing_units: int,
+                 min_processing_units: int):
+        pulumi.set(__self__, "max_processing_units", max_processing_units)
+        pulumi.set(__self__, "min_processing_units", min_processing_units)
+
+    @property
+    @pulumi.getter(name="maxProcessingUnits")
+    def max_processing_units(self) -> int:
+        return pulumi.get(self, "max_processing_units")
+
+    @property
+    @pulumi.getter(name="minProcessingUnits")
+    def min_processing_units(self) -> int:
+        return pulumi.get(self, "min_processing_units")
+
+
+@pulumi.output_type
+class GetInstanceAutoscalingConfigAutoscalingTargetResult(dict):
+    def __init__(__self__, *,
+                 high_priority_cpu_utilization_percent: int,
+                 storage_utilization_percent: int):
+        pulumi.set(__self__, "high_priority_cpu_utilization_percent", high_priority_cpu_utilization_percent)
+        pulumi.set(__self__, "storage_utilization_percent", storage_utilization_percent)
+
+    @property
+    @pulumi.getter(name="highPriorityCpuUtilizationPercent")
+    def high_priority_cpu_utilization_percent(self) -> int:
+        return pulumi.get(self, "high_priority_cpu_utilization_percent")
+
+    @property
+    @pulumi.getter(name="storageUtilizationPercent")
+    def storage_utilization_percent(self) -> int:
+        return pulumi.get(self, "storage_utilization_percent")
+
+

pulumi_gcp/sql/_inputs.py

@@ -1114,8 +1114,7 @@ class DatabaseInstanceSettingsDataCacheConfigArgs:
     def __init__(__self__, *,
                  data_cache_enabled: Optional[pulumi.Input[bool]] = None):
         """
-        :param pulumi.Input[bool] data_cache_enabled: Whether data cache is enabled for the instance. Defaults to `false`
-               Can only be used with MYSQL.
+        :param pulumi.Input[bool] data_cache_enabled: Whether data cache is enabled for the instance. Defaults to `false`. Can be used with MYSQL and PostgreSQL only.
         """
         if data_cache_enabled is not None:
             pulumi.set(__self__, "data_cache_enabled", data_cache_enabled)
@@ -1124,8 +1123,7 @@ class DatabaseInstanceSettingsDataCacheConfigArgs:
     @pulumi.getter(name="dataCacheEnabled")
     def data_cache_enabled(self) -> Optional[pulumi.Input[bool]]:
         """
-        Whether data cache is enabled for the instance. Defaults to `false`
-        Can only be used with MYSQL.
+        Whether data cache is enabled for the instance. Defaults to `false`. Can be used with MYSQL and PostgreSQL only.
         """
         return pulumi.get(self, "data_cache_enabled")
 
@@ -1323,7 +1321,8 @@ class DatabaseInstanceSettingsIpConfigurationArgs:
                  ipv4_enabled: Optional[pulumi.Input[bool]] = None,
                  private_network: Optional[pulumi.Input[str]] = None,
                  psc_configs: Optional[pulumi.Input[Sequence[pulumi.Input['DatabaseInstanceSettingsIpConfigurationPscConfigArgs']]]] = None,
-                 require_ssl: Optional[pulumi.Input[bool]] = None):
+                 require_ssl: Optional[pulumi.Input[bool]] = None,
+                 ssl_mode: Optional[pulumi.Input[str]] = None):
         """
         :param pulumi.Input[str] allocated_ip_range: The name of the allocated ip range for the private ip CloudSQL instance. For example: "google-managed-services-default". If set, the instance ip will be created in the allocated range. The range name must comply with [RFC 1035](https://datatracker.ietf.org/doc/html/rfc1035). Specifically, the name must be 1-63 characters long and match the regular expression a-z?.
         :param pulumi.Input[bool] enable_private_path_for_google_cloud_services: Whether Google Cloud services such as BigQuery are allowed to access data in this Cloud SQL instance over a private IP connection. SQLSERVER database type is not supported.
@@ -1335,7 +1334,11 @@ class DatabaseInstanceSettingsIpConfigurationArgs:
                Specifying a network enables private IP.
                At least `ipv4_enabled` must be enabled or a `private_network` must be configured.
                This setting can be updated, but it cannot be removed after it is set.
-        :param pulumi.Input[bool] require_ssl: Whether SSL connections over IP are enforced or not.
+        :param pulumi.Input[bool] require_ssl: Whether SSL connections over IP are enforced or not. To change this field, also set the corresponding value in `ssl_mode`.
+        :param pulumi.Input[str] ssl_mode: Specify how SSL connection should be enforced in DB connections. This field provides more SSL enforcment options compared to `require_ssl`. To change this field, also set the correspoding value in `require_ssl`.
+               * For PostgreSQL instances, the value pairs are listed in the [API reference doc](https://cloud.google.com/sql/docs/mysql/admin-api/rest/v1beta4/instances#ipconfiguration) for `ssl_mode` field.
+               * For MySQL instances, use the same value pairs as the PostgreSQL instances.
+               * For SQL Server instances, set it to `ALLOW_UNENCRYPTED_AND_ENCRYPTED` when `require_ssl=false` and `ENCRYPTED_ONLY` otherwise.
         """
         if allocated_ip_range is not None:
             pulumi.set(__self__, "allocated_ip_range", allocated_ip_range)
@@ -1351,6 +1354,8 @@ class DatabaseInstanceSettingsIpConfigurationArgs:
             pulumi.set(__self__, "psc_configs", psc_configs)
         if require_ssl is not None:
             pulumi.set(__self__, "require_ssl", require_ssl)
+        if ssl_mode is not None:
+            pulumi.set(__self__, "ssl_mode", ssl_mode)
 
     @property
     @pulumi.getter(name="allocatedIpRange")
@@ -1428,7 +1433,7 @@ class DatabaseInstanceSettingsIpConfigurationArgs:
     @pulumi.getter(name="requireSsl")
     def require_ssl(self) -> Optional[pulumi.Input[bool]]:
         """
-        Whether SSL connections over IP are enforced or not.
+        Whether SSL connections over IP are enforced or not. To change this field, also set the corresponding value in `ssl_mode`.
         """
         return pulumi.get(self, "require_ssl")
 
@@ -1436,6 +1441,21 @@ class DatabaseInstanceSettingsIpConfigurationArgs:
     def require_ssl(self, value: Optional[pulumi.Input[bool]]):
         pulumi.set(self, "require_ssl", value)
 
+    @property
+    @pulumi.getter(name="sslMode")
+    def ssl_mode(self) -> Optional[pulumi.Input[str]]:
+        """
+        Specify how SSL connection should be enforced in DB connections. This field provides more SSL enforcment options compared to `require_ssl`. To change this field, also set the correspoding value in `require_ssl`.
+        * For PostgreSQL instances, the value pairs are listed in the [API reference doc](https://cloud.google.com/sql/docs/mysql/admin-api/rest/v1beta4/instances#ipconfiguration) for `ssl_mode` field.
+        * For MySQL instances, use the same value pairs as the PostgreSQL instances.
+        * For SQL Server instances, set it to `ALLOW_UNENCRYPTED_AND_ENCRYPTED` when `require_ssl=false` and `ENCRYPTED_ONLY` otherwise.
+        """
+        return pulumi.get(self, "ssl_mode")
+
+    @ssl_mode.setter
+    def ssl_mode(self, value: Optional[pulumi.Input[str]]):
+        pulumi.set(self, "ssl_mode", value)
+
 
 @pulumi.input_type
 class DatabaseInstanceSettingsIpConfigurationAuthorizedNetworkArgs:

pulumi_gcp/sql/database.py

@@ -356,7 +356,15 @@ class Database(pulumi.CustomResource):
 
         ## Import
 
-        Database can be imported using any of these accepted formats
+        Database can be imported using any of these accepted formats* `projects/{{project}}/instances/{{instance}}/databases/{{name}}` * `instances/{{instance}}/databases/{{name}}` * `{{project}}/{{instance}}/{{name}}` * `{{instance}}/{{name}}` * `{{name}}` In Terraform v1.5.0 and later, use an [`import` block](https://developer.hashicorp.com/terraform/language/import) to import Database using one of the formats above. For exampletf import {
+
+         id = "projects/{{project}}/instances/{{instance}}/databases/{{name}}"
+
+         to = google_sql_database.default }
+
+        ```sh
+         $ pulumi import gcp:sql/database:Database When using the [`terraform import` command](https://developer.hashicorp.com/terraform/cli/commands/import), Database can be imported using one of the formats above. For example
+        ```
 
         ```sh
          $ pulumi import gcp:sql/database:Database default projects/{{project}}/instances/{{instance}}/databases/{{name}}
@@ -452,7 +460,15 @@ class Database(pulumi.CustomResource):
 
         ## Import
 
-        Database can be imported using any of these accepted formats
+        Database can be imported using any of these accepted formats* `projects/{{project}}/instances/{{instance}}/databases/{{name}}` * `instances/{{instance}}/databases/{{name}}` * `{{project}}/{{instance}}/{{name}}` * `{{instance}}/{{name}}` * `{{name}}` In Terraform v1.5.0 and later, use an [`import` block](https://developer.hashicorp.com/terraform/language/import) to import Database using one of the formats above. For exampletf import {
+
+         id = "projects/{{project}}/instances/{{instance}}/databases/{{name}}"
+
+         to = google_sql_database.default }
+
+        ```sh
+         $ pulumi import gcp:sql/database:Database When using the [`terraform import` command](https://developer.hashicorp.com/terraform/cli/commands/import), Database can be imported using one of the formats above. For example
+        ```
 
         ```sh
          $ pulumi import gcp:sql/database:Database default projects/{{project}}/instances/{{instance}}/databases/{{name}}

pulumi_gcp/sql/database_instance.py

@@ -877,18 +877,26 @@ class DatabaseInstance(pulumi.CustomResource):
 
         ## Import
 
-        Database instances can be imported using one of any of these accepted formats
+        Database instances can be imported using one of any of these accepted formats* `projects/{{project}}/instances/{{name}}` * `{{project}}/{{name}}` * `{{name}}` In Terraform v1.5.0 and later, use an [`import` block](https://developer.hashicorp.com/terraform/language/import) to import Database instances using one of the formats above. For exampletf import {
+
+         id = "projects/{{project}}/instances/{{name}}"
+
+         to = google_sql_database_instance.default }
+
+        ```sh
+         $ pulumi import gcp:sql/databaseInstance:DatabaseInstance When using the [`terraform import` command](https://developer.hashicorp.com/terraform/cli/commands/import), Database instances can be imported using one of the formats above. For example
+        ```
 
         ```sh
-         $ pulumi import gcp:sql/databaseInstance:DatabaseInstance main projects/{{project}}/instances/{{name}}
+         $ pulumi import gcp:sql/databaseInstance:DatabaseInstance default projects/{{project}}/instances/{{name}}
         ```
 
         ```sh
-         $ pulumi import gcp:sql/databaseInstance:DatabaseInstance main {{project}}/{{name}}
+         $ pulumi import gcp:sql/databaseInstance:DatabaseInstance default {{project}}/{{name}}
         ```
 
         ```sh
-         $ pulumi import gcp:sql/databaseInstance:DatabaseInstance main {{name}}
+         $ pulumi import gcp:sql/databaseInstance:DatabaseInstance default {{name}}
         ```
 
          config and set on the server. When importing, double-check that your config has all the fields set that you expect- just seeing no diff isn't sufficient to know that your config could reproduce the imported resource.
@@ -1029,18 +1037,26 @@ class DatabaseInstance(pulumi.CustomResource):
 
         ## Import
 
-        Database instances can be imported using one of any of these accepted formats
+        Database instances can be imported using one of any of these accepted formats* `projects/{{project}}/instances/{{name}}` * `{{project}}/{{name}}` * `{{name}}` In Terraform v1.5.0 and later, use an [`import` block](https://developer.hashicorp.com/terraform/language/import) to import Database instances using one of the formats above. For exampletf import {
+
+         id = "projects/{{project}}/instances/{{name}}"
+
+         to = google_sql_database_instance.default }
+
+        ```sh
+         $ pulumi import gcp:sql/databaseInstance:DatabaseInstance When using the [`terraform import` command](https://developer.hashicorp.com/terraform/cli/commands/import), Database instances can be imported using one of the formats above. For example
+        ```
 
         ```sh
-         $ pulumi import gcp:sql/databaseInstance:DatabaseInstance main projects/{{project}}/instances/{{name}}
+         $ pulumi import gcp:sql/databaseInstance:DatabaseInstance default projects/{{project}}/instances/{{name}}
         ```
 
         ```sh
-         $ pulumi import gcp:sql/databaseInstance:DatabaseInstance main {{project}}/{{name}}
+         $ pulumi import gcp:sql/databaseInstance:DatabaseInstance default {{project}}/{{name}}
         ```
 
         ```sh
-         $ pulumi import gcp:sql/databaseInstance:DatabaseInstance main {{name}}
+         $ pulumi import gcp:sql/databaseInstance:DatabaseInstance default {{name}}
         ```
 
          config and set on the server. When importing, double-check that your config has all the fields set that you expect- just seeing no diff isn't sufficient to know that your config could reproduce the imported resource.

pulumi_gcp/sql/outputs.py

@@ -1159,8 +1159,7 @@ class DatabaseInstanceSettingsDataCacheConfig(dict):
     def __init__(__self__, *,
                  data_cache_enabled: Optional[bool] = None):
         """
-        :param bool data_cache_enabled: Whether data cache is enabled for the instance. Defaults to `false`
-               Can only be used with MYSQL.
+        :param bool data_cache_enabled: Whether data cache is enabled for the instance. Defaults to `false`. Can be used with MYSQL and PostgreSQL only.
         """
         if data_cache_enabled is not None:
             pulumi.set(__self__, "data_cache_enabled", data_cache_enabled)
@@ -1169,8 +1168,7 @@ class DatabaseInstanceSettingsDataCacheConfig(dict):
     @pulumi.getter(name="dataCacheEnabled")
     def data_cache_enabled(self) -> Optional[bool]:
         """
-        Whether data cache is enabled for the instance. Defaults to `false`
-        Can only be used with MYSQL.
+        Whether data cache is enabled for the instance. Defaults to `false`. Can be used with MYSQL and PostgreSQL only.
         """
         return pulumi.get(self, "data_cache_enabled")
 
@@ -1378,6 +1376,8 @@ class DatabaseInstanceSettingsIpConfiguration(dict):
             suggest = "psc_configs"
         elif key == "requireSsl":
             suggest = "require_ssl"
+        elif key == "sslMode":
+            suggest = "ssl_mode"
 
         if suggest:
             pulumi.log.warn(f"Key '{key}' not found in DatabaseInstanceSettingsIpConfiguration. Access the value via the '{suggest}' property getter instead.")
@@ -1397,7 +1397,8 @@ class DatabaseInstanceSettingsIpConfiguration(dict):
                  ipv4_enabled: Optional[bool] = None,
                  private_network: Optional[str] = None,
                  psc_configs: Optional[Sequence['outputs.DatabaseInstanceSettingsIpConfigurationPscConfig']] = None,
-                 require_ssl: Optional[bool] = None):
+                 require_ssl: Optional[bool] = None,
+                 ssl_mode: Optional[str] = None):
         """
         :param str allocated_ip_range: The name of the allocated ip range for the private ip CloudSQL instance. For example: "google-managed-services-default". If set, the instance ip will be created in the allocated range. The range name must comply with [RFC 1035](https://datatracker.ietf.org/doc/html/rfc1035). Specifically, the name must be 1-63 characters long and match the regular expression a-z?.
         :param bool enable_private_path_for_google_cloud_services: Whether Google Cloud services such as BigQuery are allowed to access data in this Cloud SQL instance over a private IP connection. SQLSERVER database type is not supported.
@@ -1409,7 +1410,11 @@ class DatabaseInstanceSettingsIpConfiguration(dict):
                Specifying a network enables private IP.
                At least `ipv4_enabled` must be enabled or a `private_network` must be configured.
                This setting can be updated, but it cannot be removed after it is set.
-        :param bool require_ssl: Whether SSL connections over IP are enforced or not.
+        :param bool require_ssl: Whether SSL connections over IP are enforced or not. To change this field, also set the corresponding value in `ssl_mode`.
+        :param str ssl_mode: Specify how SSL connection should be enforced in DB connections. This field provides more SSL enforcment options compared to `require_ssl`. To change this field, also set the correspoding value in `require_ssl`.
+               * For PostgreSQL instances, the value pairs are listed in the [API reference doc](https://cloud.google.com/sql/docs/mysql/admin-api/rest/v1beta4/instances#ipconfiguration) for `ssl_mode` field.
+               * For MySQL instances, use the same value pairs as the PostgreSQL instances.
+               * For SQL Server instances, set it to `ALLOW_UNENCRYPTED_AND_ENCRYPTED` when `require_ssl=false` and `ENCRYPTED_ONLY` otherwise.
         """
         if allocated_ip_range is not None:
             pulumi.set(__self__, "allocated_ip_range", allocated_ip_range)
@@ -1425,6 +1430,8 @@ class DatabaseInstanceSettingsIpConfiguration(dict):
             pulumi.set(__self__, "psc_configs", psc_configs)
         if require_ssl is not None:
             pulumi.set(__self__, "require_ssl", require_ssl)
+        if ssl_mode is not None:
+            pulumi.set(__self__, "ssl_mode", ssl_mode)
 
     @property
     @pulumi.getter(name="allocatedIpRange")
@@ -1478,10 +1485,21 @@ class DatabaseInstanceSettingsIpConfiguration(dict):
     @pulumi.getter(name="requireSsl")
     def require_ssl(self) -> Optional[bool]:
         """
-        Whether SSL connections over IP are enforced or not.
+        Whether SSL connections over IP are enforced or not. To change this field, also set the corresponding value in `ssl_mode`.
         """
         return pulumi.get(self, "require_ssl")
 
+    @property
+    @pulumi.getter(name="sslMode")
+    def ssl_mode(self) -> Optional[str]:
+        """
+        Specify how SSL connection should be enforced in DB connections. This field provides more SSL enforcment options compared to `require_ssl`. To change this field, also set the correspoding value in `require_ssl`.
+        * For PostgreSQL instances, the value pairs are listed in the [API reference doc](https://cloud.google.com/sql/docs/mysql/admin-api/rest/v1beta4/instances#ipconfiguration) for `ssl_mode` field.
+        * For MySQL instances, use the same value pairs as the PostgreSQL instances.
+        * For SQL Server instances, set it to `ALLOW_UNENCRYPTED_AND_ENCRYPTED` when `require_ssl=false` and `ENCRYPTED_ONLY` otherwise.
+        """
+        return pulumi.get(self, "ssl_mode")
+
 
 @pulumi.output_type
 class DatabaseInstanceSettingsIpConfigurationAuthorizedNetwork(dict):
@@ -2766,7 +2784,8 @@ class GetDatabaseInstanceSettingIpConfigurationResult(dict):
                  ipv4_enabled: bool,
                  private_network: str,
                  psc_configs: Sequence['outputs.GetDatabaseInstanceSettingIpConfigurationPscConfigResult'],
-                 require_ssl: bool):
+                 require_ssl: bool,
+                 ssl_mode: str):
         pulumi.set(__self__, "allocated_ip_range", allocated_ip_range)
         pulumi.set(__self__, "authorized_networks", authorized_networks)
         pulumi.set(__self__, "enable_private_path_for_google_cloud_services", enable_private_path_for_google_cloud_services)
@@ -2774,6 +2793,7 @@ class GetDatabaseInstanceSettingIpConfigurationResult(dict):
         pulumi.set(__self__, "private_network", private_network)
         pulumi.set(__self__, "psc_configs", psc_configs)
         pulumi.set(__self__, "require_ssl", require_ssl)
+        pulumi.set(__self__, "ssl_mode", ssl_mode)
 
     @property
     @pulumi.getter(name="allocatedIpRange")
@@ -2810,6 +2830,11 @@ class GetDatabaseInstanceSettingIpConfigurationResult(dict):
     def require_ssl(self) -> bool:
         return pulumi.get(self, "require_ssl")
 
+    @property
+    @pulumi.getter(name="sslMode")
+    def ssl_mode(self) -> str:
+        return pulumi.get(self, "ssl_mode")
+
 
 @pulumi.output_type
 class GetDatabaseInstanceSettingIpConfigurationAuthorizedNetworkResult(dict):
@@ -3804,7 +3829,8 @@ class GetDatabaseInstancesInstanceSettingIpConfigurationResult(dict):
                  ipv4_enabled: bool,
                  private_network: str,
                  psc_configs: Sequence['outputs.GetDatabaseInstancesInstanceSettingIpConfigurationPscConfigResult'],
-                 require_ssl: bool):
+                 require_ssl: bool,
+                 ssl_mode: str):
         pulumi.set(__self__, "allocated_ip_range", allocated_ip_range)
         pulumi.set(__self__, "authorized_networks", authorized_networks)
         pulumi.set(__self__, "enable_private_path_for_google_cloud_services", enable_private_path_for_google_cloud_services)
@@ -3812,6 +3838,7 @@ class GetDatabaseInstancesInstanceSettingIpConfigurationResult(dict):
         pulumi.set(__self__, "private_network", private_network)
         pulumi.set(__self__, "psc_configs", psc_configs)
         pulumi.set(__self__, "require_ssl", require_ssl)
+        pulumi.set(__self__, "ssl_mode", ssl_mode)
 
     @property
     @pulumi.getter(name="allocatedIpRange")
@@ -3848,6 +3875,11 @@ class GetDatabaseInstancesInstanceSettingIpConfigurationResult(dict):
     def require_ssl(self) -> bool:
         return pulumi.get(self, "require_ssl")
 
+    @property
+    @pulumi.getter(name="sslMode")
+    def ssl_mode(self) -> str:
+        return pulumi.get(self, "ssl_mode")
+
 
 @pulumi.output_type
 class GetDatabaseInstancesInstanceSettingIpConfigurationAuthorizedNetworkResult(dict):