pulumi-gcp 7.12.0a1709102105__py3-none-any.whl → 7.12.0a1709149267__py3-none-any.whl

pulumi_gcp/binaryauthorization/policy.py

@@ -320,14 +320,18 @@ class Policy(pulumi.CustomResource):
         import pulumi
         import pulumi_gcp as gcp
 
-        note = gcp.containeranalysis.Note("note", attestation_authority=gcp.containeranalysis.NoteAttestationAuthorityArgs(
-            hint=gcp.containeranalysis.NoteAttestationAuthorityHintArgs(
-                human_readable_name="My attestor",
-            ),
-        ))
-        attestor = gcp.binaryauthorization.Attestor("attestor", attestation_authority_note=gcp.binaryauthorization.AttestorAttestationAuthorityNoteArgs(
-            note_reference=note.name,
-        ))
+        note = gcp.containeranalysis.Note("note",
+            name="test-attestor-note",
+            attestation_authority=gcp.containeranalysis.NoteAttestationAuthorityArgs(
+                hint=gcp.containeranalysis.NoteAttestationAuthorityHintArgs(
+                    human_readable_name="My attestor",
+                ),
+            ))
+        attestor = gcp.binaryauthorization.Attestor("attestor",
+            name="test-attestor",
+            attestation_authority_note=gcp.binaryauthorization.AttestorAttestationAuthorityNoteArgs(
+                note_reference=note.name,
+            ))
         policy = gcp.binaryauthorization.Policy("policy",
             admission_whitelist_patterns=[gcp.binaryauthorization.PolicyAdmissionWhitelistPatternArgs(
                 name_pattern="gcr.io/google_containers/*",
@@ -349,14 +353,18 @@ class Policy(pulumi.CustomResource):
         import pulumi
         import pulumi_gcp as gcp
 
-        note = gcp.containeranalysis.Note("note", attestation_authority=gcp.containeranalysis.NoteAttestationAuthorityArgs(
-            hint=gcp.containeranalysis.NoteAttestationAuthorityHintArgs(
-                human_readable_name="My attestor",
-            ),
-        ))
-        attestor = gcp.binaryauthorization.Attestor("attestor", attestation_authority_note=gcp.binaryauthorization.AttestorAttestationAuthorityNoteArgs(
-            note_reference=note.name,
-        ))
+        note = gcp.containeranalysis.Note("note",
+            name="test-attestor-note",
+            attestation_authority=gcp.containeranalysis.NoteAttestationAuthorityArgs(
+                hint=gcp.containeranalysis.NoteAttestationAuthorityHintArgs(
+                    human_readable_name="My attestor",
+                ),
+            ))
+        attestor = gcp.binaryauthorization.Attestor("attestor",
+            name="test-attestor",
+            attestation_authority_note=gcp.binaryauthorization.AttestorAttestationAuthorityNoteArgs(
+                note_reference=note.name,
+            ))
         policy = gcp.binaryauthorization.Policy("policy",
             default_admission_rule=gcp.binaryauthorization.PolicyDefaultAdmissionRuleArgs(
                 evaluation_mode="REQUIRE_ATTESTATION",
@@ -433,14 +441,18 @@ class Policy(pulumi.CustomResource):
         import pulumi
         import pulumi_gcp as gcp
 
-        note = gcp.containeranalysis.Note("note", attestation_authority=gcp.containeranalysis.NoteAttestationAuthorityArgs(
-            hint=gcp.containeranalysis.NoteAttestationAuthorityHintArgs(
-                human_readable_name="My attestor",
-            ),
-        ))
-        attestor = gcp.binaryauthorization.Attestor("attestor", attestation_authority_note=gcp.binaryauthorization.AttestorAttestationAuthorityNoteArgs(
-            note_reference=note.name,
-        ))
+        note = gcp.containeranalysis.Note("note",
+            name="test-attestor-note",
+            attestation_authority=gcp.containeranalysis.NoteAttestationAuthorityArgs(
+                hint=gcp.containeranalysis.NoteAttestationAuthorityHintArgs(
+                    human_readable_name="My attestor",
+                ),
+            ))
+        attestor = gcp.binaryauthorization.Attestor("attestor",
+            name="test-attestor",
+            attestation_authority_note=gcp.binaryauthorization.AttestorAttestationAuthorityNoteArgs(
+                note_reference=note.name,
+            ))
         policy = gcp.binaryauthorization.Policy("policy",
             admission_whitelist_patterns=[gcp.binaryauthorization.PolicyAdmissionWhitelistPatternArgs(
                 name_pattern="gcr.io/google_containers/*",
@@ -462,14 +474,18 @@ class Policy(pulumi.CustomResource):
         import pulumi
         import pulumi_gcp as gcp
 
-        note = gcp.containeranalysis.Note("note", attestation_authority=gcp.containeranalysis.NoteAttestationAuthorityArgs(
-            hint=gcp.containeranalysis.NoteAttestationAuthorityHintArgs(
-                human_readable_name="My attestor",
-            ),
-        ))
-        attestor = gcp.binaryauthorization.Attestor("attestor", attestation_authority_note=gcp.binaryauthorization.AttestorAttestationAuthorityNoteArgs(
-            note_reference=note.name,
-        ))
+        note = gcp.containeranalysis.Note("note",
+            name="test-attestor-note",
+            attestation_authority=gcp.containeranalysis.NoteAttestationAuthorityArgs(
+                hint=gcp.containeranalysis.NoteAttestationAuthorityHintArgs(
+                    human_readable_name="My attestor",
+                ),
+            ))
+        attestor = gcp.binaryauthorization.Attestor("attestor",
+            name="test-attestor",
+            attestation_authority_note=gcp.binaryauthorization.AttestorAttestationAuthorityNoteArgs(
+                note_reference=note.name,
+            ))
         policy = gcp.binaryauthorization.Policy("policy",
             default_admission_rule=gcp.binaryauthorization.PolicyDefaultAdmissionRuleArgs(
                 evaluation_mode="REQUIRE_ATTESTATION",

pulumi_gcp/blockchainnodeengine/blockchain_nodes.py

@@ -383,27 +383,27 @@ class BlockchainNodes(pulumi.CustomResource):
         import pulumi
         import pulumi_gcp as gcp
 
-        default_node = gcp.blockchainnodeengine.BlockchainNodes("defaultNode",
-            blockchain_node_id="blockchain_basic_node",
+        default_node = gcp.blockchainnodeengine.BlockchainNodes("default_node",
+            location="us-central1",
             blockchain_type="ETHEREUM",
+            blockchain_node_id="blockchain_basic_node",
             ethereum_details=gcp.blockchainnodeengine.BlockchainNodesEthereumDetailsArgs(
                 api_enable_admin=True,
                 api_enable_debug=True,
-                consensus_client="LIGHTHOUSE",
-                execution_client="ERIGON",
-                network="MAINNET",
-                node_type="ARCHIVE",
                 validator_config=gcp.blockchainnodeengine.BlockchainNodesEthereumDetailsValidatorConfigArgs(
                     mev_relay_urls=[
                         "https://mev1.example.org/",
                         "https://mev2.example.org/",
                     ],
                 ),
+                node_type="ARCHIVE",
+                consensus_client="LIGHTHOUSE",
+                execution_client="ERIGON",
+                network="MAINNET",
             ),
             labels={
                 "environment": "dev",
-            },
-            location="us-central1")
+            })
         ```
         ### Blockchain Nodes Geth Details
 
@@ -411,30 +411,30 @@ class BlockchainNodes(pulumi.CustomResource):
         import pulumi
         import pulumi_gcp as gcp
 
-        default_node_geth = gcp.blockchainnodeengine.BlockchainNodes("defaultNodeGeth",
-            blockchain_node_id="blockchain_geth_node",
+        default_node_geth = gcp.blockchainnodeengine.BlockchainNodes("default_node_geth",
+            location="us-central1",
             blockchain_type="ETHEREUM",
+            blockchain_node_id="blockchain_geth_node",
             ethereum_details=gcp.blockchainnodeengine.BlockchainNodesEthereumDetailsArgs(
                 api_enable_admin=True,
                 api_enable_debug=True,
-                consensus_client="LIGHTHOUSE",
-                execution_client="GETH",
-                geth_details=gcp.blockchainnodeengine.BlockchainNodesEthereumDetailsGethDetailsArgs(
-                    garbage_collection_mode="FULL",
-                ),
-                network="MAINNET",
-                node_type="FULL",
                 validator_config=gcp.blockchainnodeengine.BlockchainNodesEthereumDetailsValidatorConfigArgs(
                     mev_relay_urls=[
                         "https://mev1.example.org/",
                         "https://mev2.example.org/",
                     ],
                 ),
+                node_type="FULL",
+                consensus_client="LIGHTHOUSE",
+                execution_client="GETH",
+                network="MAINNET",
+                geth_details=gcp.blockchainnodeengine.BlockchainNodesEthereumDetailsGethDetailsArgs(
+                    garbage_collection_mode="FULL",
+                ),
             ),
             labels={
                 "environment": "dev",
-            },
-            location="us-central1")
+            })
         ```
 
         ## Import
@@ -501,27 +501,27 @@ class BlockchainNodes(pulumi.CustomResource):
         import pulumi
         import pulumi_gcp as gcp
 
-        default_node = gcp.blockchainnodeengine.BlockchainNodes("defaultNode",
-            blockchain_node_id="blockchain_basic_node",
+        default_node = gcp.blockchainnodeengine.BlockchainNodes("default_node",
+            location="us-central1",
             blockchain_type="ETHEREUM",
+            blockchain_node_id="blockchain_basic_node",
             ethereum_details=gcp.blockchainnodeengine.BlockchainNodesEthereumDetailsArgs(
                 api_enable_admin=True,
                 api_enable_debug=True,
-                consensus_client="LIGHTHOUSE",
-                execution_client="ERIGON",
-                network="MAINNET",
-                node_type="ARCHIVE",
                 validator_config=gcp.blockchainnodeengine.BlockchainNodesEthereumDetailsValidatorConfigArgs(
                     mev_relay_urls=[
                         "https://mev1.example.org/",
                         "https://mev2.example.org/",
                     ],
                 ),
+                node_type="ARCHIVE",
+                consensus_client="LIGHTHOUSE",
+                execution_client="ERIGON",
+                network="MAINNET",
             ),
             labels={
                 "environment": "dev",
-            },
-            location="us-central1")
+            })
         ```
         ### Blockchain Nodes Geth Details
 
@@ -529,30 +529,30 @@ class BlockchainNodes(pulumi.CustomResource):
         import pulumi
         import pulumi_gcp as gcp
 
-        default_node_geth = gcp.blockchainnodeengine.BlockchainNodes("defaultNodeGeth",
-            blockchain_node_id="blockchain_geth_node",
+        default_node_geth = gcp.blockchainnodeengine.BlockchainNodes("default_node_geth",
+            location="us-central1",
             blockchain_type="ETHEREUM",
+            blockchain_node_id="blockchain_geth_node",
             ethereum_details=gcp.blockchainnodeengine.BlockchainNodesEthereumDetailsArgs(
                 api_enable_admin=True,
                 api_enable_debug=True,
-                consensus_client="LIGHTHOUSE",
-                execution_client="GETH",
-                geth_details=gcp.blockchainnodeengine.BlockchainNodesEthereumDetailsGethDetailsArgs(
-                    garbage_collection_mode="FULL",
-                ),
-                network="MAINNET",
-                node_type="FULL",
                 validator_config=gcp.blockchainnodeengine.BlockchainNodesEthereumDetailsValidatorConfigArgs(
                     mev_relay_urls=[
                         "https://mev1.example.org/",
                         "https://mev2.example.org/",
                     ],
                 ),
+                node_type="FULL",
+                consensus_client="LIGHTHOUSE",
+                execution_client="GETH",
+                network="MAINNET",
+                geth_details=gcp.blockchainnodeengine.BlockchainNodesEthereumDetailsGethDetailsArgs(
+                    garbage_collection_mode="FULL",
+                ),
             ),
             labels={
                 "environment": "dev",
-            },
-            location="us-central1")
+            })
         ```
 
         ## Import

pulumi_gcp/certificateauthority/authority.py

@@ -840,12 +840,15 @@ class Authority(pulumi.CustomResource):
         import pulumi_gcp as gcp
 
         default = gcp.certificateauthority.Authority("default",
+            pool="ca-pool",
             certificate_authority_id="my-certificate-authority",
+            location="us-central1",
+            deletion_protection=True,
             config=gcp.certificateauthority.AuthorityConfigArgs(
                 subject_config=gcp.certificateauthority.AuthorityConfigSubjectConfigArgs(
                     subject=gcp.certificateauthority.AuthorityConfigSubjectConfigSubjectArgs(
-                        common_name="my-certificate-authority",
                         organization="HashiCorp",
+                        common_name="my-certificate-authority",
                     ),
                     subject_alt_name=gcp.certificateauthority.AuthorityConfigSubjectConfigSubjectAltNameArgs(
                         dns_names=["hashicorp.com"],
@@ -858,32 +861,29 @@ class Authority(pulumi.CustomResource):
                     ),
                     key_usage=gcp.certificateauthority.AuthorityConfigX509ConfigKeyUsageArgs(
                         base_key_usage=gcp.certificateauthority.AuthorityConfigX509ConfigKeyUsageBaseKeyUsageArgs(
-                            cert_sign=True,
+                            digital_signature=True,
                             content_commitment=True,
-                            crl_sign=True,
+                            key_encipherment=False,
                             data_encipherment=True,
-                            decipher_only=True,
-                            digital_signature=True,
                             key_agreement=True,
-                            key_encipherment=False,
+                            cert_sign=True,
+                            crl_sign=True,
+                            decipher_only=True,
                         ),
                         extended_key_usage=gcp.certificateauthority.AuthorityConfigX509ConfigKeyUsageExtendedKeyUsageArgs(
+                            server_auth=True,
                             client_auth=False,
-                            code_signing=True,
                             email_protection=True,
-                            server_auth=True,
+                            code_signing=True,
                             time_stamping=True,
                         ),
                     ),
                 ),
             ),
-            deletion_protection=True,
+            lifetime="86400s",
             key_spec=gcp.certificateauthority.AuthorityKeySpecArgs(
                 algorithm="RSA_PKCS1_4096_SHA256",
-            ),
-            lifetime="86400s",
-            location="us-central1",
-            pool="ca-pool")
+            ))
         ```
         ### Privateca Certificate Authority Subordinate
 
@@ -982,12 +982,12 @@ class Authority(pulumi.CustomResource):
         import pulumi
         import pulumi_gcp as gcp
 
-        privateca_sa = gcp.projects.ServiceIdentity("privatecaSa", service="privateca.googleapis.com")
-        privateca_sa_keyuser_signerverifier = gcp.kms.CryptoKeyIAMMember("privatecaSaKeyuserSignerverifier",
+        privateca_sa = gcp.projects.ServiceIdentity("privateca_sa", service="privateca.googleapis.com")
+        privateca_sa_keyuser_signerverifier = gcp.kms.CryptoKeyIAMMember("privateca_sa_keyuser_signerverifier",
             crypto_key_id="projects/keys-project/locations/us-central1/keyRings/key-ring/cryptoKeys/crypto-key",
             role="roles/cloudkms.signerVerifier",
             member=privateca_sa.email.apply(lambda email: f"serviceAccount:{email}"))
-        privateca_sa_keyuser_viewer = gcp.kms.CryptoKeyIAMMember("privatecaSaKeyuserViewer",
+        privateca_sa_keyuser_viewer = gcp.kms.CryptoKeyIAMMember("privateca_sa_keyuser_viewer",
             crypto_key_id="projects/keys-project/locations/us-central1/keyRings/key-ring/cryptoKeys/crypto-key",
             role="roles/viewer",
             member=privateca_sa.email.apply(lambda email: f"serviceAccount:{email}"))
@@ -1032,11 +1032,7 @@ class Authority(pulumi.CustomResource):
                         excluded_uris=[".deny.example.com"],
                     ),
                 ),
-            ),
-            opts=pulumi.ResourceOptions(depends_on=[
-                    privateca_sa_keyuser_signerverifier,
-                    privateca_sa_keyuser_viewer,
-                ]))
+            ))
         ```
 
         ## Import
@@ -1138,12 +1134,15 @@ class Authority(pulumi.CustomResource):
         import pulumi_gcp as gcp
 
         default = gcp.certificateauthority.Authority("default",
+            pool="ca-pool",
             certificate_authority_id="my-certificate-authority",
+            location="us-central1",
+            deletion_protection=True,
             config=gcp.certificateauthority.AuthorityConfigArgs(
                 subject_config=gcp.certificateauthority.AuthorityConfigSubjectConfigArgs(
                     subject=gcp.certificateauthority.AuthorityConfigSubjectConfigSubjectArgs(
-                        common_name="my-certificate-authority",
                         organization="HashiCorp",
+                        common_name="my-certificate-authority",
                     ),
                     subject_alt_name=gcp.certificateauthority.AuthorityConfigSubjectConfigSubjectAltNameArgs(
                         dns_names=["hashicorp.com"],
@@ -1156,32 +1155,29 @@ class Authority(pulumi.CustomResource):
                     ),
                     key_usage=gcp.certificateauthority.AuthorityConfigX509ConfigKeyUsageArgs(
                         base_key_usage=gcp.certificateauthority.AuthorityConfigX509ConfigKeyUsageBaseKeyUsageArgs(
-                            cert_sign=True,
+                            digital_signature=True,
                             content_commitment=True,
-                            crl_sign=True,
+                            key_encipherment=False,
                             data_encipherment=True,
-                            decipher_only=True,
-                            digital_signature=True,
                             key_agreement=True,
-                            key_encipherment=False,
+                            cert_sign=True,
+                            crl_sign=True,
+                            decipher_only=True,
                         ),
                         extended_key_usage=gcp.certificateauthority.AuthorityConfigX509ConfigKeyUsageExtendedKeyUsageArgs(
+                            server_auth=True,
                             client_auth=False,
-                            code_signing=True,
                             email_protection=True,
-                            server_auth=True,
+                            code_signing=True,
                             time_stamping=True,
                         ),
                     ),
                 ),
             ),
-            deletion_protection=True,
+            lifetime="86400s",
             key_spec=gcp.certificateauthority.AuthorityKeySpecArgs(
                 algorithm="RSA_PKCS1_4096_SHA256",
-            ),
-            lifetime="86400s",
-            location="us-central1",
-            pool="ca-pool")
+            ))
         ```
         ### Privateca Certificate Authority Subordinate
 
@@ -1280,12 +1276,12 @@ class Authority(pulumi.CustomResource):
         import pulumi
         import pulumi_gcp as gcp
 
-        privateca_sa = gcp.projects.ServiceIdentity("privatecaSa", service="privateca.googleapis.com")
-        privateca_sa_keyuser_signerverifier = gcp.kms.CryptoKeyIAMMember("privatecaSaKeyuserSignerverifier",
+        privateca_sa = gcp.projects.ServiceIdentity("privateca_sa", service="privateca.googleapis.com")
+        privateca_sa_keyuser_signerverifier = gcp.kms.CryptoKeyIAMMember("privateca_sa_keyuser_signerverifier",
             crypto_key_id="projects/keys-project/locations/us-central1/keyRings/key-ring/cryptoKeys/crypto-key",
             role="roles/cloudkms.signerVerifier",
             member=privateca_sa.email.apply(lambda email: f"serviceAccount:{email}"))
-        privateca_sa_keyuser_viewer = gcp.kms.CryptoKeyIAMMember("privatecaSaKeyuserViewer",
+        privateca_sa_keyuser_viewer = gcp.kms.CryptoKeyIAMMember("privateca_sa_keyuser_viewer",
             crypto_key_id="projects/keys-project/locations/us-central1/keyRings/key-ring/cryptoKeys/crypto-key",
             role="roles/viewer",
             member=privateca_sa.email.apply(lambda email: f"serviceAccount:{email}"))
@@ -1330,11 +1326,7 @@ class Authority(pulumi.CustomResource):
                         excluded_uris=[".deny.example.com"],
                     ),
                 ),
-            ),
-            opts=pulumi.ResourceOptions(depends_on=[
-                    privateca_sa_keyuser_signerverifier,
-                    privateca_sa_keyuser_viewer,
-                ]))
+            ))
         ```
 
         ## Import