pulumi-gcp 7.16.0a1711520590__py3-none-any.whl → 7.17.0__py3-none-any.whl

pulumi_gcp/firebase/app_check_service_config.py

@@ -300,7 +300,7 @@ class AppCheckServiceConfig(pulumi.CustomResource):
             disable_on_destroy=False)
         default = gcp.firebase.AppCheckServiceConfig("default",
             project="my-project-name",
-            service_id="firebasedatabase.googleapis.com",
+            service_id="identitytoolkit.googleapis.com",
             enforcement_mode="UNENFORCED")
         ```
         <!--End PulumiCodeChooser -->
@@ -422,7 +422,7 @@ class AppCheckServiceConfig(pulumi.CustomResource):
             disable_on_destroy=False)
         default = gcp.firebase.AppCheckServiceConfig("default",
             project="my-project-name",
-            service_id="firebasedatabase.googleapis.com",
+            service_id="identitytoolkit.googleapis.com",
             enforcement_mode="UNENFORCED")
         ```
         <!--End PulumiCodeChooser -->

pulumi_gcp/firestore/backup_schedule.py

@@ -29,11 +29,11 @@ class BackupScheduleArgs:
                
                
                - - -
-        :param pulumi.Input['BackupScheduleDailyRecurrenceArgs'] daily_recurrence: For a schedule that runs daily at a specified time.
+        :param pulumi.Input['BackupScheduleDailyRecurrenceArgs'] daily_recurrence: For a schedule that runs daily.
         :param pulumi.Input[str] database: The Firestore database id. Defaults to `"(default)"`.
         :param pulumi.Input[str] project: The ID of the project in which the resource belongs.
                If it is not provided, the provider project is used.
-        :param pulumi.Input['BackupScheduleWeeklyRecurrenceArgs'] weekly_recurrence: For a schedule that runs weekly on a specific day and time.
+        :param pulumi.Input['BackupScheduleWeeklyRecurrenceArgs'] weekly_recurrence: For a schedule that runs weekly on a specific day.
                Structure is documented below.
         """
         pulumi.set(__self__, "retention", retention)
@@ -67,7 +67,7 @@ class BackupScheduleArgs:
     @pulumi.getter(name="dailyRecurrence")
     def daily_recurrence(self) -> Optional[pulumi.Input['BackupScheduleDailyRecurrenceArgs']]:
         """
-        For a schedule that runs daily at a specified time.
+        For a schedule that runs daily.
         """
         return pulumi.get(self, "daily_recurrence")
 
@@ -104,7 +104,7 @@ class BackupScheduleArgs:
     @pulumi.getter(name="weeklyRecurrence")
     def weekly_recurrence(self) -> Optional[pulumi.Input['BackupScheduleWeeklyRecurrenceArgs']]:
         """
-        For a schedule that runs weekly on a specific day and time.
+        For a schedule that runs weekly on a specific day.
         Structure is documented below.
         """
         return pulumi.get(self, "weekly_recurrence")
@@ -125,7 +125,7 @@ class _BackupScheduleState:
                  weekly_recurrence: Optional[pulumi.Input['BackupScheduleWeeklyRecurrenceArgs']] = None):
         """
         Input properties used for looking up and filtering BackupSchedule resources.
-        :param pulumi.Input['BackupScheduleDailyRecurrenceArgs'] daily_recurrence: For a schedule that runs daily at a specified time.
+        :param pulumi.Input['BackupScheduleDailyRecurrenceArgs'] daily_recurrence: For a schedule that runs daily.
         :param pulumi.Input[str] database: The Firestore database id. Defaults to `"(default)"`.
         :param pulumi.Input[str] name: The unique backup schedule identifier across all locations and databases for the given project. Format:
                `projects/{{project}}/databases/{{database}}/backupSchedules/{{backupSchedule}}`
@@ -137,7 +137,7 @@ class _BackupScheduleState:
                
                
                - - -
-        :param pulumi.Input['BackupScheduleWeeklyRecurrenceArgs'] weekly_recurrence: For a schedule that runs weekly on a specific day and time.
+        :param pulumi.Input['BackupScheduleWeeklyRecurrenceArgs'] weekly_recurrence: For a schedule that runs weekly on a specific day.
                Structure is documented below.
         """
         if daily_recurrence is not None:
@@ -157,7 +157,7 @@ class _BackupScheduleState:
     @pulumi.getter(name="dailyRecurrence")
     def daily_recurrence(self) -> Optional[pulumi.Input['BackupScheduleDailyRecurrenceArgs']]:
         """
-        For a schedule that runs daily at a specified time.
+        For a schedule that runs daily.
         """
         return pulumi.get(self, "daily_recurrence")
 
@@ -224,7 +224,7 @@ class _BackupScheduleState:
     @pulumi.getter(name="weeklyRecurrence")
     def weekly_recurrence(self) -> Optional[pulumi.Input['BackupScheduleWeeklyRecurrenceArgs']]:
         """
-        For a schedule that runs weekly on a specific day and time.
+        For a schedule that runs weekly on a specific day.
         Structure is documented below.
         """
         return pulumi.get(self, "weekly_recurrence")
@@ -334,7 +334,7 @@ class BackupSchedule(pulumi.CustomResource):
 
         :param str resource_name: The name of the resource.
         :param pulumi.ResourceOptions opts: Options for the resource.
-        :param pulumi.Input[pulumi.InputType['BackupScheduleDailyRecurrenceArgs']] daily_recurrence: For a schedule that runs daily at a specified time.
+        :param pulumi.Input[pulumi.InputType['BackupScheduleDailyRecurrenceArgs']] daily_recurrence: For a schedule that runs daily.
         :param pulumi.Input[str] database: The Firestore database id. Defaults to `"(default)"`.
         :param pulumi.Input[str] project: The ID of the project in which the resource belongs.
                If it is not provided, the provider project is used.
@@ -344,7 +344,7 @@ class BackupSchedule(pulumi.CustomResource):
                
                
                - - -
-        :param pulumi.Input[pulumi.InputType['BackupScheduleWeeklyRecurrenceArgs']] weekly_recurrence: For a schedule that runs weekly on a specific day and time.
+        :param pulumi.Input[pulumi.InputType['BackupScheduleWeeklyRecurrenceArgs']] weekly_recurrence: For a schedule that runs weekly on a specific day.
                Structure is documented below.
         """
         ...
@@ -500,7 +500,7 @@ class BackupSchedule(pulumi.CustomResource):
         :param str resource_name: The unique name of the resulting resource.
         :param pulumi.Input[str] id: The unique provider ID of the resource to lookup.
         :param pulumi.ResourceOptions opts: Options for the resource.
-        :param pulumi.Input[pulumi.InputType['BackupScheduleDailyRecurrenceArgs']] daily_recurrence: For a schedule that runs daily at a specified time.
+        :param pulumi.Input[pulumi.InputType['BackupScheduleDailyRecurrenceArgs']] daily_recurrence: For a schedule that runs daily.
         :param pulumi.Input[str] database: The Firestore database id. Defaults to `"(default)"`.
         :param pulumi.Input[str] name: The unique backup schedule identifier across all locations and databases for the given project. Format:
                `projects/{{project}}/databases/{{database}}/backupSchedules/{{backupSchedule}}`
@@ -512,7 +512,7 @@ class BackupSchedule(pulumi.CustomResource):
                
                
                - - -
-        :param pulumi.Input[pulumi.InputType['BackupScheduleWeeklyRecurrenceArgs']] weekly_recurrence: For a schedule that runs weekly on a specific day and time.
+        :param pulumi.Input[pulumi.InputType['BackupScheduleWeeklyRecurrenceArgs']] weekly_recurrence: For a schedule that runs weekly on a specific day.
                Structure is documented below.
         """
         opts = pulumi.ResourceOptions.merge(opts, pulumi.ResourceOptions(id=id))
@@ -531,7 +531,7 @@ class BackupSchedule(pulumi.CustomResource):
     @pulumi.getter(name="dailyRecurrence")
     def daily_recurrence(self) -> pulumi.Output[Optional['outputs.BackupScheduleDailyRecurrence']]:
         """
-        For a schedule that runs daily at a specified time.
+        For a schedule that runs daily.
         """
         return pulumi.get(self, "daily_recurrence")
 
@@ -578,7 +578,7 @@ class BackupSchedule(pulumi.CustomResource):
     @pulumi.getter(name="weeklyRecurrence")
     def weekly_recurrence(self) -> pulumi.Output[Optional['outputs.BackupScheduleWeeklyRecurrence']]:
         """
-        For a schedule that runs weekly on a specific day and time.
+        For a schedule that runs weekly on a specific day.
         Structure is documented below.
         """
         return pulumi.get(self, "weekly_recurrence")

pulumi_gcp/firestore/field.py

@@ -320,7 +320,7 @@ class Field(pulumi.CustomResource):
         basic = gcp.firestore.Field("basic",
             project="my-project-name",
             database=database.name,
-            collection="chatrooms__64336",
+            collection="chatrooms__34962",
             field="basic",
             index_config=gcp.firestore.FieldIndexConfigArgs(
                 indexes=[
@@ -375,7 +375,7 @@ class Field(pulumi.CustomResource):
         match_override = gcp.firestore.Field("match_override",
             project="my-project-name",
             database=database.name,
-            collection="chatrooms__34962",
+            collection="chatrooms__74000",
             field="field_with_same_configuration_as_ancestor",
             index_config=gcp.firestore.FieldIndexConfigArgs(
                 indexes=[
@@ -464,7 +464,7 @@ class Field(pulumi.CustomResource):
         basic = gcp.firestore.Field("basic",
             project="my-project-name",
             database=database.name,
-            collection="chatrooms__64336",
+            collection="chatrooms__34962",
             field="basic",
             index_config=gcp.firestore.FieldIndexConfigArgs(
                 indexes=[
@@ -519,7 +519,7 @@ class Field(pulumi.CustomResource):
         match_override = gcp.firestore.Field("match_override",
             project="my-project-name",
             database=database.name,
-            collection="chatrooms__34962",
+            collection="chatrooms__74000",
             field="field_with_same_configuration_as_ancestor",
             index_config=gcp.firestore.FieldIndexConfigArgs(
                 indexes=[

pulumi_gcp/firestore/index.py

@@ -320,32 +320,18 @@ class Index(pulumi.CustomResource):
         ```python
         import pulumi
         import pulumi_gcp as gcp
-        import pulumi_time as time
-
-        project = gcp.organizations.Project("project",
-            project_id="project-id",
-            name="project-id",
-            org_id="123456789")
-        wait60_seconds = time.index.Sleep("wait_60_seconds", create_duration=60s)
-        firestore = gcp.projects.Service("firestore",
-            project=project.project_id,
-            service="firestore.googleapis.com")
+
         database = gcp.firestore.Database("database",
-            project=project.project_id,
-            name="(default)",
+            project="my-project-name",
+            name="database-id",
             location_id="nam5",
-            type="FIRESTORE_NATIVE")
-        # Creating a document also creates its collection
-        document = gcp.firestore.Document("document",
-            project=project.project_id,
-            database=database.name,
-            collection="somenewcollection",
-            document_id="",
-            fields="{\\"something\\":{\\"mapValue\\":{\\"fields\\":{\\"akey\\":{\\"stringValue\\":\\"avalue\\"}}}}}")
+            type="FIRESTORE_NATIVE",
+            delete_protection_state="DELETE_PROTECTION_DISABLED",
+            deletion_policy="DELETE")
         my_index = gcp.firestore.Index("my-index",
-            project=project.project_id,
+            project="my-project-name",
             database=database.name,
-            collection=document.collection,
+            collection="atestcollection",
             fields=[
                 gcp.firestore.IndexFieldArgs(
                     field_path="name",
@@ -365,10 +351,17 @@ class Index(pulumi.CustomResource):
         import pulumi
         import pulumi_gcp as gcp
 
+        database = gcp.firestore.Database("database",
+            project="my-project-name",
+            name="database-id-dm",
+            location_id="nam5",
+            type="DATASTORE_MODE",
+            delete_protection_state="DELETE_PROTECTION_DISABLED",
+            deletion_policy="DELETE")
         my_index = gcp.firestore.Index("my-index",
             project="my-project-name",
-            database="(default)",
-            collection="chatrooms",
+            database=database.name,
+            collection="atestcollection",
             query_scope="COLLECTION_RECURSIVE",
             api_scope="DATASTORE_MODE_API",
             fields=[
@@ -449,32 +442,18 @@ class Index(pulumi.CustomResource):
         ```python
         import pulumi
         import pulumi_gcp as gcp
-        import pulumi_time as time
-
-        project = gcp.organizations.Project("project",
-            project_id="project-id",
-            name="project-id",
-            org_id="123456789")
-        wait60_seconds = time.index.Sleep("wait_60_seconds", create_duration=60s)
-        firestore = gcp.projects.Service("firestore",
-            project=project.project_id,
-            service="firestore.googleapis.com")
+
         database = gcp.firestore.Database("database",
-            project=project.project_id,
-            name="(default)",
+            project="my-project-name",
+            name="database-id",
             location_id="nam5",
-            type="FIRESTORE_NATIVE")
-        # Creating a document also creates its collection
-        document = gcp.firestore.Document("document",
-            project=project.project_id,
-            database=database.name,
-            collection="somenewcollection",
-            document_id="",
-            fields="{\\"something\\":{\\"mapValue\\":{\\"fields\\":{\\"akey\\":{\\"stringValue\\":\\"avalue\\"}}}}}")
+            type="FIRESTORE_NATIVE",
+            delete_protection_state="DELETE_PROTECTION_DISABLED",
+            deletion_policy="DELETE")
         my_index = gcp.firestore.Index("my-index",
-            project=project.project_id,
+            project="my-project-name",
             database=database.name,
-            collection=document.collection,
+            collection="atestcollection",
             fields=[
                 gcp.firestore.IndexFieldArgs(
                     field_path="name",
@@ -494,10 +473,17 @@ class Index(pulumi.CustomResource):
         import pulumi
         import pulumi_gcp as gcp
 
+        database = gcp.firestore.Database("database",
+            project="my-project-name",
+            name="database-id-dm",
+            location_id="nam5",
+            type="DATASTORE_MODE",
+            delete_protection_state="DELETE_PROTECTION_DISABLED",
+            deletion_policy="DELETE")
         my_index = gcp.firestore.Index("my-index",
             project="my-project-name",
-            database="(default)",
-            collection="chatrooms",
+            database=database.name,
+            collection="atestcollection",
             query_scope="COLLECTION_RECURSIVE",
             api_scope="DATASTORE_MODE_API",
             fields=[

pulumi_gcp/gkehub/membership_binding.py

@@ -419,15 +419,15 @@ class MembershipBinding(pulumi.CustomResource):
             network="default",
             subnetwork="default")
         membership = gcp.gkehub.Membership("membership",
-            membership_id="tf-test-membership_74000",
+            membership_id="tf-test-membership_75125",
             endpoint=gcp.gkehub.MembershipEndpointArgs(
                 gke_cluster=gcp.gkehub.MembershipEndpointGkeClusterArgs(
                     resource_link=primary.id.apply(lambda id: f"//container.googleapis.com/{id}"),
                 ),
             ))
-        scope = gcp.gkehub.Scope("scope", scope_id="tf-test-scope_75125")
+        scope = gcp.gkehub.Scope("scope", scope_id="tf-test-scope_88722")
         membership_binding = gcp.gkehub.MembershipBinding("membership_binding",
-            membership_binding_id="tf-test-membership-binding_88722",
+            membership_binding_id="tf-test-membership-binding_39249",
             scope=scope.name,
             membership_id=membership.membership_id,
             location="global",
@@ -512,15 +512,15 @@ class MembershipBinding(pulumi.CustomResource):
             network="default",
             subnetwork="default")
         membership = gcp.gkehub.Membership("membership",
-            membership_id="tf-test-membership_74000",
+            membership_id="tf-test-membership_75125",
             endpoint=gcp.gkehub.MembershipEndpointArgs(
                 gke_cluster=gcp.gkehub.MembershipEndpointGkeClusterArgs(
                     resource_link=primary.id.apply(lambda id: f"//container.googleapis.com/{id}"),
                 ),
             ))
-        scope = gcp.gkehub.Scope("scope", scope_id="tf-test-scope_75125")
+        scope = gcp.gkehub.Scope("scope", scope_id="tf-test-scope_88722")
         membership_binding = gcp.gkehub.MembershipBinding("membership_binding",
-            membership_binding_id="tf-test-membership-binding_88722",
+            membership_binding_id="tf-test-membership-binding_39249",
             scope=scope.name,
             membership_id=membership.membership_id,
             location="global",

pulumi_gcp/gkehub/membership_rbac_role_binding.py

@@ -364,7 +364,7 @@ class MembershipRbacRoleBinding(pulumi.CustomResource):
             network="default",
             subnetwork="default")
         membership = gcp.gkehub.Membership("membership",
-            membership_id="tf-test-membership_39249",
+            membership_id="tf-test-membership_74391",
             endpoint=gcp.gkehub.MembershipEndpointArgs(
                 gke_cluster=gcp.gkehub.MembershipEndpointGkeClusterArgs(
                     resource_link=primary.id.apply(lambda id: f"//container.googleapis.com/{id}"),
@@ -372,7 +372,7 @@ class MembershipRbacRoleBinding(pulumi.CustomResource):
             ))
         project = gcp.organizations.get_project()
         membership_rbac_role_binding = gcp.gkehub.MembershipRbacRoleBinding("membership_rbac_role_binding",
-            membership_rbac_role_binding_id="tf-test-membership-rbac-role-binding_74391",
+            membership_rbac_role_binding_id="tf-test-membership-rbac-role-binding_16511",
             membership_id=membership.membership_id,
             user=f"service-{project.number}@gcp-sa-anthossupport.iam.gserviceaccount.com",
             role=gcp.gkehub.MembershipRbacRoleBindingRoleArgs(
@@ -444,7 +444,7 @@ class MembershipRbacRoleBinding(pulumi.CustomResource):
             network="default",
             subnetwork="default")
         membership = gcp.gkehub.Membership("membership",
-            membership_id="tf-test-membership_39249",
+            membership_id="tf-test-membership_74391",
             endpoint=gcp.gkehub.MembershipEndpointArgs(
                 gke_cluster=gcp.gkehub.MembershipEndpointGkeClusterArgs(
                     resource_link=primary.id.apply(lambda id: f"//container.googleapis.com/{id}"),
@@ -452,7 +452,7 @@ class MembershipRbacRoleBinding(pulumi.CustomResource):
             ))
         project = gcp.organizations.get_project()
         membership_rbac_role_binding = gcp.gkehub.MembershipRbacRoleBinding("membership_rbac_role_binding",
-            membership_rbac_role_binding_id="tf-test-membership-rbac-role-binding_74391",
+            membership_rbac_role_binding_id="tf-test-membership-rbac-role-binding_16511",
             membership_id=membership.membership_id,
             user=f"service-{project.number}@gcp-sa-anthossupport.iam.gserviceaccount.com",
             role=gcp.gkehub.MembershipRbacRoleBindingRoleArgs(

pulumi_gcp/gkehub/namespace.py

@@ -424,9 +424,9 @@ class Namespace(pulumi.CustomResource):
         import pulumi
         import pulumi_gcp as gcp
 
-        scope = gcp.gkehub.Scope("scope", scope_id="tf-test-scope_16511")
+        scope = gcp.gkehub.Scope("scope", scope_id="tf-test-scope_8493")
         namespace = gcp.gkehub.Namespace("namespace",
-            scope_namespace_id="tf-test-namespace_8493",
+            scope_namespace_id="tf-test-namespace_9106",
             scope_id=scope.scope_id,
             scope=scope.name,
             namespace_labels={
@@ -510,9 +510,9 @@ class Namespace(pulumi.CustomResource):
         import pulumi
         import pulumi_gcp as gcp
 
-        scope = gcp.gkehub.Scope("scope", scope_id="tf-test-scope_16511")
+        scope = gcp.gkehub.Scope("scope", scope_id="tf-test-scope_8493")
         namespace = gcp.gkehub.Namespace("namespace",
-            scope_namespace_id="tf-test-namespace_8493",
+            scope_namespace_id="tf-test-namespace_9106",
             scope_id=scope.scope_id,
             scope=scope.name,
             namespace_labels={

pulumi_gcp/gkehub/scope_rbac_role_binding.py

@@ -453,9 +453,9 @@ class ScopeRbacRoleBinding(pulumi.CustomResource):
         import pulumi
         import pulumi_gcp as gcp
 
-        scope = gcp.gkehub.Scope("scope", scope_id="tf-test-scope_9106")
+        scope = gcp.gkehub.Scope("scope", scope_id="tf-test-scope_27169")
         scope_rbac_role_binding = gcp.gkehub.ScopeRbacRoleBinding("scope_rbac_role_binding",
-            scope_rbac_role_binding_id="tf-test-scope-rbac-role-binding_27169",
+            scope_rbac_role_binding_id="tf-test-scope-rbac-role-binding_75223",
             scope_id=scope.scope_id,
             user="test-email@gmail.com",
             role=gcp.gkehub.ScopeRbacRoleBindingRoleArgs(
@@ -535,9 +535,9 @@ class ScopeRbacRoleBinding(pulumi.CustomResource):
         import pulumi
         import pulumi_gcp as gcp
 
-        scope = gcp.gkehub.Scope("scope", scope_id="tf-test-scope_9106")
+        scope = gcp.gkehub.Scope("scope", scope_id="tf-test-scope_27169")
         scope_rbac_role_binding = gcp.gkehub.ScopeRbacRoleBinding("scope_rbac_role_binding",
-            scope_rbac_role_binding_id="tf-test-scope-rbac-role-binding_27169",
+            scope_rbac_role_binding_id="tf-test-scope-rbac-role-binding_75223",
             scope_id=scope.scope_id,
             user="test-email@gmail.com",
             role=gcp.gkehub.ScopeRbacRoleBindingRoleArgs(

pulumi_gcp/iam/_inputs.py

@@ -513,6 +513,23 @@ class WorkforcePoolProviderOidcArgs:
                .well-known path for the `issuer_uri`. Currently, RSA and EC asymmetric
                keys are supported. The JWK must use following format and include only
                the following fields:
+               ```
+               {
+               "keys": [
+               {
+               "kty": "RSA/EC",
+               "alg": "<algorithm>",
+               "use": "sig",
+               "kid": "<key-id>",
+               "n": "",
+               "e": "",
+               "x": "",
+               "y": "",
+               "crv": ""
+               }
+               ]
+               }
+               ```
         :param pulumi.Input['WorkforcePoolProviderOidcWebSsoConfigArgs'] web_sso_config: Configuration for web single sign-on for the OIDC provider. Here, web sign-in refers to console sign-in and gcloud sign-in through the browser.
                Structure is documented below.
         """
@@ -572,6 +589,23 @@ class WorkforcePoolProviderOidcArgs:
         .well-known path for the `issuer_uri`. Currently, RSA and EC asymmetric
         keys are supported. The JWK must use following format and include only
         the following fields:
+        ```
+        {
+        "keys": [
+        {
+        "kty": "RSA/EC",
+        "alg": "<algorithm>",
+        "use": "sig",
+        "kid": "<key-id>",
+        "n": "",
+        "e": "",
+        "x": "",
+        "y": "",
+        "crv": ""
+        }
+        ]
+        }
+        ```
         """
         return pulumi.get(self, "jwks_json")
 
@@ -812,12 +846,33 @@ class WorkloadIdentityPoolProviderOidcArgs:
                If this list is empty, the OIDC token audience must be equal to the full canonical
                resource name of the WorkloadIdentityPoolProvider, with or without the HTTPS prefix.
                For example:
+               ```
+               //iam.googleapis.com/projects/<project-number>/locations/<location>/workloadIdentityPools/<pool-id>/providers/<provider-id>
+               https://iam.googleapis.com/projects/<project-number>/locations/<location>/workloadIdentityPools/<pool-id>/providers/<provider-id>
+               ```
         :param pulumi.Input[str] jwks_json: OIDC JWKs in JSON String format. For details on definition of a
                JWK, see https:tools.ietf.org/html/rfc7517. If not set, then we
                use the `jwks_uri` from the discovery document fetched from the
                .well-known path for the `issuer_uri`. Currently, RSA and EC asymmetric
                keys are supported. The JWK must use following format and include only
                the following fields:
+               ```
+               {
+               "keys": [
+               {
+               "kty": "RSA/EC",
+               "alg": "<algorithm>",
+               "use": "sig",
+               "kid": "<key-id>",
+               "n": "",
+               "e": "",
+               "x": "",
+               "y": "",
+               "crv": ""
+               }
+               ]
+               }
+               ```
         """
         pulumi.set(__self__, "issuer_uri", issuer_uri)
         if allowed_audiences is not None:
@@ -848,6 +903,10 @@ class WorkloadIdentityPoolProviderOidcArgs:
         If this list is empty, the OIDC token audience must be equal to the full canonical
         resource name of the WorkloadIdentityPoolProvider, with or without the HTTPS prefix.
         For example:
+        ```
+        //iam.googleapis.com/projects/<project-number>/locations/<location>/workloadIdentityPools/<pool-id>/providers/<provider-id>
+        https://iam.googleapis.com/projects/<project-number>/locations/<location>/workloadIdentityPools/<pool-id>/providers/<provider-id>
+        ```
         """
         return pulumi.get(self, "allowed_audiences")
 
@@ -865,6 +924,23 @@ class WorkloadIdentityPoolProviderOidcArgs:
         .well-known path for the `issuer_uri`. Currently, RSA and EC asymmetric
         keys are supported. The JWK must use following format and include only
         the following fields:
+        ```
+        {
+        "keys": [
+        {
+        "kty": "RSA/EC",
+        "alg": "<algorithm>",
+        "use": "sig",
+        "kid": "<key-id>",
+        "n": "",
+        "e": "",
+        "x": "",
+        "y": "",
+        "crv": ""
+        }
+        ]
+        }
+        ```
         """
         return pulumi.get(self, "jwks_json")
 

pulumi_gcp/iam/outputs.py

@@ -550,6 +550,23 @@ class WorkforcePoolProviderOidc(dict):
                .well-known path for the `issuer_uri`. Currently, RSA and EC asymmetric
                keys are supported. The JWK must use following format and include only
                the following fields:
+               ```
+               {
+               "keys": [
+               {
+               "kty": "RSA/EC",
+               "alg": "<algorithm>",
+               "use": "sig",
+               "kid": "<key-id>",
+               "n": "",
+               "e": "",
+               "x": "",
+               "y": "",
+               "crv": ""
+               }
+               ]
+               }
+               ```
         :param 'WorkforcePoolProviderOidcWebSsoConfigArgs' web_sso_config: Configuration for web single sign-on for the OIDC provider. Here, web sign-in refers to console sign-in and gcloud sign-in through the browser.
                Structure is documented below.
         """
@@ -597,6 +614,23 @@ class WorkforcePoolProviderOidc(dict):
         .well-known path for the `issuer_uri`. Currently, RSA and EC asymmetric
         keys are supported. The JWK must use following format and include only
         the following fields:
+        ```
+        {
+        "keys": [
+        {
+        "kty": "RSA/EC",
+        "alg": "<algorithm>",
+        "use": "sig",
+        "kid": "<key-id>",
+        "n": "",
+        "e": "",
+        "x": "",
+        "y": "",
+        "crv": ""
+        }
+        ]
+        }
+        ```
         """
         return pulumi.get(self, "jwks_json")
 
@@ -890,12 +924,33 @@ class WorkloadIdentityPoolProviderOidc(dict):
                If this list is empty, the OIDC token audience must be equal to the full canonical
                resource name of the WorkloadIdentityPoolProvider, with or without the HTTPS prefix.
                For example:
+               ```
+               //iam.googleapis.com/projects/<project-number>/locations/<location>/workloadIdentityPools/<pool-id>/providers/<provider-id>
+               https://iam.googleapis.com/projects/<project-number>/locations/<location>/workloadIdentityPools/<pool-id>/providers/<provider-id>
+               ```
         :param str jwks_json: OIDC JWKs in JSON String format. For details on definition of a
                JWK, see https:tools.ietf.org/html/rfc7517. If not set, then we
                use the `jwks_uri` from the discovery document fetched from the
                .well-known path for the `issuer_uri`. Currently, RSA and EC asymmetric
                keys are supported. The JWK must use following format and include only
                the following fields:
+               ```
+               {
+               "keys": [
+               {
+               "kty": "RSA/EC",
+               "alg": "<algorithm>",
+               "use": "sig",
+               "kid": "<key-id>",
+               "n": "",
+               "e": "",
+               "x": "",
+               "y": "",
+               "crv": ""
+               }
+               ]
+               }
+               ```
         """
         pulumi.set(__self__, "issuer_uri", issuer_uri)
         if allowed_audiences is not None:
@@ -922,6 +977,10 @@ class WorkloadIdentityPoolProviderOidc(dict):
         If this list is empty, the OIDC token audience must be equal to the full canonical
         resource name of the WorkloadIdentityPoolProvider, with or without the HTTPS prefix.
         For example:
+        ```
+        //iam.googleapis.com/projects/<project-number>/locations/<location>/workloadIdentityPools/<pool-id>/providers/<provider-id>
+        https://iam.googleapis.com/projects/<project-number>/locations/<location>/workloadIdentityPools/<pool-id>/providers/<provider-id>
+        ```
         """
         return pulumi.get(self, "allowed_audiences")
 
@@ -935,6 +994,23 @@ class WorkloadIdentityPoolProviderOidc(dict):
         .well-known path for the `issuer_uri`. Currently, RSA and EC asymmetric
         keys are supported. The JWK must use following format and include only
         the following fields:
+        ```
+        {
+        "keys": [
+        {
+        "kty": "RSA/EC",
+        "alg": "<algorithm>",
+        "use": "sig",
+        "kid": "<key-id>",
+        "n": "",
+        "e": "",
+        "x": "",
+        "y": "",
+        "crv": ""
+        }
+        ]
+        }
+        ```
         """
         return pulumi.get(self, "jwks_json")