pulumi-gcp 7.17.0a1712402830__py3-none-any.whl → 7.18.0__py3-none-any.whl

pulumi_gcp/container/_inputs.py

@@ -7581,12 +7581,16 @@ class ClusterNodePoolArgs:
 @pulumi.input_type
 class ClusterNodePoolAutoConfigArgs:
     def __init__(__self__, *,
-                 network_tags: Optional[pulumi.Input['ClusterNodePoolAutoConfigNetworkTagsArgs']] = None):
+                 network_tags: Optional[pulumi.Input['ClusterNodePoolAutoConfigNetworkTagsArgs']] = None,
+                 resource_manager_tags: Optional[pulumi.Input[Mapping[str, Any]]] = None):
         """
         :param pulumi.Input['ClusterNodePoolAutoConfigNetworkTagsArgs'] network_tags: The network tag config for the cluster's automatically provisioned node pools.
+        :param pulumi.Input[Mapping[str, Any]] resource_manager_tags: A map of resource manager tag keys and values to be attached to the nodes for managing Compute Engine firewalls using Network Firewall Policies. Tags must be according to specifications found [here](https://cloud.google.com/vpc/docs/tags-firewalls-overview#specifications). A maximum of 5 tag key-value pairs can be specified. Existing tags will be replaced with new values. Tags must be in one of the following formats ([KEY]=[VALUE]) 1. `tagKeys/{tag_key_id}=tagValues/{tag_value_id}` 2. `{org_id}/{tag_key_name}={tag_value_name}` 3. `{project_id}/{tag_key_name}={tag_value_name}`.
         """
         if network_tags is not None:
             pulumi.set(__self__, "network_tags", network_tags)
+        if resource_manager_tags is not None:
+            pulumi.set(__self__, "resource_manager_tags", resource_manager_tags)
 
     @property
     @pulumi.getter(name="networkTags")
@@ -7600,6 +7604,18 @@ class ClusterNodePoolAutoConfigArgs:
     def network_tags(self, value: Optional[pulumi.Input['ClusterNodePoolAutoConfigNetworkTagsArgs']]):
         pulumi.set(self, "network_tags", value)
 
+    @property
+    @pulumi.getter(name="resourceManagerTags")
+    def resource_manager_tags(self) -> Optional[pulumi.Input[Mapping[str, Any]]]:
+        """
+        A map of resource manager tag keys and values to be attached to the nodes for managing Compute Engine firewalls using Network Firewall Policies. Tags must be according to specifications found [here](https://cloud.google.com/vpc/docs/tags-firewalls-overview#specifications). A maximum of 5 tag key-value pairs can be specified. Existing tags will be replaced with new values. Tags must be in one of the following formats ([KEY]=[VALUE]) 1. `tagKeys/{tag_key_id}=tagValues/{tag_value_id}` 2. `{org_id}/{tag_key_name}={tag_value_name}` 3. `{project_id}/{tag_key_name}={tag_value_name}`.
+        """
+        return pulumi.get(self, "resource_manager_tags")
+
+    @resource_manager_tags.setter
+    def resource_manager_tags(self, value: Optional[pulumi.Input[Mapping[str, Any]]]):
+        pulumi.set(self, "resource_manager_tags", value)
+
 
 @pulumi.input_type
 class ClusterNodePoolAutoConfigNetworkTagsArgs:

pulumi_gcp/container/cluster.py

@@ -33,6 +33,7 @@ class ClusterArgs:
                  description: Optional[pulumi.Input[str]] = None,
                  dns_config: Optional[pulumi.Input['ClusterDnsConfigArgs']] = None,
                  enable_autopilot: Optional[pulumi.Input[bool]] = None,
+                 enable_cilium_clusterwide_network_policy: Optional[pulumi.Input[bool]] = None,
                  enable_fqdn_network_policy: Optional[pulumi.Input[bool]] = None,
                  enable_intranode_visibility: Optional[pulumi.Input[bool]] = None,
                  enable_k8s_beta_apis: Optional[pulumi.Input['ClusterEnableK8sBetaApisArgs']] = None,
@@ -127,6 +128,7 @@ class ClusterArgs:
                Note that when this option is enabled, certain features of Standard GKE are not available.
                See the [official documentation](https://cloud.google.com/kubernetes-engine/docs/concepts/autopilot-overview#comparison)
                for available features.
+        :param pulumi.Input[bool] enable_cilium_clusterwide_network_policy: Whether CiliumClusterWideNetworkPolicy is enabled on this cluster. Defaults to false.
         :param pulumi.Input[bool] enable_fqdn_network_policy: Whether FQDN Network Policy is enabled on this cluster. Users who enable this feature for existing Standard clusters must restart the GKE Dataplane V2 `anetd` DaemonSet after enabling it. See the [Enable FQDN Network Policy in an existing cluster](https://cloud.google.com/kubernetes-engine/docs/how-to/fqdn-network-policies#enable_fqdn_network_policy_in_an_existing_cluster) for more information.
         :param pulumi.Input[bool] enable_intranode_visibility: Whether Intra-node visibility is enabled for this cluster. This makes same node pod to pod traffic visible for VPC network.
         :param pulumi.Input['ClusterEnableK8sBetaApisArgs'] enable_k8s_beta_apis: Configuration for Kubernetes Beta APIs.
@@ -323,6 +325,8 @@ class ClusterArgs:
             pulumi.set(__self__, "dns_config", dns_config)
         if enable_autopilot is not None:
             pulumi.set(__self__, "enable_autopilot", enable_autopilot)
+        if enable_cilium_clusterwide_network_policy is not None:
+            pulumi.set(__self__, "enable_cilium_clusterwide_network_policy", enable_cilium_clusterwide_network_policy)
         if enable_fqdn_network_policy is not None:
             pulumi.set(__self__, "enable_fqdn_network_policy", enable_fqdn_network_policy)
         if enable_intranode_visibility is not None:
@@ -654,6 +658,18 @@ class ClusterArgs:
     def enable_autopilot(self, value: Optional[pulumi.Input[bool]]):
         pulumi.set(self, "enable_autopilot", value)
 
+    @property
+    @pulumi.getter(name="enableCiliumClusterwideNetworkPolicy")
+    def enable_cilium_clusterwide_network_policy(self) -> Optional[pulumi.Input[bool]]:
+        """
+        Whether CiliumClusterWideNetworkPolicy is enabled on this cluster. Defaults to false.
+        """
+        return pulumi.get(self, "enable_cilium_clusterwide_network_policy")
+
+    @enable_cilium_clusterwide_network_policy.setter
+    def enable_cilium_clusterwide_network_policy(self, value: Optional[pulumi.Input[bool]]):
+        pulumi.set(self, "enable_cilium_clusterwide_network_policy", value)
+
     @property
     @pulumi.getter(name="enableFqdnNetworkPolicy")
     def enable_fqdn_network_policy(self) -> Optional[pulumi.Input[bool]]:
@@ -1397,6 +1413,7 @@ class _ClusterState:
                  description: Optional[pulumi.Input[str]] = None,
                  dns_config: Optional[pulumi.Input['ClusterDnsConfigArgs']] = None,
                  enable_autopilot: Optional[pulumi.Input[bool]] = None,
+                 enable_cilium_clusterwide_network_policy: Optional[pulumi.Input[bool]] = None,
                  enable_fqdn_network_policy: Optional[pulumi.Input[bool]] = None,
                  enable_intranode_visibility: Optional[pulumi.Input[bool]] = None,
                  enable_k8s_beta_apis: Optional[pulumi.Input['ClusterEnableK8sBetaApisArgs']] = None,
@@ -1498,6 +1515,7 @@ class _ClusterState:
                Note that when this option is enabled, certain features of Standard GKE are not available.
                See the [official documentation](https://cloud.google.com/kubernetes-engine/docs/concepts/autopilot-overview#comparison)
                for available features.
+        :param pulumi.Input[bool] enable_cilium_clusterwide_network_policy: Whether CiliumClusterWideNetworkPolicy is enabled on this cluster. Defaults to false.
         :param pulumi.Input[bool] enable_fqdn_network_policy: Whether FQDN Network Policy is enabled on this cluster. Users who enable this feature for existing Standard clusters must restart the GKE Dataplane V2 `anetd` DaemonSet after enabling it. See the [Enable FQDN Network Policy in an existing cluster](https://cloud.google.com/kubernetes-engine/docs/how-to/fqdn-network-policies#enable_fqdn_network_policy_in_an_existing_cluster) for more information.
         :param pulumi.Input[bool] enable_intranode_visibility: Whether Intra-node visibility is enabled for this cluster. This makes same node pod to pod traffic visible for VPC network.
         :param pulumi.Input['ClusterEnableK8sBetaApisArgs'] enable_k8s_beta_apis: Configuration for Kubernetes Beta APIs.
@@ -1707,6 +1725,8 @@ class _ClusterState:
             pulumi.set(__self__, "dns_config", dns_config)
         if enable_autopilot is not None:
             pulumi.set(__self__, "enable_autopilot", enable_autopilot)
+        if enable_cilium_clusterwide_network_policy is not None:
+            pulumi.set(__self__, "enable_cilium_clusterwide_network_policy", enable_cilium_clusterwide_network_policy)
         if enable_fqdn_network_policy is not None:
             pulumi.set(__self__, "enable_fqdn_network_policy", enable_fqdn_network_policy)
         if enable_intranode_visibility is not None:
@@ -2052,6 +2072,18 @@ class _ClusterState:
     def enable_autopilot(self, value: Optional[pulumi.Input[bool]]):
         pulumi.set(self, "enable_autopilot", value)
 
+    @property
+    @pulumi.getter(name="enableCiliumClusterwideNetworkPolicy")
+    def enable_cilium_clusterwide_network_policy(self) -> Optional[pulumi.Input[bool]]:
+        """
+        Whether CiliumClusterWideNetworkPolicy is enabled on this cluster. Defaults to false.
+        """
+        return pulumi.get(self, "enable_cilium_clusterwide_network_policy")
+
+    @enable_cilium_clusterwide_network_policy.setter
+    def enable_cilium_clusterwide_network_policy(self, value: Optional[pulumi.Input[bool]]):
+        pulumi.set(self, "enable_cilium_clusterwide_network_policy", value)
+
     @property
     @pulumi.getter(name="enableFqdnNetworkPolicy")
     def enable_fqdn_network_policy(self) -> Optional[pulumi.Input[bool]]:
@@ -2885,6 +2917,7 @@ class Cluster(pulumi.CustomResource):
                  description: Optional[pulumi.Input[str]] = None,
                  dns_config: Optional[pulumi.Input[pulumi.InputType['ClusterDnsConfigArgs']]] = None,
                  enable_autopilot: Optional[pulumi.Input[bool]] = None,
+                 enable_cilium_clusterwide_network_policy: Optional[pulumi.Input[bool]] = None,
                  enable_fqdn_network_policy: Optional[pulumi.Input[bool]] = None,
                  enable_intranode_visibility: Optional[pulumi.Input[bool]] = None,
                  enable_k8s_beta_apis: Optional[pulumi.Input[pulumi.InputType['ClusterEnableK8sBetaApisArgs']]] = None,
@@ -3107,6 +3140,7 @@ class Cluster(pulumi.CustomResource):
                Note that when this option is enabled, certain features of Standard GKE are not available.
                See the [official documentation](https://cloud.google.com/kubernetes-engine/docs/concepts/autopilot-overview#comparison)
                for available features.
+        :param pulumi.Input[bool] enable_cilium_clusterwide_network_policy: Whether CiliumClusterWideNetworkPolicy is enabled on this cluster. Defaults to false.
         :param pulumi.Input[bool] enable_fqdn_network_policy: Whether FQDN Network Policy is enabled on this cluster. Users who enable this feature for existing Standard clusters must restart the GKE Dataplane V2 `anetd` DaemonSet after enabling it. See the [Enable FQDN Network Policy in an existing cluster](https://cloud.google.com/kubernetes-engine/docs/how-to/fqdn-network-policies#enable_fqdn_network_policy_in_an_existing_cluster) for more information.
         :param pulumi.Input[bool] enable_intranode_visibility: Whether Intra-node visibility is enabled for this cluster. This makes same node pod to pod traffic visible for VPC network.
         :param pulumi.Input[pulumi.InputType['ClusterEnableK8sBetaApisArgs']] enable_k8s_beta_apis: Configuration for Kubernetes Beta APIs.
@@ -3434,6 +3468,7 @@ class Cluster(pulumi.CustomResource):
                  description: Optional[pulumi.Input[str]] = None,
                  dns_config: Optional[pulumi.Input[pulumi.InputType['ClusterDnsConfigArgs']]] = None,
                  enable_autopilot: Optional[pulumi.Input[bool]] = None,
+                 enable_cilium_clusterwide_network_policy: Optional[pulumi.Input[bool]] = None,
                  enable_fqdn_network_policy: Optional[pulumi.Input[bool]] = None,
                  enable_intranode_visibility: Optional[pulumi.Input[bool]] = None,
                  enable_k8s_beta_apis: Optional[pulumi.Input[pulumi.InputType['ClusterEnableK8sBetaApisArgs']]] = None,
@@ -3511,6 +3546,7 @@ class Cluster(pulumi.CustomResource):
             __props__.__dict__["description"] = description
             __props__.__dict__["dns_config"] = dns_config
             __props__.__dict__["enable_autopilot"] = enable_autopilot
+            __props__.__dict__["enable_cilium_clusterwide_network_policy"] = enable_cilium_clusterwide_network_policy
             __props__.__dict__["enable_fqdn_network_policy"] = enable_fqdn_network_policy
             __props__.__dict__["enable_intranode_visibility"] = enable_intranode_visibility
             __props__.__dict__["enable_k8s_beta_apis"] = enable_k8s_beta_apis
@@ -3596,6 +3632,7 @@ class Cluster(pulumi.CustomResource):
             description: Optional[pulumi.Input[str]] = None,
             dns_config: Optional[pulumi.Input[pulumi.InputType['ClusterDnsConfigArgs']]] = None,
             enable_autopilot: Optional[pulumi.Input[bool]] = None,
+            enable_cilium_clusterwide_network_policy: Optional[pulumi.Input[bool]] = None,
             enable_fqdn_network_policy: Optional[pulumi.Input[bool]] = None,
             enable_intranode_visibility: Optional[pulumi.Input[bool]] = None,
             enable_k8s_beta_apis: Optional[pulumi.Input[pulumi.InputType['ClusterEnableK8sBetaApisArgs']]] = None,
@@ -3702,6 +3739,7 @@ class Cluster(pulumi.CustomResource):
                Note that when this option is enabled, certain features of Standard GKE are not available.
                See the [official documentation](https://cloud.google.com/kubernetes-engine/docs/concepts/autopilot-overview#comparison)
                for available features.
+        :param pulumi.Input[bool] enable_cilium_clusterwide_network_policy: Whether CiliumClusterWideNetworkPolicy is enabled on this cluster. Defaults to false.
         :param pulumi.Input[bool] enable_fqdn_network_policy: Whether FQDN Network Policy is enabled on this cluster. Users who enable this feature for existing Standard clusters must restart the GKE Dataplane V2 `anetd` DaemonSet after enabling it. See the [Enable FQDN Network Policy in an existing cluster](https://cloud.google.com/kubernetes-engine/docs/how-to/fqdn-network-policies#enable_fqdn_network_policy_in_an_existing_cluster) for more information.
         :param pulumi.Input[bool] enable_intranode_visibility: Whether Intra-node visibility is enabled for this cluster. This makes same node pod to pod traffic visible for VPC network.
         :param pulumi.Input[pulumi.InputType['ClusterEnableK8sBetaApisArgs']] enable_k8s_beta_apis: Configuration for Kubernetes Beta APIs.
@@ -3898,6 +3936,7 @@ class Cluster(pulumi.CustomResource):
         __props__.__dict__["description"] = description
         __props__.__dict__["dns_config"] = dns_config
         __props__.__dict__["enable_autopilot"] = enable_autopilot
+        __props__.__dict__["enable_cilium_clusterwide_network_policy"] = enable_cilium_clusterwide_network_policy
         __props__.__dict__["enable_fqdn_network_policy"] = enable_fqdn_network_policy
         __props__.__dict__["enable_intranode_visibility"] = enable_intranode_visibility
         __props__.__dict__["enable_k8s_beta_apis"] = enable_k8s_beta_apis
@@ -4118,6 +4157,14 @@ class Cluster(pulumi.CustomResource):
         """
         return pulumi.get(self, "enable_autopilot")
 
+    @property
+    @pulumi.getter(name="enableCiliumClusterwideNetworkPolicy")
+    def enable_cilium_clusterwide_network_policy(self) -> pulumi.Output[Optional[bool]]:
+        """
+        Whether CiliumClusterWideNetworkPolicy is enabled on this cluster. Defaults to false.
+        """
+        return pulumi.get(self, "enable_cilium_clusterwide_network_policy")
+
     @property
     @pulumi.getter(name="enableFqdnNetworkPolicy")
     def enable_fqdn_network_policy(self) -> pulumi.Output[Optional[bool]]:

pulumi_gcp/container/get_cluster.py

@@ -22,7 +22,7 @@ class GetClusterResult:
     """
     A collection of values returned by getCluster.
     """
-    def __init__(__self__, addons_configs=None, allow_net_admin=None, authenticator_groups_configs=None, binary_authorizations=None, cluster_autoscalings=None, cluster_ipv4_cidr=None, cluster_telemetries=None, confidential_nodes=None, cost_management_configs=None, database_encryptions=None, datapath_provider=None, default_max_pods_per_node=None, default_snat_statuses=None, deletion_protection=None, description=None, dns_configs=None, enable_autopilot=None, enable_fqdn_network_policy=None, enable_intranode_visibility=None, enable_k8s_beta_apis=None, enable_kubernetes_alpha=None, enable_l4_ilb_subsetting=None, enable_legacy_abac=None, enable_multi_networking=None, enable_shielded_nodes=None, enable_tpu=None, endpoint=None, fleets=None, gateway_api_configs=None, id=None, identity_service_configs=None, initial_node_count=None, ip_allocation_policies=None, label_fingerprint=None, location=None, logging_configs=None, logging_service=None, maintenance_policies=None, master_authorized_networks_configs=None, master_auths=None, master_version=None, mesh_certificates=None, min_master_version=None, monitoring_configs=None, monitoring_service=None, name=None, network=None, network_policies=None, networking_mode=None, node_configs=None, node_locations=None, node_pool_auto_configs=None, node_pool_defaults=None, node_pools=None, node_version=None, notification_configs=None, operation=None, pod_security_policy_configs=None, private_cluster_configs=None, private_ipv6_google_access=None, project=None, protect_configs=None, release_channels=None, remove_default_node_pool=None, resource_labels=None, resource_usage_export_configs=None, security_posture_configs=None, self_link=None, service_external_ips_configs=None, services_ipv4_cidr=None, subnetwork=None, tpu_configs=None, tpu_ipv4_cidr_block=None, vertical_pod_autoscalings=None, workload_alts_configs=None, workload_identity_configs=None):
+    def __init__(__self__, addons_configs=None, allow_net_admin=None, authenticator_groups_configs=None, binary_authorizations=None, cluster_autoscalings=None, cluster_ipv4_cidr=None, cluster_telemetries=None, confidential_nodes=None, cost_management_configs=None, database_encryptions=None, datapath_provider=None, default_max_pods_per_node=None, default_snat_statuses=None, deletion_protection=None, description=None, dns_configs=None, enable_autopilot=None, enable_cilium_clusterwide_network_policy=None, enable_fqdn_network_policy=None, enable_intranode_visibility=None, enable_k8s_beta_apis=None, enable_kubernetes_alpha=None, enable_l4_ilb_subsetting=None, enable_legacy_abac=None, enable_multi_networking=None, enable_shielded_nodes=None, enable_tpu=None, endpoint=None, fleets=None, gateway_api_configs=None, id=None, identity_service_configs=None, initial_node_count=None, ip_allocation_policies=None, label_fingerprint=None, location=None, logging_configs=None, logging_service=None, maintenance_policies=None, master_authorized_networks_configs=None, master_auths=None, master_version=None, mesh_certificates=None, min_master_version=None, monitoring_configs=None, monitoring_service=None, name=None, network=None, network_policies=None, networking_mode=None, node_configs=None, node_locations=None, node_pool_auto_configs=None, node_pool_defaults=None, node_pools=None, node_version=None, notification_configs=None, operation=None, pod_security_policy_configs=None, private_cluster_configs=None, private_ipv6_google_access=None, project=None, protect_configs=None, release_channels=None, remove_default_node_pool=None, resource_labels=None, resource_usage_export_configs=None, security_posture_configs=None, self_link=None, service_external_ips_configs=None, services_ipv4_cidr=None, subnetwork=None, tpu_configs=None, tpu_ipv4_cidr_block=None, vertical_pod_autoscalings=None, workload_alts_configs=None, workload_identity_configs=None):
         if addons_configs and not isinstance(addons_configs, list):
             raise TypeError("Expected argument 'addons_configs' to be a list")
         pulumi.set(__self__, "addons_configs", addons_configs)
@@ -74,6 +74,9 @@ class GetClusterResult:
         if enable_autopilot and not isinstance(enable_autopilot, bool):
             raise TypeError("Expected argument 'enable_autopilot' to be a bool")
         pulumi.set(__self__, "enable_autopilot", enable_autopilot)
+        if enable_cilium_clusterwide_network_policy and not isinstance(enable_cilium_clusterwide_network_policy, bool):
+            raise TypeError("Expected argument 'enable_cilium_clusterwide_network_policy' to be a bool")
+        pulumi.set(__self__, "enable_cilium_clusterwide_network_policy", enable_cilium_clusterwide_network_policy)
         if enable_fqdn_network_policy and not isinstance(enable_fqdn_network_policy, bool):
             raise TypeError("Expected argument 'enable_fqdn_network_policy' to be a bool")
         pulumi.set(__self__, "enable_fqdn_network_policy", enable_fqdn_network_policy)
@@ -337,6 +340,11 @@ class GetClusterResult:
     def enable_autopilot(self) -> bool:
         return pulumi.get(self, "enable_autopilot")
 
+    @property
+    @pulumi.getter(name="enableCiliumClusterwideNetworkPolicy")
+    def enable_cilium_clusterwide_network_policy(self) -> bool:
+        return pulumi.get(self, "enable_cilium_clusterwide_network_policy")
+
     @property
     @pulumi.getter(name="enableFqdnNetworkPolicy")
     def enable_fqdn_network_policy(self) -> bool:
@@ -659,6 +667,7 @@ class AwaitableGetClusterResult(GetClusterResult):
             description=self.description,
             dns_configs=self.dns_configs,
             enable_autopilot=self.enable_autopilot,
+            enable_cilium_clusterwide_network_policy=self.enable_cilium_clusterwide_network_policy,
             enable_fqdn_network_policy=self.enable_fqdn_network_policy,
             enable_intranode_visibility=self.enable_intranode_visibility,
             enable_k8s_beta_apis=self.enable_k8s_beta_apis,
@@ -762,6 +771,7 @@ def get_cluster(location: Optional[str] = None,
         description=pulumi.get(__ret__, 'description'),
         dns_configs=pulumi.get(__ret__, 'dns_configs'),
         enable_autopilot=pulumi.get(__ret__, 'enable_autopilot'),
+        enable_cilium_clusterwide_network_policy=pulumi.get(__ret__, 'enable_cilium_clusterwide_network_policy'),
         enable_fqdn_network_policy=pulumi.get(__ret__, 'enable_fqdn_network_policy'),
         enable_intranode_visibility=pulumi.get(__ret__, 'enable_intranode_visibility'),
         enable_k8s_beta_apis=pulumi.get(__ret__, 'enable_k8s_beta_apis'),

pulumi_gcp/container/outputs.py

@@ -8273,6 +8273,8 @@ class ClusterNodePoolAutoConfig(dict):
         suggest = None
         if key == "networkTags":
             suggest = "network_tags"
+        elif key == "resourceManagerTags":
+            suggest = "resource_manager_tags"
 
         if suggest:
             pulumi.log.warn(f"Key '{key}' not found in ClusterNodePoolAutoConfig. Access the value via the '{suggest}' property getter instead.")
@@ -8286,12 +8288,16 @@ class ClusterNodePoolAutoConfig(dict):
         return super().get(key, default)
 
     def __init__(__self__, *,
-                 network_tags: Optional['outputs.ClusterNodePoolAutoConfigNetworkTags'] = None):
+                 network_tags: Optional['outputs.ClusterNodePoolAutoConfigNetworkTags'] = None,
+                 resource_manager_tags: Optional[Mapping[str, Any]] = None):
         """
         :param 'ClusterNodePoolAutoConfigNetworkTagsArgs' network_tags: The network tag config for the cluster's automatically provisioned node pools.
+        :param Mapping[str, Any] resource_manager_tags: A map of resource manager tag keys and values to be attached to the nodes for managing Compute Engine firewalls using Network Firewall Policies. Tags must be according to specifications found [here](https://cloud.google.com/vpc/docs/tags-firewalls-overview#specifications). A maximum of 5 tag key-value pairs can be specified. Existing tags will be replaced with new values. Tags must be in one of the following formats ([KEY]=[VALUE]) 1. `tagKeys/{tag_key_id}=tagValues/{tag_value_id}` 2. `{org_id}/{tag_key_name}={tag_value_name}` 3. `{project_id}/{tag_key_name}={tag_value_name}`.
         """
         if network_tags is not None:
             pulumi.set(__self__, "network_tags", network_tags)
+        if resource_manager_tags is not None:
+            pulumi.set(__self__, "resource_manager_tags", resource_manager_tags)
 
     @property
     @pulumi.getter(name="networkTags")
@@ -8301,6 +8307,14 @@ class ClusterNodePoolAutoConfig(dict):
         """
         return pulumi.get(self, "network_tags")
 
+    @property
+    @pulumi.getter(name="resourceManagerTags")
+    def resource_manager_tags(self) -> Optional[Mapping[str, Any]]:
+        """
+        A map of resource manager tag keys and values to be attached to the nodes for managing Compute Engine firewalls using Network Firewall Policies. Tags must be according to specifications found [here](https://cloud.google.com/vpc/docs/tags-firewalls-overview#specifications). A maximum of 5 tag key-value pairs can be specified. Existing tags will be replaced with new values. Tags must be in one of the following formats ([KEY]=[VALUE]) 1. `tagKeys/{tag_key_id}=tagValues/{tag_value_id}` 2. `{org_id}/{tag_key_name}={tag_value_name}` 3. `{project_id}/{tag_key_name}={tag_value_name}`.
+        """
+        return pulumi.get(self, "resource_manager_tags")
+
 
 @pulumi.output_type
 class ClusterNodePoolAutoConfigNetworkTags(dict):
@@ -16423,11 +16437,14 @@ class GetClusterNodePoolResult(dict):
 @pulumi.output_type
 class GetClusterNodePoolAutoConfigResult(dict):
     def __init__(__self__, *,
-                 network_tags: Sequence['outputs.GetClusterNodePoolAutoConfigNetworkTagResult']):
+                 network_tags: Sequence['outputs.GetClusterNodePoolAutoConfigNetworkTagResult'],
+                 resource_manager_tags: Mapping[str, Any]):
         """
         :param Sequence['GetClusterNodePoolAutoConfigNetworkTagArgs'] network_tags: Collection of Compute Engine network tags that can be applied to a node's underlying VM instance.
+        :param Mapping[str, Any] resource_manager_tags: A map of resource manager tags. Resource manager tag keys and values have the same definition as resource manager tags. Keys must be in the format tagKeys/{tag_key_id}, and values are in the format tagValues/456. The field is ignored (both PUT & PATCH) when empty.
         """
         pulumi.set(__self__, "network_tags", network_tags)
+        pulumi.set(__self__, "resource_manager_tags", resource_manager_tags)
 
     @property
     @pulumi.getter(name="networkTags")
@@ -16437,6 +16454,14 @@ class GetClusterNodePoolAutoConfigResult(dict):
         """
         return pulumi.get(self, "network_tags")
 
+    @property
+    @pulumi.getter(name="resourceManagerTags")
+    def resource_manager_tags(self) -> Mapping[str, Any]:
+        """
+        A map of resource manager tags. Resource manager tag keys and values have the same definition as resource manager tags. Keys must be in the format tagKeys/{tag_key_id}, and values are in the format tagValues/456. The field is ignored (both PUT & PATCH) when empty.
+        """
+        return pulumi.get(self, "resource_manager_tags")
+
 
 @pulumi.output_type
 class GetClusterNodePoolAutoConfigNetworkTagResult(dict):

pulumi_gcp/databasemigrationservice/connection_profile.py

@@ -705,11 +705,11 @@ class ConnectionProfile(pulumi.CustomResource):
                 "foo": "bar",
             },
             alloydb=gcp.databasemigrationservice.ConnectionProfileAlloydbArgs(
-                cluster_id="tf-test-dbmsalloycluster_85794",
+                cluster_id="tf-test-dbmsalloycluster_21197",
                 settings=gcp.databasemigrationservice.ConnectionProfileAlloydbSettingsArgs(
                     initial_user=gcp.databasemigrationservice.ConnectionProfileAlloydbSettingsInitialUserArgs(
-                        user="alloyuser_21197",
-                        password="alloypass_52865",
+                        user="alloyuser_52865",
+                        password="alloypass_85840",
                     ),
                     vpc_network=default.id,
                     labels={
@@ -962,11 +962,11 @@ class ConnectionProfile(pulumi.CustomResource):
                 "foo": "bar",
             },
             alloydb=gcp.databasemigrationservice.ConnectionProfileAlloydbArgs(
-                cluster_id="tf-test-dbmsalloycluster_85794",
+                cluster_id="tf-test-dbmsalloycluster_21197",
                 settings=gcp.databasemigrationservice.ConnectionProfileAlloydbSettingsArgs(
                     initial_user=gcp.databasemigrationservice.ConnectionProfileAlloydbSettingsInitialUserArgs(
-                        user="alloyuser_21197",
-                        password="alloypass_52865",
+                        user="alloyuser_52865",
+                        password="alloypass_85840",
                     ),
                     vpc_network=default.id,
                     labels={