pulumi-gcp 7.18.0a1712687150__py3-none-any.whl → 7.19.0__py3-none-any.whl

pulumi_gcp/storage/bucket_iam_policy.py

@@ -19,18 +19,6 @@ class BucketIAMPolicyArgs:
         """
         The set of arguments for constructing a BucketIAMPolicy resource.
         :param pulumi.Input[str] bucket: Used to find the parent resource to bind the IAM policy to
-               
-               * `member/members` - (Required) Identities that will be granted the privilege in `role`.
-               Each entry can have one of the following values:
-               * **allUsers**: A special identifier that represents anyone who is on the internet; with or without a Google account.
-               * **allAuthenticatedUsers**: A special identifier that represents anyone who is authenticated with a Google account or a service account.
-               * **user:{emailid}**: An email address that represents a specific Google account. For example, alice@gmail.com or joe@example.com.
-               * **serviceAccount:{emailid}**: An email address that represents a service account. For example, my-other-app@appspot.gserviceaccount.com.
-               * **group:{emailid}**: An email address that represents a Google group. For example, admins@example.com.
-               * **domain:{domain}**: A G Suite domain (primary, instead of alias) name that represents all the users of that domain. For example, google.com or example.com.
-               * **projectOwner:projectid**: Owners of the given project. For example, "projectOwner:my-example-project"
-               * **projectEditor:projectid**: Editors of the given project. For example, "projectEditor:my-example-project"
-               * **projectViewer:projectid**: Viewers of the given project. For example, "projectViewer:my-example-project"
         :param pulumi.Input[str] policy_data: The policy data generated by
                a `organizations_get_iam_policy` data source.
         """
@@ -42,18 +30,6 @@ class BucketIAMPolicyArgs:
     def bucket(self) -> pulumi.Input[str]:
         """
         Used to find the parent resource to bind the IAM policy to
-
-        * `member/members` - (Required) Identities that will be granted the privilege in `role`.
-        Each entry can have one of the following values:
-        * **allUsers**: A special identifier that represents anyone who is on the internet; with or without a Google account.
-        * **allAuthenticatedUsers**: A special identifier that represents anyone who is authenticated with a Google account or a service account.
-        * **user:{emailid}**: An email address that represents a specific Google account. For example, alice@gmail.com or joe@example.com.
-        * **serviceAccount:{emailid}**: An email address that represents a service account. For example, my-other-app@appspot.gserviceaccount.com.
-        * **group:{emailid}**: An email address that represents a Google group. For example, admins@example.com.
-        * **domain:{domain}**: A G Suite domain (primary, instead of alias) name that represents all the users of that domain. For example, google.com or example.com.
-        * **projectOwner:projectid**: Owners of the given project. For example, "projectOwner:my-example-project"
-        * **projectEditor:projectid**: Editors of the given project. For example, "projectEditor:my-example-project"
-        * **projectViewer:projectid**: Viewers of the given project. For example, "projectViewer:my-example-project"
         """
         return pulumi.get(self, "bucket")
 
@@ -84,18 +60,6 @@ class _BucketIAMPolicyState:
         """
         Input properties used for looking up and filtering BucketIAMPolicy resources.
         :param pulumi.Input[str] bucket: Used to find the parent resource to bind the IAM policy to
-               
-               * `member/members` - (Required) Identities that will be granted the privilege in `role`.
-               Each entry can have one of the following values:
-               * **allUsers**: A special identifier that represents anyone who is on the internet; with or without a Google account.
-               * **allAuthenticatedUsers**: A special identifier that represents anyone who is authenticated with a Google account or a service account.
-               * **user:{emailid}**: An email address that represents a specific Google account. For example, alice@gmail.com or joe@example.com.
-               * **serviceAccount:{emailid}**: An email address that represents a service account. For example, my-other-app@appspot.gserviceaccount.com.
-               * **group:{emailid}**: An email address that represents a Google group. For example, admins@example.com.
-               * **domain:{domain}**: A G Suite domain (primary, instead of alias) name that represents all the users of that domain. For example, google.com or example.com.
-               * **projectOwner:projectid**: Owners of the given project. For example, "projectOwner:my-example-project"
-               * **projectEditor:projectid**: Editors of the given project. For example, "projectEditor:my-example-project"
-               * **projectViewer:projectid**: Viewers of the given project. For example, "projectViewer:my-example-project"
         :param pulumi.Input[str] etag: (Computed) The etag of the IAM policy.
         :param pulumi.Input[str] policy_data: The policy data generated by
                a `organizations_get_iam_policy` data source.
@@ -112,18 +76,6 @@ class _BucketIAMPolicyState:
     def bucket(self) -> Optional[pulumi.Input[str]]:
         """
         Used to find the parent resource to bind the IAM policy to
-
-        * `member/members` - (Required) Identities that will be granted the privilege in `role`.
-        Each entry can have one of the following values:
-        * **allUsers**: A special identifier that represents anyone who is on the internet; with or without a Google account.
-        * **allAuthenticatedUsers**: A special identifier that represents anyone who is authenticated with a Google account or a service account.
-        * **user:{emailid}**: An email address that represents a specific Google account. For example, alice@gmail.com or joe@example.com.
-        * **serviceAccount:{emailid}**: An email address that represents a service account. For example, my-other-app@appspot.gserviceaccount.com.
-        * **group:{emailid}**: An email address that represents a Google group. For example, admins@example.com.
-        * **domain:{domain}**: A G Suite domain (primary, instead of alias) name that represents all the users of that domain. For example, google.com or example.com.
-        * **projectOwner:projectid**: Owners of the given project. For example, "projectOwner:my-example-project"
-        * **projectEditor:projectid**: Editors of the given project. For example, "projectEditor:my-example-project"
-        * **projectViewer:projectid**: Viewers of the given project. For example, "projectViewer:my-example-project"
         """
         return pulumi.get(self, "bucket")
 
@@ -285,6 +237,109 @@ class BucketIAMPolicy(pulumi.CustomResource):
         ```
         <!--End PulumiCodeChooser -->
 
+        ## google\\_storage\\_bucket\\_iam\\_policy
+
+        <!--Start PulumiCodeChooser -->
+        ```python
+        import pulumi
+        import pulumi_gcp as gcp
+
+        admin = gcp.organizations.get_iam_policy(bindings=[gcp.organizations.GetIAMPolicyBindingArgs(
+            role="roles/storage.admin",
+            members=["user:jane@example.com"],
+        )])
+        policy = gcp.storage.BucketIAMPolicy("policy",
+            bucket=default["name"],
+            policy_data=admin.policy_data)
+        ```
+        <!--End PulumiCodeChooser -->
+
+        With IAM Conditions:
+
+        <!--Start PulumiCodeChooser -->
+        ```python
+        import pulumi
+        import pulumi_gcp as gcp
+
+        admin = gcp.organizations.get_iam_policy(bindings=[gcp.organizations.GetIAMPolicyBindingArgs(
+            role="roles/storage.admin",
+            members=["user:jane@example.com"],
+            condition=gcp.organizations.GetIAMPolicyBindingConditionArgs(
+                title="expires_after_2019_12_31",
+                description="Expiring at midnight of 2019-12-31",
+                expression="request.time < timestamp(\\"2020-01-01T00:00:00Z\\")",
+            ),
+        )])
+        policy = gcp.storage.BucketIAMPolicy("policy",
+            bucket=default["name"],
+            policy_data=admin.policy_data)
+        ```
+        <!--End PulumiCodeChooser -->
+        ## google\\_storage\\_bucket\\_iam\\_binding
+
+        <!--Start PulumiCodeChooser -->
+        ```python
+        import pulumi
+        import pulumi_gcp as gcp
+
+        binding = gcp.storage.BucketIAMBinding("binding",
+            bucket=default["name"],
+            role="roles/storage.admin",
+            members=["user:jane@example.com"])
+        ```
+        <!--End PulumiCodeChooser -->
+
+        With IAM Conditions:
+
+        <!--Start PulumiCodeChooser -->
+        ```python
+        import pulumi
+        import pulumi_gcp as gcp
+
+        binding = gcp.storage.BucketIAMBinding("binding",
+            bucket=default["name"],
+            role="roles/storage.admin",
+            members=["user:jane@example.com"],
+            condition=gcp.storage.BucketIAMBindingConditionArgs(
+                title="expires_after_2019_12_31",
+                description="Expiring at midnight of 2019-12-31",
+                expression="request.time < timestamp(\\"2020-01-01T00:00:00Z\\")",
+            ))
+        ```
+        <!--End PulumiCodeChooser -->
+        ## google\\_storage\\_bucket\\_iam\\_member
+
+        <!--Start PulumiCodeChooser -->
+        ```python
+        import pulumi
+        import pulumi_gcp as gcp
+
+        member = gcp.storage.BucketIAMMember("member",
+            bucket=default["name"],
+            role="roles/storage.admin",
+            member="user:jane@example.com")
+        ```
+        <!--End PulumiCodeChooser -->
+
+        With IAM Conditions:
+
+        <!--Start PulumiCodeChooser -->
+        ```python
+        import pulumi
+        import pulumi_gcp as gcp
+
+        member = gcp.storage.BucketIAMMember("member",
+            bucket=default["name"],
+            role="roles/storage.admin",
+            member="user:jane@example.com",
+            condition=gcp.storage.BucketIAMMemberConditionArgs(
+                title="expires_after_2019_12_31",
+                description="Expiring at midnight of 2019-12-31",
+                expression="request.time < timestamp(\\"2020-01-01T00:00:00Z\\")",
+            ))
+        ```
+        <!--End PulumiCodeChooser -->
+
         ## Import
 
         For all import syntaxes, the "resource in question" can take any of the following forms:
@@ -322,18 +377,6 @@ class BucketIAMPolicy(pulumi.CustomResource):
         :param str resource_name: The name of the resource.
         :param pulumi.ResourceOptions opts: Options for the resource.
         :param pulumi.Input[str] bucket: Used to find the parent resource to bind the IAM policy to
-               
-               * `member/members` - (Required) Identities that will be granted the privilege in `role`.
-               Each entry can have one of the following values:
-               * **allUsers**: A special identifier that represents anyone who is on the internet; with or without a Google account.
-               * **allAuthenticatedUsers**: A special identifier that represents anyone who is authenticated with a Google account or a service account.
-               * **user:{emailid}**: An email address that represents a specific Google account. For example, alice@gmail.com or joe@example.com.
-               * **serviceAccount:{emailid}**: An email address that represents a service account. For example, my-other-app@appspot.gserviceaccount.com.
-               * **group:{emailid}**: An email address that represents a Google group. For example, admins@example.com.
-               * **domain:{domain}**: A G Suite domain (primary, instead of alias) name that represents all the users of that domain. For example, google.com or example.com.
-               * **projectOwner:projectid**: Owners of the given project. For example, "projectOwner:my-example-project"
-               * **projectEditor:projectid**: Editors of the given project. For example, "projectEditor:my-example-project"
-               * **projectViewer:projectid**: Viewers of the given project. For example, "projectViewer:my-example-project"
         :param pulumi.Input[str] policy_data: The policy data generated by
                a `organizations_get_iam_policy` data source.
         """
@@ -463,6 +506,109 @@ class BucketIAMPolicy(pulumi.CustomResource):
         ```
         <!--End PulumiCodeChooser -->
 
+        ## google\\_storage\\_bucket\\_iam\\_policy
+
+        <!--Start PulumiCodeChooser -->
+        ```python
+        import pulumi
+        import pulumi_gcp as gcp
+
+        admin = gcp.organizations.get_iam_policy(bindings=[gcp.organizations.GetIAMPolicyBindingArgs(
+            role="roles/storage.admin",
+            members=["user:jane@example.com"],
+        )])
+        policy = gcp.storage.BucketIAMPolicy("policy",
+            bucket=default["name"],
+            policy_data=admin.policy_data)
+        ```
+        <!--End PulumiCodeChooser -->
+
+        With IAM Conditions:
+
+        <!--Start PulumiCodeChooser -->
+        ```python
+        import pulumi
+        import pulumi_gcp as gcp
+
+        admin = gcp.organizations.get_iam_policy(bindings=[gcp.organizations.GetIAMPolicyBindingArgs(
+            role="roles/storage.admin",
+            members=["user:jane@example.com"],
+            condition=gcp.organizations.GetIAMPolicyBindingConditionArgs(
+                title="expires_after_2019_12_31",
+                description="Expiring at midnight of 2019-12-31",
+                expression="request.time < timestamp(\\"2020-01-01T00:00:00Z\\")",
+            ),
+        )])
+        policy = gcp.storage.BucketIAMPolicy("policy",
+            bucket=default["name"],
+            policy_data=admin.policy_data)
+        ```
+        <!--End PulumiCodeChooser -->
+        ## google\\_storage\\_bucket\\_iam\\_binding
+
+        <!--Start PulumiCodeChooser -->
+        ```python
+        import pulumi
+        import pulumi_gcp as gcp
+
+        binding = gcp.storage.BucketIAMBinding("binding",
+            bucket=default["name"],
+            role="roles/storage.admin",
+            members=["user:jane@example.com"])
+        ```
+        <!--End PulumiCodeChooser -->
+
+        With IAM Conditions:
+
+        <!--Start PulumiCodeChooser -->
+        ```python
+        import pulumi
+        import pulumi_gcp as gcp
+
+        binding = gcp.storage.BucketIAMBinding("binding",
+            bucket=default["name"],
+            role="roles/storage.admin",
+            members=["user:jane@example.com"],
+            condition=gcp.storage.BucketIAMBindingConditionArgs(
+                title="expires_after_2019_12_31",
+                description="Expiring at midnight of 2019-12-31",
+                expression="request.time < timestamp(\\"2020-01-01T00:00:00Z\\")",
+            ))
+        ```
+        <!--End PulumiCodeChooser -->
+        ## google\\_storage\\_bucket\\_iam\\_member
+
+        <!--Start PulumiCodeChooser -->
+        ```python
+        import pulumi
+        import pulumi_gcp as gcp
+
+        member = gcp.storage.BucketIAMMember("member",
+            bucket=default["name"],
+            role="roles/storage.admin",
+            member="user:jane@example.com")
+        ```
+        <!--End PulumiCodeChooser -->
+
+        With IAM Conditions:
+
+        <!--Start PulumiCodeChooser -->
+        ```python
+        import pulumi
+        import pulumi_gcp as gcp
+
+        member = gcp.storage.BucketIAMMember("member",
+            bucket=default["name"],
+            role="roles/storage.admin",
+            member="user:jane@example.com",
+            condition=gcp.storage.BucketIAMMemberConditionArgs(
+                title="expires_after_2019_12_31",
+                description="Expiring at midnight of 2019-12-31",
+                expression="request.time < timestamp(\\"2020-01-01T00:00:00Z\\")",
+            ))
+        ```
+        <!--End PulumiCodeChooser -->
+
         ## Import
 
         For all import syntaxes, the "resource in question" can take any of the following forms:
@@ -551,18 +697,6 @@ class BucketIAMPolicy(pulumi.CustomResource):
         :param pulumi.Input[str] id: The unique provider ID of the resource to lookup.
         :param pulumi.ResourceOptions opts: Options for the resource.
         :param pulumi.Input[str] bucket: Used to find the parent resource to bind the IAM policy to
-               
-               * `member/members` - (Required) Identities that will be granted the privilege in `role`.
-               Each entry can have one of the following values:
-               * **allUsers**: A special identifier that represents anyone who is on the internet; with or without a Google account.
-               * **allAuthenticatedUsers**: A special identifier that represents anyone who is authenticated with a Google account or a service account.
-               * **user:{emailid}**: An email address that represents a specific Google account. For example, alice@gmail.com or joe@example.com.
-               * **serviceAccount:{emailid}**: An email address that represents a service account. For example, my-other-app@appspot.gserviceaccount.com.
-               * **group:{emailid}**: An email address that represents a Google group. For example, admins@example.com.
-               * **domain:{domain}**: A G Suite domain (primary, instead of alias) name that represents all the users of that domain. For example, google.com or example.com.
-               * **projectOwner:projectid**: Owners of the given project. For example, "projectOwner:my-example-project"
-               * **projectEditor:projectid**: Editors of the given project. For example, "projectEditor:my-example-project"
-               * **projectViewer:projectid**: Viewers of the given project. For example, "projectViewer:my-example-project"
         :param pulumi.Input[str] etag: (Computed) The etag of the IAM policy.
         :param pulumi.Input[str] policy_data: The policy data generated by
                a `organizations_get_iam_policy` data source.
@@ -581,18 +715,6 @@ class BucketIAMPolicy(pulumi.CustomResource):
     def bucket(self) -> pulumi.Output[str]:
         """
         Used to find the parent resource to bind the IAM policy to
-
-        * `member/members` - (Required) Identities that will be granted the privilege in `role`.
-        Each entry can have one of the following values:
-        * **allUsers**: A special identifier that represents anyone who is on the internet; with or without a Google account.
-        * **allAuthenticatedUsers**: A special identifier that represents anyone who is authenticated with a Google account or a service account.
-        * **user:{emailid}**: An email address that represents a specific Google account. For example, alice@gmail.com or joe@example.com.
-        * **serviceAccount:{emailid}**: An email address that represents a service account. For example, my-other-app@appspot.gserviceaccount.com.
-        * **group:{emailid}**: An email address that represents a Google group. For example, admins@example.com.
-        * **domain:{domain}**: A G Suite domain (primary, instead of alias) name that represents all the users of that domain. For example, google.com or example.com.
-        * **projectOwner:projectid**: Owners of the given project. For example, "projectOwner:my-example-project"
-        * **projectEditor:projectid**: Editors of the given project. For example, "projectEditor:my-example-project"
-        * **projectViewer:projectid**: Viewers of the given project. For example, "projectViewer:my-example-project"
         """
         return pulumi.get(self, "bucket")
 

pulumi_gcp/storage/get_bucket.py

@@ -22,7 +22,7 @@ class GetBucketResult:
     """
     A collection of values returned by getBucket.
     """
-    def __init__(__self__, autoclasses=None, cors=None, custom_placement_configs=None, default_event_based_hold=None, effective_labels=None, enable_object_retention=None, encryptions=None, force_destroy=None, id=None, labels=None, lifecycle_rules=None, location=None, loggings=None, name=None, project=None, public_access_prevention=None, pulumi_labels=None, requester_pays=None, retention_policies=None, rpo=None, self_link=None, soft_delete_policies=None, storage_class=None, uniform_bucket_level_access=None, url=None, versionings=None, websites=None):
+    def __init__(__self__, autoclasses=None, cors=None, custom_placement_configs=None, default_event_based_hold=None, effective_labels=None, enable_object_retention=None, encryptions=None, force_destroy=None, id=None, labels=None, lifecycle_rules=None, location=None, loggings=None, name=None, project=None, project_number=None, public_access_prevention=None, pulumi_labels=None, requester_pays=None, retention_policies=None, rpo=None, self_link=None, soft_delete_policies=None, storage_class=None, uniform_bucket_level_access=None, url=None, versionings=None, websites=None):
         if autoclasses and not isinstance(autoclasses, list):
             raise TypeError("Expected argument 'autoclasses' to be a list")
         pulumi.set(__self__, "autoclasses", autoclasses)
@@ -68,6 +68,9 @@ class GetBucketResult:
         if project and not isinstance(project, str):
             raise TypeError("Expected argument 'project' to be a str")
         pulumi.set(__self__, "project", project)
+        if project_number and not isinstance(project_number, int):
+            raise TypeError("Expected argument 'project_number' to be a int")
+        pulumi.set(__self__, "project_number", project_number)
         if public_access_prevention and not isinstance(public_access_prevention, str):
             raise TypeError("Expected argument 'public_access_prevention' to be a str")
         pulumi.set(__self__, "public_access_prevention", public_access_prevention)
@@ -180,9 +183,14 @@ class GetBucketResult:
 
     @property
     @pulumi.getter
-    def project(self) -> str:
+    def project(self) -> Optional[str]:
         return pulumi.get(self, "project")
 
+    @property
+    @pulumi.getter(name="projectNumber")
+    def project_number(self) -> int:
+        return pulumi.get(self, "project_number")
+
     @property
     @pulumi.getter(name="publicAccessPrevention")
     def public_access_prevention(self) -> str:
@@ -265,6 +273,7 @@ class AwaitableGetBucketResult(GetBucketResult):
             loggings=self.loggings,
             name=self.name,
             project=self.project,
+            project_number=self.project_number,
             public_access_prevention=self.public_access_prevention,
             pulumi_labels=self.pulumi_labels,
             requester_pays=self.requester_pays,
@@ -280,6 +289,7 @@ class AwaitableGetBucketResult(GetBucketResult):
 
 
 def get_bucket(name: Optional[str] = None,
+               project: Optional[str] = None,
                opts: Optional[pulumi.InvokeOptions] = None) -> AwaitableGetBucketResult:
     """
     Gets an existing bucket in Google Cloud Storage service (GCS).
@@ -300,9 +310,11 @@ def get_bucket(name: Optional[str] = None,
 
 
     :param str name: The name of the bucket.
+    :param str project: The ID of the project in which the resource belongs. If it is not provided, the provider project is used. If no value is supplied in the configuration or through provider defaults then the data source will use the Compute API to find the project id that corresponds to the project number returned from the Storage API. Supplying a value for `project` doesn't influence retrieving data about the bucket but it can be used to prevent use of the Compute API. If you do provide a `project` value ensure that it is the correct value for that bucket; the data source will not check that the project id and project number match.
     """
     __args__ = dict()
     __args__['name'] = name
+    __args__['project'] = project
     opts = pulumi.InvokeOptions.merge(_utilities.get_invoke_opts_defaults(), opts)
     __ret__ = pulumi.runtime.invoke('gcp:storage/getBucket:getBucket', __args__, opts=opts, typ=GetBucketResult).value
 
@@ -322,6 +334,7 @@ def get_bucket(name: Optional[str] = None,
         loggings=pulumi.get(__ret__, 'loggings'),
         name=pulumi.get(__ret__, 'name'),
         project=pulumi.get(__ret__, 'project'),
+        project_number=pulumi.get(__ret__, 'project_number'),
         public_access_prevention=pulumi.get(__ret__, 'public_access_prevention'),
         pulumi_labels=pulumi.get(__ret__, 'pulumi_labels'),
         requester_pays=pulumi.get(__ret__, 'requester_pays'),
@@ -338,6 +351,7 @@ def get_bucket(name: Optional[str] = None,
 
 @_utilities.lift_output_func(get_bucket)
 def get_bucket_output(name: Optional[pulumi.Input[str]] = None,
+                      project: Optional[pulumi.Input[Optional[str]]] = None,
                       opts: Optional[pulumi.InvokeOptions] = None) -> pulumi.Output[GetBucketResult]:
     """
     Gets an existing bucket in Google Cloud Storage service (GCS).
@@ -358,5 +372,6 @@ def get_bucket_output(name: Optional[pulumi.Input[str]] = None,
 
 
     :param str name: The name of the bucket.
+    :param str project: The ID of the project in which the resource belongs. If it is not provided, the provider project is used. If no value is supplied in the configuration or through provider defaults then the data source will use the Compute API to find the project id that corresponds to the project number returned from the Storage API. Supplying a value for `project` doesn't influence retrieving data about the bucket but it can be used to prevent use of the Compute API. If you do provide a `project` value ensure that it is the correct value for that bucket; the data source will not check that the project id and project number match.
     """
     ...

pulumi_gcp/tags/__init__.py

@@ -7,8 +7,10 @@ import typing
 # Export this package's modules as members:
 from .get_tag_key import *
 from .get_tag_key_iam_policy import *
+from .get_tag_keys import *
 from .get_tag_value import *
 from .get_tag_value_iam_policy import *
+from .get_tag_values import *
 from .location_tag_binding import *
 from .tag_binding import *
 from .tag_key import *

pulumi_gcp/tags/get_tag_keys.py

@@ -0,0 +1,101 @@
+# coding=utf-8
+# *** WARNING: this file was generated by the Pulumi Terraform Bridge (tfgen) Tool. ***
+# *** Do not edit by hand unless you're certain you know what you are doing! ***
+
+import copy
+import warnings
+import pulumi
+import pulumi.runtime
+from typing import Any, Mapping, Optional, Sequence, Union, overload
+from .. import _utilities
+from . import outputs
+
+__all__ = [
+    'GetTagKeysResult',
+    'AwaitableGetTagKeysResult',
+    'get_tag_keys',
+    'get_tag_keys_output',
+]
+
+@pulumi.output_type
+class GetTagKeysResult:
+    """
+    A collection of values returned by getTagKeys.
+    """
+    def __init__(__self__, id=None, keys=None, parent=None):
+        if id and not isinstance(id, str):
+            raise TypeError("Expected argument 'id' to be a str")
+        pulumi.set(__self__, "id", id)
+        if keys and not isinstance(keys, list):
+            raise TypeError("Expected argument 'keys' to be a list")
+        pulumi.set(__self__, "keys", keys)
+        if parent and not isinstance(parent, str):
+            raise TypeError("Expected argument 'parent' to be a str")
+        pulumi.set(__self__, "parent", parent)
+
+    @property
+    @pulumi.getter
+    def id(self) -> str:
+        """
+        The provider-assigned unique ID for this managed resource.
+        """
+        return pulumi.get(self, "id")
+
+    @property
+    @pulumi.getter
+    def keys(self) -> Sequence['outputs.GetTagKeysKeyResult']:
+        return pulumi.get(self, "keys")
+
+    @property
+    @pulumi.getter
+    def parent(self) -> str:
+        """
+        The resource name of the TagKey's parent. A TagKey can be parented by an Orgination or a Project.
+        """
+        return pulumi.get(self, "parent")
+
+
+class AwaitableGetTagKeysResult(GetTagKeysResult):
+    # pylint: disable=using-constant-test
+    def __await__(self):
+        if False:
+            yield self
+        return GetTagKeysResult(
+            id=self.id,
+            keys=self.keys,
+            parent=self.parent)
+
+
+def get_tag_keys(parent: Optional[str] = None,
+                 opts: Optional[pulumi.InvokeOptions] = None) -> AwaitableGetTagKeysResult:
+    """
+    Get tag keys by org or project `parent`.
+
+    ## Example Usage
+
+
+    :param str parent: The resource name of the parent organization or project. It can be in format `organizations/{org_id}` or `projects/{project_id_or_number}`.
+    """
+    __args__ = dict()
+    __args__['parent'] = parent
+    opts = pulumi.InvokeOptions.merge(_utilities.get_invoke_opts_defaults(), opts)
+    __ret__ = pulumi.runtime.invoke('gcp:tags/getTagKeys:getTagKeys', __args__, opts=opts, typ=GetTagKeysResult).value
+
+    return AwaitableGetTagKeysResult(
+        id=pulumi.get(__ret__, 'id'),
+        keys=pulumi.get(__ret__, 'keys'),
+        parent=pulumi.get(__ret__, 'parent'))
+
+
+@_utilities.lift_output_func(get_tag_keys)
+def get_tag_keys_output(parent: Optional[pulumi.Input[str]] = None,
+                        opts: Optional[pulumi.InvokeOptions] = None) -> pulumi.Output[GetTagKeysResult]:
+    """
+    Get tag keys by org or project `parent`.
+
+    ## Example Usage
+
+
+    :param str parent: The resource name of the parent organization or project. It can be in format `organizations/{org_id}` or `projects/{project_id_or_number}`.
+    """
+    ...

pulumi_gcp/tags/get_tag_values.py

@@ -0,0 +1,101 @@
+# coding=utf-8
+# *** WARNING: this file was generated by the Pulumi Terraform Bridge (tfgen) Tool. ***
+# *** Do not edit by hand unless you're certain you know what you are doing! ***
+
+import copy
+import warnings
+import pulumi
+import pulumi.runtime
+from typing import Any, Mapping, Optional, Sequence, Union, overload
+from .. import _utilities
+from . import outputs
+
+__all__ = [
+    'GetTagValuesResult',
+    'AwaitableGetTagValuesResult',
+    'get_tag_values',
+    'get_tag_values_output',
+]
+
+@pulumi.output_type
+class GetTagValuesResult:
+    """
+    A collection of values returned by getTagValues.
+    """
+    def __init__(__self__, id=None, parent=None, values=None):
+        if id and not isinstance(id, str):
+            raise TypeError("Expected argument 'id' to be a str")
+        pulumi.set(__self__, "id", id)
+        if parent and not isinstance(parent, str):
+            raise TypeError("Expected argument 'parent' to be a str")
+        pulumi.set(__self__, "parent", parent)
+        if values and not isinstance(values, list):
+            raise TypeError("Expected argument 'values' to be a list")
+        pulumi.set(__self__, "values", values)
+
+    @property
+    @pulumi.getter
+    def id(self) -> str:
+        """
+        The provider-assigned unique ID for this managed resource.
+        """
+        return pulumi.get(self, "id")
+
+    @property
+    @pulumi.getter
+    def parent(self) -> str:
+        """
+        The resource name of the new TagValue's parent TagKey. Must be of the form tagKeys/{tag_key_id}.
+        """
+        return pulumi.get(self, "parent")
+
+    @property
+    @pulumi.getter
+    def values(self) -> Sequence['outputs.GetTagValuesValueResult']:
+        return pulumi.get(self, "values")
+
+
+class AwaitableGetTagValuesResult(GetTagValuesResult):
+    # pylint: disable=using-constant-test
+    def __await__(self):
+        if False:
+            yield self
+        return GetTagValuesResult(
+            id=self.id,
+            parent=self.parent,
+            values=self.values)
+
+
+def get_tag_values(parent: Optional[str] = None,
+                   opts: Optional[pulumi.InvokeOptions] = None) -> AwaitableGetTagValuesResult:
+    """
+    Get tag values from a `parent` key.
+
+    ## Example Usage
+
+
+    :param str parent: The resource name of the parent tagKey in format `tagKey/{name}`.
+    """
+    __args__ = dict()
+    __args__['parent'] = parent
+    opts = pulumi.InvokeOptions.merge(_utilities.get_invoke_opts_defaults(), opts)
+    __ret__ = pulumi.runtime.invoke('gcp:tags/getTagValues:getTagValues', __args__, opts=opts, typ=GetTagValuesResult).value
+
+    return AwaitableGetTagValuesResult(
+        id=pulumi.get(__ret__, 'id'),
+        parent=pulumi.get(__ret__, 'parent'),
+        values=pulumi.get(__ret__, 'values'))
+
+
+@_utilities.lift_output_func(get_tag_values)
+def get_tag_values_output(parent: Optional[pulumi.Input[str]] = None,
+                          opts: Optional[pulumi.InvokeOptions] = None) -> pulumi.Output[GetTagValuesResult]:
+    """
+    Get tag values from a `parent` key.
+
+    ## Example Usage
+
+
+    :param str parent: The resource name of the parent tagKey in format `tagKey/{name}`.
+    """
+    ...