pulumi-gcp 7.18.0a1712687150__py3-none-any.whl → 7.19.0__py3-none-any.whl

pulumi_gcp/apigee/environment_iam_policy.py

@@ -20,18 +20,6 @@ class EnvironmentIamPolicyArgs:
         """
         The set of arguments for constructing a EnvironmentIamPolicy resource.
         :param pulumi.Input[str] env_id: Used to find the parent resource to bind the IAM policy to
-               
-               * `member/members` - (Required) Identities that will be granted the privilege in `role`.
-               Each entry can have one of the following values:
-               * **allUsers**: A special identifier that represents anyone who is on the internet; with or without a Google account.
-               * **allAuthenticatedUsers**: A special identifier that represents anyone who is authenticated with a Google account or a service account.
-               * **user:{emailid}**: An email address that represents a specific Google account. For example, alice@gmail.com or joe@example.com.
-               * **serviceAccount:{emailid}**: An email address that represents a service account. For example, my-other-app@appspot.gserviceaccount.com.
-               * **group:{emailid}**: An email address that represents a Google group. For example, admins@example.com.
-               * **domain:{domain}**: A G Suite domain (primary, instead of alias) name that represents all the users of that domain. For example, google.com or example.com.
-               * **projectOwner:projectid**: Owners of the given project. For example, "projectOwner:my-example-project"
-               * **projectEditor:projectid**: Editors of the given project. For example, "projectEditor:my-example-project"
-               * **projectViewer:projectid**: Viewers of the given project. For example, "projectViewer:my-example-project"
         :param pulumi.Input[str] policy_data: The policy data generated by
                a `organizations_get_iam_policy` data source.
         """
@@ -44,18 +32,6 @@ class EnvironmentIamPolicyArgs:
     def env_id(self) -> pulumi.Input[str]:
         """
         Used to find the parent resource to bind the IAM policy to
-
-        * `member/members` - (Required) Identities that will be granted the privilege in `role`.
-        Each entry can have one of the following values:
-        * **allUsers**: A special identifier that represents anyone who is on the internet; with or without a Google account.
-        * **allAuthenticatedUsers**: A special identifier that represents anyone who is authenticated with a Google account or a service account.
-        * **user:{emailid}**: An email address that represents a specific Google account. For example, alice@gmail.com or joe@example.com.
-        * **serviceAccount:{emailid}**: An email address that represents a service account. For example, my-other-app@appspot.gserviceaccount.com.
-        * **group:{emailid}**: An email address that represents a Google group. For example, admins@example.com.
-        * **domain:{domain}**: A G Suite domain (primary, instead of alias) name that represents all the users of that domain. For example, google.com or example.com.
-        * **projectOwner:projectid**: Owners of the given project. For example, "projectOwner:my-example-project"
-        * **projectEditor:projectid**: Editors of the given project. For example, "projectEditor:my-example-project"
-        * **projectViewer:projectid**: Viewers of the given project. For example, "projectViewer:my-example-project"
         """
         return pulumi.get(self, "env_id")
 
@@ -96,18 +72,6 @@ class _EnvironmentIamPolicyState:
         """
         Input properties used for looking up and filtering EnvironmentIamPolicy resources.
         :param pulumi.Input[str] env_id: Used to find the parent resource to bind the IAM policy to
-               
-               * `member/members` - (Required) Identities that will be granted the privilege in `role`.
-               Each entry can have one of the following values:
-               * **allUsers**: A special identifier that represents anyone who is on the internet; with or without a Google account.
-               * **allAuthenticatedUsers**: A special identifier that represents anyone who is authenticated with a Google account or a service account.
-               * **user:{emailid}**: An email address that represents a specific Google account. For example, alice@gmail.com or joe@example.com.
-               * **serviceAccount:{emailid}**: An email address that represents a service account. For example, my-other-app@appspot.gserviceaccount.com.
-               * **group:{emailid}**: An email address that represents a Google group. For example, admins@example.com.
-               * **domain:{domain}**: A G Suite domain (primary, instead of alias) name that represents all the users of that domain. For example, google.com or example.com.
-               * **projectOwner:projectid**: Owners of the given project. For example, "projectOwner:my-example-project"
-               * **projectEditor:projectid**: Editors of the given project. For example, "projectEditor:my-example-project"
-               * **projectViewer:projectid**: Viewers of the given project. For example, "projectViewer:my-example-project"
         :param pulumi.Input[str] etag: (Computed) The etag of the IAM policy.
         :param pulumi.Input[str] policy_data: The policy data generated by
                a `organizations_get_iam_policy` data source.
@@ -126,18 +90,6 @@ class _EnvironmentIamPolicyState:
     def env_id(self) -> Optional[pulumi.Input[str]]:
         """
         Used to find the parent resource to bind the IAM policy to
-
-        * `member/members` - (Required) Identities that will be granted the privilege in `role`.
-        Each entry can have one of the following values:
-        * **allUsers**: A special identifier that represents anyone who is on the internet; with or without a Google account.
-        * **allAuthenticatedUsers**: A special identifier that represents anyone who is authenticated with a Google account or a service account.
-        * **user:{emailid}**: An email address that represents a specific Google account. For example, alice@gmail.com or joe@example.com.
-        * **serviceAccount:{emailid}**: An email address that represents a service account. For example, my-other-app@appspot.gserviceaccount.com.
-        * **group:{emailid}**: An email address that represents a Google group. For example, admins@example.com.
-        * **domain:{domain}**: A G Suite domain (primary, instead of alias) name that represents all the users of that domain. For example, google.com or example.com.
-        * **projectOwner:projectid**: Owners of the given project. For example, "projectOwner:my-example-project"
-        * **projectEditor:projectid**: Editors of the given project. For example, "projectEditor:my-example-project"
-        * **projectViewer:projectid**: Viewers of the given project. For example, "projectViewer:my-example-project"
         """
         return pulumi.get(self, "env_id")
 
@@ -252,6 +204,54 @@ class EnvironmentIamPolicy(pulumi.CustomResource):
         ```
         <!--End PulumiCodeChooser -->
 
+        ## google\\_apigee\\_environment\\_iam\\_policy
+
+        <!--Start PulumiCodeChooser -->
+        ```python
+        import pulumi
+        import pulumi_gcp as gcp
+
+        admin = gcp.organizations.get_iam_policy(bindings=[gcp.organizations.GetIAMPolicyBindingArgs(
+            role="roles/viewer",
+            members=["user:jane@example.com"],
+        )])
+        policy = gcp.apigee.EnvironmentIamPolicy("policy",
+            org_id=apigee_environment["orgId"],
+            env_id=apigee_environment["name"],
+            policy_data=admin.policy_data)
+        ```
+        <!--End PulumiCodeChooser -->
+
+        ## google\\_apigee\\_environment\\_iam\\_binding
+
+        <!--Start PulumiCodeChooser -->
+        ```python
+        import pulumi
+        import pulumi_gcp as gcp
+
+        binding = gcp.apigee.EnvironmentIamBinding("binding",
+            org_id=apigee_environment["orgId"],
+            env_id=apigee_environment["name"],
+            role="roles/viewer",
+            members=["user:jane@example.com"])
+        ```
+        <!--End PulumiCodeChooser -->
+
+        ## google\\_apigee\\_environment\\_iam\\_member
+
+        <!--Start PulumiCodeChooser -->
+        ```python
+        import pulumi
+        import pulumi_gcp as gcp
+
+        member = gcp.apigee.EnvironmentIamMember("member",
+            org_id=apigee_environment["orgId"],
+            env_id=apigee_environment["name"],
+            role="roles/viewer",
+            member="user:jane@example.com")
+        ```
+        <!--End PulumiCodeChooser -->
+
         ## Import
 
         For all import syntaxes, the "resource in question" can take any of the following forms:
@@ -289,18 +289,6 @@ class EnvironmentIamPolicy(pulumi.CustomResource):
         :param str resource_name: The name of the resource.
         :param pulumi.ResourceOptions opts: Options for the resource.
         :param pulumi.Input[str] env_id: Used to find the parent resource to bind the IAM policy to
-               
-               * `member/members` - (Required) Identities that will be granted the privilege in `role`.
-               Each entry can have one of the following values:
-               * **allUsers**: A special identifier that represents anyone who is on the internet; with or without a Google account.
-               * **allAuthenticatedUsers**: A special identifier that represents anyone who is authenticated with a Google account or a service account.
-               * **user:{emailid}**: An email address that represents a specific Google account. For example, alice@gmail.com or joe@example.com.
-               * **serviceAccount:{emailid}**: An email address that represents a service account. For example, my-other-app@appspot.gserviceaccount.com.
-               * **group:{emailid}**: An email address that represents a Google group. For example, admins@example.com.
-               * **domain:{domain}**: A G Suite domain (primary, instead of alias) name that represents all the users of that domain. For example, google.com or example.com.
-               * **projectOwner:projectid**: Owners of the given project. For example, "projectOwner:my-example-project"
-               * **projectEditor:projectid**: Editors of the given project. For example, "projectEditor:my-example-project"
-               * **projectViewer:projectid**: Viewers of the given project. For example, "projectViewer:my-example-project"
         :param pulumi.Input[str] policy_data: The policy data generated by
                a `organizations_get_iam_policy` data source.
         """
@@ -373,6 +361,54 @@ class EnvironmentIamPolicy(pulumi.CustomResource):
         ```
         <!--End PulumiCodeChooser -->
 
+        ## google\\_apigee\\_environment\\_iam\\_policy
+
+        <!--Start PulumiCodeChooser -->
+        ```python
+        import pulumi
+        import pulumi_gcp as gcp
+
+        admin = gcp.organizations.get_iam_policy(bindings=[gcp.organizations.GetIAMPolicyBindingArgs(
+            role="roles/viewer",
+            members=["user:jane@example.com"],
+        )])
+        policy = gcp.apigee.EnvironmentIamPolicy("policy",
+            org_id=apigee_environment["orgId"],
+            env_id=apigee_environment["name"],
+            policy_data=admin.policy_data)
+        ```
+        <!--End PulumiCodeChooser -->
+
+        ## google\\_apigee\\_environment\\_iam\\_binding
+
+        <!--Start PulumiCodeChooser -->
+        ```python
+        import pulumi
+        import pulumi_gcp as gcp
+
+        binding = gcp.apigee.EnvironmentIamBinding("binding",
+            org_id=apigee_environment["orgId"],
+            env_id=apigee_environment["name"],
+            role="roles/viewer",
+            members=["user:jane@example.com"])
+        ```
+        <!--End PulumiCodeChooser -->
+
+        ## google\\_apigee\\_environment\\_iam\\_member
+
+        <!--Start PulumiCodeChooser -->
+        ```python
+        import pulumi
+        import pulumi_gcp as gcp
+
+        member = gcp.apigee.EnvironmentIamMember("member",
+            org_id=apigee_environment["orgId"],
+            env_id=apigee_environment["name"],
+            role="roles/viewer",
+            member="user:jane@example.com")
+        ```
+        <!--End PulumiCodeChooser -->
+
         ## Import
 
         For all import syntaxes, the "resource in question" can take any of the following forms:
@@ -466,18 +502,6 @@ class EnvironmentIamPolicy(pulumi.CustomResource):
         :param pulumi.Input[str] id: The unique provider ID of the resource to lookup.
         :param pulumi.ResourceOptions opts: Options for the resource.
         :param pulumi.Input[str] env_id: Used to find the parent resource to bind the IAM policy to
-               
-               * `member/members` - (Required) Identities that will be granted the privilege in `role`.
-               Each entry can have one of the following values:
-               * **allUsers**: A special identifier that represents anyone who is on the internet; with or without a Google account.
-               * **allAuthenticatedUsers**: A special identifier that represents anyone who is authenticated with a Google account or a service account.
-               * **user:{emailid}**: An email address that represents a specific Google account. For example, alice@gmail.com or joe@example.com.
-               * **serviceAccount:{emailid}**: An email address that represents a service account. For example, my-other-app@appspot.gserviceaccount.com.
-               * **group:{emailid}**: An email address that represents a Google group. For example, admins@example.com.
-               * **domain:{domain}**: A G Suite domain (primary, instead of alias) name that represents all the users of that domain. For example, google.com or example.com.
-               * **projectOwner:projectid**: Owners of the given project. For example, "projectOwner:my-example-project"
-               * **projectEditor:projectid**: Editors of the given project. For example, "projectEditor:my-example-project"
-               * **projectViewer:projectid**: Viewers of the given project. For example, "projectViewer:my-example-project"
         :param pulumi.Input[str] etag: (Computed) The etag of the IAM policy.
         :param pulumi.Input[str] policy_data: The policy data generated by
                a `organizations_get_iam_policy` data source.
@@ -497,18 +521,6 @@ class EnvironmentIamPolicy(pulumi.CustomResource):
     def env_id(self) -> pulumi.Output[str]:
         """
         Used to find the parent resource to bind the IAM policy to
-
-        * `member/members` - (Required) Identities that will be granted the privilege in `role`.
-        Each entry can have one of the following values:
-        * **allUsers**: A special identifier that represents anyone who is on the internet; with or without a Google account.
-        * **allAuthenticatedUsers**: A special identifier that represents anyone who is authenticated with a Google account or a service account.
-        * **user:{emailid}**: An email address that represents a specific Google account. For example, alice@gmail.com or joe@example.com.
-        * **serviceAccount:{emailid}**: An email address that represents a service account. For example, my-other-app@appspot.gserviceaccount.com.
-        * **group:{emailid}**: An email address that represents a Google group. For example, admins@example.com.
-        * **domain:{domain}**: A G Suite domain (primary, instead of alias) name that represents all the users of that domain. For example, google.com or example.com.
-        * **projectOwner:projectid**: Owners of the given project. For example, "projectOwner:my-example-project"
-        * **projectEditor:projectid**: Editors of the given project. For example, "projectEditor:my-example-project"
-        * **projectViewer:projectid**: Viewers of the given project. For example, "projectViewer:my-example-project"
         """
         return pulumi.get(self, "env_id")
 

pulumi_gcp/apigee/sync_authorization.py

@@ -173,10 +173,10 @@ class SyncAuthorization(pulumi.CustomResource):
         service_account = gcp.serviceaccount.Account("service_account",
             account_id="my-account",
             display_name="Service Account")
-        synchronizer_iam = gcp.projects.IAMBinding("synchronizer-iam",
+        synchronizer_iam = gcp.projects.IAMMember("synchronizer-iam",
             project=project.project_id,
             role="roles/apigee.synchronizerManager",
-            members=[service_account.email.apply(lambda email: f"serviceAccount:{email}")])
+            member=service_account.email.apply(lambda email: f"serviceAccount:{email}"))
         apigee_sync_authorization = gcp.apigee.SyncAuthorization("apigee_sync_authorization",
             name=apigee_org.name,
             identities=[service_account.email.apply(lambda email: f"serviceAccount:{email}")])
@@ -251,10 +251,10 @@ class SyncAuthorization(pulumi.CustomResource):
         service_account = gcp.serviceaccount.Account("service_account",
             account_id="my-account",
             display_name="Service Account")
-        synchronizer_iam = gcp.projects.IAMBinding("synchronizer-iam",
+        synchronizer_iam = gcp.projects.IAMMember("synchronizer-iam",
             project=project.project_id,
             role="roles/apigee.synchronizerManager",
-            members=[service_account.email.apply(lambda email: f"serviceAccount:{email}")])
+            member=service_account.email.apply(lambda email: f"serviceAccount:{email}"))
         apigee_sync_authorization = gcp.apigee.SyncAuthorization("apigee_sync_authorization",
             name=apigee_org.name,
             identities=[service_account.email.apply(lambda email: f"serviceAccount:{email}")])

pulumi_gcp/applicationintegration/client.py

@@ -271,7 +271,9 @@ class Client(pulumi.CustomResource):
         import pulumi
         import pulumi_gcp as gcp
 
-        example = gcp.applicationintegration.Client("example", location="us-central1")
+        example = gcp.applicationintegration.Client("example",
+            location="us-central1",
+            provision_gmek=True)
         ```
         <!--End PulumiCodeChooser -->
         ### Integrations Client Advance
@@ -284,23 +286,25 @@ class Client(pulumi.CustomResource):
         test_project = gcp.organizations.get_project()
         keyring = gcp.kms.KeyRing("keyring",
             name="my-keyring",
-            location="us-central1")
+            location="us-east1")
         cryptokey = gcp.kms.CryptoKey("cryptokey",
             name="crypto-key-example",
             key_ring=keyring.id,
             rotation_period="7776000s")
         test_key = gcp.kms.CryptoKeyVersion("test_key", crypto_key=cryptokey.id)
+        service_account = gcp.serviceaccount.Account("service_account",
+            account_id="service-account-id",
+            display_name="Service Account")
         example = gcp.applicationintegration.Client("example",
-            location="us-central1",
+            location="us-east1",
             create_sample_workflows=True,
-            provision_gmek=True,
-            run_as_service_account="radndom-service-account",
+            run_as_service_account=service_account.email,
             cloud_kms_config=gcp.applicationintegration.ClientCloudKmsConfigArgs(
-                kms_location="us-central1",
+                kms_location="us-east1",
                 kms_ring=keyring.id,
                 key=cryptokey.id,
                 key_version=test_key.id,
-                kms_project_id=test_project.id,
+                kms_project_id=test_project.project_id,
             ))
         ```
         <!--End PulumiCodeChooser -->
@@ -368,7 +372,9 @@ class Client(pulumi.CustomResource):
         import pulumi
         import pulumi_gcp as gcp
 
-        example = gcp.applicationintegration.Client("example", location="us-central1")
+        example = gcp.applicationintegration.Client("example",
+            location="us-central1",
+            provision_gmek=True)
         ```
         <!--End PulumiCodeChooser -->
         ### Integrations Client Advance
@@ -381,23 +387,25 @@ class Client(pulumi.CustomResource):
         test_project = gcp.organizations.get_project()
         keyring = gcp.kms.KeyRing("keyring",
             name="my-keyring",
-            location="us-central1")
+            location="us-east1")
         cryptokey = gcp.kms.CryptoKey("cryptokey",
             name="crypto-key-example",
             key_ring=keyring.id,
             rotation_period="7776000s")
         test_key = gcp.kms.CryptoKeyVersion("test_key", crypto_key=cryptokey.id)
+        service_account = gcp.serviceaccount.Account("service_account",
+            account_id="service-account-id",
+            display_name="Service Account")
         example = gcp.applicationintegration.Client("example",
-            location="us-central1",
+            location="us-east1",
             create_sample_workflows=True,
-            provision_gmek=True,
-            run_as_service_account="radndom-service-account",
+            run_as_service_account=service_account.email,
             cloud_kms_config=gcp.applicationintegration.ClientCloudKmsConfigArgs(
-                kms_location="us-central1",
+                kms_location="us-east1",
                 kms_ring=keyring.id,
                 key=cryptokey.id,
                 key_version=test_key.id,
-                kms_project_id=test_project.id,
+                kms_project_id=test_project.project_id,
             ))
         ```
         <!--End PulumiCodeChooser -->