pulumi-gcp 7.18.0a1712714650__py3-none-any.whl → 7.19.0__py3-none-any.whl

pulumi_gcp/compute/machine_image_iam_policy.py

@@ -24,18 +24,6 @@ class MachineImageIamPolicyArgs:
                a `organizations_get_iam_policy` data source.
         :param pulumi.Input[str] project: The ID of the project in which the resource belongs.
                If it is not provided, the project will be parsed from the identifier of the parent resource. If no project is provided in the parent identifier and no project is specified, the provider project is used.
-               
-               * `member/members` - (Required) Identities that will be granted the privilege in `role`.
-               Each entry can have one of the following values:
-               * **allUsers**: A special identifier that represents anyone who is on the internet; with or without a Google account.
-               * **allAuthenticatedUsers**: A special identifier that represents anyone who is authenticated with a Google account or a service account.
-               * **user:{emailid}**: An email address that represents a specific Google account. For example, alice@gmail.com or joe@example.com.
-               * **serviceAccount:{emailid}**: An email address that represents a service account. For example, my-other-app@appspot.gserviceaccount.com.
-               * **group:{emailid}**: An email address that represents a Google group. For example, admins@example.com.
-               * **domain:{domain}**: A G Suite domain (primary, instead of alias) name that represents all the users of that domain. For example, google.com or example.com.
-               * **projectOwner:projectid**: Owners of the given project. For example, "projectOwner:my-example-project"
-               * **projectEditor:projectid**: Editors of the given project. For example, "projectEditor:my-example-project"
-               * **projectViewer:projectid**: Viewers of the given project. For example, "projectViewer:my-example-project"
         """
         pulumi.set(__self__, "machine_image", machine_image)
         pulumi.set(__self__, "policy_data", policy_data)
@@ -73,18 +61,6 @@ class MachineImageIamPolicyArgs:
         """
         The ID of the project in which the resource belongs.
         If it is not provided, the project will be parsed from the identifier of the parent resource. If no project is provided in the parent identifier and no project is specified, the provider project is used.
-
-        * `member/members` - (Required) Identities that will be granted the privilege in `role`.
-        Each entry can have one of the following values:
-        * **allUsers**: A special identifier that represents anyone who is on the internet; with or without a Google account.
-        * **allAuthenticatedUsers**: A special identifier that represents anyone who is authenticated with a Google account or a service account.
-        * **user:{emailid}**: An email address that represents a specific Google account. For example, alice@gmail.com or joe@example.com.
-        * **serviceAccount:{emailid}**: An email address that represents a service account. For example, my-other-app@appspot.gserviceaccount.com.
-        * **group:{emailid}**: An email address that represents a Google group. For example, admins@example.com.
-        * **domain:{domain}**: A G Suite domain (primary, instead of alias) name that represents all the users of that domain. For example, google.com or example.com.
-        * **projectOwner:projectid**: Owners of the given project. For example, "projectOwner:my-example-project"
-        * **projectEditor:projectid**: Editors of the given project. For example, "projectEditor:my-example-project"
-        * **projectViewer:projectid**: Viewers of the given project. For example, "projectViewer:my-example-project"
         """
         return pulumi.get(self, "project")
 
@@ -108,18 +84,6 @@ class _MachineImageIamPolicyState:
                a `organizations_get_iam_policy` data source.
         :param pulumi.Input[str] project: The ID of the project in which the resource belongs.
                If it is not provided, the project will be parsed from the identifier of the parent resource. If no project is provided in the parent identifier and no project is specified, the provider project is used.
-               
-               * `member/members` - (Required) Identities that will be granted the privilege in `role`.
-               Each entry can have one of the following values:
-               * **allUsers**: A special identifier that represents anyone who is on the internet; with or without a Google account.
-               * **allAuthenticatedUsers**: A special identifier that represents anyone who is authenticated with a Google account or a service account.
-               * **user:{emailid}**: An email address that represents a specific Google account. For example, alice@gmail.com or joe@example.com.
-               * **serviceAccount:{emailid}**: An email address that represents a service account. For example, my-other-app@appspot.gserviceaccount.com.
-               * **group:{emailid}**: An email address that represents a Google group. For example, admins@example.com.
-               * **domain:{domain}**: A G Suite domain (primary, instead of alias) name that represents all the users of that domain. For example, google.com or example.com.
-               * **projectOwner:projectid**: Owners of the given project. For example, "projectOwner:my-example-project"
-               * **projectEditor:projectid**: Editors of the given project. For example, "projectEditor:my-example-project"
-               * **projectViewer:projectid**: Viewers of the given project. For example, "projectViewer:my-example-project"
         """
         if etag is not None:
             pulumi.set(__self__, "etag", etag)
@@ -173,18 +137,6 @@ class _MachineImageIamPolicyState:
         """
         The ID of the project in which the resource belongs.
         If it is not provided, the project will be parsed from the identifier of the parent resource. If no project is provided in the parent identifier and no project is specified, the provider project is used.
-
-        * `member/members` - (Required) Identities that will be granted the privilege in `role`.
-        Each entry can have one of the following values:
-        * **allUsers**: A special identifier that represents anyone who is on the internet; with or without a Google account.
-        * **allAuthenticatedUsers**: A special identifier that represents anyone who is authenticated with a Google account or a service account.
-        * **user:{emailid}**: An email address that represents a specific Google account. For example, alice@gmail.com or joe@example.com.
-        * **serviceAccount:{emailid}**: An email address that represents a service account. For example, my-other-app@appspot.gserviceaccount.com.
-        * **group:{emailid}**: An email address that represents a Google group. For example, admins@example.com.
-        * **domain:{domain}**: A G Suite domain (primary, instead of alias) name that represents all the users of that domain. For example, google.com or example.com.
-        * **projectOwner:projectid**: Owners of the given project. For example, "projectOwner:my-example-project"
-        * **projectEditor:projectid**: Editors of the given project. For example, "projectEditor:my-example-project"
-        * **projectViewer:projectid**: Viewers of the given project. For example, "projectViewer:my-example-project"
         """
         return pulumi.get(self, "project")
 
@@ -327,6 +279,115 @@ class MachineImageIamPolicy(pulumi.CustomResource):
         ```
         <!--End PulumiCodeChooser -->
 
+        ## google\\_compute\\_machine\\_image\\_iam\\_policy
+
+        <!--Start PulumiCodeChooser -->
+        ```python
+        import pulumi
+        import pulumi_gcp as gcp
+
+        admin = gcp.organizations.get_iam_policy(bindings=[gcp.organizations.GetIAMPolicyBindingArgs(
+            role="roles/compute.admin",
+            members=["user:jane@example.com"],
+        )])
+        policy = gcp.compute.MachineImageIamPolicy("policy",
+            project=image["project"],
+            machine_image=image["name"],
+            policy_data=admin.policy_data)
+        ```
+        <!--End PulumiCodeChooser -->
+
+        With IAM Conditions:
+
+        <!--Start PulumiCodeChooser -->
+        ```python
+        import pulumi
+        import pulumi_gcp as gcp
+
+        admin = gcp.organizations.get_iam_policy(bindings=[gcp.organizations.GetIAMPolicyBindingArgs(
+            role="roles/compute.admin",
+            members=["user:jane@example.com"],
+            condition=gcp.organizations.GetIAMPolicyBindingConditionArgs(
+                title="expires_after_2019_12_31",
+                description="Expiring at midnight of 2019-12-31",
+                expression="request.time < timestamp(\\"2020-01-01T00:00:00Z\\")",
+            ),
+        )])
+        policy = gcp.compute.MachineImageIamPolicy("policy",
+            project=image["project"],
+            machine_image=image["name"],
+            policy_data=admin.policy_data)
+        ```
+        <!--End PulumiCodeChooser -->
+        ## google\\_compute\\_machine\\_image\\_iam\\_binding
+
+        <!--Start PulumiCodeChooser -->
+        ```python
+        import pulumi
+        import pulumi_gcp as gcp
+
+        binding = gcp.compute.MachineImageIamBinding("binding",
+            project=image["project"],
+            machine_image=image["name"],
+            role="roles/compute.admin",
+            members=["user:jane@example.com"])
+        ```
+        <!--End PulumiCodeChooser -->
+
+        With IAM Conditions:
+
+        <!--Start PulumiCodeChooser -->
+        ```python
+        import pulumi
+        import pulumi_gcp as gcp
+
+        binding = gcp.compute.MachineImageIamBinding("binding",
+            project=image["project"],
+            machine_image=image["name"],
+            role="roles/compute.admin",
+            members=["user:jane@example.com"],
+            condition=gcp.compute.MachineImageIamBindingConditionArgs(
+                title="expires_after_2019_12_31",
+                description="Expiring at midnight of 2019-12-31",
+                expression="request.time < timestamp(\\"2020-01-01T00:00:00Z\\")",
+            ))
+        ```
+        <!--End PulumiCodeChooser -->
+        ## google\\_compute\\_machine\\_image\\_iam\\_member
+
+        <!--Start PulumiCodeChooser -->
+        ```python
+        import pulumi
+        import pulumi_gcp as gcp
+
+        member = gcp.compute.MachineImageIamMember("member",
+            project=image["project"],
+            machine_image=image["name"],
+            role="roles/compute.admin",
+            member="user:jane@example.com")
+        ```
+        <!--End PulumiCodeChooser -->
+
+        With IAM Conditions:
+
+        <!--Start PulumiCodeChooser -->
+        ```python
+        import pulumi
+        import pulumi_gcp as gcp
+
+        member = gcp.compute.MachineImageIamMember("member",
+            project=image["project"],
+            machine_image=image["name"],
+            role="roles/compute.admin",
+            member="user:jane@example.com",
+            condition=gcp.compute.MachineImageIamMemberConditionArgs(
+                title="expires_after_2019_12_31",
+                description="Expiring at midnight of 2019-12-31",
+                expression="request.time < timestamp(\\"2020-01-01T00:00:00Z\\")",
+            ))
+        ```
+        <!--End PulumiCodeChooser -->
+
         ## Import
 
         For all import syntaxes, the "resource in question" can take any of the following forms:
@@ -370,18 +431,6 @@ class MachineImageIamPolicy(pulumi.CustomResource):
                a `organizations_get_iam_policy` data source.
         :param pulumi.Input[str] project: The ID of the project in which the resource belongs.
                If it is not provided, the project will be parsed from the identifier of the parent resource. If no project is provided in the parent identifier and no project is specified, the provider project is used.
-               
-               * `member/members` - (Required) Identities that will be granted the privilege in `role`.
-               Each entry can have one of the following values:
-               * **allUsers**: A special identifier that represents anyone who is on the internet; with or without a Google account.
-               * **allAuthenticatedUsers**: A special identifier that represents anyone who is authenticated with a Google account or a service account.
-               * **user:{emailid}**: An email address that represents a specific Google account. For example, alice@gmail.com or joe@example.com.
-               * **serviceAccount:{emailid}**: An email address that represents a service account. For example, my-other-app@appspot.gserviceaccount.com.
-               * **group:{emailid}**: An email address that represents a Google group. For example, admins@example.com.
-               * **domain:{domain}**: A G Suite domain (primary, instead of alias) name that represents all the users of that domain. For example, google.com or example.com.
-               * **projectOwner:projectid**: Owners of the given project. For example, "projectOwner:my-example-project"
-               * **projectEditor:projectid**: Editors of the given project. For example, "projectEditor:my-example-project"
-               * **projectViewer:projectid**: Viewers of the given project. For example, "projectViewer:my-example-project"
         """
         ...
     @overload
@@ -514,6 +563,115 @@ class MachineImageIamPolicy(pulumi.CustomResource):
         ```
         <!--End PulumiCodeChooser -->
 
+        ## google\\_compute\\_machine\\_image\\_iam\\_policy
+
+        <!--Start PulumiCodeChooser -->
+        ```python
+        import pulumi
+        import pulumi_gcp as gcp
+
+        admin = gcp.organizations.get_iam_policy(bindings=[gcp.organizations.GetIAMPolicyBindingArgs(
+            role="roles/compute.admin",
+            members=["user:jane@example.com"],
+        )])
+        policy = gcp.compute.MachineImageIamPolicy("policy",
+            project=image["project"],
+            machine_image=image["name"],
+            policy_data=admin.policy_data)
+        ```
+        <!--End PulumiCodeChooser -->
+
+        With IAM Conditions:
+
+        <!--Start PulumiCodeChooser -->
+        ```python
+        import pulumi
+        import pulumi_gcp as gcp
+
+        admin = gcp.organizations.get_iam_policy(bindings=[gcp.organizations.GetIAMPolicyBindingArgs(
+            role="roles/compute.admin",
+            members=["user:jane@example.com"],
+            condition=gcp.organizations.GetIAMPolicyBindingConditionArgs(
+                title="expires_after_2019_12_31",
+                description="Expiring at midnight of 2019-12-31",
+                expression="request.time < timestamp(\\"2020-01-01T00:00:00Z\\")",
+            ),
+        )])
+        policy = gcp.compute.MachineImageIamPolicy("policy",
+            project=image["project"],
+            machine_image=image["name"],
+            policy_data=admin.policy_data)
+        ```
+        <!--End PulumiCodeChooser -->
+        ## google\\_compute\\_machine\\_image\\_iam\\_binding
+
+        <!--Start PulumiCodeChooser -->
+        ```python
+        import pulumi
+        import pulumi_gcp as gcp
+
+        binding = gcp.compute.MachineImageIamBinding("binding",
+            project=image["project"],
+            machine_image=image["name"],
+            role="roles/compute.admin",
+            members=["user:jane@example.com"])
+        ```
+        <!--End PulumiCodeChooser -->
+
+        With IAM Conditions:
+
+        <!--Start PulumiCodeChooser -->
+        ```python
+        import pulumi
+        import pulumi_gcp as gcp
+
+        binding = gcp.compute.MachineImageIamBinding("binding",
+            project=image["project"],
+            machine_image=image["name"],
+            role="roles/compute.admin",
+            members=["user:jane@example.com"],
+            condition=gcp.compute.MachineImageIamBindingConditionArgs(
+                title="expires_after_2019_12_31",
+                description="Expiring at midnight of 2019-12-31",
+                expression="request.time < timestamp(\\"2020-01-01T00:00:00Z\\")",
+            ))
+        ```
+        <!--End PulumiCodeChooser -->
+        ## google\\_compute\\_machine\\_image\\_iam\\_member
+
+        <!--Start PulumiCodeChooser -->
+        ```python
+        import pulumi
+        import pulumi_gcp as gcp
+
+        member = gcp.compute.MachineImageIamMember("member",
+            project=image["project"],
+            machine_image=image["name"],
+            role="roles/compute.admin",
+            member="user:jane@example.com")
+        ```
+        <!--End PulumiCodeChooser -->
+
+        With IAM Conditions:
+
+        <!--Start PulumiCodeChooser -->
+        ```python
+        import pulumi
+        import pulumi_gcp as gcp
+
+        member = gcp.compute.MachineImageIamMember("member",
+            project=image["project"],
+            machine_image=image["name"],
+            role="roles/compute.admin",
+            member="user:jane@example.com",
+            condition=gcp.compute.MachineImageIamMemberConditionArgs(
+                title="expires_after_2019_12_31",
+                description="Expiring at midnight of 2019-12-31",
+                expression="request.time < timestamp(\\"2020-01-01T00:00:00Z\\")",
+            ))
+        ```
+        <!--End PulumiCodeChooser -->
+
         ## Import
 
         For all import syntaxes, the "resource in question" can take any of the following forms:
@@ -612,18 +770,6 @@ class MachineImageIamPolicy(pulumi.CustomResource):
                a `organizations_get_iam_policy` data source.
         :param pulumi.Input[str] project: The ID of the project in which the resource belongs.
                If it is not provided, the project will be parsed from the identifier of the parent resource. If no project is provided in the parent identifier and no project is specified, the provider project is used.
-               
-               * `member/members` - (Required) Identities that will be granted the privilege in `role`.
-               Each entry can have one of the following values:
-               * **allUsers**: A special identifier that represents anyone who is on the internet; with or without a Google account.
-               * **allAuthenticatedUsers**: A special identifier that represents anyone who is authenticated with a Google account or a service account.
-               * **user:{emailid}**: An email address that represents a specific Google account. For example, alice@gmail.com or joe@example.com.
-               * **serviceAccount:{emailid}**: An email address that represents a service account. For example, my-other-app@appspot.gserviceaccount.com.
-               * **group:{emailid}**: An email address that represents a Google group. For example, admins@example.com.
-               * **domain:{domain}**: A G Suite domain (primary, instead of alias) name that represents all the users of that domain. For example, google.com or example.com.
-               * **projectOwner:projectid**: Owners of the given project. For example, "projectOwner:my-example-project"
-               * **projectEditor:projectid**: Editors of the given project. For example, "projectEditor:my-example-project"
-               * **projectViewer:projectid**: Viewers of the given project. For example, "projectViewer:my-example-project"
         """
         opts = pulumi.ResourceOptions.merge(opts, pulumi.ResourceOptions(id=id))
 
@@ -666,18 +812,6 @@ class MachineImageIamPolicy(pulumi.CustomResource):
         """
         The ID of the project in which the resource belongs.
         If it is not provided, the project will be parsed from the identifier of the parent resource. If no project is provided in the parent identifier and no project is specified, the provider project is used.
-
-        * `member/members` - (Required) Identities that will be granted the privilege in `role`.
-        Each entry can have one of the following values:
-        * **allUsers**: A special identifier that represents anyone who is on the internet; with or without a Google account.
-        * **allAuthenticatedUsers**: A special identifier that represents anyone who is authenticated with a Google account or a service account.
-        * **user:{emailid}**: An email address that represents a specific Google account. For example, alice@gmail.com or joe@example.com.
-        * **serviceAccount:{emailid}**: An email address that represents a service account. For example, my-other-app@appspot.gserviceaccount.com.
-        * **group:{emailid}**: An email address that represents a Google group. For example, admins@example.com.
-        * **domain:{domain}**: A G Suite domain (primary, instead of alias) name that represents all the users of that domain. For example, google.com or example.com.
-        * **projectOwner:projectid**: Owners of the given project. For example, "projectOwner:my-example-project"
-        * **projectEditor:projectid**: Editors of the given project. For example, "projectEditor:my-example-project"
-        * **projectViewer:projectid**: Viewers of the given project. For example, "projectViewer:my-example-project"
         """
         return pulumi.get(self, "project")
 

pulumi_gcp/compute/outputs.py

@@ -28418,6 +28418,8 @@ class RouterBgp(dict):
             suggest = "advertised_groups"
         elif key == "advertisedIpRanges":
             suggest = "advertised_ip_ranges"
+        elif key == "identifierRange":
+            suggest = "identifier_range"
         elif key == "keepaliveInterval":
             suggest = "keepalive_interval"
 
@@ -28437,6 +28439,7 @@ class RouterBgp(dict):
                  advertise_mode: Optional[str] = None,
                  advertised_groups: Optional[Sequence[str]] = None,
                  advertised_ip_ranges: Optional[Sequence['outputs.RouterBgpAdvertisedIpRange']] = None,
+                 identifier_range: Optional[str] = None,
                  keepalive_interval: Optional[int] = None):
         """
         :param int asn: Local BGP Autonomous System Number (ASN). Must be an RFC6996
@@ -28458,6 +28461,11 @@ class RouterBgp(dict):
                ranges will be advertised in addition to any specified groups.
                Leave this field blank to advertise no custom IP ranges.
                Structure is documented below.
+        :param str identifier_range: Explicitly specifies a range of valid BGP Identifiers for this Router.
+               It is provided as a link-local IPv4 range (from 169.254.0.0/16), of
+               size at least /30, even if the BGP sessions are over IPv6. It must
+               not overlap with any IPv4 BGP session ranges. Other vendors commonly
+               call this router ID.
         :param int keepalive_interval: The interval in seconds between BGP keepalive messages that are sent
                to the peer. Hold time is three times the interval at which keepalive
                messages are sent, and the hold time is the maximum number of seconds
@@ -28475,6 +28483,8 @@ class RouterBgp(dict):
             pulumi.set(__self__, "advertised_groups", advertised_groups)
         if advertised_ip_ranges is not None:
             pulumi.set(__self__, "advertised_ip_ranges", advertised_ip_ranges)
+        if identifier_range is not None:
+            pulumi.set(__self__, "identifier_range", identifier_range)
         if keepalive_interval is not None:
             pulumi.set(__self__, "keepalive_interval", keepalive_interval)
 
@@ -28525,6 +28535,18 @@ class RouterBgp(dict):
         """
         return pulumi.get(self, "advertised_ip_ranges")
 
+    @property
+    @pulumi.getter(name="identifierRange")
+    def identifier_range(self) -> Optional[str]:
+        """
+        Explicitly specifies a range of valid BGP Identifiers for this Router.
+        It is provided as a link-local IPv4 range (from 169.254.0.0/16), of
+        size at least /30, even if the BGP sessions are over IPv6. It must
+        not overlap with any IPv4 BGP session ranges. Other vendors commonly
+        call this router ID.
+        """
+        return pulumi.get(self, "identifier_range")
+
     @property
     @pulumi.getter(name="keepaliveInterval")
     def keepalive_interval(self) -> Optional[int]:
@@ -47193,6 +47215,7 @@ class GetRouterBgpResult(dict):
                  advertised_groups: Sequence[str],
                  advertised_ip_ranges: Sequence['outputs.GetRouterBgpAdvertisedIpRangeResult'],
                  asn: int,
+                 identifier_range: str,
                  keepalive_interval: int):
         """
         :param str advertise_mode: User-specified flag to indicate which mode to use for advertisement. Default value: "DEFAULT" Possible values: ["DEFAULT", "CUSTOM"]
@@ -47212,6 +47235,11 @@ class GetRouterBgpResult(dict):
                private ASN, either 16-bit or 32-bit. The value will be fixed for
                this router resource. All VPN tunnels that link to this router
                will have the same local ASN.
+        :param str identifier_range: Explicitly specifies a range of valid BGP Identifiers for this Router.
+               It is provided as a link-local IPv4 range (from 169.254.0.0/16), of
+               size at least /30, even if the BGP sessions are over IPv6. It must
+               not overlap with any IPv4 BGP session ranges. Other vendors commonly
+               call this router ID.
         :param int keepalive_interval: The interval in seconds between BGP keepalive messages that are sent
                to the peer. Hold time is three times the interval at which keepalive
                messages are sent, and the hold time is the maximum number of seconds
@@ -47227,6 +47255,7 @@ class GetRouterBgpResult(dict):
         pulumi.set(__self__, "advertised_groups", advertised_groups)
         pulumi.set(__self__, "advertised_ip_ranges", advertised_ip_ranges)
         pulumi.set(__self__, "asn", asn)
+        pulumi.set(__self__, "identifier_range", identifier_range)
         pulumi.set(__self__, "keepalive_interval", keepalive_interval)
 
     @property
@@ -47274,6 +47303,18 @@ class GetRouterBgpResult(dict):
         """
         return pulumi.get(self, "asn")
 
+    @property
+    @pulumi.getter(name="identifierRange")
+    def identifier_range(self) -> str:
+        """
+        Explicitly specifies a range of valid BGP Identifiers for this Router.
+        It is provided as a link-local IPv4 range (from 169.254.0.0/16), of
+        size at least /30, even if the BGP sessions are over IPv6. It must
+        not overlap with any IPv4 BGP session ranges. Other vendors commonly
+        call this router ID.
+        """
+        return pulumi.get(self, "identifier_range")
+
     @property
     @pulumi.getter(name="keepaliveInterval")
     def keepalive_interval(self) -> int: