pulumi-gcp 7.20.0a1713984378__py3-none-any.whl → 7.21.0__py3-none-any.whl

pulumi_gcp/__init__.py

@@ -929,6 +929,14 @@ _utilities.register(
    "gcp:apphub/workload:Workload": "Workload"
   }
  },
+ {
+  "pkg": "gcp",
+  "mod": "applicationintegration/authConfig",
+  "fqn": "pulumi_gcp.applicationintegration",
+  "classes": {
+   "gcp:applicationintegration/authConfig:AuthConfig": "AuthConfig"
+  }
+ },
  {
   "pkg": "gcp",
   "mod": "applicationintegration/client",
@@ -2049,6 +2057,14 @@ _utilities.register(
    "gcp:composer/environment:Environment": "Environment"
   }
  },
+ {
+  "pkg": "gcp",
+  "mod": "composer/userWorkloadsSecret",
+  "fqn": "pulumi_gcp.composer",
+  "classes": {
+   "gcp:composer/userWorkloadsSecret:UserWorkloadsSecret": "UserWorkloadsSecret"
+  }
+ },
  {
   "pkg": "gcp",
   "mod": "compute/address",
@@ -2993,6 +3009,14 @@ _utilities.register(
    "gcp:compute/securityPolicy:SecurityPolicy": "SecurityPolicy"
   }
  },
+ {
+  "pkg": "gcp",
+  "mod": "compute/securityPolicyRule",
+  "fqn": "pulumi_gcp.compute",
+  "classes": {
+   "gcp:compute/securityPolicyRule:SecurityPolicyRule": "SecurityPolicyRule"
+  }
+ },
  {
   "pkg": "gcp",
   "mod": "compute/securityScanConfig",
@@ -3529,6 +3553,14 @@ _utilities.register(
    "gcp:dataloss/preventionDeidentifyTemplate:PreventionDeidentifyTemplate": "PreventionDeidentifyTemplate"
   }
  },
+ {
+  "pkg": "gcp",
+  "mod": "dataloss/preventionDiscoveryConfig",
+  "fqn": "pulumi_gcp.dataloss",
+  "classes": {
+   "gcp:dataloss/preventionDiscoveryConfig:PreventionDiscoveryConfig": "PreventionDiscoveryConfig"
+  }
+ },
  {
   "pkg": "gcp",
   "mod": "dataloss/preventionInspectTemplate",
@@ -5793,6 +5825,14 @@ _utilities.register(
    "gcp:networkconnectivity/hub:Hub": "Hub"
   }
  },
+ {
+  "pkg": "gcp",
+  "mod": "networkconnectivity/internalRange",
+  "fqn": "pulumi_gcp.networkconnectivity",
+  "classes": {
+   "gcp:networkconnectivity/internalRange:InternalRange": "InternalRange"
+  }
+ },
  {
   "pkg": "gcp",
   "mod": "networkconnectivity/policyBasedRoute",
@@ -6305,6 +6345,14 @@ _utilities.register(
    "gcp:projects/iAMPolicy:IAMPolicy": "IAMPolicy"
   }
  },
+ {
+  "pkg": "gcp",
+  "mod": "projects/iamMemberRemove",
+  "fqn": "pulumi_gcp.projects",
+  "classes": {
+   "gcp:projects/iamMemberRemove:IamMemberRemove": "IamMemberRemove"
+  }
+ },
  {
   "pkg": "gcp",
   "mod": "projects/organizationPolicy",

pulumi_gcp/alloydb/_inputs.py

@@ -35,6 +35,8 @@ __all__ = [
     'InstanceClientConnectionConfigArgs',
     'InstanceClientConnectionConfigSslConfigArgs',
     'InstanceMachineConfigArgs',
+    'InstanceNetworkConfigArgs',
+    'InstanceNetworkConfigAuthorizedExternalNetworkArgs',
     'InstanceQueryInsightsConfigArgs',
     'InstanceReadPoolConfigArgs',
 ]
@@ -1084,6 +1086,78 @@ class InstanceMachineConfigArgs:
         pulumi.set(self, "cpu_count", value)
 
 
+@pulumi.input_type
+class InstanceNetworkConfigArgs:
+    def __init__(__self__, *,
+                 authorized_external_networks: Optional[pulumi.Input[Sequence[pulumi.Input['InstanceNetworkConfigAuthorizedExternalNetworkArgs']]]] = None,
+                 enable_public_ip: Optional[pulumi.Input[bool]] = None):
+        """
+        :param pulumi.Input[Sequence[pulumi.Input['InstanceNetworkConfigAuthorizedExternalNetworkArgs']]] authorized_external_networks: A list of external networks authorized to access this instance. This
+               field is only allowed to be set when `enable_public_ip` is set to
+               true.
+               Structure is documented below.
+        :param pulumi.Input[bool] enable_public_ip: Enabling public ip for the instance. If a user wishes to disable this,
+               please also clear the list of the authorized external networks set on
+               the same instance.
+        """
+        if authorized_external_networks is not None:
+            pulumi.set(__self__, "authorized_external_networks", authorized_external_networks)
+        if enable_public_ip is not None:
+            pulumi.set(__self__, "enable_public_ip", enable_public_ip)
+
+    @property
+    @pulumi.getter(name="authorizedExternalNetworks")
+    def authorized_external_networks(self) -> Optional[pulumi.Input[Sequence[pulumi.Input['InstanceNetworkConfigAuthorizedExternalNetworkArgs']]]]:
+        """
+        A list of external networks authorized to access this instance. This
+        field is only allowed to be set when `enable_public_ip` is set to
+        true.
+        Structure is documented below.
+        """
+        return pulumi.get(self, "authorized_external_networks")
+
+    @authorized_external_networks.setter
+    def authorized_external_networks(self, value: Optional[pulumi.Input[Sequence[pulumi.Input['InstanceNetworkConfigAuthorizedExternalNetworkArgs']]]]):
+        pulumi.set(self, "authorized_external_networks", value)
+
+    @property
+    @pulumi.getter(name="enablePublicIp")
+    def enable_public_ip(self) -> Optional[pulumi.Input[bool]]:
+        """
+        Enabling public ip for the instance. If a user wishes to disable this,
+        please also clear the list of the authorized external networks set on
+        the same instance.
+        """
+        return pulumi.get(self, "enable_public_ip")
+
+    @enable_public_ip.setter
+    def enable_public_ip(self, value: Optional[pulumi.Input[bool]]):
+        pulumi.set(self, "enable_public_ip", value)
+
+
+@pulumi.input_type
+class InstanceNetworkConfigAuthorizedExternalNetworkArgs:
+    def __init__(__self__, *,
+                 cidr_range: Optional[pulumi.Input[str]] = None):
+        """
+        :param pulumi.Input[str] cidr_range: CIDR range for one authorized network of the instance.
+        """
+        if cidr_range is not None:
+            pulumi.set(__self__, "cidr_range", cidr_range)
+
+    @property
+    @pulumi.getter(name="cidrRange")
+    def cidr_range(self) -> Optional[pulumi.Input[str]]:
+        """
+        CIDR range for one authorized network of the instance.
+        """
+        return pulumi.get(self, "cidr_range")
+
+    @cidr_range.setter
+    def cidr_range(self, value: Optional[pulumi.Input[str]]):
+        pulumi.set(self, "cidr_range", value)
+
+
 @pulumi.input_type
 class InstanceQueryInsightsConfigArgs:
     def __init__(__self__, *,

pulumi_gcp/alloydb/backup.py

@@ -249,8 +249,6 @@ class _BackupState:
                Examples: "2014-10-02T15:01:23Z" and "2014-10-02T15:01:23.045123456Z".
         :param pulumi.Input[str] description: User-provided description of the backup.
         :param pulumi.Input[str] display_name: User-settable and human-readable display name for the Backup.
-        :param pulumi.Input[Mapping[str, pulumi.Input[str]]] effective_annotations: All of annotations (key/value pairs) present on the resource in GCP, including the annotations configured through
-               Terraform, other clients and services.
         :param pulumi.Input[Mapping[str, pulumi.Input[str]]] effective_labels: All of labels (key/value pairs) present on the resource in GCP, including the labels configured through Pulumi, other clients and services.
         :param pulumi.Input['BackupEncryptionConfigArgs'] encryption_config: EncryptionConfig describes the encryption config of a cluster or a backup that is encrypted with a CMEK (customer-managed encryption key).
                Structure is documented below.
@@ -443,10 +441,6 @@ class _BackupState:
     @property
     @pulumi.getter(name="effectiveAnnotations")
     def effective_annotations(self) -> Optional[pulumi.Input[Mapping[str, pulumi.Input[str]]]]:
-        """
-        All of annotations (key/value pairs) present on the resource in GCP, including the annotations configured through
-        Terraform, other clients and services.
-        """
         return pulumi.get(self, "effective_annotations")
 
     @effective_annotations.setter
@@ -1049,8 +1043,6 @@ class Backup(pulumi.CustomResource):
                Examples: "2014-10-02T15:01:23Z" and "2014-10-02T15:01:23.045123456Z".
         :param pulumi.Input[str] description: User-provided description of the backup.
         :param pulumi.Input[str] display_name: User-settable and human-readable display name for the Backup.
-        :param pulumi.Input[Mapping[str, pulumi.Input[str]]] effective_annotations: All of annotations (key/value pairs) present on the resource in GCP, including the annotations configured through
-               Terraform, other clients and services.
         :param pulumi.Input[Mapping[str, pulumi.Input[str]]] effective_labels: All of labels (key/value pairs) present on the resource in GCP, including the labels configured through Pulumi, other clients and services.
         :param pulumi.Input[pulumi.InputType['BackupEncryptionConfigArgs']] encryption_config: EncryptionConfig describes the encryption config of a cluster or a backup that is encrypted with a CMEK (customer-managed encryption key).
                Structure is documented below.
@@ -1190,10 +1182,6 @@ class Backup(pulumi.CustomResource):
     @property
     @pulumi.getter(name="effectiveAnnotations")
     def effective_annotations(self) -> pulumi.Output[Mapping[str, str]]:
-        """
-        All of annotations (key/value pairs) present on the resource in GCP, including the annotations configured through
-        Terraform, other clients and services.
-        """
         return pulumi.get(self, "effective_annotations")
 
     @property

pulumi_gcp/alloydb/cluster.py

@@ -441,8 +441,6 @@ class _ClusterState:
                Deleting a cluster forcefully, deletes the cluster and all its associated instances within the cluster.
                Deleting a Secondary cluster with a secondary instance REQUIRES setting deletion_policy = "FORCE" otherwise an error is returned. This is needed as there is no support to delete just the secondary instance, and the only way to delete secondary instance is to delete the associated secondary cluster forcefully which also deletes the secondary instance.
         :param pulumi.Input[str] display_name: User-settable and human-readable display name for the Cluster.
-        :param pulumi.Input[Mapping[str, pulumi.Input[str]]] effective_annotations: All of annotations (key/value pairs) present on the resource in GCP, including the annotations configured through
-               Terraform, other clients and services.
         :param pulumi.Input[Mapping[str, pulumi.Input[str]]] effective_labels: All of labels (key/value pairs) present on the resource in GCP, including the labels configured through Pulumi, other clients and services.
         :param pulumi.Input['ClusterEncryptionConfigArgs'] encryption_config: EncryptionConfig describes the encryption config of a cluster or a backup that is encrypted with a CMEK (customer-managed encryption key).
                Structure is documented below.
@@ -685,10 +683,6 @@ class _ClusterState:
     @property
     @pulumi.getter(name="effectiveAnnotations")
     def effective_annotations(self) -> Optional[pulumi.Input[Mapping[str, pulumi.Input[str]]]]:
-        """
-        All of annotations (key/value pairs) present on the resource in GCP, including the annotations configured through
-        Terraform, other clients and services.
-        """
         return pulumi.get(self, "effective_annotations")
 
     @effective_annotations.setter
@@ -1572,8 +1566,6 @@ class Cluster(pulumi.CustomResource):
                Deleting a cluster forcefully, deletes the cluster and all its associated instances within the cluster.
                Deleting a Secondary cluster with a secondary instance REQUIRES setting deletion_policy = "FORCE" otherwise an error is returned. This is needed as there is no support to delete just the secondary instance, and the only way to delete secondary instance is to delete the associated secondary cluster forcefully which also deletes the secondary instance.
         :param pulumi.Input[str] display_name: User-settable and human-readable display name for the Cluster.
-        :param pulumi.Input[Mapping[str, pulumi.Input[str]]] effective_annotations: All of annotations (key/value pairs) present on the resource in GCP, including the annotations configured through
-               Terraform, other clients and services.
         :param pulumi.Input[Mapping[str, pulumi.Input[str]]] effective_labels: All of labels (key/value pairs) present on the resource in GCP, including the labels configured through Pulumi, other clients and services.
         :param pulumi.Input[pulumi.InputType['ClusterEncryptionConfigArgs']] encryption_config: EncryptionConfig describes the encryption config of a cluster or a backup that is encrypted with a CMEK (customer-managed encryption key).
                Structure is documented below.
@@ -1748,10 +1740,6 @@ class Cluster(pulumi.CustomResource):
     @property
     @pulumi.getter(name="effectiveAnnotations")
     def effective_annotations(self) -> pulumi.Output[Mapping[str, str]]:
-        """
-        All of annotations (key/value pairs) present on the resource in GCP, including the annotations configured through
-        Terraform, other clients and services.
-        """
         return pulumi.get(self, "effective_annotations")
 
     @property

pulumi_gcp/alloydb/instance.py

@@ -27,6 +27,7 @@ class InstanceArgs:
                  gce_zone: Optional[pulumi.Input[str]] = None,
                  labels: Optional[pulumi.Input[Mapping[str, pulumi.Input[str]]]] = None,
                  machine_config: Optional[pulumi.Input['InstanceMachineConfigArgs']] = None,
+                 network_config: Optional[pulumi.Input['InstanceNetworkConfigArgs']] = None,
                  query_insights_config: Optional[pulumi.Input['InstanceQueryInsightsConfigArgs']] = None,
                  read_pool_config: Optional[pulumi.Input['InstanceReadPoolConfigArgs']] = None):
         """
@@ -37,15 +38,6 @@ class InstanceArgs:
                
                
                - - -
-        :param pulumi.Input[str] instance_type: The type of the instance. If the instance type is READ_POOL, provide the associated PRIMARY/SECONDARY instance in the
-               'depends_on' meta-data attribute. If the instance type is SECONDARY, point to the cluster_type of the associated
-               secondary cluster instead of mentioning SECONDARY. Example: {instance_type =
-               google_alloydb_cluster.<secondary_cluster_name>.cluster_type} instead of {instance_type = SECONDARY} If the instance
-               type is SECONDARY, the terraform delete instance operation does not delete the secondary instance but abandons it
-               instead. Use deletion_policy = "FORCE" in the associated secondary cluster and delete the cluster forcefully to delete
-               the secondary cluster as well its associated secondary instance. Users can undo the delete secondary instance action by
-               importing the deleted secondary instance by calling terraform import. Possible values: ["PRIMARY", "READ_POOL",
-               "SECONDARY"]
         :param pulumi.Input[Mapping[str, pulumi.Input[str]]] annotations: Annotations to allow client tools to store small amount of arbitrary data. This is distinct from labels.
                **Note**: This field is non-authoritative, and will only manage the annotations present in your configuration.
                Please refer to the field `effective_annotations` for all of the annotations present on the resource.
@@ -66,6 +58,8 @@ class InstanceArgs:
                Please refer to the field `effective_labels` for all of the labels present on the resource.
         :param pulumi.Input['InstanceMachineConfigArgs'] machine_config: Configurations for the machines that host the underlying database engine.
                Structure is documented below.
+        :param pulumi.Input['InstanceNetworkConfigArgs'] network_config: Instance level network configuration.
+               Structure is documented below.
         :param pulumi.Input['InstanceQueryInsightsConfigArgs'] query_insights_config: Configuration for query insights.
                Structure is documented below.
         :param pulumi.Input['InstanceReadPoolConfigArgs'] read_pool_config: Read pool specific config. If the instance type is READ_POOL, this configuration must be provided.
@@ -90,6 +84,8 @@ class InstanceArgs:
             pulumi.set(__self__, "labels", labels)
         if machine_config is not None:
             pulumi.set(__self__, "machine_config", machine_config)
+        if network_config is not None:
+            pulumi.set(__self__, "network_config", network_config)
         if query_insights_config is not None:
             pulumi.set(__self__, "query_insights_config", query_insights_config)
         if read_pool_config is not None:
@@ -126,17 +122,6 @@ class InstanceArgs:
     @property
     @pulumi.getter(name="instanceType")
     def instance_type(self) -> pulumi.Input[str]:
-        """
-        The type of the instance. If the instance type is READ_POOL, provide the associated PRIMARY/SECONDARY instance in the
-        'depends_on' meta-data attribute. If the instance type is SECONDARY, point to the cluster_type of the associated
-        secondary cluster instead of mentioning SECONDARY. Example: {instance_type =
-        google_alloydb_cluster.<secondary_cluster_name>.cluster_type} instead of {instance_type = SECONDARY} If the instance
-        type is SECONDARY, the terraform delete instance operation does not delete the secondary instance but abandons it
-        instead. Use deletion_policy = "FORCE" in the associated secondary cluster and delete the cluster forcefully to delete
-        the secondary cluster as well its associated secondary instance. Users can undo the delete secondary instance action by
-        importing the deleted secondary instance by calling terraform import. Possible values: ["PRIMARY", "READ_POOL",
-        "SECONDARY"]
-        """
         return pulumi.get(self, "instance_type")
 
     @instance_type.setter
@@ -251,6 +236,19 @@ class InstanceArgs:
     def machine_config(self, value: Optional[pulumi.Input['InstanceMachineConfigArgs']]):
         pulumi.set(self, "machine_config", value)
 
+    @property
+    @pulumi.getter(name="networkConfig")
+    def network_config(self) -> Optional[pulumi.Input['InstanceNetworkConfigArgs']]:
+        """
+        Instance level network configuration.
+        Structure is documented below.
+        """
+        return pulumi.get(self, "network_config")
+
+    @network_config.setter
+    def network_config(self, value: Optional[pulumi.Input['InstanceNetworkConfigArgs']]):
+        pulumi.set(self, "network_config", value)
+
     @property
     @pulumi.getter(name="queryInsightsConfig")
     def query_insights_config(self) -> Optional[pulumi.Input['InstanceQueryInsightsConfigArgs']]:
@@ -297,6 +295,8 @@ class _InstanceState:
                  labels: Optional[pulumi.Input[Mapping[str, pulumi.Input[str]]]] = None,
                  machine_config: Optional[pulumi.Input['InstanceMachineConfigArgs']] = None,
                  name: Optional[pulumi.Input[str]] = None,
+                 network_config: Optional[pulumi.Input['InstanceNetworkConfigArgs']] = None,
+                 public_ip_address: Optional[pulumi.Input[str]] = None,
                  pulumi_labels: Optional[pulumi.Input[Mapping[str, pulumi.Input[str]]]] = None,
                  query_insights_config: Optional[pulumi.Input['InstanceQueryInsightsConfigArgs']] = None,
                  read_pool_config: Optional[pulumi.Input['InstanceReadPoolConfigArgs']] = None,
@@ -323,23 +323,12 @@ class _InstanceState:
         :param pulumi.Input[str] create_time: Time the Instance was created in UTC.
         :param pulumi.Input[Mapping[str, pulumi.Input[str]]] database_flags: Database flags. Set at instance level. * They are copied from primary instance on read instance creation. * Read instances can set new or override existing flags that are relevant for reads, e.g. for enabling columnar cache on a read instance. Flags set on read instance may or may not be present on primary.
         :param pulumi.Input[str] display_name: User-settable and human-readable display name for the Instance.
-        :param pulumi.Input[Mapping[str, pulumi.Input[str]]] effective_annotations: All of annotations (key/value pairs) present on the resource in GCP, including the annotations configured through
-               Terraform, other clients and services.
         :param pulumi.Input[Mapping[str, pulumi.Input[str]]] effective_labels: All of labels (key/value pairs) present on the resource in GCP, including the labels configured through Pulumi, other clients and services.
         :param pulumi.Input[str] gce_zone: The Compute Engine zone that the instance should serve from, per https://cloud.google.com/compute/docs/regions-zones This can ONLY be specified for ZONAL instances. If present for a REGIONAL instance, an error will be thrown. If this is absent for a ZONAL instance, instance is created in a random zone with available capacity.
         :param pulumi.Input[str] instance_id: The ID of the alloydb instance.
                
                
                - - -
-        :param pulumi.Input[str] instance_type: The type of the instance. If the instance type is READ_POOL, provide the associated PRIMARY/SECONDARY instance in the
-               'depends_on' meta-data attribute. If the instance type is SECONDARY, point to the cluster_type of the associated
-               secondary cluster instead of mentioning SECONDARY. Example: {instance_type =
-               google_alloydb_cluster.<secondary_cluster_name>.cluster_type} instead of {instance_type = SECONDARY} If the instance
-               type is SECONDARY, the terraform delete instance operation does not delete the secondary instance but abandons it
-               instead. Use deletion_policy = "FORCE" in the associated secondary cluster and delete the cluster forcefully to delete
-               the secondary cluster as well its associated secondary instance. Users can undo the delete secondary instance action by
-               importing the deleted secondary instance by calling terraform import. Possible values: ["PRIMARY", "READ_POOL",
-               "SECONDARY"]
         :param pulumi.Input[str] ip_address: The IP address for the Instance. This is the connection endpoint for an end-user application.
         :param pulumi.Input[Mapping[str, pulumi.Input[str]]] labels: User-defined labels for the alloydb instance.
                **Note**: This field is non-authoritative, and will only manage the labels present in your configuration.
@@ -347,6 +336,11 @@ class _InstanceState:
         :param pulumi.Input['InstanceMachineConfigArgs'] machine_config: Configurations for the machines that host the underlying database engine.
                Structure is documented below.
         :param pulumi.Input[str] name: The name of the instance resource.
+        :param pulumi.Input['InstanceNetworkConfigArgs'] network_config: Instance level network configuration.
+               Structure is documented below.
+        :param pulumi.Input[str] public_ip_address: The public IP addresses for the Instance. This is available ONLY when
+               networkConfig.enablePublicIp is set to true. This is the connection
+               endpoint for an end-user application.
         :param pulumi.Input[Mapping[str, pulumi.Input[str]]] pulumi_labels: The combination of labels configured directly on the resource
                and default labels configured on the provider.
         :param pulumi.Input['InstanceQueryInsightsConfigArgs'] query_insights_config: Configuration for query insights.
@@ -390,6 +384,10 @@ class _InstanceState:
             pulumi.set(__self__, "machine_config", machine_config)
         if name is not None:
             pulumi.set(__self__, "name", name)
+        if network_config is not None:
+            pulumi.set(__self__, "network_config", network_config)
+        if public_ip_address is not None:
+            pulumi.set(__self__, "public_ip_address", public_ip_address)
         if pulumi_labels is not None:
             pulumi.set(__self__, "pulumi_labels", pulumi_labels)
         if query_insights_config is not None:
@@ -502,10 +500,6 @@ class _InstanceState:
     @property
     @pulumi.getter(name="effectiveAnnotations")
     def effective_annotations(self) -> Optional[pulumi.Input[Mapping[str, pulumi.Input[str]]]]:
-        """
-        All of annotations (key/value pairs) present on the resource in GCP, including the annotations configured through
-        Terraform, other clients and services.
-        """
         return pulumi.get(self, "effective_annotations")
 
     @effective_annotations.setter
@@ -554,17 +548,6 @@ class _InstanceState:
     @property
     @pulumi.getter(name="instanceType")
     def instance_type(self) -> Optional[pulumi.Input[str]]:
-        """
-        The type of the instance. If the instance type is READ_POOL, provide the associated PRIMARY/SECONDARY instance in the
-        'depends_on' meta-data attribute. If the instance type is SECONDARY, point to the cluster_type of the associated
-        secondary cluster instead of mentioning SECONDARY. Example: {instance_type =
-        google_alloydb_cluster.<secondary_cluster_name>.cluster_type} instead of {instance_type = SECONDARY} If the instance
-        type is SECONDARY, the terraform delete instance operation does not delete the secondary instance but abandons it
-        instead. Use deletion_policy = "FORCE" in the associated secondary cluster and delete the cluster forcefully to delete
-        the secondary cluster as well its associated secondary instance. Users can undo the delete secondary instance action by
-        importing the deleted secondary instance by calling terraform import. Possible values: ["PRIMARY", "READ_POOL",
-        "SECONDARY"]
-        """
         return pulumi.get(self, "instance_type")
 
     @instance_type.setter
@@ -622,6 +605,33 @@ class _InstanceState:
     def name(self, value: Optional[pulumi.Input[str]]):
         pulumi.set(self, "name", value)
 
+    @property
+    @pulumi.getter(name="networkConfig")
+    def network_config(self) -> Optional[pulumi.Input['InstanceNetworkConfigArgs']]:
+        """
+        Instance level network configuration.
+        Structure is documented below.
+        """
+        return pulumi.get(self, "network_config")
+
+    @network_config.setter
+    def network_config(self, value: Optional[pulumi.Input['InstanceNetworkConfigArgs']]):
+        pulumi.set(self, "network_config", value)
+
+    @property
+    @pulumi.getter(name="publicIpAddress")
+    def public_ip_address(self) -> Optional[pulumi.Input[str]]:
+        """
+        The public IP addresses for the Instance. This is available ONLY when
+        networkConfig.enablePublicIp is set to true. This is the connection
+        endpoint for an end-user application.
+        """
+        return pulumi.get(self, "public_ip_address")
+
+    @public_ip_address.setter
+    def public_ip_address(self, value: Optional[pulumi.Input[str]]):
+        pulumi.set(self, "public_ip_address", value)
+
     @property
     @pulumi.getter(name="pulumiLabels")
     def pulumi_labels(self) -> Optional[pulumi.Input[Mapping[str, pulumi.Input[str]]]]:
@@ -726,6 +736,7 @@ class Instance(pulumi.CustomResource):
                  instance_type: Optional[pulumi.Input[str]] = None,
                  labels: Optional[pulumi.Input[Mapping[str, pulumi.Input[str]]]] = None,
                  machine_config: Optional[pulumi.Input[pulumi.InputType['InstanceMachineConfigArgs']]] = None,
+                 network_config: Optional[pulumi.Input[pulumi.InputType['InstanceNetworkConfigArgs']]] = None,
                  query_insights_config: Optional[pulumi.Input[pulumi.InputType['InstanceQueryInsightsConfigArgs']]] = None,
                  read_pool_config: Optional[pulumi.Input[pulumi.InputType['InstanceReadPoolConfigArgs']]] = None,
                  __props__=None):
@@ -862,20 +873,13 @@ class Instance(pulumi.CustomResource):
                
                
                - - -
-        :param pulumi.Input[str] instance_type: The type of the instance. If the instance type is READ_POOL, provide the associated PRIMARY/SECONDARY instance in the
-               'depends_on' meta-data attribute. If the instance type is SECONDARY, point to the cluster_type of the associated
-               secondary cluster instead of mentioning SECONDARY. Example: {instance_type =
-               google_alloydb_cluster.<secondary_cluster_name>.cluster_type} instead of {instance_type = SECONDARY} If the instance
-               type is SECONDARY, the terraform delete instance operation does not delete the secondary instance but abandons it
-               instead. Use deletion_policy = "FORCE" in the associated secondary cluster and delete the cluster forcefully to delete
-               the secondary cluster as well its associated secondary instance. Users can undo the delete secondary instance action by
-               importing the deleted secondary instance by calling terraform import. Possible values: ["PRIMARY", "READ_POOL",
-               "SECONDARY"]
         :param pulumi.Input[Mapping[str, pulumi.Input[str]]] labels: User-defined labels for the alloydb instance.
                **Note**: This field is non-authoritative, and will only manage the labels present in your configuration.
                Please refer to the field `effective_labels` for all of the labels present on the resource.
         :param pulumi.Input[pulumi.InputType['InstanceMachineConfigArgs']] machine_config: Configurations for the machines that host the underlying database engine.
                Structure is documented below.
+        :param pulumi.Input[pulumi.InputType['InstanceNetworkConfigArgs']] network_config: Instance level network configuration.
+               Structure is documented below.
         :param pulumi.Input[pulumi.InputType['InstanceQueryInsightsConfigArgs']] query_insights_config: Configuration for query insights.
                Structure is documented below.
         :param pulumi.Input[pulumi.InputType['InstanceReadPoolConfigArgs']] read_pool_config: Read pool specific config. If the instance type is READ_POOL, this configuration must be provided.
@@ -1023,6 +1027,7 @@ class Instance(pulumi.CustomResource):
                  instance_type: Optional[pulumi.Input[str]] = None,
                  labels: Optional[pulumi.Input[Mapping[str, pulumi.Input[str]]]] = None,
                  machine_config: Optional[pulumi.Input[pulumi.InputType['InstanceMachineConfigArgs']]] = None,
+                 network_config: Optional[pulumi.Input[pulumi.InputType['InstanceNetworkConfigArgs']]] = None,
                  query_insights_config: Optional[pulumi.Input[pulumi.InputType['InstanceQueryInsightsConfigArgs']]] = None,
                  read_pool_config: Optional[pulumi.Input[pulumi.InputType['InstanceReadPoolConfigArgs']]] = None,
                  __props__=None):
@@ -1051,6 +1056,7 @@ class Instance(pulumi.CustomResource):
             __props__.__dict__["instance_type"] = instance_type
             __props__.__dict__["labels"] = labels
             __props__.__dict__["machine_config"] = machine_config
+            __props__.__dict__["network_config"] = network_config
             __props__.__dict__["query_insights_config"] = query_insights_config
             __props__.__dict__["read_pool_config"] = read_pool_config
             __props__.__dict__["create_time"] = None
@@ -1058,6 +1064,7 @@ class Instance(pulumi.CustomResource):
             __props__.__dict__["effective_labels"] = None
             __props__.__dict__["ip_address"] = None
             __props__.__dict__["name"] = None
+            __props__.__dict__["public_ip_address"] = None
             __props__.__dict__["pulumi_labels"] = None
             __props__.__dict__["reconciling"] = None
             __props__.__dict__["state"] = None
@@ -1091,6 +1098,8 @@ class Instance(pulumi.CustomResource):
             labels: Optional[pulumi.Input[Mapping[str, pulumi.Input[str]]]] = None,
             machine_config: Optional[pulumi.Input[pulumi.InputType['InstanceMachineConfigArgs']]] = None,
             name: Optional[pulumi.Input[str]] = None,
+            network_config: Optional[pulumi.Input[pulumi.InputType['InstanceNetworkConfigArgs']]] = None,
+            public_ip_address: Optional[pulumi.Input[str]] = None,
             pulumi_labels: Optional[pulumi.Input[Mapping[str, pulumi.Input[str]]]] = None,
             query_insights_config: Optional[pulumi.Input[pulumi.InputType['InstanceQueryInsightsConfigArgs']]] = None,
             read_pool_config: Optional[pulumi.Input[pulumi.InputType['InstanceReadPoolConfigArgs']]] = None,
@@ -1122,23 +1131,12 @@ class Instance(pulumi.CustomResource):
         :param pulumi.Input[str] create_time: Time the Instance was created in UTC.
         :param pulumi.Input[Mapping[str, pulumi.Input[str]]] database_flags: Database flags. Set at instance level. * They are copied from primary instance on read instance creation. * Read instances can set new or override existing flags that are relevant for reads, e.g. for enabling columnar cache on a read instance. Flags set on read instance may or may not be present on primary.
         :param pulumi.Input[str] display_name: User-settable and human-readable display name for the Instance.
-        :param pulumi.Input[Mapping[str, pulumi.Input[str]]] effective_annotations: All of annotations (key/value pairs) present on the resource in GCP, including the annotations configured through
-               Terraform, other clients and services.
         :param pulumi.Input[Mapping[str, pulumi.Input[str]]] effective_labels: All of labels (key/value pairs) present on the resource in GCP, including the labels configured through Pulumi, other clients and services.
         :param pulumi.Input[str] gce_zone: The Compute Engine zone that the instance should serve from, per https://cloud.google.com/compute/docs/regions-zones This can ONLY be specified for ZONAL instances. If present for a REGIONAL instance, an error will be thrown. If this is absent for a ZONAL instance, instance is created in a random zone with available capacity.
         :param pulumi.Input[str] instance_id: The ID of the alloydb instance.
                
                
                - - -
-        :param pulumi.Input[str] instance_type: The type of the instance. If the instance type is READ_POOL, provide the associated PRIMARY/SECONDARY instance in the
-               'depends_on' meta-data attribute. If the instance type is SECONDARY, point to the cluster_type of the associated
-               secondary cluster instead of mentioning SECONDARY. Example: {instance_type =
-               google_alloydb_cluster.<secondary_cluster_name>.cluster_type} instead of {instance_type = SECONDARY} If the instance
-               type is SECONDARY, the terraform delete instance operation does not delete the secondary instance but abandons it
-               instead. Use deletion_policy = "FORCE" in the associated secondary cluster and delete the cluster forcefully to delete
-               the secondary cluster as well its associated secondary instance. Users can undo the delete secondary instance action by
-               importing the deleted secondary instance by calling terraform import. Possible values: ["PRIMARY", "READ_POOL",
-               "SECONDARY"]
         :param pulumi.Input[str] ip_address: The IP address for the Instance. This is the connection endpoint for an end-user application.
         :param pulumi.Input[Mapping[str, pulumi.Input[str]]] labels: User-defined labels for the alloydb instance.
                **Note**: This field is non-authoritative, and will only manage the labels present in your configuration.
@@ -1146,6 +1144,11 @@ class Instance(pulumi.CustomResource):
         :param pulumi.Input[pulumi.InputType['InstanceMachineConfigArgs']] machine_config: Configurations for the machines that host the underlying database engine.
                Structure is documented below.
         :param pulumi.Input[str] name: The name of the instance resource.
+        :param pulumi.Input[pulumi.InputType['InstanceNetworkConfigArgs']] network_config: Instance level network configuration.
+               Structure is documented below.
+        :param pulumi.Input[str] public_ip_address: The public IP addresses for the Instance. This is available ONLY when
+               networkConfig.enablePublicIp is set to true. This is the connection
+               endpoint for an end-user application.
         :param pulumi.Input[Mapping[str, pulumi.Input[str]]] pulumi_labels: The combination of labels configured directly on the resource
                and default labels configured on the provider.
         :param pulumi.Input[pulumi.InputType['InstanceQueryInsightsConfigArgs']] query_insights_config: Configuration for query insights.
@@ -1177,6 +1180,8 @@ class Instance(pulumi.CustomResource):
         __props__.__dict__["labels"] = labels
         __props__.__dict__["machine_config"] = machine_config
         __props__.__dict__["name"] = name
+        __props__.__dict__["network_config"] = network_config
+        __props__.__dict__["public_ip_address"] = public_ip_address
         __props__.__dict__["pulumi_labels"] = pulumi_labels
         __props__.__dict__["query_insights_config"] = query_insights_config
         __props__.__dict__["read_pool_config"] = read_pool_config
@@ -1255,10 +1260,6 @@ class Instance(pulumi.CustomResource):
     @property
     @pulumi.getter(name="effectiveAnnotations")
     def effective_annotations(self) -> pulumi.Output[Mapping[str, str]]:
-        """
-        All of annotations (key/value pairs) present on the resource in GCP, including the annotations configured through
-        Terraform, other clients and services.
-        """
         return pulumi.get(self, "effective_annotations")
 
     @property
@@ -1291,17 +1292,6 @@ class Instance(pulumi.CustomResource):
     @property
     @pulumi.getter(name="instanceType")
     def instance_type(self) -> pulumi.Output[str]:
-        """
-        The type of the instance. If the instance type is READ_POOL, provide the associated PRIMARY/SECONDARY instance in the
-        'depends_on' meta-data attribute. If the instance type is SECONDARY, point to the cluster_type of the associated
-        secondary cluster instead of mentioning SECONDARY. Example: {instance_type =
-        google_alloydb_cluster.<secondary_cluster_name>.cluster_type} instead of {instance_type = SECONDARY} If the instance
-        type is SECONDARY, the terraform delete instance operation does not delete the secondary instance but abandons it
-        instead. Use deletion_policy = "FORCE" in the associated secondary cluster and delete the cluster forcefully to delete
-        the secondary cluster as well its associated secondary instance. Users can undo the delete secondary instance action by
-        importing the deleted secondary instance by calling terraform import. Possible values: ["PRIMARY", "READ_POOL",
-        "SECONDARY"]
-        """
         return pulumi.get(self, "instance_type")
 
     @property
@@ -1339,6 +1329,25 @@ class Instance(pulumi.CustomResource):
         """
         return pulumi.get(self, "name")
 
+    @property
+    @pulumi.getter(name="networkConfig")
+    def network_config(self) -> pulumi.Output[Optional['outputs.InstanceNetworkConfig']]:
+        """
+        Instance level network configuration.
+        Structure is documented below.
+        """
+        return pulumi.get(self, "network_config")
+
+    @property
+    @pulumi.getter(name="publicIpAddress")
+    def public_ip_address(self) -> pulumi.Output[str]:
+        """
+        The public IP addresses for the Instance. This is available ONLY when
+        networkConfig.enablePublicIp is set to true. This is the connection
+        endpoint for an end-user application.
+        """
+        return pulumi.get(self, "public_ip_address")
+
     @property
     @pulumi.getter(name="pulumiLabels")
     def pulumi_labels(self) -> pulumi.Output[Mapping[str, str]]: